Edit tour

Windows Analysis Report
Comprobante.xll

Overview

General Information

Sample name:	Comprobante.xll
Analysis ID:	1354759
MD5:	7c74dbe0695aefd2c51676608f640b63
SHA1:	d8c59eae487d77a6b1225d362cc8a6a378d893b6
SHA256:	e7298fb795948d7a67d8188694eebf74ef05d03b2289deecc3f66d81048aa420
Tags:	xll
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Multi AV Scanner detection for submitted file

Creates a process in suspended mode (likely to inject code)

Document contains embedded VBA macros

Document misses a certain OLE stream usually present in this Microsoft Office document type

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

PE file contains executable resources (Code or Archives)

PE file contains sections with non-standard names

Potential document exploit detected (performs HTTP gets)

Potential document exploit detected (unknown TCP traffic)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Classification

Process Tree

System is w10x64

cmd.exe (PID: 7672 cmdline: cmd /C "C:\Users\user\Desktop\Comprobante.xll" MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 7684 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

EXCEL.EXE (PID: 7744 cmdline: C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE" -xlls "C:\Users\user\Desktop\Comprobante.xll MD5: 4A871771235598812032C822E6F68F19)

splwow64.exe (PID: 1872 cmdline: C:\Windows\splwow64.exe 12288 MD5: 77DE7761B037061C7C112FD3C5B91E73)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://autodiscover.com/autodiscover/autodiscover.xml

Avira URL Cloud: Label: phishing

Multi AV Scanner detection for submitted file

Source: Comprobante.xll

ReversingLabs: Detection: 13%

Source: unknown	HTTPS traffic detected: 13.107.219.40:443 -> 192.168.2.8:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.219.40:443 -> 192.168.2.8:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.219.40:443 -> 192.168.2.8:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.219.40:443 -> 192.168.2.8:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.219.40:443 -> 192.168.2.8:49723 version: TLS 1.2

Source:

Binary string: C:\Work\Excel-DNA\ExcelDna\Source\ExcelDna\x64\Release\ExcelDna64.pdb source: Comprobante.xll

Source: global traffic	TCP traffic: 192.168.2.8:49721 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49720 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49722 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49724 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49723 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49725 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49727 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49726 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49728 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49729 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49720 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49720 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49721 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49721 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49720 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49721 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49722 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49722 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49723 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49723 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49722 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49723 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49724 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49724 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49724 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49721 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49721 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49721 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49720 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49722 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49720 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49722 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49720 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49722 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49724 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49723 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49724 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49723 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49724 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49723 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49721 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49721 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49721 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49725 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49725 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49725 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49720 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49720 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49720 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49722 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49722 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49726 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49726 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49726 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49727 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49727 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49727 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49724 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49724 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49724 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49723 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49723 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49723 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49728 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49728 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49728 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49729 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49729 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49729 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49725 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49725 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49727 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49727 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49726 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49726 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49728 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49728 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49729 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49729 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49725 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49725 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49725 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49727 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49727 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49727 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49726 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49726 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49726 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49728 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49728 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49728 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49728 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49729 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49729 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49729 -> 13.107.219.40:443

Source: global traffic	TCP traffic: 192.168.2.8:49720 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49720
Source: global traffic	TCP traffic: 192.168.2.8:49720 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49721 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49721
Source: global traffic	TCP traffic: 192.168.2.8:49721 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49720 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49720
Source: global traffic	TCP traffic: 192.168.2.8:49721 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49721
Source: global traffic	TCP traffic: 192.168.2.8:49722 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49722
Source: global traffic	TCP traffic: 192.168.2.8:49722 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49723 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49723
Source: global traffic	TCP traffic: 192.168.2.8:49723 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49722 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49722
Source: global traffic	TCP traffic: 192.168.2.8:49723 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49723
Source: global traffic	TCP traffic: 192.168.2.8:49724 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49724
Source: global traffic	TCP traffic: 192.168.2.8:49724 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49724 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49724
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49721
Source: global traffic	TCP traffic: 192.168.2.8:49721 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49721 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49721
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49721
Source: global traffic	TCP traffic: 192.168.2.8:49721 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49720
Source: global traffic	TCP traffic: 192.168.2.8:49720 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49722
Source: global traffic	TCP traffic: 192.168.2.8:49722 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49720 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49720
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49720
Source: global traffic	TCP traffic: 192.168.2.8:49722 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49722
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49722
Source: global traffic	TCP traffic: 192.168.2.8:49720 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49722 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49724
Source: global traffic	TCP traffic: 192.168.2.8:49724 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49723
Source: global traffic	TCP traffic: 192.168.2.8:49723 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49724 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49724
Source: global traffic	TCP traffic: 192.168.2.8:49723 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49723
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49724
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49723
Source: global traffic	TCP traffic: 192.168.2.8:49724 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49723 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49721
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49720
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49722
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49723
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49724
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49721
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49721
Source: global traffic	TCP traffic: 192.168.2.8:49721 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49721 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49721
Source: global traffic	TCP traffic: 192.168.2.8:49721 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49721
Source: global traffic	TCP traffic: 192.168.2.8:49725 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49725
Source: global traffic	TCP traffic: 192.168.2.8:49725 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49725 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49725
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49720
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49720
Source: global traffic	TCP traffic: 192.168.2.8:49720 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49720 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49720 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49720
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49720
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49722
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49722
Source: global traffic	TCP traffic: 192.168.2.8:49722 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49722 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49722
Source: global traffic	TCP traffic: 192.168.2.8:49726 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49726
Source: global traffic	TCP traffic: 192.168.2.8:49726 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49726 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49726
Source: global traffic	TCP traffic: 192.168.2.8:49727 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49727
Source: global traffic	TCP traffic: 192.168.2.8:49727 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49727 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49727
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49724
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49724
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49723
Source: global traffic	TCP traffic: 192.168.2.8:49724 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49723
Source: global traffic	TCP traffic: 192.168.2.8:49724 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49724
Source: global traffic	TCP traffic: 192.168.2.8:49724 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49723 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49724
Source: global traffic	TCP traffic: 192.168.2.8:49723 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49723
Source: global traffic	TCP traffic: 192.168.2.8:49723 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49723
Source: global traffic	TCP traffic: 192.168.2.8:49728 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49728
Source: global traffic	TCP traffic: 192.168.2.8:49728 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49728 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49728
Source: global traffic	TCP traffic: 192.168.2.8:49729 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49729
Source: global traffic	TCP traffic: 192.168.2.8:49729 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49729 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49729
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49725
Source: global traffic	TCP traffic: 192.168.2.8:49725 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49725
Source: global traffic	TCP traffic: 192.168.2.8:49725 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49725
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49727
Source: global traffic	TCP traffic: 192.168.2.8:49727 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49727
Source: global traffic	TCP traffic: 192.168.2.8:49727 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49727
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49726
Source: global traffic	TCP traffic: 192.168.2.8:49726 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49726
Source: global traffic	TCP traffic: 192.168.2.8:49726 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49726
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49728
Source: global traffic	TCP traffic: 192.168.2.8:49728 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49728
Source: global traffic	TCP traffic: 192.168.2.8:49728 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49728
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49729
Source: global traffic	TCP traffic: 192.168.2.8:49729 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49729
Source: global traffic	TCP traffic: 192.168.2.8:49729 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49729
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49725
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49725
Source: global traffic	TCP traffic: 192.168.2.8:49725 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49725 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49725
Source: global traffic	TCP traffic: 192.168.2.8:49725 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49725
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49727
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49727
Source: global traffic	TCP traffic: 192.168.2.8:49727 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49727 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49727
Source: global traffic	TCP traffic: 192.168.2.8:49727 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49727
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49726
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49726
Source: global traffic	TCP traffic: 192.168.2.8:49726 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49726 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49726
Source: global traffic	TCP traffic: 192.168.2.8:49726 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49726
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49728
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49728
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49728
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49728
Source: global traffic	TCP traffic: 192.168.2.8:49728 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49728 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49728 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49728
Source: global traffic	TCP traffic: 192.168.2.8:49728 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49728
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49729
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49729
Source: global traffic	TCP traffic: 192.168.2.8:49729 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 192.168.2.8:49729 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49729
Source: global traffic	TCP traffic: 192.168.2.8:49729 -> 13.107.219.40:443
Source: global traffic	TCP traffic: 13.107.219.40:443 -> 192.168.2.8:49729

Source: Joe Sandbox View

IP Address: 13.107.219.40 13.107.219.40

Source: Joe Sandbox View

JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: global traffic	HTTP traffic detected: GET /rules/rule324002v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule324001v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule324003v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule324006v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule324005v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule324007v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule324009v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule324008v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule63067v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule324010v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: http://b.c2r.ts.cdn.office.net/pr
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: http://f.c2r.ts.cdn.office.net/pr
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: http://olkflt.edog.officeapps.live.com/olkflt/outlookflighting.svc/api/glides
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: http://weather.service.msn.com/data.aspx
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://addinsinstallation.store.office.com/app/acquisitionlogging
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://addinsinstallation.store.office.com/app/download
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://addinsinstallation.store.office.com/appinstall/authenticated
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://addinsinstallation.store.office.com/appinstall/preinstalled
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://addinsinstallation.store.office.com/appinstall/unauthenticated
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://addinsinstallation.store.office.com/orgid/appinstall/authenticated
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://addinslicensing.store.office.com/apps/remove
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://addinslicensing.store.office.com/commerce/query
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://addinslicensing.store.office.com/entitlement/query
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://addinslicensing.store.office.com/orgid/apps/remove
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://addinslicensing.store.office.com/orgid/entitlement/query
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://analysis.windows.net/powerbi/api
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://api.aadrm.com
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://api.aadrm.com/
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://api.addins.omex.office.net/api/addins/search
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://api.addins.omex.office.net/appinfo/query
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://api.addins.omex.office.net/appstate/query
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://api.addins.store.office.com/addinstemplate
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://api.addins.store.office.com/app/query
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://api.addins.store.officeppe.com/addinstemplate
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://api.cortana.ai
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://api.diagnostics.office.com
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://api.diagnosticssdf.office.com
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://api.diagnosticssdf.office.com/v2/feedback
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://api.diagnosticssdf.office.com/v2/file
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://api.microsoftstream.com
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://api.microsoftstream.com/api/
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://api.office.net
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://api.officescripts.microsoftusercontent.com/api
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://api.onedrive.com
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://api.powerbi.com/v1.0/myorg/datasets
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://api.powerbi.com/v1.0/myorg/groups
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://api.powerbi.com/v1.0/myorg/imports
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://api.scheduler.
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://apis.live.net/v5.0/
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://arc.msn.com/v4/api/selection
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://asgsmsproxyapi.azurewebsites.net/
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://augloop.office.com
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://augloop.office.com/v2
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://augloop.office.com;https://augloop-int.officeppe.com;https://augloop-dogfood.officeppe.com;h
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://autodiscover-s.outlook.com/
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
Source: excel.exe_Rules.xml.2.dr	String found in binary or memory: https://autodiscover.com.br/Autodiscover/Autodiscover.xml
Source: excel.exe_Rules.xml.2.dr	String found in binary or memory: https://autodiscover.com.br/autodiscover/autodiscover.xml
Source: excel.exe_Rules.xml.2.dr	String found in binary or memory: https://autodiscover.com.cn/Autodiscover/Autodiscover.xml
Source: excel.exe_Rules.xml.2.dr	String found in binary or memory: https://autodiscover.com.cn/autodiscover/autodiscover.xml
Source: excel.exe_Rules.xml.2.dr	String found in binary or memory: https://autodiscover.com/Autodiscover/Autodiscover.xml
Source: excel.exe_Rules.xml.2.dr	String found in binary or memory: https://autodiscover.com/autodiscover/autodiscover.xml
Source: excel.exe_Rules.xml.2.dr	String found in binary or memory: https://autodiscover.es/Autodiscover/Autodiscover.xml
Source: excel.exe_Rules.xml.2.dr	String found in binary or memory: https://autodiscover.es/autodiscover/autodiscover.xml
Source: excel.exe_Rules.xml.2.dr	String found in binary or memory: https://autodiscover.fr/Autodiscover/Autodiscover.xml
Source: excel.exe_Rules.xml.2.dr	String found in binary or memory: https://autodiscover.fr/autodiscover/autodiscover.xml
Source: excel.exe_Rules.xml.2.dr	String found in binary or memory: https://autodiscover.in/Autodiscover/Autodiscover.xml
Source: excel.exe_Rules.xml.2.dr	String found in binary or memory: https://autodiscover.in/autodiscover/autodiscover.xml
Source: excel.exe_Rules.xml.2.dr	String found in binary or memory: https://autodiscover.it/Autodiscover/Autodiscover.xml
Source: excel.exe_Rules.xml.2.dr	String found in binary or memory: https://autodiscover.it/autodiscover/autodiscover.xml
Source: excel.exe_Rules.xml.2.dr	String found in binary or memory: https://autodiscover.online/Autodiscover/Autodiscover.xml
Source: excel.exe_Rules.xml.2.dr	String found in binary or memory: https://autodiscover.online/autodiscover/autodiscover.xml
Source: excel.exe_Rules.xml.2.dr	String found in binary or memory: https://autodiscover.sg/Autodiscover/Autodiscover.xml
Source: excel.exe_Rules.xml.2.dr	String found in binary or memory: https://autodiscover.sg/autodiscover/autodiscover.xml
Source: excel.exe_Rules.xml.2.dr	String found in binary or memory: https://autodiscover.uk/Autodiscover/Autodiscover.xml
Source: excel.exe_Rules.xml.2.dr	String found in binary or memory: https://autodiscover.uk/autodiscover/autodiscover.xml
Source: excel.exe_Rules.xml.2.dr	String found in binary or memory: https://autodiscover.xyz/Autodiscover/Autodiscover.xml
Source: excel.exe_Rules.xml.2.dr	String found in binary or memory: https://autodiscover.xyz/autodiscover/autodiscover.xml
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designer-mobile
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://cdn.entity.
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://cdn.hubblecontent.osi.office.net/
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://cdn.int.designerapp.osi.office.net/fonts
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://client-office365-tas.msedge.net/ab
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://clients.config.office.net
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://clients.config.office.net/
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://clients.config.office.net/c2r/v1.0/InteractiveInstallation
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/android/policies
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/ios
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/mac
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/tenantassociationkey
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://cloudfiles.onenote.com/upload.aspx
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://config.edge.skype.com
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://config.edge.skype.com/config/v1/Office
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://config.edge.skype.com/config/v2/Office
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://consent.config.office.com/consentcheckin/v1.0/consents
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://consent.config.office.com/consentweb/v1.0/consents
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://cortana.ai
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://cortana.ai/api
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://cr.office.com
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://d.docs.live.net
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://dataservice.o365filtering.com
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://dataservice.o365filtering.com/
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://designerapp.officeapps.live.com/designerapp
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://dev.cortana.ai
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://dev0-api.acompli.net/autodetect
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://devnull.onenote.com
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://directory.services.
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://ecs.office.com
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://ecs.office.com/config/v1/Designer
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://ecs.office.com/config/v2/Office
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://enrichment.osi.office.net/
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/Refresh/v1
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/Resolve/v1
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/Search/v1
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/StockHistory/v1
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/ipcheck/v1
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/v2.1601652342626
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/Metadata/
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/Metadata/metadata.json
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/view/desktop/main.cshtml
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/view/web/main.cshtml
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://entitlement.diagnostics.office.com
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://entitlement.diagnosticssdf.office.com
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://excel.uservoice.com/forums/304936-excel-for-mobile-devices-tablets-phones-android
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://fpastorage.cdn.office.net/%s
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://fpastorage.cdn.office.net/firstpartyapp/addins.xml
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://globaldisco.crm.dynamics.com
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://graph.ppe.windows.net
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://graph.ppe.windows.net/
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://graph.windows.net
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://graph.windows.net/
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/api/pivots/
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/api/telemetry
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/browse?cp=remix3d
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/browse?secureurl=1
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsoftcontent?initpivot=icons
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsoftcontent?initpivot=stockimages
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsoftcontent?initpivot=stockvideos
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsofticon?
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://incidents.diagnostics.office.com
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://incidents.diagnosticssdf.office.com
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://inclient.store.office.com/gyro/client
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://inclient.store.office.com/gyro/clientstore
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=ClipArt
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Facebook
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://insertmedia.bing.office.net/odc/insertmedia
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://invites.office.com/
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://learningtools.onenote.com/learningtoolsapi/v2.0/GetFreeformSpeech
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://learningtools.onenote.com/learningtoolsapi/v2.0/Getvoices
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://lifecycle.office.com
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://login.microsoftonline.com
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://login.microsoftonline.com/
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://login.windows-ppe.net/common/oauth2/authorize
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://login.windows.local
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://login.windows.net/common/oauth2/authorize
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://loki.delve.office.com/api/v1/configuration/officewin32/
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://lookup.onenote.com/lookup/geolocation/v1
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://make.powerautomate.com
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://management.azure.com
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://management.azure.com/
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://messaging.action.office.com/
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://messaging.action.office.com/setcampaignaction
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://messaging.action.office.com/setuseraction16
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://messaging.engagement.office.com/
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://messaging.engagement.office.com/campaignmetadataaggregator
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://messaging.lifecycle.office.com/
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://messaging.lifecycle.office.com/getcustommessage16
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://messaging.office.com/
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://metadata.templates.cdn.office.net/client/log
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://my.microsoftpersonalcontent.com
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://ncus.contentsync.
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://ncus.pagecontentsync.
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://o365auditrealtimeingestion.manage.office.com/api/userauditrecord
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://ocos-office365-s2s.msedge.net/ab
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://odc.officeapps.live.com/odc/stat/images/OneDriveUpsell.png
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://odc.officeapps.live.com/odc/xml?resource=OneDriveSignUpUpsell
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://odc.officeapps.live.com/odc/xml?resource=OneDriveSyncClientUpsell
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://ods-diagnostics-ppe.trafficmanager.net
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://ofcrecsvcapi-int.azurewebsites.net/
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://officeapps.live.com
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://officeci.azurewebsites.net/api/
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://officesetup.getmicrosoftkey.com
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://ogma.osi.office.net/TradukoApi/api/v1.0/
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officeentities
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officeentitiesupdated
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officesharedentities
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officesharedentitiesupdated
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://onedrive.live.com
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://onedrive.live.com/embed?
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://otelrules.azureedge.net
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://otelrules.svc.static.microsoft
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://outlook.office.com
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://outlook.office.com/
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://outlook.office.com/autosuggest/api/v1/init?cvid=
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://outlook.office365.com
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://outlook.office365.com/
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://outlook.office365.com/api/v1.0/me/Activities
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://outlook.office365.com/autodiscover/autodiscover.json
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://outlook.office365.com/connectors
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://ovisualuiapp.azurewebsites.net/pbiagave/
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://pages.store.office.com/appshome.aspx?productgroup=Outlook
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://pages.store.office.com/review/query
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://pages.store.office.com/webapplandingpage.aspx
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://partnerservices.getmicrosoftkey.com/PartnerProvisioning.svc/v1/subscriptions
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://portal.office.com/account/?ref=ClientMeControl
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://posarprodcssservice.accesscontrol.windows.net/v2/OAuth2-13
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://powerlift-frontdesk.acompli.net
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://powerlift.acompli.net
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://prod-global-autodetect.acompli.net/autodetect
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://prod.mds.office.com/mds/api/v1.0/clientmodeldirectory
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://pushchannel.1drv.ms
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://res.cdn.office.net
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://res.cdn.office.net/polymer/models
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://res.getmicrosoftkey.com/api/redemptionevents
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://rpsticket.partnerservices.getmicrosoftkey.com
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://safelinks.protection.outlook.com/api/GetPolicy
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://settings.outlook.com
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://shell.suite.office.com:1443
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://skyapi.live.net/Activity/
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://sr.outlook.office.net/ws/speech/recognize/assistant/work
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://staging.cortana.ai
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://storage.live.com/clientlogs/uploadlocation
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://store.office.cn/addinstemplate
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://store.office.de/addinstemplate
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://substrate.office.com
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://substrate.office.com/Notes-Internal.ReadWrite
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://substrate.office.com/search/api/v1/SearchHistory
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://substrate.office.com/search/api/v2/init
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://tasks.office.com
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://uci.cdn.office.net/mirrored/smartlookup/current/
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://uci.officeapps.live.com/OfficeInsights/web/views/insights.desktop.html
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://uci.officeapps.live.com/OfficeInsights/web/views/insights.immersive.html
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://useraudit.o365auditrealtimeingestion.manage.office.com
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://visio.uservoice.com/forums/368202-visio-on-devices
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://web.microsoftstream.com/video/
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://webshell.suite.office.com
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://wus2.contentsync.
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://wus2.pagecontentsync.
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://www.bingapis.com/api/v7/urlpreview/search?appid=E93048236FE27D972F67C5AF722136866DF65FA2
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://www.odwebp.svc.ms
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	String found in binary or memory: https://www.yammer.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723

Source: unknown	HTTPS traffic detected: 13.107.219.40:443 -> 192.168.2.8:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.219.40:443 -> 192.168.2.8:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.219.40:443 -> 192.168.2.8:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.219.40:443 -> 192.168.2.8:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.219.40:443 -> 192.168.2.8:49723 version: TLS 1.2

Source: rule324002v3.xml.2.dr	OLE indicator, VBA macros: true
Source: rule324003v3.xml.2.dr	OLE indicator, VBA macros: true
Source: rule324001v3.xml.2.dr	OLE indicator, VBA macros: true
Source: rule324005v1.xml.2.dr	OLE indicator, VBA macros: true
Source: rule324006v1.xml.2.dr	OLE indicator, VBA macros: true
Source: rule324007v1.xml.2.dr	OLE indicator, VBA macros: true
Source: rule324009v1.xml.2.dr	OLE indicator, VBA macros: true
Source: rule324008v1.xml.2.dr	OLE indicator, VBA macros: true
Source: rule63067v4.xml.2.dr	OLE indicator, VBA macros: true
Source: rule324010v1.xml.2.dr	OLE indicator, VBA macros: true
Source: CatalogCacheMetaData.xml.2.dr	OLE indicator, VBA macros: true
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	OLE indicator, VBA macros: true

Source: rule324002v3.xml.2.dr	OLE stream indicators for Word, Excel, PowerPoint, and Visio: all false
Source: rule324003v3.xml.2.dr	OLE stream indicators for Word, Excel, PowerPoint, and Visio: all false
Source: rule324001v3.xml.2.dr	OLE stream indicators for Word, Excel, PowerPoint, and Visio: all false
Source: rule324005v1.xml.2.dr	OLE stream indicators for Word, Excel, PowerPoint, and Visio: all false
Source: rule324006v1.xml.2.dr	OLE stream indicators for Word, Excel, PowerPoint, and Visio: all false
Source: rule324007v1.xml.2.dr	OLE stream indicators for Word, Excel, PowerPoint, and Visio: all false
Source: rule324009v1.xml.2.dr	OLE stream indicators for Word, Excel, PowerPoint, and Visio: all false
Source: rule324008v1.xml.2.dr	OLE stream indicators for Word, Excel, PowerPoint, and Visio: all false
Source: rule63067v4.xml.2.dr	OLE stream indicators for Word, Excel, PowerPoint, and Visio: all false
Source: rule324010v1.xml.2.dr	OLE stream indicators for Word, Excel, PowerPoint, and Visio: all false
Source: CatalogCacheMetaData.xml.2.dr	OLE stream indicators for Word, Excel, PowerPoint, and Visio: all false
Source: 81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	OLE stream indicators for Word, Excel, PowerPoint, and Visio: all false

Source: Comprobante.xll

Static PE information: Resource name: RT_STRING type: PDP-11 demand-paged pure executable not stripped

Source: Comprobante.xll

Binary or memory string: OriginalFilenameExcelDna.xll~/ vs Comprobante.xll

Source: classification engine

Classification label: mal56.winXLL@7/26@0/1

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\mso285E.tmp

Jump to behavior

Source: C:\Windows\System32\conhost.exe

Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7684:120:WilError_03

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

File created: C:\Users\user\AppData\Local\Temp\{9B90E6DF-127D-4E23-9CF7-A5005A676C51} - OProcSessId.dat

Jump to behavior

Source: Comprobante.xll

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Windows\SysWOW64\cmd.exe

File read: C:\Users\user\Desktop\desktop.ini

Jump to behavior

Source: Comprobante.xll

ReversingLabs: Detection: 13%

Source: unknown	Process created: C:\Windows\SysWOW64\cmd.exe cmd /C "C:\Users\user\Desktop\Comprobante.xll"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE" -xlls "C:\Users\user\Desktop\Comprobante.xll
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process created: C:\Windows\splwow64.exe C:\Windows\splwow64.exe 12288
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE" -xlls "C:\Users\user\Desktop\Comprobante.xll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process created: C:\Windows\splwow64.exe C:\Windows\splwow64.exe 12288	Jump to behavior

Source: Comprobante.LNK.2.dr

LNK file: ..\..\..\..\..\Desktop\Comprobante.xll

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Common

Jump to behavior

Source: Comprobante.xll

Static PE information: More than 8191 > 100 exports found

Source: Comprobante.xll

Static PE information: Image base 0x180000000 > 0x60000000

Source: Comprobante.xll	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IMPORT
Source: Comprobante.xll	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_RESOURCE
Source: Comprobante.xll	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_BASERELOC
Source: Comprobante.xll	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG
Source: Comprobante.xll	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG
Source: Comprobante.xll	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IAT

Source: Comprobante.xll

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source:

Binary string: C:\Work\Excel-DNA\ExcelDna\Source\ExcelDna\x64\Release\ExcelDna64.pdb source: Comprobante.xll

Source: Comprobante.xll	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IMPORT is in: .rdata
Source: Comprobante.xll	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_RESOURCE is in: .rsrc
Source: Comprobante.xll	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_BASERELOC is in: .reloc
Source: Comprobante.xll	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG is in: .rdata
Source: Comprobante.xll	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IAT is in: .rdata

Source: Comprobante.xll

Static PE information: section name: _RDATA

Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Windows\splwow64.exe

Thread delayed: delay time: 120000

Jump to behavior

Source: excel.exe_Rules.xml.2.dr	Binary or memory string: <V V="VMWare, Inc." T="W" />
Source: excel.exe_Rules.xml.2.dr	Binary or memory string: <V V="QEMU" T="W" />

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Windows\SysWOW64\cmd.exe

Process created: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE" -xlls "C:\Users\user\Desktop\Comprobante.xll

Jump to behavior

Source: C:\Windows\SysWOW64\cmd.exe

Queries volume information: C:\ VolumeInformation

Jump to behavior

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact	Resource Development	Reconnaissance
Valid Accounts	1 Scripting	Path Interception	11 Process Injection	1 Masquerading	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	1 Encrypted Channel	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Abuse Accessibility Features	Acquire Infrastructure	Gather Victim Identity Information
Default Accounts	2 Exploitation for Client Execution	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Virtualization/Sandbox Evasion	LSASS Memory	1 Process Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	1 Ingress Tool Transfer	SIM Card Swap	Obtain Device Cloud Backups	Network Denial of Service	Domains	Credentials
Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	11 Process Injection	Security Account Manager	1 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	1 Non-Application Layer Protocol			Data Encrypted for Impact	DNS Server	Email Addresses
Local Accounts	Cron	Login Hook	Login Hook	1 Scripting	NTDS	1 File and Directory Discovery	Distributed Component Object Model	Input Capture	Traffic Duplication	2 Application Layer Protocol			Data Destruction	Virtual Private Server	Employee Names
Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	11 System Information Discovery	SSH	Keylogging	Scheduled Transfer	Fallback Channels			Data Encrypted for Impact	Server	Gather Victim Network Information

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
Comprobante.xll	14%	ReversingLabs	Win64.Malware.Generic

Source	Detection	Scanner	Label
https://cdn.entity.	0%	URL Reputation	safe
https://powerlift.acompli.net	0%	URL Reputation	safe
https://rpsticket.partnerservices.getmicrosoftkey.com	0%	URL Reputation	safe
https://cortana.ai	0%	URL Reputation	safe
https://api.aadrm.com/	0%	URL Reputation	safe
https://ofcrecsvcapi-int.azurewebsites.net/	0%	URL Reputation	safe
https://res.getmicrosoftkey.com/api/redemptionevents	0%	URL Reputation	safe
https://powerlift-frontdesk.acompli.net	0%	URL Reputation	safe
https://officeci.azurewebsites.net/api/	0%	URL Reputation	safe
https://api.scheduler.	0%	URL Reputation	safe
https://my.microsoftpersonalcontent.com	0%	URL Reputation	safe
https://store.office.cn/addinstemplate	0%	URL Reputation	safe
https://api.aadrm.com	0%	URL Reputation	safe
https://dev0-api.acompli.net/autodetect	0%	URL Reputation	safe
https://www.odwebp.svc.ms	0%	URL Reputation	safe
https://api.addins.store.officeppe.com/addinstemplate	0%	URL Reputation	safe
https://dataservice.o365filtering.com/	0%	URL Reputation	safe
https://officesetup.getmicrosoftkey.com	0%	URL Reputation	safe
https://prod-global-autodetect.acompli.net/autodetect	0%	URL Reputation	safe
https://ncus.contentsync.	0%	URL Reputation	safe
https://apis.live.net/v5.0/	0%	URL Reputation	safe
https://wus2.contentsync.	0%	URL Reputation	safe
https://make.powerautomate.com	0%	URL Reputation	safe
https://d.docs.live.net	0%	Avira URL Cloud	safe
https://augloop.office.com;https://augloop-int.officeppe.com;https://augloop-dogfood.officeppe.com;h	0%	Avira URL Cloud	safe
https://autodiscover.xyz/Autodiscover/Autodiscover.xml	0%	Avira URL Cloud	safe
https://autodiscover.in/Autodiscover/Autodiscover.xml	0%	Avira URL Cloud	safe
https://autodiscover.it/Autodiscover/Autodiscover.xml	0%	Avira URL Cloud	safe
https://autodiscover.com.br/autodiscover/autodiscover.xml	0%	Avira URL Cloud	safe
https://autodiscover.uk/Autodiscover/Autodiscover.xml	0%	Avira URL Cloud	safe
https://otelrules.svc.static.microsoft	0%	Avira URL Cloud	safe
https://autodiscover.fr/Autodiscover/Autodiscover.xml	0%	Avira URL Cloud	safe
https://autodiscover.com/autodiscover/autodiscover.xml	100%	Avira URL Cloud	phishing
https://autodiscover.com.cn/Autodiscover/Autodiscover.xml	0%	Avira URL Cloud	safe
https://autodiscover.online/autodiscover/autodiscover.xml	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
part-0012.t-0009.fbs1-t-msedge.net	13.107.219.40	true	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://api.diagnosticssdf.office.com	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false		high
https://login.microsoftonline.com/	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false		high
https://autodiscover.uk/Autodiscover/Autodiscover.xml	excel.exe_Rules.xml.2.dr	false	Avira URL Cloud: safe	unknown
https://shell.suite.office.com:1443	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false		high
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false		high
https://autodiscover-s.outlook.com/	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false		high
https://useraudit.o365auditrealtimeingestion.manage.office.com	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false		high
https://outlook.office365.com/connectors	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false		high
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false		high
https://cdn.entity.	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false	URL Reputation: safe	unknown
https://api.addins.omex.office.net/appinfo/query	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false		high
https://clients.config.office.net/user/v1.0/tenantassociationkey	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false		high
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false		high
https://powerlift.acompli.net	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false	URL Reputation: safe	unknown
https://rpsticket.partnerservices.getmicrosoftkey.com	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false	URL Reputation: safe	unknown
https://lookup.onenote.com/lookup/geolocation/v1	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false		high
https://cortana.ai	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false	URL Reputation: safe	unknown
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false		high
https://api.powerbi.com/v1.0/myorg/imports	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false		high
https://cloudfiles.onenote.com/upload.aspx	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false		high
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false		high
https://entitlement.diagnosticssdf.office.com	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false		high
https://api.aadrm.com/	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false	URL Reputation: safe	unknown
https://ofcrecsvcapi-int.azurewebsites.net/	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false	URL Reputation: safe	unknown
https://autodiscover.in/Autodiscover/Autodiscover.xml	excel.exe_Rules.xml.2.dr	false	Avira URL Cloud: safe	unknown
https://www.yammer.com	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false		high
https://autodiscover.com/autodiscover/autodiscover.xml	excel.exe_Rules.xml.2.dr	false	Avira URL Cloud: phishing	unknown
https://autodiscover.it/Autodiscover/Autodiscover.xml	excel.exe_Rules.xml.2.dr	false	Avira URL Cloud: safe	unknown
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false		high
https://api.microsoftstream.com/api/	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false		high
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false		high
https://cr.office.com	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false		high
https://augloop.office.com;https://augloop-int.officeppe.com;https://augloop-dogfood.officeppe.com;h	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false	Avira URL Cloud: safe	low
https://autodiscover.fr/Autodiscover/Autodiscover.xml	excel.exe_Rules.xml.2.dr	false	Avira URL Cloud: safe	unknown
https://otelrules.svc.static.microsoft	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false	Avira URL Cloud: safe	unknown
https://portal.office.com/account/?ref=ClientMeControl	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false		high
https://autodiscover.uk/autodiscover/autodiscover.xml	excel.exe_Rules.xml.2.dr	false		unknown
https://graph.ppe.windows.net	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false		high
https://res.getmicrosoftkey.com/api/redemptionevents	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false	URL Reputation: safe	unknown
https://powerlift-frontdesk.acompli.net	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false	URL Reputation: safe	unknown
https://tasks.office.com	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false		high
https://officeci.azurewebsites.net/api/	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false	URL Reputation: safe	unknown
https://sr.outlook.office.net/ws/speech/recognize/assistant/work	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false		high
https://api.scheduler.	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false	URL Reputation: safe	unknown
https://autodiscover.xyz/Autodiscover/Autodiscover.xml	excel.exe_Rules.xml.2.dr	false	Avira URL Cloud: safe	unknown
https://my.microsoftpersonalcontent.com	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false	URL Reputation: safe	unknown
https://store.office.cn/addinstemplate	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false	URL Reputation: safe	unknown
https://api.aadrm.com	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false	URL Reputation: safe	unknown
https://autodiscover.com.br/autodiscover/autodiscover.xml	excel.exe_Rules.xml.2.dr	false	Avira URL Cloud: safe	unknown
https://outlook.office.com/autosuggest/api/v1/init?cvid=	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false		high
https://globaldisco.crm.dynamics.com	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false		high
https://messaging.engagement.office.com/	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false		high
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false		high
https://dev0-api.acompli.net/autodetect	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false	URL Reputation: safe	unknown
https://www.odwebp.svc.ms	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false	URL Reputation: safe	unknown
https://api.diagnosticssdf.office.com/v2/feedback	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false		high
https://api.powerbi.com/v1.0/myorg/groups	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false		high
https://web.microsoftstream.com/video/	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false		high
https://api.addins.store.officeppe.com/addinstemplate	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false	URL Reputation: safe	unknown
https://graph.windows.net	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false		high
https://dataservice.o365filtering.com/	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false	URL Reputation: safe	unknown
https://officesetup.getmicrosoftkey.com	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false	URL Reputation: safe	unknown
https://analysis.windows.net/powerbi/api	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false		high
https://autodiscover.in/autodiscover/autodiscover.xml	excel.exe_Rules.xml.2.dr	false		unknown
https://prod-global-autodetect.acompli.net/autodetect	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false	URL Reputation: safe	unknown
https://substrate.office.com	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false		high
https://outlook.office365.com/autodiscover/autodiscover.json	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false		high
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false		high
https://consent.config.office.com/consentcheckin/v1.0/consents	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false		high
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false		high
https://learningtools.onenote.com/learningtoolsapi/v2.0/Getvoices	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false		high
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false		high
https://d.docs.live.net	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false	Avira URL Cloud: safe	unknown
https://safelinks.protection.outlook.com/api/GetPolicy	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false		high
https://ncus.contentsync.	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false	URL Reputation: safe	unknown
https://autodiscover.online/autodiscover/autodiscover.xml	excel.exe_Rules.xml.2.dr	false	Avira URL Cloud: safe	unknown
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false		high
https://autodiscover.com.cn/Autodiscover/Autodiscover.xml	excel.exe_Rules.xml.2.dr	false	Avira URL Cloud: safe	unknown
https://autodiscover.it/autodiscover/autodiscover.xml	excel.exe_Rules.xml.2.dr	false		unknown
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false		high
http://weather.service.msn.com/data.aspx	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false		high
https://apis.live.net/v5.0/	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false	URL Reputation: safe	unknown
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false		high
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false		high
https://messaging.lifecycle.office.com/	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false		high
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false		high
https://pushchannel.1drv.ms	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false		high
https://management.azure.com	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false		high
https://outlook.office365.com	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false		high
https://autodiscover.com.br/Autodiscover/Autodiscover.xml	excel.exe_Rules.xml.2.dr	false		unknown
https://wus2.contentsync.	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false	URL Reputation: safe	unknown
https://incidents.diagnostics.office.com	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false		high
https://clients.config.office.net/user/v1.0/ios	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false		high
https://make.powerautomate.com	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false	URL Reputation: safe	unknown
https://api.addins.omex.office.net/api/addins/search	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false		high
https://autodiscover.xyz/autodiscover/autodiscover.xml	excel.exe_Rules.xml.2.dr	false		unknown
https://insertmedia.bing.office.net/odc/insertmedia	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false		high
https://outlook.office365.com/api/v1.0/me/Activities	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false		high
https://api.office.net	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false		high
https://incidents.diagnosticssdf.office.com	81A0C263-86B6-44AC-B745-4DFCF06DF311.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
13.107.219.40	part-0012.t-0009.fbs1-t-msedge.net	United States		8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false

General Information

Joe Sandbox version:	38.0.0 Ammolite
Analysis ID:	1354759
Start date and time:	2023-12-06 18:14:52 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 39s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Run name:	Run with higher sleep bypass
Number of analysed new started processes analysed:	12
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Comprobante.xll
Detection:	MAL
Classification:	mal56.winXLL@7/26@0/1
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .xll Sleeps bigger than 100000000ms are automatically reduced to 1000ms

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 52.109.8.89, 52.109.6.63, 23.221.242.90, 52.113.194.132, 13.78.111.198
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, otelrules.afd.azureedge.net, onedscolprdjpe00.japaneast.cloudapp.azure.com, eus2-azsc-000.roaming.officeapps.live.com, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, osiprod-eus2-buff-azsc-000.eastus2.cloudapp.azure.com, global-region-azurefd-prod-fbs1.trafficmanager.net, ecs-office.s-0005.s-msedge.net, roaming.officeapps.live.com, ocsp.digicert.com, login.live.com, e16604.g.akamaiedge.net, officeclient.microsoft.com, prod.fs.microsoft.com.akadns.net, ecs.office.com, self-events-data.trafficmanager.net, fs.microsoft.com, otelrules.azureedge.net, prod.configsvc1.live.com.akadns.net, self.events.data.microsoft.com, prod.roaming1.live.com.akadns.net, s-0005-office.config.skype.com, fe3cr.delivery.mp.microsoft.com, us1.roaming1.live.com.akadns.net, s-0005.s-msedge.net, config.officeapps.live.com, us.configsvc1.live.com.akadns.net, ecs.office.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtQueryAttributesFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtQueryVolumeInformationFile calls found.
Report size getting too big, too many NtReadFile calls found.
VT rate limit hit for: Comprobante.xll

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
13.107.219.40	Comprobante_de_Pago.xll	Get hash	malicious	Unknown	Browse
	Comprobante_de_Pago.xll	Get hash	malicious	Unknown	Browse
	pf.xlt	Get hash	malicious	Unknown	Browse
	Zal_25284_75581.xlsx	Get hash	malicious	Unknown	Browse
	Zal_98969_36470.xlsx	Get hash	malicious	Unknown	Browse
	Liefertermin#U00e4nderung_20231201.xlsx	Get hash	malicious	Unknown	Browse
	Order.xlam.xlsx	Get hash	malicious	Unknown	Browse
	TEXT (11).csv	Get hash	malicious	Unknown	Browse
	SecuriteInfo.com.Trojan.MulDrop21.58103.1868.3755.xlsx	Get hash	malicious	Unknown	Browse
	00##Nuevo orden.xlam	Get hash	malicious	Unknown	Browse
	New_order_Roch_LTDA.-11-29.xlam.xlsx	Get hash	malicious	Unknown	Browse
	payment_swift.xls	Get hash	malicious	Unknown	Browse
	Remittance_slip_0088383.xls	Get hash	malicious	Unknown	Browse
	Quarantined Messages.zip	Get hash	malicious	Unknown	Browse
	Order_18-670077.xls	Get hash	malicious	Unknown	Browse
	Copy_of_ATR_JEFFERCY_C_CRAWFORD_TD.xls	Get hash	malicious	Unknown	Browse
	Empty_compare.xlsx	Get hash	malicious	Unknown	Browse
	dcr_form.xls	Get hash	malicious	Unknown	Browse
	PO112301-Quotation-november_order.xlsx	Get hash	malicious	Unknown	Browse
	test1Copy.xlsx	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
part-0012.t-0009.fbs1-t-msedge.net	Comprobante_de_Pago.xll	Get hash	malicious	Unknown	Browse	13.107.219.40
	23089163_Concession_Form_RRC_Plug_Weld.xls	Get hash	malicious	Unknown	Browse	13.107.227.40
	Comprobante_de_Pago.xll	Get hash	malicious	Unknown	Browse	13.107.219.40
	pf.xlt	Get hash	malicious	Unknown	Browse	13.107.219.40
	pf.xla	Get hash	malicious	Unknown	Browse	13.107.227.40
	Debt_Snow_Ball_Calculator_V15.xlsm	Get hash	malicious	Unknown	Browse	13.107.227.40
	Zal_25284_75581.xlsx	Get hash	malicious	Unknown	Browse	13.107.219.40
	Zal_98969_36470.xlsx	Get hash	malicious	Unknown	Browse	13.107.219.40
	orden_de_compra.xlam.xlsx	Get hash	malicious	Unknown	Browse	13.107.227.40
	Liefertermin#U00e4nderung_20231201.xlsx	Get hash	malicious	Unknown	Browse	13.107.219.40
	Order.xlam.xlsx	Get hash	malicious	Unknown	Browse	13.107.219.40
	boleto_banc#U00e1rio.xla.xlsx	Get hash	malicious	Unknown	Browse	13.107.227.40
	TEXT (11).csv	Get hash	malicious	Unknown	Browse	13.107.219.40
	SecuriteInfo.com.Trojan.MulDrop21.58103.1868.3755.xlsx	Get hash	malicious	Unknown	Browse	13.107.219.40
	00##Nuevo orden.xlam	Get hash	malicious	Unknown	Browse	13.107.219.40
	http://fasttrackcomputertraining.co.uk/wp-content/uploads/Fast-Track-Excel-VBA-The-Next-Level-VC-Data-Files.zip	Get hash	malicious	Unknown	Browse	13.107.227.40
	New_order_Roch_LTDA.-11-29.xlam.xlsx	Get hash	malicious	Unknown	Browse	13.107.219.40
	payment_swift.xls	Get hash	malicious	Unknown	Browse	13.107.219.40
	Remittance_slip_0088383.xls	Get hash	malicious	Unknown	Browse	13.107.219.40

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
MICROSOFT-CORP-MSN-AS-BLOCKUS	Comprobante_de_Pago.xll	Get hash	malicious	Unknown	Browse	13.107.219.40
	23089163_Concession_Form_RRC_Plug_Weld.xls	Get hash	malicious	Unknown	Browse	13.107.227.40
	Comprobante_de_Pago.xll	Get hash	malicious	Unknown	Browse	13.107.219.40
	Thank You for your interest.eml	Get hash	malicious	Unknown	Browse	104.47.56.28
	https://ecv.microsoft.com/E9F41Umc3H	Get hash	malicious	Unknown	Browse	13.107.213.40
	ATT00001.htm	Get hash	malicious	HTMLPhisher	Browse	13.107.213.40
	ksbqaf .html	Get hash	malicious	HTMLPhisher	Browse	13.107.213.40
	ATT00001.htm	Get hash	malicious	HTMLPhisher	Browse	13.107.213.40
	https://outlook.office365.com/Encryption/retrieve.ashx?recipientemailaddress=jjeffries%40hess.com&senderemailaddress=mryan%40self-helpfcu.org&senderorganization=AwF%2fAAAAAnsAAAADAQAAAHNGBljCjudIhdDM0ds7khZPVT1zZWxmaGVscC5vbm1pY3Jvc29mdC5jb20sT1U9TWljcm9zb2Z0IEV4Y2hhbmdlIEhvc3RlZCBPcmdhbml6YXRpb25zLERDPU5BTVBSMDdBMDA0LERDPXByb2QsREM9b3V0bG9vayxEQz1jb21%2bwCuzU%2bm5SrJlHEdL5TdSQ049Q29uZmlndXJhdGlvbixDTj1zZWxmaGVscC5vbm1pY3Jvc29mdC5jb20sQ049Q29uZmlndXJhdGlvblVuaXRzLERDPU5BTVBSMDdBMDA0LERDPXByb2QsREM9b3V0bG9vayxEQz1jb20B&messageid=%3cDM3PR08MB96214545C4A4E6D4DF2CEC53DB85A%40DM3PR08MB9621.namprd08.prod.outlook.com%3e&cfmRecipient=SystemMailbox%7b2C41C89D-35A4-465B-B69B-6F1FC54D8B03%7d%40selfhelp.onmicrosoft.com&consumerEncryption=false&senderorgid=a5294653-d816-497c-9e00-a21fa49baeaf&urldecoded=1&e4e_sdata=C%2fHpeoNY3L2lCpU6Eogj3EZ8n7%2fAOGuIikiNRGDDx%2fCrribSzdDQG%2fP7pkJoPb9MP5RHhIj51QknLkqGjQRz5hz394FmNOTuy%2bcx8Tn1cHDCRHWnXn3osYD%2bpwEfJ8sdrqHyKcy5HusvFXux6OF03foupb2LChfYJaqQ2DRnr4qRT8zGNNvQlDNkwKUKPL2FlIIKPu5AssQfZAsxGTnCVYTIEL%2b2q4eNqKA4YGsi%2fH5sIZKmLMp76C%2fkH%2f8RB3dzOtmXjBH%2f4xpSnrjoSWn1Md2BsfVCnwuQgilXJ%2fEiVDxguMrq6OBuPGxgfqG4h%2bCSy5Ln%2bzWIOCqtQ2ntco2lmQ%3d%3d	Get hash	malicious	Unknown	Browse	52.96.109.226
	https://www.richelieu.com/newsflash/redirect.php?code=7OW516fmfNDxMzA2OTgz&urlRedirect=https%3A%2F%2Fkal09.pro%2F%23%23_charlotte.chang@lcatterton.com	Get hash	malicious	HTMLPhisher	Browse	13.107.213.40
	http://www.blackstonetutors-onlineportal.com	Get hash	malicious	Unknown	Browse	13.107.213.41
	ZmWSzgevgt.exe	Get hash	malicious	NetSupport RAT, LummaC Stealer	Browse	51.142.119.24
	https://padlet.com/davidmainwaring/davidmainwaring_december_06_2023_inv91730_from_survey_soluti-r59luutu81u7c4if	Get hash	malicious	HTMLPhisher	Browse	13.107.213.40
	Contract.htm	Get hash	malicious	HTMLPhisher	Browse	13.107.213.40
	http://3w5vyd0hym.phenosed.sbs	Get hash	malicious	HTMLPhisher	Browse	13.107.213.40
	https://filetransfer.io/data-package/bziEyUzZ/download	Get hash	malicious	RedLine	Browse	204.79.197.203
	https://p.feedblitz.com/t3.asp?/1081591/102442729/7821567_/~feeds.feedblitz.com/~/t/0/0/sethsblog/posts/~//twitterwqMx.amkaypaint.com/bWFyZ2FyZXRhLmthcmxzc29uQGhsLWRpc3BsYXkuY29t	Get hash	malicious	HTMLPhisher	Browse	13.107.213.40
	987.htm	Get hash	malicious	HTMLPhisher	Browse	13.107.213.40
	https://sports.zaly.online/57724/	Get hash	malicious	Unknown	Browse	40.76.134.238

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	Comprobante_de_Pago.xll	Get hash	malicious	Unknown	Browse	13.107.219.40
	23089163_Concession_Form_RRC_Plug_Weld.xls	Get hash	malicious	Unknown	Browse	13.107.219.40
	Comprobante_de_Pago.xll	Get hash	malicious	Unknown	Browse	13.107.219.40
	file.exe	Get hash	malicious	PrivateLoader, RisePro Stealer	Browse	13.107.219.40
	file.exe	Get hash	malicious	PrivateLoader, RisePro Stealer	Browse	13.107.219.40
	file.exe	Get hash	malicious	PrivateLoader, RisePro Stealer	Browse	13.107.219.40
	file.exe	Get hash	malicious	PrivateLoader, RisePro Stealer	Browse	13.107.219.40
	file.exe	Get hash	malicious	PrivateLoader, RisePro Stealer	Browse	13.107.219.40
	file.exe	Get hash	malicious	PrivateLoader, RisePro Stealer	Browse	13.107.219.40
	file.exe	Get hash	malicious	PrivateLoader, RisePro Stealer	Browse	13.107.219.40
	file.exe	Get hash	malicious	PrivateLoader, RisePro Stealer	Browse	13.107.219.40
	file.exe	Get hash	malicious	PrivateLoader, RisePro Stealer	Browse	13.107.219.40
	file.exe	Get hash	malicious	PrivateLoader, RisePro Stealer	Browse	13.107.219.40
	file.exe	Get hash	malicious	PrivateLoader, RisePro Stealer	Browse	13.107.219.40
	file.exe	Get hash	malicious	PrivateLoader, RisePro Stealer	Browse	13.107.219.40
	file.exe	Get hash	malicious	PrivateLoader, RisePro Stealer	Browse	13.107.219.40
	file.exe	Get hash	malicious	PrivateLoader, RisePro Stealer	Browse	13.107.219.40
	file.exe	Get hash	malicious	PrivateLoader, RisePro Stealer	Browse	13.107.219.40
	file.exe	Get hash	malicious	PrivateLoader, RisePro Stealer	Browse	13.107.219.40

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	12
Entropy (8bit):	0.41381685030363374
Encrypted:	false
SSDEEP:	3:/l:
MD5:	E4A1661C2C886EBB688DEC494532431C
SHA1:	A2AE2A7DB83B33DC95396607258F553114C9183C
SHA-256:	B76875C50EF704DBBF7F02C982445971D1BBD61AEBE2E4B28DDC58A1D66317D5
SHA-512:	EFDCB76FB40482BC94E37EAE3701E844BF22C7D74D53AEF93AC7B6AE1C1094BA2F853875D2C66A49A7075EA8C69F5A348B786D6EE0FA711669279D04ADAAC22C
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	............

C:\Users\user\AppData\Local\Microsoft\FontCache\4\CatalogCacheMetaData.xml

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	XML 1.0 document, ASCII text, with very long lines (1869), with no line terminators
Category:	dropped
Size (bytes):	1869
Entropy (8bit):	5.088548134455664
Encrypted:	false
SSDEEP:	48:cGbdysdSyrNdnzyadyMSyQASyrMnzy4kSy1JdyrMnzyBdyrznzyO:zEsdbRd2aEMbQAb42nbHEw2BEH2O
MD5:	97E233E2E2B4DD599687D5C5E3E60A4B
SHA1:	6F69EAAFEAEF479C1ECDE8D086AE74C85260CCDD
SHA-256:	FDE3CE573968E9D91D7D0E02993F7AEC58D7831C2C71E31770E62279F18E19F9
SHA-512:	EBFA0E71BAD8F033B27427F65A544DE453DBC8D081BAAEE4B78A1BE6F34E2956DC7559E37560E0844226A386E37ED0A77396B468C66B81EBCC3A4FE023232D45
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?><root><version>1</version><Count>12</Count><Resource><Id>Aptos_26215680</Id><LAT>2023-12-06T17:15:46Z</LAT><key>29939506207.ttf</key><folder>Aptos</folder><type>4</type></Resource><Resource><Id>Aptos Narrow_26215424</Id><LAT>2023-12-06T17:15:46Z</LAT><key>31558910439.ttf</key><folder>Aptos Narrow</folder><type>4</type></Resource><Resource><Id>Aptos Display_26215680</Id><LAT>2023-12-06T17:15:46Z</LAT><key>23001069669.ttf</key><folder>Aptos Display</folder><type>4</type></Resource><Resource><Id>Aptos_45876482</Id><LAT>2023-12-06T17:15:46Z</LAT><key>28315153308.ttf</key><folder>Aptos</folder><type>4</type></Resource><Resource><Id>Aptos Narrow_45876224</Id><LAT>2023-12-06T17:15:46Z</LAT><key>24153076628.ttf</key><folder>Aptos Narrow</folder><type>4</type></Resource><Resource><Id>Aptos Narrow_45876226</Id><LAT>2023-12-06T17:15:46Z</LAT><key>30284701761.ttf</key><folder>Aptos Narrow</folder><type>4</type></Resource><Resource><Id>Aptos Di

C:\Users\user\AppData\Local\Microsoft\FontCache\4\Catalog\ListAll.Json

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	JSON data
Category:	dropped
Size (bytes):	520128
Entropy (8bit):	4.907706947229227
Encrypted:	false
SSDEEP:	3072:X2ObOSb3F2Fq9VMjNYof+pmpnGDubTxZO7aYb6f5780K2:JbOq3OjNymtGyT
MD5:	FBD616C03BD0BB44DD43D63001DE4891
SHA1:	542B34961A09A535B19EBE3B84B41A0A3930F7F0
SHA-256:	C85795698D46699A69EBC9EAE17AE1C26045C6A97C18B60597679E30C97668B9
SHA-512:	C92783CFC6CC7CC10A2306FDA2B55E12D572F09E57F1ED656DC959EF79F9862E78011EF5FA771D9828D07CBD82E3FC3ED9B6897A82B36BC26DDF5D88B4D4A9E9
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	{"MajorVersion":4,"MinorVersion":37,"Expiration":14,"Fonts":[{"a":[4294966911],"f":"Abadi","fam":[],"sf":[{"c":[1,0],"dn":"Abadi","fs":32696,"ful":[{"lcp":983041,"lsc":"Latn","ltx":"Abadi"}],"gn":"Abadi","id":"23643452060","p":[2,11,6,4,2,1,4,2,2,4],"sub":[],"t":"ttf","u":[2147483651,0,0,0],"v":197263,"w":26215680},{"c":[1,0],"dn":"Abadi Extra Light","fs":22180,"ful":[{"lcp":983042,"lsc":"Latn","ltx":"Abadi Extra Light"}],"gn":"Abadi Extra Light","id":"17656736728","p":[2,11,2,4,2,1,4,2,2,4],"sub":[],"t":"ttf","u":[2147483651,0,0,0],"v":197263,"w":13108480}]},{"a":[4294966911],"f":"ADLaM Display","fam":[],"sf":[{"c":[536870913,0],"dn":"ADLaM Display Regular","fs":140072,"ful":[{"lcp":983040,"lsc":"Latn","ltx":"ADLaM Display"}],"gn":"ADLaM Display","id":"31965479471","p":[2,1,0,0,0,0,0,0,0,0],"sub":[],"t":"ttf","u":[2147491951,1107296330,0,0],"v":131072,"w":26215680}]},{"a":[4294966911],"f":"Agency FB","fam":[],"sf":[{"c":[536870913,0],"dn":"Agency FB Bold","fs":54372,"ful":[{"lcp":9830

C:\Users\user\AppData\Local\Microsoft\FontCache\4\PreviewFont\flat_officeFontsPreview_4_37.ttf

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	TrueType Font data, 10 tables, 1st "OS/2", 7 names, Microsoft, language 0x409, \251 2018 Microsoft Corporation. All Rights Reserved.msofp_4_37RegularVersion 4.37;O365
Category:	dropped
Size (bytes):	767532
Entropy (8bit):	6.5591108505203914
Encrypted:	false
SSDEEP:	12288:on84XUdLDs51UJQSOf9VvLXHyheIQ47gEFGHtAgk3+/yLQ/zlm1kjFKy6Nyjbqq+:o8XNDs5+ivOXgm1kYvyz2
MD5:	795C53DE9F9FEA90A237A43534CCCAB2
SHA1:	E73FDCD5135A1ED4BEDF643CAB0BD73D58A6F4A6
SHA-256:	892C40F31DB579FAAE34F53D9482708E5CEE564BEF5413D140D4FCD1B82C2030
SHA-512:	731988998E96ED7013FBC3B2CA9F7B1D03876F1B68E79C502E983D145A5E8FE58B1FD1780F6455A20EB41E3FC8502E14E021C1E54EFEC503884CBA6227D1B3D4
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	........... OS/29....(...`cmap.s.(.......pglyf..&?...\....head1..0.......6hheaE.@r.......$hmtxr..........0loca.+.....(...4maxp........... name.V+.........post...<....... ..........._.<...........<......J.G....Aa...................Q....Aa....Aa.........................~...................................................3..............................MS .@.......(...Q................. ...........d...........0...J.......8.......>..........+a..#...,................................................/...K.......z...............N.........!...-...+........z.......h..%^..3...&j..+...+%..'R..+..."....................l......$A...,.......g...&...=.......X..&..............&....B..(B...............#.......j...............+...P...5...@...)..........#...)Q..................{.. ....?..'...#....N...7......<...;>.............. ]...........5......#....s.......$.......$.......^..................+...>....H.......%...7.......6.......O...V...........K......"........c...N......!...............$...&...*p..

C:\Users\user\AppData\Local\Microsoft\Office\16.0\UsageMetricsStore\FileActivityStoreV3\Excel\1380790193167760279.C4

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BB7DF04E1B0A2570657527A7E108AE23
SHA1:	5188431849B4613152FD7BDBA6A3FF0A4FD6424B
SHA-256:	C35020473AED1B4642CD726CAD727B63FFF2824AD68CEDD7FFB73C7CBD890479
SHA-512:	768007E06B0CD9E62D50F458B9435C6DDA0A6D272F0B15550F97C478394B743331C3A9C9236E09AB5B9CB3B423B2320A5D66EB3C7068DB9EA37891CA40E47012
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Office\16.0\UsageMetricsStore\FileActivityStoreV3\Excel\ASkwMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDBfTnVsbAA.S

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	85
Entropy (8bit):	5.165832250293529
Encrypted:	false
SSDEEP:	3:jV6YwAdQJAHuOCHyOWORWluHELm0lpn:jVOQQJAOOCH60z6
MD5:	BFBB4D2981B139CE235E9F59AE41FE96
SHA1:	B7A09B8EA787B5B44E6D2CB606EF0E1781FE8091
SHA-256:	DA85EAABED8968C0EB4836D142896F21AE7714D5AC2EF6307B952A26EF32DE2F
SHA-512:	8CB5B778DDCC9A412F08F5C574613990F89817DB5AAE765E2614C4B479213B25D93BD3E0DAFB6D405F456B1451F44819EED0AF9E0BC6A5033577950E57BAFEA3
Malicious:	false
Preview:	S..i#PK....I.....@........... file:///C:\Users\user\Desktop\..Comprobante..xll.....

C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\81A0C263-86B6-44AC-B745-4DFCF06DF311

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	163115
Entropy (8bit):	5.343902761454929
Encrypted:	false
SSDEEP:	1536:/+C7FPgOGB3U9guwwJQ9DQA+zez0Q5k4F77nXmvid8XRTEwr/j6T:QIQ9DQA+zezQXex
MD5:	A826A0B921E58BDDC864B4AE0CB27703
SHA1:	5958BE5B3FFC241701A308289BC2BA98CF5CE234
SHA-256:	04EA5D50A2C3DCD943B329115EC65D2BE4B7E6C9E3C6857066B2B41546243598
SHA-512:	421E0A4C7207FB6CD5A69489B4FEC4B6D989A07A2EFF1A0E3148E2005354999ED5940F927466DB3F137C54616D1DABF9C95AA838B292EE8F0DE48818905294C2
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>..<o:OfficeConfig xmlns:o="urn:schemas-microsoft-com:office:office">.. <o:services o:GenerationTime="2023-12-06T17:15:48">.. Build: 16.0.17124.30525-->.. <o:default>.. <o:ticket o:headerName="Authorization" o:headerValue="{}" />.. </o:default>.. <o:service o:name="Research">.. <o:url>https://rr.office.microsoft.com/research/query.asmx</o:url>.. </o:service>.. <o:service o:name="ORedir">.. <o:url>https://o15.officeredir.microsoft.com/r</o:url>.. </o:service>.. <o:service o:name="ORedirSSL">.. <o:url>https://o15.officeredir.microsoft.com/r</o:url>.. </o:service>.. <o:service o:name="ClViewClientHelpId" o:authentication="1">.. <o:url>https://[MAX.BaseHost]/client/results</o:url>.. <o:ticket o:policy="MBI_SSL_SHORT" o:idprovider="1" o:target="[MAX.AuthHost]" o:headerValue="Passport1.4 from-PP='{}&p='" />.. <o:ticket o:idprovider="3" o:headerValue="Bearer {}" o:resourceId="[MAX.ResourceId]" o:authorityUrl="[ADALAuthorityU

C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules.xml

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	ASCII text, with CRLF line terminators
Category:	modified
Size (bytes):	1057246
Entropy (8bit):	4.641294636754815
Encrypted:	false
SSDEEP:	6144:a6OFbXQvZlV0N8x5thr291gess3TylunXIJSHQX:ZOhXuZlV0N8x5thr291gess3TylunXg
MD5:	15EBCB334628D2F2A19CD3A340A48C55
SHA1:	A168643E63CBDDF2D7E6184FF58B4563EE4F47B7
SHA-256:	72E904E3731A2E116C4E9AD82E75607581FF51B340A29AA50149EE466FD616E0
SHA-512:	3AEA3E19ED51DCF690D1C3AC569621EE43556FABF85368BC36F6BCE3156A9F7E988DB713E26DBB3E29E33AF0A573233AE4D596FC672CD7B82116BF54E9462031
Malicious:	false
Preview:	<Rules><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU" xmlns="">.. <S>.. <Etw T="1" E="159" G="{02fd33df-f746-4a10-93a0-2bc6273bc8e4}" />.. <F T="2">.. <O T="AND">.. <L>.. <O T="NE">.. <L>.. <S T="1" F="Warning" />.. </L>.. <R>.. <V V="37" T="U32" />.. </R>.. </O>.. </L>.. <R>.. <O T="NE">.. <L>.. <S T="1" F="Warning" />.. </L>.. <R>.. <V V="29" T="U32" />.. </R>.. </O>.. </R>.. </O>.. </F>.. <TI T="3" I="10min" />.. <A T="4" E="TelemetrySuspend" />.. <A T="5" E="TelemetryShutdown" />.. </S>.. <G I="true" R="TriggerOldest">.. <S T="2">.. <F N="RuleID" />.. <F N="RuleVersion" />..

C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324001v3.xml

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	520
Entropy (8bit):	5.3166935619676075
Encrypted:	false
SSDEEP:	12:MMHd5EztrnpYoAQ/nerO8AuUdaGodHMNO2sb:JdaztrqrOHfpUN
MD5:	34CCF28EAAB3351113ADEEACA0EB2DCF
SHA1:	C30A79EE0C3D721D54389CABFE8B870B3CC5E90D
SHA-256:	23E09DDEEDAFF09E05973630E016137E5E10F8989B1BC74F8D683CC1565E2DC4
SHA-512:	36B8A4BD4E2FB68DDBAA19B1823E0AFA8F614E3014E029C5A16322A5EC94CCEB834E4708BC5EF6D0131496973536001A9033FF6013F483D1DEF0454BFDDBA671
Malicious:	false
Preview:	.<?xml version="1.0" encoding="utf-8"?>..<R Id="324001" V="3" DC="SM" EN="Office.Extensibility.VbaTelemetryProjectLoad" ATT="db334b301e7b474db5e0f02f07c51a47-a1b5bc36-1bbe-482f-a64a-c2d9cb606706-7439" SP="CriticalBusinessImpact" DL="B" DCa="DC PSP PSU" xmlns="">.. <S>.. <UTS T="1" Id="b097w" />.. </S>.. <C T="W" I="0" O="false" N="TagId">.. <S T="1" F="ULS_TagId" />.. </C>.. <C T="U32" I="1" O="true" N="HashProjectName">.. <S T="1" F="HashProjectName" />.. </C>.. <T>.. <S T="1" />.. </T>..</R>

C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324002v3.xml

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	868
Entropy (8bit):	5.119534354066693
Encrypted:	false
SSDEEP:	12:MMHd55vzZOnpYoAQ/nerOYuUdaGodHMp9SufJSx4moXDsnHDhFIyF3wX2MNO2sb:JdvzZOqrOYfpUWw9oTeVBAA
MD5:	359BC53C7F7B10391422044A067A4F59
SHA1:	30960D6DD6F62FA0D573CF09304325CE407F9685
SHA-256:	DA47FA1EA559BE3AA505158D848D51679E70B27EAF6CC7B9DFA8C259484D4C60
SHA-512:	D88D0CD409191743A8ED0C7E294A7E373A5BA286B5C4CE083C6489B8B1C2398C244BD147BFF47C75A308D5805630227B0F91343D23A149C1427DF4E1EBBC4897
Malicious:	false
Preview:	.<?xml version="1.0" encoding="utf-8"?>..<R Id="324002" V="3" DC="SM" EN="Office.Extensibility.VbaTelemetryDeclare" ATT="db334b301e7b474db5e0f02f07c51a47-a1b5bc36-1bbe-482f-a64a-c2d9cb606706-7439" SP="CriticalBusinessImpact" DL="B" DCa="DC PSP PSU" xmlns="">.. <S>.. <UTS T="1" Id="b097x" />.. </S>.. <C T="W" I="0" O="false" N="TagId">.. <S T="1" F="ULS_TagId" />.. </C>.. <C T="U32" I="1" O="true" N="HashProjectName">.. <S T="1" F="HashProjectName" />.. </C>.. <C T="U32" I="2" O="true" N="HashDeclare">.. <S T="1" F="HashDeclare" />.. </C>.. <C T="U32" I="3" O="true" N="HashEntryPoint">.. <S T="1" F="HashEntryPoint" />.. </C>.. <C T="B" I="4" O="false" N="IsPtrSafe">.. <S T="1" F="IsPtrSafe" />.. </C>.. <C T="U32" I="5" O="false" N="DeclareCount">.. <S T="1" F="DeclareCount" />.. </C>.. <T>.. <S T="1" />.. </T>..</R>

C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324003v3.xml

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	751
Entropy (8bit):	5.233120305587472
Encrypted:	false
SSDEEP:	12:MMHd5WztetnpYoAQ/nerOp7uUdaGodHMp9VJYGJ9yVeacX6eabMNO2sb:JdozctqrOp7fpU059/1vg
MD5:	E25A230FBF8EE2E6AD1D380658573318
SHA1:	69F0DC438434665BD334A66603521B2266AF139E
SHA-256:	C2C1B764095B9581E01DE40B3721D189B6A2518CF76CB00D3A13B65965B4E3A2
SHA-512:	2AF95C8359BDDDC079579FCC9CE327C45DCBC47F6E66419FFD17621B39B022828FC79C94ABE0BD693FB4EE3C7DCEC62D977451F5C503577E22FCB3F36B346795
Malicious:	false
Preview:	.<?xml version="1.0" encoding="utf-8"?>..<R Id="324003" V="3" DC="SM" EN="Office.Extensibility.VbaTelemetryReferencedLibrary" ATT="db334b301e7b474db5e0f02f07c51a47-a1b5bc36-1bbe-482f-a64a-c2d9cb606706-7439" SP="CriticalBusinessImpact" DL="B" DCa="DC PSP PSU" xmlns="">.. <S>.. <UTS T="1" Id="b097y" />.. </S>.. <C T="W" I="0" O="false" N="TagId">.. <S T="1" F="ULS_TagId" />.. </C>.. <C T="U32" I="1" O="true" N="HashProjectName">.. <S T="1" F="HashProjectName" />.. </C>.. <C T="U32" I="2" O="true" N="HashReferenceLibraryClsid">.. <S T="1" F="HashReferenceLibraryClsid" />.. </C>.. <C T="U32" I="3" O="false" N="ReferencedLibraryCount">.. <S T="1" F="ReferencedLibraryCount" />.. </C>.. <T>.. <S T="1" />.. </T>..</R>

C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324005v1.xml

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	606
Entropy (8bit):	5.249872636263215
Encrypted:	false
SSDEEP:	12:MMHd5ID+enpYoAQ/nerOVHSuUdaGodHMpEXBMNO2sb:JdCVqrOVyfpUT7
MD5:	4D44CDFA8D3760FD3A0E4A961CE68D9C
SHA1:	6F17800D5C1F891988E73F732DFE1800C0241C13
SHA-256:	F87A38453F8249AD1A8B05927E9F6C0971136A911D8E35CC2884448E6F57A9D4
SHA-512:	89D0376B8E16E2E7D103D987752E40B30A2D866DD748828FE28E57B1392DD10D289021D1C2BA5717817761089831E786B0350F7F566427F4C34A632045F0013B
Malicious:	false
Preview:	.<?xml version="1.0" encoding="utf-8"?>..<R Id="324005" V="1" DC="SM" EN="Office.Extensibility.VbaTelemetryCompile" ATT="db334b301e7b474db5e0f02f07c51a47-a1b5bc36-1bbe-482f-a64a-c2d9cb606706-7439" SP="CriticalBusinessImpact" DL="B" DCa="DC PSP PSU" xmlns="">.. <S>.. <UTS T="1" Id="b0970" />.. </S>.. <C T="W" I="0" O="false" N="TagId">.. <S T="1" F="ULS_TagId" />.. </C>.. <C T="U32" I="1" O="true" N="HashProjectName">.. <S T="1" F="HashProjectName" />.. </C>.. <C T="U32" I="2" O="false" N="CompileCount">.. <S T="1" F="CompileCount" />.. </C>.. <T>.. <S T="1" />.. </T>..</R>

C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324006v1.xml

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	606
Entropy (8bit):	5.259493365234479
Encrypted:	false
SSDEEP:	12:MMHd59g4oTxsnpYoAQ/nerOZuUdaGodHMpeXnMNO2sb:JdjdsxsqrOZfpUVd
MD5:	85AD5E7A28B31B61C42678CCDD3A9DE7
SHA1:	EA2436ECF8019EBFEC51157C70A060229480ACDB
SHA-256:	0F0E887B96E69D7F2A5FC8457ED6F5C27A2AAB07311066D7E03E861E448E3564
SHA-512:	D1AA3041B59BB0EF7503CA5349F4DD9C7503E5AFFD4DBD965F0431572CB5A2747BE432AC4D7D9750420D85337F10722BBD0F252E34B4B08B5930F798A8A53B25
Malicious:	false
Preview:	.<?xml version="1.0" encoding="utf-8"?>..<R Id="324006" V="1" DC="SM" EN="Office.Extensibility.VbaTelemetryShowIde" ATT="db334b301e7b474db5e0f02f07c51a47-a1b5bc36-1bbe-482f-a64a-c2d9cb606706-7439" SP="CriticalBusinessImpact" DL="B" DCa="DC PSP PSU" xmlns="">.. <S>.. <UTS T="1" Id="b0971" />.. </S>.. <C T="W" I="0" O="false" N="TagId">.. <S T="1" F="ULS_TagId" />.. </C>.. <C T="U32" I="1" O="true" N="HashProjectName">.. <S T="1" F="HashProjectName" />.. </C>.. <C T="U32" I="2" O="false" N="ShowIdeCount">.. <S T="1" F="ShowIdeCount" />.. </C>.. <T>.. <S T="1" />.. </T>..</R>

C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324007v1.xml

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	618
Entropy (8bit):	5.2705840571266815
Encrypted:	false
SSDEEP:	12:MMHd5eZkEnpYoAQ/nerOiuUdaGodHMpfBrOXIMrlMNO2sb:JdcZfqrOifpU+pOH3
MD5:	361C47A1C07E57D7B96BFB1B7C56281B
SHA1:	B9E141222B4F58E6E7408BEE01C5CD531683D6B0
SHA-256:	12A1E46EB4C05A9997AD417907F9D6AF7F09C6EEF2200031D82372298F9727B1
SHA-512:	581C79AACFCDC0D091A198E50CF7D321D91B36EBA1C560CC3DEA11068BFB97DDF22B5866FE7EEF7EDF980824A774FED27FFA0F67A0F01DE5AAC393BB516294E9
Malicious:	false
Preview:	.<?xml version="1.0" encoding="utf-8"?>..<R Id="324007" V="1" DC="SM" EN="Office.Extensibility.VbaTelemetryIdeMacroRun" ATT="db334b301e7b474db5e0f02f07c51a47-a1b5bc36-1bbe-482f-a64a-c2d9cb606706-7439" SP="CriticalBusinessImpact" DL="B" DCa="DC PSP PSU" xmlns="">.. <S>.. <UTS T="1" Id="b0972" />.. </S>.. <C T="W" I="0" O="false" N="TagId">.. <S T="1" F="ULS_TagId" />.. </C>.. <C T="U32" I="1" O="true" N="HashProjectName">.. <S T="1" F="HashProjectName" />.. </C>.. <C T="U32" I="2" O="false" N="IdeMacroRunCount">.. <S T="1" F="IdeMacroRunCount" />.. </C>.. <T>.. <S T="1" />.. </T>..</R>

C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324008v1.xml

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	614
Entropy (8bit):	5.281743398332582
Encrypted:	false
SSDEEP:	12:MMHd5JTnpYoAQjerOgAuUdaGodHMpFzOXDzlMNO2sb:JdbTerODfpUoOP3
MD5:	D4DFBCA6C99FD4DC17B72AD71ACB104E
SHA1:	C5BE3658E2BCD8090C228A92DB0B12152E46A746
SHA-256:	B17584167E5D1060975B286C7B90F3D85C9EE3B4430C1B08874DF4CF647B7511
SHA-512:	318FCCC56B9A2BB90227F853F7C3A1E56F750C132A79E84D4D159BCEE3D45E7D1F576D1AD9620E58C310F4A318DAEA470E04D129E5F5BCC8B5C8CE44844DFA20
Malicious:	false
Preview:	.<?xml version="1.0" encoding="utf-8"?>..<R Id="324008" V="1" DC="SM" EN="Office.Extensibility.VbaTelemetryHostMacroRun" ATT="db334b301e7b474db5e0f02f07c51a47-a1b5bc36-1bbe-482f-a64a-c2d9cb606706-7439" SP="CriticalBusinessImpact" DL="B" DCa="PSU" xmlns="">.. <S>.. <UTS T="1" Id="b0973" />.. </S>.. <C T="W" I="0" O="false" N="TagId">.. <S T="1" F="ULS_TagId" />.. </C>.. <C T="U32" I="1" O="true" N="HashProjectName">.. <S T="1" F="HashProjectName" />.. </C>.. <C T="U32" I="2" O="false" N="HostMacroRunCount">.. <S T="1" F="HostMacroRunCount" />.. </C>.. <T>.. <S T="1" />.. </T>..</R>

C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324009v1.xml

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	618
Entropy (8bit):	5.264994599295691
Encrypted:	false
SSDEEP:	12:MMHd5CX3lPnpYoAQ/nerORHSuUdaGodHMp0RXMBCMNO2sb:JdgX1PqrOhSfpUrce
MD5:	48F09F0F2360E8E289CA35A58B21A098
SHA1:	75697EA6FEA3A145C0123FFF2A3F22C6846BCE45
SHA-256:	61CE07868B44B4910CD1D743B9B31BCB3079DBDD429E748CF3F307E60D4ADCCE
SHA-512:	EA335E4AA696452AF331C28071C18E9F144398840E82DEEAEA6CBD7F3702FF7B32DFAB8A438B2152C814642C24815B169D75A5992A9C389D6BD7AB208C8FF87C
Malicious:	false
Preview:	.<?xml version="1.0" encoding="utf-8"?>..<R Id="324009" V="1" DC="SM" EN="Office.Extensibility.VbaTelemetryMacroRecord" ATT="db334b301e7b474db5e0f02f07c51a47-a1b5bc36-1bbe-482f-a64a-c2d9cb606706-7439" SP="CriticalBusinessImpact" DL="B" DCa="DC PSP PSU" xmlns="">.. <S>.. <UTS T="1" Id="b0974" />.. </S>.. <C T="W" I="0" O="false" N="TagId">.. <S T="1" F="ULS_TagId" />.. </C>.. <C T="U32" I="1" O="true" N="HashProjectName">.. <S T="1" F="HashProjectName" />.. </C>.. <C T="U32" I="2" O="false" N="MacroRecordCount">.. <S T="1" F="MacroRecordCount" />.. </C>.. <T>.. <S T="1" />.. </T>..</R>

C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324010v1.xml

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	618
Entropy (8bit):	5.2447044999466135
Encrypted:	false
SSDEEP:	12:MMHd5uztcnpYoAQ/nerONuUdaGodHMpOqXMHhMNO2sb:JdMtcqrONfpUbqcHL
MD5:	9BC25CC393F30C77F35D341564A1A1EF
SHA1:	E0CDF434F3644A0B408FAF70B023F42045F5A8F4
SHA-256:	DE03A985844305BD4C2A5CF9247930D349B70967258C0979C00A0E08087784E6
SHA-512:	68D716D1E2CC72F199BD63D9216FDF7607EA593016B2FE2E54BF479BD1BF753308C9BCB278243397879F0D8F6235E7EC623B651C0BB7CFEDD3F939BB39653A07
Malicious:	false
Preview:	.<?xml version="1.0" encoding="utf-8"?>..<R Id="324010" V="1" DC="SM" EN="Office.Extensibility.VbaTelemetryMacroCreate" ATT="db334b301e7b474db5e0f02f07c51a47-a1b5bc36-1bbe-482f-a64a-c2d9cb606706-7439" SP="CriticalBusinessImpact" DL="B" DCa="DC PSP PSU" xmlns="">.. <S>.. <UTS T="1" Id="b0975" />.. </S>.. <C T="W" I="0" O="false" N="TagId">.. <S T="1" F="ULS_TagId" />.. </C>.. <C T="U32" I="1" O="true" N="HashProjectName">.. <S T="1" F="HashProjectName" />.. </C>.. <C T="U32" I="2" O="false" N="MacroCreateCount">.. <S T="1" F="MacroCreateCount" />.. </C>.. <T>.. <S T="1" />.. </T>..</R>

C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63067v4.xml

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	2871
Entropy (8bit):	4.912556907537187
Encrypted:	false
SSDEEP:	48:3vqUencI4Yzcud/9WlGeR/0D3Ij0QH0f+QEVYVWjUtsmMU+zC:/qfcWJ3I76+QEVXjUtsmMUUC
MD5:	54CEF57B60622B7D8C19057FC8C1C80D
SHA1:	AC846ED27C6DEAFEB5E21FF16843EA3ECA992548
SHA-256:	89A13FC28C87724877A1176C52F27D2BCBB5E3755CCED488CF5EDA51987EF2F9
SHA-512:	E27D322268E18685D34A8D95F791F2FB28A6AC232FBB0D1DD1813638C988424C3F1DC6B67642512C3B13477C41CCE63C7D85FDA7A18423A2FBBB5B739015C6E1
Malicious:	false
Preview:	.<?xml version="1.0" encoding="utf-8"?>..<R Id="63067" V="4" DC="SM" EN="Office.Identity.SspiPromptWin32" ATT="5c65bbc4edbf480d9637ace04d62bd98-12844893-8ab9-4dde-b850-5612cb12e0f2-7822" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns="">.. <S>.. <UTS T="1" Id="brt55" />.. <UTS T="2" Id="aysrs" A="aysrt" />.. <UTS T="3" Id="brt58" />.. <UTS T="4" Id="brt6b" />.. <UTS T="5" Id="bgm8f" A="bgm8g bgm8h bgm8i" />.. <UTS T="6" Id="a9qwz" A="brt56 brt6a" />.. <UTS T="7" Id="brt59" />.. <US T="8">.. <S T="3" />.. <S T="6" />.. <S T="4" />.. </US>.. <A T="9" E="TelemetryShutdown" />.. <TO T="10" I="10min">.. <S T="1" />.. </TO>.. </S>.. <C T="I32" I="0" O="false" N="AuthScheme">.. <S T="1" F="AuthScheme" />.. </C>.. <C T="B" I="1" O="false" N="Proxy">.. <S T="1" F="Proxy" />.. </C>.. <C T="BIN" I="2" O="true" N="DocumentUrlHash">.. <U T="OneWaySHA1HashToBinary">.. <S T="1" F="DocumentUrl" M="Ignore" />.. </U>..

C:\Users\user\AppData\Local\Microsoft\Office\OTele\excel.exe.db-shm

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.03568379317228935
Encrypted:	false
SSDEEP:	3:Gtl8/YwNbwGpIfGtl8/YwNbwGpIf1J89//Wlkl:GtGvNwGpiGtGvNwGpi789Xis
MD5:	EB9A56265195644BE964FEAB6D96BBD6
SHA1:	16FB1FFED2E82B224D6DFE0C55E90499A7941644
SHA-256:	0CD74821F9420183AB3EABBF8FD1EB20285E6E297353C2685D931C32DB6A49DC
SHA-512:	1F42877C3E3AA0388946B5FB79E947E37BB04B17E04ED3791BDC5A5A63D320E00A65EDD9ADCF86F8DB0174604FDBC876DE631E6A2F8DE973CD352E417B23322A
Malicious:	false
Preview:	..-......................C@...g.J..E;..PU...mz..-......................C@...g.J..E;..PU...mz........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Office\OTele\excel.exe.db-wal

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	SQLite Write-Ahead Log, version 3007000
Category:	dropped
Size (bytes):	4152
Entropy (8bit):	1.3842301219783912
Encrypted:	false
SSDEEP:	12:K6GcAqtZeY4syJttJxUSo0x9DdN1tDEX4vcImm5RyZkFv4sbf:Knjqt8VtbDBtDi4kZERDf
MD5:	3D8994882D4BBB609D6DC488E4816365
SHA1:	093EE1829CAEE1CFBAD1B04F0A07126607FDD32C
SHA-256:	352FC6B1BF66BA05C36A489280C8F78BA7387F6AAA4DABB73F0301C64C716996
SHA-512:	957CF1781EB5567ADEE76500739A9A115A5671ECD4C35A19DD86EA0B8AAA7CCA1035A40FCAF5244A3F3164ED75D71C81098A5794585FA59F4A8F8D1634B61103
Malicious:	false
Preview:	7....-..........J..E;.....]^.=........J..E;..@C..g.SQLite format 3......@ .......................................................................... ..........#.....g............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Diagnostics\EXCEL\App1701882946315070300_9B90E6DF-127D-4E23-9CF7-A5005A676C51.log

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	ASCII text, with very long lines (28298), with CRLF line terminators
Category:	dropped
Size (bytes):	20971520
Entropy (8bit):	0.13766624248917742
Encrypted:	false
SSDEEP:	1536:T17C48b6p+vicBYIdJVcKtX3XM7QyXziUENwlfQTfd2HoSVo1lbp/fvV5+EJlDPR:h71micDVcAniP47PxDo8vUaA
MD5:	E6ED7ABF7B16FAB9921E576CD60E9A9F
SHA1:	6846A81E7484703B2B6ECFB7BE9316EC848F9B4E
SHA-256:	72BAF447868B15C06BDD423682B29BA1CBC5783D64A2229C883483F585F12BA4
SHA-512:	8C3721F7C233BC283AE2474675BA629C7B725AE83F9B62959A4EAC9DEE101F29E6C2544B8F2A6D72B2211F87870AF6185F08A1ACA7412F8E44096A22A32523A3
Malicious:	false
Preview:	Timestamp.Process.TID.Area.Category.EventID.Level.Message.Correlation..12/06/2023 17:15:46.346.EXCEL (0x1E40).0x1EAC.Microsoft Excel.Telemetry Event.b7vzq.Medium.SendEvent {"EventName":"Office.Experimentation.FeatureQueryBatched","Flags":33777005812056321,"InternalSequenceNumber":14,"Time":"2023-12-06T17:15:46.346Z","Data.Sequence":0,"Data.Count":128,"Data.Features":"[ { \"ID\" : 1, \"N\" : \"Microsoft.Office.Telemetry.TrackCPSWrites\", \"V\" : false, \"S\" : 1, \"P\" : 0, \"T\" : \"2023-12-06T17:15:45.7374374Z\", \"C\" : \"33\", \"Q\" : 443.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 1, \"N\" : \"Microsoft.Office.Telemetry.CPSMaxWrites\", \"V\" : 2, \"S\" : 1, \"P\" : 0, \"T\" : \"2023-12-06T17:15:45.7374374Z\", \"C\" : \"33\", \"Q\" : 18.0, \"M\" : 0, \"F\" : 5 }, { \"ID\" : 1, \"N\" : \"Microsoft.Office.Word.UAEOnSafeModeEnabled\", \"V\" : true, \"S\" : 1, \"P\" : 0, \"T\" : \"2023-12-06T17:15:45.7374374Z\", \"C\" : \"\", \"Q\" : 3.0, \"M\" : 0, \"F\" : 5, \"G\" : \"Opt\" }, { \"ID\" : 1,

C:\Users\user\AppData\Local\Temp\Diagnostics\EXCEL\App1701882946316142800_9B90E6DF-127D-4E23-9CF7-A5005A676C51.log

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	20971520
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	8F4E33F3DC3E414FF94E5FB6905CBA8C
SHA1:	9674344C90C2F0646F0B78026E127C9B86E3AD77
SHA-256:	CD52D81E25F372E6FA4DB2C0DFCEB59862C1969CAB17096DA352B34950C973CC
SHA-512:	7FB91E868F3923BBD043725818EF3A5D8D08EBF1059A18AC0FE07040D32EEBA517DA11515E6A4AFAEB29BCC5E0F1543BA2C595B0FE8E6167DDC5E6793EDEF5BB
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Comprobante.LNK

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Thu Oct 5 07:36:25 2023, mtime=Wed Dec 6 16:15:47 2023, atime=Wed Dec 6 15:35:21 2023, length=931840, window=hide
Category:	dropped
Size (bytes):	521
Entropy (8bit):	4.7382434127954305
Encrypted:	false
SSDEEP:	6:4xtQl3gBltFaEyyyml/qIlolAuKljAl5txmCH6mkznrkWuolAuZJzumZw2FmZpvT:8pBltcE5blyY4gjAQzrkZ479pZYZQmV
MD5:	ACE2303BD0D5E866CEDD4DAA0D64ABD2
SHA1:	0A393745124EA80FFC0343B4F1AF9639E14E91BA
SHA-256:	3934AEC725298045869C7E2F4BE2BD74D98B6FB93C408C84EC439FF11B08F356
SHA-512:	4579CB4DCC7A6515E8FCD5A085F63759B815DE053DD35712DBE3559D131A2EB8F47718E239452935DAA07C337C89B9E6A6A034C812532EFB336A576459EC2710
Malicious:	false
Preview:	L..................F.... .... ..g...U...g(.....4b(...8......................n.l.2..8...Wk. .COMPRO~1.XLL..P......EW.D.W.......T....................f.=.C.o.m.p.r.o.b.a.n.t.e...x.l.l.......V...............-.......U............F.......C:\Users\user\Desktop\Comprobante.xll..&.....\.....\.....\.....\.....\.D.e.s.k.t.o.p.\.C.o.m.p.r.o.b.a.n.t.e...x.l.l.`.......X.......585948...........hT..CrF.f4... ..C..Yc...,...E...hT..CrF.f4... ..C..Yc...,...E..E.......9...1SPS..mD..pH.H@..=x.....h....H.....K...YM...?................

C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	Generic INItialization configuration [folders]
Category:	dropped
Size (bytes):	83
Entropy (8bit):	4.036657074086737
Encrypted:	false
SSDEEP:	3:HIwovHELmpSm41hELmpSv:HUzpopc
MD5:	430E769123F6B4B81ED13C86FC58FBCB
SHA1:	C20399ED795135E39A34F72C3F4B53B7388D3DA6
SHA-256:	5DB11CE79918B556BC39317864B6891900C3730779560A679B18864E5B082DBF
SHA-512:	F6F98DD2E62662B4FC7019932F5C1010184C6E0EB264072D131FB454896C925B52E61B911518F9358C1547D3B0C45431F86A711C5EF81D90F3794C25F610BBE3
Malicious:	false
Preview:	[misc??????????????????????????]..Comprobante.LNK=0..[folders]..Comprobante.LNK=0..

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ITJUK124WG7O893IO9Y1.temp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	12
Entropy (8bit):	0.41381685030363374
Encrypted:	false
SSDEEP:	3:/l:
MD5:	E4A1661C2C886EBB688DEC494532431C
SHA1:	A2AE2A7DB83B33DC95396607258F553114C9183C
SHA-256:	B76875C50EF704DBBF7F02C982445971D1BBD61AEBE2E4B28DDC58A1D66317D5
SHA-512:	EFDCB76FB40482BC94E37EAE3701E844BF22C7D74D53AEF93AC7B6AE1C1094BA2F853875D2C66A49A7075EA8C69F5A348B786D6EE0FA711669279D04ADAAC22C
Malicious:	false
Preview:	............

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\Q44X7VS0ZQ5SI5XUVYAA.temp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	12
Entropy (8bit):	0.41381685030363374
Encrypted:	false
SSDEEP:	3:/l:
MD5:	E4A1661C2C886EBB688DEC494532431C
SHA1:	A2AE2A7DB83B33DC95396607258F553114C9183C
SHA-256:	B76875C50EF704DBBF7F02C982445971D1BBD61AEBE2E4B28DDC58A1D66317D5
SHA-512:	EFDCB76FB40482BC94E37EAE3701E844BF22C7D74D53AEF93AC7B6AE1C1094BA2F853875D2C66A49A7075EA8C69F5A348B786D6EE0FA711669279D04ADAAC22C
Malicious:	false
Preview:	............

Static File Info

General

File type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Entropy (8bit):	7.46947953045842
TrID:	Win64 Dynamic Link Library (generic) (102004/3) 86.43% Win64 Executable (generic) (12005/4) 10.17% Generic Win/DOS Executable (2004/3) 1.70% DOS Executable Generic (2002/1) 1.70% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.01%
File name:	Comprobante.xll
File size:	931'840 bytes
MD5:	7c74dbe0695aefd2c51676608f640b63
SHA1:	d8c59eae487d77a6b1225d362cc8a6a378d893b6
SHA256:	e7298fb795948d7a67d8188694eebf74ef05d03b2289deecc3f66d81048aa420
SHA512:	d6f59fc1de38784dca75e7d0af9924887e7155d51f500b580ca40a6f2b596153528808ec92ecc0d6c748275a0baacd5f75ac1351b4510d8d4a425078ff0566ff
SSDEEP:	12288:vG1N4HkcgMsiOd58bzbBSreqQ0uqZzD1reWabd/c2OsJ1tBkjcW/71xX0W7d:voOOMX1a+QHT+dey2jcW/7zE8
TLSH:	6F15D157F6E3B679E6BFC2BAC6B0D92C61B3349603B092CE774155492D22352493CB0E
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.............kQ..kQ..kQ..oP..kQ..hP..kQ..nPF.kQ@.oP..kQ@.hP..kQ@.nP..kQ..jP..kQ..jQ..kQM.bP..kQM.hP..kQM.kP..kQM..Q..kQM.iP..kQRich..k

Static PE Info

General

Entrypoint:	0x180011f9c
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x180000000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, LARGE_ADDRESS_AWARE, DLL
DLL Characteristics:	HIGH_ENTROPY_VA, NX_COMPAT
Time Stamp:	0x6338A708 [Sat Oct 1 20:46:00 2022 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	d4c9759f791ea559bbad095fb49820d9

Entrypoint Preview

Instruction
dec eax
mov dword ptr [esp+08h], ebx
dec eax
mov dword ptr [esp+10h], esi
push edi
dec eax
sub esp, 20h
dec ecx
mov edi, eax
mov ebx, edx
dec eax
mov esi, ecx
cmp edx, 01h
jne 00007F5460DD5DE7h
call 00007F5460DD6254h
dec esp
mov eax, edi
mov edx, ebx
dec eax
mov ecx, esi
dec eax
mov ebx, dword ptr [esp+30h]
dec eax
mov esi, dword ptr [esp+38h]
dec eax
add esp, 20h
pop edi
jmp 00007F5460DD5C74h
int3
int3
int3
retn 0000h
int3
dec eax
mov eax, esp
dec eax
mov dword ptr [eax+08h], ebx
dec eax
mov dword ptr [eax+10h], ebp
dec eax
mov dword ptr [eax+18h], esi
dec eax
mov dword ptr [eax+20h], edi
inc ecx
push esi
dec eax
sub esp, 20h
dec ebp
mov edx, dword ptr [ecx+38h]
dec eax
mov esi, edx
dec ebp
mov esi, eax
dec eax
mov ebp, ecx
dec ecx
mov edx, ecx
dec eax
mov ecx, esi
dec ecx
mov edi, ecx
inc ecx
mov ebx, dword ptr [edx]
dec eax
shl ebx, 04h
dec ecx
add ebx, edx
dec esp
lea eax, dword ptr [ebx+04h]
call 00007F5460DD6383h
mov eax, dword ptr [ebp+04h]
and al, 66h
neg al
mov eax, 00000001h
sbb edx, edx
neg edx
add edx, eax
test dword ptr [ebx+04h], edx
je 00007F5460DD5DF3h
dec esp
mov ecx, edi
dec ebp
mov eax, esi
dec eax
mov edx, esi
dec eax
mov ecx, ebp
call 00007F5460DD72FFh
dec eax
mov ebx, dword ptr [esp+30h]
dec eax
mov ebp, dword ptr [esp+38h]
dec eax
mov esi, dword ptr [esp+40h]
dec eax
mov edi, dword ptr [esp+48h]
dec eax
add esp, 20h
inc ecx

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x38010	0x26e50	.rdata
IMAGE_DIRECTORY_ENTRY_IMPORT	0x5ee60	0x50	.rdata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x79000	0x81ad8	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x76000	0x1a64	.pdata
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0xfb000	0x6bc	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x351e0	0x70	.rdata
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x350a0	0x140	.rdata
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x2c000	0x328	.rdata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x2abfe	0x2ac00	False	0.45563779239766083	data	6.275960006883732	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rdata	0x2c000	0x33838	0x33a00	False	0.44717577179176754	zlib compressed data	5.722324345527084	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0x60000	0x158ac	0xc00	False	0.1650390625	data	2.3715217282068024	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.pdata	0x76000	0x1a64	0x1c00	False	0.45870535714285715	data	5.308811328373102	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
_RDATA	0x78000	0x15c	0x200	False	0.40625	data	3.256000345899201	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.rsrc	0x79000	0x81ad8	0x81c00	False	0.9424430244460501	data	7.952194894231207	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0xfb000	0x6bc	0x800	False	0.5244140625	data	5.0515869702364204	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
ASSEMBLY	0x79348	0xe800	data			0.6428980334051724
ASSEMBLY_LZMA	0x87b48	0x183f2	LZMA compressed data, non-streamed, size 217088			1.0004128320277101
ASSEMBLY_LZMA	0x9ff3c	0xeaf1	LZMA compressed data, non-streamed, size 1564160			1.0004322886357968
ASSEMBLY_LZMA	0xaea30	0x492c4	LZMA compressed data, non-streamed, size 356864			1.0003369856797768
DNA	0xf7cf4	0x222	data			0.8809523809523809
RT_STRING	0xf7f18	0x40	data	English	United States	0.640625
RT_STRING	0xf7f58	0xdf2	data	English	United States	0.2680672268907563
RT_STRING	0xf8d4c	0xda6	PDP-11 demand-paged pure executable not stripped	English	United States	0.24585002862049227
RT_STRING	0xf9af4	0xc08	data	English	United States	0.2724025974025974
RT_VERSION	0xfa6fc	0x3dc	data	English	United States	0.451417004048583

Imports

DLL	Import
KERNEL32.dll	LoadResource, LockResource, SizeofResource, SetLastError, GetCurrentProcessId, LocalFree, LocalAlloc, FormatMessageW, GetModuleFileNameW, GetTempPathW, GetTempFileNameW, CreateFileW, WriteFile, FindResourceW, DeleteFileW, GetFileAttributesW, GetLastError, ReadFile, MultiByteToWideChar, lstrcpynW, WriteConsoleW, GetConsoleMode, GetConsoleOutputCP, FlushFileBuffers, HeapReAlloc, FreeLibrary, GetProcAddress, CloseHandle, LoadLibraryW, HeapSize, SetStdHandle, SetFilePointerEx, GetStringTypeW, GetProcessHeap, LCMapStringW, WideCharToMultiByte, RtlCaptureContext, RtlLookupFunctionEntry, RtlVirtualUnwind, UnhandledExceptionFilter, SetUnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, IsProcessorFeaturePresent, IsDebuggerPresent, GetStartupInfoW, GetModuleHandleW, QueryPerformanceCounter, GetCurrentThreadId, GetSystemTimeAsFileTime, InitializeSListHead, RtlUnwindEx, RtlPcToFileHeader, RaiseException, InterlockedFlushSList, EncodePointer, EnterCriticalSection, LeaveCriticalSection, DeleteCriticalSection, InitializeCriticalSectionAndSpinCount, TlsAlloc, TlsGetValue, TlsSetValue, TlsFree, LoadLibraryExW, ExitProcess, GetModuleHandleExW, HeapFree, HeapAlloc, GetStdHandle, GetFileType, FindClose, FindFirstFileExW, FindNextFileW, IsValidCodePage, GetACP, GetOEMCP, GetCPInfo, GetCommandLineA, GetCommandLineW, GetEnvironmentStringsW, FreeEnvironmentStringsW
USER32.dll	RealGetWindowClassW, EnumWindows, MessageBoxW, LoadStringW, GetWindowThreadProcessId
OLEAUT32.dll	SafeArrayAccessData, SafeArrayUnlock, SafeArrayLock, SafeArrayDestroy, SafeArrayCreateVector, VariantClear, VariantInit, SafeArrayUnaccessData, SysFreeString, SysAllocString, SysAllocStringLen

Exports

Name	Ordinal	Address
CalculationCanceled	1	0x18002a190
CalculationEnded	2	0x18002a160
DllCanUnloadNow	3	0x18002a240
DllGetClassObject	4	0x18002a250
DllRegisterServer	5	0x18002a310
DllUnregisterServer	6	0x18002a2d0
RegistrationInfo	7	0x18002a1c0
SetExcel12EntryPt	8	0x18002a350
SyncMacro	9	0x18002a200
f0	10	0x180002930
f1	11	0x180002936
f10	12	0x18000296c
f100	13	0x180002b88
f1000	14	0x1800040a0
f1001	15	0x1800040a6
f1002	16	0x1800040ac
f1003	17	0x1800040b2
f1004	18	0x1800040b8
f1005	19	0x1800040be
f1006	20	0x1800040c4
f1007	21	0x1800040ca
f1008	22	0x1800040d0
f1009	23	0x1800040d6
f101	24	0x180002b8e
f1010	25	0x1800040dc
f1011	26	0x1800040e2
f1012	27	0x1800040e8
f1013	28	0x1800040ee
f1014	29	0x1800040f4
f1015	30	0x1800040fa
f1016	31	0x180004100
f1017	32	0x180004106
f1018	33	0x18000410c
f1019	34	0x180004112
f102	35	0x180002b94
f1020	36	0x180004118
f1021	37	0x18000411e
f1022	38	0x180004124
f1023	39	0x18000412a
f1024	40	0x180004130
f1025	41	0x180004136
f1026	42	0x18000413c
f1027	43	0x180004142
f1028	44	0x180004148
f1029	45	0x18000414e
f103	46	0x180002b9a
f1030	47	0x180004154
f1031	48	0x18000415a
f1032	49	0x180004160
f1033	50	0x180004166
f1034	51	0x18000416c
f1035	52	0x180004172
f1036	53	0x180004178
f1037	54	0x18000417e
f1038	55	0x180004184
f1039	56	0x18000418a
f104	57	0x180002ba0
f1040	58	0x180004190
f1041	59	0x180004196
f1042	60	0x18000419c
f1043	61	0x1800041a2
f1044	62	0x1800041a8
f1045	63	0x1800041ae
f1046	64	0x1800041b4
f1047	65	0x1800041ba
f1048	66	0x1800041c0
f1049	67	0x1800041c6
f105	68	0x180002ba6
f1050	69	0x1800041cc
f1051	70	0x1800041d2
f1052	71	0x1800041d8
f1053	72	0x1800041de
f1054	73	0x1800041e4
f1055	74	0x1800041ea
f1056	75	0x1800041f0
f1057	76	0x1800041f6
f1058	77	0x1800041fc
f1059	78	0x180004202
f106	79	0x180002bac
f1060	80	0x180004208
f1061	81	0x18000420e
f1062	82	0x180004214
f1063	83	0x18000421a
f1064	84	0x180004220
f1065	85	0x180004226
f1066	86	0x18000422c
f1067	87	0x180004232
f1068	88	0x180004238
f1069	89	0x18000423e
f107	90	0x180002bb2
f1070	91	0x180004244
f1071	92	0x18000424a
f1072	93	0x180004250
f1073	94	0x180004256
f1074	95	0x18000425c
f1075	96	0x180004262
f1076	97	0x180004268
f1077	98	0x18000426e
f1078	99	0x180004274
f1079	100	0x18000427a
f108	101	0x180002bb8
f1080	102	0x180004280
f1081	103	0x180004286
f1082	104	0x18000428c
f1083	105	0x180004292
f1084	106	0x180004298
f1085	107	0x18000429e
f1086	108	0x1800042a4
f1087	109	0x1800042aa
f1088	110	0x1800042b0
f1089	111	0x1800042b6
f109	112	0x180002bbe
f1090	113	0x1800042bc
f1091	114	0x1800042c2
f1092	115	0x1800042c8
f1093	116	0x1800042ce
f1094	117	0x1800042d4
f1095	118	0x1800042da
f1096	119	0x1800042e0
f1097	120	0x1800042e6
f1098	121	0x1800042ec
f1099	122	0x1800042f2
f11	123	0x180002972
f110	124	0x180002bc4
f1100	125	0x1800042f8
f1101	126	0x1800042fe
f1102	127	0x180004304
f1103	128	0x18000430a
f1104	129	0x180004310
f1105	130	0x180004316
f1106	131	0x18000431c
f1107	132	0x180004322
f1108	133	0x180004328
f1109	134	0x18000432e
f111	135	0x180002bca
f1110	136	0x180004334
f1111	137	0x18000433a
f1112	138	0x180004340
f1113	139	0x180004346
f1114	140	0x18000434c
f1115	141	0x180004352
f1116	142	0x180004358
f1117	143	0x18000435e
f1118	144	0x180004364
f1119	145	0x18000436a
f112	146	0x180002bd0
f1120	147	0x180004370
f1121	148	0x180004376
f1122	149	0x18000437c
f1123	150	0x180004382
f1124	151	0x180004388
f1125	152	0x18000438e
f1126	153	0x180004394
f1127	154	0x18000439a
f1128	155	0x1800043a0
f1129	156	0x1800043a6
f113	157	0x180002bd6
f1130	158	0x1800043ac
f1131	159	0x1800043b2
f1132	160	0x1800043b8
f1133	161	0x1800043be
f1134	162	0x1800043c4
f1135	163	0x1800043ca
f1136	164	0x1800043d0
f1137	165	0x1800043d6
f1138	166	0x1800043dc
f1139	167	0x1800043e2
f114	168	0x180002bdc
f1140	169	0x1800043e8
f1141	170	0x1800043ee
f1142	171	0x1800043f4
f1143	172	0x1800043fa
f1144	173	0x180004400
f1145	174	0x180004406
f1146	175	0x18000440c
f1147	176	0x180004412
f1148	177	0x180004418
f1149	178	0x18000441e
f115	179	0x180002be2
f1150	180	0x180004424
f1151	181	0x18000442a
f1152	182	0x180004430
f1153	183	0x180004436
f1154	184	0x18000443c
f1155	185	0x180004442
f1156	186	0x180004448
f1157	187	0x18000444e
f1158	188	0x180004454
f1159	189	0x18000445a
f116	190	0x180002be8
f1160	191	0x180004460
f1161	192	0x180004466
f1162	193	0x18000446c
f1163	194	0x180004472
f1164	195	0x180004478
f1165	196	0x18000447e
f1166	197	0x180004484
f1167	198	0x18000448a
f1168	199	0x180004490
f1169	200	0x180004496
f117	201	0x180002bee
f1170	202	0x18000449c
f1171	203	0x1800044a2
f1172	204	0x1800044a8
f1173	205	0x1800044ae
f1174	206	0x1800044b4
f1175	207	0x1800044ba
f1176	208	0x1800044c0
f1177	209	0x1800044c6
f1178	210	0x1800044cc
f1179	211	0x1800044d2
f118	212	0x180002bf4
f1180	213	0x1800044d8
f1181	214	0x1800044de
f1182	215	0x1800044e4
f1183	216	0x1800044ea
f1184	217	0x1800044f0
f1185	218	0x1800044f6
f1186	219	0x1800044fc
f1187	220	0x180004502
f1188	221	0x180004508
f1189	222	0x18000450e
f119	223	0x180002bfa
f1190	224	0x180004514
f1191	225	0x18000451a
f1192	226	0x180004520
f1193	227	0x180004526
f1194	228	0x18000452c
f1195	229	0x180004532
f1196	230	0x180004538
f1197	231	0x18000453e
f1198	232	0x180004544
f1199	233	0x18000454a
f12	234	0x180002978
f120	235	0x180002c00
f1200	236	0x180004550
f1201	237	0x180004556
f1202	238	0x18000455c
f1203	239	0x180004562
f1204	240	0x180004568
f1205	241	0x18000456e
f1206	242	0x180004574
f1207	243	0x18000457a
f1208	244	0x180004580
f1209	245	0x180004586
f121	246	0x180002c06
f1210	247	0x18000458c
f1211	248	0x180004592
f1212	249	0x180004598
f1213	250	0x18000459e
f1214	251	0x1800045a4
f1215	252	0x1800045aa
f1216	253	0x1800045b0
f1217	254	0x1800045b6
f1218	255	0x1800045bc
f1219	256	0x1800045c2
f122	257	0x180002c0c
f1220	258	0x1800045c8
f1221	259	0x1800045ce
f1222	260	0x1800045d4
f1223	261	0x1800045da
f1224	262	0x1800045e0
f1225	263	0x1800045e6
f1226	264	0x1800045ec
f1227	265	0x1800045f2
f1228	266	0x1800045f8
f1229	267	0x1800045fe
f123	268	0x180002c12
f1230	269	0x180004604
f1231	270	0x18000460a
f1232	271	0x180004610
f1233	272	0x180004616
f1234	273	0x18000461c
f1235	274	0x180004622
f1236	275	0x180004628
f1237	276	0x18000462e
f1238	277	0x180004634
f1239	278	0x18000463a
f124	279	0x180002c18
f1240	280	0x180004640
f1241	281	0x180004646
f1242	282	0x18000464c
f1243	283	0x180004652
f1244	284	0x180004658
f1245	285	0x18000465e
f1246	286	0x180004664
f1247	287	0x18000466a
f1248	288	0x180004670
f1249	289	0x180004676
f125	290	0x180002c1e
f1250	291	0x18000467c
f1251	292	0x180004682
f1252	293	0x180004688
f1253	294	0x18000468e
f1254	295	0x180004694
f1255	296	0x18000469a
f1256	297	0x1800046a0
f1257	298	0x1800046a6
f1258	299	0x1800046ac
f1259	300	0x1800046b2
f126	301	0x180002c24
f1260	302	0x1800046b8
f1261	303	0x1800046be
f1262	304	0x1800046c4
f1263	305	0x1800046ca
f1264	306	0x1800046d0
f1265	307	0x1800046d6
f1266	308	0x1800046dc
f1267	309	0x1800046e2
f1268	310	0x1800046e8
f1269	311	0x1800046ee
f127	312	0x180002c2a
f1270	313	0x1800046f4
f1271	314	0x1800046fa
f1272	315	0x180004700
f1273	316	0x180004706
f1274	317	0x18000470c
f1275	318	0x180004712
f1276	319	0x180004718
f1277	320	0x18000471e
f1278	321	0x180004724
f1279	322	0x18000472a
f128	323	0x180002c30
f1280	324	0x180004730
f1281	325	0x180004736
f1282	326	0x18000473c
f1283	327	0x180004742
f1284	328	0x180004748
f1285	329	0x18000474e
f1286	330	0x180004754
f1287	331	0x18000475a
f1288	332	0x180004760
f1289	333	0x180004766
f129	334	0x180002c36
f1290	335	0x18000476c
f1291	336	0x180004772
f1292	337	0x180004778
f1293	338	0x18000477e
f1294	339	0x180004784
f1295	340	0x18000478a
f1296	341	0x180004790
f1297	342	0x180004796
f1298	343	0x18000479c
f1299	344	0x1800047a2
f13	345	0x18000297e
f130	346	0x180002c3c
f1300	347	0x1800047a8
f1301	348	0x1800047ae
f1302	349	0x1800047b4
f1303	350	0x1800047ba
f1304	351	0x1800047c0
f1305	352	0x1800047c6
f1306	353	0x1800047cc
f1307	354	0x1800047d2
f1308	355	0x1800047d8
f1309	356	0x1800047de
f131	357	0x180002c42
f1310	358	0x1800047e4
f1311	359	0x1800047ea
f1312	360	0x1800047f0
f1313	361	0x1800047f6
f1314	362	0x1800047fc
f1315	363	0x180004802
f1316	364	0x180004808
f1317	365	0x18000480e
f1318	366	0x180004814
f1319	367	0x18000481a
f132	368	0x180002c48
f1320	369	0x180004820
f1321	370	0x180004826
f1322	371	0x18000482c
f1323	372	0x180004832
f1324	373	0x180004838
f1325	374	0x18000483e
f1326	375	0x180004844
f1327	376	0x18000484a
f1328	377	0x180004850
f1329	378	0x180004856
f133	379	0x180002c4e
f1330	380	0x18000485c
f1331	381	0x180004862
f1332	382	0x180004868
f1333	383	0x18000486e
f1334	384	0x180004874
f1335	385	0x18000487a
f1336	386	0x180004880
f1337	387	0x180004886
f1338	388	0x18000488c
f1339	389	0x180004892
f134	390	0x180002c54
f1340	391	0x180004898
f1341	392	0x18000489e
f1342	393	0x1800048a4
f1343	394	0x1800048aa
f1344	395	0x1800048b0
f1345	396	0x1800048b6
f1346	397	0x1800048bc
f1347	398	0x1800048c2
f1348	399	0x1800048c8
f1349	400	0x1800048ce
f135	401	0x180002c5a
f1350	402	0x1800048d4
f1351	403	0x1800048da
f1352	404	0x1800048e0
f1353	405	0x1800048e6
f1354	406	0x1800048ec
f1355	407	0x1800048f2
f1356	408	0x1800048f8
f1357	409	0x1800048fe
f1358	410	0x180004904
f1359	411	0x18000490a
f136	412	0x180002c60
f1360	413	0x180004910
f1361	414	0x180004916
f1362	415	0x18000491c
f1363	416	0x180004922
f1364	417	0x180004928
f1365	418	0x18000492e
f1366	419	0x180004934
f1367	420	0x18000493a
f1368	421	0x180004940
f1369	422	0x180004946
f137	423	0x180002c66
f1370	424	0x18000494c
f1371	425	0x180004952
f1372	426	0x180004958
f1373	427	0x18000495e
f1374	428	0x180004964
f1375	429	0x18000496a
f1376	430	0x180004970
f1377	431	0x180004976
f1378	432	0x18000497c
f1379	433	0x180004982
f138	434	0x180002c6c
f1380	435	0x180004988
f1381	436	0x18000498e
f1382	437	0x180004994
f1383	438	0x18000499a
f1384	439	0x1800049a0
f1385	440	0x1800049a6
f1386	441	0x1800049ac
f1387	442	0x1800049b2
f1388	443	0x1800049b8
f1389	444	0x1800049be
f139	445	0x180002c72
f1390	446	0x1800049c4
f1391	447	0x1800049ca
f1392	448	0x1800049d0
f1393	449	0x1800049d6
f1394	450	0x1800049dc
f1395	451	0x1800049e2
f1396	452	0x1800049e8
f1397	453	0x1800049ee
f1398	454	0x1800049f4
f1399	455	0x1800049fa
f14	456	0x180002984
f140	457	0x180002c78
f1400	458	0x180004a00
f1401	459	0x180004a06
f1402	460	0x180004a0c
f1403	461	0x180004a12
f1404	462	0x180004a18
f1405	463	0x180004a1e
f1406	464	0x180004a24
f1407	465	0x180004a2a
f1408	466	0x180004a30
f1409	467	0x180004a36
f141	468	0x180002c7e
f1410	469	0x180004a3c
f1411	470	0x180004a42
f1412	471	0x180004a48
f1413	472	0x180004a4e
f1414	473	0x180004a54
f1415	474	0x180004a5a
f1416	475	0x180004a60
f1417	476	0x180004a66
f1418	477	0x180004a6c
f1419	478	0x180004a72
f142	479	0x180002c84
f1420	480	0x180004a78
f1421	481	0x180004a7e
f1422	482	0x180004a84
f1423	483	0x180004a8a
f1424	484	0x180004a90
f1425	485	0x180004a96
f1426	486	0x180004a9c
f1427	487	0x180004aa2
f1428	488	0x180004aa8
f1429	489	0x180004aae
f143	490	0x180002c8a
f1430	491	0x180004ab4
f1431	492	0x180004aba
f1432	493	0x180004ac0
f1433	494	0x180004ac6
f1434	495	0x180004acc
f1435	496	0x180004ad2
f1436	497	0x180004ad8
f1437	498	0x180004ade
f1438	499	0x180004ae4
f1439	500	0x180004aea
f144	501	0x180002c90
f1440	502	0x180004af0
f1441	503	0x180004af6
f1442	504	0x180004afc
f1443	505	0x180004b02
f1444	506	0x180004b08
f1445	507	0x180004b0e
f1446	508	0x180004b14
f1447	509	0x180004b1a
f1448	510	0x180004b20
f1449	511	0x180004b26
f145	512	0x180002c96
f1450	513	0x180004b2c
f1451	514	0x180004b32
f1452	515	0x180004b38
f1453	516	0x180004b3e
f1454	517	0x180004b44
f1455	518	0x180004b4a
f1456	519	0x180004b50
f1457	520	0x180004b56
f1458	521	0x180004b5c
f1459	522	0x180004b62
f146	523	0x180002c9c
f1460	524	0x180004b68
f1461	525	0x180004b6e
f1462	526	0x180004b74
f1463	527	0x180004b7a
f1464	528	0x180004b80
f1465	529	0x180004b86
f1466	530	0x180004b8c
f1467	531	0x180004b92
f1468	532	0x180004b98
f1469	533	0x180004b9e
f147	534	0x180002ca2
f1470	535	0x180004ba4
f1471	536	0x180004baa
f1472	537	0x180004bb0
f1473	538	0x180004bb6
f1474	539	0x180004bbc
f1475	540	0x180004bc2
f1476	541	0x180004bc8
f1477	542	0x180004bce
f1478	543	0x180004bd4
f1479	544	0x180004bda
f148	545	0x180002ca8
f1480	546	0x180004be0
f1481	547	0x180004be6
f1482	548	0x180004bec
f1483	549	0x180004bf2
f1484	550	0x180004bf8
f1485	551	0x180004bfe
f1486	552	0x180004c04
f1487	553	0x180004c0a
f1488	554	0x180004c10
f1489	555	0x180004c16
f149	556	0x180002cae
f1490	557	0x180004c1c
f1491	558	0x180004c22
f1492	559	0x180004c28
f1493	560	0x180004c2e
f1494	561	0x180004c34
f1495	562	0x180004c3a
f1496	563	0x180004c40
f1497	564	0x180004c46
f1498	565	0x180004c4c
f1499	566	0x180004c52
f15	567	0x18000298a
f150	568	0x180002cb4
f1500	569	0x180004c58
f1501	570	0x180004c5e
f1502	571	0x180004c64
f1503	572	0x180004c6a
f1504	573	0x180004c70
f1505	574	0x180004c76
f1506	575	0x180004c7c
f1507	576	0x180004c82
f1508	577	0x180004c88
f1509	578	0x180004c8e
f151	579	0x180002cba
f1510	580	0x180004c94
f1511	581	0x180004c9a
f1512	582	0x180004ca0
f1513	583	0x180004ca6
f1514	584	0x180004cac
f1515	585	0x180004cb2
f1516	586	0x180004cb8
f1517	587	0x180004cbe
f1518	588	0x180004cc4
f1519	589	0x180004cca
f152	590	0x180002cc0
f1520	591	0x180004cd0
f1521	592	0x180004cd6
f1522	593	0x180004cdc
f1523	594	0x180004ce2
f1524	595	0x180004ce8
f1525	596	0x180004cee
f1526	597	0x180004cf4
f1527	598	0x180004cfa
f1528	599	0x180004d00
f1529	600	0x180004d06
f153	601	0x180002cc6
f1530	602	0x180004d0c
f1531	603	0x180004d12
f1532	604	0x180004d18
f1533	605	0x180004d1e
f1534	606	0x180004d24
f1535	607	0x180004d2a
f1536	608	0x180004d30
f1537	609	0x180004d36
f1538	610	0x180004d3c
f1539	611	0x180004d42
f154	612	0x180002ccc
f1540	613	0x180004d48
f1541	614	0x180004d4e
f1542	615	0x180004d54
f1543	616	0x180004d5a
f1544	617	0x180004d60
f1545	618	0x180004d66
f1546	619	0x180004d6c
f1547	620	0x180004d72
f1548	621	0x180004d78
f1549	622	0x180004d7e
f155	623	0x180002cd2
f1550	624	0x180004d84
f1551	625	0x180004d8a
f1552	626	0x180004d90
f1553	627	0x180004d96
f1554	628	0x180004d9c
f1555	629	0x180004da2
f1556	630	0x180004da8
f1557	631	0x180004dae
f1558	632	0x180004db4
f1559	633	0x180004dba
f156	634	0x180002cd8
f1560	635	0x180004dc0
f1561	636	0x180004dc6
f1562	637	0x180004dcc
f1563	638	0x180004dd2
f1564	639	0x180004dd8
f1565	640	0x180004dde
f1566	641	0x180004de4
f1567	642	0x180004dea
f1568	643	0x180004df0
f1569	644	0x180004df6
f157	645	0x180002cde
f1570	646	0x180004dfc
f1571	647	0x180004e02
f1572	648	0x180004e08
f1573	649	0x180004e0e
f1574	650	0x180004e14
f1575	651	0x180004e1a
f1576	652	0x180004e20
f1577	653	0x180004e26
f1578	654	0x180004e2c
f1579	655	0x180004e32
f158	656	0x180002ce4
f1580	657	0x180004e38
f1581	658	0x180004e3e
f1582	659	0x180004e44
f1583	660	0x180004e4a
f1584	661	0x180004e50
f1585	662	0x180004e56
f1586	663	0x180004e5c
f1587	664	0x180004e62
f1588	665	0x180004e68
f1589	666	0x180004e6e
f159	667	0x180002cea
f1590	668	0x180004e74
f1591	669	0x180004e7a
f1592	670	0x180004e80
f1593	671	0x180004e86
f1594	672	0x180004e8c
f1595	673	0x180004e92
f1596	674	0x180004e98
f1597	675	0x180004e9e
f1598	676	0x180004ea4
f1599	677	0x180004eaa
f16	678	0x180002990
f160	679	0x180002cf0
f1600	680	0x180004eb0
f1601	681	0x180004eb6
f1602	682	0x180004ebc
f1603	683	0x180004ec2
f1604	684	0x180004ec8
f1605	685	0x180004ece
f1606	686	0x180004ed4
f1607	687	0x180004eda
f1608	688	0x180004ee0
f1609	689	0x180004ee6
f161	690	0x180002cf6
f1610	691	0x180004eec
f1611	692	0x180004ef2
f1612	693	0x180004ef8
f1613	694	0x180004efe
f1614	695	0x180004f04
f1615	696	0x180004f0a
f1616	697	0x180004f10
f1617	698	0x180004f16
f1618	699	0x180004f1c
f1619	700	0x180004f22
f162	701	0x180002cfc
f1620	702	0x180004f28
f1621	703	0x180004f2e
f1622	704	0x180004f34
f1623	705	0x180004f3a
f1624	706	0x180004f40
f1625	707	0x180004f46
f1626	708	0x180004f4c
f1627	709	0x180004f52
f1628	710	0x180004f58
f1629	711	0x180004f5e
f163	712	0x180002d02
f1630	713	0x180004f64
f1631	714	0x180004f6a
f1632	715	0x180004f70
f1633	716	0x180004f76
f1634	717	0x180004f7c
f1635	718	0x180004f82
f1636	719	0x180004f88
f1637	720	0x180004f8e
f1638	721	0x180004f94
f1639	722	0x180004f9a
f164	723	0x180002d08
f1640	724	0x180004fa0
f1641	725	0x180004fa6
f1642	726	0x180004fac
f1643	727	0x180004fb2
f1644	728	0x180004fb8
f1645	729	0x180004fbe
f1646	730	0x180004fc4
f1647	731	0x180004fca
f1648	732	0x180004fd0
f1649	733	0x180004fd6
f165	734	0x180002d0e
f1650	735	0x180004fdc
f1651	736	0x180004fe2
f1652	737	0x180004fe8
f1653	738	0x180004fee
f1654	739	0x180004ff4
f1655	740	0x180004ffa
f1656	741	0x180005000
f1657	742	0x180005006
f1658	743	0x18000500c
f1659	744	0x180005012
f166	745	0x180002d14
f1660	746	0x180005018
f1661	747	0x18000501e
f1662	748	0x180005024
f1663	749	0x18000502a
f1664	750	0x180005030
f1665	751	0x180005036
f1666	752	0x18000503c
f1667	753	0x180005042
f1668	754	0x180005048
f1669	755	0x18000504e
f167	756	0x180002d1a
f1670	757	0x180005054
f1671	758	0x18000505a
f1672	759	0x180005060
f1673	760	0x180005066
f1674	761	0x18000506c
f1675	762	0x180005072
f1676	763	0x180005078
f1677	764	0x18000507e
f1678	765	0x180005084
f1679	766	0x18000508a
f168	767	0x180002d20
f1680	768	0x180005090
f1681	769	0x180005096
f1682	770	0x18000509c
f1683	771	0x1800050a2
f1684	772	0x1800050a8
f1685	773	0x1800050ae
f1686	774	0x1800050b4
f1687	775	0x1800050ba
f1688	776	0x1800050c0
f1689	777	0x1800050c6
f169	778	0x180002d26
f1690	779	0x1800050cc
f1691	780	0x1800050d2
f1692	781	0x1800050d8
f1693	782	0x1800050de
f1694	783	0x1800050e4
f1695	784	0x1800050ea
f1696	785	0x1800050f0
f1697	786	0x1800050f6
f1698	787	0x1800050fc
f1699	788	0x180005102
f17	789	0x180002996
f170	790	0x180002d2c
f1700	791	0x180005108
f1701	792	0x18000510e
f1702	793	0x180005114
f1703	794	0x18000511a
f1704	795	0x180005120
f1705	796	0x180005126
f1706	797	0x18000512c
f1707	798	0x180005132
f1708	799	0x180005138
f1709	800	0x18000513e
f171	801	0x180002d32
f1710	802	0x180005144
f1711	803	0x18000514a
f1712	804	0x180005150
f1713	805	0x180005156
f1714	806	0x18000515c
f1715	807	0x180005162
f1716	808	0x180005168
f1717	809	0x18000516e
f1718	810	0x180005174
f1719	811	0x18000517a
f172	812	0x180002d38
f1720	813	0x180005180
f1721	814	0x180005186
f1722	815	0x18000518c
f1723	816	0x180005192
f1724	817	0x180005198
f1725	818	0x18000519e
f1726	819	0x1800051a4
f1727	820	0x1800051aa
f1728	821	0x1800051b0
f1729	822	0x1800051b6
f173	823	0x180002d3e
f1730	824	0x1800051bc
f1731	825	0x1800051c2
f1732	826	0x1800051c8
f1733	827	0x1800051ce
f1734	828	0x1800051d4
f1735	829	0x1800051da
f1736	830	0x1800051e0
f1737	831	0x1800051e6
f1738	832	0x1800051ec
f1739	833	0x1800051f2
f174	834	0x180002d44
f1740	835	0x1800051f8
f1741	836	0x1800051fe
f1742	837	0x180005204
f1743	838	0x18000520a
f1744	839	0x180005210
f1745	840	0x180005216
f1746	841	0x18000521c
f1747	842	0x180005222
f1748	843	0x180005228
f1749	844	0x18000522e
f175	845	0x180002d4a
f1750	846	0x180005234
f1751	847	0x18000523a
f1752	848	0x180005240
f1753	849	0x180005246
f1754	850	0x18000524c
f1755	851	0x180005252
f1756	852	0x180005258
f1757	853	0x18000525e
f1758	854	0x180005264
f1759	855	0x18000526a
f176	856	0x180002d50
f1760	857	0x180005270
f1761	858	0x180005276
f1762	859	0x18000527c
f1763	860	0x180005282
f1764	861	0x180005288
f1765	862	0x18000528e
f1766	863	0x180005294
f1767	864	0x18000529a
f1768	865	0x1800052a0
f1769	866	0x1800052a6
f177	867	0x180002d56
f1770	868	0x1800052ac
f1771	869	0x1800052b2
f1772	870	0x1800052b8
f1773	871	0x1800052be
f1774	872	0x1800052c4
f1775	873	0x1800052ca
f1776	874	0x1800052d0
f1777	875	0x1800052d6
f1778	876	0x1800052dc
f1779	877	0x1800052e2
f178	878	0x180002d5c
f1780	879	0x1800052e8
f1781	880	0x1800052ee
f1782	881	0x1800052f4
f1783	882	0x1800052fa
f1784	883	0x180005300
f1785	884	0x180005306
f1786	885	0x18000530c
f1787	886	0x180005312
f1788	887	0x180005318
f1789	888	0x18000531e
f179	889	0x180002d62
f1790	890	0x180005324
f1791	891	0x18000532a
f1792	892	0x180005330
f1793	893	0x180005336
f1794	894	0x18000533c
f1795	895	0x180005342
f1796	896	0x180005348
f1797	897	0x18000534e
f1798	898	0x180005354
f1799	899	0x18000535a
f18	900	0x18000299c
f180	901	0x180002d68
f1800	902	0x180005360
f1801	903	0x180005366
f1802	904	0x18000536c
f1803	905	0x180005372
f1804	906	0x180005378
f1805	907	0x18000537e
f1806	908	0x180005384
f1807	909	0x18000538a
f1808	910	0x180005390
f1809	911	0x180005396
f181	912	0x180002d6e
f1810	913	0x18000539c
f1811	914	0x1800053a2
f1812	915	0x1800053a8
f1813	916	0x1800053ae
f1814	917	0x1800053b4
f1815	918	0x1800053ba
f1816	919	0x1800053c0
f1817	920	0x1800053c6
f1818	921	0x1800053cc
f1819	922	0x1800053d2
f182	923	0x180002d74
f1820	924	0x1800053d8
f1821	925	0x1800053de
f1822	926	0x1800053e4
f1823	927	0x1800053ea
f1824	928	0x1800053f0
f1825	929	0x1800053f6
f1826	930	0x1800053fc
f1827	931	0x180005402
f1828	932	0x180005408
f1829	933	0x18000540e
f183	934	0x180002d7a
f1830	935	0x180005414
f1831	936	0x18000541a
f1832	937	0x180005420
f1833	938	0x180005426
f1834	939	0x18000542c
f1835	940	0x180005432
f1836	941	0x180005438
f1837	942	0x18000543e
f1838	943	0x180005444
f1839	944	0x18000544a
f184	945	0x180002d80
f1840	946	0x180005450
f1841	947	0x180005456
f1842	948	0x18000545c
f1843	949	0x180005462
f1844	950	0x180005468
f1845	951	0x18000546e
f1846	952	0x180005474
f1847	953	0x18000547a
f1848	954	0x180005480
f1849	955	0x180005486
f185	956	0x180002d86
f1850	957	0x18000548c
f1851	958	0x180005492
f1852	959	0x180005498
f1853	960	0x18000549e
f1854	961	0x1800054a4
f1855	962	0x1800054aa
f1856	963	0x1800054b0
f1857	964	0x1800054b6
f1858	965	0x1800054bc
f1859	966	0x1800054c2
f186	967	0x180002d8c
f1860	968	0x1800054c8
f1861	969	0x1800054ce
f1862	970	0x1800054d4
f1863	971	0x1800054da
f1864	972	0x1800054e0
f1865	973	0x1800054e6
f1866	974	0x1800054ec
f1867	975	0x1800054f2
f1868	976	0x1800054f8
f1869	977	0x1800054fe
f187	978	0x180002d92
f1870	979	0x180005504
f1871	980	0x18000550a
f1872	981	0x180005510
f1873	982	0x180005516
f1874	983	0x18000551c
f1875	984	0x180005522
f1876	985	0x180005528
f1877	986	0x18000552e
f1878	987	0x180005534
f1879	988	0x18000553a
f188	989	0x180002d98
f1880	990	0x180005540
f1881	991	0x180005546
f1882	992	0x18000554c
f1883	993	0x180005552
f1884	994	0x180005558
f1885	995	0x18000555e
f1886	996	0x180005564
f1887	997	0x18000556a
f1888	998	0x180005570
f1889	999	0x180005576
f189	1000	0x180002d9e
f1890	1001	0x18000557c
f1891	1002	0x180005582
f1892	1003	0x180005588
f1893	1004	0x18000558e
f1894	1005	0x180005594
f1895	1006	0x18000559a
f1896	1007	0x1800055a0
f1897	1008	0x1800055a6
f1898	1009	0x1800055ac
f1899	1010	0x1800055b2
f19	1011	0x1800029a2
f190	1012	0x180002da4
f1900	1013	0x1800055b8
f1901	1014	0x1800055be
f1902	1015	0x1800055c4
f1903	1016	0x1800055ca
f1904	1017	0x1800055d0
f1905	1018	0x1800055d6
f1906	1019	0x1800055dc
f1907	1020	0x1800055e2
f1908	1021	0x1800055e8
f1909	1022	0x1800055ee
f191	1023	0x180002daa
f1910	1024	0x1800055f4
f1911	1025	0x1800055fa
f1912	1026	0x180005600
f1913	1027	0x180005606
f1914	1028	0x18000560c
f1915	1029	0x180005612
f1916	1030	0x180005618
f1917	1031	0x18000561e
f1918	1032	0x180005624
f1919	1033	0x18000562a
f192	1034	0x180002db0
f1920	1035	0x180005630
f1921	1036	0x180005636
f1922	1037	0x18000563c
f1923	1038	0x180005642
f1924	1039	0x180005648
f1925	1040	0x18000564e
f1926	1041	0x180005654
f1927	1042	0x18000565a
f1928	1043	0x180005660
f1929	1044	0x180005666
f193	1045	0x180002db6
f1930	1046	0x18000566c
f1931	1047	0x180005672
f1932	1048	0x180005678
f1933	1049	0x18000567e
f1934	1050	0x180005684
f1935	1051	0x18000568a
f1936	1052	0x180005690
f1937	1053	0x180005696
f1938	1054	0x18000569c
f1939	1055	0x1800056a2
f194	1056	0x180002dbc
f1940	1057	0x1800056a8
f1941	1058	0x1800056ae
f1942	1059	0x1800056b4
f1943	1060	0x1800056ba
f1944	1061	0x1800056c0
f1945	1062	0x1800056c6
f1946	1063	0x1800056cc
f1947	1064	0x1800056d2
f1948	1065	0x1800056d8
f1949	1066	0x1800056de
f195	1067	0x180002dc2
f1950	1068	0x1800056e4
f1951	1069	0x1800056ea
f1952	1070	0x1800056f0
f1953	1071	0x1800056f6
f1954	1072	0x1800056fc
f1955	1073	0x180005702
f1956	1074	0x180005708
f1957	1075	0x18000570e
f1958	1076	0x180005714
f1959	1077	0x18000571a
f196	1078	0x180002dc8
f1960	1079	0x180005720
f1961	1080	0x180005726
f1962	1081	0x18000572c
f1963	1082	0x180005732
f1964	1083	0x180005738
f1965	1084	0x18000573e
f1966	1085	0x180005744
f1967	1086	0x18000574a
f1968	1087	0x180005750
f1969	1088	0x180005756
f197	1089	0x180002dce
f1970	1090	0x18000575c
f1971	1091	0x180005762
f1972	1092	0x180005768
f1973	1093	0x18000576e
f1974	1094	0x180005774
f1975	1095	0x18000577a
f1976	1096	0x180005780
f1977	1097	0x180005786
f1978	1098	0x18000578c
f1979	1099	0x180005792
f198	1100	0x180002dd4
f1980	1101	0x180005798
f1981	1102	0x18000579e
f1982	1103	0x1800057a4
f1983	1104	0x1800057aa
f1984	1105	0x1800057b0
f1985	1106	0x1800057b6
f1986	1107	0x1800057bc
f1987	1108	0x1800057c2
f1988	1109	0x1800057c8
f1989	1110	0x1800057ce
f199	1111	0x180002dda
f1990	1112	0x1800057d4
f1991	1113	0x1800057da
f1992	1114	0x1800057e0
f1993	1115	0x1800057e6
f1994	1116	0x1800057ec
f1995	1117	0x1800057f2
f1996	1118	0x1800057f8
f1997	1119	0x1800057fe
f1998	1120	0x180005804
f1999	1121	0x18000580a
f2	1122	0x18000293c
f20	1123	0x1800029a8
f200	1124	0x180002de0
f2000	1125	0x180005810
f2001	1126	0x180005816
f2002	1127	0x18000581c
f2003	1128	0x180005822
f2004	1129	0x180005828
f2005	1130	0x18000582e
f2006	1131	0x180005834
f2007	1132	0x18000583a
f2008	1133	0x180005840
f2009	1134	0x180005846
f201	1135	0x180002de6
f2010	1136	0x18000584c
f2011	1137	0x180005852
f2012	1138	0x180005858
f2013	1139	0x18000585e
f2014	1140	0x180005864
f2015	1141	0x18000586a
f2016	1142	0x180005870
f2017	1143	0x180005876
f2018	1144	0x18000587c
f2019	1145	0x180005882
f202	1146	0x180002dec
f2020	1147	0x180005888
f2021	1148	0x18000588e
f2022	1149	0x180005894
f2023	1150	0x18000589a
f2024	1151	0x1800058a0
f2025	1152	0x1800058a6
f2026	1153	0x1800058ac
f2027	1154	0x1800058b2
f2028	1155	0x1800058b8
f2029	1156	0x1800058be
f203	1157	0x180002df2
f2030	1158	0x1800058c4
f2031	1159	0x1800058ca
f2032	1160	0x1800058d0
f2033	1161	0x1800058d6
f2034	1162	0x1800058dc
f2035	1163	0x1800058e2
f2036	1164	0x1800058e8
f2037	1165	0x1800058ee
f2038	1166	0x1800058f4
f2039	1167	0x1800058fa
f204	1168	0x180002df8
f2040	1169	0x180005900
f2041	1170	0x180005906
f2042	1171	0x18000590c
f2043	1172	0x180005912
f2044	1173	0x180005918
f2045	1174	0x18000591e
f2046	1175	0x180005924
f2047	1176	0x18000592a
f2048	1177	0x180005930
f2049	1178	0x180005936
f205	1179	0x180002dfe
f2050	1180	0x18000593c
f2051	1181	0x180005942
f2052	1182	0x180005948
f2053	1183	0x18000594e
f2054	1184	0x180005954
f2055	1185	0x18000595a
f2056	1186	0x180005960
f2057	1187	0x180005966
f2058	1188	0x18000596c
f2059	1189	0x180005972
f206	1190	0x180002e04
f2060	1191	0x180005978
f2061	1192	0x18000597e
f2062	1193	0x180005984
f2063	1194	0x18000598a
f2064	1195	0x180005990
f2065	1196	0x180005996
f2066	1197	0x18000599c
f2067	1198	0x1800059a2
f2068	1199	0x1800059a8
f2069	1200	0x1800059ae
f207	1201	0x180002e0a
f2070	1202	0x1800059b4
f2071	1203	0x1800059ba
f2072	1204	0x1800059c0
f2073	1205	0x1800059c6
f2074	1206	0x1800059cc
f2075	1207	0x1800059d2
f2076	1208	0x1800059d8
f2077	1209	0x1800059de
f2078	1210	0x1800059e4
f2079	1211	0x1800059ea
f208	1212	0x180002e10
f2080	1213	0x1800059f0
f2081	1214	0x1800059f6
f2082	1215	0x1800059fc
f2083	1216	0x180005a02
f2084	1217	0x180005a08
f2085	1218	0x180005a0e
f2086	1219	0x180005a14
f2087	1220	0x180005a1a
f2088	1221	0x180005a20
f2089	1222	0x180005a26
f209	1223	0x180002e16
f2090	1224	0x180005a2c
f2091	1225	0x180005a32
f2092	1226	0x180005a38
f2093	1227	0x180005a3e
f2094	1228	0x180005a44
f2095	1229	0x180005a4a
f2096	1230	0x180005a50
f2097	1231	0x180005a56
f2098	1232	0x180005a5c
f2099	1233	0x180005a62
f21	1234	0x1800029ae
f210	1235	0x180002e1c
f2100	1236	0x180005a68
f2101	1237	0x180005a6e
f2102	1238	0x180005a74
f2103	1239	0x180005a7a
f2104	1240	0x180005a80
f2105	1241	0x180005a86
f2106	1242	0x180005a8c
f2107	1243	0x180005a92
f2108	1244	0x180005a98
f2109	1245	0x180005a9e
f211	1246	0x180002e22
f2110	1247	0x180005aa4
f2111	1248	0x180005aaa
f2112	1249	0x180005ab0
f2113	1250	0x180005ab6
f2114	1251	0x180005abc
f2115	1252	0x180005ac2
f2116	1253	0x180005ac8
f2117	1254	0x180005ace
f2118	1255	0x180005ad4
f2119	1256	0x180005ada
f212	1257	0x180002e28
f2120	1258	0x180005ae0
f2121	1259	0x180005ae6
f2122	1260	0x180005aec
f2123	1261	0x180005af2
f2124	1262	0x180005af8
f2125	1263	0x180005afe
f2126	1264	0x180005b04
f2127	1265	0x180005b0a
f2128	1266	0x180005b10
f2129	1267	0x180005b16
f213	1268	0x180002e2e
f2130	1269	0x180005b1c
f2131	1270	0x180005b22
f2132	1271	0x180005b28
f2133	1272	0x180005b2e
f2134	1273	0x180005b34
f2135	1274	0x180005b3a
f2136	1275	0x180005b40
f2137	1276	0x180005b46
f2138	1277	0x180005b4c
f2139	1278	0x180005b52
f214	1279	0x180002e34
f2140	1280	0x180005b58
f2141	1281	0x180005b5e
f2142	1282	0x180005b64
f2143	1283	0x180005b6a
f2144	1284	0x180005b70
f2145	1285	0x180005b76
f2146	1286	0x180005b7c
f2147	1287	0x180005b82
f2148	1288	0x180005b88
f2149	1289	0x180005b8e
f215	1290	0x180002e3a
f2150	1291	0x180005b94
f2151	1292	0x180005b9a
f2152	1293	0x180005ba0
f2153	1294	0x180005ba6
f2154	1295	0x180005bac
f2155	1296	0x180005bb2
f2156	1297	0x180005bb8
f2157	1298	0x180005bbe
f2158	1299	0x180005bc4
f2159	1300	0x180005bca
f216	1301	0x180002e40
f2160	1302	0x180005bd0
f2161	1303	0x180005bd6
f2162	1304	0x180005bdc
f2163	1305	0x180005be2
f2164	1306	0x180005be8
f2165	1307	0x180005bee
f2166	1308	0x180005bf4
f2167	1309	0x180005bfa
f2168	1310	0x180005c00
f2169	1311	0x180005c06
f217	1312	0x180002e46
f2170	1313	0x180005c0c
f2171	1314	0x180005c12
f2172	1315	0x180005c18
f2173	1316	0x180005c1e
f2174	1317	0x180005c24
f2175	1318	0x180005c2a
f2176	1319	0x180005c30
f2177	1320	0x180005c36
f2178	1321	0x180005c3c
f2179	1322	0x180005c42
f218	1323	0x180002e4c
f2180	1324	0x180005c48
f2181	1325	0x180005c4e
f2182	1326	0x180005c54
f2183	1327	0x180005c5a
f2184	1328	0x180005c60
f2185	1329	0x180005c66
f2186	1330	0x180005c6c
f2187	1331	0x180005c72
f2188	1332	0x180005c78
f2189	1333	0x180005c7e
f219	1334	0x180002e52
f2190	1335	0x180005c84
f2191	1336	0x180005c8a
f2192	1337	0x180005c90
f2193	1338	0x180005c96
f2194	1339	0x180005c9c
f2195	1340	0x180005ca2
f2196	1341	0x180005ca8
f2197	1342	0x180005cae
f2198	1343	0x180005cb4
f2199	1344	0x180005cba
f22	1345	0x1800029b4
f220	1346	0x180002e58
f2200	1347	0x180005cc0
f2201	1348	0x180005cc6
f2202	1349	0x180005ccc
f2203	1350	0x180005cd2
f2204	1351	0x180005cd8
f2205	1352	0x180005cde
f2206	1353	0x180005ce4
f2207	1354	0x180005cea
f2208	1355	0x180005cf0
f2209	1356	0x180005cf6
f221	1357	0x180002e5e
f2210	1358	0x180005cfc
f2211	1359	0x180005d02
f2212	1360	0x180005d08
f2213	1361	0x180005d0e
f2214	1362	0x180005d14
f2215	1363	0x180005d1a
f2216	1364	0x180005d20
f2217	1365	0x180005d26
f2218	1366	0x180005d2c
f2219	1367	0x180005d32
f222	1368	0x180002e64
f2220	1369	0x180005d38
f2221	1370	0x180005d3e
f2222	1371	0x180005d44
f2223	1372	0x180005d4a
f2224	1373	0x180005d50
f2225	1374	0x180005d56
f2226	1375	0x180005d5c
f2227	1376	0x180005d62
f2228	1377	0x180005d68
f2229	1378	0x180005d6e
f223	1379	0x180002e6a
f2230	1380	0x180005d74
f2231	1381	0x180005d7a
f2232	1382	0x180005d80
f2233	1383	0x180005d86
f2234	1384	0x180005d8c
f2235	1385	0x180005d92
f2236	1386	0x180005d98
f2237	1387	0x180005d9e
f2238	1388	0x180005da4
f2239	1389	0x180005daa
f224	1390	0x180002e70
f2240	1391	0x180005db0
f2241	1392	0x180005db6
f2242	1393	0x180005dbc
f2243	1394	0x180005dc2
f2244	1395	0x180005dc8
f2245	1396	0x180005dce
f2246	1397	0x180005dd4
f2247	1398	0x180005dda
f2248	1399	0x180005de0
f2249	1400	0x180005de6
f225	1401	0x180002e76
f2250	1402	0x180005dec
f2251	1403	0x180005df2
f2252	1404	0x180005df8
f2253	1405	0x180005dfe
f2254	1406	0x180005e04
f2255	1407	0x180005e0a
f2256	1408	0x180005e10
f2257	1409	0x180005e16
f2258	1410	0x180005e1c
f2259	1411	0x180005e22
f226	1412	0x180002e7c
f2260	1413	0x180005e28
f2261	1414	0x180005e2e
f2262	1415	0x180005e34
f2263	1416	0x180005e3a
f2264	1417	0x180005e40
f2265	1418	0x180005e46
f2266	1419	0x180005e4c
f2267	1420	0x180005e52
f2268	1421	0x180005e58
f2269	1422	0x180005e5e
f227	1423	0x180002e82
f2270	1424	0x180005e64
f2271	1425	0x180005e6a
f2272	1426	0x180005e70
f2273	1427	0x180005e76
f2274	1428	0x180005e7c
f2275	1429	0x180005e82
f2276	1430	0x180005e88
f2277	1431	0x180005e8e
f2278	1432	0x180005e94
f2279	1433	0x180005e9a
f228	1434	0x180002e88
f2280	1435	0x180005ea0
f2281	1436	0x180005ea6
f2282	1437	0x180005eac
f2283	1438	0x180005eb2
f2284	1439	0x180005eb8
f2285	1440	0x180005ebe
f2286	1441	0x180005ec4
f2287	1442	0x180005eca
f2288	1443	0x180005ed0
f2289	1444	0x180005ed6
f229	1445	0x180002e8e
f2290	1446	0x180005edc
f2291	1447	0x180005ee2
f2292	1448	0x180005ee8
f2293	1449	0x180005eee
f2294	1450	0x180005ef4
f2295	1451	0x180005efa
f2296	1452	0x180005f00
f2297	1453	0x180005f06
f2298	1454	0x180005f0c
f2299	1455	0x180005f12
f23	1456	0x1800029ba
f230	1457	0x180002e94
f2300	1458	0x180005f18
f2301	1459	0x180005f1e
f2302	1460	0x180005f24
f2303	1461	0x180005f2a
f2304	1462	0x180005f30
f2305	1463	0x180005f36
f2306	1464	0x180005f3c
f2307	1465	0x180005f42
f2308	1466	0x180005f48
f2309	1467	0x180005f4e
f231	1468	0x180002e9a
f2310	1469	0x180005f54
f2311	1470	0x180005f5a
f2312	1471	0x180005f60
f2313	1472	0x180005f66
f2314	1473	0x180005f6c
f2315	1474	0x180005f72
f2316	1475	0x180005f78
f2317	1476	0x180005f7e
f2318	1477	0x180005f84
f2319	1478	0x180005f8a
f232	1479	0x180002ea0
f2320	1480	0x180005f90
f2321	1481	0x180005f96
f2322	1482	0x180005f9c
f2323	1483	0x180005fa2
f2324	1484	0x180005fa8
f2325	1485	0x180005fae
f2326	1486	0x180005fb4
f2327	1487	0x180005fba
f2328	1488	0x180005fc0
f2329	1489	0x180005fc6
f233	1490	0x180002ea6
f2330	1491	0x180005fcc
f2331	1492	0x180005fd2
f2332	1493	0x180005fd8
f2333	1494	0x180005fde
f2334	1495	0x180005fe4
f2335	1496	0x180005fea
f2336	1497	0x180005ff0
f2337	1498	0x180005ff6
f2338	1499	0x180005ffc
f2339	1500	0x180006002
f234	1501	0x180002eac
f2340	1502	0x180006008
f2341	1503	0x18000600e
f2342	1504	0x180006014
f2343	1505	0x18000601a
f2344	1506	0x180006020
f2345	1507	0x180006026
f2346	1508	0x18000602c
f2347	1509	0x180006032
f2348	1510	0x180006038
f2349	1511	0x18000603e
f235	1512	0x180002eb2
f2350	1513	0x180006044
f2351	1514	0x18000604a
f2352	1515	0x180006050
f2353	1516	0x180006056
f2354	1517	0x18000605c
f2355	1518	0x180006062
f2356	1519	0x180006068
f2357	1520	0x18000606e
f2358	1521	0x180006074
f2359	1522	0x18000607a
f236	1523	0x180002eb8
f2360	1524	0x180006080
f2361	1525	0x180006086
f2362	1526	0x18000608c
f2363	1527	0x180006092
f2364	1528	0x180006098
f2365	1529	0x18000609e
f2366	1530	0x1800060a4
f2367	1531	0x1800060aa
f2368	1532	0x1800060b0
f2369	1533	0x1800060b6
f237	1534	0x180002ebe
f2370	1535	0x1800060bc
f2371	1536	0x1800060c2
f2372	1537	0x1800060c8
f2373	1538	0x1800060ce
f2374	1539	0x1800060d4
f2375	1540	0x1800060da
f2376	1541	0x1800060e0
f2377	1542	0x1800060e6
f2378	1543	0x1800060ec
f2379	1544	0x1800060f2
f238	1545	0x180002ec4
f2380	1546	0x1800060f8
f2381	1547	0x1800060fe
f2382	1548	0x180006104
f2383	1549	0x18000610a
f2384	1550	0x180006110
f2385	1551	0x180006116
f2386	1552	0x18000611c
f2387	1553	0x180006122
f2388	1554	0x180006128
f2389	1555	0x18000612e
f239	1556	0x180002eca
f2390	1557	0x180006134
f2391	1558	0x18000613a
f2392	1559	0x180006140
f2393	1560	0x180006146
f2394	1561	0x18000614c
f2395	1562	0x180006152
f2396	1563	0x180006158
f2397	1564	0x18000615e
f2398	1565	0x180006164
f2399	1566	0x18000616a
f24	1567	0x1800029c0
f240	1568	0x180002ed0
f2400	1569	0x180006170
f2401	1570	0x180006176
f2402	1571	0x18000617c
f2403	1572	0x180006182
f2404	1573	0x180006188
f2405	1574	0x18000618e
f2406	1575	0x180006194
f2407	1576	0x18000619a
f2408	1577	0x1800061a0
f2409	1578	0x1800061a6
f241	1579	0x180002ed6
f2410	1580	0x1800061ac
f2411	1581	0x1800061b2
f2412	1582	0x1800061b8
f2413	1583	0x1800061be
f2414	1584	0x1800061c4
f2415	1585	0x1800061ca
f2416	1586	0x1800061d0
f2417	1587	0x1800061d6
f2418	1588	0x1800061dc
f2419	1589	0x1800061e2
f242	1590	0x180002edc
f2420	1591	0x1800061e8
f2421	1592	0x1800061ee
f2422	1593	0x1800061f4
f2423	1594	0x1800061fa
f2424	1595	0x180006200
f2425	1596	0x180006206
f2426	1597	0x18000620c
f2427	1598	0x180006212
f2428	1599	0x180006218
f2429	1600	0x18000621e
f243	1601	0x180002ee2
f2430	1602	0x180006224
f2431	1603	0x18000622a
f2432	1604	0x180006230
f2433	1605	0x180006236
f2434	1606	0x18000623c
f2435	1607	0x180006242
f2436	1608	0x180006248
f2437	1609	0x18000624e
f2438	1610	0x180006254
f2439	1611	0x18000625a
f244	1612	0x180002ee8
f2440	1613	0x180006260
f2441	1614	0x180006266
f2442	1615	0x18000626c
f2443	1616	0x180006272
f2444	1617	0x180006278
f2445	1618	0x18000627e
f2446	1619	0x180006284
f2447	1620	0x18000628a
f2448	1621	0x180006290
f2449	1622	0x180006296
f245	1623	0x180002eee
f2450	1624	0x18000629c
f2451	1625	0x1800062a2
f2452	1626	0x1800062a8
f2453	1627	0x1800062ae
f2454	1628	0x1800062b4
f2455	1629	0x1800062ba
f2456	1630	0x1800062c0
f2457	1631	0x1800062c6
f2458	1632	0x1800062cc
f2459	1633	0x1800062d2
f246	1634	0x180002ef4
f2460	1635	0x1800062d8
f2461	1636	0x1800062de
f2462	1637	0x1800062e4
f2463	1638	0x1800062ea
f2464	1639	0x1800062f0
f2465	1640	0x1800062f6
f2466	1641	0x1800062fc
f2467	1642	0x180006302
f2468	1643	0x180006308
f2469	1644	0x18000630e
f247	1645	0x180002efa
f2470	1646	0x180006314
f2471	1647	0x18000631a
f2472	1648	0x180006320
f2473	1649	0x180006326
f2474	1650	0x18000632c
f2475	1651	0x180006332
f2476	1652	0x180006338
f2477	1653	0x18000633e
f2478	1654	0x180006344
f2479	1655	0x18000634a
f248	1656	0x180002f00
f2480	1657	0x180006350
f2481	1658	0x180006356
f2482	1659	0x18000635c
f2483	1660	0x180006362
f2484	1661	0x180006368
f2485	1662	0x18000636e
f2486	1663	0x180006374
f2487	1664	0x18000637a
f2488	1665	0x180006380
f2489	1666	0x180006386
f249	1667	0x180002f06
f2490	1668	0x18000638c
f2491	1669	0x180006392
f2492	1670	0x180006398
f2493	1671	0x18000639e
f2494	1672	0x1800063a4
f2495	1673	0x1800063aa
f2496	1674	0x1800063b0
f2497	1675	0x1800063b6
f2498	1676	0x1800063bc
f2499	1677	0x1800063c2
f25	1678	0x1800029c6
f250	1679	0x180002f0c
f2500	1680	0x1800063c8
f2501	1681	0x1800063ce
f2502	1682	0x1800063d4
f2503	1683	0x1800063da
f2504	1684	0x1800063e0
f2505	1685	0x1800063e6
f2506	1686	0x1800063ec
f2507	1687	0x1800063f2
f2508	1688	0x1800063f8
f2509	1689	0x1800063fe
f251	1690	0x180002f12
f2510	1691	0x180006404
f2511	1692	0x18000640a
f2512	1693	0x180006410
f2513	1694	0x180006416
f2514	1695	0x18000641c
f2515	1696	0x180006422
f2516	1697	0x180006428
f2517	1698	0x18000642e
f2518	1699	0x180006434
f2519	1700	0x18000643a
f252	1701	0x180002f18
f2520	1702	0x180006440
f2521	1703	0x180006446
f2522	1704	0x18000644c
f2523	1705	0x180006452
f2524	1706	0x180006458
f2525	1707	0x18000645e
f2526	1708	0x180006464
f2527	1709	0x18000646a
f2528	1710	0x180006470
f2529	1711	0x180006476
f253	1712	0x180002f1e
f2530	1713	0x18000647c
f2531	1714	0x180006482
f2532	1715	0x180006488
f2533	1716	0x18000648e
f2534	1717	0x180006494
f2535	1718	0x18000649a
f2536	1719	0x1800064a0
f2537	1720	0x1800064a6
f2538	1721	0x1800064ac
f2539	1722	0x1800064b2
f254	1723	0x180002f24
f2540	1724	0x1800064b8
f2541	1725	0x1800064be
f2542	1726	0x1800064c4
f2543	1727	0x1800064ca
f2544	1728	0x1800064d0
f2545	1729	0x1800064d6
f2546	1730	0x1800064dc
f2547	1731	0x1800064e2
f2548	1732	0x1800064e8
f2549	1733	0x1800064ee
f255	1734	0x180002f2a
f2550	1735	0x1800064f4
f2551	1736	0x1800064fa
f2552	1737	0x180006500
f2553	1738	0x180006506
f2554	1739	0x18000650c
f2555	1740	0x180006512
f2556	1741	0x180006518
f2557	1742	0x18000651e
f2558	1743	0x180006524
f2559	1744	0x18000652a
f256	1745	0x180002f30
f2560	1746	0x180006530
f2561	1747	0x180006536
f2562	1748	0x18000653c
f2563	1749	0x180006542
f2564	1750	0x180006548
f2565	1751	0x18000654e
f2566	1752	0x180006554
f2567	1753	0x18000655a
f2568	1754	0x180006560
f2569	1755	0x180006566
f257	1756	0x180002f36
f2570	1757	0x18000656c
f2571	1758	0x180006572
f2572	1759	0x180006578
f2573	1760	0x18000657e
f2574	1761	0x180006584
f2575	1762	0x18000658a
f2576	1763	0x180006590
f2577	1764	0x180006596
f2578	1765	0x18000659c
f2579	1766	0x1800065a2
f258	1767	0x180002f3c
f2580	1768	0x1800065a8
f2581	1769	0x1800065ae
f2582	1770	0x1800065b4
f2583	1771	0x1800065ba
f2584	1772	0x1800065c0
f2585	1773	0x1800065c6
f2586	1774	0x1800065cc
f2587	1775	0x1800065d2
f2588	1776	0x1800065d8
f2589	1777	0x1800065de
f259	1778	0x180002f42
f2590	1779	0x1800065e4
f2591	1780	0x1800065ea
f2592	1781	0x1800065f0
f2593	1782	0x1800065f6
f2594	1783	0x1800065fc
f2595	1784	0x180006602
f2596	1785	0x180006608
f2597	1786	0x18000660e
f2598	1787	0x180006614
f2599	1788	0x18000661a
f26	1789	0x1800029cc
f260	1790	0x180002f48
f2600	1791	0x180006620
f2601	1792	0x180006626
f2602	1793	0x18000662c
f2603	1794	0x180006632
f2604	1795	0x180006638
f2605	1796	0x18000663e
f2606	1797	0x180006644
f2607	1798	0x18000664a
f2608	1799	0x180006650
f2609	1800	0x180006656
f261	1801	0x180002f4e
f2610	1802	0x18000665c
f2611	1803	0x180006662
f2612	1804	0x180006668
f2613	1805	0x18000666e
f2614	1806	0x180006674
f2615	1807	0x18000667a
f2616	1808	0x180006680
f2617	1809	0x180006686
f2618	1810	0x18000668c
f2619	1811	0x180006692
f262	1812	0x180002f54
f2620	1813	0x180006698
f2621	1814	0x18000669e
f2622	1815	0x1800066a4
f2623	1816	0x1800066aa
f2624	1817	0x1800066b0
f2625	1818	0x1800066b6
f2626	1819	0x1800066bc
f2627	1820	0x1800066c2
f2628	1821	0x1800066c8
f2629	1822	0x1800066ce
f263	1823	0x180002f5a
f2630	1824	0x1800066d4
f2631	1825	0x1800066da
f2632	1826	0x1800066e0
f2633	1827	0x1800066e6
f2634	1828	0x1800066ec
f2635	1829	0x1800066f2
f2636	1830	0x1800066f8
f2637	1831	0x1800066fe
f2638	1832	0x180006704
f2639	1833	0x18000670a
f264	1834	0x180002f60
f2640	1835	0x180006710
f2641	1836	0x180006716
f2642	1837	0x18000671c
f2643	1838	0x180006722
f2644	1839	0x180006728
f2645	1840	0x18000672e
f2646	1841	0x180006734
f2647	1842	0x18000673a
f2648	1843	0x180006740
f2649	1844	0x180006746
f265	1845	0x180002f66
f2650	1846	0x18000674c
f2651	1847	0x180006752
f2652	1848	0x180006758
f2653	1849	0x18000675e
f2654	1850	0x180006764
f2655	1851	0x18000676a
f2656	1852	0x180006770
f2657	1853	0x180006776
f2658	1854	0x18000677c
f2659	1855	0x180006782
f266	1856	0x180002f6c
f2660	1857	0x180006788
f2661	1858	0x18000678e
f2662	1859	0x180006794
f2663	1860	0x18000679a
f2664	1861	0x1800067a0
f2665	1862	0x1800067a6
f2666	1863	0x1800067ac
f2667	1864	0x1800067b2
f2668	1865	0x1800067b8
f2669	1866	0x1800067be
f267	1867	0x180002f72
f2670	1868	0x1800067c4
f2671	1869	0x1800067ca
f2672	1870	0x1800067d0
f2673	1871	0x1800067d6
f2674	1872	0x1800067dc
f2675	1873	0x1800067e2
f2676	1874	0x1800067e8
f2677	1875	0x1800067ee
f2678	1876	0x1800067f4
f2679	1877	0x1800067fa
f268	1878	0x180002f78
f2680	1879	0x180006800
f2681	1880	0x180006806
f2682	1881	0x18000680c
f2683	1882	0x180006812
f2684	1883	0x180006818
f2685	1884	0x18000681e
f2686	1885	0x180006824
f2687	1886	0x18000682a
f2688	1887	0x180006830
f2689	1888	0x180006836
f269	1889	0x180002f7e
f2690	1890	0x18000683c
f2691	1891	0x180006842
f2692	1892	0x180006848
f2693	1893	0x18000684e
f2694	1894	0x180006854
f2695	1895	0x18000685a
f2696	1896	0x180006860
f2697	1897	0x180006866
f2698	1898	0x18000686c
f2699	1899	0x180006872
f27	1900	0x1800029d2
f270	1901	0x180002f84
f2700	1902	0x180006878
f2701	1903	0x18000687e
f2702	1904	0x180006884
f2703	1905	0x18000688a
f2704	1906	0x180006890
f2705	1907	0x180006896
f2706	1908	0x18000689c
f2707	1909	0x1800068a2
f2708	1910	0x1800068a8
f2709	1911	0x1800068ae
f271	1912	0x180002f8a
f2710	1913	0x1800068b4
f2711	1914	0x1800068ba
f2712	1915	0x1800068c0
f2713	1916	0x1800068c6
f2714	1917	0x1800068cc
f2715	1918	0x1800068d2
f2716	1919	0x1800068d8
f2717	1920	0x1800068de
f2718	1921	0x1800068e4
f2719	1922	0x1800068ea
f272	1923	0x180002f90
f2720	1924	0x1800068f0
f2721	1925	0x1800068f6
f2722	1926	0x1800068fc
f2723	1927	0x180006902
f2724	1928	0x180006908
f2725	1929	0x18000690e
f2726	1930	0x180006914
f2727	1931	0x18000691a
f2728	1932	0x180006920
f2729	1933	0x180006926
f273	1934	0x180002f96
f2730	1935	0x18000692c
f2731	1936	0x180006932
f2732	1937	0x180006938
f2733	1938	0x18000693e
f2734	1939	0x180006944
f2735	1940	0x18000694a
f2736	1941	0x180006950
f2737	1942	0x180006956
f2738	1943	0x18000695c
f2739	1944	0x180006962
f274	1945	0x180002f9c
f2740	1946	0x180006968
f2741	1947	0x18000696e
f2742	1948	0x180006974
f2743	1949	0x18000697a
f2744	1950	0x180006980
f2745	1951	0x180006986
f2746	1952	0x18000698c
f2747	1953	0x180006992
f2748	1954	0x180006998
f2749	1955	0x18000699e
f275	1956	0x180002fa2
f2750	1957	0x1800069a4
f2751	1958	0x1800069aa
f2752	1959	0x1800069b0
f2753	1960	0x1800069b6
f2754	1961	0x1800069bc
f2755	1962	0x1800069c2
f2756	1963	0x1800069c8
f2757	1964	0x1800069ce
f2758	1965	0x1800069d4
f2759	1966	0x1800069da
f276	1967	0x180002fa8
f2760	1968	0x1800069e0
f2761	1969	0x1800069e6
f2762	1970	0x1800069ec
f2763	1971	0x1800069f2
f2764	1972	0x1800069f8
f2765	1973	0x1800069fe
f2766	1974	0x180006a04
f2767	1975	0x180006a0a
f2768	1976	0x180006a10
f2769	1977	0x180006a16
f277	1978	0x180002fae
f2770	1979	0x180006a1c
f2771	1980	0x180006a22
f2772	1981	0x180006a28
f2773	1982	0x180006a2e
f2774	1983	0x180006a34
f2775	1984	0x180006a3a
f2776	1985	0x180006a40
f2777	1986	0x180006a46
f2778	1987	0x180006a4c
f2779	1988	0x180006a52
f278	1989	0x180002fb4
f2780	1990	0x180006a58
f2781	1991	0x180006a5e
f2782	1992	0x180006a64
f2783	1993	0x180006a6a
f2784	1994	0x180006a70
f2785	1995	0x180006a76
f2786	1996	0x180006a7c
f2787	1997	0x180006a82
f2788	1998	0x180006a88
f2789	1999	0x180006a8e
f279	2000	0x180002fba
f2790	2001	0x180006a94
f2791	2002	0x180006a9a
f2792	2003	0x180006aa0
f2793	2004	0x180006aa6
f2794	2005	0x180006aac
f2795	2006	0x180006ab2
f2796	2007	0x180006ab8
f2797	2008	0x180006abe
f2798	2009	0x180006ac4
f2799	2010	0x180006aca
f28	2011	0x1800029d8
f280	2012	0x180002fc0
f2800	2013	0x180006ad0
f2801	2014	0x180006ad6
f2802	2015	0x180006adc
f2803	2016	0x180006ae2
f2804	2017	0x180006ae8
f2805	2018	0x180006aee
f2806	2019	0x180006af4
f2807	2020	0x180006afa
f2808	2021	0x180006b00
f2809	2022	0x180006b06
f281	2023	0x180002fc6
f2810	2024	0x180006b0c
f2811	2025	0x180006b12
f2812	2026	0x180006b18
f2813	2027	0x180006b1e
f2814	2028	0x180006b24
f2815	2029	0x180006b2a
f2816	2030	0x180006b30
f2817	2031	0x180006b36
f2818	2032	0x180006b3c
f2819	2033	0x180006b42
f282	2034	0x180002fcc
f2820	2035	0x180006b48
f2821	2036	0x180006b4e
f2822	2037	0x180006b54
f2823	2038	0x180006b5a
f2824	2039	0x180006b60
f2825	2040	0x180006b66
f2826	2041	0x180006b6c
f2827	2042	0x180006b72
f2828	2043	0x180006b78
f2829	2044	0x180006b7e
f283	2045	0x180002fd2
f2830	2046	0x180006b84
f2831	2047	0x180006b8a
f2832	2048	0x180006b90
f2833	2049	0x180006b96
f2834	2050	0x180006b9c
f2835	2051	0x180006ba2
f2836	2052	0x180006ba8
f2837	2053	0x180006bae
f2838	2054	0x180006bb4
f2839	2055	0x180006bba
f284	2056	0x180002fd8
f2840	2057	0x180006bc0
f2841	2058	0x180006bc6
f2842	2059	0x180006bcc
f2843	2060	0x180006bd2
f2844	2061	0x180006bd8
f2845	2062	0x180006bde
f2846	2063	0x180006be4
f2847	2064	0x180006bea
f2848	2065	0x180006bf0
f2849	2066	0x180006bf6
f285	2067	0x180002fde
f2850	2068	0x180006bfc
f2851	2069	0x180006c02
f2852	2070	0x180006c08
f2853	2071	0x180006c0e
f2854	2072	0x180006c14
f2855	2073	0x180006c1a
f2856	2074	0x180006c20
f2857	2075	0x180006c26
f2858	2076	0x180006c2c
f2859	2077	0x180006c32
f286	2078	0x180002fe4
f2860	2079	0x180006c38
f2861	2080	0x180006c3e
f2862	2081	0x180006c44
f2863	2082	0x180006c4a
f2864	2083	0x180006c50
f2865	2084	0x180006c56
f2866	2085	0x180006c5c
f2867	2086	0x180006c62
f2868	2087	0x180006c68
f2869	2088	0x180006c6e
f287	2089	0x180002fea
f2870	2090	0x180006c74
f2871	2091	0x180006c7a
f2872	2092	0x180006c80
f2873	2093	0x180006c86
f2874	2094	0x180006c8c
f2875	2095	0x180006c92
f2876	2096	0x180006c98
f2877	2097	0x180006c9e
f2878	2098	0x180006ca4
f2879	2099	0x180006caa
f288	2100	0x180002ff0
f2880	2101	0x180006cb0
f2881	2102	0x180006cb6
f2882	2103	0x180006cbc
f2883	2104	0x180006cc2
f2884	2105	0x180006cc8
f2885	2106	0x180006cce
f2886	2107	0x180006cd4
f2887	2108	0x180006cda
f2888	2109	0x180006ce0
f2889	2110	0x180006ce6
f289	2111	0x180002ff6
f2890	2112	0x180006cec
f2891	2113	0x180006cf2
f2892	2114	0x180006cf8
f2893	2115	0x180006cfe
f2894	2116	0x180006d04
f2895	2117	0x180006d0a
f2896	2118	0x180006d10
f2897	2119	0x180006d16
f2898	2120	0x180006d1c
f2899	2121	0x180006d22
f29	2122	0x1800029de
f290	2123	0x180002ffc
f2900	2124	0x180006d28
f2901	2125	0x180006d2e
f2902	2126	0x180006d34
f2903	2127	0x180006d3a
f2904	2128	0x180006d40
f2905	2129	0x180006d46
f2906	2130	0x180006d4c
f2907	2131	0x180006d52
f2908	2132	0x180006d58
f2909	2133	0x180006d5e
f291	2134	0x180003002
f2910	2135	0x180006d64
f2911	2136	0x180006d6a
f2912	2137	0x180006d70
f2913	2138	0x180006d76
f2914	2139	0x180006d7c
f2915	2140	0x180006d82
f2916	2141	0x180006d88
f2917	2142	0x180006d8e
f2918	2143	0x180006d94
f2919	2144	0x180006d9a
f292	2145	0x180003008
f2920	2146	0x180006da0
f2921	2147	0x180006da6
f2922	2148	0x180006dac
f2923	2149	0x180006db2
f2924	2150	0x180006db8
f2925	2151	0x180006dbe
f2926	2152	0x180006dc4
f2927	2153	0x180006dca
f2928	2154	0x180006dd0
f2929	2155	0x180006dd6
f293	2156	0x18000300e
f2930	2157	0x180006ddc
f2931	2158	0x180006de2
f2932	2159	0x180006de8
f2933	2160	0x180006dee
f2934	2161	0x180006df4
f2935	2162	0x180006dfa
f2936	2163	0x180006e00
f2937	2164	0x180006e06
f2938	2165	0x180006e0c
f2939	2166	0x180006e12
f294	2167	0x180003014
f2940	2168	0x180006e18
f2941	2169	0x180006e1e
f2942	2170	0x180006e24
f2943	2171	0x180006e2a
f2944	2172	0x180006e30
f2945	2173	0x180006e36
f2946	2174	0x180006e3c
f2947	2175	0x180006e42
f2948	2176	0x180006e48
f2949	2177	0x180006e4e
f295	2178	0x18000301a
f2950	2179	0x180006e54
f2951	2180	0x180006e5a
f2952	2181	0x180006e60
f2953	2182	0x180006e66
f2954	2183	0x180006e6c
f2955	2184	0x180006e72
f2956	2185	0x180006e78
f2957	2186	0x180006e7e
f2958	2187	0x180006e84
f2959	2188	0x180006e8a
f296	2189	0x180003020
f2960	2190	0x180006e90
f2961	2191	0x180006e96
f2962	2192	0x180006e9c
f2963	2193	0x180006ea2
f2964	2194	0x180006ea8
f2965	2195	0x180006eae
f2966	2196	0x180006eb4
f2967	2197	0x180006eba
f2968	2198	0x180006ec0
f2969	2199	0x180006ec6
f297	2200	0x180003026
f2970	2201	0x180006ecc
f2971	2202	0x180006ed2
f2972	2203	0x180006ed8
f2973	2204	0x180006ede
f2974	2205	0x180006ee4
f2975	2206	0x180006eea
f2976	2207	0x180006ef0
f2977	2208	0x180006ef6
f2978	2209	0x180006efc
f2979	2210	0x180006f02
f298	2211	0x18000302c
f2980	2212	0x180006f08
f2981	2213	0x180006f0e
f2982	2214	0x180006f14
f2983	2215	0x180006f1a
f2984	2216	0x180006f20
f2985	2217	0x180006f26
f2986	2218	0x180006f2c
f2987	2219	0x180006f32
f2988	2220	0x180006f38
f2989	2221	0x180006f3e
f299	2222	0x180003032
f2990	2223	0x180006f44
f2991	2224	0x180006f4a
f2992	2225	0x180006f50
f2993	2226	0x180006f56
f2994	2227	0x180006f5c
f2995	2228	0x180006f62
f2996	2229	0x180006f68
f2997	2230	0x180006f6e
f2998	2231	0x180006f74
f2999	2232	0x180006f7a
f3	2233	0x180002942
f30	2234	0x1800029e4
f300	2235	0x180003038
f3000	2236	0x180006f80
f3001	2237	0x180006f86
f3002	2238	0x180006f8c
f3003	2239	0x180006f92
f3004	2240	0x180006f98
f3005	2241	0x180006f9e
f3006	2242	0x180006fa4
f3007	2243	0x180006faa
f3008	2244	0x180006fb0
f3009	2245	0x180006fb6
f301	2246	0x18000303e
f3010	2247	0x180006fbc
f3011	2248	0x180006fc2
f3012	2249	0x180006fc8
f3013	2250	0x180006fce
f3014	2251	0x180006fd4
f3015	2252	0x180006fda
f3016	2253	0x180006fe0
f3017	2254	0x180006fe6
f3018	2255	0x180006fec
f3019	2256	0x180006ff2
f302	2257	0x180003044
f3020	2258	0x180006ff8
f3021	2259	0x180006ffe
f3022	2260	0x180007004
f3023	2261	0x18000700a
f3024	2262	0x180007010
f3025	2263	0x180007016
f3026	2264	0x18000701c
f3027	2265	0x180007022
f3028	2266	0x180007028
f3029	2267	0x18000702e
f303	2268	0x18000304a
f3030	2269	0x180007034
f3031	2270	0x18000703a
f3032	2271	0x180007040
f3033	2272	0x180007046
f3034	2273	0x18000704c
f3035	2274	0x180007052
f3036	2275	0x180007058
f3037	2276	0x18000705e
f3038	2277	0x180007064
f3039	2278	0x18000706a
f304	2279	0x180003050
f3040	2280	0x180007070
f3041	2281	0x180007076
f3042	2282	0x18000707c
f3043	2283	0x180007082
f3044	2284	0x180007088
f3045	2285	0x18000708e
f3046	2286	0x180007094
f3047	2287	0x18000709a
f3048	2288	0x1800070a0
f3049	2289	0x1800070a6
f305	2290	0x180003056
f3050	2291	0x1800070ac
f3051	2292	0x1800070b2
f3052	2293	0x1800070b8
f3053	2294	0x1800070be
f3054	2295	0x1800070c4
f3055	2296	0x1800070ca
f3056	2297	0x1800070d0
f3057	2298	0x1800070d6
f3058	2299	0x1800070dc
f3059	2300	0x1800070e2
f306	2301	0x18000305c
f3060	2302	0x1800070e8
f3061	2303	0x1800070ee
f3062	2304	0x1800070f4
f3063	2305	0x1800070fa
f3064	2306	0x180007100
f3065	2307	0x180007106
f3066	2308	0x18000710c
f3067	2309	0x180007112
f3068	2310	0x180007118
f3069	2311	0x18000711e
f307	2312	0x180003062
f3070	2313	0x180007124
f3071	2314	0x18000712a
f3072	2315	0x180007130
f3073	2316	0x180007136
f3074	2317	0x18000713c
f3075	2318	0x180007142
f3076	2319	0x180007148
f3077	2320	0x18000714e
f3078	2321	0x180007154
f3079	2322	0x18000715a
f308	2323	0x180003068
f3080	2324	0x180007160
f3081	2325	0x180007166
f3082	2326	0x18000716c
f3083	2327	0x180007172
f3084	2328	0x180007178
f3085	2329	0x18000717e
f3086	2330	0x180007184
f3087	2331	0x18000718a
f3088	2332	0x180007190
f3089	2333	0x180007196
f309	2334	0x18000306e
f3090	2335	0x18000719c
f3091	2336	0x1800071a2
f3092	2337	0x1800071a8
f3093	2338	0x1800071ae
f3094	2339	0x1800071b4
f3095	2340	0x1800071ba
f3096	2341	0x1800071c0
f3097	2342	0x1800071c6
f3098	2343	0x1800071cc
f3099	2344	0x1800071d2
f31	2345	0x1800029ea
f310	2346	0x180003074
f3100	2347	0x1800071d8
f3101	2348	0x1800071de
f3102	2349	0x1800071e4
f3103	2350	0x1800071ea
f3104	2351	0x1800071f0
f3105	2352	0x1800071f6
f3106	2353	0x1800071fc
f3107	2354	0x180007202
f3108	2355	0x180007208
f3109	2356	0x18000720e
f311	2357	0x18000307a
f3110	2358	0x180007214
f3111	2359	0x18000721a
f3112	2360	0x180007220
f3113	2361	0x180007226
f3114	2362	0x18000722c
f3115	2363	0x180007232
f3116	2364	0x180007238
f3117	2365	0x18000723e
f3118	2366	0x180007244
f3119	2367	0x18000724a
f312	2368	0x180003080
f3120	2369	0x180007250
f3121	2370	0x180007256
f3122	2371	0x18000725c
f3123	2372	0x180007262
f3124	2373	0x180007268
f3125	2374	0x18000726e
f3126	2375	0x180007274
f3127	2376	0x18000727a
f3128	2377	0x180007280
f3129	2378	0x180007286
f313	2379	0x180003086
f3130	2380	0x18000728c
f3131	2381	0x180007292
f3132	2382	0x180007298
f3133	2383	0x18000729e
f3134	2384	0x1800072a4
f3135	2385	0x1800072aa
f3136	2386	0x1800072b0
f3137	2387	0x1800072b6
f3138	2388	0x1800072bc
f3139	2389	0x1800072c2
f314	2390	0x18000308c
f3140	2391	0x1800072c8
f3141	2392	0x1800072ce
f3142	2393	0x1800072d4
f3143	2394	0x1800072da
f3144	2395	0x1800072e0
f3145	2396	0x1800072e6
f3146	2397	0x1800072ec
f3147	2398	0x1800072f2
f3148	2399	0x1800072f8
f3149	2400	0x1800072fe
f315	2401	0x180003092
f3150	2402	0x180007304
f3151	2403	0x18000730a
f3152	2404	0x180007310
f3153	2405	0x180007316
f3154	2406	0x18000731c
f3155	2407	0x180007322
f3156	2408	0x180007328
f3157	2409	0x18000732e
f3158	2410	0x180007334
f3159	2411	0x18000733a
f316	2412	0x180003098
f3160	2413	0x180007340
f3161	2414	0x180007346
f3162	2415	0x18000734c
f3163	2416	0x180007352
f3164	2417	0x180007358
f3165	2418	0x18000735e
f3166	2419	0x180007364
f3167	2420	0x18000736a
f3168	2421	0x180007370
f3169	2422	0x180007376
f317	2423	0x18000309e
f3170	2424	0x18000737c
f3171	2425	0x180007382
f3172	2426	0x180007388
f3173	2427	0x18000738e
f3174	2428	0x180007394
f3175	2429	0x18000739a
f3176	2430	0x1800073a0
f3177	2431	0x1800073a6
f3178	2432	0x1800073ac
f3179	2433	0x1800073b2
f318	2434	0x1800030a4
f3180	2435	0x1800073b8
f3181	2436	0x1800073be
f3182	2437	0x1800073c4
f3183	2438	0x1800073ca
f3184	2439	0x1800073d0
f3185	2440	0x1800073d6
f3186	2441	0x1800073dc
f3187	2442	0x1800073e2
f3188	2443	0x1800073e8
f3189	2444	0x1800073ee
f319	2445	0x1800030aa
f3190	2446	0x1800073f4
f3191	2447	0x1800073fa
f3192	2448	0x180007400
f3193	2449	0x180007406
f3194	2450	0x18000740c
f3195	2451	0x180007412
f3196	2452	0x180007418
f3197	2453	0x18000741e
f3198	2454	0x180007424
f3199	2455	0x18000742a
f32	2456	0x1800029f0
f320	2457	0x1800030b0
f3200	2458	0x180007430
f3201	2459	0x180007436
f3202	2460	0x18000743c
f3203	2461	0x180007442
f3204	2462	0x180007448
f3205	2463	0x18000744e
f3206	2464	0x180007454
f3207	2465	0x18000745a
f3208	2466	0x180007460
f3209	2467	0x180007466
f321	2468	0x1800030b6
f3210	2469	0x18000746c
f3211	2470	0x180007472
f3212	2471	0x180007478
f3213	2472	0x18000747e
f3214	2473	0x180007484
f3215	2474	0x18000748a
f3216	2475	0x180007490
f3217	2476	0x180007496
f3218	2477	0x18000749c
f3219	2478	0x1800074a2
f322	2479	0x1800030bc
f3220	2480	0x1800074a8
f3221	2481	0x1800074ae
f3222	2482	0x1800074b4
f3223	2483	0x1800074ba
f3224	2484	0x1800074c0
f3225	2485	0x1800074c6
f3226	2486	0x1800074cc
f3227	2487	0x1800074d2
f3228	2488	0x1800074d8
f3229	2489	0x1800074de
f323	2490	0x1800030c2
f3230	2491	0x1800074e4
f3231	2492	0x1800074ea
f3232	2493	0x1800074f0
f3233	2494	0x1800074f6
f3234	2495	0x1800074fc
f3235	2496	0x180007502
f3236	2497	0x180007508
f3237	2498	0x18000750e
f3238	2499	0x180007514
f3239	2500	0x18000751a
f324	2501	0x1800030c8
f3240	2502	0x180007520
f3241	2503	0x180007526
f3242	2504	0x18000752c
f3243	2505	0x180007532
f3244	2506	0x180007538
f3245	2507	0x18000753e
f3246	2508	0x180007544
f3247	2509	0x18000754a
f3248	2510	0x180007550
f3249	2511	0x180007556
f325	2512	0x1800030ce
f3250	2513	0x18000755c
f3251	2514	0x180007562
f3252	2515	0x180007568
f3253	2516	0x18000756e
f3254	2517	0x180007574
f3255	2518	0x18000757a
f3256	2519	0x180007580
f3257	2520	0x180007586
f3258	2521	0x18000758c
f3259	2522	0x180007592
f326	2523	0x1800030d4
f3260	2524	0x180007598
f3261	2525	0x18000759e
f3262	2526	0x1800075a4
f3263	2527	0x1800075aa
f3264	2528	0x1800075b0
f3265	2529	0x1800075b6
f3266	2530	0x1800075bc
f3267	2531	0x1800075c2
f3268	2532	0x1800075c8
f3269	2533	0x1800075ce
f327	2534	0x1800030da
f3270	2535	0x1800075d4
f3271	2536	0x1800075da
f3272	2537	0x1800075e0
f3273	2538	0x1800075e6
f3274	2539	0x1800075ec
f3275	2540	0x1800075f2
f3276	2541	0x1800075f8
f3277	2542	0x1800075fe
f3278	2543	0x180007604
f3279	2544	0x18000760a
f328	2545	0x1800030e0
f3280	2546	0x180007610
f3281	2547	0x180007616
f3282	2548	0x18000761c
f3283	2549	0x180007622
f3284	2550	0x180007628
f3285	2551	0x18000762e
f3286	2552	0x180007634
f3287	2553	0x18000763a
f3288	2554	0x180007640
f3289	2555	0x180007646
f329	2556	0x1800030e6
f3290	2557	0x18000764c
f3291	2558	0x180007652
f3292	2559	0x180007658
f3293	2560	0x18000765e
f3294	2561	0x180007664
f3295	2562	0x18000766a
f3296	2563	0x180007670
f3297	2564	0x180007676
f3298	2565	0x18000767c
f3299	2566	0x180007682
f33	2567	0x1800029f6
f330	2568	0x1800030ec
f3300	2569	0x180007688
f3301	2570	0x18000768e
f3302	2571	0x180007694
f3303	2572	0x18000769a
f3304	2573	0x1800076a0
f3305	2574	0x1800076a6
f3306	2575	0x1800076ac
f3307	2576	0x1800076b2
f3308	2577	0x1800076b8
f3309	2578	0x1800076be
f331	2579	0x1800030f2
f3310	2580	0x1800076c4
f3311	2581	0x1800076ca
f3312	2582	0x1800076d0
f3313	2583	0x1800076d6
f3314	2584	0x1800076dc
f3315	2585	0x1800076e2
f3316	2586	0x1800076e8
f3317	2587	0x1800076ee
f3318	2588	0x1800076f4
f3319	2589	0x1800076fa
f332	2590	0x1800030f8
f3320	2591	0x180007700
f3321	2592	0x180007706
f3322	2593	0x18000770c
f3323	2594	0x180007712
f3324	2595	0x180007718
f3325	2596	0x18000771e
f3326	2597	0x180007724
f3327	2598	0x18000772a
f3328	2599	0x180007730
f3329	2600	0x180007736
f333	2601	0x1800030fe
f3330	2602	0x18000773c
f3331	2603	0x180007742
f3332	2604	0x180007748
f3333	2605	0x18000774e
f3334	2606	0x180007754
f3335	2607	0x18000775a
f3336	2608	0x180007760
f3337	2609	0x180007766
f3338	2610	0x18000776c
f3339	2611	0x180007772
f334	2612	0x180003104
f3340	2613	0x180007778
f3341	2614	0x18000777e
f3342	2615	0x180007784
f3343	2616	0x18000778a
f3344	2617	0x180007790
f3345	2618	0x180007796
f3346	2619	0x18000779c
f3347	2620	0x1800077a2
f3348	2621	0x1800077a8
f3349	2622	0x1800077ae
f335	2623	0x18000310a
f3350	2624	0x1800077b4
f3351	2625	0x1800077ba
f3352	2626	0x1800077c0
f3353	2627	0x1800077c6
f3354	2628	0x1800077cc
f3355	2629	0x1800077d2
f3356	2630	0x1800077d8
f3357	2631	0x1800077de
f3358	2632	0x1800077e4
f3359	2633	0x1800077ea
f336	2634	0x180003110
f3360	2635	0x1800077f0
f3361	2636	0x1800077f6
f3362	2637	0x1800077fc
f3363	2638	0x180007802
f3364	2639	0x180007808
f3365	2640	0x18000780e
f3366	2641	0x180007814
f3367	2642	0x18000781a
f3368	2643	0x180007820
f3369	2644	0x180007826
f337	2645	0x180003116
f3370	2646	0x18000782c
f3371	2647	0x180007832
f3372	2648	0x180007838
f3373	2649	0x18000783e
f3374	2650	0x180007844
f3375	2651	0x18000784a
f3376	2652	0x180007850
f3377	2653	0x180007856
f3378	2654	0x18000785c
f3379	2655	0x180007862
f338	2656	0x18000311c
f3380	2657	0x180007868
f3381	2658	0x18000786e
f3382	2659	0x180007874
f3383	2660	0x18000787a
f3384	2661	0x180007880
f3385	2662	0x180007886
f3386	2663	0x18000788c
f3387	2664	0x180007892
f3388	2665	0x180007898
f3389	2666	0x18000789e
f339	2667	0x180003122
f3390	2668	0x1800078a4
f3391	2669	0x1800078aa
f3392	2670	0x1800078b0
f3393	2671	0x1800078b6
f3394	2672	0x1800078bc
f3395	2673	0x1800078c2
f3396	2674	0x1800078c8
f3397	2675	0x1800078ce
f3398	2676	0x1800078d4
f3399	2677	0x1800078da
f34	2678	0x1800029fc
f340	2679	0x180003128
f3400	2680	0x1800078e0
f3401	2681	0x1800078e6
f3402	2682	0x1800078ec
f3403	2683	0x1800078f2
f3404	2684	0x1800078f8
f3405	2685	0x1800078fe
f3406	2686	0x180007904
f3407	2687	0x18000790a
f3408	2688	0x180007910
f3409	2689	0x180007916
f341	2690	0x18000312e
f3410	2691	0x18000791c
f3411	2692	0x180007922
f3412	2693	0x180007928
f3413	2694	0x18000792e
f3414	2695	0x180007934
f3415	2696	0x18000793a
f3416	2697	0x180007940
f3417	2698	0x180007946
f3418	2699	0x18000794c
f3419	2700	0x180007952
f342	2701	0x180003134
f3420	2702	0x180007958
f3421	2703	0x18000795e
f3422	2704	0x180007964
f3423	2705	0x18000796a
f3424	2706	0x180007970
f3425	2707	0x180007976
f3426	2708	0x18000797c
f3427	2709	0x180007982
f3428	2710	0x180007988
f3429	2711	0x18000798e
f343	2712	0x18000313a
f3430	2713	0x180007994
f3431	2714	0x18000799a
f3432	2715	0x1800079a0
f3433	2716	0x1800079a6
f3434	2717	0x1800079ac
f3435	2718	0x1800079b2
f3436	2719	0x1800079b8
f3437	2720	0x1800079be
f3438	2721	0x1800079c4
f3439	2722	0x1800079ca
f344	2723	0x180003140
f3440	2724	0x1800079d0
f3441	2725	0x1800079d6
f3442	2726	0x1800079dc
f3443	2727	0x1800079e2
f3444	2728	0x1800079e8
f3445	2729	0x1800079ee
f3446	2730	0x1800079f4
f3447	2731	0x1800079fa
f3448	2732	0x180007a00
f3449	2733	0x180007a06
f345	2734	0x180003146
f3450	2735	0x180007a0c
f3451	2736	0x180007a12
f3452	2737	0x180007a18
f3453	2738	0x180007a1e
f3454	2739	0x180007a24
f3455	2740	0x180007a2a
f3456	2741	0x180007a30
f3457	2742	0x180007a36
f3458	2743	0x180007a3c
f3459	2744	0x180007a42
f346	2745	0x18000314c
f3460	2746	0x180007a48
f3461	2747	0x180007a4e
f3462	2748	0x180007a54
f3463	2749	0x180007a5a
f3464	2750	0x180007a60
f3465	2751	0x180007a66
f3466	2752	0x180007a6c
f3467	2753	0x180007a72
f3468	2754	0x180007a78
f3469	2755	0x180007a7e
f347	2756	0x180003152
f3470	2757	0x180007a84
f3471	2758	0x180007a8a
f3472	2759	0x180007a90
f3473	2760	0x180007a96
f3474	2761	0x180007a9c
f3475	2762	0x180007aa2
f3476	2763	0x180007aa8
f3477	2764	0x180007aae
f3478	2765	0x180007ab4
f3479	2766	0x180007aba
f348	2767	0x180003158
f3480	2768	0x180007ac0
f3481	2769	0x180007ac6
f3482	2770	0x180007acc
f3483	2771	0x180007ad2
f3484	2772	0x180007ad8
f3485	2773	0x180007ade
f3486	2774	0x180007ae4
f3487	2775	0x180007aea
f3488	2776	0x180007af0
f3489	2777	0x180007af6
f349	2778	0x18000315e
f3490	2779	0x180007afc
f3491	2780	0x180007b02
f3492	2781	0x180007b08
f3493	2782	0x180007b0e
f3494	2783	0x180007b14
f3495	2784	0x180007b1a
f3496	2785	0x180007b20
f3497	2786	0x180007b26
f3498	2787	0x180007b2c
f3499	2788	0x180007b32
f35	2789	0x180002a02
f350	2790	0x180003164
f3500	2791	0x180007b38
f3501	2792	0x180007b3e
f3502	2793	0x180007b44
f3503	2794	0x180007b4a
f3504	2795	0x180007b50
f3505	2796	0x180007b56
f3506	2797	0x180007b5c
f3507	2798	0x180007b62
f3508	2799	0x180007b68
f3509	2800	0x180007b6e
f351	2801	0x18000316a
f3510	2802	0x180007b74
f3511	2803	0x180007b7a
f3512	2804	0x180007b80
f3513	2805	0x180007b86
f3514	2806	0x180007b8c
f3515	2807	0x180007b92
f3516	2808	0x180007b98
f3517	2809	0x180007b9e
f3518	2810	0x180007ba4
f3519	2811	0x180007baa
f352	2812	0x180003170
f3520	2813	0x180007bb0
f3521	2814	0x180007bb6
f3522	2815	0x180007bbc
f3523	2816	0x180007bc2
f3524	2817	0x180007bc8
f3525	2818	0x180007bce
f3526	2819	0x180007bd4
f3527	2820	0x180007bda
f3528	2821	0x180007be0
f3529	2822	0x180007be6
f353	2823	0x180003176
f3530	2824	0x180007bec
f3531	2825	0x180007bf2
f3532	2826	0x180007bf8
f3533	2827	0x180007bfe
f3534	2828	0x180007c04
f3535	2829	0x180007c0a
f3536	2830	0x180007c10
f3537	2831	0x180007c16
f3538	2832	0x180007c1c
f3539	2833	0x180007c22
f354	2834	0x18000317c
f3540	2835	0x180007c28
f3541	2836	0x180007c2e
f3542	2837	0x180007c34
f3543	2838	0x180007c3a
f3544	2839	0x180007c40
f3545	2840	0x180007c46
f3546	2841	0x180007c4c
f3547	2842	0x180007c52
f3548	2843	0x180007c58
f3549	2844	0x180007c5e
f355	2845	0x180003182
f3550	2846	0x180007c64
f3551	2847	0x180007c6a
f3552	2848	0x180007c70
f3553	2849	0x180007c76
f3554	2850	0x180007c7c
f3555	2851	0x180007c82
f3556	2852	0x180007c88
f3557	2853	0x180007c8e
f3558	2854	0x180007c94
f3559	2855	0x180007c9a
f356	2856	0x180003188
f3560	2857	0x180007ca0
f3561	2858	0x180007ca6
f3562	2859	0x180007cac
f3563	2860	0x180007cb2
f3564	2861	0x180007cb8
f3565	2862	0x180007cbe
f3566	2863	0x180007cc4
f3567	2864	0x180007cca
f3568	2865	0x180007cd0
f3569	2866	0x180007cd6
f357	2867	0x18000318e
f3570	2868	0x180007cdc
f3571	2869	0x180007ce2
f3572	2870	0x180007ce8
f3573	2871	0x180007cee
f3574	2872	0x180007cf4
f3575	2873	0x180007cfa
f3576	2874	0x180007d00
f3577	2875	0x180007d06
f3578	2876	0x180007d0c
f3579	2877	0x180007d12
f358	2878	0x180003194
f3580	2879	0x180007d18
f3581	2880	0x180007d1e
f3582	2881	0x180007d24
f3583	2882	0x180007d2a
f3584	2883	0x180007d30
f3585	2884	0x180007d36
f3586	2885	0x180007d3c
f3587	2886	0x180007d42
f3588	2887	0x180007d48
f3589	2888	0x180007d4e
f359	2889	0x18000319a
f3590	2890	0x180007d54
f3591	2891	0x180007d5a
f3592	2892	0x180007d60
f3593	2893	0x180007d66
f3594	2894	0x180007d6c
f3595	2895	0x180007d72
f3596	2896	0x180007d78
f3597	2897	0x180007d7e
f3598	2898	0x180007d84
f3599	2899	0x180007d8a
f36	2900	0x180002a08
f360	2901	0x1800031a0
f3600	2902	0x180007d90
f3601	2903	0x180007d96
f3602	2904	0x180007d9c
f3603	2905	0x180007da2
f3604	2906	0x180007da8
f3605	2907	0x180007dae
f3606	2908	0x180007db4
f3607	2909	0x180007dba
f3608	2910	0x180007dc0
f3609	2911	0x180007dc6
f361	2912	0x1800031a6
f3610	2913	0x180007dcc
f3611	2914	0x180007dd2
f3612	2915	0x180007dd8
f3613	2916	0x180007dde
f3614	2917	0x180007de4
f3615	2918	0x180007dea
f3616	2919	0x180007df0
f3617	2920	0x180007df6
f3618	2921	0x180007dfc
f3619	2922	0x180007e02
f362	2923	0x1800031ac
f3620	2924	0x180007e08
f3621	2925	0x180007e0e
f3622	2926	0x180007e14
f3623	2927	0x180007e1a
f3624	2928	0x180007e20
f3625	2929	0x180007e26
f3626	2930	0x180007e2c
f3627	2931	0x180007e32
f3628	2932	0x180007e38
f3629	2933	0x180007e3e
f363	2934	0x1800031b2
f3630	2935	0x180007e44
f3631	2936	0x180007e4a
f3632	2937	0x180007e50
f3633	2938	0x180007e56
f3634	2939	0x180007e5c
f3635	2940	0x180007e62
f3636	2941	0x180007e68
f3637	2942	0x180007e6e
f3638	2943	0x180007e74
f3639	2944	0x180007e7a
f364	2945	0x1800031b8
f3640	2946	0x180007e80
f3641	2947	0x180007e86
f3642	2948	0x180007e8c
f3643	2949	0x180007e92
f3644	2950	0x180007e98
f3645	2951	0x180007e9e
f3646	2952	0x180007ea4
f3647	2953	0x180007eaa
f3648	2954	0x180007eb0
f3649	2955	0x180007eb6
f365	2956	0x1800031be
f3650	2957	0x180007ebc
f3651	2958	0x180007ec2
f3652	2959	0x180007ec8
f3653	2960	0x180007ece
f3654	2961	0x180007ed4
f3655	2962	0x180007eda
f3656	2963	0x180007ee0
f3657	2964	0x180007ee6
f3658	2965	0x180007eec
f3659	2966	0x180007ef2
f366	2967	0x1800031c4
f3660	2968	0x180007ef8
f3661	2969	0x180007efe
f3662	2970	0x180007f04
f3663	2971	0x180007f0a
f3664	2972	0x180007f10
f3665	2973	0x180007f16
f3666	2974	0x180007f1c
f3667	2975	0x180007f22
f3668	2976	0x180007f28
f3669	2977	0x180007f2e
f367	2978	0x1800031ca
f3670	2979	0x180007f34
f3671	2980	0x180007f3a
f3672	2981	0x180007f40
f3673	2982	0x180007f46
f3674	2983	0x180007f4c
f3675	2984	0x180007f52
f3676	2985	0x180007f58
f3677	2986	0x180007f5e
f3678	2987	0x180007f64
f3679	2988	0x180007f6a
f368	2989	0x1800031d0
f3680	2990	0x180007f70
f3681	2991	0x180007f76
f3682	2992	0x180007f7c
f3683	2993	0x180007f82
f3684	2994	0x180007f88
f3685	2995	0x180007f8e
f3686	2996	0x180007f94
f3687	2997	0x180007f9a
f3688	2998	0x180007fa0
f3689	2999	0x180007fa6
f369	3000	0x1800031d6
f3690	3001	0x180007fac
f3691	3002	0x180007fb2
f3692	3003	0x180007fb8
f3693	3004	0x180007fbe
f3694	3005	0x180007fc4
f3695	3006	0x180007fca
f3696	3007	0x180007fd0
f3697	3008	0x180007fd6
f3698	3009	0x180007fdc
f3699	3010	0x180007fe2
f37	3011	0x180002a0e
f370	3012	0x1800031dc
f3700	3013	0x180007fe8
f3701	3014	0x180007fee
f3702	3015	0x180007ff4
f3703	3016	0x180007ffa
f3704	3017	0x180008000
f3705	3018	0x180008006
f3706	3019	0x18000800c
f3707	3020	0x180008012
f3708	3021	0x180008018
f3709	3022	0x18000801e
f371	3023	0x1800031e2
f3710	3024	0x180008024
f3711	3025	0x18000802a
f3712	3026	0x180008030
f3713	3027	0x180008036
f3714	3028	0x18000803c
f3715	3029	0x180008042
f3716	3030	0x180008048
f3717	3031	0x18000804e
f3718	3032	0x180008054
f3719	3033	0x18000805a
f372	3034	0x1800031e8
f3720	3035	0x180008060
f3721	3036	0x180008066
f3722	3037	0x18000806c
f3723	3038	0x180008072
f3724	3039	0x180008078
f3725	3040	0x18000807e
f3726	3041	0x180008084
f3727	3042	0x18000808a
f3728	3043	0x180008090
f3729	3044	0x180008096
f373	3045	0x1800031ee
f3730	3046	0x18000809c
f3731	3047	0x1800080a2
f3732	3048	0x1800080a8
f3733	3049	0x1800080ae
f3734	3050	0x1800080b4
f3735	3051	0x1800080ba
f3736	3052	0x1800080c0
f3737	3053	0x1800080c6
f3738	3054	0x1800080cc
f3739	3055	0x1800080d2
f374	3056	0x1800031f4
f3740	3057	0x1800080d8
f3741	3058	0x1800080de
f3742	3059	0x1800080e4
f3743	3060	0x1800080ea
f3744	3061	0x1800080f0
f3745	3062	0x1800080f6
f3746	3063	0x1800080fc
f3747	3064	0x180008102
f3748	3065	0x180008108
f3749	3066	0x18000810e
f375	3067	0x1800031fa
f3750	3068	0x180008114
f3751	3069	0x18000811a
f3752	3070	0x180008120
f3753	3071	0x180008126
f3754	3072	0x18000812c
f3755	3073	0x180008132
f3756	3074	0x180008138
f3757	3075	0x18000813e
f3758	3076	0x180008144
f3759	3077	0x18000814a
f376	3078	0x180003200
f3760	3079	0x180008150
f3761	3080	0x180008156
f3762	3081	0x18000815c
f3763	3082	0x180008162
f3764	3083	0x180008168
f3765	3084	0x18000816e
f3766	3085	0x180008174
f3767	3086	0x18000817a
f3768	3087	0x180008180
f3769	3088	0x180008186
f377	3089	0x180003206
f3770	3090	0x18000818c
f3771	3091	0x180008192
f3772	3092	0x180008198
f3773	3093	0x18000819e
f3774	3094	0x1800081a4
f3775	3095	0x1800081aa
f3776	3096	0x1800081b0
f3777	3097	0x1800081b6
f3778	3098	0x1800081bc
f3779	3099	0x1800081c2
f378	3100	0x18000320c
f3780	3101	0x1800081c8
f3781	3102	0x1800081ce
f3782	3103	0x1800081d4
f3783	3104	0x1800081da
f3784	3105	0x1800081e0
f3785	3106	0x1800081e6
f3786	3107	0x1800081ec
f3787	3108	0x1800081f2
f3788	3109	0x1800081f8
f3789	3110	0x1800081fe
f379	3111	0x180003212
f3790	3112	0x180008204
f3791	3113	0x18000820a
f3792	3114	0x180008210
f3793	3115	0x180008216
f3794	3116	0x18000821c
f3795	3117	0x180008222
f3796	3118	0x180008228
f3797	3119	0x18000822e
f3798	3120	0x180008234
f3799	3121	0x18000823a
f38	3122	0x180002a14
f380	3123	0x180003218
f3800	3124	0x180008240
f3801	3125	0x180008246
f3802	3126	0x18000824c
f3803	3127	0x180008252
f3804	3128	0x180008258
f3805	3129	0x18000825e
f3806	3130	0x180008264
f3807	3131	0x18000826a
f3808	3132	0x180008270
f3809	3133	0x180008276
f381	3134	0x18000321e
f3810	3135	0x18000827c
f3811	3136	0x180008282
f3812	3137	0x180008288
f3813	3138	0x18000828e
f3814	3139	0x180008294
f3815	3140	0x18000829a
f3816	3141	0x1800082a0
f3817	3142	0x1800082a6
f3818	3143	0x1800082ac
f3819	3144	0x1800082b2
f382	3145	0x180003224
f3820	3146	0x1800082b8
f3821	3147	0x1800082be
f3822	3148	0x1800082c4
f3823	3149	0x1800082ca
f3824	3150	0x1800082d0
f3825	3151	0x1800082d6
f3826	3152	0x1800082dc
f3827	3153	0x1800082e2
f3828	3154	0x1800082e8
f3829	3155	0x1800082ee
f383	3156	0x18000322a
f3830	3157	0x1800082f4
f3831	3158	0x1800082fa
f3832	3159	0x180008300
f3833	3160	0x180008306
f3834	3161	0x18000830c
f3835	3162	0x180008312
f3836	3163	0x180008318
f3837	3164	0x18000831e
f3838	3165	0x180008324
f3839	3166	0x18000832a
f384	3167	0x180003230
f3840	3168	0x180008330
f3841	3169	0x180008336
f3842	3170	0x18000833c
f3843	3171	0x180008342
f3844	3172	0x180008348
f3845	3173	0x18000834e
f3846	3174	0x180008354
f3847	3175	0x18000835a
f3848	3176	0x180008360
f3849	3177	0x180008366
f385	3178	0x180003236
f3850	3179	0x18000836c
f3851	3180	0x180008372
f3852	3181	0x180008378
f3853	3182	0x18000837e
f3854	3183	0x180008384
f3855	3184	0x18000838a
f3856	3185	0x180008390
f3857	3186	0x180008396
f3858	3187	0x18000839c
f3859	3188	0x1800083a2
f386	3189	0x18000323c
f3860	3190	0x1800083a8
f3861	3191	0x1800083ae
f3862	3192	0x1800083b4
f3863	3193	0x1800083ba
f3864	3194	0x1800083c0
f3865	3195	0x1800083c6
f3866	3196	0x1800083cc
f3867	3197	0x1800083d2
f3868	3198	0x1800083d8
f3869	3199	0x1800083de
f387	3200	0x180003242
f3870	3201	0x1800083e4
f3871	3202	0x1800083ea
f3872	3203	0x1800083f0
f3873	3204	0x1800083f6
f3874	3205	0x1800083fc
f3875	3206	0x180008402
f3876	3207	0x180008408
f3877	3208	0x18000840e
f3878	3209	0x180008414
f3879	3210	0x18000841a
f388	3211	0x180003248
f3880	3212	0x180008420
f3881	3213	0x180008426
f3882	3214	0x18000842c
f3883	3215	0x180008432
f3884	3216	0x180008438
f3885	3217	0x18000843e
f3886	3218	0x180008444
f3887	3219	0x18000844a
f3888	3220	0x180008450
f3889	3221	0x180008456
f389	3222	0x18000324e
f3890	3223	0x18000845c
f3891	3224	0x180008462
f3892	3225	0x180008468
f3893	3226	0x18000846e
f3894	3227	0x180008474
f3895	3228	0x18000847a
f3896	3229	0x180008480
f3897	3230	0x180008486
f3898	3231	0x18000848c
f3899	3232	0x180008492
f39	3233	0x180002a1a
f390	3234	0x180003254
f3900	3235	0x180008498
f3901	3236	0x18000849e
f3902	3237	0x1800084a4
f3903	3238	0x1800084aa
f3904	3239	0x1800084b0
f3905	3240	0x1800084b6
f3906	3241	0x1800084bc
f3907	3242	0x1800084c2
f3908	3243	0x1800084c8
f3909	3244	0x1800084ce
f391	3245	0x18000325a
f3910	3246	0x1800084d4
f3911	3247	0x1800084da
f3912	3248	0x1800084e0
f3913	3249	0x1800084e6
f3914	3250	0x1800084ec
f3915	3251	0x1800084f2
f3916	3252	0x1800084f8
f3917	3253	0x1800084fe
f3918	3254	0x180008504
f3919	3255	0x18000850a
f392	3256	0x180003260
f3920	3257	0x180008510
f3921	3258	0x180008516
f3922	3259	0x18000851c
f3923	3260	0x180008522
f3924	3261	0x180008528
f3925	3262	0x18000852e
f3926	3263	0x180008534
f3927	3264	0x18000853a
f3928	3265	0x180008540
f3929	3266	0x180008546
f393	3267	0x180003266
f3930	3268	0x18000854c
f3931	3269	0x180008552
f3932	3270	0x180008558
f3933	3271	0x18000855e
f3934	3272	0x180008564
f3935	3273	0x18000856a
f3936	3274	0x180008570
f3937	3275	0x180008576
f3938	3276	0x18000857c
f3939	3277	0x180008582
f394	3278	0x18000326c
f3940	3279	0x180008588
f3941	3280	0x18000858e
f3942	3281	0x180008594
f3943	3282	0x18000859a
f3944	3283	0x1800085a0
f3945	3284	0x1800085a6
f3946	3285	0x1800085ac
f3947	3286	0x1800085b2
f3948	3287	0x1800085b8
f3949	3288	0x1800085be
f395	3289	0x180003272
f3950	3290	0x1800085c4
f3951	3291	0x1800085ca
f3952	3292	0x1800085d0
f3953	3293	0x1800085d6
f3954	3294	0x1800085dc
f3955	3295	0x1800085e2
f3956	3296	0x1800085e8
f3957	3297	0x1800085ee
f3958	3298	0x1800085f4
f3959	3299	0x1800085fa
f396	3300	0x180003278
f3960	3301	0x180008600
f3961	3302	0x180008606
f3962	3303	0x18000860c
f3963	3304	0x180008612
f3964	3305	0x180008618
f3965	3306	0x18000861e
f3966	3307	0x180008624
f3967	3308	0x18000862a
f3968	3309	0x180008630
f3969	3310	0x180008636
f397	3311	0x18000327e
f3970	3312	0x18000863c
f3971	3313	0x180008642
f3972	3314	0x180008648
f3973	3315	0x18000864e
f3974	3316	0x180008654
f3975	3317	0x18000865a
f3976	3318	0x180008660
f3977	3319	0x180008666
f3978	3320	0x18000866c
f3979	3321	0x180008672
f398	3322	0x180003284
f3980	3323	0x180008678
f3981	3324	0x18000867e
f3982	3325	0x180008684
f3983	3326	0x18000868a
f3984	3327	0x180008690
f3985	3328	0x180008696
f3986	3329	0x18000869c
f3987	3330	0x1800086a2
f3988	3331	0x1800086a8
f3989	3332	0x1800086ae
f399	3333	0x18000328a
f3990	3334	0x1800086b4
f3991	3335	0x1800086ba
f3992	3336	0x1800086c0
f3993	3337	0x1800086c6
f3994	3338	0x1800086cc
f3995	3339	0x1800086d2
f3996	3340	0x1800086d8
f3997	3341	0x1800086de
f3998	3342	0x1800086e4
f3999	3343	0x1800086ea
f4	3344	0x180002948
f40	3345	0x180002a20
f400	3346	0x180003290
f4000	3347	0x1800086f0
f4001	3348	0x1800086f6
f4002	3349	0x1800086fc
f4003	3350	0x180008702
f4004	3351	0x180008708
f4005	3352	0x18000870e
f4006	3353	0x180008714
f4007	3354	0x18000871a
f4008	3355	0x180008720
f4009	3356	0x180008726
f401	3357	0x180003296
f4010	3358	0x18000872c
f4011	3359	0x180008732
f4012	3360	0x180008738
f4013	3361	0x18000873e
f4014	3362	0x180008744
f4015	3363	0x18000874a
f4016	3364	0x180008750
f4017	3365	0x180008756
f4018	3366	0x18000875c
f4019	3367	0x180008762
f402	3368	0x18000329c
f4020	3369	0x180008768
f4021	3370	0x18000876e
f4022	3371	0x180008774
f4023	3372	0x18000877a
f4024	3373	0x180008780
f4025	3374	0x180008786
f4026	3375	0x18000878c
f4027	3376	0x180008792
f4028	3377	0x180008798
f4029	3378	0x18000879e
f403	3379	0x1800032a2
f4030	3380	0x1800087a4
f4031	3381	0x1800087aa
f4032	3382	0x1800087b0
f4033	3383	0x1800087b6
f4034	3384	0x1800087bc
f4035	3385	0x1800087c2
f4036	3386	0x1800087c8
f4037	3387	0x1800087ce
f4038	3388	0x1800087d4
f4039	3389	0x1800087da
f404	3390	0x1800032a8
f4040	3391	0x1800087e0
f4041	3392	0x1800087e6
f4042	3393	0x1800087ec
f4043	3394	0x1800087f2
f4044	3395	0x1800087f8
f4045	3396	0x1800087fe
f4046	3397	0x180008804
f4047	3398	0x18000880a
f4048	3399	0x180008810
f4049	3400	0x180008816
f405	3401	0x1800032ae
f4050	3402	0x18000881c
f4051	3403	0x180008822
f4052	3404	0x180008828
f4053	3405	0x18000882e
f4054	3406	0x180008834
f4055	3407	0x18000883a
f4056	3408	0x180008840
f4057	3409	0x180008846
f4058	3410	0x18000884c
f4059	3411	0x180008852
f406	3412	0x1800032b4
f4060	3413	0x180008858
f4061	3414	0x18000885e
f4062	3415	0x180008864
f4063	3416	0x18000886a
f4064	3417	0x180008870
f4065	3418	0x180008876
f4066	3419	0x18000887c
f4067	3420	0x180008882
f4068	3421	0x180008888
f4069	3422	0x18000888e
f407	3423	0x1800032ba
f4070	3424	0x180008894
f4071	3425	0x18000889a
f4072	3426	0x1800088a0
f4073	3427	0x1800088a6
f4074	3428	0x1800088ac
f4075	3429	0x1800088b2
f4076	3430	0x1800088b8
f4077	3431	0x1800088be
f4078	3432	0x1800088c4
f4079	3433	0x1800088ca
f408	3434	0x1800032c0
f4080	3435	0x1800088d0
f4081	3436	0x1800088d6
f4082	3437	0x1800088dc
f4083	3438	0x1800088e2
f4084	3439	0x1800088e8
f4085	3440	0x1800088ee
f4086	3441	0x1800088f4
f4087	3442	0x1800088fa
f4088	3443	0x180008900
f4089	3444	0x180008906
f409	3445	0x1800032c6
f4090	3446	0x18000890c
f4091	3447	0x180008912
f4092	3448	0x180008918
f4093	3449	0x18000891e
f4094	3450	0x180008924
f4095	3451	0x18000892a
f4096	3452	0x180008930
f4097	3453	0x180008936
f4098	3454	0x18000893c
f4099	3455	0x180008942
f41	3456	0x180002a26
f410	3457	0x1800032cc
f4100	3458	0x180008948
f4101	3459	0x18000894e
f4102	3460	0x180008954
f4103	3461	0x18000895a
f4104	3462	0x180008960
f4105	3463	0x180008966
f4106	3464	0x18000896c
f4107	3465	0x180008972
f4108	3466	0x180008978
f4109	3467	0x18000897e
f411	3468	0x1800032d2
f4110	3469	0x180008984
f4111	3470	0x18000898a
f4112	3471	0x180008990
f4113	3472	0x180008996
f4114	3473	0x18000899c
f4115	3474	0x1800089a2
f4116	3475	0x1800089a8
f4117	3476	0x1800089ae
f4118	3477	0x1800089b4
f4119	3478	0x1800089ba
f412	3479	0x1800032d8
f4120	3480	0x1800089c0
f4121	3481	0x1800089c6
f4122	3482	0x1800089cc
f4123	3483	0x1800089d2
f4124	3484	0x1800089d8
f4125	3485	0x1800089de
f4126	3486	0x1800089e4
f4127	3487	0x1800089ea
f4128	3488	0x1800089f0
f4129	3489	0x1800089f6
f413	3490	0x1800032de
f4130	3491	0x1800089fc
f4131	3492	0x180008a02
f4132	3493	0x180008a08
f4133	3494	0x180008a0e
f4134	3495	0x180008a14
f4135	3496	0x180008a1a
f4136	3497	0x180008a20
f4137	3498	0x180008a26
f4138	3499	0x180008a2c
f4139	3500	0x180008a32
f414	3501	0x1800032e4
f4140	3502	0x180008a38
f4141	3503	0x180008a3e
f4142	3504	0x180008a44
f4143	3505	0x180008a4a
f4144	3506	0x180008a50
f4145	3507	0x180008a56
f4146	3508	0x180008a5c
f4147	3509	0x180008a62
f4148	3510	0x180008a68
f4149	3511	0x180008a6e
f415	3512	0x1800032ea
f4150	3513	0x180008a74
f4151	3514	0x180008a7a
f4152	3515	0x180008a80
f4153	3516	0x180008a86
f4154	3517	0x180008a8c
f4155	3518	0x180008a92
f4156	3519	0x180008a98
f4157	3520	0x180008a9e
f4158	3521	0x180008aa4
f4159	3522	0x180008aaa
f416	3523	0x1800032f0
f4160	3524	0x180008ab0
f4161	3525	0x180008ab6
f4162	3526	0x180008abc
f4163	3527	0x180008ac2
f4164	3528	0x180008ac8
f4165	3529	0x180008ace
f4166	3530	0x180008ad4
f4167	3531	0x180008ada
f4168	3532	0x180008ae0
f4169	3533	0x180008ae6
f417	3534	0x1800032f6
f4170	3535	0x180008aec
f4171	3536	0x180008af2
f4172	3537	0x180008af8
f4173	3538	0x180008afe
f4174	3539	0x180008b04
f4175	3540	0x180008b0a
f4176	3541	0x180008b10
f4177	3542	0x180008b16
f4178	3543	0x180008b1c
f4179	3544	0x180008b22
f418	3545	0x1800032fc
f4180	3546	0x180008b28
f4181	3547	0x180008b2e
f4182	3548	0x180008b34
f4183	3549	0x180008b3a
f4184	3550	0x180008b40
f4185	3551	0x180008b46
f4186	3552	0x180008b4c
f4187	3553	0x180008b52
f4188	3554	0x180008b58
f4189	3555	0x180008b5e
f419	3556	0x180003302
f4190	3557	0x180008b64
f4191	3558	0x180008b6a
f4192	3559	0x180008b70
f4193	3560	0x180008b76
f4194	3561	0x180008b7c
f4195	3562	0x180008b82
f4196	3563	0x180008b88
f4197	3564	0x180008b8e
f4198	3565	0x180008b94
f4199	3566	0x180008b9a
f42	3567	0x180002a2c
f420	3568	0x180003308
f4200	3569	0x180008ba0
f4201	3570	0x180008ba6
f4202	3571	0x180008bac
f4203	3572	0x180008bb2
f4204	3573	0x180008bb8
f4205	3574	0x180008bbe
f4206	3575	0x180008bc4
f4207	3576	0x180008bca
f4208	3577	0x180008bd0
f4209	3578	0x180008bd6
f421	3579	0x18000330e
f4210	3580	0x180008bdc
f4211	3581	0x180008be2
f4212	3582	0x180008be8
f4213	3583	0x180008bee
f4214	3584	0x180008bf4
f4215	3585	0x180008bfa
f4216	3586	0x180008c00
f4217	3587	0x180008c06
f4218	3588	0x180008c0c
f4219	3589	0x180008c12
f422	3590	0x180003314
f4220	3591	0x180008c18
f4221	3592	0x180008c1e
f4222	3593	0x180008c24
f4223	3594	0x180008c2a
f4224	3595	0x180008c30
f4225	3596	0x180008c36
f4226	3597	0x180008c3c
f4227	3598	0x180008c42
f4228	3599	0x180008c48
f4229	3600	0x180008c4e
f423	3601	0x18000331a
f4230	3602	0x180008c54
f4231	3603	0x180008c5a
f4232	3604	0x180008c60
f4233	3605	0x180008c66
f4234	3606	0x180008c6c
f4235	3607	0x180008c72
f4236	3608	0x180008c78
f4237	3609	0x180008c7e
f4238	3610	0x180008c84
f4239	3611	0x180008c8a
f424	3612	0x180003320
f4240	3613	0x180008c90
f4241	3614	0x180008c96
f4242	3615	0x180008c9c
f4243	3616	0x180008ca2
f4244	3617	0x180008ca8
f4245	3618	0x180008cae
f4246	3619	0x180008cb4
f4247	3620	0x180008cba
f4248	3621	0x180008cc0
f4249	3622	0x180008cc6
f425	3623	0x180003326
f4250	3624	0x180008ccc
f4251	3625	0x180008cd2
f4252	3626	0x180008cd8
f4253	3627	0x180008cde
f4254	3628	0x180008ce4
f4255	3629	0x180008cea
f4256	3630	0x180008cf0
f4257	3631	0x180008cf6
f4258	3632	0x180008cfc
f4259	3633	0x180008d02
f426	3634	0x18000332c
f4260	3635	0x180008d08
f4261	3636	0x180008d0e
f4262	3637	0x180008d14
f4263	3638	0x180008d1a
f4264	3639	0x180008d20
f4265	3640	0x180008d26
f4266	3641	0x180008d2c
f4267	3642	0x180008d32
f4268	3643	0x180008d38
f4269	3644	0x180008d3e
f427	3645	0x180003332
f4270	3646	0x180008d44
f4271	3647	0x180008d4a
f4272	3648	0x180008d50
f4273	3649	0x180008d56
f4274	3650	0x180008d5c
f4275	3651	0x180008d62
f4276	3652	0x180008d68
f4277	3653	0x180008d6e
f4278	3654	0x180008d74
f4279	3655	0x180008d7a
f428	3656	0x180003338
f4280	3657	0x180008d80
f4281	3658	0x180008d86
f4282	3659	0x180008d8c
f4283	3660	0x180008d92
f4284	3661	0x180008d98
f4285	3662	0x180008d9e
f4286	3663	0x180008da4
f4287	3664	0x180008daa
f4288	3665	0x180008db0
f4289	3666	0x180008db6
f429	3667	0x18000333e
f4290	3668	0x180008dbc
f4291	3669	0x180008dc2
f4292	3670	0x180008dc8
f4293	3671	0x180008dce
f4294	3672	0x180008dd4
f4295	3673	0x180008dda
f4296	3674	0x180008de0
f4297	3675	0x180008de6
f4298	3676	0x180008dec
f4299	3677	0x180008df2
f43	3678	0x180002a32
f430	3679	0x180003344
f4300	3680	0x180008df8
f4301	3681	0x180008dfe
f4302	3682	0x180008e04
f4303	3683	0x180008e0a
f4304	3684	0x180008e10
f4305	3685	0x180008e16
f4306	3686	0x180008e1c
f4307	3687	0x180008e22
f4308	3688	0x180008e28
f4309	3689	0x180008e2e
f431	3690	0x18000334a
f4310	3691	0x180008e34
f4311	3692	0x180008e3a
f4312	3693	0x180008e40
f4313	3694	0x180008e46
f4314	3695	0x180008e4c
f4315	3696	0x180008e52
f4316	3697	0x180008e58
f4317	3698	0x180008e5e
f4318	3699	0x180008e64
f4319	3700	0x180008e6a
f432	3701	0x180003350
f4320	3702	0x180008e70
f4321	3703	0x180008e76
f4322	3704	0x180008e7c
f4323	3705	0x180008e82
f4324	3706	0x180008e88
f4325	3707	0x180008e8e
f4326	3708	0x180008e94
f4327	3709	0x180008e9a
f4328	3710	0x180008ea0
f4329	3711	0x180008ea6
f433	3712	0x180003356
f4330	3713	0x180008eac
f4331	3714	0x180008eb2
f4332	3715	0x180008eb8
f4333	3716	0x180008ebe
f4334	3717	0x180008ec4
f4335	3718	0x180008eca
f4336	3719	0x180008ed0
f4337	3720	0x180008ed6
f4338	3721	0x180008edc
f4339	3722	0x180008ee2
f434	3723	0x18000335c
f4340	3724	0x180008ee8
f4341	3725	0x180008eee
f4342	3726	0x180008ef4
f4343	3727	0x180008efa
f4344	3728	0x180008f00
f4345	3729	0x180008f06
f4346	3730	0x180008f0c
f4347	3731	0x180008f12
f4348	3732	0x180008f18
f4349	3733	0x180008f1e
f435	3734	0x180003362
f4350	3735	0x180008f24
f4351	3736	0x180008f2a
f4352	3737	0x180008f30
f4353	3738	0x180008f36
f4354	3739	0x180008f3c
f4355	3740	0x180008f42
f4356	3741	0x180008f48
f4357	3742	0x180008f4e
f4358	3743	0x180008f54
f4359	3744	0x180008f5a
f436	3745	0x180003368
f4360	3746	0x180008f60
f4361	3747	0x180008f66
f4362	3748	0x180008f6c
f4363	3749	0x180008f72
f4364	3750	0x180008f78
f4365	3751	0x180008f7e
f4366	3752	0x180008f84
f4367	3753	0x180008f8a
f4368	3754	0x180008f90
f4369	3755	0x180008f96
f437	3756	0x18000336e
f4370	3757	0x180008f9c
f4371	3758	0x180008fa2
f4372	3759	0x180008fa8
f4373	3760	0x180008fae
f4374	3761	0x180008fb4
f4375	3762	0x180008fba
f4376	3763	0x180008fc0
f4377	3764	0x180008fc6
f4378	3765	0x180008fcc
f4379	3766	0x180008fd2
f438	3767	0x180003374
f4380	3768	0x180008fd8
f4381	3769	0x180008fde
f4382	3770	0x180008fe4
f4383	3771	0x180008fea
f4384	3772	0x180008ff0
f4385	3773	0x180008ff6
f4386	3774	0x180008ffc
f4387	3775	0x180009002
f4388	3776	0x180009008
f4389	3777	0x18000900e
f439	3778	0x18000337a
f4390	3779	0x180009014
f4391	3780	0x18000901a
f4392	3781	0x180009020
f4393	3782	0x180009026
f4394	3783	0x18000902c
f4395	3784	0x180009032
f4396	3785	0x180009038
f4397	3786	0x18000903e
f4398	3787	0x180009044
f4399	3788	0x18000904a
f44	3789	0x180002a38
f440	3790	0x180003380
f4400	3791	0x180009050
f4401	3792	0x180009056
f4402	3793	0x18000905c
f4403	3794	0x180009062
f4404	3795	0x180009068
f4405	3796	0x18000906e
f4406	3797	0x180009074
f4407	3798	0x18000907a
f4408	3799	0x180009080
f4409	3800	0x180009086
f441	3801	0x180003386
f4410	3802	0x18000908c
f4411	3803	0x180009092
f4412	3804	0x180009098
f4413	3805	0x18000909e
f4414	3806	0x1800090a4
f4415	3807	0x1800090aa
f4416	3808	0x1800090b0
f4417	3809	0x1800090b6
f4418	3810	0x1800090bc
f4419	3811	0x1800090c2
f442	3812	0x18000338c
f4420	3813	0x1800090c8
f4421	3814	0x1800090ce
f4422	3815	0x1800090d4
f4423	3816	0x1800090da
f4424	3817	0x1800090e0
f4425	3818	0x1800090e6
f4426	3819	0x1800090ec
f4427	3820	0x1800090f2
f4428	3821	0x1800090f8
f4429	3822	0x1800090fe
f443	3823	0x180003392
f4430	3824	0x180009104
f4431	3825	0x18000910a
f4432	3826	0x180009110
f4433	3827	0x180009116
f4434	3828	0x18000911c
f4435	3829	0x180009122
f4436	3830	0x180009128
f4437	3831	0x18000912e
f4438	3832	0x180009134
f4439	3833	0x18000913a
f444	3834	0x180003398
f4440	3835	0x180009140
f4441	3836	0x180009146
f4442	3837	0x18000914c
f4443	3838	0x180009152
f4444	3839	0x180009158
f4445	3840	0x18000915e
f4446	3841	0x180009164
f4447	3842	0x18000916a
f4448	3843	0x180009170
f4449	3844	0x180009176
f445	3845	0x18000339e
f4450	3846	0x18000917c
f4451	3847	0x180009182
f4452	3848	0x180009188
f4453	3849	0x18000918e
f4454	3850	0x180009194
f4455	3851	0x18000919a
f4456	3852	0x1800091a0
f4457	3853	0x1800091a6
f4458	3854	0x1800091ac
f4459	3855	0x1800091b2
f446	3856	0x1800033a4
f4460	3857	0x1800091b8
f4461	3858	0x1800091be
f4462	3859	0x1800091c4
f4463	3860	0x1800091ca
f4464	3861	0x1800091d0
f4465	3862	0x1800091d6
f4466	3863	0x1800091dc
f4467	3864	0x1800091e2
f4468	3865	0x1800091e8
f4469	3866	0x1800091ee
f447	3867	0x1800033aa
f4470	3868	0x1800091f4
f4471	3869	0x1800091fa
f4472	3870	0x180009200
f4473	3871	0x180009206
f4474	3872	0x18000920c
f4475	3873	0x180009212
f4476	3874	0x180009218
f4477	3875	0x18000921e
f4478	3876	0x180009224
f4479	3877	0x18000922a
f448	3878	0x1800033b0
f4480	3879	0x180009230
f4481	3880	0x180009236
f4482	3881	0x18000923c
f4483	3882	0x180009242
f4484	3883	0x180009248
f4485	3884	0x18000924e
f4486	3885	0x180009254
f4487	3886	0x18000925a
f4488	3887	0x180009260
f4489	3888	0x180009266
f449	3889	0x1800033b6
f4490	3890	0x18000926c
f4491	3891	0x180009272
f4492	3892	0x180009278
f4493	3893	0x18000927e
f4494	3894	0x180009284
f4495	3895	0x18000928a
f4496	3896	0x180009290
f4497	3897	0x180009296
f4498	3898	0x18000929c
f4499	3899	0x1800092a2
f45	3900	0x180002a3e
f450	3901	0x1800033bc
f4500	3902	0x1800092a8
f4501	3903	0x1800092ae
f4502	3904	0x1800092b4
f4503	3905	0x1800092ba
f4504	3906	0x1800092c0
f4505	3907	0x1800092c6
f4506	3908	0x1800092cc
f4507	3909	0x1800092d2
f4508	3910	0x1800092d8
f4509	3911	0x1800092de
f451	3912	0x1800033c2
f4510	3913	0x1800092e4
f4511	3914	0x1800092ea
f4512	3915	0x1800092f0
f4513	3916	0x1800092f6
f4514	3917	0x1800092fc
f4515	3918	0x180009302
f4516	3919	0x180009308
f4517	3920	0x18000930e
f4518	3921	0x180009314
f4519	3922	0x18000931a
f452	3923	0x1800033c8
f4520	3924	0x180009320
f4521	3925	0x180009326
f4522	3926	0x18000932c
f4523	3927	0x180009332
f4524	3928	0x180009338
f4525	3929	0x18000933e
f4526	3930	0x180009344
f4527	3931	0x18000934a
f4528	3932	0x180009350
f4529	3933	0x180009356
f453	3934	0x1800033ce
f4530	3935	0x18000935c
f4531	3936	0x180009362
f4532	3937	0x180009368
f4533	3938	0x18000936e
f4534	3939	0x180009374
f4535	3940	0x18000937a
f4536	3941	0x180009380
f4537	3942	0x180009386
f4538	3943	0x18000938c
f4539	3944	0x180009392
f454	3945	0x1800033d4
f4540	3946	0x180009398
f4541	3947	0x18000939e
f4542	3948	0x1800093a4
f4543	3949	0x1800093aa
f4544	3950	0x1800093b0
f4545	3951	0x1800093b6
f4546	3952	0x1800093bc
f4547	3953	0x1800093c2
f4548	3954	0x1800093c8
f4549	3955	0x1800093ce
f455	3956	0x1800033da
f4550	3957	0x1800093d4
f4551	3958	0x1800093da
f4552	3959	0x1800093e0
f4553	3960	0x1800093e6
f4554	3961	0x1800093ec
f4555	3962	0x1800093f2
f4556	3963	0x1800093f8
f4557	3964	0x1800093fe
f4558	3965	0x180009404
f4559	3966	0x18000940a
f456	3967	0x1800033e0
f4560	3968	0x180009410
f4561	3969	0x180009416
f4562	3970	0x18000941c
f4563	3971	0x180009422
f4564	3972	0x180009428
f4565	3973	0x18000942e
f4566	3974	0x180009434
f4567	3975	0x18000943a
f4568	3976	0x180009440
f4569	3977	0x180009446
f457	3978	0x1800033e6
f4570	3979	0x18000944c
f4571	3980	0x180009452
f4572	3981	0x180009458
f4573	3982	0x18000945e
f4574	3983	0x180009464
f4575	3984	0x18000946a
f4576	3985	0x180009470
f4577	3986	0x180009476
f4578	3987	0x18000947c
f4579	3988	0x180009482
f458	3989	0x1800033ec
f4580	3990	0x180009488
f4581	3991	0x18000948e
f4582	3992	0x180009494
f4583	3993	0x18000949a
f4584	3994	0x1800094a0
f4585	3995	0x1800094a6
f4586	3996	0x1800094ac
f4587	3997	0x1800094b2
f4588	3998	0x1800094b8
f4589	3999	0x1800094be
f459	4000	0x1800033f2
f4590	4001	0x1800094c4
f4591	4002	0x1800094ca
f4592	4003	0x1800094d0
f4593	4004	0x1800094d6
f4594	4005	0x1800094dc
f4595	4006	0x1800094e2
f4596	4007	0x1800094e8
f4597	4008	0x1800094ee
f4598	4009	0x1800094f4
f4599	4010	0x1800094fa
f46	4011	0x180002a44
f460	4012	0x1800033f8
f4600	4013	0x180009500
f4601	4014	0x180009506
f4602	4015	0x18000950c
f4603	4016	0x180009512
f4604	4017	0x180009518
f4605	4018	0x18000951e
f4606	4019	0x180009524
f4607	4020	0x18000952a
f4608	4021	0x180009530
f4609	4022	0x180009536
f461	4023	0x1800033fe
f4610	4024	0x18000953c
f4611	4025	0x180009542
f4612	4026	0x180009548
f4613	4027	0x18000954e
f4614	4028	0x180009554
f4615	4029	0x18000955a
f4616	4030	0x180009560
f4617	4031	0x180009566
f4618	4032	0x18000956c
f4619	4033	0x180009572
f462	4034	0x180003404
f4620	4035	0x180009578
f4621	4036	0x18000957e
f4622	4037	0x180009584
f4623	4038	0x18000958a
f4624	4039	0x180009590
f4625	4040	0x180009596
f4626	4041	0x18000959c
f4627	4042	0x1800095a2
f4628	4043	0x1800095a8
f4629	4044	0x1800095ae
f463	4045	0x18000340a
f4630	4046	0x1800095b4
f4631	4047	0x1800095ba
f4632	4048	0x1800095c0
f4633	4049	0x1800095c6
f4634	4050	0x1800095cc
f4635	4051	0x1800095d2
f4636	4052	0x1800095d8
f4637	4053	0x1800095de
f4638	4054	0x1800095e4
f4639	4055	0x1800095ea
f464	4056	0x180003410
f4640	4057	0x1800095f0
f4641	4058	0x1800095f6
f4642	4059	0x1800095fc
f4643	4060	0x180009602
f4644	4061	0x180009608
f4645	4062	0x18000960e
f4646	4063	0x180009614
f4647	4064	0x18000961a
f4648	4065	0x180009620
f4649	4066	0x180009626
f465	4067	0x180003416
f4650	4068	0x18000962c
f4651	4069	0x180009632
f4652	4070	0x180009638
f4653	4071	0x18000963e
f4654	4072	0x180009644
f4655	4073	0x18000964a
f4656	4074	0x180009650
f4657	4075	0x180009656
f4658	4076	0x18000965c
f4659	4077	0x180009662
f466	4078	0x18000341c
f4660	4079	0x180009668
f4661	4080	0x18000966e
f4662	4081	0x180009674
f4663	4082	0x18000967a
f4664	4083	0x180009680
f4665	4084	0x180009686
f4666	4085	0x18000968c
f4667	4086	0x180009692
f4668	4087	0x180009698
f4669	4088	0x18000969e
f467	4089	0x180003422
f4670	4090	0x1800096a4
f4671	4091	0x1800096aa
f4672	4092	0x1800096b0
f4673	4093	0x1800096b6
f4674	4094	0x1800096bc
f4675	4095	0x1800096c2
f4676	4096	0x1800096c8
f4677	4097	0x1800096ce
f4678	4098	0x1800096d4
f4679	4099	0x1800096da
f468	4100	0x180003428
f4680	4101	0x1800096e0
f4681	4102	0x1800096e6
f4682	4103	0x1800096ec
f4683	4104	0x1800096f2
f4684	4105	0x1800096f8
f4685	4106	0x1800096fe
f4686	4107	0x180009704
f4687	4108	0x18000970a
f4688	4109	0x180009710
f4689	4110	0x180009716
f469	4111	0x18000342e
f4690	4112	0x18000971c
f4691	4113	0x180009722
f4692	4114	0x180009728
f4693	4115	0x18000972e
f4694	4116	0x180009734
f4695	4117	0x18000973a
f4696	4118	0x180009740
f4697	4119	0x180009746
f4698	4120	0x18000974c
f4699	4121	0x180009752
f47	4122	0x180002a4a
f470	4123	0x180003434
f4700	4124	0x180009758
f4701	4125	0x18000975e
f4702	4126	0x180009764
f4703	4127	0x18000976a
f4704	4128	0x180009770
f4705	4129	0x180009776
f4706	4130	0x18000977c
f4707	4131	0x180009782
f4708	4132	0x180009788
f4709	4133	0x18000978e
f471	4134	0x18000343a
f4710	4135	0x180009794
f4711	4136	0x18000979a
f4712	4137	0x1800097a0
f4713	4138	0x1800097a6
f4714	4139	0x1800097ac
f4715	4140	0x1800097b2
f4716	4141	0x1800097b8
f4717	4142	0x1800097be
f4718	4143	0x1800097c4
f4719	4144	0x1800097ca
f472	4145	0x180003440
f4720	4146	0x1800097d0
f4721	4147	0x1800097d6
f4722	4148	0x1800097dc
f4723	4149	0x1800097e2
f4724	4150	0x1800097e8
f4725	4151	0x1800097ee
f4726	4152	0x1800097f4
f4727	4153	0x1800097fa
f4728	4154	0x180009800
f4729	4155	0x180009806
f473	4156	0x180003446
f4730	4157	0x18000980c
f4731	4158	0x180009812
f4732	4159	0x180009818
f4733	4160	0x18000981e
f4734	4161	0x180009824
f4735	4162	0x18000982a
f4736	4163	0x180009830
f4737	4164	0x180009836
f4738	4165	0x18000983c
f4739	4166	0x180009842
f474	4167	0x18000344c
f4740	4168	0x180009848
f4741	4169	0x18000984e
f4742	4170	0x180009854
f4743	4171	0x18000985a
f4744	4172	0x180009860
f4745	4173	0x180009866
f4746	4174	0x18000986c
f4747	4175	0x180009872
f4748	4176	0x180009878
f4749	4177	0x18000987e
f475	4178	0x180003452
f4750	4179	0x180009884
f4751	4180	0x18000988a
f4752	4181	0x180009890
f4753	4182	0x180009896
f4754	4183	0x18000989c
f4755	4184	0x1800098a2
f4756	4185	0x1800098a8
f4757	4186	0x1800098ae
f4758	4187	0x1800098b4
f4759	4188	0x1800098ba
f476	4189	0x180003458
f4760	4190	0x1800098c0
f4761	4191	0x1800098c6
f4762	4192	0x1800098cc
f4763	4193	0x1800098d2
f4764	4194	0x1800098d8
f4765	4195	0x1800098de
f4766	4196	0x1800098e4
f4767	4197	0x1800098ea
f4768	4198	0x1800098f0
f4769	4199	0x1800098f6
f477	4200	0x18000345e
f4770	4201	0x1800098fc
f4771	4202	0x180009902
f4772	4203	0x180009908
f4773	4204	0x18000990e
f4774	4205	0x180009914
f4775	4206	0x18000991a
f4776	4207	0x180009920
f4777	4208	0x180009926
f4778	4209	0x18000992c
f4779	4210	0x180009932
f478	4211	0x180003464
f4780	4212	0x180009938
f4781	4213	0x18000993e
f4782	4214	0x180009944
f4783	4215	0x18000994a
f4784	4216	0x180009950
f4785	4217	0x180009956
f4786	4218	0x18000995c
f4787	4219	0x180009962
f4788	4220	0x180009968
f4789	4221	0x18000996e
f479	4222	0x18000346a
f4790	4223	0x180009974
f4791	4224	0x18000997a
f4792	4225	0x180009980
f4793	4226	0x180009986
f4794	4227	0x18000998c
f4795	4228	0x180009992
f4796	4229	0x180009998
f4797	4230	0x18000999e
f4798	4231	0x1800099a4
f4799	4232	0x1800099aa
f48	4233	0x180002a50
f480	4234	0x180003470
f4800	4235	0x1800099b0
f4801	4236	0x1800099b6
f4802	4237	0x1800099bc
f4803	4238	0x1800099c2
f4804	4239	0x1800099c8
f4805	4240	0x1800099ce
f4806	4241	0x1800099d4
f4807	4242	0x1800099da
f4808	4243	0x1800099e0
f4809	4244	0x1800099e6
f481	4245	0x180003476
f4810	4246	0x1800099ec
f4811	4247	0x1800099f2
f4812	4248	0x1800099f8
f4813	4249	0x1800099fe
f4814	4250	0x180009a04
f4815	4251	0x180009a0a
f4816	4252	0x180009a10
f4817	4253	0x180009a16
f4818	4254	0x180009a1c
f4819	4255	0x180009a22
f482	4256	0x18000347c
f4820	4257	0x180009a28
f4821	4258	0x180009a2e
f4822	4259	0x180009a34
f4823	4260	0x180009a3a
f4824	4261	0x180009a40
f4825	4262	0x180009a46
f4826	4263	0x180009a4c
f4827	4264	0x180009a52
f4828	4265	0x180009a58
f4829	4266	0x180009a5e
f483	4267	0x180003482
f4830	4268	0x180009a64
f4831	4269	0x180009a6a
f4832	4270	0x180009a70
f4833	4271	0x180009a76
f4834	4272	0x180009a7c
f4835	4273	0x180009a82
f4836	4274	0x180009a88
f4837	4275	0x180009a8e
f4838	4276	0x180009a94
f4839	4277	0x180009a9a
f484	4278	0x180003488
f4840	4279	0x180009aa0
f4841	4280	0x180009aa6
f4842	4281	0x180009aac
f4843	4282	0x180009ab2
f4844	4283	0x180009ab8
f4845	4284	0x180009abe
f4846	4285	0x180009ac4
f4847	4286	0x180009aca
f4848	4287	0x180009ad0
f4849	4288	0x180009ad6
f485	4289	0x18000348e
f4850	4290	0x180009adc
f4851	4291	0x180009ae2
f4852	4292	0x180009ae8
f4853	4293	0x180009aee
f4854	4294	0x180009af4
f4855	4295	0x180009afa
f4856	4296	0x180009b00
f4857	4297	0x180009b06
f4858	4298	0x180009b0c
f4859	4299	0x180009b12
f486	4300	0x180003494
f4860	4301	0x180009b18
f4861	4302	0x180009b1e
f4862	4303	0x180009b24
f4863	4304	0x180009b2a
f4864	4305	0x180009b30
f4865	4306	0x180009b36
f4866	4307	0x180009b3c
f4867	4308	0x180009b42
f4868	4309	0x180009b48
f4869	4310	0x180009b4e
f487	4311	0x18000349a
f4870	4312	0x180009b54
f4871	4313	0x180009b5a
f4872	4314	0x180009b60
f4873	4315	0x180009b66
f4874	4316	0x180009b6c
f4875	4317	0x180009b72
f4876	4318	0x180009b78
f4877	4319	0x180009b7e
f4878	4320	0x180009b84
f4879	4321	0x180009b8a
f488	4322	0x1800034a0
f4880	4323	0x180009b90
f4881	4324	0x180009b96
f4882	4325	0x180009b9c
f4883	4326	0x180009ba2
f4884	4327	0x180009ba8
f4885	4328	0x180009bae
f4886	4329	0x180009bb4
f4887	4330	0x180009bba
f4888	4331	0x180009bc0
f4889	4332	0x180009bc6
f489	4333	0x1800034a6
f4890	4334	0x180009bcc
f4891	4335	0x180009bd2
f4892	4336	0x180009bd8
f4893	4337	0x180009bde
f4894	4338	0x180009be4
f4895	4339	0x180009bea
f4896	4340	0x180009bf0
f4897	4341	0x180009bf6
f4898	4342	0x180009bfc
f4899	4343	0x180009c02
f49	4344	0x180002a56
f490	4345	0x1800034ac
f4900	4346	0x180009c08
f4901	4347	0x180009c0e
f4902	4348	0x180009c14
f4903	4349	0x180009c1a
f4904	4350	0x180009c20
f4905	4351	0x180009c26
f4906	4352	0x180009c2c
f4907	4353	0x180009c32
f4908	4354	0x180009c38
f4909	4355	0x180009c3e
f491	4356	0x1800034b2
f4910	4357	0x180009c44
f4911	4358	0x180009c4a
f4912	4359	0x180009c50
f4913	4360	0x180009c56
f4914	4361	0x180009c5c
f4915	4362	0x180009c62
f4916	4363	0x180009c68
f4917	4364	0x180009c6e
f4918	4365	0x180009c74
f4919	4366	0x180009c7a
f492	4367	0x1800034b8
f4920	4368	0x180009c80
f4921	4369	0x180009c86
f4922	4370	0x180009c8c
f4923	4371	0x180009c92
f4924	4372	0x180009c98
f4925	4373	0x180009c9e
f4926	4374	0x180009ca4
f4927	4375	0x180009caa
f4928	4376	0x180009cb0
f4929	4377	0x180009cb6
f493	4378	0x1800034be
f4930	4379	0x180009cbc
f4931	4380	0x180009cc2
f4932	4381	0x180009cc8
f4933	4382	0x180009cce
f4934	4383	0x180009cd4
f4935	4384	0x180009cda
f4936	4385	0x180009ce0
f4937	4386	0x180009ce6
f4938	4387	0x180009cec
f4939	4388	0x180009cf2
f494	4389	0x1800034c4
f4940	4390	0x180009cf8
f4941	4391	0x180009cfe
f4942	4392	0x180009d04
f4943	4393	0x180009d0a
f4944	4394	0x180009d10
f4945	4395	0x180009d16
f4946	4396	0x180009d1c
f4947	4397	0x180009d22
f4948	4398	0x180009d28
f4949	4399	0x180009d2e
f495	4400	0x1800034ca
f4950	4401	0x180009d34
f4951	4402	0x180009d3a
f4952	4403	0x180009d40
f4953	4404	0x180009d46
f4954	4405	0x180009d4c
f4955	4406	0x180009d52
f4956	4407	0x180009d58
f4957	4408	0x180009d5e
f4958	4409	0x180009d64
f4959	4410	0x180009d6a
f496	4411	0x1800034d0
f4960	4412	0x180009d70
f4961	4413	0x180009d76
f4962	4414	0x180009d7c
f4963	4415	0x180009d82
f4964	4416	0x180009d88
f4965	4417	0x180009d8e
f4966	4418	0x180009d94
f4967	4419	0x180009d9a
f4968	4420	0x180009da0
f4969	4421	0x180009da6
f497	4422	0x1800034d6
f4970	4423	0x180009dac
f4971	4424	0x180009db2
f4972	4425	0x180009db8
f4973	4426	0x180009dbe
f4974	4427	0x180009dc4
f4975	4428	0x180009dca
f4976	4429	0x180009dd0
f4977	4430	0x180009dd6
f4978	4431	0x180009ddc
f4979	4432	0x180009de2
f498	4433	0x1800034dc
f4980	4434	0x180009de8
f4981	4435	0x180009dee
f4982	4436	0x180009df4
f4983	4437	0x180009dfa
f4984	4438	0x180009e00
f4985	4439	0x180009e06
f4986	4440	0x180009e0c
f4987	4441	0x180009e12
f4988	4442	0x180009e18
f4989	4443	0x180009e1e
f499	4444	0x1800034e2
f4990	4445	0x180009e24
f4991	4446	0x180009e2a
f4992	4447	0x180009e30
f4993	4448	0x180009e36
f4994	4449	0x180009e3c
f4995	4450	0x180009e42
f4996	4451	0x180009e48
f4997	4452	0x180009e4e
f4998	4453	0x180009e54
f4999	4454	0x180009e5a
f5	4455	0x18000294e
f50	4456	0x180002a5c
f500	4457	0x1800034e8
f5000	4458	0x180009e60
f5001	4459	0x180009e66
f5002	4460	0x180009e6c
f5003	4461	0x180009e72
f5004	4462	0x180009e78
f5005	4463	0x180009e7e
f5006	4464	0x180009e84
f5007	4465	0x180009e8a
f5008	4466	0x180009e90
f5009	4467	0x180009e96
f501	4468	0x1800034ee
f5010	4469	0x180009e9c
f5011	4470	0x180009ea2
f5012	4471	0x180009ea8
f5013	4472	0x180009eae
f5014	4473	0x180009eb4
f5015	4474	0x180009eba
f5016	4475	0x180009ec0
f5017	4476	0x180009ec6
f5018	4477	0x180009ecc
f5019	4478	0x180009ed2
f502	4479	0x1800034f4
f5020	4480	0x180009ed8
f5021	4481	0x180009ede
f5022	4482	0x180009ee4
f5023	4483	0x180009eea
f5024	4484	0x180009ef0
f5025	4485	0x180009ef6
f5026	4486	0x180009efc
f5027	4487	0x180009f02
f5028	4488	0x180009f08
f5029	4489	0x180009f0e
f503	4490	0x1800034fa
f5030	4491	0x180009f14
f5031	4492	0x180009f1a
f5032	4493	0x180009f20
f5033	4494	0x180009f26
f5034	4495	0x180009f2c
f5035	4496	0x180009f32
f5036	4497	0x180009f38
f5037	4498	0x180009f3e
f5038	4499	0x180009f44
f5039	4500	0x180009f4a
f504	4501	0x180003500
f5040	4502	0x180009f50
f5041	4503	0x180009f56
f5042	4504	0x180009f5c
f5043	4505	0x180009f62
f5044	4506	0x180009f68
f5045	4507	0x180009f6e
f5046	4508	0x180009f74
f5047	4509	0x180009f7a
f5048	4510	0x180009f80
f5049	4511	0x180009f86
f505	4512	0x180003506
f5050	4513	0x180009f8c
f5051	4514	0x180009f92
f5052	4515	0x180009f98
f5053	4516	0x180009f9e
f5054	4517	0x180009fa4
f5055	4518	0x180009faa
f5056	4519	0x180009fb0
f5057	4520	0x180009fb6
f5058	4521	0x180009fbc
f5059	4522	0x180009fc2
f506	4523	0x18000350c
f5060	4524	0x180009fc8
f5061	4525	0x180009fce
f5062	4526	0x180009fd4
f5063	4527	0x180009fda
f5064	4528	0x180009fe0
f5065	4529	0x180009fe6
f5066	4530	0x180009fec
f5067	4531	0x180009ff2
f5068	4532	0x180009ff8
f5069	4533	0x180009ffe
f507	4534	0x180003512
f5070	4535	0x18000a004
f5071	4536	0x18000a00a
f5072	4537	0x18000a010
f5073	4538	0x18000a016
f5074	4539	0x18000a01c
f5075	4540	0x18000a022
f5076	4541	0x18000a028
f5077	4542	0x18000a02e
f5078	4543	0x18000a034
f5079	4544	0x18000a03a
f508	4545	0x180003518
f5080	4546	0x18000a040
f5081	4547	0x18000a046
f5082	4548	0x18000a04c
f5083	4549	0x18000a052
f5084	4550	0x18000a058
f5085	4551	0x18000a05e
f5086	4552	0x18000a064
f5087	4553	0x18000a06a
f5088	4554	0x18000a070
f5089	4555	0x18000a076
f509	4556	0x18000351e
f5090	4557	0x18000a07c
f5091	4558	0x18000a082
f5092	4559	0x18000a088
f5093	4560	0x18000a08e
f5094	4561	0x18000a094
f5095	4562	0x18000a09a
f5096	4563	0x18000a0a0
f5097	4564	0x18000a0a6
f5098	4565	0x18000a0ac
f5099	4566	0x18000a0b2
f51	4567	0x180002a62
f510	4568	0x180003524
f5100	4569	0x18000a0b8
f5101	4570	0x18000a0be
f5102	4571	0x18000a0c4
f5103	4572	0x18000a0ca
f5104	4573	0x18000a0d0
f5105	4574	0x18000a0d6
f5106	4575	0x18000a0dc
f5107	4576	0x18000a0e2
f5108	4577	0x18000a0e8
f5109	4578	0x18000a0ee
f511	4579	0x18000352a
f5110	4580	0x18000a0f4
f5111	4581	0x18000a0fa
f5112	4582	0x18000a100
f5113	4583	0x18000a106
f5114	4584	0x18000a10c
f5115	4585	0x18000a112
f5116	4586	0x18000a118
f5117	4587	0x18000a11e
f5118	4588	0x18000a124
f5119	4589	0x18000a12a
f512	4590	0x180003530
f5120	4591	0x18000a130
f5121	4592	0x18000a136
f5122	4593	0x18000a13c
f5123	4594	0x18000a142
f5124	4595	0x18000a148
f5125	4596	0x18000a14e
f5126	4597	0x18000a154
f5127	4598	0x18000a15a
f5128	4599	0x18000a160
f5129	4600	0x18000a166
f513	4601	0x180003536
f5130	4602	0x18000a16c
f5131	4603	0x18000a172
f5132	4604	0x18000a178
f5133	4605	0x18000a17e
f5134	4606	0x18000a184
f5135	4607	0x18000a18a
f5136	4608	0x18000a190
f5137	4609	0x18000a196
f5138	4610	0x18000a19c
f5139	4611	0x18000a1a2
f514	4612	0x18000353c
f5140	4613	0x18000a1a8
f5141	4614	0x18000a1ae
f5142	4615	0x18000a1b4
f5143	4616	0x18000a1ba
f5144	4617	0x18000a1c0
f5145	4618	0x18000a1c6
f5146	4619	0x18000a1cc
f5147	4620	0x18000a1d2
f5148	4621	0x18000a1d8
f5149	4622	0x18000a1de
f515	4623	0x180003542
f5150	4624	0x18000a1e4
f5151	4625	0x18000a1ea
f5152	4626	0x18000a1f0
f5153	4627	0x18000a1f6
f5154	4628	0x18000a1fc
f5155	4629	0x18000a202
f5156	4630	0x18000a208
f5157	4631	0x18000a20e
f5158	4632	0x18000a214
f5159	4633	0x18000a21a
f516	4634	0x180003548
f5160	4635	0x18000a220
f5161	4636	0x18000a226
f5162	4637	0x18000a22c
f5163	4638	0x18000a232
f5164	4639	0x18000a238
f5165	4640	0x18000a23e
f5166	4641	0x18000a244
f5167	4642	0x18000a24a
f5168	4643	0x18000a250
f5169	4644	0x18000a256
f517	4645	0x18000354e
f5170	4646	0x18000a25c
f5171	4647	0x18000a262
f5172	4648	0x18000a268
f5173	4649	0x18000a26e
f5174	4650	0x18000a274
f5175	4651	0x18000a27a
f5176	4652	0x18000a280
f5177	4653	0x18000a286
f5178	4654	0x18000a28c
f5179	4655	0x18000a292
f518	4656	0x180003554
f5180	4657	0x18000a298
f5181	4658	0x18000a29e
f5182	4659	0x18000a2a4
f5183	4660	0x18000a2aa
f5184	4661	0x18000a2b0
f5185	4662	0x18000a2b6
f5186	4663	0x18000a2bc
f5187	4664	0x18000a2c2
f5188	4665	0x18000a2c8
f5189	4666	0x18000a2ce
f519	4667	0x18000355a
f5190	4668	0x18000a2d4
f5191	4669	0x18000a2da
f5192	4670	0x18000a2e0
f5193	4671	0x18000a2e6
f5194	4672	0x18000a2ec
f5195	4673	0x18000a2f2
f5196	4674	0x18000a2f8
f5197	4675	0x18000a2fe
f5198	4676	0x18000a304
f5199	4677	0x18000a30a
f52	4678	0x180002a68
f520	4679	0x180003560
f5200	4680	0x18000a310
f5201	4681	0x18000a316
f5202	4682	0x18000a31c
f5203	4683	0x18000a322
f5204	4684	0x18000a328
f5205	4685	0x18000a32e
f5206	4686	0x18000a334
f5207	4687	0x18000a33a
f5208	4688	0x18000a340
f5209	4689	0x18000a346
f521	4690	0x180003566
f5210	4691	0x18000a34c
f5211	4692	0x18000a352
f5212	4693	0x18000a358
f5213	4694	0x18000a35e
f5214	4695	0x18000a364
f5215	4696	0x18000a36a
f5216	4697	0x18000a370
f5217	4698	0x18000a376
f5218	4699	0x18000a37c
f5219	4700	0x18000a382
f522	4701	0x18000356c
f5220	4702	0x18000a388
f5221	4703	0x18000a38e
f5222	4704	0x18000a394
f5223	4705	0x18000a39a
f5224	4706	0x18000a3a0
f5225	4707	0x18000a3a6
f5226	4708	0x18000a3ac
f5227	4709	0x18000a3b2
f5228	4710	0x18000a3b8
f5229	4711	0x18000a3be
f523	4712	0x180003572
f5230	4713	0x18000a3c4
f5231	4714	0x18000a3ca
f5232	4715	0x18000a3d0
f5233	4716	0x18000a3d6
f5234	4717	0x18000a3dc
f5235	4718	0x18000a3e2
f5236	4719	0x18000a3e8
f5237	4720	0x18000a3ee
f5238	4721	0x18000a3f4
f5239	4722	0x18000a3fa
f524	4723	0x180003578
f5240	4724	0x18000a400
f5241	4725	0x18000a406
f5242	4726	0x18000a40c
f5243	4727	0x18000a412
f5244	4728	0x18000a418
f5245	4729	0x18000a41e
f5246	4730	0x18000a424
f5247	4731	0x18000a42a
f5248	4732	0x18000a430
f5249	4733	0x18000a436
f525	4734	0x18000357e
f5250	4735	0x18000a43c
f5251	4736	0x18000a442
f5252	4737	0x18000a448
f5253	4738	0x18000a44e
f5254	4739	0x18000a454
f5255	4740	0x18000a45a
f5256	4741	0x18000a460
f5257	4742	0x18000a466
f5258	4743	0x18000a46c
f5259	4744	0x18000a472
f526	4745	0x180003584
f5260	4746	0x18000a478
f5261	4747	0x18000a47e
f5262	4748	0x18000a484
f5263	4749	0x18000a48a
f5264	4750	0x18000a490
f5265	4751	0x18000a496
f5266	4752	0x18000a49c
f5267	4753	0x18000a4a2
f5268	4754	0x18000a4a8
f5269	4755	0x18000a4ae
f527	4756	0x18000358a
f5270	4757	0x18000a4b4
f5271	4758	0x18000a4ba
f5272	4759	0x18000a4c0
f5273	4760	0x18000a4c6
f5274	4761	0x18000a4cc
f5275	4762	0x18000a4d2
f5276	4763	0x18000a4d8
f5277	4764	0x18000a4de
f5278	4765	0x18000a4e4
f5279	4766	0x18000a4ea
f528	4767	0x180003590
f5280	4768	0x18000a4f0
f5281	4769	0x18000a4f6
f5282	4770	0x18000a4fc
f5283	4771	0x18000a502
f5284	4772	0x18000a508
f5285	4773	0x18000a50e
f5286	4774	0x18000a514
f5287	4775	0x18000a51a
f5288	4776	0x18000a520
f5289	4777	0x18000a526
f529	4778	0x180003596
f5290	4779	0x18000a52c
f5291	4780	0x18000a532
f5292	4781	0x18000a538
f5293	4782	0x18000a53e
f5294	4783	0x18000a544
f5295	4784	0x18000a54a
f5296	4785	0x18000a550
f5297	4786	0x18000a556
f5298	4787	0x18000a55c
f5299	4788	0x18000a562
f53	4789	0x180002a6e
f530	4790	0x18000359c
f5300	4791	0x18000a568
f5301	4792	0x18000a56e
f5302	4793	0x18000a574
f5303	4794	0x18000a57a
f5304	4795	0x18000a580
f5305	4796	0x18000a586
f5306	4797	0x18000a58c
f5307	4798	0x18000a592
f5308	4799	0x18000a598
f5309	4800	0x18000a59e
f531	4801	0x1800035a2
f5310	4802	0x18000a5a4
f5311	4803	0x18000a5aa
f5312	4804	0x18000a5b0
f5313	4805	0x18000a5b6
f5314	4806	0x18000a5bc
f5315	4807	0x18000a5c2
f5316	4808	0x18000a5c8
f5317	4809	0x18000a5ce
f5318	4810	0x18000a5d4
f5319	4811	0x18000a5da
f532	4812	0x1800035a8
f5320	4813	0x18000a5e0
f5321	4814	0x18000a5e6
f5322	4815	0x18000a5ec
f5323	4816	0x18000a5f2
f5324	4817	0x18000a5f8
f5325	4818	0x18000a5fe
f5326	4819	0x18000a604
f5327	4820	0x18000a60a
f5328	4821	0x18000a610
f5329	4822	0x18000a616
f533	4823	0x1800035ae
f5330	4824	0x18000a61c
f5331	4825	0x18000a622
f5332	4826	0x18000a628
f5333	4827	0x18000a62e
f5334	4828	0x18000a634
f5335	4829	0x18000a63a
f5336	4830	0x18000a640
f5337	4831	0x18000a646
f5338	4832	0x18000a64c
f5339	4833	0x18000a652
f534	4834	0x1800035b4
f5340	4835	0x18000a658
f5341	4836	0x18000a65e
f5342	4837	0x18000a664
f5343	4838	0x18000a66a
f5344	4839	0x18000a670
f5345	4840	0x18000a676
f5346	4841	0x18000a67c
f5347	4842	0x18000a682
f5348	4843	0x18000a688
f5349	4844	0x18000a68e
f535	4845	0x1800035ba
f5350	4846	0x18000a694
f5351	4847	0x18000a69a
f5352	4848	0x18000a6a0
f5353	4849	0x18000a6a6
f5354	4850	0x18000a6ac
f5355	4851	0x18000a6b2
f5356	4852	0x18000a6b8
f5357	4853	0x18000a6be
f5358	4854	0x18000a6c4
f5359	4855	0x18000a6ca
f536	4856	0x1800035c0
f5360	4857	0x18000a6d0
f5361	4858	0x18000a6d6
f5362	4859	0x18000a6dc
f5363	4860	0x18000a6e2
f5364	4861	0x18000a6e8
f5365	4862	0x18000a6ee
f5366	4863	0x18000a6f4
f5367	4864	0x18000a6fa
f5368	4865	0x18000a700
f5369	4866	0x18000a706
f537	4867	0x1800035c6
f5370	4868	0x18000a70c
f5371	4869	0x18000a712
f5372	4870	0x18000a718
f5373	4871	0x18000a71e
f5374	4872	0x18000a724
f5375	4873	0x18000a72a
f5376	4874	0x18000a730
f5377	4875	0x18000a736
f5378	4876	0x18000a73c
f5379	4877	0x18000a742
f538	4878	0x1800035cc
f5380	4879	0x18000a748
f5381	4880	0x18000a74e
f5382	4881	0x18000a754
f5383	4882	0x18000a75a
f5384	4883	0x18000a760
f5385	4884	0x18000a766
f5386	4885	0x18000a76c
f5387	4886	0x18000a772
f5388	4887	0x18000a778
f5389	4888	0x18000a77e
f539	4889	0x1800035d2
f5390	4890	0x18000a784
f5391	4891	0x18000a78a
f5392	4892	0x18000a790
f5393	4893	0x18000a796
f5394	4894	0x18000a79c
f5395	4895	0x18000a7a2
f5396	4896	0x18000a7a8
f5397	4897	0x18000a7ae
f5398	4898	0x18000a7b4
f5399	4899	0x18000a7ba
f54	4900	0x180002a74
f540	4901	0x1800035d8
f5400	4902	0x18000a7c0
f5401	4903	0x18000a7c6
f5402	4904	0x18000a7cc
f5403	4905	0x18000a7d2
f5404	4906	0x18000a7d8
f5405	4907	0x18000a7de
f5406	4908	0x18000a7e4
f5407	4909	0x18000a7ea
f5408	4910	0x18000a7f0
f5409	4911	0x18000a7f6
f541	4912	0x1800035de
f5410	4913	0x18000a7fc
f5411	4914	0x18000a802
f5412	4915	0x18000a808
f5413	4916	0x18000a80e
f5414	4917	0x18000a814
f5415	4918	0x18000a81a
f5416	4919	0x18000a820
f5417	4920	0x18000a826
f5418	4921	0x18000a82c
f5419	4922	0x18000a832
f542	4923	0x1800035e4
f5420	4924	0x18000a838
f5421	4925	0x18000a83e
f5422	4926	0x18000a844
f5423	4927	0x18000a84a
f5424	4928	0x18000a850
f5425	4929	0x18000a856
f5426	4930	0x18000a85c
f5427	4931	0x18000a862
f5428	4932	0x18000a868
f5429	4933	0x18000a86e
f543	4934	0x1800035ea
f5430	4935	0x18000a874
f5431	4936	0x18000a87a
f5432	4937	0x18000a880
f5433	4938	0x18000a886
f5434	4939	0x18000a88c
f5435	4940	0x18000a892
f5436	4941	0x18000a898
f5437	4942	0x18000a89e
f5438	4943	0x18000a8a4
f5439	4944	0x18000a8aa
f544	4945	0x1800035f0
f5440	4946	0x18000a8b0
f5441	4947	0x18000a8b6
f5442	4948	0x18000a8bc
f5443	4949	0x18000a8c2
f5444	4950	0x18000a8c8
f5445	4951	0x18000a8ce
f5446	4952	0x18000a8d4
f5447	4953	0x18000a8da
f5448	4954	0x18000a8e0
f5449	4955	0x18000a8e6
f545	4956	0x1800035f6
f5450	4957	0x18000a8ec
f5451	4958	0x18000a8f2
f5452	4959	0x18000a8f8
f5453	4960	0x18000a8fe
f5454	4961	0x18000a904
f5455	4962	0x18000a90a
f5456	4963	0x18000a910
f5457	4964	0x18000a916
f5458	4965	0x18000a91c
f5459	4966	0x18000a922
f546	4967	0x1800035fc
f5460	4968	0x18000a928
f5461	4969	0x18000a92e
f5462	4970	0x18000a934
f5463	4971	0x18000a93a
f5464	4972	0x18000a940
f5465	4973	0x18000a946
f5466	4974	0x18000a94c
f5467	4975	0x18000a952
f5468	4976	0x18000a958
f5469	4977	0x18000a95e
f547	4978	0x180003602
f5470	4979	0x18000a964
f5471	4980	0x18000a96a
f5472	4981	0x18000a970
f5473	4982	0x18000a976
f5474	4983	0x18000a97c
f5475	4984	0x18000a982
f5476	4985	0x18000a988
f5477	4986	0x18000a98e
f5478	4987	0x18000a994
f5479	4988	0x18000a99a
f548	4989	0x180003608
f5480	4990	0x18000a9a0
f5481	4991	0x18000a9a6
f5482	4992	0x18000a9ac
f5483	4993	0x18000a9b2
f5484	4994	0x18000a9b8
f5485	4995	0x18000a9be
f5486	4996	0x18000a9c4
f5487	4997	0x18000a9ca
f5488	4998	0x18000a9d0
f5489	4999	0x18000a9d6
f549	5000	0x18000360e
f5490	5001	0x18000a9dc
f5491	5002	0x18000a9e2
f5492	5003	0x18000a9e8
f5493	5004	0x18000a9ee
f5494	5005	0x18000a9f4
f5495	5006	0x18000a9fa
f5496	5007	0x18000aa00
f5497	5008	0x18000aa06
f5498	5009	0x18000aa0c
f5499	5010	0x18000aa12
f55	5011	0x180002a7a
f550	5012	0x180003614
f5500	5013	0x18000aa18
f5501	5014	0x18000aa1e
f5502	5015	0x18000aa24
f5503	5016	0x18000aa2a
f5504	5017	0x18000aa30
f5505	5018	0x18000aa36
f5506	5019	0x18000aa3c
f5507	5020	0x18000aa42
f5508	5021	0x18000aa48
f5509	5022	0x18000aa4e
f551	5023	0x18000361a
f5510	5024	0x18000aa54
f5511	5025	0x18000aa5a
f5512	5026	0x18000aa60
f5513	5027	0x18000aa66
f5514	5028	0x18000aa6c
f5515	5029	0x18000aa72
f5516	5030	0x18000aa78
f5517	5031	0x18000aa7e
f5518	5032	0x18000aa84
f5519	5033	0x18000aa8a
f552	5034	0x180003620
f5520	5035	0x18000aa90
f5521	5036	0x18000aa96
f5522	5037	0x18000aa9c
f5523	5038	0x18000aaa2
f5524	5039	0x18000aaa8
f5525	5040	0x18000aaae
f5526	5041	0x18000aab4
f5527	5042	0x18000aaba
f5528	5043	0x18000aac0
f5529	5044	0x18000aac6
f553	5045	0x180003626
f5530	5046	0x18000aacc
f5531	5047	0x18000aad2
f5532	5048	0x18000aad8
f5533	5049	0x18000aade
f5534	5050	0x18000aae4
f5535	5051	0x18000aaea
f5536	5052	0x18000aaf0
f5537	5053	0x18000aaf6
f5538	5054	0x18000aafc
f5539	5055	0x18000ab02
f554	5056	0x18000362c
f5540	5057	0x18000ab08
f5541	5058	0x18000ab0e
f5542	5059	0x18000ab14
f5543	5060	0x18000ab1a
f5544	5061	0x18000ab20
f5545	5062	0x18000ab26
f5546	5063	0x18000ab2c
f5547	5064	0x18000ab32
f5548	5065	0x18000ab38
f5549	5066	0x18000ab3e
f555	5067	0x180003632
f5550	5068	0x18000ab44
f5551	5069	0x18000ab4a
f5552	5070	0x18000ab50
f5553	5071	0x18000ab56
f5554	5072	0x18000ab5c
f5555	5073	0x18000ab62
f5556	5074	0x18000ab68
f5557	5075	0x18000ab6e
f5558	5076	0x18000ab74
f5559	5077	0x18000ab7a
f556	5078	0x180003638
f5560	5079	0x18000ab80
f5561	5080	0x18000ab86
f5562	5081	0x18000ab8c
f5563	5082	0x18000ab92
f5564	5083	0x18000ab98
f5565	5084	0x18000ab9e
f5566	5085	0x18000aba4
f5567	5086	0x18000abaa
f5568	5087	0x18000abb0
f5569	5088	0x18000abb6
f557	5089	0x18000363e
f5570	5090	0x18000abbc
f5571	5091	0x18000abc2
f5572	5092	0x18000abc8
f5573	5093	0x18000abce
f5574	5094	0x18000abd4
f5575	5095	0x18000abda
f5576	5096	0x18000abe0
f5577	5097	0x18000abe6
f5578	5098	0x18000abec
f5579	5099	0x18000abf2
f558	5100	0x180003644
f5580	5101	0x18000abf8
f5581	5102	0x18000abfe
f5582	5103	0x18000ac04
f5583	5104	0x18000ac0a
f5584	5105	0x18000ac10
f5585	5106	0x18000ac16
f5586	5107	0x18000ac1c
f5587	5108	0x18000ac22
f5588	5109	0x18000ac28
f5589	5110	0x18000ac2e
f559	5111	0x18000364a
f5590	5112	0x18000ac34
f5591	5113	0x18000ac3a
f5592	5114	0x18000ac40
f5593	5115	0x18000ac46
f5594	5116	0x18000ac4c
f5595	5117	0x18000ac52
f5596	5118	0x18000ac58
f5597	5119	0x18000ac5e
f5598	5120	0x18000ac64
f5599	5121	0x18000ac6a
f56	5122	0x180002a80
f560	5123	0x180003650
f5600	5124	0x18000ac70
f5601	5125	0x18000ac76
f5602	5126	0x18000ac7c
f5603	5127	0x18000ac82
f5604	5128	0x18000ac88
f5605	5129	0x18000ac8e
f5606	5130	0x18000ac94
f5607	5131	0x18000ac9a
f5608	5132	0x18000aca0
f5609	5133	0x18000aca6
f561	5134	0x180003656
f5610	5135	0x18000acac
f5611	5136	0x18000acb2
f5612	5137	0x18000acb8
f5613	5138	0x18000acbe
f5614	5139	0x18000acc4
f5615	5140	0x18000acca
f5616	5141	0x18000acd0
f5617	5142	0x18000acd6
f5618	5143	0x18000acdc
f5619	5144	0x18000ace2
f562	5145	0x18000365c
f5620	5146	0x18000ace8
f5621	5147	0x18000acee
f5622	5148	0x18000acf4
f5623	5149	0x18000acfa
f5624	5150	0x18000ad00
f5625	5151	0x18000ad06
f5626	5152	0x18000ad0c
f5627	5153	0x18000ad12
f5628	5154	0x18000ad18
f5629	5155	0x18000ad1e
f563	5156	0x180003662
f5630	5157	0x18000ad24
f5631	5158	0x18000ad2a
f5632	5159	0x18000ad30
f5633	5160	0x18000ad36
f5634	5161	0x18000ad3c
f5635	5162	0x18000ad42
f5636	5163	0x18000ad48
f5637	5164	0x18000ad4e
f5638	5165	0x18000ad54
f5639	5166	0x18000ad5a
f564	5167	0x180003668
f5640	5168	0x18000ad60
f5641	5169	0x18000ad66
f5642	5170	0x18000ad6c
f5643	5171	0x18000ad72
f5644	5172	0x18000ad78
f5645	5173	0x18000ad7e
f5646	5174	0x18000ad84
f5647	5175	0x18000ad8a
f5648	5176	0x18000ad90
f5649	5177	0x18000ad96
f565	5178	0x18000366e
f5650	5179	0x18000ad9c
f5651	5180	0x18000ada2
f5652	5181	0x18000ada8
f5653	5182	0x18000adae
f5654	5183	0x18000adb4
f5655	5184	0x18000adba
f5656	5185	0x18000adc0
f5657	5186	0x18000adc6
f5658	5187	0x18000adcc
f5659	5188	0x18000add2
f566	5189	0x180003674
f5660	5190	0x18000add8
f5661	5191	0x18000adde
f5662	5192	0x18000ade4
f5663	5193	0x18000adea
f5664	5194	0x18000adf0
f5665	5195	0x18000adf6
f5666	5196	0x18000adfc
f5667	5197	0x18000ae02
f5668	5198	0x18000ae08
f5669	5199	0x18000ae0e
f567	5200	0x18000367a
f5670	5201	0x18000ae14
f5671	5202	0x18000ae1a
f5672	5203	0x18000ae20
f5673	5204	0x18000ae26
f5674	5205	0x18000ae2c
f5675	5206	0x18000ae32
f5676	5207	0x18000ae38
f5677	5208	0x18000ae3e
f5678	5209	0x18000ae44
f5679	5210	0x18000ae4a
f568	5211	0x180003680
f5680	5212	0x18000ae50
f5681	5213	0x18000ae56
f5682	5214	0x18000ae5c
f5683	5215	0x18000ae62
f5684	5216	0x18000ae68
f5685	5217	0x18000ae6e
f5686	5218	0x18000ae74
f5687	5219	0x18000ae7a
f5688	5220	0x18000ae80
f5689	5221	0x18000ae86
f569	5222	0x180003686
f5690	5223	0x18000ae8c
f5691	5224	0x18000ae92
f5692	5225	0x18000ae98
f5693	5226	0x18000ae9e
f5694	5227	0x18000aea4
f5695	5228	0x18000aeaa
f5696	5229	0x18000aeb0
f5697	5230	0x18000aeb6
f5698	5231	0x18000aebc
f5699	5232	0x18000aec2
f57	5233	0x180002a86
f570	5234	0x18000368c
f5700	5235	0x18000aec8
f5701	5236	0x18000aece
f5702	5237	0x18000aed4
f5703	5238	0x18000aeda
f5704	5239	0x18000aee0
f5705	5240	0x18000aee6
f5706	5241	0x18000aeec
f5707	5242	0x18000aef2
f5708	5243	0x18000aef8
f5709	5244	0x18000aefe
f571	5245	0x180003692
f5710	5246	0x18000af04
f5711	5247	0x18000af0a
f5712	5248	0x18000af10
f5713	5249	0x18000af16
f5714	5250	0x18000af1c
f5715	5251	0x18000af22
f5716	5252	0x18000af28
f5717	5253	0x18000af2e
f5718	5254	0x18000af34
f5719	5255	0x18000af3a
f572	5256	0x180003698
f5720	5257	0x18000af40
f5721	5258	0x18000af46
f5722	5259	0x18000af4c
f5723	5260	0x18000af52
f5724	5261	0x18000af58
f5725	5262	0x18000af5e
f5726	5263	0x18000af64
f5727	5264	0x18000af6a
f5728	5265	0x18000af70
f5729	5266	0x18000af76
f573	5267	0x18000369e
f5730	5268	0x18000af7c
f5731	5269	0x18000af82
f5732	5270	0x18000af88
f5733	5271	0x18000af8e
f5734	5272	0x18000af94
f5735	5273	0x18000af9a
f5736	5274	0x18000afa0
f5737	5275	0x18000afa6
f5738	5276	0x18000afac
f5739	5277	0x18000afb2
f574	5278	0x1800036a4
f5740	5279	0x18000afb8
f5741	5280	0x18000afbe
f5742	5281	0x18000afc4
f5743	5282	0x18000afca
f5744	5283	0x18000afd0
f5745	5284	0x18000afd6
f5746	5285	0x18000afdc
f5747	5286	0x18000afe2
f5748	5287	0x18000afe8
f5749	5288	0x18000afee
f575	5289	0x1800036aa
f5750	5290	0x18000aff4
f5751	5291	0x18000affa
f5752	5292	0x18000b000
f5753	5293	0x18000b006
f5754	5294	0x18000b00c
f5755	5295	0x18000b012
f5756	5296	0x18000b018
f5757	5297	0x18000b01e
f5758	5298	0x18000b024
f5759	5299	0x18000b02a
f576	5300	0x1800036b0
f5760	5301	0x18000b030
f5761	5302	0x18000b036
f5762	5303	0x18000b03c
f5763	5304	0x18000b042
f5764	5305	0x18000b048
f5765	5306	0x18000b04e
f5766	5307	0x18000b054
f5767	5308	0x18000b05a
f5768	5309	0x18000b060
f5769	5310	0x18000b066
f577	5311	0x1800036b6
f5770	5312	0x18000b06c
f5771	5313	0x18000b072
f5772	5314	0x18000b078
f5773	5315	0x18000b07e
f5774	5316	0x18000b084
f5775	5317	0x18000b08a
f5776	5318	0x18000b090
f5777	5319	0x18000b096
f5778	5320	0x18000b09c
f5779	5321	0x18000b0a2
f578	5322	0x1800036bc
f5780	5323	0x18000b0a8
f5781	5324	0x18000b0ae
f5782	5325	0x18000b0b4
f5783	5326	0x18000b0ba
f5784	5327	0x18000b0c0
f5785	5328	0x18000b0c6
f5786	5329	0x18000b0cc
f5787	5330	0x18000b0d2
f5788	5331	0x18000b0d8
f5789	5332	0x18000b0de
f579	5333	0x1800036c2
f5790	5334	0x18000b0e4
f5791	5335	0x18000b0ea
f5792	5336	0x18000b0f0
f5793	5337	0x18000b0f6
f5794	5338	0x18000b0fc
f5795	5339	0x18000b102
f5796	5340	0x18000b108
f5797	5341	0x18000b10e
f5798	5342	0x18000b114
f5799	5343	0x18000b11a
f58	5344	0x180002a8c
f580	5345	0x1800036c8
f5800	5346	0x18000b120
f5801	5347	0x18000b126
f5802	5348	0x18000b12c
f5803	5349	0x18000b132
f5804	5350	0x18000b138
f5805	5351	0x18000b13e
f5806	5352	0x18000b144
f5807	5353	0x18000b14a
f5808	5354	0x18000b150
f5809	5355	0x18000b156
f581	5356	0x1800036ce
f5810	5357	0x18000b15c
f5811	5358	0x18000b162
f5812	5359	0x18000b168
f5813	5360	0x18000b16e
f5814	5361	0x18000b174
f5815	5362	0x18000b17a
f5816	5363	0x18000b180
f5817	5364	0x18000b186
f5818	5365	0x18000b18c
f5819	5366	0x18000b192
f582	5367	0x1800036d4
f5820	5368	0x18000b198
f5821	5369	0x18000b19e
f5822	5370	0x18000b1a4
f5823	5371	0x18000b1aa
f5824	5372	0x18000b1b0
f5825	5373	0x18000b1b6
f5826	5374	0x18000b1bc
f5827	5375	0x18000b1c2
f5828	5376	0x18000b1c8
f5829	5377	0x18000b1ce
f583	5378	0x1800036da
f5830	5379	0x18000b1d4
f5831	5380	0x18000b1da
f5832	5381	0x18000b1e0
f5833	5382	0x18000b1e6
f5834	5383	0x18000b1ec
f5835	5384	0x18000b1f2
f5836	5385	0x18000b1f8
f5837	5386	0x18000b1fe
f5838	5387	0x18000b204
f5839	5388	0x18000b20a
f584	5389	0x1800036e0
f5840	5390	0x18000b210
f5841	5391	0x18000b216
f5842	5392	0x18000b21c
f5843	5393	0x18000b222
f5844	5394	0x18000b228
f5845	5395	0x18000b22e
f5846	5396	0x18000b234
f5847	5397	0x18000b23a
f5848	5398	0x18000b240
f5849	5399	0x18000b246
f585	5400	0x1800036e6
f5850	5401	0x18000b24c
f5851	5402	0x18000b252
f5852	5403	0x18000b258
f5853	5404	0x18000b25e
f5854	5405	0x18000b264
f5855	5406	0x18000b26a
f5856	5407	0x18000b270
f5857	5408	0x18000b276
f5858	5409	0x18000b27c
f5859	5410	0x18000b282
f586	5411	0x1800036ec
f5860	5412	0x18000b288
f5861	5413	0x18000b28e
f5862	5414	0x18000b294
f5863	5415	0x18000b29a
f5864	5416	0x18000b2a0
f5865	5417	0x18000b2a6
f5866	5418	0x18000b2ac
f5867	5419	0x18000b2b2
f5868	5420	0x18000b2b8
f5869	5421	0x18000b2be
f587	5422	0x1800036f2
f5870	5423	0x18000b2c4
f5871	5424	0x18000b2ca
f5872	5425	0x18000b2d0
f5873	5426	0x18000b2d6
f5874	5427	0x18000b2dc
f5875	5428	0x18000b2e2
f5876	5429	0x18000b2e8
f5877	5430	0x18000b2ee
f5878	5431	0x18000b2f4
f5879	5432	0x18000b2fa
f588	5433	0x1800036f8
f5880	5434	0x18000b300
f5881	5435	0x18000b306
f5882	5436	0x18000b30c
f5883	5437	0x18000b312
f5884	5438	0x18000b318
f5885	5439	0x18000b31e
f5886	5440	0x18000b324
f5887	5441	0x18000b32a
f5888	5442	0x18000b330
f5889	5443	0x18000b336
f589	5444	0x1800036fe
f5890	5445	0x18000b33c
f5891	5446	0x18000b342
f5892	5447	0x18000b348
f5893	5448	0x18000b34e
f5894	5449	0x18000b354
f5895	5450	0x18000b35a
f5896	5451	0x18000b360
f5897	5452	0x18000b366
f5898	5453	0x18000b36c
f5899	5454	0x18000b372
f59	5455	0x180002a92
f590	5456	0x180003704
f5900	5457	0x18000b378
f5901	5458	0x18000b37e
f5902	5459	0x18000b384
f5903	5460	0x18000b38a
f5904	5461	0x18000b390
f5905	5462	0x18000b396
f5906	5463	0x18000b39c
f5907	5464	0x18000b3a2
f5908	5465	0x18000b3a8
f5909	5466	0x18000b3ae
f591	5467	0x18000370a
f5910	5468	0x18000b3b4
f5911	5469	0x18000b3ba
f5912	5470	0x18000b3c0
f5913	5471	0x18000b3c6
f5914	5472	0x18000b3cc
f5915	5473	0x18000b3d2
f5916	5474	0x18000b3d8
f5917	5475	0x18000b3de
f5918	5476	0x18000b3e4
f5919	5477	0x18000b3ea
f592	5478	0x180003710
f5920	5479	0x18000b3f0
f5921	5480	0x18000b3f6
f5922	5481	0x18000b3fc
f5923	5482	0x18000b402
f5924	5483	0x18000b408
f5925	5484	0x18000b40e
f5926	5485	0x18000b414
f5927	5486	0x18000b41a
f5928	5487	0x18000b420
f5929	5488	0x18000b426
f593	5489	0x180003716
f5930	5490	0x18000b42c
f5931	5491	0x18000b432
f5932	5492	0x18000b438
f5933	5493	0x18000b43e
f5934	5494	0x18000b444
f5935	5495	0x18000b44a
f5936	5496	0x18000b450
f5937	5497	0x18000b456
f5938	5498	0x18000b45c
f5939	5499	0x18000b462
f594	5500	0x18000371c
f5940	5501	0x18000b468
f5941	5502	0x18000b46e
f5942	5503	0x18000b474
f5943	5504	0x18000b47a
f5944	5505	0x18000b480
f5945	5506	0x18000b486
f5946	5507	0x18000b48c
f5947	5508	0x18000b492
f5948	5509	0x18000b498
f5949	5510	0x18000b49e
f595	5511	0x180003722
f5950	5512	0x18000b4a4
f5951	5513	0x18000b4aa
f5952	5514	0x18000b4b0
f5953	5515	0x18000b4b6
f5954	5516	0x18000b4bc
f5955	5517	0x18000b4c2
f5956	5518	0x18000b4c8
f5957	5519	0x18000b4ce
f5958	5520	0x18000b4d4
f5959	5521	0x18000b4da
f596	5522	0x180003728
f5960	5523	0x18000b4e0
f5961	5524	0x18000b4e6
f5962	5525	0x18000b4ec
f5963	5526	0x18000b4f2
f5964	5527	0x18000b4f8
f5965	5528	0x18000b4fe
f5966	5529	0x18000b504
f5967	5530	0x18000b50a
f5968	5531	0x18000b510
f5969	5532	0x18000b516
f597	5533	0x18000372e
f5970	5534	0x18000b51c
f5971	5535	0x18000b522
f5972	5536	0x18000b528
f5973	5537	0x18000b52e
f5974	5538	0x18000b534
f5975	5539	0x18000b53a
f5976	5540	0x18000b540
f5977	5541	0x18000b546
f5978	5542	0x18000b54c
f5979	5543	0x18000b552
f598	5544	0x180003734
f5980	5545	0x18000b558
f5981	5546	0x18000b55e
f5982	5547	0x18000b564
f5983	5548	0x18000b56a
f5984	5549	0x18000b570
f5985	5550	0x18000b576
f5986	5551	0x18000b57c
f5987	5552	0x18000b582
f5988	5553	0x18000b588
f5989	5554	0x18000b58e
f599	5555	0x18000373a
f5990	5556	0x18000b594
f5991	5557	0x18000b59a
f5992	5558	0x18000b5a0
f5993	5559	0x18000b5a6
f5994	5560	0x18000b5ac
f5995	5561	0x18000b5b2
f5996	5562	0x18000b5b8
f5997	5563	0x18000b5be
f5998	5564	0x18000b5c4
f5999	5565	0x18000b5ca
f6	5566	0x180002954
f60	5567	0x180002a98
f600	5568	0x180003740
f6000	5569	0x18000b5d0
f6001	5570	0x18000b5d6
f6002	5571	0x18000b5dc
f6003	5572	0x18000b5e2
f6004	5573	0x18000b5e8
f6005	5574	0x18000b5ee
f6006	5575	0x18000b5f4
f6007	5576	0x18000b5fa
f6008	5577	0x18000b600
f6009	5578	0x18000b606
f601	5579	0x180003746
f6010	5580	0x18000b60c
f6011	5581	0x18000b612
f6012	5582	0x18000b618
f6013	5583	0x18000b61e
f6014	5584	0x18000b624
f6015	5585	0x18000b62a
f6016	5586	0x18000b630
f6017	5587	0x18000b636
f6018	5588	0x18000b63c
f6019	5589	0x18000b642
f602	5590	0x18000374c
f6020	5591	0x18000b648
f6021	5592	0x18000b64e
f6022	5593	0x18000b654
f6023	5594	0x18000b65a
f6024	5595	0x18000b660
f6025	5596	0x18000b666
f6026	5597	0x18000b66c
f6027	5598	0x18000b672
f6028	5599	0x18000b678
f6029	5600	0x18000b67e
f603	5601	0x180003752
f6030	5602	0x18000b684
f6031	5603	0x18000b68a
f6032	5604	0x18000b690
f6033	5605	0x18000b696
f6034	5606	0x18000b69c
f6035	5607	0x18000b6a2
f6036	5608	0x18000b6a8
f6037	5609	0x18000b6ae
f6038	5610	0x18000b6b4
f6039	5611	0x18000b6ba
f604	5612	0x180003758
f6040	5613	0x18000b6c0
f6041	5614	0x18000b6c6
f6042	5615	0x18000b6cc
f6043	5616	0x18000b6d2
f6044	5617	0x18000b6d8
f6045	5618	0x18000b6de
f6046	5619	0x18000b6e4
f6047	5620	0x18000b6ea
f6048	5621	0x18000b6f0
f6049	5622	0x18000b6f6
f605	5623	0x18000375e
f6050	5624	0x18000b6fc
f6051	5625	0x18000b702
f6052	5626	0x18000b708
f6053	5627	0x18000b70e
f6054	5628	0x18000b714
f6055	5629	0x18000b71a
f6056	5630	0x18000b720
f6057	5631	0x18000b726
f6058	5632	0x18000b72c
f6059	5633	0x18000b732
f606	5634	0x180003764
f6060	5635	0x18000b738
f6061	5636	0x18000b73e
f6062	5637	0x18000b744
f6063	5638	0x18000b74a
f6064	5639	0x18000b750
f6065	5640	0x18000b756
f6066	5641	0x18000b75c
f6067	5642	0x18000b762
f6068	5643	0x18000b768
f6069	5644	0x18000b76e
f607	5645	0x18000376a
f6070	5646	0x18000b774
f6071	5647	0x18000b77a
f6072	5648	0x18000b780
f6073	5649	0x18000b786
f6074	5650	0x18000b78c
f6075	5651	0x18000b792
f6076	5652	0x18000b798
f6077	5653	0x18000b79e
f6078	5654	0x18000b7a4
f6079	5655	0x18000b7aa
f608	5656	0x180003770
f6080	5657	0x18000b7b0
f6081	5658	0x18000b7b6
f6082	5659	0x18000b7bc
f6083	5660	0x18000b7c2
f6084	5661	0x18000b7c8
f6085	5662	0x18000b7ce
f6086	5663	0x18000b7d4
f6087	5664	0x18000b7da
f6088	5665	0x18000b7e0
f6089	5666	0x18000b7e6
f609	5667	0x180003776
f6090	5668	0x18000b7ec
f6091	5669	0x18000b7f2
f6092	5670	0x18000b7f8
f6093	5671	0x18000b7fe
f6094	5672	0x18000b804
f6095	5673	0x18000b80a
f6096	5674	0x18000b810
f6097	5675	0x18000b816
f6098	5676	0x18000b81c
f6099	5677	0x18000b822
f61	5678	0x180002a9e
f610	5679	0x18000377c
f6100	5680	0x18000b828
f6101	5681	0x18000b82e
f6102	5682	0x18000b834
f6103	5683	0x18000b83a
f6104	5684	0x18000b840
f6105	5685	0x18000b846
f6106	5686	0x18000b84c
f6107	5687	0x18000b852
f6108	5688	0x18000b858
f6109	5689	0x18000b85e
f611	5690	0x180003782
f6110	5691	0x18000b864
f6111	5692	0x18000b86a
f6112	5693	0x18000b870
f6113	5694	0x18000b876
f6114	5695	0x18000b87c
f6115	5696	0x18000b882
f6116	5697	0x18000b888
f6117	5698	0x18000b88e
f6118	5699	0x18000b894
f6119	5700	0x18000b89a
f612	5701	0x180003788
f6120	5702	0x18000b8a0
f6121	5703	0x18000b8a6
f6122	5704	0x18000b8ac
f6123	5705	0x18000b8b2
f6124	5706	0x18000b8b8
f6125	5707	0x18000b8be
f6126	5708	0x18000b8c4
f6127	5709	0x18000b8ca
f6128	5710	0x18000b8d0
f6129	5711	0x18000b8d6
f613	5712	0x18000378e
f6130	5713	0x18000b8dc
f6131	5714	0x18000b8e2
f6132	5715	0x18000b8e8
f6133	5716	0x18000b8ee
f6134	5717	0x18000b8f4
f6135	5718	0x18000b8fa
f6136	5719	0x18000b900
f6137	5720	0x18000b906
f6138	5721	0x18000b90c
f6139	5722	0x18000b912
f614	5723	0x180003794
f6140	5724	0x18000b918
f6141	5725	0x18000b91e
f6142	5726	0x18000b924
f6143	5727	0x18000b92a
f6144	5728	0x18000b930
f6145	5729	0x18000b936
f6146	5730	0x18000b93c
f6147	5731	0x18000b942
f6148	5732	0x18000b948
f6149	5733	0x18000b94e
f615	5734	0x18000379a
f6150	5735	0x18000b954
f6151	5736	0x18000b95a
f6152	5737	0x18000b960
f6153	5738	0x18000b966
f6154	5739	0x18000b96c
f6155	5740	0x18000b972
f6156	5741	0x18000b978
f6157	5742	0x18000b97e
f6158	5743	0x18000b984
f6159	5744	0x18000b98a
f616	5745	0x1800037a0
f6160	5746	0x18000b990
f6161	5747	0x18000b996
f6162	5748	0x18000b99c
f6163	5749	0x18000b9a2
f6164	5750	0x18000b9a8
f6165	5751	0x18000b9ae
f6166	5752	0x18000b9b4
f6167	5753	0x18000b9ba
f6168	5754	0x18000b9c0
f6169	5755	0x18000b9c6
f617	5756	0x1800037a6
f6170	5757	0x18000b9cc
f6171	5758	0x18000b9d2
f6172	5759	0x18000b9d8
f6173	5760	0x18000b9de
f6174	5761	0x18000b9e4
f6175	5762	0x18000b9ea
f6176	5763	0x18000b9f0
f6177	5764	0x18000b9f6
f6178	5765	0x18000b9fc
f6179	5766	0x18000ba02
f618	5767	0x1800037ac
f6180	5768	0x18000ba08
f6181	5769	0x18000ba0e
f6182	5770	0x18000ba14
f6183	5771	0x18000ba1a
f6184	5772	0x18000ba20
f6185	5773	0x18000ba26
f6186	5774	0x18000ba2c
f6187	5775	0x18000ba32
f6188	5776	0x18000ba38
f6189	5777	0x18000ba3e
f619	5778	0x1800037b2
f6190	5779	0x18000ba44
f6191	5780	0x18000ba4a
f6192	5781	0x18000ba50
f6193	5782	0x18000ba56
f6194	5783	0x18000ba5c
f6195	5784	0x18000ba62
f6196	5785	0x18000ba68
f6197	5786	0x18000ba6e
f6198	5787	0x18000ba74
f6199	5788	0x18000ba7a
f62	5789	0x180002aa4
f620	5790	0x1800037b8
f6200	5791	0x18000ba80
f6201	5792	0x18000ba86
f6202	5793	0x18000ba8c
f6203	5794	0x18000ba92
f6204	5795	0x18000ba98
f6205	5796	0x18000ba9e
f6206	5797	0x18000baa4
f6207	5798	0x18000baaa
f6208	5799	0x18000bab0
f6209	5800	0x18000bab6
f621	5801	0x1800037be
f6210	5802	0x18000babc
f6211	5803	0x18000bac2
f6212	5804	0x18000bac8
f6213	5805	0x18000bace
f6214	5806	0x18000bad4
f6215	5807	0x18000bada
f6216	5808	0x18000bae0
f6217	5809	0x18000bae6
f6218	5810	0x18000baec
f6219	5811	0x18000baf2
f622	5812	0x1800037c4
f6220	5813	0x18000baf8
f6221	5814	0x18000bafe
f6222	5815	0x18000bb04
f6223	5816	0x18000bb0a
f6224	5817	0x18000bb10
f6225	5818	0x18000bb16
f6226	5819	0x18000bb1c
f6227	5820	0x18000bb22
f6228	5821	0x18000bb28
f6229	5822	0x18000bb2e
f623	5823	0x1800037ca
f6230	5824	0x18000bb34
f6231	5825	0x18000bb3a
f6232	5826	0x18000bb40
f6233	5827	0x18000bb46
f6234	5828	0x18000bb4c
f6235	5829	0x18000bb52
f6236	5830	0x18000bb58
f6237	5831	0x18000bb5e
f6238	5832	0x18000bb64
f6239	5833	0x18000bb6a
f624	5834	0x1800037d0
f6240	5835	0x18000bb70
f6241	5836	0x18000bb76
f6242	5837	0x18000bb7c
f6243	5838	0x18000bb82
f6244	5839	0x18000bb88
f6245	5840	0x18000bb8e
f6246	5841	0x18000bb94
f6247	5842	0x18000bb9a
f6248	5843	0x18000bba0
f6249	5844	0x18000bba6
f625	5845	0x1800037d6
f6250	5846	0x18000bbac
f6251	5847	0x18000bbb2
f6252	5848	0x18000bbb8
f6253	5849	0x18000bbbe
f6254	5850	0x18000bbc4
f6255	5851	0x18000bbca
f6256	5852	0x18000bbd0
f6257	5853	0x18000bbd6
f6258	5854	0x18000bbdc
f6259	5855	0x18000bbe2
f626	5856	0x1800037dc
f6260	5857	0x18000bbe8
f6261	5858	0x18000bbee
f6262	5859	0x18000bbf4
f6263	5860	0x18000bbfa
f6264	5861	0x18000bc00
f6265	5862	0x18000bc06
f6266	5863	0x18000bc0c
f6267	5864	0x18000bc12
f6268	5865	0x18000bc18
f6269	5866	0x18000bc1e
f627	5867	0x1800037e2
f6270	5868	0x18000bc24
f6271	5869	0x18000bc2a
f6272	5870	0x18000bc30
f6273	5871	0x18000bc36
f6274	5872	0x18000bc3c
f6275	5873	0x18000bc42
f6276	5874	0x18000bc48
f6277	5875	0x18000bc4e
f6278	5876	0x18000bc54
f6279	5877	0x18000bc5a
f628	5878	0x1800037e8
f6280	5879	0x18000bc60
f6281	5880	0x18000bc66
f6282	5881	0x18000bc6c
f6283	5882	0x18000bc72
f6284	5883	0x18000bc78
f6285	5884	0x18000bc7e
f6286	5885	0x18000bc84
f6287	5886	0x18000bc8a
f6288	5887	0x18000bc90
f6289	5888	0x18000bc96
f629	5889	0x1800037ee
f6290	5890	0x18000bc9c
f6291	5891	0x18000bca2
f6292	5892	0x18000bca8
f6293	5893	0x18000bcae
f6294	5894	0x18000bcb4
f6295	5895	0x18000bcba
f6296	5896	0x18000bcc0
f6297	5897	0x18000bcc6
f6298	5898	0x18000bccc
f6299	5899	0x18000bcd2
f63	5900	0x180002aaa
f630	5901	0x1800037f4
f6300	5902	0x18000bcd8
f6301	5903	0x18000bcde
f6302	5904	0x18000bce4
f6303	5905	0x18000bcea
f6304	5906	0x18000bcf0
f6305	5907	0x18000bcf6
f6306	5908	0x18000bcfc
f6307	5909	0x18000bd02
f6308	5910	0x18000bd08
f6309	5911	0x18000bd0e
f631	5912	0x1800037fa
f6310	5913	0x18000bd14
f6311	5914	0x18000bd1a
f6312	5915	0x18000bd20
f6313	5916	0x18000bd26
f6314	5917	0x18000bd2c
f6315	5918	0x18000bd32
f6316	5919	0x18000bd38
f6317	5920	0x18000bd3e
f6318	5921	0x18000bd44
f6319	5922	0x18000bd4a
f632	5923	0x180003800
f6320	5924	0x18000bd50
f6321	5925	0x18000bd56
f6322	5926	0x18000bd5c
f6323	5927	0x18000bd62
f6324	5928	0x18000bd68
f6325	5929	0x18000bd6e
f6326	5930	0x18000bd74
f6327	5931	0x18000bd7a
f6328	5932	0x18000bd80
f6329	5933	0x18000bd86
f633	5934	0x180003806
f6330	5935	0x18000bd8c
f6331	5936	0x18000bd92
f6332	5937	0x18000bd98
f6333	5938	0x18000bd9e
f6334	5939	0x18000bda4
f6335	5940	0x18000bdaa
f6336	5941	0x18000bdb0
f6337	5942	0x18000bdb6
f6338	5943	0x18000bdbc
f6339	5944	0x18000bdc2
f634	5945	0x18000380c
f6340	5946	0x18000bdc8
f6341	5947	0x18000bdce
f6342	5948	0x18000bdd4
f6343	5949	0x18000bdda
f6344	5950	0x18000bde0
f6345	5951	0x18000bde6
f6346	5952	0x18000bdec
f6347	5953	0x18000bdf2
f6348	5954	0x18000bdf8
f6349	5955	0x18000bdfe
f635	5956	0x180003812
f6350	5957	0x18000be04
f6351	5958	0x18000be0a
f6352	5959	0x18000be10
f6353	5960	0x18000be16
f6354	5961	0x18000be1c
f6355	5962	0x18000be22
f6356	5963	0x18000be28
f6357	5964	0x18000be2e
f6358	5965	0x18000be34
f6359	5966	0x18000be3a
f636	5967	0x180003818
f6360	5968	0x18000be40
f6361	5969	0x18000be46
f6362	5970	0x18000be4c
f6363	5971	0x18000be52
f6364	5972	0x18000be58
f6365	5973	0x18000be5e
f6366	5974	0x18000be64
f6367	5975	0x18000be6a
f6368	5976	0x18000be70
f6369	5977	0x18000be76
f637	5978	0x18000381e
f6370	5979	0x18000be7c
f6371	5980	0x18000be82
f6372	5981	0x18000be88
f6373	5982	0x18000be8e
f6374	5983	0x18000be94
f6375	5984	0x18000be9a
f6376	5985	0x18000bea0
f6377	5986	0x18000bea6
f6378	5987	0x18000beac
f6379	5988	0x18000beb2
f638	5989	0x180003824
f6380	5990	0x18000beb8
f6381	5991	0x18000bebe
f6382	5992	0x18000bec4
f6383	5993	0x18000beca
f6384	5994	0x18000bed0
f6385	5995	0x18000bed6
f6386	5996	0x18000bedc
f6387	5997	0x18000bee2
f6388	5998	0x18000bee8
f6389	5999	0x18000beee
f639	6000	0x18000382a
f6390	6001	0x18000bef4
f6391	6002	0x18000befa
f6392	6003	0x18000bf00
f6393	6004	0x18000bf06
f6394	6005	0x18000bf0c
f6395	6006	0x18000bf12
f6396	6007	0x18000bf18
f6397	6008	0x18000bf1e
f6398	6009	0x18000bf24
f6399	6010	0x18000bf2a
f64	6011	0x180002ab0
f640	6012	0x180003830
f6400	6013	0x18000bf30
f6401	6014	0x18000bf36
f6402	6015	0x18000bf3c
f6403	6016	0x18000bf42
f6404	6017	0x18000bf48
f6405	6018	0x18000bf4e
f6406	6019	0x18000bf54
f6407	6020	0x18000bf5a
f6408	6021	0x18000bf60
f6409	6022	0x18000bf66
f641	6023	0x180003836
f6410	6024	0x18000bf6c
f6411	6025	0x18000bf72
f6412	6026	0x18000bf78
f6413	6027	0x18000bf7e
f6414	6028	0x18000bf84
f6415	6029	0x18000bf8a
f6416	6030	0x18000bf90
f6417	6031	0x18000bf96
f6418	6032	0x18000bf9c
f6419	6033	0x18000bfa2
f642	6034	0x18000383c
f6420	6035	0x18000bfa8
f6421	6036	0x18000bfae
f6422	6037	0x18000bfb4
f6423	6038	0x18000bfba
f6424	6039	0x18000bfc0
f6425	6040	0x18000bfc6
f6426	6041	0x18000bfcc
f6427	6042	0x18000bfd2
f6428	6043	0x18000bfd8
f6429	6044	0x18000bfde
f643	6045	0x180003842
f6430	6046	0x18000bfe4
f6431	6047	0x18000bfea
f6432	6048	0x18000bff0
f6433	6049	0x18000bff6
f6434	6050	0x18000bffc
f6435	6051	0x18000c002
f6436	6052	0x18000c008
f6437	6053	0x18000c00e
f6438	6054	0x18000c014
f6439	6055	0x18000c01a
f644	6056	0x180003848
f6440	6057	0x18000c020
f6441	6058	0x18000c026
f6442	6059	0x18000c02c
f6443	6060	0x18000c032
f6444	6061	0x18000c038
f6445	6062	0x18000c03e
f6446	6063	0x18000c044
f6447	6064	0x18000c04a
f6448	6065	0x18000c050
f6449	6066	0x18000c056
f645	6067	0x18000384e
f6450	6068	0x18000c05c
f6451	6069	0x18000c062
f6452	6070	0x18000c068
f6453	6071	0x18000c06e
f6454	6072	0x18000c074
f6455	6073	0x18000c07a
f6456	6074	0x18000c080
f6457	6075	0x18000c086
f6458	6076	0x18000c08c
f6459	6077	0x18000c092
f646	6078	0x180003854
f6460	6079	0x18000c098
f6461	6080	0x18000c09e
f6462	6081	0x18000c0a4
f6463	6082	0x18000c0aa
f6464	6083	0x18000c0b0
f6465	6084	0x18000c0b6
f6466	6085	0x18000c0bc
f6467	6086	0x18000c0c2
f6468	6087	0x18000c0c8
f6469	6088	0x18000c0ce
f647	6089	0x18000385a
f6470	6090	0x18000c0d4
f6471	6091	0x18000c0da
f6472	6092	0x18000c0e0
f6473	6093	0x18000c0e6
f6474	6094	0x18000c0ec
f6475	6095	0x18000c0f2
f6476	6096	0x18000c0f8
f6477	6097	0x18000c0fe
f6478	6098	0x18000c104
f6479	6099	0x18000c10a
f648	6100	0x180003860
f6480	6101	0x18000c110
f6481	6102	0x18000c116
f6482	6103	0x18000c11c
f6483	6104	0x18000c122
f6484	6105	0x18000c128
f6485	6106	0x18000c12e
f6486	6107	0x18000c134
f6487	6108	0x18000c13a
f6488	6109	0x18000c140
f6489	6110	0x18000c146
f649	6111	0x180003866
f6490	6112	0x18000c14c
f6491	6113	0x18000c152
f6492	6114	0x18000c158
f6493	6115	0x18000c15e
f6494	6116	0x18000c164
f6495	6117	0x18000c16a
f6496	6118	0x18000c170
f6497	6119	0x18000c176
f6498	6120	0x18000c17c
f6499	6121	0x18000c182
f65	6122	0x180002ab6
f650	6123	0x18000386c
f6500	6124	0x18000c188
f6501	6125	0x18000c18e
f6502	6126	0x18000c194
f6503	6127	0x18000c19a
f6504	6128	0x18000c1a0
f6505	6129	0x18000c1a6
f6506	6130	0x18000c1ac
f6507	6131	0x18000c1b2
f6508	6132	0x18000c1b8
f6509	6133	0x18000c1be
f651	6134	0x180003872
f6510	6135	0x18000c1c4
f6511	6136	0x18000c1ca
f6512	6137	0x18000c1d0
f6513	6138	0x18000c1d6
f6514	6139	0x18000c1dc
f6515	6140	0x18000c1e2
f6516	6141	0x18000c1e8
f6517	6142	0x18000c1ee
f6518	6143	0x18000c1f4
f6519	6144	0x18000c1fa
f652	6145	0x180003878
f6520	6146	0x18000c200
f6521	6147	0x18000c206
f6522	6148	0x18000c20c
f6523	6149	0x18000c212
f6524	6150	0x18000c218
f6525	6151	0x18000c21e
f6526	6152	0x18000c224
f6527	6153	0x18000c22a
f6528	6154	0x18000c230
f6529	6155	0x18000c236
f653	6156	0x18000387e
f6530	6157	0x18000c23c
f6531	6158	0x18000c242
f6532	6159	0x18000c248
f6533	6160	0x18000c24e
f6534	6161	0x18000c254
f6535	6162	0x18000c25a
f6536	6163	0x18000c260
f6537	6164	0x18000c266
f6538	6165	0x18000c26c
f6539	6166	0x18000c272
f654	6167	0x180003884
f6540	6168	0x18000c278
f6541	6169	0x18000c27e
f6542	6170	0x18000c284
f6543	6171	0x18000c28a
f6544	6172	0x18000c290
f6545	6173	0x18000c296
f6546	6174	0x18000c29c
f6547	6175	0x18000c2a2
f6548	6176	0x18000c2a8
f6549	6177	0x18000c2ae
f655	6178	0x18000388a
f6550	6179	0x18000c2b4
f6551	6180	0x18000c2ba
f6552	6181	0x18000c2c0
f6553	6182	0x18000c2c6
f6554	6183	0x18000c2cc
f6555	6184	0x18000c2d2
f6556	6185	0x18000c2d8
f6557	6186	0x18000c2de
f6558	6187	0x18000c2e4
f6559	6188	0x18000c2ea
f656	6189	0x180003890
f6560	6190	0x18000c2f0
f6561	6191	0x18000c2f6
f6562	6192	0x18000c2fc
f6563	6193	0x18000c302
f6564	6194	0x18000c308
f6565	6195	0x18000c30e
f6566	6196	0x18000c314
f6567	6197	0x18000c31a
f6568	6198	0x18000c320
f6569	6199	0x18000c326
f657	6200	0x180003896
f6570	6201	0x18000c32c
f6571	6202	0x18000c332
f6572	6203	0x18000c338
f6573	6204	0x18000c33e
f6574	6205	0x18000c344
f6575	6206	0x18000c34a
f6576	6207	0x18000c350
f6577	6208	0x18000c356
f6578	6209	0x18000c35c
f6579	6210	0x18000c362
f658	6211	0x18000389c
f6580	6212	0x18000c368
f6581	6213	0x18000c36e
f6582	6214	0x18000c374
f6583	6215	0x18000c37a
f6584	6216	0x18000c380
f6585	6217	0x18000c386
f6586	6218	0x18000c38c
f6587	6219	0x18000c392
f6588	6220	0x18000c398
f6589	6221	0x18000c39e
f659	6222	0x1800038a2
f6590	6223	0x18000c3a4
f6591	6224	0x18000c3aa
f6592	6225	0x18000c3b0
f6593	6226	0x18000c3b6
f6594	6227	0x18000c3bc
f6595	6228	0x18000c3c2
f6596	6229	0x18000c3c8
f6597	6230	0x18000c3ce
f6598	6231	0x18000c3d4
f6599	6232	0x18000c3da
f66	6233	0x180002abc
f660	6234	0x1800038a8
f6600	6235	0x18000c3e0
f6601	6236	0x18000c3e6
f6602	6237	0x18000c3ec
f6603	6238	0x18000c3f2
f6604	6239	0x18000c3f8
f6605	6240	0x18000c3fe
f6606	6241	0x18000c404
f6607	6242	0x18000c40a
f6608	6243	0x18000c410
f6609	6244	0x18000c416
f661	6245	0x1800038ae
f6610	6246	0x18000c41c
f6611	6247	0x18000c422
f6612	6248	0x18000c428
f6613	6249	0x18000c42e
f6614	6250	0x18000c434
f6615	6251	0x18000c43a
f6616	6252	0x18000c440
f6617	6253	0x18000c446
f6618	6254	0x18000c44c
f6619	6255	0x18000c452
f662	6256	0x1800038b4
f6620	6257	0x18000c458
f6621	6258	0x18000c45e
f6622	6259	0x18000c464
f6623	6260	0x18000c46a
f6624	6261	0x18000c470
f6625	6262	0x18000c476
f6626	6263	0x18000c47c
f6627	6264	0x18000c482
f6628	6265	0x18000c488
f6629	6266	0x18000c48e
f663	6267	0x1800038ba
f6630	6268	0x18000c494
f6631	6269	0x18000c49a
f6632	6270	0x18000c4a0
f6633	6271	0x18000c4a6
f6634	6272	0x18000c4ac
f6635	6273	0x18000c4b2
f6636	6274	0x18000c4b8
f6637	6275	0x18000c4be
f6638	6276	0x18000c4c4
f6639	6277	0x18000c4ca
f664	6278	0x1800038c0
f6640	6279	0x18000c4d0
f6641	6280	0x18000c4d6
f6642	6281	0x18000c4dc
f6643	6282	0x18000c4e2
f6644	6283	0x18000c4e8
f6645	6284	0x18000c4ee
f6646	6285	0x18000c4f4
f6647	6286	0x18000c4fa
f6648	6287	0x18000c500
f6649	6288	0x18000c506
f665	6289	0x1800038c6
f6650	6290	0x18000c50c
f6651	6291	0x18000c512
f6652	6292	0x18000c518
f6653	6293	0x18000c51e
f6654	6294	0x18000c524
f6655	6295	0x18000c52a
f6656	6296	0x18000c530
f6657	6297	0x18000c536
f6658	6298	0x18000c53c
f6659	6299	0x18000c542
f666	6300	0x1800038cc
f6660	6301	0x18000c548
f6661	6302	0x18000c54e
f6662	6303	0x18000c554
f6663	6304	0x18000c55a
f6664	6305	0x18000c560
f6665	6306	0x18000c566
f6666	6307	0x18000c56c
f6667	6308	0x18000c572
f6668	6309	0x18000c578
f6669	6310	0x18000c57e
f667	6311	0x1800038d2
f6670	6312	0x18000c584
f6671	6313	0x18000c58a
f6672	6314	0x18000c590
f6673	6315	0x18000c596
f6674	6316	0x18000c59c
f6675	6317	0x18000c5a2
f6676	6318	0x18000c5a8
f6677	6319	0x18000c5ae
f6678	6320	0x18000c5b4
f6679	6321	0x18000c5ba
f668	6322	0x1800038d8
f6680	6323	0x18000c5c0
f6681	6324	0x18000c5c6
f6682	6325	0x18000c5cc
f6683	6326	0x18000c5d2
f6684	6327	0x18000c5d8
f6685	6328	0x18000c5de
f6686	6329	0x18000c5e4
f6687	6330	0x18000c5ea
f6688	6331	0x18000c5f0
f6689	6332	0x18000c5f6
f669	6333	0x1800038de
f6690	6334	0x18000c5fc
f6691	6335	0x18000c602
f6692	6336	0x18000c608
f6693	6337	0x18000c60e
f6694	6338	0x18000c614
f6695	6339	0x18000c61a
f6696	6340	0x18000c620
f6697	6341	0x18000c626
f6698	6342	0x18000c62c
f6699	6343	0x18000c632
f67	6344	0x180002ac2
f670	6345	0x1800038e4
f6700	6346	0x18000c638
f6701	6347	0x18000c63e
f6702	6348	0x18000c644
f6703	6349	0x18000c64a
f6704	6350	0x18000c650
f6705	6351	0x18000c656
f6706	6352	0x18000c65c
f6707	6353	0x18000c662
f6708	6354	0x18000c668
f6709	6355	0x18000c66e
f671	6356	0x1800038ea
f6710	6357	0x18000c674
f6711	6358	0x18000c67a
f6712	6359	0x18000c680
f6713	6360	0x18000c686
f6714	6361	0x18000c68c
f6715	6362	0x18000c692
f6716	6363	0x18000c698
f6717	6364	0x18000c69e
f6718	6365	0x18000c6a4
f6719	6366	0x18000c6aa
f672	6367	0x1800038f0
f6720	6368	0x18000c6b0
f6721	6369	0x18000c6b6
f6722	6370	0x18000c6bc
f6723	6371	0x18000c6c2
f6724	6372	0x18000c6c8
f6725	6373	0x18000c6ce
f6726	6374	0x18000c6d4
f6727	6375	0x18000c6da
f6728	6376	0x18000c6e0
f6729	6377	0x18000c6e6
f673	6378	0x1800038f6
f6730	6379	0x18000c6ec
f6731	6380	0x18000c6f2
f6732	6381	0x18000c6f8
f6733	6382	0x18000c6fe
f6734	6383	0x18000c704
f6735	6384	0x18000c70a
f6736	6385	0x18000c710
f6737	6386	0x18000c716
f6738	6387	0x18000c71c
f6739	6388	0x18000c722
f674	6389	0x1800038fc
f6740	6390	0x18000c728
f6741	6391	0x18000c72e
f6742	6392	0x18000c734
f6743	6393	0x18000c73a
f6744	6394	0x18000c740
f6745	6395	0x18000c746
f6746	6396	0x18000c74c
f6747	6397	0x18000c752
f6748	6398	0x18000c758
f6749	6399	0x18000c75e
f675	6400	0x180003902
f6750	6401	0x18000c764
f6751	6402	0x18000c76a
f6752	6403	0x18000c770
f6753	6404	0x18000c776
f6754	6405	0x18000c77c
f6755	6406	0x18000c782
f6756	6407	0x18000c788
f6757	6408	0x18000c78e
f6758	6409	0x18000c794
f6759	6410	0x18000c79a
f676	6411	0x180003908
f6760	6412	0x18000c7a0
f6761	6413	0x18000c7a6
f6762	6414	0x18000c7ac
f6763	6415	0x18000c7b2
f6764	6416	0x18000c7b8
f6765	6417	0x18000c7be
f6766	6418	0x18000c7c4
f6767	6419	0x18000c7ca
f6768	6420	0x18000c7d0
f6769	6421	0x18000c7d6
f677	6422	0x18000390e
f6770	6423	0x18000c7dc
f6771	6424	0x18000c7e2
f6772	6425	0x18000c7e8
f6773	6426	0x18000c7ee
f6774	6427	0x18000c7f4
f6775	6428	0x18000c7fa
f6776	6429	0x18000c800
f6777	6430	0x18000c806
f6778	6431	0x18000c80c
f6779	6432	0x18000c812
f678	6433	0x180003914
f6780	6434	0x18000c818
f6781	6435	0x18000c81e
f6782	6436	0x18000c824
f6783	6437	0x18000c82a
f6784	6438	0x18000c830
f6785	6439	0x18000c836
f6786	6440	0x18000c83c
f6787	6441	0x18000c842
f6788	6442	0x18000c848
f6789	6443	0x18000c84e
f679	6444	0x18000391a
f6790	6445	0x18000c854
f6791	6446	0x18000c85a
f6792	6447	0x18000c860
f6793	6448	0x18000c866
f6794	6449	0x18000c86c
f6795	6450	0x18000c872
f6796	6451	0x18000c878
f6797	6452	0x18000c87e
f6798	6453	0x18000c884
f6799	6454	0x18000c88a
f68	6455	0x180002ac8
f680	6456	0x180003920
f6800	6457	0x18000c890
f6801	6458	0x18000c896
f6802	6459	0x18000c89c
f6803	6460	0x18000c8a2
f6804	6461	0x18000c8a8
f6805	6462	0x18000c8ae
f6806	6463	0x18000c8b4
f6807	6464	0x18000c8ba
f6808	6465	0x18000c8c0
f6809	6466	0x18000c8c6
f681	6467	0x180003926
f6810	6468	0x18000c8cc
f6811	6469	0x18000c8d2
f6812	6470	0x18000c8d8
f6813	6471	0x18000c8de
f6814	6472	0x18000c8e4
f6815	6473	0x18000c8ea
f6816	6474	0x18000c8f0
f6817	6475	0x18000c8f6
f6818	6476	0x18000c8fc
f6819	6477	0x18000c902
f682	6478	0x18000392c
f6820	6479	0x18000c908
f6821	6480	0x18000c90e
f6822	6481	0x18000c914
f6823	6482	0x18000c91a
f6824	6483	0x18000c920
f6825	6484	0x18000c926
f6826	6485	0x18000c92c
f6827	6486	0x18000c932
f6828	6487	0x18000c938
f6829	6488	0x18000c93e
f683	6489	0x180003932
f6830	6490	0x18000c944
f6831	6491	0x18000c94a
f6832	6492	0x18000c950
f6833	6493	0x18000c956
f6834	6494	0x18000c95c
f6835	6495	0x18000c962
f6836	6496	0x18000c968
f6837	6497	0x18000c96e
f6838	6498	0x18000c974
f6839	6499	0x18000c97a
f684	6500	0x180003938
f6840	6501	0x18000c980
f6841	6502	0x18000c986
f6842	6503	0x18000c98c
f6843	6504	0x18000c992
f6844	6505	0x18000c998
f6845	6506	0x18000c99e
f6846	6507	0x18000c9a4
f6847	6508	0x18000c9aa
f6848	6509	0x18000c9b0
f6849	6510	0x18000c9b6
f685	6511	0x18000393e
f6850	6512	0x18000c9bc
f6851	6513	0x18000c9c2
f6852	6514	0x18000c9c8
f6853	6515	0x18000c9ce
f6854	6516	0x18000c9d4
f6855	6517	0x18000c9da
f6856	6518	0x18000c9e0
f6857	6519	0x18000c9e6
f6858	6520	0x18000c9ec
f6859	6521	0x18000c9f2
f686	6522	0x180003944
f6860	6523	0x18000c9f8
f6861	6524	0x18000c9fe
f6862	6525	0x18000ca04
f6863	6526	0x18000ca0a
f6864	6527	0x18000ca10
f6865	6528	0x18000ca16
f6866	6529	0x18000ca1c
f6867	6530	0x18000ca22
f6868	6531	0x18000ca28
f6869	6532	0x18000ca2e
f687	6533	0x18000394a
f6870	6534	0x18000ca34
f6871	6535	0x18000ca3a
f6872	6536	0x18000ca40
f6873	6537	0x18000ca46
f6874	6538	0x18000ca4c
f6875	6539	0x18000ca52
f6876	6540	0x18000ca58
f6877	6541	0x18000ca5e
f6878	6542	0x18000ca64
f6879	6543	0x18000ca6a
f688	6544	0x180003950
f6880	6545	0x18000ca70
f6881	6546	0x18000ca76
f6882	6547	0x18000ca7c
f6883	6548	0x18000ca82
f6884	6549	0x18000ca88
f6885	6550	0x18000ca8e
f6886	6551	0x18000ca94
f6887	6552	0x18000ca9a
f6888	6553	0x18000caa0
f6889	6554	0x18000caa6
f689	6555	0x180003956
f6890	6556	0x18000caac
f6891	6557	0x18000cab2
f6892	6558	0x18000cab8
f6893	6559	0x18000cabe
f6894	6560	0x18000cac4
f6895	6561	0x18000caca
f6896	6562	0x18000cad0
f6897	6563	0x18000cad6
f6898	6564	0x18000cadc
f6899	6565	0x18000cae2
f69	6566	0x180002ace
f690	6567	0x18000395c
f6900	6568	0x18000cae8
f6901	6569	0x18000caee
f6902	6570	0x18000caf4
f6903	6571	0x18000cafa
f6904	6572	0x18000cb00
f6905	6573	0x18000cb06
f6906	6574	0x18000cb0c
f6907	6575	0x18000cb12
f6908	6576	0x18000cb18
f6909	6577	0x18000cb1e
f691	6578	0x180003962
f6910	6579	0x18000cb24
f6911	6580	0x18000cb2a
f6912	6581	0x18000cb30
f6913	6582	0x18000cb36
f6914	6583	0x18000cb3c
f6915	6584	0x18000cb42
f6916	6585	0x18000cb48
f6917	6586	0x18000cb4e
f6918	6587	0x18000cb54
f6919	6588	0x18000cb5a
f692	6589	0x180003968
f6920	6590	0x18000cb60
f6921	6591	0x18000cb66
f6922	6592	0x18000cb6c
f6923	6593	0x18000cb72
f6924	6594	0x18000cb78
f6925	6595	0x18000cb7e
f6926	6596	0x18000cb84
f6927	6597	0x18000cb8a
f6928	6598	0x18000cb90
f6929	6599	0x18000cb96
f693	6600	0x18000396e
f6930	6601	0x18000cb9c
f6931	6602	0x18000cba2
f6932	6603	0x18000cba8
f6933	6604	0x18000cbae
f6934	6605	0x18000cbb4
f6935	6606	0x18000cbba
f6936	6607	0x18000cbc0
f6937	6608	0x18000cbc6
f6938	6609	0x18000cbcc
f6939	6610	0x18000cbd2
f694	6611	0x180003974
f6940	6612	0x18000cbd8
f6941	6613	0x18000cbde
f6942	6614	0x18000cbe4
f6943	6615	0x18000cbea
f6944	6616	0x18000cbf0
f6945	6617	0x18000cbf6
f6946	6618	0x18000cbfc
f6947	6619	0x18000cc02
f6948	6620	0x18000cc08
f6949	6621	0x18000cc0e
f695	6622	0x18000397a
f6950	6623	0x18000cc14
f6951	6624	0x18000cc1a
f6952	6625	0x18000cc20
f6953	6626	0x18000cc26
f6954	6627	0x18000cc2c
f6955	6628	0x18000cc32
f6956	6629	0x18000cc38
f6957	6630	0x18000cc3e
f6958	6631	0x18000cc44
f6959	6632	0x18000cc4a
f696	6633	0x180003980
f6960	6634	0x18000cc50
f6961	6635	0x18000cc56
f6962	6636	0x18000cc5c
f6963	6637	0x18000cc62
f6964	6638	0x18000cc68
f6965	6639	0x18000cc6e
f6966	6640	0x18000cc74
f6967	6641	0x18000cc7a
f6968	6642	0x18000cc80
f6969	6643	0x18000cc86
f697	6644	0x180003986
f6970	6645	0x18000cc8c
f6971	6646	0x18000cc92
f6972	6647	0x18000cc98
f6973	6648	0x18000cc9e
f6974	6649	0x18000cca4
f6975	6650	0x18000ccaa
f6976	6651	0x18000ccb0
f6977	6652	0x18000ccb6
f6978	6653	0x18000ccbc
f6979	6654	0x18000ccc2
f698	6655	0x18000398c
f6980	6656	0x18000ccc8
f6981	6657	0x18000ccce
f6982	6658	0x18000ccd4
f6983	6659	0x18000ccda
f6984	6660	0x18000cce0
f6985	6661	0x18000cce6
f6986	6662	0x18000ccec
f6987	6663	0x18000ccf2
f6988	6664	0x18000ccf8
f6989	6665	0x18000ccfe
f699	6666	0x180003992
f6990	6667	0x18000cd04
f6991	6668	0x18000cd0a
f6992	6669	0x18000cd10
f6993	6670	0x18000cd16
f6994	6671	0x18000cd1c
f6995	6672	0x18000cd22
f6996	6673	0x18000cd28
f6997	6674	0x18000cd2e
f6998	6675	0x18000cd34
f6999	6676	0x18000cd3a
f7	6677	0x18000295a
f70	6678	0x180002ad4
f700	6679	0x180003998
f7000	6680	0x18000cd40
f7001	6681	0x18000cd46
f7002	6682	0x18000cd4c
f7003	6683	0x18000cd52
f7004	6684	0x18000cd58
f7005	6685	0x18000cd5e
f7006	6686	0x18000cd64
f7007	6687	0x18000cd6a
f7008	6688	0x18000cd70
f7009	6689	0x18000cd76
f701	6690	0x18000399e
f7010	6691	0x18000cd7c
f7011	6692	0x18000cd82
f7012	6693	0x18000cd88
f7013	6694	0x18000cd8e
f7014	6695	0x18000cd94
f7015	6696	0x18000cd9a
f7016	6697	0x18000cda0
f7017	6698	0x18000cda6
f7018	6699	0x18000cdac
f7019	6700	0x18000cdb2
f702	6701	0x1800039a4
f7020	6702	0x18000cdb8
f7021	6703	0x18000cdbe
f7022	6704	0x18000cdc4
f7023	6705	0x18000cdca
f7024	6706	0x18000cdd0
f7025	6707	0x18000cdd6
f7026	6708	0x18000cddc
f7027	6709	0x18000cde2
f7028	6710	0x18000cde8
f7029	6711	0x18000cdee
f703	6712	0x1800039aa
f7030	6713	0x18000cdf4
f7031	6714	0x18000cdfa
f7032	6715	0x18000ce00
f7033	6716	0x18000ce06
f7034	6717	0x18000ce0c
f7035	6718	0x18000ce12
f7036	6719	0x18000ce18
f7037	6720	0x18000ce1e
f7038	6721	0x18000ce24
f7039	6722	0x18000ce2a
f704	6723	0x1800039b0
f7040	6724	0x18000ce30
f7041	6725	0x18000ce36
f7042	6726	0x18000ce3c
f7043	6727	0x18000ce42
f7044	6728	0x18000ce48
f7045	6729	0x18000ce4e
f7046	6730	0x18000ce54
f7047	6731	0x18000ce5a
f7048	6732	0x18000ce60
f7049	6733	0x18000ce66
f705	6734	0x1800039b6
f7050	6735	0x18000ce6c
f7051	6736	0x18000ce72
f7052	6737	0x18000ce78
f7053	6738	0x18000ce7e
f7054	6739	0x18000ce84
f7055	6740	0x18000ce8a
f7056	6741	0x18000ce90
f7057	6742	0x18000ce96
f7058	6743	0x18000ce9c
f7059	6744	0x18000cea2
f706	6745	0x1800039bc
f7060	6746	0x18000cea8
f7061	6747	0x18000ceae
f7062	6748	0x18000ceb4
f7063	6749	0x18000ceba
f7064	6750	0x18000cec0
f7065	6751	0x18000cec6
f7066	6752	0x18000cecc
f7067	6753	0x18000ced2
f7068	6754	0x18000ced8
f7069	6755	0x18000cede
f707	6756	0x1800039c2
f7070	6757	0x18000cee4
f7071	6758	0x18000ceea
f7072	6759	0x18000cef0
f7073	6760	0x18000cef6
f7074	6761	0x18000cefc
f7075	6762	0x18000cf02
f7076	6763	0x18000cf08
f7077	6764	0x18000cf0e
f7078	6765	0x18000cf14
f7079	6766	0x18000cf1a
f708	6767	0x1800039c8
f7080	6768	0x18000cf20
f7081	6769	0x18000cf26
f7082	6770	0x18000cf2c
f7083	6771	0x18000cf32
f7084	6772	0x18000cf38
f7085	6773	0x18000cf3e
f7086	6774	0x18000cf44
f7087	6775	0x18000cf4a
f7088	6776	0x18000cf50
f7089	6777	0x18000cf56
f709	6778	0x1800039ce
f7090	6779	0x18000cf5c
f7091	6780	0x18000cf62
f7092	6781	0x18000cf68
f7093	6782	0x18000cf6e
f7094	6783	0x18000cf74
f7095	6784	0x18000cf7a
f7096	6785	0x18000cf80
f7097	6786	0x18000cf86
f7098	6787	0x18000cf8c
f7099	6788	0x18000cf92
f71	6789	0x180002ada
f710	6790	0x1800039d4
f7100	6791	0x18000cf98
f7101	6792	0x18000cf9e
f7102	6793	0x18000cfa4
f7103	6794	0x18000cfaa
f7104	6795	0x18000cfb0
f7105	6796	0x18000cfb6
f7106	6797	0x18000cfbc
f7107	6798	0x18000cfc2
f7108	6799	0x18000cfc8
f7109	6800	0x18000cfce
f711	6801	0x1800039da
f7110	6802	0x18000cfd4
f7111	6803	0x18000cfda
f7112	6804	0x18000cfe0
f7113	6805	0x18000cfe6
f7114	6806	0x18000cfec
f7115	6807	0x18000cff2
f7116	6808	0x18000cff8
f7117	6809	0x18000cffe
f7118	6810	0x18000d004
f7119	6811	0x18000d00a
f712	6812	0x1800039e0
f7120	6813	0x18000d010
f7121	6814	0x18000d016
f7122	6815	0x18000d01c
f7123	6816	0x18000d022
f7124	6817	0x18000d028
f7125	6818	0x18000d02e
f7126	6819	0x18000d034
f7127	6820	0x18000d03a
f7128	6821	0x18000d040
f7129	6822	0x18000d046
f713	6823	0x1800039e6
f7130	6824	0x18000d04c
f7131	6825	0x18000d052
f7132	6826	0x18000d058
f7133	6827	0x18000d05e
f7134	6828	0x18000d064
f7135	6829	0x18000d06a
f7136	6830	0x18000d070
f7137	6831	0x18000d076
f7138	6832	0x18000d07c
f7139	6833	0x18000d082
f714	6834	0x1800039ec
f7140	6835	0x18000d088
f7141	6836	0x18000d08e
f7142	6837	0x18000d094
f7143	6838	0x18000d09a
f7144	6839	0x18000d0a0
f7145	6840	0x18000d0a6
f7146	6841	0x18000d0ac
f7147	6842	0x18000d0b2
f7148	6843	0x18000d0b8
f7149	6844	0x18000d0be
f715	6845	0x1800039f2
f7150	6846	0x18000d0c4
f7151	6847	0x18000d0ca
f7152	6848	0x18000d0d0
f7153	6849	0x18000d0d6
f7154	6850	0x18000d0dc
f7155	6851	0x18000d0e2
f7156	6852	0x18000d0e8
f7157	6853	0x18000d0ee
f7158	6854	0x18000d0f4
f7159	6855	0x18000d0fa
f716	6856	0x1800039f8
f7160	6857	0x18000d100
f7161	6858	0x18000d106
f7162	6859	0x18000d10c
f7163	6860	0x18000d112
f7164	6861	0x18000d118
f7165	6862	0x18000d11e
f7166	6863	0x18000d124
f7167	6864	0x18000d12a
f7168	6865	0x18000d130
f7169	6866	0x18000d136
f717	6867	0x1800039fe
f7170	6868	0x18000d13c
f7171	6869	0x18000d142
f7172	6870	0x18000d148
f7173	6871	0x18000d14e
f7174	6872	0x18000d154
f7175	6873	0x18000d15a
f7176	6874	0x18000d160
f7177	6875	0x18000d166
f7178	6876	0x18000d16c
f7179	6877	0x18000d172
f718	6878	0x180003a04
f7180	6879	0x18000d178
f7181	6880	0x18000d17e
f7182	6881	0x18000d184
f7183	6882	0x18000d18a
f7184	6883	0x18000d190
f7185	6884	0x18000d196
f7186	6885	0x18000d19c
f7187	6886	0x18000d1a2
f7188	6887	0x18000d1a8
f7189	6888	0x18000d1ae
f719	6889	0x180003a0a
f7190	6890	0x18000d1b4
f7191	6891	0x18000d1ba
f7192	6892	0x18000d1c0
f7193	6893	0x18000d1c6
f7194	6894	0x18000d1cc
f7195	6895	0x18000d1d2
f7196	6896	0x18000d1d8
f7197	6897	0x18000d1de
f7198	6898	0x18000d1e4
f7199	6899	0x18000d1ea
f72	6900	0x180002ae0
f720	6901	0x180003a10
f7200	6902	0x18000d1f0
f7201	6903	0x18000d1f6
f7202	6904	0x18000d1fc
f7203	6905	0x18000d202
f7204	6906	0x18000d208
f7205	6907	0x18000d20e
f7206	6908	0x18000d214
f7207	6909	0x18000d21a
f7208	6910	0x18000d220
f7209	6911	0x18000d226
f721	6912	0x180003a16
f7210	6913	0x18000d22c
f7211	6914	0x18000d232
f7212	6915	0x18000d238
f7213	6916	0x18000d23e
f7214	6917	0x18000d244
f7215	6918	0x18000d24a
f7216	6919	0x18000d250
f7217	6920	0x18000d256
f7218	6921	0x18000d25c
f7219	6922	0x18000d262
f722	6923	0x180003a1c
f7220	6924	0x18000d268
f7221	6925	0x18000d26e
f7222	6926	0x18000d274
f7223	6927	0x18000d27a
f7224	6928	0x18000d280
f7225	6929	0x18000d286
f7226	6930	0x18000d28c
f7227	6931	0x18000d292
f7228	6932	0x18000d298
f7229	6933	0x18000d29e
f723	6934	0x180003a22
f7230	6935	0x18000d2a4
f7231	6936	0x18000d2aa
f7232	6937	0x18000d2b0
f7233	6938	0x18000d2b6
f7234	6939	0x18000d2bc
f7235	6940	0x18000d2c2
f7236	6941	0x18000d2c8
f7237	6942	0x18000d2ce
f7238	6943	0x18000d2d4
f7239	6944	0x18000d2da
f724	6945	0x180003a28
f7240	6946	0x18000d2e0
f7241	6947	0x18000d2e6
f7242	6948	0x18000d2ec
f7243	6949	0x18000d2f2
f7244	6950	0x18000d2f8
f7245	6951	0x18000d2fe
f7246	6952	0x18000d304
f7247	6953	0x18000d30a
f7248	6954	0x18000d310
f7249	6955	0x18000d316
f725	6956	0x180003a2e
f7250	6957	0x18000d31c
f7251	6958	0x18000d322
f7252	6959	0x18000d328
f7253	6960	0x18000d32e
f7254	6961	0x18000d334
f7255	6962	0x18000d33a
f7256	6963	0x18000d340
f7257	6964	0x18000d346
f7258	6965	0x18000d34c
f7259	6966	0x18000d352
f726	6967	0x180003a34
f7260	6968	0x18000d358
f7261	6969	0x18000d35e
f7262	6970	0x18000d364
f7263	6971	0x18000d36a
f7264	6972	0x18000d370
f7265	6973	0x18000d376
f7266	6974	0x18000d37c
f7267	6975	0x18000d382
f7268	6976	0x18000d388
f7269	6977	0x18000d38e
f727	6978	0x180003a3a
f7270	6979	0x18000d394
f7271	6980	0x18000d39a
f7272	6981	0x18000d3a0
f7273	6982	0x18000d3a6
f7274	6983	0x18000d3ac
f7275	6984	0x18000d3b2
f7276	6985	0x18000d3b8
f7277	6986	0x18000d3be
f7278	6987	0x18000d3c4
f7279	6988	0x18000d3ca
f728	6989	0x180003a40
f7280	6990	0x18000d3d0
f7281	6991	0x18000d3d6
f7282	6992	0x18000d3dc
f7283	6993	0x18000d3e2
f7284	6994	0x18000d3e8
f7285	6995	0x18000d3ee
f7286	6996	0x18000d3f4
f7287	6997	0x18000d3fa
f7288	6998	0x18000d400
f7289	6999	0x18000d406
f729	7000	0x180003a46
f7290	7001	0x18000d40c
f7291	7002	0x18000d412
f7292	7003	0x18000d418
f7293	7004	0x18000d41e
f7294	7005	0x18000d424
f7295	7006	0x18000d42a
f7296	7007	0x18000d430
f7297	7008	0x18000d436
f7298	7009	0x18000d43c
f7299	7010	0x18000d442
f73	7011	0x180002ae6
f730	7012	0x180003a4c
f7300	7013	0x18000d448
f7301	7014	0x18000d44e
f7302	7015	0x18000d454
f7303	7016	0x18000d45a
f7304	7017	0x18000d460
f7305	7018	0x18000d466
f7306	7019	0x18000d46c
f7307	7020	0x18000d472
f7308	7021	0x18000d478
f7309	7022	0x18000d47e
f731	7023	0x180003a52
f7310	7024	0x18000d484
f7311	7025	0x18000d48a
f7312	7026	0x18000d490
f7313	7027	0x18000d496
f7314	7028	0x18000d49c
f7315	7029	0x18000d4a2
f7316	7030	0x18000d4a8
f7317	7031	0x18000d4ae
f7318	7032	0x18000d4b4
f7319	7033	0x18000d4ba
f732	7034	0x180003a58
f7320	7035	0x18000d4c0
f7321	7036	0x18000d4c6
f7322	7037	0x18000d4cc
f7323	7038	0x18000d4d2
f7324	7039	0x18000d4d8
f7325	7040	0x18000d4de
f7326	7041	0x18000d4e4
f7327	7042	0x18000d4ea
f7328	7043	0x18000d4f0
f7329	7044	0x18000d4f6
f733	7045	0x180003a5e
f7330	7046	0x18000d4fc
f7331	7047	0x18000d502
f7332	7048	0x18000d508
f7333	7049	0x18000d50e
f7334	7050	0x18000d514
f7335	7051	0x18000d51a
f7336	7052	0x18000d520
f7337	7053	0x18000d526
f7338	7054	0x18000d52c
f7339	7055	0x18000d532
f734	7056	0x180003a64
f7340	7057	0x18000d538
f7341	7058	0x18000d53e
f7342	7059	0x18000d544
f7343	7060	0x18000d54a
f7344	7061	0x18000d550
f7345	7062	0x18000d556
f7346	7063	0x18000d55c
f7347	7064	0x18000d562
f7348	7065	0x18000d568
f7349	7066	0x18000d56e
f735	7067	0x180003a6a
f7350	7068	0x18000d574
f7351	7069	0x18000d57a
f7352	7070	0x18000d580
f7353	7071	0x18000d586
f7354	7072	0x18000d58c
f7355	7073	0x18000d592
f7356	7074	0x18000d598
f7357	7075	0x18000d59e
f7358	7076	0x18000d5a4
f7359	7077	0x18000d5aa
f736	7078	0x180003a70
f7360	7079	0x18000d5b0
f7361	7080	0x18000d5b6
f7362	7081	0x18000d5bc
f7363	7082	0x18000d5c2
f7364	7083	0x18000d5c8
f7365	7084	0x18000d5ce
f7366	7085	0x18000d5d4
f7367	7086	0x18000d5da
f7368	7087	0x18000d5e0
f7369	7088	0x18000d5e6
f737	7089	0x180003a76
f7370	7090	0x18000d5ec
f7371	7091	0x18000d5f2
f7372	7092	0x18000d5f8
f7373	7093	0x18000d5fe
f7374	7094	0x18000d604
f7375	7095	0x18000d60a
f7376	7096	0x18000d610
f7377	7097	0x18000d616
f7378	7098	0x18000d61c
f7379	7099	0x18000d622
f738	7100	0x180003a7c
f7380	7101	0x18000d628
f7381	7102	0x18000d62e
f7382	7103	0x18000d634
f7383	7104	0x18000d63a
f7384	7105	0x18000d640
f7385	7106	0x18000d646
f7386	7107	0x18000d64c
f7387	7108	0x18000d652
f7388	7109	0x18000d658
f7389	7110	0x18000d65e
f739	7111	0x180003a82
f7390	7112	0x18000d664
f7391	7113	0x18000d66a
f7392	7114	0x18000d670
f7393	7115	0x18000d676
f7394	7116	0x18000d67c
f7395	7117	0x18000d682
f7396	7118	0x18000d688
f7397	7119	0x18000d68e
f7398	7120	0x18000d694
f7399	7121	0x18000d69a
f74	7122	0x180002aec
f740	7123	0x180003a88
f7400	7124	0x18000d6a0
f7401	7125	0x18000d6a6
f7402	7126	0x18000d6ac
f7403	7127	0x18000d6b2
f7404	7128	0x18000d6b8
f7405	7129	0x18000d6be
f7406	7130	0x18000d6c4
f7407	7131	0x18000d6ca
f7408	7132	0x18000d6d0
f7409	7133	0x18000d6d6
f741	7134	0x180003a8e
f7410	7135	0x18000d6dc
f7411	7136	0x18000d6e2
f7412	7137	0x18000d6e8
f7413	7138	0x18000d6ee
f7414	7139	0x18000d6f4
f7415	7140	0x18000d6fa
f7416	7141	0x18000d700
f7417	7142	0x18000d706
f7418	7143	0x18000d70c
f7419	7144	0x18000d712
f742	7145	0x180003a94
f7420	7146	0x18000d718
f7421	7147	0x18000d71e
f7422	7148	0x18000d724
f7423	7149	0x18000d72a
f7424	7150	0x18000d730
f7425	7151	0x18000d736
f7426	7152	0x18000d73c
f7427	7153	0x18000d742
f7428	7154	0x18000d748
f7429	7155	0x18000d74e
f743	7156	0x180003a9a
f7430	7157	0x18000d754
f7431	7158	0x18000d75a
f7432	7159	0x18000d760
f7433	7160	0x18000d766
f7434	7161	0x18000d76c
f7435	7162	0x18000d772
f7436	7163	0x18000d778
f7437	7164	0x18000d77e
f7438	7165	0x18000d784
f7439	7166	0x18000d78a
f744	7167	0x180003aa0
f7440	7168	0x18000d790
f7441	7169	0x18000d796
f7442	7170	0x18000d79c
f7443	7171	0x18000d7a2
f7444	7172	0x18000d7a8
f7445	7173	0x18000d7ae
f7446	7174	0x18000d7b4
f7447	7175	0x18000d7ba
f7448	7176	0x18000d7c0
f7449	7177	0x18000d7c6
f745	7178	0x180003aa6
f7450	7179	0x18000d7cc
f7451	7180	0x18000d7d2
f7452	7181	0x18000d7d8
f7453	7182	0x18000d7de
f7454	7183	0x18000d7e4
f7455	7184	0x18000d7ea
f7456	7185	0x18000d7f0
f7457	7186	0x18000d7f6
f7458	7187	0x18000d7fc
f7459	7188	0x18000d802
f746	7189	0x180003aac
f7460	7190	0x18000d808
f7461	7191	0x18000d80e
f7462	7192	0x18000d814
f7463	7193	0x18000d81a
f7464	7194	0x18000d820
f7465	7195	0x18000d826
f7466	7196	0x18000d82c
f7467	7197	0x18000d832
f7468	7198	0x18000d838
f7469	7199	0x18000d83e
f747	7200	0x180003ab2
f7470	7201	0x18000d844
f7471	7202	0x18000d84a
f7472	7203	0x18000d850
f7473	7204	0x18000d856
f7474	7205	0x18000d85c
f7475	7206	0x18000d862
f7476	7207	0x18000d868
f7477	7208	0x18000d86e
f7478	7209	0x18000d874
f7479	7210	0x18000d87a
f748	7211	0x180003ab8
f7480	7212	0x18000d880
f7481	7213	0x18000d886
f7482	7214	0x18000d88c
f7483	7215	0x18000d892
f7484	7216	0x18000d898
f7485	7217	0x18000d89e
f7486	7218	0x18000d8a4
f7487	7219	0x18000d8aa
f7488	7220	0x18000d8b0
f7489	7221	0x18000d8b6
f749	7222	0x180003abe
f7490	7223	0x18000d8bc
f7491	7224	0x18000d8c2
f7492	7225	0x18000d8c8
f7493	7226	0x18000d8ce
f7494	7227	0x18000d8d4
f7495	7228	0x18000d8da
f7496	7229	0x18000d8e0
f7497	7230	0x18000d8e6
f7498	7231	0x18000d8ec
f7499	7232	0x18000d8f2
f75	7233	0x180002af2
f750	7234	0x180003ac4
f7500	7235	0x18000d8f8
f7501	7236	0x18000d8fe
f7502	7237	0x18000d904
f7503	7238	0x18000d90a
f7504	7239	0x18000d910
f7505	7240	0x18000d916
f7506	7241	0x18000d91c
f7507	7242	0x18000d922
f7508	7243	0x18000d928
f7509	7244	0x18000d92e
f751	7245	0x180003aca
f7510	7246	0x18000d934
f7511	7247	0x18000d93a
f7512	7248	0x18000d940
f7513	7249	0x18000d946
f7514	7250	0x18000d94c
f7515	7251	0x18000d952
f7516	7252	0x18000d958
f7517	7253	0x18000d95e
f7518	7254	0x18000d964
f7519	7255	0x18000d96a
f752	7256	0x180003ad0
f7520	7257	0x18000d970
f7521	7258	0x18000d976
f7522	7259	0x18000d97c
f7523	7260	0x18000d982
f7524	7261	0x18000d988
f7525	7262	0x18000d98e
f7526	7263	0x18000d994
f7527	7264	0x18000d99a
f7528	7265	0x18000d9a0
f7529	7266	0x18000d9a6
f753	7267	0x180003ad6
f7530	7268	0x18000d9ac
f7531	7269	0x18000d9b2
f7532	7270	0x18000d9b8
f7533	7271	0x18000d9be
f7534	7272	0x18000d9c4
f7535	7273	0x18000d9ca
f7536	7274	0x18000d9d0
f7537	7275	0x18000d9d6
f7538	7276	0x18000d9dc
f7539	7277	0x18000d9e2
f754	7278	0x180003adc
f7540	7279	0x18000d9e8
f7541	7280	0x18000d9ee
f7542	7281	0x18000d9f4
f7543	7282	0x18000d9fa
f7544	7283	0x18000da00
f7545	7284	0x18000da06
f7546	7285	0x18000da0c
f7547	7286	0x18000da12
f7548	7287	0x18000da18
f7549	7288	0x18000da1e
f755	7289	0x180003ae2
f7550	7290	0x18000da24
f7551	7291	0x18000da2a
f7552	7292	0x18000da30
f7553	7293	0x18000da36
f7554	7294	0x18000da3c
f7555	7295	0x18000da42
f7556	7296	0x18000da48
f7557	7297	0x18000da4e
f7558	7298	0x18000da54
f7559	7299	0x18000da5a
f756	7300	0x180003ae8
f7560	7301	0x18000da60
f7561	7302	0x18000da66
f7562	7303	0x18000da6c
f7563	7304	0x18000da72
f7564	7305	0x18000da78
f7565	7306	0x18000da7e
f7566	7307	0x18000da84
f7567	7308	0x18000da8a
f7568	7309	0x18000da90
f7569	7310	0x18000da96
f757	7311	0x180003aee
f7570	7312	0x18000da9c
f7571	7313	0x18000daa2
f7572	7314	0x18000daa8
f7573	7315	0x18000daae
f7574	7316	0x18000dab4
f7575	7317	0x18000daba
f7576	7318	0x18000dac0
f7577	7319	0x18000dac6
f7578	7320	0x18000dacc
f7579	7321	0x18000dad2
f758	7322	0x180003af4
f7580	7323	0x18000dad8
f7581	7324	0x18000dade
f7582	7325	0x18000dae4
f7583	7326	0x18000daea
f7584	7327	0x18000daf0
f7585	7328	0x18000daf6
f7586	7329	0x18000dafc
f7587	7330	0x18000db02
f7588	7331	0x18000db08
f7589	7332	0x18000db0e
f759	7333	0x180003afa
f7590	7334	0x18000db14
f7591	7335	0x18000db1a
f7592	7336	0x18000db20
f7593	7337	0x18000db26
f7594	7338	0x18000db2c
f7595	7339	0x18000db32
f7596	7340	0x18000db38
f7597	7341	0x18000db3e
f7598	7342	0x18000db44
f7599	7343	0x18000db4a
f76	7344	0x180002af8
f760	7345	0x180003b00
f7600	7346	0x18000db50
f7601	7347	0x18000db56
f7602	7348	0x18000db5c
f7603	7349	0x18000db62
f7604	7350	0x18000db68
f7605	7351	0x18000db6e
f7606	7352	0x18000db74
f7607	7353	0x18000db7a
f7608	7354	0x18000db80
f7609	7355	0x18000db86
f761	7356	0x180003b06
f7610	7357	0x18000db8c
f7611	7358	0x18000db92
f7612	7359	0x18000db98
f7613	7360	0x18000db9e
f7614	7361	0x18000dba4
f7615	7362	0x18000dbaa
f7616	7363	0x18000dbb0
f7617	7364	0x18000dbb6
f7618	7365	0x18000dbbc
f7619	7366	0x18000dbc2
f762	7367	0x180003b0c
f7620	7368	0x18000dbc8
f7621	7369	0x18000dbce
f7622	7370	0x18000dbd4
f7623	7371	0x18000dbda
f7624	7372	0x18000dbe0
f7625	7373	0x18000dbe6
f7626	7374	0x18000dbec
f7627	7375	0x18000dbf2
f7628	7376	0x18000dbf8
f7629	7377	0x18000dbfe
f763	7378	0x180003b12
f7630	7379	0x18000dc04
f7631	7380	0x18000dc0a
f7632	7381	0x18000dc10
f7633	7382	0x18000dc16
f7634	7383	0x18000dc1c
f7635	7384	0x18000dc22
f7636	7385	0x18000dc28
f7637	7386	0x18000dc2e
f7638	7387	0x18000dc34
f7639	7388	0x18000dc3a
f764	7389	0x180003b18
f7640	7390	0x18000dc40
f7641	7391	0x18000dc46
f7642	7392	0x18000dc4c
f7643	7393	0x18000dc52
f7644	7394	0x18000dc58
f7645	7395	0x18000dc5e
f7646	7396	0x18000dc64
f7647	7397	0x18000dc6a
f7648	7398	0x18000dc70
f7649	7399	0x18000dc76
f765	7400	0x180003b1e
f7650	7401	0x18000dc7c
f7651	7402	0x18000dc82
f7652	7403	0x18000dc88
f7653	7404	0x18000dc8e
f7654	7405	0x18000dc94
f7655	7406	0x18000dc9a
f7656	7407	0x18000dca0
f7657	7408	0x18000dca6
f7658	7409	0x18000dcac
f7659	7410	0x18000dcb2
f766	7411	0x180003b24
f7660	7412	0x18000dcb8
f7661	7413	0x18000dcbe
f7662	7414	0x18000dcc4
f7663	7415	0x18000dcca
f7664	7416	0x18000dcd0
f7665	7417	0x18000dcd6
f7666	7418	0x18000dcdc
f7667	7419	0x18000dce2
f7668	7420	0x18000dce8
f7669	7421	0x18000dcee
f767	7422	0x180003b2a
f7670	7423	0x18000dcf4
f7671	7424	0x18000dcfa
f7672	7425	0x18000dd00
f7673	7426	0x18000dd06
f7674	7427	0x18000dd0c
f7675	7428	0x18000dd12
f7676	7429	0x18000dd18
f7677	7430	0x18000dd1e
f7678	7431	0x18000dd24
f7679	7432	0x18000dd2a
f768	7433	0x180003b30
f7680	7434	0x18000dd30
f7681	7435	0x18000dd36
f7682	7436	0x18000dd3c
f7683	7437	0x18000dd42
f7684	7438	0x18000dd48
f7685	7439	0x18000dd4e
f7686	7440	0x18000dd54
f7687	7441	0x18000dd5a
f7688	7442	0x18000dd60
f7689	7443	0x18000dd66
f769	7444	0x180003b36
f7690	7445	0x18000dd6c
f7691	7446	0x18000dd72
f7692	7447	0x18000dd78
f7693	7448	0x18000dd7e
f7694	7449	0x18000dd84
f7695	7450	0x18000dd8a
f7696	7451	0x18000dd90
f7697	7452	0x18000dd96
f7698	7453	0x18000dd9c
f7699	7454	0x18000dda2
f77	7455	0x180002afe
f770	7456	0x180003b3c
f7700	7457	0x18000dda8
f7701	7458	0x18000ddae
f7702	7459	0x18000ddb4
f7703	7460	0x18000ddba
f7704	7461	0x18000ddc0
f7705	7462	0x18000ddc6
f7706	7463	0x18000ddcc
f7707	7464	0x18000ddd2
f7708	7465	0x18000ddd8
f7709	7466	0x18000ddde
f771	7467	0x180003b42
f7710	7468	0x18000dde4
f7711	7469	0x18000ddea
f7712	7470	0x18000ddf0
f7713	7471	0x18000ddf6
f7714	7472	0x18000ddfc
f7715	7473	0x18000de02
f7716	7474	0x18000de08
f7717	7475	0x18000de0e
f7718	7476	0x18000de14
f7719	7477	0x18000de1a
f772	7478	0x180003b48
f7720	7479	0x18000de20
f7721	7480	0x18000de26
f7722	7481	0x18000de2c
f7723	7482	0x18000de32
f7724	7483	0x18000de38
f7725	7484	0x18000de3e
f7726	7485	0x18000de44
f7727	7486	0x18000de4a
f7728	7487	0x18000de50
f7729	7488	0x18000de56
f773	7489	0x180003b4e
f7730	7490	0x18000de5c
f7731	7491	0x18000de62
f7732	7492	0x18000de68
f7733	7493	0x18000de6e
f7734	7494	0x18000de74
f7735	7495	0x18000de7a
f7736	7496	0x18000de80
f7737	7497	0x18000de86
f7738	7498	0x18000de8c
f7739	7499	0x18000de92
f774	7500	0x180003b54
f7740	7501	0x18000de98
f7741	7502	0x18000de9e
f7742	7503	0x18000dea4
f7743	7504	0x18000deaa
f7744	7505	0x18000deb0
f7745	7506	0x18000deb6
f7746	7507	0x18000debc
f7747	7508	0x18000dec2
f7748	7509	0x18000dec8
f7749	7510	0x18000dece
f775	7511	0x180003b5a
f7750	7512	0x18000ded4
f7751	7513	0x18000deda
f7752	7514	0x18000dee0
f7753	7515	0x18000dee6
f7754	7516	0x18000deec
f7755	7517	0x18000def2
f7756	7518	0x18000def8
f7757	7519	0x18000defe
f7758	7520	0x18000df04
f7759	7521	0x18000df0a
f776	7522	0x180003b60
f7760	7523	0x18000df10
f7761	7524	0x18000df16
f7762	7525	0x18000df1c
f7763	7526	0x18000df22
f7764	7527	0x18000df28
f7765	7528	0x18000df2e
f7766	7529	0x18000df34
f7767	7530	0x18000df3a
f7768	7531	0x18000df40
f7769	7532	0x18000df46
f777	7533	0x180003b66
f7770	7534	0x18000df4c
f7771	7535	0x18000df52
f7772	7536	0x18000df58
f7773	7537	0x18000df5e
f7774	7538	0x18000df64
f7775	7539	0x18000df6a
f7776	7540	0x18000df70
f7777	7541	0x18000df76
f7778	7542	0x18000df7c
f7779	7543	0x18000df82
f778	7544	0x180003b6c
f7780	7545	0x18000df88
f7781	7546	0x18000df8e
f7782	7547	0x18000df94
f7783	7548	0x18000df9a
f7784	7549	0x18000dfa0
f7785	7550	0x18000dfa6
f7786	7551	0x18000dfac
f7787	7552	0x18000dfb2
f7788	7553	0x18000dfb8
f7789	7554	0x18000dfbe
f779	7555	0x180003b72
f7790	7556	0x18000dfc4
f7791	7557	0x18000dfca
f7792	7558	0x18000dfd0
f7793	7559	0x18000dfd6
f7794	7560	0x18000dfdc
f7795	7561	0x18000dfe2
f7796	7562	0x18000dfe8
f7797	7563	0x18000dfee
f7798	7564	0x18000dff4
f7799	7565	0x18000dffa
f78	7566	0x180002b04
f780	7567	0x180003b78
f7800	7568	0x18000e000
f7801	7569	0x18000e006
f7802	7570	0x18000e00c
f7803	7571	0x18000e012
f7804	7572	0x18000e018
f7805	7573	0x18000e01e
f7806	7574	0x18000e024
f7807	7575	0x18000e02a
f7808	7576	0x18000e030
f7809	7577	0x18000e036
f781	7578	0x180003b7e
f7810	7579	0x18000e03c
f7811	7580	0x18000e042
f7812	7581	0x18000e048
f7813	7582	0x18000e04e
f7814	7583	0x18000e054
f7815	7584	0x18000e05a
f7816	7585	0x18000e060
f7817	7586	0x18000e066
f7818	7587	0x18000e06c
f7819	7588	0x18000e072
f782	7589	0x180003b84
f7820	7590	0x18000e078
f7821	7591	0x18000e07e
f7822	7592	0x18000e084
f7823	7593	0x18000e08a
f7824	7594	0x18000e090
f7825	7595	0x18000e096
f7826	7596	0x18000e09c
f7827	7597	0x18000e0a2
f7828	7598	0x18000e0a8
f7829	7599	0x18000e0ae
f783	7600	0x180003b8a
f7830	7601	0x18000e0b4
f7831	7602	0x18000e0ba
f7832	7603	0x18000e0c0
f7833	7604	0x18000e0c6
f7834	7605	0x18000e0cc
f7835	7606	0x18000e0d2
f7836	7607	0x18000e0d8
f7837	7608	0x18000e0de
f7838	7609	0x18000e0e4
f7839	7610	0x18000e0ea
f784	7611	0x180003b90
f7840	7612	0x18000e0f0
f7841	7613	0x18000e0f6
f7842	7614	0x18000e0fc
f7843	7615	0x18000e102
f7844	7616	0x18000e108
f7845	7617	0x18000e10e
f7846	7618	0x18000e114
f7847	7619	0x18000e11a
f7848	7620	0x18000e120
f7849	7621	0x18000e126
f785	7622	0x180003b96
f7850	7623	0x18000e12c
f7851	7624	0x18000e132
f7852	7625	0x18000e138
f7853	7626	0x18000e13e
f7854	7627	0x18000e144
f7855	7628	0x18000e14a
f7856	7629	0x18000e150
f7857	7630	0x18000e156
f7858	7631	0x18000e15c
f7859	7632	0x18000e162
f786	7633	0x180003b9c
f7860	7634	0x18000e168
f7861	7635	0x18000e16e
f7862	7636	0x18000e174
f7863	7637	0x18000e17a
f7864	7638	0x18000e180
f7865	7639	0x18000e186
f7866	7640	0x18000e18c
f7867	7641	0x18000e192
f7868	7642	0x18000e198
f7869	7643	0x18000e19e
f787	7644	0x180003ba2
f7870	7645	0x18000e1a4
f7871	7646	0x18000e1aa
f7872	7647	0x18000e1b0
f7873	7648	0x18000e1b6
f7874	7649	0x18000e1bc
f7875	7650	0x18000e1c2
f7876	7651	0x18000e1c8
f7877	7652	0x18000e1ce
f7878	7653	0x18000e1d4
f7879	7654	0x18000e1da
f788	7655	0x180003ba8
f7880	7656	0x18000e1e0
f7881	7657	0x18000e1e6
f7882	7658	0x18000e1ec
f7883	7659	0x18000e1f2
f7884	7660	0x18000e1f8
f7885	7661	0x18000e1fe
f7886	7662	0x18000e204
f7887	7663	0x18000e20a
f7888	7664	0x18000e210
f7889	7665	0x18000e216
f789	7666	0x180003bae
f7890	7667	0x18000e21c
f7891	7668	0x18000e222
f7892	7669	0x18000e228
f7893	7670	0x18000e22e
f7894	7671	0x18000e234
f7895	7672	0x18000e23a
f7896	7673	0x18000e240
f7897	7674	0x18000e246
f7898	7675	0x18000e24c
f7899	7676	0x18000e252
f79	7677	0x180002b0a
f790	7678	0x180003bb4
f7900	7679	0x18000e258
f7901	7680	0x18000e25e
f7902	7681	0x18000e264
f7903	7682	0x18000e26a
f7904	7683	0x18000e270
f7905	7684	0x18000e276
f7906	7685	0x18000e27c
f7907	7686	0x18000e282
f7908	7687	0x18000e288
f7909	7688	0x18000e28e
f791	7689	0x180003bba
f7910	7690	0x18000e294
f7911	7691	0x18000e29a
f7912	7692	0x18000e2a0
f7913	7693	0x18000e2a6
f7914	7694	0x18000e2ac
f7915	7695	0x18000e2b2
f7916	7696	0x18000e2b8
f7917	7697	0x18000e2be
f7918	7698	0x18000e2c4
f7919	7699	0x18000e2ca
f792	7700	0x180003bc0
f7920	7701	0x18000e2d0
f7921	7702	0x18000e2d6
f7922	7703	0x18000e2dc
f7923	7704	0x18000e2e2
f7924	7705	0x18000e2e8
f7925	7706	0x18000e2ee
f7926	7707	0x18000e2f4
f7927	7708	0x18000e2fa
f7928	7709	0x18000e300
f7929	7710	0x18000e306
f793	7711	0x180003bc6
f7930	7712	0x18000e30c
f7931	7713	0x18000e312
f7932	7714	0x18000e318
f7933	7715	0x18000e31e
f7934	7716	0x18000e324
f7935	7717	0x18000e32a
f7936	7718	0x18000e330
f7937	7719	0x18000e336
f7938	7720	0x18000e33c
f7939	7721	0x18000e342
f794	7722	0x180003bcc
f7940	7723	0x18000e348
f7941	7724	0x18000e34e
f7942	7725	0x18000e354
f7943	7726	0x18000e35a
f7944	7727	0x18000e360
f7945	7728	0x18000e366
f7946	7729	0x18000e36c
f7947	7730	0x18000e372
f7948	7731	0x18000e378
f7949	7732	0x18000e37e
f795	7733	0x180003bd2
f7950	7734	0x18000e384
f7951	7735	0x18000e38a
f7952	7736	0x18000e390
f7953	7737	0x18000e396
f7954	7738	0x18000e39c
f7955	7739	0x18000e3a2
f7956	7740	0x18000e3a8
f7957	7741	0x18000e3ae
f7958	7742	0x18000e3b4
f7959	7743	0x18000e3ba
f796	7744	0x180003bd8
f7960	7745	0x18000e3c0
f7961	7746	0x18000e3c6
f7962	7747	0x18000e3cc
f7963	7748	0x18000e3d2
f7964	7749	0x18000e3d8
f7965	7750	0x18000e3de
f7966	7751	0x18000e3e4
f7967	7752	0x18000e3ea
f7968	7753	0x18000e3f0
f7969	7754	0x18000e3f6
f797	7755	0x180003bde
f7970	7756	0x18000e3fc
f7971	7757	0x18000e402
f7972	7758	0x18000e408
f7973	7759	0x18000e40e
f7974	7760	0x18000e414
f7975	7761	0x18000e41a
f7976	7762	0x18000e420
f7977	7763	0x18000e426
f7978	7764	0x18000e42c
f7979	7765	0x18000e432
f798	7766	0x180003be4
f7980	7767	0x18000e438
f7981	7768	0x18000e43e
f7982	7769	0x18000e444
f7983	7770	0x18000e44a
f7984	7771	0x18000e450
f7985	7772	0x18000e456
f7986	7773	0x18000e45c
f7987	7774	0x18000e462
f7988	7775	0x18000e468
f7989	7776	0x18000e46e
f799	7777	0x180003bea
f7990	7778	0x18000e474
f7991	7779	0x18000e47a
f7992	7780	0x18000e480
f7993	7781	0x18000e486
f7994	7782	0x18000e48c
f7995	7783	0x18000e492
f7996	7784	0x18000e498
f7997	7785	0x18000e49e
f7998	7786	0x18000e4a4
f7999	7787	0x18000e4aa
f8	7788	0x180002960
f80	7789	0x180002b10
f800	7790	0x180003bf0
f8000	7791	0x18000e4b0
f8001	7792	0x18000e4b6
f8002	7793	0x18000e4bc
f8003	7794	0x18000e4c2
f8004	7795	0x18000e4c8
f8005	7796	0x18000e4ce
f8006	7797	0x18000e4d4
f8007	7798	0x18000e4da
f8008	7799	0x18000e4e0
f8009	7800	0x18000e4e6
f801	7801	0x180003bf6
f8010	7802	0x18000e4ec
f8011	7803	0x18000e4f2
f8012	7804	0x18000e4f8
f8013	7805	0x18000e4fe
f8014	7806	0x18000e504
f8015	7807	0x18000e50a
f8016	7808	0x18000e510
f8017	7809	0x18000e516
f8018	7810	0x18000e51c
f8019	7811	0x18000e522
f802	7812	0x180003bfc
f8020	7813	0x18000e528
f8021	7814	0x18000e52e
f8022	7815	0x18000e534
f8023	7816	0x18000e53a
f8024	7817	0x18000e540
f8025	7818	0x18000e546
f8026	7819	0x18000e54c
f8027	7820	0x18000e552
f8028	7821	0x18000e558
f8029	7822	0x18000e55e
f803	7823	0x180003c02
f8030	7824	0x18000e564
f8031	7825	0x18000e56a
f8032	7826	0x18000e570
f8033	7827	0x18000e576
f8034	7828	0x18000e57c
f8035	7829	0x18000e582
f8036	7830	0x18000e588
f8037	7831	0x18000e58e
f8038	7832	0x18000e594
f8039	7833	0x18000e59a
f804	7834	0x180003c08
f8040	7835	0x18000e5a0
f8041	7836	0x18000e5a6
f8042	7837	0x18000e5ac
f8043	7838	0x18000e5b2
f8044	7839	0x18000e5b8
f8045	7840	0x18000e5be
f8046	7841	0x18000e5c4
f8047	7842	0x18000e5ca
f8048	7843	0x18000e5d0
f8049	7844	0x18000e5d6
f805	7845	0x180003c0e
f8050	7846	0x18000e5dc
f8051	7847	0x18000e5e2
f8052	7848	0x18000e5e8
f8053	7849	0x18000e5ee
f8054	7850	0x18000e5f4
f8055	7851	0x18000e5fa
f8056	7852	0x18000e600
f8057	7853	0x18000e606
f8058	7854	0x18000e60c
f8059	7855	0x18000e612
f806	7856	0x180003c14
f8060	7857	0x18000e618
f8061	7858	0x18000e61e
f8062	7859	0x18000e624
f8063	7860	0x18000e62a
f8064	7861	0x18000e630
f8065	7862	0x18000e636
f8066	7863	0x18000e63c
f8067	7864	0x18000e642
f8068	7865	0x18000e648
f8069	7866	0x18000e64e
f807	7867	0x180003c1a
f8070	7868	0x18000e654
f8071	7869	0x18000e65a
f8072	7870	0x18000e660
f8073	7871	0x18000e666
f8074	7872	0x18000e66c
f8075	7873	0x18000e672
f8076	7874	0x18000e678
f8077	7875	0x18000e67e
f8078	7876	0x18000e684
f8079	7877	0x18000e68a
f808	7878	0x180003c20
f8080	7879	0x18000e690
f8081	7880	0x18000e696
f8082	7881	0x18000e69c
f8083	7882	0x18000e6a2
f8084	7883	0x18000e6a8
f8085	7884	0x18000e6ae
f8086	7885	0x18000e6b4
f8087	7886	0x18000e6ba
f8088	7887	0x18000e6c0
f8089	7888	0x18000e6c6
f809	7889	0x180003c26
f8090	7890	0x18000e6cc
f8091	7891	0x18000e6d2
f8092	7892	0x18000e6d8
f8093	7893	0x18000e6de
f8094	7894	0x18000e6e4
f8095	7895	0x18000e6ea
f8096	7896	0x18000e6f0
f8097	7897	0x18000e6f6
f8098	7898	0x18000e6fc
f8099	7899	0x18000e702
f81	7900	0x180002b16
f810	7901	0x180003c2c
f8100	7902	0x18000e708
f8101	7903	0x18000e70e
f8102	7904	0x18000e714
f8103	7905	0x18000e71a
f8104	7906	0x18000e720
f8105	7907	0x18000e726
f8106	7908	0x18000e72c
f8107	7909	0x18000e732
f8108	7910	0x18000e738
f8109	7911	0x18000e73e
f811	7912	0x180003c32
f8110	7913	0x18000e744
f8111	7914	0x18000e74a
f8112	7915	0x18000e750
f8113	7916	0x18000e756
f8114	7917	0x18000e75c
f8115	7918	0x18000e762
f8116	7919	0x18000e768
f8117	7920	0x18000e76e
f8118	7921	0x18000e774
f8119	7922	0x18000e77a
f812	7923	0x180003c38
f8120	7924	0x18000e780
f8121	7925	0x18000e786
f8122	7926	0x18000e78c
f8123	7927	0x18000e792
f8124	7928	0x18000e798
f8125	7929	0x18000e79e
f8126	7930	0x18000e7a4
f8127	7931	0x18000e7aa
f8128	7932	0x18000e7b0
f8129	7933	0x18000e7b6
f813	7934	0x180003c3e
f8130	7935	0x18000e7bc
f8131	7936	0x18000e7c2
f8132	7937	0x18000e7c8
f8133	7938	0x18000e7ce
f8134	7939	0x18000e7d4
f8135	7940	0x18000e7da
f8136	7941	0x18000e7e0
f8137	7942	0x18000e7e6
f8138	7943	0x18000e7ec
f8139	7944	0x18000e7f2
f814	7945	0x180003c44
f8140	7946	0x18000e7f8
f8141	7947	0x18000e7fe
f8142	7948	0x18000e804
f8143	7949	0x18000e80a
f8144	7950	0x18000e810
f8145	7951	0x18000e816
f8146	7952	0x18000e81c
f8147	7953	0x18000e822
f8148	7954	0x18000e828
f8149	7955	0x18000e82e
f815	7956	0x180003c4a
f8150	7957	0x18000e834
f8151	7958	0x18000e83a
f8152	7959	0x18000e840
f8153	7960	0x18000e846
f8154	7961	0x18000e84c
f8155	7962	0x18000e852
f8156	7963	0x18000e858
f8157	7964	0x18000e85e
f8158	7965	0x18000e864
f8159	7966	0x18000e86a
f816	7967	0x180003c50
f8160	7968	0x18000e870
f8161	7969	0x18000e876
f8162	7970	0x18000e87c
f8163	7971	0x18000e882
f8164	7972	0x18000e888
f8165	7973	0x18000e88e
f8166	7974	0x18000e894
f8167	7975	0x18000e89a
f8168	7976	0x18000e8a0
f8169	7977	0x18000e8a6
f817	7978	0x180003c56
f8170	7979	0x18000e8ac
f8171	7980	0x18000e8b2
f8172	7981	0x18000e8b8
f8173	7982	0x18000e8be
f8174	7983	0x18000e8c4
f8175	7984	0x18000e8ca
f8176	7985	0x18000e8d0
f8177	7986	0x18000e8d6
f8178	7987	0x18000e8dc
f8179	7988	0x18000e8e2
f818	7989	0x180003c5c
f8180	7990	0x18000e8e8
f8181	7991	0x18000e8ee
f8182	7992	0x18000e8f4
f8183	7993	0x18000e8fa
f8184	7994	0x18000e900
f8185	7995	0x18000e906
f8186	7996	0x18000e90c
f8187	7997	0x18000e912
f8188	7998	0x18000e918
f8189	7999	0x18000e91e
f819	8000	0x180003c62
f8190	8001	0x18000e924
f8191	8002	0x18000e92a
f8192	8003	0x18000e930
f8193	8004	0x18000e936
f8194	8005	0x18000e93c
f8195	8006	0x18000e942
f8196	8007	0x18000e948
f8197	8008	0x18000e94e
f8198	8009	0x18000e954
f8199	8010	0x18000e95a
f82	8011	0x180002b1c
f820	8012	0x180003c68
f8200	8013	0x18000e960
f8201	8014	0x18000e966
f8202	8015	0x18000e96c
f8203	8016	0x18000e972
f8204	8017	0x18000e978
f8205	8018	0x18000e97e
f8206	8019	0x18000e984
f8207	8020	0x18000e98a
f8208	8021	0x18000e990
f8209	8022	0x18000e996
f821	8023	0x180003c6e
f8210	8024	0x18000e99c
f8211	8025	0x18000e9a2
f8212	8026	0x18000e9a8
f8213	8027	0x18000e9ae
f8214	8028	0x18000e9b4
f8215	8029	0x18000e9ba
f8216	8030	0x18000e9c0
f8217	8031	0x18000e9c6
f8218	8032	0x18000e9cc
f8219	8033	0x18000e9d2
f822	8034	0x180003c74
f8220	8035	0x18000e9d8
f8221	8036	0x18000e9de
f8222	8037	0x18000e9e4
f8223	8038	0x18000e9ea
f8224	8039	0x18000e9f0
f8225	8040	0x18000e9f6
f8226	8041	0x18000e9fc
f8227	8042	0x18000ea02
f8228	8043	0x18000ea08
f8229	8044	0x18000ea0e
f823	8045	0x180003c7a
f8230	8046	0x18000ea14
f8231	8047	0x18000ea1a
f8232	8048	0x18000ea20
f8233	8049	0x18000ea26
f8234	8050	0x18000ea2c
f8235	8051	0x18000ea32
f8236	8052	0x18000ea38
f8237	8053	0x18000ea3e
f8238	8054	0x18000ea44
f8239	8055	0x18000ea4a
f824	8056	0x180003c80
f8240	8057	0x18000ea50
f8241	8058	0x18000ea56
f8242	8059	0x18000ea5c
f8243	8060	0x18000ea62
f8244	8061	0x18000ea68
f8245	8062	0x18000ea6e
f8246	8063	0x18000ea74
f8247	8064	0x18000ea7a
f8248	8065	0x18000ea80
f8249	8066	0x18000ea86
f825	8067	0x180003c86
f8250	8068	0x18000ea8c
f8251	8069	0x18000ea92
f8252	8070	0x18000ea98
f8253	8071	0x18000ea9e
f8254	8072	0x18000eaa4
f8255	8073	0x18000eaaa
f8256	8074	0x18000eab0
f8257	8075	0x18000eab6
f8258	8076	0x18000eabc
f8259	8077	0x18000eac2
f826	8078	0x180003c8c
f8260	8079	0x18000eac8
f8261	8080	0x18000eace
f8262	8081	0x18000ead4
f8263	8082	0x18000eada
f8264	8083	0x18000eae0
f8265	8084	0x18000eae6
f8266	8085	0x18000eaec
f8267	8086	0x18000eaf2
f8268	8087	0x18000eaf8
f8269	8088	0x18000eafe
f827	8089	0x180003c92
f8270	8090	0x18000eb04
f8271	8091	0x18000eb0a
f8272	8092	0x18000eb10
f8273	8093	0x18000eb16
f8274	8094	0x18000eb1c
f8275	8095	0x18000eb22
f8276	8096	0x18000eb28
f8277	8097	0x18000eb2e
f8278	8098	0x18000eb34
f8279	8099	0x18000eb3a
f828	8100	0x180003c98
f8280	8101	0x18000eb40
f8281	8102	0x18000eb46
f8282	8103	0x18000eb4c
f8283	8104	0x18000eb52
f8284	8105	0x18000eb58
f8285	8106	0x18000eb5e
f8286	8107	0x18000eb64
f8287	8108	0x18000eb6a
f8288	8109	0x18000eb70
f8289	8110	0x18000eb76
f829	8111	0x180003c9e
f8290	8112	0x18000eb7c
f8291	8113	0x18000eb82
f8292	8114	0x18000eb88
f8293	8115	0x18000eb8e
f8294	8116	0x18000eb94
f8295	8117	0x18000eb9a
f8296	8118	0x18000eba0
f8297	8119	0x18000eba6
f8298	8120	0x18000ebac
f8299	8121	0x18000ebb2
f83	8122	0x180002b22
f830	8123	0x180003ca4
f8300	8124	0x18000ebb8
f8301	8125	0x18000ebbe
f8302	8126	0x18000ebc4
f8303	8127	0x18000ebca
f8304	8128	0x18000ebd0
f8305	8129	0x18000ebd6
f8306	8130	0x18000ebdc
f8307	8131	0x18000ebe2
f8308	8132	0x18000ebe8
f8309	8133	0x18000ebee
f831	8134	0x180003caa
f8310	8135	0x18000ebf4
f8311	8136	0x18000ebfa
f8312	8137	0x18000ec00
f8313	8138	0x18000ec06
f8314	8139	0x18000ec0c
f8315	8140	0x18000ec12
f8316	8141	0x18000ec18
f8317	8142	0x18000ec1e
f8318	8143	0x18000ec24
f8319	8144	0x18000ec2a
f832	8145	0x180003cb0
f8320	8146	0x18000ec30
f8321	8147	0x18000ec36
f8322	8148	0x18000ec3c
f8323	8149	0x18000ec42
f8324	8150	0x18000ec48
f8325	8151	0x18000ec4e
f8326	8152	0x18000ec54
f8327	8153	0x18000ec5a
f8328	8154	0x18000ec60
f8329	8155	0x18000ec66
f833	8156	0x180003cb6
f8330	8157	0x18000ec6c
f8331	8158	0x18000ec72
f8332	8159	0x18000ec78
f8333	8160	0x18000ec7e
f8334	8161	0x18000ec84
f8335	8162	0x18000ec8a
f8336	8163	0x18000ec90
f8337	8164	0x18000ec96
f8338	8165	0x18000ec9c
f8339	8166	0x18000eca2
f834	8167	0x180003cbc
f8340	8168	0x18000eca8
f8341	8169	0x18000ecae
f8342	8170	0x18000ecb4
f8343	8171	0x18000ecba
f8344	8172	0x18000ecc0
f8345	8173	0x18000ecc6
f8346	8174	0x18000eccc
f8347	8175	0x18000ecd2
f8348	8176	0x18000ecd8
f8349	8177	0x18000ecde
f835	8178	0x180003cc2
f8350	8179	0x18000ece4
f8351	8180	0x18000ecea
f8352	8181	0x18000ecf0
f8353	8182	0x18000ecf6
f8354	8183	0x18000ecfc
f8355	8184	0x18000ed02
f8356	8185	0x18000ed08
f8357	8186	0x18000ed0e
f8358	8187	0x18000ed14
f8359	8188	0x18000ed1a
f836	8189	0x180003cc8
f8360	8190	0x18000ed20
f8361	8191	0x18000ed26
f8362	8192	0x18000ed2c

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 6, 2023 18:16:55.026706934 CET	49720	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.026740074 CET	443	49720	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.026813984 CET	49720	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.027134895 CET	49721	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.027208090 CET	443	49721	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.027287006 CET	49721	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.027371883 CET	49720	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.027383089 CET	443	49720	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.027607918 CET	49721	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.027645111 CET	443	49721	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.027817011 CET	49722	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.027908087 CET	443	49722	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.027977943 CET	49722	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.028176069 CET	49723	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.028222084 CET	443	49723	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.028278112 CET	49723	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.028323889 CET	49722	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.028357029 CET	443	49722	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.028511047 CET	49723	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.028526068 CET	443	49723	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.028645039 CET	49724	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.028676033 CET	443	49724	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.028732061 CET	49724	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.028979063 CET	49724	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.028995037 CET	443	49724	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.386586905 CET	443	49721	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.386754990 CET	49721	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.388907909 CET	49721	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.388936996 CET	443	49721	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.389324903 CET	443	49721	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.391050100 CET	49721	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.399576902 CET	443	49720	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.399660110 CET	49720	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.400566101 CET	443	49722	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.400650978 CET	49722	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.401510000 CET	49720	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.401519060 CET	443	49720	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.401984930 CET	443	49720	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.402157068 CET	49722	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.402175903 CET	443	49722	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.402529955 CET	443	49722	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.403417110 CET	49720	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.403976917 CET	49722	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.418128014 CET	443	49724	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.418365955 CET	49724	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.418493032 CET	443	49723	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.418581009 CET	49723	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.419904947 CET	49724	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.419914007 CET	443	49724	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.419949055 CET	49723	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.419958115 CET	443	49723	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.420248985 CET	443	49724	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.420295000 CET	443	49723	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.421741962 CET	49724	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.421813011 CET	49723	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.432770967 CET	443	49721	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.444732904 CET	443	49720	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.448739052 CET	443	49722	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.468740940 CET	443	49723	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.468754053 CET	443	49724	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.488677025 CET	443	49721	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.488786936 CET	443	49721	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.488861084 CET	49721	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.490514040 CET	49721	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.490556955 CET	443	49721	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.490586042 CET	49721	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.490606070 CET	443	49721	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.499963999 CET	49725	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.500014067 CET	443	49725	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.500093937 CET	49725	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.500456095 CET	49725	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.500469923 CET	443	49725	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.500590086 CET	443	49720	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.500675917 CET	443	49720	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.500765085 CET	49720	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.501292944 CET	49720	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.501292944 CET	49720	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.501308918 CET	443	49720	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.501316071 CET	443	49720	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.501671076 CET	443	49722	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.501728058 CET	443	49722	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.501775026 CET	49722	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.502119064 CET	49722	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.502137899 CET	443	49722	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.511061907 CET	49726	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.511096954 CET	443	49726	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.511169910 CET	49726	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.511452913 CET	49726	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.511466980 CET	443	49726	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.516118050 CET	49727	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.516146898 CET	443	49727	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.516285896 CET	49727	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.516709089 CET	49727	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.516726017 CET	443	49727	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.520096064 CET	443	49724	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.520220995 CET	443	49724	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.520339966 CET	443	49723	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.520345926 CET	49724	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.520422935 CET	443	49723	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.520440102 CET	49724	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.520456076 CET	443	49724	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.520513058 CET	49724	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.520515919 CET	49723	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.520519018 CET	443	49724	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.520855904 CET	49723	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.520867109 CET	443	49723	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.520901918 CET	49723	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.520908117 CET	443	49723	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.558171988 CET	49728	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.558204889 CET	443	49728	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.558274984 CET	49728	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.578618050 CET	49728	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.578639030 CET	443	49728	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.579386950 CET	49729	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.579413891 CET	443	49729	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.579484940 CET	49729	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.579823971 CET	49729	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.579838991 CET	443	49729	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.793178082 CET	443	49725	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.793756962 CET	49725	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.793788910 CET	443	49725	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.794802904 CET	49725	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.794826984 CET	443	49725	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.810215950 CET	443	49727	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.810615063 CET	49727	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.810636044 CET	443	49727	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.811407089 CET	49727	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.811413050 CET	443	49727	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.814865112 CET	443	49726	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.815116882 CET	49726	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.815135002 CET	443	49726	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.815840960 CET	49726	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.815846920 CET	443	49726	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.883361101 CET	443	49728	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.883977890 CET	49728	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.884010077 CET	443	49728	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.885188103 CET	49728	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.885196924 CET	443	49728	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.885376930 CET	443	49729	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.885947943 CET	49729	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.885977030 CET	443	49729	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.886795044 CET	49729	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.886800051 CET	443	49729	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.892319918 CET	443	49725	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.892399073 CET	443	49725	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.892456055 CET	49725	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.892651081 CET	49725	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.892668009 CET	443	49725	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.892699957 CET	49725	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.892704964 CET	443	49725	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.909435987 CET	443	49727	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.909507990 CET	443	49727	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.909580946 CET	49727	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.909836054 CET	49727	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.909853935 CET	443	49727	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.909864902 CET	49727	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.909869909 CET	443	49727	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.913515091 CET	443	49726	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.913681984 CET	443	49726	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.913768053 CET	49726	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.913892984 CET	49726	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.913914919 CET	443	49726	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.913928986 CET	49726	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.913937092 CET	443	49726	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.983428001 CET	443	49728	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.983450890 CET	443	49728	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.983481884 CET	443	49728	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.983526945 CET	443	49728	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.983526945 CET	49728	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.983581066 CET	49728	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.984247923 CET	49728	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.984277964 CET	443	49728	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.984293938 CET	49728	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.984302044 CET	443	49728	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.984451056 CET	443	49729	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.984558105 CET	443	49729	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.984610081 CET	49729	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.985551119 CET	49729	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.985563040 CET	443	49729	13.107.219.40	192.168.2.8
Dec 6, 2023 18:16:55.985574007 CET	49729	443	192.168.2.8	13.107.219.40
Dec 6, 2023 18:16:55.985579014 CET	443	49729	13.107.219.40	192.168.2.8

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 6, 2023 18:16:55.024619102 CET	1.1.1.1	192.168.2.8	0x2c04	No error (0)	dual.part-0012.t-0009.fbs1-t-msedge.net	part-0012.t-0009.fbs1-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 6, 2023 18:16:55.024619102 CET	1.1.1.1	192.168.2.8	0x2c04	No error (0)	part-0012.t-0009.fbs1-t-msedge.net		13.107.219.40	A (IP address)	IN (0x0001)	false
Dec 6, 2023 18:16:55.024619102 CET	1.1.1.1	192.168.2.8	0x2c04	No error (0)	part-0012.t-0009.fbs1-t-msedge.net		13.107.227.40	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.8	49721	13.107.219.40	443	7744	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Timestamp	Bytes transferred	Direction	Data
2023-12-06 17:16:55 UTC	207	OUT	GET /rules/rule324002v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro) Host: otelrules.azureedge.net
2023-12-06 17:16:55 UTC	688	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 2c 20 69 6d 6d 75 74 61 62 6c 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 38 36 38 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 78 6d 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 4d 44 35 3a 20 4e 5a 76 46 50 48 39 37 45 44 6b 55 49 67 52 4b 42 6e 70 50 57 51 3d 3d 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 30 32 3a 31 34 3a 31 30 20 47 4d 54 0d 0a 45 54 61 67 3a 20 30 78 38 44 42 45 42 30 30 42 36 43 36 32 35 36 43 0d 0a 58 2d 43 61 63 68 65 3a 20 54 43 50 5f 48 49 54 0d 0a 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 Data Ascii: HTTP/1.1 200 OKCache-Control: public, max-age=604800, immutableContent-Length: 868Content-Type: text/xmlContent-MD5: NZvFPH97EDkUIgRKBnpPWQ==Last-Modified: Wed, 22 Nov 2023 02:14:10 GMTETag: 0x8DBEB00B6C6256CX-Cache: TCP_HITx-ms-request-id
2023-12-06 17:16:55 UTC	868	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 33 32 34 30 30 32 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 45 78 74 65 6e 73 69 62 69 6c 69 74 79 2e 56 62 61 54 65 6c 65 6d 65 74 72 79 44 65 63 6c 61 72 65 22 20 41 54 54 3d 22 64 62 33 33 34 62 33 30 31 65 37 62 34 37 34 64 62 35 65 30 66 30 32 66 30 37 63 35 31 61 34 37 2d 61 31 62 35 62 63 33 36 2d 31 62 62 65 2d 34 38 32 66 2d 61 36 34 61 2d 63 32 64 39 63 62 36 30 36 37 30 36 2d 37 34 33 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 42 22 20 44 43 61 3d 22 44 43 20 50 53 50 20 50 53 55 22 20 78 6d 6c 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="324002" V="3" DC="SM" EN="Office.Extensibility.VbaTelemetryDeclare" ATT="db334b301e7b474db5e0f02f07c51a47-a1b5bc36-1bbe-482f-a64a-c2d9cb606706-7439" SP="CriticalBusinessImpact" DL="B" DCa="DC PSP PSU" xmln

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.8	49720	13.107.219.40	443	7744	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Timestamp	Bytes transferred	Direction	Data
2023-12-06 17:16:55 UTC	207	OUT	GET /rules/rule324001v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro) Host: otelrules.azureedge.net
2023-12-06 17:16:55 UTC	688	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 2c 20 69 6d 6d 75 74 61 62 6c 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 35 32 30 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 78 6d 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 4d 44 35 3a 20 4e 4d 7a 79 6a 71 71 7a 4e 52 45 54 72 65 36 73 6f 4f 73 74 7a 77 3d 3d 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 30 32 3a 31 34 3a 31 30 20 47 4d 54 0d 0a 45 54 61 67 3a 20 30 78 38 44 42 45 42 30 30 42 37 33 31 38 31 44 32 0d 0a 58 2d 43 61 63 68 65 3a 20 54 43 50 5f 48 49 54 0d 0a 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 Data Ascii: HTTP/1.1 200 OKCache-Control: public, max-age=604800, immutableContent-Length: 520Content-Type: text/xmlContent-MD5: NMzyjqqzNRETre6soOstzw==Last-Modified: Wed, 22 Nov 2023 02:14:10 GMTETag: 0x8DBEB00B73181D2X-Cache: TCP_HITx-ms-request-id
2023-12-06 17:16:55 UTC	520	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 33 32 34 30 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 45 78 74 65 6e 73 69 62 69 6c 69 74 79 2e 56 62 61 54 65 6c 65 6d 65 74 72 79 50 72 6f 6a 65 63 74 4c 6f 61 64 22 20 41 54 54 3d 22 64 62 33 33 34 62 33 30 31 65 37 62 34 37 34 64 62 35 65 30 66 30 32 66 30 37 63 35 31 61 34 37 2d 61 31 62 35 62 63 33 36 2d 31 62 62 65 2d 34 38 32 66 2d 61 36 34 61 2d 63 32 64 39 63 62 36 30 36 37 30 36 2d 37 34 33 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 42 22 20 44 43 61 3d 22 44 43 20 50 53 50 20 50 53 55 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="324001" V="3" DC="SM" EN="Office.Extensibility.VbaTelemetryProjectLoad" ATT="db334b301e7b474db5e0f02f07c51a47-a1b5bc36-1bbe-482f-a64a-c2d9cb606706-7439" SP="CriticalBusinessImpact" DL="B" DCa="DC PSP PSU"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.8	49722	13.107.219.40	443	7744	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Timestamp	Bytes transferred	Direction	Data
2023-12-06 17:16:55 UTC	207	OUT	GET /rules/rule324003v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro) Host: otelrules.azureedge.net
2023-12-06 17:16:55 UTC	555	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 2c 20 69 6d 6d 75 74 61 62 6c 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 37 35 31 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 78 6d 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 4d 44 35 3a 20 34 6c 6f 6a 44 37 2b 4f 34 75 61 74 48 54 67 47 57 46 63 7a 47 41 3d 3d 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 30 32 3a 31 34 3a 30 36 20 47 4d 54 0d 0a 45 54 61 67 3a 20 30 78 38 44 42 45 42 30 30 42 34 41 34 35 38 31 33 0d 0a 58 2d 43 61 63 68 65 3a 20 54 43 50 5f 48 49 54 0d 0a 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 Data Ascii: HTTP/1.1 200 OKCache-Control: public, max-age=604800, immutableContent-Length: 751Content-Type: text/xmlContent-MD5: 4lojD7+O4uatHTgGWFczGA==Last-Modified: Wed, 22 Nov 2023 02:14:06 GMTETag: 0x8DBEB00B4A45813X-Cache: TCP_HITx-ms-request-id
2023-12-06 17:16:55 UTC	751	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 33 32 34 30 30 33 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 45 78 74 65 6e 73 69 62 69 6c 69 74 79 2e 56 62 61 54 65 6c 65 6d 65 74 72 79 52 65 66 65 72 65 6e 63 65 64 4c 69 62 72 61 72 79 22 20 41 54 54 3d 22 64 62 33 33 34 62 33 30 31 65 37 62 34 37 34 64 62 35 65 30 66 30 32 66 30 37 63 35 31 61 34 37 2d 61 31 62 35 62 63 33 36 2d 31 62 62 65 2d 34 38 32 66 2d 61 36 34 61 2d 63 32 64 39 63 62 36 30 36 37 30 36 2d 37 34 33 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 42 22 20 44 43 61 3d 22 44 43 20 50 53 50 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="324003" V="3" DC="SM" EN="Office.Extensibility.VbaTelemetryReferencedLibrary" ATT="db334b301e7b474db5e0f02f07c51a47-a1b5bc36-1bbe-482f-a64a-c2d9cb606706-7439" SP="CriticalBusinessImpact" DL="B" DCa="DC PSP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.8	49724	13.107.219.40	443	7744	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Timestamp	Bytes transferred	Direction	Data
2023-12-06 17:16:55 UTC	207	OUT	GET /rules/rule324006v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro) Host: otelrules.azureedge.net
2023-12-06 17:16:55 UTC	555	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 2c 20 69 6d 6d 75 74 61 62 6c 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 36 30 36 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 78 6d 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 4d 44 35 3a 20 68 61 31 65 65 69 69 7a 47 32 48 45 4a 6e 6a 4d 33 54 71 64 35 77 3d 3d 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 30 32 3a 31 34 3a 31 33 20 47 4d 54 0d 0a 45 54 61 67 3a 20 30 78 38 44 42 45 42 30 30 42 38 44 32 32 34 30 31 0d 0a 58 2d 43 61 63 68 65 3a 20 54 43 50 5f 48 49 54 0d 0a 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 Data Ascii: HTTP/1.1 200 OKCache-Control: public, max-age=604800, immutableContent-Length: 606Content-Type: text/xmlContent-MD5: ha1eeiizG2HEJnjM3Tqd5w==Last-Modified: Wed, 22 Nov 2023 02:14:13 GMTETag: 0x8DBEB00B8D22401X-Cache: TCP_HITx-ms-request-id
2023-12-06 17:16:55 UTC	606	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 33 32 34 30 30 36 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 45 78 74 65 6e 73 69 62 69 6c 69 74 79 2e 56 62 61 54 65 6c 65 6d 65 74 72 79 53 68 6f 77 49 64 65 22 20 41 54 54 3d 22 64 62 33 33 34 62 33 30 31 65 37 62 34 37 34 64 62 35 65 30 66 30 32 66 30 37 63 35 31 61 34 37 2d 61 31 62 35 62 63 33 36 2d 31 62 62 65 2d 34 38 32 66 2d 61 36 34 61 2d 63 32 64 39 63 62 36 30 36 37 30 36 2d 37 34 33 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 42 22 20 44 43 61 3d 22 44 43 20 50 53 50 20 50 53 55 22 20 78 6d 6c 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="324006" V="1" DC="SM" EN="Office.Extensibility.VbaTelemetryShowIde" ATT="db334b301e7b474db5e0f02f07c51a47-a1b5bc36-1bbe-482f-a64a-c2d9cb606706-7439" SP="CriticalBusinessImpact" DL="B" DCa="DC PSP PSU" xmln

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.8	49723	13.107.219.40	443	7744	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Timestamp	Bytes transferred	Direction	Data
2023-12-06 17:16:55 UTC	207	OUT	GET /rules/rule324005v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro) Host: otelrules.azureedge.net
2023-12-06 17:16:55 UTC	688	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 2c 20 69 6d 6d 75 74 61 62 6c 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 36 30 36 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 78 6d 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 4d 44 35 3a 20 54 55 54 4e 2b 6f 30 33 59 50 30 36 44 6b 71 57 48 4f 61 4e 6e 41 3d 3d 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 30 32 3a 31 34 3a 30 36 20 47 4d 54 0d 0a 45 54 61 67 3a 20 30 78 38 44 42 45 42 30 30 42 34 41 35 34 32 35 32 0d 0a 58 2d 43 61 63 68 65 3a 20 54 43 50 5f 48 49 54 0d 0a 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 Data Ascii: HTTP/1.1 200 OKCache-Control: public, max-age=604800, immutableContent-Length: 606Content-Type: text/xmlContent-MD5: TUTN+o03YP06DkqWHOaNnA==Last-Modified: Wed, 22 Nov 2023 02:14:06 GMTETag: 0x8DBEB00B4A54252X-Cache: TCP_HITx-ms-request-id
2023-12-06 17:16:55 UTC	606	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 33 32 34 30 30 35 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 45 78 74 65 6e 73 69 62 69 6c 69 74 79 2e 56 62 61 54 65 6c 65 6d 65 74 72 79 43 6f 6d 70 69 6c 65 22 20 41 54 54 3d 22 64 62 33 33 34 62 33 30 31 65 37 62 34 37 34 64 62 35 65 30 66 30 32 66 30 37 63 35 31 61 34 37 2d 61 31 62 35 62 63 33 36 2d 31 62 62 65 2d 34 38 32 66 2d 61 36 34 61 2d 63 32 64 39 63 62 36 30 36 37 30 36 2d 37 34 33 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 42 22 20 44 43 61 3d 22 44 43 20 50 53 50 20 50 53 55 22 20 78 6d 6c 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="324005" V="1" DC="SM" EN="Office.Extensibility.VbaTelemetryCompile" ATT="db334b301e7b474db5e0f02f07c51a47-a1b5bc36-1bbe-482f-a64a-c2d9cb606706-7439" SP="CriticalBusinessImpact" DL="B" DCa="DC PSP PSU" xmln

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.8	49725	13.107.219.40	443	7744	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Timestamp	Bytes transferred	Direction	Data
2023-12-06 17:16:55 UTC	207	OUT	GET /rules/rule324007v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro) Host: otelrules.azureedge.net
2023-12-06 17:16:55 UTC	555	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 2c 20 69 6d 6d 75 74 61 62 6c 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 36 31 38 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 78 6d 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 4d 44 35 3a 20 4e 68 78 48 6f 63 42 2b 56 39 65 35 61 2f 73 62 66 46 59 6f 47 77 3d 3d 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 30 32 3a 31 34 3a 31 33 20 47 4d 54 0d 0a 45 54 61 67 3a 20 30 78 38 44 42 45 42 30 30 42 38 43 39 32 34 39 44 0d 0a 58 2d 43 61 63 68 65 3a 20 54 43 50 5f 48 49 54 0d 0a 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 Data Ascii: HTTP/1.1 200 OKCache-Control: public, max-age=604800, immutableContent-Length: 618Content-Type: text/xmlContent-MD5: NhxHocB+V9e5a/sbfFYoGw==Last-Modified: Wed, 22 Nov 2023 02:14:13 GMTETag: 0x8DBEB00B8C9249DX-Cache: TCP_HITx-ms-request-id
2023-12-06 17:16:55 UTC	618	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 33 32 34 30 30 37 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 45 78 74 65 6e 73 69 62 69 6c 69 74 79 2e 56 62 61 54 65 6c 65 6d 65 74 72 79 49 64 65 4d 61 63 72 6f 52 75 6e 22 20 41 54 54 3d 22 64 62 33 33 34 62 33 30 31 65 37 62 34 37 34 64 62 35 65 30 66 30 32 66 30 37 63 35 31 61 34 37 2d 61 31 62 35 62 63 33 36 2d 31 62 62 65 2d 34 38 32 66 2d 61 36 34 61 2d 63 32 64 39 63 62 36 30 36 37 30 36 2d 37 34 33 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 42 22 20 44 43 61 3d 22 44 43 20 50 53 50 20 50 53 55 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="324007" V="1" DC="SM" EN="Office.Extensibility.VbaTelemetryIdeMacroRun" ATT="db334b301e7b474db5e0f02f07c51a47-a1b5bc36-1bbe-482f-a64a-c2d9cb606706-7439" SP="CriticalBusinessImpact" DL="B" DCa="DC PSP PSU"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.8	49727	13.107.219.40	443	7744	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Timestamp	Bytes transferred	Direction	Data
2023-12-06 17:16:55 UTC	207	OUT	GET /rules/rule324009v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro) Host: otelrules.azureedge.net
2023-12-06 17:16:55 UTC	555	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 2c 20 69 6d 6d 75 74 61 62 6c 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 36 31 38 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 78 6d 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 4d 44 35 3a 20 53 50 43 66 44 79 4e 67 36 4f 4b 4a 79 6a 57 6c 69 79 47 67 6d 41 3d 3d 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 30 32 3a 31 34 3a 31 38 20 47 4d 54 0d 0a 45 54 61 67 3a 20 30 78 38 44 42 45 42 30 30 42 42 41 44 44 37 38 34 0d 0a 58 2d 43 61 63 68 65 3a 20 54 43 50 5f 48 49 54 0d 0a 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 Data Ascii: HTTP/1.1 200 OKCache-Control: public, max-age=604800, immutableContent-Length: 618Content-Type: text/xmlContent-MD5: SPCfDyNg6OKJyjWliyGgmA==Last-Modified: Wed, 22 Nov 2023 02:14:18 GMTETag: 0x8DBEB00BBADD784X-Cache: TCP_HITx-ms-request-id
2023-12-06 17:16:55 UTC	618	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 33 32 34 30 30 39 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 45 78 74 65 6e 73 69 62 69 6c 69 74 79 2e 56 62 61 54 65 6c 65 6d 65 74 72 79 4d 61 63 72 6f 52 65 63 6f 72 64 22 20 41 54 54 3d 22 64 62 33 33 34 62 33 30 31 65 37 62 34 37 34 64 62 35 65 30 66 30 32 66 30 37 63 35 31 61 34 37 2d 61 31 62 35 62 63 33 36 2d 31 62 62 65 2d 34 38 32 66 2d 61 36 34 61 2d 63 32 64 39 63 62 36 30 36 37 30 36 2d 37 34 33 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 42 22 20 44 43 61 3d 22 44 43 20 50 53 50 20 50 53 55 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="324009" V="1" DC="SM" EN="Office.Extensibility.VbaTelemetryMacroRecord" ATT="db334b301e7b474db5e0f02f07c51a47-a1b5bc36-1bbe-482f-a64a-c2d9cb606706-7439" SP="CriticalBusinessImpact" DL="B" DCa="DC PSP PSU"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.8	49726	13.107.219.40	443	7744	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Timestamp	Bytes transferred	Direction	Data
2023-12-06 17:16:55 UTC	207	OUT	GET /rules/rule324008v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro) Host: otelrules.azureedge.net
2023-12-06 17:16:55 UTC	555	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 2c 20 69 6d 6d 75 74 61 62 6c 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 36 31 34 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 78 6d 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 4d 44 35 3a 20 31 4e 2b 38 70 73 6d 66 31 4e 77 58 74 79 72 58 47 73 73 51 54 67 3d 3d 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 30 32 3a 31 34 3a 31 38 20 47 4d 54 0d 0a 45 54 61 67 3a 20 30 78 38 44 42 45 42 30 30 42 42 39 36 38 32 35 45 0d 0a 58 2d 43 61 63 68 65 3a 20 54 43 50 5f 48 49 54 0d 0a 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 Data Ascii: HTTP/1.1 200 OKCache-Control: public, max-age=604800, immutableContent-Length: 614Content-Type: text/xmlContent-MD5: 1N+8psmf1NwXtyrXGssQTg==Last-Modified: Wed, 22 Nov 2023 02:14:18 GMTETag: 0x8DBEB00BB96825EX-Cache: TCP_HITx-ms-request-id
2023-12-06 17:16:55 UTC	614	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 33 32 34 30 30 38 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 45 78 74 65 6e 73 69 62 69 6c 69 74 79 2e 56 62 61 54 65 6c 65 6d 65 74 72 79 48 6f 73 74 4d 61 63 72 6f 52 75 6e 22 20 41 54 54 3d 22 64 62 33 33 34 62 33 30 31 65 37 62 34 37 34 64 62 35 65 30 66 30 32 66 30 37 63 35 31 61 34 37 2d 61 31 62 35 62 63 33 36 2d 31 62 62 65 2d 34 38 32 66 2d 61 36 34 61 2d 63 32 64 39 63 62 36 30 36 37 30 36 2d 37 34 33 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 42 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="324008" V="1" DC="SM" EN="Office.Extensibility.VbaTelemetryHostMacroRun" ATT="db334b301e7b474db5e0f02f07c51a47-a1b5bc36-1bbe-482f-a64a-c2d9cb606706-7439" SP="CriticalBusinessImpact" DL="B" DCa="PSU" xmlns=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.8	49728	13.107.219.40	443	7744	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Timestamp	Bytes transferred	Direction	Data
2023-12-06 17:16:55 UTC	206	OUT	GET /rules/rule63067v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro) Host: otelrules.azureedge.net
2023-12-06 17:16:55 UTC	689	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 2c 20 69 6d 6d 75 74 61 62 6c 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 38 37 31 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 78 6d 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 4d 44 35 3a 20 56 4d 37 31 65 32 42 69 4b 33 32 4d 47 51 56 2f 79 4d 48 49 44 51 3d 3d 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 4d 6f 6e 2c 20 31 33 20 4e 6f 76 20 32 30 32 33 20 31 34 3a 35 34 3a 30 31 20 47 4d 54 0d 0a 45 54 61 67 3a 20 30 78 38 44 42 45 34 35 38 35 46 39 39 34 37 32 45 0d 0a 58 2d 43 61 63 68 65 3a 20 54 43 50 5f 48 49 54 0d 0a 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 Data Ascii: HTTP/1.1 200 OKCache-Control: public, max-age=604800, immutableContent-Length: 2871Content-Type: text/xmlContent-MD5: VM71e2BiK32MGQV/yMHIDQ==Last-Modified: Mon, 13 Nov 2023 14:54:01 GMTETag: 0x8DBE4585F99472EX-Cache: TCP_HITx-ms-request-i
2023-12-06 17:16:55 UTC	2871	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 36 33 30 36 37 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 49 64 65 6e 74 69 74 79 2e 53 73 70 69 50 72 6f 6d 70 74 57 69 6e 33 32 22 20 41 54 54 3d 22 35 63 36 35 62 62 63 34 65 64 62 66 34 38 30 64 39 36 33 37 61 63 65 30 34 64 36 32 62 64 39 38 2d 31 32 38 34 34 38 39 33 2d 38 61 62 39 2d 34 64 64 65 2d 62 38 35 30 2d 35 36 31 32 63 62 31 32 65 30 66 32 2d 37 38 32 32 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="63067" V="4" DC="SM" EN="Office.Identity.SspiPromptWin32" ATT="5c65bbc4edbf480d9637ace04d62bd98-12844893-8ab9-4dde-b850-5612cb12e0f2-7822" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <S>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.8	49729	13.107.219.40	443	7744	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Timestamp	Bytes transferred	Direction	Data
2023-12-06 17:16:55 UTC	207	OUT	GET /rules/rule324010v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro) Host: otelrules.azureedge.net
2023-12-06 17:16:55 UTC	555	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 2c 20 69 6d 6d 75 74 61 62 6c 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 36 31 38 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 78 6d 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 4d 44 35 3a 20 6d 38 4a 63 77 35 50 7a 44 48 66 7a 58 54 51 56 5a 4b 47 68 37 77 3d 3d 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 30 32 3a 31 34 3a 30 39 20 47 4d 54 0d 0a 45 54 61 67 3a 20 30 78 38 44 42 45 42 30 30 42 36 37 30 37 30 43 31 0d 0a 58 2d 43 61 63 68 65 3a 20 54 43 50 5f 48 49 54 0d 0a 78 2d 6d 73 2d 72 65 71 75 65 73 74 2d 69 64 Data Ascii: HTTP/1.1 200 OKCache-Control: public, max-age=604800, immutableContent-Length: 618Content-Type: text/xmlContent-MD5: m8Jcw5PzDHfzXTQVZKGh7w==Last-Modified: Wed, 22 Nov 2023 02:14:09 GMTETag: 0x8DBEB00B67070C1X-Cache: TCP_HITx-ms-request-id
2023-12-06 17:16:55 UTC	618	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 33 32 34 30 31 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 45 78 74 65 6e 73 69 62 69 6c 69 74 79 2e 56 62 61 54 65 6c 65 6d 65 74 72 79 4d 61 63 72 6f 43 72 65 61 74 65 22 20 41 54 54 3d 22 64 62 33 33 34 62 33 30 31 65 37 62 34 37 34 64 62 35 65 30 66 30 32 66 30 37 63 35 31 61 34 37 2d 61 31 62 35 62 63 33 36 2d 31 62 62 65 2d 34 38 32 66 2d 61 36 34 61 2d 63 32 64 39 63 62 36 30 36 37 30 36 2d 37 34 33 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 42 22 20 44 43 61 3d 22 44 43 20 50 53 50 20 50 53 55 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="324010" V="1" DC="SM" EN="Office.Extensibility.VbaTelemetryMacroCreate" ATT="db334b301e7b474db5e0f02f07c51a47-a1b5bc36-1bbe-482f-a64a-c2d9cb606706-7439" SP="CriticalBusinessImpact" DL="B" DCa="DC PSP PSU"

Target ID:	0
Start time:	18:15:43
Start date:	06/12/2023
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	cmd /C "C:\Users\user\Desktop\Comprobante.xll"
Imagebase:	0xa40000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	18:15:43
Start date:	06/12/2023
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	18:15:44
Start date:	06/12/2023
Path:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
Wow64 process (32bit):	true
Commandline:	C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE" -xlls "C:\Users\user\Desktop\Comprobante.xll
Imagebase:	0x9d0000
File size:	53'161'064 bytes
MD5 hash:	4A871771235598812032C822E6F68F19
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	9
Start time:	18:16:49
Start date:	06/12/2023
Path:	C:\Windows\splwow64.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\splwow64.exe 12288
Imagebase:	0x7ff612120000
File size:	163'840 bytes
MD5 hash:	77DE7761B037061C7C112FD3C5B91E73
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may exploit software vulnerabilities in client applications to execute code. Vulnerabilities can exist in software due to unsecure coding practices that can lead to unanticipated behavior. Adversaries can take advantage of certain vulnerabilities through targeted exploitation for the purpose of arbitrary code execution. Oftentimes the most valuable exploits to an offensive toolkit are those that can be used to obtain code execution on a remote system because they can be used to gain access to that system. Users will expect to see files related to the applications they commonly used to do work, so they are a useful target for exploit research and development because of their high utility.
Tactics:	Execution
Data Sources:	Application Log: Application Log Content, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Comprobante.xll

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

(copy)

C:\Users\user\AppData\Local\Microsoft\FontCache\4\CatalogCacheMetaData.xml

C:\Users\user\AppData\Local\Microsoft\FontCache\4\Catalog\ListAll.Json

C:\Users\user\AppData\Local\Microsoft\FontCache\4\PreviewFont\flat_officeFontsPreview_4_37.ttf

C:\Users\user\AppData\Local\Microsoft\Office\16.0\UsageMetricsStore\FileActivityStoreV3\Excel\1380790193167760279.C4

C:\Users\user\AppData\Local\Microsoft\Office\16.0\UsageMetricsStore\FileActivityStoreV3\Excel\ASkwMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDBfTnVsbAA.S

C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\81A0C263-86B6-44AC-B745-4DFCF06DF311

C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules.xml

C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324001v3.xml

C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324002v3.xml

C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324003v3.xml

C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324005v1.xml

C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324006v1.xml

C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324007v1.xml

C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324008v1.xml

C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324009v1.xml

C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule324010v1.xml

C:\Users\user\AppData\Local\Microsoft\Office\16.0\excel.exe_Rules\rule63067v4.xml

C:\Users\user\AppData\Local\Microsoft\Office\OTele\excel.exe.db-shm

C:\Users\user\AppData\Local\Microsoft\Office\OTele\excel.exe.db-wal

C:\Users\user\AppData\Local\Temp\Diagnostics\EXCEL\App1701882946315070300_9B90E6DF-127D-4E23-9CF7-A5005A676C51.log

C:\Users\user\AppData\Local\Temp\Diagnostics\EXCEL\App1701882946316142800_9B90E6DF-127D-4E23-9CF7-A5005A676C51.log

C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Comprobante.LNK

C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ITJUK124WG7O893IO9Y1.temp

Windows Analysis Report
Comprobante.xll