Edit tour

Windows Analysis Report
csgo aimlock v2.exe

Overview

General Information

Sample Name:	csgo aimlock v2.exe
Analysis ID:	632532
MD5:	f14b1ff9a9ebe48f275dfcdf52e3cb6e
SHA1:	586e092ba7030920f033d9e21b1c2b0804e7e6ef
SHA256:	38670f0f3b254aa49f585837d675a2bd22873f7c418629c6f41170eb01529ff3
Tags:	exe
Infos:

Detection

Score:	72
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for submitted file

Multi AV Scanner detection for dropped file

Snort IDS alert for network traffic

.NET source code contains potential unpacker

Creates an undocumented autostart registry key

Queries the volume information (name, serial number etc) of a device

Yara signature match

May sleep (evasive loops) to hinder dynamic analysis

Sample execution stops while process was sleeping (likely an evasion)

Stores files to the Windows start menu directory

JA3 SSL client fingerprint seen in connection with other malware

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Contains long sleeps (>= 3 min)

Enables debug privileges

PE file does not import any functions

Sample file is different than original file name gathered from version info

PE file contains strange resources

Drops PE files

Binary contains a suspicious time stamp

Creates a process in suspended mode (likely to inject code)

Classification

Process Tree

System is w10x64

csgo aimlock v2.exe (PID: 6268 cmdline: "C:\Users\user\Desktop\csgo aimlock v2.exe" MD5: F14B1FF9A9EBE48F275DFCDF52E3CB6E)

cmd.exe (PID: 4888 cmdline: "C:\Windows\System32\cmd.exe" /c timeout 36 MD5: 4E2ACF4F8A396486AB4268C94A6A245F)

conhost.exe (PID: 3140 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

timeout.exe (PID: 4176 cmdline: timeout 36 MD5: EB9A65078396FB5D4E3813BB9198CB18)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
csgo aimlock v2.exe	SUSP_PE_Discord_Attachment_Oct21_1	Detects suspicious executable with reference to a Discord attachment (often used for malware hosting on a legitimate FQDN)	Florian Roth	0x401c33:$x1: https://cdn.discordapp.com/attachments/

Dropped Files

Source	Rule	Description	Author	Strings
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WindowsUpdate\AxInstUI.exe	SUSP_PE_Discord_Attachment_Oct21_1	Detects suspicious executable with reference to a Discord attachment (often used for malware hosting on a legitimate FQDN)	Florian Roth	0x401c33:$x1: https://cdn.discordapp.com/attachments/

Unpacked PEs

Source	Rule	Description	Author	Strings
0.0.csgo aimlock v2.exe.10000.0.unpack	SUSP_PE_Discord_Attachment_Oct21_1	Detects suspicious executable with reference to a Discord attachment (often used for malware hosting on a legitimate FQDN)	Florian Roth	0x401c33:$x1: https://cdn.discordapp.com/attachments/

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

ET TROJAN Generic AsyncRAT Style SSL Cert - Source IP: 157.90.206.56 - Destination IP: 192.168.2.5

Timestamp:	157.90.206.56192.168.2.58808498572035595 05/23/22-18:48:31.158459
SID:	2035595
Source Port:	8808
Destination Port:	49857
Protocol:	TCP
Classtype:	A Network Trojan was detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: csgo aimlock v2.exe	Virustotal: Detection: 54%			Perma Link
Source: csgo aimlock v2.exe	ReversingLabs: Detection: 41%

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WindowsUpdate\AxInstUI.exe

ReversingLabs: Detection: 41%

Source: unknown

HTTPS traffic detected: 162.159.135.233:443 -> 192.168.2.5:49786 version: TLS 1.2

Source: csgo aimlock v2.exe

Static PE information: NO_SEH, TERMINAL_SERVER_AWARE, DYNAMIC_BASE, NX_COMPAT

Networking

Snort IDS alert for network traffic

Source: Traffic

Snort IDS: 2035595 ET TROJAN Generic AsyncRAT Style SSL Cert 157.90.206.56:8808 -> 192.168.2.5:49857

Source: Joe Sandbox View

JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e

Source: global traffic

HTTP traffic detected: GET /attachments/970091439654584400/970407225539575808/Htlgnh_Jbpovrha.png HTTP/1.1Host: cdn.discordapp.comConnection: Keep-Alive

Source: Joe Sandbox View	IP Address: 162.159.135.233 162.159.135.233
Source: Joe Sandbox View	IP Address: 162.159.135.233 162.159.135.233

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443

Source: csgo aimlock v2.exe, 00000000.00000003.445415642.000000001C366000.00000004.00000020.00020000.00000000.sdmp, csgo aimlock v2.exe, 00000000.00000003.445455103.000000001C368000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://en.w
Source: csgo aimlock v2.exe, 00000000.00000003.444895171.000000001C343000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.carterandcone.com6
Source: csgo aimlock v2.exe, 00000000.00000003.444895171.000000001C343000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.carterandcone.comcom
Source: csgo aimlock v2.exe, 00000000.00000003.444895171.000000001C343000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.carterandcone.comh
Source: csgo aimlock v2.exe, 00000000.00000003.452958523.000000001C366000.00000004.00000020.00020000.00000000.sdmp, csgo aimlock v2.exe, 00000000.00000003.452879308.000000001C366000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.fontbureau.com/designers/frere-jones.htmlsb
Source: csgo aimlock v2.exe, 00000000.00000003.443841657.000000001C342000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.founder.com.cn/cn/
Source: csgo aimlock v2.exe, 00000000.00000003.442963572.000000001C343000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.founder.com.cn/cn/X
Source: csgo aimlock v2.exe, 00000000.00000003.442963572.000000001C343000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.founder.com.cn/cn/e
Source: csgo aimlock v2.exe, 00000000.00000003.443494203.000000001C343000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.founder.com.cn/cn3
Source: csgo aimlock v2.exe, 00000000.00000003.443494203.000000001C343000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.founder.com.cn/cnF
Source: csgo aimlock v2.exe, 00000000.00000003.447029551.000000001C335000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.jiyu-kobo.co.jp/
Source: csgo aimlock v2.exe, 00000000.00000003.447029551.000000001C335000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.jiyu-kobo.co.jp/.TTC3
Source: csgo aimlock v2.exe, 00000000.00000003.447029551.000000001C335000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.jiyu-kobo.co.jp/3
Source: csgo aimlock v2.exe, 00000000.00000003.447029551.000000001C335000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.jiyu-kobo.co.jp/F
Source: csgo aimlock v2.exe, 00000000.00000003.447029551.000000001C335000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.jiyu-kobo.co.jp/G.F
Source: csgo aimlock v2.exe, 00000000.00000003.447029551.000000001C335000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.jiyu-kobo.co.jp/Y0TCi
Source: csgo aimlock v2.exe, 00000000.00000003.447029551.000000001C335000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.jiyu-kobo.co.jp/co
Source: csgo aimlock v2.exe, 00000000.00000003.447029551.000000001C335000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.jiyu-kobo.co.jp/e
Source: csgo aimlock v2.exe, 00000000.00000003.447029551.000000001C335000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.jiyu-kobo.co.jp/jp/(
Source: csgo aimlock v2.exe, 00000000.00000003.447029551.000000001C335000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.jiyu-kobo.co.jp/vo
Source: csgo aimlock v2.exe, 00000000.00000003.447029551.000000001C335000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.jiyu-kobo.co.jp/x
Source: csgo aimlock v2.exe, 00000000.00000003.457575881.000000001C36A000.00000004.00000020.00020000.00000000.sdmp, csgo aimlock v2.exe, 00000000.00000003.457609566.000000001C36A000.00000004.00000020.00020000.00000000.sdmp, csgo aimlock v2.exe, 00000000.00000003.457100735.000000001C368000.00000004.00000020.00020000.00000000.sdmp, csgo aimlock v2.exe, 00000000.00000003.456901082.000000001C366000.00000004.00000020.00020000.00000000.sdmp, csgo aimlock v2.exe, 00000000.00000003.457373797.000000001C36A000.00000004.00000020.00020000.00000000.sdmp, csgo aimlock v2.exe, 00000000.00000003.457131178.000000001C370000.00000004.00000020.00020000.00000000.sdmp, csgo aimlock v2.exe, 00000000.00000003.457308457.000000001C36A000.00000004.00000020.00020000.00000000.sdmp, csgo aimlock v2.exe, 00000000.00000003.457222917.000000001C36A000.00000004.00000020.00020000.00000000.sdmp, csgo aimlock v2.exe, 00000000.00000003.457863362.000000001C371000.00000004.00000020.00020000.00000000.sdmp, csgo aimlock v2.exe, 00000000.00000003.451153724.000000001C349000.00000004.00000020.00020000.00000000.sdmp, csgo aimlock v2.exe, 00000000.00000003.457775189.000000001C36A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.monotype.
Source: csgo aimlock v2.exe, 00000000.00000003.447373884.000000001C366000.00000004.00000020.00020000.00000000.sdmp, csgo aimlock v2.exe, 00000000.00000003.447664276.000000001C367000.00000004.00000020.00020000.00000000.sdmp, csgo aimlock v2.exe, 00000000.00000003.447485840.000000001C366000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.sakkal.com
Source: csgo aimlock v2.exe, 00000000.00000003.442963572.000000001C343000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.sandoll.co.kr.TTF
Source: csgo aimlock v2.exe, 00000000.00000003.442963572.000000001C343000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.sandoll.co.krh
Source: csgo aimlock v2.exe, 00000000.00000003.442963572.000000001C343000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.sandoll.co.krormal
Source: csgo aimlock v2.exe, AxInstUI.exe.0.dr	String found in binary or memory: https://cdn.discordapp.com/attachments/970091439654584400/970407225539575808/Htlgnh_Jbpovrha.png

Source: unknown

DNS traffic detected: queries for: cdn.discordapp.com

Source: global traffic

HTTP traffic detected: GET /attachments/970091439654584400/970407225539575808/Htlgnh_Jbpovrha.png HTTP/1.1Host: cdn.discordapp.comConnection: Keep-Alive

Source: unknown

HTTPS traffic detected: 162.159.135.233:443 -> 192.168.2.5:49786 version: TLS 1.2

Source: csgo aimlock v2.exe, type: SAMPLE	Matched rule: SUSP_PE_Discord_Attachment_Oct21_1 date = 2021-10-12, author = Florian Roth, description = Detects suspicious executable with reference to a Discord attachment (often used for malware hosting on a legitimate FQDN), reference = Internal Research, score =
Source: 0.0.csgo aimlock v2.exe.10000.0.unpack, type: UNPACKEDPE	Matched rule: SUSP_PE_Discord_Attachment_Oct21_1 date = 2021-10-12, author = Florian Roth, description = Detects suspicious executable with reference to a Discord attachment (often used for malware hosting on a legitimate FQDN), reference = Internal Research, score =
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WindowsUpdate\AxInstUI.exe, type: DROPPED	Matched rule: SUSP_PE_Discord_Attachment_Oct21_1 date = 2021-10-12, author = Florian Roth, description = Detects suspicious executable with reference to a Discord attachment (often used for malware hosting on a legitimate FQDN), reference = Internal Research, score =

Source: AxInstUI.exe.0.dr	Static PE information: No import functions for PE file found
Source: csgo aimlock v2.exe	Static PE information: No import functions for PE file found

Source: csgo aimlock v2.exe

Binary or memory string: OriginalFilenameHtlgnh.exej% vs csgo aimlock v2.exe

Source: csgo aimlock v2.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: csgo aimlock v2.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: csgo aimlock v2.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: AxInstUI.exe.0.dr	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: AxInstUI.exe.0.dr	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: AxInstUI.exe.0.dr	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST

Source: csgo aimlock v2.exe	Virustotal: Detection: 54%
Source: csgo aimlock v2.exe	ReversingLabs: Detection: 41%

Source: C:\Users\user\Desktop\csgo aimlock v2.exe

File read: C:\Users\user\Desktop\csgo aimlock v2.exe

Jump to behavior

Source: csgo aimlock v2.exe

Static PE information: Section: .text IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_READ

Source: C:\Users\user\Desktop\csgo aimlock v2.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\csgo aimlock v2.exe "C:\Users\user\Desktop\csgo aimlock v2.exe"
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Process created: C:\Windows\System32\cmd.exe "C:\Windows\System32\cmd.exe" /c timeout 36
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout 36
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Process created: C:\Windows\System32\cmd.exe "C:\Windows\System32\cmd.exe" /c timeout 36	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout 36	Jump to behavior

Source: C:\Users\user\Desktop\csgo aimlock v2.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WindowsUpdate

Jump to behavior

Source: classification engine

Classification label: mal72.evad.winEXE@6/2@1/1

Source: C:\Users\user\Desktop\csgo aimlock v2.exe

File read: C:\Users\user\Desktop\desktop.ini

Jump to behavior

Source: csgo aimlock v2.exe	Static file information: TRID: Win64 Executable GUI Net Framework (217006/5) 49.88%
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Section loaded: C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\ac26e2af62f23e37e645b5e44068a025\mscorlib.ni.dll			Jump to behavior

Source: C:\Windows\System32\conhost.exe

Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3140:120:WilError_01

Source: C:\Users\user\Desktop\csgo aimlock v2.exe	File read: C:\Windows\System32\drivers\etc\hosts			Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	File read: C:\Windows\System32\drivers\etc\hosts			Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Users\user\Desktop\csgo aimlock v2.exe

File opened: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorrc.dll

Jump to behavior

Source: csgo aimlock v2.exe

Static PE information: Virtual size of .text is bigger than: 0x100000

Source: csgo aimlock v2.exe

Static PE information: Image base 0x140000000 > 0x60000000

Source: csgo aimlock v2.exe

Static file information: File size 4229120 > 1048576

Source: csgo aimlock v2.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR

Source: csgo aimlock v2.exe

Static PE information: Raw size of .text is bigger than: 0x100000 < 0x402000

Source: csgo aimlock v2.exe

Static PE information: NO_SEH, TERMINAL_SERVER_AWARE, DYNAMIC_BASE, NX_COMPAT

Data Obfuscation

.NET source code contains potential unpacker

Source: csgo aimlock v2.exe, Form3.cs	.Net Code: .ctor System.Reflection.Assembly System.Reflection.Assembly::Load(System.Byte[])
Source: AxInstUI.exe.0.dr, Form3.cs	.Net Code: .ctor System.Reflection.Assembly System.Reflection.Assembly::Load(System.Byte[])

Source: csgo aimlock v2.exe

Static PE information: 0xE4267E42 [Wed Apr 18 09:45:38 2091 UTC]

Source: C:\Users\user\Desktop\csgo aimlock v2.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WindowsUpdate\AxInstUI.exe

Jump to dropped file

Boot Survival

Creates an undocumented autostart registry key

Source: C:\Users\user\Desktop\csgo aimlock v2.exe

Key value created or modified: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders Startup

Jump to behavior

Source: C:\Users\user\Desktop\csgo aimlock v2.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WindowsUpdate	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WindowsUpdate\AxInstUI.exe	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WindowsUpdate\AxInstUI.exe\:Zone.Identifier:$DATA	Jump to behavior

Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Users\user\Desktop\csgo aimlock v2.exe TID: 6272	Thread sleep time: -922337203685477s >= -30000s			Jump to behavior
Source: C:\Windows\System32\timeout.exe TID: 3828	Thread sleep count: 265 > 30			Jump to behavior

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\Desktop\csgo aimlock v2.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: C:\Users\user\Desktop\csgo aimlock v2.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Users\user\Desktop\csgo aimlock v2.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: C:\Users\user\Desktop\csgo aimlock v2.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Users\user\Desktop\csgo aimlock v2.exe

Memory allocated: page read and write | page guard

Jump to behavior

Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Process created: C:\Windows\System32\cmd.exe "C:\Windows\System32\cmd.exe" /c timeout 36			Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout 36			Jump to behavior

Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Users\user\Desktop\csgo aimlock v2.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\arial.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\ariali.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\arialbd.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\arialbi.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\ARIALN.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\ariblk.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\ARIALNI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\ARIALNB.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\ARIALNBI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\bahnschrift.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\calibri.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\calibril.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\calibrii.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\calibrili.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\calibrib.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\calibriz.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\cambria.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\cambriai.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\cambriab.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\cambriaz.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\Candara.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\Candarai.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\Candarab.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\Candaraz.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\comic.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\comici.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\comicbd.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\comicz.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\consola.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\consolai.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\consolab.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\consolaz.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\constan.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\constani.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\constanb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\constanz.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\corbel.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\corbeli.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\corbelb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\corbelz.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\cour.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\couri.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\courbd.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\courbi.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\ebrima.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\ebrimabd.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\framd.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\FRADM.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\framdit.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\FRADMIT.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\FRAMDCN.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\FRADMCN.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\FRAHV.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\FRAHVIT.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\Gabriola.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\gadugi.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\gadugib.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\georgia.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\georgiai.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\georgiab.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\georgiaz.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\impact.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\Inkfree.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\javatext.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\LeelawUI.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\LeelUIsl.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\LeelaUIb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\lucon.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\l_10646.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\malgun.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\malgunsl.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\malgunbd.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\himalaya.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\msjh.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\msjhl.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\msjhbd.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\ntailu.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\ntailub.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\phagspa.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\phagspab.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\micross.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\taile.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\taileb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\msyh.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\msyhl.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\msyhbd.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\msyi.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\mingliub.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\monbaiti.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\msgothic.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\mvboli.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\mmrtext.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\mmrtextb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\Nirmala.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\NirmalaS.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\NirmalaB.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\pala.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\palai.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\palab.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\palabi.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\segoepr.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\segoeprb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\segoesc.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\segoescb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\seguisb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\segoeuii.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\seguisli.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\seguili.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\seguisbi.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\segoeuiz.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\seguibl.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\seguibli.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\seguiemj.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\seguihis.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\seguisym.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\simsun.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\simsunb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\Sitka.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\SitkaI.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\SitkaB.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\SitkaZ.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\sylfaen.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\symbol.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\tahoma.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\tahomabd.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\timesi.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\timesbd.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\timesbi.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\trebuc.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\trebucit.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\trebucbd.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\trebucbi.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\verdana.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\verdanai.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\verdanab.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\verdanaz.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\webdings.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\wingding.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\YuGothR.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\YuGothM.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\YuGothL.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\YuGothB.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\holomdl2.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\CENTURY.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\LEELAWAD.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\LEELAWDB.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\MSUIGHUR.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\MSUIGHUB.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\WINGDNG2.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\WINGDNG3.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\TEMPSITC.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\PRISTINA.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\PAPYRUS.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\MISTRAL.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\LHANDW.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\ITCKRIST.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\JUICE___.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\FRSCRIPT.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\FREESCPT.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\BRADHITC.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\OUTLOOK.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\BKANT.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\ANTQUAI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\ANTQUAB.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\ANTQUABI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\GARA.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\GARAIT.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\GARABD.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\MTCORSVA.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\GOTHIC.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\GOTHICI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\GOTHICB.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\GOTHICBI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\ALGER.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\BASKVILL.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\BAUHS93.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\BELL.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\BELLI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\BELLB.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\BRLNSR.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\BRLNSDB.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\BRLNSB.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\BERNHC.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\BOD_PSTC.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\BRITANIC.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\BROADW.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\BRUSHSCI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\CALIFR.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\CALIFI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\CALIFB.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\CENTAUR.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\CHILLER.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\COLONNA.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\COOPBL.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\FTLTLT.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\HARLOWSI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\HARNGTON.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\HTOWERT.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\HTOWERTI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\JOKERMAN.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\KUNSTLER.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\LBRITE.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\LBRITED.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\LBRITEI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\LBRITEDI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\LCALLIG.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\LFAX.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\LFAXD.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\LFAXI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\LFAXDI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\MAGNETOB.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\MATURASC.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\MOD20.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\NIAGENG.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\NIAGSOL.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\OLDENGL.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\ONYX.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\PARCHM.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\PLAYBILL.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\POORICH.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\RAVIE.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\INFROMAN.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\SHOWG.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\SNAP____.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\STENCIL.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\VINERITC.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\VIVALDII.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\VLADIMIR.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\LATINWD.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\TCM_____.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\TCMI____.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\TCB_____.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\TCBI____.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\TCCM____.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\TCCB____.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\TCCEB.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\SCRIPTBL.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\ROCK.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\ROCKI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\ROCKB.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\ROCKEB.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\ROCKBI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\ROCC____.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\ROCCB___.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\RAGE.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\PERTILI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\PERTIBD.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\PER_____.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\PERI____.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\PERB____.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\PERBI___.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\PALSCRI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\OCRAEXT.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\MAIAN.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\LTYPE.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\LTYPEO.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\LTYPEB.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\LTYPEBO.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\LSANS.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\LSANSD.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\LSANSI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\LSANSDI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\IMPRISHA.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\HATTEN.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\GOUDYSTO.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\GOUDOS.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\GOUDOSI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\GOUDOSB.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\GLECB.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\GIL_____.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\GILI____.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\GILB____.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\GILBI___.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\GILC____.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\GLSNECB.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\GIGI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\FRABK.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\FRABKIT.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\FORTE.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\FELIXTI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\ERASMD.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\ERASLGHT.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\ERASDEMI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\ERASBD.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\ENGR.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\ELEPHNT.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\ELEPHNTI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\ITCEDSCR.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\CURLZ___.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\COPRGTL.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\COPRGTB.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\CENSCBK.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\SCHLBKI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\SCHLBKB.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\SCHLBKBI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\CASTELAR.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\CALIST.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\CALISTI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\CALISTB.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\CALISTBI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\BOOKOS.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\BOOKOSB.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\BOOKOSI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\BOOKOSBI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\BOD_R.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\BOD_I.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\BOD_B.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\BOD_BI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\BOD_CR.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\BOD_BLAR.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\BOD_CI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\BOD_CB.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\BOD_BLAI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\BOD_CBI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\ITCBLKAD.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\ARLRDBD.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\AGENCYR.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\AGENCYB.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\BSSYM7.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\REFSAN.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\REFSPCL.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\MTEXTRA.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\marlett.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Fonts\micross.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\csgo aimlock v2.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll VolumeInformation	Jump to behavior

Source: C:\Users\user\Desktop\csgo aimlock v2.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Windows Management Instrumentation	11 Registry Run Keys / Startup Folder	11 Process Injection	1 Masquerading	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	1 Encrypted Channel	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	11 Registry Run Keys / Startup Folder	1 Disable or Modify Tools	LSASS Memory	1 Process Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	1 Ingress Tool Transfer	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	21 Virtualization/Sandbox Evasion	Security Account Manager	21 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	2 Non-Application Layer Protocol	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	11 Process Injection	NTDS	1 Remote System Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	3 Application Layer Protocol	SIM Card Swap		Carrier Billing Fraud
Cloud Accounts	Cron	Network Logon Script	Network Logon Script	1 Software Packing	LSA Secrets	1 File and Directory Discovery	SSH	Keylogging	Data Transfer Size Limits	Fallback Channels	Manipulate Device Communication		Manipulate App Store Rankings or Ratings
Replication Through Removable Media	Launchd	Rc.common	Rc.common	1 Timestomp	Cached Domain Credentials	12 System Information Discovery	VNC	GUI Input Capture	Exfiltration Over C2 Channel	Multiband Communication	Jamming or Denial of Service		Abuse Accessibility Features

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
csgo aimlock v2.exe	54%	Virustotal		Browse
csgo aimlock v2.exe	41%	ReversingLabs	ByteCode-MSIL.Trojan.FormBook

Dropped Files

Source	Detection	Scanner	Label	Link
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WindowsUpdate\AxInstUI.exe	41%	ReversingLabs	ByteCode-MSIL.Trojan.FormBook

Source	Detection	Scanner	Label
http://www.sandoll.co.kr.TTF	0%	Avira URL Cloud	safe
http://www.carterandcone.comcom	0%	URL Reputation	safe
http://www.jiyu-kobo.co.jp/G.F	0%	Avira URL Cloud	safe
http://www.carterandcone.com6	0%	URL Reputation	safe
http://www.sandoll.co.krh	0%	Avira URL Cloud	safe
http://www.jiyu-kobo.co.jp/F	0%	URL Reputation	safe
http://www.founder.com.cn/cnF	0%	URL Reputation	safe
http://www.carterandcone.comh	0%	URL Reputation	safe
http://en.w	0%	URL Reputation	safe
http://www.founder.com.cn/cn/	0%	URL Reputation	safe
http://www.jiyu-kobo.co.jp/.TTC3	0%	Avira URL Cloud	safe
http://www.jiyu-kobo.co.jp/x	0%	URL Reputation	safe
http://www.founder.com.cn/cn/X	0%	Avira URL Cloud	safe
http://www.jiyu-kobo.co.jp/co	0%	Avira URL Cloud	safe
http://www.jiyu-kobo.co.jp/3	0%	URL Reputation	safe
http://www.jiyu-kobo.co.jp/Y0TCi	0%	Avira URL Cloud	safe
http://www.monotype.	0%	URL Reputation	safe
http://www.jiyu-kobo.co.jp/jp/(	0%	URL Reputation	safe
http://www.founder.com.cn/cn3	0%	URL Reputation	safe
http://www.jiyu-kobo.co.jp/	0%	URL Reputation	safe
http://www.jiyu-kobo.co.jp/e	0%	URL Reputation	safe
http://www.founder.com.cn/cn/e	0%	URL Reputation	safe
http://www.jiyu-kobo.co.jp/vo	0%	Avira URL Cloud	safe
http://www.sandoll.co.krormal	0%	URL Reputation	safe
http://www.sakkal.com	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
cdn.discordapp.com	162.159.135.233	true	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://cdn.discordapp.com/attachments/970091439654584400/970407225539575808/Htlgnh_Jbpovrha.png	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://www.sandoll.co.kr.TTF	csgo aimlock v2.exe, 00000000.00000003.442963572.000000001C343000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.carterandcone.comcom	csgo aimlock v2.exe, 00000000.00000003.444895171.000000001C343000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://www.jiyu-kobo.co.jp/G.F	csgo aimlock v2.exe, 00000000.00000003.447029551.000000001C335000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.carterandcone.com6	csgo aimlock v2.exe, 00000000.00000003.444895171.000000001C343000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://www.sandoll.co.krh	csgo aimlock v2.exe, 00000000.00000003.442963572.000000001C343000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.jiyu-kobo.co.jp/F	csgo aimlock v2.exe, 00000000.00000003.447029551.000000001C335000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://www.founder.com.cn/cnF	csgo aimlock v2.exe, 00000000.00000003.443494203.000000001C343000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://www.carterandcone.comh	csgo aimlock v2.exe, 00000000.00000003.444895171.000000001C343000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://en.w	csgo aimlock v2.exe, 00000000.00000003.445415642.000000001C366000.00000004.00000020.00020000.00000000.sdmp, csgo aimlock v2.exe, 00000000.00000003.445455103.000000001C368000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://www.founder.com.cn/cn/	csgo aimlock v2.exe, 00000000.00000003.443841657.000000001C342000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://www.jiyu-kobo.co.jp/.TTC3	csgo aimlock v2.exe, 00000000.00000003.447029551.000000001C335000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.jiyu-kobo.co.jp/x	csgo aimlock v2.exe, 00000000.00000003.447029551.000000001C335000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://www.founder.com.cn/cn/X	csgo aimlock v2.exe, 00000000.00000003.442963572.000000001C343000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.jiyu-kobo.co.jp/co	csgo aimlock v2.exe, 00000000.00000003.447029551.000000001C335000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.jiyu-kobo.co.jp/3	csgo aimlock v2.exe, 00000000.00000003.447029551.000000001C335000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://www.jiyu-kobo.co.jp/Y0TCi	csgo aimlock v2.exe, 00000000.00000003.447029551.000000001C335000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.monotype.	csgo aimlock v2.exe, 00000000.00000003.457575881.000000001C36A000.00000004.00000020.00020000.00000000.sdmp, csgo aimlock v2.exe, 00000000.00000003.457609566.000000001C36A000.00000004.00000020.00020000.00000000.sdmp, csgo aimlock v2.exe, 00000000.00000003.457100735.000000001C368000.00000004.00000020.00020000.00000000.sdmp, csgo aimlock v2.exe, 00000000.00000003.456901082.000000001C366000.00000004.00000020.00020000.00000000.sdmp, csgo aimlock v2.exe, 00000000.00000003.457373797.000000001C36A000.00000004.00000020.00020000.00000000.sdmp, csgo aimlock v2.exe, 00000000.00000003.457131178.000000001C370000.00000004.00000020.00020000.00000000.sdmp, csgo aimlock v2.exe, 00000000.00000003.457308457.000000001C36A000.00000004.00000020.00020000.00000000.sdmp, csgo aimlock v2.exe, 00000000.00000003.457222917.000000001C36A000.00000004.00000020.00020000.00000000.sdmp, csgo aimlock v2.exe, 00000000.00000003.457863362.000000001C371000.00000004.00000020.00020000.00000000.sdmp, csgo aimlock v2.exe, 00000000.00000003.451153724.000000001C349000.00000004.00000020.00020000.00000000.sdmp, csgo aimlock v2.exe, 00000000.00000003.457775189.000000001C36A000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://www.jiyu-kobo.co.jp/jp/(	csgo aimlock v2.exe, 00000000.00000003.447029551.000000001C335000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://www.founder.com.cn/cn3	csgo aimlock v2.exe, 00000000.00000003.443494203.000000001C343000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://www.jiyu-kobo.co.jp/	csgo aimlock v2.exe, 00000000.00000003.447029551.000000001C335000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://www.jiyu-kobo.co.jp/e	csgo aimlock v2.exe, 00000000.00000003.447029551.000000001C335000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://www.founder.com.cn/cn/e	csgo aimlock v2.exe, 00000000.00000003.442963572.000000001C343000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://www.jiyu-kobo.co.jp/vo	csgo aimlock v2.exe, 00000000.00000003.447029551.000000001C335000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.sandoll.co.krormal	csgo aimlock v2.exe, 00000000.00000003.442963572.000000001C343000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://www.fontbureau.com/designers/frere-jones.htmlsb	csgo aimlock v2.exe, 00000000.00000003.452958523.000000001C366000.00000004.00000020.00020000.00000000.sdmp, csgo aimlock v2.exe, 00000000.00000003.452879308.000000001C366000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www.sakkal.com	csgo aimlock v2.exe, 00000000.00000003.447373884.000000001C366000.00000004.00000020.00020000.00000000.sdmp, csgo aimlock v2.exe, 00000000.00000003.447664276.000000001C367000.00000004.00000020.00020000.00000000.sdmp, csgo aimlock v2.exe, 00000000.00000003.447485840.000000001C366000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
162.159.135.233	cdn.discordapp.com	United States		13335	CLOUDFLARENETUS	false

General Information

Joe Sandbox Version:	34.0.0 Boulder Opal
Analysis ID:	632532
Start date and time: 23/05/202218:45:06	2022-05-23 18:45:06 +02:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 6m 38s
Hypervisor based Inspection enabled:	false
Report type:	full
Sample file name:	csgo aimlock v2.exe
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	18
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal72.evad.winEXE@6/2@1/1
EGA Information:	Failed
HDC Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .exe Adjust boot time Enable AMSI

Warnings

Exclude process from analysis (whitelisted): audiodg.exe, BackgroundTransferHost.exe, WMIADAP.exe, backgroundTaskHost.exe, svchost.exe, wuapihost.exe
Excluded domains from analysis (whitelisted): ris.api.iris.microsoft.com, client.wns.windows.com, fs.microsoft.com, store-images.s-microsoft.com, login.live.com, sls.update.microsoft.com, settings-win.data.microsoft.com, ctldl.windowsupdate.com, displaycatalog.mp.microsoft.com, img-prod-cms-rt-microsoft-com.akamaized.net, arc.msn.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.

Simulations

Behavior and APIs

Time	Type	Description
18:48:21	API Interceptor	1x Sleep call for process: csgo aimlock v2.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
162.159.135.233	We7WnoqeXe.exe	Get hash	malicious	Browse	cdn.discordapp.com/attachments/878034206570209333/908097655173947432/slhost.exe
	mosoxxxHack.exe	Get hash	malicious	Browse	cdn.discordapp.com/attachments/710557342755848243/876828681815871488/clp.exe
	Sales-contract-deaho-180521-poweruae.doc	Get hash	malicious	Browse	cdn.discordapp.com/attachments/843685789120331799/844316591284944986/poiu.exe
	PURCHASE ORDER E3007921.EXE	Get hash	malicious	Browse	cdn.discordapp.com/attachments/809311531652087809/839820005927550996/Youngest_Snake.exe
	Waybill Document 22700456.exe	Get hash	malicious	Browse	cdn.discordapp.com/attachments/809311531652087809/839856358152208434/May_Blessing.exe
	COMPANY REQUIREMENT.doc	Get hash	malicious	Browse	cdn.discordapp.com/attachments/819674896988242004/819677189900861500/harcout.exe
	Email data form.doc	Get hash	malicious	Browse	cdn.discordapp.com/attachments/789279517516365865/789279697203757066/angelx.scr
	Down Payment.doc	Get hash	malicious	Browse	cdn.discordapp.com/attachments/788946375533789214/788947376849027092/atlasx.scr
	Vessel details.doc	Get hash	malicious	Browse	cdn.discordapp.com/attachments/780175015496777751/781048233136226304/mocux.exe
	Teklif Rusya 24 09 2020.doc	Get hash	malicious	Browse	cdn.discordapp.com/attachments/733818080668680222/758418625429372978/p2.jpg

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
cdn.discordapp.com	56516426-056C-4DBA-984B-979F68AB8D18 pdf.exe	Get hash	malicious	Browse	162.159.130.233
	Inquiry_List & Data sheet.exe	Get hash	malicious	Browse	162.159.135.233
	Req. Quote_28042022.exe	Get hash	malicious	Browse	162.159.135.233
	RFQ-SIGNAL S.A 17.05.2022.exe	Get hash	malicious	Browse	162.159.129.233
	REF AMVK22-3480.exe	Get hash	malicious	Browse	162.159.130.233
	Setup.exe	Get hash	malicious	Browse	162.159.133.233
	RFQ # 1040377 & Drawings.exe	Get hash	malicious	Browse	162.159.133.233
	File.exe	Get hash	malicious	Browse	162.159.133.233
	ORDER #PO-078-21-00343.exe	Get hash	malicious	Browse	162.159.129.233
	854F1E97-5DBB-4A87-A566-33D9012B05E2.exe	Get hash	malicious	Browse	162.159.134.233
	F42E768EAF5BBDE818DFA4A2B00B1BC53D2E8365F646E.exe	Get hash	malicious	Browse	162.159.134.233
	REF AMVK22-3480.exe	Get hash	malicious	Browse	162.159.129.233
	RFQ 61340.exe	Get hash	malicious	Browse	162.159.134.233
	zkVYp3YMvk.exe	Get hash	malicious	Browse	162.159.133.233
	AutoInstall.exe	Get hash	malicious	Browse	162.159.133.233
	GDtq0zJoVm.exe	Get hash	malicious	Browse	162.159.129.233
	SecuriteInfo.com.W32.AIDetect.malware2.18685.exe	Get hash	malicious	Browse	162.159.130.233
	doc2022052000010030010101.exe	Get hash	malicious	Browse	162.159.134.233
	24D4DAEDBA9B8060BF0D09B4383849B69E8D1741C3FFA.exe	Get hash	malicious	Browse	162.159.129.233
	bc175a7f.exe	Get hash	malicious	Browse	162.159.130.233

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
CLOUDFLARENETUS	56516426-056C-4DBA-984B-979F68AB8D18 pdf.exe	Get hash	malicious	Browse	162.159.130.233
	https://tinyurl.com/3wjpcxny	Get hash	malicious	Browse	104.18.42.56
	triage_dropped_file.exe	Get hash	malicious	Browse	104.26.5.144
	Zahtjev je u prilogu.exe	Get hash	malicious	Browse	23.227.38.74
	https://newfile.talentlms.com	Get hash	malicious	Browse	104.26.12.94
	Ginzo.exe	Get hash	malicious	Browse	188.114.96.10
	PROCESOS_JURIDICOS_ABIERTOS_EN_SU_CONTRA.vbs	Get hash	malicious	Browse	188.114.96.10
	102.xlsx	Get hash	malicious	Browse	188.114.96.10
	CPfUbF38MW.exe	Get hash	malicious	Browse	104.21.29.149
	Rat.apk	Get hash	malicious	Browse	104.17.25.14
	https://storage.googleapis.com/f0f8webbex4tgd.appspot.com/g/b/file/d/fR7nRkLhDBxkP.html	Get hash	malicious	Browse	104.17.25.14
	Rat.apk	Get hash	malicious	Browse	188.114.96.10
	KlkvACIQX9.exe	Get hash	malicious	Browse	188.114.96.10
	CLAIMS_00876577.exe	Get hash	malicious	Browse	188.114.96.10
	https://r20.rs6.net/tn.jsp?t=qcuzd54ab.0.0.sqy9yutab.0&1d=preview&r=3&p=https%3A%2F%2F7wwxy0.codesandbox.io/#c2FsbWFubWlyQG1hc2hyZXEuY29t	Get hash	malicious	Browse	172.64.144.239
	Bia.html	Get hash	malicious	Browse	104.17.25.14
	Bia.html	Get hash	malicious	Browse	104.18.11.207
	wC4Wh49AUn	Get hash	malicious	Browse	104.31.212.194
	https://r20.rs6.net/tn.jsp?f=001yFlB4wfS4yfGniO1AQVCxhBc5kOFWnbRCzFZlC4CWdUzpfK8iAi_l_yxShGPy64Osjv16qtHH7dAfIvPs-kLVCbkFH2c96r-vfNxux2DBBoXHWTdpqtfVsv3YBkveI4-lLQjkxESuzO9ZofwuiOHWTcjEl0BdQ0w&c=jXQDBUHhHCRmG6UE_jNriAGRC5DJqaKF_6tewCiw_CLnHTqva2lElQ==&ch=0a6ZPpMSr-1BDyUlhNcZcExWH-qP6B_-UQR8filflxiZ58mn_hXkjA==&_e=hanna.hartnett@atlanticare.org&data=05%7C01%7Channa.hartnett@atlanticare.org%7C93bc28fa49e9463aabe008da3cbe10af%7C9192df1d303c4bcba026d2bf09651357%7C0%7C0%7C637889084271803112%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0=%7C2000%7C%7C%7C&sdata=mUmfXHc7Y8X8HnyG115aJZykFwxsoY9nY1U5ishho0Y=&reserved=0	Get hash	malicious	Browse	104.18.10.207
	setup.exe	Get hash	malicious	Browse	188.114.96.10

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
3b5074b1b5d032e5620f69f9f700ff0e	Avviso di pagamento.exe	Get hash	malicious	Browse	162.159.135.233
	56516426-056C-4DBA-984B-979F68AB8D18 pdf.exe	Get hash	malicious	Browse	162.159.135.233
	W7oufZXmaP.exe	Get hash	malicious	Browse	162.159.135.233
	4y4FfA8KgX.exe	Get hash	malicious	Browse	162.159.135.233
	f8.exe	Get hash	malicious	Browse	162.159.135.233
	Ginzo.exe	Get hash	malicious	Browse	162.159.135.233
	https://r20.rs6.net/tn.jsp?f=001yFlB4wfS4yfGniO1AQVCxhBc5kOFWnbRCzFZlC4CWdUzpfK8iAi_l_yxShGPy64Osjv16qtHH7dAfIvPs-kLVCbkFH2c96r-vfNxux2DBBoXHWTdpqtfVsv3YBkveI4-lLQjkxESuzO9ZofwuiOHWTcjEl0BdQ0w&c=jXQDBUHhHCRmG6UE_jNriAGRC5DJqaKF_6tewCiw_CLnHTqva2lElQ==&ch=0a6ZPpMSr-1BDyUlhNcZcExWH-qP6B_-UQR8filflxiZ58mn_hXkjA==&_e=hanna.hartnett@atlanticare.org&data=05%7C01%7Channa.hartnett@atlanticare.org%7C93bc28fa49e9463aabe008da3cbe10af%7C9192df1d303c4bcba026d2bf09651357%7C0%7C0%7C637889084271803112%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0=%7C2000%7C%7C%7C&sdata=mUmfXHc7Y8X8HnyG115aJZykFwxsoY9nY1U5ishho0Y=&reserved=0	Get hash	malicious	Browse	162.159.135.233
	SecuriteInfo.com.W32.AIDetectNet.01.3392.exe	Get hash	malicious	Browse	162.159.135.233
	setup.exe	Get hash	malicious	Browse	162.159.135.233
	Inquiry_List & Data sheet.exe	Get hash	malicious	Browse	162.159.135.233
	wam.exe	Get hash	malicious	Browse	162.159.135.233
	Req. Quote_28042022.exe	Get hash	malicious	Browse	162.159.135.233
	RFQ-SIGNAL S.A 17.05.2022.exe	Get hash	malicious	Browse	162.159.135.233
	https://clinicanaissance.com.br/ourd/eint	Get hash	malicious	Browse	162.159.135.233
	ungziped_file.exe	Get hash	malicious	Browse	162.159.135.233
	Shipping Documents_pdf.exe	Get hash	malicious	Browse	162.159.135.233
	REF AMVK22-3480.exe	Get hash	malicious	Browse	162.159.135.233
	SecuriteInfo.com.Trojan.DownLoader44.60969.9814.exe	Get hash	malicious	Browse	162.159.135.233
	RFQ # 1040377 & Drawings.exe	Get hash	malicious	Browse	162.159.135.233
	220523_AIT UV_922850.exe	Get hash	malicious	Browse	162.159.135.233

Process:	C:\Users\user\Desktop\csgo aimlock v2.exe
File Type:	PE32+ executable (GUI) x86-64 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	4229120
Entropy (8bit):	7.9985098023103856
Encrypted:	true
SSDEEP:	98304:9Gw1j0xbWdjO7OXku5EdNJDUzEZYoL1j3jkJ3:MegxKdjzku5cMG1j3ji
MD5:	F14B1FF9A9EBE48F275DFCDF52E3CB6E
SHA1:	586E092BA7030920F033D9E21B1C2B0804E7E6EF
SHA-256:	38670F0F3B254AA49F585837D675A2BD22873F7C418629C6F41170EB01529FF3
SHA-512:	5431E23FDA62F01E321A40D7D33F1EED23EE1D83E53F0F4D04C418DEAEFAB23CCBA2E771AE76BA91CFC2857102BC26B47DA5329A674E7989647A5B060B294726
Malicious:	true
Yara Hits:	Rule: SUSP_PE_Discord_Attachment_Oct21_1, Description: Detects suspicious executable with reference to a Discord attachment (often used for malware hosting on a legitimate FQDN), Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WindowsUpdate\AxInstUI.exe, Author: Florian Roth
Antivirus:	Antivirus: ReversingLabs, Detection: 41%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d...B~&..........."...0.. @..f........... .....@..... ........................@...........@...@......@............... ...............................@@..d........................................................................................... ..H............text...d.@.. ... @................. ..`.rsrc....d...@@..f..."@.............@..@........................................H........(@.h............&....@............................................}.....(.......(......s....}.....s....}.......{....o.....o.... .......o....&r..s....&.s....&.{....o.......{...."..}....".(/......{...."..}.......}.....(.......(......{....s....(....(:...o........}.....(.......(......{.....{....o....r ..po;...o........s<...}......()..... ... ....s ...(.....r^..po#....j.(=.....(>....s....(?....&.(/.....".......".(C....Vs....(D...t.........*....0..+.........,..{..

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WindowsUpdate\AxInstUI.exe:Zone.Identifier

Download File

Process:	C:\Users\user\Desktop\csgo aimlock v2.exe
File Type:	ASCII text, with CRLF line terminators
Category:	modified
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Reputation:	high, very likely benign file
Preview:	[ZoneTransfer]....ZoneId=0

Static File Info

General

File type:	PE32+ executable (GUI) x86-64 Mono/.Net assembly, for MS Windows
Entropy (8bit):	7.9985098023103856
TrID:	Win64 Executable GUI Net Framework (217006/5) 49.88% Win64 Executable GUI (202006/5) 46.43% Win64 Executable (generic) (12005/4) 2.76% Generic Win/DOS Executable (2004/3) 0.46% DOS Executable Generic (2002/1) 0.46%
File name:	csgo aimlock v2.exe
File size:	4229120
MD5:	f14b1ff9a9ebe48f275dfcdf52e3cb6e
SHA1:	586e092ba7030920f033d9e21b1c2b0804e7e6ef
SHA256:	38670f0f3b254aa49f585837d675a2bd22873f7c418629c6f41170eb01529ff3
SHA512:	5431e23fda62f01e321a40d7d33f1eed23ee1d83e53f0f4d04c418deaefab23ccba2e771ae76ba91cfc2857102bc26b47da5329a674e7989647a5b060b294726
SSDEEP:	98304:9Gw1j0xbWdjO7OXku5EdNJDUzEZYoL1j3jkJ3:MegxKdjzku5cMG1j3ji
TLSH:	0716331BB2019ABBEB4AABB10E09CD40D6046FAD04D9FE5FF44DB975E0713729A6310D
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d...B~&..........."...0.. @..f........... .....@..... ........................@...........@...@......@............... .....

File Icon


Icon Hash:	9a8a808292808000

Static PE Info

General

Entrypoint:	0x140000000
Entrypoint Section:
Digitally signed:	false
Imagebase:	0x140000000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, LARGE_ADDRESS_AWARE
DLL Characteristics:	NO_SEH, TERMINAL_SERVER_AWARE, DYNAMIC_BASE, NX_COMPAT
Time Stamp:	0xE4267E42 [Wed Apr 18 09:45:38 2091 UTC]
TLS Callbacks:
CLR (.Net) Version:	v4.0.30319
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:

Entrypoint Preview

Instruction
dec ebp
pop edx
nop
add byte ptr [ebx], al
add byte ptr [eax], al
add byte ptr [eax+eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x404000	0x6482	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x2000	0x48	.text
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x2000	0x401f64	0x402000	unknown	unknown	unknown	unknown	IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_READ
.rsrc	0x404000	0x6482	0x6600	False	0.23131127451	data	4.35655342569	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type
RT_ICON	0x404280	0x2e8	data
RT_ICON	0x404568	0x128	GLS_BINARY_LSB_FIRST
RT_ICON	0x404690	0xea8	data
RT_ICON	0x405538	0x8a8	data
RT_ICON	0x405de0	0x568	GLS_BINARY_LSB_FIRST
RT_ICON	0x406348	0x25a8	dBase III DBT, version number 0, next free block index 40
RT_ICON	0x4088f0	0x10a8	data
RT_ICON	0x409998	0x468	GLS_BINARY_LSB_FIRST
RT_GROUP_ICON	0x409e00	0x76	data
RT_VERSION	0x409e78	0x41e	data
RT_MANIFEST	0x40a298	0x1ea	XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Version Infos

Description	Data
Translation	0x0000 0x04b0
LegalCopyright	Microsoft Corporation. All rights reserved.
Assembly Version	10.0.17763.1
InternalName	Htlgnh.exe
FileVersion	10.0.17763.1
CompanyName	Microsoft Corporation
LegalTrademarks
Comments	ActiveX Installer Service
ProductName	Microsoft Windows Operating System
ProductVersion	10.0.17763.1
FileDescription	ActiveX Installer Service
OriginalFilename	Htlgnh.exe

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
157.90.206.56192.168.2.58808498572035595 05/23/22-18:48:31.158459	TCP	2035595	ET TROJAN Generic AsyncRAT Style SSL Cert	8808	49857	157.90.206.56	192.168.2.5

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 23, 2022 18:46:56.938457012 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:56.938492060 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:56.938587904 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.048135042 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.048170090 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.101572037 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.101696968 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.109481096 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.109498978 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.109759092 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.194402933 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.761578083 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.801229954 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.801323891 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.801374912 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.801426888 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.801440954 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.801461935 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.801501989 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.801508904 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.801567078 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.801619053 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.801667929 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.801681042 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.801744938 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.801759958 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.801806927 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.801812887 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.801824093 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.801861048 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.801904917 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.801954985 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.801956892 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.801968098 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.802021027 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.802032948 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.802090883 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.802136898 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.802182913 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.802194118 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.802208900 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.802258015 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.802263021 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.802306890 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.802321911 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.802335024 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.802392960 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.802444935 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.802447081 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.802459002 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.802499056 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.802541971 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.802589893 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.802602053 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.802613974 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.802671909 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.802736044 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.802783012 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.802809954 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.802824020 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.802834034 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.802875996 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.802926064 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.802957058 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.802972078 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.802999020 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.803025961 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.803076982 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.803126097 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.803139925 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.803153992 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.803189039 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.803219080 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.803287983 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.803302050 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.817975044 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.818126917 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.818157911 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.818248987 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.818399906 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.818645954 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.818744898 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.818773031 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.818865061 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.818885088 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.818979025 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.819097996 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.819195032 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.819277048 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.819380999 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.819421053 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.819495916 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.819554090 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.819638014 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.819686890 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.819758892 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.819823980 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.819894075 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.819950104 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.820031881 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.820085049 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.820166111 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.820215940 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.820301056 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.820354939 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.820439100 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.820525885 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.820616961 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.820662022 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.820741892 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.835330963 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.835469961 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.835592985 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.835702896 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.835800886 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.835958004 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.835959911 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.836020947 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.836041927 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.836174965 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.836246014 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.836270094 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.836329937 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.836452007 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.836533070 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.836641073 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.836733103 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.836744070 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.836755037 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.836812973 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.836817026 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.836889029 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.836899996 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.836924076 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.837006092 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.837013006 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.837017059 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.837044001 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.837130070 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.837138891 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.837150097 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.837173939 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.837232113 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.837297916 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.837364912 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.837377071 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.837395906 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.837425947 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.837438107 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.837466955 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.837488890 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.837553978 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.837564945 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.837584019 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.837619066 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.837629080 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.837654114 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.837668896 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.837727070 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.837738037 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.837755919 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.837824106 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.837836981 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.837846041 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.837856054 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.837940931 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.837954044 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.837970972 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.838015079 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.838023901 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.838037014 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.838078022 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.838140965 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.838150024 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.838167906 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.838212013 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.838221073 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.838248968 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.838283062 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.838340998 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.838351965 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.838390112 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.838399887 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.838412046 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.838438988 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.838459969 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.838505030 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.838515043 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.838557005 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.838641882 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.838651896 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.838723898 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.838768005 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.838870049 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.838885069 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.838896990 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.838924885 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.839030981 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.839059114 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.839113951 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.839174032 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.839184999 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.839281082 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.839416027 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.839564085 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.839627028 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.839662075 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.839931011 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.840017080 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.840064049 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.840115070 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.840162039 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.840173006 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.840188980 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.840257883 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.848268032 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.848476887 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.851567984 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.851632118 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.851686001 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.851697922 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.851727009 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.851747036 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.852426052 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.852469921 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.852514029 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.852526903 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.852580070 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.852585077 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.852731943 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.852778912 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.852804899 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.852816105 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.852843046 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.852864981 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.852883101 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.852926016 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.852955103 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.852963924 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.853014946 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.853034973 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.853257895 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.853300095 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.853327990 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.853338957 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.853365898 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.853394985 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.853502989 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.853543043 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.853566885 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.853578091 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.853607893 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.853632927 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.853646994 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.853681087 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.853718042 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.853727102 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.853785038 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.853791952 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.853929043 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.853970051 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.854005098 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.854017019 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.854049921 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.854079962 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.854891062 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.854922056 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.854978085 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.854996920 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.855043888 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.855048895 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.855056047 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.855077028 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.855099916 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.855145931 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.855158091 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.855169058 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.855211020 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.855249882 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.855281115 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.855318069 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.855329037 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.855360985 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.855406046 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.868400097 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.868443012 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.868524075 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.868537903 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.868577957 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.868578911 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.868619919 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.868644953 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.868657112 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.868681908 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.868710995 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.868769884 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.868798971 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.868860006 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.868866920 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.868882895 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.868882895 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.868968010 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.868968010 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.868999958 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.869066954 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.869071960 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.869230986 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.869259119 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.869302988 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.869313955 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.869352102 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.869370937 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.869704962 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.869731903 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.869811058 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.869827032 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.869837046 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.869843960 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.869872093 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.869915962 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.869930029 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.869940996 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.869973898 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.869990110 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.870001078 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.870042086 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.870044947 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.870074987 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.870083094 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.870112896 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.870146990 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.870482922 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.870511055 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.870579958 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.870590925 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.870624065 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.870647907 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.870877028 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.870903015 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.870973110 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.870990038 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.871021032 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.871038914 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.871073961 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.871126890 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.871136904 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.871149063 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.871186018 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.871206045 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.871238947 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.871277094 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.871288061 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.871318102 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.871336937 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.871766090 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.871795893 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.871895075 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.871917009 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.871928930 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.872183084 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.872209072 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.872294903 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.872318983 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.872330904 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.872343063 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.872414112 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.872456074 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.872462988 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.872467995 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.872492075 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.872520924 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.872559071 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.872567892 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.872605085 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.872617960 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.872651100 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.873024940 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.873059988 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.873091936 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.873115063 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.873132944 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.873186111 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.873213053 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.873260975 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.873275995 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.873289108 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.873367071 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.873394012 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.873434067 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.873447895 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.873477936 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.873873949 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.873905897 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.873956919 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.873969078 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.873986959 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.874018908 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.874052048 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.874097109 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.874116898 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.874139071 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.874243021 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.874272108 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.874321938 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.874336004 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.874357939 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.874866962 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.874898911 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.874948978 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.874970913 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.874983072 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.875015974 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.875047922 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.875076056 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.875087976 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.875118971 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.875144005 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.875171900 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.875210047 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.875226021 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.875246048 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.875787973 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.875818014 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.875860929 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.875878096 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.875909090 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.875932932 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.875962973 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.875991106 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.876003027 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.876025915 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.876065016 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.876096964 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.876121998 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.876136065 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.876161098 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.876844883 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.876879930 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.876986027 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.876991034 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.877023935 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.877094984 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.877118111 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.877144098 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.877155066 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.877192020 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.877218962 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.877252102 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.877296925 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.877355099 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.877367020 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.877384901 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.877391100 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.877417088 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.877418041 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.877433062 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.877456903 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.877496004 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.878108978 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.878142118 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.878195047 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.878211021 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.878222942 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.878293991 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.878324032 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.878381968 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.878400087 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.878415108 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.878592014 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.878622055 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.878675938 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.878691912 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.878710032 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.879050970 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.879082918 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.879128933 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.879143000 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.879162073 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.886646032 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.886679888 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.886770010 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.886779070 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.886795998 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.886806965 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.886816978 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.886878014 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.886899948 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.886907101 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.886941910 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.887263060 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.887293100 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.887351036 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.887362003 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.887399912 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.887417078 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.887619019 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.887648106 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.887713909 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.887738943 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.887753963 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.887810946 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.887836933 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.887885094 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.887895107 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.887923002 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.887965918 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.888143063 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.888196945 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.888298988 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.888309956 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.888319016 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.888325930 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.888356924 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.888401031 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.888410091 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.888434887 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.888492107 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.888607025 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.888633966 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.888689995 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.888700008 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.888731956 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.888773918 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.888987064 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.889015913 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.889178038 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.889188051 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.889197111 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.889205933 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.889246941 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.889292002 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.889302015 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.889328003 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.889354944 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.889411926 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.889439106 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.889491081 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.889502048 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.889522076 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.889960051 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.890312910 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.890341043 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.890435934 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.890446901 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.890455008 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.890532970 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.890551090 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.890561104 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.890578032 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.890599966 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.890650034 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.890657902 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.890702009 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.890769958 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.890795946 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.890853882 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.890863895 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.890902042 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.890934944 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.890989065 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.891017914 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.891077995 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.891087055 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.891118050 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.891122103 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.891144991 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.891148090 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.891161919 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.891206980 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.891241074 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.891292095 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.891319036 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.891360998 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.891370058 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.891396046 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.891885042 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.891912937 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.891987085 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.891998053 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.892047882 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.892286062 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.892313957 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.892379045 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.892388105 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.892419100 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.892441988 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.892524004 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.892554045 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.892604113 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.892615080 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.892654896 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.892683029 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.892868996 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.892906904 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.892961979 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.892971992 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.893035889 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.893068075 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.893140078 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.893168926 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.893270969 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.893280983 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.893290997 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.893326998 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.893352032 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.893393993 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.893403053 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.893440008 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.893475056 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.893968105 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.894087076 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.894115925 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.894133091 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.894201040 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.894247055 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.894279003 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.894332886 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.894340992 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.894395113 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.894495964 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.894505978 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.894516945 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.894522905 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.894639015 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.894650936 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.894737005 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.895361900 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.895386934 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.895458937 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.895469904 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.895509005 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.895528078 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.895540953 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.895550013 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.895576954 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.895595074 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.895602942 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.895642042 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.895680904 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.895768881 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.895792007 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.895852089 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.895860910 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.895905972 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.895963907 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.895987034 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.896039963 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.896049023 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.896079063 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.896100044 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.896306038 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.896332979 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.896399975 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.896409035 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.896421909 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.896445036 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.896445990 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.896497011 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.896506071 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.896523952 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.896565914 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.896621943 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.896647930 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.896703005 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.896712065 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.896724939 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.896735907 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.896744967 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.896761894 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.896769047 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.896815062 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.896857977 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.896879911 CEST	443	49786	162.159.135.233	192.168.2.5
May 23, 2022 18:46:57.897831917 CEST	49786	443	192.168.2.5	162.159.135.233
May 23, 2022 18:46:57.908942938 CEST	49786	443	192.168.2.5	162.159.135.233

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 23, 2022 18:46:56.899142027 CEST	60658	53	192.168.2.5	8.8.8.8
May 23, 2022 18:46:56.920547009 CEST	53	60658	8.8.8.8	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
May 23, 2022 18:46:56.899142027 CEST	192.168.2.5	8.8.8.8	0x8cf6	Standard query (0)	cdn.discordapp.com	A (IP address)	IN (0x0001)

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class
May 23, 2022 18:46:56.920547009 CEST	8.8.8.8	192.168.2.5	0x8cf6	No error (0)	cdn.discordapp.com	162.159.135.233	A (IP address)	IN (0x0001)
May 23, 2022 18:46:56.920547009 CEST	8.8.8.8	192.168.2.5	0x8cf6	No error (0)	cdn.discordapp.com	162.159.134.233	A (IP address)	IN (0x0001)
May 23, 2022 18:46:56.920547009 CEST	8.8.8.8	192.168.2.5	0x8cf6	No error (0)	cdn.discordapp.com	162.159.133.233	A (IP address)	IN (0x0001)
May 23, 2022 18:46:56.920547009 CEST	8.8.8.8	192.168.2.5	0x8cf6	No error (0)	cdn.discordapp.com	162.159.130.233	A (IP address)	IN (0x0001)
May 23, 2022 18:46:56.920547009 CEST	8.8.8.8	192.168.2.5	0x8cf6	No error (0)	cdn.discordapp.com	162.159.129.233	A (IP address)	IN (0x0001)

HTTP Request Dependency Graph

cdn.discordapp.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.5	49786	162.159.135.233	443	C:\Users\user\Desktop\csgo aimlock v2.exe

Timestamp	kBytes transferred	Direction	Data
2022-05-23 16:46:57 UTC	0	OUT	GET /attachments/970091439654584400/970407225539575808/Htlgnh_Jbpovrha.png HTTP/1.1 Host: cdn.discordapp.com Connection: Keep-Alive
2022-05-23 16:46:57 UTC	0	IN	HTTP/1.1 200 OK Date: Mon, 23 May 2022 16:46:57 GMT Content-Type: image/png Content-Length: 1640960 Connection: close CF-Ray: 70ff454b0d66923b-FRA Accept-Ranges: bytes Age: 1773 Cache-Control: public, max-age=31536000 ETag: "5885d0979f328cef8f5528c4756ed860" Expires: Tue, 23 May 2023 16:46:57 GMT Last-Modified: Sun, 01 May 2022 19:31:51 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Alt-Svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct" x-goog-generation: 1651433511927608 x-goog-hash: crc32c=uQ189g== x-goog-hash: md5=WIXQl58yjO+PVSjEdW7YYA== x-goog-metageneration: 1 x-goog-storage-class: STANDARD x-goog-stored-content-encoding: identity x-goog-stored-content-length: 1640960 X-GUploader-UploadID: ADPycduSONNw_6IO1yCKQL-R6akrOn_T9Fj4M8_VY_rUCuwfhRAJb38Md8qa_kVkMLvYpJDFBauf23pKiIn6IF1-nGFr5Q X-Robots-Tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kqBednUDl%2BH%2FfP8sn4jAhNczctwCgCvf46N7Cu4lIraslM9lZ%2Bidvzd3I4WNJAiT9BPYmKyRgQlYHibmYYDOZRfcAidaxfJ0vAulTXSY932V5n33a2atF%2Bc313YRBMwsqD8Ieg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2022-05-23 16:46:57 UTC	1	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2022-05-23 16:46:57 UTC	1	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2022-05-23 16:46:57 UTC	2	IN	Data Raw: 00 01 00 00 1f dc 9e 59 00 01 00 00 00 01 00 00 fe ef 04 bd 00 00 00 00 00 4f 00 46 00 4e 00 49 00 5f 00 4e 00 4f 00 49 00 53 00 52 00 45 00 56 00 5f 00 53 00 56 00 00 00 34 03 22 00 00 00 00 00 00 00 00 00 00 03 22 00 19 40 58 00 00 00 48 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 30 00 00 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 18 00 00 00 10 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: YOFNI_NOISREV_SV4""@XH0
2022-05-23 16:46:57 UTC	4	IN	Data Raw: 2e 33 62 92 62 b0 52 11 52 e2 60 14 60 96 60 52 92 0a cf cc 4b c9 2f 2f 0e 2d 48 49 2c 49 8d 71 ac f0 cc 2b 2e 09 f5 d4 4b ad 48 ad 60 6c 60 64 ec 60 64 5e c5 c8 e5 51 92 93 9e 97 01 12 dc c1 c8 78 82 91 05 00 9b 0d bb 84 64 00 00 00 00 08 c2 ec 89 48 5d d1 ff e5 89 48 55 00 3d 00 49 00 58 00 5a 00 6d 00 5a 00 57 00 64 00 43 00 35 00 57 00 59 00 6a 00 4e 00 56 00 61 00 7a 00 31 00 57 00 51 00 02 00 00 00 50 08 0b 00 00 00 08 00 00 00 08 00 00 00 02 08 08 00 00 74 68 67 69 65 68 06 68 74 64 69 77 05 00 00 00 02 65 7a 69 53 2e 67 6e 69 77 61 72 44 2e 6d 65 74 73 79 53 13 00 00 00 01 05 61 33 61 30 35 64 31 31 66 37 66 35 66 33 30 62 3d 6e 65 6b 6f 54 79 65 4b 63 69 6c 62 75 50 20 2c 6c 61 72 74 75 65 6e 3d 65 72 75 74 6c 75 43 20 2c 30 2e 30 2e 30 2e 34 3d Data Ascii: .3bbRR```RK//-HI,Iq+.KH`l`d`d^QxdH]HU=IXZmZWdC5WYjNVaz1WQPthgiehhtdiweziS.gniwarD.metsySa3a05d11f7f5f30b=nekoTyeKcilbuP ,lartuen=erutluC ,0.0.0.4=
2022-05-23 16:46:57 UTC	5	IN	Data Raw: 2e 6e 6f 69 74 61 7a 69 6c 61 62 6f 6c 47 2e 6d 65 74 73 79 53 26 06 00 00 00 00 00 03 00 07 06 06 06 06 06 06 06 06 01 01 01 01 01 06 06 06 06 06 06 06 06 01 00 00 03 01 01 01 01 01 01 01 01 01 73 64 72 6f 57 65 74 61 64 5f 6d 0b 72 61 64 6e 65 6c 61 43 74 6c 75 61 66 65 44 73 69 5f 6d 13 6d 65 74 49 61 74 61 44 6e 09 6f 66 6e 49 72 61 64 6e 65 6c 61 43 65 73 55 62 10 65 64 69 72 72 65 76 4f 72 65 73 55 65 73 75 5f 6d 11 44 49 65 72 75 74 6c 75 43 09 73 67 61 6c 46 74 61 6d 72 6f 66 0b 79 6c 6e 4f 64 61 65 52 73 69 5f 6d 0c 73 72 61 64 6e 65 6c 61 43 6c 61 6e 6f 69 74 70 6f 11 73 65 6d 61 4e 61 72 45 68 73 69 6c 67 6e 45 76 65 72 62 62 61 5f 6d 17 73 65 6d 61 4e 61 72 45 76 65 72 62 62 61 5f 6d 10 73 65 6d 61 4e 61 72 65 5f 6d 0a 73 6e 72 65 74 74 61 50 Data Ascii: .noitazilabolG.metsyS&sdroWetad_mradnelaCtluafeDsi_mmetIataDnofnIradnelaCesUbedirrevOresUesu_mDIerutluCsgalFtamrofylnOdaeRsi_msradnelaClanoitposemaNarEhsilgnEverbba_msemaNarEverbba_msemaNare_msnrettaP
2022-05-23 16:46:57 UTC	6	IN	Data Raw: 69 44 65 76 69 74 61 6e 0c 6c 6f 62 6d 79 53 65 6c 6c 69 4d 72 65 70 0e 6c 6f 62 6d 79 53 74 6e 65 63 72 65 70 0d 72 6f 74 61 72 61 70 65 53 70 75 6f 72 47 74 6e 65 63 72 65 70 15 72 6f 74 61 72 61 70 65 53 6c 61 6d 69 63 65 44 74 6e 65 63 72 65 70 17 6c 6f 62 6d 79 53 79 74 69 6e 69 66 6e 49 65 76 69 74 61 67 65 6e 16 6c 6f 62 6d 79 53 79 74 69 6e 69 66 6e 49 65 76 69 74 69 73 6f 70 16 6c 6f 62 6d 79 53 6e 61 6e 09 6c 6f 62 6d 79 53 79 63 6e 65 72 72 75 43 69 73 6e 61 12 6c 6f 62 6d 79 53 79 63 6e 65 72 72 75 63 0e 72 6f 74 61 72 61 70 65 53 6c 61 6d 69 63 65 44 79 63 6e 65 72 72 75 63 18 72 6f 74 61 72 61 70 65 53 70 75 6f 72 47 79 63 6e 65 72 72 75 63 16 72 6f 74 61 72 61 70 65 53 70 75 6f 72 47 72 65 62 6d 75 6e 14 72 6f 74 61 72 61 70 65 53 6c 61 6d Data Ascii: iDevitanlobmySelliMreplobmyStnecreprotarapeSpuorGtnecreprotarapeSlamiceDtnecreplobmySytinifnIevitagenlobmySytinifnIevitisoplobmySnanlobmySycnerruCisnalobmySycnerrucrotarapeSlamiceDycnerrucrotarapeSpuorGycnerrucrotarapeSpuorGrebmunrotarapeSlam
2022-05-23 16:46:57 UTC	8	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 00 01 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 01 00 01 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 02 01 00 01 00 02 02 00 02 02 00 02 02 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 02 01 00 01 00 02 02 00 02 02 00 02 02 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 Data Ascii:
2022-05-23 16:46:57 UTC	9	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2022-05-23 16:46:57 UTC	10	IN	Data Raw: 00 49 00 65 00 67 00 72 00 61 00 4c 00 79 00 61 00 72 00 54 00 2e 00 73 00 69 00 68 00 74 00 24 26 00 00 00 00 00 64 00 69 00 72 00 47 00 6f 00 54 00 70 00 61 00 6e 00 53 00 2e 00 73 00 69 00 68 00 74 00 24 20 00 00 04 3d 00 00 01 66 00 00 01 41 00 00 01 20 00 00 00 ff 00 00 00 d8 00 00 00 a7 00 00 00 86 00 00 00 69 00 00 00 50 00 00 00 25 00 00 00 00 39 74 42 bc 33 85 7d e8 17 9a 1d 94 0e b2 51 1b 04 53 a2 1d e6 d9 b4 32 b8 3a 2b 51 b6 a8 b5 43 9a 9b 6a 42 97 90 63 e1 87 89 cc 06 61 33 61 30 35 64 31 31 66 37 66 35 66 33 30 62 3d 6e 65 6b 6f 54 79 65 4b 63 69 6c 62 75 50 20 2c 6c 61 72 74 75 65 6e 3d 65 72 75 74 6c 75 43 20 2c 30 2e 30 2e 30 2e 34 3d 6e 6f 69 73 72 65 56 20 2c 67 6e 69 77 61 72 44 2e 6d 65 74 73 79 53 20 2c 65 7a 69 53 2e 67 6e 69 77 61 Data Ascii: IegraLyarT.siht$&dirGoTpanS.siht$ =fA iP%9tB3}QS2:+QCjBca3a05d11f7f5f30b=nekoTyeKcilbuP ,lartuen=erutluC ,0.0.0.4=noisreV ,gniwarD.metsyS ,eziS.gniwa
2022-05-23 16:46:57 UTC	12	IN	Data Raw: ed f9 65 4c 07 0d 94 d6 25 1b 59 93 b5 3c 0a ee 3f d5 e7 37 a9 13 0c bb 72 f4 61 72 68 3d a8 51 d7 a4 06 2a 6e 66 fe 9b 7b c7 31 c6 55 a3 78 fd 33 9d 11 07 b2 64 91 37 97 a5 f4 67 9e 66 00 88 b0 44 09 29 04 6c f1 e7 9d d9 d4 28 88 5d 94 8d 73 a7 b9 ae 03 ab 6f 56 e9 df b4 79 39 be eb b0 2b d2 8a 4a 6d fd 7b d9 07 af 4a 93 a9 60 b2 0d 5d d4 9d ba 7a 26 41 cf 5c 03 a4 f6 e1 06 51 c8 bc 0f a6 ae 47 4a 5a f1 43 fb 8e 19 ba c3 b9 6c 03 58 73 04 a3 64 72 12 b7 1c a8 f5 7f 99 bf cd 45 15 82 0f bc 2b a6 de 67 8a a7 5f eb 35 05 57 f0 56 b5 f9 0a 31 83 ba 76 12 06 77 c8 26 58 e1 65 21 2c e0 e2 bc ce 12 3c 5b 43 4d 30 dd e7 6d 48 ea 8c 3b ed a1 03 9f bc 8d 5b 3f 3f a8 e1 83 12 43 11 d2 02 a8 44 ea 0b 39 5e 47 1c 25 59 c0 44 d1 5b e2 cf fa c6 77 32 50 1b 0a d5 b8 68 Data Ascii: eL%Y<?7rarh=Q*nf{1Ux3d7gfD)l(]soVy9+Jm{J`]z&A\QGJZClXsdrE+g_5WV1vw&Xe!,<[CM0mH;[??CD9^G%YD[w2Ph
2022-05-23 16:46:57 UTC	13	IN	Data Raw: 0b 65 da 59 d7 17 d6 bb d9 ae f5 6a 5b 4e 4f 66 d0 fe 71 ca a6 12 0f 9e c5 6e a5 f9 10 b2 fd 90 87 8b 71 6c 4b 57 c6 8c a4 5c c3 eb fe ae 75 3e 92 38 4f aa 45 ca 56 0a f7 20 12 a2 39 8a 0e 79 28 05 6c f5 88 11 80 70 d8 f8 dd a3 78 74 23 09 e7 c7 5b 57 bf d5 c0 f3 68 88 f5 5d b7 d0 9a 7f 8f a1 36 15 85 ba 82 3b d0 64 26 3e 62 b8 a3 39 d9 44 f6 11 c1 9d 91 47 d0 66 d0 26 37 4f ae a7 11 c0 34 4b 28 21 4f 07 c4 3b e3 d2 4c 07 13 81 78 d7 49 6d 7f ce 5b d9 5c 1b ff ba 8a c3 62 1b 7e da c2 57 58 dd a3 3c bd 33 54 99 1a 07 f2 25 3b 46 b6 ec 39 76 24 07 1d bf 23 05 89 7a ba 07 e2 40 94 b9 68 17 23 90 f4 5a 66 03 38 f1 6c 7f 78 94 24 c6 28 62 db ff ca 6e 7a fe 12 ab f2 52 76 ca ad e9 4a 03 14 04 2e 34 91 fe ef b4 33 b9 2c bf 20 41 5c db 2a ec 23 be 88 77 2b 4e c6 Data Ascii: eYj[NOfqnqlKW\u>8OEV 9y(lpxt#[Wh]6;d&>b9DGf&7O4K(!O;LxIm[\b~WX<3T%;F9v$#z@h#Zf8lx$(bnzRvJ.43, A\*#w+N
2022-05-23 16:46:57 UTC	14	IN	Data Raw: ec 32 c3 d3 4f 41 ef 96 1d f8 1c 1d 6b f8 67 cf d6 33 6c c4 8c f0 6c 5a 49 c2 b9 f7 05 c3 92 58 64 40 e6 3d 1b e9 8d ed be cc ab 1f fa ea 13 52 3f cf e5 7d 5c 96 29 6d 0a 8f c7 af 82 30 23 84 a5 cd 64 b0 21 4d 9c 24 ef 81 b8 62 1c 7c 60 17 e4 c5 1a 60 68 eb 55 52 5c 9a 39 72 9d a0 35 f9 fc 1d c8 18 74 6b 98 17 14 d4 8b c4 98 03 7c dc 1f 46 9b 13 41 1b 9e 98 0d 1e 78 51 b3 9d 7b e3 aa 2e 49 90 db cf 04 2f 05 67 74 24 7b 2c 3f 0e 7a 91 bd 72 5a 48 d4 fe 67 0b bb e5 2a 34 17 0e 2c 2f 4f f7 a2 cd 0e 71 95 f3 26 0d 69 28 02 a4 77 d5 ef c8 08 28 75 b6 91 37 ef bd 0e ce 8e d5 ee f8 b4 24 65 86 70 31 14 f5 49 85 11 eb e1 0f 0e 75 c0 89 61 35 00 b3 5c f0 e7 e2 8e e9 11 b9 e3 dd e0 7e f1 c6 2c dc fe 4e 4a ff 2a 6c 9d b0 4f 4c b8 78 ae c5 e5 be 7d 9f fd 34 33 ac 9e Data Ascii: 2OAkg3llZIXd@=R?}\)m0#d!M$b\|``hUR\9r5tk\|FAxQ{.I/gt${,?zrZHg4,/Oq&i(w(u7$ep1Iua5\~,NJlOLx}43
2022-05-23 16:46:57 UTC	16	IN	Data Raw: 72 ca ce 07 14 ae 0b e8 0a 32 22 71 d3 36 02 e0 f8 25 9b 14 09 0d 26 50 e0 32 13 e1 d4 d4 55 4f e1 85 da cd ae f9 41 df c7 b5 19 bf b3 e2 f3 93 e4 da 2f 31 41 b5 65 cc e6 4a 18 01 8b 82 cb 9f 44 27 2b 08 89 32 40 3f 4d 59 f7 82 87 9e 77 79 09 7f ed a2 fd 50 89 60 51 e4 43 5b de 79 56 4a 9e 24 2a 82 33 62 dc 28 4d 00 7c 3f 46 10 d8 63 e8 4f ec 14 28 28 d5 14 20 09 1d 22 2f 48 a4 38 80 d2 ac 0c 41 d2 fe 4d d3 a2 c2 c7 b5 15 1a a9 1c 94 da 88 11 84 66 0b da b0 5b 84 4f 36 b9 80 cd 5a a7 5c d0 16 15 74 06 f1 b1 3d fb d2 ac 19 15 1b e1 76 e3 f2 95 29 25 97 b4 8a 4e 94 79 c1 ad 12 b1 88 b2 50 e1 e2 28 14 ea c0 8e 09 5b 8a ff 74 bd 43 1d b1 4b e7 a9 97 d7 9e be d2 ae 1f f0 ff 88 40 d3 15 61 6b 67 25 bb 4d fa e1 cb fc 36 d3 ca 4f 37 ca 8d e2 a0 88 72 98 40 af b6 Data Ascii: r2"q6%&P2UOA/1AeJD'+2@?MYwyP`QC[yVJ$*3b(M\|?FcO(( "/H8AMf[O6Z\t=v)%NyP([tCK@akg%M6O7r@
2022-05-23 16:46:57 UTC	17	IN	Data Raw: 3c a0 77 76 39 4f 53 a1 a3 b3 8f ad 69 91 69 56 65 15 1e 82 f5 a3 f2 70 5d 8c 8b ec 1f bc df 74 10 0d 65 d9 8b 4f 6a db 61 d4 2a 13 b9 35 64 64 0f fd fd ea 1f fb ed d2 f0 05 a3 2c c1 79 e9 75 4f 4c bd a2 b0 22 e4 a5 87 3b 10 6f 04 0f 69 53 9b 21 81 93 5d 56 4f df 83 7f 1e ac 76 5d 46 0f 91 34 65 95 bf 46 4e 0b 34 c2 20 f1 11 df a3 d6 1d f9 fa 60 80 47 ae 51 80 1e 2a d9 58 9e e8 48 c9 4d b9 f0 b0 a9 f0 a0 d7 fe af 1f 12 eb da 0a 25 44 a7 1b 11 bc 54 2f 32 eb c2 89 86 09 19 81 02 25 49 0e eb 8a 21 f5 ef 7e 46 49 1a d4 dc c6 91 24 d0 c8 c8 35 38 40 f6 e3 fe 10 72 ba bf 47 a7 b6 d6 9f 4c 4f 2e eb 37 e7 49 db 85 cd 6c 16 0d ea 6f d3 70 a4 15 2e c4 31 d0 bd a6 89 1f b0 1d af 41 68 22 2e 08 07 db 86 de 42 6f 3a 74 a0 2f 00 f0 41 52 de 4f 88 48 ad df cb 93 66 03 Data Ascii: <wv9OSiiVep]teOja5dd,yuOL";oiS!]VOv]F4eFN4 `GQXHM%DT/2%I!~FI$58@rGLO.7Ilop.1Ah".Bo:t/AROHf
2022-05-23 16:46:57 UTC	18	IN	Data Raw: e2 42 dc 7a d9 45 8d 5a 56 7c 2f b6 36 7b e0 56 2d 1d 6e f4 13 98 ff db 8e 34 15 85 ea 2b 5a f7 2c 08 84 4c 29 18 b1 35 e2 cd 6a 52 b5 26 b1 48 34 f0 12 ff a3 3f 3d 40 20 02 6f 54 35 41 75 4e db 3a 83 0b 14 06 2b cc 29 f6 63 c7 55 a9 e2 c1 5a 09 5f f3 3b 86 f3 39 42 f1 f2 df aa 9b 9b f7 9d 2b c8 99 4e 2f 69 cc 23 1a 4c 00 26 e7 d1 fa 33 bb 1b c5 f0 2a 15 ef 7f 87 86 29 8f 5d 8d fd 2d bc 02 2b 83 e5 0a ae ac 07 98 cc d8 6f 54 b0 0b 76 c3 40 c2 41 13 fd 8a 8a d3 45 ec cd 7a ef f5 28 27 0e 81 66 fd c5 17 01 c1 94 d4 85 c5 f6 6b 87 0f be 82 4e b2 d8 2f a3 3d d4 29 d1 2e 59 65 dd 00 67 52 2f b8 47 6a 1e 90 59 8b f1 e4 da d9 7f aa 8e ba 57 94 ed 13 81 18 5c 48 9d 74 b7 c1 b0 e4 bf 5e d6 27 3c 4a b8 31 be 6b 38 aa ca 81 cb 19 97 6d 6f 3e 80 2f 89 2c 1e e7 7f 63 Data Ascii: BzEZV\|/6{V-n4+Z,L)5jR&H4?=@ oT5AuN:+)cUZ_;9B+N/i#L&3*)]-+oTv@AEz('fkN/=).YegR/GjYW\Ht^'<J1k8mo>/,c
2022-05-23 16:46:57 UTC	20	IN	Data Raw: 0e 8e 35 8e ff 49 78 43 20 2d ee b5 2a 27 91 34 cf f0 20 1f 8e cd 50 9f 3b 91 e5 ef b3 20 f7 dc 98 d9 94 7f 28 73 32 1b c0 bf ca 06 ce b4 d4 26 3e 7c f9 01 07 82 0f 89 ca 6c f9 ef 9a 17 be 70 4a dd 7c b1 f0 16 7b 2c 8e 58 86 51 d9 98 d3 6a f6 a6 c4 75 dc 13 5e 3b 2a ce 5d 82 43 48 c6 a5 0a 74 d9 19 18 d0 16 d3 c1 03 98 35 e3 ec 83 ca bc 88 6a 6c eb 88 b5 4c 97 b6 9a b5 48 94 5e fe 19 b8 e5 08 99 25 23 00 00 23 00 00 00 00 b4 50 44 41 50 44 41 50 00 00 00 00 00 00 00 00 00 00 00 02 74 65 53 65 63 72 75 6f 73 65 52 65 6d 69 74 6e 75 52 2e 73 65 63 72 75 6f 73 65 52 2e 6d 65 74 73 79 53 23 39 38 30 65 34 33 39 31 36 35 63 35 61 37 37 62 3d 6e 65 6b 6f 54 79 65 4b 63 69 6c 62 75 50 20 2c 6c 61 72 74 75 65 6e 3d 65 72 75 74 6c 75 43 20 2c 30 2e 30 2e 30 2e 34 Data Ascii: 5IxC -'4 P; (s2&>\|lpJ\|{,XQju^;]CHt5jlLH^%##PDAPDAPteSecruoseRemitnuR.secruoseR.metsyS#980e439165c5a77b=nekoTyeKcilbuP ,lartuen=erutluC ,0.0.0.4
2022-05-23 16:46:57 UTC	21	IN	Data Raw: 02 4f 0b c7 fe 9a 80 4f 40 80 9f 9f 33 40 80 9f 99 9d 94 1c be c2 d6 ac 4f a3 14 fb 9f e0 a8 4f 83 10 d1 a6 c3 8b 4f 18 94 c9 b9 8f 4f 40 80 9f 9f 33 40 80 9f ae 9d 94 0a da 9b b0 80 4f 1b 06 4f 52 02 4f 12 d5 d1 db 81 4f 40 80 9f 9f 33 40 80 a0 a9 9d 94 0c ad a2 ba 83 4f 83 11 b0 87 ce ae 4f 94 17 c5 80 d3 82 4f 02 d9 c6 aa a9 4f 40 80 9f 9f 33 40 80 9f a7 9d 94 04 a2 d9 ea bd 4f 4a 1e d1 d0 ba b8 4f 40 80 9f 9f 33 40 80 9f a4 9d 94 1a b8 a4 9d a8 4f 83 0d c9 bb d6 b4 4f 83 0b f7 a1 d3 8b 4f 19 ba b8 e4 9e 4f 40 80 9f 9f 33 40 80 9f aa 9d 94 1d b8 e1 85 a0 4f 83 0b 8d f7 e8 88 4f 1b 04 4f 14 88 d9 b1 9e 4f 40 80 9f 9f 33 40 80 a0 b7 9d 94 07 af c6 c9 b5 4f 94 0e e0 cc d2 a3 4f a3 12 f2 f5 c0 b7 4f 16 dc 94 da 9f 4f 40 80 9f 9f 33 40 80 a0 80 9d 94 0a da Data Ascii: OO@3@OOOO@3@OOROO@3@OOOO@3@OJO@3@OOOO@3@OOOO@3@OOOO@3@
2022-05-23 16:46:57 UTC	22	IN	Data Raw: b7 f6 ba b8 4f 40 80 9f 9f 33 40 80 a0 8b 9d 94 12 8b 89 9e 9f 4f a3 0f ea fa f3 a7 4f 1b 03 4f 08 a4 81 e5 97 4f 40 80 9f 9f 33 40 80 a0 a6 9d 94 0c d5 8a b7 8d 4f a3 0e c9 bc d4 94 4f 1e 8b cd e2 b9 4f 40 80 9f 9f 33 40 80 a0 81 9d 94 78 8a eb 8b 4f 1b 02 4f 1a b7 ef ae bc 4f 40 80 9f 9f 33 40 80 a0 88 9d 94 1c a3 98 df a6 4f 52 02 4f 83 1b a4 fb b3 a7 4f 0c b1 de b1 bf 4f 40 80 9f 9f 33 40 80 9f 9c 9d 94 1f bc ae cb a5 4f 94 03 d2 dd ca 92 4f 13 9b a1 f8 8c 4f 40 80 9f 9f 33 40 80 a0 b0 9d 94 1e bf d1 db 9e 4f 83 08 cc ec da b9 4f 83 05 f5 ed d7 bd 4f 0d 82 ac 8e 94 4f 40 80 9f 9f 33 40 80 9f 91 9d 94 0a af 95 a5 88 4f 4a a3 05 9c 8b d1 87 4f 12 e3 9e 9f b5 4f 40 80 9f 9f 33 40 80 a0 8f 9d 94 06 a4 c5 e0 4f 83 0d c9 bb d6 b4 4f 83 0b f7 a1 d3 8b 4f 19 Data Ascii: O@3@OOOO@3@OOO@3@xOOO@3@OROOO@3@OOO@3@OOOO@3@OJOO@3@OOO
2022-05-23 16:46:57 UTC	24	IN	Data Raw: 4f 8f 0c 73 12 4f 03 73 1e be 31 05 a0 4f 0c 7c 83 01 81 4f 03 85 4f 1e be 31 0a 4f 0d 1e be 01 60 80 bd 85 09 3c 4f 0f 7c 83 17 4f 3e 4f 1e be 31 04 94 4f 0f 7c 83 2f 4f 02 8d 4f 1e be 31 01 85 4f 01 7c 60 80 bc bc 09 02 73 08 73 60 80 bc bb 09 01 4f 40 60 80 bc ba 09 1e be 31 12 4f 0d 1e be 61 60 80 bd 85 09 0d 4f 0c 7c a3 01 98 4f 02 82 4f 1e be 31 02 88 4f 0d 1e be 61 60 80 bd 84 09 02 af 4f 8f 05 73 04 4f 03 73 1e be 31 05 4f 0d 1e be 61 60 80 bd 84 09 0c 4f 8f 05 73 10 4f 03 73 1e be 31 05 b0 4f 8f 06 73 02 4f 07 73 1e be 31 03 92 4f 0d 1e be 61 60 80 bd 85 09 02 b9 4f 8f 83 2f 4f 02 8d 4f 1e 4f 03 73 1e be 31 35 4f 8f 83 01 89 4f 03 9b 4f 09 4f 07 73 1e be 31 04 98 4f 0c 7c a3 14 4f 32 4f 1e be 31 20 4f 05 7c a3 0e 4f 18 4f 1e bd 31 0b 7c 25 4f 8f Data Ascii: OsOs1O\|OO1O`<O\|O>O1O\|/OO1O\|`ss`O@`1Oa`O\|OO1Oa`OsOs1Oa`OsOs1OsOs1Oa`O/OOOs15OOOOs1O\|O2O1 O\|OO1\|%O
2022-05-23 16:46:57 UTC	25	IN	Data Raw: 4f 12 4f 03 73 1e be 31 01 ba 4f 8f 0c 73 02 4f 03 73 1e be 31 01 4f 0d 1e be 61 60 80 bd 84 09 07 4f 8f 83 30 4f 02 91 4f 09 4f 07 73 1e be 31 22 4f 0d 1e be 61 60 80 bd 85 09 14 4f 8f 0c 73 02 4f 03 73 1e be 31 02 b4 4f 06 7c a3 01 91 4f 22 4f 1e be 31 02 be 4f 0d 1e be 61 60 80 bd 84 09 05 b2 4f 05 7c 83 01 94 4f 03 bc 4f 1e be 31 04 a8 4f 8f a3 0b 4f 1b 4f 00 4f 07 73 1e be 31 04 9e 4f 8f 83 01 92 4f 01 a9 4f 16 4f 03 73 1e be 31 04 8f 4f 8f a3 3f 4f 01 86 4f 05 4f 07 73 1e be 31 05 87 4f 33 9b 31 1e be 31 02 a5 4f 0d 1e be 61 60 80 bd 84 09 02 ba 4f 8f 06 73 01 4f 07 73 1e be 31 03 95 4f 0d 1e be 61 60 80 bd 84 09 03 ab 4f 8f 0c 73 14 4f 03 73 1e be 31 02 a1 4f 0c 7c a3 2c 4f 01 95 4f 1e be 31 3c 4f 0d 1e be 61 60 80 bd 84 09 02 83 4f 8f 0c 73 0c 4f Data Ascii: OOs1OsOs1Oa`O0OOOs1"Oa`OsOs1O\|O"O1Oa`O\|OO1OOOOs1OOOOs1O?OOOs1O311Oa`OsOs1Oa`OsOs1O\|,OO1<Oa`OsO
2022-05-23 16:46:57 UTC	26	IN	Data Raw: 31 34 4f 0d 1e be 61 60 80 bd 84 09 04 87 4f 05 7c a3 18 4f 22 4f 1e be 31 04 8a 4f 06 7c a3 01 ab 4f 34 4f 1e be 31 01 b4 4f 8f 0f 73 0f 4f 07 73 1e be 31 23 4f 0d 1e be 61 60 80 bd 85 09 14 4f 0c 7c 83 2c 4f 02 86 4f 1e be 31 05 a6 4f 0d 1e be 01 60 80 bd 84 09 02 be 4f 06 7c a3 01 86 4f 01 bc 4f 1e be 31 04 aa 4f 8f 0c 73 0d 4f 03 73 1e be 31 3c 4f 0d 1e be 01 60 80 bd 85 09 04 8b 4f 8f 83 01 8e 4f 03 aa 4f 0c 4f 07 73 1e be 31 05 93 4f 8f a3 20 4f 10 4f 05 4f 03 73 1e be 31 01 99 4f 8f a3 01 8f 4f 0d 4f 03 4f 07 73 1e bd 31 0b 7c 04 4f 8f 0c 73 13 4f 03 73 1e be 31 2a 4f 0d 1e be 61 60 80 bd 85 09 0d 4f 0c 7c 83 01 9e 4f 03 98 4f 1e be 31 01 8c 4f 0c 7c 83 30 4f 02 91 4f 1e be 31 05 84 4f 05 7c 83 39 4f 02 ad 4f 1e be 31 02 9d 4f 8f 0c 73 10 4f 03 73 Data Ascii: 14Oa`O\|O"O1O\|O4O1OsOs1#Oa`O\|,OO1O`O\|OO1OsOs1<O`OOOOs1O OOOs1OOOOs1\|OsOs1*Oa`O\|OO1O\|0OO1O\|9OO1OsOs
2022-05-23 16:46:57 UTC	28	IN	Data Raw: 85 09 02 a7 4f 8f 05 73 14 4f 03 73 1e be 31 02 87 4f 8f a3 29 4f 02 85 4f 0a 4f 03 73 1e bd 31 0b 7c 02 aa 4f 05 7c 83 2d 4f 02 88 4f 1e be 31 04 9b 4f 8f 0c 73 02 4f 03 73 1e be 31 02 8e 4f 8f 4d 00 4f 04 73 01 4f 02 73 1e be 31 02 8b 4f 8f 0f 73 03 4f 07 73 1e be 31 1a 4f 8f 83 01 8c 4f 02 b6 4f 05 4f 03 73 1e be 31 04 91 4f 8f 05 73 13 4f 03 73 1e be 31 05 85 4f 8f 05 73 06 4f 03 73 1e be 31 05 8e 4f 8f 83 01 81 4f 02 98 4f 00 4f 07 73 1e be 31 02 bb 4f 8f 83 39 4f 02 ab 4f 05 4f 03 73 1e be 31 04 ab 4f 8f 83 01 bc 4f 03 99 4f 0d 4f 07 73 1e be 31 05 4f 0d 1e be 01 60 80 bd 85 09 0a 4f 06 7c 83 2e 4f 02 8b 4f 1e be 31 15 4f 0f 7c 83 13 4f 01 b7 4f 1e be 31 03 9e 4f 0d 1e be 61 60 80 bd 84 09 04 b4 4f 8f 06 73 0a 4f 07 73 1e be 31 03 b0 4f 0d 1e be 01 Data Ascii: OsOs1O)OOOs1\|O\|-OO1OsOs1OMOsOs1OsOs1OOOOs1OsOs1OsOs1OOOOs1O9OOOs1OOOOs1O`O\|.OO1O\|OO1Oa`OsOs1O
2022-05-23 16:46:57 UTC	29	IN	Data Raw: 0d 1e be 61 60 80 bd 85 09 0b 4f 05 7c a3 23 4f 3f 4f 1e be 31 03 a1 4f 0d 1e be 01 60 80 bd 84 09 01 ad 4f 05 7c a3 01 8d 4f 01 a5 4f 1e be 31 04 9f 4f 8f 06 73 00 4f 07 73 1e be 31 1d 4f 0d 1e be 61 60 80 bd 84 09 01 8f 4f 8f 0f 73 0f 4f 07 73 1e be 31 05 9e 4f 0d 1e be 01 60 80 bd 84 09 0d 4f 8f 06 73 07 4f 07 73 1e be 31 02 92 4f 8f 0f 73 0c 4f 07 73 1e be 31 05 a3 4f 8f 06 73 0d 4f 07 73 1e be 31 04 92 4f 8f 06 73 02 4f 07 73 1e be 31 05 9b 4f 02 7c 07 73 1e be 31 02 9f 4f 05 7c 83 2a 4f 02 80 4f 1e be 31 37 4f 0d 1e be 61 60 80 bd 84 09 01 ac 4f 8f 0f 73 06 4f 07 73 1e bd 31 0b 7c 02 81 4f 8f 05 73 07 4f 03 73 1e be 31 01 a4 4f 0d 1e be 61 60 80 bd 85 09 0a 4f 03 7c 10 80 80 a3 30 20 4f 1e be 31 01 93 4f 0d 1e be 61 60 80 bd 85 09 11 4f 06 7c a3 01 Data Ascii: a`O\|#O?O1O`O\|OO1OsOs1Oa`OsOs1O`OsOs1OsOs1OsOs1OsOs1O\|s1O\|*OO17Oa`OsOs1\|OsOs1Oa`O\|0 O1Oa`O\|
2022-05-23 16:46:57 UTC	30	IN	Data Raw: 38 bb 41 92 34 85 4a a7 4a 88 32 84 49 96 29 b1 3c bb 2d ac 4d 8c 25 8f 31 ad 3c 98 3e 83 2e 8e 31 8f 42 9e 37 ab 4a 9b 45 ba 42 b4 34 a7 38 b0 33 9b 46 8c 22 9f 2a a1 39 9c 31 bc 48 b8 42 aa 3f 8d 43 be 2e 80 43 a3 2f b4 20 92 48 a8 46 84 21 8c 22 ad 44 ae 45 9c 20 8c 20 aa 34 b0 22 8f 30 ac 2a b9 36 98 3d a9 35 92 4c a8 32 8e 32 a6 43 8b 3c 88 48 94 22 83 23 ab 22 a7 2f 92 20 b8 26 94 42 84 38 81 38 a0 49 bc 37 81 3d 97 2f a8 26 88 1f 9e 27 b0 27 aa 3a a5 4b 80 42 96 41 b1 49 a6 35 ac 31 a7 2e b6 2e a3 2a 9b 2d b2 46 ba 3d 87 25 b4 47 9f 35 8c 1f 8e 2f 82 2a 89 2b b9 48 81 34 97 4b 90 3d bf 31 88 3e 89 4c 86 20 a4 45 90 2e 9b 2c aa 2b 9b 28 bf 49 ac 4b b6 25 99 36 8e 21 82 24 b5 43 aa 23 9f 46 b4 2a ad 4a b1 2e b0 38 9d 34 a1 29 85 28 ad 3a b7 2b 8e 3a Data Ascii: 8A4JJ2I)<-M%1<>.1B7JEB483F"91HB?C.C/ HF!"DE 4"06=5L22C<H"#"/ &B88I7=/&'':KBAI51..-F=%G5/+H4K=1>L E.,+(IK%6!$C#F*J.84)(:+:
2022-05-23 16:46:57 UTC	31	IN	Data Raw: 61 40 82 00 4f 82 08 8b 4f 01 a0 80 8e a2 2d 19 73 60 80 bc 8b 09 1b 73 02 98 4f 1a 73 11 73 1b 7c 10 80 80 a3 30 08 80 80 4f 19 7c 01 a0 80 8e 88 35 1a 73 1a 7c 01 a0 80 8e 87 35 01 4f 01 4f 03 4f 10 73 19 7c 93 1e ac 61 13 73 1a 80 5f 13 7c 01 4f 0d 1a 80 5f 60 80 be 94 2d 01 a0 80 84 a7 2d 01 a0 80 84 a7 2d 18 73 01 a0 80 8e a1 2d 01 a0 80 81 a3 2d 60 80 bc a4 09 18 73 01 a0 80 81 a0 09 40 80 9c a3 33 01 a0 80 83 bd 2d 40 01 a0 80 82 89 2d 62 8c 14 73 00 4f 14 73 40 01 a0 80 83 b7 35 01 4f 17 73 18 73 18 7c 60 80 bc a3 09 17 7c 01 a0 80 84 84 2d 16 73 15 73 01 a0 80 84 81 2d 01 4f 40 60 80 bc 88 09 16 7c 2b 73 8f 2c 73 0f 4f 2b 73 2c 7c a3 01 b2 4f 31 4f 8f 2c 73 0f 4f 2b 73 2c 7c a3 01 4f 01 a4 4f 8f 2c 73 0f 4f 2b 73 2c 7c a3 01 9b 4f 15 4f 8f 2c 73 Data Ascii: a@OO-s`sOss\|0O\|5s\|5OOOs\|as_\|O_`---s--`s@3-@-bsOs@5Oss\|`\|-ss-O@`\|+s,sO+s,\|O1O,sO+s,\|OO,sO+s,\|OO,s
2022-05-23 16:46:57 UTC	33	IN	Data Raw: 9d 4f 1c 4f 2f 73 8f 31 73 1c 4f 2f 73 31 7c 83 3a 4f 02 b0 4f 8f 30 73 1c 4f 2f 73 30 7c 83 01 85 4f 03 8f 4f 8f 83 01 a9 4f 02 82 4f 1b 4f 2f 73 8f 83 01 80 4f 03 80 4f 1b 4f 2f 73 8f 30 73 1b 4f 2f 73 30 7c a3 10 4f 0b 4f 8f a3 18 4f 01 a0 4f 1b 4f 2f 73 8f a3 01 bc 4f 01 a1 4f 1b 4f 2f 73 8f 30 73 1b 4f 2f 73 30 7c a3 0d 4f 01 b5 4f 8f 30 73 1a 4f 2f 73 30 7c a3 20 4f 01 ac 4f 8f a3 01 b5 4f 1d 4f 1a 4f 2f 73 8f 31 73 1a 4f 2f 73 31 7c a3 01 bb 4f 01 b8 4f 8f 30 73 1a 4f 2f 73 30 7c 83 01 8b 4f 03 a3 4f 8f a3 01 a4 4f 01 82 4f 1a 4f 2f 73 8f 31 73 19 4f 2f 73 31 7c 83 01 ae 4f 03 9a 4f 8f 83 3f 4f 02 be 4f 19 4f 2f 73 8f 83 2c 4f 02 85 4f 19 4f 2f 73 8f 31 73 18 4f 2f 73 31 7c a3 38 4f 03 81 4f 8f 30 73 18 4f 2f 73 30 7c a3 14 4f 01 82 4f 8f 83 01 89 Data Ascii: OO/s1sO/s1\|:OO0sO/s0\|OOOOO/sOOO/s0sO/s0\|OOOOO/sOOO/s0sO/s0\|OO0sO/s0\| OOOOO/s1sO/s1\|OO0sO/s0\|OOOOO/s1sO/s1\|OO?OOO/s,OOO/s1sO/s1\|8OO0sO/s0\|OO
2022-05-23 16:46:57 UTC	34	IN	Data Raw: 01 aa 4f 07 4f 07 4f 2f 73 8f 30 73 07 4f 2f 73 30 7c 83 36 4f 02 a4 4f 8f 30 73 06 4f 2f 73 30 7c 83 01 aa 4f 02 99 4f 8f a3 35 4f 2b 4f 06 4f 2f 73 8f 31 73 06 4f 2f 73 31 7c 83 01 93 4f 03 b9 4f 8f 83 26 4f 01 96 4f 05 4f 2f 73 8f 83 01 94 4f 03 bc 4f 05 4f 2f 73 8f 30 73 05 4f 2f 73 30 7c a3 01 8a 4f 14 4f 8f 30 73 04 4f 2f 73 30 7c 83 01 94 4f 01 b1 4f 8f 30 73 04 4f 2f 73 30 7c a3 01 ba 4f 35 4f 8f 83 2b 4f 02 81 4f 04 4f 2f 73 8f 83 01 8a 4f 03 a0 4f 04 4f 2f 73 8f 31 73 03 4f 2f 73 31 7c 83 01 9c 4f 02 8c 4f 8f 31 73 03 4f 2f 73 31 7c 83 01 90 4f 03 b1 4f 8f 83 37 4f 02 a7 4f 03 4f 2f 73 8f 83 36 4f 02 a2 4f 03 4f 2f 73 8f 30 73 03 4f 2f 73 30 7c 83 3a 4f 02 af 4f 8f 83 0d 4f 01 b5 4f 02 4f 2f 73 8f 31 73 02 4f 2f 73 31 7c a3 36 4f 1c 4f 8f 31 73 Data Ascii: OOO/s0sO/s0\|6OO0sO/s0\|OO5O+OO/s1sO/s1\|OO&OOO/sOOO/s0sO/s0\|OO0sO/s0\|OO0sO/s0\|O5O+OOO/sOOO/s1sO/s1\|OO1sO/s1\|OO7OOO/s6OOO/s0sO/s0\|:OOOOO/s1sO/s1\|6OO1s
2022-05-23 16:46:57 UTC	35	IN	Data Raw: 24 a7 ce 03 b3 5d 40 0a 53 6b 7b 92 e3 2c e1 65 7e d9 2c 4c db bb fc 65 0d f5 0c 3d 40 41 c6 49 4e be 87 e5 fd 36 62 98 ba 7c 7f c1 07 10 15 73 4d 57 84 e0 7e 74 fd 9d 6e 81 76 2b 87 a0 54 7f b3 a2 7d 2e 3d f1 e5 7c 05 4b 62 e2 1c c9 b6 04 fe 51 9a 61 60 e9 ad 07 9d 53 7d 9e 5f 93 a4 b7 4e 74 ac 3a 13 26 18 e4 bd 98 90 59 fb 23 80 47 ef 6d 5f 2e 2e 0d 79 04 c7 f1 3a b5 b6 10 d8 04 cb 8d 5f e6 49 28 0c 1b 64 2f 49 1b fb a2 f0 bf f2 6d b3 99 8a c2 4d da 99 17 2d 62 e7 f2 78 82 24 32 b5 06 fa 18 6d 53 48 70 67 63 04 fb 21 c9 c5 78 a8 65 1d 18 52 10 19 eb ca 17 61 e8 ed d2 cc 54 6a 88 cb 9a ee ad e3 b1 8f f8 ae 18 3c 2a df 7e 75 36 cd b7 67 60 33 23 4d 21 76 a6 08 cb 0f b0 34 3c 48 ba 4b c4 3c 8c d6 ba e8 42 49 c3 47 04 88 76 e0 b0 03 3e 7a 6c 09 81 cf 02 da Data Ascii: $]@Sk{,e~,Le=@AIN6b\|sMW~tnv+T}.=\|KbQa`S}_Nt:&Y#Gm_..y:_I(d/ImM-bx$2mSHpgc!xeRaTj<*~u6g`3#M!v4<HK<BIGv>zl
2022-05-23 16:46:57 UTC	37	IN	Data Raw: c4 57 13 3a b6 93 0b d1 b1 75 c5 d5 21 61 0f 55 85 3e 61 3a 13 bf 56 ee 07 f5 b5 5c d7 73 f9 5d 83 81 70 d0 bc b5 b9 34 12 8f 6f 99 45 28 6f 8d bd 00 b3 27 97 ac a4 2e 1a 36 ae 36 84 68 b1 7b 10 4e f6 d4 5b 62 c8 db c8 42 8a 55 35 56 8b 21 90 44 5f 52 33 64 7e 35 9c 4a bb bc 26 89 d0 19 12 72 f0 50 13 39 81 4a 38 43 ee e9 f7 7b 69 bb 83 ea 01 19 cc f5 12 e3 0f 86 38 a5 d9 b6 8c 97 0e 12 69 67 36 5f b6 a6 50 cf 4e e9 53 0b 42 98 39 33 19 e7 f1 cf 15 4b 05 aa 52 3a 03 5c a4 9d 86 7a c1 89 7e 9b 0a 59 6d 57 7a 84 30 b8 db bd 44 96 f3 ca f8 e1 fc a8 f5 c4 07 4d d9 d0 03 69 0f b0 34 51 67 b5 19 24 d9 23 65 0a 4e 97 b1 3c 4c f2 ed e0 32 f4 7c c7 93 61 a0 4d c6 82 da ac 50 91 c1 9c 39 df a5 32 ac fe 00 0b 96 70 6f 3a 9d 5f 69 32 ff ea 4f ef 9e 61 41 91 0a 74 a1 Data Ascii: W:u!aU>a:V\s]p4oE(o'.66h{N[bBU5V!D_R3d~5J&rP9J8C{i8ig6_PNSB93KR:\z~YmWz0DMi4Qg$#eN<L2\|aMP92po:_i2OaAt
2022-05-23 16:46:57 UTC	38	IN	Data Raw: e0 27 fe 5d 55 fc e3 ba ce 43 fe b3 41 18 50 40 84 32 9b 2a e0 1a ef c8 3c cf b0 e3 54 09 1b de 90 90 97 51 af fc eb d2 74 fb 13 da 45 91 89 24 62 dd ed 13 dc fb 26 45 17 32 b3 05 ad 9e bd 70 0e 93 fb 3a 87 f0 73 09 66 65 4b 34 bb ba 17 2d c8 06 3a f2 7a b3 03 fe 5d d4 e1 da b1 2f 4b 7b a7 b7 29 0d e7 bc c4 43 30 6b 84 04 7b c0 e3 97 c7 02 af 93 f7 c5 a2 9a b5 d8 37 6a 29 1a 6a 9b db d1 27 19 ea 51 44 b5 27 08 0c 3c 5c d0 f5 5a a4 ec fe 54 52 59 1c fb 27 aa 98 2c d5 5e 60 cf e2 07 bb 93 12 8a c2 6a ba 5a 18 e5 4b 35 7c e6 5c e2 24 73 2d f8 59 85 c3 a9 08 4f 9a b5 80 bc a2 fd 0c a7 2b a4 f6 56 c4 7e 00 2b 3f 54 0b 1c 39 8e 28 22 04 5b ff 2a 99 6d 75 d5 71 58 99 09 bb a3 47 63 5c 53 bd cb 96 b6 ba 5b 4a 71 76 69 22 5d 12 aa e3 a6 e9 b9 36 68 ad 32 d5 df 5e Data Ascii: ']UCAP@2<TQtE$b&E2p:sfeK4-:z]/K{)C0k{7j)j'QD'<\ZTRY',^`jZK5\|\$s-YO+V~+?T9("[muqXGc\S[Jqvi"]6h2^
2022-05-23 16:46:57 UTC	39	IN	Data Raw: 12 bd f8 36 16 6b 80 c1 17 3f c3 06 c1 15 cb 42 65 70 40 40 ea b1 28 03 65 bc fc 80 58 ab d6 40 91 54 6e 34 bb 94 2e 9c ec 80 db fe 03 0d 9f 01 5c 09 ae a5 b4 1c 9a 0a e4 92 20 24 ed e0 30 3a 5b b9 94 42 bf e6 d2 38 c3 bf 33 32 39 f0 b8 e6 15 2a ad 87 d9 8f f9 30 52 a6 bc 90 90 d0 23 da 98 4c dd 2c 1f 59 f0 aa b2 a8 e3 4e 28 4a 47 12 44 93 e5 62 4d b1 b4 ba 6d 0b c0 ab 0c 38 6e 4f de ad 4e 59 16 5a ac 98 44 70 31 3a 84 5a 51 68 fb 70 ff 37 eb e8 4f 9e 1d b8 97 2b dc 62 2e 1e 54 2a f8 95 cf c0 35 09 e8 94 29 25 18 c3 64 fb 50 ee 22 4c a8 28 57 5d 1c 77 78 1a 13 b5 0c ee 14 48 5d e7 6c 43 48 78 97 e9 b1 ca 9c 8c 5f 6a 2c 98 a3 1d 08 8c 70 0a 9d 63 a6 94 95 8c 21 ae 74 c1 a7 d8 9e b7 6b e4 2d d6 6e cc 2f 37 42 fa e4 06 fe fd 7b 7e 99 db da 66 27 98 f5 88 5b Data Ascii: 6k?Bep@@(eX@Tn4.\ $0:[B83290R#L,YN(JGDbMm8nONYZDp1:ZQhp7O+b.T5)%dP"L(W]wxH]lCHx_j,pc!tk-n/7B{~f'[
2022-05-23 16:46:57 UTC	41	IN	Data Raw: 3b f9 91 04 07 b5 1f 1b e6 86 99 c9 78 6f 29 cb c3 29 2b c2 35 4c f7 30 db 17 bb f5 11 99 91 cb 1b cf 17 33 00 59 b5 aa d2 a0 89 29 b9 5c 94 8f 0b 49 ce 64 7c 87 6d 8c 3d 44 a0 23 7d c7 2e 6b 18 db 30 20 e4 ea c2 c9 ef 12 09 a2 8e 0a 1b e3 36 ae 62 72 4a f7 00 18 44 8a 21 76 21 15 ec 02 2a c5 bf 97 6e ea ce 8a 6b 9b 8e 8b c9 08 8b f0 f5 3e 66 7a 07 e5 0f a1 66 20 24 7c 2e ac 5f da 46 73 df d2 e6 b2 48 d8 f0 46 11 19 ad 19 ab 4c 22 d4 07 08 e8 b2 af c9 3f 22 b1 32 b9 24 7f 12 05 df c4 a0 33 6b 47 17 c7 c0 91 cb 43 53 4a 14 2c 4b e3 99 c8 9a c7 1c bc f9 a3 f9 6f b1 30 18 5e df 77 26 43 b7 09 27 2a b1 6c 83 10 17 43 c0 b2 9a 03 0c 49 79 27 5c 28 0c 45 3e f2 f9 04 a8 44 63 80 a2 35 ca c1 4d 82 eb 97 92 ce 09 1a ee a0 b7 87 98 6f dc a6 a1 09 21 27 34 76 20 89 Data Ascii: ;xo))+5L03Y)\Id\|m=D#}.k0 6brJD!v!nk>fzf $\|._FsHFL"?"2$3kGCSJ,Ko0^w&C'lCIy'\(E>Dc5Mo!'4v
2022-05-23 16:46:57 UTC	42	IN	Data Raw: 74 66 d0 7f 5a 90 86 a0 45 d8 31 df 14 bb 23 c5 cc be ca 1e 20 e5 61 75 72 ac 61 f4 65 41 77 a4 e1 03 1b 8e c8 de 60 91 6e bf 37 09 b0 f6 80 3c eb 2d b2 40 52 13 30 f7 91 89 46 85 a2 56 e7 16 ca 33 ae fe 9c 4f 80 ad b1 e9 81 55 33 f9 6d 59 12 ba 1c 65 d4 a0 1d 3a 6c d1 b3 ae 45 a4 7a 1e 0a 39 ba 58 74 c9 6a 79 51 f9 2c 29 a4 03 de 1d 96 89 30 3f 71 52 33 28 d9 a0 25 99 83 34 92 4e 76 87 72 24 82 aa dd ac 0d 9a 81 a9 1d 83 f8 2a 85 65 d1 0f 41 8b 94 71 0f eb ad 2e 3d ec 17 68 4c 2a e0 d1 bf 74 70 49 d1 d4 aa 7b b2 70 98 5e 9c 3f f5 2c 16 5e a2 67 49 7a 30 ec 68 a1 b4 04 c1 00 1a 32 60 e3 b2 4d a9 0a e0 81 ea df 24 1f 00 57 9a 49 86 54 9a 7f 4d e5 79 e3 5d 71 27 95 f8 88 b3 b4 1a f2 74 98 5e b9 5d db fd f9 4b 0d c1 ba 4b 4e e2 09 90 b9 21 b0 94 0a b6 99 32 Data Ascii: tfZE1# auraeAw`n7<-@R0FV3OU3mYe:lEz9XtjyQ,)0?qR3(%4Nvr$eAq.=hLtpI{p^?,^gIz0h2`M$WITMy]q't^]KKN!2
2022-05-23 16:46:57 UTC	43	IN	Data Raw: c4 45 0d c7 17 ee c8 dc 78 8f 2c d0 37 80 6d 9c 3b 41 7a fb b2 97 34 c3 61 88 3a fd 60 1d 22 d8 72 98 20 b8 b8 ad eb a8 a2 df 9e 29 43 7b 04 46 38 d2 81 8e f0 86 10 7d b1 75 7a 38 ad dc 91 86 2b 4e e1 48 c0 70 de 2b ab cf d9 7e 17 73 56 2f 30 84 72 77 4c ad fe 1f c3 71 19 4c 99 f5 69 50 d1 11 2a 87 ae 43 4c 55 cf e3 0b 56 a3 f6 26 0b 44 4f d8 29 e9 40 c5 e4 d0 86 b8 eb 04 9d ca d8 fa 0f 43 dc b6 e2 3b f8 85 cd d5 8d b8 77 5b 17 aa 35 85 34 d7 3b 65 34 83 85 9d eb c5 2a 3b 56 36 52 d2 41 ad 3c 9a b6 35 10 ec 44 24 dd f5 fa c2 ef 61 8d da c4 cc bc ee cf 4c 3d cd b7 27 bc 7a 2e 2d dc ac 04 e6 d0 9f eb 17 7c e5 d0 3a 41 ba 7d c9 35 be c7 7b 8f b2 be 86 c2 33 03 e2 f7 ab 3a 54 4d 95 15 1c ba 63 2f 2a 88 1f be 33 9b f3 bb 47 35 e0 60 f5 36 00 21 3f a9 b1 74 c6 Data Ascii: Ex,7m;Az4a:`"r )C{F8}uz8+NHp+~sV/0rwLqLiPCLUV&DO)@C;w[54;e4;V6RA<5D$aL='z.-\|:A}5{3:TMc/*3G5`6!?t
2022-05-23 16:46:57 UTC	45	IN	Data Raw: c5 4a 17 f1 4b 48 35 2a 29 19 ea 47 ab fb 3d 43 2a a7 63 66 f5 d4 bf 44 03 f0 fe b2 bf 9f c6 b0 9f d3 70 e9 4a bf cf 74 ca df bd c3 10 bd 25 86 b1 4c b4 2b 82 e9 b7 0b 43 e0 6c 6c 5f 77 d1 33 c3 da a0 9f f9 72 fb 01 ec a5 87 08 47 87 a0 5a 28 3c 7b f6 63 44 61 55 66 d0 cb 06 fe 3a 51 c9 97 a7 b6 20 e9 ea 8c 9d 6b 71 e8 11 6a cc 5e d8 4f 09 b4 e5 40 08 9a 43 f2 a7 84 57 bc be d6 64 19 a4 05 85 69 3d 9c 63 f7 2c 89 55 88 66 3a 19 d8 3a 83 a0 53 31 c0 8c 97 a0 e8 84 79 a2 dc df 66 d9 9a aa 7d 83 15 6e fb 1f c2 88 8e 05 87 92 10 10 fe a2 44 cd 0c e6 b9 35 26 a3 db d9 19 42 4d 37 7f 1b 2e 32 0a 9d cc e1 b2 8c ff 05 5d 00 1d a9 1e 85 5a ac 7b 5f c0 fd 49 58 78 5b ca fb df 5e 47 12 11 4e 2a f4 8d 78 8d b5 34 66 2f 5a df 6d 50 42 0b b7 59 4d 5a 4f cf a0 7a a4 18 Data Ascii: JKH5)G=CcfDpJt%L+Cll_w3rGZ(<{cDaUf:Q kqj^O@CWdi=c,Uf::S1yf}nD5&BM7.2]Z{_IXx[^GN*x4f/ZmPBYMZOz
2022-05-23 16:46:57 UTC	46	IN	Data Raw: 33 b7 c5 0f c0 a1 37 70 9b 68 75 9a cf 73 d1 df bf a9 58 43 ee 8d 42 19 1c a0 c6 d8 0f 4d 94 86 38 d6 ed e2 a4 63 fc 1e 48 a3 a3 0a ff 18 c3 ee 95 fd b5 b2 71 0d 78 91 70 90 a7 10 78 40 b5 57 59 88 6c 34 ec 28 96 d8 cd a4 25 5c 22 df bc 3f 98 1c 3e 3b ce 17 ec 7a 1b eb 93 99 1e 0d 8c 73 02 59 dd 75 4d 38 8e df 01 65 d1 a8 d9 f0 0a e5 e3 37 bf 36 4b f4 f1 54 df b5 ef d5 40 fd 46 8f b7 2b f8 b8 85 4e 70 4d 56 f5 75 e9 9a 96 e3 6e b6 0b 49 92 06 c5 64 c7 d7 ac fd c8 59 af 90 64 81 0e ec b5 72 3c 59 fd e1 6d 04 c4 b3 0b b7 c5 f6 13 0a 3e 0c 64 a8 22 ef 71 5e 61 b7 a0 c8 92 e2 94 f9 6e 59 5e 8d 68 2b b2 f1 14 63 14 db e1 8e bf 13 cf 68 4e f6 8a f7 80 55 f7 67 6e 72 dd cd b8 ac 89 a1 cd f8 13 bb 63 a8 a8 5c 72 e1 a6 d3 16 b8 42 6c 9f 74 1a 67 53 5b d1 20 31 d8 Data Ascii: 37phusXCBM8cHqxpx@WYl4(%\"?>;zsYuM8e76KT@F+NpMVunIdYdr<Ym>d"q^anY^h+chNUgnrc\rBltgS[ 1
2022-05-23 16:46:57 UTC	47	IN	Data Raw: 8f 72 bc 17 d1 fe 2a 8b c5 71 56 61 ab 3e b3 84 08 26 6a 9d dd 8d bb 35 36 2b f2 99 a7 30 53 8b 4a f5 1c 8c 08 ca a3 68 9f 9e 66 fa 8f 64 38 01 7a f3 93 ef ff f7 24 20 3e d0 d6 61 0d ca 81 a0 99 47 82 9f 36 1c 97 79 d2 3e ef b1 e8 6e 49 95 e4 d0 8a 66 fe 69 ca 31 1a 44 21 94 97 e3 f7 5e 95 fd 39 db b2 38 e0 6e 3a fc 01 35 68 c4 6e 7c 4c b6 66 44 fd ba bc 24 f2 43 03 63 1b de eb 1d 7c c3 30 e5 17 92 61 4a 1d 93 43 ff 22 61 b4 3e 80 8d 66 3e 75 f9 e9 7c 9b 23 db 5a 02 70 5e 09 1e 51 2b 5b 5f 3e 68 cb 27 59 e0 d4 a6 b5 25 27 d7 46 37 e2 1d 7d 34 bd bf d9 98 f9 c4 12 da 62 05 c2 df a3 a5 4a aa a6 3d 8c 27 9b b9 3e 89 16 4a df 4f 01 71 56 fd e1 6f 8a a0 cd bd 04 a2 f1 f9 51 ae 92 22 a8 dd 62 87 1e 15 a7 6a 72 8b 65 b5 ba 47 38 e1 36 f2 c2 de 54 48 34 7a 0b 85 Data Ascii: r*qVa>&j56+0SJhfd8z$ >aG6y>nIfi1D!^98n:5hn\|LfD$Cc\|0aJC"a>f>u\|#Zp^Q+[_>h'Y%'F7}4bJ='>JOqVoQ"bjreG86TH4z
2022-05-23 16:46:57 UTC	49	IN	Data Raw: b5 c5 50 4b 03 38 cc 5a 01 6e d9 8e 0d 8a 93 05 bf 81 2a ba a0 50 f7 b9 a8 f5 fa 39 dd e7 c9 56 fe 69 16 39 74 4b 21 ee 8a a6 4c 01 e3 5f 16 4e 9b 28 93 9b 7f d0 0b 77 fe 0b b6 ba e7 b3 93 bb a2 c1 a9 30 e1 60 5e a9 e3 96 df fa f6 b0 27 a5 21 c4 e5 7b 6f b4 f2 b0 5a 41 c3 a5 f6 f8 46 62 43 7b fc 85 fc c9 24 78 25 14 03 77 1e 33 a4 fc 05 cd c1 7c a0 46 97 f8 0b 25 c8 8d bb 8b b8 12 80 9b 62 f8 07 4d f1 75 91 8a 27 9d 8d 37 5a b3 23 ec b9 4c 84 69 74 67 d5 a9 a8 17 32 55 cf 71 74 72 44 b0 a7 6c a7 38 fc 8b f8 c2 b6 11 91 c3 04 76 04 ca e1 a0 b4 6d a3 9f c6 2b e1 42 27 40 0d b7 87 be 65 57 47 21 c4 ed 4d e6 d6 d6 52 01 d5 e0 d1 08 58 9c 2f a9 7a 76 a0 88 48 66 d0 9c bb b7 eb f9 50 93 91 9d 36 af 53 3d b2 e2 58 41 4e 61 c3 61 f2 18 cd 71 3a 05 df 39 ca 24 62 Data Ascii: PK8Zn*P9Vi9tK!L_N(w0`^'!{oZAFbC{$x%w3\|F%bMu'7Z#Litg2UqtrDl8vm+B'@eWG!MRX/zvHfP6S=XANaaq:9$b
2022-05-23 16:46:57 UTC	50	IN	Data Raw: 21 5f 1d d0 8d 96 e8 b0 e5 55 0b ce 5a 29 55 13 de a1 56 e7 d2 e8 7d 80 d5 3b d0 ba 53 d3 50 1b c1 01 11 75 b1 e0 b4 ae cd 6d 4e c8 10 c5 85 34 f8 7d f6 62 53 70 df 92 e7 77 ec 8c be ac e7 99 75 f5 dd b1 5f c9 c3 fd fc c5 82 2c 43 c2 6e 1e 73 77 cf 22 0b 35 0b 58 96 8f 57 0d 71 40 06 94 5b 66 6e d4 6c 8d 50 78 9a 35 b4 79 34 f1 fb 13 8a dc c2 7f 0d 1c 4e a1 9c a6 c7 e8 67 8c 84 dc 8a 67 d9 7e 91 b8 ea b1 b0 22 50 51 cc aa b0 1c 31 0a 8b 0c 43 e3 04 c7 22 0e df 10 12 3e 23 57 c9 5d 31 f7 ae 17 8a ef a7 b9 73 3d 78 7f 53 2e 8f 49 09 0d 10 4a c4 c1 30 d1 8e 1f b5 9a 72 20 5c 47 14 5e 17 55 87 85 d2 ec 09 d4 f3 6c b5 df 21 b7 f7 ff 44 2a ba 7b 6b a6 0a f3 34 b1 8b 8f df 7a 42 af 63 46 2c 36 40 e1 03 4c 9f 50 c0 93 f6 8c 4e bf e6 1c 11 2e bc 00 7a 19 d0 7d 53 Data Ascii: !_UZ)UV};SPumN4}bSpwu_,Cnsw"5XWq@[fnlPx5y4Ngg~"PQ1C">#W]1s=xS.IJ0r \G^Ul!D*{k4zBcF,6@LPN.z}S
2022-05-23 16:46:57 UTC	51	IN	Data Raw: 54 6b ce 2c e6 73 f9 68 ce 65 10 f4 30 d2 04 66 17 1c b9 6f ea 85 63 c6 37 60 c3 a6 99 0d d8 cd ce c0 38 53 7b 8c 40 5e 11 57 bd a7 2a df bd 28 38 ae 65 3e 46 85 89 d1 ed 7d 2d 9b 46 76 89 7f f9 36 f1 e7 2d b7 3d 40 68 0a 64 a1 1a a8 32 2c db 4b 4a 24 0b 26 b0 c5 0a 27 b2 e7 25 26 7c 8b 7f b3 8f c2 a0 6c 3e d7 f1 93 68 3e e8 23 26 7e fc 27 e5 e1 49 be 38 0a fc 39 ad 00 91 50 5b a9 1d 98 33 36 6a 41 0e e8 ae a2 db 78 00 d6 58 ea af 6d 9d 14 cb 79 01 46 6a dc 66 3f 3e 43 4d 9b 01 e1 a1 5b c6 c1 e2 83 42 c2 bf 6c 62 87 63 6a 90 42 ed 8e 5e 2a f0 96 e6 4c d8 6a 15 88 51 1e 2f de 07 d7 da fc ef 33 7b 95 2f ca fd 04 e8 b8 eb a3 a5 12 d4 51 93 db 02 d2 ce 5e d3 b2 5e bd b8 32 1c cf ef f9 2d 1e 35 7e 35 db 54 e1 76 b9 6d 2a 60 42 e2 98 23 b9 15 eb a9 da 23 b3 f5 Data Ascii: Tk,she0foc7`8S{@^W(8e>F}-Fv6-=@hd2,KJ$&'%&\|l>h>#&~'I89P[36jAxXmyFjf?>CM[BlbcjB^LjQ/3{/Q^^2-5~5Tvm*`B##
2022-05-23 16:46:57 UTC	53	IN	Data Raw: ea ef 3f 7a 0b 60 d7 13 c8 c5 f7 f4 93 83 99 be 75 41 14 7a b0 90 2b e9 17 09 51 08 8b 47 ee 4c d2 19 6a bf dc 6e 1c 80 bc cf 80 9a 32 c9 2e 7a 58 d1 db c4 1f 65 fe c4 9f a4 5d 58 32 ce a6 cf 9f 99 61 5e 64 a6 1d a3 e9 98 7c 74 0d 01 3d 45 bc 25 c2 48 42 12 03 23 6b fe b3 a0 65 e3 ba db eb 44 63 9d 01 72 ff c9 85 c8 03 c8 8b d4 3d a3 36 42 2a 82 06 78 59 c3 be 41 be 5f b4 95 c1 17 6d c6 43 50 58 aa aa 04 d6 85 e7 fe 77 9c 58 48 0f c8 68 0b 77 34 de 3c 30 fb 1b bf 03 f7 8d 3e 9a 3e f5 b5 3c c2 36 1d 12 89 9e 37 a4 35 21 9e 8c aa 32 d5 e1 76 ab 68 49 04 c1 7c d1 a2 8f c7 bd c5 27 0a 56 1c de f1 6e cf e2 69 4e f3 21 99 f4 4b 49 9c 8e ec a3 5d 84 67 49 f5 df 21 73 ab 88 89 c1 81 df 9f f2 8a 6a 19 9b 8b c2 19 db 13 ca a3 89 66 d4 47 b6 64 5c a3 d3 a5 e6 6b c9 Data Ascii: ?z`uAz+QGLjn2.zXe]X2a^d\|t=E%HB#keDcr=6B*xYA_mCPXwXHhw4<0>><675!2vhI\|'VniN!KI]gI!sjfGd\k
2022-05-23 16:46:57 UTC	54	IN	Data Raw: 6f 29 8f 7c 56 0b 71 78 ff 6d f7 ea da 73 f2 ca ff bc f3 5f 7f 4c b9 51 99 69 8f bc 13 a9 75 37 70 d0 ce 94 80 94 ff f5 75 d4 77 93 9c 55 5c 17 e0 d2 ca cc 60 b1 2b f7 14 41 da 30 d8 9c a6 b5 49 5d d1 b4 80 50 03 27 26 5f 2c 10 7e 6b ef b7 6c a4 c7 42 ed 32 eb 8e 21 24 05 19 35 b2 04 d1 0a 26 ed 23 75 e4 7c 84 2f 0b 63 36 ff 44 c4 ff a7 e4 5d 13 bd e8 92 cc 81 d8 10 a3 2a 2b fe 34 1e af 50 4d 97 5f 92 1b 82 00 87 e7 ac 49 61 89 66 d1 ce f2 6b 9b 4a 92 f5 42 dd 24 9b 0e 56 2a 6c 66 ba 60 b7 f2 ca 76 bd c6 fd 7a 78 d7 b9 70 9f c0 ed 98 27 29 43 98 80 b0 6f 08 d2 52 b8 bb 2b 57 1f 79 40 4f bf 06 6b 10 df 54 36 59 af c0 5c 71 4f 07 b3 4b e2 9a 5f c2 d0 c5 00 2a 95 ed 9b 50 4d ce 4c f9 5e dd 44 a6 83 e9 a3 02 5d 5c 69 c1 37 92 49 a1 6e ac 8b 48 e5 e9 27 d6 48 Data Ascii: o)\|Vqxms_LQiu7puwU\`+A0I]P'&_,~klB2!$5&#u\|/c6D]+4PM_IafkJB$Vlf`vzxp')CoR+Wy@OkT6Y\qOK_*PML^D]\i7InH'H
2022-05-23 16:46:57 UTC	58	IN	Data Raw: b0 29 a7 9e 8a 31 8d 32 c6 5a dc 2e 32 32 26 e2 16 92 0c 7b c8 8e 6e d0 54 71 c7 3a 40 89 da 6e 6b a3 74 d7 33 65 ae c4 e4 1f 8c 89 63 3c 2d c4 9c 4d fc ab bb 45 af 8b dc 9c 09 ec b1 34 88 eb df 8e 90 87 cf 84 b5 e7 b4 6e e2 67 b4 49 91 c5 4b e4 55 33 ef a2 9e 14 ea e2 0a e1 a1 37 3c 1a b1 df 28 9b 6a d7 e2 68 8e 9b 30 64 5b e6 72 f7 47 68 23 58 6e 74 48 d5 58 a0 1e 5d 8e e6 73 e0 d4 1a e9 bf 7c 68 28 77 b1 dc 54 19 fd 9d 7f 29 d2 6b 0f c0 08 d8 15 b8 0a 77 8a de 3d 93 e1 9b 09 b0 35 a9 d2 0f db 28 ed 46 8f 2d 7c f2 06 2c 87 c8 32 3c be a7 8c 2d c6 85 e1 4d de 11 49 5c ba 92 c1 da 8d 56 57 e4 d6 c4 df 29 41 d7 a3 a3 74 44 99 93 27 10 44 13 78 3e 03 00 98 f0 46 71 ae da fb fb 03 dd 0e 6b 9a 3f 7c 5d 1a 28 2e 89 19 fc cc 97 a1 56 6a c8 0f 40 c7 fd 7e 81 59 Data Ascii: )12Z.22&{nTq:@nkt3ec<-ME4ngIKU37<(jh0d[rGh#XntHX]s\|h(wT)kw=5(F-\|,2<-MI\VW)AtD'Dx>Fqk?\|](.Vj@~Y
2022-05-23 16:46:57 UTC	62	IN	Data Raw: 67 97 92 3a e5 60 ce 64 99 01 e5 ab ec 9f 5b 3c c0 f2 67 74 18 e7 04 aa 1f d8 cf 02 e4 1e 6e 00 e1 44 87 3f df 60 69 8c c7 20 57 3c b5 a2 49 cd 39 44 f2 56 8a 5b 69 9b d8 5c bb 11 88 4d dc 77 94 6f c5 7c d9 f4 e4 c4 78 82 9b fc cc c9 9b a1 c6 ee d7 8f d1 86 fc d2 03 e6 d1 5b e2 ea ae 2a 19 5b 69 9b b4 ef 92 fe d7 c0 1a 04 b3 ae bb 43 35 6d f2 b2 e9 8f 2d 29 2f cd 8f 76 64 08 f4 6e e3 79 d4 0c a2 82 96 d7 d3 39 ed ee 0f c8 b9 ec e8 12 e4 11 a7 4b f0 2c 10 5b 69 9b 68 5e 5d 2f 6a 59 f9 ee 07 2a e1 1c c3 07 6a e7 64 e1 54 9c 57 5b 69 9b 70 9b 46 43 d6 8e 4e 5a d1 36 b9 0d c9 4c dd 56 c8 f1 dc c4 05 3e fb 84 da c1 f4 66 4b 1a e5 de 9d 5b 69 9b 18 78 fa 5e cc 7d 8d f8 42 48 4a e7 6b 2d 1c 33 45 5b 69 9b 24 1e 60 af dc ff 96 3d 9f 20 e4 4f 66 bb 5b 69 9b 32 15 Data Ascii: g:`d[<gtnD?`i W<I9DV[i\Mwo\|x[[iC5m-)/vdny9K,[ih^]/jYjdTW[ipFCNZ6LV>fK[ix^}BHJk-3E[i$`= Of[i2
2022-05-23 16:46:57 UTC	63	IN	Data Raw: 0c ef f7 38 74 af 84 34 10 d8 55 5d ed 4d 77 e0 1a bb 79 a8 3c fc 94 09 e6 32 10 5b 69 97 f7 2d d5 84 99 67 ad 1b 1d f9 ed 71 d8 da a2 79 5b 69 97 f7 7b 51 65 fd b7 21 ca 7b 5b 69 97 f2 aa cc 34 a1 df 18 2f 1f b5 c4 c0 3a aa 1d 66 2f 4a 9a 38 2a 9e b1 6a 92 87 53 7b 73 b6 5b 69 97 8c e1 80 b1 c7 83 46 0e 69 94 9b 3d b5 5b 69 97 af a0 eb ad 14 c8 31 32 d9 9a d4 5b 69 97 b3 32 13 60 77 d4 c6 60 f9 97 b5 2d b4 d6 fd 13 7d f0 78 db 69 8b e9 fb 5b 69 97 45 18 13 1c d9 f2 ad 2f 91 7d 3e eb d3 f7 86 e4 78 0b 8b c4 0a af 5b 69 97 6a f1 de 92 4c ec 06 a1 06 60 87 f6 73 32 46 56 73 4e 39 5b 69 97 01 72 c9 9a f2 75 0e 2d cd c2 97 87 89 0f 20 c5 ed 40 22 4d 65 7d 5b 69 97 3b f6 88 a9 76 33 df 81 09 e7 fb 85 95 e6 4d 9c 3a bc 44 7f 7d 5f 19 5b 69 97 20 8d 60 f2 4d 2c Data Ascii: 8t4U]Mwy<2[i-gqy[i{Qe!{[i4/:f/J8*jS{s[iFi=[i12[i2`w`-}xi[iE/}>x[ijL`s2FVsN9[iru- @"Me}[i;v3M:D}_[i `M,
2022-05-23 16:46:57 UTC	68	IN	Data Raw: 3d 15 fa f5 e5 2f bf 71 64 42 47 fe 07 5f 57 74 8f 5b 0b 4d a7 c3 3e fa f3 f3 1e 31 4f f2 5d bd 53 e3 3f 0b d2 d0 45 b3 6c 90 8c 3c bb 8e 76 86 d0 1d f8 90 06 c5 7a b7 4e fe e3 5a 56 b6 32 4f 7e d1 5d 54 d7 b8 8b bc ba 06 85 73 bb 26 b1 a0 e0 9d f5 16 1f 85 07 b6 1c 58 19 62 3b 60 c2 6f 9e 76 2b 44 2c c7 cf 9f a5 dd 7e 0d d0 79 7d 4e 3b b3 39 4e 65 16 25 eb 0e 5b 77 f0 51 00 2f 6a a5 53 f2 d1 87 18 45 e2 b3 53 47 e7 cc 41 80 0f 8c 0c 68 ab 8d b0 2a 1c 8a 06 5e 49 29 3d 5c 9c db b5 9b 56 51 26 0f 7b 1f 6a c0 2d 21 cd 59 dd 46 d3 5c cf b4 47 c7 23 56 62 c3 a6 2b 30 dc e2 cb e0 7e f9 c4 f3 47 de 36 29 e1 83 fb 08 5e 81 57 9b 8e b7 bd 95 fd 20 5c a6 a9 7c db 60 a6 57 11 bf 26 97 dc 57 00 01 79 ce 38 71 9b 25 38 f7 fe bd d7 55 1a 88 0d 4b f9 e5 55 cc 98 cc 9c Data Ascii: =/qdBG_Wt[M>1O]S?El<vzNZV2O~]Ts&Xb;`ov+D,~y}N;9Ne%[wQ/jSESGAh*^I)=\VQ&{j-!YF\G#Vb+0~G6)^W \\|`W&Wy8q%8UKU
2022-05-23 16:46:57 UTC	72	IN	Data Raw: 99 30 b1 86 b0 1b 50 25 87 b7 9d 91 4e 03 73 d0 00 a9 5a 29 a5 30 0a ef 93 8b 26 38 67 f5 32 17 04 9b ac 45 cf 66 ae 39 70 81 1a fe 0d b3 b9 5b fb 30 78 a8 b8 fa 0d 5c f5 f5 e9 ad 75 bd ae 6e 2d ca 44 37 72 a5 05 91 d4 b5 3a 8f 7b 54 31 dd 6e f9 98 20 86 ec c4 38 86 bb e1 0b 43 be 1f 0e 30 8d c6 1c e6 f1 53 7c ba 2b 52 9c 79 2f d6 d1 eb ae 1f f6 36 8b 21 12 21 31 49 40 d3 70 30 9c d5 ae f5 04 a6 3f a5 37 2b cc 7a 06 cb 82 be e1 8c 07 9c 1a 2b 70 b8 37 55 09 12 44 da 8e c6 86 a3 af 8b 53 f4 70 df 2a 01 35 09 c1 65 6a 35 92 3b c5 77 cc b2 a1 2f 7f aa d9 6c 79 c6 b2 35 21 36 54 c8 53 d5 61 5e 81 a8 6a 3a 87 32 9c 83 14 53 2c b5 ce 1a 21 0f 5b 62 d0 62 d9 ae ef ec 55 3e c5 ae 3e fe 88 6c f7 dc cb 7e e2 b8 14 f5 87 c7 ff 93 d1 be 2d 73 a5 84 cf 04 6e dc b6 81 Data Ascii: 0P%NsZ)0&8g2Ef9p[0x\un-D7r:{T1n 8C0S\|+Ry/6!!1I@p0?7+z+p7UDSp*5ej5;w/ly5!6TSa^j:2S,![bbU>>l~-sn
2022-05-23 16:46:57 UTC	76	IN	Data Raw: 19 d0 6a ca 62 b0 71 3b 8e 4d e8 f1 6d 20 6a db 29 51 28 4c 1c 14 38 8c f3 b5 91 59 df ee 71 6b 29 c5 f9 e9 7d 71 72 1c e5 a3 89 7f 7a 68 00 56 07 f0 66 15 a1 16 23 8c b0 e6 ab 7e 83 5d 3b bd 84 a1 d6 96 24 96 08 bd 0e 66 af 85 af 72 34 92 7c 57 6f b0 f8 92 c7 a3 0a 1e ae da 6a 44 b4 8e 24 ee b8 05 d8 24 f4 f7 8d 88 0f 85 c5 86 bc 0d c7 a6 91 29 39 1b 0f d7 49 87 a3 6e 35 40 ab 19 6c 95 47 77 52 0f 00 91 d0 99 bb 3e dc bc 25 2c 0f 71 ed 3c 24 56 6c 6a d7 9e c0 83 62 ce 6b 45 5b 99 1f 16 b6 a1 70 4e 4c 59 69 c0 1b b4 0f 8f 9e 19 83 40 ab 89 ad e1 7b 47 c4 62 29 6b 37 ee 6c 71 4f b2 50 5f d0 a0 99 cd 13 4e 83 93 82 2d 3e dd 12 e7 8b f9 e7 25 49 72 c1 98 41 c4 57 d0 c9 34 8f 52 f0 29 13 cd 36 79 fc fe d3 3a 40 4b 5b 05 12 3d 46 41 d0 e3 14 86 99 40 da 3f 0e Data Ascii: jbq;Mm j)Q(L8Yqk)}qrzhVf#~];$fr4\|WojD$$)9In5@lGwR>%,q<$VljbkE[pNLYi@{Gb)k7lqOP_N->%IrAW4R)6y:@K[=FA@?
2022-05-23 16:46:57 UTC	80	IN	Data Raw: ee 25 f8 8c 52 ea e0 2b 33 0f c8 f2 87 f4 8c a3 be 31 66 15 07 a2 9f 82 cf 0a 8f 2d 4e b0 e0 fe 12 ac 61 66 3a f3 67 82 c3 64 63 31 79 bc 00 2d 00 a9 73 56 e6 77 2e 57 7e e6 93 12 87 75 f2 9f 26 9d 39 e0 5f 4c 4a 09 be 05 dd 55 76 40 85 1a e8 75 82 45 3f 5c eb b9 e8 70 e6 a8 94 76 a1 be df e6 02 fd 9c 61 d4 0b d1 d7 5e 3f 3a e2 3b f4 8f b0 9b 3b d8 d7 d2 b2 36 46 47 7a ad 85 4f 2e 3d 76 c8 c8 69 7c 7d 09 de 88 df ac d3 30 cb 33 27 e4 26 dd db c8 57 9c 26 cf 8a c8 d7 ff aa cf 4a 08 43 94 71 f0 7c 85 47 01 49 79 f5 0c ef fc 08 03 39 73 c9 87 52 0a 20 e2 45 ea ca e3 4f e2 2b 5d 6c 1b 87 7b 5e af bc d5 09 01 fc 9f 3f 19 df af 04 9a c7 e3 51 30 a0 98 43 e5 6c ae a3 cb 15 63 66 3f 74 13 26 c6 d8 da 75 11 10 64 d0 9b 77 96 e8 7a e2 ef 94 b4 59 83 da 82 3d b7 25 Data Ascii: %R+31f-Naf:gdc1y-sVw.W~u&9_LJUv@uE?\pva^?:;;6FGzO.=vi\|}03'&W&JCq\|GIy9sR EO+]l{^?Q0Clcf?t&udwzY=%
2022-05-23 16:46:57 UTC	84	IN	Data Raw: d5 26 01 63 34 39 2e 36 d1 d6 47 db d7 94 9d 36 41 9b e5 24 1b b0 c5 3c 9e 17 a0 f4 08 5d e6 7a a1 41 ea da 6a 03 8e ef 9a a3 3f d2 e0 6e 5a 60 f6 e1 2c a9 8d e1 09 99 1f 9f 97 65 53 39 ff a5 4c 08 03 bb 24 76 65 ba 26 df b2 bd 51 0b 27 06 0e f6 6d b0 a9 57 22 e6 cd 97 91 7c dd 44 aa 3f 55 33 6f c4 d0 29 2d 27 63 76 e6 e5 12 4f f1 b9 fc 4e 32 5d 8d 10 5a 28 7c 7f 1f 17 09 6b 95 5e e4 29 3d fe 55 2b 0d cb 6d 0d c1 b9 6f c0 69 7e 88 df bf 8d 5d 89 3d 18 0f 95 ea 77 e7 6d 23 29 4d 98 65 de 11 59 fd 15 52 c6 41 f2 7e 60 66 c9 84 cc c9 d7 7c 76 41 2a 56 94 6c 72 a1 aa 97 d3 04 e9 a2 28 a5 5c 6f 28 bc 29 be 04 fe c9 54 cd 1a dd 65 93 c5 ba 99 55 5c 30 82 6a 9c 29 70 8b 24 1c c9 31 e0 f7 1b e0 2f c8 47 49 85 07 9b 2a dd 63 2c c0 c9 44 d2 50 39 d5 ac d3 31 23 25 Data Ascii: &c49.6G6A$<]zAj?nZ`,eS9L$ve&Q'mW"\|D?U3o)-'cvON2]Z(\|k^)=U+moi~]=wm#)MeYRA~`f\|vAVlr(\o()TeU\0j)p$1/GIc,DP91#%
2022-05-23 16:46:57 UTC	88	IN	Data Raw: f7 ae c6 5f da 0e 93 a3 e5 81 be d8 5d ed fa 29 0b 6f 98 3f 4a 7c 79 1e b6 1a 74 d0 5f 81 13 fe bc c7 40 db 9c 0b ba a1 75 49 a9 85 00 74 72 0f d0 7c 0d a2 b3 b4 7e 75 a0 ec ac 6f c2 a3 66 7a 34 21 a9 c1 15 df 52 85 af ed 4b a1 c5 4c c5 10 0d e3 ce 7d e9 9d eb c5 e0 6f 39 6d 52 ae 97 c4 2a 47 b8 24 77 5d 1b 06 8f 5a 4f 23 83 b5 c9 79 36 05 46 f8 0e 1c 45 29 ab 75 00 11 d9 a2 42 6d 01 90 ed 35 97 33 4a 10 da 9d 76 db e0 a3 da 86 93 6f 12 91 a8 6b c4 f7 36 fa c8 2c 03 32 e5 bc 40 71 1c 31 e2 08 0b fb ad 1f 09 69 5a ae d0 d9 ed 5b 2c 2d 4b cb 88 4b 2c 91 c0 75 5c ec 4d 49 01 78 bf 89 b1 c5 34 a9 20 76 f6 ed ea 2c de 9d 25 8c a3 d0 93 b5 79 1f 6d d3 76 16 51 3d 02 fb 6a 77 cf da 35 f2 3f 56 43 b9 54 9a 39 7b 14 d3 b9 fd d4 13 87 3d 55 47 76 0e 01 3f 29 80 1b Data Ascii: _])o?J\|yt_@uItr\|~uofz4!RKL}o9mR*G$w]ZO#y6FE)uBm53Jvok6,2@q1iZ[,-KK,u\MIx4 v,%ymvQ=jw5?VCT9{=UGv?)
2022-05-23 16:46:57 UTC	92	IN	Data Raw: bf ef 09 76 8f 82 a2 fb b6 47 62 6a bd 99 60 17 b1 b2 6a e8 20 72 48 d9 98 4c bc d5 53 fe 43 5e de c2 f6 db 37 bb 41 e8 0f d5 34 b7 c3 cf 04 e4 23 45 b8 37 16 6d e7 21 5a 16 f8 88 f9 81 c3 dd e6 9b 9e e2 ba 6d f0 62 49 34 f3 79 9d b7 4a 54 39 ea eb 5f 73 34 15 42 fe d5 ca 29 45 38 f0 78 08 d3 8b 1c 33 84 3a 88 2f 3a 6e 99 62 3a 7e 45 ea 0f e4 ac c3 2b 79 e3 65 d0 ab 32 68 94 02 a0 12 35 f1 3c a7 d4 aa 71 c9 07 4a d3 ab bf fd cd bb e9 84 71 b3 b4 b2 b0 72 cc 5f c9 a4 a7 0e a3 b5 bf 23 d5 fd bf 03 53 f4 52 d2 b2 e9 ef 13 a3 22 f1 b1 94 c8 c8 39 35 e3 be fc 2a fd be a0 81 8e e6 6d 48 3c 8c 7b 5e 01 7a 00 e5 4d 46 1a 19 71 a3 79 be 83 48 19 9b b8 ef 42 6e 9a 0a 9c cd 78 3e 31 0e b1 bc 09 2c 65 27 b3 9a ee 41 af 0e fa 0e 95 48 4a 00 c7 bb d8 60 86 e6 55 e9 56 Data Ascii: vGbj`j rHLSC^7A4#E7m!ZmbI4yJT9_s4B)E8x3:/:nb:~E+ye2h5<qJqr_#SR"95*mH<{^zMFqyHBnx>1,e'AHJ`UV
2022-05-23 16:46:57 UTC	95	IN	Data Raw: e1 bf 77 cc 70 ed c3 6b 55 7b 7f f0 a8 20 f6 c7 8d 52 69 3c f3 f3 04 99 11 b3 e2 fa 4f 63 fb 4a 59 44 33 0b 5e 42 ce 3b ec 14 39 29 fd 34 5d e9 5f e0 9d af b0 0e 27 51 6b 20 d8 ec 1e 9e 88 2f 1c d4 da a1 e4 d2 d5 5b de d0 d9 27 11 f2 d3 5c 7c 87 3c 01 38 d9 57 54 e4 a5 c3 e0 9f db 90 6a 98 a1 6c 34 31 23 e2 31 3c 1c 89 5b db 3b 99 28 dc e9 87 53 cf 47 cc c9 25 9a be 4f b6 91 ca 21 cf e7 98 9f 81 bf 38 c3 1b 84 0c 8e dd eb 9c af 9b 0b ed 85 a4 d4 5d 8c 09 dd 73 61 cf 7f 26 88 b4 88 6b 96 04 f1 ae a2 be c1 49 5e af 62 0b 43 ba ae 1b df 80 d8 3c de df 65 ff bf fa cf 7a 8f b3 25 43 61 0a fa 3d 7f 13 7e 19 f2 72 49 c5 18 b2 38 2e 29 0c 1a c9 7b fa 7b eb b2 6d d5 15 3a bb 62 c4 5d e2 7b f2 12 79 1b 6d 73 cf 9f 18 93 2f c1 7a d8 a1 f2 8c 99 a2 ad d3 7f 65 1a 2d Data Ascii: wpkU{ Ri<OcJYD3^B;9)4]_'Qk /['\\|<8WTjl41#1<[;(SG%O!8]sa&kI^bC<ez%Ca=~rI8.){{m:b]{yms/ze-
2022-05-23 16:46:57 UTC	100	IN	Data Raw: 48 ba 9d 8f 11 cc c0 1c 59 20 45 10 42 2f 90 3b 60 f0 8c 98 67 00 b0 47 18 60 f0 18 69 31 34 90 14 8c 48 f2 f7 ce 04 30 65 99 5b e1 a9 e8 31 a9 43 e8 62 1d 87 95 45 52 24 04 9c e1 09 46 bf 64 6b d9 fe 71 32 8e ea d5 7c f9 30 f1 78 c1 2d 46 09 57 61 45 a4 5f 1a 1a a9 92 a4 e7 bc b8 29 e6 41 89 32 34 b6 03 f8 ee f8 75 49 0a 59 ec d4 57 90 a0 a3 4e ee 82 10 a8 b4 e1 0f 9c e9 b2 fd ee 51 8a ab 45 29 0a 1b 98 1d 70 c8 9b 87 36 55 75 16 b8 9f a7 ff d2 9f 50 43 da ad 50 8d 80 49 86 42 b9 9d 8e 37 60 84 53 af 83 a3 22 06 c6 99 89 bd fc 20 d9 3b bd 0f 38 b8 9c 45 fa ea 49 fe fd bf 16 43 e4 74 7c 05 67 6f c7 3a 6b ab 33 cb d1 cf f4 29 d7 6f d2 a0 f7 46 fe 63 19 a2 f4 33 af 59 cc 16 62 d3 b9 d2 e5 c0 fe f4 f6 a1 9b ef 3c b8 b7 bd 25 23 6e 8d 59 ec bd 81 07 8a 5a 8b Data Ascii: HY EB/;`gG`i14H0e[1CbER$Fdkq2\|0x-FWaE_)A24uIYWNQE)p6UuPCPIB7`S" ;8EICt\|go:k3)oFc3Yb<%#nYZ
2022-05-23 16:46:57 UTC	104	IN	Data Raw: 35 8a c6 5c f2 41 fe 09 5d 61 99 a6 c5 52 5d de 1b c4 85 7e f3 ba 03 72 0d 2a 24 33 d2 a0 46 ed a0 cf 84 54 c9 1b 6b 7c dc ec d6 b3 fe cc a4 1b 99 1f 96 cc ad cf c4 d4 c8 a6 91 7d 17 1a 06 4e df 55 8b 7e 10 3c 23 92 c2 70 c5 d7 0c 98 c9 ac 41 e4 3f 12 d1 16 63 45 91 0f 13 cf 09 d5 ab 45 51 e1 dc a3 59 44 76 7c 53 17 9a 1f 7d 3d 27 89 86 5a b8 e5 6a 42 61 b8 5d 76 4d 0b 4b e5 a7 2e 41 07 1a 91 05 b1 33 c1 f2 0c 4f 7a 67 10 6d 30 67 f9 8f c3 7f 69 ee eb db cb 5d b7 e2 18 94 af 8f 66 78 52 8e 9c 1a 70 95 b5 7c d9 4f 27 1c 38 88 39 b1 d5 15 e0 9e a0 84 59 b0 45 17 60 73 75 59 2c bc f0 9d 87 27 bb 51 19 9b de aa d7 ff 1a 87 f7 e0 19 cb 33 ff 62 70 fb e3 6b 5f 93 04 55 84 92 31 16 02 17 95 1a f7 1d 16 47 77 d2 ad be 9f 98 98 66 64 26 f9 50 a2 44 38 7d 92 f6 12 Data Ascii: 5\A]aR]~r*$3FTk\|}NU~<#pA?cEEQYDv\|S}='ZjBa]vMK.A3Ozgm0gi]fxRp\|O'89YE`suY,'Q3bpk_U1Gwfd&PD8}
2022-05-23 16:46:57 UTC	108	IN	Data Raw: 42 e4 3c 6a f7 f9 07 5a ec ef 5e bf 0d ba fc 19 0d 4d 55 80 ba 3c 44 59 af 90 3c 62 7e 7a 1d d2 7f 47 ca ed ac e5 06 c9 73 c2 d5 02 b3 48 07 13 22 f7 f3 05 6d 09 cd 18 0c 51 24 cd ed 64 e1 02 7b 9e 44 b1 a4 63 c2 b4 c3 a5 9f 8d 61 7f 1f e1 ad 66 8a 67 72 31 0a 84 1c b4 65 66 86 43 c8 e5 dc 44 2d 32 b3 a0 c7 fe ef 01 11 84 a0 6a b3 06 d6 ba 93 99 46 d1 1d ea 61 97 8b 5d 3e 50 70 f0 97 46 6c 60 00 27 c2 06 c1 e4 87 f3 16 ac 62 1b 23 a3 17 79 e1 4e c3 31 1d ac c5 35 0d e9 d9 75 45 f3 11 2e 07 45 72 6d b8 54 80 53 3c 3c 9c c8 fd 4f 37 ab d0 fa d6 c0 9a f8 39 4e 01 5e 38 dc 5d 17 a7 8f 36 d2 94 79 de 88 4e a6 21 21 64 32 6d 88 a5 bc 73 de f2 38 3d 8a 0a e9 24 a9 92 6c 49 ea c6 bf 7e dc 23 69 71 fb 0b 09 75 e5 df 36 c2 20 7f 22 95 3d 95 3a 5f 85 09 7c db 3c 0d Data Ascii: B<jZ^MU<DY<b~zGsH"mQ$d{Dcafgr1efCD-2jFa]>PpFl`'b#yN15uE.ErmTS<<O79N^8]6yN!!d2ms8=$lI~#iqu6 "=:_\|<
2022-05-23 16:46:57 UTC	112	IN	Data Raw: 2b da 77 5a 5d 38 51 b5 e4 14 7b b7 c5 75 c0 c6 f4 b0 bb ef 71 bb 63 55 fd c5 ec ac 54 cb 19 bd 84 67 3c 83 ea 67 45 d9 30 cf 8f 1a ed 4a 87 4d 90 d3 3d 29 06 6d 83 d2 45 6f 4c 3d 3c 28 87 eb 3c 73 66 27 0b 77 01 a9 4d 1a 40 4d d6 60 02 f0 bf 87 28 e0 24 fc 6f 70 4a d0 4b 04 33 c4 aa 24 7d e7 56 d4 84 7a 85 29 77 a3 da 67 d0 84 76 60 2f b4 af 09 9b 07 f8 bb 14 1c 17 a4 60 12 ec c8 1c bd 0a 9e e0 a4 40 87 44 2a 11 40 72 7b 0d 9a ae 7b ab 7e 3d f0 85 db 8b ca 74 61 c3 4f ef 6b 35 cc cb e0 91 85 96 2b 68 0d 15 24 3a 02 2a 8e 27 91 84 0d eb e3 0d c8 f6 a1 c6 67 36 38 4e 37 ab b9 6b 43 48 46 ce bc 17 e9 de da 86 36 85 70 dc 80 5b c3 61 3b 06 41 1d 47 63 af 27 10 77 a5 6a 6c ae 26 0d 20 cc 15 59 58 72 4b 77 5b c7 ba 46 f9 e5 80 42 8b 1a 4b d6 2e 74 ee 6d b3 95 Data Ascii: +wZ]8Q{uqcUTg<gE0JM=)mEoL=<(<sf'wM@M`($opJK3$}Vz)wgv`/`@D@r{{~=taOk5+h$:'g68N7kCHF6p[a;AGc'wjl& YXrKw[FBK.tm
2022-05-23 16:46:57 UTC	116	IN	Data Raw: 27 b1 82 fb 1f 99 0e 9c d6 95 1b fd b1 ea 69 9f eb 17 90 5c ae c0 9c c1 71 99 73 c1 f1 e4 be 28 ce ed 99 37 75 a9 cb 29 75 c5 51 03 08 52 fa cc 80 33 d5 45 da 68 39 0f ab 51 e7 4c dc 5a c1 41 8d 49 f8 df 78 25 de bb 0b 10 25 96 39 26 ad 43 22 0d 93 3c c1 57 f4 c7 3b f6 e3 3a 12 93 af c7 cf a1 19 68 14 95 72 bd 02 37 f9 c9 a9 57 cc 2b 78 ef df 96 2b 77 10 ea 43 44 ad 63 38 91 4f 50 4f 71 31 1b 51 fe 1d 21 37 52 fa dc 72 89 fa 17 bc 7c 81 f6 5c 6d 17 78 88 7f 98 2c 3d e0 f1 c9 41 22 6d 5d b8 b7 1a bd 7e 1d 0b c4 e2 76 b0 4a 89 bb 4a 9c 56 ef ae 78 fe 08 8e c5 59 8e f4 6e a7 7c c9 3f 72 38 61 7a ca ec d0 26 3e c9 1e 14 84 e4 df 2c d9 75 9b 83 4b d8 0d 2d a5 0b 6a bc d3 18 27 96 7c c3 04 cd 21 d2 ea 5f 1f df 53 2c 36 7a 56 01 21 e1 77 68 42 5c 02 bb 7a 10 b6 Data Ascii: 'i\qs(7u)uQR3Eh9QLZAIx%%9&C"<W;:hr7W+x+wCDc8OPOq1Q!7Rr\|\mx,=A"m]~vJJVxYn\|?r8az&>,uK-j'\|!_S,6zV!whB\z
2022-05-23 16:46:57 UTC	120	IN	Data Raw: 54 21 c3 4d 16 52 a7 50 35 7a 6f df d3 61 1c f4 74 3c 99 29 72 57 f5 a7 bf a9 98 ee b1 48 5b 08 86 70 3e 3e 2a a4 4d 03 f3 fa 21 97 97 94 cf 30 38 83 da 7e 04 17 01 65 4e 51 6f 7b f4 eb 50 c6 0a da 69 37 e6 a3 53 1d 8b 05 a0 4b b8 08 e3 c8 13 6e 56 bd d8 53 1a 3c 61 2f 17 cf 67 d6 3a 92 6e 07 0b 1e 32 ba f1 38 0a 2a 21 21 8d 26 7c 5d c5 58 fc b8 21 db 5f 12 84 db ff 55 b3 dd 2b f5 9f 70 02 c9 7c 71 b6 f1 70 e4 7b de 80 81 a4 9b 80 77 54 6a db 25 9e 49 30 7a 33 57 e2 ba c4 63 7c 5f 16 4e ec a9 a4 c1 68 95 ba 44 3b 06 e5 e1 74 e7 c0 93 7e df 73 5b 62 91 da 6f 00 7b 63 a2 f5 1a f4 00 4a 19 c0 0c 2f cb 28 46 65 12 e4 6c 01 8e 87 37 9b 64 24 15 de f9 98 7c fe 40 91 b9 d5 d9 ab 47 39 94 16 59 91 94 af e0 66 e6 22 a0 ef 38 ac 9f df fc 3a f2 f7 29 f4 87 b4 e0 b8 Data Ascii: T!MRP5zoat<)rWH[p>>M!08~eNQo{Pi7SKnVS<a/g:n28!!&\|]X!_U+p\|qp{wTj%I0z3Wc\|_NhD;t~s[bo{cJ/(Fel7d$\|@G9Yf"8:)
2022-05-23 16:46:57 UTC	124	IN	Data Raw: 9e 59 7e da f7 ef 13 ff 61 05 0b a5 05 28 82 02 71 26 45 6a 32 0e 76 6a 44 0e 7a 00 1b 30 71 a9 9a c6 ff 3c f2 33 95 cb 8d 91 cf 9f 80 b4 30 b8 e7 78 cc 3c e2 02 93 19 6c c7 43 f3 9c 35 57 ad ab 72 0b 20 12 dc e4 3e da 78 7d ae 06 f7 fe 08 cf 3e 18 74 82 a9 2d 0a 3c fe d3 36 af aa cc 56 f6 8e 82 4a d4 f5 cc b4 11 73 9e 09 cc b6 89 bf 31 3a d5 f8 9c 32 9f 89 1a 9e a2 12 58 12 e1 6a c2 78 c2 6e 43 19 dd eb e7 25 e5 8a 90 d6 bb 74 be 31 4e d3 24 73 1d a1 73 d5 76 70 55 86 00 ec bc c0 ee f0 fa d7 52 1e 04 0b 44 e9 95 f1 61 eb 13 96 4e e6 1a 05 96 6c 89 7a a5 0d 58 6d 81 66 6b 62 82 7e c6 46 a4 a1 8e 24 1e 0e da 3e 08 99 f6 2c 21 8e e4 b1 01 28 08 03 47 e0 26 f2 6c 93 37 ba e9 8c aa 52 e2 fd ac 90 b4 14 fa 3f 9a 4c 53 85 b9 52 da 3a f8 4d 9f 97 15 2f 04 89 d0 Data Ascii: Y~a(q&Ej2vjDz0q<30x<lC5Wr >x}>t-<6VJs1:2XjxnC%t1N$ssvpURDaNlzXmfkb~F$>,!(G&l7R?LSR:M/
2022-05-23 16:46:57 UTC	127	IN	Data Raw: e6 fa 00 f6 d2 00 d0 37 94 74 e4 ec ac 73 89 80 7d f2 bc 0d ff a8 90 ae b2 5a ab 96 b1 6c 05 93 40 3a d1 69 af 59 41 49 88 47 6b e4 df 6d 34 9c 00 e2 33 4c c0 1b 51 f9 bc 97 72 65 f4 ee 24 2c 9d 4a c8 69 29 03 54 86 be 61 7e dd ec 00 ff 88 06 7f db e7 20 96 05 24 10 81 e1 41 7a cd 00 6a 6b 8f 2a 76 28 ec 8f 3b f3 d6 72 2a 22 5e a3 a1 8c 34 a8 83 57 9f af 26 dd cf 07 77 7c 37 cf 3f 58 12 cf 4c 2f 7a 81 29 40 89 0c e3 3e d6 b3 4f 44 7f 27 ce 04 a9 b0 8a 79 b3 ac 81 b8 13 0d f6 a7 07 37 ca 69 3d 87 a4 57 37 8e 27 a9 0d 59 b2 2e 98 dc e6 a2 d5 25 36 42 57 e9 36 92 41 4e 69 5c 4c 37 c4 dd f4 61 68 dc 85 ff a2 36 5b 70 12 53 66 ee ff 7b 0c 0a 47 21 5b b6 a5 b2 62 d2 78 00 ad df 9e fe a9 4e ed b2 cc 8b 7a da eb 60 44 9d 37 f5 c9 ba 3c 83 f9 c5 35 79 1a a5 93 5d Data Ascii: 7ts}Zl@:iYAIGkm43LQre$,Ji)Ta~ $Azjkv(;r"^4W&w\|7?XL/z)@>OD'y7i=W7'Y.%6BW6ANi\L7ah6[pSf{G![bxNz`D7<5y]
2022-05-23 16:46:57 UTC	132	IN	Data Raw: b0 dc d4 e4 0e 64 e0 3c a9 e4 20 8c 46 6e 89 bc da dd 4c 9c a0 6f 03 7b a3 30 62 28 9e db d7 1b d7 5d 70 6f f4 25 24 c8 a9 23 99 cd 2e 5d 79 4d 26 5b 06 77 c7 f8 c5 c9 88 eb ca b8 2e dc 8c 77 a3 c5 c3 6c 8f c7 fd 40 65 27 f3 0a 5b fd b4 45 3b 29 65 20 d8 4c b5 a0 95 b6 55 21 24 66 82 af b1 a6 80 72 2d 66 ba a8 54 f7 de f4 87 6c 38 4a f6 14 4c ac a8 45 73 5f f1 51 f3 6f 28 f1 53 4b 72 c0 4b ab 94 ab 35 4c 98 f6 9c e3 f7 59 b1 b3 22 5c 5c 7c 05 17 cf 8e 47 89 24 8c 48 ec d6 63 5e b2 a5 d0 93 b6 fb b2 c1 4d e4 4f d9 58 26 fe d2 58 c4 6c cd 82 e9 75 72 fa 4d e9 92 ec 0d 1f cc 3f cf 84 61 b0 bd 1e 79 8c 67 c3 99 9c 5a 6e c9 7a 16 09 9e af cd 3f d4 69 6a d9 98 0a 69 7b e1 77 b1 16 d9 41 00 7d ef c3 1e ef 2b 9b d1 ef 1d 0f e3 6e b5 7b 3a bc e8 46 37 0c 89 77 e0 Data Ascii: d< FnLo{0b(]po%$#.]yM&[w.wl@e'[E;)e LU!$fr-fTl8JLEs_Qo(SKrK5LY"\\\|G$Hc^MOX&XlurM?aygZnz?iji{wA}+n{:F7w
2022-05-23 16:46:57 UTC	136	IN	Data Raw: 04 1e ef f5 ec b7 26 63 fc 7a f3 02 97 c8 68 87 c1 7a 16 f3 71 49 3c 56 ec ed 32 09 db a1 a8 ee 47 3a 70 ff 17 27 e0 a3 72 68 ac e6 0b e2 08 e9 9b 77 1a 4f a2 64 1a 01 5f ff ee 75 5b b4 89 8e de e5 69 00 b7 04 04 8a 45 cf ba 53 56 c1 94 2f 48 fb d5 ad e6 fe f7 04 76 d1 a3 a1 df 34 9e 30 76 00 14 ad 2d a4 50 03 c6 bb 8f 50 48 6b ab a7 bf 47 ab 57 4a 8f 6d 13 a6 45 ce 94 a2 e3 82 b0 c4 64 85 e0 04 94 8b fe 3b 71 5d bb f1 72 3b 35 6b bd 8d d3 e5 39 14 6f 66 ba b4 5e ec 8e 2b 6a e7 5d c1 7b ec f3 36 cd 18 05 99 34 23 2a 9a 72 7e 0d 22 d6 60 50 ff 84 a0 97 ae ed 33 5f 21 f9 a2 d7 30 54 67 99 a2 d8 f1 2c 98 22 f8 ea 10 c3 86 96 01 0d a3 e5 de ee c9 88 63 93 a0 58 a9 de 95 97 31 b4 f8 8d 46 06 5c a3 1d c0 0b f3 10 39 e1 4f da 11 51 96 88 a9 45 9b c1 9a c2 4c 65 Data Ascii: &czhzqI<V2G:p'rhwOd_u[iESV/Hv40v-PPHkGWJmEd;q]r;5k9of^+j]{64#*r~"`P3_!0Tg,"cX1F\9OQELe
2022-05-23 16:46:57 UTC	140	IN	Data Raw: 96 8d dd 5e a5 f3 dd d3 37 88 e4 51 51 42 42 8a b6 c8 ca 44 ca 01 53 ad 0e 18 44 fb 7e 15 13 3b c7 6b 0f 76 6c eb f5 da 51 1c 30 f7 af 03 e5 14 ae 7c f0 b1 76 af 80 aa cd e8 ea aa 04 9b c7 bf 13 89 f5 68 0b b2 2d f2 a5 0b 7b 31 b0 e7 32 92 e9 4d 63 1c d5 aa 2c 83 f9 a0 41 aa ff 2a 7f df b3 a0 56 1e 21 05 87 1f 01 b2 d5 bb d7 6a d4 39 ac 38 d0 1e bd b9 46 60 38 91 8f bb c6 c0 96 25 71 06 a6 56 fe f8 f3 ba 75 5b 47 1a fe 78 de 1c 15 07 cf ed be 28 14 65 40 a7 7e a3 65 18 76 3d a3 b7 63 10 be a2 91 62 5b 47 df ca b8 30 f7 75 d8 1a 85 c5 7e 76 9e d7 b6 36 c6 03 a9 70 0f a9 61 51 bb b2 7e 9b eb 93 67 75 61 c2 0b d3 32 ed 82 ab bb 6f 68 f9 e6 cc 3b 39 fc 4f a8 ea 4f cb 4e 01 c5 d4 89 3c c2 fa ae c2 a4 43 43 2d b3 37 24 7e 4e 67 6a ce 72 41 72 7d 1f 23 d1 16 72 Data Ascii: ^7QQBBDSD~;kvlQ0\|vh-{12Mc,A*V!j98F`8%qVu[Gx(e@~ev=cb[G0u~v6paQ~gua2oh;9OON<CC-7$~NgjrAr}#r
2022-05-23 16:46:57 UTC	144	IN	Data Raw: 80 5c 21 6f 70 4f 81 3b 26 bf 94 c0 9f ab cf 51 3f d1 a3 60 79 8c aa a7 85 08 fb 21 1b 2d 6f c9 dd 1e ca 0e 85 44 10 7c 45 14 79 f8 25 f5 96 4f a7 78 3d 9a 79 94 ec e8 28 93 02 76 ce 17 8d 6d dd 13 6c fc 34 ec c2 10 76 b0 e7 eb 9f bf 43 00 c8 7f 5f c4 68 76 09 86 2e 30 ce 60 be d7 bd f7 8e 0d 4a 24 ca b6 f6 45 1d 0d 6a 37 a5 0a 2d e8 ad ea e1 05 ca 2d 21 a8 43 15 c2 66 ee 17 fa bd a9 86 92 4e c9 78 07 50 52 db 2d 71 a3 8e 37 6e 03 69 76 10 63 3b d8 60 b3 6c a4 d2 d6 46 20 91 0b e2 ab 5d da 93 e0 db fb 11 61 8e 5f 25 e0 82 8b 61 a5 cd 88 b4 00 27 26 30 ca 12 44 16 5b 2b 77 4d 7a a4 2b 75 ff 28 13 b0 e7 f9 6c 14 ad 63 cd 52 a3 79 f1 cd 1a 64 b3 a6 0a 7a 40 34 16 85 51 7d 64 5f fc f5 4b e8 a9 fd 83 59 84 4d 34 21 15 bb 74 fb dc 9d a6 96 d1 46 de c1 3a 00 4a Data Ascii: \!opO;&Q?`y!-oD\|Ey%Ox=y(vml4vC_hv.0`J$Ej7--!CfNxPR-q7nivc;`lF ]a_%a'&0D[+wMz+u(lcRydz@4Q}d_KYM4!tF:J
2022-05-23 16:46:57 UTC	148	IN	Data Raw: 7d 1d 4a 67 da 24 5a 8a 4b 80 a3 34 f3 61 1e cc ff 11 30 0a 04 09 3a 5f f2 88 bc 1f 79 bb b9 65 97 3c 8f 78 4a a6 5a a8 a7 8d da 03 0e 77 ae d5 0c ec a6 d6 d2 9c ea 23 0d 89 7b 7a d8 7b 41 ba c8 0f e9 26 4f 5e 9f c2 c7 ac 6a 57 74 59 d6 eb 69 4b 15 03 e0 80 7f f4 7d e5 17 8c 24 38 1c 9b 63 fe 74 3f 48 ad cc 66 ea 89 57 f3 18 c4 99 88 2b 14 6a 58 95 d6 6d d3 f8 60 af 03 39 da 08 a5 8d 30 19 9b fc fe db 57 a2 79 13 42 f9 63 76 e2 be 3d e6 1e 3f 1b 16 ea 0e 6d 77 4a 56 6e 21 d6 05 3a e1 dd 84 73 15 14 e8 88 cd 92 be a8 ef 3c 1c ca 76 45 3b 42 fe 2d 87 b6 79 35 f3 07 0c 15 43 94 ff b0 eb 00 14 ec 66 de 22 bd 58 f5 d0 84 83 59 39 08 3b ad fb 64 d3 71 68 b3 ba 45 b8 42 9b 17 18 0a 3a 73 fe ee 26 df cc ae a1 e7 6c ed e4 3d aa c1 28 ca 1a 21 cc 57 cd 54 38 e3 ee Data Ascii: }Jg$ZK4a0:_ye<xJZw#{z{A&O^jWtYiK}$8ct?HfW+jXm`90WyBcv=?mwJVn!:s<vE;B-y5Cf"XY9;dqhEB:s&l=(!WT8
2022-05-23 16:46:57 UTC	152	IN	Data Raw: bf 5d 9c 7b 34 35 c9 2a ab 1e f4 38 92 4a ec cf 24 7e 4e 91 79 30 89 88 a5 22 2d a7 3a bf cb c1 84 34 e5 12 76 87 3a 87 c3 71 6b 71 b7 23 34 a9 e8 f8 db 30 09 66 d5 a5 b5 a2 cc 43 4e e8 db 9a cd ed ca 93 dd 48 08 e2 21 0f d4 fb fc 81 b7 cd f0 9c c5 e7 9a ed f2 ec ac 4a 80 5c f1 99 c3 56 6c 93 a5 49 a1 91 06 17 23 a7 59 c7 8c 4c a2 f1 a0 82 28 54 5d c7 e3 80 da 21 4a 00 2f 8e 5a 02 85 30 bc f9 c6 91 0a 2b c0 ef 76 45 5b d4 b4 9f d0 1d 6e be 20 d7 fe 8b e8 f3 52 cb 54 ec 29 9c f7 e2 43 00 3e bf e4 cb 28 25 67 b1 4f cd 5c e9 03 0e bb 4a 8a 37 4d 10 8b cd a8 2b 91 db a8 69 58 9e 31 cd 6d 0e b5 c8 5e 8c a8 bd ce f7 70 b5 6b 6f 53 f5 d9 b1 b2 11 a1 5e ab ee 81 ee 54 3f 83 3c cb f3 1e 06 4e 0f 1f ab d7 8b 7a f5 f5 b2 15 c3 21 0b a8 de 66 2c 08 4e 6f 5f 81 68 b9 Data Ascii: ]{45*8J$~Ny0"-:4v:qkq#40fCNH!J\VlI#YL(T]!J/Z0+vE[n RT)C>(%gO\J7M+iX1m^pkoS^T?<Nz!f,No_h
2022-05-23 16:46:57 UTC	156	IN	Data Raw: 65 3a 80 55 b2 45 d6 9b 21 2c a6 53 f0 28 1d 3a 1f aa 8a bc 01 9f 29 60 25 fa 99 2b de 48 b3 22 bc a2 cb 29 d7 64 40 c3 22 d0 69 e2 b3 22 d6 c6 3f 2f 21 d7 1e 45 58 c7 b5 c1 05 df d4 2b 43 d7 ed df b0 03 d9 94 6c 6c b3 e0 44 ee 50 d8 1e b8 58 d0 8c 3c 52 08 a7 7a 43 b1 3c d9 38 29 0c 88 0b d5 91 57 40 fa a5 95 86 04 b1 e5 45 c8 c0 73 83 ad 32 89 21 ab 4a 1d c4 f4 b4 84 a4 11 ed 44 85 8f ec 43 14 11 90 fb d7 7d 84 9a 43 8f d5 0c 04 3c 26 45 4e 7f 3e 10 fb 5f 89 f3 db 1a 53 58 ac 39 f1 5d 7c 4a 61 43 91 a3 2a 51 16 59 6d dd e1 39 99 31 af f6 cd a8 ba 70 cd 88 ff da d7 e9 12 33 d6 8c 8b b1 87 90 ca f8 55 5f 59 19 8b 57 be 00 d7 81 c2 b5 4e e8 34 3a 27 4d 76 b9 dd 34 17 28 1b 2e f2 af 50 20 9e e4 e2 5e 58 c6 3f 5f ee 8a 92 1a 2d bb a3 36 4b d5 89 a9 1b 77 29 Data Ascii: e:UE!,S(:)`%+H")d@"i"?/!EX+CllDPX<RzC<8)W@Es2!JDC}C<&EN>_SX9]\|JaC*QYm91p3U_YWN4:'Mv4(.P ^X?_-6Kw)
2022-05-23 16:46:57 UTC	159	IN	Data Raw: 6a 89 35 43 3c 7b a4 44 1d 38 59 44 c5 fd c2 99 47 a2 9a 18 aa c6 a7 84 84 d4 39 44 63 64 97 75 c4 cf f1 7a f5 1d 61 50 4c d2 bc 41 0e 05 d9 e9 0b c5 11 d7 cc 25 9c 91 85 ec 83 5d 14 c5 4a fe 57 81 9d 55 07 d1 a6 78 a9 11 52 be cb f2 92 ed cb 8e c1 b5 f9 37 f7 63 c5 a6 30 a9 93 b3 c5 90 cd fa 32 83 09 7d 7e f6 f6 e9 19 01 64 65 4d 77 26 5c b8 fd 5e ec 41 9a d9 66 b5 b8 34 1d e9 cf e6 a4 5d 98 1c 06 2e 82 31 d6 1a 2f f9 42 f9 e1 70 21 2c 85 d3 09 c1 d9 fb 66 ef c0 f9 30 14 ea 4e ab cc 6b b4 33 ba a5 b2 a1 64 ef 8a 2a e1 82 b7 69 c0 be bf fb fd df ae bd 66 c2 be 9b 15 83 e5 c5 f0 a9 7b f6 ff 74 74 46 c0 93 5c 44 2a af 7c 27 f5 1b 7a 58 97 da 08 15 f6 bb db e9 24 77 4c a6 be 3b e8 b3 32 76 5c 15 ad b2 a0 e6 36 ce 37 1c 54 f7 6e 0e 69 7c 6c 1a 9d 59 fe 03 d7 Data Ascii: j5C<{D8YDG9DcduzaPLA%]JWUxR7c02}~deMw&\^Af4].1/Bp!,f0Nk3dif{ttF\D\|'zX$wL;2v\67Tni\|lY
2022-05-23 16:46:57 UTC	164	IN	Data Raw: 6c a6 f8 14 03 55 0a 7b d3 35 10 ad 9a 74 5f d6 63 35 fd f3 d9 ca b1 a1 1b 3e f5 f0 4d 03 88 2e ff c8 04 0e a2 7c 7f 71 02 1a 2e 57 a0 b3 b4 a6 38 bf 38 8c 60 95 a7 5b 2a 7a 44 c8 18 43 22 ee e7 41 f0 2f 8b 68 d0 93 f4 e2 aa ec 70 b9 44 54 85 54 b0 0d cb 27 c8 4d 7a 5e b2 34 71 a8 8e e6 3a 02 28 4a e0 e1 7d 30 bb 48 c6 ea cd 71 13 de 70 a8 ad d0 52 76 21 24 30 ef 19 94 10 e6 66 b4 a9 bd 34 c4 82 6f 1d cf 0f d4 ee 2e 4f ba a2 29 12 06 d9 61 e1 f7 35 a2 0e bb e9 50 07 70 c6 18 2b 9b 60 b9 45 ca bd 12 e1 78 cc f1 f9 fc 24 10 ee 0f f6 f9 46 3f fe 0f 54 33 88 94 ea dc ed 73 36 cd e3 64 8b b1 3f e3 bb 04 fe 06 89 d1 17 b6 8f b9 2c 46 b9 f4 ab d8 18 fd aa 5e 73 ea b8 0d b2 f3 80 2b 43 36 3a 74 ae 72 a9 11 b3 cc c1 ce 00 06 a6 5f 71 d7 29 a1 42 44 ad 87 0f 3a b1 Data Ascii: lU{5t_c5>M.\|q.W88`[*zDC"A/hpDTT'Mz^4q:(J}0HqpRv!$0f4o.O)a5Pp+`Ex$F?T3s6d?,F^s+C6:tr_q)BD:
2022-05-23 16:46:57 UTC	168	IN	Data Raw: 83 7f 43 45 dd a8 9c 58 9f 45 6b 5d 47 0f f3 ed 77 f5 17 1d 99 81 f0 f2 bc 90 3c 15 f1 4b 31 0d 3f 48 e7 75 97 37 04 2e 4c 38 97 44 2d c9 81 d6 ba c1 8d b1 8f 36 bd 80 fd da e7 94 9c 25 12 90 08 15 1f 1a b9 b1 1d 8c 48 31 d7 3b b0 6d eb 4b a8 49 0a 58 33 c3 4d 7e ac 36 d0 cd ec c8 33 ff a2 4f 60 e6 10 89 f3 b3 ec b5 85 31 49 58 49 86 22 cf f3 50 49 82 86 5b c7 46 b8 01 75 1c 27 f1 bd 88 6f a9 01 ba 7b 8a 19 32 61 42 8a 5a 3b d3 6a 63 9e 52 de bd d7 e1 41 f9 9c 43 3d 77 86 05 23 db cc 8c 93 e5 7b 43 03 cd d5 96 b1 9d ed 71 95 a0 54 d9 33 63 87 72 47 d3 b7 75 ac b5 10 ba bd 41 32 9a 01 4b 8a e3 c4 6a 51 6f 89 61 01 7e 32 08 be 88 d3 3f af 2e 3c df 00 1d e9 e1 cc 49 ab 23 e5 7b 4f de 34 81 7b 5b 38 ba 1a 52 05 a0 c0 35 47 79 6b 69 ee cf cf e0 60 76 3c 6e 1e Data Ascii: CEXEk]Gw<K1?Hu7.L8D-6%H1;mKIX3M~63O`1IXI"PI[Fu'o{2aBZ;jcRAC=w#{CqT3crGuA2KjQoa~2?.<I#{O4{[8R5Gyki`v<n
2022-05-23 16:46:57 UTC	172	IN	Data Raw: 38 ce 5d 9c 81 dc e4 4f 51 39 77 01 43 15 8c 01 3a 88 a5 ea f9 dd 80 3d 29 b8 6b 51 b5 ff c2 50 ff 1a 28 aa b6 c3 86 c6 f1 e5 49 73 e4 2f 93 4f 6c 2a b4 92 43 32 a8 23 aa 55 76 c7 9a 98 ab 81 66 95 e0 6a 55 c2 ad 9f 57 bf 23 15 5e b6 38 50 70 8c 6d 57 dd e5 de 9c 95 e1 71 d5 1c f7 d6 5a b6 a6 4f b9 3c bc c7 f5 4c a5 c0 88 cf c8 c7 87 24 7f dc 6e b2 59 da 11 5f 04 2e 0d 2b 07 27 ec d4 60 44 4e ac 0a af f8 7c 8a 1e e6 a4 d0 00 0d af 6f 5c af 2f 6a 04 c5 43 a9 cb 6b 16 41 cf c7 f2 c6 32 0c 3e 5b d2 d1 7d 48 96 24 c1 7d 30 69 c6 cd 21 c9 3f fe 37 a1 60 06 a3 ea 34 41 d7 00 8a 1a 64 7c d5 a2 94 e0 89 35 a9 92 be 73 70 5e b5 79 2a 4b f7 a2 7b 77 20 8e 2a d1 ad 32 f2 de fa ea 52 ef cc df 2a 36 b0 8d f4 2f fe b2 e0 98 e6 62 3a f4 a0 0f ce 4e cc 80 8e f7 50 c1 5a Data Ascii: 8]OQ9wC:=)kQP(Is/OlC2#UvfjUW#^8PpmWqZO<L$nY_.+'`DN\|o\/jCkA2>[}H$}0i!?7`4Ad\|5sp^yK{w 2R6/b:NPZ
2022-05-23 16:46:57 UTC	176	IN	Data Raw: cf 39 a1 3c ff 41 ec f7 38 8d ed 20 1a 89 27 34 f8 4d 94 51 44 20 3d 24 76 d9 4a 8e e7 21 cc 24 16 9c bd 2d 2a ef b0 9b a0 7a dc d4 91 07 bd 94 ce 2c 7e 93 1e 25 21 16 6d a6 ae fc 75 5c 02 b3 bc f8 5d f5 30 48 6f a6 af 74 07 40 94 25 58 4f 17 84 5c c5 68 97 ae 4f 80 6f 28 57 87 85 2a e7 7d 08 24 55 93 02 ba e3 c5 f9 f0 ce f9 a8 eb 16 8a ae df b6 5b 0c a4 b7 b0 e8 87 05 3c 23 3f c0 ef aa 09 9b b0 25 7c d8 8f da 4d dc 3d 76 97 72 b1 df 02 85 93 e4 fd 46 6a 9c a2 02 14 9a 60 a0 04 69 9d c4 96 75 b6 0d 50 be 57 3c 06 36 06 7c 29 6e 82 45 4f bb 2e a9 61 eb 1a 0f b2 ce a2 9d 1f 70 85 89 b9 18 d6 e4 b5 19 ea d2 cf f6 44 40 c8 eb 1e a0 9d 7b 84 7d f5 5b e6 01 53 88 76 c6 fb 4a 32 17 62 1c 4c 8b 9c e2 ea c2 71 dc fa c3 33 7f aa 3c 96 9d 8f be 17 09 a9 1e 35 a9 c2 Data Ascii: 9<A8 '4MQD =$vJ!$-z,~%!mu\]0Hot@%XO\hOo(W}$U[<#?%\|M=vrFj`iuPW<6\|)nEO.apD@{}[SvJ2bLq3<5
2022-05-23 16:46:57 UTC	180	IN	Data Raw: ae 63 51 71 6e 0a 57 c8 fe 30 35 1e fa ca e5 45 0a 1f 4b d6 28 14 2b e4 0f c3 31 b1 59 ac 61 01 8a 1a d5 ca 5e f1 3f 06 cf 09 97 45 3b b7 71 29 c2 c1 89 f9 f5 c9 57 41 01 a6 23 78 73 fe 01 3c ef 56 1a 58 42 7d 76 5f 41 24 89 b7 e5 23 1a 1b 70 39 27 3d b8 04 1d d0 db ab 09 99 9c b9 a9 89 d0 22 6f 17 93 bb 3a ae ab 08 ae 13 92 1d 42 1a b0 4b e8 7e 46 97 58 a5 2b 81 ba c3 12 63 33 f7 2d 2b 7d 9e a0 91 10 6b d1 ff d1 32 64 6d 09 23 80 e4 00 c7 be 5d 87 85 ea 97 6f 00 a9 e7 2e a4 85 3d d9 f4 3b 75 c1 0e cc 8c d0 22 5e a8 87 54 ca 63 dc 83 f7 92 6e a2 92 13 ad f3 83 96 31 95 65 2e 91 79 77 d0 0c 82 c3 78 67 8c cb 4f 05 56 b7 fa ca c0 ae 9e bd 68 9d 8f 70 f9 a8 f4 af cc 70 25 f2 f2 98 ca 10 ef 76 3c f7 bb a9 a0 fb 2e 3b 1e 79 39 74 45 0b ee 53 d5 3a bd 5d 7f 0f Data Ascii: cQqnW05EK(+1Ya^?E;q)WA#xs<VXB}v_A$#p9'="o:BK~FX+c3-+}k2dm#]o.=;u"^Tcn1e.ywxgOVhpp%v<.;y9tES:]
2022-05-23 16:46:57 UTC	184	IN	Data Raw: 44 31 26 35 0f 87 cb 78 06 4a 6f 27 95 93 f3 2b 33 12 6a a1 63 67 c1 68 e0 fe 81 0a 61 d5 ee f4 dc db ae 95 20 d1 4a b8 df 19 d7 ec 38 6c 86 77 5f 59 b8 5c 0d ec 9c c7 ee 46 9d a6 77 99 12 68 9c 68 15 81 78 f0 88 2b da b0 8a 80 51 48 a6 1c 85 f6 c5 1c ed b5 63 e8 c7 e2 b5 c8 40 b6 c0 ec 47 07 8f 61 3c f2 ea b1 f2 f1 84 7e 5b 59 f6 df 3d 95 b7 8d 8f 09 2b a1 5e f1 32 23 e7 77 79 a4 fa 57 6c b9 0a 46 9c 26 bc 9b d4 54 b5 e8 e7 38 4a 18 c7 4d 5d fe 84 a9 be 9f fa ea 7f 90 04 d7 6c f7 d2 14 6a 0a 68 c0 9f c6 5e 12 d9 36 26 fe 78 6d e8 ef 42 75 af f8 c8 89 d4 63 e4 aa e3 e7 6f 3a f1 32 e1 9e 03 8e 47 d5 80 22 bd d0 36 4e 08 84 17 88 32 00 ed 2f 2e 1a 9f 14 40 83 fa 60 65 fb f8 47 a8 b3 8a d1 7f a5 d3 40 36 3e 16 81 0f 04 9a d6 15 18 2f d1 9f 8b 49 bf 3b bb 57 Data Ascii: D1&5xJo'+3jcgha J8lw_Y\Fwhhx+QHc@Ga<~[Y=+^2#wyWlF&T8JM]ljh^6&xmBuco:2G"6N2/.@`eG@6>/I;W
2022-05-23 16:46:57 UTC	188	IN	Data Raw: 50 e7 cf 65 02 0b b5 2f 77 08 08 3a a6 7a 81 b5 06 29 96 73 e2 00 44 c8 fe 8d 5b 0e 2d ba b6 7f 51 58 1f 1e ce d0 a8 4f f1 2a 60 93 3f 34 37 50 e0 c8 e3 95 a5 5e b8 14 28 95 94 d7 37 04 84 a9 d0 43 72 bd 0f 4a 2b a1 e1 e5 05 b3 21 24 f3 1a 27 44 86 8e 3d a0 dd 73 23 e2 61 64 d3 80 eb 68 4a 94 3b fb bf f9 35 b9 fc de ab a9 43 85 8f 98 19 f8 4d 30 d6 e7 41 0a 25 d8 68 d4 23 e0 1b b7 ff aa 24 97 fa a8 40 0c 73 1c 87 be 32 b8 61 8c b2 1b 58 ec 49 9a 0f d3 d4 21 5c 9b aa 14 4e 11 4e 51 9c 52 6f b7 27 66 39 fc 37 84 c2 0a f4 98 1e 11 f6 5c 02 17 21 bc 9c 16 db ee f5 f7 af 25 d3 3f ff 0f 39 92 9b 27 19 29 8e ee d4 06 aa 6b 79 b6 d1 83 01 5d 58 04 ce 8d 52 a1 0f f8 de 0e db 7a d1 7b e7 f0 04 2e 9d c9 cd 22 1c 8b 22 72 be 89 36 3c 4f d2 e6 a4 50 38 a7 87 97 92 b5 Data Ascii: Pe/w:z)sD[-QXO*`?47P^(7CrJ+!$'D=s#adhJ;5CM0A%h#$@s2aXI!\NNQRo'f97\!%?9')ky]XRz{.""r6<OP8
2022-05-23 16:46:57 UTC	191	IN	Data Raw: 14 5d bd 87 c7 85 c3 19 98 5b 44 30 0a 5a 6c 43 66 d4 76 6f df 5e dc fd 8a 27 19 cd 02 6a f6 1d 01 52 f6 09 19 de 88 eb 8a 09 41 e2 be 4f c5 8f f2 e2 2b 92 47 92 f1 de ce cd 70 20 ef 78 93 78 2d f8 f3 c6 33 e6 d6 19 f3 47 bc 22 f9 0a ed 76 95 13 05 ef 59 b0 d4 25 ca c5 6c 48 53 95 f8 21 b0 70 ef cd 95 e2 14 07 7c 37 a6 c0 ee 6a f4 71 68 f7 b5 85 ad 95 57 1b f9 95 59 4b 12 99 9b 5b 01 28 2d 98 10 e5 9a d7 d5 8d a4 57 8c fa 2e 98 df 1b aa 19 99 06 d1 45 cb 7d 4a a8 55 e2 6b e3 10 ee d1 be 09 ca 24 65 5c 4a d5 d5 7d b5 80 35 2d 01 e1 53 40 66 26 26 de 28 ab 6d 5d 41 45 17 c1 58 b7 36 16 23 46 10 ae 51 ac 0a 9a 74 d4 57 70 69 42 48 78 e6 94 dd 1d 59 a5 fa 6a ea 5b fb 96 02 ae bc 91 a9 c8 89 12 57 9c 79 82 c6 5a 99 b6 4e b4 81 a1 a7 ca c8 0b 84 75 a5 6b f1 4d Data Ascii: ][D0ZlCfvo^'jRAO+Gp xx-3G"vY%lHS!p\|7jqhWYK[(-W.E}JUk$e\J}5-S@f&&(m]AEX6#FQtWpiBHxYj[WyZNukM
2022-05-23 16:46:57 UTC	196	IN	Data Raw: fa be 98 8c 4d 9f b8 8d 1c 66 7c 5e ca b5 d9 74 06 45 8e 77 9f 38 40 72 05 07 e5 e8 6b 1c a3 54 24 f6 0d 47 1c 08 3e b3 63 44 ae 57 ca f2 c5 e5 a1 1c 15 d2 b4 b5 68 df 37 e0 a3 a7 1b 5c a0 26 7e 61 2a fe 38 52 df a1 4b e7 0c 9c 93 f1 d3 7c 9e 05 92 b5 68 76 18 d3 d5 3a e9 93 91 39 3b a5 6a c3 f1 fc 06 27 5a b5 8e e4 8e 88 a7 a3 9b 78 fb 32 4a 91 63 7c a2 68 ee c3 5c 13 07 4b 44 f6 ec 0a c2 ae bd 13 bf 17 8a 44 5e 57 3f 6e a1 12 fd 86 0c 3b d3 c6 c5 00 69 5e 91 14 61 c5 a4 f5 8d 1a 6e cf 51 8a 14 02 ec e1 39 e4 f8 35 66 1a 66 89 20 8c b3 60 e0 0b 8a db 54 35 15 34 65 36 37 7b 56 08 d5 e6 99 e1 2d f8 f8 6a 49 6c 46 76 01 e6 1d ad 8b aa d7 68 ba be 9c d5 e6 29 6f c8 d0 24 1a 9b dc 04 b2 f4 10 6c 3c 1a 6d 7c 0b e3 92 2e 6d a2 e4 31 3b 44 38 ec ee 28 d8 b5 3e Data Ascii: Mf\|^tEw8@rkT$G>cDWh7\&~a*8RK\|hv:9;j'Zx2Jc\|h\KDD^W?n;i^anQ95ff `T54e67{V-jIlFvh)o$l<m\|.m1;D8(>
2022-05-23 16:46:57 UTC	200	IN	Data Raw: 75 af c6 98 1e bd f1 69 f3 ac 9a db 9c ae 51 3a e8 5d 88 7f 1d e9 69 7f f4 92 43 be b4 88 2d e8 20 cf 50 43 16 de 61 a3 39 30 e3 4b d8 5f e0 52 2a 71 58 0d c4 22 f3 f2 f8 ff a9 48 58 b7 69 43 41 a8 d4 a0 30 ab 3c d2 24 88 20 fa d9 9a 89 b6 a2 c8 a0 1d 12 86 21 78 a1 b8 33 c1 31 4b 18 2a cd a0 9a 6c 88 5c d0 1f c9 b6 6b 90 1c 93 83 91 ea fe 22 78 56 c2 70 24 ba fa 2f a2 cb 1f e3 5e e7 3f ad 1a 56 e1 13 41 4d 9c b4 dd f9 15 63 9b fb e9 30 1b 35 5a 2f c9 ea 4e 18 c8 25 22 70 2b 97 02 d6 03 e7 91 4b d6 db e9 fc 52 03 76 a7 45 73 6d 56 89 25 64 4c f2 dc 16 fe da dd 11 70 30 d7 89 10 00 05 d3 d3 5c 57 f2 31 87 96 d0 d9 18 1b d1 de 92 93 f4 2b 71 28 f2 fb 38 e5 68 28 c9 54 2d 60 21 ad f7 f4 74 d3 59 af 46 2e b7 88 c3 56 e3 ad da a4 b6 e0 cd 92 d2 96 32 cf 54 9b Data Ascii: uiQ:]iC- PCa90K_RqX"HXiCA0<$ !x31Kl\k"xVp$/^?VAMc05Z/N%"p+KRvEsmV%dLp0\W1+q(8h(T-`!tYF.V2T
2022-05-23 16:46:57 UTC	204	IN	Data Raw: bf 45 3e 87 f8 e8 53 90 de d1 e6 d2 bf 34 a8 aa 01 4c 1c 06 73 89 d7 a0 66 a4 6a a9 2c d0 02 fc 68 cc 04 9b 3a 90 21 41 b8 c5 d3 b0 c2 32 ed 3e 12 99 c6 d2 9f 83 fc db db 70 da 6a bb 21 1b df 8b af c2 ff 70 18 ad 6a c6 a0 19 ea 78 93 63 fa 9f d2 1d cf 06 d8 06 af a9 a6 49 22 d9 70 d2 91 3a 74 2f ab 16 95 bf 32 b7 b7 60 5a c0 9e 5b 20 0b 63 88 c0 14 c6 d6 11 0e d9 c3 2a cc 20 57 00 2e 4c 52 b4 58 45 83 6d c0 8d 5f 8f b6 e6 61 7d fd 04 9b 48 2e 32 f1 a4 c7 8c a6 73 1e 2b ad fd 90 98 70 40 cf 65 d2 8e 41 51 a0 8c d1 47 65 07 fb 3c b4 bd bc c6 5e 80 9d 36 33 16 ac 47 b9 3c bc db 18 ac 0b 2e db e1 f0 3e f7 b4 db d4 8f 26 2a 94 3e a3 c2 e2 9f a9 d1 be fa 79 1d bb b9 19 29 7b fa fa 28 b1 98 06 8d ab f7 7d 0e a2 5e 10 73 fa 7d c8 37 b6 ff b2 ac 08 7f 5e 27 46 6f Data Ascii: E>S4Lsfj,h:!A2>pj!pjxcI"p:t/2`Z[ c* W.LRXEm_a}H.2s+p@eAQGe<^63G<.>&*>y){(}^s}7^'Fo
2022-05-23 16:46:57 UTC	208	IN	Data Raw: c5 1a 16 7c 8c b4 6e 3c 23 65 35 72 90 1f c2 d9 98 72 1b 88 0e 2f 9c 2d c5 85 f8 a5 f8 3c d7 cc 2f 25 bc 84 f5 7b 7f 28 10 01 6e 93 09 b7 04 0f 3e 5c 4e f5 e7 56 f3 61 b2 43 ef 30 c1 b7 ac ec 27 ba e5 ce fc 36 01 e2 7a d4 66 39 ef 30 33 d3 c8 6b 47 24 11 7c 3e e2 38 03 48 3d 65 54 cb ea c4 19 88 2e 9f 65 a0 2c 79 1c a2 6b b8 f9 2a 30 a5 56 0e d6 55 07 7c a5 60 fc c5 42 41 08 0f 6c ce 7a 99 d0 83 78 9c 68 fa de a5 83 52 54 72 cf 34 01 89 4e c1 eb 2a 91 52 9b d9 f0 77 9a a7 e0 08 c6 30 62 0a 97 fc d2 c1 8f 82 c4 3e 37 32 c7 a4 9c 4f 4e 5d f5 b4 c3 f7 2b 1d 08 c3 de 00 89 04 45 3c ad 1b fb e6 4d ac cc e3 26 6e 8b c2 a1 65 46 c4 98 34 1a 34 11 3a 8c 30 32 e1 ee 70 ef a9 04 6c 48 11 a2 2f 64 df 06 b6 63 ff 12 e3 7d d5 54 00 68 09 fa 99 ec 9e e8 a9 f8 59 ec 38 Data Ascii: \|n<#e5rr/-</%{(n>\NVaC0'6zf903kG$\|>8H=eT.e,yk0VU\|`BAlzxhRTr4NRw0b>72ON]+E<M&neF44:02plH/dc}ThY8
2022-05-23 16:46:57 UTC	212	IN	Data Raw: d5 d8 2e 0a 76 0a 4b f1 92 9f e3 65 99 08 d5 35 bf 62 35 ca ad 92 36 ff bd d8 da eb e8 98 d5 de b5 5a da 87 af 1c 88 c3 2d 1a 2a 55 37 27 73 2c 8b 24 2c ef 81 04 7d 85 c3 c3 3c b5 9b 56 9c fb c6 59 81 34 7d 27 30 5f 97 47 c1 90 83 c0 02 ad 69 47 ec 21 c2 1a 61 d1 97 f8 fe 5a 05 d0 eb df d1 40 b8 4c aa 31 97 8b ad b7 b2 d0 bf 3f b3 b6 6f 11 99 5e 76 ed fb 9b 65 e9 af cf 14 c3 1c f3 fe d1 bc 1e 31 77 b3 dc 04 a0 6a f0 a4 df 5d ee 4f 76 0f 9a 01 dd a3 1c a9 f8 fc 1d b3 f2 ec 95 ec 29 36 88 c0 d2 0c 66 3f 48 df cd ee 3a c1 92 1a c0 0c 8d 73 ea 49 15 dc e6 c4 18 5a 1a 24 0b cb 90 f6 c9 cc af b4 d1 d5 76 46 49 d1 cc 3a ca 94 61 75 5a 2f 2d 87 f9 05 27 69 ab a4 1c 45 9c 87 64 08 b3 35 fd 77 b1 33 29 87 32 22 74 84 a4 ff 73 a4 7c b4 da 41 bc 56 66 94 47 79 6a f5 Data Ascii: .vKe5b56Z-*U7's,$,}<VY4}'0_GiG!aZ@L1?o^ve1wj]Ov)6f?H:sIZ$vFI:auZ/-'iEd5w3)2"ts\|AVfGyj
2022-05-23 16:46:57 UTC	223	IN	Data Raw: e4 12 3c ff 03 16 de 63 99 e8 78 d4 f3 85 91 64 12 20 c8 99 9f 72 7c 4e dd 49 a2 8e ad ea 27 27 2e 40 f9 b4 7b 56 4f 5e ee ed 90 80 4b 0a 87 ae 04 7c b9 bf 54 38 6d 9e a7 92 d7 79 6c 71 2b dd c9 51 c9 5c a0 04 ad 08 de c3 33 c5 86 4d 21 7f 2a b1 b9 61 f4 f9 db f3 e7 d4 7b 47 e9 68 ff 05 39 34 f1 50 af b0 f3 80 15 44 3d 57 1c 98 da e4 25 65 6a dd 83 5f 96 49 7d 6a 5b 55 ad 6a 01 53 92 2c 40 8c 3c 27 23 c2 49 ea 7f f8 ef 8a 8a 00 34 dd 2f 20 08 18 1a 1f 27 61 88 29 23 68 53 7f 9d b8 7e f9 65 e7 0e 4a c0 ea 68 b0 3a 9f 8f ae 4e e1 a0 dd ec 67 16 65 18 49 21 21 04 4d c4 26 89 01 0c 4a eb a4 74 b9 11 c5 1e d3 fa cd b2 e4 23 57 62 08 a6 e6 d0 ca 48 b2 eb 85 c8 bb c7 61 6a a6 a4 01 ae b1 12 d0 ac a1 36 d6 4c bd d0 d8 82 e0 ec 31 3a 74 22 60 9b 5b 03 eb 9f 12 37 Data Ascii: <cxd r\|NI''.@{VO^K\|T8mylq+Q\3M!*a{Gh94PD=W%ej_I}j[UjS,@<'#I4/ 'a)#hS~eJh:NgeI!!M&Jt#WbHaj6L1:t"`[7
2022-05-23 16:46:57 UTC	228	IN	Data Raw: d2 f3 31 a8 88 1d 5a ba 62 a9 5e 9c 1b 34 06 37 4a d0 bf d5 69 a7 95 92 32 f3 6e 66 89 a0 33 3e 9c 47 3e af 84 13 e9 0e 8c f3 0d f8 99 92 97 ab 65 ba 4b f0 02 c9 2a 11 be 17 2c bb 19 45 d2 d0 72 c7 d1 d7 7d 9a 64 3a eb bc d2 01 e3 40 48 48 a2 fc 8a 64 c5 55 9a 65 be 07 c7 c8 df c8 18 88 92 ae 56 36 5c bd 5d 2c 0f 31 ad 7b 4c 59 3e 63 cf ae 51 ad d5 81 63 4c d8 7d c0 96 de 61 1f 66 65 fa 5e b6 7a 54 38 f1 30 4f cf 4d 28 64 11 31 fb a5 7f ec 0c c0 6b ad ca 3d 80 22 47 43 08 dd 95 de bf 4a 6c b3 79 d3 b0 85 1f bd 14 63 7d 92 5f 6b e5 23 da 1e 92 12 99 aa 80 1a 17 66 f7 53 72 20 5c 72 d8 74 b3 0a d5 ff 5b b1 63 5a 4c 91 4a d0 20 de 5c 39 f4 9b 79 97 3d 1b 6a b6 0e 87 40 18 ac 51 8a 98 c7 ef 01 73 f2 e4 44 8d a4 e7 4a 68 cc f0 84 fa 74 cf 0d 64 cd d6 27 f1 88 Data Ascii: 1Zb^47Ji2nf3>G>eK*,Er}d:@HHdUeV6\],1{LY>cQcL}afe^zT80OM(d1k="GCJlyc}_k#fSr \rt[cZLJ \9y=j@QsDJhtd'
2022-05-23 16:46:57 UTC	244	IN	Data Raw: ce 1e a7 ba 83 ca 08 4c 1f 46 81 61 ee 26 b0 66 cd 6c ca 5d ca ba b5 c4 69 7d c1 31 d1 fe ee 51 fa 01 58 ac 7e ec c1 ed 0a fb d4 84 4d 47 0b 6a 73 b7 fa c4 dc d6 b9 c7 1a 2d f0 62 83 63 17 13 8b cc e2 d3 9f b7 17 8b 3c 70 13 0f 70 b7 51 4d ab a9 88 63 2b 33 3c 2e 12 09 71 ba c3 94 95 f6 06 e7 6d 62 a5 81 1a c3 6d bd a7 e7 8a 57 fe ca ae e7 cf 5f 4d 0b 8c 9a 81 b7 13 95 24 c8 f0 3f 7b 76 92 18 1b 3a a0 ff 8c 4e af f4 a6 f1 97 16 03 3d bf 17 39 f9 e2 d0 88 12 4d cf e3 f1 ec 12 08 d0 93 65 1a cf fd 07 4b 8c ab fc 2f 77 59 fd b4 0c 45 9a c0 b9 1e ee ea 11 13 b9 62 a6 67 c6 3f 28 6b af 3a be e4 c5 15 e1 f1 b2 be 1e c4 f0 53 fb 53 42 6d e2 eb cf 6e ba d7 6b 0b f6 e2 35 61 3e 35 7f 5c 2c 8f de a6 66 2c ae 64 20 7d 75 22 f3 fc d3 d6 18 78 84 9d 34 f9 a1 b3 a2 32 Data Ascii: LFa&fl]i}1QX~MGjs-bc<ppQMc+3<.qmbmW_M$?{v:N=9MeK/wYEbg?(k:SSBmnk5a>5\,f,d }u"x42
2022-05-23 16:46:57 UTC	255	IN	Data Raw: 40 48 55 a2 ac d1 de 90 ce 36 99 5a 89 dc de 87 b2 5d a8 f1 ef fc cc 2d 0f d4 51 0f 2e aa 5f 2b 50 21 c7 92 ea dd 74 0f b6 31 38 8b d4 3b c3 bf 23 b5 fc f9 60 19 10 b5 e9 46 e2 a5 f2 06 0c d2 ec 7c 81 e1 9d 01 6f 31 63 00 b6 a3 d9 4b 00 3a 9d 53 d5 21 78 80 ae e0 bb 0b 21 bd 58 c0 d9 60 c2 50 12 56 a5 44 db 07 13 83 ff 08 8d 9f 53 b5 bb 77 c0 ae ec 12 89 87 66 db ef 1c 19 d2 08 83 0d 1d 2b f4 9a b7 5d 5d 40 f7 87 7a 84 cb 8d 71 45 48 34 9f 52 0c fd b9 ff 33 43 97 8a 5e 06 df 8b ac e7 fb 5d b9 3b 70 e8 a2 08 6c 66 1c 7d 68 b2 73 4b 50 5b 94 f0 d3 21 5a 66 e3 ac 22 7f 1c ed 8a 69 9b 56 c2 44 12 51 52 ca 49 8a a4 a3 97 93 4a a2 f5 d9 b6 3f ac 74 dd d9 f9 23 15 c2 2b c1 40 b5 53 9e 50 23 3d b7 9d 59 0f cc dc 5f de 15 80 a0 61 96 38 a0 b2 d0 08 05 d8 a1 9d dc Data Ascii: @HU6Z]-Q._+P!t18;#`F\|o1cK:S!x!X`PVDSwf+]]@zqEH4R3C^];plf}hsKP[!Zf"iVDQRIJ?t#+@SP#=Y_a8
2022-05-23 16:46:57 UTC	271	IN	Data Raw: 7b e0 12 c3 0c 47 89 11 5d 2c d3 54 ca e6 66 c1 2a 3d c5 c5 be a2 f5 78 33 82 3e e2 29 6e c3 5e 6c 10 f0 a3 d8 1e 7a 40 d2 75 b1 c8 08 3b 54 2e 03 9c 26 9a 10 61 30 84 ac 35 ed b6 ad a2 55 d5 d4 ae 7a 30 69 f7 45 b7 c0 da da 86 13 82 30 64 d1 94 f9 32 38 d0 63 39 2f c0 75 5e bc d3 d6 d4 85 8b 98 11 24 3d 99 9a d0 98 f7 e9 97 95 e0 77 4b 76 39 5c 2f dd 44 83 18 d6 53 b0 50 41 7b ca b8 74 4f 53 e2 5a 4e 01 41 3e 76 ea 0c 1e 1a 2f ea 7c dc c5 d6 65 78 bc 46 78 ee 76 38 59 f6 32 96 32 d5 d4 b6 64 4e 6b e7 f9 60 ab 4f ff fc 4e 80 a3 0c c7 b0 40 87 c5 45 33 f8 5d 97 54 50 20 ac 6c 2b 9e 5b 97 e3 b3 0e 15 1a 82 4a 61 7f a7 ae 41 c3 7b 33 a3 24 b1 bc 17 d7 50 20 c9 7a d5 65 aa 63 22 91 24 dd af 04 2a c2 8d 25 8c d3 2c 88 3a 83 b1 f2 f3 17 64 94 4d 9f 84 45 e9 54 Data Ascii: {G],Tf=x3>)n^lz@u;T.&a05Uz0iE0d28c9/u^$=wKv9\/DSPA{tOSZNA>v/\|exFxv8Y22dNk`ON@E3]TP l+[JaA{3$P zec"$%,:dMET
2022-05-23 16:46:57 UTC	287	IN	Data Raw: 07 8d d2 0a fb b8 70 3c 1c fe c1 76 43 2a 17 49 52 04 27 dd c4 9d e8 53 42 e1 39 50 28 ea 7f 87 bc 15 0b 22 20 55 ad a7 53 19 ae 4f b4 87 b5 31 3e de 59 da f0 e3 ab 24 08 61 84 40 f0 1f e9 49 e7 b4 13 d4 cb 2e 32 92 4f 83 19 1c 32 b8 c3 7f 25 8b b6 fd fe d8 58 91 0e 03 0b 10 89 8b e9 e6 f9 e8 e2 b6 c0 01 7b 68 90 16 e1 d0 ec 28 69 b4 18 e3 40 46 3a 3f a3 13 9e 02 0a 23 4a 06 3a dd 7b b0 7a 86 4d 56 b9 73 d5 9a 97 e1 6b 8b 6e 6c c2 dd b1 d9 a3 10 d2 a1 22 2c 21 f7 a3 0a 1f 4b 89 24 a1 f5 d3 0a 68 59 b7 c9 e1 8c 50 b3 3c eb 61 56 80 55 18 58 48 69 d6 1c 26 0e 26 74 64 35 86 c7 9d 0c 96 fb 4d 16 bf 95 83 16 14 9a dd e6 3f a7 c3 35 10 09 9d 2a 46 75 ae 1a 48 0d 2b 82 47 ee 75 b9 32 62 f4 75 60 01 7c af 4f 59 80 d8 8b dd 0e f8 b4 21 b0 e8 b2 e5 45 3c 7a ab 48 Data Ascii: p<vCIR'SB9P(" USO1>Y$a@I.2O2%X{h(i@F:?#J:{zMVsknl",!K$hYP<aVUXHi&&td5M?5FuH+Gu2bu`\|OY!E<zH
2022-05-23 16:46:57 UTC	303	IN	Data Raw: ec 9f 72 82 09 a4 3e a5 fa dc 38 a9 e9 18 90 26 f1 2d 80 6e 98 77 b9 37 07 62 a1 42 f5 77 bf 4b a3 62 8f b1 0d b6 9d a6 90 5c 70 3b bf 28 79 b8 58 ae be af ed a4 b9 83 c7 c3 f8 d6 bf 10 ec 76 7a f8 5d b0 31 0a de 2b 69 85 29 82 fe 6c 78 0b ce 99 1b d2 79 3f 3a cc 9f 65 da 72 18 df 70 59 ba d1 2e c7 ae a1 50 91 b5 11 46 a6 1e da 55 b3 31 69 6f d1 81 80 35 16 1e 43 21 cf d7 82 c9 68 ed 75 55 85 9d 78 2c 81 fe e8 39 07 fb 2b e1 1d 9e 60 50 68 22 89 ed 80 dc 90 cf c9 b6 50 5d 34 d8 64 32 b2 b7 2b d0 6d 95 d2 c2 65 75 63 83 c6 4f 7c c7 0f c3 9a e9 f9 0c 8f 0c 7e c6 6f b1 3f 8e cc 1f e1 60 ae 9d e5 b6 5b 8f 88 81 89 79 01 75 87 3e 1f ba 58 bb 94 a0 9a 2b f3 9f 41 f0 53 fa fc 96 24 aa 45 6b 60 90 ec a7 0a 15 33 0a 49 05 6c 3a d8 e5 81 38 e5 e7 15 5a 25 04 38 72 Data Ascii: r>8&-nw7bBwKb\p;(yXvz]1+i)lxy?:erpY.PFU1io5C!huUx,9+`Ph"P]4d2+meucO\|~o?`[yu>X+AS$Ek`3Il:8Z%8r
2022-05-23 16:46:57 UTC	319	IN	Data Raw: e2 be 53 59 15 5d 92 ed 47 51 1a f9 3d 69 9e 4a 18 eb 62 5d f3 65 f3 be c5 60 87 93 31 25 18 ae 42 21 60 d2 0e fb 3c e3 2b db 05 9e 49 e0 6a f5 d6 05 55 15 da 36 fe 1a cd d8 16 d7 ee cd 68 7e 0c de e9 8b f3 2a 43 ed 4c 5d 8b 0d 75 0f 2e 6a 8d cb 4e cc 25 b0 08 f6 fb 1c 87 71 aa 52 50 eb 18 97 20 9b 86 db c1 0f 72 98 98 7a 2a ad 6f f0 fd 52 2c 09 e3 d8 e2 dc f5 f4 58 d4 2b bb ef 73 53 c5 00 81 91 04 a6 cc 64 dd 4e a5 f2 d8 e7 b7 bb 85 64 4d 36 e6 ec 9a 66 f6 27 ac 06 b8 fc 32 d3 3e 4b 61 ec 75 6d 1e 52 c3 c8 f8 27 a7 14 81 e7 20 94 80 99 fc af 8a fa fb 72 51 b5 cc 11 43 f8 70 4a 3a 60 14 d0 38 53 7d 41 7d a3 b0 ce 5b 0f d9 59 d5 bc ba e1 6e b6 33 af 87 f1 d0 b1 a5 72 3b bb 1b 12 47 8d 00 b9 fe da 9e dc 6c 3f 50 57 86 60 4c b8 b6 7d 0d 35 13 67 5f ed f2 e1 Data Ascii: SY]GQ=iJb]e`1%B!`<+IjU6h~CL]u.jN%qRP rzoR,X+sSdNdM6f'2>KaumR' rQCpJ:`8S}A}[Yn3r;Gl?PW`L}5g_
2022-05-23 16:46:57 UTC	335	IN	Data Raw: be ee 36 42 26 f7 c3 25 44 9a f0 9d 77 2c 31 ce fd f7 93 79 cb 72 85 84 2e b2 fa 86 47 b8 4b 67 14 f2 81 e8 bc 77 68 c7 10 8e e6 9b 76 e0 a3 22 ab 1b 75 a7 fc 49 88 6b b7 4e 5c cf 1e 5c 2d 3a 70 97 f6 8c 7e dc d3 05 30 45 35 78 09 97 aa 09 a5 cb af 64 c3 03 0f c9 54 ef 94 22 ad cf d1 8c 3b 39 81 fe 8c 42 76 e7 0b 2a 67 5c bb f2 3e be 88 da 61 e9 11 d0 a3 d8 93 cc 18 92 46 f7 45 d2 77 29 bc 83 59 41 cb aa 07 6f f8 cf 2d 2c 08 5e 58 a9 42 af a5 00 80 87 5b ae bb 03 bb 65 62 1f ee 9b a3 1b a9 8c 78 2f c9 f4 a5 1f e4 28 3a c8 69 49 c3 3c 83 a7 5d 6e 56 59 fd da 7c f2 1e 4d 49 bd c4 dd 3e fc 24 aa 02 37 8b c3 9a 1c 4c 02 35 44 4e ad 7e 8f 38 44 40 8b 92 38 70 39 a0 a5 dc 99 c5 bd e2 18 b4 fb de c7 33 96 18 4b 08 8e 09 af d1 7b a8 32 00 7c c3 be f1 e9 1f 71 32 Data Ascii: 6B&%Dw,1yr.GKgwhv"uIkN\\-:p~0E5xdT";9Bv*g\>aFEw)YAo-,^XB[ebx/(:iI<]nVY\|MI>$7L5DN~8D@8p93K{2\|q2
2022-05-23 16:46:57 UTC	351	IN	Data Raw: 11 3d 72 ec 70 f5 e9 18 07 1a 34 bd 0d 62 10 33 7d 4f c0 32 85 0d da 4b 46 f3 70 99 4c 8a 35 81 71 ad 6d fb a4 92 4f c3 cc 70 9d 44 b8 e0 df 70 47 25 45 23 69 d3 48 b3 87 c3 e5 e0 5c d4 a1 59 07 3a 5b 3c 5e 8f 52 45 0f 75 d4 fc 2a 53 45 0c d3 8a 86 bd 99 45 04 58 63 0d 8c 08 83 0b 43 ae ce 31 aa 0d 87 7c 52 f6 0b 7a a1 74 c0 3d 37 a6 b0 02 c7 6c de 62 1b a9 7f 40 f1 86 9f 22 32 f7 4a 2e 53 27 14 8c 85 17 f8 37 0c 88 b1 a5 bd 0d 75 a3 f7 27 c4 fb d7 eb 4e bd 9a c4 f0 f4 be fc 6a 93 1f 37 62 f5 b4 00 41 2c 74 70 84 87 f9 c7 9b 77 d7 c5 6f 25 a6 ae 4a ce 05 23 51 fb d7 94 99 ec 02 3e 47 5a 91 25 05 80 65 5b b3 4c 29 50 d8 15 2a ca 7b 3b 5b ef 30 cd be ec 08 3b 2d 9c 27 60 14 7c 36 d4 e6 69 53 15 66 50 68 48 d9 58 b2 f9 fc 2b 66 53 cf 38 32 e1 09 3f c1 7e 3f Data Ascii: =rp4b3}O2KFpL5qmOpDpG%E#iH\Y:[<^REuSEEXcC1\|Rzt=7lb@"2J.S'7u'Nj7bA,tpwo%J#Q>GZ%e[L)P{;[0;-'`\|6iSfPhHX+fS82?~?
2022-05-23 16:46:57 UTC	367	IN	Data Raw: 05 23 06 35 18 5b 4b ee c8 f5 a1 3c b7 d2 7d fc a4 e1 6a 5f ed a6 0f 7a 83 f2 de ad 99 b1 a5 7d 78 6b 4f 3d 88 e8 be 93 23 49 1d 41 8c 7e d1 78 a8 06 ca eb 05 43 36 de cf ab 2e b1 8f 9f e2 38 9d a0 64 d9 d8 8c 02 f9 65 fb ce b7 ea 41 37 46 3f d2 55 68 7a 77 42 50 4b 7d 5c e2 85 de c7 48 d1 59 29 0d 73 df 41 b2 37 08 a9 48 59 51 43 25 d7 44 73 51 6e 49 76 f5 16 91 ff 27 36 17 df df 2f 89 c8 ae 79 9b 9a 06 d4 11 00 51 97 a7 62 ac d7 91 7d 7f 04 fd 72 19 ec 0f 78 2e 03 d3 91 90 d6 bb 40 aa 26 be 4d 5e 2c e9 21 f5 4c 41 23 95 be d0 0a ef 68 6e 81 cd a4 af 7f 85 70 c8 5a d1 e4 12 fe 46 8d 6d 0d 66 45 2f ee b8 0a 2c ba 70 1e c9 d9 ee 5b 71 30 27 a7 6e bd 2e 8d f3 f5 cf 64 78 97 5a 03 22 4b 27 d7 2b 79 8c 3f ab 25 1e 3d 22 35 aa e8 03 3b 7c 1c 89 1d 95 2f ea be Data Ascii: #5[K<}j_z}xkO=#IA~xC6.8deA7F?UhzwBPK}\HY)sA7HYQC%DsQnIv'6/yQb}rx.@&M^,!LA#hnpZFmfE/,p[q0'n.dxZ"K'+y?%="5;\|/
2022-05-23 16:46:57 UTC	383	IN	Data Raw: fc f8 af 3f 0d 69 22 11 25 60 68 c6 9d 13 1a 9f 6e 1d 13 a5 75 f7 8b 99 35 a7 d3 b5 22 0c 75 f9 fd 85 21 e4 42 cc ed 18 89 df a6 48 d6 38 ad 47 10 26 6a 81 33 f8 80 e9 27 31 66 45 63 db bf b9 a0 11 2a 79 d8 32 88 1b 03 88 13 b2 2d 9b 46 60 3e 89 e7 5f 11 7f a9 de e2 c8 a2 72 f8 e4 6f b3 82 2d 22 3f 25 41 bb f2 4b c1 b9 19 0e 15 09 01 8f f7 ca 1f 3b f9 a0 a7 e8 35 cd a5 c0 1b 93 23 90 88 83 e2 9b cb 2f ef e9 2e 6e 61 0a e1 92 db 54 7d 36 9d a0 3f 08 70 1e d8 c4 f4 89 8c e2 46 35 27 6b 88 bd c6 d4 83 bc 99 f8 5f 2d 65 6a 05 6f af 67 45 5e 54 f3 6f 55 f2 70 ab 66 73 0d ab d3 0b 81 16 77 3b 9f b0 4d a0 d3 de 69 00 c7 03 65 21 d6 2a 34 2d 25 bc 6a e2 0c 06 91 a4 e2 4a 96 f6 0b 33 23 ae 5f 27 de bd d0 b7 9c ea c5 2b 01 82 7f 2c b8 b8 ed 56 cd 42 4d 1f dd eb 35 Data Ascii: ?i"%`hnu5"u!BH8G&j3'1fEcy2-F`>_ro-"?%AK;5#/.naT}6?pF5'k_-ejogE^ToUpfsw;Mie!4-%jJ3#_'+,VBM5
2022-05-23 16:46:57 UTC	399	IN	Data Raw: e4 b8 15 a8 fb ed e2 ef bd a7 5d 1a 27 f7 9a 52 86 61 11 e0 50 b1 e3 bb d7 91 60 91 3b 9d 77 d8 0d e9 e9 72 eb 33 18 cd b8 c5 42 f3 d8 73 51 74 81 c2 0e 06 dd 83 17 43 2f fc 3b ba 1c ae c6 fb 73 d2 f9 3e ac 33 21 4c 85 b7 e5 ca 00 fe 9a f0 fc c9 47 36 62 47 a9 61 16 3b 12 79 6a 6a fe 8d a4 c9 5f d4 a5 2d 1c 60 e4 53 9c b6 c4 d6 4f 6b f1 4d 2c 61 64 71 74 d0 ce 05 ee d2 cc 8d 35 f9 58 aa 5e e6 de e1 f6 08 b0 c4 b9 6e 00 1c e8 aa e8 63 8e 86 fd e3 de 63 02 44 ab 26 7f a1 f6 f1 0e 52 47 23 53 7b 09 97 8c bb 81 bf d7 3a 5a 7e 8e a1 8a 8d 73 46 e9 29 14 fb d1 6f a4 76 85 00 98 d8 02 bc bd 15 5f 39 10 77 0f f1 7a a4 2b df 5b f8 09 06 46 fb 90 c2 73 1b c8 f6 03 b8 d2 4c 9e 6f 4c 4e a3 9e 42 2e 6d 8d a7 8a 0b 56 82 91 f3 f5 f6 44 90 b3 25 d2 1f 68 a7 f3 0a fe 5a Data Ascii: ]'RaP`;wr3BsQtC/;s>3!LG6bGa;yjj_-`SOkM,adqt5X^nccD&RG#S{:Z~sF)ov_9wz+[FsLoLNB.mVD%hZ
2022-05-23 16:46:57 UTC	415	IN	Data Raw: b9 80 12 01 02 00 09 fc 90 12 06 04 f8 90 12 b5 80 12 6d 12 02 00 0a b5 80 12 6d 12 01 20 07 f8 90 12 06 04 f4 90 12 70 84 12 15 83 11 02 00 0b 70 84 12 15 83 11 01 20 08 f4 90 12 06 04 f0 90 12 10 84 12 1c 01 03 00 0a 10 84 12 1c 01 02 20 07 f0 90 12 06 04 ec 90 12 1c 1c 68 84 12 1c 04 00 0b 1c 1c 68 84 12 1c 03 20 08 ec 90 12 06 04 e8 90 12 6c 84 12 10 84 12 01 03 00 0c 6c 84 12 10 84 12 01 02 20 09 e8 90 12 06 04 e4 90 12 70 84 12 cc 85 11 1c 1c 01 05 00 0e e4 90 12 06 04 e0 90 12 1c 70 84 12 02 00 09 e0 90 12 06 04 dc 90 12 b9 80 12 b9 80 12 01 03 00 0c b9 80 12 b9 80 12 01 02 20 09 dc 90 12 06 04 d8 90 12 1c 02 02 00 07 d8 90 12 06 04 d4 90 12 1c 1c e8 84 12 03 00 0a 1c 1c e8 84 12 02 20 07 d4 90 12 06 04 d0 90 12 70 84 12 1c b5 80 12 1c 1c 05 00 0e Data Ascii: mm pp hh ll pp p
2022-05-23 16:46:57 UTC	431	IN	Data Raw: 05 c5 80 11 01 02 20 07 05 c5 80 11 1c 01 03 00 08 0a c5 80 11 01 02 20 07 0a c5 80 11 1c 01 03 00 08 0d c5 80 11 01 02 20 07 0d c5 80 11 1c 01 03 00 08 0c c5 80 11 01 02 20 07 0c c5 80 11 1c 01 03 00 08 e0 85 12 00 00 05 45 83 12 02 01 20 06 e8 85 11 00 20 05 08 06 08 05 1d 04 07 07 05 83 11 01 01 20 06 08 08 1d 02 07 05 01 83 11 01 01 20 06 02 0c 84 11 01 02 20 07 b9 80 12 0c 84 11 08 03 07 09 f4 85 12 f4 85 12 01 02 20 09 02 f4 85 12 01 02 20 07 f4 85 12 19 81 12 01 20 08 0d 84 11 1d c5 80 11 01 02 20 0a 08 08 dc 85 11 08 08 08 08 08 0d 84 11 1d 08 0d 84 11 1d 08 08 08 f4 85 12 08 0d 84 11 1d 11 07 20 dc 85 11 1d 01 01 20 07 c5 80 11 08 02 07 06 02 dc 85 11 01 02 20 07 08 c5 80 11 02 07 06 02 b9 80 12 f4 85 12 01 03 20 0a f4 85 12 02 01 20 06 08 c1 80 Data Ascii: E
2022-05-23 16:46:57 UTC	447	IN	Data Raw: 06 1c dd 81 12 64 83 11 10 70 83 11 10 48 81 11 18 10 d9 81 12 06 20 16 64 83 11 10 70 83 11 10 48 81 11 18 10 40 11 04 20 11 09 09 18 10 18 18 10 18 40 11 06 20 0c 1c dd 81 12 18 18 18 18 18 09 18 d9 81 12 09 20 10 18 18 18 18 18 09 18 02 07 20 0a 1c dd 81 12 18 18 d9 81 12 04 20 0b 18 18 40 11 02 20 06 d9 81 12 64 83 11 10 70 83 11 10 18 10 40 11 04 20 11 1c dd 81 12 64 83 11 10 70 83 11 10 54 81 11 18 10 d9 81 12 06 20 16 64 83 11 10 70 83 11 10 54 81 11 18 10 40 11 04 20 11 18 40 11 01 20 05 08 18 02 02 20 05 d9 81 12 68 83 11 10 18 02 20 0a 1c dd 81 12 68 83 11 10 18 09 18 d9 81 12 06 20 10 68 83 11 10 18 09 18 18 04 20 0a d9 81 12 09 10 0b 10 18 10 40 11 04 20 0d 1c dd 81 12 09 09 09 09 10 0b 10 19 19 18 10 18 18 d9 81 12 0c 20 16 09 09 09 09 10 0b Data Ascii: dpH dpH@ @ @ dp@ dpT dpT@ @ h h h @
2022-05-23 16:46:57 UTC	463	IN	Data Raw: 64 37 39 64 76 00 68 6e 36 4c 55 31 37 32 66 79 00 47 4d 56 69 39 73 37 39 44 50 00 79 42 33 6d 78 52 37 34 48 54 00 64 78 42 6f 50 4e 37 64 52 7a 00 62 4f 47 45 76 4a 37 56 63 6b 00 4d 5a 75 62 73 33 37 39 4f 73 00 64 34 33 79 46 46 37 4b 43 6e 00 42 6c 6f 36 69 71 37 50 56 4f 00 67 45 63 41 33 44 37 50 5a 67 00 73 6c 55 63 73 56 37 53 6f 49 00 75 46 4e 45 37 4b 37 55 72 66 00 4f 57 51 62 34 34 37 54 79 61 00 61 34 69 49 79 6e 37 76 55 68 00 36 48 49 35 32 62 37 61 78 6e 00 61 78 34 52 63 70 37 66 58 63 00 72 68 49 64 4b 6c 37 6b 4f 46 00 56 56 30 78 38 6a 37 45 4f 78 00 42 35 69 57 54 77 37 55 59 49 00 54 4d 33 65 59 42 37 43 52 56 00 38 70 56 44 71 38 37 32 41 72 00 65 47 52 70 74 75 37 66 59 4f 00 55 32 53 39 34 55 37 4e 72 72 00 51 4b 4c 66 45 4d 37 Data Ascii: d79dvhn6LU172fyGMVi9s79DPyB3mxR74HTdxBoPN7dRzbOGEvJ7VckMZubs379Osd43yFF7KCnBlo6iq7PVOgEcA3D7PZgslUcsV7SoIuFNE7K7UrfOWQb447Tyaa4iIyn7vUh6HI52b7axnax4Rcp7fXcrhIdKl7kOFVV0x8j7EOxB5iWTw7UYITM3eYB7CRV8pVDq872AreGRptu7fYOU2S94U7NrrQKLfEM7
2022-05-23 16:46:57 UTC	479	IN	Data Raw: 63 4e 44 5a 45 6d 5a 66 61 55 57 43 74 5a 75 48 62 52 6c 00 55 72 59 30 75 6a 41 42 75 4e 69 38 43 74 48 6b 6d 38 71 77 00 77 4c 47 4d 47 56 77 61 73 62 54 61 43 74 67 72 78 61 5a 67 00 49 37 41 52 4f 38 6e 5a 61 6e 67 75 43 74 55 4c 55 37 36 78 00 59 52 56 6b 46 47 69 58 35 52 64 30 43 74 57 5a 79 52 39 70 00 36 6d 38 76 6b 36 48 49 48 49 34 55 43 74 4d 43 73 47 4f 46 00 31 75 37 4d 32 4d 4a 4e 57 48 6e 79 43 74 46 49 75 41 34 47 00 46 54 6b 65 64 6b 4b 67 54 54 6d 4d 43 74 44 76 71 73 48 44 00 6d 58 31 62 33 68 43 56 67 33 34 69 43 74 31 68 4a 53 39 4d 00 54 69 34 41 30 77 53 69 31 68 58 74 43 74 43 50 67 56 44 72 00 62 47 63 65 73 59 32 79 68 44 70 76 43 74 46 45 31 57 54 75 00 56 34 76 71 45 78 39 42 78 75 62 7a 56 74 48 6d 6e 59 4b 4c 00 5a 59 42 5a Data Ascii: cNDZEmZfaUWCtZuHbRlUrY0ujABuNi8CtHkm8qwwLGMGVwasbTaCtgrxaZgI7ARO8nZanguCtULU76xYRVkFGiX5Rd0CtWZyR9p6m8vk6HIHI4UCtMCsGOF1u7M2MJNWHnyCtFIuA4GFTkedkKgTTmMCtDvqsHDmX1b3hCVg34iCt1hJS9MTi4A0wSi1hXtCtCPgVDrbGcesY2yhDpvCtFE1WTuV4vqEx9BxubzVtHmnYKLZYBZ
2022-05-23 16:46:57 UTC	495	IN	Data Raw: 6d 32 5a 4b 50 4c 35 75 78 4a 48 74 4c 63 58 4c 63 51 00 31 45 6f 4c 77 78 61 30 4e 39 74 63 48 74 51 63 46 4a 4b 68 00 68 65 63 6c 65 71 6b 6e 4c 4b 33 33 48 74 31 78 5a 37 35 4b 00 6a 58 48 69 5a 50 6e 49 74 35 56 35 48 74 45 39 73 71 59 63 00 69 61 73 77 74 57 38 4b 36 62 55 46 48 74 5a 44 41 70 4a 72 00 4c 43 79 55 63 45 62 51 43 33 66 6b 48 74 57 4c 4b 6f 55 63 00 41 61 50 79 30 64 53 42 33 46 42 71 48 74 66 41 30 76 37 55 00 72 4f 59 75 65 6b 6c 79 37 59 64 78 48 74 78 4b 71 48 4f 68 00 72 45 4d 67 4a 4c 52 70 6c 75 37 44 48 74 58 47 55 4a 48 42 00 6d 33 6f 79 74 39 37 4d 31 62 53 43 48 74 31 59 59 36 4d 6c 00 53 62 68 67 77 65 58 41 68 42 54 56 48 74 66 42 4b 66 71 6a 00 37 4d 67 38 36 71 4d 78 67 4f 53 4c 48 74 31 41 64 51 30 64 00 33 77 30 6c 51 Data Ascii: m2ZKPL5uxJHtLcXLcQ1EoLwxa0N9tcHtQcFJKhhecleqknLK33Ht1xZ75KjXHiZPnIt5V5HtE9sqYciaswtW8K6bUFHtZDApJrLCyUcEbQC3fkHtWLKoUcAaPy0dSB3FBqHtfA0v7UrOYuekly7YdxHtxKqHOhrEMgJLRplu7DHtXGUJHBm3oyt97M1bSCHt1YY6MlSbhgweXAhBTVHtfBKfqj7Mg86qMxgOSLHt1AdQ0d3w0lQ
2022-05-23 16:46:57 UTC	511	IN	Data Raw: 5a 33 53 55 63 68 61 50 48 71 50 74 35 33 39 56 73 68 00 36 64 31 32 45 4c 62 34 49 6b 36 78 50 74 32 4e 65 68 6e 64 00 61 6f 33 74 4d 57 51 69 6d 71 6a 44 50 74 6b 53 58 56 61 78 00 67 78 50 64 42 75 39 6c 39 69 4f 43 50 74 52 53 54 50 6e 7a 00 73 64 6f 68 74 65 4d 74 65 47 00 6e 6f 69 74 69 6e 69 66 65 44 64 6f 68 74 65 4d 63 69 72 65 6e 65 47 73 49 5f 74 65 67 00 65 63 61 66 72 65 74 6e 49 73 49 5f 74 65 67 00 64 6f 68 74 65 4d 63 69 72 65 6e 65 47 65 6b 61 4d 00 65 63 61 70 73 65 6d 61 4e 5f 74 65 67 00 65 6c 62 61 74 75 6d 6d 49 79 66 69 74 6e 65 64 49 00 73 74 6e 65 6d 75 67 72 41 63 69 72 65 6e 65 47 74 65 47 00 65 70 79 54 63 69 72 65 6e 65 47 73 49 5f 74 65 67 00 46 37 4f 36 62 36 30 4f 50 53 00 73 65 63 61 66 72 65 74 6e 49 74 65 47 00 70 75 50 Data Ascii: Z3SUchaPHqPt539Vsh6d12ELb4Ik6xPt2Nehndao3tMWQimqjDPtkSXVaxgxPdBu9l9iOCPtRSTPnzsdohteMteGnoitinifeDdohteMcireneGsI_tegecafretnIsI_tegdohteMcireneGekaMecapsemaN_tegelbatummIyfitnedIstnemugrAcireneGteGepyTcireneGsI_tegF7O6b60OPSsecafretnIteGpuP
2022-05-23 16:46:57 UTC	527	IN	Data Raw: 73 55 49 35 58 68 6b 34 42 74 49 6b 50 54 33 6d 00 53 78 46 6d 71 41 71 36 78 54 4e 59 42 74 75 37 35 31 63 79 00 4e 36 63 66 6f 6f 38 56 77 38 45 6e 42 74 71 57 6e 76 70 53 00 66 48 74 42 4f 34 47 35 68 4b 65 48 42 74 6e 58 57 62 42 49 00 55 32 72 58 53 4b 56 46 52 73 51 62 42 74 57 49 41 4a 58 47 00 59 63 75 47 38 64 65 44 75 6d 74 32 42 74 6d 52 35 62 64 4f 00 5a 45 73 61 74 77 79 6b 58 31 56 70 42 74 72 51 74 50 51 59 00 4c 32 6c 75 38 49 6b 65 50 6f 6c 39 42 74 43 6c 71 55 43 6b 00 56 6e 41 36 31 4a 42 6a 44 75 78 6c 42 74 75 47 53 69 51 47 00 44 44 39 59 74 51 56 42 6c 66 57 50 42 74 35 31 75 51 6b 55 00 74 65 67 72 61 54 5f 74 65 67 00 74 55 4f 48 39 59 67 56 36 38 54 50 59 74 4e 43 6d 5a 46 43 00 6f 63 69 4d 58 4a 42 75 6f 33 4d 6a 59 74 42 6c 75 Data Ascii: sUI5Xhk4BtIkPT3mSxFmqAq6xTNYBtu751cyN6cfoo8Vw8EnBtqWnvpSfHtBO4G5hKeHBtnXWbBIU2rXSKVFRsQbBtWIAJXGYcuG8deDumt2BtmR5bdOZEsatwykX1VpBtrQtPQYL2lu8IkePol9BtClqUCkVnA61JBjDuxlBtuGSiQGDD9YtQVBlfWPBt51uQkUtegraT_tegtUOH9YgV68TPYtNCmZFCociMXJBuo3MjYtBlu
2022-05-23 16:46:57 UTC	543	IN	Data Raw: 34 56 4b 4d 44 74 44 38 4c 00 48 6e 48 6a 46 66 6f 59 51 43 72 57 74 74 6e 71 43 45 71 58 00 6d 6f 72 46 64 61 6f 4c 00 52 48 6a 4d 52 35 69 36 51 44 34 38 74 74 77 68 4e 45 6a 54 00 42 44 64 53 4a 45 68 63 33 42 48 61 74 74 4a 4b 6d 58 30 4b 00 74 33 48 77 45 76 73 6c 6a 77 48 75 74 74 69 45 70 6e 30 43 00 42 4f 70 45 4c 72 70 42 79 52 66 30 74 74 77 61 74 31 32 4b 00 43 30 38 6c 44 55 78 45 35 45 66 55 74 74 62 50 74 76 48 7a 00 67 6e 69 72 74 53 34 36 65 73 61 42 6f 54 00 38 72 45 6e 5a 45 55 45 6f 64 71 79 74 74 53 49 49 47 72 68 00 58 74 70 66 45 4e 37 4e 54 4b 45 4d 74 74 34 4d 70 74 39 41 00 74 6e 61 69 72 61 76 6e 49 72 65 70 70 55 6f 54 00 43 76 6f 55 46 69 32 4b 67 32 39 69 74 74 61 59 5a 4f 6b 49 00 57 4c 43 6f 4a 43 38 76 32 48 4b 74 74 74 4c Data Ascii: 4VKMDtD8LHnHjFfoYQCrWttnqCEqXmorFdaoLRHjMR5i6QD48ttwhNEjTBDdSJEhc3BHattJKmX0Kt3HwEvsljwHuttiEpn0CBOpELrpByRf0ttwat12KC08lDUxE5EfUttbPtvHzgnirtS46esaBoT8rEnZEUEodqyttSIIGrhXtpfEN7NTKEMtt4Mpt9AtnairavnIreppUoTCvoUFi2Kg29ittaYZOkIWLCoJC8v2HKtttL
2022-05-23 16:46:57 UTC	559	IN	Data Raw: 44 77 6b 42 78 73 00 30 33 43 38 4d 4c 4c 4e 68 51 69 50 4f 49 63 4b 77 42 74 00 46 47 67 30 6c 33 4a 50 58 54 31 66 4f 45 4b 71 42 4c 64 00 44 42 4c 6e 46 30 53 6f 4a 62 62 65 4f 4a 32 55 6d 77 77 00 70 36 39 53 48 64 38 5a 39 77 77 57 4f 6b 42 6e 45 5a 52 00 6d 66 46 4a 5a 4b 4f 6f 37 4e 4d 61 4f 61 79 67 70 49 58 00 62 44 54 50 37 54 33 76 55 59 4a 30 4f 31 32 41 77 72 72 00 61 34 69 4f 68 71 41 76 5a 66 65 79 4f 5a 4f 6e 58 61 50 00 4e 33 4c 72 56 63 59 45 39 61 55 69 4f 4e 6a 36 38 58 4d 00 49 43 57 6e 5a 4c 4f 33 52 36 6c 76 4f 6f 66 64 45 62 70 00 77 36 6c 6a 61 49 42 6c 62 6d 53 68 58 45 5a 5a 75 56 57 00 69 70 75 4d 78 53 66 36 35 6f 5a 41 58 43 66 54 66 47 7a 00 65 53 4b 31 47 56 54 79 66 68 6b 58 58 75 52 76 70 75 75 00 53 51 66 66 74 59 63 72 Data Ascii: DwkBxs03C8MLLNhQiPOIcKwBtFGg0l3JPXT1fOEKqBLdDBLnF0SoJbbeOJ2Umwwp69SHd8Z9wwWOkBnEZRmfFJZKOo7NMaOaygpIXbDTP7T3vUYJ0O12Awrra4iOhqAvZfeyOZOnXaPN3LrVcYE9aUiONj68XMICWnZLO3R6lvOofdEbpw6ljaIBlbmShXEZZuVWipuMxSf65oZAXCfTfGzeSK1GVTyfhkXXuRvpuuSQfftYcr
2022-05-23 16:46:57 UTC	575	IN	Data Raw: 63 6e 00 43 6f 52 4a 37 69 36 4f 51 58 39 6d 43 6c 5a 34 6d 33 6f 00 47 33 6d 77 4f 57 76 64 6d 65 73 47 43 79 68 52 6d 62 58 00 36 64 58 66 57 39 73 6d 4e 6c 6b 37 43 66 68 4d 6d 34 4d 00 47 42 30 50 6a 36 55 53 76 43 39 49 43 30 70 32 6f 44 62 00 66 78 39 51 52 30 51 36 56 71 42 36 43 4c 51 62 75 38 47 00 31 68 4c 57 64 36 4e 56 75 69 62 53 43 6d 54 4a 75 6a 46 00 44 70 79 67 71 65 68 6d 5a 4d 59 67 43 4c 54 44 73 44 53 00 72 73 5a 6c 49 59 74 38 6b 65 6a 63 43 71 43 48 64 6d 4d 00 44 65 51 78 52 52 42 44 79 4c 75 35 43 41 39 58 59 44 4c 00 67 66 72 6a 54 56 56 67 4c 61 69 6b 43 33 64 59 4e 71 70 00 61 4f 62 32 77 6b 6a 6f 50 41 4f 78 43 49 6f 4d 49 5a 53 00 37 49 6f 62 39 6e 59 72 4d 57 4e 43 43 41 72 66 56 66 47 00 64 5a 59 73 36 46 50 56 32 76 4c 4c Data Ascii: cnCoRJ7i6OQX9mClZ4m3oG3mwOWvdmesGCyhRmbX6dXfW9smNlk7CfhMm4MGB0Pj6USvC9IC0p2oDbfx9QR0Q6VqB6CLQbu8G1hLWd6NVuibSCmTJujFDpygqehmZMYgCLTDsDSrsZlIYt8kejcCqCHdmMDeQxRRBDyLu5CA9XYDLgfrjTVVgLaikC3dYNqpaOb2wkjoPAOxCIoMIZS7Iob9nYrMWNCCArfVfGdZYs6FPV2vLL
2022-05-23 16:46:57 UTC	591	IN	Data Raw: 0d 4f 00 02 01 df 0d 43 00 02 01 dd 0d 41 00 02 01 db 0d 3f 00 01 01 db 0d 3e 00 02 01 d9 0d 35 00 02 01 d7 0d 2d 00 02 01 d7 0d 2e 00 01 01 d5 0d 2c 00 01 01 d5 0d 2b 00 02 01 d3 0d 2a 00 01 01 d3 0d 29 00 02 01 d1 0d 28 00 01 01 d1 0d 27 00 02 01 cf 0d 25 00 02 01 cf 0d 26 00 01 01 cd 0d 24 00 01 01 cd 0d 23 00 02 01 cb 0d 21 00 02 01 cb 0d 22 00 01 01 c9 0c c2 00 01 01 c9 0c c1 00 02 01 c7 0c aa 00 01 01 c7 0c a9 00 02 01 c5 0c a8 00 01 01 c5 0c a7 00 02 01 c3 0c 9d 00 02 01 c1 0c 95 00 02 01 bf 0c 93 00 01 01 bf 0c 92 00 02 01 bd 0c 91 00 01 01 bd 0c 90 00 02 01 bb 0c 8f 00 01 01 bb 0c 8e 00 02 01 b9 0c 8c 00 02 01 b9 0c 8d 00 01 01 b7 0c 8b 00 01 01 b7 0c 8a 00 02 01 b5 0c 89 00 01 01 b5 0c 88 00 02 01 b3 0c 7e 00 02 01 b1 0c 7c 00 02 01 af 0c 3d 00 Data Ascii: OCA?>5-.,+*)('%&$#!"~\|=
2022-05-23 16:46:57 UTC	607	IN	Data Raw: 01 cc 00 e2 00 00 00 48 00 00 00 f9 38 e5 00 01 07 8b 00 00 06 b1 03 f3 00 01 61 0a 00 00 00 d9 5b 5f 00 01 60 ec 00 00 02 c9 5b 3c 00 00 74 91 00 00 01 81 04 e1 00 00 76 a8 00 00 08 39 5b 2b 00 01 5f da 00 00 01 39 5b 22 00 01 5f 99 00 00 01 39 00 b0 00 01 5f 7f 00 00 01 29 5b 12 00 00 74 cc 00 00 01 29 00 b0 00 01 00 c7 00 00 01 41 10 ea 00 01 5f 1e 00 00 03 49 5b 0c 00 01 5e d7 00 00 06 09 5a f6 00 01 5e 82 00 00 01 c1 3d b4 00 00 b4 ae 00 00 00 19 5a e0 00 01 5d a1 00 00 07 f9 04 e1 00 00 76 a8 00 00 07 f9 5a d1 00 00 75 83 00 00 01 bc 5a 07 00 01 5a d6 00 00 03 01 59 ff 00 00 a8 ff 00 00 03 01 59 b0 00 00 00 48 00 00 01 51 59 73 00 01 59 06 00 00 01 71 59 66 00 00 75 3a 00 00 01 31 59 38 00 00 75 c3 00 00 01 39 04 04 00 01 5a 32 00 00 01 91 58 f3 00 Data Ascii: H8a[_`[<tv9[+_9["_9_)[t)A_I[^Z^=Z]vZuZZYYHQYsYqYfu:1Y8u9Z2X
2022-05-23 16:46:57 UTC	623	IN	Data Raw: 00 02 00 00 00 00 70 ec 00 02 00 00 00 00 70 ec 00 02 00 00 00 00 70 ec 00 02 00 00 00 00 70 ec 00 02 00 00 00 00 70 ec 00 02 00 00 00 00 70 ec 00 02 00 00 00 00 70 ec 00 02 00 00 00 00 70 ec 00 03 00 00 00 00 70 ec 00 02 00 00 00 00 70 ec 00 01 00 00 00 00 70 ec 00 03 00 00 00 00 70 ec 00 02 00 00 00 00 70 ec 00 01 00 00 00 00 70 ec 00 02 00 00 00 00 70 ec 00 02 00 00 00 00 70 ec 00 01 00 00 00 00 70 ec 00 01 00 00 00 00 70 ec 00 02 00 00 00 00 70 ec 00 01 00 00 00 00 70 ec 00 02 00 00 00 00 70 ec 00 01 00 00 00 00 70 ec 00 02 00 00 00 00 70 ec 00 01 00 00 00 00 70 ec 00 02 00 00 00 00 70 ec 00 01 00 00 00 00 70 ec 00 03 00 00 00 00 70 ec 00 02 00 00 00 00 70 ec 00 03 00 00 00 00 70 ec 00 02 00 00 00 00 70 ec 00 03 00 00 00 00 70 ec 00 02 00 00 00 00 70 Data Ascii: pppppppppppppppppppppppppppppppp
2022-05-23 16:46:57 UTC	639	IN	Data Raw: 00 01 00 00 00 00 70 ec 00 01 00 00 00 00 70 ec 00 01 00 00 00 00 70 ec 00 01 00 00 00 00 70 ec 00 01 00 00 00 00 70 ec 00 01 00 00 00 00 70 ec 00 01 00 00 00 00 70 ec 00 01 00 00 00 00 70 ec 00 01 00 00 00 00 70 ec 00 01 00 00 00 00 70 ec 00 01 00 00 00 00 70 ec 00 02 00 00 00 00 70 ec 00 01 00 00 00 00 70 ec 00 01 00 00 00 00 70 ec 00 02 00 00 00 00 70 ec 00 01 00 00 00 00 70 ec 00 01 00 00 00 00 70 ec 00 01 00 00 00 00 70 ec 00 01 00 00 00 00 70 ec 00 01 00 00 00 00 70 ec 00 01 00 00 00 00 70 ec 00 01 00 00 00 00 70 ec 00 01 00 00 00 00 70 ec 00 01 00 00 00 00 70 ec 00 01 00 00 00 00 70 ec 00 01 00 00 00 00 70 ec 00 01 00 00 00 00 70 ec 00 01 00 00 00 00 70 ec 00 01 00 00 00 00 70 ec 00 01 00 00 00 00 70 ec 00 01 00 00 00 00 70 ec 00 01 00 00 00 00 70 Data Ascii: pppppppppppppppppppppppppppppppp
2022-05-23 16:46:57 UTC	655	IN	Data Raw: 00 01 00 00 00 00 70 ec 00 01 00 00 00 00 70 ec 00 02 00 00 00 00 70 ec 00 01 00 00 00 00 70 ec 00 01 00 00 00 00 70 ec 00 02 00 00 00 00 70 ec 00 01 00 00 00 00 70 ec 00 02 00 00 00 00 70 ec 00 01 00 00 00 00 70 ec 00 01 00 00 00 00 70 ec 00 01 00 00 00 00 70 ec 00 03 00 00 00 00 70 ec 00 02 00 00 00 00 70 ec 00 01 00 00 00 00 70 ec 00 03 10 10 00 00 70 ec 00 02 00 00 00 00 70 ec 00 01 00 00 00 01 11 0e 00 03 00 00 00 00 e9 6a 00 02 00 00 00 00 76 7a 00 01 00 00 00 00 e9 6a 00 02 00 00 00 00 76 7a 00 01 00 00 00 01 11 8b 00 03 00 00 00 00 e9 6a 00 02 00 00 00 00 f5 44 00 01 00 00 00 00 70 ec 00 01 00 00 00 00 e9 6a 00 02 00 00 00 00 f5 44 00 01 00 00 00 00 70 ec 00 02 00 00 00 00 70 ec 00 01 00 00 00 00 70 ec 00 02 00 00 00 00 70 ec 00 01 00 00 00 00 e9 Data Ascii: ppppppppppppppppjvzjvzjDpjDpppp
2022-05-23 16:46:57 UTC	671	IN	Data Raw: 00 01 ca bb 00 16 00 00 00 0b 7f a8 1b 91 c8 0e 00 00 75 83 00 46 00 03 00 00 00 00 1b 91 02 d4 00 00 70 38 18 10 00 00 00 0b 7f 94 1b 91 0e 4f 00 00 00 48 18 06 00 03 00 00 00 00 1b 90 cc 7f 00 01 ca bb 00 16 00 00 00 0b 7f 80 1b 8f c8 0e 00 00 75 83 00 46 00 03 00 00 00 00 1b 8f 02 d4 00 00 70 38 18 10 00 00 00 0b 7f 6c 1b 8f 0e 4f 00 00 00 48 18 06 00 03 00 00 00 00 1b 8f cc 70 00 01 ca bb 00 16 00 00 00 0b 7f 58 1b 8f c7 de 00 00 75 83 00 46 00 03 00 00 00 00 1b 8f 02 d4 00 00 70 38 18 10 00 00 00 0b 7f 44 1b 8f 0e 4f 00 00 00 48 18 06 00 03 00 00 00 00 1b 8e cc 5e 00 01 ca bb 00 16 00 00 00 0b 7f 30 1b 8d c8 0e 00 00 75 83 00 46 00 03 00 00 00 00 1b 8d 02 d4 00 00 70 38 18 10 00 00 00 0b 7f 1c 1b 8d 0e 4f 00 00 00 48 18 06 00 03 00 00 00 00 1b 8c cc Data Ascii: uFp8OHuFp8lOHpXuFp8DOH^0uFp8OH
2022-05-23 16:46:57 UTC	687	IN	Data Raw: 00 01 ca bb 00 16 00 00 00 0b 55 90 18 e9 33 34 00 00 75 83 00 46 00 03 00 00 00 00 18 e9 02 d4 00 00 70 38 18 10 00 00 00 0b 55 7c 18 e9 0e 4f 00 00 00 48 18 06 00 03 00 00 00 00 18 e9 b8 1c 00 01 ca bb 00 16 00 00 00 0b 55 68 18 e9 33 34 00 00 75 83 00 46 00 03 00 00 00 00 18 e9 02 d4 00 00 70 38 18 10 00 00 00 0b 55 54 18 e9 0e 4f 00 00 00 48 18 06 00 03 00 00 00 00 18 e8 b8 0e 00 01 ca bb 00 16 00 00 00 0b 55 40 18 e7 ab bd 00 00 75 83 00 46 00 03 00 00 00 00 18 e7 02 d4 00 00 70 38 18 10 00 00 00 0b 55 2c 18 e7 0e 4f 00 00 00 48 18 06 00 03 00 00 00 00 18 e6 b7 fc 00 01 ca bb 00 16 00 00 00 0b 55 18 18 e5 a5 16 00 00 75 83 00 46 00 03 00 00 00 00 18 e5 02 d4 00 00 70 38 18 10 00 00 00 0b 55 04 18 e5 0e 4f 00 00 00 48 18 06 00 03 00 00 00 00 18 e4 b7 Data Ascii: U34uFp8U\|OHUh34uFp8UTOHU@uFp8U,OHUuFp8UOH
2022-05-23 16:46:57 UTC	700	IN	Data Raw: 38 18 10 00 00 00 0b 35 c8 17 2d 0e 4f 00 00 00 48 18 06 00 03 00 00 00 00 17 2c a8 e9 00 01 ca bb 00 16 00 00 00 0b 35 b4 17 2b 4b 92 00 00 75 83 00 46 00 03 00 00 00 00 17 2b 02 d4 00 00 70 38 18 10 00 00 00 0b 35 a0 17 2b 0e 4f 00 00 00 48 18 06 00 03 00 00 00 00 17 28 a8 d8 00 01 ca bb 00 16 00 00 00 0b 35 88 17 25 a8 cf 00 00 75 83 00 46 00 03 00 00 00 00 17 25 02 d4 00 00 70 38 18 10 00 00 00 0b 35 74 17 25 0e 4f 00 00 00 48 18 06 00 03 00 00 00 00 17 25 a8 c0 00 01 ca bb 00 16 00 00 00 0b 35 60 17 25 96 de 00 00 75 83 00 46 00 03 00 00 00 00 17 25 02 d4 00 00 70 38 18 10 00 00 00 0b 35 4c 17 25 0e 4f 00 00 00 48 18 06 00 03 00 00 00 00 17 25 a8 b1 00 01 ca bb 00 16 00 00 00 0b 35 38 17 25 96 de 00 00 75 83 00 46 00 03 00 00 00 00 17 25 02 d4 00 00 Data Ascii: 85-OH,5+KuF+p85+OH(5%uF%p85t%OH%5`%uF%p85L%OH%58%uF%
2022-05-23 16:46:57 UTC	716	IN	Data Raw: 38 18 10 00 00 00 0b 0c 00 14 15 0e 4f 00 00 00 48 18 06 00 03 00 00 00 00 14 15 91 ed 00 01 ca bb 00 16 00 00 00 0b 0b ec 14 15 33 34 00 00 75 83 00 46 00 03 00 00 00 00 14 15 02 d4 00 00 70 38 18 10 00 00 00 0b 0b d8 14 15 0e 4f 00 00 00 48 18 06 00 03 00 00 00 00 14 15 91 de 00 01 ca bb 00 16 00 00 00 0b 0b c4 14 15 86 db 00 00 75 83 00 46 00 03 00 00 00 00 14 15 02 d4 00 00 70 38 18 10 00 00 00 0b 0b b0 14 15 0e 4f 00 00 00 48 18 06 00 03 00 00 00 00 14 13 91 cc 00 01 ca bb 00 16 00 00 00 0b 0b 9c 14 11 91 c2 00 00 75 83 00 46 00 03 00 00 00 00 14 11 02 d4 00 00 70 38 18 10 00 00 00 0b 0b 88 14 11 0e 4f 00 00 00 48 18 06 00 03 00 00 00 00 14 10 91 b2 00 01 ca bb 00 16 00 00 00 0b 0b 74 14 0f 91 aa 00 00 75 83 00 46 00 03 00 00 00 00 14 0f 02 d4 00 00 Data Ascii: 8OH34uFp8OHuFp8OHuFp8OHtuF
2022-05-23 16:46:57 UTC	732	IN	Data Raw: 38 18 10 00 00 00 0a e3 58 11 93 0e 4f 00 00 00 48 18 06 00 03 00 00 00 00 11 93 7e 50 00 01 ca bb 00 16 00 00 00 0a e3 44 11 93 7e 4b 00 00 75 83 00 46 00 03 00 00 00 00 11 93 02 d4 00 00 70 38 18 10 00 00 00 0a e3 30 11 93 0e 4f 00 00 00 48 18 06 00 03 00 00 00 00 11 93 7e 3f 00 01 ca bb 00 16 00 00 00 0a e3 20 11 93 03 03 00 00 75 83 00 46 00 03 00 00 00 00 11 93 02 d4 00 00 70 38 18 10 00 00 00 0a e3 0c 11 93 0e 4f 00 00 00 48 18 06 00 03 00 00 00 00 11 92 7e 30 00 01 ca bb 00 16 00 00 00 0a e2 f8 11 91 7e 29 00 00 75 83 00 46 00 03 00 00 00 00 11 91 02 d4 00 00 70 38 18 10 00 00 00 0a e2 e4 11 91 0e 4f 00 00 00 48 18 06 00 03 00 00 00 00 11 91 7e 1d 00 01 ca bb 00 16 00 00 00 0a e2 d4 11 91 00 e2 00 00 75 83 00 46 00 03 00 00 00 00 11 91 02 d4 00 00 Data Ascii: 8XOH~PD~KuFp80OH~? uFp8OH~0~)uFp8OH~uF
2022-05-23 16:46:57 UTC	748	IN	Data Raw: 13 00 c6 00 00 00 09 7c 3c 0f 94 6d 1f 00 01 95 fd 00 c6 00 00 00 09 7c 24 0f 94 03 03 00 01 95 f2 02 c3 00 00 00 09 7c 10 0f 94 6d 1f 00 01 95 e7 00 c6 00 00 00 09 7b 9c 0f 93 6d 18 00 01 95 d1 02 c3 00 00 00 09 79 cc 0f 92 6d 08 00 01 95 c6 00 c6 00 00 00 09 78 bc 0f 92 03 f3 00 00 94 b1 00 c6 00 00 00 09 78 a8 0f 92 03 03 00 01 95 bb 00 c6 00 00 00 09 78 90 0f 92 03 03 00 01 95 b0 00 c6 00 00 00 09 78 74 0f 90 6e 00 00 00 00 48 18 86 00 00 00 09 77 cc 0f 8f 65 21 00 00 00 48 18 86 00 00 00 09 77 30 0f 8d 6d f8 00 00 00 48 18 86 00 00 00 09 76 94 0f 8d 6c e6 00 01 95 a5 00 c6 00 00 00 09 76 84 0f 8c 6d f1 00 00 00 48 18 86 00 00 00 09 75 d0 0f 8b 65 26 00 00 00 48 18 86 00 00 00 09 75 30 0f 8a 6c d8 00 01 95 9a 02 c3 00 00 00 09 75 10 0f 89 6c d8 00 01 Data Ascii: \|<m\|$\|m{mymxxxxtnHwe!Hw0mHvlvmHue&Hu0lul
2022-05-23 16:46:57 UTC	764	IN	Data Raw: 04 01 e1 00 00 00 07 57 8c 0d 11 61 19 00 01 6b 89 01 e1 00 00 00 07 57 0c 0d 0e 61 04 00 01 6b 42 01 e1 00 00 00 07 56 d4 0d 0d 60 f3 00 01 6b 37 00 91 00 00 00 07 55 e8 0d 0a 60 d5 00 01 6b 26 00 93 00 08 00 07 52 84 0d 08 60 cb 00 00 74 63 03 c3 00 00 00 07 52 6c 0d 07 60 c2 00 01 15 c5 00 86 00 00 00 07 52 5c 0d 06 60 9b 00 01 6b 00 08 86 00 00 00 07 51 a0 0d 05 60 9b 00 01 6a e6 08 86 00 00 00 07 50 d0 0d 03 55 de 00 01 57 8b 01 c6 00 00 00 07 50 c0 0d 02 3e 5b 00 01 57 8b 01 c6 00 00 00 07 50 a8 0c fe 60 83 00 01 6a db 00 81 00 00 00 07 4e 4c 0c fd 36 d0 00 01 6a c5 00 86 00 00 00 07 4e 34 0c fc 36 d0 00 01 17 0a 00 86 00 00 00 07 4e 1c 0c fb 36 d0 00 01 6a ac 00 86 00 00 00 07 4e 04 0c f9 60 68 00 01 0d d1 00 93 00 00 00 07 4c e4 0c f7 60 54 00 01 Data Ascii: WakWakBV`k7U`k&R`tcRl`R\`kQ`jPUWP>[WP`jNL6jN46N6jN`hL`T
2022-05-23 16:46:57 UTC	780	IN	Data Raw: f8 00 93 00 00 00 04 3b 20 09 10 04 dc 00 01 2f e3 00 93 00 00 00 04 3b 0c 09 10 04 dc 00 01 2f ce 00 93 00 00 00 04 3a f8 09 10 0d 64 00 01 2f b9 00 93 00 00 00 04 3a e0 09 10 05 0e 00 01 2f a4 00 93 00 00 00 04 3a c4 09 10 32 3c 00 01 2f 8f 00 93 00 00 00 04 3a ac 09 10 0d 64 00 01 2f 7a 00 93 00 00 00 04 3a 94 09 10 0d 64 00 01 2f 65 00 93 00 00 00 04 3a 7c 09 10 05 07 00 01 2f 50 00 93 00 00 00 04 3a 68 09 0f 04 c8 00 01 2f 3b 00 93 00 00 00 04 3a 54 09 0f 04 dc 00 01 2f 26 00 93 00 00 00 04 3a 40 09 0f 0d 64 00 01 2f 11 00 93 00 00 00 04 3a 28 09 0f 11 3d 00 01 2e ef 00 93 00 00 00 04 3a 14 09 0f 16 d9 00 01 2e da 00 93 00 00 00 04 39 f8 09 0f 32 3c 00 01 2e c5 00 93 00 00 00 04 39 e0 09 0f 04 56 00 01 2e b0 00 93 00 00 00 04 39 cc 09 0f 04 dc 00 01 Data Ascii: ; /;/:d/:/:2</:d/z:d/e:\|/P:h/;:T/&:@d/:(=.:.92<.9V.9
2022-05-23 16:46:57 UTC	796	IN	Data Raw: e7 00 93 00 00 00 02 1a a0 05 68 12 47 00 00 e5 d2 00 93 00 00 00 02 1a 8c 05 68 16 2e 00 00 e5 bd 00 93 00 00 00 02 1a 78 05 68 05 15 00 00 e5 a8 00 93 00 00 00 02 1a 64 05 68 2a 6d 00 00 e5 93 00 93 00 00 00 02 1a 48 05 68 21 1f 00 00 e5 7e 00 93 00 00 00 02 1a 30 05 68 02 d4 00 00 70 38 18 91 00 00 00 02 1a 1c 05 68 02 d4 00 00 e5 6a 00 96 00 00 00 02 10 e4 05 67 2d 1b 00 00 e5 5f 00 91 00 00 00 02 10 d4 05 67 23 12 00 00 02 bf 00 93 00 00 00 02 10 c4 05 66 2d 14 00 00 e5 54 00 91 00 00 00 02 10 b4 05 66 23 e1 00 00 02 bf 00 93 00 00 00 02 10 a4 05 66 02 d4 00 00 70 38 18 91 00 00 00 02 10 90 05 66 04 dc 00 00 e5 14 00 93 00 00 00 02 10 7c 05 66 2d 09 00 00 e4 ff 00 93 00 00 00 02 10 6c 05 66 02 dc 00 00 e4 ea 00 93 00 00 00 02 10 58 05 66 0d 2c 00 00 Data Ascii: hGh.xhdh*mHh!~0hp8hjg-_g#f-Tf#fp8f\|f-lfXf,
2022-05-23 16:46:57 UTC	812	IN	Data Raw: 25 00 93 00 00 00 00 d0 cc 00 c6 04 f8 00 00 b5 10 00 93 00 00 00 00 d0 b4 00 c6 16 d3 00 00 b4 fb 00 93 00 00 00 00 d0 a4 00 c6 02 dc 00 00 b4 e6 00 93 00 00 00 00 d0 90 00 c6 03 52 00 00 b4 d1 00 93 00 00 00 00 d0 80 00 c6 02 d4 00 00 70 38 18 91 00 00 00 00 d0 6c 00 c6 16 cd 00 00 72 bd 01 e1 00 00 00 00 d0 5c 00 c6 16 bc 00 00 72 bd 01 e1 00 00 00 00 d0 04 00 c6 03 2c 00 00 72 bd 01 e1 00 00 00 00 cf f4 00 c6 00 e2 00 00 b4 b6 01 e1 00 00 00 00 cf e4 00 c6 16 b6 00 00 72 bd 01 e1 00 00 00 00 cf d4 00 c6 03 03 00 00 72 bd 01 e1 00 00 00 00 cb 24 00 c6 00 e2 00 00 72 bd 01 e1 00 00 00 00 cb 18 00 c5 00 be 00 00 00 48 18 86 00 00 00 00 ca 5c 00 c5 0d 88 00 00 b4 2c 00 93 00 00 00 00 ca 48 00 c5 16 95 00 00 b4 0e 00 93 00 00 00 00 ca 30 00 c5 04 f8 00 00 Data Ascii: %Rp8lr\r,rrr$rH\,H0
2022-05-23 16:46:57 UTC	828	IN	Data Raw: 03 02 e5 00 01 bf 82 00 03 02 e5 00 01 bf 5f 00 03 02 e5 00 01 bf 3c 00 03 02 e5 00 01 bf 19 00 03 02 e5 00 01 be f6 00 03 02 e5 00 01 be d3 00 03 02 e5 00 01 be b0 00 03 02 e5 00 01 be 8d 00 03 02 e5 00 01 be 6a 00 03 02 e5 00 01 be 47 00 03 74 2b 00 01 be 24 00 13 02 e5 00 01 be 01 00 03 02 e5 00 01 bd de 00 03 02 e5 00 01 bd bb 00 03 02 e5 00 01 bd 98 00 03 02 e5 00 01 bd 75 00 03 02 e5 00 01 bd 52 00 03 02 e5 00 01 bd 2f 00 03 02 e5 00 01 bd 0c 00 03 02 e5 00 01 bc e9 00 03 02 e5 00 01 bc c6 00 03 02 e5 00 01 bc a3 00 03 02 e5 00 01 bc 80 00 03 02 e5 00 01 bc 5d 00 03 02 e5 00 01 bc 3a 00 03 02 e5 00 01 bc 17 00 03 02 e5 00 01 bb f4 00 03 02 e5 00 01 bb d1 00 03 02 e5 00 01 bb ae 00 03 02 e5 00 01 bb 8b 00 03 02 e5 00 01 bb 68 00 03 02 e5 00 01 bb 45 Data Ascii: _<jGt+$uR/]:hE
2022-05-23 16:46:57 UTC	844	IN	Data Raw: 8e 00 65 00 00 00 00 00 00 6f 48 00 00 01 00 24 c2 0c 8d 00 65 00 00 00 00 00 00 6f 34 00 00 01 00 24 be 0c 8c 00 65 00 00 00 00 00 00 6f 20 00 00 01 00 24 ba 0c 8b 00 65 00 00 00 00 00 00 6f 0c 00 00 01 00 24 b6 0c 8a 00 65 00 00 00 00 00 00 6e f8 00 00 01 00 24 b2 0c 89 00 65 00 00 00 00 00 00 6e e4 00 00 01 00 24 ae 0c 88 00 65 00 00 00 00 00 00 6e d0 00 00 01 00 24 aa 0c 87 00 65 00 00 00 00 00 00 6e bc 00 00 01 00 24 a6 0c 86 00 65 00 00 00 00 00 00 6e a8 00 00 01 00 24 a2 0c 85 00 65 00 00 00 00 00 00 6e 94 00 00 01 00 24 9e 0c 84 00 65 00 00 00 00 00 00 6e 80 00 00 01 00 24 9a 0c 83 00 65 00 00 00 00 00 00 6e 6c 00 00 01 00 24 96 0c 82 00 65 00 00 00 00 00 00 6e 58 00 00 01 00 24 92 0c 81 00 65 00 00 00 00 00 00 6e 44 00 00 01 00 24 8e 0c 80 00 65 Data Ascii: eoH$eo4$eo $eo$en$en$en$en$en$en$en$enl$enX$enD$e
2022-05-23 16:46:57 UTC	860	IN	Data Raw: 00 00 00 00 00 28 30 00 00 01 00 16 8a 08 ff 00 65 00 00 00 00 00 00 28 1c 00 00 01 00 16 86 08 fe 00 65 00 00 00 00 00 00 28 08 00 00 01 00 16 82 08 fd 00 65 00 00 00 00 00 00 27 f4 00 00 01 00 16 7e 08 fc 00 65 00 00 00 00 00 00 27 e0 00 00 01 00 16 7a 08 fb 00 65 00 00 00 00 00 00 27 cc 00 00 01 00 16 76 08 fa 00 65 00 00 00 00 00 00 27 b8 00 00 01 00 16 72 08 f9 00 65 00 00 00 00 00 00 27 a4 00 00 01 00 16 6e 08 f8 00 65 00 00 00 00 00 00 27 90 00 00 01 00 16 6a 08 f7 00 65 00 00 00 00 00 00 27 7c 00 00 01 00 16 66 08 f6 00 65 00 00 00 00 00 00 27 68 00 00 01 00 16 62 08 f5 00 65 00 00 00 00 00 00 27 54 00 00 01 00 16 5e 08 f4 00 65 00 00 00 00 00 00 27 40 00 00 01 00 16 5a 08 f3 00 65 00 00 00 00 00 00 27 2c 00 00 01 00 16 56 08 f2 00 65 00 00 00 00 Data Ascii: (0e(e(e'~e'ze've're'ne'je'\|fe'hbe'T^e'@Ze',Ve
2022-05-23 16:46:57 UTC	876	IN	Data Raw: 1d 4c b3 28 05 2b 46 00 2a 06 00 0f 0f 28 02 00 06 03 d0 62 72 e8 5e 28 05 2b 4a 2a 06 00 24 6e 6f 01 0e 00 0e 02 0e 66 18 b1 a1 28 05 2b 4e 00 2a 06 00 0f 0f 28 02 00 06 02 d0 6b 19 e7 01 28 05 2b 4a 2a 06 00 24 6a 6f 01 0e 00 0e 02 0e 39 03 5c 42 28 05 2b 4e 00 2a 06 00 0f 0f 28 02 00 06 01 d0 6c 1e d7 c6 28 05 2b 4a 00 00 2a 06 00 24 66 6f 00 0e 01 0e 37 1c 6f 27 28 05 2b 46 00 2a 06 00 0f 0f 28 02 00 06 00 d0 43 58 02 2f 28 05 2b 4a 00 00 2a 06 00 24 62 6f 00 0e 01 0e 6b 7d b1 85 28 05 2b 46 00 2a 06 00 0f 0f 28 02 00 05 ff d0 4f 67 94 a8 28 05 2b 4a 00 00 2a 06 00 24 5e 6f 02 0e 01 0e 00 0e 03 0e 37 09 45 ef 28 05 2b 56 00 2a 06 00 0f 0f 28 02 00 05 fe d0 34 7b e3 14 28 05 2b 4a 00 00 2a 06 00 24 5a 6f 00 0e 01 0e 67 5e e5 15 28 05 2b 46 00 2a 06 00 Data Ascii: L(+F(br^(+J$nof(+N(k(+J$jo9\B(+N(l(+J$fo7o'(+F(CX/(+J$bok}(+F(Og(+J$^o7E(+V(4{(+J$Zog^(+F*
2022-05-23 16:46:57 UTC	892	IN	Data Raw: 04 7c d0 2e 32 39 b1 28 05 2b 4a 2a 06 00 1e 52 6f 01 0e 00 0e 02 0e 44 62 1a 34 28 05 2b 4e 00 2a 06 00 0f 0f 28 02 00 04 7b d0 6b 3a f6 77 28 05 2b 4a 00 00 2a 06 00 1e 4e 6f 00 0e 01 0e 3b 04 08 cf 28 05 2b 46 00 2a 06 00 0f 0f 28 02 00 04 7a d0 49 45 44 36 28 05 2b 4a 00 00 2a 06 00 1e 4a 6f 00 0e 01 0e 66 61 a2 3a 28 05 2b 46 00 2a 06 00 0f 0f 28 02 00 04 79 d0 3d 37 fb ac 28 05 2b 4a 00 00 2a 06 00 1e 46 6f 00 0e 01 0e 6a 07 75 c0 28 05 2b 46 00 2a 06 00 0f 0f 28 02 00 04 78 d0 40 54 a6 f9 28 05 2b 4a 2a 06 00 1e 42 6f 01 0e 00 0e 02 0e 3e 00 ce 03 28 05 2b 4e 00 2a 06 00 0f 0f 28 02 00 04 77 d0 69 27 1e c7 28 05 2b 4a 2a 06 00 1e 3e 6f 01 0e 00 0e 02 0e 5a 42 32 12 28 05 2b 4e 00 2a 06 00 0f 0f 28 02 00 04 76 d0 40 5c 25 b7 28 05 2b 4a 2a 06 00 1e Data Ascii: \|.29(+JRoDb4(+N({k:w(+JNo;(+F(zIED6(+JJofa:(+F(y=7(+JFoju(+F(x@T(+JBo>(+N(wi'(+J>oZB2(+N(v@\%(+J*
2022-05-23 16:46:57 UTC	908	IN	Data Raw: 0e 01 0e 6a 0b 9b f6 28 05 2b 46 00 2a 06 00 0f 0f 28 02 00 02 f1 d0 6e 23 36 e1 28 05 2b 4a 00 00 2a 06 00 18 26 6f 02 0e 01 0e 00 0e 03 0e 6a 70 95 a9 28 05 2b 56 00 2a 06 00 0f 0f 28 02 00 02 f0 d0 56 4d d8 a9 28 05 2b 4a 00 00 2a 06 00 18 22 6f 00 0e 01 0e 30 27 b4 af 28 05 2b 46 00 2a 06 00 0f 0f 28 02 00 02 ef d0 39 4b e1 94 28 05 2b 4a 00 2a 06 00 18 1e 6f 07 0e 06 0e 05 0e 04 0e 03 0e 02 0e 01 0e 00 0e 08 0e 5a 22 cf e7 28 05 2b 00 00 00 00 00 00 00 1f 00 0a 30 03 00 2a 06 00 0f 0f 28 02 00 02 ee d0 64 07 c0 a5 28 05 2b 4a 00 00 2a 06 00 18 1a 6f 02 0e 01 0e 00 0e 03 0e 6c 02 cd cc 28 05 2b 56 00 2a 06 00 0f 0f 28 02 00 02 ed d0 53 50 b2 39 28 05 2b 4a 00 00 2a 06 00 18 16 6f 00 0e 01 0e 4f 0e 52 f1 28 05 2b 46 00 2a 06 00 0f 0f 28 02 00 02 ec d0 Data Ascii: j(+F(n#6(+J&ojp(+V(VM(+J"o0'(+F(9K(+JoZ"(+0(d(+Jol(+V(SP9(+JoOR(+F*(
2022-05-23 16:46:57 UTC	924	IN	Data Raw: 2a 00 00 00 01 38 00 00 00 05 00 00 00 23 00 00 00 06 00 00 00 03 45 00 00 0c fe ff ff ff cf 38 00 00 00 09 38 00 00 00 00 20 26 00 00 00 14 39 17 00 00 00 00 20 06 00 13 27 28 16 02 00 00 00 00 38 06 00 13 77 28 04 00 08 3a 7e 3a 21 64 22 28 05 2b 11 00 00 01 00 00 00 85 00 03 30 13 00 00 2a 00 00 00 00 38 06 00 23 97 28 04 00 0c 42 7e 03 02 35 40 10 b7 28 05 2b 66 00 00 00 ff ff ff 9a 38 ff ff ff 74 39 02 00 01 b6 75 03 ff ff ff 67 38 00 00 00 00 20 26 ff ff ff 72 39 06 00 13 48 28 00 00 00 00 20 04 00 07 b6 7d 04 00 07 b6 7b 02 00 01 b6 74 03 02 ff ff ff 92 38 00 00 00 01 20 26 ff ff ff 9d 3a 06 00 13 48 28 00 00 00 01 20 04 00 07 b5 7d 04 00 07 b5 7b 02 00 01 b6 74 03 02 ff ff ff bd 38 00 00 00 02 20 26 ff ff ff c8 3a 06 00 13 48 28 00 00 00 01 20 04 Data Ascii: 8#E88 &9 '(8w(:~:!d"(+08#(B~5@(+f8t9ug8 &r9H( }{t8 &:H( }{t8 &:H(
2022-05-23 16:46:57 UTC	940	IN	Data Raw: 0e 11 04 ff ff fc 71 38 00 00 00 43 20 26 ff ff fc 7c 3a 06 00 12 c1 28 00 00 00 01 20 02 13 14 00 00 04 c3 38 15 13 01 00 00 35 8d 08 11 ff ff fc 9c 38 00 00 00 25 20 00 00 05 04 39 0a 00 01 da 6f 06 00 13 09 28 9a 11 11 15 11 ff ff fc ba 38 00 00 00 18 20 00 00 05 55 38 ff ff fc c5 38 00 01 0e fe 00 00 00 3c 20 00 00 06 09 3a 0a 00 01 da 6f 06 00 12 fa 28 04 00 07 88 7b 12 11 ff ff fc ed 38 00 00 00 2a 20 00 00 04 53 38 ff ff fc fc 38 00 00 00 2e 20 0a 13 02 00 01 ad 74 06 00 13 0a 28 06 00 12 c9 28 06 00 0f b4 28 02 00 01 ad 20 04 11 ff ff fd 1f 38 00 01 0e fe 00 00 00 48 20 06 00 13 06 28 0a 00 02 c7 7e 05 11 00 00 02 8e 38 00 00 03 e1 39 06 00 24 6b 28 04 00 0c 77 7e 0f 11 04 00 00 06 ae 38 0a 00 02 cb 6f 04 00 07 88 7b 10 11 0a 00 03 f7 7e 05 11 ff Data Ascii: q8C &\|:( 858% 9o(8 U88< :o({8* S88. t((( 8H (~89$k(w~8o{~
2022-05-23 16:46:57 UTC	956	IN	Data Raw: 00 00 00 3d 20 06 00 24 57 28 04 00 0c 72 7e 06 00 24 cb 28 04 00 0c 8f 7e 16 11 05 11 04 00 07 91 7b 02 ff ff ea 05 38 1c 13 06 00 24 73 28 04 00 0c 79 7e 02 00 01 98 74 16 11 ff ff 96 f9 38 00 00 01 87 20 26 ff ff 97 04 3a 06 00 12 c0 28 00 00 01 b7 20 08 13 14 ff ff 97 16 38 00 00 01 94 20 ff ff f5 a0 38 ff ff 97 21 38 00 10 0e fe 00 00 01 64 20 00 00 06 e1 3a 16 11 ff ff 97 3a 38 00 00 00 e1 20 13 13 0a 00 03 e7 6f 1b 11 0a 00 03 8e 6f 0a 00 00 31 28 06 00 0f b4 28 02 00 01 93 20 ff ff 97 61 38 00 00 01 ad 20 26 ff ff 97 6c 3a 06 00 12 c0 28 00 00 02 1b 20 ff ff f4 0a 3a 05 11 ff ff 97 82 38 00 00 00 3b 20 00 00 09 6b 3a 0a 00 01 da 6f 1a 11 ff ff 97 98 38 00 00 01 13 20 00 00 0b 1f 38 ff ff 97 a7 38 00 00 01 76 20 26 ff ff 97 b2 3a 06 00 12 c1 28 00 Data Ascii: = $W(r~$(~{8$s(y~t8 &:( 8 8!8d ::8 oo1(( a8 &l:( :8; k:o8 88v &:(
2022-05-23 16:46:57 UTC	971	IN	Data Raw: 7e 04 11 06 00 12 c9 28 06 00 0f b4 28 01 00 00 23 20 04 00 07 91 7b 02 ff ff dd 74 38 00 00 33 b7 39 05 11 ff ff f9 e4 38 00 00 44 fb 39 0d 11 ff ff d3 82 38 00 00 01 71 20 00 00 15 6c 38 ff ff f3 19 38 16 13 06 00 12 b2 28 06 00 24 63 28 04 00 0c 75 7e 04 00 07 91 7b 02 2a ff ff d3 ae 38 00 00 00 2f 20 ff ff f7 66 38 ff ff d3 bd 38 00 00 01 72 20 00 00 0b 6e 39 16 11 ff ff d3 ce 38 00 00 01 69 20 ff ff e0 82 3a 2a 11 ff ff d3 db 38 00 10 0e fe 00 00 01 8f 20 04 00 07 95 7d 59 17 01 00 00 05 a5 04 00 07 98 7b 02 02 ff ff f4 75 38 00 00 01 ce 39 16 11 2a 00 00 30 9c 38 00 00 15 3d 38 ff ff d4 17 38 00 00 01 b8 20 16 13 06 00 12 b2 28 06 00 24 63 28 04 00 0c 75 7e 04 00 07 91 7b 02 2a ff ff d4 39 38 00 00 02 3b 20 00 00 3e b2 39 0d 11 ff ff d4 4a 38 00 00 Data Ascii: ~((# {t8398D98q l88($c(u~{8/ f88r n98i :8 }Y{u8908=88 ($c(u~{98; >9J8
2022-05-23 16:46:57 UTC	987	IN	Data Raw: 4c 00 00 00 f1 00 00 00 07 45 00 00 0c fe 00 00 00 00 38 00 00 0e fe 00 00 00 02 20 45 37 db ee 28 05 2b 11 00 01 f7 00 00 01 cd 00 03 30 1b 00 00 ff ff ff d1 38 01 13 16 ff ff ff ca 38 00 00 00 00 20 26 ff ff ff d5 39 06 00 12 c0 28 00 00 00 00 20 06 00 24 3f 28 04 00 0c 6c 7e 01 12 02 2a 00 00 00 00 38 00 00 00 05 00 00 00 01 45 00 00 0c fe 00 00 00 3a 38 57 11 9d 82 28 05 2b 11 00 00 62 00 00 00 4e 00 04 30 13 00 2a 06 00 13 73 28 04 00 08 39 7e 65 6f 9e c5 28 05 2b 4a 00 2a 06 00 13 73 28 04 00 08 39 7e 5c 1b f3 18 28 05 2b 4a 00 2a 06 00 13 73 28 04 00 08 39 7e 58 64 b4 6a 28 05 2b 4a 00 2a 06 00 13 73 28 04 00 08 39 7e 68 31 80 24 28 05 2b 4a 00 00 2a 0a 00 03 d4 6f 00 00 09 fe 5c 21 8e fc 28 05 2b 46 00 00 2a 04 00 07 8d 7e 4a 50 69 42 28 05 2b 36 Data Ascii: LE8 E7(+088 &9( $?(l~8E:8W(+bN0s(9~eo(+Js(9~\(+Js(9~Xdj(+Js(9~h1$(+Jo\!(+F*~JPiB(+6
2022-05-23 16:46:57 UTC	1003	IN	Data Raw: 00 10 c7 73 6a 04 00 07 41 7b 04 00 07 42 7c 06 00 12 05 28 02 2a 06 00 10 c7 73 04 00 07 4c 7b 04 00 07 4d 7c 06 00 12 04 28 02 00 00 00 2d 38 66 6d d9 a1 28 05 2b 00 00 00 00 00 00 00 49 00 03 30 03 00 00 00 ff ff ff c3 38 ff ff ff de 40 1e 0a 00 00 38 28 2a 06 00 10 c9 73 6e 04 00 07 40 7b 04 00 07 42 7c 06 00 12 02 28 02 2a 06 00 10 c9 73 04 00 07 4b 7b 04 00 07 4d 7c 06 00 12 01 28 02 00 00 00 2d 38 44 79 12 ac 28 05 2b 00 00 00 00 00 00 00 49 00 03 30 03 2a 06 00 10 c7 73 6a 04 00 07 41 7b 04 00 07 42 7c 06 00 12 00 28 02 2a 06 00 10 c7 73 04 00 07 4c 7b 04 00 07 4d 7c 06 00 11 ff 28 02 00 00 00 00 38 00 00 00 1b 40 1e 0a 00 00 38 28 5a 27 d4 9d 28 05 2b 00 00 00 00 00 00 00 44 00 03 30 03 00 00 00 2a 06 00 11 9b 73 6c 04 00 07 54 7b 02 61 59 e1 88 Data Ascii: sjA{B\|(sL{M\|(-8fm(+I08@8(sn@{B\|(sK{M\|(-8Dy(+I0sjA{B\|(sL{M\|(8@8(Z'(+D0slT{aY
2022-05-23 16:46:57 UTC	1019	IN	Data Raw: 00 00 02 20 ff ff ff 5b 3a 06 00 23 a7 28 04 00 0c 46 7e 03 7a 06 00 12 0f 73 2a 06 00 10 c9 73 6e db 04 00 07 40 7b 04 00 07 42 7c 06 00 11 51 6f 02 04 00 07 40 7b 04 00 07 42 7c 06 00 11 51 6f 02 00 01 98 74 03 2a 06 00 10 c9 73 db 04 00 07 4b 7b 04 00 07 4d 7c 06 00 11 33 28 02 04 00 07 4b 7b 04 00 07 4d 7c 06 00 11 53 6f 02 00 01 98 74 03 ff ff ff 85 38 00 00 00 00 20 26 ff ff ff 90 39 06 00 11 2a 28 00 00 00 00 20 00 00 01 22 38 ff ff ff a4 38 00 00 00 06 20 01 10 06 00 23 ab 28 04 00 0c 47 7e 03 ff ff ff bb 38 00 00 00 05 20 00 00 00 b9 38 00 00 00 fd 38 00 00 01 2a 40 1e 06 00 11 2b 28 00 00 00 00 38 00 00 00 d3 00 00 00 24 00 00 00 3b 00 00 00 b9 00 00 00 15 00 00 00 5a 00 00 00 05 00 00 00 07 45 00 00 0c fe 00 00 00 00 38 00 00 0e fe 00 00 00 03 Data Ascii: [:#(F~zssn@{B\|Qo@{B\|QotsK{M\|3(K{M\|Sot8 &9( "88 #(G~8 88@+(8$;ZE8
2022-05-23 16:46:57 UTC	1035	IN	Data Raw: 03 30 13 ff ff ff c4 38 ff ff ff 77 39 06 00 23 a7 28 04 00 0c 46 7e 03 ff ff ff 75 38 00 00 00 01 20 26 ff ff ff 80 3a 06 00 10 a9 28 00 00 00 01 20 01 10 06 00 23 ab 28 04 00 0c 47 7e 03 7a 06 00 12 0f 73 2a 06 00 10 4d 73 da 04 00 07 4c 7b 04 00 07 4d 7c 02 00 01 97 74 03 04 00 07 4c 7b 04 00 07 4d 7c 02 ff ff ff c4 38 00 00 00 00 20 26 ff ff ff cf 3a 06 00 10 a8 28 00 00 00 00 20 00 00 00 3c 39 06 00 24 03 28 04 00 0c 5d 7e 03 00 00 00 2a 38 00 00 00 05 00 00 00 2f 00 00 00 02 45 00 00 0c fe 00 00 00 8f 38 3a 66 72 81 28 05 2b 11 00 00 01 00 00 00 b0 00 03 30 13 00 00 00 ff ff ff c3 38 ff ff ff ea 39 06 00 24 03 28 04 00 0c 5d 7e 03 7a 06 00 12 0f 73 2a 06 00 10 4d 73 59 04 00 07 4c 7b 04 00 07 4d 7c 02 00 01 97 74 03 04 00 07 4c 7b 04 00 07 4d 7c 02 Data Ascii: 08w9#(F~u8 &:( #(G~zsMsL{M\|tL{M\|8 &:( <9$(]~8/E8:fr(+089$(]~zs*MsYL{M\|tL{M\|
2022-05-23 16:46:57 UTC	1051	IN	Data Raw: 7b 04 00 07 42 7c 02 37 31 bf d6 28 05 2b 6a 00 2a 06 00 0f d5 73 17 82 04 00 07 40 7b 04 00 07 42 7c 02 52 2f 36 31 28 05 2b 6a 00 2a 06 00 0f d5 73 17 b3 04 00 07 41 7b 04 00 07 42 7c 02 3d 41 bc 7d 28 05 2b 6a 00 2a 06 00 10 3c 28 02 48 2c 19 71 28 05 2b 3a 00 2a 06 00 11 52 6f 02 60 60 77 7f 28 05 2b 3a 00 2a 06 00 11 50 6f 02 43 19 40 ce 28 05 2b 3a 00 2a 06 00 10 2f 28 02 4a 70 de 77 28 05 2b 3a 00 2a 06 00 10 3b 28 02 6b 39 41 33 28 05 2b 3a 00 2a 06 00 11 51 6f 02 42 29 0c 2d 28 05 2b 3a 00 2a 06 00 11 4f 6f 02 54 2f 2d c8 28 05 2b 3a 00 2a 06 00 10 2e 28 02 6e 71 3d ff 28 05 2b 3a 00 2a 06 00 10 52 73 1e 6e 04 00 07 40 7b 04 00 07 42 7c 02 57 34 9a fe 28 05 2b 6a 00 2a 06 00 10 50 73 1d 6a 04 00 07 41 7b 04 00 07 42 7c 02 4c 47 a9 28 28 05 2b 6a Data Ascii: {B\|71(+js@{B\|R/61(+jsA{B\|=A}(+j<(H,q(+:Ro``w(+:PoC@(+:/(Jpw(+:;(k9A3(+:QoB)-(+:OoT/-(+:.(nq=(+:Rsn@{B\|W4(+jPsjA{B\|LG((+j
2022-05-23 16:46:57 UTC	1067	IN	Data Raw: 00 00 01 45 00 15 0c fe 00 00 00 04 38 00 00 00 00 20 26 00 00 00 0f 39 06 00 0f 71 28 00 00 00 00 20 06 00 0f 5e 28 06 00 0f 5d 28 06 00 0f 5d 28 04 11 06 00 0f 5c 28 06 00 0f 5b 28 06 00 0f 5a 28 04 11 06 00 0f 59 28 04 00 07 23 7e 06 00 0f 58 28 25 06 00 0f 57 28 69 8e 2a 11 16 2a 11 25 0a 00 00 f7 73 17 13 11 04 11 04 13 06 00 0f 56 28 13 13 06 00 0f 55 28 1f 11 03 11 06 00 0f 54 28 17 25 06 00 0f 53 28 1f 13 00 0f 0c fe 9c 00 27 0c fe 00 00 00 0f 20 00 0f 0c fe 00 27 0e fe 58 00 00 00 72 20 00 00 00 31 20 9c 00 27 0c fe 00 00 00 0f 20 00 0f 0c fe 00 27 0e fe 58 00 00 00 01 20 00 00 00 64 20 9c 00 27 0c fe 00 00 00 0f 20 00 0f 0c fe 00 27 0e fe 58 00 00 00 5b 20 00 00 00 15 20 9c 00 27 0c fe 00 00 00 0f 20 00 0f 0c fe 00 27 0e fe 59 00 00 00 43 20 00 Data Ascii: E8 &9q( ^(](](\([(Z(Y(#~X(%W(i**%sV(U(T(%S(' 'Xr 1 ' 'X d ' 'X[ ' 'YC
2022-05-23 16:46:57 UTC	1083	IN	Data Raw: 00 00 02 20 26 ff ff ff ac 39 04 00 08 08 7b 04 00 07 df 7e 00 00 00 02 20 04 00 06 bf 7d 07 0e 02 ff ff ff c8 38 00 00 00 03 20 04 00 06 bb 7d 04 0e 02 00 00 00 12 38 00 00 00 3e 00 00 00 5c 00 00 00 94 00 00 00 4a 00 00 00 cb 00 00 00 a5 00 00 00 17 00 00 00 07 45 00 00 0c fe ff ff ff e1 38 00 00 00 ad 38 0a 00 00 11 28 02 00 00 00 00 38 06 00 13 77 28 04 00 08 3a 7e 41 1b bc 6a 28 05 2b 11 00 00 01 00 00 01 17 00 03 30 13 00 2a 04 00 06 b8 7b 02 31 4e b9 5b 28 05 2b 3a 00 00 7a 0a 00 00 16 73 67 18 80 45 28 05 2b 36 00 ff ff ff 87 38 ff ff ff ee 39 04 00 06 b7 7b 02 2a 04 00 06 b7 7b 02 ff ff ff 90 38 00 00 00 00 20 26 ff ff ff 9b 39 04 00 07 e4 7b 04 00 07 df 7e 00 00 00 00 20 04 00 06 b8 7d 06 00 23 4f 28 04 00 0c 30 7e 04 00 06 bf 7b 02 04 00 06 b7 Data Ascii: &9{~ }8 }8>\JE88(8w(:~Aj(+0{1N[(+:zsgE(+689{{8 &9{~ }#O(0~{
2022-05-23 16:46:57 UTC	1099	IN	Data Raw: 30 16 0d 28 05 2b 4a 00 2a 06 00 13 73 28 04 00 08 39 7e 5f 59 a7 fd 28 05 2b 4a 00 2a 0a 00 03 76 28 00 01 09 fe 00 00 09 fe 00 6d 12 7d a4 28 05 2b 5a 00 2a 0a 00 02 b7 28 00 01 09 fe 00 00 09 fe 00 69 59 08 16 28 05 2b 5a 00 00 2a 0a 00 03 75 6f 00 00 09 fe 2f 55 67 56 28 05 2b 46 00 00 2a 0a 00 03 4f 6f 00 02 09 fe 00 01 09 fe 00 00 09 fe 68 77 fb 7b 28 05 2b 66 00 00 2a 0a 00 02 da 6f 00 02 09 fe 00 01 09 fe 00 00 09 fe 49 48 c3 cc 28 05 2b 66 00 00 2a 0a 00 02 cb 6f 00 02 09 fe 00 01 09 fe 00 00 09 fe 51 75 be 3c 28 05 2b 66 00 00 2a 0a 00 02 b2 6f 00 00 09 fe 4a 44 47 31 28 05 2b 46 00 00 2a 0a 00 01 ed 6f 00 00 09 fe 5d 61 ba 28 28 05 2b 46 00 00 2a 0a 00 02 85 6f 00 00 09 fe 56 15 ed 1a 28 05 2b 46 00 00 2a 0a 00 02 b1 6f 00 00 09 fe 6b 0a 46 c1 Data Ascii: 0(+Js(9~_Y(+Jv(m}(+Z(iY(+Zuo/UgV(+FOohw{(+foIH(+foQu<(+foJDG1(+Fo]a((+FoV(+F*okF
2022-05-23 16:46:57 UTC	1115	IN	Data Raw: 3a 04 00 08 19 7b 04 00 07 df 7e 00 00 00 02 20 ff ff ff 9e 38 ff ff fc 4f 38 00 00 00 0b 20 06 00 1a 4f 28 04 00 09 f0 7e 14 02 04 ff ff fc 66 38 00 00 00 03 20 26 ff ff fc 71 3a 04 00 07 eb 7b 04 00 07 df 7e 00 00 00 0a 20 06 13 06 00 22 d7 28 04 00 0c 12 7e 02 2a ff ff fc 93 38 00 00 00 09 20 05 13 06 00 22 cb 28 04 00 0c 0f 7e 05 03 02 2a ff ff fc ad 38 00 00 00 04 20 00 13 06 00 19 ff 28 04 00 09 dc 7e 03 ff ff fc c4 38 00 00 00 01 20 26 ff ff fc cf 3a 04 00 07 e8 7b 04 00 07 df 7e 00 00 00 01 20 ff ff fd 62 3a 06 00 0e a7 28 14 00 11 ff ff fc f0 38 00 00 00 01 20 26 ff ff fc fb 3a 04 00 07 ef 7b 04 00 07 df 7e 00 00 00 0d 20 06 00 22 df 28 04 00 0c 14 7e 06 11 02 ff ff fd 1c 38 00 00 00 06 20 ff ff fd 7a 39 06 00 1a 0f 28 04 00 09 e0 7e 03 ff ff ff Data Ascii: :{~ 8O8 O(~f8 &q:{~ "(~8 "(~8 (~8 &:{~ b:(8 &:{~ "(~8 z9(~
2022-05-23 16:46:57 UTC	1131	IN	Data Raw: 02 13 02 00 01 3a 74 06 00 0e 40 28 a2 01 00 00 06 8c 06 00 22 43 28 04 00 0b ed 7e 02 1e 25 a2 02 00 01 22 8c 0a 11 1d 25 a2 02 00 01 22 8c 08 11 1c 25 a2 02 00 01 22 8c 19 00 00 00 01 38 18 00 00 00 06 3b 1a 06 00 22 3f 28 04 00 0b ec 7e 02 1b 25 a2 01 00 00 05 8c 04 00 06 cf 7b 02 1a 25 a2 09 11 19 25 a2 07 11 18 25 a2 06 11 17 25 a2 04 00 06 d7 7b 02 16 25 01 00 00 16 8d 09 1f 9a 16 0b 11 7a 0a 00 01 2b 73 06 00 17 27 28 04 00 09 26 7e 61 04 00 08 18 7b 04 00 07 df 7e 61 3d 9f 61 fb 20 61 0a b0 bb 64 20 55 bf 26 12 20 ff ff f6 aa 38 00 00 00 04 20 26 ff ff f6 b5 39 04 00 07 fd 7b 04 00 07 df 7e 00 00 00 0a 20 01 13 04 00 06 d0 7b 02 ff ff f6 d1 38 00 00 00 26 20 ff ff fb 7c 3a 0a 00 02 6d 28 14 04 00 06 dc 7b 02 7a 0a 00 02 0c 73 ff ff f6 f2 38 00 00 Data Ascii: :t@("C(~%"%"%"8;"?(~%{%%%%{%z+s'(&~a{~a=a ad U& 8 &9{~ {8& \|:m({zs8
2022-05-23 16:46:57 UTC	1147	IN	Data Raw: 45 00 00 0c fe 00 00 00 12 38 0a 00 00 82 28 01 12 02 11 00 00 00 00 c2 38 00 00 00 05 00 00 00 9f 00 00 00 c7 00 00 00 03 45 00 03 0c fe 00 00 00 00 38 00 03 0e fe 00 00 00 01 20 49 38 90 6e 28 05 2b 11 00 01 a5 00 00 01 13 00 03 30 1b 00 00 00 00 6d 03 1b 5a 02 c1 00 02 00 00 00 00 6d 01 ae af 00 ff 00 02 00 00 1c 01 ff ff ff e1 38 01 13 50 03 ff ff fc 2e 38 00 0d 0e fe 00 00 00 03 20 ff ff fe a8 3f 16 00 11 ff ff fc 44 38 00 0d 0e fe 00 00 00 02 20 ff ff fc aa 3a 06 00 0d b5 28 14 0b 11 ff ff fc 63 38 00 00 00 0d 20 26 ff ff fc 6e 3a 04 00 08 0f 7b 04 00 07 df 7e 00 00 00 08 20 0c 13 04 00 06 b3 7b 02 2a 15 ff ff fd 23 38 dc ff ff ff a4 38 00 00 00 00 20 26 ff ff ff af 3a 04 00 07 ec 7b 04 00 07 df 7e 00 00 00 00 20 06 00 0d ca 28 07 11 ff ff ff ca 38 Data Ascii: E8(8E8 I8n(+0mZm8P.8 ?D8 :(c8 &n:{~ {*#88 &:{~ (8
2022-05-23 16:46:57 UTC	1163	IN	Data Raw: 00 00 00 01 45 00 02 0c fe 00 00 00 04 38 00 00 00 00 20 26 00 00 00 0f 39 04 00 07 d7 7b 04 00 07 df 7e 00 00 00 00 20 00 00 00 3d 39 03 11 ff ff ff 79 dd 00 00 00 00 38 06 00 18 23 28 04 00 09 65 7e 03 11 ff ff ff c1 38 00 00 00 00 20 26 ff ff ff cc 39 04 00 07 d8 7b 04 00 07 df 7e 00 00 00 00 20 06 00 21 8b 28 04 00 0b bf 7e 04 03 11 02 00 00 00 2d 38 00 00 00 05 00 00 00 32 00 00 00 02 45 00 00 0c fe 00 00 00 04 38 00 00 00 01 20 26 00 00 00 0f 39 04 00 08 14 7b 04 00 07 df 7e 00 00 00 01 20 06 00 21 87 28 04 00 0b be 7e 04 03 11 00 2a ff ff ff c0 38 00 00 00 00 20 26 ff ff ff cb 3a 04 00 07 db 7b 04 00 07 df 7e 00 00 00 00 20 03 13 06 00 18 1b 28 04 00 09 63 7e 05 02 03 00 00 00 2f 38 00 00 00 05 00 00 00 34 00 00 00 02 45 00 01 0c fe 00 00 00 00 38 Data Ascii: E8 &9{~ =9y8#(e~8 &9{~ !(~-82E8 &9{~ !(~*8 &:{~ (c~/84E8
2022-05-23 16:46:57 UTC	1179	IN	Data Raw: fe 00 00 00 0b 20 ff ff fc ce 3c 16 06 00 19 63 28 04 00 09 b5 7e 09 11 06 11 ff ff fc 20 38 ff ff fe b5 39 06 00 0c ea 28 14 00 11 ff ff fb 56 38 00 00 00 07 20 04 13 0a 00 02 e3 73 03 11 02 11 a2 06 00 21 2b 28 04 00 0b a7 7e 03 16 25 01 00 00 16 8d 17 0a 00 02 ce 6f a2 06 00 20 c7 28 04 00 0b 8e 7e 0a 00 00 31 28 06 00 0c e4 28 01 00 00 03 20 02 16 25 01 00 00 2e 8d 17 01 11 ff ff fb a9 38 00 00 00 0c 20 ff ff fe e4 3a 06 00 0c d9 28 0d 11 ff ff fb bf 38 00 00 00 0d 20 0a 13 06 00 21 37 28 04 00 0b aa 7e 09 11 02 ff ff fd be 38 01 13 14 ff ff fb e0 38 00 00 00 10 20 02 13 a2 0a 00 02 4b 6f 06 00 17 27 28 04 00 09 26 7e 61 04 00 08 01 7b 04 00 07 df 7e 61 4e 2d aa 84 20 04 5b 14 d7 20 01 11 16 25 01 00 00 d1 8d 17 ff ff fc 1c 38 00 00 00 16 20 00 00 00 Data Ascii: <c(~ 89(V8 s!+(~%o (~1(( %.8 :(8 !7(~88 Ko'(&~a{~aN- [ %8
2022-05-23 16:46:57 UTC	1195	IN	Data Raw: ef 7b 04 00 07 df 7e 61 2c 66 d9 c7 20 59 09 8f 34 74 20 45 9e 43 e4 20 06 00 0c eb 28 0a 00 02 0a 6f 03 06 00 17 27 28 04 00 09 26 7e 61 04 00 08 1b 7b 04 00 07 df 7e 61 17 2f 00 80 20 6c ad 9d 31 20 ff ff fd f0 38 00 00 00 04 20 26 06 00 18 3f 28 04 00 09 6c 7e 00 11 04 00 06 7c 7b 02 ff ff fe 0d 38 00 00 00 08 20 00 00 00 7e 38 ff ff fe 1c 38 00 00 00 02 20 26 ff ff fe 27 39 04 00 08 19 7b 04 00 07 df 7e 00 00 00 02 20 ff ff ff a1 39 00 11 ff ff fe 42 38 00 00 00 03 20 06 00 20 b7 28 04 00 0b 8a 7e 16 00 11 ff ff fe 55 38 00 02 0e fe 00 00 00 06 20 00 00 00 77 39 04 ff ff fe 6d 38 00 00 00 00 20 26 ff ff fe 78 39 04 00 07 e4 7b 04 00 07 df 7e 00 00 00 00 20 00 13 06 00 20 b3 28 04 00 0b 89 7e 03 02 ff ff fe 9a 38 00 00 00 05 20 26 ff ff fe a5 39 04 00 Data Ascii: {~a,f Y4t EC (o'(&~a{~a/ l1 8 &?(l~\|{8 ~88 &'9{~ 9B8 (~U8 w9m8 &x9{~ (~8 &9
2022-05-23 16:46:57 UTC	1211	IN	Data Raw: 7b 04 00 07 df 7e 61 b6 2f e4 62 20 58 98 77 b0 0d 20 ee 29 56 24 20 ff ff e6 a4 38 0b 13 0a 00 02 ae 73 69 8e 00 11 ff ff e1 d5 38 00 00 00 8c 20 26 ff ff e1 e0 39 04 00 07 ef 7b 04 00 07 df 7e 00 00 00 5c 20 ff ff ea 2a 3a 06 00 20 27 28 04 00 0b 66 7e 06 00 20 13 28 04 00 0b 61 7e 19 11 ff ff e2 0f 38 00 00 00 5b 20 26 ff ff e2 1a 3a 04 00 08 32 7b 04 00 07 df 7e 00 00 00 50 20 ff ff e6 96 39 06 00 1f fb 28 04 00 0b 5b 7e 19 11 ff ff e2 3f 38 00 00 00 3c 20 26 ff ff e2 4a 39 04 00 07 fc 7b 04 00 07 df 7e 00 00 00 14 20 00 00 00 1f 38 ff ff e2 63 38 00 00 00 0f 20 ff ff ef 4d 38 ff ff e2 72 38 00 00 00 77 20 09 13 9a 08 11 07 11 ff ff e9 cc 38 ff ff fa 51 38 ff ff ff bb 38 04 13 06 00 0c 6a 28 06 11 ff ff e2 9b 38 00 00 00 31 20 00 00 00 66 38 ff ff e2 Data Ascii: {~a/b Xw )V$ 8si8 &9{~\ *: '(f~ (a~8[ &:2{~P 9([~?8< &J9{~ 8c8 M8r8w 8Q88j(81 f8
2022-05-23 16:46:57 UTC	1227	IN	Data Raw: 00 07 df 7e 00 00 00 02 20 54 01 00 00 05 a5 01 11 02 ff ff ff 7f 38 00 00 00 00 20 26 ff ff ff 8a 39 04 00 08 2d 7b 04 00 07 df 7e 00 00 00 01 20 ff ff ff f8 39 01 11 2a 00 00 00 4f 38 ff ff ff c5 3d 16 4a 02 ff ff ff b3 38 00 00 00 00 20 26 ff ff ff be 39 04 00 07 ec 7b 04 00 07 df 7e 00 00 00 00 20 00 00 00 2c 39 06 00 1e 9f 28 04 00 0b 04 7e 01 12 04 03 2a 00 00 00 41 38 00 00 00 05 00 00 00 45 00 00 00 6c 00 00 00 46 00 00 00 04 45 00 00 0c fe 00 00 00 d1 38 46 5f 91 da 28 05 2b 11 00 01 11 00 00 00 e8 00 05 30 13 ff ff fe e5 38 00 00 00 06 20 ff ff ff 29 39 03 ff ff fe f5 38 00 00 00 05 20 26 ff ff ff 00 3a 04 00 08 0e 7b 04 00 07 df 7e 00 00 00 04 20 ff ff ff 40 38 00 00 00 00 38 ff ff ff 4c 3a 06 00 1d a3 28 04 00 0a c5 7e 00 12 05 04 03 2a 17 ff Data Ascii: ~ T8 &9-{~ 9O8=J8 &9{~ ,9(~A8ElFE8F_(+08 )98 &:{~ @88L:(~*
2022-05-23 16:46:57 UTC	1243	IN	Data Raw: ce ae 20 63 00 00 00 06 20 3a 48 c7 76 20 28 11 27 11 ff ff f5 c5 38 ff ff ff 6e 3a 06 00 1d f7 28 04 00 0a da 7e 17 11 02 7a 0a 00 01 2b 73 06 00 0c 4e 28 0a 00 02 0a 6f 04 00 06 5c 7b 02 06 00 17 27 28 04 00 09 26 7e 61 04 00 07 ef 7b 04 00 07 df 7e 61 e0 cf 40 f4 20 61 35 6e 7d 8a 20 c5 c8 9f 89 20 ff ff ed e7 38 00 00 00 93 20 0b 13 01 00 00 03 74 13 11 ff ff ed f6 38 00 0e 0e fe 00 00 00 69 20 ff ff f1 0e 39 31 11 ff ff ee 0f 38 00 00 00 67 20 26 06 00 1d f3 28 04 00 0a d9 7e 16 11 17 11 15 11 02 ff ff ee 2b 38 00 00 00 65 20 26 ff ff ee 36 39 04 00 07 dc 7b 04 00 07 df 7e 00 00 00 0b 20 ff ff f8 37 39 0a 00 00 51 28 06 00 17 27 28 04 00 09 26 7e 61 04 00 08 18 7b 04 00 07 df 7e 61 60 59 4b 50 20 61 8d 14 2a 29 20 8f dd f1 34 20 14 11 ff ff ee 7c 38 Data Ascii: c :Hv ('8n:(~z+sN(o\{'(&~a{~a@ a5n} 8 t8i 918g &(~+8e &69{~ 79Q('(&~a{~a`YKP a*) 4 \|8
2022-05-23 16:46:57 UTC	1259	IN	Data Raw: 26 ff ff ff ae 3a 04 00 08 22 7b 04 00 07 df 7e 00 00 00 00 20 ff ff ff d8 3a 06 00 1b ab 28 04 00 0a 47 7e 00 12 2a 17 2a 16 00 00 00 6a 38 02 13 06 00 1b 9b 28 04 00 0a 43 7e 00 12 00 00 00 13 38 00 00 00 1a 00 00 00 05 00 00 00 18 00 00 00 03 45 00 01 0c fe 00 00 00 61 38 47 7a 64 4a 28 05 2b 11 00 01 51 00 00 00 cf 00 03 30 13 00 00 2a 06 00 1d cf 28 04 00 0a d0 7e 03 04 00 06 44 7b 02 4c 42 f8 a4 28 05 2b 66 00 00 2a 06 00 1d cb 28 04 00 0a cf 7e 03 04 00 06 44 7b 02 46 6c 84 df 28 05 2b 66 00 2a 06 00 1d c7 28 04 00 0a ce 7e 04 03 04 00 06 44 7b 02 6b 65 73 7d 28 05 2b 6a 2a 06 00 0b a8 73 04 00 06 44 7b 02 31 3a 0c c3 28 05 2b 4e 00 00 00 2a 02 00 01 57 8c 06 00 0b a8 73 04 00 06 44 7b 02 64 39 a4 b1 28 05 2b 62 00 00 00 2a 06 00 1d bf 28 04 00 0a Data Ascii: &:"{~ :(G~*j8(C~8Ea8GzdJ(+Q0(~D{LB(+f(~D{Fl(+f(~D{kes}(+jsD{1:(+NWsD{d9(+b*(
2022-05-23 16:46:57 UTC	1275	IN	Data Raw: 20 06 00 1a 2f 28 04 00 09 e8 7e 01 11 03 ff ff fd 61 38 00 00 00 0a 20 06 00 1b 33 28 04 00 0a 29 7e 03 ff ff fd 76 38 00 00 00 0b 20 26 ff ff fd 81 3a 04 00 07 d4 7b 04 00 07 df 7e 00 00 00 27 20 06 00 1b 3b 28 04 00 0a 2b 7e 17 02 11 03 00 00 00 2d 38 06 00 1b 3f 28 04 00 0a 2c 7e 17 06 11 03 ff ff fd b6 38 00 00 00 29 20 ff ff ff 19 38 ff ff fd c5 38 00 00 00 19 20 06 00 1a 23 28 04 00 09 e5 7e 03 ff ff fd da 38 00 00 00 01 20 26 ff ff fd e5 3a 04 00 07 fb 7b 04 00 07 df 7e 00 00 00 01 20 06 00 1a 27 28 04 00 09 e6 7e 0a 00 00 23 6f 06 00 17 27 28 04 00 09 26 7e 61 04 00 08 35 7b 04 00 07 df 7e 61 3b d0 5f fb 20 59 37 86 8e e0 20 4f 17 89 df 20 06 00 1a 17 28 04 00 09 e2 7e 06 00 0b 45 28 06 00 0b 43 28 02 00 01 1b 20 03 03 ff ff fe 49 38 00 00 00 16 Data Ascii: /(~a8 3()~v8 &:{~' ;(+~-8?(,~8) 88 #(~8 &:{~ '(~#o'(&~a5{~a;_ Y7 O (~E(C( I8
2022-05-23 16:46:57 UTC	1291	IN	Data Raw: 07 e8 7b 04 00 07 df 7e 00 00 00 00 20 00 00 00 31 39 04 00 06 24 7b 02 00 00 00 2a 38 00 00 00 40 00 00 00 05 00 00 00 2f 00 00 00 03 45 00 00 0c fe 00 00 00 00 38 00 00 0e fe 00 00 00 01 20 36 28 ec 59 28 05 2b 11 00 00 01 00 00 01 0a 00 06 30 13 00 ff ff ff 79 38 06 00 1b 17 28 04 00 0a 22 7e 04 06 00 17 27 28 04 00 09 26 7e 61 04 00 07 d0 7b 04 00 07 df 7e 61 7e ec ff d8 20 58 9a 42 0a 07 20 ad 04 33 9a 20 00 00 00 26 38 06 00 17 27 28 04 00 09 26 7e 61 04 00 08 0c 7b 04 00 07 df 7e 61 72 ed eb 31 20 65 7f b4 67 20 00 00 00 25 38 00 00 00 05 39 04 00 06 24 7b 02 06 00 1a 17 28 04 00 09 e2 7e 0a 00 00 31 28 06 00 0f b4 28 02 00 00 ed 20 03 03 2a 00 00 00 01 38 36 4f 2d 02 28 05 2b 00 00 00 00 00 00 00 93 00 06 30 03 ff ff ff 8e 38 ff ff ff c4 39 04 00 Data Ascii: {~ 19${8@/E8 6(Y(+0y8("~'(&~a{~a~ XB 3 &8'(&~a{~ar1 eg %89${(~1(( 86O-(+089
2022-05-23 16:46:57 UTC	1307	IN	Data Raw: e2 7e 06 00 0a 55 28 06 00 0f b4 28 01 00 00 16 20 03 03 2a 00 00 00 00 38 06 00 1a a3 28 04 00 0a 05 7e 04 06 00 17 27 28 04 00 09 26 7e 61 04 00 07 f0 7b 04 00 07 df 7e 61 a6 e6 8d fd 20 eb 75 db 75 20 03 ff ff ff c7 38 00 00 00 02 20 04 13 06 00 1c 77 28 04 00 0a 7a 7e 02 00 00 00 49 38 00 00 00 1c 00 00 00 cb 00 00 00 05 00 00 01 ac 00 00 01 92 00 00 00 4e 00 00 00 06 45 00 03 0c fe 00 00 00 00 38 00 03 0e fe 00 00 00 03 20 57 6c 10 8f 28 05 2b 11 00 01 2f 00 00 01 f8 00 06 30 1b ff ff ff e9 38 06 00 17 bf 28 04 00 09 4c 7e 04 0a 00 00 95 6f 03 2a 00 00 00 01 38 2f 2a 4f 64 28 05 2b 8e 00 00 00 2a 06 00 0a 53 28 a2 06 00 17 9b 28 04 00 09 43 7e 04 16 25 01 00 00 16 8d 17 14 04 00 06 03 7b 02 2e 3e 70 17 28 05 2b a2 00 00 2a 17 67 2b 10 53 28 05 2b 26 Data Ascii: ~U(( 8(~'(&~a{~a uu 8 w(z~I8NE8 Wl(+/08(L~o8/Od(+S((C~%{.>p(+*g+S(+&
2022-05-23 16:46:57 UTC	1323	IN	Data Raw: ff ff fe 36 38 00 00 00 01 20 26 ff ff fe 41 3a 04 00 08 35 7b 04 00 07 df 7e 00 00 00 01 20 06 00 17 53 28 04 00 09 31 7e 04 00 00 00 dc 38 00 00 01 2d 3b 18 06 11 ff ff fe 6d 38 00 00 00 00 20 26 ff ff fe 78 39 04 00 08 01 7b 04 00 07 df 7e 00 00 00 00 20 02 13 0a 00 02 74 7e ff ff fe 93 38 00 00 00 08 20 0a 00 02 7b 6f 03 11 02 11 1b 00 00 1b 8c 00 11 ff ff fe ad 38 00 00 00 0a 20 26 ff ff fe b8 3a 04 00 08 1e 7b 04 00 07 df 7e 00 00 00 04 20 ff ff ff 78 3e 16 06 13 25 06 00 17 57 28 04 00 09 32 7e 04 ff ff fe dc 38 00 05 0e fe 00 00 00 11 20 00 00 00 0e 38 ff ff fe f3 38 00 00 00 06 20 26 ff ff fe fe 39 04 00 07 c9 7b 04 00 07 df 7e 00 00 00 02 20 00 13 1b 00 00 1b a5 0a 00 02 70 28 0a 00 02 78 7b 02 00 00 00 31 38 02 13 1b 00 00 2b a5 06 00 1a 73 28 Data Ascii: 68 &A:5{~ S(1~8-;m8 &x9{~ t~8 {o8 &:{~ x>%W(2~8 88 &9{~ p(x{18+s(
2022-05-23 16:46:57 UTC	1339	IN	Data Raw: 00 38 06 00 13 77 28 04 00 08 3a 7e 66 62 92 12 28 05 2b 11 00 00 01 00 00 00 53 00 03 30 13 00 2a 0a 00 00 31 28 00 00 09 fe 00 5b 11 e7 13 28 05 2b 4a 00 00 2a 04 00 05 e4 7e 40 30 0f f5 28 05 2b 36 00 00 00 2a 01 fe 14 04 00 05 e4 7e 3a 19 3a 24 28 05 2b 42 00 00 ff ff ff 95 38 06 00 13 73 28 04 00 08 39 7e ff ff ff 91 38 00 00 00 00 20 26 ff ff ff 9c 3a 04 00 07 eb 7b 04 00 07 df 7e 00 00 00 00 20 04 00 05 e3 80 06 00 09 c5 28 06 00 0f b4 28 01 00 00 05 20 ff ff ff c4 38 00 00 00 01 20 26 ff ff ff cf 3a 04 00 07 fd 7b 04 00 07 df 7e 00 00 00 00 20 06 00 13 77 28 04 00 08 3a 7e 2a 00 00 00 00 38 00 00 00 2f 00 00 00 05 00 00 00 02 45 00 00 0c fe 00 00 00 73 38 41 0c 9b f2 28 05 2b 11 00 00 01 00 00 00 8e 00 03 30 13 00 2a 00 00 00 00 38 06 00 1a b7 28 Data Ascii: 8w(:~fb(+S01([(+J~@0(+6~::$(+B8s(9~8 &:{~ (( 8 &:{~ w(:~8/Es8A(+0*8(
2022-05-23 16:46:57 UTC	1355	IN	Data Raw: 00 00 01 20 06 00 1a 2f 28 04 00 09 e8 7e 08 11 03 ff ff fd 09 38 00 00 00 0b 20 06 00 1b 3b 28 04 00 0a 2b 7e 17 05 11 03 ff ff fd 21 38 00 00 00 02 20 06 00 1a 43 28 04 00 09 ed 7e 04 11 03 00 00 00 2f 38 05 13 06 00 1a 3b 28 04 00 09 eb 7e 03 ff ff fd 46 38 00 03 0e fe 00 00 00 0e 20 04 13 06 00 1a 3b 28 04 00 09 eb 7e 03 ff ff fd 65 38 00 00 00 00 20 26 ff ff fd 70 39 04 00 07 d7 7b 04 00 07 df 7e 00 00 00 00 20 07 13 16 ff ff fd 87 38 00 00 00 05 20 06 00 1a 3f 28 04 00 09 ec 7e 17 04 11 03 ff ff fd 9f 38 00 00 00 0a 20 26 ff ff fd aa 3a 04 00 08 08 7b 04 00 07 df 7e 00 00 00 04 20 06 00 1a 43 28 04 00 09 ed 7e 02 11 03 ff ff ff ca 38 06 00 1a 2f 28 04 00 09 e8 7e 08 11 03 ff ff fd d9 38 00 03 0e fe 00 00 00 06 20 06 00 1b 8b 28 04 00 0a 3f 7e 06 00 Data Ascii: /(~8 ;(+~!8 C(~/8;(~F8 ;(~e8 &p9{~ 8 ?(~8 &:{~ C(~8/(~8 (?~
2022-05-23 16:46:57 UTC	1371	IN	Data Raw: 08 0c 7b 04 00 07 df 7e 00 00 00 05 20 0a 00 01 ef 6f 16 03 11 01 00 00 34 74 03 ff ff fe 9d 38 00 00 00 33 38 16 2a 03 11 ff ff fd 82 38 00 00 00 0a 20 26 ff ff fd 8d 39 04 00 07 ce 7b 04 00 07 df 7e 00 00 00 0e 20 26 06 00 18 3f 28 04 00 09 6c 7e 06 00 1a 73 28 04 00 09 f9 7e 04 14 04 00 06 0a 7b 02 05 11 ff ff fd c0 38 00 00 00 03 20 04 13 06 00 17 47 28 04 00 09 2e 7e 04 ff ff fd d3 38 00 01 0e fe 00 00 00 0b 20 06 00 1a 7f 28 04 00 09 fc 7e 02 11 03 11 05 11 ff ff fd f5 38 00 00 00 09 20 06 00 17 5b 28 04 00 09 33 7e 04 04 11 ff ff fe 0c 38 00 00 00 10 20 00 00 00 56 3a 06 00 1a 7b 28 04 00 09 fb 7e 00 11 04 ff ff fe 28 38 00 00 00 07 20 ff ff ff ab 38 ff ff fe 37 38 00 00 00 02 20 00 00 00 81 40 18 06 00 17 73 28 04 00 09 39 7e 04 ff ff fe 52 38 00 Data Ascii: {~ o4t838*8 &9{~ &?(l~s(~{8 G(.~8 (~8 [(3~8 V:{(~(8 878 @s(9~R8
2022-05-23 16:46:57 UTC	1387	IN	Data Raw: 20 26 ff ff ff 94 39 04 00 07 ca 7b 04 00 07 df 7e 00 00 00 01 20 06 00 13 73 28 04 00 08 39 7e ff ff ff b2 38 00 00 00 00 20 26 ff ff ff bd 3a 04 00 08 1f 7b 04 00 07 df 7e 00 00 00 00 20 06 00 13 77 28 04 00 08 3a 7e 00 00 00 52 38 04 00 05 8f 80 0a 00 02 10 73 00 00 00 00 38 00 00 00 3d 00 00 00 14 00 00 00 05 00 00 00 03 45 00 00 0c fe 00 00 00 00 38 00 00 0e fe 00 00 00 02 20 49 32 35 12 28 05 2b 11 00 00 01 00 00 00 91 00 03 30 13 ff ff ff 6e 38 ff ff ff 97 39 03 2a ff ff ff 68 38 00 00 00 01 20 26 ff ff ff 73 3a 04 00 07 ec 7b 04 00 07 df 7e 00 00 00 00 20 06 00 17 bf 28 04 00 09 4c 7e 03 06 00 17 bb 28 04 00 09 4b 7e 02 03 7a 0a 00 01 8d 73 06 00 17 27 28 04 00 09 26 7e 61 04 00 07 f8 7b 04 00 07 df 7e 61 2f de 52 ea 20 59 67 fc ce 35 20 d8 dd a4 Data Ascii: &9{~ s(9~8 &:{~ w(:~R8s8=E8 I25(+0n89*h8 &s:{~ (L~(K~zs'(&~a{~a/R Yg5
2022-05-23 16:46:57 UTC	1403	IN	Data Raw: ff ff ff 69 3d 16 04 0e ff ff fd 96 38 00 00 00 02 20 ff ff fe 33 38 ff ff fd a5 38 00 00 00 0b 20 ff ff fe 42 38 ff ff fd b4 38 00 00 00 02 20 26 ff ff fd bf 39 04 00 08 37 7b 04 00 07 df 7e 00 00 00 05 20 ff ff fe e5 3b 17 05 7a 06 00 19 43 28 04 00 09 ad 7e 04 ff ff fd e6 38 00 00 00 0a 20 00 00 00 d0 38 ff ff fd f5 38 00 00 00 06 20 06 00 19 3f 28 04 00 09 ac 7e 04 02 03 04 00 05 84 7b 04 00 00 00 6d 38 06 00 19 47 28 04 00 09 ae 7e 04 18 04 0e ff ff fe 25 38 00 00 00 0f 20 06 00 19 4f 28 04 00 09 b0 7e 05 04 00 11 ff ff fe 3d 38 00 00 00 0c 20 26 ff ff fe 48 39 04 00 07 d6 7b 04 00 07 df 7e 00 00 00 0e 20 00 00 00 1f 3a 06 00 18 1f 28 04 00 09 64 7e 14 16 02 17 16 0a 00 00 1a 6f 02 04 04 00 05 84 7b 04 ff ff fe 7d 38 00 00 00 00 20 26 ff ff fe 88 39 Data Ascii: i=8 388 B88 &97{~ ;zC(~8 88 ?(~{m8G(~%8 O(~=8 &H9{~ :(d~o{}8 &9
2022-05-23 16:46:57 UTC	1419	IN	Data Raw: 00 05 00 00 00 03 45 00 02 0c fe 00 00 00 64 38 51 47 d2 cb 28 05 2b 11 00 00 d9 00 00 00 cb 00 03 30 13 00 00 2a 06 00 18 7f 28 04 00 09 7c 7e 02 06 00 07 52 73 03 5a 79 48 2c 28 05 2b 66 00 00 00 2a 06 00 18 b7 28 04 00 09 8a 7e 06 00 17 27 28 04 00 09 26 7e 61 04 00 07 f0 7b 04 00 07 df 7e 61 9a 3f 5e d1 20 65 28 53 df e9 20 02 62 22 44 02 28 05 2b d2 00 ff ff fe f6 38 00 00 00 01 20 26 ff ff ff 01 3a 04 00 08 25 7b 04 00 07 df 7e 00 00 00 00 20 00 13 06 00 17 27 28 04 00 09 26 7e 61 04 00 08 14 7b 04 00 07 df 7e 61 14 e7 5e 71 20 47 06 b0 6e 20 ff ff ff 37 38 00 00 00 02 20 ff ff ff e4 39 06 00 07 ea 28 14 03 00 00 00 16 38 00 00 00 3b 38 0a 00 02 0a 6f 03 ff ff ff 5d 38 00 00 00 00 20 26 ff ff ff 68 3a 04 00 07 f9 7b 04 00 07 df 7e 00 00 00 00 20 00 Data Ascii: Ed8QG(+0(\|~RsZyH,(+f(~'(&~a{~a?^ e(S b"D(+8 &:%{~ '(&~a{~a^q Gn 78 9(8;8o]8 &h:{~
2022-05-23 16:46:57 UTC	1435	IN	Data Raw: 00 00 01 20 26 ff ff ff b7 3a 04 00 07 e4 7b 04 00 07 df 7e 00 00 00 02 20 00 00 00 65 3a 04 00 05 37 7b 02 00 00 01 06 38 00 00 00 2f 00 00 00 fe 00 00 00 c8 00 00 00 58 00 00 00 05 00 00 00 4c 00 00 00 9f 00 00 01 0b 00 00 00 08 45 00 00 0c fe 00 00 00 00 38 00 00 0e fe 00 00 00 03 20 63 58 34 b4 28 05 2b 11 00 00 02 00 00 01 7f 00 05 30 13 00 00 ff ff fc af 38 00 00 0e fe 00 00 00 13 20 ff ff ff c8 39 0a 00 01 f9 6f 02 12 04 11 04 00 05 39 7b 02 ff ff fc d5 38 00 00 00 0d 20 ff ff fd 99 38 ff ff ff b3 38 02 13 15 ff ff fc ec 38 00 00 00 03 20 02 13 15 ff ff fc f5 38 00 00 0e fe 00 00 00 14 20 ff ff fe 5d 3a 03 ff ff fd 0d 38 00 00 00 0e 20 ff ff fe ba 3a 04 11 ff ff fd 1a 38 00 00 0e fe 00 00 00 0f 20 ff ff fe 93 38 ff ff fd 31 38 00 00 00 08 20 0a 00 Data Ascii: &:{~ e:7{8/XLE8 cX4(+08 9o9{8 888 8 ]:8 :8 818
2022-05-23 16:46:57 UTC	1451	IN	Data Raw: 00 00 20 00 00 00 1f 40 03 06 00 17 ef 28 04 00 09 58 7e 02 00 00 00 30 38 02 00 00 fa 15 fe 02 00 00 00 00 38 00 00 00 11 00 00 00 05 00 00 00 02 45 00 00 0c fe 00 00 00 00 38 00 00 0e fe 00 00 00 01 20 30 74 12 5d 28 05 2b 11 00 00 01 00 00 00 68 00 03 30 13 00 00 00 2a 04 00 04 d6 7d 0a 00 01 b5 28 02 0f 02 06 00 06 4b 28 03 00 00 00 01 38 16 00 00 00 06 3a 0a 00 01 b4 28 02 0f 02 06 00 13 77 28 04 00 08 3a 7e 53 5d 09 89 28 05 2b e2 00 00 00 2a 04 00 04 d5 7d 0a 00 01 b2 28 02 0f 02 06 00 06 4b 28 03 00 00 00 01 38 16 00 00 00 06 3a 0a 00 01 b1 28 02 0f 02 06 00 13 77 28 04 00 08 3a 7e 6e 24 19 75 28 05 2b e2 00 00 00 2a 04 00 04 d4 7d 0a 00 01 b0 28 02 0f 02 06 00 06 4b 28 03 00 00 00 01 38 16 00 00 00 06 3a 0a 00 01 af 28 02 0f 02 06 00 13 77 28 04 Data Ascii: @(X~088E8 0t](+h0}(K(8:(w(:~S](+}(K(8:(w(:~n$u(+*}(K(8:(w(
2022-05-23 16:46:57 UTC	1467	IN	Data Raw: 1d 20 00 10 06 00 17 ab 28 04 00 09 47 7e 05 03 04 09 11 ff ff f9 7c 38 00 00 00 0a 20 03 10 01 00 00 2e 74 06 00 17 93 28 04 00 09 41 7e 0a 11 06 00 17 8f 28 04 00 09 40 7e 03 ff ff f9 a4 38 00 00 00 1b 20 26 ff ff f9 af 3a 04 00 07 f9 7b 04 00 07 df 7e 00 00 00 0f 20 00 00 02 2c 38 ff ff f9 c8 38 00 00 00 2b 20 26 ff ff f9 d3 3a 04 00 07 c9 7b 04 00 07 df 7e 00 00 00 39 20 00 00 01 d1 3f 16 03 11 ff ff f9 ef 38 00 00 00 34 20 00 00 02 62 3c 16 02 11 7a 06 00 07 52 73 06 00 17 27 28 04 00 09 26 7e 61 04 00 07 fe 7b 04 00 07 df 7e 61 07 c6 de 1f 20 62 00 00 00 05 20 60 9c 2c fe 20 ff ff fc 99 38 02 10 15 ff ff fd 35 38 ff ff fc c4 3c 16 02 11 ff ff fa 42 38 00 00 00 10 20 00 00 02 b5 38 ff ff fa 51 38 00 00 00 07 20 00 00 00 5a 38 ff ff fa 60 38 00 00 00 Data Ascii: (G~\|8 .t(A~(@~8 &:{~ ,88+ &:{~9 ?84 b<zRs'(&~a{~a b `, 858<B8 8Q8 Z8`8
2022-05-23 16:46:57 UTC	1483	IN	Data Raw: 7b 04 00 07 df 7e 00 00 00 04 20 00 00 01 d0 3a 06 00 13 c3 28 04 00 08 4d 7e 00 00 00 00 00 38 00 00 00 05 00 00 00 01 45 00 03 0c fe 00 00 00 04 38 00 00 00 00 20 26 00 00 00 0f 39 04 00 08 01 7b 04 00 07 df 7e 00 00 00 00 20 00 00 ff ff ff 4f 38 00 00 00 02 20 00 00 03 10 38 ff ff ff 5e 38 00 00 00 01 20 26 ff ff ff 69 39 04 00 08 35 7b 04 00 07 df 7e 00 00 00 00 20 08 13 0a 00 00 46 73 ff ff ff 84 38 00 00 00 03 20 00 00 03 46 38 00 00 00 00 38 00 00 00 3a 3a 06 11 ff ff ff 9f 38 00 00 00 00 20 26 ff ff ff aa 39 04 00 07 e3 7b 04 00 07 df 7e 00 00 00 00 20 00 00 00 3a dd 00 00 00 00 38 26 00 00 00 45 dd 00 00 00 00 38 06 00 05 6f 28 00 00 0c 00 20 00 00 00 00 5a 38 00 00 00 05 00 00 03 9a 00 00 00 85 00 00 03 9b 00 00 00 94 00 00 00 5f 00 00 00 06 45 Data Ascii: {~ :(M~8E8 &9{~ O8 8^8 &i95{~ Fs8 F88::8 &9{~ :8&E8o( Z8_E
2022-05-23 16:46:57 UTC	1499	IN	Data Raw: 00 00 19 28 06 00 13 af 28 04 00 08 48 7e 2a 64 83 70 20 06 00 13 af 28 04 00 08 48 7e 2a 64 82 c6 20 ff ff fe aa 38 04 00 03 c9 80 2b 00 00 18 28 06 00 13 af 28 04 00 08 48 7e 2a 64 83 ec 20 06 00 13 af 28 04 00 08 48 7e 2a 64 82 c6 20 ff ff fe 05 38 00 00 00 09 20 04 00 03 c4 80 2b 00 00 17 28 06 00 13 af 28 04 00 08 48 7e 2a 64 83 53 20 06 00 13 af 28 04 00 08 48 7e 2a 64 82 c6 20 ff ff fe 37 38 00 00 00 00 20 26 ff ff fe 42 3a 04 00 08 0d 7b 04 00 07 df 7e 00 00 00 00 20 04 00 03 c2 80 2b 00 00 16 28 06 00 13 af 28 04 00 08 48 7e 2a 64 83 1e 20 06 00 13 af 28 04 00 08 48 7e 2a 64 82 c6 20 ff ff fe 7e 38 00 00 00 05 20 26 ff ff fe 89 39 04 00 07 d8 7b 04 00 07 df 7e 00 00 00 07 20 04 00 03 c1 80 2b 00 00 15 28 06 00 13 af 28 04 00 08 48 7e 2a 64 82 f1 Data Ascii: ((H~dp (H~d 8+((H~d (H~d 8 +((H~dS (H~d 78 &B:{~ +((H~d (H~d ~8 &9{~ +((H~*d
2022-05-23 16:46:57 UTC	1515	IN	Data Raw: 92 b7 20 ff ff fb 55 38 00 00 00 15 20 00 00 00 1f 38 ff ff fb 64 38 00 00 00 10 20 ff ff fd aa 38 ff ff fe fe 38 01 13 06 00 03 5c 28 0a 00 00 38 28 ff ff fb 84 38 00 00 00 19 20 26 ff ff fb 8f 3a 04 00 07 f2 7b 04 00 07 df 7e 00 00 00 11 20 ff ff fd ca 39 0d 11 ff ff fb aa 38 00 00 00 1c 20 00 00 01 41 38 ff ff fb b5 38 00 10 0e fe 00 00 00 1b 20 ff ff fe 03 39 0b 11 ff ff fe dc 38 00 13 06 00 15 e7 28 04 00 08 d6 7e 05 12 02 11 04 00 03 52 7b 03 11 2a 12 11 ff ff fe 4f 38 06 00 03 5d 28 0c 11 01 11 ff ff ff d8 38 0c 13 06 00 03 60 28 06 00 03 5f 28 05 ff ff fc 0d 38 00 00 00 0e 20 01 13 06 00 03 5c 28 06 00 03 5a 28 ff ff fc 23 38 00 00 00 11 20 26 ff ff fc 2e 39 04 00 08 04 7b 04 00 07 df 7e 00 00 00 0b 20 ff ff ff 8b 39 0e 11 ff ff fc 49 38 00 00 00 Data Ascii: U8 8d8 88\(8(8 &:{~ 98 A88 98(~R{*O8](8`(_(8 \(Z(#8 &.9{~ 9I8
2022-05-23 16:46:57 UTC	1531	IN	Data Raw: 11 20 01 13 02 00 00 10 a5 06 00 15 3b 28 04 00 08 ab 7e 17 16 00 12 06 00 02 98 28 06 00 02 99 28 02 00 00 79 20 06 00 13 af 28 04 00 08 48 7e 2a 64 92 f3 20 06 00 13 af 28 04 00 08 48 7e 2a 64 90 8a 20 ff ff fd 4a 38 00 00 00 0e 20 09 13 01 fe c0 00 00 17 20 01 11 7a 0a 00 01 2b 73 06 00 13 af 28 04 00 08 48 7e 2a 64 9d 98 20 00 00 00 f5 38 02 13 01 fe c0 00 00 22 20 01 11 ff ff fd 84 38 00 00 00 00 20 26 ff ff fd 8f 3a 04 00 08 11 7b 04 00 07 df 7e 00 00 00 00 20 06 13 01 fe c0 00 00 9a 20 01 11 7a 0a 00 01 2b 73 06 00 13 af 28 04 00 08 48 7e 2a 64 9c c9 20 ff ff fd c3 38 00 00 00 0c 20 26 ff ff fd ce 3a 04 00 08 06 7b 04 00 07 df 7e 00 00 00 04 20 ff ff fe b2 39 07 11 ff ff fd e9 38 00 00 00 04 20 26 ff ff fd f4 39 04 00 07 eb 7b 04 00 07 df 7e 00 00 Data Ascii: ;(~((y (H~d (H~d J8 z+s(H~d 8" 8 &:{~ z+s(H~d 8 &:{~ 98 &9{~
2022-05-23 16:46:57 UTC	1547	IN	Data Raw: 7b 04 00 07 df 7e 00 00 00 01 20 06 00 13 77 28 04 00 08 3a 7e ff ff ff 61 38 02 13 59 01 11 48 1b b3 8d 20 ff ff ff 4e 38 00 00 00 05 20 26 ff ff ff 59 39 04 00 07 e9 7b 04 00 07 df 7e 00 00 00 05 20 04 00 03 74 80 58 66 65 65 66 65 66 66 65 66 65 66 59 02 11 58 06 46 59 e8 20 01 11 04 00 03 74 7e 2a 00 00 00 01 38 04 00 03 6e 80 60 10 1f 04 00 03 6e 7e ff ff ff a1 38 00 00 00 03 20 06 00 13 73 28 04 00 08 39 7e ff ff ff b5 38 00 00 00 00 20 26 ff ff ff c0 3a 04 00 08 1d 7b 04 00 07 df 7e 00 00 00 00 20 04 00 03 71 80 0a 00 01 18 73 00 00 00 3d 38 00 00 00 54 00 00 00 2e 00 00 00 a4 00 00 00 95 00 00 00 cd 00 00 00 42 00 00 00 06 45 00 00 0c fe 00 00 00 00 38 00 00 0e fe 00 00 00 04 20 4c 0b 0c 9f 28 05 2b 11 00 00 2b 00 00 01 29 00 04 30 13 00 2a 06 00 Data Ascii: {~ w(:~a8YH N8 &Y9{~ tXfeefeffefefYXFY t~8n`n~8 s(9~8 &:{~ qs=8T.BE8 L(++)0
2022-05-23 16:46:57 UTC	1563	IN	Data Raw: 00 00 02 20 26 ff ff ff bb 3a 04 00 08 2c 7b 04 00 07 df 7e 00 00 00 08 20 02 13 16 00 00 00 4b 38 00 00 00 88 00 00 00 05 00 00 01 58 00 00 01 d2 00 00 01 59 00 00 01 09 00 00 01 14 00 00 00 27 00 00 00 50 00 00 00 09 45 00 05 0c fe 00 00 00 00 38 00 05 0e fe 00 00 00 05 20 64 5f 5d fc 28 05 2b 11 00 00 2f 00 00 02 21 00 05 30 1b 00 00 00 00 00 00 00 12 00 00 03 44 00 00 01 34 00 00 02 10 00 00 00 02 01 00 00 16 00 00 00 0b 00 00 03 2a 00 00 00 59 00 00 02 d1 00 00 00 00 01 00 00 16 00 00 00 e7 00 00 00 eb 00 00 00 12 00 00 00 d9 00 00 00 00 00 00 4c 41 00 ff ff fc 89 38 00 00 00 00 20 26 ff ff fc 94 39 04 00 07 dc 7b 04 00 07 df 7e 00 00 00 00 20 05 13 04 00 03 0b 7b 02 ff ff fc b0 38 00 00 00 06 20 dc 00 00 00 00 38 06 00 14 c3 28 04 00 08 8d 7e 03 12 Data Ascii: &:,{~ K8XY'PE8 d_](+/!0D4*YLA8 &9{~ {8 8(~
2022-05-23 16:46:57 UTC	1579	IN	Data Raw: 11 ff ff f9 37 38 00 00 00 09 20 26 ff ff f9 42 3a 04 00 07 e3 7b 04 00 07 df 7e 00 00 00 17 20 06 13 58 28 1f 06 11 7a 0a 00 00 ab 73 ff ff f9 63 38 00 00 00 1f 20 20 13 01 fe 16 06 00 00 ec 28 05 11 04 00 02 eb 7b 01 11 04 00 03 64 7e ff ff f9 85 38 00 00 00 32 20 ff ff fc e0 3a 29 11 ff ff fc 90 38 03 13 06 00 00 f0 28 40 1f 00 00 30 00 20 15 11 0b 11 04 00 02 ea 7b 01 11 04 00 03 65 7e ff ff f9 b9 38 00 00 00 2e 20 1b 13 06 00 00 f4 28 04 00 02 eb 7b 01 11 04 00 03 61 7e 7a 0a 00 00 ab 73 ff ff f9 dc 38 00 00 00 0a 20 0b 13 01 00 00 05 a5 0a 00 00 32 6f a2 01 00 00 05 8c 58 34 1f 02 11 17 25 a2 00 11 16 25 01 00 00 16 8d 18 14 0a 00 00 23 28 06 00 13 af 28 04 00 08 48 7e 2a 64 84 c0 20 0a 00 00 31 28 06 00 0f b4 28 01 00 00 71 20 ff ff fd ad 38 ff ff Data Ascii: 78 &B:{~ X(zsc8 ({d~82 :)8(@0 {e~8. ({a~zs8 2oX4%%#((H~*d 1((q 8
2022-05-23 16:46:57 UTC	1595	IN	Data Raw: 01 0e 00 00 01 de 00 00 01 7d 00 00 00 ac 00 00 00 05 00 00 00 70 00 00 00 3c 00 00 00 0b 45 00 0a 0c fe 00 00 00 d0 38 26 ff ff ff 5f dd 00 00 00 00 38 01 13 06 00 00 46 28 17 06 00 13 af 28 04 00 08 48 7e 2a 64 97 b5 20 00 2a 02 11 ff ff fe e0 38 00 00 00 00 20 26 ff ff fe eb 3a 04 00 08 2e 7b 04 00 07 df 7e 00 00 00 00 20 01 00 00 22 15 fe 05 12 ff ff ff 07 38 00 00 00 03 20 02 13 0a 00 00 35 7e ff ff ff 18 38 00 00 00 05 20 02 13 05 11 00 00 02 93 38 07 13 01 fe 00 00 10 00 20 06 00 00 45 28 02 ff ff ff 3a 38 00 00 00 04 20 06 13 0a 00 00 23 6f 06 00 13 af 28 04 00 08 48 7e 2a 64 97 e8 20 01 11 ff ff ff 5c 38 00 00 00 01 20 26 ff ff ff 67 39 04 00 08 00 7b 04 00 07 df 7e 00 00 00 02 20 00 00 00 55 dd 00 00 00 00 38 26 00 00 00 60 dd ff ff ff ca 38 00 Data Ascii: }p<E8&_8F((H~d 8 &:.{~ "8 5~8 8 E(:8 #o(H~*d \8 &g9{~ U8&`8

Target ID:	0
Start time:	18:46:20
Start date:	23/05/2022
Path:	C:\Users\user\Desktop\csgo aimlock v2.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\Desktop\csgo aimlock v2.exe"
Imagebase:	0x10000
File size:	4229120 bytes
MD5 hash:	F14B1FF9A9EBE48F275DFCDF52E3CB6E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET
Reputation:	low

Show Windows behavior

Target ID:	10
Start time:	18:47:38
Start date:	23/05/2022
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\cmd.exe" /c timeout 36
Imagebase:	0x7ff602050000
File size:	273920 bytes
MD5 hash:	4E2ACF4F8A396486AB4268C94A6A245F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Target ID:	12
Start time:	18:47:38
Start date:	23/05/2022
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff77f440000
File size:	625664 bytes
MD5 hash:	EA777DEEA782E8B4D7C7C33BBF8A4496
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Target ID:	13
Start time:	18:47:39
Start date:	23/05/2022
Path:	C:\Windows\System32\timeout.exe
Wow64 process (32bit):	false
Commandline:	timeout 36
Imagebase:	0x7ff6fa180000
File size:	30720 bytes
MD5 hash:	EB9A65078396FB5D4E3813BB9198CB18
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in. These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	File monitoring, Windows Registry
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may disable security tools to avoid possible detection of their tools and activities. This can take the form of killing security software or event logging processes, deleting Registry keys so that tools do not start at run time, or other methods to interfere with security tools scanning or reporting information.
Tactics:	Defense Evasion
Data Sources:	File monitoring, Process command-line parameters, Services, Windows Registry
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata
Platforms:	macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify file time attributes to hide new or changes to existing files. Timestomping is a technique that modifies the timestamps of a file (the modify, access, create, and change times), often to mimic files that are in the same folder. This is done, for example, on files that have been modified or created by the adversary so that they do not appear conspicuous to forensic investigators or file analysis tools.
Tactics:	Defense Evasion
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, File monitoring, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, Azure AD, GCP, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	API monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report csgo aimlock v2.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Initial Sample

Dropped Files

Unpacked PEs

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WindowsUpdate\AxInstUI.exe

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WindowsUpdate\AxInstUI.exe:Zone.Identifier

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Resources

Version Infos

Network Behavior

Snort IDS Alerts

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

Windows Analysis Report
csgo aimlock v2.exe